From nobody Tue Oct 4 01:32:04 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 46F05129673; Tue, 4 Oct 2016 01:31:59 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.34.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147556991928.12899.3720041473146885160.idtracker@ietfa.amsl.com> Date: Tue, 04 Oct 2016 01:31:59 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2016 08:31:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection of the IETF. Title : URI Signing for CDN Interconnection (CDNI) Authors : Ray van Brandenburg Kent Leung Phil Sorber Matthew Miller Filename : draft-ietf-cdni-uri-signing-10.txt Pages : 29 Date : 2016-10-04 Abstract: This document describes how the concept of URI signing supports the content access control requirements of CDNI and proposes a URI signing method as a JSON Web Token (JWT) [RFC7519] profile. The proposed URI signing method specifies the information needed to be included in the URI to transmit the signed JWT as well as the claims needed by the signed JWT to authorize a UA. The mechanism described can be used both in CDNI and single CDN scenarios. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-uri-signing/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-uri-signing-10 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-uri-signing-10 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Oct 4 01:34:32 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DFD7129663 for ; Tue, 4 Oct 2016 01:34:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.197 X-Spam-Level: X-Spam-Status: No, score=-7.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FrrGR7IFCq7f for ; Tue, 4 Oct 2016 01:34:28 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAC45129676 for ; Tue, 4 Oct 2016 01:34:27 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.31,442,1473112800"; d="scan'208";a="10852611" Received: from exc-cashub02.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.221]) by mailhost1b.tno.nl with ESMTP; 04 Oct 2016 10:34:26 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB02.tsn.tno.nl ([fe80::8c02:de2a:3094:171%14]) with mapi id 14.03.0319.002; Tue, 4 Oct 2016 10:34:25 +0200 From: "Brandenburg, R. (Ray) van" To: "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt Thread-Index: AQHSHhnNsomBGwpg/kKyk+TtBTynaqCX+AaA Date: Tue, 4 Oct 2016 08:34:25 +0000 Message-ID: References: <147556991928.12899.3720041473146885160.idtracker@ietfa.amsl.com> In-Reply-To: <147556991928.12899.3720041473146885160.idtracker@ietfa.amsl.com> Accept-Language: en-US, nl-NL Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.1.160916 x-originating-ip: [134.221.225.191] x-esetresult: clean, is OK x-esetid: 37303A29BC344A666C7065 Content-Type: text/plain; charset="utf-8" Content-ID: <644BDB7F12245642BDB5E7BAD23E22F7@tno.nl> MIME-Version: 1.0 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2016 08:34:30 -0000 SGkgYWxsLA0KDQpBcyB5b3UgY2FuIHNlZSwgd2XigJl2ZSBqdXN0IHVwbG9hZGVkIGEgbmV3IHZl cnNpb24gb2YgdGhlIFVSSSBTaWduaW5nIGRvY3VtZW50LiBUaGlzIGlzIGEgbWFqb3IgcmV3cml0 ZSB0aGF0IGluY29ycG9yYXRlcyB0aGUgZGVjaXNpb24gd2UgbWFkZSBpbiBCZXJsaW4gdG8gYmFz ZSB0aGUgVVJJIFNpZ25pbmcgYWxnb3JpdGhtIG9uIEpTT04gV2ViIFRva2VuLiANCg0KVGhlcmUg YXJlIHN0aWxsIGEgZmV3IG9wZW4gaXNzdWVzLCBidXQgd2Ugd2FudGVkIHRvIGdldCB0aGUgZ3Jv dXBzIG9waW5pb24gb24gd2hldGhlciB0aGlzIGlzIGdvaW5nIGluIHRoZSByaWdodCBkaXJlY3Rp b24uDQoNCkJlc3QgcmVnYXJkcywNCg0KUmF5DQoNCg0KDQpPbiAwNC8xMC8yMDE2LCAxMDozMSwg IkNETmkgb24gYmVoYWxmIG9mIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgPGNkbmktYm91bmNl c0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPiB3cm90ZToN Cg0KICAgIA0KICAgIEEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBv bi1saW5lIEludGVybmV0LURyYWZ0cyBkaXJlY3Rvcmllcy4NCiAgICBUaGlzIGRyYWZ0IGlzIGEg d29yayBpdGVtIG9mIHRoZSBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVyY29ubmVjdGlv biBvZiB0aGUgSUVURi4NCiAgICANCiAgICAgICAgICAgIFRpdGxlICAgICAgICAgICA6IFVSSSBT aWduaW5nIGZvciBDRE4gSW50ZXJjb25uZWN0aW9uIChDRE5JKQ0KICAgICAgICAgICAgQXV0aG9y cyAgICAgICAgIDogUmF5IHZhbiBCcmFuZGVuYnVyZw0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgS2VudCBMZXVuZw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUGhpbCBTb3Ji ZXINCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1hdHRoZXcgTWlsbGVyDQogICAgCUZp bGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0xMC50eHQNCiAgICAJ UGFnZXMgICAgICAgICAgIDogMjkNCiAgICAJRGF0ZSAgICAgICAgICAgIDogMjAxNi0xMC0wNA0K ICAgIA0KICAgIEFic3RyYWN0Og0KICAgICAgIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGhvdyB0 aGUgY29uY2VwdCBvZiBVUkkgc2lnbmluZyBzdXBwb3J0cyB0aGUNCiAgICAgICBjb250ZW50IGFj Y2VzcyBjb250cm9sIHJlcXVpcmVtZW50cyBvZiBDRE5JIGFuZCBwcm9wb3NlcyBhIFVSSQ0KICAg ICAgIHNpZ25pbmcgbWV0aG9kIGFzIGEgSlNPTiBXZWIgVG9rZW4gKEpXVCkgW1JGQzc1MTldIHBy b2ZpbGUuDQogICAgDQogICAgICAgVGhlIHByb3Bvc2VkIFVSSSBzaWduaW5nIG1ldGhvZCBzcGVj aWZpZXMgdGhlIGluZm9ybWF0aW9uIG5lZWRlZCB0bw0KICAgICAgIGJlIGluY2x1ZGVkIGluIHRo ZSBVUkkgdG8gdHJhbnNtaXQgdGhlIHNpZ25lZCBKV1QgYXMgd2VsbCBhcyB0aGUNCiAgICAgICBj bGFpbXMgbmVlZGVkIGJ5IHRoZSBzaWduZWQgSldUIHRvIGF1dGhvcml6ZSBhIFVBLiAgVGhlIG1l Y2hhbmlzbQ0KICAgICAgIGRlc2NyaWJlZCBjYW4gYmUgdXNlZCBib3RoIGluIENETkkgYW5kIHNp bmdsZSBDRE4gc2NlbmFyaW9zLg0KICAgIA0KICAgIA0KICAgIFRoZSBJRVRGIGRhdGF0cmFja2Vy IHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy8NCiAgICANCiAgICBUaGVy ZSdzIGFsc28gYSBodG1saXplZCB2ZXJzaW9uIGF2YWlsYWJsZSBhdDoNCiAgICBodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nLTEwDQogICAgDQog ICAgQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Og0KICAg IGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmktdXJpLXNp Z25pbmctMTANCiAgICANCiAgICANCiAgICBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEg Y291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQogICAgdW50aWwg dGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRm Lm9yZy4NCiAgICANCiAgICBJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFu b255bW91cyBGVFAgYXQ6DQogICAgZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy8N CiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KICAgIENETmkgbWFpbGluZyBsaXN0DQogICAgQ0ROaUBpZXRmLm9yZw0KICAgIGh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaQ0KICAgIA0KDQpUaGlzIG1lc3NhZ2Ug bWF5IGNvbnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYg eW91IGFyZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8g eW91IGJ5IG1pc3Rha2UsIHlvdSBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0aGUgc2VuZGVyIGFu ZCBkZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5vIGxpYWJpbGl0eSBmb3IgdGhlIGNv bnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2UgaXQg YW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tzIGluaGVy ZW50IHRvIHRoZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4K From nobody Thu Oct 13 20:53:39 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B3781295C8; Thu, 13 Oct 2016 20:53:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -105.598 X-Spam-Level: X-Spam-Status: No, score=-105.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-2.996, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NppdSILJeT20; Thu, 13 Oct 2016 20:53:32 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C8FB01295B0; Thu, 13 Oct 2016 20:53:32 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id BE0CEB81B6E; Thu, 13 Oct 2016 20:53:32 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 1005:ams_util_lib.php From: rfc-editor@rfc-editor.org Message-Id: <20161014035332.BE0CEB81B6E@rfc-editor.org> Date: Thu, 13 Oct 2016 20:53:32 -0700 (PDT) Archived-At: Cc: drafts-update-ref@iana.org, cdni@ietf.org, rfc-editor@rfc-editor.org Subject: [CDNi] RFC 7975 on Request Routing Redirection Interface for Content Delivery Network (CDN) Interconnection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Oct 2016 03:53:34 -0000 A new Request for Comments is now available in online RFC libraries. RFC 7975 Title: Request Routing Redirection Interface for Content Delivery Network (CDN) Interconnection Author: B. Niven-Jenkins, Ed., R. van Brandenburg, Ed. Status: Standards Track Stream: IETF Date: October 2016 Mailbox: ben.niven-jenkins@nokia.com, ray.vanbrandenburg@tno.nl Pages: 35 Characters: 75830 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-cdni-redirection-20.txt URL: https://www.rfc-editor.org/info/rfc7975 DOI: http://dx.doi.org/10.17487/RFC7975 The Request Routing interface comprises (1) the asynchronous advertisement of footprint and capabilities by a downstream Content Delivery Network (CDN) that allows an upstream CDN to decide whether to redirect particular user requests to that downstream CDN; and (2) the synchronous operation of an upstream CDN requesting whether a downstream CDN is prepared to accept a user request and of a downstream CDN responding with how to actually redirect the user request. This document describes an interface for the latter part, i.e., the CDNI Request Routing Redirection interface. This document is a product of the Content Delivery Networks Interconnection Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet Standards Track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the Official Internet Protocol Standards (https://www.rfc-editor.org/standards) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Fri Oct 14 05:05:25 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2B3D129732 for ; Fri, 14 Oct 2016 05:05:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NmP4SIAmXeXT for ; Fri, 14 Oct 2016 05:05:17 -0700 (PDT) Received: from mail-lf0-x22f.google.com (mail-lf0-x22f.google.com [IPv6:2a00:1450:4010:c07::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 906C81297FD for ; Fri, 14 Oct 2016 05:04:28 -0700 (PDT) Received: by mail-lf0-x22f.google.com