From nobody Mon Feb 8 07:34:00 2016 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A5871B2D41; Mon, 8 Feb 2016 07:33:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fwK1RIRlSCIg; Mon, 8 Feb 2016 07:33:57 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CDE81B2D3E; Mon, 8 Feb 2016 07:33:56 -0800 (PST) X-AuditID: c1b4fb2d-f78fe6d00000163a-ba-56b8b5628d32 Received: from ESESSHC015.ericsson.se (Unknown_Domain [153.88.183.63]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id FB.F4.05690.265B8B65; Mon, 8 Feb 2016 16:33:54 +0100 (CET) Received: from nomadiclab.lmf.ericsson.se (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.65) with Microsoft SMTP Server id 14.3.248.2; Mon, 8 Feb 2016 16:33:53 +0100 Received: from nomadiclab.lmf.ericsson.se (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 41D774EF83; Mon, 8 Feb 2016 17:36:12 +0200 (EET) Received: from [127.0.0.1] (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 9A8D74E9B6; Mon, 8 Feb 2016 17:36:11 +0200 (EET) From: Mohit Sethi To: , References: <20160208123035.1562.80507.idtracker@ietfa.amsl.com> Message-ID: <56B8B561.8040300@ericsson.com> Date: Mon, 8 Feb 2016 17:33:53 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160208123035.1562.80507.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 8bit X-Virus-Scanned: ClamAV using ClamSMTP X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrJLMWRmVeSWpSXmKPExsUyM2K7vW7S1h1hBm2blS2OrV/LYjGlv5PJ 4s3EjewOzB7HXy9m9Viy5CdTAFMUl01Kak5mWWqRvl0CV8bKe/UF56Uquq52MzcwzhHtYuTk kBAwkfhwdw87hC0mceHeerYuRi4OIYHDjBKzO9exgSSEBLYySjzaqgWRWMso8fJwPwuEM49R YsqBhWDtbAJ6Ep3njjN3MXJwCAu4Ssw/YgsSFhFQluhacp8ZYpCDxP6785lAbGYBKYkXZ9+C LeAV0JY4uH0+WA2LgIrEmalvwEaKCkRIHO7sYoeoEZQ4OfMJC4jNKeAosWD1aqg5FhIz559n hLDlJZq3zmaG+EZN4uq5TVB71SW2dhxgnMAoMgvJqFlI2mchaV/AyLyKUbQ4tbg4N93IWC+1 KDO5uDg/Ty8vtWQTIzACDm75rbuDcfVrx0OMAhyMSjy8BlO2hwmxJpYVV+YeYpTgYFYS4d3R uyNMiDclsbIqtSg/vqg0J7X4EKM0B4uSOO8a5/VhQgLpiSWp2ampBalFMFkmDk6pBsYZLz6X rpyaM8d0QtfpRcu2Hrp46tv6uc676xey22WyHntx+tf5tvuXbpWHBj7iyl/cL7x07s7AgB8t B5eGPd5j32v9LSL+7X0mh3DXy+5X22bIqFSuqEtrqb3s8NTmhkXxZfu1sWK1533LDKyLnD3n BW6Ql0hvfBR9+ZOSZWaNt6PkzfR5Vs1KLMUZiYZazEXFiQDKOkxLfAIAAA== Archived-At: Cc: tuomas.aura@aalto.fi Subject: [Emu] Fwd: New Version Notification for draft-aura-eap-noob-00.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Feb 2016 15:33:58 -0000 Dear all We have just submitted a new IETF Draft titled “Nimble out-of-band authentication for EAP (EAP-NOOB)”. The draft defines an EAP method where the authentication is based on a user-assisted out-of-band (OOB) channel between the server and peer. It is intended as a generic bootstrapping solution for Internet-of-Things devices which have no pre-configured authentication credentials and which are not yet registered on the authentication server. Consider devices you just bought or borrowed. The EAP-NOOB method is more generic than most ad-hoc bootstrapping solutions in that it supports many types of OOB channels. We specify the exact in-band messages but only the OOB message contents and not the OOB channel details. Also, EAP-NOOB supports ubicomp devices with only output (e.g. display) or only input (e.g. camera). Moreover, it makes combined use of both secrecy and integrity of the OOB channel for more robust security than the ad-hoc solutions. We have put a lot of effort into designing a robust security protocol. For one application example, we have used an earlier version of the protocol for bootstrapping security for ubiquitous displays: the user can configure wireless network access, link the device to a cloud service, and register ownership of the device for a specific cloud user – all in one simple step of scanning a QR code with a smart phone. There seemed to more potential to this idea than just using it for our own system, and thus we decided to write a generic EAP method for out-of-band authentication. The draft is available here: https://tools.ietf.org/html/draft-aura-eap-noob-00 Please see if you can make use of it. We look forward to your feedback and comments. Regards /--Mohit -------- Forwarded Message -------- Subject: New Version Notification for draft-aura-eap-noob-00.txt Date: Mon, 08 Feb 2016 04:30:35 -0800 From: internet-drafts@ietf.org To: Tuomas Aura , Mohit Sethi A new version of I-D, draft-aura-eap-noob-00.txt has been successfully submitted by Tuomas Aura and posted to the IETF repository. Name: draft-aura-eap-noob Revision: 00 Title: Nimble out-of-band authentication for EAP (EAP-NOOB) Document date: 2016-02-08 Group: Individual Submission Pages: 35 URL:https://www.ietf.org/internet-drafts/draft-aura-eap-noob-00.txt Status:https://datatracker.ietf.org/doc/draft-aura-eap-noob/ Htmlized:https://tools.ietf.org/html/draft-aura-eap-noob-00 Abstract: Extensible Authentication Protocol (EAP) [RFC3748] provides support for multiple authentication methods. This document defines the EAP- NOOB authentication method for nimble out-of-band (OOB) authentication and key derivation. This EAP method is intended for bootstrapping all kinds of Internet-of-Things (IoT) devices that have a minimal user interface and no pre-configured authentication credentials. The method makes use of a user-assisted one-directional OOB channel between the peer device and authentication server. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Thu Feb 18 08:27:37 2016 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D32FF1B2CE9; Thu, 18 Feb 2016 08:27:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.205 X-Spam-Level: X-Spam-Status: No, score=-4.205 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.006] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QmvViX06hDui; Thu, 18 Feb 2016 08:27:32 -0800 (PST) Received: from smtp-out-02.aalto.fi (smtp-out-02.aalto.fi [130.233.228.121]) by ietfa.amsl.com (Postfix) with ESMTP id 430AD1AD059; Thu, 18 Feb 2016 08:27:30 -0800 (PST) Received: from smtp-out-02.aalto.fi (localhost.localdomain [127.0.0.1]) by localhost (Email Security Appliance) with SMTP id 41AE82710CD_6C5F0F1B; Thu, 18 Feb 2016 16:27:29 +0000 (GMT) Received: from EXHUB02.org.aalto.fi (exhub02.org.aalto.fi [130.233.222.119]) by smtp-out-02.aalto.fi (Sophos Email Appliance) with ESMTP id B52A22710AA_6C5F0F0F; Thu, 18 Feb 2016 16:27:28 +0000 (GMT) Received: from EXMDB01.org.aalto.fi ([169.254.2.222]) by EXHUB02.org.aalto.fi ([130.233.222.119]) with mapi id 14.03.0224.002; Thu, 18 Feb 2016 18:27:28 +0200 From: Aura Tuomas To: Abhijan Bhattacharyya , Mohit Sethi Thread-Topic: [saag] Fwd: New Version Notification for draft-aura-eap-noob-00.txt Thread-Index: AQHRYmyDaEz8z8wkLU+ZyRerPC0UrZ8iJdqAgAp5WICAAFk8kA== Date: Thu, 18 Feb 2016 16:27:28 +0000 Message-ID: <7F9C975440487E49BBD35F4FB088ED74CFCDBBAD@EXMDB01.org.aalto.fi> References: <20160208123035.1562.80507.idtracker@ietfa.amsl.com> <56B8B561.8040300@ericsson.com> In-Reply-To: Accept-Language: fi-FI, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [85.76.33.105] Content-Type: multipart/alternative; boundary="_000_7F9C975440487E49BBD35F4FB088ED74CFCDBBADEXMDB01orgaalto_" MIME-Version: 1.0 Archived-At: Cc: "'t2trg@irtf.org'" , "saag@ietf.org" , "'core@ietf.org'" , "emu@ietf.org" Subject: Re: [Emu] [saag] Fwd: New Version Notification for draft-aura-eap-noob-00.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Feb 2016 16:27:35 -0000 --_000_7F9C975440487E49BBD35F4FB088ED74CFCDBBADEXMDB01orgaalto_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWJoaWphbiwNCg0KVGhhbmsgeW91IGZvciB0aGUgcXVlc3Rpb25zLg0KDQpUaGVyZSBpcyBh IG9uZS10by1vbmUgbWFwcGluZyBiZXR3ZWVuIHRoZSBFQVAgc2VydmVyIGFuZCBhdXRoZW50aWNh dG9yLiBUaGUgRUFQIHNlcnZlciBpcyBkZXRlcm1pbmVkIGJ5IGhvdyB0aGUgYXV0aGVudGljYXRv ciBvciBsb2NhbCBBQUEgc2VydmVyIGlzIGNvbmZpZ3VyZWQuIFRoYXQgaXMsIHRoZSBsb2NhbCBu ZXR3b3JrIGFkbWluaXN0cmF0b3JzIGNhbiByb3V0ZSBhY2Nlc3MgcmVxdWVzdHMgZm9yIOKAnEBl YXAtbm9vYi5vcmfigJ0gdG8gYW55IHNlcnZlciB0aGV5IGNob29zZS4NCg0KSW4gb3VyIG93biBz ZXR1cCwgd2UgaGF2ZSBjb25maWd1cmVkIHRoZSBSQURJVVMgc2VydmVyIGF0IG91ciBsb2NhbCB3 aXJlbGVzcyBuZXR3b3JrIHRvIHRydXN0IGFub3RoZXIsIHJlbW90ZSBSQURJVVMgc2VydmVyIGZv ciBOQUlzIHRoYXQgZW5kIOKAnEBlYXAtbm9vYi5vcmfigJ0uIFRoYXQgcmVtb3RlIHNlcnZlciBo YW5kbGVzIEVBUC1OT09CIGZvciBhbGwgdGhlIHN0YXRpb25zIGluIG91ciB3aXJlbGVzcyBuZXR3 b3JrLg0KDQpUdW9tYXMNCg0KUC5TLiBTb3JyeSBhYm91dCB0aGUgY3Jvc3MtcG9zdGluZy4gTGV0 4oCZcyBzZW5kIHRoZSBmb2xsb3ctdXBzIG9ubHkgdG8gc2FhZ0BpZXRmLm9yZzxtYWlsdG86c2Fh Z0BpZXRmLm9yZz4uDQoNCg0KDQpGcm9tOiBBYmhpamFuIEJoYXR0YWNoYXJ5eWEgW21haWx0bzph YmhpamFuLmJoYXR0YWNoYXJ5eWFAdGNzLmNvbV0NClNlbnQ6IE1vbmRheSwgMTUgRmVicnVhcnks IDIwMTYgMDk6MzENClRvOiBNb2hpdCBTZXRoaSA8bW9oaXQubS5zZXRoaUBlcmljc3Nvbi5jb20+ DQpDYzogc2FhZ0BpZXRmLm9yZzsgZW11QGlldGYub3JnOyBBdXJhIFR1b21hcyA8dHVvbWFzLmF1 cmFAYWFsdG8uZmk+OyAnY29yZUBpZXRmLm9yZycgPGNvcmVAaWV0Zi5vcmc+OyAndDJ0cmdAaXJ0 Zi5vcmcnIDx0MnRyZ0BpcnRmLm9yZz4NClN1YmplY3Q6IFJlOiBbc2FhZ10gRndkOiBOZXcgVmVy c2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LWF1cmEtZWFwLW5vb2ItMDAudHh0DQoNCkhpIE1v