From nobody Sat Jul 2 04:36:01 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A30E12D147 for ; Sat, 2 Jul 2016 04:35:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yVqJSu0JALT9 for ; Sat, 2 Jul 2016 04:35:56 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.144]) by ietfa.amsl.com (Postfix) with ESMTP id AB57612D14D for ; Sat, 2 Jul 2016 04:35:55 -0700 (PDT) Received: from 5ec21670.skybroadband.com ([94.194.22.112] helo=[192.168.0.6]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1bJJDF-0009B7-JD for cdni@ietf.org; Sat, 02 Jul 2016 12:35:54 +0100 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Sat, 2 Jul 2016 12:35:52 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> References: To: Content Delivery Networks Interconnection Discussion List X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Jul 2016 11:35:59 -0000 Kevin, Colleagues, I reviewed draft-ietf-cdni-uri-signing-09 & below are my comments. General: The document is not clear on whether implementers are expected to = implement both shared secret & digital signature algorithms for signed = URI validation. This could lead to interop problems where different = implementation implement one but not the other. Maybe specify a minimum baseline of MUST support shared secret (as AFAIK = that is what is used in the field) with SHOULD implement digital = signatures for the 1 corner case for which digital signatures provide an = advantage. I=E2=80=99m somewhat against specifying must implement both shared = secret & digital signatures because I=E2=80=99ve never seen a digital = signature based signed URI in the field and I=E2=80=99m familiar with = quite a few signed URI algorithms/implementations of different CDNs. = That says to me folks are not likely to implement more than the shared = secret algorithm unless they really need to. I know Cisco have a digital = signature implementation maybe they could help with how much use it sees = in the field? The document could do with some more examples of {URI, attributes, = URISigningPackage, Signed URI} covering e.g. IPv4 & IPv6, one including = a URI Path Pattern etc. Section 2.1: URI Pattern Container (UPC) definition - how does one represent a URI = pattern that contains a literal =E2=80=98;=E2=80=99 because the URI/URI = pattern contains in path parameters to match against? Does presence of a = literal =E2=80=98;=E2=80=99 need to be escaped with =E2=80=98$' too to = distinguish it from the use of =E2=80=98;=E2=80=99 to separate URI = patterns within the URI Pattern Container? Section 2.2: Why is there a KID (string) & KID_NUM (integer) for shared secrets/keys = and only CKI (integer) for Client IP keys? To be consistent should it be = CKI_NUM? The document also says In cases where numerical KEY IDs are used, it is RECOMMENDED to use KID_NUM instead of KID. Which makes me think, why? What the KID means/represents is communicated = out of band (and how to do that is out of scope of the document). It = seems straightforward to say KID is always a string (which can represent = an integer) and get rid of KID_NUM entirely. That would mean we need one = less attribute defining (or two less if we need string & integer = attributes for CKI) and avoids folks having to work out what to do & = implement corner cases like what to do if KID & KID_NUM are both = present. Why not just have KID and CKI both as strings and remove KID_NUM? Along similar lines. Why have both HF & DSA. Is it implicit from the = value of the attribute (e.g. 'SHA-256' vs =E2=80=98ECDSA=E2=80=99) = whether a shared secret or digital signature algorithm is being used? Or = is the purpose to enable URI to be signed (& subsequently) verified with = either (if both are specified) or with both? Section 3.1: 8)a) says Note: the Original URI Container information element MUST be the last information element in the buffer before the signature information element. 8)b) does not have a similar statement. Is the URI Pattern Container = also required (MUST) to be the last information element in the buffer? Section 5.4: I don=E2=80=99t see the point of key-id, hash-function, = digital-signature-algorithm & version. The absence of the VER attribute is specified by the document to mean = Version 1. The absence of the HF & DSA attributes is specified by the = version of the signing method. Version 1 (the document) specifies them = as SHA-256 & ECDSA accordingly. Why re-specify this in the Metadata = object? key-id is for when there is only a single key id as an optimisation if = someone wants to have a single key id & not transmit it in the signed = URI? Does;t seem worth it to me for a narrow corner case. If it is worth = it just specify if KID/KID_NUM is missing from the signed URI and = key-id-set contains a single value then use that? Or if KID/KID_NUM is = missing the surrogate checks all keys in key-id-set and if one matches = the URI is authorised? (Personally I think KID/KID_NUM in the Signed URi is pointless, their = meaning is distributed out of band so why not also distribute the values = out of band/via metadata and have the behaviour be any valid key/secret = in key-id-set passes and remove KID/KID_NUM [and maybe CKI] from the = Signed URI entirely) Section 5.4: This confused me: Note that the Key ID information element is not needed if only one key is provided by the CSP or the Upstream CDN for the content item or set of content items covered by the CDNI Metadata object.=20 until I realised that =E2=80=9CKey ID information element=E2=80=9D was = referring to the element of the Signed URI and not the key-id property = of the metadata object specified immediately above the sentence. Maybe = phrase as =E2=80=9CNote that the Key ID information element does not = need to be included in the Signed URI if only one key=E2=80=A6" Section 9: In the case where asymmetric keys are used, the KID information element might contain the URL to the public key. To prevent malicious clients from signing their own URIs and inserting the associated public key URL in the KID field, thereby passing URI validation, it is important that CDNs check whether the URI conveyed in the KID field is in the allowable set of KIDs as listed in the CDNI metadata or set via configuration. Or specify things as I suggest above and remove the need for KID/KID_NUM = being present in the Signed URI and therefore this = scenario/vulnerability being able to occur in the first place? nits: Section 1: The primary goal of URI Signing is to make sure that only authorized User Agents (UAs) are able to access the content, with a CSP being able to authorize every individual request. Is it really to authorise the User Agent or the IP address the User = Agent is behind? There is nothing in the signed URI that identifies the = particular User Agent. URIs can still potentially be shared/exchanged = between User Agents behind the same IP address/subnet, however the = impact of such sharing is limited/acceptable for the use case. I would s/User Agents (UAs)/IP address(es)/ Section 1: I do not know what is meant by distribution policy in this sentence: Splitting the role of performing per-request authorization by CSP and the role of validation of this authorization by the CDN allows any arbitrary distribution policy to be enforced across CDNs without the need of CDNs to have any awareness of the actual CSP distribution policy. Section 2.2: The Key ID Information Element is used to retrieved the key which is needed as input to the algorithm for validating the Signed URI. s/retrieved/retrieve/ Section 2.4: However, a client or CDN may append other query parameters unrelated to URI Signing to the Signed URI. Such additional query parameters SHOULD NOT use the same name as the URI Signing Package Attribute to avoid namespace collision and potential failure of the URI Signing validation. s/client/User Agent/ is probably more aligned with the rest of the = document. There are some other places where you use client. Probably = worth being consistent and picking one of client or User Agent to use = throughout. Section 3: In case the URI Pattern Container information element is used, the CSP has full flexibility to specify which elements of the URI (including the scheme part) are protected by the URI. I think you mean =E2=80=9Cprotected by the Signed URI=E2=80=9D? Section 3: The process of generating a Signed URI can be divided into four sets of steps: 1) Compose URI Signing IEs with original URI / URI pattern, 2) Compute the URI Signature, 3) Encode the URI Signing Package, and 4) Assemble the parts to create the Signed URI. This would be better as a list of numbered bullets IMO. HTH Ben > On 29 Jun 2016, at 14:43, Kevin Ma J wrote: >=20 > Hi All, >=20 > As per the discussion in BA, we have received the updated URI Signing = draft and would like to move it to WGLC. (Leif and Phil, you're up!) >=20 > Today will begin the two-week WGLC on: = https://tools.ietf.org/html/draft-ietf-cdni-uri-signing-09 >=20 > Please send any comments, questions, concerns to the CDNI mailing = list: cdni@ietf.org >=20 > The WGLC will end on Wednesday July 13, 2016. >=20 > thanx! >=20 > -- Kevin and Francois >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Sat Jul 2 10:11:32 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23B8D12D103 for ; Sat, 2 Jul 2016 10:11:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UkEvcMKOkHOa for ; Sat, 2 Jul 2016 10:11:29 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C6B512B04C for ; Sat, 2 Jul 2016 10:11:29 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-fb-5777f57fd4b6 Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id A1.0E.03614.F75F7775; Sat, 2 Jul 2016 19:10:24 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0294.000; Sat, 2 Jul 2016 13:11:28 -0400 From: Kevin Ma J To: "cdni@ietf.org" Thread-Topic: Agenda Slot Requests for IETF96 Thread-Index: AdHUhJ30Sb0kPsAGTbG9XZDgQliTMA== Date: Sat, 2 Jul 2016 17:11:28 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrDLMWRmVeSWpSXmKPExsUyuXSPn27D1/Jwg2ntvBZPZ/9hdWD0WLLk J1MAYxSXTUpqTmZZapG+XQJXxsypXewFjxgrDl18z9bAuI6xi5GTQ0LARGLlkxVMELaYxIV7 69m6GLk4hASOMkrc+HSfFcJZxijxec1ZZpAqNgEticdf/wJ1cHCICChL/DzkCBIWFtCQ2HN+ KguILSKgK3Fn4XFmCFtPovHzPLByFgEViUebLEHCvAK+El2bToHdwAi09/upNWA3MAuIS9x6 Mh/qHgGJJXvOM0PYohIvH/9jhbCVJOa8vsYMUa8jsWD3JzYIW1ti2cLXzBDzBSVOznzCMoFR eBaSsbOQtMxC0jILScsCRpZVjBylxQU5uelGhpsYgWF8TILNcQfj3l7PQ4wCHIxKPLwKCuXh QqyJZcWVuYcYJTiYlUR4kz4AhXhTEiurUovy44tKc1KLDzFKc7AoifPqv1QMFxJITyxJzU5N LUgtgskycXBKNTCGOzJ3Pd21Uu8Yc0OMyB5lv1NN/qlFG+VtZUXzu3dHfqpyM/lV9rI3sODZ t3j/uQost4pnXuznUDgz3fFFo+7/VtnSlwVVd7mi5Z/bTQ/om98ky8/E8+ydyPK13DVCzA+O Z+4P6glbuXSmaMD5n40y5Wdvn31+oUHlyM0I7qL3EXs7Zhz1tldiKc5INNRiLipOBAAyg4jP XwIAAA== Archived-At: Subject: [CDNi] Agenda Slot Requests for IETF96 X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Jul 2016 17:11:31 -0000 Hi All, Please send Francois and me your slot requests. Please include draft nam= e, amount of time requested, presenter name, and whether or not you will be= presenting remotely. thanx! -- Kevin and Francois From nobody Mon Jul 4 00:34:56 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE7CC12D513 for ; Mon, 4 Jul 2016 00:34:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.627 X-Spam-Level: X-Spam-Status: No, score=-5.627 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id llGDNY-nMHll for ; Mon, 4 Jul 2016 00:34:51 -0700 (PDT) Received: from fromintouta.tno.nl (fromintouta.tno.nl [134.221.1.26]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D68C12D0B1 for ; Mon, 4 Jul 2016 00:34:50 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.26,573,1459807200"; d="scan'208";a="66162765" Received: from exc-cashub01.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.220]) by mailhost1a.tno.nl with ESMTP; 04 Jul 2016 09:34:48 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB01.tsn.tno.nl ([fe80::b855:be6:1aa8:4d0f%13]) with mapi id 14.03.0294.000; Mon, 4 Jul 2016 09:34:48 +0200 From: "Brandenburg, R. (Ray) van" To: Kevin Ma J , "cdni@ietf.org" Thread-Topic: [CDNi] Agenda Slot Requests for IETF96 Thread-Index: AQHR1caKrJkX2FXOo0u8cWgHzpM+TA== Date: Mon, 4 Jul 2016 07:34:47 +0000 Message-ID: <864267B7-9A29-4564-8F7B-CC91C1A1B4B1@tno.nl> Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.17.0.160611 x-originating-ip: [134.221.225.191] x-esetresult: clean, is OK x-esetid: 37303A297F344A6F6C7C65 Content-Type: text/plain; charset="utf-8" Content-ID: <34F3A2EC3036C246A0C085B4ABBE6F56@tno.nl> MIME-Version: 1.0 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [CDNi] Agenda Slot Requests for IETF96 X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Jul 2016 07:34:54 -0000 SGV5IEtldmluLA0KDQpJIHdvdWxkIGxpa2UgYSA1bWluIHNsb3QgdG8gcHJlc2VudCB0aGUgbWFp biBVUkkgU2lnbmluZyBkb2N1bWVudCwgYW5kIGEgMTBtaW4gc2xvdCB0byBwcmVzZW50IHRoZSBV UkkgU2lnbmluZyBmb3IgSEFTIGRvY3VtZW50LiBJ4oCZbGwgYmUgcHJlc2VudCBpbiBCZXJsaW4s IHNvIEkgd29u4oCZdCBwcmVzZW50IHJlbW90ZWx5Lg0KDQpUaGFua3MsDQoNClJheQ0KDQoNCk9u IDAyLzA3LzE2IDE5OjExLCAiQ0ROaSBvbiBiZWhhbGYgb2YgS2V2aW4gTWEgSiIgPGNkbmktYm91 bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2Yga2V2aW4uai5tYUBlcmljc3Nvbi5jb20+IHdyb3Rl Og0KDQpIaSBBbGwsDQoNCiAgUGxlYXNlIHNlbmQgRnJhbmNvaXMgYW5kIG1lIHlvdXIgc2xvdCBy ZXF1ZXN0cy4gIFBsZWFzZSBpbmNsdWRlIGRyYWZ0IG5hbWUsIGFtb3VudCBvZiB0aW1lIHJlcXVl c3RlZCwgcHJlc2VudGVyIG5hbWUsIGFuZCB3aGV0aGVyIG9yIG5vdCB5b3Ugd2lsbCBiZSBwcmVz ZW50aW5nIHJlbW90ZWx5Lg0KDQp0aGFueCENCg0KLS0gIEtldmluIGFuZCBGcmFuY29pcw0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ0ROaSBtYWls aW5nIGxpc3QNCkNETmlAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vY2RuaQ0KDQoNClRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZvcm1hdGlvbiB0aGF0 IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUgYWRkcmVzc2VlIG9y IGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwgeW91IGFyZSByZXF1 ZXN0ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5PIGFj Y2VwdHMgbm8gbGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlzIGUtbWFpbCwgZm9yIHRo ZSBtYW5uZXIgaW4gd2hpY2ggeW91IHVzZSBpdCBhbmQgZm9yIGRhbWFnZSBvZiBhbnkga2luZCBy ZXN1bHRpbmcgZnJvbSB0aGUgcmlza3MgaW5oZXJlbnQgdG8gdGhlIGVsZWN0cm9uaWMgdHJhbnNt aXNzaW9uIG9mIG1lc3NhZ2VzLgo= From nobody Tue Jul 5 11:30:56 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8898812D1ED; Tue, 5 Jul 2016 11:30:53 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "Mirja Kuehlewind" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160705183053.22318.84284.idtracker@ietfa.amsl.com> Date: Tue, 05 Jul 2016 11:30:53 -0700 Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_draft-i?= =?utf-8?q?etf-cdni-metadata-18=3A_=28with_COMMENT=29?= X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 18:30:53 -0000 Mirja Kühlewind has entered the following ballot position for draft-ietf-cdni-metadata-18: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Two comments: 1) It's still not really clear to me why the use of HTTPS is not mandatory... maybe that's related to my second comment below...? 2) I'm a little confused with the use of the term 'caching'. Maybe I'm assuming a wrong scenario, but to my understanding a dCDN would request metadata from an uCDN and simply store them. Or would the dCDN re-distribute the metadata it got from the uCDN to other dCDNs? From nobody Tue Jul 5 11:45:19 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D309B12D52D; Tue, 5 Jul 2016 11:45:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IDKHi-P7cmKm; Tue, 5 Jul 2016 11:45:15 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1FD912D68A; Tue, 5 Jul 2016 11:45:12 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-80-577bf5a273fa Received: from EUSAAHC001.ericsson.se (Unknown_Domain [147.117.188.75]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 1B.18.09012.2A5FB775; Tue, 5 Jul 2016 20:00:02 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC001.ericsson.se ([147.117.188.75]) with mapi id 14.03.0294.000; Tue, 5 Jul 2016 14:45:11 -0400 From: Kevin Ma J To: Mirja Kuehlewind , The IESG Thread-Topic: =?utf-8?B?TWlyamEgS8O8aGxld2luZCdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRm?= =?utf-8?Q?-cdni-metadata-18:_(with_COMMENT)?= Thread-Index: AQHR1utgVwftRrLLA0ar1JjozwVDh6AKKvRA Date: Tue, 5 Jul 2016 18:45:11 +0000 Message-ID: References: <20160705183053.22318.84284.idtracker@ietfa.amsl.com> In-Reply-To: <20160705183053.22318.84284.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprMIsWRmVeSWpSXmKPExsUyuXSPt+6ir9XhBteXyFkcaf3FaPF09h9W i8tnJjJa/Ftwmslixp+JzBYvrn9kdmDzmPJ7I6vHkiU/mTxaPi5kDWCO4rJJSc3JLEst0rdL 4MpYPnE1Y8Eq2Yqjny6zNDCekOli5OSQEDCRWPNoPSOELSZx4d56ti5GLg4hgaOMEjPfnGCH cJYxSpxo+MkGUsUmoCXx+Otfpi5GDg4RAReJ2V85QWqYBU4xSnR0nARrEBZoZZQ4eGMZK0iD iEAbo0TXM20I20jix8EzLCA2i4CKxKebz9hBbF4BX4mGPTPBbCEBR4mfZ3eygizgFHCSOPtE DCTMCHTd91NrmEBsZgFxiVtP5jNBXC0gsWTPeWYIW1Ti5eN/rBC2osS+/unsIGOYBTQl1u/S h2hVlJjS/RBqq6DEyZlPWCYwis1CMnUWQscsJB2zkHQsYGRZxchRWlyQk5tuZLCJERhVxyTY dHcw3p/ueYhRgINRiYdXYUlVuBBrYllxZe4hRgkOZiUR3sg/1eFCvCmJlVWpRfnxRaU5qcWH GKU5WJTEecUeKYYLCaQnlqRmp6YWpBbBZJk4OKUaGDdfNeuYm6B6LLjOy2qpdJjRJWeHXc5L UlctPta9eavl0uyuPdlFP/X3e6T1L7u868HLU3JbLxz//55T3sB9pmVdmXfaVAlv4xK/yZuN phxe8VjJ5+2T4/02/J4/tJtuKASr8iTf5tUXv/r0WMjExO27dd2ufI9+8L3vaaOK+NoyJp2w hPUvApVYijMSDbWYi4oTAcae5g2mAgAA Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_draft-i?= =?utf-8?q?etf-cdni-metadata-18=3A_=28with_COMMENT=29?= X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 18:45:18 -0000 SGkgTWlyamEsDQoNCiAgVGhhbmtzIGZvciB0aGUgcmV2aWV3Lg0KDQo+IDEpIEl0J3Mgc3RpbGwg bm90IHJlYWxseSBjbGVhciB0byBtZSB3aHkgdGhlIHVzZSBvZiBIVFRQUyBpcyBub3QNCj4gbWFu ZGF0b3J5Li4uIG1heWJlIHRoYXQncyByZWxhdGVkIHRvIG15IHNlY29uZCBjb21tZW50IGJlbG93 Li4uPw0KDQogIEFyZSB5b3UgcmVmZXJyaW5nIHRvIHRoZSB1c2Ugb2YgSFRUUFMgaW4gcmV0cmll dmluZyBtZXRhZGF0YSwgb3IgdGhlIHVzZSBvZiBIVFRQUyBpbiBkZWxpdmVyeSBvZiB0aGUgY29u dGVudD8gIEZvciB0aGUgZm9ybWVyLCB3ZSBtYXkgbmVlZCB0byB1cGRhdGUgdGhlIHNlY3VyaXR5 IGNvbnNpZGVyYXRpb25zIHRleHQgdG8gbWF0Y2ggbG9nZ2luZywgdHJpZ2dlcnMsIGFuZCByZWRp cmVjdGlvbjsgZm9yIHRoZSBsYXR0ZXIsIHdlIGRpZCBub3Qgd2FudCB0byB0YWNrbGUgdGhlIGlz c3VlIG9mIGhvdyB0byBkaXN0cmlidXRlIGtleXMgdG8gZENETnMgKHRob3VnaCwgTFVSSyBtYXkg aGVscCB0byBhZGRyZXNzIHRoYXQgaXNzdWUpLg0KDQo+IDIpIEknbSBhIGxpdHRsZSBjb25mdXNl ZCB3aXRoIHRoZSB1c2Ugb2YgdGhlIHRlcm0gJ2NhY2hpbmcnLiBNYXliZSBJJ20NCj4gYXNzdW1p bmcgYSB3cm9uZyBzY2VuYXJpbywgYnV0IHRvIG15IHVuZGVyc3RhbmRpbmcgYSBkQ0ROIHdvdWxk IHJlcXVlc3QNCj4gbWV0YWRhdGEgZnJvbSBhbiB1Q0ROIGFuZCBzaW1wbHkgc3RvcmUgdGhlbS4g T3Igd291bGQgdGhlIGRDRE4NCj4gcmUtZGlzdHJpYnV0ZSB0aGUgbWV0YWRhdGEgaXQgZ290IGZy b20gdGhlIHVDRE4gdG8gb3RoZXIgZENETnM/DQoNCiAgSSBhc3N1bWUgeW91IG1lYW4gY2FjaGlu ZyBvZiB0aGUgbWV0YWRhdGEgaXRzZWxmIChhbmQgbm90IGNhY2hpbmcgb2YgdGhlIGFzc29jaWF0 ZWQgY29udGVudCk/ICBUaGUgZENETiB3aWxsIHN0b3JlIHRoZSBtZXRhZGF0YSBmb3IgaXRzIG93 biB1c2UsIGFzIHdlbGwgYXMgcG9zc2libHkgcmUtZGlzdHJpYnV0ZSB0aGUgbWV0YWRhdGEgdG8g ZnVydGhlciBkQ0ROcy4gIFRoZSBjYWNoZSBjb250cm9scyBvbiBtZXRhZGF0YSBhbGxvd3MgbWV0 YWRhdGEgdG8gdGltZW91dCB3aXRob3V0IGFuIGV4cGxpY2l0IHB1cmdlIHZpYSB0aGUgdHJpZ2dl ciBpbnRlcmZhY2UuDQoNCnRoYW54IQ0KDQotLSAgS2V2aW4gSi4gTWENCg0KPiAtLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBNaXJqYSBLdWVobGV3aW5kIFttYWlsdG86aWV0ZkBr dWVobGV3aW5kLm5ldF0NCj4gU2VudDogVHVlc2RheSwgSnVseSAwNSwgMjAxNiAyOjMxIFBNDQo+ IFRvOiBUaGUgSUVTRw0KPiBDYzogZHJhZnQtaWV0Zi1jZG5pLW1ldGFkYXRhQGlldGYub3JnOyBj ZG5pLWNoYWlyc0BpZXRmLm9yZzsNCj4gZmxlZmF1Y2hAY2lzY28uY29tOyBjZG5pQGlldGYub3Jn DQo+IFN1YmplY3Q6IE1pcmphIEvDvGhsZXdpbmQncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0 Zi1jZG5pLW1ldGFkYXRhLTE4Og0KPiAod2l0aCBDT01NRU5UKQ0KPiANCj4gTWlyamEgS8O8aGxl d2luZCBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCj4gZHJh ZnQtaWV0Zi1jZG5pLW1ldGFkYXRhLTE4OiBObyBPYmplY3Rpb24NCj4gDQo+IFdoZW4gcmVzcG9u ZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvIGFs bA0KPiBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZl ZWwgZnJlZSB0byBjdXQgdGhpcw0KPiBpbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikN Cj4gDQo+IA0KPiBQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0 ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQo+IGZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0 IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuDQo+IA0KPiANCj4gVGhlIGRvY3Vt ZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJl Og0KPiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktbWV0 YWRhdGEvDQo+IA0KPiANCj4gDQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gQ09NTUVOVDoNCj4gLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KPiANCj4gVHdvIGNvbW1lbnRzOg0KPiANCj4gMSkgSXQncyBzdGlsbCBub3QgcmVh bGx5IGNsZWFyIHRvIG1lIHdoeSB0aGUgdXNlIG9mIEhUVFBTIGlzIG5vdA0KPiBtYW5kYXRvcnku Li4gbWF5YmUgdGhhdCdzIHJlbGF0ZWQgdG8gbXkgc2Vjb25kIGNvbW1lbnQgYmVsb3cuLi4/DQo+ IA0KPiAyKSBJJ20gYSBsaXR0bGUgY29uZnVzZWQgd2l0aCB0aGUgdXNlIG9mIHRoZSB0ZXJtICdj YWNoaW5nJy4gTWF5YmUgSSdtDQo+IGFzc3VtaW5nIGEgd3Jvbmcgc2NlbmFyaW8sIGJ1dCB0byBt eSB1bmRlcnN0YW5kaW5nIGEgZENETiB3b3VsZCByZXF1ZXN0DQo+IG1ldGFkYXRhIGZyb20gYW4g dUNETiBhbmQgc2ltcGx5IHN0b3JlIHRoZW0uIE9yIHdvdWxkIHRoZSBkQ0RODQo+IHJlLWRpc3Ry aWJ1dGUgdGhlIG1ldGFkYXRhIGl0IGdvdCBmcm9tIHRoZSB1Q0ROIHRvIG90aGVyIGRDRE5zPw0K PiANCg0K From nobody Tue Jul 5 13:00:40 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A32C312D610; Tue, 5 Jul 2016 13:00:35 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Kathleen Moriarty" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160705200035.22399.13041.idtracker@ietfa.amsl.com> Date: Tue, 05 Jul 2016 13:00:35 -0700 Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 20:00:36 -0000 Kathleen Moriarty has entered the following ballot position for draft-ietf-cdni-metadata-18: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I can see why unauthorized access to content isn't a concern since this draft is just about the metadata, but wouldn't billing/theft be a possible avenue of attack to be listed as a consideration through alterations of the metadata? From nobody Tue Jul 5 13:06:45 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E01E212D10E; Tue, 5 Jul 2016 13:06:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eXLDtuEnrDuw; Tue, 5 Jul 2016 13:06:42 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C53AA12D107; Tue, 5 Jul 2016 13:06:41 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-48-577c130fb72c Received: from EUSAAHC001.ericsson.se (Unknown_Domain [147.117.188.75]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id CB.DB.03614.F031C775; Tue, 5 Jul 2016 22:05:35 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC001.ericsson.se ([147.117.188.75]) with mapi id 14.03.0294.000; Tue, 5 Jul 2016 16:06:36 -0400 From: Kevin Ma J To: Kathleen Moriarty , The IESG Thread-Topic: Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) Thread-Index: AQHR1vfms+qd+Y96XEeTeZbe0McEZaAKQrmw Date: Tue, 5 Jul 2016 20:06:36 +0000 Message-ID: References: <20160705200035.22399.13041.idtracker@ietfa.amsl.com> In-Reply-To: <20160705200035.22399.13041.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprAIsWRmVeSWpSXmKPExsUyuXSPty6/cE24wawd6hZHWn8xWjyd/YfV 4vKZiYwW/xacZrKY8Wcis0XDznwHNo8pvzeyeuycdZfdY8mSn0wBzFFcNimpOZllqUX6dglc GU9/HGIpmCBc8ebNFfYGxgtCXYycHBICJhJNX1YwQthiEhfurWfrYuTiEBI4yihx++ILRghn GaPE2k+LWEGq2AS0JB5//csEYosIhEg8/DyFBaSIWeAUo0RHx0l2kISwQJzEy88LgUZxABXF SyxbrgBhGkm8PyEOUsEioCKxbdoKsJG8Ar4SK183gdlCAo4S23fsZwIp5xRwklhxlwckzAh0 2/dTa8C2MguIS9x6Mp8J4mYBiSV7zjND2KISLx//Y4WwFSX29U9nBxnDLKApsX6XPkSrosSU 7ofsEFsFJU7OfMIygVFsFpKpsxA6ZiHpmIWkYwEjyypGjtLigpzcdCPDTYzAeDomwea4g3Fv r+chRgEORiUe3gVfq8OFWBPLiitzDzFKcDArifDq8deEC/GmJFZWpRblxxeV5qQWH2KU5mBR EufVf6kYLiSQnliSmp2aWpBaBJNl4uCUamB09J1eOU0mTJhXr6neQCE4VV9gab7KNdP3txff 0dQoLREKueNrnnv1ghpv6/OnPz8nqop1PLQN+pLdZVq19P/jtSprDuxbI2Hm4NbyWXy517pQ /5VcX13cfDOKXPL93X4ccylj0jHU4jKxepj95ZDf4Rci9vdzuCsffWGtyD7p0Jt2Lt4zToml OCPRUIu5qDgRAD5YNe2jAgAA Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 20:06:44 -0000 SGkgS2F0aGxlZW4sDQoNCiAgVGhhbmtzIGZvciB0aGUgcmV2aWV3LiAgQ291bGQgeW91IGV4cGFu ZCBvbiB5b3VyIHRob3VnaHRzIHdydCBiaWxsaW5nL3RoZWZ0PyAgSSB0aGluayB0aGUgaWRlYSBm b3IgYmlsbGluZyB3YXMgdGhhdCBpdCB3b3VsZCBiZSBiYXNlZCBvbiB0aGUgbG9nZ2luZyBkYXRh LCBub3QgbWV0YWRhdGEuICBEb1MgYWdhaW5zdCBtZXRhZGF0YSBjb3VsZCBwcmV2ZW50IHRoZSBj b250ZW50IGRlbGl2ZXJ5IGFuZCB0aGVyZWZvcmUgcHJldmVudCBjb250ZW50IG93bmVycyBhbmQg Q0ROcyBmcm9tIHJlY29nbml6aW5nIHJldmVudWUsIGJ1dCBJJ20gbm90IHN1cmUgaWYgdGhhdCdz IHRoZSB0aGVmdCBhbmdsZSB0byB3aGljaCB5b3UgcmVmZXI/DQoNCnRoYW54IQ0KDQotLSAgS2V2 aW4gSi4gTWENCg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBLYXRobGVl biBNb3JpYXJ0eSBbbWFpbHRvOkthdGhsZWVuLk1vcmlhcnR5LmlldGZAZ21haWwuY29tXQ0KPiBT ZW50OiBUdWVzZGF5LCBKdWx5IDA1LCAyMDE2IDQ6MDEgUE0NCj4gVG86IFRoZSBJRVNHDQo+IENj OiBkcmFmdC1pZXRmLWNkbmktbWV0YWRhdGFAaWV0Zi5vcmc7IGNkbmktY2hhaXJzQGlldGYub3Jn Ow0KPiBmbGVmYXVjaEBjaXNjby5jb207IGNkbmlAaWV0Zi5vcmcNCj4gU3ViamVjdDogS2F0aGxl ZW4gTW9yaWFydHkncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0Zi1jZG5pLW1ldGFkYXRhLTE4 Og0KPiAod2l0aCBDT01NRU5UKQ0KPiANCj4gS2F0aGxlZW4gTW9yaWFydHkgaGFzIGVudGVyZWQg dGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yDQo+IGRyYWZ0LWlldGYtY2RuaS1tZXRh ZGF0YS0xODogTm8gT2JqZWN0aW9uDQo+IA0KPiBXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVw IHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwNCj4gZW1haWwgYWRkcmVz c2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRo aXMNCj4gaW50cm9kdWN0b3J5IHBhcmFncmFwaCwgaG93ZXZlci4pDQo+IA0KPiANCj4gUGxlYXNl IHJlZmVyIHRvIGh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3Jp dGVyaWEuaHRtbA0KPiBmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5k IENPTU1FTlQgcG9zaXRpb25zLg0KPiANCj4gDQo+IFRoZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBv dGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCj4gaHR0cHM6Ly9kYXRh dHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jZG5pLW1ldGFkYXRhLw0KPiANCj4gDQo+ IA0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQo+IENPTU1FTlQ6DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+IEkg Y2FuIHNlZSB3aHkgdW5hdXRob3JpemVkIGFjY2VzcyB0byBjb250ZW50IGlzbid0IGEgY29uY2Vy biBzaW5jZSB0aGlzDQo+IGRyYWZ0IGlzIGp1c3QgYWJvdXQgdGhlIG1ldGFkYXRhLCBidXQgd291 bGRuJ3QgYmlsbGluZy90aGVmdCBiZSBhDQo+IHBvc3NpYmxlIGF2ZW51ZSBvZiBhdHRhY2sgdG8g YmUgbGlzdGVkIGFzIGEgY29uc2lkZXJhdGlvbiB0aHJvdWdoDQo+IGFsdGVyYXRpb25zIG9mIHRo ZSBtZXRhZGF0YT8NCj4gDQoNCg== From nobody Tue Jul 5 13:16:50 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8EF412B03E; Tue, 5 Jul 2016 13:16:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PSCrI7O2xPPO; Tue, 5 Jul 2016 13:16:40 -0700 (PDT) Received: from mail-vk0-x236.google.com (mail-vk0-x236.google.com [IPv6:2607:f8b0:400c:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A166B12B050; Tue, 5 Jul 2016 13:16:40 -0700 (PDT) Received: by mail-vk0-x236.google.com with SMTP id m127so219741239vkb.3; Tue, 05 Jul 2016 13:16:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=HH6a4nmuwfBSe2ENBBjiVmFaRnJ+obKyEj+1HClOz7A=; b=mqc8oposmUKiAoM6JShAuH9V1wukkta6Y8xlkJxml8GLaeZVjbsiHxj2OGKavcAvVs BJ/p4pLLFLRdDH29WoCMR/HvowjzDdvVHFOJLL0LfoB11JTD0o/jRd5PgV7/tPbAfFM1 TfQrOwpeErPUCiSzfVp4VHzidgkap9R3VsabunznXUqb29TR2CB6uSM71ouXJXSVAWdY FviV8iMUWMSeSU/Dugh7tPNPkYJGhk8xgCoCTkvmLFpnCuiLE08r+RnKT/+ovmjsbHMe +meoYHVouhsRxC4BPTcL9gYWOdvtupx3lyFWf7vgutjMi4YEtATeBdpZ6lHvPsJJ63vV 366g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=HH6a4nmuwfBSe2ENBBjiVmFaRnJ+obKyEj+1HClOz7A=; b=VbvoCig4nn2QpTa3GTntPLiTGPom1GSgWTDSA8bomD2qHKWzkNRNwWUHvExF7gkENr m+OaNwMsEDFQXUD3XeezMW8Kx8TJ1QYU8yeHGQqMonpjJCuwhQPWL21BDv8cNpDzpNk1 eUWxzK1MJOHVpex4//MWxAV9FRimn4YOxKU7y81g/nPWo+4SG7H/wk6hJF3SD4urcrHm hT4MW+U7cbiciRxgfffYNyNH+lvuIKFWZojddHwKonuRl68ZNax0ak63X3pAzhzluFrj qmpWSJW5foWt2QNBj8bZddKlFLE8fPXH/akrOlNOnXyT804JYMv5sUeDB0qtjYMHJUcm BnVQ== X-Gm-Message-State: ALyK8tJQm3CnM+SI4tyuPltHsfNQK0K+3b3T9rWs0TXWYywMC586WYhnHEaUCleJHaf+RyOeIMjB41Wqs6rEsg== X-Received: by 10.176.0.66 with SMTP id 60mr8011465uai.15.1467749799726; Tue, 05 Jul 2016 13:16:39 -0700 (PDT) MIME-Version: 1.0 Received: by 10.159.36.236 with HTTP; Tue, 5 Jul 2016 13:16:39 -0700 (PDT) In-Reply-To: References: <20160705200035.22399.13041.idtracker@ietfa.amsl.com> From: Kathleen Moriarty Date: Tue, 5 Jul 2016 16:16:39 -0400 Message-ID: To: Kevin Ma J Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , The IESG , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 20:16:42 -0000 On Tue, Jul 5, 2016 at 4:06 PM, Kevin Ma J wrote: > Hi Kathleen, > > Thanks for the review. Could you expand on your thoughts wrt billing/t= heft? I think the idea for billing was that it would be based on the loggi= ng data, not metadata. DoS against metadata could prevent the content deli= very and therefore prevent content owners and CDNs from recognizing revenue= , but I'm not sure if that's the theft angle to which you refer? I was wondering if there were attacks possible other than DoS. I was surprised I didn't see any related to theft of service if there was a way to do that with metadata. I didn't realize logging information was used for billing and had assumed metadata would wind up being logged and could cause an issue. If that's not possible, that's fine and that's why I just included this question as a comment. Thanks, Kathleen > > thanx! > > -- Kevin J. Ma > >> -----Original Message----- >> From: Kathleen Moriarty [mailto:Kathleen.Moriarty.ietf@gmail.com] >> Sent: Tuesday, July 05, 2016 4:01 PM >> To: The IESG >> Cc: draft-ietf-cdni-metadata@ietf.org; cdni-chairs@ietf.org; >> flefauch@cisco.com; cdni@ietf.org >> Subject: Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18= : >> (with COMMENT) >> >> Kathleen Moriarty has entered the following ballot position for >> draft-ietf-cdni-metadata-18: No Objection >> >> When responding, please keep the subject line intact and reply to all >> email addresses included in the To and CC lines. (Feel free to cut this >> introductory paragraph, however.) >> >> >> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.htm= l >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> The document, along with other ballot positions, can be found here: >> https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ >> >> >> >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >> >> I can see why unauthorized access to content isn't a concern since this >> draft is just about the metadata, but wouldn't billing/theft be a >> possible avenue of attack to be listed as a consideration through >> alterations of the metadata? >> > --=20 Best regards, Kathleen From nobody Tue Jul 5 13:46:11 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BAF312D555; Tue, 5 Jul 2016 13:46:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id agtCzX1s3sT8; Tue, 5 Jul 2016 13:46:09 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D69B012B03C; Tue, 5 Jul 2016 13:39:50 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-8e-577c107e6e74 Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 1A.0E.09012.E701C775; Tue, 5 Jul 2016 21:54:39 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0294.000; Tue, 5 Jul 2016 16:39:48 -0400 From: Kevin Ma J To: Kathleen Moriarty Thread-Topic: Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) Thread-Index: AQHR1vfms+qd+Y96XEeTeZbe0McEZaAKQrmwgABGq4D//8ILYA== Date: Tue, 5 Jul 2016 20:39:47 +0000 Message-ID: References: <20160705200035.22399.13041.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprIIsWRmVeSWpSXmKPExsUyuXSPn269QE24wdK1vBZHWn8xWjyd/YfV 4vKZiYwW/xacZrKY8Wcis0XDznwHNo8pvzeyeuycdZfdY8mSn0wBzFFcNimpOZllqUX6dglc GbMu7mUpuKBaseRXN0sD4xWVLkZODgkBE4mfjz8yQthiEhfurWfrYuTiEBI4yihx99QxZghn GaPEuRvr2UGq2AS0JB5//csEYosIWEisaf4G1sEs8IxRYtqx42AJYYE4iZefFwIlOICK4iWW LVeAMJ0kru7KB6lgEVCROHb9PQuIzSvgK7Hl0EuoxWcYJdZP/sMEUs8pEChx+30ESA0j0HHf T60Bm84sIC5x68l8JoijBSSW7DnPDGGLSrx8/I8VwlaU2Nc/nR1kDLOApsT6XfoQrYoSU7of skOsFZQ4OfMJywRGsVlIps5C6JiFpGMWko4FjCyrGDlKiwtyctONDDYxAiPqmASb7g7G+9M9 DzEKcDAq8fAu+FodLsSaWFZcmXuIUYKDWUmEd7pETbgQb0piZVVqUX58UWlOavEhRmkOFiVx XrFHiuFCAumJJanZqakFqUUwWSYOTqkGxubFepxP7+v0x4jvzJd3YWJ31XpzfbW24wvPANU8 DrGF+fe5ftlUp73LPnhDInifQpGT87pLFvcUT7h9OzfjAofm4rpnC89ma1Z7+B176ZX2P+ry fGGr6luc5zlnBx2Y7RcfGSA8kWvb0xcfkndqfK+5fb45xSg86tDPS8fvHOw+Y3Ztq9H9JUos xRmJhlrMRcWJAJXKW/OkAgAA Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , The IESG , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 20:46:10 -0000 SGkgS2F0aGxlZW4sDQoNCiAgSSB0aGluayB0aGF0IGlmIGFuIGF0dGFja2VyIGNvdWxkIHJlbW92 ZSBhbnkgb2YgdGhlIEFDTCBtZXRhZGF0YSwgeW91IGNvdWxkIGVuYWJsZSBzZXJ2aWNlIGluIGRp ZmZlcmVudCByZWdpb25zLCBhdCBkaWZmZXJlbnQgdGltZXMsIGFuZCB0byBkaWZmZXJlbnQgZW5k IHBvaW50cywgcG9zc2libHkgaW4gdmlvbGF0aW9uIG9mIHRoZSBjb250ZW50IG93bmVyJ3MgZGlz dHJpYnV0aW9uIHJpZ2h0cyAoYW5kIHBvc3NpYmx5IGNhdXNpbmcgdGhlIGNvbnRlbnQgb3duZXIg dG8gaW5jdXIgZXhjZXNzIGRlbGl2ZXJ5IGNoYXJnZXMpOyBidXQgSSB3b3VsZCBleHBlY3QgYSBw cmVtaXVtIGNvbnRlbnQgcHJvdmlkZXIgdG8gaGF2ZSBhIERSTSBzeXN0ZW0gb3V0c2lkZSB0aGUg Q0ROIGRlbGl2ZXJ5IHRoYXQgZW5mb3JjZXMgbGljZW5zaW5nIHJlc3RyaWN0aW9ucyBhbmQgb3Ro ZXJ3aXNlIHByZXZlbnRzIGhpamFja2luZyB0aGUgc2VydmljZSBhcyBwYXJ0IG9mIGEgY3JpbWlu YWwgZW50ZXJwcmlzZS4gIFdlIHdpbGwgbG9vayBhdCB1cGRhdGluZyB0aGUgdGhyZWF0cyBpbiB0 aGUgbmV4dCByZXZpc2lvbi4NCg0KdGhhbnghDQoNCi0tICBLZXZpbiBKLiBNYQ0KDQo+IC0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEthdGhsZWVuIE1vcmlhcnR5IFttYWlsdG86 a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb21dDQo+IFNlbnQ6IFR1ZXNkYXksIEp1bHkg MDUsIDIwMTYgNDoxNyBQTQ0KPiBUbzogS2V2aW4gTWEgSg0KPiBDYzogVGhlIElFU0c7IGRyYWZ0 LWlldGYtY2RuaS1tZXRhZGF0YUBpZXRmLm9yZzsgY2RuaS1jaGFpcnNAaWV0Zi5vcmc7DQo+IGZs ZWZhdWNoQGNpc2NvLmNvbTsgY2RuaUBpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogS2F0aGxlZW4g TW9yaWFydHkncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0Zi1jZG5pLW1ldGFkYXRhLQ0KPiAx ODogKHdpdGggQ09NTUVOVCkNCj4gDQo+IE9uIFR1ZSwgSnVsIDUsIDIwMTYgYXQgNDowNiBQTSwg S2V2aW4gTWEgSiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+DQo+IHdyb3RlOg0KPiA+IEhpIEth dGhsZWVuLA0KPiA+DQo+ID4gICBUaGFua3MgZm9yIHRoZSByZXZpZXcuICBDb3VsZCB5b3UgZXhw YW5kIG9uIHlvdXIgdGhvdWdodHMgd3J0DQo+IGJpbGxpbmcvdGhlZnQ/ICBJIHRoaW5rIHRoZSBp ZGVhIGZvciBiaWxsaW5nIHdhcyB0aGF0IGl0IHdvdWxkIGJlIGJhc2VkIG9uDQo+IHRoZSBsb2dn aW5nIGRhdGEsIG5vdCBtZXRhZGF0YS4gIERvUyBhZ2FpbnN0IG1ldGFkYXRhIGNvdWxkIHByZXZl bnQgdGhlDQo+IGNvbnRlbnQgZGVsaXZlcnkgYW5kIHRoZXJlZm9yZSBwcmV2ZW50IGNvbnRlbnQg b3duZXJzIGFuZCBDRE5zIGZyb20NCj4gcmVjb2duaXppbmcgcmV2ZW51ZSwgYnV0IEknbSBub3Qg c3VyZSBpZiB0aGF0J3MgdGhlIHRoZWZ0IGFuZ2xlIHRvIHdoaWNoDQo+IHlvdSByZWZlcj8NCj4g DQo+IEkgd2FzIHdvbmRlcmluZyBpZiB0aGVyZSB3ZXJlIGF0dGFja3MgcG9zc2libGUgb3RoZXIg dGhhbiBEb1MuICBJIHdhcw0KPiBzdXJwcmlzZWQgSSBkaWRuJ3Qgc2VlIGFueSByZWxhdGVkIHRv IHRoZWZ0IG9mIHNlcnZpY2UgaWYgdGhlcmUgd2FzIGENCj4gd2F5IHRvIGRvIHRoYXQgd2l0aCBt ZXRhZGF0YS4gIEkgZGlkbid0IHJlYWxpemUgbG9nZ2luZyBpbmZvcm1hdGlvbg0KPiB3YXMgdXNl ZCBmb3IgYmlsbGluZyBhbmQgaGFkIGFzc3VtZWQgbWV0YWRhdGEgd291bGQgd2luZCB1cCBiZWlu Zw0KPiBsb2dnZWQgYW5kIGNvdWxkIGNhdXNlIGFuIGlzc3VlLiAgSWYgdGhhdCdzIG5vdCBwb3Nz aWJsZSwgdGhhdCdzIGZpbmUNCj4gYW5kIHRoYXQncyB3aHkgSSBqdXN0IGluY2x1ZGVkIHRoaXMg cXVlc3Rpb24gYXMgYSBjb21tZW50Lg0KPiANCj4gVGhhbmtzLA0KPiBLYXRobGVlbg0KPiANCj4g DQo+ID4NCj4gPiB0aGFueCENCj4gPg0KPiA+IC0tICBLZXZpbiBKLiBNYQ0KPiA+DQo+ID4+IC0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4+IEZyb206IEthdGhsZWVuIE1vcmlhcnR5IFtt YWlsdG86S2F0aGxlZW4uTW9yaWFydHkuaWV0ZkBnbWFpbC5jb21dDQo+ID4+IFNlbnQ6IFR1ZXNk YXksIEp1bHkgMDUsIDIwMTYgNDowMSBQTQ0KPiA+PiBUbzogVGhlIElFU0cNCj4gPj4gQ2M6IGRy YWZ0LWlldGYtY2RuaS1tZXRhZGF0YUBpZXRmLm9yZzsgY2RuaS1jaGFpcnNAaWV0Zi5vcmc7DQo+ ID4+IGZsZWZhdWNoQGNpc2NvLmNvbTsgY2RuaUBpZXRmLm9yZw0KPiA+PiBTdWJqZWN0OiBLYXRo bGVlbiBNb3JpYXJ0eSdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLWNkbmktbWV0YWRhdGEt DQo+IDE4Og0KPiA+PiAod2l0aCBDT01NRU5UKQ0KPiA+Pg0KPiA+PiBLYXRobGVlbiBNb3JpYXJ0 eSBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCj4gPj4gZHJh ZnQtaWV0Zi1jZG5pLW1ldGFkYXRhLTE4OiBObyBPYmplY3Rpb24NCj4gPj4NCj4gPj4gV2hlbiBy ZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFjdCBhbmQgcmVwbHkg dG8gYWxsDQo+ID4+IGVtYWlsIGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8gYW5kIENDIGxp bmVzLiAoRmVlbCBmcmVlIHRvIGN1dCB0aGlzDQo+ID4+IGludHJvZHVjdG9yeSBwYXJhZ3JhcGgs IGhvd2V2ZXIuKQ0KPiA+Pg0KPiA+Pg0KPiA+PiBQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cu aWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy0NCj4gY3JpdGVyaWEuaHRtbA0KPiA+PiBm b3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENPTU1FTlQgcG9zaXRp b25zLg0KPiA+Pg0KPiA+Pg0KPiA+PiBUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFs bG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQo+ID4+IGh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY2RuaS1tZXRhZGF0YS8NCj4gPj4NCj4gPj4NCj4g Pj4NCj4gPj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+PiBDT01NRU5UOg0KPiA+PiAtLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQo+ID4+DQo+ID4+IEkgY2FuIHNlZSB3aHkgdW5hdXRob3JpemVkIGFjY2VzcyB0byBjb250ZW50 IGlzbid0IGEgY29uY2VybiBzaW5jZSB0aGlzDQo+ID4+IGRyYWZ0IGlzIGp1c3QgYWJvdXQgdGhl IG1ldGFkYXRhLCBidXQgd291bGRuJ3QgYmlsbGluZy90aGVmdCBiZSBhDQo+ID4+IHBvc3NpYmxl IGF2ZW51ZSBvZiBhdHRhY2sgdG8gYmUgbGlzdGVkIGFzIGEgY29uc2lkZXJhdGlvbiB0aHJvdWdo DQo+ID4+IGFsdGVyYXRpb25zIG9mIHRoZSBtZXRhZGF0YT8NCj4gPj4NCj4gPg0KPiANCj4gDQo+ IA0KPiAtLQ0KPiANCj4gQmVzdCByZWdhcmRzLA0KPiBLYXRobGVlbg0K From nobody Tue Jul 5 14:43:56 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F055112D0E7 for ; Tue, 5 Jul 2016 14:43:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2JIuyaVC7XVs for ; Tue, 5 Jul 2016 14:43:50 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63E8012B032 for ; Tue, 5 Jul 2016 14:43:50 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-5a-577c1f7e8984 Received: from EUSAAHC003.ericsson.se (Unknown_Domain [147.117.188.81]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 53.31.09012.E7F1C775; Tue, 5 Jul 2016 22:58:38 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC003.ericsson.se ([147.117.188.81]) with mapi id 14.03.0294.000; Tue, 5 Jul 2016 17:43:48 -0400 From: Kevin Ma J To: "Brandenburg, R. (Ray) van" , "cdni@ietf.org" Thread-Topic: New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has Thread-Index: AQHRwy2I54wAQQPyYkOQMx8zvzoaI6AKgsGg Date: Tue, 5 Jul 2016 21:43:48 +0000 Message-ID: References: <90041886-D253-413F-B006-50BDA558EB12@tno.nl> In-Reply-To: <90041886-D253-413F-B006-50BDA558EB12@tno.nl> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: multipart/alternative; boundary="_000_A419F67F880AB2468214E154CB8A556206E46700eusaamb103erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupgkeLIzCtJLcpLzFFi42KZXLonULdOvibc4N1FDYuns/+wWnzbfJ3R gcljyZKfTB4H111gDmCK4rJJSc3JLEst0rdL4Mp4/X4nS8G8RYwVP9+fZWtg/DKXsYuRk0NC wETix9FTzBC2mMSFe+vZuhi5OIQEjjJK7N+9mRXCWcYoce95PxNIFZuAlsTjr3/BbBGBOIkd x86ATRIWiJF4OXUFI0Q8VmLd9m1QtpHEvMdPgWwODhYBFYnlFzlAwrwCvhJvvs5lAbGFBCwl Pm36zw5icwpYSRx49RKslRHooO+n1oCtYhYQl7j1ZD4TxKECEkv2nIc6WlTi5eN/rBC2osS+ /unsEPX5EgvmbWSG2CUocXLmE5YJjCKzkIyahaRsFpKyWUCXMgtoSqzfpQ9RoigxpfshO4St IdE6Zy47svgCRvZVjBylxQU5uelGBpsYgfFzTIJNdwfj/emehxgFOBiVeHgXfK0OF2JNLCuu zD3EKMHBrCTCu0utJlyINyWxsiq1KD++qDQntfgQozQHi5I4r9gjxXAhgfTEktTs1NSC1CKY LBMHp1QDo7YLS6robvVvqQsyN7h81Jn8l9e6x2TmjJeydpu//ojMeHPmVlM7S/viSSXfTR2F /LMPfzL4vW5pRO321Qka/yTrYxrmcEht7xBWrF4xte72j36r7bwH182XDLx8ccXWF3l5UQvP n3H9mXrUy10oNyHq742H4lNSFtxmC7CtqHwwr25hqo2zmxJLcUaioRZzUXEiALrdjD+bAgAA Archived-At: Subject: Re: [CDNi] New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 21:43:54 -0000 --_000_A419F67F880AB2468214E154CB8A556206E46700eusaamb103erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUmF5LA0KDQogIChBcyBhbiBpbmRpdmlkdWFsKSBJIGZpbmFsbHkgZm91bmQgc29tZSB0aW1l IHRvIHJlYWQgdGhyb3VnaCB0aGUgdXBkYXRlZCBkcmFmdC4gIFNvbWUgY29tbWVudHMgYW5kIHF1 ZXN0aW9ucyBiZWxvdy4NCg0KdGhhbnghDQoNCi0tICBLZXZpbiBKLiBNYQ0KDQotIHNlY3Rpb24g NC4xLCBzdGVwIDMuRTogV2hhdCBpZiB0aGUgdXNlciBwYXVzZXMsIG9yIHRoZXJlIGlzIGFuIGFk IGluc2VydGVkLCBhbmQgdGhlIHRva2VuIGV4cGlyZXM/ICBVbmRlcnN0b29kIHRoYXQgaXQncyBw cm9iYWJseSB1cCB0byB0aGUgbWVkaWEgcGxheWVyIHRvIGhhbmRsZSB0aGF0IGNhc2UsIGJ1dCB3 b3VsZCB0aGV5IG5lZWQgdG8gZ28gYmFjayB0byB0aGUgQ1AgdG8gZ2V0IGEgbmV3IHZhbGlkIG1h bmlmZXN0IFVSTD8gIFdoaWNoIHdvdWxkIGhhdmUgYSB0b2tlbiB0aGF0IGlzIHZhbGlkIGZvciB0 aGUgY2h1bmtzIGFzIHdlbGw/DQoNCi0gc2VjdGlvbiA0LjEsIHN0ZXBzIDksIDExLkIsIDExLkUs IDEyLkIsIGFuZCAxMi5GLCBzZWN0aW9uIDcuMSBzdGVwIDEsIHNlY3Rpb24gNy4yIHN0ZXBzIDMu QS5kIGFuZCAzLkIuZCwgYW5kIHNlY3Rpb24gNy40IHN0ZXBzIDEwLkEuMiwgMTAuQS41LCAxMC5C LjIsIGFuZCAxMC5CLjY6IFNob3VsZCB0aGUgVVBDIGJlIHBlcmNlbnQtZW5jb2RlZD8gIEFuZCBz aG91bGQgQ0lQIGJlIGVuY3J5cHRlZD8NCg0KLSBzZWN0aW9uIDQuMSwgc3RlcHMgOSwgMTEuQiwg MTEuRSwgMTIuQiwgMTIuRiwgc2VjdGlvbiA1LjIsIGFuZCBzZWN0aW9uIDcuMSBzdGVwIDE6IElm IHRoZSB0b2tlbiBpcyBvbmx5IGdvb2QgZm9yIHNlZ21lbnRzLCBidXQgaXMgYXR0YWNoZWQgdG8g dGhlIG1hbmlmZXN0IHJlcXVlc3QsIGRvZXMgdGhhdCBtZWFuIHRoYXQgdGhlcmUgaXMgbm8gc2ln bmF0dXJlIHZhbGlkYXRpb24gb24gdGhlIG1hbmlmZXN0IHJlcXVlc3Q/ICBJbiB0aGUgMnh4IG5v bi1yZWRpcmVjdCBjYXNlLCB3b3VsZCB5b3UgZXhwZWN0IGEgdjEgbWFuaWZlc3Qgc2lnbmF0dXJl IGJlIGluIHRoZSBxdWVyeSBzdHJpbmcgYW5kIGEgc2VwYXJhdGUgdjIgY2h1bmsgc2lnbmF0dXJl IGJlIGluIHRoZSBjb29raWU/DQoNCi0gc2VjdGlvbiA0LjEsIHN0ZXAgMTAsIHNlY3Rpb25zIDUv NiwgYW5kIHNlY3Rpb24gNy40IHN0ZXAgOTogU2VlbXMgbGlrZSBhIGNoaWNrZW4gYW5kIGVnZyBw cm9ibGVtLiAgVGhlIFNUVCBzYXlzIHRoYXQgdGhlIHRva2VuIGlzIGluIHRoZSBjb29raWUsIGJ1 dCB0aGUgU1RUIGlzIGluIHRoZSB0b2tlbiB0aGF0J3MgaW5zaWRlIHRoZSBjb29raWUuICBEb2Vz IHRoZSBpbml0aWFsIHRva2VuIGFsd2F5cyBoYXZlIHRvIGJlIGluIGEgdG9rZW4/ICBTaG91bGQg dGhlIGluaXRpYWwgdG9rZW4gYWx3YXlzIGJlIGluIHRoZSBxdWVyeSBzdHJpbmcgdG8gYmUgY29t cGF0aWJsZSB3aXRoIHYxLCBzaW5jZSB0aGUgVkVSPTIgaXMgYWxzbyBpbnNpZGUgdGhlIHRva2Vu IGluc2lkZSB0aGUgY29va2llPyAgRnJvbSB0aGUgY2xpZW50IHBlcnNwZWN0aXZlLCBzaG91bGQg b25seSBzdWJzZXF1ZW50IHRva2VucyBiZSBpbiB0aGUgY29va2llPyAgRnJvbSB0aGUgQ0ROIHBl cnNwZWN0aXZlLCB1bmxlc3MgcGFzc2VkIGluIHRoZSBtZXRhZGF0YSwgaG93IHdpbGwgdGhlIENE TiBrbm93IHdoZXJlIHRvIGxvb2sgZm9yIHRoZSB0b2tlbiwgb3IgZG9lcyBpdCBhbHdheXMgY2hl Y2sgZXZlcnl3aGVyZT8gIElmIHRoZSBwcm9jZXNzIGlzIHRvIGFsd2F5cyBjaGVjayB0aGUgcXVl cnkgc3RyaW5nIGZpcnN0IGFuZCB0aGUgY29va2llIHNlY29uZCwgZG8gd2UgZXZlbiBuZWVkIFNU VD8gIE5ldyBTVFQgdmFsdWVzIGFyZSBnb2luZyB0byByZXF1aXJlIGFuZCB1cGRhdGUgdG8gdGhl IHByb2NlZHVyZSBpbiBzZWN0aW9uIDYsIGFzIHdlbGwgYXMgcmVnaXN0cmF0aW9uIG9mIG5ldyBT VFQgdmFsdWVzPw0KDQotIHNlY3Rpb24gNS4yOiBUaGUgdjEgZHJhZnQgYWxzbyBzdXBwb3J0cyB0 b2tlbiBhcyBhIHBhdGggcGFyYW1ldGVyOyBpcyB0aGF0IGludGVudGlvbmFsbHkgb21pdHRlZCBo ZXJlPw0KDQoNCi0gc2VjdGlvbiA3LjEgc3RlcHMgMiBhbmQgMzogSSB3b3VsZCBleHBlY3QgdGhh dCB2MiB3b3VsZCBoYXZlIGEgbmV3IEdlbmVyaWNNZXRhZGF0YSBwdHlwZSAoTUkuVXJpU2lnbmlu Zy52Mj8pIGFuZCB0aGF0IHB0eXBlIHdvdWxkIHRlbGwgdGhlIGRDRE4gd2hhdCBpdCBzaG91bGQg ZXhwZWN0IGluIHRoZSB0b2tlbj8gIEl0IHdvdWxkIGJlIG5pY2UgaWYgdGhlIGRyYWZ0IGNvdWxk IGRlZmluZSB2MiBzdWNoIHRoYXQgaXQgc3VwcG9ydGVkIGJvdGggVkVSPTEgYW5kIFZFUj0yLCBz byB0aGF0IHRoZSBNSS5VcmlTaWduaW5nLnYyIG1ldGFkYXRhIGNvdWxkIGJlIGEgc3VwZXJzZXQg b2YgaW5mb3JtYXRpb24gbmVlZGVkIHRvIHByb2Nlc3MgYWxsIGtub3duIHRva2VuIHR5cGVzLCBh bmQgbWFrZSB0aGUgdG9rZW4gcHJvY2Vzc2luZyBhIHJ1bnRpbWUgZGVjaXNpb24/DQoNCi0gc2Vj dGlvbiA3LjQsIGdlbmVyYWw6IFRoaXMgZHJhZnQgcmVtb3ZlcyB0aGUgIk5vdGUgdGhhdCByZS1z aWduaW5nIGEgVVJJIE1VU1QuLi4iIHRleHQgZnJvbSB0aGUgdjEgZHJhZnQoc2VjdGlvbiAzLjEp LiAgU2luY2UgdGhpcyBpcyBhYm91dCByZXNpZ25pbmcsIEkgdGhpbmsgdGhlIHRleHQgYWJvdXQg bWFpbnRhbmluZyB0aGUgc2FtZSB2YWx1ZXMgc2hvdWxkIGJlIGFkZGVkIGhlcmUsIHNwZWNpZmlj YWxseSBmb3IgS0lEL0tJRF9OVU0sIEhNQUMsIGFuZCBEU0EuDQoNCg0KLSBEbyB5b3UgaGF2ZSBh biBpZGVhIGFzIHRvIHdoYXQgYWRkaXRpb25hbCByZWdpc3RyaWVzLCBtZXRhZGF0YSwgYW5kL29y IGxvZ2dpbmcgZmllbGRzIHdpbGwgYmUgbmVlZGVkPyAgV2lsbCB0aGUgbmV3IHB0eXBlIGp1c3Qg YmUgTUkuVXJpU2lnbmluZy52Mj8NCg0KDQpGcm9tOiBDRE5pIFttYWlsdG86Y2RuaS1ib3VuY2Vz QGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbg0KU2VudDog RnJpZGF5LCBKdW5lIDEwLCAyMDE2IDExOjM0IEFNDQpUbzogY2RuaUBpZXRmLm9yZw0KU3ViamVj dDogW0NETmldIE5ldyB2ZXJzaW9uIChhbmQgSVBSIHN0YXRlbWVudCkgb2YgZHJhZnQtYnJhbmRl bmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzDQoNCkhpIGFsbCwNCg0KQXMgeW91IG1pZ2h0 IGhhdmUgc2VlbiwgSeKAmXZlIHJlY2VudGx5IHVwbG9hZGVkIGEgbmV3IHZlcnNpb24gb2YgZHJh ZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzICgtMDMpLg0KDQpodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1m b3ItaGFzLTAzDQoNCldoYXQgaXMgaW1wb3J0YW50IHRvIG5vdGUgaXMgdGhhdCBLUE4gaGFzIHVw ZGF0ZWQgaXTigJlzIElQUiBzdGF0ZW1lbnQgb24gdGhpcyBkb2N1bWVudCB0byBiZSBpbiBsaW5l IHdpdGggdGhlIElQUiBzdGF0ZW1lbnRzIHRoYXQgaGF2ZSBiZWVuIGZpbGVkIG9uIG90aGVyIENE TkkgZG9jdW1lbnRzIChpLmUuIOKAnFJveWFsdHktRnJlZSwgUmVhc29uYWJsZSBhbmQgTm9uLURp c2NyaW1pbmF0b3J5IExpY2Vuc2UgdG8gQWxsIEltcGxlbWVudGVyc+KAnSkuIEhvcGVmdWxseSB0 aGlzIGNsZWFycyB1cCB0aGUgbGVuZ3RoeSBJUFIgZGlzY3Vzc2lvbiB3ZeKAmXZlIGJlZW4gaGF2 aW5nIGFyb3VuZCB0aGlzIGRvY3VtZW50IHNvIHRoYXQgd2UgY2FuIGZvY3VzIG9uIHRoZSB0ZWNo bmljYWwgYXNwZWN0cyBhZ2Fpbi4NCg0KTG9va2luZyBmb3J3YXJkIHRvIHlvdXIgZmVlZGJhY2ss DQpSYXkNCg0KVGhpcyBtZXNzYWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90 IGludGVuZGVkIGZvciB5b3UuIElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhp cyBtZXNzYWdlIHdhcyBzZW50IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0 byBpbmZvcm0gdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBu byBsaWFiaWxpdHkgZm9yIHRoZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3IgdGhlIG1hbm5l ciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJlc3VsdGlu ZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21pc3Npb24g b2YgbWVzc2FnZXMuDQo= --_000_A419F67F880AB2468214E154CB8A556206E46700eusaamb103erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0KYTpsaW5r LCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1 NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3 MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdp bjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNv bG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjp3aW5kb3d0 ZXh0O30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwg UHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUt bGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXpl OjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo1OTUuMHB0IDg0Mi4wcHQ7DQoJ bWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgYmdjb2xvcj0id2hpdGUiIGxhbmc9 IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkhpIFJheSw8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyAoQXMgYW4gaW5kaXZpZHVhbCkgSSBmaW5hbGx5IGZvdW5kIHNvbWUgdGltZSB0byByZWFkIHRo cm91Z2ggdGhlIHVwZGF0ZWQgZHJhZnQuJm5ic3A7IFNvbWUgY29tbWVudHMgYW5kIHF1ZXN0aW9u cyBiZWxvdy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPnRoYW54ITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+LS0mbmJzcDsgS2V2aW4gSi4gTWE8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlvbiA0LjEsIHN0 ZXAgMy5FOiBXaGF0IGlmIHRoZSB1c2VyIHBhdXNlcywgb3IgdGhlcmUgaXMgYW4gYWQgaW5zZXJ0 ZWQsIGFuZCB0aGUgdG9rZW4gZXhwaXJlcz8mbmJzcDsgVW5kZXJzdG9vZCB0aGF0IGl0J3MgcHJv YmFibHkgdXAgdG8gdGhlIG1lZGlhIHBsYXllciB0byBoYW5kbGUgdGhhdCBjYXNlLCBidXQNCiB3 b3VsZCB0aGV5IG5lZWQgdG8gZ28gYmFjayB0byB0aGUgQ1AgdG8gZ2V0IGEgbmV3IHZhbGlkIG1h bmlmZXN0IFVSTD8mbmJzcDsgV2hpY2ggd291bGQgaGF2ZSBhIHRva2VuIHRoYXQgaXMgdmFsaWQg Zm9yIHRoZSBjaHVua3MgYXMgd2VsbD88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlvbiA0LjEsIHN0ZXBzIDksIDExLkIsIDEx LkUsIDEyLkIsIGFuZCAxMi5GLCBzZWN0aW9uIDcuMSBzdGVwIDEsIHNlY3Rpb24gNy4yIHN0ZXBz IDMuQS5kIGFuZCAzLkIuZCwgYW5kIHNlY3Rpb24gNy40IHN0ZXBzIDEwLkEuMiwgMTAuQS41LCAx MC5CLjIsIGFuZCAxMC5CLjY6IFNob3VsZCB0aGUgVVBDDQogYmUgcGVyY2VudC1lbmNvZGVkPyZu YnNwOyBBbmQgc2hvdWxkIENJUCBiZSBlbmNyeXB0ZWQ/PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4tIHNlY3Rpb24gNC4xLCBzdGVwcyA5 LCAxMS5CLCAxMS5FLCAxMi5CLCAxMi5GLCBzZWN0aW9uIDUuMiwgYW5kIHNlY3Rpb24gNy4xIHN0 ZXAgMTogSWYgdGhlIHRva2VuIGlzIG9ubHkgZ29vZCBmb3Igc2VnbWVudHMsIGJ1dCBpcyBhdHRh Y2hlZCB0byB0aGUgbWFuaWZlc3QgcmVxdWVzdCwgZG9lcyB0aGF0IG1lYW4NCiB0aGF0IHRoZXJl IGlzIG5vIHNpZ25hdHVyZSB2YWxpZGF0aW9uIG9uIHRoZSBtYW5pZmVzdCByZXF1ZXN0PyZuYnNw OyBJbiB0aGUgMnh4IG5vbi1yZWRpcmVjdCBjYXNlLCB3b3VsZCB5b3UgZXhwZWN0IGEgdjEgbWFu aWZlc3Qgc2lnbmF0dXJlIGJlIGluIHRoZSBxdWVyeSBzdHJpbmcgYW5kIGEgc2VwYXJhdGUgdjIg Y2h1bmsgc2lnbmF0dXJlIGJlIGluIHRoZSBjb29raWU/PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4tIHNlY3Rpb24gNC4xLCBzdGVwIDEw LCBzZWN0aW9ucyA1LzYsIGFuZCBzZWN0aW9uIDcuNCBzdGVwIDk6IFNlZW1zIGxpa2UgYSBjaGlj a2VuIGFuZCBlZ2cgcHJvYmxlbS4mbmJzcDsgVGhlIFNUVCBzYXlzIHRoYXQgdGhlIHRva2VuIGlz IGluIHRoZSBjb29raWUsIGJ1dCB0aGUgU1RUIGlzIGluIHRoZSB0b2tlbiB0aGF0J3MNCiBpbnNp ZGUgdGhlIGNvb2tpZS4mbmJzcDsgRG9lcyB0aGUgaW5pdGlhbCB0b2tlbiBhbHdheXMgaGF2ZSB0 byBiZSBpbiBhIHRva2VuPyZuYnNwOyBTaG91bGQgdGhlIGluaXRpYWwgdG9rZW4gYWx3YXlzIGJl IGluIHRoZSBxdWVyeSBzdHJpbmcgdG8gYmUgY29tcGF0aWJsZSB3aXRoIHYxLCBzaW5jZSB0aGUg VkVSPTIgaXMgYWxzbyBpbnNpZGUgdGhlIHRva2VuIGluc2lkZSB0aGUgY29va2llPyZuYnNwOyBG cm9tIHRoZSBjbGllbnQgcGVyc3BlY3RpdmUsIHNob3VsZCBvbmx5DQogc3Vic2VxdWVudCB0b2tl bnMgYmUgaW4gdGhlIGNvb2tpZT8mbmJzcDsgRnJvbSB0aGUgQ0ROIHBlcnNwZWN0aXZlLCB1bmxl c3MgcGFzc2VkIGluIHRoZSBtZXRhZGF0YSwgaG93IHdpbGwgdGhlIENETiBrbm93IHdoZXJlIHRv IGxvb2sgZm9yIHRoZSB0b2tlbiwgb3IgZG9lcyBpdCBhbHdheXMgY2hlY2sgZXZlcnl3aGVyZT8m bmJzcDsgSWYgdGhlIHByb2Nlc3MgaXMgdG8gYWx3YXlzIGNoZWNrIHRoZSBxdWVyeSBzdHJpbmcg Zmlyc3QgYW5kIHRoZSBjb29raWUgc2Vjb25kLA0KIGRvIHdlIGV2ZW4gbmVlZCBTVFQ/Jm5ic3A7 IE5ldyBTVFQgdmFsdWVzIGFyZSBnb2luZyB0byByZXF1aXJlIGFuZCB1cGRhdGUgdG8gdGhlIHBy b2NlZHVyZSBpbiBzZWN0aW9uIDYsIGFzIHdlbGwgYXMgcmVnaXN0cmF0aW9uIG9mIG5ldyBTVFQg dmFsdWVzPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+LSBzZWN0aW9uIDUuMjogVGhlIHYxIGRyYWZ0IGFsc28gc3VwcG9ydHMgdG9rZW4g YXMgYSBwYXRoIHBhcmFtZXRlcjsgaXMgdGhhdCBpbnRlbnRpb25hbGx5IG9taXR0ZWQgaGVyZT88 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHByZT4tIHNlY3Rpb24gNy4xIHN0ZXBzIDIgYW5k IDM6IEkgd291bGQgZXhwZWN0IHRoYXQgdjIgd291bGQgaGF2ZSBhIG5ldyBHZW5lcmljTWV0YWRh dGEgcHR5cGUgKE1JLlVyaVNpZ25pbmcudjI/KSBhbmQgdGhhdCBwdHlwZSB3b3VsZCB0ZWxsIHRo ZSBkQ0ROIHdoYXQgaXQgc2hvdWxkIGV4cGVjdCBpbiB0aGUgdG9rZW4/Jm5ic3A7IEl0IHdvdWxk IGJlIG5pY2UgaWYgdGhlIGRyYWZ0IGNvdWxkIGRlZmluZSB2MiBzdWNoIHRoYXQgaXQgc3VwcG9y dGVkIGJvdGggVkVSPTEgYW5kIFZFUj0yLCBzbyB0aGF0IHRoZSBNSS5VcmlTaWduaW5nLnYyIG1l dGFkYXRhIGNvdWxkIGJlIGEgc3VwZXJzZXQgb2YgaW5mb3JtYXRpb24gbmVlZGVkIHRvIHByb2Nl c3MgYWxsIGtub3duIHRva2VuIHR5cGVzLCBhbmQgbWFrZSB0aGUgdG9rZW4gcHJvY2Vzc2luZyBh IHJ1bnRpbWUgZGVjaXNpb24/PG86cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+LSBzZWN0aW9uIDcuNCwgZ2VuZXJhbDogVGhpcyBkcmFmdCByZW1vdmVz IHRoZSAmcXVvdDtOb3RlIHRoYXQgcmUtc2lnbmluZyBhIFVSSSBNVVNULi4uJnF1b3Q7IHRleHQg ZnJvbSB0aGUgdjEgZHJhZnQoc2VjdGlvbiAzLjEpLiZuYnNwOyBTaW5jZSB0aGlzIGlzIGFib3V0 IHJlc2lnbmluZywgSSB0aGluayB0aGUgdGV4dCBhYm91dCBtYWludGFuaW5nDQogdGhlIHNhbWUg dmFsdWVzIHNob3VsZCBiZSBhZGRlZCBoZXJlLCBzcGVjaWZpY2FsbHkgZm9yIEtJRC9LSURfTlVN LCBITUFDLCBhbmQgRFNBLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cHJlPi0gRG8geW91 IGhhdmUgYW4gaWRlYSBhcyB0byB3aGF0IGFkZGl0aW9uYWwgcmVnaXN0cmllcywgbWV0YWRhdGEs IGFuZC9vciBsb2dnaW5nIGZpZWxkcyB3aWxsIGJlIG5lZWRlZD8mbmJzcDsgV2lsbCB0aGUgbmV3 IHB0eXBlIGp1c3QgYmUgTUkuVXJpU2lnbmluZy52Mj88bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3Bh ZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGlu Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5G cm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBDRE5pIFttYWlsdG86 Y2RuaS1ib3VuY2VzQGlldGYub3JnXQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5CcmFuZGVuYnVyZywg Ui4gKFJheSkgdmFuPGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwgSnVuZSAxMCwgMjAxNiAxMToz NCBBTTxicj4NCjxiPlRvOjwvYj4gY2RuaUBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBb Q0ROaV0gTmV3IHZlcnNpb24gKGFuZCBJUFIgc3RhdGVtZW50KSBvZiBkcmFmdC1icmFuZGVuYnVy Zy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+SGkgYWxsLDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+QXMgeW91IG1pZ2h0IGhh dmUgc2VlbiwgSeKAmXZlIHJlY2VudGx5IHVwbG9hZGVkIGEgbmV3IHZlcnNpb24gb2YgZHJhZnQt YnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzICgtMDMpLg0KPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48YSBocmVmPSJodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzLTAz Ij5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmkt c2lnbmluZy1mb3ItaGFzLTAzPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+V2hhdCBpcyBpbXBvcnRhbnQgdG8gbm90ZSBpcyB0aGF0IEtQTiBoYXMgdXBkYXRl ZCBpdOKAmXMgSVBSIHN0YXRlbWVudCBvbiB0aGlzIGRvY3VtZW50IHRvIGJlIGluIGxpbmUgd2l0 aCB0aGUgSVBSIHN0YXRlbWVudHMgdGhhdCBoYXZlIGJlZW4gZmlsZWQgb24gb3RoZXIgQ0ROSSBk b2N1bWVudHMgKGkuZS4g4oCcUm95YWx0eS1GcmVlLCBSZWFzb25hYmxlIGFuZA0KIE5vbi1EaXNj cmltaW5hdG9yeSBMaWNlbnNlIHRvIEFsbCBJbXBsZW1lbnRlcnPigJ0pLiBIb3BlZnVsbHkgdGhp cyBjbGVhcnMgdXAgdGhlIGxlbmd0aHkgSVBSIGRpc2N1c3Npb24gd2XigJl2ZSBiZWVuIGhhdmlu ZyBhcm91bmQgdGhpcyBkb2N1bWVudCBzbyB0aGF0IHdlIGNhbiBmb2N1cyBvbiB0aGUgdGVjaG5p Y2FsIGFzcGVjdHMgYWdhaW4uDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPkxvb2tpbmcgZm9yd2FyZCB0byB5b3VyIGZlZWRiYWNrLDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5SYXk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjguMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo4LjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij5UaGlzIG1lc3NhZ2UgbWF5IGNvbnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBu b3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91IGFyZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0 aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91IGJ5IG1pc3Rha2UsIHlvdQ0KIGFyZSByZXF1ZXN0 ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5PIGFjY2Vw dHMgbm8gbGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlzIGUtbWFpbCwgZm9yIHRoZSBt YW5uZXIgaW4gd2hpY2ggeW91IHVzZSBpdCBhbmQgZm9yIGRhbWFnZSBvZiBhbnkga2luZCByZXN1 bHRpbmcgZnJvbSB0aGUgcmlza3MgaW5oZXJlbnQgdG8gdGhlIGVsZWN0cm9uaWMgdHJhbnNtaXNz aW9uIG9mIG1lc3NhZ2VzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2JvZHk+DQo8L2h0bWw+DQo= --_000_A419F67F880AB2468214E154CB8A556206E46700eusaamb103erics_-- From nobody Tue Jul 5 16:23:23 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 70A4F12D0D9; Tue, 5 Jul 2016 16:23:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "Ben Campbell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> Date: Tue, 05 Jul 2016 16:23:21 -0700 Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 23:23:21 -0000 Ben Campbell has entered the following ballot position for draft-ietf-cdni-metadata-18: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- I have two concerns that I would like to see discussed prior to publication: 1) Section 6.2 cites a normative reference to RFC 5861. That's an ISE stream informational RFC. The text as written seems to normatively require implementation of that RFC to enable the "caching" feature. Did the working group discuss the implications of that? (I also note that this doesn't appear to have been called out at IETF last call. While there has been some discussion about relaxing that requirement, I'm not sure this is an appropriate place to do so.) 2) Section 8.5 contains the "In an environment where any such protection is required" language that has been discussed for several CDNI drafts. But in this particular case, the implication that there may be environments where such protection is _not_ required seems to conflict with the multiple occurrences of "MUST use strong encryption/mutual authentication" in sections 8.1-8.4. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Substantive Comments: - 4.1, example (applies to all examples of referenced objects): Given the rather strong guidance to use TLS to move metadata around, shouldn't the examples that show referenced objects use HTTPS URLs? - 4.1.3, "paths" property: Am I correct to assume that _only_ the first match is used? - 7.4: If the Auth type registry is initially unpopulated, doesn't that make the Auth property useless for the time being? Why even specify it now? - 8.1, 2nd bullet: Could this sort of attack be used to distribute compromised content (e.g. malware) to end users? - 8.3: Couldn't lack of integrity protection enable theft-of-content, in addition to DoS? For example, if a MiTM changes the ACLs for a piece of content? - 11.1, reference to 6706: This is another normative downref that does not appear to have been called out in the IETF last call announcement. I will leave it to the authors and AD to decide if that's okay. Editorial Comments and Nits: - General: I don't expect action on this in general, but this draft seems to have a lot of repeated material, which makes it considerably longer and harder to digest than necessary for the content. (Note that, for _normative_ text, such redundancy makes future updates error prone, even if the text is consistent now.) - 3, first paragraph: I’m not sure what you mean by “aggregated” in this context. - 3.2, third paragraph, last sentence: The MUST seems unneeded. Please consider simply saying " ... the dCDN processes the content request in accordance with the rest of the metadata. - 4, paragraph 5: The MUST seems unneeded. There's no choice to make here; this is simply the way CDNI metadata objects are encoded. (Recurs in 6.4, which seems redundant to this section.) - 4.1.2, "Note" in definition of Host property: I usually think of "Note" to designate parenthetical or "sidebar" content. Please consider dropping the "Note" prefix for text that contains 2119 keywords. (There are multiple occurrences throughout.) - 7.1.x Do you expect IANA to do something with these subsections? I don’t see this sort of detail in the IANA registry. Otherwise, they seems to belong in the main body, not the IANA considerations. From nobody Tue Jul 5 18:51:15 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 75EC11288B8; Tue, 5 Jul 2016 18:51:14 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Spencer Dawkins" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160706015114.22250.13845.idtracker@ietfa.amsl.com> Date: Tue, 05 Jul 2016 18:51:14 -0700 Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Spencer Dawkins' Yes on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 01:51:14 -0000 Spencer Dawkins has entered the following ballot position for draft-ietf-cdni-metadata-18: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I agree with Ben's Discuss, and several comments from Ben and other ADs, but I'm balloting Yes, assuming those get sorted. I did have a couple of questions, of course. I'm a little bit mystified by this SHOULD: If any metadata not supported by the dCDN is marked as "mandatory-to-enforce", the dCDN SHOULD NOT accept the content redirection request, in order to avoid receiving content requests that it will not be able to satisfy/serve. so, why _would_ a dCDN accept the content redirection request? If this isn't a MUST, it would be nice to explain that - I'm reading this text as "you SHOULD NOT do this unless you like getting unnecessary support calls". This next one is probably my lack of understanding about CDNI implementations, but the document mentions the HTTP HEAD method exactly twice: The HTTP Method in the request defines the operation the request would like to perform. A server implementation of the CDNI metadata interface MUST support the HTTP GET and HEAD methods. and The CDNI metadata interface specified in this document is a read-only interface. Therefore support for other HTTP methods such as PUT, POST, DELETE, etc. is not specified. A server implementation of the CDNI metadata interface MUST reject all methods other than GET and HEAD. The MUST support for GET, and the MUST reject for all methods other than GET and HEAD, make perfect sense with your explanation, but I'm not sure why support for HEAD is a MUST. Is that just so a client can check the HTTP metadata for the CDNI metadata without GETting it? Or is there more to it than that? I won't be surprised if you say "no, nothing more to it than that" ... but if that's the answer, it might be worth saying so. From nobody Tue Jul 5 18:56:06 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3D3A12B062; Tue, 5 Jul 2016 18:55:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.326 X-Spam-Level: X-Spam-Status: No, score=-3.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dZ_63Z8-5E1O; Tue, 5 Jul 2016 18:55:58 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0AEC512B061; Tue, 5 Jul 2016 18:55:58 -0700 (PDT) Received: from [10.0.1.4] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id u661trP7009790 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Tue, 5 Jul 2016 20:55:54 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.4] From: "Ben Campbell" To: "The IESG" Date: Tue, 05 Jul 2016 20:55:53 -0500 Message-ID: <5EAF5D55-CA70-4F99-A281-31CB30952329@nostrum.com> In-Reply-To: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> References: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.4r5234) Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: Re: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 01:56:00 -0000 BTW, the shepherd's email address seems to be incorrect. Thanks! Ben. On 5 Jul 2016, at 18:23, Ben Campbell wrote: > Ben Campbell has entered the following ballot position for > draft-ietf-cdni-metadata-18: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut > this > introductory paragraph, however.) > > > Please refer to > https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > I have two concerns that I would like to see discussed prior to > publication: > > 1) Section 6.2 cites a normative reference to RFC 5861. That's an ISE > stream informational RFC. The text as written seems to normatively > require implementation of that RFC to enable the "caching" feature. > Did > the working group discuss the implications of that? (I also note that > this doesn't appear to have been called out at IETF last call. While > there has been some discussion about relaxing that requirement, I'm > not > sure this is an appropriate place to do so.) > > 2) Section 8.5 contains the "In an environment where any such > protection > is required" language that has been discussed for several CDNI drafts. > But in this particular case, the implication that there may be > environments where such protection is _not_ required seems to conflict > with the multiple occurrences of "MUST use strong encryption/mutual > authentication" in sections 8.1-8.4. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > Substantive Comments: > > - 4.1, example (applies to all examples of referenced objects): Given > the > rather strong guidance to use TLS to move metadata around, shouldn't > the > examples that show referenced objects use HTTPS URLs? > > - 4.1.3, "paths" property: Am I correct to assume that _only_ the > first > match is used? > > - 7.4: If the Auth type registry is initially unpopulated, doesn't > that > make the Auth property useless for the time being? Why even specify it > now? > > - 8.1, 2nd bullet: Could this sort of attack be used to distribute > compromised content (e.g. malware) to end users? > > - 8.3: Couldn't lack of integrity protection enable theft-of-content, > in > addition to DoS? For example, if a MiTM changes the ACLs for a piece > of > content? > > - 11.1, reference to 6706: This is another normative downref that does > not appear to have been called out in the IETF last call announcement. > I > will leave it to the authors and AD to decide if that's okay. > > Editorial Comments and Nits: > > - General: I don't expect action on this in general, but this draft > seems > to have a lot of repeated material, which makes it considerably longer > and harder to digest than necessary for the content. (Note that, for > _normative_ text, such redundancy makes future updates error prone, > even > if the text is consistent now.) > > - 3, first paragraph: I’m not sure what you mean by “aggregated” > in this > context. > > - 3.2, third paragraph, last sentence: The MUST seems unneeded. Please > consider simply saying " ... the dCDN processes the content request in > accordance with the rest of the metadata. > > - 4, paragraph 5: The MUST seems unneeded. There's no choice to make > here; this is simply the way CDNI metadata objects are encoded. > (Recurs > in 6.4, which seems redundant to this section.) > > - 4.1.2, "Note" in definition of Host property: I usually think of > "Note" > to designate parenthetical or "sidebar" content. Please consider > dropping > the "Note" prefix for text that contains 2119 keywords. (There are > multiple occurrences throughout.) > > - 7.1.x Do you expect IANA to do something with these subsections? I > don’t see this sort of detail in the IANA registry. Otherwise, they > seems > to belong in the main body, not the IANA considerations. From nobody Tue Jul 5 18:58:46 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C23B12D567; Tue, 5 Jul 2016 18:58:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UKSgYAXcFVpH; Tue, 5 Jul 2016 18:58:40 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A95212D559; Tue, 5 Jul 2016 18:58:40 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-0c-577c658d6691 Received: from EUSAAHC005.ericsson.se (Unknown_Domain [147.117.188.87]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id A5.E7.03614.D856C775; Wed, 6 Jul 2016 03:57:33 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC005.ericsson.se ([147.117.188.87]) with mapi id 14.03.0294.000; Tue, 5 Jul 2016 21:58:37 -0400 From: Kevin Ma J To: Ben Campbell , The IESG , "'Ben Niven-Jenkins (ben@niven-jenkins.co.uk)'" Thread-Topic: Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) Thread-Index: AQHR1xQ6lPKS6L/Sz0KI75SnPFdbE6AKkdxA Date: Wed, 6 Jul 2016 01:58:32 +0000 Message-ID: References: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> In-Reply-To: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprEIsWRmVeSWpSXmKPExsUyuXRPuG5vak24wfq5khbzO0+zWxxp/cVo 8XT2H1aLy2cmMlq8f72b0WLGn4nMDmweO2fdZfdYsuQnk8esnU9YApijuGxSUnMyy1KL9O0S uDIOL97IVNDiXbH6Uj97A2OPZxcjJ4eEgInE7OXTWCFsMYkL99azgdhCAkcZJdb2hnYxcgHZ yxglJu06AVbEJqAl8fjrXyaQhIhAJ6NE65SlYA6zwCkgZ/cNFpAqYYEEiY8rG4ESHEBViRKb PweAhEUEjCQOTfwJNohFQEXi9IyXzCAlvAK+EkcOSEAsdpRY9eoNWAmngJPElb3vmEBsRqDj vp9aA2YzC4hL3HoynwniaAGJJXvOM0PYohIvH/+DekZJYs7ra2DjmQU0Jdbv0odoVZSY0v2Q HcTmFRCUODnzCcsERrFZSKbOQuiYhaRjFpKOBYwsqxg5SosLcnLTjQw3MQJj6pgEm+MOxr29 nocYBTgYlXh4F3ytDhdiTSwrrsw9xCjBwawkwvsiuSZciDclsbIqtSg/vqg0J7X4EKM0B4uS OK/+S8VwIYH0xJLU7NTUgtQimCwTB6dUA+MWjr4WR/t37g/Nsg7Z3Lh+p2/77sTPRme5Yo1D 3VQeWv084H+W64G+moyV/4TJN5trrUrvbHthFd9Y5JKRfc/1sxNT1hSn6sWqIqKWGhnJlh1f 197++lAj5bibqqra5uOTCleffuZRbdlypXxnALPmxdtBe3gffrTbVbWm2Hy60iHWcs795Uos xRmJhlrMRcWJAKYqoUilAgAA Archived-At: Cc: "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 01:58:43 -0000 SGkgQmVuLA0KDQogIFRoYW5rcyBmb3IgdGhlIHJldmlldy4NCg0KICBXcnQgeW91ciBmaXJzdCBk aXNjdXNzIGNvbW1lbnQ6IEkgZG8gbm90IHJlY2FsbCBhIGRpc2N1c3Npb24sIGJ1dCBJIHRoaW5r IEJlbiAoTml2ZW4tSmVua2lucykgd291bGQgYmUgYmV0dGVyIGVxdWlwcGVkIHRvIHNwZWFrIGFi b3V0IHRoZSBSRkM1ODYxIHJlZmVyZW5jZS4NCg0KICBXcnQgeW91ciBzZWNvbmQgZGlzY3VzcyBj b21tZW50OiBXZSBoYXZlIHVwZGF0ZWQgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHRleHQg dG8gbWF0Y2ggdGhlIG90aGVyIENETkkgZHJhZnRzOyB0aGUgZm9sbG93aW5nIHdpbGwgYmUgaW4g dGhlIG5leHQgcmV2aXNpb246DQoNCiAgICAgICAgVExTIE1VU1QgYmUgdXNlZCBieSB0aGUgc2Vy dmVyLXNpZGUgKGRDRE4pIGFuZCB0aGUNCiAgICAgICAgY2xpZW50LXNpZGUgKHVDRE4pIG9mIHRo ZSBDRE5JIG1ldGFkYXRhIGludGVyZmFjZSwgaW5jbHVkaW5nDQogICAgICAgIGF1dGhlbnRpY2F0 aW9uIG9mIHRoZSByZW1vdGUgZW5kLCB1bmxlc3MgYWx0ZXJuYXRlIG1ldGhvZHMgYXJlDQogICAg ICAgIHVzZWQgZm9yIGVuc3VyaW5nIHRoZSBzZWN1cml0eSBvZiB0aGUgaW5mb3JtYXRpb24gaW4g dGhlIENETkkNCiAgICAgICAgbWV0YWRhdGEgaW50ZXJmYWNlIHJlcXVlc3RzIGFuZCByZXNwb25z ZXMgKHN1Y2ggYXMgc2V0dGluZyB1cA0KICAgICAgICBhbiBJUHNlYyB0dW5uZWwgYmV0d2VlbiB0 aGUgdHdvIENETnMgb3IgdXNpbmcgYSBwaHlzaWNhbGx5DQogICAgICAgIHNlY3VyZWQgaW50ZXJu YWwgbmV0d29yayBiZXR3ZWVuIHR3byBDRE5zIHRoYXQgYXJlIG93bmVkIGJ5DQogICAgICAgIHRo ZSBzYW1lIGNvcnBvcmF0ZSBlbnRpdHkpLg0KDQogIFJlc3BvbnNlcyB0byB5b3VyIG90aGVyIGNv bW1lbnRzIGlubGluZS4NCg0KdGhhbnghDQogICANCi0tICBLZXZpbiBKLiBNYQ0KDQo+IC0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEJlbiBDYW1wYmVsbCBbbWFpbHRvOmJlbkBu b3N0cnVtLmNvbV0NCj4gU2VudDogVHVlc2RheSwgSnVseSAwNSwgMjAxNiA3OjIzIFBNDQo+IFRv OiBUaGUgSUVTRw0KPiBDYzogZHJhZnQtaWV0Zi1jZG5pLW1ldGFkYXRhQGlldGYub3JnOyBjZG5p LWNoYWlyc0BpZXRmLm9yZzsNCj4gZmxlZmF1Y2hAY2lzY28uY29tOyBjZG5pQGlldGYub3JnDQo+ IFN1YmplY3Q6IEJlbiBDYW1wYmVsbCdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1jZG5pLW1ldGFk YXRhLTE4OiAod2l0aA0KPiBESVNDVVNTIGFuZCBDT01NRU5UKQ0KPiANCj4gQmVuIENhbXBiZWxs IGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KPiBkcmFmdC1p ZXRmLWNkbmktbWV0YWRhdGEtMTg6IERpc2N1c3MNCj4gDQo+IFdoZW4gcmVzcG9uZGluZywgcGxl YXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvIGFsbA0KPiBlbWFp bCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0 byBjdXQgdGhpcw0KPiBpbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikNCj4gDQo+IA0K PiBQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlz Y3Vzcy1jcml0ZXJpYS5odG1sDQo+IGZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElT Q1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuDQo+IA0KPiANCj4gVGhlIGRvY3VtZW50LCBhbG9u ZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJlOg0KPiBodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktbWV0YWRhdGEvDQo+ IA0KPiANCj4gDQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gRElTQ1VTUzoNCj4gLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0K PiANCj4gSSBoYXZlIHR3byBjb25jZXJucyB0aGF0IEkgd291bGQgbGlrZSB0byBzZWUgZGlzY3Vz c2VkIHByaW9yIHRvDQo+IHB1YmxpY2F0aW9uOg0KPiANCj4gMSkgU2VjdGlvbiA2LjIgY2l0ZXMg YSBub3JtYXRpdmUgcmVmZXJlbmNlIHRvIFJGQyA1ODYxLiBUaGF0J3MgYW4gSVNFDQo+IHN0cmVh bSBpbmZvcm1hdGlvbmFsIFJGQy4gVGhlIHRleHQgYXMgd3JpdHRlbiBzZWVtcyB0byBub3JtYXRp dmVseQ0KPiByZXF1aXJlIGltcGxlbWVudGF0aW9uIG9mIHRoYXQgUkZDIHRvIGVuYWJsZSB0aGUg ImNhY2hpbmciIGZlYXR1cmUuIERpZA0KPiB0aGUgd29ya2luZyBncm91cCBkaXNjdXNzIHRoZSBp bXBsaWNhdGlvbnMgb2YgdGhhdD8gKEkgYWxzbyBub3RlIHRoYXQNCj4gdGhpcyBkb2Vzbid0IGFw cGVhciB0byBoYXZlIGJlZW4gY2FsbGVkIG91dCBhdCBJRVRGIGxhc3QgY2FsbC4gV2hpbGUNCj4g dGhlcmUgaGFzIGJlZW4gc29tZSBkaXNjdXNzaW9uIGFib3V0IHJlbGF4aW5nIHRoYXQgcmVxdWly ZW1lbnQsIEknbSBub3QNCj4gc3VyZSB0aGlzIGlzIGFuIGFwcHJvcHJpYXRlIHBsYWNlIHRvIGRv IHNvLikNCj4gDQo+IDIpIFNlY3Rpb24gOC41IGNvbnRhaW5zIHRoZSAiSW4gYW4gZW52aXJvbm1l bnQgd2hlcmUgYW55IHN1Y2ggcHJvdGVjdGlvbg0KPiBpcyByZXF1aXJlZCIgbGFuZ3VhZ2UgdGhh dCBoYXMgYmVlbiBkaXNjdXNzZWQgZm9yIHNldmVyYWwgQ0ROSSBkcmFmdHMuDQo+IEJ1dCBpbiB0 aGlzIHBhcnRpY3VsYXIgY2FzZSwgdGhlIGltcGxpY2F0aW9uIHRoYXQgdGhlcmUgbWF5IGJlDQo+ IGVudmlyb25tZW50cyB3aGVyZSBzdWNoIHByb3RlY3Rpb24gaXMgX25vdF8gcmVxdWlyZWQgc2Vl bXMgdG8gY29uZmxpY3QNCj4gd2l0aCB0aGUgbXVsdGlwbGUgb2NjdXJyZW5jZXMgb2YgIk1VU1Qg dXNlIHN0cm9uZyBlbmNyeXB0aW9uL211dHVhbA0KPiBhdXRoZW50aWNhdGlvbiIgaW4gc2VjdGlv bnMgOC4xLTguNC4NCj4gDQo+IA0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IENPTU1FTlQ6DQo+IC0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCj4gDQo+IFN1YnN0YW50aXZlIENvbW1lbnRzOg0KPiANCj4gLSA0LjEsIGV4YW1w bGUgKGFwcGxpZXMgdG8gYWxsIGV4YW1wbGVzIG9mIHJlZmVyZW5jZWQgb2JqZWN0cyk6IEdpdmVu IHRoZQ0KPiByYXRoZXIgc3Ryb25nIGd1aWRhbmNlIHRvIHVzZSBUTFMgdG8gbW92ZSBtZXRhZGF0 YSBhcm91bmQsIHNob3VsZG4ndCB0aGUNCj4gZXhhbXBsZXMgdGhhdCBzaG93IHJlZmVyZW5jZWQg b2JqZWN0cyB1c2UgSFRUUFMgVVJMcz8NCg0KZmFpciBwb2ludDsgd2lsbCB1cGRhdGUgdGhlIGV4 YW1wbGVzDQoNCj4gLSA0LjEuMywgInBhdGhzIiBwcm9wZXJ0eTogQW0gSSBjb3JyZWN0IHRvIGFz c3VtZSB0aGF0IF9vbmx5XyB0aGUgZmlyc3QNCj4gbWF0Y2ggaXMgdXNlZD8NCg0KY29ycmVjdDsg d2lsbCBjbGFyaWZ5IHRoZSB0ZXh0DQoNCj4gLSA3LjQ6IElmIHRoZSBBdXRoIHR5cGUgcmVnaXN0 cnkgaXMgaW5pdGlhbGx5IHVucG9wdWxhdGVkLCBkb2Vzbid0IHRoYXQNCj4gbWFrZSB0aGUgQXV0 aCBwcm9wZXJ0eSB1c2VsZXNzIGZvciB0aGUgdGltZSBiZWluZz8gV2h5IGV2ZW4gc3BlY2lmeSBp dA0KPiBub3c/DQoNClRoZSBBdXRoIHR5cGUgaXMgdXNlZCBieSB0aGUgU291cmNlIGFuZCBEZWxp dmVyeUF1dGhvcml6YXRpb24gbWV0YWRhdGEgb2JqZWN0cywgYW5kIHdlIHdhbnRlZCBib3RoIG9m IHRob3NlIHRvIHVzZSB0aGUgc2FtZSBzZXQgb2YgQXV0aCBvYmplY3RzLCBzbyBpdCBzZWVtZWQg bGlrZSBhIGdvb2QgaWRlYSB0byBnbyBhaGVhZCBhbmQgYWRkIGl0IHRvIHRoZSBkYXRhIG1vZGVs LiAgVGhlIFVSSSBTaWduaW5nIGRyYWZ0IGlzIGluIFdHTEMgYW5kIHdpbGwgcmVnaXN0ZXIgdGhl IFVSSSBTaWduaW5nIEF1dGggdHlwZS4gIEl0IHNlZW1lZCByZWFzb25hYmxlIGFuZCBtb3JlIGNl bnRyYWxpemVkIHRvIGp1c3QgbGV0IG1ldGFkYXRhIGNyZWF0ZSB0aGUgcmVnaXN0cnksIHdpdGgg VVJJIFNpZ25pbmcgY29taW5nIGluIGNsb3NlIGJlaGluZCB0byByZWdpc3RlciB0aGUgZmlyc3Qg dHlwZS4NCiANCj4gLSA4LjEsIDJuZCBidWxsZXQ6IENvdWxkIHRoaXMgc29ydCBvZiBhdHRhY2sg YmUgdXNlZCB0byBkaXN0cmlidXRlDQo+IGNvbXByb21pc2VkIGNvbnRlbnQgKGUuZy4gbWFsd2Fy ZSkgdG8gIGVuZCB1c2Vycz8NCg0KWWVzLiAgSSB3YXMgdGhpbmtpbmcgcmlja3JvbGxpbmcsIGJ1 dCBtYWx3YXJlIGlzIGFyZ3VhYmx5IHdvcnNlLiAgOykgIFdlIGNhbiBleHBhbmQgb24gdGhlIHNw ZWNpZmljIHR5cGVzIG9mIHRocmVhdHMuDQoNCj4gLSA4LjM6IENvdWxkbid0IGxhY2sgb2YgaW50 ZWdyaXR5IHByb3RlY3Rpb24gZW5hYmxlIHRoZWZ0LW9mLWNvbnRlbnQsIGluDQo+IGFkZGl0aW9u IHRvIERvUz8gRm9yIGV4YW1wbGUsIGlmIGEgTWlUTSBjaGFuZ2VzIHRoZSBBQ0xzIGZvciBhIHBp ZWNlIG9mDQo+IGNvbnRlbnQ/DQoNClBvc3NpYmx5LiAgTWlyamEgcG9zZWQgdGhpcyBwb2ludCBh cyB3ZWxsLiAgV2Ugd2lsbCBleHBhbmQgdGhlIG9uIHRob3NlIGFkZGl0aW9uYWwgdGhyZWF0cw0K DQo+IC0gMTEuMSwgcmVmZXJlbmNlIHRvIDY3MDY6IFRoaXMgaXMgYW5vdGhlciBub3JtYXRpdmUg ZG93bnJlZiB0aGF0IGRvZXMNCj4gbm90IGFwcGVhciB0byBoYXZlIGJlZW4gY2FsbGVkIG91dCBp biB0aGUgSUVURiBsYXN0IGNhbGwgYW5ub3VuY2VtZW50LiBJDQo+IHdpbGwgbGVhdmUgaXQgdG8g dGhlIGF1dGhvcnMgYW5kIEFEIHRvIGRlY2lkZSBpZiB0aGF0J3Mgb2theS4NCg0KQXNzdW1pbmcg eW91IG1lYW4gNjcwNzogSXQgd2FzIHN1Z2dlc3RlZCBieSBvdXIgZm9ybWVyIEFEIHRoYXQgZHJh ZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uIHNob3VsZCBoYXZlIGEgbm9ybWF0aXZlIGRvd25yZWYg dG8gNjcwNywgYmVjYXVzZSBvZiB0aGUgdGVybWlub2xvZ3kgcmVmZXJlbmNlLiAgTWV0YWRhdGEg aGFzIHRoZSBzYW1lIHRlcm1pbm9sb2d5IHJlZmVyZW5jZSwgc28gd2UgYXNzdW1lZCB0aGUgc2Ft ZSBkb3ducmVmIHdvdWxkIGJlIGFwcGxpY2FibGUgdG8gdGhpcyBkcmFmdC4NCg0KPiBFZGl0b3Jp YWwgQ29tbWVudHMgYW5kIE5pdHM6DQo+IA0KPiAtIEdlbmVyYWw6IEkgZG9uJ3QgZXhwZWN0IGFj dGlvbiBvbiB0aGlzIGluIGdlbmVyYWwsIGJ1dCB0aGlzIGRyYWZ0IHNlZW1zDQo+IHRvIGhhdmUg YSBsb3Qgb2YgcmVwZWF0ZWQgbWF0ZXJpYWwsIHdoaWNoIG1ha2VzIGl0IGNvbnNpZGVyYWJseSBs b25nZXINCj4gYW5kIGhhcmRlciB0byBkaWdlc3QgdGhhbiBuZWNlc3NhcnkgZm9yIHRoZSBjb250 ZW50LiAoTm90ZSB0aGF0LCBmb3INCj4gX25vcm1hdGl2ZV8gdGV4dCwgc3VjaCByZWR1bmRhbmN5 IG1ha2VzIGZ1dHVyZSB1cGRhdGVzIGVycm9yIHByb25lLCBldmVuDQo+IGlmIHRoZSB0ZXh0IGlz IGNvbnNpc3RlbnQgbm93LikNCj4gDQo+IC0gMywgZmlyc3QgcGFyYWdyYXBoOiBJ4oCZbSBub3Qg c3VyZSB3aGF0IHlvdSBtZWFuIGJ5IOKAnGFnZ3JlZ2F0ZWTigJ0gaW4gdGhpcw0KPiBjb250ZXh0 Lg0KDQoiZ3JvdXBlZCIgbWlnaHQgYmUgYSBiZXR0ZXIgdGVybT8NCg0KPiAtIDMuMiwgdGhpcmQg cGFyYWdyYXBoLCBsYXN0IHNlbnRlbmNlOiBUaGUgTVVTVCBzZWVtcyB1bm5lZWRlZC4gUGxlYXNl DQo+IGNvbnNpZGVyIHNpbXBseSBzYXlpbmcgIiAuLi4gdGhlIGRDRE4gcHJvY2Vzc2VzIHRoZSBj b250ZW50IHJlcXVlc3QgaW4NCj4gYWNjb3JkYW5jZSB3aXRoIHRoZSByZXN0IG9mIHRoZSBtZXRh ZGF0YS4NCg0KQXNzdW1pbmcgeW91IG1lYW4gc2Vjb25kIHBhcmFncmFwaDogd291bGQgYSAiTUFZ IiB3b3JrIGJldHRlcj8NCg0KPiAtIDQsIHBhcmFncmFwaCA1OiBUaGUgTVVTVCBzZWVtcyB1bm5l ZWRlZC4gVGhlcmUncyBubyBjaG9pY2UgdG8gbWFrZQ0KPiBoZXJlOyAgdGhpcyBpcyBzaW1wbHkg dGhlIHdheSBDRE5JIG1ldGFkYXRhIG9iamVjdHMgYXJlIGVuY29kZWQuIChSZWN1cnMNCj4gaW4g Ni40LCB3aGljaCBzZWVtcyByZWR1bmRhbnQgdG8gdGhpcyBzZWN0aW9uLikNCg0KSSdsbCBkZWZl ciB0byBCZW4gTkogb24gdGhpcyBvbmUgYXMgd2VsbC4NCg0KPiAtIDQuMS4yLCAiTm90ZSIgaW4g ZGVmaW5pdGlvbiBvZiBIb3N0IHByb3BlcnR5OiBJIHVzdWFsbHkgdGhpbmsgb2YgIk5vdGUiDQo+ IHRvIGRlc2lnbmF0ZSBwYXJlbnRoZXRpY2FsIG9yICJzaWRlYmFyIiBjb250ZW50LiBQbGVhc2Ug Y29uc2lkZXIgZHJvcHBpbmcNCj4gdGhlICJOb3RlIiBwcmVmaXggZm9yIHRleHQgdGhhdCBjb250 YWlucyAyMTE5IGtleXdvcmRzLiAoVGhlcmUgYXJlDQo+IG11bHRpcGxlIG9jY3VycmVuY2VzIHRo cm91Z2hvdXQuKQ0KDQp1bmRlcnN0b29kOyB3aWxsIHJlbW92ZSB0aGUgIk5vdGUiDQoNCj4gLSA3 LjEueCBEbyB5b3UgZXhwZWN0IElBTkEgdG8gZG8gc29tZXRoaW5nIHdpdGggdGhlc2Ugc3Vic2Vj dGlvbnM/IEkNCj4gZG9u4oCZdCBzZWUgdGhpcyBzb3J0IG9mIGRldGFpbCBpbiB0aGUgSUFOQSBy ZWdpc3RyeS4gT3RoZXJ3aXNlLCB0aGV5IHNlZW1zDQo+IHRvIGJlbG9uZyBpbiB0aGUgbWFpbiBi b2R5LCBub3QgdGhlIElBTkEgY29uc2lkZXJhdGlvbnMuDQoNClJGQzc3MzYgYXNrcyB0aGF0IHRo ZSBkZXNpZ25hdGVkIGV4cGVydCB2ZXJpZnkgdGhlIHB1cnBvc2UvaW50ZXJmYWNlL2VuY29kaW5n IGZvciBlYWNoIHB0eXBlIHJlZ2lzdHJhdGlvbi4gIFdlIGhhdmUganVzdCBiZWVuIHB1dHRpbmcg dGhhdCBpbmZvcm1hdGlvbiBpbiB0aGUgSUFOQSBzZWN0aW9uIHRvIGhhdmUgaXQgYWxsIGluIG9u ZSBwbGFjZSBmb3IgdGhlIGV4cGVydCByZXZpZXcuDQoNCnRoYW54IQ0KDQotLSAgS2V2aW4gSi4g TWENCg== From nobody Tue Jul 5 19:16:10 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7E8812D182 for ; Tue, 5 Jul 2016 19:16:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.326 X-Spam-Level: X-Spam-Status: No, score=-3.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VAz5y6AtUgtF for ; Tue, 5 Jul 2016 19:16:08 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01E0B12B038 for ; Tue, 5 Jul 2016 19:16:07 -0700 (PDT) Received: from [10.0.1.4] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id u662G6o0011472 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Tue, 5 Jul 2016 21:16:07 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.4] From: "Ben Campbell" To: "Kevin Ma J" Date: Tue, 05 Jul 2016 21:16:06 -0500 Message-ID: In-Reply-To: References: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.4r5234) Archived-At: Cc: "cdni-chairs@ietf.org" , The IESG , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" Subject: Re: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 02:16:10 -0000 Thanks for the response. Some response-responses inline. I removed stuff that seems to be resolved. Thanks! Ben. On 5 Jul 2016, at 20:58, Kevin Ma J wrote: > Hi Ben, > > Thanks for the review. > > Wrt your first discuss comment: I do not recall a discussion, but I > think Ben (Niven-Jenkins) would be better equipped to speak about the > RFC5861 reference. Okay. > > Wrt your second discuss comment: We have updated the security > considerations text to match the other CDNI drafts; the following will > be in the next revision: > > TLS MUST be used by the server-side (dCDN) and the > client-side (uCDN) of the CDNI metadata interface, including > authentication of the remote end, unless alternate methods are > used for ensuring the security of the information in the CDNI > metadata interface requests and responses (such as setting up > an IPsec tunnel between the two CDNs or using a physically > secured internal network between two CDNs that are owned by > the same corporate entity). That text would address my concern. [...] >> - 7.4: If the Auth type registry is initially unpopulated, doesn't >> that >> make the Auth property useless for the time being? Why even specify >> it >> now? > > The Auth type is used by the Source and DeliveryAuthorization metadata > objects, and we wanted both of those to use the same set of Auth > objects, so it seemed like a good idea to go ahead and add it to the > data model. The URI Signing draft is in WGLC and will register the > URI Signing Auth type. It seemed reasonable and more centralized to > just let metadata create the registry, with URI Signing coming in > close behind to register the first type. > Okay, that seems to make sense. >> - 8.1, 2nd bullet: Could this sort of attack be used to distribute >> compromised content (e.g. malware) to end users? > > Yes. I was thinking rickrolling, but malware is arguably worse. ;) > We can expand on the specific types of threats. > Hmm. Mass rickrolling might be a feature :-) > >> - 11.1, reference to 6706: This is another normative downref that >> does >> not appear to have been called out in the IETF last call >> announcement. I >> will leave it to the authors and AD to decide if that's okay. > > Assuming you mean 6707: Oops, yes. > It was suggested by our former AD that draft-ietf-cdni-redirection > should have a normative downref to 6707, because of the terminology > reference. Metadata has the same terminology reference, so we assumed > the same downref would be applicable to this draft. I won't hold up things over this one--just do the right thing, whatever that is. :-) > >> Editorial Comments and Nits: >> >> - General: I don't expect action on this in general, but this draft >> seems >> to have a lot of repeated material, which makes it considerably >> longer >> and harder to digest than necessary for the content. (Note that, for >> _normative_ text, such redundancy makes future updates error prone, >> even >> if the text is consistent now.) >> >> - 3, first paragraph: I’m not sure what you mean by >> “aggregated” in this >> context. > > "grouped" might be a better term? Okay. > >> - 3.2, third paragraph, last sentence: The MUST seems unneeded. >> Please >> consider simply saying " ... the dCDN processes the content request >> in >> accordance with the rest of the metadata. > > Assuming you mean second paragraph: would a "MAY" work better? How about "processes" :-) (It's up to you; this was not a blocking comment.) > >> - 4, paragraph 5: The MUST seems unneeded. There's no choice to make >> here; this is simply the way CDNI metadata objects are encoded. >> (Recurs >> in 6.4, which seems redundant to this section.) > > I'll defer to Ben NJ on this one as well. Okay. > understood; will remove the "Note" > >> - 7.1.x Do you expect IANA to do something with these subsections? I >> don’t see this sort of detail in the IANA registry. Otherwise, they >> seems >> to belong in the main body, not the IANA considerations. > > RFC7736 asks that the designated expert verify the > purpose/interface/encoding for each ptype registration. We have just > been putting that information in the IANA section to have it all in > one place for the expert review. Okay. From nobody Tue Jul 5 23:20:57 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DBD012B05C; Tue, 5 Jul 2016 23:20:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=JAcw5yeR; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=eywifRY0 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VujgLocZDA_n; Tue, 5 Jul 2016 23:20:48 -0700 (PDT) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0623612B03D; Tue, 5 Jul 2016 23:20:48 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 4D4C120299; Wed, 6 Jul 2016 02:20:47 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Wed, 06 Jul 2016 02:20:47 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=c8i7uqLzNJDMg+7X4sC/Ix++LL0=; b=JAcw5y eRx671YOeLM4gS45LUZCtAo0fIXHr1SYd1P5DYyDMZnppx2VNS/ib0vszjxCSPyz iJNDjPUEETx2/VEvuyFZh2ykFl4itHX5I5QnngOalb3vsBRO86OJxUixB6AWsHni yrJ7y3p0tcLYJHV3WelF/94AJt2dI2kFDRg6g= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=c8i7uqLzNJDMg+7 X4sC/Ix++LL0=; b=eywifRY0h3KQXDglmUKGfn7cY4eAgzCVQWRSrmz5JaooTfH im1k7aWGl91thwr9lRKoFTM5KHMjAyvvzW5AFew/kfitluNHT4TBUztlz7KF0k7g QtVVtWMO57pNWtHvVLfUARcrpxeS1106lZ11eNKwyP+ruxbuBqzCKcS1+KkI= X-Sasl-enc: 1R3tFeKf7tVOFnp+fl/xI49S0KQZX1kGcjO8xzPBDHIH 1467786046 Received: from [10.6.96.199] (unknown [85.255.235.121]) by mail.messagingengine.com (Postfix) with ESMTPA id C6CFFCCDA7; Wed, 6 Jul 2016 02:20:46 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPhone Mail (13F69) In-Reply-To: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> Date: Wed, 6 Jul 2016 07:29:43 +0100 Content-Transfer-Encoding: 7bit Message-Id: References: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> To: Ben Campbell Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, The IESG , draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: Re: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 06:20:49 -0000 Hi Ben, > On 6 Jul 2016, at 00:23, Ben Campbell wrote: > > 1) Section 6.2 cites a normative reference to RFC 5861. That's an ISE > stream informational RFC. The text as written seems to normatively > require implementation of that RFC to enable the "caching" feature. Did > the working group discuss the implications of that? (I also note that > this doesn't appear to have been called out at IETF last call. While > there has been some discussion about relaxing that requirement, I'm not > sure this is an appropriate place to do so.) Sigh. I will need to re-LC the document to address any DownRefs. From nobody Wed Jul 6 01:03:07 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA37712D741 for ; Wed, 6 Jul 2016 01:03:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mvjRNfe72DXu for ; Wed, 6 Jul 2016 01:03:03 -0700 (PDT) Received: from mail-wm0-x22c.google.com (mail-wm0-x22c.google.com [IPv6:2a00:1450:400c:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7453612D74A for ; Wed, 6 Jul 2016 01:02:33 -0700 (PDT) Received: by mail-wm0-x22c.google.com with SMTP id f126so163617742wma.1 for ; Wed, 06 Jul 2016 01:02:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:message-id:mime-version:subject:date:references:to:in-reply-to; bh=+nyB5Y4w9qnDSGNirYPVB7514HmIER/Zjz62aH8s7mQ=; b=N31+L4V5vb9mvrd1ObZdbt9KkmxZjWkX/w21B7QEONb/VAsn6DwPBuo+YCy/bQsHam zvPzAedh2ONYZFU0cDf+DCsBzmVkqNny9Xdq4P8Dv1HFWaG9hThTLLxY+7CFfUTbJw1/ vmB50/tA1YWyJzFnTPOTFx11pTOtznEj0fAKoyr39lvUMQ+V19pXV5CYfZ07mOouZ32v 6ZRUM0OGFBJs1N+tMFe3V5ffmOcsbkpfzDqgdBkhRp9QRS3lazdMBVEYX/5YjB4KvPqR mcOoiAZxgoIEuzq+VndJlj7AWhgiGWjzJFziSx73OCn9EUn9hU3JBwQRNjr+fq6svex+ A6eQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:message-id:mime-version:subject:date :references:to:in-reply-to; bh=+nyB5Y4w9qnDSGNirYPVB7514HmIER/Zjz62aH8s7mQ=; b=TPuYnbQw5x0Mtm/RZVAZhcOmzmEyVtcoGyfhr0fZqmsmfVSyqmGj4F/RjD06oJfKBh sKVRTDX9/CalGt6I7P2m/uGSMk1M76aY96nzRaSWw6z1Xfl/2VeCn8NtdGOZG6puun7W t+pmUqwMo+8IsDz1q0To9iG7pzEyC36CGHEqSIuKUeXvJsf7A+ble3O0lWnEvXlLcPMa vMrjmud8aHhmGjxPFbo50PQgZlBSSwFbEbUDwbV18LdMvkxOstKTr3x/8XxDZ7G+SQbS Qvr7NrkMyWTELN3QeyowP26OJpydRnP/57V87/u8IienHP3urGXqkwrsipDD1mWRTP5o Sc1g== X-Gm-Message-State: ALyK8tL7XQROh21/K8gOTROzdE7y6Ft1nUXG92NBFIGwZVwYyB9Xms+oTPnBmdx8MwIPJQ== X-Received: by 10.194.8.38 with SMTP id o6mr19071176wja.13.1467792151722; Wed, 06 Jul 2016 01:02:31 -0700 (PDT) Received: from [192.168.1.21] (125.216.113.78.rev.sfr.net. [78.113.216.125]) by smtp.gmail.com with ESMTPSA id p191sm1578393wme.7.2016.07.06.01.02.30 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 06 Jul 2016 01:02:31 -0700 (PDT) From: Francois Le Faucheur Content-Type: multipart/alternative; boundary="Apple-Mail=_065FE366-88FE-4BAD-8D7F-32CF43394BF8" Message-Id: Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Date: Wed, 6 Jul 2016 10:02:29 +0200 References: <90041886-D253-413F-B006-50BDA558EB12@tno.nl> To: "cdni@ietf.org" In-Reply-To: X-Mailer: Apple Mail (2.3124) Archived-At: Subject: Re: [CDNi] New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 08:03:06 -0000 --Apple-Mail=_065FE366-88FE-4BAD-8D7F-32CF43394BF8 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hello, As an individual, I am in favour of adopting = draft-brandenburg-cdni-uri-signing-for-has as a Working Group document. This is based on the assumption that = https://datatracker.ietf.org/ipr/2806/ replaces = https://datatracker.ietf.org/ipr/2652/. Cheers Francois > On 11 Jun 2016, at 20:56, Kevin Ma J wrote: >=20 > Hi All, > =20 > (As a chair) Per the decision in BA = (https://www.ietf.org/proceedings/95/minutes/minutes-95-cdni = ), we = deferred discussion of whether to (re)adopt = draft-brandenburg-cdni-uri-signing-for-has as a WG item. For historical = context, in Prague, we decided to separate the IPR encumbered portion of = URI signing from the WG draft = (https://www.ietf.org/proceedings/93/minutes/minutes-93-cdni = ). > =20 > There is a new IPR disclosure = (https://datatracker.ietf.org/ipr/2806/ = ) available that folks should = take a look at. Note: I'm not sure if it should have been an update to = the previous disclosure (https://datatracker.ietf.org/ipr/2652/ = ) or whether that makes a = difference? Alexey? > =20 > If folks have thoughts about whether or not we should (re)adopt the = HAS URI signing work, in light of the new IPR disclosure, please send = your comments to the list. > =20 > thanx! > =20 > -- Kevin J. Ma > =20 > From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf Of Brandenburg, R. = (Ray) van > Sent: Friday, June 10, 2016 11:34 AM > To: cdni@ietf.org > Subject: [CDNi] New version (and IPR statement) of = draft-brandenburg-cdni-uri-signing-for-has > =20 > Hi all, > =20 > As you might have seen, I=E2=80=99ve recently uploaded a new version = of draft-brandenburg-cdni-uri-signing-for-has (-03). > =20 > = https://tools.ietf.org/html/draft-brandenburg-cdni-uri-signing-for-has-03 = > =20 > What is important to note is that KPN has updated it=E2=80=99s IPR = statement on this document to be in line with the IPR statements that = have been filed on other CDNI documents (i.e. =E2=80=9CRoyalty-Free, = Reasonable and Non-Discriminatory License to All Implementers=E2=80=9D). = Hopefully this clears up the lengthy IPR discussion we=E2=80=99ve been = having around this document so that we can focus on the technical = aspects again. > =20 > Looking forward to your feedback, > Ray > =20 > This message may contain information that is not intended for you. If = you are not the addressee or if this message was sent to you by mistake, = you are requested to inform the sender and delete the message. TNO = accepts no liability for the content of this e-mail, for the manner in = which you use it and for damage of any kind resulting from the risks = inherent to the electronic transmission of messages. >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni --Apple-Mail=_065FE366-88FE-4BAD-8D7F-32CF43394BF8 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hello,

