From nobody Mon Jun 3 02:01:02 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF5E71200D8; Mon, 3 Jun 2019 02:01:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9sdrqnYxcpfm; Mon, 3 Jun 2019 02:00:57 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130047.outbound.protection.outlook.com [40.107.13.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4985120020; Mon, 3 Jun 2019 02:00:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=M1+heryMo0PhVLYe1w3R3p/PWgTH6ZCePYsIiG0mCEk=; b=MhxUkTxnv/4Nprf3TuhVJLMPMB+pSp2KcBj7jAWvNoZ/1Le+KWIkhLuaRPAxv3yQai4cOxQn7cFPydx0hkzn2s2I+4T8eyr4UEhhza8gfkipukq9YUqJSxB5djJJBpvzA866MVb/r7hHk13U3HL70Df9rVEQClHMOoxqCBb9r/U= Received: from HE1PR0701MB2746.eurprd07.prod.outlook.com (10.168.185.17) by HE1PR0701MB2972.eurprd07.prod.outlook.com (10.168.98.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1965.12; Mon, 3 Jun 2019 09:00:53 +0000 Received: from HE1PR0701MB2746.eurprd07.prod.outlook.com ([fe80::8a9:a4d6:303b:45f0]) by HE1PR0701MB2746.eurprd07.prod.outlook.com ([fe80::8a9:a4d6:303b:45f0%5]) with mapi id 15.20.1965.011; Mon, 3 Jun 2019 09:00:53 +0000 From: Francesca Palombini To: Jim Schaad , "ace@ietf.org" CC: "draft-ietf-ace-key-groupcomm-oscore@ietf.org" Thread-Topic: draft-ietf-ace-key-groupcomm-oscore Thread-Index: AQHVFTfYPpErjgyNn0iE0xOyD54uCaaBKWWAgAijYwA= Date: Mon, 3 Jun 2019 09:00:53 +0000 Message-ID: <671FEB26-C25D-4AB0-BF9F-3E6FAD38ADDD@ericsson.com> References: <3775CA7A-0174-4261-BBFA-09EFEAA07B4F@ericsson.com> <018501d515a9$ed26d8a0$c77489e0$@augustcellars.com> In-Reply-To: <018501d515a9$ed26d8a0$c77489e0$@augustcellars.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=francesca.palombini@ericsson.com; x-originating-ip: [192.176.1.84] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 2c6d56d1-9c88-4848-2ade-08d6e801fb9a x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:HE1PR0701MB2972; x-ms-traffictypediagnostic: HE1PR0701MB2972: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0057EE387C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(346002)(136003)(376002)(39860400002)(396003)(199004)(189003)(51914003)(51444003)(229853002)(5660300002)(25786009)(561944003)(53936002)(4326008)(486006)(76176011)(33656002)(82746002)(68736007)(44832011)(256004)(54896002)(6486002)(83716004)(6512007)(476003)(6436002)(71190400001)(71200400001)(6306002)(14444005)(6246003)(73956011)(36756003)(66946007)(478600001)(86362001)(7736002)(66556008)(64756008)(102836004)(66446008)(66476007)(76116006)(186003)(26005)(446003)(11346002)(2616005)(6506007)(81166006)(81156014)(8676002)(316002)(2906002)(66066001)(99286004)(110136005)(14454004)(3846002)(6116002)(2501003)(8936002)(4743002)(9326002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR0701MB2972; H:HE1PR0701MB2746.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: wZkpzVoHZ6ZIP4jgdgvMe5h7tsGBx16XA5stqJrRUnRlwWvvHjLXuI9YX1C6HHJoQGbZgmcMgpDHeetMLl6+OuH/gnvqNyi5uZrPGPWWsFpbsp1h6lGa6Ogcp+JhnS/B/hUmP58eSTjhrB01tPEbSP95dfsYlS0rkNzom/d6cEuEr8h/yaIF7GFPTAjtG5JE94IToAKnUsqbbV6RpaNrfNm5BHoF0TXXWp6NrQGBJcQ2UmtdXYNh5xbGVIpQIlp5gnetM8T2O7dAf0vRl5zEse4lhpBWe98HhTIsR5QPWtIrDuuAyqA2E5ftRmjNg9ScWnRS9p1d0PLSb3V1m0t4Ro032Jhhq2pH3KruWheMwywFW9OgKdZ4LJzYJh+2W6SXDx9i8tptBpgnykxXBdM/Orqx7X6NGiHBFKmdl7WB940= Content-Type: multipart/alternative; boundary="_000_671FEB26C25D4AB0BF9F3E6FAD38ADDDericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2c6d56d1-9c88-4848-2ade-08d6e801fb9a X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jun 2019 09:00:53.1648 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: francesca.palombini@ericsson.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2972 Archived-At: Subject: Re: [Ace] draft-ietf-ace-key-groupcomm-oscore X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jun 2019 09:01:01 -0000 --_000_671FEB26C25D4AB0BF9F3E6FAD38ADDDericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSmltLA0KV2UgaGF2ZSBub3cgYWRkZWQgeW91ciByZXZpZXcgY29tbWVudHMgdG8gdGhlIGdp dGh1YiBpc3N1ZXMsIGFuZCB3ZeKAmWxsIGdldCB0byBpdC4gQmVsb3csIHRoZSBjb3VwbGUgb2Yg Y29tbWVudHMgdGhhdCBuZWVkZWQgYWRkaXRpb25hbCBjbGFyaWZpY2F0aW9uIChhbmQgY29uc2Vx dWVudCBBUHMpLg0KVGhhbmsgeW91IGFnYWluIGZvciB0aGUgdGhvcm91Z2ggcmV2aWV3IQ0KRnJh bmNlc2NhIGFuZCBNYXJjbw0KMi4gIFNlY3Rpb24gMy4xIC0gInJlcXVlc3RlciIgc2VlbXMgdG8g YmUgYW4gb2RkIG5hbWUgZm9yICJzZW5kZXIiIG9yDQoicHVibGlzaGVyIg0KWypdIFRoaXMgcGFy dGljdWxhciBkb2N1bWVudCBkb2VzIG5vdCBjb25zaWRlciB0aGUgY29uY2VwdCBvZiBwdWJsaXNo ZXIuIFJlcXVlc3RlciB3YXMgY2hvc2VuIHRvIGlkZW50aWZ5IGEgY2xpZW50IGluIGEgZ3JvdXAg Y29tbXVuaWNhdGlvbiBzZXR0aW5nLCBpLmUuIHN0cmVzc2luZyB0aGF0IGl0IHNlbmRzIChncm91 cCkgcmVxdWVzdHMgYW5kIHJlY2VpdmVzICh1bmljYXN0KSByZXNwb25zZXMuIFNlbmRlciB3b3Vs ZCBub3QgYmUgY29ycmVjdCwgYXMgYm90aCBjbGllbnRzIGFuZCBzZXJ2ZXJzIGFyZSBzZW5kZXJz IGF0IHNvbWUgcG9pbnQgZHVyaW5nIHRoZSBtZXNzYWdlIGV4Y2hhbmdlLg0KW0pMU10gSSB3aWxs IHByb2JhYmx5IGNvbXBsYWluIGFnYWluIGF0IGEgbGF0ZXIgZGF0ZS4gIE15IHByb2JsZW0gaXMg dGhhdCByZXF1ZXN0ZXIgaXMgbm90IHRoZSBvcHBvc2l0ZSBvZiBsaXN0ZW5lci4gIEEgZGlmZmVy ZW50IHNldCBtaWdodCBiZSDigJxyZXF1ZXN0ZXLigJ0sIOKAnHJlc3BvbmRlcuKAnSwg4oCcbW9u aXRvcuKAnQ0KW0ZQXSBPaywgdGhhbmtzIGZvciB0aGUgcHJvcG9zYWwuIFdlIHdpbGwgc3dpdGNo IHRvIHRoZXNlIHRlcm1zLiAoQVA4KQ0KDQozLiBTZWN0aW9uIDMuMSAtIEkgYW0gdHJ5aW5nIHRv IGZpZ3VyZSBvdXQgd2h5IGEgR2lkIHdvdWxkIGJlIGEgcmVhc29uYWJsZQ0KdmFsdWUgZm9yIHRo ZSBzY29wZS4gIFRoaXMgbWVhbnMgdGhhdCB0aGUgQVMgaXMgZ29pbmcgdG8gYmUgdGhlIG9uZSB0 bw0KYXNzaWduIHRoZSBHaWQgdmFsdWUgaW4gbWFueSBjYXNlcyBhcyBpdCBuZWVkcyB0byBjaGVj ayB0aGUgc2NvcGUgdmFsdWUNCnRoZXJlLiAgSXMgdGhhdCBnb2luZyB0byBiZSBhIGNvbW1vbiBj YXNlPyAgSS5lLiBBcmUgR2lkcyBnb2luZyB0byBiZQ0KYXNzaWduZWQgYnkgYWRtaW5pc3RyYXRv cnM/DQpbKl0gVGhlIEdpZCBvZiB0aGUgQXV0aG9yaXphdGlvbiBSZXF1ZXN0IHdvdWxkIGJlIGEg cmVhc29uYWJsZSBzY29wZSBiZWNhdXNlIHRoZSBqb2luIHJlc291cmNlIGlzIGFzc29jaWF0ZWQg dG8gaXQgKGF0IHRoZSBHTSkuIFRoZSBHTSByZWNlaXZpbmcgYSBKb2luIFJlcXVlc3QgbXVzdCBi ZSBhYmxlIHRvIHJldHJpZXZlIHRoZSBjb3JyZWN0IEdpZCBmb2xsb3dpbmcgdGhlIGFjY2VzcyB0 byB0aGUgam9pbiByZXNvdXJjZS4gTm8sIHRoZSBBUyBkb2VzIG5vdCBhc3NpZ24gdGhlIEdpZCB2 YWx1ZSAoaWYgdGhhdCBpcyB1c2VkIGFzIHNjb3BlIGluIHRoZSBBdXRob3JpemF0aW9uIFJlcXVl c3QpLiBUaGUgQVMgb25seSBuZWVkcyB0byBjaGVjayB0aGF0IHRoZSBjbGllbnQgaXMgYXV0aG9y aXplZCB0byBnZXQgYW4gYWNjZXNzIHRva2VuIGZvciB0aGF0IHNjb3BlLCByZWdhcmRsZXNzIHRo YXQgaXQgaXMgYSBqb2luIHJlc291cmNlLiBUaGUgR2lkIGlzIGFzc2lnbmVkIGJ5IHRoZSByZXNv dXJjZSBvd25lciBvZiB0aGUgam9pbiByZXNvdXJjZSBhdCB0aGUgR00sIHRoYXQgaXMgYW4gYWRt aW5pc3RyYXRvci4NCltKTFNdIE9rIOKAkyBzbyB0aGUgYW5zd2VyIHRvIG15IHF1ZXN0aW9uIGlz IHllcy4gIEkgd2FudGVkIHRvIGJlIHN1cmUgaXQgd2FzIG5vdCBhIHJlZ2lzdHJhdGlvbiBwcm9j ZXNzIG9uIHRoZSBLREMgKEkgdGhpbmspLg0KW0ZQXSBSaWdodCwgaXQgaXMgbm90IGEgcmVnaXN0 cmF0aW9uIHByb2Nlc3MuDQoNCjQuIFNlY3Rpb24gMy4xIC0gSXMgdGhlIGZvcm0gaW4gQXBwZW5k aXggQyBvZiB0aGUgR2lkIGluIHNvbWUgcmVzcGVjdA0KbWFuZGF0b3J5PyAgSWYgaXQgaXMgbm90 LCB0aGVuIGhvdyBkb2VzIGEgcmVjZWl2ZXIgb2YgYSBtZXNzYWdlIGRpc3Rpbmd1aXNoDQpiZXR3 ZWVuIHR3byBkaWZmZXJlbnQgZ3JvdXBzIHRoYXQgYXJlIHVzaW5nIHRoZSBzYW1lIG11bHRpY2Fz dCBhZGRyZXNzPyAgSXMNCnRoYXQgZ29pbmcgdG8gYmUgYSBub24tc3VwcG9ydGVkIGNhc2U/ICBU aGUgbW9zdCBjb21tb24gY2FzZSBvZiB0aGlzIHdvdWxkDQpiZSBoYXZpbmcgdHdvIGRpZmZlcmVu dCBncm91cHMgb24gdGhlIGRlZmF1bHQgQ29BUCBtdWx0aWNhc3QgYWRkcmVzcyB0YWxraW5nDQp0 byBSRHMgd2l0aCBkaWZmZXJlbnQgcGVybWlzc2lvbnMgYXQgdGhlIFJEIHRvIHNlZSB0aGluZ3Mu DQpbKl0gQXMgb2Ygbm93LCB0aGF0IGlzIGp1c3QgYW4gZXhhbXBsZSwgd2UgbWlnaHQgcmVjb25z aWRlciBhbmQgbWFrZSB0aGlzIGF0IGxlYXN0IG1hbmRhdG9yeSB0byBpbXBsZW1lbnQsIHNvIGl0 IHdvdWxkIGJlIGdvb2Qgd2l0aCBtb3JlIGZlZWRiYWNrIG9uIHRoaXMuIFRoZSByZXF1aXJlbWVu dHMgYW55d2F5IGFyZSB0aGF0IGluIGEgR00gYWxsIHRoZSBHaWRzIGFyZSB1bmlxdWUsIGFuZCB0 aGF0IGEgR2lkIGlzIGNoYW5nZWQgYWZ0ZXIgYSBncm91cCByZWtleWluZy4gVGhlIGZvcm1hdCBp biBhcHBlbmRpeCBDIGd1YXJhbnRlZXMgYm90aC4gSWYgeW91ciBzZWNvbmQgcXVlc3Rpb24gcmVm ZXJzIHRvIG9uZSBub2RlIGluIDIgZ3JvdXBzIChtYW5hZ2VkIGJ5IDIgZGlmZmVyZW50IEdNcyks IHdoZXJlIHRoZXNlIDIgR2lkcyBjb2xsaWRlLCB0aGVuIHRoYXQgaXMgdXAgdG8gdGhlIGFwcGxp Y2F0aW9uIHRvIGRlY2lkZSBob3cgdG8gZGVhbCB3aXRoIGl0IChkaXNjYXJkLCB0cnkgYm90aCBj b250ZXh0c+KApikuIFdlIGJyaWVmbHkgZGlzY3VzcyBzZWMgY29ucyBhYm91dCBpdCBpbiBzZWN0 aW9uIDguNSBvZiBjb3JlLW9zY29yZS1ncm91cGNvbW0uIEhvd2V2ZXIsIHRoYXQgaXMgaW5kZXBl bmRlbnQgZnJvbSB0aGUgZm9ybWF0IG9mIHRoZSBHaWQsIGFzIGxvbmcgYXMgdGhlIHJlcXVpcmVt ZW50cyBhcmUgbWV0Lg0KW0pMU10gTXkgcXVlc3Rpb24gZGVhbHQgd2l0aCBoYXZpbmcgdHdvIGRp ZmZlcmVudCBLRENzIGVhY2ggb2Ygd2hpY2ggaGFzIGEgR2lkIGFuZCB0aGF0IEdpZCBjb2xsaWRl cyBmb3Igc29tZSByZWFzb24uICBUaGUgZ3JvdXBzIG9mIHRoZSB0d28gS0RDcyBhcmUgZGlzdGlu Y3QgYW5kIHRoZSByZXNvdXJjZXMgYWNjZXNzaWJsZSBieSB0aG9zZSBkaWZmZXJlbnQgS0RDcyBh cmUgZGlzdGluY3QgYW5kIGFyZSBxdWl0ZSBwb3NzaWJseSB0d28gZGlmZmVyZW50IGFwcGxpY2F0 aW9ucy4NCltGUF0gT2ssIHRoYXTigJlzIHdoYXQgd2UgdGhvdWdodC4gU28gd2Ugd2lsbCBhZGQg c2VjIGNvbnMgdGhhdCB0aGlzIGlzIHVwIHRvIHRoZSBhcHBsaWNhdGlvbiB0byBkZWNpZGUgKEFQ OSkNCg0KDQoNCjcuICBTZWN0aW9uIDQuMiAtIGZvciAnY2xpZW50X2NyZWQnLCBJIGFtIHVuc3Vy ZSB3aGF0IHRoZSBjbGllbnQgaXMgc3VwcG9zZWQNCnRvIGRvIGlmIHRoZSBqb2luaW5nIG5vZGUg ZG9lcyBub3Qga25vdyB0aGUgY291bnRlcnNpZ25hdHVyZSBhbGdvcml0aG0uICBDYW4NCnRoZSBp bmNsdWRlIHB1YmxpYyBrZXkgbm90IGJlIGluIGEgY29uc2lzdGVudCBmb3JtYXQ/ICBXaGF0IGRv ZXMgY29uc2lzdGVudA0KZm9ybWF0IGV2ZW4gbWVhbj8NClsqXSBDb25zaXN0ZW50IGZvcm1hdCBy ZWZlcnMgdG8gdGhlIGtleSB0eXBlIGJhc2VkIG9uIHRoZSBjb3VudGVyc2lnbmF0dXJlIGFsZ29y aXRobSB1c2VkLiBJZiB0aGUgam9pbmluZyBub2RlIGRvZXMgbm90IGtub3cgdGhlIGNvdW50ZXJz aWduYXR1cmUgYWxnb3JpdGhtLCBpdCBtaWdodCBqdXN0IG9taXQgdGhpcyBwYXJhbWV0ZXIsIG9y IHNlbmQgYSBwdWJsaWMga2V5IGFzIGEgZ3Vlc3MuIElmIHRoZSBndWVzcyBpcyBpbmNvcnJlY3Qs IHRoZSBHTSB3aWxsIHJlcGx5IGFzIHNwZWNpZmllZCBpbiA0LjMgKHNlZSBwb2ludCA4KS4NCltK TFNdIEkgZG9u4oCZdCBrbm93IHdoYXQgcG9pbnQgOCBpcyDigJMgVGhlcmUgYXJlIDYgcG9pbnRz IGZvciB0aGUgb3V0ZXIgbGlzdCBhbmQgdGhlIGlubmVyIHBvaW50IDggZGVmaW5lcyBhIGZpZWxk IGFuZCBkb2VzIG5vdCBkZWZpbmUgYSByZXNwb25zZS4NCltGUF0gSSBtZWFudCBwb2ludCA4LiBv ZiB5b3VyIHJldmlldyBjb21tZW50czogdGhlIG9uZSBqdXN0IGJlbG93IHRoaXMgb25lLg0KDQo4 LiBTZWN0aW9uIDQuMyAtIEkgZG9uJ3QgdW5kZXJzdGFuZCB3aHkgdGhlIEdNIGlzIGFjY2VwdGlu ZyB0aGUgam9pbiByZXF1ZXN0DQppZiB0aGUgY2xpZW50X2NyZWQgcGFzc2VkIGluIHdhcyBub3Qg aW4gdGhlIGNvcnJlY3QgZm9ybWF0LiAgSXMgdGhpcyBhIHR5cG8/DQpbKl0gVGhlIHJlYXNvbiBm b3IgcmVzcG9uZGluZyB3aXRoIGEgbm9uLWVycm9yIHJlc3BvbnNlIGNvZGUgaXMgdG8gYmUgYWJs ZSB0byB1c2UgdGhlIHBheWxvYWQgdG8gcHJvdmlkZSB0aGUga2V5IGluZm8gaW4gYSBDQk9SIG1h cC4gV2l0aCBhIDQuWFggcmVzcG9uc2UsIHRoYXQgd291bGQgbm90IGJlIHBvc3NpYmxlIHNpbmNl IHRoZSBwYXlsb2FkIGlzIHN1cHBvc2VkIHRvIGJlIGEgZGlhZ25vc3RpYyBodW1hbiByZWFkYWJs ZSB0ZXh0IHN0cmluZy4gV2UgYXJlIHdpbGxpbmcgdG8gY2hhbmdlIHRoYXQgaWYgdGhlIFdHL0Nv QVAgZXhwZXJ0cyBjYW4gY29uZmlybSB0aGF0IHdvdWxkIGJlIG9rLg0KW0pMU10gU28gSSByZXR1 cm4gYSAyLjAxIGluIGJvdGggY2FzZXMsIGFuZCBiYXNlZCBvbiB0aGUgY29udGVudCB0aGUgY2xp ZW50IG5lZWRzIHRvIGRldGVybWluZSB3aGF0IGlzIGhhcHBlbmluZz8gICBXZSBhcmUgYnJlYWtp bmcgdGhlIDQueHggcmVzcG9uc2UgYWxyZWFkeSBpbiB0aGUgT0F1dGggZnJhbWV3b3JrIGJ5IHJl dHVybmluZyBhbiBlcnJvciByZXNwb25zZS4gIEkgd291bGQgdGhpbmsgdGhhdCBpdCB3b3VsZCBt YWtlIG1vcmUgc2Vuc2UgdG8gY29udGludWUgdGhhdCB0cmVuZC4NCltGUF0gT2ssIHdlIHdpbGwg Y2hhbmdlIHRoaXMgdG8gZXJyb3IgY29kZS4gV2Ugd2lsbCBicmluZyB0aGlzIHVwIGluIENvUkUg YXMgd2VsbC4gKEFQMTApDQoNCjEwLiAgU2VjdGlvbiA2IC0gV2hhdCBpcyB0aGUgUE9QIG1ldGhv ZCBmb3IgdGhlIGZvdXJ0aCBidWxsZXQgbWV0aG9kPw0KWypdIFdlIGFkZHJlc3MgdGhpcyBhcyB3 ZWxsIGluIHBvaW50IDkgb2YgeW91ciByZXZpZXcgY29tbWVudHMsIHRvIHdoaWNoIHdlIHNheTog 