From nobody Thu Mar 1 14:15:40 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFD6A12FAD0 for ; Thu, 1 Mar 2018 14:15:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UV89TSi3GCKo for ; Thu, 1 Mar 2018 14:15:38 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A03EA12FACF for ; Thu, 1 Mar 2018 14:15:38 -0800 (PST) X-AuditID: 1209190c-8a5ff70000007a12-df-5a987b8885b3 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id C4.D3.31250.98B789A5; Thu, 1 Mar 2018 17:15:37 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id w21MFXgk030571 for ; Thu, 1 Mar 2018 17:15:35 -0500 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w21MFUBr029269 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 1 Mar 2018 17:15:33 -0500 Date: Thu, 1 Mar 2018 16:15:30 -0600 From: Benjamin Kaduk To: ace@ietf.org Message-ID: <20180301221530.GZ50954@kduck.kaduk.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrJIsWRmVeSWpSXmKPExsUixG6nrttZPSPKoH+5jsX3bz3MDoweS5b8 ZApgjOKySUnNySxLLdK3S+DK+PX3GEvBe96KewsfMTUwTuLuYuTkkBAwkXi2cgl7FyMXh5DA YiaJz08/s0A4hxklbhz5xQjhPGeSWNLQyQzSwiKgIvF58T4wmw3Ibui+DGaLCAhIzP34GcwW FtCV2HHnMCuIzQu0YuXvS1C2oMTJmU9YQGxmAS2JG/9eMnUxcgDZ0hLL/3GAhEUFlCX29h1i n8DIOwtJxywkHbMQOhYwMq9ilE3JrdLNTczMKU5N1i1OTszLSy3SNdTLzSzRS00p3cQICiVO SZ4djGfeeB1iFOBgVOLhFeCZESXEmlhWXJl7iFGSg0lJlLf+1fQoIb6k/JTKjMTijPii0pzU 4kOMEhzMSiK8p7dPixLiTUmsrEotyodJSXOwKInzuptoRwkJpCeWpGanphakFsFkZTg4lCR4 w6uA9ggWpaanVqRl5pQgpJk4OEGG8wANzwSp4S0uSMwtzkyHyJ9i1OW48eJ1G7MQS15+XqoU 0BqQIgGQoozSPLg5oBQgkb2/5hWjONBbwrxnK4GqeIDpA27SK6AlTEBLjnyeArKkJBEhJdXA uHguk84ynXovhdC4ZuNTp6u/F0zmPHHqylmezSZK8SEZS7IM9hy5PbnYcqLa8SeLmg4JxRzZ vDx3y9FN2vuXH16wueWI/eu5+ktO+HP0Xt07qe1a5o7g3evOfDgSbfb+dPtDXiv3J6EGPgF7 Fj7ZoVgj96NlsumVrx5Zd8IOM7l++/xxYd4dIVElluKMREMt5qLiRAD5HewR3AIAAA== Archived-At: Subject: [Ace] searching for a replacement co-chair X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 22:15:40 -0000 Hi all, The NomComm has selected me as the next Security AD, so I will need to step down as ace co-chair at the London meeting. I do not want to ask Jim to take on the entire WG-chairing burden himself, so we are seeking candidates to replace me as his co-chair. The final decision will be made by the ADs, and even if you are not the best fit for ace, we can consider candidates for other WG chair positions as they open up in the future. As a brief overview, a WG chair is tasked with running WG sessions at physical IETF meetings, judging WG consensus both in the room and on the list (including soliciting additional reviews if needed), and shepherding documents through their lifecycle/approval process (both through the formal "document shepherd" role and otherwise). There are documentation and checklists available to help with the process side of things, and it is not necessary to have deep technical expertise on the subject matter in order to perform the role. (Some familiarity or willingness to obtain familiarity with the technical topics is needed, in order to be able to judge consensus and determine the seriousness of any potential issues that may arise during discussion of documents and their impact on WG consensus.) It is expected that a WG chair will be able to attend in person most of the WG's sessions at IETF meetings, but not necessarily all of them, so it is recommended to talk to your management about the needed travel budget, additional involvement, and time commitment. Please let us know if you think you might be interested in the WG chair role for ace (or another WG) -- I'm happy to have a conversation about the details of the role and how it might interact with your situation. Thanks, Ben From nobody Fri Mar 2 01:53:43 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7357D127342 for ; Fri, 2 Mar 2018 01:53:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=a6mQvPew; dkim=pass (1024-bit key) header.d=ericsson.com header.b=d0nMW9Yr Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cW7nrsRxY7TF for ; Fri, 2 Mar 2018 01:53:41 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3E2812702E for ; Fri, 2 Mar 2018 01:53:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1519984418; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=i4ITZpCTZH0G1G46ONmHtz4uLKJng9kyDi/GM3c+upQ=; b=a6mQvPewoAUNix5vDON9tLc3HLmGwhC+2OxifXek/eNCLFuPGyjqMfG38eScMWd+ txTR8fq/TjvA/gUbMpxglncVZicJvNWVyatYUb93rc9QycyYOkf+GjC6ByQfennr xiLJPotnXJWcGkrQeVVGejct258fsoAtrbraTlF+duw=; X-AuditID: c1b4fb3a-347ff700000067b4-7f-5a991f226ede Received: from ESESSHC003.ericsson.se (Unknown_Domain [153.88.183.27]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id E1.41.26548.22F199A5; Fri, 2 Mar 2018 10:53:38 +0100 (CET) Received: from ESESBMR506.ericsson.se (153.88.183.202) by ESESSHC003.ericsson.se (153.88.183.27) with Microsoft SMTP Server (TLS) id 14.3.352.0; Fri, 2 Mar 2018 10:53:38 +0100 Received: from ESESBMB503.ericsson.se (153.88.183.170) by ESESBMR506.ericsson.se (153.88.183.202) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.26; Fri, 2 Mar 2018 10:53:38 +0100 Received: from EUR01-HE1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB503.ericsson.se (153.88.183.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.26 via Frontend Transport; Fri, 2 Mar 2018 10:53:38 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=i4ITZpCTZH0G1G46ONmHtz4uLKJng9kyDi/GM3c+upQ=; b=d0nMW9YrFY2ah1T/dXaJyc11IpQoZZZkCQiJvlaev3EPtHT2M1YdmnbK9i50fpgdUtrLHx+jhJaIT+eyQW5YH1t4Ud31I1aCFlgsUfg8icgKR+Jji/70Z82GiI2Bz4XYPguEVPvSKV4u1JdBZ7uKPlTwG+FmZ66dYFLn1BWup3k= Received: from HE1PR07MB1529.eurprd07.prod.outlook.com (10.169.122.151) by HE1PR07MB1609.eurprd07.prod.outlook.com (10.166.124.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.6; Fri, 2 Mar 2018 09:53:36 +0000 Received: from HE1PR07MB1529.eurprd07.prod.outlook.com ([fe80::fc63:65b5:e74b:8856]) by HE1PR07MB1529.eurprd07.prod.outlook.com ([fe80::fc63:65b5:e74b:8856%2]) with mapi id 15.20.0567.006; Fri, 2 Mar 2018 09:53:36 +0000 From: Francesca Palombini To: "ace@ietf.org" CC: "ace-chairs@ietf.org" Thread-Topic: New Version Notification for draft-palombini-ace-key-groupcomm-00.txt Thread-Index: AQHTsXt8pDiJbUMoiUeYyOvZFhjdfqO8s2+Q Date: Fri, 2 Mar 2018 09:53:36 +0000 Message-ID: References: <151992216765.10125.13760844695207554456.idtracker@ietfa.amsl.com> In-Reply-To: <151992216765.10125.13760844695207554456.idtracker@ietfa.amsl.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=francesca.palombini@ericsson.com; x-originating-ip: [217.31.165.55] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB1609; 7:PYDePCjxA2L1cYX48+emb9gWh7tizvN/AKhunQ4A7hpE8FSio8HSbNS/HU84YQgMkf6TzSDrS4ZxntUmZcImuxKLpj2DoEx1ognx/93BFqoUUc4JpoxWEx6JBr9ufCwiqmB67Qcl+BGKLHp3asCmc228uGV97OnroksOYCBg/WlTtSiSf/B41ajyYpX9/2B9RUm+aX/1fliRh8fYaBjRDY9HVMK0OZ+aDFACzwlMKisAY/H0Pd8YdF4hCkP2vMDa x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: f49065bf-6ed7-4414-1dda-08d5802377f0 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:HE1PR07MB1609; x-ms-traffictypediagnostic: HE1PR07MB1609: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(37575265505322)(120809045254105); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(3231220)(944501161)(52105095)(10201501046)(6041288)(20161123558120)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(6072148)(201708071742011); SRVR:HE1PR07MB1609; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB1609; x-forefront-prvs: 05991796DF x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(396003)(39380400002)(39860400002)(366004)(346002)(53754006)(377424004)(13464003)(199004)(189003)(7736002)(186003)(2501003)(74316002)(68736007)(478600001)(14454004)(305945005)(5250100002)(26005)(966005)(106356001)(59450400001)(8676002)(316002)(33656002)(6506007)(102836004)(53546011)(97736004)(15650500001)(2351001)(99286004)(3660700001)(8936002)(81166006)(7696005)(1730700003)(81156014)(76176011)(86362001)(229853002)(2900100001)(6916009)(9686003)(53936002)(2950100002)(6306002)(2473003)(5640700003)(55016002)(6436002)(3280700002)(66066001)(25786009)(450100002)(3846002)(6116002)(4326008)(2906002)(105586002)(5660300001); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB1609; H:HE1PR07MB1529.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: yGlUVb9kzscZ0QCku+OJ4D2SkTyhhoe/XYsqrz4RZhp3/LsSRAcvdQF+yYw9kZAH/JU/NcXF8jVGOZKRhqCwFCOUY3c6bN7fs6OPiPwsvxCAgP9teh8lThn230TGmiSokNWC8M+RQjafDh/RVvlF8Z3sue4I96RVnmMpweKj6LM= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: f49065bf-6ed7-4414-1dda-08d5802377f0 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Mar 2018 09:53:36.5847 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB1609 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA02Sb0hTURjGOffebXfDwWlO9qZIOBVMalOxHCJR0gchrD5oxChyzJsO55Rd k4xAMyNy5p8ocaMyRAr7g6Su1AZtqyiN4RJDsFYuZ3OUVGrqNDS3u6Bvv/M8z+F93sOhSckm FUvrDFWM0aDRy/kiynz8adxu+Q6zOm1pLVvV7lnnqVaWm8j9RF53d5A4itSinGJGr6tmjMp9 RaLSTVs7WemWnnV/fYzqUJO0EQlpwJlgWfCSjUhES/ALBI5LQT536EfQNWnmh1ISvIxgrDef M7oJWKifE4QMCi8Q0LWYyBltBDhG2yPXvQhmrtwIp/g4B9zeH7xGRNNSnACTXzQhmcRKWKt7 zwtxNC4A62aACLEUF0K/u5nHcQbcHjVR3LAkmDN5wo3E+AQEpr8JuHaHIWi7FtaF+AhstI6F GeF4WLrwgORmyWDK10lwO2Poto2RHMdAYGaDx+W1MPGhWcDpCWBdXIpk4mG804RCewEeIMDf fDViKMDaNo84zofV365I6A0C1/QQjzNSwdLSQnFcBp967ZEWh+Dh3XrUitIt/xW0bL0RiXdC 77CSkxPguskrsIR33gYjZh91B1H3UQzLsGx5SUaGgjHqtCxbYVAYmKo+tPUtHAPr2YPI4T/g RJhG8ihxn9CslvA01WxNuRMBTcql4oafHWqJuFhTc44xVpwyntEzrBPF0ZRcJs49rVJLcImm iiljmErG+M8laGFsHTK/vPnoj1PbUxD9bm9WsF7bIb/ov+zatZFFD20f2dM2ketotb623/PL ilYNs6bzo0qXLe4Z/9ZQrSxQm8R+T46afTXfRaFGc+vg2+BqCu15bl/2xQ5P9TxRCT43jPvS TCmFOvtKsnugROaqHmngH/voyExkf83p8xSe+JMH5RRbqklPJY2s5i8eZ2W5EgMAAA== Archived-At: Subject: [Ace] FW: New Version Notification for draft-palombini-ace-key-groupcomm-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 09:53:42 -0000 SGkgYWxsLA0KDQpXZSBzdWJtaXR0ZWQgYSBuZXcgZHJhZnQsIHRoYXQgYnVpbGRzIG9uIHRoZSBB Q0UgRnJhbWV3b3JrIHRvIGdlbmVyYWxpemUgZ3JvdXAgY29tbXVuaWNhdGlvbiBwcm9maWxlcy4g VGhpcyBkcmFmdCB3YXMgdGhlIHJlc3VsdCBvZiBjb21tZW50cyBhbmQgZGlzY3Vzc2lvbiB3aXRo IHNldmVyYWwgQUNFIHBhcnRpY2lwYW50cywgYXQgSUVURjEwMC4NCg0KaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LXBhbG9tYmluaS1hY2Uta2V5LWdyb3VwY29tbS0wMCANCg0KSSB3 b3VsZCBsaWtlIHRvIHJlcXVlc3Qgc29tZSB0aW1lIGF0IElFVEYxMDEgdG8gZ2V0IGZlZWRiYWNr IGZyb20gdGhlIGdyb3VwLCBhbmQgYXNrIGZvciByZXZpZXdzLiAxMCBtaW51dGVzIHNob3VsZCBi ZSBlbm91Z2gsIGFuZCBJIHdpbGwgYmUgdGhlIHByZXNlbnRlci4NCg0KRnJhbmNlc2NhDQoNCg0K PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBpbnRlcm5ldC1kcmFmdHNAaWV0 Zi5vcmcgW21haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmddDQo+IFNlbnQ6IGRlbiAxIG1h cnMgMjAxOCAxNzozNg0KPiBUbzogTWFyY28gVGlsb2NhIDxtYXJjby50aWxvY2FAcmkuc2U+OyBG cmFuY2VzY2EgUGFsb21iaW5pDQo+IDxmcmFuY2VzY2EucGFsb21iaW5pQGVyaWNzc29uLmNvbT4N Cj4gU3ViamVjdDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1wYWxvbWJpbmkt YWNlLWtleS1ncm91cGNvbW0tMDAudHh0DQo+IA0KPiANCj4gQSBuZXcgdmVyc2lvbiBvZiBJLUQs IGRyYWZ0LXBhbG9tYmluaS1hY2Uta2V5LWdyb3VwY29tbS0wMC50eHQNCj4gaGFzIGJlZW4gc3Vj Y2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBGcmFuY2VzY2EgUGFsb21iaW5pIGFuZCBwb3N0ZWQgdG8g dGhlDQo+IElFVEYgcmVwb3NpdG9yeS4NCj4gDQo+IE5hbWU6CQlkcmFmdC1wYWxvbWJpbmktYWNl LWtleS1ncm91cGNvbW0NCj4gUmV2aXNpb246CTAwDQo+IFRpdGxlOgkJS2V5IFByb3Zpc2lvbmlu ZyBmb3IgR3JvdXAgQ29tbXVuaWNhdGlvbiB1c2luZyBBQ0UNCj4gRG9jdW1lbnQgZGF0ZToJMjAx OC0wMy0wMQ0KPiBHcm91cDoJCUluZGl2aWR1YWwgU3VibWlzc2lvbg0KPiBQYWdlczoJCTEwDQo+ IFVSTDogICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJh ZnQtcGFsb21iaW5pLWFjZS1rZXktZ3JvdXBjb21tLTAwLnR4dA0KPiBTdGF0dXM6ICAgICAgICAg aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtcGFsb21iaW5pLWFjZS1rZXkt Z3JvdXBjb21tLw0KPiBIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LXBhbG9tYmluaS1hY2Uta2V5LWdyb3VwY29tbS0wMA0KPiBIdG1saXplZDogICAgICAg aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1wYWxvbWJpbmktYWNl LWtleS1ncm91cGNvbW0tMDANCj4gDQo+IA0KPiBBYnN0cmFjdDoNCj4gICAgVGhpcyBkb2N1bWVu dCBkZWZpbmVzIGEgbWVzc2FnZSBmb3JtYXQgZm9yIGRpc3RyaWJ1dGluZyBrZXlpbmcNCj4gICAg bWF0ZXJpYWwgaW4gZ3JvdXAgY29tbXVuaWNhdGlvbiBzY2VuYXJpb3MgKHN1Y2ggYXMgYmFzZWQg b24gbXVsdGljYXN0DQo+ICAgIG9yIHB1Ymxpc2hlci1zdWJzY3JpYmVyIG1vZGVsKSB1c2luZyB0 aGUgQUNFIGZyYW1ld29yay4NCj4gDQo+IA0KPiANCj4gDQo+IFBsZWFzZSBub3RlIHRoYXQgaXQg bWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24N Cj4gdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0 b29scy5pZXRmLm9yZy4NCj4gDQo+IFRoZSBJRVRGIFNlY3JldGFyaWF0DQoNCg== From nobody Fri Mar 2 02:18:31 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 452911277BB for ; Fri, 2 Mar 2018 02:18:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=HDYKndvJ; dkim=pass (1024-bit key) header.d=ericsson.com header.b=h3l3c3Pq Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mg2DpxZksUyz for ; Fri, 2 Mar 2018 02:18:27 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23EDE127137 for ; Fri, 2 Mar 2018 02:18:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1519985905; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=2iWF5jNqoVFVXh6apzQrL/S8epRk5VPfrSVIB3RElzg=; b=HDYKndvJfAhySn5ixWzYLLtmvtdDSHMq3sTgctyiLO7enfl4cJnH/u8kv4ZwuQkS E9J73BM4tuBE28U/rCHuGCLuauHmmrCN4DrsfHsTfsnAJZkDTt6TGBOYbZVaj1dD PZ2BbMfCnBaG666d5sH184pXZtnwm9Ef6FZqC4gDZtc=; X-AuditID: c1b4fb30-399ff70000004778-c5-5a9924f17466 Received: from ESESSHC020.ericsson.se (Unknown_Domain [153.88.183.78]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 90.10.18296.1F4299A5; Fri, 2 Mar 2018 11:18:25 +0100 (CET) Received: from ESESSMB501.ericsson.se (153.88.183.162) by ESESSHC020.ericsson.se (153.88.183.78) with Microsoft SMTP Server (TLS) id 14.3.352.0; Fri, 2 Mar 2018 11:18:24 +0100 Received: from ESESSMB505.ericsson.se (153.88.183.166) by ESESSMB501.ericsson.se (153.88.183.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.26; Fri, 2 Mar 2018 11:18:24 +0100 Received: from EUR01-VE1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESSMB505.ericsson.se (153.88.183.166) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.26 via Frontend Transport; Fri, 2 Mar 2018 11:18:24 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=2iWF5jNqoVFVXh6apzQrL/S8epRk5VPfrSVIB3RElzg=; b=h3l3c3Pqmc+W/oi1EpPxiOijdIQyVEwtOpAVCpl2hxKpkbk2twfim8JWEy8AQ/2PURLcyA3siMsdsJeyk/tuszxkbSI2DWsM2KahMyOtFcPt0FCpqb9q4JnvgpGfFeQitHlQwddxERsT4mjt/6mWQOFiY3eV3F2M4W+kSNYNijg= Received: from HE1PR07MB1529.eurprd07.prod.outlook.com (10.169.122.151) by HE1PR07MB0827.eurprd07.prod.outlook.com (10.162.24.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.5; Fri, 2 Mar 2018 10:18:23 +0000 Received: from HE1PR07MB1529.eurprd07.prod.outlook.com ([fe80::fc63:65b5:e74b:8856]) by HE1PR07MB1529.eurprd07.prod.outlook.com ([fe80::fc63:65b5:e74b:8856%2]) with mapi id 15.20.0567.006; Fri, 2 Mar 2018 10:18:23 +0000 From: Francesca Palombini To: "ace@ietf.org" CC: "ace-chairs@ietf.org" Thread-Topic: New Version Notification for draft-palombini-ace-coap-pubsub-profile-02.txt Thread-Index: AQHTsg4F3L0GtYwOwUu/DuGjm9kRKKO8uLuA Date: Fri, 2 Mar 2018 10:18:22 +0000 Message-ID: References: <151998510793.15695.3416796865086243909.idtracker@ietfa.amsl.com> In-Reply-To: <151998510793.15695.3416796865086243909.idtracker@ietfa.amsl.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [217.31.165.55] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB0827; 7:5Om8D7xInq3G/k7KGiCT4+5PFLQulOzIMF2WGFI4vMmwBcy4O7KW8NIHeH3vFeBxk9PnE5jlnN0EVKxZ4Cfk4ATSH2wk3fbdFF49zEwEBxTK0jx7TP5LjlvKoo1gsSnFCktKVcMNwO/k1odsUN0kWtJSsem6UdFU7Yt3QGjw+IyapXShzBjrlv7u14ganZUOfP6vX3ZiiEjXrbvincLqIUxq7m5FzMZ5hN3q/JjxL9dVB8vzdP5R+YQk3vMiZnQf x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: b103060c-2222-4f17-1d02-08d58026ede7 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:HE1PR07MB0827; x-ms-traffictypediagnostic: HE1PR07MB0827: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(37575265505322)(120809045254105)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3002001)(10201501046)(3231220)(944501238)(52105095)(93006095)(93001095)(6041288)(20161123560045)(20161123562045)(20161123558120)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:HE1PR07MB0827; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB0827; x-forefront-prvs: 05991796DF x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(396003)(376002)(346002)(366004)(39860400002)(189003)(13464003)(377424004)(199004)(53754006)(7736002)(7696005)(2501003)(59450400001)(99286004)(15650500001)(102836004)(5660300001)(3660700001)(106356001)(2906002)(5250100002)(6116002)(3846002)(6506007)(53546011)(76176011)(6346003)(33656002)(14454004)(26005)(6436002)(5640700003)(53936002)(2900100001)(97736004)(305945005)(3280700002)(6306002)(1730700003)(55016002)(81156014)(81166006)(86362001)(74316002)(316002)(2473003)(9686003)(478600001)(8936002)(2351001)(186003)(68736007)(105586002)(4326008)(66066001)(229853002)(450100002)(966005)(8676002)(2950100002)(6916009)(25786009); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB0827; H:HE1PR07MB1529.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=francesca.palombini@ericsson.com; x-microsoft-antispam-message-info: cJ6aC4uweppGGKd63P6RdkXWsxVUJ1yXWzKFtHU2MmQsSj49IP9vxadXR8tTafm+JaG3kOao3zJJQ1NbaPAsSbXvwPCX6DgnJoc6b7/k78/4sqd0syBJm8oCHEbGQKeN7sbAsMeQmWOylFyjcfe6WXylzBGfwX1Ew7HUYqz57lY= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: b103060c-2222-4f17-1d02-08d58026ede7 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Mar 2018 10:18:22.8980 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB0827 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA02ScUgTYRjG+e5u2220/FybvhpSDgkU2lSMxNQKKuoPTTAhVmEzL5XN03Yq 2l+TlGBKzNThRqHJCtIicUoSgTil1AxNKSky01YplZrJhlqu3c6g/37v8zwv3/vAR5OKP1Qk XcSWMSZWb1SLZZT97OPM/T9j7Lr4qamoZNvMpijZ560njxAnnc51IgvpZKn5jLGogjFp0y/K CjfWbohLhyIrx4dizeh7hAVJacBJsDVtoXhW4EEEnevZFiQLsAuB33ufEAwvAktXpWA4CVh2 94v4gcKrBDj6RwjBaSBgfeP29jCHYGzpppjfF+NUmJhbDqzQtBJHw/S8npdJrIUN82sRz7uw Dtqs9cHnlPgc+IY+iwROBHPbe5JfpXAMeCYP8LIcn4flhUZSuC4DBro+SHiW4kzottqDdRCO grXqTlJ4KhzeeVoJoTIG59NxUmAVLH7aEgkcDb2/1rb1KJhsrUN8FcA9BNT7fWLB0EBvww8k cAYsXfdSQmgYwWzf8HYoDmbGZyUCG6DVbw92h8DVv91hQv4uCSuDExIrSnD8d6AjECNxLDx6 ohXkaGiqm5M4gp1DYcTuodoQ1YFUHMPlFRckJmoYU9EljithNSxT1o0Cn2KgZzO+Dy1+PepG mEbqHXLXHrtOIdJXcFXFbgQ0qVbKa1ZadAp5vr7qKmMqyTWVGxnOjXbTlDpcPnJKrlPgAn0Z Y2CYUsb0zyVoaaQZGS2qM8+nQ6xfjCkREvXCG05VrfTE+HMNSb5r3VnpH1N8h1Jsh6Wqb7rR puaDaS+bWVdJXfne2sX8F9yxhk0yTBMf2vJwIu9Ve86JDEPcfN8DpfXy7B22PYfTYpdmn6qG uQVjb4+v+nNHr9Sy2ZO2xgu2Z2mnd3aE3rOGyEBNcYX6hDjSxOn/AqXgffIQAwAA Archived-At: Subject: [Ace] FW: New Version Notification for draft-palombini-ace-coap-pubsub-profile-02.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 10:18:29 -0000 SGkgYWxsLA0KDQpJIGp1c3Qgc3VibWl0dGVkIGEgbmV3IHZlcnNpb24gb2YgdGhlIFByb2ZpbGUg Zm9yIENvQVAgUHVic3ViLg0KVGhhbmtzIHRvIEppbSBhbmQgQXJpIGZvciB0aGUgcmV2aWV3cyEN Cg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXBhbG9tYmluaS1hY2UtY29hcC1w dWJzdWItcHJvZmlsZS0wMg0KDQpUaGlzIHZlcnNpb24ncyB1cGRhdGU6DQotIGNvbXBsaWVzIHdp dGggdGhlIG5ldyBnZW5lcmFsIGRyYWZ0IG9uIGdyb3VwIGtleSBkaXN0cmlidXRpb24gdXNpbmcg QUNFOiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtcGFsb21iaW5pLWFjZS1rZXkt Z3JvdXBjb21tLTAwIA0KLSBpbXBsZW1lbnRzIHRoZSByZXZpZXdlcnMgY29tbWVudHMNCg0KQ2hh aXJzOiBJJ2QgbGlrZSB0byByZXF1ZXN0IDEwIG1pbnV0ZXMgYXQgdGhlIElFVEYxMDEgdG8gZ2V0 IGZlZWRiYWNrIGZyb20gdGhlIGdyb3VwLiBJIHdpbGwgYmUgdGhlIHByZXNlbnRlci4gSWYgcG9z c2libGUsIEknZCBsaWtlIHRoaXMgc2xvdCB0byBmb2xsb3cgdGhlIGRyYWZ0LXBhbG9tYmluaS1h Y2Uta2V5LWdyb3VwY29tbSBvbmUuDQoNClRoYW5rcywNCkZyYW5jZXNjYQ0KDQo+IC0tLS0tT3Jp Z2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyBbbWFp bHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZ10NCj4gU2VudDogZGVuIDIgbWFycyAyMDE4IDEx OjA1DQo+IFRvOiBGcmFuY2VzY2EgUGFsb21iaW5pIDxmcmFuY2VzY2EucGFsb21iaW5pQGVyaWNz c29uLmNvbT4NCj4gU3ViamVjdDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1w YWxvbWJpbmktYWNlLWNvYXAtcHVic3ViLQ0KPiBwcm9maWxlLTAyLnR4dA0KPiANCj4gDQo+IEEg bmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1wYWxvbWJpbmktYWNlLWNvYXAtcHVic3ViLXByb2Zp bGUtMDIudHh0DQo+IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgRnJhbmNlc2Nh IFBhbG9tYmluaSBhbmQgcG9zdGVkIHRvIHRoZQ0KPiBJRVRGIHJlcG9zaXRvcnkuDQo+IA0KPiBO YW1lOgkJZHJhZnQtcGFsb21iaW5pLWFjZS1jb2FwLXB1YnN1Yi1wcm9maWxlDQo+IFJldmlzaW9u OgkwMg0KPiBUaXRsZToJCUNvQVAgUHViLVN1YiBQcm9maWxlIGZvciBBdXRoZW50aWNhdGlvbiBh bmQgQXV0aG9yaXphdGlvbg0KPiBmb3IgQ29uc3RyYWluZWQgRW52aXJvbm1lbnRzIChBQ0UpDQo+ IERvY3VtZW50IGRhdGU6CTIwMTgtMDMtMDINCj4gR3JvdXA6CQlJbmRpdmlkdWFsIFN1Ym1pc3Np b24NCj4gUGFnZXM6CQkxNg0KPiBVUkw6ICAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcv aW50ZXJuZXQtZHJhZnRzL2RyYWZ0LXBhbG9tYmluaS1hY2UtY29hcC1wdWJzdWItcHJvZmlsZS0w Mi50eHQNCj4gU3RhdHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9j L2RyYWZ0LXBhbG9tYmluaS1hY2UtY29hcC1wdWJzdWItcHJvZmlsZS8NCj4gSHRtbGl6ZWQ6ICAg ICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1wYWxvbWJpbmktYWNlLWNvYXAt cHVic3ViLXByb2ZpbGUtMDINCj4gSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtcGFsb21iaW5pLWFjZS1jb2FwLXB1YnN1Yi1wcm9maWxl LTAyDQo+IERpZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9 ZHJhZnQtcGFsb21iaW5pLWFjZS1jb2FwLXB1YnN1Yi1wcm9maWxlLTAyDQo+IA0KPiBBYnN0cmFj dDoNCj4gICAgVGhpcyBzcGVjaWZpY2F0aW9uIGRlZmluZXMgYSBwcm9maWxlIGZvciBhdXRoZW50 aWNhdGlvbiBhbmQNCj4gICAgYXV0aG9yaXphdGlvbiBmb3IgcHVibGlzaGVycyBhbmQgc3Vic2Ny aWJlcnMgaW4gYSBwdWItc3ViIHNldHRpbmcNCj4gICAgc2NlbmFyaW8gaW4gYSBjb25zdHJhaW5l ZCBlbnZpcm9ubWVudCwgdXNpbmcgdGhlIEFDRSBmcmFtZXdvcmsuICBUaGlzDQo+ICAgIHByb2Zp bGUgcmVsaWVzIG9uIHRyYW5zcG9ydCBsYXllciBvciBhcHBsaWNhdGlvbiBsYXllciBzZWN1cml0 eSB0bw0KPiAgICBhdXRob3JpemUgdGhlIHB1Ymxpc2hlciB0byB0aGUgYnJva2VyLiAgTW9yZW92 ZXIsIGl0IHJlbGllcyBvbg0KPiAgICBhcHBsaWNhdGlvbiBsYXllciBzZWN1cml0eSBmb3IgcHVi bGlzaGVyLWJyb2tlciBhbmQgc3Vic2NyaWJlci1icm9rZXINCj4gICAgY29tbXVuaWNhdGlvbi4N Cj4gDQo+IA0KPiANCj4gDQo+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUg b2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24NCj4gdW50aWwgdGhlIGh0bWxp emVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCj4g DQo+IFRoZSBJRVRGIFNlY3JldGFyaWF0DQoNCg== From nobody Fri Mar 2 11:58:25 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9ED19124217 for ; Fri, 2 Mar 2018 11:58:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4S3o0TPw1FLs for ; Fri, 2 Mar 2018 11:58:21 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0131.outbound.protection.outlook.com [104.47.40.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 539B0129C6A for ; Fri, 2 Mar 2018 11:58:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=R3Mn0s3cDlDvm+Lvh6WqrrBZZ+1h1cVfVH9SRCay1GA=; b=fcLCnQ604IvuynTVsMhRceqX72hZYr1GCmE9ff3M7pypnNhGyJK0GeZ3a2DgQnfNeLHcSruZtpsfkzHWlmpIR+7FAeZgtFW4MZ7DFe67bfLi4wHcs6KZLcXUs4sJJwPuBdV5vp3Y4zvOoWPgkKzvzq1T/3gQxyC/URnRNHng1qw= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0927.namprd21.prod.outlook.com (52.132.117.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.2; Fri, 2 Mar 2018 19:58:17 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.006; Fri, 2 Mar 2018 19:58:17 +0000 From: Mike Jones To: Jim Schaad , "ace@ietf.org" Thread-Topic: [Ace] Agenda Items for London Thread-Index: AdOwK4GcIL7FtGJ8RkKfRfaHeH30GACNR8Sg Date: Fri, 2 Mar 2018 19:58:16 +0000 Message-ID: References: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> In-Reply-To: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-03-02T19:58:14.5662118Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:1::562] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0927; 7:tSnYKETaVbMluWBEgcZREZxpkUeyTQBgs1tjg8+idclbe5pnjZooZjzT/dPTduhdh8AzNpDx4Pe9+vuuY3lD4vUM+XSzViOCyjzCJCzOnhY5WyYeTOKtqj7k2COpfp4AHG2JO2AboseMO0OabpZp6F3bzLILy4zj+pE5vTstSqJ+VMbtw1x78ybPfRg0rRSuH5y5kyWe/2LdGNiGLCe6/3V5MdUSD8ifvjAGjjcQyt4b7Z36xROJLCSFwThz2ijg x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9cd87e5a-c472-4f7e-a808-08d58077f0bf x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB0927; x-ms-traffictypediagnostic: SN6PR2101MB0927: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3002001)(3231220)(944501236)(52105095)(6055026)(61426038)(61427038)(6041288)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:SN6PR2101MB0927; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0927; x-forefront-prvs: 05991796DF x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(39380400002)(376002)(346002)(39860400002)(13464003)(76104003)(52024003)(189003)(199004)(9686003)(3280700002)(74316002)(86612001)(7736002)(305945005)(68736007)(5250100002)(2501003)(186003)(106356001)(5660300001)(14454004)(110136005)(22452003)(316002)(33656002)(2906002)(102836004)(6116002)(6346003)(6506007)(53546011)(97736004)(55016002)(6436002)(8676002)(2900100001)(8936002)(81156014)(81166006)(2950100002)(229853002)(105586002)(8990500004)(25786009)(72206003)(10090500001)(10290500003)(966005)(6246003)(53936002)(6306002)(3660700001)(478600001)(46003)(99286004)(86362001)(76176011)(7696005); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0927; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: GO3qoit8xh6GDNlrSBPO1iUfb4Mk37MwMjBqLuul1fjBQYz3HnU4aWjpa2U+qFQtw1uVnZqb5hH8H9urXUkurM4yXnAl6e/1BRkLKsuhYEXxf9hm5kR41nHRmrGKygNNPwiD428lHKF0wmrN9olPqHQThZma6BNp/7H4FnoOa0w= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9cd87e5a-c472-4f7e-a808-08d58077f0bf X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Mar 2018 19:58:17.0378 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0927 Archived-At: Subject: Re: [Ace] Agenda Items for London X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 19:58:24 -0000 I would like to do brief presentations on the status of these drafts: - draft-ietf-ace-cbor-web-token - draft-ietf-ace-cwt-proof-of-possession 15 minutes each should be sufficient. Thanks, -- Mike -----Original Message----- From: Ace On Behalf Of Jim Schaad Sent: Tuesday, February 27, 2018 4:34 PM To: ace@ietf.org Subject: [Ace] Agenda Items for London Please let the chairs know if you want a slot on the agenda for London. Please give us an idea of what you think you need to cover, how long you th= ink it will take and who is doing the presentations. For people doing the presentations, I would like to get slides during the w= eek of March 12th so that the chairs can do a fast review and get them post= ed before the Monday morning meeting. I really do not want to need to do t= his first thing Monday morning. Jim _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Fri Mar 2 12:05:52 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CD45C12D871; Fri, 2 Mar 2018 12:05:41 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Carlos Martinez To: Cc: ace@ietf.org, ietf@ietf.org, draft-ietf-ace-cbor-web-token.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152002114182.15791.10844946218841630354@ietfa.amsl.com> Date: Fri, 02 Mar 2018 12:05:41 -0800 Archived-At: Subject: [Ace] Opsdir telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 20:05:42 -0000 Reviewer: Carlos Martinez Review result: Ready Reviewer: Carlos Martínez Review Result: Ready I have reviewed this document as part of the Operational directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written with the intent of improving the operational aspects of the IETF drafts. Comments that are not addressed in last call may be included in AD reviews during the IESG review. Document editors and WG chairs should treat these comments just like any other last call comments. I found the document easy to read. The specification is clear and examples in Appendix C are of real help for us who are not experts in the area. I believe the document to be ready. From nobody Sat Mar 3 16:04:57 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B77B01201FA; Sat, 3 Mar 2018 16:04:55 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152012189571.12005.909030084908596435@ietfa.amsl.com> Date: Sat, 03 Mar 2018 16:04:55 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-cwt-proof-of-possession-02.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 00:04:56 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) Authors : Michael B. Jones Ludwig Seitz Göran Selander Erik Wahlström Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-cwt-proof-of-possession-02.txt Pages : 15 Date : 2018-03-03 Abstract: This specification describes how to declare in a CBOR Web Token (CWT) that the presenter of the CWT possesses a particular proof-of- possession key. Being able to prove possession of a key is also sometimes described as being the holder-of-key. This specification provides equivalent functionality to "Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)" (RFC 7800), but using CBOR and CWTs rather than JSON and JWTs. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cwt-proof-of-possession/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-02 https://datatracker.ietf.org/doc/html/draft-ietf-ace-cwt-proof-of-possession-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-cwt-proof-of-possession-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sat Mar 3 16:09:39 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EA26127876 for ; Sat, 3 Mar 2018 16:09:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fAM0nCoCBGJk for ; Sat, 3 Mar 2018 16:09:36 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0113.outbound.protection.outlook.com [104.47.32.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B902D1201FA for ; Sat, 3 Mar 2018 16:09:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=rVi6vKUG4nSteNt2CzxD0s2pQrMKSix34vjh/X2Jwus=; b=EpWAWgWnUxD0BE1cnCTj6b9GdURKV/lBJwHzARJXHyxIhrIOLflTUFJ2xdliZtdDLRfzk/5nGa8H9Ivep+lpw0nasZUazY0bVmdgNyateZ0+D0sXXnjNStWTtPsqlcbLwQEs6DbO3dRMPcKKeOGxAILSptiwrVVXnjA2wpKgng8= Received: from BL0PR2101MB0932.namprd21.prod.outlook.com (52.132.20.148) by CY4SPR01MB172.namprd21.prod.outlook.com (10.171.244.166) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.588.1; Sun, 4 Mar 2018 00:09:16 +0000 Received: from BL0PR2101MB0932.namprd21.prod.outlook.com ([fe80::e012:5972:ff7b:c312]) by BL0PR2101MB0932.namprd21.prod.outlook.com ([fe80::e012:5972:ff7b:c312%6]) with mapi id 15.20.0567.006; Sun, 4 Mar 2018 00:09:15 +0000 From: Mike Jones To: "ace@ietf.org" Thread-Topic: Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) spec with a few improvements Thread-Index: AdOzSxt9cRRZ6M9aQ4qI53ybLSQssg== Date: Sun, 4 Mar 2018 00:09:15 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.47.88.236] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4SPR01MB172; 7:tKDH+a2SbishrjDIKOe7OJdGUMvsiQW2+tdhNvTL0zlFcUz0XAaMaH3ynDGbctfPavQG8TDm/1x/0P4lO6s/XH4Rv28o7KiQSBosE3j785vvPsEqCuMWZmBBxpG9CDPzOZ9dvRja6T0sZoyJeaLKf9nmyiLFVJ7UJGcKwml0dGCrGNYz/gC7xPtb489sMtcwHhoX2+zpVlHhcJqnzLNV+AcPTjxnOjB7zPaJT2HJr6onEYHX63fH8heiXejh0Z9e x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 1f570609-f085-4b60-fba8-08d581642ac9 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7193020); SRVR:CY4SPR01MB172; x-ms-traffictypediagnostic: CY4SPR01MB172: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(31418570063057)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(3002001)(3231220)(944501244)(52105095)(10201501046)(93006095)(93001095)(6055026)(61426038)(61427038)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:CY4SPR01MB172; BCL:0; PCL:0; RULEID:; SRVR:CY4SPR01MB172; x-forefront-prvs: 060166847D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(366004)(39860400002)(346002)(396003)(39380400002)(209900001)(189003)(199004)(55016002)(3280700002)(7736002)(22452003)(53936002)(106356001)(5660300001)(10090500001)(2351001)(8676002)(81166006)(81156014)(1730700003)(74316002)(53376002)(6436002)(86362001)(66066001)(9686003)(54896002)(2900100001)(236005)(2906002)(5250100002)(790700001)(6116002)(3846002)(2501003)(6306002)(5640700003)(68736007)(102836004)(6506007)(5630700001)(59450400001)(99286004)(7696005)(33656002)(97736004)(8990500004)(6916009)(25786009)(14454004)(478600001)(8936002)(966005)(72206003)(105586002)(186003)(316002)(3660700001)(26005)(10290500003)(606006)(86612001)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4SPR01MB172; H:BL0PR2101MB0932.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: i8KFF8aJgW8GOis+883niTB04tpquYLZbB7pmbmXrD1J6l42MJqOEntljcK4Bf5MU2+IayKYtHOSmliks3cuYxHKJg6sgMiWoJoAX1ZJuFrybXBSuIoHK7EWUtnCy4KqxU7LvsYLLCPEox/PFf3VWvEU0MoCDoQ45LWb15yR81E= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB0932B9D94A067DEEF9D60C7EF5DB0BL0PR2101MB0932_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1f570609-f085-4b60-fba8-08d581642ac9 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Mar 2018 00:09:15.6985 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4SPR01MB172 Archived-At: Subject: [Ace] Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) spec with a few improvements X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 00:09:38 -0000 --_000_BL0PR2101MB0932B9D94A067DEEF9D60C7EF5DB0BL0PR2101MB0932_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable A few local improvements have been made to the Proof-of-Possession Key Sema= ntics for CBOR Web Tokens (CWTs) specification. Changes were: * Changed "typically" to "often" when describing ways of performing pro= of of possession. * Changed b64 to hex encoding in an example. * Changed to using the RFC 8174 boilerplate instead of the RFC 2119 boi= lerplate. Thanks to Samuel Erdtman for sharing the editing. The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-02 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cwt-proof-of-possession-0= 2.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=3D1783 and = as @selfissued. --_000_BL0PR2101MB0932B9D94A067DEEF9D60C7EF5DB0BL0PR2101MB0932_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

A few local improvements have been made to the Proof= -of-Possession Key Semantics for CBOR Web Tokens (CWTs) specification. = ; Changes were:

  • Changed "typically" to "often" when describing wa= ys of performing proof of possession.
  • Changed b64 to hex encoding in an example.
  • Changed to using the RFC 8174 boilerplate instead of = the RFC 2119 boilerplate.

 

Thanks to Samuel Erdtman for sharing the editing.

 

The specification is available at:

 

An HTML-formatted version is also available at:=

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;        -- Mike

 

P.S.  This notice was also posted at http://self-issued.info/?p=3D1783 and as @selfissued.

 

--_000_BL0PR2101MB0932B9D94A067DEEF9D60C7EF5DB0BL0PR2101MB0932_-- From nobody Sun Mar 4 11:18:40 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 306831242F7; Sun, 4 Mar 2018 11:18:39 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Alexey Melnikov To: "The IESG" Cc: draft-ietf-ace-cbor-web-token@ietf.org, ace-chairs@ietf.org, kaduk@mit.edu, ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152019111919.11926.18305687218435545827.idtracker@ietfa.amsl.com> Date: Sun, 04 Mar 2018 11:18:39 -0800 Archived-At: Subject: [Ace] Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-token-12: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 19:18:39 -0000 Alexey Melnikov has entered the following ballot position for draft-ietf-ace-cbor-web-token-12: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Just to double check: a CWT claim registration from a Proposed Standard still needs to be submitted to the review mailing list, but it is not really subject to Expert Review, correct? You might want to make it clearer. From nobody Sun Mar 4 11:39:38 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 372AD126BF6; Sun, 4 Mar 2018 11:39:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OT5pfFvh4x4V; Sun, 4 Mar 2018 11:39:35 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 086DB1242F7; Sun, 4 Mar 2018 11:39:34 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Sun, 4 Mar 2018 11:37:40 -0800 From: Jim Schaad To: 'Alexey Melnikov' , 'The IESG' CC: , , , References: <152019111919.11926.18305687218435545827.idtracker@ietfa.amsl.com> In-Reply-To: <152019111919.11926.18305687218435545827.idtracker@ietfa.amsl.com> Date: Sun, 4 Mar 2018 11:39:24 -0800 Message-ID: <01e001d3b3f0$821e1990$865a4cb0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQLqOyXn1wuU65EJp2tE6F2Drxdm6KGTaguw X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-token-12: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 19:39:37 -0000 IANA does ask for the expert review as part of the processing it does = even for standards track documents. This is because, in part, they are = responsible for doing the final number assignment. That is which number = in the range is actually used. The interesting question would be what = happens if the IESG and the DEs disagree about such things. I would = expect that this would result in a long discussion with some type of = final agreement between them. Jim > -----Original Message----- > From: Alexey Melnikov [mailto:aamelnikov@fastmail.fm] > Sent: Sunday, March 4, 2018 11:19 AM > To: The IESG > Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; > kaduk@mit.edu; ace@ietf.org > Subject: Alexey Melnikov's No Objection on = draft-ietf-ace-cbor-web-token- > 12: (with COMMENT) >=20 > Alexey Melnikov has entered the following ballot position for > draft-ietf-ace-cbor-web-token-12: No Objection >=20 > When responding, please keep the subject line intact and reply to all = email > addresses included in the To and CC lines. (Feel free to cut this = introductory > paragraph, however.) >=20 >=20 > Please refer to = https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. >=20 >=20 > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ >=20 >=20 >=20 > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- >=20 > Just to double check: a CWT claim registration from a Proposed = Standard still > needs to be submitted to the review mailing list, but it is not really = subject to > Expert Review, correct? You might want to make it clearer. From nobody Sun Mar 4 13:01:07 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E72C4120727; Sun, 4 Mar 2018 13:01:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fastmail.fm header.b=Zu5NTL8z; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=At6qUbtW Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TNgx_oXdRClI; Sun, 4 Mar 2018 13:00:59 -0800 (PST) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63BFE1201F2; Sun, 4 Mar 2018 13:00:59 -0800 (PST) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 99C2020AF9; Sun, 4 Mar 2018 16:00:58 -0500 (EST) Received: from web2 ([10.202.2.212]) by compute7.internal (MEProxy); Sun, 04 Mar 2018 16:00:58 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.fm; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; bh=xw5hpfJHZ3dQX0xUvrsb4aC8Ul/vl XxzJE3WrRJBFlM=; b=Zu5NTL8zhP1E4+KfGnaEiPuB7qCOq1IAXlIBXwe/6mXld O3UCE0EUxU9u8GKNUpuNXZTvG3wNhvocaw1dkEOmFrlbdEtRliXvFASyAXKHV9zT XZ2y00C3K3J/i2M/Oy6u4Qo2l+dCPWs+DPc6l++ywMh+q31DUp/Z/50u7LgQCk24 eOEj6HlWfnZLeLz5KJrCetjOcR/mtAE4QRUfbovyDdxSg4P5ZUwhGMl030ET6qNj DKECSIi4ywHJJdgaBR+cMPK5hbQjycD5ltzNpAtNNAHPVKa3X6mP6YWCLRBbD0/I Ha0QqMip/ErzEyUTyff/b1X7L6/eUyoxQXjY3VgfA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=xw5hpf JHZ3dQX0xUvrsb4aC8Ul/vlXxzJE3WrRJBFlM=; b=At6qUbtW9ZAGDOs6HlPBDs +R9pTaBuDyX3r+nd6DSZ5TRxX+SR1BvV+xrFZbyQGQuBfZQ3RYrPUM9yJ72pfB/z oBedb1xTKNtMb+Me+QOUHEEzR2g81HAFq2zSZtnn9vjkS4n+/ZF5XuXnNf8DACYn Hj/NzTHeDagr9GwAClzLS28Q9ZgDqU0cFDDbMfvOkRRnSdb25vp7yV0YUU5N6tJY Pl9/PHdzTN3p7pcR4hlT9nyi1oHeUjy1B5yityuBAmi0acgX4rM3YpwjMd6WxMO7 LAHAd9oM5MpmamnEiPZKvvd06/qbFKTkemd+9Zal53LP1I9bPuazZuL+ePOUEmng == X-ME-Sender: Received: by mailuser.nyi.internal (Postfix, from userid 99) id 76F9C621BF; Sun, 4 Mar 2018 16:00:58 -0500 (EST) Message-Id: <1520197258.2705337.1291165960.6753CD94@webmail.messagingengine.com> From: Alexey Melnikov To: Jim Schaad , The IESG Cc: draft-ietf-ace-cbor-web-token@ietf.org, ace-chairs@ietf.org, kaduk@mit.edu, ace@ietf.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="utf-8" X-Mailer: MessagingEngine.com Webmail Interface - ajax-b08ff009 Date: Sun, 04 Mar 2018 21:00:58 +0000 In-Reply-To: <01e001d3b3f0$821e1990$865a4cb0$@augustcellars.com> References: <152019111919.11926.18305687218435545827.idtracker@ietfa.amsl.com> <01e001d3b3f0$821e1990$865a4cb0$@augustcellars.com> Archived-At: Subject: Re: [Ace] Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-token-12: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 21:01:01 -0000 On Sun, Mar 4, 2018, at 7:39 PM, Jim Schaad wrote: > IANA does ask for the expert review as part of the processing it does > even for standards track documents. This is because, in part, they are > responsible for doing the final number assignment. That is which number > in the range is actually used. The interesting question would be what > happens if the IESG and the DEs disagree about such things. This is exactly why I am asking about this. It might also possible to game the system to ask IESG approval of a Proposed Standard that bypasses Expert Review. > I would > expect that this would result in a long discussion with some type of > final agreement between them. > > Jim > > > > -----Original Message----- > > From: Alexey Melnikov [mailto:aamelnikov@fastmail.fm] > > Sent: Sunday, March 4, 2018 11:19 AM > > To: The IESG > > Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; > > kaduk@mit.edu; ace@ietf.org > > Subject: Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-token- > > 12: (with COMMENT) > > > > Alexey Melnikov has entered the following ballot position for > > draft-ietf-ace-cbor-web-token-12: No Objection > > > > When responding, please keep the subject line intact and reply to all email > > addresses included in the To and CC lines. (Feel free to cut this introductory > > paragraph, however.) > > > > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > Just to double check: a CWT claim registration from a Proposed Standard still > > needs to be submitted to the review mailing list, but it is not really subject to > > Expert Review, correct? You might want to make it clearer. > > From nobody Sun Mar 4 13:11:53 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D79A126B72; Sun, 4 Mar 2018 13:11:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id snOvv8SR3paE; Sun, 4 Mar 2018 13:11:48 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B88D51243FE; Sun, 4 Mar 2018 13:11:47 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Sun, 4 Mar 2018 13:09:52 -0800 From: Jim Schaad To: 'Alexey Melnikov' , 'The IESG' CC: , , , References: <152019111919.11926.18305687218435545827.idtracker@ietfa.amsl.com> <01e001d3b3f0$821e1990$865a4cb0$@augustcellars.com> <1520197258.2705337.1291165960.6753CD94@webmail.messagingengine.com> In-Reply-To: <1520197258.2705337.1291165960.6753CD94@webmail.messagingengine.com> Date: Sun, 4 Mar 2018 13:11:36 -0800 Message-ID: <01e901d3b3fd$639fa120$2adee360$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQLqOyXn1wuU65EJp2tE6F2Drxdm6AGhZRg+AnEMd0qhcvCv0A== X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-token-12: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 21:11:51 -0000 > -----Original Message----- > From: Alexey Melnikov [mailto:aamelnikov@fastmail.fm] > Sent: Sunday, March 4, 2018 1:01 PM > To: Jim Schaad ; The IESG > Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; > kaduk@mit.edu; ace@ietf.org > Subject: Re: Alexey Melnikov's No Objection on = draft-ietf-ace-cbor-web- > token-12: (with COMMENT) >=20 > On Sun, Mar 4, 2018, at 7:39 PM, Jim Schaad wrote: > > IANA does ask for the expert review as part of the processing it = does > > even for standards track documents. This is because, in part, they > > are responsible for doing the final number assignment. That is = which > > number in the range is actually used. The interesting question = would > > be what happens if the IESG and the DEs disagree about such things. >=20 > This is exactly why I am asking about this. It might also possible to = game the > system to ask IESG approval of a Proposed Standard that bypasses = Expert > Review. Interesting. The text that IANA and I finally agreed to for the COSE = Algorithm registry is "Standards Action With Expert Review". That would make sure that it cannot bypass the Expert Review. Jim >=20 > > I would > > expect that this would result in a long discussion with some type of > > final agreement between them. > > > > Jim > > > > > > > -----Original Message----- > > > From: Alexey Melnikov [mailto:aamelnikov@fastmail.fm] > > > Sent: Sunday, March 4, 2018 11:19 AM > > > To: The IESG > > > Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; > > > kaduk@mit.edu; ace@ietf.org > > > Subject: Alexey Melnikov's No Objection on > > > draft-ietf-ace-cbor-web-token- > > > 12: (with COMMENT) > > > > > > Alexey Melnikov has entered the following ballot position for > > > draft-ietf-ace-cbor-web-token-12: No Objection > > > > > > When responding, please keep the subject line intact and reply to > > > all email addresses included in the To and CC lines. (Feel free to > > > cut this introductory paragraph, however.) > > > > > > > > > Please refer to > > > https://www.ietf.org/iesg/statement/discuss-criteria.html > > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > > > > The document, along with other ballot positions, can be found = here: > > > https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ > > > > > > > > > > > > = -------------------------------------------------------------------- > > > -- > > > COMMENT: > > > = -------------------------------------------------------------------- > > > -- > > > > > > Just to double check: a CWT claim registration from a Proposed > > > Standard still needs to be submitted to the review mailing list, = but > > > it is not really subject to Expert Review, correct? You might want = to make > it clearer. > > > > From nobody Mon Mar 5 04:28:47 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AA711241F8 for ; Mon, 5 Mar 2018 04:28:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.621 X-Spam-Level: X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6ddpzuDe07kG for ; Mon, 5 Mar 2018 04:28:45 -0800 (PST) Received: from se-out1.mx-wecloud.net (se-out1.mx-wecloud.net [89.221.255.93]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19DF4120713 for ; Mon, 5 Mar 2018 04:28:45 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out1.mx-wecloud.net (Postfix) with ESMTPS id 878CA2033B9 for ; Mon, 5 Mar 2018 12:28:41 +0000 (UTC) Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Mon, 5 Mar 2018 13:28:42 +0100 To: References: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> From: Ludwig Seitz Message-ID: Date: Mon, 5 Mar 2018 13:28:42 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=cdiiljLM c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=IkcTkHD0fZMA:10 a=v2DPQv5-lfwA:10 a=QLPfpYkryAO4RqcpiSkA:9 a=QEXdDO2ut3YA:10 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: Re: [Ace] Agenda Items for London X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 12:28:47 -0000 On 2018-02-28 01:33, Jim Schaad wrote: > Please let the chairs know if you want a slot on the agenda for London. > Please give us an idea of what you think you need to cover, how long you > think it will take and who is doing the presentations. > > For people doing the presentations, I would like to get slides during the > week of March 12th so that the chairs can do a fast review and get them > posted before the Monday morning meeting. I really do not want to need to > do this first thing Monday morning. > > Jim > I would also like to request a 10 minute slot to present the (minor) updates to the two profile drafts I'm co-authoring. draft-ietf-ace-dtls-authorize and draft-ietf-ace-oscore-profile /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE SICS Phone +46(0)70-349 92 51 From nobody Mon Mar 5 05:03:38 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BFD09124D68; Mon, 5 Mar 2018 05:03:36 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152025501674.27925.2236179718240664185@ietfa.amsl.com> Date: Mon, 05 Mar 2018 05:03:36 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-oscore-profile-01.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 13:03:37 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : OSCORE profile of the Authentication and Authorization for Constrained Environments Framework Authors : Ludwig Seitz Francesca Palombini Martin Gunnarsson Goeran Selander Filename : draft-ietf-ace-oscore-profile-01.txt Pages : 17 Date : 2018-03-05 Abstract: This memo specifies a profile for the Authentication and Authorization for Constrained Environments (ACE) framework. It utilizes Object Security for Constrained RESTful Environments (OSCORE) to provide communication security, server authentication, and proof-of-possession for a key owned by the client and bound to an OAuth 2.0 access token. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-oscore-profile/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-oscore-profile-01 https://datatracker.ietf.org/doc/html/draft-ietf-ace-oscore-profile-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oscore-profile-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 5 07:26:18 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72FA212711D for ; Mon, 5 Mar 2018 07:26:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.619 X-Spam-Level: X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5tVo7SkIva8f for ; Mon, 5 Mar 2018 07:26:14 -0800 (PST) Received: from se-out1.mx-wecloud.net (se-out1.mx-wecloud.net [89.221.255.93]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6B6D127201 for ; Mon, 5 Mar 2018 07:26:13 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out1.mx-wecloud.net (Postfix) with ESMTPS id 0432B202667 for ; Mon, 5 Mar 2018 15:26:10 +0000 (UTC) Received: from [193.10.66.141] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Mon, 5 Mar 2018 16:26:11 +0100 Message-ID: <5A9D6186.8090005@ri.se> Date: Mon, 5 Mar 2018 16:25:58 +0100 From: Marco Tiloca User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.8.0 MIME-Version: 1.0 To: "ace@ietf.org" References: <152026267502.14575.2766614229773246651.idtracker@ietfa.amsl.com> In-Reply-To: <152026267502.14575.2766614229773246651.idtracker@ietfa.amsl.com> X-Forwarded-Message-Id: <152026267502.14575.2766614229773246651.idtracker@ietfa.amsl.com> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="5WkRvIuaNo3Cu5L0oQXqUOnApoJXoDsfN" X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=cdiiljLM c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=v2DPQv5-lfwA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=48vgC7mUAAAA:8 a=s6_mNyPrJXhlcKsu1EsA:9 a=QEXdDO2ut3YA:10 a=8EO8-I9ssl-aCxYl:21 a=_W_S_7VecoQA:10 a=HxrLYLwlMNDnqCpMEUwA:9 a=ONNS8QRKHyMA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: [Ace] Fwd: New Version Notification for draft-tiloca-ace-oscoap-joining-03.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 15:26:16 -0000 --5WkRvIuaNo3Cu5L0oQXqUOnApoJXoDsfN Content-Type: multipart/alternative; boundary="------------080508080508070704080308" This is a multi-part message in MIME format. --------------080508080508070704080308 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, We have just submitted a new version of the document describing how to join OSCORE groups using the ACE framework: https://tools.ietf.org/html/draft-tiloca-ace-oscoap-joining-03 In particular, this updated version complies with the new general draft covering key provisioning for group communication using ACE: https://tools.ietf.org/html/draft-palombini-ace-key-groupcomm-00 Best, /Marco -------- Forwarded Message -------- Subject: New Version Notification for draft-tiloca-ace-oscoap-joining-03.txt Date: Mon, 5 Mar 2018 07:11:15 -0800 From: internet-drafts@ietf.org To: Marco Tiloca , Jiye Park = A new version of I-D, draft-tiloca-ace-oscoap-joining-03.txt has been successfully submitted by Marco Tiloca and posted to the IETF repository. Name: draft-tiloca-ace-oscoap-joining Revision: 03 Title: Joining OSCORE groups in ACE Document date: 2018-03-05 Group: Individual Submission Pages: 14 URL: https://www.ietf.org/internet-drafts/draft-tiloca-ace-osc= oap-joining-03.txt Status: https://datatracker.ietf.org/doc/draft-tiloca-ace-oscoap-= joining/ Htmlized: https://tools.ietf.org/html/draft-tiloca-ace-oscoap-joini= ng-03 Htmlized: https://datatracker.ietf.org/doc/html/draft-tiloca-ace-os= coap-joining-03 Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-tiloca-ace-osco= ap-joining-03 Abstract: This document describes a method to join a group where communications are based on CoAP and secured with Object Security for Constrained RESTful Environments (OSCORE). The proposed method delegates the authentication and authorization of client nodes that join an OSCORE group through a Group Manager server. This approach builds on the ACE framework for Authentication and Authorization, and leverages protocol-specific profiles of ACE to achieve communication security, proof-of-possession and server authentication. = =20 Please note that it may take a couple of minutes from the time of submiss= ion until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --------------080508080508070704080308 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all,

We have just submitted a new version of the document describing how to join OSCORE groups using the ACE framework:

https://tools.ietf.org/html/draft-t= iloca-ace-oscoap-joining-03


In particular, this updated version complies with the new general draft covering key provisioning for group communication using ACE:
https://tools.ietf.org/html/draft= -palombini-ace-key-groupcomm-00


Best,
/Marco


-------- Forwarded Message --------
Sub= ject: New Version Notification for draft-tiloca-ace-oscoap-joining-03.txt
Dat= e: Mon, 5 Mar 2018 07:11:15 -0800
Fro= m: internet-drafts@ietf.org
To:= Marco Tiloca <marco.tiloca@ri.se>, Jiye Park <ji-ye.park@uni-due.de> 


A new version of I-D, draft-tiloca-ace-oscoap-joining-03.txt
has been successfully submitted by Marco Tiloca and posted to the
IETF repository.