aGl0LA0KSSB3YXMgZ29pbmcgdGhyb3VnaCB5b3VyIGRyYWZ0LiBMb29rcyB0byBiZSBhIHByb21p c2luZyBwcm9wb3NpdGlvbi4gSG93ZXZlciwgSSBoYXZlIGdvdCBhIGZldyBxdWVzdGlvbnMgZmly c3QgaGFuZC4NCg0KVGhlIGF1dGhlbnRpY2F0b3IgYWN0cyBhcyBhIHRyYW5zcGFyZW50IG5vZGUg YW5kIGZvcndhcmRzIHRoZSBwYWNrZXRzIHRvIHRoZSBzZXJ2ZXIgc29vbiBhZnRlciB0aGUgZmly c3QgbWVzc2FnZSBmb3IgRUFQIElkZW50aXR5IHJlcXVlc3QuIEluIGEgdHlwaWNhbCBuZXR3b3Jr IHdvdWxkIGEgc2luZ2xlIGF1dGhlbnRpY2F0b3IgbWFwIHRvIHNldmVyYWwgc2VydmVycyBvciB0 aGUgYXNzdW1wdGlvbiBpcyB0aGF0IHRoZXJlIGlzIGFsd2F5cyBvbmUgdG8gb25lIG1hcHBpbmcg YmV0d2VlbiBzZXJ2ZXIgYW5kIGF1dGhlbnRpY2F0b3I/DQoNCkhvdyBkb2VzIHRoZSBhdXRoZW50 aWNhdG9yIGFzc29jaWF0ZSBpdHNlbGYgdG8gdGhlIHNlcnZlciBhdCB0aGUgZmlyc3QgcGxhY2U/ DQoNCldoYXQgaXMgdGhlIGFzc3VtcHRpb24gcmVnYXJkaW5nIHRoZSAgdW5kZXJseWluZyBwaHlz aWNhbCBuZXR3b3JrIGFuZCBob3cgdGhlIGF1dGhlbnRpY2F0b3IgbWFwcyB0byB0aGUgZGlmZmVy ZW50IG5vZGVzIGluIHRoZSBuZXR3b3JrIChlLmcuIGEgcm91dGVyIGluIGEgV2lGaSBsaWtlIHNl dHVwKT8NCg0KUmVnYXJkcw0KQWJoaWphbiBCaGF0dGFjaGFyeXlhDQpBc3NvY2lhdGUgQ29uc3Vs dGFudA0KU2NpZW50aXN0LCBJbm5vdmF0aW9uIExhYiwgS29sa2F0YSwgSW5kaWENClRhdGEgQ29u c3VsdGFuY3kgU2VydmljZXMNCk1haWx0bzogYWJoaWphbi5iaGF0dGFjaGFyeXlhQHRjcy5jb208 bWFpbHRvOmFiaGlqYW4uYmhhdHRhY2hhcnl5YUB0Y3MuY29tPg0KV2Vic2l0ZTogaHR0cDovL3d3 dy50Y3MuY29tPGh0dHA6Ly93d3cudGNzLmNvbS8+DQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KRXhwZXJpZW5jZSBjZXJ0YWludHkuICAgICAgICBJVCBTZXJ2 aWNlcw0KICAgICAgICAgICAgICAgICAgICAgICBCdXNpbmVzcyBTb2x1dGlvbnMNCiAgICAgICAg ICAgICAgICAgICAgICAgQ29uc3VsdGluZw0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCg0KDQoNCg0KRnJvbTogICAgICAgIE1vaGl0IFNldGhpIDxtb2hpdC5t LnNldGhpQGVyaWNzc29uLmNvbTxtYWlsdG86bW9oaXQubS5zZXRoaUBlcmljc3Nvbi5jb20+Pg0K VG86ICAgICAgICA8c2FhZ0BpZXRmLm9yZzxtYWlsdG86c2FhZ0BpZXRmLm9yZz4+LCA8ZW11QGll dGYub3JnPG1haWx0bzplbXVAaWV0Zi5vcmc+Pg0KQ2M6ICAgICAgICB0dW9tYXMuYXVyYUBhYWx0 by5maTxtYWlsdG86dHVvbWFzLmF1cmFAYWFsdG8uZmk+DQpEYXRlOiAgICAgICAgMDIvMDgvMjAx NiAwOToxMCBQTQ0KU3ViamVjdDogICAgICAgIFtzYWFnXSBGd2Q6IE5ldyBWZXJzaW9uIE5vdGlm aWNhdGlvbiBmb3IgZHJhZnQtYXVyYS1lYXAtbm9vYi0wMC50eHQNClNlbnQgYnk6ICAgICAgICAi c2FhZyIgPHNhYWctYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86c2FhZy1ib3VuY2VzQGlldGYub3Jn Pj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoNCg0KDQpEZWFyIGFsbA0KDQpX ZSBoYXZlIGp1c3Qgc3VibWl0dGVkIGEgbmV3IElFVEYgRHJhZnQgdGl0bGVkIOKAnE5pbWJsZSBv dXQtb2YtYmFuZA0KYXV0aGVudGljYXRpb24gZm9yIEVBUCAoRUFQLU5PT0Ip4oCdLg0KDQpUaGUg ZHJhZnQgZGVmaW5lcyBhbiBFQVAgbWV0aG9kIHdoZXJlIHRoZSBhdXRoZW50aWNhdGlvbiBpcyBi YXNlZCBvbiBhDQp1c2VyLWFzc2lzdGVkIG91dC1vZi1iYW5kIChPT0IpIGNoYW5uZWwgYmV0d2Vl biB0aGUgc2VydmVyIGFuZCBwZWVyLiBJdA0KaXMgaW50ZW5kZWQgYXMgYSBnZW5lcmljIGJvb3Rz dHJhcHBpbmcgc29sdXRpb24gZm9yIEludGVybmV0LW9mLVRoaW5ncw0KZGV2aWNlcyB3aGljaCBo YXZlIG5vIHByZS1jb25maWd1cmVkIGF1dGhlbnRpY2F0aW9uIGNyZWRlbnRpYWxzIGFuZA0Kd2hp Y2ggYXJlIG5vdCB5ZXQgcmVnaXN0ZXJlZCBvbiB0aGUgYXV0aGVudGljYXRpb24gc2VydmVyLiBD b25zaWRlcg0KZGV2aWNlcyB5b3UganVzdCBib3VnaHQgb3IgYm9ycm93ZWQuDQoNClRoZSBFQVAt Tk9PQiBtZXRob2QgaXMgbW9yZSBnZW5lcmljIHRoYW4gbW9zdCBhZC1ob2MgYm9vdHN0cmFwcGlu Zw0Kc29sdXRpb25zIGluIHRoYXQgaXQgc3VwcG9ydHMgbWFueSB0eXBlcyBvZiBPT0IgY2hhbm5l bHMuIFdlIHNwZWNpZnkgdGhlDQpleGFjdCBpbi1iYW5kIG1lc3NhZ2VzIGJ1dCBvbmx5IHRoZSBP T0IgbWVzc2FnZSBjb250ZW50cyBhbmQgbm90IHRoZSBPT0INCmNoYW5uZWwgZGV0YWlscy4gQWxz bywgRUFQLU5PT0Igc3VwcG9ydHMgdWJpY29tcCBkZXZpY2VzIHdpdGggb25seQ0Kb3V0cHV0IChl LmcuIGRpc3BsYXkpIG9yIG9ubHkgaW5wdXQgKGUuZy4gY2FtZXJhKS4gTW9yZW92ZXIsIGl0IG1h a2VzDQpjb21iaW5lZCB1c2Ugb2YgYm90aCBzZWNyZWN5IGFuZCBpbnRlZ3JpdHkgb2YgdGhlIE9P QiBjaGFubmVsIGZvciBtb3JlDQpyb2J1c3Qgc2VjdXJpdHkgdGhhbiB0aGUgYWQtaG9jIHNvbHV0 aW9ucy4gV2UgaGF2ZSBwdXQgYSBsb3Qgb2YgZWZmb3J0DQppbnRvIGRlc2lnbmluZyBhIHJvYnVz dCBzZWN1cml0eSBwcm90b2NvbC4NCg0KRm9yIG9uZSBhcHBsaWNhdGlvbiBleGFtcGxlLCB3ZSBo YXZlIHVzZWQgYW4gZWFybGllciB2ZXJzaW9uIG9mIHRoZQ0KcHJvdG9jb2wgZm9yIGJvb3RzdHJh cHBpbmcgc2VjdXJpdHkgZm9yIHViaXF1aXRvdXMgZGlzcGxheXM6IHRoZSB1c2VyDQpjYW4gY29u ZmlndXJlIHdpcmVsZXNzIG5ldHdvcmsgYWNjZXNzLCBsaW5rIHRoZSBkZXZpY2UgdG8gYSBjbG91 ZA0Kc2VydmljZSwgYW5kIHJlZ2lzdGVyIG93bmVyc2hpcCBvZiB0aGUgZGV2aWNlIGZvciBhIHNw ZWNpZmljIGNsb3VkIHVzZXINCuKAkyBhbGwgaW4gb25lIHNpbXBsZSBzdGVwIG9mIHNjYW5uaW5n IGEgUVIgY29kZSB3aXRoIGEgc21hcnQgcGhvbmUuIFRoZXJlDQpzZWVtZWQgdG8gbW9yZSBwb3Rl bnRpYWwgdG8gdGhpcyBpZGVhIHRoYW4ganVzdCB1c2luZyBpdCBmb3Igb3VyIG93bg0Kc3lzdGVt LCBhbmQgdGh1cyB3ZSBkZWNpZGVkIHRvIHdyaXRlIGEgZ2VuZXJpYyBFQVAgbWV0aG9kIGZvcg0K b3V0LW9mLWJhbmQgYXV0aGVudGljYXRpb24uDQoNClRoZSBkcmFmdCBpcyBhdmFpbGFibGUgaGVy ZToNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1hdXJhLWVhcC1ub29iLTAwDQoN ClBsZWFzZSBzZWUgaWYgeW91IGNhbiBtYWtlIHVzZSBvZiBpdC4gV2UgbG9vayBmb3J3YXJkIHRv IHlvdXIgZmVlZGJhY2sNCmFuZCBjb21tZW50cy4NCg0KUmVnYXJkcw0KLy0tTW9oaXQNCg0KDQot LS0tLS0tLSBGb3J3YXJkZWQgTWVzc2FnZSAtLS0tLS0tLQ0KU3ViamVjdDogICAgICAgICAgICAg ICAgICBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LWF1cmEtZWFwLW5vb2ItMDAu dHh0DQpEYXRlOiAgICAgICAgICAgICAgICAgIE1vbiwgMDggRmViIDIwMTYgMDQ6MzA6MzUgLTA4 MDANCkZyb206ICAgICAgICAgICAgICAgICAgaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPG1haWx0 bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+DQpUbzogICAgICAgICAgICAgICAgICBUdW9tYXMg QXVyYSA8dHVvbWFzLmF1cmFAYWFsdG8uZmk8bWFpbHRvOnR1b21hcy5hdXJhQGFhbHRvLmZpPj4s IE1vaGl0IFNldGhpIDxtb2hpdEBwaXVoYS5uZXQ8bWFpbHRvOm1vaGl0QHBpdWhhLm5ldD4+DQoN Cg0KDQpBIG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQtYXVyYS1lYXAtbm9vYi0wMC50eHQNCmhh cyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgVHVvbWFzIEF1cmEgYW5kIHBvc3RlZCB0 byB0aGUNCklFVEYgcmVwb3NpdG9yeS4NCg0KTmFtZTogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgZHJhZnQtYXVyYS1lYXAtbm9vYg0KUmV2aXNpb246ICAgICAgICAgICAgICAgICAw MA0KVGl0bGU6ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE5pbWJsZSBvdXQtb2Yt YmFuZCBhdXRoZW50aWNhdGlvbiBmb3IgRUFQIChFQVAtTk9PQikNCkRvY3VtZW50IGRhdGU6ICAg ICAgICAgICAgICAgICAyMDE2LTAyLTA4DQpHcm91cDogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQpQYWdlczogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgMzUNClVSTDpodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFm dHMvZHJhZnQtYXVyYS1lYXAtbm9vYi0wMC50eHQNClN0YXR1czpodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC1hdXJhLWVhcC1ub29iLw0KSHRtbGl6ZWQ6aHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWF1cmEtZWFwLW5vb2ItMDANCg0KDQpBYnN0cmFjdDoNCiAg IEV4dGVuc2libGUgQXV0aGVudGljYXRpb24gUHJvdG9jb2wgKEVBUCkgW1JGQzM3NDhdIHByb3Zp ZGVzIHN1cHBvcnQNCiAgIGZvciBtdWx0aXBsZSBhdXRoZW50aWNhdGlvbiBtZXRob2RzLiAgVGhp cyBkb2N1bWVudCBkZWZpbmVzIHRoZSBFQVAtDQogICBOT09CIGF1dGhlbnRpY2F0aW9uIG1ldGhv ZCBmb3IgbmltYmxlIG91dC1vZi1iYW5kIChPT0IpDQogICBhdXRoZW50aWNhdGlvbiBhbmQga2V5 IGRlcml2YXRpb24uICBUaGlzIEVBUCBtZXRob2QgaXMgaW50ZW5kZWQgZm9yDQogICBib290c3Ry YXBwaW5nIGFsbCBraW5kcyBvZiBJbnRlcm5ldC1vZi1UaGluZ3MgKElvVCkgZGV2aWNlcyB0aGF0 IGhhdmUNCiAgIGEgbWluaW1hbCB1c2VyIGludGVyZmFjZSBhbmQgbm8gcHJlLWNvbmZpZ3VyZWQg YXV0aGVudGljYXRpb24NCiAgIGNyZWRlbnRpYWxzLiAgVGhlIG1ldGhvZCBtYWtlcyB1c2Ugb2Yg YSB1c2VyLWFzc2lzdGVkIG9uZS1kaXJlY3Rpb25hbA0KICAgT09CIGNoYW5uZWwgYmV0d2VlbiB0 aGUgcGVlciBkZXZpY2UgYW5kIGF1dGhlbnRpY2F0aW9uIHNlcnZlci4NCg0KDQoNCg0KUGxlYXNl IG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUg b2Ygc3VibWlzc2lvbg0KdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2 YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCg0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KDQoN Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzYWFnIG1h aWxpbmcgbGlzdA0Kc2FhZ0BpZXRmLm9yZzxtYWlsdG86c2FhZ0BpZXRmLm9yZz4NCmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2FhZw0KDQo9PT09PS0tLS0tPT09PT0tLS0t LT09PT09DQpOb3RpY2U6IFRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyBlLW1haWwN Cm1lc3NhZ2UgYW5kL29yIGF0dGFjaG1lbnRzIHRvIGl0IG1heSBjb250YWluDQpjb25maWRlbnRp YWwgb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbi4gSWYgeW91IGFyZQ0Kbm90IHRoZSBpbnRlbmRl ZCByZWNpcGllbnQsIGFueSBkaXNzZW1pbmF0aW9uLCB1c2UsDQpyZXZpZXcsIGRpc3RyaWJ1dGlv biwgcHJpbnRpbmcgb3IgY29weWluZyBvZiB0aGUNCmluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0 aGlzIGUtbWFpbCBtZXNzYWdlDQphbmQvb3IgYXR0YWNobWVudHMgdG8gaXQgYXJlIHN0cmljdGx5 IHByb2hpYml0ZWQuIElmDQp5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4g ZXJyb3IsDQpwbGVhc2Ugbm90aWZ5IHVzIGJ5IHJlcGx5IGUtbWFpbCBvciB0ZWxlcGhvbmUgYW5k DQppbW1lZGlhdGVseSBhbmQgcGVybWFuZW50bHkgZGVsZXRlIHRoZSBtZXNzYWdlDQphbmQgYW55 IGF0dGFjaG1lbnRzLiBUaGFuayB5b3UNCg== --_000_7F9C975440487E49BBD35F4FB088ED74CFCDBBADEXMDB01orgaalto_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5l dyBSb21hbiIsc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30N CmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcA0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFy Z2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVm dDowaW47DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFu IixzZXJpZjt9DQp0dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWww DQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEyLjBwdDsN Cglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUy