From nobody Thu Feb 1 00:57:35 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D826131606 for ; Thu, 1 Feb 2018 00:57:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8X_kVI9GyrEP for ; Thu, 1 Feb 2018 00:57:12 -0800 (PST) Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C0191317D5 for ; Thu, 1 Feb 2018 00:57:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2298; q=dns/txt; s=iport; t=1517475428; x=1518685028; h=subject:to:references:from:message-id:date:mime-version: in-reply-to; bh=/Lhf0RSxFKDE8O3VITMTA09q+/d1+CKp7BfV1jJHk40=; b=HFRSa6h92zI1AmRlAr00HWznn95m9BAQt9QlRb3mBLING12t9NSIgti5 ghNFCh8AznZHVSt5T7DArRC6+TPya9COfIffOfViAh5L5xOBac9ALOK3g Pw0wuFnGd+EVIqd8RdzSTD61GBTCVjYtgKWFs4b71njxqHrkSAIncfUHd w=; X-Files: signature.asc : 488 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BzAQDH1XJa/xbLJq1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYQodSiDYIsYjzuZXwcDGAuFGAKDKxQBAQEBAQEBAQJrKIUkAQE?= =?us-ascii?q?EAQEbBksbCw4KKgICJzAGAQwGAgEBijEQqS6CJ4p1AQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBEQoFhGOFfYMFgy8BAQKFBoJlBaQjhGKCMo5agh6GI4Nxh3+Xa4E8NiKBUDM?= =?us-ascii?q?aCBsVPYIqhHhAN4xRAQEB?= X-IronPort-AV: E=Sophos; i="5.46,443,1511827200"; d="asc'?scan'208"; a="1740352" Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 01 Feb 2018 08:57:06 +0000 Received: from [10.61.243.57] ([10.61.243.57]) by aer-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id w118v6DQ030516; Thu, 1 Feb 2018 08:57:06 GMT To: Jim Schaad , ace@ietf.org References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> From: Eliot Lear Message-ID: <07db665a-4f77-948e-c1d3-6cea9b699aee@cisco.com> Date: Thu, 1 Feb 2018 09:57:03 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: <010f01d39a08$255723c0$70056b40$@augustcellars.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="sHbi2NmSXjI0XHGhUrcjrKTf10AEvQOX9" Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 08:57:20 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --sHbi2NmSXjI0XHGhUrcjrKTf10AEvQOX9 Content-Type: multipart/mixed; boundary="3hp6aruEr6Cs9Ixj9I1W4v55LI7oFGefa"; protected-headers="v1" From: Eliot Lear To: Jim Schaad , ace@ietf.org Message-ID: <07db665a-4f77-948e-c1d3-6cea9b699aee@cisco.com> Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: <010f01d39a08$255723c0$70056b40$@augustcellars.com> --3hp6aruEr6Cs9Ixj9I1W4v55LI7oFGefa Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US Hi Jim, I agree that this document should be adopted.=C2=A0 I am willing to revie= w and comment. Eli On 30.01.18 21:23, Jim Schaad wrote: > This is the start of a two week call for input on the adoption of the W= G of > the document draft-vanderstok-ace-est. The document has been presented= at > the last two meetings and has some significant recent updates to respon= d to > feedback. There seemed to be support at the last F2F to adopt.=20 > > Please provide feedback to the list/chairs if you believe that this doc= ument > should be adopted as a WG document. The adoption call will end on Fe= b 13 > 2018. > > Jim > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --3hp6aruEr6Cs9Ixj9I1W4v55LI7oFGefa-- --sHbi2NmSXjI0XHGhUrcjrKTf10AEvQOX9 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAlpy1mAACgkQh7ZrRtnS ejMiEAf+OCMHhal9OIapFPnEcItU5J3ZKPohDvfh/JWWdztfKHqRwp5B/DhWP4vJ SGVm4DmLr/j16cPXpQYAH2akUTkdfU8dNTSe8MTgzkVmk5vvnwIF65AS82qsfJDp lemD9BirayyHhLoPcI9jPGdYdc0/rDvGy4zPcfr9SfCYMesm7Htgaaq7MkY3u2rp OW2bqH39JHxwIbYrDlf96WQ6C0iueAcsRdxfzQRBBKvkXREBZIYyUrLBa4d9VRz7 H8wF2zxDZVqm3gE9AKWDM0tZtrN+jUNPTlHewCzvp4ygPUJcVA5cy6mQ4C0z4CZX N7AJFrfUuMjto3u7NUMLt2BitiBsOg== =y4fo -----END PGP SIGNATURE----- --sHbi2NmSXjI0XHGhUrcjrKTf10AEvQOX9-- From nobody Thu Feb 1 02:41:36 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A0D21318FA for ; Thu, 1 Feb 2018 02:41:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dSJwGjeYhSPX for ; Thu, 1 Feb 2018 02:41:32 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0123.outbound.protection.outlook.com [104.47.2.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4580D1318C9 for ; Thu, 1 Feb 2018 02:41:05 -0800 (PST) Received: from HE1P121CA0008.EURP121.PROD.OUTLOOK.COM (129.75.191.146) by VI1P121MB0064.EURP121.PROD.OUTLOOK.COM (129.75.190.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.444.20; Thu, 1 Feb 2018 10:41:02 +0000 Received: from HE1EUR02FT027.eop-EUR02.prod.protection.outlook.com (2a01:111:f400:7e05::200) by HE1P121CA0008.outlook.office365.com (2603:10a6:23:2b::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.444.17 via Frontend Transport; Thu, 1 Feb 2018 10:41:02 +0000 Authentication-Results: spf=neutral (sender IP is 13.80.155.198) smtp.mailfrom=philips.com; augustcellars.com; dkim=none (message not signed) header.d=none;augustcellars.com; dmarc=fail action=none header.from=philips.com; Received-SPF: Neutral (protection.outlook.com: 13.80.155.198 is neither permitted nor denied by domain of philips.com) Received: from EDGE-VM-002.westeurope.cloudapp.azure.com (13.80.155.198) by HE1EUR02FT027.mail.protection.outlook.com (10.152.10.72) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.444.13 via Frontend Transport; Thu, 1 Feb 2018 10:41:02 +0000 Received: from EUR01-HE1-obe.outbound.protection.outlook.com (213.199.154.208) by autodiscover.lighting.com (192.168.0.5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1034.26; Thu, 1 Feb 2018 10:41:00 +0000 Received: from DB6P121MB0056.EURP121.PROD.OUTLOOK.COM (129.75.191.91) by DB6P121MB0038.EURP121.PROD.OUTLOOK.COM (129.75.191.85) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.444.18; Thu, 1 Feb 2018 10:40:59 +0000 Received: from DB6P121MB0056.EURP121.PROD.OUTLOOK.COM ([129.75.191.91]) by DB6P121MB0056.EURP121.PROD.OUTLOOK.COM ([129.75.191.91]) with mapi id 15.20.0444.016; Thu, 1 Feb 2018 10:40:59 +0000 From: Sandeep Kumar To: Jim Schaad , "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AdOaBxPvuhazfivPQR6hGrReGsdXHwBQaEFA Date: Thu, 1 Feb 2018 10:40:59 +0000 Message-ID: References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: <010f01d39a08$255723c0$70056b40$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: 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 Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=sandeep.kumar@lighting.com; x-originating-ip: [80.246.199.210] x-ms-publictraffictype: Email X-Microsoft-Exchange-Diagnostics-untrusted: 1; DB6P121MB0038; 7:9ckqQzMCglcOrOwjceJcbVopXgR3ccfDMwYP3gUX4pjQnYFwPIRYjBRT3kejK97FUX1paQrsP+XvT8VJHPPWMHEkrErDbiADVVAIYIx2IRJE61CuiNtijfCry8o1sm1uoozL38GCaaQS5Ib4vLEiKEtxUv3A2YXgIOevaefLWYIk5nfuTg1kRdJAgInv822NQB9mymPlnG71hRBu8VuasFw7Az3bT5FWkBtzYNeEHDHZ/mKn3WLl7oYjf0qqKyj8 x-ms-exchange-antispam-srfa-diagnostics: SSOS; X-MS-Office365-Filtering-Correlation-Id: 09878fe4-56fb-445b-7cc6-08d569604a0e X-Microsoft-Antispam-Untrusted: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:DB6P121MB0038; X-MS-TrafficTypeDiagnostic: DB6P121MB0038:|VI1P121MB0064: X-Microsoft-Antispam-PRVS: x-exchange-antispam-report-test: UriScan:;UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231101)(2400082)(944501161)(3002001)(10201501046)(6055026)(6041288)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(6072148)(201708071742011); SRVR:DB6P121MB0038; BCL:0; PCL:0; RULEID:; SRVR:DB6P121MB0038; BCL:0; PCL:0; RULEID:(6040501)(2401047)(8121501046)(5005006)(10201501046)(3231101)(2400082)(944501161)(3002001)(93006095)(93003095)(6055026)(6041288)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061750153)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:VI1P121MB0064; BCL:0; PCL:0; RULEID:; SRVR:VI1P121MB0064; x-forefront-prvs: 0570F1F193 X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10019020)(39860400002)(39380400002)(366004)(396003)(376002)(346002)(199004)(13464003)(189003)(85714005)(2906002)(478600001)(68736007)(5660300001)(81166006)(305945005)(7696005)(81156014)(106356001)(74316002)(966005)(86362001)(7736002)(8676002)(2900100001)(3846002)(6116002)(3660700001)(3280700002)(53546011)(6306002)(66066001)(55016002)(26005)(53936002)(316002)(6246003)(110136005)(97736004)(6436002)(6506007)(76176011)(102836004)(186003)(59450400001)(956003)(33656002)(2950100002)(229853002)(9686003)(8936002)(99286004)(2501003)(105586002)(25786009); DIR:OUT; SFP:1102; SCL:1; SRVR:DB6P121MB0038; H:DB6P121MB0056.EURP121.PROD.OUTLOOK.COM; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: lighting.com does not designate permitted sender hosts) X-Microsoft-Antispam-Message-Info-Original: ILHCu/68UhVGS5upRH/q9DdOpAXItXI20oVeZCOO8N3qxSvQokW74jamnLxDTtrW7PiRE8axpCxjQW9EC4HyYQ== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6P121MB0038 X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: HE1EUR02FT027.eop-EUR02.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:13.80.155.198; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(346002)(39860400002)(396003)(376002)(39380400002)(2980300002)(85714005)(13464003)(189003)(199004)(47776003)(7696005)(74316002)(2501003)(68736007)(305945005)(97736004)(25786009)(53546011)(956003)(76176011)(336011)(86362001)(2900100001)(59450400001)(6506007)(7736002)(26005)(66066001)(50466002)(105586002)(5660300001)(99286004)(22756006)(102836004)(6306002)(26826003)(966005)(498600001)(3846002)(33656002)(53936002)(97756001)(2950100002)(81156014)(6116002)(23726003)(2906002)(356003)(229853002)(9686003)(316002)(46406003)(8676002)(8936002)(8746002)(106466001)(55016002)(6246003)(81166006)(110136005); DIR:OUT; SFP:1102; SCL:1; SRVR:VI1P121MB0064; H:EDGE-VM-002.westeurope.cloudapp.azure.com; FPR:; SPF:Neutral; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; HE1EUR02FT027; 1:it4I37bShKh7yefLW+XRNzoO3iKdZGNxFucDqlN7u+n271ciGp2quDODNJ7Rn9DpvV9yoB2ATqauzF0efMJCVj2Vr+dVG2DjY6BBpeX7hKN3uqs1OI8Y5f2KoYudMihp X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(5600026)(4604075)(2017052603307)(7193020); SRVR:VI1P121MB0064; X-Microsoft-Exchange-Diagnostics: 1; VI1P121MB0064; 3:FJrmI4hSFb5SiSN1FoZdJCOcIVtb95K6qVN8ZKRM8EsgKZqEHbPRooxhVodC488zqJbkZ/T50fpzP2dX4eT5tqQrrBYN/DDJESO9HtMa/lFd9MZntSC7v24G72mAhEvH6V5RcnCNOKPgHf/l55nHOdP81wmmIWiM8n1qZi6E7zCD+XsHtF8R+rtooZ2UC4H6Dio3iEkus3RUR8fgkb3YQkFukmswI+TjOJ6+J9jLrRUbYpgPFlPzwhzt4BaqcWwNqyfRWnfolFQOnUbJA7jEqbO87JnX1qsPSNFDy8jO5wUnn0oiQXOVvao+B6xY4CbyxV808wxjOUjjP9vOeE/OFioiwHdQZjxp61ezakIze2Q=; 25:Fe+x6T3HvbOfuA/N8pCmjOk6HFMdFSCYOp6D8amCLgWlas8XTquv4DXHeuoiOi4B7vQ9XAGqkRi07xwIJ2Zxdo4PjgAB3eti5mpmWy7ZOSLOIzFj0f3X+74aV0fEMZGLOKmAPEDOEfJcmZwlfxdo84XMJPK4Eaq7fWpUOnYFH9a7g/xGEJNuJuyde0VyYQakpeP3ZX5ZZOI7lUIQkKcfQNzH8voRJzwftXBzsAeJJDENR6jupIROlSepWWpTssBEfeQEaLHhi2S3CtWGIkhUaeNpkZF7n7D9B0BjkqVArtVjMqXT1HKbJ93k+ST7KhBOZQsg4aaigBs237QtACdYoA== X-Microsoft-Exchange-Diagnostics: 1; VI1P121MB0064; 31:6rZx2CbuzvCcmhvK4OS5Q4kXcT+ZMSBjSYJB3ZYzTDEHPJW5glOhD5hBt34WzD9S0sNCW0i6Ktc8xNQHxhoCqSURXFvqry07GdP1ARiL3DVg2OXo0/owppMDai9jg8k+k+S20vkoUkV+iLojjigah8SaO0WJeBsW3S121SecoJN8ePpKEpFaZ4IUD/8ccULZVWsKpAy95m6xY8So0TYwjSskhLFOJqbDBeiOK9KR6Z4=; 20:Q0TbPXBJ4eQwDS9SnVfDJlcBOUCr7n6ed8NYmAqOg03LOqILep2RMFq5fkkMheYu6aOEXi94pruXN9298us6CQ/Wh4RI5Eox2U4eEJMb8P7DM9cMUl7KGETbR6zKbNy9V61lHb+VVeL6RRicO6FTmTAmMfvvbg+qaJTDXHq26t0avX0eWjfUcjBqzMe1maiRnWX/EeYCKkfqN0AKqPBOKvCvsRYh//DYnUXWOKIAnH/CYTssXcKnwXRSjugJYdDlbbgQ+ifk/BLOeXg+iUkhPIdZEU40BtAl332TpGmAEEkOLpUsNBbWNZ8eiLR1+/jDaHufB7PbfdqU4POKXaSQx4R4BHNmi3+hK9oywWURxe7bflatJRIK6VA0Rr4ktePZwkXks5BxrMgf9A29rkgLEyLFAxqS1z4Wz/yPISmdLXvSyWBC8GGvk5shI5t4bsMgQL74mfrK8CuMqWkvEpzB2zriIW/Fh+Q2dtsKdXsMdwms8J2dmNX85hQ8EgIhFG6jKkMk2FcWr35/Lf1PFYrMiQ== X-Microsoft-Exchange-Diagnostics: 1; VI1P121MB0064; 4:UnbnA/ZEbJYRTvZNI/gZ4h8TvA3D4+UbxPzHJtym9BLtmfcxyO5zwwj1K5OGfdhTcfcmefR2bIHW6bZz0NpNCBT2QvuGlpF1Vndp7RPXd+MjrC/nARorhhv9RTYEj2BcBDDLOyFTH7rqHWrPkIAJRD4Sr+kIiYOW6MM92Lc82aRMQ6ko5StHC7D43l9xMdd+etZNl0osTm9LZ5jmdHhSSA+xcFf0YZA3FoRywGXdVBzIdkCpjj6Kb6Bi+T9IUcCC0EpI/zFn3L1181JRCWf+iQ== X-Forefront-PRVS: 0570F1F193 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; VI1P121MB0064; 23:JrSkZzdI5eu15BkggPSNfjp0EsuLVTqmS/tT94SdC?= =?us-ascii?Q?w+qHIHr/NyFdWHyaHecVClIEgdr4uDGkCzXHosMlTfH2P5uh3PykqMF2tlKj?= =?us-ascii?Q?6cBaTznJqmIFpRXHQsT5Mtmr3AYFPrL6XgQnoNspqXqqc8XzaehhAYakB0dZ?= =?us-ascii?Q?lFcuaGUI2G+fkdVThaEBDCBZS3+EW/6nHlB3ly3viZoULiPrHHOwjkgMlrxz?= =?us-ascii?Q?dSoq72UbwnwLgPeflgNOrQ0tMqWgWdB9s6Hcl5qEdW+MS/qFkR1czZnDE+mW?= =?us-ascii?Q?SmDRMhof8FsgYlbItOKt6QziUpKoyf8cKi3BcglwbBCFbt6rTwKDxi99H9OH?= =?us-ascii?Q?eiriqD9t05xYjJFL07pUGFOMdz2lXZSPLmhrNuk+5JhMFRqxZEOMtRH9DwfU?= =?us-ascii?Q?R2PjkfCfHE0iUZUHPocIlmZ2F8ItysupKGWbwI1WA99xQsYnURVtiWgjZn6J?= =?us-ascii?Q?BZ9FiUT89vBLZflFS+BNzosQRSvLOqdkqmyo9cyC4QJnvXf1MYuy/889AKmQ?= =?us-ascii?Q?zVWHol/WgKfgI2/G5+78P/CfxLfRwKg5X+qBLiA0VRAv1IPDK8lvDjjB3kQO?= =?us-ascii?Q?WVOzYnXkF+xG1OqYlzHnuts9x9khiN9VH3QwxsmVNdJRgW8Ks1GIeJRMiLCc?= =?us-ascii?Q?gvl/xU3XxTWFHB11L/pQQ3viJ7jtSN+r+zGr7+drnDuLbB8u7KK/KzgxUqtq?= =?us-ascii?Q?Bt6lgXIyJIypHZgfatsX5Jt0vE2e8NFC4Q90/kUuKqRg4nML6S8Fsjt+1OMI?= =?us-ascii?Q?ZZ+RM3g0ATdg54+yw7UsAI/e71z2kcX80iVPNhgi+nP/Abmqu/CWiMGNZI87?= =?us-ascii?Q?jkkNHCtrvnlbIqMZAi1K3T+UhYLhqzJyzrvCBYMdYjcPr2EnBsIJZaN2K510?= =?us-ascii?Q?BuCc3VXU5HUTQ6qgFCM/+vGzksyaPFInPkioKworw0ckPymnsQxwVBBNjTav?= =?us-ascii?Q?VQZgRZdPu2AtfQzGBw+LXvJijkq7asX37+oYrJXOHlzK6UEaezAwLTMWMyFS?= =?us-ascii?Q?N+/HhDBAiFMunlvv/mtMBkabGdMDGpz0Pj75z+xbmNKMNEpWL8c8vqJzSMcM?= =?us-ascii?Q?vP48vRzP3VjReiZamBiqv/+S3SeW/sLbapliuTVHnj4B4YTKWmlvWxy0Kttp?= =?us-ascii?Q?CVQ3BXfu5dK+RIF1iznECAE9ARIr61jO1cqg+QBmce3sIycYogGU/x0n7Mw8?= =?us-ascii?Q?LiB5gk5qsJplKvNKx2Tey0Plcvaoveeruet6dVSVy3O5wyUPTlWlBRY7yRpz?= =?us-ascii?Q?sOnbCUz6x/P5j+bHmOC6dZTg98WrpAYtGaji8Q1LnJAnnqZcfshZDgq1HefQ?= =?us-ascii?Q?0V5j+bbwbFQonUSZjy5fxGA+eRD6ndNdU3W86S32ciC1R3IA9DrNTG+OHWIp?= =?us-ascii?Q?+POJCMU3cWTMWpe3r6rsFffxEU=3D?= X-Microsoft-Antispam-Message-Info: ayGyK7/3DqXNUpmILLDZUSkJujKZb/oU4cqzdLoJsD0JU9bM5z6XEEiZ1oyDgGu7QSDU6dpEO3DYjFWnaIwT3Q== X-Microsoft-Exchange-Diagnostics: 1; VI1P121MB0064; 6:9Jfq/hZIw7wgFZI7MPR9GQPY4TXESg9QCaYOP5Sl6cOAh1SZEhoq4RwBzUPaQkBvs8vxcVo0VGlxeODXJ1sBJJ9uEkBifbXM8ovK2tQe7OqeoYrs4jEMKkRl+vTb1k30T+eQO6M4MwywG4fyeuGlAU3rj8P8S+DVTbZL3IeTMqNt/r0Wn369Gnsfw0MNMQQAF6iVyUnTGONqyiUIQLZWXY7NAmehx0RWqXH9hVxJO9CwYmeRfnvKUevcJa6Ul1iQAKoezXNQGT4h4F1LOqUWhIIBMutw/ZNdDBlCao4aHSBP+yzG3lZUmyNnGGkIxisbxJS4N2iGNtZk2pc87+gvS97H03mOfXuvqsSLRoLzO6gdWMktJzUP8Ct/9TxrpJarKrhqSVuKfPwvQVsiSVcu8g==; 5:+XekLbDbG5/TlL119291dYvAHM6ZE2zewX04ImqIQZIUuP+U8SMVEYZJkcbNIK3R1zKcNwoOKe8o5Xaf+z3uG+maxD8B/xhTHxEBmqoy/gLaHzxLxmMJeBx7fjnXE6NR2qOKzCVbdTjzFgXUelYro4CyAEFkFkyzsjDvx/DM/PU=; 24:Xaf4M+L1chY3IzQ8t9Nt1brw0iWVBljX0I5mSKxj09BHPIuL48nUhHr0YXqs3KTL69q7vinqyZoK3kW81RMc/cyeC7ArgR+aUMMneSlsAVI= X-Microsoft-Exchange-Diagnostics: 1; VI1P121MB0064; 7:wpmiY2m5TFTaaOMUPF1U8zFSF8LNJQpGiDcE8sIdJDWY3ehdaph9suHqHdETcZj5YCLkxaVY5Td5qtUphMwaimQee+pShZv1Kn7bvLgSOGZaoMDJ7chmh9RLmqj2WtEIN8gQYSIndNPRU3VYEQzOOh2MeyjBr2ioOtyfeT//9rR7dH1nCM6XyPE5mGVzuZbxxGr0BpzILTarzSDYD3JxdruMZWT2ZG1nfynuILW65cnVvazszcuyG+7rw4ezbul1 X-OriginatorOrg: lightingaad.onmicrosoft.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Feb 2018 10:41:02.1470 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 09878fe4-56fb-445b-7cc6-08d569604a0e X-MS-Exchange-CrossTenant-Id: 75b2f54b-feff-400d-8e0b-67102edb9a23 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=75b2f54b-feff-400d-8e0b-67102edb9a23; Ip=[13.80.155.198]; Helo=[EDGE-VM-002.westeurope.cloudapp.azure.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1P121MB0064 Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 10:41:36 -0000 As co-author, I support adoption of the draft as WG document. There is need= in industry and multiple standardization bodies for this draft. Regards Sandeep -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Jim Schaad Sent: Tuesday, January 30, 2018 9:23 PM To: ace@ietf.org Subject: [Ace] Working group adoption of draft-vanderstok-ace-est This is the start of a two week call for input on the adoption of the WG of= the document draft-vanderstok-ace-est. The document has been presented at= the last two meetings and has some significant recent updates to respond t= o feedback. There seemed to be support at the last F2F to adopt. Please provide feedback to the list/chairs if you believe that this documen= t should be adopted as a WG document. The adoption call will end on Feb 13 2018. Jim _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace ________________________________ The information contained in this email may be confidential and/or legally = protected under applicable law. The message is intended solely for the addr= essee(s). If you are not the intended recipient, you are hereby notified th= at any use, forwarding, dissemination, or reproduction of this email is str= ictly prohibited and may be unlawful. If you are not the intended recipient= , please contact the sender by return e-mail and destroy all copies of the = original email. From nobody Thu Feb 1 02:56:24 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D50BA12D87A for ; Thu, 1 Feb 2018 02:56:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Y-Lekt8DGvD for ; Thu, 1 Feb 2018 02:56:20 -0800 (PST) Received: from se-out2.mx-wecloud.net (se-out2.mx-wecloud.net [89.221.255.177]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CF1D12D7E3 for ; Thu, 1 Feb 2018 02:56:19 -0800 (PST) Received: from sp-mail-3.sp.se (unknown [194.218.146.197]) by se-out2.mx-wecloud.net (Postfix) with ESMTPS id 35AD022444B; Thu, 1 Feb 2018 10:56:15 +0000 (UTC) Received: from sp-mail-1.sp.se (10.100.0.161) by sp-mail-3.sp.se (10.100.0.163) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Thu, 1 Feb 2018 11:56:17 +0100 Received: from sp-mail-1.sp.se ([fe80::7d78:8db6:13df:8cc7]) by sp-mail-1.sp.se ([fe80::7d78:8db6:13df:8cc7%21]) with mapi id 15.01.1261.035; Thu, 1 Feb 2018 11:56:16 +0100 From: Shahid Raza To: Sandeep Kumar CC: Jim Schaad , "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AdOaBxPvuhazfivPQR6hGrReGsdXHwBQaEFA///0YYA= Date: Thu, 1 Feb 2018 10:56:16 +0000 Message-ID: References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.5.20) x-originating-ip: [10.100.0.67] Content-Type: multipart/alternative; boundary="_000_B36EFBB4DC5F456A9BC04D75617BC7B5rise_" MIME-Version: 1.0 X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=K9NSJ2eI c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=o2oKJJ8QSxgA:10 a=xqWC_Br6kY4A:10 a=Op4juWPpsa0A:10 a=QXsZypbGAAAA:8 a=un-7GtWDAAAA:8 a=xPT6tdSuAAAA:8 a=5lX_Y-y2AAAA:8 a=48vgC7mUAAAA:8 a=dfCWtFxhfM4nHc7gB_EA:9 a=qKVxS2s-q9OFtgxp:21 a=xXUhe0JKullVAvQy:21 a=QEXdDO2ut3YA:10 a=-FEs8UIgK8oA:10 a=NWVoK91CQyQA:10 a=ailfS7aP1GXJUcfFz8IA:9 a=ek5Eag4T3nidsEL1:21 a=p2ptB4kke8dY-1dC:21 a=-JjtE-J8AEKR54-7:21 a=_W_S_7VecoQA:10 a=sEF6YV8CDYtBr2UJGqQM:22 a=vb0qMIH9UgeR2wMWWMvx:22 a=80PJfYVSYmV_jLpvUEnt:22 a=w1C3t2QeGrPiZgrLijVG:22 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 10:56:23 -0000 --_000_B36EFBB4DC5F456A9BC04D75617BC7B5rise_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QXMgYSBjby1hdXRob3IsIEkgYWxzbyBzdHJvbmdseSBzdXBwb3J0IHRoZSBhZG9wdGlvbiBvZiB0 aGlzIGRyYWZ0IGFzIGEgV0cgZG9jdW1lbnQuIFJlY2FsbCB0aGF0ICwgd2UgYWxyZWFkeSBoYXZl IGFuIGltcGxlbWVudGF0aW9uIG9mIHRoaXMgZHJhZnQsIGJvdGggaW4gY29uc3RyYWluZWQgZGV2 aWNlcyAoU0lDUyBDb250aWtpKSBhbmQgaW4gdGhlIE5leHVzIENBIHNvZnR3YXJlLiBSZWNlbnRs eSwgd2UgaGF2ZSBhbHNvIGltcGxlbWVudGVkIHRoZSAiaW50ZWdyYXRpb24gb2YgdGhpcyBkcmFm dCBpbnRvIEx3TTJNIiwgd2hpY2ggaXMgcGFydCBvZiB0aGUgbGF0ZXN0IEx3TTJNIHJlbGVhc2Uu DQoNCkJlc3QsDQpTaGFoaWQNCg0KDQpTaGFoaWQgUmF6YSwgUGhEDQpEaXJlY3RvciBTZWN1cml0 eSBMYWIgYW5kIEV4cGVydCBSZXNlYXJjaGVyDQpSSVNFIC0gUmVzZWFyY2ggSW5zdGl0dXRlcyBv ZiBTd2VkZW4NCkRpdmlzaW9uIElDVCAtIFJJU0UgU0lDUw0KDQpbUklTRSBsb2dvXSAgICAgSXNh ZmpvcmRzZ2F0YW4gMjIgLyBLaXN0YWfDpW5nZW4gMTYNCjE2NDQwLCBLaXN0YSBTdG9ja2hvbG0N Ck1vYmlsZTogKzQ2IDc2ODgzMTc5Nw0Kc2hhaGlkLnJhemFAcmkuc2UgPG1haWx0bzpzaGFoaWRA c2ljcy5zZT4NCmh0dHA6Ly93d3cuc2hhaGlkcmF6YS5uZXQ8aHR0cDovL3d3dy5zaGFoaWRyYXph LmluZm8+DQpodHRwOi8vd3d3LnNpY3Muc2UNCg0KVGhlIFJJU0UgaW5zdGl0dXRlcyBJbm52ZW50 aWEsIFNQIGFuZCBTd2VkaXNoIElDVCBoYXZlIG1lcmdlZCBpbiBvcmRlciB0byBiZWNvbWUgYSBz dHJvbmdlciByZXNlYXJjaCBhbmQgaW5ub3ZhdGlvbiBwYXJ0bmVyIGZvciBidXNpbmVzc2VzIGFu ZCBzb2NpZXR5Lg0KDQpPbiAxIEZlYiAyMDE4LCBhdCAxMTo0MCwgU2FuZGVlcCBLdW1hciA8c2Fu ZGVlcC5rdW1hckBwaGlsaXBzLmNvbTxtYWlsdG86c2FuZGVlcC5rdW1hckBwaGlsaXBzLmNvbT4+ IHdyb3RlOg0KDQpBcyBjby1hdXRob3IsIEkgc3VwcG9ydCBhZG9wdGlvbiBvZiB0aGUgZHJhZnQg YXMgV0cgZG9jdW1lbnQuIFRoZXJlIGlzIG5lZWQgaW4gaW5kdXN0cnkgYW5kIG11bHRpcGxlIHN0 YW5kYXJkaXphdGlvbiBib2RpZXMgZm9yIHRoaXMgZHJhZnQuDQoNClJlZ2FyZHMNClNhbmRlZXAN Cg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFjZSBbbWFpbHRvOmFjZS1ib3Vu Y2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSmltIFNjaGFhZA0KU2VudDogVHVlc2RheSwgSmFu dWFyeSAzMCwgMjAxOCA5OjIzIFBNDQpUbzogYWNlQGlldGYub3JnPG1haWx0bzphY2VAaWV0Zi5v cmc+DQpTdWJqZWN0OiBbQWNlXSBXb3JraW5nIGdyb3VwIGFkb3B0aW9uIG9mIGRyYWZ0LXZhbmRl cnN0b2stYWNlLWVzdA0KDQpUaGlzIGlzIHRoZSBzdGFydCBvZiBhIHR3byB3ZWVrIGNhbGwgZm9y IGlucHV0IG9uIHRoZSBhZG9wdGlvbiBvZiB0aGUgV0cgb2YgdGhlIGRvY3VtZW50IGRyYWZ0LXZh bmRlcnN0b2stYWNlLWVzdC4gIFRoZSBkb2N1bWVudCBoYXMgYmVlbiBwcmVzZW50ZWQgYXQgdGhl IGxhc3QgdHdvIG1lZXRpbmdzIGFuZCBoYXMgc29tZSBzaWduaWZpY2FudCByZWNlbnQgdXBkYXRl cyB0byByZXNwb25kIHRvIGZlZWRiYWNrLiAgVGhlcmUgc2VlbWVkIHRvIGJlIHN1cHBvcnQgYXQg dGhlIGxhc3QgRjJGIHRvIGFkb3B0Lg0KDQpQbGVhc2UgcHJvdmlkZSBmZWVkYmFjayB0byB0aGUg bGlzdC9jaGFpcnMgaWYgeW91IGJlbGlldmUgdGhhdCB0aGlzIGRvY3VtZW50DQpzaG91bGQgYmUg YWRvcHRlZCBhcyBhIFdHIGRvY3VtZW50LiAgICBUaGUgYWRvcHRpb24gY2FsbCB3aWxsIGVuZCBv biBGZWIgMTMNCjIwMTguDQoNCkppbQ0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQpBY2UgbWFpbGluZyBsaXN0DQpBY2VAaWV0Zi5vcmc8bWFpbHRv OkFjZUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNl DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpUaGUgaW5mb3JtYXRpb24gY29u dGFpbmVkIGluIHRoaXMgZW1haWwgbWF5IGJlIGNvbmZpZGVudGlhbCBhbmQvb3IgbGVnYWxseSBw cm90ZWN0ZWQgdW5kZXIgYXBwbGljYWJsZSBsYXcuIFRoZSBtZXNzYWdlIGlzIGludGVuZGVkIHNv bGVseSBmb3IgdGhlIGFkZHJlc3NlZShzKS4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJl Y2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgdXNlLCBmb3J3YXJkaW5n LCBkaXNzZW1pbmF0aW9uLCBvciByZXByb2R1Y3Rpb24gb2YgdGhpcyBlbWFpbCBpcyBzdHJpY3Rs eSBwcm9oaWJpdGVkIGFuZCBtYXkgYmUgdW5sYXdmdWwuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRl bmRlZCByZWNpcGllbnQsIHBsZWFzZSBjb250YWN0IHRoZSBzZW5kZXIgYnkgcmV0dXJuIGUtbWFp bCBhbmQgZGVzdHJveSBhbGwgY29waWVzIG9mIHRoZSBvcmlnaW5hbCBlbWFpbC4NCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWlsaW5nIGxp c3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9h Y2UNCg0K --_000_B36EFBB4DC5F456A9BC04D75617BC7B5rise_ Content-Type: text/html; charset="utf-8" Content-ID: <05ADC0F499B75B438C5CB86BB4C1F0E9@sp.se> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkFzIGEgY28tYXV0aG9yLCBJIGFsc28gc3Ryb25n bHkgc3VwcG9ydCB0aGUgYWRvcHRpb24gb2YgdGhpcyBkcmFmdCBhcyBhIFdHIGRvY3VtZW50LiBS ZWNhbGwgdGhhdCAsIHdlJm5ic3A7YWxyZWFkeSZuYnNwO2hhdmUgYW4gaW1wbGVtZW50YXRpb24g b2YgdGhpcyBkcmFmdCwgYm90aCBpbiBjb25zdHJhaW5lZCBkZXZpY2VzIChTSUNTIENvbnRpa2kp IGFuZCBpbiB0aGUgTmV4dXMgQ0Egc29mdHdhcmUuIFJlY2VudGx5LCB3ZSBoYXZlIGFsc28gaW1w bGVtZW50ZWQgdGhlDQogJnF1b3Q7aW50ZWdyYXRpb24gb2YgdGhpcyBkcmFmdCBpbnRvIEx3TTJN JnF1b3Q7LCB3aGljaCBpcyBwYXJ0IG9mIHRoZSBsYXRlc3QgTHdNMk0gcmVsZWFzZS4mbmJzcDsN CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkJlc3Qs PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlNoYWhpZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImNvbG9y OiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg d29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQt bGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImNv bG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJr aXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9 ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13 ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgc3R5 bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7 IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYg c3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3Bh Y2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxk aXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTog c3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4N CjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9k ZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3At bW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFz cz0iIj4NCjxwIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0i Ij48Zm9udCBjb2xvcj0iIzQxNDE0MSIgY2xhc3M9IiI+U2hhaGlkIFJhemEsIFBoRDxiciBjbGFz cz0iIj4NCjwvZm9udD48L3NwYW4+PGkgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2Io NjUsIDY1LCA2NSk7IGZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPkRpcmVjdG9yIFNlY3VyaXR5 IExhYiBhbmQmbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoNjUsIDY1LCA2NSk7 IGZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPkV4cGVydCBSZXNlYXJjaGVyPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj48Zm9udCBjb2xvcj0iIzQxNDE0MSIg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9mb250Pjwvc3Bhbj48L2k+PGIgY2xhc3M9IiI+PHNw YW4gc3R5bGU9ImNvbG9yOiByZ2IoNjUsIDY1LCA2NSk7IGZvbnQtc2l6ZTogMTFweDsiIGNsYXNz PSIiPlJJU0UgLSBSZXNlYXJjaCBJbnN0aXR1dGVzIG9mIFN3ZWRlbjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+PGZvbnQgY29sb3I9IiM0MTQxNDEiIGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZm9udD48L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJjb2xvcjog cmdiKDY1LCA2NSwgNjUpOyBmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj5EaXZpc2lvbiBJQ1Qg LSBSSVNFIFNJQ1M8L3NwYW4+PC9wPg0KPHRhYmxlIGNsYXNzPSIiPg0KPHRib2R5IGNsYXNzPSIi Pg0KPHRyIGNsYXNzPSIiPg0KPHRkIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEx cHg7IiBjbGFzcz0iIj48Zm9udCBjb2xvcj0iIzQxNDE0MSIgY2xhc3M9IiI+PGltZyBzcmM9Imh0 dHA6Ly9zaGFoaWRyYXphLmluZm8vUklTRS1sb2dvLnBuZyIgYWx0PSJSSVNFIGxvZ28iIHdpZHRo PSI1NSIgaGVpZ2h0PSI3MSIgY2xhc3M9IiI+PC9mb250Pjwvc3Bhbj48L3RkPg0KPHRkIGNsYXNz PSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj48Zm9udCBjb2xvcj0i IzQxNDE0MSIgY2xhc3M9IiI+SXNhZmpvcmRzZ2F0YW4gMjIgLyBLaXN0YWfDpW5nZW4gMTYmbmJz cDs8YnIgY2xhc3M9IiI+DQoxNjQ0MCwgS2lzdGEgU3RvY2tob2xtJm5ic3A7PGJyIGNsYXNzPSIi Pg0KTW9iaWxlOiAmIzQzOzQ2IDc2ODgzMTc5NyZuYnNwOzxiciBjbGFzcz0iIj4NCjxhIGhyZWY9 Im1haWx0bzpzaGFoaWRAc2ljcy5zZSAiIGNsYXNzPSIiPnNoYWhpZC5yYXphQHJpLnNlJm5ic3A7 PC9hPjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHA6Ly93d3cuc2hhaGlkcmF6YS5pbmZvIiBj bGFzcz0iIj5odHRwOi8vd3d3LnNoYWhpZHJhemEubmV0PC9hPiZuYnNwOzxiciBjbGFzcz0iIj4N CjxhIGhyZWY9Imh0dHA6Ly93d3cuc2ljcy5zZSIgY2xhc3M9IiI+aHR0cDovL3d3dy5zaWNzLnNl PC9hPiZuYnNwOzwvZm9udD48L3NwYW4+PC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90YWJsZT4N CjxwIGNsYXNzPSIiPjxlbSBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+PGZvbnQg Y29sb3I9IiM0MTQxNDEiIGNsYXNzPSIiPlRoZSBSSVNFIGluc3RpdHV0ZXMgSW5udmVudGlhLCBT UCBhbmQgU3dlZGlzaCBJQ1QgaGF2ZSBtZXJnZWQgaW4gb3JkZXIgdG8gYmVjb21lIGEgc3Ryb25n ZXIgcmVzZWFyY2ggYW5kIGlubm92YXRpb24gcGFydG5lciBmb3IgYnVzaW5lc3NlcyBhbmQgc29j aWV0eS48L2ZvbnQ+PC9lbT48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4N CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiAxIEZl YiAyMDE4LCBhdCAxMTo0MCwgU2FuZGVlcCBLdW1hciAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNhbmRl ZXAua3VtYXJAcGhpbGlwcy5jb20iIGNsYXNzPSIiPnNhbmRlZXAua3VtYXJAcGhpbGlwcy5jb208 L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGlu ZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5BcyBjby1hdXRob3IsIEkgc3VwcG9y dCBhZG9wdGlvbiBvZiB0aGUgZHJhZnQgYXMgV0cgZG9jdW1lbnQuIFRoZXJlIGlzIG5lZWQgaW4g aW5kdXN0cnkgYW5kIG11bHRpcGxlIHN0YW5kYXJkaXphdGlvbiBib2RpZXMgZm9yIHRoaXMgZHJh ZnQuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KUmVnYXJkczxiciBjbGFzcz0iIj4NClNh bmRlZXA8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQotLS0tLU9yaWdpbmFsIE1lc3NhZ2Ut LS0tLTxiciBjbGFzcz0iIj4NCkZyb206IEFjZSBbPGEgaHJlZj0ibWFpbHRvOmFjZS1ib3VuY2Vz QGlldGYub3JnIiBjbGFzcz0iIj5tYWlsdG86YWNlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBC ZWhhbGYgT2YgSmltIFNjaGFhZDxiciBjbGFzcz0iIj4NClNlbnQ6IFR1ZXNkYXksIEphbnVhcnkg MzAsIDIwMTggOToyMyBQTTxiciBjbGFzcz0iIj4NClRvOiA8YSBocmVmPSJtYWlsdG86YWNlQGll dGYub3JnIiBjbGFzcz0iIj5hY2VAaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KU3ViamVjdDog W0FjZV0gV29ya2luZyBncm91cCBhZG9wdGlvbiBvZiBkcmFmdC12YW5kZXJzdG9rLWFjZS1lc3Q8 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGlzIGlzIHRoZSBzdGFydCBvZiBhIHR3byB3 ZWVrIGNhbGwgZm9yIGlucHV0IG9uIHRoZSBhZG9wdGlvbiBvZiB0aGUgV0cgb2YgdGhlIGRvY3Vt ZW50IGRyYWZ0LXZhbmRlcnN0b2stYWNlLWVzdC4gJm5ic3A7VGhlIGRvY3VtZW50IGhhcyBiZWVu IHByZXNlbnRlZCBhdCB0aGUgbGFzdCB0d28gbWVldGluZ3MgYW5kIGhhcyBzb21lIHNpZ25pZmlj YW50IHJlY2VudCB1cGRhdGVzIHRvIHJlc3BvbmQgdG8gZmVlZGJhY2suICZuYnNwO1RoZXJlIHNl ZW1lZCB0byBiZQ0KIHN1cHBvcnQgYXQgdGhlIGxhc3QgRjJGIHRvIGFkb3B0LjxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NClBsZWFzZSBwcm92aWRlIGZlZWRiYWNrIHRvIHRoZSBsaXN0L2No YWlycyBpZiB5b3UgYmVsaWV2ZSB0aGF0IHRoaXMgZG9jdW1lbnQ8YnIgY2xhc3M9IiI+DQpzaG91 bGQgYmUgYWRvcHRlZCBhcyBhIFdHIGRvY3VtZW50LiAmbmJzcDsmbmJzcDsmbmJzcDtUaGUgYWRv cHRpb24gY2FsbCB3aWxsIGVuZCBvbiBGZWIgMTM8YnIgY2xhc3M9IiI+DQoyMDE4LjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCkppbTxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fPGJyIGNsYXNzPSIiPg0KQWNlIG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9 Im1haWx0bzpBY2VAaWV0Zi5vcmciIGNsYXNzPSIiPkFjZUBpZXRmLm9yZzwvYT48YnIgY2xhc3M9 IiI+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZTxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyIGNs YXNzPSIiPg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIGVtYWlsIG1heSBiZSBj b25maWRlbnRpYWwgYW5kL29yIGxlZ2FsbHkgcHJvdGVjdGVkIHVuZGVyIGFwcGxpY2FibGUgbGF3 LiBUaGUgbWVzc2FnZSBpcyBpbnRlbmRlZCBzb2xlbHkgZm9yIHRoZSBhZGRyZXNzZWUocykuIElm IHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlm aWVkIHRoYXQgYW55IHVzZSwgZm9yd2FyZGluZywgZGlzc2VtaW5hdGlvbiwNCiBvciByZXByb2R1 Y3Rpb24gb2YgdGhpcyBlbWFpbCBpcyBzdHJpY3RseSBwcm9oaWJpdGVkIGFuZCBtYXkgYmUgdW5s YXdmdWwuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBjb250 YWN0IHRoZSBzZW5kZXIgYnkgcmV0dXJuIGUtbWFpbCBhbmQgZGVzdHJveSBhbGwgY29waWVzIG9m IHRoZSBvcmlnaW5hbCBlbWFpbC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4NCkFj ZSBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9IiI+DQpBY2VAaWV0Zi5vcmc8YnIgY2xhc3M9IiI+DQpo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZTxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_B36EFBB4DC5F456A9BC04D75617BC7B5rise_-- From nobody Thu Feb 1 03:52:05 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBF9512DA06 for ; Thu, 1 Feb 2018 03:52:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.02 X-Spam-Level: X-Spam-Status: No, score=-2.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=osram.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f8rxZALjmivx for ; Thu, 1 Feb 2018 03:52:01 -0800 (PST) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50061.outbound.protection.outlook.com [40.107.5.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8441012D881 for ; Thu, 1 Feb 2018 03:52:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Osram.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=HGEorGwtP8Zrn4kEF6SQqmudz9MlxfCSagZmDL+DZys=; b=Hm2kwdayu2XbaN0pVxhIbJPK48tfn4Wk2CqMoVJpqQXdRMltWiAuCVmr9nTiD8ZUcbr/t9uqobc4qBBK10wGCrv+xIbAOc75nNIIGcEYyoyMTSEhGsHBLMrVdDi/wHJ3w6Kkik/mvmDB3sXFnt7Kega8MhpDjhOlp3NAQTYyU8s= Received: from DB6PR07MB3415.eurprd07.prod.outlook.com (10.175.234.18) by DB6PR07MB3272.eurprd07.prod.outlook.com (10.175.233.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.464.6; Thu, 1 Feb 2018 11:51:57 +0000 Received: from DB6PR07MB3415.eurprd07.prod.outlook.com ([fe80::6598:cd6c:bde5:5c6d]) by DB6PR07MB3415.eurprd07.prod.outlook.com ([fe80::6598:cd6c:bde5:5c6d%13]) with mapi id 15.20.0464.012; Thu, 1 Feb 2018 11:51:57 +0000 From: "Beck, Stefan" To: "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AdOaBxPvuhazfivPQR6hGrReGsdXHwBQaEFA///0YYD//+S7MA== Date: Thu, 1 Feb 2018 11:51:57 +0000 Message-ID: References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=S.Beck@osram.com; x-originating-ip: [32.66.115.42] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DB6PR07MB3272; 7:VBt70vw6BhIQ/eYksCPOa56QMNL+9wVswWdeHX9z2C2H6BdseEpNCGVcKAVmJkYRPJ37gGpXJCLjWqdr4MJMk7o/1IGbiPCpo372OGJGPbfv5wTjb6tNxuINxho+ABEkuum4oQN62jAp6Uj7SBhNM/NQiIKxzLvjMHcjQqaSOCtOOv9GV/wRtPAW+r+skfF/EStUHFuTeowBL6/ekt8zavWH9bqx5Ka9dHF61yzk7zLhkcKvl1CIsR+OA5aR5lNO x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: 28fedd12-0da0-4d0b-c6ec-08d5696a324e x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(49563074)(7193020); SRVR:DB6PR07MB3272; x-ms-traffictypediagnostic: DB6PR07MB3272: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(260087099026482); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415395)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231101)(2400082)(944501161)(3002001)(10201501046)(6041288)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:DB6PR07MB3272; BCL:0; PCL:0; RULEID:; SRVR:DB6PR07MB3272; x-forefront-prvs: 0570F1F193 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(366004)(39860400002)(396003)(346002)(39380400002)(199004)(189003)(13464003)(85714005)(33656002)(5660300001)(81156014)(1730700003)(8676002)(55016002)(7736002)(66066001)(76176011)(81166006)(102836004)(7696005)(8936002)(106356001)(6506007)(53546011)(26005)(99936001)(2900100001)(59450400001)(2351001)(14454004)(99286004)(53386004)(6246003)(5640700003)(2906002)(97736004)(316002)(186003)(25786009)(5250100002)(229853002)(966005)(478600001)(72206003)(6306002)(305945005)(2501003)(6116002)(68736007)(3846002)(9686003)(74316002)(3280700002)(105586002)(53936002)(3660700001)(6436002)(86362001)(6916009)(2950100002); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR07MB3272; H:DB6PR07MB3415.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: osram.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: vHz22FYZMhH9vrpQCPj0rV/qkA/yd7oJ7v8wCR7FV6Q0CIQE0lstwyzr41evhYP92NCawevPbKzpktgoqb9ETw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_005E_01D39B5B.7096DA20" MIME-Version: 1.0 X-OriginatorOrg: Osram.com X-MS-Exchange-CrossTenant-Network-Message-Id: 28fedd12-0da0-4d0b-c6ec-08d5696a324e X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Feb 2018 11:51:57.3172 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: ec1ca250-c234-4d56-a76b-7dfb9eee0c46 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR07MB3272 Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 11:52:04 -0000 ------=_NextPart_000_005E_01D39B5B.7096DA20 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable +1 I support adoption, as it perfectly complements the existing EST work. So far, just one general comment: The draft could emphasize (e.g. in the intro) that coexistence of EST = and EST-coaps is supported in target deployments. And you even may have = a combination of constrained devices in a non-constrained network and = vice versa. If that matches the authors=E2=80=99 view, then some general statements = need to be adapted. Two examples see below Stevie 1. Abstract: "This allows low-resource constrained devices to re-use existing EST = functionality. Example low-resource use cases for EST are: secure = bootstrapping and certificate enrollment." Well, to me those are the two main use cases for non-constrained devices = using EST, too. So I would write: "This allows low-resource constrained devices to re-use existing EST = functionality to implement use cases such as secure bootstrapping and = certificate enrollment." 2. Chapter 3.5 (Deployment limits): 2a. " Although EST-coaps paves the way for the utilization of EST for = constrained devices on constrained networks..." --> s?on?and/or? 2b. " EST-coaps is intended to ensure that EST works for networks of = constrained devices that choose to limit their communications stack to = UDP/CoAP." --> Remove "networks of" --------------------- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Shahid Raza Sent: Thursday, February 01, 2018 11:56 AM To: Sandeep Kumar Cc: Jim Schaad ; ace@ietf.org Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est As a co-author, I also strongly support the adoption of this draft as a = WG document. Recall that , we already have an implementation of this = draft, both in constrained devices (SICS Contiki) and in the Nexus CA = software. Recently, we have also implemented the "integration of this = draft into LwM2M", which is part of the latest LwM2M release. =20 Best, Shahid Shahid Raza, PhD Director Security Lab and Expert Researcher RISE - Research Institutes of Sweden Division ICT - RISE SICS Isafjordsgatan 22 / Kistag=C3=A5ngen 16=20 16440, Kista Stockholm=20 Mobile: +46 768831797=20 shahid.raza@ri.se=20 http://www.shahidraza.net=20 http://www.sics.se=20 The RISE institutes Innventia, SP and Swedish ICT have merged in order = to become a stronger research and innovation partner for businesses and = society. On 1 Feb 2018, at 11:40, Sandeep Kumar = wrote: As co-author, I support adoption of the draft as WG document. There is = need in industry and multiple standardization bodies for this draft. Regards Sandeep -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Jim Schaad Sent: Tuesday, January 30, 2018 9:23 PM To: ace@ietf.org Subject: [Ace] Working group adoption of draft-vanderstok-ace-est This is the start of a two week call for input on the adoption of the WG = of the document draft-vanderstok-ace-est. The document has been = presented at the last two meetings and has some significant recent = updates to respond to feedback. There seemed to be support at the last = F2F to adopt. Please provide feedback to the list/chairs if you believe that this = document should be adopted as a WG document. The adoption call will end on Feb = 13 2018. Jim _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace ________________________________ The information contained in this email may be confidential and/or = legally protected under applicable law. The message is intended solely = for the addressee(s). If you are not the intended recipient, you are = hereby notified that any use, forwarding, dissemination, or reproduction = of this email is strictly prohibited and may be unlawful. If you are not = the intended recipient, please contact the sender by return e-mail and = destroy all copies of the original email. _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace ------=_NextPart_000_005E_01D39B5B.7096DA20 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIITQDCCBZcw ggN/oAMCAQICEH2N5rAAeSCGTQvIxSt6cDswDQYJKoZIhvcNAQELBQAwZDETMBEGCgmSJomT8ixk ARkWA2NvbTEbMBkGCgmSJomT8ixkARkWC29zcmFtLWxpZ2h0MRMwEQYKCZImiZPyLGQBGRYDaW50 MRswGQYDVQQDDBJPU1JBTSBSb290IENBIDIwMTUwHhcNMTUwOTE3MDk0NzMyWhcNNDAwOTE3MDk1 NzI2WjBkMRMwEQYKCZImiZPyLGQBGRYDY29tMRswGQYKCZImiZPyLGQBGRYLb3NyYW0tbGlnaHQx EzARBgoJkiaJk/IsZAEZFgNpbnQxGzAZBgNVBAMMEk9TUkFNIFJvb3QgQ0EgMjAxNTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMPOLdsM1I8Fll2DJ5A01Y53Cbq88OH6/ZocCMhm+9Ro Ce4RHnIB+WKi8+4fTUYU3DjwgXiI3tH6YG9j9o3ahkepcaRx1arkNJCfGs8UKbHQnxVM9n5Sv3lp Qm/OyE+qwl8sA77nVvrmAiYDIXdlJajITmqMBiSS5TfS7YO7knMLOv5bzd4ihUizsNGgVIvPyowz NpsA/yYzIJJhSYCdSc9Aji5MDF4fscYaffpdaM3VoZ4gdZiVgcYrnUVR4oFsNkoja6MV3Vk9o5py 8I6ff5Dhc6ZStrjYG1Q9iIIawvvi4e4A6ISRmxw3QBUZtlvBiC8Z2g/XVJnwz91RKIT1lQPbb2Cw 88E1nRVfF1txiVbQXw+TjNnyIVcxZS/p34yHXS9/gmPVXBUx3SYqAMI9vk/mqvkDGPAkIrpILTQT XcxkJVwQukR7mSpRw4bx0bg4mxH1x6tr4HqZe5hFtQTs+VckNiXLF5xFbOjFuck5UBRbW8J3ENCA ohtR/OdOAKFrS7Y5uPLA5ENMt+Ee2LeaEmwUIIioYZuToXngaimCg6m9aIGv9ytMUgnF3+9CRsKr drVw6Er2eKnGOXyBaMOkR14loeFISsA9UL85Ib80MHLZd8t0rkIpThZSKMMS/eKpGyZMv9HLYrVZ 1TssyD8pvu4yzrHGtrtehXu2JfRm+gzdAgMBAAGjRTBDMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMB Af8ECDAGAQH/AgECMB0GA1UdDgQWBBRBffSxSuh0TnMOw0EPaZQm3UsWYTANBgkqhkiG9w0BAQsF AAOCAgEAoHwKO+Sh72eofY0BSZ+h+ajR9K7PJnwrLV557s4Id1EIvfMU8geELns5FsKOcAg9ipnv PPt0EVFFGulfyKRa0OPLvz7ofpEF0Bs8LVdAbqtImf9YGAmFtf7zIEdKmtDhGdKNabwt0QbVKOEs IzbQCeKXdFQ6/s0c+aSO/I1wLOekihbY1PY0IzNzDBfIbzDdFgcQfVc+kSlV2sSKjrqpG9qGvvwL VCWSCGFC/nAkb4g4PXhmOEIfo04vaibNHYFyl4ltZiWph/mism4MM1bAvPtZM8fFc1J6Sgkir7vD XQOCpQrxFYAKTqOIhAGn0hY/AY7198X5Jeh/tCUjatDz7AHuhdBTPC+XeGMyzvj7fkVwTv3TazEo u6jpmn6b2QY+0GdVytR4R0KFFIjGvxmOH4gg7pfOwplpjzE3K11CHGsEXQwAZNPnhj/EXEqSdx3g dUX77plIcnE8TwXxoY+aa9p1JfAmKVLT3vZbT8YDm83RkN7vcyGW/NBDq2OyihORutQxuy9PpYaM Txnzp9M620XFwKJbU3D0vYvHOgYFKQy71hgn/AX3KnQ+MXgiRCy5phiSTOTc8SZzuijBV2X30hX+ NAd3M4dQq4/VnK/Zop0LYornrFK79re2RLDqm1NP/k9yAOCc0WR7lQOhFW3R0JgFSmRSMsR4PWGg afjpMSgwggZ1MIIEXaADAgECAhMYAADE1BvnBAMoNJsjAAAAAMTUMA0GCSqGSIb3DQEBCwUAMGcx EzARBgoJkiaJk/IsZAEZFgNjb20xGzAZBgoJkiaJk/IsZAEZFgtvc3JhbS1saWdodDETMBEGCgmS JomT8ixkARkWA2ludDEeMBwGA1UEAwwVT1NSQU0gSXNzdWluZyBDQSAyMDE1MB4XDTE2MTEwMzE1 NTYxMVoXDTIxMTEwMjE1NTYxMVowcjELMAkGA1UEBhMCREUxDjAMBgNVBAoMBU9TUkFNMRwwGgYD VQQLDBNPU1JBTSBHbWJILCBHZXJtYW55MRQwEgYDVQQDDAtTdGVmYW4gQmVjazEfMB0GCSqGSIb3 DQEJARYQUy5CZWNrQG9zcmFtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKht x104jKLZgCEyi4IKs7QjFm+csCMA3g4nYkhYmv5yK4Jtw6pixicOV4KUypkejZhbWmU+vyD3iY/0 aZ+uvwyNl90CA8fWmKdC1sF7xs7MtYvaQOycf47BTkqAdlOep9iTKxKpEW9B9LchU2iBUdhdQUsy jYrvq3MzPGw5ERW9dSwsXf4M5l3pDmlfPgCAYmEdRop4eUshqh87cr8AfzTm4XEcR7pG6lOgTkFa kZAltl6U3+VHQ2PQj6pw5VRHuaqPunZVFJL8e8kNErDgPkRnY2t12qNIbvxiSri3gSDHlOJJ/kND HHzI2+yOEA70nFfFG0tY6DcXwm8qWmT6uMECAwEAAaOCAg0wggIJMAsGA1UdDwQEAwIF4DA9Bgkr BgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiCuLoUhdG3QIS5iTOG7K5ahOeweYENxscDgoHuRQIBZAIB CDBEBgkqhkiG9w0BCQ8ENzA1MA4GCCqGSIb3DQMCAgIAgDAOBggqhkiG9w0DBAICAIAwBwYFKw4D AgcwCgYIKoZIhvcNAwcwHQYDVR0OBBYEFKLokmPgby7PzMPWwS913WLd8w7yMB8GA1UdIwQYMBaA FAd1EUQRun6PdD2R16jhaq0s694uMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly9wa2kub3NyYW0t bGlnaHQuY29tL09TUkFNLUlTU1VJTkctQ0EtMjAxNS9DUkwvT1NSQU0tSVNTVUlORy1DQS0yMDE1 LmNybDBrBggrBgEFBQcBAQRfMF0wWwYIKwYBBQUHMAKGT2h0dHA6Ly9wa2kub3NyYW0tbGlnaHQu Y29tL09TUkFNLUlTU1VJTkctQ0EtMjAxNS9DZXJ0L09TUkFNLUlTU1VJTkctQ0EtMjAxNS5jcnQw HwYDVR0lBBgwFgYIKwYBBQUHAwQGCisGAQQBgjcKAwQwKQYJKwYBBAGCNxUKBBwwGjAKBggrBgEF BQcDBDAMBgorBgEEAYI3CgMEMBsGA1UdEQQUMBKBEFMuQmVja0Bvc3JhbS5jb20wDQYJKoZIhvcN AQELBQADggIBAAeoZQyM9u1NEpKRRDYMydLJ1wa1Y1m7rDfp5CPp0uni4qS5iXReWgIEzkhNCV5E oC0DosSOqnh2BkAkX+khNPuhLjjM/ApbFIqnnY+RD+xz3fxjx584TFmBugWHvKycYyD5NWhtD6Ej mWv6tUsxjYCv652LruxCdGJDbsaaEKP28te5dwMLD9wqSrBVU6ftbuzb9rL7IatpcBPCDkuCXSSQ lnAefbP2Y73wm1/+tbP/FxgyQjZUFR5qbXl2fMyynsrqLr3c6K7VxZs8+psbd+PiOlQnXcfGGCWR cZxr0cUZP/O861rFlE8s1OpxN5XI2pQIAzJx2toIsmHdk6hOY7t/2lYaMtqQLl2+cd2RoUMijM+1 Yi+v2WwuErdZzmgjTKht8rinng7GAuiSIQB489J4FgOEBWYne8zrl7jyuU9RYcYN9Nc5IZhK2Nfg 0xDh4tWeMWIuCg8f9ubeHOekdrg01cazDavxjaftQ25+2J5EwAWxc4ZPivOD9bkiYknSfg2iih2Y iRxUXqVq0q+qCfVDeys+MSFcu/WetN2ibvouzr+q4Aw+71j6M7FaWWpRz5FFKz40O/wAzoR2WB7u gGuT4RlAb7Yr8zM8TRpHKmrOSi19o/5qbGrPOX3u/B9UjK3LvR0n7TO6J9q0qxKveWlu6cofPQRd 2UVQoaNLB90mMIIHKDCCBRCgAwIBAgITWAAAAAXTK7hm1i4tGAAAAAAABTANBgkqhkiG9w0BAQsF ADBkMRMwEQYKCZImiZPyLGQBGRYDY29tMRswGQYKCZImiZPyLGQBGRYLb3NyYW0tbGlnaHQxEzAR BgoJkiaJk/IsZAEZFgNpbnQxGzAZBgNVBAMMEk9TUkFNIFJvb3QgQ0EgMjAxNTAeFw0xNTA5MzAx MjM2MTdaFw0yNzA5MzAxMjQ2MTdaMGcxEzARBgoJkiaJk/IsZAEZFgNjb20xGzAZBgoJkiaJk/Is ZAEZFgtvc3JhbS1saWdodDETMBEGCgmSJomT8ixkARkWA2ludDEeMBwGA1UEAwwVT1NSQU0gSXNz dWluZyBDQSAyMDE1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvbRnffh0KvDggawO /LfHMVmHl1fTbjzZQRjbbdUG6aKwTGeIpg7M4RXUIObssQ7sbSxuu77Vz2OFdSf5vk1fVZn8DFD8 dVB2AsYKPWZmBO+CYOvb2NCNqyLnt2/Mlk74gwTXdBgJsNjDbxs6yIfwn+rdGNt3gDwPeTiX+0Rn Ccj1NclFef00nW4kKFr2kkf+tVXMQx3pS7BQAjyuL+coQmOD5vIM+qU4dGy9ndYExTMTOPbDQaAO lx/vPXUSS1FvMJtKz//ODt/yew5RL55ZKuh6Mi7TvGTYcSH989NlXjYIYGQ0/5zfukj6CcscjInX 9W4U6NFvZL8YoVR6RLQkOTtfYa36t/iw16diSlBVeM7wq471fRXpytuGjLVtOl+oGGA7uM1QJ2OH OaXKzb6S28h8/W2urmHWMnSsBioznyio28I1PzyiwQeSe1NuMRobL0wSOTL/wljsxEkapvn4u3oW +SQCNyvXyigIYh+OaKNWFj62GclxPzoWkeT6FD6a6GS6geNyAF04N8fA/P1G/sSSCUcNdLodeEQz 17uSvIxKIFb0t7TgM40vgfwW929cv8hSoEfYQykeuPWPRc8nYkb9y6FSqpWxkXCFZRcVr826I7HY 3c2cfjFytMx4eyE5NzLV8n8jbEG0oM8c1SO1ojT4eQUgJgR2dE0OM6iJi6cCAwEAAaOCAc4wggHK MAsGA1UdDwQEAwIBhjAdBgNVHQ4EFgQUB3URRBG6fo90PZHXqOFqrSzr3i4wgaQGA1UdIASBnDCB mTCBlgYdKwYBBAGCNxUIgri6FIXRt0CEuYkzhuyuWoTnsHkwdTA8BggrBgEFBQcCAjAwHi4ATABl AGcAYQBsACAAcABvAGwAaQBjAHkAIABzAHQAYQB0AGUAbQBlAG4AdAAuMDUGCCsGAQUFBwIBFilo dHRwOi8vcGtpLm9zcmFtLWxpZ2h0LmNvbS9DUFMvaW5kZXguaHRtADASBgNVHRMBAf8ECDAGAQH/ AgEBMB8GA1UdIwQYMBaAFEF99LFK6HROcw7DQQ9plCbdSxZhMFkGA1UdHwRSMFAwTqBMoEqGSGh0 dHA6Ly9wa2kub3NyYW0tbGlnaHQuY29tL09TUkFNLVJvb3QtQ0EtMjAxNS9DUkwvT1NSQU0tUm9v dC1DQS0yMDE1LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSWh0dHA6Ly9wa2kub3Ny YW0tbGlnaHQuY29tL09TUkFNLVJvb3QtQ0EtMjAxNS9DZXJ0L09TUkFNLVJvb3QtQ0EtMjAxNS5j cnQwDQYJKoZIhvcNAQELBQADggIBACnQrysmPX41U+j/Q33kIHIGxFU0aYS0qrBmzGGGGNamqD8H 2SGy8LdCVcGeecE3XlKzZe+AnTTa1ejhHvhMJc8tHCgMLyvdSxKjJ69Rp75AaknxX15AwuFMkqLQ O+itE0PV6f3QHVdYevo2asZ3UgaQGOBFEo782qiNBDHawzuuXpXUTo4gWntTieXICIXWEenOgin1 901aoM0qzHTd8CXHdN8W7UNOE/6eCH02LofORiL2OzOAaz6aduK76KIEn3Fb2fbFAwKVIgTbvflA 9AWliukXYOSTGg9NXOyUVAE+ti4s720bYAJNrHTSbxbVpkDaWyZOhL/MsDAl3Q5/tMBbykhIy1pA 0zg5Q0QVr7B57x2Yo62nbduruNAnA0t+Q6DOrIRudaboAEeIXsQzVuUKd11o9mDOcVuetRxoS7lN 33zC3IHQajDFs8UHt4z6Cjj3EGttiS+ApUyDztgThD8bq7JSiAcFuXXD7zKmWN4TR6hKqTr9YGqA qhx/Dh7yYGUIOGAQi/EM0X1Ak73R45BopSyUm6oVj9i+w3SVvW66GxHbSUHqj8hA5Mokb9/ZC4Hn r/8CTC6MyfFJgksnMLEnhQOpCCaOzKtJ7UMnSeJHYHQUiDksIY5d3Y2T7QWDww7U95fMtGfPhqbA cF1qh4o9RYzuFWS6puXo7eRS2O1lMYIDwDCCA7wCAQEwfjBnMRMwEQYKCZImiZPyLGQBGRYDY29t MRswGQYKCZImiZPyLGQBGRYLb3NyYW0tbGlnaHQxEzARBgoJkiaJk/IsZAEZFgNpbnQxHjAcBgNV BAMMFU9TUkFNIElzc3VpbmcgQ0EgMjAxNQITGAAAxNQb5wQDKDSbIwAAAADE1DAJBgUrDgMCGgUA oIICFzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xODAyMDExMTUx NTVaMCMGCSqGSIb3DQEJBDEWBBQJRv+mZ53CaJFh+LJ1QlxzJBysADCBjgYJKwYBBAGCNxAEMYGA MH4wZzETMBEGCgmSJomT8ixkARkWA2NvbTEbMBkGCgmSJomT8ixkARkWC29zcmFtLWxpZ2h0MRMw EQYKCZImiZPyLGQBGRYDaW50MR4wHAYDVQQDDBVPU1JBTSBJc3N1aW5nIENBIDIwMTUCExgAAMTU G+cEAyg0myMAAAAAxNQwgZAGCyqGSIb3DQEJEAILMYGAoH4wZzETMBEGCgmSJomT8ixkARkWA2Nv bTEbMBkGCgmSJomT8ixkARkWC29zcmFtLWxpZ2h0MRMwEQYKCZImiZPyLGQBGRYDaW50MR4wHAYD VQQDDBVPU1JBTSBJc3N1aW5nIENBIDIwMTUCExgAAMTUG+cEAyg0myMAAAAAxNQwgZMGCSqGSIb3 DQEJDzGBhTCBgjALBglghkgBZQMEASowCwYJYIZIAWUDBAEWMAoGCCqGSIb3DQMHMAsGCWCGSAFl AwQBAjAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAhowCwYJYIZIAWUDBAID MAsGCWCGSAFlAwQCAjALBglghkgBZQMEAgEwDQYJKoZIhvcNAQEBBQAEggEALLJe9S8V1TumvMkP v8xVPByWuIiawbJV/nHEyZ322idKt5lR8r8k+cstjg6p/MOf7mVrZSe7Y0Woth8Sjg4X7ulmYB/x QXx6FGDvKS8RvCb3E7Q43ecRxJ+F6sGqM8bIAY9umdD4NGDuvCJBHR2P3fVVjrJns+GHweaqdQ6P YauwTttnsh0QyYEBXpRrJPfjbBxxsmziYv2cqrXFJU/HSbzcXz3rbbDvapfZSZO/2pry1aXXx9zW nJ7mkG7Y7C5fc2481ssfRcHSQRl9HrBfCVNx1nlo2C+/akR54Fka8AOdU1900VMB71pfZG37b2qR cRjERyIdVC0WIyBYL1CkGgAAAAAAAA== ------=_NextPart_000_005E_01D39B5B.7096DA20-- From nobody Thu Feb 1 05:59:57 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88EC713157F for ; Thu, 1 Feb 2018 05:59:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.91 X-Spam-Level: X-Spam-Status: No, score=-2.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WLgU2104Cp_S for ; Thu, 1 Feb 2018 05:59:52 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0061.outbound.protection.outlook.com [104.47.2.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A39512EAC1 for ; Thu, 1 Feb 2018 05:59:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=3aivBoe4KUG2KD0apkTSWbvdHdZaAnHkjvVQVtaAoDI=; b=WTQ3BsuMeoTQdf0SFgHPqrQGDNkob4YqIYxpH1y/0U/f9v/XYwizJBfB52ndyjM6pqAoiYpsdDKgpQTkIswzOjFjV9FQ0Gd/LmFNswSZVF3cmwbVWtt3OOQ0NnL0i4XUk+kgTqoqeQy+UHDw1/u9JiiAYVlRPv3hnQ89g5N83/k= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1507.eurprd08.prod.outlook.com (10.168.5.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.444.14; Thu, 1 Feb 2018 13:59:49 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b%14]) with mapi id 15.20.0444.016; Thu, 1 Feb 2018 13:59:48 +0000 From: Hannes Tschofenig To: "ace@ietf.org" Thread-Topic: Removal of the Client Token from ACE-OAuth draft Thread-Index: AdObY8LeTLQDRQpHTLmnZxVwN5CDtQ== Date: Thu, 1 Feb 2018 13:59:48 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.119.5] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1507; 7:2FvdxQp2Ic4AaxT3FsaHFcPHhF04CCh6OudJP7/8zo+HNCg1bEwsmbMoGP1RFBKe+7AGXeIJXYZd1HxGooYgFvGVEkpAha5EVfd42JQDxufbQWEpsq5Uu5tmdWHgCkXfu9xCDSI5m4eSWmGJxJE2T184L/1yeHYFeKdwDKMhNvulSx82VD4V8QcjCgRQGTUGE6zChI3PunYoyfRYcSzMUypjFtWHku1GleGjrOD3QUY5Dmg2iTqM1X5J9V4lGXOB x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c2414de7-1739-45d7-d082-08d5697c0ecf x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1507; x-ms-traffictypediagnostic: AM4PR0801MB1507: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(158342451672863)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231101)(2400082)(944501161)(3002001)(10201501046)(6055026)(6041288)(20161123558120)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(6072148)(201708071742011); SRVR:AM4PR0801MB1507; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1507; x-forefront-prvs: 0570F1F193 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(376002)(396003)(346002)(366004)(40434004)(199004)(189003)(53754006)(97736004)(5640700003)(6306002)(86362001)(55016002)(5890100001)(316002)(54896002)(5660300001)(53936002)(66066001)(9686003)(26005)(59450400001)(6116002)(74316002)(5630700001)(99286004)(186003)(7696005)(6506007)(3660700001)(2906002)(102836004)(6916009)(2501003)(25786009)(5250100002)(3280700002)(6436002)(7736002)(2351001)(106356001)(478600001)(3846002)(790700001)(105586002)(2900100001)(81166006)(68736007)(33656002)(1730700003)(81156014)(8936002)(72206003)(8676002)(14454004); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1507; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: ykgqd7+ZPqWqTOqnoY8zM0s6xEsFw/QB1WiYfKOICxDpKqZU0dfVwYFshczEeVHa1KkLFC8NKZAq8bnNThXyaA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB27062B8FD8B05971648F1E8CFAFA0AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: c2414de7-1739-45d7-d082-08d5697c0ecf X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Feb 2018 13:59:48.7060 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1507 Archived-At: Subject: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 13:59:54 -0000 --_000_AM4PR0801MB27062B8FD8B05971648F1E8CFAFA0AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, the Client Token is a new mechanism in the ACE-OAuth that aims to solve a s= cenario where the Client does not have connectivity to the Authorization Se= rver to obtain an access token while the Resource Server does. The solution is therefore for the Client to use the Resource Server to rela= y messages to the Authorization Server. While this sounds nice it does not follow the OAuth model and we, at ARM, h= ave not seen anyone requesting this feature. It is also not fully specified= in the spec: since I have been doing a formal analysis of this protocol va= riant for the OAuth Security Workshop I had to notice that it is not secure= . (I will post the paper to the list asap.) Note that I am not saying that we should never do this work but I prefer th= at someone who really cares about this use case describes it in an independ= ent document. In summary, I am again requesting that the Client Token functionality is re= moved from the ACE-OAuth draft. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB27062B8FD8B05971648F1E8CFAFA0AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

the Client Token is a new mechanism in the ACE-OAuth= that aims to solve a scenario where the Client does not have connectivity = to the Authorization Server to obtain an access token while the Resource Se= rver does.

 

The solution is therefore for the Client to use the = Resource Server to relay messages to the Authorization Server.

 

While this sounds nice it does not follow the OAuth = model and we, at ARM, have not seen anyone requesting this feature. It is a= lso not fully specified in the spec: since I have been doing a formal analy= sis of this protocol variant for the OAuth Security Workshop I had to notice that it is not secure. (I will pos= t the paper to the list asap.)

 

Note that I am not saying that we should never do th= is work but I prefer that someone who really cares about this use case desc= ribes it in an independent document.  

 

In summary, I am again requesting that the Client To= ken functionality is removed from the ACE-OAuth draft.