Name:		draft-tiloca-ace-oscoap-joining
Revision:	03
Title:		Joining OSCORE groups in ACE
Document date:	2018-03-05
Group:		Individual Submission
Pages:		14
URL:            https://ww=
w.ietf.org/internet-drafts/draft-tiloca-ace-oscoap-joining-03.txt
Status:         https://datatracker.=
ietf.org/doc/draft-tiloca-ace-oscoap-joining/
Htmlized:       https://tools.ietf.org/=
html/draft-tiloca-ace-oscoap-joining-03
Htmlized:       https://datat=
racker.ietf.org/doc/html/draft-tiloca-ace-oscoap-joining-03
Diff:           https://www.iet=
f.org/rfcdiff?url2=3Ddraft-tiloca-ace-oscoap-joining-03

Abstract:
   This document describes a method to join a group where communications
   are based on CoAP and secured with Object Security for Constrained
   RESTful Environments (OSCORE).  The proposed method delegates the
   authentication and authorization of client nodes that join an OSCORE
   group through a Group Manager server.  This approach builds on the
   ACE framework for Authentication and Authorization, and leverages
   protocol-specific profiles of ACE to achieve communication security,
   proof-of-possession and server authentication.

                                                                         =
        =20


Please note that it may take a couple of minutes from the time of submiss=
ion
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


--------------080508080508070704080308-- --5WkRvIuaNo3Cu5L0oQXqUOnApoJXoDsfN Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJanWGGAAoJEO4mZLQOWNpDGiIH/3m+wEDvS1Jup/3DQPXdQFvI QEzhFZ/ILvncHxdBqzV5greHVWt5XAVTRRJdLcl40kq/XJ0iZYME49ZKTcWot3sU 8DqdfSRWNEYHqA5/3AsCX7/8lE0jlQF9eMd4zymhwOWD64dLu5DTxOznuDz+r3Ry VG43wlD47z5IWyP3YCplgRKI/OSdl5xbHFw7oFBPpixyBLKFErlo32glWqRhKHAb At2GWtoxlM1hGSub+YXRV7cHRyPoR5gC3SXDi1v/XJuq8B0xeEgNZ2Zt1IA4HOLT pYvdqvkuBlEbNuXoOyieCP3y0tdn3K+fDGQWPktRMN6zdnQeklpE1BSXlQtBpwQ= =09+S -----END PGP SIGNATURE----- --5WkRvIuaNo3Cu5L0oQXqUOnApoJXoDsfN-- From nobody Mon Mar 5 07:29:49 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45A4412D777 for ; Mon, 5 Mar 2018 07:29:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.62 X-Spam-Level: X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 03KkRfkEmVvo for ; Mon, 5 Mar 2018 07:29:45 -0800 (PST) Received: from se-out1.mx-wecloud.net (se-out1.mx-wecloud.net [89.221.255.93]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 974F0127201 for ; Mon, 5 Mar 2018 07:29:45 -0800 (PST) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out1.mx-wecloud.net (Postfix) with ESMTPS id B7DF420534E for ; Mon, 5 Mar 2018 15:29:42 +0000 (UTC) Received: from [193.10.66.141] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Mon, 5 Mar 2018 16:29:43 +0100 Message-ID: <5A9D6261.3030709@ri.se> Date: Mon, 5 Mar 2018 16:29:37 +0100 From: Marco Tiloca User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.8.0 MIME-Version: 1.0 To: References: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> In-Reply-To: <02d401d3b02b$c4057290$4c1057b0$@augustcellars.com> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="t5DpOW9c7SNuJfdXsabUKWTdiDgWoAHA7" X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=cdiiljLM c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=v2DPQv5-lfwA:10 a=48vgC7mUAAAA:8 a=xPT6tdSuAAAA:8 a=a0dO-HNjzYxCNycsTqsA:9 a=fbJLuFd4rWReXp5l:21 a=VvlvmvUznWct_MTA:21 a=pILNOxqGKmIA:10 a=OconUzFnqWths535nIkA:9 a=ONNS8QRKHyMA:10 a=w1C3t2QeGrPiZgrLijVG:22 a=80PJfYVSYmV_jLpvUEnt:22 X-Virus-Scanned: clamav-milter 0.99.3 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: Re: [Ace] Agenda Items for London X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 15:29:47 -0000 --t5DpOW9c7SNuJfdXsabUKWTdiDgWoAHA7 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hello, I would like to request 10 minutes to present updates and get feedback for the draft: https://tools.ietf.org/html/draft-tiloca-ace-oscoap-joining-03 I will be the presenter. If it is possible, I would like this slot to be after the one for draft-palombini-ace-key-groupcomm Thanks, /Marco On 2018-02-28 01:33, Jim Schaad wrote: > Please let the chairs know if you want a slot on the agenda for London.= > Please give us an idea of what you think you need to cover, how long yo= u > think it will take and who is doing the presentations. > > For people doing the presentations, I would like to get slides during t= he > week of March 12th so that the chairs can do a fast review and get them= > posted before the Monday morning meeting. I really do not want to need= to > do this first thing Monday morning. > > Jim > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace --=20 Marco Tiloca, PhD Research Institutes of Sweden RISE ICT/SICS Isafjordsgatan 22 / Kistag=E5ngen 16 SE-164 40 Kista (Sweden) Phone: +46 (0)70 60 46 501 https://www.sics.se The RISE institutes Innventia, SP and Swedish ICT have merged in order to become a stronger research and innovation partner for businesses and society. SICS Swedish ICT AB, has now changed name to RISE SICS AB. --t5DpOW9c7SNuJfdXsabUKWTdiDgWoAHA7 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJanWJhAAoJEO4mZLQOWNpDAEUIAIdr/QnYyjBVdJfTPuUZJLDu 7CDVBVWJcEFWPdGPeOkdK5W+F/P/Qnd/yZ6BS4VCChYYKGywwwym6e8CQURih/ph AgW5HMZ9EwIBIcRjTuiOPrbmfpt6mx3Gglon5wtiUOpDSaTDrkHXDu+pUbVzAAjZ 3D43+4VYw3AmxmpH17TTHGf/ZgnVuQpMo85U1M2Eg0HPlhSZITLQ6INIIUBYV6Ti qJbN6/be7iIwq+IOxzaY3I6jT711pK05uuGcIz0Pceo2+cTSBGa12Sz0mJY2tHbl wS+pGs0vYVOs/RoT5CG6Nzjsa6z1+4nrjHsI1QsdqKYM3HrnDK5I4WtwXBmJwLU= =WRcH -----END PGP SIGNATURE----- --t5DpOW9c7SNuJfdXsabUKWTdiDgWoAHA7-- From nobody Mon Mar 5 12:17:34 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id ADDEB12E051; Mon, 5 Mar 2018 12:17:16 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.74.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152028103665.31682.15699397756422780971@ietfa.amsl.com> Date: Mon, 05 Mar 2018 12:17:16 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-dtls-authorize-03.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 20:17:19 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE) Authors : Stefanie Gerdes Olaf Bergmann Carsten Bormann Göran Selander Ludwig Seitz Filename : draft-ietf-ace-dtls-authorize-03.txt Pages : 19 Date : 2018-03-05 Abstract: This specification defines a profile for delegating client authentication and authorization in a constrained environment by establishing a Datagram Transport Layer Security (DTLS) channel between resource-constrained nodes. The protocol relies on DTLS for communication security between entities in a constrained network using either raw public keys or pre-shared keys. A resource- constrained node can use this protocol to delegate management of authorization information to a trusted host with less severe limitations regarding processing power and memory. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-dtls-authorize/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-dtls-authorize-03 https://datatracker.ietf.org/doc/html/draft-ietf-ace-dtls-authorize-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-dtls-authorize-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 5 13:27:22 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 079F6126C0F; Mon, 5 Mar 2018 13:27:21 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.74.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152028524101.31686.10931649555732856238@ietfa.amsl.com> Date: Mon, 05 Mar 2018 13:27:21 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-cbor-web-token-13.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 21:27:21 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : CBOR Web Token (CWT) Authors : Michael B. Jones Erik Wahlström Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-cbor-web-token-13.txt Pages : 27 Date : 2018-03-05 Abstract: CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR) and CBOR Object Signing and Encryption (COSE) is used for added application layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-13 https://datatracker.ietf.org/doc/html/draft-ietf-ace-cbor-web-token-13 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-cbor-web-token-13 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 5 13:33:58 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1FAE126CB6 for ; Mon, 5 Mar 2018 13:33:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.019 X-Spam-Level: X-Spam-Status: No, score=-2.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d_AhT1-_wvj1 for ; Mon, 5 Mar 2018 13:33:53 -0800 (PST) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0130.outbound.protection.outlook.com [104.47.34.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91243126C0F for ; Mon, 5 Mar 2018 13:33:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=eJjLjmf//p5vi4YFTC1xBEusKUYimnxlZDGN1O9N0Ao=; b=Pcz187vfnRkcXFBPvepyIArCXQz/OKiicO9PiT3huls32ZVEYBIlVsbfZQQ49M5Ha2uyvosJJXxSudpc9KKXwLHbyiVQdtFsKCVFFZ+M4wtJpRFeJh/5t98nZXTUtnNnDcPOoQaRoilpjQCNJfhp/W1b21Dh77Ebb/Rr8o3ArMw= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1022.namprd21.prod.outlook.com (52.132.117.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.588.3; Mon, 5 Mar 2018 21:33:52 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0588.001; Mon, 5 Mar 2018 21:33:52 +0000 From: Mike Jones To: "ace@ietf.org" CC: Dan Romascanu , Kyle Rose , Benjamin Kaduk , Kathleen Moriarty Thread-Topic: CBOR Web Token (CWT) draft addressing IETF last call comments Thread-Index: AdO0xn2uZbj88ndARQSoQaJi7C+W1g== Date: Mon, 5 Mar 2018 21:33:51 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-03-05T21:33:50.4346121Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:b::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1022; 7:6M3PUG7cjB9zCDXFjwBHWzWhcZ7XQH6t/mOVVYqDVKYqgw9zBjQwNveTBHfwgUwiRuymL1PTWb9faSUeVB/sAPRtONXGEUVXMnm1Wu/A1hePTHAM01I+A4Bkc3LZafvuSS257zo6WuTo8V3aoH5JmCqr48uiuS8Yebdkn71vptJXs1yjCrQWhphPmUXLEeWIOjNYrjrKEDO8PIe/IscaCU4jx0O7Dp/Ze2k9XOWS+VP8GknJHHUzxMlb1ukw6kAy; 20:YbAzdnP3/z0q8cCQIIBMhv5kkNh9VDSPJhAHCqdduDL1qQerFvqKZeV6Qu+DRQ+cnelrpg3wICZ79/QNelQyM/GIOp8mxqeV/h+P30ANBo5Aumw6v3Sz6Z0/KpkUwPhS2Zt9LH4xLgnC/72PXfaHdqNYahjWSXFEZzE4vmevidY= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 385e89a6-1ce0-4de2-0533-08d582e0ca52 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603322)(7193020); SRVR:SN6PR2101MB1022; x-ms-traffictypediagnostic: SN6PR2101MB1022: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(31418570063057)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(3002001)(3231220)(944501244)(52105095)(10201501046)(93006095)(93001095)(6055026)(61426038)(61427038)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:SN6PR2101MB1022; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1022; x-forefront-prvs: 06022AA85F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(396003)(366004)(376002)(346002)(39380400002)(209900001)(189003)(199004)(86612001)(74316002)(2906002)(25786009)(4326008)(6436002)(186003)(478600001)(53936002)(8990500004)(966005)(7736002)(3280700002)(14454004)(72206003)(10290500003)(53376002)(5640700003)(81156014)(6506007)(1730700003)(106356001)(68736007)(7696005)(5630700001)(8676002)(46003)(81166006)(33656002)(59450400001)(99286004)(10090500001)(316002)(3660700001)(22452003)(55016002)(2351001)(790700001)(2900100001)(6116002)(105586002)(606006)(39060400002)(5660300001)(54906003)(236005)(97736004)(5250100002)(9686003)(86362001)(102836004)(54896002)(2501003)(6306002)(8936002)(6916009)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1022; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: lo5yXDNubdjVO0JhEMxlhV92+ZsBIurL9mjdqvkwAcDwcDC/9i0acN4RnBk91q63Tlh8QTsPdr+boD8YDi0bdU5BhjchsrMC8EyUC2GLnItLRCPz/loryAzckI0XXuNQ7OFxlUUBVBki1IR8KerJFAlXj3Fh/ePZuWwouYeJ2utteLpPE24YaWQ+FUD3T8S22KfRO2eWhRiCocBxR6toJDEm5TrrkOG8fs36LH3hVuuwG78Dj0NibDtDFmRx+u3+2IIBZlPlJgpXuKohdr/O0TOA1fIj/GHUYcAcnGC8vNSn3BpfTnvwGt256VB+yxl+Hh+ddoovMtE89Ku8prGmCQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943D068F03621252BBAFBB6F5DA0SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 385e89a6-1ce0-4de2-0533-08d582e0ca52 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Mar 2018 21:33:51.9700 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1022 Archived-At: Subject: [Ace] CBOR Web Token (CWT) draft addressing IETF last call comments X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 21:33:56 -0000 --_000_SN6PR2101MB0943D068F03621252BBAFBB6F5DA0SN6PR2101MB0943_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The CBOR Web Token (CWT) specification has been updated to address IETF las= t call comments received to date, including GenArt, SecDir, Area Director, = and additional shepherd comments. Changes were: * Clarified the registration criteria applied to different ranges of Cl= aim Key values, as suggested by Kathleen Moriarty and Dan Romascanu. * No longer describe the syntax of CWT claims as being the same as that= of the corresponding JWT claims, as suggested by Kyle Rose. * Added guidance about the selection of the Designated Experts, as sugg= ested by Benjamin Kaduk. * Acknowledged additional reviewers. The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-13 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cbor-web-token-13.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=3D1789 and = as @selfissued. --_000_SN6PR2101MB0943D068F03621252BBAFBB6F5DA0SN6PR2101MB0943_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The CBOR Web Token (CWT) specification has been upda= ted to address IETF last call comments received to date, including GenArt, = SecDir, Area Director, and additional shepherd comments.  Changes were= :

  • Clarified the reg= istration criteria applied to different ranges of Claim Key values, as sugg= ested by Kathleen Moriarty and Dan Romascanu.
  • No longer describe the syntax o= f CWT claims as being the same as that of the corresponding JWT claims, as = suggested by Kyle Rose.
  • Added guidance about the selection of the Designated = Experts, as suggested by Benjamin Kaduk.
  • Acknowledged additional reviewers.

 

The specification is available at:

 