with SMTP id b75so192040939lfg.3 for ; Fri, 14 Oct 2016 05:04:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=8UsZk72wvk+eZ0pAArljf8dzdmQPiOMvkqZL8Ly5zlc=; b=RUwFZUs24m1M6Ov47s12GOThphd65HM0mYMfKR4rXSi0j+PZieDCd6JcgvW+STsg2R mKF/yrfFtjHZQmqw2Yp9rQNZgywLEco/fiIQlF+xtjkC3yhZE5SS6NS7FCuuqnHdn/6V V4lU5CcqoEspulyMItYWJc8iG3TDJCcvIT8rhAjpcCiTLYXMIXliZIIjw1ChoS5j6/DW ouLWPSA1L2GcRSgKjgVYvpCOHlFttkrlOJX7FNjvYqUOJa4YAxhUyBEpTyU8yScBwkPX Ey3yVTqlZlzNoDPGgWrvUw3dg1JVWM7WRaxlm9AFmLiLdg9ZSAtEZs7OcmmXNpwgynJ7 lIOQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=8UsZk72wvk+eZ0pAArljf8dzdmQPiOMvkqZL8Ly5zlc=; b=RyoCQ1fkgD8AJYhUq8Z3Jh2qNehGugDdkMpQhYmSDMmZCWWN/Cvv4egm/EczQD71qN MjzUMv2/5AZByNgy5udpeh98RNSOUwg/tpbaG8+UBjwXsUFKNZkMRgV9tgiW12CtZxSd 2/PRX/DENl2j2vxOc5jgy/r5dteO44PXvuq/eYtqXV8H5OoZfqAKjOJbW4gTWLrw/j+n ytlEPud5OTkHk7fYfv89CE+4H3zLUhw4qZhGIEvC09oRmgGTPAy7KW8YgMJKr1XPgHt3 FnuaToPIyBOUgWX/BO4T8Z/A9Csoch/SW/Ca+YHpFxPQ/cWpj5uCGaaPZTRsRbVMewQ3 DNXw== X-Gm-Message-State: AA6/9RnGhX4loBkq9zrZcxD5gD6QQivcG51c4PEuEKUxAIl5WhUw3QDKGqyqr3o8QHLfyw== X-Received: by 10.25.198.9 with SMTP id w9mr3414447lff.164.1476446665929; Fri, 14 Oct 2016 05:04:25 -0700 (PDT) Received: from [192.168.1.21] (125.216.113.78.rev.sfr.net. [78.113.216.125]) by smtp.gmail.com with ESMTPSA id c77sm5058159lfg.13.2016.10.14.05.04.24 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 14 Oct 2016 05:04:24 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Francois Le Faucheur In-Reply-To: <20161014035332.BE0CEB81B6E@rfc-editor.org> Date: Fri, 14 Oct 2016 14:04:22 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <2CD4FD69-3F34-4CB6-9A1D-0130DA61E2A3@gmail.com> References: <20161014035332.BE0CEB81B6E@rfc-editor.org> To: "Niven - Jenkins, Ben (Nokia - GB)" , "Brandenburg, R. (Ray) van" X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "" Subject: Re: [CDNi] RFC 7975 on Request Routing Redirection Interface for Content Delivery Network (CDN) Interconnection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Oct 2016 12:05:23 -0000 Hi, Congratulations to the editors and contributors of this document ! Francois > On 14 Oct 2016, at 05:53, rfc-editor@rfc-editor.org wrote: >=20 > A new Request for Comments is now available in online RFC libraries. >=20 >=20 > RFC 7975 >=20 > Title: Request Routing Redirection Interface for=20 > Content Delivery Network (CDN) Interconnection=20 > Author: B. Niven-Jenkins, Ed., > R. van Brandenburg, Ed. > Status: Standards Track > Stream: IETF > Date: October 2016 > Mailbox: ben.niven-jenkins@nokia.com,=20 > ray.vanbrandenburg@tno.nl > Pages: 35 > Characters: 75830 > Updates/Obsoletes/SeeAlso: None >=20 > I-D Tag: draft-ietf-cdni-redirection-20.txt >=20 > URL: https://www.rfc-editor.org/info/rfc7975 >=20 > DOI: http://dx.doi.org/10.17487/RFC7975 >=20 > The Request Routing interface comprises (1) the asynchronous > advertisement of footprint and capabilities by a downstream Content > Delivery Network (CDN) that allows an upstream CDN to decide whether > to redirect particular user requests to that downstream CDN; and (2) > the synchronous operation of an upstream CDN requesting whether a > downstream CDN is prepared to accept a user request and of a > downstream CDN responding with how to actually redirect the user > request. This document describes an interface for the latter part, > i.e., the CDNI Request Routing Redirection interface. >=20 > This document is a product of the Content Delivery Networks = Interconnection Working Group of the IETF. >=20 > This is now a Proposed Standard. >=20 > STANDARDS TRACK: This document specifies an Internet Standards Track > protocol for the Internet community, and requests discussion and = suggestions > for improvements. Please refer to the current edition of the Official > Internet Protocol Standards (https://www.rfc-editor.org/standards) for = the=20 > standardization state and status of this protocol. Distribution of = this=20 > memo is unlimited. >=20 > This announcement is sent to the IETF-Announce and rfc-dist lists. > To subscribe or unsubscribe, see > https://www.ietf.org/mailman/listinfo/ietf-announce > https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist >=20 > For searching the RFC series, see https://www.rfc-editor.org/search > For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk >=20 > Requests for special distribution should be addressed to either the > author of the RFC in question, or to rfc-editor@rfc-editor.org. = Unless > specifically noted otherwise on the RFC itself, all RFCs are for > unlimited distribution. >=20 >=20 > The RFC Editor Team > Association Management Solutions, LLC >=20 >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Tue Oct 18 08:46:09 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 251FA1296AB for ; Tue, 18 Oct 2016 08:46:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.35 X-Spam-Level: X-Spam-Status: No, score=-7.35 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id as_aFSkXU8C4 for ; Tue, 18 Oct 2016 08:46:06 -0700 (PDT) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by ietfa.amsl.com (Postfix) with SMTP id 4BF7F1295F3 for ; Tue, 18 Oct 2016 08:46:06 -0700 (PDT) Received: (qmail 80302 invoked by uid 99); 18 Oct 2016 15:46:05 -0000 Received: from mail-relay.apache.org (HELO mail-relay.apache.org) (140.211.11.15) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 18 Oct 2016 15:46:05 +0000 Received: from mail-yw0-f179.google.com (mail-yw0-f179.google.com [209.85.161.179]) by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with ESMTPSA id 6DD701A0445 for ; Tue, 18 Oct 2016 15:46:05 +0000 (UTC) Received: by mail-yw0-f179.google.com with SMTP id t192so143042021ywf.0 for ; Tue, 18 Oct 2016 08:46:05 -0700 (PDT) X-Gm-Message-State: AA6/9Rm2epywC2DfwSMD4/wkVMBjNp2twwY6nhDQoEjSGoYKsimmSjgWqE8dG0HU9edUfAIQ/RTJRB/5jkm2JA== X-Received: by 10.129.55.211 with SMTP id e202mr1275155ywa.256.1476805564576; Tue, 18 Oct 2016 08:46:04 -0700 (PDT) MIME-Version: 1.0 References: <147556991928.12899.3720041473146885160.idtracker@ietfa.amsl.com> In-Reply-To: From: Phil Sorber Date: Tue, 18 Oct 2016 15:45:53 +0000 X-Gmail-Original-Message-ID: Message-ID: To: "Brandenburg, R. (Ray) van" , "cdni@ietf.org" Content-Type: multipart/alternative; boundary=001a1143fb7a146fcb053f2597b5 Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Oct 2016 15:46:08 -0000 --001a1143fb7a146fcb053f2597b5 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Seeing as there hasn't been any negative feedback on the new direction (or any feedback at all) I'd like to point out that we have this particular draft in revision control in github. I've also submitted a pull request if anyone would like to review it. https://github.com/rayvbr/URISigningSpec/pull/5 This adds a version claim so that we can upgrade more easily and also ignore unknown claims. We originally had a version field to begin with but there was nothing in JWT that was similar so it was left out of the first JWT revision. We (Matt Miller and I) also consulted with a JWT expert on the name used and how to get it registered properly. Thanks. On Tue, Oct 4, 2016 at 2:34 AM Brandenburg, R. (Ray) van < ray.vanbrandenburg@tno.nl> wrote: > Hi all, > > As you can see, we=E2=80=99ve just uploaded a new version of the URI Sign= ing > document. This is a major rewrite that incorporates the decision we made = in > Berlin to base the URI Signing algorithm on JSON Web Token. > > There are still a few open issues, but we wanted to get the groups opinio= n > on whether this is going in the right direction. > > Best regards, > > Ray > > > > On 04/10/2016, 10:31, "CDNi on behalf of internet-drafts@ietf.org" < > cdni-bounces@ietf.org on behalf of internet-drafts@ietf.org> wrote: > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Content Delivery Networks > Interconnection of the IETF. > > Title : URI Signing for CDN Interconnection (CDNI) > Authors : Ray van Brandenburg > Kent Leung > Phil Sorber > Matthew Miller > Filename : draft-ietf-cdni-uri-signing-10.txt > Pages : 29 > Date : 2016-10-04 > > Abstract: > This document describes how the concept of URI signing supports th= e > content access control requirements of CDNI and proposes a URI > signing method as a JSON Web Token (JWT) [RFC7519] profile. > > The proposed URI signing method specifies the information needed t= o > be included in the URI to transmit the signed JWT as well as the > claims needed by the signed JWT to authorize a UA. The mechanism > described can be used both in CDNI and single CDN scenarios. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-uri-signing/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-uri-signing-10 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-uri-signing-10 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni > > > This message may contain information that is not intended for you. If you > are not the addressee or if this message was sent to you by mistake, you > are requested to inform the sender and delete the message. TNO accepts no > liability for the content of this e-mail, for the manner in which you use > it and for damage of any kind resulting from the risks inherent to the > electronic transmission of messages. > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni > --001a1143fb7a146fcb053f2597b5 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Seeing as there hasn't been any negative feedback on t= he new direction (or any feedback at all) I'd like to point out that we= have this particular draft in revision control in github. I've also su= bmitted a pull request if anyone would like to review it.