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB27062B8FD8B05971648F1E8CFAFA0AM4PR0801MB2706_-- From nobody Thu Feb 1 18:31:16 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 715221270AC for ; Thu, 1 Feb 2018 18:31:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.231 X-Spam-Level: X-Spam-Status: No, score=-4.231 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4I1S5slKOc4J for ; Thu, 1 Feb 2018 18:31:12 -0800 (PST) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 597861201FA for ; Thu, 1 Feb 2018 18:31:12 -0800 (PST) X-AuditID: 12074424-cafff70000004733-bd-5a73cd6dad28 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 8B.8E.18227.E6DC37A5; Thu, 1 Feb 2018 21:31:10 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w122V8Yi020486; Thu, 1 Feb 2018 21:31:08 -0500 Received: from mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w122V44x028769 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 1 Feb 2018 21:31:07 -0500 Date: Thu, 1 Feb 2018 20:31:04 -0600 From: Benjamin Kaduk To: Hannes Tschofenig Cc: "ace@ietf.org" Message-ID: <20180202023104.GZ12363@mit.edu> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrKIsWRmVeSWpSXmKPExsUixCmqrZt3tjjK4MMWDYvv33qYLW7OOMXk wOSxZt4aRo8lS34yBTBFcdmkpOZklqUW6dslcGXMu/SJpeAhf8X+rtMsDYy3eLoYOTkkBEwk Tuz5yQJiCwksZpJobJXsYuQCsjcwSnxZ+50VwjnDJLHu/1M2kCoWARWJ2euvMILYbEB2Q/dl ZhBbRMBQYm/zIaAGDg5mAUWJv5dUQcLCAs4S669OAFvAK6Ajcf7zD2aIZQkSn3Y1s0LEBSVO znwCVsMsoCVx499LJogx0hLL/3GAhDkFEiUO3H0FtlVUQFlib98h9gmMArOQdM9C0j0LoXsB I/MqRtmU3Crd3MTMnOLUZN3i5MS8vNQiXXO93MwSvdSU0k2MoBBld1HZwdjd432IUYCDUYmH l0O6OEqINbGsuDL3EKMkB5OSKK/sEaAQX1J+SmVGYnFGfFFpTmrxIUYJDmYlEd6vG4ByvCmJ lVWpRfkwKWkOFiVxXg8T7SghgfTEktTs1NSC1CKYrAwHh5IEr+EZoEbBotT01Iq0zJwShDQT ByfIcB6g4a4gNbzFBYm5xZnpEPlTjLocN168bmMWYsnLz0uVEufVASkSACnKKM2DmwNKLRLZ +2teMYoDvSXMmwdSxQNMS3CTXgEtYQJa8jO7EGRJSSJCSqqBcfuLTfWLPu9nWHtOZEvvuUVT fmSv2srpEFFtyvBO8m/9ztp1h1yX2Sx5b60mJnj1Rcs6owzVF55BjrLHZewFmWt+8jTvfyv9 u/ZJ72P2tFNqEr9N89JzvZq1lyfk1XrLat62VNlmWPyUISI5OFjyV7bYBd/P5Tl7OVrlK3/H uHjHRPJemuesxFKckWioxVxUnAgAPkyLjggDAAA= Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 02:31:14 -0000 On Thu, Feb 01, 2018 at 01:59:48PM +0000, Hannes Tschofenig wrote: > Hi all, > > the Client Token is a new mechanism in the ACE-OAuth that aims to solve a scenario where the Client does not have connectivity to the Authorization Server to obtain an access token while the Resource Server does. This sounds eerily reminiscent of the IAKERB GSS-API mechanism, where the initiator uses the acceptor as a proxy to contact the Kerberos KDC, obtain an initial ticket, and obtain the credentials needed to complete the "normal" Kerberos exchange with the acceptor. (An early draft of) it got implemented, but the spec kind of died and we don't know of anyone actually using it. So, I support not including it unless we have some actual use cases in mind. -Ben > The solution is therefore for the Client to use the Resource Server to relay messages to the Authorization Server. > > While this sounds nice it does not follow the OAuth model and we, at ARM, have not seen anyone requesting this feature. It is also not fully specified in the spec: since I have been doing a formal analysis of this protocol variant for the OAuth Security Workshop I had to notice that it is not secure. (I will post the paper to the list asap.) > > Note that I am not saying that we should never do this work but I prefer that someone who really cares about this use case describes it in an independent document. > > In summary, I am again requesting that the Client Token functionality is removed from the ACE-OAuth draft. > > Ciao > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Thu Feb 1 18:35:26 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4051E12EAB0 for ; Thu, 1 Feb 2018 18:35:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BcPpz4aEpvnn for ; Thu, 1 Feb 2018 18:35:22 -0800 (PST) Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0092.outbound.protection.outlook.com [104.47.42.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4AB21201FA for ; Thu, 1 Feb 2018 18:35:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=gqucCMvFKDnpaEOjhNvo1FJPcNmN763Kop4FU+EPSf4=; b=kMGK8UblfEHiQbkwhFiQGilYLJ+Opj49Fh74cSkSYaQzHdGUoTlbmTxTH2UocnwruanFvCaRRgaKwQdQGIqzMT5gukqk65nA7EsI1Bcoe+hfQkhEgrypRzZagQlakKIBGrefBGqqCSzJE+lKryq5jqPyoLC0N4QWDHY86NHx6g8= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0973.namprd21.prod.outlook.com (52.132.114.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.485.5; Fri, 2 Feb 2018 02:35:20 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a%6]) with mapi id 15.20.0485.006; Fri, 2 Feb 2018 02:35:20 +0000 From: Mike Jones To: Benjamin Kaduk , Hannes Tschofenig CC: "ace@ietf.org" Thread-Topic: [Ace] Removal of the Client Token from ACE-OAuth draft Thread-Index: AdObY8LeTLQDRQpHTLmnZxVwN5CDtQAahxgAAAAYkTA= Date: Fri, 2 Feb 2018 02:35:20 +0000 Message-ID: References: <20180202023104.GZ12363@mit.edu> In-Reply-To: <20180202023104.GZ12363@mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-02T02:35:15.9444244Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:2::23d] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0973; 7:ox0dTq+kA0Ph+oPmdPpvRGZ7C/IxjzuAbrL5qA8//IgfVGpnqEgEYDVkfIhNSnurQsRpBw5cKfqGcZLwZ3HWmkCzZc07DQcIwpjZUKM+sGTpYhU6zGJlP21LtjuGBuKgZYggxy5b7E2E6q/oI5HLDSb7getmLk0N012u1BS8jQzNnVSGmqRc+aIniXyzWi624qpYn8NCKhpdi2PlhONg/9QER/H4hUA95Npva6R9ZSBhSUz37/oMjG/EiTe9lsOI x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 5b93ff83-60eb-466d-beb9-08d569e59ad8 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB0973; x-ms-traffictypediagnostic: SN6PR2101MB0973: x-ld-processed: 72f988bf-86f1-41af-91ab-2d7cd011db47,ExtAddr x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(180628864354917)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(8121501046)(5005006)(3002001)(10201501046)(3231101)(2400082)(944501161)(93006095)(93001095)(6055026)(61426038)(61427038)(6041288)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:SN6PR2101MB0973; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0973; x-forefront-prvs: 05715BE7FD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39380400002)(396003)(346002)(376002)(39860400002)(366004)(189003)(199004)(40434004)(13464003)(53754006)(6246003)(2171002)(8990500004)(86612001)(9686003)(6306002)(55016002)(81156014)(33656002)(6436002)(105586002)(8676002)(8936002)(81166006)(5250100002)(106356001)(4326008)(68736007)(3280700002)(25786009)(3660700001)(53936002)(2906002)(6116002)(53546011)(2900100001)(10090500001)(7736002)(478600001)(5890100001)(305945005)(102836004)(229853002)(2950100002)(86362001)(72206003)(966005)(110136005)(76176011)(22452003)(74316002)(7696005)(6506007)(186003)(14454004)(10290500003)(59450400001)(5660300001)(99286004)(6346003)(97736004)(316002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0973; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: QO8ivep5FtULrhLPfMJ06lXZQtVd3UKYTwBIpBhMaFtE5u1WZ39Blg3GjSJXBadbriA2bijdLPHNb68BaL3UPg== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5b93ff83-60eb-466d-beb9-08d569e59ad8 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Feb 2018 02:35:20.8135 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0973 Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 02:35:25 -0000 I agree with Hannes and Ben that the Client Token is speculative in nature,= solving a problem that's it's not clear that we even have. It certainly i= sn't OAuth. I already made this point in my earlier comprehensive review of the spec, b= ut I'll repeat again here. Please remove it! -- Mike -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Benjamin Kaduk Sent: Thursday, February 1, 2018 6:31 PM To: Hannes Tschofenig Cc: ace@ietf.org Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft On Thu, Feb 01, 2018 at 01:59:48PM +0000, Hannes Tschofenig wrote: > Hi all, >=20 > the Client Token is a new mechanism in the ACE-OAuth that aims to solve a= scenario where the Client does not have connectivity to the Authorization = Server to obtain an access token while the Resource Server does. This sounds eerily reminiscent of the IAKERB GSS-API mechanism, where the i= nitiator uses the acceptor as a proxy to contact the Kerberos KDC, obtain a= n initial ticket, and obtain the credentials needed to complete the "normal= " Kerberos exchange with the acceptor. (An early draft of) it got implemented, but the spec kind of died and we do= n't know of anyone actually using it. So, I support not including it unless we have some actual use cases in mind= . -Ben > The solution is therefore for the Client to use the Resource Server to re= lay messages to the Authorization Server. >=20 > While this sounds nice it does not follow the OAuth model and we, at=20 > ARM, have not seen anyone requesting this feature. It is also not=20 > fully specified in the spec: since I have been doing a formal analysis=20 > of this protocol variant for the OAuth Security Workshop I had to=20 > notice that it is not secure. (I will post the paper to the list=20 > asap.) >=20 > Note that I am not saying that we should never do this work but I prefer = that someone who really cares about this use case describes it in an indepe= ndent document. >=20 > In summary, I am again requesting that the Client Token functionality is = removed from the ACE-OAuth draft. >=20 > Ciao > Hannes >=20 > IMPORTANT NOTICE: The contents of this email and any attachments are conf= idential and may also be privileged. If you are not the intended recipient,= please notify the sender immediately and do not disclose the contents to a= ny other person, use it for any purpose, or store or copy the information i= n any medium. Thank you. > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Fri Feb 2 00:45:33 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA84E1275F4 for ; Fri, 2 Feb 2018 00:45:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xmWvl9CuvXUk for ; Fri, 2 Feb 2018 00:45:27 -0800 (PST) Received: from lb1-smtp-cloud7.xs4all.net (lb1-smtp-cloud7.xs4all.net [194.109.24.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BF8A1200FC for ; Fri, 2 Feb 2018 00:45:27 -0800 (PST) Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:212]) by smtp-cloud7.xs4all.net with ESMTPA id hWyKeX5Dg3A62hWyKeTB6L; Fri, 02 Feb 2018 09:45:25 +0100 Received: from AMontpellier-654-1-119-113.w90-0.abo.wanadoo.fr ([90.0.134.113]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Fri, 02 Feb 2018 09:45:24 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Fri, 02 Feb 2018 09:45:24 +0100 From: peter van der Stok To: "Beck, Stefan" Cc: ace@ietf.org Organization: vanderstok consultancy Reply-To: consultancy@vanderstok.org Mail-Reply-To: consultancy@vanderstok.org In-Reply-To: References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> Message-ID: <1e58208aba210d1473afd8ed6b56508a@xs4all.nl> X-Sender: stokcons@xs4all.nl User-Agent: XS4ALL Webmail X-CMAE-Envelope: MS4wfEpk8aRM4yO/Cl/PbTT26dSHIdsQoJY/jnejnurdpxKHUOz4CzEeF394QFevlr996wLQtSDPOdZdJySZjGaXE7zpQGiY9IbNZ5gumbszhcW8qSyc4aRT crnoUMp8J6fsr5eLwM6QQBm5aZYz6oc93fBhrmogNf5BLBpoe/CYdrgRS1IzN4dbtAIKkb5hvsVJS9KHO5POlU7QzUGz/YSf7706NBKop48cvOu25BaRDD3C Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 08:45:31 -0000 Hi Stefan, Thanks for the support. I see your point of view; We will look at the text to avoid suggesting that EST/https and EST/coaps cannot exist together. Peter Beck, Stefan schreef op 2018-02-01 12:51: > +1 > I support adoption, as it perfectly complements the existing EST work. > > So far, just one general comment: > The draft could emphasize (e.g. in the intro) that coexistence of EST > and EST-coaps is supported in target deployments. And you even may > have a combination of constrained devices in a non-constrained network > and vice versa. > If that matches the authors’ view, then some general statements need > to be adapted. Two examples see below > > Stevie > > > 1. Abstract: > "This allows low-resource constrained devices to re-use existing EST > functionality. Example low-resource use cases for EST are: secure > bootstrapping and certificate enrollment." > > Well, to me those are the two main use cases for non-constrained > devices using EST, too. So I would write: > "This allows low-resource constrained devices to re-use existing EST > functionality to implement use cases such as secure bootstrapping and > certificate enrollment." > > > 2. Chapter 3.5 (Deployment limits): > 2a. " Although EST-coaps paves the way for the utilization of EST for > constrained devices on constrained networks..." > --> s?on?and/or? > > 2b. " EST-coaps is intended to ensure that EST works for networks of > constrained devices that choose to limit their communications stack to > UDP/CoAP." > --> Remove "networks of" > > --------------------- > From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Shahid Raza > Sent: Thursday, February 01, 2018 11:56 AM > To: Sandeep Kumar > Cc: Jim Schaad ; ace@ietf.org > Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est > > As a co-author, I also strongly support the adoption of this draft as > a WG document. Recall that , we already have an implementation of this > draft, both in constrained devices (SICS Contiki) and in the Nexus CA > software. Recently, we have also implemented the "integration of this > draft into LwM2M", which is part of the latest LwM2M release. > > Best, > Shahid > > Shahid Raza, PhD > Director Security Lab and Expert Researcher > RISE - Research Institutes of Sweden > Division ICT - RISE SICS > > Isafjordsgatan 22 / Kistagången 16 > 16440, Kista Stockholm > Mobile: +46 768831797 > shahid.raza@ri.se > http://www.shahidraza.net > http://www.sics.se > The RISE institutes Innventia, SP and Swedish ICT have merged in order > to become a stronger research and innovation partner for businesses > and society. > > > On 1 Feb 2018, at 11:40, Sandeep Kumar > wrote: > > As co-author, I support adoption of the draft as WG document. There is > need in industry and multiple standardization bodies for this draft. > > Regards > Sandeep > > -----Original Message----- > From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Jim Schaad > Sent: Tuesday, January 30, 2018 9:23 PM > To: ace@ietf.org > Subject: [Ace] Working group adoption of draft-vanderstok-ace-est > > This is the start of a two week call for input on the adoption of the > WG of the document draft-vanderstok-ace-est. The document has been > presented at the last two meetings and has some significant recent > updates to respond to feedback. There seemed to be support at the > last F2F to adopt. > > Please provide feedback to the list/chairs if you believe that this > document > should be adopted as a WG document. The adoption call will end on > Feb 13 > 2018. > > Jim > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > ________________________________ > The information contained in this email may be confidential and/or > legally protected under applicable law. The message is intended solely > for the addressee(s). If you are not the intended recipient, you are > hereby notified that any use, forwarding, dissemination, or > reproduction of this email is strictly prohibited and may be unlawful. > If you are not the intended recipient, please contact the sender by > return e-mail and destroy all copies of the original email. > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Fri Feb 2 12:18:15 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12850124207 for ; Fri, 2 Feb 2018 12:18:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id avmJd_9sAdAV for ; Fri, 2 Feb 2018 12:18:12 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C1391200C5 for ; Fri, 2 Feb 2018 12:18:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1488; q=dns/txt; s=iport; t=1517602692; x=1518812292; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=SiiOGlCmdxuCNbYFI5EAww/2gehAPLIDjZa3aAwsB2c=; b=ZU8WXDHSArgyd1brtp0TwgXW7cfdH/KuQbw8/BUiVd361rxeoaddVJHe XnjnvwWJFtBC18VeiIHUzJaMzAfmCXe+a4OtNLD2agz0pE60rPak/Om1z mQ9VjVlAQ07LZ3wJzZ52tr+p8in6Df0hKGwT6gqdK0/5IxkN0lRWNJdlo o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ChAAD5xnRa/4ENJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNRZnAoCoNbiiSOLoFbl2+CGAoYC4UYAhqCHlQYAQEBAQEBAQE?= =?us-ascii?q?CayiFJAIEAQEbBhE6GwIBCA4MAiYCAgIlCxUQAgQBEoo1ELJhgieFAIN5ggYBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEYBYEPg1qCFYNoDIJ5gy8BAQKFBjGCNAWkJAK?= =?us-ascii?q?VboIehiWLcZdEAhEZAYE7AR85gVBwFT0qAYIbhHd4ixaBFwEBAQ?= X-IronPort-AV: E=Sophos;i="5.46,450,1511827200"; d="scan'208";a="65001907" Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Feb 2018 20:18:11 +0000 Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id w12KIAh9016111 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 2 Feb 2018 20:18:11 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 2 Feb 2018 15:18:10 -0500 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1320.000; Fri, 2 Feb 2018 15:18:10 -0500 From: "Nancy Cam-Winget (ncamwing)" To: Jim Schaad , "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AQHTnGLxuhazfivPQR6hGrReGsdXHw== Date: Fri, 2 Feb 2018 20:18:10 +0000 Message-ID: <12766373-A32B-406C-97DE-CCF008A918CD@cisco.com> References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: <010f01d39a08$255723c0$70056b40$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.9.0.180116 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.155.208.65] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 20:18:14 -0000 SSBzdXBwb3J0IHRoZSBhZG9wdGlvbiBvZiB0aGlzIGRyYWZ0LiAgVGhlIGluZHVzdHJpYWwgSW9U IHNlY3RvciBpcyBlc3RhYmxpc2hpbmcgY2VydGlmaWNhdGUgYmFzZWQgc2VjdXJlIGNvbW11bmlj YXRpb25zIGFuZCB3aWxsIG5lZWQgYSBzZWN1cmUgbWVhbnMgdG8gbWFuYWdlIHRoZXNlIGNlcnRp ZmljYXRlcy4gIFdpdGggdGhlIHVzZSBvZiBDb0FwIGluIHRoYXQgc3BhY2UsIHRoaXMgZHJhZnQg Y2FuIGJlIHRoZSB3aGF0L2hvdyB0byBhY2hpZXZlIGp1c3QgdGhhdC4NCg0KV2FybSByZWdhcmRz LCBOYW5jeQ0KDQrvu79PbiAxLzMwLzE4LCAxMjoyMyBQTSwgIkFjZSBvbiBiZWhhbGYgb2YgSmlt IFNjaGFhZCIgPGFjZS1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBpZXRmQGF1Z3VzdGNl bGxhcnMuY29tPiB3cm90ZToNCg0KICAgIFRoaXMgaXMgdGhlIHN0YXJ0IG9mIGEgdHdvIHdlZWsg Y2FsbCBmb3IgaW5wdXQgb24gdGhlIGFkb3B0aW9uIG9mIHRoZSBXRyBvZg0KICAgIHRoZSBkb2N1 bWVudCBkcmFmdC12YW5kZXJzdG9rLWFjZS1lc3QuICBUaGUgZG9jdW1lbnQgaGFzIGJlZW4gcHJl c2VudGVkIGF0DQogICAgdGhlIGxhc3QgdHdvIG1lZXRpbmdzIGFuZCBoYXMgc29tZSBzaWduaWZp Y2FudCByZWNlbnQgdXBkYXRlcyB0byByZXNwb25kIHRvDQogICAgZmVlZGJhY2suICBUaGVyZSBz ZWVtZWQgdG8gYmUgc3VwcG9ydCBhdCB0aGUgbGFzdCBGMkYgdG8gYWRvcHQuDQogICAgDQogICAg UGxlYXNlIHByb3ZpZGUgZmVlZGJhY2sgdG8gdGhlIGxpc3QvY2hhaXJzIGlmIHlvdSBiZWxpZXZl IHRoYXQgdGhpcyBkb2N1bWVudA0KICAgIHNob3VsZCBiZSBhZG9wdGVkIGFzIGEgV0cgZG9jdW1l bnQuICAgIFRoZSBhZG9wdGlvbiBjYWxsIHdpbGwgZW5kIG9uIEZlYiAxMw0KICAgIDIwMTguDQog ICAgDQogICAgSmltDQogICAgDQogICAgDQogICAgX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCiAgICBBY2UgbWFpbGluZyBsaXN0DQogICAgQWNlQGlldGYu b3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCiAgICAN Cg0K From nobody Fri Feb 2 12:47:50 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F67B12D84C for ; Fri, 2 Feb 2018 12:47:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mxFBXOgk14fl for ; Fri, 2 Feb 2018 12:47:46 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5248512D77C for ; Fri, 2 Feb 2018 12:47:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1019; q=dns/txt; s=iport; t=1517604466; x=1518814066; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=4MuamI4hhXVfUiynDAPbcxFbxS1wbknX/nAa+ARaArQ=; b=VcBm672PsLW9IX3m6mo53ggYq51pKKz3gGN8Z56iTmwOCTjyJv8hLMNO QPXRqEuXFu880V/QXht1stw+KM5VRBqcSDvY9aWdSDk/oFMP5vwE1CpTW bt9SmT+T1e5YCIkydIuo/MzpdKeckG28VbeZbtDDSDQgZTWJhRmN9pr0j I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CnAADQzXRa/5pdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNRZnAoCo1/ji6CApdIghgKGAuFGAKCOFQYAQEBAQEBAQECax0?= =?us-ascii?q?LhSMBAQEEAQEbHTQXBAIBCBEEAQEfCQcnCxQJCAEBBBMIii0QtR+IeIIGAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBGAWEaYIVgVeFFoMvAQECh2sFpCQClWWCJ4Yli3G?= =?us-ascii?q?XRAIRGQGBOwEfOYFQcBU9gkaEd3iLFoEXAQEB?= X-IronPort-AV: E=Sophos;i="5.46,450,1511827200"; d="scan'208";a="65012585" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Feb 2018 20:47:45 +0000 Received: from XCH-RCD-018.cisco.com (xch-rcd-018.cisco.com [173.37.102.28]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id w12Klj5h005768 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Fri, 2 Feb 2018 20:47:45 GMT Received: from xch-rcd-019.cisco.com (173.37.102.29) by XCH-RCD-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 2 Feb 2018 14:47:44 -0600 Received: from xch-rcd-019.cisco.com ([173.37.102.29]) by XCH-RCD-019.cisco.com ([173.37.102.29]) with mapi id 15.00.1320.000; Fri, 2 Feb 2018 14:47:44 -0600 From: "Rupak Chandra (ruchandr)" To: "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AdOaBxPvuhazfivPQR6hGrReGsdXHwCXdfAg Date: Fri, 2 Feb 2018 20:47:44 +0000 Message-ID: References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: <010f01d39a08$255723c0$70056b40$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.24.85.249] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 20:47:49 -0000 I support the adoption of this draft. There is a great need for a standards= based mechanism for secure enrollment of constrained endpoints, which this= draft provides. Thanks Rupak -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Jim Schaad Sent: Tuesday, January 30, 2018 12:23 PM To: ace@ietf.org Subject: [Ace] Working group adoption of draft-vanderstok-ace-est This is the start of a two week call for input on the adoption of the WG of= the document draft-vanderstok-ace-est. The document has been presented at= the last two meetings and has some significant recent updates to respond t= o feedback. There seemed to be support at the last F2F to adopt.=20 Please provide feedback to the list/chairs if you believe that this documen= t should be adopted as a WG document. The adoption call will end on Feb 13 2018. Jim _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Fri Feb 2 14:24:56 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61BEB126C89; Fri, 2 Feb 2018 14:24:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZyVKhYenMbgL; Fri, 2 Feb 2018 14:24:52 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D52E124217; Fri, 2 Feb 2018 14:24:52 -0800 (PST) X-AuditID: 1209190c-c85ff70000001cc4-ae-5a74e532333d Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 5B.52.07364.335E47A5; Fri, 2 Feb 2018 17:24:51 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w12MOo3k018316; Fri, 2 Feb 2018 17:24:50 -0500 Received: from mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w12MOkUS015325 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 2 Feb 2018 17:24:49 -0500 Date: Fri, 2 Feb 2018 16:24:46 -0600 From: Benjamin Kaduk To: ace@ietf.org, draft-ietf-ace-cbor-web-token@ietf.org Message-ID: <20180202222446.GJ12363@mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrKIsWRmVeSWpSXmKPExsUixCmqrWv8tCTK4NgUPovv33qYLS7vbmR0 YPJYsuQnUwBjFJdNSmpOZllqkb5dAlfG4pfbWAr281bc2HiCqYHxLVcXIyeHhICJxOZle1i7 GLk4hAQWM0mcmbuCCcLZwCix5cZ1RgjnDJPEz+NTWUBaWARUJHa9mw5mswHZDd2XmbsYOThE BCwk/l6XBgkLC9hIzH/yhhHE5hXQkdh0eg47hC0ocXLmE7BWZgF1iT/zLoG1MgtISyz/xwER lpdo3jqbGcQWFVCW2Nt3iH0CI98sJN2zkHTPQuiehaR7ASPLKkbZlNwq3dzEzJzi1GTd4uTE vLzUIl1DvdzMEr3UlNJNjOAQlOTZwXjmjdchRgEORiUe3hvpJVFCrIllxZW5hxglOZiURHlP TgMK8SXlp1RmJBZnxBeV5qQWH2KU4GBWEuHdthYox5uSWFmVWpQPk5LmYFES53U30Y4SEkhP LEnNTk0tSC2CycpwcChJ8CY9AWoULEpNT61Iy8wpQUgzcXCCDOcBGl4DUsNbXJCYW5yZDpE/ xajLcePF6zZmIZa8/LxUKXFeb5AiAZCijNI8uDmg1CGRvb/mFaM40FvCvLdAqniAaQdu0iug JUxAS35mF4IsKUlESEk1MHJZWUTbKa57d75YKq1t0dYw3W1p7SyBdp/m8jlZV/7MupveoZz7 e/FpPiY+/me3hCTilqX+F3a6uIC50mLa/5ec7NObjrrrvzoRcKsoy7v5QHz9lunCy3cYaWqo NK04/C/r+QG28r8yh/K0ThbMfzzxuWGp2SrVPV3d+3ifvHpdMtdk5ia9DCWW4oxEQy3mouJE AFkMvoP4AgAA Archived-At: Subject: [Ace] shepherd review of draft-ietf-ace-cbor-web-token-11 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 22:24:54 -0000 Hi all, We're getting ready to send this to Kathleen for processing (hopefully to finish before her term as AD does!), but there are a few nits that should be fixed with a new rev before we actually push the button. We currently have an informational reference to RFC 5226, which has since been replaced by RFC 8126; we should update our citation to the newer document with guidelines for writing IANA considerations. In section 9.1 the second pargaraph says that the values are registerd on a "Specification Required" basis, but we have some ranges that are just "Expert Review". So I think this text should say "Expert Review" instead (with some of the guidance to the experts being that certain subranges have additional requirements). We also note that the Experts should consider "whether it is useful only for a single application", and it's not entirely clear to me what the reuslt of that consideration should be. Is only being useful for a single application supposed to be grounds for rejecting a registration? (That doesn't seem necessarily true, for the Expert Review range.) Or is that just a factor for whether "nice-looking" names should be allowed for them? Or something else? In section 9.4, we attempt to register a value from the CBOR Tag registry; however, the template in RFC 7049 includes a "description of semantics" field, and not the "reference" field that we provide. Finally, in the acknowledgments, we can ask the RFC Editor to use the non-ASCII "Gőran" if he so desires. (Last I heard the tooling isn't there to use non-ASCII for internet drafts yet, though.) Authors, will you be able to prepare a new version with these changes? Thanks, Ben From nobody Fri Feb 2 15:18:07 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEB68126CBF; Fri, 2 Feb 2018 15:18:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s8stMJT-XXav; Fri, 2 Feb 2018 15:18:03 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0135.outbound.protection.outlook.com [104.47.32.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3B48126C23; Fri, 2 Feb 2018 15:18:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=3svfj7ne7QBYTK5VVlid26QqGAuaGW0bNI5QT9gIPVw=; b=kTYUiAsH9kVpqbtMK/YGQbYTDQyBwt26ER7x1xJkIDzRYq9SRzNpUS4ZXGHx7tQ+DLS3+BQSuhb1rln7shilbPrW8h9JZ21YJkpQbvdaQeZmao4i8LMnmNUDEY/IXRB9aNl4isg5RScYbQToPhLekFn/OSqFhbTn6G+XLgH8Eq0= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1006.namprd21.prod.outlook.com (52.132.117.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.485.4; Fri, 2 Feb 2018 23:18:00 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a%6]) with mapi id 15.20.0485.006; Fri, 2 Feb 2018 23:18:00 +0000 From: Mike Jones To: Benjamin Kaduk , "ace@ietf.org" , "draft-ietf-ace-cbor-web-token@ietf.org" Thread-Topic: shepherd review of draft-ietf-ace-cbor-web-token-11 Thread-Index: AQHTnHSoJbM2laX2yEKgYqoNmy7brKORvsLQ Date: Fri, 2 Feb 2018 23:18:00 +0000 Message-ID: References: <20180202222446.GJ12363@mit.edu> In-Reply-To: <20180202222446.GJ12363@mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-02T23:16:42.5940386Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:3::42a] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1006; 7:YniKkjfxWYFM2Yd64rOI9AWLj89RZf0J9KuIG1qQIOCllkf2gAh9DYJRqgai3ltLJPt6NTODGN2umNgdXchJUIXY/FJS36ZoIgH7gmRzZQ1i2wp4AfQgwr+8TSz2gHmPX35n6gJE7bjz20bCiq87pcX0Gz132QHlWQCiJ02ARbrmQwYbJrsvyFyKBICtxWBQfEsvmJC78uDAh/+UYZmWwjPo9o7os7adYVoFlRWHHTm5bN91E/UwvlxG0Mf7+rf3 x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 4b1dbb54-201a-41c8-966a-08d56a9333d8 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1006; x-ms-traffictypediagnostic: SN6PR2101MB1006: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(3231101)(2400082)(944501161)(6055026)(61426038)(61427038)(6041288)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:SN6PR2101MB1006; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1006; x-forefront-prvs: 05715BE7FD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(366004)(376002)(346002)(39380400002)(39860400002)(51914003)(53754006)(199004)(189003)(13464003)(2950100002)(33656002)(14454004)(99286004)(74316002)(305945005)(105586002)(7736002)(72206003)(22452003)(316002)(110136005)(10290500003)(478600001)(6436002)(53936002)(55016002)(9686003)(186003)(229853002)(59450400001)(6506007)(53546011)(102836004)(2501003)(3660700001)(3280700002)(2906002)(68736007)(76176011)(6246003)(2171002)(25786009)(7696005)(6116002)(6346003)(5250100002)(8990500004)(86612001)(97736004)(2900100001)(86362001)(106356001)(5660300001)(8676002)(8936002)(81156014)(10090500001)(2201001)(81166006); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1006; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: zDz2X1OWziOQX3kQgb3busZ3ZS0MoIwetCEejWVgrrw0ech6NXw1oEsDPTGkZr3LS9S7+UyllLUk2z4hKL6Rgw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4b1dbb54-201a-41c8-966a-08d56a9333d8 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Feb 2018 23:18:00.3841 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1006 Archived-At: Subject: Re: [Ace] shepherd review of draft-ietf-ace-cbor-web-token-11 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 23:18:06 -0000 VGhhbmtzIGZvciB0aGUgZGV0YWlsZWQgcmVhZCwgQmVuLiAgV2lsbCBkby4NCg0KCQkJCS0tIE1p a2UNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEJlbmphbWluIEthZHVrIFtt YWlsdG86a2FkdWtAbWl0LmVkdV0gDQpTZW50OiBGcmlkYXksIEZlYnJ1YXJ5IDIsIDIwMTggMjoy NSBQTQ0KVG86IGFjZUBpZXRmLm9yZzsgZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW5AaWV0 Zi5vcmcNClN1YmplY3Q6IHNoZXBoZXJkIHJldmlldyBvZiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdl Yi10b2tlbi0xMQ0KDQpIaSBhbGwsDQoNCldlJ3JlIGdldHRpbmcgcmVhZHkgdG8gc2VuZCB0aGlz IHRvIEthdGhsZWVuIGZvciBwcm9jZXNzaW5nIChob3BlZnVsbHkgdG8gZmluaXNoIGJlZm9yZSBo ZXIgdGVybSBhcyBBRCBkb2VzISksIGJ1dCB0aGVyZSBhcmUgYSBmZXcgbml0cyB0aGF0IHNob3Vs ZCBiZSBmaXhlZCB3aXRoIGEgbmV3IHJldiBiZWZvcmUgd2UgYWN0dWFsbHkgcHVzaCB0aGUgYnV0 dG9uLg0KDQpXZSBjdXJyZW50bHkgaGF2ZSBhbiBpbmZvcm1hdGlvbmFsIHJlZmVyZW5jZSB0byBS RkMgNTIyNiwgd2hpY2ggaGFzIHNpbmNlIGJlZW4gcmVwbGFjZWQgYnkgUkZDIDgxMjY7IHdlIHNo b3VsZCB1cGRhdGUgb3VyIGNpdGF0aW9uIHRvIHRoZSBuZXdlciBkb2N1bWVudCB3aXRoIGd1aWRl bGluZXMgZm9yIHdyaXRpbmcgSUFOQSBjb25zaWRlcmF0aW9ucy4NCg0KSW4gc2VjdGlvbiA5LjEg dGhlIHNlY29uZCBwYXJnYXJhcGggc2F5cyB0aGF0IHRoZSB2YWx1ZXMgYXJlIHJlZ2lzdGVyZCBv biBhICJTcGVjaWZpY2F0aW9uIFJlcXVpcmVkIiBiYXNpcywgYnV0IHdlIGhhdmUgc29tZSByYW5n ZXMgdGhhdCBhcmUganVzdCAiRXhwZXJ0IFJldmlldyIuICBTbyBJIHRoaW5rIHRoaXMgdGV4dCBz aG91bGQgc2F5ICJFeHBlcnQgUmV2aWV3IiBpbnN0ZWFkICh3aXRoIHNvbWUgb2YgdGhlIGd1aWRh bmNlIHRvIHRoZSBleHBlcnRzIGJlaW5nIHRoYXQgY2VydGFpbiBzdWJyYW5nZXMgaGF2ZSBhZGRp dGlvbmFsIHJlcXVpcmVtZW50cykuDQoNCldlIGFsc28gbm90ZSB0aGF0IHRoZSBFeHBlcnRzIHNo b3VsZCBjb25zaWRlciAid2hldGhlciBpdCBpcyB1c2VmdWwgb25seSBmb3IgYSBzaW5nbGUgYXBw bGljYXRpb24iLCBhbmQgaXQncyBub3QgZW50aXJlbHkgY2xlYXIgdG8gbWUgd2hhdCB0aGUgcmV1 c2x0IG9mIHRoYXQgY29uc2lkZXJhdGlvbiBzaG91bGQgYmUuICBJcyBvbmx5IGJlaW5nIHVzZWZ1 bCBmb3IgYSBzaW5nbGUgYXBwbGljYXRpb24gc3VwcG9zZWQgdG8gYmUgZ3JvdW5kcyBmb3IgcmVq ZWN0aW5nIGEgcmVnaXN0cmF0aW9uPyAgKFRoYXQgZG9lc24ndCBzZWVtIG5lY2Vzc2FyaWx5IHRy dWUsIGZvciB0aGUgRXhwZXJ0IFJldmlldyByYW5nZS4pICBPciBpcyB0aGF0IGp1c3QgYSBmYWN0 b3IgZm9yIHdoZXRoZXIgIm5pY2UtbG9va2luZyINCm5hbWVzIHNob3VsZCBiZSBhbGxvd2VkIGZv ciB0aGVtPyAgT3Igc29tZXRoaW5nIGVsc2U/DQoNCkluIHNlY3Rpb24gOS40LCB3ZSBhdHRlbXB0 IHRvIHJlZ2lzdGVyIGEgdmFsdWUgZnJvbSB0aGUgQ0JPUiBUYWcgcmVnaXN0cnk7IGhvd2V2ZXIs IHRoZSB0ZW1wbGF0ZSBpbiBSRkMgNzA0OSBpbmNsdWRlcyBhICJkZXNjcmlwdGlvbiBvZiBzZW1h bnRpY3MiIGZpZWxkLCBhbmQgbm90IHRoZSAicmVmZXJlbmNlIiBmaWVsZCB0aGF0IHdlIHByb3Zp ZGUuDQoNCkZpbmFsbHksIGluIHRoZSBhY2tub3dsZWRnbWVudHMsIHdlIGNhbiBhc2sgdGhlIFJG QyBFZGl0b3IgdG8gdXNlIHRoZSBub24tQVNDSUkgIkfFkXJhbiIgaWYgaGUgc28gZGVzaXJlcy4g IChMYXN0IEkgaGVhcmQgdGhlIHRvb2xpbmcgaXNuJ3QgdGhlcmUgdG8gdXNlIG5vbi1BU0NJSSBm b3IgaW50ZXJuZXQgZHJhZnRzIHlldCwgdGhvdWdoLikNCg0KQXV0aG9ycywgd2lsbCB5b3UgYmUg YWJsZSB0byBwcmVwYXJlIGEgbmV3IHZlcnNpb24gd2l0aCB0aGVzZSBjaGFuZ2VzPw0KDQpUaGFu a3MsDQoNCkJlbg0K From nobody Fri Feb 2 21:10:56 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40113126D05; Fri, 2 Feb 2018 21:10:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QUNFv-k3geC3; Fri, 2 Feb 2018 21:10:53 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D512126CF6; Fri, 2 Feb 2018 21:10:52 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w135AnGV025620; Sat, 3 Feb 2018 06:10:50 +0100 (CET) Received: from [192.168.217.102] (p5DC7EAF5.dip0.t-ipconnect.de [93.199.234.245]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zYMPj5SWTzDXbY; Sat, 3 Feb 2018 06:10:49 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Carsten Bormann In-Reply-To: <20180202222446.GJ12363@mit.edu> Date: Sat, 3 Feb 2018 06:10:48 +0100 Cc: ace@ietf.org, draft-ietf-ace-cbor-web-token@ietf.org X-Mao-Original-Outgoing-Id: 539327447.62384-b20d1900082156f9d35083706983d6bc Content-Transfer-Encoding: quoted-printable Message-Id: <39174C5F-1C1F-40A2-96BF-7DEBCA9A95D4@tzi.org> References: <20180202222446.GJ12363@mit.edu> To: Benjamin Kaduk X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [Ace] shepherd review of draft-ietf-ace-cbor-web-token-11 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 05:10:55 -0000 On Feb 2, 2018, at 23:24, Benjamin Kaduk wrote: >=20 > Finally, in the acknowledgments, we can ask the RFC Editor to use > the non-ASCII "G=C5=91ran" if he so desires. (Last I heard the = tooling > isn't there to use non-ASCII for internet drafts yet, though.) We have the same issue in RFC 8323-to-be (CoAP over TCP), and the RFC = editor is in the process of figuring out how to handle Swedish umlauts = in names (UTF-8 not just yet!). So don=E2=80=99t worry about this too = much now; the RFC editor will fix it. Gr=C3=BC=C3=9Fe, Carsten From nobody Fri Feb 2 21:16:02 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F223126CF6; Fri, 2 Feb 2018 21:16:00 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.71.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151763496034.14536.12946429886934673921@ietfa.amsl.com> Date: Fri, 02 Feb 2018 21:16:00 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-cbor-web-token-12.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 05:16:00 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : CBOR Web Token (CWT) Authors : Michael B. Jones Erik Wahlström Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-cbor-web-token-12.txt Pages : 25 Date : 2018-02-02 Abstract: CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR) and CBOR Object Signing and Encryption (COSE) is used for added application layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-12 https://datatracker.ietf.org/doc/html/draft-ietf-ace-cbor-web-token-12 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-cbor-web-token-12 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Feb 2 21:22:36 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7414312D954 for ; Fri, 2 Feb 2018 21:22:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zOVpBriFtpLK for ; Fri, 2 Feb 2018 21:22:32 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0134.outbound.protection.outlook.com [104.47.32.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BFDD127419 for ; Fri, 2 Feb 2018 21:22:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=RvJxZNvN8kVC4IogJePCrzRcCysx/khPZtQxoO5A3Zk=; b=ccKoHBygkdU/GXqgUwhUpEXZkcvw851/uyDTFZ5TS4t3Rvu/oADNHgRT4qEIdRB/bRIK96RDY4CSZZcY6Ht7dEwcP8UNZVUvQ0aRtKej8L0p5ezzUblq+CuqG0xcJcqTKjFzttifK8HENQT/PuK0HNsBtMRoRfvRfa5v5bdfy3k= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1023.namprd21.prod.outlook.com (52.132.117.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.485.5; Sat, 3 Feb 2018 05:22:28 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a%6]) with mapi id 15.20.0485.006; Sat, 3 Feb 2018 05:22:28 +0000 From: Mike Jones To: "ace@ietf.org" Thread-Topic: CBOR Web Token (CWT) draft addressing shepherd review comments Thread-Index: AdOcq7cDCWJjgb+2RaiH1xGXKgeE9g== Date: Sat, 3 Feb 2018 05:22:28 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.47.88.236] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1023; 7:tFbvSjXS9Zlb69fg2c9xy+zYYrSpqZySGkZr0M9dTirK65fy+7cUgIRw9wph1+lx1/iwTmVQN2avySQFZHZsiBhxtCljoPl0JdfHj049c3PWUEMX8oxKMQu99xtU8R8cPS0tCQYsO6x2+4xUGG8ftYOfHh1zc0nStt45O4PaAH6RdBQqUeJwp3cFiqhZlspY8aPXIxXrpdLH8d4FbZ+58st/d2zW5xqO/8h/nEU7AQvUhJK/GDgHmmJewbj91qaB x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 87dfc7a2-2073-4349-554b-08d56ac61e11 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1023; x-ms-traffictypediagnostic: SN6PR2101MB1023: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(31418570063057)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(8121501046)(5005006)(3231101)(2400082)(944501161)(3002001)(93006095)(93001095)(10201501046)(6055026)(61426038)(61427038)(6041288)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:SN6PR2101MB1023; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1023; x-forefront-prvs: 05724A8921 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(39380400002)(396003)(346002)(366004)(376002)(209900001)(199004)(189003)(790700001)(5660300001)(102836004)(7696005)(316002)(99286004)(1730700003)(6506007)(6916009)(8676002)(25786009)(7736002)(81156014)(81166006)(8936002)(72206003)(5630700001)(53376002)(3660700001)(2906002)(74316002)(186003)(8990500004)(966005)(3280700002)(10290500003)(14454004)(478600001)(86362001)(26005)(68736007)(5640700003)(9686003)(97736004)(53936002)(236005)(10090500001)(55016002)(66066001)(54896002)(6306002)(2900100001)(59450400001)(22452003)(105586002)(86612001)(106356001)(6346003)(33656002)(2351001)(5250100002)(2501003)(606006)(6436002)(6116002)(3846002)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1023; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: Oc8YuF260lF1sxyveDLC7WhqJir+4TGvkzx6woBB6YQs4vzQnn2Aad80AGVAf0Y/TvMPehwdqJVUQjUBE5EvRA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB094347EACC3646262D2C3218F5F80SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 87dfc7a2-2073-4349-554b-08d56ac61e11 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Feb 2018 05:22:28.2433 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1023 Archived-At: Subject: [Ace] CBOR Web Token (CWT) draft addressing shepherd review comments X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 05:22:35 -0000 --_000_SN6PR2101MB094347EACC3646262D2C3218F5F80SN6PR2101MB0943_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable The CBOR Web Token (CWT) specification has been updated to address the shep= herd comments by Benjamin Kaduk. Changes were: * Updated the RFC 5226 reference to RFC 8126. * Made the IANA registration criteria consistent across sections. * Stated that registrations for the limited set of values between -256 = and 255 and strings of length 1 are to be restricted to claims with general= applicability. * Changed the "Reference" field name to "Description of Semantics" in t= he CBOR Tag registration request. * Asked the RFC Editor whether it is possible to preserve the non-ASCII= spellings of the names Erik Wahlstr=F6m and G=F6ran Selander in the final = specification. Thanks to Ben for his careful review of the specification! The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-12 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cbor-web-token-12.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=3D1776 and = as @selfissued. --_000_SN6PR2101MB094347EACC3646262D2C3218F5F80SN6PR2101MB0943_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

The CBOR Web Token (CWT) specification has been upda= ted to address the shepherd comments by Benjamin Kaduk.  Changes were:=

  • Updated the RFC 5226 reference to RFC 8126.
  • Mad= e the IANA registration criteria consistent across sections.
  • Stated that registrations for the limited set of values between -256= and 255 and strings of length 1 are to be restricted to claims with genera= l applicability.
  • Changed the "Reference" fie= ld name to "Description of Semantics" in the CBOR Tag registratio= n request.
  • Asked the RFC Editor whether it is possible= to preserve the non-ASCII spellings of the names Erik Wahlstr=F6m and G=F6= ran Selander in the final specification.

 

Thanks to Ben for his careful review of the specific= ation!

 

The specification is available at:

 