MA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1z dHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDld Pjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0K PC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91 dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpz aGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVT IiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SGkg QWJoaWphbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5r IHlvdSBmb3IgdGhlIHF1ZXN0aW9ucy4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+VGhlcmUgaXMgYSBvbmUtdG8tb25lIG1hcHBpbmcgYmV0d2VlbiB0aGUgRUFQ IHNlcnZlciBhbmQgYXV0aGVudGljYXRvci4gVGhlIEVBUCBzZXJ2ZXIgaXMgZGV0ZXJtaW5lZCBi eSBob3cgdGhlIGF1dGhlbnRpY2F0b3Igb3IgbG9jYWwgQUFBIHNlcnZlciBpcyBjb25maWd1cmVk Lg0KIFRoYXQgaXMsIHRoZSBsb2NhbCBuZXR3b3JrIGFkbWluaXN0cmF0b3JzIGNhbiByb3V0ZSBh Y2Nlc3MgcmVxdWVzdHMgZm9yIOKAnEBlYXAtbm9vYi5vcmfigJ0gdG8gYW55IHNlcnZlciB0aGV5 IGNob29zZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SW4g b3VyIG93biBzZXR1cCwgd2UgaGF2ZSBjb25maWd1cmVkIHRoZSBSQURJVVMgc2VydmVyIGF0IG91 ciBsb2NhbCB3aXJlbGVzcyBuZXR3b3JrIHRvIHRydXN0IGFub3RoZXIsIHJlbW90ZSBSQURJVVMg c2VydmVyIGZvciBOQUlzIHRoYXQgZW5kIOKAnEBlYXAtbm9vYi5vcmfigJ0uDQogVGhhdCByZW1v dGUgc2VydmVyIGhhbmRsZXMgRUFQLU5PT0IgZm9yIGFsbCB0aGUgc3RhdGlvbnMgaW4gb3VyIHdp cmVsZXNzIG5ldHdvcmsuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij5UdW9tYXMNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+UC5T LiBTb3JyeSBhYm91dCB0aGUgY3Jvc3MtcG9zdGluZy4gTGV04oCZcyBzZW5kIHRoZSBmb2xsb3ct dXBzIG9ubHkgdG8NCjxhIGhyZWY9Im1haWx0bzpzYWFnQGlldGYub3JnIj5zYWFnQGlldGYub3Jn PC9hPi4gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBuYW1lPSJfTWFp bEVuZENvbXBvc2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L2E+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gQWJoaWphbiBCaGF0dGFjaGFy eXlhIFttYWlsdG86YWJoaWphbi5iaGF0dGFjaGFyeXlhQHRjcy5jb21dDQo8YnI+DQo8Yj5TZW50 OjwvYj4gTW9uZGF5LCAxNSBGZWJydWFyeSwgMjAxNiAwOTozMTxicj4NCjxiPlRvOjwvYj4gTW9o aXQgU2V0aGkgJmx0O21vaGl0Lm0uc2V0aGlAZXJpY3Nzb24uY29tJmd0Ozxicj4NCjxiPkNjOjwv Yj4gc2FhZ0BpZXRmLm9yZzsgZW11QGlldGYub3JnOyBBdXJhIFR1b21hcyAmbHQ7dHVvbWFzLmF1 cmFAYWFsdG8uZmkmZ3Q7OyAnY29yZUBpZXRmLm9yZycgJmx0O2NvcmVAaWV0Zi5vcmcmZ3Q7OyAn dDJ0cmdAaXJ0Zi5vcmcnICZsdDt0MnRyZ0BpcnRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0Ojwv Yj4gUmU6IFtzYWFnXSBGd2Q6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtYXVy YS1lYXAtbm9vYi0wMC50eHQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWYiPkhpIE1vaGl0LDwvc3Bhbj4NCjxicj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPkkgd2FzIGdvaW5n IHRocm91Z2ggeW91ciBkcmFmdC4gTG9va3MgdG8gYmUgYSBwcm9taXNpbmcgcHJvcG9zaXRpb24u IEhvd2V2ZXIsIEkgaGF2ZSBnb3QgYSBmZXcgcXVlc3Rpb25zIGZpcnN0IGhhbmQuPC9zcGFuPg0K PGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+VGhlIGF1dGhlbnRpY2F0b3IgYWN0cyBhcyBhIHRy YW5zcGFyZW50IG5vZGUgYW5kIGZvcndhcmRzIHRoZSBwYWNrZXRzIHRvIHRoZSBzZXJ2ZXIgc29v biBhZnRlciB0aGUgZmlyc3QgbWVzc2FnZSBmb3IgRUFQIElkZW50aXR5IHJlcXVlc3QuIEluIGEg dHlwaWNhbCBuZXR3b3JrIHdvdWxkIGEgc2luZ2xlIGF1dGhlbnRpY2F0b3IgbWFwIHRvDQogc2V2 ZXJhbCBzZXJ2ZXJzIG9yIHRoZSBhc3N1bXB0aW9uIGlzIHRoYXQgdGhlcmUgaXMgYWx3YXlzIG9u ZSB0byBvbmUgbWFwcGluZyBiZXR3ZWVuIHNlcnZlciBhbmQgYXV0aGVudGljYXRvcj8NCjwvc3Bh bj48YnI+DQo8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj5Ib3cgZG9lcyB0aGUgYXV0aGVudGljYXRvciBh c3NvY2lhdGUgaXRzZWxmIHRvIHRoZSBzZXJ2ZXIgYXQgdGhlIGZpcnN0IHBsYWNlPzwvc3Bhbj4N Cjxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPldoYXQgaXMgdGhlIGFzc3VtcHRpb24gcmVnYXJk aW5nIHRoZSAmbmJzcDt1bmRlcmx5aW5nIHBoeXNpY2FsIG5ldHdvcmsgYW5kIGhvdyB0aGUgYXV0 aGVudGljYXRvciBtYXBzIHRvIHRoZSBkaWZmZXJlbnQgbm9kZXMgaW4gdGhlIG5ldHdvcmsgKGUu Zy4gYSByb3V0ZXIgaW4gYSBXaUZpIGxpa2Ugc2V0dXApPzwvc3Bhbj4NCjxicj4NCjxicj4NCjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LHNhbnMtc2VyaWYiPlJlZ2FyZHM8YnI+DQpBYmhpamFuIEJoYXR0YWNoYXJ5eWE8YnI+DQpBc3Nv Y2lhdGUgQ29uc3VsdGFudDxicj4NClNjaWVudGlzdCwgSW5ub3ZhdGlvbiBMYWIsIEtvbGthdGEs IEluZGlhPGJyPg0KVGF0YSBDb25zdWx0YW5jeSBTZXJ2aWNlczxicj4NCk1haWx0bzogPC9zcGFu PjxhIGhyZWY9Im1haWx0bzphYmhpamFuLmJoYXR0YWNoYXJ5eWFAdGNzLmNvbSI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZiI+YWJoaWphbi5iaGF0dGFjaGFyeXlhQHRjcy5jb208L3NwYW4+PC9hPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWYiPjxicj4NCldlYnNpdGU6IDwvc3Bhbj48YSBocmVmPSJodHRwOi8vd3d3LnRjcy5jb20vIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmIj5odHRwOi8vd3d3LnRjcy5jb208L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYi Pjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0K RXhwZXJpZW5jZSBjZXJ0YWludHkuICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0lUIFNlcnZp Y2VzPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtCdXNpbmVzcyBTb2x1dGlvbnM8YnI+ DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0NvbnN1bHRpbmc8YnI+DQpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCjwvc3Bhbj48YnI+DQo8YnI+DQo8 YnI+DQo8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzVGNUY1RiI+RnJvbTogJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+TW9oaXQgU2V0aGkgJmx0Ozwvc3Bh bj48YSBocmVmPSJtYWlsdG86bW9oaXQubS5zZXRoaUBlcmljc3Nvbi5jb20iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJp ZiI+bW9oaXQubS5zZXRoaUBlcmljc3Nvbi5jb208L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+Jmd0 Ozwvc3Bhbj4NCjxicj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojNUY1RjVGIj5UbzogJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+Jmx0Ozwvc3Bhbj48YSBocmVm PSJtYWlsdG86c2FhZ0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj5zYWFnQGlldGYub3JnPC9zcGFu PjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWYiPiZndDssDQogJmx0Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86ZW11 QGlldGYub3JnIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPmVtdUBpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmIj4mZ3Q7PC9zcGFuPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM1RjVGNUYiPkNjOiAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnR1b21hcy5h dXJhQGFhbHRvLmZpIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPnR1b21hcy5hdXJhQGFhbHRvLmZpPC9zcGFuPjwv YT4NCjxicj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojNUY1RjVGIj5EYXRlOiAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj4wMi8wOC8yMDE2IDA5OjEwIFBNPC9z cGFuPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM1RjVGNUYiPlN1YmplY3Q6ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPltzYWFnXSBGd2Q6IE5ldyBW ZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtYXVyYS1lYXAtbm9vYi0wMC50eHQ8L3NwYW4+ DQo8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzVGNUY1RiI+U2VudCBieTogJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+JnF1b3Q7c2FhZyZxdW90OyAmbHQ7 PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpzYWFnLWJvdW5jZXNAaWV0Zi5vcmciPjxzcGFuIHN0eWxl PSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJp ZiI+c2FhZy1ib3VuY2VzQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPiZndDs8L3Nw YW4+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRl ciIgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4NCjxociBzaXplPSI0IiB3aWR0aD0iMTAwJSIg bm9zaGFkZT0iIiBzdHlsZT0iY29sb3I6I0EwQTBBMCIgYWxpZ249ImNlbnRlciI+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0K PGJyPg0KPGJyPg0KPHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5EZWFyIGFsbDwv c3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8dHQ+V2UgaGF2ZSBqdXN0IHN1Ym1pdHRl ZCBhIG5ldyBJRVRGIERyYWZ0IHRpdGxlZCDigJxOaW1ibGUgb3V0LW9mLWJhbmQgPC90dD48YnI+ DQo8dHQ+YXV0aGVudGljYXRpb24gZm9yIEVBUCAoRUFQLU5PT0Ip4oCdLjwvdHQ+PGJyPg0KPGJy Pg0KPHR0PlRoZSBkcmFmdCBkZWZpbmVzIGFuIEVBUCBtZXRob2Qgd2hlcmUgdGhlIGF1dGhlbnRp Y2F0aW9uIGlzIGJhc2VkIG9uIGEgPC90dD48YnI+DQo8dHQ+dXNlci1hc3Npc3RlZCBvdXQtb2Yt YmFuZCAoT09CKSBjaGFubmVsIGJldHdlZW4gdGhlIHNlcnZlciBhbmQgcGVlci4gSXQgPC90dD4N Cjxicj4NCjx0dD5pcyBpbnRlbmRlZCBhcyBhIGdlbmVyaWMgYm9vdHN0cmFwcGluZyBzb2x1dGlv biBmb3IgSW50ZXJuZXQtb2YtVGhpbmdzIDwvdHQ+PGJyPg0KPHR0PmRldmljZXMgd2hpY2ggaGF2 ZSBubyBwcmUtY29uZmlndXJlZCBhdXRoZW50aWNhdGlvbiBjcmVkZW50aWFscyBhbmQgPC90dD48 YnI+DQo8dHQ+d2hpY2ggYXJlIG5vdCB5ZXQgcmVnaXN0ZXJlZCBvbiB0aGUgYXV0aGVudGljYXRp b24gc2VydmVyLiBDb25zaWRlciA8L3R0Pjxicj4NCjx0dD5kZXZpY2VzIHlvdSBqdXN0IGJvdWdo dCBvciBib3Jyb3dlZC48L3R0Pjxicj4NCjxicj4NCjx0dD5UaGUgRUFQLU5PT0IgbWV0aG9kIGlz IG1vcmUgZ2VuZXJpYyB0aGFuIG1vc3QgYWQtaG9jIGJvb3RzdHJhcHBpbmcgPC90dD48YnI+DQo8 dHQ+c29sdXRpb25zIGluIHRoYXQgaXQgc3VwcG9ydHMgbWFueSB0eXBlcyBvZiBPT0IgY2hhbm5l bHMuIFdlIHNwZWNpZnkgdGhlIDwvdHQ+DQo8YnI+DQo8dHQ+ZXhhY3QgaW4tYmFuZCBtZXNzYWdl cyBidXQgb25seSB0aGUgT09CIG1lc3NhZ2UgY29udGVudHMgYW5kIG5vdCB0aGUgT09CIDwvdHQ+ DQo8YnI+DQo8dHQ+Y2hhbm5lbCBkZXRhaWxzLiBBbHNvLCBFQVAtTk9PQiBzdXBwb3J0cyB1Ymlj b21wIGRldmljZXMgd2l0aCBvbmx5IDwvdHQ+PGJyPg0KPHR0Pm91dHB1dCAoZS5nLiBkaXNwbGF5 KSBvciBvbmx5IGlucHV0IChlLmcuIGNhbWVyYSkuIE1vcmVvdmVyLCBpdCBtYWtlcyA8L3R0Pjxi cj4NCjx0dD5jb21iaW5lZCB1c2Ugb2YgYm90aCBzZWNyZWN5IGFuZCBpbnRlZ3JpdHkgb2YgdGhl IE9PQiBjaGFubmVsIGZvciBtb3JlIDwvdHQ+PGJyPg0KPHR0PnJvYnVzdCBzZWN1cml0eSB0aGFu IHRoZSBhZC1ob2Mgc29sdXRpb25zLiBXZSBoYXZlIHB1dCBhIGxvdCBvZiBlZmZvcnQgPC90dD48 