https://githu= b.com/rayvbr/URISigningSpec/pull/5

This ad= ds a version claim so that we can upgrade more easily and also ignore unkno= wn claims. We originally had a version field to begin with but there was no= thing in JWT that was similar so it was left out of the first JWT revision.= We (Matt Miller and I) also consulted with a JWT expert on the name used a= nd how to get it registered properly.

Thanks.
On Tue, Oct 4, 2016 at 2:3= 4 AM Brandenburg, R. (Ray) van <ray.vanbrandenburg@tno.nl> wrote:
Hi all,

As you can see, we=E2=80=99ve just uploaded a new version of the URI Signin= g document. This is a major rewrite that incorporates the decision we made = in Berlin to base the URI Signing algorithm on JSON Web Token.

There are still a few open issues, but we wanted to get the groups opinion = on whether this is going in the right direction.

Best regards,

Ray



On 04/10/2016, 10:31, "CDNi on behalf of internet-drafts@ietf.o= rg" <cdni-bounces@ietf.org on behalf of internet= -drafts@ietf.org> wrote:


=C2=A0 =C2=A0 A New Internet-Draft is available from the on-line Internet-D= rafts directories.
=C2=A0 =C2=A0 This draft is a work item of the Content Delivery Networks In= terconnection of the IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0: URI Signing for CDN Interconnection (CDNI)
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Authors=C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0: Ray van Brandenburg
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Kent Leung
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Phil Sorber
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Matthew Miller
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-cdni-uri-signing-10.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 29
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2016-10-04

=C2=A0 =C2=A0 Abstract:
=C2=A0 =C2=A0 =C2=A0 =C2=A0This document describes how the concept of URI s= igning supports the
=C2=A0 =C2=A0 =C2=A0 =C2=A0content access control requirements of CDNI and = proposes a URI
=C2=A0 =C2=A0 =C2=A0 =C2=A0signing method as a JSON Web Token (JWT) [RFC751= 9] profile.

=C2=A0 =C2=A0 =C2=A0 =C2=A0The proposed URI signing method specifies the in= formation needed to
=C2=A0 =C2=A0 =C2=A0 =C2=A0be included in the URI to transmit the signed JW= T as well as the
=C2=A0 =C2=A0 =C2=A0 =C2=A0claims needed by the signed JWT to authorize a U= A.=C2=A0 The mechanism
=C2=A0 =C2=A0 =C2=A0 =C2=A0described can be used both in CDNI and single CD= N scenarios.


=C2=A0 =C2=A0 The IETF datatracker status page for this draft is:
=C2=A0 =C2=A0 https= ://datatracker.ietf.org/doc/draft-ietf-cdni-uri-signing/

=C2=A0 =C2=A0 There's also a htmlized version available at:
=C2=A0 =C2=A0 https://= tools.ietf.org/html/draft-ietf-cdni-uri-signing-10

=C2=A0 =C2=A0 A diff from the previous version is available at:
=C2=A0 =C2=A0 = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-uri-signing-10


=C2=A0 =C2=A0 Please note that it may take a couple of minutes from the tim= e of submission
=C2=A0 =C2=A0 until the htmlized version and diff are available at tools.ietf.org.

=C2=A0 =C2=A0 Internet-Drafts are also available by anonymous FTP at:
=C2=A0 =C2=A0 ftp://ftp.ietf.org/internet-dra= fts/

=C2=A0 =C2=A0 _______________________________________________
=C2=A0 =C2=A0 CDNi mailing list
=C2=A0 =C2=A0 CDNi@ietf.org
=C2=A0 =C2=A0 https://www.ietf.org/mai= lman/listinfo/cdni