4oCcVW50aWwgbm93LCB3ZSBrZXB0IHRoYXQgb3V0IG9mIHRoZSBzY29wZSBvZiB0aGlzIGFuZCBk ZXBlbmRlbnQgZG9jdW1lbnRzIChzZWUgc2VjdGlvbiA4IG9mIGFjZS1rZXktZ3JvdXBjb21tLW9z Y29yZSksIGJ1dCB3ZSBhcmUgbG9va2luZyB0byBpbmNsdWRlIGl0Lg0KT25lIHBvc3NpYmlsaXR5 IHdlIGFyZSBjb25zaWRlcmluZyBpcyB0byBzaWduIHRoZSBrZXkgZGlzdHJpYnV0aW9uIHJlcXVl c3QgdG9nZXRoZXIgd2l0aCBhIG5vbmNlIHRoYXQgd2FzIHNlbnQgZnJvbSB0aGUgS0RDIChmb3Ig dGhlIHNha2Ugb2YgZnJlc2huZXNzKSwgIHVzaW5nIHRoZSBwcml2YXRlIGtleSBwYWlyZWQgdG8g dGhlIHB1YmxpYyBrZXkgc2VudCBpbiDigJhjbGllbnRfY3JlZOKAmS7igJwNCllvdSBzZWVtZWQg b2sgd2l0aCB0aGlzLCBzbyB3ZSB3aWxsIGltcGxlbWVudCBpdCBoZXJlLiAoQVA1KQ0KW0pMU10g VGhpcyBpcyBhIHByb2JsZW0gdGhhdCBpcyBnb2luZyB0byBuZWVkIHRvIGJlIHNvbHZlZCBhdCBz b21lIHBvaW50IGZvciB0aGUgT0F1dGggZnJhbWV3b3JrIGFzIHdlbGwgYXQgc29tZSBwb2ludCBp biB0aGUgZnV0dXJlLiAgQnV0IG1heSBiZSBtb3JlIG9mIGEgcHJvYmxlbSBoZXJlLiAgWW91IG1p Z2h0IHdhbnQgdG8gdGFsayB0byBMdWR3aWcgYWJvdXQgdGhlIHNvbHV0aW9uIHNwYWNlLg0KW0ZQ XSBXZSB3aWxsIGRvIHRoYXQuDQoNCjEyLiAgU2VjdGlvbiA3IC0gVGhpcyB0ZXh0IGltcGxpZXMg dG8gbWUgdGhhdCBhbGwgdXNlcnMgb2YgYSBncm91cCBrZXkgbmVlZA0KdG8gYmUgYWJsZSB0byBh Y3QgYXMgc2VydmVycyBhbmQgaGF2ZSBhIGZpeGVkIHBvcnQgbnVtYmVyIHdoaWNoIHdhcyBzdXBw bGllZA0Kc29tZSBob3cgdG8gdGhlIEdNIHNvIHRoYXQgaXQgY2FuIGJlIG5vdGlmaWVkLiAgIFRo aXMgY291bGQgYmUgZG9uZSBieQ0Ka2VlcGluZyB1cCB0aGUgRFRMUyBzZXNzaW9uLCBidXQgdGhh dCBpcyBzdGlsbCBhIGxpdHRsZSBiaXQgdHJpY2t5IGFuZCB3b3VsZA0Kbm90IHdvcmsgZm9yIE9T Q09SRSBiYXNlZCBtZXNzYWdlcy4gIFRoaXMgdGV4dCBtaWdodCB3YW50IHRvIHBvaW50IHRvIHRo ZQ0Kc2VjdGlvbiBpbiB0aGUgaWV0Zi1hY2Uta2V5LWdyb3VwY29tbSB0aGF0IGRlYWxzIHdpdGgg dGhpcyBhbmQgcmVxdWlyZSB0aGF0DQp0aGUgcXVlcnkgb3Igc3Vic2NyaWJlIG1ldGhvZHMgYmUg c3VwcG9ydGVkLiAgQWx0aG91Z2ggYm90aCBvZiB0aG9zZSBzdWZmZXINCmZyb20gdGhlIGxhY2sg b2YgaGFyZCBicmVhayBvbiB0aGUgcGFydCBvZiBwdWJsaXNoZXJzLg0KWypdIFllcywgdGhhdCBp cyBjb3JyZWN0LCBncm91cCBtZW1iZXJzIHdvdWxkIG5lZWQgdG8gYWN0IGFzIHNlcnZlcnMuIFRo ZSBwb3J0IG51bWJlciBjb3VsZCBiZSBlaXRoZXIgZGVmYXVsdCBvciBwYXJ0IG9mIHRoZSBKb2lu IFJlcXVlc3QgKGluIGEgbmV3IGZpZWxkIOKAnHJla2V5aW5nIHVyaeKAnT8pLCB3aXRoIHRoZSBn cm91cCBtZW1iZXIgYXNzdW1pbmcgdGhhdCB0aGUgcmVrZXlpbmcgaXMgZG9uZSB3aXRoIHRoaXMg KHVuaWNhc3QpIGRlZmF1bHQgYWxnb3JpdGhtLiBUaGUgR00gY291bGQgdGhlbiBlaXRoZXIgY29u ZmlybSwgb3IgY29tbXVuaWNhdGUgdG8gdGhlIGpvaW5pbmcgbm9kZSBhIGRpZmZlcmVudCBncm91 cCByZWtleWluZyBzY2hlbWUgKGluIOKAnGdyb3VwX3BvbGljaWVz4oCdKSBhbmQgcG9ydCBhbmQg cmVzb3VyY2UgKGluIHRoZSBuZXcgZmllbGQg4oCccmVrZXlpbmcgdXJp4oCdKSBpbiB0aGUgSm9p biBSZXNwb25zZS4gSG93ZXZlciwgdGhhdCBpcyBxdWl0ZSBoZWF2eSBvbiB0aGUgZ3JvdXAgbWVt YmVyLCB3aGljaCBpcyBhIHJlYXNvbiB0byB1c2UgUkQgaW5zdGVhZCB0byBkaXNjb3ZlciBpbiBh ZHZhbmNlIHRoZSByZWtleWluZyBzY2hlbWUgYW5kIHJla2V5aW5nIHVyaSBhcyBsaW5rZWQgdGFy Z2V0IGF0dHJpYnV0ZXMgb2YgdGhlIGpvaW4gcmVzb3VyY2UuIFdvdWxkIHRoYXQgd29yaz8gQWxz byB3aHkgZG8geW91IHNheSB0aGF0IGl0IHdvdWxkIG5vdCB3b3JrIGZvciBPU0NPUkUgYmFzZWQg bWVzc2FnZXM/IFdlIGNvdWxkIGVhc2lseSBzcGVjaWZ5IHRoYXQgd2hlbiB1c2luZyB0aGUgT1ND T1JFIHByb2ZpbGUgYmV0d2VlbiBncm91cCBtZW1iZXIgYW5kIEdNLCB0aGUgbm9kZXMgbmVlZCB0 byBoYXZlIGJvdGggcm9sZXMsIHNvIGNvbmZpZ3VyZSB0aGVpciBrZXlpbmcgbWF0ZXJpYWwgYWNj b3JkaW5nbHkgKGZvciBleGFtcGxlOiB0aGUgZ3JvdXAgbWVtYmVy4oCZcyByZWNpcGllbnQgY29u dGV4dCBuZWVkIHRvIGNvbnRhaW4gYSByZXBsYXkgd2luZG93KS4gKEFQNykNCltKTFNdIEkgdGhp bmsgdGhhdCB0aGlzIG1heSBuZWVkIHRvIGhhdmUgYSBkZXNpZ24gc2Vzc2lvbiB0byBmaWd1cmUg b3V0IGFsbCBvZiB0aGUgcmFtaWZpY2F0aW9ucyBhbmQgcHJvYmxlbXMuDQpbRlBdIE9rLCB3ZSB3 aWxsIHN0YXJ0IGRyYWZ0aW5nIHRoaXMgb24gYSBzZXBhcmF0ZSBicmFuY2ggdG8gaGF2ZSBhIHN0 YXJ0aW5nIHBvaW50LiBXZSBjb3VsZCBoYXZlIHRoaXMgZGVzaWduIHNlc3Npb24gaW4gTW9udHJl YWwgb3IgZHVyaW5nIGFuIGludGVyaW0uDQpKaW0NCg0KDQo= --_000_671FEB26C25D4AB0BF9F3E6FAD38ADDDericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <69811DB26F8D2B418976306EF94A4AA5@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1u YW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6 MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBjbTsNCglm b250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNw YW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHls ZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBw dCA3Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48 L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tR0IiIGxpbms9IiMwNTYzQzEiIHZsaW5r PSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6cmVk Ij5IaSBKaW0sPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTox Mi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6cmVkIj5XZSBoYXZlIG5vdyBhZGRlZCB5b3VyIHJl dmlldyBjb21tZW50cyB0byB0aGUgZ2l0aHViIGlzc3VlcywgYW5kIHdl4oCZbGwgZ2V0IHRvIGl0 LiBCZWxvdywgdGhlIGNvdXBsZSBvZiBjb21tZW50cyB0aGF0IG5lZWRlZCBhZGRpdGlvbmFsDQog Y2xhcmlmaWNhdGlvbiAoYW5kIGNvbnNlcXVlbnQgQVBzKS48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpyZWQi PlRoYW5rIHlvdSBhZ2FpbiBmb3IgdGhlIHRob3JvdWdoIHJldmlldyE8YnI+DQpGcmFuY2VzY2Eg YW5kIE1hcmNvPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJs YWNrIj4yLiAmbmJzcDtTZWN0aW9uIDMuMSAtICZxdW90O3JlcXVlc3RlciZxdW90OyBzZWVtcyB0 byBiZSBhbiBvZGQgbmFtZSBmb3IgJnF1b3Q7c2VuZGVyJnF1b3Q7IG9yPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mcXVvdDtwdWJsaXNoZXImcXVv dDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOTkwMEZGIj5bKl0g VGhpcyBwYXJ0aWN1bGFyIGRvY3VtZW50IGRvZXMgbm90IGNvbnNpZGVyIHRoZSBjb25jZXB0IG9m IHB1Ymxpc2hlci4gUmVxdWVzdGVyIHdhcyBjaG9zZW4gdG8gaWRlbnRpZnkgYSBjbGllbnQgaW4g YSBncm91cCBjb21tdW5pY2F0aW9uIHNldHRpbmcsIGkuZS4gc3RyZXNzaW5nDQogdGhhdCBpdCBz ZW5kcyAoZ3JvdXApIHJlcXVlc3RzIGFuZCByZWNlaXZlcyAodW5pY2FzdCkgcmVzcG9uc2VzLiBT ZW5kZXIgd291bGQgbm90IGJlIGNvcnJlY3QsIGFzIGJvdGggY2xpZW50cyBhbmQgc2VydmVycyBh cmUgc2VuZGVycyBhdCBzb21lIHBvaW50IGR1cmluZyB0aGUgbWVzc2FnZSBleGNoYW5nZS48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMDA3MEMwIj5bSkxTXSBJIHdpbGwgcHJvYmFibHkgY29tcGxhaW4gYWdh aW4gYXQgYSBsYXRlciBkYXRlLiAmbmJzcDtNeSBwcm9ibGVtIGlzIHRoYXQgcmVxdWVzdGVyIGlz IG5vdCB0aGUgb3Bwb3NpdGUgb2YgbGlzdGVuZXIuICZuYnNwO0EgZGlmZmVyZW50IHNldA0KIG1p Z2h0IGJlIOKAnHJlcXVlc3RlcuKAnSwg4oCccmVzcG9uZGVy4oCdLCDigJxtb25pdG9y4oCdPGJy Pg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6cmVkIj5bRlBdIE9rLCB0aGFua3MgZm9yIHRo ZSBwcm9wb3NhbC4gV2Ugd2lsbCBzd2l0Y2ggdG8gdGhlc2UgdGVybXMuIChBUDgpPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjpibGFjayI+My4gU2VjdGlvbiAzLjEgLSBJIGFtIHRyeWluZyB0byBmaWd1cmUgb3V0IHdo eSBhIEdpZCB3b3VsZCBiZSBhIHJlYXNvbmFibGU8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPnZhbHVlIGZvciB0aGUgc2NvcGUuICZuYnNwO1RoaXMg bWVhbnMgdGhhdCB0aGUgQVMgaXMgZ29pbmcgdG8gYmUgdGhlIG9uZSB0bzwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+YXNzaWduIHRoZSBHaWQgdmFs dWUgaW4gbWFueSBjYXNlcyBhcyBpdCBuZWVkcyB0byBjaGVjayB0aGUgc2NvcGUgdmFsdWU8L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPnRoZXJlLiAm bmJzcDtJcyB0aGF0IGdvaW5nIHRvIGJlIGEgY29tbW9uIGNhc2U/ICZuYnNwO0kuZS4gQXJlIEdp ZHMgZ29pbmcgdG8gYmU8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6YmxhY2siPmFzc2lnbmVkIGJ5IGFkbWluaXN0cmF0b3JzPzwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5OTAwRkYiPlsqXSBUaGUgR2lkIG9mIHRoZSBBdXRob3Jp emF0aW9uIFJlcXVlc3Qgd291bGQgYmUgYSByZWFzb25hYmxlIHNjb3BlIGJlY2F1c2UgdGhlIGpv aW4gcmVzb3VyY2UgaXMgYXNzb2NpYXRlZCB0byBpdCAoYXQgdGhlIEdNKS4gVGhlIEdNIHJlY2Vp dmluZyBhIEpvaW4gUmVxdWVzdA0KIG11c3QgYmUgYWJsZSB0byByZXRyaWV2ZSB0aGUgY29ycmVj dCBHaWQgZm9sbG93aW5nIHRoZSBhY2Nlc3MgdG8gdGhlIGpvaW4gcmVzb3VyY2UuIE5vLCB0aGUg QVMgZG9lcyBub3QgYXNzaWduIHRoZSBHaWQgdmFsdWUgKGlmIHRoYXQgaXMgdXNlZCBhcyBzY29w ZSBpbiB0aGUgQXV0aG9yaXphdGlvbiBSZXF1ZXN0KS4gVGhlIEFTIG9ubHkgbmVlZHMgdG8gY2hl Y2sgdGhhdCB0aGUgY2xpZW50IGlzIGF1dGhvcml6ZWQgdG8gZ2V0IGFuIGFjY2Vzcw0KIHRva2Vu IGZvciB0aGF0IHNjb3BlLCByZWdhcmRsZXNzIHRoYXQgaXQgaXMgYSBqb2luIHJlc291cmNlLiBU aGUgR2lkIGlzIGFzc2lnbmVkIGJ5IHRoZSByZXNvdXJjZSBvd25lciBvZiB0aGUgam9pbiByZXNv dXJjZSBhdCB0aGUgR00sIHRoYXQgaXMgYW4gYWRtaW5pc3RyYXRvci48L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMDA3MEMwIj5bSkxTXSBPayDigJMgc28gdGhlIGFuc3dlciB0byBteSBxdWVzdGlvbiBpcyB5 ZXMuICZuYnNwO0kgd2FudGVkIHRvIGJlIHN1cmUgaXQgd2FzIG5vdCBhIHJlZ2lzdHJhdGlvbiBw cm9jZXNzIG9uIHRoZSBLREMgKEkgdGhpbmspLjxicj4NCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOnJlZCI+W0ZQXSBSaWdodCwgaXQgaXMgbm90IGEgcmVnaXN0cmF0aW9uIHByb2Nlc3MuPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjpibGFjayI+NC4gU2VjdGlvbiAzLjEgLSBJcyB0aGUgZm9ybSBpbiBBcHBlbmRp eCBDIG9mIHRoZSBHaWQgaW4gc29tZSByZXNwZWN0PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5tYW5kYXRvcnk/ICZuYnNwO0lmIGl0IGlzIG5vdCwg dGhlbiBob3cgZG9lcyBhIHJlY2VpdmVyIG9mIGEgbWVzc2FnZSBkaXN0aW5ndWlzaDwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+YmV0d2VlbiB0d28g ZGlmZmVyZW50IGdyb3VwcyB0aGF0IGFyZSB1c2luZyB0aGUgc2FtZSBtdWx0aWNhc3QgYWRkcmVz cz8gJm5ic3A7SXM8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 YmxhY2siPnRoYXQgZ29pbmcgdG8gYmUgYSBub24tc3VwcG9ydGVkIGNhc2U/ICZuYnNwO1RoZSBt b3N0IGNvbW1vbiBjYXNlIG9mIHRoaXMgd291bGQ8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPmJlIGhhdmluZyB0d28gZGlmZmVyZW50IGdyb3VwcyBv biB0aGUgZGVmYXVsdCBDb0FQIG11bHRpY2FzdCBhZGRyZXNzIHRhbGtpbmc8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPnRvIFJEcyB3aXRoIGRpZmZl cmVudCBwZXJtaXNzaW9ucyBhdCB0aGUgUkQgdG8gc2VlIHRoaW5ncy48L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPjwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOTkwMEZGIj5bKl0gQXMgb2Ygbm93LCB0aGF0IGlz IGp1c3QgYW4gZXhhbXBsZSwgd2UgbWlnaHQgcmVjb25zaWRlciBhbmQgbWFrZSB0aGlzIGF0IGxl YXN0IG1hbmRhdG9yeSB0byBpbXBsZW1lbnQsIHNvIGl0IHdvdWxkIGJlIGdvb2Qgd2l0aCBtb3Jl IGZlZWRiYWNrIG9uIHRoaXMuIFRoZSByZXF1aXJlbWVudHMNCiBhbnl3YXkgYXJlIHRoYXQgaW4g YSBHTSBhbGwgdGhlIEdpZHMgYXJlIHVuaXF1ZSwgYW5kIHRoYXQgYSBHaWQgaXMgY2hhbmdlZCBh ZnRlciBhIGdyb3VwIHJla2V5aW5nLiBUaGUgZm9ybWF0IGluIGFwcGVuZGl4IEMgZ3VhcmFudGVl cyBib3RoLiBJZiB5b3VyIHNlY29uZCBxdWVzdGlvbiByZWZlcnMgdG8gb25lIG5vZGUgaW4gMiBn cm91cHMgKG1hbmFnZWQgYnkgMiBkaWZmZXJlbnQgR01zKSwgd2hlcmUgdGhlc2UgMiBHaWRzIGNv bGxpZGUsIHRoZW4NCiB0aGF0IGlzIHVwIHRvIHRoZSBhcHBsaWNhdGlvbiB0byBkZWNpZGUgaG93 IHRvIGRlYWwgd2l0aCBpdCAoZGlzY2FyZCwgdHJ5IGJvdGggY29udGV4dHPigKYpLiBXZSBicmll Zmx5IGRpc2N1c3Mgc2VjIGNvbnMgYWJvdXQgaXQgaW4gc2VjdGlvbiA4LjUgb2YgY29yZS1vc2Nv cmUtZ3JvdXBjb21tLiBIb3dldmVyLCB0aGF0IGlzIGluZGVwZW5kZW50IGZyb20gdGhlIGZvcm1h dCBvZiB0aGUgR2lkLCBhcyBsb25nIGFzIHRoZSByZXF1aXJlbWVudHMgYXJlDQogbWV0Ljwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMDA3MEMwIj5bSkxTXSBN eSBxdWVzdGlvbiBkZWFsdCB3aXRoIGhhdmluZyB0d28gZGlmZmVyZW50IEtEQ3MgZWFjaCBvZiB3 aGljaCBoYXMgYSBHaWQgYW5kIHRoYXQgR2lkIGNvbGxpZGVzIGZvciBzb21lIHJlYXNvbi4gJm5i c3A7VGhlIGdyb3VwcyBvZiB0aGUgdHdvIEtEQ3MgYXJlIGRpc3RpbmN0IGFuZA0KIHRoZSByZXNv dXJjZXMgYWNjZXNzaWJsZSBieSB0aG9zZSBkaWZmZXJlbnQgS0RDcyBhcmUgZGlzdGluY3QgYW5k IGFyZSBxdWl0ZSBwb3NzaWJseSB0d28gZGlmZmVyZW50IGFwcGxpY2F0aW9ucy48L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6cmVkIj5bRlBdIE9rLCB0aGF04oCZ cyB3aGF0IHdlIHRob3VnaHQuIFNvIHdlIHdpbGwgYWRkIHNlYyBjb25zIHRoYXQgdGhpcyBpcyB1 cCB0byB0aGUgYXBwbGljYXRpb24gdG8gZGVjaWRlIChBUDkpPGJyPg0KPGJyPg0KPGJyPg0KPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjpibGFjayI+Ny4gJm5ic3A7U2VjdGlvbiA0LjIgLSBmb3IgJ2NsaWVudF9jcmVk JywgSSBhbSB1bnN1cmUgd2hhdCB0aGUgY2xpZW50IGlzIHN1cHBvc2VkPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj50byBkbyBpZiB0aGUgam9pbmlu ZyBub2RlIGRvZXMgbm90IGtub3cgdGhlIGNvdW50ZXJzaWduYXR1cmUgYWxnb3JpdGhtLiAmbmJz cDtDYW48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2si PnRoZSBpbmNsdWRlIHB1YmxpYyBrZXkgbm90IGJlIGluIGEgY29uc2lzdGVudCBmb3JtYXQ/ICZu