As = an individual, I am in favour of adopting draft-brandenburg-cdni-uri-signing-for-has = as a Working Group document.

This is based on the assumption that https://datatracker.ietf.org/ipr/2806/ replaces https://datatracker.ietf.org/ipr/2652/.

Cheers

Francois

On 11 Jun 2016, at 20:56, Kevin Ma J <kevin.j.ma@ericsson.com> wrote:

Hi All,
 
  (As a chair) Per the decision in BA (https://www.ietf.org/proceedings/95/minutes/minutes-95-cdni= ), we deferred discussion of whether to (re)adopt = draft-brandenburg-cdni-uri-signing-for-has as a WG item.  For = historical context, in Prague, we decided to separate the IPR encumbered = portion of URI signing from the WG draft (https://www.ietf.org/proceedings/93/minutes/minutes-93-cdni= ).
 
  There is a new IPR disclosure (https://datatracker.ietf.org/ipr/2806/) available that = folks should take a look at.  Note: I'm not sure if it should have = been an update to the previous disclosure (https://datatracker.ietf.org/ipr/2652/) or whether that = makes a difference?  Alexey?
 
  If folks have thoughts about whether or not we should = (re)adopt the HAS URI signing work, in light of the new IPR disclosure, = please send your comments to the list.
 
thanx!
 
--  Kevin J. Ma
 
From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf = Of Brandenburg, R. = (Ray) van
Sent: Friday, June 10, 2016 11:34 = AM
To: cdni@ietf.org
Subject: [CDNi] New version (and IPR = statement) of draft-brandenburg-cdni-uri-signing-for-has
 
Hi all,
 
As you might have = seen, I=E2=80=99ve recently uploaded a new version of = draft-brandenburg-cdni-uri-signing-for-has (-03).
 
 
What is important = to note is that KPN has updated it=E2=80=99s IPR statement on this = document to be in line with the IPR statements that have been filed on = other CDNI documents (i.e. =E2=80=9CRoyalty-Free, Reasonable and = Non-Discriminatory License to All Implementers=E2=80=9D). Hopefully this = clears up the lengthy IPR discussion we=E2=80=99ve been having around = this document so that we can focus on the technical aspects again.
 
Looking forward = to your feedback,
Ray
 

This message may contain information that is not = intended for you. If you are not the addressee or if this message was = sent to you by mistake, you are requested to inform the sender and = delete the message. TNO accepts no liability for the content of this = e-mail, for the manner in which you use it and for damage of any kind = resulting from the risks inherent to the electronic transmission of = messages.

_______________________________________________
CDNi mailing list
CDNi@ietf.org
https://www.ietf.org/mailman/listinfo/cdni

= --Apple-Mail=_065FE366-88FE-4BAD-8D7F-32CF43394BF8-- From nobody Wed Jul 6 05:10:30 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CDFB12D5C2; Wed, 6 Jul 2016 05:10:28 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160706121028.7876.62515.idtracker@ietfa.amsl.com> Date: Wed, 06 Jul 2016 05:10:28 -0700 Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 12:10:28 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-cdni-metadata-18: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- (1) I don't get the model for telling a dCDN that the user agent has to have authenticated or that some authorization is needed before content is to be delivered. Can you explain? For example, neither 4.2.5 nor 4.2.7 tell me how to do anything but allow open-access, and the relevant IANA registry (section 7.4) is empty, so I'm puzzled. (2) 6.5: I think you're missing a MUST in the list here. I'd suggest something like: "5. Describe the security and privacy (for the person/user-agent, not only xCDN) consequences of the extension." I'm assuming that we agree that it'd be a bad idea if e.g. some extension were defined that allowed a uCDN tell a dCDN to try to track and report on all of a user's activities. (Or at least, that'd need to be documented/justified.) ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - general: I agree with Ben's discuss about use of TLS. I also wonder if IPsec is really going to be used here. And even if so, you might be better off to say that TLS with mutual-auth SHOULD be used in all cases. - general: Don't you need some guidance for the dCDN to say when to stop following (what might be circular) links? - general: I think it'd be better if the examples given used https in all cases, assuming we do think that'd be better. And if it'd not be better, saying why would I think be good. - 1.2, last para: I don't get what this is saying. What additional things need specifying? If all you mean is that the dCDN and uCDN need to be able to setup TLS sessions, and hence need to agree on what CAs and ciphersuites to use, then maybe just say that. (You do already refer to RFC7525 so most of that is covered there I think.) - 4.1.1: I don't think I-JSON requires that order be preserved, but you seem to need that here, e.g. if a tCDN decodes and re-encodes, or if a uCDN round-trips a data structure. Is there a missing "MUST preserve order" somewhere? - 4.1.x, 4.2.x, 4.3.x: I wonder if the specification is a bit too loose in places here, e.g. what does "$$" mean in 4.1.5 and why is that special? In the same section I also wasn't clear if "/movies/" is the same as "/movies/*" or not, nor if you consider that "/movies/*" does or doesn't match "/movies/1/2/3". Isn't a reference needed in 4.3.4? I'd guess that a lot of this is close enough that implementations will likely get a lot, but not all, of this right, and that that might lead to corner-cases where interop isn't so good. Improving that would seem like a good idea, but perhaps it's better to wait and see what deployments do and then tidy this up? Not sure. In reading I spotted a number of places where such things occurred to me (but didn't write them all down, sorry;-). - 6.8: I didn't follow this, sorry;-) I assume it's considered clear enough for implementers, so feel free to ignore me, but I didn't get how to know whether or not e.g. ".v2.2.2" is newer than ".v2" or ".fixed-v1". - 8.3: did the WG consider (possibly future) uses of JOSE to provide e2e security from uCDN to dCDN even via tCDN? I'm ok that you don't define that now, but wondered, as it seems like a fairly obvious thing to want. (To this security nerd anyway:-) I also wondered the same for 8.4, but I get that that'd be less likely of widespread utility. If using IPsec to security inter-CDN links, something like JOSE would seem to me to add quite a bit of value, if the CDNs insist on not using TLS. From nobody Wed Jul 6 07:01:09 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A526112D56F; Wed, 6 Jul 2016 07:01:07 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Benoit Claise" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160706140107.7881.52206.idtracker@ietfa.amsl.com> Date: Wed, 06 Jul 2016 07:01:07 -0700 Archived-At: Cc: jiangsheng@huawei.com, flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Benoit Claise's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 14:01:08 -0000 Benoit Claise has entered the following ballot position for draft-ietf-cdni-metadata-18: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- My review flagged the same DISCUSS point 1 as Ben: the downref (The writeup mentions the two downrefs though). Secondly, the writeup, https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/shepherdwriteup/, is not really readable. And finally, Sheng Jiang's OPS DIR review flagged: The example of footprint object has examples using IPv4. Because the other parts of this document does have IPv6 example, I think this is probably a mistake rather than not supporting IPv6 here on purpose (if it is on purpose, an explanation for reasons are necessary). From nobody Wed Jul 6 07:12:48 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF5C612D140; Wed, 6 Jul 2016 07:12:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4jGt3OgA7MWU; Wed, 6 Jul 2016 07:12:40 -0700 (PDT) Received: from mail-vk0-x235.google.com (mail-vk0-x235.google.com [IPv6:2607:f8b0:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9D3512D11D; Wed, 6 Jul 2016 07:12:39 -0700 (PDT) Received: by mail-vk0-x235.google.com with SMTP id t66so22179934vka.1; Wed, 06 Jul 2016 07:12:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=bD2J5pnYyv+VqrBwb9mGrEfTesh6mplXguxa5AwAyT4=; b=PtAozSGMMQ+9EApcNH2+ytpjiQmwPvwVnZ5p8vXBf76Y43F3Q/vTaNgLP2AQZFntKk t7pkEsQFs1wp0qGZUcNqA9xW5Yx52LQS1Pa0deSopPE6yeOwKIslYYTJ5gnjl80RJfJl IZCYaTEC8a2lmPxif00sEe+i8MYX0d26jfco1Nd8BhFuDNsV47Thk49VCyyI2EaeYap5 avEHbhh4jij1Sd8DKpeAvRumhLaPGkI2o/8peCOubXZXAUK62/5M54fS97+xaNZp52Pe qwteU0ctc6Iy/sshv+wxPT3EfTtyMEop+FVRqPEZNoROJaBkknO0IsCpQZr1c5OaKZCV 7wUg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=bD2J5pnYyv+VqrBwb9mGrEfTesh6mplXguxa5AwAyT4=; b=UAs5TaSr4UiuWMND5C87KauBDKGjrU5rNSUqVoyhMObwiC65b7F1I//JL1QaMJM3Ov eqfxWsasc6OYl/BjMyZCrbxH06Bso1Li344YDtNilIKqoSyKJms6BHRAZA+CvBaWS1Xu OOm7jvLKycfYLdla1hMlJKkYOwdN2iQzimmV7wR15RJVAUCIfy8MuCA8HuJu0to8z+Js o4IENbVtWm9wr+8tl+bXzq6XZdXceSFuyyI1q02zx55b5wYnnll5tKWh6vGOziWcfiIF kJ8QC/h9fzEqOCs+Ac02NuoaN3C4rrzADHcwsvy/HbMRu+64A6DP69DPB08cpcNdqaAQ pUVA== X-Gm-Message-State: ALyK8tLMtO1iUSNlwvbAwGW7vRG/A8kydgq5X03ZUT1Sg9TEts6qmLxUEnkk766+iTFpZjQC8jefaNPVFMJEXA== X-Received: by 10.159.39.193 with SMTP id b59mr8415042uab.109.1467814358844; Wed, 06 Jul 2016 07:12:38 -0700 (PDT) MIME-Version: 1.0 Received: by 10.159.37.104 with HTTP; Wed, 6 Jul 2016 07:12:38 -0700 (PDT) In-Reply-To: References: <20160705200035.22399.13041.idtracker@ietfa.amsl.com> From: Kathleen Moriarty Date: Wed, 6 Jul 2016 10:12:38 -0400 Message-ID: To: Kevin Ma J Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , The IESG , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 14:12:42 -0000 Hi Kevin, These threats sound important enough to include now. Can you add a paragraph about these threats? Thanks, Kathleen On Tue, Jul 5, 2016 at 4:39 PM, Kevin Ma J wrote: > Hi Kathleen, > > I think that if an attacker could remove any of the ACL metadata, you c= ould enable service in different regions, at different times, and to differ= ent end points, possibly in violation of the content owner's distribution r= ights (and possibly causing the content owner to incur excess delivery char= ges); but I would expect a premium content provider to have a DRM system ou= tside the CDN delivery that enforces licensing restrictions and otherwise p= revents hijacking the service as part of a criminal enterprise. We will lo= ok at updating the threats in the next revision. > > thanx! > > -- Kevin J. Ma > >> -----Original Message----- >> From: Kathleen Moriarty [mailto:kathleen.moriarty.ietf@gmail.com] >> Sent: Tuesday, July 05, 2016 4:17 PM >> To: Kevin Ma J >> Cc: The IESG; draft-ietf-cdni-metadata@ietf.org; cdni-chairs@ietf.org; >> flefauch@cisco.com; cdni@ietf.org >> Subject: Re: Kathleen Moriarty's No Objection on draft-ietf-cdni-metadat= a- >> 18: (with COMMENT) >> >> On Tue, Jul 5, 2016 at 4:06 PM, Kevin Ma J >> wrote: >> > Hi Kathleen, >> > >> > Thanks for the review. Could you expand on your thoughts wrt >> billing/theft? I think the idea for billing was that it would be based = on >> the logging data, not metadata. DoS against metadata could prevent the >> content delivery and therefore prevent content owners and CDNs from >> recognizing revenue, but I'm not sure if that's the theft angle to which >> you refer? >> >> I was wondering if there were attacks possible other than DoS. I was >> surprised I didn't see any related to theft of service if there was a >> way to do that with metadata. I didn't realize logging information >> was used for billing and had assumed metadata would wind up being >> logged and could cause an issue. If that's not possible, that's fine >> and that's why I just included this question as a comment. >> >> Thanks, >> Kathleen >> >> >> > >> > thanx! >> > >> > -- Kevin J. Ma >> > >> >> -----Original Message----- >> >> From: Kathleen Moriarty [mailto:Kathleen.Moriarty.ietf@gmail.com] >> >> Sent: Tuesday, July 05, 2016 4:01 PM >> >> To: The IESG >> >> Cc: draft-ietf-cdni-metadata@ietf.org; cdni-chairs@ietf.org; >> >> flefauch@cisco.com; cdni@ietf.org >> >> Subject: Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata= - >> 18: >> >> (with COMMENT) >> >> >> >> Kathleen Moriarty has entered the following ballot position for >> >> draft-ietf-cdni-metadata-18: No Objection >> >> >> >> When responding, please keep the subject line intact and reply to all >> >> email addresses included in the To and CC lines. (Feel free to cut th= is >> >> introductory paragraph, however.) >> >> >> >> >> >> Please refer to https://www.ietf.org/iesg/statement/discuss- >> criteria.html >> >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> >> >> >> The document, along with other ballot positions, can be found here: >> >> https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ >> >> >> >> >> >> >> >> ---------------------------------------------------------------------= - >> >> COMMENT: >> >> ---------------------------------------------------------------------= - >> >> >> >> I can see why unauthorized access to content isn't a concern since th= is >> >> draft is just about the metadata, but wouldn't billing/theft be a >> >> possible avenue of attack to be listed as a consideration through >> >> alterations of the metadata? >> >> >> > >> >> >> >> -- >> >> Best regards, >> Kathleen --=20 Best regards, Kathleen From nobody Wed Jul 6 07:20:22 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B93312D79A; Wed, 6 Jul 2016 07:20:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=Uc5Yc3Rv; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=jxEWnu1a Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0TWjxAwJSTw4; Wed, 6 Jul 2016 07:20:12 -0700 (PDT) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B3C912D770; Wed, 6 Jul 2016 07:19:42 -0700 (PDT) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id C61842014F; Wed, 6 Jul 2016 10:19:41 -0400 (EDT) Received: from web5 ([10.202.2.215]) by compute1.internal (MEProxy); Wed, 06 Jul 2016 10:19:41 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=wKMqOfcSzQc/GrQdCnwLQHqCsQA=; b=Uc5Yc3 RvtxU6dVINURm/05oQBbdMrCZtwsCeMUsU5tx023KmlHDONp+gBpN6KV+mgF04x7 XWRp3E3RCPBfC3fH2guo+ZTirH6YZnkXW7f18EmAki8WvWmfD/ambo3Zf2pt9KoH 0xgiiq8s/lX3Botm0qY6TL4UJh6lP3Bic24fY= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=wKMqOfcSzQc/GrQ dCnwLQHqCsQA=; b=jxEWnu1as/TGf0IYUqE/TVGclrU+wgAV+0cnLjAq1+sZHEn OcC6zDML1vpf0ORNQ6gwx+MFpeMx9c+V4uqRaZ1bUBeatSRoMhRiM9LdDWiU2B8z K08wDvph/pS+R4mZk53sbfzSj7oGp5s3zKednhWl6JydI6Iz0C2Nm4jtgTBg= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 999E8A864C; Wed, 6 Jul 2016 10:19:41 -0400 (EDT) Message-Id: <1467814781.490514.658460193.40B5093B@webmail.messagingengine.com> X-Sasl-Enc: FIqQB34V0DUebIIXUgZE0yAi2Z0PwZUyQn8cwL2Pog2g 1467814781 From: Alexey Melnikov To: Benoit Claise , The IESG MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-22cd3445 In-Reply-To: <20160706140107.7881.52206.idtracker@ietfa.amsl.com> References: <20160706140107.7881.52206.idtracker@ietfa.amsl.com> Date: Wed, 06 Jul 2016 15:19:41 +0100 Archived-At: Cc: cdni@ietf.org, cdni-chairs@ietf.org, draft-ietf-cdni-metadata@ietf.org, jiangsheng@huawei.com Subject: Re: [CDNi] Benoit Claise's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 14:20:16 -0000 On Wed, Jul 6, 2016, at 03:01 PM, Benoit Claise wrote: > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > My review flagged the same DISCUSS point 1 as Ben: the downref (The > writeup mentions the two downrefs though). Yes, I will need to re-Last Call the document. > Secondly, the writeup, > https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/shepherdwriteup/, > is not really readable. This is fixed now. > And finally, Sheng Jiang's OPS DIR review flagged: > The example of footprint object has examples using IPv4. Because the > other parts of this document does have IPv6 example, I think this is > probably a mistake rather than not supporting IPv6 here on purpose (if it > is on purpose, an explanation for reasons are necessary). Editors should reply to this. From nobody Wed Jul 6 08:29:17 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E0B312D592; Wed, 6 Jul 2016 08:29:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C6bd3rVNxPCB; Wed, 6 Jul 2016 08:29:06 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4A9712D1EA; Wed, 6 Jul 2016 08:29:05 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-6d-577d159c49b3 Received: from EUSAAHC006.ericsson.se (Unknown_Domain [147.117.188.90]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id D9.29.09012.C951D775; Wed, 6 Jul 2016 16:28:44 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC006.ericsson.se ([147.117.188.90]) with mapi id 14.03.0294.000; Wed, 6 Jul 2016 11:14:04 -0400 From: Kevin Ma J To: Kathleen Moriarty Thread-Topic: Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) Thread-Index: AQHR1vfms+qd+Y96XEeTeZbe0McEZaAKQrmwgABGq4D//8ILYIABapUA///NMsA= Date: Wed, 6 Jul 2016 15:14:04 +0000 Message-ID: References: <20160705200035.22399.13041.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.11] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprEIsWRmVeSWpSXmKPExsUyuXRPlO4c0dpwg+ZVxhZHWn8xWjyd/YfV 4vKZiYwW/xacZrKY8Wcis0XDznwHNo8pvzeyeuycdZfdY8mSn0wBzFFcNimpOZllqUX6dglc GWcmrmMsuGNQcW9aE3MD4x79LkYODgkBE4kHq8S7GDmBTDGJC/fWs3UxcnEICRxllNh85QMj hLOMUeJ3wz82kCo2AS2Jx1//MoHYIgIWEmuav4F1MAs8Y5SYduw4WEJYIE7i5eeFbCAbRATi JZYtV4Co95P49u0aC4jNIqAisebkREYQm1fAV+LXvj9Qy64zSdzYvwgswSkQKLHk4F9WEJsR 6Lzvp9aAzWcWEJe49WQ+E8TZAhJL9pxnhrBFJV4+/scKYStJfPw9nx3kBmYBTYn1u/QhWhUl pnQ/ZIfYKyhxcuYTlgmMYrOQTJ2F0DELSccsJB0LGFlWMXKUFhfk5KYbGWxiBMbUMQk23R2M 96d7HmIU4GBU4uFd8LU6XIg1say4MvcQowQHs5II7xTp2nAh3pTEyqrUovz4otKc1OJDjNIc LErivGKPFMOFBNITS1KzU1MLUotgskwcnFINjLrL3y0uYZ1v8OyVQK1y/sekS4HOy5nusrel CU59YcnjXleWrfu77N0nG0OBC+vn7ZjO3TD1QOSPHxtcVF9tcpTfktO0ulPWt+/Wvqsr3D/v Mnxobu1m+TxIacWsGjGzJ/O6V9p15Jn/sd7flDhv5ZbPIcsiXV7vSOtQeN806VC05tmKlABW ASWW4oxEQy3mouJEALu8ywulAgAA Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , The IESG , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 15:29:09 -0000 SGkgS2F0aGxlZW4sDQoNCiAgV2lsbCBkby4NCg0KdGhhbnguDQoNCi0tICBLZXZpbiBKLiBNYQ0K DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEthdGhsZWVuIE1vcmlhcnR5 IFttYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb21dDQo+IFNlbnQ6IFdlZG5l c2RheSwgSnVseSAwNiwgMjAxNiAxMDoxMyBBTQ0KPiBUbzogS2V2aW4gTWEgSg0KPiBDYzogVGhl IElFU0c7IGRyYWZ0LWlldGYtY2RuaS1tZXRhZGF0YUBpZXRmLm9yZzsgY2RuaS1jaGFpcnNAaWV0 Zi5vcmc7DQo+IGZsZWZhdWNoQGNpc2NvLmNvbTsgY2RuaUBpZXRmLm9yZw0KPiBTdWJqZWN0OiBS ZTogS2F0aGxlZW4gTW9yaWFydHkncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0Zi1jZG5pLW1l dGFkYXRhLQ0KPiAxODogKHdpdGggQ09NTUVOVCkNCj4gDQo+IEhpIEtldmluLA0KPiANCj4gVGhl c2UgdGhyZWF0cyBzb3VuZCBpbXBvcnRhbnQgZW5vdWdoIHRvIGluY2x1ZGUgbm93LiAgQ2FuIHlv dSBhZGQgYQ0KPiBwYXJhZ3JhcGggYWJvdXQgdGhlc2UgdGhyZWF0cz8NCj4gDQo+IFRoYW5rcywN Cj4gS2F0aGxlZW4NCj4gDQo+IE9uIFR1ZSwgSnVsIDUsIDIwMTYgYXQgNDozOSBQTSwgS2V2aW4g TWEgSiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+DQo+IHdyb3RlOg0KPiA+IEhpIEthdGhsZWVu LA0KPiA+DQo+ID4gICBJIHRoaW5rIHRoYXQgaWYgYW4gYXR0YWNrZXIgY291bGQgcmVtb3ZlIGFu eSBvZiB0aGUgQUNMIG1ldGFkYXRhLCB5b3UNCj4gY291bGQgZW5hYmxlIHNlcnZpY2UgaW4gZGlm ZmVyZW50IHJlZ2lvbnMsIGF0IGRpZmZlcmVudCB0aW1lcywgYW5kIHRvDQo+IGRpZmZlcmVudCBl bmQgcG9pbnRzLCBwb3NzaWJseSBpbiB2aW9sYXRpb24gb2YgdGhlIGNvbnRlbnQgb3duZXIncw0K PiBkaXN0cmlidXRpb24gcmlnaHRzIChhbmQgcG9zc2libHkgY2F1c2luZyB0aGUgY29udGVudCBv d25lciB0byBpbmN1cg0KPiBleGNlc3MgZGVsaXZlcnkgY2hhcmdlcyk7IGJ1dCBJIHdvdWxkIGV4 cGVjdCBhIHByZW1pdW0gY29udGVudCBwcm92aWRlciB0bw0KPiBoYXZlIGEgRFJNIHN5c3RlbSBv dXRzaWRlIHRoZSBDRE4gZGVsaXZlcnkgdGhhdCBlbmZvcmNlcyBsaWNlbnNpbmcNCj4gcmVzdHJp Y3Rpb25zIGFuZCBvdGhlcndpc2UgcHJldmVudHMgaGlqYWNraW5nIHRoZSBzZXJ2aWNlIGFzIHBh cnQgb2YgYQ0KPiBjcmltaW5hbCBlbnRlcnByaXNlLiAgV2Ugd2lsbCBsb29rIGF0IHVwZGF0aW5n IHRoZSB0aHJlYXRzIGluIHRoZSBuZXh0DQo+IHJldmlzaW9uLg0KPiA+DQo+ID4gdGhhbnghDQo+ ID4NCj4gPiAtLSAgS2V2aW4gSi4gTWENCj4gPg0KPiA+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2Ut LS0tLQ0KPiA+PiBGcm9tOiBLYXRobGVlbiBNb3JpYXJ0eSBbbWFpbHRvOmthdGhsZWVuLm1vcmlh cnR5LmlldGZAZ21haWwuY29tXQ0KPiA+PiBTZW50OiBUdWVzZGF5LCBKdWx5IDA1LCAyMDE2IDQ6 MTcgUE0NCj4gPj4gVG86IEtldmluIE1hIEoNCj4gPj4gQ2M6IFRoZSBJRVNHOyBkcmFmdC1pZXRm LWNkbmktbWV0YWRhdGFAaWV0Zi5vcmc7IGNkbmktY2hhaXJzQGlldGYub3JnOw0KPiA+PiBmbGVm YXVjaEBjaXNjby5jb207IGNkbmlAaWV0Zi5vcmcNCj4gPj4gU3ViamVjdDogUmU6IEthdGhsZWVu IE1vcmlhcnR5J3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtY2RuaS0NCj4gbWV0YWRhdGEt DQo+ID4+IDE4OiAod2l0aCBDT01NRU5UKQ0KPiA+Pg0KPiA+PiBPbiBUdWUsIEp1bCA1LCAyMDE2 IGF0IDQ6MDYgUE0sIEtldmluIE1hIEogPGtldmluLmoubWFAZXJpY3Nzb24uY29tPg0KPiA+PiB3 cm90ZToNCj4gPj4gPiBIaSBLYXRobGVlbiwNCj4gPj4gPg0KPiA+PiA+ICAgVGhhbmtzIGZvciB0 aGUgcmV2aWV3LiAgQ291bGQgeW91IGV4cGFuZCBvbiB5b3VyIHRob3VnaHRzIHdydA0KPiA+PiBi aWxsaW5nL3RoZWZ0PyAgSSB0aGluayB0aGUgaWRlYSBmb3IgYmlsbGluZyB3YXMgdGhhdCBpdCB3 b3VsZCBiZSBiYXNlZA0KPiBvbg0KPiA+PiB0aGUgbG9nZ2luZyBkYXRhLCBub3QgbWV0YWRhdGEu ICBEb1MgYWdhaW5zdCBtZXRhZGF0YSBjb3VsZCBwcmV2ZW50IHRoZQ0KPiA+PiBjb250ZW50IGRl bGl2ZXJ5IGFuZCB0aGVyZWZvcmUgcHJldmVudCBjb250ZW50IG93bmVycyBhbmQgQ0ROcyBmcm9t DQo+ID4+IHJlY29nbml6aW5nIHJldmVudWUsIGJ1dCBJJ20gbm90IHN1cmUgaWYgdGhhdCdzIHRo ZSB0aGVmdCBhbmdsZSB0bw0KPiB3aGljaA0KPiA+PiB5b3UgcmVmZXI/DQo+ID4+DQo+ID4+IEkg d2FzIHdvbmRlcmluZyBpZiB0aGVyZSB3ZXJlIGF0dGFja3MgcG9zc2libGUgb3RoZXIgdGhhbiBE b1MuICBJIHdhcw0KPiA+PiBzdXJwcmlzZWQgSSBkaWRuJ3Qgc2VlIGFueSByZWxhdGVkIHRvIHRo ZWZ0IG9mIHNlcnZpY2UgaWYgdGhlcmUgd2FzIGENCj4gPj4gd2F5IHRvIGRvIHRoYXQgd2l0aCBt ZXRhZGF0YS4gIEkgZGlkbid0IHJlYWxpemUgbG9nZ2luZyBpbmZvcm1hdGlvbg0KPiA+PiB3YXMg dXNlZCBmb3IgYmlsbGluZyBhbmQgaGFkIGFzc3VtZWQgbWV0YWRhdGEgd291bGQgd2luZCB1cCBi ZWluZw0KPiA+PiBsb2dnZWQgYW5kIGNvdWxkIGNhdXNlIGFuIGlzc3VlLiAgSWYgdGhhdCdzIG5v dCBwb3NzaWJsZSwgdGhhdCdzIGZpbmUNCj4gPj4gYW5kIHRoYXQncyB3aHkgSSBqdXN0IGluY2x1 ZGVkIHRoaXMgcXVlc3Rpb24gYXMgYSBjb21tZW50Lg0KPiA+Pg0KPiA+PiBUaGFua3MsDQo+ID4+ IEthdGhsZWVuDQo+ID4+DQo+ID4+DQo+ID4+ID4NCj4gPj4gPiB0aGFueCENCj4gPj4gPg0KPiA+ PiA+IC0tICBLZXZpbiBKLiBNYQ0KPiA+PiA+DQo+ID4+ID4+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQo+ID4+ID4+IEZyb206IEthdGhsZWVuIE1vcmlhcnR5IFttYWlsdG86S2F0aGxlZW4u TW9yaWFydHkuaWV0ZkBnbWFpbC5jb21dDQo+ID4+ID4+IFNlbnQ6IFR1ZXNkYXksIEp1bHkgMDUs IDIwMTYgNDowMSBQTQ0KPiA+PiA+PiBUbzogVGhlIElFU0cNCj4gPj4gPj4gQ2M6IGRyYWZ0LWll dGYtY2RuaS1tZXRhZGF0YUBpZXRmLm9yZzsgY2RuaS1jaGFpcnNAaWV0Zi5vcmc7DQo+ID4+ID4+ IGZsZWZhdWNoQGNpc2NvLmNvbTsgY2RuaUBpZXRmLm9yZw0KPiA+PiA+PiBTdWJqZWN0OiBLYXRo bGVlbiBNb3JpYXJ0eSdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLWNkbmktDQo+IG1ldGFk YXRhLQ0KPiA+PiAxODoNCj4gPj4gPj4gKHdpdGggQ09NTUVOVCkNCj4gPj4gPj4NCj4gPj4gPj4g S2F0aGxlZW4gTW9yaWFydHkgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRp b24gZm9yDQo+ID4+ID4+IGRyYWZ0LWlldGYtY2RuaS1tZXRhZGF0YS0xODogTm8gT2JqZWN0aW9u DQo+ID4+ID4+DQo+ID4+ID4+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1Ympl Y3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvDQo+IGFsbA0KPiA+PiA+PiBlbWFpbCBhZGRyZXNz ZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQNCj4g dGhpcw0KPiA+PiA+PiBpbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikNCj4gPj4gPj4N Cj4gPj4gPj4NCj4gPj4gPj4gUGxlYXNlIHJlZmVyIHRvIGh0dHBzOi8vd3d3LmlldGYub3JnL2ll c2cvc3RhdGVtZW50L2Rpc2N1c3MtDQo+ID4+IGNyaXRlcmlhLmh0bWwNCj4gPj4gPj4gZm9yIG1v cmUgaW5mb3JtYXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4N Cj4gPj4gPj4NCj4gPj4gPj4NCj4gPj4gPj4gVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVy IGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJlOg0KPiA+PiA+PiBodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktbWV0YWRhdGEvDQo+ID4+ID4+ DQo+ID4+ID4+DQo+ID4+ID4+DQo+ID4+ID4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IC0tDQo+ID4+ID4+IENP TU1FTlQ6DQo+ID4+ID4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IC0tDQo+ID4+ID4+DQo+ID4+ID4+IEkgY2Fu IHNlZSB3aHkgdW5hdXRob3JpemVkIGFjY2VzcyB0byBjb250ZW50IGlzbid0IGEgY29uY2VybiBz aW5jZQ0KPiB0aGlzDQo+ID4+ID4+IGRyYWZ0IGlzIGp1c3QgYWJvdXQgdGhlIG1ldGFkYXRhLCBi dXQgd291bGRuJ3QgYmlsbGluZy90aGVmdCBiZSBhDQo+ID4+ID4+IHBvc3NpYmxlIGF2ZW51ZSBv ZiBhdHRhY2sgdG8gYmUgbGlzdGVkIGFzIGEgY29uc2lkZXJhdGlvbiB0aHJvdWdoDQo+ID4+ID4+ IGFsdGVyYXRpb25zIG9mIHRoZSBtZXRhZGF0YT8NCj4gPj4gPj4NCj4gPj4gPg0KPiA+Pg0KPiA+ Pg0KPiA+Pg0KPiA+PiAtLQ0KPiA+Pg0KPiA+PiBCZXN0IHJlZ2FyZHMsDQo+ID4+IEthdGhsZWVu DQo+IA0KPiANCj4gDQo+IC0tDQo+IA0KPiBCZXN0IHJlZ2FyZHMsDQo+IEthdGhsZWVuDQo= From nobody Wed Jul 6 08:56:05 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8CDF12D60C; Wed, 6 Jul 2016 08:55:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VjFVtMwrvnbI; Wed, 6 Jul 2016 08:55:54 -0700 (PDT) Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEA6212D1AD; Wed, 6 Jul 2016 08:55:54 -0700 (PDT) Received: by mail-vk0-x233.google.com with SMTP id m127so249956720vkb.3; Wed, 06 Jul 2016 08:55:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=pqgBAWLxYEqwCEFCe0IQAc4jYwkR6LAEbDv2qh0gDkE=; b=vv4Nvqrbaz2P0Sh+V8KLT3WLE6dK4IZ7nFEU/QMsYRc6jDDXsOzQ2WWAZsSkwTCoi+ ReDeW6v4g73Re5YXPt9siumlvHgKCKPiMasoYxr2NROvQ7+yfNHX+4t8l1VEEpD0BcGL 0U2xPFC3IuYi0JJ0rYeOBaffoBA+mkrgcvpWih9lSKCN+v3T7i4BjV3hcK3aYREqpJvV xpg5DXky4s0D5YpDMvmuBTPqzFgzny83w5CErTFz+kHcwq5TheR2xyc3Bv1Nooz+OE+W DVCVq6nldf/4/s8i0vpRDJVNiz0k5aFdfV/TlMkNcMNLqKv+3PZOfZKsz1T0PiRHk0PK 18Yw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=pqgBAWLxYEqwCEFCe0IQAc4jYwkR6LAEbDv2qh0gDkE=; b=lK1UPH24UOXHqixOhTEd0yVTQn7H8A1itbz2Xc0CJ8JnQLH0lCFrLUTsUpJwlIxAer fbr+Q9FeZzIZPBXCN1M7jxgp5iftlaxmRActy4vfUZjajc+jPA7t6Ce7kLaq4GgCGpIU 282M99zhwElSbIERWxKK6fqbL/eoY/ZYGRcoOE5fS9GmCJyn9b8yQWxUS4+itJPu+WOA O+620ZQI1Vzfrf5o6tN+bm6UO1hNpKnzghWHaXDbAGLXNfH3psIIdjKHe6GqOBFHYnYN 8XC9a9njSUiP446Peg1AAKnGZ9nzDkjV5hnfSPGL0VYvbUSOtvcjSOr5eOVoKyloHvDb 7qNQ== X-Gm-Message-State: ALyK8tI9FOk+AdLVJXNylc94/lC/O+wrKWI+K27ah3bYRGocaQZNXJtIOiEv9vEWfpMIgyvBoEe9KdOUFOZ+8A== X-Received: by 10.159.39.193 with SMTP id b59mr8665668uab.109.1467820553801; Wed, 06 Jul 2016 08:55:53 -0700 (PDT) MIME-Version: 1.0 Received: by 10.159.37.104 with HTTP; Wed, 6 Jul 2016 08:55:53 -0700 (PDT) In-Reply-To: References: <20160705200035.22399.13041.idtracker@ietfa.amsl.com> From: Kathleen Moriarty Date: Wed, 6 Jul 2016 11:55:53 -0400 Message-ID: To: Kevin Ma J Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , The IESG , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 15:55:59 -0000 On Wed, Jul 6, 2016 at 11:14 AM, Kevin Ma J wrote: > Hi Kathleen, > > Will do. Thank you. > > thanx. > > -- Kevin J. Ma > >> -----Original Message----- >> From: Kathleen Moriarty [mailto:kathleen.moriarty.ietf@gmail.com] >> Sent: Wednesday, July 06, 2016 10:13 AM >> To: Kevin Ma J >> Cc: The IESG; draft-ietf-cdni-metadata@ietf.org; cdni-chairs@ietf.org; >> flefauch@cisco.com; cdni@ietf.org >> Subject: Re: Kathleen Moriarty's No Objection on draft-ietf-cdni-metadata- >> 18: (with COMMENT) >> >> Hi Kevin, >> >> These threats sound important enough to include now. Can you add a >> paragraph about these threats? >> >> Thanks, >> Kathleen >> >> On Tue, Jul 5, 2016 at 4:39 PM, Kevin Ma J >> wrote: >> > Hi Kathleen, >> > >> > I think that if an attacker could remove any of the ACL metadata, you >> could enable service in different regions, at different times, and to >> different end points, possibly in violation of the content owner's >> distribution rights (and possibly causing the content owner to incur >> excess delivery charges); but I would expect a premium content provider to >> have a DRM system outside the CDN delivery that enforces licensing >> restrictions and otherwise prevents hijacking the service as part of a >> criminal enterprise. We will look at updating the threats in the next >> revision. >> > >> > thanx! >> > >> > -- Kevin J. Ma >> > >> >> -----Original Message----- >> >> From: Kathleen Moriarty [mailto:kathleen.moriarty.ietf@gmail.com] >> >> Sent: Tuesday, July 05, 2016 4:17 PM >> >> To: Kevin Ma J >> >> Cc: The IESG; draft-ietf-cdni-metadata@ietf.org; cdni-chairs@ietf.org; >> >> flefauch@cisco.com; cdni@ietf.org >> >> Subject: Re: Kathleen Moriarty's No Objection on draft-ietf-cdni- >> metadata- >> >> 18: (with COMMENT) >> >> >> >> On Tue, Jul 5, 2016 at 4:06 PM, Kevin Ma J >> >> wrote: >> >> > Hi Kathleen, >> >> > >> >> > Thanks for the review. Could you expand on your thoughts wrt >> >> billing/theft? I think the idea for billing was that it would be based >> on >> >> the logging data, not metadata. DoS against metadata could prevent the >> >> content delivery and therefore prevent content owners and CDNs from >> >> recognizing revenue, but I'm not sure if that's the theft angle to >> which >> >> you refer? >> >> >> >> I was wondering if there were attacks possible other than DoS. I was >> >> surprised I didn't see any related to theft of service if there was a >> >> way to do that with metadata. I didn't realize logging information >> >> was used for billing and had assumed metadata would wind up being >> >> logged and could cause an issue. If that's not possible, that's fine >> >> and that's why I just included this question as a comment. >> >> >> >> Thanks, >> >> Kathleen >> >> >> >> >> >> > >> >> > thanx! >> >> > >> >> > -- Kevin J. Ma >> >> > >> >> >> -----Original Message----- >> >> >> From: Kathleen Moriarty [mailto:Kathleen.Moriarty.ietf@gmail.com] >> >> >> Sent: Tuesday, July 05, 2016 4:01 PM >> >> >> To: The IESG >> >> >> Cc: draft-ietf-cdni-metadata@ietf.org; cdni-chairs@ietf.org; >> >> >> flefauch@cisco.com; cdni@ietf.org >> >> >> Subject: Kathleen Moriarty's No Objection on draft-ietf-cdni- >> metadata- >> >> 18: >> >> >> (with COMMENT) >> >> >> >> >> >> Kathleen Moriarty has entered the following ballot position for >> >> >> draft-ietf-cdni-metadata-18: No Objection >> >> >> >> >> >> When responding, please keep the subject line intact and reply to >> all >> >> >> email addresses included in the To and CC lines. (Feel free to cut >> this >> >> >> introductory paragraph, however.) >> >> >> >> >> >> >> >> >> Please refer to https://www.ietf.org/iesg/statement/discuss- >> >> criteria.html >> >> >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> >> >> >> >> >> >> The document, along with other ballot positions, can be found here: >> >> >> https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ >> >> >> >> >> >> >> >> >> >> >> >> -------------------------------------------------------------------- >> -- >> >> >> COMMENT: >> >> >> -------------------------------------------------------------------- >> -- >> >> >> >> >> >> I can see why unauthorized access to content isn't a concern since >> this >> >> >> draft is just about the metadata, but wouldn't billing/theft be a >> >> >> possible avenue of attack to be listed as a consideration through >> >> >> alterations of the metadata? >> >> >> >> >> > >> >> >> >> >> >> >> >> -- >> >> >> >> Best regards, >> >> Kathleen >> >> >> >> -- >> >> Best regards, >> Kathleen -- Best regards, Kathleen From nobody Wed Jul 6 10:56:11 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D52812D528; Wed, 6 Jul 2016 10:56:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xHmKAb8Eou4d; Wed, 6 Jul 2016 10:56:05 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F00712D53D; Wed, 6 Jul 2016 10:56:05 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-99-577d3b922cbe Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id F6.33.09012.29B3D775; Wed, 6 Jul 2016 19:10:42 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0294.000; Wed, 6 Jul 2016 13:56:03 -0400 From: Kevin Ma J To: Ben Campbell Thread-Topic: Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) Thread-Index: AQHR1xQ6lPKS6L/Sz0KI75SnPFdbE6AKkdxAgABbvQCAAMB28A== Date: Wed, 6 Jul 2016 17:56:03 +0000 Message-ID: References: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprDIsWRmVeSWpSXmKPExsUyuXSPn+4k69pwgxlXbCwWnJvAZjG/8zS7 xZHWX4wWT2f/YbW4fGYio8X717sZLWb8mcjswO6xc9Zddo8lS34yefy8PonRY9bOJywBLFFc NimpOZllqUX6dglcGZ2vgguaHCsW7Whkb2BcY9/FyMkhIWAicejaFGYIW0ziwr31bF2MXBxC AkcZJR6cXMcC4SxjlJh4/BwjSBWbgJbE469/mUBsEQEliefNW8GKmAUmM0lcvbkSLCEskCDx cWUjkM0BVJQosflzAES9k8S3HefYQWwWARWJNx+fg5XzCvhK/H05jwXEFhLYxSjx918YiM0p YC/R+uMrWA0j0HXfT60Bs5kFxCVuPZnPBHG1gMSSPeehPhCVePn4HyuErSQxaek5VpATmAU0 Jdbv0odoVZSY0v2QHWKtoMTJmU9YJjCKzUIydRZCxywkHbOQdCxgZFnFyFFaXJCTm25ksIkR GGfHJNh0dzDen+55iFGAg1GJh3fB1+pwIdbEsuLK3EOMEhzMSiK8Zo614UK8KYmVValF+fFF pTmpxYcYpTlYlMR5xR4phgsJpCeWpGanphakFsFkmTg4pRoYpVjWX9+UFillkJ3Dc+Tu7Ojl t8yqAxzcFm9MyLJ7WbyQf5drfOC19T7Wl5aeFV/mK5TzTqLoSXPXlGNX1vezR24LkF3GFBCe sPiucVmjQu9b/uCMuGW1u87EHPq04pewscZ52XVKKxcuyvy7kqV8+Q6j5uOO/2LdJme2XJV+ LB697JhraW+iEktxRqKhFnNRcSIALpTl0q8CAAA= Archived-At: Cc: "cdni-chairs@ietf.org" , The IESG , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" Subject: Re: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 17:56:09 -0000 SGkgQmVuLA0KDQogIFdydCB0aGUgUkZDNTg2MSByZWZlcmVuY2UsIHRoZSBhdXRob3JzIGFncmVl ZCB0aGF0IHRoZSBzdGFsZS1pZi1lcnJvciB0ZXh0IGlzIG5vdCBuZWVkZWQsIGFuZCBwcm9wb3Nl IHRoZSBmb2xsb3dpbmcgdGV4dCB0byBqdXN0IGRlbnkgZGVsaXZlcnkgaWYgdGhlIG1ldGFkYXRh IGNhbm5vdCBiZSByZWZyZXNoZWQ6DQoNCiAgIEluIGNhc2VzIHdoZXJlIGEgZENETiBpcyBub3Qg YWJsZSB0byByZXRyaWV2ZSB0aGUgZW50aXJlIHNldCBvZiBDRE5JDQogICBtZXRhZGF0YSBhc3Nv Y2lhdGVkIHdpdGggYSBVc2VyIEFnZW50IHJlcXVlc3QsIG9yIGl0IGhhcyByZXRyaWV2ZWQNCiAg IHRoYXQgbWV0YWRhdGEgYnV0IGl0IGlzIHN0YWxlIGFjY29yZGluZyB0byBzdGFuZGFyZCBIVFRQ IGNhY2hpbmcNCiAgIHJ1bGVzIGFuZCBjYW5ub3QgYmUgcmV2YWxpZGF0ZWQsIGZvciBleGFtcGxl IGJlY2F1c2UNCiAgIHRoZSB1Q0ROIGlzIHVucmVhY2hhYmxlIG9yIHJldHVybnMgYSBIVFRQIDR4 eCBvciA1eHggc3RhdHVzIGluDQogICByZXNwb25zZSB0byBzb21lIG9yIGFsbCBvZiB0aGUgZENE TidzIENETkkgbWV0YWRhdGEgcmVxdWVzdHMsIHRoZQ0KICAgZENETiBNVVNUIE5PVCBzZXJ2ZSB0 aGUgcmVxdWVzdGVkIGNvbnRlbnQuDQoNCj4gLSA0LCBwYXJhZ3JhcGggNTogVGhlIE1VU1Qgc2Vl bXMgdW5uZWVkZWQuIFRoZXJlJ3Mgbm8gY2hvaWNlIHRvIG1ha2UNCj4gaGVyZTsgIHRoaXMgaXMg c2ltcGx5IHRoZSB3YXkgQ0ROSSBtZXRhZGF0YSBvYmplY3RzIGFyZSBlbmNvZGVkLg0KPiAoUmVj dXJzDQo+IGluIDYuNCwgd2hpY2ggc2VlbXMgcmVkdW5kYW50IHRvIHRoaXMgc2VjdGlvbi4pDQoN CiAgV2Ugd2lsbCByZW1vdmUgdGhlIHRleHQgZnJvbSBzZWN0aW9uIDQgYW5kIGp1c3QgbGVhdmUg dGhlIHJlZmVyZW5jZSB0byBzZWN0aW9uIDYuNA0KDQp0aGFueCENCg0KLS0gIEtldmluIEouIE1h DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQmVuIENhbXBiZWxsIFtt YWlsdG86YmVuQG5vc3RydW0uY29tXQ0KPiBTZW50OiBUdWVzZGF5LCBKdWx5IDA1LCAyMDE2IDEw OjE2IFBNDQo+IFRvOiBLZXZpbiBNYSBKDQo+IENjOiBUaGUgSUVTRzsgQmVuIE5pdmVuLUplbmtp bnM7IEZyYW5jb2lzIExlIEZhdWNoZXVyOyBjZG5pQGlldGYub3JnOw0KPiBkcmFmdC1pZXRmLWNk bmktbWV0YWRhdGFAaWV0Zi5vcmc7IGNkbmktY2hhaXJzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJl OiBCZW4gQ2FtcGJlbGwncyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYtY2RuaS1tZXRhZGF0YS0xODog KHdpdGgNCj4gRElTQ1VTUyBhbmQgQ09NTUVOVCkNCj4gDQo+IFRoYW5rcyBmb3IgdGhlIHJlc3Bv bnNlLiBTb21lIHJlc3BvbnNlLXJlc3BvbnNlcyBpbmxpbmUuIEkgcmVtb3ZlZCBzdHVmZg0KPiB0 aGF0IHNlZW1zIHRvIGJlIHJlc29sdmVkLg0KPiANCj4gVGhhbmtzIQ0KPiANCj4gQmVuLg0KPiAN Cj4gT24gNSBKdWwgMjAxNiwgYXQgMjA6NTgsIEtldmluIE1hIEogd3JvdGU6DQo+IA0KPiA+IEhp IEJlbiwNCj4gPg0KPiA+ICAgVGhhbmtzIGZvciB0aGUgcmV2aWV3Lg0KPiA+DQo+ID4gICBXcnQg eW91ciBmaXJzdCBkaXNjdXNzIGNvbW1lbnQ6IEkgZG8gbm90IHJlY2FsbCBhIGRpc2N1c3Npb24s IGJ1dCBJDQo+ID4gdGhpbmsgQmVuIChOaXZlbi1KZW5raW5zKSB3b3VsZCBiZSBiZXR0ZXIgZXF1 aXBwZWQgdG8gc3BlYWsgYWJvdXQgdGhlDQo+ID4gUkZDNTg2MSByZWZlcmVuY2UuDQo+IA0KPiBP a2F5Lg0KPiANCj4gPg0KPiA+ICAgV3J0IHlvdXIgc2Vjb25kIGRpc2N1c3MgY29tbWVudDogV2Ug aGF2ZSB1cGRhdGVkIHRoZSBzZWN1cml0eQ0KPiA+IGNvbnNpZGVyYXRpb25zIHRleHQgdG8gbWF0 Y2ggdGhlIG90aGVyIENETkkgZHJhZnRzOyB0aGUgZm9sbG93aW5nIHdpbGwNCj4gPiBiZSBpbiB0 aGUgbmV4dCByZXZpc2lvbjoNCj4gPg0KPiA+ICAgICAgICAgVExTIE1VU1QgYmUgdXNlZCBieSB0 aGUgc2VydmVyLXNpZGUgKGRDRE4pIGFuZCB0aGUNCj4gPiAgICAgICAgIGNsaWVudC1zaWRlICh1 Q0ROKSBvZiB0aGUgQ0ROSSBtZXRhZGF0YSBpbnRlcmZhY2UsIGluY2x1ZGluZw0KPiA+ICAgICAg ICAgYXV0aGVudGljYXRpb24gb2YgdGhlIHJlbW90ZSBlbmQsIHVubGVzcyBhbHRlcm5hdGUgbWV0 aG9kcyBhcmUNCj4gPiAgICAgICAgIHVzZWQgZm9yIGVuc3VyaW5nIHRoZSBzZWN1cml0eSBvZiB0 aGUgaW5mb3JtYXRpb24gaW4gdGhlIENETkkNCj4gPiAgICAgICAgIG1ldGFkYXRhIGludGVyZmFj ZSByZXF1ZXN0cyBhbmQgcmVzcG9uc2VzIChzdWNoIGFzIHNldHRpbmcgdXANCj4gPiAgICAgICAg IGFuIElQc2VjIHR1bm5lbCBiZXR3ZWVuIHRoZSB0d28gQ0ROcyBvciB1c2luZyBhIHBoeXNpY2Fs bHkNCj4gPiAgICAgICAgIHNlY3VyZWQgaW50ZXJuYWwgbmV0d29yayBiZXR3ZWVuIHR3byBDRE5z IHRoYXQgYXJlIG93bmVkIGJ5DQo+ID4gICAgICAgICB0aGUgc2FtZSBjb3Jwb3JhdGUgZW50aXR5 KS4NCj4gDQo+IA0KPiBUaGF0IHRleHQgd291bGQgYWRkcmVzcyBteSBjb25jZXJuLg0KPiANCj4g DQo+IFsuLi5dDQo+IA0KPiA+PiAtIDcuNDogSWYgdGhlIEF1dGggdHlwZSByZWdpc3RyeSBpcyBp bml0aWFsbHkgdW5wb3B1bGF0ZWQsIGRvZXNuJ3QNCj4gPj4gdGhhdA0KPiA+PiBtYWtlIHRoZSBB dXRoIHByb3BlcnR5IHVzZWxlc3MgZm9yIHRoZSB0aW1lIGJlaW5nPyBXaHkgZXZlbiBzcGVjaWZ5 DQo+ID4+IGl0DQo+ID4+IG5vdz8NCj4gPg0KPiA+IFRoZSBBdXRoIHR5cGUgaXMgdXNlZCBieSB0 aGUgU291cmNlIGFuZCBEZWxpdmVyeUF1dGhvcml6YXRpb24gbWV0YWRhdGENCj4gPiBvYmplY3Rz LCBhbmQgd2Ugd2FudGVkIGJvdGggb2YgdGhvc2UgdG8gdXNlIHRoZSBzYW1lIHNldCBvZiBBdXRo DQo+ID4gb2JqZWN0cywgc28gaXQgc2VlbWVkIGxpa2UgYSBnb29kIGlkZWEgdG8gZ28gYWhlYWQg YW5kIGFkZCBpdCB0byB0aGUNCj4gPiBkYXRhIG1vZGVsLiAgVGhlIFVSSSBTaWduaW5nIGRyYWZ0 IGlzIGluIFdHTEMgYW5kIHdpbGwgcmVnaXN0ZXIgdGhlDQo+ID4gVVJJIFNpZ25pbmcgQXV0aCB0 eXBlLiAgSXQgc2VlbWVkIHJlYXNvbmFibGUgYW5kIG1vcmUgY2VudHJhbGl6ZWQgdG8NCj4gPiBq dXN0IGxldCBtZXRhZGF0YSBjcmVhdGUgdGhlIHJlZ2lzdHJ5LCB3aXRoIFVSSSBTaWduaW5nIGNv bWluZyBpbg0KPiA+IGNsb3NlIGJlaGluZCB0byByZWdpc3RlciB0aGUgZmlyc3QgdHlwZS4NCj4g Pg0KPiANCj4gT2theSwgdGhhdCBzZWVtcyB0byBtYWtlIHNlbnNlLg0KPiANCj4gPj4gLSA4LjEs IDJuZCBidWxsZXQ6IENvdWxkIHRoaXMgc29ydCBvZiBhdHRhY2sgYmUgdXNlZCB0byBkaXN0cmli dXRlDQo+ID4+IGNvbXByb21pc2VkIGNvbnRlbnQgKGUuZy4gbWFsd2FyZSkgdG8gIGVuZCB1c2Vy cz8NCj4gPg0KPiA+IFllcy4gIEkgd2FzIHRoaW5raW5nIHJpY2tyb2xsaW5nLCBidXQgbWFsd2Fy ZSBpcyBhcmd1YWJseSB3b3JzZS4gIDspDQo+ID4gV2UgY2FuIGV4cGFuZCBvbiB0aGUgc3BlY2lm aWMgdHlwZXMgb2YgdGhyZWF0cy4NCj4gPg0KPiANCj4gSG1tLiBNYXNzIHJpY2tyb2xsaW5nIG1p Z2h0IGJlIGEgZmVhdHVyZSA6LSkNCj4gDQo+ID4NCj4gPj4gLSAxMS4xLCByZWZlcmVuY2UgdG8g NjcwNjogVGhpcyBpcyBhbm90aGVyIG5vcm1hdGl2ZSBkb3ducmVmIHRoYXQNCj4gPj4gZG9lcw0K PiA+PiBub3QgYXBwZWFyIHRvIGhhdmUgYmVlbiBjYWxsZWQgb3V0IGluIHRoZSBJRVRGIGxhc3Qg Y2FsbA0KPiA+PiBhbm5vdW5jZW1lbnQuIEkNCj4gPj4gd2lsbCBsZWF2ZSBpdCB0byB0aGUgYXV0 aG9ycyBhbmQgQUQgdG8gZGVjaWRlIGlmIHRoYXQncyBva2F5Lg0KPiA+DQo+ID4gQXNzdW1pbmcg eW91IG1lYW4gNjcwNzoNCj4gDQo+IE9vcHMsIHllcy4NCj4gDQo+ID4gSXQgd2FzIHN1Z2dlc3Rl ZCBieSBvdXIgZm9ybWVyIEFEIHRoYXQgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uDQo+ID4g c2hvdWxkIGhhdmUgYSBub3JtYXRpdmUgZG93bnJlZiB0byA2NzA3LCBiZWNhdXNlIG9mIHRoZSB0 ZXJtaW5vbG9neQ0KPiA+IHJlZmVyZW5jZS4gIE1ldGFkYXRhIGhhcyB0aGUgc2FtZSB0ZXJtaW5v bG9neSByZWZlcmVuY2UsIHNvIHdlIGFzc3VtZWQNCj4gPiB0aGUgc2FtZSBkb3ducmVmIHdvdWxk IGJlIGFwcGxpY2FibGUgdG8gdGhpcyBkcmFmdC4NCj4gDQo+IEkgd29uJ3QgaG9sZCB1cCB0aGlu Z3Mgb3ZlciB0aGlzIG9uZS0tanVzdCBkbyB0aGUgcmlnaHQgdGhpbmcsIHdoYXRldmVyDQo+IHRo YXQgaXMuIDotKQ0KPiANCj4gPg0KPiA+PiBFZGl0b3JpYWwgQ29tbWVudHMgYW5kIE5pdHM6DQo+ ID4+DQo+ID4+IC0gR2VuZXJhbDogSSBkb24ndCBleHBlY3QgYWN0aW9uIG9uIHRoaXMgaW4gZ2Vu ZXJhbCwgYnV0IHRoaXMgZHJhZnQNCj4gPj4gc2VlbXMNCj4gPj4gdG8gaGF2ZSBhIGxvdCBvZiBy ZXBlYXRlZCBtYXRlcmlhbCwgd2hpY2ggbWFrZXMgaXQgY29uc2lkZXJhYmx5DQo+ID4+IGxvbmdl cg0KPiA+PiBhbmQgaGFyZGVyIHRvIGRpZ2VzdCB0aGFuIG5lY2Vzc2FyeSBmb3IgdGhlIGNvbnRl bnQuIChOb3RlIHRoYXQsIGZvcg0KPiA+PiBfbm9ybWF0aXZlXyB0ZXh0LCBzdWNoIHJlZHVuZGFu Y3kgbWFrZXMgZnV0dXJlIHVwZGF0ZXMgZXJyb3IgcHJvbmUsDQo+ID4+IGV2ZW4NCj4gPj4gaWYg dGhlIHRleHQgaXMgY29uc2lzdGVudCBub3cuKQ0KPiA+Pg0KPiA+PiAtIDMsIGZpcnN0IHBhcmFn cmFwaDogSeKAmW0gbm90IHN1cmUgd2hhdCB5b3UgbWVhbiBieQ0KPiA+PiDigJxhZ2dyZWdhdGVk 4oCdIGluIHRoaXMNCj4gPj4gY29udGV4dC4NCj4gPg0KPiA+ICJncm91cGVkIiBtaWdodCBiZSBh IGJldHRlciB0ZXJtPw0KPiANCj4gT2theS4NCj4gDQo+ID4NCj4gPj4gLSAzLjIsIHRoaXJkIHBh cmFncmFwaCwgbGFzdCBzZW50ZW5jZTogVGhlIE1VU1Qgc2VlbXMgdW5uZWVkZWQuDQo+ID4+IFBs ZWFzZQ0KPiA+PiBjb25zaWRlciBzaW1wbHkgc2F5aW5nICIgLi4uIHRoZSBkQ0ROIHByb2Nlc3Nl cyB0aGUgY29udGVudCByZXF1ZXN0DQo+ID4+IGluDQo+ID4+IGFjY29yZGFuY2Ugd2l0aCB0aGUg cmVzdCBvZiB0aGUgbWV0YWRhdGEuDQo+ID4NCj4gPiBBc3N1bWluZyB5b3UgbWVhbiBzZWNvbmQg cGFyYWdyYXBoOiB3b3VsZCBhICJNQVkiIHdvcmsgYmV0dGVyPw0KPiANCj4gSG93IGFib3V0ICJw cm9jZXNzZXMiIDotKSAgKEl0J3MgdXAgdG8geW91OyB0aGlzIHdhcyBub3QgYSBibG9ja2luZw0K PiBjb21tZW50LikNCj4gDQo+ID4NCj4gPj4gLSA0LCBwYXJhZ3JhcGggNTogVGhlIE1VU1Qgc2Vl bXMgdW5uZWVkZWQuIFRoZXJlJ3Mgbm8gY2hvaWNlIHRvIG1ha2UNCj4gPj4gaGVyZTsgIHRoaXMg aXMgc2ltcGx5IHRoZSB3YXkgQ0ROSSBtZXRhZGF0YSBvYmplY3RzIGFyZSBlbmNvZGVkLg0KPiA+ PiAoUmVjdXJzDQo+ID4+IGluIDYuNCwgd2hpY2ggc2VlbXMgcmVkdW5kYW50IHRvIHRoaXMgc2Vj dGlvbi4pDQo+ID4NCj4gPiBJJ2xsIGRlZmVyIHRvIEJlbiBOSiBvbiB0aGlzIG9uZSBhcyB3ZWxs Lg0KPiANCj4gT2theS4NCj4gDQo+ID4gdW5kZXJzdG9vZDsgd2lsbCByZW1vdmUgdGhlICJOb3Rl Ig0KPiA+DQo+ID4+IC0gNy4xLnggRG8geW91IGV4cGVjdCBJQU5BIHRvIGRvIHNvbWV0aGluZyB3 aXRoIHRoZXNlIHN1YnNlY3Rpb25zPyBJDQo+ID4+IGRvbuKAmXQgc2VlIHRoaXMgc29ydCBvZiBk ZXRhaWwgaW4gdGhlIElBTkEgcmVnaXN0cnkuIE90aGVyd2lzZSwgdGhleQ0KPiA+PiBzZWVtcw0K PiA+PiB0byBiZWxvbmcgaW4gdGhlIG1haW4gYm9keSwgbm90IHRoZSBJQU5BIGNvbnNpZGVyYXRp b25zLg0KPiA+DQo+ID4gUkZDNzczNiBhc2tzIHRoYXQgdGhlIGRlc2lnbmF0ZWQgZXhwZXJ0IHZl cmlmeSB0aGUNCj4gPiBwdXJwb3NlL2ludGVyZmFjZS9lbmNvZGluZyBmb3IgZWFjaCBwdHlwZSBy ZWdpc3RyYXRpb24uICBXZSBoYXZlIGp1c3QNCj4gPiBiZWVuIHB1dHRpbmcgdGhhdCBpbmZvcm1h dGlvbiBpbiB0aGUgSUFOQSBzZWN0aW9uIHRvIGhhdmUgaXQgYWxsIGluDQo+ID4gb25lIHBsYWNl IGZvciB0aGUgZXhwZXJ0IHJldmlldy4NCj4gDQo+IE9rYXkuDQo= From nobody Wed Jul 6 11:01:41 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97E1612D133 for ; Wed, 6 Jul 2016 11:01:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.326 X-Spam-Level: X-Spam-Status: No, score=-3.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v6lbL9sJLVgO for ; Wed, 6 Jul 2016 11:01:37 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BAA1B12D0AA for ; Wed, 6 Jul 2016 11:01:36 -0700 (PDT) Received: from [10.0.1.4] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id u66I1ZsB093644 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Wed, 6 Jul 2016 13:01:36 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.4] From: "Ben Campbell" To: "Kevin Ma J" Date: Wed, 06 Jul 2016 13:01:35 -0500 Message-ID: In-Reply-To: References: <20160705232321.22367.48973.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.4r5234) Archived-At: Cc: "cdni-chairs@ietf.org" , The IESG , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" Subject: Re: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 18:01:39 -0000 That all works for me, assuming the wg and AD is okay with it. There's been enough discussion that I will clear my discuss on the assumption that people will do the right thing. Thanks! Ben. On 6 Jul 2016, at 12:56, Kevin Ma J wrote: > Hi Ben, > > Wrt the RFC5861 reference, the authors agreed that the > stale-if-error text is not needed, and propose the following text to > just deny delivery if the metadata cannot be refreshed: > > In cases where a dCDN is not able to retrieve the entire set of > CDNI > metadata associated with a User Agent request, or it has retrieved > that metadata but it is stale according to standard HTTP caching > rules and cannot be revalidated, for example because > the uCDN is unreachable or returns a HTTP 4xx or 5xx status in > response to some or all of the dCDN's CDNI metadata requests, the > dCDN MUST NOT serve the requested content. > >> - 4, paragraph 5: The MUST seems unneeded. There's no choice to make >> here; this is simply the way CDNI metadata objects are encoded. >> (Recurs >> in 6.4, which seems redundant to this section.) > > We will remove the text from section 4 and just leave the reference > to section 6.4 > > thanx! > > -- Kevin J. Ma > >> -----Original Message----- >> From: Ben Campbell [mailto:ben@nostrum.com] >> Sent: Tuesday, July 05, 2016 10:16 PM >> To: Kevin Ma J >> Cc: The IESG; Ben Niven-Jenkins; Francois Le Faucheur; cdni@ietf.org; >> draft-ietf-cdni-metadata@ietf.org; cdni-chairs@ietf.org >> Subject: Re: Ben Campbell's Discuss on draft-ietf-cdni-metadata-18: >> (with >> DISCUSS and COMMENT) >> >> Thanks for the response. Some response-responses inline. I removed >> stuff >> that seems to be resolved. >> >> Thanks! >> >> Ben. >> >> On 5 Jul 2016, at 20:58, Kevin Ma J wrote: >> >>> Hi Ben, >>> >>> Thanks for the review. >>> >>> Wrt your first discuss comment: I do not recall a discussion, but >>> I >>> think Ben (Niven-Jenkins) would be better equipped to speak about >>> the >>> RFC5861 reference. >> >> Okay. >> >>> >>> Wrt your second discuss comment: We have updated the security >>> considerations text to match the other CDNI drafts; the following >>> will >>> be in the next revision: >>> >>> TLS MUST be used by the server-side (dCDN) and the >>> client-side (uCDN) of the CDNI metadata interface, including >>> authentication of the remote end, unless alternate methods >>> are >>> used for ensuring the security of the information in the >>> CDNI >>> metadata interface requests and responses (such as setting >>> up >>> an IPsec tunnel between the two CDNs or using a physically >>> secured internal network between two CDNs that are owned by >>> the same corporate entity). >> >> >> That text would address my concern. >> >> >> [...] >> >>>> - 7.4: If the Auth type registry is initially unpopulated, doesn't >>>> that >>>> make the Auth property useless for the time being? Why even specify >>>> it >>>> now? >>> >>> The Auth type is used by the Source and DeliveryAuthorization >>> metadata >>> objects, and we wanted both of those to use the same set of Auth >>> objects, so it seemed like a good idea to go ahead and add it to the >>> data model. The URI Signing draft is in WGLC and will register the >>> URI Signing Auth type. It seemed reasonable and more centralized to >>> just let metadata create the registry, with URI Signing coming in >>> close behind to register the first type. >>> >> >> Okay, that seems to make sense. >> >>>> - 8.1, 2nd bullet: Could this sort of attack be used to distribute >>>> compromised content (e.g. malware) to end users? >>> >>> Yes. I was thinking rickrolling, but malware is arguably worse. ;) >>> We can expand on the specific types of threats. >>> >> >> Hmm. Mass rickrolling might be a feature :-) >> >>> >>>> - 11.1, reference to 6706: This is another normative downref that >>>> does >>>> not appear to have been called out in the IETF last call >>>> announcement. I >>>> will leave it to the authors and AD to decide if that's okay. >>> >>> Assuming you mean 6707: >> >> Oops, yes. >> >>> It was suggested by our former AD that draft-ietf-cdni-redirection >>> should have a normative downref to 6707, because of the terminology >>> reference. Metadata has the same terminology reference, so we >>> assumed >>> the same downref would be applicable to this draft. >> >> I won't hold up things over this one--just do the right thing, >> whatever >> that is. :-) >> >>> >>>> Editorial Comments and Nits: >>>> >>>> - General: I don't expect action on this in general, but this draft >>>> seems >>>> to have a lot of repeated material, which makes it considerably >>>> longer >>>> and harder to digest than necessary for the content. (Note that, >>>> for >>>> _normative_ text, such redundancy makes future updates error prone, >>>> even >>>> if the text is consistent now.) >>>> >>>> - 3, first paragraph: I’m not sure what you mean by >>>> “aggregated” in this >>>> context. >>> >>> "grouped" might be a better term? >> >> Okay. >> >>> >>>> - 3.2, third paragraph, last sentence: The MUST seems unneeded. >>>> Please >>>> consider simply saying " ... the dCDN processes the content request >>>> in >>>> accordance with the rest of the metadata. >>> >>> Assuming you mean second paragraph: would a "MAY" work better? >> >> How about "processes" :-) (It's up to you; this was not a blocking >> comment.) >> >>> >>>> - 4, paragraph 5: The MUST seems unneeded. There's no choice to >>>> make >>>> here; this is simply the way CDNI metadata objects are encoded. >>>> (Recurs >>>> in 6.4, which seems redundant to this section.) >>> >>> I'll defer to Ben NJ on this one as well. >> >> Okay. >> >>> understood; will remove the "Note" >>> >>>> - 7.1.x Do you expect IANA to do something with these subsections? >>>> I >>>> don’t see this sort of detail in the IANA registry. Otherwise, >>>> they >>>> seems >>>> to belong in the main body, not the IANA considerations. >>> >>> RFC7736 asks that the designated expert verify the >>> purpose/interface/encoding for each ptype registration. We have >>> just >>> been putting that information in the IANA section to have it all in >>> one place for the expert review. >> >> Okay. From nobody Wed Jul 6 11:07:32 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B6C3E12B059; Wed, 6 Jul 2016 11:07:28 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "Ben Campbell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160706180728.26784.95414.idtracker@ietfa.amsl.com> Date: Wed, 06 Jul 2016 11:07:28 -0700 Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Ben Campbell's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 18:07:29 -0000 Ben Campbell has entered the following ballot position for draft-ietf-cdni-metadata-18: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- The authors have proposed text to address my discuss comments (Thanks!), so I am clearing it on the assumption that people will do the right thing. (See the document history for reference if needed.) Substantive Comments: - 4.1, example (applies to all examples of referenced objects): Given the rather strong guidance to use TLS to move metadata around, shouldn't the examples that show referenced objects use HTTPS URLs? - 4.1.3, "paths" property: Am I correct to assume that _only_ the first match is used? - 7.4: If the Auth type registry is initially unpopulated, doesn't that make the Auth property useless for the time being? Why even specify it now? - 8.1, 2nd bullet: Could this sort of attack be used to distribute compromised content (e.g. malware) to end users? - 8.3: Couldn't lack of integrity protection enable theft-of-content, in addition to DoS? For example, if a MiTM changes the ACLs for a piece of content? - 11.1, reference to 6706: This is another normative downref that does not appear to have been called out in the IETF last call announcement. I will leave it to the authors and AD to decide if that's okay. Editorial Comments and Nits: - General: I don't expect action on this in general, but this draft seems to have a lot of repeated material, which makes it considerably longer and harder to digest than necessary for the content. (Note that, for _normative_ text, such redundancy makes future updates error prone, even if the text is consistent now.) - 3, first paragraph: I’m not sure what you mean by “aggregated” in this context. - 3.2, third paragraph, last sentence: The MUST seems unneeded. Please consider simply saying " ... the dCDN processes the content request in accordance with the rest of the metadata. - 4, paragraph 5: The MUST seems unneeded. There's no choice to make here; this is simply the way CDNI metadata objects are encoded. (Recurs in 6.4, which seems redundant to this section.) - 4.1.2, "Note" in definition of Host property: I usually think of "Note" to designate parenthetical or "sidebar" content. Please consider dropping the "Note" prefix for text that contains 2119 keywords. (There are multiple occurrences throughout.) - 7.1.x Do you expect IANA to do something with these subsections? I don’t see this sort of detail in the IANA registry. Otherwise, they seems to belong in the main body, not the IANA considerations. From nobody Wed Jul 6 11:49:06 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37CF812D51A; Wed, 6 Jul 2016 11:48:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id igO4FrMDsr3i; Wed, 6 Jul 2016 11:48:55 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 96A4712D50A; Wed, 6 Jul 2016 11:48:55 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-fa-577d47f44548 Received: from EUSAAHC008.ericsson.se (Unknown_Domain [147.117.188.96]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 40.36.09012.4F74D775; Wed, 6 Jul 2016 20:03:32 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC008.ericsson.se ([147.117.188.96]) with mapi id 14.03.0294.000; Wed, 6 Jul 2016 14:48:54 -0400 From: Kevin Ma J To: Stephen Farrell , The IESG Thread-Topic: Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) Thread-Index: AQHR139lstjFAGLneEa3x33O9pLNMKALsdQQ Date: Wed, 6 Jul 2016 18:48:50 +0000 Message-ID: References: <20160706121028.7876.62515.idtracker@ietfa.amsl.com> In-Reply-To: <20160706121028.7876.62515.