This message may contain information that is not intended for you. If you a= re not the addressee or if this message was sent to you by mistake, you are= requested to inform the sender and delete the message. TNO accepts no liab= ility for the content of this e-mail, for the manner in which you use it an= d for damage of any kind resulting from the risks inherent to the electroni= c transmission of messages.
_______________________________________________
CDNi mailing list
CDNi= @ietf.org
https://www.ietf.org/mailman/listinfo/= cdni
--001a1143fb7a146fcb053f2597b5-- From nobody Sun Oct 23 19:50:05 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39E781293E4 for ; Sun, 23 Oct 2016 19:50:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6FN60TZJVgZ9 for ; Sun, 23 Oct 2016 19:50:00 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DF3C129579 for ; Sun, 23 Oct 2016 19:50:00 -0700 (PDT) X-AuditID: c618062d-72fff700000009b8-c1-580d7a48f612 Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by (Symantec Mail Security) with SMTP id 31.29.02488.84A7D085; Mon, 24 Oct 2016 05:04:41 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0319.002; Sun, 23 Oct 2016 22:49:58 -0400 From: Kevin Ma J To: Phil Sorber , "Brandenburg, R. (Ray) van" , "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt Thread-Index: AQHSHhnNS5ryyRQbG0KFSOKjqs80QKCYOxSAgBZ5MICACE9SMA== Date: Mon, 24 Oct 2016 02:49:57 +0000 Message-ID: References: <147556991928.12899.3720041473146885160.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.11] Content-Type: multipart/alternative; boundary="_000_A419F67F880AB2468214E154CB8A556206F6A925eusaamb103erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpnkeLIzCtJLcpLzFFi42KZXLonVtezijfCoOktt8XT2X9YLb5tvs5o seDsfXYHZo8ffxtYPJYs+cnkcXDdBeYA5igum5TUnMyy1CJ9uwSujFP/ZzAWvLvNWHH99E7G BsaOa4xdjBwcEgImEmv3+nUxcnEICWxglGh7upERwlnOKLFx8m3WLkZODjYBLYnHX/8ygdgi AvUSDZ+/gMWFBZwkOtY+gIo7S/y+sIgRwnaSuHTyPjuIzSKgKrH35EUwm1fAV2Jiby8zxIIj jBI71raANXAKBEqc7/3NBmIzCohJfD+1Bmwos4C4xK0n88FsCQEBiSV7zjND2KISLx//Y4Ww lSQ+/p7PDlGfLzHz0ks2iGWCEidnPmGZwCg8C8moWUjKZiEpmwUMDGYBTYn1u/QhShQlpnQ/ ZIewNSRa58xlRxZfwMi+ipGjtLggJzfdyGATIzB6jkmw6e5gvD/d8xCjAAejEg/vgl88EUKs iWXFlbmHGCU4mJVEeGfm8EYI8aYkVlalFuXHF5XmpBYfYpTmYFES541bfT9cSCA9sSQ1OzW1 ILUIJsvEwSnVwJhwMZfxYL4qa9ndVAZ71ph/PttvLzJb+vbwf/GXqd9v1UbaRfUl7QqRmbxy tkzisTvrmS2E3r8vjL9fXSDewiSxOG3h5rpZepHC/JsPhhr5HyiIMbNmCNvZm1c9ucvy5QcT vzWrePfGsu5aJLJN9unC8j83bxxY0HLHpWbzT6cvF8rde6fuMFNiKc5INNRiLipOBADE/vUI mgIAAA== Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Oct 2016 02:50:03 -0000 --_000_A419F67F880AB2468214E154CB8A556206F6A925eusaamb103erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUGhpbCwNCg0KICAoYXMgYW4gaW5kaXZpZHVhbCkgV3J0IHVua25vd24gY2xhaW1zIGFuZCBj aGFuZ2luZyB0aGUgTVVTVCByZWplY3QgdG8gYSBTSE9VTEQgaWdub3JlLCBpcyB0aGVyZSBhIHNw ZWNpZmljIHVzZSBjYXNlIHlvdSBhcmUgY29uc2lkZXJpbmc/DQoNCiAgSXMgdGhpcyB0byBhY2Nv dW50IGZvciBjaGFuZ2VzIHRvIHRoZSB1bmRlcmx5aW5nIEpXVC9KV1MvSldFIHNwZWNzLCBhbGdv cml0aG0gc3VwcG9ydCwgZXRjLj8gIElmIHNvLCBpcyB0aGF0IHNvbWV0aGluZyB3ZSBuZWVkIHRv IGhhbmRsZSBleHBsaWNpdGx5Pw0KDQogIElzIHRoaXMgdG8gYWxsb3cgdGhpcmQtcGFydGllcyB0 byBhZGQgcHJvcHJpZXRhcnkgY2xhaW1zIGJ1dCBzdGlsbCBiZSBSRkMgY29tcGxpYW50PyAgVGhp cyBzZWVtcyBsaWtlIGEgZGFuZ2Vyb3VzIGZlYXR1cmUuICBJZiBzb21lb25lIHJlbGllcyBvbiB0 aGF0IHByb3ByaWV0YXJ5IGNsYWltLCBidXQgc29tZSBpbnRlcm1lZGlhdGUgQ0ROIGRvZXNuJ3Qg dW5kZXJzdGFuZCBpdCwgdGhlbiB0aGUgc2VjdXJpdHkgb3IgcG9saWN5IGlzIGxvc3QuICBJZiB0 aGlzIGlzIHRoZSBpbnRlbnQsIGl0IGlzIHByb2JhYmx5IGF0IGxlYXN0IHdvcnRoIGFuIGV4cGxp Y2l0IGFja25vd2xlZGdlbWVudCBpbiB0aGUgdGV4dCAoYW5kIHBvc3NpYmx5IGEgc3BlY2lhbCBz YW5kYm94IGluIHRoZSB0b2tlbiBpdHNlbGYpLCBhcyB3ZWxsIGFzIGEgY2F2ZWF0IGluIHRoZSBz ZWN1cml0eSBjb25zaWRlcmF0aW9ucz8NCg0KdGhhbnguDQoNCi0tICBLZXZpbiBKLiBNYQ0KDQpt aW5vciBjb21tZW50czoNCg0KT0xEOg0KICBBIENETiBNVVNUIGJlIGFibGUgdG8gcGFyc2UgYW5k IHByb2Nlc3MgYWxsIG9mIHRoZSBjbGFpbXMNCiAgbGlzdGVkIGJlbG93LiAgSWYgdGhlIHNpZ25l ZCBKV1QgY29udGFpbnMgYW55IGNsYWltcyB3aGljaCB0aGUNCiAgQ0ROIGRvZXMgbm90IHVuZGVy c3RhbmQgKGkuZS4sIGlzIHVuYWJsZSB0byBwYXJzZSBhbmQNCiAgcHJvY2VzcyksIHRoZSBDRE4g U0hPVUxEIGlnbm9yZSB0aGVtLg0KDQpORVc6DQogIEEgQ0ROIE1VU1QgYmUgYWJsZSB0byBwYXJz ZSBhbmQgcHJvY2VzcyBhbGwgb2YgdGhlIGNsYWltcw0KICBsaXN0ZWQgYmVsb3cuICBJZiB0aGUg c2lnbmVkIEpXVCBjb250YWlucyBhbnkgb3RoZXIgY2xhaW1zIHdoaWNoIHRoZQ0KICBDRE4gZG9l cyBub3QgdW5kZXJzdGFuZCAoaS5lLiwgaXMgdW5hYmxlIHRvIHBhcnNlIGFuZA0KICBwcm9jZXNz KSwgdGhlIENETiBTSE9VTEQgaWdub3JlIHRoZW0uDQoNCk9MRDoNCiAgVGhlIHR5cGUgaXMgSlNP TiBpbnRlZ2VyIGFuZCB0aGUgdmFsdWUgZm9yIHRoaXMgdmVyc2lvbiBvZg0KICB0aGUgc3BlY2lm aWNhdGlvbiBpcyAiMSIuDQoNCk5FVzoNCiAgVGhlIHR5cGUgaXMgSlNPTiBpbnRlZ2VyIGFuZCB0 aGUgdmFsdWUgTVVTVCBiZSBzZXQgdG8gIjEiLA0KICBmb3IgdGhpcyB2ZXJzaW9uIG9mIHRoZSBz cGVjaWZpY2F0aW9uLg0KDQoNCkZyb206IENETmkgW21haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5v cmddIE9uIEJlaGFsZiBPZiBQaGlsIFNvcmJlcg0KU2VudDogVHVlc2RheSwgT2N0b2JlciAxOCwg MjAxNiAxMTo0NiBBTQ0KVG86IEJyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW4gPHJheS52YW5icmFu ZGVuYnVyZ0B0bm8ubmw+OyBjZG5pQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0NETmldIEktRCBB Y3Rpb246IGRyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0xMC50eHQNCg0KU2VlaW5nIGFzIHRo ZXJlIGhhc24ndCBiZWVuIGFueSBuZWdhdGl2ZSBmZWVkYmFjayBvbiB0aGUgbmV3IGRpcmVjdGlv biAob3IgYW55IGZlZWRiYWNrIGF0IGFsbCkgSSdkIGxpa2UgdG8gcG9pbnQgb3V0IHRoYXQgd2Ug aGF2ZSB0aGlzIHBhcnRpY3VsYXIgZHJhZnQgaW4gcmV2aXNpb24gY29udHJvbCBpbiBnaXRodWIu IEkndmUgYWxzbyBzdWJtaXR0ZWQgYSBwdWxsIHJlcXVlc3QgaWYgYW55b25lIHdvdWxkIGxpa2Ug dG8gcmV2aWV3IGl0Lg0KDQpodHRwczovL2dpdGh1Yi5jb20vcmF5dmJyL1VSSVNpZ25pbmdTcGVj L3B1bGwvNQ0KDQpUaGlzIGFkZHMgYSB2ZXJzaW9uIGNsYWltIHNvIHRoYXQgd2UgY2FuIHVwZ3Jh ZGUgbW9yZSBlYXNpbHkgYW5kIGFsc28gaWdub3JlIHVua25vd24gY2xhaW1zLiBXZSBvcmlnaW5h bGx5IGhhZCBhIHZlcnNpb24gZmllbGQgdG8gYmVnaW4gd2l0aCBidXQgdGhlcmUgd2FzIG5vdGhp bmcgaW4gSldUIHRoYXQgd2FzIHNpbWlsYXIgc28gaXQgd2FzIGxlZnQgb3V0IG9mIHRoZSBmaXJz dCBKV1QgcmV2aXNpb24uIFdlIChNYXR0IE1pbGxlciBhbmQgSSkgYWxzbyBjb25zdWx0ZWQgd2l0 aCBhIEpXVCBleHBlcnQgb24gdGhlIG5hbWUgdXNlZCBhbmQgaG93IHRvIGdldCBpdCByZWdpc3Rl cmVkIHByb3Blcmx5Lg0KDQpUaGFua3MuDQoNCk9uIFR1ZSwgT2N0IDQsIDIwMTYgYXQgMjozNCBB TSBCcmFuZGVuYnVyZywgUi4gKFJheSkgdmFuIDxyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPG1h aWx0bzpyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPj4gd3JvdGU6DQpIaSBhbGwsDQoNCkFzIHlv dSBjYW4gc2VlLCB3ZeKAmXZlIGp1c3QgdXBsb2FkZWQgYSBuZXcgdmVyc2lvbiBvZiB0aGUgVVJJ IFNpZ25pbmcgZG9jdW1lbnQuIFRoaXMgaXMgYSBtYWpvciByZXdyaXRlIHRoYXQgaW5jb3Jwb3Jh dGVzIHRoZSBkZWNpc2lvbiB3ZSBtYWRlIGluIEJlcmxpbiB0byBiYXNlIHRoZSBVUkkgU2lnbmlu ZyBhbGdvcml0aG0gb24gSlNPTiBXZWIgVG9rZW4uDQoNClRoZXJlIGFyZSBzdGlsbCBhIGZldyBv cGVuIGlzc3VlcywgYnV0IHdlIHdhbnRlZCB0byBnZXQgdGhlIGdyb3VwcyBvcGluaW9uIG9uIHdo ZXRoZXIgdGhpcyBpcyBnb2luZyBpbiB0aGUgcmlnaHQgZGlyZWN0aW9uLg0KDQpCZXN0IHJlZ2Fy ZHMsDQoNClJheQ0KDQoNCg0KT24gMDQvMTAvMjAxNiwgMTA6MzEsICJDRE5pIG9uIGJlaGFsZiBv ZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9y Zz4iIDxjZG5pLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmNkbmktYm91bmNlc0BpZXRmLm9yZz4g b24gYmVoYWxmIG9mIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnPj4gd3JvdGU6DQoNCg0KICAgIEEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2 YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0cyBkaXJlY3Rvcmllcy4NCiAg ICBUaGlzIGRyYWZ0IGlzIGEgd29yayBpdGVtIG9mIHRoZSBDb250ZW50IERlbGl2ZXJ5IE5ldHdv cmtzIEludGVyY29ubmVjdGlvbiBvZiB0aGUgSUVURi4NCg0KICAgICAgICAgICAgVGl0bGUgICAg ICAgICAgIDogVVJJIFNpZ25pbmcgZm9yIENETiBJbnRlcmNvbm5lY3Rpb24gKENETkkpDQogICAg ICAgICAgICBBdXRob3JzICAgICAgICAgOiBSYXkgdmFuIEJyYW5kZW5idXJnDQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBLZW50IExldW5nDQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBQaGlsIFNvcmJlcg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTWF0dGhldyBN aWxsZXINCiAgICAgICAgRmlsZW5hbWUgICAgICAgIDogZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWdu aW5nLTEwLnR4dA0KICAgICAgICBQYWdlcyAgICAgICAgICAgOiAyOQ0KICAgICAgICBEYXRlICAg ICAgICAgICAgOiAyMDE2LTEwLTA0DQoNCiAgICBBYnN0cmFjdDoNCiAgICAgICBUaGlzIGRvY3Vt ZW50IGRlc2NyaWJlcyBob3cgdGhlIGNvbmNlcHQgb2YgVVJJIHNpZ25pbmcgc3VwcG9ydHMgdGhl DQogICAgICAgY29udGVudCBhY2Nlc3MgY29udHJvbCByZXF1aXJlbWVudHMgb2YgQ0ROSSBhbmQg cHJvcG9zZXMgYSBVUkkNCiAgICAgICBzaWduaW5nIG1ldGhvZCBhcyBhIEpTT04gV2ViIFRva2Vu IChKV1QpIFtSRkM3NTE5XSBwcm9maWxlLg0KDQogICAgICAgVGhlIHByb3Bvc2VkIFVSSSBzaWdu aW5nIG1ldGhvZCBzcGVjaWZpZXMgdGhlIGluZm9ybWF0aW9uIG5lZWRlZCB0bw0KICAgICAgIGJl IGluY2x1ZGVkIGluIHRoZSBVUkkgdG8gdHJhbnNtaXQgdGhlIHNpZ25lZCBKV1QgYXMgd2VsbCBh cyB0aGUNCiAgICAgICBjbGFpbXMgbmVlZGVkIGJ5IHRoZSBzaWduZWQgSldUIHRvIGF1dGhvcml6 ZSBhIFVBLiAgVGhlIG1lY2hhbmlzbQ0KICAgICAgIGRlc2NyaWJlZCBjYW4gYmUgdXNlZCBib3Ro IGluIENETkkgYW5kIHNpbmdsZSBDRE4gc2NlbmFyaW9zLg0KDQoNCiAgICBUaGUgSUVURiBkYXRh dHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCiAgICBodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktdXJpLXNpZ25pbmcvDQoNCiAgICBU aGVyZSdzIGFsc28gYSBodG1saXplZCB2ZXJzaW9uIGF2YWlsYWJsZSBhdDoNCiAgICBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nLTEwDQoNCiAg ICBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQogICAg aHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtY2RuaS11cmktc2ln bmluZy0xMA0KDQoNCiAgICBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9m IG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQogICAgdW50aWwgdGhlIGh0bWxp emVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZzxodHRw Oi8vdG9vbHMuaWV0Zi5vcmc+Lg0KDQogICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWls YWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Og0KICAgIGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5l dC1kcmFmdHMvDQoNCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KICAgIENETmkgbWFpbGluZyBsaXN0DQogICAgQ0ROaUBpZXRmLm9yZzxtYWlsdG86 Q0ROaUBpZXRmLm9yZz4NCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2NkbmkNCg0KDQpUaGlzIG1lc3NhZ2UgbWF5IGNvbnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBu b3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91IGFyZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0 aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91IGJ5IG1pc3Rha2UsIHlvdSBhcmUgcmVxdWVzdGVk