YnNwO1doYXQgZG9lcyBjb25zaXN0ZW50PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOmJsYWNrIj5mb3JtYXQgZXZlbiBtZWFuPzwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5OTAwRkYiPlsqXSBDb25zaXN0ZW50IGZvcm1hdCByZWZl cnMgdG8gdGhlIGtleSB0eXBlIGJhc2VkIG9uIHRoZSBjb3VudGVyc2lnbmF0dXJlIGFsZ29yaXRo bSB1c2VkLiBJZiB0aGUgam9pbmluZyBub2RlIGRvZXMgbm90IGtub3cgdGhlIGNvdW50ZXJzaWdu YXR1cmUgYWxnb3JpdGhtLCBpdA0KIG1pZ2h0IGp1c3Qgb21pdCB0aGlzIHBhcmFtZXRlciwgb3Ig c2VuZCBhIHB1YmxpYyBrZXkgYXMgYSBndWVzcy4gSWYgdGhlIGd1ZXNzIGlzIGluY29ycmVjdCwg dGhlIEdNIHdpbGwgcmVwbHkgYXMgc3BlY2lmaWVkIGluIDQuMyAoc2VlIHBvaW50IDgpLjwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMwMDcwQzAiPltKTFNdIEkgZG9u4oCZdCBrbm93IHdoYXQgcG9pbnQgOCBp cyDigJMgVGhlcmUgYXJlIDYgcG9pbnRzIGZvciB0aGUgb3V0ZXIgbGlzdCBhbmQgdGhlIGlubmVy IHBvaW50IDggZGVmaW5lcyBhIGZpZWxkIGFuZCBkb2VzIG5vdCBkZWZpbmUNCiBhIHJlc3BvbnNl Ljxicj4NCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOnJlZCI+W0ZQXSBJIG1lYW50IHBvaW50 IDguIG9mIHlvdXIgcmV2aWV3IGNvbW1lbnRzOiB0aGUgb25lIGp1c3QgYmVsb3cgdGhpcyBvbmUu PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjpibGFjayI+OC4gU2VjdGlvbiA0LjMgLSBJIGRvbid0IHVuZGVyc3RhbmQg d2h5IHRoZSBHTSBpcyBhY2NlcHRpbmcgdGhlIGpvaW4gcmVxdWVzdDwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+aWYgdGhlIGNsaWVudF9jcmVkIHBh c3NlZCBpbiB3YXMgbm90IGluIHRoZSBjb3JyZWN0IGZvcm1hdC4gJm5ic3A7SXMgdGhpcyBhIHR5 cG8/PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk5MDBGRiI+Wypd IFRoZSByZWFzb24gZm9yIHJlc3BvbmRpbmcgd2l0aCBhIG5vbi1lcnJvciByZXNwb25zZSBjb2Rl IGlzIHRvIGJlIGFibGUgdG8gdXNlIHRoZSBwYXlsb2FkIHRvIHByb3ZpZGUgdGhlIGtleSBpbmZv IGluIGEgQ0JPUiBtYXAuIFdpdGggYSA0LlhYIHJlc3BvbnNlLCB0aGF0DQogd291bGQgbm90IGJl IHBvc3NpYmxlIHNpbmNlIHRoZSBwYXlsb2FkIGlzIHN1cHBvc2VkIHRvIGJlIGEgZGlhZ25vc3Rp YyBodW1hbiByZWFkYWJsZSB0ZXh0IHN0cmluZy4gV2UgYXJlIHdpbGxpbmcgdG8gY2hhbmdlIHRo YXQgaWYgdGhlIFdHL0NvQVAgZXhwZXJ0cyBjYW4gY29uZmlybSB0aGF0IHdvdWxkIGJlIG9rLjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMwMDcwQzAiPltKTFNdIFNvIEkgcmV0dXJuIGEgMi4wMSBpbiBib3Ro IGNhc2VzLCBhbmQgYmFzZWQgb24gdGhlIGNvbnRlbnQgdGhlIGNsaWVudCBuZWVkcyB0byBkZXRl cm1pbmUgd2hhdCBpcyBoYXBwZW5pbmc/ICZuYnNwOyZuYnNwO1dlIGFyZSBicmVha2luZw0KIHRo ZSA0Lnh4IHJlc3BvbnNlIGFscmVhZHkgaW4gdGhlIE9BdXRoIGZyYW1ld29yayBieSByZXR1cm5p bmcgYW4gZXJyb3IgcmVzcG9uc2UuJm5ic3A7IEkgd291bGQgdGhpbmsgdGhhdCBpdCB3b3VsZCBt YWtlIG1vcmUgc2Vuc2UgdG8gY29udGludWUgdGhhdCB0cmVuZC48YnI+DQo8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjpyZWQiPltGUF0gT2ssIHdlIHdpbGwgY2hhbmdlIHRoaXMgdG8gZXJyb3Ig Y29kZS4gV2Ugd2lsbCBicmluZyB0aGlzIHVwIGluIENvUkUgYXMgd2VsbC4gKEFQMTApPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjpibGFjayI+MTAuICZuYnNwO1NlY3Rpb24gNiAtIFdoYXQgaXMgdGhlIFBPUCBtZXRo b2QgZm9yIHRoZSBmb3VydGggYnVsbGV0IG1ldGhvZD88L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojOTkwMEZGIj5bKl0gV2UgYWRkcmVzcyB0aGlzIGFzIHdlbGwgaW4g cG9pbnQgOSBvZiB5b3VyIHJldmlldyBjb21tZW50cywgdG8gd2hpY2ggd2Ugc2F5OiDigJxVbnRp bCBub3csIHdlIGtlcHQgdGhhdCBvdXQgb2YgdGhlIHNjb3BlIG9mIHRoaXMgYW5kIGRlcGVuZGVu dCBkb2N1bWVudHMgKHNlZQ0KIHNlY3Rpb24gOCBvZiBhY2Uta2V5LWdyb3VwY29tbS1vc2NvcmUp LCBidXQgd2UgYXJlIGxvb2tpbmcgdG8gaW5jbHVkZSBpdC48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk5MDBGRiI+T25lIHBvc3NpYmlsaXR5IHdlIGFyZSBj b25zaWRlcmluZyBpcyB0byBzaWduIHRoZSBrZXkgZGlzdHJpYnV0aW9uIHJlcXVlc3QgdG9nZXRo ZXIgd2l0aCBhIG5vbmNlIHRoYXQgd2FzIHNlbnQgZnJvbSB0aGUgS0RDIChmb3IgdGhlIHNha2Ug b2YgZnJlc2huZXNzKSwgJm5ic3A7dXNpbmcNCiB0aGUgcHJpdmF0ZSBrZXkgcGFpcmVkIHRvIHRo ZSBwdWJsaWMga2V5IHNlbnQgaW4g4oCYY2xpZW50X2NyZWTigJku4oCcPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5OTAwRkYiPllvdSBzZWVtZWQgb2sgd2l0 aCB0aGlzLCBzbyB3ZSB3aWxsIGltcGxlbWVudCBpdCBoZXJlLiAoQVA1KTwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMwMDcwQzAiPltKTFNdIFRoaXMgaXMgYSBwcm9ibGVtIHRoYXQgaXMgZ29pbmcgdG8gbmVl ZCB0byBiZSBzb2x2ZWQgYXQgc29tZSBwb2ludCBmb3IgdGhlIE9BdXRoIGZyYW1ld29yayBhcyB3 ZWxsIGF0IHNvbWUgcG9pbnQgaW4gdGhlIGZ1dHVyZS4NCiAmbmJzcDtCdXQgbWF5IGJlIG1vcmUg b2YgYSBwcm9ibGVtIGhlcmUuJm5ic3A7IFlvdSBtaWdodCB3YW50IHRvIHRhbGsgdG8gTHVkd2ln IGFib3V0IHRoZSBzb2x1dGlvbiBzcGFjZS48YnI+DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjpyZWQiPltGUF0gV2Ugd2lsbCBkbyB0aGF0Ljwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPjEyLiAmbmJz cDtTZWN0aW9uIDcgLSBUaGlzIHRleHQgaW1wbGllcyB0byBtZSB0aGF0IGFsbCB1c2VycyBvZiBh IGdyb3VwIGtleSBuZWVkPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOmJsYWNrIj50byBiZSBhYmxlIHRvIGFjdCBhcyBzZXJ2ZXJzIGFuZCBoYXZlIGEgZml4ZWQg cG9ydCBudW1iZXIgd2hpY2ggd2FzIHN1cHBsaWVkPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5zb21lIGhvdyB0byB0aGUgR00gc28gdGhhdCBpdCBj YW4gYmUgbm90aWZpZWQuICZuYnNwOyZuYnNwO1RoaXMgY291bGQgYmUgZG9uZSBieTwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+a2VlcGluZyB1cCB0 aGUgRFRMUyBzZXNzaW9uLCBidXQgdGhhdCBpcyBzdGlsbCBhIGxpdHRsZSBiaXQgdHJpY2t5IGFu ZCB3b3VsZDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFj ayI+bm90IHdvcmsgZm9yIE9TQ09SRSBiYXNlZCBtZXNzYWdlcy4gJm5ic3A7VGhpcyB0ZXh0IG1p Z2h0IHdhbnQgdG8gcG9pbnQgdG8gdGhlPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOmJsYWNrIj5zZWN0aW9uIGluIHRoZSBpZXRmLWFjZS1rZXktZ3JvdXBjb21t IHRoYXQgZGVhbHMgd2l0aCB0aGlzIGFuZCByZXF1aXJlIHRoYXQ8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPnRoZSBxdWVyeSBvciBzdWJzY3JpYmUg bWV0aG9kcyBiZSBzdXBwb3J0ZWQuICZuYnNwO0FsdGhvdWdoIGJvdGggb2YgdGhvc2Ugc3VmZmVy PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5mcm9t IHRoZSBsYWNrIG9mIGhhcmQgYnJlYWsgb24gdGhlIHBhcnQgb2YgcHVibGlzaGVycy48L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPjwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOTkwMEZGIj5bKl0gWWVzLCB0aGF0 IGlzIGNvcnJlY3QsIGdyb3VwIG1lbWJlcnMgd291bGQgbmVlZCB0byBhY3QgYXMgc2VydmVycy4g VGhlIHBvcnQgbnVtYmVyIGNvdWxkIGJlIGVpdGhlciBkZWZhdWx0IG9yIHBhcnQgb2YgdGhlIEpv aW4gUmVxdWVzdCAoaW4gYSBuZXcgZmllbGQg4oCccmVrZXlpbmcNCiB1cmnigJ0/KSwgd2l0aCB0 aGUgZ3JvdXAgbWVtYmVyIGFzc3VtaW5nIHRoYXQgdGhlIHJla2V5aW5nIGlzIGRvbmUgd2l0aCB0 aGlzICh1bmljYXN0KSBkZWZhdWx0IGFsZ29yaXRobS4gVGhlIEdNIGNvdWxkIHRoZW4gZWl0aGVy IGNvbmZpcm0sIG9yIGNvbW11bmljYXRlIHRvIHRoZSBqb2luaW5nIG5vZGUgYSBkaWZmZXJlbnQg Z3JvdXAgcmVrZXlpbmcgc2NoZW1lIChpbiDigJxncm91cF9wb2xpY2llc+KAnSkgYW5kIHBvcnQg YW5kIHJlc291cmNlIChpbiB0aGUNCiBuZXcgZmllbGQg4oCccmVrZXlpbmcgdXJp4oCdKSBpbiB0 aGUgSm9pbiBSZXNwb25zZS4gSG93ZXZlciwgdGhhdCBpcyBxdWl0ZSBoZWF2eSBvbiB0aGUgZ3Jv dXAgbWVtYmVyLCB3aGljaCBpcyBhIHJlYXNvbiB0byB1c2UgUkQgaW5zdGVhZCB0byBkaXNjb3Zl ciBpbiBhZHZhbmNlIHRoZSByZWtleWluZyBzY2hlbWUgYW5kIHJla2V5aW5nIHVyaSBhcyBsaW5r ZWQgdGFyZ2V0IGF0dHJpYnV0ZXMgb2YgdGhlIGpvaW4gcmVzb3VyY2UuIFdvdWxkIHRoYXQgd29y az8NCiBBbHNvIHdoeSBkbyB5b3Ugc2F5IHRoYXQgaXQgd291bGQgbm90IHdvcmsgZm9yIE9TQ09S RSBiYXNlZCBtZXNzYWdlcz8gV2UgY291bGQgZWFzaWx5IHNwZWNpZnkgdGhhdCB3aGVuIHVzaW5n IHRoZSBPU0NPUkUgcHJvZmlsZSBiZXR3ZWVuIGdyb3VwIG1lbWJlciBhbmQgR00sIHRoZSBub2Rl cyBuZWVkIHRvIGhhdmUgYm90aCByb2xlcywgc28gY29uZmlndXJlIHRoZWlyIGtleWluZyBtYXRl cmlhbCBhY2NvcmRpbmdseSAoZm9yIGV4YW1wbGU6IHRoZQ0KIGdyb3VwIG1lbWJlcuKAmXMgcmVj aXBpZW50IGNvbnRleHQgbmVlZCB0byBjb250YWluIGEgcmVwbGF5IHdpbmRvdykuIChBUDcpPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzAwNzBDMCI+W0pMU10gSSB0aGluayB0aGF0IHRoaXMgbWF5IG5lZWQg dG8gaGF2ZSBhIGRlc2lnbiBzZXNzaW9uIHRvIGZpZ3VyZSBvdXQgYWxsIG9mIHRoZSByYW1pZmlj YXRpb25zIGFuZCBwcm9ibGVtcy48YnI+DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpyZWQi PltGUF0gT2ssIHdlIHdpbGwgc3RhcnQgZHJhZnRpbmcgdGhpcyBvbiBhIHNlcGFyYXRlIGJyYW5j aCB0byBoYXZlIGEgc3RhcnRpbmcgcG9pbnQuIFdlIGNvdWxkIGhhdmUgdGhpcyBkZXNpZ24gc2Vz c2lvbiBpbiBNb250cmVhbCBvciBkdXJpbmcgYW4gaW50ZXJpbS48L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkppbTwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUg MS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_671FEB26C25D4AB0BF9F3E6FAD38ADDDericssoncom_-- From nobody Mon Jun 3 23:50:50 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B3D812006D for ; Mon, 3 Jun 2019 23:50:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=risecloud.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0hWy-vCZaZ6D for ; Mon, 3 Jun 2019 23:50:41 -0700 (PDT) Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-eopbgr00055.outbound.protection.outlook.com [40.107.0.55]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC3E512006A for ; Mon, 3 Jun 2019 23:50:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=RISEcloud.onmicrosoft.com; s=selector2-RISEcloud-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X1xt102O8o0FY60wXXmoGOiqwuQTFD9kwbTPBl1RwHE=; b=DT+Io09Cd5Zo6RtF9fjOFEIqS/mkkZYcM8PpG8zeCU5jye9+v4ZkISznagrjAq9fIAijHf7vEcc02BRvIikZlSHo+0T0wGmVb9qL96K6I97W5g1vOxr2ihM7DUxp8CuGV0SVDZfLI5j0C/6Nk5xWfgqQ+pPQ+ElKXnOzfnB4Apw= Received: from DB6P18901CA0013.EURP189.PROD.OUTLOOK.COM (2603:10a6:4:16::23) by DB6P189MB0328.EURP189.PROD.OUTLOOK.COM (2603:10a6:6:3c::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1943.22; Tue, 4 Jun 2019 06:50:38 +0000 Received: from AM5EUR02FT050.eop-EUR02.prod.protection.outlook.com (2a01:111:f400:7e1e::207) by DB6P18901CA0013.outlook.office365.com (2603:10a6:4:16::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1943.18 via Frontend Transport; Tue, 4 Jun 2019 06:50:37 +0000 Authentication-Results: spf=pass (sender IP is 194.218.146.197) smtp.mailfrom=ri.se; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=ri.se; Received-SPF: Pass (protection.outlook.com: domain of ri.se designates 194.218.146.197 as permitted sender) receiver=protection.outlook.com; client-ip=194.218.146.197; helo=mail.ri.se; Received: from mail.ri.se (194.218.146.197) by AM5EUR02FT050.mail.protection.outlook.com (10.152.9.252) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.20.1943.19 via Frontend Transport; Tue, 4 Jun 2019 06:50:37 +0000 Received: from [10.112.134.122] (10.100.0.158) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Tue, 4 Jun 2019 08:50:37 +0200 To: References: <000201d51814$34a85fc0$9df91f40$@augustcellars.com> From: Ludwig Seitz Message-ID: <9a0bbcd4-6055-729c-7ca8-205d0a1fd681@ri.se> Date: Tue, 4 Jun 2019 08:50:36 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.7.0 MIME-Version: 1.0 In-Reply-To: <000201d51814$34a85fc0$9df91f40$@augustcellars.