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprCIsWRmVeSWpSXmKPExsUyuXRPgu4X99pwg5YFphZHWn8xWjyd/YfV 4vKZiYwW/xacZrKY8Wcis8X0vdfYHdg8pvzeyOqxtvsqm8eSJT+ZApijuGxSUnMyy1KL9O0S uDI+ft3JWnAqpGLb0hbmBsYtQV2MnBwSAiYS9y7PYYKwxSQu3FvP1sXIxSEkcJRR4kpDLzuE s4xR4t7Mw2BVbAJaEo+//gWzRQQ8JR72nWIBKWIWOMUo0dFxkh0kISyQLPHvw0JmiKIUicPz ZjFC2EYSvfdmg8VZBFQknt18zgZi8wr4Sky98pYFxBYScJCY+ewkWD2ngKPE9B+XwWYyAp33 /dQasMXMAuISt57MhzpbQGLJnvPMELaoxMvH/1ghbCWJSUvPAdkcQPWaEut36UO0KkpM6X7I DrFWUOLkzCcsExjFZiGZOguhYxaSjllIOhYwsqxi5CgtLsjJTTcy2MQIjKtjEmy6OxjvT/c8 xCjAwajEw7vga3W4EGtiWXFl7iFGCQ5mJRFeL//acCHelMTKqtSi/Pii0pzU4kOM0hwsSuK8 Yo8Uw4UE0hNLUrNTUwtSi2CyTBycUg2MIY+S7klUngxX4X/A5Pk+99+lG2sLuX/YVPkdTvzP wiD9L1bwq/6HnJJqy3sbbvY25zTa1H4oEGgWOSLbUadzJ/zlvLbt6mwGf2cqNl/gbvnPduu7 AYvjbwmWpK5VHEw+57/7dE9ZkSA8rUetX+J7s+z10qzZEjyia87tyv7bk7P94IIHO/SUWIoz Eg21mIuKEwHPx30IpwIAAA== Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 18:48:58 -0000 SGkgU3RlcGhlbiwNCg0KICBUaGFua3MgZm9yIHRoZSByZXZpZXcuDQoNCiAgV3J0IHlvdXIgZmly c3QgZGlzY3VzcyBjb21tZW50LCB0aGUgaW50ZW5kZWQgYXV0aCBpcyBVUkkgU2lnbmluZywgd2hp Y2ggaXMgZGVmaW5lZCBpbiAJDQpkcmFmdC1pZXRmLWNkbmktdXJpLXNpZ25pbmcsIGFuZCBpcyBj dXJyZW50bHkgaW4gV0dMQy4gIFRoZSBpZGVhIGlzIHRoYXQgaWYgdGhlIGNvbnRlbnQgb3duZXIg b3IgdUNETiBzaWduZWQgdGhlIFVSSSBhbmQgZGVsaXZlcnkgaXMgZGVsZWdhdGVkIHRvIGEgZENE TiwgdGhlbiB0aGUgZENETiBzaG91bGQgdmFsaWRhdGUgdGhlIHNpZ25pbmcgdG9rZW4gaW4gdGhl IHJlcXVlc3QgYmVmb3JlIHJlc3BvbmRpbmcgd2l0aCB0aGUgY29udGVudC4gIEluIHRoYXQgY2Fz ZSwgdGhlIGRDRE4gbmVlZHMgdG8ga25vdyB0aGF0IGl0IG5lZWRzIHRvIGNoZWNrIGZvciBhIHNp Z25pbmcgdG9rZW4sIGFuZCB3aGF0IHRoZSBwYXJhbWV0ZXJzIGFyZSBmb3IgdmFsaWRhdGluZyB0 aGUgdG9rZW47IHRoaXMgaXMgY29udmV5ZWQgaW4gdGhlIG1ldGFkYXRhLCBhbG9uZyB3aXRoIGhv dyB0byBhY3F1aXJlIHRoZSBjb250ZW50LiAgVGhpcyB0YXNrIHdhcyBzcGxpdCBpbnRvIHNlcGFy YXRlIGRvY3VtZW50cyBmb3IgdmFyaW91cyByZWFzb25zLCBidXQgd2Uga2VwdCB0aGUgcGFydHMg dGhhdCBhcmUgbm90IFVSSSBTaWduaW5nIHNwZWNpZmljIGluIHRoZSBtZXRhZGF0YSBkcmFmdCwg c28gdGhhdCBpdCdzIGluIGEgY2VudHJhbGl6ZWQgcGxhY2UgaWYvd2hlbiBhIG5ldyBhdXRoIHR5 cGUgaXMgYWRkZWQuDQoNCiAgV3J0IHlvdXIgc2Vjb25kIGRpc2N1c3MgY29tbWVudCwgeW91IG1h a2UgYSBnb29kIHBvaW50LiAgSSBhZ3JlZSB0aGF0IHdlIHdvdWxkIChhdCBsZWFzdCkgd2FudCBk b2N1bWVudGF0aW9uL2p1c3RpZmljYXRpbyBvZiBhbnkgaW50ZW50aW9uYWwgc2VjdXJpdHkvcHJp dmFjeSB2aW9sYXRpbmcgbWV0YWRhdGEuICBXZSB3aWxsIGFkZCB0aGUgcG9pbnQgaW4gdGhlIG5l eHQgcmV2aXNpb24uDQoNCiAgUmVzcG9uc2VzIHRvIHlvdXIgb3RoZXIgY29tbWVudHMgaW5saW5l Lg0KDQp0aGFueCENCg0KLS0gIEtldmluIEouIE1hDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS0NCj4gRnJvbTogU3RlcGhlbiBGYXJyZWxsIFttYWlsdG86c3RlcGhlbi5mYXJyZWxsQGNz LnRjZC5pZV0NCj4gU2VudDogV2VkbmVzZGF5LCBKdWx5IDA2LCAyMDE2IDg6MTAgQU0NCj4gVG86 IFRoZSBJRVNHDQo+IENjOiBkcmFmdC1pZXRmLWNkbmktbWV0YWRhdGFAaWV0Zi5vcmc7IGNkbmkt Y2hhaXJzQGlldGYub3JnOw0KPiBmbGVmYXVjaEBjaXNjby5jb207IGNkbmlAaWV0Zi5vcmcNCj4g U3ViamVjdDogU3RlcGhlbiBGYXJyZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWNkbmktbWV0 YWRhdGEtMTg6ICh3aXRoDQo+IERJU0NVU1MgYW5kIENPTU1FTlQpDQo+IA0KPiBTdGVwaGVuIEZh cnJlbGwgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yDQo+IGRy YWZ0LWlldGYtY2RuaS1tZXRhZGF0YS0xODogRGlzY3Vzcw0KPiANCj4gV2hlbiByZXNwb25kaW5n LCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFjdCBhbmQgcmVwbHkgdG8gYWxsDQo+ IGVtYWlsIGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8gYW5kIENDIGxpbmVzLiAoRmVlbCBm cmVlIHRvIGN1dCB0aGlzDQo+IGludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKQ0KPiAN Cj4gDQo+IFBsZWFzZSByZWZlciB0byBodHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVu dC9kaXNjdXNzLWNyaXRlcmlhLmh0bWwNCj4gZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgSUVT RyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCj4gDQo+IA0KPiBUaGUgZG9jdW1lbnQs IGFsb25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQo+ IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY2RuaS1tZXRhZGF0 YS8NCj4gDQo+IA0KPiANCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBESVNDVVNTOg0KPiAtLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQo+IA0KPiANCj4gKDEpIEkgZG9uJ3QgZ2V0IHRoZSBtb2RlbCBmb3IgdGVsbGluZyBhIGRD RE4gdGhhdCB0aGUgdXNlcg0KPiBhZ2VudCBoYXMgdG8gaGF2ZSBhdXRoZW50aWNhdGVkIG9yIHRo YXQgc29tZSBhdXRob3JpemF0aW9uDQo+IGlzIG5lZWRlZCBiZWZvcmUgY29udGVudCBpcyB0byBi ZSBkZWxpdmVyZWQuIENhbiB5b3UNCj4gZXhwbGFpbj8gIEZvciBleGFtcGxlLCBuZWl0aGVyIDQu Mi41IG5vciA0LjIuNyB0ZWxsIG1lIGhvdw0KPiB0byBkbyBhbnl0aGluZyBidXQgYWxsb3cgb3Bl bi1hY2Nlc3MsIGFuZCB0aGUgcmVsZXZhbnQgSUFOQQ0KPiByZWdpc3RyeSAoc2VjdGlvbiA3LjQp IGlzIGVtcHR5LCBzbyBJJ20gcHV6emxlZC4NCj4gDQo+ICgyKSA2LjU6IEkgdGhpbmsgeW91J3Jl IG1pc3NpbmcgYSBNVVNUIGluIHRoZSBsaXN0IGhlcmUuDQo+IEknZCBzdWdnZXN0IHNvbWV0aGlu ZyBsaWtlOiAiNS4gRGVzY3JpYmUgdGhlIHNlY3VyaXR5IGFuZA0KPiBwcml2YWN5IChmb3IgdGhl IHBlcnNvbi91c2VyLWFnZW50LCBub3Qgb25seSB4Q0ROKQ0KPiBjb25zZXF1ZW5jZXMgb2YgdGhl IGV4dGVuc2lvbi4iIEknbSBhc3N1bWluZyB0aGF0IHdlIGFncmVlDQo+IHRoYXQgaXQnZCBiZSBh IGJhZCBpZGVhIGlmIGUuZy4gc29tZSBleHRlbnNpb24gd2VyZSBkZWZpbmVkDQo+IHRoYXQgYWxs b3dlZCBhIHVDRE4gdGVsbCBhIGRDRE4gdG8gdHJ5IHRvIHRyYWNrIGFuZCByZXBvcnQNCj4gb24g YWxsIG9mIGEgdXNlcidzIGFjdGl2aXRpZXMuIChPciBhdCBsZWFzdCwgdGhhdCdkIG5lZWQgdG8N Cj4gYmUgZG9jdW1lbnRlZC9qdXN0aWZpZWQuKQ0KPiANCj4gDQo+IC0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4g Q09NTUVOVDoNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiANCj4gDQo+IC0gZ2VuZXJhbDogSSBhZ3JlZSB3 aXRoIEJlbidzIGRpc2N1c3MgYWJvdXQgdXNlIG9mIFRMUy4gSQ0KPiBhbHNvIHdvbmRlciBpZiBJ UHNlYyBpcyByZWFsbHkgZ29pbmcgdG8gYmUgdXNlZCBoZXJlLiBBbmQNCj4gZXZlbiBpZiBzbywg eW91IG1pZ2h0IGJlIGJldHRlciBvZmYgdG8gc2F5IHRoYXQgVExTIHdpdGgNCj4gbXV0dWFsLWF1 dGggU0hPVUxEIGJlIHVzZWQgaW4gYWxsIGNhc2VzLg0KDQpZZXMuICBUaGUgbmV4dCByZXZpc2lv biB3aWxsIGhhdmUgdGV4dCBpbiBsaW5lIHdpdGggdHJpZ2dlcnMgYW5kIGxvZ2dpbmcuDQoNCj4g LSBnZW5lcmFsOiBEb24ndCB5b3UgbmVlZCBzb21lIGd1aWRhbmNlIGZvciB0aGUgZENETiB0byBz YXkNCj4gd2hlbiB0byBzdG9wIGZvbGxvd2luZyAod2hhdCBtaWdodCBiZSBjaXJjdWxhcikgbGlu a3M/DQoNCkdvb2QgcG9pbnQuICBXZSB3aWxsIHJldmlldyB0aGUgbGluayB0ZXh0IGFuZCBhZGQg bG9vcCBwcmV2ZW50aW9uLg0KDQo+IC0gZ2VuZXJhbDogSSB0aGluayBpdCdkIGJlIGJldHRlciBp ZiB0aGUgZXhhbXBsZXMgZ2l2ZW4gdXNlZA0KPiBodHRwcyBpbiBhbGwgY2FzZXMsIGFzc3VtaW5n IHdlIGRvIHRoaW5rIHRoYXQnZCBiZSBiZXR0ZXIuDQo+IEFuZCBpZiBpdCdkIG5vdCBiZSBiZXR0 ZXIsIHNheWluZyB3aHkgd291bGQgSSB0aGluayBiZSBnb29kLg0KDQpZZXMuICBCZW4gbWFkZSB0 aGUgc2FtZSBjb21tZW50LiAgVGhpcyB3aWxsIGJlIHVwZGF0ZWQgaW4gdGhlIG5leHQgcmV2aXNp b24uDQoNCj4gLSAxLjIsIGxhc3QgcGFyYTogSSBkb24ndCBnZXQgd2hhdCB0aGlzIGlzIHNheWlu Zy4gV2hhdA0KPiBhZGRpdGlvbmFsIHRoaW5ncyBuZWVkIHNwZWNpZnlpbmc/IElmIGFsbCB5b3Ug bWVhbiBpcyB0aGF0DQo+IHRoZSBkQ0ROIGFuZCB1Q0ROIG5lZWQgdG8gYmUgYWJsZSB0byBzZXR1 cCBUTFMgc2Vzc2lvbnMsIGFuZA0KPiBoZW5jZSBuZWVkIHRvIGFncmVlIG9uIHdoYXQgQ0FzIGFu ZCBjaXBoZXJzdWl0ZXMgdG8gdXNlLA0KPiB0aGVuIG1heWJlIGp1c3Qgc2F5IHRoYXQuIChZb3Ug ZG8gYWxyZWFkeSByZWZlciB0byBSRkM3NTI1DQo+IHNvIG1vc3Qgb2YgdGhhdCBpcyBjb3ZlcmVk IHRoZXJlIEkgdGhpbmsuKQ0KDQpZZXMsIENBcyBhbmQgY2lwaGVyc3VpdGVzLCBidXQgdGhlcmUg d2FzIGFsc28gdGhlIHF1ZXN0aW9uIG9mIGtleXMuICAoSSBzdXBwb3NlIGlmIHdlIHdlbnQgd2l0 aCB0aGUgZENETnMgZ2VuZXJhdGluZyB0aGVpciBvd24ga2V5cyBpdCB3b3VsZCBiZSBkb2FibGU/ ICBPciBpZiB3ZSBsZWZ0IGtleSBzaGFyaW5nIHVwIHRvIHRoZSBDRE5zIHRvIGRvIG9mZmxpbmUs IHNpbWlsYXIgdG8gVVJJIFNpZ25pbmc/KQ0KQXQgdGhlIHRpbWUsIHdheSBiYWNrIHdoZW4sIHNv bWUgZm9sa3MgbG9va2VkIGF0IGl0IGFuZCBkZXRlcm1pbmVkIGl0IHRvIGJlIHRvbyBtZXNzeSB0 byB0YWNrbGUuDQpNb3JlIHJlY2VudGx5LCB0aG91Z2ggSSBiZWxpZXZlIHlvdSd2ZSBleHByZXNz ZWQgc29tZSBza2VwdGljaXNtIGFzIHRvIHRoZSBhcHBsaWNhYmlsaXR5IG9mIExVUksgdG8gQ0RO SSwgaXQgc2VlbWVkIGxpa2UgYSBiZXR0ZXIgb3B0aW9uIHRvIHNlZSB3aGF0IHRoZSBzZWN1cml0 eSBleHBlcnRzIGNvdWxkIGNvbWUgdXAgd2l0aCwgcmF0aGVyIHRoYW4gdXMgdHJ5aW5nIHRvIGRl ZmluZSBhIG1ldGFkYXRhIG9iamVjdC4NCg0KPiAtIDQuMS4xOiBJIGRvbid0IHRoaW5rIEktSlNP TiByZXF1aXJlcyB0aGF0IG9yZGVyIGJlDQo+IHByZXNlcnZlZCwgYnV0IHlvdSBzZWVtIHRvIG5l ZWQgdGhhdCBoZXJlLCBlLmcuIGlmIGEgdENETg0KPiBkZWNvZGVzIGFuZCByZS1lbmNvZGVzLCBv ciBpZiBhIHVDRE4gcm91bmQtdHJpcHMgYSBkYXRhDQo+IHN0cnVjdHVyZS4gSXMgdGhlcmUgYSBt aXNzaW5nICJNVVNUIHByZXNlcnZlIG9yZGVyIg0KPiBzb21ld2hlcmU/DQoNCldlIHByb2JhYmx5 IHNob3VsZCd2ZSB1c2VkIHRoZSB3b3JkICJhcnJheSIgKHdoaWNoIGlzIGFuIG9yZGVyZWQgbGlz dCksIHJhdGhlciB0aGFuIHRoZSB3b3JkICJsaXN0Ijsgd2Ugd2lsbCB1cGRhdGUgdGhlIHRleHQg aW4gdGhlIG5leHQgcmV2aXNpb24uDQoNCj4gLSA0LjEueCwgNC4yLngsIDQuMy54OiBJIHdvbmRl ciBpZiB0aGUgc3BlY2lmaWNhdGlvbiBpcyBhDQo+IGJpdCB0b28gbG9vc2UgaW4gcGxhY2VzIGhl cmUsIGUuZy4gd2hhdCBkb2VzICIkJCIgbWVhbiBpbg0KPiA0LjEuNSBhbmQgd2h5IGlzIHRoYXQg c3BlY2lhbD8gIEluIHRoZSBzYW1lIHNlY3Rpb24gSSBhbHNvDQo+IHdhc24ndCBjbGVhciBpZiAi L21vdmllcy8iIGlzIHRoZSBzYW1lIGFzICIvbW92aWVzLyoiIG9yDQo+IG5vdCwgbm9yIGlmIHlv dSBjb25zaWRlciB0aGF0ICIvbW92aWVzLyoiIGRvZXMgb3IgZG9lc24ndA0KPiBtYXRjaCAiL21v dmllcy8xLzIvMyIuIElzbid0IGEgcmVmZXJlbmNlIG5lZWRlZCBpbiA0LjMuND8NCj4gSSdkIGd1 ZXNzIHRoYXQgYSBsb3Qgb2YgdGhpcyBpcyBjbG9zZSBlbm91Z2ggdGhhdA0KPiBpbXBsZW1lbnRh dGlvbnMgd2lsbCBsaWtlbHkgZ2V0IGEgbG90LCBidXQgbm90IGFsbCwgb2YgdGhpcw0KPiByaWdo dCwgYW5kIHRoYXQgdGhhdCBtaWdodCBsZWFkIHRvIGNvcm5lci1jYXNlcyB3aGVyZQ0KPiBpbnRl cm9wIGlzbid0IHNvIGdvb2QuICBJbXByb3ZpbmcgdGhhdCB3b3VsZCBzZWVtIGxpa2UgYQ0KPiBn b29kIGlkZWEsIGJ1dCBwZXJoYXBzIGl0J3MgYmV0dGVyIHRvIHdhaXQgYW5kIHNlZSB3aGF0DQo+ IGRlcGxveW1lbnRzIGRvIGFuZCB0aGVuIHRpZHkgdGhpcyB1cD8gTm90IHN1cmUuICBJbiByZWFk aW5nDQo+IEkgc3BvdHRlZCBhIG51bWJlciBvZiBwbGFjZXMgd2hlcmUgc3VjaCB0aGluZ3Mgb2Nj dXJyZWQgdG8NCj4gbWUgKGJ1dCBkaWRuJ3Qgd3JpdGUgdGhlbSBhbGwgZG93biwgc29ycnk7LSku DQoNClRoZSBHZW5BcnQgcmV2aWV3ZXIgYWxzbyBub3RlZCB0aGUgZXNjYXBlZCBkb2xsYXIgc2ln biAiJCQiIHF1ZXN0aW9uLiAgVGhlIG5leHQgcmV2aXNpb24gd2lsbCB0cnkgdG8gY2xhcmlmeSB0 aGF0IHRleHQuDQoNCj4gLSA2Ljg6IEkgZGlkbid0IGZvbGxvdyB0aGlzLCBzb3JyeTstKSBJIGFz c3VtZSBpdCdzDQo+IGNvbnNpZGVyZWQgY2xlYXIgZW5vdWdoIGZvciBpbXBsZW1lbnRlcnMsIHNv IGZlZWwgZnJlZSB0bw0KPiBpZ25vcmUgbWUsIGJ1dCBJIGRpZG4ndCBnZXQgaG93IHRvIGtub3cg d2hldGhlciBvciBub3QgZS5nLg0KPiAiLnYyLjIuMiIgaXMgbmV3ZXIgdGhhbiAiLnYyIiBvciAi LmZpeGVkLXYxIi4NCg0KV2Ugd2VyZSB0aGlua2luZyAiLnYiICsgTlVNLCB3aGVyZSBjb21wYXJp c29uIGlzIGJhc2VkIG9uIE5VTSwgYnV0IGl0IHByb2JhYmx5IGRvZXNuJ3QgYWN0dWFsbHkgbWF0 dGVyLCBiZWNhdXNlIHRoZSBwdHlwZSBpcyByZWFsbHkgb3BhcXVlIHRvIHRoZSBpbXBsZW1lbnRh dGlvbi4gIEl0IHdhcyBtb3JlIG9mIGEgc3VnZ2VzdGVkIGNvbnZlbnRpb24uDQoNCk1JLlVSSVNp Z25pbmcudjEgd2lsbCBoYXZlIGFuIFJGQyBhc3NvY2lhdGVkIHdpdGggaXQsIGFuZCBoYXMgYSBz ZXQgb2YgcHJvcGVydGllcyBkZWZpbmVkLCBhbmQgTUkuVVJJU2lnbmluZy52MiB3aWxsIGhhdmUg YSBkaWZmZXJlbnQgUkZDIHdpdGggYSB3aG9sZSBvdGhlciBzZXQgb2YgcHJvcGVydGllcyBkZWZp bmVkICh0aG91Z2ggaXQgbWF5IGluY2x1ZGUgYWxsIG9mIE1JLlVSSVNpZ25pbmcudjEgYnkgcmVm ZXJlbmNlKS4gIEkgZG9uJ3QgdGhpbmsgaXQgd2FzIGV2ZXIgaW50ZW5kZWQgdGhhdCBhIENETiB3 b3VsZCBuZWVkIHRvIGNvbXBhcmUgTUkuVVJJU2lnbmluZy52MSBhbmQgTUkuVVJJU2lnbmluZy52 MiBmb3IgYW55IHJlYXNvbjsgb25seSB0aGF0IGEgdW5pcXVlIGlkZW50aWZpZXIgaXMgbmVlZGVk IGZvciBlYWNoICh2ZXJzaW9uIG9mIGEpIG1ldGFkYXRhIG9iamVjdCwgc28gdGhhdCBvbmUgY2Fu IGRldGVybWluZSB3aGF0IGV4YWN0bHkgaXMgc3VwcG9ydGVkLiAgV2UgY2FuIHRyeSB0byBjbGVh biB1cCB0aGF0IHRleHQgYXMgd2VsbC4NCg0KPiAtIDguMzogZGlkIHRoZSBXRyBjb25zaWRlciAo cG9zc2libHkgZnV0dXJlKSB1c2VzIG9mIEpPU0UgdG8NCj4gcHJvdmlkZSBlMmUgc2VjdXJpdHkg ZnJvbSB1Q0ROIHRvIGRDRE4gZXZlbiB2aWEgdENETj8gSSdtIG9rDQo+IHRoYXQgeW91IGRvbid0 IGRlZmluZSB0aGF0IG5vdywgYnV0IHdvbmRlcmVkLCBhcyBpdCBzZWVtcw0KPiBsaWtlIGEgZmFp cmx5IG9idmlvdXMgdGhpbmcgdG8gd2FudC4gKFRvIHRoaXMgc2VjdXJpdHkgbmVyZA0KPiBhbnl3 YXk6LSkgSSBhbHNvIHdvbmRlcmVkIHRoZSBzYW1lIGZvciA4LjQsIGJ1dCBJIGdldCB0aGF0DQo+ IHRoYXQnZCBiZSBsZXNzIGxpa2VseSBvZiB3aWRlc3ByZWFkIHV0aWxpdHkuIElmIHVzaW5nIElQ c2VjDQo+IHRvIHNlY3VyaXR5IGludGVyLUNETiBsaW5rcywgc29tZXRoaW5nIGxpa2UgSk9TRSB3 b3VsZCBzZWVtDQo+IHRvIG1lIHRvIGFkZCBxdWl0ZSBhIGJpdCBvZiB2YWx1ZSwgaWYgdGhlIENE TnMgaW5zaXN0IG9uIG5vdA0KPiB1c2luZyBUTFMuDQoNCkkgZG8gbm90IHJlY2FsbCBhIGRpc2N1 c3Npb24gb2YgSk9TRS4gIEl0J3MgcHJvYmFibHkgbGVzcyBvYnZpb3VzIGZvciB1cyBsZXNzIHNl Y3VyaXR5LXdpc2UuDQoNCnRoYW54IQ0KDQotLSAgS2V2aW4gSi4gTWENCg0K From nobody Wed Jul 6 13:15:37 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7959612D623; Wed, 6 Jul 2016 13:15:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.727 X-Spam-Level: X-Spam-Status: No, score=-5.727 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SHFVVc833A2w; Wed, 6 Jul 2016 13:15:28 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4837B12B018; Wed, 6 Jul 2016 13:15:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 08CD0BE2F; Wed, 6 Jul 2016 21:15:26 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ISCwxw9txXz; Wed, 6 Jul 2016 21:15:24 +0100 (IST) Received: from [10.87.48.210] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 6CA73BDF9; Wed, 6 Jul 2016 21:15:23 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1467836123; bh=YXb35f+wkCbw/+lZKtGvnBfltBfQXpK7MDsa+gwh6Xc=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=2SMlah7a6WJ5ycmlkZkCg7Hx85aQ8Q+vwsw6wKxxZZGjAWEOBSx8BB/GDqnZtWemO jgkco1zM51YCJbCX0qwZVWGT6p0EMI9xYezjQZ/qsIqYa+yQjoOKg84UUFaZKh/6pk RDPj/RpRaveW4/m/LArxrVJN9IqsFJWeZQTM4CX8= To: Kevin Ma J , The IESG References: <20160706121028.7876.62515.idtracker@ietfa.amsl.com> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <577D66DB.7060805@cs.tcd.ie> Date: Wed, 6 Jul 2016 21:15:23 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms010306020809020001040005" Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 20:15:31 -0000 This is a cryptographically signed message in MIME format. --------------ms010306020809020001040005 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hiya, On 06/07/16 19:48, Kevin Ma J wrote: > Hi Stephen, >=20 > Thanks for the review. >=20 > Wrt your first discuss comment, the intended auth is URI Signing, > which is defined in draft-ietf-cdni-uri-signing, and is currently in > WGLC. The idea is that if the content owner or uCDN signed the URI > and delivery is delegated to a dCDN, then the dCDN should validate > the signing token in the request before responding with the content. > In that case, the dCDN needs to know that it needs to check for a > signing token, and what the parameters are for validating the token; > this is conveyed in the metadata, along with how to acquire the > content. This task was split into separate documents for various > reasons, but we kept the parts that are not URI Signing specific in > the metadata draft, so that it's in a centralized place if/when a new > auth type is added. Ah grand. A sentence to that effect might help the reader. And it's ok to add an informative reference to the I-D in question too. >=20 > Wrt your second discuss comment, you make a good point. I agree that > we would (at least) want documentation/justificatio of any > intentional security/privacy violating metadata. We will add the > point in the next revision. Cool. I'll look out for that. >=20 > Responses to your other comments inline. >=20 > thanx! >=20 > -- Kevin J. Ma >=20 >> -----Original Message----- From: Stephen Farrell >> [mailto:stephen.farrell@cs.tcd.ie] Sent: Wednesday, July 06, 2016 >> 8:10 AM To: The IESG Cc: draft-ietf-cdni-metadata@ietf.org; >> cdni-chairs@ietf.org; flefauch@cisco.com; cdni@ietf.org Subject: >> Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with=20 >> DISCUSS and COMMENT) >>=20 >> Stephen Farrell has entered the following ballot position for=20 >> draft-ietf-cdni-metadata-18: Discuss >>=20 >> When responding, please keep the subject line intact and reply to >> all email addresses included in the To and CC lines. (Feel free to >> cut this introductory paragraph, however.) >>=20 >>=20 >> Please refer to >> https://www.ietf.org/iesg/statement/discuss-criteria.html for more >> information about IESG DISCUSS and COMMENT positions. >>=20 >>=20 >> The document, along with other ballot positions, can be found >> here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ >>=20 >>=20 >>=20 >> ----------------------------------------------------------------------= >> >>=20 DISCUSS: >> ----------------------------------------------------------------------= >> >> >> >>=20 (1) I don't get the model for telling a dCDN that the user >> agent has to have authenticated or that some authorization is >> needed before content is to be delivered. Can you explain? For >> example, neither 4.2.5 nor 4.2.7 tell me how to do anything but >> allow open-access, and the relevant IANA registry (section 7.4) is >> empty, so I'm puzzled. >>=20 >> (2) 6.5: I think you're missing a MUST in the list here. I'd >> suggest something like: "5. Describe the security and privacy (for >> the person/user-agent, not only xCDN) consequences of the >> extension." I'm assuming that we agree that it'd be a bad idea if >> e.g. some extension were defined that allowed a uCDN tell a dCDN to >> try to track and report on all of a user's activities. (Or at >> least, that'd need to be documented/justified.) >>=20 >>=20 >> ----------------------------------------------------------------------= >> >>=20 COMMENT: >> ----------------------------------------------------------------------= >> >> >> >>=20 - general: I agree with Ben's discuss about use of TLS. I >> also wonder if IPsec is really going to be used here. And even if >> so, you might be better off to say that TLS with mutual-auth SHOULD >> be used in all cases. >=20 > Yes. The next revision will have text in line with triggers and > logging. >=20 >> - general: Don't you need some guidance for the dCDN to say when to >> stop following (what might be circular) links? >=20 > Good point. We will review the link text and add loop prevention. >=20 >> - general: I think it'd be better if the examples given used https >> in all cases, assuming we do think that'd be better. And if it'd >> not be better, saying why would I think be good. >=20 > Yes. Ben made the same comment. This will be updated in the next > revision. >=20 >> - 1.2, last para: I don't get what this is saying. What additional >> things need specifying? If all you mean is that the dCDN and uCDN >> need to be able to setup TLS sessions, and hence need to agree on >> what CAs and ciphersuites to use, then maybe just say that. (You do >> already refer to RFC7525 so most of that is covered there I >> think.) >=20 > Yes, CAs and ciphersuites, but there was also the question of keys. > (I suppose if we went with the dCDNs generating their own keys it > would be doable? Or if we left key sharing up to the CDNs to do > offline, similar to URI Signing?) At the time, way back when, some > folks looked at it and determined it to be too messy to tackle. More > recently, though I believe you've expressed some skepticism as to the > applicability of LURK to CDNI,=20 Yeah - anything transitive with LURK is very scary. The "L" part becomes fairly meaningless I reckon. But that's a debate for another day. > it seemed like a better option to see > what the security experts could come up with, rather than us trying > to define a metadata object. Anyway, I get what you meant now. But I figure it might be better to remain silent on this here, and just refer to 7525 for now. >=20 >> - 4.1.1: I don't think I-JSON requires that order be preserved, but >> you seem to need that here, e.g. if a tCDN decodes and re-encodes, >> or if a uCDN round-trips a data structure. Is there a missing "MUST >> preserve order" somewhere? >=20 > We probably should've used the word "array" (which is an ordered > list), rather than the word "list"; we will update the text in the > next revision. >=20 >> - 4.1.x, 4.2.x, 4.3.x: I wonder if the specification is a bit too >> loose in places here, e.g. what does "$$" mean in 4.1.5 and why is >> that special? In the same section I also wasn't clear if >> "/movies/" is the same as "/movies/*" or not, nor if you consider >> that "/movies/*" does or doesn't match "/movies/1/2/3". Isn't a >> reference needed in 4.3.4? I'd guess that a lot of this is close >> enough that implementations will likely get a lot, but not all, of >> this right, and that that might lead to corner-cases where interop >> isn't so good. Improving that would seem like a good idea, but >> perhaps it's better to wait and see what deployments do and then >> tidy this up? Not sure. In reading I spotted a number of places >> where such things occurred to me (but didn't write them all down, >> sorry;-). >=20 > The GenArt reviewer also noted the escaped dollar sign "$$" question. > The next revision will try to clarify that text. Just to note that I think there are a bunch more (and apologies again for not documenting 'em all). All below is fine, Cheers, S. >=20 >> - 6.8: I didn't follow this, sorry;-) I assume it's considered >> clear enough for implementers, so feel free to ignore me, but I >> didn't get how to know whether or not e.g. ".v2.2.2" is newer than >> ".v2" or ".fixed-v1". >=20 > We were thinking ".v" + NUM, where comparison is based on NUM, but it > probably doesn't actually matter, because the ptype is really opaque > to the implementation. It was more of a suggested convention. >=20 > MI.URISigning.v1 will have an RFC associated with it, and has a set > of properties defined, and MI.URISigning.v2 will have a different RFC > with a whole other set of properties defined (though it may include > all of MI.URISigning.v1 by reference). I don't think it was ever > intended that a CDN would need to compare MI.URISigning.v1 and > MI.URISigning.v2 for any reason; only that a unique identifier is > needed for each (version of a) metadata object, so that one can > determine what exactly is supported. We can try to clean up that > text as well. >=20 >> - 8.3: did the WG consider (possibly future) uses of JOSE to=20 >> provide e2e security from uCDN to dCDN even via tCDN? I'm ok that >> you don't define that now, but wondered, as it seems like a fairly >> obvious thing to want. (To this security nerd anyway:-) I also >> wondered the same for 8.4, but I get that that'd be less likely of >> widespread utility. If using IPsec to security inter-CDN links, >> something like JOSE would seem to me to add quite a bit of value, >> if the CDNs insist on not using TLS. >=20 > I do not recall a discussion of JOSE. It's probably less obvious for > us less security-wise. >=20 > thanx! >=20 > -- Kevin J. Ma >=20 --------------ms010306020809020001040005 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjA3MDYy MDE1MjNaMC8GCSqGSIb3DQEJBDEiBCAHW2TPwTidm5+RpnSII2C+dMbXklMfdN1QBBu9qATS 8jBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQBWaP4omHw8VYeMBDGsodjCAbhGJ5Gc/+g08CPteboA5bgiyYm7Iyv4 AW2nvcrRc19JMWfPuUqneZ5B3WnhdUDVLKeaPDd5WsCc4IluXwTjLcD8Jil/4fgyBSG3j7GL uLNTngwbgr9hh4rd3M/zvUtU/+3zP5D8+Hql5jTEFkW8XJ0g1GFyvh/UsAnEZkgHcd8LzwVD ee3eUQEXkHVxVXHz+sLLUhB3cvosJn6ZSNo0OjUEHi3mYmze2jxn02XctNmEHaU3Yrx9Vldt C4CVNqA1G14LDiFiAi2v+FfCmzHhzDD048zuTJBEQqAaEgwyLa9mNMlTFpkliv5/cS02v93t AAAAAAAA --------------ms010306020809020001040005-- From nobody Wed Jul 6 13:39:11 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A240812D672; Wed, 6 Jul 2016 13:39:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D90dFMljw9PH; Wed, 6 Jul 2016 13:39:01 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71FF112D66E; Wed, 6 Jul 2016 13:39:01 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-5c-577d61c18b05 Received: from EUSAAHC006.ericsson.se (Unknown_Domain [147.117.188.90]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 90.1C.09012.1C16D775; Wed, 6 Jul 2016 21:53:37 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC006.ericsson.se ([147.117.188.90]) with mapi id 14.03.0294.000; Wed, 6 Jul 2016 16:39:00 -0400 From: Kevin Ma J To: Stephen Farrell , The IESG Thread-Topic: Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) Thread-Index: AQHR139lstjFAGLneEa3x33O9pLNMKALsdQQgABoe4D//8OPcA== Date: Wed, 6 Jul 2016 20:38:59 +0000 Message-ID: References: <20160706121028.7876.62515.idtracker@ietfa.amsl.com> <577D66DB.7060805@cs.tcd.ie> In-Reply-To: <577D66DB.7060805@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0024_01D1D7A5.24454470" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrGIsWRmVeSWpSXmKPExsUyuXRPlO7BxNpwgw1vrSyOtP5itHg6+w+r xeUzExkt/i04zWQx489EZovpe6+xO7B5TPm9kdVjbfdVNo8lS34yBTBHcdmkpOZklqUW6dsl cGXsPyVacHkyY0XPxilsDYxvGhi7GDk5JARMJO5dX8MEYYtJXLi3nq2LkYtDSOAoo0TPpnYo ZxmjRMf3frAONgEticdf/4J1iAh4SjzsO8UCUsQscAqoqOMkO0hCWCBZ4t+HhcwQRSkSh+fN AmrmALKdJI5dZAEJswioSFyaeBcszCvgK9HyXAFi12JGiWO794PVcApoSkzrhRjJCHTd91MQ lzILiEvcejIf6moRiYcXT7NB2KISLx//Y4WwlSQmLT3HClHfyyjR9qUCxOYVEJQ4OfMJywRG 0VlIRs1CUjYLSRlEXFvi6c2nULa8xPa3c5ghbGuJGb8OskHYihJTuh+yQ9imEq+PfmRcwMix ipGjtLggJzfdyGATIzBGj0mw6e5gvD/d8xCjAAejEg/vgq/V4UKsiWXFlbmHGFWAWh9tWH2B UYolLz8vVUmEd0Z2bbgQb0piZVVqUX58UWlOavEhRmkOFiVxXrFHiuFCAumJJanZqakFqUUw WSYOTqkGRmZunkORLDOyZMonMc2u0L+q/YzXRNzsk0rVp8ln+F6n8z64+cRmLkv2q+WcDf8X zZ+pyTsxaMO3/6+WzPYsVWxn7yx3uZwo1DY9WDCv/kkGU1+uka+clYhUAGeT3O3Nma0TG5VO 1Nz9/c7LJj6v4Zf0i7DoiarxpffkXj6Y+95IskfgedFVJZbijERDLeai4kQABecwx9kCAAA= Archived-At: Cc: "flefauch@cisco.com" , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 20:39:05 -0000 ------=_NextPart_000_0024_01D1D7A5.24454470 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Hi Stephen, > Ah grand. A sentence to that effect might help the reader. And it's > ok to add an informative reference to the I-D in question too. ... > Anyway, I get what you meant now. But I figure it might be better > to remain silent on this here, and just refer to 7525 for now. will do, for both. thanx! -- Kevin J. Ma > -----Original Message----- > From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie] > Sent: Wednesday, July 06, 2016 4:15 PM > To: Kevin Ma J; The IESG > Cc: draft-ietf-cdni-metadata@ietf.org; cdni-chairs@ietf.org; > flefauch@cisco.com; cdni@ietf.org > Subject: Re: Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: > (with DISCUSS and COMMENT) > > > Hiya, > > On 06/07/16 19:48, Kevin Ma J wrote: > > Hi Stephen, > > > > Thanks for the review. > > > > Wrt your first discuss comment, the intended auth is URI Signing, > > which is defined in draft-ietf-cdni-uri-signing, and is currently in > > WGLC. The idea is that if the content owner or uCDN signed the URI > > and delivery is delegated to a dCDN, then the dCDN should validate > > the signing token in the request before responding with the content. > > In that case, the dCDN needs to know that it needs to check for a > > signing token, and what the parameters are for validating the token; > > this is conveyed in the metadata, along with how to acquire the > > content. This task was split into separate documents for various > > reasons, but we kept the parts that are not URI Signing specific in > > the metadata draft, so that it's in a centralized place if/when a new > > auth type is added. > > Ah grand. A sentence to that effect might help the reader. And it's > ok to add an informative reference to the I-D in question too. > > > > > Wrt your second discuss comment, you make a good point. I agree that > > we would (at least) want documentation/justificatio of any > > intentional security/privacy violating metadata. We will add the > > point in the next revision. > > Cool. I'll look out for that. > > > > > Responses to your other comments inline. > > > > thanx! > > > > -- Kevin J. Ma > > > >> -----Original Message----- From: Stephen Farrell > >> [mailto:stephen.farrell@cs.tcd.ie] Sent: Wednesday, July 06, 2016 > >> 8:10 AM To: The IESG Cc: draft-ietf-cdni-metadata@ietf.org; > >> cdni-chairs@ietf.org; flefauch@cisco.com; cdni@ietf.org Subject: > >> Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with > >> DISCUSS and COMMENT) > >> > >> Stephen Farrell has entered the following ballot position for > >> draft-ietf-cdni-metadata-18: Discuss > >> > >> When responding, please keep the subject line intact and reply to > >> all email addresses included in the To and CC lines. (Feel free to > >> cut this introductory paragraph, however.) > >> > >> > >> Please refer to > >> https://www.ietf.org/iesg/statement/discuss-criteria.html for more > >> information about IESG DISCUSS and COMMENT positions. > >> > >> > >> The document, along with other ballot positions, can be found > >> here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ > >> > >> > >> > >> ---------------------------------------------------------------------- > >> > >> > DISCUSS: > >> ---------------------------------------------------------------------- > >> > >> > >> > >> > (1) I don't get the model for telling a dCDN that the user > >> agent has to have authenticated or that some authorization is > >> needed before content is to be delivered. Can you explain? For > >> example, neither 4.2.5 nor 4.2.7 tell me how to do anything but > >> allow open-access, and the relevant IANA registry (section 7.4) is > >> empty, so I'm puzzled. > >> > >> (2) 6.5: I think you're missing a MUST in the list here. I'd > >> suggest something like: "5. Describe the security and privacy (for > >> the person/user-agent, not only xCDN) consequences of the > >> extension." I'm assuming that we agree that it'd be a bad idea if > >> e.g. some extension were defined that allowed a uCDN tell a dCDN to > >> try to track and report on all of a user's activities. (Or at > >> least, that'd need to be documented/justified.) > >> > >> > >> ---------------------------------------------------------------------- > >> > >> > COMMENT: > >> ---------------------------------------------------------------------- > >> > >> > >> > >> > - general: I agree with Ben's discuss about use of TLS. I > >> also wonder if IPsec is really going to be used here. And even if > >> so, you might be better off to say that TLS with mutual-auth SHOULD > >> be used in all cases. > > > > Yes. The next revision will have text in line with triggers and > > logging. > > > >> - general: Don't you need some guidance for the dCDN to say when to > >> stop following (what might be circular) links? > > > > Good point. We will review the link text and add loop prevention. > > > >> - general: I think it'd be better if the examples given used https > >> in all cases, assuming we do think that'd be better. And if it'd > >> not be better, saying why would I think be good. > > > > Yes. Ben made the same comment. This will be updated in the next > > revision. > > > >> - 1.2, last para: I don't get what this is saying. What additional > >> things need specifying? If all you mean is that the dCDN and uCDN > >> need to be able to setup TLS sessions, and hence need to agree on > >> what CAs and ciphersuites to use, then maybe just say that. (You do > >> already refer to RFC7525 so most of that is covered there I > >> think.) > > > > Yes, CAs and ciphersuites, but there was also the question of keys. > > (I suppose if we went with the dCDNs generating their own keys it > > would be doable? Or if we left key sharing up to the CDNs to do > > offline, similar to URI Signing?) At the time, way back when, some > > folks looked at it and determined it to be too messy to tackle. More > > recently, though I believe you've expressed some skepticism as to the > > applicability of LURK to CDNI, > > Yeah - anything transitive with LURK is very scary. The "L" part > becomes fairly meaningless I reckon. But that's a debate for another > day. > > > it seemed like a better option to see > > what the security experts could come up with, rather than us trying > > to define a metadata object. > > Anyway, I get what you meant now. But I figure it might be better > to remain silent on this here, and just refer to 7525 for now. > > > > >> - 4.1.1: I don't think I-JSON requires that order be preserved, but > >> you seem to need that here, e.g. if a tCDN decodes and re-encodes, > >> or if a uCDN round-trips a data structure. Is there a missing "MUST > >> preserve order" somewhere? > > > > We probably should've used the word "array" (which is an ordered > > list), rather than the word "list"; we will update the text in the > > next revision. > > > >> - 4.1.x, 4.2.x, 4.3.x: I wonder if the specification is a bit too > >> loose in places here, e.g. what does "$$" mean in 4.1.5 and why is > >> that special? In the same section I also wasn't clear if > >> "/movies/" is the same as "/movies/*" or not, nor if you consider > >> that "/movies/*" does or doesn't match "/movies/1/2/3". Isn't a > >> reference needed in 4.3.4? I'd guess that a lot of this is close > >> enough that implementations will likely get a lot, but not all, of > >> this right, and that that might lead to corner-cases where interop > >> isn't so good. Improving that would seem like a good idea, but > >> perhaps it's better to wait and see what deployments do and then > >> tidy this up? Not sure. In reading I spotted a number of places > >> where such things occurred to me (but didn't write them all down, > >> sorry;-). > > > > The GenArt reviewer also noted the escaped dollar sign "$$" question. > > The next revision will try to clarify that text. > > Just to note that I think there are a bunch more (and apologies again > for not documenting 'em all). > > All below is fine, > Cheers, > S. > > > > > >> - 6.8: I didn't follow this, sorry;-) I assume it's considered > >> clear enough for implementers, so feel free to ignore me, but I > >> didn't get how to know whether or not e.g. ".v2.2.2" is newer than > >> ".v2" or ".fixed-v1". > > > > We were thinking ".v" + NUM, where comparison is based on NUM, but it > > probably doesn't actually matter, because the ptype is really opaque > > to the implementation. It was more of a suggested convention. > > > > MI.URISigning.v1 will have an RFC associated with it, and has a set > > of properties defined, and MI.URISigning.v2 will have a different RFC > > with a whole other set of properties defined (though it may include > > all of MI.URISigning.v1 by reference). I don't think it was ever > > intended that a CDN would need to compare MI.URISigning.v1 and > > MI.URISigning.v2 for any reason; only that a unique identifier is > > needed for each (version of a) metadata object, so that one can > > determine what exactly is supported. We can try to clean up that > > text as well. > > > >> - 8.3: did the WG consider (possibly future) uses of JOSE to > >> provide e2e security from uCDN to dCDN even via tCDN? I'm ok that > >> you don't define that now, but wondered, as it seems like a fairly > >> obvious thing to want. (To this security nerd anyway:-) I also > >> wondered the same for 8.4, but I get that that'd be less likely of > >> widespread utility. If using IPsec to security inter-CDN links, > >> something like JOSE would seem to me to add quite a bit of value, > >> if the CDNs insist on not using TLS. > > > > I do not recall a discussion of JOSE. It's probably less obvious for > > us less security-wise. > > > > thanx! > > > > -- Kevin J. Ma > > ------=_NextPart_000_0024_01D1D7A5.24454470 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVSDCCAyAw ggIIoAMCAQICAR0wDQYJKoZIhvcNAQEFBQAwOTELMAkGA1UEBhMCRkkxDzANBgNVBAoTBlNvbmVy YTEZMBcGA1UEAxMQU29uZXJhIENsYXNzMiBDQTAeFw0wMTA0MDYwNzI5NDBaFw0yMTA0MDYwNzI5 NDBaMDkxCzAJBgNVBAYTAkZJMQ8wDQYDVQQKEwZTb25lcmExGTAXBgNVBAMTEFNvbmVyYSBDbGFz czIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQF0o1ncrwDZbHRPoWN/xIvb1/ gC01O+FvqGepvwMcTYxvMkfVQWikEwTBNQyahEP8XB3/ibPoFxjNkV/7iePqv05dfBsm03V57eaE 41flrSnE9Doo56V7hDZps/1edr2jLZnTkE4jKH0YY/FUOyaddluXQrL/rvBO7N05lU6DBn/nSUDI xQGyVFpmHT38+ek8Cp6BuHDwAYvkI1R8yK74kB4AlnLUVM9hI7zq+50CldG2uXE6aQg/D7ThQseI 9T+YqKe6HOBxce9YV4FQelxrdEYOgwOYw46obvJ2Mm4ng8Jz89wY6LST6nVEawRgIHFXh53zvqCQ Iz2KJOHaIdvDAgMBAAGjMzAxMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0OBAoECEqgqliE0148MAsG A1UdDwQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAWs6H+RZyFVdLHdmb56ImMOyTZ9/WLdI0r/c4 pc6rFrmrL3w1y6zQD7RMK/yA72uMkV82dvfbsxsZ6vSyEf1hcUS/KLM6Hb+zQ+ifv9wxCHGwnY3W NEcykMZlJPegSnwEc485bxeMcrW9S8h6+HuDwyhOnAnqZz+yZwQbwxTa+OdJJJHQHWr6YTnva+ch dQYH2BK0ISBwQnGB2jyaNr6mWw1qbJofkXv5+e9Cuk5OnswMjZTc2UWcXuxCUGOu9F3EsRLcyjuo Lp0UWgV1t+zXY+K6NbYECJHo2p2c9ma1GKwKplQmNDPSG8HUfxo6jguqMm7b/E8ln9kyx5ZacKzf TDCCBX0wggRloAMCAQICEQDR4D5bSO3Hngk/QN7hYcOLMA0GCSqGSIb3DQEBBQUAMDkxCzAJBgNV BAYTAkZJMQ8wDQYDVQQKEwZTb25lcmExGTAXBgNVBAMTEFNvbmVyYSBDbGFzczIgQ0EwHhcNMDcx MDE4MTI1MjAxWhcNMTkxMDE3MDUwNDExWjA3MRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UE AwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AMK+6yfwIaPzaSZVfp3FVRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65I tqwA3GV17CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+XZ75L jo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+/jXh7VB7qTCNGdMJ jmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs81Mt8Bz17Ww5OXOAFshSsCPN4D7c 3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkmdtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+J Wov3F0fUTPHSiXk+TT2YqGHeOh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0h ADnJoWjiUIMusDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4 pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fsslESl1MpWtTw EhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQarMCpgKIv7NHfirZ1fpoeDVN AgMBAAGjggGAMIIBfDBOBggrBgEFBQcBAQRCMEAwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYS50cnVz dC50ZWxpYXNvbmVyYS5jb20vc29uZXJhY2xhc3MyY2EuY2VyMA8GA1UdEwEB/wQFMAMBAf8wGQYD VR0gBBIwEDAOBgwrBgEEAYIPAgMBAQIwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1 j5qWDNXr+nuqF+gTEjCBuQYDVR0fBIGxMIGuMG+gbaBrhmlsZGFwOi8vY3JsLTEudHJ1c3QudGVs aWFzb25lcmEuY29tL2NuPVNvbmVyYSUyMENsYXNzMiUyMENBLG89U29uZXJhLGM9Rkk/Y2VydGlm aWNhdGVyZXZvY2F0aW9ubGlzdDtiaW5hcnkwO6A5oDeGNWh0dHA6Ly9jcmwtMi50cnVzdC50ZWxp YXNvbmVyYS5jb20vc29uZXJhY2xhc3MyY2EuY3JsMBMGA1UdIwQMMAqACEqgqliE0148MA0GCSqG SIb3DQEBBQUAA4IBAQB7L2bVGhb4q6FZUtsGVNbneHh+Q5OmrXeyTfAHxWAg90PVlDgAY0+cBk4o PxOL9ZVGnhec070CdiGWHwrqqKER1uDC2H97BTr3jBzGl9mf/43MxbY7NJB9LHMONfDeF+V+8bMK ziBdedr0HocKuKtBbzbvChOkDOaAKZkqCVXEC4+x1AUwqx4++t6D3aSnC3+1CWt2+AXfXrIzjE6p AKqZcnJfrI2mqIatmAtaXvW12I8TyZR+ERIMcOVGIa4MYfxxSpz0TSSz94DWfLK3DlKiXaxT+Tqo k3yH1wZhC+6q/11vPLL52cPWk2HciFDaylK2u3watcxmk8kaxNEt6K5zMIIF5TCCA82gAwIBAgIQ Rv4txqXmZ+sXEhErG3pCQjANBgkqhkiG9w0BAQUFADA6MREwDwYDVQQKDAhFcmljc3NvbjElMCMG A1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MjAeFw0xNTAxMDIwNTM3MTNaFw0xODAx MDIwNTM3MTJaMGIxETAPBgNVBAoMCEVyaWNzc29uMRMwEQYDVQQDDApLZXZpbiBNYSBKMSYwJAYJ KoZIhvcNAQkBFhdrZXZpbi5qLm1hQGVyaWNzc29uLmNvbTEQMA4GA1UEBRMHZWtlbm1hYTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKg3uQ6WXdh5TN9HJoOIHYYukINFpcsPgEKtxaIz v2737Ll5aQ24DuVAEgX+JhMSJnJaXuecLOzLLgSQzOYPIDIICzyuvf1EzlSAt2p3hOigAuPSe3dz Rx6gOciikLqTu7+Im+6cH2qvItGZgWPANxEUhw0SbnYeXUj0FzqDZ+oCVXIKieiu6LRjjOI30EZs /HaAeSElCMaINWYO/iZUwKh16jFhFGugPJqBvT+vGhSgJN241sFRI+SOmzk1RtBM0YAW6Z1X7SsI J1Jw8ZH/3re0U8rm1sw9XrXUmJMORKEutB8IGxy3ZJaGv73qOs3A0MQZa6E3HC6/BdjDt3drHHUC AwEAAaOCAb0wggG5MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwudHJ1c3QudGVsaWEuY29t L2VyaWNzc29ubmxpbmRpdmlkdWFsY2F2Mi5jcmwwgYIGCCsGAQUFBwEBBHYwdDAoBggrBgEFBQcw AYYcaHR0cDovL29jc3AyLnRydXN0LnRlbGlhLmNvbTBIBggrBgEFBQcwAoY8aHR0cDovL2NhLnRy dXN0LnRlbGlhc29uZXJhLmNvbS9lcmljc3Nvbm5saW5kaXZpZHVhbGNhdjIuY2VyMCIGA1UdEQQb MBmBF2tldmluLmoubWFAZXJpY3Nzb24uY29tMFUGA1UdIAROMEwwSgYMKwYBBAGCDwIDAQESMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vQ1BT MB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjAdBgNVHQ4EFgQUPgEsMN2jlrM7D5XYI9lj kV6OWBMwHwYDVR0jBBgwFoAUsQ3K1Ea3r4YCwy9vBsoOdnF/SzcwDgYDVR0PAQH/BAQDAgWgMA0G CSqGSIb3DQEBBQUAA4ICAQDWznBvLyHvtiqNzzTG2tZrrR/HFgjB+o06op2xSxrofdQKLvtvWj0y yvI1IOzRTS9ZOMnvnoFvqQ+wI/YTbGsGGZSc7k2ExRljJFGAVEN0MsQqh+qDuSXEl97ND/B7Ad9T jfJ+viUGvVEXyU7x3Yr1FAhbGxrwS/UkG9/f4ucl/jT80x7uEAA1YJYicu9sWOz2wNLfOqQHFBR1 dqMSbtuuKRH62Q4LcQv960WCrAL//drojOGp5dCOImiduU6OWZhFR+dB49M1eXeh1pzV9FQ71esq +BROKOVjN3UPj/1v51ileSnV8zuqIc0MCPHUXhKEoITKtTOqNAXHHb2KqGOCkTNhfx+LUt+3CtXk DkRdeAGtgM/QpiTH0DYS/YdZ+WMCdTpffjoO1GICrL4IIaCSGRulSC66QgYvpUAobWNojIXCI24/ A1hmCM/0lSzMmbSAzbhLGpisP74e0F5kNfe5dB2rrd705mtH/q2slSZVQz/UWENuVToEEgvye3LI dgsKb1F++LUma16l3B6pAcBcUdWZvvRdJeDYaXr1IJzTbUu5Ub6ZegwJr3bNxvgw4vKi92PYjmzg TGmbFHuEdvqEK4Vgpb6pQwYmGANgu7k1MDm52s0ojVD3y7MSo8Z6J7+kQO7XRV72rPcCfoQTk0fQ XYv5Lb4gUm8/tms85d02yTCCBrYwggSeoAMCAQICEQCgDMvMm5mY7OI6cPR8wcBZMA0GCSqGSIb3 DQEBBQUAMDcxFDASBgNVBAoMC1RlbGlhU29uZXJhMR8wHQYDVQQDDBZUZWxpYVNvbmVyYSBSb290 IENBIHYxMB4XDTE0MDUyNzA3NDYyMVoXDTI0MDUyNzA3NDYyMVowOjERMA8GA1UECgwIRXJpY3Nz b24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjIwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDaulPrX0iWU5+JOOqjddx4Gnl17DJhklkoXOgOSBMhW6FzGVt5RR7K Pv+rjt2YpbwdoqWSYa4VPkS/72vuQoWsvz2avWWXhPTdNzrB3zs5cJO7sKIyd+LRy4l/8kKK4iPm +Q18XyGF0xTuc5WS3WiMScJSxEKdIOP8xehBraHZabrGh9OxQHC4iBHkzD0YF3J/vBqBTr7blRzY f1h3j5a7qVIHCPfz+eCE175mResXDQRI7LvMiZtVaqitBl0oAJiJyeBmvEujBNsIEgUQ6JcQFG5n y0EazLywv7clwb7izvLgoXc6SFrd0D7TGJtkdldVJtMwDYXpyFMGAijT6uf8h2kuPIwrDgQFNEyI QZ4q52ZpRGwugC6sMxgHEDGjA/CxX9aC5Vi1EMRJiOGF6gV3T+V5yHDHSBBeQbVAXm8wSTDBfXQw dro/AXqET0mG6Rpe4q2FGBaauE8qHEO6qR3WAEgvjVfFU2k6xZx1qmvwhkXadxh6ZIMXzgb6Wpji vLnR0GEKNrgN2DXdvo+6eAt45Bhvmeka2TrJDxMLWiBy8QYgNeNXYQsuREnDsjWo6wF0LqbA5769 om9nn/uJzmzxb3nT1iHue5co9J93ta06kxiASHvcIzZwAOjKnmk0vR3IT7Qbzq2of3E1s18xo8DM 9D91Cak0Nq+RALtdv1uZKQIDAQABo4IBuDCCAbQwgYoGCCsGAQUFBwEBBH4wfDAtBggrBgEFBQcw AYYhaHR0cDovL29jc3AudHJ1c3QudGVsaWFzb25lcmEuY29tMEsGCCsGAQUFBzAChj9odHRwOi8v cmVwb3NpdG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jZXIw EgYDVR0TAQH/BAgwBgEB/wIBADBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzBLBgNVHR8E RDBCMECgPqA8hjpodHRwOi8vY3JsLTMudHJ1c3QudGVsaWFzb25lcmEuY29tL3RlbGlhc29uZXJh cm9vdGNhdjEuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMC AQYwHQYDVR0OBBYEFLENytRGt6+GAsMvbwbKDnZxf0s3MB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM 1ev6e6oX6BMSMA0GCSqGSIb3DQEBBQUAA4ICAQBuByBsr6x3PZBCsmGbcSZ/XL+0tnVMblInoJgL 1Bh3PiRicgdo8l+6cvWp/ArBwMYNwSNyrvY9IewyaV8n65c5oN+l2JDUuzrdANVKnYxha7ZyCEiP mY98sB2bnZgxfJLXQYoRwI7pOOwfyoP2fCYVCd+xhsfysYiIl4ORzE3TpeppQ2yWkyBBmoHUXJh9 7ue6+bJ2fqnVUoOVMVnYYEtvsz67v7w2z3fvdcy04/RnoylxSenxADi1tY9iIydHMgyOu3dfzsxU 8AivMGG4aKStsCfUEyg0LlkbhqMrdness3e1qAEueSRNASLfpFwyRmzmiuNh9onzuhER2yYhK/6I eCs4HQHrPhkY8JUmhtmdL2uErOZWOs38FQhGWHWXI0g6SgdDObU0GEHju0MkDziOhm+BVwPZKN7B 7wD7OPj6vlLVo6d8vLGK9bywhEfXjxLIC3Qhtu5lJPTgIo5Bup+aBBjiJ/u9BfqryqZpudnWfG+w xC327rpNAq2OKdFsR92wbehSZD3mSSAemDVwGB2Yu0XHQYyyYfpWsGyGEyRSHKFhRwJdINPzWLI8 9wy4Wc+PgqyekkEmJqe6g4XSQFj4mqtwvqhP4dg2QCcKM/bh62RwfM7GeSS/LFGe84KmJjTDfvT8 c2rK8nEyZ/emOtwCGXQ6tZCByMNLxeDwU1TGbTGCAvMwggLvAgEBME4wOjERMA8GA1UECgwIRXJp Y3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjICEEb+Lcal5mfrFxIR Kxt6QkIwCQYFKw4DAhoFAKCCAXowGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0B CQUxDxcNMTYwNzA2MjA0MDQ0WjAjBgkqhkiG9w0BCQQxFgQU0/OI61YZK60Cnammlj8hdqH/V1sw WwYJKoZIhvcNAQkPMU4wTDAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwIC AUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwBwYFKw4DAhowXQYJKwYBBAGCNxAEMVAwTjA6MREw DwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MgIQ Rv4txqXmZ+sXEhErG3pCQjBfBgsqhkiG9w0BCRACCzFQoE4wOjERMA8GA1UECgwIRXJpY3Nzb24x JTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjICEEb+Lcal5mfrFxIRKxt6QkIw DQYJKoZIhvcNAQEBBQAEggEAnQKTvj38U10RNYC8iTZBoAAK7VMBIM77QLQ5OvwIIIxhB0uh7ZWP c9ZN/lX6zUy87G04yITdW8r03wN9BIJeKXfz8IndaZ6073Y56kD/hBfctYmSV2UnAO0ZR6MztGhd bhJdeV2c7DlLM/B/Orlj6lhjT+eG33+IXvz74yJpwjNRIKlAL+jeX32tgRlVTcaaQa0cYgKRZBur A60mo50iRTxC5xTmexPlEzkk86ygO/nectZ6gHjsttaauuwFNH/c3t0k/RWINB8UOcDoPiQ8vzPs pFhDAnJMiEECSKIhgSkkPsCdoRY91S0be27NWjfaVAR27I0tza5GdnehalK7qAAAAAAAAA== ------=_NextPart_000_0024_01D1D7A5.24454470-- From nobody Wed Jul 6 14:52:49 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8937512D0E2; Wed, 6 Jul 2016 14:52:44 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Alissa Cooper" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160706215244.26808.95926.idtracker@ietfa.amsl.com> Date: Wed, 06 Jul 2016 14:52:44 -0700 Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Alissa Cooper's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 21:52:45 -0000 Alissa Cooper has entered the following ballot position for draft-ietf-cdni-metadata-18: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - Sec 4.2.2.1: It seems odd to me that deny is the default given that footprints are mandatory to specify. It seems like if footprints are going to be specified, the more common case would be to specify footprints where access is allowed, rather than where access is not allowed. - Sec 6.3: "the HostIndex URI could be discovered" seems like conjecture unless some discovery mechanism has been specified somewhere. I would suggest either citing an existing discovery mechanism or not saying this. - Sec 6.7: It seems like saying that CSPs and CDNs should avoid metadata conflict isn't quite enough. If a dCDN encounters conflicting metadata, what is it supposed to do? I think some sort of error condition would be useful to specify. - I support Stephen's DISCUSS. From nobody Thu Jul 7 12:52:15 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8891912D86B; Thu, 7 Jul 2016 12:52:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1qZMoVLDPDO2; Thu, 7 Jul 2016 12:52:05 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABFC012D86A; Thu, 7 Jul 2016 12:52:04 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-3e-577ea83477b0 Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 87.9A.09012.438AE775; Thu, 7 Jul 2016 21:06:29 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0294.000; Thu, 7 Jul 2016 15:52:03 -0400 From: Kevin Ma J To: Alissa Cooper , The IESG Thread-Topic: Alissa Cooper's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) Thread-Index: AQHR19C8/jiJ5UQk1EO4GAg7IEN/HqANWi9w Date: Thu, 7 Jul 2016 19:52:03 +0000 Message-ID: References: <20160706215244.26808.95926.idtracker@ietfa.amsl.com> In-Reply-To: <20160706215244.26808.95926.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprMIsWRmVeSWpSXmKPExsUyuXRPrK7pirpwg/4zLBbTz/xltDjS+ovR 4unsP6wWl89MZLR4/3o3o8WMPxOZHdg8vjx5yeSxc9Zddo8lS34yBTBHcdmkpOZklqUW6dsl cGXMWnScpeCAfMWRzx2sDYw35LoYOTkkBEwkui7uYoewxSQu3FvPBmILCRxllNg9IayLkQvI XsYoMfnkE2aQBJuAlsTjr3+ZQGwRAXuJaVd/sIEUMQucYpS4fnA9WJGwQJTE6b8d7BBF0RIv GvYwQ9hGEu03WxhBbBYBFYlfz5+CxXkFfCU+7/vDCLHZUeJs82ywKzgFnCROTnsMtowR6Lrv p9aA2cwC4hK3nsxngrhaQGLJnvPMELaoxMvH/1ghbEWJff3TgW7gAKrXlFi/Sx+iVVFiSvdD doi1ghInZz5hmcAoNgvJ1FkIHbOQdMxC0rGAkWUVI0dpcUFObrqRwSZGYFQdk2DT3cF4f7rn IUYBDkYlHt6E+tpwIdbEsuLK3EOMEhzMSiK8pRvqwoV4UxIrq1KL8uOLSnNSiw8xSnOwKInz ij1SDBcSSE8sSc1OTS1ILYLJMnFwSjUwii1jZPy3Vifuy9sN9i82TKoSO8TxbsP37ffeZ4VP Xclh7NC94c3Nm1/9KhzipFL+7pjn8fZ60OrU2zIady9fDHotHnuawfp67PY+sz8R97iNuPkq O9e1ba8oNBQV9398tJL76yWhApWD949wJWwQ/6Byo9vi7r6X67uy9O+s2toTO3NrqFXuZSWW 4oxEQy3mouJEAL/sIyCmAgAA Archived-At: Cc: "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Alissa Cooper's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jul 2016 19:52:06 -0000 SGkgQWxpc3NhLA0KDQogIFRoYW5rcyBmb3IgdGhlIHJldmlldy4gIFJlc3BvbnNlcyBpbmxpbmUu DQoNCi0tICBLZXZpbiBKLiBNYQ0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZy b206IEFsaXNzYSBDb29wZXIgW21haWx0bzphbGlzc2FAY29vcGVydy5pbl0NCj4gU2VudDogV2Vk bmVzZGF5LCBKdWx5IDA2LCAyMDE2IDU6NTMgUE0NCj4gVG86IFRoZSBJRVNHDQo+IENjOiBkcmFm dC1pZXRmLWNkbmktbWV0YWRhdGFAaWV0Zi5vcmc7IGNkbmktY2hhaXJzQGlldGYub3JnOw0KPiBm bGVmYXVjaEBjaXNjby5jb207IGNkbmlAaWV0Zi5vcmcNCj4gU3ViamVjdDogQWxpc3NhIENvb3Bl cidzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLWNkbmktbWV0YWRhdGEtMTg6DQo+ICh3aXRo IENPTU1FTlQpDQpbc25pcF0gDQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gQ09NTUVOVDoNCj4gLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KPiANCj4gLSBTZWMgNC4yLjIuMTogSXQgc2VlbXMgb2RkIHRvIG1lIHRoYXQgZGVu eSBpcyB0aGUgZGVmYXVsdCBnaXZlbiB0aGF0DQo+IGZvb3RwcmludHMgYXJlIG1hbmRhdG9yeSB0 byBzcGVjaWZ5LiBJdCBzZWVtcyBsaWtlIGlmIGZvb3RwcmludHMgYXJlDQo+IGdvaW5nIHRvIGJl IHNwZWNpZmllZCwgdGhlIG1vcmUgY29tbW9uIGNhc2Ugd291bGQgYmUgdG8gc3BlY2lmeQ0KPiBm b290cHJpbnRzIHdoZXJlIGFjY2VzcyBpcyBhbGxvd2VkLCByYXRoZXIgdGhhbiB3aGVyZSBhY2Nl c3MgaXMgbm90DQo+IGFsbG93ZWQuDQoNClRoaXMgaXMgYSBmYWlyIHBvaW50LiAgSSBiZWxpZXZl IHRoZSB0aGlua2luZyB3YXMgdGhhdCwgYW55b25lIHdobyB3YW50cyB0byBzZXQgYSByZXN0cmlj dGlvbiAoTG9jYXRpb25BQ0wsIFRpbWVXaW5kb3dBQ0wsIG9yIFByb3RvY29sQUNMKSBpcyBjb25j ZXJuZWQgYWJvdXQgbWFraW5nIHN1cmUgdGhhdCBjb250ZW50IGRvZXMgbm90IGdvIG91dCB1bmRl ciBjZXJ0YWluIGNvbmRpdGlvbnMsIHNvIHRoZSBzYWZlc3QgdGhpbmcgdG8gZG8gaXMgaGF2ZSBh IGRlZmF1bHQgZGVueSBhbmQgcmVxdWlyZSBhbiBleHBsaWNpdCBhbGxvdyAoc28gdGhhdCBhbiBl cnJhbnQgb21pc3Npb24gZG9lcyBub3QgdmlvbGF0ZSBhbnkgbGljZW5zZSBhZ3JlZW1lbnQpLiAg RnJvbSBhIG1lc3NhZ2UgdmVyYm9zaXR5IHBlcnNwZWN0aXZlLCB5b3UgYXJlIHByb2JhYmx5IGNv cnJlY3QgdGhhdCBhIGRlZmF1bHQgb2YgYWxsb3cgd291bGQgYmUgbW9yZSBlZmZpY2llbnQuICBJ IGNvdWxkIGJlIHBlcnN1YWRlZCBlaXRoZXIgd2F5Lg0KDQo+IC0gU2VjIDYuMzogInRoZSBIb3N0 SW5kZXggVVJJIGNvdWxkIGJlIGRpc2NvdmVyZWQiIHNlZW1zIGxpa2UgY29uamVjdHVyZQ0KPiB1 bmxlc3Mgc29tZSBkaXNjb3ZlcnkgbWVjaGFuaXNtIGhhcyBiZWVuIHNwZWNpZmllZCBzb21ld2hl cmUuIEkgd291bGQNCj4gc3VnZ2VzdCBlaXRoZXIgY2l0aW5nIGFuIGV4aXN0aW5nIGRpc2NvdmVy eSBtZWNoYW5pc20gb3Igbm90IHNheWluZw0KPiB0aGlzLg0KDQpUaGlzIGlzIGFsc28gYSBmYWly IHBvaW50LiAgVGhlcmUgaGFkIGJlZW4gYSBwcm9wb3NhbCBmb3IgYSBib290c3RyYXAgaW50ZXJm YWNlIChkcmFmdC1jaG9pLWNkbmktY29udHJvbC1pbml0LWJvb3RzdHJhcHBpbmcpLCBidXQgaXQg bmV2ZXIgbWF0ZXJpYWxpemVkLiAgV2Ugd2lsbCByZW1vdmUgImRpc2NvdmVyeSIuDQoNCj4gLSBT ZWMgNi43OiBJdCBzZWVtcyBsaWtlIHNheWluZyB0aGF0IENTUHMgYW5kIENETnMgc2hvdWxkIGF2 b2lkIG1ldGFkYXRhDQo+IGNvbmZsaWN0IGlzbid0IHF1aXRlIGVub3VnaC4gSWYgYSBkQ0ROIGVu Y291bnRlcnMgY29uZmxpY3RpbmcgbWV0YWRhdGEsDQo+IHdoYXQgaXMgaXQgc3VwcG9zZWQgdG8g ZG8/IEkgdGhpbmsgc29tZSBzb3J0IG9mIGVycm9yIGNvbmRpdGlvbiB3b3VsZCBiZQ0KPiB1c2Vm dWwgdG8gc3BlY2lmeS4NCg0KSUlSQywgdGhlIHRyaWNreSBwYXJ0IGlzIGtub3dpbmcgd2hldGhl ciBvciBub3QgdHdvIHBpZWNlcyBvZiBtZXRhZGF0YSBjb25mbGljdCBvciBub3Q/ICBBcyBhIGh1 bWFuIHJlYWRpbmcgUkZDcyBhbmQgY29uZmlnIEkgbWlnaHQgYmUgYWJsZSB0byB0ZWxsLCBidXQg d2UgZGlkbid0IGNvbWUgdXAgd2l0aCBhIGdvb2Qgd2F5IHRvIGdlbmVyaWNhbGx5IGRldGVjdCBj b25mbGljdHMuICBJIHN1cHBvc2Ugd2UgY291bGQgaGF2ZSBhIHJlZ2lzdHJ5IG9mIGFsbCBtZXRh ZGF0YSBjb25mbGljdHMgKHdpdGggdGhlIHNwZWNpZmljIHByb3BlcnR5IHZhbHVlcyB0aGF0IGNh dXNlIHRoZSBjb25mbGljdHMpLCBhbmQgcmVxdWlyZSB0aGF0IG1ldGFkYXRhIGludGVyZmFjZSB1 c2VycyB2YWxpZGF0ZSB0aGUgY29uZmlndXJlZCBjb21iaW5hdGlvbnMsIGJ1dCBpdCBzZWVtcyB1 bndpZWxkeS4gIERvIHlvdSBoYXZlIGFueSBzcGVjaWZpYyB0aG91Z2h0cyBoZXJlPw0KDQpJIHN1 cHBvc2Ugd2UgY291bGQgYWRkIGFub3RoZXIgYnVsbGV0IHRvIHRoZSBleHRlbnNpYmlsaXR5IHNl Y3Rpb24sIHJlcXVpcmluZyB0aGF0IG5ldyBHZW5lcmljTWV0YWRhdGEgb2JqZWN0cyBkZXNjcmli ZSBhbnkgb2Jzb2xlc2NlbmNlIG9mIG9yIGNvbmZsaWN0IHdpdGggYW55IG90aGVyIEdlbmVyaWNN ZXRhZGF0YSBvYmplY3RzLCBidXQgdGhhdCBzdGlsbCBkb2Vzbid0IGdldCB1cyB0byBiZWluZyBh YmxlIHRvIGZsYWcgYW4gZXJyb3IgY29uZGl0aW9uIGF0IHJ1biB0aW1lLiAgSSBhbSBvcGVuIHRv IHN1Z2dlc3Rpb25zLg0KDQo+IC0gSSBzdXBwb3J0IFN0ZXBoZW4ncyBESVNDVVNTLg0KDQp1bmRl cnN0b29kLg0KDQp0aGFueCENCg0KLS0gIEtldmluIEouIE1hDQo= From nobody Thu Jul 7 17:43:42 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD48B12D751; Thu, 7 Jul 2016 17:43:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vhT9C6GuYVr4; Thu, 7 Jul 2016 17:43:37 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.144]) by ietfa.amsl.com (Postfix) with ESMTP id 1C24912B03E; Thu, 7 Jul 2016 17:43:36 -0700 (PDT) Received: from 176.red-83-53-71.dynamicip.rima-tde.net ([83.53.71.176] helo=[192.168.1.93]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1bLJtH-0000KN-0x; Fri, 08 Jul 2016 01:43:35 +0100 Content-Type: multipart/alternative; boundary="Apple-Mail=_A88D2757-FE46-4BC5-B2DB-155AF3FC5683" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: <577D66DB.7060805@cs.tcd.ie> Date: Fri, 8 Jul 2016 01:43:32 +0100 Message-Id: <150AD89E-279B-4D79-898E-1AB930525ACF@niven-jenkins.co.uk> References: <20160706121028.7876.62515.idtracker@ietfa.amsl.com> <577D66DB.7060805@cs.tcd.ie> To: Stephen Farrell X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: "flefauch@cisco.com" , "cdni-chairs@ietf.org" , The IESG , "cdni@ietf.org" , "draft-ietf-cdni-metadata@ietf.org" Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-metadata-18: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 00:43:40 -0000 --Apple-Mail=_A88D2757-FE46-4BC5-B2DB-155AF3FC5683 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On 6 Jul 2016, at 21:15, Stephen Farrell = wrote: > On 06/07/16 19:48, Kevin Ma J wrote: >>> - 1.2, last para: I don't get what this is saying. What additional >>> things need specifying? If all you mean is that the dCDN and uCDN >>> need to be able to setup TLS sessions, and hence need to agree on >>> what CAs and ciphersuites to use, then maybe just say that. (You do >>> already refer to RFC7525 so most of that is covered there I >>> think.) >>=20 >> Yes, CAs and ciphersuites, but there was also the question of keys. >> (I suppose if we went with the dCDNs generating their own keys it >> would be doable? Or if we left key sharing up to the CDNs to do >> offline, similar to URI Signing?) At the time, way back when, some >> folks looked at it and determined it to be too messy to tackle. More >> recently, though I believe you've expressed some skepticism as to the >> applicability of LURK to CDNI,=20 >=20 > Yeah - anything transitive with LURK is very scary. The "L" part > becomes fairly meaningless I reckon. But that's a debate for another > day. In case it is useful...I was one of the folks Kevin mentions that was = worried it was too messy to tackle for a couple of reasons (1) I was = worried if we tried to specify some key distribution mechanism we=E2=80=99= d come up against lots of resistance from security folks which would bog = down progress, and (2) majority of the CDNI use cases I was aware of = involved delivering video which was likely to be DRM=E2=80=99d = (Nokia=E2=80=99s Velocix CDN product has supported HTTPS for years and = I=E2=80=99m not aware of any of our customers delivering video over = HTTPS primarily because their content is already DRM=E2=80=99d and they = don=E2=80=99t want to pay the performance hit that comes with TLS for = already encrypted content). Ben --Apple-Mail=_A88D2757-FE46-4BC5-B2DB-155AF3FC5683 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On 6 Jul 2016, at 21:15, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:
On 06/07/16 19:48, Kevin = Ma J wrote:
- 1.2, last para: = I don't get what this is saying. What additional
things = need specifying? If all you mean is that the dCDN and uCDN
need to be able to setup TLS sessions, and hence need to = agree on
what CAs and ciphersuites to use, then maybe just = say that. (You do
already refer to RFC7525 so most of that = is covered there I
think.)

