From nobody Sun Jul 1 05:41:31 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5D7B130E79 for ; Sun, 1 Jul 2018 05:41:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rpaZvy3m5LW5 for ; Sun, 1 Jul 2018 05:41:26 -0700 (PDT) Received: from p130.piuha.net (p130.piuha.net [193.234.218.130]) by ietfa.amsl.com (Postfix) with ESMTP id B6FC5130DE6 for ; Sun, 1 Jul 2018 05:41:26 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by p130.piuha.net (Postfix) with ESMTP id F16BF6601EC; Sun, 1 Jul 2018 15:41:23 +0300 (EEST) Received: from p130.piuha.net ([127.0.0.1]) by localhost (p130.piuha.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dt6lMTvrQVeX; Sun, 1 Jul 2018 15:41:22 +0300 (EEST) Received: from [127.0.0.1] (p130.piuha.net [IPv6:2001:14b8:1829::130]) by p130.piuha.net (Postfix) with ESMTPS id 5189A6600BC; Sun, 1 Jul 2018 15:41:22 +0300 (EEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Jari Arkko In-Reply-To: <58425EC0-E1F6-4BCD-9D99-72E269B5598A@ericsson.com> Date: Sun, 1 Jul 2018 15:41:21 +0300 Cc: "emu@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <9C578922-DB50-4369-BC07-2A58083D5FE3@piuha.net> References: <58425EC0-E1F6-4BCD-9D99-72E269B5598A@ericsson.com> To: John Mattsson X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [Emu] I-D Action: draft-ietf-emu-rfc5448bis-00.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Jul 2018 12:41:30 -0000 Thanks for your review and suggestions, John. > - I think the document still need to have the first-page header = "Updates: 4187". My understanding of Obsoletes is that it replaces the = older document and that the new document can be used alone without = reference to the older document. >=20 > - Section 1 "is an update to RFC 5448." > I think the word update is a bit confusing as the documents obsoletes = RFC 5448. Yes. Fixed in my working group (to be submitted as -01 before the = deadlines). > - "2008 version" and "5G version", I think it is better to talk about = Releases here, i.e. Release 8 and 15. Also "that reference"?. = Suggestion: >=20 > "RFC 5448 referred to the Release 8 version of [TS-3GPP.24.302] and = this update refers to the the first 5G version, Release 15.=E2=80=9D Yes. Your suggestion works for me. > - "reaching their final Release 15 status" > What is meant with final here? 3GPP are stable at some point, but the = specifications in a release are never final=E2=80=A6. It is a bit fuzzy given the differences in publication styles. I changed = the wording to: Editor's Note: The publication of this RFC depends on its normative = references [TS-3GPP.24.302] and [TS-3GPP.33.501] reaching a stable = status for Release 15, as indicated by 3GPP. This is expected to happen = shortly. > - Section 2 should follow RFC 8174 and say: >=20 > "The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL > NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", > "MAY", and "OPTIONAL" in this document are to be interpreted as > described in BCP 14 [RFC2119] [RFC8174] when, and only when, they > appear in all capitals, as shown here." >=20 > - RFC 5226 has been obsoleted by RFC 8126 >=20 > - [FIPS.180-2.2002] has been superseeded by FIPS 180-4 Yes. I have changed these, and pointed out the change in the =E2=80=9CChan= ges from RFC 5448=E2=80=9D section. > - As 23.501, 24.302, and 33.501 points to the Release 15 version, I = think all the other 3GPP specifications 33.102, 33.402, etc. should = refer to Rel-15 as well. The technical specifications in a Release are = meant to be used together.=20 Ok. > - "[FIPS.180-1.1995]", this reference is not needed, SHA-1 is also = defined (without changes) in FIPS 180-2, 180-3, and 180-4 Ack. > - The third column in the table in Section 8.3 is not aligned. Fixed. Jari From nobody Mon Jul 2 07:06:36 2018 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 73E53131169; Mon, 2 Jul 2018 07:06:23 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.81.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153054038345.16131.12990758460623096313@ietfa.amsl.com> Date: Mon, 02 Jul 2018 07:06:23 -0700 Archived-At: Subject: [Emu] I-D Action: draft-ietf-emu-rfc5448bis-01.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.26 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 14:06:29 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the EAP Method Update WG of the IETF. Title : Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA') Authors : Jari Arkko Vesa Lehtovirta Vesa Torvinen Pasi Eronen Filename : draft-ietf-emu-rfc5448bis-01.txt Pages : 34 Date : 2018-07-02 Abstract: This specification defines a new EAP method, EAP-AKA', a small revision of the EAP-AKA method. The change is a new key derivation function that binds the keys derived within the method to the name of the access network. The new key derivation mechanism has been defined in the 3rd Generation Partnership Project (3GPP). This specification allows its use in EAP in an interoperable manner. In addition, EAP-AKA' employs SHA-256 instead of SHA-1. This specification also updates RFC 4187 EAP-AKA to prevent bidding down attacks from EAP-AKA'. This version of the EAP-AKA' specification updates a reference to constructing one field in the protocol, so that EAP-AKA' becomes compatible with 5G deployments as well. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-emu-rfc5448bis/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-emu-rfc5448bis-01 https://datatracker.ietf.org/doc/html/draft-ietf-emu-rfc5448bis-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-emu-rfc5448bis-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jul 3 00:52:19 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 53537130F6F for ; Tue, 3 Jul 2018 00:52:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.301 X-Spam-Level: X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=aalto.fi Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gb--CJSAa_a7 for ; Tue, 3 Jul 2018 00:52:12 -0700 (PDT) Received: from smtp-out-01.aalto.fi (testsmtp.aalto.fi [130.233.228.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DAA82130F3B for ; Tue, 3 Jul 2018 00:52:10 -0700 (PDT) Received: from smtp-out-01.aalto.fi (localhost.localdomain [127.0.0.1]) by localhost (Email Security Appliance) with SMTP id 8EF2411591F_B3B2B31B; Tue, 3 Jul 2018 07:52:17 +0000 (GMT) Received: from exng3.org.aalto.fi (exng3.org.aalto.fi [130.233.223.22]) (using TLSv1.2 with cipher AES256-GCM-SHA384 (256/256 bits)) (Client CN "exng3.org.aalto.fi", Issuer "org.aalto.fi RootCA" (not verified)) by smtp-out-01.aalto.fi (Sophos Email Appliance) with ESMTPS id 5371E115838_B3B2B31F; Tue, 3 Jul 2018 07:52:17 +0000 (GMT) Received: from exng1.org.aalto.fi (130.233.223.20) by exng3.org.aalto.fi (130.233.223.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.35; Tue, 3 Jul 2018 10:52:05 +0300 Received: from exng1.org.aalto.fi ([fe80::80c3:a9b6:79ec:a14e]) by exng1.org.aalto.fi ([fe80::80c3:a9b6:79ec:a14e%18]) with mapi id 15.01.1261.039; Tue, 3 Jul 2018 10:52:05 +0300 From: Aura Tuomas To: "emu@ietf.org" CC: Mohit Sethi Thread-Topic: New Version Notification for draft-aura-eap-noob-03.txt Thread-Index: AQHUEfzG5jTahnRGLU2tdJG7rF4m96R9Gb+Q Date: Tue, 3 Jul 2018 07:52:05 +0000 Message-ID: <72de04eae8af4c34a8f3e8667aaf33b7@aalto.fi> References: <153053304325.28202.9959777537506625741.idtracker@ietfa.amsl.com> In-Reply-To: <153053304325.28202.9959777537506625741.idtracker@ietfa.amsl.com> Accept-Language: fi-FI, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [130.233.0.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-SASI-RCODE: 200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aalto.fi; h=from:to:cc:subject:date:message-id:references:in-reply-to:content-type:content-transfer-encoding:mime-version; s=its18; bh=i1ZbkGqc8BrOoykbSv1h+LMBB21OxEAcF2k2yh3OLh8=; b=be4UML1UtqHXb1NXB9vHiU13Qi/EEB6OtvrVOyYeLdRfB91PAHgWg6kbc9Swrs1US60wg1ZE8y5RhK6k3j4T4n+dtitR6BGsAKKaN0V4fE6b4XB6hXBUU6UDk4dQcj+/PlXNJPhxZC4Foq6x41lB1esg6SIncdm3UTh0eRKE6MWDwmXjdzHpnei7/tenslceTGhQ/jIh1MhSSoO8dFdxqtvNkGNWiojKSiAfjgTBv00ZatHCV2lub3YBdaUBK78ImkMn8HdwhGJ1xjSfKP5JixxcYKt78SAlL88c1R4blE7aaOd9KJ0AGEdcCBXm5lfcY7BVc95ZG3oH/GYsdbgDCA== Archived-At: Subject: [Emu] FW: New Version Notification for draft-aura-eap-noob-03.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 07:52:18 -0000 RGVhciBhbGwsDQoNCldlIGhhdmUgc3VibWl0dGVkIGEgbmV3IHZlcnNpb24gb2Ygb3VyIGRyYWZ0 IHRpdGxlZCDigJxOaW1ibGUgb3V0LW9mLWJhbmQgYXV0aGVudGljYXRpb24gZm9yIEVBUCAoRUFQ LU5PT0Ip4oCdOg0KDQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYXVyYS1lYXAt bm9vYi0wMw0KDQpUaGUgZHJhZnQgZGVmaW5lcyBhbiBFQVAgbWV0aG9kIHdoZXJlIHRoZSBhdXRo ZW50aWNhdGlvbiBpcyBiYXNlZCBvbiBhIHVzZXItYXNzaXN0ZWQgb3V0LW9mLWJhbmQgKE9PQikg Y2hhbm5lbCBiZXR3ZWVuIHRoZSBzZXJ2ZXIgYW5kIHBlZXIuIEl0IGlzIGludGVuZGVkIGFzIGEg Z2VuZXJpYyBib290c3RyYXBwaW5nIHNvbHV0aW9uIGZvciBJbnRlcm5ldC1vZi1UaGluZ3MgZGV2 aWNlcyB3aGljaCBoYXZlIG5vIHByZS1jb25maWd1cmVkIGF1dGhlbnRpY2F0aW9uIGNyZWRlbnRp YWxzIGFuZCB3aGljaCBhcmUgbm90IHlldCByZWdpc3RlcmVkIG9uIHRoZSBhdXRoZW50aWNhdGlv biBzZXJ2ZXIuIA0KDQpTaW5jZSB0aGUgcHJldmlvdXMgdmVyc2lvbiwgd2UgaGF2ZSBpbXByb3Zl ZCB0aGUgY2xhcml0eSBvZiB0aGUgc3BlY2lmaWNhdGlvbiBhbmQgcmVzb2x2ZWQgbWlub3IgaXNz dWVzIHRoYXQgd2VyZSBmb3VuZCBpbiB0aGUgaW1wbGVtZW50YXRpb24gYW5kIGZvcm1hbCBtb2Rl bGluZyBvZiB0aGUgcHJvdG9jb2wuIFRoZSBxdWFsaXR5IG9mIHRoZSBwcm90b2NvbCBzcGVjaWZp Y2F0aW9uIGhhcyBpbXByb3ZlZCBhIGxvdCBhbmQgaXQgc2hvdWxkIG5vdyBiZSBxdWl0ZSBlYXN5 IHRvIHJlYWQgYW5kIGltcGxlbWVudC4gVGhlIGxpc3Qgb2YgdXBkYXRlcyBjYW4gYmUgZm91bmQg ZnJvbSB0aGUgdmVyc2lvbiBoaXN0b3J5IGluIHRoZSBhcHBlbmRpeCBvZiB0aGUgZHJhZnQuIFdl IGFyZSBzdGlsbCBvbiB0aGUgcHJvY2VzcyBvZiBtb2RlbGluZyB2YXJpb3VzIGZhaWx1cmUgY29u ZGl0aW9ucywgc3VjaCBhcyBpbnRlbnRpb25hbGx5IGRyb3BwZWQgbWVzc2FnZXMsIGFuZCBtaWdo dCBtYWtlIG1pbm9yIG1vZGlmaWNhdGlvbnMgZm9yIHRoZSBuZXh0IHZlcnNpb24gdG8gaW1wcm92 ZSB0aGUgcm9idXN0bmVzcyBvZiBmYWlsdXJlIHJlY292ZXJ5IGluIHNvbWUgc3BlY2lhbCBjYXNl cy4gDQoNClRoZSBvcGVuIHNvdXJjZSBpbXBsZW1lbnRhdGlvbiBoYXMgYmVlbiB1cGRhdGVkIHRv IG1hdGNoIHRoZSBuZXcgdmVyc2lvbiwgYW5kIHRoZSBtQ1JMMiBmb3JtYWwgbW9kZWwgaXMgYWxz byBhdmFpbGFibGU6DQpodHRwczovL2dpdGh1Yi5jb20vdHVvbWF1cmEvZWFwLW5vb2IgDQoNCldl IGxvb2sgZm9yd2FyZCB0byB5b3VyIGZlZWRiYWNrIGFuZCBjb21tZW50cyBoZXJlIG9yIG9uIHRo ZSBTQUFHIG1haWxpbmcgbGlzdC4NCg0KUmVnYXJkcywNClR1b21hcw0KDQoNCi0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmcgPGludGVybmV0 LWRyYWZ0c0BpZXRmLm9yZz4gDQpTZW50OiBNb25kYXksIDIgSnVseSwgMjAxOCAxNTowNA0KVG86 IE1vaGl0IFNldGhpIDxtb2hpdEBwaXVoYS5uZXQ+OyBBdXJhIFR1b21hcyA8dHVvbWFzLmF1cmFA YWFsdG8uZmk+DQpTdWJqZWN0OiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LWF1 cmEtZWFwLW5vb2ItMDMudHh0DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LWF1cmEt ZWFwLW5vb2ItMDMudHh0IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgTW9oaXQg U2V0aGkgYW5kIHBvc3RlZCB0byB0aGUgSUVURiByZXBvc2l0b3J5Lg0KDQpOYW1lOgkJZHJhZnQt YXVyYS1lYXAtbm9vYg0KUmV2aXNpb246CTAzDQpUaXRsZToJCU5pbWJsZSBvdXQtb2YtYmFuZCBh dXRoZW50aWNhdGlvbiBmb3IgRUFQIChFQVAtTk9PQikNCkRvY3VtZW50IGRhdGU6CTIwMTgtMDct MDINCkdyb3VwOgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQpQYWdlczoJCTU0DQpVUkw6ICAgICAg ICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWF1cmEtZWFw LW5vb2ItMDMudHh0DQpTdGF0dXM6ICAgICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kb2MvZHJhZnQtYXVyYS1lYXAtbm9vYi8NCkh0bWxpemVkOiAgICAgICBodHRwczovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtYXVyYS1lYXAtbm9vYi0wMw0KSHRtbGl6ZWQ6ICAgICAgIGh0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtYXVyYS1lYXAtbm9vYg0K RGlmZjogICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1h dXJhLWVhcC1ub29iLTAzDQoNCkFic3RyYWN0Og0KICAgRXh0ZW5zaWJsZSBBdXRoZW50aWNhdGlv biBQcm90b2NvbCAoRUFQKSBwcm92aWRlcyBzdXBwb3J0IGZvcg0KICAgbXVsdGlwbGUgYXV0aGVu dGljYXRpb24gbWV0aG9kcy4gIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgRUFQLU5PT0INCiAg IGF1dGhlbnRpY2F0aW9uIG1ldGhvZCBmb3IgbmltYmxlIG91dC1vZi1iYW5kIChPT0IpIGF1dGhl bnRpY2F0aW9uIGFuZA0KICAga2V5IGRlcml2YXRpb24uICBUaGlzIEVBUCBtZXRob2QgaXMgaW50 ZW5kZWQgZm9yIGJvb3RzdHJhcHBpbmcgYWxsDQogICBraW5kcyBvZiBJbnRlcm5ldC1vZi1UaGlu Z3MgKElvVCkgZGV2aWNlcyB0aGF0IGhhdmUgYSBtaW5pbWFsIHVzZXINCiAgIGludGVyZmFjZSBh bmQgbm8gcHJlLWNvbmZpZ3VyZWQgYXV0aGVudGljYXRpb24gY3JlZGVudGlhbHMuICBUaGUNCiAg IG1ldGhvZCBtYWtlcyB1c2Ugb2YgYSB1c2VyLWFzc2lzdGVkIG9uZS1kaXJlY3Rpb25hbCBPT0Ig Y2hhbm5lbA0KICAgYmV0d2VlbiB0aGUgcGVlciBkZXZpY2UgYW5kIGF1dGhlbnRpY2F0aW9uIHNl cnZlci4NCg0KICANCg0KDQo= From nobody Tue Jul 3 09:02:54 2018 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A26F0131038; Tue, 3 Jul 2018 09:00:15 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: ekr@rtfm.com, emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.81.