YnI+DQo8dHQ+aW50byBkZXNpZ25pbmcgYSByb2J1c3Qgc2VjdXJpdHkgcHJvdG9jb2wuPC90dD48 YnI+DQo8YnI+DQo8dHQ+Rm9yIG9uZSBhcHBsaWNhdGlvbiBleGFtcGxlLCB3ZSBoYXZlIHVzZWQg YW4gZWFybGllciB2ZXJzaW9uIG9mIHRoZSA8L3R0Pjxicj4NCjx0dD5wcm90b2NvbCBmb3IgYm9v dHN0cmFwcGluZyBzZWN1cml0eSBmb3IgdWJpcXVpdG91cyBkaXNwbGF5czogdGhlIHVzZXIgPC90 dD48YnI+DQo8dHQ+Y2FuIGNvbmZpZ3VyZSB3aXJlbGVzcyBuZXR3b3JrIGFjY2VzcywgbGluayB0 aGUgZGV2aWNlIHRvIGEgY2xvdWQgPC90dD48YnI+DQo8dHQ+c2VydmljZSwgYW5kIHJlZ2lzdGVy IG93bmVyc2hpcCBvZiB0aGUgZGV2aWNlIGZvciBhIHNwZWNpZmljIGNsb3VkIHVzZXIgPC90dD4N Cjxicj4NCjx0dD7igJMgYWxsIGluIG9uZSBzaW1wbGUgc3RlcCBvZiBzY2FubmluZyBhIFFSIGNv ZGUgd2l0aCBhIHNtYXJ0IHBob25lLiBUaGVyZSA8L3R0Pg0KPGJyPg0KPHR0PnNlZW1lZCB0byBt b3JlIHBvdGVudGlhbCB0byB0aGlzIGlkZWEgdGhhbiBqdXN0IHVzaW5nIGl0IGZvciBvdXIgb3du IDwvdHQ+PGJyPg0KPHR0PnN5c3RlbSwgYW5kIHRodXMgd2UgZGVjaWRlZCB0byB3cml0ZSBhIGdl bmVyaWMgRUFQIG1ldGhvZCBmb3IgPC90dD48YnI+DQo8dHQ+b3V0LW9mLWJhbmQgYXV0aGVudGlj YXRpb24uPC90dD48YnI+DQo8YnI+DQo8dHQ+VGhlIGRyYWZ0IGlzIGF2YWlsYWJsZSBoZXJlOjwv dHQ+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1hdXJhLWVhcC1ub29iLTAwIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPmh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1hdXJhLWVhcC1ub29iLTAwPC9zcGFuPjwv dHQ+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8YnI+DQo8dHQ+UGxlYXNlIHNlZSBpZiB5b3UgY2FuIG1h a2UgdXNlIG9mIGl0LiBXZSBsb29rIGZvcndhcmQgdG8geW91ciBmZWVkYmFjayA8L3R0Pjxicj4N Cjx0dD5hbmQgY29tbWVudHMuPC90dD48YnI+DQo8YnI+DQo8dHQ+UmVnYXJkczwvdHQ+PGJyPg0K PHR0Pi8tLU1vaGl0PC90dD48YnI+DQo8YnI+DQo8YnI+DQo8dHQ+LS0tLS0tLS0gRm9yd2FyZGVk IE1lc3NhZ2UgLS0tLS0tLS08L3R0Pjxicj4NCjx0dD5TdWJqZWN0OiAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO05ldyBWZXJzaW9u IE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtYXVyYS1lYXAtbm9vYi0wMC50eHQ8L3R0Pjxicj4NCjx0 dD5EYXRlOiAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwO01vbiwgMDggRmViIDIwMTYgMDQ6MzA6MzUgLTA4MDA8L3R0Pjxicj4NCjx0 dD5Gcm9tOiAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOzwvdHQ+PC9zcGFuPjxhIGhyZWY9Im1haWx0bzppbnRlcm5ldC1kcmFmdHNA aWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij5pbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij48YnI+DQo8dHQ+VG86ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7VHVvbWFzIEF1cmEgJmx0OzwvdHQ+PC9zcGFuPjxh IGhyZWY9Im1haWx0bzp0dW9tYXMuYXVyYUBhYWx0by5maSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPnR1b21hcy5hdXJh QGFhbHRvLmZpPC9zcGFuPjwvYT48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZn dDssIE1vaGl0IFNldGhpICZsdDs8L3NwYW4+PC90dD48YSBocmVmPSJtYWlsdG86bW9oaXRAcGl1 aGEubmV0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+bW9oaXRAcGl1aGEubmV0PC9zcGFuPjwvYT48dHQ+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZndDs8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPGJy Pg0KPGJyPg0KPGJyPg0KPHR0PkEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1hdXJhLWVhcC1u b29iLTAwLnR4dDwvdHQ+PGJyPg0KPHR0PmhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQg YnkgVHVvbWFzIEF1cmEgYW5kIHBvc3RlZCB0byB0aGU8L3R0Pjxicj4NCjx0dD5JRVRGIHJlcG9z aXRvcnkuPC90dD48YnI+DQo8YnI+DQo8dHQ+TmFtZTogJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2RyYWZ0LWF1cmEtZWFwLW5vb2I8 L3R0Pjxicj4NCjx0dD5SZXZpc2lvbjogJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAwMDwvdHQ+PGJyPg0KPHR0PlRpdGxlOiAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7TmltYmxl IG91dC1vZi1iYW5kIGF1dGhlbnRpY2F0aW9uIGZvciBFQVAgKEVBUC1OT09CKTwvdHQ+PGJyPg0K PHR0PkRvY3VtZW50IGRhdGU6ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgMjAxNi0wMi0wODwvdHQ+PGJyPg0KPHR0Pkdyb3VwOiAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7SW5k aXZpZHVhbCBTdWJtaXNzaW9uPC90dD48YnI+DQo8dHQ+UGFnZXM6ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDszNTwvdHQ+PGJyPg0K PHR0PlVSTDo8L3R0Pjwvc3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5l dC1kcmFmdHMvZHJhZnQtYXVyYS1lYXAtbm9vYi0wMC50eHQiPjx0dD48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0 LWF1cmEtZWFwLW5vb2ItMDAudHh0PC9zcGFuPjwvdHQ+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8dHQ+ U3RhdHVzOjwvdHQ+PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LWF1cmEtZWFwLW5vb2IvIj48dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWF1cmEtZWFwLW5vb2Iv PC9zcGFuPjwvdHQ+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8dHQ+SHRtbGl6ZWQ6PC90dD48L3NwYW4+ PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWF1cmEtZWFwLW5vb2It MDAiPjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+aHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWF1cmEtZWFwLW5vb2ItMDA8L3NwYW4+PC90dD48L2E+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi Pjxicj4NCjxicj4NCjxicj4NCjx0dD5BYnN0cmFjdDo8L3R0Pjxicj4NCjx0dD4mbmJzcDsgJm5i c3A7RXh0ZW5zaWJsZSBBdXRoZW50aWNhdGlvbiBQcm90b2NvbCAoRUFQKSBbUkZDMzc0OF0gcHJv dmlkZXMgc3VwcG9ydDwvdHQ+PGJyPg0KPHR0PiZuYnNwOyAmbmJzcDtmb3IgbXVsdGlwbGUgYXV0 aGVudGljYXRpb24gbWV0aG9kcy4gJm5ic3A7VGhpcyBkb2N1bWVudCBkZWZpbmVzIHRoZSBFQVAt PC90dD48YnI+DQo8dHQ+Jm5ic3A7ICZuYnNwO05PT0IgYXV0aGVudGljYXRpb24gbWV0aG9kIGZv ciBuaW1ibGUgb3V0LW9mLWJhbmQgKE9PQik8L3R0Pjxicj4NCjx0dD4mbmJzcDsgJm5ic3A7YXV0 aGVudGljYXRpb24gYW5kIGtleSBkZXJpdmF0aW9uLiAmbmJzcDtUaGlzIEVBUCBtZXRob2QgaXMg aW50ZW5kZWQgZm9yPC90dD48YnI+DQo8dHQ+Jm5ic3A7ICZuYnNwO2Jvb3RzdHJhcHBpbmcgYWxs IGtpbmRzIG9mIEludGVybmV0LW9mLVRoaW5ncyAoSW9UKSBkZXZpY2VzIHRoYXQgaGF2ZTwvdHQ+ PGJyPg0KPHR0PiZuYnNwOyAmbmJzcDthIG1pbmltYWwgdXNlciBpbnRlcmZhY2UgYW5kIG5vIHBy ZS1jb25maWd1cmVkIGF1dGhlbnRpY2F0aW9uPC90dD48YnI+DQo8dHQ+Jm5ic3A7ICZuYnNwO2Ny ZWRlbnRpYWxzLiAmbmJzcDtUaGUgbWV0aG9kIG1ha2VzIHVzZSBvZiBhIHVzZXItYXNzaXN0ZWQg b25lLWRpcmVjdGlvbmFsPC90dD48YnI+DQo8dHQ+Jm5ic3A7ICZuYnNwO09PQiBjaGFubmVsIGJl dHdlZW4gdGhlIHBlZXIgZGV2aWNlIGFuZCBhdXRoZW50aWNhdGlvbiBzZXJ2ZXIuPC90dD48YnI+ DQo8YnI+DQo8dHQ+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOw0KPC90dD48YnI+DQo8YnI+DQo8YnI+DQo8dHQ+UGxlYXNlIG5vdGUgdGhh dCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlz c2lvbjwvdHQ+PGJyPg0KPHR0PnVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFy ZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuPC90dD48YnI+DQo8YnI+DQo8dHQ+VGhlIElF VEYgU2VjcmV0YXJpYXQ8L3R0Pjxicj4NCjxicj4NCjxicj4NCjxicj4NCjx0dD5fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzwvdHQ+PGJyPg0KPHR0PnNhYWcg bWFpbGluZyBsaXN0PC90dD48YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnNhYWdAaWV0Zi5v cmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij5zYWFnQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPC9z cGFuPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2FhZyI+ PHR0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5odHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3NhYWc8L3NwYW4+PC90dD48L2E+PG86cD48L286cD48L3A+DQo8cD49 PT09PS0tLS0tPT09PT0tLS0tLT09PT09PGJyPg0KTm90aWNlOiBUaGUgaW5mb3JtYXRpb24gY29u dGFpbmVkIGluIHRoaXMgZS1tYWlsPGJyPg0KbWVzc2FnZSBhbmQvb3IgYXR0YWNobWVudHMgdG8g aXQgbWF5IGNvbnRhaW4gPGJyPg0KY29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRp b24uIElmIHlvdSBhcmUgPGJyPg0Kbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIGFueSBkaXNz ZW1pbmF0aW9uLCB1c2UsIDxicj4NCnJldmlldywgZGlzdHJpYnV0aW9uLCBwcmludGluZyBvciBj b3B5aW5nIG9mIHRoZSA8YnI+DQppbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyBlLW1haWwg bWVzc2FnZSA8YnI+DQphbmQvb3IgYXR0YWNobWVudHMgdG8gaXQgYXJlIHN0cmljdGx5IHByb2hp Yml0ZWQuIElmIDxicj4NCnlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBl cnJvciwgPGJyPg0KcGxlYXNlIG5vdGlmeSB1cyBieSByZXBseSBlLW1haWwgb3IgdGVsZXBob25l IGFuZCA8YnI+DQppbW1lZGlhdGVseSBhbmQgcGVybWFuZW50bHkgZGVsZXRlIHRoZSBtZXNzYWdl IDxicj4NCmFuZCBhbnkgYXR0YWNobWVudHMuIFRoYW5rIHlvdTxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_7F9C975440487E49BBD35F4FB088ED74CFCDBBADEXMDB01orgaalto_-- From nobody Thu Feb 18 10:08:02 2016 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F15B1B2CDA; Thu, 18 Feb 2016 10:07:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.206 X-Spam-Level: X-Spam-Status: No, score=-4.206 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.006] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G-KgEr7AhidU; Thu, 18 Feb 2016 10:07:47 -0800 (PST) Received: from smtp-out-01.aalto.fi (smtp-out-01.aalto.fi [130.233.228.120]) by ietfa.amsl.com (Postfix) with ESMTP id A4F981ACE42; Thu, 18 Feb 2016 10:07:46 -0800 (PST) Received: from smtp-out-01.aalto.fi (localhost.localdomain [127.0.0.1]) by localhost (Email Security Appliance) with SMTP id 47D0A11530D_6C60871B; Thu, 18 Feb 2016 18:07:45 +0000 (GMT) Received: from EXHUB02.org.aalto.fi (exhub02.org.aalto.fi [130.233.222.119]) by smtp-out-01.aalto.fi (Sophos Email Appliance) with ESMTP id F2BED1152C9_6C60870F; Thu, 18 Feb 2016 18:07:44 +0000 (GMT) Received: from EXMDB01.org.aalto.fi ([169.254.2.222]) by EXHUB02.org.aalto.fi ([130.233.222.119]) with mapi id 14.03.0224.002; Thu, 18 Feb 2016 20:07:44 +0200 From: Aura Tuomas To: Josh Howlett , Mohit Sethi , "saag@ietf.org" , "emu@ietf.org" Thread-Topic: [saag] Fwd: New Version Notification for draft-aura-eap-noob-00.txt Thread-Index: AQHRYmyDaEz8z8wkLU+ZyRerPC0UrZ8iJdqAgA/XEQCAACY7gA== Date: Thu, 18 Feb 2016 18:07:44 +0000 Message-ID: <7F9C975440487E49BBD35F4FB088ED74CFCDBF14@EXMDB01.org.aalto.fi> References: <20160208123035.1562.80507.idtracker@ietfa.amsl.com> <56B8B561.8040300@ericsson.com> In-Reply-To: Accept-Language: fi-FI, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [85.76.161.31] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Emu] [saag] Fwd: New Version Notification for draft-aura-eap-noob-00.