IHRvIGluZm9ybSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRz IG5vIGxpYWJpbGl0eSBmb3IgdGhlIGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFu bmVyIGluIHdoaWNoIHlvdSB1c2UgaXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0 aW5nIGZyb20gdGhlIHJpc2tzIGluaGVyZW50IHRvIHRoZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lv biBvZiBtZXNzYWdlcy4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQpDRE5pIG1haWxpbmcgbGlzdA0KQ0ROaUBpZXRmLm9yZzxtYWlsdG86Q0ROaUBpZXRm Lm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaQ0K --_000_A419F67F880AB2468214E154CB8A556206F6A925eusaamb103erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7DQoJY29sb3I6d2luZG93dGV4dDsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1z dHlsZTpub3JtYWw7DQoJdGV4dC1kZWNvcmF0aW9uOm5vbmUgbm9uZTt9DQouTXNvQ2hwRGVmYXVs dA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJ bWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5IaSBQaGlsLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7IChhcyBhbiBpbmRpdmlkdWFs KSBXcnQgdW5rbm93biBjbGFpbXMgYW5kIGNoYW5naW5nIHRoZSBNVVNUIHJlamVjdCB0byBhIFNI T1VMRCBpZ25vcmUsIGlzIHRoZXJlIGEgc3BlY2lmaWMgdXNlIGNhc2UgeW91IGFyZSBjb25zaWRl cmluZz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyBJcyB0aGlzIHRvIGFjY291bnQgZm9yIGNoYW5nZXMgdG8gdGhlIHVuZGVy bHlpbmcgSldUL0pXUy9KV0Ugc3BlY3MsIGFsZ29yaXRobSBzdXBwb3J0LCBldGMuPyAmbmJzcDtJ ZiBzbywgaXMgdGhhdCBzb21ldGhpbmcgd2UgbmVlZCB0byBoYW5kbGUgZXhwbGljaXRseT88bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyBJcyB0aGlzIHRvIGFsbG93IHRoaXJkLXBhcnRpZXMgdG8gYWRkIHByb3ByaWV0YXJ5IGNs YWltcyBidXQgc3RpbGwgYmUgUkZDIGNvbXBsaWFudD8mbmJzcDsgVGhpcyBzZWVtcyBsaWtlIGEg ZGFuZ2Vyb3VzIGZlYXR1cmUuJm5ic3A7IElmIHNvbWVvbmUgcmVsaWVzIG9uIHRoYXQgcHJvcHJp ZXRhcnkgY2xhaW0sIGJ1dCBzb21lDQogaW50ZXJtZWRpYXRlIENETiBkb2Vzbid0IHVuZGVyc3Rh bmQgaXQsIHRoZW4gdGhlIHNlY3VyaXR5IG9yIHBvbGljeSBpcyBsb3N0LiZuYnNwOyBJZiB0aGlz IGlzIHRoZSBpbnRlbnQsIGl0IGlzIHByb2JhYmx5IGF0IGxlYXN0IHdvcnRoIGFuIGV4cGxpY2l0 IGFja25vd2xlZGdlbWVudCBpbiB0aGUgdGV4dCAoYW5kIHBvc3NpYmx5IGEgc3BlY2lhbCBzYW5k Ym94IGluIHRoZSB0b2tlbiBpdHNlbGYpLCBhcyB3ZWxsIGFzIGEgY2F2ZWF0IGluIHRoZSBzZWN1 cml0eQ0KIGNvbnNpZGVyYXRpb25zPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+dGhhbnguPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4tLSZuYnNwOyBLZXZpbiBKLiBNYTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+bWlu b3IgY29tbWVudHM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij5PTEQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyBBIENETiBNVVNUIGJlIGFibGUgdG8gcGFyc2UgYW5kIHBy b2Nlc3MgYWxsIG9mIHRoZSBjbGFpbXMmbmJzcDsNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDtsaXN0ZWQgYmVsb3cuJm5i c3A7IElmIHRoZSBzaWduZWQgSldUIGNvbnRhaW5zIGFueSBjbGFpbXMgd2hpY2ggdGhlJm5ic3A7 DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7Q0ROIGRvZXMgbm90IHVuZGVyc3RhbmQgKGkuZS4sIGlzIHVuYWJsZSB0byBw YXJzZSBhbmQmbmJzcDsNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDtwcm9jZXNzKSwgdGhlIENETiBTSE9VTEQgaWdub3Jl IHRoZW0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij5ORVc6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyBBIENETiBNVVNUIGJlIGFibGUgdG8gcGFyc2UgYW5kIHByb2Nlc3Mg YWxsIG9mIHRoZSBjbGFpbXMmbmJzcDsNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDtsaXN0ZWQgYmVsb3cuJm5ic3A7IElm IHRoZSBzaWduZWQgSldUIGNvbnRhaW5zIGFueSBvdGhlciBjbGFpbXMgd2hpY2ggdGhlJm5ic3A7 DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7Q0ROIGRvZXMgbm90IHVuZGVyc3RhbmQgKGkuZS4sIGlzIHVuYWJsZSB0byBw YXJzZSBhbmQmbmJzcDsNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDtwcm9jZXNzKSwgdGhlIENETiBTSE9VTEQgaWdub3Jl IHRoZW0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij5PTEQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyBUaGUgdHlwZSBpcyBKU09OIGludGVnZXIgYW5kIHRoZSB2YWx1ZSBm b3IgdGhpcyB2ZXJzaW9uIG9mJm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7dGhlIHNwZWNpZmljYXRpb24gaXMg JnF1b3Q7MSZxdW90Oy4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+TkVXOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgVGhlIHR5cGUgaXMgSlNPTiBpbnRlZ2VyIGFuZCB0 aGUgdmFsdWUgTVVTVCBiZSBzZXQgdG8gJnF1b3Q7MSZxdW90Oyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7IGZvciB0aGlzIHZlcnNp b24gb2YgdGhlIHNwZWNpZmljYXRpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRp bmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+IENETmkgW21haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmddDQo8 Yj5PbiBCZWhhbGYgT2YgPC9iPlBoaWwgU29yYmVyPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXks IE9jdG9iZXIgMTgsIDIwMTYgMTE6NDYgQU08YnI+DQo8Yj5Ubzo8L2I+IEJyYW5kZW5idXJnLCBS LiAoUmF5KSB2YW4gJmx0O3JheS52YW5icmFuZGVuYnVyZ0B0bm8ubmwmZ3Q7OyBjZG5pQGlldGYu b3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbQ0ROaV0gSS1EIEFjdGlvbjogZHJhZnQtaWV0 Zi1jZG5pLXVyaS1zaWduaW5nLTEwLnR4dDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TZWVpbmcgYXMgdGhlcmUgaGFzbid0IGJlZW4gYW55IG5l Z2F0aXZlIGZlZWRiYWNrIG9uIHRoZSBuZXcgZGlyZWN0aW9uIChvciBhbnkgZmVlZGJhY2sgYXQg YWxsKSBJJ2QgbGlrZSB0byBwb2ludCBvdXQgdGhhdCB3ZSBoYXZlIHRoaXMgcGFydGljdWxhciBk cmFmdCBpbiByZXZpc2lvbiBjb250cm9sIGluIGdpdGh1Yi4gSSd2ZSBhbHNvIHN1Ym1pdHRlZCBh IHB1bGwgcmVxdWVzdCBpZiBhbnlvbmUgd291bGQgbGlrZQ0KIHRvIHJldmlldyBpdC48bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIGhyZWY9Imh0dHBzOi8v Z2l0aHViLmNvbS9yYXl2YnIvVVJJU2lnbmluZ1NwZWMvcHVsbC81Ij5odHRwczovL2dpdGh1Yi5j b20vcmF5dmJyL1VSSVNpZ25pbmdTcGVjL3B1bGwvNTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyBhZGRzIGEgdmVyc2lvbiBjbGFp bSBzbyB0aGF0IHdlIGNhbiB1cGdyYWRlIG1vcmUgZWFzaWx5IGFuZCBhbHNvIGlnbm9yZSB1bmtu b3duIGNsYWltcy4gV2Ugb3JpZ2luYWxseSBoYWQgYSB2ZXJzaW9uIGZpZWxkIHRvIGJlZ2luIHdp dGggYnV0IHRoZXJlIHdhcyBub3RoaW5nIGluIEpXVCB0aGF0IHdhcyBzaW1pbGFyIHNvIGl0IHdh cyBsZWZ0IG91dCBvZiB0aGUgZmlyc3QgSldUIHJldmlzaW9uLiBXZQ0KIChNYXR0IE1pbGxlciBh bmQgSSkgYWxzbyBjb25zdWx0ZWQgd2l0aCBhIEpXVCBleHBlcnQgb24gdGhlIG5hbWUgdXNlZCBh bmQgaG93IHRvIGdldCBpdCByZWdpc3RlcmVkIHByb3Blcmx5LjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBUdWUsIE9jdCA0LCAyMDE2IGF0IDI6 MzQgQU0gQnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJheS52 YW5icmFuZGVuYnVyZ0B0bm8ubmwiPnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw8L2E+Jmd0OyB3 cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2 LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkhpIGFsbCw8YnI+DQo8YnI+DQpBcyB5b3UgY2FuIHNlZSwgd2XigJl2ZSBqdXN0IHVw bG9hZGVkIGEgbmV3IHZlcnNpb24gb2YgdGhlIFVSSSBTaWduaW5nIGRvY3VtZW50LiBUaGlzIGlz IGEgbWFqb3IgcmV3cml0ZSB0aGF0IGluY29ycG9yYXRlcyB0aGUgZGVjaXNpb24gd2UgbWFkZSBp biBCZXJsaW4gdG8gYmFzZSB0aGUgVVJJIFNpZ25pbmcgYWxnb3JpdGhtIG9uIEpTT04gV2ViIFRv a2VuLjxicj4NCjxicj4NClRoZXJlIGFyZSBzdGlsbCBhIGZldyBvcGVuIGlzc3VlcywgYnV0IHdl IHdhbnRlZCB0byBnZXQgdGhlIGdyb3VwcyBvcGluaW9uIG9uIHdoZXRoZXIgdGhpcyBpcyBnb2lu ZyBpbiB0aGUgcmlnaHQgZGlyZWN0aW9uLjxicj4NCjxicj4NCkJlc3QgcmVnYXJkcyw8YnI+DQo8 YnI+DQpSYXk8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQpPbiAwNC8xMC8yMDE2LCAxMDozMSwgJnF1 b3Q7Q0ROaSBvbiBiZWhhbGYgb2YgPGEgaHJlZj0ibWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRm Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPg0KaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPC9hPiZxdW90 OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNkbmktYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPmNkbmktYm91bmNlc0BpZXRmLm9yZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVmPSJtYWls dG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnPC9hPiZndDsgd3JvdGU6PGJyPg0KPGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNw OyBBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRl cm5ldC1EcmFmdHMgZGlyZWN0b3JpZXMuPGJyPg0KJm5ic3A7ICZuYnNwOyBUaGlzIGRyYWZ0IGlz IGEgd29yayBpdGVtIG9mIHRoZSBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVyY29ubmVj dGlvbiBvZiB0aGUgSUVURi48YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyBUaXRsZSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7OiBVUkkgU2lnbmluZyBmb3IgQ0ROIEludGVyY29ubmVjdGlvbiAoQ0ROSSk8YnI+DQombmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBBdXRob3JzJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOzogUmF5IHZhbiBCcmFuZGVuYnVyZzxicj4NCiZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IEtlbnQgTGV1bmc8YnI+DQom bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBQaGlsIFNvcmJl cjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IE1h dHRoZXcgTWlsbGVyPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IEZpbGVuYW1lJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDogZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nLTEw LnR4dDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBQYWdlcyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7OiAyOTxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyBEYXRlJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgOiAy MDE2LTEwLTA0PGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNwOyBBYnN0cmFjdDo8YnI+DQombmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDtUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBob3cgdGhlIGNvbmNl cHQgb2YgVVJJIHNpZ25pbmcgc3VwcG9ydHMgdGhlPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7Y29udGVudCBhY2Nlc3MgY29udHJvbCByZXF1aXJlbWVudHMgb2YgQ0ROSSBhbmQgcHJv cG9zZXMgYSBVUkk8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtzaWduaW5nIG1ldGhv ZCBhcyBhIEpTT04gV2ViIFRva2VuIChKV1QpIFtSRkM3NTE5XSBwcm9maWxlLjxicj4NCjxicj4N CiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1RoZSBwcm9wb3NlZCBVUkkgc2lnbmluZyBtZXRo b2Qgc3BlY2lmaWVzIHRoZSBpbmZvcm1hdGlvbiBuZWVkZWQgdG88YnI+DQombmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDtiZSBpbmNsdWRlZCBpbiB0aGUgVVJJIHRvIHRyYW5zbWl0IHRoZSBzaWdu ZWQgSldUIGFzIHdlbGwgYXMgdGhlPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Y2xh aW1zIG5lZWRlZCBieSB0aGUgc2lnbmVkIEpXVCB0byBhdXRob3JpemUgYSBVQS4mbmJzcDsgVGhl IG1lY2hhbmlzbTxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2Rlc2NyaWJlZCBjYW4g YmUgdXNlZCBib3RoIGluIENETkkgYW5kIHNpbmdsZSBDRE4gc2NlbmFyaW9zLjxicj4NCjxicj4N Cjxicj4NCiZuYnNwOyAmbmJzcDsgVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9y IHRoaXMgZHJhZnQgaXM6PGJyPg0KJm5ic3A7ICZuYnNwOyA8YSBocmVmPSJodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktdXJpLXNpZ25pbmcvIiB0YXJnZXQ9 