From nobody Sat May 2 22:11:31 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E901C3A14DA for ; Sat, 2 May 2020 22:11:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=openfortress.nl Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a6w2Z73TyDcx for ; Sat, 2 May 2020 22:11:26 -0700 (PDT) Received: from lb2-smtp-cloud7.xs4all.net (lb2-smtp-cloud7.xs4all.net [194.109.24.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 110893A14D9 for ; Sat, 2 May 2020 22:11:24 -0700 (PDT) Received: from popmini.vanrein.org ([IPv6:2001:980:93a5:1::7]) by smtp-cloud7.xs4all.net with ESMTP id V6uMjQbeBzorkV6uNjPncH; Sun, 03 May 2020 07:11:21 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=openfortress.nl; i=rick@openfortress.nl; q=dns/txt; s=fame; t=1588482678; h=message-id : date : from : mime-version : to : subject : references : in-reply-to : content-type : content-transfer-encoding : date : from : subject; bh=EuqM90113SNdotIy+ltl7mdcaeL1mOZq9/hOMqLJs8g=; b=JRgJd7sr3U0lOFxCf/QrpuuOx6EovGxuCLvk53VsHvSZ1aqhkszow07S dtp3c9ZhvdgAx8MLX4nRjz5PtxFXqBxKFKRRgwXcLkqwHoyxiuvWTn0OLQ s89+6oJNe+nq6HcdhOZqlJHypL/dAsKD1jJ0/9yvWiOA+hiZr7tr3kcL0= Received: by fame.vanrein.org (Postfix, from userid 1006) id A63E73AA3A; Sun, 3 May 2020 05:11:18 +0000 (UTC) X-Original-To: emu@ietf.org Received: from airhead.local (phantom.vanrein.org [83.161.146.46]) by fame.vanrein.org (Postfix) with ESMTPA id 811E73AFEA; Sun, 3 May 2020 05:11:18 +0000 (UTC) Message-ID: <5EAE5275.2060108@openfortress.nl> Date: Sun, 03 May 2020 07:11:17 +0200 From: Rick van Rein User-Agent: Postbox 3.0.11 (Macintosh/20140602) MIME-Version: 1.0 To: emu@ietf.org References: <5E98981B.7020606@openfortress.nl> In-Reply-To: <5E98981B.7020606@openfortress.nl> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Bogosity: Unsure, tests=bogofilter, spamicity=0.520000, version=1.2.4 X-CMAE-Envelope: MS4wfAiD24OH8JA7twBJ1t0PJMQWqr0f+FtQ4II/Jrx++Zd2nd9JUbANIHxTmpcZFzzo2hm5EeueJ3MwgjYcEIp0QiaQb+YftpP5Q7z3Ua1WS6Gk8+NKAdSi dxOS7ewawSBwtMOTNpJRr2eo5nqJcW1EySOycBwANfjQ/3qdyJSuXUYBcCsDISVfZqcn6ta7WFdFeA== Archived-At: Subject: Re: [Emu] Proposal: SASL over EAP X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 May 2020 05:11:30 -0000 Hi all, > I think SASL over EAP would be useful. Would it be in scope for EMU? Thanks to Alan's comments (and others' silent agreement) I've been able to answer this with "maybe" but, more importantly, "not yet". We are designing and building an internet-wide identity system that uses Diameter at its heart, and EAP-SASL would be an uplink to that system. However, until we've proven in readily runnable demos and/or specs that this is viable, it is completely fair to be pulled back to the current common ground of RADIUS with a pile of add-ons for the specific use case of Access Points. In conclusion, we have some work to do establish our identity system before EMU can be asked to look into this proposal. No problem, and thanks very much for considering the idea, Rick van Rein for InternetWide.org From nobody Sun May 3 10:01:46 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D7F03A103C for ; Sun, 3 May 2020 10:01:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.848 X-Spam-Level: X-Spam-Status: No, score=-1.848 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eC38z6FipTAn for ; Sun, 3 May 2020 10:01:43 -0700 (PDT) Received: from mail-oi1-x234.google.com (mail-oi1-x234.google.com [IPv6:2607:f8b0:4864:20::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91E593A1046 for ; Sun, 3 May 2020 10:01:43 -0700 (PDT) Received: by mail-oi1-x234.google.com with SMTP id t199so4562976oif.7 for ; Sun, 03 May 2020 10:01:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=9/6XqTkeORe0/MfxHBic8CW2VUJ4je7Xht0YnKWItiE=; b=bvoPWeNPMuekxs1BdSHm1EKuYBwUJPWthQnMTYAbtGJH7lsAtsOwzsZbD+xdw29k2e fcOsIK/6bd7tnTwSpKVM3Z3jzrSNeKo4PjN0ENRUksFXdXX7AuhXfQl5wSVONsKsLJgi jsqFyXTvZ5+I9iXKDD4tmQnfVOE/70YULLmZ5/h901QT8apIAHcSJ86EiWwCL0scXJDK KeJM1g3+FrpaKML96TRu5JZ3myWkN5cPfNAgyRliH+1Px/dqYAo9WAvlya7VPBxvJp0i tX1PIHbjXwMpwaGGDS/vJiRVCcjKRhup42Ao4yP0QncHeSYulUKuwxBNPyVdQud4U8Ne +pfw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=9/6XqTkeORe0/MfxHBic8CW2VUJ4je7Xht0YnKWItiE=; b=EvK/2rgxMcoRZPoU5lXYIn7oL1mCMk9IG6ZBpKoBBLyGCPnQSACYnyfKrMxW6aROqX bNQMETj6GmFD5gRV7QRT+9ZlwzfDaC/qI+q69iCIF15OWSjfdY6mADZcpykdBES+T0we xxAhteguc6N9OAz+yNOfBg0o+BYpXzp5+2iKmduc97ukfzvTHmEzNip99etkgmNdKznd ++eug9lQaxFiXVvaOIkKIbaVrMFzi5doRjvnqNqHfrV9k6gILLo/XXqHmC2pWw4Gpx78 B2dFqJ/HDj7tMczCpfdgE5RdshSZr7+CxjGOAKOXjG2CBAZt0NEJL8QkeUH7HOkvyvds tSSg== X-Gm-Message-State: AGi0PuZUJ4V2vr2dEZCJ5SpksHnoBb5B66ZgYTbTuIUwMfD9h77BUVYy A+CIeA3Us4/FF3InaY9Ioa9jddI2yJVVrU6QUUYV4LGT X-Google-Smtp-Source: APiQypJ6usvKRBUnQcP6AEkVjvM+XWSuR9QRDcHp55bDroIaugnhjDMvLutyvglHcOV+Z+hlc4mtsTuyE6FwuChKBts= X-Received: by 2002:a54:4085:: with SMTP id i5mr6653993oii.107.1588525302540; Sun, 03 May 2020 10:01:42 -0700 (PDT) MIME-Version: 1.0 From: Oleg Pekar Date: Sun, 3 May 2020 20:01:31 +0300 Message-ID: To: Jouni Malinen , EMU WG Content-Type: multipart/alternative; boundary="0000000000005feda905a4c15e17" Archived-At: Subject: [Emu] TEAP - RFC 7170 - Errata X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 May 2020 17:01:45 -0000 --0000000000005feda905a4c15e17 Content-Type: text/plain; charset="UTF-8" Hi Jouni, You filed Errata ID: 5767, 5844, 5845 regarding sending of Intermediate-Result TLV. Can we clarify a general scheme of sending Intermediate-Result TLV and Crypto-Binding TLV in all cases? It is not exactly clear what is "EAP authentication method" and what is its different from "EAP method" (you referred to appendix C.3 as an example of "EAP Method" but it is not clear why it is not an "EAP authentication method" - could you please clarify). Here's the list of cases with the current RFC instructions (please add if something is missing): 1. A single inner EAP method is executed inside the tunnel. *** RFC says *** Section 4.2.11 "An Intermediate-Result TLV indicating success MUST be accompanied by a Crypto-Binding TLV". Section 3.3 "Phase 2 MUST always end with a Crypto-Binding TLV exchange" 2. Multiple inner EAP methods are executed inside the tunnel. *** RFC says *** Send Intermediate-Result TLV if more than one method is going to be executed in the tunnel. Send Crypto-Binding TLV if Intermediate-Result TLV indicates success. Section 3.3.1 "If more than one method is going to be executed in the tunnel, then upon method completion, the server MUST send an Intermediate-Result TLV indicating the result" - wrong Section 3.3.3 "The Crypto-Binding TLV and Intermediate-Result TLV MUST be included to perform cryptographic binding after each successful EAP method in a sequence of one or more EAP methods" - correct 3. Basic Password Authentication (using Basic-Password-Auth-Req/Response) is executed inside the tunnel *** RFC says *** Send Intermediate-Result TLV. Section 3.3.2 "Upon receiving the response, the server indicates the success or failure of the exchange using an Intermediate-Result TLV" - thus Crypto-Binding TLV MUST be also sent as quoted in #1. 4. No inner EAP method is executed inside the tunnel. *** RFC says *** Section 3.3.3 "A successful TEAP Phase 2 conversation MUST always end in a successful Crypto-Binding TLV and Result TLV exchange. A TEAP server may initiate the Crypto-Binding TLV and Result TLV exchange without initiating any EAP conversation in TEAP Phase 2" Section 4.2.13 "The Crypto-Binding TLV MUST be exchanged and verified before the final Result TLV exchange, regardless of whether there is an inner EAP method authentication or not" ****** Jouni, you provided multiple suggestions for fixing this. Incorporating you suggestions, the bottomline could be: * Send Intermediate-Result TLV after each inner EAP method but not after Basic Password Authentication TLV exchange * Send Crypto-Binding TLV based on inner method MSK/EMSK after each inner EAP method that exports MSK/EMSK and send Crypto-Binding TLV based on Zero-MSK in case of no inner method was executed And then it should be declared explicitly and all the places where these TLV are mentioned can be fixed accordingly. Please share your opinion. ~ Oleg --0000000000005feda905a4c15e17 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi=C2=A0Jouni,
You filed=C2=A0Errata ID: 5767, 5844, 5= 845 regarding sending of Intermediate-Result TLV. Can we clarify a general = scheme of sending=C2=A0Intermediate-Result TLV and Crypto-Binding TLV in al= l cases? It is not exactly clear what is "EAP authentication method&qu= ot; and what is its different from "EAP method" (you referred to = appendix C.3 as an example of "EAP Method" but it is not clear wh= y it is not an "EAP authentication method" - could you please cla= rify).

Here's the list of cases with the curre= nt RFC instructions (please add if something is missing):

1. A single inner EAP method is executed inside the tunnel.=C2=A0
*** RFC says ***=C2=A0
<= span style=3D"color:rgb(0,0,0);font-size:13.3333px">Section 4.2.11 "An Intermediate-Result TLV indicating success MUST be accompanied by a= Crypto-Binding TLV". Section 3.3 "Phase 2 MUST always end with a= Crypto-Binding TLV exchange"
<= div>
2. Multiple=C2=A0inner EAP methods are executed inside t= he tunnel.=C2=A0
*** RFC says ***=C2=A0
Send=C2=A0Intermediate-Result TLV=C2=A0i= f more than one method is going to be executed in the tunnel. Send=C2=A0Crypto-Binding TLV if=C2= =A0Intermediate-Result TLV indicates success.
Section 3.3.= 1 "If more than one method is going to be executed in the tunnel, then= upon method completion, the server MUST send an Intermediate-Result TLV in= dicating the result" - wrong
Section 3.3.3 "The Crypto-= Binding TLV and Intermediate-Result TLV MUST be included to perform cryptog= raphic binding after each successful EAP method in a sequence of one or mor= e EAP methods" - correct

3.=C2=A0Basic Password Authenticatio= n (using=C2=A0B= asic-Password-Auth-Req/Response) is executed inside the tunnel
=
*** RFC says ***
Send=C2=A0Intermediate-Result TLV.=C2=A0
Section 3.3.2= "Upon receiving the response, the server indicates the success= or failure of the exchange using an Intermediate-Result TLV" - thus C= rypto-Binding TLV MUST be also sent as quoted in #1.

4.= No inner EAP method is executed inside the tunnel.
*= ** RFC says ***
Section 3.3.3 "A successful TEAP Phase 2 convers= ation MUST always end in a successful Crypto-Binding TLV and Result TLV exc= hange.=C2=A0 A TEAP server may initiate the Crypto-Binding TLV and Result T= LV exchange without initiating any EAP conversation in TEAP Phase 2"
Section 4.2.1= 3 "The Crypto-Binding TLV MUST be exchanged and verified before= the final Result TLV exchange, regardless of whether there is an inner EAP= method authentication or not"

******
Jouni, you provided multiple su= ggestions for=C2=A0fixing this. Incorporating you suggestions, the=C2=A0bottomline could be:
*= =C2=A0Send=C2= =A0Intermediate= -Result TLV after each inner EAP method but not after=C2=A0Basic Pas= sword Authentication TLV exchange
* Send=C2=A0Crypto-Binding TLV = based on inner method MSK/EMSK after each inner EAP method that exports MSK= /EMSK and send Crypto-Binding TLV based on Zero-MSK in case of no inner met= hod was executed

And then it should be declared ex= plicitly and all the places where these TLV are mentioned can be fixed acco= rdingly.=C2=A0

Please share your opinion.
~ Oleg



--0000000000005feda905a4c15e17-- From nobody Sun May 3 14:21:30 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 915E43A0A60 for ; Sun, 3 May 2020 14:21:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=um.es Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ULkp9e5FPcWg for ; Sun, 3 May 2020 14:21:27 -0700 (PDT) Received: from mx02.puc.rediris.es (outbound3sev.lav.puc.rediris.es [130.206.19.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00D623A0A5F for ; Sun, 3 May 2020 14:21:26 -0700 (PDT) Received: from xenon41.um.es (xenon41.um.es [155.54.212.167]) by mx02.puc.rediris.es with ESMTP id 043LLOkf015173-043LLOkg015173 for ; Sun, 3 May 2020 23:21:24 +0200 Received: from localhost (localhost [127.0.0.1]) by xenon41.um.es (Postfix) with ESMTP id 419D120A87 for ; Sun, 3 May 2020 23:21:24 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon41.um.es Received: from xenon41.um.es ([127.0.0.1]) by localhost (xenon41.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id AOObcYfKQBdN for ; Sun, 3 May 2020 23:21:24 +0200 (CEST) Received: from [192.168.1.104] (unknown [83.143.108.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: eduardo.ingles) by xenon41.um.es (Postfix) with ESMTPSA id 13AE6203BF for ; Sun, 3 May 2020 23:21:22 +0200 (CEST) To: emu@ietf.org References: From: Eduardo Ingles UM Message-ID: Date: Sun, 3 May 2020 23:21:21 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------10E93818B3879916EE12D66C" Content-Language: es-ES X-FEAS-CONTENT-MODIFICATION: DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; d=um.es; s=DKIM; c=relaxed/relaxed; h=subject:to:references:from:message-id:date:mime-version:content-type; bh=+K6NZu8S8gi9WIOVxm20wxzaK+ctfRZvRQtgB3I+8Ks=; b=veBaUbUc6fN9DgQzTwDxa2ffyc4BimlAKEf2kxh45so3uortjLFnMJjAYceMs5A6ZOWt09pr6Myb hAqhPKGWP5toC2lbD9bTbpW97u5W6b+J5lTgxBzQV4q2PViScjhereDhkTyXlibuJ9KAUz1er7l7 FpKldeOVKgZwjEaFVPijfP99wH83NbL5Mmy5Wjxcuz2BSDN9rQh//q2Ba5kt5Ku4fLeXYgcul66y UZe0w5QC5R6o0YnZGad9jw1dxSPpd44JW8y1CR21MJVXoXlisRkxULbje5QrxmmIAaBqMgHaDjZ2 gJzkp+HmYYgUbNM9dSY3et+Kh9/ZW1uzKKcbJQ== Archived-At: Subject: Re: [Emu] Working Group Call For adoption of draft-aura-eap-noob-08.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 May 2020 21:21:29 -0000 This is a multi-part message in MIME format. --------------10E93818B3879916EE12D66C Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Dear all, I support the adoption of this document. We are currently working on IoT bootstrapping security and we implemented EAP-NOOB [1] on Zolertia Firefly motes with CoAP-EAP [2]. Here you can see a video demonstration of EAP-NOOB with Firefly motes and blinking lights: https://youtu.be/rPuFKoihl5E The implementation of CoAP-EAP as EAP Lower Layer is based on the previous work of my colleagues at the University of Murcia Rafa Marin-Lopez and Dan Garcia-Carrillo. Best regards. [1] EAP-NOOB source code: https://github.com/eduingles/coap-eap-noob [2] CoAP-EAP source code: https://github.com/eduingles/coap-eap-controller El 18/04/2020 a las 22:13, Joseph Salowey escribió: > This is a call for adoption of draft-aura-eap-noob-08.txt [1] as a > working group item.  This draft has been discussed in several IETF > meetings and would be the starting point for the working group > deliverable for an EAP method based on "mutual authentication between > a peer and a server that is based on an out-of-band channel."  Please > review the draft and indicate whether you support adoption or not by > May 4, 2020. > Thanks, > > Joe > > [1] https://datatracker.ietf.org/doc/draft-aura-eap-noob/ > > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu -- Eduardo Inglés Sánchez eduardo.ingles@um.es Department of Information and Communication Engineering Faculty of Computer Science University of Murcia 30100 Murcia, Spain --------------10E93818B3879916EE12D66C Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

Dear all,

I support the adoption of this document.

We are currently working on IoT bootstrapping security and we implemented EAP-NOOB [1] on Zolertia Firefly motes with CoAP-EAP [2]. Here you can see a video demonstration of EAP-NOOB with Firefly motes and blinking lights:
https://youtu.be/rPuFKoihl5E

The implementation of CoAP-EAP as EAP Lower Layer is based on the previous work of my colleagues at the University of Murcia Rafa Marin-Lopez and Dan Garcia-Carrillo.

Best regards.

[1] EAP-NOOB source code: https://github.com/eduingles/coap-eap-noob
[2] CoAP-EAP source code: https://github.com/eduingles/coap-eap-controller



El 18/04/2020 a las 22:13, Joseph Salowey escribió:
This is a call for adoption of draft-aura-eap-noob-08.txt [1] as a working group item.  This draft has been discussed in several IETF meetings and would be the starting point for the working group deliverable for an EAP method based on "mutual authentication between a peer and a server that is based on an out-of-band channel."  Please review the draft and indicate whether you support adoption or not by May 4, 2020.  
Thanks,

Joe


_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu

-- 
Eduardo Inglés Sánchez
eduardo.ingles@um.es

Department of Information and Communication Engineering
Faculty of Computer Science
University of Murcia
30100 Murcia, Spain
--------------10E93818B3879916EE12D66C-- From nobody Mon May 4 02:19:01 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE7C23A053E for ; Mon, 4 May 2020 02:18:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=um.es Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uDz12vupglK8 for ; Mon, 4 May 2020 02:18:58 -0700 (PDT) Received: from mx01.puc.rediris.es (outbound1mad.lav.puc.rediris.es [130.206.19.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE82B3A0538 for ; Mon, 4 May 2020 02:18:57 -0700 (PDT) Received: from xenon43.um.es (xenon43.um.es [155.54.212.170]) by mx01.puc.rediris.es with ESMTP id 0449Itmn031433-0449Itmo031433 for ; Mon, 4 May 2020 11:18:55 +0200 Received: from localhost (localhost [127.0.0.1]) by xenon43.um.es (Postfix) with ESMTP id 88D3A2019A; Mon, 4 May 2020 11:18:55 +0200 (CEST) X-Virus-Scanned: by antispam in UMU at xenon43.um.es Received: from xenon43.um.es ([127.0.0.1]) by localhost (xenon43.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id p2E5TzSK5EkJ; Mon, 4 May 2020 11:18:55 +0200 (CEST) Received: from [192.168.1.33] (54.red-79-150-250.dynamicip.rima-tde.net [79.150.250.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: rafa@um.es) by xenon43.um.es (Postfix) with ESMTPSA id 1C3681FFD1; Mon, 4 May 2020 11:18:54 +0200 (CEST) From: Rafa Marin-Lopez Message-Id: <9441B1B0-B593-4138-A661-08C44B8E2509@um.es> Content-Type: multipart/alternative; boundary="Apple-Mail=_8BBA4125-E888-4C07-9D78-C671D292940B" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Mon, 4 May 2020 11:18:54 +0200 In-Reply-To: To: emu@ietf.org References: X-Mailer: Apple Mail (2.3445.104.11) X-FEAS-CONTENT-MODIFICATION: DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; d=um.es; s=DKIM; c=relaxed/relaxed; h=from:message-id:content-type:mime-version:subject:date:cc:to:references; bh=HRr8UsWbDTjDW0crqO4ZdQC2TQ1sCIImzNcaYQrAeFU=; b=2x+EZt3eKbe664px/Tp8yWsOZOHuWIUZexjoOxZJQqtctOAafXHZwcFYYwmLZl2BbtQAQHqhbKel KQB++DiDaSR5VZQR6zg2fVHl/9VYncbCWgoJF2Qffu9dt0j60nrVVFe7RKe4+rMQ9gnXEimDD0Bg CmFyJyG7oG/JFHXvA5QlINpHl8zZejnS+WtHaObhljwabnRyeIwlKs0+chnDTUd1c9wx3HBtgrZd PCB5LZxLeKJytn+VerX7lPGwA8bmJ8iucLCaTDj6dv2w9CwS7tjLJbApOS4W24EcdvlOv6CS3O9H M9IvXtPBx0c3SzdvufddJi6PDoVTJqWbuh/W5A== Archived-At: Subject: Re: [Emu] Working Group Call For adoption of draft-aura-eap-noob-08.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 May 2020 09:19:00 -0000 --Apple-Mail=_8BBA4125-E888-4C07-9D78-C671D292940B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Dear all: I support the adoption of this document as well.=20 I have been following this work from the beginning since I have been = interested in the usage in EAP in IoT scenarios for bootstrapping for = several years. As Eduardo has just mentioned we worked in an EAP = lower-layer based on CoAP for IoT some time ago.=20 https://tools.ietf.org/html/draft-marin-ace-wg-coap-eap-06 = https://www.mdpi.com/1424-8220/16/3/358 = One of the missing pieces we noticed was an EAP method adapted for IoT = bootstrapping. EAP-NOOB covers this need.=20 Best Regards. > El 3 may 2020, a las 23:21, Eduardo Ingles UM = escribi=C3=B3: >=20 > Dear all, >=20 > I support the adoption of this document.=20 >=20 > We are currently working on IoT bootstrapping security and we = implemented EAP-NOOB [1] on Zolertia Firefly motes with CoAP-EAP [2]. = Here you can see a video demonstration of EAP-NOOB with Firefly motes = and blinking lights: > https://youtu.be/rPuFKoihl5E >=20 > The implementation of CoAP-EAP as EAP Lower Layer is based on the = previous work of my colleagues at the University of Murcia Rafa = Marin-Lopez and Dan Garcia-Carrillo. >=20 > Best regards.=20 >=20 > [1] EAP-NOOB source code: https://github.com/eduingles/coap-eap-noob = =20 > [2] CoAP-EAP source code: = https://github.com/eduingles/coap-eap-controller = =20 >=20 >=20 >=20 >=20 > El 18/04/2020 a las 22:13, Joseph Salowey escribi=C3=B3: >> This is a call for adoption of draft-aura-eap-noob-08.txt [1] as a = working group item. This draft has been discussed in several IETF = meetings and would be the starting point for the working group = deliverable for an EAP method based on "mutual authentication between a = peer and a server that is based on an out-of-band channel." Please = review the draft and indicate whether you support adoption or not by May = 4, 2020. =20 >> Thanks, >>=20 >> Joe >>=20 >> [1] https://datatracker.ietf.org/doc/draft-aura-eap-noob/ = >>=20 >> _______________________________________________ >> Emu mailing list >> Emu@ietf.org >> https://www.ietf.org/mailman/listinfo/emu = > --=20 > Eduardo Ingl=C3=A9s S=C3=A1nchez > eduardo.ingles@um.es >=20 > Department of Information and Communication Engineering > Faculty of Computer Science > University of Murcia > 30100 Murcia, Spain > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu ------------------------------------------------------- Rafa Marin-Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- --Apple-Mail=_8BBA4125-E888-4C07-9D78-C671D292940B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Dear = all:

I support the = adoption of this document as well. 

I have been following this work from = the beginning since I have been interested in the usage in EAP in IoT = scenarios for bootstrapping for several years. As Eduardo has just = mentioned we worked in an EAP lower-layer based on CoAP for IoT some = time ago. 

https://tools.ietf.org/html/draft-marin-ace-wg-coap-eap-06<= /div>
https://www.mdpi.com/1424-8220/16/3/358

One of the missing = pieces we noticed was an EAP method adapted for IoT bootstrapping. = EAP-NOOB covers this need. 

Best Regards.

El 3 may = 2020, a las 23:21, Eduardo Ingles UM <eduardo.ingles@um.es> escribi=C3=B3:

=20 =20

Dear all,

I support the adoption of this document.

We are currently working on IoT bootstrapping security and we implemented EAP-NOOB [1] on Zolertia Firefly motes with CoAP-EAP [2]. Here you can see a video demonstration of EAP-NOOB with Firefly motes and blinking lights:
https://youtu.be/rPuFKoihl5E

The implementation of CoAP-EAP as EAP Lower Layer is based on the previous work of my colleagues at the University of Murcia Rafa Marin-Lopez and Dan Garcia-Carrillo.

Best regards.

[1] EAP-NOOB source code: https://github.com/edu= ingles/coap-eap-noob
[2] CoAP-EAP source code: https://github.c= om/eduingles/coap-eap-controller



El 18/04/2020 a las 22:13, Joseph Salowey escribi=C3=B3:
This is a call for adoption of draft-aura-eap-noob-08.txt [1] as a working group item.  = This draft has been discussed in several IETF meetings and would be the starting point for the working group deliverable for = an EAP method based on "mutual authentication between a peer and a server that is based on an out-of-band channel."  Please = review the draft and indicate whether you support adoption or not by May 4, 2020.  
Thanks,

Joe

[1] https://datatracker.ietf.org/doc/draft-aura-eap-noob/
= 

_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/ma=
ilman/listinfo/emu

--=20
Eduardo Ingl=C3=A9s S=C3=A1nchez
eduardo.ingles@um.es

Department of Information and Communication Engineering
Faculty of Computer Science
University of Murcia
30100 Murcia, Spain
_______________________________________________
Emu = mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu

-------------------------------------------------------
Rafa Marin-Lopez, PhD
Dept. Information = and Communications Engineering (DIIC)
Faculty of = Computer Science-University of Murcia
30100 = Murcia - Spain
Telf: +34868888501 Fax: +34868884151 = e-mail: rafa@um.es
-------------------------------------------------------