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms000509070506050103090305" X-Originating-IP: [10.100.0.158] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:194.218.146.197; IPV:NLI; CTRY:SE; EFV:NLI; SFV:NSPM; SFS:(10009020)(136003)(396003)(376002)(346002)(39860400002)(2980300002)(189003)(199004)(5660300002)(235185007)(44832011)(3846002)(53546011)(76176011)(65806001)(486006)(6116002)(126002)(53936002)(11346002)(65956001)(6916009)(33964004)(86362001)(356004)(71190400001)(2351001)(70586007)(70206006)(74482002)(5024004)(31696002)(14444005)(305945005)(65826007)(229853002)(68736007)(7736002)(77096007)(64126003)(26005)(22746008)(386003)(16526019)(186003)(69596002)(16576012)(316002)(16586007)(446003)(476003)(2616005)(40036005)(8936002)(106002)(81166006)(81156014)(8676002)(568964002)(2906002)(478600001)(31686004)(336012)(84326002)(36756003)(58126008)(22756006)(6246003); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6P189MB0328; H:mail.ri.se; FPR:; SPF:Pass; LANG:en; PTR:InfoDomainNonexistent; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 006b194e-d784-48ed-97f3-08d6e8b8f377 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(4709080)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:DB6P189MB0328; X-MS-TrafficTypeDiagnostic: DB6P189MB0328: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:10000; X-Forefront-PRVS: 0058ABBBC7 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: xbuZV0OekssKUKqA94CtV5P3s0+dgO80dqdHiWs7w0H+uTkWP6rD9GAy47AE+ksd+8a0/CSCma4QJP9V4GPJlVg5Af9pRF9TUa4K65KHzh0dyR0gg6phkEO1Ykdg/vkNW8vZJDhRqKZ/1SaWsJZqGojIGCljJrPWKzBwjagkxtBxvoFm7AgrouvkfQzk6H4XssI5wUzh77h8gGmweQZHUOStoY50wii5WwZgd07S94BLTLFkRL9yWumYdbbHVn/mvKpp3s/ZwWogIZe3Ldh1Jkf1dReAojYQumuWvYxwMO6pvi6FdA7sYvpzUR8rIEPPlQybxpeyFyzAP2xLUSjXsbZaKO8pRvNHZURl17X7kTRzK/Kv99rR451+EhMWoz3pKOnD9PJ1k9Xlgpc8PlEdkNaiYPkOan0TSD4ZnEjRiQw= X-OriginatorOrg: ri.se X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Jun 2019 06:50:37.5191 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 006b194e-d784-48ed-97f3-08d6e8b8f377 X-MS-Exchange-CrossTenant-Id: 5a9809cf-0bcb-413a-838a-09ecc40cc9e8 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5a9809cf-0bcb-413a-838a-09ecc40cc9e8; Ip=[194.218.146.197]; Helo=[mail.ri.se] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6P189MB0328 Archived-At: Subject: Re: [Ace] Transporting different types of cnf objects - CBOR vs JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jun 2019 06:50:45 -0000 --------------ms000509070506050103090305 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 01/06/2019 02:51, Jim Schaad wrote: > Ludwig, >=20 > I have been doing some adaptions of my codebase for dealing with the MQ= TT > specification. In the process of this, I have identified the following= > items that I think needs some discussion. They may not need changes in= any > documents and maybe should get a new document. >=20 > 1. The MQTT document is using the content type "application/json" over= > HTTPS for transporting messages. Does there need to be an > "application/ace+json" defined as a media type, but not necessarily a C= BOR > media type? I think the answer may be yes, but it could be a new docum= ent. >=20 I would argue that the first draft using such a media type would be the=20 right place to specify it. However I'm not sure using JSON is the right=20 approach for an ACE specification at all, aren't we supposed to cater=20 for the constrained world? What is there to prevent us from transporting CBOR over HTTP? > 2. If I use a "COSE_Key" confirmation method inside of an > application/ace+json message, there is a potential problem and it could= be > dealt with in a number of different ways. > * The JWT confirmation method is identified as "jwk". The COSE key mu= st be > translated into JOSE even if there is no equivalent key in JOSE. I.e. = that > is a fatal error > * This does not make sense and the confirmation method should be chang= ed to > "cwk" so that either key format could be used in either encoding. >=20 If we use JSON messages mixing in COSE becomes awkward. If the use case=20 calls for JSON, I'd argue it should also use RFC7800 instead of=20 draft-ietf-ace-cwt-proof-of-possession. > 3. If the confirmation is changed, you would need to convert the COSE = key > to a binary string, base64 encoded it and pass as a string when occurri= ng in > a JSON encoding. There is not any other valid way to do this (except s= ee > above of just converting the key format). However, the opposite of put= ting > a JOSE key into a COSE confirmation has three different options that co= uld > be used. > * Encode the JOSE key to a string and pass as a string > * Encode the JOSE key top level map as CBOR but leave all of the eleme= nts > alone. > * Encode the JOSE key in CBOR including conversion of base64 strings t= o > binary data. > (My first preference is probably the second option, but either of the f= irst > two make sense.) >=20 > Jim >=20 I'm still unsure that there is a good use case for transporting JOSE=20 keys in CBOR, but if such a case turns up, I would agree that touching=20 the encoding as little as possible is a good idea (=3Doption 1 or 2). /Ludwig --=20 Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 --------------ms000509070506050103090305 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DT0wggYWMIID/qADAgECAg8BaKlzCTJTye3phLaz/cIwDQYJKoZIhvcNAQELBQAwRzELMAkG A1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJhMSIwIAYDVQQDDBlUZWxpYVNvbmVyYSBD bGFzcyAyIENBIHYyMB4XDTE5MDIwMTE0MjUxNVoXDTIxMDIwMTE0MjUxNFowgYsxCzAJBgNV BAYTAlNFMS4wLAYDVQQKDCVSSVNFIFJlc2VhcmNoIEluc3RpdHV0ZXMgb2YgU3dlZGVuIEFC MRUwEwYDVQQDDAxMdWR3aWcgU2VpdHoxEjAQBgNVBAUTCUx1ZHdpZ1NlaTEhMB8GCSqGSIb3 DQEJARYSbHVkd2lnLnNlaXR6QHJpLnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJNmRfcsto5I/yXrBIi9QroZtfAMttc1Eznv5iPCK++eFUArODhITO7k9rtlQX5D8vYF v4vzZex58YWZhvGMzDj9FdpD/PHKOxL/frlrreChuissPWo5M88DmL3V1oyGzvgeRqaafpEi 0/2+gezMFlABm/BXj3/0Fiw5Sxub7essE27EtDK05nAbUB69kfLHBEytbTAuuSb11hC1dpTf itMZkzSFwsBCyPtIv3GRt9xgnOPK4RRpHidv1GLYXNQQ7xEGhFy4qbZ2NSfM+56SSRswvW9P 5n81ZmZ4FWkiJouUIYtZ2ifncBJL4DC2chjsywDEz5No7kYrGxc5oOm1YQIDAQABo4IBuDCC AbQwHwYDVR0jBBgwFoAUnhn/5Q06/gCXFT9p8dxaPKoMlIMwHQYDVR0OBBYEFKZHZ8MZNNP5 tXMPjeFiw01pUWbtMA4GA1UdDwEB/wQEAwIFoDBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEB DDA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEu Y29tL0NQUzAdBgNVHREEFjAUgRJsdWR3aWcuc2VpdHpAcmkuc2UwTQYDVR0fBEYwRDBCoECg PoY8aHR0cDovL2NybC0yLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYWNsYXNz MmNhdjIuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjB+BggrBgEFBQcBAQRy MHAwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnRydXN0LnRlbGlhLmNvbTBFBggrBgEFBQcw AoY5aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYWNsYXNzMmNh djIuY2VyMA0GCSqGSIb3DQEBCwUAA4ICAQCk0GOalOCjEJObuBeMg0QREtBP/2ona16npn+T v5R3Vjk5UsQdOaOosgVjADX68C83dyfPiWR4UfNJoTBcM8JLpEXIm+xC4BiDPTPHYvgkhgXt 9VWCRWXOMfT/UPXjiGsbPuNWja1LQzF5KOmM826kHVZItHuDY6kJLE4OZ+apFvVKtSLQJJLA 4MlDVwp5+XsZi4cftcX5HdgLdChodUPKq3XVfALfXM/p81XEFBTYOHNplr3cQytDQjsnCZnS Ic4UpsxrArNxDO9+AKu/s1Fbq494AhHj4oHcg4DIjhHUzbPCLP19Gqp4dflr/V7Ulg3d+4Zh bmSAn1cffrzvvkjVrqMgQOoHQTl2QyO9n/oJ/9CSYRmhFsQMPun9LM/p5l58dTZp53B3LgA6 FFrxnntlZnTPh3bvsMJvUQ+AoiXyQwnkdxUrhoM+gUz36t3JSA8g48h7BhPsnwQ/YrarAhJ8 ifuzykTQmDseWLjJKyFflddy/azAlPQjgSMMWOZCo2s+l+WwPISf33nls2Aec/vvG5auYHS6 pwWuVKuwZTPgJfHanZTNpBM5y0jVBz6tr8AHZypnCONgyUYA4uec3v5oWz4FvLEnlKnMGoK3 OeFGvfHG0tbP25HbdN3AJYP0EUo56wfkBOYsnmn4mEYdk2GHkJNfaQRBJljH0T7TOcmcDjCC Bx8wggUHoAMCAQICEGN8C9eFpb8p2mAtfE16cLEwDQYJKoZIhvcNAQELBQAwNzEUMBIGA1UE CgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMTQx MDE2MDgzOTMwWhcNMzIxMDE2MDUwNDAwWjBHMQswCQYDVQQGEwJTRTEUMBIGA1UECgwLVGVs aWFTb25lcmExIjAgBgNVBAMMGVRlbGlhU29uZXJhIENsYXNzIDIgQ0EgdjIwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC0PpW2qcWGnStqfa5DjrUi79Kz2SySUlJ1kiEQ1Pd/ LWbnsEwFYPqOJwAf6ZtEDtQ/9Z1VkVNQ6MkD++keqk7648x0YANgMyiJsWrbd0TKOObtlXdJ pb5qesJ5nOAdVeL3z6lgrkZx+fsUfTV+lLRGRh2+RWzZTjPAvKotY3nAwXCHtwI5v3FKuR10 aJ9+CEOka02KSUzGjcGZwMk2io0DxLELf1gPRvqE9xmn4ioXLqpluozb4Fo9ewydufTLQc3/ I63uPQh8BlLPPIGzWb4iBDq2zbWlbx0KlH/UlUZ7fjzp6N6cAqZ2NnDaCOnnIRfUYeNXFG8/ aiBeFOpEeEpclr5QUwr9HLKL1QiyQtc/wW8acQFoKuGi8myiAch7k7S0rmU5gT05je+OTzWh Oaw7gmDdndYY1mjkPkzpQ+hxyfnwUsAitUq9j0imFOLxKWLH4QNbyuDIMvDyezzJWzMy3XPB LiLSH9CBLVQHRoQ+WW8xD4rnmvQtoGZM72og2iNf4/JCHL1AJYhQtaRjYgm3rhvAP0HhSVAB Z5aHM52ylJHC3JwUyuFm8S9A2ffY9rUTffMLWmDCnX0QAP9bKr6+ACogm4DBUj3ftYodI2TD 6F8+VjSFuCzGDPuCjK+fQ2c3wqziwFl+NgoGI9Vgc6x5+0ocKkiQAIYFaQ3SyGmI6QIDAQAB o4ICFTCCAhEwgYoGCCsGAQUFBwEBBH4wfDAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AudHJ1 c3QudGVsaWFzb25lcmEuY29tMEsGCCsGAQUFBzAChj9odHRwOi8vcmVwb3NpdG9yeS50cnVz dC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jZXIwEgYDVR0TAQH/BAgw BgEB/wIBADBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzAOBgNVHQ8BAf8EBAMC AQYwgcYGA1UdHwSBvjCBuzBAoD6gPIY6aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJh LmNvbS90ZWxpYXNvbmVyYXJvb3RjYXYxLmNybDB3oHWgc4ZxbGRhcDovL2NybC0xLnRydXN0 LnRlbGlhc29uZXJhLmNvbS9jbj1UZWxpYVNvbmVyYSUyMFJvb3QlMjBDQSUyMHYxLG89VGVs aWFTb25lcmE/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDtiaW5hcnkwHQYDVR0OBBYEFJ4Z /+UNOv4AlxU/afHcWjyqDJSDMB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM1ev6e6oX6BMSMA0G CSqGSIb3DQEBCwUAA4ICAQB5wuZFNXR5ko9cu7PcpIyH8xaoGfpimP2GTg7qVuL92D/idIlj pqMm93WC9mgL/Uy6DExoF8xSLurLaiajoU+VG6ZWg0F7P1AXARNt0RpWI5SphxBQYM2751S8 vC/22k8Vi+qpQVIREqQPVXCIEH7U6eCY9gEVzdq9l1yPoI8n0D2a8V6GCv0RVkmIpa16rNYD tTw4j3Ha56/Ua33C3qeZh1dIfkaU2h4CGHd2Em3v5LLMsEh8dqUeG9yIcCU+8RUgDahNxWMe MGxzrhwk8WBV6xeoQp20p7cSHbSbyHJURC1n+nVrgdh8hbw6WOgFhNA5tCPDZ0oSF+uHfj+b ioZE3AlYdcEqHJA9A9sO58F4/Qg/yp9oYuT0ZpKb4hmzeqDXvk5KRFNfHlhTt35i+qmas9wB 11MXbYd5WwqEhZH6HWO5H7XKJP7olxmEC0W3OKlpKafq1iPsBN5ycRfUrXFss0Ax6vpCq0XA 3LYePpQ44hOU+qrkR1M0a7Eo3++3TpP4cV+FZiO4aZYZ3yZftSRHwWpGiDBdWOdTKR2GJi7Z z/OxacrmwmM1Z+WcigldbG8f3IMnOLK4X0uXjhVeAHrhuttQuM8i+4TNXgsZbmfEKNDQIQPO /lbacsGHWFB/U2y6SXVEkZs2xIciRA0iZNTv7mbIL8SZmf5wpbjDCYHiCjGCAzgwggM0AgEB MFowRzELMAkGA1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJhMSIwIAYDVQQDDBlUZWxp YVNvbmVyYSBDbGFzcyAyIENBIHYyAg8BaKlzCTJTye3phLaz/cIwDQYJYIZIAWUDBAIBBQCg ggGvMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE5MDYwNDA2 NTAzNlowLwYJKoZIhvcNAQkEMSIEIAK8VS8tODi6ODxL6UC/J8juYneqGMzrWqwBllowg5qA MGkGCSsGAQQBgjcQBDFcMFowRzELMAkGA1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJh MSIwIAYDVQQDDBlUZWxpYVNvbmVyYSBDbGFzcyAyIENBIHYyAg8BaKlzCTJTye3phLaz/cIw awYLKoZIhvcNAQkQAgsxXKBaMEcxCzAJBgNVBAYTAlNFMRQwEgYDVQQKDAtUZWxpYVNvbmVy YTEiMCAGA1UEAwwZVGVsaWFTb25lcmEgQ2xhc3MgMiBDQSB2MgIPAWipcwkyU8nt6YS2s/3C MGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0D BzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwIC ASgwDQYJKoZIhvcNAQEBBQAEggEAM0+2zkNK/H1tOhCX2qBOV/rvGD2AdjZBXc2gxA6AfayT LSwHv5hjH/Axp76pzbpD4UVwDX1x3RuDSTJz1jID2RmQbYh/mCdVeVz85NoZJTr8T5p3ySF8 ZurnZMcWLJwEiBN+C2RW/HhfU1tCG4/YPSquWrHcUA0QNTb4vR6FpAhRSIX3qJMuPSw01c7Y yC4heqqUfEWFA57SuCqPPL4gHwR1Ja9KKV2EOeW6qTMa10DKlu3PPKlahZEzVGkPLB7kKY+n 7yEFkRcPV2p/xZTfl+WqlgMWMDcAgOD6yyIvsS07MaQAhgRHGquTn2TuWfQCwW+vqsHSzA4H vmzF/x/rtQAAAAAAAA== --------------ms000509070506050103090305-- From nobody Tue Jun 4 11:37:42 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBC2E120409 for ; Tue, 4 Jun 2019 11:37:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WDFtoXPZjOUA for ; Tue, 4 Jun 2019 11:37:38 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 516B4120407 for ; Tue, 4 Jun 2019 11:37:38 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 4 Jun 2019 11:37:31 -0700 From: Jim Schaad To: 'Ludwig Seitz' , References: <000201d51814$34a85fc0$9df91f40$@augustcellars.com> <9a0bbcd4-6055-729c-7ca8-205d0a1fd681@ri.se> In-Reply-To: <9a0bbcd4-6055-729c-7ca8-205d0a1fd681@ri.se> Date: Tue, 4 Jun 2019 11:37:30 -0700 Message-ID: <010901d51b04$92788a10$b7699e30$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQOBPTx051puaG/P5Kmni8/yltJpwgFLCqOYoykv4YA= Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] Transporting different types of cnf objects - CBOR vs JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jun 2019 18:37:41 -0000 > -----Original Message----- > From: Ace On Behalf Of Ludwig Seitz > Sent: Monday, June 3, 2019 11:51 PM > To: ace@ietf.org > Subject: Re: [Ace] Transporting different types of cnf objects - CBOR = vs JSON >=20 > On 01/06/2019 02:51, Jim