An HTML-formatted version is also available at:=

--_000_SN6PR2101MB0943D068F03621252BBAFBB6F5DA0SN6PR2101MB0943_-- From nobody Mon Mar 5 16:09:06 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75098120227 for ; Mon, 5 Mar 2018 16:09:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L5aAq3jGBMpZ for ; Mon, 5 Mar 2018 16:09:04 -0800 (PST) Received: from dmz-mailsec-scanner-5.mit.edu (dmz-mailsec-scanner-5.mit.edu [18.7.68.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD0FA1200C5 for ; Mon, 5 Mar 2018 16:09:03 -0800 (PST) X-AuditID: 12074422-707ff700000039f3-16-5a9ddc1a9966 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-5.mit.edu (Symantec Messaging Gateway) with SMTP id B9.96.14835.B1CDD9A5; Mon, 5 Mar 2018 19:09:00 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id w2608s11001368; Mon, 5 Mar 2018 19:08:56 -0500 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w2608prd023961 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 5 Mar 2018 19:08:54 -0500 Date: Mon, 5 Mar 2018 18:08:51 -0600 From: Benjamin Kaduk To: Mike Jones Cc: "ace@ietf.org" Message-ID: <20180306000851.GQ50954@kduck.kaduk.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrCIsWRmVeSWpSXmKPExsUixG6noitzZ26Uwbtsi+/fepgt9k77xOLA 5LFkyU8mj9Ydf9kDmKK4bFJSczLLUov07RK4Mp7ePclesJuz4vnGn4wNjHPYuxg5OSQETCTO Lr3G1MXIxSEksJhJYl3nShaQhJDABkaJm80VEIkrTBLPe/8xgyRYBFQkDvzuYwSx2YDshu7L YHERAR2Jxxe/sXUxcnAwCyhK/L2kChIWFvCSeNncALaMF2jZlT+nmCHmJ0is+X8GKi4ocXLm E7C9zAJaEjf+vWSCGCMtsfwfB0iYUyBR4vv+H2DlogLKEnv7DrFPYBSYhaR7FpLuWQjdCxiZ VzHKpuRW6eYmZuYUpybrFicn5uWlFuma6uVmluilppRuYgQHqIvSDsaJ/7wOMQpwMCrx8G7w mBslxJpYVlyZe4hRkoNJSZTXMhEoxJeUn1KZkVicEV9UmpNafIhRgoNZSYT3egNQjjclsbIq tSgfJiXNwaIkzuthoh0lJJCeWJKanZpakFoEk5Xh4FCS4L18C6hRsCg1PbUiLTOnBCHNxMEJ MpwHaLgeSA1vcUFibnFmOkT+FKMux40Xr9uYhVjy8vNSpcR5P9wEKhIAKcoozYObA0osEtn7 a14xigO9Jcz7BWQUDzApwU16BbSECWjJ+btzQJaUJCKkpBoYO4Tlpf9Iu8wudeqwPPX2F0Pm 6srGZU6Xzhv2cBvFTjlx0vpQ0RPecj0uydsq/995rBT0Ll6VcqhU7b+SxSrR01duRIfUTmu8 v+aBp7rxke82a7PXXb5hOkdx4hq2BwwvQj6mdV1jdfvq+fNi51TbbtHubg4rsTm5Vz3mH335 9tHPJzLTJKYcUGIpzkg01GIuKk4EAM8yg7wHAwAA Archived-At: Subject: Re: [Ace] CBOR Web Token (CWT) draft addressing IETF last call comments X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 00:09:05 -0000 Hi Mike, Thanks for these updates! -Ben On Mon, Mar 05, 2018 at 09:33:51PM +0000, Mike Jones wrote: > The CBOR Web Token (CWT) specification has been updated to address IETF last call comments received to date, including GenArt, SecDir, Area Director, and additional shepherd comments. Changes were: > > * Clarified the registration criteria applied to different ranges of Claim Key values, as suggested by Kathleen Moriarty and Dan Romascanu. > * No longer describe the syntax of CWT claims as being the same as that of the corresponding JWT claims, as suggested by Kyle Rose. > * Added guidance about the selection of the Designated Experts, as suggested by Benjamin Kaduk. > * Acknowledged additional reviewers. > > The specification is available at: > > * https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-13 > > An HTML-formatted version is also available at: > > * http://self-issued.info/docs/draft-ietf-ace-cbor-web-token-13.html > > -- Mike > > P.S. This notice was also posted at http://self-issued.info/?p=1789 and as @selfissued. > From nobody Mon Mar 5 16:42:12 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE8E71241F5 for ; Mon, 5 Mar 2018 16:42:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dfjm0aK7ucWf for ; Mon, 5 Mar 2018 16:42:08 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0095.outbound.protection.outlook.com [104.47.37.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BB5D126D85 for ; Mon, 5 Mar 2018 16:42:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=WTWr6bhsotwW05eCmkNI8tn+EGf4zjFG4ycSSGZ7yGk=; b=cK/01Fpf2LEfrYdhcYO8gDbpUaHoRNLfz3EFbojw6kuogc2zXxJ9VMS3H1Qb7DcQ2yZ0npj+F9yJeut37JziEkwo2YSd4wGk5+V1sgBb+g2XQ1Oo/kuW8Z2wFXog0Wdt9kyUHfB05AM7mKzj6PBavNWiHZEWE/Vb9NW+Gh18STI= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1008.namprd21.prod.outlook.com (52.132.117.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.567.3; Tue, 6 Mar 2018 00:42:07 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0588.001; Tue, 6 Mar 2018 00:42:07 +0000 From: Mike Jones To: Kathleen Moriarty CC: "ace@ietf.org" Thread-Topic: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 Thread-Index: AQHTp2a+umA3lNAvQ0mjvQ/gkC3Ob6OnfxHAgAAJDACAABHJoIAa3ivw Date: Tue, 6 Mar 2018 00:42:06 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-16T22:20:46.7701866Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:a::562] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1008; 20:qr0BJiRF1wdGZZYMqzvYRnZMPjFPIBvPUmI4GdWxagGb1KWPR1th5Pfq0Cy1rBSP97YM4VEJ/IfAZ4P/wwDQM3w4HRQkCg9hCA8Fzdx8fvBThFyZTSq18gZsHfbTp2lNLRo4wVyAPRYZNHD/uDyzubQhOPq16rtv5f0maD10zXQ= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: d9768ae1-95af-417f-8e66-08d582fb16c0 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(2017052603328)(7193020); SRVR:SN6PR2101MB1008; x-ms-traffictypediagnostic: SN6PR2101MB1008: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(89211679590171)(85827821059158); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(3231220)(944501244)(52105095)(93006095)(93001095)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041288)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(6072148)(201708071742011); SRVR:SN6PR2101MB1008; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1008; x-forefront-prvs: 06036BD506 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(396003)(39860400002)(39380400002)(366004)(199004)(189003)(13464003)(102836004)(5250100002)(6346003)(10290500003)(76176011)(59450400001)(46003)(186003)(74316002)(10090500001)(5660300001)(53546011)(7736002)(86612001)(86362001)(53936002)(3660700001)(305945005)(6246003)(6506007)(2900100001)(7696005)(93886005)(8990500004)(316002)(81166006)(33656002)(81156014)(229853002)(2906002)(68736007)(3280700002)(8676002)(4326008)(25786009)(6436002)(22452003)(14454004)(478600001)(72206003)(106356001)(55016002)(99286004)(39060400002)(8936002)(105586002)(2950100002)(6916009)(966005)(9686003)(6116002)(6306002)(97736004); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1008; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: EjaOtGvR+Faqf4mE2VZgC+vyz/uXPuEYaXqmhX+vsqt9UxsXAO3GCiqEzHKgkRr+FvEop3OyH4fAzM6rExNcxD7l2bYP/KxR2NT5Szrwjj5tXSimZR4LrsbKNjt5rUVK+jG743a8QAxMRKF0ZD9Yr45nRQF0QvOkemuQwgMRIPaNpUt5rbvNC3G2h9bz82DjOyN4/+dAQE7tf3N/pzgqy2jzmOLKqGAR+0ioJylKhWMMATdoTDvgi3YZiAvEVkfVpdj8H5DqHq+VKo7lspV063fZQaJpHKSZhVGRTquLPjPcyxR+rG2QKidcLJztnrQYz9qeIjlr3m/nfY8q2wPvXA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: d9768ae1-95af-417f-8e66-08d582fb16c0 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Mar 2018 00:42:07.1432 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1008 Archived-At: Subject: Re: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 00:42:11 -0000 You'll find the requested change in the second paragraph of https://tools.i= etf.org/html/draft-ietf-ace-cbor-web-token-13#section-9.1 and the Claim Key= description in https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-1= 3#section-9.1.1. Thanks again, -- Mike -----Original Message----- From: Ace On Behalf Of Mike Jones Sent: Friday, February 16, 2018 2:21 PM To: Kathleen Moriarty Cc: ace@ietf.org Subject: Re: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 Be glad to. I'll add it to my to-do list for this draft. -- Mike -----Original Message----- From: Kathleen Moriarty =20 Sent: Friday, February 16, 2018 1:17 PM To: Mike Jones Cc: ace@ietf.org Subject: Re: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 On Fri, Feb 16, 2018 at 3:46 PM, Mike Jones w= rote: > This information is in the registration template at https://tools.ietf.or= g/html/draft-ietf-ace-cbor-web-token-12#section-9.1.1, as follows: > OK, could you clarify that in the IANA section with a simple pointer to the= registration template? This update can come with any other IETF last call comments. Thank you! Kathleen > Claim Key: > CBOR map key for the claim. Integer values between -256 and 255 > and strings of length 1 are designated as Standards Track > Required. Integer values from -65536 to 65535 and strings of > length 2 are designated as Specification Required. Integer values > of greater than 65535 and strings of length greater than 2 are > designated as Expert Review. Integer values less than -65536 are > marked as Private Use. > > Thanks again, > -- Mike > > -----Original Message----- > From: Ace On Behalf Of Kathleen Moriarty > Sent: Friday, February 16, 2018 12:42 PM > To: ace@ietf.org > Subject: [Ace] AD Review of draft-ietf-ace-cbor-web-token-12 > > Hello, > > Thanks for your work on draft-ietf-ace-cbor-web-token-12 > > The draft looks good and I'll kick off IETF last call today, but have an = important question that may require clarification in the draft. > > In the IANA section 9.1, how does one know which document type is needed?= Could you add text about how one might differentiate the values to drive = that decision? > > Depending upon the values being requested, registration requests are > evaluated on a Standards Track Required, Specification Required, > Expert Review, or Private Use basis [RFC8126] after a three-week > review period on the cwt-reg-review@ietf.org mailing list, on the > advice of one or more Designated Experts. > > > -- > > Best regards, > Kathleen > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace --=20 Best regards, Kathleen _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Mon Mar 5 16:44:09 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8B18126DED; Mon, 5 Mar 2018 16:44:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ds5EgI_CiZUa; Mon, 5 Mar 2018 16:44:04 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on072e.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe45::72e]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 859711241F5; Mon, 5 Mar 2018 16:44:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=y4hyVSgPt9p8GU1T4LJrf9/dffz+FgmTICGkvHKBGBY=; b=OV6TpheM/ijKRkGLzJ+0Tv89Y2wXqResGj2EPxTk6bypnuwf5YM1x0Ai8lSdJGEY2/OrM7HHSryOKmDWYMRTmd1aDRYdxsfvID3OQ/GftmqKBOdVeEFtXweC8iStr9p+1rG7TN0dMOxk45I7xXenMkKCIlWubsBhsIt0ehCCkRM= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1008.namprd21.prod.outlook.com (52.132.117.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.567.3; Tue, 6 Mar 2018 00:44:02 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0588.001; Tue, 6 Mar 2018 00:44:02 +0000 From: Mike Jones To: Dan Romascanu CC: Jim Schaad , gen-art , "ace@ietf.org" , ietf , Benjamin Kaduk , "draft-ietf-ace-cbor-web-token.all@ietf.org" Thread-Topic: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 Thread-Index: AQHTrzRyo8Mp7FBA1UOtbTCoMqPdBaO3HdCAgAASogCAAGp5gIAAahUAgACEUACAAEs+AIAABFGQgACSzQCACP36YA== Date: Tue, 6 Mar 2018 00:44:02 +0000 Message-ID: References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-03-06T00:44:00.8872639Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:a::562] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1008; 7:hctylMqgcx237Y9GxgBtaPeFtTbuACETX9yvEOmuZCIT8p4DfmV9NFYannW+9LhS/l1OgphMOHgKVS9trhTQtZOHRb01HWs9Or/IhaYgYvyi1zcOEkSeZPIEWZE8Drdq7anDcgYiczP2xjmOaW/t9Gyy9uiRVmYnV3XodlbiQb8wKwjVN0pTU0//hj3vV/8mxKv4aJR3WACHFjDp7kG4q8KrNXUY7yMDXP6E6xOcPecg0k97Wl+fk8LfDNwC1o9o; 20:rqN6zIABQN6iHQgVafGqkZytMMRhNPhCTq/j31HrOg8RDNYac0XLLLLL+gBQmkfp6N7yEMaK1WOxYDlFXcm70qUpuVRlAGW13+QgTII1LVCywAiiUrIui9o3+jhl7qci9RBtFx2e2jLDbqVu5yCWMudGiCsJe+MgaaIZ6IAArsw= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: b9272da5-2dcb-4df2-1709-08d582fb5b99 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(2017052603328)(7193020); SRVR:SN6PR2101MB1008; x-ms-traffictypediagnostic: SN6PR2101MB1008: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(89211679590171)(192374486261705)(85827821059158)(100405760836317)(21748063052155)(240460790083961)(1591387915157); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(3231220)(944501244)(52105095)(93006095)(93001095)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041288)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(6072148)(201708071742011); SRVR:SN6PR2101MB1008; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1008; x-forefront-prvs: 06036BD506 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(396003)(39860400002)(39380400002)(366004)(54094003)(76104003)(51914003)(199004)(189003)(13464003)(102836004)(5250100002)(6346003)(10290500003)(76176011)(59450400001)(46003)(186003)(74316002)(10090500001)(5660300001)(53546011)(7736002)(86612001)(86362001)(345774005)(53936002)(3660700001)(1411001)(6246003)(54906003)(6506007)(2900100001)(7696005)(93886005)(8990500004)(53376002)(316002)(19609705001)(81166006)(33656002)(81156014)(229853002)(2906002)(68736007)(3280700002)(8676002)(4326008)(25786009)(6436002)(22452003)(14454004)(478600001)(72206003)(106356001)(55016002)(99286004)(39060400002)(8936002)(606006)(105586002)(2950100002)(6916009)(966005)(790700001)(9686003)(54896002)(236005)(6116002)(6306002)(97736004); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1008; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: 1JW55Z7gZP8L/y+BwOqerol+MaWaXzmHQViE7W03u4CDD40SfLmgdTdAYjQcd/rXLH1OgdCnTyowWpKQo261QDBTnKmWPHXUh+oiI7wMv36tcc3PHu1utQH6vJe5xKMxu/d2h10m9OnMLCyeS5vVd+/FV8Vt2naoCxS8c2lV09Y3d4bL/n7bldw76wuMxTZ9hVEJusekq+FAiEneh967tJlGEWFvgRCDpsP4G2wZsgHrw/AjAgsB69mjrGgq1IfGOM3vHaji70kMTy0iG4YN4Sqbxg61irLlGHsB3/hCRz5IqKp4EPOM33JEYAuxNp82QihBLKF2Qrm9yhaJ5HIO8A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943543E355D779E13E3B411F5D90SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: b9272da5-2dcb-4df2-1709-08d582fb5b99 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Mar 2018 00:44:02.6393 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1008 Archived-At: Subject: Re: [Ace] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 00:44:08 -0000 --_000_SN6PR2101MB0943543E355D779E13E3B411F5D90SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGFuLCB5b3XigJlsbCBmaW5kIGNoYW5nZXMgdGhhdCBhZGRyZXNzIHlvdXIgcmV2aWV3IGNvbW1l bnRzIGluIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWFjZS1jYm9yLXdl Yi10b2tlbi0xMy4gIFNlZSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1h Y2UtY2Jvci13ZWItdG9rZW4tMTMjYXBwZW5kaXgtQyBmb3IgYSBzdW1tYXJ5IG9mIHRoZSBjaGFu Z2VzIG1hZGUuDQoNClRoYW5rcyBhZ2FpbiBmb3IgeW91ciB1c2VmdWwgcmV2aWV3IQ0KDQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0g TWlrZQ0KDQpGcm9tOiBEYW4gUm9tYXNjYW51IDxkcm9tYXNjYUBnbWFpbC5jb20+DQpTZW50OiBU dWVzZGF5LCBGZWJydWFyeSAyNywgMjAxOCAxMToyNCBQTQ0KVG86IE1pa2UgSm9uZXMgPE1pY2hh ZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4NCkNjOiBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxh cnMuY29tPjsgZ2VuLWFydCA8Z2VuLWFydEBpZXRmLm9yZz47IGFjZUBpZXRmLm9yZzsgaWV0ZiA8 aWV0ZkBpZXRmLm9yZz47IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PjsgZHJhZnQtaWV0 Zi1hY2UtY2Jvci13ZWItdG9rZW4uYWxsQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0FjZV0gR2Vu YXJ0IHRlbGVjaGF0IHJldmlldyBvZiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMg0K DQpIaSBNaWtlLA0KVGhlIGVkaXRzIHRoYXQgeW91IHByb3Bvc2UgaW4gIzEgYW5kICMyIGFyZSBn b29kIElNTyBhbmQgdGhleSB3b3VsZCBpbXByb3ZlIHRoZSBjbGFyaXR5IG9mIHRoZSBkb2N1bWVu dC4NCkNvbmNlcm5pbmcgIzMgLSBhbGwgdGhlICdydW5uaW5nIGNvZGUnIGV4YW1wbGVzIHRoYXQg eW91IHByb3ZpZGVkIGFyZSBhbGwgZm9yIG9uZSB0eXBlIG9mIHBvbGljeSBvbmx5IC0gU3BlY2lm aWNhdGlvbiBSZXF1aXJlZC4gVGhlIGNhc2UgaGVyZSBzZWVtcyBhIGxpdHRsZSBtb3JlIGNvbXBs ZXgsIGFzIHRoZSByZXZpZXcgYW5kIHJlcXVpcmVkIGFkdmljZSByZWZlciB0byBtdWx0aXBsZSBw b2xpY2llcy4gVGhhbmtzIHRvIHRoZSBkaXNjdXNzaW9uIGFuZCBpbmZvcm1hdGlvbiBwcm92aWRl ZCBieSB5b3UgYW5kIEppbSwgSSBiZWxpZXZlIHRoYXQgSSBiZXR0ZXIgdW5kZXJzdGFuZCBub3cg aG93IHRoaXMgd29ya3MsIGFuZCBJIGRlZmVyIHRvIHRoZSBHZW5lcmFsIEFyZWEgYW5kIFNlY3Vy aXR5IEFEIHRoZSBkZWNpc2lvbiB3aGV0aGVyIHRoZSB0ZXh0IGlzIHN1ZmZpY2llbnRseSBjbGVh ci4NClRoYW5rcyBmb3IgYWRkcmVzc2luZyBteSBjb21tZW50cy4NClJlZ2FyZHMsDQpEYW4NCg0K T24gV2VkLCBGZWIgMjgsIDIwMTggYXQgMTI6NTIgQU0sIE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9u ZXNAbWljcm9zb2Z0LmNvbTxtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4gd3Jv dGU6DQpSZXBsaWVzIGlubGluZeKApg0KDQpGcm9tOiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3Jn PG1haWx0bzphY2UtYm91bmNlc0BpZXRmLm9yZz4+IE9uIEJlaGFsZiBPZiBEYW4gUm9tYXNjYW51 DQpTZW50OiBUdWVzZGF5LCBGZWJydWFyeSAyNywgMjAxOCAyOjIzIFBNDQpUbzogSmltIFNjaGFh ZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+ DQpDYzogZ2VuLWFydCA8Z2VuLWFydEBpZXRmLm9yZzxtYWlsdG86Z2VuLWFydEBpZXRmLm9yZz4+ OyBhY2VAaWV0Zi5vcmc8bWFpbHRvOmFjZUBpZXRmLm9yZz47IGlldGYgPGlldGZAaWV0Zi5vcmc8 bWFpbHRvOmlldGZAaWV0Zi5vcmc+PjsgQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU8bWFp bHRvOmthZHVrQG1pdC5lZHU+PjsgZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4uYWxsQGll dGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0Zi5vcmc+ DQpTdWJqZWN0OiBSZTogW0FjZV0gR2VuYXJ0IHRlbGVjaGF0IHJldmlldyBvZiBkcmFmdC1pZXRm LWFjZS1jYm9yLXdlYi10b2tlbi0xMg0KDQpIaSBKaW0sDQoNClRoZXJlIGFyZSBzdGlsbCBhIGZl dyBwcm9ibGVtczoNCg0KMS4gVGhlIHBvbGljaWVzIGFuZCBtYXBwaW5nIHRvIHRoZSB2YWx1ZXMg cmFuZ2VzIGFyZSBoaWRkZW4gaW4gdGhlIENsYWltIEtleSBmaWVsZCBpbiB0aGUgdGVtcGxhdGUg KHRoZSBjb21tZW50IGFsc28gbWFkZSBieSBLYXRobGVlbikNCg0KUGVyIG15IGVhcmxpZXIgbm90 ZSwgSSB3aWxsIGJlIG1ha2luZyB0aGlzIGxhbmd1YWdlIGNsZWFyZXIgd2hlbiB0aGUgbmV4dCBy ZXZpc2lvbiBpcyBwdWJsaXNoZWQuDQoNCjIuIEF0IGxlYXN0IG9uZSBpbmNvcnJlY3QgcG9saWN5 IG5hbWUgaXMgdXNlZDogU3RhbmRhcmRzIFRyYWNrIFJlcXVpcmVkIC0gZG8geW91IG1lYW4gU3Rh bmRhcmRzIEFjdGlvbiAoPykNCg0KVGhhbmtzIOKAkyBJ4oCZbGwgdXBkYXRlIHRoZSB0ZXJtaW5v bG9neSB3aGVuIHRoZSBuZXh0IGRyYWZ0IGlzIHB1Ymxpc2hlZC4NCg0KMy4gWW91IGRlc2NyaWJl IGEgcHJvY2VzcyB0aGF0IGludm9sdmVzIGEgbWFpbCBsaXN0IChjd3QtcmVnLXJldmlld0BpZXRm Lm9yZzxtYWlsdG86Y3d0LXJlZy1yZXZpZXdAaWV0Zi5vcmc+KSBhbmQgRXhwZXJ0cyBSZXZpZXcu IFRoaXMgZGVzY3JpcHRpb24gaXMgbm90IGNsZWFyLiBVc3VhbGx5IElBTkEgYXBwcm9hY2hlcyBv bmUgREUgZm9yIGFkdmljZSBhbmQgZXhwZWN0cyB0aGUgYWR2aWNlIGZyb20gdGhlIHNhbWUgREUg aW4gYSByZWFzb25hYmxlIHBlcmlvZCBvZiB0aW1lLiBJZiBJIHVuZGVyc3RhbmQgY29ycmVjdGx5 IHRoZSBwcm9jZXNzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDkuMSBvbmUgb3IgbW9yZSBERXMgbWFr ZSBhIHJlY29tbWVuZGF0aW9uIGFuZCBydW4gaXQgd2l0aCB0aGUgbWFpbCBsaXN0LiBXaG8gZXN0 YWJsaXNoZXMgdGhlIGNvbnNlbnN1cyBvbiB0aGUgbWFpbCBsaXN0PyBBc3N1bWluZyB0aGUgbWFp bCBsaXN0IGRpc2FncmVlcyB3aXRoIHRoZSBERSByZWNvbW1lbmRhdGlvbiwgd2hvIGRlY2lkZXM/ DQoNClRoaXMgaXMgdGhlIHByb2Nlc3MgdXNlZCBmb3IgdGhlIC53ZWxsLWtub3duIFVSSSBzcGVj LCB0aGUgSlNPTiBXZWIgVG9rZW4gKEpXVCkgc3BlYywgdGhlIEpPU0Ugc3BlY3MsIG1hbnkgT0F1 dGggc3BlY3MgYW5kIGl0IHdvcmtzIHdlbGwuICBJdCBhbGxvd3MgaW50ZXJlc3RlZCBwYXJ0aWVz IHRvIHNlZSBhbmQgY29tbWVudCBvbiByZWdpc3RyYXRpb24gcmVxdWVzdHMuICBUaGUgRGVzaWdu YXRlZCBFeHBlcnRzIGFyZSBzdGlsbCB0aGUgb25lcyB0byBkZWNpZGUuICBTZWUgdGhlc2UgcmVm ZXJlbmNlcyBmb3Igc29tZSB1c2VzIG9mIHRoaXMga2luZCBvZiBwdWJsaWNseS12aXNpYmxlIHJl Z2lzdHJhdGlvbiBwcm9jZWR1cmU6DQoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM1 Nzg1I3NlY3Rpb24tNS4xICh1c2luZyB3ZWxsa25vd24tdXJpLXJldmlld0BpZXRmLm9yZzxtYWls dG86d2VsbGtub3duLXVyaS1yZXZpZXdAaWV0Zi5vcmc+KQ0KaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL3JmYzY3NDkjc2VjdGlvbi0xMS4xICh1c2luZyBvYXV0aC1leHQtcmV2aWV3QGlldGYu b3JnPG1haWx0bzpvYXV0aC1leHQtcmV2aWV3QGlldGYub3JnPikNCmh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9yZmM3NTE1I3NlY3Rpb24tOSAodXNpbmcgam9zZS1yZWctcmV2aWV3QGlldGYu b3JnPG1haWx0bzpqb3NlLXJlZy1yZXZpZXdAaWV0Zi5vcmc+KQ0KaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL3JmYzc4MDAjc2VjdGlvbi02ICh1c2luZyBqb3NlLXJlZy1yZXZpZXdAaWV0Zi5v cmc8bWFpbHRvOmpvc2UtcmVnLXJldmlld0BpZXRmLm9yZz4pDQoNCkkgY2FuIGZpbmQgbW9yZSBl eGFtcGxlcyBvZiB0aGUgdXNlIG9mIHRoaXMgcHVibGljbHktdmlzaWJsZSByZWdpc3RyYXRpb24g cHJvY2VkdXJlIGlmIHlvdSBsaWtlLg0KDQpSZWdhcmRzLA0KRGFuDQoNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGFua3MgZm9yIHRo ZSBjYXJlZnVsIHJldmlldywgRGFuLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KT24gVHVlLCBGZWIgMjcsIDIwMTgg YXQgNzo1MyBQTSwgSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0 ZkBhdWd1c3RjZWxsYXJzLmNvbT4+IHdyb3RlOg0KSW50ZWdlciB2YWx1ZXMgYmV0d2VlbiAtMjU2 IGFuZCAyNTUgYW5kIHN0cmluZ3Mgb2YgbGVuZ3RoIDEgYXJlIGRlc2lnbmF0ZWQgYXMgU3RhbmRh cmRzIFRyYWNrIFJlcXVpcmVkLg0KDQpJbnRlZ2VyIHZhbHVlcyBmcm9tIC02NTUzNiB0byA2NTUz NSBhbmQgc3RyaW5ncyBvZiBsZW5ndGggMiBhcmUgZGVzaWduYXRlZCBhcyBTcGVjaWZpY2F0aW9u IFJlcXVpcmVkLg0KDQpJbnRlZ2VyIHZhbHVlcyBvZiBncmVhdGVyIHRoYW4gNjU1MzUgYW5kIHN0 cmluZ3Mgb2YgbGVuZ3RoIGdyZWF0ZXIgdGhhbiAyIGFyZSBkZXNpZ25hdGVkIGFzIEV4cGVydCBS ZXZpZXcuDQoNCkludGVnZXIgdmFsdWVzIGxlc3MgdGhhbiAtNjU1MzYgYXJlIG1hcmtlZCBhcyBQ cml2YXRlIFVzZS4NCg0KU28gdGhhdCBzYXlzIHdoYXQgSUFOQSBwb2xpY3kgaXMgdG8gYmUgdXNl ZCBmb3IgZWFjaCBvZiB0aGUgZGlmZmVyZW50IGl0ZW1zLiAgVGhpcyBkZWZpbmVzIHRoZSBwb2xp Y2llcyBhbmQgdGhlIHJhbmdlcyBmb3IgdGhvc2UgcG9saWNpZXMuDQoNClRoZXJlIGlzIG5vdCBh bnl0aGluZyB0aGF0IGlzIG1ha2luZyBhIGRpc3RpbmN0aW9uIG9uIHdoYXQgdGhlIGNyaXRlcmlh IHRvIGJlIHVzZWQgYnkgdGhlIERFIGluIHRoZSBkb2N1bWVudCB3aGljaCBpcyBzZXBhcmF0ZSwg YnV0IEkgZG9u4oCZdCB0aGluayB0aGF0IGlzIG5lZWRlZC4gIFRoaXMgaXMgd2h5IHRoZXkgYXJl IERFcy4NCg0KSSBzdGlsbCBkb27igJl0IHNlZSB3aGF0IHlvdSB0aGluayBpcyBtaXNzaW5nLg0K DQpKaW0NCg0KDQpGcm9tOiBEYW4gUm9tYXNjYW51IFttYWlsdG86ZHJvbWFzY2FAZ21haWwuY29t PG1haWx0bzpkcm9tYXNjYUBnbWFpbC5jb20+XQ0KU2VudDogVHVlc2RheSwgRmVicnVhcnkgMjcs IDIwMTggMjowMCBBTQ0KVG86IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PG1haWx0bzpr YWR1a0BtaXQuZWR1Pj4NCkNjOiBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1h aWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tPj47IGdlbi1hcnQgPGdlbi1hcnRAaWV0Zi5vcmc8 bWFpbHRvOmdlbi1hcnRAaWV0Zi5vcmc+PjsgZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4u YWxsQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0 Zi5vcmc+OyBpZXRmIDxpZXRmQGlldGYub3JnPG1haWx0bzppZXRmQGlldGYub3JnPj47IGFjZUBp ZXRmLm9yZzxtYWlsdG86YWNlQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtBY2VdIEdlbmFydCB0 ZWxlY2hhdCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4tMTINCg0KSGks DQpTZWUgYWxzbyBteSBvdGhlciBub3Rlcy4NCkkgYmVsaWV2ZSB0aGF0IHdoYXQgdGhlIGRvY3Vt ZW50IHRyaWVzIHRvIHNheSBpczoNClJlZ2lzdGVyIFIgaXMgZGl2aWRlZCBpbnRvIGZvdXIgZGlm ZmVyZW50IHJhbmdlcyBSMSwgUjIsIFIzLCBSNCAoZGVmaW5pbmcgdGhlIHZhbHVlIGxpbWl0cyBt YXkgYmUgdXNlZnVsKQ0KVmFsdWVzIGluIHJhbmdlIFIxIGFyZSBhbGxvY2F0ZWQgYWNjb3JkaW5n IHRvIHBvbGljeSBQMSBpbiB0aGUgY2FzZSB0aGF0IC4uLg0KVmFsdWVzIGluIHJhbmdlIFIyIGFy ZSBhbGxvY2F0ZWQgYWNjb3JkaW5nIHRvIHBvbGljeSBQMiBpbiB0aGUgY2FzZSB0aGF0IC4uLg0K VmFsdWVzIGluIHJhbmdlIFIzIGFyZSBhbGxvY2F0ZWQgYWNjb3JkaW5nIHRvIHBvbGljeSBQMyBp biB0aGUgY2FzZSB0aGF0IC4uLg0KVmFsdWVzIGluIHJhbmdlIFI0IGFyZSBhbGxvY2F0ZWQgYWNj b3JkaW5nIHRvIHBvbGljeSBQNCBpbiB0aGUgY2FzZSB0aGF0IC4uLg0KQnV0IGl0IGRvZXNuJ3Qg c2F5IGl0LiBNZW50aW9uaW5nIGZvdXIgY29uY3VycmVudCBwb2xpY2llcyBmb3IgdGhlIHNhbWUg cmVnaXN0cnkgd2l0aG91dCBzZXBhcmF0aW9uIG9mIHZhbHVlcyByYW5nZSwgYW5kIHdpdGhvdXQg cHJvdmlkaW5nIGNsZWFyIGluc3RydWN0aW9ucyB3aGVuIGVhY2ggcG9saWN5IGlzIHJlY29tbWVu ZGVkIHRvIGJlIHVzZWQsIHNlZW1zIGNvbmZ1c2luZyB0byBtZSwgYW5kIG1heSBiZSBjb25mdXNp bmcgZm9yIHVzZXJzIG9mIHRoaXMgZG9jdW1lbnQgaW4gdGhlIGZ1dHVyZS4NClJlZ2FyZHMsDQpE YW4NCg0KT24gVHVlLCBGZWIgMjcsIDIwMTggYXQgNTo0MCBBTSwgQmVuamFtaW4gS2FkdWsgPGth ZHVrQG1pdC5lZHU8bWFpbHRvOmthZHVrQG1pdC5lZHU+PiB3cm90ZToNCk9uIE1vbiwgRmViIDI2 LCAyMDE4IGF0IDExOjE5OjA0UE0gKzAyMDAsIERhbiBSb21hc2NhbnUgd3JvdGU6DQo+IEhpIEpp bSwNCj4NCj4gVGhhbmsgeW91IGZvciB5b3VyIGFuc3dlciBhbmQgZm9yIGFkZHJlc3NpbmcgbXkg Y29tbWVudHMuDQo+DQo+IE9uIGl0ZW0gIzI6DQo+DQo+DQo+DQo+IE9uIE1vbiwgRmViIDI2LCAy MDE4IGF0IDEwOjEyIFBNLCBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0 bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tPj4gd3JvdGU6DQo+DQo+ID4NCj4gPg0KPiA+ID4gLS0t LS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+IEZyb206IERhbiBSb21hc2NhbnUgW21haWx0 bzpkcm9tYXNjYUBnbWFpbC5jb208bWFpbHRvOmRyb21hc2NhQGdtYWlsLmNvbT5dDQo+ID4gPg0K PiA+DQo+ID4gLi4uDQo+DQo+ID4gPg0KPiA+ID4gMi4gSSBhbSBhIGxpdHRsZSBjb25mdXNlZCBi eSB0aGUgZGVmaW5pdGlvbiBvZiBwb2xpY2llcyBpbiBTZWN0aW9uIDkuMToNCj4gPiA+DQo+ID4g PiAgICBEZXBlbmRpbmcgdXBvbiB0aGUgdmFsdWVzIGJlaW5nIHJlcXVlc3RlZCwgcmVnaXN0cmF0 aW9uIHJlcXVlc3RzIGFyZQ0KPiA+ID4gICAgZXZhbHVhdGVkIG9uIGEgU3RhbmRhcmRzIFRyYWNr IFJlcXVpcmVkLCBTcGVjaWZpY2F0aW9uIFJlcXVpcmVkLA0KPiA+ID4gICAgRXhwZXJ0IFJldmll dywgb3IgUHJpdmF0ZSBVc2UgYmFzaXMgW1JGQzgxMjZdIGFmdGVyIGEgdGhyZWUtd2Vlaw0KPiA+ ID4gICAgcmV2aWV3IHBlcmlvZCBvbiB0aGUgY3d0LXJlZy1yZXZpZXdAaWV0Zi5vcmc8bWFpbHRv OmN3dC1yZWctcmV2aWV3QGlldGYub3JnPiBtYWlsaW5nIGxpc3QsIG9uIHRoZQ0KPiA+ID4gICAg YWR2aWNlIG9mIG9uZSBvciBtb3JlIERlc2lnbmF0ZWQgRXhwZXJ0cy4NCj4gPiA+DQo+ID4gPiBI b3cgZG9lcyB0aGlzIHdvcms/IFRoZSByZXF1ZXN0IGlzIGZvcndhcmRlZCB0byB0aGUgZGVzaWdu YXRlZCBleHBlcnQsDQo+ID4gPiBoZS9zaGUgbWFrZSBhIHJlY29tbWVuZGF0aW9uIGNvbmNlcm5p bmcgdGhlIHBvbGljeSBvbiB0aGUgbWFpbCBsaXN0LCBhbmQNCj4gPiA+IGRlcGVuZGluZyBvbiB0 aGUgZmVlZGJhY2sgcmVjZWl2ZWQgYSBwb2xpY3kgaXMgc2VsZWN0ZWQ/IFdobyBlc3RhYmxpc2hl cw0KPiA+ID4gY29uc2Vuc3VzPw0KPiA+ID4NCj4gPiA+IEZyYW5rbHksIEkgd29uZGVyIGlmIHRo aXMgY2FuIHdvcmsgYXQgYWxsLiBBcmUgdGhlcmUgb3RoZXIgZXhhbXBsZXMgb2YNCj4gPiBmb3Vy DQo+ID4gPiBkaWZmZXJlbnQgcG9saWNpZXMgZm9yIHRoZSBzYW1lIHJlZ2lzdHJ5LCBhcHBsaWVk IG9uIGEgY2FzZS10by1jYXNlDQo+ID4gYmFzaXM/DQo+ID4NCj4gPiBUaGlzIGlzIHRoZSBzYW1l IGFwcHJvYWNoIHRoYXQgaXMgYmVpbmcgdXNlZCBmb3IgdGhlIENPU0UgcmVnaXN0cmllcy4gIEFz DQo+ID4gYW4gZXhhbXBsZSwgeW91IGNhbiBsb29rIGF0IGh0dHBzOi8vd3d3LmlhbmEub3JnLw0K PiA+IGFzc2lnbm1lbnRzL2Nvc2UvY29zZS54aHRtbCNhbGdvcml0aG1zLg0KPiA+DQo+ID4gUGFy dCBvZiB0aGUgaXNzdWUgYWJvdXQgdGhpcyBpcyB0aGF0IHRoZSBKT1NFL0pXVCByZWdpc3RyaWVz IGRvIGhhdmUgdGhlDQo+ID4gc2FtZSBkaWZmZXJlbnQgcG9saWNpZXMsIGJ1dCB0aGF0IGRpZmZl cmVuY2VzIGFyZSBoaWRkZW4gZnJvbSB0aGUgSUFOQQ0KPiA+IHJlZ2lzdHJ5LiAgU2luY2UgdGhl eSBhbGxvdyBmb3IgYSBVUkkgdG8gYmUgdXNlZCBhcyB0aGUgaWRlbnRpZmllciBvZiBhDQo+ID4g ZmllbGQsIG9ubHkgdGhlIHBsYWluIHRleHQgdmVyc2lvbnMgYXJlIHJlZ2lzdGVyZWQuICBUaHVz IEkgY2FuIHVzZSAiDQo+ID4gaHR0cDovL2F1Z3VzdGNlbGxhcnMuY29tL0pXVC9NeV9UYWciIGFz IGFuIGlkZW50aWZpZXIuICBTaW5jZSBmb3IgQ0JPUg0KPiA+IHRoZSBzZXQgb2YgdGFnIHZhbHVl cyBpcyBjbG9zZWQgYW5kIGRvZXMgbm90IGhhdmUgdGhpcyBlc2NhcGUgKG5vciB3b3VsZA0KPiA+ IG9uZSB3YW50IHRoZSBsZW5ndGggb2YgdGhlIHRhZykgaXQgaXMgbmVjZXNzYXJ5IHRvIGhhdmUg dGhpcyBicmVhayBkb3duIG9mDQo+ID4gdGFnIGZpZWxkcy4NCj4gPg0KPiA+DQo+ID4NCj4gPg0K PiBUaGlzIGRvZXMgbm90IHNlZW0gdG8gYmUgZXhhY3RseSB0aGUgc2FtZSBhcHByb2FjaC4gVGhl IENPU0UgUkZDIDgxNTINCj4gZGVmaW5lcyB0aGUgcmVnaXN0cnkgcG9saWN5IGluIGEgZGlmZmVy ZW50IG1hbm5lci4gVGhlcmUgaXMgb25seSBvbmUgcG9saWN5DQo+IHRoYXQgaXMgcHJvcG9zZWQg J0V4cGVydCBSZXZpZXcnIGFuZCB0aGFuIHRoZSBFeHBlcnQgUmV2aWV3IEluc3RydWN0aW9ucw0K PiBhcmUgdXNlZCB0byBkZWZpbmUgdGhlIGNhc2VzIHdoZW4gYSBTdGFuZGFyZHMgVHJhY2sgc3Bl Y2lmaWNhdGlvbiBpcw0KPiByZXF1aXJlZC4gTm8gc3VjaCB0ZXh0IGV4aXN0cyBpbiB0aGUgY3Vy cmVudCBJLUQuIFRoZXJlIGlzIG5vIHNlcGFyYXRpb24gb2YNCj4gdGhlIHZhbHVlcyBzcGFjZSBp biB0aGUgcmVnaXN0cnkgYWNjb3JkaW5nIHRvIHRoZSB0eXBlIG9mIGFzc2lnbm1lbnQgaGVyZSwN Cj4gYXMgIGluIFJGQyA4MTUyLg0KVGhlIHRlbXBsYXRlIGluIHNlY3Rpb24gOS4xLjEgaGFzIHRo ZSBkaWZmZXJlbnQgcG9saWNpZXMgZm9yIHRoZQ0KZGlmZmVyZW50IGludGVnZXIgcmFuZ2VzLCB1 bmRlciB0aGUgJ0NsYWltIEtleScgc2VjdGlvbi4gIEthdGhsZWVuDQooSUlSQykgYWxyZWFkeSBu b3RlZCB0aGF0IHRoaXMgc2hvdWxkIHByb2JhYmx5IGJlIHJlcGVhdGVkIGluIHRoZQ0KaW50cm9k dWN0b3J5IHBhcnQgb2Ygc2VjdGlvbiA5LjEgYXMgd2VsbCwgYW5kIHRoYXQgd2lsbCBiZSBkb25l DQpiZWZvcmUgdGhlIGRvY3VtZW50IGlzIHNlbnQgdG8gdGhlIElFU0cuDQoNCi1CZW5qYW1pbg0K DQoNCg0K --_000_SN6PR2101MB0943543E355D779E13E3B411F5D90SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDEx IDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9y bWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNv bm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJ bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5tLTEw Njc2NTIyMjg4ODI5NzI0OTNtMTg1ODIzNTkyMDQxNjM1MjkxMWhvZW56Yg0KCXttc28tc3R5bGUt bmFtZTptXy0xMDY3NjUyMjI4ODgyOTcyNDkzbTE4NTgyMzU5MjA0MTYzNTI5MTFob2VuemI7fQ0K c3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzAwMjA2MDt9DQouTXNvQ2hw RGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4w aW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjEN Cgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5EYW4sIHlvdeKA mWxsIGZpbmQgY2hhbmdlcyB0aGF0IGFkZHJlc3MgeW91ciByZXZpZXcgY29tbWVudHMgaW4NCjxh IGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWFjZS1jYm9yLXdl Yi10b2tlbi0xMyI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtYWNlLWNi b3Itd2ViLXRva2VuLTEzPC9hPi4mbmJzcDsgU2VlDQo8YSBocmVmPSJodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4tMTMjYXBwZW5kaXgtQyI+ DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9r ZW4tMTMjYXBwZW5kaXgtQzwvYT4gZm9yIGEgc3VtbWFyeSBvZiB0aGUgY2hhbmdlcyBtYWRlLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhhbmtzIGFnYWluIGZvciB5b3Vy IHVzZWZ1bCByZXZpZXchPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0g TWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gRGFuIFJvbWFzY2FudSAmbHQ7ZHJvbWFzY2FAZ21h aWwuY29tJmd0OyA8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgRmVicnVhcnkgMjcsIDIwMTgg MTE6MjQgUE08YnI+DQo8Yj5Ubzo8L2I+IE1pa2UgSm9uZXMgJmx0O01pY2hhZWwuSm9uZXNAbWlj cm9zb2Z0LmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IEppbSBTY2hhYWQgJmx0O2lldGZAYXVndXN0 Y2VsbGFycy5jb20mZ3Q7OyBnZW4tYXJ0ICZsdDtnZW4tYXJ0QGlldGYub3JnJmd0OzsgYWNlQGll dGYub3JnOyBpZXRmICZsdDtpZXRmQGlldGYub3JnJmd0OzsgQmVuamFtaW4gS2FkdWsgJmx0O2th ZHVrQG1pdC5lZHUmZ3Q7OyBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0Zi5v cmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtBY2VdIEdlbmFydCB0ZWxlY2hhdCByZXZpZXcg b2YgZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4tMTI8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0Ij5IaSBNaWtlLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPlRoZSBlZGl0cyB0aGF0 IHlvdSBwcm9wb3NlIGluICMxIGFuZCAjMiBhcmUgZ29vZCBJTU8gYW5kIHRoZXkgd291bGQgaW1w cm92ZSB0aGUgY2xhcml0eSBvZiB0aGUgZG9jdW1lbnQuDQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5Db25j ZXJuaW5nICMzIC0gYWxsIHRoZSAncnVubmluZyBjb2RlJyBleGFtcGxlcyB0aGF0IHlvdSBwcm92 aWRlZCBhcmUgYWxsIGZvciBvbmUgdHlwZSBvZiBwb2xpY3kgb25seSAtIFNwZWNpZmljYXRpb24g UmVxdWlyZWQuIFRoZSBjYXNlIGhlcmUgc2VlbXMgYSBsaXR0bGUgbW9yZSBjb21wbGV4LCBhcyB0 aGUgcmV2aWV3IGFuZCByZXF1aXJlZCBhZHZpY2UgcmVmZXINCiB0byBtdWx0aXBsZSBwb2xpY2ll cy4gVGhhbmtzIHRvIHRoZSBkaXNjdXNzaW9uIGFuZCBpbmZvcm1hdGlvbiBwcm92aWRlZCBieSB5 b3UgYW5kIEppbSwgSSBiZWxpZXZlIHRoYXQgSSBiZXR0ZXIgdW5kZXJzdGFuZCBub3cgaG93IHRo aXMgd29ya3MsIGFuZCBJIGRlZmVyIHRvIHRoZSBHZW5lcmFsIEFyZWEgYW5kIFNlY3VyaXR5IEFE IHRoZSBkZWNpc2lvbiB3aGV0aGVyIHRoZSB0ZXh0IGlzIHN1ZmZpY2llbnRseSBjbGVhci4NCjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWJvdHRvbToxMi4wcHQiPlRoYW5rcyBmb3IgYWRkcmVzc2luZyBteSBjb21tZW50cy4NCjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJv dHRvbToxMi4wcHQiPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+RGFuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBXZWQsIEZlYiAyOCwgMjAxOCBhdCAx Mjo1MiBBTSwgTWlrZSBKb25lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOk1pY2hhZWwuSm9uZXNAbWlj cm9zb2Z0LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTwv YT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2 LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+UmVwbGll cyBpbmxpbmXigKY8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPkZyb206PC9iPiBBY2UgJmx0OzxhIGhyZWY9Im1h aWx0bzphY2UtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmFjZS1ib3VuY2VzQGll dGYub3JnPC9hPiZndDsNCjxiPk9uIEJlaGFsZiBPZiA8L2I+RGFuIFJvbWFzY2FudTxicj4NCjxi PlNlbnQ6PC9iPiBUdWVzZGF5LCBGZWJydWFyeSAyNywgMjAxOCAyOjIzIFBNPGJyPg0KPGI+VG86 PC9iPiBKaW0gU2NoYWFkICZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNv bSIgdGFyZ2V0PSJfYmxhbmsiPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ozxicj4NCjxi PkNjOjwvYj4gZ2VuLWFydCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmdlbi1hcnRAaWV0Zi5vcmciIHRh cmdldD0iX2JsYW5rIj5nZW4tYXJ0QGlldGYub3JnPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86 YWNlQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+YWNlQGlldGYub3JnPC9hPjsgaWV0ZiAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmlldGZAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5pZXRmQGlldGYu b3JnPC9hPiZndDs7IEJlbmphbWluIEthZHVrICZsdDs8YSBocmVmPSJtYWlsdG86a2FkdWtAbWl0 LmVkdSIgdGFyZ2V0PSJfYmxhbmsiPmthZHVrQG1pdC5lZHU8L2E+Jmd0OzsNCjxhIGhyZWY9Im1h aWx0bzpkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0Zi5vcmciIHRhcmdldD0i X2JsYW5rIj5kcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0Zi5vcmc8L2E+PGJy Pg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbQWNlXSBHZW5hcnQgdGVsZWNoYXQgcmV2aWV3IG9mIGRy YWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLTEyPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkhpIEppbSw8YnI+DQo8YnI+DQpU aGVyZSBhcmUgc3RpbGwgYSBmZXcgcHJvYmxlbXM6IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjEuIFRoZSBwb2xp Y2llcyBhbmQgbWFwcGluZyB0byB0aGUgdmFsdWVzIHJhbmdlcyBhcmUgaGlkZGVuIGluIHRoZSBD bGFpbSBLZXkgZmllbGQgaW4gdGhlIHRlbXBsYXRlICh0aGUgY29tbWVudCBhbHNvIG1hZGUgYnkg S2F0aGxlZW4pPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5QZXIgbXkgZWFybGll ciBub3RlLCBJIHdpbGwgYmUgbWFraW5nIHRoaXMgbGFuZ3VhZ2UgY2xlYXJlciB3aGVuIHRoZSBu ZXh0IHJldmlzaW9uIGlzIHB1Ymxpc2hlZC4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4yLiBBdCBsZWFzdCBvbmUg aW5jb3JyZWN0IHBvbGljeSBuYW1lIGlzIHVzZWQ6IFN0YW5kYXJkcyBUcmFjayBSZXF1aXJlZCAt IGRvIHlvdSBtZWFuIFN0YW5kYXJkcyBBY3Rpb24gKD8pPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xv cjojMDAyMDYwIj5UaGFua3Mg4oCTIEnigJlsbCB1cGRhdGUgdGhlIHRlcm1pbm9sb2d5IHdoZW4g dGhlIG5leHQgZHJhZnQgaXMgcHVibGlzaGVkLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4zLiBZb3Ug ZGVzY3JpYmUgYSBwcm9jZXNzIHRoYXQgaW52b2x2ZXMgYSBtYWlsIGxpc3QgKDxhIGhyZWY9Im1h aWx0bzpjd3QtcmVnLXJldmlld0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmN3dC1yZWctcmV2 aWV3QGlldGYub3JnPC9hPikgYW5kIEV4cGVydHMgUmV2aWV3LiBUaGlzIGRlc2NyaXB0aW9uIGlz DQogbm90IGNsZWFyLiBVc3VhbGx5IElBTkEgYXBwcm9hY2hlcyBvbmUgREUgZm9yIGFkdmljZSBh bmQgZXhwZWN0cyB0aGUgYWR2aWNlIGZyb20gdGhlIHNhbWUgREUgaW4gYSByZWFzb25hYmxlIHBl cmlvZCBvZiB0aW1lLiBJZiBJIHVuZGVyc3RhbmQgY29ycmVjdGx5IHRoZSBwcm9jZXNzIGRlc2Ny aWJlZCBpbiBTZWN0aW9uIDkuMSBvbmUgb3IgbW9yZSBERXMgbWFrZSBhIHJlY29tbWVuZGF0aW9u IGFuZCBydW4gaXQgd2l0aCB0aGUgbWFpbCBsaXN0Lg0KIFdobyBlc3RhYmxpc2hlcyB0aGUgY29u c2Vuc3VzIG9uIHRoZSBtYWlsIGxpc3Q/IEFzc3VtaW5nIHRoZSBtYWlsIGxpc3QgZGlzYWdyZWVz IHdpdGggdGhlIERFIHJlY29tbWVuZGF0aW9uLCB3aG8gZGVjaWRlcz8NCjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+VGhpcyBpcyB0aGUgcHJvY2VzcyB1c2VkIGZvciB0aGUgLndl bGwta25vd24gVVJJIHNwZWMsIHRoZSBKU09OIFdlYiBUb2tlbiAoSldUKSBzcGVjLCB0aGUgSk9T RSBzcGVjcywgbWFueSBPQXV0aCBzcGVjcyBhbmQgaXQgd29ya3Mgd2VsbC4mbmJzcDsgSXQgYWxs b3dzDQogaW50ZXJlc3RlZCBwYXJ0aWVzIHRvIHNlZSBhbmQgY29tbWVudCBvbiByZWdpc3RyYXRp b24gcmVxdWVzdHMuJm5ic3A7IFRoZSBEZXNpZ25hdGVkIEV4cGVydHMgYXJlIHN0aWxsIHRoZSBv bmVzIHRvIGRlY2lkZS4mbmJzcDsgU2VlIHRoZXNlIHJlZmVyZW5jZXMgZm9yIHNvbWUgdXNlcyBv ZiB0aGlzIGtpbmQgb2YgcHVibGljbHktdmlzaWJsZSByZWdpc3RyYXRpb24gcHJvY2VkdXJlOjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxhIGhyZWY9Imh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM1Nzg1I3NlY3Rpb24tNS4xIiB0YXJnZXQ9Il9ibGFuayI+ aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzU3ODUjc2VjdGlvbi01LjE8L2E+ICh1c2lu Zw0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzO2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86d2VsbGtub3duLXVyaS1yZXZpZXdAaWV0 Zi5vcmciIHRhcmdldD0iX2JsYW5rIj53ZWxsa25vd24tdXJpLXJldmlld0BpZXRmLm9yZzwvYT48 L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPik8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48YSBo cmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjc0OSNzZWN0aW9uLTExLjEiIHRh cmdldD0iX2JsYW5rIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjc0OSNzZWN0aW9u LTExLjE8L2E+ICh1c2luZw0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86b2F1dGgtZXh0 LXJldmlld0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPm9hdXRoLWV4dC1yZXZpZXdAaWV0Zi5v cmc8L2E+PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4pPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2 MCI+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc1MTUjc2VjdGlvbi05 IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc1MTUjc2Vj dGlvbi05PC9hPiAodXNpbmcNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+PGEgaHJlZj0ibWFpbHRvOmpvc2UtcmVn LXJldmlld0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmpvc2UtcmVnLXJldmlld0BpZXRmLm9y ZzwvYT4pPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL3JmYzc4MDAjc2VjdGlvbi02IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL3JmYzc4MDAjc2VjdGlvbi02PC9hPiAodXNpbmcNCjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+PGEg aHJlZj0ibWFpbHRvOmpvc2UtcmVnLXJldmlld0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmpv c2UtcmVnLXJldmlld0BpZXRmLm9yZzwvYT4pPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29s b3I6IzAwMjA2MCI+SSBjYW4gZmluZCBtb3JlIGV4YW1wbGVzIG9mIHRoZSB1c2Ugb2YgdGhpcyBw dWJsaWNseS12aXNpYmxlIHJlZ2lzdHJhdGlvbiBwcm9jZWR1cmUgaWYgeW91IGxpa2UuPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29s b3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj5SZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5EYW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9y OiMwMDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBUaGFua3MgZm9yIHRoZSBjYXJlZnVsIHJldmlldywgRGFuLDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiMw MDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyAtLSBNaWtlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+T24gVHVlLCBGZWIgMjcsIDIwMTggYXQgNzo1 MyBQTSwgSmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5j b20iIHRhcmdldD0iX2JsYW5rIj5pZXRmQGF1Z3VzdGNlbGxhcnMuY29tPC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxl ZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1s ZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ SW50ZWdlciB2YWx1ZXMgYmV0d2VlbiAtMjU2IGFuZCAyNTUgYW5kIHN0cmluZ3Mgb2YgbGVuZ3Ro IDEgYXJlIGRlc2lnbmF0ZWQgYXMgU3RhbmRhcmRzIFRyYWNrIFJlcXVpcmVkLjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkludGVn ZXIgdmFsdWVzIGZyb20gLTY1NTM2IHRvIDY1NTM1IGFuZCBzdHJpbmdzIG9mIGxlbmd0aCAyIGFy ZSBkZXNpZ25hdGVkIGFzIFNwZWNpZmljYXRpb24gUmVxdWlyZWQuPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SW50ZWdlciB2YWx1 ZXMgb2YgZ3JlYXRlciB0aGFuIDY1NTM1IGFuZCBzdHJpbmdzIG9mIGxlbmd0aCBncmVhdGVyIHRo YW4gMiBhcmUgZGVzaWduYXRlZCBhcyBFeHBlcnQgUmV2aWV3LiZuYnNwOw0KPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SW50ZWdl ciB2YWx1ZXMgbGVzcyB0aGFuIC02NTUzNiBhcmUgbWFya2VkIGFzIFByaXZhdGUgVXNlLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PlNvIHRoYXQgc2F5cyB3aGF0IElBTkEgcG9saWN5IGlzIHRvIGJlIHVzZWQgZm9yIGVhY2ggb2Yg dGhlIGRpZmZlcmVudCBpdGVtcy4mbmJzcDsgVGhpcyBkZWZpbmVzIHRoZSBwb2xpY2llcyBhbmQg dGhlIHJhbmdlcyBmb3INCiB0aG9zZSBwb2xpY2llcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5UaGVyZSBpcyBub3QgYW55dGhp bmcgdGhhdCBpcyBtYWtpbmcgYSBkaXN0aW5jdGlvbiBvbiB3aGF0IHRoZSBjcml0ZXJpYSB0byBi ZSB1c2VkIGJ5IHRoZSBERSBpbiB0aGUgZG9jdW1lbnQgd2hpY2ggaXMgc2VwYXJhdGUsDQogYnV0 IEkgZG9u4oCZdCB0aGluayB0aGF0IGlzIG5lZWRlZC4mbmJzcDsgVGhpcyBpcyB3aHkgdGhleSBh cmUgREVzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkkgc3RpbGwgZG9u4oCZ dCBzZWUgd2hhdCB5b3UgdGhpbmsgaXMgbWlzc2luZy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPkppbTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3Bh ZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGlu Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+RnJvbTo8L2I+IERhbiBSb21hc2NhbnUgW21h aWx0bzo8YSBocmVmPSJtYWlsdG86ZHJvbWFzY2FAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+ ZHJvbWFzY2FAZ21haWwuY29tPC9hPl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBGZWJy dWFyeSAyNywgMjAxOCAyOjAwIEFNPGJyPg0KPGI+VG86PC9iPiBCZW5qYW1pbiBLYWR1ayAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmthZHVrQG1pdC5lZHUiIHRhcmdldD0iX2JsYW5rIj5rYWR1a0BtaXQu ZWR1PC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+IEppbSBTY2hhYWQgJmx0OzxhIGhyZWY9Im1haWx0 bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIiB0YXJnZXQ9Il9ibGFuayI+aWV0ZkBhdWd1c3RjZWxs YXJzLmNvbTwvYT4mZ3Q7OyBnZW4tYXJ0ICZsdDs8YSBocmVmPSJtYWlsdG86Z2VuLWFydEBpZXRm Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmdlbi1hcnRAaWV0Zi5vcmc8L2E+Jmd0OzsNCjxhIGhyZWY9 Im1haWx0bzpkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0Zi5vcmciIHRhcmdl dD0iX2JsYW5rIj5kcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi5hbGxAaWV0Zi5vcmc8L2E+ OyBpZXRmICZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsi PmlldGZAaWV0Zi5vcmc8L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzphY2VAaWV0Zi5vcmciIHRh cmdldD0iX2JsYW5rIj5hY2VAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBb QWNlXSBHZW5hcnQgdGVsZWNoYXQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRv a2VuLTEyPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPkhpLDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPlNlZSBhbHNvIG15IG90aGVyIG5vdGVzLg0KPG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+SSBiZWxpZXZlIHRoYXQg d2hhdCB0aGUgZG9jdW1lbnQgdHJpZXMgdG8gc2F5IGlzOg0KPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt YXJnaW4tYm90dG9tOjEyLjBwdCI+UmVnaXN0ZXIgUiBpcyBkaXZpZGVkIGludG8gZm91ciBkaWZm ZXJlbnQgcmFuZ2VzIFIxLCBSMiwgUjMsIFI0IChkZWZpbmluZyB0aGUgdmFsdWUgbGltaXRzIG1h eSBiZSB1c2VmdWwpPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+VmFs dWVzIGluIHJhbmdlIFIxIGFyZSBhbGxvY2F0ZWQgYWNjb3JkaW5nIHRvIHBvbGljeSBQMSBpbiB0 aGUgY2FzZSB0aGF0IC4uLjxicj4NClZhbHVlcyBpbiByYW5nZSBSMiBhcmUgYWxsb2NhdGVkIGFj Y29yZGluZyB0byBwb2xpY3kgUDIgaW4gdGhlIGNhc2UgdGhhdCAuLi48YnI+DQpWYWx1ZXMgaW4g cmFuZ2UgUjMgYXJlIGFsbG9jYXRlZCBhY2NvcmRpbmcgdG8gcG9saWN5IFAzIGluIHRoZSBjYXNl IHRoYXQgLi4uPGJyPg0KVmFsdWVzIGluIHJhbmdlIFI0IGFyZSBhbGxvY2F0ZWQgYWNjb3JkaW5n IHRvIHBvbGljeSBQNCBpbiB0aGUgY2FzZSB0aGF0IC4uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFy Z2luLWJvdHRvbToxMi4wcHQiPkJ1dCBpdCBkb2Vzbid0IHNheSBpdC4gTWVudGlvbmluZyBmb3Vy IGNvbmN1cnJlbnQgcG9saWNpZXMgZm9yIHRoZSBzYW1lIHJlZ2lzdHJ5IHdpdGhvdXQgc2VwYXJh dGlvbiBvZiB2YWx1ZXMgcmFuZ2UsIGFuZCB3aXRob3V0IHByb3ZpZGluZyBjbGVhciBpbnN0cnVj dGlvbnMgd2hlbiBlYWNoIHBvbGljeSBpcyByZWNvbW1lbmRlZA0KIHRvIGJlIHVzZWQsIHNlZW1z IGNvbmZ1c2luZyB0byBtZSwgYW5kIG1heSBiZSBjb25mdXNpbmcgZm9yIHVzZXJzIG9mIHRoaXMg ZG9jdW1lbnQgaW4gdGhlIGZ1dHVyZS4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRv bToxMi4wcHQiPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBw dCI+RGFuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ T24gVHVlLCBGZWIgMjcsIDIwMTggYXQgNTo0MCBBTSwgQmVuamFtaW4gS2FkdWsgJmx0OzxhIGhy ZWY9Im1haWx0bzprYWR1a0BtaXQuZWR1IiB0YXJnZXQ9Il9ibGFuayI+a2FkdWtAbWl0LmVkdTwv YT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2 LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+T24g TW9uLCBGZWIgMjYsIDIwMTggYXQgMTE6MTk6MDRQTSAmIzQzOzAyMDAsIERhbiBSb21hc2NhbnUg d3JvdGU6PGJyPg0KJmd0OyBIaSBKaW0sPGJyPg0KJmd0Ozxicj4NCiZndDsgVGhhbmsgeW91IGZv ciB5b3VyIGFuc3dlciBhbmQgZm9yIGFkZHJlc3NpbmcgbXkgY29tbWVudHMuPGJyPg0KJmd0Ozxi cj4NCiZndDsgT24gaXRlbSAjMjo8YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDs8YnI+DQom Z3Q7IE9uIE1vbiwgRmViIDI2LCAyMDE4IGF0IDEwOjEyIFBNLCBKaW0gU2NoYWFkICZsdDs8YSBo cmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmlldGZA YXVndXN0Y2VsbGFycy5jb208L2E+Jmd0OyB3cm90ZTo8YnI+DQomZ3Q7PGJyPg0KJmd0OyAmZ3Q7 PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7ICZndDsgLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS08YnI+DQomZ3Q7ICZndDsgJmd0OyBGcm9tOiBEYW4gUm9tYXNjYW51IFttYWlsdG86PGEg aHJlZj0ibWFpbHRvOmRyb21hc2NhQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmRyb21hc2Nh QGdtYWlsLmNvbTwvYT5dPGJyPg0KJmd0OyAmZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQom Z3Q7ICZndDsgLi4uPGJyPg0KJmd0Ozxicj4NCiZndDsgJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7 ICZndDsgMi4gSSBhbSBhIGxpdHRsZSBjb25mdXNlZCBieSB0aGUgZGVmaW5pdGlvbiBvZiBwb2xp Y2llcyBpbiBTZWN0aW9uIDkuMTo8YnI+DQomZ3Q7ICZndDsgJmd0Ozxicj4NCiZndDsgJmd0OyAm Z3Q7Jm5ic3A7ICZuYnNwOyBEZXBlbmRpbmcgdXBvbiB0aGUgdmFsdWVzIGJlaW5nIHJlcXVlc3Rl ZCwgcmVnaXN0cmF0aW9uIHJlcXVlc3RzIGFyZTxicj4NCiZndDsgJmd0OyAmZ3Q7Jm5ic3A7ICZu YnNwOyBldmFsdWF0ZWQgb24gYSBTdGFuZGFyZHMgVHJhY2sgUmVxdWlyZWQsIFNwZWNpZmljYXRp b24gUmVxdWlyZWQsPGJyPg0KJmd0OyAmZ3Q7ICZndDsmbmJzcDsgJm5ic3A7IEV4cGVydCBSZXZp ZXcsIG9yIFByaXZhdGUgVXNlIGJhc2lzIFtSRkM4MTI2XSBhZnRlciBhIHRocmVlLXdlZWs8YnI+ DQomZ3Q7ICZndDsgJmd0OyZuYnNwOyAmbmJzcDsgcmV2aWV3IHBlcmlvZCBvbiB0aGUgPGEgaHJl Zj0ibWFpbHRvOmN3dC1yZWctcmV2aWV3QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+DQpjd3Qt cmVnLXJldmlld0BpZXRmLm9yZzwvYT4gbWFpbGluZyBsaXN0LCBvbiB0aGU8YnI+DQomZ3Q7ICZn dDsgJmd0OyZuYnNwOyAmbmJzcDsgYWR2aWNlIG9mIG9uZSBvciBtb3JlIERlc2lnbmF0ZWQgRXhw ZXJ0cy48YnI+DQomZ3Q7ICZndDsgJmd0Ozxicj4NCiZndDsgJmd0OyAmZ3Q7IEhvdyBkb2VzIHRo aXMgd29yaz8gVGhlIHJlcXVlc3QgaXMgZm9yd2FyZGVkIHRvIHRoZSBkZXNpZ25hdGVkIGV4cGVy dCw8YnI+DQomZ3Q7ICZndDsgJmd0OyBoZS9zaGUgbWFrZSBhIHJlY29tbWVuZGF0aW9uIGNvbmNl cm5pbmcgdGhlIHBvbGljeSBvbiB0aGUgbWFpbCBsaXN0LCBhbmQ8YnI+DQomZ3Q7ICZndDsgJmd0 OyBkZXBlbmRpbmcgb24gdGhlIGZlZWRiYWNrIHJlY2VpdmVkIGEgcG9saWN5IGlzIHNlbGVjdGVk PyBXaG8gZXN0YWJsaXNoZXM8YnI+DQomZ3Q7ICZndDsgJmd0OyBjb25zZW5zdXM/PGJyPg0KJmd0 OyAmZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgJmd0OyBGcmFua2x5LCBJIHdvbmRlciBpZiB0aGlz IGNhbiB3b3JrIGF0IGFsbC4gQXJlIHRoZXJlIG90aGVyIGV4YW1wbGVzIG9mPGJyPg0KJmd0OyAm Z3Q7IGZvdXI8YnI+DQomZ3Q7ICZndDsgJmd0OyBkaWZmZXJlbnQgcG9saWNpZXMgZm9yIHRoZSBz YW1lIHJlZ2lzdHJ5LCBhcHBsaWVkIG9uIGEgY2FzZS10by1jYXNlPGJyPg0KJmd0OyAmZ3Q7IGJh c2lzPzxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0OyBUaGlzIGlzIHRoZSBzYW1lIGFwcHJv YWNoIHRoYXQgaXMgYmVpbmcgdXNlZCBmb3IgdGhlIENPU0UgcmVnaXN0cmllcy4mbmJzcDsgQXM8 YnI+DQomZ3Q7ICZndDsgYW4gZXhhbXBsZSwgeW91IGNhbiBsb29rIGF0IDxhIGhyZWY9Imh0dHBz Oi8vd3d3LmlhbmEub3JnLyIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlhbmEub3JnLzwv YT48YnI+DQomZ3Q7ICZndDsgYXNzaWdubWVudHMvY29zZS9jb3NlLnhodG1sI2FsZ29yaXRobXMu PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7IFBhcnQgb2YgdGhlIGlzc3VlIGFib3V0IHRo aXMgaXMgdGhhdCB0aGUgSk9TRS9KV1QgcmVnaXN0cmllcyBkbyBoYXZlIHRoZTxicj4NCiZndDsg Jmd0OyBzYW1lIGRpZmZlcmVudCBwb2xpY2llcywgYnV0IHRoYXQgZGlmZmVyZW5jZXMgYXJlIGhp ZGRlbiBmcm9tIHRoZSBJQU5BPGJyPg0KJmd0OyAmZ3Q7IHJlZ2lzdHJ5LiZuYnNwOyBTaW5jZSB0 aGV5IGFsbG93IGZvciBhIFVSSSB0byBiZSB1c2VkIGFzIHRoZSBpZGVudGlmaWVyIG9mIGE8YnI+ DQomZ3Q7ICZndDsgZmllbGQsIG9ubHkgdGhlIHBsYWluIHRleHQgdmVyc2lvbnMgYXJlIHJlZ2lz dGVyZWQuJm5ic3A7IFRodXMgSSBjYW4gdXNlICZxdW90Ozxicj4NCiZndDsgJmd0OyA8YSBocmVm PSJodHRwOi8vYXVndXN0Y2VsbGFycy5jb20vSldUL015X1RhZyIgdGFyZ2V0PSJfYmxhbmsiPmh0 dHA6Ly9hdWd1c3RjZWxsYXJzLmNvbS9KV1QvTXlfVGFnPC9hPiZxdW90OyBhcyBhbiBpZGVudGlm aWVyLiZuYnNwOyBTaW5jZSBmb3IgQ0JPUjxicj4NCiZndDsgJmd0OyB0aGUgc2V0IG9mIHRhZyB2 YWx1ZXMgaXMgY2xvc2VkIGFuZCBkb2VzIG5vdCBoYXZlIHRoaXMgZXNjYXBlIChub3Igd291bGQ8 YnI+DQomZ3Q7ICZndDsgb25lIHdhbnQgdGhlIGxlbmd0aCBvZiB0aGUgdGFnKSBpdCBpcyBuZWNl c3NhcnkgdG8gaGF2ZSB0aGlzIGJyZWFrIGRvd24gb2Y8YnI+DQomZ3Q7ICZndDsgdGFnIGZpZWxk cy48YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7 ICZndDs8YnI+DQomZ3Q7IFRoaXMgZG9lcyBub3Qgc2VlbSB0byBiZSBleGFjdGx5IHRoZSBzYW1l IGFwcHJvYWNoLiBUaGUgQ09TRSBSRkMgODE1Mjxicj4NCiZndDsgZGVmaW5lcyB0aGUgcmVnaXN0 cnkgcG9saWN5IGluIGEgZGlmZmVyZW50IG1hbm5lci4gVGhlcmUgaXMgb25seSBvbmUgcG9saWN5 PGJyPg0KJmd0OyB0aGF0IGlzIHByb3Bvc2VkICdFeHBlcnQgUmV2aWV3JyBhbmQgdGhhbiB0aGUg RXhwZXJ0IFJldmlldyBJbnN0cnVjdGlvbnM8YnI+DQomZ3Q7IGFyZSB1c2VkIHRvIGRlZmluZSB0 aGUgY2FzZXMgd2hlbiBhIFN0YW5kYXJkcyBUcmFjayBzcGVjaWZpY2F0aW9uIGlzPGJyPg0KJmd0 OyByZXF1aXJlZC4gTm8gc3VjaCB0ZXh0IGV4aXN0cyBpbiB0aGUgY3VycmVudCBJLUQuIFRoZXJl IGlzIG5vIHNlcGFyYXRpb24gb2Y8YnI+DQomZ3Q7IHRoZSB2YWx1ZXMgc3BhY2UgaW4gdGhlIHJl Z2lzdHJ5IGFjY29yZGluZyB0byB0aGUgdHlwZSBvZiBhc3NpZ25tZW50IGhlcmUsPGJyPg0KJmd0 OyBhcyZuYnNwOyBpbiBSRkMgODE1Mi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPlRoZSB0ZW1wbGF0ZSBpbiBzZWN0aW9uIDkuMS4xIGhhcyB0 aGUgZGlmZmVyZW50IHBvbGljaWVzIGZvciB0aGU8YnI+DQpkaWZmZXJlbnQgaW50ZWdlciByYW5n ZXMsIHVuZGVyIHRoZSAnQ2xhaW0gS2V5JyBzZWN0aW9uLiZuYnNwOyBLYXRobGVlbjxicj4NCihJ SVJDKSBhbHJlYWR5IG5vdGVkIHRoYXQgdGhpcyBzaG91bGQgcHJvYmFibHkgYmUgcmVwZWF0ZWQg aW4gdGhlPGJyPg0KaW50cm9kdWN0b3J5IHBhcnQgb2Ygc2VjdGlvbiA5LjEgYXMgd2VsbCwgYW5k IHRoYXQgd2lsbCBiZSBkb25lPGJyPg0KYmVmb3JlIHRoZSBkb2N1bWVudCBpcyBzZW50IHRvIHRo ZSBJRVNHLjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojODg4ODg4Ij48YnI+DQo8c3BhbiBjbGFz cz0ibS0xMDY3NjUyMjI4ODgyOTcyNDkzbTE4NTgyMzU5MjA0MTYzNTI5MTFob2VuemIiPi1CZW5q YW1pbjwvc3Bhbj48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_SN6PR2101MB0943543E355D779E13E3B411F5D90SN6PR2101MB0943_-- From nobody Mon Mar 5 16:54:22 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CE6B12D7F4; Mon, 5 Mar 2018 16:54:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6UP24jRV4-hA; Mon, 5 Mar 2018 16:54:13 -0800 (PST) Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0123.outbound.protection.outlook.com [104.47.42.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09AB01241F5; Mon, 5 Mar 2018 16:54:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VP4e5VUeo7Q9FYWDtP2+NI4x8UGuionNFHgdCy5WJrw=; b=T1+AGbAOdiK5HOn9HhYKZjf3gyfS4fL7BZxC+q/DBhtFxgx3ahpArAPlrpBtQ1hlJ6QvKa1+8rC13cByuCr+av/F8ur1VlUKMc8iuMjMHEdXerFLcu3BHS5OsgZqSxERLz+54dutqyP4U05IRR8NIdaKsu2G7Vx226viQ3ANrGg= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1040.namprd21.prod.outlook.com (52.132.115.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.588.1; Tue, 6 Mar 2018 00:54:11 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0588.001; Tue, 6 Mar 2018 00:54:11 +0000 From: Mike Jones To: Carlos Martinez , "ops-dir@ietf.org" CC: "ace@ietf.org" , "ietf@ietf.org" , "draft-ietf-ace-cbor-web-token.all@ietf.org" Thread-Topic: Opsdir telechat review of draft-ietf-ace-cbor-web-token-12 Thread-Index: AQHTsmHhyUkyRdCVQ0aRkl2mRjzlXKPCZh3Q Date: Tue, 6 Mar 2018 00:54:11 +0000 Message-ID: References: <152002114182.15791.10844946218841630354@ietfa.amsl.com> In-Reply-To: <152002114182.15791.10844946218841630354@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-03-06T00:54:09.6122449Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:a::562] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1040; 7:+DkUgBv8Fqbvn1Y06kpnE++IVnopI32HL+udRJLcKRJ8GSE9+x1a2xl9mOZtWLLCT/J8/h1NS6IFjiR+cY+fszCcstDsRxJPU+WgHHOJ610BrDVhYz8Gjo2elV6vXaGLCH+DX5QwM5sqA3/vS2Y3z0SVR/r1eKLmLAK7i8P5/2JJ8Yj2QB+Sj0qtahMxkGEj5BAUPyzJH1wGQ5WZlG4iVZGGs5v8mVozYG4tc6GLTB/tc3vSJPLnwtk4YS1IPDEJ; 20:94KROH69CUtulHuZf+bpDs10z/UxyljV3+E4MZRTGZWPBLf/8tJs3iLAJQYEsGqUmueBmmi7qBxT0oiWv8kvrU4R8eACyXO/P+amO0SO0MH/cL7GLkgUGK27EBurPS7D8XhU2J21oPtzNxwmmVDOKZrpJVVwgcGLQtZkRGlXozY= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 71447d40-bbf9-4b9c-0498-08d582fcc664 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:SN6PR2101MB1040; x-ms-traffictypediagnostic: SN6PR2101MB1040: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(85827821059158); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231220)(944501244)(52105095)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041288)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:SN6PR2101MB1040; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1040; x-forefront-prvs: 06036BD506 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(39860400002)(39380400002)(366004)(346002)(376002)(189003)(13464003)(199004)(478600001)(22452003)(53546011)(6506007)(186003)(102836004)(97736004)(8990500004)(10090500001)(5250100002)(110136005)(316002)(2501003)(72206003)(3660700001)(14454004)(966005)(68736007)(2906002)(3280700002)(8676002)(81156014)(81166006)(8936002)(99286004)(76176011)(7696005)(54906003)(46003)(305945005)(25786009)(2900100001)(7736002)(2950100002)(39060400002)(74316002)(229853002)(6116002)(5660300001)(86612001)(4326008)(86362001)(10290500003)(53936002)(9686003)(6306002)(33656002)(6246003)(6436002)(55016002)(105586002)(106356001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1040; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: JkTuAyZVQQ6Pz6qe1aBzLsotjfAErz5pSN4ThKs4jxiWFU/Nv1lCTF/8PROIjHR4N3n2UyyuJLQ8whEjIAtXTo6bYG5x/UPpB0XFhDixlAJKUYPiunMJTBQW34CtLFmHT2H3msjNkCGDlQsHgmaAvQ7yy0jglOBOcSiCNPUyOB3xHn6+Jdpl8kkIJUfprxc9ps4yw1ReJIjFeLzWUkqqKioojprqv8FgZ73l+2/ZaY+urawGhrEwYtp9AMw3QU1Qfbkie8Gfs+4s8GmnBoGul65KsLbdXpbFettfUzRpaBJMUbTHBEu2M7b1pfy7oGpPwVvoRHZfa/TS4nFa/9C6Gw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 71447d40-bbf9-4b9c-0498-08d582fcc664 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Mar 2018 00:54:11.3175 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1040 Archived-At: Subject: Re: [Ace] Opsdir telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 00:54:15 -0000 VGhhbmtzIGZvciB0YWtpbmcgdGhlIHRpbWUgdG8gcmV2aWV3IHRoZSBzcGVjaWZpY2F0aW9uLCBD YXJsb3MuICBZb3UgYXJlIG5vdyBsaXN0ZWQgaW4gdGhlIGFja25vd2xlZGdlbWVudHMgYXQgaHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLTEz I2FwcGVuZGl4LUIuDQoNCgkJCQktLSBNaWtlDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQpGcm9tOiBDYXJsb3MgTWFydGluZXogPGNhcmxvc20zMDExQGdtYWlsLmNvbT4gDQpTZW50OiBG cmlkYXksIE1hcmNoIDIsIDIwMTggMTI6MDYgUE0NClRvOiBvcHMtZGlyQGlldGYub3JnDQpDYzog YWNlQGlldGYub3JnOyBpZXRmQGlldGYub3JnOyBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tl bi5hbGxAaWV0Zi5vcmcNClN1YmplY3Q6IE9wc2RpciB0ZWxlY2hhdCByZXZpZXcgb2YgZHJhZnQt aWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4tMTINCg0KUmV2aWV3ZXI6IENhcmxvcyBNYXJ0aW5leg0K UmV2aWV3IHJlc3VsdDogUmVhZHkNCg0KUmV2aWV3ZXI6IENhcmxvcyBNYXJ0w61uZXoNClJldmll dyBSZXN1bHQ6IFJlYWR5DQoNCkkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFzIHBhcnQg b2YgdGhlIE9wZXJhdGlvbmFsIGRpcmVjdG9yYXRlJ3Mgb25nb2luZyBlZmZvcnQgdG8gcmV2aWV3 IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlIElFU0cuICBUaGVzZSBj b21tZW50cyB3ZXJlIHdyaXR0ZW4gd2l0aCB0aGUgaW50ZW50IG9mIGltcHJvdmluZyB0aGUgb3Bl cmF0aW9uYWwgYXNwZWN0cyBvZiB0aGUgSUVURiBkcmFmdHMuIENvbW1lbnRzIHRoYXQgYXJlIG5v dCBhZGRyZXNzZWQgaW4gbGFzdCBjYWxsIG1heSBiZSBpbmNsdWRlZCBpbiBBRCByZXZpZXdzIGR1 cmluZyB0aGUgSUVTRyByZXZpZXcuICBEb2N1bWVudCBlZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hv dWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNv bW1lbnRzLg0KDQpJIGZvdW5kIHRoZSBkb2N1bWVudCBlYXN5IHRvIHJlYWQuIFRoZSBzcGVjaWZp Y2F0aW9uIGlzIGNsZWFyIGFuZCBleGFtcGxlcyBpbiBBcHBlbmRpeCBDIGFyZSBvZiByZWFsIGhl bHAgZm9yIHVzIHdobyBhcmUgbm90IGV4cGVydHMgaW4gdGhlIGFyZWEuDQoNCkkgYmVsaWV2ZSB0 aGUgZG9jdW1lbnQgdG8gYmUgcmVhZHkuDQoNCg== From nobody Tue Mar 6 02:09:16 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54E561270A7 for ; Tue, 6 Mar 2018 02:09:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6n87JbDWEGQs for ; Tue, 6 Mar 2018 02:09:12 -0800 (PST) Received: from smtp.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.10]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 187AC126FDC for ; Tue, 6 Mar 2018 02:09:12 -0800 (PST) Received: from wangari.tzi.org (dynamic-218-t.informatik.uni-bremen.de [134.102.218.219]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.uni-bremen.de (Postfix) with ESMTPSA id 3170C2085A for ; Tue, 6 Mar 2018 11:09:10 +0100 (CET) From: Olaf Bergmann To: ace@ietf.org References: <152028103665.31682.15699397756422780971@ietfa.amsl.com> Date: Tue, 06 Mar 2018 11:09:10 +0100 In-Reply-To: <152028103665.31682.15699397756422780971@ietfa.amsl.com> (internet-drafts@ietf.org's message of "Mon, 05 Mar 2018 12:17:16 -0800") Message-ID: <87fu5djz21.fsf@tzi.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Ace] I-D Action: draft-ietf-ace-dtls-authorize-03.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 10:09:15 -0000 Hi all, we did a couple of small updates to the CoAP DTLS profile draft. In particular, the resolutions to the open issues that have been resolved at IETF-100 now have been transformed into text. As always, we need more reviews and interop testing. Gr=C3=BC=C3=9Fe Olaf internet-drafts@ietf.org writes: > A New Internet-Draft is available from the on-line Internet-Drafts direct= ories. > This draft is a work item of the Authentication and Authorization for Con= strained Environments WG of the IETF. > > Title : Datagram Transport Layer Security (DTLS) Profil= e for Authentication and Authorization for Constrained Environments (ACE) > Authors : Stefanie Gerdes > Olaf Bergmann > Carsten Bormann > G=C3=B6ran Selander > Ludwig Seitz > Filename : draft-ietf-ace-dtls-authorize-03.txt > Pages : 19 > Date : 2018-03-05 > > Abstract: > This specification defines a profile for delegating client > authentication and authorization in a constrained environment by > establishing a Datagram Transport Layer Security (DTLS) channel > between resource-constrained nodes. The protocol relies on DTLS for > communication security between entities in a constrained network > using either raw public keys or pre-shared keys. A resource- > constrained node can use this protocol to delegate management of > authorization information to a trusted host with less severe > limitations regarding processing power and memory. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-ace-dtls-authorize/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-ace-dtls-authorize-03 > https://datatracker.ietf.org/doc/html/draft-ietf-ace-dtls-authorize-03 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-ace-dtls-authorize-03 > > > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > From nobody Tue Mar 6 02:58:59 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 139AA127369 for ; Tue, 6 Mar 2018 02:58:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ej19GxqQR4E for ; Tue, 6 Mar 2018 02:58:56 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44172126CF6 for ; Tue, 6 Mar 2018 02:58:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1520333933; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=8S0rxh3rsmubpR4uiZiHxxSrbVIVi7DVdLPThO/qGBA=; b=bTD/Psnaop3rNDl930tHa2nIOGZQypUn9buwFhvx4WmXIr00eWB5lhHLX6pjTUV6 kRPFWChL02ZLN89LkBGb0f+YLyqBRmwRVFihNLlenxDZy/pouD/XcmYJ0qcEp0lC vDH+mybxC1HZ5oxpvgdkMo8AmXhvNvgAhD/rhc6ThWg=; X-AuditID: c1b4fb25-44ba69c000002d5f-c3-5a9e746df9fc Received: from ESESSHC020.ericsson.se (Unknown_Domain [153.88.183.78]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 0C.7A.11615.D647E9A5; Tue, 6 Mar 2018 11:58:53 +0100 (CET) Received: from ESESSMB107.ericsson.se ([169.254.7.88]) by ESESSHC020.ericsson.se ([153.88.183.78]) with mapi id 14.03.0352.000; Tue, 6 Mar 2018 11:58:53 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "ace@ietf.org" Thread-Topic: New Version Notification for draft-selander-ace-coap-est-oscore-00.txt Thread-Index: AQHTtNXDtZKlLkF+XESfAZHL3+gdzqPDCoyA Date: Tue, 6 Mar 2018 10:58:53 +0000 Message-ID: References: <152029081489.12731.11520024179108260218.idtracker@ietfa.amsl.com> In-Reply-To: <152029081489.12731.11520024179108260218.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.3.170325 x-originating-ip: [153.88.183.147] Content-Type: text/plain; charset="utf-8" Content-ID: <8870762B090F864690549CCA61C5D6C8@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpjkeLIzCtJLcpLzFFi42KZGbHdTze3ZF6UwdalFhbfv/UwOzB6LFny kymAMYrLJiU1J7MstUjfLoEr49e6m0wFh8QrOnunMzUwfhHrYuTkkBAwkfh2aSJbFyMXh5DA YUaJZ18+MkE4ixglFpyezwZSxSbgIvGg4RFQgoNDREBR4vqjRJCwsECoxNy+ucwgtohAmMTn C9+gSowkft+uAAmzCKhInPt7FGwKr4CFxITjKxhBbCEBP4lH/6+xgticAv4Slw79ZgGxGQXE JL6fWsMEYjMLiEvcejKfCeJOAYkle84zQ9iiEi8f/wPrFRXQk9jb084GslZCQEli2tY0EJNZ QFNi/S59iCnWEis7PkNNVJSY0v2QHeIaQYmTM5+wTGAUm4Vk2SyE7llIumch6Z6FpHsBI+sq RtHi1OKk3HQjY73Uoszk4uL8PL281JJNjMDYObjlt+oOxstvHA8xCnAwKvHwlifNixJiTSwr rsw9xCjBwawkwhuhDxTiTUmsrEotyo8vKs1JLT7EKM3BoiTOO0e4PUpIID2xJDU7NbUgtQgm y8TBKdXAONnTvSd5aqz72cblEdOV1k09G7CHv2xmzIK2yW4Kdn0nedR5qnMffBD6W3hpdp3C zHMvHn9weary8Una+hOunxrETk/MPnYnM0g7fdnD/QdneOzj1AgVd2h8qtjbaXWw7UW49pK1 5queyajK5HzZZLHg0K5LBumCpkyFi06If+t953KkZ2bTCiWW4oxEQy3mouJEAMg8H1mZAgAA Archived-At: Subject: [Ace] FW: New Version Notification for draft-selander-ace-coap-est-oscore-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 10:58:58 -0000 DQpBbGwsDQogDQpXZSBoYXZlIHJld3JpdHRlbiB0aGUgYXBwbGljYXRpb24gbGF5ZXIgc2VjdXJp dHkgYmFzZWQgY2VydGlmaWNhdGUNCmVucm9sbWVudCBwcm90b2NvbCBmb3IgY29uc3RyYWluZWQg ZGV2aWNlcywgcmVwbGFjaW5nDQpkcmFmdC1zZWxhbmRlci1hY2UtZWFscy4NCg0KVGhpcyBuZXcg ZHJhZnQsIGVudGl0bGVkICJQcm90ZWN0aW5nIEVTVCBwYXlsb2FkcyB3aXRoIE9TQ09SReKAnQ0K KEVTVC1PU0NPUkUpLCBmb2xsb3dzIGNsb3NlbHkgRVNUIChSRkMgNzAzMCkgaW4gZ2VuZXJhbCBh bmQgdGhlIG5ld2x5DQphZG9wdGVkIEVTVC1Db0FQcyAoZHJhZnQtaWV0Zi1hY2UtY29hcC1lc3Qp IGluIHBhcnRpY3VsYXIuIFRoZSBtYWluDQpkaWZmZXJlbmNlIGJldHdlZW4gRVNULU9TQ09SRSBh bmQgRVNULUNvQVBzIGlzIHRoYXQgdGhlIEVTVCBwYXlsb2FkcyBhcmUNCnByb3RlY3RlZCB3aXRo IE9TQ09SRSBpbnN0ZWFkIG9mIERUTFMgKHdoaWNoIHdhcyB0aGUgbWFpbiByZXZpZXcgY29tbWVu dA0KYXQgdGhlIGxhc3QgQUNFIGludGVyaW0gbWVldGluZykuDQoNCkNvbW1lbnRzIGFyZSBtb3N0 IHdlbGNvbWUuIElmIHRoZXJlIGlzIDUgbWludXRlcyBvbiB0aGUgQUNFIGFnZW5kYSBJIGNvdWxk DQpwcmVzZW50IGl0Lg0KDQpCZXN0IHJlZ2FyZHMNCkfDtnJhbg0KDQoNCk9uIDIwMTgtMDMtMDYg MDA6MDAsICJpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmciIDxpbnRlcm5ldC1kcmFmdHNAaWV0Zi5v cmc+DQp3cm90ZToNCg0KPg0KPkEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1zZWxhbmRlci1h Y2UtY29hcC1lc3Qtb3Njb3JlLTAwLnR4dA0KPmhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0 ZWQgYnkgR29lcmFuIFNlbGFuZGVyIGFuZCBwb3N0ZWQgdG8gdGhlDQo+SUVURiByZXBvc2l0b3J5 Lg0KPg0KPk5hbWU6CQlkcmFmdC1zZWxhbmRlci1hY2UtY29hcC1lc3Qtb3Njb3JlDQo+UmV2aXNp b246CTAwDQo+VGl0bGU6CQlQcm90ZWN0aW5nIEVTVCBwYXlsb2FkcyB3aXRoIE9TQ09SRQ0KPkRv Y3VtZW50IGRhdGU6CTIwMTgtMDMtMDUNCj5Hcm91cDoJCUluZGl2aWR1YWwgU3VibWlzc2lvbg0K PlBhZ2VzOgkJOQ0KPlVSTDogICAgICAgICAgICANCj5odHRwczovL3d3dy5pZXRmLm9yZy9pbnRl cm5ldC1kcmFmdHMvZHJhZnQtc2VsYW5kZXItYWNlLWNvYXAtZXN0LW9zY29yZS0wMA0KPi50eHQN Cj5TdGF0dXM6ICAgICAgICAgDQo+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtc2VsYW5kZXItYWNlLWNvYXAtZXN0LW9zY29yZS8NCj5IdG1saXplZDogICAgICAgDQo+aHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXNlbGFuZGVyLWFjZS1jb2FwLWVzdC1vc2Nv cmUtMDANCj5IdG1saXplZDogICAgICAgDQo+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9k b2MvaHRtbC9kcmFmdC1zZWxhbmRlci1hY2UtY29hcC1lc3Qtb3Njb3JlLTANCj4wDQo+DQo+DQo+ QWJzdHJhY3Q6DQo+ICAgVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgcHVibGljIGtleSBjZXJ0aWZp Y2F0ZSBlbnJvbGxtZW50IHByb2NlZHVyZXMNCj4gICBwcm90ZWN0ZWQgd2l0aCBhcHBsaWNhdGlv bi1sYXllciBzZWN1cml0eSBwcm90b2NvbHMgc3VpdGFibGUgZm9yDQo+ICAgSW50ZXJuZXQgb2Yg VGhpbmdzIChJb1QpIGRlcGxveW1lbnRzLiAgVGhlIHByb3RvY29scyBsZXZlcmFnZSBwYXlsb2Fk DQo+ICAgZm9ybWF0cyBkZWZpbmVkIGluIEVucm9sbWVudCBvdmVyIFNlY3VyZSBUcmFuc3BvcnQg KEVTVCkgYW5kIGV4aXN0aW5nDQo+ICAgSW9UIHN0YW5kYXJkcyBpbmNsdWRpbmcgdGhlIENvbnN0 cmFpbmVkIEFwcGxpY2F0aW9uIFByb3RvY29sIChDb0FQKSwNCj4gICBDb25jaXNlIEJpbmFyeSBP YmplY3QgUmVwcmVzZW50YXRpb24gKENCT1IpIGFuZCB0aGUgQ0JPUiBPYmplY3QNCj4gICBTaWdu aW5nIGFuZCBFbmNyeXB0aW9uIChDT1NFKSBmb3JtYXQuDQo+DQo+ICAgICAgICAgICAgICAgICAg DQo+ICAgICAgICANCj4NCj4NCj5QbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxl IG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZg0KPnN1Ym1pc3Npb24NCj51bnRpbCB0aGUgaHRt bGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0K Pg0KPlRoZSBJRVRGIFNlY3JldGFyaWF0DQo+DQoNCg== From nobody Wed Mar 7 09:53:44 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C41F612D96C; Wed, 7 Mar 2018 09:53:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.719 X-Spam-Level: X-Spam-Status: No, score=-2.719 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cooperw.in header.b=VVEUrm2m; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=cfqaotBE Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id acN8_3SQXNXL; Wed, 7 Mar 2018 09:53:36 -0800 (PST) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A9F5120721; Wed, 7 Mar 2018 09:53:35 -0800 (PST) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 9F0ED20BF5; Wed, 7 Mar 2018 12:53:33 -0500 (EST) Received: from frontend1 ([10.202.2.160]) by compute7.internal (MEProxy); Wed, 07 Mar 2018 12:53:33 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cooperw.in; h=cc :content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= fm2; bh=sJTK5bkIT5jx9ABJpajQYxem9wbklZvXzvAxYYxXkLo=; b=VVEUrm2m bzPrNmPfY+so/1JZqkYNRnlByyJzAN0NbZSYTJLIlIJkP7Mf6cSSXa8YYtwnlAuf 0QPqhBaehvvFxRFUgNpx01rFzQufSUnaNJ75DnGa+YBPAoKpC0Vai8s4I6S3yuSP bD696PQ8vcPjI9/jzYRn/wCbFoQHe7USADYuzjusfA3qLokSap/gzJE5mg8VOdXL v0xNex07u7TZDWThjgliBmA2cz7Lk+j7rxraz7xqCEMYnJznDcHsGT0dx9+ajtwt NJy31XDWSi7csXnoHZo2qUVtG9ndsoZao47PSbWfdNpwUolVVp2WeQ3sxxiNE+zA KWn70IRhiMgO2w== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; bh=sJTK5bkIT5jx9ABJpajQYxem9wbkl ZvXzvAxYYxXkLo=; b=cfqaotBEOm4nn3hOtSOAdSCyYUlu0j51NtrQE9m9Udx3H Rg7xi3dPONFNTZQWfJgZzRm4/XSseSHJ6yw4+IZq/LgWy5nstBJh+MQyktgwWSut bG7qJ6RFqYS8a8t71B7dyTNUMXOt48gItn+JNPnJctzMZEgW33l83WYJgDjp4Rl5 JdrBWWWLSQwQJle3xSApOIn07CPTO+GUQA9cX82kQvO+KeSa/LiJ6+GpIJyurD0X r0IUfYVrkLqBKnXM/XN7IJdyoAUJVMZPUpByrsL2u414C/FkkDcmxXgMjV74mYya S3PFtiehV9CLRVbZwT9U966+GkeG9eyVxB65526Hg== X-ME-Sender: Received: from [10.19.234.245] (unknown [128.107.241.170]) by mail.messagingengine.com (Postfix) with ESMTPA id E9B877E1F3; Wed, 7 Mar 2018 12:53:30 -0500 (EST) Content-Type: multipart/alternative; boundary="Apple-Mail=_20324883-8F60-47B0-A3B7-6349DB6DB260" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Alissa Cooper In-Reply-To: Date: Wed, 7 Mar 2018 12:53:28 -0500 Cc: "draft-ietf-ace-cbor-web-token.all@ietf.org" , Jim Schaad , Benjamin Kaduk , "ace@ietf.org" , gen-art Message-Id: <76AC61D3-5F41-44FB-8E05-367EE4B6CA1C@cooperw.in> References: <151967178760.21771.14005895812023525211@ietfa.amsl.com> <021201d3af3e$1f204cc0$5d60e640$@augustcellars.com> <20180227034009.GT50954@kduck.kaduk.org> <028701d3aff3$df7ef6f0$9e7ce4d0$@augustcellars.com> To: Mike Jones , Dan Romascanu X-Mailer: Apple Mail (2.3124) Archived-At: Subject: Re: [Ace] [Gen-art] Genart telechat review of draft-ietf-ace-cbor-web-token-12 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Mar 2018 17:53:40 -0000 --Apple-Mail=_20324883-8F60-47B0-A3B7-6349DB6DB260 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Dan, thanks for your review. Mike et al, thanks for your responses. I = appreciate the novelty of the registration process here but I think the = text as it currently stands is clear enough. I entered a No Objection = ballot. Alissa > On Mar 5, 2018, at 7:44 PM, Mike Jones = wrote: >=20 > Dan, you=E2=80=99ll find changes that address your review comments in = https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-13 = . See = https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-13#appendix-C = = for a summary of the changes made. > =20 > Thanks again for your useful review! > =20 > -- Mike > =20 > From: Dan Romascanu >=20= > Sent: Tuesday, February 27, 2018 11:24 PM > To: Mike Jones > > Cc: Jim Schaad >; gen-art >; ace@ietf.org ; ietf = >; Benjamin Kaduk >; draft-ietf-ace-cbor-web-token.all@ietf.org = > Subject: Re: [Ace] Genart telechat review of = draft-ietf-ace-cbor-web-token-12 > =20 > Hi Mike, >=20 > The edits that you propose in #1 and #2 are good IMO and they would = improve the clarity of the document. >=20 > Concerning #3 - all the 'running code' examples that you provided are = all for one type of policy only - Specification Required. The case here = seems a little more complex, as the review and required advice refer to = multiple policies. Thanks to the discussion and information provided by = you and Jim, I believe that I better understand now how this works, and = I defer to the General Area and Security AD the decision whether the = text is sufficiently clear. >=20 > Thanks for addressing my comments. >=20 > Regards, >=20 > Dan >=20 > =20 > On Wed, Feb 28, 2018 at 12:52 AM, Mike Jones = > = wrote: > Replies inline=E2=80=A6 > =20 > From: Ace > On = Behalf Of Dan Romascanu > Sent: Tuesday, February 27, 2018 2:23 PM > To: Jim Schaad > > Cc: gen-art >; ace@ietf.org = ; ietf >; = Benjamin Kaduk >; = draft-ietf-ace-cbor-web-token.all@ietf.org = > Subject: Re: [Ace] Genart telechat review of = draft-ietf-ace-cbor-web-token-12 > =20 > Hi Jim, >=20 > There are still a few problems:=20 > =20 > 1. The policies and mapping to the values ranges are hidden in the = Claim Key field in the template (the comment also made by Kathleen) > =20 > Per my earlier note, I will be making this language clearer when the = next revision is published. = = =20 > =20 > 2. At least one incorrect policy name is used: Standards Track = Required - do you mean Standards Action (?) > =20 > Thanks =E2=80=93 I=E2=80=99ll update the terminology when the next = draft is published. > =20 > 3. You describe a process that involves a mail list = (cwt-reg-review@ietf.org ) and Experts = Review. This description is not clear. Usually IANA approaches one DE = for advice and expects the advice from the same DE in a reasonable = period of time. If I understand correctly the process described in = Section 9.1 one or more DEs make a recommendation and run it with the = mail list. Who establishes the consensus on the mail list? Assuming the = mail list disagrees with the DE recommendation, who decides? > =20 > This is the process used for the .well-known URI spec, the JSON Web = Token (JWT) spec, the JOSE specs, many OAuth specs and it works well. = It allows interested parties to see and comment on registration = requests. The Designated Experts are still the ones to decide. See = these references for some uses of this kind of publicly-visible = registration procedure: > =20 > https://tools.ietf.org/html/rfc5785#section-5.1 = (using = wellknown-uri-review@ietf.org ) > https://tools.ietf.org/html/rfc6749#section-11.1 = (using = oauth-ext-review@ietf.org ) > https://tools.ietf.org/html/rfc7515#section-9 = (using = jose-reg-review@ietf.org ) > https://tools.ietf.org/html/rfc7800#section-6 = (using = jose-reg-review@ietf.org ) > =20 > I can find more examples of the use of this publicly-visible = registration procedure if you like. > =20 > Regards, > Dan > =20 > Thanks for = the careful review, Dan, > -- Mike > =20 > On Tue, Feb 27, 2018 at 7:53 PM, Jim Schaad > wrote: > Integer values between -256 and 255 and strings of length 1 are = designated as Standards Track Required. > =20 > Integer values from -65536 to 65535 and strings of length 2 are = designated as Specification Required. > =20 > Integer values of greater than 65535 and strings of length greater = than 2 are designated as Expert Review.=20 > =20 > Integer values less than -65536 are marked as Private Use. > =20 > So that says what IANA policy is to be used for each of the different = items. This defines the policies and the ranges for those policies. > =20 > There is not anything that is making a distinction on what the = criteria to be used by the DE in the document which is separate, but I = don=E2=80=99t think that is needed. This is why they are DEs. > =20 > I still don=E2=80=99t see what you think is missing. > =20 > Jim > =20 > =20 > From: Dan Romascanu [mailto:dromasca@gmail.com = ]=20 > Sent: Tuesday, February 27, 2018 2:00 AM > To: Benjamin Kaduk > > Cc: Jim Schaad >; gen-art >; draft-ietf-ace-cbor-web-token.all@ietf.org = ; ietf >; ace@ietf.org > Subject: Re: [Ace] Genart telechat review of = draft-ietf-ace-cbor-web-token-12 > =20 > Hi, >=20 > See also my other notes. >=20 > I believe that what the document tries to say is: >=20 > Register R is divided into four different ranges R1, R2, R3, R4 = (defining the value limits may be useful) >=20 > Values in range R1 are allocated according to policy P1 in the case = that ... > Values in range R2 are allocated according to policy P2 in the case = that ... > Values in range R3 are allocated according to policy P3 in the case = that ... > Values in range R4 are allocated according to policy P4 in the case = that ... >=20 > But it doesn't say it. Mentioning four concurrent policies for the = same registry without separation of values range, and without providing = clear instructions when each policy is recommended to be used, seems = confusing to me, and may be confusing for users of this document in the = future. >=20 > Regards, >=20 > Dan >=20 > =20 > On Tue, Feb 27, 2018 at 5:40 AM, Benjamin Kaduk > wrote: > On Mon, Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote: > > Hi Jim, > > > > Thank you for your answer and for addressing my comments. > > > > On item #2: > > > > > > > > On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad > wrote: > > > > > > > > > > > > -----Original Message----- > > > > From: Dan Romascanu [mailto:dromasca@gmail.com = ] > > > > > > > > > > ... > > > > > > > > > > 2. I am a little confused by the definition of policies in = Section 9.1: > > > > > > > > Depending upon the values being requested, registration = requests are > > > > evaluated on a Standards Track Required, Specification = Required, > > > > Expert Review, or Private Use basis [RFC8126] after a = three-week > > > > review period on the cwt-reg-review@ietf.org = mailing list, on the > > > > advice of one or more Designated Experts. > > > > > > > > How does this work? The request is forwarded to the designated = expert, > > > > he/she make a recommendation concerning the policy on the mail = list, and > > > > depending on the feedback received a policy is selected? Who = establishes > > > > consensus? > > > > > > > > Frankly, I wonder if this can work at all. Are there other = examples of > > > four > > > > different policies for the same registry, applied on a = case-to-case > > > basis? > > > > > > This is the same approach that is being used for the COSE = registries. As > > > an example, you can look at https://www.iana.org/ = > > > assignments/cose/cose.xhtml#algorithms. > > > > > > Part of the issue about this is that the JOSE/JWT registries do = have the > > > same different policies, but that differences are hidden from the = IANA > > > registry. Since they allow for a URI to be used as the identifier = of a > > > field, only the plain text versions are registered. Thus I can = use " > > > http://augustcellars.com/JWT/My_Tag = " as an identifier. Since for CBOR > > > the set of tag values is closed and does not have this escape (nor = would > > > one want the length of the tag) it is necessary to have this break = down of > > > tag fields. > > > > > > > > > > > > > > This does not seem to be exactly the same approach. The COSE RFC = 8152 > > defines the registry policy in a different manner. There is only one = policy > > that is proposed 'Expert Review' and than the Expert Review = Instructions > > are used to define the cases when a Standards Track specification is > > required. No such text exists in the current I-D. There is no = separation of > > the values space in the registry according to the type of assignment = here, > > as in RFC 8152. >=20 > The template in section 9.1.1 has the different policies for the > different integer ranges, under the 'Claim Key' section. Kathleen > (IIRC) already noted that this should probably be repeated in the > introductory part of section 9.1 as well, and that will be done > before the document is sent to the IESG. >=20 > -Benjamin > =20 > =20 > =20 > _______________________________________________ > Gen-art mailing list > Gen-art@ietf.org > https://www.ietf.org/mailman/listinfo/gen-art = --Apple-Mail=_20324883-8F60-47B0-A3B7-6349DB6DB260 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Dan, thanks for your review. Mike et al, = thanks for your responses. I appreciate the novelty of the registration = process here but I think the text as it currently stands is clear = enough. I entered a No Objection ballot.