Il9ibGFuayI+DQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNk bmktdXJpLXNpZ25pbmcvPC9hPjxicj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgVGhlcmUncyBhbHNv IGEgaHRtbGl6ZWQgdmVyc2lvbiBhdmFpbGFibGUgYXQ6PGJyPg0KJm5ic3A7ICZuYnNwOyA8YSBo cmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jZG5pLXVyaS1zaWdu aW5nLTEwIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi1jZG5pLXVyaS1zaWduaW5nLTEwPC9hPjxicj4NCjxicj4NCiZuYnNwOyAmbmJzcDsg QSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Ojxicj4NCiZu YnNwOyAmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRy YWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0xMCIgdGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtY2RuaS11cmktc2lnbmluZy0xMDwv YT48YnI+DQo8YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5 IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb248YnI+ DQombmJzcDsgJm5ic3A7IHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBh dmFpbGFibGUgYXQgPGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnIiB0YXJnZXQ9Il9ibGFu ayI+DQp0b29scy5pZXRmLm9yZzwvYT4uPGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNwOyBJbnRlcm5l dC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBGVFAgYXQ6PGJyPg0KJm5i c3A7ICZuYnNwOyA8YSBocmVmPSJmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLyIg dGFyZ2V0PSJfYmxhbmsiPmZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvPC9hPjxi cj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX188YnI+DQombmJzcDsgJm5ic3A7IENETmkgbWFpbGluZyBsaXN0PGJyPg0K Jm5ic3A7ICZuYnNwOyA8YSBocmVmPSJtYWlsdG86Q0ROaUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPkNETmlAaWV0Zi5vcmc8L2E+PGJyPg0KJm5ic3A7ICZuYnNwOyA8YSBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkiIHRhcmdldD0iX2JsYW5rIj5odHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nkbmk8L2E+PGJyPg0KPGJyPg0KPGJy Pg0KVGhpcyBtZXNzYWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGludGVu ZGVkIGZvciB5b3UuIElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNz YWdlIHdhcyBzZW50IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0byBpbmZv cm0gdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBubyBsaWFi aWxpdHkgZm9yIHRoZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLA0KIGZvciB0aGUgbWFubmVyIGlu IHdoaWNoIHlvdSB1c2UgaXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZy b20gdGhlIHJpc2tzIGluaGVyZW50IHRvIHRoZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBt ZXNzYWdlcy48YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXzxicj4NCkNETmkgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOkNETmlAaWV0 Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5DRE5pQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaSIgdGFyZ2V0PSJfYmxhbmsi Pmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaTwvYT48bzpwPjwvbzpw PjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_A419F67F880AB2468214E154CB8A556206F6A925eusaamb103erics_-- From nobody Wed Oct 26 09:10:13 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8EE35129458 for ; Wed, 26 Oct 2016 09:10:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.85 X-Spam-Level: X-Spam-Status: No, score=-6.85 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, RP_MATCHES_RCVD=-0.431] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0GM63GHcU7YQ for ; Wed, 26 Oct 2016 09:10:07 -0700 (PDT) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by ietfa.amsl.com (Postfix) with SMTP id 0B03012968E for ; Wed, 26 Oct 2016 09:10:02 -0700 (PDT) Received: (qmail 174 invoked by uid 99); 26 Oct 2016 16:10:02 -0000 Received: from mail-relay.apache.org (HELO mail-relay.apache.org) (140.211.11.15) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 26 Oct 2016 16:10:02 +0000 Received: from mail-yw0-f180.google.com (mail-yw0-f180.google.com [209.85.161.180]) by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with ESMTPSA id DE9DB1A03EB for ; Wed, 26 Oct 2016 16:10:01 +0000 (UTC) Received: by mail-yw0-f180.google.com with SMTP id h14so10019019ywa.2 for ; Wed, 26 Oct 2016 09:10:01 -0700 (PDT) X-Gm-Message-State: ABUngvfasa5SHAtFexfhMyHXyMAYssYW0YYLzEm33IKlGn2yzmN4ygdWwN3HiKQmbRJoqbPhW3ozlQCRubwmRg== X-Received: by 10.129.159.194 with SMTP id w185mr2412010ywg.179.1477498200927; Wed, 26 Oct 2016 09:10:00 -0700 (PDT) MIME-Version: 1.0 References: <147556991928.12899.3720041473146885160.idtracker@ietfa.amsl.com> In-Reply-To: From: Phil Sorber Date: Wed, 26 Oct 2016 16:09:50 +0000 X-Gmail-Original-Message-ID: Message-ID: To: Kevin Ma J , "Brandenburg, R. (Ray) van" , "cdni@ietf.org" Content-Type: multipart/alternative; boundary=94eb2c0c01266c371c053fc6db19 Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Oct 2016 16:10:11 -0000 --94eb2c0c01266c371c053fc6db19 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I added your text changes to the PR. As far as ignoring extra claims, it was for third parties. I am rethinking this though. Leif expressed some concerns about processing performance if we allowed free form content. It seems like ignoring unknown claims is of marginal value, but it had several downsides. On Sun, Oct 23, 2016 at 7:50 PM Kevin Ma J wrote: > Hi Phil, > > > > (as an individual) Wrt unknown claims and changing the MUST reject to a > SHOULD ignore, is there a specific use case you are considering? > > > > Is this to account for changes to the underlying JWT/JWS/JWE specs, > algorithm support, etc.? If so, is that something we need to handle > explicitly? > > > > Is this to allow third-parties to add proprietary claims but still be > RFC compliant? This seems like a dangerous feature. If someone relies o= n > that proprietary claim, but some intermediate CDN doesn't understand it, > then the security or policy is lost. If this is the intent, it is probab= ly > at least worth an explicit acknowledgement in the text (and possibly a > special sandbox in the token itself), as well as a caveat in the security > considerations? > > > > thanx. > > > > -- Kevin J. Ma > > > > minor comments: > > > > OLD: > > A CDN MUST be able to parse and process all of the claims > > listed below. If the signed JWT contains any claims which the > > CDN does not understand (i.e., is unable to parse and > > process), the CDN SHOULD ignore them. > > > > NEW: > > A CDN MUST be able to parse and process all of the claims > > listed below. If the signed JWT contains any other claims which the > > CDN does not understand (i.e., is unable to parse and > > process), the CDN SHOULD ignore them. > > > > OLD: > > The type is JSON integer and the value for this version of > > the specification is "1". > > > > NEW: > > The type is JSON integer and the value MUST be set to "1", > > for this version of the specification. > > > > > > *From:* CDNi [mailto:cdni-bounces@ietf.org] *On Behalf Of *Phil Sorber > *Sent:* Tuesday, October 18, 2016 11:46 AM > *To:* Brandenburg, R. (Ray) van ; cdni@ietf.or= g > *Subject:* Re: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt > > > > Seeing as there hasn't been any negative feedback on the new direction (o= r > any feedback at all) I'd like to point out that we have this particular > draft in revision control in github. I've also submitted a pull request i= f > anyone would like to review it. > > > > https://github.com/rayvbr/URISigningSpec/pull/5 > > > > This adds a version claim so that we can upgrade more easily and also > ignore unknown claims. We originally had a version field to begin with bu= t > there was nothing in JWT that was similar so it was left out of the first > JWT revision. We (Matt Miller and I) also consulted with a JWT expert on > the name used and how to get it registered properly. > > > > Thanks. > > > > On Tue, Oct 4, 2016 at 2:34 AM Brandenburg, R. (Ray) van < > ray.vanbrandenburg@tno.nl> wrote: > > Hi all, > > As you can see, we=E2=80=99ve just uploaded a new version of the URI Sign= ing > document. This is a major rewrite that incorporates the decision we made = in > Berlin to base the URI Signing algorithm on JSON Web Token. > > There are still a few open issues, but we wanted to get the groups opinio= n > on whether this is going in the right direction. > > Best regards, > > Ray > > > > On 04/10/2016, 10:31, "CDNi on behalf of internet-drafts@ietf.org" < > cdni-bounces@ietf.org on behalf of internet-drafts@ietf.org> wrote: > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Content Delivery Networks > Interconnection of the IETF. > > Title : URI Signing for CDN Interconnection (CDNI) > Authors : Ray van Brandenburg > Kent Leung > Phil Sorber > Matthew Miller > Filename : draft-ietf-cdni-uri-signing-10.txt > Pages : 29 > Date : 2016-10-04 > > Abstract: > This document describes how the concept of URI signing supports th= e > content access control requirements of CDNI and proposes a URI > signing method as a JSON Web Token (JWT) [RFC7519] profile. > > The proposed URI signing method specifies the information needed t= o > be included in the URI to transmit the signed JWT as well as the > claims needed by the signed JWT to authorize a UA. The mechanism > described can be used both in CDNI and single CDN scenarios. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-uri-signing/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-uri-signing-10 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-uri-signing-10 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni > > > This message may contain information that is not intended for you. If you > are not the addressee or if this message was sent to you by mistake, you > are requested to inform the sender and delete the message. TNO accepts no > liability for the content of this e-mail, for the manner in which you use > it and for damage of any kind resulting from the risks inherent to the > electronic transmission of messages. > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni > > --94eb2c0c01266c371c053fc6db19 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I added your text changes to the PR.