Schaad wrote: > > Ludwig, > > > > I have been doing some adaptions of my codebase for dealing with the > > MQTT specification. In the process of this, I have identified the > > following items that I think needs some discussion. They may not = need > > changes in any documents and maybe should get a new document. > > > > 1. The MQTT document is using the content type "application/json" > > over HTTPS for transporting messages. Does there need to be an > > "application/ace+json" defined as a media type, but not necessarily = a > > CBOR media type? I think the answer may be yes, but it could be a = new > document. > > > I would argue that the first draft using such a media type would be = the right > place to specify it. However I'm not sure using JSON is the right = approach for > an ACE specification at all, aren't we supposed to cater for the = constrained > world? > What is there to prevent us from transporting CBOR over HTTP? There would be no reason that one cannot transport CBOR over HTTP. = During the discussions for these drafts Hannes was very explicit that he = wanted to be able to use JSON rather than CBOR with the protocol that = was defined by ACE. This would mean that there needs to be an ability = to use JSON with the ACE framework document. I would have no problems with the statement that the MQTT document would = be a good place to define the new media type. >=20 > > 2. If I use a "COSE_Key" confirmation method inside of an > > application/ace+json message, there is a potential problem and it > > could be dealt with in a number of different ways. > > * The JWT confirmation method is identified as "jwk". The COSE key > > must be translated into JOSE even if there is no equivalent key in > > JOSE. I.e. that is a fatal error > > * This does not make sense and the confirmation method should be > > changed to "cwk" so that either key format could be used in either > encoding. > > >=20 > If we use JSON messages mixing in COSE becomes awkward. If the use = case > calls for JSON, I'd argue it should also use RFC7800 instead of = draft-ietf-ace- > cwt-proof-of-possession. I would not have a problem with this, it was one of the options above. = I was just expanding my code to allow for JSON to be used and ran into = this. I just wanted to get a clear group decision on this before I put = things into stone. Jim >=20 > > 3. If the confirmation is changed, you would need to convert the = COSE > > key to a binary string, base64 encoded it and pass as a string when > > occurring in a JSON encoding. There is not any other valid way to = do > > this (except see above of just converting the key format). However, > > the opposite of putting a JOSE key into a COSE confirmation has = three > > different options that could be used. > > * Encode the JOSE key to a string and pass as a string > > * Encode the JOSE key top level map as CBOR but leave all of the > > elements alone. > > * Encode the JOSE key in CBOR including conversion of base64 = strings > > to binary data. > > (My first preference is probably the second option, but either of = the > > first two make sense.) > > > > Jim > > >=20 > I'm still unsure that there is a good use case for transporting JOSE = keys in > CBOR, but if such a case turns up, I would agree that touching the = encoding > as little as possible is a good idea (=3Doption 1 or 2). >=20 > /Ludwig >=20 > -- > Ludwig Seitz, PhD > Security Lab, RISE > Phone +46(0)70-349 92 51 From nobody Tue Jun 4 13:29:59 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 493DC1202E9 for ; Tue, 4 Jun 2019 13:29:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LjEWUUiewngX for ; Tue, 4 Jun 2019 13:29:55 -0700 (PDT) Received: from mail-qt1-x836.google.com (mail-qt1-x836.google.com [IPv6:2607:f8b0:4864:20::836]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C64611200B6 for ; Tue, 4 Jun 2019 13:29:54 -0700 (PDT) Received: by mail-qt1-x836.google.com with SMTP id z19so15375502qtz.13 for ; Tue, 04 Jun 2019 13:29:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=mZW/9MCBJbpQKLAg83WEWh51ZHOOHZUwnZ4j83clI5g=; b=l706mt7AQmo/3GMblxsxASCIhkVH7/0LSK8FdhIaMHXPugImfe+ncTzIYU/9sf73Zn QBdSfLsNqNGzPuJ0ClhUtL+ntp9R4ZIZ5QMa6aXj20RBc/waHWPip7qqWfoiWyWq8yvq 7GUAGRc2+kq6XSMlxeObmhGEoEa96FnJ6LJdFI3pONsB23SkXbA1H6f+KrwmDRcHDnKa kTZ6BXArTMzmfX4nCYirRaEJcEuBNChXl6b8VF0cyAYNhk16oPJ4Vt4ifo0rGzMEjhjB lNMhHkIboOli9XRd60drdQ3BmZpE+1TBhGj76K2WbqwIY8MBmKpi5ZUWGQE9sA0JfXuz c5Fw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=mZW/9MCBJbpQKLAg83WEWh51ZHOOHZUwnZ4j83clI5g=; b=QoutVvwE4TxeGGyPyIBXLY2z4S4cXD+t1Ynln2/6ErPWE+EDeJy52yRuvwVoL31qvm F5DC5XcJ7qbAoRNKGW+3jE21Yjf61QNAUJncU38ODMVEelK7ZygfIIAvhkhEq9kgNs4h dVzkZwbGgiXXfZJHou3iYgTelG4E1lYJSKtsIDzc/ktv1mdpZNEBHHapgd7mJJE8LfJC evU/M+9DLiR05B/9xcEZ9bj9n5jRddHApM3+2kjtb7PS4YTGOuOxJv9gPHGxmAM6zTTi tWZUVIGcKXqY6bSGDYfeBjm6my++cnKGcK9UkZCl++8irw1KajH103cLFuKAIqaW+W6s 8CQQ== X-Gm-Message-State: APjAAAXv+mxilno8rnuN9SholZ3gz3k6Nz4+dW2+kB/ei2/If1PPiVIw vMXnd247RDC2vRExaSVHGZ8Dqfg/HXcW3y9RB1E= X-Google-Smtp-Source: APXvYqyuMOXOu5LXroTUqoBxGvPzljSY+gNtMbRh3W2QdvofCLiDY4Z2GhpcbDr738ZCVMDWREz3Hx92LNtgVs2nRn0= X-Received: by 2002:a0c:fd48:: with SMTP id j8mr28828850qvs.10.1559680193883; Tue, 04 Jun 2019 13:29:53 -0700 (PDT) MIME-Version: 1.0 References: <000201d51814$34a85fc0$9df91f40$@augustcellars.com> <9a0bbcd4-6055-729c-7ca8-205d0a1fd681@ri.se> <010901d51b04$92788a10$b7699e30$@augustcellars.com> In-Reply-To: <010901d51b04$92788a10$b7699e30$@augustcellars.com> From: Cigdem Sengul Date: Tue, 4 Jun 2019 21:29:42 +0100 Message-ID: To: Jim Schaad Cc: Ludwig Seitz , ace@ietf.org Content-Type: multipart/alternative; boundary="000000000000eb737c058a8557f3" Archived-At: Subject: Re: [Ace] Transporting different types of cnf objects - CBOR vs JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jun 2019 20:29:57 -0000 --000000000000eb737c058a8557f3 Content-Type: text/plain; charset="UTF-8" Hello, Yes, we thought supporting JSON option would be good, though indeed there is no issue with transporting CBOR. If there are no other concerns, we can define the new media type in the MQTT draft. Will add the issue to GitHub repo. --Cigdem On Tue, Jun 4, 2019 at 7:37 PM Jim Schaad wrote: > > > > -----Original Message----- > > From: Ace On Behalf Of Ludwig Seitz > > Sent: Monday, June 3, 2019 11:51 PM > > To: ace@ietf.org > > Subject: Re: [Ace] Transporting different types of cnf objects - CBOR vs > JSON > > > > On 01/06/2019 02:51, Jim Schaad wrote: > > > Ludwig, > > > > > > I have been doing some adaptions of my codebase for dealing with the > > > MQTT specification. In the process of this, I have identified the > > > following items that I think needs some discussion. They may not need > > > changes in any documents and maybe should get a new document. > > > > > > 1. The MQTT document is using the content type "application/json" > > > over HTTPS for transporting messages. Does there need to be an > > > "application/ace+json" defined as a media type, but not necessarily a > > > CBOR media type? I think the answer may be yes, but it could be a new > > document. > > > > > I would argue that the first draft using such a media type would be the > right > > place to specify it. However I'm not sure using JSON is the right > approach for > > an ACE specification at all, aren't we supposed to cater for the > constrained > > world? > > What is there to prevent us from transporting CBOR over HTTP? > > There would be no reason that one cannot transport CBOR over HTTP. During > the discussions for these drafts Hannes was very explicit that he wanted to > be able to use JSON rather than CBOR with the protocol that was defined by > ACE. This would mean that there needs to be an ability to use JSON with > the ACE framework document. > > I would have no problems with the statement that the MQTT document would > be a good place to define the new media type. > > > > > > 2. If I use a "COSE_Key" confirmation method inside of an > > > application/ace+json message, there is a potential problem and it > > > could be dealt with in a number of different ways. > > > * The JWT confirmation method is identified as "jwk". The COSE key > > > must be translated into JOSE even if there is no equivalent key in > > > JOSE. I.e. that is a fatal error > > > * This does not make sense and the confirmation method should be > > > changed to "cwk" so that either key format could be used in either > > encoding. > > > > > > > If we use JSON messages mixing in COSE becomes awkward. If the use case > > calls for JSON, I'd argue it should also use RFC7800 instead of > draft-ietf-ace- > > cwt-proof-of-possession. > > I would not have a problem with this, it was one of the options above. I > was just expanding my code to allow for JSON to be used and ran into this. > I just wanted to get a clear group decision on this before I put things > into stone. > > Jim > > > > > > 3. If the confirmation is changed, you would need to convert the COSE > > > key to a binary string, base64 encoded it and pass as a string when > > > occurring in a JSON encoding. There is not any other valid way to do > > > this (except see above of just converting the key format). However, > > > the opposite of putting a JOSE key into a COSE confirmation has three > > > different options that could be used. > > > * Encode the JOSE key to a string and pass as a string > > > * Encode the JOSE key top level map as CBOR but leave all of the > > > elements alone. > > > * Encode the JOSE key in CBOR including conversion of base64 strings > > > to binary data. > > > (My first preference is probably the second option, but either of the > > > first two make sense.) > > > > > > Jim > > > > > > > I'm still unsure that there is a good use case for transporting JOSE > keys in > > CBOR, but if such a case turns up, I would agree that touching the > encoding > > as little as possible is a good idea (=option 1 or 2). > > > > /Ludwig > > > > -- > > Ludwig Seitz, PhD > > Security Lab, RISE > > Phone +46(0)70-349 92 51 > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --000000000000eb737c058a8557f3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello,
Yes, we thought supporting JSON option would be= good, though indeed there is no issue with transporting CBOR.=C2=A0
<= div>If there are no other concerns, we can define the new media type in the= MQTT draft.=C2=A0
Will add the issue to GitHub repo.
<= br>
--Cigdem=C2=A0

On Tue, Jun 4, 2019 at 7:37 PM Jim Schaad= <ietf@augustcellars.com&g= t; wrote:


> -----Original Message-----
> From: Ace <ace-bounces@ietf.org> On Behalf Of Ludwig Seitz
> Sent: Monday, June 3, 2019 11:51 PM
> To: ace@ietf.org=
> Subject: Re: [Ace] Transporting different types of cnf objects - CBOR = vs JSON
>
> On 01/06/2019 02:51, Jim Schaad wrote:
> > Ludwig,
> >
> > I have been doing some adaptions of my codebase for dealing with = the
> > MQTT specification.=C2=A0 In the process of this, I have identifi= ed the
> > following items that I think needs some discussion.=C2=A0 They ma= y not need
> > changes in any documents and maybe should get a new document.
> >
> > 1.=C2=A0 The MQTT document is using the content type "applic= ation/json"