Alissa


On Mar 5, 2018, at 7:44 PM, Mike Jones <Michael.Jones@microsoft.com> wrote:

Dan, you=E2=80=99ll find changes that = address your review comments in https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-13.  See https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-13#ap= pendix-C for a = summary of the changes made.
 
Thanks = again for your useful review!
 
          &nb= sp;            = ;            &= nbsp;           &nb= sp;          -- Mike
 
From: Dan Romascanu <dromasca@gmail.com> 
Sent: Tuesday, February 27, 2018 = 11:24 PM
To: Mike Jones <Michael.Jones@microsoft.com>
Cc: Jim = Schaad <ietf@augustcellars.com>; gen-art <gen-art@ietf.org>; ace@ietf.org; ietf <ietf@ietf.org>; Benjamin Kaduk <kaduk@mit.edu>; draft-ietf-ace-cbor-web-token.all@ietf.org
Subject: Re: [Ace] Genart telechat = review of draft-ietf-ace-cbor-web-token-12
 

Hi = Mike,

The edits that you propose in #1 and #2 are good IMO and = they would improve the clarity of the document.

Concerning = #3 - all the 'running code' examples that you provided are all for one = type of policy only - Specification Required. The case here seems a = little more complex, as the review and required advice refer to multiple = policies. Thanks to the discussion and information provided by you and = Jim, I believe that I better understand now how this works, and I defer = to the General Area and Security AD the decision whether the text is = sufficiently clear.

Thanks for addressing my comments.

Regards,

Dan

 
On Wed, Feb 28, 2018 at 12:52 AM, Mike Jones <Michael.Jones@microsoft.com> wrote:
Replies = inline=E2=80=A6
 
From: Ace <ace-bounces@ietf.org> On Behalf = Of Dan = Romascanu
Sent: Tuesday, February 27, 2018 = 2:23 PM
To: Jim Schaad <ietf@augustcellars.com>
Cc: gen-art <gen-art@ietf.org>; ace@ietf.org; ietf <ietf@ietf.org>; Benjamin = Kaduk <kaduk@mit.edu>; draft-ietf-ace-cbor-web-token.all@ietf.org
Subject: Re: [Ace] Genart telechat = review of draft-ietf-ace-cbor-web-token-12
 
Hi Jim,

There are still a few problems: 
 
1. The = policies and mapping to the values ranges are hidden in the Claim Key = field in the template (the comment also made by Kathleen)
 
Per my earlier note, I will = be making this language clearer when the next revision is = published.          &nbs= p;            =             &n= bsp;           &nbs= p;            =             &n= bsp;           &nbs= p;            =             &n= bsp;           &nbs= p;            =        
 
2. At = least one incorrect policy name is used: Standards Track Required - do = you mean Standards Action (?)
 
Thanks =E2=80= =93 I=E2=80=99ll update the terminology when the next draft is = published.
 
3. You describe a process that involves = a mail list (cwt-reg-review@ietf.org) and Experts Review. This = description is not clear. Usually IANA approaches one DE for advice and = expects the advice from the same DE in a reasonable period of time. If I = understand correctly the process described in Section 9.1 one or more = DEs make a recommendation and run it with the mail list. Who establishes = the consensus on the mail list? Assuming the mail list disagrees with = the DE recommendation, who decides?
 
This is the = process used for the .well-known URI spec, the JSON Web Token (JWT) = spec, the JOSE specs, many OAuth specs and it works well.  It = allows interested parties to see and comment on registration = requests.  The Designated Experts are still the ones to = decide.  See these references for some uses of this kind of = publicly-visible registration procedure:
 
https://tools.ietf.org/html/rfc5785#section-5.1 (using wellknown-uri-review@ietf.org)
https://tools.ietf.org/html/rfc6749#section-11.1 (using oauth-ext-review@ietf.org)
https://tools.ietf.org/html/rfc7515#section-9 (using jose-reg-review@ietf.org)
https://tools.ietf.org/html/rfc7800#section-6 (using jose-reg-review@ietf.org)
 
I can find more examples of = the use of this publicly-visible registration procedure if you = like.
 
Regards,
Dan
 
          &nb= sp;            = ;            &= nbsp;           &nb= sp;          Thanks for the = careful review, Dan,
          &nb= sp;            = ;            &= nbsp;           &nb= sp;          -- = Mike
 
On Tue, Feb 27, 2018 at 7:53 PM, Jim Schaad <ietf@augustcellars.com> wrote:
Integer = values between -256 and 255 and strings of length 1 are designated as = Standards Track Required.
 
Integer = values from -65536 to 65535 and strings of length 2 are designated as = Specification Required.
 
Integer = values of greater than 65535 and strings of length greater than 2 are = designated as Expert Review. 
 
Integer = values less than -65536 are marked as Private Use.
 
So that says what IANA policy is to be used for each of the = different items.  This defines the policies and the ranges for = those policies.
 
There is not anything that is making a distinction on what = the criteria to be used by the DE in the document which is separate, but = I don=E2=80=99t think that is needed.  This is why they are = DEs.
 
I still don=E2=80=99t see what you think is missing.
 
Jim
 
 
From: Dan Romascanu [mailto:dromasca@gmail.com] 
Sent: Tuesday, February 27, 2018 = 2:00 AM
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: Jim Schaad <ietf@augustcellars.com>; gen-art <gen-art@ietf.org>; draft-ietf-ace-cbor-web-token.all@ietf.org; ietf <ietf@ietf.org>; ace@ietf.org
Subject: Re: [Ace] Genart telechat = review of draft-ietf-ace-cbor-web-token-12
 

Hi,

See also = my other notes.

I believe that what = the document tries to say is:

Register R is divided into four = different ranges R1, R2, R3, R4 (defining the value limits may be = useful)

Values in range R1 are allocated according to policy P1 in = the case that ...
Values in range R2 are allocated = according to policy P2 in the case that ...
Values in = range R3 are allocated according to policy P3 in the case that ...
Values in range R4 are allocated according to policy P4 in = the case that ...

But it doesn't say it. Mentioning four concurrent policies = for the same registry without separation of values range, and without = providing clear instructions when each policy is recommended to be used, = seems confusing to me, and may be confusing for users of this document = in the future.

Regards,

Dan

 
On Tue, Feb 27, 2018 at 5:40 AM, Benjamin Kaduk <kaduk@mit.edu> wrote:

On Mon, = Feb 26, 2018 at 11:19:04PM +0200, Dan Romascanu wrote:
> = Hi Jim,
>
> Thank you for your answer = and for addressing my comments.
>
> On = item #2:
>
>
>
> On Mon, Feb 26, 2018 at 10:12 PM, Jim Schaad <ietf@augustcellars.com> wrote:
>
> >
> >
> > = > -----Original Message-----
> > > From: Dan = Romascanu [mailto:dromasca@gmail.com]
> > >
> >
> > ...
>
> > >
> > > 2. I am a little = confused by the definition of policies in Section 9.1:
> = > >
> > >    Depending upon the = values being requested, registration requests are
> = > >    evaluated on a Standards Track Required, = Specification Required,
> > >    Expert = Review, or Private Use basis [RFC8126] after a three-week
> > >    review period on the cwt-reg-review@ietf.org mailing list, on the
> > >    advice of one or more Designated = Experts.
> > >
> > > How = does this work? The request is forwarded to the designated expert,
> > > he/she make a recommendation concerning the = policy on the mail list, and
> > > depending on = the feedback received a policy is selected? Who establishes
> > > consensus?
> > >
> > > Frankly, I wonder if this can work at all. Are = there other examples of
> > four
> = > > different policies for the same registry, applied on a = case-to-case
> > basis?
> >
> > This is the same approach that is being used for = the COSE registries.  As
> > an example, you = can look at https://www.iana.org/
> > assignments/cose/cose.xhtml#algorithms.
> >
> > Part of the issue about = this is that the JOSE/JWT registries do have the
> > = same different policies, but that differences are hidden from the = IANA
> > registry.  Since they allow for a URI = to be used as the identifier of a
> > field, only = the plain text versions are registered.  Thus I can use "
> > http://augustcellars.com/JWT/My_Tag" as an = identifier.  Since for CBOR
> > the set of tag = values is closed and does not have this escape (nor would
> > one want the length of the tag) it is necessary to = have this break down of
> > tag fields.
> >
> >
> >
> >
> This does not seem to be exactly = the same approach. The COSE RFC 8152
> defines the = registry policy in a different manner. There is only one policy
> that is proposed 'Expert Review' and than the Expert = Review Instructions
> are used to define the cases when = a Standards Track specification is
> required. No such = text exists in the current I-D. There is no separation of
> the values space in the registry according to the type = of assignment here,
> as  in RFC 8152.

The = template in section 9.1.1 has the different policies for the
different integer ranges, under the 'Claim Key' = section.  Kathleen
(IIRC) already noted that this = should probably be repeated in the
introductory part of = section 9.1 as well, and that will be done
before the = document is sent to the IESG.

-Benjamin=
 
 
 
_______________________________________________
Gen-art mailing = list
Gen-art@ietf.org
https://www.ietf.org/mailman/listinfo/gen-art
= --Apple-Mail=_20324883-8F60-47B0-A3B7-6349DB6DB260-- From nobody Wed Mar 7 12:40:06 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 929F1129C6B; Wed, 7 Mar 2018 12:40:00 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Eric Rescorla To: "The IESG" Cc: draft-ietf-ace-cbor-web-token@ietf.org, ace-chairs@ietf.org, kaduk@mit.edu, ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.74.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> Date: Wed, 07 Mar 2018 12:40:00 -0800 Archived-At: Subject: [Ace] Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Mar 2018 20:40:01 -0000 Eric Rescorla has entered the following ballot position for draft-ietf-ace-cbor-web-token-13: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- The claim values defined in this specification MUST NOT be prefixed with any CBOR tag. For instance, while CBOR tag 1 (epoch-based date/ time) could logically be prefixed to values of the "exp", "nbf", and "iat" claims, this is unnecessary, since the representation of the claim values is already specified by the claim definitions. Tagging claim values would only take up extra space without adding information. However, this does not prohibit future claim definitions from requiring the use of CBOR tags for those specific claims. Why do you need a MUST NOT here? This seems like not really an interop requirement 4. Verify that the resulting COSE Header includes only parameters and values whose syntax and semantics are both understood and supported or that are specified as being ignored when not understood. I'm surprised to find that this is not a generic 8152 processing rule. Can you explain why this is necessary here? From nobody Wed Mar 7 16:05:33 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DD6312008A; Wed, 7 Mar 2018 16:05:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Adam Roach To: "The IESG" Cc: draft-ietf-ace-cbor-web-token@ietf.org, ace-chairs@ietf.org, kaduk@mit.edu, ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.74.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152046753224.21454.8592401400498503627.idtracker@ietfa.amsl.com> Date: Wed, 07 Mar 2018 16:05:32 -0800 Archived-At: Subject: [Ace] Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 00:05:32 -0000 Adam Roach has entered the following ballot position for draft-ietf-ace-cbor-web-token-13: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks to the WG, chairs, and §3.1.1: > The "iss" (issuer) claim has the same meaning and processing rules as > the "iss" claim defined in Section 4.1.1 of [RFC7519], except that > the value is of type StringOrURI. The Claim Key 1 is used to > identify this claim. 1) Given that RFC 7159 defines "iss" to contain a "StringOrURI" value, it's not clear what the "except" clause is attempting to convey. 2) Given the many uses of the word "type" in this context (including CBOR types and the JWT 'typ' field), and given that RFC 7519 never refers to "StringOrURI" as a "type," I think that the use of the word "type" here is likely to lead to reader confusion. This comment -- or a congruent form of it involving "NumericDate" rather than "StringOrURI" -- applies to §3.1.2 through §3.1.6. --------------------------------------------------------------------------- §9.1: > Criteria that should be applied by the Designated Experts includes > determining whether the proposed registration duplicates existing > functionality, whether it is likely to be of general applicability or > whether it is useful only for a single application, and whether the > registration description is clear. Registrations for the limited set > of values between -256 and 255 and strings of length 1 are to be > restricted to claims with general applicability. Use of the word "between" without qualifying it as inclusive or exclusive of the endpoints is ambiguous. Suggest either "values from -256 to 255" or "values between -256 and 255 inclusive". --------------------------------------------------------------------------- §9.1.1: > CBOR map key for the claim. Different ranges of values use > different registration policies [RFC8126]. Integer values between > -256 and 255 and strings of length 1 are designated as Standards > Action. Integer values from -65536 to 65535 and strings of length > 2 are designated as Specification Required Same comment as above. Also, please replace "from -65536 to 65535" with "from -65536 to -257 and from 256 to 65535". From nobody Wed Mar 7 20:24:31 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1E0F126BF7; Wed, 7 Mar 2018 20:24:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6qpd40691uoM; Wed, 7 Mar 2018 20:24:23 -0800 (PST) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E714E126B72; Wed, 7 Mar 2018 20:24:22 -0800 (PST) X-AuditID: 1209190f-d2bff70000002dcd-cd-5aa0baf54b39 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id 8D.31.11725.5FAB0AA5; Wed, 7 Mar 2018 23:24:21 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w284OKwc013688; Wed, 7 Mar 2018 23:24:20 -0500 Received: from mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w284OFAh016848 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 7 Mar 2018 23:24:18 -0500 Date: Wed, 7 Mar 2018 22:24:15 -0600 From: Benjamin Kaduk To: Adam Roach Cc: The IESG , draft-ietf-ace-cbor-web-token@ietf.org, ace-chairs@ietf.org, ace@ietf.org Message-ID: <20180308042415.GA27850@mit.edu> References: <152046753224.21454.8592401400498503627.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <152046753224.21454.8592401400498503627.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprDKsWRmVeSWpSXmKPExsUixCmqrft114IogwmTLC2m3f3NavH9Ww+z xZ6/i9gtLu9uZLSY8WciswOrx5IlP5k8Zu18whLAFMVlk5Kak1mWWqRvl8CV0beij7ngiGjF 9IuvWRoYHwt0MXJySAiYSNw+PJG5i5GLQ0hgMZNE4++zTBDOBkaJyQdOs0M4Z5gkfq65zw7S wiKgItE4YSkLiM0GZDd0X2YGsUUEFCXaDt8Es5kFCiS+PX8NVM/BISwQI/FuuT1ImFdAR+LC 0uOMILaQgK/Eo113mCHighInZz5hgWjVkdi59Q4bSCuzgLTE8n8cEGF5ieats5lBwpwCfhK7 v4B1igooS+ztO8Q+gVFwFpJBs5AMmoUwaBaSQQsYWVYxyqbkVunmJmbmFKcm6xYnJ+blpRbp mujlZpbopaaUbmIEB7wk/w7GOQ3ehxgFOBiVeHgl/syPEmJNLCuuzD3EKMnBpCTK65u1IEqI Lyk/pTIjsTgjvqg0J7X4EKMEB7OSCC/XMqAcb0piZVVqUT5MSpqDRUmc191EO0pIID2xJDU7 NbUgtQgmK8PBoSTBGwCMbCHBotT01Iq0zJwShDQTByfIcB6g4Xt2ggwvLkjMLc5Mh8ifYtTl uPHidRuzEEtefl6qlDhvHsggAZCijNI8uDmgRCWRvb/mFaM40FvCEOt4gEkObtIroCVMQEvO 350DsqQkESEl1cBYn98aFZjZp3hwxeqAKL563stflionX+ITvR7bLTarsOvviY/Xg+sEG2+r LmJhjn2xQfjxzzf60y5dU5myWPYRW2vvZM0thzhbr1VKCORH7BUq/rjGTenj54CD++PfbSp4 tuBRtNVFvYlnjsyfv/u4sfL0pJobS+ScVM8u7fQ4xyAqZZ+u8f2+EktxRqKhFnNRcSIAdRYd lS8DAAA= Archived-At: Subject: Re: [Ace] Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 04:24:25 -0000 Hi Adam, With my shepherd hat... On Wed, Mar 07, 2018 at 04:05:32PM -0800, Adam Roach wrote: > > Thanks to the WG, chairs, and > > §3.1.1: > > > The "iss" (issuer) claim has the same meaning and processing rules as > > the "iss" claim defined in Section 4.1.1 of [RFC7519], except that > > the value is of type StringOrURI. The Claim Key 1 is used to > > identify this claim. > > > 1) Given that RFC 7159 defines "iss" to contain a "StringOrURI" value, it's > not clear what the "except" clause is attempting to convey. I had to ask about this as well -- the crux is that the "StringOrURI" JWT type is different from the CWT "StringOrURI" type. IIRC there used to be an extra descriptor in here but it was removed as redundant. > 2) Given the many uses of the word "type" in this context (including CBOR > types and the JWT 'typ' field), and given that RFC 7519 never refers to > "StringOrURI" as a "type," I think that the use of the word "type" here > is likely to lead to reader confusion. In combination with the above, maybe we want "the value is a CWT StringOrURI value". Authors? > This comment -- or a congruent form of it involving "NumericDate" rather than > "StringOrURI" -- applies to §3.1.2 through §3.1.6. (Right.) > --------------------------------------------------------------------------- > > §9.1: > > > Criteria that should be applied by the Designated Experts includes > > determining whether the proposed registration duplicates existing > > functionality, whether it is likely to be of general applicability or > > whether it is useful only for a single application, and whether the > > registration description is clear. Registrations for the limited set > > of values between -256 and 255 and strings of length 1 are to be > > restricted to claims with general applicability. > > Use of the word "between" without qualifying it as inclusive or exclusive of the > endpoints is ambiguous. Suggest either "values from -256 to 255" or "values > between -256 and 255 inclusive". Agreed, it should be qualified as inclusive. > --------------------------------------------------------------------------- > > §9.1.1: > > > CBOR map key for the claim. Different ranges of values use > > different registration policies [RFC8126]. Integer values between > > -256 and 255 and strings of length 1 are designated as Standards > > Action. Integer values from -65536 to 65535 and strings of length > > 2 are designated as Specification Required > > Same comment as above. > > Also, please replace "from -65536 to 65535" with "from -65536 to -257 and from > 256 to 65535". Good catch! Thanks, Ben From nobody Wed Mar 7 21:47:18 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AA7F1241F3; Wed, 7 Mar 2018 21:47:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8XiApjeMp1CU; Wed, 7 Mar 2018 21:47:15 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0110.outbound.protection.outlook.com [104.47.37.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 412D11201FA; Wed, 7 Mar 2018 21:47:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Ofr78WPy9YccVdFw1sR0qD13WOR/NvHub/r6Jap4sf0=; b=oQkAiYwhFMiQ8LnDYJR2og6MwAnbILa8w10CTCpwPvVrDFQHgX2tdlhdQFQlFdXie1FOy5QiXn/k5THsKCvai2vVLmvnbrj/4+e41noUfSrityAWZDUSBJj5k8GyriAQONEYn102xh/chc26mCh/CiAZq5al/TPaJ6fcuDd4sMI= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0942.namprd21.prod.outlook.com (52.132.114.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.588.7; Thu, 8 Mar 2018 05:47:13 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0588.008; Thu, 8 Mar 2018 05:47:13 +0000 From: Mike Jones To: Benjamin Kaduk , Adam Roach CC: The IESG , "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "ace@ietf.org" Thread-Topic: Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) Thread-Index: AQHTtnEvK2OssFOs2U+GLb0WT/+1z6PFvb+AgAAV27A= Date: Thu, 8 Mar 2018 05:47:13 +0000 Message-ID: References: <152046753224.21454.8592401400498503627.idtracker@ietfa.amsl.com> <20180308042415.GA27850@mit.edu> In-Reply-To: <20180308042415.GA27850@mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.47.88.236] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0942; 7:0ac1SYy2BDvVFImJnZPF3jLWXb9clg6rw5wNxK93bdlbBIo8X74MFv15RtFSqjsD4I+DDYp4ZeMcL9m/aw3hiI6Jit3FlQve9hXTki+6hHiNw3bsd/brcbMYUgBwyYcUq8UJXM6b8/PMK7KyLD5qRzkr1UFTs1kSedM7wOmkINJxhKLSfVdLQAdWzeCpFTqxp4NXYwHOT6dwQNV8WrJRaiSeA0yQjnb4qscuRttdMD1n2cDl0qr/G8gncQaocbbe; 20:8wdHF9iZddPZzyAh3ZWhEvNQmCsMdMIsm8mjPK6FTw2BWyRUGaHq5j4uHa7PfvokrWcJIPn2+zHX/nFjh2pwONRriGl4oZrxYNd2AcAUAMCJnvxZZNa9CGYl66DMW1pYaZCXhTVYoChlhbZ/6CMlOvNX4HCXeeZ0yOhdkdVgPvI= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 300171c8-ffa0-4cf0-7a31-08d584b80b0c x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:SN6PR2101MB0942; x-ms-traffictypediagnostic: SN6PR2101MB0942: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(788757137089)(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(3231220)(944501244)(52105095)(6055026)(61426038)(61427038)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123560045)(20161123562045)(20161123564045)(6072148)(201708071742011); SRVR:SN6PR2101MB0942; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0942; x-forefront-prvs: 060503E79B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(39860400002)(39380400002)(366004)(346002)(396003)(189003)(199004)(51444003)(13464003)(10090500001)(3280700002)(2906002)(6506007)(53546011)(55016002)(8936002)(5250100002)(26005)(105586002)(6436002)(97736004)(72206003)(6246003)(316002)(59450400001)(9686003)(22452003)(106356001)(2171002)(478600001)(76176011)(2900100001)(86362001)(110136005)(86612001)(54906003)(53936002)(10290500003)(229853002)(14454004)(74316002)(25786009)(3846002)(6116002)(99286004)(8676002)(81156014)(81166006)(5660300001)(68736007)(8990500004)(66066001)(4326008)(3660700001)(7696005)(33656002)(102836004)(7736002)(305945005)(186003)(2950100002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0942; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: vgJDB+XuFiI/NxU4RJfsxrzGrkhyV6Tv1UWS9mfECUN5rIRmqI5ngM7ceYKemzH5gCnESlHI57hg2Fs2Ih55K6ZNTKpT+3s4IGw+jogrbTOPumshhppQbMF6Eurd1hyzLoVkbpS+O9lkv5ur96HzF/R1S2KQkkDeabbYrw+BYIu/at7GeWR9olCxCLyxRyOtRlJgmXpCeDjfXu3qA0MwiiesWFdlKoiC5gL+e1oPcaRBoMsGKLd+AAQBkb3pRLl/X+X3nDPHpA/aSMGzX9yLougdmRW8gaAbdcbPahi8nueoEWfrIRID1mw2j6Xpv2DDEJllILlBdW79Obf0jrre/g== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 300171c8-ffa0-4cf0-7a31-08d584b80b0c X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Mar 2018 05:47:13.5798 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0942 Archived-At: Subject: Re: [Ace] Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 05:47:17 -0000 Thanks, Ben and Adam. I've recoded a note to address the improvements belo= w one the submission tool reopens. For what it's worth, I independently noticed the unintended overlap between= the Standards Action and Specification Required number ranges in a convers= ation today with IANA. The point of including new CWT definitions for "StringOrURI" and "NumericDa= te" was so that we could use them directly. Prefixing them with "CWT" isn'= t necessary for the meaning to be clear in context. Thanks both for the attention to detail. -- Mike -----Original Message----- From: Benjamin Kaduk =20 Sent: Wednesday, March 7, 2018 8:24 PM To: Adam Roach Cc: The IESG ; draft-ietf-ace-cbor-web-token@ietf.org; ace-c= hairs@ietf.org; ace@ietf.org Subject: Re: Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13:= (with COMMENT) Hi Adam, With my shepherd hat... On Wed, Mar 07, 2018 at 04:05:32PM -0800, Adam Roach wrote: >=20 > Thanks to the WG, chairs, and >=20 > =A73.1.1: >=20 > > The "iss" (issuer) claim has the same meaning and processing rules=20 > > as the "iss" claim defined in Section 4.1.1 of [RFC7519], except=20 > > that the value is of type StringOrURI. The Claim Key 1 is used to =20 > > identify this claim. >=20 >=20 > 1) Given that RFC 7159 defines "iss" to contain a "StringOrURI" value, it= 's > not clear what the "except" clause is attempting to convey. I had to ask about this as well -- the crux is that the "StringOrURI" JWT t= ype is different from the CWT "StringOrURI" type. IIRC there used to be an extra descriptor in here but it was removed= as redundant. > 2) Given the many uses of the word "type" in this context (including CBOR > types and the JWT 'typ' field), and given that RFC 7519 never refers t= o > "StringOrURI" as a "type," I think that the use of the word "type" her= e > is likely to lead to reader confusion. In combination with the above, maybe we want "the value is a CWT StringOrUR= I value". Authors? > This comment -- or a congruent form of it involving "NumericDate"=20 > rather than "StringOrURI" -- applies to =A73.1.2 through =A73.1.6. (Right.) > ---------------------------------------------------------------------- > ----- >=20 > =A79.1: >=20 > > Criteria that should be applied by the Designated Experts includes =20 > > determining whether the proposed registration duplicates existing =20 > > functionality, whether it is likely to be of general applicability=20 > > or whether it is useful only for a single application, and whether=20 > > the registration description is clear. Registrations for the=20 > > limited set of values between -256 and 255 and strings of length 1=20 > > are to be restricted to claims with general applicability. >=20 > Use of the word "between" without qualifying it as inclusive or=20 > exclusive of the endpoints is ambiguous. Suggest either "values from=20 > -256 to 255" or "values between -256 and 255 inclusive". Agreed, it should be qualified as inclusive. > ---------------------------------------------------------------------- > ----- >=20 > =A79.1.1: >=20 > > CBOR map key for the claim. Different ranges of values use > > different registration policies [RFC8126]. Integer values between > > -256 and 255 and strings of length 1 are designated as Standards > > Action. Integer values from -65536 to 65535 and strings of length > > 2 are designated as Specification Required >=20 > Same comment as above. >=20 > Also, please replace "from -65536 to 65535" with "from -65536 to -257=20 > and from > 256 to 65535". Good catch! Thanks, Ben From nobody Wed Mar 7 22:28:01 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96B3912D868; Wed, 7 Mar 2018 22:27:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v6oUOfB6k4xJ; Wed, 7 Mar 2018 22:27:58 -0800 (PST) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36410126E01; Wed, 7 Mar 2018 22:27:58 -0800 (PST) Received: from Svantevit.local (99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id w286RvNO007915 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Thu, 8 Mar 2018 00:27:57 -0600 (CST) (envelope-from adam@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host 99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228] claimed to be Svantevit.local To: Mike Jones , Benjamin Kaduk Cc: The IESG , "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "ace@ietf.org" References: <152046753224.21454.8592401400498503627.idtracker@ietfa.amsl.com> <20180308042415.GA27850@mit.edu> From: Adam Roach Message-ID: <81651717-66f6-d373-3264-a8af228ec85b@nostrum.com> Date: Thu, 8 Mar 2018 00:27:51 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: Re: [Ace] Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 06:27:59 -0000 On 3/7/18 11:47 PM, Mike Jones wrote: > The point of including new CWT definitions for "StringOrURI" and "NumericDate" was so that we could use them directly. Prefixing them with "CWT" isn't necessary for the meaning to be clear in context. Given that the current formulation confused both Benjamin and me, I think this assertion doesn't hold up to scrutiny. /a From nobody Wed Mar 7 22:58:38 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5F5B126C26; Wed, 7 Mar 2018 22:58:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22eTFTjKgTio; Wed, 7 Mar 2018 22:58:34 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0126.outbound.protection.outlook.com [104.47.32.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EC51126C19; Wed, 7 Mar 2018 22:58:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=gyF4GyZI4KSzavl0UHOWYDFyUvgpnZ23H9cf6AIR6GY=; b=meUtXFCFQvON8zdn9YtlB+DSaoEFH20w7f6zH1FUZC7oUMJh7PTjO84a0+j0FC9VDcWV7ID6RE2UU+irZLkReBAGFrL4ndCDf0pQfpYjKJVU0PQ4hve6efSPLF1JqE0BXGYN64KMIIBzXas8VVtX5h1S3jBwtYGGrApenr+vmQM= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1053.namprd21.prod.outlook.com (52.132.115.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.588.3; Thu, 8 Mar 2018 06:58:32 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0588.008; Thu, 8 Mar 2018 06:58:32 +0000 From: Mike Jones To: Adam Roach , Benjamin Kaduk CC: The IESG , "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "ace@ietf.org" Thread-Topic: Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) Thread-Index: AQHTtnEvK2OssFOs2U+GLb0WT/+1z6PFvb+AgAAV27CAAAyugIAACFoA Date: Thu, 8 Mar 2018 06:58:32 +0000 Message-ID: References: <152046753224.21454.8592401400498503627.idtracker@ietfa.amsl.com> <20180308042415.GA27850@mit.edu> <81651717-66f6-d373-3264-a8af228ec85b@nostrum.com> In-Reply-To: <81651717-66f6-d373-3264-a8af228ec85b@nostrum.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.47.88.236] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1053; 7:d2g9zSSbQWSqqUzBjMBoydYvYTZuQB6o0lL7epW2m5uAtnz+P2SxJQQeHQh9yQTEX5npI/fl6cgGrUEKIDX7qrTSdmBJl9qcseGkP5HLSXFOXem8GG+IFgWl5kE1Gf1GjsgsKUUjPKcukkKjmT8S8qZmPVvgRGxJbftXp1GRPKgP+Md5Uyp/omNCJGRlgYYHl0kfZrOzJaXkPITBWpUNvvkr9cTuSYLbLvGi+NOGHe8Ivt/UntYA32Wgz7EqPa5/; 20:oX5meUNLKGF/JXwRob822utty7h4a11ltEVlauieJ2IkCpWn54bxjvv5PWyDGJsChIm0QCDk8EEriTLHE9WE9Zkdh6gwHRC+8so+pTeyIYRrFTivZo669U3JCIepiknldEXNcImCg/jxLDMWJ2CdoTHuW8TRIPdp1CgZaXLkh64= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 8cf62f42-71b9-46cd-de56-08d584c20179 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:SN6PR2101MB1053; x-ms-traffictypediagnostic: SN6PR2101MB1053: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(89211679590171)(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231220)(944501244)(52105095)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041288)(20161123562045)(20161123564045)(20161123560045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:SN6PR2101MB1053; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1053; x-forefront-prvs: 060503E79B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(366004)(39380400002)(396003)(346002)(39860400002)(199004)(189003)(13464003)(68736007)(8936002)(76176011)(8990500004)(7696005)(3280700002)(53936002)(9686003)(86612001)(305945005)(22452003)(4326008)(7736002)(106356001)(6436002)(14454004)(186003)(86362001)(2900100001)(478600001)(99286004)(229853002)(10290500003)(55016002)(93886005)(33656002)(81166006)(2950100002)(81156014)(5660300001)(97736004)(2906002)(66066001)(6246003)(25786009)(2171002)(316002)(8676002)(105586002)(5250100002)(26005)(74316002)(6116002)(72206003)(3846002)(10090500001)(53546011)(54906003)(6506007)(3660700001)(102836004)(110136005); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1053; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: tygA5AT/lQeG8Vc0485NkLOUuPOvFVjGMZcuRAMaA6mVHjo/w948VNaRnTOo4cbXQV+JRzSPwjNJ8A1ARdT91prvQ5DsMNHQCp5e1RXZ7nzbmFztdOhBC9tchVULu2OpLw5y4A1t/yQJUu7txqzjFtGLWg69IhHLBgIVwqhBrf/MqrgJLefE7fQqxXEkXzmcbMeYLXyAszvJM/g5gR1C0NIlTL02blht4R/o4frEpD5jRcozGwHcdbkkCtfQgdZbo802HX+KwejOI4AkKYpWUvOJdRgsy3kqRY+3Er0iaQY0uWL6I+cJX/yEB6AlgVNV1IKGcemms3pBdPDdpR55Kg== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8cf62f42-71b9-46cd-de56-08d584c20179 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Mar 2018 06:58:32.4758 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1053 Archived-At: Subject: Re: [Ace] Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 06:58:37 -0000 RmFpciBlbm91Z2guICBJJ2xsIHdvcmsgb24gYWx0ZXJuYXRlIGV4cG9zaXRpb24gZm9yIHRoZXNl IHR5cGVzIHRvIGF2b2lkIGFueSBwb3RlbnRpYWwgY29uZnVzaW9uLg0KDQoJCQkJVGhhbmtzIGFn YWluLA0KCQkJCS0tIE1pa2UNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFk YW0gUm9hY2ggPGFkYW1Abm9zdHJ1bS5jb20+IA0KU2VudDogV2VkbmVzZGF5LCBNYXJjaCA3LCAy MDE4IDEwOjI4IFBNDQpUbzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29t PjsgQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+DQpDYzogVGhlIElFU0cgPGllc2dAaWV0 Zi5vcmc+OyBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbkBpZXRmLm9yZzsgYWNlLWNoYWly c0BpZXRmLm9yZzsgYWNlQGlldGYub3JnDQpTdWJqZWN0OiBSZTogQWRhbSBSb2FjaCdzIE5vIE9i amVjdGlvbiBvbiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMzogKHdpdGggQ09NTUVO VCkNCg0KT24gMy83LzE4IDExOjQ3IFBNLCBNaWtlIEpvbmVzIHdyb3RlOg0KPiBUaGUgcG9pbnQg b2YgaW5jbHVkaW5nIG5ldyBDV1QgZGVmaW5pdGlvbnMgZm9yICJTdHJpbmdPclVSSSIgYW5kICJO dW1lcmljRGF0ZSIgd2FzIHNvIHRoYXQgd2UgY291bGQgdXNlIHRoZW0gZGlyZWN0bHkuICBQcmVm aXhpbmcgdGhlbSB3aXRoICJDV1QiIGlzbid0IG5lY2Vzc2FyeSBmb3IgdGhlIG1lYW5pbmcgdG8g YmUgY2xlYXIgaW4gY29udGV4dC4NCg0KDQpHaXZlbiB0aGF0IHRoZSBjdXJyZW50IGZvcm11bGF0 aW9uIGNvbmZ1c2VkIGJvdGggQmVuamFtaW4gYW5kIG1lLCBJIHRoaW5rIHRoaXMgYXNzZXJ0aW9u IGRvZXNuJ3QgaG9sZCB1cCB0byBzY3J1dGlueS4NCg0KL2ENCg0K From nobody Thu Mar 8 08:19:27 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC65B127137; Thu, 8 Mar 2018 08:19:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FKO9j6cybA8u; Thu, 8 Mar 2018 08:19:24 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C6E512711B; Thu, 8 Mar 2018 08:19:23 -0800 (PST) Received: from Jude (192.168.1.162) by mail2.augustcellars.com (192.168.1.201) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 8 Mar 2018 08:17:09 -0800 From: Jim Schaad To: 'Mike Jones' , 'Benjamin Kaduk' , 'Adam Roach' CC: 'The IESG' , , , References: <152046753224.21454.8592401400498503627.idtracker@ietfa.amsl.com> <20180308042415.GA27850@mit.edu> In-Reply-To: Date: Thu, 8 Mar 2018 08:19:07 -0800 Message-ID: <044f01d3b6f9$314da380$93e8ea80$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQGfNF1TALmf+QT1ql9gEeobBacx2AGd03PcAe9np1CkEx+0oA== X-Originating-IP: [192.168.1.162] Archived-At: Subject: Re: [Ace] Adam Roach's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 16:19:26 -0000 It might make more sense to prefix the JWT versions as not being what is here. Jim > -----Original Message----- > From: Mike Jones [mailto:Michael.Jones@microsoft.com] > Sent: Wednesday, March 7, 2018 9:47 PM > To: Benjamin Kaduk ; Adam Roach > Cc: The IESG ; draft-ietf-ace-cbor-web-token@ietf.org; = ace- > chairs@ietf.org; ace@ietf.org > Subject: RE: Adam Roach's No Objection on = draft-ietf-ace-cbor-web-token- > 13: (with COMMENT) >=20 > Thanks, Ben and Adam. I've recoded a note to address the improvements > below one the submission tool reopens. >=20 > For what it's worth, I independently noticed the unintended overlap > between the Standards Action and Specification Required number ranges = in > a conversation today with IANA. >=20 > The point of including new CWT definitions for "StringOrURI" and > "NumericDate" was so that we could use them directly. Prefixing them = with > "CWT" isn't necessary for the meaning to be clear in context. >=20 > Thanks both for the attention to detail. >=20 > -- Mike >=20 > -----Original Message----- > From: Benjamin Kaduk > Sent: Wednesday, March 7, 2018 8:24 PM > To: Adam Roach > Cc: The IESG ; draft-ietf-ace-cbor-web-token@ietf.org; = ace- > chairs@ietf.org; ace@ietf.org > Subject: Re: Adam Roach's No Objection on = draft-ietf-ace-cbor-web-token- > 13: (with COMMENT) >=20 > Hi Adam, >=20 > With my shepherd hat... >=20 > On Wed, Mar 07, 2018 at 04:05:32PM -0800, Adam Roach wrote: > > > > Thanks to the WG, chairs, and > > > > =A73.1.1: > > > > > The "iss" (issuer) claim has the same meaning and processing = rules > > > as the "iss" claim defined in Section 4.1.1 of [RFC7519], except > > > that the value is of type StringOrURI. The Claim Key 1 is used = to > > > identify this claim. > > > > > > 1) Given that RFC 7159 defines "iss" to contain a "StringOrURI" = value, it's > > not clear what the "except" clause is attempting to convey. >=20 > I had to ask about this as well -- the crux is that the "StringOrURI" = JWT type is > different from the CWT "StringOrURI" > type. IIRC there used to be an extra descriptor in here but it was removed as > redundant. >=20 > > 2) Given the many uses of the word "type" in this context (including CBOR > > types and the JWT 'typ' field), and given that RFC 7519 never = refers to > > "StringOrURI" as a "type," I think that the use of the word = "type" here > > is likely to lead to reader confusion. >=20 > In combination with the above, maybe we want "the value is a CWT > StringOrURI value". Authors? >=20 > > This comment -- or a congruent form of it involving "NumericDate" > > rather than "StringOrURI" -- applies to =A73.1.2 through =A73.1.6. >=20 > (Right.) >=20 > > = ---------------------------------------------------------------------- > > ----- > > > > =A79.1: > > > > > Criteria that should be applied by the Designated Experts = includes > > > determining whether the proposed registration duplicates existing > > > functionality, whether it is likely to be of general applicability > > > or whether it is useful only for a single application, and = whether > > > the registration description is clear. Registrations for the > > > limited set of values between -256 and 255 and strings of length = 1 > > > are to be restricted to claims with general applicability. > > > > Use of the word "between" without qualifying it as inclusive or > > exclusive of the endpoints is ambiguous. Suggest either "values from > > -256 to 255" or "values between -256 and 255 inclusive". >=20 > Agreed, it should be qualified as inclusive. >=20 > > = ---------------------------------------------------------------------- > > ----- > > > > =A79.1.1: > > > > > CBOR map key for the claim. Different ranges of values use > > > different registration policies [RFC8126]. Integer values = between > > > -256 and 255 and strings of length 1 are designated as = Standards > > > Action. Integer values from -65536 to 65535 and strings of = length > > > 2 are designated as Specification Required > > > > Same comment as above. > > > > Also, please replace "from -65536 to 65535" with "from -65536 to = -257 > > and from > > 256 to 65535". >=20 > Good catch! >=20 > Thanks, >=20 > Ben From nobody Sat Mar 10 13:15:59 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC2551270AC; Sat, 10 Mar 2018 13:15:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3qTNzF82cVHH; Sat, 10 Mar 2018 13:15:57 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 363CF1201F8; Sat, 10 Mar 2018 13:15:57 -0800 (PST) Received: from Jude (104.129.192.193) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Sat, 10 Mar 2018 13:13:49 -0800 From: Jim Schaad To: CC: Date: Sat, 10 Mar 2018 13:15:46 -0800 Message-ID: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdO4tMNz0JYN1PFNQaWsBOIkt90Z7Q== Content-Language: en-us X-Originating-IP: [104.129.192.193] Archived-At: Subject: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Mar 2018 21:15:59 -0000 I agree with Hannes, this version of the document is much cleaner and much clearer. I think that it has solved most of the problems that I initially had with the draft. It is not ready to progress as there are still sections that are marked as TODO. But it is much closer to finishing that it was. I still have a couple of comments from a quick read through of the document. In section 2 - There will be a problem in that the port format extension is being eliminated in TLS 1.3 - We may want to divide this into a 1.2 and 1.3 section for clarity. In section 3- Should we be looking at the use of COSE rather than CMS for encryption of key services? * Do you have the option to additionally support the long name for the service as well as the short name? MUST have short name MAY have long name? * In section 6- All proxies are required by CoAP blocking to re-assemble the entire message at the proxy. It can re-block things going to the next proxy. While there is no requirement that the proxy get the entire message before sending on pieces, this should be common practice and would be required for a CoAP/HTTP proxy. * Should probably add a note in section 6 that any proxy that terminates the DTLS connection is going to be required to act as an RA. RAs are required to have the entire request for adding authentication as necessary. Jim From nobody Mon Mar 12 01:08:11 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C25B1270AB; Mon, 12 Mar 2018 01:08:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hRbKWEIAqLUu; Mon, 12 Mar 2018 01:08:08 -0700 (PDT) Received: from lb3-smtp-cloud7.xs4all.net (lb3-smtp-cloud7.xs4all.net [194.109.24.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F181D12706D; Mon, 12 Mar 2018 01:08:07 -0700 (PDT) Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:200]) by smtp-cloud7.xs4all.net with ESMTPA id vIV3eG5kW8U07vIV3eXoPZ; Mon, 12 Mar 2018 09:08:06 +0100 Received: from 2001:983:a264:1:5ddc:c088:1025:584f by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Mon, 12 Mar 2018 09:08:05 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Mon, 12 Mar 2018 09:08:05 +0100 From: peter van der Stok To: Jim Schaad Cc: draft-ietf-ace-coap-est@ietf.org, ace@ietf.org Organization: vanderstok consultancy Reply-To: consultancy@vanderstok.org Mail-Reply-To: consultancy@vanderstok.org In-Reply-To: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> Message-ID: X-Sender: stokcons@xs4all.nl User-Agent: XS4ALL Webmail X-CMAE-Envelope: MS4wfGb+n0f6n7EkWPGM4+G4hh07WSjPrf+E1g07JwsCq5G7g9t/oEuS8BuL7osZsRkPOmpchSle4siAZKkVNas+MALhO1HUTZGlZMddd6G8iMBopp8UNhd/ dxOj3IprKu4bjzqFF7tntMq8LcN5nG353MnlU2hA2BIkiJjy4TpMJ3ccvmCa2nAIGIVEXBrAuQnzdh8F7nsJYfDXZKAwOsaIN1DVIuicjI4PQWtvuNlYllEx 6lp5698K+h/lfFDlO68o3w== Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2018 08:08:10 -0000 Hi Jim, thanks for the comments. See my reactions below. Jim Schaad schreef op 2018-03-10 22:15: > I agree with Hannes, this version of the document is much cleaner and > much > clearer. I think that it has solved most of the problems that I > initially > had with the draft. It is not ready to progress as there are still > sections > that are marked as TODO. But it is much closer to finishing that it > was. That sounds hopeful. Agree about the TODOs > > I still have a couple of comments from a quick read through of the > document. > > In section 2 - There will be a problem in that the port format > extension is > being eliminated in TLS 1.3 - We may want to divide this into a 1.2 and > 1.3 > section for clarity. You mean for backward compatibility? > > In section 3- Should we be looking at the use of COSE rather than CMS > for > encryption of key services? That is a question that needs some discussion by others. In the recent draft-richardson-anima-ace-constrained-voucher-03, we encrypt the CBOR serialized voucher with either CMS or COSE, as signaled in the content format. Also there is a new draft draft-selander-ace-coap-est-oscore-00 that discusses the use of OSCORE for est over coap Introduction of COSE in est-coaps draft may need alignment with the other drafts. You suggest to use COSE for server key generation only to better protect the keys, and all other services to be encrypted with CMS? > > * Do you have the option to additionally support the long name for the > service as well as the short name? MUST have short name MAY have long > name? Agree, should work that out in more detail. > > * In section 6- All proxies are required by CoAP blocking to > re-assemble > the entire message at the proxy. It can re-block things going to the > next > proxy. While there is no requirement that the proxy get the entire > message > before sending on pieces, this should be common practice and would be > required for a CoAP/HTTP proxy. Agree fully, we need to clarify that. > > * Should probably add a note in section 6 that any proxy that > terminates the > DTLS connection is going to be required to act as an RA. RAs are > required > to have the entire request for adding authentication as necessary. This is visible in the figure of section 6, but needs elaboration in the text. > > Jim > Many thanks, this helps to get our text more concrete and complete. Peter > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Mon Mar 12 15:33:45 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A07EB12422F; Mon, 12 Mar 2018 15:33:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.231 X-Spam-Level: X-Spam-Status: No, score=-4.231 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iBO2_t1NXZH5; Mon, 12 Mar 2018 15:33:42 -0700 (PDT) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04C3E129C51; Mon, 12 Mar 2018 15:33:37 -0700 (PDT) X-AuditID: 12074424-957ff700000040cc-07-5aa7003e176a Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 78.18.16588.F3007AA5; Mon, 12 Mar 2018 18:33:36 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id w2CMXUoO022170; Mon, 12 Mar 2018 18:33:32 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w2CMXQBj029811 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 12 Mar 2018 18:33:29 -0400 Date: Mon, 12 Mar 2018 17:33:26 -0500 From: Benjamin Kaduk To: consultancy@vanderstok.org Cc: Jim Schaad , draft-ietf-ace-coap-est@ietf.org, ace@ietf.org Message-ID: <20180312223326.GA10699@kduck.kaduk.org> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpmleLIzCtJLcpLzFFi42IRYrdT0XVgWB5l8OiLiMX3bz3MFo/2r2Kz WPtzF7PF6unf2RxYPDbOmc7msWTJTyaPEw3b2QOYo7hsUlJzMstSi/TtErgyvv5LKujlqFje OoGpgbGLrYuRg0NCwETi/D+vLkYuDiGBxUwSr07fYIJwNjJK7FixghXCucok8axnFmMXIycH i4CqxIl5W1hBbDYBFYmG7svMILaIgJzE9Omz2UBsZoEEia/XjrOCbBAW0JX4dVEdJMwLtGzi 1XawciGBPIlZ3UuYIOKCEidnPmGBaNWSuPHvJRNIK7OAtMTyfxwgYU4BS4mfM9+BTRcVUJbY 23eIfQKjwCwk3bOQdM9C6F7AyLyKUTYlt0o3NzEzpzg1Wbc4OTEvL7VI11wvN7NELzWldBMj OHxdVHYwdvd4H2IU4GBU4uHtaF0WJcSaWFZcmXuIUZKDSUmUN5kbKMSXlJ9SmZFYnBFfVJqT WnyIUYKDWUmEV/k/UI43JbGyKrUoHyYlzcGiJM7rYaIdJSSQnliSmp2aWpBaBJOV4eBQkuAN BWkULEpNT61Iy8wpQUgzcXCCDOcBGj4JbHhxQWJucWY6RP4Uoy7HjRev25iFWPLy81KlxHkt QYoEQIoySvPg5oDSjkT2/ppXjOJAbwnzGoBU8QBTFtykV0BLmICWXDmxBGRJSSJCSqqBkc9j R4ujvOGs3+8uisZ6bH/zVlhip7K6toaJssxG/QaVd2v37OT0OXTUTdPv5bwp1su8d07mb03M T4+zN3z23+BrQEa84e7bB9ctVRRfqzA7fHryEmcZjUkH2X/e9E5Q++d1gkXP7GXxs+eKX/q3 XYxUWBavEhR27MR/j2ltr/VPHl23WqL4sRJLcUaioRZzUXEiADE680IWAwAA Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2018 22:33:44 -0000 On Mon, Mar 12, 2018 at 09:08:05AM +0100, peter van der Stok wrote: > Hi Jim, > > thanks for the comments. See my reactions below. > Jim Schaad schreef op 2018-03-10 22:15: > > I agree with Hannes, this version of the document is much cleaner and > > much > > clearer. I think that it has solved most of the problems that I > > initially > > had with the draft. It is not ready to progress as there are still > > sections > > that are marked as TODO. But it is much closer to finishing that it > > was. > > That sounds hopeful. Agree about the TODOs > > > > I still have a couple of comments from a quick read through of the > > document. > > > > In section 2 - There will be a problem in that the port format > > extension is > > being eliminated in TLS 1.3 - We may want to divide this into a 1.2 and > > 1.3 > > section for clarity. > > You mean for backward compatibility? For forwards compatibility, mostly, so we don't claim to require something that does not exist in TLS 1.3. -Ben From nobody Tue Mar 13 12:04:53 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9ED7A126B7E for ; Tue, 13 Mar 2018 12:04:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Aip_pNOj-DfZ for ; Tue, 13 Mar 2018 12:04:49 -0700 (PDT) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABBB51200F1 for ; Tue, 13 Mar 2018 12:04:49 -0700 (PDT) X-AuditID: 1209190c-fafff70000004fad-76-5aa820cfe6e1 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 33.73.20397.0D028AA5; Tue, 13 Mar 2018 15:04:48 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id w2DJ4i8p000902 for ; Tue, 13 Mar 2018 15:04:46 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w2DJ4fnO014603 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 13 Mar 2018 15:04:44 -0400 Date: Tue, 13 Mar 2018 14:04:41 -0500 From: Benjamin Kaduk To: ace@ietf.org Message-ID: <20180313190441.GM55987@kduck.kaduk.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrAIsWRmVeSWpSXmKPExsUixG6nontBYUWUwZl+fYvv33qYHRg9liz5 yRTAGMVlk5Kak1mWWqRvl8CV0Xh0JmvBbc6KU9NWsjcwdnF0MXJySAiYSDw+3MTSxcjFISSw mEni9L13bCAJIYEjjBJfPqVAJF4wSbx7f5IJJMEioCqxYO5+MJtNQEWiofsyM4gtIiAgMffj ZzBbWEBBYv+/W6wgNi/Qhs9fdjJD2IISJ2c+YQGxmQXUJf7MuwQU5wCypSWW/+OACMtLNG+d DVYuKqAssbfvEPsERr5ZSLpnIemehdA9C0n3AkaWVYyyKblVurmJmTnFqcm6xcmJeXmpRbqG ermZJXqpKaWbGEGBxynJs4PxzBuvQ4wCHIxKPLwRl5ZHCbEmlhVX5h5ilORgUhLl3cK1IkqI Lyk/pTIjsTgjvqg0J7X4EKMEB7OSCO9WGaAcb0piZVVqUT5MSpqDRUmc191EO0pIID2xJDU7 NbUgtQgmK8PBoSTB+0AeqFGwKDU9tSItM6cEIc3EwQkynAdoOBdIDW9xQWJucWY6RP4Uoy7H jRev25iFWPLy81KlxHnTQIoEQIoySvPg5oAShkT2/ppXjOJAbwnztoFU8QCTDdykV0BLmICW XDmxBGRJSSJCSqqBka/n2T1rJ7vdH/gvC3Z4qwQpuU7KqCxaXR790NVk03nbiKiJGaKz1CQX 9gfO/NfP+tPUct2H66w8n9Z+DZinMrNK0EfyQKes04/zgvG7YwQeZ82KbOuukgu+c5D1zRPl dZ5xN47FCr5tdryskM5d5RhRMn2LWU7YY637/TurHUtfPYyKemyqxFKckWioxVxUnAgAgYR0 B/MCAAA= Archived-At: Subject: [Ace] Draft agenda for London X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 19:04:52 -0000 Hi all, I just (belatedly) posted a draft agenda to the datatracker (https://datatracker.ietf.org/doc/agenda-101-ace/), also copied below. Please holler if there are obvious bugs, you requested time but didn't get a response, etc. I know it's a little bit of short notice, but to the speakers: please get some form of slides to the chairs this week (before Saturday) so that we can look over them in advance. We should not be scrambling on Monday morning! Thanks, Ben for the chairs %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% ACE WG IETF 101, Monday March 19, 2018 0930h-1200h (2.5h) Chairs -- Note Well and agenda bashing, 5min Chairs -- document status update, 5min Mike -- draft-ietf-ace-cwt-proof-of-possession, 10min Peter -- draft-ietf-ace-coap-est, 10min GÅ‘ran -- draft-selander-ace-coap-est-oscore, 5min Ludwig -- draft-ietf-ace-oauth-authz, 10min Ludwig -- draft-ietf-ace-dtls-authorize, 5min Ludwig -- draft-ietf-ace-oscore-profile, 5min Marco -- draft-tiloca-ace-oscoap-joining, 10min Francesca -- draft-palombini-ace-key-groupcomm, 10min GÅ‘ran -- key exchange for OSCORE (EDHOC vs. TLS-OSCORE), 15min GÅ‘ran -- scope of authorization work, 30min From nobody Tue Mar 13 18:40:41 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8FB2126B6D; Tue, 13 Mar 2018 18:40:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o9LpebAtepBn; Tue, 13 Mar 2018 18:40:38 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F199124BFA; Tue, 13 Mar 2018 18:40:37 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 1B1CB20091; Tue, 13 Mar 2018 21:49:10 -0400 (EDT) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 927828106B; Tue, 13 Mar 2018 21:40:36 -0400 (EDT) From: Michael Richardson To: draft-ietf-ace-coap-est@ietf.org, ace@ietf.org In-Reply-To: References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> X-Mailer: MH-E 8.6; nmh 1.7-RC3; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 01:40:40 -0000 --=-=-= Content-Type: text/plain peter van der Stok wrote: >> * In section 6- All proxies are required by CoAP blocking to re-assemble >> the entire message at the proxy. It can re-block things going to the next >> proxy. While there is no requirement that the proxy get the entire message >> before sending on pieces, this should be common practice and would be >> required for a CoAP/HTTP proxy. > Agree fully, we need to clarify that. If we are talking about CoAP->HTTP proxy, then clearly that's absolutely true. How could it be any other way? We can't do CoAP block mode over HTTP that I know of :-) There are other proxy types that we need to describe. >> * Should probably add a note in section 6 that any proxy that terminates >> the >> DTLS connection is going to be required to act as an RA. RAs are required >> to have the entire request for adding authentication as necessary. > This is visible in the figure of section 6, but needs elaboration in the > text. I don't understand why we have that paragraph. An end point that terminates the Pledge (D)TLS connection and acts as an RA *IS* a Join Registrar, not a Proxy. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlqofZQACgkQgItw+93Q 3WVmWwgApBT75SjNQVhg1V7IE+S52kHYz6ooe7g3pkwW8YkPKJDMlka84+MdIhje gWc4yvMPkkh/kDDql7zNBsoDUWsCe46NTVkgC+HiztAIm1ocTSsfpFY0bvnpa+tc JaMzHQlci38v1RuEtf6NCLu5MrDB77CkvfdHJNNfKppFGuroQM894XkzoWOt7NCI +rMbQstFgeIMCU9xkPbF8eoQ6gbR4wLmz7nY73UqOPdAoOHajLABLpSMLGcfNAKx ddiue3S4zhQTpvFcUpDQFy+d7VbB0oJP/QMXCM7/rVAZck47Cn0dMimGZrqYu4MV xXfi74uF4+VuGrCTy2Kg21CdKyxQSA== =19OS -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Mar 13 18:44:40 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04151126B6D; Tue, 13 Mar 2018 18:44:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eAZiqXcJNTHA; Tue, 13 Mar 2018 18:44:37 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D00B6124BFA; Tue, 13 Mar 2018 18:44:37 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 83AA420091; Tue, 13 Mar 2018 21:53:10 -0400 (EDT) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 0E6F88106B; Tue, 13 Mar 2018 21:44:37 -0400 (EDT) From: Michael Richardson To: Jim Schaad cc: draft-ietf-ace-coap-est@ietf.org, ace@ietf.org In-Reply-To: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> X-Mailer: MH-E 8.6; nmh 1.7-RC3; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 01:44:39 -0000 --=-=-= Content-Type: text/plain Jim Schaad wrote: > In section 2 - There will be a problem in that the port format extension is > being eliminated in TLS 1.3 - We may want to divide this into a 1.2 and 1.3 > section for clarity. I don't understand what you are referring to. What is the "port format extension" you are referring to, and where in section 2 do you think we are depending upon it? I'm thinking that you are jumping to a conclusion based upon some poorly written text on our part :-) But, since I think all the authors are ignorant of that extension, we must be misleading you unintentionally. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlqofoQACgkQgItw+93Q 3WW7oQf/TqDzEf5e91GQbnCeD/EMRR9oiuXMbaneK7/9Xa4QEJAooX6ErFe8f9y9 5mQlCxTAIGVLRmRqzs0gs4OiskDtGJ7F9e2JA0/VZEgSgdunTomxOBDBACFIqAHo LyW4dwM2E7kMXkR19QDTRz+XqkVtqPuGNd4eRkGmpU6bwwzDxrlcpUKZeWZ64y22 C3Z3p/hrecSfpQyzx5vNmYvBnKeGDkHOG7Q9OI/SLXcB/umom6gv5Tz73eXMbHFf 3vTE8uKB1GgAblY9oQTR0Z1ZYeIOXy0RvhEgswLubUlRBxsI1u2188WkKg7CNNIz qR6LfJXQjKMNUCNMji2slMAMFmF1sA== =7zmN -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Mar 13 18:52:43 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55045124BFA; Tue, 13 Mar 2018 18:52:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id az0_kF2DS26d; Tue, 13 Mar 2018 18:52:41 -0700 (PDT) Received: from dmz-mailsec-scanner-3.mit.edu (dmz-mailsec-scanner-3.mit.edu [18.9.25.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1BC81205D3; Tue, 13 Mar 2018 18:52:40 -0700 (PDT) X-AuditID: 1209190e-6b9ff70000004b96-de-5aa8806770fe Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-3.mit.edu (Symantec Messaging Gateway) with SMTP id 66.5E.19350.76088AA5; Tue, 13 Mar 2018 21:52:39 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id w2E1qcgb016383; Tue, 13 Mar 2018 21:52:39 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w2E1qYWY000566 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Mar 2018 21:52:37 -0400 Date: Tue, 13 Mar 2018 20:52:34 -0500 From: Benjamin Kaduk To: Michael Richardson Cc: Jim Schaad , draft-ietf-ace-coap-est@ietf.org, ace@ietf.org Message-ID: <20180314015234.GX55987@kduck.kaduk.org> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> <25368.1520991877@obiwan.sandelman.ca> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="RIYY1s2vRbPFwWeW" Content-Disposition: inline In-Reply-To: <25368.1520991877@obiwan.sandelman.ca> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrHKsWRmVeSWpSXmKPExsUixCmqrJvesCLKoOuohcX3bz3MFmt/7mK2 WD39O5tFz6F+dgcWj41zprN5LFnyk8mjZc4e5gDmKC6blNSczLLUIn27BK6MpbOuMRXc56+Y sW0CYwPjdt4uRk4OCQETid5nD1i7GLk4hAQWM0l8fbeOEcLZyChxfMp/dgjnKpPEi7UdzF2M HBwsAqoSGx+Fg3SzCahINHRfZgaxRQT0JJYfecYIYjMLJEh8vXacFaRcWEBX4tdFdZAwL9Cy P1deg4WFBDIkvhzIgggLSpyc+YQForNMYv6s1ywgJcwC0hLL/3GAhDkFjCWu3HzNBGKLCihL 7O07xD6BUWAWku5ZSLpnIXRDhLUkbvx7yYQhrC2xbOFrZgjbVmLduvcsCxjZVzHKpuRW6eYm ZuYUpybrFicn5uWlFuka6+VmluilppRuYgRHhyTfDsZJDd6HGAU4GJV4eBkuLI8SYk0sK67M PcQoycGkJMprWrsiSogvKT+lMiOxOCO+qDQntfgQowrQrkcbVl9glGLJy89LVRLh3SoDVMeb klhZlVqUD1MmzcGiJM7rbqIdJSSQnliSmp2aWpBaBJOV4eBQkuCdVw/UKFiUmp5akZaZU4KQ ZuLgPMQowcEDNHwJSA1vcUFibnFmOkT+FKMux40Xr9uYhcAukBLnLQApEgApyijNg5sDSnYS 2ftrXjGKA70ozOsLUsUDTJRwk14BLWECWnLlxBKQJSWJCCmpBsZp6gHz5u7rtJUV2HLWM7fb vv/rlQgzmytZsZVJ2QIvvu5r3++vVfRgdmb59lX+zOs2BvtKm930/PC/tS9bsiq/U+Kd69SN E36c1fn5azLDrjIZe9uI2RGHa/4sVXt3kumdlP1qtwyv/XsvTjO8Hb9Wdkb95ub0U4vTZXaZ 3rUQ3DVtby1PkKcSS3FGoqEWc1FxIgCG2NxjUQMAAA== Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 01:52:42 -0000 --RIYY1s2vRbPFwWeW Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Mar 13, 2018 at 09:44:37PM -0400, Michael Richardson wrote: >=20 > Jim Schaad wrote: > > In section 2 - There will be a problem in that the port format exte= nsion is > > being eliminated in TLS 1.3 - We may want to divide this into a 1.2= and 1.3 > > section for clarity. >=20 > I don't understand what you are referring to. >=20 > What is the "port format extension" you are referring to, and where in > section 2 do you think we are depending upon it? [...] DTLS implementations MUST use the Supported Elliptic Curves and Supported Point Formats Extensions [RFC4492]; the uncompressed point format MUST be supported; [RFC6090] can be used as an implementation method. The uncompressed point format only exists in (D)TLS 1.2 and lower. (TLS 1.3 does not separately negotiate point format, rather, the point format is determined by the group/curve to be used.) I think the fix would just be something like "the uncompressed point format MUST be supported for DTLS versions prior to 1.3". -Ben --RIYY1s2vRbPFwWeW Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQG3BAABCgAdFiEE2WGV4E2ARf9BYP0XKNmm82TrdRIFAlqogFwACgkQKNmm82Tr dRIUOQwdEqIqHIHyEsw2nqMw8mf0F1hQOBc2ZDBEXuOGDxEEo1gnQqdKbIUnUS8x 69ghPF4yO2enyKVsvNpkhmk2j94Mo+SDgrO7ZcSBebwImtnXjv1e8uWBwZtZVqmI WapvQcJpddGRU+v0qgrc8Fg/NjNvFlzrIeNfwN12VtagoDf12RCEhOWtAP5F5dZl nvQw/fjQv/APQSbyOfVC72o96rbXHVpUW8I4aJxCSuqWQDSNRdG2VZB5fo5TbcFm Hzxfnunlh816UytYu+Ga/ggTo49t8xItbLGmzNy/pMRQDVUq8kF4m3wPpGS8CQkw 213giLWe5cqV9CEmVdSLWHo/AJjct5X8ar0k6woKa8mel9uIgFliRuZQh58tN3AS N2iXXXRL4cDsrJp522LumZHGV2SwL7gGlhN2Nk491HJgIVZ481YSDWX1axNx3lQU 8j/ENVdcpQeLiUXIwC8RJuWyGS7BYaR7ac6AQSTDNB04eZshm93j+iwzKFBruaZ3 vl+/po6Pav9iuA== =evWd -----END PGP SIGNATURE----- --RIYY1s2vRbPFwWeW-- From nobody Wed Mar 14 01:18:48 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 593151204DA; Wed, 14 Mar 2018 01:18:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nN4lSJGndERr; Wed, 14 Mar 2018 01:18:45 -0700 (PDT) Received: from lb2-smtp-cloud9.xs4all.net (lb2-smtp-cloud9.xs4all.net [194.109.24.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB4101200C5; Wed, 14 Mar 2018 01:18:44 -0700 (PDT) Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:212]) by smtp-cloud9.xs4all.net with ESMTPA id w1cQeyKuZAB0ww1cQeX1NY; Wed, 14 Mar 2018 09:18:43 +0100 Received: from 2001:983:a264:1:15d9:bea4:1c5b:2143 by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Wed, 14 Mar 2018 09:18:42 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 14 Mar 2018 09:18:42 +0100 From: peter van der Stok To: Michael Richardson Cc: draft-ietf-ace-coap-est@ietf.org, ace@ietf.org Organization: vanderstok consultancy Reply-To: consultancy@vanderstok.org Mail-Reply-To: consultancy@vanderstok.org In-Reply-To: <24297.1520991636@obiwan.sandelman.ca> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> <24297.1520991636@obiwan.sandelman.ca> Message-ID: X-Sender: stokcons@xs4all.nl User-Agent: XS4ALL Webmail X-CMAE-Envelope: MS4wfMsg9h1faPYUX3ULpeKs2hPyxbt/dJ/YvqjqSKXdLGnvTvSercmsGqaJkNZ9P/3KX+EZYCGxPO8WsjBYtcBDQTN7CpywaI/tH+LtwoHNg2Oi8n1Olh3u z4tA1r2s7Q8al7WdzyGMpL/VPjzgccUXza5hFikdIGgYUhlZ04V8ImpeCPkweTLrRrm4kyA3eX8UL8Z6bW1M0WxutCBYrQAX7/rlmiiSjGD0uyhW39MBH1XX ZVuuPleR2UnPOgCnVxhx/A== Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 08:18:47 -0000 > >> * Should probably add a note in section 6 that any proxy that > terminates > >> the > >> DTLS connection is going to be required to act as an RA. RAs > are required > >> to have the entire request for adding authentication as > necessary. > > > This is visible in the figure of section 6, but needs elaboration > in the > > text. > > I don't understand why we have that paragraph. > An end point that terminates the Pledge (D)TLS connection and acts as > an RA *IS* a Join Registrar, not a Proxy. > Thus is outside the BRSKI context, and thus a proxy with RA (separate or not) From nobody Wed Mar 14 10:58:20 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE5D4126BF6; Wed, 14 Mar 2018 10:58:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.8 X-Spam-Level: X-Spam-Status: No, score=-0.8 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KGgqu5s4EZk7; Wed, 14 Mar 2018 10:58:12 -0700 (PDT) Received: from mail-it0-x233.google.com (mail-it0-x233.google.com [IPv6:2607:f8b0:4001:c0b::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0750126BF0; Wed, 14 Mar 2018 10:58:11 -0700 (PDT) Received: by mail-it0-x233.google.com with SMTP id k79-v6so5824618ita.2; Wed, 14 Mar 2018 10:58:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=C18h4/w3iduqPrf8g1VPMvj0WeP4DA4GRaQneK0wjgg=; b=mWei13J81VHCk86iZuCu7E3pOnUSyGqcL3gf6Cy+y7bYfDfE8RINOLmqKpALKE9E1V +rrFflmypaa/mT+eaT5rE+FXUi+woB0fSRmlwRnMJTASHexTo4yupxnOtnc/C4LuSY7y VxKqh9E9bO5s5gaacl8vc361Kw8/gZ1af1iWkjsGSnzBxlWdKjs+gDMC3fNzN8sDNrFU HI+uuwdqIA/GutAFsRIj8YfnTkZvxGrSSDpqjc60/N1lVDq1oMf7WYV2uN4F/F9WCrpp WDkREcKV5ds7yhCGdp7KPGJ88qBRSfZqOnoJe8AIwUVzfRFbg0lsBE8URCAso2xV+5Pe cbqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=C18h4/w3iduqPrf8g1VPMvj0WeP4DA4GRaQneK0wjgg=; b=UFNYrq3sjFZCNLp6zqKElXrc6785iNw2TEqkRC4eVWSJY0yTWv/23zYXqiMrvXrGhj Onc4l5fYhiT1rkDUt4hM/hCPhw9QL8mvx5EkaWJxsS+IHPamR6zFF9FxR7KZC3qTjZBC V3rLA5l8cG0CK2oBSc1PET5m/INNRfKZ1gLzHTJDe2YzwEAPprsRz+4ru5Yi0rJJCiMD O++5xR10AM0YRn/HONPaC3sFj7jyQP2rLOeSqlV4FB0fZg7+5jFv3+gfZ/p60xlKyyyu xyudauxBEPBC7nsZX7zewmzx/zAQUQAegVpQhQGwrSOuf/pm5Oq5zSpIQi52eTrYL1nH //yw== X-Gm-Message-State: AElRT7HMZrO0iXeenmATSmxpuYo4Z/zd1cKUy59i1McYXGQtboKXSTYp abGBThz9W4/HMcsY6GtEhb9aE176MbLamgTOJKE= X-Google-Smtp-Source: AG47ELu24U8HG3WulwU1c6rAhJKhnso3yxOAf3SKDUAIYp24yiTJhgmWABKCttXj2U7YhBBYTlIemyDMgbxsaFJiYMU= X-Received: by 2002:a24:8c03:: with SMTP id j3-v6mr3223807itd.66.1521050291245; Wed, 14 Mar 2018 10:58:11 -0700 (PDT) MIME-Version: 1.0 Received: by 10.192.156.137 with HTTP; Wed, 14 Mar 2018 10:57:30 -0700 (PDT) In-Reply-To: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> References: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> From: Kathleen Moriarty Date: Wed, 14 Mar 2018 13:57:30 -0400 Message-ID: To: Eric Rescorla Cc: The IESG , ace-chairs@ietf.org, Benjamin Kaduk , draft-ietf-ace-cbor-web-token@ietf.org, ace@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [Ace] Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 17:58:14 -0000 Hi Mike and authors, Could you please respond to see if we can wrap this up? Thanks, Kathleen On Wed, Mar 7, 2018 at 3:40 PM, Eric Rescorla wrote: > Eric Rescorla has entered the following ballot position for > draft-ietf-ace-cbor-web-token-13: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > The claim values defined in this specification MUST NOT be prefixed > with any CBOR tag. For instance, while CBOR tag 1 (epoch-based date/ > time) could logically be prefixed to values of the "exp", "nbf", and > "iat" claims, this is unnecessary, since the representation of the > claim values is already specified by the claim definitions. Tagging > claim values would only take up extra space without adding > information. However, this does not prohibit future claim > definitions from requiring the use of CBOR tags for those specific > claims. > > Why do you need a MUST NOT here? This seems like not really an interop requirement > > > 4. Verify that the resulting COSE Header includes only parameters > and values whose syntax and semantics are both understood and > supported or that are specified as being ignored when not > understood. > > I'm surprised to find that this is not a generic 8152 processing rule. > Can you explain why this is necessary here? > > -- Best regards, Kathleen From nobody Wed Mar 14 14:35:08 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66B44127775; Wed, 14 Mar 2018 14:35:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JB7X9uEPAIzO; Wed, 14 Mar 2018 14:34:58 -0700 (PDT) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0110.outbound.protection.outlook.com [104.47.33.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 887DB1276AF; Wed, 14 Mar 2018 14:34:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=aZlAH/7NgEbi1W64B2HoI2RNwyEXOZqPpA6iGVztqDc=; b=QHfQSHaHZXgMDlOSLdNjRiB3/WrXbi9yxiHNHi5ZAl66AE34aHMTBGM+joHswajmnfzuYtase+YLF9oaQSHmAlVVVoy09Lfja2JSTm5sUyn+4dze/YTzuiK3VrL25lMy8m3B6a3Ume2JkPqNKOm4OJk5ZYabmHHk9jX0tQCgKIQ= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1056.namprd21.prod.outlook.com (52.132.115.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.609.3; Wed, 14 Mar 2018 21:34:52 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::94b3:487e:3b44:983e]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::94b3:487e:3b44:983e%2]) with mapi id 15.20.0609.003; Wed, 14 Mar 2018 21:34:52 +0000 From: Mike Jones To: Eric Rescorla , The IESG , "Kathleen.Moriarty.ietf@gmail.com" CC: "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "kaduk@mit.edu" , "ace@ietf.org" Thread-Topic: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) Thread-Index: AQHTtlR5Mrb6w0KcG0myzjot6hlJVKPQRs5g Date: Wed, 14 Mar 2018 21:34:51 +0000 Message-ID: References: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> In-Reply-To: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [79.7.33.193] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1056; 7:7o/SeLJvc2hSPX4wgLGQMZmpqR2VTvS/oPCwTvzerYlXgBieroewlPFBzARJdevxHhnWsT8NHcGTU0/GEbovX8UTgV9kmH15+Bpwh7A2K3jdub8gGeVZPwhsn/D+RPwtxPZH4LaMOpikBO4L8QdTm8t7RQXp3O6/p9QnRbWdutVEQl1a/HAdcuTEk8dT055oevOfMjkLPfSJ8WN+WrfrDPsPBTaSuKca+t9YkAKZ6+1Jte8lzrPzsfiK0huIgQSb; 20:qmK0UpzQ5ZbM1/LaA+Mx6tNC7I/Wb5mhJ5+ygU6XJJI5qPhqtQ89HV7qVjU0VJYR7PGCwssp3ClcPHSrSevE6iA8i6dd6Cl51ucSFvDgNOoNbmK2gCz9NmP99UfsG20tHyM3FxmKYDXKMO58ethX9LyIHpM49rHsdlXUK4DneN8= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: ea85c5dc-f413-48f4-26a6-08d589f36bc7 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:SN6PR2101MB1056; x-ms-traffictypediagnostic: SN6PR2101MB1056: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3231221)(944501270)(52105095)(3002001)(6055026)(61426038)(61427038)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123560045)(6072148)(201708071742011); SRVR:SN6PR2101MB1056; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1056; x-forefront-prvs: 0611A21987 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(346002)(396003)(39860400002)(39380400002)(376002)(51914003)(199004)(189003)(13464003)(39060400002)(10290500003)(10090500001)(2501003)(2900100001)(54906003)(102836004)(110136005)(6346003)(6436002)(8990500004)(4326008)(5250100002)(6506007)(97736004)(9686003)(6306002)(22452003)(68736007)(53936002)(86612001)(478600001)(5660300001)(99286004)(316002)(53546011)(105586002)(305945005)(81156014)(81166006)(8676002)(66066001)(6246003)(7736002)(26005)(55016002)(3846002)(72206003)(6116002)(74316002)(2950100002)(76176011)(3660700001)(8936002)(33656002)(25786009)(106356001)(59450400001)(186003)(2906002)(3280700002)(7696005)(14454004)(229853002)(966005)(86362001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1056; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: wmiQ42OCNNR9qDCEIR0usW1ln7Swysi8q8fdEHXbzavKkm8a8Q4s8O+jd/xICmXqSqOxne3A9lQNZYgh+xblOj23Gv3efl785kFs9eNhQfZRoh38bCIlqKhGCnq++sqBwAFyoO1waUiQvSc8vQa++0oHYcLNbknQekjdUHNyZLB2ZzFpa4yaB0ypabGoXWMJhuiNUH0NQqZsmy6UzE+U1mSmo9tS/4MuC9ffVhNZ73frL0+KgIMIhT4bQSgMQ9ZVzJZdKdGaMX6UM3JbNpvooRFSBYU/k6KDVuapEqePnvmE0YASul8O6QHnX3uHx69zE9O6W1UajWxoxNOj7FI0Ng== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: ea85c5dc-f413-48f4-26a6-08d589f36bc7 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Mar 2018 21:34:51.9658 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1056 Archived-At: Subject: Re: [Ace] Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 21:35:01 -0000 SGkgRWtyLiAgVGhhbmtzIGZvciB0aGUgcmV2aWV3IGNvbW1lbnRzLiAgUmVzcG9uc2VzIGFyZSBp bmxpbmUgYmVsb3csIHByZWZpeGVkIGJ5ICJNaWtlPiIuLi4NCg0KLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCkZyb206IEVyaWMgUmVzY29ybGEgPGVrckBydGZtLmNvbT4gDQpTZW50OiBXZWRu ZXNkYXksIE1hcmNoIDcsIDIwMTggMTI6NDAgUE0NClRvOiBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9y Zz4NCkNjOiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbkBpZXRmLm9yZzsgYWNlLWNoYWly c0BpZXRmLm9yZzsga2FkdWtAbWl0LmVkdTsgYWNlQGlldGYub3JnDQpTdWJqZWN0OiBFcmljIFJl c2NvcmxhJ3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLTEz OiAod2l0aCBDT01NRU5UKQ0KDQpFcmljIFJlc2NvcmxhIGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dp bmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4tMTM6 IE5vIE9iamVjdGlvbg0KDQpXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0 IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwgZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGlu IHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXMgaW50cm9kdWN0b3J5 IHBhcmFncmFwaCwgaG93ZXZlci4pDQoNCg0KUGxlYXNlIHJlZmVyIHRvIGh0dHBzOi8vd3d3Lmll dGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KZm9yIG1vcmUgaW5m b3JtYXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCg0KDQpU aGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZv dW5kIGhlcmU6DQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWFj ZS1jYm9yLXdlYi10b2tlbi8NCg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkNPTU1FTlQ6DQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQoNCiAgIFRoZSBjbGFpbSB2YWx1ZXMgZGVmaW5lZCBpbiB0aGlzIHNwZWNpZmljYXRp b24gTVVTVCBOT1QgYmUgcHJlZml4ZWQNCiAgIHdpdGggYW55IENCT1IgdGFnLiAgRm9yIGluc3Rh bmNlLCB3aGlsZSBDQk9SIHRhZyAxIChlcG9jaC1iYXNlZCBkYXRlLw0KICAgdGltZSkgY291bGQg bG9naWNhbGx5IGJlIHByZWZpeGVkIHRvIHZhbHVlcyBvZiB0aGUgImV4cCIsICJuYmYiLCBhbmQN CiAgICJpYXQiIGNsYWltcywgdGhpcyBpcyB1bm5lY2Vzc2FyeSwgc2luY2UgdGhlIHJlcHJlc2Vu dGF0aW9uIG9mIHRoZQ0KICAgY2xhaW0gdmFsdWVzIGlzIGFscmVhZHkgc3BlY2lmaWVkIGJ5IHRo ZSBjbGFpbSBkZWZpbml0aW9ucy4gIFRhZ2dpbmcNCiAgIGNsYWltIHZhbHVlcyB3b3VsZCBvbmx5 IHRha2UgdXAgZXh0cmEgc3BhY2Ugd2l0aG91dCBhZGRpbmcNCiAgIGluZm9ybWF0aW9uLiAgSG93 ZXZlciwgdGhpcyBkb2VzIG5vdCBwcm9oaWJpdCBmdXR1cmUgY2xhaW0NCiAgIGRlZmluaXRpb25z IGZyb20gcmVxdWlyaW5nIHRoZSB1c2Ugb2YgQ0JPUiB0YWdzIGZvciB0aG9zZSBzcGVjaWZpYw0K ICAgY2xhaW1zLg0KDQpXaHkgZG8geW91IG5lZWQgYSBNVVNUIE5PVCBoZXJlPyBUaGlzIHNlZW1z IGxpa2Ugbm90IHJlYWxseSBhbiBpbnRlcm9wIHJlcXVpcmVtZW50DQoNCk1pa2U+IFRoaXMgcmVx dWlyZW1lbnQgd2FzIGFkZGVkIHRvIHNpbXBsaWZ5IGJvdGggcHJvZHVjZXJzIGFuZCBjb25zdW1l cnMgb2YgdGhlc2UgdG9rZW5zLCBhZnRlciBhIHdvcmtpbmcgZ3JvdXAgZGlzY3Vzc2lvbi4gIE5v dCBoYXZpbmcgdG8gaGF2ZSBjb2RlIHRvIHZhbGlkYXRlLCBwYXJzZSBhbmQgdGhlbiB0aHJvdyBh d2F5IHRhZ3MgcHJlZml4aW5nIGNsYWltcyBvZiBrbm93biB0eXBlcyBib3RoIG1ha2VzIHJlcHJl c2VudGF0aW9ucyBzbWFsbGVyIGFuZCByZXF1aXJlcyBsZXNzIGNvZGUuICBTaW5jZSB0aGUgdGFn cyBhZGQgbm8gdmFsdWUgZm9yIHRoZXNlIGNsYWltcywgaXQgc2VlbWVkIGJldHRlciB0byByZXF1 aXJlIHRoYXQgdGhleSBiZSBvbWl0dGVkLg0KDQogIDQuICBWZXJpZnkgdGhhdCB0aGUgcmVzdWx0 aW5nIENPU0UgSGVhZGVyIGluY2x1ZGVzIG9ubHkgcGFyYW1ldGVycw0KICAgICAgIGFuZCB2YWx1 ZXMgd2hvc2Ugc3ludGF4IGFuZCBzZW1hbnRpY3MgYXJlIGJvdGggdW5kZXJzdG9vZCBhbmQNCiAg ICAgICBzdXBwb3J0ZWQgb3IgdGhhdCBhcmUgc3BlY2lmaWVkIGFzIGJlaW5nIGlnbm9yZWQgd2hl biBub3QNCiAgICAgICB1bmRlcnN0b29kLg0KDQpJJ20gc3VycHJpc2VkIHRvIGZpbmQgdGhhdCB0 aGlzIGlzIG5vdCBhIGdlbmVyaWMgODE1MiBwcm9jZXNzaW5nIHJ1bGUuDQpDYW4geW91IGV4cGxh aW4gd2h5IHRoaXMgaXMgbmVjZXNzYXJ5IGhlcmU/DQoNCk1pa2U+IFRoaXMgaW50ZW50aW9uYWxs eSBwYXJhbGxlbHMgdGhlIHNhbWUgcnVsZSBpbiBKV1QgKGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv aHRtbC9yZmM3NTE5I3NlY3Rpb24tNy4yLCBzdGVwIDUpLiAgSXQncyBzYXlpbmcgdGhhdCB5b3Ug aGF2ZSB0byB2YWxpZGF0ZSB0aGF0IHRoZSBwYXJhbWV0ZXJzIGRlc2NyaWJpbmcgdGhlIHBhcmFt ZXRlcnMgZGVzY3JpYmluZyB0aGUgY3J5cHRvZ3JhcGhpYyBvcGVyYXRpb25zIHBlcmZvcm1lZC4N Cg0KCQkJCS0tIE1pa2UNCg0K From nobody Wed Mar 14 14:38:39 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32DF1127873 for ; Wed, 14 Mar 2018 14:38:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TCTT9mnJnb_Q for ; Wed, 14 Mar 2018 14:38:27 -0700 (PDT) Received: from mail-qk0-x22c.google.com (mail-qk0-x22c.google.com [IPv6:2607:f8b0:400d:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DFADB12D7EC for ; Wed, 14 Mar 2018 14:38:26 -0700 (PDT) Received: by mail-qk0-x22c.google.com with SMTP id z184so5200788qkc.1 for ; Wed, 14 Mar 2018 14:38:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=vvVjZxC5V2C0Fr8QmXo8jUjnhpGY+FlPr4IRwc+lC2U=; b=PdYakkG8nM3l3WOH2bs43LzPzWlRdlKgoZjQGSh/a9OlCkNI+ua5lamUWMAaaC8dC8 TeKy1YfgXo//XZNO1+0GmR2uW3vJ9LIpGoMbkuQ3F1pks9L4pM8xrtl8Yo8ZmCQnU3N+ 5GfRBW+EBYmJc1P22xZYOuWP9p3pjjUeYSnNPs1UYQROnWFrRJPgixfiyQACcPmM9uuJ FlIpOKJsLNNbCLQlgvJjakhumxiEjYM+btHk/mGYlLhN+acvsvrFU7ikXdvJQ0TV5b09 L7BKuiLXvyszJ5gHSQxEtK02JTXyYu/7fYWBRnC5eUV6voTBkJNKp6AOkKM7Ww0vHhBR H+cQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=vvVjZxC5V2C0Fr8QmXo8jUjnhpGY+FlPr4IRwc+lC2U=; b=sgZ1EC4pmObPeZ4kI+8kT1FgzeADiERi9vHF+vc71S0XTYBaHOIndtZ9LUncm7wYJH +u3/6R24ZGYwQt8fm0eTLm68Pm3V2hm6cxpDBdfpMYoYRGkl8SVq/IHzfJLef2ZctOYe IH8JUttrGpsiPdQzuvUl1QU7IyTaApGYi/KmoVcOBvF8wAE7C74J7KiqFKrHJpWjiLsw rmyWc8F+jrQqQHsq37xxo/moxegOxoreK6hr+2t9oKFgEzTp9QL3pkyLtDNQJrJvdU5z Y8P2jXoI2nfoSuwGqmauYyGQnUqYaES9ADIIuvDkc+85fwP8vGBfqwzO7J6QSwCx/qcv q02g== X-Gm-Message-State: AElRT7Ggkj0I63jqgmijhvLutRKSDtjMj7GEYgOk+PkveX27ECaLyR0c sWqtIV8sSuwIkN/ChXje4BiQvYD46pOSPoWDZUhRtQ== X-Google-Smtp-Source: AG47ELtr5B/Oq/sWheC3bhMF7K+EofbuTH4+Zl3e3rHUDJGYzhW/BaJsZfP6aafSHI12Fwn9hsvbNKCEZkbfSOlUKKQ= X-Received: by 10.55.89.7 with SMTP id n7mr9367688qkb.15.1521063505952; Wed, 14 Mar 2018 14:38:25 -0700 (PDT) MIME-Version: 1.0 Received: by 10.200.37.234 with HTTP; Wed, 14 Mar 2018 14:37:45 -0700 (PDT) In-Reply-To: References: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> From: Eric Rescorla Date: Wed, 14 Mar 2018 14:37:45 -0700 Message-ID: To: Mike Jones Cc: The IESG , "Kathleen.Moriarty.ietf@gmail.com" , "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "kaduk@mit.edu" , "ace@ietf.org" Content-Type: multipart/alternative; boundary="001a114c91aaf415a605676631ff" Archived-At: Subject: Re: [Ace] Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 21:38:33 -0000 --001a114c91aaf415a605676631ff Content-Type: text/plain; charset="UTF-8" On Wed, Mar 14, 2018 at 2:34 PM, Mike Jones wrote: > Hi Ekr. Thanks for the review comments. Responses are inline below, > prefixed by "Mike>"... > > -----Original Message----- > From: Eric Rescorla > Sent: Wednesday, March 7, 2018 12:40 PM > To: The IESG > Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; > kaduk@mit.edu; ace@ietf.org > Subject: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: > (with COMMENT) > > Eric Rescorla has entered the following ballot position for > draft-ietf-ace-cbor-web-token-13: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > The claim values defined in this specification MUST NOT be prefixed > with any CBOR tag. For instance, while CBOR tag 1 (epoch-based date/ > time) could logically be prefixed to values of the "exp", "nbf", and > "iat" claims, this is unnecessary, since the representation of the > claim values is already specified by the claim definitions. Tagging > claim values would only take up extra space without adding > information. However, this does not prohibit future claim > definitions from requiring the use of CBOR tags for those specific > claims. > > Why do you need a MUST NOT here? This seems like not really an interop > requirement > > Mike> This requirement was added to simplify both producers and consumers > of these tokens, after a working group discussion. Not having to have code > to validate, parse and then throw away tags prefixing claims of known types > both makes representations smaller and requires less code. Since the tags > add no value for these claims, it seemed better to require that they be > omitted. > Thanks. Seems reasonable. ] > 4. Verify that the resulting COSE Header includes only parameters > and values whose syntax and semantics are both understood and > supported or that are specified as being ignored when not > understood. > > I'm surprised to find that this is not a generic 8152 processing rule. > Can you explain why this is necessary here? > > Mike> This intentionally parallels the same rule in JWT ( > https://tools.ietf.org/html/rfc7519#section-7.2, step 5). It's saying > that you have to validate that the parameters describing the parameters > describing the cryptographic operations performed. Sure. I don't think this is unreasonable, but why isn't a general rule for COSE messages rather than just CWT? -Ekr > > -- Mike > > --001a114c91aaf415a605676631ff Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Wed, Mar 14, 2018 at 2:34 PM, Mike Jones <Michael.Jones@m= icrosoft.com> wrote:
Hi Ekr= .=C2=A0 Thanks for the review comments.=C2=A0 Responses are inline below, p= refixed by "Mike>"...