= --Apple-Mail=_8BBA4125-E888-4C07-9D78-C671D292940B-- From nobody Mon May 4 02:55:14 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5F5F3A0765 for ; Mon, 4 May 2020 02:55:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.601 X-Spam-Level: X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FUhCsN6dvAqs for ; Mon, 4 May 2020 02:55:11 -0700 (PDT) Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB5D23A0764 for ; Mon, 4 May 2020 02:55:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1439; q=dns/txt; s=iport; t=1588586111; x=1589795711; h=mime-version:subject:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to; bh=H7RQKn6ETE3O++f267ChY4UYnLz/pw3A17UyYJ5ujuM=; b=Bev4qoiDeIwJzIbQnnUv1JZnIuQFZCF9s0folAbxBjcnJA0G0CK1cmof kzoJvUWYrOxt1hDWgdfUvRAIGwnK1XM/HRe+GPT0C4Icz/QpNsFEkqnql HhRRjcHyOx3W7jIpi5aFbiWjsg13DcOkX78jscVkQMhVXYHTmH4Ag3i+V o=; X-IronPort-AV: E=Sophos;i="5.73,351,1583193600"; d="scan'208";a="23547945" Received: from aer-iport-nat.cisco.com (HELO aer-core-3.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 04 May 2020 09:55:09 +0000 Received: from dhcp-10-61-104-217.cisco.com (dhcp-10-61-104-217.cisco.com [10.61.104.217]) by aer-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 0449t8rn030621 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 4 May 2020 09:55:08 GMT Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) From: Eliot Lear In-Reply-To: <298666d8-1992-4baf-953e-aed998449ca6@ericsson.com> Date: Mon, 4 May 2020 11:55:08 +0200 Cc: Alan DeKok , Joseph Salowey , EMU WG , "Oleg Pekar (olpekar)" Content-Transfer-Encoding: quoted-printable Message-Id: <2DFB6391-DFD3-410F-B4FF-A238613C1CBD@cisco.com> References: <782E05D8-EAC0-4117-9692-B8F39C8BF4FE@deployingradius.com> <298666d8-1992-4baf-953e-aed998449ca6@ericsson.com> To: Mohit Sethi M X-Mailer: Apple Mail (2.3608.80.23.2.2) X-Outbound-SMTP-Client: 10.61.104.217, dhcp-10-61-104-217.cisco.com X-Outbound-Node: aer-core-3.cisco.com Archived-At: Subject: [Emu] TEAP Update (was: Re: Working Group Call For adoption of draft-aura-eap-noob-08.txt) X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 May 2020 09:55:13 -0000 Hi Mohit >=20 > The chairs had an email discussion which hadn't concluded. The main=20 > sticking point was that both Joe and I prefer TEAP being addressed in = a=20 > separate update document that fixes all other TEAP errata as well.=20 > However, this can be discussed after adoption. Oleg has addressed the TEAP errata and it would be very helpful if Joe = and Jouni could give it a stare. I also posted one issue relating to = the use of Request-Action, which may require an additional TLV to = correct. Also, I am aware of one additional erratum that I will open = shortly that is minor (conflicting terms in the Request-Action frame). If we can collect all of these, then it would be good for the group to = decide what else needs to be updated. FWIW, I see a TLS 1.3 update for = TEAP as raising some questions around the way that restart is = incorporated into 7170. We could simply rule out restart for 1.3, or do = something smarter. I dunno yet. Eliot >=20 >=20 > A working group adoption call is now issued and we intend to move this=20= > document forward rapidly. >=20 > --Mohit >=20 >>=20 >> Alan DeKok. >>=20 >> _______________________________________________ >> Emu mailing list >> Emu@ietf.org >> https://www.ietf.org/mailman/listinfo/emu > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu From nobody Mon May 4 11:57:09 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 546AC3A0787 for ; Mon, 4 May 2020 03:20:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gyxrKs2j47uF for ; Mon, 4 May 2020 03:20:03 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 373373A0786 for ; Mon, 4 May 2020 03:20:03 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 851D1F406F5; Mon, 4 May 2020 03:20:00 -0700 (PDT) To: hzhou@cisco.com, ncamwing@cisco.com, jsalowey@cisco.com, steve.hanna@infineon.com, rdd@cert.org, kaduk@mit.edu, joe@salowey.net, mohit.m.sethi@ericsson.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: lear@cisco.com, emu@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20200504102000.851D1F406F5@rfc-editor.org> Date: Mon, 4 May 2020 03:20:00 -0700 (PDT) Archived-At: X-Mailman-Approved-At: Mon, 04 May 2020 11:57:08 -0700 Subject: [Emu] [Technical Errata Reported] RFC7170 (6157) X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 May 2020 10:20:04 -0000 The following errata report has been submitted for RFC7170, "Tunnel Extensible Authentication Protocol (TEAP) Version 1". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid6157 -------------------------------------- Type: Technical Reported by: Eliot Lear Section: 4.2.9 Original Text ------------- Status The Status field is one octet. This indicates the result if the server does not process the action requested by the peer. Corrected Text -------------- Status The Status field is one octet. This indicates the result if the party who receives this TLV does not process the action. Notes ----- The status field is carried in the "Request-Action" frame. As is repeatedly stated in the chapeau of the section, the frame can be sent either by the server or the peer. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC7170 (draft-ietf-emu-eap-tunnel-method-10) -------------------------------------- Title : Tunnel Extensible Authentication Protocol (TEAP) Version 1 Publication Date : May 2014 Author(s) : H. Zhou, N. Cam-Winget, J. Salowey, S. Hanna Category : PROPOSED STANDARD Source : EAP Method Update Area : Security Stream : IETF Verifying Party : IESG From nobody Tue May 5 01:38:54 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9663B3A15D4 for ; Tue, 5 May 2020 01:38:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WgYNi3-OIXXL for ; Tue, 5 May 2020 01:38:50 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150047.outbound.protection.outlook.com [40.107.15.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F17B3A15D3 for ; Tue, 5 May 2020 01:38:50 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YhLRJFaNc6O0iiDjd/F/V182TulF2Ep4WROc0Op7ZPeCx0bA33plH7WVrhxAp2GE9Nbsx7Z1KCuSPa1aLWyVZ2BM0XzEUU1x2aRi/CqYPJcdoREQRYGKstgSrfFajWMJ+rpSwk0iEEBnQvIabJR5qOidVIHzCPk5wT1ZpddvE1OtBzK+kYHY3kg/FcPEORVAtSGR1bGlVFx2/2D+9XjPtFQ03DGmWItiEbZ+Y6FReMYSIsvg1eQ1datnXa2fytvICCdymTc8t1EGD1xMkKXXHs8zdfn1rVnOzKsOZzKJ8Sl7OXwJ0bUcXqOf8EXsPD60noaE6XwviPswF/9OPhrVVg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3Et2vUg8+xs1EXv3xryI/5Nuvp5Sfi+O7GCVG/RK2sE=; b=O7DnCQFLz7N2o1T0dyb44vnD06FbgDURQSMAeyn9A2ck+i/CZC0v62V3sISYwREd6P4btiX1dv/6TBuDsTSVYYlY2gxi2Kz5aAb36w4C+5xPHOQO6bLTj/wktifBY/mhjRXRFC4HGDnQAJjRFkfIjrqo3Y57AFPQAkjFE1c+fbzSjEXb3pyD0sclOWyJ+lPtWm3FTZeHedcwwXu03H/szwb6GPDK5KHnMvZg6T+cUDC8yt7PwBGu+27Sp9JQdXiXyk3ObjFKNhy5PJ7/okw4ZgwYxsrWuI7m3jrCHYtiKfiGB/NgTxdWSOb6j/9vDfSZayqEVBM5wS+mhtrwrxHddQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3Et2vUg8+xs1EXv3xryI/5Nuvp5Sfi+O7GCVG/RK2sE=; b=Bcwj+gvIMsWpMHjF5Lu0i8GtzcJbB682i7zab+cedCCybMkwYSjRqZWroLbhRIHSotm16O9qVRzNxnDjp3VdK6ptFzoG9wIzbVK7MDxqSkG222t34xdOFgybazY9fCAcaQCOBdaKJs9cdlOUtYt/ilPcPQ8UozRGmI/LpN4/4AE= Received: from HE1PR0701MB2905.eurprd07.prod.outlook.com (2603:10a6:3:57::18) by HE1PR0701MB2538.eurprd07.prod.outlook.com (2603:10a6:3:73::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2979.22; Tue, 5 May 2020 08:38:48 +0000 Received: from HE1PR0701MB2905.eurprd07.prod.outlook.com ([fe80::b909:1134:d9c1:e941]) by HE1PR0701MB2905.eurprd07.prod.outlook.com ([fe80::b909:1134:d9c1:e941%5]) with mapi id 15.20.2979.025; Tue, 5 May 2020 08:38:48 +0000 From: Mohit Sethi M To: "emu@ietf.org" Thread-Topic: [Emu] Poll for virtual interim Thread-Index: AQHWFp/Y4kHtRMPGXkK69hqFNrQSAKiIPzkAgBEEtoA= Date: Tue, 5 May 2020 08:38:48 +0000 Message-ID: <8a80abb7-6839-f9ba-5f50-81cb48f6b805@ericsson.com> References: <008d10ab-8f20-429c-6319-692ddb2b9228@ericsson.com> <08230192-bed7-632a-3082-a3f8bde30156@ericsson.com> In-Reply-To: <08230192-bed7-632a-3082-a3f8bde30156@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [37.33.8.4] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 002b4e16-76e2-4987-f80f-08d7f0cfbb15 x-ms-traffictypediagnostic: HE1PR0701MB2538: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:3383; x-forefront-prvs: 0394259C80 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 2gwW9YOieq5HzMbqYa8Uw3NRJTq/YS4ArOnykfZ7HkGwzwzttg/9Xxm1XkEB6NFBmZW/1GlEWe8kWCCCE8fyK6kbKRDjsQ/OA+iebck7yVrcyPPVuDwCifN1SFwnLDJba76kCMDNmT2hHWxCkaRspPv5xPOSId3i0ZQESC3jePICL5FGYzqLx12Depfp7CkfRc7bbbhmqLq1ERfIf3MVwSMBZadEmKt3Yvew7hNJpKvFKr5R08hTaBCcO1JAUPXW9+//T+ktDwOcBZTvCHJ8FoUGM7Y3ijI4Lx1gw6don2Pf6C10YVEdBEyKdYA2ZdAHPKa3lYb8MC0wBYt3FhAJ9kaabhXxjNWbNMTnwqUKeMZDSkD421NGulv2/ucBM9DPKuFd5dQqAxSYkRjPpTyuPaNho3QUnDZMTbt1bfpY6dXt2fWZa0TZeWmYBabn0PbtZXSDZfTJ/sk1vWPLL9tzM/5oRwNpsPXxoESWhqiaxSWz6xdZcmnOWrrczud1hhr6sbI8nUH225MX5Q4H8gi7VV+3y3MC0mzTCEwEOu8g7kBE0DzTVi7WlmSOKWgJJUIaPZtGmwsX0jXi2YZisBqtsoBVDeTHeJdoOg5rJVZDwGU= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB2905.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(366004)(39860400002)(396003)(136003)(33430700001)(966005)(86362001)(26005)(478600001)(6916009)(31696002)(71200400001)(64756008)(66446008)(76116006)(66476007)(66946007)(66556008)(6506007)(53546011)(316002)(31686004)(36756003)(8676002)(6486002)(2616005)(8936002)(6512007)(2906002)(5660300002)(33440700001)(186003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 002b4e16-76e2-4987-f80f-08d7f0cfbb15 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 May 2020 08:38:48.2810 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Z/vR4JqzF6ues1DS1YjbwVDqw7tIQgh++vcEN0A4704Li1J/ohtA9Hjxp7HP+PsGE+MEd65Y919QXPl0j39xa3wnDLI9ZyxuX/xKtX9eJYg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2538 Archived-At: Subject: Re: [Emu] Poll for virtual interim X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 May 2020 08:38:53 -0000 VGhlIHBvbGwgaXMgbm93IGNsb3NlZC4gV2Ugd2lsbCBoYXZlIGEgOTAtbWludXRlIHZpcnR1YWwg aW50ZXJpbSBtZWV0aW5nIA0KZm9yIEVNVSBvbsKgIE1heSAyMm5kLCAyMDIwIGJldHdlZW4gMTU6 MDAtMTY6MzAgVVRDLg0KDQpQbGVhc2Ugc2VuZCBpbiByZXF1ZXN0cyBmb3IgcHJlc2VudGF0aW9u cy4gRG9uJ3QgZm9yZ2V0IHRvIGluY2x1ZGUgdGhlIA0KdGl0bGUsIGFwcHJveGltYXRlIHRpbWUg bmVlZGVkLCBhbmQgYW55IGFzc29jaWF0ZWQgZHJhZnRzLg0KDQotLU1vaGl0DQoNCk9uIDQvMjQv MjAgMzo0NSBQTSwgTW9oaXQgU2V0aGkgTSB3cm90ZToNCj4gRGVhciBhbGwsDQo+DQo+IFJlbWlu ZGVyOiBwbGVhc2UgcmVzcG9uZCB0byB0aGUgcG9sbCBmb3IgYSBwb3RlbnRpYWwgdmlydHVhbCBp bnRlcmltIGluDQo+IE1heTogaHR0cHM6Ly9kb29kbGUuY29tL3BvbGwvdnh5NXZjNGczY25lZ3Bk cg0KPg0KPiBKb2UgYW5kIE1vaGl0DQo+DQo+IE9uIDQvMjAvMjAgMjoxMSBBTSwgTW9oaXQgU2V0 aGkgTSB3cm90ZToNCj4+IERlYXIgYWxsLA0KPj4NCj4+IFdlIGRpZCBub3QgaGF2ZSBhIGZhY2Ut dG8tZmFjZSBtZWV0aW5nIGluIFZhbmNvdXZlciBmb3IgSUVURiAxMDcuIEF0DQo+PiB0aGlzIHBv aW50LCB0aGUgSUVURiAxMDggbWVldGluZyBpbiBNYWRyaWQgaXMgYWxzbyB1bmNlcnRhaW4uDQo+ Pg0KPj4gV2UgYXJlIHRoZXJlZm9yZSBjb25zaWRlcmluZyBhIHZpcnR1YWwgaW50ZXJpbSBtZWV0 aW5nIGZvciBFTVUgZHVyaW5nDQo+PiBtaWRkbGUvZW5kIG9mIE1heSAyMDIwLiBIZXJlIGFyZSBz b21lIHByb3Bvc2VkIGRhdGVzIGFuZCB0aW1lIHNsb3RzOg0KPj4gaHR0cHM6Ly9kb29kbGUuY29t L3BvbGwvdnh5NXZjNGczY25lZ3Bkcg0KPj4NCj4+IFBsZWFzZSBpbmRpY2F0ZSB5b3VyIGF2YWls YWJpbGl0eSENCj4+DQo+PiBKb2UgYW5kIE1vaGl0DQo+Pg0KPj4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+IEVtdSBtYWlsaW5nIGxpc3QNCj4+IEVt dUBpZXRmLm9yZw0KPj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lbXUN Cj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gRW11 IG1haWxpbmcgbGlzdA0KPiBFbXVAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9lbXUNCg== From nobody Tue May 5 01:46:50 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C898E3A15D9; Tue, 5 May 2020 01:46:48 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: emu-chairs@ietf.org, rdd@cert.org, mohit.m.sethi@ericsson.com, emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.129.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <158866840826.15621.6394722424944903894@ietfa.amsl.com> Date: Tue, 05 May 2020 01:46:48 -0700 Archived-At: Subject: [Emu] emu - New Interim Meeting Request X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 May 2020 08:46:49 -0000 A new interim meeting request has just been submitted by Mohit Sethi. This request requires approval by the Area Director of the Security Area The meeting can be approved here: https://datatracker.ietf.org/meeting/interim/request/interim-2020-emu-01 --------------------------------------------------------- Working Group Name: EAP Method Update Area Name: Security Area Session Requester: Mohit Sethi Meeting Type: Virtual Meeting Session 1: Date: 2020-05-22 Start Time: 18:00 Europe/Helsinki Duration: 01:30 Remote Participation Information: Remote participation with Webex. Link will be provided after approval Agenda Note: --------------------------------------------------------- From nobody Tue May 5 06:20:07 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A5BCE3A073D; Tue, 5 May 2020 06:19:44 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IESG Secretary To: "IETF-Announce" Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.129.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <158868478443.29494.1290809251340067508@ietfa.amsl.com> Date: Tue, 05 May 2020 06:19:44 -0700 Archived-At: Subject: [Emu] EAP Method Update (emu) WG Virtual Meeting: 2020-05-22 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 May 2020 13:19:45 -0000 The EAP Method Update (emu) Working Group will hold a virtual interim meeting on 2020-05-22 from 18:00 to 19:30 Europe/Helsinki (15:00 to 16:30 UTC). Agenda: Tentative initial agenda: 1. Administrivia (5 Min) 2. TLS-based EAP types and TLS 1.3 (10 min) 3. TEAP errata and updates (15 min) 4. EAP-TLS-PSK (15 min) 4. EAP-NOOB (15 min) 5. TEAP-BRSKI (15 min) .... Information about remote participation: Remote participation with Webex. Link will be provided after approval From nobody Tue May 5 06:27:39 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D7853A0768 for ; Tue, 5 May 2020 06:27:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.847 X-Spam-Level: X-Spam-Status: No, score=-1.847 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z2VQE70X6uTa for ; Tue, 5 May 2020 06:27:36 -0700 (PDT) Received: from mail-oi1-x22f.google.com (mail-oi1-x22f.google.com [IPv6:2607:f8b0:4864:20::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3ECE3A073D for ; Tue, 5 May 2020 06:27:36 -0700 (PDT) Received: by mail-oi1-x22f.google.com with SMTP id r66so1916429oie.5 for ; Tue, 05 May 2020 06:27:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=XY1DJU6XLHug/ecZzZCSARSoDhhBhge1bls8hBUS/NU=; b=LLB7KEtKXT9w4OfVxwUlD3pfLxSWVPwDwGWe4d+BWdMktPEBQsiEDRfJ8GW4zO7ylR Mai4IJBnu/bXvY/FI4ZNJA8wFVwNCtsld9oP/ZJ7lpP/gMzveeGiQkweCCueXwKxxS4I kZSqYc1codKtsPn/jykzfjBR3nflIsRu6OlxjcTcWoUZwfTqc+EqwFh1B2eRJYmSn2d8 s+Nmi0m+pYlyfTL4lcTPH9b6cs+H7t7TKQfy48JB5JowTKJF4bEd2mecXMm47kUvbejs npWsojWO1pTfc7zHeLlVejMtWz5OSvm8iImGuSn4ezJVABrNTmpMp/A2jGDB3pEfhRMY Mpzw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=XY1DJU6XLHug/ecZzZCSARSoDhhBhge1bls8hBUS/NU=; b=JexUMxbeiduKOcznPf7ejWqaBfH6jkWIwj/mJfkQ9autm6v1EEKysQHl7f2ia7R4F+ tWwlR/ehbtH3BTZl9VrkSXQNxciFnpfgt7mkdwg7i0W0gGmnaZLmETsqbf8l1GBSHWCQ n6OzGz9p9tIhwtTF0/XvQe0qEPTeFCL8ZfO2JftisZ7b9FDooIcGasioX/YmBcweh2jd 6HDPyXYWChKr2dXdX5GfpD+6XkAMnPK+FB6eJBULOXgMDEnD5NRf36T7Wg6LjixxkIgJ Lz10MNjdliVq+A4IG69v6FTD1VGk2F13iccgmXtTYtI0TaH5N95Uw0WMnIxQH5sTX5fJ sk7g== X-Gm-Message-State: AGi0PuYJmKhfl22JXyCQATAuylLq06Jdbq/LHpLL4Nj4DhJUxk/egvLZ 31K6Ggtz7sBTozWjFgSo02t6fDhM5tj86PNw0/kP/ALC X-Google-Smtp-Source: APiQypLHa5MsD2G+AGCVNszMT5c8R4/npx7wMPOd5VvbBv+7Fecw5M/nJp+WgSmke0gG8Fkj75JoXr35NIU4XQm3SrI= X-Received: by 2002:aca:c4d3:: with SMTP id u202mr2387839oif.113.1588685255980; Tue, 05 May 2020 06:27:35 -0700 (PDT) MIME-Version: 1.0 From: Oleg Pekar Date: Tue, 5 May 2020 16:27:24 +0300 Message-ID: To: Jouni Malinen , EMU WG Content-Type: multipart/alternative; boundary="00000000000057ba6e05a4e69c0a" Archived-At: Subject: [Emu] TEAP - RFC 7170 - Errata ID 5768 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 May 2020 13:27:38 -0000 --00000000000057ba6e05a4e69c0a Content-Type: text/plain; charset="UTF-8" Hi Jouni, I propose the following fix for the issues described in this errata id: 1) In Section "4.2.13. Crypto-Binding TLV" make "EMSK Compound MAC" and "MSK Compound MAC" fields 32 octets long (currently 20 octets). The MAC value is truncated at 32 octets if it is longer than 32 octets or padded to a length of 32 octets with zeros to the right if it is less than 32 octets. The length of the TLV should be changed to 100 bytes (currently 76). The motivation is to keep collision-resistance strength of MAC on 128 bit. Hash value truncation is described in "NIST Special Publication 800-107 Revision 1: Recommendation for Applications Using Approved Hash Algorithms" 2) In Section "5.3. Computing the Compound MAC" specify that "MAC is the MAC function negotiated in TLS of TEAP Phase 1" (currently it says TLS 1.2) The motivation is to support TLS 1.2, 1.3 and possibly later TLS versions. 3) In Section "5.3. Computing the Compound MAC" when specifying the list of field to be placed in the BUFFER" should say "...2 A single octet contains TEAP EAP method type 0x37". Alternatively it could be "...2 A single octet contains EAP Type of the inner EAP method related to the calculation or 0 if no inner EAP method was executed" (currently "...2 The EAP Type sent by the other party in the first TEAP message") Please note that there's still a discussion on sending Crypto-Binding TLV on "Authentication inner EAP method" or "Inner EAP method that exports MSK" only. Thanks Oleg --00000000000057ba6e05a4e69c0a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Jouni,
I propose the following fix for the issues d= escribed in this errata id:
1) In Section "4.2.13.=C2=A0 Cry= pto-Binding TLV" make "EMSK Compound MAC" and "MSK Comp= ound MAC" fields 32 octets long (currently 20 octets). The=C2=A0MAC va= lue is truncated at 32 octets if it is longer than 32 octets or=C2=A0padded= to a length of 32 octets with zeros to the right if it is less than 32 oct= ets. The length of the TLV should be changed to 100 bytes (currently 76).= =C2=A0

The motivation is to keep=C2=A0collision-re= sistance strength of MAC on 128 bit. Hash value=C2=A0truncation is describe= d in "NIST Special Publication 800-107 Revision 1: Re= commendation for Applications Using Approved Hash Algorithms"=C2= =A0
=C2=A0
2) In Section "5.3.=C2=A0 Computing the= Compound MAC" specify that "MAC is the MAC function negotiated i= n TLS of=C2=A0TEAP Pha= se 1" (currently it says TLS 1.2)

The = motivation is to support TLS 1.2, 1.3 and possibly later TLS versions.

3)=C2=A0In Section "5.3.=C2=A0 Computing the Comp= ound MAC" when specifying the list of field=C2=A0to be placed in the B= UFFER" should say=C2=A0"...2 =C2=A0A single octet contains TEAP E= AP method type 0x37". Alternatively it could be "...2 =C2=A0A sin= gle octet contains EAP Type of the inner EAP method related to the calculat= ion or 0 if no inner EAP method was executed" (currently "...2 = =C2=A0The EAP Type sent by the other party in the first TEAP message")=

Please note that there's still a discussion o= n sending Crypto-Binding TLV on "Authentication inner EAP method"= or "Inner EAP method that exports MSK" only.

Thanks
Oleg
--00000000000057ba6e05a4e69c0a-- From nobody Tue May 5 21:58:24 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F9C93A0D61; Tue, 5 May 2020 21:58:22 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.129.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: emu@ietf.org Message-ID: <158874110251.2377.8434138687145839828@ietfa.amsl.com> Date: Tue, 05 May 2020 21:58:22 -0700 Archived-At: Subject: [Emu] I-D Action: draft-ietf-emu-eap-noob-00.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 04:58:23 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the EAP Method Update WG of the IETF. Title : Nimble out-of-band authentication for EAP (EAP-NOOB) Authors : Tuomas Aura Mohit Sethi Filename : draft-ietf-emu-eap-noob-00.txt Pages : 62 Date : 2020-05-05 Abstract: Extensible Authentication Protocol (EAP) provides support for multiple authentication methods. This document defines the EAP-NOOB authentication method for nimble out-of-band (OOB) authentication and key derivation. The EAP method is intended for bootstrapping all kinds of Internet-of-Things (IoT) devices that have no pre-configured authentication credentials. The method makes use of a user-assisted one-directional OOB message between the peer device and authentication server to authenticate the in-band key exchange. The device must have an input or output interface, such as a display, microphone, speakers or blinking light, which can send or receive dynamically generated messages of tens of bytes in length. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-emu-eap-noob/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-emu-eap-noob-00 https://datatracker.ietf.org/doc/html/draft-ietf-emu-eap-noob-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue May 5 22:03:22 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38D9F3A0BA8 for ; Tue, 5 May 2020 22:03:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.887 X-Spam-Level: X-Spam-Status: No, score=-1.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=salowey-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XuYZuVaDJBED for ; Tue, 5 May 2020 22:03:15 -0700 (PDT) Received: from mail-qv1-xf2e.google.com (mail-qv1-xf2e.google.com [IPv6:2607:f8b0:4864:20::f2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5D913A07B3 for ; Tue, 5 May 2020 22:03:15 -0700 (PDT) Received: by mail-qv1-xf2e.google.com with SMTP id ck5so125094qvb.11 for ; Tue, 05 May 2020 22:03:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salowey-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=6uO2h2z/cMWZxx4x/8ykouIpmxd/C0qSmZbJdWyUaig=; b=oxO4vlWxLgZYn3n3c1N4+OXGC7XsH2utGro54g+rmII9/I/zoi+xOIDC6/ei68PW1G Dm5gIxGjUxM6sTSHzVUYmot+2Ga7+rw6IKrjp9HUKlEnmfLbh4ehrTr7dBFK8MKjUVIH 38laYKEbwRSYZ4yvUpu2DwYKoR2WlXMAS+a2Gf5VuGbaID95RuHtQlfH8xLsYitqr8Ve pBZPYCNTuCQvu9sqjblmDf9zokUqNEQdZRxA31wRlkcHtwUz1I5xmeU20EBbqDVYbj2H 5QkIk6F/mqoyl1R3h/CNv1uYn5QQtsVSyZ32Jd5Rwjv5/ajCUbmVtN7AxnN/+Bnh51Is 3+bg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=6uO2h2z/cMWZxx4x/8ykouIpmxd/C0qSmZbJdWyUaig=; b=iDvUQHtQnovD5pgXhSFmqe6RQxj7K7JOz8Mt7oqlerZajTCmQ5ecHjxPpj0DZ7qa84 tIFFmAg9Gz3HeSi5GlasuofQd6vyRdypkMofrr+b6uKZdg7HfXQRxHC4xLiYxGCU4CPF DA3yMdWYJlOHvj2GwLiMJ5gID2VOJceQqaaBoOoyG5CfWBPVC3HvYzpTYBASYBs5xMWz OHNrz9p/FLyhGx2aeZXDAyR780ksSbR5WAa4xyptEmbG/1+eAYnv4EchlfEVv1RppbiF OBiGDRzG5OT34EOtr2NQacGznmgaXzvXMdwxA2r5HlL0xuxKCO4V0XF/QUMnlZZ+poGj fMqw== X-Gm-Message-State: AGi0PuaAmIFBt/h4KzrZSikC1alUbpdHjzeuRWTexFAItKAoWS333wUS MRo+PtjjIpZW7NcALt07/rSfPhtlcX1B436M6/iMc8it X-Google-Smtp-Source: APiQypJkNvAqbfyIXSd91uAk+JhfrJqyYVLLIvFZZcdqz7hqrpyXKqoEn7X64XL6kOPQSFI3Emp/TM6c1UTidGlA8cY= X-Received: by 2002:a0c:efc8:: with SMTP id a8mr5950711qvt.153.1588741394428; Tue, 05 May 2020 22:03:14 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Joseph Salowey Date: Tue, 5 May 2020 22:03:03 -0700 Message-ID: To: EMU WG Content-Type: multipart/alternative; boundary="000000000000748cf005a4f3ae5c" Archived-At: Subject: Re: [Emu] WGLC for draft-ietf-emu-eap-tls13-09 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 05:03:20 -0000 --000000000000748cf005a4f3ae5c Content-Type: text/plain; charset="UTF-8" The WGLC for this draft has been completed. Publication will be requested later this week. On Sun, Apr 19, 2020 at 3:37 PM Joseph Salowey wrote: > This is the second working group last call for EAP-TLS > (draft-ietf-emu-eap-tls13-09)[1]. The authors submitted a draft to address > the issues raised during the last working group last call. Please focus on > the changes [2] in the latest draft and send any comments to the list by > May 4, 2020. > > Thanks, > > Joe > > [1] https://datatracker.ietf.org/doc/draft-ietf-emu-eap-tls13/ > [2] https://tools.ietf.org/rfcdiff?url2=draft-ietf-emu-eap-tls13-09.txt > > > --000000000000748cf005a4f3ae5c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
The WGLC for this draft has been completed.=C2=A0 =C2=A0Pu= blication will be requested later this week.=C2=A0=C2=A0

On Sun, Apr 19, 202= 0 at 3:37 PM Joseph Salowey <joe@salo= wey.net> wrote:
This is the second working group last call for EAP-= TLS (draft-ietf-emu-eap-tls13-09)[1].=C2=A0 The authors submitted a draft t= o address the issues raised during the last working group last call.=C2=A0 = Please focus on the changes [2] in the latest draft and send any comments t= o the list by May 4, 2020.=C2=A0=C2=A0

Thanks,
=

Joe



--000000000000748cf005a4f3ae5c-- From nobody Wed May 6 06:57:50 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6ED473A076C for ; Wed, 6 May 2020 06:57:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.847 X-Spam-Level: X-Spam-Status: No, score=-1.847 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MWVsUI0gHSRa for ; Wed, 6 May 2020 06:57:46 -0700 (PDT) Received: from mail-oi1-x233.google.com (mail-oi1-x233.google.com [IPv6:2607:f8b0:4864:20::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DE503A076F for ; Wed, 6 May 2020 06:57:46 -0700 (PDT) Received: by mail-oi1-x233.google.com with SMTP id k133so1575630oih.12 for ; Wed, 06 May 2020 06:57:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=v/C5o3fgUTZoGg62DxxvWobTlysV9tlC0VCvGiKqTF4=; b=OQCUE/QNfEG6Alsnpju69BtH14Ez1xen7AG5yRH5MooCETXTapWGts5JHF6SyHE0rN Jig73W9m8OjSbsiPBazAt1T0WYWypa/8qaWzZoNWIMhHEL6vYPuuY789cmirlitnd02d CpHwaie+YxaWU0cdp9GRCoX2BMY5eETgFg+yU9iKoW7tTpEX4QohujOORDK+VGoFuKhZ +QFA1BvWgfvzegx6TTM2THgTubHOjaybtt8dKqbts0rcww207QEuRneGGTY+mO1IeVA/ jfxRlGCe4hzTt9dHg8tzLSk6FymWOFvor5QrC+iFySJ0bnl0BouFeLXWSApazp3XJW7P 489w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=v/C5o3fgUTZoGg62DxxvWobTlysV9tlC0VCvGiKqTF4=; b=iVr6ZCvk8XhiSJmFOpchZa4IMWVXFE6qGa8kP1UHcSUmUlmUPGeXl8SCz08s4v2ffa Uag6xvNUKSgT0oTkDPUofgb4TCM6rNhLWneaLso6vUHCqwbjp895uwH+RWpBJ14CzS6u Sj8F75WGeCyPu6bzHTUoEeoFhB6FiRArKf7H+G2TOwhslTTn50FNDHkyMRLD8mDEU6GE QQJVxmjpoOti0y/iVNVf8swOn/BRI+sW1/B4tmZmbcH82UXBvuL0DJfJOInMnnymfyE2 3fcA/yo8aFQRH/9EdH8ltoDTlGxMVGUaKWDu9uErC39C2eAN4D6oLpGnDyr4E2bgOxrA 7ZcA== X-Gm-Message-State: AGi0PubA7dpL2O+Ejg8vX1cnnpUw3bm6tTsFVha8iOoKyI4+6XNYS/go 7ABZWpPAU4+sflF2nzGt3AHMgNXw+0PFETHwsJJ5dnt0 X-Google-Smtp-Source: APiQypL9Z+Wrzn+BPOp45SJCsxmuGc/m1mtCHkNtgbVO31Drlyh+1S5xNH5YuwmC9MzACJvBI0hLS3y/otcOurrVOWU= X-Received: by 2002:a54:4115:: with SMTP id l21mr2810197oic.18.1588773465506; Wed, 06 May 2020 06:57:45 -0700 (PDT) MIME-Version: 1.0 References: <7DF5C6C1-5176-417A-837F-4849262DFA35@cisco.com> In-Reply-To: <7DF5C6C1-5176-417A-837F-4849262DFA35@cisco.com> From: Oleg Pekar Date: Wed, 6 May 2020 16:57:34 +0300 Message-ID: To: Eliot Lear Cc: EMU WG Content-Type: multipart/alternative; boundary="0000000000000a482605a4fb260a" Archived-At: Subject: Re: [Emu] TEAP Request-Action TLV X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 13:57:49 -0000 --0000000000000a482605a4fb260a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Eliot, Few thoughts: - If the current client's certificate was requested via TEAP by PKCS#10 TLV - then maybe it makes sense for the client to send Request-Action TLV + PKCS#10 TLV again with the same certificate parameters - If the current client's certificate was not requested via TEAP - then there's no evidence that the certificate renewal will be addressed (mayb= e TEAP is not connected to any CA) - If the current client's certificate was obtained from the external CA (e.g. via SCEP or EST) - then there's no evidence that the certificate renewal will be addressed - If the current client's certificate was preinstalled - then the client may not have a clue what does it want and will be unable to fill PKCS#10 request. On the other hand, the CA that TEAP server is connected to coul= d be unable to generate certificate with exactly the same properties and t= he current client certificate. Simple example: the current certificate is ECDSA and the CA can generate RSA only. Hard example: the current client certificate contains vendor specific extensions like Policy or Template Name. So it will be hard to put those extensions to the generated certificate Regards Oleg On Thu, Apr 30, 2020 at 4:19 PM Eliot Lear wrote: > All: > > Here is a circumstance one could easily imagine, and in fact we attempted > to address in draft-lear-eap-teap-brski: > > Client requires a new certificate for some reason or another. Perhaps it= s > is about to expire, or perhaps the signer has been compromised, or what > have you. > > > We were thinking that we could use the Request-Action Frame for this > purpose with a type of PKCS#10. But that now seems wrong, as the languag= e > in the draft states that one appends a Request-Action frame with a full > TLV, and not just a *type, * and further that the other end process the > TLV. In looking at Jouni=E2=80=99s code, he is doing precisely that with= the PAC > TLV. > > And so it seems we have three choices: > > > - Create a new TLV that has a length of *two* that can be used in a > REQUEST_ACTION frame. > - Create a new TLV that is what we thought we meant: here is a list of > two(ish)-byte types whose TLVs I want you to send to me. > - Hard code the ordering of requests so everyone knows what to expect. > > > Each of these has its own problems. > > The first requires that we create a new EAP TYPE for TLV one end needs th= e > other to send, but it=E2=80=99s pretty easy to process. The second requir= es extra > processing but requires less standardization. The last seems to go again= st > the EAP model and reduces deployment flexibility. > > Thoughts? > > Eliot > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu > --0000000000000a482605a4fb260a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Eliot,
Few thoughts:=C2=A0
  • If the= current client's certificate was requested via TEAP by PKCS#10 TLV - t= hen maybe it makes sense=C2=A0for the client to send Request-Action TLV=C2= =A0+=C2=A0PKCS#10 TLV again with the same certificate parameters
  • If= the current client's certificate was not requested via TEAP - then the= re's no evidence that the certificate renewal will be addressed (maybe = TEAP is not connected to any CA)
  • If the current client's certif= icate was obtained from the external CA (e.g. via SCEP or EST)=C2=A0- then = there's no evidence that the certificate renewal will be addressed
    <= /li>
  • If the current client's certificate was preinstalled - then the= client may not have a clue what does it want and will be unable to fill=C2= =A0PKCS#10 request. On the other hand, the CA that TEAP server is connected= to could be unable to generate certificate with exactly the same propertie= s and the current client certificate. Simple example: the current certifica= te is ECDSA and the CA can generate RSA only. Hard example: the current cli= ent certificate contains vendor specific extensions like Policy or Template= Name. So it will be hard to put those extensions to the generated certific= ate
Regards
Oleg

On Thu, Apr 30, 2020 at= 4:19 PM Eliot Lear <lear=3D40cisco.com@dmarc.ietf.org> wrote:
All:<= div>
Here is a circumstance one could easily imagine, and in = fact we attempted to address in draft-lear-eap-teap-brski:

<= div>Client requires a new certificate for some reason or another.=C2=A0 Per= haps its is about to expire, or perhaps the signer has been compromised, or= what have you.