Yes, CAs and ciphersuites, but there was also the question of = keys.
(I suppose if we went with the dCDNs generating = their own keys it
would be doable?  Or if we left key = sharing up to the CDNs to do
offline, similar to URI = Signing?) At the time, way back when, some
folks looked at = it and determined it to be too messy to tackle. More
recently, though I believe you've expressed some skepticism = as to the
applicability of LURK to CDNI, 

Yeah - anything transitive = with LURK is very scary. The "L" part
becomes fairly meaningless I reckon. But that's = a debate for another
day.

In = case it is useful...I was one of the folks Kevin mentions that was = worried it was too messy to tackle for a couple of reasons (1) I was = worried if we tried to specify some key distribution mechanism we=E2=80=99= d come up against lots of resistance from security folks which would bog = down progress, and (2) majority of the CDNI use cases I was aware of = involved delivering video which was likely to be DRM=E2=80=99d = (Nokia=E2=80=99s Velocix CDN product has supported HTTPS for years and = I=E2=80=99m not aware of any of our customers delivering video over = HTTPS primarily because their content is already DRM=E2=80=99d and they = don=E2=80=99t want to pay the performance hit that comes with TLS for = already encrypted content).

Ben

= --Apple-Mail=_A88D2757-FE46-4BC5-B2DB-155AF3FC5683-- From nobody Fri Jul 8 04:12:02 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED57812D176 for ; Fri, 8 Jul 2016 04:11:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.627 X-Spam-Level: X-Spam-Status: No, score=-5.627 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ng2cUzT3S6-4 for ; Fri, 8 Jul 2016 04:11:56 -0700 (PDT) Received: from fromintouta.tno.nl (fromintouta.tno.nl [134.221.1.26]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14D8212D127 for ; Fri, 8 Jul 2016 04:11:55 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.28,329,1464645600"; d="scan'208";a="66497008" Received: from exc-cashub03.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.222]) by mailhost1a.tno.nl with ESMTP; 08 Jul 2016 13:11:54 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB03.tsn.tno.nl ([fe80::6d39:f277:173e:a926%13]) with mapi id 14.03.0294.000; Fri, 8 Jul 2016 13:11:53 +0200 From: "Brandenburg, R. (Ray) van" To: Ben Niven-Jenkins , "Content Delivery Networks Interconnection Discussion List" Thread-Topic: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing Thread-Index: AdHSDAIj8Q+3AOh3Q/WhloflAutMVQCOR2MAATEZ7QA= Date: Fri, 8 Jul 2016 11:11:53 +0000 Message-ID: References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> In-Reply-To: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.17.0.160611 x-originating-ip: [134.221.225.191] x-esetresult: clean, is OK x-esetid: 37303A29F3684966657167 Content-Type: text/plain; charset="utf-8" Content-ID: <588934058D2F2F49886FEABF9E045781@tno.nl> MIME-Version: 1.0 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 11:12:00 -0000 SGkgQmVuLA0KDQpUaGFua3MgZm9yIHRoZSB0aG9yb3VnaCByZXZpZXchIFNlZSBteSBjb21tZW50 cyBiZWxvdy4NCg0KUmF5DQoNCk9uIDAyLzA3LzE2IDEzOjM1LCAiQ0ROaSBvbiBiZWhhbGYgb2Yg QmVuIE5pdmVuLUplbmtpbnMiIDxjZG5pLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGJl bkBuaXZlbi1qZW5raW5zLmNvLnVrPiB3cm90ZToNCg0KS2V2aW4sIENvbGxlYWd1ZXMsDQoNCkkg cmV2aWV3ZWQgZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nLTA5ICYgYmVsb3cgYXJlIG15IGNv bW1lbnRzLg0KDQpHZW5lcmFsOg0KDQpUaGUgZG9jdW1lbnQgaXMgbm90IGNsZWFyIG9uIHdoZXRo ZXIgaW1wbGVtZW50ZXJzIGFyZSBleHBlY3RlZCB0byBpbXBsZW1lbnQgYm90aCBzaGFyZWQgc2Vj cmV0ICYgZGlnaXRhbCBzaWduYXR1cmUgYWxnb3JpdGhtcyBmb3Igc2lnbmVkIFVSSSB2YWxpZGF0 aW9uLiBUaGlzIGNvdWxkIGxlYWQgdG8gaW50ZXJvcCBwcm9ibGVtcyB3aGVyZSBkaWZmZXJlbnQg aW1wbGVtZW50YXRpb24gaW1wbGVtZW50IG9uZSBidXQgbm90IHRoZSBvdGhlci4NCg0KTWF5YmUg c3BlY2lmeSBhIG1pbmltdW0gYmFzZWxpbmUgb2YgTVVTVCBzdXBwb3J0IHNoYXJlZCBzZWNyZXQg KGFzIEFGQUlLIHRoYXQgaXMgd2hhdCBpcyB1c2VkIGluIHRoZSBmaWVsZCkgd2l0aCBTSE9VTEQg aW1wbGVtZW50IGRpZ2l0YWwgc2lnbmF0dXJlcyBmb3IgdGhlIDEgY29ybmVyIGNhc2UgZm9yIHdo aWNoIGRpZ2l0YWwgc2lnbmF0dXJlcyBwcm92aWRlIGFuIGFkdmFudGFnZS4NCg0KSeKAmW0gc29t ZXdoYXQgYWdhaW5zdCBzcGVjaWZ5aW5nIG11c3QgaW1wbGVtZW50IGJvdGggc2hhcmVkIHNlY3Jl dCAmIGRpZ2l0YWwgc2lnbmF0dXJlcyBiZWNhdXNlIEnigJl2ZSBuZXZlciBzZWVuIGEgZGlnaXRh bCBzaWduYXR1cmUgYmFzZWQgc2lnbmVkIFVSSSBpbiB0aGUgZmllbGQgYW5kIEnigJltIGZhbWls aWFyIHdpdGggcXVpdGUgYSBmZXcgc2lnbmVkIFVSSSBhbGdvcml0aG1zL2ltcGxlbWVudGF0aW9u cyBvZiBkaWZmZXJlbnQgQ0ROcy4gVGhhdCBzYXlzIHRvIG1lIGZvbGtzIGFyZSBub3QgbGlrZWx5 IHRvIGltcGxlbWVudCBtb3JlIHRoYW4gdGhlIHNoYXJlZCBzZWNyZXQgYWxnb3JpdGhtIHVubGVz cyB0aGV5IHJlYWxseSBuZWVkIHRvLiBJIGtub3cgQ2lzY28gaGF2ZSBhIGRpZ2l0YWwgc2lnbmF0 dXJlIGltcGxlbWVudGF0aW9uIG1heWJlIHRoZXkgY291bGQgaGVscCB3aXRoIGhvdyBtdWNoIHVz ZSBpdCBzZWVzIGluIHRoZSBmaWVsZD8NCg0KW1JheV0gQWdyZWVkIHRoYXQgd2Ugc2hvdWxkbuKA mXQgbWFrZSBkaWdpdGFsIHNpZ25hdHVyZXMgbWFuZGF0b3J5LiBBcyBmb3IgbWFraW5nIHN1cHBv cnQgZm9yIHNoYXJlZCBzZWNyZXRzIG1hbmRhdG9yeTogSSBndWVzcyB0aGF0IG1ha2VzIHNlbnNl LiANCg0KVGhlIGRvY3VtZW50IGNvdWxkIGRvIHdpdGggc29tZSBtb3JlIGV4YW1wbGVzIG9mIHtV UkksIGF0dHJpYnV0ZXMsIFVSSVNpZ25pbmdQYWNrYWdlLCBTaWduZWQgVVJJfSBjb3ZlcmluZyBl LmcuIElQdjQgJiBJUHY2LCBvbmUgaW5jbHVkaW5nIGEgVVJJIFBhdGggUGF0dGVybiBldGMuDQoN ClNlY3Rpb24gMi4xOg0KVVJJIFBhdHRlcm4gQ29udGFpbmVyIChVUEMpIGRlZmluaXRpb24gLSBo b3cgZG9lcyBvbmUgcmVwcmVzZW50IGEgVVJJIHBhdHRlcm4gdGhhdCBjb250YWlucyBhIGxpdGVy YWwg4oCYO+KAmSBiZWNhdXNlIHRoZSBVUkkvVVJJIHBhdHRlcm4gY29udGFpbnMgaW4gcGF0aCBw YXJhbWV0ZXJzIHRvIG1hdGNoIGFnYWluc3Q/IERvZXMgcHJlc2VuY2Ugb2YgYSBsaXRlcmFsIOKA mDvigJkgbmVlZCB0byBiZSBlc2NhcGVkIHdpdGgg4oCYJCcgdG9vIHRvIGRpc3Rpbmd1aXNoIGl0 IGZyb20gdGhlIHVzZSBvZiDigJg74oCZIHRvIHNlcGFyYXRlIFVSSSBwYXR0ZXJucyB3aXRoaW4g dGhlIFVSSSBQYXR0ZXJuIENvbnRhaW5lcj8NCg0KW1JheV0gR29vZCBwb2ludC4gTGl0ZXJhbCBz ZW1pLWNvbG9ucyBkbyBpbmRlZWQgbmVlZCB0byBiZSBlc2NhcGVkLiBJ4oCZbGwgYWRkIHRoaXMg aW4gdGhlIG5leHQgcmV2aXNpb24NCg0KU2VjdGlvbiAyLjI6DQpXaHkgaXMgdGhlcmUgYSBLSUQg KHN0cmluZykgJiBLSURfTlVNIChpbnRlZ2VyKSBmb3Igc2hhcmVkIHNlY3JldHMva2V5cyBhbmQg b25seSBDS0kgKGludGVnZXIpIGZvciBDbGllbnQgSVAga2V5cz8gVG8gYmUgY29uc2lzdGVudCBz aG91bGQgaXQgYmUgQ0tJX05VTT8NCg0KVGhlIGRvY3VtZW50IGFsc28gc2F5cw0KICAgSW4gY2Fz ZXMNCiAgIHdoZXJlIG51bWVyaWNhbCBLRVkgSURzIGFyZSB1c2VkLCBpdCBpcyBSRUNPTU1FTkRF RCB0byB1c2UgS0lEX05VTQ0KICAgaW5zdGVhZCBvZiBLSUQuDQpXaGljaCBtYWtlcyBtZSB0aGlu aywgd2h5PyBXaGF0IHRoZSBLSUQgbWVhbnMvcmVwcmVzZW50cyBpcyBjb21tdW5pY2F0ZWQgb3V0 IG9mIGJhbmQgKGFuZCBob3cgdG8gZG8gdGhhdCBpcyBvdXQgb2Ygc2NvcGUgb2YgdGhlIGRvY3Vt ZW50KS4gSXQgc2VlbXMgc3RyYWlnaHRmb3J3YXJkIHRvIHNheSBLSUQgaXMgYWx3YXlzIGEgc3Ry aW5nICh3aGljaCBjYW4gcmVwcmVzZW50IGFuIGludGVnZXIpIGFuZCBnZXQgcmlkIG9mIEtJRF9O VU0gZW50aXJlbHkuIFRoYXQgd291bGQgbWVhbiB3ZSBuZWVkIG9uZSBsZXNzIGF0dHJpYnV0ZSBk ZWZpbmluZyAob3IgdHdvIGxlc3MgaWYgd2UgbmVlZCBzdHJpbmcgJiBpbnRlZ2VyIGF0dHJpYnV0 ZXMgZm9yIENLSSkgYW5kIGF2b2lkcyBmb2xrcyBoYXZpbmcgdG8gd29yayBvdXQgd2hhdCB0byBk byAmIGltcGxlbWVudCBjb3JuZXIgY2FzZXMgbGlrZSB3aGF0IHRvIGRvIGlmIEtJRCAmIEtJRF9O VU0gYXJlIGJvdGggcHJlc2VudC4NCg0KV2h5IG5vdCBqdXN0IGhhdmUgS0lEIGFuZCBDS0kgYm90 aCBhcyBzdHJpbmdzIGFuZCByZW1vdmUgS0lEX05VTT8NCg0KW1JheV0gVGhpcyB3YXMgdGhlIGNv bnNlbnN1cyByZXN1bHQgb2YgYSBsZW5ndGh5IGRpc2N1c3Npb24gYmV0d2VlbiB0aGUgYXV0aG9y cyBib3RoIG9uIGFuZCBvZmYgbGlzdCDimLogVGhlIG1haW4gcmVhc29uIHdlIGluY2x1ZGVkIGEg c3RyaW5nLWJhc2VkIEtJRCB3YXMgc28gdGhhdCB3ZSBjYW4gaGF2ZSBVUkxzIHRvIHB1YmxpYyBr ZXlzLiBIb3dldmVyLCBhcyBMZWlmIHBvaW50ZWQgb3V0LCBmb3IgaW50ZXJvcCBhbmQgcGVyZm9y bWFuY2UgcmVhc29ucyBpdCBoZWxwcyB0byBoYXZlIG1heGltdW0gbGVuZ3RoIGZvciB0aGUgS0lE IGZpZWxkLiBXaXRoIHB1YmxpYyBrZXlzIHRoaXMgaXMgaGFyZCB0byBkby4gU28gaW4gY2FzZXMg d2hlcmUgcGVyZm9ybWFuY2UgaXMgZXNzZW50aWFsLCB1c2luZyBhIGZpeGVkLWxlbmd0aCBpbnQg ZmllbGQgaXMgZmFzdGVyLiBUaGUgcmVhc29uIHdlIGRpZG7igJl0IGV4dGVuZCB0aGlzIHRvIHRo ZSBDS0kgZmllbGQgaXMgdGhhdCBmb3IgQ0tJIHdlIG9ubHkgc3VwcG9ydCBzeW1tZXRyaWMgZW5j cnlwdGlvbiwgYW5kIGhlbmNlIGEgaW50ZWdlciBrZXkgaW5kZXggc2hvdWxkIGJlIHN1ZmZpY2ll bnQuDQoNCkFsb25nIHNpbWlsYXIgbGluZXMuIFdoeSBoYXZlIGJvdGggSEYgJiBEU0EuIElzIGl0 IGltcGxpY2l0IGZyb20gdGhlIHZhbHVlIG9mIHRoZSBhdHRyaWJ1dGUgKGUuZy4gJ1NIQS0yNTYn IHZzIOKAmEVDRFNB4oCZKSB3aGV0aGVyIGEgc2hhcmVkIHNlY3JldCBvciBkaWdpdGFsIHNpZ25h dHVyZSBhbGdvcml0aG0gaXMgYmVpbmcgdXNlZD8gT3IgaXMgdGhlIHB1cnBvc2UgdG8gZW5hYmxl IFVSSSB0byBiZSBzaWduZWQgKCYgc3Vic2VxdWVudGx5KSB2ZXJpZmllZCB3aXRoIGVpdGhlciAo aWYgYm90aCBhcmUgc3BlY2lmaWVkKSBvciB3aXRoIGJvdGg/DQoNCltSYXldIFdlIGV4cGxpY2l0 bHkgcnVsZSBvdXQgaGF2aW5nIGJvdGggSEYgYW5kIERTQSBpbmZvcm1hdGlvbiBlbGVtZW50cyBp biBhIHNpbmdsZSBTaWduZWQgVVJJLiBUaGUgcmVhc29uIHdlIHdlbnQgZm9yIHNlcGFyYXRlIElF cyBpcyB0aGF0IGl0IG1ha2VzIGRlc2NyaWJpbmcgdGhlIGFsZ29yaXRobSBzbGlnaHRseSBsZXNz IGNvbXBsZXguIEFuZCBnaXZlbiB0aGF0IHdlIGJhc2U2NC1lbmNvZGUgdGhlIGZ1bGwgVVJJIFNp Z25pbmcgUGFja2FnZSBhbnl3YXkgaXQgZG9lc27igJl0IHJlYWxseSBtYXR0ZXIgaW4gdGVybXMg b2YgbmFtZXNwYWNlIGNvbGxpc2lvbnMuDQoNClNlY3Rpb24gMy4xOg0KOClhKSBzYXlzDQogICAg ICAgICAgIE5vdGU6IHRoZSBPcmlnaW5hbCBVUkkNCiAgICAgICAgICAgQ29udGFpbmVyIGluZm9y bWF0aW9uIGVsZW1lbnQgTVVTVCBiZSB0aGUgbGFzdCBpbmZvcm1hdGlvbg0KICAgICAgICAgICBl bGVtZW50IGluIHRoZSBidWZmZXIgYmVmb3JlIHRoZSBzaWduYXR1cmUgaW5mb3JtYXRpb24NCiAg ICAgICAgICAgZWxlbWVudC4NCjgpYikgZG9lcyBub3QgaGF2ZSBhIHNpbWlsYXIgc3RhdGVtZW50 LiBJcyB0aGUgVVJJIFBhdHRlcm4gQ29udGFpbmVyIGFsc28gcmVxdWlyZWQgKE1VU1QpIHRvIGJl IHRoZSBsYXN0IGluZm9ybWF0aW9uIGVsZW1lbnQgaW4gdGhlIGJ1ZmZlcj8NCg0KW1JheV0gVGhl IE9yaWdpbmFsIFVSSSBDb250YWluZXIgaXMgYSBzcGVjaWFsIGNhc2UgaW4gdGhlIHNlbnNlIHRo YXQgaXQgaXNu4oCZdCBjb21tdW5pY2F0ZWQgYWxvbmcgd2l0aCB0aGUgU2lnbmVkIFVSSSBidXQg aXMgcmVtb3ZlZCBmcm9tIHRoZSBwYWNrYWdlIGFmdGVyIGhhdmluZyBjYWxjdWxhdGVkIHRoZSBz aWduYXR1cmUuIA0KDQpTZWN0aW9uIDUuNDoNCkkgZG9u4oCZdCBzZWUgdGhlIHBvaW50IG9mIGtl eS1pZCwgaGFzaC1mdW5jdGlvbiwgZGlnaXRhbC1zaWduYXR1cmUtYWxnb3JpdGhtICYgdmVyc2lv bi4NCg0KVGhlIGFic2VuY2Ugb2YgdGhlIFZFUiBhdHRyaWJ1dGUgaXMgc3BlY2lmaWVkIGJ5IHRo ZSBkb2N1bWVudCB0byBtZWFuIFZlcnNpb24gMS4gVGhlIGFic2VuY2Ugb2YgdGhlIEhGICYgRFNB IGF0dHJpYnV0ZXMgaXMgc3BlY2lmaWVkIGJ5IHRoZSB2ZXJzaW9uIG9mIHRoZSBzaWduaW5nIG1l dGhvZC4gVmVyc2lvbiAxICh0aGUgZG9jdW1lbnQpIHNwZWNpZmllcyB0aGVtIGFzIFNIQS0yNTYg JiBFQ0RTQSBhY2NvcmRpbmdseS4gV2h5IHJlLXNwZWNpZnkgdGhpcyBpbiB0aGUgTWV0YWRhdGEg b2JqZWN0Pw0KDQpbUmF5XSBJ4oCZbSBub3Qgc3VyZSBJIHVuZGVyc3RhbmQuIFdoYXQgdGhlIG1l dGFkYXRhIOKAmHZlcnNpb27igJkgZmllbGQgaXMgZm9yIGlzIHRvIGFsbG93IENETnMgdG8gbWFu ZGF0ZSBvdGhlciB2ZXJzaW9ucyBvZiBVUkkgU2lnbmluZyBpbiB0aGUgZnV0dXJlIChlLmcuIGJ5 IHNldHRpbmcgdGhlIHZlcnNpb24gcHJvcGVydHkgdG8gMikuIFRoZSBzYW1lIGdvZXMgZm9yIHRo ZSBoYXNoLWZ1bmN0aW9uIGFuZCBkaWdpdGFsLXNpZ25hdHVyZS1hbGdvcml0aG0gcHJvcGVydGll czogYSBDRE4gY291bGQgbWFuZGF0ZSB0aGF0IFVSSSBTaWduaW5nIHZlcnNpb24gMSBpcyB1c2Vk LCBidXQgc3RpbGwgb25seSBhbGxvdyBTSEEtNTEyIGluc3RlYWQgb2YgU0hBLTI1NiBhcyB1c2Vk IGJ5IGRlZmF1bHQuDQoNCmtleS1pZCBpcyBmb3Igd2hlbiB0aGVyZSBpcyBvbmx5IGEgc2luZ2xl IGtleSBpZCBhcyBhbiBvcHRpbWlzYXRpb24gaWYgc29tZW9uZSB3YW50cyB0byBoYXZlIGEgc2lu Z2xlIGtleSBpZCAmIG5vdCB0cmFuc21pdCBpdCBpbiB0aGUgc2lnbmVkIFVSST8gRG9lczt0IHNl ZW0gd29ydGggaXQgdG8gbWUgZm9yIGEgbmFycm93IGNvcm5lciBjYXNlLiBJZiBpdCBpcyB3b3J0 aCBpdCBqdXN0IHNwZWNpZnkgaWYgS0lEL0tJRF9OVU0gaXMgbWlzc2luZyBmcm9tIHRoZSBzaWdu ZWQgVVJJIGFuZCBrZXktaWQtc2V0IGNvbnRhaW5zIGEgc2luZ2xlIHZhbHVlIHRoZW4gdXNlIHRo YXQ/IE9yIGlmIEtJRC9LSURfTlVNIGlzIG1pc3NpbmcgdGhlIHN1cnJvZ2F0ZSBjaGVja3MgYWxs IGtleXMgaW4ga2V5LWlkLXNldCBhbmQgaWYgb25lIG1hdGNoZXMgdGhlIFVSSSBpcyBhdXRob3Jp c2VkPw0KDQpbUmF5XSBTZWUgZWFybGllciBjb21tZW50DQoNCihQZXJzb25hbGx5IEkgdGhpbmsg S0lEL0tJRF9OVU0gaW4gdGhlIFNpZ25lZCBVUmkgaXMgcG9pbnRsZXNzLCB0aGVpciBtZWFuaW5n IGlzIGRpc3RyaWJ1dGVkIG91dCBvZiBiYW5kIHNvIHdoeSBub3QgYWxzbyBkaXN0cmlidXRlIHRo ZSB2YWx1ZXMgb3V0IG9mIGJhbmQvdmlhIG1ldGFkYXRhIGFuZCBoYXZlIHRoZSBiZWhhdmlvdXIg YmUgYW55IHZhbGlkIGtleS9zZWNyZXQgaW4ga2V5LWlkLXNldCBwYXNzZXMgYW5kIHJlbW92ZSBL SUQvS0lEX05VTSBbYW5kIG1heWJlIENLSV0gZnJvbSB0aGUgU2lnbmVkIFVSSSBlbnRpcmVseSkN Cg0KW1JheV0gSeKAmW0gbm90IHN1cmUgSSB1bmRlcnN0YW5kLiBIb3cgd291bGQgdGhlIGRDRE4g a25vdyB3aGljaCBLZXkgaXMgdXNlZCB0byBjYWxjdWxhdGUgYSBnaXZlbiBzaWduYXR1cmU/IE9y IGFyZSB5b3Ugc2F5aW5nIGl0IHNob3VsZCBqdXN0IGNoZWNrIGFsbCBwb3NzaWJsZSBLZXlzIHRo YXQgYXJlIGluIHRoZSBhbGxvd2VkIHNldD8NCg0KU2VjdGlvbiA1LjQ6DQpUaGlzIGNvbmZ1c2Vk IG1lOg0KICAgTm90ZSB0aGF0IHRoZSBLZXkgSUQgaW5mb3JtYXRpb24gZWxlbWVudCBpcyBub3Qg bmVlZGVkIGlmIG9ubHkgb25lDQogICBrZXkgaXMgcHJvdmlkZWQgYnkgdGhlIENTUCBvciB0aGUg VXBzdHJlYW0gQ0ROIGZvciB0aGUgY29udGVudCBpdGVtDQogICBvciBzZXQgb2YgY29udGVudCBp dGVtcyBjb3ZlcmVkIGJ5IHRoZSBDRE5JIE1ldGFkYXRhIG9iamVjdC4gDQp1bnRpbCBJIHJlYWxp c2VkIHRoYXQg4oCcS2V5IElEIGluZm9ybWF0aW9uIGVsZW1lbnTigJ0gd2FzIHJlZmVycmluZyB0 byB0aGUgZWxlbWVudCBvZiB0aGUgU2lnbmVkIFVSSSBhbmQgbm90IHRoZSBrZXktaWQgcHJvcGVy dHkgb2YgdGhlIG1ldGFkYXRhIG9iamVjdCBzcGVjaWZpZWQgaW1tZWRpYXRlbHkgYWJvdmUgdGhl IHNlbnRlbmNlLiBNYXliZSBwaHJhc2UgYXMg4oCcTm90ZSB0aGF0IHRoZSBLZXkgSUQgaW5mb3Jt YXRpb24gZWxlbWVudCBkb2VzIG5vdCBuZWVkIHRvIGJlIGluY2x1ZGVkIGluIHRoZSBTaWduZWQg VVJJIGlmIG9ubHkgb25lIGtleeKApiINCg0KW1JheV0gR29vZCBwb2ludC4gV2lsbCB1cGRhdGUu IA0KDQpTZWN0aW9uIDk6DQogICBJbiB0aGUgY2FzZSB3aGVyZSBhc3ltbWV0cmljIGtleXMgYXJl IHVzZWQsIHRoZSBLSUQgaW5mb3JtYXRpb24NCiAgIGVsZW1lbnQgbWlnaHQgY29udGFpbiB0aGUg VVJMIHRvIHRoZSBwdWJsaWMga2V5LiAgVG8gcHJldmVudA0KICAgbWFsaWNpb3VzIGNsaWVudHMg ZnJvbSBzaWduaW5nIHRoZWlyIG93biBVUklzIGFuZCBpbnNlcnRpbmcgdGhlDQogICBhc3NvY2lh dGVkIHB1YmxpYyBrZXkgVVJMIGluIHRoZSBLSUQgZmllbGQsIHRoZXJlYnkgcGFzc2luZyBVUkkN CiAgIHZhbGlkYXRpb24sIGl0IGlzIGltcG9ydGFudCB0aGF0IENETnMgY2hlY2sgd2hldGhlciB0 aGUgVVJJIGNvbnZleWVkDQogICBpbiB0aGUgS0lEIGZpZWxkIGlzIGluIHRoZSBhbGxvd2FibGUg c2V0IG9mIEtJRHMgYXMgbGlzdGVkIGluIHRoZQ0KICAgQ0ROSSBtZXRhZGF0YSBvciBzZXQgdmlh IGNvbmZpZ3VyYXRpb24uDQpPciBzcGVjaWZ5IHRoaW5ncyBhcyBJIHN1Z2dlc3QgYWJvdmUgYW5k IHJlbW92ZSB0aGUgbmVlZCBmb3IgS0lEL0tJRF9OVU0gYmVpbmcgcHJlc2VudCBpbiB0aGUgU2ln bmVkIFVSSSBhbmQgdGhlcmVmb3JlIHRoaXMgc2NlbmFyaW8vdnVsbmVyYWJpbGl0eSBiZWluZyBh YmxlIHRvIG9jY3VyIGluIHRoZSBmaXJzdCBwbGFjZT8NCg0KW1JheV0gU2VlIG15IGVhcmxpZXIg Y29tbWVudC4gSSBkb27igJl0IHNlZSBob3cgdGhlIGRDRE4gd291bGQgZXZlciBiZSBhYmxlIHRv IGtub3cgd2hpY2gga2V5IHdhcyB1c2VkLiBCdXQgbWF5YmUgSeKAmW0gbWlzc2luZyBzb21ldGhp bmcuDQoNCm5pdHM6DQpTZWN0aW9uIDE6DQogICBUaGUgcHJpbWFyeSBnb2FsIG9mIFVSSSBTaWdu aW5nIGlzIHRvIG1ha2UNCiAgIHN1cmUgdGhhdCBvbmx5IGF1dGhvcml6ZWQgVXNlciBBZ2VudHMg KFVBcykgYXJlIGFibGUgdG8gYWNjZXNzIHRoZQ0KICAgY29udGVudCwgd2l0aCBhIENTUCBiZWlu ZyBhYmxlIHRvIGF1dGhvcml6ZSBldmVyeSBpbmRpdmlkdWFsIHJlcXVlc3QuDQpJcyBpdCByZWFs bHkgdG8gYXV0aG9yaXNlIHRoZSBVc2VyIEFnZW50IG9yIHRoZSBJUCBhZGRyZXNzIHRoZSBVc2Vy IEFnZW50IGlzIGJlaGluZD8gVGhlcmUgaXMgbm90aGluZyBpbiB0aGUgc2lnbmVkIFVSSSB0aGF0 IGlkZW50aWZpZXMgdGhlIHBhcnRpY3VsYXIgVXNlciBBZ2VudC4gVVJJcyBjYW4gc3RpbGwgcG90 ZW50aWFsbHkgYmUgc2hhcmVkL2V4Y2hhbmdlZCBiZXR3ZWVuIFVzZXIgQWdlbnRzIGJlaGluZCB0 aGUgc2FtZSBJUCBhZGRyZXNzL3N1Ym5ldCwgaG93ZXZlciB0aGUgaW1wYWN0IG9mIHN1Y2ggc2hh cmluZyBpcyBsaW1pdGVkL2FjY2VwdGFibGUgZm9yIHRoZSB1c2UgY2FzZS4NCg0KSSB3b3VsZCBz L1VzZXIgQWdlbnRzIChVQXMpL0lQIGFkZHJlc3MoZXMpLw0KDQpTZWN0aW9uIDE6DQpJIGRvIG5v dCBrbm93IHdoYXQgaXMgbWVhbnQgYnkgZGlzdHJpYnV0aW9uIHBvbGljeSBpbiB0aGlzIHNlbnRl bmNlOg0KICAgU3BsaXR0aW5nIHRoZSByb2xlIG9mIHBlcmZvcm1pbmcgcGVyLXJlcXVlc3QNCiAg IGF1dGhvcml6YXRpb24gYnkgQ1NQIGFuZCB0aGUgcm9sZSBvZiB2YWxpZGF0aW9uIG9mIHRoaXMg YXV0aG9yaXphdGlvbg0KICAgYnkgdGhlIENETiBhbGxvd3MgYW55IGFyYml0cmFyeSBkaXN0cmli dXRpb24gcG9saWN5IHRvIGJlIGVuZm9yY2VkDQogICBhY3Jvc3MgQ0ROcyB3aXRob3V0IHRoZSBu ZWVkIG9mIENETnMgdG8gaGF2ZSBhbnkgYXdhcmVuZXNzIG9mIHRoZQ0KICAgYWN0dWFsIENTUCBk aXN0cmlidXRpb24gcG9saWN5Lg0KDQpTZWN0aW9uIDIuMjoNCiAgIFRoZSBLZXkgSUQgSW5mb3Jt YXRpb24gRWxlbWVudCBpcyB1c2VkIHRvIHJldHJpZXZlZCB0aGUga2V5IHdoaWNoIGlzDQogICBu ZWVkZWQgYXMgaW5wdXQgdG8gdGhlIGFsZ29yaXRobSBmb3IgdmFsaWRhdGluZyB0aGUgU2lnbmVk IFVSSS4NCnMvcmV0cmlldmVkL3JldHJpZXZlLw0KDQpTZWN0aW9uIDIuNDoNCiAgIEhvd2V2ZXIs IGEgY2xpZW50IG9yIENETiBtYXkgYXBwZW5kIG90aGVyDQogICBxdWVyeSBwYXJhbWV0ZXJzIHVu cmVsYXRlZCB0byBVUkkgU2lnbmluZyB0byB0aGUgU2lnbmVkIFVSSS4gIFN1Y2gNCiAgIGFkZGl0 aW9uYWwgcXVlcnkgcGFyYW1ldGVycyBTSE9VTEQgTk9UIHVzZSB0aGUgc2FtZSBuYW1lIGFzIHRo ZSBVUkkNCiAgIFNpZ25pbmcgUGFja2FnZSBBdHRyaWJ1dGUgdG8gYXZvaWQgbmFtZXNwYWNlIGNv bGxpc2lvbiBhbmQgcG90ZW50aWFsDQogICBmYWlsdXJlIG9mIHRoZSBVUkkgU2lnbmluZyB2YWxp ZGF0aW9uLg0Kcy9jbGllbnQvVXNlciBBZ2VudC8gaXMgcHJvYmFibHkgbW9yZSBhbGlnbmVkIHdp dGggdGhlIHJlc3Qgb2YgdGhlIGRvY3VtZW50LiBUaGVyZSBhcmUgc29tZSBvdGhlciBwbGFjZXMg d2hlcmUgeW91IHVzZSBjbGllbnQuIFByb2JhYmx5IHdvcnRoIGJlaW5nIGNvbnNpc3RlbnQgYW5k IHBpY2tpbmcgb25lIG9mIGNsaWVudCBvciBVc2VyIEFnZW50IHRvIHVzZSB0aHJvdWdob3V0Lg0K DQpTZWN0aW9uIDM6DQogICBJbiBjYXNlIHRoZQ0KICAgVVJJIFBhdHRlcm4gQ29udGFpbmVyIGlu Zm9ybWF0aW9uIGVsZW1lbnQgaXMgdXNlZCwgdGhlIENTUCBoYXMgZnVsbA0KICAgZmxleGliaWxp dHkgdG8gc3BlY2lmeSB3aGljaCBlbGVtZW50cyBvZiB0aGUgVVJJIChpbmNsdWRpbmcgdGhlDQog ICBzY2hlbWUgcGFydCkgYXJlIHByb3RlY3RlZCBieSB0aGUgVVJJLg0KSSB0aGluayB5b3UgbWVh biDigJxwcm90ZWN0ZWQgYnkgdGhlIFNpZ25lZCBVUknigJ0/DQoNClNlY3Rpb24gMzoNCiAgIFRo ZSBwcm9jZXNzIG9mIGdlbmVyYXRpbmcgYSBTaWduZWQgVVJJIGNhbiBiZSBkaXZpZGVkIGludG8g Zm91ciBzZXRzDQogICBvZiBzdGVwczogMSkgQ29tcG9zZSBVUkkgU2lnbmluZyBJRXMgd2l0aCBv cmlnaW5hbCBVUkkgLyBVUkkgcGF0dGVybiwNCiAgIDIpIENvbXB1dGUgdGhlIFVSSSBTaWduYXR1 cmUsIDMpIEVuY29kZSB0aGUgVVJJIFNpZ25pbmcgUGFja2FnZSwgYW5kDQogICA0KSBBc3NlbWJs ZSB0aGUgcGFydHMgdG8gY3JlYXRlIHRoZSBTaWduZWQgVVJJLg0KVGhpcyB3b3VsZCBiZSBiZXR0 ZXIgYXMgYSBsaXN0IG9mIG51bWJlcmVkIGJ1bGxldHMgSU1PLg0KDQoNCltSYXldIFRoYW5rcyBh Z2FpbiENCg0KSFRIDQpCZW4NCg0KPiBPbiAyOSBKdW4gMjAxNiwgYXQgMTQ6NDMsIEtldmluIE1h IEogPGtldmluLmoubWFAZXJpY3Nzb24uY29tPiB3cm90ZToNCj4gDQo+IEhpIEFsbCwNCj4gDQo+ ICBBcyBwZXIgdGhlIGRpc2N1c3Npb24gaW4gQkEsIHdlIGhhdmUgcmVjZWl2ZWQgdGhlIHVwZGF0 ZWQgVVJJIFNpZ25pbmcgZHJhZnQgYW5kIHdvdWxkIGxpa2UgdG8gbW92ZSBpdCB0byBXR0xDLiAg KExlaWYgYW5kIFBoaWwsIHlvdSdyZSB1cCEpDQo+IA0KPiAgVG9kYXkgd2lsbCBiZWdpbiB0aGUg dHdvLXdlZWsgV0dMQyBvbjogaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYt Y2RuaS11cmktc2lnbmluZy0wOQ0KPiANCj4gIFBsZWFzZSBzZW5kIGFueSBjb21tZW50cywgcXVl c3Rpb25zLCBjb25jZXJucyB0byB0aGUgQ0ROSSBtYWlsaW5nIGxpc3Q6IGNkbmlAaWV0Zi5vcmcN Cj4gDQo+ICBUaGUgV0dMQyB3aWxsIGVuZCBvbiBXZWRuZXNkYXkgSnVseSAxMywgMjAxNi4NCj4g DQo+IHRoYW54IQ0KPiANCj4gLS0gIEtldmluIGFuZCBGcmFuY29pcw0KPiANCj4gX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gQ0ROaSBtYWlsaW5nIGxp c3QNCj4gQ0ROaUBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2NkbmkNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCkNETmkgbWFpbGluZyBsaXN0DQpDRE5pQGlldGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCg0KDQpUaGlzIG1lc3NhZ2UgbWF5IGNvbnRhaW4gaW5m b3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91IGFyZSBub3QgdGhl IGFkZHJlc3NlZSBvciBpZiB0aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91IGJ5IG1pc3Rha2Us IHlvdSBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhlIG1l c3NhZ2UuIFROTyBhY2NlcHRzIG5vIGxpYWJpbGl0eSBmb3IgdGhlIGNvbnRlbnQgb2YgdGhpcyBl LW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2UgaXQgYW5kIGZvciBkYW1hZ2Ug b2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tzIGluaGVyZW50IHRvIHRoZSBlbGVj dHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4K From nobody Fri Jul 8 05:24:28 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7EBF12B062 for ; Fri, 8 Jul 2016 05:24:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fu_TPFyNludQ for ; Fri, 8 Jul 2016 05:24:22 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 444B012B012 for ; Fri, 8 Jul 2016 05:24:21 -0700 (PDT) X-IronPort-AV: E=Sophos; i="5.28,329,1464645600"; d="scan'208,217"; a="10249336" Received: from exc-cashub03.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.222]) by mailhost1b.tno.nl with ESMTP; 08 Jul 2016 14:24:19 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB03.tsn.tno.nl ([fe80::6d39:f277:173e:a926%13]) with mapi id 14.03.0294.000; Fri, 8 Jul 2016 14:24:18 +0200 From: "Brandenburg, R. (Ray) van" To: Kevin Ma J , "cdni@ietf.org" Thread-Topic: New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has Thread-Index: AQHRwy2I54wAQQPyYkOQMx8zvzoaI6AKgsGggAQeLwA= Date: Fri, 8 Jul 2016 12:24:18 +0000 Message-ID: <76576555-054B-4DB8-9E67-37A56C730CC6@tno.nl> References: <90041886-D253-413F-B006-50BDA558EB12@tno.nl> In-Reply-To: Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.17.0.160611 x-originating-ip: [134.221.225.191] x-esetresult: clean, is OK x-esetid: 37303A29F3684966657167 Content-Type: multipart/alternative; boundary="_000_76576555054B4DB89E6737A56C730CC6tnonl_" MIME-Version: 1.0 Archived-At: Subject: Re: [CDNi] New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 12:24:26 -0000 --_000_76576555054B4DB89E6737A56C730CC6tnonl_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgS2V2aW4sDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldyEgUGxlYXNlIHNlZSBteSBjb21tZW50 cyBpbmxpbmUuDQoNClJheQ0KDQpGcm9tOiAia2V2aW4uai5tYUBlcmljc3Nvbi5jb20iIDxrZXZp bi5qLm1hQGVyaWNzc29uLmNvbT4NCkRhdGU6IFR1ZXNkYXkgNSBKdWx5IDIwMTYgYXQgMjM6NDMN ClRvOiBSYXkgdmFuIEJyYW5kZW5idXJnIDxyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPiwgImNk bmlAaWV0Zi5vcmciIDxjZG5pQGlldGYub3JnPg0KU3ViamVjdDogUkU6IE5ldyB2ZXJzaW9uIChh bmQgSVBSIHN0YXRlbWVudCkgb2YgZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1m b3ItaGFzDQoNCkhpIFJheSwNCg0KICAoQXMgYW4gaW5kaXZpZHVhbCkgSSBmaW5hbGx5IGZvdW5k IHNvbWUgdGltZSB0byByZWFkIHRocm91Z2ggdGhlIHVwZGF0ZWQgZHJhZnQuICBTb21lIGNvbW1l bnRzIGFuZCBxdWVzdGlvbnMgYmVsb3cuDQoNCnRoYW54IQ0KDQotLSAgS2V2aW4gSi4gTWENCg0K LSBzZWN0aW9uIDQuMSwgc3RlcCAzLkU6IFdoYXQgaWYgdGhlIHVzZXIgcGF1c2VzLCBvciB0aGVy ZSBpcyBhbiBhZCBpbnNlcnRlZCwgYW5kIHRoZSB0b2tlbiBleHBpcmVzPyAgVW5kZXJzdG9vZCB0 aGF0IGl0J3MgcHJvYmFibHkgdXAgdG8gdGhlIG1lZGlhIHBsYXllciB0byBoYW5kbGUgdGhhdCBj YXNlLCBidXQgd291bGQgdGhleSBuZWVkIHRvIGdvIGJhY2sgdG8gdGhlIENQIHRvIGdldCBhIG5l dyB2YWxpZCBtYW5pZmVzdCBVUkw/ICBXaGljaCB3b3VsZCBoYXZlIGEgdG9rZW4gdGhhdCBpcyB2 YWxpZCBmb3IgdGhlIGNodW5rcyBhcyB3ZWxsPw0KDQpJdOKAmXMgdXAgdG8gdGhlIG1lZGlhIHBs YXllciB0byBtYWtlIHN1cmUgaXQgcmVmcmVzaGVzIHRoZSB0b2tlbiwgZWl0aGVyIGJlZm9yZSBv ciBhZnRlciBpdCAoYWx0aG91Z2ggdGhlIGZvcm1lciBtaWdodCBiZSBlYXNpZXIpLiBPbiB3YXkg dG8gZG8gdGhhdCB3b3VsZCBiZSB0byBzZW5kIGFuIEhUVFAgSEVBRCByZXF1ZXN0IGZvciBhbiBh cmJpdHJhcnkgc2VnbWVudCB0byB0aGUgQ0ROLiBOb3RlIHRoYXQgdGhpcyBkb2VzIGFzc3VtZSB0 aGF0IHRoZSBtZWRpYSBwbGF5ZXIgaXMgYXdhcmUgb2YgdGhlIGFwcHJveGltYXRlIHZhbGlkaXR5 IHRpbWUgb2YgYSB0b2tlbi4gSW4gcHJhY3RpY2UgdGhpcyBpcyBzb21ldGhpbmcgdGhhdCBjb3Vs ZCBiZSBjb21tdW5pY2F0ZWQgaW4gYSBtYW5pZmVzdCBmaWxlLCBzdWNoIGFzIGEgREFTSCBNUEQu IEl04oCZcyBvbmUgb2YgdGhlIHRvcGljcyBmb3Igd2hpY2ggaXQgbWlnaHQgYmUgd29ydGggY29u c2lkZXJpbmcgc2VuZGluZyBpbiBhIGxpYWlzb24gdG8gTVBFRywgaWYgdGhlIFdHIHNob3VsZCBk ZWNpZGUgdG8gYWRvcHQgdGhpcyB3b3JrLg0KDQpXaGF0IEkgd291bGQgbGlrZSB0byBkbyBpbiBh IG5leHQgaXRlcmF0aW9uIG9mIHRoaXMgZG9jdW1lbnQgaXMgdG8gYWRkIGEgc2VudGVuY2UgYWxv bmcgdGhlIGxpbmVzIG9mIOKAmFVwb24gcmVjZWl2aW5nIGFuIEhUVFAgSEVBRCByZXF1ZXN0LCBh IENETiBTSE9VTEQgdmFsaWRhdGUgdGhlIGluY29taW5nIFNpZ25lZCBUb2tlbiBhbmQgZ2VuZXJh dGUgYSBuZXcgb25lIGluIHRoZSBzYW1lIHdheSBhcyBpdCB3b3VsZCBkbyBmb3IgYW4gSFRUUCBH RVTigJkuDQoNCi0gc2VjdGlvbiA0LjEsIHN0ZXBzIDksIDExLkIsIDExLkUsIDEyLkIsIGFuZCAx Mi5GLCBzZWN0aW9uIDcuMSBzdGVwIDEsIHNlY3Rpb24gNy4yIHN0ZXBzIDMuQS5kIGFuZCAzLkIu ZCwgYW5kIHNlY3Rpb24gNy40IHN0ZXBzIDEwLkEuMiwgMTAuQS41LCAxMC5CLjIsIGFuZCAxMC5C LjY6IFNob3VsZCB0aGUgVVBDIGJlIHBlcmNlbnQtZW5jb2RlZD8gIEFuZCBzaG91bGQgQ0lQIGJl IGVuY3J5cHRlZD8NCg0KQ29ycmVjdC4gVGhpcyB2ZXJzaW9uIG9mIGRyYWZ0LWJyYW5kZW5idXJn LWNkbmktdXJpLXNpZ25pbmctZm9yLWhhcyBoYXNu4oCZdCB5ZXQgYmVlbiBicm91Z2h0IGluIGxp bmUgd2l0aCB0aGUgbW9zdCByZWNlbnQgdmVyc2lvbiBvZiBkcmFmdC1pZXRmLWNkbmktdXJpLXNp Z25pbmcsIHdoZXJlIHBlcmNlbnQtZW5jb2Rpbmcgb2YgdGhlIFVQQyB3YXMgaW50cm9kdWNlZC4g SW4gdGhlIHNhbWUgd2F5LCBDSVAgc2hvdWxkIGJlIGVuY3J5cHRlZC4gSeKAmWxsIGZpeCB0aGlz IGluIHRoZSBuZXh0IGl0ZXJhdGlvbi4NCg0KLSBzZWN0aW9uIDQuMSwgc3RlcHMgOSwgMTEuQiwg MTEuRSwgMTIuQiwgMTIuRiwgc2VjdGlvbiA1LjIsIGFuZCBzZWN0aW9uIDcuMSBzdGVwIDE6IElm IHRoZSB0b2tlbiBpcyBvbmx5IGdvb2QgZm9yIHNlZ21lbnRzLCBidXQgaXMgYXR0YWNoZWQgdG8g dGhlIG1hbmlmZXN0IHJlcXVlc3QsIGRvZXMgdGhhdCBtZWFuIHRoYXQgdGhlcmUgaXMgbm8gc2ln bmF0dXJlIHZhbGlkYXRpb24gb24gdGhlIG1hbmlmZXN0IHJlcXVlc3Q/ICBJbiB0aGUgMnh4IG5v bi1yZWRpcmVjdCBjYXNlLCB3b3VsZCB5b3UgZXhwZWN0IGEgdjEgbWFuaWZlc3Qgc2lnbmF0dXJl IGJlIGluIHRoZSBxdWVyeSBzdHJpbmcgYW5kIGEgc2VwYXJhdGUgdjIgY2h1bmsgc2lnbmF0dXJl IGJlIGluIHRoZSBjb29raWU/DQoNCk1heWJlIHRoZSBkb2N1bWVudCBzaG91bGQgYmUgY2xlYXJl ciBvbiB0aGlzLiBNeSBpbnRlbnRpb24gd2FzIHRoYXQgU2lnbmVkIFRva2VucyBzaG91bGQgYmUg dXNlZCBmb3IgYm90aCBtYW5pZmVzdCBhbmQgc2VnbWVudCByZXF1ZXN0cywgZXNwZWNpYWxseSBn aXZlbiB0aGF0IHRoZSAyMDAgT0sgZm9yIHRoZSBpbml0aWFsIG1hbmlmZXN0IHdpbGwgY29udGFp biB0aGUgZmlyc3QgU2lnbmVkIFRva2VuLiBJbiBvdGhlciB3b3JkcywgdGhlIFVQQyBzaG91bGQg YmUgY2hvc2VuIGluIGEgd2F5IHRoYXQgYm90aCB0aGUgbWFuaWZlc3QgbG9jYXRpb24gYW5kIHRo ZSBzZWdtZW50IGxvY2F0aW9uIGlzIGNvdmVyZWQgYnkgdGhlIFVQQy4NCg0KLSBzZWN0aW9uIDQu MSwgc3RlcCAxMCwgc2VjdGlvbnMgNS82LCBhbmQgc2VjdGlvbiA3LjQgc3RlcCA5OiBTZWVtcyBs aWtlIGEgY2hpY2tlbiBhbmQgZWdnIHByb2JsZW0uICBUaGUgU1RUIHNheXMgdGhhdCB0aGUgdG9r ZW4gaXMgaW4gdGhlIGNvb2tpZSwgYnV0IHRoZSBTVFQgaXMgaW4gdGhlIHRva2VuIHRoYXQncyBp bnNpZGUgdGhlIGNvb2tpZS4gIERvZXMgdGhlIGluaXRpYWwgdG9rZW4gYWx3YXlzIGhhdmUgdG8g YmUgaW4gYSB0b2tlbj8gIFNob3VsZCB0aGUgaW5pdGlhbCB0b2tlbiBhbHdheXMgYmUgaW4gdGhl IHF1ZXJ5IHN0cmluZyB0byBiZSBjb21wYXRpYmxlIHdpdGggdjEsIHNpbmNlIHRoZSBWRVI9MiBp cyBhbHNvIGluc2lkZSB0aGUgdG9rZW4gaW5zaWRlIHRoZSBjb29raWU/ICBGcm9tIHRoZSBjbGll bnQgcGVyc3BlY3RpdmUsIHNob3VsZCBvbmx5IHN1YnNlcXVlbnQgdG9rZW5zIGJlIGluIHRoZSBj b29raWU/ICBGcm9tIHRoZSBDRE4gcGVyc3BlY3RpdmUsIHVubGVzcyBwYXNzZWQgaW4gdGhlIG1l dGFkYXRhLCBob3cgd2lsbCB0aGUgQ0ROIGtub3cgd2hlcmUgdG8gbG9vayBmb3IgdGhlIHRva2Vu LCBvciBkb2VzIGl0IGFsd2F5cyBjaGVjayBldmVyeXdoZXJlPyAgSWYgdGhlIHByb2Nlc3MgaXMg dG8gYWx3YXlzIGNoZWNrIHRoZSBxdWVyeSBzdHJpbmcgZmlyc3QgYW5kIHRoZSBjb29raWUgc2Vj b25kLCBkbyB3ZSBldmVuIG5lZWQgU1RUPyAgTmV3IFNUVCB2YWx1ZXMgYXJlIGdvaW5nIHRvIHJl cXVpcmUgYW5kIHVwZGF0ZSB0byB0aGUgcHJvY2VkdXJlIGluIHNlY3Rpb24gNiwgYXMgd2VsbCBh cyByZWdpc3RyYXRpb24gb2YgbmV3IFNUVCB2YWx1ZXM/DQoNCk5ldyBTVFQgdmFsdWVzIGFyZSBl eHBlY3RlZCB0byB1cGRhdGUgc2VjdGlvbnMgNSBhbmQgNi4gVGhlIHJlYXNvbiB0aGUgU1RUIHZh bHVlIGlzIG1hZGUgZXhwbGljaXQgaW4gdGhlIHRva2VuIGFzIHdlbGwgaXMgdG8gYWxsb3cgaW1w bGVtZW50YXRpb25zIHRoYXQgaGF2ZSByZWNlaXZlZCB0aGUgVG9rZW4gaW4gc29tZSBvdGhlciBm YXNoaW9uIChlLmcuIHRocm91Z2ggdGhlIGNyb3NzLWRvbWFpbiByZWRpcmVjdGlvbiBzY2VuYXJp byBpbiBzZWN0aW9uIDUuMiksIHRvIGJlIGF3YXJlIG9mIHRoZSB0YXJnZXQgdHJhbnNwb3J0IG1l Y2hhbmlzbS4NCg0KLSBzZWN0aW9uIDUuMjogVGhlIHYxIGRyYWZ0IGFsc28gc3VwcG9ydHMgdG9r ZW4gYXMgYSBwYXRoIHBhcmFtZXRlcjsgaXMgdGhhdCBpbnRlbnRpb25hbGx5IG9taXR0ZWQgaGVy ZT8NCg0KVGhlIHByaW1hcnkgcmVhc29uIGl04oCZcyBub3QgaGVyZSBpcyB0aGF0IHRoaXMgZHJh ZnQgcHJlZGF0ZXMgdGhlIGxhdGVzdCB2ZXJzaW9uIG9mIGRyYWZ0LWlldGYtY2RuaS11cmktc2ln bmluZyB3aGVyZSBzdXBwb3J0IGZvciBwYXRoIHBhcm1ldGVyIHdhcyBpbnRyb2R1Y2VkLiBIb3dl dmVyLCBJIG5lZWQgdG8gZ2l2ZSBpdCBzb21lIHRob3VnaHQgd2hldGhlciBpdCBtYWtlcyBzZW5z ZSB0byBzdXBwb3J0IHRoYXQgc2NlbmFyaW8gaGVyZSBhcyB3ZWxsLCBnaXZlbiB0aGF0IHRoZSBt YWluIHJlYXNvbiBmb3IgdXNpbmcgcGF0aCBwYXJhbWV0ZXJzIGluIHYxIHdvdWxkIGJlIGNhc2Vz IHdoZXJlIHlvdSBkb27igJl0IGhhdmUgc2VnbWVudC1sZXZlbCBhdXRoZW50aWNhdGlvbiBhcyBk ZWZpbmVkIGluIHRoaXMgZHJhZnQuDQoNCg0KLSBzZWN0aW9uIDcuMSBzdGVwcyAyIGFuZCAzOiBJ IHdvdWxkIGV4cGVjdCB0aGF0IHYyIHdvdWxkIGhhdmUgYSBuZXcgR2VuZXJpY01ldGFkYXRhIHB0 eXBlIChNSS5VcmlTaWduaW5nLnYyPykgYW5kIHRoYXQgcHR5cGUgd291bGQgdGVsbCB0aGUgZENE TiB3aGF0IGl0IHNob3VsZCBleHBlY3QgaW4gdGhlIHRva2VuPyAgSXQgd291bGQgYmUgbmljZSBp ZiB0aGUgZHJhZnQgY291bGQgZGVmaW5lIHYyIHN1Y2ggdGhhdCBpdCBzdXBwb3J0ZWQgYm90aCBW RVI9MSBhbmQgVkVSPTIsIHNvIHRoYXQgdGhlIE1JLlVyaVNpZ25pbmcudjIgbWV0YWRhdGEgY291 bGQgYmUgYSBzdXBlcnNldCBvZiBpbmZvcm1hdGlvbiBuZWVkZWQgdG8gcHJvY2VzcyBhbGwga25v d24gdG9rZW4gdHlwZXMsIGFuZCBtYWtlIHRoZSB0b2tlbiBwcm9jZXNzaW5nIGEgcnVudGltZSBk ZWNpc2lvbj8NCg0KSSBsaWtlIHRoYXQuIEkgbmVlZCB0byBkZWx2ZSBpbnRvIHRoZSBNZXRhZGF0 YSBhc3BlY3RzIG9mIHYxIGFnYWluIHRvIHNlZSBleGFjdGx5IGhvdyB3ZSBjb3VsZCBhY2hpZXZl IHN1Y2ggYSB0aGluZy4gTWF5YmUgc29tZXRoaW5nIHRvIGRpc2N1c3MgaW4gQmVybGluLg0KDQot IHNlY3Rpb24gNy40LCBnZW5lcmFsOiBUaGlzIGRyYWZ0IHJlbW92ZXMgdGhlICJOb3RlIHRoYXQg cmUtc2lnbmluZyBhIFVSSSBNVVNULi4uIiB0ZXh0IGZyb20gdGhlIHYxIGRyYWZ0KHNlY3Rpb24g My4xKS4gIFNpbmNlIHRoaXMgaXMgYWJvdXQgcmVzaWduaW5nLCBJIHRoaW5rIHRoZSB0ZXh0IGFi b3V0IG1haW50YW5pbmcgdGhlIHNhbWUgdmFsdWVzIHNob3VsZCBiZSBhZGRlZCBoZXJlLCBzcGVj aWZpY2FsbHkgZm9yIEtJRC9LSURfTlVNLCBITUFDLCBhbmQgRFNBLg0KDQpHb29kIHBvaW50Lg0K DQoNCi0gRG8geW91IGhhdmUgYW4gaWRlYSBhcyB0byB3aGF0IGFkZGl0aW9uYWwgcmVnaXN0cmll cywgbWV0YWRhdGEsIGFuZC9vciBsb2dnaW5nIGZpZWxkcyB3aWxsIGJlIG5lZWRlZD8gIFdpbGwg dGhlIG5ldyBwdHlwZSBqdXN0IGJlIE1JLlVyaVNpZ25pbmcudjI/DQoNClRvIGJlIGNvbXBsZXRl bHkgaG9uZXN0LCBJIGhhdmVu4oCZdCBnaXZlbiB0aGUgTWV0YWRhdGEgYXNwZWN0cyBhIGxvdCBv ZiB0aG91Z2h0IHlldC4gSeKAmWxsIGNvbWUgYmFjayB0byB5b3Ugb24gdGhhdCBvbmUuDQoNClRo YW5rcyBhZ2FpbiENCg0KUmF5DQoNCg0KRnJvbTogQ0ROaSBbbWFpbHRvOmNkbmktYm91bmNlc0Bp ZXRmLm9yZ10gT24gQmVoYWxmIE9mIEJyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW4NClNlbnQ6IEZy aWRheSwgSnVuZSAxMCwgMjAxNiAxMTozNCBBTQ0KVG86IGNkbmlAaWV0Zi5vcmcNClN1YmplY3Q6 IFtDRE5pXSBOZXcgdmVyc2lvbiAoYW5kIElQUiBzdGF0ZW1lbnQpIG9mIGRyYWZ0LWJyYW5kZW5i dXJnLWNkbmktdXJpLXNpZ25pbmctZm9yLWhhcw0KDQpIaSBhbGwsDQoNCkFzIHlvdSBtaWdodCBo YXZlIHNlZW4sIEnigJl2ZSByZWNlbnRseSB1cGxvYWRlZCBhIG5ldyB2ZXJzaW9uIG9mIGRyYWZ0 LWJyYW5kZW5idXJnLWNkbmktdXJpLXNpZ25pbmctZm9yLWhhcyAoLTAzKS4NCg0KaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJyYW5kZW5idXJnLWNkbmktdXJpLXNpZ25pbmctZm9y LWhhcy0wMw0KDQpXaGF0IGlzIGltcG9ydGFudCB0byBub3RlIGlzIHRoYXQgS1BOIGhhcyB1cGRh dGVkIGl04oCZcyBJUFIgc3RhdGVtZW50IG9uIHRoaXMgZG9jdW1lbnQgdG8gYmUgaW4gbGluZSB3 aXRoIHRoZSBJUFIgc3RhdGVtZW50cyB0aGF0IGhhdmUgYmVlbiBmaWxlZCBvbiBvdGhlciBDRE5J IGRvY3VtZW50cyAoaS5lLiDigJxSb3lhbHR5LUZyZWUsIFJlYXNvbmFibGUgYW5kIE5vbi1EaXNj cmltaW5hdG9yeSBMaWNlbnNlIHRvIEFsbCBJbXBsZW1lbnRlcnPigJ0pLiBIb3BlZnVsbHkgdGhp cyBjbGVhcnMgdXAgdGhlIGxlbmd0aHkgSVBSIGRpc2N1c3Npb24gd2XigJl2ZSBiZWVuIGhhdmlu ZyBhcm91bmQgdGhpcyBkb2N1bWVudCBzbyB0aGF0IHdlIGNhbiBmb2N1cyBvbiB0aGUgdGVjaG5p Y2FsIGFzcGVjdHMgYWdhaW4uDQoNCkxvb2tpbmcgZm9yd2FyZCB0byB5b3VyIGZlZWRiYWNrLA0K UmF5DQoNClRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZvcm1hdGlvbiB0aGF0IGlzIG5vdCBp bnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUgYWRkcmVzc2VlIG9yIGlmIHRoaXMg bWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwgeW91IGFyZSByZXF1ZXN0ZWQgdG8g aW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5PIGFjY2VwdHMgbm8g bGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlzIGUtbWFpbCwgZm9yIHRoZSBtYW5uZXIg aW4gd2hpY2ggeW91IHVzZSBpdCBhbmQgZm9yIGRhbWFnZSBvZiBhbnkga2luZCByZXN1bHRpbmcg ZnJvbSB0aGUgcmlza3MgaW5oZXJlbnQgdG8gdGhlIGVsZWN0cm9uaWMgdHJhbnNtaXNzaW9uIG9m IG1lc3NhZ2VzLg0K --_000_76576555054B4DB89E6737A56C730CC6tnonl_ Content-Type: text/html; charset="utf-8" Content-ID: <41F3CBBF3FC92840A33C4AEC3E31B3E0@tno.nl> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6QXJpYWw7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAy IDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCXBh bm9zZS0xOjIgNyAzIDkgMiAyIDUgMiA0IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToi Q2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYg NCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxp Lk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5N c29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1 NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1h cmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJ e21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZh bWlseToiQ291cmllciBOZXciO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpz cGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWls eToiQ291cmllciBOZXciOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjEN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsN Cgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4ubXNvSW5zDQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCW1zby1zdHlsZS1uYW1lOiIiOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7 DQoJY29sb3I6dGVhbDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjU5 NS4wcHQgODQyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVh ZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxp bms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5IaSBLZXZpbiw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoYW5rcyBmb3IgdGhlIHJldmlldyEg UGxlYXNlIHNlZSBteSBjb21tZW50cyBpbmxpbmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij5SYXk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVD NERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+JnF1b3Q7a2V2aW4uai5tYUBlcmljc3Nvbi5jb20mcXVvdDsgJmx0 O2tldmluLmoubWFAZXJpY3Nzb24uY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UdWVzZGF5IDUg SnVseSAyMDE2IGF0IDIzOjQzPGJyPg0KPGI+VG86IDwvYj5SYXkgdmFuIEJyYW5kZW5idXJnICZs dDtyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sJmd0OywgJnF1b3Q7Y2RuaUBpZXRmLm9yZyZxdW90 OyAmbHQ7Y2RuaUBpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UkU6IE5ldyB2ZXJz aW9uIChhbmQgSVBSIHN0YXRlbWVudCkgb2YgZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2ln bmluZy1mb3ItaGFzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5IaSBSYXksPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgKEFz IGFuIGluZGl2aWR1YWwpIEkgZmluYWxseSBmb3VuZCBzb21lIHRpbWUgdG8gcmVhZCB0aHJvdWdo IHRoZSB1cGRhdGVkIGRyYWZ0LiZuYnNwOyBTb21lIGNvbW1lbnRzIGFuZCBxdWVzdGlvbnMgYmVs b3cuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij50aGFueCE8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPi0tJm5ic3A7IEtldmluIEouIE1hPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4tIHNlY3Rpb24gNC4xLCBzdGVwIDMu RTogV2hhdCBpZiB0aGUgdXNlciBwYXVzZXMsIG9yIHRoZXJlIGlzIGFuIGFkIGluc2VydGVkLCBh bmQgdGhlIHRva2VuIGV4cGlyZXM/Jm5ic3A7IFVuZGVyc3Rvb2QgdGhhdCBpdCdzIHByb2JhYmx5 IHVwIHRvIHRoZSBtZWRpYSBwbGF5ZXIgdG8gaGFuZGxlIHRoYXQgY2FzZSwgYnV0DQogd291bGQg dGhleSBuZWVkIHRvIGdvIGJhY2sgdG8gdGhlIENQIHRvIGdldCBhIG5ldyB2YWxpZCBtYW5pZmVz dCBVUkw/Jm5ic3A7IFdoaWNoIHdvdWxkIGhhdmUgYSB0b2tlbiB0aGF0IGlzIHZhbGlkIGZvciB0 aGUgY2h1bmtzIGFzIHdlbGw/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5JdOKAmXMgdXAgdG8gdGhl IG1lZGlhIHBsYXllciB0byBtYWtlIHN1cmUgaXQgcmVmcmVzaGVzIHRoZSB0b2tlbiwgZWl0aGVy IGJlZm9yZSBvciBhZnRlciBpdCAoYWx0aG91Z2ggdGhlIGZvcm1lciBtaWdodCBiZSBlYXNpZXIp LiBPbiB3YXkgdG8gZG8gdGhhdCB3b3VsZCBiZSB0byBzZW5kIGFuIEhUVFAgSEVBRCByZXF1ZXN0 IGZvciBhbiBhcmJpdHJhcnkgc2VnbWVudA0KIHRvIHRoZSBDRE4uIE5vdGUgdGhhdCB0aGlzIGRv ZXMgYXNzdW1lIHRoYXQgdGhlIG1lZGlhIHBsYXllciBpcyBhd2FyZSBvZiB0aGUgYXBwcm94aW1h dGUgdmFsaWRpdHkgdGltZSBvZiBhIHRva2VuLiBJbiBwcmFjdGljZSB0aGlzIGlzIHNvbWV0aGlu ZyB0aGF0IGNvdWxkIGJlIGNvbW11bmljYXRlZCBpbiBhIG1hbmlmZXN0IGZpbGUsIHN1Y2ggYXMg YSBEQVNIIE1QRC4gSXTigJlzIG9uZSBvZiB0aGUgdG9waWNzIGZvciB3aGljaCBpdCBtaWdodCBi ZQ0KIHdvcnRoIGNvbnNpZGVyaW5nIHNlbmRpbmcgaW4gYSBsaWFpc29uIHRvIE1QRUcsIGlmIHRo ZSBXRyBzaG91bGQgZGVjaWRlIHRvIGFkb3B0IHRoaXMgd29yay4NCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+V2hhdCBJIHdvdWxkIGxpa2UgdG8gZG8gaW4gYSBu ZXh0IGl0ZXJhdGlvbiBvZiB0aGlzIGRvY3VtZW50IGlzIHRvIGFkZCBhIHNlbnRlbmNlIGFsb25n IHRoZSBsaW5lcyBvZiDigJhVcG9uIHJlY2VpdmluZyBhbiBIVFRQIEhFQUQgcmVxdWVzdCwgYSBD RE4gU0hPVUxEIHZhbGlkYXRlIHRoZSBpbmNvbWluZyBTaWduZWQgVG9rZW4gYW5kIGdlbmVyYXRl IGEgbmV3DQogb25lIGluIHRoZSBzYW1lIHdheSBhcyBpdCB3b3VsZCBkbyBmb3IgYW4gSFRUUCBH RVTigJkuIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlv biA0LjEsIHN0ZXBzIDksIDExLkIsIDExLkUsIDEyLkIsIGFuZCAxMi5GLCBzZWN0aW9uIDcuMSBz dGVwIDEsIHNlY3Rpb24gNy4yIHN0ZXBzIDMuQS5kIGFuZCAzLkIuZCwgYW5kIHNlY3Rpb24gNy40 IHN0ZXBzIDEwLkEuMiwgMTAuQS41LCAxMC5CLjIsIGFuZCAxMC5CLjY6IFNob3VsZCB0aGUgVVBD DQogYmUgcGVyY2VudC1lbmNvZGVkPyZuYnNwOyBBbmQgc2hvdWxkIENJUCBiZSBlbmNyeXB0ZWQ/ PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij5Db3JyZWN0LiBUaGlzIHZlcnNpb24gb2YgZHJhZnQtYnJh bmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzIGhhc27igJl0IHlldCBiZWVuIGJyb3Vn aHQgaW4gbGluZSB3aXRoIHRoZSBtb3N0IHJlY2VudCB2ZXJzaW9uIG9mIGRyYWZ0LWlldGYtY2Ru aS11cmktc2lnbmluZywgd2hlcmUgcGVyY2VudC1lbmNvZGluZyBvZiB0aGUgVVBDIHdhcyBpbnRy b2R1Y2VkLg0KIEluIHRoZSBzYW1lIHdheSwgQ0lQIHNob3VsZCBiZSBlbmNyeXB0ZWQuIEnigJls bCBmaXggdGhpcyBpbiB0aGUgbmV4dCBpdGVyYXRpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+LSBzZWN0aW9uIDQuMSwgc3RlcHMgOSwgMTEuQiwgMTEuRSwgMTIu QiwgMTIuRiwgc2VjdGlvbiA1LjIsIGFuZCBzZWN0aW9uIDcuMSBzdGVwIDE6IElmIHRoZSB0b2tl biBpcyBvbmx5IGdvb2QgZm9yIHNlZ21lbnRzLCBidXQgaXMgYXR0YWNoZWQgdG8gdGhlIG1hbmlm ZXN0IHJlcXVlc3QsIGRvZXMgdGhhdCBtZWFuDQogdGhhdCB0aGVyZSBpcyBubyBzaWduYXR1cmUg dmFsaWRhdGlvbiBvbiB0aGUgbWFuaWZlc3QgcmVxdWVzdD8mbmJzcDsgSW4gdGhlIDJ4eCBub24t cmVkaXJlY3QgY2FzZSwgd291bGQgeW91IGV4cGVjdCBhIHYxIG1hbmlmZXN0IHNpZ25hdHVyZSBi ZSBpbiB0aGUgcXVlcnkgc3RyaW5nIGFuZCBhIHNlcGFyYXRlIHYyIGNodW5rIHNpZ25hdHVyZSBi ZSBpbiB0aGUgY29va2llPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+TWF5YmUgdGhlIGRvY3VtZW50 IHNob3VsZCBiZSBjbGVhcmVyIG9uIHRoaXMuIE15IGludGVudGlvbiB3YXMgdGhhdCBTaWduZWQg VG9rZW5zIHNob3VsZCBiZSB1c2VkIGZvciBib3RoIG1hbmlmZXN0IGFuZCBzZWdtZW50IHJlcXVl c3RzLCBlc3BlY2lhbGx5IGdpdmVuIHRoYXQgdGhlIDIwMCBPSyBmb3IgdGhlIGluaXRpYWwgbWFu aWZlc3Qgd2lsbCBjb250YWluDQogdGhlIGZpcnN0IFNpZ25lZCBUb2tlbi4gSW4gb3RoZXIgd29y ZHMsIHRoZSBVUEMgc2hvdWxkIGJlIGNob3NlbiBpbiBhIHdheSB0aGF0IGJvdGggdGhlIG1hbmlm ZXN0IGxvY2F0aW9uIGFuZCB0aGUgc2VnbWVudCBsb2NhdGlvbiBpcyBjb3ZlcmVkIGJ5IHRoZSBV UEMuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4tIHNlY3Rpb24g NC4xLCBzdGVwIDEwLCBzZWN0aW9ucyA1LzYsIGFuZCBzZWN0aW9uIDcuNCBzdGVwIDk6IFNlZW1z IGxpa2UgYSBjaGlja2VuIGFuZCBlZ2cgcHJvYmxlbS4mbmJzcDsgVGhlIFNUVCBzYXlzIHRoYXQg dGhlIHRva2VuIGlzIGluIHRoZSBjb29raWUsIGJ1dCB0aGUgU1RUIGlzIGluIHRoZSB0b2tlbiB0 aGF0J3MNCiBpbnNpZGUgdGhlIGNvb2tpZS4mbmJzcDsgRG9lcyB0aGUgaW5pdGlhbCB0b2tlbiBh bHdheXMgaGF2ZSB0byBiZSBpbiBhIHRva2VuPyZuYnNwOyBTaG91bGQgdGhlIGluaXRpYWwgdG9r ZW4gYWx3YXlzIGJlIGluIHRoZSBxdWVyeSBzdHJpbmcgdG8gYmUgY29tcGF0aWJsZSB3aXRoIHYx LCBzaW5jZSB0aGUgVkVSPTIgaXMgYWxzbyBpbnNpZGUgdGhlIHRva2VuIGluc2lkZSB0aGUgY29v a2llPyZuYnNwOyBGcm9tIHRoZSBjbGllbnQgcGVyc3BlY3RpdmUsIHNob3VsZCBvbmx5DQogc3Vi c2VxdWVudCB0b2tlbnMgYmUgaW4gdGhlIGNvb2tpZT8mbmJzcDsgRnJvbSB0aGUgQ0ROIHBlcnNw ZWN0aXZlLCB1bmxlc3MgcGFzc2VkIGluIHRoZSBtZXRhZGF0YSwgaG93IHdpbGwgdGhlIENETiBr bm93IHdoZXJlIHRvIGxvb2sgZm9yIHRoZSB0b2tlbiwgb3IgZG9lcyBpdCBhbHdheXMgY2hlY2sg ZXZlcnl3aGVyZT8mbmJzcDsgSWYgdGhlIHByb2Nlc3MgaXMgdG8gYWx3YXlzIGNoZWNrIHRoZSBx dWVyeSBzdHJpbmcgZmlyc3QgYW5kIHRoZSBjb29raWUgc2Vjb25kLA0KIGRvIHdlIGV2ZW4gbmVl ZCBTVFQ/Jm5ic3A7IE5ldyBTVFQgdmFsdWVzIGFyZSBnb2luZyB0byByZXF1aXJlIGFuZCB1cGRh dGUgdG8gdGhlIHByb2NlZHVyZSBpbiBzZWN0aW9uIDYsIGFzIHdlbGwgYXMgcmVnaXN0cmF0aW9u IG9mIG5ldyBTVFQgdmFsdWVzPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+TmV3IFNUVCB2YWx1ZXMg YXJlIGV4cGVjdGVkIHRvIHVwZGF0ZSBzZWN0aW9ucyA1IGFuZCA2LiBUaGUgcmVhc29uIHRoZSBT VFQgdmFsdWUgaXMgbWFkZSBleHBsaWNpdCBpbiB0aGUgdG9rZW4gYXMgd2VsbCBpcyB0byBhbGxv dyBpbXBsZW1lbnRhdGlvbnMgdGhhdCBoYXZlIHJlY2VpdmVkIHRoZSBUb2tlbiBpbiBzb21lIG90 aGVyIGZhc2hpb24gKGUuZy4gdGhyb3VnaA0KIHRoZSBjcm9zcy1kb21haW4gcmVkaXJlY3Rpb24g c2NlbmFyaW8gaW4gc2VjdGlvbiA1LjIpLCB0byBiZSBhd2FyZSBvZiB0aGUgdGFyZ2V0IHRyYW5z cG9ydCBtZWNoYW5pc20uDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4tIHNlY3Rpb24gNS4yOiBUaGUgdjEgZHJhZnQgYWxzbyBzdXBwb3J0cyB0b2tlbiBhcyBhIHBh dGggcGFyYW1ldGVyOyBpcyB0aGF0IGludGVudGlvbmFsbHkgb21pdHRlZCBoZXJlPzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+VGhlIHByaW1hcnkgcmVhc29uIGl04oCZcyBub3QgaGVyZSBpcyB0aGF0 IHRoaXMgZHJhZnQgcHJlZGF0ZXMgdGhlIGxhdGVzdCB2ZXJzaW9uIG9mIGRyYWZ0LWlldGYtY2Ru aS11cmktc2lnbmluZyB3aGVyZSBzdXBwb3J0IGZvciBwYXRoIHBhcm1ldGVyIHdhcyBpbnRyb2R1 Y2VkLiBIb3dldmVyLCBJIG5lZWQgdG8gZ2l2ZSBpdCBzb21lIHRob3VnaHQgd2hldGhlcg0KIGl0 IG1ha2VzIHNlbnNlIHRvIHN1cHBvcnQgdGhhdCBzY2VuYXJpbyBoZXJlIGFzIHdlbGwsIGdpdmVu IHRoYXQgdGhlIG1haW4gcmVhc29uIGZvciB1c2luZyBwYXRoIHBhcmFtZXRlcnMgaW4gdjEgd291 bGQgYmUgY2FzZXMgd2hlcmUgeW91IGRvbuKAmXQgaGF2ZSBzZWdtZW50LWxldmVsIGF1dGhlbnRp Y2F0aW9uIGFzIGRlZmluZWQgaW4gdGhpcyBkcmFmdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwcmU+LSBzZWN0aW9u IDcuMSBzdGVwcyAyIGFuZCAzOiBJIHdvdWxkIGV4cGVjdCB0aGF0IHYyIHdvdWxkIGhhdmUgYSBu ZXcgR2VuZXJpY01ldGFkYXRhIHB0eXBlIChNSS5VcmlTaWduaW5nLnYyPykgYW5kIHRoYXQgcHR5 cGUgd291bGQgdGVsbCB0aGUgZENETiB3aGF0IGl0IHNob3VsZCBleHBlY3QgaW4gdGhlIHRva2Vu PyZuYnNwOyBJdCB3b3VsZCBiZSBuaWNlIGlmIHRoZSBkcmFmdCBjb3VsZCBkZWZpbmUgdjIgc3Vj aCB0aGF0IGl0IHN1cHBvcnRlZCBib3RoIFZFUj0xIGFuZCBWRVI9Miwgc28gdGhhdCB0aGUgTUku VXJpU2lnbmluZy52MiBtZXRhZGF0YSBjb3VsZCBiZSBhIHN1cGVyc2V0IG9mIGluZm9ybWF0aW9u IG5lZWRlZCB0byBwcm9jZXNzIGFsbCBrbm93biB0b2tlbiB0eXBlcywgYW5kIG1ha2UgdGhlIHRv a2VuIHByb2Nlc3NpbmcgYSBydW50aW1lIGRlY2lzaW9uPzxvOnA+PC9vOnA+PC9wcmU+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkkgbGlr ZSB0aGF0LiBJIG5lZWQgdG8gZGVsdmUgaW50byB0aGUgTWV0YWRhdGEgYXNwZWN0cyBvZiB2MSBh Z2FpbiB0byBzZWUgZXhhY3RseSBob3cgd2UgY291bGQgYWNoaWV2ZSBzdWNoIGEgdGhpbmcuIE1h eWJlIHNvbWV0aGluZyB0byBkaXNjdXNzIGluIEJlcmxpbi48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlvbiA3LjQsIGdlbmVy YWw6IFRoaXMgZHJhZnQgcmVtb3ZlcyB0aGUgJnF1b3Q7Tm90ZSB0aGF0IHJlLXNpZ25pbmcgYSBV UkkgTVVTVC4uLiZxdW90OyB0ZXh0IGZyb20gdGhlIHYxIGRyYWZ0KHNlY3Rpb24gMy4xKS4mbmJz cDsgU2luY2UgdGhpcyBpcyBhYm91dCByZXNpZ25pbmcsIEkgdGhpbmsgdGhlIHRleHQgYWJvdXQg bWFpbnRhbmluZw0KIHRoZSBzYW1lIHZhbHVlcyBzaG91bGQgYmUgYWRkZWQgaGVyZSwgc3BlY2lm aWNhbGx5IGZvciBLSUQvS0lEX05VTSwgSE1BQywgYW5kIERTQS48L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPkdvb2QgcG9pbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cHJlPi0gRG8geW91IGhhdmUgYW4gaWRlYSBhcyB0 byB3aGF0IGFkZGl0aW9uYWwgcmVnaXN0cmllcywgbWV0YWRhdGEsIGFuZC9vciBsb2dnaW5nIGZp ZWxkcyB3aWxsIGJlIG5lZWRlZD8mbmJzcDsgV2lsbCB0aGUgbmV3IHB0eXBlIGp1c3QgYmUgTUku VXJpU2lnbmluZy52Mj88bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5UbyBiZSBjb21wbGV0ZWx5IGhvbmVzdCwg SSBoYXZlbuKAmXQgZ2l2ZW4gdGhlIE1ldGFkYXRhIGFzcGVjdHMgYSBsb3Qgb2YgdGhvdWdodCB5 ZXQuIEnigJlsbCBjb21lIGJhY2sgdG8geW91IG9uIHRoYXQgb25lLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+VGhhbmtzIGFnYWluITxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+UmF5PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0 O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20g MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OlRhaG9tYSI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlRhaG9tYSI+IENETmkgW21haWx0bzpjZG5pLWJvdW5j ZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkJyYW5kZW5idXJnLCBSLiAoUmF5KSB2 YW48YnI+DQo8Yj5TZW50OjwvYj4gRnJpZGF5LCBKdW5lIDEwLCAyMDE2IDExOjM0IEFNPGJyPg0K PGI+VG86PC9iPiBjZG5pQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFtDRE5pXSBOZXcg dmVyc2lvbiAoYW5kIElQUiBzdGF0ZW1lbnQpIG9mIGRyYWZ0LWJyYW5kZW5idXJnLWNkbmktdXJp LXNpZ25pbmctZm9yLWhhczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5IaSBhbGwsPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5BcyB5b3UgbWlnaHQgaGF2ZSBzZWVuLCBJ 4oCZdmUgcmVjZW50bHkgdXBsb2FkZWQgYSBuZXcgdmVyc2lvbiBvZiBkcmFmdC1icmFuZGVuYnVy Zy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXMgKC0wMykuDQo8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXMtMDMiPmh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWduaW5nLWZv ci1oYXMtMDM8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5X aGF0IGlzIGltcG9ydGFudCB0byBub3RlIGlzIHRoYXQgS1BOIGhhcyB1cGRhdGVkIGl04oCZcyBJ UFIgc3RhdGVtZW50IG9uIHRoaXMgZG9jdW1lbnQgdG8gYmUgaW4gbGluZSB3aXRoIHRoZSBJUFIg c3RhdGVtZW50cyB0aGF0IGhhdmUgYmVlbiBmaWxlZCBvbiBvdGhlciBDRE5JIGRvY3VtZW50cyAo aS5lLiDigJxSb3lhbHR5LUZyZWUsIFJlYXNvbmFibGUgYW5kDQogTm9uLURpc2NyaW1pbmF0b3J5 IExpY2Vuc2UgdG8gQWxsIEltcGxlbWVudGVyc+KAnSkuIEhvcGVmdWxseSB0aGlzIGNsZWFycyB1 cCB0aGUgbGVuZ3RoeSBJUFIgZGlzY3Vzc2lvbiB3ZeKAmXZlIGJlZW4gaGF2aW5nIGFyb3VuZCB0 aGlzIGRvY3VtZW50IHNvIHRoYXQgd2UgY2FuIGZvY3VzIG9uIHRoZSB0ZWNobmljYWwgYXNwZWN0 cyBhZ2Fpbi4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+TG9v a2luZyBmb3J3YXJkIHRvIHlvdXIgZmVlZGJhY2ssPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlJheTwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OC4wcHQ7Zm9udC1mYW1pbHk6QXJpYWwiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjBwdDtmb250LWZhbWlseTpBcmlhbCI+VGhpcyBtZXNzYWdl IG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGludGVuZGVkIGZvciB5b3UuIElm IHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBzZW50IHRv IHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZA0KIHRvIGluZm9ybSB0aGUgc2VuZGVy IGFuZCBkZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5vIGxpYWJpbGl0eSBmb3IgdGhl IGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2Ug aXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tzIGlu aGVyZW50IHRvIHRoZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy48L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_76576555054B4DB89E6737A56C730CC6tnonl_-- From nobody Fri Jul 8 13:02:58 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB56512B019 for ; Fri, 8 Jul 2016 13:02:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.619 X-Spam-Level: X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pM8nOJ4hanfc for ; Fri, 8 Jul 2016 13:02:54 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias92.francetelecom.com [193.251.215.92]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 609B6127058 for ; Fri, 8 Jul 2016 13:02:54 -0700 (PDT) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm14.si.francetelecom.fr (ESMTP service) with ESMTP id B0C7122CE6C for ; Fri, 8 Jul 2016 22:02:52 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.57]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id 96147238092 for ; Fri, 8 Jul 2016 22:02:52 +0200 (CEST) Received: from OPEXCLILMA1.corporate.adroot.infra.ftgroup ([fe80::95e2:eb4b:3053:fabf]) by OPEXCLILM23.corporate.adroot.infra.ftgroup ([fe80::787e:db0c:23c4:71b3%19]) with mapi id 14.03.0301.000; Fri, 8 Jul 2016 22:02:52 +0200 From: To: "cdni@ietf.org" Thread-Topic: New Version Notification for draft-cdni-fieau-lurk-https-delegation-00.txt Thread-Index: AQHR2VJbR9x41DLwaEibbeC7kZmk8qAO8nKQ Date: Fri, 8 Jul 2016 20:02:52 +0000 Message-ID: <6423_1468008172_578006EC_6423_8217_1_1BD328329726EF4E91AE924BB1B4CB9E0FF94B93@OPEXCLILMA1.corporate.adroot.infra.ftgroup> References: <20160708195310.32172.23715.idtracker@ietfa.amsl.com> In-Reply-To: <20160708195310.32172.23715.idtracker@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.1] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2016.7.8.191516 Archived-At: Subject: [CDNi] New Version Notification for draft-cdni-fieau-lurk-https-delegation-00.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 20:02:57 -0000 SGkgYWxsLA0KDQpJJ3ZlIGp1c3QgcG9zdGVkIGEgbmV3IGRyYWZ0IG9uIHRoZSB1c2Ugb2YgTFVS SyAoTGltaXRlZCBVc2Ugb2YgUmVtb3RlIEtleXMpIGZvciBDRE5JLg0KDQpUaGlzIGRyYWZ0IHBy ZXNlbnRzIHR3byB1c2UgY2FzZXMgcmVnYXJkaW5nIExVUksgaW4gQ0ROSSBhbmQgaXMgYSBmaXJz dCBhdHRlbXB0IHRvIHNwZWNpZnkgcmVsYXRlZCByZXF1aXJlbWVudHMuIEl0IGZpbmFsbHkgb3Bl bnMgdGhlIGRpc2N1c3Npb24gb24gc2V2ZXJhbCBhc3NvY2lhdGVkIHRvcGljcy4NCg0KVGhhbmtz IGZvciB5b3VyIHJldmlldy4NCg0KQ2hlZXJzLA0KRnJlZGVyaWMNCg0KLS0tLQ0KDQoNCg0KQSBu ZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LWNkbmktZmllYXUtbHVyay1odHRwcy1kZWxlZ2F0aW9u LTAwLnR4dA0KaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBGcmVkZXJpYyBGaWVh dSBhbmQgcG9zdGVkIHRvIHRoZSBJRVRGIHJlcG9zaXRvcnkuDQoNCk5hbWU6CQlkcmFmdC1jZG5p LWZpZWF1LWx1cmstaHR0cHMtZGVsZWdhdGlvbg0KUmV2aXNpb246CTAwDQpUaXRsZToJCUxpbWl0 ZWQgVXNlIG9mIFJlbW90ZSBLZXlzIGZvciBJbnRlcmNvbm5lY3RlZCBDRE5zDQpEb2N1bWVudCBk YXRlOgkyMDE2LTA3LTA4DQpHcm91cDoJCUluZGl2aWR1YWwgU3VibWlzc2lvbg0KUGFnZXM6CQkx Nw0KVVJMOiAgICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9k cmFmdC1jZG5pLWZpZWF1LWx1cmstaHR0cHMtZGVsZWdhdGlvbi0wMC50eHQNClN0YXR1czogICAg ICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1jZG5pLWZpZWF1LWx1 cmstaHR0cHMtZGVsZWdhdGlvbi8NCkh0bWxpemVkOiAgICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1jZG5pLWZpZWF1LWx1cmstaHR0cHMtZGVsZWdhdGlvbi0wMA0KDQoNCkFi c3RyYWN0Og0KICAgU2hhcmluZyBwcml2YXRlIGtleXMgYW1vbmdzdCBhZG1pbmlzdHJhdGl2ZSBl bnRpdGllcyByYWlzZXMgbnVtZXJvdXMNCiAgIGlzc3VlcyBmb3IgZW5kLXVzZXJzLCBpbnRlcm1l ZGlhcmllcyBhbmQgY29udGVudCBvcmlnaW5zLiAgVGhlIElFVEYNCiAgIGVudmlzaW9ucyB0aGUg c3RhbmRhcmRpemF0aW9uIG9mIHByb3RvY29scyB0byBsaW1pdCB0aGUgZXhjaGFuZ2Ugb2YNCiAg IHByaXZhdGUga2V5cyAoTFVSSykuICBUaGlzIGRvY3VtZW50IHByZXNlbnRzIENETiBJbnRlcmNv bm5lY3Rpb24NCiAgIChDRE5JKSB1c2UgY2FzZXMgYmFzZWQgb24gdGhlIExpbWl0ZWQgVXNlIG9m IFJlbW90ZSBLZXlzIChMVVJLKQ0KICAgcHJvdG9jb2wgYW5kIGFyY2hpdGVjdHVyZSBhbmQgaWRl bnRpZmllcyBhIHNldCBvZiByZXF1aXJlbWVudHMuDQoNCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICANCg0KDQoNCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fCgpDZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2 ZW50IGNvbnRlbmlyIGRlcyBpbmZvcm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVn aWVlcyBldCBuZSBkb2l2ZW50IGRvbmMKcGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBj b3BpZXMgc2FucyBhdXRvcmlzYXRpb24uIFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFy IGVycmV1ciwgdmV1aWxsZXogbGUgc2lnbmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVp cmUgYWluc2kgcXVlIGxlcyBwaWVjZXMgam9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1 ZXMgZXRhbnQgc3VzY2VwdGlibGVzIGQnYWx0ZXJhdGlvbiwKT3JhbmdlIGRlY2xpbmUgdG91dGUg cmVzcG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFs c2lmaWUuIE1lcmNpLgoKVGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMgbWF5IGNvbnRh aW4gY29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcHJv dGVjdGVkIGJ5IGxhdzsKdGhleSBzaG91bGQgbm90IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9yIGNv cGllZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uCklmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1h aWwgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoaXMgbWVz c2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzLgpBcyBlbWFpbHMgbWF5IGJlIGFsdGVyZWQsIE9yYW5n ZSBpcyBub3QgbGlhYmxlIGZvciBtZXNzYWdlcyB0aGF0IGhhdmUgYmVlbiBtb2RpZmllZCwgY2hh bmdlZCBvciBmYWxzaWZpZWQuClRoYW5rIHlvdS4KCg== From nobody Fri Jul 8 13:32:06 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 214E512D846; Fri, 8 Jul 2016 13:32:03 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.25.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160708203203.32205.90541.idtracker@ietfa.amsl.com> Date: Fri, 08 Jul 2016 13:32:03 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-metadata-19.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 20:32:03 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection of the IETF. Title : CDN Interconnection Metadata Authors : Ben Niven-Jenkins Rob Murray Matt Caulfield Kevin J. Ma Filename : draft-ietf-cdni-metadata-19.txt Pages : 63 Date : 2016-07-08 Abstract: The Content Delivery Networks Interconnection (CDNI) metadata interface enables interconnected Content Delivery Networks (CDNs) to exchange content distribution metadata in order to enable content acquisition and delivery. The CDNI metadata associated with a piece of content provides a downstream CDN with sufficient information for the downstream CDN to service content requests on behalf of an upstream CDN. This document describes both a base set of CDNI metadata and the protocol for exchanging that metadata. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-metadata-19 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-metadata-19 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jul 8 13:40:35 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D741F12D523; Fri, 8 Jul 2016 13:39:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I0S2hffqADY8; Fri, 8 Jul 2016 13:39:09 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F48C12D119; Fri, 8 Jul 2016 13:39:08 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-48-578004afa65f Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 78.5C.09012.FA400875; Fri, 8 Jul 2016 21:53:19 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0294.000; Fri, 8 Jul 2016 16:39:05 -0400 From: Kevin Ma J To: "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-metadata-19.txt Thread-Index: AQHR2VfZzKtSkmbskEiZlmBanQ1qwKAO/abA Date: Fri, 8 Jul 2016 20:39:04 +0000 Message-ID: References: <20160708203203.32205.90541.idtracker@ietfa.amsl.com> In-Reply-To: <20160708203203.32205.90541.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrHIsWRmVeSWpSXmKPExsUyuXRPrO56loZwgycfxSymn/nLaHH0sYTF /M7T7BZPZ/9htbj66jOLxfPd9hYz/kxktnhx/SOzxcL1a5ktXp1aw2jRsDPf4vvFDmaL3qYl zBYfFj5ksZi+9xq7xfsL51gcBDzOHlnA6DHl90ZWjy9PXjJ5rO2+yuaxc9Zddo/HPWfYPFqO vGX1WD7tKKPHkiU/mTxaPi5k9Zi18wmLx5fLn9kCeKK4bFJSczLLUov07RK4MmYdzyg4KFdx 8dEJtgbGW+JdjJwcEgImEs23jzJC2GISF+6tZ+ti5OIQEjjKKHHvdRsLSEJIYBmjxMLtlSA2 m4CWxOOvf5m6GDk4RASUJX4ecgSpZxZYyCrxfdIBdpAaYQF7iYcnzrGC2CICDhKftpyGso0k 5vf8YwPpZRFQkbi60BkkzCvgK/Hpay8jxCpHiR27/oKVcwo4SbzYvJoZxGYEuu37qTVMIDaz gLjErSfzmSBuFpBYsuc8M4QtKvHy8T9WCFtRYl//dHaIeh2JBbs/sUHY2hLLFr5mhtgrKHFy 5hOWCYxis5CMnYWkZRaSlllIWhYwsqxi5CgtLsjJTTcy2MQITAXHJNh0dzDen+55iFGAg1GJ h1fhVX24EGtiWXFl7iFGCQ5mJRFebt6GcCHelMTKqtSi/Pii0pzU4kOM0hwsSuK8Yo8Uw4UE 0hNLUrNTUwtSi2CyTBycUg2MAXNCMj9zGj3bdjJw33VHsTsRzhHT9DNabkrpa5V8W7pC94LT 8SvWs+uPGM1IMJd+l8zYW+HvPpmFf7XJ5AkXVrT0vVT3LfHIcg59aLmuSMdafVtoWnOyxUZz vpQK4/qD1+Mnd1qXKpv9OOBU5xZuaPfxh2NdbNR2xau7H3+oySsMf/XZcZISS3FGoqEWc1Fx IgB2pOvhAQMAAA== Archived-At: X-Mailman-Approved-At: Fri, 08 Jul 2016 13:40:33 -0700 Cc: Gunter Van De Velde , "ops-dir@ietf.org" , Zhang Dacheng , Ben Campbell , "gen-art@ietf.org" , "secdir@ietf.org" , "ops-ads@tools.ietf.org" , joel jaeggli , Meral Shirazipour , Kathleen Moriarty , Mirja Kuehlewind , The IESG , Benoit Claise , Stephen Farrell , Sheng Jiang Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-metadata-19.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 20:39:12 -0000 Hi All, (As and author) I am still working through the last of the IESG comments,= but I wanted to post an update before the draft deadline. This update should address all of the opsdir, secdir, and genart comments= , as well as all of the DISCUSSes and most of the non-DISCUSS comments. Still todo are: - Address the general cleanup comments from Stephen Farrell and Ben Campb= ell, including link loop prevention - Close on comments from Alissa Cooper Two changes in the updated version for which I think we need to feedback = from the WG: 1. I removed the Auth Type registry. After thinking about it some more= , my rationale is this: we changed all metadata objects to have a ptype, an= d the Auth object is a metadata object, so it has to have a ptype, and sinc= e there's already a registry for ptypes, the Auth Type registry is just a d= uplicate registry where we say that the already registered metadata object = is an Auth object. This seems really redundant since the spec will be the = same in both registries. (Note: This was not the case before we switched t= o the ptype registry.) So, I think removing the Auth Type registry is simp= ler and cleaner, unless anyone disagrees? 2. I was cleaning up the "versioning" text and realized that the ptype = of structural metadata is not necessarily explicitly listed in the json res= ponses, unless they are linked. The example in 6.10 uses links, but embedd= ing would also be valid? I think we could either make links mandatory for = structural metadata, or require that all structural metadata always be vers= ioned together, though I'm open to other thoughts on this. thanx! -- Kevin J. Ma > -----Original Message----- > From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Friday, July 08, 2016 4:32 PM > To: i-d-announce@ietf.org > Cc: cdni@ietf.org > Subject: [CDNi] I-D Action: draft-ietf-cdni-metadata-19.