-----Original Message-----
From: Eric Rescorla <ekr@rtfm.com>= ;
Sent: Wednesday, March 7, 2018 12:40 PM
To: The IESG <iesg@ietf.org>
Cc: draft-ietf-ac= e-cbor-web-token@ietf.org; = ace-chairs@ietf.org; kaduk@mit.edu= ; ace@ietf.org
Subject: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-= 13: (with COMMENT)

Eric Rescorla has entered the following ballot position for
draft-ietf-ace-cbor-web-token-13: No Objection

When responding, please keep the subject line intact and reply to all email= addresses included in the To and CC lines. (Feel free to cut this introduc= tory paragraph, however.)


Please refer to https://www.ietf.org/iesg/<= wbr>statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc= /draft-ietf-ace-cbor-web-token/



-----------------------------------------------------------------= -----
COMMENT:
-----------------------------------------------------------------= -----

=C2=A0 =C2=A0The claim values defined in this specification MUST NOT be pre= fixed
=C2=A0 =C2=A0with any CBOR tag.=C2=A0 For instance, while CBOR tag 1 (epoch= -based date/
=C2=A0 =C2=A0time) could logically be prefixed to values of the "exp&q= uot;, "nbf", and
=C2=A0 =C2=A0"iat" claims, this is unnecessary, since the represe= ntation of the
=C2=A0 =C2=A0claim values is already specified by the claim definitions.=C2= =A0 Tagging
=C2=A0 =C2=A0claim values would only take up extra space without adding
=C2=A0 =C2=A0information.=C2=A0 However, this does not prohibit future clai= m
=C2=A0 =C2=A0definitions from requiring the use of CBOR tags for those spec= ific
=C2=A0 =C2=A0claims.

Why do you need a MUST NOT here? This seems like not really an interop requ= irement

Mike> This requirement was added to simplify both producers = and consumers of these tokens, after a working group discussion.=C2=A0 Not = having to have code to validate, parse and then throw away tags prefixing c= laims of known types both makes representations smaller and requires less c= ode.=C2=A0 Since the tags add no value for these claims, it seemed better t= o require that they be omitted.

Thanks.= Seems reasonable.

]
=C2=A0 4.=C2=A0 Verify that the resulting COSE Header includes only paramet= ers
=C2=A0 =C2=A0 =C2=A0 =C2=A0and values whose syntax and semantics are both u= nderstood and
=C2=A0 =C2=A0 =C2=A0 =C2=A0supported or that are specified as being ignored= when not
=C2=A0 =C2=A0 =C2=A0 =C2=A0understood.

I'm surprised to find that this is not a generic 8152 processing rule.<= br> Can you explain why this is necessary here?

Mike> This intentionally parallels the same rule in JWT (https://tools.ietf.org/html/rfc7519#section-7.2, st= ep 5).=C2=A0 It's saying that you have to validate that the parameters = describing the parameters describing the cryptographic operations performed= .

Sure. I don't think this is unreasona= ble, but why isn't a general rule for COSE messages rather than just CW= T?

-Ekr
=C2=A0
=C2=A0
=C2=A0

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- Mike


--001a114c91aaf415a605676631ff-- From nobody Wed Mar 14 14:56:07 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D833F12D7EA; Wed, 14 Mar 2018 14:56:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gGV1ihKyjVmW; Wed, 14 Mar 2018 14:56:01 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0092.outbound.protection.outlook.com [104.47.37.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63CF8126E01; Wed, 14 Mar 2018 14:56:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ZZ4z8g1+aLNuIOT2xcJBfPWXleD0ivLqBLugQBJnKmE=; b=SFmBu55IukhhrtJjY9nT4f3XKTeYQrrTToIXc5nv7yDoAm/gk2aLm1Q3AN57Atqro/BQfPj8a0GNDdAf5LmPvAt6YvT4bQvG9LLn/y5nMtg1dwC7sBTWzmnuBKdc+bEuk3PetyAQDYwKRcLZpmEoIIjLOi5QoZfDVfr5kxeX9zM= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1134.namprd21.prod.outlook.com (52.132.114.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.548.13; Wed, 14 Mar 2018 21:55:59 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::94b3:487e:3b44:983e]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::94b3:487e:3b44:983e%2]) with mapi id 15.20.0609.003; Wed, 14 Mar 2018 21:55:59 +0000 From: Mike Jones To: Eric Rescorla CC: The IESG , "Kathleen.Moriarty.ietf@gmail.com" , "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "kaduk@mit.edu" , "ace@ietf.org" Thread-Topic: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) Thread-Index: AQHTtlR5Mrb6w0KcG0myzjot6hlJVKPQRs5ggAAF6YCAAAQLAA== Date: Wed, 14 Mar 2018 21:55:59 +0000 Message-ID: References: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [79.7.33.193] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1134; 20:AjouL/W8Fb6weaFrcB9R6goDtZ/EtmG5wdV7Ll6CYdo67qGNMrdB8K9I/Vgg0WPR/qTwnHoDTCa+VzElH9Gd4FkNHrGWLHSrvTNOJKlN4frwCeCVN84HNXFuLPz9yH8nWdpVmP2i4oMXEdVNleEBgTtWe9pfRehMUdECQTFo0M8= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 57cc0a2b-34bb-4aef-255a-08d589f65f68 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:SN6PR2101MB1134; x-ms-traffictypediagnostic: SN6PR2101MB1134: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(89211679590171)(120809045254105)(85827821059158)(21748063052155)(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231221)(944501270)(52105095)(3002001)(6055026)(61426038)(61427038)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:SN6PR2101MB1134; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1134; x-forefront-prvs: 0611A21987 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39860400002)(39380400002)(346002)(396003)(376002)(13464003)(129514003)(51914003)(199004)(189003)(102836004)(229853002)(3660700001)(53546011)(6246003)(236005)(966005)(53936002)(6506007)(6306002)(19609705001)(99286004)(7736002)(26005)(81166006)(22452003)(2950100002)(55016002)(54906003)(8936002)(606006)(8990500004)(790700001)(316002)(9686003)(6116002)(81156014)(68736007)(74316002)(76176011)(97736004)(86362001)(86612001)(72206003)(10090500001)(3846002)(2900100001)(39060400002)(7696005)(5250100002)(3280700002)(186003)(59450400001)(8676002)(66066001)(14454004)(54896002)(4326008)(5660300001)(33656002)(478600001)(10290500003)(6436002)(106356001)(6916009)(2906002)(105586002)(25786009); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1134; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: G3VLc2jsFTONrXmbfqqHnpPJy6pjAsdWjWG4EpFvAOD244ft1dyYoM+bcFFsXE2UeGJepVfYMn/ZhEBFi3gtAngE1yW1oGZ5ZxcP0a4p7srFGvLsCbGp0bmeRI0/r0KKpO6cxJG8dQqNy4d56VBBwPMdHDBPTsxSjqWhuIOWBDRTA4TSzMPwe0i646cViBDiulv5XKwhH+ybgs9NZcC7DUM5SK5ZJveY1DvXcxYVeVWnqYaTr+oPPjbjPX7RPfomcNZz9M3i8paqiwYwPq/E2/m8+S/igW9SY9jGShqG1GK6XFThYEjROcr4XR7mAsGuiAwJnjcrQZrwGdUqG5b9LQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943ADC8E52FA4D445FC7D76F5D10SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 57cc0a2b-34bb-4aef-255a-08d589f65f68 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Mar 2018 21:55:59.7476 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1134 Archived-At: Subject: Re: [Ace] Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 21:56:04 -0000 --_000_SN6PR2101MB0943ADC8E52FA4D445FC7D76F5D10SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzLCBFa3IuICBPbmUgbW9yZSByZXBseSB0byB5b3VyIGxhc3QgY29tbWVudCB0aGUgYm90 dG9tIG9mIHRoZSBtZXNzYWdl4oCmDQoNCkZyb206IEVyaWMgUmVzY29ybGEgPGVrckBydGZtLmNv bT4NClNlbnQ6IFdlZG5lc2RheSwgTWFyY2ggMTQsIDIwMTggMjozOCBQTQ0KVG86IE1pa2UgSm9u ZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4NCkNjOiBUaGUgSUVTRyA8aWVzZ0BpZXRm Lm9yZz47IEthdGhsZWVuLk1vcmlhcnR5LmlldGZAZ21haWwuY29tOyBkcmFmdC1pZXRmLWFjZS1j Ym9yLXdlYi10b2tlbkBpZXRmLm9yZzsgYWNlLWNoYWlyc0BpZXRmLm9yZzsga2FkdWtAbWl0LmVk dTsgYWNlQGlldGYub3JnDQpTdWJqZWN0OiBSZTogRXJpYyBSZXNjb3JsYSdzIE5vIE9iamVjdGlv biBvbiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0xMzogKHdpdGggQ09NTUVOVCkNCg0K DQoNCk9uIFdlZCwgTWFyIDE0LCAyMDE4IGF0IDI6MzQgUE0sIE1pa2UgSm9uZXMgPE1pY2hhZWwu Sm9uZXNAbWljcm9zb2Z0LmNvbTxtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4g d3JvdGU6DQpIaSBFa3IuICBUaGFua3MgZm9yIHRoZSByZXZpZXcgY29tbWVudHMuICBSZXNwb25z ZXMgYXJlIGlubGluZSBiZWxvdywgcHJlZml4ZWQgYnkgIk1pa2U+Ii4uLg0KDQotLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogRXJpYyBSZXNjb3JsYSA8ZWtyQHJ0Zm0uY29tPG1haWx0 bzpla3JAcnRmbS5jb20+Pg0KU2VudDogV2VkbmVzZGF5LCBNYXJjaCA3LCAyMDE4IDEyOjQwIFBN DQpUbzogVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc8bWFpbHRvOmllc2dAaWV0Zi5vcmc+Pg0KQ2M6 IGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRm LWFjZS1jYm9yLXdlYi10b2tlbkBpZXRmLm9yZz47IGFjZS1jaGFpcnNAaWV0Zi5vcmc8bWFpbHRv OmFjZS1jaGFpcnNAaWV0Zi5vcmc+OyBrYWR1a0BtaXQuZWR1PG1haWx0bzprYWR1a0BtaXQuZWR1 PjsgYWNlQGlldGYub3JnPG1haWx0bzphY2VAaWV0Zi5vcmc+DQpTdWJqZWN0OiBFcmljIFJlc2Nv cmxhJ3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLTEzOiAo d2l0aCBDT01NRU5UKQ0KDQpFcmljIFJlc2NvcmxhIGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dpbmcg YmFsbG90IHBvc2l0aW9uIGZvcg0KZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4tMTM6IE5v IE9iamVjdGlvbg0KDQpXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxp bmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwgZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRo ZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXMgaW50cm9kdWN0b3J5IHBh cmFncmFwaCwgaG93ZXZlci4pDQoNCg0KUGxlYXNlIHJlZmVyIHRvIGh0dHBzOi8vd3d3LmlldGYu b3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KZm9yIG1vcmUgaW5mb3Jt YXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCg0KDQpUaGUg ZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5k IGhlcmU6DQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWFjZS1j Ym9yLXdlYi10b2tlbi8NCg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkNPTU1FTlQ6DQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQoNCiAgIFRoZSBjbGFpbSB2YWx1ZXMgZGVmaW5lZCBpbiB0aGlzIHNwZWNpZmljYXRpb24g TVVTVCBOT1QgYmUgcHJlZml4ZWQNCiAgIHdpdGggYW55IENCT1IgdGFnLiAgRm9yIGluc3RhbmNl LCB3aGlsZSBDQk9SIHRhZyAxIChlcG9jaC1iYXNlZCBkYXRlLw0KICAgdGltZSkgY291bGQgbG9n aWNhbGx5IGJlIHByZWZpeGVkIHRvIHZhbHVlcyBvZiB0aGUgImV4cCIsICJuYmYiLCBhbmQNCiAg ICJpYXQiIGNsYWltcywgdGhpcyBpcyB1bm5lY2Vzc2FyeSwgc2luY2UgdGhlIHJlcHJlc2VudGF0 aW9uIG9mIHRoZQ0KICAgY2xhaW0gdmFsdWVzIGlzIGFscmVhZHkgc3BlY2lmaWVkIGJ5IHRoZSBj bGFpbSBkZWZpbml0aW9ucy4gIFRhZ2dpbmcNCiAgIGNsYWltIHZhbHVlcyB3b3VsZCBvbmx5IHRh a2UgdXAgZXh0cmEgc3BhY2Ugd2l0aG91dCBhZGRpbmcNCiAgIGluZm9ybWF0aW9uLiAgSG93ZXZl ciwgdGhpcyBkb2VzIG5vdCBwcm9oaWJpdCBmdXR1cmUgY2xhaW0NCiAgIGRlZmluaXRpb25zIGZy b20gcmVxdWlyaW5nIHRoZSB1c2Ugb2YgQ0JPUiB0YWdzIGZvciB0aG9zZSBzcGVjaWZpYw0KICAg Y2xhaW1zLg0KDQpXaHkgZG8geW91IG5lZWQgYSBNVVNUIE5PVCBoZXJlPyBUaGlzIHNlZW1zIGxp a2Ugbm90IHJlYWxseSBhbiBpbnRlcm9wIHJlcXVpcmVtZW50DQpNaWtlPiBUaGlzIHJlcXVpcmVt ZW50IHdhcyBhZGRlZCB0byBzaW1wbGlmeSBib3RoIHByb2R1Y2VycyBhbmQgY29uc3VtZXJzIG9m IHRoZXNlIHRva2VucywgYWZ0ZXIgYSB3b3JraW5nIGdyb3VwIGRpc2N1c3Npb24uICBOb3QgaGF2 aW5nIHRvIGhhdmUgY29kZSB0byB2YWxpZGF0ZSwgcGFyc2UgYW5kIHRoZW4gdGhyb3cgYXdheSB0 YWdzIHByZWZpeGluZyBjbGFpbXMgb2Yga25vd24gdHlwZXMgYm90aCBtYWtlcyByZXByZXNlbnRh dGlvbnMgc21hbGxlciBhbmQgcmVxdWlyZXMgbGVzcyBjb2RlLiAgU2luY2UgdGhlIHRhZ3MgYWRk IG5vIHZhbHVlIGZvciB0aGVzZSBjbGFpbXMsIGl0IHNlZW1lZCBiZXR0ZXIgdG8gcmVxdWlyZSB0 aGF0IHRoZXkgYmUgb21pdHRlZC4NCg0KVGhhbmtzLiBTZWVtcyByZWFzb25hYmxlLg0KDQpdDQog IDQuICBWZXJpZnkgdGhhdCB0aGUgcmVzdWx0aW5nIENPU0UgSGVhZGVyIGluY2x1ZGVzIG9ubHkg cGFyYW1ldGVycw0KICAgICAgIGFuZCB2YWx1ZXMgd2hvc2Ugc3ludGF4IGFuZCBzZW1hbnRpY3Mg YXJlIGJvdGggdW5kZXJzdG9vZCBhbmQNCiAgICAgICBzdXBwb3J0ZWQgb3IgdGhhdCBhcmUgc3Bl Y2lmaWVkIGFzIGJlaW5nIGlnbm9yZWQgd2hlbiBub3QNCiAgICAgICB1bmRlcnN0b29kLg0KDQpJ J20gc3VycHJpc2VkIHRvIGZpbmQgdGhhdCB0aGlzIGlzIG5vdCBhIGdlbmVyaWMgODE1MiBwcm9j ZXNzaW5nIHJ1bGUuDQpDYW4geW91IGV4cGxhaW4gd2h5IHRoaXMgaXMgbmVjZXNzYXJ5IGhlcmU/ DQoNCk1pa2U+IFRoaXMgaW50ZW50aW9uYWxseSBwYXJhbGxlbHMgdGhlIHNhbWUgcnVsZSBpbiBK V1QgKGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3NTE5I3NlY3Rpb24tNy4yLCBzdGVw IDUpLiAgSXQncyBzYXlpbmcgdGhhdCB5b3UgaGF2ZSB0byB2YWxpZGF0ZSB0aGF0IHRoZSBwYXJh bWV0ZXJzIGRlc2NyaWJpbmcgdGhlIHBhcmFtZXRlcnMgZGVzY3JpYmluZyB0aGUgY3J5cHRvZ3Jh cGhpYyBvcGVyYXRpb25zIHBlcmZvcm1lZC4NCg0KU3VyZS4gSSBkb24ndCB0aGluayB0aGlzIGlz IHVucmVhc29uYWJsZSwgYnV0IHdoeSBpc24ndCBhIGdlbmVyYWwgcnVsZSBmb3IgQ09TRSBtZXNz YWdlcyByYXRoZXIgdGhhbiBqdXN0IENXVD8NCg0KTWlrZT4gSeKAmW0gc3VyZSB0aGF0IENPU0Ug aGFzIHNpbWlsYXIvb3ZlcmxhcHBpbmcgcmVxdWlyZW1lbnRzICh0aGF0LCBvciBJIGRpZG7igJl0 IGFkZXF1YXRlbHkgcmV2aWV3IGl0IGF0IHRoZSB0aW1lIGJlZm9yZSBpdCBiZWNhbWUgYW4gUkZD IDstKSApLiAgQXMgdGhlIEJyaXRzLCBzYXksIHRoaXMgcnVsZSBpcyDigJxiZWx0IGFuZCBzdXNw ZW5kZXJz4oCdIG9uIHRvcCBvZiB0aGF0IOKAkyBhbmQgYWxzbyByZWZsZWN0cyB0aGF0IENXVCBj b3BpZXMgdGhlIHN5bnRheCBhbmQgc2VtYW50aWNzIGZyb20gSldUIFtSRkMgNzUxOV0gd2hlcmV2 ZXIgYXBwbGljYWJsZS4NCg0KU2VlIHlvdSBuZXh0IHdlZWsuDQoNCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCi1Fa3INCg0K DQoNCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCg== --_000_SN6PR2101MB0943ADC8E52FA4D445FC7D76F5D10SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25v cm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uaG9lbnpiDQoJe21zby1zdHls ZS1uYW1lOmhvZW56Yjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjoj MDAyMDYwO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0K CXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1h eD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9 IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMw MDIwNjAiPlRoYW5rcywgRWtyLiZuYnNwOyBPbmUgbW9yZSByZXBseSB0byB5b3VyIGxhc3QgY29t bWVudCB0aGUgYm90dG9tIG9mIHRoZSBtZXNzYWdl4oCmPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBF cmljIFJlc2NvcmxhICZsdDtla3JAcnRmbS5jb20mZ3Q7IDxicj4NCjxiPlNlbnQ6PC9iPiBXZWRu ZXNkYXksIE1hcmNoIDE0LCAyMDE4IDI6MzggUE08YnI+DQo8Yj5Ubzo8L2I+IE1pa2UgSm9uZXMg Jmx0O01pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IFRoZSBJ RVNHICZsdDtpZXNnQGlldGYub3JnJmd0OzsgS2F0aGxlZW4uTW9yaWFydHkuaWV0ZkBnbWFpbC5j b207IGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuQGlldGYub3JnOyBhY2UtY2hhaXJzQGll dGYub3JnOyBrYWR1a0BtaXQuZWR1OyBhY2VAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4g UmU6IEVyaWMgUmVzY29ybGEncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0Zi1hY2UtY2Jvci13 ZWItdG9rZW4tMTM6ICh3aXRoIENPTU1FTlQpPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBXZWQsIE1h ciAxNCwgMjAxOCBhdCAyOjM0IFBNLCBNaWtlIEpvbmVzICZsdDs8YSBocmVmPSJtYWlsdG86TWlj aGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tIiB0YXJnZXQ9Il9ibGFuayI+TWljaGFlbC5Kb25lc0Bt aWNyb3NvZnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5n OjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgRWtyLiZuYnNwOyBUaGFua3MgZm9yIHRoZSByZXZpZXcg Y29tbWVudHMuJm5ic3A7IFJlc3BvbnNlcyBhcmUgaW5saW5lIGJlbG93LCBwcmVmaXhlZCBieSAm cXVvdDtNaWtlJmd0OyZxdW90Oy4uLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCi0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tPGJyPg0KRnJvbTogRXJpYyBSZXNjb3JsYSAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmVrckBydGZtLmNvbSI+ZWtyQHJ0Zm0uY29tPC9hPiZndDs8YnI+DQpTZW50OiBX ZWRuZXNkYXksIE1hcmNoIDcsIDIwMTggMTI6NDAgUE08YnI+DQpUbzogVGhlIElFU0cgJmx0Ozxh IGhyZWY9Im1haWx0bzppZXNnQGlldGYub3JnIj5pZXNnQGlldGYub3JnPC9hPiZndDs8YnI+DQpD YzogPGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuQGlldGYub3Jn Ij5kcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbkBpZXRmLm9yZzwvYT47DQo8YSBocmVmPSJt YWlsdG86YWNlLWNoYWlyc0BpZXRmLm9yZyI+YWNlLWNoYWlyc0BpZXRmLm9yZzwvYT47IDxhIGhy ZWY9Im1haWx0bzprYWR1a0BtaXQuZWR1Ij4NCmthZHVrQG1pdC5lZHU8L2E+OyA8YSBocmVmPSJt YWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5vcmc8L2E+PGJyPg0KU3ViamVjdDogRXJpYyBS ZXNjb3JsYSdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLWFjZS1jYm9yLXdlYi10b2tlbi0x MzogKHdpdGggQ09NTUVOVCk8YnI+DQo8YnI+DQpFcmljIFJlc2NvcmxhIGhhcyBlbnRlcmVkIHRo ZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcjxicj4NCmRyYWZ0LWlldGYtYWNlLWNib3It d2ViLXRva2VuLTEzOiBObyBPYmplY3Rpb248YnI+DQo8YnI+DQpXaGVuIHJlc3BvbmRpbmcsIHBs ZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwgZW1haWwg YWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8g Y3V0IHRoaXMgaW50cm9kdWN0b3J5IHBhcmFncmFwaCwgaG93ZXZlci4pPGJyPg0KPGJyPg0KPGJy Pg0KUGxlYXNlIHJlZmVyIHRvIDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3Rh dGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbCIgdGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sPC9hPjxicj4N CmZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3Np dGlvbnMuPGJyPg0KPGJyPg0KPGJyPg0KVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJh bGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJlOjxicj4NCjxhIGhyZWY9Imh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLyIg dGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWll dGYtYWNlLWNib3Itd2ViLXRva2VuLzwvYT48YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tPGJyPg0KQ09NTUVOVDo8YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KPGJyPg0KJm5ic3A7 ICZuYnNwO1RoZSBjbGFpbSB2YWx1ZXMgZGVmaW5lZCBpbiB0aGlzIHNwZWNpZmljYXRpb24gTVVT VCBOT1QgYmUgcHJlZml4ZWQ8YnI+DQombmJzcDsgJm5ic3A7d2l0aCBhbnkgQ0JPUiB0YWcuJm5i c3A7IEZvciBpbnN0YW5jZSwgd2hpbGUgQ0JPUiB0YWcgMSAoZXBvY2gtYmFzZWQgZGF0ZS88YnI+ DQombmJzcDsgJm5ic3A7dGltZSkgY291bGQgbG9naWNhbGx5IGJlIHByZWZpeGVkIHRvIHZhbHVl cyBvZiB0aGUgJnF1b3Q7ZXhwJnF1b3Q7LCAmcXVvdDtuYmYmcXVvdDssIGFuZDxicj4NCiZuYnNw OyAmbmJzcDsmcXVvdDtpYXQmcXVvdDsgY2xhaW1zLCB0aGlzIGlzIHVubmVjZXNzYXJ5LCBzaW5j ZSB0aGUgcmVwcmVzZW50YXRpb24gb2YgdGhlPGJyPg0KJm5ic3A7ICZuYnNwO2NsYWltIHZhbHVl cyBpcyBhbHJlYWR5IHNwZWNpZmllZCBieSB0aGUgY2xhaW0gZGVmaW5pdGlvbnMuJm5ic3A7IFRh Z2dpbmc8YnI+DQombmJzcDsgJm5ic3A7Y2xhaW0gdmFsdWVzIHdvdWxkIG9ubHkgdGFrZSB1cCBl eHRyYSBzcGFjZSB3aXRob3V0IGFkZGluZzxicj4NCiZuYnNwOyAmbmJzcDtpbmZvcm1hdGlvbi4m bmJzcDsgSG93ZXZlciwgdGhpcyBkb2VzIG5vdCBwcm9oaWJpdCBmdXR1cmUgY2xhaW08YnI+DQom bmJzcDsgJm5ic3A7ZGVmaW5pdGlvbnMgZnJvbSByZXF1aXJpbmcgdGhlIHVzZSBvZiBDQk9SIHRh Z3MgZm9yIHRob3NlIHNwZWNpZmljPGJyPg0KJm5ic3A7ICZuYnNwO2NsYWltcy48YnI+DQo8YnI+ DQpXaHkgZG8geW91IG5lZWQgYSBNVVNUIE5PVCBoZXJlPyBUaGlzIHNlZW1zIGxpa2Ugbm90IHJl YWxseSBhbiBpbnRlcm9wIHJlcXVpcmVtZW50PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TWlrZSZndDsgVGhpcyByZXF1aXJlbWVudCB3YXMgYWRk ZWQgdG8gc2ltcGxpZnkgYm90aCBwcm9kdWNlcnMgYW5kIGNvbnN1bWVycyBvZiB0aGVzZSB0b2tl bnMsIGFmdGVyIGEgd29ya2luZyBncm91cCBkaXNjdXNzaW9uLiZuYnNwOyBOb3QgaGF2aW5nIHRv IGhhdmUgY29kZSB0byB2YWxpZGF0ZSwgcGFyc2UgYW5kIHRoZW4gdGhyb3cgYXdheSB0YWdzIHBy ZWZpeGluZyBjbGFpbXMgb2Yga25vd24gdHlwZXMgYm90aCBtYWtlcw0KIHJlcHJlc2VudGF0aW9u cyBzbWFsbGVyIGFuZCByZXF1aXJlcyBsZXNzIGNvZGUuJm5ic3A7IFNpbmNlIHRoZSB0YWdzIGFk ZCBubyB2YWx1ZSBmb3IgdGhlc2UgY2xhaW1zLCBpdCBzZWVtZWQgYmV0dGVyIHRvIHJlcXVpcmUg dGhhdCB0aGV5IGJlIG9taXR0ZWQuPG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MuIFNlZW1zIHJlYXNvbmFibGUuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPl08bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4t bGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OyA0LiZuYnNwOyBWZXJpZnkgdGhhdCB0aGUgcmVzdWx0aW5nIENPU0UgSGVhZGVyIGluY2x1ZGVz IG9ubHkgcGFyYW1ldGVyczxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2FuZCB2YWx1 ZXMgd2hvc2Ugc3ludGF4IGFuZCBzZW1hbnRpY3MgYXJlIGJvdGggdW5kZXJzdG9vZCBhbmQ8YnI+ DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtzdXBwb3J0ZWQgb3IgdGhhdCBhcmUgc3BlY2lm aWVkIGFzIGJlaW5nIGlnbm9yZWQgd2hlbiBub3Q8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDt1bmRlcnN0b29kLjxicj4NCjxicj4NCkknbSBzdXJwcmlzZWQgdG8gZmluZCB0aGF0IHRo aXMgaXMgbm90IGEgZ2VuZXJpYyA4MTUyIHByb2Nlc3NpbmcgcnVsZS48YnI+DQpDYW4geW91IGV4 cGxhaW4gd2h5IHRoaXMgaXMgbmVjZXNzYXJ5IGhlcmU/PGJyPg0KPGJyPg0KTWlrZSZndDsgVGhp cyBpbnRlbnRpb25hbGx5IHBhcmFsbGVscyB0aGUgc2FtZSBydWxlIGluIEpXVCAoPGEgaHJlZj0i aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc1MTkjc2VjdGlvbi03LjIiIHRhcmdldD0i X2JsYW5rIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzUxOSNzZWN0aW9uLTcuMjwv YT4sIHN0ZXAgNSkuJm5ic3A7IEl0J3Mgc2F5aW5nIHRoYXQgeW91IGhhdmUgdG8gdmFsaWRhdGUg dGhhdCB0aGUgcGFyYW1ldGVycyBkZXNjcmliaW5nDQogdGhlIHBhcmFtZXRlcnMgZGVzY3JpYmlu ZyB0aGUgY3J5cHRvZ3JhcGhpYyBvcGVyYXRpb25zIHBlcmZvcm1lZC48bzpwPjwvbzpwPjwvcD4N CjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlN1cmUuIEkgZG9u J3QgdGhpbmsgdGhpcyBpcyB1bnJlYXNvbmFibGUsIGJ1dCB3aHkgaXNuJ3QgYSBnZW5lcmFsIHJ1 bGUgZm9yIENPU0UgbWVzc2FnZXMgcmF0aGVyIHRoYW4ganVzdCBDV1Q/PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPk1pa2UmZ3Q7IEnigJltIHN1cmUgdGhhdCBD T1NFIGhhcyBzaW1pbGFyL292ZXJsYXBwaW5nIHJlcXVpcmVtZW50cyAodGhhdCwgb3IgSSBkaWRu 4oCZdCBhZGVxdWF0ZWx5IHJldmlldyBpdCBhdCB0aGUgdGltZSBiZWZvcmUgaXQgYmVjYW1lIGFu IFJGQyA7LSkgKS4mbmJzcDsgQXMgdGhlIEJyaXRzLCBzYXksIHRoaXMgcnVsZSBpcyDigJxiZWx0 IGFuZCBzdXNwZW5kZXJz4oCdIG9uIHRvcCBvZg0KIHRoYXQg4oCTIGFuZCBhbHNvIHJlZmxlY3Rz IHRoYXQgQ1dUIGNvcGllcyB0aGUgc3ludGF4IGFuZCBzZW1hbnRpY3MgZnJvbSBKV1QgW1JGQyA3 NTE5XSB3aGVyZXZlciBhcHBsaWNhYmxlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAw MjA2MCI+U2VlIHlvdSBuZXh0IHdlZWsuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAy MDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4tRWtyPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2Nr cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7 cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6 MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9ibG9j a3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk ICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0Ljhw dDttYXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDtt YXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiM4ODg4ODgi Pjxicj4NCjxzcGFuIGNsYXNzPSJob2VuemIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAtLSBNaWtlPC9zcGFuPjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+ DQo= --_000_SN6PR2101MB0943ADC8E52FA4D445FC7D76F5D10SN6PR2101MB0943_-- From nobody Wed Mar 14 15:32:27 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A979512D77B for ; Wed, 14 Mar 2018 15:32:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W93LyUmtVDQR for ; Wed, 14 Mar 2018 15:32:23 -0700 (PDT) Received: from mail-qk0-x234.google.com (mail-qk0-x234.google.com [IPv6:2607:f8b0:400d:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E497124239 for ; Wed, 14 Mar 2018 15:32:23 -0700 (PDT) Received: by mail-qk0-x234.google.com with SMTP id d206so5320490qkb.3 for ; Wed, 14 Mar 2018 15:32:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=T+59RbTtoJ9mZ9AdcVHHQaV56XMJmP0wfZO0U2r/s84=; b=wI4dgYrFlFIbe0v94UCXztvNiQvnBxLcAh1KTdWwc/3MbOZJatPYWQ6/34xBh3rJb2 xIo5CyV17O+Jtti6Y1rYRbXe25LiephjyP/8OjUKMNZEzr4L+DJvTcBmKl2ERy3h/Xnt NxhXSlSqfiXR1dyDBa6UnIuJm00BSpHNhn19Lp1ZSNTXYqEzIiGMKoTYe5Rxj2tr+lS1 EcQYA9hj5nEghjKIpebQXcBIsRZ6kBekAiNJrM99WJastO0jCix/HsMA5X99mJ1XJRj4 25VAYiF5Xv30wpT4EJPhF2232PNlZd2Xasz3CbCBVk/+CJ1y6JGmqRMLkwPDi3iLed1X zHqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=T+59RbTtoJ9mZ9AdcVHHQaV56XMJmP0wfZO0U2r/s84=; b=XTU+cDBqmYTddIO0M/AD57hY3Z7IiJpUvhrWC4qG2VL01IrCrVufAU/BYqogxNb5Rx umkhlZ55L59h658bEeGplPi3xBhKpyDU0KiPuJKgEZckGKNeHy7waAnMCt9vRayRn1uc Wh7jPmotz86weKZAGJByg6ANpQbgAJ+l7q9SC3y6RN/YZMOKfERuJNssimZHlCiJGOp+ N9TDaMDUGyGoHyN5XRVDlBfZhkxZrQD3QML7GHhv2X9d7rh6a6V5dwIKIXXOZK/Xfbp8 HJqucQRlxGrnst7D9cdNMq6Dxv2CprFYIbYeToMtfHHpoW8dpQGONaNhcJiwSbFC2Ixg xbyA== X-Gm-Message-State: AElRT7GKjkdaBfDmULHERI8WBFZNF0GdEkTIXB17qJniTltWhmrZ/9nU IXSNCI6cdhCosa2wrohZjWZQbxeiVzTxE+Eqi2JimA== X-Google-Smtp-Source: AG47ELuiAqWICRX5lx6QeV/mMeWNJX2khqd8+G1Sz0zgfJdhAF5CA7pPo/L6D4+5m1712EZ5jnFY9xu9hqIEr4ShiO4= X-Received: by 10.55.22.28 with SMTP id g28mr9380660qkh.152.1521066741320; Wed, 14 Mar 2018 15:32:21 -0700 (PDT) MIME-Version: 1.0 Received: by 10.200.37.234 with HTTP; Wed, 14 Mar 2018 15:31:40 -0700 (PDT) In-Reply-To: References: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> From: Eric Rescorla Date: Wed, 14 Mar 2018 15:31:40 -0700 Message-ID: To: Mike Jones Cc: The IESG , "Kathleen.Moriarty.ietf@gmail.com" , "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "kaduk@mit.edu" , "ace@ietf.org" Content-Type: multipart/alternative; boundary="001a11474630cbe696056766f2b3" Archived-At: Subject: Re: [Ace] Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 22:32:26 -0000 --001a11474630cbe696056766f2b3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks. I have no objection to this draft proceeding as-si On Wed, Mar 14, 2018 at 2:55 PM, Mike Jones wrote: > Thanks, Ekr. One more reply to your last comment the bottom of the > message=E2=80=A6 > > > > *From:* Eric Rescorla > *Sent:* Wednesday, March 14, 2018 2:38 PM > *To:* Mike Jones > *Cc:* The IESG ; Kathleen.Moriarty.ietf@gmail.com; > draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; kaduk@mit.ed= u; > ace@ietf.org > *Subject:* Re: Eric Rescorla's No Objection on > draft-ietf-ace-cbor-web-token-13: (with COMMENT) > > > > > > > > On Wed, Mar 14, 2018 at 2:34 PM, Mike Jones > wrote: > > Hi Ekr. Thanks for the review comments. Responses are inline below, > prefixed by "Mike>"... > > > -----Original Message----- > From: Eric Rescorla > Sent: Wednesday, March 7, 2018 12:40 PM > To: The IESG > Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; > kaduk@mit.edu; ace@ietf.org > Subject: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13= : > (with COMMENT) > > Eric Rescorla has entered the following ballot position for > draft-ietf-ace-cbor-web-token-13: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > The claim values defined in this specification MUST NOT be prefixed > with any CBOR tag. For instance, while CBOR tag 1 (epoch-based date/ > time) could logically be prefixed to values of the "exp", "nbf", and > "iat" claims, this is unnecessary, since the representation of the > claim values is already specified by the claim definitions. Tagging > claim values would only take up extra space without adding > information. However, this does not prohibit future claim > definitions from requiring the use of CBOR tags for those specific > claims. > > Why do you need a MUST NOT here? This seems like not really an interop > requirement > > Mike> This requirement was added to simplify both producers and consumers > of these tokens, after a working group discussion. Not having to have co= de > to validate, parse and then throw away tags prefixing claims of known typ= es > both makes representations smaller and requires less code. Since the tag= s > add no value for these claims, it seemed better to require that they be > omitted. > > > > Thanks. Seems reasonable. > > > > ] > > 4. Verify that the resulting COSE Header includes only parameters > and values whose syntax and semantics are both understood and > supported or that are specified as being ignored when not > understood. > > I'm surprised to find that this is not a generic 8152 processing rule. > Can you explain why this is necessary here? > > Mike> This intentionally parallels the same rule in JWT ( > https://tools.ietf.org/html/rfc7519#section-7.2, step 5). It's saying > that you have to validate that the parameters describing the parameters > describing the cryptographic operations performed. > > > > Sure. I don't think this is unreasonable, but why isn't a general rule fo= r > COSE messages rather than just CWT? > > > > Mike> I=E2=80=99m sure that COSE has similar/overlapping requirements (th= at, or I > didn=E2=80=99t adequately review it at the time before it became an RFC ;= -) ). As > the Brits, say, this rule is =E2=80=9Cbelt and suspenders=E2=80=9D on top= of that =E2=80=93 and > also reflects that CWT copies the syntax and semantics from JWT [RFC 7519= ] > wherever applicable. > > > > See you next week. > > > > -- Mike > > > > -Ekr > > > > > > > > > -- Mike > > > --001a11474630cbe696056766f2b3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks. I have no objection to this draft proceeding as-si=

On Wed, Mar= 14, 2018 at 2:55 PM, Mike Jones <Michael.Jones@microsoft.com> wrote:

Thanks, Ekr.=C2=A0 One= more reply to your last comment the bottom of the message=E2=80=A6<= u>

=C2=A0

From: Eric Rescorla <ekr@rtfm.com>
Sent: Wednesday, March 14, 2018 2:38 PM
To: Mike Jones <Michael.Jones@microsoft.com>
Cc: The IESG <= iesg@ietf.org>; Kathleen.Moriarty.ietf@gmail.com; draft-ietf-ac= e-cbor-web-token@ietf.org; ace-chairs@ietf.org; kaduk@mit.edu; ace@ietf.org
Subject: Re: Eric Rescorla's No Objection on draft-ietf-ace-cbor= -web-token-13: (with COMMENT)

=C2=A0

=C2=A0

=C2=A0

On Wed, Mar 14, 2018 at 2:34 PM, Mike Jones <Michael.Jones@= microsoft.com> wrote:

Hi Ekr.=C2=A0 Thanks for the review comments.=C2=A0 = Responses are inline below, prefixed by "Mike>"...