We were thinking that= we could use the Request-Action Frame for this purpose with a type of PKCS= #10.=C2=A0 But that now seems wrong, as the language in the draft states th= at one appends a Request-Action frame with a full TLV, and not just a ty= pe, =C2=A0and further that the other end process the TLV.=C2=A0 In look= ing at Jouni=E2=80=99s code, he is doing precisely that with the PAC TLV.

And so it seems we have three choices:
  • Create a new TLV that has a length of two=C2=A0= that can be used in a REQUEST_ACTION frame.
  • Create a new TLV that i= s what we thought we meant: here is a list of two(ish)-byte=C2=A0types whos= e TLVs=C2=A0I want you to send to me.
  • Hard code the ordering of req= uests so everyone knows what to expect.

= Each of these has its own problems.=C2=A0

The firs= t requires that we create a new EAP TYPE for TLV one end needs the other to= send, but it=E2=80=99s pretty easy to process. The second requires extra p= rocessing but requires less standardization.=C2=A0 The last seems to go aga= inst the EAP model and reduces deployment flexibility.

=
Thoughts?

Eliot
__________________= _____________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu
--0000000000000a482605a4fb260a-- From nobody Wed May 6 12:15:58 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EF4E3A0B04 for ; Wed, 6 May 2020 12:15:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.847 X-Spam-Level: X-Spam-Status: No, score=-1.847 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id irqKzslUHLNG for ; Wed, 6 May 2020 12:15:24 -0700 (PDT) Received: from mail-oo1-xc2d.google.com (mail-oo1-xc2d.google.com [IPv6:2607:f8b0:4864:20::c2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6BC113A0AEE for ; Wed, 6 May 2020 12:15:23 -0700 (PDT) Received: by mail-oo1-xc2d.google.com with SMTP id e18so737955oot.9 for ; Wed, 06 May 2020 12:15:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=so92c3UalG1VWfbj+TTaL69syMWfRDdGVHjJeUMrXC8=; b=MIUhG0265InHvdPsafwOGSFkaMdDpg6h7xz8MZeepidVwGSf5Rd0QH3mkhzYkyMnmC iGd1dtn0A2NuaK9n3qg0SQ4+kwexKFxPXV4aYbo1JmGnjeifqnrH6c+x42nzEa/56opY P1NzdKrqiJT8ls1ZUwcgVdUvoLD+CFeKEc52c8LPCiEXMcVDb9GXtfiU5Yv5O2ZZjpoY 9Xo1UrCFKTLnolQBOgWkYrRDbCcgbLxgY6QzSAAMd/i4Jxh1yHjFuSBmOJEbmE2NudhF ZVJetCQl9H3Pit3d2WYFNni5k7Ei+roz9RXBKSopntStH5odL2U7m35w2jWXuCbMX6c5 ILDQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=so92c3UalG1VWfbj+TTaL69syMWfRDdGVHjJeUMrXC8=; b=e3xpMbSUW1mtSDOzOh8uBNHNsiOEPuA1BwB77xhk5oQeAeGC33ARgBQFAAlOVxzoRT RFDg10IipiR4nqxsK/PM0I+iKS29yA/oh1A5+rLAeQW7lg7xT4W+4eGXcjOaZz7TT8us v0ZqjuoNuqrtdX5qnOlrm6fgKt56f0U7aPeiJ9/O7EJcS/0OpSvdQgufC/0JsyNdH1uz DSltyEZ5ye06m3YZwANbhSxywTEaFyioWyr3xU7JZYOuyISxsD+61Qhnc4/ATM1Vqa+4 t/v6tacK1djXbvckaGz9TuJdnQIFZTxQB97j6xMlfeMADTegdYVUgARzraZXLI3LFdjM Ad2A== X-Gm-Message-State: AGi0PuarNfb15RYoFe4rAzq0jjT4lTkX2+sFuHDlg63bCAgrsQhlYSn9 SkBMRafTIwefETmgWBhLwsC7J3Nne4kJNAYL9rU= X-Google-Smtp-Source: APiQypK9SGrJ8gJaAh4DnjQhKxRVqDDB/YKosqpe+cLhjQhvJUDPeZBakANDynbiBP5EypwPYzLAVMmAKMc5nUxY+2I= X-Received: by 2002:a4a:9285:: with SMTP id i5mr8288478ooh.50.1588792520878; Wed, 06 May 2020 12:15:20 -0700 (PDT) MIME-Version: 1.0 References: <7DF5C6C1-5176-417A-837F-4849262DFA35@cisco.com> In-Reply-To: From: Oleg Pekar Date: Wed, 6 May 2020 22:15:09 +0300 Message-ID: To: Eliot Lear Cc: EMU WG Content-Type: multipart/alternative; boundary="000000000000d42c6b05a4ff9541" Archived-At: Subject: Re: [Emu] TEAP Request-Action TLV X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 19:15:30 -0000 --000000000000d42c6b05a4ff9541 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Eliot gave me some hint offline and here's what we can do in TEAP with regards of certificate provisioning/enrollment/renewal. In the current TEAP RFC, when the peer wants to get list of Trusted Roots it sends Trusted-Server-Root TLV with credential type field - a constant value 1 for PKCS#7 and with no other content. The server replies with Trusted-Server-Root TLV and puts PKCS#7 inside it. So there's a kind of request-response with the same TLV. However for certificate request the peer should send PKCS#10 TLV and the server should response with PKCS#7 TLV. It shows some inconsistency on one hand and gives no possibility for the server to control certificate renewal= . Suggest closing that gap by introducing a new "Peer-Certificate TLV" with exactly the same format as Trusted-Server-Root TLV. - When the peer wants to request a certificate it sends "Peer-Certificate TLV" with credential type field equal to 1 for PKCS#7 and optional PKCS#10 TLV as a content - If no PKCS#10 TLV attached then the server can just renew the existing certificate if it has such capabilities and required data (or can say th= at the peer wants a certificate based on its current certificate and the current server policies). - If PKCS#10 TLV is attached then the server generates peer certificate according to the data in the request - If the server wants to generate peer certificate it may reply with "Peer-Certificate TLV" with credential type field equal to 1 for PKCS#7 and PKCS#10 TLV as a content. - If the server wants the peer to send certificate request with all the data - it sends "Peer-Certificate TLV" with credential type field equal = to 1 for PKCS#7 and no content - We don't need to use Request-Action TLV in the whole flow Would that work? Regards Oleg On Wed, May 6, 2020 at 4:57 PM Oleg Pekar wrote= : > Hi Eliot, > Few thoughts: > > - If the current client's certificate was requested via TEAP by > PKCS#10 TLV - then maybe it makes sense for the client to send > Request-Action TLV + PKCS#10 TLV again with the same certificate param= eters > - If the current client's certificate was not requested via TEAP - > then there's no evidence that the certificate renewal will be addresse= d > (maybe TEAP is not connected to any CA) > - If the current client's certificate was obtained from the external > CA (e.g. via SCEP or EST) - then there's no evidence that the certific= ate > renewal will be addressed > - If the current client's certificate was preinstalled - then the > client may not have a clue what does it want and will be unable to > fill PKCS#10 request. On the other hand, the CA that TEAP server is > connected to could be unable to generate certificate with exactly the = same > properties and the current client certificate. Simple example: the cur= rent > certificate is ECDSA and the CA can generate RSA only. Hard example: t= he > current client certificate contains vendor specific extensions like Po= licy > or Template Name. So it will be hard to put those extensions to the > generated certificate > > Regards > Oleg > > On Thu, Apr 30, 2020 at 4:19 PM Eliot Lear 40cisco.com@dmarc.ietf.org> wrote: > >> All: >> >> Here is a circumstance one could easily imagine, and in fact we attempte= d >> to address in draft-lear-eap-teap-brski: >> >> Client requires a new certificate for some reason or another. Perhaps >> its is about to expire, or perhaps the signer has been compromised, or w= hat >> have you. >> >> >> We were thinking that we could use the Request-Action Frame for this >> purpose with a type of PKCS#10. But that now seems wrong, as the langua= ge >> in the draft states that one appends a Request-Action frame with a full >> TLV, and not just a *type, * and further that the other end process the >> TLV. In looking at Jouni=E2=80=99s code, he is doing precisely that wit= h the PAC >> TLV. >> >> And so it seems we have three choices: >> >> >> - Create a new TLV that has a length of *two* that can be used in a >> REQUEST_ACTION frame. >> - Create a new TLV that is what we thought we meant: here is a list >> of two(ish)-byte types whose TLVs I want you to send to me. >> - Hard code the ordering of requests so everyone knows what to expect= . >> >> >> Each of these has its own problems. >> >> The first requires that we create a new EAP TYPE for TLV one end needs >> the other to send, but it=E2=80=99s pretty easy to process. The second r= equires >> extra processing but requires less standardization. The last seems to g= o >> against the EAP model and reduces deployment flexibility. >> >> Thoughts? >> >> Eliot >> _______________________________________________ >> Emu mailing list >> Emu@ietf.org >> https://www.ietf.org/mailman/listinfo/emu >> > --000000000000d42c6b05a4ff9541 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Eliot gave me some hint offline and here's what we can= do in TEAP with regards of certificate provisioning/enrollment/renewal.
In the current TEAP=C2=A0RFC, when the peer wants to get l= ist of Trusted Roots it sends=C2=A0Trusted-Server-Root TLV with credential type field - a constan= t value 1 for=C2=A0PKCS#7 and with no other content. The server repl= ies with=C2=A0Trusted-Server-Root TLV and puts=C2=A0PKCS#7 inside it. So th= ere's a kind of request-response with the same TLV.

However for certificate request the peer should send=C2=A0PKCS#10 TLV= and the server should response with=C2=A0PKCS#7 TLV. It shows some inconsi= stency=C2=A0on one hand and gives no possibility for the server to control = certificate renewal.

Suggest closing that gap by i= ntroducing a new "Peer-Certificate TLV" with exactly the same for= mat as=C2=A0Trusted-Server-Root TLV.=C2=A0
  • When the peer = wants to request a certificate it sends=C2=A0"Peer-Certificate TLV&quo= t; with credential type field equal to 1 for=C2=A0PKCS#7 and optional PKCS#= 10 TLV as a content
  • If no=C2=A0PKCS#10 TLV attached then the server= can just renew the existing certificate if it has such capabilities and re= quired data (or can say that the peer wants a certificate based on its curr= ent certificate and the current server policies).=C2=A0
  • If PKCS#10 = TLV is attached then the server generates peer certificate according to the= data in the request
  • If the server wants to generate peer certi= ficate it may reply with "Peer-Certificate TLV" with credential t= ype field equal to 1 for=C2=A0PKCS#7 and=C2=A0PKCS#10 TLV as a content.=C2= =A0
  • If the server wants the peer to send certificate request with a= ll the data - it sends=C2=A0"Peer-Certificate TLV" with credentia= l type field equal to 1 for=C2=A0PKCS#7 and no content
  • We don't= need to use Request-Action TLV in the whole flow
Would that = work?

Regards
Oleg

=
On Wed, Ma= y 6, 2020 at 4:57 PM Oleg Pekar <oleg.pekar.2017@gmail.com> wrote:
Hi Eliot,
Few thought= s:=C2=A0
  • If the current client's certificate was requ= ested via TEAP by PKCS#10 TLV - then maybe it makes sense=C2=A0for the clie= nt to send Request-Action TLV=C2=A0+=C2=A0PKCS#10 TLV again with the same c= ertificate parameters
  • If the current client's certificate was n= ot requested via TEAP - then there's no evidence that the certificate r= enewal will be addressed (maybe TEAP is not connected to any CA)
  • If= the current client's certificate was obtained from the external CA (e.= g. via SCEP or EST)=C2=A0- then there's no evidence that the certificat= e renewal will be addressed
  • If the current client's certifi= cate was preinstalled - then the client may not have a clue what does it wa= nt and will be unable to fill=C2=A0PKCS#10 request. On the other hand, the = CA that TEAP server is connected to could be unable to generate certificate= with exactly the same properties and the current client certificate. Simpl= e example: the current certificate is ECDSA and the CA can generate RSA onl= y. Hard example: the current client certificate contains vendor specific ex= tensions like Policy or Template Name. So it will be hard to put those exte= nsions to the generated certificate
Regards
O= leg

On Thu, Apr 30, 2020 at 4:19 PM Eliot Lear <lear=3D40cisco.com@dmarc.ietf.= org> wrote:
All:

Here is a circumstance one could easily ima= gine, and in fact we attempted to address in draft-lear-eap-teap-brski:

Client requires a new certificate for some reason or anoth= er.=C2=A0 Perhaps its is about to expire, or perhaps the signer has been co= mpromised, or what have you.

We were = thinking that we could use the Request-Action Frame for this purpose with a= type of PKCS#10.=C2=A0 But that now seems wrong, as the language in the dr= aft states that one appends a Request-Action frame with a full TLV, and not= just a type, =C2=A0and further that the other end process the TLV.= =C2=A0 In looking at Jouni=E2=80=99s code, he is doing precisely that with = the PAC TLV.

And so it seems we have three choices= :

  • Create a new TLV that has a length of two=C2=A0that can be used in a REQUEST_ACTION frame.
  • Create a = new TLV that is what we thought we meant: here is a list of two(ish)-byte= =C2=A0types whose TLVs=C2=A0I want you to send to me.
  • Hard code the= ordering of requests so everyone knows what to expect.

<= /div>
Each of these has its own problems.=C2=A0

The first requires that we create a new EAP TYPE for TLV one end ne= eds the other to send, but it=E2=80=99s pretty easy to process. The second = requires extra processing but requires less standardization.=C2=A0 The last= seems to go against the EAP model and reduces deployment flexibility.

Thoughts?

Eliot
__= _____________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu
--000000000000d42c6b05a4ff9541-- From nobody Wed May 6 21:36:46 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3AB63A0849 for ; Wed, 6 May 2020 21:36:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3TulOP9VKxMv for ; Wed, 6 May 2020 21:36:42 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2082.outbound.protection.outlook.com [40.107.22.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC9EB3A0848 for ; Wed, 6 May 2020 21:36:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Py+KfIqxh9Twhawi/rEFsQZGnD8AYOxInnvEq+Y7rLDCbhga+oN1GnA+f+7VmKR+m0CZbHWuGdaqT7I0pQScS5VurL7cTgcanZdnUph+v7jd/fQdOcl/rMSD8747AJ4bDR6OY/ziH3FUapxUTI2/dg719THRlihcdfqm8RMTBPu0gUtuVFtA4L5EfirLvnfP3PnaiDhSqIM5UbXQGdCHuKoB3ePFdXkY7HUKJGAqad0q7WquSof27B/+acRwLC98dF5dFkL7ybsJV1BSPp0T8/plnykkVn8XSK+tssZ5ZKoTUIHP3gqhDKL/FVq/L8UN9k9JU9/iOsgE1+Z9IJxjEQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uXORB0Fozz0syEKQko0whjCVi0DgZPVnSGZGs0VkOrg=; b=QOGKd3aRXO8tOk7PSGColzAyN5OtrgjJGMhWoEBvIMVCffNdAF2kFkjPtBfSp5DrA/D947hBqL5DQ3MsE7ZzAZ+79mnXmFnSathQRUX1zZh9bBljnkCE2t5PWl/h3ZY5gYsEqQXhBpVHkaFFjivBWk9E3FCKdoH9S32MISQQXi2uA0zQfQ7GutTxyq6DkMoRyCv2IRH9KMiCxYgkup6RPRl7kgkqNCvGRYEzax7NC8dX/WIVTPc7XrYCILOXLNyOU1wRinUAtXwUO8zTPcCOuA+VJPEfePLnVJw7H46jyhJemE0IaVkTiWvQexXN5Lm20tLzx5Xz/tI9z6eEppRwBQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uXORB0Fozz0syEKQko0whjCVi0DgZPVnSGZGs0VkOrg=; b=nSiO7yUfI7u4l89xWgNRkspCYDQVXUveUOaRoBNkcpeRIc88eeF4J8qFuoLb3opqj4/2JvmBBGdozdKT80t22wOqwfmVaoK+B8gt6mJaWGzqGeEE5itbKzW5vT4mtkn1FvFUEbzGM3qCaZ2fgMvZ29ckUfcZKST5t+UcOnQatJQ= Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com (2603:10a6:3:99::15) by HE1PR0701MB2332.eurprd07.prod.outlook.com (2603:10a6:3:68::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2979.22; Thu, 7 May 2020 04:36:39 +0000 Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74]) by HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74%6]) with mapi id 15.20.3000.011; Thu, 7 May 2020 04:36:39 +0000 From: Mohit Sethi M To: "emu@ietf.org" Thread-Topic: [Emu] Working Group Call For adoption of draft-dekok-emu-tls-eap-types Thread-Index: AQHWFp1GMAGifJM7G0ShEhYIO5Pbi6icJPOA Date: Thu, 7 May 2020 04:36:39 +0000 Message-ID: References: <57b8d094-1759-3d15-b846-c00f045d7372@ericsson.com> In-Reply-To: <57b8d094-1759-3d15-b846-c00f045d7372@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [37.33.8.4] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 86407f45-255d-4761-d3ec-08d7f2403be1 x-ms-traffictypediagnostic: HE1PR0701MB2332: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 03965EFC76 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB2761.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(39860400002)(366004)(376002)(136003)(346002)(33430700001)(26005)(478600001)(33440700001)(5660300002)(6506007)(31696002)(66556008)(66476007)(2616005)(31686004)(6916009)(316002)(6512007)(186003)(966005)(16799955002)(2906002)(71200400001)(53546011)(76116006)(66946007)(6486002)(36756003)(64756008)(8676002)(8936002)(66446008)(83300400001)(83320400001)(83280400001)(83290400001)(86362001)(83310400001)(43740500002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <05828DCCF03120448F9353D03F7E9600@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 86407f45-255d-4761-d3ec-08d7f2403be1 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 May 2020 04:36:39.0479 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: yzmd+zfzW7QPAhpJ2chxtFgi/g2N+rTgX1d8ZP/Es3PnMmwEvN8VTiijOwRezA3jX7np86tUkFrURK4V8jjha+WNSOm0QUFScd1wCdRHFQs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2332 Archived-At: Subject: Re: [Emu] Working Group Call For adoption of draft-dekok-emu-tls-eap-types X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 May 2020 04:36:44 -0000 Tm8gb2JqZWN0aW9ucyB3ZXJlIHJhaXNlZCBhZ2FpbnN0IGFkb3B0aW9uIG9mIHRoaXMgZG9jdW1l bnQgYXMgYSB3b3JraW5nIA0KZ3JvdXAgaXRlbS4gVGhlIGFkb3B0aW9uIGNhbGwgaXMgbm93IGNs b3NlZC4gQWxhbiwgcGxlYXNlIHN1Ym1pdCB0aGUgDQpkcmFmdCBhcyBhIHdvcmtpbmcgZ3JvdXAg aXRlbS4NCg0KV2Ugc3RpbGwgbmVlZCBjb25zZW5zdXMgb24gVEVBUCBzcGVjaWZpY3MuIFRoZXJl IGFyZSAzIGlzc3VlczoNCg0KMS4gRml4aW5nIFRFQVAgZXJyYXRhOiBodHRwczovL3d3dy5yZmMt ZWRpdG9yLm9yZy9lcnJhdGFfc2VhcmNoLnBocD9yZmM9NzE3MA0KMi4gU3BlY2lmeWluZyBob3cg VEVBUCBzaG91bGQgd29yayB3aXRoIFRMUyAxLjMNCjMuIFRFQVAgdXBkYXRlcyBmb3IgQlJTS0kN Cg0KV2UgYWxyZWFkeSBoYXZlIGEgZHJhZnQgYW5kIGFjdGl2ZSBhdXRob3JzIGZvciAzIA0KKGh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1sZWFyLWVhcC10ZWFwLWJyc2tpLTA1KS4N Cg0KV2UgY2FuIHVzZSB0aGUgdmlydHVhbCBpbnRlcmltIHRvIGRpc2N1c3Mgd2hlcmUgYW5kIGhv dyB0aGUgZmlyc3QgMiANCml0ZW1zIHNob3VsZCBiZSBhZGRyZXNzZWQuDQoNCkpvZSBhbmQgTW9o aXQNCg0KT24gNC8yMC8yMCAxOjUzIEFNLCBNb2hpdCBTZXRoaSBNIHdyb3RlOg0KPiBUaGlzIGlz IGEgY2FsbCBmb3IgYWRvcHRpb24gb2YgZHJhZnQtZGVrb2stZW11LXRscy1lYXAtdHlwZXMNCj4g KGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWRla29rLWVtdS10bHMtZWFw LXR5cGVzLykgYXMgYQ0KPiB3b3JraW5nIGdyb3VwIGl0ZW0uDQo+DQo+IFBsZWFzZSBpbmRpY2F0 ZSBpZiB5b3UgaGF2ZSBhbnkgb2JqZWN0aW9ucyBieSBNYXkgNHRoLCAyMDIwLg0KPg0KPiBKb2Ug YW5kIE1vaGl0DQo+DQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQo+IEVtdSBtYWlsaW5nIGxpc3QNCj4gRW11QGlldGYub3JnDQo+IGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZW11DQo= From nobody Thu May 7 03:45:27 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAA473A0B98; Thu, 7 May 2020 03:45:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ifZmaLg7HK7; Thu, 7 May 2020 03:45:08 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60081.outbound.protection.outlook.com [40.107.6.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EF8D3A0B97; Thu, 7 May 2020 03:45:08 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DwPEBIM6aKd3LoBbz0hZlUmFCPqhQ5bS5T9ssZMziDMs/tptprSZNyfBMJAxR/g0IBqZ8ZNXLm4wkiiTS7kTPr+ABDAVgezdW0mkH/uyVSQYRlapuqxykwFI97VVJXaI/dUOgkyDf8X545otIP1dTz7/RJCWs7pehwB224qNaW5mDRoDuPomP6Rz2e2XFLd3GXxOLFDBNHpFm5904EqryLNfbGgapLTn+IMf7WKZ/W4O3bDkTpXq+GjXTfpiQqG45U7U9XDuqNBNE3xAO2KpmJQomiUYVrWUI6xHnMnZV9OeZwPkoGxGaKZyuAJAruWLDEt1XmzypH8sWTyToFVGeg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FK9bqjfAPyjzOT+4jyLbSx15IwtwK3vwVUbg8bOw5b8=; b=V++y+KRJcrhWBlJs4bNZoZJsT2aqalnwSorF7jGQPNpENXLk2OJmvu3a0Aw9E000j0Y/UxME9J3Kmhn6st+6kuqEFRsjnpMjszC8qSFHyA/bMWeZlQJycLcxOLRqK5kFV88I+8ncV1pPWyyth54jcw1lO7EiW55kD+TVIE30tiUAbC9o9VMZGBqWYucAkF7GukkkldttZQievl2/9WnlQmAjCpgBkfLXahWUyT3x0/e3rFtpr8j8+eOz11cUS0hcUWD6zvFBOwJ12ydzUd5XCorbDUtctdDv/Kgbleo6BfV/QB2cpAB1HVpRyqmsQZ8TR0BuPo2WfNKlBrFQ4oFTZQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FK9bqjfAPyjzOT+4jyLbSx15IwtwK3vwVUbg8bOw5b8=; b=QpGEWw0sv5i9XggeCRLWBQ4PErGD3gC0J3+etjTXjohoF+ds6WaE9tElSJROlUDDolxHnsGqaHSgl3J5YGiOIu2RBw37EVNIxdV00LHwrnjj6VIQnfA/Pdmq1WbfvQijEHdr3XpuBKtIDd/Yur05piNPyVp2qaUmK651pcyXgSI= Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com (2603:10a6:3:99::15) by HE1PR0701MB2186.eurprd07.prod.outlook.com (2603:10a6:3:2b::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2979.22; Thu, 7 May 2020 10:45:05 +0000 Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74]) by HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74%6]) with mapi id 15.20.3000.011; Thu, 7 May 2020 10:45:05 +0000 From: Mohit Sethi M To: "emu@ietf.org" , "lwip@ietf.org" Thread-Topic: Reminder: Survey on planning for possible online IETF meetings Thread-Index: AQHWItMjZslyZlxFcke4VK51h7MYuKicc3sA Date: Thu, 7 May 2020 10:45:05 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 x-forwarded-message-id: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [37.33.8.4] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 98f102fb-fa98-48d5-ac36-08d7f273b46e x-ms-traffictypediagnostic: HE1PR0701MB2186: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 03965EFC76 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB2761.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(366004)(39860400002)(376002)(346002)(396003)(33430700001)(478600001)(2616005)(6486002)(110136005)(31696002)(71200400001)(66946007)(36756003)(66476007)(66556008)(2906002)(66446008)(83300400001)(83290400001)(83320400001)(83280400001)(83310400001)(31686004)(76116006)(64756008)(316002)(166002)(8936002)(6512007)(450100002)(966005)(8676002)(26005)(33440700001)(5660300002)(86362001)(186003)(6506007)(43740500002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_ac7181063630bde7a852dca624a808a5ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 98f102fb-fa98-48d5-ac36-08d7f273b46e X-MS-Exchange-CrossTenant-originalarrivaltime: 07 May 2020 10:45:05.6828 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: /1bpX4gi+NXzv93CPho1JqbdcjEksZ6qZdS4LXUO0iqBXzpVRs6jqYJ8aIbPyDNlmVfdEtSij/qRC40IeUZ2/DwZhbZTnxJyBmQp54n5g5s= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2186 Archived-At: Subject: [Emu] Fwd: Reminder: Survey on planning for possible online IETF meetings X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 May 2020 10:45:11 -0000 --_000_ac7181063630bde7a852dca624a808a5ericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable You have a chance to influence how the upcoming IETF meetings for this year= are organized. Please answer the survey if you haven't already. See the de= tails below. Here is the link for your convenience: https://www.surveymonkey.com/r/5328F= FJ --Mohit Begin forwarded message: From: IETF Executive Director > Subject: Reminder: Survey on planning for possible online IETF meetings Date: May 4, 2020 at 3:03:35 AM EDT To: "IETF Announcement List" > Reply-To: ietf108planning@ietf.org This is a reminder that we need the IETF community to help us plan for the = possibility that one or more upcoming IETF meetings in 2020 and possibly 20= 21 may not be able to go ahead in person. You can help us with this by fil= ling out the following survey: https://www.surveymonkey.com/r/5328FFJ So far we have 114 responses and we would ideally like 500 or more. The survey contains the following pages and will take 15-20 minutes to comp= lete: 1. Welcome 2. Online IETF 107 and the subsequent virtual interims 3. Replacing a cancelled in-person meeting 4. Online meeting format and timezone 5. Replicating humming 6. Replicating the hallway environment 7. Fees 8. Thanks and anything else We run the survey in anonymous mode which means that we only see data that = you explicitly provide. Thank you in advance for your help. -- Alissa Cooper, IETF Chair Jay Daley, IETF Executive Director Colin Perkins, IRTF Chair _______________________________________________ IETF-Announce mailing list IETF-Announce@ietf.org https://www.ietf.org/mailman/listinfo/ietf-announce --_000_ac7181063630bde7a852dca624a808a5ericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <8025F96AC343034AB2A81C249D3B5045@eurprd07.prod.outlook.com> Content-Transfer-Encoding: quoted-printable

You have a chance to influence how the upcoming IETF meetings for this y= ear are organized. Please answer the survey if you haven't already. See the= details below.

Here is the link for your convenience: https://www.surveymonkey.com/r/5328FFJ

--Mohit

Begin forwarded message:

From: IETF Executive Director = <exec-director@ietf.org>
Subject: Reminder: = Survey on planning for possible online IETF meetings
Date: May 4, 2020 at 3:03:35 A= M EDT
To: "IETF Announcement = List" <ietf-announce@ietf.org>
Reply-To: ietf108planning@iet= f.org

This is a reminder that we need the IETF community to help = us plan for the possibility that one or more upcoming IETF meetings in 2020= and possibly 2021 may not be able to go ahead in person.  You can hel= p us with this by filling out the following survey:

https://www.surveymonkey.com/r/5328FFJ

So far we have 114 responses and we would ideally like 500 or more.

The survey contains the following pages and will take 15-20 minutes to comp= lete:

1. Welcome
2. Online IETF 107 and the subsequent virtual interims
3. Replacing a cancelled in-person meeting
4. Online meeting format and timezone
5. Replicating humming
6. Replicating the hallway environment
7. Fees
8. Thanks and anything else

We run the survey in anonymous mode which means that we only see data that = you explicitly provide.

Thank you in advance for your help.