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153063361565.4893.865686536796155573.idtracker@ietfa.amsl.com> Date: Tue, 03 Jul 2018 09:00:15 -0700 Archived-At: Subject: [Emu] emu - Requested session has been scheduled for IETF 102 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.26 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 16:00:24 -0000 Dear Joseph Salowey, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. emu Session 1 (1:30 requested) Friday, 20 July 2018, Morning Session I 0930-1130 Room Name: Notre Dame size: 50 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/102/sessions/emu.ics Request Information: --------------------------------------------------------- Working Group Name: EAP Method Update Area Name: Security Area Session Requester: Joseph Salowey Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 30 Conflicts to Avoid: First Priority: saag tls cfrg Second Priority: curdle uta secdispatch oauth Third Priority: sacm quic kitten bier acme People who must be present: Eric Rescorla Jari Arkko Joseph A. Salowey Alan DeKok John Mattsson Resources Requested: Special Requests: --------------------------------------------------------- From nobody Tue Jul 17 11:11:33 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88FA6130EF2 for ; Tue, 17 Jul 2018 11:11:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=So1PJzud; dkim=pass (1024-bit key) header.d=ericsson.com header.b=BEG46Bnu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3RVRoy1F-5uK for ; Tue, 17 Jul 2018 11:11:29 -0700 (PDT) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE630130E47 for ; Tue, 17 Jul 2018 11:11:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1531851087; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=DFf1fY7UCVyIKR+lxwbrBOZYEhxzp++nwdfe0NYo4Jc=; b=So1PJzudJGaQ+uehAPa9NcTESCObFbBpf/YSGujvj935ONGMukMxY4lAyiPG0JO3 ewxq7uA2hojs3cKr4aXoh838JRtdGTRozTHDDomt1uBPYC93fbYK2mjdLzetIW7t hXXgwg0aaalpyUYI0F27wo8qfmx1nilQoECtuLQJpXI=; X-AuditID: c1b4fb25-e23ff70000006310-ff-5b4e314fe58c Received: from ESESBMB504.ericsson.se (Unknown_Domain [153.88.183.117]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id E0.1E.25360.F413E4B5; Tue, 17 Jul 2018 20:11:27 +0200 (CEST) Received: from ESESSMR504.ericsson.se (153.88.183.126) by ESESBMB504.ericsson.se (153.88.183.117) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Tue, 17 Jul 2018 20:11:26 +0200 Received: from ESESBMB504.ericsson.se (153.88.183.171) by ESESSMR504.ericsson.se (153.88.183.126) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Tue, 17 Jul 2018 20:11:26 +0200 Received: from EUR02-AM5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB504.ericsson.se (153.88.183.171) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Tue, 17 Jul 2018 20:11:26 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=DFf1fY7UCVyIKR+lxwbrBOZYEhxzp++nwdfe0NYo4Jc=; b=BEG46BnuFC4Cmaw5w11/KngcVyPgfsd0gesJwUYXdyxyCDEe6hM+qYQtVMkvkDTBlatNzH1Ugd+1u+4v0iUeuz3eNn6qTq65sQJeSl+O6crS8AZ0QU0dPbuHTkO2HH6yct7NylZPFxH/tG3S/vBDv8wMsvfkICb5Kewj0KV0a5g= Received: from AM0PR07MB4388.eurprd07.prod.outlook.com (52.133.61.33) by AM0PR07MB4001.eurprd07.prod.outlook.com (52.134.82.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.973.16; Tue, 17 Jul 2018 18:11:26 +0000 Received: from AM0PR07MB4388.eurprd07.prod.outlook.com ([fe80::3d7f:2499:58bd:bc4c]) by AM0PR07MB4388.eurprd07.prod.outlook.com ([fe80::3d7f:2499:58bd:bc4c%5]) with mapi id 15.20.0973.016; Tue, 17 Jul 2018 18:11:25 +0000 From: John Mattsson To: "emu@ietf.org" Thread-Topic: [Emu] I-D Action: draft-ietf-emu-rfc5448bis-01.txt Thread-Index: AQHUHfmT/aUglWA03EW4GwLott0N4Q== Date: Tue, 17 Jul 2018 18:11:25 +0000 Message-ID: <052A41B6-B8EE-49C0-85B8-9351F7B58929@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.f.0.180709 x-originating-ip: [2001:67c:370:128:91bb:6f7d:713:d193] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM0PR07MB4001; 6:7ZfmdG5lzPYRAkqwZHL8yIpnHOluy3MMq6LaFiYK5/jEDWEc/SXuH7p6kivofsEQ5oCH6TV2g7KUFxG4waToIYQi9f8L2rTMY6yn0E7NVDojdQvVIf3lwLjN9KEIsJsZBYJafcWd/1xp+B3ETPmYQAnNByyarL/MEeDfbltgH8LSw6YssIk/gnO1p9i9tno0K+NPqsPLPF4F6MXbHiNO1EKvd7AGqLG9GSFqIJRn8tmnAXtyrlRK/qprT9qDRgsGydxC/VhM+AKDQ2GAMm8Cukg5Cow87F0BjFQ5Q2Z1eF26wZ4aX1t+NvLEFlR9Dwr1MEtPhnTya35eXaKzW69KzRvttmNpCG13xB+XsaJvODjiOa0bFX2vp8AOP+GKC81qxakcCmc6qcWE1q4jhFfq3vwH0N2QKEIBVm+buDSgjIFFCLaUiAhCmRwGpRae3zAS/IbTmF0SAWP63iQ3Y5X0jw==; 5:HBQwKwuqcViKXe7OTBB5FfZGC4/wYeQ5kZd54vUMbCs4CHs61QQMkLp9TnguxWStff+czsn36kOc1s/tF8wSO5pB1KcJJOd5AI5YTmLYK9G8JLuw1bbgC0nOqqomvHDglk0aObfMlXWY/AOZkLSr2mYDNjwWFAgVIl2jz5PDST4=; 7:W1rX0Ap2betD5wHTsoPZCbs8B3b1sXyHMINcJ/vtsKUZTA+wncvSk69LOGZTDP/2SGpkDlBvHtxXDlBUm8vEhZrori2W5UIUrT9m46/McVwk029zRWZCnuSn1oaO2EjLBP2cTslaTSF7t+1lbqS5dWzExBo6KETX6CEyCIAE6CXInt2/2nKwRBfVTI7bMQCMxlyfO1J0kLWlo3n69Mj1K6DyjKg9KgofkMZHsfxbUDruydyeXWNQBVX2eZOg1g3E x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: ecf61458-a3f0-44ff-a22e-08d5ec10b5fd x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:AM0PR07MB4001; x-ms-traffictypediagnostic: AM0PR07MB4001: authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(72170088055959)(192374486261705); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3231311)(944501410)(52105095)(93006095)(93001095)(3002001)(149027)(150027)(6041310)(20161123564045)(20161123558120)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011)(7699016); SRVR:AM0PR07MB4001; BCL:0; PCL:0; RULEID:; SRVR:AM0PR07MB4001; x-forefront-prvs: 073631BD3D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(136003)(396003)(376002)(39860400002)(366004)(189003)(199004)(478600001)(2351001)(99286004)(14454004)(58126008)(316002)(5250100002)(2501003)(105586002)(106356001)(36756003)(5660300001)(2906002)(6916009)(68736007)(2900100001)(102836004)(6506007)(82746002)(81156014)(83716003)(8676002)(81166006)(6116002)(46003)(2616005)(486006)(476003)(7736002)(97736004)(1730700003)(8936002)(44832011)(305945005)(6486002)(229853002)(256004)(14444005)(33656002)(86362001)(6512007)(25786009)(53936002)(6246003)(6436002)(5640700003)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR07MB4001; H:AM0PR07MB4388.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: KmRnQaO0J/lDfnyLmP31rELwcnAJ7tiAlAb7tjKGCFtfDAzcJNhHeb2DnQZ66EDBH9yzxlpI2PZh1x0yo53LL6Sz8OHTUU2VkzNIBe+KUQjI47fI3DhRfR8MCCYSkogcuZSwb4m86DVCVfGqf3FFWLd9vdOxfqtXcj3/0BNR1+246/M3txm6Ey3CXAx3K0dP9xMSzrEv4FpQf8rsNVIPUiDVBogJYKArdHKB0+yau6L98RPqsaJQ/IWO/pyKtqvpn7bdwZtKFDfs+vOT8t091Yk5ugVl728o4McBMcGUeIgx453rI+16ybeXToKyK964NsmPLkBYmGV4EqjVHLH63edOHZLHOtsGSYqtJ+K4LGw= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <6D00BBDF0EC2154799937157D5E8976E@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: ecf61458-a3f0-44ff-a22e-08d5ec10b5fd X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2018 18:11:25.8272 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR07MB4001 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmphleLIzCtJLcpLzFFi42KZGbG9VNff0C/aoPUSr8Wx9WtZHBg9liz5 yRTAGMVlk5Kak1mWWqRvl8CVsf/SJ5aCVUIVsztPsjQwvhHsYuTkkBAwkXjx+Ad7FyMXh5DA UUaJ+6uWMoMkhAS+MUq8+qUEkQCyL8z+xgLhLGGS2PNqPiOIwyIwgVni85yp7BAtE5kknk3W gLAfMUo87/AHsdkEDCTm7mlgA7FFBBQlflxqA1shLGAvceP8d2aIuINEx5GDTBC2nkTb7F+s IDaLgKrEgX0NYPN5gep7Nj0Fq2cUEJP4fmoNWD2zgLjErSfzmSD+EZBYsuc8M4QtKvHy8T+w OaJAM6fOfgRVYy7x9sIpdghbVuLS/G5GCHsfu8S0674Qtq7Eh6lToeb4SsxbsgocRhICFxgl zi//BNWgJfGqZRMjxEGxEq2t04GWcQDFsyW6HjlAmN4Sx44UQVTLSazqfcgCMWYfs8SdZaeY JzAazkLywiygFmYBTYn1u/Qhwh4SJ393M0HYihJTuh+yzwKHhKDEyZlPWBYwsq5iFC1OLU7K TTcy1kstykwuLs7P08tLLdnECEwbB7f8Vt3BePmN4yFGAQ5GJR7eXDW/aCHWxLLiytxDjBIc zEoivEc/+EYL8aYkVlalFuXHF5XmpBYfYpTmYFES531ovjlKSCA9sSQ1OzW1ILUIJsvEwSnV wGg+V0pnkYtIe8C+1OUH10m8qtUumTYpL++D3ryJjiIXvzi+6fMP+igicpbHZLKh5mVv/28z f+jf73PI91nA8V3i94uNVfKrp/tdsbfs22LlmnVeSSvy7dT9LDP5dsYuXaphrj7liAqTzumt SY633HZf1dz4ItCed9qVH6vmRXz8vsIjtebh7GdKLMUZiYZazEXFiQDhV+pCFwMAAA== Archived-At: Subject: Re: [Emu] I-D Action: draft-ietf-emu-rfc5448bis-01.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Jul 2018 18:11:32 -0000 SGksDQoNCkkgcmV2aWV3ZWQgdGhlIG5ldyAtMDEgdmVyc2lvbi4gTG9va3MgdmVyeSBnb29kLiBT b21lIGFkZGl0aW9uYWwgY29tbWVudHM6DQoNCi0tIFNlY3Rpb24gMSANCg0KLSBTZWN0aW9uIDUg YW5kIDYgaXMgbWlzc2luZyBmcm9tIHRoZSBkb2N1bWVudCBzdHJ1Y3R1cmUgZGVzY3JpcHRpb24u IElzIHRoaXMgaW50ZW50aW9uYWw/DQoNCi0gT0xEICJ1cGRhdGVzIHRvIFJGQyA1NDQ4IEFLQScg YW5kIg0KICBORVcgInVwZGF0ZXMgdG8gUkZDIDU0NDggRUFQLUFLQScgYW5kIg0KDQotLSBTZWN0 aW9uIDMNCg0KLSBTb21lIG9mIHRoZSBsaW5lcyBpbiBGaWd1cmUgMSBhcmUgbm90IGNvcnJlY3Rs eSBhbGlnbmVkDQoNCi0tIFNlY3Rpb24gMy4xDQogIA0KLSBPTEQgImRpc3RpbmdodWlzaGFibGUi DQogIE5FVyAiZGlzdGluZ3Vpc2hhYmxlIg0KDQotLSBTZWN0aW9uIDUNCg0KLSBPTEQgInRoZSBy aWdodCB0eXBlIG9mIGlkZW50aWZpZXJzIGFyZSB1c2VkIg0KICBORVcgInRoZSByaWdodCB0eXBl IG9mIGlkZW50aWZpZXJzIGlzIHVzZWQiDQoNCi0tIFNlY3Rpb24gNS4yDQoNCi0gT0xEICJzaWdu YWxsaW5nIg0KICBORVcgInNpZ25hbGluZyIgKE90aGVyIHBhcnRzIG9mIHRoZSBkcmFmdCBpcyBV UyBlbmdsaXNoLCBlLmcuICJhdXRob3JpemVkIikNCiAgDQotLSBTZWN1cml0eSBDb25zaWRlcmF0 aW9uDQoNCkkgdGhpbmsgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHNob3VsZCBiZSB1cGRh dGVkIHRvIGJlIGFsaWduZWQgd2l0aCBjdXJyZW50IHNlY3VyaXR5IGFuZCBwcml2YWN5IHByYWN0 aWNlcy4gVGhleSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBuZWVkIHRvIHRhbGsgbW9yZSBhYm91 dCBwcml2YWN5IGFuZCBwZXJ2YXNpdmUgbW9uaXRvcmluZyBbUkZDNjk3M11bUkZDNzI1OF0uDQoN Ci0gVGhlIHByaXZhY3kgaXNzdWVzIHdoZW4gU1VDSSBpcyBub3QgdXNlZCBzaG91bGQgYmUgZGVz Y3JpYmVkIChpLmUuIHBhc3NpdmUgYW5kL29yIGFjdGl2ZSBJTVNJIGNhdGNoZXJzIGFyZSBzbmlm ZmluZyBjZWxsdWxhciBpZGVudGl0aWVzIHRvIGlkZW50aWZ5IGFuZC9vciB0cmFjayB1c2Vycyku IFRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzaG91bGQgcHJvYmFibHkgYWxzbyBpbmNsdWRl IGEgc3Ryb25nIHJlY29tbWVuZGF0aW9uIHRvIHVzZSBTVUNJLg0KDQotIFRoZSBsYWNrIG9mIHBl cmZlY3QgZm9yd2FyZCBzZWNyZWN5IGluIEVBUC1BS0EnIGFuZCBpdCdzIGVmZmVjdHMgb24gcGVy dmFzaXZlIG1vbml0b3Jpbmcgc2hvdWxkIGJlIGRlc2NyaWJlZCwgZS5nLiBhdHRhY2tzIG9uIG1h bnVmYWN0dXJlcnMgb2YgU0lNIGNhcmRzIG9wZW5pbmcgdXAgZm9yIGxhcmdlIHNjYWxlIHBlcnZh c2l2ZSBtb25pdG9yaW5nIGFuZCBhY3RpdmUgYXR0YWNrcy4NCg0KLS0gU2VjdGlvbiA4LjMNCg0K VGhlIHRhYmxlIGluIFNlY3Rpb24gOC4zIHNob3VsZCBiZSB1cGRhdGVkIHRvIHJlZmVyIHRvICJ0 aGlzIGRvY3VtZW50IiBpbnN0ZWFkIHRvIHRoZSB0byBiZSBvYnNvbGV0ZWQgUkZDIDU0NDguDQoN Ci0tIEFwcGVuZGl4IEUNCg0KLSBPTEQgIk1pbGVuYWdlIiANCiAgTkVXICJNSUxFTkFHRSINCg0K LSBUaGUgdGVzdCB2ZWN0b3JzIGluIGNhc2UgMSBhbmQgY2FzZSAyIHNob3VsZCBiZSBhcyBiZWF1 dGlmdWxseSBhbGlnbmVkIGFzIGNhc2UgMyBhbmQgY2FzZSA0Lg0KDQpDaGVlcnMsDQpKb2huDQoN Cg== From nobody Tue Jul 17 13:28:45 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBBA6130F1D for ; Tue, 17 Jul 2018 13:28:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=salowey-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wJv3LWALwtrF for ; Tue, 17 Jul 2018 13:28:33 -0700 (PDT) Received: from mail-qk0-x229.google.com (mail-qk0-x229.google.com [IPv6:2607:f8b0:400d:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6F86131028 for ; Tue, 17 Jul 2018 13:28:33 -0700 (PDT) Received: by mail-qk0-x229.google.com with SMTP id y4-v6so1255013qka.5 for ; Tue, 17 Jul 2018 13:28:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salowey-net.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=VWVLPqvGxD8E7PXcKEjSUj6VZMQ/YNkeSCemhOYKEgk=; b=PzCZGSqN9H3hl32JsKsb4ClebNzbbZlPxwwVGHlpR+BQUa5tBceNBuTauOglepAsHC ppDkl6agoKIlLs+OKdOGlbgs3p7t6Yn70LrmfTxzNPfJeuvLa6AbfXJXwuK3RtefTPn+ MB3dCUq/Si5WIDuLQOiNfCBABm5h2HbG6j4SYd3TTD6osN1QSJCoxLaY3LK91gX3IgLg zb44n6ke32+ZEqYQ5i5BjSRxkb9X3BaSJrvGbzNtZLRYdOzOyChNZcwI/GUS8aEA3PKU MgJuOBmpD6K8gauhAbHdTwyKH6MKguMrkkSq3aAa8/78odC9Ze2mckpVmEc8d6woU8yu 1EHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=VWVLPqvGxD8E7PXcKEjSUj6VZMQ/YNkeSCemhOYKEgk=; b=jD33kQV+6HSmnE0J9DGA1gaS4o2JIyO3PFfJj0JCA38cfrvyvkZD3Wo7WocOT8P91O r4WSRoKYvBckRALDl80JSxsoGegx81MV8XKnEgrviJwmLAG6nTb03i9zQTeBjLhEA7Mj u6yrmQqxbfGyTGEFvnNO1hDuwH7JYTD0bQTGLRMFWdHlxKT3gNTmtPY7banEEOR4KqkF y3q34xTKaCBMHJN/ijkixslGoqdeQYTmfLnhZiD7EZtuZXurOFio2WFxBKXxvitUDDUA JbzjXRElpMHlRpf4znj2cuv/t2oEHpHkxtCCYUYQLWDhSL4Ah6ZbAJAF7n3giIGXuzac LUVQ== X-Gm-Message-State: AOUpUlEjRitX2O1XHxSGWbZ5pmlRro4rFx+ESYQR+o+0AShcPHB5bt0c rqmC9wqncjWQr0zXo/iTqJqkuBFaYcOY74685eWwTA== X-Google-Smtp-Source: AAOMgpehYgyZ6gsUe+XW3focLl83fJUgmcupHLNJaejLroPJRK5Dlsv+H4Ygx76fBMGpcOHksX0UmOOVpsn3xnOy7Es= X-Received: by 2002:a37:8ac5:: with SMTP id m188-v6mr2883601qkd.297.1531859312708; Tue, 17 Jul 2018 13:28:32 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:aed:3aa7:0:0:0:0:0 with HTTP; Tue, 17 Jul 2018 13:28:12 -0700 (PDT) From: Joseph Salowey Date: Tue, 17 Jul 2018 16:28:12 -0400 Message-ID: To: emu@ietf.org Content-Type: multipart/alternative; boundary="0000000000002e2378057137ca8b" Archived-At: Subject: [Emu] Slides for the meeting X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Jul 2018 20:28:44 -0000 --0000000000002e2378057137ca8b Content-Type: text/plain; charset="UTF-8" If you are going to present at the meeting on Friday please send me your slides. Thanks, Joe --0000000000002e2378057137ca8b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
If you are going to present at the meeting on Friday pleas= e send me your slides.=C2=A0=C2=A0