-----Original Message-----
From: Eric Rescorla <e= kr@rtfm.com>
Sent: Wednesday, March 7, 2018 12:40 PM
To: The IESG <iesg@ie= tf.org>
Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.or= g; kaduk@mit.edu; ace@ie= tf.org
Subject: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-= 13: (with COMMENT)

Eric Rescorla has entered the following ballot position for
draft-ietf-ace-cbor-web-token-13: No Objection

When responding, please keep the subject line intact and reply to all email= addresses included in the To and CC lines. (Feel free to cut this introduc= tory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-ace-cbo= r-web-token/



-----------------------------------------------------------------= -----
COMMENT:
-----------------------------------------------------------------= -----

=C2=A0 =C2=A0The claim values defined in this specification MUST NOT be pre= fixed
=C2=A0 =C2=A0with any CBOR tag.=C2=A0 For instance, while CBOR tag 1 (epoch= -based date/
=C2=A0 =C2=A0time) could logically be prefixed to values of the "exp&q= uot;, "nbf", and
=C2=A0 =C2=A0"iat" claims, this is unnecessary, since the represe= ntation of the
=C2=A0 =C2=A0claim values is already specified by the claim definitions.=C2= =A0 Tagging
=C2=A0 =C2=A0claim values would only take up extra space without adding
=C2=A0 =C2=A0information.=C2=A0 However, this does not prohibit future clai= m
=C2=A0 =C2=A0definitions from requiring the use of CBOR tags for those spec= ific
=C2=A0 =C2=A0claims.

Why do you need a MUST NOT here? This seems like not really an interop requ= irement

Mike> This requirement was added to simplify both= producers and consumers of these tokens, after a working group discussion.= =C2=A0 Not having to have code to validate, parse and then throw away tags = prefixing claims of known types both makes representations smaller and requires less code.=C2=A0 Since the tags add n= o value for these claims, it seemed better to require that they be omitted.=

=C2=A0

Thanks. Seems reasonable.

=C2=A0

]

=C2=A0 4.=C2=A0 Verify that the resulting COSE Heade= r includes only parameters
=C2=A0 =C2=A0 =C2=A0 =C2=A0and values whose syntax and semantics are both u= nderstood and
=C2=A0 =C2=A0 =C2=A0 =C2=A0supported or that are specified as being ignored= when not
=C2=A0 =C2=A0 =C2=A0 =C2=A0understood.

I'm surprised to find that this is not a generic 8152 processing rule.<= br> Can you explain why this is necessary here?

Mike> This intentionally parallels the same rule in JWT (https://tool= s.ietf.org/html/rfc7519#section-7.2, step 5).=C2=A0 It's sayin= g that you have to validate that the parameters describing the parameters describing the cryptographic operations performed.

=C2=A0

Sure. I don't think this is unreasonable, but wh= y isn't a general rule for COSE messages rather than just CWT?

=C2=A0

Mike> I=E2=80=99m s= ure that COSE has similar/overlapping requirements (that, or I didn=E2=80= =99t adequately review it at the time before it became an RFC ;-) ).=C2=A0 = As the Brits, say, this rule is =E2=80=9Cbelt and suspenders=E2=80=9D on to= p of that =E2=80=93 and also reflects that CWT copies the syntax and semantics = from JWT [RFC 7519] wherever applicable.

=C2=A0

See you next week.<= /u>

=C2=A0

=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 -- Mike

=C2=A0

-Ekr

=C2=A0

=C2=A0

=C2=A0


=C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 -- Mike

=C2=A0


--001a11474630cbe696056766f2b3-- From nobody Wed Mar 14 16:54:35 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5188126FDC; Wed, 14 Mar 2018 16:54:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c0r1U0b_UrOD; Wed, 14 Mar 2018 16:54:31 -0700 (PDT) Received: from mail-qt0-x234.google.com (mail-qt0-x234.google.com [IPv6:2607:f8b0:400d:c0d::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77890124D68; Wed, 14 Mar 2018 16:54:31 -0700 (PDT) Received: by mail-qt0-x234.google.com with SMTP id a26so5447028qtj.6; Wed, 14 Mar 2018 16:54:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=46EuwjY3zZ+F38gHrbTQUyANnmdjaXT/2Ze2rgNm8cc=; b=EbG7rb1lJpg6Rzd8d1CtebAS40+/5uf/FupAXKu82/G/fEGL84exae87aCUFzoe2Br opKhy10jTTpf5C6J4pujXXy+QgchFGUoOhw24vh3hmWyyz4yed6FT6TVUh8aRUXJsTFq TK86ezNTjC55unyB2n56vAgcBVbNh0xvgVtXq0DyZaYQtGDqxWErqjTsy3j+2yo+bs+H cmGyNiVgnYYKF6CXh9va2zGRre+6dnv0C1PkfeDT5KURB1U42AlzfvUscueyS9w6UyM1 zwY9UKl/6DC+M0IiT0sPcqkwuyylkGkMHv98oDZzC+NjFK+/0UdtBZj04QHmM/Dx2B5A XFAQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=46EuwjY3zZ+F38gHrbTQUyANnmdjaXT/2Ze2rgNm8cc=; b=UgeTXMJXWMnZyo9LJDQReknHjCRCMXxl93mtlP5WGTai9TZejq7fF19KwJxa6ckrJp Snz9Ybr968ivPE1PSqjT8VvhqEDxe8/GN/3BZG9EtijjsnU5wiSIGnsvAEx3uRniZWUe GM4WdWbAJAgNJkupIqswOs5hI8nCV/PmhocBafRJO4wNA1VwaGq52d8CT6zsftCgDIck +cdnz3ljGn2r6ASYd8RjTZAlCJ6UUKARzyczXGvYGeiQdcg0HUzkprlw9Bun/CxG4IO7 SgPFeMWBc5m+UB4dUrohwsmMdVbJ6DXQ7EAXdFNINu81hOnGsnGtvPJkk5InMmTjAs8K nn6A== X-Gm-Message-State: AElRT7HRJgPQjn2+jIqreQqsRdxixVsfwCrvj2fGXK9gVCe55bzEHE/l glto+grvcxMlePPTpyh4A37V90ZQ X-Google-Smtp-Source: AG47ELvvOiR1ZGOn9+fhuxC2AQ6ifdObEZD6KUMpXPMJ1T6vEcTWKStoz8N8C5IATNVcL3VEQWBzyQ== X-Received: by 10.200.81.81 with SMTP id h17mr6486117qtn.55.1521071670578; Wed, 14 Mar 2018 16:54:30 -0700 (PDT) Received: from [192.168.1.219] (209-6-112-84.s338.c3-0.arl-cbr1.sbo-arl.ma.cable.rcncustomer.com. [209.6.112.84]) by smtp.gmail.com with ESMTPSA id q42sm2672967qtc.19.2018.03.14.16.54.29 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 14 Mar 2018 16:54:29 -0700 (PDT) Content-Type: multipart/alternative; boundary=Apple-Mail-25B852DB-6892-4528-9257-66D5637BF06B Mime-Version: 1.0 (1.0) From: Kathleen Moriarty X-Mailer: iPhone Mail (15D100) In-Reply-To: Date: Wed, 14 Mar 2018 19:54:29 -0400 Cc: Mike Jones , The IESG , "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "kaduk@mit.edu" , "ace@ietf.org" Content-Transfer-Encoding: 7bit Message-Id: <534E0DF9-A98C-4443-BE1F-BC3F272C4852@gmail.com> References: <152045520055.17654.5520380651718604431.idtracker@ietfa.amsl.com> To: Eric Rescorla Archived-At: Subject: Re: [Ace] Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 23:54:34 -0000 --Apple-Mail-25B852DB-6892-4528-9257-66D5637BF06B Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Thank you. Sent from my mobile device > On Mar 14, 2018, at 6:31 PM, Eric Rescorla wrote: >=20 > Thanks. I have no objection to this draft proceeding as-si >=20 >> On Wed, Mar 14, 2018 at 2:55 PM, Mike Jones = wrote: >> Thanks, Ekr. One more reply to your last comment the bottom of the messa= ge=E2=80=A6 >>=20 >> =20 >>=20 >> From: Eric Rescorla =20 >> Sent: Wednesday, March 14, 2018 2:38 PM >> To: Mike Jones >> Cc: The IESG ; Kathleen.Moriarty.ietf@gmail.com; draft-iet= f-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; kaduk@mit.edu; ace@ietf.= org >> Subject: Re: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-toke= n-13: (with COMMENT) >>=20 >> =20 >>=20 >> =20 >>=20 >> =20 >>=20 >> On Wed, Mar 14, 2018 at 2:34 PM, Mike Jones = wrote: >>=20 >> Hi Ekr. Thanks for the review comments. Responses are inline below, pre= fixed by "Mike>"... >>=20 >>=20 >> -----Original Message----- >> From: Eric Rescorla >> Sent: Wednesday, March 7, 2018 12:40 PM >> To: The IESG >> Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; kaduk@mi= t.edu; ace@ietf.org >> Subject: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-13= : (with COMMENT) >>=20 >> Eric Rescorla has entered the following ballot position for >> draft-ietf-ace-cbor-web-token-13: No Objection >>=20 >> When responding, please keep the subject line intact and reply to all ema= il addresses included in the To and CC lines. (Feel free to cut this introdu= ctory paragraph, however.) >>=20 >>=20 >> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html= >> for more information about IESG DISCUSS and COMMENT positions. >>=20 >>=20 >> The document, along with other ballot positions, can be found here: >> https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ >>=20 >>=20 >>=20 >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >>=20 >> The claim values defined in this specification MUST NOT be prefixed >> with any CBOR tag. For instance, while CBOR tag 1 (epoch-based date/ >> time) could logically be prefixed to values of the "exp", "nbf", and >> "iat" claims, this is unnecessary, since the representation of the >> claim values is already specified by the claim definitions. Tagging >> claim values would only take up extra space without adding >> information. However, this does not prohibit future claim >> definitions from requiring the use of CBOR tags for those specific >> claims. >>=20 >> Why do you need a MUST NOT here? This seems like not really an interop re= quirement >>=20 >> Mike> This requirement was added to simplify both producers and consumers= of these tokens, after a working group discussion. Not having to have code= to validate, parse and then throw away tags prefixing claims of known types= both makes representations smaller and requires less code. Since the tags a= dd no value for these claims, it seemed better to require that they be omitt= ed. >>=20 >> =20 >>=20 >> Thanks. Seems reasonable. >>=20 >> =20 >>=20 >> ] >>=20 >> 4. Verify that the resulting COSE Header includes only parameters >> and values whose syntax and semantics are both understood and >> supported or that are specified as being ignored when not >> understood. >>=20 >> I'm surprised to find that this is not a generic 8152 processing rule. >> Can you explain why this is necessary here? >>=20 >> Mike> This intentionally parallels the same rule in JWT (https://tools.ie= tf.org/html/rfc7519#section-7.2, step 5). It's saying that you have to vali= date that the parameters describing the parameters describing the cryptograp= hic operations performed. >>=20 >> =20 >>=20 >> Sure. I don't think this is unreasonable, but why isn't a general rule fo= r COSE messages rather than just CWT? >>=20 >> =20 >>=20 >> Mike> I=E2=80=99m sure that COSE has similar/overlapping requirements (th= at, or I didn=E2=80=99t adequately review it at the time before it became an= RFC ;-) ). As the Brits, say, this rule is =E2=80=9Cbelt and suspenders=E2= =80=9D on top of that =E2=80=93 and also reflects that CWT copies the syntax= and semantics from JWT [RFC 7519] wherever applicable. >>=20 >> =20 >>=20 >> See you next week. >>=20 >> =20 >>=20 >> -- Mike >>=20 >> =20 >>=20 >> -Ekr >>=20 >> =20 >>=20 >> =20 >>=20 >> =20 >>=20 >>=20 >> -- Mike >>=20 >> =20 >>=20 >=20 --Apple-Mail-25B852DB-6892-4528-9257-66D5637BF06B Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Thank you.

Sent from my mobile device

On Mar 14, 2018, at 6:31 PM, E= ric Rescorla <ekr@rtfm.com> wrote:=

Thanks. I have= no objection to this draft proceeding as-si

On Wed, Mar 14, 2018 at 2:55 PM, Mike Jones <= span dir=3D"ltr"><Michael.Jones@microsoft.com> wrote:

Thanks, Ekr.  One m= ore reply to your last comment the bottom of the message=E2=80=A6<= /u>

 

From: Eric Rescorla <ekr@rtfm.com>
Sent: Wednesday, March 14, 2018 2:38 PM
To: Mike Jones <Michael.Jones@microsoft.com>
Cc: The IESG <i= esg@ietf.org>; Kathleen.Moriarty.ietf@gmail.com; draft-ietf-ace-cb= or-web-token@ietf.org; ace-chairs@ietf.org; kaduk@mit.edu; ace@ietf.org
Subject: Re: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-= token-13: (with COMMENT)

 

 

 

On Wed, Mar 14, 2018 at 2:34 PM, Mike Jones <Michael.Jones@mi= crosoft.com> wrote:

Hi Ekr.  Thanks for the review comments.  R= esponses are inline below, prefixed by "Mike>"...


-----Original Message-----
From: Eric Rescorla <ek= r@rtfm.com>
Sent: Wednesday, March 7, 2018 12:40 PM
To: The IESG <iesg@iet= f.org>
Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org= ; kaduk@mit.edu; ace@iet= f.org
Subject: Eric Rescorla's No Objection on draft-ietf-ace-cbor-web-token-= 13: (with COMMENT)

Eric Rescorla has entered the following ballot position for
draft-ietf-ace-cbor-web-token-13: No Objection

When responding, please keep the subject line intact and reply to all email a= ddresses included in the To and CC lines. (Feel free to cut this introductor= y paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-w= eb-token/



------------------------------------------------------------------= ----
COMMENT:
------------------------------------------------------------------= ----

   The claim values defined in this specification MUST NOT be pref= ixed
   with any CBOR tag.  For instance, while CBOR tag 1 (epoch-= based date/
   time) could logically be prefixed to values of the "exp", "nbf"= , and
   "iat" claims, this is unnecessary, since the representation of t= he
   claim values is already specified by the claim definitions.&nbs= p; Tagging
   claim values would only take up extra space without adding
   information.  However, this does not prohibit future claim=
   definitions from requiring the use of CBOR tags for those speci= fic
   claims.

Why do you need a MUST NOT here? This seems like not really an interop requi= rement

Mike> This requirement was added to simplify both p= roducers and consumers of these tokens, after a working group discussion.&nb= sp; Not having to have code to validate, parse and then throw away tags pref= ixing claims of known types both makes representations smaller and requires less code.  Since the tags add no= value for these claims, it seemed better to require that they be omitted.

 

Thanks. Seems reasonable.

 

]

  4.  Verify that the resulting COSE Header= includes only parameters
       and values whose syntax and semantics are both un= derstood and
       supported or that are specified as being ignored w= hen not
       understood.

I'm surprised to find that this is not a generic 8152 processing rule.
Can you explain why this is necessary here?

Mike> This intentionally parallels the same rule in JWT (https://tools.= ietf.org/html/rfc7519#section-7.2, step 5).  It's saying that y= ou have to validate that the parameters describing the parameters describing the cryptographic operations performed.=

 

Sure. I don't think this is unreasonable, but why isn= 't a general rule for COSE messages rather than just CWT?

 

Mike> I=E2=80=99m su= re that COSE has similar/overlapping requirements (that, or I didn=E2=80=99t= adequately review it at the time before it became an RFC ;-) ).  As th= e Brits, say, this rule is =E2=80=9Cbelt and suspenders=E2=80=9D on top of that =E2=80=93 and also reflects that CWT copies the syntax and semantics f= rom JWT [RFC 7519] wherever applicable.

 

See you next week.

 

    = ;            &nb= sp;            &= nbsp;           =             &nbs= p; -- Mike

 

-Ekr

 

 

 


        &nb= sp;                     &n= bsp; -- Mike

 


= --Apple-Mail-25B852DB-6892-4528-9257-66D5637BF06B-- From nobody Thu Mar 15 02:37:07 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F11AB12D941 for ; Thu, 15 Mar 2018 02:37:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.435 X-Spam-Level: * X-Spam-Status: No, score=1.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MgZC3vMfOUtC for ; Thu, 15 Mar 2018 02:37:03 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8337312D893 for ; Thu, 15 Mar 2018 02:37:03 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [81.128.173.187]) by relay.sandelman.ca (Postfix) with ESMTPS id D86D41F969; Thu, 15 Mar 2018 09:37:00 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id F1FA021FD; Thu, 15 Mar 2018 04:00:57 -0400 (EDT) From: Michael Richardson To: ace@ietf.org In-reply-to: References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> <24297.1520991636@obiwan.sandelman.ca> Comments: In-reply-to peter van der Stok message dated "Wed, 14 Mar 2018 09:18:42 +0100." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" Date: Thu, 15 Mar 2018 08:00:57 +0000 Message-ID: <25902.1521100857@dooku.sandelman.ca> Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Mar 2018 09:37:05 -0000 --=-=-= Content-Type: text/plain peter van der Stok wrote: >> >> DTLS connection is going to be required to act as an RA. RAs >> are required >> >> to have the entire request for adding authentication as necessary. >> >> > This is visible in the figure of section 6, but needs elaboration in >> the >> > text. >> >> I don't understand why we have that paragraph. >> An end point that terminates the Pledge (D)TLS connection and acts as >> an RA *IS* a Join Registrar, not a Proxy. >> > Thus is outside the BRSKI context, and thus a proxy with RA (separate or not) Let me delete "Join" from above sentence. A device that terminates the DTLS security (CoAPS) and then talks to the CA is a Registration Authority according to EST and RFC5280. It's not a proxy. (And it doesn't matter if it speaks HTTPS or CMS or CMP or super-pigeon-telepathy to the CA) -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJaqig5AAoJEJVM4Vb9/EKQ2tsIAINB6zs81RBd9y0C8acfxIcS aJtyC3PY2k7OW7f2j+/jSDEAk0Z/ps7IV03yfjqBmsKWwfUgmC908Ggf5b9CfBNJ HhPbXSBl9yxtlm83DFCfVu/DHJ8N9IfmrUv5Dz82sjFDeTcIoyi1536EwF2oB7cQ LQJ8nCnOj3vqX2zxbBKmlUAYqlm6fKu7krQWRBz2sKZUcEA2v5efjqrhPwVC2yPl bOPd99e7Njx7DodnQt5LIpCTY4aeSYe1H1a4BX5jDAhnOxdtmIkB/Ob2Gi/dE7ml 67c0gdxS8F2gh4tCBErQ+Uv93DVQNBsGHymltUgX2xH3o98lcOBzF25/dvtCACs= =Kq/Z -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Mar 15 02:42:51 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11DAA12D94F for ; Thu, 15 Mar 2018 02:42:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.435 X-Spam-Level: * X-Spam-Status: No, score=1.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TQ41vix4-1O3 for ; Thu, 15 Mar 2018 02:42:41 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6366912D946 for ; Thu, 15 Mar 2018 02:42:39 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [81.128.173.187]) by relay.sandelman.ca (Postfix) with ESMTPS id 9606020219 for ; Thu, 15 Mar 2018 09:37:02 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 3599923D6; Thu, 15 Mar 2018 04:03:06 -0400 (EDT) From: Michael Richardson To: ace@ietf.org In-reply-to: <20180314015234.GX55987@kduck.kaduk.org> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> <25368.1520991877@obiwan.sandelman.ca> <20180314015234.GX55987@kduck.kaduk.org> Comments: In-reply-to Benjamin Kaduk message dated "Tue, 13 Mar 2018 20:52:34 -0500." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <26028.1521100986.1@dooku.sandelman.ca> Content-Transfer-Encoding: quoted-printable Date: Thu, 15 Mar 2018 08:03:06 +0000 Message-ID: <26029.1521100986@dooku.sandelman.ca> Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Mar 2018 09:42:42 -0000 Benjamin Kaduk wrote: >> Jim Schaad wrote: >> > In section 2 - There will be a problem in that the port format ex= tension is >> > being eliminated in TLS 1.3 - We may want to divide this into a 1= .2 and 1.3 >> > section for clarity. >> >> I don't understand what you are referring to. >> >> What is the "port format extension" you are referring to, and where= in >> section 2 do you think we are depending upon it? > [...] DTLS > implementations MUST use the Supported Elliptic Curves and Supported > Point Formats Extensions [RFC4492]; the uncompressed point format > MUST be supported; [RFC6090] can be used as an implementation method= . Ah, so s/port/point/ > The uncompressed point format only exists in (D)TLS 1.2 and lower. > (TLS 1.3 does not separately negotiate point format, rather, the > point format is determined by the group/curve to be used.) I think we were just being overly specific, I'm not sure why. -- ] Never tell me the odds! | ipv6 mesh networ= ks [ ] Michael Richardson, Sandelman Software Works | network architec= t [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ From nobody Thu Mar 15 03:10:41 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB4FA126BF7 for ; Thu, 15 Mar 2018 03:10:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2D3wdDOaR4pd for ; Thu, 15 Mar 2018 03:10:36 -0700 (PDT) Received: from lb3-smtp-cloud8.xs4all.net (lb3-smtp-cloud8.xs4all.net [194.109.24.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 638C4126CB6 for ; Thu, 15 Mar 2018 03:10:36 -0700 (PDT) Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:204]) by smtp-cloud8.xs4all.net with ESMTPA id wPqEewlAraXTbwPqEegRjm; Thu, 15 Mar 2018 11:10:34 +0100 Received: from 2001:983:a264:1:100e:6a6a:72bf:c3e7 by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Thu, 15 Mar 2018 11:10:34 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 15 Mar 2018 11:10:34 +0100 From: peter van der Stok To: Michael Richardson Cc: ace@ietf.org Organization: vanderstok consultancy Reply-To: consultancy@vanderstok.org Mail-Reply-To: consultancy@vanderstok.org In-Reply-To: <25902.1521100857@dooku.sandelman.ca> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> <24297.1520991636@obiwan.sandelman.ca> <25902.1521100857@dooku.sandelman.ca> Message-ID: <00435523cc9b3c1969a026200260a373@xs4all.nl> X-Sender: stokcons@xs4all.nl User-Agent: XS4ALL Webmail X-CMAE-Envelope: MS4wfPc2zyAAhMRxCgs8qEOxtTkxSUn/K5BXE814Wnc28okgLkNTljs8tari45clFp2jgW+OuowvQJAAp5JEfKP2qhX5TbUqkXB9UB/XlvmqXcY+cCwRals+ t0s0IzyUazY0jJTxmEurXUvaKmG07bVbpQ24Vjzgfw9027nBj2iMubDWa1nS/Hgmxlv/aVysTvE2Ub09DxtMMlR2jnczuPlAEScjOYpRXMlEhSZB3GpnSt6N Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Mar 2018 10:10:40 -0000 Michael Richardson schreef op 2018-03-15 09:00: > peter van der Stok wrote: > >> >> DTLS connection is going to be required to act as an RA. RAs > >> are required > >> >> to have the entire request for adding authentication as > necessary. > >> > >> > This is visible in the figure of section 6, but needs > elaboration in > >> the > >> > text. > >> > >> I don't understand why we have that paragraph. > >> An end point that terminates the Pledge (D)TLS connection and > acts as > >> an RA *IS* a Join Registrar, not a Proxy. > >> > > > Thus is outside the BRSKI context, and thus a proxy with RA > (separate or not) > > Let me delete "Join" from above sentence. > > A device that terminates the DTLS security (CoAPS) and then talks to > the CA > is a Registration Authority according to EST and RFC5280. It's not a > proxy. > (And it doesn't matter if it speaks HTTPS or CMS or CMP or > super-pigeon-telepathy > to the CA) > A http/coap proxy is specified in RFC8075. It explains "how an HTTP request is mapped to a CoAP request and how a CoAP response is mapped back to an HTTP response". In the est-coap draft DTLS and TLS connections are terminated in the http/coap proxy, and the proxy is therefore connected to an RA (possibly running on the same host as the proxy). Where is my terminology going astray? Peter From nobody Fri Mar 16 02:02:48 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 11A9A12D7F1; Fri, 16 Mar 2018 02:02:42 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.75.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152119096204.4527.10284324426475590000@ietfa.amsl.com> Date: Fri, 16 Mar 2018 02:02:42 -0700 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-cbor-web-token-14.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Mar 2018 09:02:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : CBOR Web Token (CWT) Authors : Michael B. Jones Erik Wahlström Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-cbor-web-token-14.txt Pages : 27 Date : 2018-03-16 Abstract: CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR) and CBOR Object Signing and Encryption (COSE) is used for added application layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-14 https://datatracker.ietf.org/doc/html/draft-ietf-ace-cbor-web-token-14 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-cbor-web-token-14 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Mar 16 02:55:19 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FB35124234 for ; Fri, 16 Mar 2018 02:55:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9CIjwzUO8ddI for ; Fri, 16 Mar 2018 02:55:16 -0700 (PDT) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0134.outbound.protection.outlook.com [104.47.34.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 087051204DA for ; Fri, 16 Mar 2018 02:55:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=lI6+m8O3BxYbWZp2d3HTrMf8Vc8qCKu9aM/rGyL7Mkc=; b=VKTCy5ZksjxiFTB+SMeveY6RM8kwlwe/f89FFAK6LxRPrBY9W5ImrL5DEllWBNYdaE5uYFDkTaqdr4X78Z1roKnEvebq0IpmKMaPsvEtd4FbM4YkkNyqPskd8phZ44u1ftg2l998jNPIaVxa0K21QQ3NF7HUaZL7kyz7XTLJgT4= Received: from DM5PR00MB0296.namprd00.prod.outlook.com (52.132.128.37) by DM5PR00MB0341.namprd00.prod.outlook.com (52.132.128.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.634.0; Fri, 16 Mar 2018 09:54:44 +0000 Received: from DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::e1c0:298f:7c10:4167]) by DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::e1c0:298f:7c10:4167%2]) with mapi id 15.20.0634.000; Fri, 16 Mar 2018 09:54:44 +0000 From: Mike Jones To: "ace@ietf.org" CC: "Kathleen.Moriarty.ietf@gmail.com" Thread-Topic: CBOR Web Token (CWT) spec addressing IESG comments Thread-Index: AdO9Cs/++x+fLHH7RFSpgOIUBf3XXg== Date: Fri, 16 Mar 2018 09:54:44 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [217.77.82.83] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR00MB0341; 7:V9R3JFMwadjmK+/PIi+vFPBrbbw1UxArCY6l0hk2H2WoCFDZVYZhV6TEGxuYu7RCpC5SkEpCPQVo9TRRwDdcRt6+qdWcSRnUY5iwy5a7NhzyQr14DJxHN1XTHGzvhTLR1r8B9xh3lC09DmO8EamuQJLmavqKI5Cwc7LhsJT9qMG9NQDj7BfQs2tWZCYHeSYQ7PzKjpj0EAZhy2fmFp2+54VuKPWQusVnJDXR0VteuBiKIKuQJbvg3jOeqpXOFUp8; 20:/iurTfvp+8yTBWqX97EWAIOAq8RNLjVNGNUrNmmwAoxVh5bKc9EjT8vVVmZjDv1oM3hVe29sXkxVHyyHz0Zd55qTccVMkXG2lkhKbNBrr4uwY/HsZDXyGufoOnUy1rLfJsXd31GpKmAeEjNU8kXD1UvOksMRXPL8Z10M2TySFOQ= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: bc3394d7-f7eb-4477-e44b-08d58b23f211 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:DM5PR00MB0341; x-ms-traffictypediagnostic: DM5PR00MB0341: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(31418570063057)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(8121501046)(5005006)(3231221)(944501281)(52105095)(93006095)(93001095)(3002001)(10201501046)(6055026)(61426038)(61427038)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:DM5PR00MB0341; BCL:0; PCL:0; RULEID:; SRVR:DM5PR00MB0341; x-forefront-prvs: 0613912E23 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(396003)(39380400002)(366004)(376002)(346002)(209900001)(199004)(189003)(10290500003)(5630700001)(2501003)(74316002)(66066001)(606006)(3660700001)(72206003)(7696005)(102836004)(99286004)(2906002)(5660300001)(3280700002)(10090500001)(8990500004)(3846002)(6116002)(25786009)(790700001)(316002)(2351001)(68736007)(86362001)(22452003)(5250100002)(7736002)(55016002)(4326008)(97736004)(966005)(6916009)(6346003)(236005)(81156014)(8676002)(1730700003)(105586002)(8936002)(478600001)(5640700003)(14454004)(86612001)(6306002)(54896002)(9686003)(81166006)(33656002)(2900100001)(106356001)(39060400002)(6506007)(186003)(53376002)(59450400001)(53936002)(6436002)(26005)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR00MB0341; H:DM5PR00MB0296.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: F6aA7KE8tJlqaB1AOe/3HBqDe6pNTmA19KAGuEn71Krtawm5chNv9sbn/RrwlkLWtj95pEk1jggdos5g9odn22zXEyGVWNyPWFqDuJNQMYgTQmop9YOQ7CtKqTPoD/i0AfkUM48ux7Dj1Td/HFS5VcBFvDGkFBQB8HQEKvFd+7zrCDBzwFSexQpTbH+qCw4OAKZ6wdt4BeNZfP2zIRaecVjQfXaFTRg+rH5Tbk3JEZ+6KoF+MC5Z/ikTCJg+tJ1nmYXsRtqGSxoqGzXEFnpHR87D2/ytq4sVAzi4g2JuiwE4N9bEMxqSDiQnziRRpE24uh34eh5CmkDP2zpIx3k2BA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM5PR00MB02960FE04ACB2E372DCEA0B8F5D70DM5PR00MB0296namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: bc3394d7-f7eb-4477-e44b-08d58b23f211 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Mar 2018 09:54:44.2166 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR00MB0341 Archived-At: Subject: [Ace] CBOR Web Token (CWT) spec addressing IESG comments X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Mar 2018 09:55:18 -0000 --_000_DM5PR00MB02960FE04ACB2E372DCEA0B8F5D70DM5PR00MB0296namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The CBOR Web Token (CWT) specification has been updated to address comments= received from Internet Engineering Steering Group (IESG) members. Changes were: * Cleaned up the descriptions of the numeric ranges of claim keys being= registered in the registration template for the "CBOR Web Token (CWT) Clai= ms" registry, as suggested by Adam Roach. * Clarified the relationships between the JWT and CWT "NumericDate" and= "StringOrURI" terms, as suggested by Adam Roach. * Eliminated unnecessary uses of the word "type", as suggested by Adam = Roach. * Added the text "IANA must only accept registry updates from the Desig= nated Experts and should direct all requests for registration to the review= mailing list" from RFC 7519, as suggested by Amanda Baber of IANA, which i= s also intended to address Alexey Melnikov's comment. * Removed a superfluous comma, as suggested by Warren Kumari. * Acknowledged additional reviewers. Special thanks to Security Area Director Kathleen Moriarty for helping get = this across the finish line! The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-14 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cbor-web-token-14.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=3D1794 and = as @selfissued. --_000_DM5PR00MB02960FE04ACB2E372DCEA0B8F5D70DM5PR00MB0296namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The CBOR Web Token (CWT) specification has been upda= ted to address comments received from Internet Engineering St= eering Group (IESG) members.  Changes were:

  • Cleaned up the de= scriptions of the numeric ranges of claim keys being registered in the regi= stration template for the "CBOR Web Token (CWT) Claims" registry,= as suggested by Adam Roach.
  • Clarified the relationships between the JWT an= d CWT "NumericDate" and "StringOrURI" terms, as suggest= ed by Adam Roach.
  • Eliminated unnecessary uses of the word "type", a= s suggested by Adam Roach.
  • Added the text "IANA must only accept registr= y updates from the Designated Experts and should direct all requests for re= gistration to the review mailing list" from RFC 7519, as suggested by = Amanda Baber of IANA, which is also intended to address Alexey Melnikov's comment.=
  • Remove= d a superfluous comma, as suggested by Warren Kumari.
  • Acknowledged additional= reviewers.

 

Special thanks to Security Area Director Kathleen Mo= riarty for helping get this across the finish line!

 

The specification is available at:

 