> > over HTTPS for transporting messages.=C2=A0 Does there need to be= an
> > "application/ace+json" defined as a media type, but not= necessarily a
> > CBOR media type?=C2=A0 I think the answer may be yes, but it coul= d be a new
> document.
> >
> I would argue that the first draft using such a media type would be th= e right
> place to specify it. However I'm not sure using JSON is the right = approach for
> an ACE specification at all, aren't we supposed to cater for the c= onstrained
> world?
> What is there to prevent us from transporting CBOR over HTTP?

There would be no reason that one cannot transport CBOR over HTTP.=C2=A0 Du= ring the discussions for these drafts Hannes was very explicit that he want= ed to be able to use JSON rather than CBOR with the protocol that was defin= ed by ACE.=C2=A0 This would mean that there needs to be an ability to use J= SON with the ACE framework document.

I would have no problems with the statement that the MQTT document would be= a good place to define the new media type.

>
> > 2.=C2=A0 If I use a "COSE_Key" confirmation method insi= de of an
> > application/ace+json message, there is a potential problem and it=
> > could be dealt with in a number of different ways.
> > *=C2=A0 The JWT confirmation method is identified as "jwk&qu= ot;.=C2=A0 The COSE key
> > must be translated into JOSE even if there is no equivalent key i= n
> > JOSE.=C2=A0 I.e. that is a fatal error
> > *=C2=A0 This does not make sense and the confirmation method shou= ld be
> > changed to "cwk" so that either key format could be use= d in either
> encoding.
> >
>
> If we use JSON messages mixing in COSE becomes awkward. If the use cas= e
> calls for JSON, I'd argue it should also use RFC7800 instead of dr= aft-ietf-ace-
> cwt-proof-of-possession.

I would not have a problem with this, it was one of the options above.=C2= =A0 I was just expanding my code to allow for JSON to be used and ran into = this.=C2=A0 I just wanted to get a clear group decision on this before I pu= t things into stone.

Jim

>
> > 3.=C2=A0 If the confirmation is changed, you would need to conver= t the COSE
> > key to a binary string, base64 encoded it and pass as a string wh= en
> > occurring in a JSON encoding.=C2=A0 There is not any other valid = way to do
> > this (except see above of just converting the key format).=C2=A0 = However,
> > the opposite of putting a JOSE key into a COSE confirmation has t= hree
> > different options that could be used.
> > *=C2=A0 Encode the JOSE key to a string and pass as a string
> > *=C2=A0 Encode the JOSE key top level map as CBOR but leave all o= f the
> > elements alone.
> > *=C2=A0 Encode the JOSE key in CBOR including conversion of base6= 4 strings
> > to binary data.
> > (My first preference is probably the second option, but either of= the
> > first two make sense.)
> >
> > Jim
> >
>
> I'm still unsure that there is a good use case for transporting JO= SE keys in
> CBOR, but if such a case turns up, I would agree that touching the enc= oding
> as little as possible is a good idea (=3Doption 1 or 2).
>
> /Ludwig
>
> --
> Ludwig Seitz, PhD
> Security Lab, RISE
> Phone +46(0)70-349 92 51


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace
--000000000000eb737c058a8557f3-- From nobody Wed Jun 5 07:48:50 2019 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 367B6120132; Wed, 5 Jun 2019 07:48:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.97.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ace@ietf.org Message-ID: <155974612113.18914.3324669832019436826@ietfa.amsl.com> Date: Wed, 05 Jun 2019 07:48:41 -0700 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-coap-est-12.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Jun 2019 14:48:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : EST over secure CoAP (EST-coaps) Authors : Peter van der Stok Panos Kampanakis Michael C. Richardson Shahid Raza Filename : draft-ietf-ace-coap-est-12.txt Pages : 49 Date : 2019-06-05 Abstract: Enrollment over Secure Transport (EST) is used as a certificate provisioning protocol over HTTPS. Low-resource devices often use the lightweight Constrained Application Protocol (CoAP) for message exchanges. This document defines how to transport EST payloads over secure CoAP (EST-coaps), which allows constrained devices to use existing EST functionality for provisioning certificates. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-coap-est/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-coap-est-12 https://datatracker.ietf.org/doc/html/draft-ietf-ace-coap-est-12 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-coap-est-12 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jun 5 07:56:04 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFB9C120071 for ; Wed, 5 Jun 2019 07:56:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=cxNlXRUu; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=VjE/tSJ+ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dh_BICnmqVmi for ; Wed, 5 Jun 2019 07:56:00 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E947120047 for ; Wed, 5 Jun 2019 07:56:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2527; q=dns/txt; s=iport; t=1559746560; x=1560956160; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=HMDElXn2uMAE0DEcj6Y9+qmqBzSELZO3LrrfRKmHltc=; b=cxNlXRUujsuYF4OQe51FCCoawNacsIH2sRMb6E0ducHfzuhz4iGVslGQ zyV9rzZOjoj5uOax1x5fMLaZGdRdRukm0qhXC0myiFUi96GaHfdbDbDaM +8DOMzcjfEn1H73b+oOnkmHqIdxuoYYVR5Y6BxJ8jz94aAQLojcYgO19S M=; IronPort-PHdr: =?us-ascii?q?9a23=3A/yWlfRcAIcpAm5VYLKuohoehlGMj4e+mNxMJ6p?= =?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwGQD57D5adCjOzb++D7VGoM7IzJkUhKcYcEFn?= =?us-ascii?q?pnwd4TgxRmBceEDUPhK/u/dy8zGdxLUlZN9HCgOk8TE8H7NBXf?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BsAAA51/dc/4YNJK1mHQEBBQEHBQG?= =?us-ascii?q?BUQgBCwGBPVADalUgBAsoh1sDhFKKC4JXlzCBLoEkA1QJAQEBDAEBGAsKAgE?= =?us-ascii?q?BhEACglYjNAkOAQMBAQQBAQIBBG0cAQuFSgEBAQQBARAoBgEBLAwLBAIBCBE?= =?us-ascii?q?EAQEfECcLHQgCBBMIGoMBgWoDHQECDJsmAoE4iF+CIoJ5AQEFgTIBAwIOQYJ?= =?us-ascii?q?3GIIPCYE0AYtaF4FAP4FXgkw+gmEBAQIBARaBSYM6giapFAkCgg6GQo0TgiN?= =?us-ascii?q?phg6NZY0OhxKPHgIEAgQFAg4BAQWBTziBWHAVGiGCbAmCBoNwhRSFP3IBgSi?= =?us-ascii?q?OZwEB?= X-IronPort-AV: E=Sophos;i="5.60,550,1549929600"; d="scan'208";a="279887328" Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 05 Jun 2019 14:55:58 +0000 Received: from XCH-ALN-007.cisco.com (xch-aln-007.cisco.com [173.36.7.17]) by alln-core-12.cisco.com (8.15.2/8.15.2) with ESMTPS id x55EtwnJ002840 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 5 Jun 2019 14:55:58 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-007.cisco.com (173.36.7.17) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 5 Jun 2019 09:55:57 -0500 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 5 Jun 2019 10:55:57 -0400 Received: from NAM03-BY2-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 5 Jun 2019 09:55:56 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=c44NQw3Vy/GWGcDPSdzfNF2868gi3pX2WDRBSozHFsQ=; b=VjE/tSJ+acO+vOJKHoYEgOwSzIFYbbkLCywf5fw34QQexEA+nsXwuKen1CKJZMxClqhr5HjSIRuYbQZZrLsxZGSm0DgS8ZYoqP1BJitmJ9/sGoec/c0YFdUp+XCCpEzLlhyYz8nXiJ9Z7Bxf7t/tKrSIPY4dqsrwF+UVxDZZi4w= Received: from BN7PR11MB2547.namprd11.prod.outlook.com (52.135.244.29) by BN7PR11MB2753.namprd11.prod.outlook.com (52.135.245.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1965.13; Wed, 5 Jun 2019 14:55:53 +0000 Received: from BN7PR11MB2547.namprd11.prod.outlook.com ([fe80::89af:3fb4:eae5:18b2]) by BN7PR11MB2547.namprd11.prod.outlook.com ([fe80::89af:3fb4:eae5:18b2%7]) with mapi id 15.20.1943.018; Wed, 5 Jun 2019 14:55:53 +0000 From: "Panos Kampanakis (pkampana)" To: "ace@ietf.org" Thread-Topic: [Ace] I-D Action: draft-ietf-ace-coap-est-12.txt Thread-Index: AQHVG63/V+l3zh5p2UipGVfQ3pjKuqaNJbhA Date: Wed, 5 Jun 2019 14:55:53 +0000 Message-ID: References: <155974612113.18914.3324669832019436826@ietfa.amsl.com> In-Reply-To: <155974612113.18914.3324669832019436826@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=pkampana@cisco.com; x-originating-ip: [2001:420:2090:1009:5822:99b8:b3e8:5479] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 5c212078-4d25-4779-7701-08d6e9c5e822 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:BN7PR11MB2753; x-ms-traffictypediagnostic: BN7PR11MB2753: x-ms-exchange-purlcount: 8 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 00594E8DBA x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(396003)(366004)(346002)(39860400002)(376002)(53754006)(13464003)(189003)(199004)(8936002)(316002)(6246003)(8676002)(81166006)(81156014)(68736007)(7696005)(76176011)(7736002)(305945005)(99286004)(74316002)(53546011)(25786009)(33656002)(53936002)(6506007)(2906002)(71190400001)(6116002)(66574012)(71200400001)(966005)(478600001)(14454004)(102836004)(1730700003)(2351001)(186003)(229853002)(486006)(52536014)(256004)(2501003)(46003)(6306002)(11346002)(5640700003)(446003)(476003)(6436002)(5660300002)(55016002)(9686003)(86362001)(66446008)(64756008)(66556008)(76116006)(73956011)(66946007)(66476007)(6916009); DIR:OUT; SFP:1101; SCL:1; SRVR:BN7PR11MB2753; H:BN7PR11MB2547.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: ZNh46dSZYJPL5EfJs11pyoPwQ/aD9GTDBuCdEzx6ftmL5PgcMUjlGyrjbf96f0YuItR1lktgKPxzfylTyvxGq1oXxGr91C7Ju6kwUF0Xug4BkfSjXIojLf/ftJPX/0UoM2/arwkxhRsdJ9vG+f4LucZtzXe4QtRpp7+qGfFZOJNGFixKOHtB4IulTu7SWh7eFiOhbXYurtnxVpPT1IiFgdSv/vde1vQwCcrFTIrG5jydKz4eY5sE3tZqdSjyxkbHfNh2B+laMRrVdUlXJNQ+1EnxYl6rBm7elnlhJvHF6Euvrs+w1d1sySl/YCWIPRkInbUE3QDvrTutxSJ9ex9stSw/1CNsAdB+TmUgl22QqnR40FvktWJgfuGD0xNWMjAsr57HAuCCAg7hhJ0lrTmOS7QJ4kXfRXQZYyU1UiaSPcE= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 5c212078-4d25-4779-7701-08d6e9c5e822 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jun 2019 14:55:53.0306 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: pkampana@cisco.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR11MB2753 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.17, xch-aln-007.cisco.com X-Outbound-Node: alln-core-12.cisco.com Archived-At: Subject: Re: [Ace] I-D Action: draft-ietf-ace-coap-est-12.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Jun 2019 14:56:03 -0000 Hi all,=20 This iteration fixes the nits and feedback provided by Esko in 5/21 and 5/2= 8. The comments and their fixes are discussed in two git issues=20 - https://github.com/SanKumar2015/EST-coaps/issues/145 =20 - https://github.com/SanKumar2015/EST-coaps/issues/146=20 The diff from the previous version is here https://tools.ietf.org/rfcdiff?u= rl2=3Ddraft-ietf-ace-coap-est-12.txt=20 Thanks to Esko for being persistent in trying to bring the doc to a state a= s perfect as possible.