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Content Delivery Networks Interconnectio= n > of the IETF. >=20 > Title : CDN Interconnection Metadata > Authors : Ben Niven-Jenkins > Rob Murray > Matt Caulfield > Kevin J. Ma > Filename : draft-ietf-cdni-metadata-19.txt > Pages : 63 > Date : 2016-07-08 >=20 > Abstract: > The Content Delivery Networks Interconnection (CDNI) metadata > interface enables interconnected Content Delivery Networks (CDNs) to > exchange content distribution metadata in order to enable content > acquisition and delivery. The CDNI metadata associated with a piece > of content provides a downstream CDN with sufficient information for > the downstream CDN to service content requests on behalf of an > upstream CDN. This document describes both a base set of CDNI > metadata and the protocol for exchanging that metadata. >=20 >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-metadata-19 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-metadata-19 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Fri Jul 8 14:01:13 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3C7612B034 for ; Fri, 8 Jul 2016 14:01:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o2iS5sMYxa27 for ; Fri, 8 Jul 2016 14:01:09 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FC7512B004 for ; Fri, 8 Jul 2016 13:53:36 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-3b-5780128c3ec3 Received: from EUSAAHC005.ericsson.se (Unknown_Domain [147.117.188.87]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id 0B.CD.03614.C8210875; Fri, 8 Jul 2016 22:52:29 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC005.ericsson.se ([147.117.188.87]) with mapi id 14.03.0294.000; Fri, 8 Jul 2016 16:53:34 -0400 From: Kevin Ma J To: "Brandenburg, R. (Ray) van" , "cdni@ietf.org" Thread-Topic: New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has Thread-Index: AQHRwy2I54wAQQPyYkOQMx8zvzoaI6AKgsGggAQeLwCAAIwLcA== Date: Fri, 8 Jul 2016 20:53:34 +0000 Message-ID: References: <90041886-D253-413F-B006-50BDA558EB12@tno.nl> <76576555-054B-4DB8-9E67-37A56C730CC6@tno.nl> In-Reply-To: <76576555-054B-4DB8-9E67-37A56C730CC6@tno.nl> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: multipart/alternative; boundary="_000_A419F67F880AB2468214E154CB8A556206E4D549eusaamb103erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupkkeLIzCtJLcpLzFFi42KZXLonXLdXqCHc4NFbQYuns/+wWnzbfJ3R gcljyZKfTB4H111gDmCK4rJJSc3JLEst0rdL4Mr4+noyc8GGzUwVc5cuZ2xgXLOaqYuRk0NC wESi+eoaRghbTOLCvfVsXYxcHEICRxkl5qxcxAKSEBJYxihx638eiM0moCXx+OtfsGYRgTiJ HcfOgDULC8RIvJy6ghEiHiuxbvs2KNtJYuO1B2wgNouAisTeruWsIDavgK/EjY0rWCGWrWWU aLv6ESzBKWAlsWb5FjCbEeii76fWgC1jFhCXuPVkPtTVAhJL9pxnhrBFJV4+/scKYStK7Ouf zg5Rny/x9OllRohlghInZz5hmcAoMgvJqFlIymYhKZvFyAEU15RYv0sfokRRYkr3Q3YIW0Oi dc5cdmTxBYzsqxg5SosLcnLTjQw3MQIj6JgEm+MOxr29nocYBTgYlXh4FV7VhwuxJpYVV+Ye YpTgYFYS4eXmbQgX4k1JrKxKLcqPLyrNSS0+xCjNwaIkzqv/UjFcSCA9sSQ1OzW1ILUIJsvE wSnVwLhst2fppCt9kYL/LBQytnf4PFp2UuzDs0b7mDPzv6VpiNvUHT3AsM0zWmfi5qNlPW+v KHj9XcViHneQc1ua6BWm85GimV+WOBY3PHhSvjk7g3dnmZnk1mu7V/hVcWe+2ifoMSenZ8rU u/ue5j+4br7dJt80IfXzr+Sd5e5B/itk0tWkbZ8FFSqxFGckGmoxFxUnAgCv2ne4nAIAAA== Archived-At: Subject: Re: [CDNi] New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 21:01:12 -0000 --_000_A419F67F880AB2468214E154CB8A556206E4D549eusaamb103erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUmF5LA0KDQo+IE5ldyBTVFQgdmFsdWVzIGFyZSBleHBlY3RlZCB0byB1cGRhdGUgc2VjdGlv bnMgNSBhbmQgNi4gVGhlIHJlYXNvbiB0aGUgU1RUIHZhbHVlIGlzIG1hZGUgZXhwbGljaXQgaW4g dGhlIHRva2VuIGFzIHdlbGwgaXMgdG8gYWxsb3cgaW1wbGVtZW50YXRpb25zIHRoYXQgaGF2ZSBy ZWNlaXZlZCB0aGUgVG9rZW4gaW4gc29tZSBvdGhlciBmYXNoaW9uIChlLmcuIHRocm91Z2ggdGhl IGNyb3NzLWRvbWFpbiByZWRpcmVjdGlvbiBzY2VuYXJpbyBpbiBzZWN0aW9uIDUuMiksIHRvIGJl IGF3YXJlIG9mIHRoZSB0YXJnZXQgdHJhbnNwb3J0IG1lY2hhbmlzbS4NCg0KSSBndWVzcyBieSBp c3N1ZSBpcyB0aGF0OiBpbiBvcmRlciB0byByZWFkIHRoZSBTVFQgdmFsdWUgaW4gdGhlIHRva2Vu LCB0aGUgc2VydmVyIHdvdWxkIG5lZWQgdG8gaGF2ZSBhbHJlYWR5IGZvdW5kIHRoZSB0b2tlbiB2 aWEgdGhlIHByb2Nlc3MgaW4gc2VjdGlvbiA2LiAgSW4gdGhlIG5vbi1jcm9zcy1kb21haW4gY2Fz ZSwgdGhlIHNlcnZlciBzaG91bGQganVzdCB1c2Ugd2hhdGV2ZXIgY29udmV5YW5jZSB3YXMgdXNl ZCBpbiB0aGUgcmVxdWVzdCAocXVlcnkgc3RyaW5nLCB1cmkgcGF0aCwgY29va2llLCBldGMuKT8g IFRoZSBvbmx5IHB1cnBvc2UgZm9yIHRoZSBTVFQsIHRoZW4sIGlzIHRvIHRlbGwgdGhlIHNlcnZl ciB0aGUgcHJlZmVycmVkIGNvbnZleWFuY2UgZm9yIHN1YnNlcXVlbnQgdG9rZW5zLCBpbiB0aGUg Y2FzZSB0aGF0IGl0IGRvZXNuJ3QgbWF0Y2ggdGhlIGNvbnZleWFuY2UgaW4gdGhlIHJlcXVlc3Q/ ICBCdXQgdGhhdCBpcyBhbHJlYWR5IGRpY3RhdGVkIGluIHNlY3Rpb24gNT8gIElmIHNlY3Rpb24g NSBzYXlzIHVzZSBhIGNvb2tpZSwgdW5sZXNzIHlvdSdyZSByZWRpcmVjdGluZywgdGhlbiB1c2Ug cXVlcnkgc3RyaW5nIChvciB1cmkgcGF0aCksIHRoZW4gd2UgZG9uJ3QgcmVhbGx5IG5lZWQgU1RU Pw0KDQp0aGFueC4NCg0KLS0gIEtldmluIEouIE1hDQoNCg0KRnJvbTogQnJhbmRlbmJ1cmcsIFIu IChSYXkpIHZhbiBbbWFpbHRvOnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmxdDQpTZW50OiBGcmlk YXksIEp1bHkgMDgsIDIwMTYgODoyNCBBTQ0KVG86IEtldmluIE1hIEo7IGNkbmlAaWV0Zi5vcmcN ClN1YmplY3Q6IFJlOiBOZXcgdmVyc2lvbiAoYW5kIElQUiBzdGF0ZW1lbnQpIG9mIGRyYWZ0LWJy YW5kZW5idXJnLWNkbmktdXJpLXNpZ25pbmctZm9yLWhhcw0KDQpIaSBLZXZpbiwNCg0KVGhhbmtz IGZvciB0aGUgcmV2aWV3ISBQbGVhc2Ugc2VlIG15IGNvbW1lbnRzIGlubGluZS4NCg0KUmF5DQoN CkZyb206ICJrZXZpbi5qLm1hQGVyaWNzc29uLmNvbTxtYWlsdG86a2V2aW4uai5tYUBlcmljc3Nv bi5jb20+IiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb208bWFpbHRvOmtldmluLmoubWFAZXJpY3Nz b24uY29tPj4NCkRhdGU6IFR1ZXNkYXkgNSBKdWx5IDIwMTYgYXQgMjM6NDMNClRvOiBSYXkgdmFu IEJyYW5kZW5idXJnIDxyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPG1haWx0bzpyYXkudmFuYnJh bmRlbmJ1cmdAdG5vLm5sPj4sICJjZG5pQGlldGYub3JnPG1haWx0bzpjZG5pQGlldGYub3JnPiIg PGNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUkU6IE5ldyB2 ZXJzaW9uIChhbmQgSVBSIHN0YXRlbWVudCkgb2YgZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmkt c2lnbmluZy1mb3ItaGFzDQoNCkhpIFJheSwNCg0KICAoQXMgYW4gaW5kaXZpZHVhbCkgSSBmaW5h bGx5IGZvdW5kIHNvbWUgdGltZSB0byByZWFkIHRocm91Z2ggdGhlIHVwZGF0ZWQgZHJhZnQuICBT b21lIGNvbW1lbnRzIGFuZCBxdWVzdGlvbnMgYmVsb3cuDQoNCnRoYW54IQ0KDQotLSAgS2V2aW4g Si4gTWENCg0KLSBzZWN0aW9uIDQuMSwgc3RlcCAzLkU6IFdoYXQgaWYgdGhlIHVzZXIgcGF1c2Vz LCBvciB0aGVyZSBpcyBhbiBhZCBpbnNlcnRlZCwgYW5kIHRoZSB0b2tlbiBleHBpcmVzPyAgVW5k ZXJzdG9vZCB0aGF0IGl0J3MgcHJvYmFibHkgdXAgdG8gdGhlIG1lZGlhIHBsYXllciB0byBoYW5k bGUgdGhhdCBjYXNlLCBidXQgd291bGQgdGhleSBuZWVkIHRvIGdvIGJhY2sgdG8gdGhlIENQIHRv IGdldCBhIG5ldyB2YWxpZCBtYW5pZmVzdCBVUkw/ICBXaGljaCB3b3VsZCBoYXZlIGEgdG9rZW4g dGhhdCBpcyB2YWxpZCBmb3IgdGhlIGNodW5rcyBhcyB3ZWxsPw0KDQpJdOKAmXMgdXAgdG8gdGhl IG1lZGlhIHBsYXllciB0byBtYWtlIHN1cmUgaXQgcmVmcmVzaGVzIHRoZSB0b2tlbiwgZWl0aGVy IGJlZm9yZSBvciBhZnRlciBpdCAoYWx0aG91Z2ggdGhlIGZvcm1lciBtaWdodCBiZSBlYXNpZXIp LiBPbiB3YXkgdG8gZG8gdGhhdCB3b3VsZCBiZSB0byBzZW5kIGFuIEhUVFAgSEVBRCByZXF1ZXN0 IGZvciBhbiBhcmJpdHJhcnkgc2VnbWVudCB0byB0aGUgQ0ROLiBOb3RlIHRoYXQgdGhpcyBkb2Vz IGFzc3VtZSB0aGF0IHRoZSBtZWRpYSBwbGF5ZXIgaXMgYXdhcmUgb2YgdGhlIGFwcHJveGltYXRl IHZhbGlkaXR5IHRpbWUgb2YgYSB0b2tlbi4gSW4gcHJhY3RpY2UgdGhpcyBpcyBzb21ldGhpbmcg dGhhdCBjb3VsZCBiZSBjb21tdW5pY2F0ZWQgaW4gYSBtYW5pZmVzdCBmaWxlLCBzdWNoIGFzIGEg REFTSCBNUEQuIEl04oCZcyBvbmUgb2YgdGhlIHRvcGljcyBmb3Igd2hpY2ggaXQgbWlnaHQgYmUg d29ydGggY29uc2lkZXJpbmcgc2VuZGluZyBpbiBhIGxpYWlzb24gdG8gTVBFRywgaWYgdGhlIFdH IHNob3VsZCBkZWNpZGUgdG8gYWRvcHQgdGhpcyB3b3JrLg0KDQpXaGF0IEkgd291bGQgbGlrZSB0 byBkbyBpbiBhIG5leHQgaXRlcmF0aW9uIG9mIHRoaXMgZG9jdW1lbnQgaXMgdG8gYWRkIGEgc2Vu dGVuY2UgYWxvbmcgdGhlIGxpbmVzIG9mIOKAmFVwb24gcmVjZWl2aW5nIGFuIEhUVFAgSEVBRCBy ZXF1ZXN0LCBhIENETiBTSE9VTEQgdmFsaWRhdGUgdGhlIGluY29taW5nIFNpZ25lZCBUb2tlbiBh bmQgZ2VuZXJhdGUgYSBuZXcgb25lIGluIHRoZSBzYW1lIHdheSBhcyBpdCB3b3VsZCBkbyBmb3Ig YW4gSFRUUCBHRVTigJkuDQoNCi0gc2VjdGlvbiA0LjEsIHN0ZXBzIDksIDExLkIsIDExLkUsIDEy LkIsIGFuZCAxMi5GLCBzZWN0aW9uIDcuMSBzdGVwIDEsIHNlY3Rpb24gNy4yIHN0ZXBzIDMuQS5k IGFuZCAzLkIuZCwgYW5kIHNlY3Rpb24gNy40IHN0ZXBzIDEwLkEuMiwgMTAuQS41LCAxMC5CLjIs IGFuZCAxMC5CLjY6IFNob3VsZCB0aGUgVVBDIGJlIHBlcmNlbnQtZW5jb2RlZD8gIEFuZCBzaG91 bGQgQ0lQIGJlIGVuY3J5cHRlZD8NCg0KQ29ycmVjdC4gVGhpcyB2ZXJzaW9uIG9mIGRyYWZ0LWJy YW5kZW5idXJnLWNkbmktdXJpLXNpZ25pbmctZm9yLWhhcyBoYXNu4oCZdCB5ZXQgYmVlbiBicm91 Z2h0IGluIGxpbmUgd2l0aCB0aGUgbW9zdCByZWNlbnQgdmVyc2lvbiBvZiBkcmFmdC1pZXRmLWNk bmktdXJpLXNpZ25pbmcsIHdoZXJlIHBlcmNlbnQtZW5jb2Rpbmcgb2YgdGhlIFVQQyB3YXMgaW50 cm9kdWNlZC4gSW4gdGhlIHNhbWUgd2F5LCBDSVAgc2hvdWxkIGJlIGVuY3J5cHRlZC4gSeKAmWxs IGZpeCB0aGlzIGluIHRoZSBuZXh0IGl0ZXJhdGlvbi4NCg0KLSBzZWN0aW9uIDQuMSwgc3RlcHMg OSwgMTEuQiwgMTEuRSwgMTIuQiwgMTIuRiwgc2VjdGlvbiA1LjIsIGFuZCBzZWN0aW9uIDcuMSBz dGVwIDE6IElmIHRoZSB0b2tlbiBpcyBvbmx5IGdvb2QgZm9yIHNlZ21lbnRzLCBidXQgaXMgYXR0 YWNoZWQgdG8gdGhlIG1hbmlmZXN0IHJlcXVlc3QsIGRvZXMgdGhhdCBtZWFuIHRoYXQgdGhlcmUg aXMgbm8gc2lnbmF0dXJlIHZhbGlkYXRpb24gb24gdGhlIG1hbmlmZXN0IHJlcXVlc3Q/ICBJbiB0 aGUgMnh4IG5vbi1yZWRpcmVjdCBjYXNlLCB3b3VsZCB5b3UgZXhwZWN0IGEgdjEgbWFuaWZlc3Qg c2lnbmF0dXJlIGJlIGluIHRoZSBxdWVyeSBzdHJpbmcgYW5kIGEgc2VwYXJhdGUgdjIgY2h1bmsg c2lnbmF0dXJlIGJlIGluIHRoZSBjb29raWU/DQoNCk1heWJlIHRoZSBkb2N1bWVudCBzaG91bGQg YmUgY2xlYXJlciBvbiB0aGlzLiBNeSBpbnRlbnRpb24gd2FzIHRoYXQgU2lnbmVkIFRva2VucyBz aG91bGQgYmUgdXNlZCBmb3IgYm90aCBtYW5pZmVzdCBhbmQgc2VnbWVudCByZXF1ZXN0cywgZXNw ZWNpYWxseSBnaXZlbiB0aGF0IHRoZSAyMDAgT0sgZm9yIHRoZSBpbml0aWFsIG1hbmlmZXN0IHdp bGwgY29udGFpbiB0aGUgZmlyc3QgU2lnbmVkIFRva2VuLiBJbiBvdGhlciB3b3JkcywgdGhlIFVQ QyBzaG91bGQgYmUgY2hvc2VuIGluIGEgd2F5IHRoYXQgYm90aCB0aGUgbWFuaWZlc3QgbG9jYXRp b24gYW5kIHRoZSBzZWdtZW50IGxvY2F0aW9uIGlzIGNvdmVyZWQgYnkgdGhlIFVQQy4NCg0KLSBz ZWN0aW9uIDQuMSwgc3RlcCAxMCwgc2VjdGlvbnMgNS82LCBhbmQgc2VjdGlvbiA3LjQgc3RlcCA5 OiBTZWVtcyBsaWtlIGEgY2hpY2tlbiBhbmQgZWdnIHByb2JsZW0uICBUaGUgU1RUIHNheXMgdGhh dCB0aGUgdG9rZW4gaXMgaW4gdGhlIGNvb2tpZSwgYnV0IHRoZSBTVFQgaXMgaW4gdGhlIHRva2Vu IHRoYXQncyBpbnNpZGUgdGhlIGNvb2tpZS4gIERvZXMgdGhlIGluaXRpYWwgdG9rZW4gYWx3YXlz IGhhdmUgdG8gYmUgaW4gYSB0b2tlbj8gIFNob3VsZCB0aGUgaW5pdGlhbCB0b2tlbiBhbHdheXMg YmUgaW4gdGhlIHF1ZXJ5IHN0cmluZyB0byBiZSBjb21wYXRpYmxlIHdpdGggdjEsIHNpbmNlIHRo ZSBWRVI9MiBpcyBhbHNvIGluc2lkZSB0aGUgdG9rZW4gaW5zaWRlIHRoZSBjb29raWU/ICBGcm9t IHRoZSBjbGllbnQgcGVyc3BlY3RpdmUsIHNob3VsZCBvbmx5IHN1YnNlcXVlbnQgdG9rZW5zIGJl IGluIHRoZSBjb29raWU/ICBGcm9tIHRoZSBDRE4gcGVyc3BlY3RpdmUsIHVubGVzcyBwYXNzZWQg aW4gdGhlIG1ldGFkYXRhLCBob3cgd2lsbCB0aGUgQ0ROIGtub3cgd2hlcmUgdG8gbG9vayBmb3Ig dGhlIHRva2VuLCBvciBkb2VzIGl0IGFsd2F5cyBjaGVjayBldmVyeXdoZXJlPyAgSWYgdGhlIHBy b2Nlc3MgaXMgdG8gYWx3YXlzIGNoZWNrIHRoZSBxdWVyeSBzdHJpbmcgZmlyc3QgYW5kIHRoZSBj b29raWUgc2Vjb25kLCBkbyB3ZSBldmVuIG5lZWQgU1RUPyAgTmV3IFNUVCB2YWx1ZXMgYXJlIGdv aW5nIHRvIHJlcXVpcmUgYW5kIHVwZGF0ZSB0byB0aGUgcHJvY2VkdXJlIGluIHNlY3Rpb24gNiwg YXMgd2VsbCBhcyByZWdpc3RyYXRpb24gb2YgbmV3IFNUVCB2YWx1ZXM/DQoNCk5ldyBTVFQgdmFs dWVzIGFyZSBleHBlY3RlZCB0byB1cGRhdGUgc2VjdGlvbnMgNSBhbmQgNi4gVGhlIHJlYXNvbiB0 aGUgU1RUIHZhbHVlIGlzIG1hZGUgZXhwbGljaXQgaW4gdGhlIHRva2VuIGFzIHdlbGwgaXMgdG8g YWxsb3cgaW1wbGVtZW50YXRpb25zIHRoYXQgaGF2ZSByZWNlaXZlZCB0aGUgVG9rZW4gaW4gc29t ZSBvdGhlciBmYXNoaW9uIChlLmcuIHRocm91Z2ggdGhlIGNyb3NzLWRvbWFpbiByZWRpcmVjdGlv biBzY2VuYXJpbyBpbiBzZWN0aW9uIDUuMiksIHRvIGJlIGF3YXJlIG9mIHRoZSB0YXJnZXQgdHJh bnNwb3J0IG1lY2hhbmlzbS4NCg0KLSBzZWN0aW9uIDUuMjogVGhlIHYxIGRyYWZ0IGFsc28gc3Vw cG9ydHMgdG9rZW4gYXMgYSBwYXRoIHBhcmFtZXRlcjsgaXMgdGhhdCBpbnRlbnRpb25hbGx5IG9t aXR0ZWQgaGVyZT8NCg0KVGhlIHByaW1hcnkgcmVhc29uIGl04oCZcyBub3QgaGVyZSBpcyB0aGF0 IHRoaXMgZHJhZnQgcHJlZGF0ZXMgdGhlIGxhdGVzdCB2ZXJzaW9uIG9mIGRyYWZ0LWlldGYtY2Ru aS11cmktc2lnbmluZyB3aGVyZSBzdXBwb3J0IGZvciBwYXRoIHBhcm1ldGVyIHdhcyBpbnRyb2R1 Y2VkLiBIb3dldmVyLCBJIG5lZWQgdG8gZ2l2ZSBpdCBzb21lIHRob3VnaHQgd2hldGhlciBpdCBt YWtlcyBzZW5zZSB0byBzdXBwb3J0IHRoYXQgc2NlbmFyaW8gaGVyZSBhcyB3ZWxsLCBnaXZlbiB0 aGF0IHRoZSBtYWluIHJlYXNvbiBmb3IgdXNpbmcgcGF0aCBwYXJhbWV0ZXJzIGluIHYxIHdvdWxk IGJlIGNhc2VzIHdoZXJlIHlvdSBkb27igJl0IGhhdmUgc2VnbWVudC1sZXZlbCBhdXRoZW50aWNh dGlvbiBhcyBkZWZpbmVkIGluIHRoaXMgZHJhZnQuDQoNCg0KLSBzZWN0aW9uIDcuMSBzdGVwcyAy IGFuZCAzOiBJIHdvdWxkIGV4cGVjdCB0aGF0IHYyIHdvdWxkIGhhdmUgYSBuZXcgR2VuZXJpY01l dGFkYXRhIHB0eXBlIChNSS5VcmlTaWduaW5nLnYyPykgYW5kIHRoYXQgcHR5cGUgd291bGQgdGVs bCB0aGUgZENETiB3aGF0IGl0IHNob3VsZCBleHBlY3QgaW4gdGhlIHRva2VuPyAgSXQgd291bGQg YmUgbmljZSBpZiB0aGUgZHJhZnQgY291bGQgZGVmaW5lIHYyIHN1Y2ggdGhhdCBpdCBzdXBwb3J0 ZWQgYm90aCBWRVI9MSBhbmQgVkVSPTIsIHNvIHRoYXQgdGhlIE1JLlVyaVNpZ25pbmcudjIgbWV0 YWRhdGEgY291bGQgYmUgYSBzdXBlcnNldCBvZiBpbmZvcm1hdGlvbiBuZWVkZWQgdG8gcHJvY2Vz cyBhbGwga25vd24gdG9rZW4gdHlwZXMsIGFuZCBtYWtlIHRoZSB0b2tlbiBwcm9jZXNzaW5nIGEg cnVudGltZSBkZWNpc2lvbj8NCg0KSSBsaWtlIHRoYXQuIEkgbmVlZCB0byBkZWx2ZSBpbnRvIHRo ZSBNZXRhZGF0YSBhc3BlY3RzIG9mIHYxIGFnYWluIHRvIHNlZSBleGFjdGx5IGhvdyB3ZSBjb3Vs ZCBhY2hpZXZlIHN1Y2ggYSB0aGluZy4gTWF5YmUgc29tZXRoaW5nIHRvIGRpc2N1c3MgaW4gQmVy bGluLg0KDQotIHNlY3Rpb24gNy40LCBnZW5lcmFsOiBUaGlzIGRyYWZ0IHJlbW92ZXMgdGhlICJO b3RlIHRoYXQgcmUtc2lnbmluZyBhIFVSSSBNVVNULi4uIiB0ZXh0IGZyb20gdGhlIHYxIGRyYWZ0 KHNlY3Rpb24gMy4xKS4gIFNpbmNlIHRoaXMgaXMgYWJvdXQgcmVzaWduaW5nLCBJIHRoaW5rIHRo ZSB0ZXh0IGFib3V0IG1haW50YW5pbmcgdGhlIHNhbWUgdmFsdWVzIHNob3VsZCBiZSBhZGRlZCBo ZXJlLCBzcGVjaWZpY2FsbHkgZm9yIEtJRC9LSURfTlVNLCBITUFDLCBhbmQgRFNBLg0KDQpHb29k IHBvaW50Lg0KDQoNCi0gRG8geW91IGhhdmUgYW4gaWRlYSBhcyB0byB3aGF0IGFkZGl0aW9uYWwg cmVnaXN0cmllcywgbWV0YWRhdGEsIGFuZC9vciBsb2dnaW5nIGZpZWxkcyB3aWxsIGJlIG5lZWRl ZD8gIFdpbGwgdGhlIG5ldyBwdHlwZSBqdXN0IGJlIE1JLlVyaVNpZ25pbmcudjI/DQoNClRvIGJl IGNvbXBsZXRlbHkgaG9uZXN0LCBJIGhhdmVu4oCZdCBnaXZlbiB0aGUgTWV0YWRhdGEgYXNwZWN0 cyBhIGxvdCBvZiB0aG91Z2h0IHlldC4gSeKAmWxsIGNvbWUgYmFjayB0byB5b3Ugb24gdGhhdCBv bmUuDQoNClRoYW5rcyBhZ2FpbiENCg0KUmF5DQoNCg0KRnJvbTogQ0ROaSBbbWFpbHRvOmNkbmkt Ym91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEJyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW4N ClNlbnQ6IEZyaWRheSwgSnVuZSAxMCwgMjAxNiAxMTozNCBBTQ0KVG86IGNkbmlAaWV0Zi5vcmc8 bWFpbHRvOmNkbmlAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbQ0ROaV0gTmV3IHZlcnNpb24gKGFuZCBJ UFIgc3RhdGVtZW50KSBvZiBkcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWduaW5nLWZvci1o YXMNCg0KSGkgYWxsLA0KDQpBcyB5b3UgbWlnaHQgaGF2ZSBzZWVuLCBJ4oCZdmUgcmVjZW50bHkg dXBsb2FkZWQgYSBuZXcgdmVyc2lvbiBvZiBkcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWdu aW5nLWZvci1oYXMgKC0wMykuDQoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1i cmFuZGVuYnVyZy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXMtMDMNCg0KV2hhdCBpcyBpbXBvcnRh bnQgdG8gbm90ZSBpcyB0aGF0IEtQTiBoYXMgdXBkYXRlZCBpdOKAmXMgSVBSIHN0YXRlbWVudCBv biB0aGlzIGRvY3VtZW50IHRvIGJlIGluIGxpbmUgd2l0aCB0aGUgSVBSIHN0YXRlbWVudHMgdGhh dCBoYXZlIGJlZW4gZmlsZWQgb24gb3RoZXIgQ0ROSSBkb2N1bWVudHMgKGkuZS4g4oCcUm95YWx0 eS1GcmVlLCBSZWFzb25hYmxlIGFuZCBOb24tRGlzY3JpbWluYXRvcnkgTGljZW5zZSB0byBBbGwg SW1wbGVtZW50ZXJz4oCdKS4gSG9wZWZ1bGx5IHRoaXMgY2xlYXJzIHVwIHRoZSBsZW5ndGh5IElQ UiBkaXNjdXNzaW9uIHdl4oCZdmUgYmVlbiBoYXZpbmcgYXJvdW5kIHRoaXMgZG9jdW1lbnQgc28g dGhhdCB3ZSBjYW4gZm9jdXMgb24gdGhlIHRlY2huaWNhbCBhc3BlY3RzIGFnYWluLg0KDQpMb29r aW5nIGZvcndhcmQgdG8geW91ciBmZWVkYmFjaywNClJheQ0KDQpUaGlzIG1lc3NhZ2UgbWF5IGNv bnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91IGFy ZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91IGJ5 IG1pc3Rha2UsIHlvdSBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0aGUgc2VuZGVyIGFuZCBkZWxl dGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5vIGxpYWJpbGl0eSBmb3IgdGhlIGNvbnRlbnQg b2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2UgaXQgYW5kIGZv ciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tzIGluaGVyZW50IHRv IHRoZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4NCg== --_000_A419F67F880AB2468214E154CB8A556206E4D549eusaamb103erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0KYTpsaW5r LCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1 NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3 MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdp bjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRp di5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi QmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0 Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7 fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVm b3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5r OiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFu LkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIg TmV3IjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJ Y29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28tc3R5bGUtdHlwZTpw ZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOndpbmRv d3RleHQ7fQ0Kc3Bhbi5CYWxsb29uVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkJhbGxvb24g VGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJh bGxvb24gVGV4dCI7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4w cHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NTk1LjBwdCA4NDIuMHB0Ow0KCW1hcmdp bjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29y ZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZd LS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+ DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3ht bD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1V UyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rp b24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5IaSBSYXksPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mZ3Q7IDwvc3Bh bj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5OZXcgU1RUIHZhbHVlcyBhcmUgZXhw ZWN0ZWQgdG8gdXBkYXRlIHNlY3Rpb25zIDUgYW5kIDYuIFRoZSByZWFzb24gdGhlIFNUVCB2YWx1 ZSBpcyBtYWRlIGV4cGxpY2l0IGluIHRoZSB0b2tlbiBhcyB3ZWxsIGlzIHRvIGFsbG93IGltcGxl bWVudGF0aW9ucyB0aGF0IGhhdmUgcmVjZWl2ZWQgdGhlIFRva2VuIGluIHNvbWUgb3RoZXIgZmFz aGlvbiAoZS5nLiB0aHJvdWdoIHRoZSBjcm9zcy1kb21haW4NCiByZWRpcmVjdGlvbiBzY2VuYXJp byBpbiBzZWN0aW9uIDUuMiksIHRvIGJlIGF3YXJlIG9mIHRoZSB0YXJnZXQgdHJhbnNwb3J0IG1l Y2hhbmlzbS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+SSBndWVzcyBieSBpc3N1ZSBpcyB0aGF0OiBpbiBvcmRlciB0byByZWFkIHRo ZSBTVFQgdmFsdWUgaW4gdGhlIHRva2VuLCB0aGUgc2VydmVyIHdvdWxkIG5lZWQgdG8gaGF2ZSBh bHJlYWR5IGZvdW5kIHRoZSB0b2tlbiB2aWEgdGhlIHByb2Nlc3MgaW4gc2VjdGlvbiA2LiZuYnNw OyBJbiB0aGUgbm9uLWNyb3NzLWRvbWFpbg0KIGNhc2UsIHRoZSBzZXJ2ZXIgc2hvdWxkIGp1c3Qg dXNlIHdoYXRldmVyIGNvbnZleWFuY2Ugd2FzIHVzZWQgaW4gdGhlIHJlcXVlc3QgKHF1ZXJ5IHN0 cmluZywgdXJpIHBhdGgsIGNvb2tpZSwgZXRjLik/Jm5ic3A7IFRoZSBvbmx5IHB1cnBvc2UgZm9y IHRoZSBTVFQsIHRoZW4sIGlzIHRvIHRlbGwgdGhlIHNlcnZlciB0aGUgcHJlZmVycmVkIGNvbnZl eWFuY2UgZm9yIHN1YnNlcXVlbnQgdG9rZW5zLCBpbiB0aGUgY2FzZSB0aGF0IGl0IGRvZXNuJ3Qg bWF0Y2gNCiB0aGUgY29udmV5YW5jZSBpbiB0aGUgcmVxdWVzdD8gJm5ic3A7QnV0IHRoYXQgaXMg YWxyZWFkeSBkaWN0YXRlZCBpbiBzZWN0aW9uIDU/Jm5ic3A7IElmIHNlY3Rpb24gNSBzYXlzIHVz ZSBhIGNvb2tpZSwgdW5sZXNzIHlvdSdyZSByZWRpcmVjdGluZywgdGhlbiB1c2UgcXVlcnkgc3Ry aW5nIChvciB1cmkgcGF0aCksIHRoZW4gd2UgZG9uJ3QgcmVhbGx5IG5lZWQgU1RUPzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+dGhhbngu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4tLSZuYnNwOyBLZXZpbiBKLiBNYTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5n OjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8 L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gQnJhbmRlbmJ1cmcsIFIuIChS YXkpIHZhbiBbbWFpbHRvOnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmxdDQo8YnI+DQo8Yj5TZW50 OjwvYj4gRnJpZGF5LCBKdWx5IDA4LCAyMDE2IDg6MjQgQU08YnI+DQo8Yj5Ubzo8L2I+IEtldmlu IE1hIEo7IGNkbmlAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IE5ldyB2ZXJzaW9u IChhbmQgSVBSIHN0YXRlbWVudCkgb2YgZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmlu Zy1mb3ItaGFzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhpIEtldmluLDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhhbmtzIGZvciB0aGUgcmV2aWV3ISBQbGVhc2Ug c2VlIG15IGNvbW1lbnRzIGlubGluZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPlJheTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4w cHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImNv bG9yOmJsYWNrIj4mcXVvdDs8YSBocmVmPSJtYWlsdG86a2V2aW4uai5tYUBlcmljc3Nvbi5jb20i PmtldmluLmoubWFAZXJpY3Nzb24uY29tPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmtl dmluLmoubWFAZXJpY3Nzb24uY29tIj5rZXZpbi5qLm1hQGVyaWNzc29uLmNvbTwvYT4mZ3Q7PGJy Pg0KPGI+RGF0ZTogPC9iPlR1ZXNkYXkgNSBKdWx5IDIwMTYgYXQgMjM6NDM8YnI+DQo8Yj5Ubzog PC9iPlJheSB2YW4gQnJhbmRlbmJ1cmcgJmx0OzxhIGhyZWY9Im1haWx0bzpyYXkudmFuYnJhbmRl bmJ1cmdAdG5vLm5sIj5yYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPC9hPiZndDssICZxdW90Ozxh IGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIj5jZG5pQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciPmNkbmlAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4N CjxiPlN1YmplY3Q6IDwvYj5SRTogTmV3IHZlcnNpb24gKGFuZCBJUFIgc3RhdGVtZW50KSBvZiBk cmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXM8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkhpIFJheSw8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAoQXMgYW4gaW5kaXZp ZHVhbCkgSSBmaW5hbGx5IGZvdW5kIHNvbWUgdGltZSB0byByZWFkIHRocm91Z2ggdGhlIHVwZGF0 ZWQgZHJhZnQuJm5ic3A7IFNvbWUgY29tbWVudHMgYW5kIHF1ZXN0aW9ucyBiZWxvdy48L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPnRoYW54 ITwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+LS0mbmJzcDsgS2V2aW4gSi4gTWE8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlvbiA0LjEsIHN0ZXAgMy5FOiBXaGF0IGlm IHRoZSB1c2VyIHBhdXNlcywgb3IgdGhlcmUgaXMgYW4gYWQgaW5zZXJ0ZWQsIGFuZCB0aGUgdG9r ZW4gZXhwaXJlcz8mbmJzcDsgVW5kZXJzdG9vZCB0aGF0IGl0J3MgcHJvYmFibHkgdXAgdG8gdGhl IG1lZGlhIHBsYXllciB0byBoYW5kbGUgdGhhdCBjYXNlLCBidXQNCiB3b3VsZCB0aGV5IG5lZWQg dG8gZ28gYmFjayB0byB0aGUgQ1AgdG8gZ2V0IGEgbmV3IHZhbGlkIG1hbmlmZXN0IFVSTD8mbmJz cDsgV2hpY2ggd291bGQgaGF2ZSBhIHRva2VuIHRoYXQgaXMgdmFsaWQgZm9yIHRoZSBjaHVua3Mg YXMgd2VsbD88L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkl04oCZcyB1cCB0byB0aGUgbWVkaWEgcGxh eWVyIHRvIG1ha2Ugc3VyZSBpdCByZWZyZXNoZXMgdGhlIHRva2VuLCBlaXRoZXIgYmVmb3JlIG9y IGFmdGVyIGl0IChhbHRob3VnaCB0aGUgZm9ybWVyIG1pZ2h0IGJlIGVhc2llcikuIE9uIHdheSB0 byBkbyB0aGF0IHdvdWxkIGJlIHRvIHNlbmQgYW4gSFRUUCBIRUFEIHJlcXVlc3QgZm9yIGFuIGFy Yml0cmFyeSBzZWdtZW50DQogdG8gdGhlIENETi4gTm90ZSB0aGF0IHRoaXMgZG9lcyBhc3N1bWUg dGhhdCB0aGUgbWVkaWEgcGxheWVyIGlzIGF3YXJlIG9mIHRoZSBhcHByb3hpbWF0ZSB2YWxpZGl0 eSB0aW1lIG9mIGEgdG9rZW4uIEluIHByYWN0aWNlIHRoaXMgaXMgc29tZXRoaW5nIHRoYXQgY291 bGQgYmUgY29tbXVuaWNhdGVkIGluIGEgbWFuaWZlc3QgZmlsZSwgc3VjaCBhcyBhIERBU0ggTVBE LiBJdOKAmXMgb25lIG9mIHRoZSB0b3BpY3MgZm9yIHdoaWNoIGl0IG1pZ2h0IGJlDQogd29ydGgg Y29uc2lkZXJpbmcgc2VuZGluZyBpbiBhIGxpYWlzb24gdG8gTVBFRywgaWYgdGhlIFdHIHNob3Vs ZCBkZWNpZGUgdG8gYWRvcHQgdGhpcyB3b3JrLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij5XaGF0IEkgd291bGQgbGlrZSB0byBkbyBpbiBhIG5leHQgaXRlcmF0 aW9uIG9mIHRoaXMgZG9jdW1lbnQgaXMgdG8gYWRkIGEgc2VudGVuY2UgYWxvbmcgdGhlIGxpbmVz IG9mIOKAmFVwb24gcmVjZWl2aW5nIGFuIEhUVFAgSEVBRCByZXF1ZXN0LCBhIENETiBTSE9VTEQg dmFsaWRhdGUgdGhlIGluY29taW5nIFNpZ25lZCBUb2tlbiBhbmQgZ2VuZXJhdGUgYSBuZXcNCiBv bmUgaW4gdGhlIHNhbWUgd2F5IGFzIGl0IHdvdWxkIGRvIGZvciBhbiBIVFRQIEdFVOKAmS4gPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+LSBzZWN0aW9uIDQuMSwgc3Rl cHMgOSwgMTEuQiwgMTEuRSwgMTIuQiwgYW5kIDEyLkYsIHNlY3Rpb24gNy4xIHN0ZXAgMSwgc2Vj dGlvbiA3LjIgc3RlcHMgMy5BLmQgYW5kIDMuQi5kLCBhbmQgc2VjdGlvbiA3LjQgc3RlcHMgMTAu QS4yLCAxMC5BLjUsIDEwLkIuMiwgYW5kIDEwLkIuNjogU2hvdWxkIHRoZSBVUEMNCiBiZSBwZXJj ZW50LWVuY29kZWQ/Jm5ic3A7IEFuZCBzaG91bGQgQ0lQIGJlIGVuY3J5cHRlZD88L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPkNvcnJlY3QuIFRoaXMgdmVyc2lvbiBvZiBkcmFmdC1icmFuZGVuYnVyZy1j ZG5pLXVyaS1zaWduaW5nLWZvci1oYXMgaGFzbuKAmXQgeWV0IGJlZW4gYnJvdWdodCBpbiBsaW5l IHdpdGggdGhlIG1vc3QgcmVjZW50IHZlcnNpb24gb2YgZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWdu aW5nLCB3aGVyZSBwZXJjZW50LWVuY29kaW5nIG9mIHRoZSBVUEMgd2FzIGludHJvZHVjZWQuDQog SW4gdGhlIHNhbWUgd2F5LCBDSVAgc2hvdWxkIGJlIGVuY3J5cHRlZC4gSeKAmWxsIGZpeCB0aGlz IGluIHRoZSBuZXh0IGl0ZXJhdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4tIHNlY3Rpb24gNC4xLCBzdGVwcyA5LCAxMS5CLCAxMS5FLCAxMi5CLCAxMi5GLCBz ZWN0aW9uIDUuMiwgYW5kIHNlY3Rpb24gNy4xIHN0ZXAgMTogSWYgdGhlIHRva2VuIGlzIG9ubHkg Z29vZCBmb3Igc2VnbWVudHMsIGJ1dCBpcyBhdHRhY2hlZCB0byB0aGUgbWFuaWZlc3QgcmVxdWVz dCwgZG9lcyB0aGF0IG1lYW4NCiB0aGF0IHRoZXJlIGlzIG5vIHNpZ25hdHVyZSB2YWxpZGF0aW9u IG9uIHRoZSBtYW5pZmVzdCByZXF1ZXN0PyZuYnNwOyBJbiB0aGUgMnh4IG5vbi1yZWRpcmVjdCBj YXNlLCB3b3VsZCB5b3UgZXhwZWN0IGEgdjEgbWFuaWZlc3Qgc2lnbmF0dXJlIGJlIGluIHRoZSBx dWVyeSBzdHJpbmcgYW5kIGEgc2VwYXJhdGUgdjIgY2h1bmsgc2lnbmF0dXJlIGJlIGluIHRoZSBj b29raWU/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5NYXliZSB0aGUgZG9jdW1lbnQgc2hvdWxkIGJl IGNsZWFyZXIgb24gdGhpcy4gTXkgaW50ZW50aW9uIHdhcyB0aGF0IFNpZ25lZCBUb2tlbnMgc2hv dWxkIGJlIHVzZWQgZm9yIGJvdGggbWFuaWZlc3QgYW5kIHNlZ21lbnQgcmVxdWVzdHMsIGVzcGVj aWFsbHkgZ2l2ZW4gdGhhdCB0aGUgMjAwIE9LIGZvciB0aGUgaW5pdGlhbCBtYW5pZmVzdCB3aWxs IGNvbnRhaW4NCiB0aGUgZmlyc3QgU2lnbmVkIFRva2VuLiBJbiBvdGhlciB3b3JkcywgdGhlIFVQ QyBzaG91bGQgYmUgY2hvc2VuIGluIGEgd2F5IHRoYXQgYm90aCB0aGUgbWFuaWZlc3QgbG9jYXRp b24gYW5kIHRoZSBzZWdtZW50IGxvY2F0aW9uIGlzIGNvdmVyZWQgYnkgdGhlIFVQQy4NCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlvbiA0LjEsIHN0ZXAg MTAsIHNlY3Rpb25zIDUvNiwgYW5kIHNlY3Rpb24gNy40IHN0ZXAgOTogU2VlbXMgbGlrZSBhIGNo aWNrZW4gYW5kIGVnZyBwcm9ibGVtLiZuYnNwOyBUaGUgU1RUIHNheXMgdGhhdCB0aGUgdG9rZW4g aXMgaW4gdGhlIGNvb2tpZSwgYnV0IHRoZSBTVFQgaXMgaW4gdGhlIHRva2VuIHRoYXQncw0KIGlu c2lkZSB0aGUgY29va2llLiZuYnNwOyBEb2VzIHRoZSBpbml0aWFsIHRva2VuIGFsd2F5cyBoYXZl IHRvIGJlIGluIGEgdG9rZW4/Jm5ic3A7IFNob3VsZCB0aGUgaW5pdGlhbCB0b2tlbiBhbHdheXMg YmUgaW4gdGhlIHF1ZXJ5IHN0cmluZyB0byBiZSBjb21wYXRpYmxlIHdpdGggdjEsIHNpbmNlIHRo ZSBWRVI9MiBpcyBhbHNvIGluc2lkZSB0aGUgdG9rZW4gaW5zaWRlIHRoZSBjb29raWU/Jm5ic3A7 IEZyb20gdGhlIGNsaWVudCBwZXJzcGVjdGl2ZSwgc2hvdWxkIG9ubHkNCiBzdWJzZXF1ZW50IHRv a2VucyBiZSBpbiB0aGUgY29va2llPyZuYnNwOyBGcm9tIHRoZSBDRE4gcGVyc3BlY3RpdmUsIHVu bGVzcyBwYXNzZWQgaW4gdGhlIG1ldGFkYXRhLCBob3cgd2lsbCB0aGUgQ0ROIGtub3cgd2hlcmUg dG8gbG9vayBmb3IgdGhlIHRva2VuLCBvciBkb2VzIGl0IGFsd2F5cyBjaGVjayBldmVyeXdoZXJl PyZuYnNwOyBJZiB0aGUgcHJvY2VzcyBpcyB0byBhbHdheXMgY2hlY2sgdGhlIHF1ZXJ5IHN0cmlu ZyBmaXJzdCBhbmQgdGhlIGNvb2tpZSBzZWNvbmQsDQogZG8gd2UgZXZlbiBuZWVkIFNUVD8mbmJz cDsgTmV3IFNUVCB2YWx1ZXMgYXJlIGdvaW5nIHRvIHJlcXVpcmUgYW5kIHVwZGF0ZSB0byB0aGUg cHJvY2VkdXJlIGluIHNlY3Rpb24gNiwgYXMgd2VsbCBhcyByZWdpc3RyYXRpb24gb2YgbmV3IFNU VCB2YWx1ZXM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5OZXcgU1RUIHZhbHVlcyBhcmUgZXhwZWN0 ZWQgdG8gdXBkYXRlIHNlY3Rpb25zIDUgYW5kIDYuIFRoZSByZWFzb24gdGhlIFNUVCB2YWx1ZSBp cyBtYWRlIGV4cGxpY2l0IGluIHRoZSB0b2tlbiBhcyB3ZWxsIGlzIHRvIGFsbG93IGltcGxlbWVu dGF0aW9ucyB0aGF0IGhhdmUgcmVjZWl2ZWQgdGhlIFRva2VuIGluIHNvbWUgb3RoZXIgZmFzaGlv biAoZS5nLiB0aHJvdWdoDQogdGhlIGNyb3NzLWRvbWFpbiByZWRpcmVjdGlvbiBzY2VuYXJpbyBp biBzZWN0aW9uIDUuMiksIHRvIGJlIGF3YXJlIG9mIHRoZSB0YXJnZXQgdHJhbnNwb3J0IG1lY2hh bmlzbS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlv biA1LjI6IFRoZSB2MSBkcmFmdCBhbHNvIHN1cHBvcnRzIHRva2VuIGFzIGEgcGF0aCBwYXJhbWV0 ZXI7IGlzIHRoYXQgaW50ZW50aW9uYWxseSBvbWl0dGVkIGhlcmU/PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0Ij5UaGUgcHJpbWFyeSByZWFzb24gaXTigJlzIG5vdCBoZXJlIGlzIHRoYXQgdGhpcyBkcmFm dCBwcmVkYXRlcyB0aGUgbGF0ZXN0IHZlcnNpb24gb2YgZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWdu aW5nIHdoZXJlIHN1cHBvcnQgZm9yIHBhdGggcGFybWV0ZXIgd2FzIGludHJvZHVjZWQuIEhvd2V2 ZXIsIEkgbmVlZCB0byBnaXZlIGl0IHNvbWUgdGhvdWdodCB3aGV0aGVyDQogaXQgbWFrZXMgc2Vu c2UgdG8gc3VwcG9ydCB0aGF0IHNjZW5hcmlvIGhlcmUgYXMgd2VsbCwgZ2l2ZW4gdGhhdCB0aGUg bWFpbiByZWFzb24gZm9yIHVzaW5nIHBhdGggcGFyYW1ldGVycyBpbiB2MSB3b3VsZCBiZSBjYXNl cyB3aGVyZSB5b3UgZG9u4oCZdCBoYXZlIHNlZ21lbnQtbGV2ZWwgYXV0aGVudGljYXRpb24gYXMg ZGVmaW5lZCBpbiB0aGlzIGRyYWZ0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHByZT4tIHNlY3Rpb24gNy4xIHN0ZXBz IDIgYW5kIDM6IEkgd291bGQgZXhwZWN0IHRoYXQgdjIgd291bGQgaGF2ZSBhIG5ldyBHZW5lcmlj TWV0YWRhdGEgcHR5cGUgKE1JLlVyaVNpZ25pbmcudjI/KSBhbmQgdGhhdCBwdHlwZSB3b3VsZCB0 ZWxsIHRoZSBkQ0ROIHdoYXQgaXQgc2hvdWxkIGV4cGVjdCBpbiB0aGUgdG9rZW4/Jm5ic3A7IEl0 IHdvdWxkIGJlIG5pY2UgaWYgdGhlIGRyYWZ0IGNvdWxkIGRlZmluZSB2MiBzdWNoIHRoYXQgaXQg c3VwcG9ydGVkIGJvdGggVkVSPTEgYW5kIFZFUj0yLCBzbyB0aGF0IHRoZSBNSS5VcmlTaWduaW5n LnYyIG1ldGFkYXRhIGNvdWxkIGJlIGEgc3VwZXJzZXQgb2YgaW5mb3JtYXRpb24gbmVlZGVkIHRv IHByb2Nlc3MgYWxsIGtub3duIHRva2VuIHR5cGVzLCBhbmQgbWFrZSB0aGUgdG9rZW4gcHJvY2Vz c2luZyBhIHJ1bnRpbWUgZGVjaXNpb24/PG86cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+SSBsaWtlIHRoYXQuIEkg bmVlZCB0byBkZWx2ZSBpbnRvIHRoZSBNZXRhZGF0YSBhc3BlY3RzIG9mIHYxIGFnYWluIHRvIHNl ZSBleGFjdGx5IGhvdyB3ZSBjb3VsZCBhY2hpZXZlIHN1Y2ggYSB0aGluZy4gTWF5YmUgc29tZXRo aW5nIHRvIGRpc2N1c3MgaW4gQmVybGluLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+LSBzZWN0aW9uIDcuNCwgZ2VuZXJhbDogVGhpcyBk cmFmdCByZW1vdmVzIHRoZSAmcXVvdDtOb3RlIHRoYXQgcmUtc2lnbmluZyBhIFVSSSBNVVNULi4u JnF1b3Q7IHRleHQgZnJvbSB0aGUgdjEgZHJhZnQoc2VjdGlvbiAzLjEpLiZuYnNwOyBTaW5jZSB0 aGlzIGlzIGFib3V0IHJlc2lnbmluZywgSSB0aGluayB0aGUgdGV4dCBhYm91dCBtYWludGFuaW5n DQogdGhlIHNhbWUgdmFsdWVzIHNob3VsZCBiZSBhZGRlZCBoZXJlLCBzcGVjaWZpY2FsbHkgZm9y IEtJRC9LSURfTlVNLCBITUFDLCBhbmQgRFNBLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+R29vZCBw b2ludC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwcmU+LSBEbyB5b3UgaGF2ZSBhbiBpZGVhIGFzIHRvIHdoYXQgYWRk aXRpb25hbCByZWdpc3RyaWVzLCBtZXRhZGF0YSwgYW5kL29yIGxvZ2dpbmcgZmllbGRzIHdpbGwg YmUgbmVlZGVkPyZuYnNwOyBXaWxsIHRoZSBuZXcgcHR5cGUganVzdCBiZSBNSS5VcmlTaWduaW5n LnYyPzxvOnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQiPlRvIGJlIGNvbXBsZXRlbHkgaG9uZXN0LCBJIGhhdmVu4oCZ dCBnaXZlbiB0aGUgTWV0YWRhdGEgYXNwZWN0cyBhIGxvdCBvZiB0aG91Z2h0IHlldC4gSeKAmWxs IGNvbWUgYmFjayB0byB5b3Ugb24gdGhhdCBvbmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij5UaGFua3MgYWdhaW4hPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij5SYXk8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzow aW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9z cGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtU YWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IENETmkgWzxhIGhyZWY9Im1haWx0 bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmc8L2E+ XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5CcmFuZGVuYnVyZywgUi4gKFJheSkgdmFuPGJyPg0KPGI+ U2VudDo8L2I+IEZyaWRheSwgSnVuZSAxMCwgMjAxNiAxMTozNCBBTTxicj4NCjxiPlRvOjwvYj4g PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciPmNkbmlAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+ U3ViamVjdDo8L2I+IFtDRE5pXSBOZXcgdmVyc2lvbiAoYW5kIElQUiBzdGF0ZW1lbnQpIG9mIGRy YWZ0LWJyYW5kZW5idXJnLWNkbmktdXJpLXNpZ25pbmctZm9yLWhhczwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij5IaSBhbGwsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5B cyB5b3UgbWlnaHQgaGF2ZSBzZWVuLCBJ4oCZdmUgcmVjZW50bHkgdXBsb2FkZWQgYSBuZXcgdmVy c2lvbiBvZiBkcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXMgKC0wMyku DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWdu aW5nLWZvci1oYXMtMDMiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1icmFuZGVu YnVyZy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXMtMDM8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij5XaGF0IGlzIGltcG9ydGFudCB0byBub3RlIGlzIHRoYXQg S1BOIGhhcyB1cGRhdGVkIGl04oCZcyBJUFIgc3RhdGVtZW50IG9uIHRoaXMgZG9jdW1lbnQgdG8g YmUgaW4gbGluZSB3aXRoIHRoZSBJUFIgc3RhdGVtZW50cyB0aGF0IGhhdmUgYmVlbiBmaWxlZCBv biBvdGhlciBDRE5JIGRvY3VtZW50cyAoaS5lLiDigJxSb3lhbHR5LUZyZWUsIFJlYXNvbmFibGUg YW5kDQogTm9uLURpc2NyaW1pbmF0b3J5IExpY2Vuc2UgdG8gQWxsIEltcGxlbWVudGVyc+KAnSku IEhvcGVmdWxseSB0aGlzIGNsZWFycyB1cCB0aGUgbGVuZ3RoeSBJUFIgZGlzY3Vzc2lvbiB3ZeKA mXZlIGJlZW4gaGF2aW5nIGFyb3VuZCB0aGlzIGRvY3VtZW50IHNvIHRoYXQgd2UgY2FuIGZvY3Vz IG9uIHRoZSB0ZWNobmljYWwgYXNwZWN0cyBhZ2Fpbi4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+TG9va2luZyBmb3J3YXJkIHRvIHlvdXIgZmVlZGJhY2ssPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPlJheTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjguMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZvcm1h dGlvbiB0aGF0IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUgYWRk cmVzc2VlIG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwgeW91 DQogYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoZSBtZXNz YWdlLiBUTk8gYWNjZXB0cyBubyBsaWFiaWxpdHkgZm9yIHRoZSBjb250ZW50IG9mIHRoaXMgZS1t YWlsLCBmb3IgdGhlIG1hbm5lciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9m IGFueSBraW5kIHJlc3VsdGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxlY3Ry b25pYyB0cmFuc21pc3Npb24gb2YgbWVzc2FnZXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_A419F67F880AB2468214E154CB8A556206E4D549eusaamb103erics_-- From nobody Fri Jul 8 14:19:37 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C631612D607 for ; Fri, 8 Jul 2016 14:19:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ii2lIX4kCuhT for ; Fri, 8 Jul 2016 14:19:32 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1060612D898 for ; Fri, 8 Jul 2016 14:19:32 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-94-578018a07677 Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id B9.FE.03614.0A810875; Fri, 8 Jul 2016 23:18:25 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0294.000; Fri, 8 Jul 2016 17:19:30 -0400 From: Kevin Ma J To: "Brandenburg, R. (Ray) van" , Ben Niven-Jenkins , "Content Delivery Networks Interconnection Discussion List" Thread-Topic: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing Thread-Index: AdHSDAIj8Q+3AOh3Q/WhloflAutMVQCa2goAASzpMYAADCKGkA== Date: Fri, 8 Jul 2016 21:19:30 +0000 Message-ID: References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrFLMWRmVeSWpSXmKPExsUyuXRPrO5CiYZwg7uxFgvOTWCzeDr7D6vF t83XGR2YPZYs+cnk8fP6JEaPg+suMAcwR3HZpKTmZJalFunbJXBlnP6jWbBsImPFgTd9jA2M J3oZuxg5OSQETCQev/vGAmGLSVy4t56ti5GLQ0jgKKNEz8aNzBDOMkaJk1/3g1WxCWhJPP76 lwkkISKwk1Hiy+4eVpCEsICXxP6m4+wgtoiAt8SBI7tZIGwniRePf4HZLAIqEhe/bwKr5xXw lZh2u48VYsMuRolpX4+ANXMKWElsv3ybDcRmBLrp+6k1TCA2s4C4xK0n85kgbhWQWLLnPDOE LSrx8vE/VghbUWJf/3SgORxA9ZoS63fpQ7QqSkzpfsgOsVdQ4uTMJywTGEVnIZk6C6FjFpKO WUg6FjCyrGLkKC0uyMlNNzLcxAiMkWMSbI47GPf2eh5iFOBgVOLhVXhVHy7EmlhWXJl7iFGC g1lJhLdArCFciDclsbIqtSg/vqg0J7X4EKM0B4uSOK/+S8VwIYH0xJLU7NTUgtQimCwTB6dU A2PuoRUOXjt8vPZZaM44ITQl8W1T6BXrO0p7al2uzSn9+HuZukeWCNOdLSsdJ06x4qz+3cZt tS/3A1/Mmd+OBvdefbX0N6lrWJN2Xm3T7d0FvPG3rp3vvtHYK9b5mbcvwas0VfssQ9zKO3mW 01f8CflcmB/y+XHchbXLZ60Ukdtycl25j+3/K4JKLMUZiYZazEXFiQDNF7c5jQIAAA== Archived-At: Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 21:19:36 -0000 SGkgUmF5LA0KDQogIChBcyBhbiBpbmRpdmlkdWFsKSBJJ2xsIGVjaG8gdHdvIG9mIEJlbidzIHBv aW50cywgYXMgSSd2ZSBhc2tlZCBzaW1pbGFyIHF1ZXN0aW9ucyBpbiB0aGUgcGFzdDoNCg0KICAx LiBIYXZpbmcgYm90aCBLSUQgYW5kIEtJRF9OVU0gc2VlbXMgdW5uZWNlc3NhcnkgdG8gbWUuICBJ IHVuZGVyc3RhbmQgTGVpZidzIGFyZ3VtZW50IChodHRwczovL21haWxhcmNoaXZlLmlldGYub3Jn L2FyY2gvbXNnL2NkbmkvWURJck9kdXRicnZRa0V3dkFldndPTmRpVUZFKSwgYnV0IEknbSBzdGls bCBub3Qgc3VyZSBJIGFncmVlLiAgQXJlIGltcGxlbWVudGVycyByZWFsbHkgZ29pbmcgdG8gaGF2 ZSAyIHNlcGFyYXRlIGNvZGUgcGF0aHMsIG9uZSB3aXRoIGFuIGludGVnZXIgdmFyaWFibGUgYW5k IGFub3RoZXIgd2l0aCBhIHN0cmluZyB2YXJpYWJsZSwganVzdCB0byBnZXQgYSBtZW1vcnkgZWZm aWNpZW5jeT8gIE9yIGlzIHRoZSBpbnRlZ2VyIGp1c3QgZ29pbmcgdG8gZ2V0IGNvbnZlcnRlZCB0 byBhIHN0cmluZz8gIEFuZCB0aGV5IGFscmVhZHkgaGF2ZSB0byBhbGxvY2F0ZSB0aGUgbWVtb3J5 IGp1c3QgdG8gcGFyc2UgdGhlIHRva2VuPw0KDQogIDIuIEkgYWdyZWUgdGhhdCBoYXZpbmcgYm90 aCBIRiBhbmQgRFNBIGNvdWxkIGJlIHVubmVjZXNzYXJ5LiAgSSBrbm93IHdlJ3ZlIGFsc28gaGFk IGxvbmcgZGlzY3Vzc2lvbnMgYWJvdXQgbmVlZGluZyBmb3IgYm90aCBNRCBhbmQgRFMuICBVbHRp bWF0ZWx5LCB0aGVyZSBpcyBhbiBhbGdvcml0aG0gKEhGIG9yIERTQSkgdGhhdCBpcyBydW4sIGFu ZCByZXN1bHRzIGluIGEgc2lnbmF0dXJlIChNRCBvciBEUyksIGFuZCBvbmx5IG9uZSBwYWlyIChI Ri9NRCBvciBEU0EvRFMpIGVuZHMgdXAgaW4gdGhlIHRva2VuPyAgVGhlIGFsZ29yaXRobSBkb2Vz bid0IHJlYWxseSBjaGFuZ2UgZHJhbWF0aWNhbGx5IGlmIHRoZSBJRSdzIGFyZSBkaWZmZXJlbnQ/ ICBJcyBpdCBqdXN0IGFib3V0IHJlYWRhYmlsaXR5Pw0KDQp0aGFueCENCg0KLS0gIEtldmluIEou IE1hDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQ0ROaSBbbWFpbHRv OmNkbmktYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEJyYW5kZW5idXJnLCBSLg0KPiAo UmF5KSB2YW4NCj4gU2VudDogRnJpZGF5LCBKdWx5IDA4LCAyMDE2IDc6MTIgQU0NCj4gVG86IEJl biBOaXZlbi1KZW5raW5zOyBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVyY29ubmVjdGlv bg0KPiBEaXNjdXNzaW9uIExpc3QNCj4gU3ViamVjdDogUmU6IFtDRE5pXSBXb3JraW5nIEdyb3Vw IExhc3QgQ2FsbCBvbiBkcmFmdC1pZXRmLWNkbmktdXJpLXNpZ25pbmcNCj4gDQo+IEhpIEJlbiwN Cj4gDQo+IFRoYW5rcyBmb3IgdGhlIHRob3JvdWdoIHJldmlldyEgU2VlIG15IGNvbW1lbnRzIGJl bG93Lg0KPiANCj4gUmF5DQo+IA0KPiBPbiAwMi8wNy8xNiAxMzozNSwgIkNETmkgb24gYmVoYWxm IG9mIEJlbiBOaXZlbi1KZW5raW5zIiA8Y2RuaS0NCj4gYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhh bGYgb2YgYmVuQG5pdmVuLWplbmtpbnMuY28udWs+IHdyb3RlOg0KPiANCj4gS2V2aW4sIENvbGxl YWd1ZXMsDQo+IA0KPiBJIHJldmlld2VkIGRyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0wOSAm IGJlbG93IGFyZSBteSBjb21tZW50cy4NCj4gDQo+IEdlbmVyYWw6DQo+IA0KPiBUaGUgZG9jdW1l bnQgaXMgbm90IGNsZWFyIG9uIHdoZXRoZXIgaW1wbGVtZW50ZXJzIGFyZSBleHBlY3RlZCB0bw0K PiBpbXBsZW1lbnQgYm90aCBzaGFyZWQgc2VjcmV0ICYgZGlnaXRhbCBzaWduYXR1cmUgYWxnb3Jp dGhtcyBmb3Igc2lnbmVkIFVSSQ0KPiB2YWxpZGF0aW9uLiBUaGlzIGNvdWxkIGxlYWQgdG8gaW50 ZXJvcCBwcm9ibGVtcyB3aGVyZSBkaWZmZXJlbnQNCj4gaW1wbGVtZW50YXRpb24gaW1wbGVtZW50 IG9uZSBidXQgbm90IHRoZSBvdGhlci4NCj4gDQo+IE1heWJlIHNwZWNpZnkgYSBtaW5pbXVtIGJh c2VsaW5lIG9mIE1VU1Qgc3VwcG9ydCBzaGFyZWQgc2VjcmV0IChhcyBBRkFJSw0KPiB0aGF0IGlz IHdoYXQgaXMgdXNlZCBpbiB0aGUgZmllbGQpIHdpdGggU0hPVUxEIGltcGxlbWVudCBkaWdpdGFs DQo+IHNpZ25hdHVyZXMgZm9yIHRoZSAxIGNvcm5lciBjYXNlIGZvciB3aGljaCBkaWdpdGFsIHNp Z25hdHVyZXMgcHJvdmlkZSBhbg0KPiBhZHZhbnRhZ2UuDQo+IA0KPiBJ4oCZbSBzb21ld2hhdCBh Z2FpbnN0IHNwZWNpZnlpbmcgbXVzdCBpbXBsZW1lbnQgYm90aCBzaGFyZWQgc2VjcmV0ICYNCj4g ZGlnaXRhbCBzaWduYXR1cmVzIGJlY2F1c2UgSeKAmXZlIG5ldmVyIHNlZW4gYSBkaWdpdGFsIHNp Z25hdHVyZSBiYXNlZA0KPiBzaWduZWQgVVJJIGluIHRoZSBmaWVsZCBhbmQgSeKAmW0gZmFtaWxp YXIgd2l0aCBxdWl0ZSBhIGZldyBzaWduZWQgVVJJDQo+IGFsZ29yaXRobXMvaW1wbGVtZW50YXRp b25zIG9mIGRpZmZlcmVudCBDRE5zLiBUaGF0IHNheXMgdG8gbWUgZm9sa3MgYXJlDQo+IG5vdCBs aWtlbHkgdG8gaW1wbGVtZW50IG1vcmUgdGhhbiB0aGUgc2hhcmVkIHNlY3JldCBhbGdvcml0aG0g dW5sZXNzIHRoZXkNCj4gcmVhbGx5IG5lZWQgdG8uIEkga25vdyBDaXNjbyBoYXZlIGEgZGlnaXRh bCBzaWduYXR1cmUgaW1wbGVtZW50YXRpb24gbWF5YmUNCj4gdGhleSBjb3VsZCBoZWxwIHdpdGgg aG93IG11Y2ggdXNlIGl0IHNlZXMgaW4gdGhlIGZpZWxkPw0KPiANCj4gW1JheV0gQWdyZWVkIHRo YXQgd2Ugc2hvdWxkbuKAmXQgbWFrZSBkaWdpdGFsIHNpZ25hdHVyZXMgbWFuZGF0b3J5LiBBcyBm b3INCj4gbWFraW5nIHN1cHBvcnQgZm9yIHNoYXJlZCBzZWNyZXRzIG1hbmRhdG9yeTogSSBndWVz cyB0aGF0IG1ha2VzIHNlbnNlLg0KPiANCj4gVGhlIGRvY3VtZW50IGNvdWxkIGRvIHdpdGggc29t ZSBtb3JlIGV4YW1wbGVzIG9mIHtVUkksIGF0dHJpYnV0ZXMsDQo+IFVSSVNpZ25pbmdQYWNrYWdl LCBTaWduZWQgVVJJfSBjb3ZlcmluZyBlLmcuIElQdjQgJiBJUHY2LCBvbmUgaW5jbHVkaW5nIGEN Cj4gVVJJIFBhdGggUGF0dGVybiBldGMuDQo+IA0KPiBTZWN0aW9uIDIuMToNCj4gVVJJIFBhdHRl cm4gQ29udGFpbmVyIChVUEMpIGRlZmluaXRpb24gLSBob3cgZG9lcyBvbmUgcmVwcmVzZW50IGEg VVJJDQo+IHBhdHRlcm4gdGhhdCBjb250YWlucyBhIGxpdGVyYWwg4oCYO+KAmSBiZWNhdXNlIHRo ZSBVUkkvVVJJIHBhdHRlcm4gY29udGFpbnMNCj4gaW4gcGF0aCBwYXJhbWV0ZXJzIHRvIG1hdGNo IGFnYWluc3Q/IERvZXMgcHJlc2VuY2Ugb2YgYSBsaXRlcmFsIOKAmDvigJkgbmVlZA0KPiB0byBi ZSBlc2NhcGVkIHdpdGgg4oCYJCcgdG9vIHRvIGRpc3Rpbmd1aXNoIGl0IGZyb20gdGhlIHVzZSBv ZiDigJg74oCZIHRvDQo+IHNlcGFyYXRlIFVSSSBwYXR0ZXJucyB3aXRoaW4gdGhlIFVSSSBQYXR0 ZXJuIENvbnRhaW5lcj8NCj4gDQo+IFtSYXldIEdvb2QgcG9pbnQuIExpdGVyYWwgc2VtaS1jb2xv bnMgZG8gaW5kZWVkIG5lZWQgdG8gYmUgZXNjYXBlZC4gSeKAmWxsDQo+IGFkZCB0aGlzIGluIHRo ZSBuZXh0IHJldmlzaW9uDQo+IA0KPiBTZWN0aW9uIDIuMjoNCj4gV2h5IGlzIHRoZXJlIGEgS0lE IChzdHJpbmcpICYgS0lEX05VTSAoaW50ZWdlcikgZm9yIHNoYXJlZCBzZWNyZXRzL2tleXMNCj4g YW5kIG9ubHkgQ0tJIChpbnRlZ2VyKSBmb3IgQ2xpZW50IElQIGtleXM/IFRvIGJlIGNvbnNpc3Rl bnQgc2hvdWxkIGl0IGJlDQo+IENLSV9OVU0/DQo+IA0KPiBUaGUgZG9jdW1lbnQgYWxzbyBzYXlz DQo+ICAgIEluIGNhc2VzDQo+ICAgIHdoZXJlIG51bWVyaWNhbCBLRVkgSURzIGFyZSB1c2VkLCBp dCBpcyBSRUNPTU1FTkRFRCB0byB1c2UgS0lEX05VTQ0KPiAgICBpbnN0ZWFkIG9mIEtJRC4NCj4g V2hpY2ggbWFrZXMgbWUgdGhpbmssIHdoeT8gV2hhdCB0aGUgS0lEIG1lYW5zL3JlcHJlc2VudHMg aXMgY29tbXVuaWNhdGVkDQo+IG91dCBvZiBiYW5kIChhbmQgaG93IHRvIGRvIHRoYXQgaXMgb3V0 IG9mIHNjb3BlIG9mIHRoZSBkb2N1bWVudCkuIEl0IHNlZW1zDQo+IHN0cmFpZ2h0Zm9yd2FyZCB0 byBzYXkgS0lEIGlzIGFsd2F5cyBhIHN0cmluZyAod2hpY2ggY2FuIHJlcHJlc2VudCBhbg0KPiBp bnRlZ2VyKSBhbmQgZ2V0IHJpZCBvZiBLSURfTlVNIGVudGlyZWx5LiBUaGF0IHdvdWxkIG1lYW4g d2UgbmVlZCBvbmUgbGVzcw0KPiBhdHRyaWJ1dGUgZGVmaW5pbmcgKG9yIHR3byBsZXNzIGlmIHdl IG5lZWQgc3RyaW5nICYgaW50ZWdlciBhdHRyaWJ1dGVzIGZvcg0KPiBDS0kpIGFuZCBhdm9pZHMg Zm9sa3MgaGF2aW5nIHRvIHdvcmsgb3V0IHdoYXQgdG8gZG8gJiBpbXBsZW1lbnQgY29ybmVyDQo+ IGNhc2VzIGxpa2Ugd2hhdCB0byBkbyBpZiBLSUQgJiBLSURfTlVNIGFyZSBib3RoIHByZXNlbnQu DQo+IA0KPiBXaHkgbm90IGp1c3QgaGF2ZSBLSUQgYW5kIENLSSBib3RoIGFzIHN0cmluZ3MgYW5k IHJlbW92ZSBLSURfTlVNPw0KPiANCj4gW1JheV0gVGhpcyB3YXMgdGhlIGNvbnNlbnN1cyByZXN1 bHQgb2YgYSBsZW5ndGh5IGRpc2N1c3Npb24gYmV0d2VlbiB0aGUNCj4gYXV0aG9ycyBib3RoIG9u IGFuZCBvZmYgbGlzdCDimLogVGhlIG1haW4gcmVhc29uIHdlIGluY2x1ZGVkIGEgc3RyaW5nLWJh c2VkDQo+IEtJRCB3YXMgc28gdGhhdCB3ZSBjYW4gaGF2ZSBVUkxzIHRvIHB1YmxpYyBrZXlzLiBI b3dldmVyLCBhcyBMZWlmIHBvaW50ZWQNCj4gb3V0LCBmb3IgaW50ZXJvcCBhbmQgcGVyZm9ybWFu Y2UgcmVhc29ucyBpdCBoZWxwcyB0byBoYXZlIG1heGltdW0gbGVuZ3RoDQo+IGZvciB0aGUgS0lE IGZpZWxkLiBXaXRoIHB1YmxpYyBrZXlzIHRoaXMgaXMgaGFyZCB0byBkby4gU28gaW4gY2FzZXMg d2hlcmUNCj4gcGVyZm9ybWFuY2UgaXMgZXNzZW50aWFsLCB1c2luZyBhIGZpeGVkLWxlbmd0aCBp bnQgZmllbGQgaXMgZmFzdGVyLiBUaGUNCj4gcmVhc29uIHdlIGRpZG7igJl0IGV4dGVuZCB0aGlz IHRvIHRoZSBDS0kgZmllbGQgaXMgdGhhdCBmb3IgQ0tJIHdlIG9ubHkNCj4gc3VwcG9ydCBzeW1t ZXRyaWMgZW5jcnlwdGlvbiwgYW5kIGhlbmNlIGEgaW50ZWdlciBrZXkgaW5kZXggc2hvdWxkIGJl DQo+IHN1ZmZpY2llbnQuDQo+IA0KPiBBbG9uZyBzaW1pbGFyIGxpbmVzLiBXaHkgaGF2ZSBib3Ro IEhGICYgRFNBLiBJcyBpdCBpbXBsaWNpdCBmcm9tIHRoZSB2YWx1ZQ0KPiBvZiB0aGUgYXR0cmli dXRlIChlLmcuICdTSEEtMjU2JyB2cyDigJhFQ0RTQeKAmSkgd2hldGhlciBhIHNoYXJlZCBzZWNy ZXQgb3INCj4gZGlnaXRhbCBzaWduYXR1cmUgYWxnb3JpdGhtIGlzIGJlaW5nIHVzZWQ/IE9yIGlz IHRoZSBwdXJwb3NlIHRvIGVuYWJsZSBVUkkNCj4gdG8gYmUgc2lnbmVkICgmIHN1YnNlcXVlbnRs eSkgdmVyaWZpZWQgd2l0aCBlaXRoZXIgKGlmIGJvdGggYXJlIHNwZWNpZmllZCkNCj4gb3Igd2l0 aCBib3RoPw0KPiANCj4gW1JheV0gV2UgZXhwbGljaXRseSBydWxlIG91dCBoYXZpbmcgYm90aCBI RiBhbmQgRFNBIGluZm9ybWF0aW9uIGVsZW1lbnRzDQo+IGluIGEgc2luZ2xlIFNpZ25lZCBVUkku IFRoZSByZWFzb24gd2Ugd2VudCBmb3Igc2VwYXJhdGUgSUVzIGlzIHRoYXQgaXQNCj4gbWFrZXMg ZGVzY3JpYmluZyB0aGUgYWxnb3JpdGhtIHNsaWdodGx5IGxlc3MgY29tcGxleC4gQW5kIGdpdmVu IHRoYXQgd2UNCj4gYmFzZTY0LWVuY29kZSB0aGUgZnVsbCBVUkkgU2lnbmluZyBQYWNrYWdlIGFu eXdheSBpdCBkb2VzbuKAmXQgcmVhbGx5IG1hdHRlcg0KPiBpbiB0ZXJtcyBvZiBuYW1lc3BhY2Ug Y29sbGlzaW9ucy4NCj4gDQo+IFNlY3Rpb24gMy4xOg0KPiA4KWEpIHNheXMNCj4gICAgICAgICAg ICBOb3RlOiB0aGUgT3JpZ2luYWwgVVJJDQo+ICAgICAgICAgICAgQ29udGFpbmVyIGluZm9ybWF0 aW9uIGVsZW1lbnQgTVVTVCBiZSB0aGUgbGFzdCBpbmZvcm1hdGlvbg0KPiAgICAgICAgICAgIGVs ZW1lbnQgaW4gdGhlIGJ1ZmZlciBiZWZvcmUgdGhlIHNpZ25hdHVyZSBpbmZvcm1hdGlvbg0KPiAg ICAgICAgICAgIGVsZW1lbnQuDQo+IDgpYikgZG9lcyBub3QgaGF2ZSBhIHNpbWlsYXIgc3RhdGVt ZW50LiBJcyB0aGUgVVJJIFBhdHRlcm4gQ29udGFpbmVyIGFsc28NCj4gcmVxdWlyZWQgKE1VU1Qp IHRvIGJlIHRoZSBsYXN0IGluZm9ybWF0aW9uIGVsZW1lbnQgaW4gdGhlIGJ1ZmZlcj8NCj4gDQo+ IFtSYXldIFRoZSBPcmlnaW5hbCBVUkkgQ29udGFpbmVyIGlzIGEgc3BlY2lhbCBjYXNlIGluIHRo ZSBzZW5zZSB0aGF0IGl0DQo+IGlzbuKAmXQgY29tbXVuaWNhdGVkIGFsb25nIHdpdGggdGhlIFNp Z25lZCBVUkkgYnV0IGlzIHJlbW92ZWQgZnJvbSB0aGUNCj4gcGFja2FnZSBhZnRlciBoYXZpbmcg Y2FsY3VsYXRlZCB0aGUgc2lnbmF0dXJlLg0KPiANCj4gU2VjdGlvbiA1LjQ6DQo+IEkgZG9u4oCZ dCBzZWUgdGhlIHBvaW50IG9mIGtleS1pZCwgaGFzaC1mdW5jdGlvbiwgZGlnaXRhbC1zaWduYXR1 cmUtDQo+IGFsZ29yaXRobSAmIHZlcnNpb24uDQo+IA0KPiBUaGUgYWJzZW5jZSBvZiB0aGUgVkVS IGF0dHJpYnV0ZSBpcyBzcGVjaWZpZWQgYnkgdGhlIGRvY3VtZW50IHRvIG1lYW4NCj4gVmVyc2lv biAxLiBUaGUgYWJzZW5jZSBvZiB0aGUgSEYgJiBEU0EgYXR0cmlidXRlcyBpcyBzcGVjaWZpZWQg YnkgdGhlDQo+IHZlcnNpb24gb2YgdGhlIHNpZ25pbmcgbWV0aG9kLiBWZXJzaW9uIDEgKHRoZSBk b2N1bWVudCkgc3BlY2lmaWVzIHRoZW0gYXMNCj4gU0hBLTI1NiAmIEVDRFNBIGFjY29yZGluZ2x5 LiBXaHkgcmUtc3BlY2lmeSB0aGlzIGluIHRoZSBNZXRhZGF0YSBvYmplY3Q/DQo+IA0KPiBbUmF5 XSBJ4oCZbSBub3Qgc3VyZSBJIHVuZGVyc3RhbmQuIFdoYXQgdGhlIG1ldGFkYXRhIOKAmHZlcnNp b27igJkgZmllbGQgaXMgZm9yDQo+IGlzIHRvIGFsbG93IENETnMgdG8gbWFuZGF0ZSBvdGhlciB2 ZXJzaW9ucyBvZiBVUkkgU2lnbmluZyBpbiB0aGUgZnV0dXJlDQo+IChlLmcuIGJ5IHNldHRpbmcg dGhlIHZlcnNpb24gcHJvcGVydHkgdG8gMikuIFRoZSBzYW1lIGdvZXMgZm9yIHRoZSBoYXNoLQ0K PiBmdW5jdGlvbiBhbmQgZGlnaXRhbC1zaWduYXR1cmUtYWxnb3JpdGhtIHByb3BlcnRpZXM6IGEg Q0ROIGNvdWxkIG1hbmRhdGUNCj4gdGhhdCBVUkkgU2lnbmluZyB2ZXJzaW9uIDEgaXMgdXNlZCwg YnV0IHN0aWxsIG9ubHkgYWxsb3cgU0hBLTUxMiBpbnN0ZWFkDQo+IG9mIFNIQS0yNTYgYXMgdXNl ZCBieSBkZWZhdWx0Lg0KPiANCj4ga2V5LWlkIGlzIGZvciB3aGVuIHRoZXJlIGlzIG9ubHkgYSBz aW5nbGUga2V5IGlkIGFzIGFuIG9wdGltaXNhdGlvbiBpZg0KPiBzb21lb25lIHdhbnRzIHRvIGhh dmUgYSBzaW5nbGUga2V5IGlkICYgbm90IHRyYW5zbWl0IGl0IGluIHRoZSBzaWduZWQgVVJJPw0K PiBEb2VzO3Qgc2VlbSB3b3J0aCBpdCB0byBtZSBmb3IgYSBuYXJyb3cgY29ybmVyIGNhc2UuIElm IGl0IGlzIHdvcnRoIGl0DQo+IGp1c3Qgc3BlY2lmeSBpZiBLSUQvS0lEX05VTSBpcyBtaXNzaW5n IGZyb20gdGhlIHNpZ25lZCBVUkkgYW5kIGtleS1pZC1zZXQNCj4gY29udGFpbnMgYSBzaW5nbGUg dmFsdWUgdGhlbiB1c2UgdGhhdD8gT3IgaWYgS0lEL0tJRF9OVU0gaXMgbWlzc2luZyB0aGUNCj4g c3Vycm9nYXRlIGNoZWNrcyBhbGwga2V5cyBpbiBrZXktaWQtc2V0IGFuZCBpZiBvbmUgbWF0Y2hl cyB0aGUgVVJJIGlzDQo+IGF1dGhvcmlzZWQ/DQo+IA0KPiBbUmF5XSBTZWUgZWFybGllciBjb21t ZW50DQo+IA0KPiAoUGVyc29uYWxseSBJIHRoaW5rIEtJRC9LSURfTlVNIGluIHRoZSBTaWduZWQg VVJpIGlzIHBvaW50bGVzcywgdGhlaXINCj4gbWVhbmluZyBpcyBkaXN0cmlidXRlZCBvdXQgb2Yg YmFuZCBzbyB3aHkgbm90IGFsc28gZGlzdHJpYnV0ZSB0aGUgdmFsdWVzDQo+IG91dCBvZiBiYW5k L3ZpYSBtZXRhZGF0YSBhbmQgaGF2ZSB0aGUgYmVoYXZpb3VyIGJlIGFueSB2YWxpZCBrZXkvc2Vj cmV0IGluDQo+IGtleS1pZC1zZXQgcGFzc2VzIGFuZCByZW1vdmUgS0lEL0tJRF9OVU0gW2FuZCBt YXliZSBDS0ldIGZyb20gdGhlIFNpZ25lZA0KPiBVUkkgZW50aXJlbHkpDQo+IA0KPiBbUmF5XSBJ 4oCZbSBub3Qgc3VyZSBJIHVuZGVyc3RhbmQuIEhvdyB3b3VsZCB0aGUgZENETiBrbm93IHdoaWNo IEtleSBpcyB1c2VkDQo+IHRvIGNhbGN1bGF0ZSBhIGdpdmVuIHNpZ25hdHVyZT8gT3IgYXJlIHlv dSBzYXlpbmcgaXQgc2hvdWxkIGp1c3QgY2hlY2sgYWxsDQo+IHBvc3NpYmxlIEtleXMgdGhhdCBh cmUgaW4gdGhlIGFsbG93ZWQgc2V0Pw0KPiANCj4gU2VjdGlvbiA1LjQ6DQo+IFRoaXMgY29uZnVz ZWQgbWU6DQo+ICAgIE5vdGUgdGhhdCB0aGUgS2V5IElEIGluZm9ybWF0aW9uIGVsZW1lbnQgaXMg bm90IG5lZWRlZCBpZiBvbmx5IG9uZQ0KPiAgICBrZXkgaXMgcHJvdmlkZWQgYnkgdGhlIENTUCBv ciB0aGUgVXBzdHJlYW0gQ0ROIGZvciB0aGUgY29udGVudCBpdGVtDQo+ICAgIG9yIHNldCBvZiBj b250ZW50IGl0ZW1zIGNvdmVyZWQgYnkgdGhlIENETkkgTWV0YWRhdGEgb2JqZWN0Lg0KPiB1bnRp bCBJIHJlYWxpc2VkIHRoYXQg4oCcS2V5IElEIGluZm9ybWF0aW9uIGVsZW1lbnTigJ0gd2FzIHJl ZmVycmluZyB0byB0aGUNCj4gZWxlbWVudCBvZiB0aGUgU2lnbmVkIFVSSSBhbmQgbm90IHRoZSBr ZXktaWQgcHJvcGVydHkgb2YgdGhlIG1ldGFkYXRhDQo+IG9iamVjdCBzcGVjaWZpZWQgaW1tZWRp YXRlbHkgYWJvdmUgdGhlIHNlbnRlbmNlLiBNYXliZSBwaHJhc2UgYXMg4oCcTm90ZQ0KPiB0aGF0 IHRoZSBLZXkgSUQgaW5mb3JtYXRpb24gZWxlbWVudCBkb2VzIG5vdCBuZWVkIHRvIGJlIGluY2x1 ZGVkIGluIHRoZQ0KPiBTaWduZWQgVVJJIGlmIG9ubHkgb25lIGtleeKApiINCj4gDQo+IFtSYXld IEdvb2QgcG9pbnQuIFdpbGwgdXBkYXRlLg0KPiANCj4gU2VjdGlvbiA5Og0KPiAgICBJbiB0aGUg Y2FzZSB3aGVyZSBhc3ltbWV0cmljIGtleXMgYXJlIHVzZWQsIHRoZSBLSUQgaW5mb3JtYXRpb24N Cj4gICAgZWxlbWVudCBtaWdodCBjb250YWluIHRoZSBVUkwgdG8gdGhlIHB1YmxpYyBrZXkuICBU byBwcmV2ZW50DQo+ICAgIG1hbGljaW91cyBjbGllbnRzIGZyb20gc2lnbmluZyB0aGVpciBvd24g VVJJcyBhbmQgaW5zZXJ0aW5nIHRoZQ0KPiAgICBhc3NvY2lhdGVkIHB1YmxpYyBrZXkgVVJMIGlu IHRoZSBLSUQgZmllbGQsIHRoZXJlYnkgcGFzc2luZyBVUkkNCj4gICAgdmFsaWRhdGlvbiwgaXQg aXMgaW1wb3J0YW50IHRoYXQgQ0ROcyBjaGVjayB3aGV0aGVyIHRoZSBVUkkgY29udmV5ZWQNCj4g ICAgaW4gdGhlIEtJRCBmaWVsZCBpcyBpbiB0aGUgYWxsb3dhYmxlIHNldCBvZiBLSURzIGFzIGxp c3RlZCBpbiB0aGUNCj4gICAgQ0ROSSBtZXRhZGF0YSBvciBzZXQgdmlhIGNvbmZpZ3VyYXRpb24u DQo+IE9yIHNwZWNpZnkgdGhpbmdzIGFzIEkgc3VnZ2VzdCBhYm92ZSBhbmQgcmVtb3ZlIHRoZSBu ZWVkIGZvciBLSUQvS0lEX05VTQ0KPiBiZWluZyBwcmVzZW50IGluIHRoZSBTaWduZWQgVVJJIGFu ZCB0aGVyZWZvcmUgdGhpcyBzY2VuYXJpby92dWxuZXJhYmlsaXR5DQo+IGJlaW5nIGFibGUgdG8g b2NjdXIgaW4gdGhlIGZpcnN0IHBsYWNlPw0KPiANCj4gW1JheV0gU2VlIG15IGVhcmxpZXIgY29t bWVudC4gSSBkb27igJl0IHNlZSBob3cgdGhlIGRDRE4gd291bGQgZXZlciBiZSBhYmxlDQo+IHRv IGtub3cgd2hpY2gga2V5IHdhcyB1c2VkLiBCdXQgbWF5YmUgSeKAmW0gbWlzc2luZyBzb21ldGhp bmcuDQo+IA0KPiBuaXRzOg0KPiBTZWN0aW9uIDE6DQo+ICAgIFRoZSBwcmltYXJ5IGdvYWwgb2Yg VVJJIFNpZ25pbmcgaXMgdG8gbWFrZQ0KPiAgICBzdXJlIHRoYXQgb25seSBhdXRob3JpemVkIFVz ZXIgQWdlbnRzIChVQXMpIGFyZSBhYmxlIHRvIGFjY2VzcyB0aGUNCj4gICAgY29udGVudCwgd2l0 aCBhIENTUCBiZWluZyBhYmxlIHRvIGF1dGhvcml6ZSBldmVyeSBpbmRpdmlkdWFsIHJlcXVlc3Qu DQo+IElzIGl0IHJlYWxseSB0byBhdXRob3Jpc2UgdGhlIFVzZXIgQWdlbnQgb3IgdGhlIElQIGFk ZHJlc3MgdGhlIFVzZXIgQWdlbnQNCj4gaXMgYmVoaW5kPyBUaGVyZSBpcyBub3RoaW5nIGluIHRo ZSBzaWduZWQgVVJJIHRoYXQgaWRlbnRpZmllcyB0aGUNCj4gcGFydGljdWxhciBVc2VyIEFnZW50 LiBVUklzIGNhbiBzdGlsbCBwb3RlbnRpYWxseSBiZSBzaGFyZWQvZXhjaGFuZ2VkDQo+IGJldHdl ZW4gVXNlciBBZ2VudHMgYmVoaW5kIHRoZSBzYW1lIElQIGFkZHJlc3Mvc3VibmV0LCBob3dldmVy IHRoZSBpbXBhY3QNCj4gb2Ygc3VjaCBzaGFyaW5nIGlzIGxpbWl0ZWQvYWNjZXB0YWJsZSBmb3Ig dGhlIHVzZSBjYXNlLg0KPiANCj4gSSB3b3VsZCBzL1VzZXIgQWdlbnRzIChVQXMpL0lQIGFkZHJl c3MoZXMpLw0KPiANCj4gU2VjdGlvbiAxOg0KPiBJIGRvIG5vdCBrbm93IHdoYXQgaXMgbWVhbnQg YnkgZGlzdHJpYnV0aW9uIHBvbGljeSBpbiB0aGlzIHNlbnRlbmNlOg0KPiAgICBTcGxpdHRpbmcg dGhlIHJvbGUgb2YgcGVyZm9ybWluZyBwZXItcmVxdWVzdA0KPiAgICBhdXRob3JpemF0aW9uIGJ5 IENTUCBhbmQgdGhlIHJvbGUgb2YgdmFsaWRhdGlvbiBvZiB0aGlzIGF1dGhvcml6YXRpb24NCj4g ICAgYnkgdGhlIENETiBhbGxvd3MgYW55IGFyYml0cmFyeSBkaXN0cmlidXRpb24gcG9saWN5IHRv IGJlIGVuZm9yY2VkDQo+ICAgIGFjcm9zcyBDRE5zIHdpdGhvdXQgdGhlIG5lZWQgb2YgQ0ROcyB0 byBoYXZlIGFueSBhd2FyZW5lc3Mgb2YgdGhlDQo+ICAgIGFjdHVhbCBDU1AgZGlzdHJpYnV0aW9u IHBvbGljeS4NCj4gDQo+IFNlY3Rpb24gMi4yOg0KPiAgICBUaGUgS2V5IElEIEluZm9ybWF0aW9u IEVsZW1lbnQgaXMgdXNlZCB0byByZXRyaWV2ZWQgdGhlIGtleSB3aGljaCBpcw0KPiAgICBuZWVk ZWQgYXMgaW5wdXQgdG8gdGhlIGFsZ29yaXRobSBmb3IgdmFsaWRhdGluZyB0aGUgU2lnbmVkIFVS SS4NCj4gcy9yZXRyaWV2ZWQvcmV0cmlldmUvDQo+IA0KPiBTZWN0aW9uIDIuNDoNCj4gICAgSG93 ZXZlciwgYSBjbGllbnQgb3IgQ0ROIG1heSBhcHBlbmQgb3RoZXINCj4gICAgcXVlcnkgcGFyYW1l dGVycyB1bnJlbGF0ZWQgdG8gVVJJIFNpZ25pbmcgdG8gdGhlIFNpZ25lZCBVUkkuICBTdWNoDQo+ ICAgIGFkZGl0aW9uYWwgcXVlcnkgcGFyYW1ldGVycyBTSE9VTEQgTk9UIHVzZSB0aGUgc2FtZSBu YW1lIGFzIHRoZSBVUkkNCj4gICAgU2lnbmluZyBQYWNrYWdlIEF0dHJpYnV0ZSB0byBhdm9pZCBu YW1lc3BhY2UgY29sbGlzaW9uIGFuZCBwb3RlbnRpYWwNCj4gICAgZmFpbHVyZSBvZiB0aGUgVVJJ IFNpZ25pbmcgdmFsaWRhdGlvbi4NCj4gcy9jbGllbnQvVXNlciBBZ2VudC8gaXMgcHJvYmFibHkg bW9yZSBhbGlnbmVkIHdpdGggdGhlIHJlc3Qgb2YgdGhlDQo+IGRvY3VtZW50LiBUaGVyZSBhcmUg c29tZSBvdGhlciBwbGFjZXMgd2hlcmUgeW91IHVzZSBjbGllbnQuIFByb2JhYmx5IHdvcnRoDQo+ IGJlaW5nIGNvbnNpc3RlbnQgYW5kIHBpY2tpbmcgb25lIG9mIGNsaWVudCBvciBVc2VyIEFnZW50 IHRvIHVzZQ0KPiB0aHJvdWdob3V0Lg0KPiANCj4gU2VjdGlvbiAzOg0KPiAgICBJbiBjYXNlIHRo ZQ0KPiAgICBVUkkgUGF0dGVybiBDb250YWluZXIgaW5mb3JtYXRpb24gZWxlbWVudCBpcyB1c2Vk LCB0aGUgQ1NQIGhhcyBmdWxsDQo+ICAgIGZsZXhpYmlsaXR5IHRvIHNwZWNpZnkgd2hpY2ggZWxl bWVudHMgb2YgdGhlIFVSSSAoaW5jbHVkaW5nIHRoZQ0KPiAgICBzY2hlbWUgcGFydCkgYXJlIHBy b3RlY3RlZCBieSB0aGUgVVJJLg0KPiBJIHRoaW5rIHlvdSBtZWFuIOKAnHByb3RlY3RlZCBieSB0 aGUgU2lnbmVkIFVSSeKAnT8NCj4gDQo+IFNlY3Rpb24gMzoNCj4gICAgVGhlIHByb2Nlc3Mgb2Yg Z2VuZXJhdGluZyBhIFNpZ25lZCBVUkkgY2FuIGJlIGRpdmlkZWQgaW50byBmb3VyIHNldHMNCj4g ICAgb2Ygc3RlcHM6IDEpIENvbXBvc2UgVVJJIFNpZ25pbmcgSUVzIHdpdGggb3JpZ2luYWwgVVJJ IC8gVVJJIHBhdHRlcm4sDQo+ICAgIDIpIENvbXB1dGUgdGhlIFVSSSBTaWduYXR1cmUsIDMpIEVu Y29kZSB0aGUgVVJJIFNpZ25pbmcgUGFja2FnZSwgYW5kDQo+ICAgIDQpIEFzc2VtYmxlIHRoZSBw YXJ0cyB0byBjcmVhdGUgdGhlIFNpZ25lZCBVUkkuDQo+IFRoaXMgd291bGQgYmUgYmV0dGVyIGFz IGEgbGlzdCBvZiBudW1iZXJlZCBidWxsZXRzIElNTy4NCj4gDQo+IA0KPiBbUmF5XSBUaGFua3Mg YWdhaW4hDQo+IA0KPiBIVEgNCj4gQmVuDQo+IA0KPiA+IE9uIDI5IEp1biAyMDE2LCBhdCAxNDo0 MywgS2V2aW4gTWEgSiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+IHdyb3RlOg0KPiA+DQo+ID4g SGkgQWxsLA0KPiA+DQo+ID4gIEFzIHBlciB0aGUgZGlzY3Vzc2lvbiBpbiBCQSwgd2UgaGF2ZSBy ZWNlaXZlZCB0aGUgdXBkYXRlZCBVUkkgU2lnbmluZw0KPiBkcmFmdCBhbmQgd291bGQgbGlrZSB0 byBtb3ZlIGl0IHRvIFdHTEMuICAoTGVpZiBhbmQgUGhpbCwgeW91J3JlIHVwISkNCj4gPg0KPiA+ ICBUb2RheSB3aWxsIGJlZ2luIHRoZSB0d28td2VlayBXR0xDIG9uOg0KPiBodHRwczovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nLTA5DQo+ID4NCj4gPiAg UGxlYXNlIHNlbmQgYW55IGNvbW1lbnRzLCBxdWVzdGlvbnMsIGNvbmNlcm5zIHRvIHRoZSBDRE5J IG1haWxpbmcgbGlzdDoNCj4gY2RuaUBpZXRmLm9yZw0KPiA+DQo+ID4gIFRoZSBXR0xDIHdpbGwg ZW5kIG9uIFdlZG5lc2RheSBKdWx5IDEzLCAyMDE2Lg0KPiA+DQo+ID4gdGhhbnghDQo+ID4NCj4g PiAtLSAgS2V2aW4gYW5kIEZyYW5jb2lzDQo+ID4NCj4gPiBfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IENETmkgbWFpbGluZyBsaXN0DQo+ID4gQ0RO aUBpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2Ru aQ0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N Cj4gQ0ROaSBtYWlsaW5nIGxpc3QNCj4gQ0ROaUBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCj4gDQo+IA0KPiBUaGlzIG1lc3NhZ2UgbWF5IGNv bnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91DQo+ IGFyZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91 IGJ5IG1pc3Rha2UsIHlvdQ0KPiBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0aGUgc2VuZGVyIGFu ZCBkZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5vDQo+IGxpYWJpbGl0eSBmb3IgdGhl IGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2UN Cj4gaXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tz IGluaGVyZW50IHRvIHRoZQ0KPiBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4N Cj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gQ0RO aSBtYWlsaW5nIGxpc3QNCj4gQ0ROaUBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2NkbmkNCg== From nobody Sat Jul 9 06:45:35 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B8FEF12B03C; Sat, 9 Jul 2016 06:45:33 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.25.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160709134533.25597.53337.idtracker@ietfa.amsl.com> Date: Sat, 09 Jul 2016 06:45:33 -0700 Archived-At: Cc: flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Stephen Farrell's No Objection on draft-ietf-cdni-metadata-19: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Jul 2016 13:45:34 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-cdni-metadata-19: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for the discussion. Old comments below, I didn't check if those were handled. If they were, thanks. If you want to chat about any, feel free to but you don't need to. ------------ - general: I agree with Ben's discuss about use of TLS. I also wonder if IPsec is really going to be used here. And even if so, you might be better off to say that TLS with mutual-auth SHOULD be used in all cases. - general: Don't you need some guidance for the dCDN to say when to stop following (what might be circular) links? - general: I think it'd be better if the examples given used https in all cases, assuming we do think that'd be better. And if it'd not be better, saying why would I think be good. - 1.2, last para: I don't get what this is saying. What additional things need specifying? If all you mean is that the dCDN and uCDN need to be able to setup TLS sessions, and hence need to agree on what CAs and ciphersuites to use, then maybe just say that. (You do already refer to RFC7525 so most of that is covered there I think.) - 4.1.1: I don't think I-JSON requires that order be preserved, but you seem to need that here, e.g. if a tCDN decodes and re-encodes, or if a uCDN round-trips a data structure. Is there a missing "MUST preserve order" somewhere? - 4.1.x, 4.2.x, 4.3.x: I wonder if the specification is a bit too loose in places here, e.g. what does "$$" mean in 4.1.5 and why is that special? In the same section I also wasn't clear if "/movies/" is the same as "/movies/*" or not, nor if you consider that "/movies/*" does or doesn't match "/movies/1/2/3". Isn't a reference needed in 4.3.4? I'd guess that a lot of this is close enough that implementations will likely get a lot, but not all, of this right, and that that might lead to corner-cases where interop isn't so good. Improving that would seem like a good idea, but perhaps it's better to wait and see what deployments do and then tidy this up? Not sure. In reading I spotted a number of places where such things occurred to me (but didn't write them all down, sorry;-). - 6.8: I didn't follow this, sorry;-) I assume it's considered clear enough for implementers, so feel free to ignore me, but I didn't get how to know whether or not e.g. ".v2.2.2" is newer than ".v2" or ".fixed-v1". - 8.3: did the WG consider (possibly future) uses of JOSE to provide e2e security from uCDN to dCDN even via tCDN? I'm ok that you don't define that now, but wondered, as it seems like a fairly obvious thing to want. (To this security nerd anyway:-) I also wondered the same for 8.4, but I get that that'd be less likely of widespread utility. If using IPsec to security inter-CDN links, something like JOSE would seem to me to add quite a bit of value, if the CDNs insist on not using TLS. From nobody Mon Jul 11 00:28:04 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D482912B013 for ; Mon, 11 Jul 2016 00:28:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.488 X-Spam-Level: X-Spam-Status: No, score=-5.488 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GNC3gc-TQnKY for ; Mon, 11 Jul 2016 00:28:01 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5908112B00A for ; Mon, 11 Jul 2016 00:27:59 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.28,345,1464645600"; d="scan'208";a="10257609" Received: from exc-cashub01.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.220]) by mailhost1b.tno.nl with ESMTP; 11 Jul 2016 09:27:58 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB01.tsn.tno.nl ([fe80::b855:be6:1aa8:4d0f%13]) with mapi id 14.03.0294.000; Mon, 11 Jul 2016 09:27:58 +0200 From: "Brandenburg, R. (Ray) van" To: Kevin Ma J , Ben Niven-Jenkins , "Content Delivery Networks Interconnection Discussion List" Thread-Topic: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing Thread-Index: AdHSDAIj8Q+3AOh3Q/WhloflAutMVQCOR2MAATEZ7QAAEQfIAAB+BoEA Date: Mon, 11 Jul 2016 07:27:57 +0000 Message-ID: <73B31A7C-CC80-4646-A7C9-401874C3B07D@tno.nl> References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> In-Reply-To: Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.17.0.160611 x-originating-ip: [134.221.225.191] x-esetresult: clean, is OK x-esetid: 37303A297F344B66657365 Content-Type: text/plain; charset="utf-8" Content-ID: <9FC3E22530AF1B449D85891F0C36AD88@tno.nl> MIME-Version: 1.0 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2016 07:28:04 -0000 SGkgS2V2aW4sDQoNCiA+IDEuIEhhdmluZyBib3RoIEtJRCBhbmQgS0lEX05VTSBzZWVtcyB1bm5l Y2Vzc2FyeSB0byBtZS4gIEkgdW5kZXJzdGFuZCBMZWlmJ3MgYXJndW1lbnQgKGh0dHBzOi8vbWFp bGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvY2RuaS9ZRElyT2R1dGJydlFrRXd2QWV2d09OZGlV RkUpLCBidXQgSSdtIHN0aWxsIG5vdCBzdXJlIEkgYWdyZWUuICBBcmUgaW1wbGVtZW50ZXJzIHJl YWxseSBnb2luZyB0byBoYXZlIDIgc2VwYXJhdGUgY29kZSBwYXRocywgb25lIHdpdGggYW4gaW50 ZWdlciB2YXJpYWJsZSBhbmQgYW5vdGhlciB3aXRoIGEgc3RyaW5nIHZhcmlhYmxlLCBqdXN0IHRv IGdldCBhIG1lbW9yeSBlZmZpY2llbmN5PyAgT3IgaXMgdGhlIGludGVnZXIganVzdCBnb2luZyB0 byBnZXQgY29udmVydGVkIHRvIGEgc3RyaW5nPyAgQW5kIHRoZXkgYWxyZWFkeSBoYXZlIHRvIGFs bG9jYXRlIHRoZSBtZW1vcnkganVzdCB0byBwYXJzZSB0aGUgdG9rZW4/DQoNCkdpdmVuIHRoYXQg TGVpZiBhbmQgaGlzIGNvbGxlYWd1ZXMgYWN0dWFsbHkgaW1wbGVtZW50ZWQgdGhlIGFsZ29yaXRo bSwgYW5kIHRoZXkgd2VyZSB0aGUgb25lcyBhc2tpbmcgZm9yIHRoaXMgY2hhbmdlLCBteSBndWVz cyB3b3VsZCBiZSB5ZXMuIEJ1dCBsZXTigJlzIGFzayB0aGVtIHRvIG1ha2Ugc3VyZS4gSW4gdGhl IGVuZCwgSSB3b3VsZG7igJl0IGJlIHN1cnByaXNlZCBpZiBzb21lIGltcGxlbWVudGF0aW9ucyBh Y3R1YWxseSBvbmx5IGltcGxlbWVudGVkIEtJRF9OVU0uIA0KDQo+ICAyLiBJIGFncmVlIHRoYXQg aGF2aW5nIGJvdGggSEYgYW5kIERTQSBjb3VsZCBiZSB1bm5lY2Vzc2FyeS4gIEkga25vdyB3ZSd2 ZSBhbHNvIGhhZCBsb25nIGRpc2N1c3Npb25zIGFib3V0IG5lZWRpbmcgZm9yIGJvdGggTUQgYW5k IERTLiAgVWx0aW1hdGVseSwgdGhlcmUgaXMgYW4gYWxnb3JpdGhtIChIRiBvciBEU0EpIHRoYXQg aXMgcnVuLCBhbmQgcmVzdWx0cyBpbiBhIHNpZ25hdHVyZSAoTUQgb3IgRFMpLCBhbmQgb25seSBv bmUgcGFpciAoSEYvTUQgb3IgRFNBL0RTKSBlbmRzIHVwIGluIHRoZSB0b2tlbj8gIFRoZSBhbGdv cml0aG0gZG9lc24ndCByZWFsbHkgY2hhbmdlIGRyYW1hdGljYWxseSBpZiB0aGUgSUUncyBhcmUg ZGlmZmVyZW50PyAgSXMgaXQganVzdCBhYm91dCByZWFkYWJpbGl0eT8NCg0KSWYgeW91IGxvb2sg YXQgdGhlIGFsZ29yaXRobSwgdGhlIHBhdGhzIGZvciBIRiBhbmQgRFNBIGFyZSBjb25zaWRlcmFi bHkgZGlmZmVyZW50LiBPbmUgcGVyZm9ybXMgYW4gSE1BQyBhcyBkZWZpbmVkIGJ5IEhGLCB0aGUg b3RoZXIgZG9lcyBhIChrZXlsZXNzKSBTSEEtMSBoYXNoLCB0aGVuIGVuY3J5cHRzIHRoZSByZXN1 bHQgd2l0aCBhbiBlbmNyeXB0aW9uIGZ1bmN0aW9uLiBJZiB3ZSB3b3VsZCBtZXJnZSBib3RoIGlu dG8gYSBzaW5nbGUgSW5mb3JtYXRpb24gRWxlbWVudCAobGV04oCZcyBjYWxsIGl0IFNpZ25hdHVy ZSBBbGdvcml0aG0sIG9yIFNBLCBmb3Igbm93KSwgdGhlIGFsZ29yaXRobSB3b3VsZCBoYXZlIHRv IGluY2x1ZGUgc29tZXRoaW5nIGFsb25nIHRoZSBsaW5lcyBvZjog4oCcSWYgdGhlIGFsZ29yaXRo bSBjb21tdW5pY2F0ZWQgaW4gdGhlIFNBIGZpZWxkIGlzIGEgRGlnaXRhbCBTaWduYXR1cmUgQWxn b3JpdGhtLCBwZXJmb3JtIFguIElmIGl0IGlzIGEgaGFzaGluZyBmdW5jdGlvbiwgcGVyZm9ybSBZ LuKAnS4gSW4gb3RoZXIgd29yZHMsIHRoZSB0d28gZGlmZmVyZW50IHBhdGhzIGluIHRoZSBhbGdv cml0aG0gd2lsbCBrZWVwIGV4aXN0aW5nLCBidXQgbm93IHlvdeKAmXJlIHByb2JhYmx5IGdvaW5n IHRvIGhhdmUgdG8gZ2l2ZSBzb21lIGRlZmluaXRpb24gb3IgbGlzdCBvZiB3aGljaCBhbGdvcml0 aG1zIGNsYXNzaWZ5IGFzIERpZ2l0YWwgU2lnbmF0dXJlIEFsZ29yaXRobSBhbmQgd2hpY2ggYXMg aGFzaGluZyBmdW5jdGlvbnMuIEluIHRoZSBlbmQsIEnigJltIG5vdCBzdXJlIHdoYXQgd2Ugd291 bGQgZ2FpbiBieSBpdC4gDQoNClRoYW5rcywNCg0KUmF5DQoNCg0KT24gMDgvMDcvMTYgMjM6MTks ICJLZXZpbiBNYSBKIiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+IHdyb3RlOg0KDQpIaSBSYXks DQoNCiAgKEFzIGFuIGluZGl2aWR1YWwpIEknbGwgZWNobyB0d28gb2YgQmVuJ3MgcG9pbnRzLCBh cyBJJ3ZlIGFza2VkIHNpbWlsYXIgcXVlc3Rpb25zIGluIHRoZSBwYXN0Og0KDQogIDEuIEhhdmlu ZyBib3RoIEtJRCBhbmQgS0lEX05VTSBzZWVtcyB1bm5lY2Vzc2FyeSB0byBtZS4gIEkgdW5kZXJz dGFuZCBMZWlmJ3MgYXJndW1lbnQgKGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9t c2cvY2RuaS9ZRElyT2R1dGJydlFrRXd2QWV2d09OZGlVRkUpLCBidXQgSSdtIHN0aWxsIG5vdCBz dXJlIEkgYWdyZWUuICBBcmUgaW1wbGVtZW50ZXJzIHJlYWxseSBnb2luZyB0byBoYXZlIDIgc2Vw YXJhdGUgY29kZSBwYXRocywgb25lIHdpdGggYW4gaW50ZWdlciB2YXJpYWJsZSBhbmQgYW5vdGhl ciB3aXRoIGEgc3RyaW5nIHZhcmlhYmxlLCBqdXN0IHRvIGdldCBhIG1lbW9yeSBlZmZpY2llbmN5 PyAgT3IgaXMgdGhlIGludGVnZXIganVzdCBnb2luZyB0byBnZXQgY29udmVydGVkIHRvIGEgc3Ry aW5nPyAgQW5kIHRoZXkgYWxyZWFkeSBoYXZlIHRvIGFsbG9jYXRlIHRoZSBtZW1vcnkganVzdCB0 byBwYXJzZSB0aGUgdG9rZW4/DQoNCiAgMi4gSSBhZ3JlZSB0aGF0IGhhdmluZyBib3RoIEhGIGFu ZCBEU0EgY291bGQgYmUgdW5uZWNlc3NhcnkuICBJIGtub3cgd2UndmUgYWxzbyBoYWQgbG9uZyBk aXNjdXNzaW9ucyBhYm91dCBuZWVkaW5nIGZvciBib3RoIE1EIGFuZCBEUy4gIFVsdGltYXRlbHks IHRoZXJlIGlzIGFuIGFsZ29yaXRobSAoSEYgb3IgRFNBKSB0aGF0IGlzIHJ1biwgYW5kIHJlc3Vs dHMgaW4gYSBzaWduYXR1cmUgKE1EIG9yIERTKSwgYW5kIG9ubHkgb25lIHBhaXIgKEhGL01EIG9y IERTQS9EUykgZW5kcyB1cCBpbiB0aGUgdG9rZW4/ICBUaGUgYWxnb3JpdGhtIGRvZXNuJ3QgcmVh bGx5IGNoYW5nZSBkcmFtYXRpY2FsbHkgaWYgdGhlIElFJ3MgYXJlIGRpZmZlcmVudD8gIElzIGl0 IGp1c3QgYWJvdXQgcmVhZGFiaWxpdHk/DQoNCnRoYW54IQ0KDQotLSAgS2V2aW4gSi4gTWENCg0K PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBDRE5pIFttYWlsdG86Y2RuaS1i b3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQnJhbmRlbmJ1cmcsIFIuDQo+IChSYXkpIHZh bg0KPiBTZW50OiBGcmlkYXksIEp1bHkgMDgsIDIwMTYgNzoxMiBBTQ0KPiBUbzogQmVuIE5pdmVu LUplbmtpbnM7IENvbnRlbnQgRGVsaXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0aW9uDQo+IERp c2N1c3Npb24gTGlzdA0KPiBTdWJqZWN0OiBSZTogW0NETmldIFdvcmtpbmcgR3JvdXAgTGFzdCBD YWxsIG9uIGRyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZw0KPiANCj4gSGkgQmVuLA0KPiANCj4g VGhhbmtzIGZvciB0aGUgdGhvcm91Z2ggcmV2aWV3ISBTZWUgbXkgY29tbWVudHMgYmVsb3cuDQo+ IA0KPiBSYXkNCj4gDQo+IE9uIDAyLzA3LzE2IDEzOjM1LCAiQ0ROaSBvbiBiZWhhbGYgb2YgQmVu IE5pdmVuLUplbmtpbnMiIDxjZG5pLQ0KPiBib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBi ZW5Abml2ZW4tamVua2lucy5jby51az4gd3JvdGU6DQo+IA0KPiBLZXZpbiwgQ29sbGVhZ3VlcywN Cj4gDQo+IEkgcmV2aWV3ZWQgZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nLTA5ICYgYmVsb3cg YXJlIG15IGNvbW1lbnRzLg0KPiANCj4gR2VuZXJhbDoNCj4gDQo+IFRoZSBkb2N1bWVudCBpcyBu b3QgY2xlYXIgb24gd2hldGhlciBpbXBsZW1lbnRlcnMgYXJlIGV4cGVjdGVkIHRvDQo+IGltcGxl bWVudCBib3RoIHNoYXJlZCBzZWNyZXQgJiBkaWdpdGFsIHNpZ25hdHVyZSBhbGdvcml0aG1zIGZv ciBzaWduZWQgVVJJDQo+IHZhbGlkYXRpb24uIFRoaXMgY291bGQgbGVhZCB0byBpbnRlcm9wIHBy b2JsZW1zIHdoZXJlIGRpZmZlcmVudA0KPiBpbXBsZW1lbnRhdGlvbiBpbXBsZW1lbnQgb25lIGJ1 dCBub3QgdGhlIG90aGVyLg0KPiANCj4gTWF5YmUgc3BlY2lmeSBhIG1pbmltdW0gYmFzZWxpbmUg b2YgTVVTVCBzdXBwb3J0IHNoYXJlZCBzZWNyZXQgKGFzIEFGQUlLDQo+IHRoYXQgaXMgd2hhdCBp cyB1c2VkIGluIHRoZSBmaWVsZCkgd2l0aCBTSE9VTEQgaW1wbGVtZW50IGRpZ2l0YWwNCj4gc2ln bmF0dXJlcyBmb3IgdGhlIDEgY29ybmVyIGNhc2UgZm9yIHdoaWNoIGRpZ2l0YWwgc2lnbmF0dXJl cyBwcm92aWRlIGFuDQo+IGFkdmFudGFnZS4NCj4gDQo+IEnigJltIHNvbWV3aGF0IGFnYWluc3Qg c3BlY2lmeWluZyBtdXN0IGltcGxlbWVudCBib3RoIHNoYXJlZCBzZWNyZXQgJg0KPiBkaWdpdGFs IHNpZ25hdHVyZXMgYmVjYXVzZSBJ4oCZdmUgbmV2ZXIgc2VlbiBhIGRpZ2l0YWwgc2lnbmF0dXJl IGJhc2VkDQo+IHNpZ25lZCBVUkkgaW4gdGhlIGZpZWxkIGFuZCBJ4oCZbSBmYW1pbGlhciB3aXRo IHF1aXRlIGEgZmV3IHNpZ25lZCBVUkkNCj4gYWxnb3JpdGhtcy9pbXBsZW1lbnRhdGlvbnMgb2Yg ZGlmZmVyZW50IENETnMuIFRoYXQgc2F5cyB0byBtZSBmb2xrcyBhcmUNCj4gbm90IGxpa2VseSB0 byBpbXBsZW1lbnQgbW9yZSB0aGFuIHRoZSBzaGFyZWQgc2VjcmV0IGFsZ29yaXRobSB1bmxlc3Mg dGhleQ0KPiByZWFsbHkgbmVlZCB0by4gSSBrbm93IENpc2NvIGhhdmUgYSBkaWdpdGFsIHNpZ25h dHVyZSBpbXBsZW1lbnRhdGlvbiBtYXliZQ0KPiB0aGV5IGNvdWxkIGhlbHAgd2l0aCBob3cgbXVj aCB1c2UgaXQgc2VlcyBpbiB0aGUgZmllbGQ/DQo+IA0KPiBbUmF5XSBBZ3JlZWQgdGhhdCB3ZSBz aG91bGRu4oCZdCBtYWtlIGRpZ2l0YWwgc2lnbmF0dXJlcyBtYW5kYXRvcnkuIEFzIGZvcg0KPiBt YWtpbmcgc3VwcG9ydCBmb3Igc2hhcmVkIHNlY3JldHMgbWFuZGF0b3J5OiBJIGd1ZXNzIHRoYXQg bWFrZXMgc2Vuc2UuDQo+IA0KPiBUaGUgZG9jdW1lbnQgY291bGQgZG8gd2l0aCBzb21lIG1vcmUg ZXhhbXBsZXMgb2Yge1VSSSwgYXR0cmlidXRlcywNCj4gVVJJU2lnbmluZ1BhY2thZ2UsIFNpZ25l ZCBVUkl9IGNvdmVyaW5nIGUuZy4gSVB2NCAmIElQdjYsIG9uZSBpbmNsdWRpbmcgYQ0KPiBVUkkg UGF0aCBQYXR0ZXJuIGV0Yy4NCj4gDQo+IFNlY3Rpb24gMi4xOg0KPiBVUkkgUGF0dGVybiBDb250 YWluZXIgKFVQQykgZGVmaW5pdGlvbiAtIGhvdyBkb2VzIG9uZSByZXByZXNlbnQgYSBVUkkNCj4g cGF0dGVybiB0aGF0IGNvbnRhaW5zIGEgbGl0ZXJhbCDigJg74oCZIGJlY2F1c2UgdGhlIFVSSS9V UkkgcGF0dGVybiBjb250YWlucw0KPiBpbiBwYXRoIHBhcmFtZXRlcnMgdG8gbWF0Y2ggYWdhaW5z dD8gRG9lcyBwcmVzZW5jZSBvZiBhIGxpdGVyYWwg4oCYO+KAmSBuZWVkDQo+IHRvIGJlIGVzY2Fw ZWQgd2l0aCDigJgkJyB0b28gdG8gZGlzdGluZ3Vpc2ggaXQgZnJvbSB0aGUgdXNlIG9mIOKAmDvi gJkgdG8NCj4gc2VwYXJhdGUgVVJJIHBhdHRlcm5zIHdpdGhpbiB0aGUgVVJJIFBhdHRlcm4gQ29u dGFpbmVyPw0KPiANCj4gW1JheV0gR29vZCBwb2ludC4gTGl0ZXJhbCBzZW1pLWNvbG9ucyBkbyBp bmRlZWQgbmVlZCB0byBiZSBlc2NhcGVkLiBJ4oCZbGwNCj4gYWRkIHRoaXMgaW4gdGhlIG5leHQg cmV2aXNpb24NCj4gDQo+IFNlY3Rpb24gMi4yOg0KPiBXaHkgaXMgdGhlcmUgYSBLSUQgKHN0cmlu ZykgJiBLSURfTlVNIChpbnRlZ2VyKSBmb3Igc2hhcmVkIHNlY3JldHMva2V5cw0KPiBhbmQgb25s eSBDS0kgKGludGVnZXIpIGZvciBDbGllbnQgSVAga2V5cz8gVG8gYmUgY29uc2lzdGVudCBzaG91 bGQgaXQgYmUNCj4gQ0tJX05VTT8NCj4gDQo+IFRoZSBkb2N1bWVudCBhbHNvIHNheXMNCj4gICAg SW4gY2FzZXMNCj4gICAgd2hlcmUgbnVtZXJpY2FsIEtFWSBJRHMgYXJlIHVzZWQsIGl0IGlzIFJF Q09NTUVOREVEIHRvIHVzZSBLSURfTlVNDQo+ICAgIGluc3RlYWQgb2YgS0lELg0KPiBXaGljaCBt YWtlcyBtZSB0aGluaywgd2h5PyBXaGF0IHRoZSBLSUQgbWVhbnMvcmVwcmVzZW50cyBpcyBjb21t dW5pY2F0ZWQNCj4gb3V0IG9mIGJhbmQgKGFuZCBob3cgdG8gZG8gdGhhdCBpcyBvdXQgb2Ygc2Nv cGUgb2YgdGhlIGRvY3VtZW50KS4gSXQgc2VlbXMNCj4gc3RyYWlnaHRmb3J3YXJkIHRvIHNheSBL SUQgaXMgYWx3YXlzIGEgc3RyaW5nICh3aGljaCBjYW4gcmVwcmVzZW50IGFuDQo+IGludGVnZXIp IGFuZCBnZXQgcmlkIG9mIEtJRF9OVU0gZW50aXJlbHkuIFRoYXQgd291bGQgbWVhbiB3ZSBuZWVk IG9uZSBsZXNzDQo+IGF0dHJpYnV0ZSBkZWZpbmluZyAob3IgdHdvIGxlc3MgaWYgd2UgbmVlZCBz dHJpbmcgJiBpbnRlZ2VyIGF0dHJpYnV0ZXMgZm9yDQo+IENLSSkgYW5kIGF2b2lkcyBmb2xrcyBo YXZpbmcgdG8gd29yayBvdXQgd2hhdCB0byBkbyAmIGltcGxlbWVudCBjb3JuZXINCj4gY2FzZXMg bGlrZSB3aGF0IHRvIGRvIGlmIEtJRCAmIEtJRF9OVU0gYXJlIGJvdGggcHJlc2VudC4NCj4gDQo+ IFdoeSBub3QganVzdCBoYXZlIEtJRCBhbmQgQ0tJIGJvdGggYXMgc3RyaW5ncyBhbmQgcmVtb3Zl IEtJRF9OVU0/DQo+IA0KPiBbUmF5XSBUaGlzIHdhcyB0aGUgY29uc2Vuc3VzIHJlc3VsdCBvZiBh IGxlbmd0aHkgZGlzY3Vzc2lvbiBiZXR3ZWVuIHRoZQ0KPiBhdXRob3JzIGJvdGggb24gYW5kIG9m ZiBsaXN0IOKYuiBUaGUgbWFpbiByZWFzb24gd2UgaW5jbHVkZWQgYSBzdHJpbmctYmFzZWQNCj4g S0lEIHdhcyBzbyB0aGF0IHdlIGNhbiBoYXZlIFVSTHMgdG8gcHVibGljIGtleXMuIEhvd2V2ZXIs IGFzIExlaWYgcG9pbnRlZA0KPiBvdXQsIGZvciBpbnRlcm9wIGFuZCBwZXJmb3JtYW5jZSByZWFz b25zIGl0IGhlbHBzIHRvIGhhdmUgbWF4aW11bSBsZW5ndGgNCj4gZm9yIHRoZSBLSUQgZmllbGQu IFdpdGggcHVibGljIGtleXMgdGhpcyBpcyBoYXJkIHRvIGRvLiBTbyBpbiBjYXNlcyB3aGVyZQ0K PiBwZXJmb3JtYW5jZSBpcyBlc3NlbnRpYWwsIHVzaW5nIGEgZml4ZWQtbGVuZ3RoIGludCBmaWVs ZCBpcyBmYXN0ZXIuIFRoZQ0KPiByZWFzb24gd2UgZGlkbuKAmXQgZXh0ZW5kIHRoaXMgdG8gdGhl IENLSSBmaWVsZCBpcyB0aGF0IGZvciBDS0kgd2Ugb25seQ0KPiBzdXBwb3J0IHN5bW1ldHJpYyBl bmNyeXB0aW9uLCBhbmQgaGVuY2UgYSBpbnRlZ2VyIGtleSBpbmRleCBzaG91bGQgYmUNCj4gc3Vm ZmljaWVudC4NCj4gDQo+IEFsb25nIHNpbWlsYXIgbGluZXMuIFdoeSBoYXZlIGJvdGggSEYgJiBE U0EuIElzIGl0IGltcGxpY2l0IGZyb20gdGhlIHZhbHVlDQo+IG9mIHRoZSBhdHRyaWJ1dGUgKGUu Zy4gJ1NIQS0yNTYnIHZzIOKAmEVDRFNB4oCZKSB3aGV0aGVyIGEgc2hhcmVkIHNlY3JldCBvcg0K PiBkaWdpdGFsIHNpZ25hdHVyZSBhbGdvcml0aG0gaXMgYmVpbmcgdXNlZD8gT3IgaXMgdGhlIHB1 cnBvc2UgdG8gZW5hYmxlIFVSSQ0KPiB0byBiZSBzaWduZWQgKCYgc3Vic2VxdWVudGx5KSB2ZXJp ZmllZCB3aXRoIGVpdGhlciAoaWYgYm90aCBhcmUgc3BlY2lmaWVkKQ0KPiBvciB3aXRoIGJvdGg/ DQo+IA0KPiBbUmF5XSBXZSBleHBsaWNpdGx5IHJ1bGUgb3V0IGhhdmluZyBib3RoIEhGIGFuZCBE U0EgaW5mb3JtYXRpb24gZWxlbWVudHMNCj4gaW4gYSBzaW5nbGUgU2lnbmVkIFVSSS4gVGhlIHJl YXNvbiB3ZSB3ZW50IGZvciBzZXBhcmF0ZSBJRXMgaXMgdGhhdCBpdA0KPiBtYWtlcyBkZXNjcmli aW5nIHRoZSBhbGdvcml0aG0gc2xpZ2h0bHkgbGVzcyBjb21wbGV4LiBBbmQgZ2l2ZW4gdGhhdCB3 ZQ0KPiBiYXNlNjQtZW5jb2RlIHRoZSBmdWxsIFVSSSBTaWduaW5nIFBhY2thZ2UgYW55d2F5IGl0 IGRvZXNu4oCZdCByZWFsbHkgbWF0dGVyDQo+IGluIHRlcm1zIG9mIG5hbWVzcGFjZSBjb2xsaXNp b25zLg0KPiANCj4gU2VjdGlvbiAzLjE6DQo+IDgpYSkgc2F5cw0KPiAgICAgICAgICAgIE5vdGU6 IHRoZSBPcmlnaW5hbCBVUkkNCj4gICAgICAgICAgICBDb250YWluZXIgaW5mb3JtYXRpb24gZWxl bWVudCBNVVNUIGJlIHRoZSBsYXN0IGluZm9ybWF0aW9uDQo+ICAgICAgICAgICAgZWxlbWVudCBp biB0aGUgYnVmZmVyIGJlZm9yZSB0aGUgc2lnbmF0dXJlIGluZm9ybWF0aW9uDQo+ICAgICAgICAg ICAgZWxlbWVudC4NCj4gOCliKSBkb2VzIG5vdCBoYXZlIGEgc2ltaWxhciBzdGF0ZW1lbnQuIElz IHRoZSBVUkkgUGF0dGVybiBDb250YWluZXIgYWxzbw0KPiByZXF1aXJlZCAoTVVTVCkgdG8gYmUg dGhlIGxhc3QgaW5mb3JtYXRpb24gZWxlbWVudCBpbiB0aGUgYnVmZmVyPw0KPiANCj4gW1JheV0g VGhlIE9yaWdpbmFsIFVSSSBDb250YWluZXIgaXMgYSBzcGVjaWFsIGNhc2UgaW4gdGhlIHNlbnNl IHRoYXQgaXQNCj4gaXNu4oCZdCBjb21tdW5pY2F0ZWQgYWxvbmcgd2l0aCB0aGUgU2lnbmVkIFVS SSBidXQgaXMgcmVtb3ZlZCBmcm9tIHRoZQ0KPiBwYWNrYWdlIGFmdGVyIGhhdmluZyBjYWxjdWxh dGVkIHRoZSBzaWduYXR1cmUuDQo+IA0KPiBTZWN0aW9uIDUuNDoNCj4gSSBkb27igJl0IHNlZSB0 aGUgcG9pbnQgb2Yga2V5LWlkLCBoYXNoLWZ1bmN0aW9uLCBkaWdpdGFsLXNpZ25hdHVyZS0NCj4g YWxnb3JpdGhtICYgdmVyc2lvbi4NCj4gDQo+IFRoZSBhYnNlbmNlIG9mIHRoZSBWRVIgYXR0cmli dXRlIGlzIHNwZWNpZmllZCBieSB0aGUgZG9jdW1lbnQgdG8gbWVhbg0KPiBWZXJzaW9uIDEuIFRo ZSBhYnNlbmNlIG9mIHRoZSBIRiAmIERTQSBhdHRyaWJ1dGVzIGlzIHNwZWNpZmllZCBieSB0aGUN Cj4gdmVyc2lvbiBvZiB0aGUgc2lnbmluZyBtZXRob2QuIFZlcnNpb24gMSAodGhlIGRvY3VtZW50 KSBzcGVjaWZpZXMgdGhlbSBhcw0KPiBTSEEtMjU2ICYgRUNEU0EgYWNjb3JkaW5nbHkuIFdoeSBy ZS1zcGVjaWZ5IHRoaXMgaW4gdGhlIE1ldGFkYXRhIG9iamVjdD8NCj4gDQo+IFtSYXldIEnigJlt IG5vdCBzdXJlIEkgdW5kZXJzdGFuZC4gV2hhdCB0aGUgbWV0YWRhdGEg4oCYdmVyc2lvbuKAmSBm aWVsZCBpcyBmb3INCj4gaXMgdG8gYWxsb3cgQ0ROcyB0byBtYW5kYXRlIG90aGVyIHZlcnNpb25z IG9mIFVSSSBTaWduaW5nIGluIHRoZSBmdXR1cmUNCj4gKGUuZy4gYnkgc2V0dGluZyB0aGUgdmVy