An HTML-formatted version is also available at:=

--_000_SN6PR2101MB094347EACC3646262D2C3218F5F80SN6PR2101MB0943_-- From nobody Fri Feb 2 21:24:00 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B605612D954; Fri, 2 Feb 2018 21:23:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CSCsNgBbgoUi; Fri, 2 Feb 2018 21:23:56 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0131.outbound.protection.outlook.com [104.47.38.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B8AC127419; Fri, 2 Feb 2018 21:23:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=fDRr3CnDKzbe3CwJrISPimk5MsHWITVhHoD+TxImBG0=; b=lyCG6pI2eZXbosRLBMmzEOwosnGOKfagVtVYoJUHUTpMN8byZFRUa06rIaxgt8xiQn9vuDpiz3HIOB2zFguXNRO5EfMQgS5obtI4qQPLFqliOaq45OplQ+Ni16ryigYN+lsEuq+7X2nuvlr11jV0gt8d7qiENWfVs2ivxFvfPso= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0911.namprd21.prod.outlook.com (52.132.117.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.485.5; Sat, 3 Feb 2018 05:23:54 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a%6]) with mapi id 15.20.0485.006; Sat, 3 Feb 2018 05:23:54 +0000 From: Mike Jones To: Benjamin Kaduk , "ace@ietf.org" , "draft-ietf-ace-cbor-web-token@ietf.org" Thread-Topic: shepherd review of draft-ietf-ace-cbor-web-token-11 Thread-Index: AQHTnHSoJbM2laX2yEKgYqoNmy7brKOSJTbg Date: Sat, 3 Feb 2018 05:23:54 +0000 Message-ID: References: <20180202222446.GJ12363@mit.edu> In-Reply-To: <20180202222446.GJ12363@mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.47.88.236] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0911; 7:4+OqcN1s/18zx4wSaxkYkK1Fxd3yhFV1dlFZRlZTkpHQ6crCecPu5cCIMhrj2x8XVxY6L1TVh/63kJ7gL1v23uomkwp0NiRrtmohB6nJUobAatdjgYMQgjZ16dxlFNCNJVQm7w1CeNTCS9kseYxVLwJluDZt341x3Dp0fEwfGGltgEdT+Q1nCo/VZB6uQCGNQUniiFLhYAjn9LZMJUE+yAtJ4Kvd0kfOFKlDr6120W9dHCJQeVfJt5cFMSBPTVzk x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 57e82c00-b61a-4e3b-ab96-08d56ac65180 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB0911; x-ms-traffictypediagnostic: SN6PR2101MB0911: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3002001)(3231101)(2400082)(944501161)(10201501046)(6055026)(61426038)(61427038)(6041288)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:SN6PR2101MB0911; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0911; x-forefront-prvs: 05724A8921 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(376002)(39860400002)(366004)(346002)(39380400002)(199004)(189003)(53754006)(13464003)(10090500001)(6346003)(229853002)(22452003)(10290500003)(2906002)(110136005)(26005)(7736002)(8936002)(305945005)(966005)(102836004)(86362001)(2171002)(76176011)(59450400001)(53546011)(7696005)(6506007)(3280700002)(2950100002)(74316002)(2201001)(3846002)(6116002)(316002)(97736004)(3660700001)(2900100001)(105586002)(186003)(66066001)(86612001)(6246003)(6436002)(5660300001)(106356001)(33656002)(72206003)(2501003)(5250100002)(8990500004)(478600001)(25786009)(81166006)(81156014)(99286004)(8676002)(6306002)(55016002)(68736007)(9686003)(53936002)(14454004); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0911; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: v5tknEcvx7MdfvX9nrRKLU5UqEEEUJ7MRH6PJgL/J4y8oDEQG3XKb6S8kh3tQH7wvC/0D/rs0jjxIl5s/Hg39w== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 57e82c00-b61a-4e3b-ab96-08d56ac65180 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Feb 2018 05:23:54.4798 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0911 Archived-At: Subject: Re: [Ace] shepherd review of draft-ietf-ace-cbor-web-token-11 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 05:23:59 -0000 VGhhbmtzIGZvciB5b3VyIHVzZWZ1bCByZXZpZXcsIEJlbi4gIEkgYmVsaWV2ZSB0aGF0IGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMiBh ZGRyZXNzZXMgYWxsIHlvdXIgY29tbWVudHMgYW5kIGlzIHJlYWR5IHRvIHNlbmQgdG8gS2F0aGxl ZW4uDQoNCgkJCQlCZXN0IHdpc2hlcywNCgkJCQktLSBNaWtlDQoNCi0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT4gDQpTZW50OiBG cmlkYXksIEZlYnJ1YXJ5IDIsIDIwMTggMjoyNSBQTQ0KVG86IGFjZUBpZXRmLm9yZzsgZHJhZnQt aWV0Zi1hY2UtY2Jvci13ZWItdG9rZW5AaWV0Zi5vcmcNClN1YmplY3Q6IHNoZXBoZXJkIHJldmll dyBvZiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMQ0KDQpIaSBhbGwsDQoNCldlJ3Jl IGdldHRpbmcgcmVhZHkgdG8gc2VuZCB0aGlzIHRvIEthdGhsZWVuIGZvciBwcm9jZXNzaW5nICho b3BlZnVsbHkgdG8gZmluaXNoIGJlZm9yZSBoZXIgdGVybSBhcyBBRCBkb2VzISksIGJ1dCB0aGVy ZSBhcmUgYSBmZXcgbml0cyB0aGF0IHNob3VsZCBiZSBmaXhlZCB3aXRoIGEgbmV3IHJldiBiZWZv cmUgd2UgYWN0dWFsbHkgcHVzaCB0aGUgYnV0dG9uLg0KDQpXZSBjdXJyZW50bHkgaGF2ZSBhbiBp bmZvcm1hdGlvbmFsIHJlZmVyZW5jZSB0byBSRkMgNTIyNiwgd2hpY2ggaGFzIHNpbmNlIGJlZW4g cmVwbGFjZWQgYnkgUkZDIDgxMjY7IHdlIHNob3VsZCB1cGRhdGUgb3VyIGNpdGF0aW9uIHRvIHRo ZSBuZXdlciBkb2N1bWVudCB3aXRoIGd1aWRlbGluZXMgZm9yIHdyaXRpbmcgSUFOQSBjb25zaWRl cmF0aW9ucy4NCg0KSW4gc2VjdGlvbiA5LjEgdGhlIHNlY29uZCBwYXJnYXJhcGggc2F5cyB0aGF0 IHRoZSB2YWx1ZXMgYXJlIHJlZ2lzdGVyZCBvbiBhICJTcGVjaWZpY2F0aW9uIFJlcXVpcmVkIiBi YXNpcywgYnV0IHdlIGhhdmUgc29tZSByYW5nZXMgdGhhdCBhcmUganVzdCAiRXhwZXJ0IFJldmll dyIuICBTbyBJIHRoaW5rIHRoaXMgdGV4dCBzaG91bGQgc2F5ICJFeHBlcnQgUmV2aWV3IiBpbnN0 ZWFkICh3aXRoIHNvbWUgb2YgdGhlIGd1aWRhbmNlIHRvIHRoZSBleHBlcnRzIGJlaW5nIHRoYXQg Y2VydGFpbiBzdWJyYW5nZXMgaGF2ZSBhZGRpdGlvbmFsIHJlcXVpcmVtZW50cykuDQoNCldlIGFs c28gbm90ZSB0aGF0IHRoZSBFeHBlcnRzIHNob3VsZCBjb25zaWRlciAid2hldGhlciBpdCBpcyB1 c2VmdWwgb25seSBmb3IgYSBzaW5nbGUgYXBwbGljYXRpb24iLCBhbmQgaXQncyBub3QgZW50aXJl bHkgY2xlYXIgdG8gbWUgd2hhdCB0aGUgcmV1c2x0IG9mIHRoYXQgY29uc2lkZXJhdGlvbiBzaG91 bGQgYmUuICBJcyBvbmx5IGJlaW5nIHVzZWZ1bCBmb3IgYSBzaW5nbGUgYXBwbGljYXRpb24gc3Vw cG9zZWQgdG8gYmUgZ3JvdW5kcyBmb3IgcmVqZWN0aW5nIGEgcmVnaXN0cmF0aW9uPyAgKFRoYXQg ZG9lc24ndCBzZWVtIG5lY2Vzc2FyaWx5IHRydWUsIGZvciB0aGUgRXhwZXJ0IFJldmlldyByYW5n ZS4pICBPciBpcyB0aGF0IGp1c3QgYSBmYWN0b3IgZm9yIHdoZXRoZXIgIm5pY2UtbG9va2luZyIN Cm5hbWVzIHNob3VsZCBiZSBhbGxvd2VkIGZvciB0aGVtPyAgT3Igc29tZXRoaW5nIGVsc2U/DQoN CkluIHNlY3Rpb24gOS40LCB3ZSBhdHRlbXB0IHRvIHJlZ2lzdGVyIGEgdmFsdWUgZnJvbSB0aGUg Q0JPUiBUYWcgcmVnaXN0cnk7IGhvd2V2ZXIsIHRoZSB0ZW1wbGF0ZSBpbiBSRkMgNzA0OSBpbmNs dWRlcyBhICJkZXNjcmlwdGlvbiBvZiBzZW1hbnRpY3MiIGZpZWxkLCBhbmQgbm90IHRoZSAicmVm ZXJlbmNlIiBmaWVsZCB0aGF0IHdlIHByb3ZpZGUuDQoNCkZpbmFsbHksIGluIHRoZSBhY2tub3ds ZWRnbWVudHMsIHdlIGNhbiBhc2sgdGhlIFJGQyBFZGl0b3IgdG8gdXNlIHRoZSBub24tQVNDSUkg IkfFkXJhbiIgaWYgaGUgc28gZGVzaXJlcy4gIChMYXN0IEkgaGVhcmQgdGhlIHRvb2xpbmcgaXNu J3QgdGhlcmUgdG8gdXNlIG5vbi1BU0NJSSBmb3IgaW50ZXJuZXQgZHJhZnRzIHlldCwgdGhvdWdo LikNCg0KQXV0aG9ycywgd2lsbCB5b3UgYmUgYWJsZSB0byBwcmVwYXJlIGEgbmV3IHZlcnNpb24g d2l0aCB0aGVzZSBjaGFuZ2VzPw0KDQpUaGFua3MsDQoNCkJlbg0K From nobody Fri Feb 2 21:28:04 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF27B12D957 for ; Fri, 2 Feb 2018 21:28:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gy7HaoP-ygJE for ; Fri, 2 Feb 2018 21:28:00 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B947127419 for ; Fri, 2 Feb 2018 21:28:00 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w135RvQ4007950; Sat, 3 Feb 2018 06:27:57 +0100 (CET) Received: from [192.168.217.102] (p5DC7EAF5.dip0.t-ipconnect.de [93.199.234.245]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zYMnT0s3PzDXbf; Sat, 3 Feb 2018 06:27:57 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Carsten Bormann In-Reply-To: Date: Sat, 3 Feb 2018 06:27:56 +0100 Cc: "ace@ietf.org" X-Mao-Original-Outgoing-Id: 539328475.0935431-5f279b8fb9e58cbc7382853b05ad1a97 Content-Transfer-Encoding: quoted-printable Message-Id: <3E521E39-0169-4A13-A82D-DA874E99DDDA@tzi.org> References: To: Mike Jones X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [Ace] CBOR Web Token (CWT) draft addressing shepherd review comments X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 05:28:02 -0000 =C2=BB Depending upon the values being requested, registration requests are=09 evaluated on a Standards Track Required, Specification Required,=09 Expert Review, or Private Use basis [RFC8126] =C2=AB This might give the impression that IANA registrations can be made on a = =E2=80=9CPrivate Use=E2=80=9D basis. RFC 8126 Section 4.1 says about Private Use: [=E2=80=A6] IANA does not record assignments from registries or ranges with this policy (and therefore there is no need for IANA to review them) and assignments are not generally useful for broad interoperability. It is the responsibility of the sites making use of the Private Use range to ensure that no conflicts occur (within the intended scope of use). Maybe it is better to just point at the section giving the actual = policies? Gr=C3=BC=C3=9Fe, Carsten From nobody Fri Feb 2 21:49:01 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3993F1274D2 for ; Fri, 2 Feb 2018 21:49:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.02 X-Spam-Level: X-Spam-Status: No, score=-2.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CQzRsExceXj9 for ; Fri, 2 Feb 2018 21:48:58 -0800 (PST) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0099.outbound.protection.outlook.com [104.47.34.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61946127419 for ; Fri, 2 Feb 2018 21:48:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=47qD6aNTckekNPHADssRHwJvVnj4AUDc7NcXuZZ8cS8=; b=HJ6nBRtdIRSqertUV4vRDSxareYj0dRhY29Lv3Q42KU9wXoIt275Te3BgkYvu9HKhnF2dXigznjTrAMVLXY3BPCb594OV3Wb19+Zcbi9/xlBy040FfLmEADtYWTSfj2uR+U3xAdCnm/fS/YXm7S7+tvNZcKpCiWWxcPF7H8w8NU= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1087.namprd21.prod.outlook.com (52.132.115.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.485.6; Sat, 3 Feb 2018 05:48:57 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a%6]) with mapi id 15.20.0485.006; Sat, 3 Feb 2018 05:48:57 +0000 From: Mike Jones To: Carsten Bormann CC: "ace@ietf.org" Thread-Topic: [Ace] CBOR Web Token (CWT) draft addressing shepherd review comments Thread-Index: AdOcq7cDCWJjgb+2RaiH1xGXKgeE9gABAfkAAAClXmA= Date: Sat, 3 Feb 2018 05:48:56 +0000 Message-ID: References: <3E521E39-0169-4A13-A82D-DA874E99DDDA@tzi.org> In-Reply-To: <3E521E39-0169-4A13-A82D-DA874E99DDDA@tzi.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.47.88.236] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1087; 7:KKrUAqX1+HNsF+T7iU7yc4F8AoD5KHDA+ibgpL2pU5FxQoDLIB69iAiVT+fplm3B8jgrgBULh6H7vxQ85tBPLw2iJsWcO2D/HnSD9rM9GeclyOiAoB0hS6Q/W/en0KRMd6j9QPF7YKFd9GiqUhsDL4GrNxD5h6nfRtEruXx2lZGmlld2BHO1wfYgPHdC8xlIPgYG0uRPXM8tLlc/0roXPLt25bM+xpYU2s9GM0nL9QFgxzvJX/fFDoTNubNhSC8H x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 91c698cf-2be1-4370-68a5-08d56ac9d107 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1087; x-ms-traffictypediagnostic: SN6PR2101MB1087: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(89211679590171); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(8121501046)(5005006)(3231101)(2400082)(944501161)(10201501046)(93006095)(93001095)(3002001)(6055026)(61426038)(61427038)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:SN6PR2101MB1087; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1087; x-forefront-prvs: 05724A8921 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(396003)(346002)(39860400002)(366004)(39380400002)(189003)(199004)(13464003)(6436002)(105586002)(6116002)(478600001)(68736007)(10090500001)(2900100001)(2906002)(8676002)(81156014)(81166006)(4326008)(3280700002)(106356001)(72206003)(97736004)(305945005)(5250100002)(22452003)(8990500004)(74316002)(3660700001)(316002)(7736002)(33656002)(2950100002)(9686003)(86362001)(6506007)(102836004)(25786009)(6246003)(6916009)(53936002)(14454004)(66066001)(59450400001)(99286004)(53546011)(26005)(186003)(3846002)(7696005)(6346003)(229853002)(5660300001)(10290500003)(55016002)(76176011)(86612001)(8936002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1087; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: 0zCpPF/YyWO3+tbSLSomdtyN18HwBKoR1bfSRaWeyoUe7tM20sZr2neC2f7KpKr6u2PJQ+z0pLa2F1opMLu+1A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 91c698cf-2be1-4370-68a5-08d56ac9d107 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Feb 2018 05:48:56.9837 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1087 Archived-At: Subject: Re: [Ace] CBOR Web Token (CWT) draft addressing shepherd review comments X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 05:49:00 -0000 R29vZCBwb2ludC4gIEknbGwgbWFrZSBhIG5vdGUgdG8gdXBkYXRlIHRoZSBkZXNjcmlwdGlvbiB0 aGUgbmV4dCB0aW1lIHdlIHB1Ymxpc2ggYSBkcmFmdCB0byBub3QgaW1wbHkgdGhhdCB2YWx1ZXMg aW4gdGhlIFByaXZhdGUgVXNlIHJhbmdlIGFyZSByZWdpc3RlcmVkLiAgSSBkb24ndCB0aGluayBp dCdzIHdvcnRoIHB1Ymxpc2hpbmcgYW5vdGhlciBkcmFmdCBmb3IganVzdCB0aGlzIHVudGlsIHdl IHJlY2VpdmUgS2F0aGxlZW4ncyBBRCByZXZpZXcsIGF0IHdoaWNoIHBvaW50IEknbGwgYWRkcmVz cyBpdC4NCg0KCQkJCUdyw7zDn2UsDQoJCQkJLS0gTWlrZQkJCQ0KDQotLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KRnJvbTogQ2Fyc3RlbiBCb3JtYW5uIDxjYWJvQHR6aS5vcmc+IA0KU2VudDog RnJpZGF5LCBGZWJydWFyeSAyLCAyMDE4IDk6MjggUE0NClRvOiBNaWtlIEpvbmVzIDxNaWNoYWVs LkpvbmVzQG1pY3Jvc29mdC5jb20+DQpDYzogYWNlQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0Fj ZV0gQ0JPUiBXZWIgVG9rZW4gKENXVCkgZHJhZnQgYWRkcmVzc2luZyBzaGVwaGVyZCByZXZpZXcg Y29tbWVudHMNCg0KwrsNCkRlcGVuZGluZyB1cG9uIHRoZSB2YWx1ZXMgYmVpbmcgcmVxdWVzdGVk LCByZWdpc3RyYXRpb24gcmVxdWVzdHMgYXJlCQ0KZXZhbHVhdGVkIG9uIGEgU3RhbmRhcmRzIFRy YWNrIFJlcXVpcmVkLCBTcGVjaWZpY2F0aW9uIFJlcXVpcmVkLAkNCkV4cGVydCBSZXZpZXcsIG9y IFByaXZhdGUgVXNlIGJhc2lzIFtSRkM4MTI2XSDCqw0KDQpUaGlzIG1pZ2h0IGdpdmUgdGhlIGlt cHJlc3Npb24gdGhhdCBJQU5BIHJlZ2lzdHJhdGlvbnMgY2FuIGJlIG1hZGUgb24gYSDigJxQcml2 YXRlIFVzZeKAnSBiYXNpcy4NClJGQyA4MTI2IFNlY3Rpb24gNC4xIHNheXMgYWJvdXQgUHJpdmF0 ZSBVc2U6DQoNCiAgIFvigKZdIElBTkEgZG9lcyBub3QgcmVjb3JkIGFzc2lnbm1lbnRzIGZyb20g cmVnaXN0cmllcw0KICAgb3IgcmFuZ2VzIHdpdGggdGhpcyBwb2xpY3kgKGFuZCB0aGVyZWZvcmUg dGhlcmUgaXMgbm8gbmVlZCBmb3IgSUFOQQ0KICAgdG8gcmV2aWV3IHRoZW0pIGFuZCBhc3NpZ25t ZW50cyBhcmUgbm90IGdlbmVyYWxseSB1c2VmdWwgZm9yIGJyb2FkDQogICBpbnRlcm9wZXJhYmls aXR5LiAgSXQgaXMgdGhlIHJlc3BvbnNpYmlsaXR5IG9mIHRoZSBzaXRlcyBtYWtpbmcgdXNlDQog ICBvZiB0aGUgUHJpdmF0ZSBVc2UgcmFuZ2UgdG8gZW5zdXJlIHRoYXQgbm8gY29uZmxpY3RzIG9j Y3VyICh3aXRoaW4NCiAgIHRoZSBpbnRlbmRlZCBzY29wZSBvZiB1c2UpLg0KDQpNYXliZSBpdCBp cyBiZXR0ZXIgdG8ganVzdCBwb2ludCBhdCB0aGUgc2VjdGlvbiBnaXZpbmcgdGhlIGFjdHVhbCBw b2xpY2llcz8NCg0KR3LDvMOfZSwgQ2Fyc3Rlbg0KDQo= From nobody Sun Feb 4 23:01:28 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE61A1250B8 for ; Sun, 4 Feb 2018 23:01:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.602 X-Spam-Level: X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a1oLCEJAXB-O for ; Sun, 4 Feb 2018 23:01:20 -0800 (PST) Received: from se-out2.mx-wecloud.net (se-out2.mx-wecloud.net [89.221.255.177]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99D0E120727 for ; Sun, 4 Feb 2018 23:01:20 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out2.mx-wecloud.net (Postfix) with ESMTPS id 72F8B221F49 for ; Mon, 5 Feb 2018 07:01:16 +0000 (UTC) Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Mon, 5 Feb 2018 08:01:18 +0100 To: References: From: Ludwig Seitz Message-ID: <262e6170-c11f-cc61-356b-8f6e5f3cf040@ri.se> Date: Mon, 5 Feb 2018 08:01:12 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-3.sp.se (10.100.0.163) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=K9NSJ2eI c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=N659UExz7-8A:10 a=Op4juWPpsa0A:10 a=QLPfpYkryAO4RqcpiSkA:9 a=pILNOxqGKmIA:10 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 07:01:28 -0000 On 2018-02-01 14:59, Hannes Tschofenig wrote: > Hi all, > > the Client Token is a new mechanism in the ACE-OAuth that aims to solve > a scenario where the Client does not have connectivity to the > Authorization Server to obtain an access token while the Resource Server > does. > > The solution is therefore for the Client to use the Resource Server to > relay messages to the Authorization Server. > > While this sounds nice it does not follow the OAuth model and we, at > ARM, have not seen anyone requesting this feature. ~snip~ > In summary, I am again requesting that the Client Token functionality is > removed from the ACE-OAuth draft. > I agree that interest for this use case has been lukewarm at most in the WG. I will remove that feature from the draft in the next update. /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE SICS Phone +46(0)70-349 92 51 From nobody Sun Feb 4 23:56:07 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E73C1289B0 for ; Sun, 4 Feb 2018 23:56:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I1kgZ_WpZlTF for ; Sun, 4 Feb 2018 23:56:04 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DF371241F5 for ; Sun, 4 Feb 2018 23:56:04 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w157u1sg002938; Mon, 5 Feb 2018 08:56:01 +0100 (CET) Received: from [192.168.217.102] (p5DC7EAF5.dip0.t-ipconnect.de [93.199.234.245]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zZfzP1K1WzDXtr; Mon, 5 Feb 2018 08:56:01 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Carsten Bormann In-Reply-To: <262e6170-c11f-cc61-356b-8f6e5f3cf040@ri.se> Date: Mon, 5 Feb 2018 08:56:00 +0100 Cc: ace@ietf.org X-Mao-Original-Outgoing-Id: 539510158.850525-5c4f75dc6e4ff3356cc908af29fa43c9 Content-Transfer-Encoding: quoted-printable Message-Id: References: <262e6170-c11f-cc61-356b-8f6e5f3cf040@ri.se> To: Ludwig Seitz X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 07:56:07 -0000 On Feb 5, 2018, at 08:01, Ludwig Seitz wrote: >=20 > I agree that interest for this use case has been lukewarm at most in = the WG. Well, IoT is a vast field and we cannot expect all areas of it to be = represented equally well in the WG yet. > I will remove that feature from the draft in the next update. Right. But please put it into a separate draft, so we can =E2=80=94 develop it further and make it ready for use, and =E2=80=94 ensure that the base framework is prepared for additional = flows like this. Gr=C3=BC=C3=9Fe, Carsten From nobody Mon Feb 5 02:59:41 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14AB0129C6E for ; Mon, 5 Feb 2018 02:59:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 54xbFl3zBPQS for ; Mon, 5 Feb 2018 02:59:38 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0044.outbound.protection.outlook.com [104.47.2.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D00C4129C6D for ; Mon, 5 Feb 2018 02:59:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=+L/CK4xw86tqbm07oshKWEp/XQu1bXv9rg1t8AbwOls=; b=YAuVkFAttU6AKS65FJcNzRy0ZJ0cM39CjVuIxvkOX4NVjTgGA/b+1ivPg/efN11SMXXm1ibc/f/6OFubhzMkF22AHV3xKgnkoqzsPwTis600nJMLmiCvvkulw+Ci5V8I1WxbQv8JcGx1DJ/sOLYgLKFpLPkRemz2y+tfWVz2+Sk= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1508.eurprd08.prod.outlook.com (10.168.5.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.444.14; Mon, 5 Feb 2018 10:59:34 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b%14]) with mapi id 15.20.0464.015; Mon, 5 Feb 2018 10:59:34 +0000 From: Hannes Tschofenig To: Carsten Bormann , Ludwig Seitz CC: "ace@ietf.org" Thread-Topic: [Ace] Removal of the Client Token from ACE-OAuth draft Thread-Index: AdObY8LeTLQDRQpHTLmnZxVwN5CDtQC61hUAAAHp9AAABlLU8A== Date: Mon, 5 Feb 2018 10:59:34 +0000 Message-ID: References: <262e6170-c11f-cc61-356b-8f6e5f3cf040@ri.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [88.128.81.253] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1508; 7:HhP97O+3IdKK3YhrRCp9LcbtVNsRxjdZYmQo7W5ZN0ZNLbDI3v9dRvDgYMDdrSmmm2JBN4eCEgvgH+bLss3H9moxdkeRDzm5csWYrTGAROEm8Lq8rTNZZxuwT2k0dGvRUQg5UZi3Q8ozGhnC3qUgtuXw0oj6rRVh3hVcCfpJr5mQ/kpZBuwSmfx2gFwUoYL98Dw51FOpt4s9N4omuGnXIRTgaK3Tt/OWDj3GRHOyNEHT+xEXWRXaUTSQFBzqgC6Y x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 36079a06-e0ee-462e-6d39-08d56c878aca x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1508; x-ms-traffictypediagnostic: AM4PR0801MB1508: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(3231101)(2400082)(944501161)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041288)(20161123564045)(20161123558120)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:AM4PR0801MB1508; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1508; x-forefront-prvs: 0574D4712B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(346002)(376002)(39380400002)(39860400002)(366004)(189003)(199004)(40434004)(99286004)(3280700002)(59450400001)(72206003)(66066001)(76176011)(7696005)(478600001)(3660700001)(102836004)(74316002)(81156014)(8936002)(8676002)(81166006)(2900100001)(105586002)(106356001)(25786009)(2950100002)(5660300001)(9686003)(6436002)(55016002)(316002)(110136005)(6506007)(68736007)(33656002)(7736002)(305945005)(229853002)(53936002)(5250100002)(4326008)(6246003)(3846002)(6116002)(5890100001)(26005)(86362001)(2906002)(186003)(14454004)(97736004); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1508; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: h3rpu1vnhu742gGX0FUVMzO6Sc0vbI5ndlMkfa9+ky5Y/51JRM1T30K7scMg8Qx7/epHkj8bg2VEINbADqou+A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 36079a06-e0ee-462e-6d39-08d56c878aca X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Feb 2018 10:59:34.6449 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1508 Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 10:59:40 -0000 SGkgQ2Fyc3RlbiwNCg0KPiA+IEkgd2lsbCByZW1vdmUgdGhhdCBmZWF0dXJlIGZyb20gdGhlIGRy YWZ0IGluIHRoZSBuZXh0IHVwZGF0ZS4NCg0KPiBSaWdodC4gIEJ1dCBwbGVhc2UgcHV0IGl0IGlu dG8gYSBzZXBhcmF0ZSBkcmFmdCwgc28gd2UgY2FuIOKAlCBkZXZlbG9wIGl0IGZ1cnRoZXIgYW5k IG1ha2UgaXQgcmVhZHkgZm9yIHVzZSwgYW5kIOKAlCBlbnN1cmUgdGhhdCB0aGUgYmFzZSBmcmFt ZXdvcmsgaXMgcHJlcGFyZWQgZm9yIGFkZGl0aW9uYWwgZmxvd3MgbGlrZSB0aGlzLg0KDQpHb29k IGlkZWEgYW5kIG1heWJlIHdlIGNhbiBmaW5kIHNvbWVvbmUgd2hvIHZvbHVudGVlcnMgdG8gYmVj b21lIHRoZSBhdXRob3Igb2Ygc3VjaCBhIGRvY3VtZW50Lg0KDQpDaWFvDQpIYW5uZXMNCg0KSU1Q T1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2ht ZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3Ug YXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIg aW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVy IHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5m b3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Wed Feb 7 10:52:48 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 742871270B4; Wed, 7 Feb 2018 10:52:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gyZWtB_nduD4; Wed, 7 Feb 2018 10:52:44 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9B42124239; Wed, 7 Feb 2018 10:52:43 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 68415200A3; Wed, 7 Feb 2018 13:59:16 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 5098980E6E; Wed, 7 Feb 2018 13:52:42 -0500 (EST) From: Michael Richardson To: iot-dir CC: anima@ietf.org, 6tisch@ietf.org, ace@ietf.org In-Reply-To: <151802189682.4857.6673059210006508673.idtracker@ietfa.amsl.com> References: <151802189682.4857.6673059210006508673.idtracker@ietfa.amsl.com> X-Mailer: MH-E 8.6; nmh 1.7-RC3; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: [Ace] changes to draft-richardson-enrollment-roadmap-01.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Feb 2018 18:52:46 -0000 --=-=-= Content-Type: text/plain Htmlized: https://datatracker.ietf.org/doc/html/draft-richardson-enrollment-roadmap-01 diff: https://www.ietf.org/rfcdiff?url2=draft-richardson-enrollment-roadmap-01 I posted an -01 of the enrollment roadmap document. The intro says: There are numerous mechanisms being proposed to solve the problem of securely introducing a new devices into an existing managed network. This document provides an overview of the different mechanisms showing what technologies are common. The document starts with a diagram showing the various components and how they go together to form five enrollment scenarios. The work crosses many groups, but does not fit into any of them. The document might be good as a way to keep track of things, but may not be worth publishing. Yes, could go the wiki way, but I find it significantly less satisfying. In particular I'd like to include guidance on why one process vs another, which I think would be worth preserving. On the other hand, there are sections explaining which documents are of cross-WG interest, and if they have been adopted in any place (or not!!). That's really ephermeral information that doesn't belong in an RFC until it's been resolved. It would also be nice to have a different name than "Transition to Constrained Enrollment" that more accurately reflected the interests of that group of deployers (it includes Lighting/Fairhair, and electricity-AMI/Itron/Cisco.) If there are those who want to review/contribute to it, https://github.com/anima-wg/enrollment-roadmap.git might be the best place to send pull requests. I'm personally not enthralled by using github issues for discussion (I prefer email lists), but I don't object to it. If there is interest in publishing it, my suggestion is to use iot-dir to get some beef into it, and then submit as an AD-sponsored document. Alternatively saag. I think that the document should expand by about 4 pages of discussion, and then sit in stasis for awhile. The most significant change in -01 is that I changed how the boxes around the ascii art diagram are rendered. I hope that it is more readable that way. {If you haven't tried "asciio", I suggest you try it out.} Other than that, more text in the sections. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlp7SvkACgkQgItw+93Q 3WUPQwf/dIn2DMqtwO0/DWFJr1p5ilwkqsDkRPhkvzyQc/O6gzjw205RxZo8JL5W rAgLcx4e1OsRHaZgTSQmcMJVdL6rEDBBJPHuEIR2bmfPnBJjyZOUZGic6D38FZ44 nEhcm2r3Zewxhhu6QMica++TycKQi46Ceq20fkZuqm7qjahAdAvN5JaT5jdcQt0C i27aFqmMOrdu2xKy7Y13ajBkHplOteMBBuOm5ks70lLEhjil91yqeBXt5wg5Smze cOgfADdTHDuiTX77uIAEGMEchQeo+2eU61KrhdslwJ6L06S/AFNLNOLWAwCel/Kw BG9JxjCNRqhH1zPIr6qu/0H6WxOWBA== =SVmQ -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Feb 8 01:21:58 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF0BB12D874 for ; Thu, 8 Feb 2018 01:21:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.319 X-Spam-Level: X-Spam-Status: No, score=-4.319 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2lLgoeNzWrav for ; Thu, 8 Feb 2018 01:21:56 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 268DC12D86D for ; Thu, 8 Feb 2018 01:21:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1518081714; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=7pRGsLx3+JgAdJ6AWKkkKdxFQdhIqkxWvijT6WScjgk=; b=f6BZ4M8xjG97bcHAX5l+q4L3ifiMoM7zAuNXWXjbxY7lFisfloUxtlaRZLM65QHQ YbR6EklA/kOkdzr4g599pysaMEEmHIodtUeJ2RvszEr/EdJtNTTCtDcZYsET0DRU OI7pmGjyt6tSpGmlzXWIxMmWrXRXxT/chpcVT8LOY7c=; X-AuditID: c1b4fb2d-499ff70000005540-54-5a7c16b2eb24 Received: from ESESSHC013.ericsson.se (Unknown_Domain [153.88.183.57]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id ED.56.21824.2B61C7A5; Thu, 8 Feb 2018 10:21:54 +0100 (CET) Received: from ESESSMB107.ericsson.se ([169.254.7.108]) by ESESSHC013.ericsson.se ([153.88.183.57]) with mapi id 14.03.0352.000; Thu, 8 Feb 2018 10:21:54 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Hannes Tschofenig , "ace@ietf.org" Thread-Topic: [Ace] Removal of the Client Token from ACE-OAuth draft Thread-Index: AQHToL5BTLQDRQpHTLmnZxVwN5CDtQ== Date: Thu, 8 Feb 2018 09:21:52 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.3.170325 x-originating-ip: [153.88.183.148] Content-Type: multipart/alternative; boundary="_000_D6A1C6A49EE0Bgoranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupgkeLIzCtJLcpLzFFi42KZGbHdUneTWE2UwZs7chbfv/UwW9yccYrJ gcljzbw1jB5LlvxkCmCK4rJJSc3JLEst0rdL4MpY92EGY8Fmy4qDm3+yNjA+MO9i5OSQEDCR eLNiHnsXIxeHkMBhRonv7/9BOYsZJVb/OcIGUsUm4CLxoOERE4gtIhAk0fHzJ5gtLOAssf7q BBaIuIvE7kv/GCFsPYkJ0/aC2SwCKhKbWj+ygti8AhYSV+80soPYjAJiEt9PrQGbwywgLnHr yXwmiIsEJJbsOc8MYYtKvHz8D6xXFGjm3p52Noi4kkTjkiesEL2xEldf/mWCmC8ocXLmE5YJ jEKzkIydhaRsFpKyWYwcQHFNifW79CFKFCWmdD9kh7A1JFrnzIWyrSVa/zSzIKtZwMixilG0 OLW4ODfdyFgvtSgzubg4P08vL7VkEyMwfg5u+a27g3H1a8dDjAIcjEo8vFvuVEcJsSaWFVfm HmKU4GBWEuHdI1oTJcSbklhZlVqUH19UmpNafIhRmoNFSZz3pCdvlJBAemJJanZqakFqEUyW iYNTqoFxTcKHKZYbP4b5T/TL2bfE8PiJzn9b1DcvCtux5NVZ1VMLDp1mcywMOTTzSu3cisXu 2WtKlU2z5of/nKRR4Oj3VmXxhFwGbkuHb7+P1MywXHpDeZJs2Y/0mk8LY72Pv8j9J3eo+Kze BikmU3W+rQ4/tEXvnOG+EtPukTjNfIZfBJ/cldr6g/I+SizFGYmGWsxFxYkAwN1wHpsCAAA= Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Feb 2018 09:21:58 -0000 --_000_D6A1C6A49EE0Bgoranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSGFubmVzLA0KDQpGcm9tOiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzphY2Ut Ym91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZiBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVz LlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4+DQpE YXRlOiBUaHVyc2RheSAxIEZlYnJ1YXJ5IDIwMTggYXQgMTM6NTkNClRvOiAiYWNlQGlldGYub3Jn PG1haWx0bzphY2VAaWV0Zi5vcmc+IiA8YWNlQGlldGYub3JnPG1haWx0bzphY2VAaWV0Zi5vcmc+ Pg0KU3ViamVjdDogW0FjZV0gUmVtb3ZhbCBvZiB0aGUgQ2xpZW50IFRva2VuIGZyb20gQUNFLU9B dXRoIGRyYWZ0DQoNCkhpIGFsbCwNCg0KdGhlIENsaWVudCBUb2tlbiBpcyBhIG5ldyBtZWNoYW5p c20gaW4gdGhlIEFDRS1PQXV0aCB0aGF0IGFpbXMgdG8gc29sdmUgYSBzY2VuYXJpbyB3aGVyZSB0 aGUgQ2xpZW50IGRvZXMgbm90IGhhdmUgY29ubmVjdGl2aXR5IHRvIHRoZSBBdXRob3JpemF0aW9u IFNlcnZlciB0byBvYnRhaW4gYW4gYWNjZXNzIHRva2VuIHdoaWxlIHRoZSBSZXNvdXJjZSBTZXJ2 ZXIgZG9lcy4NCg0KVGhlIHNvbHV0aW9uIGlzIHRoZXJlZm9yZSBmb3IgdGhlIENsaWVudCB0byB1 c2UgdGhlIFJlc291cmNlIFNlcnZlciB0byByZWxheSBtZXNzYWdlcyB0byB0aGUgQXV0aG9yaXph dGlvbiBTZXJ2ZXIuDQoNCldoaWxlIHRoaXMgc291bmRzIG5pY2UgaXQgZG9lcyBub3QgZm9sbG93 IHRoZSBPQXV0aCBtb2RlbCBhbmQgd2UsIGF0IEFSTSwgaGF2ZSBub3Qgc2VlbiBhbnlvbmUgcmVx dWVzdGluZyB0aGlzIGZlYXR1cmUuIEl0IGlzIGFsc28gbm90IGZ1bGx5IHNwZWNpZmllZCBpbiB0 aGUgc3BlYzogc2luY2UgSSBoYXZlIGJlZW4gZG9pbmcgYSBmb3JtYWwgYW5hbHlzaXMgb2YgdGhp cyBwcm90b2NvbCB2YXJpYW50IGZvciB0aGUgT0F1dGggU2VjdXJpdHkgV29ya3Nob3AgSSBoYWQg dG8gbm90aWNlIHRoYXQgaXQgaXMgbm90IHNlY3VyZS4gKEkgd2lsbCBwb3N0IHRoZSBwYXBlciB0 byB0aGUgbGlzdCBhc2FwLikNCg0KSGF2ZSB5b3UgcG9zdGVkIHRoaXM/IEkgY291bGRu4oCZdCBm aW5kIGl0IG15IEluYm94Lg0KDQpHw7ZyYW4NCg== --_000_D6A1C6A49EE0Bgoranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <4B59DB3C3F051743B42A1422D7A40B0F@ericsson.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj5IaSBIYW5uZXMs PC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9O Ij4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMXB0OyB0ZXh0 LWFsaWduOmxlZnQ7IGNvbG9yOmJsYWNrOyBCT1JERVItQk9UVE9NOiBtZWRpdW0gbm9uZTsgQk9S REVSLUxFRlQ6IG1lZGl1bSBub25lOyBQQURESU5HLUJPVFRPTTogMGluOyBQQURESU5HLUxFRlQ6 IDBpbjsgUEFERElORy1SSUdIVDogMGluOyBCT1JERVItVE9QOiAjYjVjNGRmIDFwdCBzb2xpZDsg Qk9SREVSLVJJR0hUOiBtZWRpdW0gbm9uZTsgUEFERElORy1UT1A6IDNwdCI+DQo8c3BhbiBzdHls ZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RnJvbTogPC9zcGFuPkFjZSAmbHQ7PGEgaHJlZj0ibWFpbHRv OmFjZS1ib3VuY2VzQGlldGYub3JnIj5hY2UtYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IG9uIGJl aGFsZiBvZiBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2No b2ZlbmlnQGFybS5jb20iPkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0Ozxicj4NCjxz cGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRlOiA8L3NwYW4+VGh1cnNkYXkgMSBGZWJy dWFyeSAyMDE4IGF0IDEzOjU5PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlRv OiA8L3NwYW4+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmFjZUBpZXRmLm9yZyI+YWNlQGlldGYub3Jn PC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFjZUBpZXRmLm9yZyI+YWNlQGlldGYub3Jn PC9hPiZndDs8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+U3ViamVjdDogPC9z cGFuPltBY2VdIFJlbW92YWwgb2YgdGhlIENsaWVudCBUb2tlbiBmcm9tIEFDRS1PQXV0aCBkcmFm dDxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VU TE9PS19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0iQk9SREVSLUxFRlQ6ICNiNWM0ZGYg NSBzb2xpZDsgUEFERElORzowIDAgMCA1OyBNQVJHSU46MCAwIDAgNTsiPg0KPGRpdiB4bWxuczp2 PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOnZtbCIgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWlj cm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQt Y29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29m ZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQw Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZp bHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBm b250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIg NCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05v cm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFw dDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVy bGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlv bjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWwtY29tcG9zZTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9y OndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgltc28tZmFyZWFzdC1s YW5ndWFnZTpFTi1VUzt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4w cHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDld Pjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0K PC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91 dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpz aGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjxkaXYgbGFuZz0iRU4tR0IiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkhpIGFsbCwgPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnRoZSBDbGllbnQg VG9rZW4gaXMgYSBuZXcgbWVjaGFuaXNtIGluIHRoZSBBQ0UtT0F1dGggdGhhdCBhaW1zIHRvIHNv bHZlIGEgc2NlbmFyaW8gd2hlcmUgdGhlIENsaWVudCBkb2VzIG5vdCBoYXZlIGNvbm5lY3Rpdml0 eSB0byB0aGUgQXV0aG9yaXphdGlvbiBTZXJ2ZXIgdG8gb2J0YWluIGFuIGFjY2VzcyB0b2tlbiB3 aGlsZSB0aGUgUmVzb3VyY2UgU2VydmVyIGRvZXMuDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ VGhlIHNvbHV0aW9uIGlzIHRoZXJlZm9yZSBmb3IgdGhlIENsaWVudCB0byB1c2UgdGhlIFJlc291 cmNlIFNlcnZlciB0byByZWxheSBtZXNzYWdlcyB0byB0aGUgQXV0aG9yaXphdGlvbiBTZXJ2ZXIu DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2hpbGUgdGhpcyBzb3VuZHMgbmljZSBpdCBkb2Vz IG5vdCBmb2xsb3cgdGhlIE9BdXRoIG1vZGVsIGFuZCB3ZSwgYXQgQVJNLCBoYXZlIG5vdCBzZWVu IGFueW9uZSByZXF1ZXN0aW5nIHRoaXMgZmVhdHVyZS4gSXQgaXMgYWxzbyBub3QgZnVsbHkgc3Bl Y2lmaWVkIGluIHRoZSBzcGVjOiBzaW5jZSBJIGhhdmUgYmVlbiBkb2luZyBhIGZvcm1hbCBhbmFs eXNpcyBvZiB0aGlzIHByb3RvY29sIHZhcmlhbnQgZm9yIHRoZQ0KIE9BdXRoIFNlY3VyaXR5IFdv cmtzaG9wIEkgaGFkIHRvIG5vdGljZSB0aGF0IGl0IGlzIG5vdCBzZWN1cmUuIChJIHdpbGwgcG9z dCB0aGUgcGFwZXIgdG8gdGhlIGxpc3QgYXNhcC4pPC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SGF2ZSB5 b3UgcG9zdGVkIHRoaXM/IEkgY291bGRu4oCZdCBmaW5kIGl0IG15IEluYm94LjwvZGl2Pg0KPGRp dj48YnI+DQo8L2Rpdj4NCjxkaXY+R8O2cmFuPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_D6A1C6A49EE0Bgoranselanderericssoncom_-- From nobody Thu Feb 8 02:38:57 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9313012D946 for ; Thu, 8 Feb 2018 02:38:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mIA2cFHRGuun for ; Thu, 8 Feb 2018 02:38:53 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0040.outbound.protection.outlook.com [104.47.0.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88C0812D944 for ; Thu, 8 Feb 2018 02:38:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=3AuoOFa+PT7Gfe6mA9dsJiv9GGWcZG9N+enJZnteoas=; b=pY43F9FCV+QNbF5RsNDcT7a5j0c5FJOsmn30NGVzPbxsdv7OjRoHKyRBGaonXPeaqXEf+hbMelpLHw5Jw7IRCZQUn82swibLLsw5g+DA5AYL89YOpJgcz3h+F3H5KwNnyaqZkNkN99MQm7EMqwtWDugu7KlNCnaLG078DilYtk4= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1585.eurprd08.prod.outlook.com (10.168.6.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.464.11; Thu, 8 Feb 2018 10:38:49 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b%14]) with mapi id 15.20.0485.009; Thu, 8 Feb 2018 10:38:49 +0000 From: Hannes Tschofenig To: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= , "ace@ietf.org" Thread-Topic: [Ace] Removal of the Client Token from ACE-OAuth draft Thread-Index: AQHToL5BTLQDRQpHTLmnZxVwN5CDtaOaSbbw Date: Thu, 8 Feb 2018 10:38:49 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [88.214.160.125] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1585; 7:oPzqTPmzSkHKycQJj7NP2yV3tJ2/O4O/J+evbcbpIaTEMP0UnONrpEhAhQySXEDJ3amYLwMT/jQ+UQtcOVVu0qpfGXhK+x8p2Yb+p2zEq8Lxa5b0V9Xa+R4j8YSmU8VcibgLnYWA2eYn9qDzQdj3HE1H8+77iJycfQDh/8wIKpNAIqaeOXpZiMNjHtsbqTv0mMPfikGb874F1kI74Mt4JjpIdlKyq7Tr0GcYwcmRq4+47pgJNB/oDC4ZaB07rz4d x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: eec93523-6fad-4df9-e488-08d56ee023d4 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1585; x-ms-traffictypediagnostic: AM4PR0801MB1585: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(37575265505322)(28532068793085)(158342451672863)(180628864354917)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3002001)(3231101)(2400082)(944501161)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123562045)(20161123560045)(6072148)(201708071742011); SRVR:AM4PR0801MB1585; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1585; x-forefront-prvs: 0577AD41D6 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(366004)(346002)(39380400002)(376002)(39860400002)(53754006)(189003)(199004)(40434004)(76176011)(59450400001)(3660700001)(97736004)(53546011)(6506007)(316002)(7696005)(229853002)(236005)(2906002)(55016002)(53936002)(6116002)(86362001)(6246003)(3846002)(790700001)(3280700002)(186003)(6436002)(33656002)(8676002)(14454004)(2501003)(5250100002)(966005)(72206003)(105586002)(478600001)(106356001)(81166006)(81156014)(9686003)(26005)(54896002)(9326002)(25786009)(606006)(6306002)(102836004)(68736007)(5890100001)(8936002)(66066001)(5660300001)(99286004)(2900100001)(110136005)(7736002)(2950100002)(74316002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1585; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: bdzq8MThGQ9vrcUY5x/UQ7ZWwRiKXZEJDL2AEi4EPi1A9zWLPE3xIlxnOiR7ARUJQCo/YRktwtcZgkFyVPkZag== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706A362392B8BD71B9A41D0FAF30AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: eec93523-6fad-4df9-e488-08d56ee023d4 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Feb 2018 10:38:49.4583 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1585 Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Feb 2018 10:38:57 -0000 --_000_AM4PR0801MB2706A362392B8BD71B9A41D0FAF30AM4PR0801MB2706_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgR8O2cmFuLA0KDQpJIGhhdmVu4oCZdCBwb3N0ZWQgdGhlIHdyaXRlLXVwIHlldCBzaW5jZSBp dCBpcyBhIHN1Ym1pc3Npb24gdG8gdGhlIHdvcmtzaG9wIGFuZCB0aGUgcGFwZXJzIGFyZSBjdXJy ZW50bHkgaW4gcmV2aWV3LiBBcyBtZW50aW9uZWQgdG8geW91IGF0IHRoZSBPTUEgbWVldGluZyB3 ZSBhcmUgY3VycmVudGx5IGF0dGVuZGluZyB0aGUgYW5hbHlzaXMgcmV2ZWFsZWQgdHdvIGlzc3Vl cywgbmFtZWx5IHRoZSBsYWNrIG9mIHN0YXRlZCBnb2FscyAod2hpY2ggbWFrZXMgYW55IHNlY3Vy aXR5IGFuYWx5c2lzIGNoYWxsZW5naW5nKSBhbmQgdGhlIGxhY2sgb2YgYXV0aGVudGljYXRpb24g ZnJvbSB0aGUgY2xpZW50IHRvIHRoZSBBUy4NCg0KSU1ITyBpdCBpcywgaG93ZXZlciwgb25seSBh IHNtYWxsIGRhdGEgcG9pbnQgaW4gdGhpcyBkaXNjdXNzaW9uLg0KDQpJIGJlbGlldmUgdGhlIG1v cmUgaW1wb3J0YW50IHF1ZXN0aW9uIGlzIHdoZXRoZXIgdGhlcmUgYXJlIHBlb3BsZSBpbiBpbnRl cmVzdGVkIGluIHRoaXMgc2NlbmFyaW8gb3Igbm90LiBJIGhhdmUgc3RhcnRlZCBteSBvcGluaW9u IGFib3V0IHRoaXMgYWxyZWFkeSBhdCBlYXJsaWVyIG1lZXRpbmdzLg0KDQpUaGVyZSBpcyBhbHNv IHRoZSBJUFIgZGlzY2xvc3VyZSB0aGF0IHNvbWUgZm9sa3MgbWF5IHRha2UgaW50byBhY2NvdW50 LCB3aGljaCB3YXMgcG9zdGVkIHRvIHRoZSBsaXN0OiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls LWFyY2hpdmUvd2ViL2FjZS9jdXJyZW50L21zZzAyNTcyLmh0bWwNCg0KU2luY2UgeW91IGhhdmUg bm90IHBvc3RlZCB5b3VyIHZpZXcgb24gdGhpcyB0b3BpYyB5ZXQgeW91IG1heSB3YW50IHRvIHRo aW5rIGFib3V0IHdoZXRoZXIgeW91IGNvbnNpZGVyIHRoZSBmZWF0dXJlIGltcG9ydGFudCBmb3Ig RXJpY3Nzb24uIElmIHlvdSBiZWxpZXZlIGl0IGlzIGltcG9ydGFudCB0aGVuIG1heWJlIHlvdSBj b3VsZCwgYXMgQ2Fyc3RlbiBzdWdnZXN0ZWQsIGNvbnRpbnVlIHdvcmtpbmcgb24gdGhlIGZ1bmN0 aW9uYWxpdHkgaW4gYW4gaW5kZXBlbmRlbnQgZG9jdW1lbnQuDQoNCklmIHlvdSB3YW50IHRvIHNw ZW5kIHlvdXIgdGltZSBvbiBpdCB0aGVuIEkgd291bGQgcmVjb21tZW5kIHRvIGRvIHR3byB0aGlu Z3MsIG5hbWVseSAoYSkgc3BlY2lmeSB3aGF0IGdvYWxzIHRoZSBtZWNoYW5pc20gaXMgc3VwcG9z ZWQgdG8gYWNjb21wbGlzaCBhbmQgKGIpIGJ1aWxkIGl0IG9uIHRvcCBvZiBleGlzdGluZyBhdXRo ZW50aWNhdGlvbiBhbmQga2V5IGV4Y2hhbmdlIHByb3RvY29sLiBUaGUgbGF0dGVyIHBhcnQgaXMg cXVpdGUgZWFzeSBzaW5jZSBsb3RzIG9mIHJlc2VhcmNoIHdhcyBkb25lIG9uIDMtcGFydHkgc2Vj dXJpdHkgcHJvdG9jb2xzIGFuZCB0aGVyZSBhcmUgdmFyaW91cyBwcm90b2NvbHMgdGhhdCBmaXQg dGhlIGRlc2lyZWQgbWVzc2FnZSBjb21tdW5pY2F0aW9uIHBhdHRlcm4uIFRoaXMgY291bGQgZ2l2 ZSBoaWdoZXIgY29uZmlkZW5jZSBpbiB0aGUgd29yay4NCg0KQ2lhbw0KSGFubmVzDQoNCkZyb206 IEfDtnJhbiBTZWxhbmRlciBbbWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbV0NClNl bnQ6IDA4IEZlYnJ1YXJ5IDIwMTggMDk6MjINClRvOiBIYW5uZXMgVHNjaG9mZW5pZzsgYWNlQGll dGYub3JnDQpTdWJqZWN0OiBSZTogW0FjZV0gUmVtb3ZhbCBvZiB0aGUgQ2xpZW50IFRva2VuIGZy b20gQUNFLU9BdXRoIGRyYWZ0DQoNCkhpIEhhbm5lcywNCg0KRnJvbTogQWNlIDxhY2UtYm91bmNl c0BpZXRmLm9yZzxtYWlsdG86YWNlLWJvdW5jZXNAaWV0Zi5vcmc+PiBvbiBiZWhhbGYgb2YgSGFu bmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208bWFpbHRvOkhhbm5lcy5U c2Nob2ZlbmlnQGFybS5jb20+Pg0KRGF0ZTogVGh1cnNkYXkgMSBGZWJydWFyeSAyMDE4IGF0IDEz OjU5DQpUbzogImFjZUBpZXRmLm9yZzxtYWlsdG86YWNlQGlldGYub3JnPiIgPGFjZUBpZXRmLm9y ZzxtYWlsdG86YWNlQGlldGYub3JnPj4NClN1YmplY3Q6IFtBY2VdIFJlbW92YWwgb2YgdGhlIENs aWVudCBUb2tlbiBmcm9tIEFDRS1PQXV0aCBkcmFmdA0KDQpIaSBhbGwsDQoNCnRoZSBDbGllbnQg VG9rZW4gaXMgYSBuZXcgbWVjaGFuaXNtIGluIHRoZSBBQ0UtT0F1dGggdGhhdCBhaW1zIHRvIHNv bHZlIGEgc2NlbmFyaW8gd2hlcmUgdGhlIENsaWVudCBkb2VzIG5vdCBoYXZlIGNvbm5lY3Rpdml0 eSB0byB0aGUgQXV0aG9yaXphdGlvbiBTZXJ2ZXIgdG8gb2J0YWluIGFuIGFjY2VzcyB0b2tlbiB3 aGlsZSB0aGUgUmVzb3VyY2UgU2VydmVyIGRvZXMuDQoNClRoZSBzb2x1dGlvbiBpcyB0aGVyZWZv cmUgZm9yIHRoZSBDbGllbnQgdG8gdXNlIHRoZSBSZXNvdXJjZSBTZXJ2ZXIgdG8gcmVsYXkgbWVz c2FnZXMgdG8gdGhlIEF1dGhvcml6YXRpb24gU2VydmVyLg0KDQpXaGlsZSB0aGlzIHNvdW5kcyBu aWNlIGl0IGRvZXMgbm90IGZvbGxvdyB0aGUgT0F1dGggbW9kZWwgYW5kIHdlLCBhdCBBUk0sIGhh dmUgbm90IHNlZW4gYW55b25lIHJlcXVlc3RpbmcgdGhpcyBmZWF0dXJlLiBJdCBpcyBhbHNvIG5v dCBmdWxseSBzcGVjaWZpZWQgaW4gdGhlIHNwZWM6IHNpbmNlIEkgaGF2ZSBiZWVuIGRvaW5nIGEg Zm9ybWFsIGFuYWx5c2lzIG9mIHRoaXMgcHJvdG9jb2wgdmFyaWFudCBmb3IgdGhlIE9BdXRoIFNl Y3VyaXR5IFdvcmtzaG9wIEkgaGFkIHRvIG5vdGljZSB0aGF0IGl0IGlzIG5vdCBzZWN1cmUuIChJ IHdpbGwgcG9zdCB0aGUgcGFwZXIgdG8gdGhlIGxpc3QgYXNhcC4pDQoNCkhhdmUgeW91IHBvc3Rl ZCB0aGlzPyBJIGNvdWxkbuKAmXQgZmluZCBpdCBteSBJbmJveC4NCg0KR8O2cmFuDQpJTVBPUlRB TlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRz IGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUg bm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1l ZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVy c29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1h dGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= --_000_AM4PR0801MB2706A362392B8BD71B9A41D0FAF30AM4PR0801MB2706_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJbXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7 fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24gVGV4dCBDaGFyIjsNCglt YXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6OC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdl OkVOLVVTO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6d2luZG93dGV4dDt9 DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiQmFsbG9vbiBUZXh0IENo YXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBU ZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7DQoJbXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6RU4tVVM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xv cjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5 Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBw dCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0KZGl2Lldv cmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3Rl IG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAy NiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hh cGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+ DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5n PSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2Vj dGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PkhpIDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkfDtnJhbiwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5JIGhhdmVu4oCZdCBwb3N0ZWQgdGhl IHdyaXRlLXVwIHlldCBzaW5jZSBpdCBpcyBhIHN1Ym1pc3Npb24gdG8gdGhlIHdvcmtzaG9wIGFu ZCB0aGUgcGFwZXJzIGFyZSBjdXJyZW50bHkgaW4gcmV2aWV3LiBBcyBtZW50aW9uZWQgdG8NCiB5 b3UgYXQgdGhlIE9NQSBtZWV0aW5nIHdlIGFyZSBjdXJyZW50bHkgYXR0ZW5kaW5nIHRoZSBhbmFs eXNpcyByZXZlYWxlZCB0d28gaXNzdWVzLCBuYW1lbHkgdGhlIGxhY2sgb2Ygc3RhdGVkIGdvYWxz ICh3aGljaCBtYWtlcyBhbnkgc2VjdXJpdHkgYW5hbHlzaXMgY2hhbGxlbmdpbmcpIGFuZCB0aGUg bGFjayBvZiBhdXRoZW50aWNhdGlvbiBmcm9tIHRoZSBjbGllbnQgdG8gdGhlIEFTLg0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPklN SE8gaXQgaXMsIGhvd2V2ZXIsIG9ubHkgYSBzbWFsbCBkYXRhIHBvaW50IGluIHRoaXMgZGlzY3Vz c2lvbi4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtU YWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLUdCIj5JIGJlbGlldmUgdGhlIG1vcmUgaW1wb3J0YW50IHF1ZXN0aW9uIGlzIHdoZXRo ZXIgdGhlcmUgYXJlIHBlb3BsZSBpbiBpbnRlcmVzdGVkIGluIHRoaXMgc2NlbmFyaW8gb3Igbm90 LiBJIGhhdmUgc3RhcnRlZCBteSBvcGluaW9uDQogYWJvdXQgdGhpcyBhbHJlYWR5IGF0IGVhcmxp ZXIgbWVldGluZ3MuIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Ozttc28tZmFyZWFzdC1sYW5n dWFnZTpFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLUdCIj5UaGVyZSBpcyBhbHNvIHRoZSBJUFIgZGlzY2xvc3VyZSB0aGF0IHNv bWUgZm9sa3MgbWF5IHRha2UgaW50byBhY2NvdW50LCB3aGljaCB3YXMgcG9zdGVkIHRvIHRoZSBs aXN0Og0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9hY2Uv Y3VycmVudC9tc2cwMjU3Mi5odG1sIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUv d2ViL2FjZS9jdXJyZW50L21zZzAyNTcyLmh0bWw8L2E+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+U2luY2UgeW91IGhhdmUgbm90 IHBvc3RlZCB5b3VyIHZpZXcgb24gdGhpcyB0b3BpYyB5ZXQgeW91IG1heSB3YW50IHRvIHRoaW5r IGFib3V0IHdoZXRoZXIgeW91IGNvbnNpZGVyIHRoZSBmZWF0dXJlIGltcG9ydGFudCBmb3IgRXJp Y3Nzb24uDQogSWYgeW91IGJlbGlldmUgaXQgaXMgaW1wb3J0YW50IHRoZW4gbWF5YmUgeW91IGNv dWxkLCBhcyBDYXJzdGVuIHN1Z2dlc3RlZCwgY29udGludWUgd29ya2luZyBvbiB0aGUgZnVuY3Rp b25hbGl0eSBpbiBhbiBpbmRlcGVuZGVudCBkb2N1bWVudC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5JZiB5b3Ugd2FudCB0byBz cGVuZCB5b3VyIHRpbWUgb24gaXQgdGhlbiBJIHdvdWxkIHJlY29tbWVuZCB0byBkbyB0d28gdGhp bmdzLCBuYW1lbHkgKGEpIHNwZWNpZnkgd2hhdCBnb2FscyB0aGUgbWVjaGFuaXNtIGlzIHN1cHBv c2VkDQogdG8gYWNjb21wbGlzaCBhbmQgKGIpIGJ1aWxkIGl0IG9uIHRvcCBvZiBleGlzdGluZyBh dXRoZW50aWNhdGlvbiBhbmQga2V5IGV4Y2hhbmdlIHByb3RvY29sLiBUaGUgbGF0dGVyIHBhcnQg aXMgcXVpdGUgZWFzeSBzaW5jZSBsb3RzIG9mIHJlc2VhcmNoIHdhcyBkb25lIG9uIDMtcGFydHkg c2VjdXJpdHkgcHJvdG9jb2xzIGFuZCB0aGVyZSBhcmUgdmFyaW91cyBwcm90b2NvbHMgdGhhdCBm aXQgdGhlIGRlc2lyZWQgbWVzc2FnZSBjb21tdW5pY2F0aW9uDQogcGF0dGVybi4gVGhpcyBjb3Vs ZCBnaXZlIGhpZ2hlciBjb25maWRlbmNlIGluIHRoZSB3b3JrLiA8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+Q2lhbzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+SGFubmVzPC9zcGFu PjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48YSBuYW1lPSJfTWFpbEVuZENvbXBvc2UiPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2E+PC9wPg0KPGRpdj4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRk aW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhv bWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1H QiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+IEfDtnJhbg0KIFNlbGFuZGVyIFttYWlsdG86 Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tXSA8YnI+DQo8Yj5TZW50OjwvYj4gMDggRmVicnVh cnkgMjAxOCAwOToyMjxicj4NCjxiPlRvOjwvYj4gSGFubmVzIFRzY2hvZmVuaWc7IGFjZUBpZXRm Lm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0FjZV0gUmVtb3ZhbCBvZiB0aGUgQ2xpZW50 IFRva2VuIGZyb20gQUNFLU9BdXRoIGRyYWZ0PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Nv bG9yOmJsYWNrIj5IaSBIYW5uZXMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4w cHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImNv bG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+QWNl ICZsdDs8YSBocmVmPSJtYWlsdG86YWNlLWJvdW5jZXNAaWV0Zi5vcmciPmFjZS1ib3VuY2VzQGll dGYub3JnPC9hPiZndDsgb24gYmVoYWxmIG9mIEhhbm5lcyBUc2Nob2ZlbmlnICZsdDs8YSBocmVm PSJtYWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbSI+SGFubmVzLlRzY2hvZmVuaWdAYXJt LmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlRodXJzZGF5IDEgRmVicnVhcnkgMjAxOCBh dCAxMzo1OTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmFjZUBpZXRmLm9y ZyI+YWNlQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFjZUBpZXRmLm9y ZyI+YWNlQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+W0FjZV0gUmVtb3Zh bCBvZiB0aGUgQ2xpZW50IFRva2VuIGZyb20gQUNFLU9BdXRoIGRyYWZ0PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNv bGlkICNCNUM0REYgNC41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdDttYXJnaW4tbGVmdDoz Ljc1cHQ7bWFyZ2luLXJpZ2h0OjBjbSIgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NL UVVPVEUiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPkhpIGFsbCwgPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPnRo ZSBDbGllbnQgVG9rZW4gaXMgYSBuZXcgbWVjaGFuaXNtIGluIHRoZSBBQ0UtT0F1dGggdGhhdCBh aW1zIHRvIHNvbHZlIGEgc2NlbmFyaW8gd2hlcmUgdGhlIENsaWVudCBkb2VzIG5vdCBoYXZlIGNv bm5lY3Rpdml0eSB0byB0aGUgQXV0aG9yaXphdGlvbiBTZXJ2ZXIgdG8gb2J0YWluIGFuIGFjY2Vz cyB0b2tlbiB3aGlsZSB0aGUgUmVzb3VyY2UgU2VydmVyIGRvZXMuDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZu YnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+VGhlIHNvbHV0aW9uIGlzIHRoZXJlZm9yZSBmb3IgdGhlIENsaWVu dCB0byB1c2UgdGhlIFJlc291cmNlIFNlcnZlciB0byByZWxheSBtZXNzYWdlcyB0byB0aGUgQXV0 aG9yaXphdGlvbiBTZXJ2ZXIuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+V2hp bGUgdGhpcyBzb3VuZHMgbmljZSBpdCBkb2VzIG5vdCBmb2xsb3cgdGhlIE9BdXRoIG1vZGVsIGFu ZCB3ZSwgYXQgQVJNLCBoYXZlIG5vdCBzZWVuIGFueW9uZSByZXF1ZXN0aW5nIHRoaXMgZmVhdHVy ZS4gSXQgaXMgYWxzbyBub3QgZnVsbHkgc3BlY2lmaWVkIGluIHRoZSBzcGVjOiBzaW5jZSBJIGhh dmUgYmVlbiBkb2luZyBhIGZvcm1hbCBhbmFseXNpcyBvZiB0aGlzDQogcHJvdG9jb2wgdmFyaWFu dCBmb3IgdGhlIE9BdXRoIFNlY3VyaXR5IFdvcmtzaG9wIEkgaGFkIHRvIG5vdGljZSB0aGF0IGl0 IGlzIG5vdCBzZWN1cmUuIChJIHdpbGwgcG9zdCB0aGUgcGFwZXIgdG8gdGhlIGxpc3QgYXNhcC4p PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtj b2xvcjpibGFjazttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2s7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t R0IiPkhhdmUgeW91IHBvc3RlZCB0aGlzPyBJIGNvdWxkbuKAmXQgZmluZCBpdCBteSBJbmJveC48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjazttc28tZmFyZWFzdC1s YW5ndWFnZTpFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29s b3I6YmxhY2s7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkfDtnJhbjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMg b2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1h eSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGll bnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Ns b3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJw b3NlLA0KIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRo YW5rIHlvdS4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_AM4PR0801MB2706A362392B8BD71B9A41D0FAF30AM4PR0801MB2706_-- From nobody Thu Feb 8 04:36:01 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20A2B126CE8 for ; Thu, 8 Feb 2018 04:35:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.319 X-Spam-Level: X-Spam-Status: No, score=-4.319 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RcNQ2vZxEtJX for ; Thu, 8 Feb 2018 04:35:56 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42FAD124D6C for ; Thu, 8 Feb 2018 04:35:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1518093354; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=pg8Z1xhZl+6va9a/+MLk3g9fWNJU9VyKyVrvUC+FVbA=; b=NbT6e9zUcIUOEIlqLRavDnUWYNI+QaDJff4ZbOY5upmo9Y0az1THn1swz4/p9A9c O+iaody1EAcUX6XC+19lcx8wsjzVMEKdqN3oJQoCbHMJWdtYBlD7Elgk2Tvq/W30 +/y8bw5QrAmA2JjrIebayaNs5Ljq8n4I9VyULVI+QbE=; X-AuditID: c1b4fb3a-35fff700000067b4-f2-5a7c442ab68a Received: from ESESSHC018.ericsson.se (Unknown_Domain [153.88.183.72]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id CC.81.26548.A244C7A5; Thu, 8 Feb 2018 13:35:54 +0100 (CET) Received: from ESESSMB107.ericsson.se ([169.254.7.108]) by ESESSHC018.ericsson.se ([153.88.183.72]) with mapi id 14.03.0352.000; Thu, 8 Feb 2018 13:35:54 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Hannes Tschofenig , "ace@ietf.org" Thread-Topic: [Ace] Removal of the Client Token from ACE-OAuth draft Thread-Index: AQHToL5BTLQDRQpHTLmnZxVwN5CDtaOaSbbwgAAWvoA= Date: Thu, 8 Feb 2018 12:35:52 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.3.170325 x-originating-ip: [153.88.183.149] Content-Type: multipart/alternative; boundary="_000_D6A1E5769EE30goranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrEIsWRmVeSWpSXmKPExsUyM2K7h66WS02Uwe01Khbfv/UwW9yccYrJ gcljzbw1jB5LlvxkCmCK4rJJSc3JLEst0rdL4Mo41XCQuWD1TsaKbycfMTUwbtnC2MXIySEh YCLx4Oci1i5GLg4hgcOMEif37maDcBYzSnxfMQusik3AReJBwyMmEFtEIEii4+dPMFtYwFli /dUJLBBxF4ndl/4xQthWEnc+zgaLswioSKzZuhJoAwcHr4CFxJeJThDz+xklDm9/wQpSwymQ KHHu3TM2EJtRQEzi+6k1YPOZBcQlbj2ZzwRxqYDEkj3nmSFsUYmXj/+B9YoK6Ens7Wlng4gr Saw9vJ0FojdW4s/OSWA2r4CgxMmZT1gmMIrMQjJ2FpKyWUjKZgGdyiygKbF+lz5EiaLElO6H 7BC2hkTrnLlQtrXExi33WJDVLGDkWMUoWpxaXJybbmSkl1qUmVxcnJ+nl5dasokRGHMHt/y2 2sF48LnjIUYBDkYlHt5tJjVRQqyJZcWVuYcYJTiYlUR494gChXhTEiurUovy44tKc1KLDzFK c7AoifM6pVlECQmkJ5akZqemFqQWwWSZODilGhilmW2N7v2zqa8/KjmRp9RAOljp6KJzL2yv VH7YZ3jknZjINrbLJ/hf9prn7F3ouey8CNuCr/8D1O/dTm5YVMMrv8j+ctMRUyG9pwWLGOXu yrQX1LfzeFZJzd12TNl2w73PZlNWroyIYCw707jwz9cVVUa8C24WXtn+cN+RxftOKTBcPKfd oSOsxFKckWioxVxUnAgASv+rWbUCAAA= Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Feb 2018 12:35:59 -0000 --_000_D6A1E5769EE30goranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSGFubmVzLA0KDQpUaGUgcGFwZXIgeW91IGFyZSByZWZlcnJpbmcgdG8gd2FzIHRoZSBvbmx5 IG5ldyBkYXRhIHBvaW50IHlvdSBpbmNsdWRlZCB3aGVuIHlvdSBzdGFydGVkIHRoaXMgdGhyZWFk LiBJ4oCZbSBub3QgcXVlc3Rpb25pbmcgdGhlIGNvcnJlY3RuZXNzIG9mIHlvdXIgYW5hbHlzaXMs IGp1c3Qgc2F5aW5nIHRoYXQgd2UgYXJlIG5vdyB0YWtpbmcgYWN0aW9uIHdpdGhvdXQgaGF2aW5n IHNlZW4gdGhlIGFuYWx5c2lzLg0KDQpBcyBJIHJlcGxpZWQgdG8geW91IGluIG91ciBkaXNjdXNz aW9uIGhlcmUgYXQgdGhlIE9NQSBtZWV0aW5nIHRoZSBsYWNrIG9mIGF1dGhlbnRpY2F0aW9uIGZy b20gUlMgdG8gdGhlIEFTIG1heSBhY3R1YWxseSBjYXJyeSBvdmVyIHRvIHRoZSBBY2Nlc3MgVG9r ZW4uIFNob3VsZCB3ZSB0aGVuIHJlbW92ZSB0aGUgQWNjZXNzIFRva2VuIGFzIHdlbGw/DQoNCk15 IHBlcnNvbmFsIHZpZXcgb24gdGhpcyBpcyB0aGF0IHdlIHNob3VsZCB0cnkgdG8gc3VwcG9ydCB0 aGUgdXNlIGNhc2Ugd2l0aCBvZmZsaW5lIENsaWVudHMgKGkuZS4gd2hpY2ggY2Fubm90IGNvbW11 bmljYXRlIGRpcmVjdGx5IHdpdGggdGhlIEFTKSB3aGljaCBkb2VzIG5vdCBoYXZlIGEgcHJldmlv dXMgc2VjdXJpdHkgYXNzb2NpYXRpb24gd2l0aCB0aGUgUlMgKGUuZy4gZHVyaW5nIGRldmljZSBk ZXBsb3ltZW50KS4gVGhpcyB3b3VsZCBlbmNvbXBhc3NlcyB0aGUgYXV0aG9yaXphdGlvbiBvZiBD bGllbnQgYW5kIGtleSBwcm92aXNpb25pbmcgdG8gdGhlIFJTLiBUaGlzIGlzIHRoZSBBY2Nlc3Mg VG9rZW4uIEl0IGFkZGl0aW9uYWxseSByZXF1aXJlcyBrZXkgcHJvdmlzaW9uaW5nIHRvIHRoZSBD bGllbnQsIGFuZCwgaWYgZGVzaXJlZCwgdGhlICJhdXRob3JpemF0aW9uIiBvZiBSUyAtIGkuZS4g dGhlIGNvbmRpdGlvbnMgdW5kZXIgd2hpY2ggdGhlIENsaWVudCBzaG91bGQgYWN0dWFsbHkgbWFr ZSB0aGUgcmVxdWVzdC4gSG93IGRvIHdlIGdldCB0aGF0IGluZm9ybWF0aW9uIGZyb20gdGhlIEFT IHRvIHRoZSBDbGllbnQ/DQoNCkfDtnJhbg0KDQoNCg0KDQpGcm9tOiBIYW5uZXMgVHNjaG9mZW5p ZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJt LmNvbT4+DQpEYXRlOiBUaHVyc2RheSA4IEZlYnJ1YXJ5IDIwMTggYXQgMTA6MzgNClRvOiBHw7Zy YW4gU2VsYW5kZXIgPGdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbTxtYWlsdG86Z29yYW4uc2Vs YW5kZXJAZXJpY3Nzb24uY29tPj4sICJhY2VAaWV0Zi5vcmc8bWFpbHRvOmFjZUBpZXRmLm9yZz4i IDxhY2VAaWV0Zi5vcmc8bWFpbHRvOmFjZUBpZXRmLm9yZz4+DQpTdWJqZWN0OiBSRTogW0FjZV0g UmVtb3ZhbCBvZiB0aGUgQ2xpZW50IFRva2VuIGZyb20gQUNFLU9BdXRoIGRyYWZ0DQoNCkhpIEfD tnJhbiwNCg0KSSBoYXZlbuKAmXQgcG9zdGVkIHRoZSB3cml0ZS11cCB5ZXQgc2luY2UgaXQgaXMg YSBzdWJtaXNzaW9uIHRvIHRoZSB3b3Jrc2hvcCBhbmQgdGhlIHBhcGVycyBhcmUgY3VycmVudGx5 IGluIHJldmlldy4gQXMgbWVudGlvbmVkIHRvIHlvdSBhdCB0aGUgT01BIG1lZXRpbmcgd2UgYXJl IGN1cnJlbnRseSBhdHRlbmRpbmcgdGhlIGFuYWx5c2lzIHJldmVhbGVkIHR3byBpc3N1ZXMsIG5h bWVseSB0aGUgbGFjayBvZiBzdGF0ZWQgZ29hbHMgKHdoaWNoIG1ha2VzIGFueSBzZWN1cml0eSBh bmFseXNpcyBjaGFsbGVuZ2luZykgYW5kIHRoZSBsYWNrIG9mIGF1dGhlbnRpY2F0aW9uIGZyb20g dGhlIGNsaWVudCB0byB0aGUgQVMuDQoNCklNSE8gaXQgaXMsIGhvd2V2ZXIsIG9ubHkgYSBzbWFs bCBkYXRhIHBvaW50IGluIHRoaXMgZGlzY3Vzc2lvbi4NCg0KSSBiZWxpZXZlIHRoZSBtb3JlIGlt cG9ydGFudCBxdWVzdGlvbiBpcyB3aGV0aGVyIHRoZXJlIGFyZSBwZW9wbGUgaW4gaW50ZXJlc3Rl ZCBpbiB0aGlzIHNjZW5hcmlvIG9yIG5vdC4gSSBoYXZlIHN0YXJ0ZWQgbXkgb3BpbmlvbiBhYm91 dCB0aGlzIGFscmVhZHkgYXQgZWFybGllciBtZWV0aW5ncy4NCg0KVGhlcmUgaXMgYWxzbyB0aGUg SVBSIGRpc2Nsb3N1cmUgdGhhdCBzb21lIGZvbGtzIG1heSB0YWtlIGludG8gYWNjb3VudCwgd2hp Y2ggd2FzIHBvc3RlZCB0byB0aGUgbGlzdDogaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNo aXZlL3dlYi9hY2UvY3VycmVudC9tc2cwMjU3Mi5odG1sDQoNClNpbmNlIHlvdSBoYXZlIG5vdCBw b3N0ZWQgeW91ciB2aWV3IG9uIHRoaXMgdG9waWMgeWV0IHlvdSBtYXkgd2FudCB0byB0aGluayBh Ym91dCB3aGV0aGVyIHlvdSBjb25zaWRlciB0aGUgZmVhdHVyZSBpbXBvcnRhbnQgZm9yIEVyaWNz c29uLiBJZiB5b3UgYmVsaWV2ZSBpdCBpcyBpbXBvcnRhbnQgdGhlbiBtYXliZSB5b3UgY291bGQs IGFzIENhcnN0ZW4gc3VnZ2VzdGVkLCBjb250aW51ZSB3b3JraW5nIG9uIHRoZSBmdW5jdGlvbmFs aXR5IGluIGFuIGluZGVwZW5kZW50IGRvY3VtZW50Lg0KDQpJZiB5b3Ugd2FudCB0byBzcGVuZCB5 b3VyIHRpbWUgb24gaXQgdGhlbiBJIHdvdWxkIHJlY29tbWVuZCB0byBkbyB0d28gdGhpbmdzLCBu YW1lbHkgKGEpIHNwZWNpZnkgd2hhdCBnb2FscyB0aGUgbWVjaGFuaXNtIGlzIHN1cHBvc2VkIHRv IGFjY29tcGxpc2ggYW5kIChiKSBidWlsZCBpdCBvbiB0b3Agb2YgZXhpc3RpbmcgYXV0aGVudGlj YXRpb24gYW5kIGtleSBleGNoYW5nZSBwcm90b2NvbC4gVGhlIGxhdHRlciBwYXJ0IGlzIHF1aXRl IGVhc3kgc2luY2UgbG90cyBvZiByZXNlYXJjaCB3YXMgZG9uZSBvbiAzLXBhcnR5IHNlY3VyaXR5 IHByb3RvY29scyBhbmQgdGhlcmUgYXJlIHZhcmlvdXMgcHJvdG9jb2xzIHRoYXQgZml0IHRoZSBk ZXNpcmVkIG1lc3NhZ2UgY29tbXVuaWNhdGlvbiBwYXR0ZXJuLiBUaGlzIGNvdWxkIGdpdmUgaGln aGVyIGNvbmZpZGVuY2UgaW4gdGhlIHdvcmsuDQoNCkNpYW8NCkhhbm5lcw0KDQpGcm9tOiBHw7Zy YW4gU2VsYW5kZXIgW21haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb21dDQpTZW50OiAw OCBGZWJydWFyeSAyMDE4IDA5OjIyDQpUbzogSGFubmVzIFRzY2hvZmVuaWc7IGFjZUBpZXRmLm9y ZzxtYWlsdG86YWNlQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtBY2VdIFJlbW92YWwgb2YgdGhl IENsaWVudCBUb2tlbiBmcm9tIEFDRS1PQXV0aCBkcmFmdA0KDQpIaSBIYW5uZXMsDQoNCkZyb206 IEFjZSA8YWNlLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnPj4g b24gYmVoYWxmIG9mIEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29t PG1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPj4NCkRhdGU6IFRodXJzZGF5IDEgRmVi cnVhcnkgMjAxOCBhdCAxMzo1OQ0KVG86ICJhY2VAaWV0Zi5vcmc8bWFpbHRvOmFjZUBpZXRmLm9y Zz4iIDxhY2VAaWV0Zi5vcmc8bWFpbHRvOmFjZUBpZXRmLm9yZz4+DQpTdWJqZWN0OiBbQWNlXSBS ZW1vdmFsIG9mIHRoZSBDbGllbnQgVG9rZW4gZnJvbSBBQ0UtT0F1dGggZHJhZnQNCg0KSGkgYWxs LA0KDQp0aGUgQ2xpZW50IFRva2VuIGlzIGEgbmV3IG1lY2hhbmlzbSBpbiB0aGUgQUNFLU9BdXRo IHRoYXQgYWltcyB0byBzb2x2ZSBhIHNjZW5hcmlvIHdoZXJlIHRoZSBDbGllbnQgZG9lcyBub3Qg aGF2ZSBjb25uZWN0aXZpdHkgdG8gdGhlIEF1dGhvcml6YXRpb24gU2VydmVyIHRvIG9idGFpbiBh biBhY2Nlc3MgdG9rZW4gd2hpbGUgdGhlIFJlc291cmNlIFNlcnZlciBkb2VzLg0KDQpUaGUgc29s dXRpb24gaXMgdGhlcmVmb3JlIGZvciB0aGUgQ2xpZW50IHRvIHVzZSB0aGUgUmVzb3VyY2UgU2Vy dmVyIHRvIHJlbGF5IG1lc3NhZ2VzIHRvIHRoZSBBdXRob3JpemF0aW9uIFNlcnZlci4NCg0KV2hp bGUgdGhpcyBzb3VuZHMgbmljZSBpdCBkb2VzIG5vdCBmb2xsb3cgdGhlIE9BdXRoIG1vZGVsIGFu ZCB3ZSwgYXQgQVJNLCBoYXZlIG5vdCBzZWVuIGFueW9uZSByZXF1ZXN0aW5nIHRoaXMgZmVhdHVy ZS4gSXQgaXMgYWxzbyBub3QgZnVsbHkgc3BlY2lmaWVkIGluIHRoZSBzcGVjOiBzaW5jZSBJIGhh dmUgYmVlbiBkb2luZyBhIGZvcm1hbCBhbmFseXNpcyBvZiB0aGlzIHByb3RvY29sIHZhcmlhbnQg Zm9yIHRoZSBPQXV0aCBTZWN1cml0eSBXb3Jrc2hvcCBJIGhhZCB0byBub3RpY2UgdGhhdCBpdCBp cyBub3Qgc2VjdXJlLiAoSSB3aWxsIHBvc3QgdGhlIHBhcGVyIHRvIHRoZSBsaXN0IGFzYXAuKQ0K DQpIYXZlIHlvdSBwb3N0ZWQgdGhpcz8gSSBjb3VsZG7igJl0IGZpbmQgaXQgbXkgSW5ib3guDQoN CkfDtnJhbg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5k IGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxl Z2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5 IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMg dG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3Ig Y29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K --_000_D6A1E5769EE30goranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj5IaSBIYW5uZXMs PC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5UaGUgcGFwZXIgeW91IGFyZSByZWZlcnJp bmcgdG8gd2FzIHRoZSBvbmx5IG5ldyBkYXRhIHBvaW50IHlvdSBpbmNsdWRlZCB3aGVuIHlvdSBz dGFydGVkIHRoaXMgdGhyZWFkLiBJ4oCZbSBub3QgcXVlc3Rpb25pbmcgdGhlIGNvcnJlY3RuZXNz IG9mIHlvdXIgYW5hbHlzaXMsIGp1c3Qgc2F5aW5nIHRoYXQgd2UgYXJlIG5vdyB0YWtpbmcgYWN0 aW9uIHdpdGhvdXQgaGF2aW5nIHNlZW4gdGhlIGFuYWx5c2lzLiZuYnNwOzwvZGl2Pg0KPGRpdj48 YnI+DQo8L2Rpdj4NCjxkaXY+QXMgSSByZXBsaWVkIHRvIHlvdSBpbiBvdXIgZGlzY3Vzc2lvbiBo ZXJlIGF0IHRoZSBPTUEgbWVldGluZyB0aGUgbGFjayBvZiBhdXRoZW50aWNhdGlvbiBmcm9tIFJT IHRvIHRoZSBBUyBtYXkgYWN0dWFsbHkgY2Fycnkgb3ZlciB0byB0aGUgQWNjZXNzIFRva2VuLiBT aG91bGQgd2UgdGhlbiByZW1vdmUgdGhlIEFjY2VzcyBUb2tlbiBhcyB3ZWxsPzwvZGl2Pg0KPGRp dj48YnI+DQo8L2Rpdj4NCjxkaXY+TXkgcGVyc29uYWwgdmlldyBvbiB0aGlzIGlzIHRoYXQgd2Ug c2hvdWxkIHRyeSB0byBzdXBwb3J0IHRoZSB1c2UgY2FzZSB3aXRoIG9mZmxpbmUgQ2xpZW50cyAo aS5lLiB3aGljaCBjYW5ub3QgY29tbXVuaWNhdGUgZGlyZWN0bHkgd2l0aCB0aGUgQVMpIHdoaWNo IGRvZXMgbm90IGhhdmUgYSBwcmV2aW91cyBzZWN1cml0eSBhc3NvY2lhdGlvbiB3aXRoIHRoZSBS UyAoZS5nLiBkdXJpbmcgZGV2aWNlIGRlcGxveW1lbnQpLiBUaGlzIHdvdWxkDQogZW5jb21wYXNz ZXMgdGhlIGF1dGhvcml6YXRpb24gb2YgQ2xpZW50IGFuZCBrZXkgcHJvdmlzaW9uaW5nIHRvIHRo ZSBSUy4gVGhpcyBpcyB0aGUgQWNjZXNzIFRva2VuLiBJdCBhZGRpdGlvbmFsbHkgcmVxdWlyZXMg a2V5IHByb3Zpc2lvbmluZyB0byB0aGUgQ2xpZW50LCBhbmQsIGlmIGRlc2lyZWQsIHRoZSAmcXVv dDthdXRob3JpemF0aW9uJnF1b3Q7IG9mIFJTIC0gaS5lLiB0aGUgY29uZGl0aW9ucyB1bmRlciB3 aGljaCB0aGUgQ2xpZW50IHNob3VsZCBhY3R1YWxseQ0KIG1ha2UgdGhlIHJlcXVlc3QuIEhvdyBk byB3ZSBnZXQgdGhhdCBpbmZvcm1hdGlvbiBmcm9tIHRoZSBBUyB0byB0aGUgQ2xpZW50PzwvZGl2 Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+R8O2cmFuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2 Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2 Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9OIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFt aWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMXB0OyB0ZXh0LWFsaWduOmxlZnQ7IGNvbG9yOmJsYWNr OyBCT1JERVItQk9UVE9NOiBtZWRpdW0gbm9uZTsgQk9SREVSLUxFRlQ6IG1lZGl1bSBub25lOyBQ QURESU5HLUJPVFRPTTogMGluOyBQQURESU5HLUxFRlQ6IDBpbjsgUEFERElORy1SSUdIVDogMGlu OyBCT1JERVItVE9QOiAjYjVjNGRmIDFwdCBzb2xpZDsgQk9SREVSLVJJR0hUOiBtZWRpdW0gbm9u ZTsgUEFERElORy1UT1A6IDNwdCI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RnJv bTogPC9zcGFuPkhhbm5lcyBUc2Nob2ZlbmlnICZsdDs8YSBocmVmPSJtYWlsdG86SGFubmVzLlRz Y2hvZmVuaWdAYXJtLmNvbSI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTwvYT4mZ3Q7PGJyPg0K PHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPkRhdGU6IDwvc3Bhbj5UaHVyc2RheSA4IEZl YnJ1YXJ5IDIwMTggYXQgMTA6Mzg8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+ VG86IDwvc3Bhbj5Hw7ZyYW4gU2VsYW5kZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpnb3Jhbi5zZWxh bmRlckBlcmljc3Nvbi5jb20iPmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbTwvYT4mZ3Q7LCAm cXVvdDs8YSBocmVmPSJtYWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5vcmc8L2E+JnF1b3Q7 ICZsdDs8YSBocmVmPSJtYWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5vcmc8L2E+Jmd0Ozxi cj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5TdWJqZWN0OiA8L3NwYW4+UkU6IFtB Y2VdIFJlbW92YWwgb2YgdGhlIENsaWVudCBUb2tlbiBmcm9tIEFDRS1PQXV0aCBkcmFmdDxicj4N CjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9PS19B VFRSSUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0iQk9SREVSLUxFRlQ6ICNiNWM0ZGYgNSBzb2xp ZDsgUEFERElORzowIDAgMCA1OyBNQVJHSU46MCAwIDAgNTsiPg0KPGRpdiB4bWxuczp2PSJ1cm46 c2NoZW1hcy1taWNyb3NvZnQtY29tOnZtbCIgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0 LWNvbTpvZmZpY2U6b2ZmaWNlIiB4bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9m ZmljZTp3b3JkIiB4bWxuczptPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8y MDA0LzEyL29tbWwiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxt ZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVk IG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYg NCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxp Lk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1z b0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xs b3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNv QWNldGF0ZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxv b24gVGV4dCBDaGFyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglm b250LXNpemU6OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiOw0KCW1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJ Y29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5bGUtbmFt ZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5 bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJp ZiI7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHls ZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBw dCA3Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48 L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0i ZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1z byA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9 ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8 ZGl2IGxhbmc9IkVOLUdCIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+SGkgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAx MHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+R8O2cmFuLA0KPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwg c2Fucy1zZXJpZjsiPkkgaGF2ZW7igJl0IHBvc3RlZCB0aGUgd3JpdGUtdXAgeWV0IHNpbmNlIGl0 IGlzIGEgc3VibWlzc2lvbiB0byB0aGUgd29ya3Nob3AgYW5kIHRoZSBwYXBlcnMgYXJlIGN1cnJl bnRseSBpbiByZXZpZXcuIEFzIG1lbnRpb25lZCB0byB5b3UgYXQgdGhlIE9NQSBtZWV0aW5nIHdl IGFyZQ0KIGN1cnJlbnRseSBhdHRlbmRpbmcgdGhlIGFuYWx5c2lzIHJldmVhbGVkIHR3byBpc3N1 ZXMsIG5hbWVseSB0aGUgbGFjayBvZiBzdGF0ZWQgZ29hbHMgKHdoaWNoIG1ha2VzIGFueSBzZWN1 cml0eSBhbmFseXNpcyBjaGFsbGVuZ2luZykgYW5kIHRoZSBsYWNrIG9mIGF1dGhlbnRpY2F0aW9u IGZyb20gdGhlIGNsaWVudCB0byB0aGUgQVMuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+SU1ITyBp dCBpcywgaG93ZXZlciwgb25seSBhIHNtYWxsIGRhdGEgcG9pbnQgaW4gdGhpcyBkaXNjdXNzaW9u Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNh bnMtc2VyaWY7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1p bHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPkkgYmVsaWV2ZSB0aGUgbW9yZSBpbXBvcnRhbnQgcXVl c3Rpb24gaXMgd2hldGhlciB0aGVyZSBhcmUgcGVvcGxlIGluIGludGVyZXN0ZWQgaW4gdGhpcyBz Y2VuYXJpbyBvciBub3QuIEkgaGF2ZSBzdGFydGVkIG15IG9waW5pb24gYWJvdXQgdGhpcyBhbHJl YWR5IGF0IGVhcmxpZXINCiBtZWV0aW5ncy4gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7 IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPlRoZXJlIGlz IGFsc28gdGhlIElQUiBkaXNjbG9zdXJlIHRoYXQgc29tZSBmb2xrcyBtYXkgdGFrZSBpbnRvIGFj Y291bnQsIHdoaWNoIHdhcyBwb3N0ZWQgdG8gdGhlIGxpc3Q6DQo8YSBocmVmPSJodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2FjZS9jdXJyZW50L21zZzAyNTcyLmh0bWwiPmh0 dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvYWNlL2N1cnJlbnQvbXNnMDI1NzIu aHRtbDwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9t YSwgc2Fucy1zZXJpZjsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250 LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+U2luY2UgeW91IGhhdmUgbm90IHBvc3RlZCB5 b3VyIHZpZXcgb24gdGhpcyB0b3BpYyB5ZXQgeW91IG1heSB3YW50IHRvIHRoaW5rIGFib3V0IHdo ZXRoZXIgeW91IGNvbnNpZGVyIHRoZSBmZWF0dXJlIGltcG9ydGFudCBmb3IgRXJpY3Nzb24uIElm IHlvdSBiZWxpZXZlIGl0IGlzDQogaW1wb3J0YW50IHRoZW4gbWF5YmUgeW91IGNvdWxkLCBhcyBD YXJzdGVuIHN1Z2dlc3RlZCwgY29udGludWUgd29ya2luZyBvbiB0aGUgZnVuY3Rpb25hbGl0eSBp biBhbiBpbmRlcGVuZGVudCBkb2N1bWVudC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0 OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7Ij5JZiB5b3Ug d2FudCB0byBzcGVuZCB5b3VyIHRpbWUgb24gaXQgdGhlbiBJIHdvdWxkIHJlY29tbWVuZCB0byBk byB0d28gdGhpbmdzLCBuYW1lbHkgKGEpIHNwZWNpZnkgd2hhdCBnb2FscyB0aGUgbWVjaGFuaXNt IGlzIHN1cHBvc2VkIHRvIGFjY29tcGxpc2ggYW5kIChiKSBidWlsZA0KIGl0IG9uIHRvcCBvZiBl eGlzdGluZyBhdXRoZW50aWNhdGlvbiBhbmQga2V5IGV4Y2hhbmdlIHByb3RvY29sLiBUaGUgbGF0 dGVyIHBhcnQgaXMgcXVpdGUgZWFzeSBzaW5jZSBsb3RzIG9mIHJlc2VhcmNoIHdhcyBkb25lIG9u IDMtcGFydHkgc2VjdXJpdHkgcHJvdG9jb2xzIGFuZCB0aGVyZSBhcmUgdmFyaW91cyBwcm90b2Nv bHMgdGhhdCBmaXQgdGhlIGRlc2lyZWQgbWVzc2FnZSBjb21tdW5pY2F0aW9uIHBhdHRlcm4uIFRo aXMgY291bGQgZ2l2ZQ0KIGhpZ2hlciBjb25maWRlbmNlIGluIHRoZSB3b3JrLiA8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBz YW5zLXNlcmlmOyI+Q2lhbzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWls eTogVGFob21hLCBzYW5zLXNlcmlmOyI+SGFubmVzPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBu YW1lPSJfTWFpbEVuZENvbXBvc2UiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L2E+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNt Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+RnJvbTo8L3Nw YW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZh bWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+IEfDtnJhbiBTZWxhbmRlciBbPGEgaHJlZj0ibWFp bHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbSI+bWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVy aWNzc29uLmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gMDggRmVicnVhcnkgMjAxOCAwOToy Mjxicj4NCjxiPlRvOjwvYj4gSGFubmVzIFRzY2hvZmVuaWc7IDxhIGhyZWY9Im1haWx0bzphY2VA aWV0Zi5vcmciPmFjZUBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtBY2Vd IFJlbW92YWwgb2YgdGhlIENsaWVudCBUb2tlbiBmcm9tIEFDRS1PQXV0aCBkcmFmdDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+SGkgSGFubmVzLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1 QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPjwvYj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPkFjZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFjZS1ib3VuY2VzQGll dGYub3JnIj5hY2UtYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IG9uIGJlaGFsZiBvZiBIYW5uZXMg VHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20i Pkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UaHVy c2RheSAxIEZlYnJ1YXJ5IDIwMTggYXQgMTM6NTk8YnI+DQo8Yj5UbzogPC9iPiZxdW90OzxhIGhy ZWY9Im1haWx0bzphY2VAaWV0Zi5vcmciPmFjZUBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhy ZWY9Im1haWx0bzphY2VAaWV0Zi5vcmciPmFjZUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+U3Vi amVjdDogPC9iPltBY2VdIFJlbW92YWwgb2YgdGhlIENsaWVudCBUb2tlbiBmcm9tIEFDRS1PQXV0 aCBkcmFmdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQjVDNERGIDQuNXB0O3BhZGRpbmc6MGNtIDBjbSAw Y20gNC4wcHQ7bWFyZ2luLWxlZnQ6My43NXB0O21hcmdpbi1yaWdodDowY20iIGlkPSJNQUNfT1VU TE9PS19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5IaSBhbGwsIDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+ Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOmJsYWNrIj50aGUgQ2xpZW50IFRva2VuIGlzIGEgbmV3IG1lY2hhbmlzbSBp biB0aGUgQUNFLU9BdXRoIHRoYXQgYWltcyB0byBzb2x2ZSBhIHNjZW5hcmlvIHdoZXJlIHRoZSBD bGllbnQgZG9lcyBub3QgaGF2ZSBjb25uZWN0aXZpdHkgdG8gdGhlIEF1dGhvcml6YXRpb24gU2Vy dmVyIHRvIG9idGFpbiBhbiBhY2Nlc3MgdG9rZW4gd2hpbGUgdGhlIFJlc291cmNlIFNlcnZlciBk b2VzLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPlRoZSBzb2x1dGlvbiBpcyB0 aGVyZWZvcmUgZm9yIHRoZSBDbGllbnQgdG8gdXNlIHRoZSBSZXNvdXJjZSBTZXJ2ZXIgdG8gcmVs YXkgbWVzc2FnZXMgdG8gdGhlIEF1dGhvcml6YXRpb24gU2VydmVyLg0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4m bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPldoaWxlIHRoaXMgc291bmRzIG5pY2UgaXQgZG9lcyBub3QgZm9s bG93IHRoZSBPQXV0aCBtb2RlbCBhbmQgd2UsIGF0IEFSTSwgaGF2ZSBub3Qgc2VlbiBhbnlvbmUg cmVxdWVzdGluZyB0aGlzIGZlYXR1cmUuIEl0IGlzIGFsc28gbm90IGZ1bGx5IHNwZWNpZmllZCBp biB0aGUgc3BlYzogc2luY2UgSSBoYXZlIGJlZW4gZG9pbmcgYSBmb3JtYWwgYW5hbHlzaXMgb2Yg dGhpcw0KIHByb3RvY29sIHZhcmlhbnQgZm9yIHRoZSBPQXV0aCBTZWN1cml0eSBXb3Jrc2hvcCBJ IGhhZCB0byBub3RpY2UgdGhhdCBpdCBpcyBub3Qgc2VjdXJlLiAoSSB3aWxsIHBvc3QgdGhlIHBh cGVyIHRvIHRoZSBsaXN0IGFzYXAuKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2s7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t R0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrO21z by1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5IYXZlIHlvdSBwb3N0ZWQgdGhpcz8gSSBjb3VsZG7i gJl0IGZpbmQgaXQgbXkgSW5ib3guPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29s b3I6YmxhY2s7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdC Ij5Hw7ZyYW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KSU1QT1JUQU5U IE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBh cmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5v dCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRp YXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNv biwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1h dGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuIDwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8L3NwYW4+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_D6A1E5769EE30goranselanderericssoncom_-- From nobody Thu Feb 8 04:44:52 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5483F129516 for ; Thu, 8 Feb 2018 04:44:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BwLyPrpprPNe for ; Thu, 8 Feb 2018 04:44:45 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0606.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1f::606]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69CD812D882 for ; Thu, 8 Feb 2018 04:44:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=feSMPKPFPx/MDZPIjEHkpmIgXUVNk3mogmJy0v+v/9M=; b=hXmwuxGtc0QbjZzi2e50m9PkqOrOkAy79pIsX0YJ2Es9Q6c4O4MuOVxanVaMmnN5FHH6fQPPzPS34ZsER7zHd4rkPmXb0tAPkPguCYPMs4DStZ4DHsgS5mcZrUgccTRH1Qhfq/2JfzGQIMnX547kuCMhXMWmsDyvlLzQPOO14Pk= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2724.eurprd08.prod.outlook.com (10.167.90.