=20 Rgs, Panos -----Original Message----- From: Ace On Behalf Of internet-drafts@ietf.org Sent: Wednesday, June 05, 2019 10:49 AM To: i-d-announce@ietf.org Cc: ace@ietf.org Subject: [Ace] I-D Action: draft-ietf-ace-coap-est-12.txt A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Authentication and Authorization for Const= rained Environments WG of the IETF. Title : EST over secure CoAP (EST-coaps) Authors : Peter van der Stok Panos Kampanakis Michael C. Richardson Shahid Raza Filename : draft-ietf-ace-coap-est-12.txt Pages : 49 Date : 2019-06-05 Abstract: Enrollment over Secure Transport (EST) is used as a certificate provisioning protocol over HTTPS. Low-resource devices often use the lightweight Constrained Application Protocol (CoAP) for message exchanges. This document defines how to transport EST payloads over secure CoAP (EST-coaps), which allows constrained devices to use existing EST functionality for provisioning certificates. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-coap-est/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-coap-est-12 https://datatracker.ietf.org/doc/html/draft-ietf-ace-coap-est-12 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-ace-coap-est-12 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Fri Jun 21 15:47:02 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C577A1201CA; Fri, 21 Jun 2019 15:46:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.197 X-Spam-Level: X-Spam-Status: No, score=-4.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yvIlyHtM1ZWt; Fri, 21 Jun 2019 15:46:51 -0700 (PDT) Received: from smtp.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E089C120136; Fri, 21 Jun 2019 15:46:50 -0700 (PDT) Received: from [192.168.217.113] (p54A6CA4C.dip0.t-ipconnect.de [84.166.202.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.uni-bremen.de (Postfix) with ESMTPSA id 45Vv205tNvzyNl; Sat, 22 Jun 2019 00:46:48 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 582850006.279883-1de7b78efff3770d35256eae4114a31e Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 22 Jun 2019 00:46:48 +0200 Message-Id: <82A54967-C272-4037-A933-52718CCB6BC6@tzi.org> To: Ace Wg , core , cose , cbor@ietf.org, t2trg@irtf.org X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: [Ace] Constrained Node/Network Cluster @ IETF105: DRAFT AGENDA X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 22:46:54 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF105. Remember that there is still quite some potential for changes. Conflicts that meet the eye: COSE/TEEP again! ROLL/SUIT/DINRG and 6TISCH/ACE are maybe slightly less annoying. (The poor TEEP people get to both start and end the week, too.) LAKE and LOOPS -- two BOFs at the same time? All times are EDT (Eastern Daylight Time) =3D=3D UTC -4 hours. (Pure UTC times at https://datatracker.ietf.org/meeting/agenda-utc are useful for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten FRIDAY, March 22, 2019 -- OMA/T2TRG Work Meeting - @ Ericsson Montreal Office (St-Laurent) SATURDAY/SUNDAY, March 23/24. 2019 -- Hackathon (including various interops) - Centre Ville -- Sun 1700-1900 Welcome Reception - Place du Canada -- Sun 1800-2000 Hot RFC Lightning Talks - Viger MONDAY, July 22, 2019 1000-1200 Morning Session I Laurier ART dispatch Dispatch WG Van Horne SEC *** teep Trusted Execution Environment = Provisioning WG 1330-1530 Afternoon Session I Van Horne INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Place du Canada SEC secdispatch Security Dispatch WG Duluth TSV taps Transport Services WG 1550-1750 Afternoon Session II Laurier ART httpbis Hypertext Transfer Protocol WG St-Catherine OPS v6ops IPv6 Operations WG Van Horne SEC *** lake Lightweight Authenticated Key Exchange = BOF Place du Canada TSV loops Local Optimizations on Path Segments BOF 1810-1910 Afternoon Session III Laurier TSV tsvwg Transport Area Working Group WG TUESDAY, July 23, 2019 1000-1200 Morning Session I St-Catherine ART *** cbor 1000-1130 Concise Binary Object = Representation Maintenance and Extensions WG St-Catherine INT ipwave 1130-1200 IP Wireless Access in = Vehicular Environments WG Notre Dame IRTF icnrg Information-Centric Networking Duluth OPS anima Autonomic Networking Integrated Model = and Approach WG Van Horne SEC cacao Collaborative Automated Course of Action = Operations for Cyber Security BOF Place du Canada TSV quic QUIC WG 1330-1500 Afternoon Session I Duluth OPS anima Autonomic Networking Integrated Model = and Approach WG 1520-1650 Afternoon Session II Duluth INT intarea Internet Area Working Group WG Place du Canada IRTF irtfopen IRTF Open Meeting Van Horne SEC oauth Web Authorization Protocol WG 1710-1810 Afternoon Session III Duluth ART *** core Constrained RESTful Environments WG Laurier INT 6man IPv6 Maintenance WG Place du Canada SEC tls Transport Layer Security WG WEDNESDAY, July 24, 2019 1000-1200 Morning Session I Van Horne IRTF*** dinrg Decentralized Internet Infrastructure St-Catherine RTG *** roll Routing Over Low power and Lossy = networks WG Viger SEC *** suit Software Updates for Internet of Things = WG Place du Canada TSV quic QUIC WG 1330-1530 Afternoon Session I Place du Canada GEN netrqmts IETF Meeting Network = Requirements BOF Laurier IRTF pearg Privacy Enhancements and Assessments = Research Group Viger IRTF*** t2trg Thing-to-Thing St-Catherine RTG bier Bit Indexed Explicit Replication WG Centre Ville RTG detnet Deterministic Networking WG 1550-1650 Afternoon Session II St-Catherine RTG babel Babel routing protocol WG Centre Ville RTG detnet Deterministic Networking WG Van Horne SEC *** rats Remote ATtestation ProcedureS WG THURSDAY, July 25, 2019 1000-1200 Morning Session I Centre Ville ART *** core Constrained RESTful Environments WG St-Catherine RTG rift Routing In Fat Trees WG Place du Canada SEC tls Transport Layer Security WG Laurier TSV tsvwg Transport Area Working Group WG 1330-1530 Afternoon Session I Duluth INT dnssd Extensions for Scalable DNS Service = Discovery WG Viger IRTF coinrg Computing in the Network Proposed = Research Group Laurier IRTF panrg Path Aware Networking RG Place du Canada SEC saag Security Area Open Meeting 1550-1720 Afternoon Session II Laurier ART httpbis Hypertext Transfer Protocol WG Duluth INT 6man IPv6 Maintenance WG Place du Canada IRTF cfrg Crypto Forum St-Catherine SEC *** rats Remote ATtestation ProcedureS WG Centre Ville TSV tsvarea Transport Area Open Meeting 1740-1910 Afternoon Session III Duluth INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Centre Ville SEC *** ace Authentication and Authorization for = Constrained Environments WG Place du Canada SEC mls Messaging Layer Security WG Notre Dame TSV rmcat RTP Media Congestion Avoidance = Techniques WG FRIDAY, July 26, 2019 1000-1200 Morning Session I Notre Dame ART ice Interactive Connectivity Establishment = WG Centre Ville INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Place du Canada IRTF maprg Measurement and Analysis for Protocols Laurier SEC mls Messaging Layer Security WG Duluth SEC oauth Web Authorization Protocol WG 1220-1350 Afternoon Session I Centre Ville SEC acme Automated Certificate Management = Environment WG Van Horne SEC *** cose CBOR Object Signing and Encryption WG St-Catherine SEC *** teep Trusted Execution Environment = Provisioning WG From nobody Mon Jun 24 06:29:36 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F36F120294; Mon, 24 Jun 2019 06:29:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fqZU_On8TLju; Mon, 24 Jun 2019 06:29:24 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50072.outbound.protection.outlook.com [40.107.5.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BDF8120289; Mon, 24 Jun 2019 06:29:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EpqHCCkTQ3s6JfPjec9V557TCjuHCfCaZgOL4pjZGTI=; b=UqGbNR240ArHUER65eIXR4UzCRouuQWk/n4fs++BNCRmtZmYMjZlINXnlknO3WCabG9OmjI+Q9dv9DsJjOgvt42f1V0aTuq2TI97+JyOR31YG7kKAKxz8UYVPR+Je/Lvb8F4ncyVmFfOul7u25j9oBxhq6aveCoCuPCTYl6mWhg= Received: from HE1PR07MB4172.eurprd07.prod.outlook.com (20.176.166.25) by HE1PR07MB3356.eurprd07.prod.outlook.com (10.170.247.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2032.9; Mon, 24 Jun 2019 13:29:21 +0000 Received: from HE1PR07MB4172.eurprd07.prod.outlook.com ([fe80::d899:9e9d:c986:bf5b]) by HE1PR07MB4172.eurprd07.prod.outlook.com ([fe80::d899:9e9d:c986:bf5b%7]) with mapi id 15.20.2008.014; Mon, 24 Jun 2019 13:29:21 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "ace@ietf.org" , "core@ietf.org" , "6tisch@ietf.org" <6tisch@ietf.org>, "lpwan@ietf.org" Thread-Topic: LAKE mailing list and BoF: a handshake protocol for OSCORE Thread-Index: AQHVKpDVTzRlaHKTNE6tB4u99gKRpA== Date: Mon, 24 Jun 2019 13:29:21 +0000 Message-ID: <7356D914-76F4-44B3-978C-AC69D870C29C@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1a.0.190609 authentication-results: spf=none (sender IP is ) smtp.mailfrom=goran.selander@ericsson.com; x-originating-ip: [192.176.1.85] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 2d820f60-ba80-478d-34ad-08d6f8a7f79c x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:HE1PR07MB3356; x-ms-traffictypediagnostic: HE1PR07MB3356: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 007814487B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39860400002)(136003)(346002)(376002)(396003)(189003)(199004)(6512007)(7736002)(5660300002)(71190400001)(85182001)(66066001)(66574012)(966005)(86362001)(2201001)(2906002)(71200400001)(85202003)(68736007)(478600001)(316002)(110136005)(33656002)(2501003)(58126008)(81156014)(6486002)(81166006)(186003)(8676002)(6306002)(6506007)(8936002)(53936002)(26005)(305945005)(6436002)(76116006)(66476007)(64756008)(66556008)(66446008)(2616005)(486006)(476003)(73956011)(99286004)(256004)(25786009)(36756003)(14444005)(14454004)(450100002)(6116002)(3846002)(102836004)(66946007)(223123001); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3356; H:HE1PR07MB4172.