Thanks,
Joe
--0000000000002e2378057137ca8b-- From nobody Fri Jul 20 06:44:44 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1CAF130EC5 for ; Fri, 20 Jul 2018 06:44:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.909 X-Spam-Level: X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, T_DKIMWL_WL_MED=-0.01] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uK08c-uI_5Cf for ; Fri, 20 Jul 2018 06:44:34 -0700 (PDT) Received: from mail-lj1-x229.google.com (mail-lj1-x229.google.com [IPv6:2a00:1450:4864:20::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4A51130E2D for ; Fri, 20 Jul 2018 06:44:33 -0700 (PDT) Received: by mail-lj1-x229.google.com with SMTP id p10-v6so11201341ljg.2 for ; Fri, 20 Jul 2018 06:44:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=75KW2Jy9XLdNs8IVuADayrf/pbWIobnXkU7JsMvugDU=; b=KsLGnbtfG8OyuUXddzIiN6BtYUW6vndfc5QVcdTLw1YXxR0mN4qCFS31YCUlqHLFXi xJgMGtjIZSiDGp5WZI0NLN7opRQP+M9NR98uh04k8y/CDe04Y9Xv1hgvNphCeEN0H6B+ rG2BfTVWOv89fBr5QcT6hAlim3LdvfJAKNrjUut0+f0hhJFWF4tEeT7A/MAVmM0o5dwi 0Gp3cA4ECcvF7Vlhngp9XRIwcYMiC+vibnKrIBBZIASIQefB+4S0Ru0FaNub5gE7DDab vtAgCMoHfW3yyN0atfpSaCBS7u5xgDd9EwzvOVRhAnw6mb1UlNKgVvSWMjxrwAibrEht ApHQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=75KW2Jy9XLdNs8IVuADayrf/pbWIobnXkU7JsMvugDU=; b=gw545cav5jbJldfUDXzb4G7npMZ403QDA0n1lMXRhBA0xEDncIBl+ufjzJhy+2lEbw XbGE+oaAomBCAaUVGqdngodlFC/HysU2gWnAg9zVx7L3lDl2d1aTbSNnw0qN+dOfSzYi jHxhpWftTIrY0Z32nUW5Qs5cjXheNXF90NcHCimqgRPC63pt7rPebW/wXXuPr4eckyRn puMBE4mb4bLf9u7KwmwEm8O8wLLqTSAqK3YVXriHuX4mZ6GU8LsSuGDDTgXC1dKYD5U/ In27dqLPxPBpTwcJn9ovfn72vatEOGhZ9ypVAjmxG7spi/0sNqCGYQ5kF9Xu/lyaVfkT mfgw== X-Gm-Message-State: AOUpUlHPEp6PHt/4dqoAthgQeMvC5gMaafSb3NZMllChbJILYRDwPUYr +OqPsJ9UKjg+QfB6xp0CQQhAVXtGqU8ZwlC7nLd24xOH8mo= X-Google-Smtp-Source: AAOMgpd78JcHycMjSvaxRyzfN0dh8WAb8EYbDw5EIQoGh6kJkyHo5gIxHWoeV3GthgBhi755DoV4cNZFR8DLKET9Kxc= X-Received: by 2002:a2e:458b:: with SMTP id s133-v6mr1702437lja.151.1532094271975; Fri, 20 Jul 2018 06:44:31 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:ab3:4091:0:0:0:0:0 with HTTP; Fri, 20 Jul 2018 06:43:51 -0700 (PDT) From: Eric Rescorla Date: Fri, 20 Jul 2018 06:43:51 -0700 Message-ID: To: emu@ietf.org, IESG Content-Type: multipart/alternative; boundary="000000000000d803df05716e7edd" Archived-At: Subject: [Emu] New Chair: Mohit Sethi X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jul 2018 13:44:37 -0000 --000000000000d803df05716e7edd Content-Type: text/plain; charset="UTF-8" I am pleased to announce that Mohit Sethi has agreed to serve as co-chair for EMU. Thanks to Mohit! -Ekr --000000000000d803df05716e7edd Content-Type: text/html; charset="UTF-8"
I am pleased to announce that Mohit Sethi has agreed to serve as co-chair for EMU.