c2lvbiBwcm9wZXJ0eSB0byAyKS4gVGhlIHNhbWUgZ29lcyBmb3IgdGhlIGhhc2gtDQo+IGZ1bmN0 aW9uIGFuZCBkaWdpdGFsLXNpZ25hdHVyZS1hbGdvcml0aG0gcHJvcGVydGllczogYSBDRE4gY291 bGQgbWFuZGF0ZQ0KPiB0aGF0IFVSSSBTaWduaW5nIHZlcnNpb24gMSBpcyB1c2VkLCBidXQgc3Rp bGwgb25seSBhbGxvdyBTSEEtNTEyIGluc3RlYWQNCj4gb2YgU0hBLTI1NiBhcyB1c2VkIGJ5IGRl ZmF1bHQuDQo+IA0KPiBrZXktaWQgaXMgZm9yIHdoZW4gdGhlcmUgaXMgb25seSBhIHNpbmdsZSBr ZXkgaWQgYXMgYW4gb3B0aW1pc2F0aW9uIGlmDQo+IHNvbWVvbmUgd2FudHMgdG8gaGF2ZSBhIHNp bmdsZSBrZXkgaWQgJiBub3QgdHJhbnNtaXQgaXQgaW4gdGhlIHNpZ25lZCBVUkk/DQo+IERvZXM7 dCBzZWVtIHdvcnRoIGl0IHRvIG1lIGZvciBhIG5hcnJvdyBjb3JuZXIgY2FzZS4gSWYgaXQgaXMg d29ydGggaXQNCj4ganVzdCBzcGVjaWZ5IGlmIEtJRC9LSURfTlVNIGlzIG1pc3NpbmcgZnJvbSB0 aGUgc2lnbmVkIFVSSSBhbmQga2V5LWlkLXNldA0KPiBjb250YWlucyBhIHNpbmdsZSB2YWx1ZSB0 aGVuIHVzZSB0aGF0PyBPciBpZiBLSUQvS0lEX05VTSBpcyBtaXNzaW5nIHRoZQ0KPiBzdXJyb2dh dGUgY2hlY2tzIGFsbCBrZXlzIGluIGtleS1pZC1zZXQgYW5kIGlmIG9uZSBtYXRjaGVzIHRoZSBV UkkgaXMNCj4gYXV0aG9yaXNlZD8NCj4gDQo+IFtSYXldIFNlZSBlYXJsaWVyIGNvbW1lbnQNCj4g DQo+IChQZXJzb25hbGx5IEkgdGhpbmsgS0lEL0tJRF9OVU0gaW4gdGhlIFNpZ25lZCBVUmkgaXMg cG9pbnRsZXNzLCB0aGVpcg0KPiBtZWFuaW5nIGlzIGRpc3RyaWJ1dGVkIG91dCBvZiBiYW5kIHNv IHdoeSBub3QgYWxzbyBkaXN0cmlidXRlIHRoZSB2YWx1ZXMNCj4gb3V0IG9mIGJhbmQvdmlhIG1l dGFkYXRhIGFuZCBoYXZlIHRoZSBiZWhhdmlvdXIgYmUgYW55IHZhbGlkIGtleS9zZWNyZXQgaW4N Cj4ga2V5LWlkLXNldCBwYXNzZXMgYW5kIHJlbW92ZSBLSUQvS0lEX05VTSBbYW5kIG1heWJlIENL SV0gZnJvbSB0aGUgU2lnbmVkDQo+IFVSSSBlbnRpcmVseSkNCj4gDQo+IFtSYXldIEnigJltIG5v dCBzdXJlIEkgdW5kZXJzdGFuZC4gSG93IHdvdWxkIHRoZSBkQ0ROIGtub3cgd2hpY2ggS2V5IGlz IHVzZWQNCj4gdG8gY2FsY3VsYXRlIGEgZ2l2ZW4gc2lnbmF0dXJlPyBPciBhcmUgeW91IHNheWlu ZyBpdCBzaG91bGQganVzdCBjaGVjayBhbGwNCj4gcG9zc2libGUgS2V5cyB0aGF0IGFyZSBpbiB0 aGUgYWxsb3dlZCBzZXQ/DQo+IA0KPiBTZWN0aW9uIDUuNDoNCj4gVGhpcyBjb25mdXNlZCBtZToN Cj4gICAgTm90ZSB0aGF0IHRoZSBLZXkgSUQgaW5mb3JtYXRpb24gZWxlbWVudCBpcyBub3QgbmVl ZGVkIGlmIG9ubHkgb25lDQo+ICAgIGtleSBpcyBwcm92aWRlZCBieSB0aGUgQ1NQIG9yIHRoZSBV cHN0cmVhbSBDRE4gZm9yIHRoZSBjb250ZW50IGl0ZW0NCj4gICAgb3Igc2V0IG9mIGNvbnRlbnQg aXRlbXMgY292ZXJlZCBieSB0aGUgQ0ROSSBNZXRhZGF0YSBvYmplY3QuDQo+IHVudGlsIEkgcmVh bGlzZWQgdGhhdCDigJxLZXkgSUQgaW5mb3JtYXRpb24gZWxlbWVudOKAnSB3YXMgcmVmZXJyaW5n IHRvIHRoZQ0KPiBlbGVtZW50IG9mIHRoZSBTaWduZWQgVVJJIGFuZCBub3QgdGhlIGtleS1pZCBw cm9wZXJ0eSBvZiB0aGUgbWV0YWRhdGENCj4gb2JqZWN0IHNwZWNpZmllZCBpbW1lZGlhdGVseSBh Ym92ZSB0aGUgc2VudGVuY2UuIE1heWJlIHBocmFzZSBhcyDigJxOb3RlDQo+IHRoYXQgdGhlIEtl eSBJRCBpbmZvcm1hdGlvbiBlbGVtZW50IGRvZXMgbm90IG5lZWQgdG8gYmUgaW5jbHVkZWQgaW4g dGhlDQo+IFNpZ25lZCBVUkkgaWYgb25seSBvbmUga2V54oCmIg0KPiANCj4gW1JheV0gR29vZCBw b2ludC4gV2lsbCB1cGRhdGUuDQo+IA0KPiBTZWN0aW9uIDk6DQo+ICAgIEluIHRoZSBjYXNlIHdo ZXJlIGFzeW1tZXRyaWMga2V5cyBhcmUgdXNlZCwgdGhlIEtJRCBpbmZvcm1hdGlvbg0KPiAgICBl bGVtZW50IG1pZ2h0IGNvbnRhaW4gdGhlIFVSTCB0byB0aGUgcHVibGljIGtleS4gIFRvIHByZXZl bnQNCj4gICAgbWFsaWNpb3VzIGNsaWVudHMgZnJvbSBzaWduaW5nIHRoZWlyIG93biBVUklzIGFu ZCBpbnNlcnRpbmcgdGhlDQo+ICAgIGFzc29jaWF0ZWQgcHVibGljIGtleSBVUkwgaW4gdGhlIEtJ RCBmaWVsZCwgdGhlcmVieSBwYXNzaW5nIFVSSQ0KPiAgICB2YWxpZGF0aW9uLCBpdCBpcyBpbXBv cnRhbnQgdGhhdCBDRE5zIGNoZWNrIHdoZXRoZXIgdGhlIFVSSSBjb252ZXllZA0KPiAgICBpbiB0 aGUgS0lEIGZpZWxkIGlzIGluIHRoZSBhbGxvd2FibGUgc2V0IG9mIEtJRHMgYXMgbGlzdGVkIGlu IHRoZQ0KPiAgICBDRE5JIG1ldGFkYXRhIG9yIHNldCB2aWEgY29uZmlndXJhdGlvbi4NCj4gT3Ig c3BlY2lmeSB0aGluZ3MgYXMgSSBzdWdnZXN0IGFib3ZlIGFuZCByZW1vdmUgdGhlIG5lZWQgZm9y IEtJRC9LSURfTlVNDQo+IGJlaW5nIHByZXNlbnQgaW4gdGhlIFNpZ25lZCBVUkkgYW5kIHRoZXJl Zm9yZSB0aGlzIHNjZW5hcmlvL3Z1bG5lcmFiaWxpdHkNCj4gYmVpbmcgYWJsZSB0byBvY2N1ciBp biB0aGUgZmlyc3QgcGxhY2U/DQo+IA0KPiBbUmF5XSBTZWUgbXkgZWFybGllciBjb21tZW50LiBJ IGRvbuKAmXQgc2VlIGhvdyB0aGUgZENETiB3b3VsZCBldmVyIGJlIGFibGUNCj4gdG8ga25vdyB3 aGljaCBrZXkgd2FzIHVzZWQuIEJ1dCBtYXliZSBJ4oCZbSBtaXNzaW5nIHNvbWV0aGluZy4NCj4g DQo+IG5pdHM6DQo+IFNlY3Rpb24gMToNCj4gICAgVGhlIHByaW1hcnkgZ29hbCBvZiBVUkkgU2ln bmluZyBpcyB0byBtYWtlDQo+ICAgIHN1cmUgdGhhdCBvbmx5IGF1dGhvcml6ZWQgVXNlciBBZ2Vu dHMgKFVBcykgYXJlIGFibGUgdG8gYWNjZXNzIHRoZQ0KPiAgICBjb250ZW50LCB3aXRoIGEgQ1NQ IGJlaW5nIGFibGUgdG8gYXV0aG9yaXplIGV2ZXJ5IGluZGl2aWR1YWwgcmVxdWVzdC4NCj4gSXMg aXQgcmVhbGx5IHRvIGF1dGhvcmlzZSB0aGUgVXNlciBBZ2VudCBvciB0aGUgSVAgYWRkcmVzcyB0 aGUgVXNlciBBZ2VudA0KPiBpcyBiZWhpbmQ/IFRoZXJlIGlzIG5vdGhpbmcgaW4gdGhlIHNpZ25l ZCBVUkkgdGhhdCBpZGVudGlmaWVzIHRoZQ0KPiBwYXJ0aWN1bGFyIFVzZXIgQWdlbnQuIFVSSXMg Y2FuIHN0aWxsIHBvdGVudGlhbGx5IGJlIHNoYXJlZC9leGNoYW5nZWQNCj4gYmV0d2VlbiBVc2Vy IEFnZW50cyBiZWhpbmQgdGhlIHNhbWUgSVAgYWRkcmVzcy9zdWJuZXQsIGhvd2V2ZXIgdGhlIGlt cGFjdA0KPiBvZiBzdWNoIHNoYXJpbmcgaXMgbGltaXRlZC9hY2NlcHRhYmxlIGZvciB0aGUgdXNl IGNhc2UuDQo+IA0KPiBJIHdvdWxkIHMvVXNlciBBZ2VudHMgKFVBcykvSVAgYWRkcmVzcyhlcykv DQo+IA0KPiBTZWN0aW9uIDE6DQo+IEkgZG8gbm90IGtub3cgd2hhdCBpcyBtZWFudCBieSBkaXN0 cmlidXRpb24gcG9saWN5IGluIHRoaXMgc2VudGVuY2U6DQo+ICAgIFNwbGl0dGluZyB0aGUgcm9s ZSBvZiBwZXJmb3JtaW5nIHBlci1yZXF1ZXN0DQo+ICAgIGF1dGhvcml6YXRpb24gYnkgQ1NQIGFu ZCB0aGUgcm9sZSBvZiB2YWxpZGF0aW9uIG9mIHRoaXMgYXV0aG9yaXphdGlvbg0KPiAgICBieSB0 aGUgQ0ROIGFsbG93cyBhbnkgYXJiaXRyYXJ5IGRpc3RyaWJ1dGlvbiBwb2xpY3kgdG8gYmUgZW5m b3JjZWQNCj4gICAgYWNyb3NzIENETnMgd2l0aG91dCB0aGUgbmVlZCBvZiBDRE5zIHRvIGhhdmUg YW55IGF3YXJlbmVzcyBvZiB0aGUNCj4gICAgYWN0dWFsIENTUCBkaXN0cmlidXRpb24gcG9saWN5 Lg0KPiANCj4gU2VjdGlvbiAyLjI6DQo+ICAgIFRoZSBLZXkgSUQgSW5mb3JtYXRpb24gRWxlbWVu dCBpcyB1c2VkIHRvIHJldHJpZXZlZCB0aGUga2V5IHdoaWNoIGlzDQo+ICAgIG5lZWRlZCBhcyBp bnB1dCB0byB0aGUgYWxnb3JpdGhtIGZvciB2YWxpZGF0aW5nIHRoZSBTaWduZWQgVVJJLg0KPiBz L3JldHJpZXZlZC9yZXRyaWV2ZS8NCj4gDQo+IFNlY3Rpb24gMi40Og0KPiAgICBIb3dldmVyLCBh IGNsaWVudCBvciBDRE4gbWF5IGFwcGVuZCBvdGhlcg0KPiAgICBxdWVyeSBwYXJhbWV0ZXJzIHVu cmVsYXRlZCB0byBVUkkgU2lnbmluZyB0byB0aGUgU2lnbmVkIFVSSS4gIFN1Y2gNCj4gICAgYWRk aXRpb25hbCBxdWVyeSBwYXJhbWV0ZXJzIFNIT1VMRCBOT1QgdXNlIHRoZSBzYW1lIG5hbWUgYXMg dGhlIFVSSQ0KPiAgICBTaWduaW5nIFBhY2thZ2UgQXR0cmlidXRlIHRvIGF2b2lkIG5hbWVzcGFj ZSBjb2xsaXNpb24gYW5kIHBvdGVudGlhbA0KPiAgICBmYWlsdXJlIG9mIHRoZSBVUkkgU2lnbmlu ZyB2YWxpZGF0aW9uLg0KPiBzL2NsaWVudC9Vc2VyIEFnZW50LyBpcyBwcm9iYWJseSBtb3JlIGFs aWduZWQgd2l0aCB0aGUgcmVzdCBvZiB0aGUNCj4gZG9jdW1lbnQuIFRoZXJlIGFyZSBzb21lIG90 aGVyIHBsYWNlcyB3aGVyZSB5b3UgdXNlIGNsaWVudC4gUHJvYmFibHkgd29ydGgNCj4gYmVpbmcg Y29uc2lzdGVudCBhbmQgcGlja2luZyBvbmUgb2YgY2xpZW50IG9yIFVzZXIgQWdlbnQgdG8gdXNl DQo+IHRocm91Z2hvdXQuDQo+IA0KPiBTZWN0aW9uIDM6DQo+ICAgIEluIGNhc2UgdGhlDQo+ICAg IFVSSSBQYXR0ZXJuIENvbnRhaW5lciBpbmZvcm1hdGlvbiBlbGVtZW50IGlzIHVzZWQsIHRoZSBD U1AgaGFzIGZ1bGwNCj4gICAgZmxleGliaWxpdHkgdG8gc3BlY2lmeSB3aGljaCBlbGVtZW50cyBv ZiB0aGUgVVJJIChpbmNsdWRpbmcgdGhlDQo+ICAgIHNjaGVtZSBwYXJ0KSBhcmUgcHJvdGVjdGVk IGJ5IHRoZSBVUkkuDQo+IEkgdGhpbmsgeW91IG1lYW4g4oCccHJvdGVjdGVkIGJ5IHRoZSBTaWdu ZWQgVVJJ4oCdPw0KPiANCj4gU2VjdGlvbiAzOg0KPiAgICBUaGUgcHJvY2VzcyBvZiBnZW5lcmF0 aW5nIGEgU2lnbmVkIFVSSSBjYW4gYmUgZGl2aWRlZCBpbnRvIGZvdXIgc2V0cw0KPiAgICBvZiBz dGVwczogMSkgQ29tcG9zZSBVUkkgU2lnbmluZyBJRXMgd2l0aCBvcmlnaW5hbCBVUkkgLyBVUkkg cGF0dGVybiwNCj4gICAgMikgQ29tcHV0ZSB0aGUgVVJJIFNpZ25hdHVyZSwgMykgRW5jb2RlIHRo ZSBVUkkgU2lnbmluZyBQYWNrYWdlLCBhbmQNCj4gICAgNCkgQXNzZW1ibGUgdGhlIHBhcnRzIHRv IGNyZWF0ZSB0aGUgU2lnbmVkIFVSSS4NCj4gVGhpcyB3b3VsZCBiZSBiZXR0ZXIgYXMgYSBsaXN0 IG9mIG51bWJlcmVkIGJ1bGxldHMgSU1PLg0KPiANCj4gDQo+IFtSYXldIFRoYW5rcyBhZ2FpbiEN Cj4gDQo+IEhUSA0KPiBCZW4NCj4gDQo+ID4gT24gMjkgSnVuIDIwMTYsIGF0IDE0OjQzLCBLZXZp biBNYSBKIDxrZXZpbi5qLm1hQGVyaWNzc29uLmNvbT4gd3JvdGU6DQo+ID4NCj4gPiBIaSBBbGws DQo+ID4NCj4gPiAgQXMgcGVyIHRoZSBkaXNjdXNzaW9uIGluIEJBLCB3ZSBoYXZlIHJlY2VpdmVk IHRoZSB1cGRhdGVkIFVSSSBTaWduaW5nDQo+IGRyYWZ0IGFuZCB3b3VsZCBsaWtlIHRvIG1vdmUg aXQgdG8gV0dMQy4gIChMZWlmIGFuZCBQaGlsLCB5b3UncmUgdXAhKQ0KPiA+DQo+ID4gIFRvZGF5 IHdpbGwgYmVnaW4gdGhlIHR3by13ZWVrIFdHTEMgb246DQo+IGh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1pZXRmLWNkbmktdXJpLXNpZ25pbmctMDkNCj4gPg0KPiA+ICBQbGVhc2Ug c2VuZCBhbnkgY29tbWVudHMsIHF1ZXN0aW9ucywgY29uY2VybnMgdG8gdGhlIENETkkgbWFpbGlu ZyBsaXN0Og0KPiBjZG5pQGlldGYub3JnDQo+ID4NCj4gPiAgVGhlIFdHTEMgd2lsbCBlbmQgb24g V2VkbmVzZGF5IEp1bHkgMTMsIDIwMTYuDQo+ID4NCj4gPiB0aGFueCENCj4gPg0KPiA+IC0tICBL ZXZpbiBhbmQgRnJhbmNvaXMNCj4gPg0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+ID4gQ0ROaSBtYWlsaW5nIGxpc3QNCj4gPiBDRE5pQGlldGYu b3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pDQo+IA0K PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBDRE5p IG1haWxpbmcgbGlzdA0KPiBDRE5pQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vY2RuaQ0KPiANCj4gDQo+IFRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBp bmZvcm1hdGlvbiB0aGF0IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UNCj4gYXJlIG5v dCB0aGUgYWRkcmVzc2VlIG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlz dGFrZSwgeW91DQo+IGFyZSByZXF1ZXN0ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0 ZSB0aGUgbWVzc2FnZS4gVE5PIGFjY2VwdHMgbm8NCj4gbGlhYmlsaXR5IGZvciB0aGUgY29udGVu dCBvZiB0aGlzIGUtbWFpbCwgZm9yIHRoZSBtYW5uZXIgaW4gd2hpY2ggeW91IHVzZQ0KPiBpdCBh bmQgZm9yIGRhbWFnZSBvZiBhbnkga2luZCByZXN1bHRpbmcgZnJvbSB0aGUgcmlza3MgaW5oZXJl bnQgdG8gdGhlDQo+IGVsZWN0cm9uaWMgdHJhbnNtaXNzaW9uIG9mIG1lc3NhZ2VzLg0KPiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBDRE5pIG1haWxp bmcgbGlzdA0KPiBDRE5pQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vY2RuaQ0KDQoNClRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZvcm1hdGlvbiB0 aGF0IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUgYWRkcmVzc2Vl IG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwgeW91IGFyZSBy ZXF1ZXN0ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5P IGFjY2VwdHMgbm8gbGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlzIGUtbWFpbCwgZm9y IHRoZSBtYW5uZXIgaW4gd2hpY2ggeW91IHVzZSBpdCBhbmQgZm9yIGRhbWFnZSBvZiBhbnkga2lu ZCByZXN1bHRpbmcgZnJvbSB0aGUgcmlza3MgaW5oZXJlbnQgdG8gdGhlIGVsZWN0cm9uaWMgdHJh bnNtaXNzaW9uIG9mIG1lc3NhZ2VzLgo= From nobody Mon Jul 11 01:48:31 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAD4812B040 for ; Mon, 11 Jul 2016 01:48:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.487 X-Spam-Level: X-Spam-Status: No, score=-5.487 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zSxn7LAKMlvP for ; Mon, 11 Jul 2016 01:48:26 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73E6312B061 for ; Mon, 11 Jul 2016 01:48:24 -0700 (PDT) X-IronPort-AV: E=Sophos; i="5.28,345,1464645600"; d="scan'208,217"; a="10258876" Received: from exc-cashub02.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.221]) by mailhost1b.tno.nl with ESMTP; 11 Jul 2016 10:48:23 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB02.tsn.tno.nl ([fe80::8c02:de2a:3094:171%14]) with mapi id 14.03.0294.000; Mon, 11 Jul 2016 10:48:22 +0200 From: "Brandenburg, R. (Ray) van" To: Kevin Ma J , "cdni@ietf.org" Thread-Topic: New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has Thread-Index: AQHRwy2I54wAQQPyYkOQMx8zvzoaI6AKgsGggAQeLwCAAIwLcIAD7p6A Date: Mon, 11 Jul 2016 08:48:22 +0000 Message-ID: References: <90041886-D253-413F-B006-50BDA558EB12@tno.nl> <76576555-054B-4DB8-9E67-37A56C730CC6@tno.nl> In-Reply-To: Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.17.0.160611 x-originating-ip: [134.221.225.191] x-esetresult: clean, is OK x-esetid: 37303A29BC344A66657365 Content-Type: multipart/alternative; boundary="_000_F6DC5A312B674F7A89F7D4BBD1B695BFtnonl_" MIME-Version: 1.0 Archived-At: Subject: Re: [CDNi] New version (and IPR statement) of draft-brandenburg-cdni-uri-signing-for-has X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2016 08:48:30 -0000 --_000_F6DC5A312B674F7A89F7D4BBD1B695BFtnonl_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgS2V2aW4sDQoNCj4gVGhlIG9ubHkgcHVycG9zZSBmb3IgdGhlIFNUVCwgdGhlbiwgaXMgdG8g dGVsbCB0aGUgc2VydmVyIHRoZSBwcmVmZXJyZWQgY29udmV5YW5jZSBmb3Igc3Vic2VxdWVudCB0 b2tlbnMsIGluIHRoZSBjYXNlIHRoYXQgaXQgZG9lc24ndCBtYXRjaCB0aGUgY29udmV5YW5jZSBp biB0aGUgcmVxdWVzdD8gIEJ1dCB0aGF0IGlzIGFscmVhZHkgZGljdGF0ZWQgaW4gc2VjdGlvbiA1 Pw0KDQpDb3JyZWN0LiBUaGUgbWFpbiByZWFzb24gSSBhZGRlZCBTVFQgd2FzIGZvciBmdXR1cmUg ZXh0ZW5zaWJpbGl0eS4gSW1hZ2luZSBhbm90aGVyIGRvY3VtZW50IHdvdWxkIHNwZWNpZnkgYSBk aWZmZXJlbnQgdHJhbnNwb3J0IG1lY2hhbmlzbSAoZS5nLiBhIERBU0gtc3BlY2lmaWMgb25lKSB3 aXRoIFNUVD0yLiBUaGF0IGRvY3VtZW50IG1pZ2h0IHN0aWxsIHVzZSB0aGUgY3Jvc3MtZG9tYWlu IHJlZGlyZWN0aW9uIG1lY2hhbmlzbSBzcGVjaWZpZWQgaW4gNS4yIG9yIHNvbWV0aGluZyBzaW1p bGFyLiBJbiB0aGF0IGNhc2UsIHdoZW4gdGhlIENETiByZWNlaXZlcyBhbiBpbmNvbWluZyBTaWdu ZWQgVG9rZW4sIGl0IG5lZWRzIHRvIGtub3cgd2hldGhlciB0byBzZW5kIGl0IGFzIGEgQ29va2ll IChTVFQ9MSksIG9yIHZpYSBzb21lIG90aGVyIG1lY2hhbmlzbSAoU1RUPTIpLiBJIGd1ZXNzIHlv deKAmXJlIHJpZ2h0IHRoYXQgc2luY2UgdGhlIG5ldyBkb2N1bWVudCB3b3VsZCBvdmVycmlkZS91 cGRhdGUvZXh0ZW5kIHNlY3Rpb24gNS82LCBTVFQgZG9lc27igJl0IG5lY2Vzc2FyaWx5IG5lZWQg dG8gYmUgZGVmaW5lZCBieSBkcmFmdC1icmFuZGVuYnVyZy1jZG5pLWZvci1oYXMsIGJ1dCBjb3Vs ZCBiZSBkZWZpbmVkIGJ5IHRoaXMgbmV3IGRvY3VtZW50Lg0KDQpSYXkNCg0KRnJvbTogImtldmlu LmoubWFAZXJpY3Nzb24uY29tIiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+DQpEYXRlOiBGcmlk YXkgOCBKdWx5IDIwMTYgYXQgMjI6NTMNClRvOiBSYXkgdmFuIEJyYW5kZW5idXJnIDxyYXkudmFu YnJhbmRlbmJ1cmdAdG5vLm5sPiwgImNkbmlAaWV0Zi5vcmciIDxjZG5pQGlldGYub3JnPg0KU3Vi amVjdDogUkU6IE5ldyB2ZXJzaW9uIChhbmQgSVBSIHN0YXRlbWVudCkgb2YgZHJhZnQtYnJhbmRl bmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzDQoNCkhpIFJheSwNCg0KPiBOZXcgU1RUIHZh bHVlcyBhcmUgZXhwZWN0ZWQgdG8gdXBkYXRlIHNlY3Rpb25zIDUgYW5kIDYuIFRoZSByZWFzb24g dGhlIFNUVCB2YWx1ZSBpcyBtYWRlIGV4cGxpY2l0IGluIHRoZSB0b2tlbiBhcyB3ZWxsIGlzIHRv IGFsbG93IGltcGxlbWVudGF0aW9ucyB0aGF0IGhhdmUgcmVjZWl2ZWQgdGhlIFRva2VuIGluIHNv bWUgb3RoZXIgZmFzaGlvbiAoZS5nLiB0aHJvdWdoIHRoZSBjcm9zcy1kb21haW4gcmVkaXJlY3Rp b24gc2NlbmFyaW8gaW4gc2VjdGlvbiA1LjIpLCB0byBiZSBhd2FyZSBvZiB0aGUgdGFyZ2V0IHRy YW5zcG9ydCBtZWNoYW5pc20uDQoNCkkgZ3Vlc3MgYnkgaXNzdWUgaXMgdGhhdDogaW4gb3JkZXIg dG8gcmVhZCB0aGUgU1RUIHZhbHVlIGluIHRoZSB0b2tlbiwgdGhlIHNlcnZlciB3b3VsZCBuZWVk IHRvIGhhdmUgYWxyZWFkeSBmb3VuZCB0aGUgdG9rZW4gdmlhIHRoZSBwcm9jZXNzIGluIHNlY3Rp b24gNi4gIEluIHRoZSBub24tY3Jvc3MtZG9tYWluIGNhc2UsIHRoZSBzZXJ2ZXIgc2hvdWxkIGp1 c3QgdXNlIHdoYXRldmVyIGNvbnZleWFuY2Ugd2FzIHVzZWQgaW4gdGhlIHJlcXVlc3QgKHF1ZXJ5 IHN0cmluZywgdXJpIHBhdGgsIGNvb2tpZSwgZXRjLik/ICBUaGUgb25seSBwdXJwb3NlIGZvciB0 aGUgU1RULCB0aGVuLCBpcyB0byB0ZWxsIHRoZSBzZXJ2ZXIgdGhlIHByZWZlcnJlZCBjb252ZXlh bmNlIGZvciBzdWJzZXF1ZW50IHRva2VucywgaW4gdGhlIGNhc2UgdGhhdCBpdCBkb2Vzbid0IG1h dGNoIHRoZSBjb252ZXlhbmNlIGluIHRoZSByZXF1ZXN0PyAgQnV0IHRoYXQgaXMgYWxyZWFkeSBk aWN0YXRlZCBpbiBzZWN0aW9uIDU/ICBJZiBzZWN0aW9uIDUgc2F5cyB1c2UgYSBjb29raWUsIHVu bGVzcyB5b3UncmUgcmVkaXJlY3RpbmcsIHRoZW4gdXNlIHF1ZXJ5IHN0cmluZyAob3IgdXJpIHBh dGgpLCB0aGVuIHdlIGRvbid0IHJlYWxseSBuZWVkIFNUVD8NCg0KdGhhbnguDQoNCi0tICBLZXZp biBKLiBNYQ0KDQoNCkZyb206IEJyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW4gW21haWx0bzpyYXku dmFuYnJhbmRlbmJ1cmdAdG5vLm5sXQ0KU2VudDogRnJpZGF5LCBKdWx5IDA4LCAyMDE2IDg6MjQg QU0NClRvOiBLZXZpbiBNYSBKOyBjZG5pQGlldGYub3JnDQpTdWJqZWN0OiBSZTogTmV3IHZlcnNp b24gKGFuZCBJUFIgc3RhdGVtZW50KSBvZiBkcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWdu aW5nLWZvci1oYXMNCg0KSGkgS2V2aW4sDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldyEgUGxlYXNl IHNlZSBteSBjb21tZW50cyBpbmxpbmUuDQoNClJheQ0KDQpGcm9tOiAia2V2aW4uai5tYUBlcmlj c3Nvbi5jb208bWFpbHRvOmtldmluLmoubWFAZXJpY3Nzb24uY29tPiIgPGtldmluLmoubWFAZXJp Y3Nzb24uY29tPG1haWx0bzprZXZpbi5qLm1hQGVyaWNzc29uLmNvbT4+DQpEYXRlOiBUdWVzZGF5 IDUgSnVseSAyMDE2IGF0IDIzOjQzDQpUbzogUmF5IHZhbiBCcmFuZGVuYnVyZyA8cmF5LnZhbmJy YW5kZW5idXJnQHRuby5ubDxtYWlsdG86cmF5LnZhbmJyYW5kZW5idXJnQHRuby5ubD4+LCAiY2Ru aUBpZXRmLm9yZzxtYWlsdG86Y2RuaUBpZXRmLm9yZz4iIDxjZG5pQGlldGYub3JnPG1haWx0bzpj ZG5pQGlldGYub3JnPj4NClN1YmplY3Q6IFJFOiBOZXcgdmVyc2lvbiAoYW5kIElQUiBzdGF0ZW1l bnQpIG9mIGRyYWZ0LWJyYW5kZW5idXJnLWNkbmktdXJpLXNpZ25pbmctZm9yLWhhcw0KDQpIaSBS YXksDQoNCiAgKEFzIGFuIGluZGl2aWR1YWwpIEkgZmluYWxseSBmb3VuZCBzb21lIHRpbWUgdG8g cmVhZCB0aHJvdWdoIHRoZSB1cGRhdGVkIGRyYWZ0LiAgU29tZSBjb21tZW50cyBhbmQgcXVlc3Rp b25zIGJlbG93Lg0KDQp0aGFueCENCg0KLS0gIEtldmluIEouIE1hDQoNCi0gc2VjdGlvbiA0LjEs IHN0ZXAgMy5FOiBXaGF0IGlmIHRoZSB1c2VyIHBhdXNlcywgb3IgdGhlcmUgaXMgYW4gYWQgaW5z ZXJ0ZWQsIGFuZCB0aGUgdG9rZW4gZXhwaXJlcz8gIFVuZGVyc3Rvb2QgdGhhdCBpdCdzIHByb2Jh Ymx5IHVwIHRvIHRoZSBtZWRpYSBwbGF5ZXIgdG8gaGFuZGxlIHRoYXQgY2FzZSwgYnV0IHdvdWxk IHRoZXkgbmVlZCB0byBnbyBiYWNrIHRvIHRoZSBDUCB0byBnZXQgYSBuZXcgdmFsaWQgbWFuaWZl c3QgVVJMPyAgV2hpY2ggd291bGQgaGF2ZSBhIHRva2VuIHRoYXQgaXMgdmFsaWQgZm9yIHRoZSBj aHVua3MgYXMgd2VsbD8NCg0KSXTigJlzIHVwIHRvIHRoZSBtZWRpYSBwbGF5ZXIgdG8gbWFrZSBz dXJlIGl0IHJlZnJlc2hlcyB0aGUgdG9rZW4sIGVpdGhlciBiZWZvcmUgb3IgYWZ0ZXIgaXQgKGFs dGhvdWdoIHRoZSBmb3JtZXIgbWlnaHQgYmUgZWFzaWVyKS4gT24gd2F5IHRvIGRvIHRoYXQgd291 bGQgYmUgdG8gc2VuZCBhbiBIVFRQIEhFQUQgcmVxdWVzdCBmb3IgYW4gYXJiaXRyYXJ5IHNlZ21l bnQgdG8gdGhlIENETi4gTm90ZSB0aGF0IHRoaXMgZG9lcyBhc3N1bWUgdGhhdCB0aGUgbWVkaWEg cGxheWVyIGlzIGF3YXJlIG9mIHRoZSBhcHByb3hpbWF0ZSB2YWxpZGl0eSB0aW1lIG9mIGEgdG9r ZW4uIEluIHByYWN0aWNlIHRoaXMgaXMgc29tZXRoaW5nIHRoYXQgY291bGQgYmUgY29tbXVuaWNh dGVkIGluIGEgbWFuaWZlc3QgZmlsZSwgc3VjaCBhcyBhIERBU0ggTVBELiBJdOKAmXMgb25lIG9m IHRoZSB0b3BpY3MgZm9yIHdoaWNoIGl0IG1pZ2h0IGJlIHdvcnRoIGNvbnNpZGVyaW5nIHNlbmRp bmcgaW4gYSBsaWFpc29uIHRvIE1QRUcsIGlmIHRoZSBXRyBzaG91bGQgZGVjaWRlIHRvIGFkb3B0 IHRoaXMgd29yay4NCg0KV2hhdCBJIHdvdWxkIGxpa2UgdG8gZG8gaW4gYSBuZXh0IGl0ZXJhdGlv biBvZiB0aGlzIGRvY3VtZW50IGlzIHRvIGFkZCBhIHNlbnRlbmNlIGFsb25nIHRoZSBsaW5lcyBv ZiDigJhVcG9uIHJlY2VpdmluZyBhbiBIVFRQIEhFQUQgcmVxdWVzdCwgYSBDRE4gU0hPVUxEIHZh bGlkYXRlIHRoZSBpbmNvbWluZyBTaWduZWQgVG9rZW4gYW5kIGdlbmVyYXRlIGEgbmV3IG9uZSBp biB0aGUgc2FtZSB3YXkgYXMgaXQgd291bGQgZG8gZm9yIGFuIEhUVFAgR0VU4oCZLg0KDQotIHNl Y3Rpb24gNC4xLCBzdGVwcyA5LCAxMS5CLCAxMS5FLCAxMi5CLCBhbmQgMTIuRiwgc2VjdGlvbiA3 LjEgc3RlcCAxLCBzZWN0aW9uIDcuMiBzdGVwcyAzLkEuZCBhbmQgMy5CLmQsIGFuZCBzZWN0aW9u IDcuNCBzdGVwcyAxMC5BLjIsIDEwLkEuNSwgMTAuQi4yLCBhbmQgMTAuQi42OiBTaG91bGQgdGhl IFVQQyBiZSBwZXJjZW50LWVuY29kZWQ/ICBBbmQgc2hvdWxkIENJUCBiZSBlbmNyeXB0ZWQ/DQoN CkNvcnJlY3QuIFRoaXMgdmVyc2lvbiBvZiBkcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWdu aW5nLWZvci1oYXMgaGFzbuKAmXQgeWV0IGJlZW4gYnJvdWdodCBpbiBsaW5lIHdpdGggdGhlIG1v c3QgcmVjZW50IHZlcnNpb24gb2YgZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nLCB3aGVyZSBw ZXJjZW50LWVuY29kaW5nIG9mIHRoZSBVUEMgd2FzIGludHJvZHVjZWQuIEluIHRoZSBzYW1lIHdh eSwgQ0lQIHNob3VsZCBiZSBlbmNyeXB0ZWQuIEnigJlsbCBmaXggdGhpcyBpbiB0aGUgbmV4dCBp dGVyYXRpb24uDQoNCi0gc2VjdGlvbiA0LjEsIHN0ZXBzIDksIDExLkIsIDExLkUsIDEyLkIsIDEy LkYsIHNlY3Rpb24gNS4yLCBhbmQgc2VjdGlvbiA3LjEgc3RlcCAxOiBJZiB0aGUgdG9rZW4gaXMg b25seSBnb29kIGZvciBzZWdtZW50cywgYnV0IGlzIGF0dGFjaGVkIHRvIHRoZSBtYW5pZmVzdCBy ZXF1ZXN0LCBkb2VzIHRoYXQgbWVhbiB0aGF0IHRoZXJlIGlzIG5vIHNpZ25hdHVyZSB2YWxpZGF0 aW9uIG9uIHRoZSBtYW5pZmVzdCByZXF1ZXN0PyAgSW4gdGhlIDJ4eCBub24tcmVkaXJlY3QgY2Fz ZSwgd291bGQgeW91IGV4cGVjdCBhIHYxIG1hbmlmZXN0IHNpZ25hdHVyZSBiZSBpbiB0aGUgcXVl cnkgc3RyaW5nIGFuZCBhIHNlcGFyYXRlIHYyIGNodW5rIHNpZ25hdHVyZSBiZSBpbiB0aGUgY29v a2llPw0KDQpNYXliZSB0aGUgZG9jdW1lbnQgc2hvdWxkIGJlIGNsZWFyZXIgb24gdGhpcy4gTXkg aW50ZW50aW9uIHdhcyB0aGF0IFNpZ25lZCBUb2tlbnMgc2hvdWxkIGJlIHVzZWQgZm9yIGJvdGgg bWFuaWZlc3QgYW5kIHNlZ21lbnQgcmVxdWVzdHMsIGVzcGVjaWFsbHkgZ2l2ZW4gdGhhdCB0aGUg MjAwIE9LIGZvciB0aGUgaW5pdGlhbCBtYW5pZmVzdCB3aWxsIGNvbnRhaW4gdGhlIGZpcnN0IFNp Z25lZCBUb2tlbi4gSW4gb3RoZXIgd29yZHMsIHRoZSBVUEMgc2hvdWxkIGJlIGNob3NlbiBpbiBh IHdheSB0aGF0IGJvdGggdGhlIG1hbmlmZXN0IGxvY2F0aW9uIGFuZCB0aGUgc2VnbWVudCBsb2Nh dGlvbiBpcyBjb3ZlcmVkIGJ5IHRoZSBVUEMuDQoNCi0gc2VjdGlvbiA0LjEsIHN0ZXAgMTAsIHNl Y3Rpb25zIDUvNiwgYW5kIHNlY3Rpb24gNy40IHN0ZXAgOTogU2VlbXMgbGlrZSBhIGNoaWNrZW4g YW5kIGVnZyBwcm9ibGVtLiAgVGhlIFNUVCBzYXlzIHRoYXQgdGhlIHRva2VuIGlzIGluIHRoZSBj b29raWUsIGJ1dCB0aGUgU1RUIGlzIGluIHRoZSB0b2tlbiB0aGF0J3MgaW5zaWRlIHRoZSBjb29r aWUuICBEb2VzIHRoZSBpbml0aWFsIHRva2VuIGFsd2F5cyBoYXZlIHRvIGJlIGluIGEgdG9rZW4/ ICBTaG91bGQgdGhlIGluaXRpYWwgdG9rZW4gYWx3YXlzIGJlIGluIHRoZSBxdWVyeSBzdHJpbmcg dG8gYmUgY29tcGF0aWJsZSB3aXRoIHYxLCBzaW5jZSB0aGUgVkVSPTIgaXMgYWxzbyBpbnNpZGUg dGhlIHRva2VuIGluc2lkZSB0aGUgY29va2llPyAgRnJvbSB0aGUgY2xpZW50IHBlcnNwZWN0aXZl LCBzaG91bGQgb25seSBzdWJzZXF1ZW50IHRva2VucyBiZSBpbiB0aGUgY29va2llPyAgRnJvbSB0 aGUgQ0ROIHBlcnNwZWN0aXZlLCB1bmxlc3MgcGFzc2VkIGluIHRoZSBtZXRhZGF0YSwgaG93IHdp bGwgdGhlIENETiBrbm93IHdoZXJlIHRvIGxvb2sgZm9yIHRoZSB0b2tlbiwgb3IgZG9lcyBpdCBh bHdheXMgY2hlY2sgZXZlcnl3aGVyZT8gIElmIHRoZSBwcm9jZXNzIGlzIHRvIGFsd2F5cyBjaGVj ayB0aGUgcXVlcnkgc3RyaW5nIGZpcnN0IGFuZCB0aGUgY29va2llIHNlY29uZCwgZG8gd2UgZXZl biBuZWVkIFNUVD8gIE5ldyBTVFQgdmFsdWVzIGFyZSBnb2luZyB0byByZXF1aXJlIGFuZCB1cGRh dGUgdG8gdGhlIHByb2NlZHVyZSBpbiBzZWN0aW9uIDYsIGFzIHdlbGwgYXMgcmVnaXN0cmF0aW9u IG9mIG5ldyBTVFQgdmFsdWVzPw0KDQpOZXcgU1RUIHZhbHVlcyBhcmUgZXhwZWN0ZWQgdG8gdXBk YXRlIHNlY3Rpb25zIDUgYW5kIDYuIFRoZSByZWFzb24gdGhlIFNUVCB2YWx1ZSBpcyBtYWRlIGV4 cGxpY2l0IGluIHRoZSB0b2tlbiBhcyB3ZWxsIGlzIHRvIGFsbG93IGltcGxlbWVudGF0aW9ucyB0 aGF0IGhhdmUgcmVjZWl2ZWQgdGhlIFRva2VuIGluIHNvbWUgb3RoZXIgZmFzaGlvbiAoZS5nLiB0 aHJvdWdoIHRoZSBjcm9zcy1kb21haW4gcmVkaXJlY3Rpb24gc2NlbmFyaW8gaW4gc2VjdGlvbiA1 LjIpLCB0byBiZSBhd2FyZSBvZiB0aGUgdGFyZ2V0IHRyYW5zcG9ydCBtZWNoYW5pc20uDQoNCi0g c2VjdGlvbiA1LjI6IFRoZSB2MSBkcmFmdCBhbHNvIHN1cHBvcnRzIHRva2VuIGFzIGEgcGF0aCBw YXJhbWV0ZXI7IGlzIHRoYXQgaW50ZW50aW9uYWxseSBvbWl0dGVkIGhlcmU/DQoNClRoZSBwcmlt YXJ5IHJlYXNvbiBpdOKAmXMgbm90IGhlcmUgaXMgdGhhdCB0aGlzIGRyYWZ0IHByZWRhdGVzIHRo ZSBsYXRlc3QgdmVyc2lvbiBvZiBkcmFmdC1pZXRmLWNkbmktdXJpLXNpZ25pbmcgd2hlcmUgc3Vw cG9ydCBmb3IgcGF0aCBwYXJtZXRlciB3YXMgaW50cm9kdWNlZC4gSG93ZXZlciwgSSBuZWVkIHRv IGdpdmUgaXQgc29tZSB0aG91Z2h0IHdoZXRoZXIgaXQgbWFrZXMgc2Vuc2UgdG8gc3VwcG9ydCB0 aGF0IHNjZW5hcmlvIGhlcmUgYXMgd2VsbCwgZ2l2ZW4gdGhhdCB0aGUgbWFpbiByZWFzb24gZm9y IHVzaW5nIHBhdGggcGFyYW1ldGVycyBpbiB2MSB3b3VsZCBiZSBjYXNlcyB3aGVyZSB5b3UgZG9u 4oCZdCBoYXZlIHNlZ21lbnQtbGV2ZWwgYXV0aGVudGljYXRpb24gYXMgZGVmaW5lZCBpbiB0aGlz IGRyYWZ0Lg0KDQoNCi0gc2VjdGlvbiA3LjEgc3RlcHMgMiBhbmQgMzogSSB3b3VsZCBleHBlY3Qg dGhhdCB2MiB3b3VsZCBoYXZlIGEgbmV3IEdlbmVyaWNNZXRhZGF0YSBwdHlwZSAoTUkuVXJpU2ln bmluZy52Mj8pIGFuZCB0aGF0IHB0eXBlIHdvdWxkIHRlbGwgdGhlIGRDRE4gd2hhdCBpdCBzaG91 bGQgZXhwZWN0IGluIHRoZSB0b2tlbj8gIEl0IHdvdWxkIGJlIG5pY2UgaWYgdGhlIGRyYWZ0IGNv dWxkIGRlZmluZSB2MiBzdWNoIHRoYXQgaXQgc3VwcG9ydGVkIGJvdGggVkVSPTEgYW5kIFZFUj0y LCBzbyB0aGF0IHRoZSBNSS5VcmlTaWduaW5nLnYyIG1ldGFkYXRhIGNvdWxkIGJlIGEgc3VwZXJz ZXQgb2YgaW5mb3JtYXRpb24gbmVlZGVkIHRvIHByb2Nlc3MgYWxsIGtub3duIHRva2VuIHR5cGVz LCBhbmQgbWFrZSB0aGUgdG9rZW4gcHJvY2Vzc2luZyBhIHJ1bnRpbWUgZGVjaXNpb24/DQoNCkkg bGlrZSB0aGF0LiBJIG5lZWQgdG8gZGVsdmUgaW50byB0aGUgTWV0YWRhdGEgYXNwZWN0cyBvZiB2 MSBhZ2FpbiB0byBzZWUgZXhhY3RseSBob3cgd2UgY291bGQgYWNoaWV2ZSBzdWNoIGEgdGhpbmcu IE1heWJlIHNvbWV0aGluZyB0byBkaXNjdXNzIGluIEJlcmxpbi4NCg0KLSBzZWN0aW9uIDcuNCwg Z2VuZXJhbDogVGhpcyBkcmFmdCByZW1vdmVzIHRoZSAiTm90ZSB0aGF0IHJlLXNpZ25pbmcgYSBV UkkgTVVTVC4uLiIgdGV4dCBmcm9tIHRoZSB2MSBkcmFmdChzZWN0aW9uIDMuMSkuICBTaW5jZSB0 aGlzIGlzIGFib3V0IHJlc2lnbmluZywgSSB0aGluayB0aGUgdGV4dCBhYm91dCBtYWludGFuaW5n IHRoZSBzYW1lIHZhbHVlcyBzaG91bGQgYmUgYWRkZWQgaGVyZSwgc3BlY2lmaWNhbGx5IGZvciBL SUQvS0lEX05VTSwgSE1BQywgYW5kIERTQS4NCg0KR29vZCBwb2ludC4NCg0KDQotIERvIHlvdSBo YXZlIGFuIGlkZWEgYXMgdG8gd2hhdCBhZGRpdGlvbmFsIHJlZ2lzdHJpZXMsIG1ldGFkYXRhLCBh bmQvb3IgbG9nZ2luZyBmaWVsZHMgd2lsbCBiZSBuZWVkZWQ/ICBXaWxsIHRoZSBuZXcgcHR5cGUg anVzdCBiZSBNSS5VcmlTaWduaW5nLnYyPw0KDQpUbyBiZSBjb21wbGV0ZWx5IGhvbmVzdCwgSSBo YXZlbuKAmXQgZ2l2ZW4gdGhlIE1ldGFkYXRhIGFzcGVjdHMgYSBsb3Qgb2YgdGhvdWdodCB5ZXQu IEnigJlsbCBjb21lIGJhY2sgdG8geW91IG9uIHRoYXQgb25lLg0KDQpUaGFua3MgYWdhaW4hDQoN ClJheQ0KDQoNCkZyb206IENETmkgW21haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJl aGFsZiBPZiBCcmFuZGVuYnVyZywgUi4gKFJheSkgdmFuDQpTZW50OiBGcmlkYXksIEp1bmUgMTAs IDIwMTYgMTE6MzQgQU0NClRvOiBjZG5pQGlldGYub3JnPG1haWx0bzpjZG5pQGlldGYub3JnPg0K U3ViamVjdDogW0NETmldIE5ldyB2ZXJzaW9uIChhbmQgSVBSIHN0YXRlbWVudCkgb2YgZHJhZnQt YnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzDQoNCkhpIGFsbCwNCg0KQXMgeW91 IG1pZ2h0IGhhdmUgc2VlbiwgSeKAmXZlIHJlY2VudGx5IHVwbG9hZGVkIGEgbmV3IHZlcnNpb24g b2YgZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzICgtMDMpLg0KDQpo dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2ln bmluZy1mb3ItaGFzLTAzDQoNCldoYXQgaXMgaW1wb3J0YW50IHRvIG5vdGUgaXMgdGhhdCBLUE4g aGFzIHVwZGF0ZWQgaXTigJlzIElQUiBzdGF0ZW1lbnQgb24gdGhpcyBkb2N1bWVudCB0byBiZSBp biBsaW5lIHdpdGggdGhlIElQUiBzdGF0ZW1lbnRzIHRoYXQgaGF2ZSBiZWVuIGZpbGVkIG9uIG90 aGVyIENETkkgZG9jdW1lbnRzIChpLmUuIOKAnFJveWFsdHktRnJlZSwgUmVhc29uYWJsZSBhbmQg Tm9uLURpc2NyaW1pbmF0b3J5IExpY2Vuc2UgdG8gQWxsIEltcGxlbWVudGVyc+KAnSkuIEhvcGVm dWxseSB0aGlzIGNsZWFycyB1cCB0aGUgbGVuZ3RoeSBJUFIgZGlzY3Vzc2lvbiB3ZeKAmXZlIGJl ZW4gaGF2aW5nIGFyb3VuZCB0aGlzIGRvY3VtZW50IHNvIHRoYXQgd2UgY2FuIGZvY3VzIG9uIHRo ZSB0ZWNobmljYWwgYXNwZWN0cyBhZ2Fpbi4NCg0KTG9va2luZyBmb3J3YXJkIHRvIHlvdXIgZmVl ZGJhY2ssDQpSYXkNCg0KVGhpcyBtZXNzYWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQg aXMgbm90IGludGVuZGVkIGZvciB5b3UuIElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3Ig aWYgdGhpcyBtZXNzYWdlIHdhcyBzZW50IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVl c3RlZCB0byBpbmZvcm0gdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNj ZXB0cyBubyBsaWFiaWxpdHkgZm9yIHRoZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3IgdGhl IG1hbm5lciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJl c3VsdGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21p c3Npb24gb2YgbWVzc2FnZXMuDQo= --_000_F6DC5A312B674F7A89F7D4BBD1B695BFtnonl_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6QXJpYWw7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAy IDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCXBh bm9zZS0xOjIgNyAzIDkgMiAyIDUgMiA0IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToi Q2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYg NCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxp Lk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5N c29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1 NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1h cmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUs IGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseTpUYWhvbWE7fQ0Kc3Bhbi5IVE1M UHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hh ciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZv cm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLkJhbGxvb25UZXh0 Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1w cmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWls eTpUYWhvbWE7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7 DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxT dHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMw0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3Rl eHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjQNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxT dHlsZTI1DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OkNh bGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lucw0KCXttc28tc3R5bGUtdHlw ZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6 ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7 c2l6ZTo1OTUuMHB0IDg0Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBw dDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+ DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYz QzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+SGkgS2V2aW4sPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mZ3Q7PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4gVGhlIG9ubHkgcHVycG9zZSBmb3IgdGhlIFNUVCwgdGhlbiwgaXMgdG8gdGVsbCB0aGUg c2VydmVyIHRoZSBwcmVmZXJyZWQgY29udmV5YW5jZSBmb3Igc3Vic2VxdWVudCB0b2tlbnMsIGlu IHRoZSBjYXNlIHRoYXQgaXQgZG9lc24ndCBtYXRjaA0KIHRoZSBjb252ZXlhbmNlIGluIHRoZSBy ZXF1ZXN0PyAmbmJzcDtCdXQgdGhhdCBpcyBhbHJlYWR5IGRpY3RhdGVkIGluIHNlY3Rpb24gNT88 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+Q29ycmVjdC4gVGhlIG1haW4gcmVhc29uIEkgYWRkZWQg U1RUIHdhcyBmb3IgZnV0dXJlIGV4dGVuc2liaWxpdHkuIEltYWdpbmUgYW5vdGhlciBkb2N1bWVu dCB3b3VsZCBzcGVjaWZ5IGEgZGlmZmVyZW50IHRyYW5zcG9ydCBtZWNoYW5pc20gKGUuZy4gYSBE QVNILXNwZWNpZmljIG9uZSkgd2l0aCBTVFQ9Mi4gVGhhdCBkb2N1bWVudCBtaWdodCBzdGlsbCB1 c2UNCiB0aGUgY3Jvc3MtZG9tYWluIHJlZGlyZWN0aW9uIG1lY2hhbmlzbSBzcGVjaWZpZWQgaW4g NS4yIG9yIHNvbWV0aGluZyBzaW1pbGFyLiBJbiB0aGF0IGNhc2UsIHdoZW4gdGhlIENETiByZWNl aXZlcyBhbiBpbmNvbWluZyBTaWduZWQgVG9rZW4sIGl0IG5lZWRzIHRvIGtub3cgd2hldGhlciB0 byBzZW5kIGl0IGFzIGEgQ29va2llIChTVFQ9MSksIG9yIHZpYSBzb21lIG90aGVyIG1lY2hhbmlz bSAoU1RUPTIpLiBJIGd1ZXNzIHlvdeKAmXJlIHJpZ2h0IHRoYXQNCiBzaW5jZSB0aGUgbmV3IGRv Y3VtZW50IHdvdWxkIG92ZXJyaWRlL3VwZGF0ZS9leHRlbmQgc2VjdGlvbiA1LzYsIFNUVCBkb2Vz buKAmXQgbmVjZXNzYXJpbHkgbmVlZCB0byBiZSBkZWZpbmVkIGJ5IGRyYWZ0LWJyYW5kZW5idXJn LWNkbmktZm9yLWhhcywgYnV0IGNvdWxkIGJlIGRlZmluZWQgYnkgdGhpcyBuZXcgZG9jdW1lbnQu DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlJheTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20g MGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mcXVvdDtrZXZp bi5qLm1hQGVyaWNzc29uLmNvbSZxdW90OyAmbHQ7a2V2aW4uai5tYUBlcmljc3Nvbi5jb20mZ3Q7 PGJyPg0KPGI+RGF0ZTogPC9iPkZyaWRheSA4IEp1bHkgMjAxNiBhdCAyMjo1Mzxicj4NCjxiPlRv OiA8L2I+UmF5IHZhbiBCcmFuZGVuYnVyZyAmbHQ7cmF5LnZhbmJyYW5kZW5idXJnQHRuby5ubCZn dDssICZxdW90O2NkbmlAaWV0Zi5vcmcmcXVvdDsgJmx0O2NkbmlAaWV0Zi5vcmcmZ3Q7PGJyPg0K PGI+U3ViamVjdDogPC9iPlJFOiBOZXcgdmVyc2lvbiAoYW5kIElQUiBzdGF0ZW1lbnQpIG9mIGRy YWZ0LWJyYW5kZW5idXJnLWNkbmktdXJpLXNpZ25pbmctZm9yLWhhczxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+SGkgUmF5LDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jmd0OyA8L3NwYW4+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdCI+TmV3IFNUVCB2YWx1ZXMgYXJlIGV4cGVjdGVkIHRvIHVwZGF0ZSBzZWN0aW9ucyA1IGFu ZCA2LiBUaGUgcmVhc29uIHRoZSBTVFQgdmFsdWUgaXMgbWFkZSBleHBsaWNpdCBpbiB0aGUgdG9r ZW4gYXMgd2VsbCBpcyB0byBhbGxvdyBpbXBsZW1lbnRhdGlvbnMgdGhhdCBoYXZlIHJlY2VpdmVk IHRoZSBUb2tlbiBpbiBzb21lIG90aGVyIGZhc2hpb24gKGUuZy4gdGhyb3VnaCB0aGUgY3Jvc3Mt ZG9tYWluDQogcmVkaXJlY3Rpb24gc2NlbmFyaW8gaW4gc2VjdGlvbiA1LjIpLCB0byBiZSBhd2Fy ZSBvZiB0aGUgdGFyZ2V0IHRyYW5zcG9ydCBtZWNoYW5pc20uDQo8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkkgZ3Vlc3MgYnkgaXNzdWUg aXMgdGhhdDogaW4gb3JkZXIgdG8gcmVhZCB0aGUgU1RUIHZhbHVlIGluIHRoZSB0b2tlbiwgdGhl IHNlcnZlciB3b3VsZCBuZWVkIHRvIGhhdmUgYWxyZWFkeSBmb3VuZCB0aGUgdG9rZW4gdmlhIHRo ZSBwcm9jZXNzIGluIHNlY3Rpb24gNi4mbmJzcDsgSW4gdGhlIG5vbi1jcm9zcy1kb21haW4NCiBj YXNlLCB0aGUgc2VydmVyIHNob3VsZCBqdXN0IHVzZSB3aGF0ZXZlciBjb252ZXlhbmNlIHdhcyB1 c2VkIGluIHRoZSByZXF1ZXN0IChxdWVyeSBzdHJpbmcsIHVyaSBwYXRoLCBjb29raWUsIGV0Yy4p PyZuYnNwOyBUaGUgb25seSBwdXJwb3NlIGZvciB0aGUgU1RULCB0aGVuLCBpcyB0byB0ZWxsIHRo ZSBzZXJ2ZXIgdGhlIHByZWZlcnJlZCBjb252ZXlhbmNlIGZvciBzdWJzZXF1ZW50IHRva2Vucywg aW4gdGhlIGNhc2UgdGhhdCBpdCBkb2Vzbid0IG1hdGNoDQogdGhlIGNvbnZleWFuY2UgaW4gdGhl IHJlcXVlc3Q/ICZuYnNwO0J1dCB0aGF0IGlzIGFscmVhZHkgZGljdGF0ZWQgaW4gc2VjdGlvbiA1 PyZuYnNwOyBJZiBzZWN0aW9uIDUgc2F5cyB1c2UgYSBjb29raWUsIHVubGVzcyB5b3UncmUgcmVk aXJlY3RpbmcsIHRoZW4gdXNlIHF1ZXJ5IHN0cmluZyAob3IgdXJpIHBhdGgpLCB0aGVuIHdlIGRv bid0IHJlYWxseSBuZWVkIFNUVD88L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPnRoYW54Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+LS0mbmJzcDsgS2V2aW4gSi4gTWE8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6VGFob21hIj5Gcm9tOjwvc3Bhbj48 L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6VGFob21hIj4gQnJh bmRlbmJ1cmcsIFIuIChSYXkpIHZhbiBbbWFpbHRvOnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmxd DQo8YnI+DQo8Yj5TZW50OjwvYj4gRnJpZGF5LCBKdWx5IDA4LCAyMDE2IDg6MjQgQU08YnI+DQo8 Yj5Ubzo8L2I+IEtldmluIE1hIEo7IGNkbmlAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4g UmU6IE5ldyB2ZXJzaW9uIChhbmQgSVBSIHN0YXRlbWVudCkgb2YgZHJhZnQtYnJhbmRlbmJ1cmct Y2RuaS11cmktc2lnbmluZy1mb3ItaGFzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhpIEtldmluLDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhhbmtzIGZvciB0aGUg cmV2aWV3ISBQbGVhc2Ugc2VlIG15IGNvbW1lbnRzIGlubGluZS48L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlJheTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNv bGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mcXVvdDs8YSBocmVmPSJtYWlsdG86a2V2aW4uai5t YUBlcmljc3Nvbi5jb20iPmtldmluLmoubWFAZXJpY3Nzb24uY29tPC9hPiZxdW90OyAmbHQ7PGEg aHJlZj0ibWFpbHRvOmtldmluLmoubWFAZXJpY3Nzb24uY29tIj5rZXZpbi5qLm1hQGVyaWNzc29u LmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlR1ZXNkYXkgNSBKdWx5IDIwMTYgYXQgMjM6 NDM8YnI+DQo8Yj5UbzogPC9iPlJheSB2YW4gQnJhbmRlbmJ1cmcgJmx0OzxhIGhyZWY9Im1haWx0 bzpyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sIj5yYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPC9h PiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIj5jZG5pQGlldGYub3Jn PC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciPmNkbmlAaWV0Zi5v cmc8L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SRTogTmV3IHZlcnNpb24gKGFuZCBJUFIg c3RhdGVtZW50KSBvZiBkcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXM8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkhpIFJheSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAoQXMgYW4gaW5kaXZpZHVh bCkgSSBmaW5hbGx5IGZvdW5kIHNvbWUgdGltZSB0byByZWFkIHRocm91Z2ggdGhlIHVwZGF0ZWQg ZHJhZnQuJm5ic3A7IFNvbWUgY29tbWVudHMgYW5kIHF1ZXN0aW9ucyBiZWxvdy48L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPnRoYW54ITwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ LS0mbmJzcDsgS2V2aW4gSi4gTWE8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlvbiA0LjEsIHN0ZXAgMy5FOiBXaGF0IGlmIHRo ZSB1c2VyIHBhdXNlcywgb3IgdGhlcmUgaXMgYW4gYWQgaW5zZXJ0ZWQsIGFuZCB0aGUgdG9rZW4g ZXhwaXJlcz8mbmJzcDsgVW5kZXJzdG9vZCB0aGF0IGl0J3MgcHJvYmFibHkgdXAgdG8gdGhlIG1l ZGlhIHBsYXllciB0byBoYW5kbGUgdGhhdCBjYXNlLCBidXQNCiB3b3VsZCB0aGV5IG5lZWQgdG8g Z28gYmFjayB0byB0aGUgQ1AgdG8gZ2V0IGEgbmV3IHZhbGlkIG1hbmlmZXN0IFVSTD8mbmJzcDsg V2hpY2ggd291bGQgaGF2ZSBhIHRva2VuIHRoYXQgaXMgdmFsaWQgZm9yIHRoZSBjaHVua3MgYXMg d2VsbD88L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkl04oCZcyB1cCB0byB0aGUgbWVkaWEgcGxheWVy IHRvIG1ha2Ugc3VyZSBpdCByZWZyZXNoZXMgdGhlIHRva2VuLCBlaXRoZXIgYmVmb3JlIG9yIGFm dGVyIGl0IChhbHRob3VnaCB0aGUgZm9ybWVyIG1pZ2h0IGJlIGVhc2llcikuIE9uIHdheSB0byBk byB0aGF0IHdvdWxkIGJlIHRvIHNlbmQgYW4gSFRUUCBIRUFEIHJlcXVlc3QgZm9yIGFuIGFyYml0 cmFyeSBzZWdtZW50DQogdG8gdGhlIENETi4gTm90ZSB0aGF0IHRoaXMgZG9lcyBhc3N1bWUgdGhh dCB0aGUgbWVkaWEgcGxheWVyIGlzIGF3YXJlIG9mIHRoZSBhcHByb3hpbWF0ZSB2YWxpZGl0eSB0 aW1lIG9mIGEgdG9rZW4uIEluIHByYWN0aWNlIHRoaXMgaXMgc29tZXRoaW5nIHRoYXQgY291bGQg YmUgY29tbXVuaWNhdGVkIGluIGEgbWFuaWZlc3QgZmlsZSwgc3VjaCBhcyBhIERBU0ggTVBELiBJ dOKAmXMgb25lIG9mIHRoZSB0b3BpY3MgZm9yIHdoaWNoIGl0IG1pZ2h0IGJlDQogd29ydGggY29u c2lkZXJpbmcgc2VuZGluZyBpbiBhIGxpYWlzb24gdG8gTVBFRywgaWYgdGhlIFdHIHNob3VsZCBk ZWNpZGUgdG8gYWRvcHQgdGhpcyB3b3JrLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij5XaGF0IEkgd291bGQgbGlrZSB0byBkbyBpbiBhIG5leHQgaXRlcmF0aW9u IG9mIHRoaXMgZG9jdW1lbnQgaXMgdG8gYWRkIGEgc2VudGVuY2UgYWxvbmcgdGhlIGxpbmVzIG9m IOKAmFVwb24gcmVjZWl2aW5nIGFuIEhUVFAgSEVBRCByZXF1ZXN0LCBhIENETiBTSE9VTEQgdmFs aWRhdGUgdGhlIGluY29taW5nIFNpZ25lZCBUb2tlbiBhbmQgZ2VuZXJhdGUgYSBuZXcNCiBvbmUg aW4gdGhlIHNhbWUgd2F5IGFzIGl0IHdvdWxkIGRvIGZvciBhbiBIVFRQIEdFVOKAmS4gPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+LSBzZWN0aW9uIDQuMSwgc3RlcHMg OSwgMTEuQiwgMTEuRSwgMTIuQiwgYW5kIDEyLkYsIHNlY3Rpb24gNy4xIHN0ZXAgMSwgc2VjdGlv biA3LjIgc3RlcHMgMy5BLmQgYW5kIDMuQi5kLCBhbmQgc2VjdGlvbiA3LjQgc3RlcHMgMTAuQS4y LCAxMC5BLjUsIDEwLkIuMiwgYW5kIDEwLkIuNjogU2hvdWxkIHRoZSBVUEMNCiBiZSBwZXJjZW50 LWVuY29kZWQ/Jm5ic3A7IEFuZCBzaG91bGQgQ0lQIGJlIGVuY3J5cHRlZD88L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQiPkNvcnJlY3QuIFRoaXMgdmVyc2lvbiBvZiBkcmFmdC1icmFuZGVuYnVyZy1jZG5p LXVyaS1zaWduaW5nLWZvci1oYXMgaGFzbuKAmXQgeWV0IGJlZW4gYnJvdWdodCBpbiBsaW5lIHdp dGggdGhlIG1vc3QgcmVjZW50IHZlcnNpb24gb2YgZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5n LCB3aGVyZSBwZXJjZW50LWVuY29kaW5nIG9mIHRoZSBVUEMgd2FzIGludHJvZHVjZWQuDQogSW4g dGhlIHNhbWUgd2F5LCBDSVAgc2hvdWxkIGJlIGVuY3J5cHRlZC4gSeKAmWxsIGZpeCB0aGlzIGlu IHRoZSBuZXh0IGl0ZXJhdGlvbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4tIHNlY3Rpb24gNC4xLCBzdGVwcyA5LCAxMS5CLCAxMS5FLCAxMi5CLCAxMi5GLCBzZWN0 aW9uIDUuMiwgYW5kIHNlY3Rpb24gNy4xIHN0ZXAgMTogSWYgdGhlIHRva2VuIGlzIG9ubHkgZ29v ZCBmb3Igc2VnbWVudHMsIGJ1dCBpcyBhdHRhY2hlZCB0byB0aGUgbWFuaWZlc3QgcmVxdWVzdCwg ZG9lcyB0aGF0IG1lYW4NCiB0aGF0IHRoZXJlIGlzIG5vIHNpZ25hdHVyZSB2YWxpZGF0aW9uIG9u IHRoZSBtYW5pZmVzdCByZXF1ZXN0PyZuYnNwOyBJbiB0aGUgMnh4IG5vbi1yZWRpcmVjdCBjYXNl LCB3b3VsZCB5b3UgZXhwZWN0IGEgdjEgbWFuaWZlc3Qgc2lnbmF0dXJlIGJlIGluIHRoZSBxdWVy eSBzdHJpbmcgYW5kIGEgc2VwYXJhdGUgdjIgY2h1bmsgc2lnbmF0dXJlIGJlIGluIHRoZSBjb29r aWU/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5NYXliZSB0aGUgZG9jdW1lbnQgc2hvdWxkIGJlIGNs ZWFyZXIgb24gdGhpcy4gTXkgaW50ZW50aW9uIHdhcyB0aGF0IFNpZ25lZCBUb2tlbnMgc2hvdWxk IGJlIHVzZWQgZm9yIGJvdGggbWFuaWZlc3QgYW5kIHNlZ21lbnQgcmVxdWVzdHMsIGVzcGVjaWFs bHkgZ2l2ZW4gdGhhdCB0aGUgMjAwIE9LIGZvciB0aGUgaW5pdGlhbCBtYW5pZmVzdCB3aWxsIGNv bnRhaW4NCiB0aGUgZmlyc3QgU2lnbmVkIFRva2VuLiBJbiBvdGhlciB3b3JkcywgdGhlIFVQQyBz aG91bGQgYmUgY2hvc2VuIGluIGEgd2F5IHRoYXQgYm90aCB0aGUgbWFuaWZlc3QgbG9jYXRpb24g YW5kIHRoZSBzZWdtZW50IGxvY2F0aW9uIGlzIGNvdmVyZWQgYnkgdGhlIFVQQy4NCjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlvbiA0LjEsIHN0ZXAgMTAs IHNlY3Rpb25zIDUvNiwgYW5kIHNlY3Rpb24gNy40IHN0ZXAgOTogU2VlbXMgbGlrZSBhIGNoaWNr ZW4gYW5kIGVnZyBwcm9ibGVtLiZuYnNwOyBUaGUgU1RUIHNheXMgdGhhdCB0aGUgdG9rZW4gaXMg aW4gdGhlIGNvb2tpZSwgYnV0IHRoZSBTVFQgaXMgaW4gdGhlIHRva2VuIHRoYXQncw0KIGluc2lk ZSB0aGUgY29va2llLiZuYnNwOyBEb2VzIHRoZSBpbml0aWFsIHRva2VuIGFsd2F5cyBoYXZlIHRv IGJlIGluIGEgdG9rZW4/Jm5ic3A7IFNob3VsZCB0aGUgaW5pdGlhbCB0b2tlbiBhbHdheXMgYmUg aW4gdGhlIHF1ZXJ5IHN0cmluZyB0byBiZSBjb21wYXRpYmxlIHdpdGggdjEsIHNpbmNlIHRoZSBW RVI9MiBpcyBhbHNvIGluc2lkZSB0aGUgdG9rZW4gaW5zaWRlIHRoZSBjb29raWU/Jm5ic3A7IEZy b20gdGhlIGNsaWVudCBwZXJzcGVjdGl2ZSwgc2hvdWxkIG9ubHkNCiBzdWJzZXF1ZW50IHRva2Vu cyBiZSBpbiB0aGUgY29va2llPyZuYnNwOyBGcm9tIHRoZSBDRE4gcGVyc3BlY3RpdmUsIHVubGVz cyBwYXNzZWQgaW4gdGhlIG1ldGFkYXRhLCBob3cgd2lsbCB0aGUgQ0ROIGtub3cgd2hlcmUgdG8g bG9vayBmb3IgdGhlIHRva2VuLCBvciBkb2VzIGl0IGFsd2F5cyBjaGVjayBldmVyeXdoZXJlPyZu YnNwOyBJZiB0aGUgcHJvY2VzcyBpcyB0byBhbHdheXMgY2hlY2sgdGhlIHF1ZXJ5IHN0cmluZyBm aXJzdCBhbmQgdGhlIGNvb2tpZSBzZWNvbmQsDQogZG8gd2UgZXZlbiBuZWVkIFNUVD8mbmJzcDsg TmV3IFNUVCB2YWx1ZXMgYXJlIGdvaW5nIHRvIHJlcXVpcmUgYW5kIHVwZGF0ZSB0byB0aGUgcHJv Y2VkdXJlIGluIHNlY3Rpb24gNiwgYXMgd2VsbCBhcyByZWdpc3RyYXRpb24gb2YgbmV3IFNUVCB2 YWx1ZXM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5OZXcgU1RUIHZhbHVlcyBhcmUgZXhwZWN0ZWQg dG8gdXBkYXRlIHNlY3Rpb25zIDUgYW5kIDYuIFRoZSByZWFzb24gdGhlIFNUVCB2YWx1ZSBpcyBt YWRlIGV4cGxpY2l0IGluIHRoZSB0b2tlbiBhcyB3ZWxsIGlzIHRvIGFsbG93IGltcGxlbWVudGF0 aW9ucyB0aGF0IGhhdmUgcmVjZWl2ZWQgdGhlIFRva2VuIGluIHNvbWUgb3RoZXIgZmFzaGlvbiAo ZS5nLiB0aHJvdWdoDQogdGhlIGNyb3NzLWRvbWFpbiByZWRpcmVjdGlvbiBzY2VuYXJpbyBpbiBz ZWN0aW9uIDUuMiksIHRvIGJlIGF3YXJlIG9mIHRoZSB0YXJnZXQgdHJhbnNwb3J0IG1lY2hhbmlz bS4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0gc2VjdGlvbiA1 LjI6IFRoZSB2MSBkcmFmdCBhbHNvIHN1cHBvcnRzIHRva2VuIGFzIGEgcGF0aCBwYXJhbWV0ZXI7 IGlzIHRoYXQgaW50ZW50aW9uYWxseSBvbWl0dGVkIGhlcmU/PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij5UaGUgcHJpbWFyeSByZWFzb24gaXTigJlzIG5vdCBoZXJlIGlzIHRoYXQgdGhpcyBkcmFmdCBw cmVkYXRlcyB0aGUgbGF0ZXN0IHZlcnNpb24gb2YgZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5n IHdoZXJlIHN1cHBvcnQgZm9yIHBhdGggcGFybWV0ZXIgd2FzIGludHJvZHVjZWQuIEhvd2V2ZXIs IEkgbmVlZCB0byBnaXZlIGl0IHNvbWUgdGhvdWdodCB3aGV0aGVyDQogaXQgbWFrZXMgc2Vuc2Ug dG8gc3VwcG9ydCB0aGF0IHNjZW5hcmlvIGhlcmUgYXMgd2VsbCwgZ2l2ZW4gdGhhdCB0aGUgbWFp biByZWFzb24gZm9yIHVzaW5nIHBhdGggcGFyYW1ldGVycyBpbiB2MSB3b3VsZCBiZSBjYXNlcyB3 aGVyZSB5b3UgZG9u4oCZdCBoYXZlIHNlZ21lbnQtbGV2ZWwgYXV0aGVudGljYXRpb24gYXMgZGVm aW5lZCBpbiB0aGlzIGRyYWZ0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHByZT4tIHNlY3Rpb24gNy4xIHN0ZXBzIDIg YW5kIDM6IEkgd291bGQgZXhwZWN0IHRoYXQgdjIgd291bGQgaGF2ZSBhIG5ldyBHZW5lcmljTWV0 YWRhdGEgcHR5cGUgKE1JLlVyaVNpZ25pbmcudjI/KSBhbmQgdGhhdCBwdHlwZSB3b3VsZCB0ZWxs IHRoZSBkQ0ROIHdoYXQgaXQgc2hvdWxkIGV4cGVjdCBpbiB0aGUgdG9rZW4/Jm5ic3A7IEl0IHdv dWxkIGJlIG5pY2UgaWYgdGhlIGRyYWZ0IGNvdWxkIGRlZmluZSB2MiBzdWNoIHRoYXQgaXQgc3Vw cG9ydGVkIGJvdGggVkVSPTEgYW5kIFZFUj0yLCBzbyB0aGF0IHRoZSBNSS5VcmlTaWduaW5nLnYy IG1ldGFkYXRhIGNvdWxkIGJlIGEgc3VwZXJzZXQgb2YgaW5mb3JtYXRpb24gbmVlZGVkIHRvIHBy b2Nlc3MgYWxsIGtub3duIHRva2VuIHR5cGVzLCBhbmQgbWFrZSB0aGUgdG9rZW4gcHJvY2Vzc2lu ZyBhIHJ1bnRpbWUgZGVjaXNpb24/PG86cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+SSBsaWtlIHRoYXQuIEkgbmVl ZCB0byBkZWx2ZSBpbnRvIHRoZSBNZXRhZGF0YSBhc3BlY3RzIG9mIHYxIGFnYWluIHRvIHNlZSBl eGFjdGx5IGhvdyB3ZSBjb3VsZCBhY2hpZXZlIHN1Y2ggYSB0aGluZy4gTWF5YmUgc29tZXRoaW5n IHRvIGRpc2N1c3MgaW4gQmVybGluLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPi0gc2VjdGlvbiA3LjQsIGdlbmVyYWw6IFRoaXMgZHJhZnQgcmVtb3ZlcyB0aGUgJnF1 b3Q7Tm90ZSB0aGF0IHJlLXNpZ25pbmcgYSBVUkkgTVVTVC4uLiZxdW90OyB0ZXh0IGZyb20gdGhl IHYxIGRyYWZ0KHNlY3Rpb24gMy4xKS4mbmJzcDsgU2luY2UgdGhpcyBpcyBhYm91dCByZXNpZ25p bmcsIEkgdGhpbmsgdGhlIHRleHQgYWJvdXQgbWFpbnRhbmluZw0KIHRoZSBzYW1lIHZhbHVlcyBz aG91bGQgYmUgYWRkZWQgaGVyZSwgc3BlY2lmaWNhbGx5IGZvciBLSUQvS0lEX05VTSwgSE1BQywg YW5kIERTQS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkdvb2QgcG9pbnQuPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cHJl Pi0gRG8geW91IGhhdmUgYW4gaWRlYSBhcyB0byB3aGF0IGFkZGl0aW9uYWwgcmVnaXN0cmllcywg bWV0YWRhdGEsIGFuZC9vciBsb2dnaW5nIGZpZWxkcyB3aWxsIGJlIG5lZWRlZD8mbmJzcDsgV2ls bCB0aGUgbmV3IHB0eXBlIGp1c3QgYmUgTUkuVXJpU2lnbmluZy52Mj88bzpwPjwvbzpwPjwvcHJl Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij5UbyBiZSBjb21wbGV0ZWx5IGhvbmVzdCwgSSBoYXZlbuKAmXQgZ2l2ZW4gdGhlIE1ldGFkYXRh IGFzcGVjdHMgYSBsb3Qgb2YgdGhvdWdodCB5ZXQuIEnigJlsbCBjb21lIGJhY2sgdG8geW91IG9u IHRoYXQgb25lLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+VGhh bmtzIGFnYWluITwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+UmF5 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg Ymx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBw dCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpUYWhvbWEiPkZyb206PC9zcGFuPjwvYj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpUYWhvbWEiPiBDRE5pIFs8YSBocmVm PSJtYWlsdG86Y2RuaS1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86Y2RuaS1ib3VuY2VzQGlldGYu b3JnPC9hPl0NCjxiPk9uIEJlaGFsZiBPZiA8L2I+QnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbjxi cj4NCjxiPlNlbnQ6PC9iPiBGcmlkYXksIEp1bmUgMTAsIDIwMTYgMTE6MzQgQU08YnI+DQo8Yj5U bzo8L2I+IDxhIGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIj5jZG5pQGlldGYub3JnPC9hPjxi cj4NCjxiPlN1YmplY3Q6PC9iPiBbQ0ROaV0gTmV3IHZlcnNpb24gKGFuZCBJUFIgc3RhdGVtZW50 KSBvZiBkcmFmdC1icmFuZGVuYnVyZy1jZG5pLXVyaS1zaWduaW5nLWZvci1oYXM8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+SGkgYWxsLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+QXMgeW91IG1pZ2h0IGhhdmUgc2VlbiwgSeKAmXZlIHJlY2VudGx5IHVwbG9hZGVkIGEg bmV3IHZlcnNpb24gb2YgZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFz ICgtMDMpLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48YSBo cmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11 cmktc2lnbmluZy1mb3ItaGFzLTAzIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt YnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzLTAzPC9hPjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2hhdCBpcyBpbXBvcnRhbnQgdG8gbm90ZSBp cyB0aGF0IEtQTiBoYXMgdXBkYXRlZCBpdOKAmXMgSVBSIHN0YXRlbWVudCBvbiB0aGlzIGRvY3Vt ZW50IHRvIGJlIGluIGxpbmUgd2l0aCB0aGUgSVBSIHN0YXRlbWVudHMgdGhhdCBoYXZlIGJlZW4g ZmlsZWQgb24gb3RoZXIgQ0ROSSBkb2N1bWVudHMgKGkuZS4g4oCcUm95YWx0eS1GcmVlLCBSZWFz b25hYmxlIGFuZA0KIE5vbi1EaXNjcmltaW5hdG9yeSBMaWNlbnNlIHRvIEFsbCBJbXBsZW1lbnRl cnPigJ0pLiBIb3BlZnVsbHkgdGhpcyBjbGVhcnMgdXAgdGhlIGxlbmd0aHkgSVBSIGRpc2N1c3Np b24gd2XigJl2ZSBiZWVuIGhhdmluZyBhcm91bmQgdGhpcyBkb2N1bWVudCBzbyB0aGF0IHdlIGNh biBmb2N1cyBvbiB0aGUgdGVjaG5pY2FsIGFzcGVjdHMgYWdhaW4uDQo8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkxvb2tpbmcgZm9yd2FyZCB0byB5b3VyIGZlZWRi YWNrLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij5SYXk8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjguMHB0O2ZvbnQtZmFtaWx5OkFy aWFsIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC4wcHQ7 Zm9udC1mYW1pbHk6QXJpYWwiPlRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZvcm1hdGlvbiB0 aGF0IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUgYWRkcmVzc2Vl IG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwgeW91IGFyZSBy ZXF1ZXN0ZWQNCiB0byBpbmZvcm0gdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBU Tk8gYWNjZXB0cyBubyBsaWFiaWxpdHkgZm9yIHRoZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBm b3IgdGhlIG1hbm5lciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBr aW5kIHJlc3VsdGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0 cmFuc21pc3Npb24gb2YgbWVzc2FnZXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8 L2h0bWw+DQo= --_000_F6DC5A312B674F7A89F7D4BBD1B695BFtnonl_-- From nobody Mon Jul 11 07:30:55 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4627712D513; Mon, 11 Jul 2016 07:30:52 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.27.0 Auto-Submitted: auto-generated Precedence: bulk Sender: Message-ID: <20160711143052.9480.65746.idtracker@ietfa.amsl.com> Date: Mon, 11 Jul 2016 07:30:52 -0700 Archived-At: Cc: alexey.melnikov@isode.com, flefauch@cisco.com, cdni@ietf.org, draft-ietf-cdni-metadata@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Last Call: (CDN Interconnection Metadata) to Proposed Standard X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Reply-To: ietf@ietf.org List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2016 14:30:52 -0000 The IESG has received a request from the Content Delivery Networks Interconnection WG (cdni) to consider the following document: - 'CDN Interconnection Metadata' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2016-07-25. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. This is the Second IETF Last Call to point out that the document has a DownRef to RFC 6707. Abstract The Content Delivery Networks Interconnection (CDNI) metadata interface enables interconnected Content Delivery Networks (CDNs) to exchange content distribution metadata in order to enable content acquisition and delivery. The CDNI metadata associated with a piece of content provides a downstream CDN with sufficient information for the downstream CDN to service content requests on behalf of an upstream CDN. This document describes both a base set of CDNI metadata and the protocol for exchanging that metadata. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Mon Jul 11 07:31:58 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D62712D187 for ; Mon, 11 Jul 2016 07:31:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y2qHa6oEA3UC for ; Mon, 11 Jul 2016 07:31:55 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0FA912D1C1 for ; Mon, 11 Jul 2016 07:31:53 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-07-5783a2fa38cf Received: from EUSAAHC001.ericsson.se (Unknown_Domain [147.117.188.75]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 76.E1.09012.AF2A3875; Mon, 11 Jul 2016 15:45:31 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC001.ericsson.se ([147.117.188.75]) with mapi id 14.03.0294.000; Mon, 11 Jul 2016 10:31:52 -0400 From: Kevin Ma J To: "cdni@ietf.org" Thread-Topic: IETF 96 WG Agenda Thread-Index: AdHbgR4XbHWfLoOETw+S01nWAUmBHg== Date: Mon, 11 Jul 2016 14:31:52 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.11] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrDLMWRmVeSWpSXmKPExsUyuXSPt+7vRc3hBtsfclo8nf2H1YHRY8mS n0wBjFFcNimpOZllqUX6dglcGe17dzAWXGGsWLxsD1sD4xLGLkZODgkBE4l5+z6yQNhiEhfu rWfrYuTiEBI4yiixovkzI4SznFHi+PELYB1sAloSj7/+Zepi5OAQEVCW+HnIESQsLCAlMWH+ K3YQW0RAXmLalDPMECV6Et+7JUDCLAKqErsfHwGbwivgKzFp+hdmEJsRaO/3U2uYQGxmAXGJ W0/mM0HcIyCxZM95ZghbVOLl43+sELaSxMff89kh6nUkFuz+xAZha0ssW/iaGWK+oMTJmU9Y JjAKz0IydhaSlllIWmYhaVnAyLKKkaO0uCAnN93IYBMjMIyPSbDp7mC8P93zEKMAB6MSD2/C 0aZwIdbEsuLK3EOMEhzMSiK8v5Y3hwvxpiRWVqUW5ccXleakFh9ilOZgURLnFXukGC4kkJ5Y kpqdmlqQWgSTZeLglGpgnDGvVfKxsh9P1a7X/VmtYTuE7I1mJQTFhN189IP18Rn1TWFJvVe4 Lq49+OSaxKmMzw91ri/9/JVxRoDOShZ3hjtXHRbZlgi+L5y90ZTfMz6v+d+CyU+WLQ84WXd+ c+ev1LLfs/9tPu/sk7pimv+rqUz1F28uevw055/vDKV1ZoG+r6sk4qdp9yuxFGckGmoxFxUn AgBEC1BGXwIAAA== Archived-At: Subject: [CDNi] IETF 96 WG Agenda X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2016 14:31:57 -0000 Hi All, The agenda for our session in Berlin has been posted: https://www.ietf.or= g/proceedings/96/agenda/agenda-96-cdni Please let us know if we missed anyone. thanx! -- Kevin and Francois From nobody Mon Jul 11 07:56:56 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86CED12D52F for ; Mon, 11 Jul 2016 07:56:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Iwatx4g-IqW5 for ; Mon, 11 Jul 2016 07:56:50 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3805912D52D for ; Mon, 11 Jul 2016 07:56:50 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-fb-5783b36e5b06 Received: from EUSAAHC001.ericsson.se (Unknown_Domain [147.117.188.75]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id B9.F5.03614.E63B3875; Mon, 11 Jul 2016 16:55:42 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC001.ericsson.se ([147.117.188.75]) with mapi id 14.03.0294.000; Mon, 11 Jul 2016 10:56:48 -0400 From: Kevin Ma J To: "Brandenburg, R. (Ray) van" , Ben Niven-Jenkins , "Content Delivery Networks Interconnection Discussion List" Thread-Topic: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing Thread-Index: AdHSDAIj8Q+3AOh3Q/WhloflAutMVQCa2goAASzpMYAADCKGkACC6yqAAAaL1dA= Date: Mon, 11 Jul 2016 14:56:48 +0000 Message-ID: References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> <73B31A7C-CC80-4646-A7C9-401874C3B07D@tno.nl> In-Reply-To: <73B31A7C-CC80-4646-A7C9-401874C3B07D@tno.nl> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.11] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrNLMWRmVeSWpSXmKPExsUyuXSPt27e5uZwg/XTlSwWnJvAZvF09h9W i2+brzM6MHssWfKTyePn9UmMHgfXXWAOYI7isklJzcksSy3St0vgynj4ZD1bwYWzjBX7X21i bWBcc4Kxi5GTQ0LARGLS2V4mCFtM4sK99WxdjFwcQgJHGSUm7DzHDOEsZ5S4tmsVK0gVm4CW xOOvf5lAEiICOxklvuzuAUsIC3hJ7G86zg5iiwh4Sxw4spsFwvaTeH7iN1Ccg4NFQFVi+ywd kDCvgK/E7amHobatY5I40/IKrJdTwEri1qMDYL2MQCd9P7UG7DxmAXGJW0/mQ50qILFkz3lm CFtU4uXjf6wQtpLEx9/zwXYxC2hKrN+lD9GqKDGl+yE7xF5BiZMzn7BMYBSdhWTqLISOWUg6 ZiHpWMDIsoqRo7S4ICc33chwEyMwSo5JsDnuYNzb63mIUYCDUYmHN+FoU7gQa2JZcWXuIUYJ DmYlEd72jc3hQrwpiZVVqUX58UWlOanFhxilOViUxHn1XyqGCwmkJ5akZqemFqQWwWSZODil GhiD7f9VWb9aeGPBnPfuD5SMV9uFzDNgZpB4al713+pzVamI/qK4urNrJopeP5XxpGuDDJfh 1h6J4DRZFmdt9+grK1z3FJ7SlJwqfLqNZ9lSu+m809YW86zM2H0vRNzJ+PrR1Pvtd/YueXXz 8O/9X55JhD1as3ie84SjF0rPbWt/NHvm17J+toNpSizFGYmGWsxFxYkAbHvYRI4CAAA= Archived-At: Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2016 14:56:53 -0000 SGkgUmF5LA0KDQo+IEdpdmVuIHRoYXQgTGVpZiBhbmQgaGlzIGNvbGxlYWd1ZXMgYWN0dWFsbHkg aW1wbGVtZW50ZWQgdGhlIGFsZ29yaXRobSwgYW5kDQo+IHRoZXkgd2VyZSB0aGUgb25lcyBhc2tp bmcgZm9yIHRoaXMgY2hhbmdlLCBteSBndWVzcyB3b3VsZCBiZSB5ZXMuIEJ1dA0KPiBsZXTigJlz IGFzayB0aGVtIHRvIG1ha2Ugc3VyZS4NCg0KICBJIGJlbGlldmUgTGVpZiBhbmQgUGhpbCBhZ3Jl ZWQgaW4gQkEgdG8gcmUtcmV2aWV3IGR1cmluZyBXR0xDLCBzbywgaG9wZWZ1bGx5IHRoZXkgY2Fu IGNoaW1lIGluLiAgOikNCg0KPiBJbiB0aGUgZW5kLCBJIHdvdWxkbuKAmXQgYmUgc3VycHJpc2Vk IGlmIHNvbWUNCj4gaW1wbGVtZW50YXRpb25zIGFjdHVhbGx5IG9ubHkgaW1wbGVtZW50ZWQgS0lE X05VTS4NCg0KICBUaGlua2luZyBhYm91dCB0aGlzIHNvbWUgbW9yZS4gIEFyZSB0aGVyZSBhbnkg Z3VpZGVsaW5lcyBvbiBtYW5kYXRvcnkgdG8gc3VwcG9ydC9pbXBsZW1lbnQgSUVzPyAgSXMgb25l IGFsbG93ZWQgdG8gb25seSBpbXBsZW1lbnQgS0lEX05VTSBhbmQgbm90IEtJRCwgb3Igb25seSBI Ri9NRCBhbmQgbm90IERTQS9EUzsgYW5kIGlmIGFuIElFIGlzIG5vdCBzdXBwb3J0ZWQsIGlzIHRo ZXJlIGEgTVVTVCByZWplY3Q/ICBJZiBzbywgc2hvdWxkIHRoZXJlIGJlIGFuIGVycm9yIGNvZGUg Zm9yIHRoYXQ/DQoNCj4gSWYgeW91IGxvb2sgYXQgdGhlIGFsZ29yaXRobSwgdGhlIHBhdGhzIGZv ciBIRiBhbmQgRFNBIGFyZSBjb25zaWRlcmFibHkNCj4gZGlmZmVyZW50Lg0KDQpKdXN0IHRvIHRh a2UgaXQgb25lIHN0ZXAgZnVydGhlcjogWWVzLCB0aGUgYWxnb3JpdGhtcyBhcmUgZGlmZmVyZW50 LCBidXQgaW4gc2VjdGlvbiAzLjIsIHN0ZXBzIDEgYW5kIDIgY2xlYXJseSBzdGF0ZSAiMS4gSWYg c3ltbWV0cmljIHNoYXJlZCBrZXkgaXMgdXNlLCBwZXJmb3JtIHRoaXMgc3RlcCIgYW5kICIyLiBp ZiBhc3ltbWV0cmljIHByaXZhdGUvcHVibGljIGtleXMgYXJlIHVzZWQsIHBlcmZvcm0gdGhpcyBz dGVwIi4gIFRoZSBkaWZmZXJlbmNlIGlzIGFscmVhZHkgYnJva2VuIG91dC4gIFRoZSBvbmx5IGRp ZmZlcmVuY2UgdG8gdGhlIGN1cnJlbnQgdGV4dCB3b3VsZCBiZSBhIGZpbmQvcmVwbGFjZSBvbiB0 aGUgSUUgaW4gdGhvc2Ugc2VjdGlvbnMuICBMaWtld2lzZSwgaW4gc2VjdGlvbiA0LjQsIHN0ZXBz IDIuQSBhbmQgMi5CIGFyZSBzZXBhcmF0ZWQgYmFzZWQgb24gd2hldGhlciB0aGUgYWxnb3JpdGht IGlzIHN5bW1ldHJpYyBvciBhc3ltbWV0cmljLCBhcyBkZXRlcm1pbmVkIGluIHNlY3Rpb24gNC4y LCBzdGVwcyAyIGFuZCAzLiAgKE5vdGU6IFNlY3Rpb24gNC4zIHdvdWxkIGFjdHVhbGx5IGJlIHNp bXBsaWZpZWQgYnkgbm90IGhhdmluZyB0byBkaXN0aW5ndWlzaCBiZXR3ZWVuIE1EL0RTLikgIFRo ZSBvbmx5IHJlYWwgcXVlc3Rpb24sIGltbywgaXMgd2hldGhlciBvciBub3Qgc2VjdGlvbiA0LjIs IHN0ZXBzIDIgYW5kIDMgY291bGQgYmUgcmVwbGFjZWQgd2l0aCBhbiBhbGdvcml0aG0gY2hlY2sg cmF0aGVyIHRoYW4gYW4gSUUgY2hlY2ssIGkuZS4sIGlmIFNIQTI1NiwgdGhlbiBpdCdzIHN5bW1l dHJpYywgZWxzZSBpZiBFQ0RTQSwgdGhlbiBpdCdzIGFzeW1tZXRyaWM/DQoNClRoZXJlIGN1cnJl bnRseSBpc24ndCBhIHJlZ2lzdHJ5IGZvciBzdXBwb3J0ZWQgSEYvU0FzLg0KICAxLiBXb3VsZCBh IHJlZ2lzdHJ5IG1ha2Ugc2Vuc2U/DQogIDIuIFdvdWxkIGEgcmVnaXN0cnkgd2l0aCBhIGNsZWFy L29idmlvdXMgZGVzaWduYXRpb24gb2Ygc3ltbWV0cmljIHZzIGFzeW1tZXRyaWMgbWFrZSB0aGUg YWJvdmUgdGVzdCBlYXN5PyAgDQoNCkFsc28sIEkndmUgcHJvcG9zZWQgcmVtb3ZhbCBvZiB0aGUg TWV0YWRhdGEgQXV0aCBUeXBlIHJlZ2lzdHJ5IGZyb20gdGhlIG1ldGFkYXRhIGRyYWZ0OyBpZiB0 aGF0IGlzIGFjY2VwdGVkLCB3ZSB3b3VsZCBubyBsb25nZXIgbmVlZCBzZWN0aW9uIDguNA0KDQp0 aGFueCENCg0KLS0gIEtldmluIEouIE1hDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gRnJvbTogQnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbiBbbWFpbHRvOnJheS52YW5icmFuZGVu YnVyZ0B0bm8ubmxdDQo+IFNlbnQ6IE1vbmRheSwgSnVseSAxMSwgMjAxNiAzOjI4IEFNDQo+IFRv OiBLZXZpbiBNYSBKOyBCZW4gTml2ZW4tSmVua2luczsgQ29udGVudCBEZWxpdmVyeSBOZXR3b3Jr cw0KPiBJbnRlcmNvbm5lY3Rpb24gRGlzY3Vzc2lvbiBMaXN0DQo+IFN1YmplY3Q6IFJlOiBbQ0RO aV0gV29ya2luZyBHcm91cCBMYXN0IENhbGwgb24gZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5n DQo+IA0KPiBIaSBLZXZpbiwNCj4gDQo+ICA+IDEuIEhhdmluZyBib3RoIEtJRCBhbmQgS0lEX05V TSBzZWVtcyB1bm5lY2Vzc2FyeSB0byBtZS4gIEkgdW5kZXJzdGFuZA0KPiBMZWlmJ3MgYXJndW1l bnQNCj4gKGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvY2RuaS9ZRElyT2R1 dGJydlFrRXd2QWV2d09OZGlVRkUpLA0KPiBidXQgSSdtIHN0aWxsIG5vdCBzdXJlIEkgYWdyZWUu ICBBcmUgaW1wbGVtZW50ZXJzIHJlYWxseSBnb2luZyB0byBoYXZlIDINCj4gc2VwYXJhdGUgY29k ZSBwYXRocywgb25lIHdpdGggYW4gaW50ZWdlciB2YXJpYWJsZSBhbmQgYW5vdGhlciB3aXRoIGEN Cj4gc3RyaW5nIHZhcmlhYmxlLCBqdXN0IHRvIGdldCBhIG1lbW9yeSBlZmZpY2llbmN5PyAgT3Ig aXMgdGhlIGludGVnZXIganVzdA0KPiBnb2luZyB0byBnZXQgY29udmVydGVkIHRvIGEgc3RyaW5n PyAgQW5kIHRoZXkgYWxyZWFkeSBoYXZlIHRvIGFsbG9jYXRlIHRoZQ0KPiBtZW1vcnkganVzdCB0 byBwYXJzZSB0aGUgdG9rZW4/DQo+IA0KPiBHaXZlbiB0aGF0IExlaWYgYW5kIGhpcyBjb2xsZWFn dWVzIGFjdHVhbGx5IGltcGxlbWVudGVkIHRoZSBhbGdvcml0aG0sIGFuZA0KPiB0aGV5IHdlcmUg dGhlIG9uZXMgYXNraW5nIGZvciB0aGlzIGNoYW5nZSwgbXkgZ3Vlc3Mgd291bGQgYmUgeWVzLiBC dXQNCj4gbGV04oCZcyBhc2sgdGhlbSB0byBtYWtlIHN1cmUuIEluIHRoZSBlbmQsIEkgd291bGRu 4oCZdCBiZSBzdXJwcmlzZWQgaWYgc29tZQ0KPiBpbXBsZW1lbnRhdGlvbnMgYWN0dWFsbHkgb25s eSBpbXBsZW1lbnRlZCBLSURfTlVNLg0KPiANCj4gPiAgMi4gSSBhZ3JlZSB0aGF0IGhhdmluZyBi b3RoIEhGIGFuZCBEU0EgY291bGQgYmUgdW5uZWNlc3NhcnkuICBJIGtub3cNCj4gd2UndmUgYWxz byBoYWQgbG9uZyBkaXNjdXNzaW9ucyBhYm91dCBuZWVkaW5nIGZvciBib3RoIE1EIGFuZCBEUy4N Cj4gVWx0aW1hdGVseSwgdGhlcmUgaXMgYW4gYWxnb3JpdGhtIChIRiBvciBEU0EpIHRoYXQgaXMg cnVuLCBhbmQgcmVzdWx0cyBpbg0KPiBhIHNpZ25hdHVyZSAoTUQgb3IgRFMpLCBhbmQgb25seSBv bmUgcGFpciAoSEYvTUQgb3IgRFNBL0RTKSBlbmRzIHVwIGluIHRoZQ0KPiB0b2tlbj8gIFRoZSBh bGdvcml0aG0gZG9lc24ndCByZWFsbHkgY2hhbmdlIGRyYW1hdGljYWxseSBpZiB0aGUgSUUncyBh cmUNCj4gZGlmZmVyZW50PyAgSXMgaXQganVzdCBhYm91dCByZWFkYWJpbGl0eT8NCj4gDQo+IElm IHlvdSBsb29rIGF0IHRoZSBhbGdvcml0aG0sIHRoZSBwYXRocyBmb3IgSEYgYW5kIERTQSBhcmUg Y29uc2lkZXJhYmx5DQo+IGRpZmZlcmVudC4gT25lIHBlcmZvcm1zIGFuIEhNQUMgYXMgZGVmaW5l ZCBieSBIRiwgdGhlIG90aGVyIGRvZXMgYQ0KPiAoa2V5bGVzcykgU0hBLTEgaGFzaCwgdGhlbiBl bmNyeXB0cyB0aGUgcmVzdWx0IHdpdGggYW4gZW5jcnlwdGlvbg0KPiBmdW5jdGlvbi4gSWYgd2Ug d291bGQgbWVyZ2UgYm90aCBpbnRvIGEgc2luZ2xlIEluZm9ybWF0aW9uIEVsZW1lbnQgKGxldOKA mXMNCj4gY2FsbCBpdCBTaWduYXR1cmUgQWxnb3JpdGhtLCBvciBTQSwgZm9yIG5vdyksIHRoZSBh bGdvcml0aG0gd291bGQgaGF2ZSB0bw0KPiBpbmNsdWRlIHNvbWV0aGluZyBhbG9uZyB0aGUgbGlu ZXMgb2Y6IOKAnElmIHRoZSBhbGdvcml0aG0gY29tbXVuaWNhdGVkIGluDQo+IHRoZSBTQSBmaWVs ZCBpcyBhIERpZ2l0YWwgU2lnbmF0dXJlIEFsZ29yaXRobSwgcGVyZm9ybSBYLiBJZiBpdCBpcyBh DQo+IGhhc2hpbmcgZnVuY3Rpb24sIHBlcmZvcm0gWS7igJ0uIEluIG90aGVyIHdvcmRzLCB0aGUg dHdvIGRpZmZlcmVudCBwYXRocyBpbg0KPiB0aGUgYWxnb3JpdGhtIHdpbGwga2VlcCBleGlzdGlu ZywgYnV0IG5vdyB5b3XigJlyZSBwcm9iYWJseSBnb2luZyB0byBoYXZlIHRvDQo+IGdpdmUgc29t ZSBkZWZpbml0aW9uIG9yIGxpc3Qgb2Ygd2hpY2ggYWxnb3JpdGhtcyBjbGFzc2lmeSBhcyBEaWdp dGFsDQo+IFNpZ25hdHVyZSBBbGdvcml0aG0gYW5kIHdoaWNoIGFzIGhhc2hpbmcgZnVuY3Rpb25z LiBJbiB0aGUgZW5kLCBJ4oCZbSBub3QNCj4gc3VyZSB3aGF0IHdlIHdvdWxkIGdhaW4gYnkgaXQu DQo+IA0KPiBUaGFua3MsDQo+IA0KPiBSYXkNCj4gDQo+IA0KPiBPbiAwOC8wNy8xNiAyMzoxOSwg IktldmluIE1hIEoiIDxrZXZpbi5qLm1hQGVyaWNzc29uLmNvbT4gd3JvdGU6DQo+IA0KPiBIaSBS YXksDQo+IA0KPiAgIChBcyBhbiBpbmRpdmlkdWFsKSBJJ2xsIGVjaG8gdHdvIG9mIEJlbidzIHBv aW50cywgYXMgSSd2ZSBhc2tlZCBzaW1pbGFyDQo+IHF1ZXN0aW9ucyBpbiB0aGUgcGFzdDoNCj4g DQo+ICAgMS4gSGF2aW5nIGJvdGggS0lEIGFuZCBLSURfTlVNIHNlZW1zIHVubmVjZXNzYXJ5IHRv IG1lLiAgSSB1bmRlcnN0YW5kDQo+IExlaWYncyBhcmd1bWVudA0KPiAoaHR0cHM6Ly9tYWlsYXJj aGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9jZG5pL1lESXJPZHV0YnJ2UWtFd3ZBZXZ3T05kaVVGRSks DQo+IGJ1dCBJJ20gc3RpbGwgbm90IHN1cmUgSSBhZ3JlZS4gIEFyZSBpbXBsZW1lbnRlcnMgcmVh bGx5IGdvaW5nIHRvIGhhdmUgMg0KPiBzZXBhcmF0ZSBjb2RlIHBhdGhzLCBvbmUgd2l0aCBhbiBp bnRlZ2VyIHZhcmlhYmxlIGFuZCBhbm90aGVyIHdpdGggYQ0KPiBzdHJpbmcgdmFyaWFibGUsIGp1 c3QgdG8gZ2V0IGEgbWVtb3J5IGVmZmljaWVuY3k/ICBPciBpcyB0aGUgaW50ZWdlciBqdXN0DQo+ IGdvaW5nIHRvIGdldCBjb252ZXJ0ZWQgdG8gYSBzdHJpbmc/ICBBbmQgdGhleSBhbHJlYWR5IGhh dmUgdG8gYWxsb2NhdGUgdGhlDQo+IG1lbW9yeSBqdXN0IHRvIHBhcnNlIHRoZSB0b2tlbj8NCj4g DQo+ICAgMi4gSSBhZ3JlZSB0aGF0IGhhdmluZyBib3RoIEhGIGFuZCBEU0EgY291bGQgYmUgdW5u ZWNlc3NhcnkuICBJIGtub3cNCj4gd2UndmUgYWxzbyBoYWQgbG9uZyBkaXNjdXNzaW9ucyBhYm91 dCBuZWVkaW5nIGZvciBib3RoIE1EIGFuZCBEUy4NCj4gVWx0aW1hdGVseSwgdGhlcmUgaXMgYW4g YWxnb3JpdGhtIChIRiBvciBEU0EpIHRoYXQgaXMgcnVuLCBhbmQgcmVzdWx0cyBpbg0KPiBhIHNp Z25hdHVyZSAoTUQgb3IgRFMpLCBhbmQgb25seSBvbmUgcGFpciAoSEYvTUQgb3IgRFNBL0RTKSBl bmRzIHVwIGluIHRoZQ0KPiB0b2tlbj8gIFRoZSBhbGdvcml0aG0gZG9lc24ndCByZWFsbHkgY2hh bmdlIGRyYW1hdGljYWxseSBpZiB0aGUgSUUncyBhcmUNCj4gZGlmZmVyZW50PyAgSXMgaXQganVz dCBhYm91dCByZWFkYWJpbGl0eT8NCj4gDQo+IHRoYW54IQ0KPiANCj4gLS0gIEtldmluIEouIE1h DQo+IA0KPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogQ0ROaSBbbWFp bHRvOmNkbmktYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEJyYW5kZW5idXJnLCBSLg0K PiA+IChSYXkpIHZhbg0KPiA+IFNlbnQ6IEZyaWRheSwgSnVseSAwOCwgMjAxNiA3OjEyIEFNDQo+ ID4gVG86IEJlbiBOaXZlbi1KZW5raW5zOyBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVy Y29ubmVjdGlvbg0KPiA+IERpc2N1c3Npb24gTGlzdA0KPiA+IFN1YmplY3Q6IFJlOiBbQ0ROaV0g V29ya2luZyBHcm91cCBMYXN0IENhbGwgb24gZHJhZnQtaWV0Zi1jZG5pLXVyaS0NCj4gc2lnbmlu Zw0KPiA+DQo+ID4gSGkgQmVuLA0KPiA+DQo+ID4gVGhhbmtzIGZvciB0aGUgdGhvcm91Z2ggcmV2 aWV3ISBTZWUgbXkgY29tbWVudHMgYmVsb3cuDQo+ID4NCj4gPiBSYXkNCj4gPg0KPiA+IE9uIDAy LzA3LzE2IDEzOjM1LCAiQ0ROaSBvbiBiZWhhbGYgb2YgQmVuIE5pdmVuLUplbmtpbnMiIDxjZG5p LQ0KPiA+IGJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGJlbkBuaXZlbi1qZW5raW5zLmNv LnVrPiB3cm90ZToNCj4gPg0KPiA+IEtldmluLCBDb2xsZWFndWVzLA0KPiA+DQo+ID4gSSByZXZp ZXdlZCBkcmFmdC1pZXRmLWNkbmktdXJpLXNpZ25pbmctMDkgJiBiZWxvdyBhcmUgbXkgY29tbWVu dHMuDQo+ID4NCj4gPiBHZW5lcmFsOg0KPiA+DQo+ID4gVGhlIGRvY3VtZW50IGlzIG5vdCBjbGVh ciBvbiB3aGV0aGVyIGltcGxlbWVudGVycyBhcmUgZXhwZWN0ZWQgdG8NCj4gPiBpbXBsZW1lbnQg Ym90aCBzaGFyZWQgc2VjcmV0ICYgZGlnaXRhbCBzaWduYXR1cmUgYWxnb3JpdGhtcyBmb3Igc2ln bmVkDQo+IFVSSQ0KPiA+IHZhbGlkYXRpb24uIFRoaXMgY291bGQgbGVhZCB0byBpbnRlcm9wIHBy b2JsZW1zIHdoZXJlIGRpZmZlcmVudA0KPiA+IGltcGxlbWVudGF0aW9uIGltcGxlbWVudCBvbmUg YnV0IG5vdCB0aGUgb3RoZXIuDQo+ID4NCj4gPiBNYXliZSBzcGVjaWZ5IGEgbWluaW11bSBiYXNl bGluZSBvZiBNVVNUIHN1cHBvcnQgc2hhcmVkIHNlY3JldCAoYXMgQUZBSUsNCj4gPiB0aGF0IGlz IHdoYXQgaXMgdXNlZCBpbiB0aGUgZmllbGQpIHdpdGggU0hPVUxEIGltcGxlbWVudCBkaWdpdGFs DQo+ID4gc2lnbmF0dXJlcyBmb3IgdGhlIDEgY29ybmVyIGNhc2UgZm9yIHdoaWNoIGRpZ2l0YWwg c2lnbmF0dXJlcyBwcm92aWRlIGFuDQo+ID4gYWR2YW50YWdlLg0KPiA+DQo+ID4gSeKAmW0gc29t ZXdoYXQgYWdhaW5zdCBzcGVjaWZ5aW5nIG11c3QgaW1wbGVtZW50IGJvdGggc2hhcmVkIHNlY3Jl dCAmDQo+ID4gZGlnaXRhbCBzaWduYXR1cmVzIGJlY2F1c2UgSeKAmXZlIG5ldmVyIHNlZW4gYSBk aWdpdGFsIHNpZ25hdHVyZSBiYXNlZA0KPiA+IHNpZ25lZCBVUkkgaW4gdGhlIGZpZWxkIGFuZCBJ 4oCZbSBmYW1pbGlhciB3aXRoIHF1aXRlIGEgZmV3IHNpZ25lZCBVUkkNCj4gPiBhbGdvcml0aG1z L2ltcGxlbWVudGF0aW9ucyBvZiBkaWZmZXJlbnQgQ0ROcy4gVGhhdCBzYXlzIHRvIG1lIGZvbGtz IGFyZQ0KPiA+IG5vdCBsaWtlbHkgdG8gaW1wbGVtZW50IG1vcmUgdGhhbiB0aGUgc2hhcmVkIHNl Y3JldCBhbGdvcml0aG0gdW5sZXNzDQo+IHRoZXkNCj4gPiByZWFsbHkgbmVlZCB0by4gSSBrbm93 IENpc2NvIGhhdmUgYSBkaWdpdGFsIHNpZ25hdHVyZSBpbXBsZW1lbnRhdGlvbg0KPiBtYXliZQ0K PiA+IHRoZXkgY291bGQgaGVscCB3aXRoIGhvdyBtdWNoIHVzZSBpdCBzZWVzIGluIHRoZSBmaWVs ZD8NCj4gPg0KPiA+IFtSYXldIEFncmVlZCB0aGF0IHdlIHNob3VsZG7igJl0IG1ha2UgZGlnaXRh bCBzaWduYXR1cmVzIG1hbmRhdG9yeS4gQXMgZm9yDQo+ID4gbWFraW5nIHN1cHBvcnQgZm9yIHNo YXJlZCBzZWNyZXRzIG1hbmRhdG9yeTogSSBndWVzcyB0aGF0IG1ha2VzIHNlbnNlLg0KPiA+DQo+ ID4gVGhlIGRvY3VtZW50IGNvdWxkIGRvIHdpdGggc29tZSBtb3JlIGV4YW1wbGVzIG9mIHtVUkks IGF0dHJpYnV0ZXMsDQo+ID4gVVJJU2lnbmluZ1BhY2thZ2UsIFNpZ25lZCBVUkl9IGNvdmVyaW5n IGUuZy4gSVB2NCAmIElQdjYsIG9uZSBpbmNsdWRpbmcNCj4gYQ0KPiA+IFVSSSBQYXRoIFBhdHRl cm4gZXRjLg0KPiA+DQo+ID4gU2VjdGlvbiAyLjE6DQo+ID4gVVJJIFBhdHRlcm4gQ29udGFpbmVy IChVUEMpIGRlZmluaXRpb24gLSBob3cgZG9lcyBvbmUgcmVwcmVzZW50IGEgVVJJDQo+ID4gcGF0 dGVybiB0aGF0IGNvbnRhaW5zIGEgbGl0ZXJhbCDigJg74oCZIGJlY2F1c2UgdGhlIFVSSS9VUkkg cGF0dGVybiBjb250YWlucw0KPiA+IGluIHBhdGggcGFyYW1ldGVycyB0byBtYXRjaCBhZ2FpbnN0 PyBEb2VzIHByZXNlbmNlIG9mIGEgbGl0ZXJhbCDigJg74oCZIG5lZWQNCj4gPiB0byBiZSBlc2Nh cGVkIHdpdGgg4oCYJCcgdG9vIHRvIGRpc3Rpbmd1aXNoIGl0IGZyb20gdGhlIHVzZSBvZiDigJg7 4oCZIHRvDQo+ID4gc2VwYXJhdGUgVVJJIHBhdHRlcm5zIHdpdGhpbiB0aGUgVVJJIFBhdHRlcm4g Q29udGFpbmVyPw0KPiA+DQo+ID4gW1JheV0gR29vZCBwb2ludC4gTGl0ZXJhbCBzZW1pLWNvbG9u cyBkbyBpbmRlZWQgbmVlZCB0byBiZSBlc2NhcGVkLiBJ4oCZbGwNCj4gPiBhZGQgdGhpcyBpbiB0 aGUgbmV4dCByZXZpc2lvbg0KPiA+DQo+ID4gU2VjdGlvbiAyLjI6DQo+ID4gV2h5IGlzIHRoZXJl IGEgS0lEIChzdHJpbmcpICYgS0lEX05VTSAoaW50ZWdlcikgZm9yIHNoYXJlZCBzZWNyZXRzL2tl eXMNCj4gPiBhbmQgb25seSBDS0kgKGludGVnZXIpIGZvciBDbGllbnQgSVAga2V5cz8gVG8gYmUg Y29uc2lzdGVudCBzaG91bGQgaXQgYmUNCj4gPiBDS0lfTlVNPw0KPiA+DQo+ID4gVGhlIGRvY3Vt ZW50IGFsc28gc2F5cw0KPiA+ICAgIEluIGNhc2VzDQo+ID4gICAgd2hlcmUgbnVtZXJpY2FsIEtF WSBJRHMgYXJlIHVzZWQsIGl0IGlzIFJFQ09NTUVOREVEIHRvIHVzZSBLSURfTlVNDQo+ID4gICAg aW5zdGVhZCBvZiBLSUQuDQo+ID4gV2hpY2ggbWFrZXMgbWUgdGhpbmssIHdoeT8gV2hhdCB0aGUg S0lEIG1lYW5zL3JlcHJlc2VudHMgaXMgY29tbXVuaWNhdGVkDQo+ID4gb3V0IG9mIGJhbmQgKGFu ZCBob3cgdG8gZG8gdGhhdCBpcyBvdXQgb2Ygc2NvcGUgb2YgdGhlIGRvY3VtZW50KS4gSXQNCj4g c2VlbXMNCj4gPiBzdHJhaWdodGZvcndhcmQgdG8gc2F5IEtJRCBpcyBhbHdheXMgYSBzdHJpbmcg KHdoaWNoIGNhbiByZXByZXNlbnQgYW4NCj4gPiBpbnRlZ2VyKSBhbmQgZ2V0IHJpZCBvZiBLSURf TlVNIGVudGlyZWx5LiBUaGF0IHdvdWxkIG1lYW4gd2UgbmVlZCBvbmUNCj4gbGVzcw0KPiA+IGF0 dHJpYnV0ZSBkZWZpbmluZyAob3IgdHdvIGxlc3MgaWYgd2UgbmVlZCBzdHJpbmcgJiBpbnRlZ2Vy IGF0dHJpYnV0ZXMNCj4gZm9yDQo+ID4gQ0tJKSBhbmQgYXZvaWRzIGZvbGtzIGhhdmluZyB0byB3 