An HTML-formatted version is also available at:=

--_000_DM5PR00MB02960FE04ACB2E372DCEA0B8F5D70DM5PR00MB0296namp_-- From nobody Fri Mar 16 03:13:50 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 356BC1204DA; Fri, 16 Mar 2018 03:13:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xU2Ol2qhJM95; Fri, 16 Mar 2018 03:13:45 -0700 (PDT) Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0090.outbound.protection.outlook.com [104.47.42.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8B5E12025C; Fri, 16 Mar 2018 03:04:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Nl4VzV06uOlaDd/wqBfW9xAzwh2Yjp+g9VjnS194r/8=; b=l0WqBUdCmp1f/GNBBTWqhSePq4Q3HUajmQR6peIO2uF8ovHvuZ/Nvws+z7g6N6ECO1aMMbXa0hqxK1fgWK/yvbtjAo+kwCEYc29ZfdL76ctUFth5qRutuSw2RApgNhfZhiVhBPtSTra2MeiW1ST7m08X7ctCXLwA16XrOB9t5DA= Received: from DM5PR00MB0296.namprd00.prod.outlook.com (52.132.128.37) by DM5PR00MB0293.namprd00.prod.outlook.com (52.132.128.34) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.630.0; Fri, 16 Mar 2018 10:04:51 +0000 Received: from DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::e1c0:298f:7c10:4167]) by DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::e1c0:298f:7c10:4167%2]) with mapi id 15.20.0634.000; Fri, 16 Mar 2018 10:04:51 +0000 From: Mike Jones To: 'Alexey Melnikov' , Jim Schaad , 'The IESG' CC: "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "kaduk@mit.edu" , "ace@ietf.org" Thread-Topic: Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-token-12: (with COMMENT) Thread-Index: AQHTs+2dNyJ9MBpLY0inXBZiAJsPgaPAeSQAgAAWygCAAAL4AIASIVZw Date: Fri, 16 Mar 2018 10:04:50 +0000 Message-ID: References: <152019111919.11926.18305687218435545827.idtracker@ietfa.amsl.com> <01e001d3b3f0$821e1990$865a4cb0$@augustcellars.com> <1520197258.2705337.1291165960.6753CD94@webmail.messagingengine.com> <01e901d3b3fd$639fa120$2adee360$@augustcellars.com> In-Reply-To: <01e901d3b3fd$639fa120$2adee360$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [217.77.82.83] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR00MB0293; 7:EW4BGiB6o5HEYfFe3a5gcxl7nazi+gJHEjtqERTTbbw/rNX+sSBhddHLTIWIR5W2kLK889xr3HjZI/QBN8g/XFKMng3juEwF6t9Gziegr09l5m8kv7pzpUnwKkajVH6ngoHjj+oseRki68LHK9akbbsvR/2Z6awzveqU7hyv66Mwc7y3hPPGy2KrgEbrhTn0Ydn7Xzvnb4s/9TtIbFEHs6tlhcE6BqVyfuMqOMreR40MfGSieMkyCCH2F6fTMFRd; 20:r9+qVPtZ5QPmPU6vv8X3H1oZzL0BzWh/crK5+t9tcGZBjcPrSCJlj0l12uePQZWlO5+VQ9ASJWNxdM4Csh8Yo9DintttEMAl+hxOxLH23fVSaoh7KWH9i7qgs/oMjGBpiWOtTk+lC8AfjXiSGyRYnsRkywHM9Ql1FT2GvoRtC/8= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 63504c4d-35e4-4841-c152-08d58b255ba5 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:DM5PR00MB0293; x-ms-traffictypediagnostic: DM5PR00MB0293: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(240460790083961); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231221)(944501281)(52105095)(3002001)(6055026)(61426038)(61427038)(6041310)(20161123562045)(20161123558120)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:DM5PR00MB0293; BCL:0; PCL:0; RULEID:; SRVR:DM5PR00MB0293; x-forefront-prvs: 0613912E23 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39860400002)(346002)(39380400002)(376002)(396003)(199004)(13464003)(189003)(10090500001)(6246003)(86362001)(105586002)(22452003)(229853002)(4326008)(3660700001)(5660300001)(106356001)(99286004)(2950100002)(305945005)(110136005)(54906003)(316002)(7736002)(81166006)(7696005)(76176011)(26005)(8936002)(81156014)(8990500004)(6346003)(74316002)(33656002)(5250100002)(97736004)(186003)(68736007)(8676002)(14454004)(72206003)(66066001)(478600001)(9686003)(3280700002)(6306002)(25786009)(966005)(55016002)(2906002)(6436002)(93886005)(6506007)(53546011)(10290500003)(53936002)(8666007)(3846002)(6116002)(102836004)(2900100001)(86612001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR00MB0293; H:DM5PR00MB0296.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: S4xMlLCkQNq1095opM+V+Z1Q6MN8axSHq7FClvCNX7YMLR9nTuMZX0ZOa/SGB+zXqVBrUveAPXF3J2nvgG3HjVqN0iKVkfpLKEAFxA5rUYeoMB2QTlIY15Z6dCaNZoeY78Gx3z7f1rXO9Z9dc54u/jS0CJc/omsezHfCpSZNnw55xfcUGjN8FzGxIuTwX70qLAcDfsFjrqKdj+t/az/434dRtVfbUJXLrkDV+YAzUzTNSHSFE3rmnX5yRAww+CHoLvgRLFWgTd/YHQvqyITaQjZTOphSTlzL0hWhaphkz+Kf7/N4whnlSaJeuKhnenOvDuNJMSWrJZsdgjJhZTLWEA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 63504c4d-35e4-4841-c152-08d58b255ba5 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Mar 2018 10:04:50.9302 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR00MB0293 Archived-At: Subject: Re: [Ace] Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-token-12: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Mar 2018 10:13:47 -0000 SGkgQWxleGV5LA0KDQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1hY2Ut Y2Jvci13ZWItdG9rZW4tMTQgc2hvdWxkIGFkZHJlc3MgeW91ciBjb21tZW50cy4gIENoYW5nZXMg bW90aXZhdGVkIGJ5IHlvdXIgY29tbWVudHMgd2VyZToNCiAgLSBBZGRlZCB0aGUgdGV4dCAiSUFO QSBtdXN0IG9ubHkgYWNjZXB0IHJlZ2lzdHJ5IHVwZGF0ZXMgZnJvbSB0aGUgRGVzaWduYXRlZCBF eHBlcnRzIGFuZCBzaG91bGQgZGlyZWN0IGFsbCByZXF1ZXN0cyBmb3IgcmVnaXN0cmF0aW9uIHRv IHRoZSByZXZpZXcgbWFpbGluZyBsaXN0IiBmcm9tIFJGQyA3NTE5LCBhcyBzdWdnZXN0ZWQgYnkg QW1hbmRhIEJhYmVyIG9mIElBTkEsIHdoaWNoIGlzIGFsc28gaW50ZW5kZWQgdG8gYWRkcmVzcyBB bGV4ZXkgTWVsbmlrb3YncyBjb21tZW50Lg0KDQoJCQkJVGhhbmtzIGFnYWluLA0KCQkJCS0tIE1p a2UNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEppbSBTY2hhYWQgPGlldGZA YXVndXN0Y2VsbGFycy5jb20+IA0KU2VudDogU3VuZGF5LCBNYXJjaCA0LCAyMDE4IDE6MTIgUE0N ClRvOiAnQWxleGV5IE1lbG5pa292JyA8YWFtZWxuaWtvdkBmYXN0bWFpbC5mbT47ICdUaGUgSUVT RycgPGllc2dAaWV0Zi5vcmc+DQpDYzogZHJhZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW5AaWV0 Zi5vcmc7IGFjZS1jaGFpcnNAaWV0Zi5vcmc7IGthZHVrQG1pdC5lZHU7IGFjZUBpZXRmLm9yZw0K U3ViamVjdDogUkU6IEFsZXhleSBNZWxuaWtvdidzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRm LWFjZS1jYm9yLXdlYi10b2tlbi0xMjogKHdpdGggQ09NTUVOVCkNCg0KDQoNCj4gLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQWxleGV5IE1lbG5pa292IFttYWlsdG86YWFtZWxu aWtvdkBmYXN0bWFpbC5mbV0NCj4gU2VudDogU3VuZGF5LCBNYXJjaCA0LCAyMDE4IDE6MDEgUE0N Cj4gVG86IEppbSBTY2hhYWQgPGlldGZAYXVndXN0Y2VsbGFycy5jb20+OyBUaGUgSUVTRyA8aWVz Z0BpZXRmLm9yZz4NCj4gQ2M6IGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuQGlldGYub3Jn OyBhY2UtY2hhaXJzQGlldGYub3JnOyANCj4ga2FkdWtAbWl0LmVkdTsgYWNlQGlldGYub3JnDQo+ IFN1YmplY3Q6IFJlOiBBbGV4ZXkgTWVsbmlrb3YncyBObyBPYmplY3Rpb24gb24gDQo+IGRyYWZ0 LWlldGYtYWNlLWNib3Itd2ViLQ0KPiB0b2tlbi0xMjogKHdpdGggQ09NTUVOVCkNCj4gDQo+IE9u IFN1biwgTWFyIDQsIDIwMTgsIGF0IDc6MzkgUE0sIEppbSBTY2hhYWQgd3JvdGU6DQo+ID4gSUFO QSBkb2VzIGFzayBmb3IgdGhlIGV4cGVydCByZXZpZXcgYXMgcGFydCBvZiB0aGUgcHJvY2Vzc2lu ZyBpdCANCj4gPiBkb2VzIGV2ZW4gZm9yIHN0YW5kYXJkcyB0cmFjayBkb2N1bWVudHMuICBUaGlz IGlzIGJlY2F1c2UsIGluIHBhcnQsIA0KPiA+IHRoZXkgYXJlIHJlc3BvbnNpYmxlIGZvciBkb2lu ZyB0aGUgZmluYWwgbnVtYmVyIGFzc2lnbm1lbnQuICBUaGF0IGlzIA0KPiA+IHdoaWNoIG51bWJl ciBpbiB0aGUgcmFuZ2UgaXMgYWN0dWFsbHkgdXNlZC4gIFRoZSBpbnRlcmVzdGluZyANCj4gPiBx dWVzdGlvbiB3b3VsZCBiZSB3aGF0IGhhcHBlbnMgaWYgdGhlIElFU0cgYW5kIHRoZSBERXMgZGlz YWdyZWUgYWJvdXQgc3VjaCB0aGluZ3MuDQo+IA0KPiBUaGlzIGlzIGV4YWN0bHkgd2h5IEkgYW0g YXNraW5nIGFib3V0IHRoaXMuIEl0IG1pZ2h0IGFsc28gcG9zc2libGUgdG8gDQo+IGdhbWUgdGhl IHN5c3RlbSB0byBhc2sgSUVTRyBhcHByb3ZhbCBvZiBhIFByb3Bvc2VkIFN0YW5kYXJkIHRoYXQg DQo+IGJ5cGFzc2VzIEV4cGVydCBSZXZpZXcuDQoNCkludGVyZXN0aW5nLiAgVGhlIHRleHQgdGhh dCBJQU5BIGFuZCBJIGZpbmFsbHkgYWdyZWVkIHRvIGZvciB0aGUgQ09TRSBBbGdvcml0aG0gcmVn aXN0cnkgaXMgIlN0YW5kYXJkcyBBY3Rpb24gV2l0aCBFeHBlcnQgUmV2aWV3Ii4NCg0KVGhhdCB3 b3VsZCBtYWtlIHN1cmUgdGhhdCBpdCBjYW5ub3QgYnlwYXNzIHRoZSBFeHBlcnQgUmV2aWV3Lg0K DQpKaW0NCg0KPiANCj4gPiAgSSB3b3VsZA0KPiA+IGV4cGVjdCB0aGF0IHRoaXMgd291bGQgcmVz dWx0IGluIGEgbG9uZyBkaXNjdXNzaW9uIHdpdGggc29tZSB0eXBlIG9mIA0KPiA+IGZpbmFsIGFn cmVlbWVudCBiZXR3ZWVuIHRoZW0uDQo+ID4NCj4gPiBKaW0NCj4gPg0KPiA+DQo+ID4gPiAtLS0t LU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ID4gRnJvbTogQWxleGV5IE1lbG5pa292IFttYWls dG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbV0NCj4gPiA+IFNlbnQ6IFN1bmRheSwgTWFyY2ggNCwg MjAxOCAxMToxOSBBTQ0KPiA+ID4gVG86IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPg0KPiA+ID4g Q2M6IGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuQGlldGYub3JnOyBhY2UtY2hhaXJzQGll dGYub3JnOyANCj4gPiA+IGthZHVrQG1pdC5lZHU7IGFjZUBpZXRmLm9yZw0KPiA+ID4gU3ViamVj dDogQWxleGV5IE1lbG5pa292J3MgTm8gT2JqZWN0aW9uIG9uDQo+ID4gPiBkcmFmdC1pZXRmLWFj ZS1jYm9yLXdlYi10b2tlbi0NCj4gPiA+IDEyOiAod2l0aCBDT01NRU5UKQ0KPiA+ID4NCj4gPiA+ IEFsZXhleSBNZWxuaWtvdiBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlv biBmb3INCj4gPiA+IGRyYWZ0LWlldGYtYWNlLWNib3Itd2ViLXRva2VuLTEyOiBObyBPYmplY3Rp b24NCj4gPiA+DQo+ID4gPiBXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0 IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byANCj4gPiA+IGFsbCBlbWFpbCBhZGRyZXNzZXMgaW5j bHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byANCj4gPiA+IGN1dCB0 aGlzIGludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKQ0KPiA+ID4NCj4gPiA+DQo+ID4g PiBQbGVhc2UgcmVmZXIgdG8NCj4gPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVt ZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KPiA+ID4gZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJv dXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCj4gPiA+DQo+ID4gPg0KPiA+ ID4gVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBi ZSBmb3VuZCBoZXJlOg0KPiA+ID4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtaWV0Zi1hY2UtY2Jvci13ZWItdG9rZW4vDQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiAt LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCj4gPiA+IC0tDQo+ID4gPiAtLQ0KPiA+ID4gQ09NTUVOVDoNCj4gPiA+IC0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLQ0KPiA+ID4gLS0NCj4gPiA+IC0tDQo+ID4gPg0KPiA+ID4gSnVzdCB0byBkb3VibGUgY2hl Y2s6IGEgQ1dUIGNsYWltIHJlZ2lzdHJhdGlvbiBmcm9tIGEgUHJvcG9zZWQgDQo+ID4gPiBTdGFu ZGFyZCBzdGlsbCBuZWVkcyB0byBiZSBzdWJtaXR0ZWQgdG8gdGhlIHJldmlldyBtYWlsaW5nIGxp c3QsIA0KPiA+ID4gYnV0IGl0IGlzIG5vdCByZWFsbHkgc3ViamVjdCB0byBFeHBlcnQgUmV2aWV3 LCBjb3JyZWN0PyBZb3UgbWlnaHQgDQo+ID4gPiB3YW50IHRvIG1ha2UNCj4gaXQgY2xlYXJlci4N Cj4gPg0KPiA+DQoNCg== From nobody Fri Mar 16 06:03:47 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20E49127AD4; Fri, 16 Mar 2018 06:03:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fastmail.fm header.b=RK4BhnKi; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=QvOmZlQm Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UZqqlp48OqZZ; Fri, 16 Mar 2018 06:03:33 -0700 (PDT) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4845612706D; Fri, 16 Mar 2018 06:03:33 -0700 (PDT) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 3ED9220D44; Fri, 16 Mar 2018 09:03:32 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute7.internal (MEProxy); Fri, 16 Mar 2018 09:03:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.fm; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; bh=SHm02M5pCvwaNxVkqPZXOLYNtZ5PV gNKde1RKFyJxRw=; b=RK4BhnKiIicn+ZQFSg5yMstE45XRY4En2k2SskPLnI+rO I5iytrdpnQHDTpHWO82+xhzXKVRYSb7H90YuLryBhLE1oQGYNfCOm2DlVV/SuPaS OsSz9ZtzJPGZAcXDiFJlbU0KCYUENFX8Mp8+sZIOzHAoY4xeC8hDwGrclI/6AApp 1o+ALOB1SYfmq9TbocDHCw6OaMNLD33NeeUe+5Q8gj69paLjgDTE9q+JWRK6uStm nTtMzAK4UoclE1uWiMX+7iXiMUrrOEckK+uFQ+q6dsYr8KR0E9KTvS5NaCxn3qts fQEvlSbBxm+ZQnB3T9TNv6B1Xr3ghrJAHvKZVSoSQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=SHm02M 5pCvwaNxVkqPZXOLYNtZ5PVgNKde1RKFyJxRw=; b=QvOmZlQmEha6/eSE+lMhFf okp3nv2CORnBo6DWb21EGi5InVvWFUGJGRr2VrbFQPGhG2bQptcgO40qxIiKmtdk gqT9lotW2UnUR1dg98olFcn3Llh71OuckyPMTVJOVNubRObaFvzt7haq2AeiaFnp hrG9hm01Np5if/PLpZVJ2kQKoOuIzTCfSIXHETEYaBOggTkNorLOQsV9amVY/0fr AqXejcdWxLgpqkjNXRAghpYKnGEm4Hk97VKptp9kOuXFGgpoU1pTqAxkxLnqbcSm p5mZZW9guUd/z1m1GBNP1phQZVosAD5/bHNgeJjq+VhmwiITHRH8aq1ihfjnmnyA == X-ME-Sender: Received: from [10.236.242.226] (unknown [85.255.237.100]) by mail.messagingengine.com (Postfix) with ESMTPA id B626724254; Fri, 16 Mar 2018 09:03:31 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPhone Mail (15C202) In-Reply-To: Date: Fri, 16 Mar 2018 13:03:29 +0000 Cc: Jim Schaad , The IESG , "draft-ietf-ace-cbor-web-token@ietf.org" , "ace-chairs@ietf.org" , "kaduk@mit.edu" , "ace@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <152019111919.11926.18305687218435545827.idtracker@ietfa.amsl.com> <01e001d3b3f0$821e1990$865a4cb0$@augustcellars.com> <1520197258.2705337.1291165960.6753CD94@webmail.messagingengine.com> <01e901d3b3fd$639fa120$2adee360$@augustcellars.com> To: Mike Jones Archived-At: Subject: Re: [Ace] Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-token-12: (with COMMENT) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Mar 2018 13:03:40 -0000 Hi Mike, > On 16 Mar 2018, at 10:04, Mike Jones wrote: >=20 > Hi Alexey, >=20 > https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-14 should addres= s your comments. Changes motivated by your comments were: > - Added the text "IANA must only accept registry updates from the Designa= ted Experts and should direct all requests for registration to the review ma= iling list" from RFC 7519, as suggested by Amanda Baber of IANA, which is al= so intended to address Alexey Melnikov's comment. Works for me, thank you! > Thanks again, > -- Mike >=20 > -----Original Message----- > From: Jim Schaad =20 > Sent: Sunday, March 4, 2018 1:12 PM > To: 'Alexey Melnikov' ; 'The IESG' = > Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org; kaduk@mit= .edu; ace@ietf.org > Subject: RE: Alexey Melnikov's No Objection on draft-ietf-ace-cbor-web-tok= en-12: (with COMMENT) >=20 >=20 >=20 >> -----Original Message----- >> From: Alexey Melnikov [mailto:aamelnikov@fastmail.fm] >> Sent: Sunday, March 4, 2018 1:01 PM >> To: Jim Schaad ; The IESG >> Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org;=20 >> kaduk@mit.edu; ace@ietf.org >> Subject: Re: Alexey Melnikov's No Objection on=20 >> draft-ietf-ace-cbor-web- >> token-12: (with COMMENT) >>=20 >>> On Sun, Mar 4, 2018, at 7:39 PM, Jim Schaad wrote: >>> IANA does ask for the expert review as part of the processing it=20 >>> does even for standards track documents. This is because, in part,=20 >>> they are responsible for doing the final number assignment. That is=20 >>> which number in the range is actually used. The interesting=20 >>> question would be what happens if the IESG and the DEs disagree about su= ch things. >>=20 >> This is exactly why I am asking about this. It might also possible to=20 >> game the system to ask IESG approval of a Proposed Standard that=20 >> bypasses Expert Review. >=20 > Interesting. The text that IANA and I finally agreed to for the COSE Algo= rithm registry is "Standards Action With Expert Review". >=20 > That would make sure that it cannot bypass the Expert Review. >=20 > Jim >=20 >>=20 >>> I would >>> expect that this would result in a long discussion with some type of=20 >>> final agreement between them. >>>=20 >>> Jim >>>=20 >>>=20 >>>> -----Original Message----- >>>> From: Alexey Melnikov [mailto:aamelnikov@fastmail.fm] >>>> Sent: Sunday, March 4, 2018 11:19 AM >>>> To: The IESG >>>> Cc: draft-ietf-ace-cbor-web-token@ietf.org; ace-chairs@ietf.org;=20 >>>> kaduk@mit.edu; ace@ietf.org >>>> Subject: Alexey Melnikov's No Objection on >>>> draft-ietf-ace-cbor-web-token- >>>> 12: (with COMMENT) >>>>=20 >>>> Alexey Melnikov has entered the following ballot position for >>>> draft-ietf-ace-cbor-web-token-12: No Objection >>>>=20 >>>> When responding, please keep the subject line intact and reply to=20 >>>> all email addresses included in the To and CC lines. (Feel free to=20 >>>> cut this introductory paragraph, however.) >>>>=20 >>>>=20 >>>> Please refer to >>>> https://www.ietf.org/iesg/statement/discuss-criteria.html >>>> for more information about IESG DISCUSS and COMMENT positions. >>>>=20 >>>>=20 >>>> The document, along with other ballot positions, can be found here: >>>> https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ >>>>=20 >>>>=20 >>>>=20 >>>> ------------------------------------------------------------------ >>>> -- >>>> -- >>>> COMMENT: >>>> ------------------------------------------------------------------ >>>> -- >>>> -- >>>>=20 >>>> Just to double check: a CWT claim registration from a Proposed=20 >>>> Standard still needs to be submitted to the review mailing list,=20 >>>> but it is not really subject to Expert Review, correct? You might=20 >>>> want to make >> it clearer. >>>=20 >>>=20 >=20 From nobody Fri Mar 16 11:08:41 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 194C912D77D; Fri, 16 Mar 2018 11:08:39 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.75.1 Auto-Submitted: auto-generated Precedence: bulk Cc: The IESG , ace-chairs@ietf.org, Kathleen.Moriarty.ietf@gmail.com, kaduk@mit.edu, ace@ietf.org, draft-ietf-ace-cbor-web-token@ietf.org, rfc-editor@rfc-editor.org MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <152122371909.14532.4291284380950011154.idtracker@ietfa.amsl.com> Date: Fri, 16 Mar 2018 11:08:39 -0700 Archived-At: Subject: [Ace] Protocol Action: 'CBOR Web Token (CWT)' to Proposed Standard (draft-ietf-ace-cbor-web-token-14.txt) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Mar 2018 18:08:39 -0000 The IESG has approved the following document: - 'CBOR Web Token (CWT)' (draft-ietf-ace-cbor-web-token-14.txt) as Proposed Standard This document is the product of the Authentication and Authorization for Constrained Environments Working Group. The IESG contact persons are Kathleen Moriarty and Eric Rescorla. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ Technical Summary CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR) and CBOR Object Signing and Encryption (COSE) is used for added application layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON. Working Group Summary The document was not controversial, and received a great deal of review from many participants. A first WGLC revealed a few issues that required enough changes that a second WGLC was made. The second WGLC attracted fewer comments, but the document is largely unchanged from the first WGLC, and we believe it to be in good shape. Document Quality There are multiple implementations of this document, and the examples have been validated by at least two implementations. This document is an important part of the ecosystem, with several specifications both inside and outside the IETF already referring to it. This document requests a new media type assignment from IANA that requires expert review; this request has already been sent to media-types@iana.org. Personnel Benjamin Kaduk is the document shepherd; Kathleen Moriarty is the responsible Area Director. IANA Note This documents requests the creation of the CBOR Web Token (CWT) Claims registry and depending on the values requested, they will be evaluated on a Standards Track Required, Specification Required, Expert Review, or Private Use basis [RFC8126] after a three-week review period on the cwt-reg-review@ietf.org mailing list, on the advice of one or more Designated Experts. This document requests a new media type assignment from IANA that requires expert review; this request has already been sent to media-types@iana.org. This document requests a new CoAP Content-Formats assignment from IANA with a suggested value in the "Expert Review" space; this request has not yet been sent to IANA for review. This document requests a new CBOR Tag assignment from IANA; this value has already been assigned with this document as the reference. From nobody Sat Mar 17 10:41:25 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0141212711E for ; Sat, 17 Mar 2018 10:41:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.53 X-Spam-Level: X-Spam-Status: No, score=-14.53 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1NTRr_Jq0ZwP for ; Sat, 17 Mar 2018 10:41:22 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25E0C12025C for ; Sat, 17 Mar 2018 10:41:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3291; q=dns/txt; s=iport; t=1521308482; x=1522518082; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=T6eAKq2pdL4PhJobmAaj5JvKIjoHk2jf7b0vl5tyi5Y=; b=DbGX46K5DvVLuih0UArEELUjEccPAPFFBtqs+X72VJBVpv9jHtxpbx/I kbIbSJJ77ht+i6gfrqU2hKBwW58a0NcBmbeT8nmN5HkEHjsebm0Oz4agk uJ90s7Tk2NrfAR8QTajxLL+BNKPN/wWipdQNUwTCnBMhMRdTv+MBwd28j A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DKAAB0Uq1a/51dJa1eGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNQZnIoCo1tjXiCA4EWlACCEgsYC4RtAoM1ITQYAQIBAQEBAQE?= =?us-ascii?q?CayiFJQEBAQQBATg0BAcMBAIBCBEEAQEBHgkHJwsUCQgBAQQBDQUIhRAPriWIV?= =?us-ascii?q?YIJBYUzghWBVYFUgyCDHgEBgVCFfwOROYZ9CQKPJY03kA4CERMBgSkBHjiBUnA?= =?us-ascii?q?VOoJDkGt0jweBGAEBAQ?= X-IronPort-AV: E=Sophos;i="5.48,321,1517875200"; d="scan'208";a="85513323" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Mar 2018 17:41:21 +0000 Received: from XCH-RCD-008.cisco.com (xch-rcd-008.cisco.com [173.37.102.18]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id w2HHfLF2013162 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sat, 17 Mar 2018 17:41:21 GMT Received: from xch-aln-010.cisco.com (173.36.7.20) by XCH-RCD-008.cisco.com (173.37.102.18) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Sat, 17 Mar 2018 12:41:20 -0500 Received: from xch-aln-010.cisco.com ([173.36.7.20]) by XCH-ALN-010.cisco.com ([173.36.7.20]) with mapi id 15.00.1320.000; Sat, 17 Mar 2018 12:41:20 -0500 From: "Panos Kampanakis (pkampana)" To: "consultancy@vanderstok.org" , "Michael Richardson" CC: "ace@ietf.org" Thread-Topic: [Ace] draft-ietf-ace-coap-est-00 Thread-Index: AdO4tMNz0JYN1PFNQaWsBOIkt90Z7QBTmT+AAFp7tAgAPCRUgAAEht0AAGivJ+A= Date: Sat, 17 Mar 2018 17:41:20 +0000 Message-ID: <9cdd4bec69e643f88d4ca1767ed2c6f8@XCH-ALN-010.cisco.com> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> <24297.1520991636@obiwan.sandelman.ca> <25902.1521100857@dooku.sandelman.ca> <00435523cc9b3c1969a026200260a373@xs4all.nl> In-Reply-To: <00435523cc9b3c1969a026200260a373@xs4all.nl> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.82.248.2] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 17:41:24 -0000 Sorry, getting to this late.=20 Thank you Jim for the feedback. I think an good point comes out of this discussion. We need to articulate t= he RA role that could at the same time act as a proxy. An RA usually perfor= ms authentication/authorization before relaying to the CA that already has = a predetermined relationship with. A proxy acts as a plain COAP2HTTP transl= ator that does not necessarily perform any authentication or authorization = of the client. In either case ESP PoP cannot be performed as DTLS to the cl= ient is terminated in the middle.=20 In summary, reading this discussion I see these things to improve in the dr= aft=20 - Clarify DTLS 1.2 and 1.3 in the DTLS section. - Clarify the use of COSE or CMS for server-side keys and chose the MTI. I = don't think COSE just for the keys while we use ASN.1 DER for ca/enrolled c= erts will buy us much. And it will alter server-side key generation message= s defined in RFC7030. I think introducing COSE for these messages is fine a= s long as it is conveyed in the response headers and they key establishment= is clear. Given that we have a way of doing it based on RFC7030, I think t= his falls out of scope for this draft.=20 - Add text about short and long names - Proxy and RA clarification in Section 6. - Be explicit about the proxy getting the whole message before forwarding i= n Section 6.=20 Rgs, Panos -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of peter van der Stok Sent: Thursday, March 15, 2018 6:11 AM To: Michael Richardson Cc: ace@ietf.org Subject: Re: [Ace] draft-ietf-ace-coap-est-00 Michael Richardson schreef op 2018-03-15 09:00: > peter van der Stok wrote: > >> >> DTLS connection is going to be required to act as an RA. RAs > >> are required > >> >> to have the entire request for adding authentication as=20 > necessary. > >> > >> > This is visible in the figure of section 6, but needs=20 > elaboration in > >> the > >> > text. > >> > >> I don't understand why we have that paragraph. > >> An end point that terminates the Pledge (D)TLS connection and=20 > acts as > >> an RA *IS* a Join Registrar, not a Proxy. > >> >=20 > > Thus is outside the BRSKI context, and thus a proxy with RA=20 > (separate or not) >=20 > Let me delete "Join" from above sentence. >=20 > A device that terminates the DTLS security (CoAPS) and then talks to=20 > the CA is a Registration Authority according to EST and RFC5280. It's=20 > not a proxy. > (And it doesn't matter if it speaks HTTPS or CMS or CMP or=20 > super-pigeon-telepathy to the CA) >=20 A http/coap proxy is specified in RFC8075. It explains "how an HTTP reques= t is mapped to a CoAP request and how a CoAP response is mapped back to an HTTP response". In the est-coap draft DTLS and TLS connections are terminated in the http/c= oap proxy, and the proxy is therefore connected to an RA (possibly running = on the same host as the proxy). Where is my terminology going astray? Peter _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Sun Mar 18 02:08:32 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37686127058 for ; Sun, 18 Mar 2018 02:08:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ADSVo_nZTztF for ; Sun, 18 Mar 2018 02:08:28 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5616B1200FC for ; Sun, 18 Mar 2018 02:08:28 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [IPv6:2001:67c:370:128:a11:96ff:fe01:81e0]) by relay.sandelman.ca (Postfix) with ESMTPS id 9313F1F95D; Sun, 18 Mar 2018 09:08:26 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 0EFEA5F3; Sun, 18 Mar 2018 09:07:54 +0000 (GMT) From: Michael Richardson To: consultancy@vanderstok.org cc: ace@ietf.org In-reply-to: <00435523cc9b3c1969a026200260a373@xs4all.nl> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> <24297.1520991636@obiwan.sandelman.ca> <25902.1521100857@dooku.sandelman.ca> <00435523cc9b3c1969a026200260a373@xs4all.nl> Comments: In-reply-to peter van der Stok message dated "Thu, 15 Mar 2018 11:10:34 +0100." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" Date: Sun, 18 Mar 2018 09:07:54 +0000 Message-ID: <30521.1521364074@dooku.sandelman.ca> Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Mar 2018 09:08:30 -0000 --=-=-= Content-Type: text/plain peter van der Stok wrote: >> Let me delete "Join" from above sentence. >> >> A device that terminates the DTLS security (CoAPS) and then talks to the CA >> is a Registration Authority according to EST and RFC5280. It's not a >> proxy. >> (And it doesn't matter if it speaks HTTPS or CMS or CMP or >> super-pigeon-telepathy >> to the CA) > A http/coap proxy is specified in RFC8075. It explains "how an HTTP request > is mapped to > a CoAP request and how a CoAP response is mapped back to an HTTP > response". > In the est-coap draft DTLS and TLS connections are terminated in the > http/coap proxy, and the proxy is therefore connected to an RA (possibly > running on the same host as the proxy). > Where is my terminology going astray? In the EST context, if it's a device with a (D)TLS connection to the Pledge (the device enrolling) and a TLS connection to the PKI CA, then it's a Registrar, not an http/coap proxy. It may have the same apparent connectors, but it processes the content. I can't come with any pure-7030 situations where this official MITM could be accomodated between the 7030 client and 7030-registrar. Perhaps this represents that for generic-7030 use involving COAP+DTLS, that a very clear applicability statement will need to detail what the initial EST trust is. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJarixpAAoJEJVM4Vb9/EKQknUH/iBbB8FZhEpXFsHB20cuFUF/ wf14pvlesCS+0FV7yAh8TeSAoQ/qtJF6SlxnSfoc71v9H/IhOVwRVKEYqWe4gEN0 hpQWNuSfi3uxQ3YUpQ8foAP2xFpV5x0nJ/XnDApTWDLvX2LEH5JzypO/WKkY9eTQ jHRXyNaVAivJK2xkCil6MtqYk66Lw6GVvZRem9p2ageBDH3C5vgZsfXc168O3Pod JoFqG5nGDw13IG8fiIPuC5OlqV6x+9zfPnuRt/OYzMBVEoyZt0mMfNApvbC955px dLV4/UNiBmE8ClK8FYhB0SNR41+8JFzcdOdaGnKFHeAdXOziDpyTRNcPwVszVn0= =77Ms -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Mar 18 08:13:58 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 705D712D7FC for ; Sun, 18 Mar 2018 08:13:56 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 6.75.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152138603645.15953.8320195590496228164.idtracker@ietfa.amsl.com> Date: Sun, 18 Mar 2018 08:13:56 -0700 From: IETF Secretariat Archived-At: Subject: [Ace] Milestones changed for ace WG X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Mar 2018 15:13:56 -0000 Deleted milestone "Submit "An Architecture for Authorization in Constrained Environments" to the IESG for publication as a Informational RFC.". Added milestone "Submit CBOR Web Token draft to the IESG for publication", due February 2018. Added milestone "WGLC on CWT Proof of possession", due March 2018. Added milestone "Submit CWT Proof of Possession to IESG for publication as proposed standard", due July 2018. Added milestone "WGLC for OAuth Authentication and Authorization Solution draft", due July 2018. Added milestone "WGLC for DTLS Profile for ACE", due September 2018. Added milestone "WGLC on OSCORE Profile for ACE", due September 2018. Changed milestone "Submit "Authentication and Authorization Solution" specification to the IESG for publication as a Proposed Standard.", set due date to November 2018 from September 2016. Added milestone "Submit DTLS Profile for ACE to the IESG for publication as a proposed standard", due November 2018. Added milestone "Submit ACE profile for OSCORE to the IESG for publication as a Proposed Standard", due November 2018. URL: https://datatracker.ietf.org/wg/ace/about/ From nobody Sun Mar 18 19:55:37 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A00D2126BFD for ; Sun, 18 Mar 2018 19:55:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.53 X-Spam-Level: X-Spam-Status: No, score=-14.53 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ALsK5ZrWMWuw for ; Sun, 18 Mar 2018 19:55:32 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DBA4124BE8 for ; Sun, 18 Mar 2018 19:55:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2119; q=dns/txt; s=iport; t=1521428132; x=1522637732; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=mktw9JnM5Bh+7wnIOMwq4xe8EiCHyFMxDRITe3FNg2A=; b=erlrUqoQcMKvbeLM8Blw4wXHmCN2bgyjd5HcOZGG+5RTxkZbbMm2WWbv dUN/ULFsZXe01jcp1nwBmvwYG26efeInhxT8pQNBYT5j0EZOQ3WUoUkU0 qiJyDCMMEE+Luv6XCDqoB71UwM0aTBf6kh5VPU0WFTbrCPqGA5oxT0TvV 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AEAQC4Ja9a/4kNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNQZnIoCo1tjXiCA4EWlACCEgsfgVyDFQKDNSE0GAECAQEBAQE?= =?us-ascii?q?BAmsohSUBAQEDATo/DAQCAQgRBAEBAR4JBzIUCQgCBAENBQiFCAirNYhVgg6FM?= =?us-ascii?q?4IVgVWBVIMgim8DmDYJAo8ljTeQDgIREwGBKQEeOIFScBWCfQmQYnSPJ4EYAQE?= =?us-ascii?q?B?= X-IronPort-AV: E=Sophos;i="5.48,328,1517875200"; d="scan'208";a="85409346" Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Mar 2018 02:55:31 +0000 Received: from XCH-ALN-008.cisco.com (xch-aln-008.cisco.com [173.36.7.18]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id w2J2tVnB029065 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 19 Mar 2018 02:55:31 GMT Received: from xch-aln-010.cisco.com (173.36.7.20) by XCH-ALN-008.cisco.com (173.36.7.18) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Sun, 18 Mar 2018 21:55:30 -0500 Received: from xch-aln-010.cisco.com ([173.36.7.20]) by XCH-ALN-010.cisco.com ([173.36.7.20]) with mapi id 15.00.1320.000; Sun, 18 Mar 2018 21:55:30 -0500 From: "Panos Kampanakis (pkampana)" To: Michael Richardson , "consultancy@vanderstok.org" CC: "ace@ietf.org" Thread-Topic: [Ace] draft-ietf-ace-coap-est-00 Thread-Index: AdO4tMNz0JYN1PFNQaWsBOIkt90Z7QBTmT+AAFp7tAgAPCRUgAAEht0AAJSvhwAAGsDXAA== Date: Mon, 19 Mar 2018 02:55:30 +0000 Message-ID: <51de58f8d5ad4e0e97d84fbe39a921ae@XCH-ALN-010.cisco.com> References: <001d01d3b8b4$f6e71600$e4b54200$@augustcellars.com> <24297.1520991636@obiwan.sandelman.ca> <25902.1521100857@dooku.sandelman.ca> <00435523cc9b3c1969a026200260a373@xs4all.nl> <30521.1521364074@dooku.sandelman.ca> In-Reply-To: <30521.1521364074@dooku.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.82.244.54] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Ace] draft-ietf-ace-coap-est-00 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 02:55:35 -0000 I think this is a terminology fix. Let's address it in the next iteration. -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Michael Richardson Sent: Sunday, March 18, 2018 5:08 AM To: consultancy@vanderstok.org Cc: ace@ietf.org Subject: Re: [Ace] draft-ietf-ace-coap-est-00 peter van der Stok wrote: >> Let me delete "Join" from above sentence. >> >> A device that terminates the DTLS security (CoAPS) and then talks to= the CA >> is a Registration Authority according to EST and RFC5280. It's not = a >> proxy. >> (And it doesn't matter if it speaks HTTPS or CMS or CMP or >> super-pigeon-telepathy >> to the CA) > A http/coap proxy is specified in RFC8075. It explains "how an HTTP = request > is mapped to > a CoAP request and how a CoAP response is mapped back to an HTTP > response". > In the est-coap draft DTLS and TLS connections are terminated in the > http/coap proxy, and the proxy is therefore connected to an RA (possi= bly > running on the same host as the proxy). > Where is my terminology going astray? In the EST context, if it's a device with a (D)TLS connection to the Pledge= (the device enrolling) and a TLS connection to the PKI CA, then it's a Registrar, not an http/coap proxy. It may have the same apparent connectors, but it processes the content. I can't come with any pure-7030 situations where this official MITM could b= e accomodated between the 7030 client and 7030-registrar. Perhaps this represents that for generic-7030 use involving COAP+DTLS, that= a very clear applicability statement will need to detail what the initial = EST trust is. -- ] Never tell me the odds! | ipv6 mesh network= s [ ] Michael Richardson, Sandelman Software Works | network architect= [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ -- Michael Richardson , Sandelman Software Works -=3D = IPv6 IoT consulting =3D- From nobody Mon Mar 19 02:34:32 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1749A126DFB for ; Mon, 19 Mar 2018 02:34:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sMp5wW79_NCP for ; Mon, 19 Mar 2018 02:34:27 -0700 (PDT) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0049.outbound.protection.outlook.com [104.47.1.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C1681243F6 for ; Mon, 19 Mar 2018 02:34:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=hcXr+gyNYiaMlF3uOonNu4L078F7kHpBavHaSrbTAu0=; b=i0vQ7/eriH+jJx+GnS/jb/CS0lN9nUp6JnZXajfLqevODSFi2+Gusc7xt7U+FMkZcLMMH2wEVkMBAmKJX3ACKv6JKl5zxv9+OyN8PbvqYZScUpoQjkHgT+9pLw6rePLjivf9VQ+JeebM6W6KZWLh6bEQ3zk5SLqlRrVXGXn+078= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1438.eurprd08.prod.outlook.com (10.167.210.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 09:34:23 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0588.016; Mon, 19 Mar 2018 09:34:23 +0000 From: Hannes Tschofenig To: "ace@ietf.org" Thread-Topic: [Atlas] ATLS side meeting Thread-Index: AQHTu67NMrVDFNWSMUi2ZRNVaXxZoaPXUx8Q Date: Mon, 19 Mar 2018 09:34:22 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.155.188] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1438; 7:yS1DZ3Q0RleJmiCbIffrqdTqB89DxNvMouO8MuZopy/D1RVz2ert2nMD2lMVmnYlNjmw/OOLNN6lWITe107su72bJH+MgShMJdI2Q2z13fa06v0OaYjy8NVujJBcWA73ydhK2lXSBlbYVrBjDQms668cnRtaucTzjyD6k3nvdQxyRiVdtB3SBVDLwAm+B2TNt09dq+ILHLiJgqMa87gavDbzowu7kQQ6NzK6z9BcJbQdG3iVRADrrPY/RoDG2e4T x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 235fb5ab-d5ad-483d-0669-08d58d7c9961 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1438; x-ms-traffictypediagnostic: VI1PR0801MB1438: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(3231221)(944501244)(52105095)(6055026)(6041310)(20161123562045)(20161123560045)(20161123558120)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:VI1PR0801MB1438; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1438; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(366004)(346002)(39380400002)(39860400002)(396003)(69234005)(199004)(40434004)(189003)(53754006)(99286004)(5660300001)(2351001)(97736004)(3280700002)(5640700003)(2906002)(478600001)(3660700001)(5630700001)(6116002)(25786009)(6436002)(7696005)(59450400001)(6506007)(76176011)(6916009)(3846002)(33656002)(2473003)(9686003)(55016002)(6306002)(72206003)(54896002)(68736007)(2950100002)(790700001)(53546011)(316002)(14454004)(26005)(102836004)(81166006)(229853002)(186003)(5890100001)(2501003)(66066001)(5250100002)(106356001)(86362001)(7736002)(81156014)(53936002)(8676002)(105586002)(1730700003)(2900100001)(8936002)(74316002)(11634002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1438; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: UNPqgYNpXj+2Y6i+Glkv4rGDNLKqDY+wxxSSUb6nt3OEwZ1fiGdVuDFhcTxGZNppOucEvGNr43fpOOOzIkX1N60risFiYRcX4esJ4Y4ADGtY4gCcMwmAaO3lu/WKdyAkCado3TiHeG92fSc0jKKfl+TmYqwNpOUpwVkSumrbF0WpIJuU2ME4fc8OE832yUMh4Gljr4JwrhPFDFe7Clar5M/1/jYhaK93YHuG6tI/F4Zjf7lx/igd9KkXE3LoMAcglyDu16+IaL2G6yIasCtPdOiMnP4YB5lvLzXlPon1aDOk1IHWBpZMMvjk8lsZzPhzzhkKZaXt+Eb6PR3Onm4Zww== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB21124786AE09EEF3A97ECF00FAD40VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 235fb5ab-d5ad-483d-0669-08d58d7c9961 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 09:34:23.0277 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1438 Archived-At: Subject: [Ace] FW: [Atlas] ATLS side meeting X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 09:34:30 -0000 --_000_VI1PR0801MB21124786AE09EEF3A97ECF00FAD40VI1PR0801MB2112_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RllJOiBIZXJlIGlzIHRoZSBpbmZvIGZvciB0aGUgbHVuY2ggbWVldGluZyB0b2RheSB0byBkaXNj dXNzIGFwcGxpY2F0aW9uIGxheWVyIFRMUy4NCkZlZWwgZnJlZSB0byBqb2luIHVzLg0KDQpGcm9t OiBBdGxhcyBbbWFpbHRvOmF0bGFzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBSaWNo YXJkIEJhcm5lcw0KU2VudDogMTQgTWFyY2ggMjAxOCAxNjowNA0KVG86IGF0bGFzQGlldGYub3Jn DQpTdWJqZWN0OiBbQXRsYXNdIEFUTFMgc2lkZSBtZWV0aW5nDQoNCkhleSBhbGwsDQoNCkZZSSwg d2UgaGF2ZSBhIHJvb20gYm9va2VkIGZvciBhIHNpZGUgbWVldGluZyBhdCB0aGUgSUVURiBtZWV0 aW5nLCBkdXJpbmcgdGhlIGx1bmNoIGJyZWFrIG9uIE1vbmRheS4gIFRoZSBhc3NpZ25lZCByb29t IGlzIEhpbHRvbiBNZWV0aW5nIFJvb21zIDEtNC4NCg0KVGhlcmUgd2lsbCBub3QgYmUgY2F0ZXJp bmcsIHNvIGx1bmNoIGlzIEJZTy4NCg0KLS1SaWNoYXJkDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRo ZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVu dGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVu ZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBk byBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBm b3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBt ZWRpdW0uIFRoYW5rIHlvdS4NCg== --_000_VI1PR0801MB21124786AE09EEF3A97ECF00FAD40VI1PR0801MB2112_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJ bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1h eD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9 IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkZZSTogSGVyZSBpcyB0aGUgaW5mbyBmb3IgdGhlIGx1bmNo IG1lZXRpbmcgdG9kYXkgdG8gZGlzY3VzcyBhcHBsaWNhdGlvbiBsYXllciBUTFMuDQo8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+RmVlbCBmcmVlIHRvIGpvaW4gdXMuDQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBuYW1lPSJfTWFpbEVuZENvbXBv c2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L2E+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gQXRsYXMgW21haWx0bzphdGxhcy1ib3Vu Y2VzQGlldGYub3JnXQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5SaWNoYXJkIEJhcm5lczxicj4NCjxi PlNlbnQ6PC9iPiAxNCBNYXJjaCAyMDE4IDE2OjA0PGJyPg0KPGI+VG86PC9iPiBhdGxhc0BpZXRm Lm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBbQXRsYXNdIEFUTFMgc2lkZSBtZWV0aW5nPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhleSBhbGwsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZZSSwgd2UgaGF2 ZSBhIHJvb20gYm9va2VkIGZvciBhIHNpZGUgbWVldGluZyBhdCB0aGUgSUVURiBtZWV0aW5nLCBk dXJpbmcgdGhlIGx1bmNoIGJyZWFrIG9uIE1vbmRheS4mbmJzcDsgVGhlIGFzc2lnbmVkIHJvb20g aXMgSGlsdG9uIE1lZXRpbmcgUm9vbXMgMS00LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGVyZSB3aWxsIG5vdCBiZSBjYXRlcmluZywgc28g bHVuY2ggaXMgQllPLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4tLVJpY2hhcmQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KSU1QT1JUQU5U IE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBh cmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5v dCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRp YXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNv biwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1h dGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_VI1PR0801MB21124786AE09EEF3A97ECF00FAD40VI1PR0801MB2112_-- From nobody Mon Mar 19 03:08:14 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74B4312E88E for ; Mon, 19 Mar 2018 03:08:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gLyJCv6AJHin for ; Mon, 19 Mar 2018 03:08:08 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70C5F126E64 for ; Mon, 19 Mar 2018 03:08:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1521454080; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=UtwsPATuxB/mh08Iont/KclC9J6ua+82UESTQCkAzng=; b=IdZDX5liMbz//mmk9CtRNSOA0xRbrvRxVvog8OHis4qx4O7llKrdiZswhNrZKnfA KbeXSyVJeVW86ai4HuvZgDhP8+g4DXJVlj1ePpnOWH3Yq+i4lmOG1Nb032iMkwdi vyG6z0hEye3/Nstoegm3jzLiAOtplhhKmMp1Gc6pRP4=; X-AuditID: c1b4fb2d-499ff70000005540-d7-5aaf8c00b580 Received: from ESESSHC021.ericsson.se (Unknown_Domain [153.88.183.81]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id CD.4F.21824.00C8FAA5; Mon, 19 Mar 2018 11:08:00 +0100 (CET) Received: from nomadiclab.fi.eu.ericsson.se (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.83) with Microsoft SMTP Server id 14.3.382.0; Mon, 19 Mar 2018 11:08:00 +0100 Received: from nomadiclab.fi.eu.ericsson.se (localhost [127.0.0.1]) by nomadiclab.fi.eu.ericsson.se (Postfix) with ESMTP id 46DFD4816A4; Mon, 19 Mar 2018 12:08:00 +0200 (EET) Received: from [127.0.0.1] (localhost [IPv6:::1]) by nomadiclab.fi.eu.ericsson.se (Postfix) with ESMTP id 091CE481571; Mon, 19 Mar 2018 12:07:59 +0200 (EET) To: "ace@ietf.org" , Rene Struik From: Mohit Sethi Message-ID: <9268fc34-eb89-beb0-d526-c393910d55d9@ericsson.com> Date: Mon, 19 Mar 2018 10:07:59 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-AV-Checked: ClamAV using ClamSMTP X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrLLMWRmVeSWpSXmKPExsUyM2J7oC5Dz/oog1nXDSy+f+thtlh94zmL A5PHzll32T2WLPnJFMAUxWWTkpqTWZZapG+XwJVx4H5IwT6misWvp7A3MDYzdTFyckgImEhc al/G3MXIxSEkcJhRYtnCv+wQzg5GiXO7J0JlNjFKbP/2mBHCWcAoMevsSaAyDg4RATeJxVfE QUaxCehJdJ47zgxiCwuYSlxa8g1sBa+AvcS0eXNYQWwWAVWJh1MmsoPYogIREp0r57NA1AhK nJz5BMxmFrCQmDn/PCOELS+x/e0cZghbXOLWk/lQZytLLGhZBFYjJKAusbXjAOMERsFZSEbN QjJqFpJRs5CMWsDIsopRtDi1uDg33chYL7UoM7m4OD9PLy+1ZBMjMJAPbvmtu4Nx9WvHQ4wC HIxKPLw3q9dHCbEmlhVX5h5ilOBgVhLhfXplXZQQb0piZVVqUX58UWlOavEhRmkOFiVx3pOe vFFCAumJJanZqakFqUUwWSYOTqkGRu7LO+VLp9x5t30/W5Ns+Cr7W9LuKZmpk1U1mWL8OSK1 55lN8xNY+O6n8lPVBvbLizgMVtvOKs6rmTM5XzEvZOKM88mX1y/7a7SwwaTjzGeHmXKNqz9o +3MfL11we83dbtFOi6aL56ddPqYdwHG78XDIkS+Byv8VZBKYY3qZZe18Xu/6teMtgxJLcUai oRZzUXEiAKB11vtgAgAA Archived-At: Subject: [Ace] ed25519 as Mandatory to Implement discussion X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 10:08:12 -0000 Hi ACE folks, Rene has a draft in LWIG that describes how to use P-256 and Ed25519 with the same underlying implementation: https://tools.ietf.org/html/draft-struik-lwig-curve-representations-00 Rene will be presenting it in LWIG on Wednesday at 15:20 London time. Your input is appreciated. --Mohit From nobody Mon Mar 19 03:13:10 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 36A79126DEE; Mon, 19 Mar 2018 03:13:06 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.75.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152145438615.15957.13561757847609271532@ietfa.amsl.com> Date: Mon, 19 Mar 2018 03:13:06 -0700 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-cbor-web-token-15.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 10:13:07 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : CBOR Web Token (CWT) Authors : Michael B. Jones Erik Wahlström Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-cbor-web-token-15.txt Pages : 27 Date : 2018-03-19 Abstract: CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR) and CBOR Object Signing and Encryption (COSE) is used for added application layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-15 https://datatracker.ietf.org/doc/html/draft-ietf-ace-cbor-web-token-15 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-cbor-web-token-15 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 19 03:20:10 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61FBF126E64 for ; Mon, 19 Mar 2018 03:20:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QSp5D-Nkkx6u for ; Mon, 19 Mar 2018 03:20:00 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50045.outbound.protection.outlook.com [40.107.5.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11B5412D889 for ; Mon, 19 Mar 2018 03:19:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=YJfoYKn13DAhoawkCtmH/DdSkHC8rZetVtgdvuGZD+Q=; b=nhZXYo6ALPXlvGO2QPbeitbhJ/xf/2VOSVUpeqQRgzF1qaa4D863X7AMGBovcWa6g9BMdcV5iC19RATpDA+Lc2SYXEpMviXU2PKCp0ne38zzNLduiNjxqM/vc8lXiVv26q7uAToE0VKrKKlUa3HkABAoWVjadHc0NQslqntNOjg= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1967.eurprd08.prod.outlook.com (10.173.74.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 10:19:57 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0588.016; Mon, 19 Mar 2018 10:19:57 +0000 From: Hannes Tschofenig To: "ace@ietf.org" Thread-Topic: Client Token Analysis Thread-Index: AdO/a3rDkQB3IcS+SlOu3y0ypq+sgw== Date: Mon, 19 Mar 2018 10:19:57 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.155.188] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1967; 7:qakmc5/l4yhcna0BUlY/+9QyaIs+wtwOa20dlbk2F3aI7WEFkxwjNIT4QtPtLoMsOHPM00orz6vu4he5F57ymtrPAwFEgfHKy1KKfiNF8LNg3unK1pRvfWgrGyk5iHHqAwoNJ1/FQJEAsmykQ/dOnalJfdStoOxfQOMBKZYuradI7Er5l34EUI4lzEQx2y9VsMrHkARipqESo2u6CBfcglQQj/DfyxY6B3+IrUhbp3aWxNO8OkzNpvn9GlpBjYqv x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f14d38d4-4a78-4da3-d2e9-08d58d82f719 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1967; x-ms-traffictypediagnostic: VI1PR0801MB1967: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3231221)(944501244)(52105095)(3002001)(6055026)(6041310)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:VI1PR0801MB1967; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1967; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(366004)(376002)(346002)(396003)(53754006)(199004)(189003)(40434004)(105586002)(3846002)(53936002)(1730700003)(54896002)(236005)(7696005)(106356001)(2351001)(2906002)(6436002)(72206003)(55016002)(790700001)(316002)(5630700001)(8676002)(102836004)(6116002)(6306002)(5640700003)(9686003)(3660700001)(7736002)(26005)(33656002)(6506007)(59450400001)(6916009)(606006)(966005)(2501003)(14454004)(81166006)(81156014)(7116003)(74316002)(8936002)(3480700004)(99286004)(5890100001)(5660300001)(186003)(5250100002)(3280700002)(68736007)(97736004)(25786009)(86362001)(2900100001)(66066001)(478600001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1967; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: HiDCAfCeP7v5voRKjSQuBbIEOhXSv3yqL1YuifSeDsASoyc8Glm3zsBqhOvoxsROn81+0ztBpFJ6N/LHoccgAyMOsCpeyP2E3o4x5UmiWYgJqXrtB63gRe0bsUFsOdiNf6MLaO63dsrNN0ya++7LK2IJyK7M+a2AihfnIeU7s/kWu0248/MjVWGkIEpMd44+N+GmE7j3tv1ONZSMf5cDJyo+dOy3Xj7BRgkXK1f+ugc6M4Wrc0fX9rGBkCsFlYsWLt8S18hozxMOPlM/CgEVQuDRxtC7C/1hKo6ErUY9xTznxakpusyHC3klDIq0pQSeKk+spFJIHH7YYYHutViaJg== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB211228D7EAEF672CAF365836FAD40VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: f14d38d4-4a78-4da3-d2e9-08d58d82f719 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 10:19:57.3097 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1967 Archived-At: Subject: [Ace] Client Token Analysis X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 10:20:03 -0000 --_000_VI1PR0801MB211228D7EAEF672CAF365836FAD40VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, as mentioned during the ACE working group meeting today the paper with the = analysis of the Client Token functionality can be found at the paper publis= hed for the OAuth Security Workshop. Here is the link to the paper http://st.fbk.eu/sites/st.fbk.eu/files/osw2018-ace.pdf There are also lots of papers worthwhile reading: https://st.fbk.eu/osw2018/program Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB211228D7EAEF672CAF365836FAD40VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

as mentioned during the ACE working group meeting to= day the paper with the analysis of the Client Token functionality can be fo= und at the paper published for the OAuth Security Workshop.

 

Here is the link to the paper

http://st.fbk.eu/sites/st.fbk.eu/files/osw2018-ace.pdf

 

There are also lots of papers worthwhile reading:

https://st.fbk.eu/osw2018/program

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB211228D7EAEF672CAF365836FAD40VI1PR0801MB2112_-- From nobody Mon Mar 19 03:26:07 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7516F126E64 for ; Mon, 19 Mar 2018 03:26:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vEoszgCS_HR1 for ; Mon, 19 Mar 2018 03:26:03 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10075.outbound.protection.outlook.com [40.107.1.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8139126DC2 for ; Mon, 19 Mar 2018 03:26:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=cJizBDSRKKP1rO5Z1t/uhkuA+zSB0rb+NjmrqXzVIaQ=; b=DSicOhXjyyu3VGX+d7p41SsC0RG/jlf/c96C3u+5km3QBr3q8xfWyB6XzGkFrvcsBucvIKKSpO+A8n2hmhvMH2m8nUTFRYcGmaEfDFC5lvfDUrxvAFfYVTCLApjRDvjxV3zB7K/BXf9zZRmojewZYBblXWlepUKZjQzenra2xM0= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1440.eurprd08.prod.outlook.com (10.167.210.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 10:25:57 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0588.016; Mon, 19 Mar 2018 10:25:57 +0000 From: Hannes Tschofenig To: "ace@ietf.org" Thread-Topic: ACE-OAuth implementation Thread-Index: AdO/bB/7Umfci31dTCuSTMhv/VmhNQ== Date: Mon, 19 Mar 2018 10:25:57 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.155.188] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1440; 6:beLktxvU+3F6FcvKu9OHJJd8YXWawB3HXFKZGoap2WdTov8otzk2NaaaEzSFPyJV1S50UjteI+cLFU68YlIHLklxF0EvN0H5lNSKFPzKnS77YBrqqxeebYS2mHXG1DYW7t1C5oCiscGyjSrqzCggF6z5ILGNvtKL5Xb9MWZxG1slaj0gWRJw0UDAURXPKpLW/I6JyWNKM2jYfhlH89bVwXMNm9pmwHfKPi+ougzTNwcckYFre+McJ9NRP/XRwEfUZIeShWxMNC+/TzEkyS3SWScr9h9O6QxdW/XybBTCpw1FL+XpJsHLhGH/m5HGeQ366J1Fo9UGlRNv2bEpZLDEQdYXOtPs9HHqPCGDMCuSRecAK/UVlzWXboMoPXAjw9Ap; 5:ZNVsaIsZUvdt+Yr6omkeMWMW6936BAoLB+4FPR+CTgvioln5I+tiT7WXwciVITxvEPaP/fA8aIwPy+pwbJTXg/x8yOrZBMkTWzQDFjMIpV6Rv2ZtMVlmVvN6Hz9pUFJp1DE/2GL8Ng3COP1RlXZH1qdbpOmv1unga5sVLcbt6IY=; 24:FZtQXFHYboX8/ks3mlcO+XevsefNgcT4Ra/HbZXaXLaLp3Rvx0f84XIza2bnLy7bdgxi6rBzHciI+fQXO9M5WsWoTExDDHwfng23y19pExs=; 7:RpDbHwzY9iAQJwvaHhWjcMgkgwO5RUPYnP6btwTxRL251u0YZxJzRhZFPKMWfbJRg7aYIzJJusbLAGgtLROzdRUyhJ/f9QZlZDpK4bh2KMOdDGRRdH6vHzDJ6MZ6qhGF5V7ko5PGT5O6KPkJTkYyG4x6y9LNwO6LUo5qBnFZqL1KKZR4hdDH9X27cuvev3e7D9TMXpHq0baNYnnRQJ+jddTsatQGlLUekV+uAOQyupcAN5OdRjD0fOvtry4neDFo x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9f777161-9390-40ec-165c-08d58d83cd9e x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1440; x-ms-traffictypediagnostic: VI1PR0801MB1440: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(3231221)(944501300)(52105095)(10201501046)(93006095)(93001095)(6055026)(6041310)(20161123558120)(20161123560045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(6072148)(201708071742011); SRVR:VI1PR0801MB1440; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1440; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(346002)(396003)(376002)(366004)(199004)(189003)(40154002)(40434004)(8936002)(6436002)(966005)(2501003)(14454004)(72206003)(105586002)(5890100001)(106356001)(86362001)(478600001)(5250100002)(66066001)(9686003)(54896002)(53936002)(316002)(5640700003)(6306002)(3280700002)(7696005)(6116002)(99286004)(790700001)(186003)(55016002)(3480700004)(59450400001)(2900100001)(6506007)(7736002)(81166006)(5660300001)(68736007)(3660700001)(6916009)(102836004)(97736004)(33656002)(2351001)(5630700001)(1730700003)(3846002)(25786009)(74316002)(81156014)(26005)(8676002)(2906002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1440; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: qX3tNCMgGrRusaDWO8rGufHnkepvHDeZkIva0pfRvQVDxuqtG+AbKeXUQMnlyJl3bleV/lHq9yNbt5rqgVXUtcjH/gRrLkKhkyLdtTkPZir9vyunDFw//w7h48oYZuuyUT7ImKmL5IE/W7w+XvJrQFf/mUS9JpBOlwIWzVGjWLuI5mcdO33AX3lFhMhbUmbIx39QLFXVVxSP61cOTeoCbZ9IqsvdjktAnPAq/OQ9wrRzdIDTmNHTXX3/u27hS+TP6Rjxrt56y9BF1rK/Dik/bIAIp6NtxoWq/pe3hRVL/GklInF0kwvR2MFGMIpvIrCcSEu48cqLLgunC3CYqE2wXQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112CBBD53B3BB4A036E1849FAD40VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9f777161-9390-40ec-165c-08d58d83cd9e X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 10:25:57.1777 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1440 Archived-At: Subject: [Ace] ACE-OAuth implementation X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 10:26:06 -0000 --_000_VI1PR0801MB2112CBBD53B3BB4A036E1849FAD40VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable As mentioned at the working group meeting today we, Arm, released a product= feature with the name "Secure Device Access" for our Mbed Cloud product. I= t implements functionality of the ACE-OAuth framework. I talked about it du= ring the OAuth security workshop last week, see http://st.fbk.eu/sites/st.f= bk.eu/files/osw2018-hannestschofenig.pdf I believe that this is the first product announcement concerning ACE-OAuth.= A corresponding press release can be found at: https://blog.mbed.com/post/mbed-cloud-secure-devices My slides as well as the blog post explain what we have been doing and what= functionality we cover. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB2112CBBD53B3BB4A036E1849FAD40VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

As mentioned at the working group meeting today we, = Arm, released a product feature with the name “Secure Device Access&#= 8221; for our Mbed Cloud product. It implements functionality of the ACE-OA= uth framework. I talked about it during the OAuth security workshop last week, see http://st.fbk.eu/sites/st.fbk.eu/files/os= w2018-hannestschofenig.pdf

 

I believe that this is the first product announcemen= t concerning ACE-OAuth. A corresponding press release can be found at:

https://blog.mbed.com/post/mbed-cloud-secure-devices=

 

My slides as well as the blog post explain what we h= ave been doing and what functionality we cover.

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB2112CBBD53B3BB4A036E1849FAD40VI1PR0801MB2112_-- From nobody Mon Mar 19 03:34:19 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A299126E64 for ; Mon, 19 Mar 2018 03:34:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.009 X-Spam-Level: X-Spam-Status: No, score=-3.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PgHsY1LO4f_R for ; Mon, 19 Mar 2018 03:34:16 -0700 (PDT) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0132.outbound.protection.outlook.com [104.47.33.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D7C6127076 for ; Mon, 19 Mar 2018 03:34:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=zjjhPTtWpiMudR2rBKyYGsEdD40CXBHmu6WoprAJ56c=; b=hHBoRgcL++WI37IlIQ6wmcCH3i/1zfdb1V3sycCUwPbQXl0tsA0fb640wdrnNafVtodFWDqijQUzTODkGjfUbKt9AINtKMKpYG3TOOZRBCwtT0meQPUVMCyTG0WREk7Hc+RWwxkJR5qX04EuWMDys7pYqhON1L0UNwU+fJisVYs= Received: from SN6PR00MB0301.namprd00.prod.outlook.com (52.132.117.155) by SN6PR00MB0447.namprd00.prod.outlook.com (52.132.118.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Mon, 19 Mar 2018 10:34:01 +0000 Received: from SN6PR00MB0301.namprd00.prod.outlook.com ([fe80::c502:aea:ef5b:2332]) by SN6PR00MB0301.namprd00.prod.outlook.com ([fe80::c502:aea:ef5b:2332%2]) with mapi id 15.20.0636.000; Mon, 19 Mar 2018 10:34:00 +0000 From: Mike Jones To: "ace@ietf.org" Thread-Topic: CBOR Web Token (CWT) spec for the RFC Editor Thread-Index: AdO/a44TsM0LsnpLS26CYarSEgDZPw== Date: Mon, 19 Mar 2018 10:34:00 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [31.133.156.108] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR00MB0447; 7:Iqb1ts2wLrrwL5EdadbP07xPph4sblMukD9zu8MdhTu3nlJBHt7t8fsksk4J/r8/7zUu9mouuktC+kfLM4oO5TCi3pbIp9eFu/U7tSZFcaibpVAOuOWXUvTFC38xpbFIbaUQqFw/ihp38hm9/EptiSSXE5qj9ZuhJ/I8zr65P8mE0+uOQqCA1kFDbVI9mD2or+fYR6BkPtK4E3LhH/rM9Vo77HRxryTsmXxMJkNCS3YH9ZcJGAf6N4WNjkXJLOrE; 20:/ndRVgm9NYtxTDQNR5va02iESKhB4FYP/elh0GvPdLqdMmxWUIw7+OLqC0IMeV3bfJBAELGGgB4JDvcwqyMoFR1OxFaaJRET/s/JsHeNC+UFtycAjy4Rz+BoGTL0Te9j9JIaQ1WfeyafipB8dtAGGsOoPi6Hvp4p1Iqhg+PfjC8= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 20dd8f69-9d0c-4d15-107a-08d58d84edd6 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:SN6PR00MB0447; x-ms-traffictypediagnostic: SN6PR00MB0447: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(31418570063057)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(3231221)(944501300)(52105095)(10201501046)(6055026)(61426038)(61427038)(6041310)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(6072148)(201708071742011); SRVR:SN6PR00MB0447; BCL:0; PCL:0; RULEID:; SRVR:SN6PR00MB0447; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(39860400002)(366004)(346002)(39380400002)(396003)(209900001)(189003)(199004)(10090500001)(2900100001)(9686003)(5250100002)(6436002)(5640700003)(26005)(55016002)(6506007)(102836004)(7696005)(106356001)(5660300001)(53936002)(3660700001)(606006)(236005)(6306002)(54896002)(53376002)(2501003)(59450400001)(8990500004)(316002)(8676002)(97736004)(186003)(1730700003)(74316002)(10290500003)(25786009)(2351001)(81156014)(81166006)(14454004)(66066001)(86362001)(99286004)(478600001)(7736002)(966005)(3280700002)(6116002)(3846002)(2906002)(5630700001)(8936002)(790700001)(22452003)(6916009)(33656002)(105586002)(68736007)(72206003)(86612001)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR00MB0447; H:SN6PR00MB0301.namprd00.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: +PIBF/RK3jDuNZs9JDQmZW3k025bvIG1E1iepiqALISXFQ47z9Ut2zBHTVFs9hRm7YqTBOgzC5VPdTpf6DUxQLTkqOJOep7RUyBBlM0+YrQT7Ub+rGQioA9cSe4V9YNDc0YIteTu6165kwDWpbiqOimUW6ulaZaaM6ThrLLxEFZz1tjAzADB4ze9ss9iOsZXwJi9bDOlCTK65y/VrIz9PkNpJc0wfQJ4L+TLz6poBoCJiPCAth6+zS/EWGOIJQ2L9sIYDtQpsQfJX62YoGi1FRuim4CuzHFSOSLgHBatcQeVGOMwGr3ssKEUzqa4zLEnq5IUbe307y9bOcx8xQc1zQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR00MB03014CEEC33FD06643F02CF3F5D40SN6PR00MB0301namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 20dd8f69-9d0c-4d15-107a-08d58d84edd6 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 10:34:00.5159 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR00MB0447 Archived-At: Subject: [Ace] CBOR Web Token (CWT) spec for the RFC Editor X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 10:34:18 -0000 --_000_SN6PR00MB03014CEEC33FD06643F02CF3F5D40SN6PR00MB0301namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable One more clarification to the CBOR Web Token (CWT) specification has been m= ade to address a comment by IESG member Adam Roach. This version is being = sent to the RFC Editor in preparation for its = publication as an RFC. The change was: * Added section references when the terms "NumericDate" and "StringOrUR= I" are used, as suggested by Adam Roach. The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-15 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cbor-web-token-15.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=3D1796 and = as @selfissued. --_000_SN6PR00MB03014CEEC33FD06643F02CF3F5D40SN6PR00MB0301namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

One more clarification to the CBOR Web Token (CWT) s= pecification has been made to address a comment by IESG member Adam Roach.&= nbsp; This version is being sent to the RFC Editor in preparation for i= ts publication as an RFC.  The change was:

  • Added section references when the terms "NumericDate" and &= quot;StringOrURI" are used, as suggested by Adam Roach.

 

The specification is available at:

 