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.464.11; Thu, 8 Feb 2018 12:44:40 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b%14]) with mapi id 15.20.0485.009; Thu, 8 Feb 2018 12:44:39 +0000 From: Hannes Tschofenig To: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= , "ace@ietf.org" Thread-Topic: [Ace] Removal of the Client Token from ACE-OAuth draft Thread-Index: AQHToL5BTLQDRQpHTLmnZxVwN5CDtaOaSbbwgAAWvoCAABDbgA== Date: Thu, 8 Feb 2018 12:44:39 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [88.214.160.125] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2724; 7:kGxDU4XG2fIBSmGgSzlfJmLxrQJApkA44rI51aTeFYDcVkEZKkdY0JP6N9gf9wNojWnU9iVvNm+x8uv72DRULu9uWYsIy63hMuiXddvwCCv19SW5bV9/8LBdqucbWk0CFBU6YLBBnXdf5YPVp1KXTEXqj8Qw5x5EbGUzkbDrTjE8zxtVYzCxmsdKcTxUZIEhbP6SilXuyJsskQVChBGuY93qkL+9gD9eFyHz9otbrNTdP+UVYA6s9+ngI6inEzxc x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9480e4e4-345b-4bb8-f2da-08d56ef1b831 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2724; x-ms-traffictypediagnostic: AM4PR0801MB2724: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(37575265505322)(28532068793085)(158342451672863)(180628864354917)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(10201501046)(3231101)(2400082)(944501161)(6055026)(6041288)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:AM4PR0801MB2724; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB2724; x-forefront-prvs: 0577AD41D6 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(39380400002)(39860400002)(346002)(396003)(366004)(53754006)(40434004)(189003)(199004)(561944003)(790700001)(25786009)(110136005)(66066001)(5660300001)(6246003)(6436002)(2501003)(81156014)(68736007)(81166006)(33656002)(5250100002)(5890100001)(7736002)(54896002)(6306002)(53936002)(106356001)(97736004)(229853002)(478600001)(102836004)(2900100001)(8936002)(6506007)(14454004)(236005)(9686003)(8676002)(86362001)(6116002)(55016002)(99286004)(74316002)(3660700001)(26005)(186003)(2950100002)(53546011)(72206003)(7696005)(606006)(2906002)(105586002)(316002)(3280700002)(59450400001)(3846002)(966005)(76176011); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2724; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: g4HB4LLsIW34CZGImWwswn17AuOg1wG53of+7q/7dKQlubVqsqe44FOzLbArHkKSygfQik2osxHOS+iKrnOPDQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706D787BC1ED8432CB95243FAF30AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9480e4e4-345b-4bb8-f2da-08d56ef1b831 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Feb 2018 12:44:39.8154 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2724 Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Feb 2018 12:44:49 -0000 --_000_AM4PR0801MB2706D787BC1ED8432CB95243FAF30AM4PR0801MB2706_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgR8O2cmFuLA0KDQpJIGJlbGlldmUgdGhlcmUgYXJlIG5ldyBkYXRhIHBvaW50cyBvbiB0aGlz IHRvcGljIHNpbmNlIHRoZSB0aW1lIHRoZSByZXF1aXJlbWVudHMgJiB1c2UgY2FzZSBkcmFmdCB3 YXMgcHVibGlzaGVkLiBBIGxvdCBvZiB1c2UgY2FzZXMgd2VyZSB3cml0dGVuIGRvd24gYW5kIG5v dCBhbGwgb2YgdGhlbSBhcmUgc3RpbGwgYmVpbmcgY29uc2lkZXJlZCBieSB0aGUgZm9sa3MgaW4g dGhlIHdvcmtpbmcgZ3JvdXAuIFRpbWUgaGFzIHBhc3NlZCBhbmQgd2UgaGF2ZW7igJl0IHNlZW4g dGhlIHNhbWUgYW1vdW50IG9mIGludGVyZXN0IGluIHRoZSBDbGllbnQgVG9rZW4gZXZlbiBhbW9u ZyB0aGUgYXV0aG9ycyBhcyB3aXRoIHRoZSBvdGhlciBmdW5jdGlvbmFsaXR5LiBGdXJ0aGVybW9y ZSwgd2UgaGF2ZSBhbHNvIHJlY2VpdmVkIGEgcmV2aWV3IGZyb20gTWlrZSB3aGVyZSBoZSByZXN0 YXRlZCB3aGF0IEkgc2FpZCBlYXJsaWVyIGFib3V0IHRoZSBDbGllbnQgVG9rZW4uIFRoZW4sIHRo ZXJlIHdhcyB0aGUgcmVjZW50IElQUiBkaXNjbG9zdXJlLg0KDQpJZiB5b3UgYmVsaWV2ZSB3ZSBu ZWVkIHRvIGNvdmVyIHRoZSBDbGllbnQgVG9rZW4gZnVuY3Rpb25hbGl0eSBiZWNhdXNlIHlvdSBu ZWVkIGl0IHRoZW4geW91IHRoYXTigJlzIE9rLiBCdXQgc28gZmFyIEkgZG9u4oCZdCB0aGluayBJ IGhlYXIgeW91IHNheSB0aGF0Lg0KDQpUaGUgdGVybSB1c2VkIGluIHRoZSBDbGllbnQgVG9rZW4g Zm9yIHRoZSBtZXNzYWdlIHNlbnQgYnkgdGhlIENsaWVudCB0byB0aGUgUlMgaXMgdGhlIEFjY2Vz cyBUb2tlbiBidXQgaXQgYWN0dWFsbHkgaXNu4oCZdCByZWFsbHkgYW4gYWNjZXNzIHRva2VuLiBG b3IgdGhvc2Ugd2hvIHdhbnQgdG8gd29yayBvbiB0aGUgcHJvcG9zYWwgSSB3b3VsZCByZWNvbW1l bmQgdG8gY2hhbmdlIGl0IGFzIHdlbGwuIFNvIGZhciwgSSBoYXZlIG5vdCBzZWVuIGEgcHJvYmxl bSB3aXRoIHRoZSBQb1AtYmFzZWQgYWNjZXNzIHRva2VuLg0KDQpDaWFvDQpIYW5uZXMNCg0KUFM6 IEkgYW0gYWxzbyBlbmNvdXJhZ2Ugb3RoZXJzIHRvIGFuYWx5c2UgdGhlIGZ1bmN0aW9uYWxpdHkg aW4gdGhlIE9BdXRoLUFDRSAoYW5kIGluIG90aGVyIHNwZWNzKS4NCg0KDQpGcm9tOiBHw7ZyYW4g U2VsYW5kZXIgW21haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb21dDQpTZW50OiAwOCBG ZWJydWFyeSAyMDE4IDEyOjM2DQpUbzogSGFubmVzIFRzY2hvZmVuaWc7IGFjZUBpZXRmLm9yZw0K U3ViamVjdDogUmU6IFtBY2VdIFJlbW92YWwgb2YgdGhlIENsaWVudCBUb2tlbiBmcm9tIEFDRS1P QXV0aCBkcmFmdA0KDQpIaSBIYW5uZXMsDQoNClRoZSBwYXBlciB5b3UgYXJlIHJlZmVycmluZyB0 byB3YXMgdGhlIG9ubHkgbmV3IGRhdGEgcG9pbnQgeW91IGluY2x1ZGVkIHdoZW4geW91IHN0YXJ0 ZWQgdGhpcyB0aHJlYWQuIEnigJltIG5vdCBxdWVzdGlvbmluZyB0aGUgY29ycmVjdG5lc3Mgb2Yg eW91ciBhbmFseXNpcywganVzdCBzYXlpbmcgdGhhdCB3ZSBhcmUgbm93IHRha2luZyBhY3Rpb24g d2l0aG91dCBoYXZpbmcgc2VlbiB0aGUgYW5hbHlzaXMuDQoNCkFzIEkgcmVwbGllZCB0byB5b3Ug aW4gb3VyIGRpc2N1c3Npb24gaGVyZSBhdCB0aGUgT01BIG1lZXRpbmcgdGhlIGxhY2sgb2YgYXV0 aGVudGljYXRpb24gZnJvbSBSUyB0byB0aGUgQVMgbWF5IGFjdHVhbGx5IGNhcnJ5IG92ZXIgdG8g dGhlIEFjY2VzcyBUb2tlbi4gU2hvdWxkIHdlIHRoZW4gcmVtb3ZlIHRoZSBBY2Nlc3MgVG9rZW4g YXMgd2VsbD8NCg0KTXkgcGVyc29uYWwgdmlldyBvbiB0aGlzIGlzIHRoYXQgd2Ugc2hvdWxkIHRy eSB0byBzdXBwb3J0IHRoZSB1c2UgY2FzZSB3aXRoIG9mZmxpbmUgQ2xpZW50cyAoaS5lLiB3aGlj aCBjYW5ub3QgY29tbXVuaWNhdGUgZGlyZWN0bHkgd2l0aCB0aGUgQVMpIHdoaWNoIGRvZXMgbm90 IGhhdmUgYSBwcmV2aW91cyBzZWN1cml0eSBhc3NvY2lhdGlvbiB3aXRoIHRoZSBSUyAoZS5nLiBk dXJpbmcgZGV2aWNlIGRlcGxveW1lbnQpLiBUaGlzIHdvdWxkIGVuY29tcGFzc2VzIHRoZSBhdXRo b3JpemF0aW9uIG9mIENsaWVudCBhbmQga2V5IHByb3Zpc2lvbmluZyB0byB0aGUgUlMuIFRoaXMg aXMgdGhlIEFjY2VzcyBUb2tlbi4gSXQgYWRkaXRpb25hbGx5IHJlcXVpcmVzIGtleSBwcm92aXNp b25pbmcgdG8gdGhlIENsaWVudCwgYW5kLCBpZiBkZXNpcmVkLCB0aGUgImF1dGhvcml6YXRpb24i IG9mIFJTIC0gaS5lLiB0aGUgY29uZGl0aW9ucyB1bmRlciB3aGljaCB0aGUgQ2xpZW50IHNob3Vs ZCBhY3R1YWxseSBtYWtlIHRoZSByZXF1ZXN0LiBIb3cgZG8gd2UgZ2V0IHRoYXQgaW5mb3JtYXRp b24gZnJvbSB0aGUgQVMgdG8gdGhlIENsaWVudD8NCg0KR8O2cmFuDQoNCg0KDQoNCkZyb206IEhh bm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPG1haWx0bzpIYW5uZXMu VHNjaG9mZW5pZ0Bhcm0uY29tPj4NCkRhdGU6IFRodXJzZGF5IDggRmVicnVhcnkgMjAxOCBhdCAx MDozOA0KVG86IEfDtnJhbiBTZWxhbmRlciA8Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPG1h aWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20+PiwgImFjZUBpZXRmLm9yZzxtYWlsdG86 YWNlQGlldGYub3JnPiIgPGFjZUBpZXRmLm9yZzxtYWlsdG86YWNlQGlldGYub3JnPj4NClN1Ympl Y3Q6IFJFOiBbQWNlXSBSZW1vdmFsIG9mIHRoZSBDbGllbnQgVG9rZW4gZnJvbSBBQ0UtT0F1dGgg ZHJhZnQNCg0KSGkgR8O2cmFuLA0KDQpJIGhhdmVu4oCZdCBwb3N0ZWQgdGhlIHdyaXRlLXVwIHll dCBzaW5jZSBpdCBpcyBhIHN1Ym1pc3Npb24gdG8gdGhlIHdvcmtzaG9wIGFuZCB0aGUgcGFwZXJz IGFyZSBjdXJyZW50bHkgaW4gcmV2aWV3LiBBcyBtZW50aW9uZWQgdG8geW91IGF0IHRoZSBPTUEg bWVldGluZyB3ZSBhcmUgY3VycmVudGx5IGF0dGVuZGluZyB0aGUgYW5hbHlzaXMgcmV2ZWFsZWQg dHdvIGlzc3VlcywgbmFtZWx5IHRoZSBsYWNrIG9mIHN0YXRlZCBnb2FscyAod2hpY2ggbWFrZXMg YW55IHNlY3VyaXR5IGFuYWx5c2lzIGNoYWxsZW5naW5nKSBhbmQgdGhlIGxhY2sgb2YgYXV0aGVu dGljYXRpb24gZnJvbSB0aGUgY2xpZW50IHRvIHRoZSBBUy4NCg0KSU1ITyBpdCBpcywgaG93ZXZl ciwgb25seSBhIHNtYWxsIGRhdGEgcG9pbnQgaW4gdGhpcyBkaXNjdXNzaW9uLg0KDQpJIGJlbGll dmUgdGhlIG1vcmUgaW1wb3J0YW50IHF1ZXN0aW9uIGlzIHdoZXRoZXIgdGhlcmUgYXJlIHBlb3Bs ZSBpbiBpbnRlcmVzdGVkIGluIHRoaXMgc2NlbmFyaW8gb3Igbm90LiBJIGhhdmUgc3RhcnRlZCBt eSBvcGluaW9uIGFib3V0IHRoaXMgYWxyZWFkeSBhdCBlYXJsaWVyIG1lZXRpbmdzLg0KDQpUaGVy ZSBpcyBhbHNvIHRoZSBJUFIgZGlzY2xvc3VyZSB0aGF0IHNvbWUgZm9sa3MgbWF5IHRha2UgaW50 byBhY2NvdW50LCB3aGljaCB3YXMgcG9zdGVkIHRvIHRoZSBsaXN0OiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsLWFyY2hpdmUvd2ViL2FjZS9jdXJyZW50L21zZzAyNTcyLmh0bWwNCg0KU2luY2Ug eW91IGhhdmUgbm90IHBvc3RlZCB5b3VyIHZpZXcgb24gdGhpcyB0b3BpYyB5ZXQgeW91IG1heSB3 YW50IHRvIHRoaW5rIGFib3V0IHdoZXRoZXIgeW91IGNvbnNpZGVyIHRoZSBmZWF0dXJlIGltcG9y dGFudCBmb3IgRXJpY3Nzb24uIElmIHlvdSBiZWxpZXZlIGl0IGlzIGltcG9ydGFudCB0aGVuIG1h eWJlIHlvdSBjb3VsZCwgYXMgQ2Fyc3RlbiBzdWdnZXN0ZWQsIGNvbnRpbnVlIHdvcmtpbmcgb24g dGhlIGZ1bmN0aW9uYWxpdHkgaW4gYW4gaW5kZXBlbmRlbnQgZG9jdW1lbnQuDQoNCklmIHlvdSB3 YW50IHRvIHNwZW5kIHlvdXIgdGltZSBvbiBpdCB0aGVuIEkgd291bGQgcmVjb21tZW5kIHRvIGRv IHR3byB0aGluZ3MsIG5hbWVseSAoYSkgc3BlY2lmeSB3aGF0IGdvYWxzIHRoZSBtZWNoYW5pc20g aXMgc3VwcG9zZWQgdG8gYWNjb21wbGlzaCBhbmQgKGIpIGJ1aWxkIGl0IG9uIHRvcCBvZiBleGlz dGluZyBhdXRoZW50aWNhdGlvbiBhbmQga2V5IGV4Y2hhbmdlIHByb3RvY29sLiBUaGUgbGF0dGVy IHBhcnQgaXMgcXVpdGUgZWFzeSBzaW5jZSBsb3RzIG9mIHJlc2VhcmNoIHdhcyBkb25lIG9uIDMt cGFydHkgc2VjdXJpdHkgcHJvdG9jb2xzIGFuZCB0aGVyZSBhcmUgdmFyaW91cyBwcm90b2NvbHMg dGhhdCBmaXQgdGhlIGRlc2lyZWQgbWVzc2FnZSBjb21tdW5pY2F0aW9uIHBhdHRlcm4uIFRoaXMg Y291bGQgZ2l2ZSBoaWdoZXIgY29uZmlkZW5jZSBpbiB0aGUgd29yay4NCg0KQ2lhbw0KSGFubmVz DQoNCkZyb206IEfDtnJhbiBTZWxhbmRlciBbbWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29u LmNvbV0NClNlbnQ6IDA4IEZlYnJ1YXJ5IDIwMTggMDk6MjINClRvOiBIYW5uZXMgVHNjaG9mZW5p ZzsgYWNlQGlldGYub3JnPG1haWx0bzphY2VAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0FjZV0g UmVtb3ZhbCBvZiB0aGUgQ2xpZW50IFRva2VuIGZyb20gQUNFLU9BdXRoIGRyYWZ0DQoNCkhpIEhh bm5lcywNCg0KRnJvbTogQWNlIDxhY2UtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86YWNlLWJvdW5j ZXNAaWV0Zi5vcmc+PiBvbiBiZWhhbGYgb2YgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2No b2ZlbmlnQGFybS5jb208bWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+Pg0KRGF0ZTog VGh1cnNkYXkgMSBGZWJydWFyeSAyMDE4IGF0IDEzOjU5DQpUbzogImFjZUBpZXRmLm9yZzxtYWls dG86YWNlQGlldGYub3JnPiIgPGFjZUBpZXRmLm9yZzxtYWlsdG86YWNlQGlldGYub3JnPj4NClN1 YmplY3Q6IFtBY2VdIFJlbW92YWwgb2YgdGhlIENsaWVudCBUb2tlbiBmcm9tIEFDRS1PQXV0aCBk cmFmdA0KDQpIaSBhbGwsDQoNCnRoZSBDbGllbnQgVG9rZW4gaXMgYSBuZXcgbWVjaGFuaXNtIGlu IHRoZSBBQ0UtT0F1dGggdGhhdCBhaW1zIHRvIHNvbHZlIGEgc2NlbmFyaW8gd2hlcmUgdGhlIENs aWVudCBkb2VzIG5vdCBoYXZlIGNvbm5lY3Rpdml0eSB0byB0aGUgQXV0aG9yaXphdGlvbiBTZXJ2 ZXIgdG8gb2J0YWluIGFuIGFjY2VzcyB0b2tlbiB3aGlsZSB0aGUgUmVzb3VyY2UgU2VydmVyIGRv ZXMuDQoNClRoZSBzb2x1dGlvbiBpcyB0aGVyZWZvcmUgZm9yIHRoZSBDbGllbnQgdG8gdXNlIHRo ZSBSZXNvdXJjZSBTZXJ2ZXIgdG8gcmVsYXkgbWVzc2FnZXMgdG8gdGhlIEF1dGhvcml6YXRpb24g U2VydmVyLg0KDQpXaGlsZSB0aGlzIHNvdW5kcyBuaWNlIGl0IGRvZXMgbm90IGZvbGxvdyB0aGUg T0F1dGggbW9kZWwgYW5kIHdlLCBhdCBBUk0sIGhhdmUgbm90IHNlZW4gYW55b25lIHJlcXVlc3Rp bmcgdGhpcyBmZWF0dXJlLiBJdCBpcyBhbHNvIG5vdCBmdWxseSBzcGVjaWZpZWQgaW4gdGhlIHNw ZWM6IHNpbmNlIEkgaGF2ZSBiZWVuIGRvaW5nIGEgZm9ybWFsIGFuYWx5c2lzIG9mIHRoaXMgcHJv dG9jb2wgdmFyaWFudCBmb3IgdGhlIE9BdXRoIFNlY3VyaXR5IFdvcmtzaG9wIEkgaGFkIHRvIG5v dGljZSB0aGF0IGl0IGlzIG5vdCBzZWN1cmUuIChJIHdpbGwgcG9zdCB0aGUgcGFwZXIgdG8gdGhl IGxpc3QgYXNhcC4pDQoNCkhhdmUgeW91IHBvc3RlZCB0aGlzPyBJIGNvdWxkbuKAmXQgZmluZCBp dCBteSBJbmJveC4NCg0KR8O2cmFuDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2Yg dGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBh bHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQs IHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3Nl IHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3Nl LCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5 b3UuDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55 IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQu IElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhl IHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBh bnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5 IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= --_000_AM4PR0801MB2706D787BC1ED8432CB95243FAF30AM4PR0801MB2706_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJbXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7 fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24gVGV4dCBDaGFyIjsNCglt YXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6OC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdl OkVOLVVTO30NCnNwYW4uQmFsbG9vblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJCYWxsb29u IFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJC YWxsb29uIFRleHQiOw0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjsNCgltc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNv bG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0 OTdEO30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9 DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNp emU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsN CgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjEN Cgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tR0IiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+SGkgR8O2cmFuLA0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkkgYmVsaWV2ZSB0 aGVyZSBhcmUgbmV3IGRhdGEgcG9pbnRzIG9uIHRoaXMgdG9waWMgc2luY2UgdGhlIHRpbWUgdGhl IHJlcXVpcmVtZW50cyAmYW1wOyB1c2UgY2FzZSBkcmFmdCB3YXMgcHVibGlzaGVkLiBBIGxvdCBv ZiB1c2UgY2FzZXMNCiB3ZXJlIHdyaXR0ZW4gZG93biBhbmQgbm90IGFsbCBvZiB0aGVtIGFyZSBz dGlsbCBiZWluZyBjb25zaWRlcmVkIGJ5IHRoZSBmb2xrcyBpbiB0aGUgd29ya2luZyBncm91cC4g VGltZSBoYXMgcGFzc2VkIGFuZCB3ZSBoYXZlbuKAmXQgc2VlbiB0aGUgc2FtZSBhbW91bnQgb2Yg aW50ZXJlc3QgaW4gdGhlIENsaWVudCBUb2tlbiBldmVuIGFtb25nIHRoZSBhdXRob3JzIGFzIHdp dGggdGhlIG90aGVyIGZ1bmN0aW9uYWxpdHkuIEZ1cnRoZXJtb3JlLCB3ZQ0KIGhhdmUgYWxzbyBy ZWNlaXZlZCBhIHJldmlldyBmcm9tIE1pa2Ugd2hlcmUgaGUgcmVzdGF0ZWQgd2hhdCBJIHNhaWQg ZWFybGllciBhYm91dCB0aGUgQ2xpZW50IFRva2VuLiBUaGVuLCB0aGVyZSB3YXMgdGhlIHJlY2Vu dCBJUFIgZGlzY2xvc3VyZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Ozttc28tZmFyZWFz dC1sYW5ndWFnZTpFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1m YXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5JZiB5b3UgYmVsaWV2ZSB3ZSBuZWVkIHRvIGNvdmVyIHRo ZSBDbGllbnQgVG9rZW4gZnVuY3Rpb25hbGl0eSBiZWNhdXNlIHlvdSBuZWVkIGl0IHRoZW4geW91 IHRoYXTigJlzIE9rLiBCdXQgc28gZmFyIEkgZG9u4oCZdCB0aGluayBJIGhlYXINCiB5b3Ugc2F5 IHRoYXQuIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtU YWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLUdCIj5UaGUgdGVybSB1c2VkIGluIHRoZSBDbGllbnQgVG9rZW4gZm9yIHRoZSBtZXNz YWdlIHNlbnQgYnkgdGhlIENsaWVudCB0byB0aGUgUlMgaXMgdGhlIEFjY2VzcyBUb2tlbiBidXQg aXQgYWN0dWFsbHkgaXNu4oCZdCByZWFsbHkgYW4NCiBhY2Nlc3MgdG9rZW4uIEZvciB0aG9zZSB3 aG8gd2FudCB0byB3b3JrIG9uIHRoZSBwcm9wb3NhbCBJIHdvdWxkIHJlY29tbWVuZCB0byBjaGFu Z2UgaXQgYXMgd2VsbC4gU28gZmFyLCBJIGhhdmUgbm90IHNlZW4gYSBwcm9ibGVtIHdpdGggdGhl IFBvUC1iYXNlZCBhY2Nlc3MgdG9rZW4uDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7bXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+Q2lhbzxicj4NCkhhbm5lczxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5kQ29tcG9z ZSI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWxh bmd1YWdlOkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2E+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1m YXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5QUzogSSBhbSBhbHNvIGVuY291cmFnZSBvdGhlcnMgdG8g YW5hbHlzZSB0aGUgZnVuY3Rpb25hbGl0eSBpbiB0aGUgT0F1dGgtQUNFIChhbmQgaW4gb3RoZXIg c3BlY3MpLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdC Ij4gR8O2cmFuDQogU2VsYW5kZXIgW21haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb21d IDxicj4NCjxiPlNlbnQ6PC9iPiAwOCBGZWJydWFyeSAyMDE4IDEyOjM2PGJyPg0KPGI+VG86PC9i PiBIYW5uZXMgVHNjaG9mZW5pZzsgYWNlQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJl OiBbQWNlXSBSZW1vdmFsIG9mIHRoZSBDbGllbnQgVG9rZW4gZnJvbSBBQ0UtT0F1dGggZHJhZnQ8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPkhpIEhhbm5lcyw8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPlRoZSBwYXBlciB5b3UgYXJlIHJlZmVy cmluZyB0byB3YXMgdGhlIG9ubHkgbmV3IGRhdGEgcG9pbnQgeW91IGluY2x1ZGVkIHdoZW4geW91 IHN0YXJ0ZWQgdGhpcyB0aHJlYWQuIEnigJltIG5vdCBxdWVzdGlvbmluZyB0aGUgY29ycmVjdG5l c3Mgb2YgeW91ciBhbmFseXNpcywganVzdCBzYXlpbmcgdGhhdCB3ZSBhcmUgbm93IHRha2luZyBh Y3Rpb24NCiB3aXRob3V0IGhhdmluZyBzZWVuIHRoZSBhbmFseXNpcy4mbmJzcDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPkFzIEkgcmVwbGllZCB0byB5b3UgaW4gb3Vy IGRpc2N1c3Npb24gaGVyZSBhdCB0aGUgT01BIG1lZXRpbmcgdGhlIGxhY2sgb2YgYXV0aGVudGlj YXRpb24gZnJvbSBSUyB0byB0aGUgQVMgbWF5IGFjdHVhbGx5IGNhcnJ5IG92ZXIgdG8gdGhlIEFj Y2VzcyBUb2tlbi4gU2hvdWxkIHdlIHRoZW4gcmVtb3ZlIHRoZSBBY2Nlc3MgVG9rZW4gYXMNCiB3 ZWxsPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+TXkgcGVyc29uYWwg dmlldyBvbiB0aGlzIGlzIHRoYXQgd2Ugc2hvdWxkIHRyeSB0byBzdXBwb3J0IHRoZSB1c2UgY2Fz ZSB3aXRoIG9mZmxpbmUgQ2xpZW50cyAoaS5lLiB3aGljaCBjYW5ub3QgY29tbXVuaWNhdGUgZGly ZWN0bHkgd2l0aCB0aGUgQVMpIHdoaWNoIGRvZXMgbm90IGhhdmUgYSBwcmV2aW91cyBzZWN1cml0 eSBhc3NvY2lhdGlvbg0KIHdpdGggdGhlIFJTIChlLmcuIGR1cmluZyBkZXZpY2UgZGVwbG95bWVu dCkuIFRoaXMgd291bGQgZW5jb21wYXNzZXMgdGhlIGF1dGhvcml6YXRpb24gb2YgQ2xpZW50IGFu ZCBrZXkgcHJvdmlzaW9uaW5nIHRvIHRoZSBSUy4gVGhpcyBpcyB0aGUgQWNjZXNzIFRva2VuLiBJ dCBhZGRpdGlvbmFsbHkgcmVxdWlyZXMga2V5IHByb3Zpc2lvbmluZyB0byB0aGUgQ2xpZW50LCBh bmQsIGlmIGRlc2lyZWQsIHRoZSAmcXVvdDthdXRob3JpemF0aW9uJnF1b3Q7IG9mIFJTIC0NCiBp LmUuIHRoZSBjb25kaXRpb25zIHVuZGVyIHdoaWNoIHRoZSBDbGllbnQgc2hvdWxkIGFjdHVhbGx5 IG1ha2UgdGhlIHJlcXVlc3QuIEhvdyBkbyB3ZSBnZXQgdGhhdCBpbmZvcm1hdGlvbiBmcm9tIHRo ZSBBUyB0byB0aGUgQ2xpZW50PzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9y OmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFj ayI+R8O2cmFuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9i PjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+SGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9 Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0u Y29tPC9hPiZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+VGh1cnNkYXkgOCBGZWJydWFyeSAyMDE4IGF0 IDEwOjM4PGJyPg0KPGI+VG86IDwvYj5Hw7ZyYW4gU2VsYW5kZXIgJmx0OzxhIGhyZWY9Im1haWx0 bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20iPmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNv bTwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5v cmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5v cmc8L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SRTogW0FjZV0gUmVtb3ZhbCBvZiB0aGUg Q2xpZW50IFRva2VuIGZyb20gQUNFLU9BdXRoIGRyYWZ0PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNCNUM0 REYgNC41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdDttYXJnaW4tbGVmdDozLjc1cHQ7bWFy Z2luLXJpZ2h0OjBjbSIgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NLUVVPVEUiPg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+SGkgPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjpibGFjayI+R8O2cmFuLA0KPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PHNwYW4g c3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Ymxh Y2siPkkgaGF2ZW7igJl0IHBvc3RlZCB0aGUgd3JpdGUtdXAgeWV0IHNpbmNlIGl0IGlzIGEgc3Vi bWlzc2lvbiB0byB0aGUgd29ya3Nob3AgYW5kIHRoZSBwYXBlcnMgYXJlIGN1cnJlbnRseSBpbiBy ZXZpZXcuIEFzIG1lbnRpb25lZCB0byB5b3UgYXQgdGhlIE9NQQ0KIG1lZXRpbmcgd2UgYXJlIGN1 cnJlbnRseSBhdHRlbmRpbmcgdGhlIGFuYWx5c2lzIHJldmVhbGVkIHR3byBpc3N1ZXMsIG5hbWVs eSB0aGUgbGFjayBvZiBzdGF0ZWQgZ29hbHMgKHdoaWNoIG1ha2VzIGFueSBzZWN1cml0eSBhbmFs eXNpcyBjaGFsbGVuZ2luZykgYW5kIHRoZSBsYWNrIG9mIGF1dGhlbnRpY2F0aW9uIGZyb20gdGhl IGNsaWVudCB0byB0aGUgQVMuDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFj ayI+SU1ITyBpdCBpcywgaG93ZXZlciwgb25seSBhIHNtYWxsIGRhdGEgcG9pbnQgaW4gdGhpcyBk aXNjdXNzaW9uLg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImNv bG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPkkgYmVs aWV2ZSB0aGUgbW9yZSBpbXBvcnRhbnQgcXVlc3Rpb24gaXMgd2hldGhlciB0aGVyZSBhcmUgcGVv cGxlIGluIGludGVyZXN0ZWQgaW4gdGhpcyBzY2VuYXJpbyBvciBub3QuIEkgaGF2ZSBzdGFydGVk IG15IG9waW5pb24gYWJvdXQgdGhpcyBhbHJlYWR5DQogYXQgZWFybGllciBtZWV0aW5ncy4gPC9z cGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPlRoZXJlIGlzIGFsc28gdGhlIElQ UiBkaXNjbG9zdXJlIHRoYXQgc29tZSBmb2xrcyBtYXkgdGFrZSBpbnRvIGFjY291bnQsIHdoaWNo IHdhcyBwb3N0ZWQgdG8gdGhlIGxpc3Q6DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsLWFyY2hpdmUvd2ViL2FjZS9jdXJyZW50L21zZzAyNTcyLmh0bWwiPmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWwtYXJjaGl2ZS93ZWIvYWNlL2N1cnJlbnQvbXNnMDI1NzIuaHRtbDwvYT48L3Nw YW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+U2luY2UgeW91IGhhdmUgbm90IHBv c3RlZCB5b3VyIHZpZXcgb24gdGhpcyB0b3BpYyB5ZXQgeW91IG1heSB3YW50IHRvIHRoaW5rIGFi b3V0IHdoZXRoZXIgeW91IGNvbnNpZGVyIHRoZSBmZWF0dXJlIGltcG9ydGFudCBmb3IgRXJpY3Nz b24uIElmIHlvdQ0KIGJlbGlldmUgaXQgaXMgaW1wb3J0YW50IHRoZW4gbWF5YmUgeW91IGNvdWxk LCBhcyBDYXJzdGVuIHN1Z2dlc3RlZCwgY29udGludWUgd29ya2luZyBvbiB0aGUgZnVuY3Rpb25h bGl0eSBpbiBhbiBpbmRlcGVuZGVudCBkb2N1bWVudC4NCjwvc3Bhbj48c3BhbiBzdHlsZT0iY29s b3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7 PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOmJsYWNrIj5JZiB5b3Ugd2FudCB0byBzcGVuZCB5b3VyIHRpbWUgb24gaXQgdGhl biBJIHdvdWxkIHJlY29tbWVuZCB0byBkbyB0d28gdGhpbmdzLCBuYW1lbHkgKGEpIHNwZWNpZnkg d2hhdCBnb2FscyB0aGUgbWVjaGFuaXNtIGlzIHN1cHBvc2VkIHRvIGFjY29tcGxpc2gNCiBhbmQg KGIpIGJ1aWxkIGl0IG9uIHRvcCBvZiBleGlzdGluZyBhdXRoZW50aWNhdGlvbiBhbmQga2V5IGV4 Y2hhbmdlIHByb3RvY29sLiBUaGUgbGF0dGVyIHBhcnQgaXMgcXVpdGUgZWFzeSBzaW5jZSBsb3Rz IG9mIHJlc2VhcmNoIHdhcyBkb25lIG9uIDMtcGFydHkgc2VjdXJpdHkgcHJvdG9jb2xzIGFuZCB0 aGVyZSBhcmUgdmFyaW91cyBwcm90b2NvbHMgdGhhdCBmaXQgdGhlIGRlc2lyZWQgbWVzc2FnZSBj b21tdW5pY2F0aW9uIHBhdHRlcm4uIFRoaXMNCiBjb3VsZCBnaXZlIGhpZ2hlciBjb25maWRlbmNl IGluIHRoZSB3b3JrLiA8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+Q2lh bzwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjpibGFjayI+SGFubmVzPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6YmxhY2siPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPiBHw7ZyYW4gU2VsYW5kZXIgWzxhIGhyZWY9 Im1haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20iPm1haWx0bzpnb3Jhbi5zZWxhbmRl ckBlcmljc3Nvbi5jb208L2E+XQ0KPGJyPg0KPGI+U2VudDo8L2I+IDA4IEZlYnJ1YXJ5IDIwMTgg MDk6MjI8YnI+DQo8Yj5Ubzo8L2I+IEhhbm5lcyBUc2Nob2ZlbmlnOyA8YSBocmVmPSJtYWlsdG86 YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBb QWNlXSBSZW1vdmFsIG9mIHRoZSBDbGllbnQgVG9rZW4gZnJvbSBBQ0UtT0F1dGggZHJhZnQ8L3Nw YW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNr Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPkhpIEhhbm5lcyw8 L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFj ayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBj bSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkZy b206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5BY2UgJmx0OzxhIGhyZWY9 Im1haWx0bzphY2UtYm91bmNlc0BpZXRmLm9yZyI+YWNlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0 OyBvbiBiZWhhbGYgb2YgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5u ZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDs8 YnI+DQo8Yj5EYXRlOiA8L2I+VGh1cnNkYXkgMSBGZWJydWFyeSAyMDE4IGF0IDEzOjU5PGJyPg0K PGI+VG86IDwvYj4mcXVvdDs8YSBocmVmPSJtYWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5v cmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5v cmc8L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5bQWNlXSBSZW1vdmFsIG9mIHRoZSBDbGll bnQgVG9rZW4gZnJvbSBBQ0UtT0F1dGggZHJhZnQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0I1QzRERiA0LjVwdDtwYWRkaW5nOjBjbSAwY20gMGNt IDQuMHB0O21hcmdpbi1sZWZ0OjMuNzVwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDow Y207bWFyZ2luLWJvdHRvbTo1LjBwdCIgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NL UVVPVEUiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPkhpIGFsbCwgPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPnRo ZSBDbGllbnQgVG9rZW4gaXMgYSBuZXcgbWVjaGFuaXNtIGluIHRoZSBBQ0UtT0F1dGggdGhhdCBh aW1zIHRvIHNvbHZlIGEgc2NlbmFyaW8gd2hlcmUgdGhlIENsaWVudCBkb2VzIG5vdCBoYXZlIGNv bm5lY3Rpdml0eSB0byB0aGUgQXV0aG9yaXphdGlvbiBTZXJ2ZXIgdG8gb2J0YWluIGFuIGFjY2Vz cyB0b2tlbiB3aGlsZSB0aGUgUmVzb3VyY2UgU2VydmVyIGRvZXMuDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZu YnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+VGhlIHNvbHV0aW9uIGlzIHRoZXJlZm9yZSBmb3IgdGhlIENsaWVu dCB0byB1c2UgdGhlIFJlc291cmNlIFNlcnZlciB0byByZWxheSBtZXNzYWdlcyB0byB0aGUgQXV0 aG9yaXphdGlvbiBTZXJ2ZXIuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+V2hp bGUgdGhpcyBzb3VuZHMgbmljZSBpdCBkb2VzIG5vdCBmb2xsb3cgdGhlIE9BdXRoIG1vZGVsIGFu ZCB3ZSwgYXQgQVJNLCBoYXZlIG5vdCBzZWVuIGFueW9uZSByZXF1ZXN0aW5nIHRoaXMgZmVhdHVy ZS4gSXQgaXMgYWxzbyBub3QgZnVsbHkgc3BlY2lmaWVkIGluIHRoZSBzcGVjOiBzaW5jZSBJIGhh dmUgYmVlbiBkb2luZyBhIGZvcm1hbCBhbmFseXNpcyBvZiB0aGlzDQogcHJvdG9jb2wgdmFyaWFu dCBmb3IgdGhlIE9BdXRoIFNlY3VyaXR5IFdvcmtzaG9wIEkgaGFkIHRvIG5vdGljZSB0aGF0IGl0 IGlzIG5vdCBzZWN1cmUuIChJIHdpbGwgcG9zdCB0aGUgcGFwZXIgdG8gdGhlIGxpc3QgYXNhcC4p PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtj b2xvcjpibGFjazttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+Jm5ic3A7PC9zcGFuPjxzcGFu IHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29s b3I6YmxhY2s7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkhhdmUgeW91IHBvc3RlZCB0aGlz PyBJIGNvdWxkbuKAmXQgZmluZCBpdCBteSBJbmJveC48L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9y OmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjazttc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2s7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkfDtnJhbjwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2s7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6RU4tR0IiPklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUNCiBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29u dGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3Rv cmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2 Pg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBh dHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJ ZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBz ZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55 IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBvciBjb3B5 IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8L2JvZHk+DQo8L2h0 bWw+DQo= --_000_AM4PR0801MB2706D787BC1ED8432CB95243FAF30AM4PR0801MB2706_-- From nobody Thu Feb 8 12:08:47 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4B89120713 for ; Thu, 8 Feb 2018 12:08:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W27HrukZRzSV for ; Thu, 8 Feb 2018 12:08:45 -0800 (PST) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2668712D7F7 for ; Thu, 8 Feb 2018 12:08:44 -0800 (PST) X-AuditID: 12074424-dbbff700000065b5-9d-5a7cae4a06e0 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id E7.60.26037.A4EAC7A5; Thu, 8 Feb 2018 15:08:43 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w18K8fVW012496; Thu, 8 Feb 2018 15:08:41 -0500 Received: from mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w18K8bQn010577 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 8 Feb 2018 15:08:39 -0500 Date: Thu, 8 Feb 2018 14:08:37 -0600 From: Benjamin Kaduk To: Hannes Tschofenig Cc: =?iso-8859-1?Q?G=F6ran?= Selander , "ace@ietf.org" Message-ID: <20180208200836.GF12363@mit.edu> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprHKsWRmVeSWpSXmKPExsUixCmqreu9ribKoLVRwuL7tx5mi+evJ7Nb 3JxxismB2WPNvDWMHr++XmXzWLLkJ1MAcxSXTUpqTmZZapG+XQJXxtwDj1kLbrBX/Fz7gLGB cSJbFyMnh4SAicTubTcZuxi5OIQEFjNJXPh1lQnC2cAoMWP3J0aQKiGBM0wSv7vTuxg5OFgE VCQ23agFCbMBmQ3dl5lBbBEBQ4m9zYdYQWxmgWyJ+1vPs4PYwgLOEuuvTmABsXkFdCTaXp5n hpg/lUli95I77BAJQYmTM5+wQDSrS/yZd4kZZBezgLTE8n8cEGF5ieats8F2cQokSux+vxxs l6iAssTevkPsExgFZyGZNAvJpFkIk2YhmbSAkWUVo2xKbpVubmJmTnFqsm5xcmJeXmqRrrle bmaJXmpK6SZGUKCzu6jsYOzu8T7EKMDBqMTDOyGmJkqINbGsuDL3EKMkB5OSKO/mXqAQX1J+ SmVGYnFGfFFpTmrxIUYJDmYlEV7dZqAcb0piZVVqUT5MSpqDRUmc18NEO0pIID2xJDU7NbUg tQgmK8PBoSTB67YWqFGwKDU9tSItM6cEIc3EwQkynAdo+IE1IMOLCxJzizPTIfKnGI052lY+ aWPmuPHidRuzEEtefl6qlDjveZBSAZDSjNI8uGmgZCWRvb/mFaM40HPCvPogS3mAiQ5u3iug VUxAq24EVYKsKklESEk1MAbEb+MRv5a35MKxozbTYh6XFxv+0Hh1IbFt+0F19v2rj806sqjX bzHjk6mMikdZRFjrNtbdnv6+1HiV0ay33qY1fnN1VhZXey+7k7f/oeB9i2SjJ8WTpgU6LDzS Oflp/LztNfukb6i/vjqn6LLixt2zOpfvfZW4T1RLbV7HM//dVh8vnLTmeDhDiaU4I9FQi7mo OBEAzglOZTEDAAA= Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Feb 2018 20:08:47 -0000 On Thu, Feb 08, 2018 at 12:44:39PM +0000, Hannes Tschofenig wrote: > Hi Göran, > > I believe there are new data points on this topic since the time the requirements & use case draft was published. A lot of use cases were written down and not all of them are still being considered by the folks in the working group. Time has passed and we haven’t seen the same amount of interest in the Client Token even among the authors as with the other functionality. Furthermore, we have also received a review from Mike where he restated what I said earlier about the Client Token. Then, there was the recent IPR disclosure. > > If you believe we need to cover the Client Token functionality because you need it then you that’s Ok. But so far I don’t think I hear you say that. Right, this seems to be the key point. If there's not any running code and not going to be any, it's pretty likely that the spec (for this portion) will not actually be usable. -Ben (no hats) From nobody Fri Feb 9 00:04:58 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C392127698 for ; Fri, 9 Feb 2018 00:04:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.621 X-Spam-Level: X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7MNENWJXQ-Rn for ; Fri, 9 Feb 2018 00:04:53 -0800 (PST) Received: from se-out1.mx-wecloud.net (se-out1.mx-wecloud.net [89.221.255.93]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 59F01126DEE for ; Fri, 9 Feb 2018 00:04:53 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out1.mx-wecloud.net (Postfix) with ESMTPS id 90F8320486F for ; Fri, 9 Feb 2018 08:04:48 +0000 (UTC) Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Fri, 9 Feb 2018 09:04:49 +0100 To: References: <20180208200836.GF12363@mit.edu> From: Ludwig Seitz Message-ID: <6e973a27-35af-ce0a-d443-1800a8a86ec7@ri.se> Date: Fri, 9 Feb 2018 09:04:45 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <20180208200836.GF12363@mit.edu> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=cdiiljLM c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=IkcTkHD0fZMA:10 a=Op4juWPpsa0A:10 a=xtERp6CFAAAA:8 a=SPCxXDquv3EOjWTuN_wA:9 a=QEXdDO2ut3YA:10 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Feb 2018 08:04:56 -0000 On 2018-02-08 21:08, Benjamin Kaduk wrote: > On Thu, Feb 08, 2018 at 12:44:39PM +0000, Hannes Tschofenig wrote: >> Hi Göran, >> >> I believe there are new data points on this topic since the time >> the requirements & use case draft was published. A lot of use cases >> were written down and not all of them are still being considered by >> the folks in the working group. Time has passed and we haven’t seen >> the same amount of interest in the Client Token even among the >> authors as with the other functionality. Furthermore, we have also >> received a review from Mike where he restated what I said earlier >> about the Client Token. Then, there was the recent IPR disclosure. >> >> If you believe we need to cover the Client Token functionality >> because you need it then you that’s Ok. But so far I don’t think I >> hear you say that. > > Right, this seems to be the key point. If there's not any running > code and not going to be any, it's pretty likely that the spec (for > this portion) will not actually be usable. > Note that there is running code for client token, if you look here: https://bitbucket.org/lseitz/ace-java/src/beb13e6eeec8eace3539c934b0edc64043327d67/?at=clientToken Also note that I'm not saying we shouldn't move this to a separate draft, but let's keep our facts straight. I'm really curious to see Hannes' paper once he can release it. /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE SICS Phone +46(0)70-349 92 51 From nobody Fri Feb 9 11:27:48 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E64FF12708C for ; Fri, 9 Feb 2018 11:27:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bOFRnxKtNam8 for ; Fri, 9 Feb 2018 11:27:45 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49DA91242F7 for ; Fri, 9 Feb 2018 11:27:45 -0800 (PST) X-AuditID: 1209190c-56dff700000059ce-68-5a7df62edde7 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 16.4E.22990.F26FD7A5; Fri, 9 Feb 2018 14:27:43 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id w19JRdNU020701; Fri, 9 Feb 2018 14:27:40 -0500 Received: from mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w19JRZjp025364 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 9 Feb 2018 14:27:38 -0500 Date: Fri, 9 Feb 2018 13:27:35 -0600 From: Benjamin Kaduk To: Ludwig Seitz Cc: ace@ietf.org Message-ID: <20180209192735.GS12363@mit.edu> References: <20180208200836.GF12363@mit.edu> <6e973a27-35af-ce0a-d443-1800a8a86ec7@ri.se> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6e973a27-35af-ce0a-d443-1800a8a86ec7@ri.se> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrDIsWRmVeSWpSXmKPExsUixG6noqv/rTbK4PIUeYvv33qYLV59ns7q wOSxZMlPJo+lTZuZApiiuGxSUnMyy1KL9O0SuDK+LdjGWvCOtWLxxCamBsaTLF2MnBwSAiYS j4+8Zexi5OIQEljMJDG9dRUzSEJIYAOjxMftRRCJM0wSTRvmsYIkWARUJI4em8oIYrMB2Q3d l8EaRARUJU4+/QJkc3AwCwhIfLieBBIWFnCWWH91AtgyXgEdiQl7+9ggZj5nkphxuIsVIiEo cXLmE7AiZgEtiRv/XjJBzJGWWP6PAyTMKWApMf3/InYQW1RAWWJv3yH2CYwCs5B0z0LSPQuh ewEj8ypG2ZTcKt3cxMyc4tRk3eLkxLy81CJdQ73czBK91JTSTYygIOWU5NnBeOaN1yFGAQ5G JR7ehJW1UUKsiWXFlbmHGCU5mJREedfPAgrxJeWnVGYkFmfEF5XmpBYfYpTgYFYS4b28AijH m5JYWZValA+TkuZgURLndTfRjhISSE8sSc1OTS1ILYLJynBwKEnwVn0FahQsSk1PrUjLzClB SDNxcIIM5wEangpSw1tckJhbnJkOkT/FaMzRtvJJGzPHjRev25iFWPLy81KlxHn3g5QKgJRm lObBTQMlGons/TWvGMWBnhPmZQWp4gEmKbh5r4BWMQGtuusAtqokESEl1cDoMbvw//qJlxK+ 6V3vyO7+Z7164eVP0eaS637K5E2wjz3WoRwZVBe5TvzHp8/arRXf3rKLb1Fcomv/6XLIiXqH /MORac7Ldy1776oYy79Uyn0jN7eaQMzjvOLkX97KMuJPtDavWvT7cJqCk//xSSn5S1NUE519 a87LmzO843nKcCff/PetFW5KLMUZiYZazEXFiQA219bbDwMAAA== Archived-At: Subject: Re: [Ace] Removal of the Client Token from ACE-OAuth draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Feb 2018 19:27:47 -0000 On Fri, Feb 09, 2018 at 09:04:45AM +0100, Ludwig Seitz wrote: > On 2018-02-08 21:08, Benjamin Kaduk wrote: > > > > Right, this seems to be the key point. If there's not any running > > code and not going to be any, it's pretty likely that the spec (for > > this portion) will not actually be usable. > > > > > Note that there is running code for client token, if you look here: > > https://bitbucket.org/lseitz/ace-java/src/beb13e6eeec8eace3539c934b0edc64043327d67/?at=clientToken Thanks for the link; I was unaware. > > Also note that I'm not saying we shouldn't move this to a separate > draft, but let's keep our facts straight. I'm really curious to see > Hannes' paper once he can release it. Me, too! -Ben From nobody Mon Feb 12 11:03:34 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C235512D864 for ; Mon, 12 Feb 2018 11:03:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=vitstudent.ac.in Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 57XzsS3VZkEh for ; Mon, 12 Feb 2018 11:03:31 -0800 (PST) Received: from mail-pg0-x232.google.com (mail-pg0-x232.google.com [IPv6:2607:f8b0:400e:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C1461243F3 for ; Mon, 12 Feb 2018 11:03:31 -0800 (PST) Received: by mail-pg0-x232.google.com with SMTP id y8so870130pgr.9 for ; Mon, 12 Feb 2018 11:03:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vitstudent.ac.in; s=google; h=mime-version:from:date:message-id:subject:to; bh=gAO6RbVLzNBbggsH0FuOfdtMSHwMpYwsW2I+yPOcUFQ=; b=hxUJRegI/ymqPfpf0JFq+raluP/hF9UNXdXD5RjPRu/ZMs6xfIHH7pyDC1Kr7/2r46 z34trK5J0PKAzmbQKBihQmOJHuGoBWkZcpbe3bSvH73ufpS+jZJ2AbKsPp92zV+b9I6I 3RGxMa1sx/DV4WFcue8uROBPxzvBzEDGRmeCw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=gAO6RbVLzNBbggsH0FuOfdtMSHwMpYwsW2I+yPOcUFQ=; b=YJMDgjfqm3bnMvMI2OHCEIfmOB8JpA8ImprILc6F77BHeqcpG6mW7q6onRsW4wDFeq jnvWNl/aVTKpVejAiYilz3WUM4I2455x7XqBaJKDLP7wGaeAb+GrbjLQWds0JmOSP1X4 uYPIiyZQ0oxBbb0EX0H3hrR47DSIpaI5qPp4+wXfqqBI+KFnVYJ3BeAoXu0cUVtQKEU4 XAcCLi+s5WsblLZfyLGoEnzsj8/2zHaVFJf2/r1yg8A5ez7GJaKJD6eu8I0AMPVXFK5o fwpH22//97LV8awTdvG45uBBUSbeJ4/hq3D00Ob/R13ZkEEMdXAyBsjkrneV5eK9Po4y 2TJw== X-Gm-Message-State: APf1xPDIXLYcHnyg5YN8gIwbOkBofQhOSyJKJPDKF5u5JqqZLzanAVv/ 1sRouQvp7gFk7dIxnxXAh+XfT5mSSIaVwpXHAQ8awQ== X-Google-Smtp-Source: AH8x2266RhfH7dp8m2z/WepOemC+LxNW5FbW6+AYxU91b5DkCBq+jjtuK1nD7JWdk16cnwMm3O8Mn2oY9XkXDineXno= X-Received: by 10.99.100.67 with SMTP id y64mr6505826pgb.145.1518462210139; Mon, 12 Feb 2018 11:03:30 -0800 (PST) MIME-Version: 1.0 Received: by 10.236.187.135 with HTTP; Mon, 12 Feb 2018 11:03:29 -0800 (PST) From: PAVAN YADAV 16MCA1050 Date: Tue, 13 Feb 2018 00:33:29 +0530 Message-ID: To: ace@ietf.org Content-Type: multipart/alternative; boundary="94eb2c11ddfea4034205650888fa" Archived-At: Subject: [Ace] Reg: Questions about ace-oauth-authz-09. X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Feb 2018 19:03:33 -0000 --94eb2c11ddfea4034205650888fa Content-Type: text/plain; charset="UTF-8" How many resources can be connected to the resource server? Is there any limitation? --94eb2c11ddfea4034205650888fa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
How many resources=C2=A0can be connected to the resource s= erver? Is there any limitation?
--94eb2c11ddfea4034205650888fa-- From nobody Mon Feb 12 11:09:57 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BA6412D876 for ; Mon, 12 Feb 2018 11:09:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=vitstudent.ac.in Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LFcrt3MBeByt for ; Mon, 12 Feb 2018 11:09:54 -0800 (PST) Received: from mail-pg0-x22a.google.com (mail-pg0-x22a.google.com [IPv6:2607:f8b0:400e:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD5BC12D87B for ; Mon, 12 Feb 2018 11:09:54 -0800 (PST) Received: by mail-pg0-x22a.google.com with SMTP id l131so2592287pga.2 for ; Mon, 12 Feb 2018 11:09:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vitstudent.ac.in; s=google; h=mime-version:from:date:message-id:subject:to; bh=55dRp80iF+FTkWpTZV4Xikse0PH8IFn2C7z5vC1qMd0=; b=WdI3A33b+fysq6speTeSIYAAd86foNICuW6T90uoMX8tYPOsLFtJWYI8Hv7tUd4eVC YwxnA7f5DFgxe8rPHeNYbdnecGiYKZK4YR77BjFfpIoxPOIpCPSMKu0dFx7WQ6/zRC8e UqBxxd2KVHcuRa+z3nwe+/SHGXSKzzUx6sBVA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=55dRp80iF+FTkWpTZV4Xikse0PH8IFn2C7z5vC1qMd0=; b=ga+xdsB1YhQoAMgXm266WVKPOhbtnddfFVnIn3q8zHMSaJSmdWIm6RAvLiEN40gq2l r7eK/j2Wtrzuw8p3WOvuL3Hd2pxOuRNV4N/FcMzrImuXUJLVia94pTBgN0GddstzkeMm 5HQiy4vodzMmT+3gCTxu1pFTBKtpqIVvdj0Wz1aBRb4K9G/cZybez2pz4mx3iX5JYfFU nw9e1V7sOj1js3Oj457/7GlA+ZNOAR7z7zYG+rcSKcRr9YzRJqvjDsRY6CZXedK3xhJS UFVKigR5jX1Q1SgWo6CSQHrFoP9rI2C/vao1AE9mU0KJOQpQuF4uwrhYSGwNXVmcQ7pK Wpqw== X-Gm-Message-State: APf1xPD9YDhHqhVUTszrdTTaq8dL6j+c0jYiMSnJcB5huKQeLoIev1U+ dk9BW1Ko4DJrKJN+uJZaa+b8tT3Owj7n8Fa7NUot2Q== X-Google-Smtp-Source: AH8x227kkz9N8BtSHznMboO3hZgY5XTD8kVCZWqYSsmqjEnSGXZWobfHDMZDVU38gcEt6wF2Q7C7BupcZz5JPdRZGms= X-Received: by 10.98.219.68 with SMTP id f65mr12199533pfg.25.1518462593881; Mon, 12 Feb 2018 11:09:53 -0800 (PST) MIME-Version: 1.0 Received: by 10.236.187.135 with HTTP; Mon, 12 Feb 2018 11:09:53 -0800 (PST) From: PAVAN YADAV 16MCA1050 Date: Tue, 13 Feb 2018 00:39:53 +0530 Message-ID: To: ace@ietf.org Content-Type: multipart/alternative; boundary="94eb2c184762836fe20565089f4d" Archived-At: Subject: [Ace] Reg: Questions about ace-oauth-authz-09. X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Feb 2018 19:09:56 -0000 --94eb2c184762836fe20565089f4d Content-Type: text/plain; charset="UTF-8" What is the max time limit for an access token for clien. --94eb2c184762836fe20565089f4d Content-Type: text/html; charset="UTF-8"
What is the max time limit for an access token for clien.
--94eb2c184762836fe20565089f4d-- From nobody Mon Feb 12 11:18:19 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36BF912D88B for ; Mon, 12 Feb 2018 11:18:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=vitstudent.ac.in Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5thVLswA7Gua for ; Mon, 12 Feb 2018 11:18:17 -0800 (PST) Received: from mail-pg0-x22a.google.com (mail-pg0-x22a.google.com [IPv6:2607:f8b0:400e:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0765126C0F for ; Mon, 12 Feb 2018 11:18:16 -0800 (PST) Received: by mail-pg0-x22a.google.com with SMTP id a11so8126748pgu.13 for ; Mon, 12 Feb 2018 11:18:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vitstudent.ac.in; s=google; h=mime-version:from:date:message-id:subject:to; bh=vIvznhjpe55/BY1Dxb4V+rpMTBMQ2zISBdwdv1MoRz4=; b=GJV9dPccDGwyMuTzvpcLismmjL0wUqywwwkTrSp+UyLaabUSR2t4Q+MNXOh/TIYL4a cZo1ROeLZLuyYyvbXlvn6yrhxb1jb5Ho6sJcYL5iLIEPhundzDWn6u2BVVh0f0f7/l/a jASP5o9hrvRFgZ/5PNseeSptMlY87nF7tvntw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=vIvznhjpe55/BY1Dxb4V+rpMTBMQ2zISBdwdv1MoRz4=; b=Y2k/8GQyc/OwSD809/rQ8ipm7UbkCbv5nXDe1Y772kUC3RniKV6cIjOs4oBwO/12gB gcdS9bw+V90SNHcfsvrqN8ZvItzVNa9Cn7OkoL/NW0/pU0RWkiK+CLLH3v3NdG2b3W+A +F8e25g/z1iUCYnlSEJ171Ni4/UQ/bkmR+PpDwlREIK0uc1Kqnxj+Oeqzlw4kVhHYAlz +0gQKq0QXeePB1PfwyEsHoifc9Xlwpl2p+mdftm2ucjBFQ4UNg1VdzgxDBkvv6pI1jXB AY8xTXwJQw4gra91GwVj3RAHDnDS0c039AanInxo0dxCAtr25IAlVgNuAy+5gPBrns3t g8SQ== X-Gm-Message-State: APf1xPDnFJ3ZwfT49glY6F4XHC3Ls/x/3Tw9xr+Ggs83jWi2NQQYwTyE blgLQgpQT1fwqXj8lNmwSPgiytCzqt8jruRljRnsxaZ1 X-Google-Smtp-Source: AH8x226kG802wRFDEB//V4wDpxQb9hGO/5vPhPVbazSWL0+MqtZEJpa8TZa8q1+EqYCKsI/TMb8DfAYhhWmFYu6X/LU= X-Received: by 10.99.184.1 with SMTP id p1mr2311070pge.96.1518463096155; Mon, 12 Feb 2018 11:18:16 -0800 (PST) MIME-Version: 1.0 Received: by 10.236.187.135 with HTTP; Mon, 12 Feb 2018 11:18:15 -0800 (PST) From: PAVAN YADAV 16MCA1050 Date: Tue, 13 Feb 2018 00:48:15 +0530 Message-ID: To: ace@ietf.org Content-Type: multipart/alternative; boundary="f403045e3992738d63056508bd69" Archived-At: Subject: [Ace] Reg: Questions about ace-oauth-authz-09. X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Feb 2018 19:18:18 -0000 --f403045e3992738d63056508bd69 Content-Type: text/plain; charset="UTF-8" What will be the bit size of Proof-of-Possession digital token and key? --f403045e3992738d63056508bd69 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
What will be the bit size of Proof-of-Possession=C2=A0digi= tal token and key?
--f403045e3992738d63056508bd69-- From nobody Mon Feb 12 23:44:37 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C0E112E88E for ; Mon, 12 Feb 2018 23:44:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.621 X-Spam-Level: X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3_dh8GrTkkPo for ; Mon, 12 Feb 2018 23:44:33 -0800 (PST) Received: from se-out1.mx-wecloud.net (se-out1.mx-wecloud.net [89.221.255.93]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30CCF12E88A for ; Mon, 12 Feb 2018 23:44:32 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out1.mx-wecloud.net (Postfix) with ESMTPS id E58612056DB; Tue, 13 Feb 2018 07:44:28 +0000 (UTC) Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Tue, 13 Feb 2018 08:44:29 +0100 To: , PAVAN YADAV 16MCA1050 References: From: Ludwig Seitz Message-ID: Date: Tue, 13 Feb 2018 08:44:24 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-3.sp.se (10.100.0.163) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=cdiiljLM c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=IkcTkHD0fZMA:10 a=Op4juWPpsa0A:10 a=mx4nZK4EWs2G89x58GgA:9 a=mEfE2-3I2eIYEj8d:21 a=m1zwTJjgajYpO51J:21 a=QEXdDO2ut3YA:10 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: Re: [Ace] Reg: Questions about ace-oauth-authz-09. X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Feb 2018 07:44:35 -0000 On 2018-02-12 20:03, PAVAN YADAV 16MCA1050 wrote: > How many resources can be connected to the resource server? Is there any > limitation? > There is no limitation in the standards draft, you probably have some hardware limitations, but these are dependent on the specific device you are deploying the ACE framework on. > What is the max time limit for an access token for clien. Again no limit in the draft. It's implementation dependent. In my code I made that a unsigned long (i.e. up to 2^64-1 ms). ... but: This is just the implementation limit, since we are dealing with constrained environments, where tokens and the corresponding pop key can get stolen, keeping the lifetime short is probably a good idea in general. > What will be the bit size of Proof-of-Possession digital token and key? The size of the token depends on several parameters: 1.) If it is a CWT or something else (e.g. just a reference) 2.) If it is a CWT: what kind of COSE wrapper it has 3.) If it is a CWT: what claims does the token contain You will get the smallest token size by just using a reference (but then the RS needs to do introspection or know the tokens beforehand). If you need a compact CWT, using some symmetric key wrapper (MAC or Encrypt) will help you, and minimizing the number of claims (perhaps you can have some default claims that all involved parties know beforehand, like e.g. the profile they are using). As a ballpark number, I create some CWT's in my junit tests that are roughly 200 bytes large. They contain a lot of claims including a public key, so that's probably at the larger end of the scale. Size of the key depends on how your are performing the proof-of-possession. If you e.g. use DTLS-PSK you would typically use a 128 bit AES key. Hope that helps /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE SICS Phone +46(0)70-349 92 51 From nobody Tue Feb 13 04:25:57 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 40CAC1201FA; Tue, 13 Feb 2018 04:25:56 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.72.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151852475624.22115.17610518834619910676@ietfa.amsl.com> Date: Tue, 13 Feb 2018 04:25:56 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-oauth-authz-10.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Feb 2018 12:25:56 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Authentication and Authorization for Constrained Environments (ACE) Authors : Ludwig Seitz Goeran Selander Erik Wahlstroem Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-oauth-authz-10.txt Pages : 65 Date : 2018-02-13 Abstract: This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments. The framework is based on a set of building blocks including OAuth 2.0 and CoAP, thus making a well-known and widely used authorization solution suitable for IoT devices. Existing specifications are used where possible, but where the constraints of IoT devices require it, extensions are added and profiles are defined. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-10 https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-authz-10 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-authz-10 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Feb 13 04:29:45 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB4731201FA for ; Tue, 13 Feb 2018 04:29:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.62 X-Spam-Level: X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qJScRuuM2ya2 for ; Tue, 13 Feb 2018 04:29:41 -0800 (PST) Received: from se-out1.mx-wecloud.net (se-out1.mx-wecloud.net [89.221.255.93]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8FAD512D9FE for ; Tue, 13 Feb 2018 04:29:40 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out1.mx-wecloud.net (Postfix) with ESMTPS id 182D3202EB4 for ; Tue, 13 Feb 2018 12:29:37 +0000 (UTC) Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Tue, 13 Feb 2018 13:29:38 +0100 References: <151852475639.22115.1770212520116240162.idtracker@ietfa.amsl.com> To: "ace@ietf.org" From: Ludwig Seitz X-Forwarded-Message-Id: <151852475639.22115.1770212520116240162.idtracker@ietfa.amsl.com> Message-ID: <31f0cb24-f40d-faa6-28e4-73b849074938@ri.se> Date: Tue, 13 Feb 2018 13:29:23 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <151852475639.22115.1770212520116240162.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-2.sp.se (10.100.0.162) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=cdiiljLM c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=IkcTkHD0fZMA:10 a=Op4juWPpsa0A:10 a=48vgC7mUAAAA:8 a=7CQSdrXTAAAA:8 a=0FD05c-RAAAA:8 a=WgwJIo3SAAAA:8 a=xJrM6_rmTzdYtJ-varAA:9 a=QEXdDO2ut3YA:10 a=w1C3t2QeGrPiZgrLijVG:22 a=a-qgeE7W1pNrGK8U0ZQC:22 a=l1rpMCqCXRGZwUSuRcM3:22 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: [Ace] Fwd: New Version Notification for draft-ietf-ace-oauth-authz-10.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Feb 2018 12:29:44 -0000 Hello ACE, here comes a new version of the framework draft with the following changes: * Removed client token design (see discussion on mailing list) * Rephrased parts to clarify that the use of other protocols than CoAP is also allowed (especially HTTP) * Removed the CBOR major type numbers (using their names instead) on suggestion by Carsten. More reviews and feedback are welcome! /Ludwig -------- Forwarded Message -------- Subject: New Version Notification for draft-ietf-ace-oauth-authz-10.txt Date: Tue, 13 Feb 2018 04:25:56 -0800 From: internet-drafts@ietf.org To: Ludwig Seitz , Hannes Tschofenig , Goeran Selander , Samuel Erdtman , Erik Wahlstroem A new version of I-D, draft-ietf-ace-oauth-authz-10.txt has been successfully submitted by Ludwig Seitz and posted to the IETF repository. Name: draft-ietf-ace-oauth-authz Revision: 10 Title: Authentication and Authorization for Constrained Environments (ACE) Document date: 2018-02-13 Group: ace Pages: 65 URL: https://www.ietf.org/internet-drafts/draft-ietf-ace-oauth-authz-10.txt Status: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ Htmlized: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-10 Htmlized: https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-authz-10 Diff: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-authz-10 Abstract: This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments. The framework is based on a set of building blocks including OAuth 2.0 and CoAP, thus making a well-known and widely used authorization solution suitable for IoT devices. Existing specifications are used where possible, but where the constraints of IoT devices require it, extensions are added and profiles are defined. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Tue Feb 13 07:55:06 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C1B812D0C3 for ; Tue, 13 Feb 2018 07:55:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 21YIMC9Yo6j3 for ; Tue, 13 Feb 2018 07:55:02 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20129.outbound.protection.outlook.com [40.107.2.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB7ED12422F for ; Tue, 13 Feb 2018 07:55:01 -0800 (PST) Received: from HE1P121CA0003.EURP121.PROD.OUTLOOK.COM (2a01:111:e400:e2b0::17) by DB5P121MB0008.EURP121.PROD.OUTLOOK.COM (2a01:111:e400:e2b3::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.485.14; Tue, 13 Feb 2018 15:54:58 +0000 Received: from HE1EUR02FT025.eop-EUR02.prod.protection.outlook.com (2a01:111:f400:7e05::203) by HE1P121CA0003.outlook.office365.com (2a01:111:e400:e2b0::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.485.12 via Frontend Transport; Tue, 13 Feb 2018 15:54:57 +0000 Authentication-Results: spf=neutral (sender IP is 13.81.48.91) smtp.mailfrom=philips.com; augustcellars.com; dkim=none (message not signed) header.d=none;augustcellars.com; dmarc=fail action=none header.from=philips.com; Received-SPF: Neutral (protection.outlook.com: 13.81.48.91 is neither permitted nor denied by domain of philips.com) Received: from LIGHT-EDGE-2.lighting.com (13.81.48.91) by HE1EUR02FT025.mail.protection.outlook.com (10.152.10.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.485.12 via Frontend Transport; Tue, 13 Feb 2018 15:54:57 +0000 Received: from EUR01-VE1-obe.outbound.protection.outlook.com (213.199.154.247) by autodiscover.lighting.com (10.0.0.5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.669.32; Tue, 13 Feb 2018 16:54:55 +0100 Received: from DB6P121MB0038.EURP121.PROD.OUTLOOK.COM (129.75.191.85) by DB6P121MB0055.EURP121.PROD.OUTLOOK.COM (129.75.191.90) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.485.13; Tue, 13 Feb 2018 15:54:56 +0000 Received: from DB6P121MB0038.EURP121.PROD.OUTLOOK.COM ([129.75.191.85]) by DB6P121MB0038.EURP121.PROD.OUTLOOK.COM ([129.75.191.85]) with mapi id 15.20.0485.016; Tue, 13 Feb 2018 15:54:56 +0000 From: Esko Dijk To: Jim Schaad , "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AdOaBxPvuhazfivPQR6hGrReGsdXHwK2363Q Date: Tue, 13 Feb 2018 15:54:55 +0000 Message-ID: References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: <010f01d39a08$255723c0$70056b40$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=esko.dijk@lighting.com; x-originating-ip: [80.246.199.209] x-ms-publictraffictype: Email X-Microsoft-Exchange-Diagnostics-untrusted: 1; DB6P121MB0055; 7:a/fibNawId22yyW9IIp3SXHDEg4AYpyGr7mRD/pwM9RRU/nsgxOslrBULkMEfNY8ZD9FVjtsE+oWTi8eTol1mesrSGdTikW2mFewqr6lgoWPNxXq0Y1VOLSVCUHIHdLQ5ixxVxvzUQilEmL3UpXug1cnNHBh7sCoGGNB02oJ3WMOWdbU9N1kRwfHS1b/jm6yhM/UteT3wKsjN0gdyhWvzET6vS1UiSamgW0XiBNo7rUStbv+S61svm2vhhfjFKog x-ms-exchange-antispam-srfa-diagnostics: SSOS; X-MS-Office365-Filtering-Correlation-Id: 1cf4fc29-286e-4466-ffe1-08d572fa21b2 X-Microsoft-Antispam-Untrusted: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7193020); SRVR:DB6P121MB0055; X-MS-TrafficTypeDiagnostic: DB6P121MB0055:|DB5P121MB0008: X-Microsoft-Antispam-PRVS: x-exchange-antispam-report-test: UriScan:(192374486261705); UriScan:(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(8121501046)(5005006)(3231101)(944501161)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041288)(20161123560045)(20161123562045)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:DB6P121MB0055; BCL:0; PCL:0; RULEID:; SRVR:DB6P121MB0055; BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(3231101)(944501161)(3002001)(93006095)(93003095)(10201501046)(6055026)(6041288)(20161123560045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061750153)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:DB5P121MB0008; BCL:0; PCL:0; RULEID:; SRVR:DB5P121MB0008; x-forefront-prvs: 0582641F53 X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10019020)(396003)(39860400002)(366004)(376002)(39380400002)(346002)(189003)(199004)(13464003)(6246003)(86362001)(97736004)(106356001)(3280700002)(25786009)(76176011)(966005)(3660700001)(2501003)(229853002)(53936002)(2906002)(478600001)(81166006)(5660300001)(81156014)(105586002)(305945005)(7736002)(99286004)(68736007)(74316002)(6306002)(6436002)(33656002)(8676002)(2950100002)(6116002)(3846002)(2900100001)(8936002)(66066001)(55016002)(9686003)(7696005)(110136005)(316002)(59450400001)(53546011)(186003)(102836004)(26005)(6506007)(956003); DIR:OUT; SFP:1102; SCL:1; SRVR:DB6P121MB0055; H:DB6P121MB0038.EURP121.PROD.OUTLOOK.COM; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: lighting.com does not designate permitted sender hosts) X-Microsoft-Antispam-Message-Info-Original: nYoI6twDatUKTZAY+x6FReDdkQkPij7h+0UcvRHuUjdJNVrzHcH33h7MRhByWlIA9bzHUW8ImX4pXyZXjJXhNg== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6P121MB0055 X-CrossPremisesHeadersFilteredBySendConnector: LIGHT-EDGE-2.lighting.com X-OrganizationHeadersPreserved: LIGHT-EDGE-2.lighting.com X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: HE1EUR02FT025.eop-EUR02.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:13.81.48.91; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(346002)(376002)(39380400002)(39860400002)(396003)(2980300002)(199004)(189003)(13464003)(229853002)(6246003)(46406003)(25786009)(8746002)(106466001)(81156014)(55016002)(8676002)(81166006)(8936002)(9686003)(6306002)(47776003)(498600001)(66066001)(26826003)(53936002)(97756001)(966005)(2906002)(2950100002)(2501003)(305945005)(356003)(74316002)(33656002)(69596002)(105586002)(59450400001)(5660300001)(2900100001)(3846002)(23726003)(6116002)(7736002)(86362001)(68736007)(97736004)(99286004)(956003)(53546011)(50466002)(26005)(6506007)(76176011)(316002)(102836004)(7696005)(110136005)(336011); DIR:OUT; SFP:1102; SCL:1; SRVR:DB5P121MB0008; H:LIGHT-EDGE-2.lighting.com; FPR:; SPF:Neutral; PTR:InfoDomainNonexistent; A:1; MX:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; HE1EUR02FT025; 1:SSXkGQ3V96j2uWQA/+EGx6JtQ0CTIcDEsNnXMjTU9dre/j/U+ZcW3LJ4exM6WwxgOwjZI45v5pKKKodYuhdktQ14BT181+STYoCXwCmz1tv+P/PzjsMGyYYnr/z+Bfrf X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(4534165)(4627221)(201703031133081)(8559017)(2017052603307)(7193020); SRVR:DB5P121MB0008; X-Microsoft-Exchange-Diagnostics: 1; DB5P121MB0008; 3:XjC4ODj8wfe4/WNMO0KXMl2RcGYkWfjVacK3J3vq7QiyfBnmCvzuIbnQslxYgB31qUTCu63WLnCFAF/mKPf6UyHkrFrS/DAEor+LFLLVQN6Yyqgm+d3EQN0x/gTD++i6ZA5tjaf341+BZe0ooeiUs90FB3MVBR5TnHZ6RgfTVNpUaItNxnTm9LVZKY8/Z+TYYG3FjQ5+0dQXom1IJccZ4F5Q8O6mM6xLjTrQVWOslM1bPX4EGgGASvRDaeA4BE7yX4qplqwwUB28HvoRQCxc3I84fueWMT0a/o4x5JjDEstkQBvZd2LYduF4ifUQFDiusHFWuOiCR9k48RfL0rDV1A==; 25:uUTqLQ2Vj1c3hm4P3na/2gsqsYNxHLEv3/wi5jsVj9ChBwz09hX7ssT1YzSXiDf6YkX9RPqhZwRmQteluAl3nmYGg3BnlOSIuD/MxXp1GwqBSpabXSsOLBqixngX3t7kejhQ78QZ5P5iuEh8arBt6+ije6XCWuQ70q+NXc7oImOEWznOxRfiSuZR9ECD5HLDs7FpprPXuBRiJNYTfsXovv5B98Utzv2E2rokEqPwFOUl1SJVbq2tAx1ICWP6GllvjjFTaZrGuCRlew6t2IVEsWdwTnzEEKUjCj3jxqHJyEfm0A5RWyxm9qbSkqgaAc9uuSGEn1egF0VqxEfs8udaTA==; 31:1v0jy0BRxuYLxEXs2xjzQLe2Rjdh0wjVOEWoiSR0cW6FqbqKUqkaqwXw/pKhLFNybwV6f720IPr8waPfFxtEXpCtuKiwmJRizorVjchsHB+7piZXLNY5WmzG7SA4PGZ8dnSCrfh3ZY/1Qw0W6ny3SexKCUf017cbZIQWMkXtcOJPD8Z9Pc73Gv5CKwAe0ngBC90+GF2uztCaZz1ibjJQUFeiCqsEiSEDCiTpxfc1czg= X-Microsoft-Exchange-Diagnostics: 1; DB5P121MB0008; 20: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; 4:5GogEEsDA7BYfLYlS17c08/Bkj0/gVRE73k4uuIlUmjVgCR4fPSNnIiTkXLrtzrm9xrT4aGWX7QIDeDHWdhh0qS6K7/EKEU4FedITWxPo/DruTSjRixefJGekMpEBcMiVWeThzR2fT3hiH1Jvpvf4FcrnoZbQqXdTOxU3XQeZDWU9wAfYqHn2MQCvtlJgRYeWuTgf6xVsWHGv7PbvXQ4iHfIKphjo1SQ14xl2xfAmRie3kS+Ty64tUuZREBqZkKd6ZTLbDMftEDRvKUJ6XoZPQnjfaeDvYORq7cW9bAZ8I+JE6DpavHEQJI4qaS9Qajj X-Forefront-PRVS: 0582641F53 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DB5P121MB0008; 23:ZHf8j/oZ7Kokp2ZomabL09RGyMTlqXTuTSnFgqReZ?= =?us-ascii?Q?lFFk0f+IlRFtiSmmviMM/XH8av5h6trpfqcGQNmXHcsolRvf8VHkeaF6EHQn?= =?us-ascii?Q?VNlmpRsZGCZufOrhtGfiYc6p3w1iSLKGrWZ9sYTD0cSg+ixXlegYFcQUCaE5?= =?us-ascii?Q?nJ/hi0HMTS24RDVb2sfMDQNn/Z8Je9PMFAIt3RzsZsNefc21+xLbfffEfpBt?= =?us-ascii?Q?R7/hqOM4e3T2oxvGvjWeG3aHtOyghjjSRbYzbU51J8+bdNUSFMYu4KnCha7K?= =?us-ascii?Q?nVnw5Kliy3lFlC6T8vs5W7ST+gH68cNK5QOmh76Z/Aac6Ih7dz3+j1z6ipEt?= =?us-ascii?Q?EQ/zPaL2tOiAI7sN3qgFI7PQJgyxdF96Be2V38beIBojxCDYKuU2vmjZIlxp?= =?us-ascii?Q?K7SIhOlaegXpM0rYu59QTlnPjxy0vAZn/6YEkoO5O5ht4fVncjoUBe3ELZw+?= =?us-ascii?Q?Nd/42N7apOZ5nv7f1+t+OKPQgum6YvT5o4Ed7Y6K7rjpxSoHFurwfLaR2RI7?= =?us-ascii?Q?OG7njvhjS+sphPTG0mqsfAOFrwr2mHwp/hG7PiGpldrAd5MC1wAuj0RKmKX2?= =?us-ascii?Q?FQbipJmGyJLipb0GxmYc52pdVW+oH+RZMNcH7P1CjxqEwzOOypHIHx992sz3?= =?us-ascii?Q?CtfpyvRdJIo0X6NXQALCc5oK53Ocfc/0pWnetLQszx2k4j9QnuIaOFQ0VG2G?= =?us-ascii?Q?N4k04ZRcXzyvhHj9PPCZgjPFqxrvoXnrHN17UfqIMW/WH6BFKh3djbLqWcSn?= =?us-ascii?Q?mKQ2VwuTnkrvYA+ySCO82gAwUfZ1rmMWFDzzoWZhx3eqV1XkZ9Tc2QHZBtw+?= =?us-ascii?Q?YkPE0DtHVxCFLt0Py3FEuCN7OyrWimMNkRvPPDrOoY4kte5kZnaYYR7BNXAD?= =?us-ascii?Q?ZY5vxgcvdKHBK/sTxWycllxhMhcNmz6/9kG4akMlxnVkb/vhHQyklI94AX4N?= =?us-ascii?Q?DYJx743HtVFkNJl6NUVpRn5iC3PC80sDVIRtUWHS6vwzOKclbNc3uGRP1I4l?= =?us-ascii?Q?R0efwZi6pjBOSaOxU9mXn0KEdz2bPC0kg7kOVZkJnEhSUTdwo9A47BdmN8yi?= =?us-ascii?Q?kYD2G58YqdFGPHp6es0jnVSG0nSduz0M/oAuQs0qCWKaF9ZkHnv6sluKWESZ?= =?us-ascii?Q?WVg06/FesgPRJkfCY8ziTETid7j4F4hby88UDDNPCvd4hrvRCc8Q/Y44fZqa?= =?us-ascii?Q?rtGzEUNOLT85MwgSl8aE24cgFhnMW5CTM/oMV9VFoboRpd9Dbvn5c/mbuCX/?= =?us-ascii?Q?KZxJbrOv03eQ8J18QcuxMGAgZJSlKxkFpxOY9nSMdM0Ua5czcPZY94NRnBJ6?= =?us-ascii?Q?NTN/GDDtPp6EOKTxh7fpSD/oGeZjJKfZiEN0kpVH6WGzjOfI4j9hVLjjOcsO?= =?us-ascii?Q?Y7ytw=3D=3D?= X-Microsoft-Antispam-Message-Info: iHWZpIh2sy9gn/1N+OxRowXpnD7VtTSdPWjaaCThfJaFNjPvNROwK3vRouy4Kojf+Af8ByDhoAWMdC5I4ahpgw== X-Microsoft-Exchange-Diagnostics: 1; DB5P121MB0008; 6:hLqcuj9EemiZG+7DZ22VydVYVLXPexRbcG46wD2PNfJarU5rVySvIJMPy2tebPwe0ffui4wpfDE0VIKngSqbJAs2MJH27+FWZQcuyaZ4VVsWHgFrKSF+W87dpX+C/fU+1v1hgyzudqDR2gQcxwOqBGdGsiuYJX+g6SGTR33GN8ww2Hys517SfGszVoMrPODC2097U53uwTOjn8a5lMPZmW59Xcy6qBaA6qoWXNEglv2UV2g/w4pTi4z2hLQuafM8ExwBXPgV8UIUN+OXtrnV1EX6u6uaBoJbWqXZ2V3Wbvc/KzD1rS0XDTbZQaGXI7TxDXmgsiiq+DspfVxJT0MKLhWx8vmqzVcqBSIsTOaW8jPTXExb3EoIDsHy858C61ERtpz4q+COWZXqWbn3VQnmCw==; 5:yk+RBGhdmifsL4tNzRmEJL0DwUNLUPia59Ob6XRGBfsltIE7UUS0bnfo07/QSiPm4PQj87/pQS9vl2kX8PCFJy47KBdJrqn+/EaO2SUPJHeASae5eKS+0iVBtbVMkLCXW1+/PXQg37QSd7IqKG0+c57kMvYL0/OK7zxpRXO2gzg=; 24:695F0EtgFUdHCGp/JuDkKpWLjyVO1AVHCjebrBYZd1zGo1dHE7hAqPbTTxrWY3Qmf0A90piM6xh+lCP8hUNQFKGDGOwirq0zzadqD+F+ip8= X-Microsoft-Exchange-Diagnostics: 1; DB5P121MB0008; 7:qHTm38xV4z/0NPNjuF5VyB420/p7L3UMAjTHKsGyn0hX2cAfDyN1hStGyeNY1bu+fxSq84UmMfFffDKcxxJYoWtJdFkaZ1/gvANu7nBJdFePVQUdPI8qmE78t4ooOAfdBoo9fP3/7ZBCzzfHG9TNX80xS3JAVLmqNstHq4MCg6V4rBG2kSqddpcYXQ219+9ICDKXNbnOfC2TQ1FDkse8xSMD+eg6wG65U01wt708vrwVJYVtJU2jezH0reujRX6P X-OriginatorOrg: lightingaad.onmicrosoft.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Feb 2018 15:54:57.3375 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 1cf4fc29-286e-4466-ffe1-08d572fa21b2 X-MS-Exchange-CrossTenant-Id: 75b2f54b-feff-400d-8e0b-67102edb9a23 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=75b2f54b-feff-400d-8e0b-67102edb9a23; Ip=[13.81.48.91]; Helo=[LIGHT-EDGE-2.lighting.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5P121MB0008 Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Feb 2018 15:55:05 -0000 I support the WG adoption of this document. It will be a useful component t= o create a security solution for IoT devices. On the current or a future v= ersion of this draft I can do a review, also. Best regards Esko Dijk -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Jim Schaad Sent: Tuesday, January 30, 2018 21:23 To: ace@ietf.org Subject: [Ace] Working group adoption of draft-vanderstok-ace-est This is the start of a two week call for input on the adoption of the WG of= the document draft-vanderstok-ace-est. The document has been presented at= the last two meetings and has some significant recent updates to respond t= o feedback. There seemed to be support at the last F2F to adopt. Please provide feedback to the list/chairs if you believe that this documen= t should be adopted as a WG document. The adoption call will end on Feb 13 2018. Jim _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace ________________________________ The information contained in this email may be confidential and/or legally = protected under applicable law. The message is intended solely for the addr= essee(s). If you are not the intended recipient, you are hereby notified th= at any use, forwarding, dissemination, or reproduction of this email is str= ictly prohibited and may be unlawful. If you are not the intended recipient= , please contact the sender by return e-mail and destroy all copies of the = original email. From nobody Tue Feb 13 14:29:36 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1F4012D962 for ; Tue, 13 Feb 2018 14:29:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.53 X-Spam-Level: X-Spam-Status: No, score=-14.53 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Im9evYAt-fSc for ; Tue, 13 Feb 2018 14:29:33 -0800 (PST) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3181B12D95F for ; Tue, 13 Feb 2018 14:29:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=990; q=dns/txt; s=iport; t=1518560973; x=1519770573; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=pAgTKrHopPxMlxcC5sSgACj0PtcifjVUZXOVGqsG0UA=; b=QPLPxztYVk8/8DMv13ciXkA45khNDq2bIZ/GoEaUg6DbCYj6Du33BhNV yZqCntG2vvriVZfWYvFZ4WzbcnU1yTgEuMzDSrO6T6cQKM+gfmFrbYW9Z wPo1EeGFRBMwtHxpa7Jv+jTjYp1fapdM16EfGi47A3W+Ol54TTSZGuZZ4 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AOAQDfZYNa/5hdJa1aAxkBAQEBAQEBA?= =?us-ascii?q?QEBAQEHAQEBAQGDUmZwKAqNf44mggKBF5ZBFYIDCoU7AoJoVBgBAgEBAQEBAQJ?= =?us-ascii?q?rKIUjAQEFHR1LBgEIEQQBAR8JORQJCgQBEoo1slWFAYN8ghMBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEdhQGCFYNogwWEbwESAR8hJoMBgjQFpC4JApYCgh+GKot7l2s?= =?us-ascii?q?CERkBgTsBHzlgcHAVPSoBghuEd3iMIIElgRcBAQE?= X-IronPort-AV: E=Sophos;i="5.46,509,1511827200"; d="scan'208";a="69870080" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 13 Feb 2018 22:29:32 +0000 Received: from XCH-RTP-005.cisco.com (xch-rtp-005.cisco.com [64.101.220.145]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id w1DMTWCX022888 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 13 Feb 2018 22:29:32 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-005.cisco.com (64.101.220.145) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 13 Feb 2018 17:29:31 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1320.000; Tue, 13 Feb 2018 17:29:31 -0500 From: "Brian Weis (bew)" To: "ietf@augustcellars.com" , "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AQHTpRoduhazfivPQR6hGrReGsdXHw== Date: Tue, 13 Feb 2018 22:29:31 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.32.174.12] Content-Type: text/plain; charset="us-ascii" Content-ID: <61300624B9AF4F49B9F90C6700AD0597@emea.cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Feb 2018 22:29:34 -0000 I support WG adoption of the document as an enabler for devices that suppor= t CoAP but not HTTP to enroll with an EST CA. It also allows them to bootst= rap using the BRSKI process. Brian -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Jim Schaad Sent: Tuesday, January 30, 2018 21:23 To: ace@ietf.org Subject: [Ace] Working group adoption of draft-vanderstok-ace-est This is the start of a two week call for input on the adoption of the WG of= the document draft-vanderstok-ace-est. The document has been presented at= the last two meetings and has some significant recent updates to respond t= o feedback. There seemed to be support at the last F2F to adopt. Please provide feedback to the list/chairs if you believe that this documen= t should be adopted as a WG document. The adoption call will end on Feb 13 2018. Jim --=20 Brian Weis Security, CSG, Cisco Systems Telephone: +1 408 526 4796 Email: bew@cisco.com From nobody Wed Feb 14 00:52:32 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 954F8126CBF for ; Wed, 14 Feb 2018 00:52:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ye2GJpw24zce for ; Wed, 14 Feb 2018 00:52:14 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76D68126CD6 for ; Wed, 14 Feb 2018 00:52:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1518598332; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=JNKuUTDdQFcpTnCmutEtt9/rZEkAVsah6GpDSiyrAUM=; b=W2wNrr3FGDx3vERy1JoCaLMseod3DS4eah495eOwkeaRl+0VQtqqPkpx1xdEAqU8 NEJcgFPI8C4n6mX2lQWIUShJZDDoTm9NfZs4BHWrd9wG+F0KLnYGngxL5SiHX7wn TgZBVF/VvNqDnoMQQrNnfFwXfSwvmv1e06jJXSia6bA=; X-AuditID: c1b4fb30-3b1ff70000004778-40-5a83f8bca5c8 Received: from ESESSHC006.ericsson.se (Unknown_Domain [153.88.183.36]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 43.E6.18296.CB8F38A5; Wed, 14 Feb 2018 09:52:12 +0100 (CET) Received: from ESESSMB107.ericsson.se ([169.254.7.108]) by ESESSHC006.ericsson.se ([153.88.183.36]) with mapi id 14.03.0352.000; Wed, 14 Feb 2018 09:52:12 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Jim Schaad , "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AdOaBxPvuhazfivPQR6hGrReGsdXHwLagdCA Date: Wed, 14 Feb 2018 08:52:11 +0000 Message-ID: References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: <010f01d39a08$255723c0$70056b40$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.3.170325 x-originating-ip: [153.88.183.147] Content-Type: text/plain; charset="utf-8" Content-ID: <24271DBB1063404E9DE0E53570B25CA2@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprAIsWRmVeSWpSXmKPExsUyM2K7iu6eH81RBvd+Glp8/9bDbLF6+nc2 ByaPjXOms3ksWfKTKYApissmJTUnsyy1SN8ugSujf/Zj9oILnBVnlu5gbWDcwNnFyMkhIWAi sXXtD/YuRi4OIYHDjBJ7nk2BcpYwSnzYPo8NpIpNwEXiQcMjJhBbRMBN4uzkZSwgtrCAq8TE /2/ZYOIbzqxhhLCNJJZMPswMYrMIqEps2XweLM4rYCHx908/axcjO9ACe4k5hiBRTgEHicc3 u8GmMwqISXw/tQbMZhYQl7j1ZD4TxJ0CEkv2nGeGsEUlXj7+xwpiiwroSeztaQe6gAMoriQx bWsaiMksoCmxfpc+xBRriQ29LcwQtqLElO6H7BC3CEqcnPmEZQKj2Cwky2YhdM9C0j0LSfcs JN0LGFlXMYoWpxYn5aYbGemlFmUmFxfn5+nlpZZsYgTG08Etvw12ML587niIUYCDUYmHd9aH 5igh1sSy4srcQ4wSHMxKIrzG54FCvCmJlVWpRfnxRaU5qcWHGKU5WJTEeU968kYJCaQnlqRm p6YWpBbBZJk4OKUaGMU+8EhZuB04LuroYZtl2zPRpnBJh+rS7W5va8y4ljIZfW1gs9h0x3jp lyjOxPAvz0WaznOuuHH/vaXhWa7MhL+Jjo6ultouIrHz3YN+TnOuMvnz/PN0m3df0g+uW1Zw z+APk+Khj8uY/qyM/siwLyb2UsZkThElIQ+HCxMKcl7POnLyaNPOACWW4oxEQy3mouJEAGK0 CjWjAgAA Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Feb 2018 08:52:23 -0000 U29ycnkgZm9yIGJlaW5nIGxhdGUtIEkgYWxzbyBzdXBwb3J0IGFkb3B0aW9uIG9mIHRoaXMgZHJh ZnQgYXMgaXQgaXMgYQ0KbmF0dXJhbCBvcHRpbWl6YXRpb24gb2YgRVNUIG1ha2luZyB1c2Ugb2Yg ZXhpc3RpbmcgSW9UIGRldmljZSBzdGFja3MuDQoNCkfDtnJhbg0KDQoNCg0KT24gMjAxOC0wMS0z MCAyMToyMywgIkFjZSBvbiBiZWhhbGYgb2YgSmltIFNjaGFhZCIgPGFjZS1ib3VuY2VzQGlldGYu b3JnDQpvbiBiZWhhbGYgb2YgaWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4gd3JvdGU6DQoNCj5UaGlz IGlzIHRoZSBzdGFydCBvZiBhIHR3byB3ZWVrIGNhbGwgZm9yIGlucHV0IG9uIHRoZSBhZG9wdGlv biBvZiB0aGUgV0cNCj5vZg0KPnRoZSBkb2N1bWVudCBkcmFmdC12YW5kZXJzdG9rLWFjZS1lc3Qu ICBUaGUgZG9jdW1lbnQgaGFzIGJlZW4gcHJlc2VudGVkIGF0DQo+dGhlIGxhc3QgdHdvIG1lZXRp bmdzIGFuZCBoYXMgc29tZSBzaWduaWZpY2FudCByZWNlbnQgdXBkYXRlcyB0byByZXNwb25kDQo+ dG8NCj5mZWVkYmFjay4gIFRoZXJlIHNlZW1lZCB0byBiZSBzdXBwb3J0IGF0IHRoZSBsYXN0IEYy RiB0byBhZG9wdC4NCj4NCj5QbGVhc2UgcHJvdmlkZSBmZWVkYmFjayB0byB0aGUgbGlzdC9jaGFp cnMgaWYgeW91IGJlbGlldmUgdGhhdCB0aGlzDQo+ZG9jdW1lbnQNCj5zaG91bGQgYmUgYWRvcHRl ZCBhcyBhIFdHIGRvY3VtZW50LiAgICBUaGUgYWRvcHRpb24gY2FsbCB3aWxsIGVuZCBvbiBGZWIN Cj4xMw0KPjIwMTguDQo+DQo+SmltDQo+DQo+DQo+X19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCj5BY2UgbWFpbGluZyBsaXN0DQo+QWNlQGlldGYub3JnDQo+ aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCg0K From nobody Fri Feb 16 12:43:00 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0846512D7F7 for ; Fri, 16 Feb 2018 12:42:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DUoMmMSDMnGk for ; Fri, 16 Feb 2018 12:42:56 -0800 (PST) Received: from mail-pl0-x232.google.com (mail-pl0-x232.google.com [IPv6:2607:f8b0:400e:c01::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 623F512D7E4 for ; Fri, 16 Feb 2018 12:42:56 -0800 (PST) Received: by mail-pl0-x232.google.com with SMTP id x19so2281674plr.13 for ; Fri, 16 Feb 2018 12:42:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=43AT5GApm9EXBy6uqaRIQdLAmxoZNn6gqq4U5CMdBuQ=; b=qVXLi+5WpZJ3NxYh5zu4AHFAXGu2XJuLRWhsEtT14aX4C1IR6P4zYj1v5MbEOpVH0X qJDedCbKZmb8z/LuVKaojfEuOd/BtXcY/9NzqKGdVdNC63vBkkU6jXJrV0JoYAxh1qsT /1mRY5I/pLgR+xFH7gv85RE0jbvUeDPm62PHqurf/Wf15Szak8mK4lowcFpz5pPe4fi6 a0ORU9wG7cZ7T2ID3FlX61r5gkK88nA6C6zuBl9CfB92hGtxDtZeKbPpaQrw/BhrX7b9 xUM7BBS8E82lWfPzhY7Qd5TDMAhvFiH9SyicfRdO9xI0E5Y3rnLULvu1emcl7wd1yluE ItPw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=43AT5GApm9EXBy6uqaRIQdLAmxoZNn6gqq4U5CMdBuQ=; b=ZrESRcNty5Hi4dDU6ihrRfThA5tIl/i+LOPFa2IqlDJS/rptY3h65nhQCHvW/+cjXP CKq9z7SEtnmVI8p+KC5QB4K3VgqsBIiQpcTPVhCowm+F/0oHYSnbCxJiBIQgt2DdQ8kP 4xej2IeRkZuYwNtZ5Bcrq7GdK3Hq5bjZQxN5yRIkl/ovL19Kbp/1NzsItrerAEt5t6JK kwKguzKUUCTNIQky1SVNNy3f4UpUlGdCI7BMjnVNesl98vbRk5rKgAmjQMnigoVJ5fL2 AdlCVOY7CaoDcAFNFmrpKvsnTOR+5U83DQym4Jwls3QThIai982dMf/wQtS0mI3/Td+r MK5w== X-Gm-Message-State: APf1xPBtdUmMRWkv9gTGAX6WS0wc4yo5sLOY89QYTN79R4AEon4BEsy1 0+b4DqtFvTvBjkdpJxXu9CqxBvRDi9abrSwIzhkOow== X-Google-Smtp-Source: AH8x225WOguJm/nm0stDUV0Ye4SR6GVuGFIycFh4Gpes8MZ00NcPyvPdHgKlAgvSg/2O8q+znWcYCfThIzZreAEv5Rw= X-Received: by 2002:a17:902:3a3:: with SMTP id d32-v6mr6926756pld.219.1518813775450; Fri, 16 Feb 2018 12:42:55 -0800 (PST) MIME-Version: 1.0 Received: by 10.100.229.67 with HTTP; Fri, 16 Feb 2018 12:42:14 -0800 (PST) From: Kathleen Moriarty Date: Fri, 16 Feb 2018 15:42:14 -0500 Message-ID: To: ace@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Feb 2018 20:42:58 -0000 Hello, Thanks for your work on draft-ietf-ace-cbor-web-token-12 The draft looks good and I'll kick off IETF last call today, but have an important question that may require clarification in the draft. In the IANA section 9.1, how does one know which document type is needed? Could you add text about how one might differentiate the values to drive that decision? Depending upon the values being requested, registration requests are evaluated on a Standards Track Required, Specification Required, Expert Review, or Private Use basis [RFC8126] after a three-week review period on the cwt-reg-review@ietf.org mailing list, on the advice of one or more Designated Experts. -- Best regards, Kathleen From nobody Fri Feb 16 12:47:02 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3EAA126BF0 for ; Fri, 16 Feb 2018 12:47:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p-XG-iQokf1t for ; Fri, 16 Feb 2018 12:46:58 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0112.outbound.protection.outlook.com [104.47.32.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42A5412D7E4 for ; Fri, 16 Feb 2018 12:46:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VOSF+IzQMkskxDHmDg0yD7VJOIcBQAHnHJkENRT9Np8=; b=bwAXLcvxrb8CuVlsMP4PMIjTdyi0SJ+VnTwe475x44LNE2v6S6r8C2GWmPsxEl3+T0UL/J8fCDuTvL7QoqWlqSDMlZPgpgeRAEKL2H29d1t4iTa+92jt+yBb9JBZt0MR16v7ib46jOOXSKgV/fc98gTKVBwJtGfbJOp/XIxrT2o= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1054.namprd21.prod.outlook.com (52.132.115.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.527.2; Fri, 16 Feb 2018 20:46:56 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0527.008; Fri, 16 Feb 2018 20:46:56 +0000 From: Mike Jones To: Kathleen Moriarty , "ace@ietf.org" Thread-Topic: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 Thread-Index: AQHTp2a+umA3lNAvQ0mjvQ/gkC3Ob6OnfxHA Date: Fri, 16 Feb 2018 20:46:56 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-16T20:46:54.8061728Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:1::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1054; 6:SrVglxxPLD3nFQFpaKqqOHqhXwgL8FbAaGbuOemOSdeyXDSTo3gcV6iPc/dLNnAOZGUVydO1++KjP8G5aOPbS115k8X47//ld01jYmvWEFSslVfZYBuIr71QW9cDXdzm4ASZ80UH+COuyHBFNBXfzcBr/2gxuxr48ot6ANW+tO7+zuWOPWOrhBiCVtrkzsILOVAwfg0x6rK1bfKYne+4UEzCendDlbhUMwOlw/5UYhSpTyyb+bra5KmrmDufqiXw95aszolmij3fQeT7fnaHpUsjIuxR61gbR3IDooe2ZvlzeYzgLyZ/Ym9uAKfuxHobyzder6YZXRP6d5kfPhMQTuvbxSsSLvaxzAfl5aFPW1D4lTwDAXgVLUX7L+mSQGKD; 5:A5mfEb/9M3LFl1JNUafzq0hUBJB+PTv9BzQIONCH9w42sC8Qn2n1VBPNpokc2n7zyhrr2iPf0yxpuvz5sdu+yUEy9nVkQsdvE7pltbAWhVj0C9AW9kg6P1uzSwub492REUBQM3bFt0mVDdbXIm+le7tICg+XX7Z5SGYYsjTM/xo=; 24:BUOVC+fH5byCjlr/d+31B/tvGnnwrn+rPKOsq4qhax05lwZUYYOW4dUOC2phAXC7hJndQuZtMzqt8a7zicrphKpVvtqSmthOR0TwA2KsLus=; 7:t4CXPcbaP2/cwI4+LaWvpf3PKsV70ANhknEKX0WTq7a5D+p23ihXUdLyWgQiTCnThE3v4y4bQv9dcC3ZkB+ndpS7y/mUhOVL0OSdBYg3aq0pSzZTOvp1sF+eAteGliYjMyoAYRag7blZiBXVGGST0Awvw7bkQEEIb0mwKPgkQpQe35B4lWnQ1Qnm1uEccHPqVXgzPvFId/V69JJk5bnmZ5cA9AsPHrvZ3lfEgsB0bEhNzgv/OtQHTZIyVFhknGjF x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 96eea25e-5e0c-4d30-3695-08d5757e6b45 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7193020); SRVR:SN6PR2101MB1054; x-ms-traffictypediagnostic: SN6PR2101MB1054: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001038)(61425038)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231125)(944501161)(52105033)(6055026)(61426038)(61427038)(6041288)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:SN6PR2101MB1054; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1054; x-forefront-prvs: 0585417D7B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(396003)(376002)(366004)(39860400002)(39380400002)(13464003)(189003)(199004)(2501003)(186003)(102836004)(6346003)(86362001)(9686003)(106356001)(8676002)(6306002)(110136005)(6436002)(316002)(14454004)(6116002)(6246003)(53546011)(7696005)(59450400001)(6506007)(229853002)(76176011)(39060400002)(105586002)(2950100002)(97736004)(81156014)(81166006)(55016002)(2906002)(22452003)(53936002)(8936002)(99286004)(68736007)(7736002)(25786009)(8990500004)(74316002)(5660300001)(5250100002)(33656002)(305945005)(10290500003)(478600001)(10090500001)(72206003)(2900100001)(86612001)(966005)(3280700002)(3660700001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1054; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: HaPD5djrFCUjVqXH45V9oU/f159RleuTEfhBLtpuRqMshJEGZXVh6dmQRTL5GKOUihkxw5Rl/dyqsJS2kZ064A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 96eea25e-5e0c-4d30-3695-08d5757e6b45 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Feb 2018 20:46:56.7882 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1054 Archived-At: Subject: Re: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Feb 2018 20:47:01 -0000 This information is in the registration template at https://tools.ietf.org/= html/draft-ietf-ace-cbor-web-token-12#section-9.1.1, as follows: Claim Key: CBOR map key for the claim. Integer values between -256 and 255 and strings of length 1 are designated as Standards Track Required. Integer values from -65536 to 65535 and strings of length 2 are designated as Specification Required. Integer values of greater than 65535 and strings of length greater than 2 are designated as Expert Review. Integer values less than -65536 are marked as Private Use. Thanks again, -- Mike -----Original Message----- From: Ace On Behalf Of Kathleen Moriarty Sent: Friday, February 16, 2018 12:42 PM To: ace@ietf.org Subject: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 Hello, Thanks for your work on draft-ietf-ace-cbor-web-token-12 The draft looks good and I'll kick off IETF last call today, but have an im= portant question that may require clarification in the draft. In the IANA section 9.1, how does one know which document type is needed? = Could you add text about how one might differentiate the values to drive th= at decision? Depending upon the values being requested, registration requests are evaluated on a Standards Track Required, Specification Required, Expert Review, or Private Use basis [RFC8126] after a three-week review period on the cwt-reg-review@ietf.org mailing list, on the advice of one or more Designated Experts. --=20 Best regards, Kathleen _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Fri Feb 16 13:17:34 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D09D126BF0 for ; Fri, 16 Feb 2018 13:17:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0fj0HA5VW_uX for ; Fri, 16 Feb 2018 13:17:31 -0800 (PST) Received: from mail-pg0-x235.google.com (mail-pg0-x235.google.com [IPv6:2607:f8b0:400e:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CCBC124207 for ; Fri, 16 Feb 2018 13:17:31 -0800 (PST) Received: by mail-pg0-x235.google.com with SMTP id e11so3358002pgq.12 for ; Fri, 16 Feb 2018 13:17:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=zOvjwbfxK/rZymrjgJefgJL+hcsCwK2Z3Qt3tX6IV1E=; b=S73anPrW8OabWDd9nHNNTqLa3M6vYW0zaEW98kIqHj7R+r2Qiesql//Jp/4kokLjsv 1tTlxv2idKgucUlUGH8a+sjoz1IfI7MLo9fC+JdYjXp/sR8w5r+NWc3TBLBJZKCSFBAW Fthj8AWCUnE453gjmEDziB7dp1cRJnb4B72T7cofUGoM0I7PvQXNzcsTeMeN/KNVBBP2 Q+DwLf2LSV6t8zIj/lC8oGlkug9+38xqozxAkFGAYM9f88s4vHKKWThHfv19cxTTiuyK PlzWxMcQwJ+YWBFdTgmOnVjM3kt4ehMsNQyxDnSzRAW4apl+8Wis5Kjeq1ljKWrces/r DJyg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=zOvjwbfxK/rZymrjgJefgJL+hcsCwK2Z3Qt3tX6IV1E=; b=Ko8Jp9OWBc7vq70ALxW+XRCmDCMhvefpduXfqYlqsN09fXfxLxtdzSEqCNFKrWlRM7 j5UDHdiGZCZpu2OI4oz3Q5NkyKmnL0jyZJb2h35lKNpEbFJ3dztrlEqnQNaPgOle6wkN 90BuUE7VTj7C/+36Jwt276TgYvvEpWU2id57Bk3y9ffAULolMRonyIG8ftVLGQNUO3wh a2dw6DPL3FduEA/Wf34DS7hD6tNp++EiCWAlYb0oXojbs88C4ua60RJ8VWY+uOBqLQlh LkocIwwh3GwhNtgwNrT/PZEnwOF7QUspyStxsB8WnunGDHNXxWmxXN7C2hIQN+r/jWkq KgCA== X-Gm-Message-State: APf1xPB2x3vggfUmRq4g1c/mNFprOqpksiglm3JeiOU9EBZMTv3gqYem mqxOInGfSF0mPueS075xdtsZkBQ8oaQhsN5NbUY= X-Google-Smtp-Source: AH8x2265CP6J0F3LUGwMmwzya8+tuIGgZZSNVT3iBDugVK+OpEIhGJ9Nvh3UxKKYFo8y6ucx+EBiM7lIkTOECZZZrNA= X-Received: by 10.98.94.71 with SMTP id s68mr7273107pfb.135.1518815850806; Fri, 16 Feb 2018 13:17:30 -0800 (PST) MIME-Version: 1.0 Received: by 10.100.229.67 with HTTP; Fri, 16 Feb 2018 13:16:50 -0800 (PST) In-Reply-To: References: From: Kathleen Moriarty Date: Fri, 16 Feb 2018 16:16:50 -0500 Message-ID: To: Mike Jones Cc: "ace@ietf.org" Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Feb 2018 21:17:33 -0000 On Fri, Feb 16, 2018 at 3:46 PM, Mike Jones wrote: > This information is in the registration template at https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-12#section-9.1.1, as follows: > OK, could you clarify that in the IANA section with a simple pointer to the registration template? This update can come with any other IETF last call comments. Thank you! Kathleen > Claim Key: > CBOR map key for the claim. Integer values between -256 and 255 > and strings of length 1 are designated as Standards Track > Required. Integer values from -65536 to 65535 and strings of > length 2 are designated as Specification Required. Integer values > of greater than 65535 and strings of length greater than 2 are > designated as Expert Review. Integer values less than -65536 are > marked as Private Use. > > Thanks again, > -- Mike > > -----Original Message----- > From: Ace On Behalf Of Kathleen Moriarty > Sent: Friday, February 16, 2018 12:42 PM > To: ace@ietf.org > Subject: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 > > Hello, > > Thanks for your work on draft-ietf-ace-cbor-web-token-12 > > The draft looks good and I'll kick off IETF last call today, but have an important question that may require clarification in the draft. > > In the IANA section 9.1, how does one know which document type is needed? Could you add text about how one might differentiate the values to drive that decision? > > Depending upon the values being requested, registration requests are > evaluated on a Standards Track Required, Specification Required, > Expert Review, or Private Use basis [RFC8126] after a three-week > review period on the cwt-reg-review@ietf.org mailing list, on the > advice of one or more Designated Experts. > > > -- > > Best regards, > Kathleen > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace -- Best regards, Kathleen From nobody Fri Feb 16 14:20:54 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58A1B1241F3 for ; Fri, 16 Feb 2018 14:20:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6NnQByIsdIUf for ; Fri, 16 Feb 2018 14:20:49 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0109.outbound.protection.outlook.com [104.47.40.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7DB512008A for ; Fri, 16 Feb 2018 14:20:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=COMZ/b10SuIdR1OFeePT38C90V/pu19d5/VQs1qNfCs=; b=UOnYb98fFC+bQrfBNzjugjvrj2KB8Y1o/oJ74p8n95VqAJuDL1thnBhimw+y5SjxCVR5F96nuROkonhkiiKvVHBxWE0mc6J5NMTW66425QJFtkNxudVJqBubW9re2RC5S8C3q1dqI8r/wl/p2PYAcydyXan88Lzwnr2EfF827WA= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1101.namprd21.prod.outlook.com (52.132.115.