--
Alissa Cooper, IETF Chair
Jay Daley, IETF Executive Director
Colin Perkins, IRTF Chair

_______________________________________________
IETF-Announce mailing list
IETF-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/ietf-announce

--_000_ac7181063630bde7a852dca624a808a5ericssoncom_-- From nobody Fri May 8 20:12:25 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E3493A0365 for ; Fri, 8 May 2020 17:21:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3011OUP_z_h8 for ; Fri, 8 May 2020 17:20:58 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DB923A02C1 for ; Fri, 8 May 2020 17:20:58 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 0490Kg8g029025 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 8 May 2020 20:20:45 -0400 Date: Fri, 8 May 2020 17:20:42 -0700 From: Benjamin Kaduk To: RFC Errata System Cc: hzhou@cisco.com, ncamwing@cisco.com, jsalowey@cisco.com, steve.hanna@infineon.com, rdd@cert.org, joe@salowey.net, mohit.m.sethi@ericsson.com, lear@cisco.com, emu@ietf.org Message-ID: <20200509002042.GZ27494@kduck.mit.edu> References: <20200504102000.851D1F406F5@rfc-editor.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20200504102000.851D1F406F5@rfc-editor.org> User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: X-Mailman-Approved-At: Fri, 08 May 2020 20:12:23 -0700 Subject: Re: [Emu] [Technical Errata Reported] RFC7170 (6157) X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 May 2020 00:21:00 -0000 On Mon, May 04, 2020 at 03:20:00AM -0700, RFC Errata System wrote: > The following errata report has been submitted for RFC7170, > "Tunnel Extensible Authentication Protocol (TEAP) Version 1". > > -------------------------------------- > You may review the report below and at: > https://www.rfc-editor.org/errata/eid6157 > > -------------------------------------- > Type: Technical > Reported by: Eliot Lear > > Section: 4.2.9 > > Original Text > ------------- > Status > > The Status field is one octet. This indicates the result if the > server does not process the action requested by the peer. > > Corrected Text > -------------- > Status > > The Status field is one octet. This indicates the result if the > party who receives this TLV does not process the action. > > Notes > ----- > The status field is carried in the "Request-Action" frame. As is repeatedly stated in the chapeau of the section, the frame can be sent either by the server or the peer. This looks like one where I can't pick up on the needed context just from the section in question. The intent of the 'Status' field still seems unclear: this text seems to suggest that it's a sort of "fallback" error code to use if the request to perform an action is ignored. But that doesn't make much sense if I also look at the text about: Two Request-Action TLVs MUST NOT occur in the same TEAP packet if they have the same Status value. [...] Why am I not allowed to have two requests that would get the same treatment if the request was ignored? Thanks for helping me understand, Ben From nobody Sat May 9 01:43:30 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 83E053A08CB; Sat, 9 May 2020 01:43:29 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.129.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: emu@ietf.org Message-ID: <158901380947.7217.4644140567614066649@ietfa.amsl.com> Date: Sat, 09 May 2020 01:43:29 -0700 Archived-At: Subject: [Emu] I-D Action: draft-ietf-emu-eaptlscert-03.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 May 2020 08:43:30 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the EAP Method Update WG of the IETF. Title : Handling Large Certificates and Long Certificate Chains in TLS-based EAP Methods Authors : Mohit Sethi John Mattsson Sean Turner Filename : draft-ietf-emu-eaptlscert-03.txt Pages : 12 Date : 2020-05-09 Abstract: EAP-TLS and other TLS-based EAP methods are widely deployed and used for network access authentication. Large certificates and long certificate chains combined with authenticators that drop an EAP session after only 40 - 50 round-trips is a major deployment problem. This document looks at the this problem in detail and describes the potential solutions available. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-emu-eaptlscert/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-emu-eaptlscert-03 https://datatracker.ietf.org/doc/html/draft-ietf-emu-eaptlscert-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-emu-eaptlscert-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sat May 9 01:49:03 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF2943A090C for ; Sat, 9 May 2020 01:49:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ZGEsEiwrHCV for ; Sat, 9 May 2020 01:49:00 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80082.outbound.protection.outlook.com [40.107.8.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 604073A08CD for ; Sat, 9 May 2020 01:49:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KEFiOcpxwBcXl7M7S6Z1HW+FB1FuroeLccVtHQGgJ6Eyrq+9HCzwYJCL0QAV22iIP4gUP8g75cFvlP/OeDfQjbV/MpaRpqOdgziPyENJUzOUj0lJ/HQpzT6rTPWcAYzZfW6ntqm3U9bZMFQk/jufFqgRcRzJOTvt+4kzkZK/DAVd5XV3lYaGr7TMncuHXrCcGDM+DEwnCRfEqN/fB7hAiGAg7Em0imLpcWP13gLATr76CigzNg64BzTjm1UMFVcsVftmzAMaMy6JaJidmfIa9clZnABfrtDXWOhGihegUKDhfGTMti6c3NweyFSLnnN6tqzEDJenTbPg2/gvPmLevA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sY94J/me6Y7VfNmD1a+T2P/rTQVFNPSMPo4tHu4fHeE=; b=UBbm20C26tQ4TYUHamfDpQjFvG8yU5XsLp6ont6rZiAh8gqfvmbi+XeeoXXC1gp5tcH+5k9cxqaYoWZy3wOWC5kz31ErlUMulosMH53H91C4fxszaoMvYAMVCS35ZXSEcE9xDO+9iJxLz4SPgB2zQ/0rxcoF9RqOMSBhgjKfoLCbznU1fjps3510Lix3c8F0ISUCf9C6IJiQ7Ch4FD2KNfDm7iXpLX/6HPEMI2dZaHHsYAi2pja36jvlyn15HZkRT/flNker4/ywKDl0smhsKoxW6ZXo9XwHlK3pm3RXw31i+z1o2MSeqjh8PKBU7YctVMtRL4dASImpoTgZJ4dlNQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sY94J/me6Y7VfNmD1a+T2P/rTQVFNPSMPo4tHu4fHeE=; b=UsUbUF/qxWmL0sKmUnsuNZRmWEOrj29sNSqOGiTC/tC0WmFjnOnh9WGxP4rjzLIhulKzk0VcY65Y22ysBueOGPCxhmwzMgF7RAFmJ4ww30AzuAwtF842SQvXlv+qni2UIlIYQ4pw3yp1gG9r1yyjt7y4ukFMwwJ/m7cBQWN+w1E= Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com (2603:10a6:3:99::15) by HE1PR0701MB2265.eurprd07.prod.outlook.com (2603:10a6:3:20::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2979.16; Sat, 9 May 2020 08:48:56 +0000 Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74]) by HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74%6]) with mapi id 15.20.3000.015; Sat, 9 May 2020 08:48:56 +0000 From: Mohit Sethi M To: Hannes Tschofenig , Michael Richardson , "emu@ietf.org" Thread-Topic: [Emu] My review ... was RE: I-D Action: draft-ietf-emu-eaptlscert-02.txt Thread-Index: AQHWJd6sewrKoRh7dEOMQf3xkb8SvA== Date: Sat, 9 May 2020 08:48:56 +0000 Message-ID: <0c843ca8-8bfc-8bf6-2cb2-a8517359842f@ericsson.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 authentication-results: arm.com; dkim=none (message not signed) header.d=none;arm.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [37.33.8.4] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 722e14bc-7cf5-4489-8f78-08d7f3f5cf10 x-ms-traffictypediagnostic: HE1PR0701MB2265: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 03982FDC1D x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB2761.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(396003)(346002)(376002)(39860400002)(136003)(33430700001)(186003)(86362001)(316002)(110136005)(26005)(66946007)(76116006)(66446008)(64756008)(66556008)(66476007)(71200400001)(36756003)(33440700001)(5660300002)(966005)(31696002)(478600001)(6512007)(6486002)(8936002)(31686004)(8676002)(53546011)(6506007)(2616005)(2906002)(43740500002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: yXSvzW69L+I3giNL9bN3z5Xr25dUv/F5HxS02rNHC1J7MkV3liYCmOsfYYQIJso0ajb4dgsYygI4Ty8Vpzq7mQ1/APYhRhytCAbJk2VnFIm4vt7mmYMCstjuUKhe7Gc4q2GRh+5yp7OpvkXp2N6BDnSnCFF/m8lCoaelovgMYV+lFi2f1/MFYmeao/hJZwXBovRpzHf6IPgt7yeFj0+6z0rqVunG2ttSsQVDRvL3mAHlW64b7LIRETwqiB6TGkRxURgcSLfhKNZokiM7hfrCNM7OdoRCdfpd1xhhjNmwJmcgypekiMMvJK1s/WAfAyHo3S+IcHITvo9R2VzPZ8sw70kCez8kXdDm5VdAScIZuFVujOb0uhWPtjSVBa/kWHczd4cSvOHzb2lVo6KlfObzLOeNCocZjjM9jvrW+gRBOCb088CMewbK/1SqzZ4yUUUFH0LGeJMhnCuGVmUG1yLcBpxNcSdqcr4p++VTNgfY0Rc= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <3B1A4D08A88442438029BCCB2CC9B2FB@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 722e14bc-7cf5-4489-8f78-08d7f3f5cf10 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 May 2020 08:48:56.1411 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 5Kbhsz4jBfijSNXyZ8r8SbKv316VIhwfG6alw4TYh8AMdf50CdCgIhf0oSgwGF9o66p6pMX39n0IdkRg6B2v5/AP3cAY84TuWpaYuqlUGJY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2265 Archived-At: Subject: Re: [Emu] My review ... was RE: I-D Action: draft-ietf-emu-eaptlscert-02.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 May 2020 08:49:03 -0000 SGkgSGFubmVzLA0KDQpJIGhhdmUgc3VibWl0dGVkIGEgbmV3IHZlcnNpb24gb2YgdGhlIGRyYWZ0 IHdoaWNoIEkgYmVsaWV2ZSBhZGRyZXNzZXMgDQp5b3VyIGNvbmNlcm5zLiBIZXJlIGlzIGEgZGlm ZiBmb3IgeW91ciBjb252ZW5pZW5jZTogDQpodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3Vy bDI9ZHJhZnQtaWV0Zi1lbXUtZWFwdGxzY2VydC0wMw0KDQpXaGlsZSBBbGFuIGFuZCBKb3VuaSBo YXZlIGFscmVhZHkgcHJvdmlkZWQgZXhjZWxsZW50IGFuc3dlcnMgdG8gbW9zdCBvZiANCnlvdXIg Y29tbWVudHMsIGluLWxpbmUgeW91IGNhbiBmaW5kIGEgZmV3IG1vcmUgY2xhcmlmaWNhdGlvbnMg Zm9yIHRoZSANCmNoYW5nZXMgSSBtYWRlLg0KDQotLU1vaGl0DQoNCk9uIDMvMjQvMjAgMTA6MDAg QU0sIEhhbm5lcyBUc2Nob2ZlbmlnIHdyb3RlOg0KPiBIaSBNaWNoYWVsLCBIaSBkcmFmdCBhdXRo b3JzLA0KPg0KPj4gSSB3YXMgc3VycHJpc2VkIHRvIGdldCB0byB0aGUgZW5kIG9mIHRoZSBkb2N1 bWVudCB3aXRob3V0IGFueSBzdWdnZXN0aW9ucyBhYm91dCBzZW5kaW5nIGNlcnRpZmljYXRlcyBi eSByZWZlcmVuY2UgcmF0aGVyIHRoYW4gdmFsdWUuDQo+IEhhdmluZyBzZWVuIHRoaXMgc3RhdGVt ZW50IGZyb20gTWljaGFlbCBJIGhhdmUgcmV2aWV3ZWQgdGhlIGRvY3VtZW50LiBUd28gZ2VuZXJp YyBvYnNlcnZhdGlvbnMgYWJvdXQgdGhlIGRyYWZ0Og0KPg0KPiAxKSBNYW55IHN0YXRlbWVudHMg YXJlIG1hZGUgYWJvdXQgZGVwbG95bWVudHMgYW5kIG5vIHJlZmVyZW5jZXMgYXJlIHByb3ZpZGVk LiBUbyBpbXByb3ZlIHF1YWxpdHkgb2YgdGhlIHdyaXRlLXVwIEkgd291bGQgc3Ryb25nbHkgc3Vn Z2VzdCB0byBhZGQgc3VjaCByZWZlcmVuY2VzLCBhcyB5b3Ugd291bGQgaGF2ZSB0byBkbyB3aXRo IGFuIGFjYWRlbWljIHB1YmxpY2F0aW9uIGFzIHdlbGwuDQo+DQo+IDIpIEEgZmV3IHRlY2huaXF1 ZXMgYXJlIG1pc3NpbmcgKENlcnRpZmljYXRlIFVSTHMgYW5kIGNUTFMpIGFuZCBUTFMgQ2FjaGVk IEluZm8gd2FzIHdyb25nbHkgaW50ZXJwcmV0ZWQuICBUaGV5IGFjdHVhbGx5IHJlbGF0ZSB0byB0 aGUgcmVtYXJrIGZyb20gTWljaGFlbC4NCj4NCj4+IFRMUyBjZXJ0aWZpY2F0ZXMgYXJlIG9mdGVu IHJlbGF0aXZlbHkgbGFyZ2UsIGFuZCB0aGUgY2VydGlmaWNhdGUNCj4+ICAgIGNoYWlucyBhcmUg b2Z0ZW4gbG9uZy4NCj4gSSB0aGluayB0aGlzIHN0YXRlbWVudCBpcyBpbiBnZW5lcmFsIGluY29y cmVjdC4gWW91IGNvdWxkIHNheSB0aGF0IGluIGRlcGxveW1lbnQgWCBjZXJ0aWZpY2F0ZXMgaGF2 ZSBzaXplIFggYW5kIHRoZSBjaGFpbiBpcyBZIGxvbmcuDQo+DQo+DQo+PiBBbHNvLA0KPj4gICBm cm9tIGRlcGxveW1lbnQgZXhwZXJpZW5jZSwgRUFQIHBlZXJzIHR5cGljYWxseSBoYXZlIGxvbmdl cg0KPj4gICAgY2VydGlmaWNhdGUgY2hhaW5zIHRoYW4gc2VydmVycy4NCj4gSSB3b3VsZCBsaWtl IGEgcmVmZXJlbmNlIHRvIGJlIGluY2x1ZGVkIGhlcmUuIFRoZW9yZXRpY2FsbHksIGl0IG1ha2Vz IG5vIHNlbnNlIHRvDQo+IGhhdmUgYSBjZXJ0aWZpY2F0ZSBjaGFpbiBmb3IgYW4gRUFQIHBlZXIg dG8gaGF2ZSBhIGxvbmdlciBjZXJ0aWZpY2F0ZSBjaGFpbiB0aGFuIGEgc2VydmVyDQo+IGdpdmVu IGEgRUFQIHBlZXIgdGFsa3MgdG8gb25lIEVBUCBzZXJ2ZXIuDQo+DQo+IEluIG5ldHdvcmsgYWNj ZXNzIGF1dGhlbnRpY2F0aW9uIGl0IGlzIG5vdCBvbmx5IGFib3V0IGF1dGhlbnRpY2F0aW9uIGJ1 dCB0aGUgbW9zdCBpbXBvcnRhbnQgcGFydCBpcyBhdXRob3JpemF0aW9uLiBIZW5jZSwgeW91IHBy ZXR0eSBtdWNoIGFsd2F5cyBoYXZlIGEgb25lLXRvLW9uZSByZWxhdGlvbnNoaXAgYmV0d2VlbiB0 aGUgRUFQIHBlZXIgYW5kIHRoZSBFQVAgc2VydmVyLiBUaGVyZSBhcmUgbm8gZ29vZCByZWFzb25z IHRvIGhhdmUgY29tcGxleCBDQSBoaWVyYXJjaGllcyBoZXJlLg0KPg0KPj4gVGhpcyBpcyBiZWNh dXNlIEVBUCBwZWVycyBvZnRlbg0KPj4gICBmb2xsb3cgb3JnYW5pemF0aW9uYWwgaGllcmFyY2hp ZXMgYW5kIHRlbmQgdG8gaGF2ZSBtYW55IGludGVybWVkaWF0ZQ0KPj4gICAgY2VydGlmaWNhdGVz LiAgVGh1cywgRUFQLVRMUyBhdXRoZW50aWNhdGlvbiB1c3VhbGx5IGludm9sdmUNCj4+ICAgIHNp Z25pZmljYW50bHkgbW9yZSBvY3RldHMgdGhhbiB3aGVuIFRMUyBpcyB1c2VkIGFzIHBhcnQgb2Yg SFRUUFMuDQo+IEkgdGhpbmsgaXQgd291bGQgbWFrZSBzZW5zZSB0byBleHBsYWluIHRoaXMgb3Jn YW5pemF0aW9uYWwgaGllcmFyY2h5IGFzcGVjdCBpbiBhIGJpdA0KPiBtb3JlIGRldGFpbC4NCj4N Cj4+IFRoZSBFQVAgZnJhZ21lbnQgc2l6ZQ0KPj4gICBpbiB0eXBpY2FsIGRlcGxveW1lbnRzIGlz IGp1c3QgMTAyMCAtIDE1MDAgb2N0ZXRzLg0KPiBSZWZlcmVuY2UgZm9yIHRoZSAxNTAwIG9jdGV0 cy4NCkFkZGVkIHRoYXQgdGhpcyBsaW1pdGF0aW9uIGNvbWUgZnJvbSBFdGhlcm5ldCBJSSBmcmFt ZSBzaXplLg0KPg0KPg0KPj4gRm9yIGV4YW1wbGUsIG1hbnkgRUFQIGF1dGhlbnRpY2F0b3IgKGFj Y2VzcyBwb2ludCkNCj4+ICAgaW1wbGVtZW50YXRpb25zIHdpbGwgZHJvcCBhbiBFQVAgc2Vzc2lv biBpZiBpdCBoYXMgbm90IGZpbmlzaGVkIGFmdGVyDQo+PiAgICA0MCAtIDUwIHJvdW5kLXRyaXBz Lg0KPiBJcyB0aGVyZSBhIHJlZmVyZW5jZSB0aGF0IGNvdWxkIGJlIGluY2x1ZGVkPw0KPg0KPj4g SG93ZXZlciwgZGVwbG95bWVudA0KPj4gICAgZXhwZXJpZW5jZSBoYXMgc2hvd24gdGhhdCB0aGVz ZSBqdW1ibyBmcmFtZXMgYXJlIG5vdCBhbHdheXMNCj4+ICAgaW1wbGVtZW50ZWQgY29ycmVjdGx5 Lg0KPiBBZGQgYSByZWZlcmVuY2UgaGVyZS4NCj4NCj4+IFJBRElVUyBjYW4gZ2VuZXJhbGx5IHRy YW5zcG9ydCBvbmx5IGFib3V0IDQwMDANCj4+ICAgb2N0ZXRzIG9mIEVBUCBpbiBhIHNpbmdsZSBt ZXNzYWdlLg0KPiBIb3cgd2FzIHRoaXMgbnVtYmVyIGNvbnN0cnVjdGVkPw0KQWRkZWQgdGhhdCBS QURJVVMgUkZDMjg2NSBsaW1pdHMgbGVuZ3RoIHRvIDQwOTYgb2N0ZXRzLg0KPg0KPj4gICAgQSBj ZXJ0aWZpY2F0ZSBjaGFpbiAoY2FsbGVkIGEgY2VydGlmaWNhdGlvbiBwYXRoIGluIFtSRkM1Mjgw XSkgY2FuDQo+PiAgICBoYXZlIDIgLSA2IGludGVybWVkaWF0ZSBjZXJ0aWZpY2F0ZXMgYmV0d2Vl biB0aGUgZW5kLWVudGl0eQ0KPj4gICAgY2VydGlmaWNhdGUgYW5kIHRoZSB0cnVzdCBhbmNob3Ig W1JGQzUyODBdLg0KPiBUaGUgUEtJWCByZWZlcmVuY2UgaGVyZSBpcyBtaXNsZWFkaW5nLiBJIHRo aW5rIHlvdSBpbmNsdWRlZCBpdCB0byByZWZlciB0byB0aGUgdGVybXMgYnV0IGl0IHNvdW5kcyBs aWtlIHRoZSBzdGF0ZW1lbnQgdGhhdA0KPiB0aGUgY2hhaW4gY2FuIGhhdmUgMi02IGludGVybWVk aWF0ZSBDQSBjZXJ0aWZpY2F0ZXMuDQo+DQo+IEkgd291bGQgYWRkIHRoZSB0ZXJtcyB0byB0aGUg dGVybWlub2xvZ3kgc2VjdGlvbiBhbmQgcmVtb3ZlIHRoZSBQS0lYIHJlZmVyZW5jZSBoZXJlLg0K RG9uZS4gVGhhbmtzLiBJbmRlZWQgdGhhdCB3YXMgbWlzbGVhZGluZy4NCj4NCj4gSSBhbSBhbHNv IHdvbmRlcmluZyB3aGF0IHlvdSBhcmUgdHJ5aW5nIHRvIHNheSBoZXJlIHdpdGggdGhpcyBzZW50 ZW5jZS4gQXJlIHlvdSBzYXlpbmcgdGhhdCB5b3UgaGF2ZSBzZWVuIGRlcGxveW1lbnRzDQo+IGZv ciBuZXR3b3JrIGFjY2VzcyBhdXRoZW50aWNhdGlvbiB0aGF0IGhhdmUgdXAgdG8gNiBpbnRlcm1l ZGlhdGUgQ0EgY2VydGlmaWNhdGVzIGluIHRoZSBjaGFpbj8NCj4NCj4NCj4+IDMuICBFeHBlcmll bmNlIHdpdGggRGVwbG95bWVudHMNCj4+ICAgIE1vc3QgY29tbW9uIGFjY2VzcyBwb2ludCBpbXBs ZW1lbnRhdGlvbnMgZHJvcCBFQVAgc2Vzc2lvbnMgdGhhdCBkbw0KPj4gICAgbm90IGNvbXBsZXRl IHdpdGhpbiA1MCByb3VuZC10cmlwcy4NCj4gVGhpcyBzZW50ZW5jZSBpcyBhIHJlcGV0aXRpb24u DQo+DQo+PiBUaGlzIG1lYW5zIHRoYXQgaWYgdGhlIGNoYWluIGlzDQo+PiAgIGxhcmdlciB0aGFu IH4gNjAga0IsIEVBUC1UTFMgYXV0aGVudGljYXRpb24gY2Fubm90IGNvbXBsZXRlDQo+PiAgIHN1 Y2Nlc3NmdWxseSBpbiBtb3N0IGRlcGxveW1lbnRzLg0KPiBSZWdhcmRpbmcgdGhlIDYwIGtCIGNl cnRpZmljYXRlIGNoYWluOiBTaG91bGQgdGhpcyBiZSBhbiBpbmRpY2F0aW9uIHRvIHNvbWVvbmUg ZGVwbG95aW5nDQo+IHRoZSB0ZWNobm9sb2d5IGZvciBhY2Nlc3MgbmV0d29yayBhdXRoZW50aWNh dGlvbiB0aGF0IHNvbWV0aGluZyBoYXMgZ29uZSB3cm9uZz8NCj4NCj4gSXMgdGhpcyBzb21lb25l IHlvdSBoYXZlIG9ic2VydmVkIG9yIGlzIHRoaXMganVzdCBhIHRoZW9yZXRpY2FsIHN0YXRlbWVu dD8gSSBob3BlIGl0IGlzIHRoZSBsYXR0ZXIuDQo+DQo+DQo+IDQuMi4xLiAgUHJlLWRpc3RyaWJ1 dGluZyBhbmQgT21pdHRpbmcgQ0EgQ2VydGlmaWNhdGVzDQo+DQo+DQo+PiBXaGVuIHVzaW5nIFRM UyAxLjMsIGFsbCBjZXJ0aWZpY2F0ZXMgdGhhdA0KPj4gc3BlY2lmeSBhIHRydXN0IGFuY2hvciBr bm93biBieSB0aGUgb3RoZXIgZW5kcG9pbnQgbWF5IGJlIG9taXR0ZWQNCj4+IChzZWUgU2VjdGlv biA0LjQuMiBvZiBbUkZDODQ0Nl0pLiAgV2hlbiB1c2luZyBUTFMgMS4yIG9yIGVhcmxpZXIsDQo+ PiBvbmx5IHRoZSBzZWxmLXNpZ25lZCBjZXJ0aWZpY2F0ZSB0aGF0IHNwZWNpZmllcyB0aGUgcm9v dCBjZXJ0aWZpY2F0ZQ0KPj4gYXV0aG9yaXR5IG1heSBiZSBvbWl0dGVkIChzZWUgU2VjdGlvbiA3 LjQuMiBvZiBbUkZDNTI0Nl0NCj4gVGhlc2Ugc2VudGVuY2VzIHNvdW5kIHN0cmFuZ2UuDQo+DQo+ IEluIFRMUyAoYW5kIHByb2JhYmx5IG90aGVyIHByb3RvY29scykgaXQgbWFrZXMgbm8gc2Vuc2Ug dG8gZGlzdHJpYnV0ZSB0aGUNCj4gdHJ1c3QgYW5jaG9ycyBpbiB0aGUgcHJvdG9jb2wgaXRzZWxm IChiZWNhdXNlIHRoZW4gdGhleSB3b3VsZG4ndCBzZXJ2ZSBhcyBhbg0KPiBhbmNob3IgZm9yIHRy dXN0KS4NCj4NCj4gSXQgaXMgbXkgdW5kZXJzdGFuZGluZyB0aGF0IHRoZSBUTFMgMS4zIHNwZWMg ZG9lcyBub3QgcmVxdWlyZSB5b3UNCj4gdG8gc2VuZCBpbnRlcm1lZGlhdGUgQ0EgY2VydGlmaWNh dGVzIGlmIHRoZXkgaGF2ZSBiZWVuIHByb3Zpc2lvbmVkIHRvIHRoZSBwZWVyDQo+IG91dC1vZi1i YW5kIGFscmVhZHkuIFRoZSB0ZXh0IGluIHRoZSBUTFMgMS4yIHNwZWMgaXMgYSBiaXQgZnV6enkg YW5kIGNhbGxzIG91dCB0aGF0IHRoZQ0KPiBzZWxmLXNpZ25lZCByb290IGNlcnRpZmljYXRlIE1B WSBiZSBvbWl0dGVkIGJ1dCBpdCBkb2VzIG5vdCBzYXkgYW55dGhpbmcgYWJvdXQgb21pdHRpbmcN Cj4gdGhlIG90aGVyIGNlcnRzLg0KUkZDODQ0NiBzYXlzIGluIFNlY3Rpb24gNC40LjIgImEgY2Vy dGlmaWNhdGUgdGhhdCBzcGVjaWZpZXMgYSB0cnVzdCANCmFuY2hvciBNQVkgYmUgb21pdHRlZCBm cm9tIHRoZSBjaGFpbiwgcHJvdmlkZWQgdGhhdCBzdXBwb3J0ZWQgcGVlcnMgYXJlIA0Ka25vd24g dG8gcG9zc2VzcyBhbnkgb21pdHRlZCBjZXJ0aWZpY2F0ZXMuIi4gV2Ugd3JpdGUgImFsbCBjZXJ0 aWZpY2F0ZXMgDQp0aGF0IHNwZWNpZnkgYSB0cnVzdCBhbmNob3Iga25vd24gYnkgdGhlIG90aGVy IGVuZHBvaW50IG1heSBiZSBvbWl0dGVkIi4gDQpQbGVhc2UgbGV0IHVzIGtub3cgaWYgeW91IGhh dmUgc3VnZ2VzdGlvbnMgZm9yIGltcHJvdmluZyB0aGUgdGV4dC4NCj4NCj4+IDQuMi4yLiAgQ2Fj aGluZyBDZXJ0aWZpY2F0ZXMNCj4gVGhlcmUgc2VlbXMgdG8gYmUgdGhlIG1pc2NvbmNlcHRpb24g dGhhdCBUTFMgQ2FjaGVkIEluZm8gcmVxdWlyZXMgYSBmdWxsIGV4Y2hhbmdlIHRvIHdvcmsuDQo+ IEl0IGlzIHRoZSBvdGhlciB3YXkgYXJvdW5kOiAgSWYgeW91IHByZS1kaXN0cmlidXRlIGNlcnRp ZmljYXRlcyB1cGZyb250IHRoZW4gdGhlcmUgaXMgbm8gbmVlZA0KPiB0byBleGNoYW5nZSB0aGUg Y2VydHMgYWdhaW4uIFlvdSBjb3VsZCBqdXN0IHNlbmQgdGhlIGZpbmdlcnByaW50cyByaWdodCBh d2F5Lg0KPg0KPiBBIHNwZWMsIGhvd2V2ZXIsIGhhcyB0byBhbHNvIGNvdmVyIHRoZSBib290c3Ry YXBwaW5nIHByb2JsZW0uDQoNCldoZXJlIGRvZXMgUkZDIDc5MjQgc2F5IHRoaXM/IFRoZSB0ZXh0 IGluIHRoZSBSRkMgY2xlYXJseSBzdGF0ZXMgdGhhdDogDQoiVGhpcyBzcGVjaWZpY2F0aW9uIGRl ZmluZXMgYSBUTFMgZXh0ZW5zaW9uIHRoYXQgYWxsb3dzIGEgY2xpZW50IGFuZCBhIA0Kc2VydmVy IHRvIGV4Y2x1ZGUgdHJhbnNtaXNzaW9uIGluZm9ybWF0aW9uIGNhY2hlZCBpbiBhbiBlYXJsaWVy IFRMUyANCmhhbmRzaGFrZS4iLiBOb3RpY2UgdGhlICJlYXJsaWVyIFRMUyBoYW5kc2hha2UiIHBh cnQuIFdlIGRpc2N1c3NlZCBhdCANCklFVEYgMTAyIHdoZXRoZXIgd2UgYWxsb3cgY2FjaGluZyBv ZiB2YWxpZGF0ZWQgY2VydGlmaWNhdGUgY2hhaW4gZXZlbiBpZiANCkVBUC1UTFMgYXV0aGVudGlj YXRpb24gZmFpbHMuIFNlZSBzbGlkZSA1OiANCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv bWVldGluZy8xMDIvbWF0ZXJpYWxzL3NsaWRlcy0xMDItZW11LWxhcmdlLWNlcnRpZmljYXRlcy1p bi1lYXAtdGxzLTAwLiANClRoZSBjb25zZW5zdXMgd2FzIG5vdCB0byBkbyB0aGF0Lg0KDQo+DQo+ PiA0LjIuNS4gIFVzaW5nIEZld2VyIEludGVybWVkaWF0ZSBDZXJ0aWZpY2F0ZXMNCj4+ICAgIFRo ZSBFQVAgcGVlciBjZXJ0aWZpY2F0ZSBjaGFpbiBkb2VzIG5vdCBoYXZlIHRvIG1pcnJvciB0aGUN Cj4+ICAgIG9yZ2FuaXphdGlvbmFsIGhpZXJhcmNoeS4gIEZvciBzdWNjZXNzZnVsIEVBUC1UTFMg YXV0aGVudGljYXRpb24sDQo+PiAgICBjZXJ0aWZpY2F0ZSBjaGFpbnMgc2hvdWxkIG5vdCBjb250 YWluIG1vcmUgdGhhbiAyLTQgaW50ZXJtZWRpYXRlDQo+PiAgICBjZXJ0aWZpY2F0ZXMuDQo+IEkg d291bGQgbWFrZSBhIHN0cm9uZ2VyIHN0YXRlbWVudCBoZXJlLiBUaGVyZSBpcyBhYnNvbHV0ZWx5 IG5vIHJlYXNvbiBmb3IgdGhlIGNlcnRpZmljYXRlDQo+IGNoYWluIHRvIG1pcnJvciB0aGUgb3Jn YW5pemF0aW9uYWwgc3RydWN0dXJlLg0KPg0KPiBJIGFsc28gZG9uJ3QgdW5kZXJzdGFuZCB3aHkg eW91IHdvdWxkIG5lZWQgYSBoaWVyYXJjaHkgb2YgNCBpbnRlcm1lZGlhdGUgQ0FzLg0KPg0KPiBG aW5hbGx5LCBhdCB0aGUgZW5kOiBXaHkgZGlkIHlvdSBvbWl0DQo+IC0gQ2xpZW50IENlcnRpZmlj YXRlIFVSTHMgLSBSRkMgNjA2NiksIHdoaWNoIGlzIGFsc28gcmVmZXJlbmNlZCBpbiBSRkMgNzky NSBhbmQNCj4gLSBjVExTICh3aGljaCBhbHNvIGhhcyBhIGNlcnRpZmljYXRlIGNvbXByZXNzaW9u IHNjaGVtZSBpbmNsdWRlZCkuDQpBZGRlZCBhIHNlY3Rpb24gb24gYm90aC4gV2hpbGUgSSB3YXMg YXdhcmUgb2YgdGhlIGNUTFMgd29yaywgSSBoYWQgDQpjb21wbGV0ZWx5IG1pc3NlZCBSRkM2MDY2 LiBSZXZpZXdzIGZyb20gZXhwZXJpZW5jZWQgcGVvcGxlIGxpa2UgeW91IA0KZW5zdXJlIHRoYXQg d2UgZG9uJ3QgbWlzcyBpbXBvcnRhbnQgZXhpc3Rpbmcgd29yay4NCj4NCj4gVGhlb3JldGljYWxs eSwgeW91IGNvdWxkIGV2ZW4gbGlzdCB0aGUgYWJpbGl0eSB0byB1c2UgYWx0ZXJuYXRpdmUgY2Vy dGlmaWNhdGUgZm9ybWF0IGhlcmUuIFRoZW4sIHlvdSBjb3VsZCBsaXN0IHJhdyBwdWJsaWMga2V5 cyBvciB0aGUgQ1dUIGV4dGVuc2lvbi4NCkkgdGhpbmsgdGl0IGlzIGJldHRlciB0byBsZWF2ZSB0 aGVzZSBmb3IgYSBzZXBhcmF0ZSBkb2N1bWVudC4NCj4NCj4gQ2lhbw0KPiBIYW5uZXMNCj4NCj4g UFM6IEl0IGlzIGdvb2QgdG8gc2VlIEpvaG4ncyBuYW1lIG9uIGEgZG9jdW1lbnQgdGhhdCB0YWxr cyBhYm91dCBUTFMuDQoNCkhlIGlzIGFsc28gYW4gYXV0aG9yIG9mIEVBUC1UTFMxMyBhbmQgRUFQ LVRMUy1QU0suIEkgY2VydGFpbmx5IGhvcGUgdGhhdCANCnRoZSBiYXR0bGVzIGZvciBhIGxpZ2h0 d2VpZ2h0IGF1dGhlbnRpY2F0ZWQga2V5IGV4Y2hhbmdlIChsYWtlKSBzdGF5IA0KdGhlcmUgYW5k IGRvbid0IGFmZmVjdCB0aGUgd29yayBvZiBvdGhlciBncm91cHMuDQoNCi0tTW9oaXQNCg0KPiBJ TVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFj aG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlv dSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRl ciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3Ro ZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBp bmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo+DQo+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IEVtdSBtYWlsaW5nIGxpc3QNCj4g RW11QGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZW11 DQo= From nobody Wed May 13 13:26:10 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4CC63A08EF for ; Wed, 13 May 2020 13:26:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qIVc-OaKnloi for ; Wed, 13 May 2020 13:26:06 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EB713A08EC for ; Wed, 13 May 2020 13:26:06 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 04DKQ3lE032107 for ; Wed, 13 May 2020 16:26:03 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu 04DKQ3lE032107 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1589401563; bh=epfS8o+85cAkgHv+Zif+GQCp6Z3DtEv86OEqeuIcoYs=; h=From:To:Subject:Date:From; b=J3arcLPT+HCx5t8RQ5V4XWsRxLmtxQfjIj6ky0HHfhrj6BMWAY9Lezfz+xRjY0I6+ qvDoB06d0BIzOUkAI43CGfG1l+28dCB3AmD//sCANVtBb9I3xZjZxsgJdiJFQ+2gw6 1OH8a/561xvi+pP94bDYmO+36IZIKSQiqzTS6tic= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 04DKPo8k017722 for ; Wed, 13 May 2020 16:25:55 -0400 Received: from MURIEL.ad.sei.cmu.edu (147.72.252.47) by CASSINA.ad.sei.cmu.edu (10.64.28.249) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 13 May 2020 16:25:49 -0400 Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by MURIEL.ad.sei.cmu.edu (147.72.252.47) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1847.3; Wed, 13 May 2020 16:25:49 -0400 Received: from MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb]) by MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb%22]) with mapi id 15.01.1847.007; Wed, 13 May 2020 16:25:49 -0400 From: Roman Danyliw To: "emu@ietf.org" Thread-Topic: AD Review of draft-ietf-emu-eap-session-id-02 Thread-Index: AdYpZHLD5jVuxVmPSSWjhtLxHLXvjg== Date: Wed, 13 May 2020 20:25:49 +0000 Message-ID: <644056d44c184bc4bac07286519e0847@cert.