Thanks to Mohit!

-Ekr

--000000000000d803df05716e7edd-- From nobody Fri Jul 20 14:33:20 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C16E130DFA for ; Fri, 20 Jul 2018 14:33:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.891 X-Spam-Level: X-Spam-Status: No, score=-1.891 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_HK_NAME_DR=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WvG9s9LLf4n3 for ; Fri, 20 Jul 2018 14:33:16 -0700 (PDT) Received: from mail.katezarealty.com (mail.katezarealty.com [104.168.158.213]) by ietfa.amsl.com (Postfix) with ESMTP id 43F20130ECE for ; Fri, 20 Jul 2018 14:33:16 -0700 (PDT) Received: from localhost (unknown [127.0.0.1]) by mail.katezarealty.com (Postfix) with ESMTP id AAB37374086F for ; Fri, 20 Jul 2018 21:33:15 +0000 (UTC) X-Virus-Scanned: amavisd-new at katezarealty.com Received: from mail.katezarealty.com ([127.0.0.1]) by localhost (mail.katezarealty.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id IBDISBEUIdsZ for ; Fri, 20 Jul 2018 17:33:15 -0400 (EDT) Received: from Maxs-MacBook-Pro.local (ecp01.openface.ca [207.115.96.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.katezarealty.com (Postfix) with ESMTPSA id E913937407F9 for ; Fri, 20 Jul 2018 17:33:14 -0400 (EDT) To: emu@ietf.org References: From: "Dr. Pala" Message-ID: Date: Fri, 20 Jul 2018 17:33:14 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: Re: [Emu] New Chair: Mohit Sethi X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jul 2018 21:33:18 -0000 Congratulations Mohit! Now you can do more work for free :D Cheers, Max On 7/20/18 9:43 AM, Eric Rescorla wrote: > I am pleased to announce that Mohit Sethi has agreed to serve as > co-chair for EMU. > > Thanks to Mohit! > > -Ekr From nobody Fri Jul 20 15:20:51 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 457581310E9 for ; Fri, 20 Jul 2018 15:20:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.889 X-Spam-Level: X-Spam-Status: No, score=-1.889 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_HK_NAME_DR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sdb87_esJVUq for ; Fri, 20 Jul 2018 15:20:46 -0700 (PDT) Received: from mail.katezarealty.com (mail.katezarealty.com [104.168.158.213]) by ietfa.amsl.com (Postfix) with ESMTP id 152E8130FB5 for ; Fri, 20 Jul 2018 15:20:46 -0700 (PDT) Received: from localhost (unknown [127.0.0.1]) by mail.katezarealty.com (Postfix) with ESMTP id AADEF3740FF1 for ; Fri, 20 Jul 2018 22:20:45 +0000 (UTC) X-Virus-Scanned: amavisd-new at katezarealty.com Received: from mail.katezarealty.com ([127.0.0.1]) by localhost (mail.katezarealty.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id F-Z8cTbgS2g6 for ; Fri, 20 Jul 2018 18:20:44 -0400 (EDT) Received: from Maxs-MacBook-Pro.local (ecp01.openface.ca [207.115.96.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.katezarealty.com (Postfix) with ESMTPSA id 6FE1337407F9 for ; Fri, 20 Jul 2018 18:20:44 -0400 (EDT) To: emu@ietf.org From: "Dr. Pala" Organization: OpenCA Labs Message-ID: <4060a28f-3417-4693-06f9-6ddbe71d65d4@openca.org> Date: Fri, 20 Jul 2018 18:20:43 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms040608040705050101050800" Archived-At: Subject: [Emu] Re-Charter Considerations X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jul 2018 22:20:50 -0000 This is a cryptographically signed message in MIME format. --------------ms040608040705050101050800 Content-Type: multipart/alternative; boundary="------------9E5F1EC88F7A7DD1F261490F" Content-Language: en-US This is a multi-part message in MIME format. --------------9E5F1EC88F7A7DD1F261490F Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Emu-ers, I wanted to follow up the discussion from today's meeting. In particular, there is some work that has been proposed that might require re-chartering as indicated by Ekr and supported by the Chair(s). I would like to push forward the request for re-chartering, in particular, I would like to add the definition of one (or more) EAP-based credentials provisioning mechanisms that would fit many use cases that we are currently working on in different organizations. In particular, the use cases that I am referring to are the following: * *Cellular Networks.* The provisioning of Certificates (or other credentials) to enable the use of EAP methods in different environments (e.g., CBRS Alliance, MutleFire, etc.) has been a problem that the current ecosystem have not addressed efficiently. The use of OSU servers and the complexity (and associated risks) of allowing (partial) IP access to non-authenticated devices has limited the possibility for in-line provisioning of devices. The use of an EAP-based mechanism that can be used for credentials provisioning (and renewal) would greatly improve the feasibility of in-band credentials deployment. This authentication mechanism would improve the possibility to use 4G\LTE (and future 5G) networks for IoT credentials management which, today, seems to be ignored because of the complexity required on the device. * *Cable Networks.* With the deployment of the new DOCSIS 3.1 FDX specifications and its newly defined support for EAP authentication via X.509 certificate throughout the whole ecosystem, the ability to provide an EAP-based mechanism that can be used for credentials provisioning and renewal, would greately improve the feasibility of in-band credentials deployment also in this case and the possibility to further secure the infrastructure by allowing for better certificates management (i.e., renewal, deployment, etc.) * =C2=A0*802.1x / WBA / HS2.0.* Also in these ecosystems, the possibili= ty to provision (and re-provision) dynamically credentials opens up the possibility for more secure management of identities. As in the previous use-cases, the management directly at layer 2 allows for a simple (and extensible :D) approach to credentials provisioning for devices. Therefore, counting the fact that all these ecosystems are looking at a standardized / common solution to solve the same issue, I think it is the right time to evaluate the possibility to work on this important aspe= ct. In my opinion, the WG should open up to evaluate the possibility to work on the standardization of EAP-based provisioning mechanisms that would allow for easier management options safer life-cycles of device and subscribers credentials. On the need to re-charter, I would like to point out that this type of work has been done in the past, therefore is not a completely new territory (i.e., TEAP / EST). What we need now is the possibility to address (a) the bootstrapping problem, and (b) the need for supporting additional provisioning protocols that address different ecosystems (i.e., simpler approaches that can be implemented in sub-systems like micro-controllers - this would facilitate the integration of credentials management independent from the application layer / wifi module / etc.), and (c) the possibility of defining provisioning protocols that might be used with or without additional layers (e.g., EAP-tunneling). I hope we will have the possibility to work on this important topic that, IMO, have the possibility to impact many millions of people around the world and the security of our networks (Cellular, WiFi, Corporate, and Home). Looking forward to a productive discussion! Cheers, Max --=20 Best Regards, Massimiliano Pala, Ph.D. OpenCA Labs Director OpenCA Logo --------------9E5F1EC88F7A7DD1F261490F Content-Type: multipart/related; boundary="------------F171DEDBFE094454416D4908" --------------F171DEDBFE094454416D4908 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Hi Emu-ers,

I wanted to follow up the discussion from today's meeting. In particular, there is some work that has been proposed that might require re-chartering as indicated by Ekr and supported by the Chair(s).

I would like to push forward the request for re-chartering, in particular, I would like to add the definition of one (or more) EAP-based credentials provisioning mechanisms that would fit many use cases that we are currently working on in different organizations.

In particular, the use cases that I am referring to are the following:

  • Cellular Networks. The provisioning of Certificates (or other credentials) to enable the use of EAP methods in different environments (e.g., CBRS Alliance, MutleFire, etc.) has been a problem that the current ecosystem have not addressed efficiently. The use of OSU servers and the complexity (and associated risks) of allowing (partial) IP access to non-authenticated devices has limited the possibility for in-line provisioning of devices. The use of an EAP-based mechanism that can be used for credentials provisioning (and renewal) would greatly improve the feasibility of in-band credentials deployment. This authentication mechanism would improve the possibility to use 4G\LTE (and future 5G) networks for IoT credentials management which, today, seems to be ignored because of the complexity required on the device.
  • Cable Networks. With the deployment of the new DOCSIS 3.1 FDX specifications and its newly defined support for EAP authentication via X.509 certificate throughout the whole ecosystem, the ability to provide an EAP-based mechanism that can be used for credentials provisioning and renewal, would greately improve the feasibility of in-band credentials deployment also in this case and the possibility to further secure the infrastructure by allowing for better certificates management (i.e., renewal, deployment, etc.)
  • =C2=A0802.1x / WBA / HS2.0. Also in these ecosystems, th= e possibility to provision (and re-provision) dynamically credentials opens up the possibility for more secure management of identities. As in the previous use-cases, the management directly at layer 2 allows for a simple (and extensible :D) approach to credentials provisioning for devices.

Therefore, counting the fact that all these ecosystems are looking at a standardized / common solution to solve the same issue, I think it is the right time to evaluate the possibility to work on this important aspect.

In my opinion, the WG should open up to evaluate the possibility to work on the standardization of EAP-based provisioning mechanisms that would allow for easier management options safer life-cycles of device and subscribers credentials.

On the need to re-charter, I would like to point out that this type of work has been done in the past, therefore is not a completely new territory (i.e., TEAP / EST). What we need now is the possibility to address (a) the bootstrapping problem, and (b) the need for supporting additional provisioning protocols that address different ecosystems (i.e., simpler approaches that can be implemented in sub-systems like micro-controllers - this would facilitate the integration of credentials management independent from the application layer / wifi module / etc.), and (c) the possibility of defining provisioning protocols that might be used with or without additional layers (e.g., EAP-tunneling).

I hope we will have the possibility to work on this important topic that, IMO, have the possibility to impact many millions of people around the world and the security of our networks (Cellular, WiFi, Corporate, and Home).

Looking forward to a productive discussion!