b3JrIG91dCB3aGF0IHRvIGRvICYgaW1wbGVtZW50IGNvcm5lcg0KPiA+IGNhc2VzIGxpa2Ugd2hh dCB0byBkbyBpZiBLSUQgJiBLSURfTlVNIGFyZSBib3RoIHByZXNlbnQuDQo+ID4NCj4gPiBXaHkg bm90IGp1c3QgaGF2ZSBLSUQgYW5kIENLSSBib3RoIGFzIHN0cmluZ3MgYW5kIHJlbW92ZSBLSURf TlVNPw0KPiA+DQo+ID4gW1JheV0gVGhpcyB3YXMgdGhlIGNvbnNlbnN1cyByZXN1bHQgb2YgYSBs ZW5ndGh5IGRpc2N1c3Npb24gYmV0d2VlbiB0aGUNCj4gPiBhdXRob3JzIGJvdGggb24gYW5kIG9m ZiBsaXN0IOKYuiBUaGUgbWFpbiByZWFzb24gd2UgaW5jbHVkZWQgYSBzdHJpbmctDQo+IGJhc2Vk DQo+ID4gS0lEIHdhcyBzbyB0aGF0IHdlIGNhbiBoYXZlIFVSTHMgdG8gcHVibGljIGtleXMuIEhv d2V2ZXIsIGFzIExlaWYNCj4gcG9pbnRlZA0KPiA+IG91dCwgZm9yIGludGVyb3AgYW5kIHBlcmZv cm1hbmNlIHJlYXNvbnMgaXQgaGVscHMgdG8gaGF2ZSBtYXhpbXVtIGxlbmd0aA0KPiA+IGZvciB0 aGUgS0lEIGZpZWxkLiBXaXRoIHB1YmxpYyBrZXlzIHRoaXMgaXMgaGFyZCB0byBkby4gU28gaW4g Y2FzZXMNCj4gd2hlcmUNCj4gPiBwZXJmb3JtYW5jZSBpcyBlc3NlbnRpYWwsIHVzaW5nIGEgZml4 ZWQtbGVuZ3RoIGludCBmaWVsZCBpcyBmYXN0ZXIuIFRoZQ0KPiA+IHJlYXNvbiB3ZSBkaWRu4oCZ dCBleHRlbmQgdGhpcyB0byB0aGUgQ0tJIGZpZWxkIGlzIHRoYXQgZm9yIENLSSB3ZSBvbmx5DQo+ ID4gc3VwcG9ydCBzeW1tZXRyaWMgZW5jcnlwdGlvbiwgYW5kIGhlbmNlIGEgaW50ZWdlciBrZXkg aW5kZXggc2hvdWxkIGJlDQo+ID4gc3VmZmljaWVudC4NCj4gPg0KPiA+IEFsb25nIHNpbWlsYXIg bGluZXMuIFdoeSBoYXZlIGJvdGggSEYgJiBEU0EuIElzIGl0IGltcGxpY2l0IGZyb20gdGhlDQo+ IHZhbHVlDQo+ID4gb2YgdGhlIGF0dHJpYnV0ZSAoZS5nLiAnU0hBLTI1NicgdnMg4oCYRUNEU0Hi gJkpIHdoZXRoZXIgYSBzaGFyZWQgc2VjcmV0IG9yDQo+ID4gZGlnaXRhbCBzaWduYXR1cmUgYWxn b3JpdGhtIGlzIGJlaW5nIHVzZWQ/IE9yIGlzIHRoZSBwdXJwb3NlIHRvIGVuYWJsZQ0KPiBVUkkN Cj4gPiB0byBiZSBzaWduZWQgKCYgc3Vic2VxdWVudGx5KSB2ZXJpZmllZCB3aXRoIGVpdGhlciAo aWYgYm90aCBhcmUNCj4gc3BlY2lmaWVkKQ0KPiA+IG9yIHdpdGggYm90aD8NCj4gPg0KPiA+IFtS YXldIFdlIGV4cGxpY2l0bHkgcnVsZSBvdXQgaGF2aW5nIGJvdGggSEYgYW5kIERTQSBpbmZvcm1h dGlvbiBlbGVtZW50cw0KPiA+IGluIGEgc2luZ2xlIFNpZ25lZCBVUkkuIFRoZSByZWFzb24gd2Ug d2VudCBmb3Igc2VwYXJhdGUgSUVzIGlzIHRoYXQgaXQNCj4gPiBtYWtlcyBkZXNjcmliaW5nIHRo ZSBhbGdvcml0aG0gc2xpZ2h0bHkgbGVzcyBjb21wbGV4LiBBbmQgZ2l2ZW4gdGhhdCB3ZQ0KPiA+ IGJhc2U2NC1lbmNvZGUgdGhlIGZ1bGwgVVJJIFNpZ25pbmcgUGFja2FnZSBhbnl3YXkgaXQgZG9l c27igJl0IHJlYWxseQ0KPiBtYXR0ZXINCj4gPiBpbiB0ZXJtcyBvZiBuYW1lc3BhY2UgY29sbGlz aW9ucy4NCj4gPg0KPiA+IFNlY3Rpb24gMy4xOg0KPiA+IDgpYSkgc2F5cw0KPiA+ICAgICAgICAg ICAgTm90ZTogdGhlIE9yaWdpbmFsIFVSSQ0KPiA+ICAgICAgICAgICAgQ29udGFpbmVyIGluZm9y bWF0aW9uIGVsZW1lbnQgTVVTVCBiZSB0aGUgbGFzdCBpbmZvcm1hdGlvbg0KPiA+ICAgICAgICAg ICAgZWxlbWVudCBpbiB0aGUgYnVmZmVyIGJlZm9yZSB0aGUgc2lnbmF0dXJlIGluZm9ybWF0aW9u DQo+ID4gICAgICAgICAgICBlbGVtZW50Lg0KPiA+IDgpYikgZG9lcyBub3QgaGF2ZSBhIHNpbWls YXIgc3RhdGVtZW50LiBJcyB0aGUgVVJJIFBhdHRlcm4gQ29udGFpbmVyDQo+IGFsc28NCj4gPiBy ZXF1aXJlZCAoTVVTVCkgdG8gYmUgdGhlIGxhc3QgaW5mb3JtYXRpb24gZWxlbWVudCBpbiB0aGUg YnVmZmVyPw0KPiA+DQo+ID4gW1JheV0gVGhlIE9yaWdpbmFsIFVSSSBDb250YWluZXIgaXMgYSBz cGVjaWFsIGNhc2UgaW4gdGhlIHNlbnNlIHRoYXQgaXQNCj4gPiBpc27igJl0IGNvbW11bmljYXRl ZCBhbG9uZyB3aXRoIHRoZSBTaWduZWQgVVJJIGJ1dCBpcyByZW1vdmVkIGZyb20gdGhlDQo+ID4g cGFja2FnZSBhZnRlciBoYXZpbmcgY2FsY3VsYXRlZCB0aGUgc2lnbmF0dXJlLg0KPiA+DQo+ID4g U2VjdGlvbiA1LjQ6DQo+ID4gSSBkb27igJl0IHNlZSB0aGUgcG9pbnQgb2Yga2V5LWlkLCBoYXNo LWZ1bmN0aW9uLCBkaWdpdGFsLXNpZ25hdHVyZS0NCj4gPiBhbGdvcml0aG0gJiB2ZXJzaW9uLg0K PiA+DQo+ID4gVGhlIGFic2VuY2Ugb2YgdGhlIFZFUiBhdHRyaWJ1dGUgaXMgc3BlY2lmaWVkIGJ5 IHRoZSBkb2N1bWVudCB0byBtZWFuDQo+ID4gVmVyc2lvbiAxLiBUaGUgYWJzZW5jZSBvZiB0aGUg SEYgJiBEU0EgYXR0cmlidXRlcyBpcyBzcGVjaWZpZWQgYnkgdGhlDQo+ID4gdmVyc2lvbiBvZiB0 aGUgc2lnbmluZyBtZXRob2QuIFZlcnNpb24gMSAodGhlIGRvY3VtZW50KSBzcGVjaWZpZXMgdGhl bQ0KPiBhcw0KPiA+IFNIQS0yNTYgJiBFQ0RTQSBhY2NvcmRpbmdseS4gV2h5IHJlLXNwZWNpZnkg dGhpcyBpbiB0aGUgTWV0YWRhdGEgb2JqZWN0Pw0KPiA+DQo+ID4gW1JheV0gSeKAmW0gbm90IHN1 cmUgSSB1bmRlcnN0YW5kLiBXaGF0IHRoZSBtZXRhZGF0YSDigJh2ZXJzaW9u4oCZIGZpZWxkIGlz DQo+IGZvcg0KPiA+IGlzIHRvIGFsbG93IENETnMgdG8gbWFuZGF0ZSBvdGhlciB2ZXJzaW9ucyBv ZiBVUkkgU2lnbmluZyBpbiB0aGUgZnV0dXJlDQo+ID4gKGUuZy4gYnkgc2V0dGluZyB0aGUgdmVy c2lvbiBwcm9wZXJ0eSB0byAyKS4gVGhlIHNhbWUgZ29lcyBmb3IgdGhlIGhhc2gtDQo+ID4gZnVu Y3Rpb24gYW5kIGRpZ2l0YWwtc2lnbmF0dXJlLWFsZ29yaXRobSBwcm9wZXJ0aWVzOiBhIENETiBj b3VsZCBtYW5kYXRlDQo+ID4gdGhhdCBVUkkgU2lnbmluZyB2ZXJzaW9uIDEgaXMgdXNlZCwgYnV0 IHN0aWxsIG9ubHkgYWxsb3cgU0hBLTUxMiBpbnN0ZWFkDQo+ID4gb2YgU0hBLTI1NiBhcyB1c2Vk IGJ5IGRlZmF1bHQuDQo+ID4NCj4gPiBrZXktaWQgaXMgZm9yIHdoZW4gdGhlcmUgaXMgb25seSBh IHNpbmdsZSBrZXkgaWQgYXMgYW4gb3B0aW1pc2F0aW9uIGlmDQo+ID4gc29tZW9uZSB3YW50cyB0 byBoYXZlIGEgc2luZ2xlIGtleSBpZCAmIG5vdCB0cmFuc21pdCBpdCBpbiB0aGUgc2lnbmVkDQo+ IFVSST8NCj4gPiBEb2VzO3Qgc2VlbSB3b3J0aCBpdCB0byBtZSBmb3IgYSBuYXJyb3cgY29ybmVy IGNhc2UuIElmIGl0IGlzIHdvcnRoIGl0DQo+ID4ganVzdCBzcGVjaWZ5IGlmIEtJRC9LSURfTlVN IGlzIG1pc3NpbmcgZnJvbSB0aGUgc2lnbmVkIFVSSSBhbmQga2V5LWlkLQ0KPiBzZXQNCj4gPiBj b250YWlucyBhIHNpbmdsZSB2YWx1ZSB0aGVuIHVzZSB0aGF0PyBPciBpZiBLSUQvS0lEX05VTSBp cyBtaXNzaW5nIHRoZQ0KPiA+IHN1cnJvZ2F0ZSBjaGVja3MgYWxsIGtleXMgaW4ga2V5LWlkLXNl dCBhbmQgaWYgb25lIG1hdGNoZXMgdGhlIFVSSSBpcw0KPiA+IGF1dGhvcmlzZWQ/DQo+ID4NCj4g PiBbUmF5XSBTZWUgZWFybGllciBjb21tZW50DQo+ID4NCj4gPiAoUGVyc29uYWxseSBJIHRoaW5r IEtJRC9LSURfTlVNIGluIHRoZSBTaWduZWQgVVJpIGlzIHBvaW50bGVzcywgdGhlaXINCj4gPiBt ZWFuaW5nIGlzIGRpc3RyaWJ1dGVkIG91dCBvZiBiYW5kIHNvIHdoeSBub3QgYWxzbyBkaXN0cmli dXRlIHRoZSB2YWx1ZXMNCj4gPiBvdXQgb2YgYmFuZC92aWEgbWV0YWRhdGEgYW5kIGhhdmUgdGhl IGJlaGF2aW91ciBiZSBhbnkgdmFsaWQga2V5L3NlY3JldA0KPiBpbg0KPiA+IGtleS1pZC1zZXQg cGFzc2VzIGFuZCByZW1vdmUgS0lEL0tJRF9OVU0gW2FuZCBtYXliZSBDS0ldIGZyb20gdGhlIFNp Z25lZA0KPiA+IFVSSSBlbnRpcmVseSkNCj4gPg0KPiA+IFtSYXldIEnigJltIG5vdCBzdXJlIEkg dW5kZXJzdGFuZC4gSG93IHdvdWxkIHRoZSBkQ0ROIGtub3cgd2hpY2ggS2V5IGlzDQo+IHVzZWQN Cj4gPiB0byBjYWxjdWxhdGUgYSBnaXZlbiBzaWduYXR1cmU/IE9yIGFyZSB5b3Ugc2F5aW5nIGl0 IHNob3VsZCBqdXN0IGNoZWNrDQo+IGFsbA0KPiA+IHBvc3NpYmxlIEtleXMgdGhhdCBhcmUgaW4g dGhlIGFsbG93ZWQgc2V0Pw0KPiA+DQo+ID4gU2VjdGlvbiA1LjQ6DQo+ID4gVGhpcyBjb25mdXNl ZCBtZToNCj4gPiAgICBOb3RlIHRoYXQgdGhlIEtleSBJRCBpbmZvcm1hdGlvbiBlbGVtZW50IGlz IG5vdCBuZWVkZWQgaWYgb25seSBvbmUNCj4gPiAgICBrZXkgaXMgcHJvdmlkZWQgYnkgdGhlIENT UCBvciB0aGUgVXBzdHJlYW0gQ0ROIGZvciB0aGUgY29udGVudCBpdGVtDQo+ID4gICAgb3Igc2V0 IG9mIGNvbnRlbnQgaXRlbXMgY292ZXJlZCBieSB0aGUgQ0ROSSBNZXRhZGF0YSBvYmplY3QuDQo+ ID4gdW50aWwgSSByZWFsaXNlZCB0aGF0IOKAnEtleSBJRCBpbmZvcm1hdGlvbiBlbGVtZW504oCd IHdhcyByZWZlcnJpbmcgdG8gdGhlDQo+ID4gZWxlbWVudCBvZiB0aGUgU2lnbmVkIFVSSSBhbmQg bm90IHRoZSBrZXktaWQgcHJvcGVydHkgb2YgdGhlIG1ldGFkYXRhDQo+ID4gb2JqZWN0IHNwZWNp ZmllZCBpbW1lZGlhdGVseSBhYm92ZSB0aGUgc2VudGVuY2UuIE1heWJlIHBocmFzZSBhcyDigJxO b3RlDQo+ID4gdGhhdCB0aGUgS2V5IElEIGluZm9ybWF0aW9uIGVsZW1lbnQgZG9lcyBub3QgbmVl ZCB0byBiZSBpbmNsdWRlZCBpbiB0aGUNCj4gPiBTaWduZWQgVVJJIGlmIG9ubHkgb25lIGtleeKA piINCj4gPg0KPiA+IFtSYXldIEdvb2QgcG9pbnQuIFdpbGwgdXBkYXRlLg0KPiA+DQo+ID4gU2Vj dGlvbiA5Og0KPiA+ICAgIEluIHRoZSBjYXNlIHdoZXJlIGFzeW1tZXRyaWMga2V5cyBhcmUgdXNl ZCwgdGhlIEtJRCBpbmZvcm1hdGlvbg0KPiA+ICAgIGVsZW1lbnQgbWlnaHQgY29udGFpbiB0aGUg VVJMIHRvIHRoZSBwdWJsaWMga2V5LiAgVG8gcHJldmVudA0KPiA+ICAgIG1hbGljaW91cyBjbGll bnRzIGZyb20gc2lnbmluZyB0aGVpciBvd24gVVJJcyBhbmQgaW5zZXJ0aW5nIHRoZQ0KPiA+ICAg IGFzc29jaWF0ZWQgcHVibGljIGtleSBVUkwgaW4gdGhlIEtJRCBmaWVsZCwgdGhlcmVieSBwYXNz aW5nIFVSSQ0KPiA+ICAgIHZhbGlkYXRpb24sIGl0IGlzIGltcG9ydGFudCB0aGF0IENETnMgY2hl Y2sgd2hldGhlciB0aGUgVVJJIGNvbnZleWVkDQo+ID4gICAgaW4gdGhlIEtJRCBmaWVsZCBpcyBp biB0aGUgYWxsb3dhYmxlIHNldCBvZiBLSURzIGFzIGxpc3RlZCBpbiB0aGUNCj4gPiAgICBDRE5J IG1ldGFkYXRhIG9yIHNldCB2aWEgY29uZmlndXJhdGlvbi4NCj4gPiBPciBzcGVjaWZ5IHRoaW5n cyBhcyBJIHN1Z2dlc3QgYWJvdmUgYW5kIHJlbW92ZSB0aGUgbmVlZCBmb3IgS0lEL0tJRF9OVU0N Cj4gPiBiZWluZyBwcmVzZW50IGluIHRoZSBTaWduZWQgVVJJIGFuZCB0aGVyZWZvcmUgdGhpcw0K PiBzY2VuYXJpby92dWxuZXJhYmlsaXR5DQo+ID4gYmVpbmcgYWJsZSB0byBvY2N1ciBpbiB0aGUg Zmlyc3QgcGxhY2U/DQo+ID4NCj4gPiBbUmF5XSBTZWUgbXkgZWFybGllciBjb21tZW50LiBJIGRv buKAmXQgc2VlIGhvdyB0aGUgZENETiB3b3VsZCBldmVyIGJlDQo+IGFibGUNCj4gPiB0byBrbm93 IHdoaWNoIGtleSB3YXMgdXNlZC4gQnV0IG1heWJlIEnigJltIG1pc3Npbmcgc29tZXRoaW5nLg0K PiA+DQo+ID4gbml0czoNCj4gPiBTZWN0aW9uIDE6DQo+ID4gICAgVGhlIHByaW1hcnkgZ29hbCBv ZiBVUkkgU2lnbmluZyBpcyB0byBtYWtlDQo+ID4gICAgc3VyZSB0aGF0IG9ubHkgYXV0aG9yaXpl ZCBVc2VyIEFnZW50cyAoVUFzKSBhcmUgYWJsZSB0byBhY2Nlc3MgdGhlDQo+ID4gICAgY29udGVu dCwgd2l0aCBhIENTUCBiZWluZyBhYmxlIHRvIGF1dGhvcml6ZSBldmVyeSBpbmRpdmlkdWFsIHJl cXVlc3QuDQo+ID4gSXMgaXQgcmVhbGx5IHRvIGF1dGhvcmlzZSB0aGUgVXNlciBBZ2VudCBvciB0 aGUgSVAgYWRkcmVzcyB0aGUgVXNlcg0KPiBBZ2VudA0KPiA+IGlzIGJlaGluZD8gVGhlcmUgaXMg bm90aGluZyBpbiB0aGUgc2lnbmVkIFVSSSB0aGF0IGlkZW50aWZpZXMgdGhlDQo+ID4gcGFydGlj dWxhciBVc2VyIEFnZW50LiBVUklzIGNhbiBzdGlsbCBwb3RlbnRpYWxseSBiZSBzaGFyZWQvZXhj aGFuZ2VkDQo+ID4gYmV0d2VlbiBVc2VyIEFnZW50cyBiZWhpbmQgdGhlIHNhbWUgSVAgYWRkcmVz cy9zdWJuZXQsIGhvd2V2ZXIgdGhlDQo+IGltcGFjdA0KPiA+IG9mIHN1Y2ggc2hhcmluZyBpcyBs aW1pdGVkL2FjY2VwdGFibGUgZm9yIHRoZSB1c2UgY2FzZS4NCj4gPg0KPiA+IEkgd291bGQgcy9V c2VyIEFnZW50cyAoVUFzKS9JUCBhZGRyZXNzKGVzKS8NCj4gPg0KPiA+IFNlY3Rpb24gMToNCj4g PiBJIGRvIG5vdCBrbm93IHdoYXQgaXMgbWVhbnQgYnkgZGlzdHJpYnV0aW9uIHBvbGljeSBpbiB0 aGlzIHNlbnRlbmNlOg0KPiA+ICAgIFNwbGl0dGluZyB0aGUgcm9sZSBvZiBwZXJmb3JtaW5nIHBl ci1yZXF1ZXN0DQo+ID4gICAgYXV0aG9yaXphdGlvbiBieSBDU1AgYW5kIHRoZSByb2xlIG9mIHZh bGlkYXRpb24gb2YgdGhpcyBhdXRob3JpemF0aW9uDQo+ID4gICAgYnkgdGhlIENETiBhbGxvd3Mg YW55IGFyYml0cmFyeSBkaXN0cmlidXRpb24gcG9saWN5IHRvIGJlIGVuZm9yY2VkDQo+ID4gICAg YWNyb3NzIENETnMgd2l0aG91dCB0aGUgbmVlZCBvZiBDRE5zIHRvIGhhdmUgYW55IGF3YXJlbmVz cyBvZiB0aGUNCj4gPiAgICBhY3R1YWwgQ1NQIGRpc3RyaWJ1dGlvbiBwb2xpY3kuDQo+ID4NCj4g PiBTZWN0aW9uIDIuMjoNCj4gPiAgICBUaGUgS2V5IElEIEluZm9ybWF0aW9uIEVsZW1lbnQgaXMg dXNlZCB0byByZXRyaWV2ZWQgdGhlIGtleSB3aGljaCBpcw0KPiA+ICAgIG5lZWRlZCBhcyBpbnB1 dCB0byB0aGUgYWxnb3JpdGhtIGZvciB2YWxpZGF0aW5nIHRoZSBTaWduZWQgVVJJLg0KPiA+IHMv cmV0cmlldmVkL3JldHJpZXZlLw0KPiA+DQo+ID4gU2VjdGlvbiAyLjQ6DQo+ID4gICAgSG93ZXZl ciwgYSBjbGllbnQgb3IgQ0ROIG1heSBhcHBlbmQgb3RoZXINCj4gPiAgICBxdWVyeSBwYXJhbWV0 ZXJzIHVucmVsYXRlZCB0byBVUkkgU2lnbmluZyB0byB0aGUgU2lnbmVkIFVSSS4gIFN1Y2gNCj4g PiAgICBhZGRpdGlvbmFsIHF1ZXJ5IHBhcmFtZXRlcnMgU0hPVUxEIE5PVCB1c2UgdGhlIHNhbWUg bmFtZSBhcyB0aGUgVVJJDQo+ID4gICAgU2lnbmluZyBQYWNrYWdlIEF0dHJpYnV0ZSB0byBhdm9p ZCBuYW1lc3BhY2UgY29sbGlzaW9uIGFuZCBwb3RlbnRpYWwNCj4gPiAgICBmYWlsdXJlIG9mIHRo ZSBVUkkgU2lnbmluZyB2YWxpZGF0aW9uLg0KPiA+IHMvY2xpZW50L1VzZXIgQWdlbnQvIGlzIHBy b2JhYmx5IG1vcmUgYWxpZ25lZCB3aXRoIHRoZSByZXN0IG9mIHRoZQ0KPiA+IGRvY3VtZW50LiBU aGVyZSBhcmUgc29tZSBvdGhlciBwbGFjZXMgd2hlcmUgeW91IHVzZSBjbGllbnQuIFByb2JhYmx5 DQo+IHdvcnRoDQo+ID4gYmVpbmcgY29uc2lzdGVudCBhbmQgcGlja2luZyBvbmUgb2YgY2xpZW50 IG9yIFVzZXIgQWdlbnQgdG8gdXNlDQo+ID4gdGhyb3VnaG91dC4NCj4gPg0KPiA+IFNlY3Rpb24g MzoNCj4gPiAgICBJbiBjYXNlIHRoZQ0KPiA+ICAgIFVSSSBQYXR0ZXJuIENvbnRhaW5lciBpbmZv cm1hdGlvbiBlbGVtZW50IGlzIHVzZWQsIHRoZSBDU1AgaGFzIGZ1bGwNCj4gPiAgICBmbGV4aWJp bGl0eSB0byBzcGVjaWZ5IHdoaWNoIGVsZW1lbnRzIG9mIHRoZSBVUkkgKGluY2x1ZGluZyB0aGUN Cj4gPiAgICBzY2hlbWUgcGFydCkgYXJlIHByb3RlY3RlZCBieSB0aGUgVVJJLg0KPiA+IEkgdGhp bmsgeW91IG1lYW4g4oCccHJvdGVjdGVkIGJ5IHRoZSBTaWduZWQgVVJJ4oCdPw0KPiA+DQo+ID4g U2VjdGlvbiAzOg0KPiA+ICAgIFRoZSBwcm9jZXNzIG9mIGdlbmVyYXRpbmcgYSBTaWduZWQgVVJJ IGNhbiBiZSBkaXZpZGVkIGludG8gZm91ciBzZXRzDQo+ID4gICAgb2Ygc3RlcHM6IDEpIENvbXBv c2UgVVJJIFNpZ25pbmcgSUVzIHdpdGggb3JpZ2luYWwgVVJJIC8gVVJJIHBhdHRlcm4sDQo+ID4g ICAgMikgQ29tcHV0ZSB0aGUgVVJJIFNpZ25hdHVyZSwgMykgRW5jb2RlIHRoZSBVUkkgU2lnbmlu ZyBQYWNrYWdlLCBhbmQNCj4gPiAgICA0KSBBc3NlbWJsZSB0aGUgcGFydHMgdG8gY3JlYXRlIHRo ZSBTaWduZWQgVVJJLg0KPiA+IFRoaXMgd291bGQgYmUgYmV0dGVyIGFzIGEgbGlzdCBvZiBudW1i ZXJlZCBidWxsZXRzIElNTy4NCj4gPg0KPiA+DQo+ID4gW1JheV0gVGhhbmtzIGFnYWluIQ0KPiA+ DQo+ID4gSFRIDQo+ID4gQmVuDQo+ID4NCj4gPiA+IE9uIDI5IEp1biAyMDE2LCBhdCAxNDo0Mywg S2V2aW4gTWEgSiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+IHdyb3RlOg0KPiA+ID4NCj4gPiA+ IEhpIEFsbCwNCj4gPiA+DQo+ID4gPiAgQXMgcGVyIHRoZSBkaXNjdXNzaW9uIGluIEJBLCB3ZSBo YXZlIHJlY2VpdmVkIHRoZSB1cGRhdGVkIFVSSSBTaWduaW5nDQo+ID4gZHJhZnQgYW5kIHdvdWxk IGxpa2UgdG8gbW92ZSBpdCB0byBXR0xDLiAgKExlaWYgYW5kIFBoaWwsIHlvdSdyZSB1cCEpDQo+ ID4gPg0KPiA+ID4gIFRvZGF5IHdpbGwgYmVnaW4gdGhlIHR3by13ZWVrIFdHTEMgb246DQo+ID4g aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0w OQ0KPiA+ID4NCj4gPiA+ICBQbGVhc2Ugc2VuZCBhbnkgY29tbWVudHMsIHF1ZXN0aW9ucywgY29u Y2VybnMgdG8gdGhlIENETkkgbWFpbGluZw0KPiBsaXN0Og0KPiA+IGNkbmlAaWV0Zi5vcmcNCj4g PiA+DQo+ID4gPiAgVGhlIFdHTEMgd2lsbCBlbmQgb24gV2VkbmVzZGF5IEp1bHkgMTMsIDIwMTYu DQo+ID4gPg0KPiA+ID4gdGhhbnghDQo+ID4gPg0KPiA+ID4gLS0gIEtldmluIGFuZCBGcmFuY29p cw0KPiA+ID4NCj4gPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQo+ID4gPiBDRE5pIG1haWxpbmcgbGlzdA0KPiA+ID4gQ0ROaUBpZXRmLm9yZw0KPiA+ ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pDQo+ID4NCj4gPiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IENETmkg bWFpbGluZyBsaXN0DQo+ID4gQ0ROaUBpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vY2RuaQ0KPiA+DQo+ID4NCj4gPiBUaGlzIG1lc3NhZ2UgbWF5IGNv bnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYNCj4geW91 DQo+ID4gYXJlIG5vdCB0aGUgYWRkcmVzc2VlIG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0 byB5b3UgYnkgbWlzdGFrZSwgeW91DQo+ID4gYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNl bmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cw0KPiBubw0KPiA+IGxpYWJp bGl0eSBmb3IgdGhlIGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdo aWNoIHlvdQ0KPiB1c2UNCj4gPiBpdCBhbmQgZm9yIGRhbWFnZSBvZiBhbnkga2luZCByZXN1bHRp bmcgZnJvbSB0aGUgcmlza3MgaW5oZXJlbnQgdG8gdGhlDQo+ID4gZWxlY3Ryb25pYyB0cmFuc21p c3Npb24gb2YgbWVzc2FnZXMuDQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gPiBDRE5pIG1haWxpbmcgbGlzdA0KPiA+IENETmlAaWV0Zi5vcmcN Cj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCj4gDQo+IA0K PiBUaGlzIG1lc3NhZ2UgbWF5IGNvbnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5k ZWQgZm9yIHlvdS4gSWYgeW91DQo+IGFyZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0aGlzIG1l c3NhZ2Ugd2FzIHNlbnQgdG8geW91IGJ5IG1pc3Rha2UsIHlvdQ0KPiBhcmUgcmVxdWVzdGVkIHRv IGluZm9ybSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5v DQo+IGxpYWJpbGl0eSBmb3IgdGhlIGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFu bmVyIGluIHdoaWNoIHlvdSB1c2UNCj4gaXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVz dWx0aW5nIGZyb20gdGhlIHJpc2tzIGluaGVyZW50IHRvIHRoZQ0KPiBlbGVjdHJvbmljIHRyYW5z bWlzc2lvbiBvZiBtZXNzYWdlcy4NCg== From nobody Tue Jul 12 04:48:34 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 478DB12D7B8 for ; Tue, 12 Jul 2016 04:48:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.488 X-Spam-Level: X-Spam-Status: No, score=-5.488 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RReKhm5tXWJY for ; Tue, 12 Jul 2016 04:48:29 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 247F012D0F4 for ; Tue, 12 Jul 2016 04:48:28 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.28,351,1464645600"; d="scan'208";a="10271097" Received: from exc-cashub02.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.221]) by mailhost1b.tno.nl with ESMTP; 12 Jul 2016 13:48:27 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB02.tsn.tno.nl ([fe80::8c02:de2a:3094:171%14]) with mapi id 14.03.0294.000; Tue, 12 Jul 2016 13:48:26 +0200 From: "Brandenburg, R. (Ray) van" To: Kevin Ma J , Ben Niven-Jenkins , "Content Delivery Networks Interconnection Discussion List" Thread-Topic: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing Thread-Index: AdHSDAIj8Q+3AOh3Q/WhloflAutMVQCOR2MAATEZ7QAAEQfIAAB+BoEAAAt7tAAAL+dbAA== Date: Tue, 12 Jul 2016 11:48:26 +0000 Message-ID: References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> <73B31A7C-CC80-4646-A7C9-401874C3B07D@tno.nl> In-Reply-To: Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.17.0.160611 x-originating-ip: [134.221.225.191] x-esetresult: clean, is OK x-esetid: 37303A29BC344A66657D63 Content-Type: text/plain; charset="utf-8" Content-ID: <9431A2C82AE1FA46B8BEA09312C103B5@tno.nl> MIME-Version: 1.0 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jul 2016 11:48:33 -0000 SGkgS2V2aW4sDQoNCk9uIDExLzA3LzE2IDE2OjU2LCAiS2V2aW4gTWEgSiIgPGtldmluLmoubWFA ZXJpY3Nzb24uY29tPiB3cm90ZToNCg0KSGkgUmF5LA0KDQo+IEdpdmVuIHRoYXQgTGVpZiBhbmQg aGlzIGNvbGxlYWd1ZXMgYWN0dWFsbHkgaW1wbGVtZW50ZWQgdGhlIGFsZ29yaXRobSwgYW5kDQo+ IHRoZXkgd2VyZSB0aGUgb25lcyBhc2tpbmcgZm9yIHRoaXMgY2hhbmdlLCBteSBndWVzcyB3b3Vs ZCBiZSB5ZXMuIEJ1dA0KPiBsZXTigJlzIGFzayB0aGVtIHRvIG1ha2Ugc3VyZS4NCg0KICBJIGJl bGlldmUgTGVpZiBhbmQgUGhpbCBhZ3JlZWQgaW4gQkEgdG8gcmUtcmV2aWV3IGR1cmluZyBXR0xD LCBzbywgaG9wZWZ1bGx5IHRoZXkgY2FuIGNoaW1lIGluLiAgOikNCg0KPiBJbiB0aGUgZW5kLCBJ IHdvdWxkbuKAmXQgYmUgc3VycHJpc2VkIGlmIHNvbWUNCj4gaW1wbGVtZW50YXRpb25zIGFjdHVh bGx5IG9ubHkgaW1wbGVtZW50ZWQgS0lEX05VTS4NCg0KICBUaGlua2luZyBhYm91dCB0aGlzIHNv bWUgbW9yZS4gIEFyZSB0aGVyZSBhbnkgZ3VpZGVsaW5lcyBvbiBtYW5kYXRvcnkgdG8gc3VwcG9y dC9pbXBsZW1lbnQgSUVzPyAgSXMgb25lIGFsbG93ZWQgdG8gb25seSBpbXBsZW1lbnQgS0lEX05V TSBhbmQgbm90IEtJRCwgb3Igb25seSBIRi9NRCBhbmQgbm90IERTQS9EUzsgYW5kIGlmIGFuIElF IGlzIG5vdCBzdXBwb3J0ZWQsIGlzIHRoZXJlIGEgTVVTVCByZWplY3Q/ICBJZiBzbywgc2hvdWxk IHRoZXJlIGJlIGFuIGVycm9yIGNvZGUgZm9yIHRoYXQ/DQoNCltSYXldIEN1cnJlbnRseSwgd2Ug ZG9u4oCZdCBoYXZlIGFueSBzdWNoIGd1aWRlbGluZXMgYW5kIGFuIGltcGxlbWVudGF0aW9uIGlz IGV4cGVjdGVkIHRvIGltcGxlbWVudCBhbGwgSUVzIChidXQgX25vdF8gYWxsIGFsZ29yaXRobXMp LiBCZW7igJlzIHN1Z2dlc3Rpb24gdG8gbm90IG1ha2UgRFNBIG1hbmRhdG9yeSBkb2VzIG5vdCBz b3VuZCB1bnJlYXNvbmFibGUgdG8gbWUuIA0KDQo+IElmIHlvdSBsb29rIGF0IHRoZSBhbGdvcml0 aG0sIHRoZSBwYXRocyBmb3IgSEYgYW5kIERTQSBhcmUgY29uc2lkZXJhYmx5DQo+IGRpZmZlcmVu dC4NCg0KSnVzdCB0byB0YWtlIGl0IG9uZSBzdGVwIGZ1cnRoZXI6IFllcywgdGhlIGFsZ29yaXRo bXMgYXJlIGRpZmZlcmVudCwgYnV0IGluIHNlY3Rpb24gMy4yLCBzdGVwcyAxIGFuZCAyIGNsZWFy bHkgc3RhdGUgIjEuIElmIHN5bW1ldHJpYyBzaGFyZWQga2V5IGlzIHVzZSwgcGVyZm9ybSB0aGlz IHN0ZXAiIGFuZCAiMi4gaWYgYXN5bW1ldHJpYyBwcml2YXRlL3B1YmxpYyBrZXlzIGFyZSB1c2Vk LCBwZXJmb3JtIHRoaXMgc3RlcCIuICBUaGUgZGlmZmVyZW5jZSBpcyBhbHJlYWR5IGJyb2tlbiBv dXQuIFRoZSBvbmx5IGRpZmZlcmVuY2UgdG8gdGhlIGN1cnJlbnQgdGV4dCB3b3VsZCBiZSBhIGZp bmQvcmVwbGFjZSBvbiB0aGUgSUUgaW4gdGhvc2Ugc2VjdGlvbnMuICBMaWtld2lzZSwgaW4gc2Vj dGlvbiA0LjQsIHN0ZXBzIDIuQSBhbmQgMi5CIGFyZSBzZXBhcmF0ZWQgYmFzZWQgb24gd2hldGhl ciB0aGUgYWxnb3JpdGhtIGlzIHN5bW1ldHJpYyBvciBhc3ltbWV0cmljLCBhcyBkZXRlcm1pbmVk IGluIHNlY3Rpb24gNC4yLCBzdGVwcyAyIGFuZCAzLiAgKE5vdGU6IFNlY3Rpb24gNC4zIHdvdWxk IGFjdHVhbGx5IGJlIHNpbXBsaWZpZWQgYnkgbm90IGhhdmluZyB0byBkaXN0aW5ndWlzaCBiZXR3 ZWVuIE1EL0RTLikgIFRoZSBvbmx5IHJlYWwgcXVlc3Rpb24sIGltbywgaXMgd2hldGhlciBvciBu b3Qgc2VjdGlvbiA0LjIsIHN0ZXBzIDIgYW5kIDMgY291bGQgYmUgcmVwbGFjZWQgd2l0aCBhbiBh bGdvcml0aG0gY2hlY2sgcmF0aGVyIHRoYW4gYW4gSUUgY2hlY2ssIGkuZS4sIGlmIFNIQTI1Niwg dGhlbiBpdCdzIHN5bW1ldHJpYywgZWxzZSBpZiBFQ0RTQSwgdGhlbiBpdCdzIGFzeW1tZXRyaWM/ DQoNClRoZXJlIGN1cnJlbnRseSBpc24ndCBhIHJlZ2lzdHJ5IGZvciBzdXBwb3J0ZWQgSEYvU0Fz Lg0KICAxLiBXb3VsZCBhIHJlZ2lzdHJ5IG1ha2Ugc2Vuc2U/DQogIDIuIFdvdWxkIGEgcmVnaXN0 cnkgd2l0aCBhIGNsZWFyL29idmlvdXMgZGVzaWduYXRpb24gb2Ygc3ltbWV0cmljIHZzIGFzeW1t ZXRyaWMgbWFrZSB0aGUgYWJvdmUgdGVzdCBlYXN5PyAgDQoNCltSYXldIEl0IHNlZW1zIHdlIGFn cmVlIHRoYXQgZm9sZGluZyBIRiBhbmQgRFNBIGludG8gb25lIGluZm9ybWF0aW9uIGVsZW1lbnQg d291bGRu4oCZdCBmdW5kYW1lbnRhbGx5IHJlbW92ZSBzdGVwcyBmcm9tIHRoZSBhbGdvcml0aG0g aXRzZWxmLCBub3IgcmVkdWNlIGl04oCZcyBjb21wbGV4aXR5LiBUaGVuIEkgc3RpbGwgZG9u4oCZ dCBzZWUgdGhlIGRvd25zaWRlIG9mIGhhdmluZyBib3RoIGFuIEhGIGFuZCBEU0EgaW5mb3JtYXRp b24gZWxlbWVudCwgZXNwZWNpYWxseSBpZiBpdCBtZWFucyB3ZSBkbyBub3QgaGF2ZSB0byBhZGQg YSByZWdpc3RyeSBhbmQgaXQgbWFrZXMgdGhlIHN0ZXAgb2YgY2hlY2tpbmcgd2hpY2ggc3RlcHMg b2YgdGhlIGFsZ29yaXRobSB5b3UgbmVlZCB0byBmb2xsb3cgZWFzaWVyLiBJZiB5b3XigJlyZSBj b25jZXJuZWQgYWJvdXQgdGhlIHdvcmRpbmcgaW4gdGhlIHBhcmFncmFwaHMgYWJvdmUsIHdvdWxk buKAmXQgaXQgYmUgZWFzaWVyIGlmIEkgd291bGQgc2ltcGx5IHJlcGxhY2UgdGhlIOKAmHN5bW1l dHJpY+KAmSBhbmQg4oCYYXNzeW1ldHJpY+KAmSBpbiB0aGUgcGFyYWdyYXBocyBhYm92ZSB3aXRo IOKAmGlmIEhGIGlzIHByZXNlbnTigJkgYW5kIOKAmGlmIERTQSBpcyBwcmVzZW504oCZPyANCg0K QWxzbywgSSd2ZSBwcm9wb3NlZCByZW1vdmFsIG9mIHRoZSBNZXRhZGF0YSBBdXRoIFR5cGUgcmVn aXN0cnkgZnJvbSB0aGUgbWV0YWRhdGEgZHJhZnQ7IGlmIHRoYXQgaXMgYWNjZXB0ZWQsIHdlIHdv dWxkIG5vIGxvbmdlciBuZWVkIHNlY3Rpb24gOC40DQoNCltSYXldIE9rLg0KDQp0aGFueCENCg0K LS0gIEtldmluIEouIE1hDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTog QnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbiBbbWFpbHRvOnJheS52YW5icmFuZGVuYnVyZ0B0bm8u bmxdDQo+IFNlbnQ6IE1vbmRheSwgSnVseSAxMSwgMjAxNiAzOjI4IEFNDQo+IFRvOiBLZXZpbiBN YSBKOyBCZW4gTml2ZW4tSmVua2luczsgQ29udGVudCBEZWxpdmVyeSBOZXR3b3Jrcw0KPiBJbnRl cmNvbm5lY3Rpb24gRGlzY3Vzc2lvbiBMaXN0DQo+IFN1YmplY3Q6IFJlOiBbQ0ROaV0gV29ya2lu ZyBHcm91cCBMYXN0IENhbGwgb24gZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nDQo+IA0KPiBI aSBLZXZpbiwNCj4gDQo+ICA+IDEuIEhhdmluZyBib3RoIEtJRCBhbmQgS0lEX05VTSBzZWVtcyB1 bm5lY2Vzc2FyeSB0byBtZS4gIEkgdW5kZXJzdGFuZA0KPiBMZWlmJ3MgYXJndW1lbnQNCj4gKGh0 dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvY2RuaS9ZRElyT2R1dGJydlFrRXd2 QWV2d09OZGlVRkUpLA0KPiBidXQgSSdtIHN0aWxsIG5vdCBzdXJlIEkgYWdyZWUuICBBcmUgaW1w bGVtZW50ZXJzIHJlYWxseSBnb2luZyB0byBoYXZlIDINCj4gc2VwYXJhdGUgY29kZSBwYXRocywg b25lIHdpdGggYW4gaW50ZWdlciB2YXJpYWJsZSBhbmQgYW5vdGhlciB3aXRoIGENCj4gc3RyaW5n IHZhcmlhYmxlLCBqdXN0IHRvIGdldCBhIG1lbW9yeSBlZmZpY2llbmN5PyAgT3IgaXMgdGhlIGlu dGVnZXIganVzdA0KPiBnb2luZyB0byBnZXQgY29udmVydGVkIHRvIGEgc3RyaW5nPyAgQW5kIHRo ZXkgYWxyZWFkeSBoYXZlIHRvIGFsbG9jYXRlIHRoZQ0KPiBtZW1vcnkganVzdCB0byBwYXJzZSB0 aGUgdG9rZW4/DQo+IA0KPiBHaXZlbiB0aGF0IExlaWYgYW5kIGhpcyBjb2xsZWFndWVzIGFjdHVh bGx5IGltcGxlbWVudGVkIHRoZSBhbGdvcml0aG0sIGFuZA0KPiB0aGV5IHdlcmUgdGhlIG9uZXMg YXNraW5nIGZvciB0aGlzIGNoYW5nZSwgbXkgZ3Vlc3Mgd291bGQgYmUgeWVzLiBCdXQNCj4gbGV0 4oCZcyBhc2sgdGhlbSB0byBtYWtlIHN1cmUuIEluIHRoZSBlbmQsIEkgd291bGRu4oCZdCBiZSBz dXJwcmlzZWQgaWYgc29tZQ0KPiBpbXBsZW1lbnRhdGlvbnMgYWN0dWFsbHkgb25seSBpbXBsZW1l bnRlZCBLSURfTlVNLg0KPiANCj4gPiAgMi4gSSBhZ3JlZSB0aGF0IGhhdmluZyBib3RoIEhGIGFu ZCBEU0EgY291bGQgYmUgdW5uZWNlc3NhcnkuICBJIGtub3cNCj4gd2UndmUgYWxzbyBoYWQgbG9u ZyBkaXNjdXNzaW9ucyBhYm91dCBuZWVkaW5nIGZvciBib3RoIE1EIGFuZCBEUy4NCj4gVWx0aW1h dGVseSwgdGhlcmUgaXMgYW4gYWxnb3JpdGhtIChIRiBvciBEU0EpIHRoYXQgaXMgcnVuLCBhbmQg cmVzdWx0cyBpbg0KPiBhIHNpZ25hdHVyZSAoTUQgb3IgRFMpLCBhbmQgb25seSBvbmUgcGFpciAo SEYvTUQgb3IgRFNBL0RTKSBlbmRzIHVwIGluIHRoZQ0KPiB0b2tlbj8gIFRoZSBhbGdvcml0aG0g ZG9lc24ndCByZWFsbHkgY2hhbmdlIGRyYW1hdGljYWxseSBpZiB0aGUgSUUncyBhcmUNCj4gZGlm ZmVyZW50PyAgSXMgaXQganVzdCBhYm91dCByZWFkYWJpbGl0eT8NCj4gDQo+IElmIHlvdSBsb29r IGF0IHRoZSBhbGdvcml0aG0sIHRoZSBwYXRocyBmb3IgSEYgYW5kIERTQSBhcmUgY29uc2lkZXJh Ymx5DQo+IGRpZmZlcmVudC4gT25lIHBlcmZvcm1zIGFuIEhNQUMgYXMgZGVmaW5lZCBieSBIRiwg dGhlIG90aGVyIGRvZXMgYQ0KPiAoa2V5bGVzcykgU0hBLTEgaGFzaCwgdGhlbiBlbmNyeXB0cyB0 aGUgcmVzdWx0IHdpdGggYW4gZW5jcnlwdGlvbg0KPiBmdW5jdGlvbi4gSWYgd2Ugd291bGQgbWVy Z2UgYm90aCBpbnRvIGEgc2luZ2xlIEluZm9ybWF0aW9uIEVsZW1lbnQgKGxldOKAmXMNCj4gY2Fs bCBpdCBTaWduYXR1cmUgQWxnb3JpdGhtLCBvciBTQSwgZm9yIG5vdyksIHRoZSBhbGdvcml0aG0g d291bGQgaGF2ZSB0bw0KPiBpbmNsdWRlIHNvbWV0aGluZyBhbG9uZyB0aGUgbGluZXMgb2Y6IOKA nElmIHRoZSBhbGdvcml0aG0gY29tbXVuaWNhdGVkIGluDQo+IHRoZSBTQSBmaWVsZCBpcyBhIERp Z2l0YWwgU2lnbmF0dXJlIEFsZ29yaXRobSwgcGVyZm9ybSBYLiBJZiBpdCBpcyBhDQo+IGhhc2hp bmcgZnVuY3Rpb24sIHBlcmZvcm0gWS7igJ0uIEluIG90aGVyIHdvcmRzLCB0aGUgdHdvIGRpZmZl cmVudCBwYXRocyBpbg0KPiB0aGUgYWxnb3JpdGhtIHdpbGwga2VlcCBleGlzdGluZywgYnV0IG5v dyB5b3XigJlyZSBwcm9iYWJseSBnb2luZyB0byBoYXZlIHRvDQo+IGdpdmUgc29tZSBkZWZpbml0 aW9uIG9yIGxpc3Qgb2Ygd2hpY2ggYWxnb3JpdGhtcyBjbGFzc2lmeSBhcyBEaWdpdGFsDQo+IFNp Z25hdHVyZSBBbGdvcml0aG0gYW5kIHdoaWNoIGFzIGhhc2hpbmcgZnVuY3Rpb25zLiBJbiB0aGUg ZW5kLCBJ4oCZbSBub3QNCj4gc3VyZSB3aGF0IHdlIHdvdWxkIGdhaW4gYnkgaXQuDQo+IA0KPiBU aGFua3MsDQo+IA0KPiBSYXkNCj4gDQo+IA0KPiBPbiAwOC8wNy8xNiAyMzoxOSwgIktldmluIE1h IEoiIDxrZXZpbi5qLm1hQGVyaWNzc29uLmNvbT4gd3JvdGU6DQo+IA0KPiBIaSBSYXksDQo+IA0K PiAgIChBcyBhbiBpbmRpdmlkdWFsKSBJJ2xsIGVjaG8gdHdvIG9mIEJlbidzIHBvaW50cywgYXMg SSd2ZSBhc2tlZCBzaW1pbGFyDQo+IHF1ZXN0aW9ucyBpbiB0aGUgcGFzdDoNCj4gDQo+ICAgMS4g SGF2aW5nIGJvdGggS0lEIGFuZCBLSURfTlVNIHNlZW1zIHVubmVjZXNzYXJ5IHRvIG1lLiAgSSB1 bmRlcnN0YW5kDQo+IExlaWYncyBhcmd1bWVudA0KPiAoaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRm Lm9yZy9hcmNoL21zZy9jZG5pL1lESXJPZHV0YnJ2UWtFd3ZBZXZ3T05kaVVGRSksDQo+IGJ1dCBJ J20gc3RpbGwgbm90IHN1cmUgSSBhZ3JlZS4gIEFyZSBpbXBsZW1lbnRlcnMgcmVhbGx5IGdvaW5n IHRvIGhhdmUgMg0KPiBzZXBhcmF0ZSBjb2RlIHBhdGhzLCBvbmUgd2l0aCBhbiBpbnRlZ2VyIHZh cmlhYmxlIGFuZCBhbm90aGVyIHdpdGggYQ0KPiBzdHJpbmcgdmFyaWFibGUsIGp1c3QgdG8gZ2V0 IGEgbWVtb3J5IGVmZmljaWVuY3k/ICBPciBpcyB0aGUgaW50ZWdlciBqdXN0DQo+IGdvaW5nIHRv IGdldCBjb252ZXJ0ZWQgdG8gYSBzdHJpbmc/ICBBbmQgdGhleSBhbHJlYWR5IGhhdmUgdG8gYWxs b2NhdGUgdGhlDQo+IG1lbW9yeSBqdXN0IHRvIHBhcnNlIHRoZSB0b2tlbj8NCj4gDQo+ICAgMi4g SSBhZ3JlZSB0aGF0IGhhdmluZyBib3RoIEhGIGFuZCBEU0EgY291bGQgYmUgdW5uZWNlc3Nhcnku ICBJIGtub3cNCj4gd2UndmUgYWxzbyBoYWQgbG9uZyBkaXNjdXNzaW9ucyBhYm91dCBuZWVkaW5n IGZvciBib3RoIE1EIGFuZCBEUy4NCj4gVWx0aW1hdGVseSwgdGhlcmUgaXMgYW4gYWxnb3JpdGht IChIRiBvciBEU0EpIHRoYXQgaXMgcnVuLCBhbmQgcmVzdWx0cyBpbg0KPiBhIHNpZ25hdHVyZSAo TUQgb3IgRFMpLCBhbmQgb25seSBvbmUgcGFpciAoSEYvTUQgb3IgRFNBL0RTKSBlbmRzIHVwIGlu IHRoZQ0KPiB0b2tlbj8gIFRoZSBhbGdvcml0aG0gZG9lc24ndCByZWFsbHkgY2hhbmdlIGRyYW1h dGljYWxseSBpZiB0aGUgSUUncyBhcmUNCj4gZGlmZmVyZW50PyAgSXMgaXQganVzdCBhYm91dCBy ZWFkYWJpbGl0eT8NCj4gDQo+IHRoYW54IQ0KPiANCj4gLS0gIEtldmluIEouIE1hDQo+IA0KPiA+ IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogQ0ROaSBbbWFpbHRvOmNkbmkt Ym91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEJyYW5kZW5idXJnLCBSLg0KPiA+IChSYXkp IHZhbg0KPiA+IFNlbnQ6IEZyaWRheSwgSnVseSAwOCwgMjAxNiA3OjEyIEFNDQo+ID4gVG86IEJl biBOaXZlbi1KZW5raW5zOyBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVyY29ubmVjdGlv bg0KPiA+IERpc2N1c3Npb24gTGlzdA0KPiA+IFN1YmplY3Q6IFJlOiBbQ0ROaV0gV29ya2luZyBH cm91cCBMYXN0IENhbGwgb24gZHJhZnQtaWV0Zi1jZG5pLXVyaS0NCj4gc2lnbmluZw0KPiA+DQo+ ID4gSGkgQmVuLA0KPiA+DQo+ID4gVGhhbmtzIGZvciB0aGUgdGhvcm91Z2ggcmV2aWV3ISBTZWUg bXkgY29tbWVudHMgYmVsb3cuDQo+ID4NCj4gPiBSYXkNCj4gPg0KPiA+IE9uIDAyLzA3LzE2IDEz OjM1LCAiQ0ROaSBvbiBiZWhhbGYgb2YgQmVuIE5pdmVuLUplbmtpbnMiIDxjZG5pLQ0KPiA+IGJv dW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGJlbkBuaXZlbi1qZW5raW5zLmNvLnVrPiB3cm90 ZToNCj4gPg0KPiA+IEtldmluLCBDb2xsZWFndWVzLA0KPiA+DQo+ID4gSSByZXZpZXdlZCBkcmFm dC1pZXRmLWNkbmktdXJpLXNpZ25pbmctMDkgJiBiZWxvdyBhcmUgbXkgY29tbWVudHMuDQo+ID4N Cj4gPiBHZW5lcmFsOg0KPiA+DQo+ID4gVGhlIGRvY3VtZW50IGlzIG5vdCBjbGVhciBvbiB3aGV0 aGVyIGltcGxlbWVudGVycyBhcmUgZXhwZWN0ZWQgdG8NCj4gPiBpbXBsZW1lbnQgYm90aCBzaGFy ZWQgc2VjcmV0ICYgZGlnaXRhbCBzaWduYXR1cmUgYWxnb3JpdGhtcyBmb3Igc2lnbmVkDQo+IFVS SQ0KPiA+IHZhbGlkYXRpb24uIFRoaXMgY291bGQgbGVhZCB0byBpbnRlcm9wIHByb2JsZW1zIHdo ZXJlIGRpZmZlcmVudA0KPiA+IGltcGxlbWVudGF0aW9uIGltcGxlbWVudCBvbmUgYnV0IG5vdCB0 aGUgb3RoZXIuDQo+ID4NCj4gPiBNYXliZSBzcGVjaWZ5IGEgbWluaW11bSBiYXNlbGluZSBvZiBN VVNUIHN1cHBvcnQgc2hhcmVkIHNlY3JldCAoYXMgQUZBSUsNCj4gPiB0aGF0IGlzIHdoYXQgaXMg dXNlZCBpbiB0aGUgZmllbGQpIHdpdGggU0hPVUxEIGltcGxlbWVudCBkaWdpdGFsDQo+ID4gc2ln bmF0dXJlcyBmb3IgdGhlIDEgY29ybmVyIGNhc2UgZm9yIHdoaWNoIGRpZ2l0YWwgc2lnbmF0dXJl cyBwcm92aWRlIGFuDQo+ID4gYWR2YW50YWdlLg0KPiA+DQo+ID4gSeKAmW0gc29tZXdoYXQgYWdh aW5zdCBzcGVjaWZ5aW5nIG11c3QgaW1wbGVtZW50IGJvdGggc2hhcmVkIHNlY3JldCAmDQo+ID4g ZGlnaXRhbCBzaWduYXR1cmVzIGJlY2F1c2UgSeKAmXZlIG5ldmVyIHNlZW4gYSBkaWdpdGFsIHNp Z25hdHVyZSBiYXNlZA0KPiA+IHNpZ25lZCBVUkkgaW4gdGhlIGZpZWxkIGFuZCBJ4oCZbSBmYW1p bGlhciB3aXRoIHF1aXRlIGEgZmV3IHNpZ25lZCBVUkkNCj4gPiBhbGdvcml0aG1zL2ltcGxlbWVu dGF0aW9ucyBvZiBkaWZmZXJlbnQgQ0ROcy4gVGhhdCBzYXlzIHRvIG1lIGZvbGtzIGFyZQ0KPiA+ IG5vdCBsaWtlbHkgdG8gaW1wbGVtZW50IG1vcmUgdGhhbiB0aGUgc2hhcmVkIHNlY3JldCBhbGdv cml0aG0gdW5sZXNzDQo+IHRoZXkNCj4gPiByZWFsbHkgbmVlZCB0by4gSSBrbm93IENpc2NvIGhh dmUgYSBkaWdpdGFsIHNpZ25hdHVyZSBpbXBsZW1lbnRhdGlvbg0KPiBtYXliZQ0KPiA+IHRoZXkg Y291bGQgaGVscCB3aXRoIGhvdyBtdWNoIHVzZSBpdCBzZWVzIGluIHRoZSBmaWVsZD8NCj4gPg0K PiA+IFtSYXldIEFncmVlZCB0aGF0IHdlIHNob3VsZG7igJl0IG1ha2UgZGlnaXRhbCBzaWduYXR1 cmVzIG1hbmRhdG9yeS4gQXMgZm9yDQo+ID4gbWFraW5nIHN1cHBvcnQgZm9yIHNoYXJlZCBzZWNy ZXRzIG1hbmRhdG9yeTogSSBndWVzcyB0aGF0IG1ha2VzIHNlbnNlLg0KPiA+DQo+ID4gVGhlIGRv Y3VtZW50IGNvdWxkIGRvIHdpdGggc29tZSBtb3JlIGV4YW1wbGVzIG9mIHtVUkksIGF0dHJpYnV0 ZXMsDQo+ID4gVVJJU2lnbmluZ1BhY2thZ2UsIFNpZ25lZCBVUkl9IGNvdmVyaW5nIGUuZy4gSVB2 NCAmIElQdjYsIG9uZSBpbmNsdWRpbmcNCj4gYQ0KPiA+IFVSSSBQYXRoIFBhdHRlcm4gZXRjLg0K PiA+DQo+ID4gU2VjdGlvbiAyLjE6DQo+ID4gVVJJIFBhdHRlcm4gQ29udGFpbmVyIChVUEMpIGRl ZmluaXRpb24gLSBob3cgZG9lcyBvbmUgcmVwcmVzZW50IGEgVVJJDQo+ID4gcGF0dGVybiB0aGF0 IGNvbnRhaW5zIGEgbGl0ZXJhbCDigJg74oCZIGJlY2F1c2UgdGhlIFVSSS9VUkkgcGF0dGVybiBj b250YWlucw0KPiA+IGluIHBhdGggcGFyYW1ldGVycyB0byBtYXRjaCBhZ2FpbnN0PyBEb2VzIHBy ZXNlbmNlIG9mIGEgbGl0ZXJhbCDigJg74oCZIG5lZWQNCj4gPiB0byBiZSBlc2NhcGVkIHdpdGgg 4oCYJCcgdG9vIHRvIGRpc3Rpbmd1aXNoIGl0IGZyb20gdGhlIHVzZSBvZiDigJg74oCZIHRvDQo+ ID4gc2VwYXJhdGUgVVJJIHBhdHRlcm5zIHdpdGhpbiB0aGUgVVJJIFBhdHRlcm4gQ29udGFpbmVy Pw0KPiA+DQo+ID4gW1JheV0gR29vZCBwb2ludC4gTGl0ZXJhbCBzZW1pLWNvbG9ucyBkbyBpbmRl ZWQgbmVlZCB0byBiZSBlc2NhcGVkLiBJ4oCZbGwNCj4gPiBhZGQgdGhpcyBpbiB0aGUgbmV4dCBy ZXZpc2lvbg0KPiA+DQo+ID4gU2VjdGlvbiAyLjI6DQo+ID4gV2h5IGlzIHRoZXJlIGEgS0lEIChz dHJpbmcpICYgS0lEX05VTSAoaW50ZWdlcikgZm9yIHNoYXJlZCBzZWNyZXRzL2tleXMNCj4gPiBh bmQgb25seSBDS0kgKGludGVnZXIpIGZvciBDbGllbnQgSVAga2V5cz8gVG8gYmUgY29uc2lzdGVu dCBzaG91bGQgaXQgYmUNCj4gPiBDS0lfTlVNPw0KPiA+DQo+ID4gVGhlIGRvY3VtZW50IGFsc28g c2F5cw0KPiA+ICAgIEluIGNhc2VzDQo+ID4gICAgd2hlcmUgbnVtZXJpY2FsIEtFWSBJRHMgYXJl IHVzZWQsIGl0IGlzIFJFQ09NTUVOREVEIHRvIHVzZSBLSURfTlVNDQo+ID4gICAgaW5zdGVhZCBv ZiBLSUQuDQo+ID4gV2hpY2ggbWFrZXMgbWUgdGhpbmssIHdoeT8gV2hhdCB0aGUgS0lEIG1lYW5z L3JlcHJlc2VudHMgaXMgY29tbXVuaWNhdGVkDQo+ID4gb3V0IG9mIGJhbmQgKGFuZCBob3cgdG8g ZG8gdGhhdCBpcyBvdXQgb2Ygc2NvcGUgb2YgdGhlIGRvY3VtZW50KS4gSXQNCj4gc2VlbXMNCj4g PiBzdHJhaWdodGZvcndhcmQgdG8gc2F5IEtJRCBpcyBhbHdheXMgYSBzdHJpbmcgKHdoaWNoIGNh biByZXByZXNlbnQgYW4NCj4gPiBpbnRlZ2VyKSBhbmQgZ2V0IHJpZCBvZiBLSURfTlVNIGVudGly ZWx5LiBUaGF0IHdvdWxkIG1lYW4gd2UgbmVlZCBvbmUNCj4gbGVzcw0KPiA+IGF0dHJpYnV0ZSBk ZWZpbmluZyAob3IgdHdvIGxlc3MgaWYgd2UgbmVlZCBzdHJpbmcgJiBpbnRlZ2VyIGF0dHJpYnV0 ZXMNCj4gZm9yDQo+ID4gQ0tJKSBhbmQgYXZvaWRzIGZvbGtzIGhhdmluZyB0byB3b3JrIG91dCB3 aGF0IHRvIGRvICYgaW1wbGVtZW50IGNvcm5lcg0KPiA+IGNhc2VzIGxpa2Ugd2hhdCB0byBkbyBp ZiBLSUQgJiBLSURfTlVNIGFyZSBib3RoIHByZXNlbnQuDQo+ID4NCj4gPiBXaHkgbm90IGp1c3Qg aGF2ZSBLSUQgYW5kIENLSSBib3RoIGFzIHN0cmluZ3MgYW5kIHJlbW92ZSBLSURfTlVNPw0KPiA+ DQo+ID4gW1JheV0gVGhpcyB3YXMgdGhlIGNvbnNlbnN1cyByZXN1bHQgb2YgYSBsZW5ndGh5IGRp c2N1c3Npb24gYmV0d2VlbiB0aGUNCj4gPiBhdXRob3JzIGJvdGggb24gYW5kIG9mZiBsaXN0IOKY uiBUaGUgbWFpbiByZWFzb24gd2UgaW5jbHVkZWQgYSBzdHJpbmctDQo+IGJhc2VkDQo+ID4gS0lE IHdhcyBzbyB0aGF0IHdlIGNhbiBoYXZlIFVSTHMgdG8gcHVibGljIGtleXMuIEhvd2V2ZXIsIGFz IExlaWYNCj4gcG9pbnRlZA0KPiA+IG91dCwgZm9yIGludGVyb3AgYW5kIHBlcmZvcm1hbmNlIHJl YXNvbnMgaXQgaGVscHMgdG8gaGF2ZSBtYXhpbXVtIGxlbmd0aA0KPiA+IGZvciB0aGUgS0lEIGZp ZWxkLiBXaXRoIHB1YmxpYyBrZXlzIHRoaXMgaXMgaGFyZCB0byBkby4gU28gaW4gY2FzZXMNCj4g d2hlcmUNCj4gPiBwZXJmb3JtYW5jZSBpcyBlc3NlbnRpYWwsIHVzaW5nIGEgZml4ZWQtbGVuZ3Ro IGludCBmaWVsZCBpcyBmYXN0ZXIuIFRoZQ0KPiA+IHJlYXNvbiB3ZSBkaWRu4oCZdCBleHRlbmQg dGhpcyB0byB0aGUgQ0tJIGZpZWxkIGlzIHRoYXQgZm9yIENLSSB3ZSBvbmx5DQo+ID4gc3VwcG9y dCBzeW1tZXRyaWMgZW5jcnlwdGlvbiwgYW5kIGhlbmNlIGEgaW50ZWdlciBrZXkgaW5kZXggc2hv dWxkIGJlDQo+ID4gc3VmZmljaWVudC4NCj4gPg0KPiA+IEFsb25nIHNpbWlsYXIgbGluZXMuIFdo eSBoYXZlIGJvdGggSEYgJiBEU0EuIElzIGl0IGltcGxpY2l0IGZyb20gdGhlDQo+IHZhbHVlDQo+ ID4gb2YgdGhlIGF0dHJpYnV0ZSAoZS5nLiAnU0hBLTI1NicgdnMg4oCYRUNEU0HigJkpIHdoZXRo ZXIgYSBzaGFyZWQgc2VjcmV0IG9yDQo+ID4gZGlnaXRhbCBzaWduYXR1cmUgYWxnb3JpdGhtIGlz IGJlaW5nIHVzZWQ/IE9yIGlzIHRoZSBwdXJwb3NlIHRvIGVuYWJsZQ0KPiBVUkkNCj4gPiB0byBi ZSBzaWduZWQgKCYgc3Vic2VxdWVudGx5KSB2ZXJpZmllZCB3aXRoIGVpdGhlciAoaWYgYm90aCBh cmUNCj4gc3BlY2lmaWVkKQ0KPiA+IG9yIHdpdGggYm90aD8NCj4gPg0KPiA+IFtSYXldIFdlIGV4 cGxpY2l0bHkgcnVsZSBvdXQgaGF2aW5nIGJvdGggSEYgYW5kIERTQSBpbmZvcm1hdGlvbiBlbGVt ZW50cw0KPiA+IGluIGEgc2luZ2xlIFNpZ25lZCBVUkkuIFRoZSByZWFzb24gd2Ugd2VudCBmb3Ig c2VwYXJhdGUgSUVzIGlzIHRoYXQgaXQNCj4gPiBtYWtlcyBkZXNjcmliaW5nIHRoZSBhbGdvcml0 aG0gc2xpZ2h0bHkgbGVzcyBjb21wbGV4LiBBbmQgZ2l2ZW4gdGhhdCB3ZQ0KPiA+IGJhc2U2NC1l bmNvZGUgdGhlIGZ1bGwgVVJJIFNpZ25pbmcgUGFja2FnZSBhbnl3YXkgaXQgZG9lc27igJl0IHJl YWxseQ0KPiBtYXR0ZXINCj4gPiBpbiB0ZXJtcyBvZiBuYW1lc3BhY2UgY29sbGlzaW9ucy4NCj4g Pg0KPiA+IFNlY3Rpb24gMy4xOg0KPiA+IDgpYSkgc2F5cw0KPiA+ICAgICAgICAgICAgTm90ZTog dGhlIE9yaWdpbmFsIFVSSQ0KPiA+ICAgICAgICAgICAgQ29udGFpbmVyIGluZm9ybWF0aW9uIGVs ZW1lbnQgTVVTVCBiZSB0aGUgbGFzdCBpbmZvcm1hdGlvbg0KPiA+ICAgICAgICAgICAgZWxlbWVu dCBpbiB0aGUgYnVmZmVyIGJlZm9yZSB0aGUgc2lnbmF0dXJlIGluZm9ybWF0aW9uDQo+ID4gICAg ICAgICAgICBlbGVtZW50Lg0KPiA+IDgpYikgZG9lcyBub3QgaGF2ZSBhIHNpbWlsYXIgc3RhdGVt ZW50LiBJcyB0aGUgVVJJIFBhdHRlcm4gQ29udGFpbmVyDQo+IGFsc28NCj4gPiByZXF1aXJlZCAo TVVTVCkgdG8gYmUgdGhlIGxhc3QgaW5mb3JtYXRpb24gZWxlbWVudCBpbiB0aGUgYnVmZmVyPw0K PiA+DQo+ID4gW1JheV0gVGhlIE9yaWdpbmFsIFVSSSBDb250YWluZXIgaXMgYSBzcGVjaWFsIGNh c2UgaW4gdGhlIHNlbnNlIHRoYXQgaXQNCj4gPiBpc27igJl0IGNvbW11bmljYXRlZCBhbG9uZyB3 aXRoIHRoZSBTaWduZWQgVVJJIGJ1dCBpcyByZW1vdmVkIGZyb20gdGhlDQo+ID4gcGFja2FnZSBh ZnRlciBoYXZpbmcgY2FsY3VsYXRlZCB0aGUgc2lnbmF0dXJlLg0KPiA+DQo+ID4gU2VjdGlvbiA1 LjQ6DQo+ID4gSSBkb27igJl0IHNlZSB0aGUgcG9pbnQgb2Yga2V5LWlkLCBoYXNoLWZ1bmN0aW9u LCBkaWdpdGFsLXNpZ25hdHVyZS0NCj4gPiBhbGdvcml0aG0gJiB2ZXJzaW9uLg0KPiA+DQo+ID4g VGhlIGFic2VuY2Ugb2YgdGhlIFZFUiBhdHRyaWJ1dGUgaXMgc3BlY2lmaWVkIGJ5IHRoZSBkb2N1 bWVudCB0byBtZWFuDQo+ID4gVmVyc2lvbiAxLiBUaGUgYWJzZW5jZSBvZiB0aGUgSEYgJiBEU0Eg YXR0cmlidXRlcyBpcyBzcGVjaWZpZWQgYnkgdGhlDQo+ID4gdmVyc2lvbiBvZiB0aGUgc2lnbmlu ZyBtZXRob2QuIFZlcnNpb24gMSAodGhlIGRvY3VtZW50KSBzcGVjaWZpZXMgdGhlbQ0KPiBhcw0K PiA+IFNIQS0yNTYgJiBFQ0RTQSBhY2NvcmRpbmdseS4gV2h5IHJlLXNwZWNpZnkgdGhpcyBpbiB0 aGUgTWV0YWRhdGEgb2JqZWN0Pw0KPiA+DQo+ID4gW1JheV0gSeKAmW0gbm90IHN1cmUgSSB1bmRl cnN0YW5kLiBXaGF0IHRoZSBtZXRhZGF0YSDigJh2ZXJzaW9u4oCZIGZpZWxkIGlzDQo+IGZvcg0K PiA+IGlzIHRvIGFsbG93IENETnMgdG8gbWFuZGF0ZSBvdGhlciB2ZXJzaW9ucyBvZiBVUkkgU2ln bmluZyBpbiB0aGUgZnV0dXJlDQo+ID4gKGUuZy4gYnkgc2V0dGluZyB0aGUgdmVyc2lvbiBwcm9w ZXJ0eSB0byAyKS4gVGhlIHNhbWUgZ29lcyBmb3IgdGhlIGhhc2gtDQo+ID4gZnVuY3Rpb24gYW5k IGRpZ2l0YWwtc2lnbmF0dXJlLWFsZ29yaXRobSBwcm9wZXJ0aWVzOiBhIENETiBjb3VsZCBtYW5k YXRlDQo+ID4gdGhhdCBVUkkgU2lnbmluZyB2ZXJzaW9uIDEgaXMgdXNlZCwgYnV0IHN0aWxsIG9u bHkgYWxsb3cgU0hBLTUxMiBpbnN0ZWFkDQo+ID4gb2YgU0hBLTI1NiBhcyB1c2VkIGJ5IGRlZmF1 bHQuDQo+ID4NCj4gPiBrZXktaWQgaXMgZm9yIHdoZW4gdGhlcmUgaXMgb25seSBhIHNpbmdsZSBr ZXkgaWQgYXMgYW4gb3B0aW1pc2F0aW9uIGlmDQo+ID4gc29tZW9uZSB3YW50cyB0byBoYXZlIGEg c2luZ2xlIGtleSBpZCAmIG5vdCB0cmFuc21pdCBpdCBpbiB0aGUgc2lnbmVkDQo+IFVSST8NCj4g PiBEb2VzO3Qgc2VlbSB3b3J0aCBpdCB0byBtZSBmb3IgYSBuYXJyb3cgY29ybmVyIGNhc2UuIElm IGl0IGlzIHdvcnRoIGl0DQo+ID4ganVzdCBzcGVjaWZ5IGlmIEtJRC9LSURfTlVNIGlzIG1pc3Np bmcgZnJvbSB0aGUgc2lnbmVkIFVSSSBhbmQga2V5LWlkLQ0KPiBzZXQNCj4gPiBjb250YWlucyBh IHNpbmdsZSB2YWx1ZSB0aGVuIHVzZSB0aGF0PyBPciBpZiBLSUQvS0lEX05VTSBpcyBtaXNzaW5n IHRoZQ0KPiA+IHN1cnJvZ2F0ZSBjaGVja3MgYWxsIGtleXMgaW4ga2V5LWlkLXNldCBhbmQgaWYg b25lIG1hdGNoZXMgdGhlIFVSSSBpcw0KPiA+IGF1dGhvcmlzZWQ/DQo+ID4NCj4gPiBbUmF5XSBT ZWUgZWFybGllciBjb21tZW50DQo+ID4NCj4gPiAoUGVyc29uYWxseSBJIHRoaW5rIEtJRC9LSURf TlVNIGluIHRoZSBTaWduZWQgVVJpIGlzIHBvaW50bGVzcywgdGhlaXINCj4gPiBtZWFuaW5nIGlz IGRpc3RyaWJ1dGVkIG91dCBvZiBiYW5kIHNvIHdoeSBub3QgYWxzbyBkaXN0cmlidXRlIHRoZSB2 YWx1ZXMNCj4gPiBvdXQgb2YgYmFuZC92aWEgbWV0YWRhdGEgYW5kIGhhdmUgdGhlIGJlaGF2aW91 ciBiZSBhbnkgdmFsaWQga2V5L3NlY3JldA0KPiBpbg0KPiA+IGtleS1pZC1zZXQgcGFzc2VzIGFu ZCByZW1vdmUgS0lEL0tJRF9OVU0gW2FuZCBtYXliZSBDS0ldIGZyb20gdGhlIFNpZ25lZA0KPiA+ IFVSSSBlbnRpcmVseSkNCj4gPg0KPiA+IFtSYXldIEnigJltIG5vdCBzdXJlIEkgdW5kZXJzdGFu ZC4gSG93IHdvdWxkIHRoZSBkQ0ROIGtub3cgd2hpY2ggS2V5IGlzDQo+IHVzZWQNCj4gPiB0byBj YWxjdWxhdGUgYSBnaXZlbiBzaWduYXR1cmU/IE9yIGFyZSB5b3Ugc2F5aW5nIGl0IHNob3VsZCBq dXN0IGNoZWNrDQo+IGFsbA0KPiA+IHBvc3NpYmxlIEtleXMgdGhhdCBhcmUgaW4gdGhlIGFsbG93 ZWQgc2V0Pw0KPiA+DQo+ID4gU2VjdGlvbiA1LjQ6DQo+ID4gVGhpcyBjb25mdXNlZCBtZToNCj4g PiAgICBOb3RlIHRoYXQgdGhlIEtleSBJRCBpbmZvcm1hdGlvbiBlbGVtZW50IGlzIG5vdCBuZWVk ZWQgaWYgb25seSBvbmUNCj4gPiAgICBrZXkgaXMgcHJvdmlkZWQgYnkgdGhlIENTUCBvciB0aGUg VXBzdHJlYW0gQ0ROIGZvciB0aGUgY29udGVudCBpdGVtDQo+ID4gICAgb3Igc2V0IG9mIGNvbnRl bnQgaXRlbXMgY292ZXJlZCBieSB0aGUgQ0ROSSBNZXRhZGF0YSBvYmplY3QuDQo+ID4gdW50aWwg SSByZWFsaXNlZCB0aGF0IOKAnEtleSBJRCBpbmZvcm1hdGlvbiBlbGVtZW504oCdIHdhcyByZWZl cnJpbmcgdG8gdGhlDQo+ID4gZWxlbWVudCBvZiB0aGUgU2lnbmVkIFVSSSBhbmQgbm90IHRoZSBr ZXktaWQgcHJvcGVydHkgb2YgdGhlIG1ldGFkYXRhDQo+ID4gb2JqZWN0IHNwZWNpZmllZCBpbW1l ZGlhdGVseSBhYm92ZSB0aGUgc2VudGVuY2UuIE1heWJlIHBocmFzZSBhcyDigJxOb3RlDQo+ID4g dGhhdCB0aGUgS2V5IElEIGluZm9ybWF0aW9uIGVsZW1lbnQgZG9lcyBub3QgbmVlZCB0byBiZSBp bmNsdWRlZCBpbiB0aGUNCj4gPiBTaWduZWQgVVJJIGlmIG9ubHkgb25lIGtleeKApiINCj4gPg0K PiA+IFtSYXldIEdvb2QgcG9pbnQuIFdpbGwgdXBkYXRlLg0KPiA+DQo+ID4gU2VjdGlvbiA5Og0K PiA+ICAgIEluIHRoZSBjYXNlIHdoZXJlIGFzeW1tZXRyaWMga2V5cyBhcmUgdXNlZCwgdGhlIEtJ RCBpbmZvcm1hdGlvbg0KPiA+ICAgIGVsZW1lbnQgbWlnaHQgY29udGFpbiB0aGUgVVJMIHRvIHRo ZSBwdWJsaWMga2V5LiAgVG8gcHJldmVudA0KPiA+ICAgIG1hbGljaW91cyBjbGllbnRzIGZyb20g c2lnbmluZyB0aGVpciBvd24gVVJJcyBhbmQgaW5zZXJ0aW5nIHRoZQ0KPiA+ICAgIGFzc29jaWF0 ZWQgcHVibGljIGtleSBVUkwgaW4gdGhlIEtJRCBmaWVsZCwgdGhlcmVieSBwYXNzaW5nIFVSSQ0K PiA+ICAgIHZhbGlkYXRpb24sIGl0IGlzIGltcG9ydGFudCB0aGF0IENETnMgY2hlY2sgd2hldGhl ciB0aGUgVVJJIGNvbnZleWVkDQo+ID4gICAgaW4gdGhlIEtJRCBmaWVsZCBpcyBpbiB0aGUgYWxs b3dhYmxlIHNldCBvZiBLSURzIGFzIGxpc3RlZCBpbiB0aGUNCj4gPiAgICBDRE5JIG1ldGFkYXRh IG9yIHNldCB2aWEgY29uZmlndXJhdGlvbi4NCj4gPiBPciBzcGVjaWZ5IHRoaW5ncyBhcyBJIHN1 Z2dlc3QgYWJvdmUgYW5kIHJlbW92ZSB0aGUgbmVlZCBmb3IgS0lEL0tJRF9OVU0NCj4gPiBiZWlu ZyBwcmVzZW50IGluIHRoZSBTaWduZWQgVVJJIGFuZCB0aGVyZWZvcmUgdGhpcw0KPiBzY2VuYXJp by92dWxuZXJhYmlsaXR5DQo+ID4gYmVpbmcgYWJsZSB0byBvY2N1ciBpbiB0aGUgZmlyc3QgcGxh Y2U/DQo+ID4NCj4gPiBbUmF5XSBTZWUgbXkgZWFybGllciBjb21tZW50LiBJIGRvbuKAmXQgc2Vl IGhvdyB0aGUgZENETiB3b3VsZCBldmVyIGJlDQo+IGFibGUNCj4gPiB0byBrbm93IHdoaWNoIGtl eSB3YXMgdXNlZC4gQnV0IG1heWJlIEnigJltIG1pc3Npbmcgc29tZXRoaW5nLg0KPiA+DQo+ID4g bml0czoNCj4gPiBTZWN0aW9uIDE6DQo+ID4gICAgVGhlIHByaW1hcnkgZ29hbCBvZiBVUkkgU2ln bmluZyBpcyB0byBtYWtlDQo+ID4gICAgc3VyZSB0aGF0IG9ubHkgYXV0aG9yaXplZCBVc2VyIEFn ZW50cyAoVUFzKSBhcmUgYWJsZSB0byBhY2Nlc3MgdGhlDQo+ID4gICAgY29udGVudCwgd2l0aCBh IENTUCBiZWluZyBhYmxlIHRvIGF1dGhvcml6ZSBldmVyeSBpbmRpdmlkdWFsIHJlcXVlc3QuDQo+ ID4gSXMgaXQgcmVhbGx5IHRvIGF1dGhvcmlzZSB0aGUgVXNlciBBZ2VudCBvciB0aGUgSVAgYWRk cmVzcyB0aGUgVXNlcg0KPiBBZ2VudA0KPiA+IGlzIGJlaGluZD8gVGhlcmUgaXMgbm90aGluZyBp biB0aGUgc2lnbmVkIFVSSSB0aGF0IGlkZW50aWZpZXMgdGhlDQo+ID4gcGFydGljdWxhciBVc2Vy IEFnZW50LiBVUklzIGNhbiBzdGlsbCBwb3RlbnRpYWxseSBiZSBzaGFyZWQvZXhjaGFuZ2VkDQo+ ID4gYmV0d2VlbiBVc2VyIEFnZW50cyBiZWhpbmQgdGhlIHNhbWUgSVAgYWRkcmVzcy9zdWJuZXQs IGhvd2V2ZXIgdGhlDQo+IGltcGFjdA0KPiA+IG9mIHN1Y2ggc2hhcmluZyBpcyBsaW1pdGVkL2Fj Y2VwdGFibGUgZm9yIHRoZSB1c2UgY2FzZS4NCj4gPg0KPiA+IEkgd291bGQgcy9Vc2VyIEFnZW50 cyAoVUFzKS9JUCBhZGRyZXNzKGVzKS8NCj4gPg0KPiA+IFNlY3Rpb24gMToNCj4gPiBJIGRvIG5v dCBrbm93IHdoYXQgaXMgbWVhbnQgYnkgZGlzdHJpYnV0aW9uIHBvbGljeSBpbiB0aGlzIHNlbnRl bmNlOg0KPiA+ICAgIFNwbGl0dGluZyB0aGUgcm9sZSBvZiBwZXJmb3JtaW5nIHBlci1yZXF1ZXN0 DQo+ID4gICAgYXV0aG9yaXphdGlvbiBieSBDU1AgYW5kIHRoZSByb2xlIG9mIHZhbGlkYXRpb24g b2YgdGhpcyBhdXRob3JpemF0aW9uDQo+ID4gICAgYnkgdGhlIENETiBhbGxvd3MgYW55IGFyYml0 cmFyeSBkaXN0cmlidXRpb24gcG9saWN5IHRvIGJlIGVuZm9yY2VkDQo+ID4gICAgYWNyb3NzIENE TnMgd2l0aG91dCB0aGUgbmVlZCBvZiBDRE5zIHRvIGhhdmUgYW55IGF3YXJlbmVzcyBvZiB0aGUN Cj4gPiAgICBhY3R1YWwgQ1NQIGRpc3RyaWJ1dGlvbiBwb2xpY3kuDQo+ID4NCj4gPiBTZWN0aW9u IDIuMjoNCj4gPiAgICBUaGUgS2V5IElEIEluZm9ybWF0aW9uIEVsZW1lbnQgaXMgdXNlZCB0byBy ZXRyaWV2ZWQgdGhlIGtleSB3aGljaCBpcw0KPiA+ICAgIG5lZWRlZCBhcyBpbnB1dCB0byB0aGUg YWxnb3JpdGhtIGZvciB2YWxpZGF0aW5nIHRoZSBTaWduZWQgVVJJLg0KPiA+IHMvcmV0cmlldmVk L3JldHJpZXZlLw0KPiA+DQo+ID4gU2VjdGlvbiAyLjQ6DQo+ID4gICAgSG93ZXZlciwgYSBjbGll bnQgb3IgQ0ROIG1heSBhcHBlbmQgb3RoZXINCj4gPiAgICBxdWVyeSBwYXJhbWV0ZXJzIHVucmVs YXRlZCB0byBVUkkgU2lnbmluZyB0byB0aGUgU2lnbmVkIFVSSS4gIFN1Y2gNCj4gPiAgICBhZGRp dGlvbmFsIHF1ZXJ5IHBhcmFtZXRlcnMgU0hPVUxEIE5PVCB1c2UgdGhlIHNhbWUgbmFtZSBhcyB0 aGUgVVJJDQo+ID4gICAgU2lnbmluZyBQYWNrYWdlIEF0dHJpYnV0ZSB0byBhdm9pZCBuYW1lc3Bh Y2UgY29sbGlzaW9uIGFuZCBwb3RlbnRpYWwNCj4gPiAgICBmYWlsdXJlIG9mIHRoZSBVUkkgU2ln bmluZyB2YWxpZGF0aW9uLg0KPiA+IHMvY2xpZW50L1VzZXIgQWdlbnQvIGlzIHByb2JhYmx5IG1v cmUgYWxpZ25lZCB3aXRoIHRoZSByZXN0IG9mIHRoZQ0KPiA+IGRvY3VtZW50LiBUaGVyZSBhcmUg c29tZSBvdGhlciBwbGFjZXMgd2hlcmUgeW91IHVzZSBjbGllbnQuIFByb2JhYmx5DQo+IHdvcnRo DQo+ID4gYmVpbmcgY29uc2lzdGVudCBhbmQgcGlja2luZyBvbmUgb2YgY2xpZW50IG9yIFVzZXIg QWdlbnQgdG8gdXNlDQo+ID4gdGhyb3VnaG91dC4NCj4gPg0KPiA+IFNlY3Rpb24gMzoNCj4gPiAg ICBJbiBjYXNlIHRoZQ0KPiA+ICAgIFVSSSBQYXR0ZXJuIENvbnRhaW5lciBpbmZvcm1hdGlvbiBl bGVtZW50IGlzIHVzZWQsIHRoZSBDU1AgaGFzIGZ1bGwNCj4gPiAgICBmbGV4aWJpbGl0eSB0byBz cGVjaWZ5IHdoaWNoIGVsZW1lbnRzIG9mIHRoZSBVUkkgKGluY2x1ZGluZyB0aGUNCj4gPiAgICBz Y2hlbWUgcGFydCkgYXJlIHByb3RlY3RlZCBieSB0aGUgVVJJLg0KPiA+IEkgdGhpbmsgeW91IG1l YW4g4oCccHJvdGVjdGVkIGJ5IHRoZSBTaWduZWQgVVJJ4oCdPw0KPiA+DQo+ID4gU2VjdGlvbiAz Og0KPiA+ICAgIFRoZSBwcm9jZXNzIG9mIGdlbmVyYXRpbmcgYSBTaWduZWQgVVJJIGNhbiBiZSBk aXZpZGVkIGludG8gZm91ciBzZXRzDQo+ID4gICAgb2Ygc3RlcHM6IDEpIENvbXBvc2UgVVJJIFNp Z25pbmcgSUVzIHdpdGggb3JpZ2luYWwgVVJJIC8gVVJJIHBhdHRlcm4sDQo+ID4gICAgMikgQ29t cHV0ZSB0aGUgVVJJIFNpZ25hdHVyZSwgMykgRW5jb2RlIHRoZSBVUkkgU2lnbmluZyBQYWNrYWdl LCBhbmQNCj4gPiAgICA0KSBBc3NlbWJsZSB0aGUgcGFydHMgdG8gY3JlYXRlIHRoZSBTaWduZWQg VVJJLg0KPiA+IFRoaXMgd291bGQgYmUgYmV0dGVyIGFzIGEgbGlzdCBvZiBudW1iZXJlZCBidWxs ZXRzIElNTy4NCj4gPg0KPiA+DQo+ID4gW1JheV0gVGhhbmtzIGFnYWluIQ0KPiA+DQo+ID4gSFRI DQo+ID4gQmVuDQo+ID4NCj4gPiA+IE9uIDI5IEp1biAyMDE2LCBhdCAxNDo0MywgS2V2aW4gTWEg SiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+IHdyb3RlOg0KPiA+ID4NCj4gPiA+IEhpIEFsbCwN Cj4gPiA+DQo+ID4gPiAgQXMgcGVyIHRoZSBkaXNjdXNzaW9uIGluIEJBLCB3ZSBoYXZlIHJlY2Vp dmVkIHRoZSB1cGRhdGVkIFVSSSBTaWduaW5nDQo+ID4gZHJhZnQgYW5kIHdvdWxkIGxpa2UgdG8g bW92ZSBpdCB0byBXR0xDLiAgKExlaWYgYW5kIFBoaWwsIHlvdSdyZSB1cCEpDQo+ID4gPg0KPiA+ ID4gIFRvZGF5IHdpbGwgYmVnaW4gdGhlIHR3by13ZWVrIFdHTEMgb246DQo+ID4gaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0wOQ0KPiA+ID4N Cj4gPiA+ICBQbGVhc2Ugc2VuZCBhbnkgY29tbWVudHMsIHF1ZXN0aW9ucywgY29uY2VybnMgdG8g dGhlIENETkkgbWFpbGluZw0KPiBsaXN0Og0KPiA+IGNkbmlAaWV0Zi5vcmcNCj4gPiA+DQo+ID4g PiAgVGhlIFdHTEMgd2lsbCBlbmQgb24gV2VkbmVzZGF5IEp1bHkgMTMsIDIwMTYuDQo+ID4gPg0K PiA+ID4gdGhhbnghDQo+ID4gPg0KPiA+ID4gLS0gIEtldmluIGFuZCBGcmFuY29pcw0KPiA+ID4N Cj4gPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ ID4gPiBDRE5pIG1haWxpbmcgbGlzdA0KPiA+ID4gQ0ROaUBpZXRmLm9yZw0KPiA+ID4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pDQo+ID4NCj4gPiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IENETmkgbWFpbGluZyBs aXN0DQo+ID4gQ0ROaUBpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vY2RuaQ0KPiA+DQo+ID4NCj4gPiBUaGlzIG1lc3NhZ2UgbWF5IGNvbnRhaW4gaW5m b3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYNCj4geW91DQo+ID4gYXJl IG5vdCB0aGUgYWRkcmVzc2VlIG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkg bWlzdGFrZSwgeW91DQo+ID4gYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNlbmRlciBhbmQg ZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cw0KPiBubw0KPiA+IGxpYWJpbGl0eSBmb3Ig dGhlIGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdQ0K PiB1c2UNCj4gPiBpdCBhbmQgZm9yIGRhbWFnZSBvZiBhbnkga2luZCByZXN1bHRpbmcgZnJvbSB0 aGUgcmlza3MgaW5oZXJlbnQgdG8gdGhlDQo+ID4gZWxlY3Ryb25pYyB0cmFuc21pc3Npb24gb2Yg bWVzc2FnZXMuDQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCj4gPiBDRE5pIG1haWxpbmcgbGlzdA0KPiA+IENETmlAaWV0Zi5vcmcNCj4gPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCj4gDQo+IA0KPiBUaGlzIG1l c3NhZ2UgbWF5IGNvbnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlv dS4gSWYgeW91DQo+IGFyZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0aGlzIG1lc3NhZ2Ugd2Fz IHNlbnQgdG8geW91IGJ5IG1pc3Rha2UsIHlvdQ0KPiBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0 aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5vDQo+IGxpYWJp bGl0eSBmb3IgdGhlIGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdo aWNoIHlvdSB1c2UNCj4gaXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZy b20gdGhlIHJpc2tzIGluaGVyZW50IHRvIHRoZQ0KPiBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBv ZiBtZXNzYWdlcy4NCg0KDQpUaGlzIG1lc3NhZ2UgbWF5IGNvbnRhaW4gaW5mb3JtYXRpb24gdGhh dCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91IGFyZSBub3QgdGhlIGFkZHJlc3NlZSBv ciBpZiB0aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91IGJ5IG1pc3Rha2UsIHlvdSBhcmUgcmVx dWVzdGVkIHRvIGluZm9ybSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBh Y2NlcHRzIG5vIGxpYWJpbGl0eSBmb3IgdGhlIGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0 aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2UgaXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQg cmVzdWx0aW5nIGZyb20gdGhlIHJpc2tzIGluaGVyZW50IHRvIHRoZSBlbGVjdHJvbmljIHRyYW5z bWlzc2lvbiBvZiBtZXNzYWdlcy4K From nobody Tue Jul 12 07:49:49 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98BA512D7C0 for ; Tue, 12 Jul 2016 07:49:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yRoBf58beZrC for ; Tue, 12 Jul 2016 07:49:44 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2057E12E059 for ; Tue, 12 Jul 2016 07:06:51 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-35-5784ee8f076e Received: from EUSAAHC008.ericsson.se (Unknown_Domain [147.117.188.96]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id D3.73.09012.F8EE4875; Tue, 12 Jul 2016 15:20:15 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC008.ericsson.se ([147.117.188.96]) with mapi id 14.03.0294.000; Tue, 12 Jul 2016 10:06:48 -0400 From: Kevin Ma J To: "Brandenburg, R. (Ray) van" , Ben Niven-Jenkins , "Content Delivery Networks Interconnection Discussion List" Thread-Topic: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing Thread-Index: AdHSDAIj8Q+3AOh3Q/WhloflAutMVQCa2goAASzpMYAADCKGkACC6yqAAAaL1dAANNetAAAD/kJQ Date: Tue, 12 Jul 2016 14:06:48 +0000 Message-ID: References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> <73B31A7C-CC80-4646-A7C9-401874C3B07D@tno.nl> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.11] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrDLMWRmVeSWpSXmKPExsUyuXRPgm7/u5Zwg8bFUhYLzk1gs3g6+w+r xbfN1xkdmD2WLPnJ5PHz+iRGj4PrLjAHMEdx2aSk5mSWpRbp2yVwZVxc18VW8KKFqeJs/wu2 BsYJ/xi7GDk5JARMJP7vvMsCYYtJXLi3nq2LkYtDSOAoo8TclsksEM5yRombK/vBqtgEtCQe f/3LBJIQEdjJKPFldw8rSEJYwEtif9NxdhBbRMBb4sCR3SwQdpTE68vL2UBsFgFViQOzT4HF eQV8JX4+W8oMsWERs0Tf70awIk4BK4ld+3+DFTEC3fT91BomEJtZQFzi1pP5TBC3Ckgs2XOe GcIWlXj5+B8rhK0k8fH3fKAjOIDqNSXW79KHaFWUmNL9kB1ir6DEyZlPWCYwis5CMnUWQscs JB2zkHQsYGRZxchRWlyQk5tuZLCJERgnxyTYdHcw3p/ueYhRgINRiYd3wb3mcCHWxLLiytxD jBIczEoivBnfWsKFeFMSK6tSi/Lji0pzUosPMUpzsCiJ84o9UgwXEkhPLEnNTk0tSC2CyTJx cEo1MJbaZWSd8lmSvTz0Uc6xlvv7dtb2PWSM/ckiUFXFH//1hYYnX0SUUlaATIifczszC1ex ypTvM9rndz99kGyv8EXN9/xOdYvz54WNRXdmHGJmM9z5YrqzimbZ9KADD2punT8uybLRpy18 Fq8618Qv7WnnmWzEdoun8KuZ+rivT6p627eL5TGbEktxRqKhFnNRcSIAWTkkgY8CAAA= Archived-At: Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jul 2016 14:49:47 -0000 SGkgUmF5LA0KDQo+ID4gW1JheV0gSW4gdGhlIGVuZCwgSSB3b3VsZG7igJl0IGJlIHN1cnByaXNl ZCBpZiBzb21lDQo+ID4gaW1wbGVtZW50YXRpb25zIGFjdHVhbGx5IG9ubHkgaW1wbGVtZW50ZWQg S0lEX05VTS4NCj4NCj4gQXJlIHRoZXJlIGFueSBndWlkZWxpbmVzIG9uIG1hbmRhdG9yeSB0bw0K PiBzdXBwb3J0L2ltcGxlbWVudCBJRXM/ICBJcyBvbmUgYWxsb3dlZCB0byBvbmx5IGltcGxlbWVu dCBLSURfTlVNIGFuZCBub3QNCj4gS0lEDQo+DQo+IFtSYXldIEN1cnJlbnRseSwgd2UgZG9u4oCZ dCBoYXZlIGFueSBzdWNoIGd1aWRlbGluZXMgYW5kIGFuIGltcGxlbWVudGF0aW9uDQo+IGlzIGV4 cGVjdGVkIHRvIGltcGxlbWVudCBhbGwgSUVzIChidXQgX25vdF8gYWxsIGFsZ29yaXRobXMpLg0K DQpTbywgaWYgSSBzZW5kIEtJRD0xMjM0IChpbnN0ZWFkIG9mIEtJRF9OVU09MTIzNCksIHdlIHdv dWxkIGV4cGVjdCBldmVyeSBpbXBsZW1lbnRhdGlvbiB0byBzdXBwb3J0IHRoaXM/ICBBbmQgaWYg SSBzZW5kIEtJRD1hYmNkLCB3ZSB3b3VsZCBleHBlY3QgZXZlcnkgaW1wbGVtZW50YXRpb24gdG8g c3VwcG9ydCB0aGF0IGFzIHdlbGw/ICBJZiBzbywgdGhlbiBJIHNlZSBubyBwb2ludCBpbiBoYXZp bmcgS0lEX05VTS4NCg0KPiBCZW7igJlzDQo+IHN1Z2dlc3Rpb24gdG8gbm90IG1ha2UgRFNBIG1h bmRhdG9yeSBkb2VzIG5vdCBzb3VuZCB1bnJlYXNvbmFibGUgdG8gbWUuDQoNClRoZW4sIEkgc3Rp bGwgdGhpbmsgeW91IG5lZWQgYW4gZXJyb3IgY29kZSBmb3IgdGhpcyBpbiB0aGUgbG9nZ2luZywg YW5kIGEgTVVTVCBzdGF0ZW1lbnQgYWJvdXQgcmVqZWN0aW5nIHJlcXVlc3RzIHdpdGggYWxnb3Jp dGhtcyB5b3UgZG9uJ3Qgc3VwcG9ydC4NCg0KPiBbUmF5XSBJdCBzZWVtcyB3ZSBhZ3JlZSB0aGF0 IGZvbGRpbmcgSEYgYW5kIERTQSBpbnRvIG9uZSBpbmZvcm1hdGlvbg0KPiBlbGVtZW50IHdvdWxk buKAmXQgZnVuZGFtZW50YWxseSByZW1vdmUgc3RlcHMgZnJvbSB0aGUgYWxnb3JpdGhtIGl0c2Vs Ziwgbm9yDQo+IHJlZHVjZSBpdOKAmXMgY29tcGxleGl0eS4NCg0KdHJ1ZQ0KDQo+IFRoZW4gSSBz dGlsbCBkb27igJl0IHNlZSB0aGUgZG93bnNpZGUgb2YgaGF2aW5nIGJvdGgNCj4gYW4gSEYgYW5k IERTQSBpbmZvcm1hdGlvbiBlbGVtZW50LCBlc3BlY2lhbGx5IGlmIGl0IG1lYW5zIHdlIGRvIG5v dCBoYXZlDQo+IHRvIGFkZCBhIHJlZ2lzdHJ5IGFuZCBpdCBtYWtlcyB0aGUgc3RlcCBvZiBjaGVj a2luZyB3aGljaCBzdGVwcyBvZiB0aGUNCj4gYWxnb3JpdGhtIHlvdSBuZWVkIHRvIGZvbGxvdyBl YXNpZXIuDQoNCkJ1dCB5b3UgYWxyZWFkeSBoYXZlIGEgcmVnaXN0cnkgKHNlY3Rpb24gOC43KSBq dXN0IGZvciBNRCBhbmQgRFM/ICBUaGF0IHNlZW1zIGV2ZW4gbGVzcyB1c2VmdWwuICBJJ2QgYXJn dWUgdGhhdCBhIHJlZ2lzdHJ5IG9mIGtub3duL3N1cHBvcnRlZCBhbGdvcml0aG1zIGlzIGJldHRl ciB0aGFuIGEgcmVnaXN0cnkganVzdCBmb3IgdGhvc2UgdHdvIElFcy4gIElmIGEgbmV3IHNpZ25h dHVyZSBhbGdvcml0aG0gaXMgYWRkZWQsIGlzIHNvbWVvbmUgZXhwZWN0ZWQgdG8gYWRkIGFub3Ro ZXIgSUUgdG8gdGhlICJDRE5JIFVSSSBTaWduaW5nIFNpZ25hdHVyZSBJbmZvcm1hdGlvbiBFbGVt ZW50cyIgcmVnaXN0cnk/DQoNCj4gSWYgeW914oCZcmUgY29uY2VybmVkIGFib3V0IHRoZSB3b3Jk aW5nDQo+IGluIHRoZSBwYXJhZ3JhcGhzIGFib3ZlLCB3b3VsZG7igJl0IGl0IGJlIGVhc2llciBp ZiBJIHdvdWxkIHNpbXBseSByZXBsYWNlDQo+IHRoZSDigJhzeW1tZXRyaWPigJkgYW5kIOKAmGFz c3ltZXRyaWPigJkgaW4gdGhlIHBhcmFncmFwaHMgYWJvdmUgd2l0aCDigJhpZiBIRiBpcw0KPiBw cmVzZW504oCZIGFuZCDigJhpZiBEU0EgaXMgcHJlc2VudOKAmT8NCg0KSSdtIGNvbmNlcm5lZCBh Ym91dCB0aGUgY29tcGxleGl0eSBvZiB0aGUgcGFyc2VyLiAgR3JhbnRlZCBpdCBkb2Vzbid0IG1h a2UgaXQgdGhhdCBtdWNoIG1vcmUgY29tcGxleCwgYnV0IGEgZ2VuZXJpYyBJRSwgaW1vLCBpcyBz aW1wbGVyIHRoYW4gbXVsdGlwbGUgSUVzLCB3aGVyZSBvbmUgd291bGQgd29yayBqdXN0IGZpbmUu ICBTYW1lIHdpdGggS0lEIGFuZCBLSURfTlVNLiAgVGhlIGV4dHJhIElFcyBhcmUganVzdCBtb3Jl IGNhc2VzIHRvIGhhbmRsZSwgZm9yIG1hcmdpbmFsIHZhbHVlIGlmIGFueSwgaW1vLg0KDQpJZiBu byBvbmUgZWxzZSBjYXJlcywgdGhhdCdzIGZpbmUsIGJ1dCBzaW5jZSBCZW4gYnJvdWdodCBpdCB1 cCwgSSB3YW50ZWQgdG8gcmVuZXcgbXkgcHJldmlvdXMgY29tbWVudHMuDQoNCnRoYW54Lg0KDQot LSAgS2V2aW4gSi4gTWENCg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBC cmFuZGVuYnVyZywgUi4gKFJheSkgdmFuIFttYWlsdG86cmF5LnZhbmJyYW5kZW5idXJnQHRuby5u bF0NCj4gU2VudDogVHVlc2RheSwgSnVseSAxMiwgMjAxNiA3OjQ4IEFNDQo+IFRvOiBLZXZpbiBN YSBKOyBCZW4gTml2ZW4tSmVua2luczsgQ29udGVudCBEZWxpdmVyeSBOZXR3b3Jrcw0KPiBJbnRl cmNvbm5lY3Rpb24gRGlzY3Vzc2lvbiBMaXN0DQo+IFN1YmplY3Q6IFJlOiBbQ0ROaV0gV29ya2lu ZyBHcm91cCBMYXN0IENhbGwgb24gZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nDQo+IA0KPiBI aSBLZXZpbiwNCj4gDQo+IE9uIDExLzA3LzE2IDE2OjU2LCAiS2V2aW4gTWEgSiIgPGtldmluLmou bWFAZXJpY3Nzb24uY29tPiB3cm90ZToNCj4gDQo+IEhpIFJheSwNCj4gDQo+ID4gR2l2ZW4gdGhh dCBMZWlmIGFuZCBoaXMgY29sbGVhZ3VlcyBhY3R1YWxseSBpbXBsZW1lbnRlZCB0aGUgYWxnb3Jp dGhtLA0KPiBhbmQNCj4gPiB0aGV5IHdlcmUgdGhlIG9uZXMgYXNraW5nIGZvciB0aGlzIGNoYW5n ZSwgbXkgZ3Vlc3Mgd291bGQgYmUgeWVzLiBCdXQNCj4gPiBsZXTigJlzIGFzayB0aGVtIHRvIG1h a2Ugc3VyZS4NCj4gDQo+ICAgSSBiZWxpZXZlIExlaWYgYW5kIFBoaWwgYWdyZWVkIGluIEJBIHRv IHJlLXJldmlldyBkdXJpbmcgV0dMQywgc28sDQo+IGhvcGVmdWxseSB0aGV5IGNhbiBjaGltZSBp bi4gIDopDQo+IA0KPiA+IEluIHRoZSBlbmQsIEkgd291bGRu4oCZdCBiZSBzdXJwcmlzZWQgaWYg c29tZQ0KPiA+IGltcGxlbWVudGF0aW9ucyBhY3R1YWxseSBvbmx5IGltcGxlbWVudGVkIEtJRF9O VU0uDQo+IA0KPiAgIFRoaW5raW5nIGFib3V0IHRoaXMgc29tZSBtb3JlLiAgQXJlIHRoZXJlIGFu eSBndWlkZWxpbmVzIG9uIG1hbmRhdG9yeSB0bw0KPiBzdXBwb3J0L2ltcGxlbWVudCBJRXM/ICBJ cyBvbmUgYWxsb3dlZCB0byBvbmx5IGltcGxlbWVudCBLSURfTlVNIGFuZCBub3QNCj4gS0lELCBv ciBvbmx5IEhGL01EIGFuZCBub3QgRFNBL0RTOyBhbmQgaWYgYW4gSUUgaXMgbm90IHN1cHBvcnRl ZCwgaXMgdGhlcmUNCj4gYSBNVVNUIHJlamVjdD8gIElmIHNvLCBzaG91bGQgdGhlcmUgYmUgYW4g ZXJyb3IgY29kZSBmb3IgdGhhdD8NCj4gDQo+IFtSYXldIEN1cnJlbnRseSwgd2UgZG9u4oCZdCBo YXZlIGFueSBzdWNoIGd1aWRlbGluZXMgYW5kIGFuIGltcGxlbWVudGF0aW9uDQo+IGlzIGV4cGVj dGVkIHRvIGltcGxlbWVudCBhbGwgSUVzIChidXQgX25vdF8gYWxsIGFsZ29yaXRobXMpLiBCZW7i gJlzDQo+IHN1Z2dlc3Rpb24gdG8gbm90IG1ha2UgRFNBIG1hbmRhdG9yeSBkb2VzIG5vdCBzb3Vu ZCB1bnJlYXNvbmFibGUgdG8gbWUuDQo+IA0KPiA+IElmIHlvdSBsb29rIGF0IHRoZSBhbGdvcml0 aG0sIHRoZSBwYXRocyBmb3IgSEYgYW5kIERTQSBhcmUgY29uc2lkZXJhYmx5DQo+ID4gZGlmZmVy ZW50Lg0KPiANCj4gSnVzdCB0byB0YWtlIGl0IG9uZSBzdGVwIGZ1cnRoZXI6IFllcywgdGhlIGFs Z29yaXRobXMgYXJlIGRpZmZlcmVudCwgYnV0DQo+IGluIHNlY3Rpb24gMy4yLCBzdGVwcyAxIGFu ZCAyIGNsZWFybHkgc3RhdGUgIjEuIElmIHN5bW1ldHJpYyBzaGFyZWQga2V5IGlzDQo+IHVzZSwg cGVyZm9ybSB0aGlzIHN0ZXAiIGFuZCAiMi4gaWYgYXN5bW1ldHJpYyBwcml2YXRlL3B1YmxpYyBr ZXlzIGFyZQ0KPiB1c2VkLCBwZXJmb3JtIHRoaXMgc3RlcCIuICBUaGUgZGlmZmVyZW5jZSBpcyBh bHJlYWR5IGJyb2tlbiBvdXQuIFRoZSBvbmx5DQo+IGRpZmZlcmVuY2UgdG8gdGhlIGN1cnJlbnQg dGV4dCB3b3VsZCBiZSBhIGZpbmQvcmVwbGFjZSBvbiB0aGUgSUUgaW4gdGhvc2UNCj4gc2VjdGlv bnMuICBMaWtld2lzZSwgaW4gc2VjdGlvbiA0LjQsIHN0ZXBzIDIuQSBhbmQgMi5CIGFyZSBzZXBh cmF0ZWQgYmFzZWQNCj4gb24gd2hldGhlciB0aGUgYWxnb3JpdGhtIGlzIHN5bW1ldHJpYyBvciBh c3ltbWV0cmljLCBhcyBkZXRlcm1pbmVkIGluDQo+IHNlY3Rpb24gNC4yLCBzdGVwcyAyIGFuZCAz LiAgKE5vdGU6IFNlY3Rpb24gNC4zIHdvdWxkIGFjdHVhbGx5IGJlDQo+IHNpbXBsaWZpZWQgYnkg bm90IGhhdmluZyB0byBkaXN0aW5ndWlzaCBiZXR3ZWVuIE1EL0RTLikgIFRoZSBvbmx5IHJlYWwN Cj4gcXVlc3Rpb24sIGltbywgaXMgd2hldGhlciBvciBub3Qgc2VjdGlvbiA0LjIsIHN0ZXBzIDIg YW5kIDMgY291bGQgYmUNCj4gcmVwbGFjZWQgd2l0aCBhbiBhbGdvcml0aG0gY2hlY2sgcmF0aGVy IHRoYW4gYW4gSUUgY2hlY2ssIGkuZS4sIGlmIFNIQTI1NiwNCj4gdGhlbiBpdCdzIHN5bW1ldHJp YywgZWxzZSBpZiBFQ0RTQSwgdGhlbiBpdCdzIGFzeW1tZXRyaWM/DQo+IA0KPiBUaGVyZSBjdXJy ZW50bHkgaXNuJ3QgYSByZWdpc3RyeSBmb3Igc3VwcG9ydGVkIEhGL1NBcy4NCj4gICAxLiBXb3Vs ZCBhIHJlZ2lzdHJ5IG1ha2Ugc2Vuc2U/DQo+ICAgMi4gV291bGQgYSByZWdpc3RyeSB3aXRoIGEg Y2xlYXIvb2J2aW91cyBkZXNpZ25hdGlvbiBvZiBzeW1tZXRyaWMgdnMNCj4gYXN5bW1ldHJpYyBt YWtlIHRoZSBhYm92ZSB0ZXN0IGVhc3k/DQo+IA0KPiBbUmF5XSBJdCBzZWVtcyB3ZSBhZ3JlZSB0 aGF0IGZvbGRpbmcgSEYgYW5kIERTQSBpbnRvIG9uZSBpbmZvcm1hdGlvbg0KPiBlbGVtZW50IHdv dWxkbuKAmXQgZnVuZGFtZW50YWxseSByZW1vdmUgc3RlcHMgZnJvbSB0aGUgYWxnb3JpdGhtIGl0 c2VsZiwgbm9yDQo+IHJlZHVjZSBpdOKAmXMgY29tcGxleGl0eS4gVGhlbiBJIHN0aWxsIGRvbuKA mXQgc2VlIHRoZSBkb3duc2lkZSBvZiBoYXZpbmcgYm90aA0KPiBhbiBIRiBhbmQgRFNBIGluZm9y bWF0aW9uIGVsZW1lbnQsIGVzcGVjaWFsbHkgaWYgaXQgbWVhbnMgd2UgZG8gbm90IGhhdmUNCj4g dG8gYWRkIGEgcmVnaXN0cnkgYW5kIGl0IG1ha2VzIHRoZSBzdGVwIG9mIGNoZWNraW5nIHdoaWNo IHN0ZXBzIG9mIHRoZQ0KPiBhbGdvcml0aG0geW91IG5lZWQgdG8gZm9sbG93IGVhc2llci4gSWYg eW914oCZcmUgY29uY2VybmVkIGFib3V0IHRoZSB3b3JkaW5nDQo+IGluIHRoZSBwYXJhZ3JhcGhz IGFib3ZlLCB3b3VsZG7igJl0IGl0IGJlIGVhc2llciBpZiBJIHdvdWxkIHNpbXBseSByZXBsYWNl DQo+IHRoZSDigJhzeW1tZXRyaWPigJkgYW5kIOKAmGFzc3ltZXRyaWPigJkgaW4gdGhlIHBhcmFn cmFwaHMgYWJvdmUgd2l0aCDigJhpZiBIRiBpcw0KPiBwcmVzZW504oCZIGFuZCDigJhpZiBEU0Eg aXMgcHJlc2VudOKAmT8NCj4gDQo+IEFsc28sIEkndmUgcHJvcG9zZWQgcmVtb3ZhbCBvZiB0aGUg TWV0YWRhdGEgQXV0aCBUeXBlIHJlZ2lzdHJ5IGZyb20gdGhlDQo+IG1ldGFkYXRhIGRyYWZ0OyBp ZiB0aGF0IGlzIGFjY2VwdGVkLCB3ZSB3b3VsZCBubyBsb25nZXIgbmVlZCBzZWN0aW9uIDguNA0K PiANCj4gW1JheV0gT2suDQo+IA0KPiB0aGFueCENCj4gDQo+IC0tICBLZXZpbiBKLiBNYQ0KPiAN Cj4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206IEJyYW5kZW5idXJnLCBS LiAoUmF5KSB2YW4gW21haWx0bzpyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sXQ0KPiA+IFNlbnQ6 IE1vbmRheSwgSnVseSAxMSwgMjAxNiAzOjI4IEFNDQo+ID4gVG86IEtldmluIE1hIEo7IEJlbiBO aXZlbi1KZW5raW5zOyBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtzDQo+ID4gSW50ZXJjb25uZWN0 aW9uIERpc2N1c3Npb24gTGlzdA0KPiA+IFN1YmplY3Q6IFJlOiBbQ0ROaV0gV29ya2luZyBHcm91 cCBMYXN0IENhbGwgb24gZHJhZnQtaWV0Zi1jZG5pLXVyaS0NCj4gc2lnbmluZw0KPiA+DQo+ID4g SGkgS2V2aW4sDQo+ID4NCj4gPiAgPiAxLiBIYXZpbmcgYm90aCBLSUQgYW5kIEtJRF9OVU0gc2Vl bXMgdW5uZWNlc3NhcnkgdG8gbWUuICBJIHVuZGVyc3RhbmQNCj4gPiBMZWlmJ3MgYXJndW1lbnQN Cj4gPg0KPiAoaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9jZG5pL1lESXJP ZHV0YnJ2UWtFd3ZBZXZ3T05kaVVGRSksDQo+ID4gYnV0IEknbSBzdGlsbCBub3Qgc3VyZSBJIGFn cmVlLiAgQXJlIGltcGxlbWVudGVycyByZWFsbHkgZ29pbmcgdG8gaGF2ZSAyDQo+ID4gc2VwYXJh dGUgY29kZSBwYXRocywgb25lIHdpdGggYW4gaW50ZWdlciB2YXJpYWJsZSBhbmQgYW5vdGhlciB3 aXRoIGENCj4gPiBzdHJpbmcgdmFyaWFibGUsIGp1c3QgdG8gZ2V0IGEgbWVtb3J5IGVmZmljaWVu Y3k/ICBPciBpcyB0aGUgaW50ZWdlcg0KPiBqdXN0DQo+ID4gZ29pbmcgdG8gZ2V0IGNvbnZlcnRl ZCB0byBhIHN0cmluZz8gIEFuZCB0aGV5IGFscmVhZHkgaGF2ZSB0byBhbGxvY2F0ZQ0KPiB0aGUN Cj4gPiBtZW1vcnkganVzdCB0byBwYXJzZSB0aGUgdG9rZW4/DQo+ID4NCj4gPiBHaXZlbiB0aGF0 IExlaWYgYW5kIGhpcyBjb2xsZWFndWVzIGFjdHVhbGx5IGltcGxlbWVudGVkIHRoZSBhbGdvcml0 aG0sDQo+IGFuZA0KPiA+IHRoZXkgd2VyZSB0aGUgb25lcyBhc2tpbmcgZm9yIHRoaXMgY2hhbmdl LCBteSBndWVzcyB3b3VsZCBiZSB5ZXMuIEJ1dA0KPiA+IGxldOKAmXMgYXNrIHRoZW0gdG8gbWFr ZSBzdXJlLiBJbiB0aGUgZW5kLCBJIHdvdWxkbuKAmXQgYmUgc3VycHJpc2VkIGlmIHNvbWUNCj4g PiBpbXBsZW1lbnRhdGlvbnMgYWN0dWFsbHkgb25seSBpbXBsZW1lbnRlZCBLSURfTlVNLg0KPiA+ DQo+ID4gPiAgMi4gSSBhZ3JlZSB0aGF0IGhhdmluZyBib3RoIEhGIGFuZCBEU0EgY291bGQgYmUg dW5uZWNlc3NhcnkuICBJIGtub3cNCj4gPiB3ZSd2ZSBhbHNvIGhhZCBsb25nIGRpc2N1c3Npb25z IGFib3V0IG5lZWRpbmcgZm9yIGJvdGggTUQgYW5kIERTLg0KPiA+IFVsdGltYXRlbHksIHRoZXJl IGlzIGFuIGFsZ29yaXRobSAoSEYgb3IgRFNBKSB0aGF0IGlzIHJ1biwgYW5kIHJlc3VsdHMNCj4g aW4NCj4gPiBhIHNpZ25hdHVyZSAoTUQgb3IgRFMpLCBhbmQgb25seSBvbmUgcGFpciAoSEYvTUQg b3IgRFNBL0RTKSBlbmRzIHVwIGluDQo+IHRoZQ0KPiA+IHRva2VuPyAgVGhlIGFsZ29yaXRobSBk b2Vzbid0IHJlYWxseSBjaGFuZ2UgZHJhbWF0aWNhbGx5IGlmIHRoZSBJRSdzIGFyZQ0KPiA+IGRp ZmZlcmVudD8gIElzIGl0IGp1c3QgYWJvdXQgcmVhZGFiaWxpdHk/DQo+ID4NCj4gPiBJZiB5b3Ug bG9vayBhdCB0aGUgYWxnb3JpdGhtLCB0aGUgcGF0aHMgZm9yIEhGIGFuZCBEU0EgYXJlIGNvbnNp ZGVyYWJseQ0KPiA+IGRpZmZlcmVudC4gT25lIHBlcmZvcm1zIGFuIEhNQUMgYXMgZGVmaW5lZCBi eSBIRiwgdGhlIG90aGVyIGRvZXMgYQ0KPiA+IChrZXlsZXNzKSBTSEEtMSBoYXNoLCB0aGVuIGVu Y3J5cHRzIHRoZSByZXN1bHQgd2l0aCBhbiBlbmNyeXB0aW9uDQo+ID4gZnVuY3Rpb24uIElmIHdl IHdvdWxkIG1lcmdlIGJvdGggaW50byBhIHNpbmdsZSBJbmZvcm1hdGlvbiBFbGVtZW50DQo+IChs ZXTigJlzDQo+ID4gY2FsbCBpdCBTaWduYXR1cmUgQWxnb3JpdGhtLCBvciBTQSwgZm9yIG5vdyks IHRoZSBhbGdvcml0aG0gd291bGQgaGF2ZQ0KPiB0bw0KPiA+IGluY2x1ZGUgc29tZXRoaW5nIGFs b25nIHRoZSBsaW5lcyBvZjog4oCcSWYgdGhlIGFsZ29yaXRobSBjb21tdW5pY2F0ZWQgaW4NCj4g PiB0aGUgU0EgZmllbGQgaXMgYSBEaWdpdGFsIFNpZ25hdHVyZSBBbGdvcml0aG0sIHBlcmZvcm0g WC4gSWYgaXQgaXMgYQ0KPiA+IGhhc2hpbmcgZnVuY3Rpb24sIHBlcmZvcm0gWS7igJ0uIEluIG90 aGVyIHdvcmRzLCB0aGUgdHdvIGRpZmZlcmVudCBwYXRocw0KPiBpbg0KPiA+IHRoZSBhbGdvcml0 aG0gd2lsbCBrZWVwIGV4aXN0aW5nLCBidXQgbm93IHlvdeKAmXJlIHByb2JhYmx5IGdvaW5nIHRv IGhhdmUNCj4gdG8NCj4gPiBnaXZlIHNvbWUgZGVmaW5pdGlvbiBvciBsaXN0IG9mIHdoaWNoIGFs Z29yaXRobXMgY2xhc3NpZnkgYXMgRGlnaXRhbA0KPiA+IFNpZ25hdHVyZSBBbGdvcml0aG0gYW5k IHdoaWNoIGFzIGhhc2hpbmcgZnVuY3Rpb25zLiBJbiB0aGUgZW5kLCBJ4oCZbSBub3QNCj4gPiBz dXJlIHdoYXQgd2Ugd291bGQgZ2FpbiBieSBpdC4NCj4gPg0KPiA+IFRoYW5rcywNCj4gPg0KPiA+ IFJheQ0KPiA+DQo+ID4NCj4gPiBPbiAwOC8wNy8xNiAyMzoxOSwgIktldmluIE1hIEoiIDxrZXZp bi5qLm1hQGVyaWNzc29uLmNvbT4gd3JvdGU6DQo+ID4NCj4gPiBIaSBSYXksDQo+ID4NCj4gPiAg IChBcyBhbiBpbmRpdmlkdWFsKSBJJ2xsIGVjaG8gdHdvIG9mIEJlbidzIHBvaW50cywgYXMgSSd2 ZSBhc2tlZA0KPiBzaW1pbGFyDQo+ID4gcXVlc3Rpb25zIGluIHRoZSBwYXN0Og0KPiA+DQo+ID4g ICAxLiBIYXZpbmcgYm90aCBLSUQgYW5kIEtJRF9OVU0gc2VlbXMgdW5uZWNlc3NhcnkgdG8gbWUu ICBJIHVuZGVyc3RhbmQNCj4gPiBMZWlmJ3MgYXJndW1lbnQNCj4gPg0KPiAoaHR0cHM6Ly9tYWls YXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9jZG5pL1lESXJPZHV0YnJ2UWtFd3ZBZXZ3T05kaVVG RSksDQo+ID4gYnV0IEknbSBzdGlsbCBub3Qgc3VyZSBJIGFncmVlLiAgQXJlIGltcGxlbWVudGVy cyByZWFsbHkgZ29pbmcgdG8gaGF2ZSAyDQo+ID4gc2VwYXJhdGUgY29kZSBwYXRocywgb25lIHdp dGggYW4gaW50ZWdlciB2YXJpYWJsZSBhbmQgYW5vdGhlciB3aXRoIGENCj4gPiBzdHJpbmcgdmFy aWFibGUsIGp1c3QgdG8gZ2V0IGEgbWVtb3J5IGVmZmljaWVuY3k/ICBPciBpcyB0aGUgaW50ZWdl cg0KPiBqdXN0DQo+ID4gZ29pbmcgdG8gZ2V0IGNvbnZlcnRlZCB0byBhIHN0cmluZz8gIEFuZCB0 aGV5IGFscmVhZHkgaGF2ZSB0byBhbGxvY2F0ZQ0KPiB0aGUNCj4gPiBtZW1vcnkganVzdCB0byBw YXJzZSB0aGUgdG9rZW4/DQo+ID4NCj4gPiAgIDIuIEkgYWdyZWUgdGhhdCBoYXZpbmcgYm90aCBI RiBhbmQgRFNBIGNvdWxkIGJlIHVubmVjZXNzYXJ5LiAgSSBrbm93DQo+ID4gd2UndmUgYWxzbyBo YWQgbG9uZyBkaXNjdXNzaW9ucyBhYm91dCBuZWVkaW5nIGZvciBib3RoIE1EIGFuZCBEUy4NCj4g PiBVbHRpbWF0ZWx5LCB0aGVyZSBpcyBhbiBhbGdvcml0aG0gKEhGIG9yIERTQSkgdGhhdCBpcyBy dW4sIGFuZCByZXN1bHRzDQo+IGluDQo+ID4gYSBzaWduYXR1cmUgKE1EIG9yIERTKSwgYW5kIG9u bHkgb25lIHBhaXIgKEhGL01EIG9yIERTQS9EUykgZW5kcyB1cCBpbg0KPiB0aGUNCj4gPiB0b2tl bj8gIFRoZSBhbGdvcml0aG0gZG9lc24ndCByZWFsbHkgY2hhbmdlIGRyYW1hdGljYWxseSBpZiB0 aGUgSUUncyBhcmUNCj4gPiBkaWZmZXJlbnQ/ICBJcyBpdCBqdXN0IGFib3V0IHJlYWRhYmlsaXR5 Pw0KPiA+DQo+ID4gdGhhbnghDQo+ID4NCj4gPiAtLSAgS2V2aW4gSi4gTWENCj4gPg0KPiA+ID4g LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+IEZyb206IENETmkgW21haWx0bzpjZG5p LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBCcmFuZGVuYnVyZywgUi4NCj4gPiA+IChS YXkpIHZhbg0KPiA+ID4gU2VudDogRnJpZGF5LCBKdWx5IDA4LCAyMDE2IDc6MTIgQU0NCj4gPiA+ IFRvOiBCZW4gTml2ZW4tSmVua2luczsgQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrcyBJbnRlcmNv bm5lY3Rpb24NCj4gPiA+IERpc2N1c3Npb24gTGlzdA0KPiA+ID4gU3ViamVjdDogUmU6IFtDRE5p XSBXb3JraW5nIEdyb3VwIExhc3QgQ2FsbCBvbiBkcmFmdC1pZXRmLWNkbmktdXJpLQ0KPiA+IHNp Z25pbmcNCj4gPiA+DQo+ID4gPiBIaSBCZW4sDQo+ID4gPg0KPiA+ID4gVGhhbmtzIGZvciB0aGUg dGhvcm91Z2ggcmV2aWV3ISBTZWUgbXkgY29tbWVudHMgYmVsb3cuDQo+ID4gPg0KPiA+ID4gUmF5 DQo+ID4gPg0KPiA+ID4gT24gMDIvMDcvMTYgMTM6MzUsICJDRE5pIG9uIGJlaGFsZiBvZiBCZW4g Tml2ZW4tSmVua2lucyIgPGNkbmktDQo+ID4gPiBib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBv ZiBiZW5Abml2ZW4tamVua2lucy5jby51az4gd3JvdGU6DQo+ID4gPg0KPiA+ID4gS2V2aW4sIENv bGxlYWd1ZXMsDQo+ID4gPg0KPiA+ID4gSSByZXZpZXdlZCBkcmFmdC1pZXRmLWNkbmktdXJpLXNp Z25pbmctMDkgJiBiZWxvdyBhcmUgbXkgY29tbWVudHMuDQo+ID4gPg0KPiA+ID4gR2VuZXJhbDoN Cj4gPiA+DQo+ID4gPiBUaGUgZG9jdW1lbnQgaXMgbm90IGNsZWFyIG9uIHdoZXRoZXIgaW1wbGVt ZW50ZXJzIGFyZSBleHBlY3RlZCB0bw0KPiA+ID4gaW1wbGVtZW50IGJvdGggc2hhcmVkIHNlY3Jl dCAmIGRpZ2l0YWwgc2lnbmF0dXJlIGFsZ29yaXRobXMgZm9yIHNpZ25lZA0KPiA+IFVSSQ0KPiA+ ID4gdmFsaWRhdGlvbi4gVGhpcyBjb3VsZCBsZWFkIHRvIGludGVyb3AgcHJvYmxlbXMgd2hlcmUg ZGlmZmVyZW50DQo+ID4gPiBpbXBsZW1lbnRhdGlvbiBpbXBsZW1lbnQgb25lIGJ1dCBub3QgdGhl IG90aGVyLg0KPiA+ID4NCj4gPiA+IE1heWJlIHNwZWNpZnkgYSBtaW5pbXVtIGJhc2VsaW5lIG9m IE1VU1Qgc3VwcG9ydCBzaGFyZWQgc2VjcmV0IChhcw0KPiBBRkFJSw0KPiA+ID4gdGhhdCBpcyB3 aGF0IGlzIHVzZWQgaW4gdGhlIGZpZWxkKSB3aXRoIFNIT1VMRCBpbXBsZW1lbnQgZGlnaXRhbA0K PiA+ID4gc2lnbmF0dXJlcyBmb3IgdGhlIDEgY29ybmVyIGNhc2UgZm9yIHdoaWNoIGRpZ2l0YWwg c2lnbmF0dXJlcyBwcm92aWRlDQo+IGFuDQo+ID4gPiBhZHZhbnRhZ2UuDQo+ID4gPg0KPiA+ID4g SeKAmW0gc29tZXdoYXQgYWdhaW5zdCBzcGVjaWZ5aW5nIG11c3QgaW1wbGVtZW50IGJvdGggc2hh cmVkIHNlY3JldCAmDQo+ID4gPiBkaWdpdGFsIHNpZ25hdHVyZXMgYmVjYXVzZSBJ4oCZdmUgbmV2 ZXIgc2VlbiBhIGRpZ2l0YWwgc2lnbmF0dXJlIGJhc2VkDQo+ID4gPiBzaWduZWQgVVJJIGluIHRo ZSBmaWVsZCBhbmQgSeKAmW0gZmFtaWxpYXIgd2l0aCBxdWl0ZSBhIGZldyBzaWduZWQgVVJJDQo+ ID4gPiBhbGdvcml0aG1zL2ltcGxlbWVudGF0aW9ucyBvZiBkaWZmZXJlbnQgQ0ROcy4gVGhhdCBz YXlzIHRvIG1lIGZvbGtzDQo+IGFyZQ0KPiA+ID4gbm90IGxpa2VseSB0byBpbXBsZW1lbnQgbW9y ZSB0aGFuIHRoZSBzaGFyZWQgc2VjcmV0IGFsZ29yaXRobSB1bmxlc3MNCj4gPiB0aGV5DQo+ID4g PiByZWFsbHkgbmVlZCB0by4gSSBrbm93IENpc2NvIGhhdmUgYSBkaWdpdGFsIHNpZ25hdHVyZSBp bXBsZW1lbnRhdGlvbg0KPiA+IG1heWJlDQo+ID4gPiB0aGV5IGNvdWxkIGhlbHAgd2l0aCBob3cg bXVjaCB1c2UgaXQgc2VlcyBpbiB0aGUgZmllbGQ/DQo+ID4gPg0KPiA+ID4gW1JheV0gQWdyZWVk IHRoYXQgd2Ugc2hvdWxkbuKAmXQgbWFrZSBkaWdpdGFsIHNpZ25hdHVyZXMgbWFuZGF0b3J5LiBB cw0KPiBmb3INCj4gPiA+IG1ha2luZyBzdXBwb3J0IGZvciBzaGFyZWQgc2VjcmV0cyBtYW5kYXRv cnk6IEkgZ3Vlc3MgdGhhdCBtYWtlcyBzZW5zZS4NCj4gPiA+DQo+ID4gPiBUaGUgZG9jdW1lbnQg Y291bGQgZG8gd2l0aCBzb21lIG1vcmUgZXhhbXBsZXMgb2Yge1VSSSwgYXR0cmlidXRlcywNCj4g PiA+IFVSSVNpZ25pbmdQYWNrYWdlLCBTaWduZWQgVVJJfSBjb3ZlcmluZyBlLmcuIElQdjQgJiBJ UHY2LCBvbmUNCj4gaW5jbHVkaW5nDQo+ID4gYQ0KPiA+ID4gVVJJIFBhdGggUGF0dGVybiBldGMu