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.202.241] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Emu] AD Review of draft-ietf-emu-eap-session-id-02 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2020 20:26:09 -0000 Hi! I conducted my AD review of draft-ietf-emu-eap-session-id-02. The document= is in good shape. I have largely editorial feedback below that can be han= dled with IETF LC input. (1) Section 1. Editorial. COMMENTs often come up in IESG review the it is= n't clear up front what exactly is being updated. I recommend something li= ke ... OLD We correct that deficiency here. NEW We correct these deficiencies here by updating [RFC5247] with the Session-I= d derivation during fast-authentication exchange for EAP-SIM and EAP-AKA; a= nd defining Session-Id derivation for PEAP. (2) Section 1. Editorial. Per ..., it would be important to get this resol= ved with a clearly defined and agreed derivation rules to allow fast re- au= thentication cases to be used to derive ERP key hierarchy", I'm not sure th= is additional explanation is needed and this is a run-on sentence from the = previous text. (3) Section 2.2. Editorial. OLD Similarly for EAP-SIM, it says: NEW Similarly, for EAP-SIM, [RFC5247] Appendix A says: (4) Section 2.2. Editorial. Why not the explicit symmetry in language in = EAP-SIM as was used in EAP AKA? OLD EAP-SIM is defined in [RFC4186]. The EAP-SIM Session-Id is the ... NEW EAP-SIM is defined in [RFC4186]. When using full authentication, the EAP-S= IM Session-Id is the ... (5) Section 2.2. Recommend defining RAND1, RAND2 and RAND3 explicitly sinc= e RFC4186 only has it in the test vector section. Perhaps something like: "RAND1, RAND2 and RAND3 correspond to the RAND value from the first, second= and third GSM triplet respectively." (6) Section 3. It would be useful to describe the prior work in Security C= onsiderations. Specifically, "These updates to not modify the Security Con= siderations outlined in RFC5247." Regards, Roman From nobody Wed May 13 13:37:08 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 46FF83A07CA; Wed, 13 May 2020 13:37:06 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.130.0 Auto-Submitted: auto-generated Precedence: bulk CC: draft-ietf-emu-eap-session-id@ietf.org, emu@ietf.org, Mohit Sethi , mohit.m.sethi@ericsson.com, rdd@cert.org, emu-chairs@ietf.org Reply-To: last-call@ietf.org Sender: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <158940222615.28069.6265525421505810512@ietfa.amsl.com> Date: Wed, 13 May 2020 13:37:06 -0700 Archived-At: Subject: [Emu] Last Call: (EAP Session-Id Derivation for EAP-SIM, EAP-AKA, and PEAP) to Proposed Standard X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2020 20:37:06 -0000 The IESG has received a request from the EAP Method Update WG (emu) to consider the following document: - 'EAP Session-Id Derivation for EAP-SIM, EAP-AKA, and PEAP' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the last-call@ietf.org mailing lists by 2020-05-27. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract EAP Session-Id derivation has not been defined for EAP-SIM or EAP-AKA when using the fast re-authentication exchange instead of full authentication. This document updates RFC 5247 to define those derivations for EAP-SIM and EAP-AKA. RFC 5247 also does not define Session-Id derivation for PEAP. A definition is given here which follows the definition for other TLS-based EAP methods. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-emu-eap-session-id/ No IPR declarations have been submitted directly on this I-D. From nobody Wed May 13 14:12:30 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D1D93A0929 for ; Wed, 13 May 2020 14:12:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GWNxbw9Oc9Or for ; Wed, 13 May 2020 14:12:27 -0700 (PDT) Received: from mail.networkradius.com (mail.networkradius.com [62.210.147.122]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E10F33A0927 for ; Wed, 13 May 2020 14:12:26 -0700 (PDT) Received: from [192.168.46.130] (24-52-251-6.cable.teksavvy.com [24.52.251.6]) by mail.networkradius.com (Postfix) with ESMTPSA id 448ED8BF; Wed, 13 May 2020 21:12:24 +0000 (UTC) Authentication-Results: NetworkRADIUS; dmarc=none (p=none dis=none) header.from=deployingradius.com Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) From: Alan DeKok In-Reply-To: <644056d44c184bc4bac07286519e0847@cert.org> Date: Wed, 13 May 2020 17:12:22 -0400 Cc: "emu@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <6F05E49D-B181-495F-AFC3-55A73844F01F@deployingradius.com> References: <644056d44c184bc4bac07286519e0847@cert.org> To: Roman Danyliw X-Mailer: Apple Mail (2.3608.80.23.2.2) Archived-At: Subject: Re: [Emu] AD Review of draft-ietf-emu-eap-session-id-02 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2020 21:12:29 -0000 On May 13, 2020, at 4:25 PM, Roman Danyliw wrote: >=20 > Hi! >=20 > I conducted my AD review of draft-ietf-emu-eap-session-id-02. The = document is in good shape. I have largely editorial feedback below that = can be handled with IETF LC input. >=20 > (1) Section 1. Editorial. COMMENTs often come up in IESG review the = it isn't clear up front what exactly is being updated. I recommend = something like ... >=20 > OLD > We correct that deficiency here. > NEW > We correct these deficiencies here by updating [RFC5247] with the = Session-Id derivation during fast-authentication exchange for EAP-SIM = and EAP-AKA; and defining Session-Id derivation for PEAP. Fixed. > (2) Section 1. Editorial. Per ..., it would be important to get this = resolved with a clearly defined and agreed derivation rules to allow = fast re- authentication cases to be used to derive ERP key hierarchy", = I'm not sure this additional explanation is needed and this is a run-on = sentence from the previous text. How about: The IEEE is defining FILS authentication [FILS], which needs the EAP Session-Id in order for the EAP Re-authentication Protocol (ERP) [RFC6696] to work. It is therefore important to address the existing deficiencies in the definition of EAP Session-Id. > (3) Section 2.2. Editorial. >=20 > OLD > Similarly for EAP-SIM, it says: > NEW > Similarly, for EAP-SIM, [RFC5247] Appendix A says: Fixed. > (4) Section 2.2. Editorial. Why not the explicit symmetry in = language in EAP-SIM as was used in EAP AKA? >=20 > OLD > EAP-SIM is defined in [RFC4186]. The EAP-SIM Session-Id is the ... > NEW > EAP-SIM is defined in [RFC4186]. When using full authentication, the = EAP-SIM Session-Id is the ... Fixed. =20 > (5) Section 2.2. Recommend defining RAND1, RAND2 and RAND3 explicitly = since RFC4186 only has it in the test vector section. Perhaps something = like: >=20 > "RAND1, RAND2 and RAND3 correspond to the RAND value from the first, = second and third GSM triplet respectively." Fixed. > (6) Section 3. It would be useful to describe the prior work in = Security Considerations. Specifically, "These updates to not modify the = Security Considerations outlined in RFC5247." Fixed. I'll publish a new version shortly. Alan DeKok. From nobody Wed May 13 17:09:21 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAE1D3A0831 for ; Wed, 13 May 2020 17:09:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6VPrYOapuF2T for ; Wed, 13 May 2020 17:09:17 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 481683A082B for ; Wed, 13 May 2020 17:09:16 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 04E09C61002235; Wed, 13 May 2020 20:09:12 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu 04E09C61002235 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1589414952; bh=2/U9OnqA33El5FrHG/5IPfZPCQm+CWvuXwXeMeFylBw=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=dFJNRrkKkamRShwrKO1GKQ41E8uY/5TMapbB5Tt27K9YcYMfYr++erxWpSo0KztTw hvi/KbVqaqMxub03CRDD8KR4tBV2vJAiSzcSzdpLUWTscHqPAuks0iZOI4Ot8+p9F8 5hAE0g2kVxjZLYtUuJynyk9lLIYY2Vod47HzbE2E= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 04E097VK026475; Wed, 13 May 2020 20:09:07 -0400 Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by CASCADE.ad.sei.cmu.edu (10.64.28.248) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 13 May 2020 20:09:06 -0400 Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by MORRIS.ad.sei.cmu.edu (147.72.252.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1847.3; Wed, 13 May 2020 20:09:06 -0400 Received: from MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb]) by MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb%22]) with mapi id 15.01.1847.007; Wed, 13 May 2020 20:09:06 -0400 From: Roman Danyliw To: Alan DeKok CC: "emu@ietf.org" Thread-Topic: [Emu] AD Review of draft-ietf-emu-eap-session-id-02 Thread-Index: AdYpZHLD5jVuxVmPSSWjhtLxHLXvjgAKEWkAAAJQ6fA= Date: Thu, 14 May 2020 00:09:06 +0000 Message-ID: <45a0cee70ecc4290b4d700280a729d34@cert.org> References: <644056d44c184bc4bac07286519e0847@cert.org> <6F05E49D-B181-495F-AFC3-55A73844F01F@deployingradius.com> In-Reply-To: <6F05E49D-B181-495F-AFC3-55A73844F01F@deployingradius.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.202.241] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Emu] AD Review of draft-ietf-emu-eap-session-id-02 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 May 2020 00:09:19 -0000 Hi Alan! Thanks for the quick response. Since these are minor, I already started th= e IETF LC. Nevertheless, having an updated draft with these changes is eve= n better. More inline ... > -----Original Message----- > From: Alan DeKok > Sent: Wednesday, May 13, 2020 5:12 PM > To: Roman Danyliw > Cc: emu@ietf.org > Subject: Re: [Emu] AD Review of draft-ietf-emu-eap-session-id-02 >=20 > On May 13, 2020, at 4:25 PM, Roman Danyliw wrote: > > > > Hi! > > > > I conducted my AD review of draft-ietf-emu-eap-session-id-02. The docu= ment > is in good shape. I have largely editorial feedback below that can be ha= ndled > with IETF LC input. > > > > (1) Section 1. Editorial. COMMENTs often come up in IESG review the i= t isn't > clear up front what exactly is being updated. I recommend something like= ... > > > > OLD > > We correct that deficiency here. > > NEW > > We correct these deficiencies here by updating [RFC5247] with the Sessi= on-Id > derivation during fast-authentication exchange for EAP-SIM and EAP-AKA; a= nd > defining Session-Id derivation for PEAP. >=20 > Fixed. >=20 > > (2) Section 1. Editorial. Per ..., it would be important to get this r= esolved with > a clearly defined and agreed derivation rules to allow fast re- authentic= ation > cases to be used to derive ERP key hierarchy", I'm not sure this addition= al > explanation is needed and this is a run-on sentence from the previous tex= t. >=20 > How about: >=20 > The IEEE is defining FILS authentication [FILS], which needs the EAP Sess= ion-Id > in order for the EAP Re-authentication Protocol (ERP) [RFC6696] to work. = It is > therefore important to address the existing deficiencies in the definitio= n of EAP > Session-Id. The above text works for me. > > (3) Section 2.2. Editorial. > > > > OLD > > Similarly for EAP-SIM, it says: > > NEW > > Similarly, for EAP-SIM, [RFC5247] Appendix A says: >=20 > Fixed. >=20 > > (4) Section 2.2. Editorial. Why not the explicit symmetry in language= in EAP- > SIM as was used in EAP AKA? > > > > OLD > > EAP-SIM is defined in [RFC4186]. The EAP-SIM Session-Id is the ... > > NEW > > EAP-SIM is defined in [RFC4186]. When using full authentication, the E= AP- > SIM Session-Id is the ... >=20 > Fixed. >=20 > > (5) Section 2.2. Recommend defining RAND1, RAND2 and RAND3 explicitly > since RFC4186 only has it in the test vector section. Perhaps something = like: > > > > "RAND1, RAND2 and RAND3 correspond to the RAND value from the first, > second and third GSM triplet respectively." >=20 > Fixed. >=20 > > (6) Section 3. It would be useful to describe the prior work in Securi= ty > Considerations. Specifically, "These updates to not modify the Security > Considerations outlined in RFC5247." >=20 > Fixed. >=20 > I'll publish a new version shortly. Much appreciated! Thanks, Roman > Alan DeKok. From nobody Thu May 14 07:38:15 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D47B3A0A3B; Thu, 14 May 2020 07:38:13 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.130.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: emu@ietf.org Message-ID: <158946709347.14648.1823015739173136440@ietfa.amsl.com> Date: Thu, 14 May 2020 07:38:13 -0700 Archived-At: Subject: [Emu] I-D Action: draft-ietf-emu-eap-session-id-03.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 May 2020 14:38:14 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the EAP Method Update WG of the IETF. Title : EAP Session-Id Derivation for EAP-SIM, EAP-AKA, and PEAP Author : Alan DeKok Filename : draft-ietf-emu-eap-session-id-03.txt Pages : 9 Date : 2020-05-14 Abstract: EAP Session-Id derivation has not been defined for EAP-SIM or EAP-AKA when using the fast re-authentication exchange instead of full authentication. This document updates RFC 5247 to define those derivations for EAP-SIM and EAP-AKA. RFC 5247 also does not define Session-Id derivation for PEAP. A definition is given here which follows the definition for other TLS-based EAP methods. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-emu-eap-session-id/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-emu-eap-session-id-03 https://datatracker.ietf.org/doc/html/draft-ietf-emu-eap-session-id-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-emu-eap-session-id-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu May 14 20:30:07 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B18153A0880; Thu, 14 May 2020 20:30:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.130.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: emu@ietf.org Message-ID: <158951340059.18527.10118751251516295020@ietfa.amsl.com> Date: Thu, 14 May 2020 20:30:00 -0700 Archived-At: Subject: [Emu] I-D Action: draft-ietf-emu-tls-eap-types-00.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 May 2020 03:30:04 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the EAP Method Update WG of the IETF. Title : TLS-based EAP types and TLS 1.3 Author : Alan DeKok Filename : draft-ietf-emu-tls-eap-types-00.txt Pages : 10 Date : 2020-05-14 Abstract: EAP-TLS [RFC5216] is being updated for TLS 1.3 in [EAPTLS]. Many other EAP [RFC3748] and [RFC5247] types also depend on TLS, such as FAST [RFC4851], TTLS [RFC5281], TEAP [RFC7170], and possibly many vendor specific EAP methods. This document updates those methods in order to use the new key derivation methods available in TLS 1.3. Additional changes necessitated by TLS 1.3 are also discussed. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-emu-tls-eap-types/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-emu-tls-eap-types-00 https://datatracker.ietf.org/doc/html/draft-ietf-emu-tls-eap-types-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun May 17 10:25:14 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 44A163A0935; Sun, 17 May 2020 10:25:12 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Joseph Salowey via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 6.130.0 Auto-Submitted: auto-generated Precedence: bulk Cc: emu@ietf.org, joe@salowey.net, emu-chairs@ietf.org, Joseph Salowey , iesg-secretary@ietf.org Message-ID: <158973631226.8932.4455396024802338409@ietfa.amsl.com> Date: Sun, 17 May 2020 10:25:12 -0700 Archived-At: Subject: [Emu] Publication has been requested for draft-ietf-emu-eap-tls13-09 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 May 2020 17:25:12 -0000 Joseph Salowey has requested publication of draft-ietf-emu-eap-tls13-09 as Proposed Standard on behalf of the EMU working group. Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-emu-eap-tls13/ From nobody Mon May 18 09:05:56 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 650E23A0852 for ; Mon, 18 May 2020 09:05:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.004 X-Spam-Level: X-Spam-Status: No, score=0.004 tagged_above=-999 required=5 tests=[HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1pC6ZH-n4otd for ; Mon, 18 May 2020 09:05:51 -0700 (PDT) Received: from sjmda11.webex.com (sjmda11.webex.com [64.68.124.128]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53E053A0854 for ; Mon, 18 May 2020 09:05:51 -0700 (PDT) Received: from rva2rmd102.webex.com (sjc02-wxpd-lb03-v140.webex.com [10.252.16.111]) by sjmda11.webex.com (Postfix) with ESMTP id 21EA0304ED8F for ; Mon, 18 May 2020 16:05:51 +0000 (GMT) Received: from rva2rmd102.webex.com (localhost [127.0.0.1]) by rva2rmd102.webex.com (Postfix) with ESMTP id C37DC100D983 for ; Mon, 18 May 2020 16:05:50 +0000 (GMT) Date: Mon, 18 May 2020 16:05:50 +0000 (GMT) From: EMU Working Group Reply-To: emu-chairs@ietf.org To: emu@ietf.org Message-ID: <317760953.3873781589817950799.JavaMail.nobody@rva2rmd102.webex.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_774755_1098818136.1589817950799" X-Priority: 3 Importance: normal X-WBX-INFO: X-WBX-SID=456680, X-WBX-CID=161595156432170327, X-WBX-TID=2keo86vjye10n06jmlx1cc9gyif1frxgen6tue5jp5i3u2953c18uyb6, X-WBX-RID=d1f13f5fe0cf44f3946516877e9b2f98, X-WBX-SVC:Meeting Center, X-WBX-TT:Meeting Invitation, Date:Mon May 18 16:05:50 GMT 2020 reminder-40.1.1-4 Archived-At: Subject: [Emu] Webex meeting invitation: EMU Interim Meeting X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 May 2020 16:05:54 -0000 ------=_Part_774755_1098818136.1589817950799 Content-Type: multipart/Alternative; boundary="----=_Part_774756_1066391230.1589817950799" ------=_Part_774756_1066391230.1589817950799 Content-Type: text/plain;charset=UTF-8 Content-Transfer-Encoding: base64 CkhpLCBlbXVAaWV0Zi5vcmcsCgpFTVUgV29ya2luZyBHcm91cCBpbnZpdGVzIHlvdSB0byBqb2lu IHRoaXMgV2ViZXggbWVldGluZy4KCgpFTVUgSW50ZXJpbSBNZWV0aW5nCkZyaWRheSwgTWF5IDIy LCAyMDIwCjY6MDAgcG0gIHwgIChVVEMrMDM6MDApIEhlbHNpbmtpLCBLeWl2LCBSaWdhLCBTb2Zp YSwgVGFsbGlubiwgVmlsbml1cyAgfCAgMSBociAzMCBtaW5zCk1lZXRpbmcgbnVtYmVyIChhY2Nl c3MgY29kZSk6IDYxOCA1MzggMDc3IApNZWV0aW5nIHBhc3N3b3JkOiBTeDJlZGY0bVdVMwoKCgpX aGVuIGl0J3MgdGltZSwgam9pbiB0aGUgbWVldGluZy4KaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9p ZXRmL2oucGhwP01USUQ9bWM5ZGY0ZGNjZDM4NTkyMDRiZGUwNjFiZGU0ODQ4NDkxCgpBZGQgdG8g Q2FsZW5kYXIKaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWRiYzFhMWE0 NDdmMmEwZGQ2MmJmYmQ1NDk4Mjc5MjkwDQoNCgoKDQpKT0lOIEJZIFBIT05FDQoxLTY1MC00Nzkt MzIwOCBDYWxsLWluIHRvbGwgbnVtYmVyIChVUy9DYW5hZGEpClRhcCBoZXJlIHRvIGNhbGwgKG1v YmlsZSBwaG9uZXMgb25seSwgaG9zdHMgbm90IHN1cHBvcnRlZCk6IHRlbDolMkIxLTY1MC00Nzkt MzIwOCwsKjAxKjYxODUzODA3NyUyMyUyMyowMSoKDQpHbG9iYWwgY2FsbC1pbiBudW1iZXJzDQpo dHRwczovL2lldGYud2ViZXguY29tL2lldGYvZ2xvYmFsY2FsbGluLnBocD9NVElEPW0yMzdmYTEx MTExNThjNjk2MWJlOWZjOGJhNGM4NTk5OQ0KDQoKSk9JTiBGUk9NIEEgVklERU8gU1lTVEVNIE9S IEFQUExJQ0FUSU9OCkRpYWwgc2lwOjYxODUzODA3N0BpZXRmLndlYmV4LmNvbQpZb3UgY2FuIGFs c28gZGlhbCAxNzMuMjQzLjIuNjggYW5kIGVudGVyIHlvdXIgbWVldGluZyBudW1iZXIuCgoKSm9p biB1c2luZyBNaWNyb3NvZnQgTHluYyBvciBNaWNyb3NvZnQgU2t5cGUgZm9yIEJ1c2luZXNzCkRp YWwgc2lwOjYxODUzODA3Ny5pZXRmQGx5bmMud2ViZXguY29tCgoKQ2FuJ3Qgam9pbiB0aGUgbWVl dGluZz8KaHR0cHM6Ly9jb2xsYWJvcmF0aW9uaGVscC5jaXNjby5jb20vYXJ0aWNsZS9XQlgwMDAw MjkwNTUKCgpJTVBPUlRBTlQgTk9USUNFOiBQbGVhc2Ugbm90ZSB0aGF0IHRoaXMgV2ViZXggc2Vy dmljZSBhbGxvd3MgYXVkaW8gYW5kIG90aGVyIGluZm9ybWF0aW9uIHNlbnQgZHVyaW5nIHRoZSBz ZXNzaW9uIHRvIGJlIHJlY29yZGVkLCB3aGljaCBtYXkgYmUgZGlzY292ZXJhYmxlIGluIGEgbGVn YWwgbWF0dGVyLiBCeSBqb2luaW5nIHRoaXMgc2Vzc2lvbiwgeW91IGF1dG9tYXRpY2FsbHkgY29u c2VudCB0byBzdWNoIHJlY29yZGluZ3MuIElmIHlvdSBkbyBub3QgY29uc2VudCB0byBiZWluZyBy ZWNvcmRlZCwgZGlzY3VzcyB5b3VyIGNvbmNlcm5zIHdpdGggdGhlIGhvc3Qgb3IgZG8gbm90IGpv aW4gdGhlIHNlc3Npb24uCg== ------=_Part_774756_1066391230.1589817950799 Content-Type: text/html;charset=UTF-8 Content-Transfer-Encoding: base64 PHN0eWxlIHR5cGU9InRleHQvY3NzIj4KKiB7CiAgICBwYWRkaW5nOiAwOyAgICBtYXJnaW46IDA7 fQp0YWJsZSB7Cglib3JkZXItY29sbGFwc2U6IHNlcGFyYXRlOyB3aWR0aCA9MTAwJTsJYm9yZGVy OiAwOwlib3JkZXItc3BhY2luZzogMDt9Cgp0ciB7CglsaW5lLWhlaWdodDogMThweDt9CgphLCB0 ZCB7Cglmb250LXNpemU6IDE0cHg7CWZvbnQtZmFtaWx5OiBBcmlhbDsJY29sb3I6ICMzMzM7CXdv cmQtd3JhcDogYnJlYWstd29yZDsJd29yZC1icmVhazogbm9ybWFsOwlwYWRkaW5nOiAwO30KCi50 aXRsZSB7Cglmb250LXNpemU6IDI4cHg7fQoKLmltYWdlIHsKCXdpZHRoOiBhdXRvOwltYXgtd2lk dGg6IGF1dG87fQoKLmZvb3RlciB7Cgl3aWR0aDogNjA0cHg7fQoKLm1haW4gewoKfUBtZWRpYSBz Y3JlZW4gYW5kIChtYXgtZGV2aWNlLXdpZHRoOiA4MDBweCkgewoJLnRpdGxlIHsKCQlmb250LXNp emU6IDIycHggIWltcG9ydGFudDsJfQoJLmltYWdlIHsKCQl3aWR0aDogYXV0byAhaW1wb3J0YW50 OwkJbWF4LXdpZHRoOiAxMDAlICFpbXBvcnRhbnQ7CX0KCS5mb290ZXIgewoJCXdpZHRoOiAxMDAl