Cheers,
Max

--
Best Regards,
Massimiliano Pala, Ph.D.
OpenCA Labs Director
3D"OpenCA
--------------F171DEDBFE094454416D4908 Content-Type: image/png; name="komjmhmlmfcgckmf.png" Content-Transfer-Encoding: base64 Content-ID: Content-Disposition: inline; filename="komjmhmlmfcgckmf.png" iVBORw0KGgoAAAANSUhEUgAAAGQAAAA2CAMAAAAGesyaAAADAFBMVEUsJiEAAQAKAwMABwoX BwESCQAqDgEkEQItFQESGykaGh0WGyE1FwE9GwJHHwElJiY4JBQmKDE1KCAfLUQ8KygoMEAq MjpXKgs/MilMMR0pOFEyOUo4OTo1OkRqMgpjOBlpNxUwQV1DPz48QExdOyM4QVV+OQRRQzo1 SGdDR0lDSFJfRDFASVyaPwF+RRpNT1I9UXlwSi8+UnNDUm6hQgCPRhBdUEZTUlBKVGlPVF27 PgCaSANtUT57VBerSQOMUgxHW4KMUiepTwmJVDh6WT6KVjGCWDpRYH21TwFiYF57YgJXYXae VR+lVRZrYld1ZiB7YEuSYQBgZW+8VAlkZWjBVQCfXiqqXwG1WhPLVgedYDazXiDZVgCWZEDV WQJ1blapYjbXWgDRXACMaU6WbgCiZjnIXw9mcIixZC6pZjJ/cUeLbFdycmZ4cGnnWwNwc3Wq aS6BcGeobwndXwzkXwLgYgDaYwyMeCq/bQHJaBi9ajDMagWVegvRZxzVaAvXaQDLainqZAuv cEPrZQDQaSyockrFbSvmZwnabQLvZwDpaQB0fpPkaxGld1d+f3/3aACfeV6RfG2JfnLebSF7 gYy2fQmugQCigxW8d0K3eEr1bQXaciTicRqKgnzNewHuchbUdzKYiDzrdwKah1erjAvOfEXl eSq5g1qYjGikiHO2kADigwC2hmSZjIGGj6aHkJzQiwCximixim/EkAORkZGVkYrOh0rPiVL5 giTvhDKkk4LMjF23mR+zmTrhikrviDzsi0TAlHDCnwvKlGqpnJLdlF2boKy+m324nImkoZ+e o6XKpgrloATwl1WypZPOn3zfqQjYrgLBrVDdo3nGq5mysa/SrI7dq4bqqXTOrpWttL+6s6uw tbe/t4rhvALetpjQuqnuwwe9v8LAv7vauqD3xA68w9XBw83rvJfRwbXFyMvbxbPNyMP8zgTc zMDr0mb91xLM1ODQ1NfS1c7p0sD70bPd19PX4qj83cje4+Xr4tv54NLp7/Hy9PHw9fj6/v3Y ktvJAAAAAXRSTlMAQObYZgAAAAFiS0dEAIgFHUgAAAjrSURBVFjDtVcNWFPXGT6E+l9BZ0EF sTKEIQaUAIrTZdYqxqG0I3UjIuiDM0ipoyO5l0rFh2PE472EoIJKL9hQV2OxqM+USgFL4r9g EaIoQxgqKBZBR+nGGhXYdwNro0Kfkcp3ntzce/7e8/2e70PoJVDl3bMlZyurUSsaKnqESrMp lYrByozCjUOEUZORodMRVsViTjJc8GbLUGCUUstLv1SyLCGch8DGRiDPe/kY5/2HCQQTxZEE y4fb2gDI8KjjLxsjfyyc3lZgM3KixwgeY4TEzk7+kjHODbeb6u0xAhiw8XgFMOxolpP6J75U jLZfp6dzHIcBYCQbIBB4sCxDOLK6eMAVT39it57+e09ysCnDUtnrJ0vS5ZMW0PBFWDbd40G/ 85sH2KeXvj94u/flX8/2J6kYQkhkHbzWbkdH0N0UDN8sURS8uMd9dMzPL7BxIIjOayuWLBIf 70RPUPjxLouBEgVhMaYuWXQlMjwsN+eFTR4cDZ4werRDYOoAIFkrptm/Ni0gthOt9Q4yWQxc AwyWTbacW0sTDGoJen4P002/2S7LjgV6BpY1N6OO5g5eeiZTY/P9b1FzRwfKWuk9p/72ct+N puKpq32qLVaexOCCJB91aezt5y6zt7fXILSdJZjlVr1w0mCR66x6FL3QOXiUQ2a0k/sFlDlq 1LzUMQ4uxxycjl0LWO1bBsY6yXR3wSTJGxqLhdsJHDsS9cwF47XlvcQGQiXhRbih/HkQv4XO cajZb6GDu7PTFEdPkVu0k4vQyd3Jc/SUwNnB+RJ/XsI9ptZDIxMly3dbLNwGnGBJF+Id3cZM 9ui8Gjq5P/TDiRCegbOFgSKRo5e7yNHV2dnPdVb0bHfHQCevNIV/rxqrX48oFQdYcpKMtYRb juxtfqRypNACK28+j3FsqcilAD0ADuIWCt0yRa7zRNEOY2YELhW5CV2dXVKixH8BC+s8GDN9 wWKxf94zpsRiJuWmBYjgndsKFmu5Bc+D3HQXCcu7QTFTMl3HF0SLxruLvGa4zUqdMGFWqqfX 3GSxN0y6NT154i+v75zvH2thXiWgY2YVElhwYl9NYxarlr0grlQn92DQt1vBUk+nUFeHGZme gUIvl1RXr1AnV/fx6zd4v3HptM/YaXbrzmYFePu2WpowYRlJo+2PGLb2d9WE5bw1L4DcnOco 9HIcH3o02HOecMqMJhQqdLPXpArHl2uEo+Na8qZPXxw0+bVx46bFzhw3eZylM2dgwkbWW3Iy Jp9lMDe9H2/raiqPCy5/fHSCu+M7mkffoQuzQhvRhWVlj1FcWTfq6dwdElJmarxedr/u3P6C Nn7Fk95ol8wRjIMsOLGJSwLm/OMGjlFHJ7hqelDuxdMlpbU16JvqlJTamivoBjrfUgNB69zf b6Fr1TWPKmtOw9xCdLayEFWvBlaSfmEBsk6LSdTMNnQaldTe7Qfj20yveddR2toVEevCi9/f fmntR7ErtvompmyICM9qyYpZsG3FhqwNYRH5KUtyW7eGRRxfH1OHDv0ZXH6ihbSyVYzSY3Fu BkVR9LaS2wPxUxyTFpu2eGverr+dezvi0ttpOy/tTKlL2ZkWs6p4VV1Kyq60nevS8iLyi1tW hfNWzMfhYT+ArAQ+5odRBENjlRW5F/vH6O7u7urpXtvR/bQbmX/dPd3w7Ok+2Ij4ry5o0N/d Y1p7qA21FodhFRc1ctjIsXZ2Y18VcwCixNgcWlgVbUiue3b3J33te7497vv/oT1Bj5/7br1R grYlfrReSqmwPDyK0GqOUHKWj/RwP0J0ZlmsK3o2HP+7Qt9HBr3BYH5aNL3FG/+ul8sjKcxH dRJFGJkhfKxgmM2rUoaSg5h4GAwXJsF00dRGq+/21k2EF7o50oNswrNfsYUQKRBIZWIFh3lu aLNe1F++bjXGyWyzZiGoYFYLx5Ys4v0R3GWRdBHNErBiSiqVRhHMyeaYrMQ4SENWCvEcfhCm GIzpqKlm27KTSWUcAX1goBw5oATctDb33aLTYV5SWoaXP5+gyqlFdnZ23nB+plcnREv0RWJC BVkrrBJ1BewMmlVpgRUQF7wpItMJTcsJ34GBRVaFdQZaqoqxFmSb3qDQgu1A2GI4YAnODkQY IOhklDKzo2C1IV2sijzdhjorqwefNdL6ihxzegU7SynexHgBMXy+xWFG8qvdf91D8WpRi41q KFl02YaswYNkULTeLC9CFFK4bDHDMmZbhnuXSOdAsnN1LxgfVu7ZvG8LpSJUlO/gnaWQFwYv JpZeKdUaSC8ApuhIShYQYp5yWQ0oPgVXPtkcHz/fx5rqqzosHSSlBYHIxKSolJcUsIIpnzkh mt4b7Z/tOzBRQWaA6uNCNdet0nxLkL8CgzeQKIlCXaHjXR9MlqQn9Y1fNd5RE0zF/ryKwVR/ JMnsI3S8Umcw6NRYxRuUKqk3lfnKeGcTySAx5hy+7WfgZOv4uLLl0w8wUah71QLBpJeXq/eM VVivV8jz6lB2ofWF6i1dEYRZfMJ4piE+ZweNeb7A2VVyKEx6vjt1z/ghMehVKiUpyt1VYBXC N6j0Q4Mazp7TvvndhIaGhqqvP1bwFk0YRYR5RoLR+PkWmlIpV/oEDQ6jB9Wc3Z6bm6zLTtLl gLC4LVWXz5Q1ffbV5oZ24wmsV/NeKTlirmg+u/q7w7/38PDdeKF8UBgXs2kV4WUC0YR/KOLv Pby3L5O30yvG9vY/6vX8JSbb2je96coXX5QPznqfokKKEPWBAwd20ApaTWsP7LnTfsd42at3 +B+H7+zRUfwZZMutN6baHCX5+Ou9Zy4f3nuiKr7KaHxoNDbsSwhp6htvfyg3Zw901G+ttVlT Ja34/E+fvrXmvY3713xy6tSZfadOJby7X1P/vwn/MeaYr0mF7IMEq690Gu95KwQq5L5K+f59 qGUtaZMSciHMKjdVbY6zFqRC/pv3LgxY5tcW0pjIpGGJ7+89kxBnbXZSmjuz7CeyihyG8fbd XXYdrWlqQg+sZWTdzPqBB68VEdnkzDY0lHSjSD9/GRpaMt3OWqLpQENOTf/PpP8CK9ZVVe2a 8XoAAAAASUVORK5CYII= --------------F171DEDBFE094454416D4908-- --------------9E5F1EC88F7A7DD1F261490F-- --------------ms040608040705050101050800 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CyAwggUyMIIEGqADAgECAhEAu2YCW4tRQdGHMc0S/FQsNDANBgkqhkiG9w0BAQsFADCBlzEL MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2Fs Zm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0Eg Q2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwHhcNMTcxMjAxMDAw MDAwWhcNMTgxMjAxMjM1OTU5WjAkMSIwIAYJKoZIhvcNAQkBFhNkaXJlY3RvckBvcGVuY2Eu b3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEDKYfy+DFhtDn8bIXyP25Xe DjUIkMQDm90A1JPoQ4tuTk6kXwulPvAmvtLGuRAzEqFpV/fqz4sAlx8FgxvRZ5PunZ1H1/lJ CNEdir53Xv8TEf+R/n+Ca5RNUR+GhS72zhp9xx8uDRZds2DeXvW9uhYp9nsbX6rWIFT5YfWF 1SukFXwXSnHuXc9nDT6p0Kp6UNzusn/lMhXhIwgpNA26/mHAdScYyMoB4yaZeMpdZN75XGWO slhXcXdeGJo93E48kffdu0yo4WTbpLwhs/IrkG4OXB1N3Bf+9oHZwVun1hlCZEfuSit0mvrx x8wzPCPiggXu6j6VqPoJqecV6xKCHwIDAQABo4IB6TCCAeUwHwYDVR0jBBgwFoAUgq9sjPjF /pZhfOgfPStxSF7Ei8AwHQYDVR0OBBYEFEPV9allspkmYqkQRx2BlAdbOrjhMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsGAQUFBwMEBgsrBgEEAbIxAQMF AjARBglghkgBhvhCAQEEBAMCBSAwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEwKzApBggr BgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwWgYDVR0fBFMwUTBPoE2g S4ZJaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBQ2xpZW50QXV0aGVudGljYXRp b25hbmRTZWN1cmVFbWFpbENBLmNybDCBiwYIKwYBBQUHAQEEfzB9MFUGCCsGAQUFBzAChklo dHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5j b20wHgYDVR0RBBcwFYETZGlyZWN0b3JAb3BlbmNhLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEA g+REupW946f7esdYmE1QxsYlkubErxz8JLovVDSKTHwxR1/VxF/B7rGeiSPBHTmKQYwlWCrp eHZNfzaDDkDamwLXm7v4+brNfQKRpOLnYPQQffp7xim72INakLgts8d5I7bic785dj4M5JP4 XA2qUD9wduwNwquua6v7zM3chpoRjapumzLNDDr47GccOKAZYaaqFwbpwJPQYuiC07WWnn7g FzdNKYN6VM6Re6wVEHP6fEvNrleV0pf1iFjLKugnriGKL9wj6xX25JsMmGmqZcfdpnkTE4Zf eQBEZVnn8s7HBX+MA/K+YnHxRwA2c5XwNbEhZ2rvh2uFIMXBDlt+tDCCBeYwggPOoAMCAQIC EGqb4Tg7/ytrnwHV2binUlYwDQYJKoZIhvcNAQEMBQAwgYUxCzAJBgNVBAYTAkdCMRswGQYD VQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNP TU9ETyBDQSBMaW1pdGVkMSswKQYDVQQDEyJDT01PRE8gUlNBIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MB4XDTEzMDExMDAwMDAwMFoXDTI4MDEwOTIzNTk1OVowgZcxCzAJBgNVBAYTAkdC MRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNV BAoTEUNPTU9ETyBDQSBMaW1pdGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRo ZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAvrOeV6wodnVAFsc4A5jTxhh2IVDzJXkLTLWg0X06WD6cpzEup/Y0dtmEatrQ PTRI5Or1u6zf+bGBSyD9aH95dDSmeny1nxdlYCeXIoymMv6pQHJGNcIDpFDIMypVpVSRsivl JTRENf+RKwrB6vcfWlP8dSsE3Rfywq09N0ZfxcBa39V0wsGtkGWC+eQKiz4pBZYKjrc5NOpG 9qrxpZxyb4o4yNNwTqzaaPpGRqXB7IMjtf7tTmU2jqPMLxFNe1VXj9XB1rHvbRikw8lBoNoS WY66nJN/VCJv5ym6Q0mdCbDKCMPybTjoNCQuelc0IAaO4nLUXk0BOSxSxt8kCvsUtQIDAQAB o4IBPDCCATgwHwYDVR0jBBgwFoAUu69+Aj36pvE8hI6t7jiY7NkyMtQwHQYDVR0OBBYEFIKv bIz4xf6WYXzoHz0rcUhexIvAMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEA MBEGA1UdIAQKMAgwBgYEVR0gADBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vY3JsLmNvbW9k b2NhLmNvbS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDBxBggrBgEFBQcB AQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQUFk ZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wDQYJ KoZIhvcNAQEMBQADggIBAHhcsoEoNE887l9Wzp+XVuyPomsX9vP2SQgG1NgvNc3fQP7TcePo 7EIMERoh42awGGsma65u/ITse2hKZHzT0CBxhuhb6txM1n/y78e/4ZOs0j8CGpfb+SJA3GaB Q+394k+z3ZByWPQedXLL1OdK8aRINTsjk/H5Ns77zwbjOKkDamxlpZ4TKSDMKVmU/PUWNMKS TvtlenlxBhh7ETrN543j/Q6qqgCWgWuMAXijnRglp9fyadqGOncjZjaaSOGTTFB+E2pvOUtY +hPebuPtTbq7vODqzCM6ryEhNhzf+enm0zlpXK7q332nXttNtjv7VFNYG+I31gnMrwfHM5td hYF/8v5UY5g2xANPECTQdu9vWPoqNSGDt87b3gXb1AiGGaI06vzgkejL580ul+9hz9D0S0U4 jkhJiA7EuTecP/CFtR72uYRBcunwwH3fciPjviDDAI9SnC/2aPY8ydehzuZutLbZdRJ5PDEJ M/1tyZR2niOYihZ+FCbtf3D9mB12D4ln9icgc7CwaxpNSCPt8i/GqK2HsOgkL3VYnwtx7cJU mpvVdZ4ognzgXtgtdk3ShrtOS1iAN2ZBXFiRmjVzmehoMof06r1xub+85hFQzVxZx5/bRaTK TlL8YXLI8nAbR9HWdFqzcOoB/hxfEyIQpx9/s81rgzdEZOofSlZHynoSMYIEODCCBDQCAQEw ga0wgZcxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNV BAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMT0wOwYDVQQDEzRDT01P RE8gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEAu2YC W4tRQdGHMc0S/FQsNDANBglghkgBZQMEAgEFAKCCAlswGAYJKoZIhvcNAQkDMQsGCSqGSIb3 DQEHATAcBgkqhkiG9w0BCQUxDxcNMTgwNzIwMjIyMDQzWjAvBgkqhkiG9w0BCQQxIgQg5ugm b7pirTrlbH+aY13WX64qz7kzJZyIshRR+LoXY6owbAYJKoZIhvcNAQkPMV8wXTALBglghkgB ZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBvgYJKwYBBAGCNxAEMYGwMIGtMIGX MQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT YWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJT QSBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIRALtmAluLUUHR hzHNEvxULDQwgcAGCyqGSIb3DQEJEAILMYGwoIGtMIGXMQswCQYDVQQGEwJHQjEbMBkGA1UE CBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P RE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBDbGllbnQgQXV0aGVudGljYXRp b24gYW5kIFNlY3VyZSBFbWFpbCBDQQIRALtmAluLUUHRhzHNEvxULDQwDQYJKoZIhvcNAQEB BQAEggEAp7LF846B9nMCNLQk9lAB9zACi3QC4kU6Qmysy87E0Jm6Q0gz2GiqSbLc87ymOq1P /zHh/dy/sW4KDf5panlMQ2xaCBlYIg1rLQvSuEJBWnhBX0n8QeH3t3bASA/Su9lZn5mCfSHG 7C+D+G46U+qsAGTghfBgwFKD1oSNnetis1mcPGM+WCe0NI7vsPPeNGUuyUsZXQaddDdQdeC6 M74OtbjUwnI7gKGKADXr9QxWvujnRAzdmifeTuKylMktqtD90XXbNzlj0F/keN01e0WPOENl LCOwhUP+7/XJO5MUJ8orOkDTzeKvnIobRhXBeXHQlZbED6uQDb09nyhEvfMQRQAAAAAAAA== --------------ms040608040705050101050800-- From nobody Sat Jul 21 07:11:40 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FDA112777C for ; Sat, 21 Jul 2018 07:11:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WtXq4lZr5yp8 for ; Sat, 21 Jul 2018 07:11:36 -0700 (PDT) Received: from mail.networkradius.com (mail.networkradius.com [62.210.147.122]) by ietfa.amsl.com (Postfix) with ESMTP id 10E73126BED for ; Sat, 21 Jul 2018 07:11:35 -0700 (PDT) Received: from [192.168.46.58] (198-84-237-221.cpe.teksavvy.com [198.84.237.221]) by mail.networkradius.com (Postfix) with ESMTPSA id CB49A481 for ; Sat, 21 Jul 2018 14:11:32 +0000 (UTC) From: Alan DeKok Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: Date: Sat, 21 Jul 2018 10:11:30 -0400 To: emu@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [Emu] Comments on draft-lear-eap-teap-brski X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Jul 2018 14:11:39 -0000 One of the confusions from the meeting was "How can a device = authenticate via 802.1X if it doesn't trust the network?" I think the confusion is due to terminology. The discussion in the = meeting, and in the draft was about the device "authenticating" to the = network during initial bootstrapping. The authors may correct me if I'm = wrong, but this step is really "provisioning". i.e. the device gets on the network without authenticating itself in = the traditional sense (password, certificate, etc.) The document isn't clear on this, which makes it more difficult to = understand. =46rom Section 3.1 of the document: The device establishes an outer TEAP tunnel with the TEAP server and does not validate the server certificate. I would also add that the TEAP server does not authenticate the device = (as such). Instead, this step is about provisioning. Continuing from Section 3.1: The device sends a BRSKI-RequestVoucher TLV to the TEAP server. The TEAP server forwards the RequestVoucher message to the MASA server, and the MASA server replies with a signed voucher. The TEAP server sends a BRSKI-Voucher TLV to the device. If the MASA server does not issue a signed voucher, the TEAP server sends an EAP-Error TLV with a suitable error code to the device. It would help to say that neither the TEAP server nor the MASA server = has (as yet) authenticated the device. Which means that the device has = established a secure tunnel to an unknown endpoint. That endpoint may = later reject the device, at which point the device tries another SSID. As a practical example, there may be two businesses who wish to = install WiFi cameras. Each business has their own SSID. Any new device = will randomly connect to one of the SSIDs. If the device is known = (somehow) to the business, it will be provisioned and allowed onto the = network. If the device is not known, it will be rejected, and will try = the other SSID. I think it would help future discussions to consistently refer to this = phase as "provisioning", and not "authentication". i.e. "the device provisionally connects to the 802.1X network". Or = "the device connects to the 802.1X network for initial provisioning". Once the device is provisioned, it can "authenticate" to the 802.1X = network as normal. i.e. from Section 3.1 again: Once step 5 is complete, the device has completed the BRSKI flow and has established trust with the network. I would add "the device can then perform normal 802.1X authentication = with it's provisioned credentials, and with the provisioned network = information." =46rom section 4.1: If the client is bootstrapping and has not yet completed a BRSKI flow, it will not have trust anchors installed yet, and thus will not be able to validate the server's certificate. It would help instead to use consistent terminology: If the client is in the provisioning phase and has not yet completed a BRSKI flow, it will not have trust anchors installed yet, and thus will not be able to validate the server's certificate. And the same applies later: It is recommended that the client validate the certificate presented by the server in the server's Certificate message, but this may not be possible for bootstrapping clients that do not have appropriate trust anchors installed yet. to: It is recommended that the client validate the certificate presented by the server in the server's Certificate message, but this may not be possible for clients which have not yet been provisioned with the appropriate trust anchors. The referenced IDs use the term bootstrapping", = (ietf-anima-bootstrapping-keyinfra). But RFC 7170 (TEAP) uses = "bootstrapping" once, and "provisioning" many times. My $0.02 is that "provisioning" is clearer in this context than = "bootstrapping". Alan DeKok. From nobody Sat Jul 21 10:51:37 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47A43130DCF for ; Sat, 21 Jul 2018 10:51:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dt--etNPRJgt for ; Sat, 21 Jul 2018 10:51:33 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0049B130DF3 for ; Sat, 21 Jul 2018 10:51:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1532195491; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=XWpK8wcd2snmq4zlU7ZEjUEaFigwGfS+c0VYKf1HS/o=; b=CJWFKlwlzl3V85YLZKfl4QERyl55JP+eHBfqqfTag3S4QRSziDHfo7V5vmLiLGwb 7Vzr3drjaDoEdzTwA+aE0APJRnxPAEIiA9LQaRzcqDRd6X2JZdPuclTdbApS+33E PL72EfTZskrotpGufTn2Gb2oYlTPYQ6LhbN6yUi6n2k=; X-AuditID: c1b4fb2d-223ff700000055ff-fc-5b5372a3b803 Received: from ESESBMB503.ericsson.se (Unknown_Domain [153.88.183.116]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 32.59.22015.3A2735B5; Sat, 21 Jul 2018 19:51:31 +0200 (CEST) Received: from ESESSMB505.ericsson.se (153.88.183.166) by ESESBMB503.ericsson.se (153.88.183.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Sat, 21 Jul 2018 19:51:31 +0200 Received: from nomadiclab.fi.eu.ericsson.se (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.193) with Microsoft SMTP Server id 15.1.1466.3 via Frontend Transport; Sat, 21 Jul 2018 19:51:31 +0200 Received: from nomadiclab.fi.eu.ericsson.se (localhost [127.0.0.1]) by nomadiclab.fi.eu.ericsson.se (Postfix) with ESMTP id E8A524819B7; Sat, 21 Jul 2018 20:51:30 +0300 (EEST) Received: from [127.0.0.1] (localhost [IPv6:::1]) by nomadiclab.fi.eu.ericsson.se (Postfix) with ESMTP id 88D57480A68; Sat, 21 Jul 2018 20:51:29 +0300 (EEST) To: Eric Rescorla , , IESG References: From: Mohit Sethi Message-ID: <6eccbb3a-1255-fbc1-c5b1-f607e4c88b90@ericsson.com> Date: Sat, 21 Jul 2018 13:51:28 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------B2FA0FB304EBB314A83CAE3E" Content-Language: en-US X-AV-Checked: ClamAV using ClamSMTP X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupjkeLIzCtJLcpLzFFi42KZGbG9RHdxUXC0wdOrQhYrXp9jtzi2fi2L xYw/E5kdmD2WLPnJ5DH5cRtzAFMUl01Kak5mWWqRvl0CV8ab7p+MBcdEKt7f2sfcwPiNv4uR k0NCwETiz6t/rF2MXBxCAkcZJa723WGHcL4xSrRN+8kC4VxklDj3aCsThLOZUeLvurNQzkJG iRertjCCDBMW0JTY1fSADcQWEXCTWLhjBpgtJBAgcWD7ejCbTUBPovPccWYQm1fAXmLu98tA gzg4WARUJX59MgQJiwpESKxe/oIVokRQ4uTMJywgNqdAoMSyR2eYQcqZBcIkPi8pAgkzC4hL 3HoynwniHWWJBS2LGCG2qkts7TjAOIFReBaSSbMQumch6YawLSRmzj/PCGHLS2x/O4cZwtaQ aJ0zlx1ZfAEj+ypG0eLU4uLcdCNjvdSizOTi4vw8vbzUkk2MwFg6uOW37g7G1a8dDzEKcDAq 8fAqJQZHC7EmlhVX5h5ilOBgVhLhzY8CCvGmJFZWpRblxxeV5qQWH2KU5mBREufVW7UnSkgg PbEkNTs1tSC1CCbLxMEp1cAYsmrbVLNnPdvPfy+b8017bdaVvuZjnCwyDiwmO7LNj4nJsrWx nH+ctuxguc3Rs/NXZOaIJFYF9Ki87FGLyPV1tY0P3mA3YbN9wXaDvTe3hNUY9C+ZdyCr/+vk 0xVsCjFf9/A87VugK7okpeSJygWdJ9VzOAL99pebuFjvNTzwQ5D/tZ93bosSS3FGoqEWc1Fx IgDeSi+RoQIAAA== Archived-At: Subject: Re: [Emu] New Chair: Mohit Sethi X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Jul 2018 17:51:35 -0000 --------------B2FA0FB304EBB314A83CAE3E Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 7bit Hi Ekr, Thanks for the opportunity! As someone who has implemented and deployed EAP methods as well as someone who is genuinely interested in this area, I look forward to working with all of you. However, I am till taking baby steps in this new role and I appreciate your honest feedback on-or-off the list in the coming months. --Mohit On 07/20/2018 09:43 AM, Eric Rescorla wrote: > I am pleased to announce that Mohit Sethi has agreed to serve as > co-chair for EMU. > > Thanks to Mohit! > > -Ekr > > > > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu --------------B2FA0FB304EBB314A83CAE3E Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit