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.527.3; Fri, 16 Feb 2018 22:20:48 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0527.008; Fri, 16 Feb 2018 22:20:48 +0000 From: Mike Jones To: Kathleen Moriarty CC: "ace@ietf.org" Thread-Topic: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 Thread-Index: AQHTp2a+umA3lNAvQ0mjvQ/gkC3Ob6OnfxHAgAAJDACAABHJoA== Date: Fri, 16 Feb 2018 22:20:48 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-16T22:20:46.7701866Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:1::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1101; 6:5jssgs8Ph86fphcdBfG22Q3oi2mPyuGfb7Zf1D7ioMXgGeWWZYL5pS72VtsifU0zJBn0pTkw+CdSWmg2Fo8yqF8n67Tx3Qg/18B0BH/qMP/FKgobnF0I4fNkqOu3HggiXtGHmlRBn6rq/cNu62iEWFnODLtIueImISbJK/IO1BuAxqIRIs2iQ4KYiZEkjgr7JLpjhgu6UWwjBfTji3MtuDcUJRqmH8HIUnyrdQeh7lauIsrYrTtitIZeKQG3cbjLTcqGKNaxHeMGPjYO8MKWCLw+ivovk/u1pSOZ+knkDAH2A8Rffq+Sf+Jm7PV/TKhSiYsJo0Lun6NbKaKlBbmCQC3Pn9C1wJ37eZwvHIRv2Uzp1RrtAcpPU1AMSZbi4TbC; 5:bHFnV1VAPJaaTxL2NuAL9hKTap0JVpqm3Fv+UfcxQfFFypgbrrRzOIDAIdXitVNq8w1fqJ9HK5FE3AsqitsYfE4aJHJp6X14OYq1nTaKBSwZniGbPuD2/9YBzKEbPeO98vvY3I7fP8GKmMumO7TnG5p4AY/qxKO8FUDFoNAEcCY=; 24:6mFS1eRWxichSXMcJqmiDYvQXc/FbqdyI3h29+a+18+ewv9n6Gkl/xtOqcDHbbpfxy2+5JgPqBxdOcTkk5JBhwh+0kW5/L1jeDymcZ2G+Fw=; 7:dJz5l7zHrVfnKeFFC08YzXAMiB53mYeIvqbAEbyM3YMyMW0q4DWH8YloFkApXCkfzHwMMms6hardJgYzS99Gnif0OQs3CIX1gzkLQBfK2q9ct6Vgl7o7Lnpvjicdz6vcTZjIAUm3NGBRDdRXzlTrIpmZgXY33vVrIbeTil/z1XFCQ91zxtai6+G/0fAnQDOBa0mHTFn2alGXpV448t1SNs0PgpH9fe4me8muNeBXtHDXJYgUYWa3JbZRsBUUuHEh x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 849efe35-a4a9-475f-bd12-08d5758b87e4 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1101; x-ms-traffictypediagnostic: SN6PR2101MB1101: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(89211679590171)(85827821059158); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001040)(61425038)(6040501)(2401047)(5005006)(8121501046)(10201501046)(3002001)(3231125)(944501161)(52105033)(93006095)(93001095)(6055026)(61426038)(61427038)(6041288)(20161123560045)(20161123562045)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:SN6PR2101MB1101; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1101; x-forefront-prvs: 0585417D7B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(39860400002)(39380400002)(366004)(376002)(346002)(189003)(13464003)(199004)(2906002)(105586002)(72206003)(966005)(6116002)(97736004)(59450400001)(6506007)(53546011)(102836004)(6346003)(5250100002)(186003)(3280700002)(8676002)(81156014)(81166006)(10290500003)(2900100001)(39060400002)(5660300001)(25786009)(76176011)(4326008)(33656002)(3660700001)(14454004)(99286004)(7696005)(68736007)(6246003)(53936002)(10090500001)(86612001)(8990500004)(7736002)(74316002)(305945005)(22452003)(8936002)(316002)(2950100002)(6306002)(9686003)(478600001)(6916009)(55016002)(106356001)(86362001)(229853002)(6436002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1101; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: 5OpB2/W/Dg/EDG6Y6+9gv3jQzgBXoF/48H/ZYZrMng8eV6Hg6/BybyIKuaqJjG7vbFx0aJgN3OWOvrozqD1TWg== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 849efe35-a4a9-475f-bd12-08d5758b87e4 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Feb 2018 22:20:48.2361 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1101 Archived-At: Subject: Re: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Feb 2018 22:20:52 -0000 QmUgZ2xhZCB0by4gIEknbGwgYWRkIGl0IHRvIG15IHRvLWRvIGxpc3QgZm9yIHRoaXMgZHJhZnQu DQoNCgkJCQktLSBNaWtlDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBLYXRo bGVlbiBNb3JpYXJ0eSA8a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20+IA0KU2VudDog RnJpZGF5LCBGZWJydWFyeSAxNiwgMjAxOCAxOjE3IFBNDQpUbzogTWlrZSBKb25lcyA8TWljaGFl bC5Kb25lc0BtaWNyb3NvZnQuY29tPg0KQ2M6IGFjZUBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtB Y2VdIEFEIFJldmlldyBvZiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMg0KDQpPbiBG cmksIEZlYiAxNiwgMjAxOCBhdCAzOjQ2IFBNLCBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1p Y3Jvc29mdC5jb20+IHdyb3RlOg0KPiBUaGlzIGluZm9ybWF0aW9uIGlzIGluIHRoZSByZWdpc3Ry YXRpb24gdGVtcGxhdGUgYXQgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYt YWNlLWNib3Itd2ViLXRva2VuLTEyI3NlY3Rpb24tOS4xLjEsIGFzIGZvbGxvd3M6DQo+DQoNCk9L LCBjb3VsZCB5b3UgY2xhcmlmeSB0aGF0IGluIHRoZSBJQU5BIHNlY3Rpb24gd2l0aCBhIHNpbXBs ZSBwb2ludGVyIHRvIHRoZSByZWdpc3RyYXRpb24gdGVtcGxhdGU/DQoNClRoaXMgdXBkYXRlIGNh biBjb21lIHdpdGggYW55IG90aGVyIElFVEYgbGFzdCBjYWxsIGNvbW1lbnRzLg0KDQpUaGFuayB5 b3UhDQpLYXRobGVlbg0KDQo+ICAgIENsYWltIEtleToNCj4gICAgICAgQ0JPUiBtYXAga2V5IGZv ciB0aGUgY2xhaW0uICBJbnRlZ2VyIHZhbHVlcyBiZXR3ZWVuIC0yNTYgYW5kIDI1NQ0KPiAgICAg ICBhbmQgc3RyaW5ncyBvZiBsZW5ndGggMSBhcmUgZGVzaWduYXRlZCBhcyBTdGFuZGFyZHMgVHJh Y2sNCj4gICAgICAgUmVxdWlyZWQuICBJbnRlZ2VyIHZhbHVlcyBmcm9tIC02NTUzNiB0byA2NTUz NSBhbmQgc3RyaW5ncyBvZg0KPiAgICAgICBsZW5ndGggMiBhcmUgZGVzaWduYXRlZCBhcyBTcGVj aWZpY2F0aW9uIFJlcXVpcmVkLiAgSW50ZWdlciB2YWx1ZXMNCj4gICAgICAgb2YgZ3JlYXRlciB0 aGFuIDY1NTM1IGFuZCBzdHJpbmdzIG9mIGxlbmd0aCBncmVhdGVyIHRoYW4gMiBhcmUNCj4gICAg ICAgZGVzaWduYXRlZCBhcyBFeHBlcnQgUmV2aWV3LiAgSW50ZWdlciB2YWx1ZXMgbGVzcyB0aGFu IC02NTUzNiBhcmUNCj4gICAgICAgbWFya2VkIGFzIFByaXZhdGUgVXNlLg0KPg0KPiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcyBhZ2FpbiwNCj4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAtLSBNaWtlDQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQo+IEZyb206IEFjZSA8YWNlLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBLYXRobGVl biBNb3JpYXJ0eQ0KPiBTZW50OiBGcmlkYXksIEZlYnJ1YXJ5IDE2LCAyMDE4IDEyOjQyIFBNDQo+ IFRvOiBhY2VAaWV0Zi5vcmcNCj4gU3ViamVjdDogW0FjZV0gQUQgUmV2aWV3IG9mIGRyYWZ0LWll dGYtYWNlLWNib3Itd2ViLXRva2VuLTEyDQo+DQo+IEhlbGxvLA0KPg0KPiBUaGFua3MgZm9yIHlv dXIgd29yayBvbiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMg0KPg0KPiBUaGUgZHJh ZnQgbG9va3MgZ29vZCBhbmQgSSdsbCBraWNrIG9mZiBJRVRGIGxhc3QgY2FsbCB0b2RheSwgYnV0 IGhhdmUgYW4gaW1wb3J0YW50IHF1ZXN0aW9uIHRoYXQgbWF5IHJlcXVpcmUgY2xhcmlmaWNhdGlv biBpbiB0aGUgZHJhZnQuDQo+DQo+IEluIHRoZSBJQU5BIHNlY3Rpb24gOS4xLCBob3cgZG9lcyBv bmUga25vdyB3aGljaCBkb2N1bWVudCB0eXBlIGlzIG5lZWRlZD8gIENvdWxkIHlvdSBhZGQgdGV4 dCBhYm91dCBob3cgb25lIG1pZ2h0IGRpZmZlcmVudGlhdGUgdGhlIHZhbHVlcyB0byBkcml2ZSB0 aGF0IGRlY2lzaW9uPw0KPg0KPiAgICBEZXBlbmRpbmcgdXBvbiB0aGUgdmFsdWVzIGJlaW5nIHJl cXVlc3RlZCwgcmVnaXN0cmF0aW9uIHJlcXVlc3RzIGFyZQ0KPiAgICBldmFsdWF0ZWQgb24gYSBT dGFuZGFyZHMgVHJhY2sgUmVxdWlyZWQsIFNwZWNpZmljYXRpb24gUmVxdWlyZWQsDQo+ICAgIEV4 cGVydCBSZXZpZXcsIG9yIFByaXZhdGUgVXNlIGJhc2lzIFtSRkM4MTI2XSBhZnRlciBhIHRocmVl LXdlZWsNCj4gICAgcmV2aWV3IHBlcmlvZCBvbiB0aGUgY3d0LXJlZy1yZXZpZXdAaWV0Zi5vcmcg bWFpbGluZyBsaXN0LCBvbiB0aGUNCj4gICAgYWR2aWNlIG9mIG9uZSBvciBtb3JlIERlc2lnbmF0 ZWQgRXhwZXJ0cy4NCj4NCj4NCj4gLS0NCj4NCj4gQmVzdCByZWdhcmRzLA0KPiBLYXRobGVlbg0K Pg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBB Y2UgbWFpbGluZyBsaXN0DQo+IEFjZUBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2FjZQ0KDQoNCg0KLS0gDQoNCkJlc3QgcmVnYXJkcywNCkthdGhsZWVu DQo= From nobody Sat Feb 17 08:34:51 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2DDA1204DA; Sat, 17 Feb 2018 08:34:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JApWs0NPk0ix; Sat, 17 Feb 2018 08:34:44 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16CB4120725; Sat, 17 Feb 2018 08:34:43 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w1HGYepK013857; Sat, 17 Feb 2018 17:34:40 +0100 (CET) Received: from client-0231.vpn.uni-bremen.de (client-0231.vpn.uni-bremen.de [134.102.107.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zkFwF6pZ9zDXjD; Sat, 17 Feb 2018 17:34:37 +0100 (CET) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 540578068.245754-97e5f0bc463b69dabaa858a33a4d2e19 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Sat, 17 Feb 2018 08:34:29 -0800 Message-Id: To: ace@ietf.org, "core@ietf.org WG (core@ietf.org)" , cose , cbor@ietf.org, t2trg@irtf.org X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: [Ace] Constrained Node/Network Cluster @ IETF101: DRAFT AGENDA X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Feb 2018 16:34:46 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF101. Remember that there is still quite some potential for changes. The painful ones (not necessarily fixable) this time include: DINRG vs. ACE, CBOR vs. TEEP, ROLL vs. SUIT vs. OCF/WoT; also CORE vs. ANIMA, CORE vs. QUIC. All times are BST (UTC+0100). (You can get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY -- Hackathon (including various interops) MONDAY, March 19, 2018 0930-1200 Morning Session I Bleinheim ART dispatch Dispatch WG - 0930-1100 Joint = with ARTAREA Sandringham INT ipwave IP Wireless Access in Vehicular = Environments WG Palace C IRTF*** dinrg Decentralized Internet Infrastructure = Proposed RG Viscount OPS v6ops IPv6 Operations WG Balmoral SEC *** ace Authentication and Authorization for = Constrained Environments WG 1330-1530 Afternoon Session I Buckingham ART *** core Constrained RESTful Environments WG Viscount INT 6man IPv6 Maintenance WG Sandringham TSV quic QUIC WG 1550-1720 Afternoon Session II Sandringham INT intarea Internet Area Working Group WG Balmoral IRTF cfrg Crypto Forum Buckingham SEC oauth Web Authorization Protocol WG 1740-1840 Afternoon Session III Balmoral SEC tls Transport Layer Security WG Sandringham TSV tsvarea Transport Area Open Meeting TUESDAY, March 20, 2018 0930-1200 Morning Session I Viscount ART *** core Constrained RESTful Environments WG Sandringham IRTF maprg Measurement and Analysis for Protocols Buckingham OPS anima Autonomic Networking Integrated Model = and Approach WG Bleinheim SEC secdispatch Security Dispatch WG 1330-1530 Afternoon Session I Park Suite ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Buckingham IRTF panrg Path Aware Networking Proposed RG Richm_Chl_Tow RTG rift Routing In Fat Trees WG Balmoral SEC *** teep Trusted Execution Environment = Provisioning BOF 1550-1820 Afternoon Session II Balmoral ART httpbis Hypertext Transfer Protocol WG Park Suite IRTF icnrg Information-Centric Networking WEDNESDAY, March 21, 2018 0930-1200 Morning Session I Viscount INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Sandringham IRTF irtfopen IRTF Open Meeting Bleinheim SEC tls Transport Layer Security WG Park Suite TSV taps Transport Services WG 1330-1500 Afternoon Session I Viscount INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Richm_Chl_Tow RTG bier Bit Indexed Explicit Replication WG Park Suite SEC oauth Web Authorization Protocol WG Palace C TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1520-1650 Afternoon Session II Park Suite INT *** lwig Light-Weight Implementation Guidance WG Buckingham SEC acme Automated Certificate Management = Environment WG Viscount SEC tokbind Token Binding WG 1710-1940 IETF Plenary - Sandringham THURSDAY, March 22, 2018 0930-1200 Morning Session I Buckingham INT dnssd Extensions for Scalable DNS Service = Discovery WG Park Suite RTG *** roll Routing Over Low power and Lossy = networks WG Sandringham TSV quic QUIC WG 1330-1530 Afternoon Session I Buckingham INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Sandringham SEC saag Security Area Open Meeting 1550-1750 Afternoon Session II Bleinheim IRTF*** t2trg Thing-to-Thing Sandringham RTG rtgarea Routing Area Open Meeting Buckingham SEC mls Messaging Layer Security BOF Balmoral TSV tsvwg Transport Area Working Group WG 1810-1910 Afternoon Session III Bleinheim ART uta Using TLS in Applications WG Park Suite RTG babel Babel routing protocol WG Balmoral TSV tsvwg Transport Area Working Group WG FRIDAY, March 23, 2018 0930-1130 Morning Session I Richm_Chl_Tow ART ice Interactive Connectivity Establishment = WG - 0930 - 1030 Sandringham INT homenet Home Networking WG Bleinheim RTG detnet Deterministic Networking WG Viscount RTG *** roll Routing Over Low power and Lossy = networks WG Balmoral SEC *** suit Software Updates for Internet of Things = WG 1150-1320 Afternoon Session I Bleinheim RTG detnet Deterministic Networking WG 1330-1730 @ OCF meeting venue (Prague, colocated with W3C WoT) -- Joint meeting of OCF, W3C WoT, and T2TRG From nobody Sun Feb 18 07:38:27 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E0E81241F8 for ; Sun, 18 Feb 2018 07:38:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0ItKd9efBfKJ for ; Sun, 18 Feb 2018 07:38:24 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 467911201F8 for ; Sun, 18 Feb 2018 07:38:24 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w1IFcLF3023590 for ; Sun, 18 Feb 2018 16:38:21 +0100 (CET) Received: from client-0019.vpn.uni-bremen.de (client-0019.vpn.uni-bremen.de [134.102.107.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zkrcr3BQHzDXr8; Sun, 18 Feb 2018 16:38:20 +0100 (CET) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 540661096.08891-e8023c5029df65d45b67f270a68a1ccf Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Sun, 18 Feb 2018 07:38:17 -0800 Message-Id: To: ace X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 15:38:26 -0000 Page 50: * Register the client at the AS. This includes making known to the AS which profiles, token_types, and key types (symmetric/ asymmetric) the client. Shouldn=E2=80=99t this say how? (This is just one instance of a rather pervasive issue.) Gr=C3=BC=C3=9Fe, Carsten From nobody Sun Feb 18 08:35:55 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A8CC12420B for ; Sun, 18 Feb 2018 08:35:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AMG-KGoiGaIY for ; Sun, 18 Feb 2018 08:35:51 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30058.outbound.protection.outlook.com [40.107.3.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 515451200B9 for ; Sun, 18 Feb 2018 08:35:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=SnMydme/G8RjfJoZoSeri4zUqOV1thHTd7Cxq+yrlCM=; b=RG4CVuiiQW51dF+Kd7jpzl/0q0FEkfOx06HREX0d6vA7TaCn6ti/ZOGiGqaL1PTahZqlEr49+/sFb8kn8cFkHYg4fjv747tvBpe1EoQadcG7oOK+CzVs7ce9ig1ZKCjWU+4jfV0p3/iGtpLGx5mjHuqH7H8lmiWUUeiIWV2GUno= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1539.eurprd08.prod.outlook.com (10.168.5.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Sun, 18 Feb 2018 16:35:47 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0506.021; Sun, 18 Feb 2018 16:35:47 +0000 From: Hannes Tschofenig To: Carsten Bormann , ace Thread-Topic: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark Thread-Index: AQHTqM6IxAS77gQkjk+VU/b7JuvkYaOqWx3w Date: Sun, 18 Feb 2018 16:35:47 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.50] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1539; 7:jHaSHbsLDvfUK7TQam10WIUyDldNJAa0G+288oyLQ5iE+AD2ON79oO7sTenGa2kFdisjWHap98MKa7zD7U5SbI2BJf53POXoMhEZ+13k7qQTOASiwTYgVhIt3nH35y5QHRuXtobeHcWPLGMUpzsLJUdz3PC1Yj1Rg53h+bJPrEOXuAnAhV2BN4uQtJ+JQc8MEvhb915jrD7JVFSk2Osym8Wo70BbO7WU/JxqbSw2SObizJzl0DTKhWZjOQ+32VMF x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: b92a57fd-be57-4dc4-d9f1-08d576edaa07 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1539; x-ms-traffictypediagnostic: AM4PR0801MB1539: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001056)(6040501)(2401047)(5005006)(8121501046)(3002001)(10201501046)(93006095)(93001095)(3231101)(944501161)(6055026)(6041288)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:AM4PR0801MB1539; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1539; x-forefront-prvs: 058707456E x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(396003)(376002)(39850400004)(346002)(39380400002)(199004)(189003)(13464003)(40434004)(478600001)(5890100001)(5250100002)(316002)(14454004)(33656002)(99286004)(5660300001)(3846002)(6116002)(110136005)(25786009)(2906002)(7736002)(305945005)(186003)(74316002)(3660700001)(3280700002)(105586002)(86362001)(97736004)(2900100001)(8936002)(81156014)(81166006)(9686003)(6306002)(59450400001)(6506007)(76176011)(53936002)(68736007)(55016002)(102836004)(53546011)(6246003)(66066001)(8676002)(26005)(72206003)(966005)(6436002)(2950100002)(229853002)(7696005)(106356001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1539; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: mD03wOAixACL85qQBM7zcFNXZL3zovRAa2o+dv23BYx4OXyO7AVcQukAxfroU+Cuh0dj6oXfV6HEwdBvBmrKaE+HBqYGA3OGhFmzsxPGrHHPF3f2nWg/hue6YC587nVrZOda0ok0o3DIWckXsUxJI51YZ3xtInlS4eIhlpPWB8A= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: b92a57fd-be57-4dc4-d9f1-08d576edaa07 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Feb 2018 16:35:47.4292 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1539 Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 16:35:54 -0000 SGkgQ2Fyc3RlbiwNCg0KV2Ugc2hvdWxkIG1heWJlIGFkZCB0aGF0IHRoaXMgaW5mb3JtYXRpb24g aXMgcHJvdmlzaW9uZWQgZWl0aGVyIGR1cmluZyBtYW51ZmFjdHVyaW5nLCB2aWEgYSBjb21taXNz aW9uaW5nIHRvb2wgb3Igc29tZSBvdGhlciBtZWNoYW5pc21zLiBOb3Qgc3VyZSB3aGV0aGVyIHRo aXMgd2lsbCBpbmRlZWQgYWRkIG1vcmUgYnV0IGl0IG1pZ2h0IGJlIHVzZWZ1bCB0byBrbm93Lg0K DQpDaWFvDQpIYW5uZXMNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFjZSBb bWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQ2Fyc3RlbiBCb3JtYW5u DQpTZW50OiAxOCBGZWJydWFyeSAyMDE4IDE2OjM4DQpUbzogYWNlDQpTdWJqZWN0OiBbQWNlXSBk cmFmdC1pZXRmLWFjZS1vYXV0aC1hdXRoei0xMC50eHQ6IExlYXZpbmcgaW1wbGVtZW50ZXJzIGlu IHRoZSBkYXJrDQoNClBhZ2UgNTA6DQoNCiAgICAgICogIFJlZ2lzdGVyIHRoZSBjbGllbnQgYXQg dGhlIEFTLiAgVGhpcyBpbmNsdWRlcyBtYWtpbmcga25vd24gdG8NCiAgICAgICAgIHRoZSBBUyB3 aGljaCBwcm9maWxlcywgdG9rZW5fdHlwZXMsIGFuZCBrZXkgdHlwZXMgKHN5bW1ldHJpYy8NCiAg ICAgICAgIGFzeW1tZXRyaWMpIHRoZSBjbGllbnQuDQoNClNob3VsZG7igJl0IHRoaXMgc2F5IGhv dz8NCg0KKFRoaXMgaXMganVzdCBvbmUgaW5zdGFuY2Ugb2YgYSByYXRoZXIgcGVydmFzaXZlIGlz c3VlLikNCg0KR3LDvMOfZSwgQ2Fyc3Rlbg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KQWNlIG1haWxpbmcgbGlzdA0KQWNlQGlldGYub3JnDQpodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZQ0KSU1QT1JUQU5UIE5PVElDRTog VGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlk ZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50 ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5k IGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0 IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55 IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Sun Feb 18 08:45:32 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BB5B1241F5 for ; Sun, 18 Feb 2018 08:45:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CHnY0RfdFHyX for ; Sun, 18 Feb 2018 08:45:29 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 962FA1201F2 for ; Sun, 18 Feb 2018 08:45:29 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w1IGjO9n001563; Sun, 18 Feb 2018 17:45:24 +0100 (CET) Received: from [172.25.0.142] (rrcs-67-52-140-5.west.biz.rr.com [67.52.140.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zkt6C2tdXzDXrX; Sun, 18 Feb 2018 17:45:23 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Carsten Bormann In-Reply-To: Date: Sun, 18 Feb 2018 08:45:17 -0800 Cc: ace X-Mao-Original-Outgoing-Id: 540665115.597488-c54b955e27ef2878894b5f8d61830291 Content-Transfer-Encoding: quoted-printable Message-Id: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> References: To: Hannes Tschofenig X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 16:45:31 -0000 On Feb 18, 2018, at 08:35, Hannes Tschofenig = wrote: >=20 > Hi Carsten, >=20 > We should maybe add that this information is provisioned either during = manufacturing, via a commissioning tool or some other mechanisms. Not = sure whether this will indeed add more but it might be useful to know. For a protocol that is meant to be interoperable, there need to be = standard (if not MTI) ways of getting this done. At least we need to have a defined interface between CAM = (=E2=80=9Ccommissioning tool=E2=80=9D) and C for letting C know what was = agreed about how to address AS and which RSes it should be used for. Gr=C3=BC=C3=9Fe, Carsten From nobody Sun Feb 18 08:52:41 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F08F1201F2 for ; Sun, 18 Feb 2018 08:52:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5wk234UUq2CX for ; Sun, 18 Feb 2018 08:52:38 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0043.outbound.protection.outlook.com [104.47.0.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00CE41200B9 for ; Sun, 18 Feb 2018 08:52:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=OBJuI5ffcQnAPUg2wtMCarW7+Yo1+RgI/su8wCAOjyM=; b=p+hhuNSb/mnXSwb3ZVh3DUqs+1/jvfib0aohCgrnKsZPn3g0NOAs3KOMp59FdUvyFPoVJbV0HEUInE4JAxRr+7g7R29HNTEpOQQ2b9YZuVi0yTjR6URkcd3PcmfVQwY49mMAwIR4RQuRCAeR3q57InkEbumUDIY29UOq8AFfxlA= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1537.eurprd08.prod.outlook.com (10.168.5.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Sun, 18 Feb 2018 16:52:35 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0506.021; Sun, 18 Feb 2018 16:52:34 +0000 From: Hannes Tschofenig To: Carsten Bormann CC: ace Thread-Topic: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark Thread-Index: AQHTqM6IxAS77gQkjk+VU/b7JuvkYaOqWx3wgAAC+4CAAAASYA== Date: Sun, 18 Feb 2018 16:52:34 +0000 Message-ID: References: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> In-Reply-To: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.50] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1537; 6:tQiENNcZTxACco7KJrcyV5qz5i0EMVq3/pRIR4+UPj+Qs4Sb8QVNWhWA8cBZPRcPIvKI1s4NvHjPCCrbM5efU0kzwzaqt7dGptUyM5rdopv9DqpfAXPFHEqO+espbu47zLQPsyezP3W14bPanZO3CijaskPiQLydwdupEpyDsEYCotP5g2RwRD/a6cgmz0XVcq6HR1ErrzyT5LjJDA2wlAhMvTmAl6MzDB37h0XjW40nbVdzwPiIit8/I86su+JHG/iLAyo6dy+rkDRGz0IpdcVRekNjXDlm0R0oFUHcRB2lXqnFtWWa1p5YRZB/9QNr2UThiB6iNKH/SzeCL2aEl8HCYzKnGgfqokseKktzhfqjMmTun/S4R2OTpYamZs7g; 5:a+NjY5GTfErTpIvgNjqrEKZcUK5o+u50BK+VOq8ju62D76j9etDHU4QgsXA/Lv8H6ok/Nq0WwTGvMmGOyNhttFL33ZnCh40q/kt00fF20oQsZ181kx7E7Ebyq3xbb3QIsvNTG28jz8IeqjVZXVZyFawWcRoV/ilwSl2L7ddQin0=; 24:Muz5ld38bY+2Fdvrysr5AWQQF3sYhUQ0TpH4nUC2uRR0n3cQgq87wNSvrBoUQnET6i7IPLCu7NqWMZXTb78mIvDl/OBoJgDpU0OVPHgcpBc=; 7:4TBrUZD+tUlWvtFRBHPhvU896xGjMt3SVL3WP5lf+5Ozl35WpotL3pP+vH/WknyHxjI/3+v6Wctbm6w5PCiuWXOwsGy6BmiOiLrPJyj8rlx85Qon/uVV1TKZrWxZvpPMZFRhV2ZfiA6Si4e6kXAjFt7HDP3J+YlpVU5FUlzWGvccl7vie9SyxlFCoplivdaLcmdOXPdlyjS861RWBFAQZ7IKRFNQDQL7TmSM1Ya7Z9mgHmHkR0rILz30u65b71WK x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9fe5f67f-3b34-42a9-4480-08d576f00268 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1537; x-ms-traffictypediagnostic: AM4PR0801MB1537: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(180628864354917); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001056)(6040501)(2401047)(8121501046)(5005006)(10201501046)(3231101)(944501161)(3002001)(93006095)(93001095)(6055026)(6041288)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:AM4PR0801MB1537; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1537; x-forefront-prvs: 058707456E x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39850400004)(366004)(39380400002)(376002)(346002)(396003)(189003)(199004)(40434004)(13464003)(2900100001)(6436002)(106356001)(72206003)(186003)(3660700001)(26005)(102836004)(86362001)(97736004)(7696005)(53936002)(3846002)(55016002)(316002)(59450400001)(99286004)(6246003)(76176011)(9686003)(6506007)(6116002)(53546011)(229853002)(6916009)(105586002)(3280700002)(14454004)(478600001)(2906002)(305945005)(4326008)(25786009)(7736002)(33656002)(74316002)(81166006)(8676002)(5250100002)(5660300001)(2950100002)(8936002)(5890100001)(68736007)(81156014)(66066001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1537; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 4myhjv67Ul/kS6f9NURGYlaSLT+kHAnwSpQTD2XiTgK4Jo4yqIl8yd63cYzdJRf0zUBG30PjoiNAB2mDc0+AN02FhYokMYVbOSlS96YGeMa7EWiKbDUYJWx+Z09xIa2Oo0n/YYbWZ4y0nOcpBkpPqWcJK+rXa4+Kj39WITKNNuw= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9fe5f67f-3b34-42a9-4480-08d576f00268 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Feb 2018 16:52:34.6784 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1537 Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 16:52:40 -0000 SGkgQ2Fyc3RlbiwNCg0KVGhlIGNoYWxsZW5nZSBpcyB0aGF0IHRoZXJlIGlzIG5vdCBhIHNpbmds ZSB3YXkgdXNlZCBpbiBkZXBsb3ltZW50cy4gU29tZSBvZiB0aGUgdGVjaG5pcXVlcyBmYWxsIG91 dHNpZGUgdGhlIHNjb3BlIG9mIHRoZSBJRVRGIChzdWNoIGFzIHRoZSBtYW51ZmFjdHVyaW5nLXJl bGF0ZWQgaW50ZXJhY3Rpb25zKSwgbGluayBsYXllciBzcGVjaWZpYyBhcHByb2FjaGVzIChzdWNo IGFzIGEgQmx1ZW9vdGggU21hcnQgQXBwKSwgb3IgU2VjdXJlIEVsZW1lbnQtYmFzZWQgY29uY2Vw dHMuDQoNCk5vdGUgdGhhdCByZWxhdGVkIHNvbHV0aW9ucywgc3VjaCBhcyBaZXJvVG91Y2gsIEFO SU1BLCBFU1QsIGFsc28gbGVhdmUgdGhpcyBpbml0aWFsIHByb3Zpc2lvbmluZyB1bmRlZmluZWQu DQoNCkkgYW0gbm90IHNheWluZyB0aGF0IG5vdGhpbmcgc2hvdWxkIGJlIHN0YW5kYXJkaXplZCBi dXQgaXQgd2lsbCBiZSBkaWZmaWN1bHQgdG8gcmVjcnVpdCB0aGUgYXBwcm9wcmlhdGUgZXhwZXJ0 aXNlIGFuZCB0byBnZXQgdGhlIHJlbGV2YW50IGNvbXBhbmllcyB0byBwYXJ0aWNpcGF0ZS4NCg0K Q2lhbw0KSGFubmVzDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBDYXJzdGVu IEJvcm1hbm4gW21haWx0bzpjYWJvQHR6aS5vcmddDQpTZW50OiAxOCBGZWJydWFyeSAyMDE4IDE3 OjQ1DQpUbzogSGFubmVzIFRzY2hvZmVuaWcNCkNjOiBhY2UNClN1YmplY3Q6IFJlOiBbQWNlXSBk cmFmdC1pZXRmLWFjZS1vYXV0aC1hdXRoei0xMC50eHQ6IExlYXZpbmcgaW1wbGVtZW50ZXJzIGlu IHRoZSBkYXJrDQoNCk9uIEZlYiAxOCwgMjAxOCwgYXQgMDg6MzUsIEhhbm5lcyBUc2Nob2Zlbmln IDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPiB3cm90ZToNCj4NCj4gSGkgQ2Fyc3RlbiwNCj4N Cj4gV2Ugc2hvdWxkIG1heWJlIGFkZCB0aGF0IHRoaXMgaW5mb3JtYXRpb24gaXMgcHJvdmlzaW9u ZWQgZWl0aGVyIGR1cmluZyBtYW51ZmFjdHVyaW5nLCB2aWEgYSBjb21taXNzaW9uaW5nIHRvb2wg b3Igc29tZSBvdGhlciBtZWNoYW5pc21zLiBOb3Qgc3VyZSB3aGV0aGVyIHRoaXMgd2lsbCBpbmRl ZWQgYWRkIG1vcmUgYnV0IGl0IG1pZ2h0IGJlIHVzZWZ1bCB0byBrbm93Lg0KDQpGb3IgYSBwcm90 b2NvbCB0aGF0IGlzIG1lYW50IHRvIGJlIGludGVyb3BlcmFibGUsIHRoZXJlIG5lZWQgdG8gYmUg c3RhbmRhcmQgKGlmIG5vdCBNVEkpIHdheXMgb2YgZ2V0dGluZyB0aGlzIGRvbmUuDQpBdCBsZWFz dCB3ZSBuZWVkIHRvIGhhdmUgYSBkZWZpbmVkIGludGVyZmFjZSBiZXR3ZWVuIENBTSAo4oCcY29t bWlzc2lvbmluZyB0b29s4oCdKSBhbmQgQyBmb3IgbGV0dGluZyBDIGtub3cgd2hhdCB3YXMgYWdy ZWVkIGFib3V0IGhvdyB0byBhZGRyZXNzIEFTIGFuZCB3aGljaCBSU2VzIGl0IHNob3VsZCBiZSB1 c2VkIGZvci4NCg0KR3LDvMOfZSwgQ2Fyc3Rlbg0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29u dGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwg YW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCBy ZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90 IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFu eSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVt LiBUaGFuayB5b3UuDQo= From nobody Sun Feb 18 09:14:53 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 306811201F2 for ; Sun, 18 Feb 2018 09:14:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P0IgXSeVdGIg for ; Sun, 18 Feb 2018 09:14:51 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE96D1200B9 for ; Sun, 18 Feb 2018 09:14:50 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w1IHEkWg001589; Sun, 18 Feb 2018 18:14:46 +0100 (CET) Received: from [172.25.0.142] (rrcs-67-52-140-5.west.biz.rr.com [67.52.140.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zktm55gMrzDXrn; Sun, 18 Feb 2018 18:14:45 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Carsten Bormann In-Reply-To: Date: Sun, 18 Feb 2018 09:14:40 -0800 Cc: ace X-Mao-Original-Outgoing-Id: 540666879.118325-f3dc61d0c287c7a397a745eb02cbc274 Content-Transfer-Encoding: quoted-printable Message-Id: <4EEA7253-4C7B-423A-8A3F-B0C9D798A257@tzi.org> References: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> To: Hannes Tschofenig X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 17:14:52 -0000 On Feb 18, 2018, at 08:52, Hannes Tschofenig = wrote: >=20 > Hi Carsten, >=20 > The challenge is that there is not a single way used in deployments. = Some of the techniques fall outside the scope of the IETF (such as the = manufacturing-related interactions), link layer specific approaches = (such as a Blueooth Smart App), or Secure Element-based concepts. >=20 > Note that related solutions, such as ZeroTouch, ANIMA, EST, also leave = this initial provisioning undefined. But this is not about initial provisioning (CAM-C), this is about C = talking to an RS. If there are only intra-silo ways in ACE to get this going, we should = clearly document this. Also, we need to clearly state what we believe needs to be achieved in = that intra-silo step so the ACE protocol can rely on the security = properties achieved there. > I am not saying that nothing should be standardized but it will be = difficult to recruit the appropriate expertise and to get the relevant = companies to participate. The IETF is generally most successful when it works on building blocks = that then can be picked up by implementers and other SDOs (that pickup = process then serves as another layer of quality control for us). I = don=E2=80=99t know why we have to be shy about this specific area for = building blocks. Gr=C3=BC=C3=9Fe, Carsten >=20 > Ciao > Hannes >=20 > -----Original Message----- > From: Carsten Bormann [mailto:cabo@tzi.org] > Sent: 18 February 2018 17:45 > To: Hannes Tschofenig > Cc: ace > Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving = implementers in the dark >=20 > On Feb 18, 2018, at 08:35, Hannes Tschofenig = wrote: >>=20 >> Hi Carsten, >>=20 >> We should maybe add that this information is provisioned either = during manufacturing, via a commissioning tool or some other mechanisms. = Not sure whether this will indeed add more but it might be useful to = know. >=20 > For a protocol that is meant to be interoperable, there need to be = standard (if not MTI) ways of getting this done. > At least we need to have a defined interface between CAM = (=E2=80=9Ccommissioning tool=E2=80=9D) and C for letting C know what was = agreed about how to address AS and which RSes it should be used for. >=20 > Gr=C3=BC=C3=9Fe, Carsten >=20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. >=20 >=20 From nobody Sun Feb 18 09:19:34 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 737211201F2 for ; Sun, 18 Feb 2018 09:19:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5yawDFPbk8Dl for ; Sun, 18 Feb 2018 09:19:30 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0051.outbound.protection.outlook.com [104.47.0.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBDF41200B9 for ; Sun, 18 Feb 2018 09:19:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=AFxBNpWjY4YB4DWlKRV6u59Kz4xa36tt8+qOyCYm9NU=; b=qngiqXbTR2NP4mwZZClo48WSL6+wUh7qfe2CtlG29GSwqngCBoZ2vfGlnz/n8JiUo+93tuDeWvdXdI6ddb1qotsYYmsWL++64matw+t8eEhJshExK4rjScU+xWDTlIHpyPofnITBSKYqzvkSvGpT8Bqx4+j/NK07+WBNEdVYjv4= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1473.eurprd08.prod.outlook.com (10.168.5.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Sun, 18 Feb 2018 17:19:25 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0506.021; Sun, 18 Feb 2018 17:19:25 +0000 From: Hannes Tschofenig To: Carsten Bormann CC: ace Thread-Topic: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark Thread-Index: AQHTqM6IxAS77gQkjk+VU/b7JuvkYaOqWx3wgAAC+4CAAAASYIAACCQAgAAAMaA= Date: Sun, 18 Feb 2018 17:19:25 +0000 Message-ID: References: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> <4EEA7253-4C7B-423A-8A3F-B0C9D798A257@tzi.org> In-Reply-To: <4EEA7253-4C7B-423A-8A3F-B0C9D798A257@tzi.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.50] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1473; 7:WrgarpbHR+90lRrHsV9mUXHzeOD14EAnnhUduc/QsRc6VbM3xdtiO3EiXV15vGcjaggmuhEpTN0f2GhE7qbOg+mGrzZ9QSsns0FOjVu6Cg+OVkkRCHodZTT2Un7ZX1sVpWdXXgH/wWwKDGr5zzsNZfaBYsQnllZxC8iHqoD21nrFog3JmqM5SoOg0UzYwXiXJ8fM3SJKAcMuwqCLToJnlautqezcbSfQl8jbgBJMYMoPzGXhQA7SednBJgUd5VlH x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d3ca5672-5403-4924-ef0d-08d576f3c250 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1473; x-ms-traffictypediagnostic: AM4PR0801MB1473: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(180628864354917)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001056)(6040501)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231101)(944501161)(6055026)(6041288)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:AM4PR0801MB1473; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1473; x-forefront-prvs: 058707456E x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39850400004)(376002)(39380400002)(396003)(346002)(366004)(189003)(199004)(13464003)(40434004)(86362001)(14454004)(105586002)(5660300001)(229853002)(478600001)(2900100001)(66066001)(93886005)(68736007)(3280700002)(2950100002)(6916009)(81166006)(3660700001)(33656002)(72206003)(316002)(97736004)(81156014)(8676002)(25786009)(9686003)(53936002)(106356001)(6116002)(55016002)(6246003)(8936002)(6436002)(3846002)(99286004)(102836004)(26005)(2906002)(59450400001)(7696005)(76176011)(6506007)(53546011)(305945005)(74316002)(5250100002)(4326008)(5890100001)(186003)(7736002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1473; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: LuNPNjTKQPzAJGLxAj6zjGM6prVQAhpND6PH2eIq9Y1CJFLV/rpMENgAko9VFYcZnjJpQzL+LLPngFQu/5F53QUleTVBDutw0po2Ab/gZVAxmGjJ3ny3iDQ5ziLQL8pil9CPI1UIJQn75lpnA8GOZn4AUXuo0tMSnRxEZ5GvGi4= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: d3ca5672-5403-4924-ef0d-08d576f3c250 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Feb 2018 17:19:25.1382 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1473 Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 17:19:33 -0000 SGkgQ2Fyc3Rlbg0KDQpJdCBzZWVtcyB0aGF0IEkgaGF2ZSBtaXN1bmRlcnN0b29kIHlvdS4gSWYg eW91IGFyZSBub3QgdGFsa2luZyBhYm91dCB0aGUgaW5pdGlhbCBwcm92aXNpb25pbmcgdGhlbiBh bGwgd2UgbmVlZCB0byBkbyBpcyB0byBjbGFyaWZ5LiBMb29raW5nIGF0IEFwcGVuZGl4IEIgaXQg YXBwZWFycyB0aGF0IHNvbWUgdGV4dCBuZWVkcyBpbXByb3ZlbWVudC4NCg0KQ2lhbw0KSGFubmVz DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBDYXJzdGVuIEJvcm1hbm4gW21h aWx0bzpjYWJvQHR6aS5vcmddDQpTZW50OiAxOCBGZWJydWFyeSAyMDE4IDE4OjE1DQpUbzogSGFu bmVzIFRzY2hvZmVuaWcNCkNjOiBhY2UNClN1YmplY3Q6IFJlOiBbQWNlXSBkcmFmdC1pZXRmLWFj ZS1vYXV0aC1hdXRoei0xMC50eHQ6IExlYXZpbmcgaW1wbGVtZW50ZXJzIGluIHRoZSBkYXJrDQoN Ck9uIEZlYiAxOCwgMjAxOCwgYXQgMDg6NTIsIEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNj aG9mZW5pZ0Bhcm0uY29tPiB3cm90ZToNCj4NCj4gSGkgQ2Fyc3RlbiwNCj4NCj4gVGhlIGNoYWxs ZW5nZSBpcyB0aGF0IHRoZXJlIGlzIG5vdCBhIHNpbmdsZSB3YXkgdXNlZCBpbiBkZXBsb3ltZW50 cy4gU29tZSBvZiB0aGUgdGVjaG5pcXVlcyBmYWxsIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoZSBJ RVRGIChzdWNoIGFzIHRoZSBtYW51ZmFjdHVyaW5nLXJlbGF0ZWQgaW50ZXJhY3Rpb25zKSwgbGlu ayBsYXllciBzcGVjaWZpYyBhcHByb2FjaGVzIChzdWNoIGFzIGEgQmx1ZW9vdGggU21hcnQgQXBw KSwgb3IgU2VjdXJlIEVsZW1lbnQtYmFzZWQgY29uY2VwdHMuDQo+DQo+IE5vdGUgdGhhdCByZWxh dGVkIHNvbHV0aW9ucywgc3VjaCBhcyBaZXJvVG91Y2gsIEFOSU1BLCBFU1QsIGFsc28gbGVhdmUg dGhpcyBpbml0aWFsIHByb3Zpc2lvbmluZyB1bmRlZmluZWQuDQoNCkJ1dCB0aGlzIGlzIG5vdCBh Ym91dCBpbml0aWFsIHByb3Zpc2lvbmluZyAoQ0FNLUMpLCB0aGlzIGlzIGFib3V0IEMgdGFsa2lu ZyB0byBhbiBSUy4NCklmIHRoZXJlIGFyZSBvbmx5IGludHJhLXNpbG8gd2F5cyBpbiBBQ0UgdG8g Z2V0IHRoaXMgZ29pbmcsIHdlIHNob3VsZCBjbGVhcmx5IGRvY3VtZW50IHRoaXMuDQpBbHNvLCB3 ZSBuZWVkIHRvIGNsZWFybHkgc3RhdGUgd2hhdCB3ZSBiZWxpZXZlIG5lZWRzIHRvIGJlIGFjaGll dmVkIGluIHRoYXQgaW50cmEtc2lsbyBzdGVwIHNvIHRoZSBBQ0UgcHJvdG9jb2wgY2FuIHJlbHkg b24gdGhlIHNlY3VyaXR5IHByb3BlcnRpZXMgYWNoaWV2ZWQgdGhlcmUuDQoNCj4gSSBhbSBub3Qg c2F5aW5nIHRoYXQgbm90aGluZyBzaG91bGQgYmUgc3RhbmRhcmRpemVkIGJ1dCBpdCB3aWxsIGJl IGRpZmZpY3VsdCB0byByZWNydWl0IHRoZSBhcHByb3ByaWF0ZSBleHBlcnRpc2UgYW5kIHRvIGdl dCB0aGUgcmVsZXZhbnQgY29tcGFuaWVzIHRvIHBhcnRpY2lwYXRlLg0KDQpUaGUgSUVURiBpcyBn ZW5lcmFsbHkgbW9zdCBzdWNjZXNzZnVsIHdoZW4gaXQgd29ya3Mgb24gYnVpbGRpbmcgYmxvY2tz IHRoYXQgdGhlbiBjYW4gYmUgcGlja2VkIHVwIGJ5IGltcGxlbWVudGVycyBhbmQgb3RoZXIgU0RP cyAodGhhdCBwaWNrdXAgcHJvY2VzcyB0aGVuIHNlcnZlcyBhcyBhbm90aGVyIGxheWVyIG9mIHF1 YWxpdHkgY29udHJvbCBmb3IgdXMpLiAgSSBkb27igJl0IGtub3cgd2h5IHdlIGhhdmUgdG8gYmUg c2h5IGFib3V0IHRoaXMgc3BlY2lmaWMgYXJlYSBmb3IgYnVpbGRpbmcgYmxvY2tzLg0KDQpHcsO8 w59lLCBDYXJzdGVuDQoNCj4NCj4gQ2lhbw0KPiBIYW5uZXMNCj4NCj4gLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS0NCj4gRnJvbTogQ2Fyc3RlbiBCb3JtYW5uIFttYWlsdG86Y2Fib0B0emkub3Jn XQ0KPiBTZW50OiAxOCBGZWJydWFyeSAyMDE4IDE3OjQ1DQo+IFRvOiBIYW5uZXMgVHNjaG9mZW5p Zw0KPiBDYzogYWNlDQo+IFN1YmplY3Q6IFJlOiBbQWNlXSBkcmFmdC1pZXRmLWFjZS1vYXV0aC1h dXRoei0xMC50eHQ6IExlYXZpbmcgaW1wbGVtZW50ZXJzIGluIHRoZSBkYXJrDQo+DQo+IE9uIEZl YiAxOCwgMjAxOCwgYXQgMDg6MzUsIEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5p Z0Bhcm0uY29tPiB3cm90ZToNCj4+DQo+PiBIaSBDYXJzdGVuLA0KPj4NCj4+IFdlIHNob3VsZCBt YXliZSBhZGQgdGhhdCB0aGlzIGluZm9ybWF0aW9uIGlzIHByb3Zpc2lvbmVkIGVpdGhlciBkdXJp bmcgbWFudWZhY3R1cmluZywgdmlhIGEgY29tbWlzc2lvbmluZyB0b29sIG9yIHNvbWUgb3RoZXIg bWVjaGFuaXNtcy4gTm90IHN1cmUgd2hldGhlciB0aGlzIHdpbGwgaW5kZWVkIGFkZCBtb3JlIGJ1 dCBpdCBtaWdodCBiZSB1c2VmdWwgdG8ga25vdy4NCj4NCj4gRm9yIGEgcHJvdG9jb2wgdGhhdCBp cyBtZWFudCB0byBiZSBpbnRlcm9wZXJhYmxlLCB0aGVyZSBuZWVkIHRvIGJlIHN0YW5kYXJkIChp ZiBub3QgTVRJKSB3YXlzIG9mIGdldHRpbmcgdGhpcyBkb25lLg0KPiBBdCBsZWFzdCB3ZSBuZWVk IHRvIGhhdmUgYSBkZWZpbmVkIGludGVyZmFjZSBiZXR3ZWVuIENBTSAo4oCcY29tbWlzc2lvbmlu ZyB0b29s4oCdKSBhbmQgQyBmb3IgbGV0dGluZyBDIGtub3cgd2hhdCB3YXMgYWdyZWVkIGFib3V0 IGhvdyB0byBhZGRyZXNzIEFTIGFuZCB3aGljaCBSU2VzIGl0IHNob3VsZCBiZSB1c2VkIGZvci4N Cj4NCj4gR3LDvMOfZSwgQ2Fyc3Rlbg0KPg0KPiBJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVu dHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5k IG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNp cGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRp c2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBw dXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBU aGFuayB5b3UuDQo+DQo+DQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlz IGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28g YmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxl YXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhl IGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9y IHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4N Cg== From nobody Mon Feb 19 01:15:37 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C23FB126CBF for ; Mon, 19 Feb 2018 01:15:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.602 X-Spam-Level: X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rs_69FF0jbje for ; Mon, 19 Feb 2018 01:15:35 -0800 (PST) Received: from se-out2.mx-wecloud.net (se-out2.mx-wecloud.net [89.221.255.177]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBDB212711D for ; Mon, 19 Feb 2018 01:15:34 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out2.mx-wecloud.net (Postfix) with ESMTPS id 84CE72282F4 for ; Mon, 19 Feb 2018 09:15:34 +0000 (UTC) Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Mon, 19 Feb 2018 10:15:32 +0100 To: References: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> From: Ludwig Seitz Message-ID: <60d737e6-81f2-1c86-63b2-9b58a320bbb5@ri.se> Date: Mon, 19 Feb 2018 10:15:31 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=K9NSJ2eI c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=IkcTkHD0fZMA:10 a=Op4juWPpsa0A:10 a=7CQSdrXTAAAA:8 a=1SteP1iEppvqJWz3LrAA:9 a=V9DH2deglXVIcE3R:21 a=Rik4e0k8626fV9ar:21 a=QEXdDO2ut3YA:10 a=a-qgeE7W1pNrGK8U0ZQC:22 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 09:15:37 -0000 On 2018-02-18 17:45, Carsten Bormann wrote: > On Feb 18, 2018, at 08:35, Hannes Tschofenig wrote: >> >> Hi Carsten, >> >> We should maybe add that this information is provisioned either during manufacturing, via a commissioning tool or some other mechanisms. Not sure whether this will indeed add more but it might be useful to know. > > For a protocol that is meant to be interoperable, there need to be standard (if not MTI) ways of getting this done. > At least we need to have a defined interface between CAM (“commissioning tool”) and C for letting C know what was agreed about how to address AS and which RSes it should be used for. > > Grüße, Carsten > Why don't you make a new draft where you propose such a mechanism? I don't think this fits in the scope of the framework draft, since the framework is supposed to deal with the interaction between C-AS and C-RS (after the onboarding has happened). I agree that onboarding is a valid concern (which is why I wrote appendix B), but lets not delay draft-ietf-ace-oauth-authz any further by adding a whole new set of functionality in it. /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE SICS Phone +46(0)70-349 92 51 From nobody Mon Feb 19 07:11:29 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D51F21276AF for ; Mon, 19 Feb 2018 07:11:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d8yxgRfJjkP2 for ; Mon, 19 Feb 2018 07:11:26 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0057.outbound.protection.outlook.com [104.47.2.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB060124BAC for ; Mon, 19 Feb 2018 07:11:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=eIzm0X7BGl/EbdmKSszseBQ1oUH0UqZLDGwKD3tGJhM=; b=PR3CjaB4pGivwVvzB5iKO2idaMSRQOoCKFQcA++QBgZ0ZzZQWMuaIuk3JAiDJnJN+d7Da6blQqi/BtLGzOHbL52lcnJilyUl1jteNDHLaIHyunTxyESiDnaXSJVAtKgZ2QZYEsK9SCmH2CTwJFlAKP0/cXYLhcCNLyNiIfgu21s= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1588.eurprd08.prod.outlook.com (10.168.6.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Mon, 19 Feb 2018 15:11:22 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0506.023; Mon, 19 Feb 2018 15:11:22 +0000 From: Hannes Tschofenig To: Jim Schaad , "ace@ietf.org" Thread-Topic: [Ace] Working group adoption of draft-vanderstok-ace-est Thread-Index: AdOaBxPvuhazfivPQR6hGrReGsdXHwPjJ9vg Date: Mon, 19 Feb 2018 15:11:22 +0000 Message-ID: References: <010f01d39a08$255723c0$70056b40$@augustcellars.com> In-Reply-To: <010f01d39a08$255723c0$70056b40$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [217.140.96.140] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1588; 7:2HJlA5laWkQ3hYuwLqGF2IC5l1tXDGtw7U9q8IR4uZ7CWXeai+mYAALUFVutr8XrRe3qOPXOmde7E6DmD9CciT4De9dmY0tXUHuzexSZgLH5D7/30lf4LrjRJn9cNKgau/UMcEA0Sgevx04GyOsEwOmnAYT4o+Yz9YDBbWYC0qt6x/rGbJQq4ZtTuPZBlG3aU42fUXqdEayj2sxFwaUVfJDTZu4Vt8J3WQZr1Y9QLJZFIdD8X1Qfv/iTHbJu/k49 x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 8f0ff103-b0f9-4c8b-8f08-08d577ab09bc x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1588; x-ms-traffictypediagnostic: AM4PR0801MB1588: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001056)(6040501)(2401047)(5005006)(8121501046)(10201501046)(3231101)(944501161)(93006095)(93001095)(3002001)(6055026)(6041288)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:AM4PR0801MB1588; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1588; x-forefront-prvs: 0588B2BD96 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(39380400002)(376002)(39860400002)(366004)(396003)(40434004)(13464003)(199004)(189003)(6246003)(110136005)(74316002)(105586002)(478600001)(9686003)(14454004)(26005)(6306002)(53936002)(99286004)(229853002)(2900100001)(25786009)(316002)(55016002)(102836004)(8676002)(81166006)(59450400001)(33656002)(72206003)(966005)(6506007)(53546011)(86362001)(7736002)(305945005)(5660300001)(81156014)(6436002)(3660700001)(5250100002)(2950100002)(186003)(6116002)(3846002)(106356001)(3280700002)(97736004)(7696005)(76176011)(2501003)(8936002)(5890100001)(2906002)(68736007)(66066001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1588; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: yVMlTEEVIknTO4w1glNFbRZyJfkwGWcCVEJkhf0B/za1OY798NL8CqpXzlM5omm2EDYZ4kQywlCd2r5F27hBUXWLyRmiXxdUtnwSvjpSpi010Ri/eyDm/cJjbrvjmlS1/gWlEOgCfUF9fCLzMzJbONzgwMlc1aHfWjETu+mZJDo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8f0ff103-b0f9-4c8b-8f08-08d577ab09bc X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Feb 2018 15:11:22.8008 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1588 Archived-At: Subject: Re: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 15:11:29 -0000 I support the adoption of this document. My concerns with earlier versions = of the document have been addressed with the recent draft updates. I have read the latest version of the draft and I believe it is even ready = for a working group last call once adopted. Ciao Hannes PS: Sorry for my late response. -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Jim Schaad Sent: 30 January 2018 21:23 To: ace@ietf.org Subject: [Ace] Working group adoption of draft-vanderstok-ace-est This is the start of a two week call for input on the adoption of the WG of= the document draft-vanderstok-ace-est. The document has been presented at= the last two meetings and has some significant recent updates to respond t= o feedback. There seemed to be support at the last F2F to adopt. Please provide feedback to the list/chairs if you believe that this documen= t should be adopted as a WG document. The adoption call will end on Feb 13 2018. Jim _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Mon Feb 19 09:21:07 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 864D8126C0F for ; Mon, 19 Feb 2018 09:21:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5KwBjHWg7pRN for ; Mon, 19 Feb 2018 09:21:05 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E65F1243F6 for ; Mon, 19 Feb 2018 09:21:04 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id EA9BD20091; Mon, 19 Feb 2018 12:28:18 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 45A2D80C42; Mon, 19 Feb 2018 12:21:03 -0500 (EST) From: Michael Richardson To: Ludwig Seitz cc: ace@ietf.org In-Reply-To: <60d737e6-81f2-1c86-63b2-9b58a320bbb5@ri.se> References: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> <60d737e6-81f2-1c86-63b2-9b58a320bbb5@ri.se> X-Mailer: MH-E 8.6; nmh 1.7-RC3; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 17:21:06 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Ludwig Seitz wrote: > I agree that onboarding is a valid concern (which is why I wrote > appendix B),=20 > but lets not delay draft-ietf-ace-oauth-authz any further by adding a= whole > new set of functionality in it. Back at the beginning of ACE it was clear that onboarding was an entire project of itself. That's why I argued to keep it out of the first charter. Onboarding suffers from a tendancy to boil the ocean, combined with the elephant/blind-men problem. The way to tackle onboarding is not with a single unifying ocean boiling protocol, but rather by letting each interested party define small protocols, and over time find commonality. I get the vision of: https://en.wikipedia.org/wiki/Nibbler So while it is unfortunate if some implementers feel to be "in the dark", before we could rectify that situation, we'd have to know which implementers we are worried about. =2D-=20 Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlqLB34ACgkQgItw+93Q 3WWltwf9HnD6q7xt2hJndVEgTDVaY37srWd6Q2/CPwo+Kdz36t0TYIxbsk5BG/F9 tvE0LhAHj+fSj8L3ab50aFFZUYqZ0vw9ty6ny/o7l34L58e4WnR/0vj47Pch811K mPRz9plxSKLZ7C3W4P5Y0t8nqZzLT9HGbuxqaTz2EGfEW2JRg6UC+tQi3ABqnEQM m4y03dFcI0Tvnt8tdxezypSZJH89tS6yJ6PcKU28vgpLL71oKEkCr5EA2sA9a1aq gMSDZOS+u3OcUyA20wHQPWx+0mBSwUmAvzVtC9EEztoAlbbA7Mv5b8cGcfel/Xo5 yOPawmLhma1Zae1FLXH6sis5mgHShA== =pc19 -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Feb 20 08:43:38 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8ECBF127876 for ; Tue, 20 Feb 2018 08:43:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0EL4GH5n6WbX for ; Tue, 20 Feb 2018 08:43:33 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0042.outbound.protection.outlook.com [104.47.1.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B297F127871 for ; Tue, 20 Feb 2018 08:43:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=CW5O6i4RFg9GyYJ6QS2ZJbXDjTgd1y7Lcv09xLTXOOQ=; b=o+9aIVCgHCkqe3fIRSzm1ABBBPA+DCfZ3mQ4O/uxjOceVKQ2mZsvSZRiUXmH3TJ1nGfZ3uIOZLcgyoSuR6WwEpn+HLk50hmQBliPVi8NpcoGkttnbDS3+4vhjOCoCG/at1zFYoNKosYwj7KcgYTSvUdnoKbuWkVkWXb30tvm92c= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2738.eurprd08.prod.outlook.com (10.167.90.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Tue, 20 Feb 2018 16:43:29 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0506.023; Tue, 20 Feb 2018 16:43:29 +0000 From: Hannes Tschofenig To: Michael Richardson , Ludwig Seitz CC: "ace@ietf.org" Thread-Topic: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark Thread-Index: AQHTqM6IxAS77gQkjk+VU/b7JuvkYaOqWx3wgAAC+4CAARSsgIAAh6iAgAGHpmA= Date: Tue, 20 Feb 2018 16:43:29 +0000 Message-ID: References: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> <60d737e6-81f2-1c86-63b2-9b58a320bbb5@ri.se> <21896.1519060863@obiwan.sandelman.ca> In-Reply-To: <21896.1519060863@obiwan.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [193.92.70.80] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2738; 7:Apaf/cilq7i+lJldvRCy3mMngoRPcppWRs5wsryKqA3fcuWqGHL+ZJI0ltbfsLoyCAkxzQZa5JSBZ1pNBTkl6tLdtR1qszO8zdudia2ttEAirVqqSMzk0AhrEaGVMJDxM6wqW5ZcrAAlqb7H4vpwxIVElUamyU+jULQgAcRwKz5Sg96Ngqg4CWPf5id4dW3kos84+MGvJ639sMu+pZMwOWNCUvMQFJ5ZsE+iRXcx8K6deOmtmLlUSC8HALiqAhLa x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 7b7a76fc-7704-4740-8e3c-08d578811265 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2738; x-ms-traffictypediagnostic: AM4PR0801MB2738: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3231101)(944501161)(3002001)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123564045)(20161123562045)(6072148)(201708071742011); SRVR:AM4PR0801MB2738; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB2738; x-forefront-prvs: 05891FB07F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(376002)(366004)(396003)(346002)(13464003)(40434004)(189003)(199004)(478600001)(97736004)(33656002)(3660700001)(72206003)(966005)(2950100002)(59450400001)(316002)(6116002)(53546011)(4326008)(110136005)(6506007)(93886005)(55016002)(76176011)(9686003)(74316002)(66066001)(6436002)(3846002)(68736007)(7736002)(7696005)(106356001)(229853002)(6306002)(305945005)(14454004)(2906002)(5250100002)(6246003)(5660300001)(86362001)(5890100001)(8936002)(8676002)(3280700002)(2900100001)(25786009)(53936002)(102836004)(105586002)(99286004)(81166006)(81156014)(26005)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2738; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: Ij75JozuAhgJUIAeh0zLUG4EXtuSd175BDZ82wnm/DOamzb78J5kq4QVY13Iw2EzBCxdLmKVupKvmDLi5RbVSpJyKg4DFZQwctfoJyYyjP2RLHE/5cj0f7lkPuPVXzZTM6+GfturJaugl8M2PjuwUrQXn9k6c5w8riIN9YJp+XA= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7b7a76fc-7704-4740-8e3c-08d578811265 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Feb 2018 16:43:29.6302 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2738 Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Feb 2018 16:43:37 -0000 IMHO the biggest problem with "onboarding" is that people create new terms = without specifying what they actually mean and thereby fail to see the rela= tionship with existing work. -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Michael Richardson Sent: 19 February 2018 19:21 To: Ludwig Seitz Cc: ace@ietf.org Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers = in the dark Ludwig Seitz wrote: > I agree that onboarding is a valid concern (which is why I wrote > appendix B), > but lets not delay draft-ietf-ace-oauth-authz any further by adding a= whole > new set of functionality in it. Back at the beginning of ACE it was clear that onboarding was an entire pro= ject of itself. That's why I argued to keep it out of the first charter. Onboarding suffers from a tendancy to boil the ocean, combined with the elephant/blind-men problem. The way to tackle onboarding is not with a single unifying ocean boiling protocol, but rather by letting each intere= sted party define small protocols, and over time find commonality. I get the vision of: https://en.wikipedia.org/wiki/Nibbler So while it is unfortunate if some implementers feel to be "in the dark", b= efore we could rectify that situation, we'd have to know which implementers= we are worried about. -- Michael Richardson , Sandelman Software Works -=3D = IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Tue Feb 20 09:05:39 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF43A126CB6 for ; Tue, 20 Feb 2018 09:05:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SDtOATAu3xU7 for ; Tue, 20 Feb 2018 09:05:35 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FED0127978 for ; Tue, 20 Feb 2018 09:05:35 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w1KH5UfX022971; Tue, 20 Feb 2018 18:05:30 +0100 (CET) Received: from client-0032.vpn.uni-bremen.de (client-0032.vpn.uni-bremen.de [134.102.107.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zm6SS5QQ8zDWrl; Tue, 20 Feb 2018 18:05:28 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Carsten Bormann In-Reply-To: Date: Tue, 20 Feb 2018 09:05:23 -0800 Cc: Michael Richardson , Ludwig Seitz , "ace@ietf.org" X-Mao-Original-Outgoing-Id: 540839121.751207-654e02626d8201fa5f5cb58269a3c0fa Content-Transfer-Encoding: quoted-printable Message-Id: <09794CFF-B354-4153-8430-94A9ACD65482@tzi.org> References: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> <60d737e6-81f2-1c86-63b2-9b58a320bbb5@ri.se> <21896.1519060863@obiwan.sandelman.ca> To: Hannes Tschofenig X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Feb 2018 17:05:38 -0000 On Feb 20, 2018, at 08:43, Hannes Tschofenig = wrote: >=20 > IMHO the biggest problem with "onboarding" is that people create new = terms without specifying what they actually mean and thereby fail to see = the relationship with existing work. Right. I have no idea what client registration has to do with = =E2=80=9Conboarding=E2=80=9D, but I use that term for the initial = integration of a device into a network only. I continue to believe that we need a clear understanding of what = information is exchanged during client registration that is relevant to = the ACE OAuth. There definitely will also be other information = (=E2=80=9Cbusiness logic=E2=80=9D, and you can call the exchange of that = part of the registration info =E2=80=9Conboarding=E2=80=9D if you like), = and that is where the vendor differentiation can set in, but we should = have no trouble defining the ACE content of client registration. =20 If we don=E2=80=99t define that ACE content, there is no way to know = whether ACE OAuth is secure. Defining the ACE content of the client registration as a set of data = structures also helps with achieving actual interoperability, even if = additional business logic is required in a specific case. Gr=C3=BC=C3=9Fe, Carsten From nobody Tue Feb 20 09:07:52 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4689A12D945; Tue, 20 Feb 2018 09:07:45 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.72.2 Auto-Submitted: auto-generated Precedence: bulk CC: Kathleen.Moriarty.ietf@gmail.com, ace-chairs@ietf.org, kaduk@mit.edu, draft-ietf-ace-cbor-web-token@ietf.org, ace@ietf.org Reply-To: ietf@ietf.org Sender: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <151914646528.4754.3671159736530912423.idtracker@ietfa.amsl.com> Date: Tue, 20 Feb 2018 09:07:45 -0800 Archived-At: Subject: [Ace] Last Call: (CBOR Web Token (CWT)) to Proposed Standard X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Feb 2018 17:07:45 -0000 The IESG has received a request from the Authentication and Authorization for Constrained Environments WG (ace) to consider the following document: - 'CBOR Web Token (CWT)' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2018-03-06. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR) and CBOR Object Signing and Encryption (COSE) is used for added application layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Tue Feb 20 09:12:33 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF70C127978 for ; Tue, 20 Feb 2018 09:12:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DmzRWOG8iT0k for ; Tue, 20 Feb 2018 09:12:31 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0054.outbound.protection.outlook.com [104.47.1.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9361612D960 for ; Tue, 20 Feb 2018 09:12:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=FN0RFxNnKXmOH2PhMkD5eGaNvShfvDhNKjNFlosMCeg=; b=erHqlCF8om4BJ1fju+Nk7/rIX222TFHHzobgZ2jX73rN9a06JgfEOZJ0dG/sdoO6LQCJleZgK00qrMNXEPbdjtkRERRHEtMaUfqtPFNoJc+KKRMmeMpvGFUMSRm7FJ8q4N+eknbkztX/5SoRqI7IMTH51jv5zss828BdLt4jaJM= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1460.eurprd08.prod.outlook.com (10.168.5.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Tue, 20 Feb 2018 17:12:27 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0506.023; Tue, 20 Feb 2018 17:12:27 +0000 From: Hannes Tschofenig To: Carsten Bormann CC: Michael Richardson , Ludwig Seitz , "ace@ietf.org" Thread-Topic: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark Thread-Index: AQHTqM6IxAS77gQkjk+VU/b7JuvkYaOqWx3wgAAC+4CAARSsgIAAh6iAgAGHpmCAAAZOgIAAAS3g Date: Tue, 20 Feb 2018 17:12:27 +0000 Message-ID: References: <05040BBB-5E6E-4569-8F8C-944CA04BBA3C@tzi.org> <60d737e6-81f2-1c86-63b2-9b58a320bbb5@ri.se> <21896.1519060863@obiwan.sandelman.ca> <09794CFF-B354-4153-8430-94A9ACD65482@tzi.org> In-Reply-To: <09794CFF-B354-4153-8430-94A9ACD65482@tzi.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [193.92.70.80] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1460; 7:203WtvQ/JZczzVXAeWpK76oCwMPSIsb+j3qOSakFv8R/XdZCQweWZIneX/S+jXUVyG1EA9bbfMS6sP4o+ILcGlPziuAr946Y7wlHicqeXH4eBE1wu7dkTUEMZ2eK5xtO4BSBT9cBJOT2MxlMTjnLbShPF2cXgY6hIRrM44T7qTOeaWuNhz2Q1FPPHWX14T5vDJuh5ChzIJcANa1OacrpXZvZ0dQtD2aNxjc3pV48WMNk4z9yQ02XQ5DldHkL5Z8I x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 7afc2a48-f093-4028-c62f-08d578851e62 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1460; x-ms-traffictypediagnostic: AM4PR0801MB1460: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(180628864354917); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001056)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231101)(944501161)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:AM4PR0801MB1460; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1460; x-forefront-prvs: 05891FB07F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(396003)(376002)(346002)(39380400002)(39860400002)(13464003)(189003)(199004)(40434004)(99286004)(97736004)(66066001)(7736002)(3280700002)(305945005)(2906002)(105586002)(74316002)(14454004)(6916009)(8676002)(8936002)(81156014)(86362001)(81166006)(478600001)(59450400001)(68736007)(72206003)(966005)(26005)(102836004)(6506007)(53546011)(5250100002)(2950100002)(5890100001)(229853002)(33656002)(76176011)(3660700001)(7696005)(106356001)(6306002)(55016002)(5660300001)(9686003)(316002)(93886005)(6246003)(25786009)(186003)(2900100001)(53936002)(4326008)(6116002)(3846002)(6436002)(54906003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1460; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: iXX9X9PCDktsde8q/MtZBh3yE1V78vj2y2aQeN4T7TGNB9k6HjeB08/DJ4ylsIM6ngXnGtnUkQTr2RKU7Nn+IlXmEbwGjxJyDe26JWROcxLuRK+hvxNsacc1MzDiwpSMBdp4si/t/1Luuo9snPGta3+ne2gXtlEavdqcQNahaXc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7afc2a48-f093-4028-c62f-08d578851e62 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Feb 2018 17:12:27.7472 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1460 Archived-At: Subject: Re: [Ace] draft-ietf-ace-oauth-authz-10.txt: Leaving implementers in the dark X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Feb 2018 17:12:33 -0000 SGkgQ2Fyc3RlbiwNCg0KT0F1dGggZGVmaW5lZCBzb21ldGhpbmcgY2FsbGVkICJEeW5hbWljIENs aWVudCBSZWdpc3RyYXRpb24iLCB3aGljaCBnaXZlcyB5b3UgYW4gaWRlYSB3aGF0IHR5cGUgb2Yg aW5mb3JtYXRpb24gaXMgdHlwaWNhbGx5IG5lZWRlZC4gSGVyZSBpcyB0aGUgUkZDOiBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzU5MQ0KDQpSZWdhcmRpbmcgImluaXRpYWwgaW50ZWdy YXRpb24gb2YgYSBkZXZpY2UgaW50byBhIG5ldHdvcmsgb25seSIgaXNuJ3QgdGhpcyBzb21ldGlt ZXMgY2FsbGVkICJuZXR3b3JrIGFjY2VzcyBhdXRoZW50aWNhdGlvbiI/DQoNCkluIGFueSBjYXNl LCBJIGFncmVlIHdpdGggeW91IHRoYXQgd2Ugc2hvdWxkIGFkZCBzb21lIHRleHQgYWJvdXQgd2hh dCBpbmZvcm1hdGlvbiBpcyBhc3N1bWVkIHRvIGJlIHByZXNlbnQuDQoNCkNpYW8NCkhhbm5lcw0K DQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogQ2Fyc3RlbiBCb3JtYW5uIFttYWls dG86Y2Fib0B0emkub3JnXQ0KU2VudDogMjAgRmVicnVhcnkgMjAxOCAxOTowNQ0KVG86IEhhbm5l cyBUc2Nob2ZlbmlnDQpDYzogTWljaGFlbCBSaWNoYXJkc29uOyBMdWR3aWcgU2VpdHo7IGFjZUBp ZXRmLm9yZw0KU3ViamVjdDogUmU6IFtBY2VdIGRyYWZ0LWlldGYtYWNlLW9hdXRoLWF1dGh6LTEw LnR4dDogTGVhdmluZyBpbXBsZW1lbnRlcnMgaW4gdGhlIGRhcmsNCg0KT24gRmViIDIwLCAyMDE4 LCBhdCAwODo0MywgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+ IHdyb3RlOg0KPg0KPiBJTUhPIHRoZSBiaWdnZXN0IHByb2JsZW0gd2l0aCAib25ib2FyZGluZyIg aXMgdGhhdCBwZW9wbGUgY3JlYXRlIG5ldyB0ZXJtcyB3aXRob3V0IHNwZWNpZnlpbmcgd2hhdCB0 aGV5IGFjdHVhbGx5IG1lYW4gYW5kIHRoZXJlYnkgZmFpbCB0byBzZWUgdGhlIHJlbGF0aW9uc2hp cCB3aXRoIGV4aXN0aW5nIHdvcmsuDQoNClJpZ2h0LiAgSSBoYXZlIG5vIGlkZWEgd2hhdCBjbGll bnQgcmVnaXN0cmF0aW9uIGhhcyB0byBkbyB3aXRoIOKAnG9uYm9hcmRpbmfigJ0sIGJ1dCBJIHVz ZSB0aGF0IHRlcm0gZm9yIHRoZSBpbml0aWFsIGludGVncmF0aW9uIG9mIGEgZGV2aWNlIGludG8g YSBuZXR3b3JrIG9ubHkuDQoNCkkgY29udGludWUgdG8gYmVsaWV2ZSB0aGF0IHdlIG5lZWQgYSBj bGVhciB1bmRlcnN0YW5kaW5nIG9mIHdoYXQgaW5mb3JtYXRpb24gaXMgZXhjaGFuZ2VkIGR1cmlu ZyBjbGllbnQgcmVnaXN0cmF0aW9uIHRoYXQgaXMgcmVsZXZhbnQgdG8gdGhlIEFDRSBPQXV0aC4g IFRoZXJlIGRlZmluaXRlbHkgd2lsbCBhbHNvIGJlIG90aGVyIGluZm9ybWF0aW9uICjigJxidXNp bmVzcyBsb2dpY+KAnSwgYW5kIHlvdSBjYW4gY2FsbCB0aGUgZXhjaGFuZ2Ugb2YgdGhhdCBwYXJ0 IG9mIHRoZSByZWdpc3RyYXRpb24gaW5mbyDigJxvbmJvYXJkaW5n4oCdIGlmIHlvdSBsaWtlKSwg YW5kIHRoYXQgaXMgd2hlcmUgdGhlIHZlbmRvciBkaWZmZXJlbnRpYXRpb24gY2FuIHNldCBpbiwg YnV0IHdlIHNob3VsZCBoYXZlIG5vIHRyb3VibGUgZGVmaW5pbmcgdGhlIEFDRSBjb250ZW50IG9m IGNsaWVudCByZWdpc3RyYXRpb24uDQoNCklmIHdlIGRvbuKAmXQgZGVmaW5lIHRoYXQgQUNFIGNv bnRlbnQsIHRoZXJlIGlzIG5vIHdheSB0byBrbm93IHdoZXRoZXIgQUNFIE9BdXRoIGlzIHNlY3Vy ZS4NCg0KRGVmaW5pbmcgdGhlIEFDRSBjb250ZW50IG9mIHRoZSBjbGllbnQgcmVnaXN0cmF0aW9u IGFzIGEgc2V0IG9mIGRhdGEgc3RydWN0dXJlcyBhbHNvIGhlbHBzIHdpdGggYWNoaWV2aW5nIGFj dHVhbCBpbnRlcm9wZXJhYmlsaXR5LCBldmVuIGlmIGFkZGl0aW9uYWwgYnVzaW5lc3MgbG9naWMg aXMgcmVxdWlyZWQgaW4gYSBzcGVjaWZpYyBjYXNlLg0KDQpHcsO8w59lLCBDYXJzdGVuDQoNCklN UE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNo bWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91 IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVy IGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhl ciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGlu Zm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== From nobody Sat Feb 24 00:03:49 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AD21126D45; Sat, 24 Feb 2018 00:03:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BpTacQAHyYk4; Sat, 24 Feb 2018 00:03:35 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14003120227; Sat, 24 Feb 2018 00:03:34 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w1O83Vm7021286; Sat, 24 Feb 2018 09:03:31 +0100 (CET) Received: from client-0185.vpn.uni-bremen.de (client-0185.vpn.uni-bremen.de [134.102.107.185]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zpLFG64Z9zDXfw; Sat, 24 Feb 2018 09:03:30 +0100 (CET) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 541152208.06002-906f3783a4e6b88ee7e0de21eeb0bf70 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Sat, 24 Feb 2018 00:03:29 -0800 Message-Id: <42D54C90-DA66-42FB-B734-27986B87BC2E@tzi.org> To: ace , "core@ietf.org WG" , cose , cbor@ietf.org, t2trg@irtf.org X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: [Ace] Constrained Node/Network Cluster @ IETF101: "FINAL" AGENDA X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Feb 2018 08:03:38 -0000 Here is my usual eclectic condensed agenda based on the "FINAL" AGENDA for IETF101. Remember that "FINAL" means this will be the basis for printed agenda sheets, there is still some potential for changes after that. SUIT is now on top of CORE (!??). (Also, ICE has moved.) The painful ones this time include: DINRG vs. ACE, CBOR vs. TEEP, ROLL vs. traveling to OCF/WoT; also CORE vs. ANIMA, CORE vs. QUIC, CORE vs. SECDISPATCH. All times are actually in GMT (UTC+0000, DST only starts in London on March 25). (You can always get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY -- Hackathon (including various interops) MONDAY, March 19, 2018 0930-1200 Morning Session I Blenheim ART dispatch Dispatch WG - 0930-1100 Joint = with ARTAREA Sandringham INT ipwave IP Wireless Access in Vehicular = Environments WG Palace C IRTF*** dinrg Decentralized Internet Infrastructure = Proposed RG Viscount OPS v6ops IPv6 Operations WG Balmoral SEC *** ace Authentication and Authorization for = Constrained Environments WG 1330-1530 Afternoon Session I Richm_Chl_Tow ART *** core Constrained RESTful Environments WG Viscount INT 6man IPv6 Maintenance WG Buckingham SEC *** suit Software Updates for Internet of Things = WG Sandringham TSV quic QUIC WG 1550-1720 Afternoon Session II Sandringham INT intarea Internet Area Working Group WG Balmoral IRTF cfrg Crypto Forum Viscount SEC oauth Web Authorization Protocol WG 1740-1840 Afternoon Session III Balmoral SEC tls Transport Layer Security WG Sandringham TSV tsvarea Transport Area Open Meeting TUESDAY, March 20, 2018 0930-1200 Morning Session I Viscount ART *** core Constrained RESTful Environments WG Sandringham IRTF maprg Measurement and Analysis for Protocols Buckingham OPS anima Autonomic Networking Integrated Model = and Approach WG Blenheim SEC secdispatch Security Dispatch WG 1330-1530 Afternoon Session I Park Suite ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Palace C ART ice Interactive Connectivity Establishment = WG Buckingham IRTF panrg Path Aware Networking Proposed RG Richm_Chl_Tow RTG rift Routing In Fat Trees WG Balmoral SEC *** teep Trusted Execution Environment = Provisioning BOF 1550-1820 Afternoon Session II Balmoral ART httpbis Hypertext Transfer Protocol WG Park Suite IRTF icnrg Information-Centric Networking WEDNESDAY, March 21, 2018 0930-1200 Morning Session I Viscount INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Sandringham IRTF irtfopen IRTF Open Meeting Blenheim SEC tls Transport Layer Security WG Park Suite TSV taps Transport Services WG 1330-1500 Afternoon Session I Viscount INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Richm_Chl_Tow RTG bier Bit Indexed Explicit Replication WG Park Suite SEC oauth Web Authorization Protocol WG Palace C TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1520-1650 Afternoon Session II Park Suite INT *** lwig Light-Weight Implementation Guidance WG Buckingham SEC acme Automated Certificate Management = Environment WG Viscount SEC tokbind Token Binding WG 1710-1940 IETF Plenary - Sandringham THURSDAY, March 22, 2018 0930-1200 Morning Session I Buckingham INT dnssd Extensions for Scalable DNS Service = Discovery WG Park Suite RTG *** roll Routing Over Low power and Lossy = networks WG Sandringham TSV quic QUIC WG 1330-1530 Afternoon Session I Buckingham INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Sandringham SEC saag Security Area Open Meeting 1550-1750 Afternoon Session II Blenheim IRTF*** t2trg Thing-to-Thing Sandringham RTG rtgarea Routing Area Open Meeting Buckingham SEC mls Messaging Layer Security BOF Balmoral TSV tsvwg Transport Area Working Group WG 1810-1910 Afternoon Session III Blenheim ART uta Using TLS in Applications WG Park Suite RTG babel Babel routing protocol WG Balmoral TSV tsvwg Transport Area Working Group WG FRIDAY, March 23, 2018 0930-1130 Morning Session I Sandringham INT homenet Home Networking WG Blenheim RTG detnet Deterministic Networking WG Viscount RTG *** roll Routing Over Low power and Lossy = networks WG 1150-1320 Afternoon Session I Blenheim RTG detnet Deterministic Networking WG - 1150 - = 1430 1330-1730 @ OCF meeting venue (Prague, colocated with W3C WoT) -- Joint meeting of OCF, W3C WoT, and T2TRG (UTC+01:00 times) From nobody Mon Feb 26 11:03:24 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AC1012D87A; Mon, 26 Feb 2018 11:03:07 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Dan Romascanu To: Cc: ace@ietf.org, ietf@ietf.org, draft-ietf-ace-cbor-web-token.all@ietf.org, dromasca@gmail.com X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151967178760.21771.14005895812023525211@ietfa.amsl.com> Date: Mon, 26 Feb 2018 11:03:07 -0800 Archived-At: Subject: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Feb 2018 19:03:08 -0000 Reviewer: Dan Romascanu Review result: Almost Ready I am the assigned Gen-ART reviewer for this draft. The General Area Review Team (Gen-ART) reviews all IETF documents being processed by the IESG for the IETF Chair. Please wait for direction from your document shepherd or AD before posting a new version of the draft. For more information, please see the FAQ at . Document: draft-ietf-ace-cbor-web-token-12 Reviewer: Dan Romascanu Review Date: 2018-02-26 IETF LC End Date: 2018-03-06 IESG Telechat date: 2018-03-08 Summary: This is a clear and detailed specification, which is almost ready for publications. There are however a couple of issues that I recommend to be discussed and addressed before the document is approved. Major issues: 1. CWT is derived from JWT (RFC 7519) using CBOR rather than JSON for encoding. The rationale as explained in the document is related to efficiency for some IoT systems. The initial claims registry defined in Section 9.1 is identical (semantically) with the initial claims registry defined in Section 10.1 of RFC 7519. Is this parallelism supposed to continue? If the two registries will continue to evolve in parallel, maybe there should be a mechanism at IANA to make this happen. Was this discussed by the WG? Maybe there is a need to include some text about the relationship between the two registries. 2. I am a little confused by the definition of policies in Section 9.1: Depending upon the values being requested, registration requests are evaluated on a Standards Track Required, Specification Required, Expert Review, or Private Use basis [RFC8126] after a three-week review period on the cwt-reg-review@ietf.org mailing list, on the advice of one or more Designated Experts. How does this work? The request is forwarded to the designated expert, he/she make a recommendation concerning the policy on the mail list, and depending on the feedback received a policy is selected? Who establishes consensus? Frankly, I wonder if this can work at all. Are there other examples of four different policies for the same registry, applied on a case-to-case basis? I would also observe that this is different from the policy defined for the parallel registry for JWT (Section 10.1 in RFC 7519) which is Specification Required. Minor issues: Nits/editorial comments: From nobody Mon Feb 26 12:12:55 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 367C512D7F7; Mon, 26 Feb 2018 12:12:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v_VImrkM4qmb; Mon, 26 Feb 2018 12:12:43 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05A0E1242EA; Mon, 26 Feb 2018 12:12:39 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 26 Feb 2018 12:10:42 -0800 From: Jim Schaad To: 'Dan Romascanu' , CC: , , References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> In-Reply-To: <151967178760.21771.14005895812023525211@ietfa.amsl.com> Date: Mon, 26 Feb 2018 12:12:23 -0800 Message-ID: <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQFwM0g/CEx2cEygtLHnG1KjSGnjD6R+EzEw X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Feb 2018 20:12:45 -0000 > -----Original Message----- > From: Dan Romascanu [mailto:dromasca@gmail.com] > Sent: Monday, February 26, 2018 11:03 AM > To: gen-art@ietf.org > Cc: ace@ietf.org; ietf@ietf.org; = draft-ietf-ace-cbor-web-token.all@ietf.org; > dromasca@gmail.com > Subject: Genart telechat review of draft-ietf-ace-cbor-web-token-12 >=20 > Reviewer: Dan Romascanu > Review result: Almost Ready >=20 > I am the assigned Gen-ART reviewer for this draft. The General Area = Review > Team (Gen-ART) reviews all IETF documents being processed by the IESG = for > the IETF Chair. Please wait for direction from your document shepherd = or AD > before posting a new version of the draft. >=20 > For more information, please see the FAQ at >=20 > . >=20 > Document: draft-ietf-ace-cbor-web-token-12 > Reviewer: Dan Romascanu > Review Date: 2018-02-26 > IETF LC End Date: 2018-03-06 > IESG Telechat date: 2018-03-08 >=20 > Summary: >=20 > This is a clear and detailed specification, which is almost ready for > publications. There are however a couple of issues that I recommend to = be > discussed and addressed before the document is approved. >=20 > Major issues: >=20 > 1. CWT is derived from JWT (RFC 7519) using CBOR rather than JSON for > encoding. > The rationale as explained in the document is related to efficiency = for some > IoT systems. The initial claims registry defined in Section 9.1 is = identical > (semantically) with the initial claims registry defined in Section = 10.1 of RFC > 7519. Is this parallelism supposed to continue? If the two registries = will > continue to evolve in parallel, maybe there should be a mechanism at = IANA to > make this happen. Was this discussed by the WG? Maybe there is a need = to > include some text about the relationship between the two registries. This is probably a YMMV answer. Personally, I expect that there is = going to be divergence between the two registries but I currently do not = have any examples to support this answer. The main reason for my = supposition that I am guessing that CWT may be used in a wider set of = situations, but again I cannot support this. >=20 > 2. I am a little confused by the definition of policies in Section = 9.1: >=20 > Depending upon the values being requested, registration requests = are > evaluated on a Standards Track Required, Specification Required, > Expert Review, or Private Use basis [RFC8126] after a three-week > review period on the cwt-reg-review@ietf.org mailing list, on the > advice of one or more Designated Experts. >=20 > How does this work? The request is forwarded to the designated expert, > he/she make a recommendation concerning the policy on the mail list, = and > depending on the feedback received a policy is selected? Who = establishes > consensus? >=20 > Frankly, I wonder if this can work at all. Are there other examples of = four > different policies for the same registry, applied on a case-to-case = basis? This is the same approach that is being used for the COSE registries. = As an example, you can look at = https://www.iana.org/assignments/cose/cose.xhtml#algorithms. Part of the issue about this is that the JOSE/JWT registries do have the = same different policies, but that differences are hidden from the IANA = registry. Since they allow for a URI to be used as the identifier of a = field, only the plain text versions are registered. Thus I can use = "http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBOR = the set of tag values is closed and does not have this escape (nor would = one want the length of the tag) it is necessary to have this break down = of tag fields. Jim >=20 > I would also observe that this is different from the policy defined = for the > parallel registry for JWT (Section 10.1 in RFC 7519) which is = Specification > Required. >=20 > Minor issues: >=20 > Nits/editorial comments: >=20 From nobody Mon Feb 26 13:19:19 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B329127241; Mon, 26 Feb 2018 13:19:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TcBtUyxqZxAZ; Mon, 26 Feb 2018 13:19:06 -0800 (PST) Received: from mail-qk0-x230.google.com (mail-qk0-x230.google.com [IPv6:2607:f8b0:400d:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B266126DFB; Mon, 26 Feb 2018 13:19:06 -0800 (PST) Received: by mail-qk0-x230.google.com with SMTP id s198so20888152qke.5; Mon, 26 Feb 2018 13:19:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=7oWoNaeXW2A9zLOu2KUJCHncuprZIc58JgcxcWKclW4=; b=qQLxYNK+U3IJmwoJjLNG4u5rKkHCVieEY1/U0aaPxBFLRtS0Qge7Hfg0Cagp5xqpeE kbbAW7xKJuzCTW6clZ1J3K6TreQCAoLCpo6qqxxjeDam3PrmfeFTluAPH9NEdvMuYiLP BVO7s3qBYm+oR0VoESq54l7+tQQDE1jKG0qmGaMaBp5++ICoyNRP7cpf7Oq8TTZTIcbv V5I+6erVCkKU8EVbGYHqdCyxKf70LBJHckwekgfPjzlTBjaMB7ea9ktsYxxD7iily+dq zSdSjuodIkPmFbLcHEzjALEqfGsG+17+u/3zw14mRgL2D43UtrquthcWpZ5RIUOSeEBy PDng== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=7oWoNaeXW2A9zLOu2KUJCHncuprZIc58JgcxcWKclW4=; b=soWwyr8Sc1IyZpgR8xPAiZElg5wUwQ5J/2RdGQ/XhTE2g3NYoe0suTPWWhc+mVk7X4 s68cGPHiLN3AddI8QlEq6KjM2JWGyEcaoMZzcvZmzz4OYwrcYrRb2I3xylEoOT0fujNy uq0XFCc6++kZ09RC3PCr0F3LbxV4g7Lu9g/W3R5BXBlhcunGMJABHurzcohk0vJuuQgg otdPbA09GOTOPe/2jtLczoJjJNFCDM0FIKKbo3uJmxyL1ibUaXasyhQMsOx2sB6Vgppl YXZ6xsgID5wYEp+YQ+Q31iu+HxiX+qTgQH4PWwifxtKmqVikWGBDtqt95MT9nWTkJ+Bl DqfA== X-Gm-Message-State: APf1xPDa9p9WCIpCoCWNZqP/4EK/ayD4JM5oxBNFoLYJODUO68n3Xn6b QQLg/GXqoSIJqL3zw26x3V2BZ8gzkz8dtox4eJA= X-Google-Smtp-Source: AG47ELv/eIwKvrKl8p9CylAL9QYp+s1Mv0XrLSmJFf4FtdKzwTd4389hcGsiWaenEl1qX7sNwMcU0p4epyUt2j1hfcM= X-Received: by 10.55.79.78 with SMTP id d75mr18013291qkb.20.1519679945698; Mon, 26 Feb 2018 13:19:05 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.23.200 with HTTP; Mon, 26 Feb 2018 13:19:04 -0800 (PST) In-Reply-To: <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> From: Dan Romascanu Date: Mon, 26 Feb 2018 23:19:04 +0200 Message-ID: To: Jim Schaad Cc: gen-art , ace@ietf.org, ietf , draft-ietf-ace-cbor-web-token.all@ietf.org Content-Type: multipart/alternative; boundary="001a1148868255f61b0566240faa" Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Feb 2018 21:19:09 -0000 --001a1148868255f61b0566240faa Content-Type: text/plain; charset="UTF-8" Hi Jim, Thank you for your answer and for addressing my comments. On item #2: On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad wrote: > > > > -----Original Message----- > > From: Dan Romascanu [mailto:dromasca@gmail.com] > > > > ... > > > > 2. I am a little confused by the definition of policies in Section 9.1: > > > > Depending upon the values being requested, registration requests are > > evaluated on a Standards Track Required, Specification Required, > > Expert Review, or Private Use basis [RFC8126] after a three-week > > review period on the cwt-reg-review@ietf.org mailing list, on the > > advice of one or more Designated Experts. > > > > How does this work? The request is forwarded to the designated expert, > > he/she make a recommendation concerning the policy on the mail list, and > > depending on the feedback received a policy is selected? Who establishes > > consensus? > > > > Frankly, I wonder if this can work at all. Are there other examples of > four > > different policies for the same registry, applied on a case-to-case > basis? > > This is the same approach that is being used for the COSE registries. As > an example, you can look at https://www.iana.org/ > assignments/cose/cose.xhtml#algorithms. > > Part of the issue about this is that the JOSE/JWT registries do have the > same different policies, but that differences are hidden from the IANA > registry. Since they allow for a URI to be used as the identifier of a > field, only the plain text versions are registered. Thus I can use " > http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBOR > the set of tag values is closed and does not have this escape (nor would > one want the length of the tag) it is necessary to have this break down of > tag fields. > > > > This does not seem to be exactly the same approach. The COSE RFC 8152 defines the registry policy in a different manner. There is only one policy that is proposed 'Expert Review' and than the Expert Review Instructions are used to define the cases when a Standards Track specification is required. No such text exists in the current I-D. There is no separation of the values space in the registry according to the type of assignment here, as in RFC 8152. Regards, Dan --001a1148868255f61b0566240faa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Jim,