ICFpbXBvcnRhbnQ7CQltYXgtd2lkdGg6IDYwNHB4ICFpbXBvcnRhbnQKCX0KCS5tYWluIHsKCQl3 aWR0aDogMTAwJSAhaW1wb3J0YW50OwkJbWF4LXdpZHRoOiA2MDRweCAhaW1wb3J0YW50Cgl9Cn0K PC9zdHlsZT4KCjx0YWJsZSBiZ2NvbG9yPSIjRkZGRkZGIiBzdHlsZT0icGFkZGluZzogMDsgbWFy Z2luOiAwOyBib3JkZXI6IDA7IHdpZHRoOiAxMDAlOyIgYWxpZ249ImxlZnQiPgoJPHRyIHN0eWxl PSJoZWlnaHQ6IDI4cHgiPjx0ZD4mbmJzcDs8L3RkPjwvdHI+Cgk8dHI+CgkJPHRkIGFsaWduPSJs ZWZ0IiBzdHlsZT0icGFkZGluZzogMCAyMHB4OyBtYXJnaW46IDAiPgoJCQk8IS0tPHRhYmxlIGJn Y29sb3I9IiNGRkZGRkYiIHN0eWxlPSJib3JkZXI6IDBweDsgd2lkdGg6IDEwMCU7IHBhZGRpbmct bGVmdDogNTBweDsgcGFkZGluZy1yaWdodDogNTBweDsiIGFsaWduPSJsZWZ0IiBjbGFzcz0ibWFp biI+CgkJCQk8dHI+CgkJCQkJPHRkIGFsaWduPSJjZW50ZXIiIHZhbGlnbj0idG9wIiA+Jm5ic3A7 CQkJCQk8L3RkPgoJCQkJPC90cj4KCQkJPC90YWJsZT4tLT4KCgo8dGFibGU+CiAgICAgICA8dHI+ CiAgICAgICAgICAgPHRkIHN0eWxlPSJoZWlnaHQ6IDIycHg7Y29sb3I6ICMwMDAwMDA7Zm9udC1m YW1pbHk6IEFyaWFsOwlmb250LXNpemU6IDE2cHg7Zm9udC13ZWlnaHQ6IGJvbGQ7bGluZS1oZWln aHQ6IDIycHg7Ij4KICAgICAgICAgICAgICAgIEVNVSBXb3JraW5nIEdyb3VwIGludml0ZXMgeW91 IHRvIGpvaW4gdGhpcyBXZWJleCBtZWV0aW5nLgogICAgICAgICAgICAgICAgCSAgICAgICAgICAg PC90ZD4KICAgICAgPC90cj4KPC90YWJsZT4KCgo8dGFibGU+PHRyIHN0eWxlPSJsaW5lLWhlaWdo dDogMjBweDsiPjx0ZCBzdHlsZT0iaGVpZ2h0OjIwcHgiPiZuYnNwOzwvdGQ+PC90cj48L3RhYmxl PgoKICAgIDx0YWJsZSBzdHlsZT0id2lkdGg6YXV0bzsgd2lkdGg6YXV0byFpbXBvcnRhbnQ7Ij4K ICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0ZCBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsOyBj b2xvcjogIzAwMDAwMDsgZm9udC1zaXplOiAxNnB4OyBsaW5lLWhlaWdodDogMjJweDsiPgogICAg ICAgICAgICAgICAgTWVldGluZyBudW1iZXIgKGFjY2VzcyBjb2RlKTogNjE4IDUzOCAwNzcKICAg ICAgICAgICAgPC90ZD4KICAgICAgICA8L3RyPgogICAgPC90YWJsZT4KICAgIDx0YWJsZSBzdHls ZT0id2lkdGg6YXV0bzsgd2lkdGg6YXV0byFpbXBvcnRhbnQiPgogICAgICAgIDx0ciA+CiAgICAg ICAgICAgIDx0ZCBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsOyBjb2xvcjogIzAwMDAwMDsgZm9u dC1zaXplOiAxNnB4OyBsaW5lLWhlaWdodDogMjJweDsiPk1lZXRpbmcgcGFzc3dvcmQ6IFN4MmVk ZjRtV1UzPC90ZD4KICAgICAgICA8L3RyPgogICAgPC90YWJsZT4KICAgICAgICAKPHRhYmxlPjx0 ciBzdHlsZT0ibGluZS1oZWlnaHQ6IDIwcHg7Ij48dGQgc3R5bGU9ImhlaWdodDoyMHB4Ij4mbmJz cDs8L3RkPjwvdHI+PC90YWJsZT4KCiAgICA8dGFibGUgIHdpZHRoPSIxMDAlIj4KICAgICAgICA8 dHIgc3R5bGU9Im1hcmdpbjowcHg7Y29sb3I6ICM2NjY2NjY7Zm9udC1mYW1pbHk6IEFyaWFsO2Zv bnQtc2l6ZTogMTRweDtsaW5lLWhlaWdodDogMjJweDsiPgogICAgICAgICAgICA8dGQgc3R5bGU9 Im1hcmdpbjowcHg7Y29sb3I6ICM2NjY2NjY7Zm9udC1mYW1pbHk6IEFyaWFsO2ZvbnQtc2l6ZTog MTRweDtsaW5lLWhlaWdodDogMjJweDsiPkZyaWRheSwgTWF5IDIyLCAyMDIwCiAgICAgICAgICAg IDwvdGQ+CiAgICAgICAgPC90cj4KICAgICAgICA8dHIgc3R5bGU9Im1hcmdpbjowcHg7Y29sb3I6 ICM2NjY2NjY7Zm9udC1mYW1pbHk6IEFyaWFsO2ZvbnQtc2l6ZTogMTRweDtsaW5lLWhlaWdodDog MjJweDsiPgogICAgICAgICAgICA8dGQgc3R5bGU9Im1hcmdpbjowcHg7Y29sb3I6ICM2NjY2NjY7 Zm9udC1mYW1pbHk6IEFyaWFsO2ZvbnQtc2l6ZTogMTRweDtsaW5lLWhlaWdodDogMjJweDsiPjY6 MDAgcG0mbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7KFVUQyswMzowMCkgSGVsc2lua2ksIEt5aXYs IFJpZ2EsIFNvZmlhLCBUYWxsaW5uLCBWaWxuaXVzJm5ic3A7Jm5ic3A7fCZuYnNwOyZuYnNwOzEg aHIgMzAgbWlucwogICAgICAgICAgICA8L3RkPgogICAgICAgIDwvdHI+CiAgICA8L3RhYmxlPgoK IDxGT05UIHNpemU9IjIiIENPTE9SPSIjRkYwMDAwIiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFs OyI+PC9GT05UPgoKICAgIAoKCQkJPHRhYmxlIHN0eWxlPSJwYWRkaW5nLWJvdHRvbTogNHB4O2Zv bnQtZmFtaWx5OiBBcmlhbDsiPjx0ciBzdHlsZT0ibGluZS1oZWlnaHQ6IDIwcHgiPjx0ZCBzdHls ZT0iaGVpZ2h0OjIwcHgiPiZuYnNwOzwvdGQ+PC90cj48L3RhYmxlPgoJCQk8dGFibGUgc3R5bGU9 J3dpZHRoOmF1dG87d2lkdGg6YXV0byFpbXBvcnRhbnQ7Jz48dHI+PHRkIHN0eWxlPSd3aWR0aDph dXRvIWltcG9ydGFudDsgJz48dGFibGUgYm9yZGVyPScwJyBjZWxscGFkZGluZz0nMCcgY2VsbHNw YWNpbmc9JzAnIHN0eWxlPSd3aWR0aDphdXRvO3dpZHRoOmF1dG8haW1wb3J0YW50OyBiYWNrZ3Jv dW5kLWNvbG9yOiM0M0E5NDI7IGJvcmRlcjowcHggc29saWQgIzQzQTk0MjsgYm9yZGVyLXJhZGl1 czoyMHB4OyBtaW4td2lkdGg6MTYwcHghaW1wb3J0YW50Oyc+PHRib2R5Pjx0cj48dGQgYWxpZ249 J2NlbnRlcicgc3R5bGU9J3BhZGRpbmc6MTBweCAzNnB4O2ZvbnQtZmFtaWx5OiBBcmlhbDsnPjxh IGhyZWY9J2h0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW1jOWRmNGRjY2Qz ODU5MjA0YmRlMDYxYmRlNDg0ODQ5MScgc3R5bGU9J2NvbG9yOiNGRkZGRkY7IGZvbnQtc2l6ZToy MHB4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsnPkpvaW4gbWVldGluZzwvYT48L3RkPjwvdHI+PC90 Ym9keT48L3RhYmxlPjwvdGQ+PC90cj48L3RhYmxlPgoJCQk8dGFibGU+PHRyIHN0eWxlPSJsaW5l LWhlaWdodDogNDhweCI+PHRkIHN0eWxlPSJoZWlnaHQ6NDhweCI+Jm5ic3A7PC90ZD48L3RyPjwv dGFibGU+CgoKCTx0YWJsZT48dGJvZHk+PHRyPjx0ZCBzdHlsZT0iY29sb3I6ICMwMDAwMDA7Zm9u dC1mYW1pbHk6IEFyaWFsOyBmb250LXNpemU6IDEycHg7IGZvbnQtd2VpZ2h0OiBib2xkOyBsaW5l LWhlaWdodDogMjRweDsiPjxiPkpvaW4gYnkgcGhvbmU8L2I+PC90ZD48L3RyPjx0cj48dGQgc3R5 bGU9ImNvbG9yOiAjOTk5OTk5O2ZvbnQtZmFtaWx5OiBBcmlhbDsgZm9udC1zaXplOiAxMnB4OyBs aW5lLWhlaWdodDogMjRweDsiPlRhcCB0byBjYWxsIGluIGZyb20gYSBtb2JpbGUgZGV2aWNlIChh dHRlbmRlZXMgb25seSk8L3RkPjwvdHI+PHRyIHN0eWxlPSJtYXJnaW46MHB4Ij48dGQgc3R5bGU9 ImNvbG9yOiAjMzMzMzMzO2ZvbnQtZmFtaWx5OiBBcmlhbDtmb250LXNpemU6IDE0cHg7bGluZS1o ZWlnaHQ6IDI0cHg7Ij48YSBocmVmPSd0ZWw6JTJCMS02NTAtNDc5LTMyMDgsLCowMSo2MTg1Mzgw NzclMjMlMjMqMDEqJyBzdHlsZT0nY29sb3I6IzAwQUZGOTsgIHRleHQtZGVjb3JhdGlvbjpub25l OyBmb250LWZhbWlseTogQXJpYWw7Zm9udC1zaXplOiAxNHB4O2xpbmUtaGVpZ2h0OiAyNHB4Oyc+ MS02NTAtNDc5LTMyMDg8L2E+Jm5ic3A7PHNwYW4gc3R5bGU9ImNvbG9yOiAjMzMzMzMzOyI+Q2Fs bC1pbiB0b2xsIG51bWJlciAoVVMvQ2FuYWRhKTwvc3Bhbj48L3RkPjwvdHI+PHRyIHN0eWxlPSJt YXJnaW46MHB4Ij48dGQgc3R5bGU9ImZvbnQtZmFtaWx5OiBBcmlhbDtmb250LXNpemU6IDE0cHg7 bGluZS1oZWlnaHQ6IDI0cHg7Ij48YSBocmVmPSJodHRwczovL2lldGYud2ViZXguY29tL2lldGYv Z2xvYmFsY2FsbGluLnBocD9NVElEPW0yMzdmYTExMTExNThjNjk2MWJlOWZjOGJhNGM4NTk5OSIg c3R5bGU9InRleHQtZGVjb3JhdGlvbjpub25lO2ZvbnQtc2l6ZToxNHB4O2NvbG9yOiMwMEFGRjki Pkdsb2JhbCBjYWxsLWluIG51bWJlcnM8L2E+PC90ZD48L3RyPjwvdGJvZHk+PC90YWJsZT48dGFi bGUgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIwIj48dHIgc3R5bGU9ImxpbmUtaGVpZ2h0 OiAyOHB4OyI+PHRkIHN0eWxlPSJoZWlnaHQ6MjhweCI+Jm5ic3A7PC90ZD48L3RyPjwvdGFibGU+ Cgk8dGFibGU+PHRyPjx0ZCAgc3R5bGU9ImNvbG9yOiAjMDAwMDAwOyBmb250LWZhbWlseTogQXJp YWw7Zm9udC1zaXplOiAxMnB4OyBmb250LXdlaWdodDogYm9sZDsgbGluZS1oZWlnaHQ6IDI0cHg7 Ij48Yj5Kb2luIGZyb20gYSB2aWRlbyBzeXN0ZW0gb3IgYXBwbGljYXRpb248L2I+PC90ZD48L3Ry Pjx0ciBzdHlsZT0ibWFyZ2luOjBweCI+PHRkIHN0eWxlPSJjb2xvcjogIzMzMzMzMzsgZm9udC1m YW1pbHk6IEFyaWFsOyBmb250LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAyNHB4OyI+RGlhbCA8 YSBocmVmPSIgc2lwOjYxODUzODA3N0BpZXRmLndlYmV4LmNvbSIgICBzdHlsZT0idGV4dC1kZWNv cmF0aW9uOm5vbmU7Y29sb3I6IzAwQUZGOSI+NjE4NTM4MDc3QGlldGYud2ViZXguY29tPC9hPjwv dGQ+PC90cj48dHIgc3R5bGU9Im1hcmdpbjowcHgiPjx0ZCBzdHlsZT0iY29sb3I6ICMzMzMzMzM7 IGZvbnQtZmFtaWx5OiBBcmlhbDsgZm9udC1zaXplOiAxNHB4OyBsaW5lLWhlaWdodDogMjRweDsi PllvdSBjYW4gYWxzbyBkaWFsIDE3My4yNDMuMi42OCBhbmQgZW50ZXIgeW91ciBtZWV0aW5nIG51 bWJlci48L3RkPjwvdHI+PC90YWJsZT48dGFibGU+PHRyIHN0eWxlPSJsaW5lLWhlaWdodDogMjBw eDsiPjx0ZCBzdHlsZT0iaGVpZ2h0OjIwcHgiPiZuYnNwOzwvdGQ+PC90cj48L3RhYmxlPgogICAg PHRhYmxlIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCI+PHRyPjx0ZCAgc3R5bGU9ImNv bG9yOiAjMDAwMDAwOyBmb250LWZhbWlseTogQXJpYWw7Zm9udC1zaXplOiAxMnB4OyBmb250LXdl aWdodDogYm9sZDsgbGluZS1oZWlnaHQ6IDI0cHg7Ij48Yj5Kb2luIHVzaW5nIE1pY3Jvc29mdCBM eW5jIG9yIE1pY3Jvc29mdCBTa3lwZSBmb3IgQnVzaW5lc3M8L2I+PC90ZD48L3RyPjx0ciBzdHls ZT0ibWFyZ2luOjBweCI+PHRkIHN0eWxlPSJjb2xvcjogIzMzMzMzMzsgZm9udC1mYW1pbHk6IEFy aWFsOyBmb250LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAyNHB4OyI+RGlhbCA8YSBocmVmPSIg c2lwOjYxODUzODA3Ny5pZXRmQGx5bmMud2ViZXguY29tIiAgIHN0eWxlPSJ0ZXh0LWRlY29yYXRp b246bm9uZTtjb2xvcjojMDBBRkY5Ij42MTg1MzgwNzcuaWV0ZkBseW5jLndlYmV4LmNvbTwvYT48 L3RkPjwvdHI+PC90YWJsZT4KCgkJCTx0YWJsZSBzdHlsZT0id2lkdGg6IDEwMCU7IiBhbGlnbj0i bGVmdCIgY2xhc3M9Im1haW4iPgogICAgICAgICAgICAgICAgPHRyIHN0eWxlPSJoZWlnaHQ6IDcy cHgiPjx0ZD4mbmJzcDs8L3RkPjwvdHI+CgkJCQk8dHI+CgkJCQkJPHRkIHN0eWxlPSJoZWlnaHQ6 IDI0cHg7IGNvbG9yOiAjMDAwMDAwOyBmb250LWZhbWlseTpBcmlhbDsgZm9udC1zaXplOiAxNHB4 OyBsaW5lLWhlaWdodDogMjRweDsiPk5lZWQgaGVscD8gR28gdG8gPGEgaHJlZj0iaHR0cDovL2hl bHAud2ViZXguY29tIiBzdHlsZT0iY29sb3I6IzA0OUZEOTsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7 Ij5odHRwOi8vaGVscC53ZWJleC5jb208L2E+CgkJCQkJPC90ZD4KCQkJCTwvdHI+CiAgICAgICAg ICAgICAgICA8dHIgc3R5bGU9ImhlaWdodDogNDRweCI+PHRkPiZuYnNwOzwvdGQ+PC90cj4KCQkJ PC90YWJsZT4KCQk8L3RkPgoJPC90cj4KPC90YWJsZT4K ------=_Part_774756_1066391230.1589817950799 Content-Type: text/calendar;method=REQUEST;charset=utf-8; Content-Transfer-Encoding: base64 QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vTWljcm9zb2Z0IENvcnBvcmF0aW9uLy9PdXRsb29r IDEwLjAgTUlNRURJUi8vRU4NClZFUlNJT046Mi4wDQpNRVRIT0Q6UkVRVUVTVA0KQkVHSU46VlRJ TUVaT05FDQpUWklEOkV1cm9wZS9IZWxzaW5raQ0KVFpVUkw6aHR0cDovL3R6dXJsLm9yZy96b25l aW5mby1vdXRsb29rL0V1cm9wZS9IZWxzaW5raQ0KWC1MSUMtTE9DQVRJT046RXVyb3BlL0hlbHNp bmtpDQpCRUdJTjpEQVlMSUdIVA0KVFpPRkZTRVRGUk9NOiswMjAwDQpUWk9GRlNFVFRPOiswMzAw DQpUWk5BTUU6RUVTVA0KRFRTVEFSVDoxOTcwMDMyOVQwMzAwMDANClJSVUxFOkZSRVE9WUVBUkxZ O0JZTU9OVEg9MztCWURBWT0tMVNVDQpFTkQ6REFZTElHSFQNCkJFR0lOOlNUQU5EQVJEDQpUWk9G RlNFVEZST006KzAzMDANClRaT0ZGU0VUVE86KzAyMDANClRaTkFNRTpFRVQNCkRUU1RBUlQ6MTk3 MDEwMjVUMDQwMDAwDQpSUlVMRTpGUkVRPVlFQVJMWTtCWU1PTlRIPTEwO0JZREFZPS0xU1UNCkVO RDpTVEFOREFSRA0KRU5EOlZUSU1FWk9ORQ0KQkVHSU46VkVWRU5UDQpEVFNUQU1QOjIwMjAwNTE4 VDE2MDU1MFoNCkFUVEVOREVFO0NOPSJlbXVAaWV0Zi5vcmciO1JPTEU9UkVRLVBBUlRJQ0lQQU5U O1JTVlA9VFJVRTpNQUlMVE86ZW11QGlldGYub3JnDQpPUkdBTklaRVI7Q049IkVNVSBXb3JraW5n IEdyb3VwIjpNQUlMVE86ZW11LWNoYWlyc0BpZXRmLm9yZw0KRFRTVEFSVDtUWklEPUV1cm9wZS9I ZWxzaW5raToyMDIwMDUyMlQxODAwMDANCkRURU5EO1RaSUQ9RXVyb3BlL0hlbHNpbmtpOjIwMjAw NTIyVDE5MzAwMA0KTE9DQVRJT046aHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01U SUQ9bWM5ZGY0ZGNjZDM4NTkyMDRiZGUwNjFiZGU0ODQ4NDkxDQpUUkFOU1A6T1BBUVVFDQpTRVFV RU5DRToxNTg5ODE3OTUwDQpVSUQ6ZTU2MGZkOTgtNzYyZi00MmVkLTg1YTAtNWQyNWU0ZjczODVh DQpERVNDUklQVElPTjpcblxuXG5cbkpPSU4gV0VCRVggTUVFVElOR1xuaHR0cHM6Ly9pZXRmLndl YmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWM5ZGY0ZGNjZDM4NTkyMDRiZGUwNjFiZGU0ODQ4NDkx XG5NZWV0aW5nIG51bWJlciAoYWNjZXNzIGNvZGUpOiA2MTggNTM4IDA3N1xuXG5cbk1lZXRpbmcg cGFzc3dvcmQ6IFN4MmVkZjRtV1UzXG5cblxuXG5KT0lOIEJZIFBIT05FXG4xLTY1MC00NzktMzIw OCBDYWxsLWluIHRvbGwgbnVtYmVyIChVUy9DYW5hZGEpXG5UYXAgaGVyZSB0byBjYWxsIChtb2Jp bGUgcGhvbmVzIG9ubHksIGhvc3RzIG5vdCBzdXBwb3J0ZWQpOiB0ZWw6JTJCMS02NTAtNDc5LTMy MDgsLCowMSo2MTg1MzgwNzclMjMlMjMqMDEqXG5cbkdsb2JhbCBjYWxsLWluIG51bWJlcnNcbmh0 dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9nbG9iYWxjYWxsaW4ucGhwP01USUQ9bTIzN2ZhMTEx MTE1OGM2OTYxYmU5ZmM4YmE0Yzg1OTk5XG5cblxuSk9JTiBGUk9NIEEgVklERU8gU1lTVEVNIE9S IEFQUExJQ0FUSU9OXG5EaWFsIHNpcDo2MTg1MzgwNzdAaWV0Zi53ZWJleC5jb21cbllvdSBjYW4g YWxzbyBkaWFsIDE3My4yNDMuMi42OCBhbmQgZW50ZXIgeW91ciBtZWV0aW5nIG51bWJlci5cblxu XG5Kb2luIHVzaW5nIE1pY3Jvc29mdCBMeW5jIG9yIE1pY3Jvc29mdCBTa3lwZSBmb3IgQnVzaW5l c3NcbkRpYWwgc2lwOjYxODUzODA3Ny5pZXRmQGx5bmMud2ViZXguY29tXG5cblxuXG5DYW4ndCBq b2luIHRoZSBtZWV0aW5nP1xuaHR0cHM6Ly9jb2xsYWJvcmF0aW9uaGVscC5jaXNjby5jb20vYXJ0 aWNsZS9XQlgwMDAwMjkwNTVcblxuXG5JTVBPUlRBTlQgTk9USUNFOiBQbGVhc2Ugbm90ZSB0aGF0 IHRoaXMgV2ViZXggc2VydmljZSBhbGxvd3MgYXVkaW8gYW5kIG90aGVyIGluZm9ybWF0aW9uIHNl bnQgZHVyaW5nIHRoZSBzZXNzaW9uIHRvIGJlIHJlY29yZGVkLCB3aGljaCBtYXkgYmUgZGlzY292 ZXJhYmxlIGluIGEgbGVnYWwgbWF0dGVyLiBCeSBqb2luaW5nIHRoaXMgc2Vzc2lvbiwgeW91IGF1 dG9tYXRpY2FsbHkgY29uc2VudCB0byBzdWNoIHJlY29yZGluZ3MuIElmIHlvdSBkbyBub3QgY29u c2VudCB0byBiZWluZyByZWNvcmRlZCwgZGlzY3VzcyB5b3VyIGNvbmNlcm5zIHdpdGggdGhlIGhv c3Qgb3IgZG8gbm90IGpvaW4gdGhlIHNlc3Npb24uXG4NClgtQUxULURFU0M7Rk1UVFlQRT10ZXh0 L2h0bWw6PHN0eWxlIHR5cGU9InRleHQvY3NzIj5cbioge1xuICAgIHBhZGRpbmc6IDA7ICAgIG1h cmdpbjogMDt9XG50YWJsZSB7XG4JYm9yZGVyLWNvbGxhcHNlOiBzZXBhcmF0ZTsgd2lkdGggPTEw MCU7CWJvcmRlcjogMDsJYm9yZGVyLXNwYWNpbmc6IDA7fVxuXG50ciB7XG4JbGluZS1oZWlnaHQ6 IDE4cHg7fVxuXG5hLCB0ZCB7XG4JZm9udC1zaXplOiAxNHB4Owlmb250LWZhbWlseTogQXJpYWw7 CWNvbG9yOiAjMzMzOwl3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7CXdvcmQtYnJlYWs6IG5vcm1hbDsJ cGFkZGluZzogMDt9XG5cbi50aXRsZSB7XG4JZm9udC1zaXplOiAyOHB4O31cblxuLmltYWdlIHtc bgl3aWR0aDogYXV0bzsJbWF4LXdpZHRoOiBhdXRvO31cblxuLmZvb3RlciB7XG4Jd2lkdGg6IDYw NHB4O31cblxuLm1haW4ge1xuXG59QG1lZGlhIHNjcmVlbiBhbmQgKG1heC1kZXZpY2Utd2lkdGg6 IDgwMHB4KSB7XG4JLnRpdGxlIHtcbgkJZm9udC1zaXplOiAyMnB4ICFpbXBvcnRhbnQ7CX1cbgku aW1hZ2Uge1xuCQl3aWR0aDogYXV0byAhaW1wb3J0YW50OwkJbWF4LXdpZHRoOiAxMDAlICFpbXBv cnRhbnQ7CX1cbgkuZm9vdGVyIHtcbgkJd2lkdGg6IDEwMCUgIWltcG9ydGFudDsJCW1heC13aWR0 aDogNjA0cHggIWltcG9ydGFudFxuCX1cbgkubWFpbiB7XG4JCXdpZHRoOiAxMDAlICFpbXBvcnRh bnQ7CQltYXgtd2lkdGg6IDYwNHB4ICFpbXBvcnRhbnRcbgl9XG59XG48L3N0eWxlPlxuXG48dGFi bGUgYmdjb2xvcj0iI0ZGRkZGRiIgc3R5bGU9InBhZGRpbmc6IDA7IG1hcmdpbjogMDsgYm9yZGVy OiAwOyB3aWR0aDogMTAwJTsiIGFsaWduPSJsZWZ0Ij5cbgk8dHIgc3R5bGU9ImhlaWdodDogMjhw eCI+PHRkPiZuYnNwOzwvdGQ+PC90cj5cbgk8dHI+XG4JCTx0ZCBhbGlnbj0ibGVmdCIgc3R5bGU9 InBhZGRpbmc6IDAgMjBweDsgbWFyZ2luOiAwIj5cbgkJCTwhLS08dGFibGUgYmdjb2xvcj0iI0ZG RkZGRiIgc3R5bGU9ImJvcmRlcjogMHB4OyB3aWR0aDogMTAwJTsgcGFkZGluZy1sZWZ0OiA1MHB4 OyBwYWRkaW5nLXJpZ2h0OiA1MHB4OyIgYWxpZ249ImxlZnQiIGNsYXNzPSJtYWluIj5cbgkJCQk8 dHI+XG4JCQkJCTx0ZCBhbGlnbj0iY2VudGVyIiB2YWxpZ249InRvcCIgPiZuYnNwOwkJCQkJPC90 ZD5cbgkJCQk8L3RyPlxuCQkJPC90YWJsZT4tLT5cblxuXG5cblxuXG4JCQk8dGFibGU+XG4JCQkJ PHRyPlxuCQkJCQk8dGQ+XG4JCQkJCQk8Rk9OVCBTSVpFPSI0IiBDT0xPUj0iIzY2NjY2NiIgRkFD RT0iYXJpYWwiPldoZW4gaXQncyB0aW1lLCBqb2luIHRoZSBXZWJleCBtZWV0aW5nIGhlcmUuPC9G T05UPlxuCQkJCQk8L3RkPlxuCQkJCTwvdHI+XG4JCQkJPHRyIHN0eWxlPSJsaW5lLWhlaWdodDog MjBweDsiPjx0ZCBzdHlsZT0iaGVpZ2h0OjIwcHgiPiZuYnNwOzwvdGQ+PC90cj5cbgkJCQk8dHI+ XG4JCQkJCTx0ZD5cbgkJCQkJCTxGT05UIFNJWkU9IjIiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJh cmlhbCI+TWVldGluZyBudW1iZXIgKGFjY2VzcyBjb2RlKTogNjE4IDUzOCAwNzc8L0ZPTlQ+XG4J CQkJCTwvdGQ+XG4JCQkJPC90cj5cbgkJCTwvdGFibGU+XG4JCQlcbgkJCTx0YWJsZT48dHI+PHRk PjxGT05UIFNJWkU9IjIiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+TWVldGluZyBwYXNz d29yZDo8L0ZPTlQ+PC90ZD48dGQ+PEZPTlQgU0laRT0iMiIgIENPTE9SPSIjNjY2NjY2IiBGQUNF PSJhcmlhbCI+U3gyZWRmNG1XVTM8L0ZPTlQ+PC90ZD48L3RyPjwvdGFibGU+XG5cbiAgICAgICAg PHRhYmxlPlxuICAgICAgICAJPHRyIHN0eWxlPSJsaW5lLWhlaWdodDogMjBweDsiPjx0ZCBzdHls ZT0iaGVpZ2h0OjIwcHgiPiZuYnNwOzwvdGQ+PC90cj5cbgkJCTx0cj5cbgkJCQk8dGQgc3R5bGU9 IndpZHRoOmF1dG8haW1wb3J0YW50OyAiPlxuCQkJCQk8dGFibGUgYm9yZGVyPSIwIiBjZWxscGFk ZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIHN0eWxlPSJ3aWR0aDphdXRvO3dpZHRoOmF1dG8haW1w b3J0YW50O2JhY2tncm91bmQtY29sb3I6IzQzQTk0MjsgYm9yZGVyOjBweCBzb2xpZCAjNDNBOTQy OyBib3JkZXItcmFkaXVzOjI1cHg7IG1pbi13aWR0aDoxNjBweCFpbXBvcnRhbnQ7Ij5cbgkJCQkJ CTx0cj5cbgkJCQkJCQk8dGQgYWxpZ249ImNlbnRlciIgc3R5bGU9InBhZGRpbmc6MTBweCAzNnB4 OyI+PGEgaHJlZj0iaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWM5ZGY0 ZGNjZDM4NTkyMDRiZGUwNjFiZGU0ODQ4NDkxIiBzdHlsZT0iY29sb3I6I0ZGRkZGRjsgZm9udC1z aXplOjIwcHg7IHRleHQtZGVjb3JhdGlvbjpub25lOyI+Sm9pbiBtZWV0aW5nPC9hPjwvdGQ+XG4J CQkJCQk8L3RyPlxuCQkJCQk8L3RhYmxlPlxuCQkJCTwvdGQ+XG4JCQk8L3RyPlxuCQk8L3RhYmxl PlxuXG4gPEZPTlQgc2l6ZT0iMiIgQ09MT1I9IiNGRjAwMDAiIHN0eWxlPSJmb250LWZhbWlseTog QXJpYWw7Ij48L0ZPTlQ+XG48Rk9OVCBTSVpFPSIxIiBGQUNFPSJBUklBTCI+Jm5ic3A7PEJSPiZu YnNwOzxCUj48L0ZPTlQ+XG5cbiZuYnNwOyA8QlI+PEZPTlQgU0laRT0iNCIgRkFDRT0iQVJJQUwi PjxGT05UIFNJWkU9IjMiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+Sm9pbiBieSBwaG9u ZTwvRk9OVD4gJm5ic3A7IDxCUj48Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzY2NjY2NiIgRkFDRT0i YXJpYWwiPjxiPjxhIGhyZWY9J3RlbDolMkIxLTY1MC00NzktMzIwOCwsKjAxKjYxODUzODA3NyUy MyUyMyowMSonIHN0eWxlPSdjb2xvcjojMDBBRkY5OyAgdGV4dC1kZWNvcmF0aW9uOm5vbmU7IGZv bnQtZmFtaWx5OiBBcmlhbDtmb250LXNpemU6IDE0cHg7bGluZS1oZWlnaHQ6IDI0cHg7Jz4xLTY1 MC00NzktMzIwODwvYT48L2I+IENhbGwtaW4gdG9sbCBudW1iZXIgKFVTL0NhbmFkYSk8L0ZPTlQ+ ICZuYnNwOyA8QlI+PEZPTlQgU0laRT0iMiIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj48 YSBocmVmPSJodHRwczovL2lldGYud2ViZXguY29tL2lldGYvZ2xvYmFsY2FsbGluLnBocD9NVElE PW0yMzdmYTExMTExNThjNjk2MWJlOWZjOGJhNGM4NTk5OSIgc3R5bGU9InRleHQtZGVjb3JhdGlv bjpub25lO2ZvbnQtc2l6ZToxNHB4O2NvbG9yOiMwMEFGRjkiPkdsb2JhbCBjYWxsLWluIG51bWJl cnM8L2E+PC9GT05UPiZuYnNwOyA8QlI+PEJSPjxCUj5cblxuPHRhYmxlPjx0ciBzdHlsZT0ibGlu ZS1oZWlnaHQ6IDIwcHg7Ij48dGQgc3R5bGU9ImhlaWdodDoyMHB4Ij4mbmJzcDs8L3RkPjwvdHI+ PC90YWJsZT5cblxuPEZPTlQgU0laRT0iNCIgRkFDRT0iQVJJQUwiPjxGT05UIFNJWkU9IjMiIENP TE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+Sm9pbiBmcm9tIGEgdmlkZW8gc3lzdGVtIG9yIGFw cGxpY2F0aW9uPC9GT05UPjxCUj48Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzY2NjY2NiIgRkFDRT0i YXJpYWwiPkRpYWw8L0ZPTlQ+IDxhIGhyZWY9InNpcDo2MTg1MzgwNzdAaWV0Zi53ZWJleC5jb20i PjxGT05UIFNJWkU9IjIiIENPTE9SPSIjMDBBRkY5IiBGQUNFPSJhcmlhbCI+NjE4NTM4MDc3QGll dGYud2ViZXguY29tPC9GT05UPjwvYT4mbmJzcDsgPEJSPjxGT05UIFNJWkU9IjIiIENPTE9SPSIj NjY2NjY2IiBGQUNFPSJhcmlhbCI+WW91IGNhbiBhbHNvIGRpYWwgMTczLjI0My4yLjY4IGFuZCBl bnRlciB5b3VyIG1lZXRpbmcgbnVtYmVyLjwvRk9OVD4gJm5ic3A7IDxCUj48L0ZPTlQ+Jm5ic3A7 IDxCUj5cblxuPHRhYmxlIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCI+PHRyPjx0ZCAg c3R5bGU9ImNvbG9yOiAjMDAwMDAwOyBmb250LWZhbWlseTogQXJpYWw7Zm9udC1zaXplOiAxMnB4 OyBmb250LXdlaWdodDogYm9sZDsgbGluZS1oZWlnaHQ6IDI0cHg7Ij48Yj5Kb2luIHVzaW5nIE1p Y3Jvc29mdCBMeW5jIG9yIE1pY3Jvc29mdCBTa3lwZSBmb3IgQnVzaW5lc3M8L2I+PC90ZD48L3Ry Pjx0ciBzdHlsZT0ibWFyZ2luOjBweCI+PHRkIHN0eWxlPSJjb2xvcjogIzMzMzMzMzsgZm9udC1m YW1pbHk6IEFyaWFsOyBmb250LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAyNHB4OyI+RGlhbCA8 YSBocmVmPSIgc2lwOjYxODUzODA3Ny5pZXRmQGx5bmMud2ViZXguY29tIiAgIHN0eWxlPSJ0ZXh0 LWRlY29yYXRpb246bm9uZTtjb2xvcjojMDBBRkY5Ij42MTg1MzgwNzcuaWV0ZkBseW5jLndlYmV4 LmNvbTwvYT48L3RkPjwvdHI+PC90YWJsZT5cblxuCQkJPHRhYmxlIHN0eWxlPSJ3aWR0aDogMTAw JTsiIGFsaWduPSJsZWZ0IiBjbGFzcz0ibWFpbiI+XG4gICAgICAgICAgICAgICAgPHRyIHN0eWxl PSJoZWlnaHQ6IDcycHgiPjx0ZD4mbmJzcDs8L3RkPjwvdHI+XG4JCQkJPHRyPlxuCQkJCQk8dGQg c3R5bGU9ImhlaWdodDogMjRweDsgY29sb3I6ICMwMDAwMDA7IGZvbnQtZmFtaWx5OkFyaWFsOyBm b250LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAyNHB4OyI+TmVlZCBoZWxwPyBHbyB0byA8YSBo cmVmPSJodHRwOi8vaGVscC53ZWJleC5jb20iIHN0eWxlPSJjb2xvcjojMDQ5RkQ5OyB0ZXh0LWRl Y29yYXRpb246bm9uZTsiPmh0dHA6Ly9oZWxwLndlYmV4LmNvbTwvYT5cbgkJCQkJPC90ZD5cbgkJ CQk8L3RyPlxuICAgICAgICAgICAgICAgIDx0ciBzdHlsZT0iaGVpZ2h0OiA0NHB4Ij48dGQ+Jm5i c3A7PC90ZD48L3RyPlxuCQkJPC90YWJsZT5cbgkJPC90ZD5cbgk8L3RyPlxuPC90YWJsZT5cbg0K U1VNTUFSWTpFTVUgSW50ZXJpbSBNZWV0aW5nDQpQUklPUklUWTo1DQpDTEFTUzpQVUJMSUMNCkJF R0lOOlZBTEFSTQ0KVFJJR0dFUjotUFQxME0NCkFDVElPTjpESVNQTEFZDQpERVNDUklQVElPTjpS ZW1pbmRlcg0KRU5EOlZBTEFSTQ0KRU5EOlZFVkVOVA0KRU5EOlZDQUxFTkRBUg0K ------=_Part_774756_1066391230.1589817950799-- ------=_Part_774755_1098818136.1589817950799 Content-Type: application/octet-stream; name="Webex_Meeting.ics" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Webex_Meeting.ics" QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vTWljcm9zb2Z0IENvcnBvcmF0aW9uLy9PdXRsb29r IDEwLjAgTUlNRURJUi8vRU4NClZFUlNJT046Mi4wDQpNRVRIT0Q6UkVRVUVTVA0KQkVHSU46VlRJ TUVaT05FDQpUWklEOkV1cm9wZS9IZWxzaW5raQ0KVFpVUkw6aHR0cDovL3R6dXJsLm9yZy96b25l aW5mby1vdXRsb29rL0V1cm9wZS9IZWxzaW5raQ0KWC1MSUMtTE9DQVRJT046RXVyb3BlL0hlbHNp bmtpDQpCRUdJTjpEQVlMSUdIVA0KVFpPRkZTRVRGUk9NOiswMjAwDQpUWk9GRlNFVFRPOiswMzAw DQpUWk5BTUU6RUVTVA0KRFRTVEFSVDoxOTcwMDMyOVQwMzAwMDANClJSVUxFOkZSRVE9WUVBUkxZ O0JZTU9OVEg9MztCWURBWT0tMVNVDQpFTkQ6REFZTElHSFQNCkJFR0lOOlNUQU5EQVJEDQpUWk9G RlNFVEZST006KzAzMDANClRaT0ZGU0VUVE86KzAyMDANClRaTkFNRTpFRVQNCkRUU1RBUlQ6MTk3 MDEwMjVUMDQwMDAwDQpSUlVMRTpGUkVRPVlFQVJMWTtCWU1PTlRIPTEwO0JZREFZPS0xU1UNCkVO RDpTVEFOREFSRA0KRU5EOlZUSU1FWk9ORQ0KQkVHSU46VkVWRU5UDQpEVFNUQU1QOjIwMjAwNTE4 VDE2MDU1MFoNCkFUVEVOREVFO0NOPSJlbXVAaWV0Zi5vcmciO1JPTEU9UkVRLVBBUlRJQ0lQQU5U O1JTVlA9VFJVRTpNQUlMVE86ZW11QGlldGYub3JnDQpPUkdBTklaRVI7Q049IkVNVSBXb3JraW5n IEdyb3VwIjpNQUlMVE86ZW11LWNoYWlyc0BpZXRmLm9yZw0KRFRTVEFSVDtUWklEPUV1cm9wZS9I ZWxzaW5raToyMDIwMDUyMlQxODAwMDANCkRURU5EO1RaSUQ9RXVyb3BlL0hlbHNpbmtpOjIwMjAw NTIyVDE5MzAwMA0KTE9DQVRJT046aHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01U SUQ9bWM5ZGY0ZGNjZDM4NTkyMDRiZGUwNjFiZGU0ODQ4NDkxDQpUUkFOU1A6T1BBUVVFDQpTRVFV RU5DRToxNTg5ODE3OTUwDQpVSUQ6ZTU2MGZkOTgtNzYyZi00MmVkLTg1YTAtNWQyNWU0ZjczODVh DQpERVNDUklQVElPTjpcblxuXG5cbkpPSU4gV0VCRVggTUVFVElOR1xuaHR0cHM6Ly9pZXRmLndl YmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWM5ZGY0ZGNjZDM4NTkyMDRiZGUwNjFiZGU0ODQ4NDkx XG5NZWV0aW5nIG51bWJlciAoYWNjZXNzIGNvZGUpOiA2MTggNTM4IDA3N1xuXG5cbk1lZXRpbmcg cGFzc3dvcmQ6IFN4MmVkZjRtV1UzXG5cblxuXG5KT0lOIEJZIFBIT05FXG4xLTY1MC00NzktMzIw OCBDYWxsLWluIHRvbGwgbnVtYmVyIChVUy9DYW5hZGEpXG5UYXAgaGVyZSB0byBjYWxsIChtb2Jp bGUgcGhvbmVzIG9ubHksIGhvc3RzIG5vdCBzdXBwb3J0ZWQpOiB0ZWw6JTJCMS02NTAtNDc5LTMy MDgsLCowMSo2MTg1MzgwNzclMjMlMjMqMDEqXG5cbkdsb2JhbCBjYWxsLWluIG51bWJlcnNcbmh0 dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9nbG9iYWxjYWxsaW4ucGhwP01USUQ9bTIzN2ZhMTEx MTE1OGM2OTYxYmU5ZmM4YmE0Yzg1OTk5XG5cblxuSk9JTiBGUk9NIEEgVklERU8gU1lTVEVNIE9S IEFQUExJQ0FUSU9OXG5EaWFsIHNpcDo2MTg1MzgwNzdAaWV0Zi53ZWJleC5jb21cbllvdSBjYW4g YWxzbyBkaWFsIDE3My4yNDMuMi42OCBhbmQgZW50ZXIgeW91ciBtZWV0aW5nIG51bWJlci5cblxu XG5Kb2luIHVzaW5nIE1pY3Jvc29mdCBMeW5jIG9yIE1pY3Jvc29mdCBTa3lwZSBmb3IgQnVzaW5l c3NcbkRpYWwgc2lwOjYxODUzODA3Ny5pZXRmQGx5bmMud2ViZXguY29tXG5cblxuXG5DYW4ndCBq b2luIHRoZSBtZWV0aW5nP1xuaHR0cHM6Ly9jb2xsYWJvcmF0aW9uaGVscC5jaXNjby5jb20vYXJ0 aWNsZS9XQlgwMDAwMjkwNTVcblxuXG5JTVBPUlRBTlQgTk9USUNFOiBQbGVhc2Ugbm90ZSB0aGF0 IHRoaXMgV2ViZXggc2VydmljZSBhbGxvd3MgYXVkaW8gYW5kIG90aGVyIGluZm9ybWF0aW9uIHNl bnQgZHVyaW5nIHRoZSBzZXNzaW9uIHRvIGJlIHJlY29yZGVkLCB3aGljaCBtYXkgYmUgZGlzY292 ZXJhYmxlIGluIGEgbGVnYWwgbWF0dGVyLiBCeSBqb2luaW5nIHRoaXMgc2Vzc2lvbiwgeW91IGF1 dG9tYXRpY2FsbHkgY29uc2VudCB0byBzdWNoIHJlY29yZGluZ3MuIElmIHlvdSBkbyBub3QgY29u c2VudCB0byBiZWluZyByZWNvcmRlZCwgZGlzY3VzcyB5b3VyIGNvbmNlcm5zIHdpdGggdGhlIGhv c3Qgb3IgZG8gbm90IGpvaW4gdGhlIHNlc3Npb24uXG4NClgtQUxULURFU0M7Rk1UVFlQRT10ZXh0 L2h0bWw6PHN0eWxlIHR5cGU9InRleHQvY3NzIj5cbioge1xuICAgIHBhZGRpbmc6IDA7ICAgIG1h cmdpbjogMDt9XG50YWJsZSB7XG4JYm9yZGVyLWNvbGxhcHNlOiBzZXBhcmF0ZTsgd2lkdGggPTEw