Hi Ekr,

Thanks for the opportunity!

As someone who has implemented and deployed EAP methods as well as someone who is genuinely interested in this area, I look forward to working with all of you.

However, I am till taking baby steps in this new role and I appreciate your honest feedback on-or-off the list in the coming months.

--Mohit


On 07/20/2018 09:43 AM, Eric Rescorla wrote:
I am pleased to announce that Mohit Sethi has agreed to serve as co-chair for EMU.

Thanks to Mohit!

-Ekr



_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu

--------------B2FA0FB304EBB314A83CAE3E-- From nobody Sat Jul 21 10:59:06 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0F6C130E15 for ; Sat, 21 Jul 2018 10:59:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lBOWfRYMccsA for ; Sat, 21 Jul 2018 10:59:02 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DD1C130DCF for ; Sat, 21 Jul 2018 10:59:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1532195940; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=PIyRz3mSZlAMLukZSw9f9ABjkYSRBMQWRP3+SKvmLSg=; b=fVlKIgxWkYpzlDdpbohLljQOgpYYVAxIfDku+wrFKyHvbIlH4Q5MkcOprT1EGum3 2L4fnAyZz5730kBhKErmAN48OdbNuP91Ti4d7YV1rgyfVBS2ctnZOUi3o95dTcmV vwGygMCaU4mRoU4YDrNCdFnuxiUYbW7QX2Lg3zjrHQw=; X-AuditID: c1b4fb3a-9e9ff700000079c1-70-5b537464d8f6 Received: from ESESSMB503.ericsson.se (Unknown_Domain [153.88.183.121]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 44.89.31169.464735B5; Sat, 21 Jul 2018 19:59:00 +0200 (CEST) Received: from ESESSMR503.ericsson.se (153.88.183.112) by ESESSMB503.ericsson.se (153.88.183.121) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Sat, 21 Jul 2018 19:59:00 +0200 Received: from ESESBMB502.ericsson.se (153.88.183.169) by ESESSMR503.ericsson.se (153.88.183.112) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Sat, 21 Jul 2018 19:59:00 +0200 Received: from nomadiclab.fi.eu.ericsson.se (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.185) with Microsoft SMTP Server id 15.1.1466.3 via Frontend Transport; Sat, 21 Jul 2018 19:58:59 +0200 Received: from nomadiclab.fi.eu.ericsson.se (localhost [127.0.0.1]) by nomadiclab.fi.eu.ericsson.se (Postfix) with ESMTP id BCA564819B7; Sat, 21 Jul 2018 20:58:59 +0300 (EEST) Received: from [127.0.0.1] (localhost [IPv6:::1]) by nomadiclab.fi.eu.ericsson.se (Postfix) with ESMTP id 03D98480A68; Sat, 21 Jul 2018 20:58:58 +0300 (EEST) To: "Dr. Pala" , References: From: Mohit Sethi Message-ID: <9e029325-1d5d-8f68-6ce1-7af0f879f44e@ericsson.com> Date: Sat, 21 Jul 2018 13:58:58 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-AV-Checked: ClamAV using ClamSMTP X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrPLMWRmVeSWpSXmKPExsUyM2J7pW5KSXC0wYHVRhbH1q9lsZjy/wyr A5PHkiU/mTymT7zPEsAUxWWTkpqTWZZapG+XwJWxYs1K5oIFbBVbTio0MH5l6WLk5JAQMJFY vusvWxcjF4eQwFFGiT1/t7BAON8YJeav+cMG5yxuPc0M4VxklPi/fBIjSL+QwGZGicOt+hD2 QkaJGQ0CILawgKbErqYHbCC2iICxxJ9lz6EmtTBKzG5czgSSYBPQk+g8d5wZxOYVsJdYcHAC mM0ioCqx9MxVsAWiAhESq5e/YIWoEZQ4OfMJ2OGcAnYSxw+sAFvALGAhMXP+eUYIW15i+9s5 zBC2uMStJ/OZIB5VlljQsgjqaHWJrR0HGCcwis5CMnYWklGzkIyahWTUAkaWVYyixanFxbnp RkZ6qUWZycXF+Xl6eaklmxiB0XJwy2+rHYwHnzseYhTgYFTi4T2aEBwtxJpYVlyZe4hRgoNZ SYQ3PwooxJuSWFmVWpQfX1Sak1p8iFGag0VJnNcpzSJKSCA9sSQ1OzW1ILUIJsvEwSnVwBit ahwexxnY0D+ZYQX7+V6BEke1NROmdnrw6luY8vh43pi8ff2j2mUvNs8XT5fkbJ38uXvf4vSm 0/fSjtwv+L6nNOfT9D2fb09Wv1mSGPdMc813vYmGfpN0Ovf8Z3U69zF1io7t18Yr6g58k84E /NRy6PDi5fqlc5PjtuSnEkfnHW2q2jGOW5VYijMSDbWYi4oTAcgMTKSSAgAA Archived-At: Subject: Re: [Emu] New Chair: Mohit Sethi X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Jul 2018 17:59:05 -0000 Dear Doctor Pala, As the Tao of the IETF states (https://www.ietf.org/about/participate/tao/): "IETF is made up of volunteers" and "IETF makes voluntary standards". So both you and I work for free. That being said, I am excited about this additional responsibility and I am eager to work with the group in the coming months. --Mohit On 07/20/2018 05:33 PM, Dr. Pala wrote: > Congratulations Mohit! > > Now you can do more work for free :D > > Cheers, > Max > > > On 7/20/18 9:43 AM, Eric Rescorla wrote: >> I am pleased to announce that Mohit Sethi has agreed to serve as >> co-chair for EMU. >> >> Thanks to Mohit! >> >> -Ekr > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu From nobody Wed Jul 25 03:47:25 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BECF712F295 for ; Wed, 25 Jul 2018 03:47:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, T_KAM_HTML_FONT_INVALID=0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XP06djZK4oRH for ; Wed, 25 Jul 2018 03:47:19 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A484F12DD85 for ; Wed, 25 Jul 2018 03:47:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=37477; q=dns/txt; s=iport; t=1532515639; x=1533725239; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=CUC2k9Jcn6ishZDFiPQDyY58i664lCrAktCAMM8tMd8=; b=SaT/QIf6Dr/Of9wMGE8ThrBDmruckJD7ggiCMWvqYlesQEF7X5azTFjs Q4FFyaMUdwNzYOivOc0lMHNyVG7kWUr8hOH5Ps2l2G51qz7sIpKrUTa4q AzCgn+lcjllakvEtIIdHBpm/C7JG11Id3Q1sPKPPUqCeO3A78psguVbCy U=; X-Files: image001.png : 3146 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CgAQA8VFhb/4wNJK1bGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAYJXSC5jfygKg3SURIIMl0MIAQIjhEkCF4JKITcVAQIBAQI?= =?us-ascii?q?BAQJtHAyFNgEBAQQFHgIIAVsCAQgRBAEBBgEBARgKAgICBRABDgwdCAIEARE?= =?us-ascii?q?BBgIGCwKDBoF/D69VgS4fiicKBYkCF4FBP4ERghR+gxsBAQIBgTYRgxeCVQK?= =?us-ascii?q?WR4MuCQKFPQFWiReOB4Y+hAuHPQIRFIEkMyKBOwEOCHAVgySLFYU+bwEBjCe?= =?us-ascii?q?BLoEbAQE?= X-IronPort-AV: E=Sophos;i="5.51,401,1526342400"; d="png'150?scan'150,208,217,150";a="428617476" Received: from alln-core-7.cisco.com ([173.36.13.140]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 25 Jul 2018 10:47:18 +0000 Received: from XCH-RCD-015.cisco.com (xch-rcd-015.cisco.com [173.37.102.25]) by alln-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id w6PAlIVM001195 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 25 Jul 2018 10:47:18 GMT Received: from xch-rcd-012.cisco.com (173.37.102.22) by XCH-RCD-015.cisco.com (173.37.102.25) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 25 Jul 2018 05:47:17 -0500 Received: from xch-rcd-012.cisco.com ([173.37.102.22]) by XCH-RCD-012.cisco.com ([173.37.102.22]) with mapi id 15.00.1320.000; Wed, 25 Jul 2018 05:47:17 -0500 From: "Owen Friel (ofriel)" To: "Dr. Pala" , "emu@ietf.org" Thread-Topic: [Emu] Re-Charter Considerations Thread-Index: AQHUIHgEeCoGfOmjyk+3tGuOtSjBP6SfxzCQ Date: Wed, 25 Jul 2018 10:47:17 +0000 Message-ID: <722b4a97a3264075a50f02704b9b9e55@XCH-RCD-012.cisco.com> References: <4060a28f-3417-4693-06f9-6ddbe71d65d4@openca.org> In-Reply-To: <4060a28f-3417-4693-06f9-6ddbe71d65d4@openca.org> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.230.16.93] Content-Type: multipart/related; boundary="_004_722b4a97a3264075a50f02704b9b9e55XCHRCD012ciscocom_"; type="multipart/alternative" MIME-Version: 1.0 X-Outbound-SMTP-Client: 173.37.102.25, xch-rcd-015.cisco.com X-Outbound-Node: alln-core-7.cisco.com Archived-At: Subject: Re: [Emu] Re-Charter Considerations X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jul 2018 10:47:23 -0000 --_004_722b4a97a3264075a50f02704b9b9e55XCHRCD012ciscocom_ Content-Type: multipart/alternative; boundary="_000_722b4a97a3264075a50f02704b9b9e55XCHRCD012ciscocom_" --_000_722b4a97a3264075a50f02704b9b9e55XCHRCD012ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCkZyb206IEVtdSA8ZW11LWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBEci4gUGFs YQ0KU2VudDogRnJpZGF5IDIwIEp1bHkgMjAxOCAyMzoyMQ0KVG86IGVtdUBpZXRmLm9yZw0KU3Vi amVjdDogW0VtdV0gUmUtQ2hhcnRlciBDb25zaWRlcmF0aW9ucw0KDQoNCkhpIEVtdS1lcnMsDQoN Ckkgd2FudGVkIHRvIGZvbGxvdyB1cCB0aGUgZGlzY3Vzc2lvbiBmcm9tIHRvZGF5J3MgbWVldGlu Zy4gSW4gcGFydGljdWxhciwgdGhlcmUgaXMgc29tZSB3b3JrIHRoYXQgaGFzIGJlZW4gcHJvcG9z ZWQgdGhhdCBtaWdodCByZXF1aXJlIHJlLWNoYXJ0ZXJpbmcgYXMgaW5kaWNhdGVkIGJ5IEVrciBh bmQgc3VwcG9ydGVkIGJ5IHRoZSBDaGFpcihzKS4NCg0KSSB3b3VsZCBsaWtlIHRvIHB1c2ggZm9y d2FyZCB0aGUgcmVxdWVzdCBmb3IgcmUtY2hhcnRlcmluZywgaW4gcGFydGljdWxhciwgSSB3b3Vs ZCBsaWtlIHRvIGFkZCB0aGUgZGVmaW5pdGlvbiBvZiBvbmUgKG9yIG1vcmUpIEVBUC1iYXNlZCBj cmVkZW50aWFscyBwcm92aXNpb25pbmcgbWVjaGFuaXNtcyB0aGF0IHdvdWxkIGZpdCBtYW55IHVz ZSBjYXNlcyB0aGF0IHdlIGFyZSBjdXJyZW50bHkgd29ya2luZyBvbiBpbiBkaWZmZXJlbnQgb3Jn YW5pemF0aW9ucy4NCg0KSW4gcGFydGljdWxhciwgdGhlIHVzZSBjYXNlcyB0aGF0IEkgYW0gcmVm ZXJyaW5nIHRvIGFyZSB0aGUgZm9sbG93aW5nOg0KDQogICogICBDZWxsdWxhciBOZXR3b3Jrcy4g VGhlIHByb3Zpc2lvbmluZyBvZiBDZXJ0aWZpY2F0ZXMgKG9yIG90aGVyIGNyZWRlbnRpYWxzKSB0 byBlbmFibGUgdGhlIHVzZSBvZiBFQVAgbWV0aG9kcyBpbiBkaWZmZXJlbnQgZW52aXJvbm1lbnRz IChlLmcuLCBDQlJTIEFsbGlhbmNlLCBNdXRsZUZpcmUsIGV0Yy4pIGhhcyBiZWVuIGEgcHJvYmxl bSB0aGF0IHRoZSBjdXJyZW50IGVjb3N5c3RlbSBoYXZlIG5vdCBhZGRyZXNzZWQgZWZmaWNpZW50 bHkuIFRoZSB1c2Ugb2YgT1NVIHNlcnZlcnMgYW5kIHRoZSBjb21wbGV4aXR5IChhbmQgYXNzb2Np YXRlZCByaXNrcykgb2YgYWxsb3dpbmcgKHBhcnRpYWwpIElQIGFjY2VzcyB0byBub24tYXV0aGVu dGljYXRlZCBkZXZpY2VzIGhhcyBsaW1pdGVkIHRoZSBwb3NzaWJpbGl0eSBmb3IgaW4tbGluZSBw cm92aXNpb25pbmcgb2YgZGV2aWNlcy4gVGhlIHVzZSBvZiBhbiBFQVAtYmFzZWQgbWVjaGFuaXNt IHRoYXQgY2FuIGJlIHVzZWQgZm9yIGNyZWRlbnRpYWxzIHByb3Zpc2lvbmluZyAoYW5kIHJlbmV3 YWwpIHdvdWxkIGdyZWF0bHkgaW1wcm92ZSB0aGUgZmVhc2liaWxpdHkgb2YgaW4tYmFuZCBjcmVk ZW50aWFscyBkZXBsb3ltZW50LiBUaGlzIGF1dGhlbnRpY2F0aW9uIG1lY2hhbmlzbSB3b3VsZCBp bXByb3ZlIHRoZSBwb3NzaWJpbGl0eSB0byB1c2UgNEdcTFRFIChhbmQgZnV0dXJlIDVHKSBuZXR3 b3JrcyBmb3IgSW9UIGNyZWRlbnRpYWxzIG1hbmFnZW1lbnQgd2hpY2gsIHRvZGF5LCBzZWVtcyB0 byBiZSBpZ25vcmVkIGJlY2F1c2Ugb2YgdGhlIGNvbXBsZXhpdHkgcmVxdWlyZWQgb24gdGhlIGRl dmljZS4NCg0KICAqICAgQ2FibGUgTmV0d29ya3MuIFdpdGggdGhlIGRlcGxveW1lbnQgb2YgdGhl IG5ldyBET0NTSVMgMy4xIEZEWCBzcGVjaWZpY2F0aW9ucyBhbmQgaXRzIG5ld2x5IGRlZmluZWQg c3VwcG9ydCBmb3IgRUFQIGF1dGhlbnRpY2F0aW9uIHZpYSBYLjUwOSBjZXJ0aWZpY2F0ZSB0aHJv dWdob3V0IHRoZSB3aG9sZSBlY29zeXN0ZW0sIHRoZSBhYmlsaXR5IHRvIHByb3ZpZGUgYW4gRUFQ LWJhc2VkIG1lY2hhbmlzbSB0aGF0IGNhbiBiZSB1c2VkIGZvciBjcmVkZW50aWFscyBwcm92aXNp b25pbmcgYW5kIHJlbmV3YWwsIHdvdWxkIGdyZWF0ZWx5IGltcHJvdmUgdGhlIGZlYXNpYmlsaXR5 IG9mIGluLWJhbmQgY3JlZGVudGlhbHMgZGVwbG95bWVudCBhbHNvIGluIHRoaXMgY2FzZSBhbmQg dGhlIHBvc3NpYmlsaXR5IHRvIGZ1cnRoZXIgc2VjdXJlIHRoZSBpbmZyYXN0cnVjdHVyZSBieSBh bGxvd2luZyBmb3IgYmV0dGVyIGNlcnRpZmljYXRlcyBtYW5hZ2VtZW50IChpLmUuLCByZW5ld2Fs LCBkZXBsb3ltZW50LCBldGMuKQ0KDQogICogICAgODAyLjF4IC8gV0JBIC8gSFMyLjAuIEFsc28g aW4gdGhlc2UgZWNvc3lzdGVtcywgdGhlIHBvc3NpYmlsaXR5IHRvIHByb3Zpc2lvbiAoYW5kIHJl LXByb3Zpc2lvbikgZHluYW1pY2FsbHkgY3JlZGVudGlhbHMgb3BlbnMgdXAgdGhlIHBvc3NpYmls aXR5IGZvciBtb3JlIHNlY3VyZSBtYW5hZ2VtZW50IG9mIGlkZW50aXRpZXMuIEFzIGluIHRoZSBw cmV2aW91cyB1c2UtY2FzZXMsIHRoZSBtYW5hZ2VtZW50IGRpcmVjdGx5IGF0IGxheWVyIDIgYWxs b3dzIGZvciBhIHNpbXBsZSAoYW5kIGV4dGVuc2libGUgOkQpIGFwcHJvYWNoIHRvIGNyZWRlbnRp YWxzIHByb3Zpc2lvbmluZyBmb3IgZGV2aWNlcy4NCg0KVGhlcmVmb3JlLCBjb3VudGluZyB0aGUg ZmFjdCB0aGF0IGFsbCB0aGVzZSBlY29zeXN0ZW1zIGFyZSBsb29raW5nIGF0IGEgc3RhbmRhcmRp emVkIC8gY29tbW9uIHNvbHV0aW9uIHRvIHNvbHZlIHRoZSBzYW1lIGlzc3VlLCBJIHRoaW5rIGl0 IGlzIHRoZSByaWdodCB0aW1lIHRvIGV2YWx1YXRlIHRoZSBwb3NzaWJpbGl0eSB0byB3b3JrIG9u IHRoaXMgaW1wb3J0YW50IGFzcGVjdC4NCg0KSW4gbXkgb3BpbmlvbiwgdGhlIFdHIHNob3VsZCBv cGVuIHVwIHRvIGV2YWx1YXRlIHRoZSBwb3NzaWJpbGl0eSB0byB3b3JrIG9uIHRoZSBzdGFuZGFy ZGl6YXRpb24gb2YgRUFQLWJhc2VkIHByb3Zpc2lvbmluZyBtZWNoYW5pc21zIHRoYXQgd291bGQg YWxsb3cgZm9yIGVhc2llciBtYW5hZ2VtZW50IG9wdGlvbnMgc2FmZXIgbGlmZS1jeWNsZXMgb2Yg ZGV2aWNlIGFuZCBzdWJzY3JpYmVycyBjcmVkZW50aWFscy4NCg0KT24gdGhlIG5lZWQgdG8gcmUt Y2hhcnRlciwgSSB3b3VsZCBsaWtlIHRvIHBvaW50IG91dCB0aGF0IHRoaXMgdHlwZSBvZiB3b3Jr IGhhcyBiZWVuIGRvbmUgaW4gdGhlIHBhc3QsIHRoZXJlZm9yZSBpcyBub3QgYSBjb21wbGV0ZWx5 IG5ldyB0ZXJyaXRvcnkgKGkuZS4sIFRFQVAgLyBFU1QpLg0KDQpbb2ZyaWVsXSBBZ3JlZWQuIFRF QVAgYWxyZWFkeSBzdXBwb3J0cyBwcm92aXNpb25pbmcgbW9kZSBvZiBvcGVyYXRpb24sIGFuZCBw cm92aXNpb25pbmcgb2YgUEFDLCBjZXJ0aWZpY2F0ZXMgYW5kIHNlcnZlciB0cnVzdGVkIHJvb3Rz Og0KDQogICAgICAgMy44LjE8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcxNzAjc2Vj dGlvbi0zLjguMT4uICBQQUMgUHJvdmlzaW9uaW5nICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgMjE8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcxNzAjcGFnZS0y MT4NCg0KICAgICAgIDMuOC4yPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MTcwI3Nl Y3Rpb24tMy44LjI+LiAgQ2VydGlmaWNhdGUgUHJvdmlzaW9uaW5nIHdpdGhpbiB0aGUgVHVubmVs ICAuIC4gLiAuIC4gIDIyPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MTcwI3BhZ2Ut MjI+DQoNCiAgICAgICAzLjguMzxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzE3MCNz ZWN0aW9uLTMuOC4zPi4gIFNlcnZlciBVbmF1dGhlbnRpY2F0ZWQgUHJvdmlzaW9uaW5nIE1vZGUg IC4gLiAuIC4gLiAuICAyMzxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzE3MCNwYWdl LTIzPg0KDQoNCiAgICAgICA0LjIuMTY8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcx NzAjc2VjdGlvbi00LjIuMTY+LiBQS0NTIzcgVExWICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgNTM8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcxNzAj cGFnZS01Mz4NCg0KICAgICAgIDQuMi4xNzxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZj NzE3MCNzZWN0aW9uLTQuMi4xNz4uIFBLQ1MjMTAgVExWIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA1NDxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzE3 MCNwYWdlLTU0Pg0KDQogICAgICAgNC4yLjE4PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9y ZmM3MTcwI3NlY3Rpb24tNC4yLjE4Pi4gVHJ1c3RlZC1TZXJ2ZXItUm9vdCBUTFYgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDU1PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3 MTcwI3BhZ2UtNTU+DQoNClNvIHdoaWxlIHByb3Zpc2lvbmluZyBpcyBvdXQgb2Ygc2NvcGUgb2Yg dGhlIGN1cnJlbnQgY2hhcnRlciwgaXQgbXVzdCBoYXZlIHByZXZpb3VzbHkgYmVlbiBpbiBzY29w ZSBkdXJpbmcgVEVBUCBzdGFuZGFyZGlzYXRpb24uIEZvciB0aGUgc3BlY2lmaWMgQU5JTUEgdXNl IGNhc2Ugd2UgaGFkIGluIG1pbmQsIHdlIHByb3Bvc2VkIHJldXNpbmcgZXhpc3RpbmcgVEVBUCBQ cm92aXNpb25pbmcgTW9kZSwgUEtDUyBlbnJvbG1lbnQsIGFuZCBUcnVzdGVkLVNlcnZlci1Sb290 IHByb3Zpc2lvbmluZywgYW5kIGV4dGVuZGluZyB0aGF0IHRvIHN1cHBvcnQgdGhlIEFOSU1BIEJS U0tJIHNwZWNpZmljcy4NCg0KDQoNCg0KDQpXaGF0IHdlIG5lZWQgbm93IGlzIHRoZSBwb3NzaWJp bGl0eSB0byBhZGRyZXNzIChhKSB0aGUgYm9vdHN0cmFwcGluZyBwcm9ibGVtLCBhbmQgKGIpIHRo ZSBuZWVkIGZvciBzdXBwb3J0aW5nIGFkZGl0aW9uYWwgcHJvdmlzaW9uaW5nIHByb3RvY29scyB0 aGF0IGFkZHJlc3MgZGlmZmVyZW50IGVjb3N5c3RlbXMgKGkuZS4sIHNpbXBsZXIgYXBwcm9hY2hl cyB0aGF0IGNhbiBiZSBpbXBsZW1lbnRlZCBpbiBzdWItc3lzdGVtcyBsaWtlIG1pY3JvLWNvbnRy