An HTML-formatted version is also available at:=

--_000_SN6PR00MB03014CEEC33FD06643F02CF3F5D40SN6PR00MB0301namp_-- From nobody Mon Mar 19 04:11:31 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D7B81200B9 for ; Mon, 19 Mar 2018 04:11:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=GmTWilh9; dkim=pass (1024-bit key) header.d=ericsson.com header.b=NL4PBpOV Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P6qg5jVDAwn4 for ; Mon, 19 Mar 2018 04:11:24 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2615312D777 for ; Mon, 19 Mar 2018 04:11:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1521457882; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=3n1gtKr2iR/G/bjeRB71pN0WIixWXaFP+kbPJzu2zEY=; b=GmTWilh9LZt/Bynv5Cq2hftulPc3SzKj0j9ES5fjpyjrsGnhbEVTCLqCjsoyFJ9y UapnxSQXIwlzZUDJ0RaYO+q5HfknmS+fKhGvCTU9vWgj5AsiOdRFdSaeIUsGkJyc pN/uBN3ip9ROPtdejfd+s5G+UPgaKtQT7dgDBXnzGYU=; X-AuditID: c1b4fb2d-499ff70000005540-13-5aaf9ada9df6 Received: from ESESSHC002.ericsson.se (Unknown_Domain [153.88.183.24]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 51.1E.21824.ADA9FAA5; Mon, 19 Mar 2018 12:11:22 +0100 (CET) Received: from ESESBMB503.ericsson.se (153.88.183.170) by ESESSHC002.ericsson.se (153.88.183.24) with Microsoft SMTP Server (TLS) id 14.3.382.0; Mon, 19 Mar 2018 12:11:21 +0100 Received: from ESESBMB503.ericsson.se (153.88.183.170) by ESESBMB503.ericsson.se (153.88.183.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.26; Mon, 19 Mar 2018 12:11:21 +0100 Received: from EUR02-AM5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB503.ericsson.se (153.88.183.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.26 via Frontend Transport; Mon, 19 Mar 2018 12:11:21 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=3n1gtKr2iR/G/bjeRB71pN0WIixWXaFP+kbPJzu2zEY=; b=NL4PBpOV6wMWyu95tb+xy83MXsAOSJ5kpYIzSATt4KGo4D6oS8p9tmwM2I0ONPs+oalDAObMbNLkSNl3keD1rGuj8hUiOq8xc8PEVJA3URL92yXd9NbsA2P2ztiuKKKZVezeudB0uo3AUB4EtoQjtxWn77cSoYrsgBMLtKt+cIg= Received: from HE1PR0701MB2011.eurprd07.prod.outlook.com (10.167.189.149) by HE1PR0701MB2793.eurprd07.prod.outlook.com (10.168.189.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.609.6; Mon, 19 Mar 2018 11:11:20 +0000 Received: from HE1PR0701MB2011.eurprd07.prod.outlook.com ([fe80::7d80:1860:283c:5ef2]) by HE1PR0701MB2011.eurprd07.prod.outlook.com ([fe80::7d80:1860:283c:5ef2%3]) with mapi id 15.20.0609.007; Mon, 19 Mar 2018 11:11:20 +0000 From: John Mattsson To: "ace@ietf.org" Thread-Topic: Coordinated effort to produce updated profiles for the use of crypto algorithms in IoT Thread-Index: AQHTv3MCif9BXYu3HkOEVFgP17NpKw== Date: Mon, 19 Mar 2018 11:11:20 +0000 Message-ID: <2271DDAC-77A5-4B82-A4A7-5B48CBEC2321@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.a.0.180210 x-originating-ip: [2001:67c:370:1998:acc7:80df:c647:d84b] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR0701MB2793; 7:LhajbCRuuF2s10B36ROESLly0jdMw6mDiAprENuNG//vVzCGbmwIRkWNm6ol5ehVTDuJfH7KakplwIxMFinToFAc2Bt0GeMrKK6yvKtWgXUd1KfyB7LAF+db8k41lY+w5X1QZTb9Dk7EFkSvTI9EmKfraL2o0BiV+Lzc+jJXtjJY07RFLlummV2UjGNS/TmSIPikfdZbKZkDUtEcgZaIwCqXSUjA20qJX9zzpdiIhs5NLdgj9/lqfJjLdKMHIApr x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 7a450513-1429-4d3c-2a3b-08d58d8a24af x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:HE1PR0701MB2793; x-ms-traffictypediagnostic: HE1PR0701MB2793: authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231221)(944501300)(52105095)(3002001)(93006095)(93001095)(10201501046)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:HE1PR0701MB2793; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0701MB2793; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(366004)(396003)(39860400002)(376002)(346002)(199004)(189003)(86362001)(5250100002)(83716003)(316002)(6116002)(59450400001)(186003)(6436002)(7736002)(46003)(5660300001)(2501003)(14454004)(8936002)(2900100001)(97736004)(7110500001)(82746002)(1730700003)(8676002)(81156014)(99286004)(81166006)(68736007)(25786009)(6512007)(6306002)(2351001)(3280700002)(3660700001)(6506007)(36756003)(6916009)(54896002)(478600001)(6486002)(58126008)(106356001)(2906002)(33656002)(53936002)(105586002)(10710500007)(102836004)(5640700003)(15650500001)(2420400007); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR0701MB2793; H:HE1PR0701MB2011.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: +Plu0wzisscD8lYUlB05nNblb59ga0fb9itiItdlCKXT7igp1sX5Ie85jTwJiXyozXkYkMZF5c6bmVU/0aL9egswT5/AI2v9gcQ58kvCwGZlXYNz+teenOMLXPsbdZYS1xolxTpkUb6Zy3Z6d6OX8MjTqOTAQaLYmTE/MZVuS69j8FsIBb3yba8nInfuo7v99sGkYolD88OrTB93T54j8JN61+eYSgX2JCkOFDcQPXVOmWzwBgEQSCuKmBg6pk3vjIxNPsZbestkAychGtSGMFJT8VISaU/eOuILS7+NvNbWKgY65fm8GObSwcEzMyFnMZrqHdg4a/plvF5u/SGEAQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_2271DDAC77A54B82A4A75B48CBEC2321ericssoncom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 7a450513-1429-4d3c-2a3b-08d58d8a24af X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 11:11:20.2943 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2793 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA02SfUhTURjGOffezetqdVwuX7QSh0KZTq0ELSn7I1Is6k+Z9HHRq87U2b1m ahiDXIZfmTjSpVm5ZV/TMjGLRaUpaVR+VIJZYn5h4gcmmSbWtrvA/37P8z7n5TyHQ5OyWpE7 rU5NZ7lUJlkhllAV0U/Av99QrwocqPAMWfhVSIajCKNxkTiKVJKwODZZncFyAXtPShIf9ZaK 04ojM6fmcwktyjuYj5xpwLugtvglaWMZbkWgu7gnH0ms3IhAW3qHEMQCgqLBMocwEdB6vZmy CQrPEVBmfO8kTPQELJkbkSDGEJRPzBG2zWIcCFUWrTgf0bQr9oK+74zN3oAZeDrTKBLsePjb pbLZrlgJXbMP7Scp7AP6cR2ysRTvgxVzlZ0R3ggLnQ/sGRK7Qf9INSH0wWC0fCAFlsPE8IrI xnLrzgtzfU6CHwrdhWNI4M3QU13g4CYCWqa3C+wPs3q9Y89huFaSSwncieBWebDAflAzuey4 zzHQ6a7aqwDWwKA2R4jEQMPv1/YXAXyXhDeTX8TCYBOUP74sKkFKw6oKButxEsdC70CSwd7Y BToqRijB3gb1zwKEtBeUFQw5CbwVdJVVDo6A5U/DaHXmBqLvITnP8nxKwo6dSpZTx/K8JlWZ yqY3IOv3edX4x78Z3Z/c34IwjRRrpc5X6lUyEZPBZ6W0IKBJhat09GOdSiaNY7KyWU5zgjuT zPItyIOmFG7SjkipSoYTmHT2FMumsdz/KUE7u2vRTVNKzgKnzLx0ur3CU3P2BactnH8H0VpT kE/pt+MHnDUxbW9/iBddLOUmi5/yeXsRWdn9syd0KsosqYtCu9Ul1cHxXwfC+gMM7tkecm8R d2SNb15PbGbaIdV5KnepwIJrxkOGh2aoz0neSevNt41N63KmQ9piwkfPicPd2S0Kik9kgnxJ jmf+Ac1eObI6AwAA Archived-At: Subject: [Ace] Coordinated effort to produce updated profiles for the use of crypto algorithms in IoT X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 11:11:28 -0000 --_000_2271DDAC77A54B82A4A75B48CBEC2321ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBzdHJvbmdseSBzdXBwb3J0IENhcnN0ZW7igJlzIHN1Z2dlc3Rpb24gdG8gaGF2ZSBhIGNvb3Jk aW5hdGVkIGVmZm9ydCB0byBwcm9kdWNlIHVwZGF0ZWQgcHJvZmlsZXMgZm9yIHRoZSB1c2Ugb2Yg Y3J5cHRvIGFsZ29yaXRobXMgaW4gSW9ULiBJIHRoaW5rIHRoZSB3b3JrIHNob3VsZCBpbmNsdWRl IGF0IGxlYXN0IFRMUywgRFRMUywgQ09TRSwgYW5kIFguNTA5IGFuZCB0YWtlIGludG8gY29uc2lk ZXJhdGlvbiB0aGUgaGFyZHdhcmUgYWNjZWxlcmF0aW9uIGF2YWlsYWJsZSBpbiAoZnV0dXJlKSBk ZXZpY2VzLiBTaG91bGQgYWxzbyBsb29rIGlmIHRoZXJlIGlzIGEgbmVlZCB0byB1cGRhdGUgWC41 MDkgcHJvZmlsZSBpbiBSRkMgNzkyNSwgYW55IG5ldyBJb1QgcHJvZmlsZSBzaG91bGQgYmUgYXBw bGljYWJsZSB0byBib3RoIFRMUyBhbmQgQ09TRS4NCg0KSG93IGRvIHdlIGdldCB0aGlzIHN0YXJ0 ZWQgaW4gYSB3YXkgdGhhdCBhcHBsaWVzIHRvIGFsbCBJRVRGIGdyb3VwcyB1c2luZyBjcnlwdG8/ IEkgd291bGQgYmUgaGFwcHkgdG8gaGVscCB3aXRoIHRoaXMgd29yay4NCg0KU29tZSBxdWljayB0 aG91Z2h0czoNCg0KLSBDdXJ2ZTI1NTE5IGlzIGFscmVhZHkgaW1wbGVtZW50ZWQgYSBsb3QsIGJ1 dCBuZWVkcyB0byBiZSBkaWZmZXJlbnRpYXRlZCBmcm9tIEVkMjU1MTkgd2hpY2ggaXMgbm90IGlt cGxlbWVudGVkIGFzIG11Y2ggKHlldCkgYW5kIG1heSByZXF1aXJlIENBIHN1cHBvcnQgZm9yIGNl cnRpZmljYXRlIGJhc2VkIGRlcGxveW1lbnRzLiBDdXJ2ZTI1NTE5IGFuZCBFZDI1NTE5IGhhcyBh IHN0cm9uZyBwb3RlbnRpYWwgdG8gbG93ZXIgbGF0ZW5jeSwgc3RvcmFnZSwgbWVtb3J5LCBhbmQg YmF0dGVyeSBjb25zdW1wdGlvbnMgaW4gSW9UIGRldmljZXMuIFRoZXJlIHdhcyBlYXJsaWVyIHZl bmRvcnMgc3RhdGluZyB0aGF0IGN1cnZlcyB3aXRoIGEgY29mYWN0b3IgY2F1c2VkIHByb2JsZW1z IGZvciBvbGRlciBoYXJkd2FyZS4gTXkgdW5kZXJzdGFuZGluZyBpcyB0aGF0IHRoaXMgaGFzIG5v dyBjaGFuZ2VkLCBhdCBsZWFzdCB0aGUgVUlDQyB2ZW5kb3JzIGluIDNHUFAgaGFzIHN0YXRlZCB0 aGF0IGN1cnZlMjU1MTkgd29ya3Mgb24gdGhlaXIgY3VycmVudCBoYXJkd2FyZS4NCg0KLSBDaGFD aGEyMC1Qb2x5MTMwNSBpcyBvbmx5IHN0YW5kYXJkaXplZCB3aXRoIDEyOC1iaXQgdGFncyBhbmQg dGhlcmVmb3JlIG5vdCB2ZXJ5IHdlbGwgc3VpdGVkIGZvciBJb1QuIExpa2UgR0NNLCBQb2x5MTMw NSBpcyBub3QgdmVyeSB3ZWxsIHN1aXRlZCBmb3IgdHJ1bmNhdGVkIHRhZ3MuIEFFU18xMjhfT0NC Xzggb25seSByZXF1aXJlcyBoYWxmIHRoZSBhbW91bnQgb2YgQUVTIG9wZXJhdGlvbnMsIGJ1dCBB RVMgaXMgbm90IGRyYXdpbmcgbXVjaCBwb3dlciBjb21wYXJlZCB0byB0cmFuc21pdHRpbmcsIGxp c3RlbmluZywgYW5kIHJlY2VpdmluZyByYWRpbywgc28gYW55IHVwZGF0ZSBmcm9tIEFFU18xMjhf Q0NNXzggbWlnaHQgbm90IGJlIHdvcnRoIGl0LiBJIHRoaW5rIDY0IGJpdCB0YWdzIGlzIGEgZ29v ZCBjb21wcm9taXNlZCBiZXR3ZWVuIG92ZXJoZWFkIGFuZCBzZWN1cml0eSBmb3IgSW9ULg0KDQot ICBQUkYuIFRMUyAxLjMgdXNlZCBITUFDIHdpdGggU0hBLTI1NiwgUkZDODI0NyBzcGVjaWZpZXMg UFJGX0FFUzEyOF9YQ0JDIGZvciBkZXZpY2VzIG5vdCBoYXZpbmcgU0hBLg0KDQotIEhhc2ggYWxn b3JpdGhtcywgRWQyNTUxOSBpcyBhcyBmYXIgYXMgSSBrbm93biBzdGFuZGFyZGl6ZWQgd2l0aCBT SEEtNTEyLzI1Ni4gSW9UIGRlcGxveW1lbnRzIG9mIFRMUyBhbmQgRFRMUyB0eXBpY2FsbHkgdXNl IFNIQS0yNTYuDQoNCkNoZWVycywNCkpvaG4NCg== --_000_2271DDAC77A54B82A4A75B48CBEC2321ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <8BF6BD74D2730B4FB1A0AA12610E5154@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCmE6bGluaywgc3Bh bi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7 DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJs aW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29y ZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1 cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IlNWIiBsaW5rPSIjMDU2M0Mx IiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5J IHN0cm9uZ2x5IHN1cHBvcnQgQ2Fyc3RlbuKAmXMgc3VnZ2VzdGlvbiB0byBoYXZlIGEgY29vcmRp bmF0ZWQgZWZmb3J0IHRvIHByb2R1Y2UgdXBkYXRlZCBwcm9maWxlcyBmb3IgdGhlIHVzZSBvZiBj cnlwdG8gYWxnb3JpdGhtcyBpbiBJb1QuIEkgdGhpbmsgdGhlIHdvcmsgc2hvdWxkIGluY2x1ZGUg YXQgbGVhc3QgVExTLCBEVExTLCBDT1NFLA0KIGFuZCBYLjUwOSBhbmQgdGFrZSBpbnRvIGNvbnNp ZGVyYXRpb24gdGhlIGhhcmR3YXJlIGFjY2VsZXJhdGlvbiBhdmFpbGFibGUgaW4gKGZ1dHVyZSkg ZGV2aWNlcy4gU2hvdWxkIGFsc28gbG9vayBpZiB0aGVyZSBpcyBhIG5lZWQgdG8gdXBkYXRlIFgu NTA5IHByb2ZpbGUgaW4gUkZDIDc5MjUsIGFueSBuZXcgSW9UIHByb2ZpbGUgc2hvdWxkIGJlIGFw cGxpY2FibGUgdG8gYm90aCBUTFMgYW5kIENPU0UuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhvdyBkbyB3ZSBnZXQg dGhpcyBzdGFydGVkIGluIGEgd2F5IHRoYXQgYXBwbGllcyB0byBhbGwgSUVURiBncm91cHMgdXNp bmcgY3J5cHRvPyBJIHdvdWxkIGJlIGhhcHB5IHRvIGhlbHAgd2l0aCB0aGlzIHdvcmsuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPlNvbWUgcXVpY2sgdGhvdWdodHM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPi0gQ3VydmUyNTUxOSBpcyBh bHJlYWR5IGltcGxlbWVudGVkIGEgbG90LCBidXQgbmVlZHMgdG8gYmUgZGlmZmVyZW50aWF0ZWQg ZnJvbSBFZDI1NTE5IHdoaWNoIGlzIG5vdCBpbXBsZW1lbnRlZCBhcyBtdWNoICh5ZXQpIGFuZCBt YXkgcmVxdWlyZSBDQSBzdXBwb3J0IGZvciBjZXJ0aWZpY2F0ZSBiYXNlZCBkZXBsb3ltZW50cy4g Q3VydmUyNTUxOQ0KIGFuZCBFZDI1NTE5IGhhcyBhIHN0cm9uZyBwb3RlbnRpYWwgdG8gbG93ZXIg bGF0ZW5jeSwgc3RvcmFnZSwgbWVtb3J5LCBhbmQgYmF0dGVyeSBjb25zdW1wdGlvbnMgaW4gSW9U IGRldmljZXMuIFRoZXJlIHdhcyBlYXJsaWVyIHZlbmRvcnMgc3RhdGluZyB0aGF0IGN1cnZlcyB3 aXRoIGEgY29mYWN0b3IgY2F1c2VkIHByb2JsZW1zIGZvciBvbGRlciBoYXJkd2FyZS4gTXkgdW5k ZXJzdGFuZGluZyBpcyB0aGF0IHRoaXMgaGFzIG5vdyBjaGFuZ2VkLA0KIGF0IGxlYXN0IHRoZSBV SUNDIHZlbmRvcnMgaW4gM0dQUCBoYXMgc3RhdGVkIHRoYXQgY3VydmUyNTUxOSB3b3JrcyBvbiB0 aGVpciBjdXJyZW50IGhhcmR3YXJlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tIENoYUNoYTIwLVBvbHkxMzA1IGlz IG9ubHkgc3RhbmRhcmRpemVkIHdpdGggMTI4LWJpdCB0YWdzIGFuZCB0aGVyZWZvcmUgbm90IHZl cnkgd2VsbCBzdWl0ZWQgZm9yIElvVC4gTGlrZSBHQ00sIFBvbHkxMzA1IGlzIG5vdCB2ZXJ5IHdl bGwgc3VpdGVkIGZvciB0cnVuY2F0ZWQgdGFncy4gQUVTXzEyOF9PQ0JfOCBvbmx5IHJlcXVpcmVz DQogaGFsZiB0aGUgYW1vdW50IG9mIEFFUyBvcGVyYXRpb25zLCBidXQgQUVTIGlzIG5vdCBkcmF3 aW5nIG11Y2ggcG93ZXIgY29tcGFyZWQgdG8gdHJhbnNtaXR0aW5nLCBsaXN0ZW5pbmcsIGFuZCBy ZWNlaXZpbmcgcmFkaW8sIHNvIGFueSB1cGRhdGUgZnJvbSBBRVNfMTI4X0NDTV84IG1pZ2h0IG5v dCBiZSB3b3J0aCBpdC4gSSB0aGluayA2NCBiaXQgdGFncyBpcyBhIGdvb2QgY29tcHJvbWlzZWQg YmV0d2VlbiBvdmVyaGVhZCBhbmQgc2VjdXJpdHkgZm9yDQogSW9ULjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tICZu YnNwO1BSRi4gVExTIDEuMyB1c2VkIEhNQUMgd2l0aCBTSEEtMjU2LCBSRkM4MjQ3IHNwZWNpZmll cyBQUkZfQUVTMTI4X1hDQkMgZm9yIGRldmljZXMgbm90IGhhdmluZyBTSEEuDQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+LSBIYXNoIGFsZ29yaXRobXMsIEVkMjU1MTkgaXMgYXMgZmFyIGFzIEkga25vd24gc3RhbmRh cmRpemVkIHdpdGggU0hBLTUxMi8yNTYuIElvVCBkZXBsb3ltZW50cyBvZiBUTFMgYW5kIERUTFMg dHlwaWNhbGx5IHVzZSBTSEEtMjU2Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkNoZWVycyw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPkpvaG48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_2271DDAC77A54B82A4A75B48CBEC2321ericssoncom_-- From nobody Mon Mar 19 04:14:51 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32E0B12D96B for ; Mon, 19 Mar 2018 04:14:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ylcHfiyPakjt for ; Mon, 19 Mar 2018 04:14:47 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0057.outbound.protection.outlook.com [104.47.0.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C1F1126FDC for ; Mon, 19 Mar 2018 04:14:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=fF/7s1mOOD7Rhq9Z9+0g4nO+DT+LtXuSDm75tQ1FA0E=; b=EqdLAia5VyYbHJ2YOI7LB82Xw+IG3+PNKNTjfN1zA1ABp5qCpCfjNXpYNfuPbFaAl6Wc4xaPKpWEWrM4XaxMQASKbfpF7QaqbbRdxPwOwhi087udGrMWAVwUtSemuEOxVOxdbQX2mSrfe5ccyam2tbGv721V3ZMZnrwtEffUOSA= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB2079.eurprd08.prod.outlook.com (10.173.75.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 11:14:42 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0588.016; Mon, 19 Mar 2018 11:14:42 +0000 From: Hannes Tschofenig To: John Mattsson , "ace@ietf.org" Thread-Topic: Coordinated effort to produce updated profiles for the use of crypto algorithms in IoT Thread-Index: AQHTv3MCif9BXYu3HkOEVFgP17NpK6PXZ6pA Date: Mon, 19 Mar 2018 11:14:42 +0000 Message-ID: References: <2271DDAC-77A5-4B82-A4A7-5B48CBEC2321@ericsson.com> In-Reply-To: <2271DDAC-77A5-4B82-A4A7-5B48CBEC2321@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.155.188] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB2079; 6:+JTCxrTV7s2A1qDaEZtTOgEJMiUdZYkWTYlsTLRWGuczhMuJ+pWypC1pH82Lfc/cp+V2quPbtHiGj05dF4Xz9cl4BtbbSI45ILY/SIGDHbBEOr0pMvbXP9XaEO87cARyuk46wi1eguoPH0QFnwVVFGS8Qjl7saEBDI9Jg6NWnXqD2jAfpmtGwM+HipgBxUlYWIHkrWhHq2l7yDSL9MQvDxDCIZhCrq5iYpCLB/zrpscnHPg/wA2npc7aZUiVeSTyUagKCKCf0VnHfv5pcpEyWWc+s76k52TRorCEIa9FlC5gAcAPmKVfd1hnGsxqQ7BzvyP5a35CN/NTi9ADoGJNqrlZtTyVpe5+B7mxzAWkb8u3OU5PQzkg5bP0II2LhdY4; 5:ePueoy0V+m7e95aP9Xi185iP4SOzGBmqI4XFWu9wsVSlp/EBt8+Ibvu+uWHbvvbLtPu0vLLbvX6a2rIczNRPNuVCTYyiPnBo4RDccs90XlftvYaTgIzKBsJLvgig2ZykKHWYioAH+rZC1tgbaEepgnB/8OIaCvJgoQCIjQ7mmIM=; 24:l3OxABzyZVwwIbmIhhTJwXT+DPsAhnI3quI/ITo3h3hvHOuQ9BZzOWznOohshFYW891Uv85mdx2E6dBlHRJM1VjrNAOq2T45O+XfvM5Sczc=; 7:zAcKNdfTdnyyOsFq/KWLW4grIhvHzzPoeLqSUeahqd3uRVqs5Y+v4RkCgRU66YoJlqJvYfS8LZN1spwEZfNd2s+2/7wvrUZcMinjjXheYo0f4aNCPgo9IqzSoMYfiFRD1v/lQZvpLjbPmE79YK8PC/NylEREshDAqgqXR2FNLc7YAiA9NMsm8YdlEXyPhtZQhZMN3Mb0sdzR99fTJ+jUlhiS5YDbsqHIsEHD8lR/Fr8BMcMVOF59IB6PK9XZpQpx x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 6492ea05-2cb4-47ec-e31a-08d58d8a9d51 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB2079; x-ms-traffictypediagnostic: VI1PR0801MB2079: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3231221)(944501300)(52105095)(3002001)(93006095)(93001095)(6055026)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123558120)(20161123560045)(6072148)(201708071742011); SRVR:VI1PR0801MB2079; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB2079; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(366004)(39380400002)(396003)(39860400002)(346002)(40434004)(189003)(199004)(55016002)(186003)(10710500007)(3280700002)(53936002)(7736002)(2501003)(3660700001)(7696005)(236005)(2906002)(9686003)(54896002)(6306002)(86362001)(14454004)(74316002)(5890100001)(229853002)(606006)(5660300001)(5250100002)(6246003)(2950100002)(25786009)(97736004)(68736007)(66066001)(316002)(106356001)(110136005)(102836004)(478600001)(6116002)(26005)(966005)(81156014)(81166006)(6436002)(7110500001)(59450400001)(2420400007)(8936002)(76176011)(15650500001)(6506007)(105586002)(8676002)(33656002)(3846002)(790700001)(72206003)(99286004)(53546011)(2900100001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB2079; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 1U1KiDpZcDnqezGxRLyvX1n7Y4Y0oFyC2Xs2zTpZ7sOfKA0dqJMp+FaqEzjUZEGQLtOumlHE91INSXT8zK0IDslbV601H1jMyjro2sTSCVrPR6xpWfV37S+F1b954hrHFPTNl2HFqgIiT931oW6soTVSVlHxVJv7KjfhpRkhqS9eqcfP/F1/WWzi2DbSpnCNTSsE3tzhQp2A5DJJQPDQkxqyktFEPNKu8VMvBELrS1+ELbLeF38z4orCffhLv7s3HE9NTonzgMCKRdrsn7/kzFL37YkKM/eFmsPm7uFKyz8t/4EzuYXhf3V55T0Q+zxFIfspjP6XHeYS0klsGUurhA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB21123C4E562998F9038636F3FAD40VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6492ea05-2cb4-47ec-e31a-08d58d8a9d51 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 11:14:42.5779 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB2079 Archived-At: Subject: Re: [Ace] Coordinated effort to produce updated profiles for the use of crypto algorithms in IoT X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 11:14:50 -0000 --_000_VI1PR0801MB21123C4E562998F9038636F3FAD40VI1PR0801MB2112_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVyZSBpcyBhIHJlbGV2YW50IGRvY3VtZW50OiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQtdHNjaG9mZW5pZy11dGEtdGxzMTMtcHJvZmlsZS0wMA0KDQoNCkZyb206IEFjZSBbbWFp bHRvOmFjZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSm9obiBNYXR0c3Nvbg0KU2Vu dDogMTkgTWFyY2ggMjAxOCAxMToxMQ0KVG86IGFjZUBpZXRmLm9yZw0KU3ViamVjdDogW0FjZV0g Q29vcmRpbmF0ZWQgZWZmb3J0IHRvIHByb2R1Y2UgdXBkYXRlZCBwcm9maWxlcyBmb3IgdGhlIHVz ZSBvZiBjcnlwdG8gYWxnb3JpdGhtcyBpbiBJb1QNCg0KSSBzdHJvbmdseSBzdXBwb3J0IENhcnN0 ZW7igJlzIHN1Z2dlc3Rpb24gdG8gaGF2ZSBhIGNvb3JkaW5hdGVkIGVmZm9ydCB0byBwcm9kdWNl IHVwZGF0ZWQgcHJvZmlsZXMgZm9yIHRoZSB1c2Ugb2YgY3J5cHRvIGFsZ29yaXRobXMgaW4gSW9U LiBJIHRoaW5rIHRoZSB3b3JrIHNob3VsZCBpbmNsdWRlIGF0IGxlYXN0IFRMUywgRFRMUywgQ09T RSwgYW5kIFguNTA5IGFuZCB0YWtlIGludG8gY29uc2lkZXJhdGlvbiB0aGUgaGFyZHdhcmUgYWNj ZWxlcmF0aW9uIGF2YWlsYWJsZSBpbiAoZnV0dXJlKSBkZXZpY2VzLiBTaG91bGQgYWxzbyBsb29r IGlmIHRoZXJlIGlzIGEgbmVlZCB0byB1cGRhdGUgWC41MDkgcHJvZmlsZSBpbiBSRkMgNzkyNSwg YW55IG5ldyBJb1QgcHJvZmlsZSBzaG91bGQgYmUgYXBwbGljYWJsZSB0byBib3RoIFRMUyBhbmQg Q09TRS4NCg0KSG93IGRvIHdlIGdldCB0aGlzIHN0YXJ0ZWQgaW4gYSB3YXkgdGhhdCBhcHBsaWVz IHRvIGFsbCBJRVRGIGdyb3VwcyB1c2luZyBjcnlwdG8/IEkgd291bGQgYmUgaGFwcHkgdG8gaGVs cCB3aXRoIHRoaXMgd29yay4NCg0KU29tZSBxdWljayB0aG91Z2h0czoNCg0KLSBDdXJ2ZTI1NTE5 IGlzIGFscmVhZHkgaW1wbGVtZW50ZWQgYSBsb3QsIGJ1dCBuZWVkcyB0byBiZSBkaWZmZXJlbnRp YXRlZCBmcm9tIEVkMjU1MTkgd2hpY2ggaXMgbm90IGltcGxlbWVudGVkIGFzIG11Y2ggKHlldCkg YW5kIG1heSByZXF1aXJlIENBIHN1cHBvcnQgZm9yIGNlcnRpZmljYXRlIGJhc2VkIGRlcGxveW1l bnRzLiBDdXJ2ZTI1NTE5IGFuZCBFZDI1NTE5IGhhcyBhIHN0cm9uZyBwb3RlbnRpYWwgdG8gbG93 ZXIgbGF0ZW5jeSwgc3RvcmFnZSwgbWVtb3J5LCBhbmQgYmF0dGVyeSBjb25zdW1wdGlvbnMgaW4g SW9UIGRldmljZXMuIFRoZXJlIHdhcyBlYXJsaWVyIHZlbmRvcnMgc3RhdGluZyB0aGF0IGN1cnZl cyB3aXRoIGEgY29mYWN0b3IgY2F1c2VkIHByb2JsZW1zIGZvciBvbGRlciBoYXJkd2FyZS4gTXkg dW5kZXJzdGFuZGluZyBpcyB0aGF0IHRoaXMgaGFzIG5vdyBjaGFuZ2VkLCBhdCBsZWFzdCB0aGUg VUlDQyB2ZW5kb3JzIGluIDNHUFAgaGFzIHN0YXRlZCB0aGF0IGN1cnZlMjU1MTkgd29ya3Mgb24g dGhlaXIgY3VycmVudCBoYXJkd2FyZS4NCg0KLSBDaGFDaGEyMC1Qb2x5MTMwNSBpcyBvbmx5IHN0 YW5kYXJkaXplZCB3aXRoIDEyOC1iaXQgdGFncyBhbmQgdGhlcmVmb3JlIG5vdCB2ZXJ5IHdlbGwg c3VpdGVkIGZvciBJb1QuIExpa2UgR0NNLCBQb2x5MTMwNSBpcyBub3QgdmVyeSB3ZWxsIHN1aXRl ZCBmb3IgdHJ1bmNhdGVkIHRhZ3MuIEFFU18xMjhfT0NCXzggb25seSByZXF1aXJlcyBoYWxmIHRo ZSBhbW91bnQgb2YgQUVTIG9wZXJhdGlvbnMsIGJ1dCBBRVMgaXMgbm90IGRyYXdpbmcgbXVjaCBw b3dlciBjb21wYXJlZCB0byB0cmFuc21pdHRpbmcsIGxpc3RlbmluZywgYW5kIHJlY2VpdmluZyBy YWRpbywgc28gYW55IHVwZGF0ZSBmcm9tIEFFU18xMjhfQ0NNXzggbWlnaHQgbm90IGJlIHdvcnRo IGl0LiBJIHRoaW5rIDY0IGJpdCB0YWdzIGlzIGEgZ29vZCBjb21wcm9taXNlZCBiZXR3ZWVuIG92 ZXJoZWFkIGFuZCBzZWN1cml0eSBmb3IgSW9ULg0KDQotICBQUkYuIFRMUyAxLjMgdXNlZCBITUFD IHdpdGggU0hBLTI1NiwgUkZDODI0NyBzcGVjaWZpZXMgUFJGX0FFUzEyOF9YQ0JDIGZvciBkZXZp Y2VzIG5vdCBoYXZpbmcgU0hBLg0KDQotIEhhc2ggYWxnb3JpdGhtcywgRWQyNTUxOSBpcyBhcyBm YXIgYXMgSSBrbm93biBzdGFuZGFyZGl6ZWQgd2l0aCBTSEEtNTEyLzI1Ni4gSW9UIGRlcGxveW1l bnRzIG9mIFRMUyBhbmQgRFRMUyB0eXBpY2FsbHkgdXNlIFNIQS0yNTYuDQoNCkNoZWVycywNCkpv aG4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkg YXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4g SWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUg c2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFu eSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkg dGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== --_000_VI1PR0801MB21123C4E562998F9038636F3FAD40VI1PR0801MB2112_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJbXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6d2luZG93dGV4dDt9DQpz cGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0No cERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBw dDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2lu OjcwLjg1cHQgNzAuODVwdCA3MC44NXB0IDcwLjg1cHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtw YWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwh W2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9 ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlv dXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1HQiIgbGluaz0i IzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5kQ29tcG9zZSI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6IzFGNDk3RCI+SGVyZSBpcyBhIHJlbGV2YW50IGRvY3Vt ZW50Og0KPC9zcGFuPjwvYT48YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtdHNjaG9mZW5pZy11dGEtdGxzMTMtcHJvZmlsZS0wMCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC10c2Nob2ZlbmlnLXV0 YS10bHMxMy1wcm9maWxlLTAwPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVD NERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLUdCIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj4gQWNlIFttYWlsdG86 YWNlLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkpvaG4gTWF0dHNzb248 YnI+DQo8Yj5TZW50OjwvYj4gMTkgTWFyY2ggMjAxOCAxMToxMTxicj4NCjxiPlRvOjwvYj4gYWNl QGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFtBY2VdIENvb3JkaW5hdGVkIGVmZm9ydCB0 byBwcm9kdWNlIHVwZGF0ZWQgcHJvZmlsZXMgZm9yIHRoZSB1c2Ugb2YgY3J5cHRvIGFsZ29yaXRo bXMgaW4gSW9UPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5JIHN0cm9uZ2x5IHN1 cHBvcnQgQ2Fyc3RlbuKAmXMgc3VnZ2VzdGlvbiB0byBoYXZlIGEgY29vcmRpbmF0ZWQgZWZmb3J0 IHRvIHByb2R1Y2UgdXBkYXRlZCBwcm9maWxlcyBmb3IgdGhlIHVzZSBvZiBjcnlwdG8gYWxnb3Jp dGhtcyBpbiBJb1QuIEkgdGhpbmsgdGhlIHdvcmsgc2hvdWxkIGluY2x1ZGUgYXQgbGVhc3QgVExT LCBEVExTLCBDT1NFLA0KIGFuZCBYLjUwOSBhbmQgdGFrZSBpbnRvIGNvbnNpZGVyYXRpb24gdGhl IGhhcmR3YXJlIGFjY2VsZXJhdGlvbiBhdmFpbGFibGUgaW4gKGZ1dHVyZSkgZGV2aWNlcy4gU2hv dWxkIGFsc28gbG9vayBpZiB0aGVyZSBpcyBhIG5lZWQgdG8gdXBkYXRlIFguNTA5IHByb2ZpbGUg aW4gUkZDIDc5MjUsIGFueSBuZXcgSW9UIHByb2ZpbGUgc2hvdWxkIGJlIGFwcGxpY2FibGUgdG8g Ym90aCBUTFMgYW5kIENPU0UuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhvdyBkbyB3ZSBnZXQgdGhpcyBzdGFydGVk IGluIGEgd2F5IHRoYXQgYXBwbGllcyB0byBhbGwgSUVURiBncm91cHMgdXNpbmcgY3J5cHRvPyBJ IHdvdWxkIGJlIGhhcHB5IHRvIGhlbHAgd2l0aCB0aGlzIHdvcmsuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlNvbWUg cXVpY2sgdGhvdWdodHM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPi0gQ3VydmUyNTUxOSBpcyBhbHJlYWR5IGltcGxl bWVudGVkIGEgbG90LCBidXQgbmVlZHMgdG8gYmUgZGlmZmVyZW50aWF0ZWQgZnJvbSBFZDI1NTE5 IHdoaWNoIGlzIG5vdCBpbXBsZW1lbnRlZCBhcyBtdWNoICh5ZXQpIGFuZCBtYXkgcmVxdWlyZSBD QSBzdXBwb3J0IGZvciBjZXJ0aWZpY2F0ZSBiYXNlZCBkZXBsb3ltZW50cy4gQ3VydmUyNTUxOQ0K IGFuZCBFZDI1NTE5IGhhcyBhIHN0cm9uZyBwb3RlbnRpYWwgdG8gbG93ZXIgbGF0ZW5jeSwgc3Rv cmFnZSwgbWVtb3J5LCBhbmQgYmF0dGVyeSBjb25zdW1wdGlvbnMgaW4gSW9UIGRldmljZXMuIFRo ZXJlIHdhcyBlYXJsaWVyIHZlbmRvcnMgc3RhdGluZyB0aGF0IGN1cnZlcyB3aXRoIGEgY29mYWN0 b3IgY2F1c2VkIHByb2JsZW1zIGZvciBvbGRlciBoYXJkd2FyZS4gTXkgdW5kZXJzdGFuZGluZyBp cyB0aGF0IHRoaXMgaGFzIG5vdyBjaGFuZ2VkLA0KIGF0IGxlYXN0IHRoZSBVSUNDIHZlbmRvcnMg aW4gM0dQUCBoYXMgc3RhdGVkIHRoYXQgY3VydmUyNTUxOSB3b3JrcyBvbiB0aGVpciBjdXJyZW50 IGhhcmR3YXJlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tIENoYUNoYTIwLVBvbHkxMzA1IGlzIG9ubHkgc3RhbmRh cmRpemVkIHdpdGggMTI4LWJpdCB0YWdzIGFuZCB0aGVyZWZvcmUgbm90IHZlcnkgd2VsbCBzdWl0 ZWQgZm9yIElvVC4gTGlrZSBHQ00sIFBvbHkxMzA1IGlzIG5vdCB2ZXJ5IHdlbGwgc3VpdGVkIGZv ciB0cnVuY2F0ZWQgdGFncy4gQUVTXzEyOF9PQ0JfOCBvbmx5IHJlcXVpcmVzDQogaGFsZiB0aGUg YW1vdW50IG9mIEFFUyBvcGVyYXRpb25zLCBidXQgQUVTIGlzIG5vdCBkcmF3aW5nIG11Y2ggcG93 ZXIgY29tcGFyZWQgdG8gdHJhbnNtaXR0aW5nLCBsaXN0ZW5pbmcsIGFuZCByZWNlaXZpbmcgcmFk aW8sIHNvIGFueSB1cGRhdGUgZnJvbSBBRVNfMTI4X0NDTV84IG1pZ2h0IG5vdCBiZSB3b3J0aCBp dC4gSSB0aGluayA2NCBiaXQgdGFncyBpcyBhIGdvb2QgY29tcHJvbWlzZWQgYmV0d2VlbiBvdmVy aGVhZCBhbmQgc2VjdXJpdHkgZm9yDQogSW9ULjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tICZuYnNwO1BSRi4gVExT IDEuMyB1c2VkIEhNQUMgd2l0aCBTSEEtMjU2LCBSRkM4MjQ3IHNwZWNpZmllcyBQUkZfQUVTMTI4 X1hDQkMgZm9yIGRldmljZXMgbm90IGhhdmluZyBTSEEuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+LSBIYXNoIGFs Z29yaXRobXMsIEVkMjU1MTkgaXMgYXMgZmFyIGFzIEkga25vd24gc3RhbmRhcmRpemVkIHdpdGgg U0hBLTUxMi8yNTYuIElvVCBkZXBsb3ltZW50cyBvZiBUTFMgYW5kIERUTFMgdHlwaWNhbGx5IHVz ZSBTSEEtMjU2Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5D aGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkpvaG48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkg YXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4g SWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUg c2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFu eSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsDQogb3Igc3RvcmUgb3IgY29w eSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_VI1PR0801MB21123C4E562998F9038636F3FAD40VI1PR0801MB2112_-- From nobody Mon Mar 19 05:50:24 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D54DD127869; Mon, 19 Mar 2018 05:50:18 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.75.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152146381883.24298.719103529312940161@ietfa.amsl.com> Date: Mon, 19 Mar 2018 05:50:18 -0700 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-oauth-authz-11.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 12:50:19 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Authentication and Authorization for Constrained Environments (ACE) using the OAuth 2.0 Framework (ACE-OAuth) Authors : Ludwig Seitz Goeran Selander Erik Wahlstroem Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-oauth-authz-11.txt Pages : 65 Date : 2018-03-19 Abstract: This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments called ACE- OAuth. The framework is based on a set of building blocks including OAuth 2.0 and CoAP, thus making a well-known and widely used authorization solution suitable for IoT devices. Existing specifications are used where possible, but where the constraints of IoT devices require it, extensions are added and profiles are defined. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-11 https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-authz-11 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-authz-11 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 19 05:52:33 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D918C12D777 for ; Mon, 19 Mar 2018 05:52:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.62 X-Spam-Level: X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WuQCeQFvR9pO for ; Mon, 19 Mar 2018 05:52:29 -0700 (PDT) Received: from se-out2.mx-wecloud.net (se-out2.mx-wecloud.net [89.221.255.177]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66FCD12D875 for ; Mon, 19 Mar 2018 05:52:08 -0700 (PDT) Received: from sp-mail-2.sp.se (unknown [194.218.146.197]) by se-out2.mx-wecloud.net (Postfix) with ESMTPS id E2F8D221D3B for ; Mon, 19 Mar 2018 12:52:07 +0000 (UTC) Received: from [31.133.142.90] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Mon, 19 Mar 2018 13:52:05 +0100 References: <152146381903.24298.17948932988777060714.idtracker@ietfa.amsl.com> To: "ace@ietf.org" From: Ludwig Seitz X-Forwarded-Message-Id: <152146381903.24298.17948932988777060714.idtracker@ietfa.amsl.com> Message-ID: Date: Mon, 19 Mar 2018 13:51:48 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <152146381903.24298.17948932988777060714.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-2.sp.se (10.100.0.162) To sp-mail-2.sp.se (10.100.0.162) X-CMAE-Score: 0 X-CMAE-Analysis: v=2.2 cv=K9NSJ2eI c=1 sm=1 tr=0 a=L5DDne6A+dD0FbDkt2Fblw==:117 a=L5DDne6A+dD0FbDkt2Fblw==:17 a=sZ8rJzgPlrQA:10 a=IkcTkHD0fZMA:10 a=v2DPQv5-lfwA:10 a=48vgC7mUAAAA:8 a=7CQSdrXTAAAA:8 a=0FD05c-RAAAA:8 a=WgwJIo3SAAAA:8 a=cqgEvA8y-hDWmYB0oJgA:9 a=QEXdDO2ut3YA:10 a=w1C3t2QeGrPiZgrLijVG:22 a=a-qgeE7W1pNrGK8U0ZQC:22 a=l1rpMCqCXRGZwUSuRcM3:22 X-Virus-Scanned: clamav-milter 0.99.4 at MailSecurity X-Virus-Status: Clean X-MailSecurity-Status: 0 X-Scanned-By: WeCloud MailSecurity X-MailSecurity-Score: 0 Archived-At: Subject: [Ace] Fwd: New Version Notification for draft-ietf-ace-oauth-authz-11.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 12:52:32 -0000 Hello WG, I've posted an update of the framework draft containing some small (but important) fixes to the datatypes used for various claims and parameters. Thank you to Jim for noticing those issues. /Ludwig -------- Forwarded Message -------- Subject: New Version Notification for draft-ietf-ace-oauth-authz-11.txt Date: Mon, 19 Mar 2018 05:50:19 -0700 From: internet-drafts@ietf.org To: Ludwig Seitz , Hannes Tschofenig , Goeran Selander , Samuel Erdtman , Erik Wahlstroem A new version of I-D, draft-ietf-ace-oauth-authz-11.txt has been successfully submitted by Ludwig Seitz and posted to the IETF repository. Name: draft-ietf-ace-oauth-authz Revision: 11 Title: Authentication and Authorization for Constrained Environments (ACE) using the OAuth 2.0 Framework (ACE-OAuth) Document date: 2018-03-19 Group: ace Pages: 65 URL: https://www.ietf.org/internet-drafts/draft-ietf-ace-oauth-authz-11.txt Status: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ Htmlized: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-11 Htmlized: https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-authz Diff: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-authz-11 Abstract: This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments called ACE- OAuth. The framework is based on a set of building blocks including OAuth 2.0 and CoAP, thus making a well-known and widely used authorization solution suitable for IoT devices. Existing specifications are used where possible, but where the constraints of IoT devices require it, extensions are added and profiles are defined. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Mon Mar 19 06:34:56 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3924F124BFA for ; Mon, 19 Mar 2018 06:34:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.529 X-Spam-Level: X-Spam-Status: No, score=-14.529 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Hlfk5kVY2Ui for ; Mon, 19 Mar 2018 06:34:52 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16A831242F5 for ; Mon, 19 Mar 2018 06:34:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=15414; q=dns/txt; s=iport; t=1521466492; x=1522676092; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=hJhfqxkCg+r5GEI5kDrKFEsGyiLUVV+3SavdHYuYGMM=; b=RfMzsmjMPZ3DWobvrauJMCCtiaOqQ+rKjlZvjP2t2pIIXyjg03PyUkeq /u73Umr+VHUAeEyVxaTi8je7T73A8emRvHECJd60HfMJKDqy6JQB3RHFP oWRTx1ZGDwSZ8SJeDJML+whI81vy/6MS+wJEIQOL5n8erl0ZtdVw3DFa0 M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ChAgBUu69a/4UNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYJaSS1mcigKg1OYFIIDgRaOcYUjgX4LI4RtAhqDJCE3FQECAQE?= =?us-ascii?q?BAQEBAmsohSUBAQEEIwpDGQIBCBEEAQEoAwICAjAUCQgCBAESCIQsZA+oO4Imi?= =?us-ascii?q?FeCCQWFM24QJHOBVWdtgyCDHgEBA4EiDQEBEgEDCEqCUoJBIAOIK5ALCQKGBYV?= =?us-ascii?q?Sg06BVxuDYYdkh0KBboZeAhETAYEpATQiYXFwFYJ9CYIoHBZrAQIGjRR0jUsOG?= =?us-ascii?q?IEKgRgBAQE?= X-IronPort-AV: E=Sophos; i="5.48,330,1517875200"; d="scan'208,217"; a="86154181" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Mar 2018 13:34:51 +0000 Received: from XCH-ALN-009.cisco.com (xch-aln-009.cisco.com [173.36.7.19]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id w2JDYorg001328 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 19 Mar 2018 13:34:50 GMT Received: from xch-aln-010.cisco.com (173.36.7.20) by XCH-ALN-009.cisco.com (173.36.7.19) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 19 Mar 2018 08:34:49 -0500 Received: from xch-aln-010.cisco.com ([173.36.7.20]) by XCH-ALN-010.cisco.com ([173.36.7.20]) with mapi id 15.00.1320.000; Mon, 19 Mar 2018 08:34:49 -0500 From: "Panos Kampanakis (pkampana)" To: Hannes Tschofenig , John Mattsson , "ace@ietf.org" Thread-Topic: Coordinated effort to produce updated profiles for the use of crypto algorithms in IoT Thread-Index: AQHTv3MCif9BXYu3HkOEVFgP17NpK6PXZ6pAgAAm4cA= Date: Mon, 19 Mar 2018 13:34:49 +0000 Message-ID: References: <2271DDAC-77A5-4B82-A4A7-5B48CBEC2321@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.116.108.5] Content-Type: multipart/alternative; boundary="_000_aeb821b3a89a43a4aa865e39f94d3b0eXCHALN010ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Ace] Coordinated effort to produce updated profiles for the use of crypto algorithms in IoT X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 13:34:54 -0000 --_000_aeb821b3a89a43a4aa865e39f94d3b0eXCHALN010ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 KzENClNob3VsZCBjb25zaWRlciBhbmFseXNpcyBhbmQgcmVjb21tZW5kYXRpb25zIGJ5IE5JU1Ti gJlzIExXQyBwcm9qZWN0IHRvbyBodHRwczovL3d3dy5uaXN0Lmdvdi9wcm9ncmFtcy1wcm9qZWN0 cy9saWdodHdlaWdodC1jcnlwdG9ncmFwaHkNClBhbm9zDQoNCkZyb206IEFjZSBbbWFpbHRvOmFj ZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSGFubmVzIFRzY2hvZmVuaWcNClNlbnQ6 IE1vbmRheSwgTWFyY2ggMTksIDIwMTggNzoxNSBBTQ0KVG86IEpvaG4gTWF0dHNzb24gPGpvaG4u bWF0dHNzb25AZXJpY3Nzb24uY29tPjsgYWNlQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0FjZV0g Q29vcmRpbmF0ZWQgZWZmb3J0IHRvIHByb2R1Y2UgdXBkYXRlZCBwcm9maWxlcyBmb3IgdGhlIHVz ZSBvZiBjcnlwdG8gYWxnb3JpdGhtcyBpbiBJb1QNCg0KSGVyZSBpcyBhIHJlbGV2YW50IGRvY3Vt ZW50OiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtdHNjaG9mZW5pZy11dGEtdGxz MTMtcHJvZmlsZS0wMA0KDQoNCkZyb206IEFjZSBbbWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3Jn XSBPbiBCZWhhbGYgT2YgSm9obiBNYXR0c3Nvbg0KU2VudDogMTkgTWFyY2ggMjAxOCAxMToxMQ0K VG86IGFjZUBpZXRmLm9yZzxtYWlsdG86YWNlQGlldGYub3JnPg0KU3ViamVjdDogW0FjZV0gQ29v cmRpbmF0ZWQgZWZmb3J0IHRvIHByb2R1Y2UgdXBkYXRlZCBwcm9maWxlcyBmb3IgdGhlIHVzZSBv ZiBjcnlwdG8gYWxnb3JpdGhtcyBpbiBJb1QNCg0KSSBzdHJvbmdseSBzdXBwb3J0IENhcnN0ZW7i gJlzIHN1Z2dlc3Rpb24gdG8gaGF2ZSBhIGNvb3JkaW5hdGVkIGVmZm9ydCB0byBwcm9kdWNlIHVw ZGF0ZWQgcHJvZmlsZXMgZm9yIHRoZSB1c2Ugb2YgY3J5cHRvIGFsZ29yaXRobXMgaW4gSW9ULiBJ IHRoaW5rIHRoZSB3b3JrIHNob3VsZCBpbmNsdWRlIGF0IGxlYXN0IFRMUywgRFRMUywgQ09TRSwg YW5kIFguNTA5IGFuZCB0YWtlIGludG8gY29uc2lkZXJhdGlvbiB0aGUgaGFyZHdhcmUgYWNjZWxl cmF0aW9uIGF2YWlsYWJsZSBpbiAoZnV0dXJlKSBkZXZpY2VzLiBTaG91bGQgYWxzbyBsb29rIGlm IHRoZXJlIGlzIGEgbmVlZCB0byB1cGRhdGUgWC41MDkgcHJvZmlsZSBpbiBSRkMgNzkyNSwgYW55 IG5ldyBJb1QgcHJvZmlsZSBzaG91bGQgYmUgYXBwbGljYWJsZSB0byBib3RoIFRMUyBhbmQgQ09T RS4NCg0KSG93IGRvIHdlIGdldCB0aGlzIHN0YXJ0ZWQgaW4gYSB3YXkgdGhhdCBhcHBsaWVzIHRv IGFsbCBJRVRGIGdyb3VwcyB1c2luZyBjcnlwdG8/IEkgd291bGQgYmUgaGFwcHkgdG8gaGVscCB3 aXRoIHRoaXMgd29yay4NCg0KU29tZSBxdWljayB0aG91Z2h0czoNCg0KLSBDdXJ2ZTI1NTE5IGlz IGFscmVhZHkgaW1wbGVtZW50ZWQgYSBsb3QsIGJ1dCBuZWVkcyB0byBiZSBkaWZmZXJlbnRpYXRl ZCBmcm9tIEVkMjU1MTkgd2hpY2ggaXMgbm90IGltcGxlbWVudGVkIGFzIG11Y2ggKHlldCkgYW5k IG1heSByZXF1aXJlIENBIHN1cHBvcnQgZm9yIGNlcnRpZmljYXRlIGJhc2VkIGRlcGxveW1lbnRz LiBDdXJ2ZTI1NTE5IGFuZCBFZDI1NTE5IGhhcyBhIHN0cm9uZyBwb3RlbnRpYWwgdG8gbG93ZXIg bGF0ZW5jeSwgc3RvcmFnZSwgbWVtb3J5LCBhbmQgYmF0dGVyeSBjb25zdW1wdGlvbnMgaW4gSW9U IGRldmljZXMuIFRoZXJlIHdhcyBlYXJsaWVyIHZlbmRvcnMgc3RhdGluZyB0aGF0IGN1cnZlcyB3 aXRoIGEgY29mYWN0b3IgY2F1c2VkIHByb2JsZW1zIGZvciBvbGRlciBoYXJkd2FyZS4gTXkgdW5k ZXJzdGFuZGluZyBpcyB0aGF0IHRoaXMgaGFzIG5vdyBjaGFuZ2VkLCBhdCBsZWFzdCB0aGUgVUlD QyB2ZW5kb3JzIGluIDNHUFAgaGFzIHN0YXRlZCB0aGF0IGN1cnZlMjU1MTkgd29ya3Mgb24gdGhl aXIgY3VycmVudCBoYXJkd2FyZS4NCg0KLSBDaGFDaGEyMC1Qb2x5MTMwNSBpcyBvbmx5IHN0YW5k YXJkaXplZCB3aXRoIDEyOC1iaXQgdGFncyBhbmQgdGhlcmVmb3JlIG5vdCB2ZXJ5IHdlbGwgc3Vp dGVkIGZvciBJb1QuIExpa2UgR0NNLCBQb2x5MTMwNSBpcyBub3QgdmVyeSB3ZWxsIHN1aXRlZCBm b3IgdHJ1bmNhdGVkIHRhZ3MuIEFFU18xMjhfT0NCXzggb25seSByZXF1aXJlcyBoYWxmIHRoZSBh bW91bnQgb2YgQUVTIG9wZXJhdGlvbnMsIGJ1dCBBRVMgaXMgbm90IGRyYXdpbmcgbXVjaCBwb3dl ciBjb21wYXJlZCB0byB0cmFuc21pdHRpbmcsIGxpc3RlbmluZywgYW5kIHJlY2VpdmluZyByYWRp bywgc28gYW55IHVwZGF0ZSBmcm9tIEFFU18xMjhfQ0NNXzggbWlnaHQgbm90IGJlIHdvcnRoIGl0 LiBJIHRoaW5rIDY0IGJpdCB0YWdzIGlzIGEgZ29vZCBjb21wcm9taXNlZCBiZXR3ZWVuIG92ZXJo ZWFkIGFuZCBzZWN1cml0eSBmb3IgSW9ULg0KDQotICBQUkYuIFRMUyAxLjMgdXNlZCBITUFDIHdp dGggU0hBLTI1NiwgUkZDODI0NyBzcGVjaWZpZXMgUFJGX0FFUzEyOF9YQ0JDIGZvciBkZXZpY2Vz IG5vdCBoYXZpbmcgU0hBLg0KDQotIEhhc2ggYWxnb3JpdGhtcywgRWQyNTUxOSBpcyBhcyBmYXIg YXMgSSBrbm93biBzdGFuZGFyZGl6ZWQgd2l0aCBTSEEtNTEyLzI1Ni4gSW9UIGRlcGxveW1lbnRz IG9mIFRMUyBhbmQgRFRMUyB0eXBpY2FsbHkgdXNlIFNIQS0yNTYuDQoNCkNoZWVycywNCkpvaG4N CklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0 YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYg eW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2Vu ZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBv dGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhl IGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== --_000_aeb821b3a89a43a4aa865e39f94d3b0eXCHALN010ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2 IDQgMyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBs aS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2 aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUx OA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm Ow0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhw b3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6 ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjcwLjg1cHQgNzAuODVwdCA3MC44NXB0IDcwLjg1cHQ7 fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwh LS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3Bp ZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1s Pg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRh dGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8 Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2NvbG9yOiMxRjQ5N0QiPiYjNDM7MSA8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtj b2xvcjojMUY0OTdEIj5TaG91bGQgY29uc2lkZXIgYW5hbHlzaXMgYW5kIHJlY29tbWVuZGF0aW9u cyBieSBOSVNU4oCZcyBMV0MgcHJvamVjdCB0b28NCjxhIGhyZWY9Imh0dHBzOi8vd3d3Lm5pc3Qu Z292L3Byb2dyYW1zLXByb2plY3RzL2xpZ2h0d2VpZ2h0LWNyeXB0b2dyYXBoeSI+aHR0cHM6Ly93 d3cubmlzdC5nb3YvcHJvZ3JhbXMtcHJvamVjdHMvbGlnaHR3ZWlnaHQtY3J5cHRvZ3JhcGh5PC9h Pg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6IzFGNDk3RCI+UGFub3M8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+IEFjZSBbbWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnXQ0KPGI+T24gQmVo YWxmIE9mIDwvYj5IYW5uZXMgVHNjaG9mZW5pZzxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXksIE1h cmNoIDE5LCAyMDE4IDc6MTUgQU08YnI+DQo8Yj5Ubzo8L2I+IEpvaG4gTWF0dHNzb24gJmx0O2pv aG4ubWF0dHNzb25AZXJpY3Nzb24uY29tJmd0OzsgYWNlQGlldGYub3JnPGJyPg0KPGI+U3ViamVj dDo8L2I+IFJlOiBbQWNlXSBDb29yZGluYXRlZCBlZmZvcnQgdG8gcHJvZHVjZSB1cGRhdGVkIHBy b2ZpbGVzIGZvciB0aGUgdXNlIG9mIGNyeXB0byBhbGdvcml0aG1zIGluIElvVDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5kQ29t cG9zZSI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMx RjQ5N0QiPkhlcmUgaXMgYSByZWxldmFudCBkb2N1bWVudDoNCjwvc3Bhbj48L2E+PHNwYW4gbGFu Zz0iRU4tR0IiPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC10c2No b2ZlbmlnLXV0YS10bHMxMy1wcm9maWxlLTAwIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXRzY2hvZmVuaWctdXRhLXRsczEz LXByb2ZpbGUtMDA8L3NwYW4+PC9hPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Y29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2Vy aWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1z ZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+IEFjZSBbPGEgaHJlZj0ibWFpbHRvOmFj ZS1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86YWNlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+ T24gQmVoYWxmIE9mIDwvYj5Kb2huIE1hdHRzc29uPGJyPg0KPGI+U2VudDo8L2I+IDE5IE1hcmNo IDIwMTggMTE6MTE8YnI+DQo8Yj5Ubzo8L2I+IDxhIGhyZWY9Im1haWx0bzphY2VAaWV0Zi5vcmci PmFjZUBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW0FjZV0gQ29vcmRpbmF0ZWQg ZWZmb3J0IHRvIHByb2R1Y2UgdXBkYXRlZCBwcm9maWxlcyBmb3IgdGhlIHVzZSBvZiBjcnlwdG8g YWxnb3JpdGhtcyBpbiBJb1Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij5JIHN0cm9uZ2x5IHN1cHBvcnQgQ2Fyc3RlbuKAmXMgc3VnZ2VzdGlvbiB0byBoYXZl IGEgY29vcmRpbmF0ZWQgZWZmb3J0IHRvIHByb2R1Y2UgdXBkYXRlZCBwcm9maWxlcyBmb3IgdGhl IHVzZSBvZiBjcnlwdG8gYWxnb3JpdGhtcyBpbiBJb1QuIEkgdGhpbmsgdGhlIHdvcmsgc2hvdWxk IGluY2x1ZGUgYXQgbGVhc3QgVExTLCBEVExTLCBDT1NFLCBhbmQgWC41MDkNCiBhbmQgdGFrZSBp bnRvIGNvbnNpZGVyYXRpb24gdGhlIGhhcmR3YXJlIGFjY2VsZXJhdGlvbiBhdmFpbGFibGUgaW4g KGZ1dHVyZSkgZGV2aWNlcy4gU2hvdWxkIGFsc28gbG9vayBpZiB0aGVyZSBpcyBhIG5lZWQgdG8g dXBkYXRlIFguNTA5IHByb2ZpbGUgaW4gUkZDIDc5MjUsIGFueSBuZXcgSW9UIHByb2ZpbGUgc2hv dWxkIGJlIGFwcGxpY2FibGUgdG8gYm90aCBUTFMgYW5kIENPU0UuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Ib3cgZG8gd2UgZ2V0IHRoaXMgc3RhcnRlZCBpbiBh IHdheSB0aGF0IGFwcGxpZXMgdG8gYWxsIElFVEYgZ3JvdXBzIHVzaW5nIGNyeXB0bz8gSSB3b3Vs ZCBiZSBoYXBweSB0byBoZWxwIHdpdGggdGhpcyB3b3JrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+U29tZSBxdWljayB0aG91Z2h0czo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPi0gQ3VydmUyNTUxOSBpcyBhbHJlYWR5IGltcGxl bWVudGVkIGEgbG90LCBidXQgbmVlZHMgdG8gYmUgZGlmZmVyZW50aWF0ZWQgZnJvbSBFZDI1NTE5 IHdoaWNoIGlzIG5vdCBpbXBsZW1lbnRlZCBhcyBtdWNoICh5ZXQpIGFuZCBtYXkgcmVxdWlyZSBD QSBzdXBwb3J0IGZvciBjZXJ0aWZpY2F0ZSBiYXNlZCBkZXBsb3ltZW50cy4gQ3VydmUyNTUxOSBh bmQgRWQyNTUxOQ0KIGhhcyBhIHN0cm9uZyBwb3RlbnRpYWwgdG8gbG93ZXIgbGF0ZW5jeSwgc3Rv cmFnZSwgbWVtb3J5LCBhbmQgYmF0dGVyeSBjb25zdW1wdGlvbnMgaW4gSW9UIGRldmljZXMuIFRo ZXJlIHdhcyBlYXJsaWVyIHZlbmRvcnMgc3RhdGluZyB0aGF0IGN1cnZlcyB3aXRoIGEgY29mYWN0 b3IgY2F1c2VkIHByb2JsZW1zIGZvciBvbGRlciBoYXJkd2FyZS4gTXkgdW5kZXJzdGFuZGluZyBp cyB0aGF0IHRoaXMgaGFzIG5vdyBjaGFuZ2VkLCBhdCBsZWFzdCB0aGUNCiBVSUNDIHZlbmRvcnMg aW4gM0dQUCBoYXMgc3RhdGVkIHRoYXQgY3VydmUyNTUxOSB3b3JrcyBvbiB0aGVpciBjdXJyZW50 IGhhcmR3YXJlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+LSBD aGFDaGEyMC1Qb2x5MTMwNSBpcyBvbmx5IHN0YW5kYXJkaXplZCB3aXRoIDEyOC1iaXQgdGFncyBh bmQgdGhlcmVmb3JlIG5vdCB2ZXJ5IHdlbGwgc3VpdGVkIGZvciBJb1QuIExpa2UgR0NNLCBQb2x5 MTMwNSBpcyBub3QgdmVyeSB3ZWxsIHN1aXRlZCBmb3IgdHJ1bmNhdGVkIHRhZ3MuIEFFU18xMjhf T0NCXzggb25seSByZXF1aXJlcyBoYWxmIHRoZSBhbW91bnQNCiBvZiBBRVMgb3BlcmF0aW9ucywg YnV0IEFFUyBpcyBub3QgZHJhd2luZyBtdWNoIHBvd2VyIGNvbXBhcmVkIHRvIHRyYW5zbWl0dGlu ZywgbGlzdGVuaW5nLCBhbmQgcmVjZWl2aW5nIHJhZGlvLCBzbyBhbnkgdXBkYXRlIGZyb20gQUVT XzEyOF9DQ01fOCBtaWdodCBub3QgYmUgd29ydGggaXQuIEkgdGhpbmsgNjQgYml0IHRhZ3MgaXMg YSBnb29kIGNvbXByb21pc2VkIGJldHdlZW4gb3ZlcmhlYWQgYW5kIHNlY3VyaXR5IGZvciBJb1Qu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tICZuYnNwO1BSRi4g VExTIDEuMyB1c2VkIEhNQUMgd2l0aCBTSEEtMjU2LCBSRkM4MjQ3IHNwZWNpZmllcyBQUkZfQUVT MTI4X1hDQkMgZm9yIGRldmljZXMgbm90IGhhdmluZyBTSEEuDQo8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPi0gSGFzaCBhbGdvcml0aG1zLCBFZDI1NTE5IGlzIGFz IGZhciBhcyBJIGtub3duIHN0YW5kYXJkaXplZCB3aXRoIFNIQS01MTIvMjU2LiBJb1QgZGVwbG95 bWVudHMgb2YgVExTIGFuZCBEVExTIHR5cGljYWxseSB1c2UgU0hBLTI1Ni4NCjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Kb2huPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPklNUE9SVEFO VCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMg YXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBu b3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyDQogaW1t ZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBl cnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3Jt YXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_aeb821b3a89a43a4aa865e39f94d3b0eXCHALN010ciscocom_-- From nobody Mon Mar 19 12:21:30 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB86C12D959 for ; Mon, 19 Mar 2018 12:21:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YN10Myvdu2zC for ; Mon, 19 Mar 2018 12:21:22 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0054.outbound.protection.outlook.com [104.47.0.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4732212DA11 for ; Mon, 19 Mar 2018 12:21:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Mv6iBi2aNlG0osiDrwjF1EOmiGtVmG9gBXR7gfBpOTU=; b=JTy8AcruOSzhEie+or98gj0llnBMzKarcmrXE8PmBGk3OpJaI1vIyndwTrYZRHRvD2T4u0WibchWkPSWDc+Upz/lyw4nuFi7/zoWM4tso7xckYmJzW0FT4ZIWZq3tBDJsx9lbuFT5hIcGzos1zbAdVEMGFaAQh/+EFq5Kb0TJUE= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1808.eurprd08.prod.outlook.com (10.168.67.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 19:21:18 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0588.016; Mon, 19 Mar 2018 19:21:18 +0000 From: Hannes Tschofenig To: "ace@ietf.org" Thread-Topic: Security and privacy for small memory microprocessor based IoT devices are still being invented Thread-Index: AdO/sF0YON4BZIT0RNem0DH5HC1fmw== Date: Mon, 19 Mar 2018 19:21:18 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [2001:67c:370:128:dcc:a64f:188:5dbf] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1808; 7:oiQrrpLHPmu6doKvvUAcIcNM+Ga9CZNPip9rZuPaUD2X6aZNYjpfbQDMcRcqbKqIl2wjAwCSMdRG8boFZBjOdDIWot9/HK69xYYzR3QdubjmvYyQbEh0OWzkwuSZ+forArGVlnvdR+a+EgCzTUXerOfc1NjgajwGcVqFx9CfymAaikpFxe77oyuk+PQVz01FJgQ+EcSe8WqRM70P/qF6rEZFaLY2A3G8VWub7bd0pBZknKt6CusBCTfEQUECx0xm x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: ceda48fd-5823-4ab8-7ac6-08d58dce9744 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1808; x-ms-traffictypediagnostic: VI1PR0801MB1808: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(278428928389397)(192374486261705)(21748063052155)(280585135097487); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(3231221)(944501244)(52105095)(6055026)(6041310)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(6072148)(201708071742011); SRVR:VI1PR0801MB1808; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1808; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(346002)(39380400002)(396003)(366004)(376002)(40434004)(199004)(189003)(11905935001)(15650500001)(2501003)(5640700003)(790700001)(54896002)(9686003)(7696005)(6306002)(99286004)(55016002)(68736007)(2900100001)(6116002)(106356001)(5630700001)(606006)(46003)(2420400007)(236005)(74316002)(19273905006)(316002)(2906002)(72206003)(105586002)(86362001)(25786009)(6436002)(5250100002)(186003)(5660300001)(7110500001)(33656002)(966005)(3280700002)(6916009)(2351001)(97736004)(5890100001)(53936002)(8676002)(1730700003)(81156014)(81166006)(3660700001)(6506007)(8936002)(478600001)(7736002)(14454004)(102836004)(59450400001)(563064011); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1808; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: YO2JTL+DQp4CMtFkYn/AB7V9nMOdMbN/uvVjMf8eBdw9t0wACJdQx6VnCdWNxI9uLelx2DNNoGRiVCGirWtZ+dOe4m+3g6BSkZmmqQreYr91JHVrB/ZY8spN8dOR4CoZP5Ftn2w2WwRCIryb1nn9Q6RfHBBmTzUwXy4amd2qm/BeXhoXFNneIeIgVvS/8kaJ1nw5hUasca5JfZR1RnaHfKNIDx538pegTbtzeELKykb3TKXhrnjd0IUfGV2myYuqfGzqvr75zFU9lMsGBV/LVF4OzB3it6+TkTdzyGBPFqvmmbPcjVaPiP4+AORqKujLAaR9ENGdEncfyezu58La1Q== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112660D8AEF495716F990CCFAD40VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: ceda48fd-5823-4ab8-7ac6-08d58dce9744 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 19:21:18.2170 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1808 Archived-At: Subject: [Ace] Security and privacy for small memory microprocessor based IoT devices are still being invented X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 19:21:29 -0000 --_000_VI1PR0801MB2112660D8AEF495716F990CCFAD40VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Here is the article mentioned during the ACE meeting today: https://www.networkworld.com/article/3223952/internet-of-things/5-reasons-w= hy-device-makers-cannot-secure-the-iot-platform.html As you can see that there are some misconceptions about our IETF work. It i= s easy to conclude that "Security and privacy for small memory microprocess= or based IoT devices are still being invented" reading some IETF drafts. This motivated me to start a webinar series on "Securing IoT applications = with Mbed TLS" to clarify topics raised in this article and other IoT secur= ity myths. The first part is available for download: http://www2.keil.com/mbed/mbedtls Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB2112660D8AEF495716F990CCFAD40VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Here is the article mentioned during the ACE meeting= today:

https://www.networkworld.com/article/3223952/internet-of-thing= s/5-reasons-why-device-makers-cannot-secure-the-iot-platform.html<= /o:p>

 

As you can see that there are some misconceptions ab= out our IETF work. It is easy to conclude that “Security and privacy = for small memory microprocessor based IoT devices are still being invented&= #8221; reading some IETF drafts.

 

This motivated  me to start a webinar series on= “Securing IoT applications with Mbed TLS” to clarify topics ra= ised in this article and other IoT security myths. The first part is availa= ble for download:

http://www2.keil.com/mbed/mbedtls

 

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB2112660D8AEF495716F990CCFAD40VI1PR0801MB2112_--