DQo+ID4gPg0KPiA+ID4gU2VjdGlvbiAyLjE6DQo+ID4gPiBVUkkgUGF0dGVybiBDb250YWluZXIg KFVQQykgZGVmaW5pdGlvbiAtIGhvdyBkb2VzIG9uZSByZXByZXNlbnQgYSBVUkkNCj4gPiA+IHBh dHRlcm4gdGhhdCBjb250YWlucyBhIGxpdGVyYWwg4oCYO+KAmSBiZWNhdXNlIHRoZSBVUkkvVVJJ IHBhdHRlcm4NCj4gY29udGFpbnMNCj4gPiA+IGluIHBhdGggcGFyYW1ldGVycyB0byBtYXRjaCBh Z2FpbnN0PyBEb2VzIHByZXNlbmNlIG9mIGEgbGl0ZXJhbCDigJg74oCZDQo+IG5lZWQNCj4gPiA+ IHRvIGJlIGVzY2FwZWQgd2l0aCDigJgkJyB0b28gdG8gZGlzdGluZ3Vpc2ggaXQgZnJvbSB0aGUg dXNlIG9mIOKAmDvigJkgdG8NCj4gPiA+IHNlcGFyYXRlIFVSSSBwYXR0ZXJucyB3aXRoaW4gdGhl IFVSSSBQYXR0ZXJuIENvbnRhaW5lcj8NCj4gPiA+DQo+ID4gPiBbUmF5XSBHb29kIHBvaW50LiBM aXRlcmFsIHNlbWktY29sb25zIGRvIGluZGVlZCBuZWVkIHRvIGJlIGVzY2FwZWQuDQo+IEnigJls bA0KPiA+ID4gYWRkIHRoaXMgaW4gdGhlIG5leHQgcmV2aXNpb24NCj4gPiA+DQo+ID4gPiBTZWN0 aW9uIDIuMjoNCj4gPiA+IFdoeSBpcyB0aGVyZSBhIEtJRCAoc3RyaW5nKSAmIEtJRF9OVU0gKGlu dGVnZXIpIGZvciBzaGFyZWQNCj4gc2VjcmV0cy9rZXlzDQo+ID4gPiBhbmQgb25seSBDS0kgKGlu dGVnZXIpIGZvciBDbGllbnQgSVAga2V5cz8gVG8gYmUgY29uc2lzdGVudCBzaG91bGQgaXQNCj4g YmUNCj4gPiA+IENLSV9OVU0/DQo+ID4gPg0KPiA+ID4gVGhlIGRvY3VtZW50IGFsc28gc2F5cw0K PiA+ID4gICAgSW4gY2FzZXMNCj4gPiA+ICAgIHdoZXJlIG51bWVyaWNhbCBLRVkgSURzIGFyZSB1 c2VkLCBpdCBpcyBSRUNPTU1FTkRFRCB0byB1c2UgS0lEX05VTQ0KPiA+ID4gICAgaW5zdGVhZCBv ZiBLSUQuDQo+ID4gPiBXaGljaCBtYWtlcyBtZSB0aGluaywgd2h5PyBXaGF0IHRoZSBLSUQgbWVh bnMvcmVwcmVzZW50cyBpcw0KPiBjb21tdW5pY2F0ZWQNCj4gPiA+IG91dCBvZiBiYW5kIChhbmQg aG93IHRvIGRvIHRoYXQgaXMgb3V0IG9mIHNjb3BlIG9mIHRoZSBkb2N1bWVudCkuIEl0DQo+ID4g c2VlbXMNCj4gPiA+IHN0cmFpZ2h0Zm9yd2FyZCB0byBzYXkgS0lEIGlzIGFsd2F5cyBhIHN0cmlu ZyAod2hpY2ggY2FuIHJlcHJlc2VudCBhbg0KPiA+ID4gaW50ZWdlcikgYW5kIGdldCByaWQgb2Yg S0lEX05VTSBlbnRpcmVseS4gVGhhdCB3b3VsZCBtZWFuIHdlIG5lZWQgb25lDQo+ID4gbGVzcw0K PiA+ID4gYXR0cmlidXRlIGRlZmluaW5nIChvciB0d28gbGVzcyBpZiB3ZSBuZWVkIHN0cmluZyAm IGludGVnZXIgYXR0cmlidXRlcw0KPiA+IGZvcg0KPiA+ID4gQ0tJKSBhbmQgYXZvaWRzIGZvbGtz IGhhdmluZyB0byB3b3JrIG91dCB3aGF0IHRvIGRvICYgaW1wbGVtZW50IGNvcm5lcg0KPiA+ID4g Y2FzZXMgbGlrZSB3aGF0IHRvIGRvIGlmIEtJRCAmIEtJRF9OVU0gYXJlIGJvdGggcHJlc2VudC4N Cj4gPiA+DQo+ID4gPiBXaHkgbm90IGp1c3QgaGF2ZSBLSUQgYW5kIENLSSBib3RoIGFzIHN0cmlu Z3MgYW5kIHJlbW92ZSBLSURfTlVNPw0KPiA+ID4NCj4gPiA+IFtSYXldIFRoaXMgd2FzIHRoZSBj b25zZW5zdXMgcmVzdWx0IG9mIGEgbGVuZ3RoeSBkaXNjdXNzaW9uIGJldHdlZW4NCj4gdGhlDQo+ ID4gPiBhdXRob3JzIGJvdGggb24gYW5kIG9mZiBsaXN0IOKYuiBUaGUgbWFpbiByZWFzb24gd2Ug aW5jbHVkZWQgYSBzdHJpbmctDQo+ID4gYmFzZWQNCj4gPiA+IEtJRCB3YXMgc28gdGhhdCB3ZSBj YW4gaGF2ZSBVUkxzIHRvIHB1YmxpYyBrZXlzLiBIb3dldmVyLCBhcyBMZWlmDQo+ID4gcG9pbnRl ZA0KPiA+ID4gb3V0LCBmb3IgaW50ZXJvcCBhbmQgcGVyZm9ybWFuY2UgcmVhc29ucyBpdCBoZWxw cyB0byBoYXZlIG1heGltdW0NCj4gbGVuZ3RoDQo+ID4gPiBmb3IgdGhlIEtJRCBmaWVsZC4gV2l0 aCBwdWJsaWMga2V5cyB0aGlzIGlzIGhhcmQgdG8gZG8uIFNvIGluIGNhc2VzDQo+ID4gd2hlcmUN Cj4gPiA+IHBlcmZvcm1hbmNlIGlzIGVzc2VudGlhbCwgdXNpbmcgYSBmaXhlZC1sZW5ndGggaW50 IGZpZWxkIGlzIGZhc3Rlci4NCj4gVGhlDQo+ID4gPiByZWFzb24gd2UgZGlkbuKAmXQgZXh0ZW5k IHRoaXMgdG8gdGhlIENLSSBmaWVsZCBpcyB0aGF0IGZvciBDS0kgd2Ugb25seQ0KPiA+ID4gc3Vw cG9ydCBzeW1tZXRyaWMgZW5jcnlwdGlvbiwgYW5kIGhlbmNlIGEgaW50ZWdlciBrZXkgaW5kZXgg c2hvdWxkIGJlDQo+ID4gPiBzdWZmaWNpZW50Lg0KPiA+ID4NCj4gPiA+IEFsb25nIHNpbWlsYXIg bGluZXMuIFdoeSBoYXZlIGJvdGggSEYgJiBEU0EuIElzIGl0IGltcGxpY2l0IGZyb20gdGhlDQo+ ID4gdmFsdWUNCj4gPiA+IG9mIHRoZSBhdHRyaWJ1dGUgKGUuZy4gJ1NIQS0yNTYnIHZzIOKAmEVD RFNB4oCZKSB3aGV0aGVyIGEgc2hhcmVkIHNlY3JldA0KPiBvcg0KPiA+ID4gZGlnaXRhbCBzaWdu YXR1cmUgYWxnb3JpdGhtIGlzIGJlaW5nIHVzZWQ/IE9yIGlzIHRoZSBwdXJwb3NlIHRvIGVuYWJs ZQ0KPiA+IFVSSQ0KPiA+ID4gdG8gYmUgc2lnbmVkICgmIHN1YnNlcXVlbnRseSkgdmVyaWZpZWQg d2l0aCBlaXRoZXIgKGlmIGJvdGggYXJlDQo+ID4gc3BlY2lmaWVkKQ0KPiA+ID4gb3Igd2l0aCBi b3RoPw0KPiA+ID4NCj4gPiA+IFtSYXldIFdlIGV4cGxpY2l0bHkgcnVsZSBvdXQgaGF2aW5nIGJv dGggSEYgYW5kIERTQSBpbmZvcm1hdGlvbg0KPiBlbGVtZW50cw0KPiA+ID4gaW4gYSBzaW5nbGUg U2lnbmVkIFVSSS4gVGhlIHJlYXNvbiB3ZSB3ZW50IGZvciBzZXBhcmF0ZSBJRXMgaXMgdGhhdCBp dA0KPiA+ID4gbWFrZXMgZGVzY3JpYmluZyB0aGUgYWxnb3JpdGhtIHNsaWdodGx5IGxlc3MgY29t cGxleC4gQW5kIGdpdmVuIHRoYXQNCj4gd2UNCj4gPiA+IGJhc2U2NC1lbmNvZGUgdGhlIGZ1bGwg VVJJIFNpZ25pbmcgUGFja2FnZSBhbnl3YXkgaXQgZG9lc27igJl0IHJlYWxseQ0KPiA+IG1hdHRl cg0KPiA+ID4gaW4gdGVybXMgb2YgbmFtZXNwYWNlIGNvbGxpc2lvbnMuDQo+ID4gPg0KPiA+ID4g U2VjdGlvbiAzLjE6DQo+ID4gPiA4KWEpIHNheXMNCj4gPiA+ICAgICAgICAgICAgTm90ZTogdGhl IE9yaWdpbmFsIFVSSQ0KPiA+ID4gICAgICAgICAgICBDb250YWluZXIgaW5mb3JtYXRpb24gZWxl bWVudCBNVVNUIGJlIHRoZSBsYXN0IGluZm9ybWF0aW9uDQo+ID4gPiAgICAgICAgICAgIGVsZW1l bnQgaW4gdGhlIGJ1ZmZlciBiZWZvcmUgdGhlIHNpZ25hdHVyZSBpbmZvcm1hdGlvbg0KPiA+ID4g ICAgICAgICAgICBlbGVtZW50Lg0KPiA+ID4gOCliKSBkb2VzIG5vdCBoYXZlIGEgc2ltaWxhciBz dGF0ZW1lbnQuIElzIHRoZSBVUkkgUGF0dGVybiBDb250YWluZXINCj4gPiBhbHNvDQo+ID4gPiBy ZXF1aXJlZCAoTVVTVCkgdG8gYmUgdGhlIGxhc3QgaW5mb3JtYXRpb24gZWxlbWVudCBpbiB0aGUg YnVmZmVyPw0KPiA+ID4NCj4gPiA+IFtSYXldIFRoZSBPcmlnaW5hbCBVUkkgQ29udGFpbmVyIGlz IGEgc3BlY2lhbCBjYXNlIGluIHRoZSBzZW5zZSB0aGF0DQo+IGl0DQo+ID4gPiBpc27igJl0IGNv bW11bmljYXRlZCBhbG9uZyB3aXRoIHRoZSBTaWduZWQgVVJJIGJ1dCBpcyByZW1vdmVkIGZyb20g dGhlDQo+ID4gPiBwYWNrYWdlIGFmdGVyIGhhdmluZyBjYWxjdWxhdGVkIHRoZSBzaWduYXR1cmUu DQo+ID4gPg0KPiA+ID4gU2VjdGlvbiA1LjQ6DQo+ID4gPiBJIGRvbuKAmXQgc2VlIHRoZSBwb2lu dCBvZiBrZXktaWQsIGhhc2gtZnVuY3Rpb24sIGRpZ2l0YWwtc2lnbmF0dXJlLQ0KPiA+ID4gYWxn b3JpdGhtICYgdmVyc2lvbi4NCj4gPiA+DQo+ID4gPiBUaGUgYWJzZW5jZSBvZiB0aGUgVkVSIGF0 dHJpYnV0ZSBpcyBzcGVjaWZpZWQgYnkgdGhlIGRvY3VtZW50IHRvIG1lYW4NCj4gPiA+IFZlcnNp b24gMS4gVGhlIGFic2VuY2Ugb2YgdGhlIEhGICYgRFNBIGF0dHJpYnV0ZXMgaXMgc3BlY2lmaWVk IGJ5IHRoZQ0KPiA+ID4gdmVyc2lvbiBvZiB0aGUgc2lnbmluZyBtZXRob2QuIFZlcnNpb24gMSAo dGhlIGRvY3VtZW50KSBzcGVjaWZpZXMgdGhlbQ0KPiA+IGFzDQo+ID4gPiBTSEEtMjU2ICYgRUNE U0EgYWNjb3JkaW5nbHkuIFdoeSByZS1zcGVjaWZ5IHRoaXMgaW4gdGhlIE1ldGFkYXRhDQo+IG9i amVjdD8NCj4gPiA+DQo+ID4gPiBbUmF5XSBJ4oCZbSBub3Qgc3VyZSBJIHVuZGVyc3RhbmQuIFdo YXQgdGhlIG1ldGFkYXRhIOKAmHZlcnNpb27igJkgZmllbGQgaXMNCj4gPiBmb3INCj4gPiA+IGlz IHRvIGFsbG93IENETnMgdG8gbWFuZGF0ZSBvdGhlciB2ZXJzaW9ucyBvZiBVUkkgU2lnbmluZyBp biB0aGUNCj4gZnV0dXJlDQo+ID4gPiAoZS5nLiBieSBzZXR0aW5nIHRoZSB2ZXJzaW9uIHByb3Bl cnR5IHRvIDIpLiBUaGUgc2FtZSBnb2VzIGZvciB0aGUNCj4gaGFzaC0NCj4gPiA+IGZ1bmN0aW9u IGFuZCBkaWdpdGFsLXNpZ25hdHVyZS1hbGdvcml0aG0gcHJvcGVydGllczogYSBDRE4gY291bGQN Cj4gbWFuZGF0ZQ0KPiA+ID4gdGhhdCBVUkkgU2lnbmluZyB2ZXJzaW9uIDEgaXMgdXNlZCwgYnV0 IHN0aWxsIG9ubHkgYWxsb3cgU0hBLTUxMg0KPiBpbnN0ZWFkDQo+ID4gPiBvZiBTSEEtMjU2IGFz IHVzZWQgYnkgZGVmYXVsdC4NCj4gPiA+DQo+ID4gPiBrZXktaWQgaXMgZm9yIHdoZW4gdGhlcmUg aXMgb25seSBhIHNpbmdsZSBrZXkgaWQgYXMgYW4gb3B0aW1pc2F0aW9uIGlmDQo+ID4gPiBzb21l b25lIHdhbnRzIHRvIGhhdmUgYSBzaW5nbGUga2V5IGlkICYgbm90IHRyYW5zbWl0IGl0IGluIHRo ZSBzaWduZWQNCj4gPiBVUkk/DQo+ID4gPiBEb2VzO3Qgc2VlbSB3b3J0aCBpdCB0byBtZSBmb3Ig YSBuYXJyb3cgY29ybmVyIGNhc2UuIElmIGl0IGlzIHdvcnRoIGl0DQo+ID4gPiBqdXN0IHNwZWNp ZnkgaWYgS0lEL0tJRF9OVU0gaXMgbWlzc2luZyBmcm9tIHRoZSBzaWduZWQgVVJJIGFuZCBrZXkt aWQtDQo+ID4gc2V0DQo+ID4gPiBjb250YWlucyBhIHNpbmdsZSB2YWx1ZSB0aGVuIHVzZSB0aGF0 PyBPciBpZiBLSUQvS0lEX05VTSBpcyBtaXNzaW5nDQo+IHRoZQ0KPiA+ID4gc3Vycm9nYXRlIGNo ZWNrcyBhbGwga2V5cyBpbiBrZXktaWQtc2V0IGFuZCBpZiBvbmUgbWF0Y2hlcyB0aGUgVVJJIGlz DQo+ID4gPiBhdXRob3Jpc2VkPw0KPiA+ID4NCj4gPiA+IFtSYXldIFNlZSBlYXJsaWVyIGNvbW1l bnQNCj4gPiA+DQo+ID4gPiAoUGVyc29uYWxseSBJIHRoaW5rIEtJRC9LSURfTlVNIGluIHRoZSBT aWduZWQgVVJpIGlzIHBvaW50bGVzcywgdGhlaXINCj4gPiA+IG1lYW5pbmcgaXMgZGlzdHJpYnV0 ZWQgb3V0IG9mIGJhbmQgc28gd2h5IG5vdCBhbHNvIGRpc3RyaWJ1dGUgdGhlDQo+IHZhbHVlcw0K PiA+ID4gb3V0IG9mIGJhbmQvdmlhIG1ldGFkYXRhIGFuZCBoYXZlIHRoZSBiZWhhdmlvdXIgYmUg YW55IHZhbGlkDQo+IGtleS9zZWNyZXQNCj4gPiBpbg0KPiA+ID4ga2V5LWlkLXNldCBwYXNzZXMg YW5kIHJlbW92ZSBLSUQvS0lEX05VTSBbYW5kIG1heWJlIENLSV0gZnJvbSB0aGUNCj4gU2lnbmVk DQo+ID4gPiBVUkkgZW50aXJlbHkpDQo+ID4gPg0KPiA+ID4gW1JheV0gSeKAmW0gbm90IHN1cmUg SSB1bmRlcnN0YW5kLiBIb3cgd291bGQgdGhlIGRDRE4ga25vdyB3aGljaCBLZXkgaXMNCj4gPiB1 c2VkDQo+ID4gPiB0byBjYWxjdWxhdGUgYSBnaXZlbiBzaWduYXR1cmU/IE9yIGFyZSB5b3Ugc2F5 aW5nIGl0IHNob3VsZCBqdXN0IGNoZWNrDQo+ID4gYWxsDQo+ID4gPiBwb3NzaWJsZSBLZXlzIHRo YXQgYXJlIGluIHRoZSBhbGxvd2VkIHNldD8NCj4gPiA+DQo+ID4gPiBTZWN0aW9uIDUuNDoNCj4g PiA+IFRoaXMgY29uZnVzZWQgbWU6DQo+ID4gPiAgICBOb3RlIHRoYXQgdGhlIEtleSBJRCBpbmZv cm1hdGlvbiBlbGVtZW50IGlzIG5vdCBuZWVkZWQgaWYgb25seSBvbmUNCj4gPiA+ICAgIGtleSBp cyBwcm92aWRlZCBieSB0aGUgQ1NQIG9yIHRoZSBVcHN0cmVhbSBDRE4gZm9yIHRoZSBjb250ZW50 IGl0ZW0NCj4gPiA+ICAgIG9yIHNldCBvZiBjb250ZW50IGl0ZW1zIGNvdmVyZWQgYnkgdGhlIENE TkkgTWV0YWRhdGEgb2JqZWN0Lg0KPiA+ID4gdW50aWwgSSByZWFsaXNlZCB0aGF0IOKAnEtleSBJ RCBpbmZvcm1hdGlvbiBlbGVtZW504oCdIHdhcyByZWZlcnJpbmcgdG8NCj4gdGhlDQo+ID4gPiBl bGVtZW50IG9mIHRoZSBTaWduZWQgVVJJIGFuZCBub3QgdGhlIGtleS1pZCBwcm9wZXJ0eSBvZiB0 aGUgbWV0YWRhdGENCj4gPiA+IG9iamVjdCBzcGVjaWZpZWQgaW1tZWRpYXRlbHkgYWJvdmUgdGhl IHNlbnRlbmNlLiBNYXliZSBwaHJhc2UgYXMg4oCcTm90ZQ0KPiA+ID4gdGhhdCB0aGUgS2V5IElE IGluZm9ybWF0aW9uIGVsZW1lbnQgZG9lcyBub3QgbmVlZCB0byBiZSBpbmNsdWRlZCBpbg0KPiB0 aGUNCj4gPiA+IFNpZ25lZCBVUkkgaWYgb25seSBvbmUga2V54oCmIg0KPiA+ID4NCj4gPiA+IFtS YXldIEdvb2QgcG9pbnQuIFdpbGwgdXBkYXRlLg0KPiA+ID4NCj4gPiA+IFNlY3Rpb24gOToNCj4g PiA+ICAgIEluIHRoZSBjYXNlIHdoZXJlIGFzeW1tZXRyaWMga2V5cyBhcmUgdXNlZCwgdGhlIEtJ RCBpbmZvcm1hdGlvbg0KPiA+ID4gICAgZWxlbWVudCBtaWdodCBjb250YWluIHRoZSBVUkwgdG8g dGhlIHB1YmxpYyBrZXkuICBUbyBwcmV2ZW50DQo+ID4gPiAgICBtYWxpY2lvdXMgY2xpZW50cyBm cm9tIHNpZ25pbmcgdGhlaXIgb3duIFVSSXMgYW5kIGluc2VydGluZyB0aGUNCj4gPiA+ICAgIGFz c29jaWF0ZWQgcHVibGljIGtleSBVUkwgaW4gdGhlIEtJRCBmaWVsZCwgdGhlcmVieSBwYXNzaW5n IFVSSQ0KPiA+ID4gICAgdmFsaWRhdGlvbiwgaXQgaXMgaW1wb3J0YW50IHRoYXQgQ0ROcyBjaGVj ayB3aGV0aGVyIHRoZSBVUkkNCj4gY29udmV5ZWQNCj4gPiA+ICAgIGluIHRoZSBLSUQgZmllbGQg aXMgaW4gdGhlIGFsbG93YWJsZSBzZXQgb2YgS0lEcyBhcyBsaXN0ZWQgaW4gdGhlDQo+ID4gPiAg ICBDRE5JIG1ldGFkYXRhIG9yIHNldCB2aWEgY29uZmlndXJhdGlvbi4NCj4gPiA+IE9yIHNwZWNp ZnkgdGhpbmdzIGFzIEkgc3VnZ2VzdCBhYm92ZSBhbmQgcmVtb3ZlIHRoZSBuZWVkIGZvcg0KPiBL SUQvS0lEX05VTQ0KPiA+ID4gYmVpbmcgcHJlc2VudCBpbiB0aGUgU2lnbmVkIFVSSSBhbmQgdGhl cmVmb3JlIHRoaXMNCj4gPiBzY2VuYXJpby92dWxuZXJhYmlsaXR5DQo+ID4gPiBiZWluZyBhYmxl IHRvIG9jY3VyIGluIHRoZSBmaXJzdCBwbGFjZT8NCj4gPiA+DQo+ID4gPiBbUmF5XSBTZWUgbXkg ZWFybGllciBjb21tZW50LiBJIGRvbuKAmXQgc2VlIGhvdyB0aGUgZENETiB3b3VsZCBldmVyIGJl DQo+ID4gYWJsZQ0KPiA+ID4gdG8ga25vdyB3aGljaCBrZXkgd2FzIHVzZWQuIEJ1dCBtYXliZSBJ 4oCZbSBtaXNzaW5nIHNvbWV0aGluZy4NCj4gPiA+DQo+ID4gPiBuaXRzOg0KPiA+ID4gU2VjdGlv biAxOg0KPiA+ID4gICAgVGhlIHByaW1hcnkgZ29hbCBvZiBVUkkgU2lnbmluZyBpcyB0byBtYWtl DQo+ID4gPiAgICBzdXJlIHRoYXQgb25seSBhdXRob3JpemVkIFVzZXIgQWdlbnRzIChVQXMpIGFy ZSBhYmxlIHRvIGFjY2VzcyB0aGUNCj4gPiA+ICAgIGNvbnRlbnQsIHdpdGggYSBDU1AgYmVpbmcg YWJsZSB0byBhdXRob3JpemUgZXZlcnkgaW5kaXZpZHVhbA0KPiByZXF1ZXN0Lg0KPiA+ID4gSXMg aXQgcmVhbGx5IHRvIGF1dGhvcmlzZSB0aGUgVXNlciBBZ2VudCBvciB0aGUgSVAgYWRkcmVzcyB0 aGUgVXNlcg0KPiA+IEFnZW50DQo+ID4gPiBpcyBiZWhpbmQ/IFRoZXJlIGlzIG5vdGhpbmcgaW4g dGhlIHNpZ25lZCBVUkkgdGhhdCBpZGVudGlmaWVzIHRoZQ0KPiA+ID4gcGFydGljdWxhciBVc2Vy IEFnZW50LiBVUklzIGNhbiBzdGlsbCBwb3RlbnRpYWxseSBiZSBzaGFyZWQvZXhjaGFuZ2VkDQo+ ID4gPiBiZXR3ZWVuIFVzZXIgQWdlbnRzIGJlaGluZCB0aGUgc2FtZSBJUCBhZGRyZXNzL3N1Ym5l dCwgaG93ZXZlciB0aGUNCj4gPiBpbXBhY3QNCj4gPiA+IG9mIHN1Y2ggc2hhcmluZyBpcyBsaW1p dGVkL2FjY2VwdGFibGUgZm9yIHRoZSB1c2UgY2FzZS4NCj4gPiA+DQo+ID4gPiBJIHdvdWxkIHMv VXNlciBBZ2VudHMgKFVBcykvSVAgYWRkcmVzcyhlcykvDQo+ID4gPg0KPiA+ID4gU2VjdGlvbiAx Og0KPiA+ID4gSSBkbyBub3Qga25vdyB3aGF0IGlzIG1lYW50IGJ5IGRpc3RyaWJ1dGlvbiBwb2xp Y3kgaW4gdGhpcyBzZW50ZW5jZToNCj4gPiA+ICAgIFNwbGl0dGluZyB0aGUgcm9sZSBvZiBwZXJm b3JtaW5nIHBlci1yZXF1ZXN0DQo+ID4gPiAgICBhdXRob3JpemF0aW9uIGJ5IENTUCBhbmQgdGhl IHJvbGUgb2YgdmFsaWRhdGlvbiBvZiB0aGlzDQo+IGF1dGhvcml6YXRpb24NCj4gPiA+ICAgIGJ5 IHRoZSBDRE4gYWxsb3dzIGFueSBhcmJpdHJhcnkgZGlzdHJpYnV0aW9uIHBvbGljeSB0byBiZSBl bmZvcmNlZA0KPiA+ID4gICAgYWNyb3NzIENETnMgd2l0aG91dCB0aGUgbmVlZCBvZiBDRE5zIHRv IGhhdmUgYW55IGF3YXJlbmVzcyBvZiB0aGUNCj4gPiA+ICAgIGFjdHVhbCBDU1AgZGlzdHJpYnV0 aW9uIHBvbGljeS4NCj4gPiA+DQo+ID4gPiBTZWN0aW9uIDIuMjoNCj4gPiA+ICAgIFRoZSBLZXkg SUQgSW5mb3JtYXRpb24gRWxlbWVudCBpcyB1c2VkIHRvIHJldHJpZXZlZCB0aGUga2V5IHdoaWNo DQo+IGlzDQo+ID4gPiAgICBuZWVkZWQgYXMgaW5wdXQgdG8gdGhlIGFsZ29yaXRobSBmb3IgdmFs aWRhdGluZyB0aGUgU2lnbmVkIFVSSS4NCj4gPiA+IHMvcmV0cmlldmVkL3JldHJpZXZlLw0KPiA+ ID4NCj4gPiA+IFNlY3Rpb24gMi40Og0KPiA+ID4gICAgSG93ZXZlciwgYSBjbGllbnQgb3IgQ0RO IG1heSBhcHBlbmQgb3RoZXINCj4gPiA+ICAgIHF1ZXJ5IHBhcmFtZXRlcnMgdW5yZWxhdGVkIHRv IFVSSSBTaWduaW5nIHRvIHRoZSBTaWduZWQgVVJJLiAgU3VjaA0KPiA+ID4gICAgYWRkaXRpb25h bCBxdWVyeSBwYXJhbWV0ZXJzIFNIT1VMRCBOT1QgdXNlIHRoZSBzYW1lIG5hbWUgYXMgdGhlIFVS SQ0KPiA+ID4gICAgU2lnbmluZyBQYWNrYWdlIEF0dHJpYnV0ZSB0byBhdm9pZCBuYW1lc3BhY2Ug Y29sbGlzaW9uIGFuZA0KPiBwb3RlbnRpYWwNCj4gPiA+ICAgIGZhaWx1cmUgb2YgdGhlIFVSSSBT aWduaW5nIHZhbGlkYXRpb24uDQo+ID4gPiBzL2NsaWVudC9Vc2VyIEFnZW50LyBpcyBwcm9iYWJs eSBtb3JlIGFsaWduZWQgd2l0aCB0aGUgcmVzdCBvZiB0aGUNCj4gPiA+IGRvY3VtZW50LiBUaGVy ZSBhcmUgc29tZSBvdGhlciBwbGFjZXMgd2hlcmUgeW91IHVzZSBjbGllbnQuIFByb2JhYmx5DQo+ ID4gd29ydGgNCj4gPiA+IGJlaW5nIGNvbnNpc3RlbnQgYW5kIHBpY2tpbmcgb25lIG9mIGNsaWVu dCBvciBVc2VyIEFnZW50IHRvIHVzZQ0KPiA+ID4gdGhyb3VnaG91dC4NCj4gPiA+DQo+ID4gPiBT ZWN0aW9uIDM6DQo+ID4gPiAgICBJbiBjYXNlIHRoZQ0KPiA+ID4gICAgVVJJIFBhdHRlcm4gQ29u dGFpbmVyIGluZm9ybWF0aW9uIGVsZW1lbnQgaXMgdXNlZCwgdGhlIENTUCBoYXMgZnVsbA0KPiA+ ID4gICAgZmxleGliaWxpdHkgdG8gc3BlY2lmeSB3aGljaCBlbGVtZW50cyBvZiB0aGUgVVJJIChp bmNsdWRpbmcgdGhlDQo+ID4gPiAgICBzY2hlbWUgcGFydCkgYXJlIHByb3RlY3RlZCBieSB0aGUg VVJJLg0KPiA+ID4gSSB0aGluayB5b3UgbWVhbiDigJxwcm90ZWN0ZWQgYnkgdGhlIFNpZ25lZCBV UknigJ0/DQo+ID4gPg0KPiA+ID4gU2VjdGlvbiAzOg0KPiA+ID4gICAgVGhlIHByb2Nlc3Mgb2Yg Z2VuZXJhdGluZyBhIFNpZ25lZCBVUkkgY2FuIGJlIGRpdmlkZWQgaW50byBmb3VyDQo+IHNldHMN Cj4gPiA+ICAgIG9mIHN0ZXBzOiAxKSBDb21wb3NlIFVSSSBTaWduaW5nIElFcyB3aXRoIG9yaWdp bmFsIFVSSSAvIFVSSQ0KPiBwYXR0ZXJuLA0KPiA+ID4gICAgMikgQ29tcHV0ZSB0aGUgVVJJIFNp Z25hdHVyZSwgMykgRW5jb2RlIHRoZSBVUkkgU2lnbmluZyBQYWNrYWdlLA0KPiBhbmQNCj4gPiA+ ICAgIDQpIEFzc2VtYmxlIHRoZSBwYXJ0cyB0byBjcmVhdGUgdGhlIFNpZ25lZCBVUkkuDQo+ID4g PiBUaGlzIHdvdWxkIGJlIGJldHRlciBhcyBhIGxpc3Qgb2YgbnVtYmVyZWQgYnVsbGV0cyBJTU8u DQo+ID4gPg0KPiA+ID4NCj4gPiA+IFtSYXldIFRoYW5rcyBhZ2FpbiENCj4gPiA+DQo+ID4gPiBI VEgNCj4gPiA+IEJlbg0KPiA+ID4NCj4gPiA+ID4gT24gMjkgSnVuIDIwMTYsIGF0IDE0OjQzLCBL ZXZpbiBNYSBKIDxrZXZpbi5qLm1hQGVyaWNzc29uLmNvbT4NCj4gd3JvdGU6DQo+ID4gPiA+DQo+ ID4gPiA+IEhpIEFsbCwNCj4gPiA+ID4NCj4gPiA+ID4gIEFzIHBlciB0aGUgZGlzY3Vzc2lvbiBp biBCQSwgd2UgaGF2ZSByZWNlaXZlZCB0aGUgdXBkYXRlZCBVUkkNCj4gU2lnbmluZw0KPiA+ID4g ZHJhZnQgYW5kIHdvdWxkIGxpa2UgdG8gbW92ZSBpdCB0byBXR0xDLiAgKExlaWYgYW5kIFBoaWws IHlvdSdyZSB1cCEpDQo+ID4gPiA+DQo+ID4gPiA+ICBUb2RheSB3aWxsIGJlZ2luIHRoZSB0d28t d2VlayBXR0xDIG9uOg0KPiA+ID4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWll dGYtY2RuaS11cmktc2lnbmluZy0wOQ0KPiA+ID4gPg0KPiA+ID4gPiAgUGxlYXNlIHNlbmQgYW55 IGNvbW1lbnRzLCBxdWVzdGlvbnMsIGNvbmNlcm5zIHRvIHRoZSBDRE5JIG1haWxpbmcNCj4gPiBs aXN0Og0KPiA+ID4gY2RuaUBpZXRmLm9yZw0KPiA+ID4gPg0KPiA+ID4gPiAgVGhlIFdHTEMgd2ls bCBlbmQgb24gV2VkbmVzZGF5IEp1bHkgMTMsIDIwMTYuDQo+ID4gPiA+DQo+ID4gPiA+IHRoYW54 IQ0KPiA+ID4gPg0KPiA+ID4gPiAtLSAgS2V2aW4gYW5kIEZyYW5jb2lzDQo+ID4gPiA+DQo+ID4g PiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4g PiA+IENETmkgbWFpbGluZyBsaXN0DQo+ID4gPiA+IENETmlAaWV0Zi5vcmcNCj4gPiA+ID4gaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pDQo+ID4gPg0KPiA+ID4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+IENETmkg bWFpbGluZyBsaXN0DQo+ID4gPiBDRE5pQGlldGYub3JnDQo+ID4gPiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCj4gPiA+DQo+ID4gPg0KPiA+ID4gVGhpcyBtZXNz YWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGludGVuZGVkIGZvciB5b3Uu IElmDQo+ID4geW91DQo+ID4gPiBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNz YWdlIHdhcyBzZW50IHRvIHlvdSBieSBtaXN0YWtlLA0KPiB5b3UNCj4gPiA+IGFyZSByZXF1ZXN0 ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5PIGFjY2Vw dHMNCj4gPiBubw0KPiA+ID4gbGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlzIGUtbWFp bCwgZm9yIHRoZSBtYW5uZXIgaW4gd2hpY2ggeW91DQo+ID4gdXNlDQo+ID4gPiBpdCBhbmQgZm9y IGRhbWFnZSBvZiBhbnkga2luZCByZXN1bHRpbmcgZnJvbSB0aGUgcmlza3MgaW5oZXJlbnQgdG8g dGhlDQo+ID4gPiBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4NCj4gPiA+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiBDRE5p IG1haWxpbmcgbGlzdA0KPiA+ID4gQ0ROaUBpZXRmLm9yZw0KPiA+ID4gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pDQo+ID4NCj4gPg0KPiA+IFRoaXMgbWVzc2FnZSBt YXkgY29udGFpbiBpbmZvcm1hdGlvbiB0aGF0IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZg0K PiB5b3UNCj4gPiBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBz ZW50IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UNCj4gPiBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0 aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzDQo+IG5vDQo+ID4g bGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlzIGUtbWFpbCwgZm9yIHRoZSBtYW5uZXIg aW4gd2hpY2ggeW91DQo+IHVzZQ0KPiA+IGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJl c3VsdGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUNCj4gPiBlbGVjdHJvbmljIHRy YW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4NCj4gDQo+IA0KPiBUaGlzIG1lc3NhZ2UgbWF5IGNvbnRh aW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91DQo+IGFy ZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91IGJ5 IG1pc3Rha2UsIHlvdQ0KPiBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0aGUgc2VuZGVyIGFuZCBk ZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5vDQo+IGxpYWJpbGl0eSBmb3IgdGhlIGNv bnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2UNCj4g aXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tzIGlu aGVyZW50IHRvIHRoZQ0KPiBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4NCg== From nobody Tue Jul 12 13:50:03 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5124012D589; Tue, 12 Jul 2016 13:50:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hKBxQsrOO2aD; Tue, 12 Jul 2016 13:50:00 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.144]) by ietfa.amsl.com (Postfix) with ESMTP id 051CD12D68B; Tue, 12 Jul 2016 13:49:59 -0700 (PDT) Received: from [217.155.121.38] (helo=[172.16.16.31]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1bN4cw-0008Ph-Fv; Tue, 12 Jul 2016 21:49:58 +0100 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Tue, 12 Jul 2016 21:49:55 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <3AE91D52-901A-4D23-87EB-9D0ACDA0A545@niven-jenkins.co.uk> References: <20160317101014.1026.78717.idtracker@ietfa.amsl.com> <6B22150C-4A0E-4FFF-A48C-AEA2D881632E@niven-jenkins.co.uk> <56F40929.1020309@cs.tcd.ie> <774D3FF5-A163-472A-B441-ED3CD9C50724@alcatel-lucent.com> <56F80C06.1080402@cs.tcd.ie> To: "Niven - Jenkins, Ben (Nokia - GB)" X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: EXT Brian Trammell , "cdni-chairs@ietf.org" , "EXT Salz, Rich" , "draft-ietf-cdni-redirection@ietf.org" , The IESG , "cdni@ietf.org" , Stephen Farrell Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-redirection-17: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jul 2016 20:50:01 -0000 Stephen, WG group, Following up on the other outstanding comment. > On 29 Apr 2016, at 13:00, Niven - Jenkins, Ben (Nokia - GB) = wrote: > On 16/04/2016 07:44, "EXT Ben Niven-Jenkins" > wrote: >>> On 24 Mar 2016, at 15:07, Ben Niven-Jenkins = >>> wrote: >>>> On 17 Mar 2016, at 10:10, Stephen Farrell = >>>> wrote:I=20 >>>> - 4.4.2: a JSON "string" is not the same as a DNS name is it? >>>> What about i18n? (ULABEL or ALABEL?) what about odd characters >>>> allowed in JSON but not in DNS names? In general the fields >>>> in this dictionary (and others) seem underspecified to me. >>>=20 >>> I=E2=80=99m afraid I=E2=80=99m not an expert in JSON strings, = unicode or i18n. I think >>> what you=E2=80=99re getting at is that a JSON string can contain = more characters >>> than allowed by an ALABEL or a ULABEL and we should be more precise = in >>> constraining the allowed characters? And that you think there are = other >>> fields in the document that would also benefit from constraining the >>> allowable set of characters. If that=E2=80=99s the case I=E2=80=99m = happy to make the >>> edits to improve the document but I will need some help on what the >>> right terminology is and the right references for the allowable >>> characters. >>=20 >> Any suggestions for someone who could help with reviewing the doc = from a >> unicode & i18n angle and helping me get the terminology and set of >> allowable characters right? >=20 > Nudging again as to whether you have any suggestions for someone to = help > out here? At the risk of exposing my lack of knowledge in this area, I did some = reading and gave it a bit of thought and think I have a proposal: We state that the values for the qname & cname dictionary keys "MUST = contain the ASCII-compatible encoded (ACE) representation of an = internationalised domain name=E2=80=9D. My thinking is the ACE representation (ALABEL) is the on the wire format = and it is better to pass the on the wire format across as-is than try to = convert it to a unicode label & back again just to represent it in JSON. If that sounds a sensible approach, is there a DNS expert who I could = work with to make sure I have the terminology & wording right? (I=E2=80=99m not sure if the wording above would also adequately cover = non-internationalised domain names?) Thanks Ben From nobody Tue Jul 12 14:37:37 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DC7B12D9B6; Tue, 12 Jul 2016 14:37:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FcBXEVU3bYpQ; Tue, 12 Jul 2016 14:37:33 -0700 (PDT) Received: from mailex.mailcore.me (smtp.123-reg.co.uk [94.136.40.63]) by ietfa.amsl.com (Postfix) with ESMTP id 7A4B012D9B4; Tue, 12 Jul 2016 14:37:33 -0700 (PDT) Received: from [217.155.121.38] (helo=[172.16.16.31]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1bN5Mx-0007U1-RT; Tue, 12 Jul 2016 22:37:32 +0100 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Tue, 12 Jul 2016 22:37:29 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <02B8B269-CE61-4196-A93D-7ECDF72BC6DE@niven-jenkins.co.uk> References: <20160706215244.26808.95926.idtracker@ietfa.amsl.com> To: Kevin Ma J X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: "cdni@ietf.org" , The IESG , "draft-ietf-cdni-metadata@ietf.org" , "cdni-chairs@ietf.org" Subject: Re: [CDNi] Alissa Cooper's No Objection on draft-ietf-cdni-metadata-18: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jul 2016 21:37:35 -0000 Alissa, Kevin, > On 7 Jul 2016, at 20:52, Kevin Ma J wrote: >> From: Alissa Cooper [mailto:alissa@cooperw.in] >> = ---------------------------------------------------------------------- >> COMMENT: >> = ---------------------------------------------------------------------- >>=20 >> - Sec 4.2.2.1: It seems odd to me that deny is the default given that >> footprints are mandatory to specify. It seems like if footprints are >> going to be specified, the more common case would be to specify >> footprints where access is allowed, rather than where access is not >> allowed. >=20 > This is a fair point. I believe the thinking was that, anyone who = wants to set a restriction (LocationACL, TimeWindowACL, or ProtocolACL) = is concerned about making sure that content does not go out under = certain conditions, so the safest thing to do is have a default deny and = require an explicit allow (so that an errant omission does not violate = any license agreement). =46rom a message verbosity perspective, you are = probably correct that a default of allow would be more efficient. I = could be persuaded either way. LocationRules (within LocationACLs) align with TimeWindowRules and = ProtocolRules with a default of deny. I=E2=80=99d like to keep them = aligned as having different semantics for different ACL rules based on = type of ACL is bound to lead to implementations getting it wrong. I = think the best choice is to fail closed (default deny). As software will be producing the on the wire format, failing closed IMO = gives a higher chance of the buggy implementation being caught & fixed. = I don=E2=80=99t consider verbosity to be a worthwhile goal to optimise = for in this case, the difference is minimal and if response size is a = concern compress over the wire with Accept-Encoding: gzip Ben From nobody Fri Jul 15 08:54:34 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67EEF12D7CD for ; Fri, 15 Jul 2016 08:54:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.288 X-Spam-Level: X-Spam-Status: No, score=-3.288 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ogre.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KYUcyM_HbGsD for ; Fri, 15 Jul 2016 08:54:32 -0700 (PDT) Received: from cosmo.ogre.com (cosmo4.ogre.com [71.6.165.248]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0174C12D7F3 for ; Fri, 15 Jul 2016 08:54:31 -0700 (PDT) Received: by cosmo.ogre.com (8.15.2/8.15.2) with ESMTPSA id u6FFsO6B030553 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 15 Jul 2016 08:54:25 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ogre.com; s=03062012; t=1468598068; bh=ZDNp+3ziexEJYansHc1AiAKkqMsoFIxTd/46mR+C9PM=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=sRtlR4CWL4fbgSDqOTxclv6jSaOhspxLBu/WxfOrtbWhD5539PrWG3ChuKzipnTUm IXBpSwAwDJQxWbASdWuxi1lX46mR+r8T5CtwsSs58WkWzSpFauasvJgzwKUISzLdut Kw4ACJYeIQRABy25KiLFzICZnMRwiv5hf8Xa8fx0= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Leif Hedstrom In-Reply-To: Date: Fri, 15 Jul 2016 09:54:24 -0600 Content-Transfer-Encoding: quoted-printable Message-Id: References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> <73B31A7C-CC80-4646-A7C9-401874C3B07D@tno.nl> To: Kevin Ma J X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Content Delivery Networks Interconnection Discussion List Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jul 2016 15:54:33 -0000 > On Jul 12, 2016, at 8:06 AM, Kevin Ma J = wrote: >=20 > Hi Ray, >=20 >>> [Ray] In the end, I wouldn=E2=80=99t be surprised if some >>> implementations actually only implemented KID_NUM. >>=20 >> Are there any guidelines on mandatory to >> support/implement IEs? Is one allowed to only implement KID_NUM and = not >> KID >>=20 >> [Ray] Currently, we don=E2=80=99t have any such guidelines and an = implementation >> is expected to implement all IEs (but _not_ all algorithms). >=20 > So, if I send KID=3D1234 (instead of KID_NUM=3D1234), we would expect = every implementation to support this? And if I send KID=3Dabcd, we = would expect every implementation to support that as well? If so, then = I see no point in having KID_NUM. The discussion around KID_NUM actually predates the introduction of the = package attribute. Since we now require (I think?) the packaging, the = benefits of the KID_NUM is somewhat diminished. You=E2=80=99ll have to = allocate the full memory to unpack the entire package anyways. KID_NUM also has the benefit of well specified semantics, e.g. you could = use a vector instead of a hash for lookups. I don=E2=80=99t know how = important that is, but it certainly could have some benefits for = performance. I do care about performance, because a valid use case of = URI signing is DoS prevention. I=E2=80=99m +0 on removing KID_NUM, as in, I can live with it being = collapsed into just KID with no semantics (=E2=80=9Cfree text=E2=80=9D). I=E2=80=99m planning on reviewing -09 this weekend, before the Berlin = meeting. Cheers, =E2=80=94 leif= From nobody Fri Jul 15 09:24:50 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2DFC12D7EC for ; Fri, 15 Jul 2016 09:24:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rphzlKz_UYe4 for ; Fri, 15 Jul 2016 09:24:47 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44A4512D7EA for ; Fri, 15 Jul 2016 09:24:47 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-cf-57890e090092 Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id 8B.47.03614.90E09875; Fri, 15 Jul 2016 18:23:38 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0294.000; Fri, 15 Jul 2016 12:24:46 -0400 From: Kevin Ma J To: Leif Hedstrom Thread-Topic: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing Thread-Index: AdHSDAIj8Q+3AOh3Q/WhloflAutMVQCa2goAASzpMYAADCKGkACC6yqAAAaL1dAANNetAAAD/kJQAJt4qgAAB2EJkA== Date: Fri, 15 Jul 2016 16:24:46 +0000 Message-ID: References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> <73B31A7C-CC80-4646-A7C9-401874C3B07D@tno.nl> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuphkeLIzCtJLcpLzFFi42KZXLonVpeLrzPc4EMbn8WCcxPYLJ7O/sNq 0bd8H5PFt83XGR1YPJYs+cnk8fP6JEaP9vVH2T0OrrvAHMASxWWTkpqTWZZapG+XwJVx+uNS 9oJLEhV3fk5jbGBskOhi5OCQEDCRWPM4v4uRE8gUk7hwbz0biC0kcJRR4vbWLAh7OaPE9yNu IDabgJbE469/mUBsEQFFiUXPX7J2MXJxMAvsZJR41XaSHSQhLOAlsb/pODtEkbfEgSO7WSDs LImDRzaB2SwCqhLL+zewgNzAK+Ar8Wa1AMgcIYEZLBIfZvwB6+UUsJHY93gtM4jNCHTc91Nr wBYzC4hL3HoynwniaAGJJXvOM0PYohIvH/9jhbCVJOa8vsYMMp9ZQFNi/S59iFZFiSndD8HG 8woISpyc+YRlAqPYLCRTZyF0zELSMQtJxwJGllWMHKXFBTm56UaGmxiBcXRMgs1xB+PeXs9D jAIcjEo8vAqX28OFWBPLiitzDzFKcDArifBO5e4MF+JNSaysSi3Kjy8qzUktPsQozcGiJM6r /1IxXEggPbEkNTs1tSC1CCbLxMEp1cC4+nB1yXSh+K/bOeonP5974JfQ5D8PnzXYdMvdnP28 YRnnw0wWoXVvu3ql5DnMfpU+XFosdjfy/8HWGR8YdA98qvLeMGH14S7l6zHMd68+2PQkcfNZ LXff1xneiyvvW9pNvaX3geEay8nyZeEi7stuizt8qTges6tjb5vaj7f/0lb08PZmueRYK7EU ZyQaajEXFScCAGQp5bCfAgAA Archived-At: Cc: Content Delivery Networks Interconnection Discussion List Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jul 2016 16:24:49 -0000 SGkgTGVpZiwNCg0KICBUaGFua3MgZm9yIHRoZSByZXNwb25zZS4gIEkgdGhpbmsgaXQgbWFrZXMg c2Vuc2UgdG8gZXh0ZW5kIHRoZSBXR0xDLCB0byBtYWtlIHN1cmUgd2UgaGF2ZSB0aW1lIGZvciB5 b3UgYW5kIFBoaWwgdG8gcmV2aWV3IGFuZCB0aGUgV0cgdG8gZGlzY3VzcyBhbnkgY29tbWVudHMu DQoNCiAgVGhlIFdHTEMgd2FzIHNjaGVkdWxlZCB0byBlbmQgb24gSnVseSAxMzsgd2Ugd2lsbCBl eHRlbmQgaXQgdHdvIHdlZWtzLCB1bnRpbCBhZnRlciBJRVRGOTYsIGFuZCBlbmQgdGhlIFdHTEMg b24gSnVseSAyN3RoLg0KDQp0aGFueCENCg0KLS0gIEtldmluIGFuZCBGcmFuY29pcw0KDQo+IC0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IExlaWYgSGVkc3Ryb20gW21haWx0bzps ZWlmQG9ncmUuY29tXQ0KPiBTZW50OiBGcmlkYXksIEp1bHkgMTUsIDIwMTYgMTE6NTQgQU0NCj4g VG86IEtldmluIE1hIEoNCj4gQ2M6IEJyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW47IEJlbiBOaXZl bi1KZW5raW5zOyBDb250ZW50IERlbGl2ZXJ5DQo+IE5ldHdvcmtzIEludGVyY29ubmVjdGlvbiBE aXNjdXNzaW9uIExpc3QNCj4gU3ViamVjdDogUmU6IFtDRE5pXSBXb3JraW5nIEdyb3VwIExhc3Qg Q2FsbCBvbiBkcmFmdC1pZXRmLWNkbmktdXJpLXNpZ25pbmcNCj4gDQo+IA0KPiA+IE9uIEp1bCAx MiwgMjAxNiwgYXQgODowNiBBTSwgS2V2aW4gTWEgSiA8a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+ IHdyb3RlOg0KPiA+DQo+ID4gSGkgUmF5LA0KPiA+DQo+ID4+PiBbUmF5XSBJbiB0aGUgZW5kLCBJ IHdvdWxkbuKAmXQgYmUgc3VycHJpc2VkIGlmIHNvbWUNCj4gPj4+IGltcGxlbWVudGF0aW9ucyBh Y3R1YWxseSBvbmx5IGltcGxlbWVudGVkIEtJRF9OVU0uDQo+ID4+DQo+ID4+IEFyZSB0aGVyZSBh bnkgZ3VpZGVsaW5lcyBvbiBtYW5kYXRvcnkgdG8NCj4gPj4gc3VwcG9ydC9pbXBsZW1lbnQgSUVz PyAgSXMgb25lIGFsbG93ZWQgdG8gb25seSBpbXBsZW1lbnQgS0lEX05VTSBhbmQNCj4gbm90DQo+ ID4+IEtJRA0KPiA+Pg0KPiA+PiBbUmF5XSBDdXJyZW50bHksIHdlIGRvbuKAmXQgaGF2ZSBhbnkg c3VjaCBndWlkZWxpbmVzIGFuZCBhbg0KPiBpbXBsZW1lbnRhdGlvbg0KPiA+PiBpcyBleHBlY3Rl ZCB0byBpbXBsZW1lbnQgYWxsIElFcyAoYnV0IF9ub3RfIGFsbCBhbGdvcml0aG1zKS4NCj4gPg0K PiA+IFNvLCBpZiBJIHNlbmQgS0lEPTEyMzQgKGluc3RlYWQgb2YgS0lEX05VTT0xMjM0KSwgd2Ug d291bGQgZXhwZWN0IGV2ZXJ5DQo+IGltcGxlbWVudGF0aW9uIHRvIHN1cHBvcnQgdGhpcz8gIEFu ZCBpZiBJIHNlbmQgS0lEPWFiY2QsIHdlIHdvdWxkIGV4cGVjdA0KPiBldmVyeSBpbXBsZW1lbnRh dGlvbiB0byBzdXBwb3J0IHRoYXQgYXMgd2VsbD8gIElmIHNvLCB0aGVuIEkgc2VlIG5vIHBvaW50 DQo+IGluIGhhdmluZyBLSURfTlVNLg0KPiANCj4gDQo+IFRoZSBkaXNjdXNzaW9uIGFyb3VuZCBL SURfTlVNIGFjdHVhbGx5IHByZWRhdGVzIHRoZSBpbnRyb2R1Y3Rpb24gb2YgdGhlDQo+IHBhY2th Z2UgYXR0cmlidXRlLiBTaW5jZSB3ZSBub3cgcmVxdWlyZSAoSSB0aGluaz8pIHRoZSBwYWNrYWdp bmcsIHRoZQ0KPiBiZW5lZml0cyBvZiB0aGUgS0lEX05VTSBpcyBzb21ld2hhdCBkaW1pbmlzaGVk LiBZb3XigJlsbCBoYXZlIHRvIGFsbG9jYXRlDQo+IHRoZSBmdWxsIG1lbW9yeSB0byB1bnBhY2sg dGhlIGVudGlyZSBwYWNrYWdlIGFueXdheXMuDQo+IA0KPiBLSURfTlVNIGFsc28gaGFzIHRoZSBi ZW5lZml0IG9mIHdlbGwgc3BlY2lmaWVkIHNlbWFudGljcywgZS5nLiB5b3UgY291bGQNCj4gdXNl IGEgdmVjdG9yIGluc3RlYWQgb2YgYSBoYXNoIGZvciBsb29rdXBzLiBJIGRvbuKAmXQga25vdyBo b3cgaW1wb3J0YW50DQo+IHRoYXQgaXMsIGJ1dCBpdCBjZXJ0YWlubHkgY291bGQgaGF2ZSBzb21l IGJlbmVmaXRzIGZvciBwZXJmb3JtYW5jZS4gSSBkbw0KPiBjYXJlIGFib3V0IHBlcmZvcm1hbmNl LCBiZWNhdXNlIGEgdmFsaWQgdXNlIGNhc2Ugb2YgVVJJIHNpZ25pbmcgaXMgRG9TDQo+IHByZXZl bnRpb24uDQo+IA0KPiBJ4oCZbSArMCBvbiByZW1vdmluZyBLSURfTlVNLCBhcyBpbiwgSSBjYW4g bGl2ZSB3aXRoIGl0IGJlaW5nIGNvbGxhcHNlZCBpbnRvDQo+IGp1c3QgS0lEIHdpdGggbm8gc2Vt YW50aWNzICjigJxmcmVlIHRleHTigJ0pLg0KPiANCj4gSeKAmW0gcGxhbm5pbmcgb24gcmV2aWV3 aW5nIC0wOSB0aGlzIHdlZWtlbmQsIGJlZm9yZSB0aGUgQmVybGluIG1lZXRpbmcuDQo+IA0KPiBD aGVlcnMsDQo+IA0KPiDigJQgbGVpZg0K From nobody Tue Jul 19 05:06:02 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BD3612D5D2 for ; Tue, 19 Jul 2016 05:06:01 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 6.28.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160719120601.20911.81121.idtracker@ietfa.amsl.com> Date: Tue, 19 Jul 2016 05:06:01 -0700 From: IETF Secretariat Archived-At: Subject: [CDNi] Milestones changed for cdni WG X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2016 12:06:01 -0000 Changed milestone "Submit specification of the CDNI Logging interface to IESG as Proposed Standard", set resolution to "Done". Changed milestone "Submit specification of the CDNI Control interface to IESG as proposed Standard", set resolution to "Done". Changed milestone "Submit specification of the CDNI Metadata interface to IESG as Proposed Standard", resolved as "Under IESG Review". URL: https://datatracker.ietf.org/wg/cdni/charter/ From nobody Wed Jul 20 06:26:52 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E84D12D678 for ; Wed, 20 Jul 2016 06:26:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.808 X-Spam-Level: X-Spam-Status: No, score=-15.808 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LaJFglwBizT3 for ; Wed, 20 Jul 2016 06:26:49 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2751012D672 for ; Wed, 20 Jul 2016 06:26:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2648; q=dns/txt; s=iport; t=1469021208; x=1470230808; h=from:to:subject:date:message-id:mime-version; bh=P8T3RORxO0WuKEwe3gIanu4zHlSN6i0zWYE9BnsY12I=; b=FBoPtVjv27tXyY2z09GNbdrwzw6Xy0R1YS5DDCXm5DYnxxkuJvMoNZH3 DLNZhGLzISDR5cAD5Geuv6cciQnvYahdIldY8kt6o/kJFYBM3pHMY6RLf cQC30H2xDYFwWpjj//UcSTCNvZcWQa9gOcRqfi0ESFGyMxliXnmFIMlFw 8=; X-Files: signature.asc : 496 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AdAgBBe49X/4gNJK1dgz9WgQK4UYF6H?= =?us-ascii?q?octOBQBAQEBAQEBZRwLhGOBCwGBACcEIYgiDp9unU4BAQEBAQEEAQEBAQEBAQE?= =?us-ascii?q?RCQWIIopBgi8FmSQCAYM2gW5uiE+POZAfAR42ggodgUyHFn8BAQE?= X-IronPort-AV: E=Sophos;i="5.28,394,1464652800"; d="asc'?scan'208";a="300059256" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Jul 2016 13:26:48 +0000 Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id u6KDQmrY010291 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 20 Jul 2016 13:26:48 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 20 Jul 2016 08:26:47 -0500 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 20 Jul 2016 08:26:47 -0500 From: "Matt Miller (mamille2)" To: "cdni@ietf.org" Thread-Topic: Super-late Review of draft-ietf-cdni-uri-signing Thread-Index: AQHR4opdj30OJ31ShkebNjAT7KbAeA== Date: Wed, 20 Jul 2016 13:26:47 +0000 Message-ID: <7A7E55A2-C671-4F65-B51B-9515C098D09B@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-pgp-agent: GPGMail x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.239.144] Content-Type: multipart/signed; boundary="Apple-Mail=_2F3AE80E-3D3F-48CC-8D3E-34AAB281AEEB"; protocol="application/pgp-signature"; micalg=pgp-sha512 MIME-Version: 1.0 Archived-At: Subject: [CDNi] Super-late Review of draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 13:26:51 -0000 --Apple-Mail=_2F3AE80E-3D3F-48CC-8D3E-34AAB281AEEB Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I was asked to review this draft with an eye toward security. The short answer: this looks like it's inventing a new crypto container = and/or assertion format, and it would be a smoother path to use existing = technology. Some of the concerns I have are: * Implicit algorithms can lead to key substitution attacks if you're not careful. Ideally the algorithm descriptor should be part of the = signature/MAC generation; it ought to be part of the primitive, but this is *NOT* = true of ECDSA nor HMAC. * For ECDSA, the curve parameters (named for explicitly) MUST be = specified, or you run the risk of key substitution attacks. ECDSA allows a fairly = large range of curve parameters which can appear to be the same size, and = the ASN.1 key format does not require the parameters be present. * Encryption without Authentication is strongly discouraged, and ECB is = the worst of the choices. * Mixing hash algorithms have in the past lead to some interesting vulnerabilities. It's much much better if everywhere hashing is done for a given input/output pair, the same hash algorithm is used. * SHA-1 is NOT RECOMMENDED unless it's used in non-cryptographic = purposes, but this document in my opinion is still using it for cryptographic purposes in generating the message digest to feed into ECDSA. I'll point out that this looks very close to [JWT] in terms of what = you're trying to accomplish. I am willing to help with text to transform this into a = profile of JWT. -- - m&m Matt Miller Cisco Systems, Inc. [JWT] JSON Web Token (JWT) < https://tools.ietf.org/html/rfc7519 > --Apple-Mail=_2F3AE80E-3D3F-48CC-8D3E-34AAB281AEEB Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="signature.asc" Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJXj3wWAAoJEDWi+S0W7cO1UTIH/A270W8q1MPoNkaxLz0j6xDF Xp9HG7DW/cwC9XeixVVw6woRO8MiVcljQPPrzCJaTQl8W8wFodTv2vahwrJmAO2O db+yhkcPr5TR621We+8NocyWjyEnAXqfygJY2Hg8KGNdprxEofTe+oq6Df2tdUDL P3naMSsIJxM1LF2pK0b0Tt1tRKUve4rC1Kwpukgjs0aoRbJnw0+Ullf4FpfcWIzb vddHcYtq22hhWvMlMzABGEqeXQKSq29WTa35cunuiQc6YMn8cYjfx/9dwy2PW035 kvcjvIBBkgtp5RQ0yXh77WQpYG9WLAUD0UqEuxSi6bNxiSnXEAE7e47dDv95bGQ= =Rfac -----END PGP SIGNATURE----- --Apple-Mail=_2F3AE80E-3D3F-48CC-8D3E-34AAB281AEEB-- From nobody Wed Jul 20 07:06:41 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 036C512D789 for ; Wed, 20 Jul 2016 07:06:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pejRW49kEjaW for ; Wed, 20 Jul 2016 07:06:36 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3DED12D7A7 for ; Wed, 20 Jul 2016 07:06:33 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-5a-578f7a1b0537 Received: from EUSAAHC004.ericsson.se (Unknown_Domain [147.117.188.84]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 85.AD.09012.B1A7F875; Wed, 20 Jul 2016 15:18:20 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC004.ericsson.se ([147.117.188.84]) with mapi id 14.03.0294.000; Wed, 20 Jul 2016 10:06:32 -0400 From: Kevin Ma J To: "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-metadata-19.txt Thread-Index: AQHR2VfZzKtSkmbskEiZlmBanQ1qwKAO/abAgBJuawA= Date: Wed, 20 Jul 2016 14:06:32 +0000 Message-ID: References: <20160708203203.32205.90541.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrBLMWRmVeSWpSXmKPExsUyuXRPiK5MVX+4QfM5Houns/+wOjB6LFny kymAMYrLJiU1J7MstUjfLoEr42zPPMaC/5oVO7t+szUwblPoYuTkkBAwkXh/dQE7hC0mceHe erYuRi4OIYGjjBI7Nx1iAUkICSxnlHj7ohTEZhPQknj89S9TFyMHh4iAssTPQ44gYWEBe4mH J86xgtgiAg4Sn7achrKtJO59XssIYrMIqErs3jEDbBevgK/ErtlfoMY7Sez/MQ2snhHohu+n 1jCB2MwC4hK3nsxngrhNQGLJnvPMELaoxMvH/1ghbCWJOa+vMUPU60gs2P2JDcLWlli28DUz xC5BiZMzn7BMYBSZhWTsLCQts5C0zELSsoCRZRUjR2lxQU5uupHBJkZgeB+TYNPdwXh/uuch RgEORiUeXoXbfeFCrIllxZW5hxglOJiVRHivNveHC/GmJFZWpRblxxeV5qQWH2KU5mBREucV e6QYLiSQnliSmp2aWpBaBJNl4uCUamA0kKlVuMgqVpv+xip/QsXqvRsVn9sI27I27hfUXL7z 08z1y8J/3BczCN6dsr7ZeJ7Hlue8Yc/3nljYyhFb9rIrLP9uxk/DJ4wsK8uXi3e9fLTHt03J +5Xjy4b6d7cj+Vgbwjc3d8XqREdJxa88a7uNUbs979wqIWPzBnflPx4MPi1Hq2/PVFViKc5I NNRiLipOBAB6o/C7awIAAA== Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-metadata-19.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 14:06:40 -0000 Hi All, At the working group session, we went over the two questions from my prev= ious email: 1. I removed the Auth Type registry. There was no objection to this in the room. If anyone has concerns, p= lease speak up. 2. I think we could either make links mandatory for structural metadata, = or require that all structural metadata always be versioned together. I proposed the latter, i.e., add text that if structural metadata ever= needed to change (which we hope it wouldn't), that all structural metadata= objects should be updated at the same time and new ptypes allocated. Ther= e was no objection to this in the room. If anyone has concerns, please spe= ak up. I plan to upload a final update to the metadata draft next week and hand = it back over to Alexey. thanx! -- Kevin J. Ma > -----Original Message----- > From: Kevin Ma J > Sent: Friday, July 08, 2016 4:41 PM > To: cdni@ietf.org > Cc: Benoit Claise; Sheng Jiang; ops-dir@ietf.org; ops-ads@tools.ietf.org; > 'joel jaeggli'; Gunter Van De Velde; 'Alissa Cooper'; 'Stephen Farrell'; > 'Ben Campbell'; The IESG; 'Kathleen Moriarty'; 'Meral Shirazipour'; gen- > art@ietf.org; 'Zhang Dacheng'; secdir@ietf.org; 'Mirja Kuehlewind' > Subject: RE: [CDNi] I-D Action: draft-ietf-cdni-metadata-19.txt >=20 > Hi All, >=20 > (As and author) I am still working through the last of the IESG > comments, but I wanted to post an update before the draft deadline. >=20 > This update should address all of the opsdir, secdir, and genart > comments, as well as all of the DISCUSSes and most of the non-DISCUSS > comments. >=20 > Still todo are: > - Address the general cleanup comments from Stephen Farrell and Ben > Campbell, including link loop prevention > - Close on comments from Alissa Cooper >=20 > Two changes in the updated version for which I think we need to feedbac= k > from the WG: > 1. I removed the Auth Type registry. After thinking about it some > more, my rationale is this: we changed all metadata objects to have a > ptype, and the Auth object is a metadata object, so it has to have a > ptype, and since there's already a registry for ptypes, the Auth Type > registry is just a duplicate registry where we say that the already > registered metadata object is an Auth object. This seems really redundan= t > since the spec will be the same in both registries. (Note: This was not > the case before we switched to the ptype registry.) So, I think removing > the Auth Type registry is simpler and cleaner, unless anyone disagrees? > 2. I was cleaning up the "versioning" text and realized that the ptyp= e > of structural metadata is not necessarily explicitly listed in the json > responses, unless they are linked. The example in 6.10 uses links, but > embedding would also be valid? I think we could either make links > mandatory for structural metadata, or require that all structural metadat= a > always be versioned together, though I'm open to other thoughts on this. >=20 > thanx! >=20 > -- Kevin J. Ma >=20 > > -----Original Message----- > > From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf Of internet- > > drafts@ietf.org > > Sent: Friday, July 08, 2016 4:32 PM > > To: i-d-announce@ietf.org > > Cc: cdni@ietf.org > > Subject: [CDNi] I-D Action: draft-ietf-cdni-metadata-19.txt > > > > > > A New Internet-Draft is available from the on-line Internet-Drafts > > directories. > > This draft is a work item of the Content Delivery Networks > Interconnection > > of the IETF. > > > > Title : CDN Interconnection Metadata > > Authors : Ben Niven-Jenkins > > Rob Murray > > Matt Caulfield > > Kevin J. Ma > > Filename : draft-ietf-cdni-metadata-19.txt > > Pages : 63 > > Date : 2016-07-08 > > > > Abstract: > > The Content Delivery Networks Interconnection (CDNI) metadata > > interface enables interconnected Content Delivery Networks (CDNs) to > > exchange content distribution metadata in order to enable content > > acquisition and delivery. The CDNI metadata associated with a piece > > of content provides a downstream CDN with sufficient information for > > the downstream CDN to service content requests on behalf of an > > upstream CDN. This document describes both a base set of CDNI > > metadata and the protocol for exchanging that metadata. > > > > > > > > The IETF datatracker status page for this draft is: > > https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ > > > > There's also a htmlized version available at: > > https://tools.ietf.org/html/draft-ietf-cdni-metadata-19 > > > > A diff from the previous version is available at: > > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-metadata-19 > > > > > > Please note that it may take a couple of minutes from the time of > > submission > > until the htmlized version and diff are available at tools.ietf.org. > > > > Internet-Drafts are also available by anonymous FTP at: > > ftp://ftp.ietf.org/internet-drafts/ > > > > _______________________________________________ > > CDNi mailing list > > CDNi@ietf.org > > https://www.ietf.org/mailman/listinfo/cdni From nobody Wed Jul 20 07:24:39 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4719E12D7BE for ; Wed, 20 Jul 2016 07:24:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gDO7oplc9KrO for ; Wed, 20 Jul 2016 07:24:36 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7AE612D810 for ; Wed, 20 Jul 2016 07:24:33 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-9b-578f895a9f37 Received: from EUSAAHC004.ericsson.se (Unknown_Domain [147.117.188.84]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id 0F.D1.03614.A598F875; Wed, 20 Jul 2016 16:23:23 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC004.ericsson.se ([147.117.188.84]) with mapi id 14.03.0294.000; Wed, 20 Jul 2016 10:24:32 -0400 From: Kevin Ma J To: "Matt Miller (mamille2)" , "cdni@ietf.org" Thread-Topic: Super-late Review of draft-ietf-cdni-uri-signing Thread-Index: AQHR4opdj30OJ31ShkebNjAT7KbAeKAhXQlg Date: Wed, 20 Jul 2016 14:24:32 +0000 Message-ID: References: <7A7E55A2-C671-4F65-B51B-9515C098D09B@cisco.com> In-Reply-To: <7A7E55A2-C671-4F65-B51B-9515C098D09B@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrPLMWRmVeSWpSXmKPExsUyuXRPiG50Z3+4wZq/PBZPZ/9htfj88Dar A5PHlN8bWT2WLPnJFMAUxWWTkpqTWZZapG+XwJWxYulttoLVEhVdjz8xNzDOEO5i5OSQEDCR uL12PiOELSZx4d56NhBbSOAoo8TEt3JdjFxA9nJGiZ/HZrODJNgEtCQef/3LBGKLCIRIvJ29 DiwuLGArcefORzaIuJ3E49v/2SFsI4n2W99YQWwWAVWJc6cOgS3jFfCV+PhuJhPEMhuJY2vv gtVzAs35MukJC4jNCHTQ91NrwGqYBcQlbj2ZzwRxqIDEkj3nmSFsUYmXj/+xQthKEnNeX2OG qNeRWLD7ExuErS2xbOFrZoi9ghInZz5hmcAoOgvJ2FlIWmYhaZmFpGUBI8sqRo7S4oKc3HQj w02MwGg4JsHmuINxb6/nIUYBDkYlHl6F233hQqyJZcWVuYcYJTiYlUR4uzv6w4V4UxIrq1KL 8uOLSnNSiw8xSnOwKInz6r9UDBcSSE8sSc1OTS1ILYLJMnFwSjUwdnAqGf40FHizOiFbuMPs 5MTrjT3puuHX8npKvKLk7qVmXSqRK5ss5mzW2PV40+3GsrP7wxsXKyo9PSV4O/I0u5f/sctC d2LiOj42MH5i47HbMu+Fw0wdLcFdX1Wvz/xsr51+XEXsNhOX/NF+0XcWOncmXbnmz7ZcjNd3 AVtsYZRyk3hSM6cSS3FGoqEWc1FxIgBmeikaggIAAA== Archived-At: Subject: Re: [CDNi] Super-late Review of draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 14:24:38 -0000 Thanks Matt! Hi all, (as chairs) Per the discussion in the working group session today, we thi= nk it makes sense for the authors to look at the possibility of using JWT f= or the URI Signing token, and at the same time evaluate whether or not it w= ould be easy to pull in the relevant cookie-based transport mechanism from = draft-brandenburg-cdni-uri-signing-for-has-03. As discussed, there is a trade-off between taking the time to rewrite the= token generation portions of the existing WG draft to use JWT and a probab= le long IESG review cycle for a new security token scheme, as proposed in t= he current WG draft. There was general consensus in the room that an exist= ing standard based approach (i.e. JWT) would be the faster approach to docu= ment publication -- especially with the help of Matt and Phil. ;) We also= agreed that it made sense to just rev the existing working group document,= rather than submit a separate individual draft. If anyone has concerns with the approach described above, please speak up= . thanx! =20 -- Kevin and Francois > -----Original Message----- > From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf Of Matt Miller > (mamille2) > Sent: Wednesday, July 20, 2016 9:27 AM > To: cdni@ietf.org > Subject: [CDNi] Super-late Review of draft-ietf-cdni-uri-signing >=20 > I was asked to review this draft with an eye toward security. >=20 > The short answer: this looks like it's inventing a new crypto container > and/or > assertion format, and it would be a smoother path to use existing > technology. >=20 > Some of the concerns I have are: >=20 > * Implicit algorithms can lead to key substitution attacks if you're not > careful. Ideally the algorithm descriptor should be part of the > signature/MAC > generation; it ought to be part of the primitive, but this is *NOT* tru= e > of > ECDSA nor HMAC. > * For ECDSA, the curve parameters (named for explicitly) MUST be > specified, or > you run the risk of key substitution attacks. ECDSA allows a fairly > large > range of curve parameters which can appear to be the same size, and the > ASN.1 key format does not require the parameters be present. > * Encryption without Authentication is strongly discouraged, and ECB is > the > worst of the choices. > * Mixing hash algorithms have in the past lead to some interesting > vulnerabilities. It's much much better if everywhere hashing is done > for a given input/output pair, the same hash algorithm is used. > * SHA-1 is NOT RECOMMENDED unless it's used in non-cryptographic purposes= , > but this document in my opinion is still using it for cryptographic > purposes in generating the message digest to feed into ECDSA. >=20 > I'll point out that this looks very close to [JWT] in terms of what you'r= e > trying to > accomplish. I am willing to help with text to transform this into a > profile of JWT. >=20 >=20 > -- > - m&m >=20 > Matt Miller > Cisco Systems, Inc. >=20 > [JWT] JSON Web Token (JWT) < https://tools.ietf.org/html/rfc7519 > From nobody Wed Jul 20 07:25:23 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4AE312D7BE for ; Wed, 20 Jul 2016 07:25:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MiZOG4oGyW0v for ; Wed, 20 Jul 2016 07:25:19 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0A9A12D808 for ; Wed, 20 Jul 2016 07:25:18 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-3a-578f7e80bc2e Received: from EUSAAHC008.ericsson.se (Unknown_Domain [147.117.188.96]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id FA.6F.09012.08E7F875; Wed, 20 Jul 2016 15:37:05 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC008.ericsson.se ([147.117.188.96]) with mapi id 14.03.0294.000; Wed, 20 Jul 2016 10:25:17 -0400 From: Kevin Ma J To: Leif Hedstrom Thread-Topic: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing Thread-Index: AdHSDAIj8Q+3AOh3Q/WhloflAutMVQCa2goAASzpMYAADCKGkACC6yqAAAaL1dAANNetAAAD/kJQAJt4qgAAB2EJkADoGSpg Date: Wed, 20 Jul 2016 14:25:16 +0000 Message-ID: References: <9E9EDA82-35E4-42D7-BCD6-B8EA88BD3BF5@niven-jenkins.co.uk> <73B31A7C-CC80-4646-A7C9-401874C3B07D@tno.nl> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpikeLIzCtJLcpLzFFi42KZXLonQbexrj/c4OgTQYsF5yawWTyd/YfV om/5PiaLb5uvMzqweCxZ8pPJ4+f1SYwe7euPsnscXHeBOYAlissmJTUnsyy1SN8ugSvj6WqW gjlCFYffb2RpYHwg2MXIySEhYCKx7N95dghbTOLCvfVsXYxcHEICRxkldj0+zwrhLGeUuPj+ BhNIFZuAlsTjr3/BbBEBRYlFz1+CFTEL7GSUeNV2EmyUsICXxP6m4+wQRd4SB47sZoGw8yQ+ b10AZrMIqEosOtkINohXwFdi3a0OsLiQwEwWie/HxEBsRqCTvp9aA1bDLCAucevJfCaIUwUk luw5zwxhi0q8fPyPFcJWkpjz+hpQnAOoXlNi/S59iFZFiSndD9khVglKnJz5hGUCo+gsJFNn IXTMQtIxC0nHAkaWVYwcpcUFObnpRgabGIExc0yCTXcH4/3pnocYBTgYlXh4FW73hQuxJpYV V+YeYpTgYFYS4e3u6A8X4k1JrKxKLcqPLyrNSS0+xCjNwaIkziv2SDFcSCA9sSQ1OzW1ILUI JsvEwSnVwDh52YZtgrtrtrKc6phzTHq694mUDYU6nzQv2n78dH/jfiXvoo0/7+1suDav+MiF 8JJUDcXsuaph3B4Vx57aZNbMlyr6LrAqVZy5ubPm69PoPV+sLObrK7tm/5h2V+1YdIjjHf5O zkq3kv2rSp5skNmnci1Zf/XbM6oNt7Xitmgcu5FXtHntAnclluKMREMt5qLiRADgoub6lQIA AA== Archived-At: Cc: Content Delivery Networks Interconnection Discussion List Subject: Re: [CDNi] Working Group Last Call on draft-ietf-cdni-uri-signing X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 14:25:22 -0000 SGkgYWxsLA0KDQogIChhcyBjaGFpcnMpIEJhc2VkIG9uIHRoZSBkaXNjdXNzaW9ucyBpbiB0aGUg d29ya2luZyBncm91cCBzZXNzaW9uIHRvZGF5LCB3ZSBhcmUgZW5kaW5nIHRoZSBXR0xDIG9uIGRy YWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0wOSBhbmQgd2lsbCB3YWl0IGZvciBhIG5ldyB2ZXJz aW9uIG9mIHRoZSBkb2N1bWVudCBmcm9tIHRoZSBhdXRob3JzIGluIHRoZSBlYXJseSBTZXB0ZW1i ZXIgdGltZWZyYW1lLiAgKFBsZWFzZSBzZWUgdGhlIG90aGVyIGVtYWlsIHdydCBNYXR0IE1pbGxl cidzIGNvbW1lbnRzIG9uIGRyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0wOS4pDQoNCnRoYW54 IQ0KDQotLSAgS2V2aW4gYW5kIEZyYW5jb2lzDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS0NCj4gRnJvbTogS2V2aW4gTWEgSg0KPiBTZW50OiBGcmlkYXksIEp1bHkgMTUsIDIwMTYgMTI6 MjcgUE0NCj4gVG86ICdMZWlmIEhlZHN0cm9tJw0KPiBDYzogQnJhbmRlbmJ1cmcsIFIuIChSYXkp IHZhbjsgQmVuIE5pdmVuLUplbmtpbnM7IENvbnRlbnQgRGVsaXZlcnkNCj4gTmV0d29ya3MgSW50 ZXJjb25uZWN0aW9uIERpc2N1c3Npb24gTGlzdA0KPiBTdWJqZWN0OiBSRTogW0NETmldIFdvcmtp bmcgR3JvdXAgTGFzdCBDYWxsIG9uIGRyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZw0KPiANCj4g SGkgTGVpZiwNCj4gDQo+ICAgVGhhbmtzIGZvciB0aGUgcmVzcG9uc2UuICBJIHRoaW5rIGl0IG1h a2VzIHNlbnNlIHRvIGV4dGVuZCB0aGUgV0dMQywgdG8NCj4gbWFrZSBzdXJlIHdlIGhhdmUgdGlt ZSBmb3IgeW91IGFuZCBQaGlsIHRvIHJldmlldyBhbmQgdGhlIFdHIHRvIGRpc2N1c3MNCj4gYW55 IGNvbW1lbnRzLg0KPiANCj4gICBUaGUgV0dMQyB3YXMgc2NoZWR1bGVkIHRvIGVuZCBvbiBKdWx5 IDEzOyB3ZSB3aWxsIGV4dGVuZCBpdCB0d28gd2Vla3MsDQo+IHVudGlsIGFmdGVyIElFVEY5Niwg YW5kIGVuZCB0aGUgV0dMQyBvbiBKdWx5IDI3dGguDQo+IA0KPiB0aGFueCENCj4gDQo+IC0tICBL ZXZpbiBhbmQgRnJhbmNvaXMNCi4uLg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBG cm9tOiBLZXZpbiBNYSBKDQo+IFNlbnQ6IFdlZG5lc2RheSwgSnVuZSAyOSwgMjAxNiA5OjQ1IEFN DQo+IFRvOiBjZG5pQGlldGYub3JnDQo+IFN1YmplY3Q6IFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxs IG9uIGRyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZw0KPiANCj4gSGkgQWxsLA0KPiANCj4gICBB cyBwZXIgdGhlIGRpc2N1c3Npb24gaW4gQkEsIHdlIGhhdmUgcmVjZWl2ZWQgdGhlIHVwZGF0ZWQg VVJJIFNpZ25pbmcNCj4gZHJhZnQgYW5kIHdvdWxkIGxpa2UgdG8gbW92ZSBpdCB0byBXR0xDLiAg KExlaWYgYW5kIFBoaWwsIHlvdSdyZSB1cCEpDQo+IA0KPiAgIFRvZGF5IHdpbGwgYmVnaW4gdGhl IHR3by13ZWVrIFdHTEMgb246DQo+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1p ZXRmLWNkbmktdXJpLXNpZ25pbmctMDkNCj4gDQo+ICAgUGxlYXNlIHNlbmQgYW55IGNvbW1lbnRz LCBxdWVzdGlvbnMsIGNvbmNlcm5zIHRvIHRoZSBDRE5JIG1haWxpbmcgbGlzdDoNCj4gY2RuaUBp ZXRmLm9yZw0KPiANCj4gICBUaGUgV0dMQyB3aWxsIGVuZCBvbiBXZWRuZXNkYXkgSnVseSAxMywg MjAxNi4NCj4gDQo+IHRoYW54IQ0KPiANCj4gLS0gIEtldmluIGFuZCBGcmFuY29pcw0K From nobody Tue Jul 26 02:54:51 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B9C812D0D3; Tue, 26 Jul 2016 02:54:46 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.29.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160726095446.21864.9857.idtracker@ietfa.amsl.com> Date: Tue, 26 Jul 2016 02:54:46 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-redirection-19.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2016 09:54:46 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection of the IETF. Title : Request Routing Redirection interface for CDN Interconnection Authors : Ben Niven-Jenkins Ray van Brandenburg Filename : draft-ietf-cdni-redirection-19.txt Pages : 31 Date : 2016-07-26 Abstract: The Request Routing Interface comprises (1) the asynchronous advertisement of footprint and capabilities by a downstream Content Delivery Network (CDN) that allows an upstream CDN to decide whether to redirect particular user requests to that downstream CDN; and (2) the synchronous operation of an upstream CDN requesting whether a downstream CDN is prepared to accept a user request and of a downstream CDN responding with how to actually redirect the user request. This document describes an interface for the latter part, i.e., the CDNI Request Routing Redirection interface. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-redirection-19 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-redirection-19 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jul 26 04:22:38 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D335612D670; Tue, 26 Jul 2016 04:22:36 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.29.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160726112236.8551.23183.idtracker@ietfa.amsl.com> Date: Tue, 26 Jul 2016 04:22:36 -0700 Archived-At: Cc: cdni@ietf.org, draft-ietf-cdni-redirection@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Stephen Farrell's No Objection on draft-ietf-cdni-redirection-19: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2016 11:22:37 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-cdni-redirection-19: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for handling my discuss point. I didn't check the comments below but am happy to chat about them if needed. ----- OLD COMMENTS BELOW - I support Alissa's discuss points. - section 3: false-negative? don't you mean false-positive? And in any case, those warnings are not false from the browser perspective. I'd suggest s/false-negative// - section 3: phrases like "trusted re-direction" are a bad idea - you need to say who is trusting whom for what for this to be meaningful and not misleading (people get misled by such phrases all the time). I'd just delete the sentence or s/trusted// - 4.4.2: a JSON "string" is not the same as a DNS name is it? What about i18n? (ULABEL or ALABEL?) what about odd characters allowed in JSON but not in DNS names? In general the fields in this dictionary (and others) seem underspecified to me. From nobody Tue Jul 26 04:58:20 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06B7712D678; Tue, 26 Jul 2016 04:58:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=ppdNOM8m; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=XxEuwANj Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GU_KbWsSQypJ; Tue, 26 Jul 2016 04:58:13 -0700 (PDT) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDE9312D6AB; Tue, 26 Jul 2016 04:58:12 -0700 (PDT) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 7342020474; Tue, 26 Jul 2016 07:58:10 -0400 (EDT) Received: from web1 ([10.202.2.211]) by compute6.internal (MEProxy); Tue, 26 Jul 2016 07:58:10 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=cyOgw24GPA6IUBvXWaNf7+S9M2c=; b=ppdNOM 8mt7OrKiwfwmR36ZYR0WmYL4r1Hrp7XzHusv7bEiDbnJG5YlFGpJWtl5ef8JNtjn 0gnFJTcQLD1IwvWgz0Ui6jNm8r+lx//f8f7meBAiXbUtHXg9inI1Xfe0yCSL4b7P xW+PT6/JCH86uscdbchPcp4uOusnvbGN7F6WI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=cyOgw24GPA6IUBv XWaNf7+S9M2c=; b=XxEuwANji/647iV6YSOJ2pu8/2D0pKJbQHH0r3Ido0SbEiQ qQSEfiS4mhnSBkq6LLnT/L+fRBAQU8zk2+uxCk6t1m6uRxPCvOTXTgRfkH8DzRWV xs+rQZJoC0mZygVktggN2xjWP2/0TIQwMEWH15ri0ChK8eF4NqaAQ98eysgM= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 3234F6A4C7; Tue, 26 Jul 2016 07:58:10 -0400 (EDT) Message-Id: <1469534290.2558524.677067969.1D40B82A@webmail.messagingengine.com> X-Sasl-Enc: PsEnS03E6KmGDIcao79C4plVjlYrbbFTrjJKEmBeMu1X 1469534290 From: Alexey Melnikov To: "Ben Niven-Jenkins" , "Niven - Jenkins, Ben (Nokia - GB)" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" X-Mailer: MessagingEngine.com Webmail Interface - ajax-3c2832c2 Date: Tue, 26 Jul 2016 12:58:10 +0100 In-Reply-To: <3AE91D52-901A-4D23-87EB-9D0ACDA0A545@niven-jenkins.co.uk> References: <20160317101014.1026.78717.idtracker@ietfa.amsl.com> <6B22150C-4A0E-4FFF-A48C-AEA2D881632E@niven-jenkins.co.uk> <56F40929.1020309@cs.tcd.ie> <774D3FF5-A163-472A-B441-ED3CD9C50724@alcatel-lucent.com> <56F80C06.1080402@cs.tcd.ie> <3AE91D52-901A-4D23-87EB-9D0ACDA0A545@niven-jenkins.co.uk> Archived-At: Cc: Stephen Farrell , cdni-chairs@ietf.org, "EXT Salz, Rich" , draft-ietf-cdni-redirection@ietf.org, The IESG , cdni@ietf.org, EXT Brian Trammell Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-redirection-17: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2016 11:58:15 -0000 Hi Ben, On Tue, Jul 12, 2016, at 09:49 PM, Ben Niven-Jenkins wrote: > Stephen, WG group, >=20 > Following up on the other outstanding comment. >=20 > > On 29 Apr 2016, at 13:00, Niven - Jenkins, Ben (Nokia - GB) wrote: > > On 16/04/2016 07:44, "EXT Ben Niven-Jenkins" > > wrote: > >>> On 24 Mar 2016, at 15:07, Ben Niven-Jenkins > >>> wrote: > >>>> On 17 Mar 2016, at 10:10, Stephen Farrell > >>>> wrote:I=20 > >>>> - 4.4.2: a JSON "string" is not the same as a DNS name is it? > >>>> What about i18n? (ULABEL or ALABEL?) what about odd characters > >>>> allowed in JSON but not in DNS names? In general the fields > >>>> in this dictionary (and others) seem underspecified to me. > >>>=20 > >>> I=E2=80=99m afraid I=E2=80=99m not an expert in JSON strings, unicode= or i18n. I think > >>> what you=E2=80=99re getting at is that a JSON string can contain more= characters > >>> than allowed by an ALABEL or a ULABEL and we should be more precise in > >>> constraining the allowed characters? And that you think there are oth= er > >>> fields in the document that would also benefit from constraining the > >>> allowable set of characters. If that=E2=80=99s the case I=E2=80=99m h= appy to make the > >>> edits to improve the document but I will need some help on what the > >>> right terminology is and the right references for the allowable > >>> characters. > >>=20 > >> Any suggestions for someone who could help with reviewing the doc from= a > >> unicode & i18n angle and helping me get the terminology and set of > >> allowable characters right? > >=20 > > Nudging again as to whether you have any suggestions for someone to help > > out here? >=20 >=20 > At the risk of exposing my lack of knowledge in this area, I did some > reading and gave it a bit of thought and think I have a proposal: >=20 > We state that the values for the qname & cname dictionary keys "MUST > contain the ASCII-compatible encoded (ACE) representation of an > internationalised domain name=E2=80=9D. >=20 > My thinking is the ACE representation (ALABEL) is the on the wire format > and it is better to pass the on the wire format across as-is than try to > convert it to a unicode label & back again just to represent it in JSON. Make sense. > If that sounds a sensible approach, is there a DNS expert who I could > work with to make sure I have the terminology & wording right? >=20 > (I=E2=80=99m not sure if the wording above would also adequately cover > non-internationalised domain names?) A-LABEL is the correct term for non ASCII domain labels. NR-LDH is the correct term for ASCII only labels. I think your text in -19 looks right as written.=20