As= far as ignoring extra claims, it was for third parties. I am rethinking th= is though. Leif expressed some concerns about processing performance if we = allowed free form content. It seems like ignoring unknown claims is of marg= inal value, but it had several downsides.

On Sun, Oct 23, 2016 at 7:50 PM Kevin Ma J <kevin.j.ma@ericsson.com> wr= ote:

Hi Phil,

= =C2=A0

=C2=A0 (as an individual) Wr= t unknown claims and changing the MUST reject to a SHOULD ignore, is there = a specific use case you are considering?

= =C2=A0

=C2=A0 Is this to account fo= r changes to the underlying JWT/JWS/JWE specs, algorithm support, etc.?=C2= =A0 If so, is that something we need to handle explicitly?

= =C2=A0

=C2=A0 Is this to allow thir= d-parties to add proprietary claims but still be RFC compliant?=C2=A0 This = seems like a dangerous feature.=C2=A0 If someone relies on that proprietary= claim, but some intermediate CDN doesn't understand it, then the security or policy is= lost.=C2=A0 If this is the intent, it is probably at least worth an explic= it acknowledgement in the text (and possibly a special sandbox in the token= itself), as well as a caveat in the security considerations?

= =C2=A0

thanx.

= =C2=A0

--=C2=A0 Kevin J. Ma

= =C2=A0

minor comments:

= =C2=A0

OLD:<= /u>

=C2=A0 A CDN MUST be able to= parse and process all of the claims=C2=A0

=C2=A0=C2=A0listed below.=C2= =A0 If the signed JWT contains any claims which the=C2=A0

=C2=A0=C2=A0CDN does not und= erstand (i.e., is unable to parse and=C2=A0

=C2=A0=C2=A0process), the CD= N SHOULD ignore them.=

= =C2=A0

NEW:<= /u>

=C2=A0 A CDN MUST be able to= parse and process all of the claims=C2=A0

=C2=A0=C2=A0listed below.=C2= =A0 If the signed JWT contains any other claims which the=C2=A0

=C2=A0=C2=A0CDN does not und= erstand (i.e., is unable to parse and=C2=A0

=C2=A0=C2=A0process), the CD= N SHOULD ignore them.=

= =C2=A0

OLD:<= /u>

=C2=A0 The type is JSON inte= ger and the value for this version of=C2=A0

=C2=A0=C2=A0the specificatio= n is "1".

= =C2=A0

NEW:<= /u>

=C2=A0 The type is JSON inte= ger and the value MUST be set to "1",<= u class=3D"gmail_msg">

=C2=A0 for this version of t= he specification.

= =C2=A0

= =C2=A0

From: CDNi [mailto:cdni-bounces@ietf.= org] On Behalf Of Phil Sorber
Sent: Tuesday, October 18, 2016 11:46 AM
To: Brandenburg, R. (Ray) van <ray.va= nbrandenburg@tno.nl>; cdni@ietf.org
Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-= uri-signing-10.txt

=C2=A0

Seeing as there hasn't been any negati= ve feedback on the new direction (or any feedback at all) I'd like to p= oint out that we have this particular draft in revision control in github. = I've also submitted a pull request if anyone would like to review it.

=C2=A0

https://github.com/= rayvbr/URISigningSpec/pull/5

=C2=A0

This adds a version claim so that we can u= pgrade more easily and also ignore unknown claims. We originally had a vers= ion field to begin with but there was nothing in JWT that was similar so it= was left out of the first JWT revision. We (Matt Miller and I) also consulted with a JWT expert on the name used and = how to get it registered properly.

=C2=A0

Thanks.

=C2=A0

On Tue, Oct 4, 2016 at 2:34 AM Brandenburg= , R. (Ray) van <ray.vanbrandenburg@tno.nl> wrote:

Hi all,

As you can see, we=E2=80=99ve just uploaded a new version of the URI Signin= g document. This is a major rewrite that incorporates the decision we made = in Berlin to base the URI Signing algorithm on JSON Web Token.

There are still a few open issues, but we wanted to get the groups opinion = on whether this is going in the right direction.

Best regards,

Ray



On 04/10/2016, 10:31, "CDNi on behalf of internet-drafts@ietf.org" <cdni-bounces@ietf.org on beh= alf of internet-drafts@ietf.org> wrote:


=C2=A0 =C2=A0 A New Internet-Draft is available from the on-line Internet-D= rafts directories.
=C2=A0 =C2=A0 This draft is a work item of the Content Delivery Networks In= terconnection of the IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0: URI Signing for CDN Interconnection (CDNI)
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Authors=C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0: Ray van Brandenburg
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Kent Leung
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Phil Sorber
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Matthew Miller
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-cdni-uri-signing-10.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 29
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2016-10-04

=C2=A0 =C2=A0 Abstract:
=C2=A0 =C2=A0 =C2=A0 =C2=A0This document describes how the concept of URI s= igning supports the
=C2=A0 =C2=A0 =C2=A0 =C2=A0content access control requirements of CDNI and = proposes a URI
=C2=A0 =C2=A0 =C2=A0 =C2=A0signing method as a JSON Web Token (JWT) [RFC751= 9] profile.

=C2=A0 =C2=A0 =C2=A0 =C2=A0The proposed URI signing method specifies the in= formation needed to
=C2=A0 =C2=A0 =C2=A0 =C2=A0be included in the URI to transmit the signed JW= T as well as the
=C2=A0 =C2=A0 =C2=A0 =C2=A0claims needed by the signed JWT to authorize a U= A.=C2=A0 The mechanism
=C2=A0 =C2=A0 =C2=A0 =C2=A0described can be used both in CDNI and single CD= N scenarios.


=C2=A0 =C2=A0 The IETF datatracker status page for this draft is:
=C2=A0 =C2=A0 https://datatracker.ietf.org/doc/draft-ietf-cdni-uri-signing/

=C2=A0 =C2=A0 There's also a htmlized version available at:
=C2=A0 =C2=A0 https://tools.ietf.org/html/draft-ietf-cdni-uri-signing-10

=C2=A0 =C2=A0 A diff from the previous version is available at:
=C2=A0 =C2=A0 https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-uri-signing-10


=C2=A0 =C2=A0 Please note that it may take a couple of minutes from the tim= e of submission
=C2=A0 =C2=A0 until the htmlized version and diff are available at tools.ietf.org.