MCU7CWJvcmRlcjogMDsJYm9yZGVyLXNwYWNpbmc6IDA7fVxuXG50ciB7XG4JbGluZS1oZWlnaHQ6 IDE4cHg7fVxuXG5hLCB0ZCB7XG4JZm9udC1zaXplOiAxNHB4Owlmb250LWZhbWlseTogQXJpYWw7 CWNvbG9yOiAjMzMzOwl3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7CXdvcmQtYnJlYWs6IG5vcm1hbDsJ cGFkZGluZzogMDt9XG5cbi50aXRsZSB7XG4JZm9udC1zaXplOiAyOHB4O31cblxuLmltYWdlIHtc bgl3aWR0aDogYXV0bzsJbWF4LXdpZHRoOiBhdXRvO31cblxuLmZvb3RlciB7XG4Jd2lkdGg6IDYw NHB4O31cblxuLm1haW4ge1xuXG59QG1lZGlhIHNjcmVlbiBhbmQgKG1heC1kZXZpY2Utd2lkdGg6 IDgwMHB4KSB7XG4JLnRpdGxlIHtcbgkJZm9udC1zaXplOiAyMnB4ICFpbXBvcnRhbnQ7CX1cbgku aW1hZ2Uge1xuCQl3aWR0aDogYXV0byAhaW1wb3J0YW50OwkJbWF4LXdpZHRoOiAxMDAlICFpbXBv cnRhbnQ7CX1cbgkuZm9vdGVyIHtcbgkJd2lkdGg6IDEwMCUgIWltcG9ydGFudDsJCW1heC13aWR0 aDogNjA0cHggIWltcG9ydGFudFxuCX1cbgkubWFpbiB7XG4JCXdpZHRoOiAxMDAlICFpbXBvcnRh bnQ7CQltYXgtd2lkdGg6IDYwNHB4ICFpbXBvcnRhbnRcbgl9XG59XG48L3N0eWxlPlxuXG48dGFi bGUgYmdjb2xvcj0iI0ZGRkZGRiIgc3R5bGU9InBhZGRpbmc6IDA7IG1hcmdpbjogMDsgYm9yZGVy OiAwOyB3aWR0aDogMTAwJTsiIGFsaWduPSJsZWZ0Ij5cbgk8dHIgc3R5bGU9ImhlaWdodDogMjhw eCI+PHRkPiZuYnNwOzwvdGQ+PC90cj5cbgk8dHI+XG4JCTx0ZCBhbGlnbj0ibGVmdCIgc3R5bGU9 InBhZGRpbmc6IDAgMjBweDsgbWFyZ2luOiAwIj5cbgkJCTwhLS08dGFibGUgYmdjb2xvcj0iI0ZG RkZGRiIgc3R5bGU9ImJvcmRlcjogMHB4OyB3aWR0aDogMTAwJTsgcGFkZGluZy1sZWZ0OiA1MHB4 OyBwYWRkaW5nLXJpZ2h0OiA1MHB4OyIgYWxpZ249ImxlZnQiIGNsYXNzPSJtYWluIj5cbgkJCQk8 dHI+XG4JCQkJCTx0ZCBhbGlnbj0iY2VudGVyIiB2YWxpZ249InRvcCIgPiZuYnNwOwkJCQkJPC90 ZD5cbgkJCQk8L3RyPlxuCQkJPC90YWJsZT4tLT5cblxuXG5cblxuXG4JCQk8dGFibGU+XG4JCQkJ PHRyPlxuCQkJCQk8dGQ+XG4JCQkJCQk8Rk9OVCBTSVpFPSI0IiBDT0xPUj0iIzY2NjY2NiIgRkFD RT0iYXJpYWwiPldoZW4gaXQncyB0aW1lLCBqb2luIHRoZSBXZWJleCBtZWV0aW5nIGhlcmUuPC9G T05UPlxuCQkJCQk8L3RkPlxuCQkJCTwvdHI+XG4JCQkJPHRyIHN0eWxlPSJsaW5lLWhlaWdodDog MjBweDsiPjx0ZCBzdHlsZT0iaGVpZ2h0OjIwcHgiPiZuYnNwOzwvdGQ+PC90cj5cbgkJCQk8dHI+ XG4JCQkJCTx0ZD5cbgkJCQkJCTxGT05UIFNJWkU9IjIiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJh cmlhbCI+TWVldGluZyBudW1iZXIgKGFjY2VzcyBjb2RlKTogNjE4IDUzOCAwNzc8L0ZPTlQ+XG4J CQkJCTwvdGQ+XG4JCQkJPC90cj5cbgkJCTwvdGFibGU+XG4JCQlcbgkJCTx0YWJsZT48dHI+PHRk PjxGT05UIFNJWkU9IjIiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+TWVldGluZyBwYXNz d29yZDo8L0ZPTlQ+PC90ZD48dGQ+PEZPTlQgU0laRT0iMiIgIENPTE9SPSIjNjY2NjY2IiBGQUNF PSJhcmlhbCI+U3gyZWRmNG1XVTM8L0ZPTlQ+PC90ZD48L3RyPjwvdGFibGU+XG5cbiAgICAgICAg PHRhYmxlPlxuICAgICAgICAJPHRyIHN0eWxlPSJsaW5lLWhlaWdodDogMjBweDsiPjx0ZCBzdHls ZT0iaGVpZ2h0OjIwcHgiPiZuYnNwOzwvdGQ+PC90cj5cbgkJCTx0cj5cbgkJCQk8dGQgc3R5bGU9 IndpZHRoOmF1dG8haW1wb3J0YW50OyAiPlxuCQkJCQk8dGFibGUgYm9yZGVyPSIwIiBjZWxscGFk ZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIHN0eWxlPSJ3aWR0aDphdXRvO3dpZHRoOmF1dG8haW1w b3J0YW50O2JhY2tncm91bmQtY29sb3I6IzQzQTk0MjsgYm9yZGVyOjBweCBzb2xpZCAjNDNBOTQy OyBib3JkZXItcmFkaXVzOjI1cHg7IG1pbi13aWR0aDoxNjBweCFpbXBvcnRhbnQ7Ij5cbgkJCQkJ CTx0cj5cbgkJCQkJCQk8dGQgYWxpZ249ImNlbnRlciIgc3R5bGU9InBhZGRpbmc6MTBweCAzNnB4 OyI+PGEgaHJlZj0iaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWM5ZGY0 ZGNjZDM4NTkyMDRiZGUwNjFiZGU0ODQ4NDkxIiBzdHlsZT0iY29sb3I6I0ZGRkZGRjsgZm9udC1z aXplOjIwcHg7IHRleHQtZGVjb3JhdGlvbjpub25lOyI+Sm9pbiBtZWV0aW5nPC9hPjwvdGQ+XG4J CQkJCQk8L3RyPlxuCQkJCQk8L3RhYmxlPlxuCQkJCTwvdGQ+XG4JCQk8L3RyPlxuCQk8L3RhYmxl PlxuXG4gPEZPTlQgc2l6ZT0iMiIgQ09MT1I9IiNGRjAwMDAiIHN0eWxlPSJmb250LWZhbWlseTog QXJpYWw7Ij48L0ZPTlQ+XG48Rk9OVCBTSVpFPSIxIiBGQUNFPSJBUklBTCI+Jm5ic3A7PEJSPiZu YnNwOzxCUj48L0ZPTlQ+XG5cbiZuYnNwOyA8QlI+PEZPTlQgU0laRT0iNCIgRkFDRT0iQVJJQUwi PjxGT05UIFNJWkU9IjMiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+Sm9pbiBieSBwaG9u ZTwvRk9OVD4gJm5ic3A7IDxCUj48Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzY2NjY2NiIgRkFDRT0i YXJpYWwiPjxiPjxhIGhyZWY9J3RlbDolMkIxLTY1MC00NzktMzIwOCwsKjAxKjYxODUzODA3NyUy MyUyMyowMSonIHN0eWxlPSdjb2xvcjojMDBBRkY5OyAgdGV4dC1kZWNvcmF0aW9uOm5vbmU7IGZv bnQtZmFtaWx5OiBBcmlhbDtmb250LXNpemU6IDE0cHg7bGluZS1oZWlnaHQ6IDI0cHg7Jz4xLTY1 MC00NzktMzIwODwvYT48L2I+IENhbGwtaW4gdG9sbCBudW1iZXIgKFVTL0NhbmFkYSk8L0ZPTlQ+ ICZuYnNwOyA8QlI+PEZPTlQgU0laRT0iMiIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj48 YSBocmVmPSJodHRwczovL2lldGYud2ViZXguY29tL2lldGYvZ2xvYmFsY2FsbGluLnBocD9NVElE PW0yMzdmYTExMTExNThjNjk2MWJlOWZjOGJhNGM4NTk5OSIgc3R5bGU9InRleHQtZGVjb3JhdGlv bjpub25lO2ZvbnQtc2l6ZToxNHB4O2NvbG9yOiMwMEFGRjkiPkdsb2JhbCBjYWxsLWluIG51bWJl cnM8L2E+PC9GT05UPiZuYnNwOyA8QlI+PEJSPjxCUj5cblxuPHRhYmxlPjx0ciBzdHlsZT0ibGlu ZS1oZWlnaHQ6IDIwcHg7Ij48dGQgc3R5bGU9ImhlaWdodDoyMHB4Ij4mbmJzcDs8L3RkPjwvdHI+ PC90YWJsZT5cblxuPEZPTlQgU0laRT0iNCIgRkFDRT0iQVJJQUwiPjxGT05UIFNJWkU9IjMiIENP TE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+Sm9pbiBmcm9tIGEgdmlkZW8gc3lzdGVtIG9yIGFw cGxpY2F0aW9uPC9GT05UPjxCUj48Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzY2NjY2NiIgRkFDRT0i YXJpYWwiPkRpYWw8L0ZPTlQ+IDxhIGhyZWY9InNpcDo2MTg1MzgwNzdAaWV0Zi53ZWJleC5jb20i PjxGT05UIFNJWkU9IjIiIENPTE9SPSIjMDBBRkY5IiBGQUNFPSJhcmlhbCI+NjE4NTM4MDc3QGll dGYud2ViZXguY29tPC9GT05UPjwvYT4mbmJzcDsgPEJSPjxGT05UIFNJWkU9IjIiIENPTE9SPSIj NjY2NjY2IiBGQUNFPSJhcmlhbCI+WW91IGNhbiBhbHNvIGRpYWwgMTczLjI0My4yLjY4IGFuZCBl bnRlciB5b3VyIG1lZXRpbmcgbnVtYmVyLjwvRk9OVD4gJm5ic3A7IDxCUj48L0ZPTlQ+Jm5ic3A7 IDxCUj5cblxuPHRhYmxlIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCI+PHRyPjx0ZCAg c3R5bGU9ImNvbG9yOiAjMDAwMDAwOyBmb250LWZhbWlseTogQXJpYWw7Zm9udC1zaXplOiAxMnB4 OyBmb250LXdlaWdodDogYm9sZDsgbGluZS1oZWlnaHQ6IDI0cHg7Ij48Yj5Kb2luIHVzaW5nIE1p Y3Jvc29mdCBMeW5jIG9yIE1pY3Jvc29mdCBTa3lwZSBmb3IgQnVzaW5lc3M8L2I+PC90ZD48L3Ry Pjx0ciBzdHlsZT0ibWFyZ2luOjBweCI+PHRkIHN0eWxlPSJjb2xvcjogIzMzMzMzMzsgZm9udC1m YW1pbHk6IEFyaWFsOyBmb250LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAyNHB4OyI+RGlhbCA8 YSBocmVmPSIgc2lwOjYxODUzODA3Ny5pZXRmQGx5bmMud2ViZXguY29tIiAgIHN0eWxlPSJ0ZXh0 LWRlY29yYXRpb246bm9uZTtjb2xvcjojMDBBRkY5Ij42MTg1MzgwNzcuaWV0ZkBseW5jLndlYmV4 LmNvbTwvYT48L3RkPjwvdHI+PC90YWJsZT5cblxuCQkJPHRhYmxlIHN0eWxlPSJ3aWR0aDogMTAw JTsiIGFsaWduPSJsZWZ0IiBjbGFzcz0ibWFpbiI+XG4gICAgICAgICAgICAgICAgPHRyIHN0eWxl PSJoZWlnaHQ6IDcycHgiPjx0ZD4mbmJzcDs8L3RkPjwvdHI+XG4JCQkJPHRyPlxuCQkJCQk8dGQg c3R5bGU9ImhlaWdodDogMjRweDsgY29sb3I6ICMwMDAwMDA7IGZvbnQtZmFtaWx5OkFyaWFsOyBm b250LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAyNHB4OyI+TmVlZCBoZWxwPyBHbyB0byA8YSBo cmVmPSJodHRwOi8vaGVscC53ZWJleC5jb20iIHN0eWxlPSJjb2xvcjojMDQ5RkQ5OyB0ZXh0LWRl Y29yYXRpb246bm9uZTsiPmh0dHA6Ly9oZWxwLndlYmV4LmNvbTwvYT5cbgkJCQkJPC90ZD5cbgkJ CQk8L3RyPlxuICAgICAgICAgICAgICAgIDx0ciBzdHlsZT0iaGVpZ2h0OiA0NHB4Ij48dGQ+Jm5i c3A7PC90ZD48L3RyPlxuCQkJPC90YWJsZT5cbgkJPC90ZD5cbgk8L3RyPlxuPC90YWJsZT5cbg0K U1VNTUFSWTpFTVUgSW50ZXJpbSBNZWV0aW5nDQpQUklPUklUWTo1DQpDTEFTUzpQVUJMSUMNCkJF R0lOOlZBTEFSTQ0KVFJJR0dFUjotUFQxME0NCkFDVElPTjpESVNQTEFZDQpERVNDUklQVElPTjpS ZW1pbmRlcg0KRU5EOlZBTEFSTQ0KRU5EOlZFVkVOVA0KRU5EOlZDQUxFTkRBUg0K ------=_Part_774755_1098818136.1589817950799-- From nobody Mon May 18 09:11:50 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5F753A082A for ; Mon, 18 May 2020 09:11:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.202 X-Spam-Level: X-Spam-Status: No, score=-0.202 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CWt80HWPxHes for ; Mon, 18 May 2020 09:11:47 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20052.outbound.protection.outlook.com [40.107.2.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 124CF3A081B for ; Mon, 18 May 2020 09:11:46 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=e3BsjVSKS25/BHzXgRwMS9BndsdL7EdtIk8gCvF6GX+JMOILFMvqZbAQxk2IboqbM8n+qq+y209H30xrwcFLRks+1J2MvH2yJOBhS0HaWuPU387NsgGWfBq8MIpC1NVXiXEm7TmyVmeyB3QyqmLoxbCzrS0WtcJV8SoBKisqRwmSeFrr5Ae1igIyIff38JlzNhfRy6B5DEz2oNeqI2UgQi6+C7NepE8OwfNo6aTj3awhst9hI3Xor4IfntXuhqgwZaoEDacdJvT6AU7U31CbGH8xBskkBp7ILdXEPbd7DT4SGJoUIMQj7XqVVZ3rQ79ZLhmG+LAG7Wf90YRLweHg+A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/gGQGC5UMXKhh7AUP+jPM+c5OCAT+4DFXBZE/IXrMv8=; b=QIH/eKiDT5/zccj/BxfSLWyIN3aGY0ssJYhZYYZFle0rX758I7XcC+fOz+ZBoTBCa8uQ60SpZ+dlAo1u1ztrIn8Mb6Kpc8roDR3udZRU4Nd75Nhtkfzw6RL5OLJKj6Nj61tLn6P8vZSvCSiVlwuswpJJuWB/ppTJ10vgbZFY+2XsDQMZtz2S2OMO+dfwkvdZ499ZFGEbdriWnbGckDTqc4umpzrpywk5t20+HSiBRw6wdcXrkaKclaakdFLRxy7IAOYp8HMpOLCElKrl0cXk/PLPcqcwkcU2zjqFkclta9BvDvscQPdpOJZ5+i3BMQy968oJwQFm8VgFQZ6uR4YoNA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/gGQGC5UMXKhh7AUP+jPM+c5OCAT+4DFXBZE/IXrMv8=; b=sW9J+HStEuOQ9Rlppm21NPu00Q6NhskwQjQUlN1IBUwVWSG54mXii9+v9T9z3SalCsb4ehZEdMQrxLSOQg15g627FkLI0kn2qocW3icopyymFBIYzZp9cyNLnHCshkfXVsJlsJLymdD9kLMPXeur11OEgvpBgPc6Zkup4TwqubU= Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com (2603:10a6:3:99::15) by HE1PR0701MB2953.eurprd07.prod.outlook.com (2603:10a6:3:51::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3021.13; Mon, 18 May 2020 16:11:44 +0000 Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74]) by HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74%6]) with mapi id 15.20.3021.019; Mon, 18 May 2020 16:11:44 +0000 From: Mohit Sethi M To: "emu@ietf.org" Thread-Topic: Request for presentations during virtual interim Thread-Index: AQHWLS8Gs7+47SgrEE+u25CtMgFx3w== Date: Mon, 18 May 2020 16:11:44 +0000 Message-ID: <9337fc47-dd93-d5da-43b7-bd179bb1fb15@ericsson.com> References: <008d10ab-8f20-429c-6319-692ddb2b9228@ericsson.com> <08230192-bed7-632a-3082-a3f8bde30156@ericsson.com> <8a80abb7-6839-f9ba-5f50-81cb48f6b805@ericsson.com> In-Reply-To: <8a80abb7-6839-f9ba-5f50-81cb48f6b805@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [178.55.173.23] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 00263860-7710-454d-bd9d-08d7fb4628b5 x-ms-traffictypediagnostic: HE1PR0701MB2953: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4941; x-forefront-prvs: 04073E895A x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 7xWZwtSMuOwr46S3BfWWXpOi1ZKGUVjYq27Lp1t6aPE8BEsojdnfT7911OTWezXqgYqR7RN8mcilPPLox8LDTLwDmV5FMzjZPjECg2P6Fln+4aL/3yA15miSaN4ASYcN2OjTKw5JCBd9Da8ddCD2F5QaZBn0fXSNiydE+hfk0UKSjZJfmjeSIxzqLyA/rT02el6XV1YzgHN5p+qBGz4WW3kdDJTKxJXYEZ1CLmLnf2UKwaCXQHXNQFTkBB5nW8ZOrqlb9voe0u+cEUTJlt/mgwnfiM8X6Qp3RAn5rI8Ha+iGmskjDMqfKr0aghIbj2O8png9j1MA/WRi713NuC6EoNzX8GWOJeoZYnBtPpX41c8SUV8WCKWhE3gepXZOUFujTood3cvIRuCGGKMaKfP5oQe/W43z9++2DYPFIwug3lLnG3ErIimWlWjzVBQhyY9673yS7KwOlwS2yKrSvf2ABw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB2761.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(39860400002)(376002)(366004)(396003)(346002)(8936002)(71200400001)(316002)(31696002)(6916009)(5660300002)(8676002)(6486002)(6512007)(6506007)(53546011)(26005)(478600001)(86362001)(966005)(16799955002)(31686004)(2906002)(2616005)(66556008)(64756008)(36756003)(76116006)(66946007)(186003)(66446008)(66476007)(43740500002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: F3X21eeja0TL55feEIaqE3PpMs9nmCAPgAEXlWE6bewf8Agl/NciVDV+qX7a5AC2jQfwIAVGxtp9Nq+nv8DAIdiJXw3YWUpQhFS3XQh4ILb/sJ/PeZf0xZRLUhjwnethjbYd+R0EX5kql98qDnaFrlw+/gGTK2Ba87r+Bn4yubZHFb1ndSiMQGItCzYBFNRWJmRiU8cR/gYrEyLLwln7qW1eOK7omfHImZic0DPfu8mfmOkLdDR2w6Q9kF3cfkGI7kg1QMf3zYi0SxDWyChkbSFR03lQPQLSpgPC+JkSAUbcJWUvAg4fS2+PGOCUSx9YEQh0+i8Atbm02YyQw0vY+T3WHTYWauT+/Q9fcxqQKGLXMqlWLHhXYdRSg7LQja5Iaz8/ZkjwgINLskP3K+t+bp1hYcbCDJNxvftrO+CktsCT37mjdaklvIUg6maDuUacCOxa1JJV7uf8lg1iktmfr/p7whibstPxISFavvNsKBE= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <89BFB4DB0F9CC54E933AD1B9B16AAB65@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 00263860-7710-454d-bd9d-08d7fb4628b5 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2020 16:11:44.3767 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: aOLQWZviLI4ELIB580vY1QfcaGLzAAcNm0QdEysy97dmaLz/7lT4TA9enufPGXGs3iij/JV5Skg2MepLekTKsTI0ROBWe+5rSikezLjucD8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2953 Archived-At: Subject: [Emu] Request for presentations during virtual interim X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 May 2020 16:11:49 -0000 RGVhciBhbGwsDQoNClRoZSB3ZWJleCBkZXRhaWxzIGZvciBvdXIgdmlydHVhbCBpbnRlcmltIG1l ZXRpbmcgb24gRnJpZGF5IHRoaXMgd2VlayBpcyANCm5vdyBwb3N0ZWQgdG8gdGhlIG1haWxpbmcg bGlzdC4gVGhleSBhcmUgY29waWVkIGJlbG93IGZvciBjb252ZW5pZW5jZS4NCg0KUGxlYXNlIGxl dCB1cyBrbm93IGlmIHlvdSBpbnRlbmQgdG8gcHJlc2VudC4gRG9uJ3QgZm9yZ2V0IHRvIGluY2x1 ZGUgdGhlIA0KdGl0bGUsIGFwcHJveGltYXRlIHRpbWUgbmVlZGVkLCBhbmQgYW55IGFzc29jaWF0 ZWQgZHJhZnRzLg0KDQpKb2UgYW5kIE1vaGl0DQoNCkpPSU4gV0VCRVggTUVFVElORyANCmh0dHBz Oi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW1jOWRmNGRjY2QzODU5MjA0YmRlMDYx YmRlNDg0ODQ5MSANCk1lZXRpbmcgbnVtYmVyIChhY2Nlc3MgY29kZSk6IDYxOCA1MzggMDc3IE1l ZXRpbmcgcGFzc3dvcmQ6IFN4MmVkZjRtV1UzDQoNCk9uIDUvNS8yMCAxMTozOCBBTSwgTW9oaXQg U2V0aGkgTSB3cm90ZToNCj4gVGhlIHBvbGwgaXMgbm93IGNsb3NlZC4gV2Ugd2lsbCBoYXZlIGEg OTAtbWludXRlIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nDQo+IGZvciBFTVUgb27CoCBNYXkgMjJu ZCwgMjAyMCBiZXR3ZWVuIDE1OjAwLTE2OjMwIFVUQy4NCj4NCj4gUGxlYXNlIHNlbmQgaW4gcmVx dWVzdHMgZm9yIHByZXNlbnRhdGlvbnMuIERvbid0IGZvcmdldCB0byBpbmNsdWRlIHRoZQ0KPiB0 aXRsZSwgYXBwcm94aW1hdGUgdGltZSBuZWVkZWQsIGFuZCBhbnkgYXNzb2NpYXRlZCBkcmFmdHMu DQo+DQo+IC0tTW9oaXQNCj4NCj4gT24gNC8yNC8yMCAzOjQ1IFBNLCBNb2hpdCBTZXRoaSBNIHdy b3RlOg0KPj4gRGVhciBhbGwsDQo+Pg0KPj4gUmVtaW5kZXI6IHBsZWFzZSByZXNwb25kIHRvIHRo ZSBwb2xsIGZvciBhIHBvdGVudGlhbCB2aXJ0dWFsIGludGVyaW0gaW4NCj4+IE1heTogaHR0cHM6 Ly9kb29kbGUuY29tL3BvbGwvdnh5NXZjNGczY25lZ3Bkcg0KPj4NCj4+IEpvZSBhbmQgTW9oaXQN Cj4+DQo+PiBPbiA0LzIwLzIwIDI6MTEgQU0sIE1vaGl0IFNldGhpIE0gd3JvdGU6DQo+Pj4gRGVh ciBhbGwsDQo+Pj4NCj4+PiBXZSBkaWQgbm90IGhhdmUgYSBmYWNlLXRvLWZhY2UgbWVldGluZyBp biBWYW5jb3V2ZXIgZm9yIElFVEYgMTA3LiBBdA0KPj4+IHRoaXMgcG9pbnQsIHRoZSBJRVRGIDEw OCBtZWV0aW5nIGluIE1hZHJpZCBpcyBhbHNvIHVuY2VydGFpbi4NCj4+Pg0KPj4+IFdlIGFyZSB0 aGVyZWZvcmUgY29uc2lkZXJpbmcgYSB2aXJ0dWFsIGludGVyaW0gbWVldGluZyBmb3IgRU1VIGR1 cmluZw0KPj4+IG1pZGRsZS9lbmQgb2YgTWF5IDIwMjAuIEhlcmUgYXJlIHNvbWUgcHJvcG9zZWQg ZGF0ZXMgYW5kIHRpbWUgc2xvdHM6DQo+Pj4gaHR0cHM6Ly9kb29kbGUuY29tL3BvbGwvdnh5NXZj NGczY25lZ3Bkcg0KPj4+DQo+Pj4gUGxlYXNlIGluZGljYXRlIHlvdXIgYXZhaWxhYmlsaXR5IQ0K Pj4+DQo+Pj4gSm9lIGFuZCBNb2hpdA0KPj4+DQo+Pj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4+PiBFbXUgbWFpbGluZyBsaXN0DQo+Pj4gRW11QGll dGYub3JnDQo+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lbXUNCj4+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PiBFbXUg bWFpbGluZyBsaXN0DQo+PiBFbXVAaWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZW11DQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+IEVtdSBtYWlsaW5nIGxpc3QNCj4gRW11QGlldGYub3JnDQo+IGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZW11DQo= From nobody Tue May 19 21:07:55 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 98C173A10FF; Tue, 19 May 2020 21:07:52 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IESG Secretary To: "IETF-Announce" Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.130.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <158994767246.5418.11400837091788105294@ietfa.amsl.com> Date: Tue, 19 May 2020 21:07:52 -0700 Archived-At: Subject: [Emu] EAP Method Update (emu) WG Virtual Meeting: 2020-05-22 CHANGED X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 May 2020 04:07:53 -0000 MEETING DETAILS HAVE CHANGED. SEE LATEST DETAILS BELOW. The EAP Method Update (emu) WG will hold a virtual interim meeting on 2020-05-22 from 18:00 to 19:30 Europe/Helsinki (15:00 to 16:30 UTC). Agenda: Tentative initial agenda: 1. Administrivia (5 Min) 2. TLS-based EAP types and TLS 1.3 (10 min) 3. TEAP errata and updates (15 min) 4. EAP-TLS-PSK (15 min) 4. EAP-NOOB (15 min) 5. TEAP-BRSKI (15 min) .... Information about remote participation: https://ietf.webex.com/ietf/j.php?MTID=mb600f143ab22ae46181f79da1d74e8fb From nobody Tue May 19 21:15:13 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 55BAA3A08A3; Tue, 19 May 2020 21:14:43 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IESG Secretary To: "IETF-Announce" Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.130.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <158994808325.24949.12623023275672718666@ietfa.amsl.com> Date: Tue, 19 May 2020 21:14:43 -0700 Archived-At: Subject: [Emu] EAP Method Update (emu) WG Virtual Meeting: 2020-05-22 CHANGED X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 May 2020 04:14:44 -0000 MEETING DETAILS HAVE CHANGED. SEE LATEST DETAILS BELOW. The EAP Method Update (emu) WG will hold a virtual interim meeting on 2020-05-22 from 18:00 to 19:30 Europe/Helsinki (15:00 to 16:30 UTC). Agenda: Tentative initial agenda: 1. Administrivia (5 Min) 2. TLS-based EAP types and TLS 1.3 (10 min) 3. TEAP errata and updates (15 min) 4. EAP-TLS-PSK (15 min) 4. EAP-NOOB (15 min) 5. TEAP-BRSKI (15 min) .... Information about remote participation: https://ietf.webex.com/ietf/j.php?MTID=mb600f143ab22ae46181f79da1d74e8fb From nobody Wed May 20 12:13:31 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE1F73A0A01 for ; Wed, 20 May 2020 06:56:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xg3JUb05Jfve for ; Wed, 20 May 2020 06:56:52 -0700 (PDT) Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CC303A09F8 for ; Wed, 20 May 2020 06:56:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=18085; q=dns/txt; s=iport; t=1589983012; x=1591192612; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=z7w/WYAHu90rNIoLma0GKsPwS3k2fSAqhkPfZv+H26c=; b=LyyVwJm8b8t/F07VpiImNMKnkjJQTGoLzyMnMYiLIhGsbwebZZ1Z29qF +1WGlKJg5WhlA+ULrQCaBe3WBtFJsFKaJMxbJLNHKJ+JIHY8eWH0cqprg 3UxJ0QWc1xIFzpUb+eICpIXix5CDYl93YO6XiLs2xESjhKwqxfvH+eTdV c=; X-IronPort-AV: E=Sophos; i="5.73,413,1583193600"; d="scan'208,217"; a="24049247" Received: from aer-iport-nat.cisco.com (HELO aer-core-3.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 20 May 2020 13:56:50 +0000 Received: from dhcp-10-61-103-179.cisco.com (dhcp-10-61-103-179.cisco.com [10.61.103.179]) by aer-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 04KDun1C004337 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 20 May 2020 13:56:49 GMT From: Eliot Lear Message-Id: <71B273AC-A87A-4662-90CA-BFF6503A0F5D@cisco.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_ED969EBA-715D-4690-BFB4-4FE8A4FE71AA" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Date: Wed, 20 May 2020 15:56:48 +0200 In-Reply-To: <20200509002042.GZ27494@kduck.mit.edu> Cc: RFC Errata System , hzhou@cisco.com, ncamwing@cisco.com, jsalowey@cisco.com, steve.hanna@infineon.com, rdd@cert.org, joe@salowey.net, mohit.m.sethi@ericsson.com, emu@ietf.org To: Benjamin Kaduk References: <20200504102000.851D1F406F5@rfc-editor.org> <20200509002042.GZ27494@kduck.mit.edu> X-Mailer: Apple Mail (2.3608.80.23.2.2) X-Outbound-SMTP-Client: 10.61.103.179, dhcp-10-61-103-179.cisco.com X-Outbound-Node: aer-core-3.cisco.com Archived-At: X-Mailman-Approved-At: Wed, 20 May 2020 12:13:19 -0700 Subject: Re: [Emu] [Technical Errata Reported] RFC7170 (6157) X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 May 2020 13:56:55 -0000 --Apple-Mail=_ED969EBA-715D-4690-BFB4-4FE8A4FE71AA Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Ben, My apologies for the delay. You are pointing out a separate issue that = might need to be opened, but I will do my best to discuss below: > On 9 May 2020, at 02:20, Benjamin Kaduk wrote: >=20 > On Mon, May 04, 2020 at 03:20:00AM -0700, RFC Errata System wrote: >> The following errata report has been submitted for RFC7170, >> "Tunnel Extensible Authentication Protocol (TEAP) Version 1". >>=20 >> -------------------------------------- >> You may review the report below and at: >> https://www.rfc-editor.org/errata/eid6157 >>=20 >> -------------------------------------- >> Type: Technical >> Reported by: Eliot Lear >>=20 >> Section: 4.2.9 >>=20 >> Original Text >> ------------- >> Status >>=20 >> The Status field is one octet. This indicates the result if the >> server does not process the action requested by the peer. >>=20 >> Corrected Text >> -------------- >> Status >>=20 >> The Status field is one octet. This indicates the result if the >> party who receives this TLV does not process the action. >>=20 >> Notes >> ----- >> The status field is carried in the "Request-Action" frame. As is = repeatedly stated in the chapeau of the section, the frame can be sent = either by the server or the peer. >=20 > This looks like one where I can't pick up on the needed context just = from > the section in question. The intent of the 'Status' field still seems > unclear: this text seems to suggest that it's a sort of "fallback" = error > code to use if the request to perform an action is ignored. But that > doesn't make much sense if I also look at the text about: >=20 > Two Request-Action TLVs MUST NOT occur in the same TEAP > packet if they have the same Status value. [...] >=20 > Why am I not allowed to have two requests that would get the same = treatment > if the request was ignored? I can=E2=80=99t answer this question authoritatively because I didn=E2=80=99= t write the RFC (;-), and in general the language here is hard to parse. = For instance, what does it mean for the request-action frame to have a = PKCS#10 request in it? Does that mean that the receiving peer must = either attempt to generate a PKCS#7 message or return the most fatal of = (result(PKCS#7 generation),=E2=80=9DStatus=E2=80=9D)? That doesn=E2=80=99= t seem to make sense, because the conversation could continue if Status = =3D=3D non-fatal without the server having processed the request. On = the other hand, sending a normal PKCS#10 frame seems to have nearly = identical semantics. Eliot >=20 > Thanks for helping me understand, >=20 > Ben --Apple-Mail=_ED969EBA-715D-4690-BFB4-4FE8A4FE71AA Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Ben,