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Feb 2016 18:07:50 -0000 SGkgSm9zaCwNCg0KR29vZCBvYnNlcnZhdGlvbjsgd2UgbWF5IG5lZWQgdG8gYmUgY2xlYXJlciBh Ym91dCB0aGUgaW50ZW5kZWQgdXNhZ2Ugc2NlbmFyaW9zIGZvciBFQVAtTk9PQi4NCg0KSW4gdGhl IGhvbWUgc2V0dGluZywgdGhlIEFBQSBzZXJ2ZXIgd291bGQgdHlwaWNhbGx5IGJlIGEgY2xvdWQt YmFzZWQgc2VydmljZSwgd2hlcmUgdGhlIGNvbnN1bWVyIGNhbiByZWdpc3RlciBhIHVzZXIgYWNj b3VudC4gVGhpcyBkb2VzIHJlcXVpcmUgdGhlIDgwMi4xWCBhdXRoZW50aWNhdGlvbiAoaS5lLiBX UEEyLUVudGVycHJpc2UpIHRvIGJlIGNvbmZpZ3VyZWQgYXQgdGhlIGhvbWUgTkFTLCBzbyB0aGF0 IGF1dGhlbnRpY2F0aW9uIGZvciAiQGVhcC1ub29iLm5ldCIgaXMgZm9yd2FyZGVkIHRvIHRoZSBj bG91ZC1iYXNlZCBBQUEgc2VydmVyLiBZb3Ugb25seSBuZWVkIHRvIGNvbmZpZ3VyZSB0aGUgTkFT IG9uY2UsIGFuZCBhbGwgZnV0dXJlIGRldmljZXMgY2FuIGJlIGNvbm5lY3RlZCB3aXRob3V0IHRv dWNoaW5nIHRoZSBOQVMuDQoNClRoaXMgaXMgYSBjaGFuZ2UgZnJvbSB0aGUgd2F5IGhvbWUgd2ly ZWxlc3Mgcm91dGVycyBhcmUgY29uZmlndXJlZCB0b2RheS4gV2UgdGhpbmsgdGhhdCwgYXMgdGhl IG51bWJlciBvZiBJb1QgZGV2aWNlcyBncm93cywgY29uZmlndXJpbmcgdGhlbSB3aXRoIGEgc2hh cmVkIHBhc3NwaHJhc2Ugd2lsbCBiZSB0b28gaW5jb252ZW5pZW50LiBPYnZpb3VzbHksIHRoZSBz aGFyZWQgcGFzc3BocmFzZSBpcyBhbHNvIHZ1bG5lcmFibGUgdG8gYSBzaW5nbGUgdW50cnVzdGVk IElvVCBkZXZpY2UgdGhhdCBtYXkgbGVhayB0aGUgcGFzc3BocmFzZSwgYW5kIHVzaW5nIEVBUCBo ZWxwcyB0byBpc29sYXRlIHRoZSBkZXZpY2VzLiANCg0KT2YgY291cnNlLCB0aGUgYmVuZWZpdHMg b2YgRUFQLU5PT0Igd2lsbCBiZSBncmVhdGVyIGluIG9yZ2FuaXphdGlvbnMgd2hpY2ggYWxyZWFk eSB1c2UgODAyLjFYIGF1dGhlbnRpY2F0aW9uIGFuZCB3aGljaCBoYXZlIGxhcmdlciBudW1iZXJz IG9mIElvVCBkZXZpY2VzIHRoYW4gYSBzaW5nbGUgaG9tZS4gDQoNCkFueXRoaW5nIGVsc2UgdGhh dCB3ZSBuZWVkIHRvIGFkZHJlc3M/DQoNClR1b21hcw0KDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCkZyb206IEpvc2ggSG93bGV0dCBbbWFpbHRvOkpvc2guSG93bGV0dEBqaXNjLmFj LnVrXSANClNlbnQ6IFRodXJzZGF5LCAxOCBGZWJydWFyeSwgMjAxNiAxOToyOA0KVG86IE1vaGl0 IFNldGhpIDxtb2hpdC5tLnNldGhpQGVyaWNzc29uLmNvbT47IHNhYWdAaWV0Zi5vcmc7IGVtdUBp ZXRmLm9yZw0KQ2M6IEF1cmEgVHVvbWFzIDx0dW9tYXMuYXVyYUBhYWx0by5maT4NClN1YmplY3Q6 IFJFOiBbc2FhZ10gRndkOiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LWF1cmEt ZWFwLW5vb2ItMDAudHh0DQoNCkhpIE1vaGl0LA0KDQpUaGlzIGlzIGFuIGludGVyZXN0aW5nIGRy YWZ0LCBidXQgSSdtIHN0cnVnZ2xpbmcgdG8gdW5kZXJzdGFuZCBob3cgdGhpcyB3b3VsZCBiZSBk ZXBsb3llZCBpbiB0aGUgY29uc3VtZXIgc2V0dGluZ3MgdGhhdCB0aGUgZG9jdW1lbnQgYWxsdWRl cyB0by4gRm9yIGV4YW1wbGUsIHdobyBkbyB5b3UgYW50aWNpcGF0ZSB3aWxsIGJlIG9wZXJhdGlu ZyB0aGUgTkFTICh0aGUgY29uc3VtZXI/KSwgQUFBIHNlcnZlciAodGhlIHZlbmRvcj8pLCBhbmQg dGhlIEFBQSBmYWJyaWMgYmV0d2VlbiB0aGVzZSBhY3RvcnM/DQoNCkpvc2guDQoNCj4gLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogc2FhZyBbbWFpbHRvOnNhYWctYm91bmNlc0Bp ZXRmLm9yZ10gT24gQmVoYWxmIE9mIE1vaGl0IFNldGhpDQo+IFNlbnQ6IDA4IEZlYnJ1YXJ5IDIw MTYgMTU6MzQNCj4gVG86IHNhYWdAaWV0Zi5vcmc7IGVtdUBpZXRmLm9yZw0KPiBDYzogdHVvbWFz LmF1cmFAYWFsdG8uZmkNCj4gU3ViamVjdDogW3NhYWddIEZ3ZDogTmV3IFZlcnNpb24gTm90aWZp Y2F0aW9uIGZvciANCj4gZHJhZnQtYXVyYS1lYXAtbm9vYi0wMC50eHQNCj4gDQo+IERlYXIgYWxs DQo+IA0KPiBXZSBoYXZlIGp1c3Qgc3VibWl0dGVkIGEgbmV3IElFVEYgRHJhZnQgdGl0bGVkIOKA nE5pbWJsZSBvdXQtb2YtYmFuZCANCj4gYXV0aGVudGljYXRpb24gZm9yIEVBUCAoRUFQLU5PT0Ip 4oCdLg0KPiANCj4gVGhlIGRyYWZ0IGRlZmluZXMgYW4gRUFQIG1ldGhvZCB3aGVyZSB0aGUgYXV0 aGVudGljYXRpb24gaXMgYmFzZWQgb24gYSANCj4gdXNlci1hc3Npc3RlZCBvdXQtb2YtYmFuZCAo T09CKSBjaGFubmVsIGJldHdlZW4gdGhlIHNlcnZlciBhbmQgcGVlci4gDQo+IEl0IGlzIGludGVu ZGVkIGFzIGEgZ2VuZXJpYyBib290c3RyYXBwaW5nIHNvbHV0aW9uIGZvciANCj4gSW50ZXJuZXQt b2YtVGhpbmdzIGRldmljZXMgd2hpY2ggaGF2ZSBubyBwcmUtY29uZmlndXJlZCBhdXRoZW50aWNh dGlvbiANCj4gY3JlZGVudGlhbHMgYW5kIHdoaWNoIGFyZSBub3QgeWV0IHJlZ2lzdGVyZWQgb24g dGhlIGF1dGhlbnRpY2F0aW9uIA0KPiBzZXJ2ZXIuIENvbnNpZGVyIGRldmljZXMgeW91IGp1c3Qg Ym91Z2h0IG9yIGJvcnJvd2VkLg0KPiANCj4gVGhlIEVBUC1OT09CIG1ldGhvZCBpcyBtb3JlIGdl bmVyaWMgdGhhbiBtb3N0IGFkLWhvYyBib290c3RyYXBwaW5nIA0KPiBzb2x1dGlvbnMgaW4gdGhh dCBpdCBzdXBwb3J0cyBtYW55IHR5cGVzIG9mIE9PQiBjaGFubmVscy4gV2Ugc3BlY2lmeSANCj4g dGhlIGV4YWN0IGluLWJhbmQgbWVzc2FnZXMgYnV0IG9ubHkgdGhlIE9PQiBtZXNzYWdlIGNvbnRl bnRzIGFuZCBub3QgDQo+IHRoZSBPT0IgY2hhbm5lbCBkZXRhaWxzLiBBbHNvLCBFQVAtTk9PQiBz dXBwb3J0cyB1Ymljb21wIGRldmljZXMgd2l0aCANCj4gb25seSBvdXRwdXQgKGUuZy4gZGlzcGxh eSkgb3Igb25seSBpbnB1dCAoZS5nLiBjYW1lcmEpLiBNb3Jlb3ZlciwgaXQgDQo+IG1ha2VzIGNv bWJpbmVkIHVzZSBvZiBib3RoIHNlY3JlY3kgYW5kIGludGVncml0eSBvZiB0aGUgT09CIGNoYW5u ZWwgDQo+IGZvciBtb3JlIHJvYnVzdCBzZWN1cml0eSB0aGFuIHRoZSBhZC1ob2Mgc29sdXRpb25z LiBXZSBoYXZlIHB1dCBhIGxvdCANCj4gb2YgZWZmb3J0IGludG8gZGVzaWduaW5nIGEgcm9idXN0 IHNlY3VyaXR5IHByb3RvY29sLg0KPiANCj4gRm9yIG9uZSBhcHBsaWNhdGlvbiBleGFtcGxlLCB3 ZSBoYXZlIHVzZWQgYW4gZWFybGllciB2ZXJzaW9uIG9mIHRoZSANCj4gcHJvdG9jb2wgZm9yIGJv b3RzdHJhcHBpbmcgc2VjdXJpdHkgZm9yIHViaXF1aXRvdXMgZGlzcGxheXM6IHRoZSB1c2VyIA0K PiBjYW4gY29uZmlndXJlIHdpcmVsZXNzIG5ldHdvcmsgYWNjZXNzLCBsaW5rIHRoZSBkZXZpY2Ug dG8gYSBjbG91ZCANCj4gc2VydmljZSwgYW5kIHJlZ2lzdGVyIG93bmVyc2hpcCBvZiB0aGUgZGV2 aWNlIGZvciBhIHNwZWNpZmljIGNsb3VkIA0KPiB1c2VyIOKAkyBhbGwgaW4gb25lIHNpbXBsZSBz dGVwIG9mIHNjYW5uaW5nIGEgUVIgY29kZSB3aXRoIGEgc21hcnQgDQo+IHBob25lLiBUaGVyZSBz ZWVtZWQgdG8gbW9yZSBwb3RlbnRpYWwgdG8gdGhpcyBpZGVhIHRoYW4ganVzdCB1c2luZyBpdCAN Cj4gZm9yIG91ciBvd24gc3lzdGVtLCBhbmQgdGh1cyB3ZSBkZWNpZGVkIHRvIHdyaXRlIGEgZ2Vu ZXJpYyBFQVAgbWV0aG9kIGZvciBvdXQtb2YtYmFuZCBhdXRoZW50aWNhdGlvbi4NCj4gDQo+IFRo ZSBkcmFmdCBpcyBhdmFpbGFibGUgaGVyZToNCj4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWF1cmEtZWFwLW5vb2ItMDANCj4gDQo+IFBsZWFzZSBzZWUgaWYgeW91IGNhbiBtYWtl IHVzZSBvZiBpdC4gV2UgbG9vayBmb3J3YXJkIHRvIHlvdXIgZmVlZGJhY2sgDQo+IGFuZCBjb21t ZW50cy4NCj4gDQo+IFJlZ2FyZHMNCj4gLy0tTW9oaXQNCj4gDQo+IA0KPiAtLS0tLS0tLSBGb3J3 YXJkZWQgTWVzc2FnZSAtLS0tLS0tLQ0KPiBTdWJqZWN0OiAJTmV3IFZlcnNpb24gTm90aWZpY2F0 aW9uIGZvciBkcmFmdC1hdXJhLWVhcC1ub29iLTAwLnR4dA0KPiBEYXRlOiAJTW9uLCAwOCBGZWIg MjAxNiAwNDozMDozNSAtMDgwMA0KPiBGcm9tOiAJaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnDQo+ IFRvOiAJVHVvbWFzIEF1cmEgPHR1b21hcy5hdXJhQGFhbHRvLmZpPiwgTW9oaXQgU2V0aGkNCj4g PG1vaGl0QHBpdWhhLm5ldD4NCj4gDQo+IA0KPiANCj4gQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRy YWZ0LWF1cmEtZWFwLW5vb2ItMDAudHh0IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSANCj4gc3VibWl0 dGVkIGJ5IFR1b21hcyBBdXJhIGFuZCBwb3N0ZWQgdG8gdGhlIElFVEYgcmVwb3NpdG9yeS4NCj4g DQo+IE5hbWU6CQlkcmFmdC1hdXJhLWVhcC1ub29iDQo+IFJldmlzaW9uOgkwMA0KPiBUaXRsZToJ CU5pbWJsZSBvdXQtb2YtYmFuZCBhdXRoZW50aWNhdGlvbiBmb3IgRUFQIChFQVAtTk9PQikNCj4g RG9jdW1lbnQgZGF0ZToJMjAxNi0wMi0wOA0KPiBHcm91cDoJCUluZGl2aWR1YWwgU3VibWlzc2lv bg0KPiBQYWdlczoJCTM1DQo+IFVSTDpodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFm dHMvZHJhZnQtYXVyYS1lYXAtbm9vYi0wMC50eHQNCj4gU3RhdHVzOmh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWF1cmEtZWFwLW5vb2IvDQo+IEh0bWxpemVkOmh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1hdXJhLWVhcC1ub29iLTAwDQo+IA0KPiANCj4gQWJz dHJhY3Q6DQo+ICAgICBFeHRlbnNpYmxlIEF1dGhlbnRpY2F0aW9uIFByb3RvY29sIChFQVApIFtS RkMzNzQ4XSBwcm92aWRlcyBzdXBwb3J0DQo+ICAgICBmb3IgbXVsdGlwbGUgYXV0aGVudGljYXRp b24gbWV0aG9kcy4gIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgRUFQLQ0KPiAgICAgTk9PQiBh dXRoZW50aWNhdGlvbiBtZXRob2QgZm9yIG5pbWJsZSBvdXQtb2YtYmFuZCAoT09CKQ0KPiAgICAg YXV0aGVudGljYXRpb24gYW5kIGtleSBkZXJpdmF0aW9uLiAgVGhpcyBFQVAgbWV0aG9kIGlzIGlu dGVuZGVkIGZvcg0KPiAgICAgYm9vdHN0cmFwcGluZyBhbGwga2luZHMgb2YgSW50ZXJuZXQtb2Yt VGhpbmdzIChJb1QpIGRldmljZXMgdGhhdCBoYXZlDQo+ICAgICBhIG1pbmltYWwgdXNlciBpbnRl cmZhY2UgYW5kIG5vIHByZS1jb25maWd1cmVkIGF1dGhlbnRpY2F0aW9uDQo+ICAgICBjcmVkZW50 aWFscy4gIFRoZSBtZXRob2QgbWFrZXMgdXNlIG9mIGEgdXNlci1hc3Npc3RlZCBvbmUtZGlyZWN0 aW9uYWwNCj4gICAgIE9PQiBjaGFubmVsIGJldHdlZW4gdGhlIHBlZXIgZGV2aWNlIGFuZCBhdXRo ZW50aWNhdGlvbiBzZXJ2ZXIuDQo+IA0KPiANCj4gDQo+IA0KPiBQbGVhc2Ugbm90ZSB0aGF0IGl0 IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiANCj4gc3VibWlz c2lvbiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0 IHRvb2xzLmlldGYub3JnLg0KPiANCj4gVGhlIElFVEYgU2VjcmV0YXJpYXQNCj4gDQo+IA0KPiAN Cj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gc2Fh ZyBtYWlsaW5nIGxpc3QNCj4gc2FhZ0BpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3NhYWcNCg0KSmlzYyBpcyBhIHJlZ2lzdGVyZWQgY2hhcml0eSAobnVt YmVyIDExNDk3NDApIGFuZCBhIGNvbXBhbnkgbGltaXRlZCBieSBndWFyYW50ZWUgd2hpY2ggaXMg cmVnaXN0ZXJlZCBpbiBFbmdsYW5kIHVuZGVyIENvbXBhbnkgTm8uIDU3NDczMzksIFZBVCBOby4g R0IgMTk3IDA2MzIgODYuIEppc2PigJlzIHJlZ2lzdGVyZWQgb2ZmaWNlIGlzOiBPbmUgQ2FzdGxl cGFyaywgVG93ZXIgSGlsbCwgQnJpc3RvbCwgQlMyIDBKQS4gVCAwMjAzIDY5NyA1ODAwLg0KDQpK aXNjIFNlcnZpY2VzIExpbWl0ZWQgaXMgYSB3aG9sbHkgb3duZWQgSmlzYyBzdWJzaWRpYXJ5IGFu ZCBhIGNvbXBhbnkgbGltaXRlZCBieSBndWFyYW50ZWUgd2hpY2ggaXMgcmVnaXN0ZXJlZCBpbiBF bmdsYW5kIHVuZGVyIGNvbXBhbnkgbnVtYmVyIDI4ODEwMjQsIFZBVCBudW1iZXIgR0IgMTk3IDA2 