b2xsZXJzIC0gdGhpcyB3b3VsZCBmYWNpbGl0YXRlIHRoZSBpbnRlZ3JhdGlvbiBvZiBjcmVkZW50 aWFscyBtYW5hZ2VtZW50IGluZGVwZW5kZW50IGZyb20gdGhlIGFwcGxpY2F0aW9uIGxheWVyIC8g d2lmaSBtb2R1bGUgLyBldGMuKSwgYW5kIChjKSB0aGUgcG9zc2liaWxpdHkgb2YgZGVmaW5pbmcg cHJvdmlzaW9uaW5nIHByb3RvY29scyB0aGF0IG1pZ2h0IGJlIHVzZWQgd2l0aCBvciB3aXRob3V0 IGFkZGl0aW9uYWwgbGF5ZXJzIChlLmcuLCBFQVAtdHVubmVsaW5nKS4NCg0KSSBob3BlIHdlIHdp bGwgaGF2ZSB0aGUgcG9zc2liaWxpdHkgdG8gd29yayBvbiB0aGlzIGltcG9ydGFudCB0b3BpYyB0 aGF0LCBJTU8sIGhhdmUgdGhlIHBvc3NpYmlsaXR5IHRvIGltcGFjdCBtYW55IG1pbGxpb25zIG9m IHBlb3BsZSBhcm91bmQgdGhlIHdvcmxkIGFuZCB0aGUgc2VjdXJpdHkgb2Ygb3VyIG5ldHdvcmtz IChDZWxsdWxhciwgV2lGaSwgQ29ycG9yYXRlLCBhbmQgSG9tZSkuDQoNCkxvb2tpbmcgZm9yd2Fy ZCB0byBhIHByb2R1Y3RpdmUgZGlzY3Vzc2lvbiENCg0KQ2hlZXJzLA0KTWF4DQotLQ0KQmVzdCBS ZWdhcmRzLA0KTWFzc2ltaWxpYW5vIFBhbGEsIFBoLkQuDQpPcGVuQ0EgTGFicyBEaXJlY3Rvcg0K W09wZW5DQSBMb2dvXQ0K --_000_722b4a97a3264075a50f02704b9b9e55XCHRCD012ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6 MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBj bTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZh bWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjsNCgljb2xvcjpibGFjazt9DQphOmxpbmssIHNw YW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0Mx Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVy bGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0K CXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJZm9udC1zaXplOjEyLjBw dDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjsNCgljb2xvcjpibGFjazt9 DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFBy ZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsN Cglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6 d2luZG93dGV4dDt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWww DQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmOw0KCWNvbG9yOmJsYWNrO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5 bGU6bm9ybWFsO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6 IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28t c3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyI7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9u dC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4w cHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0 IGwwDQoJe21zby1saXN0LWlkOjQ4MzAxNDQ3NDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTEx Nzc3ODMwNjY7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjM2LjBwdDsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsN Cgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlz dCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOjcyLjBwdDsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNp emU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWJpZGktZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjEwOC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWls eTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjE0NC4w cHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4w cHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7 fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjE4MC4wcHQ7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6 bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIxNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjI1Mi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjI4OC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpX aW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMyNC4wcHQ7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0K QGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6Njk2MDA1ODk0Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlk czotMTQ4OTQ2OTI4Njt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MzYu MHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NzIuMHB0Ow0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZv bnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgltc28tYmlkaS1m b250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6MTA4LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 MTQ0LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5Oldpbmdk aW5nczt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MTgwLjBwdDsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglt c28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlz dCBsMTpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MjE2LjBwdDsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250 LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTpsZXZlbDcN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6MjUyLjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTpsZXZlbDgNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6Mjg4LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MzI0 LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4 LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5n czt9DQpAbGlzdCBsMg0KCXttc28tbGlzdC1pZDoxMzU5Njk2ODEzOw0KCW1zby1saXN0LXRlbXBs YXRlLWlkczotMTY2MjA3NDcwMDt9DQpAbGlzdCBsMjpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3lt Ym9sO30NCkBsaXN0IGwyOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NzIuMHB0Ow0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1h bnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgltc28t YmlkaS1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMjpsZXZlbDMNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6MTA4LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDQNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6MTQ0LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5 OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MTgwLjBw dDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBw dDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9 DQpAbGlzdCBsMjpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MjE2LjBwdDsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjps ZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MjUyLjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDgNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6Mjg4LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6MzI0LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5Oldp bmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQp1bA0KCXttYXJnaW4tYm90dG9t OjBjbTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZh dWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwh LS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86 aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFb ZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tSUUiIGxp bms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6d2luZG93dGV4dDtt c28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOndpbmRvd3RleHQ7bXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4w cHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOndpbmRvd3RleHQiPkZyb206PC9zcGFu PjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOndpbmRvd3RleHQiPiBFbXUg Jmx0O2VtdS1ib3VuY2VzQGlldGYub3JnJmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5Eci4gUGFs YTxicj4NCjxiPlNlbnQ6PC9iPiBGcmlkYXkgMjAgSnVseSAyMDE4IDIzOjIxPGJyPg0KPGI+VG86 PC9iPiBlbXVAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW0VtdV0gUmUtQ2hhcnRlciBD b25zaWRlcmF0aW9uczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwPkhpIEVtdS1lcnMsPG86 cD48L286cD48L3A+DQo8cD5JIHdhbnRlZCB0byBmb2xsb3cgdXAgdGhlIGRpc2N1c3Npb24gZnJv bSB0b2RheSdzIG1lZXRpbmcuIEluIHBhcnRpY3VsYXIsIHRoZXJlIGlzIHNvbWUgd29yayB0aGF0 IGhhcyBiZWVuIHByb3Bvc2VkIHRoYXQgbWlnaHQgcmVxdWlyZSByZS1jaGFydGVyaW5nIGFzIGlu ZGljYXRlZCBieSBFa3IgYW5kIHN1cHBvcnRlZCBieSB0aGUgQ2hhaXIocykuPG86cD48L286cD48 L3A+DQo8cD5JIHdvdWxkIGxpa2UgdG8gcHVzaCBmb3J3YXJkIHRoZSByZXF1ZXN0IGZvciByZS1j aGFydGVyaW5nLCBpbiBwYXJ0aWN1bGFyLCBJIHdvdWxkIGxpa2UgdG8gYWRkIHRoZSBkZWZpbml0 aW9uIG9mIG9uZSAob3IgbW9yZSkgRUFQLWJhc2VkIGNyZWRlbnRpYWxzIHByb3Zpc2lvbmluZyBt ZWNoYW5pc21zIHRoYXQgd291bGQgZml0IG1hbnkgdXNlIGNhc2VzIHRoYXQgd2UgYXJlIGN1cnJl bnRseSB3b3JraW5nIG9uIGluIGRpZmZlcmVudCBvcmdhbml6YXRpb25zLjxvOnA+PC9vOnA+PC9w Pg0KPHA+SW4gcGFydGljdWxhciwgdGhlIHVzZSBjYXNlcyB0aGF0IEkgYW0gcmVmZXJyaW5nIHRv IGFyZSB0aGUgZm9sbG93aW5nOjxvOnA+PC9vOnA+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxp IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMiBsZXZlbDEgbGZvMSI+DQo8Yj5DZWxsdWxh ciBOZXR3b3Jrcy48L2I+IFRoZSBwcm92aXNpb25pbmcgb2YgQ2VydGlmaWNhdGVzIChvciBvdGhl ciBjcmVkZW50aWFscykgdG8gZW5hYmxlIHRoZSB1c2Ugb2YgRUFQIG1ldGhvZHMgaW4gZGlmZmVy ZW50IGVudmlyb25tZW50cyAoZS5nLiwgQ0JSUyBBbGxpYW5jZSwgTXV0bGVGaXJlLCBldGMuKSBo YXMgYmVlbiBhIHByb2JsZW0gdGhhdCB0aGUgY3VycmVudCBlY29zeXN0ZW0gaGF2ZSBub3QgYWRk cmVzc2VkIGVmZmljaWVudGx5Lg0KIFRoZSB1c2Ugb2YgT1NVIHNlcnZlcnMgYW5kIHRoZSBjb21w bGV4aXR5IChhbmQgYXNzb2NpYXRlZCByaXNrcykgb2YgYWxsb3dpbmcgKHBhcnRpYWwpIElQIGFj Y2VzcyB0byBub24tYXV0aGVudGljYXRlZCBkZXZpY2VzIGhhcyBsaW1pdGVkIHRoZSBwb3NzaWJp bGl0eSBmb3IgaW4tbGluZSBwcm92aXNpb25pbmcgb2YgZGV2aWNlcy4gVGhlIHVzZSBvZiBhbiBF QVAtYmFzZWQgbWVjaGFuaXNtIHRoYXQgY2FuIGJlIHVzZWQgZm9yIGNyZWRlbnRpYWxzDQogcHJv dmlzaW9uaW5nIChhbmQgcmVuZXdhbCkgd291bGQgZ3JlYXRseSBpbXByb3ZlIHRoZSBmZWFzaWJp bGl0eSBvZiBpbi1iYW5kIGNyZWRlbnRpYWxzIGRlcGxveW1lbnQuIFRoaXMgYXV0aGVudGljYXRp b24gbWVjaGFuaXNtIHdvdWxkIGltcHJvdmUgdGhlIHBvc3NpYmlsaXR5IHRvIHVzZSA0R1xMVEUg KGFuZCBmdXR1cmUgNUcpIG5ldHdvcmtzIGZvciBJb1QgY3JlZGVudGlhbHMgbWFuYWdlbWVudCB3 aGljaCwgdG9kYXksIHNlZW1zIHRvIGJlDQogaWdub3JlZCBiZWNhdXNlIG9mIHRoZSBjb21wbGV4 aXR5IHJlcXVpcmVkIG9uIHRoZSBkZXZpY2UuPG86cD48L286cD48L2xpPjwvdWw+DQo8dWwgdHlw ZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwxIGxldmVsMSBsZm8y Ij4NCjxiPkNhYmxlIE5ldHdvcmtzLjwvYj4gV2l0aCB0aGUgZGVwbG95bWVudCBvZiB0aGUgbmV3 IERPQ1NJUyAzLjEgRkRYIHNwZWNpZmljYXRpb25zIGFuZCBpdHMgbmV3bHkgZGVmaW5lZCBzdXBw b3J0IGZvciBFQVAgYXV0aGVudGljYXRpb24gdmlhIFguNTA5IGNlcnRpZmljYXRlIHRocm91Z2hv dXQgdGhlIHdob2xlIGVjb3N5c3RlbSwgdGhlIGFiaWxpdHkgdG8gcHJvdmlkZSBhbiBFQVAtYmFz ZWQgbWVjaGFuaXNtIHRoYXQgY2FuIGJlIHVzZWQgZm9yDQogY3JlZGVudGlhbHMgcHJvdmlzaW9u aW5nIGFuZCByZW5ld2FsLCB3b3VsZCBncmVhdGVseSBpbXByb3ZlIHRoZSBmZWFzaWJpbGl0eSBv ZiBpbi1iYW5kIGNyZWRlbnRpYWxzIGRlcGxveW1lbnQgYWxzbyBpbiB0aGlzIGNhc2UgYW5kIHRo ZSBwb3NzaWJpbGl0eSB0byBmdXJ0aGVyIHNlY3VyZSB0aGUgaW5mcmFzdHJ1Y3R1cmUgYnkgYWxs b3dpbmcgZm9yIGJldHRlciBjZXJ0aWZpY2F0ZXMgbWFuYWdlbWVudCAoaS5lLiwgcmVuZXdhbCwg ZGVwbG95bWVudCwNCiBldGMuKTxvOnA+PC9vOnA+PC9saT48L3VsPg0KPHVsIHR5cGU9ImRpc2Mi Pg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMCBsZXZlbDEgbGZvMyI+DQombmJz cDs8Yj44MDIuMXggLyBXQkEgLyBIUzIuMC48L2I+IEFsc28gaW4gdGhlc2UgZWNvc3lzdGVtcywg dGhlIHBvc3NpYmlsaXR5IHRvIHByb3Zpc2lvbiAoYW5kIHJlLXByb3Zpc2lvbikgZHluYW1pY2Fs bHkgY3JlZGVudGlhbHMgb3BlbnMgdXAgdGhlIHBvc3NpYmlsaXR5IGZvciBtb3JlIHNlY3VyZSBt YW5hZ2VtZW50IG9mIGlkZW50aXRpZXMuIEFzIGluIHRoZSBwcmV2aW91cyB1c2UtY2FzZXMsIHRo ZSBtYW5hZ2VtZW50IGRpcmVjdGx5IGF0IGxheWVyDQogMiBhbGxvd3MgZm9yIGEgc2ltcGxlIChh bmQgZXh0ZW5zaWJsZSA6RCkgYXBwcm9hY2ggdG8gY3JlZGVudGlhbHMgcHJvdmlzaW9uaW5nIGZv ciBkZXZpY2VzLjxvOnA+PC9vOnA+PC9saT48L3VsPg0KPHA+VGhlcmVmb3JlLCBjb3VudGluZyB0 aGUgZmFjdCB0aGF0IGFsbCB0aGVzZSBlY29zeXN0ZW1zIGFyZSBsb29raW5nIGF0IGEgc3RhbmRh cmRpemVkIC8gY29tbW9uIHNvbHV0aW9uIHRvIHNvbHZlIHRoZSBzYW1lIGlzc3VlLCBJIHRoaW5r IGl0IGlzIHRoZSByaWdodCB0aW1lIHRvIGV2YWx1YXRlIHRoZSBwb3NzaWJpbGl0eSB0byB3b3Jr IG9uIHRoaXMgaW1wb3J0YW50IGFzcGVjdC48bzpwPjwvbzpwPjwvcD4NCjxwPkluIG15IG9waW5p b24sIHRoZSBXRyBzaG91bGQgb3BlbiB1cCB0byBldmFsdWF0ZSB0aGUgcG9zc2liaWxpdHkgdG8g d29yayBvbiB0aGUgc3RhbmRhcmRpemF0aW9uIG9mIEVBUC1iYXNlZCBwcm92aXNpb25pbmcgbWVj aGFuaXNtcyB0aGF0IHdvdWxkIGFsbG93IGZvciBlYXNpZXIgbWFuYWdlbWVudCBvcHRpb25zIHNh ZmVyIGxpZmUtY3ljbGVzIG9mIGRldmljZSBhbmQgc3Vic2NyaWJlcnMgY3JlZGVudGlhbHMuPG86 cD48L286cD48L3A+DQo8cD5PbiB0aGUgbmVlZCB0byByZS1jaGFydGVyLCBJIHdvdWxkIGxpa2Ug dG8gcG9pbnQgb3V0IHRoYXQgdGhpcyB0eXBlIG9mIHdvcmsgaGFzIGJlZW4gZG9uZSBpbiB0aGUg cGFzdCwgdGhlcmVmb3JlIGlzIG5vdCBhIGNvbXBsZXRlbHkgbmV3IHRlcnJpdG9yeSAoaS5lLiwg VEVBUCAvIEVTVCkuDQo8c3BhbiBzdHlsZT0iY29sb3I6d2luZG93dGV4dCI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHA+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOndpbmRvd3RleHQiPltvZnJpZWxd IEFncmVlZC4NCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6d2luZG93dGV4dDttc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+VEVBUCBhbHJlYWR5IHN1cHBvcnRzIHByb3Zpc2lvbmluZyBt b2RlIG9mIG9wZXJhdGlvbiwgYW5kIHByb3Zpc2lvbmluZyBvZiBQQUMsIGNlcnRpZmljYXRlcyBh bmQgc2VydmVyIHRydXN0ZWQgcm9vdHM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHByZT48c3Bh biBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyA8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzE3MCNzZWN0aW9uLTMu OC4xIj4zLjguMTwvYT4uJm5ic3A7IFBBQyBQcm92aXNpb25pbmcmbmJzcDsgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4mbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL3JmYzcxNzAjcGFnZS0yMSI+MjE8L2E+PG86cD48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICZuYnNwOyZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MTcw I3NlY3Rpb24tMy44LjIiPjMuOC4yPC9hPi4mbmJzcDsgQ2VydGlmaWNhdGUgUHJvdmlzaW9uaW5n IHdpdGhpbiB0aGUgVHVubmVsJm5ic3A7IC4gLiAuIC4gLiZuYnNwOyA8YSBocmVmPSJodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzE3MCNwYWdlLTIyIj4yMjwvYT48bzpwPjwvbzpwPjwv c3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL3JmYzcxNzAjc2VjdGlvbi0zLjguMyI+My44LjM8L2E+LiZuYnNwOyBTZXJ2ZXIgVW5hdXRo ZW50aWNhdGVkIFByb3Zpc2lvbmluZyBNb2RlJm5ic3A7IC4gLiAuIC4gLiAuJm5ic3A7IDxhIGhy ZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MTcwI3BhZ2UtMjMiPjIzPC9hPjxv OnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOndpbmRvd3RleHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL3JmYzcxNzAjc2VjdGlvbi00LjIuMTYiPjQuMi4xNjwvYT4uIFBLQ1MjNyBU TFYmbmJzcDsgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4mbmJzcDsg PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcxNzAjcGFnZS01MyI+NTM8 L2E+PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFj ayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MTcwI3NlY3Rpb24tNC4yLjE3Ij40LjIuMTc8L2E+LiBQ S0NTIzEwIFRMViAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiZuYnNw OyA8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzE3MCNwYWdlLTU0Ij41 NDwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9yOmJs YWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0iaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcxNzAjc2VjdGlvbi00LjIuMTgiPjQuMi4xODwvYT4u