=C2=A0 =C2=A0 Internet-Drafts are also available by anonymous FTP at:
=C2=A0 =C2=A0 ftp://ftp.ietf.org/internet-drafts/

=C2=A0 =C2=A0 _______________________________________________
=C2=A0 =C2=A0 CDNi mailing list
=C2=A0 =C2=A0 CDNi@ietf.org
=C2=A0 =C2=A0 https://www.ietf.org/mailman/listinfo/cdni=


This message may contain information that is not intended for you. If you a= re not the addressee or if this message was sent to you by mistake, you are= requested to inform the sender and delete the message. TNO accepts no liab= ility for the content of this e-mail, for the manner in which you use it and for damage of any kind resulting fr= om the risks inherent to the electronic transmission of messages.
_______________________________________________
CDNi mailing list
CDNi= @ietf.org
https://www.ietf.org/mailman/listinfo/cdni

--94eb2c0c01266c371c053fc6db19-- From nobody Mon Oct 31 11:45:47 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88739129A22 for ; Mon, 31 Oct 2016 11:45:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.619 X-Spam-Level: X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gZAxy3zy4VPv for ; Mon, 31 Oct 2016 11:45:42 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias92.francetelecom.com [193.251.215.92]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8827B129A19 for ; Mon, 31 Oct 2016 11:45:33 -0700 (PDT) Received: from omfedm06.si.francetelecom.fr (unknown [xx.xx.xx.2]) by omfedm13.si.francetelecom.fr (ESMTP service) with ESMTP id D74E3324C9E for ; Mon, 31 Oct 2016 19:45:31 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.17]) by omfedm06.si.francetelecom.fr (ESMTP service) with ESMTP id B9A6327C069 for ; Mon, 31 Oct 2016 19:45:31 +0100 (CET) Received: from OPEXCLILMA1.corporate.adroot.infra.ftgroup ([fe80::95e2:eb4b:3053:fabf]) by OPEXCLILM24.corporate.adroot.infra.ftgroup ([fe80::a1e6:3e6a:1f68:5f7e%18]) with mapi id 14.03.0319.002; Mon, 31 Oct 2016 19:45:31 +0100 From: To: "cdni@ietf.org" Thread-Topic: New Version Notification for draft-fieau-cdni-https-delegation-00.txt Thread-Index: AQHSM6ZdHIm/6mnmSUWXHPn/B8WM36DC5ZsA Date: Mon, 31 Oct 2016 18:45:31 +0000 Message-ID: <3126_1477939531_5817914B_3126_607_1_1BD328329726EF4E91AE924BB1B4CB9E214C9356@OPEXCLILMA1.corporate.adroot.infra.ftgroup> References: <147793927334.23317.17375833425140956435.idtracker@ietfa.amsl.com> In-Reply-To: <147793927334.23317.17375833425140956435.idtracker@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.3] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2016.6.17.114517 Archived-At: Subject: [CDNi] TR: New Version Notification for draft-fieau-cdni-https-delegation-00.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 18:45:44 -0000 SGkgQWxsLA0KDQpKdXN0IHBvc3RlZCBhIG5ldyBkcmFmdCBoaWdobGlnaHRpbmcgT3V0LW9mLUJh bmQgInJlZGlyZWN0aW9uIiwgU3ViQ2VydHMgYW5kIFNob3J0LUxpdmVkIGNlcnRzIGFwcHJvYWNo ZXMgZm9yIEhUVFBTIGRlbGVnYXRpb24gaW4gQ0ROSS4NCkZlZWwgZnJlZSB0byBjb21tZW50Lg0K DQpCZXN0IHJlZ2FyZHMsDQpGcsOpZMOpcmljDQoNCi0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0t LQ0KRGXCoDogaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIFttYWlsdG86aW50ZXJuZXQtZHJhZnRz QGlldGYub3JnXSANCkVudm95w6nCoDogbHVuZGkgMzEgb2N0b2JyZSAyMDE2IDE5OjQxDQrDgMKg OiBGSUVBVSBGcsOpZMOpcmljIElNVC9PTE47IFNURVBIQU4gRW1pbGUgSU1UL09MTjsgU1RFUEhB TiBFbWlsZSBJTVQvT0xOOyBTYW5qYXkgTWlzaHJhDQpPYmpldMKgOiBOZXcgVmVyc2lvbiBOb3Rp ZmljYXRpb24gZm9yIGRyYWZ0LWZpZWF1LWNkbmktaHR0cHMtZGVsZWdhdGlvbi0wMC50eHQNCg0K DQpBIG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQtZmllYXUtY2RuaS1odHRwcy1kZWxlZ2F0aW9u LTAwLnR4dA0KaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBGcmVkZXJpYyBGaWVh dSBhbmQgcG9zdGVkIHRvIHRoZSBJRVRGIHJlcG9zaXRvcnkuDQoNCk5hbWU6CQlkcmFmdC1maWVh dS1jZG5pLWh0dHBzLWRlbGVnYXRpb24NClJldmlzaW9uOgkwMA0KVGl0bGU6CQlIVFRQUyBkZWxl Z2F0aW9uIGluIENETkkNCkRvY3VtZW50IGRhdGU6CTIwMTYtMTAtMzENCkdyb3VwOgkJSW5kaXZp ZHVhbCBTdWJtaXNzaW9uDQpQYWdlczoJCTE4DQpVUkw6ICAgICAgICAgICAgaHR0cHM6Ly93d3cu aWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWZpZWF1LWNkbmktaHR0cHMtZGVsZWdhdGlv bi0wMC50eHQNClN0YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1maWVhdS1jZG5pLWh0dHBzLWRlbGVnYXRpb24vDQpIdG1saXplZDogICAgICAgaHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWZpZWF1LWNkbmktaHR0cHMtZGVsZWdhdGlv bi0wMA0KDQoNCkFic3RyYWN0Og0KICAgVGhpcyBkb2N1bWVudCBleGFtaW5lcyBwcm9iYWJsZSBz b2x1dGlvbnMgZm9yIGRlbGVnYXRpbmcgb2YgZW5jcnlwdGVkDQogICBjb250ZW50IHdpdGhpbiB0 aGUgY29udGV4dCBvZiBDRE4gaW50ZXJjb25uZWN0aW9uLiAgSFRUUFMgZGVsZWdhdGlvbg0KICAg YWxsb3dzIGEgZGVsaXZlcmluZyBwYXJ0eSwgZS5nLiBhIENETiwgdG8gZGVsaXZlciBjb250ZW50 IGZvciBhbmQgb24tDQogICBiZWhhbGYgb2YgYW4gb3JpZ2luIHNlcnZlci4gIFRoZSBIVFRQUyBk ZWxlZ2F0aW9uIGFsc28gZXhwZWN0cw0KICAgZGVsaXZlcmluZyBjb250ZW50IHdpdGhvdXQgY29t cHJvbWlzaW5nIHNlY3VyaXR5LCBpbnRlZ3JpdHkgYW5kDQogICBwcml2YWN5IG9mIHRoZSB1c2Vy LiAgVGhpcyBkb2N1bWVudCBleGFtaW5lcyBJbnRlcm5ldCBEcmFmdHMgdGhhdA0KICAgaGF2ZSBi ZWVuIHN1Ym1pdHRlZCBhbG9uZyB3aXRoIHRoZWlyIGltcGxlbWVudGF0aW9uIHN0YXR1cy4NCg0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIA0KDQoNClBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRh a2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24gdW50aWwg dGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRm Lm9yZy4NCg0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KCkNlIG1lc3NhZ2UgZXQg c2VzIHBpZWNlcyBqb2ludGVzIHBldXZlbnQgY29udGVuaXIgZGVzIGluZm9ybWF0aW9ucyBjb25m aWRlbnRpZWxsZXMgb3UgcHJpdmlsZWdpZWVzIGV0IG5lIGRvaXZlbnQgZG9uYwpwYXMgZXRyZSBk aWZmdXNlcywgZXhwbG9pdGVzIG91IGNvcGllcyBzYW5zIGF1dG9yaXNhdGlvbi4gU2kgdm91cyBh dmV6IHJlY3UgY2UgbWVzc2FnZSBwYXIgZXJyZXVyLCB2ZXVpbGxleiBsZSBzaWduYWxlcgphIGwn ZXhwZWRpdGV1ciBldCBsZSBkZXRydWlyZSBhaW5zaSBxdWUgbGVzIHBpZWNlcyBqb2ludGVzLiBM ZXMgbWVzc2FnZXMgZWxlY3Ryb25pcXVlcyBldGFudCBzdXNjZXB0aWJsZXMgZCdhbHRlcmF0aW9u LApPcmFuZ2UgZGVjbGluZSB0b3V0ZSByZXNwb25zYWJpbGl0ZSBzaSBjZSBtZXNzYWdlIGEgZXRl IGFsdGVyZSwgZGVmb3JtZSBvdSBmYWxzaWZpZS4gTWVyY2kuCgpUaGlzIG1lc3NhZ2UgYW5kIGl0 cyBhdHRhY2htZW50cyBtYXkgY29udGFpbiBjb25maWRlbnRpYWwgb3IgcHJpdmlsZWdlZCBpbmZv cm1hdGlvbiB0aGF0IG1heSBiZSBwcm90ZWN0ZWQgYnkgbGF3Owp0aGV5IHNob3VsZCBub3QgYmUg ZGlzdHJpYnV0ZWQsIHVzZWQgb3IgY29waWVkIHdpdGhvdXQgYXV0aG9yaXNhdGlvbi4KSWYgeW91 IGhhdmUgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2Vu ZGVyIGFuZCBkZWxldGUgdGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMuCkFzIGVtYWls cyBtYXkgYmUgYWx0ZXJlZCwgT3JhbmdlIGlzIG5vdCBsaWFibGUgZm9yIG1lc3NhZ2VzIHRoYXQg aGF2ZSBiZWVuIG1vZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNpZmllZC4KVGhhbmsgeW91LgoK