MzIgODYuIFRoZSByZWdpc3RlcmVkIG9mZmljZSBpczogT25lIENhc3RsZSBQYXJrLCBUb3dlciBI aWxsLCBCcmlzdG9sIEJTMiAwSkEuIFQgMDIwMyA2OTcgNTgwMC4gIA0K From nobody Thu Feb 18 23:31:28 2016 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70B9F1A0379 for ; Thu, 18 Feb 2016 23:31:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.905 X-Spam-Level: X-Spam-Status: No, score=-1.905 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.006, WEIRD_PORT=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HnD0zHZrx2Ky for ; Thu, 18 Feb 2016 23:31:24 -0800 (PST) Received: from smtprelay.restena.lu (smtprelay.restena.lu [IPv6:2001:a18:1::62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1125A1A0199 for ; Thu, 18 Feb 2016 23:31:24 -0800 (PST) Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 3EA3C43AE0 for ; Fri, 19 Feb 2016 08:31:22 +0100 (CET) To: emu@ietf.org References: <20160208123035.1562.80507.idtracker@ietfa.amsl.com> <56B8B561.8040300@ericsson.com> <7F9C975440487E49BBD35F4FB088ED74CFCDBF14@EXMDB01.org.aalto.fi> From: Stefan Winter Openpgp: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 Message-ID: <56C6C4C4.6070201@restena.lu> Date: Fri, 19 Feb 2016 08:31:16 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <7F9C975440487E49BBD35F4FB088ED74CFCDBF14@EXMDB01.org.aalto.fi> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="xU0a9ExQwt3s3BkOxMBuCHBmskvJH5Woe" Archived-At: Subject: Re: [Emu] [saag] Fwd: New Version Notification for draft-aura-eap-noob-00.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Feb 2016 07:31:27 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --xU0a9ExQwt3s3BkOxMBuCHBmskvJH5Woe Content-Type: multipart/mixed; boundary="------------080107080509040902090007" This is a multi-part message in MIME format. --------------080107080509040902090007 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, > Of course, the benefits of EAP-NOOB will be greater in organizations wh= ich already use 802.1X authentication and which have larger numbers of Io= T devices than a single home.=20 Particularly because many "home" access points / integrated all-layer-devices do not support 802.1X so do not qualify as a NAS. Which is unfortunate and yes it would be great to have 802.1X NASes everywhere. :-) But for your scenario, it's a significant limitation if you exclude a large percentage of homes. (I don't dare make up any real percentage numbers; I'm sure this varies a lot per country and per operator) Greetings, Stefan Winter >=20 > Anything else that we need to address? >=20 > Tuomas >=20 >=20 >=20 > -----Original Message----- > From: Josh Howlett [mailto:Josh.Howlett@jisc.ac.uk]=20 > Sent: Thursday, 18 February, 2016 19:28 > To: Mohit Sethi ; saag@ietf.org; emu@ietf.o= rg > Cc: Aura Tuomas > Subject: RE: [saag] Fwd: New Version Notification for draft-aura-eap-no= ob-00.txt >=20 > Hi Mohit, >=20 > This is an interesting draft, but I'm struggling to understand how this= would be deployed in the consumer settings that the document alludes to.= For example, who do you anticipate will be operating the NAS (the consum= er?), AAA server (the vendor?), and the AAA fabric between these actors? >=20 > Josh. >=20 >> -----Original Message----- >> From: saag [mailto:saag-bounces@ietf.org] On Behalf Of Mohit Sethi >> Sent: 08 February 2016 15:34 >> To: saag@ietf.org; emu@ietf.org >> Cc: tuomas.aura@aalto.fi >> Subject: [saag] Fwd: New Version Notification for=20 >> draft-aura-eap-noob-00.txt >> >> Dear all >> >> We have just submitted a new IETF Draft titled =E2=80=9CNimble out-of-= band=20 >> authentication for EAP (EAP-NOOB)=E2=80=9D. >> >> The draft defines an EAP method where the authentication is based on a= =20 >> user-assisted out-of-band (OOB) channel between the server and peer.=20 >> It is intended as a generic bootstrapping solution for=20 >> Internet-of-Things devices which have no pre-configured authentication= =20 >> credentials and which are not yet registered on the authentication=20 >> server. Consider devices you just bought or borrowed. >> >> The EAP-NOOB method is more generic than most ad-hoc bootstrapping=20 >> solutions in that it supports many types of OOB channels. We specify=20 >> the exact in-band messages but only the OOB message contents and not=20 >> the OOB channel details. Also, EAP-NOOB supports ubicomp devices with = >> only output (e.g. display) or only input (e.g. camera). Moreover, it=20 >> makes combined use of both secrecy and integrity of the OOB channel=20 >> for more robust security than the ad-hoc solutions. We have put a lot = >> of effort into designing a robust security protocol. >> >> For one application example, we have used an earlier version of the=20 >> protocol for bootstrapping security for ubiquitous displays: the user = >> can configure wireless network access, link the device to a cloud=20 >> service, and register ownership of the device for a specific cloud=20 >> user =E2=80=93 all in one simple step of scanning a QR code with a sma= rt=20 >> phone. There seemed to more potential to this idea than just using it = >> for our own system, and thus we decided to write a generic EAP method = for out-of-band authentication. >> >> The draft is available here: >> https://tools.ietf.org/html/draft-aura-eap-noob-00 >> >> Please see if you can make use of it. We look forward to your feedback= =20 >> and comments. >> >> Regards >> /--Mohit >> >> >> -------- Forwarded Message -------- >> Subject: New Version Notification for draft-aura-eap-noob-00.txt >> Date: Mon, 08 Feb 2016 04:30:35 -0800 >> From: internet-drafts@ietf.org >> To: Tuomas Aura , Mohit Sethi >> >> >> >> >> A new version of I-D, draft-aura-eap-noob-00.txt has been successfully= =20 >> submitted by Tuomas Aura and posted to the IETF repository. >> >> Name: draft-aura-eap-noob >> Revision: 00 >> Title: Nimble out-of-band authentication for EAP (EAP-NOOB) >> Document date: 2016-02-08 >> Group: Individual Submission >> Pages: 35 >> URL:https://www.ietf.org/internet-drafts/draft-aura-eap-noob-00.txt >> Status:https://datatracker.ietf.org/doc/draft-aura-eap-noob/ >> Htmlized:https://tools.ietf.org/html/draft-aura-eap-noob-00 >> >> >> Abstract: >> Extensible Authentication Protocol (EAP) [RFC3748] provides suppor= t >> for multiple authentication methods. This document defines the EA= P- >> NOOB authentication method for nimble out-of-band (OOB) >> authentication and key derivation. This EAP method is intended fo= r >> bootstrapping all kinds of Internet-of-Things (IoT) devices that h= ave >> a minimal user interface and no pre-configured authentication >> credentials. The method makes use of a user-assisted one-directio= nal >> OOB channel between the peer device and authentication server. >> >> >> >> >> Please note that it may take a couple of minutes from the time of=20 >> submission until the htmlized version and diff are available at tools.= ietf.org. >> >> The IETF Secretariat >> >> >> >> _______________________________________________ >> saag mailing list >> saag@ietf.org >> https://www.ietf.org/mailman/listinfo/saag >=20 > Jisc is a registered charity (number 1149740) and a company limited by = guarantee which is registered in England under Company No. 5747339, VAT N= o. GB 197 0632 86. Jisc=E2=80=99s registered office is: One Castlepark, T= ower Hill, Bristol, BS2 0JA. T 0203 697 5800. >=20 > Jisc Services Limited is a wholly owned Jisc subsidiary and a company l= imited by guarantee which is registered in England under company number 2= 881024, VAT number GB 197 0632 86. The registered office is: One Castle P= ark, Tower Hill, Bristol BS2 0JA. T 0203 697 5800. =20 > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu >=20 --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=C3=A9seau T=C3=A9l=C3=A9informatique de l'Education= Nationale et de la Recherche 2, avenue de l'Universit=C3=A9 L-4365 Esch-sur-Alzette Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 --------------080107080509040902090007 Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------080107080509040902090007-- --xU0a9ExQwt3s3BkOxMBuCHBmskvJH5Woe Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJWxsTKAAoJEMDeajWKOdxmJPMQALIHTWJWeovxwnmt+7wgojV3 x6F1OnlMXD2HZkd7+kf6UrrWxV6fByrN0gbCZrNZ8/DRBAcfthSrdDsIroruOPql AfBkyMWTHTHn5h39vtJMy5tfy9o8mhYNiBgRRNnsaOMHA4sCHjKKAwjoNPeF3tB5 aMOL6WRuI8mq6ZL0aFQfZG0s6VnswIBJdqpGMhC4kuO/jNkDJaKHnm4WpxuqIJvP KwEd9tG/IQZgUOwQq+dqwSmYLZ3AGnZjTMj7sO4xdkkkPrpR2GKXXXuoEqVxC8sp NyBlHqStTBnZ0YfJEeLdkKh/F7Fn5hOOvsNiJe7PssmbW6j24q77lJUAabuGgXic vtyEYvdnMtQIC0OFAFi4qTL7Y7OBXgQlA6TReZqwiC8xP1hANpNO+neWG9+d6+sY giNzjS5zKAcNgveh69fquCGBCE6NVmOK8/74I/8/bczsWaB2md5sOLYMpH3Qmshu yyjl4s2+lvj5/NWVa2t7HULHBanlFdsgEe0LoKdJMljUucl0p6pyc6VcIsJ/2C8C g46gSl0KhfrjpDTouCxEN8F1YsZ6b6Wa9fh9GGPxKoxq7q+Mh5dYph/wnfaBnJLc YnMgnO8fyIHtsus1SaZtZMf55ABkLbgklkec2pXew6o69aCDu1iSadP7VIOVyuaf DIC3Cp3bl1yYeZQiHpcQ =c33i -----END PGP