IFRydXN0ZWQtU2VydmVyLVJvb3QgVExWIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuJm5i c3A7IDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MTcwI3BhZ2UtNTUi PjU1PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOndpbmRvd3RleHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjp3aW5kb3d0ZXh0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5T byB3aGlsZSBwcm92aXNpb25pbmcgaXMgb3V0IG9mIHNjb3BlIG9mIHRoZSBjdXJyZW50IGNoYXJ0 ZXIsIGl0IG11c3QgaGF2ZSBwcmV2aW91c2x5IGJlZW4gaW4gc2NvcGUgZHVyaW5nIFRFQVAgc3Rh bmRhcmRpc2F0aW9uLg0KIEZvciB0aGUgc3BlY2lmaWMgQU5JTUEgdXNlIGNhc2Ugd2UgaGFkIGlu IG1pbmQsIHdlIHByb3Bvc2VkIHJldXNpbmcgZXhpc3RpbmcgVEVBUCBQcm92aXNpb25pbmcgTW9k ZSwgUEtDUyBlbnJvbG1lbnQsIGFuZCBUcnVzdGVkLVNlcnZlci1Sb290IHByb3Zpc2lvbmluZywg YW5kIGV4dGVuZGluZyB0aGF0IHRvIHN1cHBvcnQgdGhlIEFOSU1BIEJSU0tJIHNwZWNpZmljcy48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6d2luZG93dGV4 dDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHA+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOndpbmRvd3RleHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwPldoYXQgd2UgbmVlZCBub3cgaXMgdGhlIHBvc3NpYmlsaXR5IHRvIGFk ZHJlc3MgKGEpIHRoZSBib290c3RyYXBwaW5nIHByb2JsZW0sIGFuZCAoYikgdGhlIG5lZWQgZm9y IHN1cHBvcnRpbmcgYWRkaXRpb25hbCBwcm92aXNpb25pbmcgcHJvdG9jb2xzIHRoYXQgYWRkcmVz cyBkaWZmZXJlbnQgZWNvc3lzdGVtcyAoaS5lLiwgc2ltcGxlciBhcHByb2FjaGVzIHRoYXQgY2Fu IGJlIGltcGxlbWVudGVkIGluIHN1Yi1zeXN0ZW1zIGxpa2UgbWljcm8tY29udHJvbGxlcnMNCiAt IHRoaXMgd291bGQgZmFjaWxpdGF0ZSB0aGUgaW50ZWdyYXRpb24gb2YgY3JlZGVudGlhbHMgbWFu YWdlbWVudCBpbmRlcGVuZGVudCBmcm9tIHRoZSBhcHBsaWNhdGlvbiBsYXllciAvIHdpZmkgbW9k dWxlIC8gZXRjLiksIGFuZCAoYykgdGhlIHBvc3NpYmlsaXR5IG9mIGRlZmluaW5nIHByb3Zpc2lv bmluZyBwcm90b2NvbHMgdGhhdCBtaWdodCBiZSB1c2VkIHdpdGggb3Igd2l0aG91dCBhZGRpdGlv bmFsIGxheWVycyAoZS5nLiwgRUFQLXR1bm5lbGluZykuPG86cD48L286cD48L3A+DQo8cD5JIGhv cGUgd2Ugd2lsbCBoYXZlIHRoZSBwb3NzaWJpbGl0eSB0byB3b3JrIG9uIHRoaXMgaW1wb3J0YW50 IHRvcGljIHRoYXQsIElNTywgaGF2ZSB0aGUgcG9zc2liaWxpdHkgdG8gaW1wYWN0IG1hbnkgbWls bGlvbnMgb2YgcGVvcGxlIGFyb3VuZCB0aGUgd29ybGQgYW5kIHRoZSBzZWN1cml0eSBvZiBvdXIg bmV0d29ya3MgKENlbGx1bGFyLCBXaUZpLCBDb3Jwb3JhdGUsIGFuZCBIb21lKS48bzpwPjwvbzpw PjwvcD4NCjxwPkxvb2tpbmcgZm9yd2FyZCB0byBhIHByb2R1Y3RpdmUgZGlzY3Vzc2lvbiE8bzpw PjwvbzpwPjwvcD4NCjxwPkNoZWVycyw8YnI+DQpNYXg8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4tLSA8bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9Im1hcmdp bi10b3A6Ny41cHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVzdCBSZWdhcmRzLCA8bzpwPjwv bzpwPjwvcD4NCjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6My43NXB0Ij4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk1hc3NpbWlsaWFubyBQYWxhLCBQaC5ELjxicj4NCk9wZW5DQSBMYWJzIERpcmVjdG9y PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxpbWcgYm9yZGVy PSIwIiB3aWR0aD0iMTAwIiBoZWlnaHQ9IjU0IiBzdHlsZT0id2lkdGg6MS4wNDE2aW47aGVpZ2h0 Oi41NTk1aW4iIGlkPSJfeDAwMDBfaTEwMjUiIHNyYz0iY2lkOmltYWdlMDAxLnBuZ0AwMUQ0MjQw RC4zMUVFNDJBMCIgYWx0PSJPcGVuQ0EgTG9nbyI+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_722b4a97a3264075a50f02704b9b9e55XCHRCD012ciscocom_-- --_004_722b4a97a3264075a50f02704b9b9e55XCHRCD012ciscocom_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=3146; creation-date="Wed, 25 Jul 2018 10:47:17 GMT"; modification-date="Wed, 25 Jul 2018 10:47:17 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAGQAAAA2CAMAAAAGesyaAAADAFBMVEUsJiEAAQAKAwMABwoXBwES CQAqDgEkEQItFQESGykaGh0WGyE1FwE9GwJHHwElJiY4JBQmKDE1KCAfLUQ8KygoMEAqMjpXKgs/ MilMMR0pOFEyOUo4OTo1OkRqMgpjOBlpNxUwQV1DPz48QExdOyM4QVV+OQRRQzo1SGdDR0lDSFJf RDFASVyaPwF+RRpNT1I9UXlwSi8+UnNDUm6hQgCPRhBdUEZTUlBKVGlPVF27PgCaSANtUT57VBer SQOMUgxHW4KMUiepTwmJVDh6WT6KVjGCWDpRYH21TwFiYF57YgJXYXaeVR+lVRZrYld1ZiB7YEuS YQBgZW+8VAlkZWjBVQCfXiqqXwG1WhPLVgedYDazXiDZVgCWZEDVWQJ1blapYjbXWgDRXACMaU6W bgCiZjnIXw9mcIixZC6pZjJ/cUeLbFdycmZ4cGnnWwNwc3WqaS6BcGeobwndXwzkXwLgYgDaYwyM eCq/bQHJaBi9ajDMagWVegvRZxzVaAvXaQDLainqZAuvcEPrZQDQaSyockrFbSvmZwnabQLvZwDp aQB0fpPkaxGld1d+f3/3aACfeV6RfG2JfnLebSF7gYy2fQmugQCigxW8d0K3eEr1bQXaciTicRqK gnzNewHuchbUdzKYiDzrdwKah1erjAvOfEXleSq5g1qYjGikiHO2kADigwC2hmSZjIGGj6aHkJzQ iwCximixim/EkAORkZGVkYrOh0rPiVL5giTvhDKkk4LMjF23mR+zmTrhikrviDzsi0TAlHDCnwvK lGqpnJLdlF2boKy+m324nImkoZ+eo6XKpgrloATwl1WypZPOn3zfqQjYrgLBrVDdo3nGq5mysa/S rI7dq4bqqXTOrpWttL+6s6uwtbe/t4rhvALetpjQuqnuwwe9v8LAv7vauqD3xA68w9XBw83rvJfR wbXFyMvbxbPNyMP8zgTczMDr0mb91xLM1ODQ1NfS1c7p0sD70bPd19PX4qj83cje4+Xr4tv54NLp 7/Hy9PHw9fj6/v3YktvJAAAAAXRSTlMAQObYZgAAAAFiS0dEAIgFHUgAAAjrSURBVFjDtVcNWFPX GT6E+l9BZ0EFsTKEIQaUAIrTZdYqxqG0I3UjIuiDM0ipoyO5l0rFh2PE472EoIJKL9hQV2OxqM+U SgFL4r9gEaIoQxgqKBZBR+nGGhXYdwNro0Kfkcp3ntzce/7e8/2e70PoJVDl3bMlZyurUSsaKnqE SrMplYrByozCjUOEUZORodMRVsViTjJc8GbLUGCUUstLv1SyLCGch8DGRiDPe/kY5/2HCQQTxZEE y4fb2gDI8KjjLxsjfyyc3lZgM3KixwgeY4TEzk7+kjHODbeb6u0xAhiw8XgFMOxolpP6J75UjLZf p6dzHIcBYCQbIBB4sCxDOLK6eMAVT39it57+e09ysCnDUtnrJ0vS5ZMW0PBFWDbd40G/85sH2KeX vj94u/flX8/2J6kYQkhkHbzWbkdH0N0UDN8sURS8uMd9dMzPL7BxIIjOayuWLBIf70RPUPjxLouB EgVhMaYuWXQlMjwsN+eFTR4cDZ4werRDYOoAIFkrptm/Ni0gthOt9Q4yWQxcAwyWTbacW0sTDGoJ en4P002/2S7LjgV6BpY1N6OO5g5eeiZTY/P9b1FzRwfKWuk9p/72ct+NpuKpq32qLVaexOCCJB91 aezt5y6zt7fXILSdJZjlVr1w0mCR66x6FL3QOXiUQ2a0k/sFlDlq1LzUMQ4uxxycjl0LWO1bBsY6 yXR3wSTJGxqLhdsJHDsS9cwF47XlvcQGQiXhRbih/HkQv4XOcajZb6GDu7PTFEdPkVu0k4vQyd3J c/SUwNnB+RJ/XsI9ptZDIxMly3dbLNwGnGBJF+Id3cZM9ui8Gjq5P/TDiRCegbOFgSKRo5e7yNHV 2dnPdVb0bHfHQCevNIV/rxqrX48oFQdYcpKMtYRbjuxtfqRypNACK28+j3FsqcilAD0ADuIWCt0y Ra7zRNEOY2YELhW5CV2dXVKixH8BC+s8GDN9wWKxf94zpsRiJuWmBYjgndsKFmu5Bc+D3HQXCcu7 QTFTMl3HF0SLxruLvGa4zUqdMGFWqqfX3GSxN0y6NT154i+v75zvH2thXiWgY2YVElhwYl9NYxar lr0grlQn92DQt1vBUk+nUFeHGZmegUIvl1RXr1AnV/fx6zd4v3HptM/YaXbrzmYFePu2WpowYRlJ o+2PGLb2d9WE5bw1L4DcnOco9HIcH3o02HOecMqMJhQqdLPXpArHl2uEo+Na8qZPXxw0+bVx46bF zhw3eZylM2dgwkbWW3IyJp9lMDe9H2/raiqPCy5/fHSCu+M7mkffoQuzQhvRhWVlj1FcWTfq6dwd ElJmarxedr/u3P6CNn7Fk95ol8wRjIMsOLGJSwLm/OMGjlFHJ7hqelDuxdMlpbU16JvqlJTamivo BjrfUgNB69zfb6Fr1TWPKmtOw9xCdLayEFWvBlaSfmEBsk6LSdTMNnQaldTe7Qfj20yveddR2toV EevCi9/ffmntR7ErtvompmyICM9qyYpZsG3FhqwNYRH5KUtyW7eGRRxfH1OHDv0ZXH6ihbSyVYzS Y3FuBkVR9LaS2wPxUxyTFpu2eGverr+dezvi0ttpOy/tTKlL2ZkWs6p4VV1Kyq60nevS8iLyi1tW hfNWzMfhYT+ArAQ+5odRBENjlRW5F/vH6O7u7urpXtvR/bQbmX/dPd3w7Ok+2Ij4ry5o0N/dY1p7 qA21FodhFRc1ctjIsXZ2Y18VcwCixNgcWlgVbUiue3b3J33te7497vv/oT1Bj5/7br1RgrYlfrRe SqmwPDyK0GqOUHKWj/RwP0J0ZlmsK3o2HP+7Qt9HBr3BYH5aNL3FG/+ul8sjKcxHdRJFGJkhfKxg mM2rUoaSg5h4GAwXJsF00dRGq+/21k2EF7o50oNswrNfsYUQKRBIZWIFh3luaLNe1F++bjXGyWyz ZiGoYFYLx5Ys4v0R3GWRdBHNErBiSiqVRhHMyeaYrMQ4SENWCvEcfhCmGIzpqKlm27KTSWUcAX1g oBw5oATctDb33aLTYV5SWoaXP5+gyqlFdnZ23nB+plcnREv0RWJCBVkrrBJ1BewMmlVpgRUQF7wp ItMJTcsJ34GBRVaFdQZaqoqxFmSb3qDQgu1A2GI4YAnODkQYIOhklDKzo2C1IV2sijzdhjorqwef NdL6ihxzegU7SynexHgBMXy+xWFG8qvdf91D8WpRi41qKFl02YaswYNkULTeLC9CFFK4bDHDMmZb hnuXSOdAsnN1LxgfVu7ZvG8LpSJUlO/gnaWQFwYvJpZeKdUaSC8ApuhIShYQYp5yWQ0oPgVXPtkc Hz/fx5rqqzosHSSlBYHIxKSolJcUsIIpnzkhmt4b7Z/tOzBRQWaA6uNCNdet0nxLkL8CgzeQKIlC XaHjXR9MlqQn9Y1fNd5RE0zF/ryKwVR/JMnsI3S8Umcw6NRYxRuUKqk3lfnKeGcTySAx5hy+7Wfg ZOv4uLLl0w8wUah71QLBpJeXq/eMVVivV8jz6lB2ofWF6i1dEYRZfMJ4piE+ZweNeb7A2VVyKEx6 vjt1z/ghMehVKiUpyt1VYBXCN6j0Q4Mazp7TvvndhIaGhqqvP1bwFk0YRYR5RoLR+PkWmlIpV/oE DQ6jB9Wc3Z6bm6zLTtLlgLC4LVWXz5Q1ffbV5oZ24wmsV/NeKTlirmg+u/q7w7/38PDdeKF8UBgX s2kV4WUC0YR/KOLvPby3L5O30yvG9vY/6vX8JSbb2je96coXX5QPznqfokKKEPWBAwd20ApaTWsP 7LnTfsd42at3+B+H7+zRUfwZZMutN6baHCX5+Ou9Zy4f3nuiKr7KaHxoNDbsSwhp6htvfyg3Zw90 1G+ttVlTJa34/E+fvrXmvY3713xy6tSZfadOJby7X1P/vwn/MeaYr0mF7IMEq690Gu95KwQq5L5K +f59qGUtaZMSciHMKjdVbY6zFqRC/pv3LgxY5tcW0pjIpGGJ7+89kxBnbXZSmjuz7CeyihyG8fbd XXYdrWlqQg+sZWTdzPqBB68VEdnkzDY0lHSjSD9/GRpaMt3OWqLpQENOTf/PpP8CK9ZVVe2a8XoA AAAASUVORK5CYII= --_004_722b4a97a3264075a50f02704b9b9e55XCHRCD012ciscocom_-- From nobody Wed Jul 25 03:48:31 2018 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 903C112F295 for ; Wed, 25 Jul 2018 03:48:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XMx75HuXWx8B for ; Wed, 25 Jul 2018 03:48:28 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A604A12DD85 for ; Wed, 25 Jul 2018 03:48:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4472; q=dns/txt; s=iport; t=1532515708; x=1533725308; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=llx0kySrpDg6V0WL2pkVHsuGz5+cmb8jD4a5AmeRiew=; b=fu2LI3/lL1Q9yHapnNAmx+YCBruf2g2UyBXd+Shp9FL3l2r/VzD19nyT JdAwNPOZPcwF/jTnH7AABYvbXPQbLRoZH4NYHW+nCLHY5tWBHB2y6I0tD 4AEx7tbrKKb4V6qbLQxSQJIIbsnS4BkewgGDh0TK+h4WjT0lZHUHcA9BS g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CeAAB4VFhb/5NdJa1bGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAYNNY38oCot6jD6CDJVJgXoLGAuESQKCYSE0GAECAQECAQE?= =?us-ascii?q?CbRwMhTYBAQEEAQE4NBcEAgEIEQQBARkGECcLHQgCBAESCIMZgX8PsQKKUAW?= =?us-ascii?q?JAheBQT+BEYMSgxsBAYFKZYUHAogNhgGDcod1CQKPK44HkgYCERSBJB04gVJ?= =?us-ascii?q?wFTuCaYIlF4hZhT5vjCsiCYEBgRsBAQ?= X-IronPort-AV: E=Sophos;i="5.51,401,1526342400"; d="scan'208";a="425497186" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 25 Jul 2018 10:48:27 +0000 Received: from XCH-RCD-012.cisco.com (xch-rcd-012.cisco.com [173.37.102.22]) by rcdn-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id w6PAmRNt007600 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 25 Jul 2018 10:48:27 GMT Received: from xch-rcd-012.cisco.com (173.37.102.22) by XCH-RCD-012.cisco.com (173.37.102.22) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 25 Jul 2018 05:48:27 -0500 Received: from xch-rcd-012.cisco.com ([173.37.102.22]) by XCH-RCD-012.cisco.com ([173.37.102.22]) with mapi id 15.00.1320.000; Wed, 25 Jul 2018 05:48:27 -0500 From: "Owen Friel (ofriel)" To: Alan DeKok , "emu@ietf.org" Thread-Topic: [Emu] Comments on draft-lear-eap-teap-brski Thread-Index: AQHUIPzD8Vw9ol2klk+fe+mfSgsWWqSfx8uA Date: Wed, 25 Jul 2018 10:48:27 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.230.16.93] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Outbound-SMTP-Client: 173.37.102.22, xch-rcd-012.cisco.com X-Outbound-Node: rcdn-core-11.cisco.com Archived-At: Subject: Re: [Emu] Comments on draft-lear-eap-teap-brski X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jul 2018 10:48:30 -0000 Thanks Alan. These suggestions make sense and will help clear up the confus= ion. They can be incorporated in draft-01. -----Original Message----- From: Emu On Behalf Of Alan DeKok Sent: Saturday 21 July 2018 15:12 To: emu@ietf.org Subject: [Emu] Comments on draft-lear-eap-teap-brski One of the confusions from the meeting was "How can a device authenticate= via 802.1X if it doesn't trust the network?" I think the confusion is due to terminology. The discussion in the meeti= ng, and in the draft was about the device "authenticating" to the network d= uring initial bootstrapping. The authors may correct me if I'm wrong, but = this step is really "provisioning". i.e. the device gets on the network without authenticating itself in the = traditional sense (password, certificate, etc.) The document isn't clear on this, which makes it more difficult to unders= tand. From Section 3.1 of the document: The device establishes an outer TEAP tunnel with the TEAP server and does not validate the server certificate. I would also add that the TEAP server does not authenticate the device (a= s such). Instead, this step is about provisioning. Continuing from Section 3.1: The device sends a BRSKI-RequestVoucher TLV to the TEAP server. The TEAP server forwards the RequestVoucher message to the MASA server, and the MASA server replies with a signed voucher. The TEAP server sends a BRSKI-Voucher TLV to the device. If the MASA server does not issue a signed voucher, the TEAP server sends an EAP-Error TLV with a suitable error code to the device. It would help to say that neither the TEAP server nor the MASA server has= (as yet) authenticated the device. Which means that the device has establ= ished a secure tunnel to an unknown endpoint. That endpoint may later reje= ct the device, at which point the device tries another SSID. As a practical example, there may be two businesses who wish to install W= iFi cameras. Each business has their own SSID. Any new device will random= ly connect to one of the SSIDs. If the device is known (somehow) to the bu= siness, it will be provisioned and allowed onto the network. If the device= is not known, it will be rejected, and will try the other SSID. I think it would help future discussions to consistently refer to this ph= ase as "provisioning", and not "authentication". i.e. "the device provisionally connects to the 802.1X network". Or "the = device connects to the 802.1X network for initial provisioning". Once the device is provisioned, it can "authenticate" to the 802.1X netwo= rk as normal. i.e. from Section 3.1 again: Once step 5 is complete, the device has completed the BRSKI flow and has established trust with the network. I would add "the device can then perform normal 802.1X authentication wit= h it's provisioned credentials, and with the provisioned network informatio= n." From section 4.1: If the client is bootstrapping and has not yet completed a BRSKI flow, it will not have trust anchors installed yet, and thus will not be able to validate the server's certificate. It would help instead to use consistent terminology: If the client is in the provisioning phase and has not yet completed a BRSKI flow, it will not have trust anchors installed yet, and thus will not be able to validate the server's certificate. And the same applies later: It is recommended that the client validate the certificate presented by the server in the server's Certificate message, but this may not be possible for bootstrapping clients that do not have appropriate trust anchors installed yet. to: It is recommended that the client validate the certificate presented by the server in the server's Certificate message, but this may not be possible for clients which have not yet been provisioned with the appropriate trust anchors. The referenced IDs use the term bootstrapping", (ietf-anima-bootstrapping= -keyinfra). But RFC 7170 (TEAP) uses "bootstrapping" once, and "provisioni= ng" many times. My $0.02 is that "provisioning" is clearer in this context than "bootstra= pping". Alan DeKok. _______________________________________________ Emu mailing list Emu@ietf.org https://www.ietf.org/mailman/listinfo/emu