Thank you for your answer a= nd for addressing my comments.

On item #2:


<= div class=3D"gmail_extra">
On Mon, Feb 26, 20= 18 at 10:12 PM, Jim Schaad <ietf@augustcellars.com> wro= te:


> -----Original Message-----
> From: Dan Romascanu [mailto:drom= asca@gmail.com]
>

...
>
> 2. I am a little confused by the definition of policies in Section 9.1= :
>
>=C2=A0 =C2=A0 Depending upon the values being requested, registration r= equests are
>=C2=A0 =C2=A0 evaluated on a Standards Track Required, Specification Re= quired,
>=C2=A0 =C2=A0 Expert Review, or Private Use basis [RFC8126] after a thr= ee-week
>=C2=A0 =C2=A0 review period on the cwt-reg-review@ietf.org mailing list, on the
>=C2=A0 =C2=A0 advice of one or more Designated Experts.
>
> How does this work? The request is forwarded to the designated expert,=
> he/she make a recommendation concerning the policy on the mail list, a= nd
> depending on the feedback received a policy is selected? Who establish= es
> consensus?
>
> Frankly, I wonder if this can work at all. Are there other examples of= four
> different policies for the same registry, applied on a case-to-case ba= sis?

This is the same approach that is being used for the COSE registries= .=C2=A0 As an example, you can look at ht= tps://www.iana.org/assignments/cose/cose.xhtml#algorithms.
Part of the issue about this is that the JOSE/JWT registries do have the sa= me different policies, but that differences are hidden from the IANA regist= ry.=C2=A0 Since they allow for a URI to be used as the identifier of a fiel= d, only the plain text versions are registered.=C2=A0 Thus I can use "= http://augustcellars.com/JWT/My_Tag" as an identi= fier.=C2=A0 Since for CBOR the set of tag values is closed and does not hav= e this escape (nor would one want the length of the tag) it is necessary to= have this break down of tag fields.




This does not seem t= o be exactly the same approach. The COSE RFC 8152 defines the registry poli= cy in a different manner. There is only one policy that is proposed 'Ex= pert Review' and than the Expert Review Instructions are used to define= the cases when a Standards Track specification is required. No such text e= xists in the current I-D. There is no separation of the values space in the= registry according to the type of assignment here, as=C2=A0 in RFC 8152. <= br>
Regards,

Dan

<= /div>
--001a1148868255f61b0566240faa-- From nobody Mon Feb 26 13:47:45 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E47D8126DFB; Mon, 26 Feb 2018 13:47:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AkC3oq7jogHC; Mon, 26 Feb 2018 13:47:41 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13D34126C2F; Mon, 26 Feb 2018 13:47:41 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 26 Feb 2018 13:45:50 -0800 From: Jim Schaad To: 'Dan Romascanu' CC: 'gen-art' , , 'ietf' , References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> In-Reply-To: Date: Mon, 26 Feb 2018 13:47:31 -0800 Message-ID: <022401d3af4b$69813600$3c83a200$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0225_01D3AF08.5B5F2E80" X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQFwM0g/CEx2cEygtLHnG1KjSGnjDwJPOi8kAfvAzWykW9gusA== X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Feb 2018 21:47:44 -0000 ------=_NextPart_000_0225_01D3AF08.5B5F2E80 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =20 =20 From: Dan Romascanu [mailto:dromasca@gmail.com]=20 Sent: Monday, February 26, 2018 1:19 PM To: Jim Schaad Cc: gen-art ; ace@ietf.org; ietf ; = draft-ietf-ace-cbor-web-token.all@ietf.org Subject: Re: Genart telechat review of draft-ietf-ace-cbor-web-token-12 =20 Hi Jim, Thank you for your answer and for addressing my comments.=20 On item #2:=20 =20 On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad > wrote: > -----Original Message----- > From: Dan Romascanu [mailto:dromasca@gmail.com = ] > =20 ...=20 > > 2. I am a little confused by the definition of policies in Section = 9.1: > > Depending upon the values being requested, registration requests = are > evaluated on a Standards Track Required, Specification Required, > Expert Review, or Private Use basis [RFC8126] after a three-week > review period on the cwt-reg-review@ietf.org = mailing list, on the > advice of one or more Designated Experts. > > How does this work? The request is forwarded to the designated expert, > he/she make a recommendation concerning the policy on the mail list, = and > depending on the feedback received a policy is selected? Who = establishes > consensus? > > Frankly, I wonder if this can work at all. Are there other examples of = four > different policies for the same registry, applied on a case-to-case = basis? This is the same approach that is being used for the COSE registries. = As an example, you can look at = https://www.iana.org/assignments/cose/cose.xhtml#algorithms. Part of the issue about this is that the JOSE/JWT registries do have the = same different policies, but that differences are hidden from the IANA = registry. Since they allow for a URI to be used as the identifier of a = field, only the plain text versions are registered. Thus I can use = "http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBOR = the set of tag values is closed and does not have this escape (nor would = one want the length of the tag) it is necessary to have this break down = of tag fields. =20 This does not seem to be exactly the same approach. The COSE RFC 8152 = defines the registry policy in a different manner. There is only one = policy that is proposed 'Expert Review' and than the Expert Review = Instructions are used to define the cases when a Standards Track = specification is required. No such text exists in the current I-D. There = is no separation of the values space in the registry according to the = type of assignment here, as in RFC 8152.=20 =20 [JLS] The policies look to be the same to me, but I may be missing = something that you are seeing.. Remember that Specification Required = implies Expert review. Regards, Dan =20 ------=_NextPart_000_0225_01D3AF08.5B5F2E80 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

 

 

From: Dan = Romascanu [mailto:dromasca@gmail.com]
Sent: Monday, February = 26, 2018 1:19 PM
To: Jim Schaad = <ietf@augustcellars.com>
Cc: gen-art = <gen-art@ietf.org>; ace@ietf.org; ietf <ietf@ietf.org>; = draft-ietf-ace-cbor-web-token.all@ietf.org
Subject: Re: Genart = telechat review of = draft-ietf-ace-cbor-web-token-12

 

Hi = Jim,

Thank you for your answer and for = addressing my comments.

On item #2: =

 

On Mon, = Feb 26, 2018 at 10:12 PM, Jim Schaad <ietf@augustcellars.com> = wrote:



> -----Original Message-----
> From: = Dan Romascanu [mailto:dromasca@gmail.com]
>

 

...

>
> 2. I am a little confused by = the definition of policies in Section 9.1:
>
>    = Depending upon the values being requested, registration requests = are
>    evaluated on a Standards Track Required, = Specification Required,
>    Expert Review, or Private = Use basis [RFC8126] after a three-week
>    review = period on the cwt-reg-review@ietf.org = mailing list, on the
>    advice of one or more = Designated Experts.
>
> How does this work? The request is = forwarded to the designated expert,
> he/she make a recommendation = concerning the policy on the mail list, and
> depending on the = feedback received a policy is selected? Who establishes
> = consensus?
>
> Frankly, I wonder if this can work at all. = Are there other examples of four
> different policies for the same = registry, applied on a case-to-case basis?

This is the same = approach that is being used for the COSE registries.  As an = example, you can look at https://www.iana.org/assignments/cose/cose.xhtml#algori= thms.

Part of the issue about this is that the JOSE/JWT = registries do have the same different policies, but that differences are = hidden from the IANA registry.  Since they allow for a URI to be = used as the identifier of a field, only the plain text versions are = registered.  Thus I can use "http://augustcellars.com/JWT/My_Tag" as an = identifier.  Since for CBOR the set of tag values is closed and = does not have this escape (nor would one want the length of the tag) it = is necessary to have this break down of tag fields.


<= p class=3DMsoNormal> 

This does not seem to be exactly the same = approach. The COSE RFC 8152 defines the registry policy in a different = manner. There is only one policy that is proposed 'Expert Review' and = than the Expert Review Instructions are used to define the cases when a = Standards Track specification is required. No such text exists in the = current I-D. There is no separation of the values space in the registry = according to the type of assignment here, as  in RFC 8152. =

 

[JLS] The policies look to be the same to = me, but I may be missing something that you are seeing..=C2=A0 Remember = that Specification Required implies Expert = review.

Regards,

Dan

 

------=_NextPart_000_0225_01D3AF08.5B5F2E80-- From nobody Mon Feb 26 19:40:24 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F2F112E056; Mon, 26 Feb 2018 19:40:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U0OWTX2CHFgz; Mon, 26 Feb 2018 19:40:21 -0800 (PST) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0900812DDD0; Mon, 26 Feb 2018 19:40:20 -0800 (PST) X-AuditID: 1209190f-1ddff7000000046a-1f-5a94d322ba0e Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id 28.FE.01130.323D49A5; Mon, 26 Feb 2018 22:40:19 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id w1R3eExx014094; Mon, 26 Feb 2018 22:40:15 -0500 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w1R3e91N005123 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 26 Feb 2018 22:40:12 -0500 Date: Mon, 26 Feb 2018 21:40:09 -0600 From: Benjamin Kaduk To: Dan Romascanu Cc: Jim Schaad , gen-art , draft-ietf-ace-cbor-web-token.all@ietf.org, ietf , ace@ietf.org Message-ID: <20180227034009.GT50954@kduck.kaduk.org> References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprAKsWRmVeSWpSXmKPExsUixG6nrqt8eUqUweN71hbfv/UwW2zd/ZjV ovGxlsXVV59ZLFZP/85m8WzjfBYHNo+Nc6azeeycdZfdY8mSn0wBzFFcNimpOZllqUX6dglc GbN6r7IVzBCrmNZ8mrmBcYFgFyMnh4SAicTuE++Yuhi5OIQEFjNJzN60DMrZyChxa/JmVgjn KpPE3OUrWUBaWARUJe7sfsIGYrMJqEg0dF9mBrFFBNQktj1+DdbNLLCUUWLu3m1gCWEBX4mW Jf2sIDYv0L7jNxtZIKYeZJTYdQxkH0hCUOLkzCdgG5gFtCRu/HsJFOcAsqUllv/jADE5BQIl GvdIgFSICihL7O07xD6BUWAWkuZZSJpnITQvYGRexSibklulm5uYmVOcmqxbnJyYl5dapGui l5tZopeaUrqJERTYnJL8OxjnNHgfYhTgYFTi4Z0hNyVKiDWxrLgy9xCjJAeTkigv+xqgEF9S fkplRmJxRnxRaU5q8SFGCQ5mJRHelYsnRwnxpiRWVqUW5cOkpDlYlMR53U20o4QE0hNLUrNT UwtSi2CyMhwcShK8OpeAhgoWpaanVqRl5pQgpJk4OEGG8wANZwSp4S0uSMwtzkyHyJ9i1OW4 8eJ1G7MQS15+XqqUOK8SSJEASFFGaR7cHFBCksjeX/OKURzoLWFeZ5AqHmAyg5v0CmgJE9AS 9/8TQJaUJCKkpBoYHdKcTHfHL62dvvpal9YUXrszOav6SmbN3Fd34smU/WfKjwn4b7T6t/TK +66fn/x+mnnde1oz73ted+E0k1Ilwb0TX3h7OQremZFx+P2Dh7lHJMIPWZ53TzuZt1ozR922 ccrx3SY3prG7Trqm+k5627qIh0YF2wVcFc6v3n2zrXHrXe8sS8+WhUosxRmJhlrMRcWJAFq0 R4ojAwAA Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 03:40:23 -0000 On Mon, Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote: > Hi Jim, > > Thank you for your answer and for addressing my comments. > > On item #2: > > > > On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad wrote: > > > > > > > > -----Original Message----- > > > From: Dan Romascanu [mailto:dromasca@gmail.com] > > > > > > > ... > > > > > > > 2. I am a little confused by the definition of policies in Section 9.1: > > > > > > Depending upon the values being requested, registration requests are > > > evaluated on a Standards Track Required, Specification Required, > > > Expert Review, or Private Use basis [RFC8126] after a three-week > > > review period on the cwt-reg-review@ietf.org mailing list, on the > > > advice of one or more Designated Experts. > > > > > > How does this work? The request is forwarded to the designated expert, > > > he/she make a recommendation concerning the policy on the mail list, and > > > depending on the feedback received a policy is selected? Who establishes > > > consensus? > > > > > > Frankly, I wonder if this can work at all. Are there other examples of > > four > > > different policies for the same registry, applied on a case-to-case > > basis? > > > > This is the same approach that is being used for the COSE registries. As > > an example, you can look at https://www.iana.org/ > > assignments/cose/cose.xhtml#algorithms. > > > > Part of the issue about this is that the JOSE/JWT registries do have the > > same different policies, but that differences are hidden from the IANA > > registry. Since they allow for a URI to be used as the identifier of a > > field, only the plain text versions are registered. Thus I can use " > > http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBOR > > the set of tag values is closed and does not have this escape (nor would > > one want the length of the tag) it is necessary to have this break down of > > tag fields. > > > > > > > > > This does not seem to be exactly the same approach. The COSE RFC 8152 > defines the registry policy in a different manner. There is only one policy > that is proposed 'Expert Review' and than the Expert Review Instructions > are used to define the cases when a Standards Track specification is > required. No such text exists in the current I-D. There is no separation of > the values space in the registry according to the type of assignment here, > as in RFC 8152. The template in section 9.1.1 has the different policies for the different integer ranges, under the 'Claim Key' section. Kathleen (IIRC) already noted that this should probably be repeated in the introductory part of section 9.1 as well, and that will be done before the document is sent to the IESG. -Benjamin From nobody Mon Feb 26 19:45:08 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3D3212DA16; Mon, 26 Feb 2018 19:45:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zF_ZJcoMmPsn; Mon, 26 Feb 2018 19:44:59 -0800 (PST) Received: from dmz-mailsec-scanner-5.mit.edu (dmz-mailsec-scanner-5.mit.edu [18.7.68.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1456A124BAC; Mon, 26 Feb 2018 19:44:58 -0800 (PST) X-AuditID: 12074422-68bff700000024cf-84-5a94d43873d8 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-5.mit.edu (Symantec Messaging Gateway) with SMTP id 88.2E.09423.934D49A5; Mon, 26 Feb 2018 22:44:57 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w1R3itFd003663; Mon, 26 Feb 2018 22:44:55 -0500 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w1R3ipca007594 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 26 Feb 2018 22:44:53 -0500 Date: Mon, 26 Feb 2018 21:44:51 -0600 From: Benjamin Kaduk To: Dan Romascanu Cc: gen-art@ietf.org, ace@ietf.org, ietf@ietf.org, draft-ietf-ace-cbor-web-token.all@ietf.org Message-ID: <20180227034450.GU50954@kduck.kaduk.org> References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <151967178760.21771.14005895812023525211@ietfa.amsl.com> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmphleLIzCtJLcpLzFFi42IR4hTV1rW8MiXK4OZmWYvv33qYLbbufsxq 0fhYy+Lqq88sFs82zmdxYPXYOesuu8eSJT+ZApiiuGxSUnMyy1KL9O0SuDL+nV7LWDCNq6J7 +Qf2BsbpHF2MnBwSAiYSm0/OY+xi5OIQEljMJNGyYREjSEJIYCOjxJSuMIjEVSaJ1ofH2UES LAKqEo/uHAArYhNQkWjovswMYosIqElse/yaCcRmFkiTuDd7LhuILSzgLvHoSwMriM0LtO3w hzZmiAUuEndu/GCHiAtKnJz5hAWiV0vixr+XQHM4gGxpieX/wA7lFHCVuDf3Bth4UQFlib19 h9gnMArMQtI9C0n3LITuBYzMqxhlU3KrdHMTM3OKU5N1i5MT8/JSi3RN9XIzS/RSU0o3MYIC mN1FaQfjxH9ehxgFOBiVeHg7lk2JEmJNLCuuzD3EKMnBpCTKy74GKMSXlJ9SmZFYnBFfVJqT WnyIUYKDWUmEd+XiyVFCvCmJlVWpRfkwKWkOFiVxXg8T7SghgfTEktTs1NSC1CKYrAwHh5IE 74tLQEMFi1LTUyvSMnNKENJMHJwgw3mAhjOC1PAWFyTmFmemQ+RPMepy3Hjxuo1ZiCUvPy9V Spy34jJQkQBIUUZpHtwcUOKRyN5f84pRHOgtYV4LkCoeYNKCm/QKaAkT0BL3/xNAlpQkIqSk GhiV/Ftf5QvqCTSkzLqyd7eO/wYZl+wVUbJXw5LYpoowt294VuLUF6t+RXTRTAWps2v4JOKs Pt3qXPNIxkxZ/Z3VY8vmuGdH3LYb5O6JSZHP779343S4kMyW4pmtS1KPR5zpa9+nfElbJEe8 JJZt9c6JwmY2BhtZQtycr/QFJokVPBeebKEppcRSnJFoqMVcVJwIAIY2v9gXAwAA Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 03:45:01 -0000 On Mon, Feb 26, 2018 at 11:03:07AM -0800, Dan Romascanu wrote: > > 1. CWT is derived from JWT (RFC 7519) using CBOR rather than JSON for encoding. > The rationale as explained in the document is related to efficiency for some > IoT systems. The initial claims registry defined in Section 9.1 is identical > (semantically) with the initial claims registry defined in Section 10.1 of RFC > 7519. Is this parallelism supposed to continue? If the two registries will > continue to evolve in parallel, maybe there should be a mechanism at IANA to > make this happen. Was this discussed by the WG? Maybe there is a need to > include some text about the relationship between the two registries. The shepherd writeup includes a note to the IESG recommending that there be overlap between the experts for the CWT and JWT registries: Since near-total overlap is expected between the CWT and JWT registry contents, overlap in the corresponding pools of Experts would be useful, to help ensure that the appropriate amount of overlap between the registries is maintained. So I expect that the right thing will happen in practice, though you're probably right that having some text in the document itself (and the registry template as well) would be a good safety net. -Benjamin From nobody Mon Feb 26 22:44:54 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26A2E120454; Mon, 26 Feb 2018 22:44:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tyM9acDApepW; Mon, 26 Feb 2018 22:44:50 -0800 (PST) Received: from mail-qt0-x236.google.com (mail-qt0-x236.google.com [IPv6:2607:f8b0:400d:c0d::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3C151200B9; Mon, 26 Feb 2018 22:44:49 -0800 (PST) Received: by mail-qt0-x236.google.com with SMTP id g60so21890833qtd.11; Mon, 26 Feb 2018 22:44:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=BMdcixeBXdU/jSvReoYNsRtTMVCK4ItMyWNdgodxNzU=; b=ofOZFCvk8+BcsKNrEPaCwKkkQ8ne1ndsQV6NfFRxWTpPVb4zMNdjA+fysDKb+nu5/K 8DdUrMCb3Z65jU/4ISoyF6hwFNM1zBBq5nLXOUgO4AlkkZ9twA5dz6Xb+GEp/bsUzxXB FeJpUIt24vcGqQPXI6Tv2S2PWaz8gOzlYuC0sQWiwnqxSMZ947Ef5V31wi9OoXpmNCLh WVl/J0ZdMDJPs2Y45DU5QjxdzfKyU264YSyLumKBEHs0ZLwUfHv3SXE80TFLB0m591c5 gmBzCX9ZmPsx95Zbs+K2EGSwBndl9x/IBALFD4mOTtK+b1fT9Eqc7FJR16u9YWUqcIYG qESw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=BMdcixeBXdU/jSvReoYNsRtTMVCK4ItMyWNdgodxNzU=; b=ucjOM6UVBQbL3i1Vymw5KOB6haH/d3SMGkUOilBqpCEMc9kMqzxRbisvh8NViY96KF KXGe7d6NccTgr5GVGitAnfuxbIHac5dudJZX7HfWQz9SQ4dUxK2ReQCDkRkPrKMBcmhu 25Z/aSGrToJm4G/o+miCbyU9VU/DnnyOfSPCWweHi7axWS0Gvy4AhzdSVr+UiWEWTqqx n/HqpSwnbkR64byOzdXLE252LqGu6otG578LW++GlkP9vzZtC2Lbduf00JFrZAifoeuy m/uKYErIP7W5qQqyUeLmJ2zG8yydu+wp/nKdukEn8yQdhEbfa9DYbgH2oZ1i0iKn/9h6 rrlA== X-Gm-Message-State: APf1xPBAU1gmqm2/0vsAP/13b3RE67PxHyk0DmMHaO3U/RfECXolPV8X mFD1eruaUFBY317DmFeuzMUbATWwVOxFFHIA+cA= X-Google-Smtp-Source: AG47ELuv9pMYxgEzU0OCHYl3QsqVJHCyYzFeK137IMV5M3jZ3OxHSRfqi6Mbk0xedAoqhsCB8xdrQ9EyRPNZ3A16GxY= X-Received: by 10.237.44.225 with SMTP id g88mr22292493qtd.339.1519713888925; Mon, 26 Feb 2018 22:44:48 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.23.200 with HTTP; Mon, 26 Feb 2018 22:44:48 -0800 (PST) In-Reply-To: <022401d3af4b$69813600$3c83a200$@augustcellars.com> References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <022401d3af4b$69813600$3c83a200$@augustcellars.com> From: Dan Romascanu Date: Tue, 27 Feb 2018 08:44:48 +0200 Message-ID: To: Jim Schaad Cc: gen-art , ace@ietf.org, ietf , draft-ietf-ace-cbor-web-token.all@ietf.org Content-Type: multipart/alternative; boundary="94eb2c1256e2827d5005662bf644" Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 06:44:52 -0000 --94eb2c1256e2827d5005662bf644 Content-Type: text/plain; charset="UTF-8" On Mon, Feb 26, 2018 at 11:47 PM, Jim Schaad wrote: > > > > > *From:* Dan Romascanu [mailto:dromasca@gmail.com] > *Sent:* Monday, February 26, 2018 1:19 PM > *To:* Jim Schaad > *Cc:* gen-art ; ace@ietf.org; ietf ; > draft-ietf-ace-cbor-web-token.all@ietf.org > *Subject:* Re: Genart telechat review of draft-ietf-ace-cbor-web-token-12 > > > > Hi Jim, > > Thank you for your answer and for addressing my comments. > > On item #2: > > > > On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad > wrote: > > > > > -----Original Message----- > > From: Dan Romascanu [mailto:dromasca@gmail.com] > > > > > > ... > > > > > 2. I am a little confused by the definition of policies in Section 9.1: > > > > Depending upon the values being requested, registration requests are > > evaluated on a Standards Track Required, Specification Required, > > Expert Review, or Private Use basis [RFC8126] after a three-week > > review period on the cwt-reg-review@ietf.org mailing list, on the > > advice of one or more Designated Experts. > > > > How does this work? The request is forwarded to the designated expert, > > he/she make a recommendation concerning the policy on the mail list, and > > depending on the feedback received a policy is selected? Who establishes > > consensus? > > > > Frankly, I wonder if this can work at all. Are there other examples of > four > > different policies for the same registry, applied on a case-to-case > basis? > > This is the same approach that is being used for the COSE registries. As > an example, you can look at https://www.iana.org/ > assignments/cose/cose.xhtml#algorithms. > > Part of the issue about this is that the JOSE/JWT registries do have the > same different policies, but that differences are hidden from the IANA > registry. Since they allow for a URI to be used as the identifier of a > field, only the plain text versions are registered. Thus I can use " > http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBOR > the set of tag values is closed and does not have this escape (nor would > one want the length of the tag) it is necessary to have this break down of > tag fields. > > > > > This does not seem to be exactly the same approach. The COSE RFC 8152 > defines the registry policy in a different manner. There is only one policy > that is proposed 'Expert Review' and than the Expert Review Instructions > are used to define the cases when a Standards Track specification is > required. No such text exists in the current I-D. There is no separation of > the values space in the registry according to the type of assignment here, > as in RFC 8152. > > > > [JLS] The policies look to be the same to me, but I may be missing > something that you are seeing.. Remember that Specification Required > implies Expert review. > > > > Hi Jim, You seem to miss the exact definition of policies. Please see RFC 8126, Section 4. Expert Review and Specification Required are two different policies, even if one implies the other. Your document defines multiple policies for the same registry, without making clear which is to be used and when. This is unusual. Regards, Dan --94eb2c1256e2827d5005662bf644 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Mon, Feb 26, 2018 at 11:47 PM, Jim Schaad <ietf@augustcellars.= com> wrote:

=C2=A0

=C2=A0

<= span class=3D"">From: Dan Romascanu [mailto:dromasca@gmail.com]
Sent:= Monday, February 26, 2018 1:19 PM
To: Jim Schaad <ietf@augustcellars.com= >
Cc: gen-art <gen-art@ietf.org>; ace@ietf.org; ietf <ietf@ietf.org>; draft-ietf-ace-cbor-web-token= .all@ietf.org
Subject: Re: Genart telechat review of dra= ft-ietf-ace-cbor-web-token-12

=C2=A0

Hi Jim,

Thank you for your= answer and for addressing my comments.

On item #2:

=

=C2=A0

=

On Mon, Feb 26, 2018 at 10:12 PM, J= im Schaad <i= etf@augustcellars.com> wrote:



>= ; -----Original Message-----
> From: Dan Romascanu [mailto:dromasca@gmail.com]
&g= t;

=C2=A0=

...

>
> 2. I am a little confused by the = definition of policies in Section 9.1:
>
>=C2=A0 =C2=A0 Dependi= ng upon the values being requested, registration requests are
>=C2=A0= =C2=A0 evaluated on a Standards Track Required, Specification Required,>=C2=A0 =C2=A0 Expert Review, or Private Use basis [RFC8126] after a th= ree-week
>=C2=A0 =C2=A0 review period on the cwt-reg-review@ietf.org mailing li= st, on the
>=C2=A0 =C2=A0 advice of one or more Designated Experts.>
> How does this work? The request is forwarded to the designat= ed expert,
> he/she make a recommendation concerning the policy on th= e mail list, and
> depending on the feedback received a policy is sel= ected? Who establishes
> consensus?
>
> Frankly, I wonder= if this can work at all. Are there other examples of four
> differen= t policies for the same registry, applied on a case-to-case basis?

T= his is the same approach that is being used for the COSE registries.=C2=A0 = As an example, you can look at https://www.iana.org/ass= ignments/cose/cose.xhtml#algorithms.

Part of the issue abou= t this is that the JOSE/JWT registries do have the same different policies,= but that differences are hidden from the IANA registry.=C2=A0 Since they a= llow for a URI to be used as the identifier of a field, only the plain text= versions are registered.=C2=A0 Thus I can use "http://augustcellars.com/JWT/My_Tag" as an identifier.=C2=A0 Since for CBOR the set of tag v= alues is closed and does not have this escape (nor would one want the lengt= h of the tag) it is necessary to have this break down of tag fields.


=C2=A0

This does n= ot seem to be exactly the same approach. The COSE RFC 8152 defines the regi= stry policy in a different manner. There is only one policy that is propose= d 'Expert Review' and than the Expert Review Instructions are used = to define the cases when a Standards Track specification is required. No su= ch text exists in the current I-D. There is no separation of the values spa= ce in the registry according to the type of assignment here, as=C2=A0 in RF= C 8152.

=C2=A0

[JLS] The policies look to be the same to me, but I may be m= issing something that you are seeing..=C2=A0 Remember that Specification Re= quired implies Expert review.



Hi Jim,

You seem to miss the exa= ct definition of policies. Please see RFC 8126, Section 4. Expert Review an= d Specification Required are two different policies, even if one implies th= e other. Your document defines multiple policies for the same registry, wit= hout making clear which is to be used and when. This is unusual.

Regards,

Dan



--94eb2c1256e2827d5005662bf644-- From nobody Mon Feb 26 23:29:26 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD93F124BAC; Mon, 26 Feb 2018 23:29:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c4BU5UHDFlJ6; Mon, 26 Feb 2018 23:29:20 -0800 (PST) Received: from mail-qt0-x22e.google.com (mail-qt0-x22e.google.com [IPv6:2607:f8b0:400d:c0d::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3874A1200B9; Mon, 26 Feb 2018 23:29:20 -0800 (PST) Received: by mail-qt0-x22e.google.com with SMTP id t6so12533476qtn.9; Mon, 26 Feb 2018 23:29:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=gsBCsx8ZhZXlWAUEDN57sikvq/PwALt04wwA4cvsqDk=; b=ge/Od08JRuSiDkBtl90GcsADpZsZr80pHvsXqkEz+jpxnMd13t7tn8d+HODoqkmhfq hLD9GwexuaalSd/uWHRSX6MZIivL6FLSoen3T10X/OQ6Ckdiec9cxDC6Xq1oL+EAbR1c qyFBhB7hSOK+6vQKn647XI/y5Bj77ItRT7A3EgzvUVUxdw/dagHPYoAOQmabi2YxhGSv 70gdl2Znls8295a+K1R3ioqMkgSm8pialFaeyXqXE8UyjyUcgR6iaa/nni73BOfw6hXw 9Pxi6jvGde7WNWSeeprRajS+dsMoef1JTUB6DrTPaDcOsuv5ByFS+3rLHcVAv46uieiX H6Sw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=gsBCsx8ZhZXlWAUEDN57sikvq/PwALt04wwA4cvsqDk=; b=Qe06lSqOahbz0GVxX+OASE0oNuuu0kwjHsjkU2j+b/flrRUrhmsQoSaftvuky+FXJq 8BDNxBNb5TC5xPWX+VzV8v+EjjQzukJAHAI382RXr5HvjwP95f5LksSR/QPf6dSAMfa+ 9O9MdoOvnFMqUSr/8lbMZsCrcMxsYQMVE+o1fHlKs1NiDlGsyQGP4SAyUqjkIQb7ufCR 8YVKlrchZW/xRrunr89sc35Iob5OHJ4Wpxr3bIN8XfAm4+cYc3iRBs8QNyUFlOSCHlNs 5BlzO+dSlZNtx4jGSHdeRhdWEfrhnNRviUpAeHMTbtShmY6BK59Q1W8FcHUKwSSXwJA+ hBug== X-Gm-Message-State: APf1xPDat5K7ByJIm3AdZdecDpFBfS8C1icb+m4cM6iCoSB8vu84j0Ot Mj9eqrQ2tEgsd/Xy8avZE+20U5n0vgTjSZu5mRY= X-Google-Smtp-Source: AG47ELuQ37JBa5/y44MAIjLSRLrBsz6pBxqyFPHjGnmMM42qp2bp6TNUS+DBwtDIEGlnZB9RX8HbKZLGXLvKWzjsLEU= X-Received: by 10.200.66.78 with SMTP id r14mr22555381qtm.49.1519716559305; Mon, 26 Feb 2018 23:29:19 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.23.200 with HTTP; Mon, 26 Feb 2018 23:29:18 -0800 (PST) In-Reply-To: References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <022401d3af4b$69813600$3c83a200$@augustcellars.com> From: Dan Romascanu Date: Tue, 27 Feb 2018 09:29:18 +0200 Message-ID: To: Jim Schaad Cc: gen-art , ace@ietf.org, ietf , draft-ietf-ace-cbor-web-token.all@ietf.org Content-Type: multipart/alternative; boundary="f4f5e8065d68ad414b05662c9501" Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 07:29:23 -0000 --f4f5e8065d68ad414b05662c9501 Content-Type: text/plain; charset="UTF-8" Hi Jim, See also Section 4.12 in RFC 8126 for the use of multiple policies in combination. I believe that what the document tries to say is: Register R is divided into four different ranges R1, R2, R3, R4 (defining the value limits may be useful) Values in range R1 are allocated according to policy P1 in the case that ... Values in range R2 are allocated according to policy P2 in the case that ... Values in range R3 are allocated according to policy P3 in the case that ... Values in range R4 are allocated according to policy P4 in the case that ... Regards, Dan On Tue, Feb 27, 2018 at 8:44 AM, Dan Romascanu wrote: > > > On Mon, Feb 26, 2018 at 11:47 PM, Jim Schaad > wrote: > >> >> >> >> >> *From:* Dan Romascanu [mailto:dromasca@gmail.com] >> *Sent:* Monday, February 26, 2018 1:19 PM >> *To:* Jim Schaad >> *Cc:* gen-art ; ace@ietf.org; ietf ; >> draft-ietf-ace-cbor-web-token.all@ietf.org >> *Subject:* Re: Genart telechat review of draft-ietf-ace-cbor-web-token-12 >> >> >> >> Hi Jim, >> >> Thank you for your answer and for addressing my comments. >> >> On item #2: >> >> >> >> On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad >> wrote: >> >> >> >> > -----Original Message----- >> > From: Dan Romascanu [mailto:dromasca@gmail.com] >> > >> >> >> >> ... >> >> > >> > 2. I am a little confused by the definition of policies in Section 9.1: >> > >> > Depending upon the values being requested, registration requests are >> > evaluated on a Standards Track Required, Specification Required, >> > Expert Review, or Private Use basis [RFC8126] after a three-week >> > review period on the cwt-reg-review@ietf.org mailing list, on the >> > advice of one or more Designated Experts. >> > >> > How does this work? The request is forwarded to the designated expert, >> > he/she make a recommendation concerning the policy on the mail list, and >> > depending on the feedback received a policy is selected? Who establishes >> > consensus? >> > >> > Frankly, I wonder if this can work at all. Are there other examples of >> four >> > different policies for the same registry, applied on a case-to-case >> basis? >> >> This is the same approach that is being used for the COSE registries. As >> an example, you can look at https://www.iana.org/assignmen >> ts/cose/cose.xhtml#algorithms. >> >> Part of the issue about this is that the JOSE/JWT registries do have the >> same different policies, but that differences are hidden from the IANA >> registry. Since they allow for a URI to be used as the identifier of a >> field, only the plain text versions are registered. Thus I can use " >> http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBOR >> the set of tag values is closed and does not have this escape (nor would >> one want the length of the tag) it is necessary to have this break down of >> tag fields. >> >> >> >> >> This does not seem to be exactly the same approach. The COSE RFC 8152 >> defines the registry policy in a different manner. There is only one policy >> that is proposed 'Expert Review' and than the Expert Review Instructions >> are used to define the cases when a Standards Track specification is >> required. No such text exists in the current I-D. There is no separation of >> the values space in the registry according to the type of assignment here, >> as in RFC 8152. >> >> >> >> [JLS] The policies look to be the same to me, but I may be missing >> something that you are seeing.. Remember that Specification Required >> implies Expert review. >> >> >> >> Hi Jim, > > You seem to miss the exact definition of policies. Please see RFC 8126, > Section 4. Expert Review and Specification Required are two different > policies, even if one implies the other. Your document defines multiple > policies for the same registry, without making clear which is to be used > and when. This is unusual. > > Regards, > > Dan > > > > --f4f5e8065d68ad414b05662c9501 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Jim,

See als= o Section 4.12 in RFC 8126 for the use of multiple policies in combination.=

I believe that what the document tries to say is:

Register R is divided into four different ranges R1, R2, R3, R4 (defini= ng the value limits may be useful)

Values in range R1 are allo= cated according to policy P1 in the case that ...
Values in range R2 are= allocated according to policy P2 in the case that ...
Values in range R= 3 are allocated according to policy P3 in the case that ...
Values in ra= nge R4 are allocated according to policy P4 in the case that ...

Regards,

Dan




On Tue, Feb 27, 2018= at 8:44 AM, Dan Romascanu <dromasca@gmail.com> wrote:
<= blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px= #ccc solid;padding-left:1ex">


On Mon, Feb 26, 20= 18 at 11:47 PM, Jim Schaad <ietf@augustcellars.com> wro= te:

=C2=A0

=C2=A0

From: Dan Romascanu [mailto:dromasca@gmail.com]
Sent: Monday,= February 26, 2018 1:19 PM
To: Jim Schaad <ietf@augustcellars.com>
= Cc: gen-art <gen-art@ietf.org>; ace@ietf.org; ietf <ietf@ietf.org>; draft-ietf-ace-cbor-web-token.all@ie= tf.org
Subject: Re: Genart telechat review of draft-ietf-ace-= cbor-web-token-12

= =C2=A0

Hi Jim,

Thank you for your answer and for addre= ssing my comments.

On item #2:

=C2=A0

On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad <ietf@augustcellars.com> wr= ote:

<= div>



> -----Original Message-----
= > From: Dan Romascanu [mailto:dromasca@gmail.com]
>

=

=C2=A0

...

&= gt;
> 2. I am a little confused by the definition of policies in Sect= ion 9.1:
>
>=C2=A0 =C2=A0 Depending upon the values being reque= sted, registration requests are
>=C2=A0 =C2=A0 evaluated on a Standar= ds Track Required, Specification Required,
>=C2=A0 =C2=A0 Expert Revi= ew, or Private Use basis [RFC8126] after a three-week
>=C2=A0 =C2=A0 = review period on the cwt-reg-review@ietf.org mailing list, on the
>=C2=A0 =C2= =A0 advice of one or more Designated Experts.
>
> How does this= work? The request is forwarded to the designated expert,
> he/she ma= ke a recommendation concerning the policy on the mail list, and
> dep= ending on the feedback received a policy is selected? Who establishes
&g= t; consensus?
>
> Frankly, I wonder if this can work at all. Ar= e there other examples of four
> different policies for the same regi= stry, applied on a case-to-case basis?

This is the same approach tha= t is being used for the COSE registries.=C2=A0 As an example, you can look = at https://www.iana.org/assignments/cose/cose.xhtml#alg= orithms.

Part of the issue about this is that the JOSE/JWT regis= tries do have the same different policies, but that differences are hidden = from the IANA registry.=C2=A0 Since they allow for a URI to be used as the = identifier of a field, only the plain text versions are registered.=C2=A0 T= hus I can use "http://augustcellars.com/JWT/My_Tag" as an identi= fier.=C2=A0 Since for CBOR the set of tag values is closed and does not hav= e this escape (nor would one want the length of the tag) it is necessary to= have this break down of tag fields.

<= br>

=C2=A0

This does not seem to be exactly the same approach. Th= e COSE RFC 8152 defines the registry policy in a different manner. There is= only one policy that is proposed 'Expert Review' and than the Expe= rt Review Instructions are used to define the cases when a Standards Track = specification is required. No such text exists in the current I-D. There is= no separation of the values space in the registry according to the type of= assignment here, as=C2=A0 in RFC 8152.

=C2=A0

[JLS] The policies look to b= e the same to me, but I may be missing something that you are seeing..=C2= =A0 Remember that Specification Required implies Expert review.


=


Hi Jim= ,

You seem to miss the exact definition of policies. Plea= se see RFC 8126, Section 4. Expert Review and Specification Required are tw= o different policies, even if one implies the other. Your document defines = multiple policies for the same registry, without making clear which is to b= e used and when. This is unusual.

Regards,

=
Dan




--f4f5e8065d68ad414b05662c9501-- From nobody Tue Feb 27 01:59:54 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A478A1274D2; Tue, 27 Feb 2018 01:59:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 56Y5mJhihtC0; Tue, 27 Feb 2018 01:59:51 -0800 (PST) Received: from mail-qk0-x22a.google.com (mail-qk0-x22a.google.com [IPv6:2607:f8b0:400d:c09::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58E64126BF6; Tue, 27 Feb 2018 01:59:51 -0800 (PST) Received: by mail-qk0-x22a.google.com with SMTP id z197so22747875qkb.6; Tue, 27 Feb 2018 01:59:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=6BacxPEF5CIFjmRvD+waK342HO/eDpc0W1OGv5E844E=; b=jA/9nmkRsvfnGwF9r8RtJWHsuNO/3SmyeUvuA+o+5X0jL1S2I6uapQjaWYXSTCwmEv UtP1GrxUMoLLTkWOPWQw9xTV+hec8dfkxqz2+c3wAH9oeLe+sNhn/V/8PDIW4CrX1U/z pxhTU2jsCNhmdjDi0z71ms90lol9JBJeGBd5H0jRHDGNe7fE9UqkEDG7wCECjgOafqsL S58nJDshy175bC7gktHiQA2lPxR7afipTc9XXNlTxe+WdyzxhCRUm+pizqjPp+Qp44ph nO0OFDk8kjsnQFsHzxD+QGB07TYbdWhr4yYrveMSImngAHHwiexuefW3vB24ubV5Yqfr cGgw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=6BacxPEF5CIFjmRvD+waK342HO/eDpc0W1OGv5E844E=; b=TMXOBEkwh7FSPoRrpfkt05Z46h4xOok36zqTQk6K3+Zh4IjhNJO9B1GFVBSALCrVlL I78q+ngZr5TnwQA01RL8gan1eTly4Mqyu4rzz6j7seqALOQFVaniV5Cms7SGdTD+RFwW AEtF46Clgm0q9c5BxIoOygyOr/VhO81JUrAwy+1oPjZ2iHNWr5h9uk+rQvA2dsmEf+l7 fzHlUYQEnP0GENWNhqdnyPEXbi0a9PyqVWLnuKsoWmq8UQWYIZtDwsy9a87O5coB/8yF kTrsC9/PWV7DYr9UX6GoQWJ1YOfX93R8Q/n54oTNc4URrdYeI8uSYKixaJysLS8egt3y xUqA== X-Gm-Message-State: APf1xPCKKAWEctoFFazld09S1e/5VFfxPFonmeZH9s+/1it6PvyfR2nS njhnsInwwmp4zprMQ2FYeNoWlJ7uiaUwUvzkeiVkvQ== X-Google-Smtp-Source: AG47ELusNClNyByBaDnsENUA3eaZhZLjGSWOt9VFGF7Pd7af8xZw5roepVLVDmSj+9AM0KNC/dS8u8qwIR+Ddg5J2fE= X-Received: by 10.55.195.79 with SMTP id a76mr21751847qkj.217.1519725590463; Tue, 27 Feb 2018 01:59:50 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.23.200 with HTTP; Tue, 27 Feb 2018 01:59:50 -0800 (PST) In-Reply-To: <20180227034009.GT50954@kduck.kaduk.org> References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> From: Dan Romascanu Date: Tue, 27 Feb 2018 11:59:50 +0200 Message-ID: To: Benjamin Kaduk Cc: Jim Schaad , gen-art , draft-ietf-ace-cbor-web-token.all@ietf.org, ietf , ace@ietf.org Content-Type: multipart/alternative; boundary="001a11479b36f9caec05662eaf59" Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 09:59:54 -0000 --001a11479b36f9caec05662eaf59 Content-Type: text/plain; charset="UTF-8" Hi, See also my other notes. I believe that what the document tries to say is: Register R is divided into four different ranges R1, R2, R3, R4 (defining the value limits may be useful) Values in range R1 are allocated according to policy P1 in the case that ... Values in range R2 are allocated according to policy P2 in the case that ... Values in range R3 are allocated according to policy P3 in the case that ... Values in range R4 are allocated according to policy P4 in the case that ... But it doesn't say it. Mentioning four concurrent policies for the same registry without separation of values range, and without providing clear instructions when each policy is recommended to be used, seems confusing to me, and may be confusing for users of this document in the future. Regards, Dan On Tue, Feb 27, 2018 at 5:40 AM, Benjamin Kaduk wrote: > On Mon, Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote: > > Hi Jim, > > > > Thank you for your answer and for addressing my comments. > > > > On item #2: > > > > > > > > On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad > wrote: > > > > > > > > > > > > -----Original Message----- > > > > From: Dan Romascanu [mailto:dromasca@gmail.com] > > > > > > > > > > ... > > > > > > > > > > 2. I am a little confused by the definition of policies in Section > 9.1: > > > > > > > > Depending upon the values being requested, registration requests > are > > > > evaluated on a Standards Track Required, Specification Required, > > > > Expert Review, or Private Use basis [RFC8126] after a three-week > > > > review period on the cwt-reg-review@ietf.org mailing list, on the > > > > advice of one or more Designated Experts. > > > > > > > > How does this work? The request is forwarded to the designated > expert, > > > > he/she make a recommendation concerning the policy on the mail list, > and > > > > depending on the feedback received a policy is selected? Who > establishes > > > > consensus? > > > > > > > > Frankly, I wonder if this can work at all. Are there other examples > of > > > four > > > > different policies for the same registry, applied on a case-to-case > > > basis? > > > > > > This is the same approach that is being used for the COSE registries. > As > > > an example, you can look at https://www.iana.org/ > > > assignments/cose/cose.xhtml#algorithms. > > > > > > Part of the issue about this is that the JOSE/JWT registries do have > the > > > same different policies, but that differences are hidden from the IANA > > > registry. Since they allow for a URI to be used as the identifier of a > > > field, only the plain text versions are registered. Thus I can use " > > > http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBOR > > > the set of tag values is closed and does not have this escape (nor > would > > > one want the length of the tag) it is necessary to have this break > down of > > > tag fields. > > > > > > > > > > > > > > This does not seem to be exactly the same approach. The COSE RFC 8152 > > defines the registry policy in a different manner. There is only one > policy > > that is proposed 'Expert Review' and than the Expert Review Instructions > > are used to define the cases when a Standards Track specification is > > required. No such text exists in the current I-D. There is no separation > of > > the values space in the registry according to the type of assignment > here, > > as in RFC 8152. > > The template in section 9.1.1 has the different policies for the > different integer ranges, under the 'Claim Key' section. Kathleen > (IIRC) already noted that this should probably be repeated in the > introductory part of section 9.1 as well, and that will be done > before the document is sent to the IESG. > > -Benjamin > --001a11479b36f9caec05662eaf59 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

See also my other not= es.

I believe that what the document tries to say is:
Register R is divided into four different ranges R1, R2, R3, R4 = (defining the value limits may be useful)

Values in range R1 a= re allocated according to policy P1 in the case that ...
Values in range= R2 are allocated according to policy P2 in the case that ...
Values in = range R3 are allocated according to policy P3 in the case that ...
Value= s in range R4 are allocated according to policy P4 in the case that ...
=
But it doesn't say it. Mentioning four concurrent policies fo= r the same registry without separation of values range, and without providi= ng clear instructions when each policy is recommended to be used, seems con= fusing to me, and may be confusing for users of this document in the future= .

Regards,

Dan


On Tue, Feb 27, 2018 at 5:40 AM, Benj= amin Kaduk <kaduk@mit.edu> wrote:
On Mon, Feb 26, 2018 at 11:19:0= 4PM +0200, Dan Romascanu wrote:
> Hi Jim,
>
> Thank you for your answer and for addressing my comments.
>
> On item #2:
>
>
>
> On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad <ietf@augustcellars.com> wrote:
>
> >
> >
> > > -----Original Message-----
> > > From: Dan Romascanu [mailto:dromasca@gmail.com]
> > >
> >
> > ...
>
> > >
> > > 2. I am a little confused by the definition of policies in S= ection 9.1:
> > >
> > >=C2=A0 =C2=A0 Depending upon the values being requested, regi= stration requests are
> > >=C2=A0 =C2=A0 evaluated on a Standards Track Required, Specif= ication Required,
> > >=C2=A0 =C2=A0 Expert Review, or Private Use basis [RFC8126] a= fter a three-week
> > >=C2=A0 =C2=A0 review period on the cwt-reg-review@ietf.org mailing list, on the
> > >=C2=A0 =C2=A0 advice of one or more Designated Experts.
> > >
> > > How does this work? The request is forwarded to the designat= ed expert,
> > > he/she make a recommendation concerning the policy on the ma= il list, and
> > > depending on the feedback received a policy is selected? Who= establishes
> > > consensus?
> > >
> > > Frankly, I wonder if this can work at all. Are there other e= xamples of
> > four
> > > different policies for the same registry, applied on a case-= to-case
> > basis?
> >
> > This is the same approach that is being used for the COSE registr= ies.=C2=A0 As
> > an example, you can look at https://www.iana.org/
> > assignments/cose/cose.xhtml#algorithms.
> >
> > Part of the issue about this is that the JOSE/JWT registries do h= ave the
> > same different policies, but that differences are hidden from the= IANA
> > registry.=C2=A0 Since they allow for a URI to be used as the iden= tifier of a
> > field, only the plain text versions are registered.=C2=A0 Thus I = can use "
> > http://augustcellars.com/JWT/My_Tag" as a= n identifier.=C2=A0 Since for CBOR
> > the set of tag values is closed and does not have this escape (no= r would
> > one want the length of the tag) it is necessary to have this brea= k down of
> > tag fields.
> >
> >
> >
> >
> This does not seem to be exactly the same approach. The COSE RFC 8152<= br> > defines the registry policy in a different manner. There is only one p= olicy
> that is proposed 'Expert Review' and than the Expert Review In= structions
> are used to define the cases when a Standards Track specification is > required. No such text exists in the current I-D. There is no separati= on of
> the values space in the registry according to the type of assignment h= ere,
> as=C2=A0 in RFC 8152.

The template in section 9.1.1 has the different policies for th= e
different integer ranges, under the 'Claim Key' section.=C2=A0 Kath= leen
(IIRC) already noted that this should probably be repeated in the
introductory part of section 9.1 as well, and that will be done
before the document is sent to the IESG.

-Benjamin

--001a11479b36f9caec05662eaf59-- From nobody Tue Feb 27 06:54:49 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A680512DA09; Tue, 27 Feb 2018 06:54:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2U_T5oVYRdBk; Tue, 27 Feb 2018 06:54:36 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 197AF12DA13; Tue, 27 Feb 2018 06:54:30 -0800 (PST) X-AuditID: 1209190c-4f3ff700000016ae-44-5a957125a6f0 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 68.31.05806.521759A5; Tue, 27 Feb 2018 09:54:29 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w1REsSLX004323; Tue, 27 Feb 2018 09:54:29 -0500 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w1REsOlw031981 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 27 Feb 2018 09:54:26 -0500 Date: Tue, 27 Feb 2018 08:54:24 -0600 From: Benjamin Kaduk To: Dan Romascanu Cc: Jim Schaad , gen-art , draft-ietf-ace-cbor-web-token.all@ietf.org, ietf , ace@ietf.org Message-ID: <20180227145424.GV50954@kduck.kaduk.org> References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupnleLIzCtJLcpLzFFi42IR4hTV1lUtnBplsH+HscX3bz3MFlt3P2a1 aHysZXH11WcWi9XTv7NZPNs4n8WBzWPjnOlsHjtn3WX3WLLkJ1MAcxSXTUpqTmZZapG+XQJX xoF5x5gKFnBULLt6j7GBcTtbFyMnh4SAicS6V2+Zuhi5OIQEFjNJfPo/jxnC2cgo0b3lGBNI lZDAVSaJ092mIDaLgKrExVcgRZwcbAIqEg3dl8FsEQE1iW2PX4NNYhZYyigxd+82sISwgK9E y5J+1i5GDg5eoHU/F6tCLNjMJNHQ+pwVpIZXQFDi5MwnLCA2s4CWxI1/L5lA6pkFpCWW/+MA CXMKBEr03OoHu0dUQFlib98h9gmMArOQdM9C0j0LoXsBI/MqRtmU3Crd3MTMnOLUZN3i5MS8 vNQiXUO93MwSvdSU0k2M4LCW5NnBeOaN1yFGAQ5GJR7ejOypUUKsiWXFlbmHGCU5mJREeeNl gUJ8SfkplRmJxRnxRaU5qcWHGCU4mJVEeFcunhwlxJuSWFmVWpQPk5LmYFES53U30Y4SEkhP LEnNTk0tSC2CycpwcChJ8F4pABoqWJSanlqRlplTgpBm4uAEGc4DNHwfSA1vcUFibnFmOkT+ FKMux40Xr9uYhVjy8vNSpcR5H+QDFQmAFGWU5sHNAaUjiez9Na8YxYHeEuZdCTKKB5jK4Ca9 AlrCBLTkyOcpIEtKEhFSUg2MS4J3XTc/mvEoauWn5srVUj0vxJSm3bj7oTVml+U1Tmmm/ba2 v0z2SDV91d5fu/xbacc3Bk7fOVM/lmo/2rj848JTwUIX01eFPDgb0X37+zchn57aDJUfwQx5 0v/Lpm1YoWrSOEfmyb+HiXv3nZ8qqTJZ73+9K7vbQv97M56FfMkTulPF/u50gxJLcUaioRZz UXEiAE8knUkiAwAA Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 14:54:39 -0000 On Tue, Feb 27, 2018 at 11:59:50AM +0200, Dan Romascanu wrote: > Hi, > > See also my other notes. > > I believe that what the document tries to say is: > > Register R is divided into four different ranges R1, R2, R3, R4 (defining > the value limits may be useful) > > Values in range R1 are allocated according to policy P1 in the case that ... > Values in range R2 are allocated according to policy P2 in the case that ... > Values in range R3 are allocated according to policy P3 in the case that ... > Values in range R4 are allocated according to policy P4 in the case that ... > > But it doesn't say it. Mentioning four concurrent policies for the same > registry without separation of values range, and without providing clear > instructions when each policy is recommended to be used, seems confusing to > me, and may be confusing for users of this document in the future. I agree, and such a change is slated to be in the next rev of the document. Sorry for spending so much text to be in violent agreement... -Ben From nobody Tue Feb 27 09:54:11 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93C96126CD6; Tue, 27 Feb 2018 09:53:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.909 X-Spam-Level: X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G2NApEuqk_x2; Tue, 27 Feb 2018 09:53:56 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE720120727; Tue, 27 Feb 2018 09:53:55 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 27 Feb 2018 09:51:42 -0800 From: Jim Schaad To: 'Dan Romascanu' , 'Benjamin Kaduk' CC: 'gen-art' , , 'ietf' , References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> In-Reply-To: Date: Tue, 27 Feb 2018 09:53:24 -0800 Message-ID: <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0288_01D3AFB0.D15CEF70" X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQFwM0g/CEx2cEygtLHnG1KjSGnjDwJPOi8kAfvAzWwBSk2I/AHosYLBpEOQcjA= X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 17:53:59 -0000 ------=_NextPart_000_0288_01D3AFB0.D15CEF70 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Integer values between -256 and 255 and strings of length 1 are = designated as Standards Track Required. =20 Integer values from -65536 to 65535 and strings of length 2 are = designated as Specification Required. =20 Integer values of greater than 65535 and strings of length greater than = 2 are designated as Expert Review. =20 =20 Integer values less than -65536 are marked as Private Use. =20 So that says what IANA policy is to be used for each of the different = items. This defines the policies and the ranges for those policies. =20 There is not anything that is making a distinction on what the criteria = to be used by the DE in the document which is separate, but I = don=E2=80=99t think that is needed. This is why they are DEs. =20 I still don=E2=80=99t see what you think is missing. =20 Jim =20 =20 From: Dan Romascanu [mailto:dromasca@gmail.com]=20 Sent: Tuesday, February 27, 2018 2:00 AM To: Benjamin Kaduk Cc: Jim Schaad ; gen-art ; = draft-ietf-ace-cbor-web-token.all@ietf.org; ietf ; = ace@ietf.org Subject: Re: [Ace] Genart telechat review of = draft-ietf-ace-cbor-web-token-12 =20 Hi, See also my other notes.=20 I believe that what the document tries to say is:=20 Register R is divided into four different ranges R1, R2, R3, R4 = (defining the value limits may be useful) Values in range R1 are allocated according to policy P1 in the case that = ... Values in range R2 are allocated according to policy P2 in the case that = ... Values in range R3 are allocated according to policy P3 in the case that = ... Values in range R4 are allocated according to policy P4 in the case that = ... But it doesn't say it. Mentioning four concurrent policies for the same = registry without separation of values range, and without providing clear = instructions when each policy is recommended to be used, seems confusing = to me, and may be confusing for users of this document in the future.=20 Regards, Dan =20 On Tue, Feb 27, 2018 at 5:40 AM, Benjamin Kaduk > wrote: On Mon, Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote: > Hi Jim, > > Thank you for your answer and for addressing my comments. > > On item #2: > > > > On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad > wrote: > > > > > > > > -----Original Message----- > > > From: Dan Romascanu [mailto:dromasca@gmail.com = ] > > > > > > > ... > > > > > > > 2. I am a little confused by the definition of policies in Section = 9.1: > > > > > > Depending upon the values being requested, registration = requests are > > > evaluated on a Standards Track Required, Specification = Required, > > > Expert Review, or Private Use basis [RFC8126] after a = three-week > > > review period on the cwt-reg-review@ietf.org = mailing list, on the > > > advice of one or more Designated Experts. > > > > > > How does this work? The request is forwarded to the designated = expert, > > > he/she make a recommendation concerning the policy on the mail = list, and > > > depending on the feedback received a policy is selected? Who = establishes > > > consensus? > > > > > > Frankly, I wonder if this can work at all. Are there other = examples of > > four > > > different policies for the same registry, applied on a = case-to-case > > basis? > > > > This is the same approach that is being used for the COSE = registries. As > > an example, you can look at https://www.iana.org/ > > assignments/cose/cose.xhtml#algorithms. > > > > Part of the issue about this is that the JOSE/JWT registries do have = the > > same different policies, but that differences are hidden from the = IANA > > registry. Since they allow for a URI to be used as the identifier = of a > > field, only the plain text versions are registered. Thus I can use = " > > http://augustcellars.com/JWT/My_Tag" as an identifier. Since for = CBOR > > the set of tag values is closed and does not have this escape (nor = would > > one want the length of the tag) it is necessary to have this break = down of > > tag fields. > > > > > > > > > This does not seem to be exactly the same approach. The COSE RFC 8152 > defines the registry policy in a different manner. There is only one = policy > that is proposed 'Expert Review' and than the Expert Review = Instructions > are used to define the cases when a Standards Track specification is > required. No such text exists in the current I-D. There is no = separation of > the values space in the registry according to the type of assignment = here, > as in RFC 8152. The template in section 9.1.1 has the different policies for the different integer ranges, under the 'Claim Key' section. Kathleen (IIRC) already noted that this should probably be repeated in the introductory part of section 9.1 as well, and that will be done before the document is sent to the IESG. -Benjamin =20 ------=_NextPart_000_0288_01D3AFB0.D15CEF70 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Integer values = between -256 and 255 and strings of length 1 are designated as Standards = Track Required.

 

Integer values from = -65536 to 65535 and strings of length 2 are designated as Specification = Required.

 

Integer values of = greater than 65535 and strings of length greater than 2 are designated = as Expert Review.=C2=A0

 

Integer values less = than -65536 are marked as Private Use.

 

So that says what = IANA policy is to be used for each of the different items.=C2=A0 This = defines the policies and the ranges for those = policies.