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: K96t7wvomVZOFvk+5r48lWLo64lJxHELaz2zCBUnNloBcS7nocUzDGxM7oQiCEEaujE0NymboJWdCBAuFvgqrhAqT4aw439ip8QYrv0JFgWfmK9kQbGTEw2yrEbF+ZVTOBtEsjz9dLgK9S/XpV/1UVh2oZwbps1FEVxOBee9ZI+udQkY+9QATqBU+AN7ci7zmYLpzArEIwPBxACwSNMA6OECfOLpE0If9j3QupsH6v0KFPlrK0cy913K+2XYY2b9EuD1whHNdlvUdaD/cuu1bxpjDiGJsn2pMTXpKdlgPKMHSx9yZRdW31mKG9uzrOQEXUWB4D65ahhozZ2PYWaQ6h6saUD3utUxD7LxYtfpmkaLm/NPpv0YOQXVTxUJU2zLRd3fJ8DqIL14V/plxxp9DT+hZeCU6lVTfreFYZduzig= Content-Type: text/plain; charset="utf-8" Content-ID: <539EFDC5DBFDB24BA9D8A6674484E207@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2d820f60-ba80-478d-34ad-08d6f8a7f79c X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jun 2019 13:29:21.5441 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: goran.selander@ericsson.com X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3356 Archived-At: Subject: [Ace] LAKE mailing list and BoF: a handshake protocol for OSCORE X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Jun 2019 13:29:27 -0000 DQpBcG9sb2dpZXMgZm9yIGNyb3NzLXBvc3RpbmcsIGJ1dCBpdCBzZWVtcyBzb21lIHBlb3BsZSBu b3QgZm9sbG93aW5nIHRoZSBTZWNkaXNwYXRjaCBsaXN0IGhhdmUgbWlzc2VkIHRoZSBjb25uZWN0 aW9uIGJldHdlZW4gRURIT0MgYW5kIHRoZSBuZXcgTEFLRSBtYWlsaW5nIGxpc3QgYW5kIEJvRi4N Cg0KQUNFLCBDb1JFLCA2VGlTQ0ggYW5kIExQV0FOIGFyZSBpZGVudGlmaWVkIGFzIHN0YWtlaG9s ZGVycyBpbiB0aGUgZHJhZnQgY2hhcnRlciBmb3IgdGhlIExBS0UgV0cgKHNlZSBbMV0gYmVsb3cp Lg0KDQpJZiB5b3UgYXJlIGludGVyZXN0ZWQgaW4gYSBoYW5kc2hha2UgcHJvdG9jb2wgZm9yIE9T Q09SRSwgam9pbiB0aGUgTEFLRSBtYWlsaW5nIGxpc3Qgbm93IGFuZCBhdHRlbmQgdGhlIExBS0Ug Qm9GIGF0IElFVEYgMTA1Lg0KDQpHw7ZyYW4NCg0KDQrvu79PbiAyMDE5LTA2LTE0LCAyMTozMiwg IlNlY2Rpc3BhdGNoIG9uIGJlaGFsZiBvZiBTdGVwaGVuIEZhcnJlbGwiIDxzZWNkaXNwYXRjaC1i b3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPiB3 cm90ZToNCg0KICAgIA0KICAgIEhpeWEsDQogICAgDQogICAgVGhlcmUncyBhIG5ldyBtYWlsaW5n IGxpc3QgZm9yIGRpc2N1c3Npb24gb2YgbGlnaHR3ZWlnaHQNCiAgICBhdXRoZW50aWNhdGVkIGtl eSBleGNoYW5nZSwgd2hpY2ggaGFzIHByZXZpb3VzbHkgYmVlbg0KICAgIGRpc2N1c3NlZCBoZXJl IGluIHZhcmlvdXMgZWRob2MgdGhyZWFkcy4gVGhlcmUncyBhIEJvRg0KICAgIG9uIHRoaXMgdG9w aWMgcGxhbm5lZCBmb3IgSUVURiAxMDUgYXMgd2VsbC4gWzFdIFlvYXYgYW5kDQogICAgSSBhcmUg ZG93biB0byBjaGFpciB0aGF0IGF0IHRoZSBtb21lbnQuDQogICAgDQogICAgU28gaWYgeW91J3Jl IGludGVyZXN0ZWQgaW4gdGhhdCB0b3BpYyBwbGVhc2Ugc2lnbiB1cC4NCiAgICBXZSdsbCB0cnkg a2ljayBvZmYgc29tZSBwcmUtQm9GIGRpc2N1c3Npb24gb25jZSBwZW9wbGUNCiAgICBoYXZlIGhh ZCBhIGNoYW5jZSB0byBnZXQgb250byB0aGUgbmV3IGxpc3QgYW5kIFlvYXYNCiAgICBhbmQgSSBo YXZlIGhhZCBhIGNoYW5jZSB0byBjaGF0IGFib3V0IGl0IGFsbC4NCiAgICANCiAgICBDaGVlcnMs DQogICAgUy4NCiAgICANCiAgICBbMV0gaHR0cHM6Ly90cmFjLnRvb2xzLmlldGYub3JnL2JvZi90 cmFjL3dpa2kjTEFLRQ0KDQogICAgDQogICAgDQogICAgLS0tLS0tLS0gRm9yd2FyZGVkIE1lc3Nh Z2UgLS0tLS0tLS0NCiAgICBTdWJqZWN0OiBOZXcgTm9uLVdHIE1haWxpbmcgTGlzdDogbGFrZQ0K ICAgIERhdGU6IEZyaSwgMTQgSnVuIDIwMTkgMTA6MTA6MzQgLTA3MDANCiAgICBGcm9tOiBJRVRG IFNlY3JldGFyaWF0IDxpZXRmLXNlY3JldGFyaWF0QGlldGYub3JnPg0KICAgIFJlcGx5LVRvOiBp ZXRmQGlldGYub3JnDQogICAgVG86IElFVEYgQW5ub3VuY2VtZW50IExpc3QgPGlldGYtYW5ub3Vu Y2VAaWV0Zi5vcmc+DQogICAgQ0M6IHN0ZXBoZW4uZmFycmVsbEBjcy50Y2QuaWUsIHluaXIuaWV0 ZkBnbWFpbC5jb20NCiAgICANCiAgICBBIG5ldyBJRVRGIG5vbi13b3JraW5nIGdyb3VwIGVtYWls IGxpc3QgaGFzIGJlZW4gY3JlYXRlZC4NCiAgICANCiAgICBMaXN0IGFkZHJlc3M6IGxha2VAaWV0 Zi5vcmcNCiAgICBBcmNoaXZlOiBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvYnJv d3NlL2xha2UvDQogICAgVG8gc3Vic2NyaWJlOiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2xha2UNCg0KICAgIA0KICAgIFB1cnBvc2U6DQogICAgQ29uc3RyYWluZWQgZW52 aXJvbm1lbnRzIHVzaW5nIE9TQ09SRSBpbiBuZXR3b3JrIGVudmlyb25tZW50cyBzdWNoIGFzDQog ICAgTkItSW9ULCA2VGlTQ0gsIGFuZCBMb1JhV0FOIG5lZWQgYSAnbGlnaHR3ZWlnaHQnIGF1dGhl bnRpY2F0ZWQga2V5DQogICAgZXhjaGFuZ2UgKExBS0UpIHRoYXQgZW5hYmxlcyBmb3J3YXJkIHNl Y3VyaXR5LiAnTGlnaHR3ZWlnaHQnIHJlZmVycyB0bw0KICAgIHJlc291cmNlIGNvbnN1bXB0aW9u LCBtZWFzdXJlZCBieSBieXRlcyBvbiB0aGUgd2lyZSwgd2FsbC1jbG9jayB0aW1lIHRvDQogICAg Y29tcGxldGUsIG9yIHBvd2VyIGNvbnN1bXB0aW9uOyBhbmQgdGhlIGFtb3VudCBvZiBuZXcgY29k ZSByZXF1aXJlZCBvbg0KICAgIGVuZCBzeXN0ZW1zIHdoaWNoIGFscmVhZHkgaGF2ZSBhbiBPU0NP UkUgc3RhY2suDQogICAgVGhpcyBsaXN0IGJlbG9uZyBJRVRGIGFyZWE6IFNFQw0KICAgIA0KICAg IEZvciBhZGRpdGlvbmFsIGluZm9ybWF0aW9uLCBwbGVhc2UgY29udGFjdCB0aGUgbGlzdCBhZG1p bmlzdHJhdG9ycy4NCiAgICANCiAgICANCg0K From nobody Tue Jun 25 00:27:21 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72846120241 for ; Tue, 25 Jun 2019 00:27:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nqwp4Mb0GCl2 for ; Tue, 25 Jun 2019 00:27:18 -0700 (PDT) Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09A1D120043 for ; Tue, 25 Jun 2019 00:27:18 -0700 (PDT) Received: by mail-ed1-x52f.google.com with SMTP id w13so25648432eds.4 for ; Tue, 25 Jun 2019 00:27:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=QR+6sUNh9Qpj6F4iqtCmTXqEg0xEats5aCcvxwjAp0U=; b=CyyfXLjTTt8KBecBQTl5xxFdP5qR/GGBhS5/X0ZzUFb+ib0kyCRMFfBLshZyJj1F1+ cmqF0v/IfPHiQIFJC8FRPyrm6B/eiL3LOrnsT+d8CfWLbjoCk9eJuQwBTfo1k9RFoMFH pj3A8ZdYHaYMlmvoxLwepkEtlE4tb03y5S4onQFrIhWtXcaSgM/WYdDN9FrPDtKTsakc eGrLIc7grNhDsk5OxP7A2v/Plkq7DQKPFmXtStH2g9Rm+0dR0Rx2ySFhK8m297srVKml ZTuGBxX/VK7FzGuEzOqFOLIJmGzXBaVsPIRdTYPEic8b9im6HEGwW+h+4AP2oPsHvjCA R3wA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=QR+6sUNh9Qpj6F4iqtCmTXqEg0xEats5aCcvxwjAp0U=; b=MJ/qsGacz8W0dA3GxZlkUI5yBQexI8SQA8y8I4tDM+X4bDKEgWLNWC9YVs14Wu6pXi eRTtHKdTlrBTDp636tgSOUC4galc1tjLnae4BFpZotT+cPvf9htmFySjye99GSJn79Gw 3lhpzlBWDbNi4FXqxVrgxohMEkxUaEuj3CZ1mgP37x7s0b0Hkg6gu9LGkBSUy+FCyzZr glW1tugPLVDIsdEDN8K1R5ghZ38cFYuE5eTTwmbzjVg76i0T+D0ZAflujQ0deoYT/wLF BZi9ABrpdfKn5qpVS7gIHbKseIn2XWluPyc7EB1IBWec3Yh5YeaDZ79iJGW78ICxuTfn SNNg== X-Gm-Message-State: APjAAAWXThPRNYosTCWPcTplkqG4l4h5ZYzD00HzNYRj37svKUkk2cQ1 rN0z+u5NXTw5HrIO44CGXSCPh7BzFwg47xdsCTBFeJ4X X-Google-Smtp-Source: APXvYqx3n3k0+IiuGPLLue/gKhbUUEJg6kQQvDXgvNlnf4bGySMJx8Rz2mbsa0hgPABiqIsP8xihTIRXVGIEXVV/cxk= X-Received: by 2002:a50:b34a:: with SMTP id r10mr77345981edd.84.1561447636304; Tue, 25 Jun 2019 00:27:16 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: =?UTF-8?Q?Joel_H=C3=B6glund?= Date: Tue, 25 Jun 2019 09:27:03 +0200 Message-ID: To: ace@ietf.org Content-Type: multipart/alternative; boundary="000000000000b2868e058c20db0a" Archived-At: Subject: [Ace] Announcement: new raza-ace-cbor-certificates version submitted X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Jun 2019 07:27:20 -0000 --000000000000b2868e058c20db0a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi! (Apologies for cross-posting to people who also follow the core list.) We have just submitted a revised version of raza-ace-cbor-certificates. We have clarified why our profiling together with the cbor encoding allows us to reduce certificate sizes more than any general compression mechanism. In addition we have opened up for allowing different public key and signature algorithms, where we propose the use of COSE identifiers for efficient encoding. Finally we propose to register this mechanism as one of the compression algorithms in the registry defined in ietf-tls-certificate-compression. We look forward to further comments, input and discussions! Best Regards Joel H=C3=B6glund, RISE SICS --000000000000b2868e058c20db0a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi!

(Apologies for cross-posting to people who also= =C2=A0follow=C2=A0the core list.)

We have just submitted a revised v= ersion of raza-ace-cbor-certificates. We have clarified why our profiling t= ogether with the cbor encoding allows us to reduce certificate sizes more t= han any general compression mechanism. In addition we have opened up for al= lowing different public key and signature algorithms, where we propose the = use of COSE identifiers for efficient encoding. Finally we propose to regis= ter this mechanism as one of the compression algorithms in the registry def= ined in ietf-tls-certificate-compression.

We look forward to further= comments, input and discussions!

Best Regards

Joel H=C3=B6gl= und, RISE SICS
--000000000000b2868e058c20db0a-- From nobody Wed Jun 26 05:13:07 2019 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AD51120127 for ; Wed, 26 Jun 2019 05:13:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id raQ2dbsv7Xcb for ; Wed, 26 Jun 2019 05:13:02 -0700 (PDT) Received: from mail-wm1-x331.google.com (mail-wm1-x331.google.com [IPv6:2a00:1450:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74385120111 for ; Wed, 26 Jun 2019 05:13:02 -0700 (PDT) Received: by mail-wm1-x331.google.com with SMTP id x15so1854115wmj.3 for ; Wed, 26 Jun 2019 05:13:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=eWqOxye5iL18cf8oaS8ty/t8YBTXQlvcyczU/xZ+Occ=; b=erBV27OEA4XHfX7vshBWXKPsg5ZpV9Y/UJI9FqzvmMKYcRpuUd/rBmHb9P28ES3Ifa eIuJNJsryOv1g/yfLOm7Ah1rgf473CMwVG9eD3qwdBqkyW6vSRPo5iUQh70Bn5Pu9bjR cjwufDAIYkY7YRhe0F+tZv6C6ExNbFdsCMD2VqmtPKAyzCRWZmN+fWMp/br01fUClI+G +ul4yPWLzJq7HqFeiGy38CUAWvDZWoxRAtJ0QdBowfb9bjWMr5HlfL/jCKZIfa973szF qbIXFUk8INymTti2zjhd9yXXRnXWghal4t/AR7JHkOiOi2fWauxhABGJUVEHu1Nf27Ga bhzA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=eWqOxye5iL18cf8oaS8ty/t8YBTXQlvcyczU/xZ+Occ=; b=Hp9ZN3uIkRODaf/p1MBVfcd1Lcu3VFiCpoQXiwST6CUZ0yVIS/dA47gBfRjUVFCaUC wJLQB2hjZZqwv0ahFNSwfSrczoRTmylVhKz7EggILYWChYH9fiQGA6jflfEgxmFR0Ga6 +pqy3dvjtuSUd7pJwsa3w0eK7ELQ6QRsN3FFUocgC/YzSvxch/4O9N/+YAp0UNkqIf37 6T5YP+nBxqJU6av5UJYaw4IvaK1Cz6eWBFBlQTKWe4fVa5U6ocB2hlc1Fahy5Rg4C8pu KJudV4GE3ypuNMjD/K9uIEm7zetB36p2NcEw45mPZ5SsV6HY+HJi0GRVA5WLu2+SRzFc RN+g== X-Gm-Message-State: APjAAAWX9Lm10kUgpV+nY2O9UamIfUEmjyBthmkM25gnY92l9oqpZD/M YgW0wbqp7SZT0Rfcqy53J9iE493K X-Google-Smtp-Source: APXvYqwZHMqmI2QnYPCz10g/W5vd9aOIGD8u0t4DOykMlwxhvpMttNyTXzZt0IWt59eIfrFCFywZVg== X-Received: by 2002:a1c:a952:: with SMTP id s79mr2746056wme.28.1561551180347; Wed, 26 Jun 2019 05:13:00 -0700 (PDT) Received: from ROADKILL.local ([132.185.158.35]) by smtp.gmail.com with ESMTPSA id c1sm35113286wrh.1.2019.06.26.05.12.59 (version=TLS1_3 cipher=AEAD-AES128-GCM-SHA256 bits=128/128); Wed, 26 Jun 2019 05:12:59 -0700 (PDT) To: =?UTF-8?Q?Joel_H=c3=b6glund?= , ace@ietf.org References: From: Thomas Peterson Message-ID: <0cf43bd2-1354-96c0-5ca0-91c3e3833bab@gmail.com> Date: Wed, 26 Jun 2019 13:12:58 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Ace] Announcement: new raza-ace-cbor-certificates version submitted X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Jun 2019 12:13:05 -0000 Thank you for the new version of your draft. The only feedback I have to provide is please reconsider the description of "cbor-iot" within the IANA Considerations. Whilst IoT may be this WG's focus, it's not the only use case for this encoding scheme. Regards On 25/06/2019 17:27, Joel Höglund wrote: > Hi! > > (Apologies for cross-posting to people who also follow the core list.) > > We have just submitted a revised version of raza-ace-cbor-certificates. > We have clarified why our profiling together with the cbor encoding > allows us to reduce certificate sizes more than any general compression > mechanism. In addition we have opened up for allowing different public > key and signature algorithms, where we propose the use of COSE > identifiers for efficient encoding. Finally we propose to register this > mechanism as one of the compression algorithms in the registry defined > in ietf-tls-certificate-compression. > > We look forward to further comments, input and discussions! > > Best Regards > > Joel Höglund, RISE SICS > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > From nobody Fri Jun 28 16:07:15 2019 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AB7A120A00; Fri, 28 Jun 2019 15:58:08 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: kaduk@mit.edu, ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.98.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <156176268816.11015.6497987365049004045.idtracker@ietfa.amsl.com> Date: Fri, 28 Jun 2019 15:58:08 -0700 Archived-At: Subject: [Ace] ace - Requested session has been scheduled for IETF 105 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Jun 2019 23:07:12 -0000 Dear Daniel Migault, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. ace Session 1 (1:30 requested) Thursday, 25 July 2019, Afternoon Session III 1740-1910 Room Name: Centre Ville size: 200 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/105/sessions/ace.ics Request Information: --------------------------------------------------------- Working Group Name: Authentication and Authorization for Constrained Environments Area Name: Security Area Session Requester: Daniel Migault Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: ipsecme saag tls secdispatch saag cbor core lamps cose Second Priority: teep homenet cfrg lwig emu t2trg suit oauth Third Priority: anima 6tisch People who must be present: Daniel Migault Jim Schaad Benjamin Kaduk Resources Requested: Special Requests: ---------------------------------------------------------