SIGNATURE----- --xU0a9ExQwt3s3BkOxMBuCHBmskvJH5Woe-- From nobody Mon Feb 29 09:08:37 2016 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B8A51B37D6; Mon, 29 Feb 2016 09:08:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aBVTvtg3dv0k; Mon, 29 Feb 2016 09:08:32 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88D461B37D4; Mon, 29 Feb 2016 09:08:31 -0800 (PST) X-AuditID: c1b4fb2d-f79836d000006396-aa-56d47b0d63f6 Received: from ESESSHC013.ericsson.se (Unknown_Domain [153.88.183.57]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id AD.3D.25494.D0B74D65; Mon, 29 Feb 2016 18:08:29 +0100 (CET) Received: from nomadiclab.lmf.ericsson.se (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.59) with Microsoft SMTP Server id 14.3.248.2; Mon, 29 Feb 2016 18:08:29 +0100 Received: from nomadiclab.lmf.ericsson.se (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 46FB94EF83; Mon, 29 Feb 2016 19:11:15 +0200 (EET) Received: from [127.0.0.1] (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id B3BF14E9B6; Mon, 29 Feb 2016 19:11:14 +0200 (EET) To: Stefan Winter , , , "tuomas.aura@aalto.fi" References: <20160208123035.1562.80507.idtracker@ietfa.amsl.com> <56B8B561.8040300@ericsson.com> <7F9C975440487E49BBD35F4FB088ED74CFCDBF14@EXMDB01.org.aalto.fi> <56C6C4C4.6070201@restena.lu> From: Mohit Sethi Message-ID: <56D47B0D.5040000@ericsson.com> Date: Mon, 29 Feb 2016 19:08:29 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56C6C4C4.6070201@restena.lu> Content-Type: multipart/alternative; boundary="------------060400090900010701070409" X-Virus-Scanned: ClamAV using ClamSMTP X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrHLMWRmVeSWpSXmKPExsUyM2K7pS5v9ZUwg/ZtehbH1q9lsZjS38lk Ma+hkd3izcSN7A4sHsdfL2b1WLLkJ5PH8i6fAOYoLpuU1JzMstQifbsEroz9598wF7yprTjw w72B8WBGFyMnh4SAicTH9ZuZIWwxiQv31rOB2EIChxklXs9V6WLkArK3MUocX7SGBcJZyyjx ckMjE4Qzj1Hi5+ImFpAWYYEIidb358BGiQjUSdz5NBmqYzqTxLaHp8HmsgnoSXSeOw5UxMHB K6At0bhREiTMIqAq8Xz/RbBeUaA5hzu72EFsXgFBiZMzn4DN5xTQkjizZA4TiM0sECbxumse G8TZahJXz21ihjhbXWJrxwHGCYxCs5C0z0LSMgtoM7OAvcSDrWUQYXmJ5q2zmSFsfYnrd+6z IosvYGRbxShanFpcnJtuZKyXWpSZXFycn6eXl1qyiREYKwe3/Nbdwbj6teMhRgEORiUe3g3O l8OEWBPLiitzDzFKcDArifCu87wSJsSbklhZlVqUH19UmpNafIhRmoNFSZyX7RNQtUB6Yklq dmpqQWoRTJaJg1OqgVEuQ+nuauWT7yYbXBZianDuexu/m/0Bm97Sv6aT3j+YbirvJ2mxuuNn iXjJ3i7uiNNih7iqAph/KppW3ItiF61Q6FibMqej3K0o2+j4TPX2i7nevT+zCxbHMZocTFY3 WTL7Q3DjnG2ykYu4fA6E/FDyu3v/T9lhxSWXbDrmCmb/PJ4dYrmNSYmlOCPRUIu5qDgRAPhT gSeRAgAA Archived-At: Subject: Re: [Emu] [saag] Fwd: New Version Notification for draft-aura-eap-noob-00.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Feb 2016 17:08:35 -0000 --------------060400090900010701070409 Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 8bit Hi Stefan It is hard to have an exact number on how many "home" access points / integrated all-layer-devices do or do not support 802.1X. In many cases, support can be added to the APs with a software update if there is demand. We believe that given the benefits of this solution and the added security, the deployment of such NAS would increase in general. /--Mohit PS: Let's keep the future discussion for this draft on the SAAG mailing list for now. On 02/19/2016 09:31 AM, Stefan Winter wrote: > Hi, > >> Of course, the benefits of EAP-NOOB will be greater in organizations which already use 802.1X authentication and which have larger numbers of IoT devices than a single home. > Particularly because many "home" access points / integrated > all-layer-devices do not support 802.1X so do not qualify as a NAS. > > Which is unfortunate and yes it would be great to have 802.1X NASes > everywhere. :-) But for your scenario, it's a significant limitation if > you exclude a large percentage of homes. > > (I don't dare make up any real percentage numbers; I'm sure this varies > a lot per country and per operator) > > Greetings, > > Stefan Winter > > >> Anything else that we need to address? >> >> Tuomas >> >> >> >> -----Original Message----- >> From: Josh Howlett [mailto:Josh.Howlett@jisc.ac.uk] >> Sent: Thursday, 18 February, 2016 19:28 >> To: Mohit Sethi ; saag@ietf.org; emu@ietf.org >> Cc: Aura Tuomas >> Subject: RE: [saag] Fwd: New Version Notification for draft-aura-eap-noob-00.txt >> >> Hi Mohit, >> >> This is an interesting draft, but I'm struggling to understand how this would be deployed in the consumer settings that the document alludes to. For example, who do you anticipate will be operating the NAS (the consumer?), AAA server (the vendor?), and the AAA fabric between these actors? >> >> Josh. >> >>> -----Original Message----- >>> From: saag [mailto:saag-bounces@ietf.org] On Behalf Of Mohit Sethi >>> Sent: 08 February 2016 15:34 >>> To: saag@ietf.org; emu@ietf.org >>> Cc: tuomas.aura@aalto.fi >>> Subject: [saag] Fwd: New Version Notification for >>> draft-aura-eap-noob-00.txt >>> >>> Dear all >>> >>> We have just submitted a new IETF Draft titled Nimble out-of-band >>> authentication for EAP (EAP-NOOB). >>> >>> The draft defines an EAP method where the authentication is based on a >>> user-assisted out-of-band (OOB) channel between the server and peer. >>> It is intended as a generic bootstrapping solution for >>> Internet-of-Things devices which have no pre-configured authentication >>> credentials and which are not yet registered on the authentication >>> server. Consider devices you just bought or borrowed. >>> >>> The EAP-NOOB method is more generic than most ad-hoc bootstrapping >>> solutions in that it supports many types of OOB channels. We specify >>> the exact in-band messages but only the OOB message contents and not >>> the OOB channel details. Also, EAP-NOOB supports ubicomp devices with >>> only output (e.g. display) or only input (e.g. camera). Moreover, it >>> makes combined use of both secrecy and integrity of the OOB channel >>> for more robust security than the ad-hoc solutions. We have put a lot >>> of effort into designing a robust security protocol. >>> >>> For one application example, we have used an earlier version of the >>> protocol for bootstrapping security for ubiquitous displays: the user >>> can configure wireless network access, link the device to a cloud >>> service, and register ownership of the device for a specific cloud >>> user all in one simple step of scanning a QR code with a smart >>> phone. There seemed to more potential to this idea than just using it >>> for our own system, and thus we decided to write a generic EAP method for out-of-band authentication. >>> >>> The draft is available here: >>> https://tools.ietf.org/html/draft-aura-eap-noob-00 >>> >>> Please see if you can make use of it. We look forward to your feedback >>> and comments. >>> >>> Regards >>> /--Mohit >>> >>> >>> -------- Forwarded Message -------- >>> Subject: New Version Notification for draft-aura-eap-noob-00.txt >>> Date: Mon, 08 Feb 2016 04:30:35 -0800 >>> From: internet-drafts@ietf.org >>> To: Tuomas Aura , Mohit Sethi >>> >>> >>> >>> >>> A new version of I-D, draft-aura-eap-noob-00.txt has been successfully >>> submitted by Tuomas Aura and posted to the IETF repository. >>> >>> Name: draft-aura-eap-noob >>> Revision: 00 >>> Title: Nimble out-of-band authentication for EAP (EAP-NOOB) >>> Document date: 2016-02-08 >>> Group: Individual Submission >>> Pages: 35 >>> URL:https://www.ietf.org/internet-drafts/draft-aura-eap-noob-00.txt >>> Status:https://datatracker.ietf.org/doc/draft-aura-eap-noob/ >>> Htmlized:https://tools.ietf.org/html/draft-aura-eap-noob-00 >>> >>> >>> Abstract: >>> Extensible Authentication Protocol (EAP) [RFC3748] provides support >>> for multiple authentication methods. This document defines the EAP- >>> NOOB authentication method for nimble out-of-band (OOB) >>> authentication and key derivation. This EAP method is intended for >>> bootstrapping all kinds of Internet-of-Things (IoT) devices that have >>> a minimal user interface and no pre-configured authentication >>> credentials. The method makes use of a user-assisted one-directional >>> OOB channel between the peer device and authentication server. >>> >>> >>> >>> >>> Please note that it may take a couple of minutes from the time of >>> submission until the htmlized version and diff are available at tools.ietf.org. >>> >>> The IETF Secretariat >>> >>> >>> >>> _______________________________________________ >>> saag mailing list >>> saag@ietf.org >>> https://www.ietf.org/mailman/listinfo/saag >> Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jiscs registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. >> >> Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800. >> _______________________________________________ >> Emu mailing list >> Emu@ietf.org >> https://www.ietf.org/mailman/listinfo/emu >> > > > > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu --------------060400090900010701070409 Content-Type: text/html; charset="windows-1252" Content-Transfer-Encoding: 8bit Hi Stefan