 

There is not = anything that is making a distinction on what the criteria to be used by = the DE in the document which is separate, but I don=E2=80=99t think that = is needed.=C2=A0 This is why they are DEs.

 

I still = don=E2=80=99t see what you think is missing.

 

Jim

 

 

From: Dan = Romascanu [mailto:dromasca@gmail.com]
Sent: Tuesday, February = 27, 2018 2:00 AM
To: Benjamin Kaduk = <kaduk@mit.edu>
Cc: Jim Schaad = <ietf@augustcellars.com>; gen-art <gen-art@ietf.org>; = draft-ietf-ace-cbor-web-token.all@ietf.org; ietf <ietf@ietf.org>; = ace@ietf.org
Subject: Re: [Ace] Genart telechat review of = draft-ietf-ace-cbor-web-token-12

 

Hi,

See also my other = notes.

I believe that what the document tries to = say is:

Register R is divided into four different = ranges R1, R2, R3, R4 (defining the value limits may be = useful)

Values in range R1 are allocated = according to policy P1 in the case that ...
Values in range R2 are = allocated according to policy P2 in the case that ...
Values in range = R3 are allocated according to policy P3 in the case that ...
Values = in range R4 are allocated according to policy P4 in the case that = ...

But it doesn't say it. Mentioning four = concurrent policies for the same registry without separation of values = range, and without providing clear instructions when each policy is = recommended to be used, seems confusing to me, and may be confusing for = users of this document in the future.

Regards,

Dan

 

On Tue, = Feb 27, 2018 at 5:40 AM, Benjamin Kaduk <kaduk@mit.edu> = wrote:

On Mon, Feb 26, 2018 at 11:19:04PM +0200, = Dan Romascanu wrote:
> Hi Jim,
>
> Thank you for your = answer and for addressing my comments.
>
> On item = #2:
>
>
>
> On Mon, Feb 26, 2018 at 10:12 PM, = Jim Schaad <ietf@augustcellars.com> = wrote:
>
> >
> >
> > > -----Original = Message-----
> > > From: Dan Romascanu [mailto:dromasca@gmail.com]
> > = >
> >
> > ...
>
> > >
> = > > 2. I am a little confused by the definition of policies in = Section 9.1:
> > >
> > >    Depending = upon the values being requested, registration requests are
> > = >    evaluated on a Standards Track Required, Specification = Required,
> > >    Expert Review, or Private Use = basis [RFC8126] after a three-week
> > >    review = period on the cwt-reg-review@ietf.org = mailing list, on the
> > >    advice of one or = more Designated Experts.
> > >
> > > How does = this work? The request is forwarded to the designated expert,
> = > > he/she make a recommendation concerning the policy on the mail = list, and
> > > depending on the feedback received a policy = is selected? Who establishes
> > > consensus?
> > = >
> > > Frankly, I wonder if this can work at all. Are = there other examples of
> > four
> > > different = policies for the same registry, applied on a case-to-case
> > = basis?
> >
> > This is the same approach that is being = used for the COSE registries.  As
> > an example, you can = look at https://www.iana.org/
> > = assignments/cose/cose.xhtml#algorithms.
> >
> > Part = of the issue about this is that the JOSE/JWT registries do have = the
> > same different policies, but that differences are = hidden from the IANA
> > registry.  Since they allow for a = URI to be used as the identifier of a
> > field, only the plain = text versions are registered.  Thus I can use "
> > = http://augustcellars.com/JWT/My_Tag" as an = identifier.  Since for CBOR
> > the set of tag values is = closed and does not have this escape (nor would
> > one want = the length of the tag) it is necessary to have this break down = of
> > tag fields.
> >
> >
> = >
> >
> This does not seem to be exactly the same = approach. The COSE RFC 8152
> defines the registry policy in a = different manner. There is only one policy
> that is proposed = 'Expert Review' and than the Expert Review Instructions
> are used = to define the cases when a Standards Track specification is
> = required. No such text exists in the current I-D. There is no separation = of
> the values space in the registry according to the type of = assignment here,
> as  in RFC = 8152.

The template in = section 9.1.1 has the different policies for the
different integer = ranges, under the 'Claim Key' section.  Kathleen
(IIRC) already = noted that this should probably be repeated in the
introductory part = of section 9.1 as well, and that will be done
before the document is = sent to the IESG.

-Benjamin

<= p class=3DMsoNormal> 

------=_NextPart_000_0288_01D3AFB0.D15CEF70-- From nobody Tue Feb 27 10:02:26 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C190C124E15; Tue, 27 Feb 2018 10:02:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.019 X-Spam-Level: X-Spam-Status: No, score=-2.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lJcfphTr9mPW; Tue, 27 Feb 2018 10:02:18 -0800 (PST) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0119.outbound.protection.outlook.com [104.47.33.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C9CF127201; Tue, 27 Feb 2018 10:02:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=fRrzwsaFq4lo06r7zzZ/RWfywPGWCEiApMjJ5aXHSw0=; b=avjuvV9nhC+W4sPZU5FnzFgdrkcuwbuzQJEHtpURYYbOVpZ4K/V4j3+Qdun9nLFBQuFPheB8wLz/19jvpTzHoOY3ciJt9oyVB2M8dvHH36c8BOBw/o5ypB3rg5UEgbCQkHNCKBbtjFyACLTsL7W8qNWBG1fyHXgLyTT7RrXD1mo= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0974.namprd21.prod.outlook.com (52.132.114.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.3; Tue, 27 Feb 2018 18:02:15 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Tue, 27 Feb 2018 18:02:15 +0000 From: Mike Jones To: Jim Schaad , 'Dan Romascanu' , 'Benjamin Kaduk' CC: 'gen-art' , "draft-ietf-ace-cbor-web-token.all@ietf.org" , 'ietf' , "ace@ietf.org" Thread-Topic: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 Thread-Index: AQHTrzRyo8Mp7FBA1UOtbTCoMqPdBaO3HdCAgAASogCAAGp5gIAAahUAgACEUACAAAEd4A== Date: Tue, 27 Feb 2018 18:02:15 +0000 Message-ID: References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> In-Reply-To: <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-27T18:02:13.0391749Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:3::175] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0974; 7:hXTr9H8mgbsdgZhUeSSYB8Pi4mN5rqM8A674vsF5oTHoh9oVwos8EP/xhj01DFNCq8ZkR16CJAKORlUThQ7M4XWH1Md5d/WxewiVSYCKFwiDaaHN+hqqu4p8MUE74vCrwJbwKfYenoWeGR/TAUVmMBFItS3zssB2K2liTBXng4XZHWtv6Oov/+14n8HrPhkOID7pG/6XLVoS58YXde4K/eKpA4si7UHoyOfx33bWkRXl0+ELgUv4hM/wxwFkHiN8 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 02ee8d10-f656-4863-865b-08d57e0c3be8 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB0974; x-ms-traffictypediagnostic: SN6PR2101MB0974: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(85827821059158)(100405760836317)(21748063052155)(240460790083961)(1591387915157); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3002001)(10201501046)(3231220)(944501198)(6055026)(61426038)(61427038)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:SN6PR2101MB0974; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0974; x-forefront-prvs: 05961EBAFC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(346002)(376002)(39380400002)(39860400002)(76104003)(54094003)(189003)(13464003)(199004)(14454004)(33656002)(86362001)(6116002)(68736007)(606006)(790700001)(345774005)(10290500003)(3660700001)(6306002)(25786009)(59450400001)(9686003)(102836004)(186003)(6506007)(6346003)(53546011)(105586002)(54896002)(236005)(6436002)(55016002)(966005)(53376002)(72206003)(22452003)(53936002)(2906002)(6246003)(478600001)(2171002)(10090500001)(97736004)(106356001)(39060400002)(3280700002)(8990500004)(99286004)(2950100002)(229853002)(8676002)(86612001)(7736002)(93886005)(74316002)(4326008)(5660300001)(5250100002)(2900100001)(81156014)(8936002)(76176011)(54906003)(7696005)(110136005)(81166006)(316002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0974; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: /dNgEAJYbgz6T5GsGSYwFgXVAVwNBPCBzaByofdjpXGVozYFDEFUlV4G4sMTYxx7A9vahSMwf01/g7rC14U45biQ/a+KPH942BMoT3P/OGrJWYgfwTl5a6lWqgHfPxNbzEDSrDb7pqTlv+EhoEeKwtaBFqEm3x9KGNreI544egw= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB09436C491513D7431A81FD0DF5C00SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 02ee8d10-f656-4863-865b-08d57e0c3be8 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2018 18:02:15.1314 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0974 Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 18:02:26 -0000 --_000_SN6PR2101MB09436C491513D7431A81FD0DF5C00SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBhZ3JlZSB3aXRoIEppbS4gIFRoaXMgaW5mb3JtYXRpb24gaXMgaW4gdGhlIHJlZ2lzdHJhdGlv biB0ZW1wbGF0ZSBhdCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1hY2Ut Y2Jvci13ZWItdG9rZW4tMTIjc2VjdGlvbi05LjEuMSwgYXMgZm9sbG93czoNCg0KDQoNCiAgIENs YWltIEtleToNCg0KICAgICAgQ0JPUiBtYXAga2V5IGZvciB0aGUgY2xhaW0uICBJbnRlZ2VyIHZh bHVlcyBiZXR3ZWVuIC0yNTYgYW5kIDI1NQ0KDQogICAgICBhbmQgc3RyaW5ncyBvZiBsZW5ndGgg MSBhcmUgZGVzaWduYXRlZCBhcyBTdGFuZGFyZHMgVHJhY2sNCg0KICAgICAgUmVxdWlyZWQuICBJ bnRlZ2VyIHZhbHVlcyBmcm9tIC02NTUzNiB0byA2NTUzNSBhbmQgc3RyaW5ncyBvZg0KDQogICAg ICBsZW5ndGggMiBhcmUgZGVzaWduYXRlZCBhcyBTcGVjaWZpY2F0aW9uIFJlcXVpcmVkLiAgSW50 ZWdlciB2YWx1ZXMNCg0KICAgICAgb2YgZ3JlYXRlciB0aGFuIDY1NTM1IGFuZCBzdHJpbmdzIG9m IGxlbmd0aCBncmVhdGVyIHRoYW4gMiBhcmUNCg0KICAgICAgZGVzaWduYXRlZCBhcyBFeHBlcnQg UmV2aWV3LiAgSW50ZWdlciB2YWx1ZXMgbGVzcyB0aGFuIC02NTUzNiBhcmUNCg0KICAgICAgbWFy a2VkIGFzIFByaXZhdGUgVXNlLg0KDQoNCk5vdGUgdGhhdCBJIGFscmVhZHkgdG9vayBhbiBhY3Rp b24gaXRlbSBiYXNlZCBvbiBLYXRobGVlbuKAmXMgQUQgcmV2aWV3IHRvIGFkZCBhIHJlZmVyZW5j ZSB0byB0aGlzIGluZm9ybWF0aW9uIGluIFNlY3Rpb24gOS4xIHdoZXJlIGl0IHRhbGtzIGFib3V0 IHRoZSBkaWZmZXJlbnQgcG9saWNpZXMgdXNlZCDigJMgdG8gYXZvaWQgYW55IHBvc3NpYmxlIGNv bmZ1c2lvbi4gIEkgd2lsbCBkbyB0aGlzIGVkaXQgYXQgdGhlIHNhbWUgdGltZSB3ZSBhZGRyZXNz IGFueSBvdGhlciBJRVRGIExhc3QgQ2FsbCBmZWVkYmFjay4NCg0KICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIENoZWVycywNCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAtLSBNaWtlDQoNCkZyb206IEppbSBTY2hhYWQgPGlldGZAYXVndXN0Y2VsbGFycy5jb20+ DQpTZW50OiBUdWVzZGF5LCBGZWJydWFyeSAyNywgMjAxOCA5OjUzIEFNDQpUbzogJ0RhbiBSb21h c2NhbnUnIDxkcm9tYXNjYUBnbWFpbC5jb20+OyAnQmVuamFtaW4gS2FkdWsnIDxrYWR1a0BtaXQu ZWR1Pg0KQ2M6ICdnZW4tYXJ0JyA8Z2VuLWFydEBpZXRmLm9yZz47IGRyYWZ0LWlldGYtYWNlLWNi b3Itd2ViLXRva2VuLmFsbEBpZXRmLm9yZzsgJ2lldGYnIDxpZXRmQGlldGYub3JnPjsgYWNlQGll dGYub3JnDQpTdWJqZWN0OiBSRTogW0FjZV0gR2VuYXJ0IHRlbGVjaGF0IHJldmlldyBvZiBkcmFm dC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMg0KDQpJbnRlZ2VyIHZhbHVlcyBiZXR3ZWVuIC0y NTYgYW5kIDI1NSBhbmQgc3RyaW5ncyBvZiBsZW5ndGggMSBhcmUgZGVzaWduYXRlZCBhcyBTdGFu ZGFyZHMgVHJhY2sgUmVxdWlyZWQuDQoNCkludGVnZXIgdmFsdWVzIGZyb20gLTY1NTM2IHRvIDY1 NTM1IGFuZCBzdHJpbmdzIG9mIGxlbmd0aCAyIGFyZSBkZXNpZ25hdGVkIGFzIFNwZWNpZmljYXRp b24gUmVxdWlyZWQuDQoNCkludGVnZXIgdmFsdWVzIG9mIGdyZWF0ZXIgdGhhbiA2NTUzNSBhbmQg c3RyaW5ncyBvZiBsZW5ndGggZ3JlYXRlciB0aGFuIDIgYXJlIGRlc2lnbmF0ZWQgYXMgRXhwZXJ0 IFJldmlldy4NCg0KSW50ZWdlciB2YWx1ZXMgbGVzcyB0aGFuIC02NTUzNiBhcmUgbWFya2VkIGFz IFByaXZhdGUgVXNlLg0KDQpTbyB0aGF0IHNheXMgd2hhdCBJQU5BIHBvbGljeSBpcyB0byBiZSB1 c2VkIGZvciBlYWNoIG9mIHRoZSBkaWZmZXJlbnQgaXRlbXMuICBUaGlzIGRlZmluZXMgdGhlIHBv bGljaWVzIGFuZCB0aGUgcmFuZ2VzIGZvciB0aG9zZSBwb2xpY2llcy4NCg0KVGhlcmUgaXMgbm90 IGFueXRoaW5nIHRoYXQgaXMgbWFraW5nIGEgZGlzdGluY3Rpb24gb24gd2hhdCB0aGUgY3JpdGVy aWEgdG8gYmUgdXNlZCBieSB0aGUgREUgaW4gdGhlIGRvY3VtZW50IHdoaWNoIGlzIHNlcGFyYXRl LCBidXQgSSBkb27igJl0IHRoaW5rIHRoYXQgaXMgbmVlZGVkLiAgVGhpcyBpcyB3aHkgdGhleSBh cmUgREVzLg0KDQpJIHN0aWxsIGRvbuKAmXQgc2VlIHdoYXQgeW91IHRoaW5rIGlzIG1pc3Npbmcu DQoNCkppbQ0KDQoNCkZyb206IERhbiBSb21hc2NhbnUgW21haWx0bzpkcm9tYXNjYUBnbWFpbC5j b21dDQpTZW50OiBUdWVzZGF5LCBGZWJydWFyeSAyNywgMjAxOCAyOjAwIEFNDQpUbzogQmVuamFt aW4gS2FkdWsgPGthZHVrQG1pdC5lZHU8bWFpbHRvOmthZHVrQG1pdC5lZHU+Pg0KQ2M6IEppbSBT Y2hhYWQgPGlldGZAYXVndXN0Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5j b20+PjsgZ2VuLWFydCA8Z2VuLWFydEBpZXRmLm9yZzxtYWlsdG86Z2VuLWFydEBpZXRmLm9yZz4+ OyBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0 LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLmFsbEBpZXRmLm9yZz47IGlldGYgPGlldGZAaWV0Zi5v cmc8bWFpbHRvOmlldGZAaWV0Zi5vcmc+PjsgYWNlQGlldGYub3JnPG1haWx0bzphY2VAaWV0Zi5v cmc+DQpTdWJqZWN0OiBSZTogW0FjZV0gR2VuYXJ0IHRlbGVjaGF0IHJldmlldyBvZiBkcmFmdC1p ZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMg0KDQpIaSwNClNlZSBhbHNvIG15IG90aGVyIG5vdGVz Lg0KSSBiZWxpZXZlIHRoYXQgd2hhdCB0aGUgZG9jdW1lbnQgdHJpZXMgdG8gc2F5IGlzOg0KUmVn aXN0ZXIgUiBpcyBkaXZpZGVkIGludG8gZm91ciBkaWZmZXJlbnQgcmFuZ2VzIFIxLCBSMiwgUjMs IFI0IChkZWZpbmluZyB0aGUgdmFsdWUgbGltaXRzIG1heSBiZSB1c2VmdWwpDQpWYWx1ZXMgaW4g cmFuZ2UgUjEgYXJlIGFsbG9jYXRlZCBhY2NvcmRpbmcgdG8gcG9saWN5IFAxIGluIHRoZSBjYXNl IHRoYXQgLi4uDQpWYWx1ZXMgaW4gcmFuZ2UgUjIgYXJlIGFsbG9jYXRlZCBhY2NvcmRpbmcgdG8g cG9saWN5IFAyIGluIHRoZSBjYXNlIHRoYXQgLi4uDQpWYWx1ZXMgaW4gcmFuZ2UgUjMgYXJlIGFs bG9jYXRlZCBhY2NvcmRpbmcgdG8gcG9saWN5IFAzIGluIHRoZSBjYXNlIHRoYXQgLi4uDQpWYWx1 ZXMgaW4gcmFuZ2UgUjQgYXJlIGFsbG9jYXRlZCBhY2NvcmRpbmcgdG8gcG9saWN5IFA0IGluIHRo ZSBjYXNlIHRoYXQgLi4uDQpCdXQgaXQgZG9lc24ndCBzYXkgaXQuIE1lbnRpb25pbmcgZm91ciBj b25jdXJyZW50IHBvbGljaWVzIGZvciB0aGUgc2FtZSByZWdpc3RyeSB3aXRob3V0IHNlcGFyYXRp b24gb2YgdmFsdWVzIHJhbmdlLCBhbmQgd2l0aG91dCBwcm92aWRpbmcgY2xlYXIgaW5zdHJ1Y3Rp b25zIHdoZW4gZWFjaCBwb2xpY3kgaXMgcmVjb21tZW5kZWQgdG8gYmUgdXNlZCwgc2VlbXMgY29u ZnVzaW5nIHRvIG1lLCBhbmQgbWF5IGJlIGNvbmZ1c2luZyBmb3IgdXNlcnMgb2YgdGhpcyBkb2N1 bWVudCBpbiB0aGUgZnV0dXJlLg0KUmVnYXJkcywNCkRhbg0KDQpPbiBUdWUsIEZlYiAyNywgMjAx OCBhdCA1OjQwIEFNLCBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdTxtYWlsdG86a2FkdWtA bWl0LmVkdT4+IHdyb3RlOg0KT24gTW9uLCBGZWIgMjYsIDIwMTggYXQgMTE6MTk6MDRQTSArMDIw MCwgRGFuIFJvbWFzY2FudSB3cm90ZToNCj4gSGkgSmltLA0KPg0KPiBUaGFuayB5b3UgZm9yIHlv dXIgYW5zd2VyIGFuZCBmb3IgYWRkcmVzc2luZyBteSBjb21tZW50cy4NCj4NCj4gT24gaXRlbSAj MjoNCj4NCj4NCj4NCj4gT24gTW9uLCBGZWIgMjYsIDIwMTggYXQgMTA6MTIgUE0sIEppbSBTY2hh YWQgPGlldGZAYXVndXN0Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+ PiB3cm90ZToNCj4NCj4gPg0KPiA+DQo+ID4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0K PiA+ID4gRnJvbTogRGFuIFJvbWFzY2FudSBbbWFpbHRvOmRyb21hc2NhQGdtYWlsLmNvbTxtYWls dG86ZHJvbWFzY2FAZ21haWwuY29tPl0NCj4gPiA+DQo+ID4NCj4gPiAuLi4NCj4NCj4gPiA+DQo+ ID4gPiAyLiBJIGFtIGEgbGl0dGxlIGNvbmZ1c2VkIGJ5IHRoZSBkZWZpbml0aW9uIG9mIHBvbGlj aWVzIGluIFNlY3Rpb24gOS4xOg0KPiA+ID4NCj4gPiA+ICAgIERlcGVuZGluZyB1cG9uIHRoZSB2 YWx1ZXMgYmVpbmcgcmVxdWVzdGVkLCByZWdpc3RyYXRpb24gcmVxdWVzdHMgYXJlDQo+ID4gPiAg ICBldmFsdWF0ZWQgb24gYSBTdGFuZGFyZHMgVHJhY2sgUmVxdWlyZWQsIFNwZWNpZmljYXRpb24g UmVxdWlyZWQsDQo+ID4gPiAgICBFeHBlcnQgUmV2aWV3LCBvciBQcml2YXRlIFVzZSBiYXNpcyBb UkZDODEyNl0gYWZ0ZXIgYSB0aHJlZS13ZWVrDQo+ID4gPiAgICByZXZpZXcgcGVyaW9kIG9uIHRo ZSBjd3QtcmVnLXJldmlld0BpZXRmLm9yZzxtYWlsdG86Y3d0LXJlZy1yZXZpZXdAaWV0Zi5vcmc+ IG1haWxpbmcgbGlzdCwgb24gdGhlDQo+ID4gPiAgICBhZHZpY2Ugb2Ygb25lIG9yIG1vcmUgRGVz aWduYXRlZCBFeHBlcnRzLg0KPiA+ID4NCj4gPiA+IEhvdyBkb2VzIHRoaXMgd29yaz8gVGhlIHJl cXVlc3QgaXMgZm9yd2FyZGVkIHRvIHRoZSBkZXNpZ25hdGVkIGV4cGVydCwNCj4gPiA+IGhlL3No ZSBtYWtlIGEgcmVjb21tZW5kYXRpb24gY29uY2VybmluZyB0aGUgcG9saWN5IG9uIHRoZSBtYWls IGxpc3QsIGFuZA0KPiA+ID4gZGVwZW5kaW5nIG9uIHRoZSBmZWVkYmFjayByZWNlaXZlZCBhIHBv bGljeSBpcyBzZWxlY3RlZD8gV2hvIGVzdGFibGlzaGVzDQo+ID4gPiBjb25zZW5zdXM/DQo+ID4g Pg0KPiA+ID4gRnJhbmtseSwgSSB3b25kZXIgaWYgdGhpcyBjYW4gd29yayBhdCBhbGwuIEFyZSB0 aGVyZSBvdGhlciBleGFtcGxlcyBvZg0KPiA+IGZvdXINCj4gPiA+IGRpZmZlcmVudCBwb2xpY2ll cyBmb3IgdGhlIHNhbWUgcmVnaXN0cnksIGFwcGxpZWQgb24gYSBjYXNlLXRvLWNhc2UNCj4gPiBi YXNpcz8NCj4gPg0KPiA+IFRoaXMgaXMgdGhlIHNhbWUgYXBwcm9hY2ggdGhhdCBpcyBiZWluZyB1 c2VkIGZvciB0aGUgQ09TRSByZWdpc3RyaWVzLiAgQXMNCj4gPiBhbiBleGFtcGxlLCB5b3UgY2Fu IGxvb2sgYXQgaHR0cHM6Ly93d3cuaWFuYS5vcmcvDQo+ID4gYXNzaWdubWVudHMvY29zZS9jb3Nl LnhodG1sI2FsZ29yaXRobXMuDQo+ID4NCj4gPiBQYXJ0IG9mIHRoZSBpc3N1ZSBhYm91dCB0aGlz IGlzIHRoYXQgdGhlIEpPU0UvSldUIHJlZ2lzdHJpZXMgZG8gaGF2ZSB0aGUNCj4gPiBzYW1lIGRp ZmZlcmVudCBwb2xpY2llcywgYnV0IHRoYXQgZGlmZmVyZW5jZXMgYXJlIGhpZGRlbiBmcm9tIHRo ZSBJQU5BDQo+ID4gcmVnaXN0cnkuICBTaW5jZSB0aGV5IGFsbG93IGZvciBhIFVSSSB0byBiZSB1 c2VkIGFzIHRoZSBpZGVudGlmaWVyIG9mIGENCj4gPiBmaWVsZCwgb25seSB0aGUgcGxhaW4gdGV4 dCB2ZXJzaW9ucyBhcmUgcmVnaXN0ZXJlZC4gIFRodXMgSSBjYW4gdXNlICINCj4gPiBodHRwOi8v YXVndXN0Y2VsbGFycy5jb20vSldUL015X1RhZyIgYXMgYW4gaWRlbnRpZmllci4gIFNpbmNlIGZv ciBDQk9SDQo+ID4gdGhlIHNldCBvZiB0YWcgdmFsdWVzIGlzIGNsb3NlZCBhbmQgZG9lcyBub3Qg aGF2ZSB0aGlzIGVzY2FwZSAobm9yIHdvdWxkDQo+ID4gb25lIHdhbnQgdGhlIGxlbmd0aCBvZiB0 aGUgdGFnKSBpdCBpcyBuZWNlc3NhcnkgdG8gaGF2ZSB0aGlzIGJyZWFrIGRvd24gb2YNCj4gPiB0 YWcgZmllbGRzLg0KPiA+DQo+ID4NCj4gPg0KPiA+DQo+IFRoaXMgZG9lcyBub3Qgc2VlbSB0byBi ZSBleGFjdGx5IHRoZSBzYW1lIGFwcHJvYWNoLiBUaGUgQ09TRSBSRkMgODE1Mg0KPiBkZWZpbmVz IHRoZSByZWdpc3RyeSBwb2xpY3kgaW4gYSBkaWZmZXJlbnQgbWFubmVyLiBUaGVyZSBpcyBvbmx5 IG9uZSBwb2xpY3kNCj4gdGhhdCBpcyBwcm9wb3NlZCAnRXhwZXJ0IFJldmlldycgYW5kIHRoYW4g dGhlIEV4cGVydCBSZXZpZXcgSW5zdHJ1Y3Rpb25zDQo+IGFyZSB1c2VkIHRvIGRlZmluZSB0aGUg Y2FzZXMgd2hlbiBhIFN0YW5kYXJkcyBUcmFjayBzcGVjaWZpY2F0aW9uIGlzDQo+IHJlcXVpcmVk LiBObyBzdWNoIHRleHQgZXhpc3RzIGluIHRoZSBjdXJyZW50IEktRC4gVGhlcmUgaXMgbm8gc2Vw YXJhdGlvbiBvZg0KPiB0aGUgdmFsdWVzIHNwYWNlIGluIHRoZSByZWdpc3RyeSBhY2NvcmRpbmcg dG8gdGhlIHR5cGUgb2YgYXNzaWdubWVudCBoZXJlLA0KPiBhcyAgaW4gUkZDIDgxNTIuDQpUaGUg dGVtcGxhdGUgaW4gc2VjdGlvbiA5LjEuMSBoYXMgdGhlIGRpZmZlcmVudCBwb2xpY2llcyBmb3Ig dGhlDQpkaWZmZXJlbnQgaW50ZWdlciByYW5nZXMsIHVuZGVyIHRoZSAnQ2xhaW0gS2V5JyBzZWN0 aW9uLiAgS2F0aGxlZW4NCihJSVJDKSBhbHJlYWR5IG5vdGVkIHRoYXQgdGhpcyBzaG91bGQgcHJv YmFibHkgYmUgcmVwZWF0ZWQgaW4gdGhlDQppbnRyb2R1Y3RvcnkgcGFydCBvZiBzZWN0aW9uIDku MSBhcyB3ZWxsLCBhbmQgdGhhdCB3aWxsIGJlIGRvbmUNCmJlZm9yZSB0aGUgZG9jdW1lbnQgaXMg c2VudCB0byB0aGUgSUVTRy4NCg0KLUJlbmphbWluDQoNCg== --_000_SN6PR2101MB09436C491513D7431A81FD0DF5C00SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb1BsYWluVGV4dCwgbGkuTXNv UGxhaW5UZXh0LCBkaXYuTXNvUGxhaW5UZXh0DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIg TmV3Ijt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1M IFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30N CnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxl LW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdo dDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0K CWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0K c3Bhbi5ob2VuemINCgl7bXNvLXN0eWxlLW5hbWU6aG9lbnpiO30NCnNwYW4uRW1haWxTdHlsZTIx DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjMNCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7DQoJY29sb3I6IzAwMjA2MDt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5h bWU6IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHls ZS1saW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNp emU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCglt YXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdl OldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2Vu ZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVk aXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+ PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1 ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPkkgYWdyZWUgd2l0aCBK aW0uJm5ic3A7IDwvc3Bhbj5UaGlzIGluZm9ybWF0aW9uIGlzIGluIHRoZSByZWdpc3RyYXRpb24g dGVtcGxhdGUgYXQNCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1p ZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMiNzZWN0aW9uLTkuMS4xIj4NCmh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMiNzZWN0aW9uLTku MS4xPC9hPiwgYXMgZm9sbG93czo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7 Jm5ic3A7IENsYWltIEtleTo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBDQk9SIG1hcCBrZXkgZm9yIHRoZSBjbGFp bS4mbmJzcDsgSW50ZWdlciB2YWx1ZXMgYmV0d2VlbiAtMjU2IGFuZCAyNTU8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBhbmQgc3RyaW5ncyBvZiBsZW5ndGggMSBhcmUgZGVzaWduYXRlZCBhcyBTdGFuZGFyZHMgVHJh Y2s8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBSZXF1aXJlZC4mbmJzcDsgSW50ZWdlciB2YWx1ZXMgZnJvbSAtNjU1 MzYgdG8gNjU1MzUgYW5kIHN0cmluZ3Mgb2Y8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBsZW5ndGggMiBhcmUgZGVz aWduYXRlZCBhcyBTcGVjaWZpY2F0aW9uIFJlcXVpcmVkLiZuYnNwOyBJbnRlZ2VyIHZhbHVlczxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IG9mIGdyZWF0ZXIgdGhhbiA2NTUzNSBhbmQgc3RyaW5ncyBvZiBsZW5ndGgg Z3JlYXRlciB0aGFuIDIgYXJlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVzaWduYXRlZCBhcyBFeHBlcnQgUmV2 aWV3LiZuYnNwOyBJbnRlZ2VyIHZhbHVlcyBsZXNzIHRoYW4gLTY1NTM2IGFyZTxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IG1hcmtlZCBhcyBQcml2YXRlIFVzZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPk5vdGUgdGhhdCBJIGFscmVhZHkgdG9vayBhbiBhY3Rp b24gaXRlbSBiYXNlZCBvbiBLYXRobGVlbuKAmXMgQUQgcmV2aWV3IHRvIGFkZCBhIHJlZmVyZW5j ZSB0byB0aGlzIGluZm9ybWF0aW9uIGluIFNlY3Rpb24gOS4xIHdoZXJlIGl0IHRhbGtzIGFib3V0 IHRoZSBkaWZmZXJlbnQgcG9saWNpZXMgdXNlZCDigJMgdG8gYXZvaWQgYW55IHBvc3NpYmxlIGNv bmZ1c2lvbi4mbmJzcDsNCiBJIHdpbGwgZG8gdGhpcyBlZGl0IGF0IHRoZSBzYW1lIHRpbWUgd2Ug YWRkcmVzcyBhbnkgb3RoZXIgSUVURiBMYXN0IENhbGwgZmVlZGJhY2suPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgQ2hlZXJzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUx IDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGI+RnJvbTo8L2I+IEppbSBTY2hhYWQgJmx0O2lldGZAYXVndXN0Y2VsbGFycy5jb20mZ3Q7IDxi cj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBGZWJydWFyeSAyNywgMjAxOCA5OjUzIEFNPGJyPg0K PGI+VG86PC9iPiAnRGFuIFJvbWFzY2FudScgJmx0O2Ryb21hc2NhQGdtYWlsLmNvbSZndDs7ICdC ZW5qYW1pbiBLYWR1aycgJmx0O2thZHVrQG1pdC5lZHUmZ3Q7PGJyPg0KPGI+Q2M6PC9iPiAnZ2Vu LWFydCcgJmx0O2dlbi1hcnRAaWV0Zi5vcmcmZ3Q7OyBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10 b2tlbi5hbGxAaWV0Zi5vcmc7ICdpZXRmJyAmbHQ7aWV0ZkBpZXRmLm9yZyZndDs7IGFjZUBpZXRm Lm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSRTogW0FjZV0gR2VuYXJ0IHRlbGVjaGF0IHJldmll dyBvZiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkludGVnZXIgdmFsdWVzIGJldHdlZW4gLTI1 NiBhbmQgMjU1IGFuZCBzdHJpbmdzIG9mIGxlbmd0aCAxIGFyZSBkZXNpZ25hdGVkIGFzIFN0YW5k YXJkcyBUcmFjayBSZXF1aXJlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPkludGVnZXIgdmFsdWVzIGZyb20gLTY1NTM2IHRvIDY1NTM1 IGFuZCBzdHJpbmdzIG9mIGxlbmd0aCAyIGFyZSBkZXNpZ25hdGVkIGFzIFNwZWNpZmljYXRpb24g UmVxdWlyZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij5JbnRlZ2VyIHZhbHVlcyBvZiBncmVhdGVyIHRoYW4gNjU1MzUgYW5kIHN0cmlu Z3Mgb2YgbGVuZ3RoIGdyZWF0ZXIgdGhhbiAyIGFyZSBkZXNpZ25hdGVkIGFzIEV4cGVydCBSZXZp ZXcuJm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPkludGVnZXIgdmFsdWVzIGxlc3MgdGhhbiAtNjU1MzYgYXJlIG1hcmtlZCBh cyBQcml2YXRlIFVzZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPlNvIHRoYXQgc2F5cyB3aGF0IElBTkEgcG9saWN5IGlzIHRvIGJlIHVz ZWQgZm9yIGVhY2ggb2YgdGhlIGRpZmZlcmVudCBpdGVtcy4mbmJzcDsgVGhpcyBkZWZpbmVzIHRo ZSBwb2xpY2llcyBhbmQgdGhlIHJhbmdlcyBmb3IgdGhvc2UgcG9saWNpZXMuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5UaGVyZSBpcyBu b3QgYW55dGhpbmcgdGhhdCBpcyBtYWtpbmcgYSBkaXN0aW5jdGlvbiBvbiB3aGF0IHRoZSBjcml0 ZXJpYSB0byBiZSB1c2VkIGJ5IHRoZSBERSBpbiB0aGUgZG9jdW1lbnQgd2hpY2ggaXMgc2VwYXJh dGUsIGJ1dCBJIGRvbuKAmXQgdGhpbmsgdGhhdCBpcyBuZWVkZWQuJm5ic3A7IFRoaXMgaXMgd2h5 IHRoZXkNCiBhcmUgREVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBzdGlsbCBk b27igJl0IHNlZSB3aGF0IHlvdSB0aGluayBpcyBtaXNzaW5nLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5KaW08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRp bmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBEYW4gUm9tYXNjYW51IFs8YSBocmVm PSJtYWlsdG86ZHJvbWFzY2FAZ21haWwuY29tIj5tYWlsdG86ZHJvbWFzY2FAZ21haWwuY29tPC9h Pl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBGZWJydWFyeSAyNywgMjAxOCAyOjAwIEFN PGJyPg0KPGI+VG86PC9iPiBCZW5qYW1pbiBLYWR1ayAmbHQ7PGEgaHJlZj0ibWFpbHRvOmthZHVr QG1pdC5lZHUiPmthZHVrQG1pdC5lZHU8L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gSmltIFNjaGFh ZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iPmlldGZAYXVndXN0 Y2VsbGFycy5jb208L2E+Jmd0OzsgZ2VuLWFydCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmdlbi1hcnRA aWV0Zi5vcmciPmdlbi1hcnRAaWV0Zi5vcmc8L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzpkcmFm dC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0Zi5vcmciPmRyYWZ0LWlldGYtYWNlLWNi b3Itd2ViLXRva2VuLmFsbEBpZXRmLm9yZzwvYT47IGlldGYgJmx0OzxhIGhyZWY9Im1haWx0bzpp ZXRmQGlldGYub3JnIj5pZXRmQGlldGYub3JnPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86YWNl QGlldGYub3JnIj5hY2VAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbQWNl XSBHZW5hcnQgdGVsZWNoYXQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2Vu LTEyPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+SGksPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+U2VlIGFsc28gbXkgb3RoZXIgbm90ZXMuIDxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTox Mi4wcHQiPkkgYmVsaWV2ZSB0aGF0IHdoYXQgdGhlIGRvY3VtZW50IHRyaWVzIHRvIHNheSBpczoN CjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWJvdHRvbToxMi4wcHQiPlJlZ2lzdGVyIFIgaXMgZGl2aWRlZCBpbnRvIGZvdXIgZGlmZmVy ZW50IHJhbmdlcyBSMSwgUjIsIFIzLCBSNCAoZGVmaW5pbmcgdGhlIHZhbHVlIGxpbWl0cyBtYXkg YmUgdXNlZnVsKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPlZhbHVlcyBpbiByYW5nZSBSMSBhcmUgYWxsb2Nh dGVkIGFjY29yZGluZyB0byBwb2xpY3kgUDEgaW4gdGhlIGNhc2UgdGhhdCAuLi48YnI+DQpWYWx1 ZXMgaW4gcmFuZ2UgUjIgYXJlIGFsbG9jYXRlZCBhY2NvcmRpbmcgdG8gcG9saWN5IFAyIGluIHRo ZSBjYXNlIHRoYXQgLi4uPGJyPg0KVmFsdWVzIGluIHJhbmdlIFIzIGFyZSBhbGxvY2F0ZWQgYWNj b3JkaW5nIHRvIHBvbGljeSBQMyBpbiB0aGUgY2FzZSB0aGF0IC4uLjxicj4NClZhbHVlcyBpbiBy YW5nZSBSNCBhcmUgYWxsb2NhdGVkIGFjY29yZGluZyB0byBwb2xpY3kgUDQgaW4gdGhlIGNhc2Ug dGhhdCAuLi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5CdXQgaXQgZG9lc24ndCBzYXkgaXQuIE1lbnRpb25p bmcgZm91ciBjb25jdXJyZW50IHBvbGljaWVzIGZvciB0aGUgc2FtZSByZWdpc3RyeSB3aXRob3V0 IHNlcGFyYXRpb24gb2YgdmFsdWVzIHJhbmdlLCBhbmQgd2l0aG91dCBwcm92aWRpbmcgY2xlYXIg aW5zdHJ1Y3Rpb25zIHdoZW4gZWFjaCBwb2xpY3kgaXMgcmVjb21tZW5kZWQgdG8gYmUgdXNlZCwg c2VlbXMNCiBjb25mdXNpbmcgdG8gbWUsIGFuZCBtYXkgYmUgY29uZnVzaW5nIGZvciB1c2VycyBv ZiB0aGlzIGRvY3VtZW50IGluIHRoZSBmdXR1cmUuIDxvOnA+DQo8L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+UmVnYXJk cyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1ib3R0b206MTIuMHB0Ij5EYW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPk9uIFR1ZSwgRmViIDI3LCAyMDE4IGF0IDU6NDAgQU0sIEJlbmphbWluIEth ZHVrICZsdDs8YSBocmVmPSJtYWlsdG86a2FkdWtAbWl0LmVkdSIgdGFyZ2V0PSJfYmxhbmsiPmth ZHVrQG1pdC5lZHU8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6 MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJn aW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPk9uIE1vbiwgRmViIDI2 LCAyMDE4IGF0IDExOjE5OjA0UE0gJiM0MzswMjAwLCBEYW4gUm9tYXNjYW51IHdyb3RlOjxicj4N CiZndDsgSGkgSmltLDxicj4NCiZndDs8YnI+DQomZ3Q7IFRoYW5rIHlvdSBmb3IgeW91ciBhbnN3 ZXIgYW5kIGZvciBhZGRyZXNzaW5nIG15IGNvbW1lbnRzLjxicj4NCiZndDs8YnI+DQomZ3Q7IE9u IGl0ZW0gIzI6PGJyPg0KJmd0Ozxicj4NCiZndDs8YnI+DQomZ3Q7PGJyPg0KJmd0OyBPbiBNb24s IEZlYiAyNiwgMjAxOCBhdCAxMDoxMiBQTSwgSmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRv OmlldGZAYXVndXN0Y2VsbGFycy5jb20iPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0OyB3 cm90ZTo8YnI+DQomZ3Q7PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAm Z3Q7ICZndDsgLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS08YnI+DQomZ3Q7ICZndDsgJmd0OyBG cm9tOiBEYW4gUm9tYXNjYW51IFttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmRyb21hc2NhQGdtYWls LmNvbSI+ZHJvbWFzY2FAZ21haWwuY29tPC9hPl08YnI+DQomZ3Q7ICZndDsgJmd0Ozxicj4NCiZn dDsgJmd0Ozxicj4NCiZndDsgJmd0OyAuLi48YnI+DQomZ3Q7PGJyPg0KJmd0OyAmZ3Q7ICZndDs8 YnI+DQomZ3Q7ICZndDsgJmd0OyAyLiBJIGFtIGEgbGl0dGxlIGNvbmZ1c2VkIGJ5IHRoZSBkZWZp bml0aW9uIG9mIHBvbGljaWVzIGluIFNlY3Rpb24gOS4xOjxicj4NCiZndDsgJmd0OyAmZ3Q7PGJy Pg0KJmd0OyAmZ3Q7ICZndDsmbmJzcDsgJm5ic3A7IERlcGVuZGluZyB1cG9uIHRoZSB2YWx1ZXMg YmVpbmcgcmVxdWVzdGVkLCByZWdpc3RyYXRpb24gcmVxdWVzdHMgYXJlPGJyPg0KJmd0OyAmZ3Q7 ICZndDsmbmJzcDsgJm5ic3A7IGV2YWx1YXRlZCBvbiBhIFN0YW5kYXJkcyBUcmFjayBSZXF1aXJl ZCwgU3BlY2lmaWNhdGlvbiBSZXF1aXJlZCw8YnI+DQomZ3Q7ICZndDsgJmd0OyZuYnNwOyAmbmJz cDsgRXhwZXJ0IFJldmlldywgb3IgUHJpdmF0ZSBVc2UgYmFzaXMgW1JGQzgxMjZdIGFmdGVyIGEg dGhyZWUtd2Vlazxicj4NCiZndDsgJmd0OyAmZ3Q7Jm5ic3A7ICZuYnNwOyByZXZpZXcgcGVyaW9k IG9uIHRoZSA8YSBocmVmPSJtYWlsdG86Y3d0LXJlZy1yZXZpZXdAaWV0Zi5vcmciPmN3dC1yZWct cmV2aWV3QGlldGYub3JnPC9hPiBtYWlsaW5nIGxpc3QsIG9uIHRoZTxicj4NCiZndDsgJmd0OyAm Z3Q7Jm5ic3A7ICZuYnNwOyBhZHZpY2Ugb2Ygb25lIG9yIG1vcmUgRGVzaWduYXRlZCBFeHBlcnRz Ljxicj4NCiZndDsgJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7ICZndDsgSG93IGRvZXMgdGhpcyB3 b3JrPyBUaGUgcmVxdWVzdCBpcyBmb3J3YXJkZWQgdG8gdGhlIGRlc2lnbmF0ZWQgZXhwZXJ0LDxi cj4NCiZndDsgJmd0OyAmZ3Q7IGhlL3NoZSBtYWtlIGEgcmVjb21tZW5kYXRpb24gY29uY2Vybmlu ZyB0aGUgcG9saWN5IG9uIHRoZSBtYWlsIGxpc3QsIGFuZDxicj4NCiZndDsgJmd0OyAmZ3Q7IGRl cGVuZGluZyBvbiB0aGUgZmVlZGJhY2sgcmVjZWl2ZWQgYSBwb2xpY3kgaXMgc2VsZWN0ZWQ/IFdo byBlc3RhYmxpc2hlczxicj4NCiZndDsgJmd0OyAmZ3Q7IGNvbnNlbnN1cz88YnI+DQomZ3Q7ICZn dDsgJmd0Ozxicj4NCiZndDsgJmd0OyAmZ3Q7IEZyYW5rbHksIEkgd29uZGVyIGlmIHRoaXMgY2Fu IHdvcmsgYXQgYWxsLiBBcmUgdGhlcmUgb3RoZXIgZXhhbXBsZXMgb2Y8YnI+DQomZ3Q7ICZndDsg Zm91cjxicj4NCiZndDsgJmd0OyAmZ3Q7IGRpZmZlcmVudCBwb2xpY2llcyBmb3IgdGhlIHNhbWUg cmVnaXN0cnksIGFwcGxpZWQgb24gYSBjYXNlLXRvLWNhc2U8YnI+DQomZ3Q7ICZndDsgYmFzaXM/ PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7IFRoaXMgaXMgdGhlIHNhbWUgYXBwcm9hY2gg dGhhdCBpcyBiZWluZyB1c2VkIGZvciB0aGUgQ09TRSByZWdpc3RyaWVzLiZuYnNwOyBBczxicj4N CiZndDsgJmd0OyBhbiBleGFtcGxlLCB5b3UgY2FuIGxvb2sgYXQgPGEgaHJlZj0iaHR0cHM6Ly93 d3cuaWFuYS5vcmcvIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWFuYS5vcmcvPC9hPjxi cj4NCiZndDsgJmd0OyBhc3NpZ25tZW50cy9jb3NlL2Nvc2UueGh0bWwjYWxnb3JpdGhtcy48YnI+ DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgUGFydCBvZiB0aGUgaXNzdWUgYWJvdXQgdGhpcyBp cyB0aGF0IHRoZSBKT1NFL0pXVCByZWdpc3RyaWVzIGRvIGhhdmUgdGhlPGJyPg0KJmd0OyAmZ3Q7 IHNhbWUgZGlmZmVyZW50IHBvbGljaWVzLCBidXQgdGhhdCBkaWZmZXJlbmNlcyBhcmUgaGlkZGVu IGZyb20gdGhlIElBTkE8YnI+DQomZ3Q7ICZndDsgcmVnaXN0cnkuJm5ic3A7IFNpbmNlIHRoZXkg YWxsb3cgZm9yIGEgVVJJIHRvIGJlIHVzZWQgYXMgdGhlIGlkZW50aWZpZXIgb2YgYTxicj4NCiZn dDsgJmd0OyBmaWVsZCwgb25seSB0aGUgcGxhaW4gdGV4dCB2ZXJzaW9ucyBhcmUgcmVnaXN0ZXJl ZC4mbmJzcDsgVGh1cyBJIGNhbiB1c2UgJnF1b3Q7PGJyPg0KJmd0OyAmZ3Q7IDxhIGhyZWY9Imh0 dHA6Ly9hdWd1c3RjZWxsYXJzLmNvbS9KV1QvTXlfVGFnIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDov L2F1Z3VzdGNlbGxhcnMuY29tL0pXVC9NeV9UYWc8L2E+JnF1b3Q7IGFzIGFuIGlkZW50aWZpZXIu Jm5ic3A7IFNpbmNlIGZvciBDQk9SPGJyPg0KJmd0OyAmZ3Q7IHRoZSBzZXQgb2YgdGFnIHZhbHVl cyBpcyBjbG9zZWQgYW5kIGRvZXMgbm90IGhhdmUgdGhpcyBlc2NhcGUgKG5vciB3b3VsZDxicj4N CiZndDsgJmd0OyBvbmUgd2FudCB0aGUgbGVuZ3RoIG9mIHRoZSB0YWcpIGl0IGlzIG5lY2Vzc2Fy eSB0byBoYXZlIHRoaXMgYnJlYWsgZG93biBvZjxicj4NCiZndDsgJmd0OyB0YWcgZmllbGRzLjxi cj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0 Ozxicj4NCiZndDsgVGhpcyBkb2VzIG5vdCBzZWVtIHRvIGJlIGV4YWN0bHkgdGhlIHNhbWUgYXBw cm9hY2guIFRoZSBDT1NFIFJGQyA4MTUyPGJyPg0KJmd0OyBkZWZpbmVzIHRoZSByZWdpc3RyeSBw b2xpY3kgaW4gYSBkaWZmZXJlbnQgbWFubmVyLiBUaGVyZSBpcyBvbmx5IG9uZSBwb2xpY3k8YnI+ DQomZ3Q7IHRoYXQgaXMgcHJvcG9zZWQgJ0V4cGVydCBSZXZpZXcnIGFuZCB0aGFuIHRoZSBFeHBl cnQgUmV2aWV3IEluc3RydWN0aW9uczxicj4NCiZndDsgYXJlIHVzZWQgdG8gZGVmaW5lIHRoZSBj YXNlcyB3aGVuIGEgU3RhbmRhcmRzIFRyYWNrIHNwZWNpZmljYXRpb24gaXM8YnI+DQomZ3Q7IHJl cXVpcmVkLiBObyBzdWNoIHRleHQgZXhpc3RzIGluIHRoZSBjdXJyZW50IEktRC4gVGhlcmUgaXMg bm8gc2VwYXJhdGlvbiBvZjxicj4NCiZndDsgdGhlIHZhbHVlcyBzcGFjZSBpbiB0aGUgcmVnaXN0 cnkgYWNjb3JkaW5nIHRvIHRoZSB0eXBlIG9mIGFzc2lnbm1lbnQgaGVyZSw8YnI+DQomZ3Q7IGFz Jm5ic3A7IGluIFJGQyA4MTUyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlRoZSB0ZW1wbGF0ZSBpbiBzZWN0aW9uIDkuMS4xIGhhcyB0aGUgZGlm ZmVyZW50IHBvbGljaWVzIGZvciB0aGU8YnI+DQpkaWZmZXJlbnQgaW50ZWdlciByYW5nZXMsIHVu ZGVyIHRoZSAnQ2xhaW0gS2V5JyBzZWN0aW9uLiZuYnNwOyBLYXRobGVlbjxicj4NCihJSVJDKSBh bHJlYWR5IG5vdGVkIHRoYXQgdGhpcyBzaG91bGQgcHJvYmFibHkgYmUgcmVwZWF0ZWQgaW4gdGhl PGJyPg0KaW50cm9kdWN0b3J5IHBhcnQgb2Ygc2VjdGlvbiA5LjEgYXMgd2VsbCwgYW5kIHRoYXQg d2lsbCBiZSBkb25lPGJyPg0KYmVmb3JlIHRoZSBkb2N1bWVudCBpcyBzZW50IHRvIHRoZSBJRVNH Ljxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojODg4ODg4Ij48YnI+DQo8c3BhbiBjbGFzcz0iaG9l bnpiIj4tQmVuamFtaW48L3NwYW4+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3Rl Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_SN6PR2101MB09436C491513D7431A81FD0DF5C00SN6PR2101MB0943_-- From nobody Tue Feb 27 14:22:54 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C3F012E883; Tue, 27 Feb 2018 14:22:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aUZ2MMtkEulN; Tue, 27 Feb 2018 14:22:45 -0800 (PST) Received: from mail-qt0-x230.google.com (mail-qt0-x230.google.com [IPv6:2607:f8b0:400d:c0d::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B550E12E881; Tue, 27 Feb 2018 14:22:44 -0800 (PST) Received: by mail-qt0-x230.google.com with SMTP id n12so575558qtl.5; Tue, 27 Feb 2018 14:22:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=rHWYKdNNA2jGWKgcX6amAQmWBLh0rFJmcSA/mOTyAoQ=; b=djIaUpwSQSHbhvVVpYPFlVAEAZx6GNKUcponzAmkh2Q3Y27MBF5z6ixArjMxXTHSJb rDuwAp/BS7EM3O4ipkptwtfjoEMsAJX9S4lf8Hv1d2bzJ7ZxA3B96cgJl/8SOQ26g9yX CL1mZwBFPOFeU3IryjK2L47oZqoFKUvGlQqp2SC89kQFarIS5lMf6ESG1yqc31Krp9Ul MEANaZGLFf8wqKWPGicvHZD1nufziD4vXrOAOojNB5WgzaIKh13Sv5XS9lhH58tXmsT4 HFgLiqEB1gNWQeCnsuuwVsf2LOusySDLx2sTN9g2JNsqcEkujKCKb2FPqDhVnODiIEqd mDUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=rHWYKdNNA2jGWKgcX6amAQmWBLh0rFJmcSA/mOTyAoQ=; b=UEpqxWJfB8GT8fiNwgdH4hSfewIop3GrgqStG06/3ephYLNC1vI6QZTsiwoh1YvQ16 yFSrDtrhqk5TpkfX30wxxFqgQvKt1qIvvh8Uhd4D14I3vBsLTJ2nznK+7KaGvNKGSXIo DUu5peH8/sPLyDnqn53+7xO39audz2vkAhjUynX0VaEnB6yJIPcefcW0MWL6I1krzS+S /3qKVn7OzgPcePS2goA9tXa5cFIm6VVKkxp6StHO94ksSySgvFJX5yLba8KOVOKUhUEm 9BLAeOkr4i4HUc2Nwcc5es2GdaiNID+NykC4mYWdLSj5m+cAmRDjLwO9OSWehh/O9rki bmSA== X-Gm-Message-State: APf1xPBK06n0MH8s5qKhKErwyY23tLWGlj5ZanmHDZilRsoahsmshCXF Pne2rNnH69UJExKxD0foC2iUbY73/KePXudXWdE= X-Google-Smtp-Source: AG47ELvnUkeU0DzEOhI0uinxacG16SzAHz494MFuj6U47a/Ztykxzi9TB+iVQN/E2dnCUsZx9Ci1m4nN/+hLOIuIIOM= X-Received: by 10.237.44.225 with SMTP id g88mr26569503qtd.339.1519770163814; Tue, 27 Feb 2018 14:22:43 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.23.200 with HTTP; Tue, 27 Feb 2018 14:22:42 -0800 (PST) In-Reply-To: <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> From: Dan Romascanu Date: Wed, 28 Feb 2018 00:22:42 +0200 Message-ID: To: Jim Schaad Cc: Benjamin Kaduk , gen-art , draft-ietf-ace-cbor-web-token.all@ietf.org, ietf , ace@ietf.org Content-Type: multipart/alternative; boundary="94eb2c1256e2c127be05663910d1" Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 22:22:48 -0000 --94eb2c1256e2c127be05663910d1 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Jim, There are still a few problems: 1. The policies and mapping to the values ranges are hidden in the Claim Key field in the template (the comment also made by Kathleen) 2. At least one incorrect policy name is used: Standards Track Required - do you mean Standards Action (?) 3. You describe a process that involves a mail list (cwt-reg-review@ietf.or= g) and Experts Review. This description is not clear. Usually IANA approaches one DE for advice and expects the advice from the same DE in a reasonable period of time. If I understand correctly the process described in Section 9.1 one or more DEs make a recommendation and run it with the mail list. Who establishes the consensus on the mail list? Assuming the mail list disagrees with the DE recommendation, who decides? Regards, Dan On Tue, Feb 27, 2018 at 7:53 PM, Jim Schaad wrote: > Integer values between -256 and 255 and strings of length 1 are designate= d > as Standards Track Required. > > > > Integer values from -65536 to 65535 and strings of length 2 are designate= d > as Specification Required. > > > > Integer values of greater than 65535 and strings of length greater than 2 > are designated as Expert Review. > > > > Integer values less than -65536 are marked as Private Use. > > > > So that says what IANA policy is to be used for each of the different > items. This defines the policies and the ranges for those policies. > > > > There is not anything that is making a distinction on what the criteria t= o > be used by the DE in the document which is separate, but I don=E2=80=99t = think that > is needed. This is why they are DEs. > > > > I still don=E2=80=99t see what you think is missing. > > > > Jim > > > > > > *From:* Dan Romascanu [mailto:dromasca@gmail.com] > *Sent:* Tuesday, February 27, 2018 2:00 AM > *To:* Benjamin Kaduk > *Cc:* Jim Schaad ; gen-art ; > draft-ietf-ace-cbor-web-token.all@ietf.org; ietf ; > ace@ietf.org > *Subject:* Re: [Ace] Genart telechat review of > draft-ietf-ace-cbor-web-token-12 > > > > Hi, > > See also my other notes. > > I believe that what the document tries to say is: > > Register R is divided into four different ranges R1, R2, R3, R4 (defining > the value limits may be useful) > > Values in range R1 are allocated according to policy P1 in the case that > ... > Values in range R2 are allocated according to policy P2 in the case that > ... > Values in range R3 are allocated according to policy P3 in the case that > ... > Values in range R4 are allocated according to policy P4 in the case that > ... > > But it doesn't say it. Mentioning four concurrent policies for the same > registry without separation of values range, and without providing clear > instructions when each policy is recommended to be used, seems confusing = to > me, and may be confusing for users of this document in the future. > > Regards, > > Dan > > > > On Tue, Feb 27, 2018 at 5:40 AM, Benjamin Kaduk wrote: > > On Mon, Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote: > > Hi Jim, > > > > Thank you for your answer and for addressing my comments. > > > > On item #2: > > > > > > > > On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad > wrote: > > > > > > > > > > > > -----Original Message----- > > > > From: Dan Romascanu [mailto:dromasca@gmail.com] > > > > > > > > > > ... > > > > > > > > > > 2. I am a little confused by the definition of policies in Section > 9.1: > > > > > > > > Depending upon the values being requested, registration requests > are > > > > evaluated on a Standards Track Required, Specification Required, > > > > Expert Review, or Private Use basis [RFC8126] after a three-week > > > > review period on the cwt-reg-review@ietf.org mailing list, on th= e > > > > advice of one or more Designated Experts. > > > > > > > > How does this work? The request is forwarded to the designated > expert, > > > > he/she make a recommendation concerning the policy on the mail list= , > and > > > > depending on the feedback received a policy is selected? Who > establishes > > > > consensus? > > > > > > > > Frankly, I wonder if this can work at all. Are there other examples > of > > > four > > > > different policies for the same registry, applied on a case-to-case > > > basis? > > > > > > This is the same approach that is being used for the COSE registries. > As > > > an example, you can look at https://www.iana.org/ > > > assignments/cose/cose.xhtml#algorithms. > > > > > > Part of the issue about this is that the JOSE/JWT registries do have > the > > > same different policies, but that differences are hidden from the IAN= A > > > registry. Since they allow for a URI to be used as the identifier of= a > > > field, only the plain text versions are registered. Thus I can use " > > > http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBO= R > > > the set of tag values is closed and does not have this escape (nor > would > > > one want the length of the tag) it is necessary to have this break > down of > > > tag fields. > > > > > > > > > > > > > > This does not seem to be exactly the same approach. The COSE RFC 8152 > > defines the registry policy in a different manner. There is only one > policy > > that is proposed 'Expert Review' and than the Expert Review Instruction= s > > are used to define the cases when a Standards Track specification is > > required. No such text exists in the current I-D. There is no separatio= n > of > > the values space in the registry according to the type of assignment > here, > > as in RFC 8152. > > The template in section 9.1.1 has the different policies for the > different integer ranges, under the 'Claim Key' section. Kathleen > (IIRC) already noted that this should probably be repeated in the > introductory part of section 9.1 as well, and that will be done > before the document is sent to the IESG. > > -Benjamin > > > --94eb2c1256e2c127be05663910d1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Jim,

There are still a few p= roblems:

1. The policies and mapping to the values ranges are= hidden in the Claim Key field in the template (the comment also made by Ka= thleen)

2. At least one incorrect policy name is used: Standar= ds Track Required - do you mean Standards Action (?)

3. You de= scribe a process that involves a mail list (cwt-reg-review@ietf.org) and Experts Review. This descripti= on is not clear. Usually IANA approaches one DE for advice and expects the = advice from the same DE in a reasonable period of time. If I understand cor= rectly the process described in Section 9.1 one or more DEs make a recommen= dation and run it with the mail list. Who establishes the consensus on the = mail list? Assuming the mail list disagrees with the DE recommendation, who= decides?

Regards,

Dan


On Tue, Feb 27, 201= 8 at 7:53 PM, Jim Schaad <ietf@augustcellars.com> wrote= :

Integer values between -256 and 255 and strings of length 1 are designat= ed as Standards Track Required.

=C2=A0

Integer values from -65536 to= 65535 and strings of length 2 are designated as Specification Required.=

=C2=A0

Integer values of greater than 65535 and strings of length grea= ter than 2 are designated as Expert Review.=C2=A0

=

=C2=A0

Integer va= lues less than -65536 are marked as Private Use.

=C2=A0

So that says= what IANA policy is to be used for each of the different items.=C2=A0 This= defines the policies and the ranges for those policies.

=C2=A0

Ther= e is not anything that is making a distinction on what the criteria to be u= sed by the DE in the document which is separate, but I don=E2=80=99t think = that is needed.=C2=A0 This is why they are DEs.

=C2=A0

I still = don=E2=80=99t see what you think is missing.

=C2=A0

Jim<= /p>

=C2=A0

=C2=A0

From: Dan Romascanu [mailto:dromasca@gmail.com]
Sent: Tue= sday, February 27, 2018 2:00 AM
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: Jim Schaad <ietf@augustcellars.com>; gen-art <gen-art@ietf.org>; draft-ietf-ace-cbor= -web-token.all@ietf.org; ietf <ietf@ietf.org>; ace@ietf.org
Subject: Re: [Ace] Genart telec= hat review of draft-ietf-ace-cbor-web-token-12

=

=C2=A0

Hi,

See also my other notes.

I believe that what the document= tries to say is:

Register R is divided into four different ranges R1, R= 2, R3, R4 (defining the value limits may be useful)

=

Values in range R1 ar= e allocated according to policy P1 in the case that ...
Values in range = R2 are allocated according to policy P2 in the case that ...
Values in r= ange R3 are allocated according to policy P3 in the case that ...
Values= in range R4 are allocated according to policy P4 in the case that ...

Bu= t it doesn't say it. Mentioning four concurrent policies for the same r= egistry without separation of values range, and without providing clear ins= tructions when each policy is recommended to be used, seems confusing to me= , and may be confusing for users of this document in the future. =

Regards= ,

Dan

=C2=A0=

On Tue, Feb 27, 2018 at 5:40 AM, Benjam= in Kaduk <kaduk@mit.e= du> wrote:

On Mon, Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote:
> Hi = Jim,
>
> Thank you for your answer and for addressing my commen= ts.
>
> On item #2:
>
>
>
> On Mon, Feb= 26, 2018 at 10:12 PM, Jim Schaad <ietf@augustcellars.com> wrote:
>
>= ; >
> >
> > > -----Original Message-----
> &g= t; > From: Dan Romascanu [mailto:dromasca@gmail.com]
> > >
> >
= > > ...
>
> > >
> > > 2. I am a little = confused by the definition of policies in Section 9.1:
> > >> > >=C2=A0 =C2=A0 Depending upon the values being requested, reg= istration requests are
> > >=C2=A0 =C2=A0 evaluated on a Standa= rds Track Required, Specification Required,
> > >=C2=A0 =C2=A0 = Expert Review, or Private Use basis [RFC8126] after a three-week
> &g= t; >=C2=A0 =C2=A0 review period on the cwt-reg-review@ietf.org mailing list, on th= e
> > >=C2=A0 =C2=A0 advice of one or more Designated Experts.<= br>> > >
> > > How does this work? The request is forw= arded to the designated expert,
> > > he/she make a recommendat= ion concerning the policy on the mail list, and
> > > depending= on the feedback received a policy is selected? Who establishes
> >= ; > consensus?
> > >
> > > Frankly, I wonder if = this can work at all. Are there other examples of
> > four
>= > > different policies for the same registry, applied on a case-to-c= ase
> > basis?
> >
> > This is the same approach= that is being used for the COSE registries.=C2=A0 As
> > an examp= le, you can look at htt= ps://www.iana.org/
> > assignments/cose/cose.xhtml#algori= thms.
> >
> > Part of the issue about this is that the JO= SE/JWT registries do have the
> > same different policies, but tha= t differences are hidden from the IANA
> > registry.=C2=A0 Since t= hey allow for a URI to be used as the identifier of a
> > field, o= nly the plain text versions are registered.=C2=A0 Thus I can use "
= > > http://augustcellars.com/JWT/My_Tag" as an identifier.=C2=A0= Since for CBOR
> > the set of tag values is closed and does not h= ave this escape (nor would
> > one want the length of the tag) it = is necessary to have this break down of
> > tag fields.
> &g= t;
> >
> >
> >
> This does not seem to be = exactly the same approach. The COSE RFC 8152
> defines the registry p= olicy in a different manner. There is only one policy
> that is propo= sed 'Expert Review' and than the Expert Review Instructions
>= are used to define the cases when a Standards Track specification is
&g= t; required. No such text exists in the current I-D. There is no separation= of
> the values space in the registry according to the type of assig= nment here,
> as=C2=A0 in RFC 8152.

The template in section 9.1.1 has the different policies= for the
different integer ranges, under the 'Claim Key' section= .=C2=A0 Kathleen
(IIRC) already noted that this should probably be repea= ted in the
introductory part of section 9.1 as well, and that will be do= ne
before the document is sent to the IESG.

-Benjamin

=C2=A0<= u>


= --94eb2c1256e2c127be05663910d1-- From nobody Tue Feb 27 14:52:49 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55B3212E8C4; Tue, 27 Feb 2018 14:52:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.009 X-Spam-Level: X-Spam-Status: No, score=-3.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9ojyEDZavA7Q; Tue, 27 Feb 2018 14:52:43 -0800 (PST) Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0102.outbound.protection.outlook.com [104.47.42.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 802BE12E8CD; Tue, 27 Feb 2018 14:52:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=b585fUPPPQF2+gdOko5SmWEIMnSHKMTFWHm2Kbas1z4=; b=JWcHv5+mG2/ikUxsHu3GS3rev95OtBy+Gm6OL3gEBGvi56bL/ugsJ0SnCBcEyIfNt54R0sEHTqf2Ugafs9YapEyuQSaEv6SWRba38b9tjRuiEUYhHmES3KS7XTQDTw9P9pcGIlNG/MAB9dSwbY9jQNJ1NW1v/Do3Bn8uKkb2GcY= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0910.namprd21.prod.outlook.com (52.132.117.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.2; Tue, 27 Feb 2018 22:52:31 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Tue, 27 Feb 2018 22:52:31 +0000 From: Mike Jones To: Dan Romascanu , Jim Schaad CC: gen-art , "ace@ietf.org" , ietf , Benjamin Kaduk , "draft-ietf-ace-cbor-web-token.all@ietf.org" Thread-Topic: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 Thread-Index: AQHTrzRyo8Mp7FBA1UOtbTCoMqPdBaO3HdCAgAASogCAAGp5gIAAahUAgACEUACAAEs+AIAABFGQ Date: Tue, 27 Feb 2018 22:52:31 +0000 Message-ID: References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-27T22:52:29.0385988Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:d::562] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0910; 7:pmrNSUPPYv9B4ay480ui6kQGanhoBWR5Nheke6QlMlSxODZ5mtXiQBjSWoSrDUD18MaXRDETVEWIbR3KWzhXHKbfJiBx5SiSTBmHY74lue+khydGLDHGJhD7V2WJgyxPPjkdCYBy6NESY+rQyWOf/nySEh2tRfpxxlgXJDnfl3qKdJt7sgGkHKSELfA/oVmZOiga8B517ko6FGSLbhwlm1or94kgUCDjq7qsUVQF7ZThM+y8WP5xaOZXs7mu/Lz0 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: a306ac7a-ae4d-4285-3bbe-08d57e34c909 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB0910; x-ms-traffictypediagnostic: SN6PR2101MB0910: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(85827821059158)(100405760836317)(21748063052155)(240460790083961)(1591387915157); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231220)(944501207)(52105095)(3002001)(10201501046)(6055026)(61426038)(61427038)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123562045)(20161123564045)(6072148)(201708071742011); SRVR:SN6PR2101MB0910; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0910; x-forefront-prvs: 05961EBAFC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(39860400002)(346002)(39380400002)(396003)(366004)(376002)(13464003)(54094003)(189003)(199004)(76104003)(51914003)(53376002)(3280700002)(345774005)(76176011)(68736007)(7696005)(33656002)(10090500001)(316002)(5660300001)(14454004)(229853002)(9686003)(93886005)(478600001)(72206003)(2900100001)(10290500003)(54896002)(55016002)(6306002)(2950100002)(110136005)(54906003)(966005)(606006)(236005)(3660700001)(186003)(86362001)(53936002)(59450400001)(106356001)(6346003)(6246003)(97736004)(5250100002)(53546011)(102836004)(8936002)(6506007)(6436002)(25786009)(19609705001)(8990500004)(7736002)(81166006)(81156014)(74316002)(8676002)(4326008)(99286004)(6116002)(790700001)(2906002)(86612001)(22452003)(39060400002)(105586002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0910; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: g8+8UFD8TTJvVrBXR8jYKMlhyoQdGG/XTSz7/AKw7OFTg0Mtx8Sr25xQ0eNRFeZSFnHQUoybDAhRxUtCoU2w5K2KC0nGhEfaYiHAFodH0Xl/+g44VH/PSwCdRD4fsogq9+dsmStRhBkfbu3+Iyc4NNTavPqacMLgXtWdAvxJbPs= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB09436CCA10FD477A41819B42F5C00SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: a306ac7a-ae4d-4285-3bbe-08d57e34c909 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2018 22:52:31.7927 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0910 Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 22:52:47 -0000 --_000_SN6PR2101MB09436CCA10FD477A41819B42F5C00SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmVwbGllcyBpbmxpbmXigKYNCg0KRnJvbTogQWNlIDxhY2UtYm91bmNlc0BpZXRmLm9yZz4gT24g QmVoYWxmIE9mIERhbiBSb21hc2NhbnUNClNlbnQ6IFR1ZXNkYXksIEZlYnJ1YXJ5IDI3LCAyMDE4 IDI6MjMgUE0NClRvOiBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPg0KQ2M6IGdl bi1hcnQgPGdlbi1hcnRAaWV0Zi5vcmc+OyBhY2VAaWV0Zi5vcmc7IGlldGYgPGlldGZAaWV0Zi5v cmc+OyBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtYWNlLWNib3It d2ViLXRva2VuLmFsbEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtBY2VdIEdlbmFydCB0ZWxlY2hh dCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4tMTINCg0KSGkgSmltLA0K DQpUaGVyZSBhcmUgc3RpbGwgYSBmZXcgcHJvYmxlbXM6DQoNCjEuIFRoZSBwb2xpY2llcyBhbmQg bWFwcGluZyB0byB0aGUgdmFsdWVzIHJhbmdlcyBhcmUgaGlkZGVuIGluIHRoZSBDbGFpbSBLZXkg ZmllbGQgaW4gdGhlIHRlbXBsYXRlICh0aGUgY29tbWVudCBhbHNvIG1hZGUgYnkgS2F0aGxlZW4p DQoNClBlciBteSBlYXJsaWVyIG5vdGUsIEkgd2lsbCBiZSBtYWtpbmcgdGhpcyBsYW5ndWFnZSBj bGVhcmVyIHdoZW4gdGhlIG5leHQgcmV2aXNpb24gaXMgcHVibGlzaGVkLg0KDQoyLiBBdCBsZWFz dCBvbmUgaW5jb3JyZWN0IHBvbGljeSBuYW1lIGlzIHVzZWQ6IFN0YW5kYXJkcyBUcmFjayBSZXF1 aXJlZCAtIGRvIHlvdSBtZWFuIFN0YW5kYXJkcyBBY3Rpb24gKD8pDQoNClRoYW5rcyDigJMgSeKA mWxsIHVwZGF0ZSB0aGUgdGVybWlub2xvZ3kgd2hlbiB0aGUgbmV4dCBkcmFmdCBpcyBwdWJsaXNo ZWQuDQoNCjMuIFlvdSBkZXNjcmliZSBhIHByb2Nlc3MgdGhhdCBpbnZvbHZlcyBhIG1haWwgbGlz dCAoY3d0LXJlZy1yZXZpZXdAaWV0Zi5vcmc8bWFpbHRvOmN3dC1yZWctcmV2aWV3QGlldGYub3Jn PikgYW5kIEV4cGVydHMgUmV2aWV3LiBUaGlzIGRlc2NyaXB0aW9uIGlzIG5vdCBjbGVhci4gVXN1 YWxseSBJQU5BIGFwcHJvYWNoZXMgb25lIERFIGZvciBhZHZpY2UgYW5kIGV4cGVjdHMgdGhlIGFk dmljZSBmcm9tIHRoZSBzYW1lIERFIGluIGEgcmVhc29uYWJsZSBwZXJpb2Qgb2YgdGltZS4gSWYg SSB1bmRlcnN0YW5kIGNvcnJlY3RseSB0aGUgcHJvY2VzcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA5 LjEgb25lIG9yIG1vcmUgREVzIG1ha2UgYSByZWNvbW1lbmRhdGlvbiBhbmQgcnVuIGl0IHdpdGgg dGhlIG1haWwgbGlzdC4gV2hvIGVzdGFibGlzaGVzIHRoZSBjb25zZW5zdXMgb24gdGhlIG1haWwg bGlzdD8gQXNzdW1pbmcgdGhlIG1haWwgbGlzdCBkaXNhZ3JlZXMgd2l0aCB0aGUgREUgcmVjb21t ZW5kYXRpb24sIHdobyBkZWNpZGVzPw0KDQpUaGlzIGlzIHRoZSBwcm9jZXNzIHVzZWQgZm9yIHRo ZSAud2VsbC1rbm93biBVUkkgc3BlYywgdGhlIEpTT04gV2ViIFRva2VuIChKV1QpIHNwZWMsIHRo ZSBKT1NFIHNwZWNzLCBtYW55IE9BdXRoIHNwZWNzIGFuZCBpdCB3b3JrcyB3ZWxsLiAgSXQgYWxs b3dzIGludGVyZXN0ZWQgcGFydGllcyB0byBzZWUgYW5kIGNvbW1lbnQgb24gcmVnaXN0cmF0aW9u IHJlcXVlc3RzLiAgVGhlIERlc2lnbmF0ZWQgRXhwZXJ0cyBhcmUgc3RpbGwgdGhlIG9uZXMgdG8g ZGVjaWRlLiAgU2VlIHRoZXNlIHJlZmVyZW5jZXMgZm9yIHNvbWUgdXNlcyBvZiB0aGlzIGtpbmQg b2YgcHVibGljbHktdmlzaWJsZSByZWdpc3RyYXRpb24gcHJvY2VkdXJlOg0KDQpodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvcmZjNTc4NSNzZWN0aW9uLTUuMSAodXNpbmcgd2VsbGtub3duLXVy aS1yZXZpZXdAaWV0Zi5vcmc8bWFpbHRvOndlbGxrbm93bi11cmktcmV2aWV3QGlldGYub3JnPikN Cmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2NzQ5I3NlY3Rpb24tMTEuMSAodXNpbmcg b2F1dGgtZXh0LXJldmlld0BpZXRmLm9yZzxtYWlsdG86b2F1dGgtZXh0LXJldmlld0BpZXRmLm9y Zz4pDQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzUxNSNzZWN0aW9uLTkgKHVzaW5n IGpvc2UtcmVnLXJldmlld0BpZXRmLm9yZzxtYWlsdG86am9zZS1yZWctcmV2aWV3QGlldGYub3Jn PikNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3ODAwI3NlY3Rpb24tNiAodXNpbmcg am9zZS1yZWctcmV2aWV3QGlldGYub3JnPG1haWx0bzpqb3NlLXJlZy1yZXZpZXdAaWV0Zi5vcmc+ KQ0KDQpJIGNhbiBmaW5kIG1vcmUgZXhhbXBsZXMgb2YgdGhlIHVzZSBvZiB0aGlzIHB1YmxpY2x5 LXZpc2libGUgcmVnaXN0cmF0aW9uIHByb2NlZHVyZSBpZiB5b3UgbGlrZS4NCg0KUmVnYXJkcywN CkRhbg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgVGhhbmtzIGZvciB0aGUgY2FyZWZ1bCByZXZpZXcsIERhbiwNCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoN Ck9uIFR1ZSwgRmViIDI3LCAyMDE4IGF0IDc6NTMgUE0sIEppbSBTY2hhYWQgPGlldGZAYXVndXN0 Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+PiB3cm90ZToNCkludGVn ZXIgdmFsdWVzIGJldHdlZW4gLTI1NiBhbmQgMjU1IGFuZCBzdHJpbmdzIG9mIGxlbmd0aCAxIGFy ZSBkZXNpZ25hdGVkIGFzIFN0YW5kYXJkcyBUcmFjayBSZXF1aXJlZC4NCg0KSW50ZWdlciB2YWx1 ZXMgZnJvbSAtNjU1MzYgdG8gNjU1MzUgYW5kIHN0cmluZ3Mgb2YgbGVuZ3RoIDIgYXJlIGRlc2ln bmF0ZWQgYXMgU3BlY2lmaWNhdGlvbiBSZXF1aXJlZC4NCg0KSW50ZWdlciB2YWx1ZXMgb2YgZ3Jl YXRlciB0aGFuIDY1NTM1IGFuZCBzdHJpbmdzIG9mIGxlbmd0aCBncmVhdGVyIHRoYW4gMiBhcmUg ZGVzaWduYXRlZCBhcyBFeHBlcnQgUmV2aWV3Lg0KDQpJbnRlZ2VyIHZhbHVlcyBsZXNzIHRoYW4g LTY1NTM2IGFyZSBtYXJrZWQgYXMgUHJpdmF0ZSBVc2UuDQoNClNvIHRoYXQgc2F5cyB3aGF0IElB TkEgcG9saWN5IGlzIHRvIGJlIHVzZWQgZm9yIGVhY2ggb2YgdGhlIGRpZmZlcmVudCBpdGVtcy4g IFRoaXMgZGVmaW5lcyB0aGUgcG9saWNpZXMgYW5kIHRoZSByYW5nZXMgZm9yIHRob3NlIHBvbGlj aWVzLg0KDQpUaGVyZSBpcyBub3QgYW55dGhpbmcgdGhhdCBpcyBtYWtpbmcgYSBkaXN0aW5jdGlv biBvbiB3aGF0IHRoZSBjcml0ZXJpYSB0byBiZSB1c2VkIGJ5IHRoZSBERSBpbiB0aGUgZG9jdW1l bnQgd2hpY2ggaXMgc2VwYXJhdGUsIGJ1dCBJIGRvbuKAmXQgdGhpbmsgdGhhdCBpcyBuZWVkZWQu ICBUaGlzIGlzIHdoeSB0aGV5IGFyZSBERXMuDQoNCkkgc3RpbGwgZG9u4oCZdCBzZWUgd2hhdCB5 b3UgdGhpbmsgaXMgbWlzc2luZy4NCg0KSmltDQoNCg0KRnJvbTogRGFuIFJvbWFzY2FudSBbbWFp bHRvOmRyb21hc2NhQGdtYWlsLmNvbTxtYWlsdG86ZHJvbWFzY2FAZ21haWwuY29tPl0NClNlbnQ6 IFR1ZXNkYXksIEZlYnJ1YXJ5IDI3LCAyMDE4IDI6MDAgQU0NClRvOiBCZW5qYW1pbiBLYWR1ayA8 a2FkdWtAbWl0LmVkdTxtYWlsdG86a2FkdWtAbWl0LmVkdT4+DQpDYzogSmltIFNjaGFhZCA8aWV0 ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+OyBnZW4t YXJ0IDxnZW4tYXJ0QGlldGYub3JnPG1haWx0bzpnZW4tYXJ0QGlldGYub3JnPj47IGRyYWZ0LWll dGYtYWNlLWNib3Itd2ViLXRva2VuLmFsbEBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1hY2Ut Y2Jvci13ZWItdG9rZW4uYWxsQGlldGYub3JnPjsgaWV0ZiA8aWV0ZkBpZXRmLm9yZzxtYWlsdG86 aWV0ZkBpZXRmLm9yZz4+OyBhY2VAaWV0Zi5vcmc8bWFpbHRvOmFjZUBpZXRmLm9yZz4NClN1Ympl Y3Q6IFJlOiBbQWNlXSBHZW5hcnQgdGVsZWNoYXQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtYWNlLWNi b3Itd2ViLXRva2VuLTEyDQoNCkhpLA0KU2VlIGFsc28gbXkgb3RoZXIgbm90ZXMuDQpJIGJlbGll dmUgdGhhdCB3aGF0IHRoZSBkb2N1bWVudCB0cmllcyB0byBzYXkgaXM6DQpSZWdpc3RlciBSIGlz IGRpdmlkZWQgaW50byBmb3VyIGRpZmZlcmVudCByYW5nZXMgUjEsIFIyLCBSMywgUjQgKGRlZmlu aW5nIHRoZSB2YWx1ZSBsaW1pdHMgbWF5IGJlIHVzZWZ1bCkNClZhbHVlcyBpbiByYW5nZSBSMSBh cmUgYWxsb2NhdGVkIGFjY29yZGluZyB0byBwb2xpY3kgUDEgaW4gdGhlIGNhc2UgdGhhdCAuLi4N ClZhbHVlcyBpbiByYW5nZSBSMiBhcmUgYWxsb2NhdGVkIGFjY29yZGluZyB0byBwb2xpY3kgUDIg aW4gdGhlIGNhc2UgdGhhdCAuLi4NClZhbHVlcyBpbiByYW5nZSBSMyBhcmUgYWxsb2NhdGVkIGFj Y29yZGluZyB0byBwb2xpY3kgUDMgaW4gdGhlIGNhc2UgdGhhdCAuLi4NClZhbHVlcyBpbiByYW5n ZSBSNCBhcmUgYWxsb2NhdGVkIGFjY29yZGluZyB0byBwb2xpY3kgUDQgaW4gdGhlIGNhc2UgdGhh dCAuLi4NCkJ1dCBpdCBkb2Vzbid0IHNheSBpdC4gTWVudGlvbmluZyBmb3VyIGNvbmN1cnJlbnQg cG9saWNpZXMgZm9yIHRoZSBzYW1lIHJlZ2lzdHJ5IHdpdGhvdXQgc2VwYXJhdGlvbiBvZiB2YWx1 ZXMgcmFuZ2UsIGFuZCB3aXRob3V0IHByb3ZpZGluZyBjbGVhciBpbnN0cnVjdGlvbnMgd2hlbiBl YWNoIHBvbGljeSBpcyByZWNvbW1lbmRlZCB0byBiZSB1c2VkLCBzZWVtcyBjb25mdXNpbmcgdG8g bWUsIGFuZCBtYXkgYmUgY29uZnVzaW5nIGZvciB1c2VycyBvZiB0aGlzIGRvY3VtZW50IGluIHRo ZSBmdXR1cmUuDQpSZWdhcmRzLA0KRGFuDQoNCk9uIFR1ZSwgRmViIDI3LCAyMDE4IGF0IDU6NDAg QU0sIEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PG1haWx0bzprYWR1a0BtaXQuZWR1Pj4g d3JvdGU6DQpPbiBNb24sIEZlYiAyNiwgMjAxOCBhdCAxMToxOTowNFBNICswMjAwLCBEYW4gUm9t YXNjYW51IHdyb3RlOg0KPiBIaSBKaW0sDQo+DQo+IFRoYW5rIHlvdSBmb3IgeW91ciBhbnN3ZXIg YW5kIGZvciBhZGRyZXNzaW5nIG15IGNvbW1lbnRzLg0KPg0KPiBPbiBpdGVtICMyOg0KPg0KPg0K Pg0KPiBPbiBNb24sIEZlYiAyNiwgMjAxOCBhdCAxMDoxMiBQTSwgSmltIFNjaGFhZCA8aWV0ZkBh dWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+IHdyb3RlOg0K Pg0KPiA+DQo+ID4NCj4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gPiBGcm9t OiBEYW4gUm9tYXNjYW51IFttYWlsdG86ZHJvbWFzY2FAZ21haWwuY29tPG1haWx0bzpkcm9tYXNj YUBnbWFpbC5jb20+XQ0KPiA+ID4NCj4gPg0KPiA+IC4uLg0KPg0KPiA+ID4NCj4gPiA+IDIuIEkg YW0gYSBsaXR0bGUgY29uZnVzZWQgYnkgdGhlIGRlZmluaXRpb24gb2YgcG9saWNpZXMgaW4gU2Vj dGlvbiA5LjE6DQo+ID4gPg0KPiA+ID4gICAgRGVwZW5kaW5nIHVwb24gdGhlIHZhbHVlcyBiZWlu ZyByZXF1ZXN0ZWQsIHJlZ2lzdHJhdGlvbiByZXF1ZXN0cyBhcmUNCj4gPiA+ICAgIGV2YWx1YXRl ZCBvbiBhIFN0YW5kYXJkcyBUcmFjayBSZXF1aXJlZCwgU3BlY2lmaWNhdGlvbiBSZXF1aXJlZCwN Cj4gPiA+ICAgIEV4cGVydCBSZXZpZXcsIG9yIFByaXZhdGUgVXNlIGJhc2lzIFtSRkM4MTI2XSBh ZnRlciBhIHRocmVlLXdlZWsNCj4gPiA+ICAgIHJldmlldyBwZXJpb2Qgb24gdGhlIGN3dC1yZWct cmV2aWV3QGlldGYub3JnPG1haWx0bzpjd3QtcmVnLXJldmlld0BpZXRmLm9yZz4gbWFpbGluZyBs aXN0LCBvbiB0aGUNCj4gPiA+ICAgIGFkdmljZSBvZiBvbmUgb3IgbW9yZSBEZXNpZ25hdGVkIEV4 cGVydHMuDQo+ID4gPg0KPiA+ID4gSG93IGRvZXMgdGhpcyB3b3JrPyBUaGUgcmVxdWVzdCBpcyBm b3J3YXJkZWQgdG8gdGhlIGRlc2lnbmF0ZWQgZXhwZXJ0LA0KPiA+ID4gaGUvc2hlIG1ha2UgYSBy ZWNvbW1lbmRhdGlvbiBjb25jZXJuaW5nIHRoZSBwb2xpY3kgb24gdGhlIG1haWwgbGlzdCwgYW5k DQo+ID4gPiBkZXBlbmRpbmcgb24gdGhlIGZlZWRiYWNrIHJlY2VpdmVkIGEgcG9saWN5IGlzIHNl bGVjdGVkPyBXaG8gZXN0YWJsaXNoZXMNCj4gPiA+IGNvbnNlbnN1cz8NCj4gPiA+DQo+ID4gPiBG cmFua2x5LCBJIHdvbmRlciBpZiB0aGlzIGNhbiB3b3JrIGF0IGFsbC4gQXJlIHRoZXJlIG90aGVy IGV4YW1wbGVzIG9mDQo+ID4gZm91cg0KPiA+ID4gZGlmZmVyZW50IHBvbGljaWVzIGZvciB0aGUg c2FtZSByZWdpc3RyeSwgYXBwbGllZCBvbiBhIGNhc2UtdG8tY2FzZQ0KPiA+IGJhc2lzPw0KPiA+ DQo+ID4gVGhpcyBpcyB0aGUgc2FtZSBhcHByb2FjaCB0aGF0IGlzIGJlaW5nIHVzZWQgZm9yIHRo ZSBDT1NFIHJlZ2lzdHJpZXMuICBBcw0KPiA+IGFuIGV4YW1wbGUsIHlvdSBjYW4gbG9vayBhdCBo dHRwczovL3d3dy5pYW5hLm9yZy8NCj4gPiBhc3NpZ25tZW50cy9jb3NlL2Nvc2UueGh0bWwjYWxn b3JpdGhtcy4NCj4gPg0KPiA+IFBhcnQgb2YgdGhlIGlzc3VlIGFib3V0IHRoaXMgaXMgdGhhdCB0 aGUgSk9TRS9KV1QgcmVnaXN0cmllcyBkbyBoYXZlIHRoZQ0KPiA+IHNhbWUgZGlmZmVyZW50IHBv bGljaWVzLCBidXQgdGhhdCBkaWZmZXJlbmNlcyBhcmUgaGlkZGVuIGZyb20gdGhlIElBTkENCj4g PiByZWdpc3RyeS4gIFNpbmNlIHRoZXkgYWxsb3cgZm9yIGEgVVJJIHRvIGJlIHVzZWQgYXMgdGhl IGlkZW50aWZpZXIgb2YgYQ0KPiA+IGZpZWxkLCBvbmx5IHRoZSBwbGFpbiB0ZXh0IHZlcnNpb25z IGFyZSByZWdpc3RlcmVkLiAgVGh1cyBJIGNhbiB1c2UgIg0KPiA+IGh0dHA6Ly9hdWd1c3RjZWxs YXJzLmNvbS9KV1QvTXlfVGFnIiBhcyBhbiBpZGVudGlmaWVyLiAgU2luY2UgZm9yIENCT1INCj4g PiB0aGUgc2V0IG9mIHRhZyB2YWx1ZXMgaXMgY2xvc2VkIGFuZCBkb2VzIG5vdCBoYXZlIHRoaXMg ZXNjYXBlIChub3Igd291bGQNCj4gPiBvbmUgd2FudCB0aGUgbGVuZ3RoIG9mIHRoZSB0YWcpIGl0 IGlzIG5lY2Vzc2FyeSB0byBoYXZlIHRoaXMgYnJlYWsgZG93biBvZg0KPiA+IHRhZyBmaWVsZHMu DQo+ID4NCj4gPg0KPiA+DQo+ID4NCj4gVGhpcyBkb2VzIG5vdCBzZWVtIHRvIGJlIGV4YWN0bHkg dGhlIHNhbWUgYXBwcm9hY2guIFRoZSBDT1NFIFJGQyA4MTUyDQo+IGRlZmluZXMgdGhlIHJlZ2lz dHJ5IHBvbGljeSBpbiBhIGRpZmZlcmVudCBtYW5uZXIuIFRoZXJlIGlzIG9ubHkgb25lIHBvbGlj eQ0KPiB0aGF0IGlzIHByb3Bvc2VkICdFeHBlcnQgUmV2aWV3JyBhbmQgdGhhbiB0aGUgRXhwZXJ0 IFJldmlldyBJbnN0cnVjdGlvbnMNCj4gYXJlIHVzZWQgdG8gZGVmaW5lIHRoZSBjYXNlcyB3aGVu IGEgU3RhbmRhcmRzIFRyYWNrIHNwZWNpZmljYXRpb24gaXMNCj4gcmVxdWlyZWQuIE5vIHN1Y2gg dGV4dCBleGlzdHMgaW4gdGhlIGN1cnJlbnQgSS1ELiBUaGVyZSBpcyBubyBzZXBhcmF0aW9uIG9m DQo+IHRoZSB2YWx1ZXMgc3BhY2UgaW4gdGhlIHJlZ2lzdHJ5IGFjY29yZGluZyB0byB0aGUgdHlw ZSBvZiBhc3NpZ25tZW50IGhlcmUsDQo+IGFzICBpbiBSRkMgODE1Mi4NClRoZSB0ZW1wbGF0ZSBp biBzZWN0aW9uIDkuMS4xIGhhcyB0aGUgZGlmZmVyZW50IHBvbGljaWVzIGZvciB0aGUNCmRpZmZl cmVudCBpbnRlZ2VyIHJhbmdlcywgdW5kZXIgdGhlICdDbGFpbSBLZXknIHNlY3Rpb24uICBLYXRo bGVlbg0KKElJUkMpIGFscmVhZHkgbm90ZWQgdGhhdCB0aGlzIHNob3VsZCBwcm9iYWJseSBiZSBy ZXBlYXRlZCBpbiB0aGUNCmludHJvZHVjdG9yeSBwYXJ0IG9mIHNlY3Rpb24gOS4xIGFzIHdlbGws IGFuZCB0aGF0IHdpbGwgYmUgZG9uZQ0KYmVmb3JlIHRoZSBkb2N1bWVudCBpcyBzZW50IHRvIHRo ZSBJRVNHLg0KDQotQmVuamFtaW4NCg0KDQo= --_000_SN6PR2101MB09436CCA10FD477A41819B42F5C00SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDEx IDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9y bWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNv bm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJ bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5tMTg1 ODIzNTkyMDQxNjM1MjkxMWhvZW56Yg0KCXttc28tc3R5bGUtbmFtZTptXzE4NTgyMzU5MjA0MTYz NTI5MTFob2VuemI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzAw MjA2MDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTt9DQpA cGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEu MGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7 fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMg djpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lm IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFw IHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlm XS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJw bGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5SZXBsaWVzIGlubGluZeKApjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYw Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5G cm9tOjwvYj4gQWNlICZsdDthY2UtYm91bmNlc0BpZXRmLm9yZyZndDsgPGI+T24gQmVoYWxmIE9m IDwvYj4NCkRhbiBSb21hc2NhbnU8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgRmVicnVhcnkg MjcsIDIwMTggMjoyMyBQTTxicj4NCjxiPlRvOjwvYj4gSmltIFNjaGFhZCAmbHQ7aWV0ZkBhdWd1 c3RjZWxsYXJzLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IGdlbi1hcnQgJmx0O2dlbi1hcnRAaWV0 Zi5vcmcmZ3Q7OyBhY2VAaWV0Zi5vcmc7IGlldGYgJmx0O2lldGZAaWV0Zi5vcmcmZ3Q7OyBCZW5q YW1pbiBLYWR1ayAmbHQ7a2FkdWtAbWl0LmVkdSZndDs7IGRyYWZ0LWlldGYtYWNlLWNib3Itd2Vi LXRva2VuLmFsbEBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0FjZV0gR2VuYXJ0 IHRlbGVjaGF0IHJldmlldyBvZiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhp IEppbSw8YnI+DQo8YnI+DQpUaGVyZSBhcmUgc3RpbGwgYSBmZXcgcHJvYmxlbXM6IDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+MS4gVGhlIHBvbGljaWVzIGFuZCBtYXBwaW5nIHRvIHRoZSB2YWx1ZXMgcmFuZ2VzIGFyZSBo aWRkZW4gaW4gdGhlIENsYWltIEtleSBmaWVsZCBpbiB0aGUgdGVtcGxhdGUgKHRoZSBjb21tZW50 IGFsc28gbWFkZSBieSBLYXRobGVlbik8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+UGVy IG15IGVhcmxpZXIgbm90ZSwgSSB3aWxsIGJlIG1ha2luZyB0aGlzIGxhbmd1YWdlIGNsZWFyZXIg d2hlbiB0aGUgbmV4dCByZXZpc2lvbiBpcyBwdWJsaXNoZWQuJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4yLiBBdCBsZWFz dCBvbmUgaW5jb3JyZWN0IHBvbGljeSBuYW1lIGlzIHVzZWQ6IFN0YW5kYXJkcyBUcmFjayBSZXF1 aXJlZCAtIGRvIHlvdSBtZWFuIFN0YW5kYXJkcyBBY3Rpb24gKD8pPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPlRoYW5rcyDigJMgSeKAmWxsIHVwZGF0ZSB0aGUgdGVybWlub2xvZ3kgd2hl biB0aGUgbmV4dCBkcmFmdCBpcyBwdWJsaXNoZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+My4gWW91IGRl c2NyaWJlIGEgcHJvY2VzcyB0aGF0IGludm9sdmVzIGEgbWFpbCBsaXN0ICg8YSBocmVmPSJtYWls dG86Y3d0LXJlZy1yZXZpZXdAaWV0Zi5vcmciPmN3dC1yZWctcmV2aWV3QGlldGYub3JnPC9hPikg YW5kIEV4cGVydHMgUmV2aWV3LiBUaGlzIGRlc2NyaXB0aW9uIGlzIG5vdCBjbGVhci4gVXN1YWxs eSBJQU5BIGFwcHJvYWNoZXMgb25lIERFIGZvciBhZHZpY2UgYW5kIGV4cGVjdHMgdGhlIGFkdmlj ZQ0KIGZyb20gdGhlIHNhbWUgREUgaW4gYSByZWFzb25hYmxlIHBlcmlvZCBvZiB0aW1lLiBJZiBJ IHVuZGVyc3RhbmQgY29ycmVjdGx5IHRoZSBwcm9jZXNzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDku MSBvbmUgb3IgbW9yZSBERXMgbWFrZSBhIHJlY29tbWVuZGF0aW9uIGFuZCBydW4gaXQgd2l0aCB0 aGUgbWFpbCBsaXN0LiBXaG8gZXN0YWJsaXNoZXMgdGhlIGNvbnNlbnN1cyBvbiB0aGUgbWFpbCBs aXN0PyBBc3N1bWluZyB0aGUgbWFpbCBsaXN0IGRpc2FncmVlcw0KIHdpdGggdGhlIERFIHJlY29t bWVuZGF0aW9uLCB3aG8gZGVjaWRlcz8gPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPlRo aXMgaXMgdGhlIHByb2Nlc3MgdXNlZCBmb3IgdGhlIC53ZWxsLWtub3duIFVSSSBzcGVjLCB0aGUg SlNPTiBXZWIgVG9rZW4gKEpXVCkgc3BlYywgdGhlIEpPU0Ugc3BlY3MsIG1hbnkgT0F1dGggc3Bl Y3MgYW5kIGl0IHdvcmtzIHdlbGwuJm5ic3A7IEl0IGFsbG93cyBpbnRlcmVzdGVkIHBhcnRpZXMg dG8gc2VlIGFuZCBjb21tZW50IG9uIHJlZ2lzdHJhdGlvbiByZXF1ZXN0cy4mbmJzcDsNCiBUaGUg RGVzaWduYXRlZCBFeHBlcnRzIGFyZSBzdGlsbCB0aGUgb25lcyB0byBkZWNpZGUuJm5ic3A7IFNl ZSB0aGVzZSByZWZlcmVuY2VzIGZvciBzb21lIHVzZXMgb2YgdGhpcyBraW5kIG9mIHB1YmxpY2x5 LXZpc2libGUgcmVnaXN0cmF0aW9uIHByb2NlZHVyZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM1Nzg1 I3NlY3Rpb24tNS4xIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNTc4NSNzZWN0aW9u LTUuMTwvYT4gKHVzaW5nDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPjxhIGhyZWY9Im1haWx0bzp3ZWxsa25vd24t dXJpLXJldmlld0BpZXRmLm9yZyI+d2VsbGtub3duLXVyaS1yZXZpZXdAaWV0Zi5vcmc8L2E+PC9z cGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4pPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxhIGhyZWY9 Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2NzQ5I3NlY3Rpb24tMTEuMSI+aHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzY3NDkjc2VjdGlvbi0xMS4xPC9hPiAodXNpbmcNCjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztj b2xvcjpibGFjayI+PGEgaHJlZj0ibWFpbHRvOm9hdXRoLWV4dC1yZXZpZXdAaWV0Zi5vcmciPm9h dXRoLWV4dC1yZXZpZXdAaWV0Zi5vcmc8L2E+PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAy MDYwIj4pPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9yZmM3NTE1I3NlY3Rpb24tOSI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc1MTUj c2VjdGlvbi05PC9hPiAodXNpbmcNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+PGEgaHJlZj0ibWFpbHRvOmpvc2Ut cmVnLXJldmlld0BpZXRmLm9yZyI+am9zZS1yZWctcmV2aWV3QGlldGYub3JnPC9hPik8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc4MDAjc2Vj dGlvbi02Ij5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzgwMCNzZWN0aW9uLTY8L2E+ ICh1c2luZw0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86am9zZS1yZWctcmV2aWV3QGll dGYub3JnIj5qb3NlLXJlZy1yZXZpZXdAaWV0Zi5vcmc8L2E+KTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6IzAwMjA2MCI+SSBjYW4gZmluZCBtb3JlIGV4YW1wbGVzIG9mIHRoZSB1c2Ugb2Yg dGhpcyBwdWJsaWNseS12aXNpYmxlIHJlZ2lzdHJhdGlvbiBwcm9jZWR1cmUgaWYgeW91IGxpa2Uu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5EYW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAw MjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IFRoYW5rcyBmb3IgdGhlIGNhcmVmdWwgcmV2aWV3LCBEYW4sPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyAtLSBNaWtlPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+T24gVHVlLCBGZWIgMjcsIDIwMTggYXQgNzo1MyBQTSwgSmltIFNjaGFhZCAmbHQ7PGEg aHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iIHRhcmdldD0iX2JsYW5rIj5pZXRm QGF1Z3VzdGNlbGxhcnMuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8YmxvY2tx dW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtw YWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDow aW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JbnRl Z2VyIHZhbHVlcyBiZXR3ZWVuIC0yNTYgYW5kIDI1NSBhbmQgc3RyaW5ncyBvZiBsZW5ndGggMSBh cmUgZGVzaWduYXRlZCBhcyBTdGFuZGFyZHMgVHJhY2sgUmVxdWlyZWQuPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SW50ZWdlciB2 YWx1ZXMgZnJvbSAtNjU1MzYgdG8gNjU1MzUgYW5kIHN0cmluZ3Mgb2YgbGVuZ3RoIDIgYXJlIGRl c2lnbmF0ZWQgYXMgU3BlY2lmaWNhdGlvbiBSZXF1aXJlZC48L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JbnRlZ2VyIHZhbHVlcyBv ZiBncmVhdGVyIHRoYW4gNjU1MzUgYW5kIHN0cmluZ3Mgb2YgbGVuZ3RoIGdyZWF0ZXIgdGhhbiAy IGFyZSBkZXNpZ25hdGVkIGFzIEV4cGVydCBSZXZpZXcuJm5ic3A7DQo8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5JbnRlZ2VyIHZh bHVlcyBsZXNzIHRoYW4gLTY1NTM2IGFyZSBtYXJrZWQgYXMgUHJpdmF0ZSBVc2UuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+U28g dGhhdCBzYXlzIHdoYXQgSUFOQSBwb2xpY3kgaXMgdG8gYmUgdXNlZCBmb3IgZWFjaCBvZiB0aGUg ZGlmZmVyZW50IGl0ZW1zLiZuYnNwOyBUaGlzIGRlZmluZXMgdGhlIHBvbGljaWVzIGFuZCB0aGUg cmFuZ2VzIGZvcg0KIHRob3NlIHBvbGljaWVzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlRoZXJlIGlzIG5vdCBhbnl0aGluZyB0 aGF0IGlzIG1ha2luZyBhIGRpc3RpbmN0aW9uIG9uIHdoYXQgdGhlIGNyaXRlcmlhIHRvIGJlIHVz ZWQgYnkgdGhlIERFIGluIHRoZSBkb2N1bWVudCB3aGljaCBpcyBzZXBhcmF0ZSwNCiBidXQgSSBk b27igJl0IHRoaW5rIHRoYXQgaXMgbmVlZGVkLiZuYnNwOyBUaGlzIGlzIHdoeSB0aGV5IGFyZSBE RXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBzdGlsbCBkb27igJl0IHNl ZSB3aGF0IHlvdSB0aGluayBpcyBtaXNzaW5nLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ SmltPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGlu ZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj5Gcm9tOjwvYj4gRGFuIFJvbWFzY2FudSBbbWFpbHRv OjxhIGhyZWY9Im1haWx0bzpkcm9tYXNjYUBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5kcm9t YXNjYUBnbWFpbC5jb208L2E+XQ0KPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIEZlYnJ1YXJ5 IDI3LCAyMDE4IDI6MDAgQU08YnI+DQo8Yj5Ubzo8L2I+IEJlbmphbWluIEthZHVrICZsdDs8YSBo cmVmPSJtYWlsdG86a2FkdWtAbWl0LmVkdSIgdGFyZ2V0PSJfYmxhbmsiPmthZHVrQG1pdC5lZHU8 L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gSmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmll dGZAYXVndXN0Y2VsbGFycy5jb20iIHRhcmdldD0iX2JsYW5rIj5pZXRmQGF1Z3VzdGNlbGxhcnMu Y29tPC9hPiZndDs7IGdlbi1hcnQgJmx0OzxhIGhyZWY9Im1haWx0bzpnZW4tYXJ0QGlldGYub3Jn IiB0YXJnZXQ9Il9ibGFuayI+Z2VuLWFydEBpZXRmLm9yZzwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFp bHRvOmRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLmFsbEBpZXRmLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPmRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLmFsbEBpZXRmLm9yZzwvYT47IGll dGYgJmx0OzxhIGhyZWY9Im1haWx0bzppZXRmQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+aWV0 ZkBpZXRmLm9yZzwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOmFjZUBpZXRmLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPmFjZUBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtBY2Vd IEdlbmFydCB0ZWxlY2hhdCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4t MTI8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+SGksPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt YXJnaW4tYm90dG9tOjEyLjBwdCI+U2VlIGFsc28gbXkgb3RoZXIgbm90ZXMuDQo8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij5JIGJlbGlldmUgdGhhdCB3aGF0 IHRoZSBkb2N1bWVudCB0cmllcyB0byBzYXkgaXM6DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdp bi1ib3R0b206MTIuMHB0Ij5SZWdpc3RlciBSIGlzIGRpdmlkZWQgaW50byBmb3VyIGRpZmZlcmVu dCByYW5nZXMgUjEsIFIyLCBSMywgUjQgKGRlZmluaW5nIHRoZSB2YWx1ZSBsaW1pdHMgbWF5IGJl IHVzZWZ1bCk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij5WYWx1ZXMg aW4gcmFuZ2UgUjEgYXJlIGFsbG9jYXRlZCBhY2NvcmRpbmcgdG8gcG9saWN5IFAxIGluIHRoZSBj YXNlIHRoYXQgLi4uPGJyPg0KVmFsdWVzIGluIHJhbmdlIFIyIGFyZSBhbGxvY2F0ZWQgYWNjb3Jk aW5nIHRvIHBvbGljeSBQMiBpbiB0aGUgY2FzZSB0aGF0IC4uLjxicj4NClZhbHVlcyBpbiByYW5n ZSBSMyBhcmUgYWxsb2NhdGVkIGFjY29yZGluZyB0byBwb2xpY3kgUDMgaW4gdGhlIGNhc2UgdGhh dCAuLi48YnI+DQpWYWx1ZXMgaW4gcmFuZ2UgUjQgYXJlIGFsbG9jYXRlZCBhY2NvcmRpbmcgdG8g cG9saWN5IFA0IGluIHRoZSBjYXNlIHRoYXQgLi4uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4t Ym90dG9tOjEyLjBwdCI+QnV0IGl0IGRvZXNuJ3Qgc2F5IGl0LiBNZW50aW9uaW5nIGZvdXIgY29u Y3VycmVudCBwb2xpY2llcyBmb3IgdGhlIHNhbWUgcmVnaXN0cnkgd2l0aG91dCBzZXBhcmF0aW9u IG9mIHZhbHVlcyByYW5nZSwgYW5kIHdpdGhvdXQgcHJvdmlkaW5nIGNsZWFyIGluc3RydWN0aW9u cyB3aGVuIGVhY2ggcG9saWN5IGlzIHJlY29tbWVuZGVkDQogdG8gYmUgdXNlZCwgc2VlbXMgY29u ZnVzaW5nIHRvIG1lLCBhbmQgbWF5IGJlIGNvbmZ1c2luZyBmb3IgdXNlcnMgb2YgdGhpcyBkb2N1 bWVudCBpbiB0aGUgZnV0dXJlLg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEy LjBwdCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij5E YW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBU dWUsIEZlYiAyNywgMjAxOCBhdCA1OjQwIEFNLCBCZW5qYW1pbiBLYWR1ayAmbHQ7PGEgaHJlZj0i bWFpbHRvOmthZHVrQG1pdC5lZHUiIHRhcmdldD0iX2JsYW5rIj5rYWR1a0BtaXQuZWR1PC9hPiZn dDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0 O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJn aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij5PbiBNb24s IEZlYiAyNiwgMjAxOCBhdCAxMToxOTowNFBNICYjNDM7MDIwMCwgRGFuIFJvbWFzY2FudSB3cm90 ZTo8YnI+DQomZ3Q7IEhpIEppbSw8YnI+DQomZ3Q7PGJyPg0KJmd0OyBUaGFuayB5b3UgZm9yIHlv dXIgYW5zd2VyIGFuZCBmb3IgYWRkcmVzc2luZyBteSBjb21tZW50cy48YnI+DQomZ3Q7PGJyPg0K Jmd0OyBPbiBpdGVtICMyOjxicj4NCiZndDs8YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDsg T24gTW9uLCBGZWIgMjYsIDIwMTggYXQgMTA6MTIgUE0sIEppbSBTY2hhYWQgJmx0OzxhIGhyZWY9 Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIiB0YXJnZXQ9Il9ibGFuayI+aWV0ZkBhdWd1 c3RjZWxsYXJzLmNvbTwvYT4mZ3Q7IHdyb3RlOjxicj4NCiZndDs8YnI+DQomZ3Q7ICZndDs8YnI+ DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgJmd0OyAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0t LTxicj4NCiZndDsgJmd0OyAmZ3Q7IEZyb206IERhbiBSb21hc2NhbnUgW21haWx0bzo8YSBocmVm PSJtYWlsdG86ZHJvbWFzY2FAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+ZHJvbWFzY2FAZ21h aWwuY29tPC9hPl08YnI+DQomZ3Q7ICZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsg Jmd0OyAuLi48YnI+DQomZ3Q7PGJyPg0KJmd0OyAmZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgJmd0 OyAyLiBJIGFtIGEgbGl0dGxlIGNvbmZ1c2VkIGJ5IHRoZSBkZWZpbml0aW9uIG9mIHBvbGljaWVz IGluIFNlY3Rpb24gOS4xOjxicj4NCiZndDsgJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7ICZndDsm bmJzcDsgJm5ic3A7IERlcGVuZGluZyB1cG9uIHRoZSB2YWx1ZXMgYmVpbmcgcmVxdWVzdGVkLCBy ZWdpc3RyYXRpb24gcmVxdWVzdHMgYXJlPGJyPg0KJmd0OyAmZ3Q7ICZndDsmbmJzcDsgJm5ic3A7 IGV2YWx1YXRlZCBvbiBhIFN0YW5kYXJkcyBUcmFjayBSZXF1aXJlZCwgU3BlY2lmaWNhdGlvbiBS ZXF1aXJlZCw8YnI+DQomZ3Q7ICZndDsgJmd0OyZuYnNwOyAmbmJzcDsgRXhwZXJ0IFJldmlldywg b3IgUHJpdmF0ZSBVc2UgYmFzaXMgW1JGQzgxMjZdIGFmdGVyIGEgdGhyZWUtd2Vlazxicj4NCiZn dDsgJmd0OyAmZ3Q7Jm5ic3A7ICZuYnNwOyByZXZpZXcgcGVyaW9kIG9uIHRoZSA8YSBocmVmPSJt YWlsdG86Y3d0LXJlZy1yZXZpZXdAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj4NCmN3dC1yZWct cmV2aWV3QGlldGYub3JnPC9hPiBtYWlsaW5nIGxpc3QsIG9uIHRoZTxicj4NCiZndDsgJmd0OyAm Z3Q7Jm5ic3A7ICZuYnNwOyBhZHZpY2Ugb2Ygb25lIG9yIG1vcmUgRGVzaWduYXRlZCBFeHBlcnRz Ljxicj4NCiZndDsgJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7ICZndDsgSG93IGRvZXMgdGhpcyB3 b3JrPyBUaGUgcmVxdWVzdCBpcyBmb3J3YXJkZWQgdG8gdGhlIGRlc2lnbmF0ZWQgZXhwZXJ0LDxi cj4NCiZndDsgJmd0OyAmZ3Q7IGhlL3NoZSBtYWtlIGEgcmVjb21tZW5kYXRpb24gY29uY2Vybmlu ZyB0aGUgcG9saWN5IG9uIHRoZSBtYWlsIGxpc3QsIGFuZDxicj4NCiZndDsgJmd0OyAmZ3Q7IGRl cGVuZGluZyBvbiB0aGUgZmVlZGJhY2sgcmVjZWl2ZWQgYSBwb2xpY3kgaXMgc2VsZWN0ZWQ/IFdo byBlc3RhYmxpc2hlczxicj4NCiZndDsgJmd0OyAmZ3Q7IGNvbnNlbnN1cz88YnI+DQomZ3Q7ICZn dDsgJmd0Ozxicj4NCiZndDsgJmd0OyAmZ3Q7IEZyYW5rbHksIEkgd29uZGVyIGlmIHRoaXMgY2Fu IHdvcmsgYXQgYWxsLiBBcmUgdGhlcmUgb3RoZXIgZXhhbXBsZXMgb2Y8YnI+DQomZ3Q7ICZndDsg Zm91cjxicj4NCiZndDsgJmd0OyAmZ3Q7IGRpZmZlcmVudCBwb2xpY2llcyBmb3IgdGhlIHNhbWUg cmVnaXN0cnksIGFwcGxpZWQgb24gYSBjYXNlLXRvLWNhc2U8YnI+DQomZ3Q7ICZndDsgYmFzaXM/ PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7IFRoaXMgaXMgdGhlIHNhbWUgYXBwcm9hY2gg dGhhdCBpcyBiZWluZyB1c2VkIGZvciB0aGUgQ09TRSByZWdpc3RyaWVzLiZuYnNwOyBBczxicj4N CiZndDsgJmd0OyBhbiBleGFtcGxlLCB5b3UgY2FuIGxvb2sgYXQgPGEgaHJlZj0iaHR0cHM6Ly93 d3cuaWFuYS5vcmcvIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWFuYS5vcmcvPC9hPjxi cj4NCiZndDsgJmd0OyBhc3NpZ25tZW50cy9jb3NlL2Nvc2UueGh0bWwjYWxnb3JpdGhtcy48YnI+ DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgUGFydCBvZiB0aGUgaXNzdWUgYWJvdXQgdGhpcyBp cyB0aGF0IHRoZSBKT1NFL0pXVCByZWdpc3RyaWVzIGRvIGhhdmUgdGhlPGJyPg0KJmd0OyAmZ3Q7 IHNhbWUgZGlmZmVyZW50IHBvbGljaWVzLCBidXQgdGhhdCBkaWZmZXJlbmNlcyBhcmUgaGlkZGVu IGZyb20gdGhlIElBTkE8YnI+DQomZ3Q7ICZndDsgcmVnaXN0cnkuJm5ic3A7IFNpbmNlIHRoZXkg YWxsb3cgZm9yIGEgVVJJIHRvIGJlIHVzZWQgYXMgdGhlIGlkZW50aWZpZXIgb2YgYTxicj4NCiZn dDsgJmd0OyBmaWVsZCwgb25seSB0aGUgcGxhaW4gdGV4dCB2ZXJzaW9ucyBhcmUgcmVnaXN0ZXJl ZC4mbmJzcDsgVGh1cyBJIGNhbiB1c2UgJnF1b3Q7PGJyPg0KJmd0OyAmZ3Q7IDxhIGhyZWY9Imh0 dHA6Ly9hdWd1c3RjZWxsYXJzLmNvbS9KV1QvTXlfVGFnIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDov L2F1Z3VzdGNlbGxhcnMuY29tL0pXVC9NeV9UYWc8L2E+JnF1b3Q7IGFzIGFuIGlkZW50aWZpZXIu Jm5ic3A7IFNpbmNlIGZvciBDQk9SPGJyPg0KJmd0OyAmZ3Q7IHRoZSBzZXQgb2YgdGFnIHZhbHVl cyBpcyBjbG9zZWQgYW5kIGRvZXMgbm90IGhhdmUgdGhpcyBlc2NhcGUgKG5vciB3b3VsZDxicj4N CiZndDsgJmd0OyBvbmUgd2FudCB0aGUgbGVuZ3RoIG9mIHRoZSB0YWcpIGl0IGlzIG5lY2Vzc2Fy eSB0byBoYXZlIHRoaXMgYnJlYWsgZG93biBvZjxicj4NCiZndDsgJmd0OyB0YWcgZmllbGRzLjxi cj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0 Ozxicj4NCiZndDsgVGhpcyBkb2VzIG5vdCBzZWVtIHRvIGJlIGV4YWN0bHkgdGhlIHNhbWUgYXBw cm9hY2guIFRoZSBDT1NFIFJGQyA4MTUyPGJyPg0KJmd0OyBkZWZpbmVzIHRoZSByZWdpc3RyeSBw b2xpY3kgaW4gYSBkaWZmZXJlbnQgbWFubmVyLiBUaGVyZSBpcyBvbmx5IG9uZSBwb2xpY3k8YnI+ DQomZ3Q7IHRoYXQgaXMgcHJvcG9zZWQgJ0V4cGVydCBSZXZpZXcnIGFuZCB0aGFuIHRoZSBFeHBl cnQgUmV2aWV3IEluc3RydWN0aW9uczxicj4NCiZndDsgYXJlIHVzZWQgdG8gZGVmaW5lIHRoZSBj YXNlcyB3aGVuIGEgU3RhbmRhcmRzIFRyYWNrIHNwZWNpZmljYXRpb24gaXM8YnI+DQomZ3Q7IHJl cXVpcmVkLiBObyBzdWNoIHRleHQgZXhpc3RzIGluIHRoZSBjdXJyZW50IEktRC4gVGhlcmUgaXMg bm8gc2VwYXJhdGlvbiBvZjxicj4NCiZndDsgdGhlIHZhbHVlcyBzcGFjZSBpbiB0aGUgcmVnaXN0 cnkgYWNjb3JkaW5nIHRvIHRoZSB0eXBlIG9mIGFzc2lnbm1lbnQgaGVyZSw8YnI+DQomZ3Q7IGFz Jm5ic3A7IGluIFJGQyA4MTUyLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+VGhlIHRlbXBsYXRlIGluIHNlY3Rpb24gOS4xLjEgaGFzIHRoZSBk aWZmZXJlbnQgcG9saWNpZXMgZm9yIHRoZTxicj4NCmRpZmZlcmVudCBpbnRlZ2VyIHJhbmdlcywg dW5kZXIgdGhlICdDbGFpbSBLZXknIHNlY3Rpb24uJm5ic3A7IEthdGhsZWVuPGJyPg0KKElJUkMp IGFscmVhZHkgbm90ZWQgdGhhdCB0aGlzIHNob3VsZCBwcm9iYWJseSBiZSByZXBlYXRlZCBpbiB0 aGU8YnI+DQppbnRyb2R1Y3RvcnkgcGFydCBvZiBzZWN0aW9uIDkuMSBhcyB3ZWxsLCBhbmQgdGhh dCB3aWxsIGJlIGRvbmU8YnI+DQpiZWZvcmUgdGhlIGRvY3VtZW50IGlzIHNlbnQgdG8gdGhlIElF U0cuPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiM4ODg4ODgiPjxicj4NCjxzcGFuIGNsYXNzPSJt MTg1ODIzNTkyMDQxNjM1MjkxMWhvZW56YiI+LUJlbmphbWluPC9zcGFuPjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8 L2h0bWw+DQo= --_000_SN6PR2101MB09436CCA10FD477A41819B42F5C00SN6PR2101MB0943_-- From nobody Tue Feb 27 15:05:35 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79A3112E8CD; Tue, 27 Feb 2018 15:05:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.909 X-Spam-Level: X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0jrH2QGXYbII; Tue, 27 Feb 2018 15:05:14 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C50D12E89E; Tue, 27 Feb 2018 15:05:14 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 27 Feb 2018 15:03:18 -0800 From: Jim Schaad To: 'Dan Romascanu' CC: 'Benjamin Kaduk' , 'gen-art' , , 'ietf' , References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> In-Reply-To: Date: Tue, 27 Feb 2018 15:05:00 -0800 Message-ID: <02c001d3b01f$67349390$359dbab0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_02C1_01D3AFDC.5912B320" X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQFwM0g/CEx2cEygtLHnG1KjSGnjDwJPOi8kAfvAzWwBSk2I/AHosYLBAeXFl70CQ4Q+zaQinKsw X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 23:05:17 -0000 ------=_NextPart_000_02C1_01D3AFDC.5912B320 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =20 =20 From: Dan Romascanu [mailto:dromasca@gmail.com]=20 Sent: Tuesday, February 27, 2018 2:23 PM To: Jim Schaad Cc: Benjamin Kaduk ; gen-art ; = draft-ietf-ace-cbor-web-token.all@ietf.org; ietf ; = ace@ietf.org Subject: Re: [Ace] Genart telechat review of = draft-ietf-ace-cbor-web-token-12 =20 Hi Jim, There are still a few problems:=20 1. The policies and mapping to the values ranges are hidden in the Claim = Key field in the template (the comment also made by Kathleen) [JLS] True, but not an issue as far as I am concerned. I am totally = neutral about moving this up a level (I don=E2=80=99t really like = duplication). 2. At least one incorrect policy name is used: Standards Track Required = - do you mean Standards Action (?) [JLS] Yes, I missed that although I assume IANA would have complained = about it. 3. You describe a process that involves a mail list = (cwt-reg-review@ietf.org ) and Experts = Review. This description is not clear. Usually IANA approaches one DE = for advice and expects the advice from the same DE in a reasonable = period of time. If I understand correctly the process described in = Section 9.1 one or more DEs make a recommendation and run it with the = mail list. Who establishes the consensus on the mail list? Assuming the = mail list disagrees with the DE recommendation, who decides? [JLS] The process is not one that I would have described, but is the one = that Mike has used for the documents that he has written. The time = period was a response to the time out issues that the IESG was trying to = address at the time. I have always assumed that the email list was = intended to function in the same way as the announce list for media = types would be done. In practice IANA has sent requests to the list for = JOSE with a request for review and a request about how the review is to = be handled by the set of DEs on the list. My assumption is the set of = DEs would define how the consensus is reached and it might change both = over time and as the set of DEs changes. Jim Regards, Dan =20 On Tue, Feb 27, 2018 at 7:53 PM, Jim Schaad > wrote: Integer values between -256 and 255 and strings of length 1 are = designated as Standards Track Required. =20 Integer values from -65536 to 65535 and strings of length 2 are = designated as Specification Required. =20 Integer values of greater than 65535 and strings of length greater than = 2 are designated as Expert Review. =20 =20 Integer values less than -65536 are marked as Private Use. =20 So that says what IANA policy is to be used for each of the different = items. This defines the policies and the ranges for those policies. =20 There is not anything that is making a distinction on what the criteria = to be used by the DE in the document which is separate, but I = don=E2=80=99t think that is needed. This is why they are DEs. =20 I still don=E2=80=99t see what you think is missing. =20 Jim =20 =20 From: Dan Romascanu [mailto:dromasca@gmail.com = ]=20 Sent: Tuesday, February 27, 2018 2:00 AM To: Benjamin Kaduk > Cc: Jim Schaad = >; gen-art >; = draft-ietf-ace-cbor-web-token.all@ietf.org = ; ietf = >; ace@ietf.org = =20 Subject: Re: [Ace] Genart telechat review of = draft-ietf-ace-cbor-web-token-12 =20 Hi, See also my other notes.=20 I believe that what the document tries to say is:=20 Register R is divided into four different ranges R1, R2, R3, R4 = (defining the value limits may be useful) Values in range R1 are allocated according to policy P1 in the case that = ... Values in range R2 are allocated according to policy P2 in the case that = ... Values in range R3 are allocated according to policy P3 in the case that = ... Values in range R4 are allocated according to policy P4 in the case that = ... But it doesn't say it. Mentioning four concurrent policies for the same = registry without separation of values range, and without providing clear = instructions when each policy is recommended to be used, seems confusing = to me, and may be confusing for users of this document in the future.=20 Regards, Dan =20 On Tue, Feb 27, 2018 at 5:40 AM, Benjamin Kaduk > wrote: On Mon, Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote: > Hi Jim, > > Thank you for your answer and for addressing my comments. > > On item #2: > > > > On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad > wrote: > > > > > > > > -----Original Message----- > > > From: Dan Romascanu [mailto:dromasca@gmail.com = ] > > > > > > > ... > > > > > > > 2. I am a little confused by the definition of policies in Section = 9.1: > > > > > > Depending upon the values being requested, registration = requests are > > > evaluated on a Standards Track Required, Specification = Required, > > > Expert Review, or Private Use basis [RFC8126] after a = three-week > > > review period on the cwt-reg-review@ietf.org = mailing list, on the > > > advice of one or more Designated Experts. > > > > > > How does this work? The request is forwarded to the designated = expert, > > > he/she make a recommendation concerning the policy on the mail = list, and > > > depending on the feedback received a policy is selected? Who = establishes > > > consensus? > > > > > > Frankly, I wonder if this can work at all. Are there other = examples of > > four > > > different policies for the same registry, applied on a = case-to-case > > basis? > > > > This is the same approach that is being used for the COSE = registries. As > > an example, you can look at https://www.iana.org/ > > assignments/cose/cose.xhtml#algorithms. > > > > Part of the issue about this is that the JOSE/JWT registries do have = the > > same different policies, but that differences are hidden from the = IANA > > registry. Since they allow for a URI to be used as the identifier = of a > > field, only the plain text versions are registered. Thus I can use = " > > http://augustcellars.com/JWT/My_Tag" as an identifier. Since for = CBOR > > the set of tag values is closed and does not have this escape (nor = would > > one want the length of the tag) it is necessary to have this break = down of > > tag fields. > > > > > > > > > This does not seem to be exactly the same approach. The COSE RFC 8152 > defines the registry policy in a different manner. There is only one = policy > that is proposed 'Expert Review' and than the Expert Review = Instructions > are used to define the cases when a Standards Track specification is > required. No such text exists in the current I-D. There is no = separation of > the values space in the registry according to the type of assignment = here, > as in RFC 8152. The template in section 9.1.1 has the different policies for the different integer ranges, under the 'Claim Key' section. Kathleen (IIRC) already noted that this should probably be repeated in the introductory part of section 9.1 as well, and that will be done before the document is sent to the IESG. -Benjamin =20 =20 ------=_NextPart_000_02C1_01D3AFDC.5912B320 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

 

 

From: Dan = Romascanu [mailto:dromasca@gmail.com]
Sent: Tuesday, February = 27, 2018 2:23 PM
To: Jim Schaad = <ietf@augustcellars.com>
Cc: Benjamin Kaduk = <kaduk@mit.edu>; gen-art <gen-art@ietf.org>; = draft-ietf-ace-cbor-web-token.all@ietf.org; ietf <ietf@ietf.org>; = ace@ietf.org
Subject: Re: [Ace] Genart telechat review of = draft-ietf-ace-cbor-web-token-12

 

Hi Jim,

There = are still a few problems:

1. The policies and mapping to the values = ranges are hidden in the Claim Key field in the template (the comment = also made by Kathleen)

[JLS] True, but not an issue as far as I = am concerned.=C2=A0 I am totally neutral about moving this up a level (I = don=E2=80=99t really like duplication).

2. At least one = incorrect policy name is used: Standards Track Required - do you mean = Standards Action (?)

[JLS] Yes, I missed that although I assume = IANA would have complained about it.

3. You describe a = process that involves a mail list (cwt-reg-review@ietf.org) and = Experts Review. This description is not clear. Usually IANA approaches = one DE for advice and expects the advice from the same DE in a = reasonable period of time. If I understand correctly the process = described in Section 9.1 one or more DEs make a recommendation and run = it with the mail list. Who establishes the consensus on the mail list? = Assuming the mail list disagrees with the DE recommendation, who = decides?

[JLS] The process is not one that I would have = described, but is the one that Mike has used for the documents that he = has written.=C2=A0 The time period was a response to the time out issues = that the IESG was trying to address at the time.=C2=A0 I have always = assumed that the email list was intended to function in the same way as = the announce list for media types would be done.=C2=A0 In practice IANA = has sent requests to the list for JOSE with a request for review and a = request about how the review is to be handled by the set of DEs on the = list.=C2=A0 =C2=A0My assumption is the set of DEs would define how the = consensus is reached and it might change both over time and as the set = of DEs changes.

Jim

Regards,

Dan

 

On Tue, = Feb 27, 2018 at 7:53 PM, Jim Schaad <ietf@augustcellars.com> = wrote:

Integer values = between -256 and 255 and strings of length 1 are designated as Standards = Track Required.

 

Integer values from = -65536 to 65535 and strings of length 2 are designated as Specification = Required.

 

Integer values of = greater than 65535 and strings of length greater than 2 are designated = as Expert Review. 

 

Integer values less = than -65536 are marked as Private Use.

 

So that says what = IANA policy is to be used for each of the different items.  This = defines the policies and the ranges for those = policies.

 

There is not = anything that is making a distinction on what the criteria to be used by = the DE in the document which is separate, but I don=E2=80=99t think that = is needed.  This is why they are DEs.

 <= /o:p>

I still = don=E2=80=99t see what you think is missing.

 <= /o:p>

Jim

 <= /o:p>

 <= /o:p>

From:= Dan Romascanu [mailto:dromasca@gmail.com]
Sent: Tuesday, = February 27, 2018 2:00 AM
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: Jim Schaad <ietf@augustcellars.com>; gen-art <gen-art@ietf.org>; draft-ietf-ace-cbor-web-token.all@ietf.org; ietf = <ietf@ietf.org>; ace@ietf.org
Subject: Re: [Ace] Genart = telechat review of = draft-ietf-ace-cbor-web-token-12

 <= /o:p>

Hi,

=

See also my other = notes.

I believe that = what the document tries to say is:

Register R is = divided into four different ranges R1, R2, R3, R4 (defining the value = limits may be useful)

Values in range = R1 are allocated according to policy P1 in the case that ...
Values = in range R2 are allocated according to policy P2 in the case that = ...
Values in range R3 are allocated according to policy P3 in the = case that ...
Values in range R4 are allocated according to policy P4 = in the case that ...

But it doesn't = say it. Mentioning four concurrent policies for the same registry = without separation of values range, and without providing clear = instructions when each policy is recommended to be used, seems confusing = to me, and may be confusing for users of this document in the future. =

Regards,

Dan

=

 <= /o:p>

On Tue, Feb = 27, 2018 at 5:40 AM, Benjamin Kaduk <kaduk@mit.edu> wrote:

On Mon, Feb 26, = 2018 at 11:19:04PM +0200, Dan Romascanu wrote:
> Hi = Jim,
>
> Thank you for your answer and for addressing my = comments.
>
> On item #2:
>
>
>
> On = Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad <ietf@augustcellars.com> wrote:
>
> = >
> >
> > > -----Original Message-----
> = > > From: Dan Romascanu [mailto:dromasca@gmail.com]
> > >
> = >
> > ...
>
> > >
> > > 2. I = am a little confused by the definition of policies in Section = 9.1:
> > >
> > >    Depending upon the = values being requested, registration requests are
> > = >    evaluated on a Standards Track Required, Specification = Required,
> > >    Expert Review, or Private Use = basis [RFC8126] after a three-week
> > >    review = period on the cwt-reg-review@ietf.org mailing list, on = the
> > >    advice of one or more Designated = Experts.
> > >
> > > How does this work? The = request is forwarded to the designated expert,
> > > he/she = make a recommendation concerning the policy on the mail list, = and
> > > depending on the feedback received a policy is = selected? Who establishes
> > > consensus?
> > = >
> > > Frankly, I wonder if this can work at all. Are = there other examples of
> > four
> > > different = policies for the same registry, applied on a case-to-case
> > = basis?
> >
> > This is the same approach that is being = used for the COSE registries.  As
> > an example, you can = look at https://www.iana.org/
> > = assignments/cose/cose.xhtml#algorithms.
> >
> > Part = of the issue about this is that the JOSE/JWT registries do have = the
> > same different policies, but that differences are = hidden from the IANA
> > registry.  Since they allow for a = URI to be used as the identifier of a
> > field, only the plain = text versions are registered.  Thus I can use "
> > = http://augustcellars.com/JWT/My_Tag" as an = identifier.  Since for CBOR
> > the set of tag values is = closed and does not have this escape (nor would
> > one want = the length of the tag) it is necessary to have this break down = of
> > tag fields.
> >
> >
> = >
> >
> This does not seem to be exactly the same = approach. The COSE RFC 8152
> defines the registry policy in a = different manner. There is only one policy
> that is proposed = 'Expert Review' and than the Expert Review Instructions
> are used = to define the cases when a Standards Track specification is
> = required. No such text exists in the current I-D. There is no separation = of
> the values space in the registry according to the type of = assignment here,
> as  in RFC = 8152.

The = template in section 9.1.1 has the different policies for = the
different integer ranges, under the 'Claim Key' section.  = Kathleen
(IIRC) already noted that this should probably be repeated = in the
introductory part of section 9.1 as well, and that will be = done
before the document is sent to the IESG.

-Benjamin

=

 <= /o:p>

 

------=_NextPart_000_02C1_01D3AFDC.5912B320-- From nobody Tue Feb 27 15:19:55 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 55A3212EAA3; Tue, 27 Feb 2018 15:11:24 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: Kathleen.Moriarty.ietf@gmail.com, ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151977308434.5200.9767396346362729114.idtracker@ietfa.amsl.com> Date: Tue, 27 Feb 2018 15:11:24 -0800 Archived-At: Subject: [Ace] ace - Requested session has been scheduled for IETF 101 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 23:11:27 -0000 Dear Benjamin Kaduk, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. ace Session 1 (2:00:00) Monday, Morning Session I 0930-1200 Room Name: Balmoral size: 250 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Authentication and Authorization for Constrained Environments Area Name: Security Area Session Requester: Benjamin Kaduk Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: First Priority: saag cbor core tls lamps kitten cfrg Second Priority: quic oauth secevent tokbind t2trg lwig anima suit teep Third Priority: doh httpbis uta 6tisch homenet curdle People who must be present: Kathleen Moriarty Jim Schaad Benjamin Kaduk Resources Requested: Special Requests: A session in the first half of the week (Mon-Wed) would be preferred, to free up some WG participants to travel for another meeting in Prague on friday. --------------------------------------------------------- From nobody Tue Feb 27 16:31:38 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F12812EAC9 for ; Tue, 27 Feb 2018 16:31:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GOvKksTK7PTp for ; Tue, 27 Feb 2018 16:31:35 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75766127775 for ; Tue, 27 Feb 2018 16:31:35 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 27 Feb 2018 16:29:45 -0800 From: Jim Schaad To: 'peter van der Stok' CC: Date: Tue, 27 Feb 2018 16:31:26 -0800 Message-ID: <02d301d3b02b$79eaf540$6dc0dfc0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AdOwK1dQapdmcPpOTmyP0WAY3njacQ== X-Originating-IP: [73.180.8.170] Archived-At: Subject: [Ace] Adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 00:31:37 -0000 Looking at the mailing list, it appears that the working group thinks that the document should be adopted. Peter, please republish the document as an ACE working group document and I will then approve it. Jim From nobody Tue Feb 27 16:33:42 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 528FE12EAD2 for ; Tue, 27 Feb 2018 16:33:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JiureVntSRhO for ; Tue, 27 Feb 2018 16:33:39 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E62D112D954 for ; Tue, 27 Feb 2018 16:33:38 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 27 Feb 2018 16:31:49 -0800 From: Jim Schaad To: Date: Tue, 27 Feb 2018 16:33:31 -0800 Message-ID: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AdOwK4GcIL7FtGJ8RkKfRfaHeH30GA== X-Originating-IP: [73.180.8.170] Archived-At: Subject: [Ace] Agenda Items for London X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 00:33:40 -0000 Please let the chairs know if you want a slot on the agenda for London. Please give us an idea of what you think you need to cover, how long you think it will take and who is doing the presentations. For people doing the presentations, I would like to get slides during the week of March 12th so that the chairs can do a fast review and get them posted before the Monday morning meeting. I really do not want to need to do this first thing Monday morning. Jim From nobody Tue Feb 27 16:36:18 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C61212DA41 for ; Tue, 27 Feb 2018 16:36:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6tWdLcsiHz5V for ; Tue, 27 Feb 2018 16:36:14 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5ECE212D954 for ; Tue, 27 Feb 2018 16:36:14 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 27 Feb 2018 16:34:24 -0800 From: Jim Schaad To: Date: Tue, 27 Feb 2018 16:36:06 -0800 Message-ID: <02d501d3b02c$208764b0$61962e10$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AdOwK/YKCLgJJEjfSh+SUDe0x3b8Dg== X-Originating-IP: [73.180.8.170] Archived-At: Subject: [Ace] Hackathon Interop X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 00:36:17 -0000 Please let me know via private mail if you think you want to participate in some type of interop even on the ACE Oauth Authorization document. I would like to get an idea of what capabilities people think they are going to have so we can start getting a set of test cases worked up. Thanks, Jim From nobody Tue Feb 27 23:23:41 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0FC112DA26; Tue, 27 Feb 2018 23:23:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5TvOcoVYiHP4; Tue, 27 Feb 2018 23:23:36 -0800 (PST) Received: from mail-qk0-x236.google.com (mail-qk0-x236.google.com [IPv6:2607:f8b0:400d:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A440120725; Tue, 27 Feb 2018 23:23:36 -0800 (PST) Received: by mail-qk0-x236.google.com with SMTP id d206so1814137qkb.3; Tue, 27 Feb 2018 23:23:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=5adbeJAvIK1L0FILvLQIT0A/VHb5RgWpqlDsY1v2+AY=; b=GBWzdNwA5vA7KIZl/HsaRmnzG5Iz1UT+DP/i1PSVMOxuLQnOyfmz8JFGFjy2H18PIb jYxw/GFapKb/+kYBrLUVCGJPKt+lPJbYcy6eHgAv0P1Q3I45NPuT3Q3eh2MSNvhkrp4W wYu3R0ONLRHVDbypd37ax6Jimw2BJMCSIGxXx6GhHwEVjJHyX+r4niJv8ipi/dfxqfFm i/omrYTYSNwWjx1df9Y9NazYjmCLDcKTGNMYa+qh8z/LxQo8qGcoKQG3iaZPoSyGVb7p 7fx2GWuEQxheD5T1hcgjbV+LZtcc34u4OJUqHehmmizN2bqtNu0HVrxHl07lG02SGqvM 4y1g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=5adbeJAvIK1L0FILvLQIT0A/VHb5RgWpqlDsY1v2+AY=; b=qOx3QH/U5QBpoSwf7EKk5GtUZB58ZsTgXOFgT3WIIOAcClwNaLbNw52fuHXQejJlGS yaYUEqW5a3jHbUn8EPbujC/yth3UcExqMZiP2+Iul9AXr2oLsrfsdCrZ37f4Dn6dSwk2 TdpuGGDMCpg3NiOGBugU0oOJAaMgVt5KnOx/2VhO9gU0ny/QPf95Eym7LssNfidtBCYu HY36XBvHR1P4vYD9PJ//n+TdFq4xDiK9YZHq1zDLxk33ZlNiSYe0iYNEhpx9iF/vDGY2 xTdbdFCHV4GWWwKDr1txed0Aok6GSED+VCirnI6HNKrtQEf6z5n4QiNA9/g3cx6W/PG/ ZLUA== X-Gm-Message-State: APf1xPDXl2rd+F2FrTlvS2u0uXA2pboYfKOw0lPG+c70FhCGyPEKjCBQ eZ5EUVKo8J0rFvzLr0ZwTGhI0yrBPn19c3AJLX4= X-Google-Smtp-Source: AG47ELv+esMNYBpVnXKtfxKYLUiTLFOPjzrMIY01HMIMvqGMD+vDDUj/AtkawndYRbvi4/xpDnhWOjTdFBIlMmMwDoo= X-Received: by 10.55.19.76 with SMTP id d73mr25716198qkh.288.1519802615452; Tue, 27 Feb 2018 23:23:35 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.23.200 with HTTP; Tue, 27 Feb 2018 23:23:34 -0800 (PST) In-Reply-To: References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> From: Dan Romascanu Date: Wed, 28 Feb 2018 09:23:34 +0200 Message-ID: To: Mike Jones Cc: Jim Schaad , gen-art , "ace@ietf.org" , ietf , Benjamin Kaduk , "draft-ietf-ace-cbor-web-token.all@ietf.org" Content-Type: multipart/alternative; boundary="001a11400d2005dbfa0566409fb5" Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 07:23:40 -0000 --001a11400d2005dbfa0566409fb5 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Mike, The edits that you propose in #1 and #2 are good IMO and they would improve the clarity of the document. Concerning #3 - all the 'running code' examples that you provided are all for one type of policy only - Specification Required. The case here seems a little more complex, as the review and required advice refer to multiple policies. Thanks to the discussion and information provided by you and Jim, I believe that I better understand now how this works, and I defer to the General Area and Security AD the decision whether the text is sufficiently clear. Thanks for addressing my comments. Regards, Dan On Wed, Feb 28, 2018 at 12:52 AM, Mike Jones wrote: > Replies inline=E2=80=A6 > > > > *From:* Ace *On Behalf Of * Dan Romascanu > *Sent:* Tuesday, February 27, 2018 2:23 PM > *To:* Jim Schaad > *Cc:* gen-art ; ace@ietf.org; ietf ; > Benjamin Kaduk ; draft-ietf-ace-cbor-web-token.all@ietf.or= g > *Subject:* Re: [Ace] Genart telechat review of > draft-ietf-ace-cbor-web-token-12 > > > > Hi Jim, > > There are still a few problems: > > > > 1. The policies and mapping to the values ranges are hidden in the Claim > Key field in the template (the comment also made by Kathleen) > > > > Per my earlier note, I will be making this language clearer when the next > revision is published. > > > > > > 2. At least one incorrect policy name is used: Standards Track Required - > do you mean Standards Action (?) > > > > Thanks =E2=80=93 I=E2=80=99ll update the terminology when the next draft = is published. > > > > 3. You describe a process that involves a mail list ( > cwt-reg-review@ietf.org) and Experts Review. This description is not > clear. Usually IANA approaches one DE for advice and expects the advice > from the same DE in a reasonable period of time. If I understand correctl= y > the process described in Section 9.1 one or more DEs make a recommendatio= n > and run it with the mail list. Who establishes the consensus on the mail > list? Assuming the mail list disagrees with the DE recommendation, who > decides? > > > > This is the process used for the .well-known URI spec, the JSON Web Token > (JWT) spec, the JOSE specs, many OAuth specs and it works well. It allow= s > interested parties to see and comment on registration requests. The > Designated Experts are still the ones to decide. See these references fo= r > some uses of this kind of publicly-visible registration procedure: > > > > https://tools.ietf.org/html/rfc5785#section-5.1 (using > wellknown-uri-review@ietf.org) > > https://tools.ietf.org/html/rfc6749#section-11.1 (using > oauth-ext-review@ietf.org) > > https://tools.ietf.org/html/rfc7515#section-9 (using > jose-reg-review@ietf.org) > > https://tools.ietf.org/html/rfc7800#section-6 (using > jose-reg-review@ietf.org) > > > > I can find more examples of the use of this publicly-visible registration > procedure if you like. > > > > Regards, > > Dan > > > > Thanks for the > careful review, Dan, > > -- Mike > > > > On Tue, Feb 27, 2018 at 7:53 PM, Jim Schaad > wrote: > > Integer values between -256 and 255 and strings of length 1 are designate= d > as Standards Track Required. > > > > Integer values from -65536 to 65535 and strings of length 2 are designate= d > as Specification Required. > > > > Integer values of greater than 65535 and strings of length greater than 2 > are designated as Expert Review. > > > > Integer values less than -65536 are marked as Private Use. > > > > So that says what IANA policy is to be used for each of the different > items. This defines the policies and the ranges for those policies. > > > > There is not anything that is making a distinction on what the criteria t= o > be used by the DE in the document which is separate, but I don=E2=80=99t = think that > is needed. This is why they are DEs. > > > > I still don=E2=80=99t see what you think is missing. > > > > Jim > > > > > > *From:* Dan Romascanu [mailto:dromasca@gmail.com] > *Sent:* Tuesday, February 27, 2018 2:00 AM > *To:* Benjamin Kaduk > *Cc:* Jim Schaad ; gen-art ; > draft-ietf-ace-cbor-web-token.all@ietf.org; ietf ; > ace@ietf.org > *Subject:* Re: [Ace] Genart telechat review of > draft-ietf-ace-cbor-web-token-12 > > > > Hi, > > See also my other notes. > > I believe that what the document tries to say is: > > Register R is divided into four different ranges R1, R2, R3, R4 (defining > the value limits may be useful) > > Values in range R1 are allocated according to policy P1 in the case that > ... > Values in range R2 are allocated according to policy P2 in the case that > ... > Values in range R3 are allocated according to policy P3 in the case that > ... > Values in range R4 are allocated according to policy P4 in the case that > ... > > But it doesn't say it. Mentioning four concurrent policies for the same > registry without separation of values range, and without providing clear > instructions when each policy is recommended to be used, seems confusing = to > me, and may be confusing for users of this document in the future. > > Regards, > > Dan > > > > On Tue, Feb 27, 2018 at 5:40 AM, Benjamin Kaduk wrote: > > On Mon, Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote: > > Hi Jim, > > > > Thank you for your answer and for addressing my comments. > > > > On item #2: > > > > > > > > On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad > wrote: > > > > > > > > > > > > -----Original Message----- > > > > From: Dan Romascanu [mailto:dromasca@gmail.com] > > > > > > > > > > ... > > > > > > > > > > 2. I am a little confused by the definition of policies in Section > 9.1: > > > > > > > > Depending upon the values being requested, registration requests > are > > > > evaluated on a Standards Track Required, Specification Required, > > > > Expert Review, or Private Use basis [RFC8126] after a three-week > > > > review period on the cwt-reg-review@ietf.org mailing list, on th= e > > > > advice of one or more Designated Experts. > > > > > > > > How does this work? The request is forwarded to the designated > expert, > > > > he/she make a recommendation concerning the policy on the mail list= , > and > > > > depending on the feedback received a policy is selected? Who > establishes > > > > consensus? > > > > > > > > Frankly, I wonder if this can work at all. Are there other examples > of > > > four > > > > different policies for the same registry, applied on a case-to-case > > > basis? > > > > > > This is the same approach that is being used for the COSE registries. > As > > > an example, you can look at https://www.iana.org/ > > > assignments/cose/cose.xhtml#algorithms. > > > > > > Part of the issue about this is that the JOSE/JWT registries do have > the > > > same different policies, but that differences are hidden from the IAN= A > > > registry. Since they allow for a URI to be used as the identifier of= a > > > field, only the plain text versions are registered. Thus I can use " > > > http://augustcellars.com/JWT/My_Tag" as an identifier. Since for CBO= R > > > the set of tag values is closed and does not have this escape (nor > would > > > one want the length of the tag) it is necessary to have this break > down of > > > tag fields. > > > > > > > > > > > > > > This does not seem to be exactly the same approach. The COSE RFC 8152 > > defines the registry policy in a different manner. There is only one > policy > > that is proposed 'Expert Review' and than the Expert Review Instruction= s > > are used to define the cases when a Standards Track specification is > > required. No such text exists in the current I-D. There is no separatio= n > of > > the values space in the registry according to the type of assignment > here, > > as in RFC 8152. > > The template in section 9.1.1 has the different policies for the > different integer ranges, under the 'Claim Key' section. Kathleen > (IIRC) already noted that this should probably be repeated in the > introductory part of section 9.1 as well, and that will be done > before the document is sent to the IESG. > > -Benjamin > > > > > --001a11400d2005dbfa0566409fb5 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Mike,

The edits t= hat you propose in #1 and #2 are good IMO and they would improve the clarit= y of the document.

Concerning #3 - all the 'running code&= #39; examples that you provided are all for one type of policy only - Speci= fication Required. The case here seems a little more complex, as the review= and required advice refer to multiple policies. Thanks to the discussion a= nd information provided by you and Jim, I believe that I better understand = now how this works, and I defer to the General Area and Security AD the dec= ision whether the text is sufficiently clear.

Thanks for addr= essing my comments.

Regards,

Dan


On Wed, Feb 28, 201= 8 at 12:52 AM, Mike Jones <Michael.Jones@microsoft.com> wrote:

Replies inline=E2=80= =A6

=C2=A0

From: Ace <ace-bounces@ietf.org> On Behalf Of Dan Romascanu
Sent: Tuesday, February 27, 2018 2:23 PM
To: Jim Schaad <ietf@augustcellars.com>
Cc: gen-art <gen-art@ietf.org>; ace@ietf.org; ietf <ietf@ietf.org>; Benjamin Kaduk <kaduk@mit.edu>; draft-ietf-ace-cbor-web= -token.all@ietf.org
Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web= -token-12

=C2=A0

Hi Jim,

There are still a few problems:

=C2=A0

1. The policies and mapping to the values ranges are= hidden in the Claim Key field in the template (the comment also made by Ka= thleen)

=C2=A0

Per my earlier = note, I will be making this language clearer when the next revision is publ= ished.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

2. At least one incorrect policy name is used: Stand= ards Track Required - do you mean Standards Action (?)

=C2=A0

Thanks =E2=80= =93 I=E2=80=99ll update the terminology when the next draft is published.

=C2=A0

3. You describe a process that involves a mail list = (cwt-reg-revie= w@ietf.org) and Experts Review. This description is not clear. Usually = IANA approaches one DE for advice and expects the advice from the same DE in a reasonable period of time. If I understand correctly= the process described in Section 9.1 one or more DEs make a recommendation= and run it with the mail list. Who establishes the consensus on the mail l= ist? Assuming the mail list disagrees with the DE recommendation, who decides?

=C2=A0

This is the pro= cess used for the .well-known URI spec, the JSON Web Token (JWT) spec, the = JOSE specs, many OAuth specs and it works well.=C2=A0 It allows interested = parties to see and comment on registration requests.=C2=A0 The Designated Experts are still the ones to decide.=C2=A0 See these refer= ences for some uses of this kind of publicly-visible registration procedure= :

=C2=A0

https://tools.ietf.= org/html/rfc5785#section-5.1 (using wellknown-= uri-review@ietf.org)=

https://tools.ietf= .org/html/rfc6749#section-11.1 (using oauth-ext-revi= ew@ietf.org)<= /p>

https://tools.ietf.or= g/html/rfc7515#section-9 (using jose-reg-review= @ietf.org)

https://tools.ietf.or= g/html/rfc7800#section-6 (using jose-reg-review= @ietf.org)

=C2=A0

I can find more exampl= es of the use of this publicly-visible registration procedure if you like.<= u>

=C2=A0

Regards,

Dan

=C2=A0

=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 Thanks for the careful review, Dan,

=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 -- Mike

=C2=A0

On Tue, Feb 27, 2018 at 7:53 PM, Jim Schaad <ietf@augustcellars.= com> wrote:

Integer values between -256 and 255 and strings of length = 1 are designated as Standards Track Required.

=C2=A0

Integer values from -65536 to 65535 and strings of length = 2 are designated as Specification Required.

=C2=A0

Integer values of greater than 65535 and strings of length= greater than 2 are designated as Expert Review.=C2=A0

=C2=A0

Integer values less than -65536 are marked as Private Use.=

=C2=A0

So that says what IANA policy is to be used for each of th= e different items.=C2=A0 This defines the policies and the ranges for those policies.

=C2=A0

There is not anything that is making a distinction on what= the criteria to be used by the DE in the document which is separate, but I don=E2=80=99t think that is needed.=C2=A0 This is why they are DEs.<= /span>

=C2=A0

I still don=E2=80=99t see what you think is missing.=

=C2=A0

Jim

=C2=A0

=C2=A0

From: Dan Romascanu [mailto:dromasca@gmail.com]
Sent: Tuesday, February 27, 2018 2:00 AM
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: Jim Schaad <ietf@augustcellars.com>; gen-art <gen-art@ietf.org>; draft-ietf-ace-cbor-web-token.all@ietf.org; ietf <ietf@ietf.org>; ace@ietf.org
Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web= -token-12

=C2=A0

Hi,

See also my other not= es.

I believe that what t= he document tries to say is:

Register R is divided= into four different ranges R1, R2, R3, R4 (defining the value limits may b= e useful)

Values in range R1 ar= e allocated according to policy P1 in the case that ...
Values in range R2 are allocated according to policy P2 in the case that ..= .
Values in range R3 are allocated according to policy P3 in the case that ..= .
Values in range R4 are allocated according to policy P4 in the case that ..= .

But it doesn't sa= y it. Mentioning four concurrent policies for the same registry without sep= aration of values range, and without providing clear instructions when each= policy is recommended to be used, seems confusing to me, and may be confusing for users of this = document in the future.

Regards,

Dan

=C2=A0

On Tue, Feb 27, 2018 at 5:40 AM, Benjamin Kaduk <= kaduk@mit.edu> wr= ote:

On Mon, Feb 26, 2018 = at 11:19:04PM +0200, Dan Romascanu wrote:
> Hi Jim,
>
> Thank you for your answer and for addressing my comments.
>
> On item #2:
>
>
>
> On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad <ietf@augustcellars.com> wrote= :
>
> >
> >
> > > -----Original Message-----
> > > From: Dan Romascanu [mailto:dromasca@gmail.com]
> > >
> >
> > ...
>
> > >
> > > 2. I am a little confused by the definition of policies in S= ection 9.1:
> > >
> > >=C2=A0 =C2=A0 Depending upon the values being requested, regi= stration requests are
> > >=C2=A0 =C2=A0 evaluated on a Standards Track Required, Specif= ication Required,
> > >=C2=A0 =C2=A0 Expert Review, or Private Use basis [RFC8126] a= fter a three-week
> > >=C2=A0 =C2=A0 review period on the cwt-reg-review@ietf.org mailing list, on the
> > >=C2=A0 =C2=A0 advice of one or more Designated Experts.
> > >
> > > How does this work? The request is forwarded to the designat= ed expert,
> > > he/she make a recommendation concerning the policy on the ma= il list, and
> > > depending on the feedback received a policy is selected? Who= establishes
> > > consensus?
> > >
> > > Frankly, I wonder if this can work at all. Are there other e= xamples of
> > four
> > > different policies for the same registry, applied on a case-= to-case
> > basis?
> >
> > This is the same approach that is being used for the COSE registr= ies.=C2=A0 As
> > an example, you can look at https://www.iana.org/
> > assignments/cose/cose.xhtml#algorithms.
> >
> > Part of the issue about this is that the JOSE/JWT registries do h= ave the
> > same different policies, but that differences are hidden from the= IANA
> > registry.=C2=A0 Since they allow for a URI to be used as the iden= tifier of a
> > field, only the plain text versions are registered.=C2=A0 Thus I = can use "
> > http://augustcellars.com/JWT/My_Tag" as an identifier.=C2=A0= Since for CBOR
> > the set of tag values is closed and does not have this escape (no= r would
> > one want the length of the tag) it is necessary to have this brea= k down of
> > tag fields.
> >
> >
> >
> >
> This does not seem to be exactly the same approach. The COSE RFC 8152<= br> > defines the registry policy in a different manner. There is only one p= olicy
> that is proposed 'Expert Review' and than the Expert Review In= structions
> are used to define the cases when a Standards Track specification is > required. No such text exists in the current I-D. There is no separati= on of
> the values space in the registry according to the type of assignment h= ere,
> as=C2=A0 in RFC 8152.

The template in section 9.1.1 has the different poli= cies for the
different integer ranges, under the 'Claim Key' section.=C2=A0 Kath= leen
(IIRC) already noted that this should probably be repeated in the
introductory part of section 9.1 as well, and that will be done
before the document is sent to the IESG.

-Benjamin<= /span>

=C2=A0

=C2=A0


--001a11400d2005dbfa0566409fb5-- From nobody Tue Feb 27 23:41:13 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23ACB124207 for ; Tue, 27 Feb 2018 23:41:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.621 X-Spam-Level: X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q5SV3zpLzPvs for ; Tue, 27 Feb 2018 23:41:09 -0800 (PST) Received: from se-out1.mx-wecloud.net (se-out1.mx-wecloud.net [89.221.255.93]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A9CB120725 for ; Tue, 27 Feb 2018 23:41:09 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out1.mx-wecloud.net (Postfix) with ESMTPS id 86DF62061AC for ; Wed, 28 Feb 2018 07:41:05 +0000 (UTC) Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Wed, 28 Feb 2018 08:41:06 +0100 To: References: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> From: Ludwig Seitz Message-ID: <381c3d21-727c-9b92-9b3c-26e96816fa7f@ri.se> Date: Wed, 28 Feb 2018 08:41:06 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-3.sp.se (10.100.0.163) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=cdiiljLM c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=IkcTkHD0fZMA:10 a=Op4juWPpsa0A:10 a=QLPfpYkryAO4RqcpiSkA:9 a=QEXdDO2ut3YA:10 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: Re: [Ace] Agenda Items for London X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 07:41:11 -0000 On 2018-02-28 01:33, Jim Schaad wrote: > Please let the chairs know if you want a slot on the agenda for London. > Please give us an idea of what you think you need to cover, how long you > think it will take and who is doing the presentations. > > For people doing the presentations, I would like to get slides during the > week of March 12th so that the chairs can do a fast review and get them > posted before the Monday morning meeting. I really do not want to need to > do this first thing Monday morning. > > Jim > I would like a 10 minute slot to present the updates of draft-ietf-oauth-authz (and to ask people to implement and review ... again). /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE SICS Phone +46(0)70-349 92 51 From nobody Wed Feb 28 00:33:38 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A88F41243F3 for ; Wed, 28 Feb 2018 00:33:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.621 X-Spam-Level: X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nXpM1Af7Q1Pk for ; Wed, 28 Feb 2018 00:33:33 -0800 (PST) Received: from lb3-smtp-cloud9.xs4all.net (lb3-smtp-cloud9.xs4all.net [194.109.24.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 322FE124207 for ; Wed, 28 Feb 2018 00:33:33 -0800 (PST) Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:209]) by smtp-cloud9.xs4all.net with ESMTPA id qxB2eQReAwC4EqxB2eIOzU; Wed, 28 Feb 2018 09:33:31 +0100 Received: from AMontpellier-654-1-159-79.w90-0.abo.wanadoo.fr ([90.0.254.79]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Wed, 28 Feb 2018 09:33:28 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 28 Feb 2018 09:33:28 +0100 From: peter van der Stok To: Jim Schaad Cc: ace@ietf.org Organization: vanderstok consultancy Reply-To: consultancy@vanderstok.org Mail-Reply-To: consultancy@vanderstok.org In-Reply-To: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> References: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> Message-ID: <0e239f71a1d58dcbbc8b353595dbf02e@xs4all.nl> X-Sender: stokcons@xs4all.nl User-Agent: XS4ALL Webmail X-CMAE-Envelope: MS4wfAKCtVlT7eA+KLhNc5K+TqKS2MbJuwgJDXt7GdyafEgmc9e7xj7cLLsqsZZrak3neDRey2xmQLVC56ce9LCHvLcdPrG6E3LRUWyRWOja8Rc2EtaSLzXL ZDgBIkUaaDkj/edLyPHj/MeU06Y+qfWXImqRm4NQesm6s3HOh/b6hrdIfng0hfaf48KdUuY2h9l4KC9sJlwHmjbbfuuy+s/+1Ycp9MDfaQKnd4rBge+0bZw6 Archived-At: Subject: Re: [Ace] Agenda Items for London X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 08:33:37 -0000 Hi Jim, I like to have 10 mins the present the additions to be done to ietf-ace-coap-est-00. and additionally explain the ongoing relation with other drafts. Peter Jim Schaad schreef op 2018-02-28 01:33: > Please let the chairs know if you want a slot on the agenda for London. > Please give us an idea of what you think you need to cover, how long > you > think it will take and who is doing the presentations. > > For people doing the presentations, I would like to get slides during > the > week of March 12th so that the chairs can do a fast review and get them > posted before the Monday morning meeting. I really do not want to need > to > do this first thing Monday morning. > > Jim > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Wed Feb 28 03:51:50 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F7D9126BF6; Wed, 28 Feb 2018 03:51:50 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151981871002.5216.6510845907434446108@ietfa.amsl.com> Date: Wed, 28 Feb 2018 03:51:50 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-coap-est-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 11:51:50 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : EST over secure CoAP (EST-coaps) Authors : Peter van der Stok Panos Kampanakis Sandeep S. Kumar Michael C. Richardson Martin Furuhed Shahid Raza Filename : draft-ietf-ace-coap-est-00.txt Pages : 29 Date : 2018-02-28 Abstract: Enrollment over Secure Transport (EST) [RFC7030] is used as a certificate management protocol over HTTPS. Low-resource devices often use the lightweight Constrained Application Protocol (CoAP) [RFC7252] for message exchanges. This document defines how to transport EST payloads over secure CoAP (EST- coaps). This allows low-resource constrained devices to re-use existing EST functionality. Example low-resource use cases for EST are: secure bootstrapping and certificate enrollment. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-coap-est/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-coap-est-00 https://datatracker.ietf.org/doc/html/draft-ietf-ace-coap-est-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/