It is hard to have an exact number on how many "home" access points / integrated all-layer-devices do or do not support 802.1X. In many cases, support can be added to the APs with a software update if there is demand. We believe that given the benefits of this solution and the added security, the deployment of such NAS would increase in general.

/--Mohit

PS: Let's keep the future discussion for this draft on the SAAG mailing list for now.

On 02/19/2016 09:31 AM, Stefan Winter wrote:
Hi,


Of course, the benefits of EAP-NOOB will be greater in organizations which already use 802.1X authentication and which have larger numbers of IoT devices than a single home. 

Particularly because many "home" access points / integrated
all-layer-devices do not support 802.1X so do not qualify as a NAS.

Which is unfortunate and yes it would be great to have 802.1X NASes
everywhere. :-) But for your scenario, it's a significant limitation if
you exclude a large percentage of homes.

(I don't dare make up any real percentage numbers; I'm sure this varies
a lot per country and per operator)

Greetings,

Stefan Winter



Anything else that we need to address?

Tuomas



-----Original Message-----
From: Josh Howlett [mailto:Josh.Howlett@jisc.ac.uk] 
Sent: Thursday, 18 February, 2016 19:28
To: Mohit Sethi <mohit.m.sethi@ericsson.com>; saag@ietf.org; emu@ietf.org
Cc: Aura Tuomas <tuomas.aura@aalto.fi>
Subject: RE: [saag] Fwd: New Version Notification for draft-aura-eap-noob-00.txt

Hi Mohit,

This is an interesting draft, but I'm struggling to understand how this would be deployed in the consumer settings that the document alludes to. For example, who do you anticipate will be operating the NAS (the consumer?), AAA server (the vendor?), and the AAA fabric between these actors?

Josh.


-----Original Message-----
From: saag [mailto:saag-bounces@ietf.org] On Behalf Of Mohit Sethi
Sent: 08 February 2016 15:34
To: saag@ietf.org; emu@ietf.org
Cc: tuomas.aura@aalto.fi
Subject: [saag] Fwd: New Version Notification for 
draft-aura-eap-noob-00.txt

Dear all

We have just submitted a new IETF Draft titled Nimble out-of-band 
authentication for EAP (EAP-NOOB).

The draft defines an EAP method where the authentication is based on a 
user-assisted out-of-band (OOB) channel between the server and peer. 
It is intended as a generic bootstrapping solution for 
Internet-of-Things devices which have no pre-configured authentication 
credentials and which are not yet registered on the authentication 
server. Consider devices you just bought or borrowed.

The EAP-NOOB method is more generic than most ad-hoc bootstrapping 
solutions in that it supports many types of OOB channels. We specify 
the exact in-band messages but only the OOB message contents and not 
the OOB channel details. Also, EAP-NOOB supports ubicomp devices with 
only output (e.g. display) or only input (e.g. camera). Moreover, it 
makes combined use of both secrecy and integrity of the OOB channel 
for more robust security than the ad-hoc solutions. We have put a lot 
of effort into designing a robust security protocol.

For one application example, we have used an earlier version of the 
protocol for bootstrapping security for ubiquitous displays: the user 
can configure wireless network access, link the device to a cloud 
service, and register ownership of the device for a specific cloud 
user  all in one simple step of scanning a QR code with a smart 
phone. There seemed to more potential to this idea than just using it 
for our own system, and thus we decided to write a generic EAP method for out-of-band authentication.

The draft is available here:
https://tools.ietf.org/html/draft-aura-eap-noob-00

Please see if you can make use of it. We look forward to your feedback 
and comments.

Regards
/--Mohit


-------- Forwarded Message --------
Subject: 	New Version Notification for draft-aura-eap-noob-00.txt
Date: 	Mon, 08 Feb 2016 04:30:35 -0800
From: 	internet-drafts@ietf.org
To: 	Tuomas Aura <tuomas.aura@aalto.fi>, Mohit Sethi
<mohit@piuha.net>



A new version of I-D, draft-aura-eap-noob-00.txt has been successfully 
submitted by Tuomas Aura and posted to the IETF repository.

Name:		draft-aura-eap-noob
Revision:	00
Title:		Nimble out-of-band authentication for EAP (EAP-NOOB)
Document date:	2016-02-08
Group:		Individual Submission
Pages:		35
URL:https://www.ietf.org/internet-drafts/draft-aura-eap-noob-00.txt
Status:https://datatracker.ietf.org/doc/draft-aura-eap-noob/
Htmlized:https://tools.ietf.org/html/draft-aura-eap-noob-00


Abstract:
    Extensible Authentication Protocol (EAP) [RFC3748] provides support
    for multiple authentication methods.  This document defines the EAP-
    NOOB authentication method for nimble out-of-band (OOB)
    authentication and key derivation.  This EAP method is intended for
    bootstrapping all kinds of Internet-of-Things (IoT) devices that have
    a minimal user interface and no pre-configured authentication
    credentials.  The method makes use of a user-assisted one-directional
    OOB channel between the peer device and authentication server.




Please note that it may take a couple of minutes from the time of 
submission until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat



_______________________________________________
saag mailing list
saag@ietf.org
https://www.ietf.org/mailman/listinfo/saag

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jiscs registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.  
_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu






_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu

--------------060400090900010701070409--