My apologies = for the delay.  You are pointing out a separate issue that might need to be opened, but I = will do my best to discuss below:

On 9 May = 2020, at 02:20, Benjamin Kaduk <kaduk@mit.edu> wrote:

On Mon, May 04, 2020 at = 03:20:00AM -0700, RFC Errata System wrote:
The following errata report has been = submitted for RFC7170,
"Tunnel Extensible Authentication = Protocol (TEAP) Version 1".

--------------------------------------
You may = review the report below and at:
https://www.rfc-editor.org/errata/eid6157
--------------------------------------
Type: = Technical
Reported by: Eliot Lear = <lear@cisco.com>

Section: 4.2.9

Original Text
-------------
 Status

     The Status field is one octet. =  This indicates the result if the
     server does not process the = action requested by the peer.

Corrected = Text
--------------
 Status

     The Status field = is one octet.  This indicates the result if the
     party who receives this TLV = does not process the action.

Notes
-----
The status field is carried in the = "Request-Action" frame.  As is repeatedly stated in the chapeau of = the section, the frame can be sent either by the server or the peer.

This looks like one where I can't pick up on the needed = context just from
the section in question.  The intent of the 'Status' = field still seems
unclear: this text seems to suggest that it's a sort of = "fallback" error
code to use if the request to perform an action is ignored. =  But that
doesn't make much sense if I also look at the text = about:

          &nb= sp;    Two Request-Action TLVs MUST NOT occur in the = same TEAP
  packet if they have the same Status value. =  [...]

Why am I not = allowed to have two requests that would get the same treatment
if the request was = ignored?

I can=E2=80= =99t answer this question authoritatively because I didn=E2=80=99t write = the RFC (;-), and in general the language here is hard to parse. =  For instance, what does it mean for the request-action frame to = have a PKCS#10 request in it?  Does that mean that the receiving = peer must either attempt to generate a PKCS#7 message or return the most = fatal of (result(PKCS#7 generation),=E2=80=9DStatus=E2=80=9D)? =  That doesn=E2=80=99t seem to make sense, because the conversation = could continue if Status =3D=3D non-fatal without the server having = processed the request.  On the other hand, sending a normal PKCS#10 = frame seems to have nearly identical semantics.

Eliot


Thanks for helping me understand,

Ben

= --Apple-Mail=_ED969EBA-715D-4690-BFB4-4FE8A4FE71AA-- From nobody Thu May 21 14:59:55 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED3D93A0C06 for ; Thu, 21 May 2020 14:59:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=salowey-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W96oLj2R4PFq for ; Thu, 21 May 2020 14:59:51 -0700 (PDT) Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F6A83A0C00 for ; Thu, 21 May 2020 14:59:51 -0700 (PDT) Received: by mail-qk1-x72b.google.com with SMTP id g185so8864843qke.7 for ; Thu, 21 May 2020 14:59:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salowey-net.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=HgIJT0QWyrPnFOxR1+UCrQAnnz3+Gy8uQdLHxaA42u0=; b=JLLI3q1eV/S+kR0CzXRQYLanAZAJEKZ6CAVz76jKsBRW6946zqLvs3sIxBNx1j2vrb O71IGQk1y5HUrrKuvOonXd5I7a/+xSbUMql1mAPf+nGUtWCOQgnCdQH70ptpNW0G2wNw T7lb/PiLkjjTfdn4ZJlocT3D4Odz4GyuGfiSH1ezHTrVDzy+Wl5yVWJB8tWxS88PYudf do37OeocXXIDMoVfRiTVMm9bcWBFc7lQpRBJ6cBAPlWbh/pNaSR1cF4go9upjUVEHzFy 00Qp0qmlpft/Q7Lx0X+ayurJfxscU1hLqkNroD4fQrCoXXunYO9EjvKGLNRa81wy7Ynh akfg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=HgIJT0QWyrPnFOxR1+UCrQAnnz3+Gy8uQdLHxaA42u0=; b=Ms+lAs0Fn+cYpP23usAmQDwh42TdN26vm3sH/ilaV/it6Zz05pnj9PBXu1aGydD93y TRBn/0DnRtgXVo+6O6z/h41xUaUBs/All/ighZz+SOVSfCHfxOq3GS6irdcYH+in3dD5 fwSlHxvRSgd9xfgF17gdkueyJsGydpx04jZBYQ2DkqNEG37mhNx9tb0vlH9qNvsBdF8H fNYV/Nt2pI23fRN6G3Ig3GXq9FjwHRBfojMgwMLKPEIqGuZkm7nEyXFJHCnjG42GDfGT zhT4uIv+MjPe68wK3iTT47arCzOU73xNQZZJXzd+7SL6NTxvUn3LqSn1F86SgIc73MXm NCVQ== X-Gm-Message-State: AOAM532mWVCHbabk4N4LkagybXKxnUcWaVIYLVumxgYMQhthsU6/Ty9y h+aAynORnUMThAJQDXSqW/Uhp35Q6o3dveArvM1OqvpZnac= X-Google-Smtp-Source: ABdhPJxEW+2ne6XMNyUnd3BDZz3DOmoW1X07kIhVl2gU+gzvnk3Cd6t8wwt+5+Q67bcJSqVaDIW7Pn54Ovqtu62Xbzo= X-Received: by 2002:a37:6345:: with SMTP id x66mr11689424qkb.472.1590098390040; Thu, 21 May 2020 14:59:50 -0700 (PDT) MIME-Version: 1.0 From: Joseph Salowey Date: Thu, 21 May 2020 14:59:39 -0700 Message-ID: To: EMU WG Content-Type: multipart/alternative; boundary="000000000000b257dc05a62fa175" Archived-At: Subject: [Emu] Note Taker, Jabber Script and Slides EMU Virtual Interim on 5/22 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 May 2020 21:59:54 -0000 --000000000000b257dc05a62fa175 Content-Type: text/plain; charset="UTF-8" The EMU virtual interim is Friday 2020-05-22 15:00 UTC. If you are presenting please send your slides to the chairs. We are also looking for Note Taker and Jabber Scribe Volunteers. Please send the chairs a note if you can help out. Cheers, Joe --000000000000b257dc05a62fa175 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
The EMU virtual interim is=C2=A0Friday 2020-05-22 15:00 UT= C.=C2=A0 If you are presenting please send your slides to the chairs.=C2=A0=

We are also looking for Note Taker and Jabber Scrib= e Volunteers.=C2=A0 Please send the chairs a note if you can help out.=C2= =A0

Cheers,

Joe

--000000000000b257dc05a62fa175-- From nobody Fri May 22 07:01:58 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CDA6E3A0898; Fri, 22 May 2020 07:01:56 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: emu@ietf.org Message-ID: <159015611676.23319.7469940475610955738@ietfa.amsl.com> Date: Fri, 22 May 2020 07:01:56 -0700 Archived-At: Subject: [Emu] I-D Action: draft-ietf-emu-aka-pfs-03.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 May 2020 14:01:57 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the EAP Method Update WG of the IETF. Title : Perfect-Forward Secrecy for the Extensible Authentication Protocol Method for Authentication and Key Agreement (EAP-AKA' PFS) Authors : Jari Arkko Karl Norrman Vesa Torvinen Filename : draft-ietf-emu-aka-pfs-03.txt Pages : 26 Date : 2020-05-22 Abstract: Many different attacks have been reported as part of revelations associated with pervasive surveillance. Some of the reported attacks involved compromising smart cards, such as attacking SIM card manufacturers and operators in an effort to compromise shared secrets stored on these cards. Since the publication of those reports, manufacturing and provisioning processes have gained much scrutiny and have improved. However, the danger of resourceful attackers for these systems is still a concern. This specification is an optional extension to the EAP-AKA' authentication method which was defined in [I-D.ietf-emu-rfc5448bis]. The extension, when negotiated, provides Perfect Forward Secrecy for the session key generated as a part of the authentication run in EAP- AKA'. This prevents an attacker who has gained access to the long- term pre-shared secret in a SIM card from being able to decrypt any past communications. In addition, if the attacker stays merely a passive eavesdropper, the extension prevents attacks against future sessions. This forces attackers to use active attacks instead. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-emu-aka-pfs/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-emu-aka-pfs-03 https://datatracker.ietf.org/doc/html/draft-ietf-emu-aka-pfs-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-emu-aka-pfs-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri May 22 13:18:46 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EC2A3A0AFB for ; Fri, 22 May 2020 13:18:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jfJ_qz9Wzrzh for ; Fri, 22 May 2020 13:18:40 -0700 (PDT) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-eopbgr750139.outbound.protection.outlook.com [40.107.75.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CCF93A0AFA for ; Fri, 22 May 2020 13:18:40 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lvlyCYr/yFGH5PLLpuGY/UhLw7m+lXIc8mUju6vP4QiyI8knyF5QEDoB2HeM4rM5WHrK1LGNLMBn+4gS+9Oql4MTic2cpfs/Cq2qhcFXkVMKg2WMwrkycJsrZ++YzSBid0DrKKgy1FGpKXLzku0rb1n71x+LMJG+debXIciX0Nk+ddsINfsFBcyrBjlUBsC9cFQ/elGE3/ac2qHKKCMzUD3Vv2Qmv0mdHdkgqU1Wz/bfDaLmeMcTY9xze230C5r26WQCZvW31BpsGboxquM6dc7t/km2V9LF6ieQMI9a38f+wvN/LcIkkAAMJDNDQSIfvx2+eydpfcOluk8gnFQdng== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SadUUIu8Su7D7v8TH0Pvd+/huzeEBKhaMnxldV2SMRA=; b=l7vf8ukaKLsPbmQZCpM8xTZ9hmP1XxAVR7U5zXheodV3/qWPV04qp7QpTe9OWuew/CZ9eofTlmkvOdVWPdnHi1EkFHo2+xgDpGpHfPdRUXuJRhOZ/LM54hKLoeN7CjchG1NRg5ZgfXV1NpEHKne8EdrYi/3fGnhV+0DcqJuR3JqYgw39AVqKHIljvF2wCjOpFVDaJUSK63p5SalnKLOxsNpekvQxeC3/AWIN5AkrSuxNoyTM97C5tMK+kqlNWKbqH7bGJ6XdeJg8jMyOZCe3fVZlNm1MyTehvWw6lQDlq+hIOTPq21X7XgjUSmR20gHASdD63UusFGUmA+CXUOxQDA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SadUUIu8Su7D7v8TH0Pvd+/huzeEBKhaMnxldV2SMRA=; b=IZAiXCFkjNLdQsNBZ1O1jOsbfphHk+viCKN79qj1dHAQ6F/upcc7fkBvfPZGlcGffX0TfrELnyH2cjJ7IEae/7klBPkek6joXQq9FrUEl8XICqpYCg7JbZsY+un0PKu51KHiKrRbBWO35lG/Pg+f5uhvPsIv89H6FOcIyq0nh4o= Received: from CH2PR21MB1381.namprd21.prod.outlook.com (2603:10b6:610:8e::12) by CH2PR21MB1511.namprd21.prod.outlook.com (2603:10b6:610:88::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3045.4; Fri, 22 May 2020 20:18:38 +0000 Received: from CH2PR21MB1381.namprd21.prod.outlook.com ([fe80::ed84:e1bc:d1e6:76f8]) by CH2PR21MB1381.namprd21.prod.outlook.com ([fe80::ed84:e1bc:d1e6:76f8%7]) with mapi id 15.20.3045.008; Fri, 22 May 2020 20:18:38 +0000 From: Jorge Vergara To: Oleg Pekar , Jouni Malinen , EMU WG Thread-Topic: [Emu] TEAP - RFC 7170 - Errata ID 5768 Thread-Index: AQHWIuERCgU2395ftU2yD1GBLzOOXKi0ouNg Date: Fri, 22 May 2020 20:18:38 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-05-22T20:18:36Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=d1986a10-e746-4619-8880-bf17de69884f; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2001:4898:80e8:7:14dc:e438:9103:7caa] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 65ba994f-717b-4a92-0bec-08d7fe8d5048 x-ms-traffictypediagnostic: CH2PR21MB1511: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 04111BAC64 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: B/wbIAq6FViZd1jt0km96ZSYF3AuYYs9qSwWPMvpXErumjhrFDV5cZrz/SolZu8CGh1h2sOH6/VIqRHqTGHRcC5ToHlFK771uyEO0JjW1D+EiGWRp1YGlr97/gPD1/oS/hG9XmdezfDXsdGVvCjTuDMm80I+r97/TctL3Z4qWk1Lfi61A+xHa4UTn/4c2M7e8Jwwvg6r0Kw91xK3p7GMLLbNwBd/cGU12FZsFbnzj4oDsnYlWI/AmhcgE1at7yL71P9ioAJ1p8KOXGIkfHnfjehPFhzbfRXQ/zbeR7PO8z69GS29b2Broi8nh+QIzYXcfgUUvcjLC/ayvy8shimlDhYmAZ+E82am+5SF0y5+0cwx1BFkQ95h1ishUwzIUcxTADRyslVNrl0D1loDKwDOoyON4AZGyotERkjsorDTNxKZxxsc/AmW97/U2a4b67her1kbsn3jaXvwDsj+Lld8kA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH2PR21MB1381.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(346002)(366004)(136003)(376002)(396003)(76116006)(53546011)(82960400001)(186003)(7696005)(71200400001)(8676002)(6506007)(33656002)(8936002)(110136005)(166002)(83080400001)(316002)(8990500004)(82950400001)(66446008)(86362001)(2906002)(66476007)(64756008)(66556008)(9686003)(5660300002)(66946007)(55016002)(52536014)(10290500003)(478600001)(781001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_CH2PR21MB138134E39EBC0EF2F4EBE9C4D1B40CH2PR21MB1381namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 65ba994f-717b-4a92-0bec-08d7fe8d5048 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 May 2020 20:18:38.5732 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Le1nOy9a+sDXMRjc38kdSyhjzDiG3DZCG5COFQNyNhp0LTTnjqhVuveerkP0pRbPCAjn8BHGut9X+pGsZ27gTg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR21MB1511 Archived-At: Subject: Re: [Emu] TEAP - RFC 7170 - Errata ID 5768 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 May 2020 20:18:44 -0000 --_000_CH2PR21MB138134E39EBC0EF2F4EBE9C4D1B40CH2PR21MB1381namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TXkgcmV2aWV3IG9mIHRoaXMgZXJyYXRhIGFuZCB0aGUgY3VycmVudCByZXNwb25zZXMgZnJvbSBP bGVnOg0KDQoNCiAgMS4gIEkgYWdyZWUgd2l0aCB0aGlzIHByb3Bvc2VkIHJlc29sdXRpb24uIEkg ZG8gdGhpbmsgdGhpcyBpcyBhbiBpbXBvcnRhbnQgb21pc3Npb24gdGhhdCBuZWVkcyB0byBiZSBj bGFyaWZpZWQgaW4gdGhlIFJGQy4gT3RoZXJ3aXNlIGl0IGlzIHNvbWV3aGF0IGd1ZXNzd29yayB0 aGF0IHRydW5jYXRpb24gaXMgdGhlIHJpZ2h0IGFjdGlvbi4gSSB0aGluayB0aGUgY3VycmVudCB3 b3JkaW5nIGxlYW5zIHRvd2FyZCB0cnVuY2F0aW9uLCBidXQgSSBkZWZpbml0ZWx5IGFza2VkIHRo aXMgcXVlc3Rpb24gbXlzZWxmIHdoaWxlIGltcGxlbWVudGluZy4NCiAgMi4gIFRoaXMgYmxlZWRz IGludG8gQWxhbuKAmXMgVExTIDEuMyBkb2N1bWVudCBzb21ld2hhdCwgYnV0IEkgYWdyZWUgd2l0 aCBKb3VuaSB0aGF0IHRoaXMgd2lsbCBuZWVkIHRvIGNoYW5nZSB3aGVuIHRoZSByZXN0IG9mIHRo ZSBkb2N1bWVudCBpcyBldmVudHVhbGx5IHVwZGF0ZWQgdG8gVExTIDEuMy4gVGhlcmUgYXJlIGVu b3VnaCBUTFMgMS4zIHJlbGF0ZWQgdGhpbmdzIHRvIGFkZHJlc3MgaW4gVEVBUCB0aGF0IEkgZG9u 4oCZdCBleGFjdGx5IHZpZXcgdGhpcyBhcyBhbiBlcnJhdGEuIEkgdmlldyBpdCBhcyBhIG5lZWRl ZCB1cGRhdGUsIHdoZXRoZXIgaW4gdGhpcyBkb2N1bWVudCwgQWxhbuKAmXMgZG9jdW1lbnQsIG9y IGJvdGguDQogIDMuICBBZ3JlZSB3aXRoIEpvdW5pIHRoYXQgSSBkb27igJl0IHNlZSB0aGUgcG9p bnQgb2YgdGhlIDB4Mzcgb2N0ZXQsIGJ1dCByZWdhcmRsZXNzIHRoaXMgY2xhcmlmaWNhdGlvbiBv ZiBob3cgaXQgaXMgZW5jb2RlZCBpcyBwb3NpdGl2ZSAobWlub3IpIGNoYW5nZS4NCg0KVGhhbmtz LA0KSm9yZ2UNCg0KRnJvbTogRW11IDxlbXUtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9m IE9sZWcgUGVrYXINClNlbnQ6IFR1ZXNkYXksIE1heSA1LCAyMDIwIDY6MjcgQU0NClRvOiBKb3Vu aSBNYWxpbmVuIDxqQHcxLmZpPjsgRU1VIFdHIDxlbXVAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbRW11 XSBURUFQIC0gUkZDIDcxNzAgLSBFcnJhdGEgSUQgNTc2OA0KDQpIaSBKb3VuaSwNCkkgcHJvcG9z ZSB0aGUgZm9sbG93aW5nIGZpeCBmb3IgdGhlIGlzc3VlcyBkZXNjcmliZWQgaW4gdGhpcyBlcnJh dGEgaWQ6DQoxKSBJbiBTZWN0aW9uICI0LjIuMTMuICBDcnlwdG8tQmluZGluZyBUTFYiIG1ha2Ug IkVNU0sgQ29tcG91bmQgTUFDIiBhbmQgIk1TSyBDb21wb3VuZCBNQUMiIGZpZWxkcyAzMiBvY3Rl dHMgbG9uZyAoY3VycmVudGx5IDIwIG9jdGV0cykuIFRoZSBNQUMgdmFsdWUgaXMgdHJ1bmNhdGVk IGF0IDMyIG9jdGV0cyBpZiBpdCBpcyBsb25nZXIgdGhhbiAzMiBvY3RldHMgb3IgcGFkZGVkIHRv IGEgbGVuZ3RoIG9mIDMyIG9jdGV0cyB3aXRoIHplcm9zIHRvIHRoZSByaWdodCBpZiBpdCBpcyBs ZXNzIHRoYW4gMzIgb2N0ZXRzLiBUaGUgbGVuZ3RoIG9mIHRoZSBUTFYgc2hvdWxkIGJlIGNoYW5n ZWQgdG8gMTAwIGJ5dGVzIChjdXJyZW50bHkgNzYpLg0KDQpUaGUgbW90aXZhdGlvbiBpcyB0byBr ZWVwIGNvbGxpc2lvbi1yZXNpc3RhbmNlIHN0cmVuZ3RoIG9mIE1BQyBvbiAxMjggYml0LiBIYXNo IHZhbHVlIHRydW5jYXRpb24gaXMgZGVzY3JpYmVkIGluICJOSVNUIFNwZWNpYWwgUHVibGljYXRp b24gODAwLTEwNyBSZXZpc2lvbiAxOiBSZWNvbW1lbmRhdGlvbiBmb3IgQXBwbGljYXRpb25zIFVz aW5nIEFwcHJvdmVkIEhhc2ggQWxnb3JpdGhtcyI8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGbnZscHVicy5uaXN0LmdvdiUy Rm5pc3RwdWJzJTJGTGVnYWN5JTJGU1AlMkZuaXN0c3BlY2lhbHB1YmxpY2F0aW9uODAwLTEwN3Ix LnBkZiZkYXRhPTAyJTdDMDElN0Nqb3ZlcmdhciU0MG1pY3Jvc29mdC5jb20lN0M0MmM5MGIzNWI5 M2Y0MjYxNDAyMDA4ZDdmMGY4MTdjNCU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3 JTdDMSU3QzAlN0M2MzcyNDI4MjExMDUxNjk3Mjgmc2RhdGE9TVM2QWFZV1BDbTM3N1p2bGVNalZJ ZkxDa2FDYXE2RTI0TlFYU1lLJTJGTmxzJTNEJnJlc2VydmVkPTA+DQoNCjIpIEluIFNlY3Rpb24g IjUuMy4gIENvbXB1dGluZyB0aGUgQ29tcG91bmQgTUFDIiBzcGVjaWZ5IHRoYXQgIk1BQyBpcyB0 aGUgTUFDIGZ1bmN0aW9uIG5lZ290aWF0ZWQgaW4gVExTIG9mIFRFQVAgUGhhc2UgMSIgKGN1cnJl bnRseSBpdCBzYXlzIFRMUyAxLjIpDQoNClRoZSBtb3RpdmF0aW9uIGlzIHRvIHN1cHBvcnQgVExT IDEuMiwgMS4zIGFuZCBwb3NzaWJseSBsYXRlciBUTFMgdmVyc2lvbnMuDQoNCjMpIEluIFNlY3Rp b24gIjUuMy4gIENvbXB1dGluZyB0aGUgQ29tcG91bmQgTUFDIiB3aGVuIHNwZWNpZnlpbmcgdGhl IGxpc3Qgb2YgZmllbGQgdG8gYmUgcGxhY2VkIGluIHRoZSBCVUZGRVIiIHNob3VsZCBzYXkgIi4u LjIgIEEgc2luZ2xlIG9jdGV0IGNvbnRhaW5zIFRFQVAgRUFQIG1ldGhvZCB0eXBlIDB4MzciLiBB bHRlcm5hdGl2ZWx5IGl0IGNvdWxkIGJlICIuLi4yICBBIHNpbmdsZSBvY3RldCBjb250YWlucyBF QVAgVHlwZSBvZiB0aGUgaW5uZXIgRUFQIG1ldGhvZCByZWxhdGVkIHRvIHRoZSBjYWxjdWxhdGlv biBvciAwIGlmIG5vIGlubmVyIEVBUCBtZXRob2Qgd2FzIGV4ZWN1dGVkIiAoY3VycmVudGx5ICIu Li4yICBUaGUgRUFQIFR5cGUgc2VudCBieSB0aGUgb3RoZXIgcGFydHkgaW4gdGhlIGZpcnN0IFRF QVAgbWVzc2FnZSIpDQoNClBsZWFzZSBub3RlIHRoYXQgdGhlcmUncyBzdGlsbCBhIGRpc2N1c3Np b24gb24gc2VuZGluZyBDcnlwdG8tQmluZGluZyBUTFYgb24gIkF1dGhlbnRpY2F0aW9uIGlubmVy IEVBUCBtZXRob2QiIG9yICJJbm5lciBFQVAgbWV0aG9kIHRoYXQgZXhwb3J0cyBNU0siIG9ubHku DQoNClRoYW5rcw0KT2xlZw0K --_000_CH2PR21MB138134E39EBC0EF2F4EBE9C4D1B40CH2PR21MB1381namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29MaXN0UGFyYWdyYXBo LCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUt cHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJn aW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDouNWluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFw dDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXpl OjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2Lldv cmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICov DQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDoxNjI0OTIwNTExOw0KCW1zby1saXN0LXR5cGU6aHli cmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMTY0OTc0MTQ0NiA2NzY5ODcwNSA2NzY5ODcx MyA2NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2 NzY5ODcxNTt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXRleHQ6IiUxXCkiOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJ dGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBo YS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNg0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05 LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0Kb2wNCgl7 bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHls ZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQi IHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+ PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0 IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFk Pg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk15IHJldmlldyBvZiB0 aGlzIGVycmF0YSBhbmQgdGhlIGN1cnJlbnQgcmVzcG9uc2VzIGZyb20gT2xlZzo8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPG9sIHN0 eWxlPSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9IjEiPg0KPGxpIGNsYXNzPSJNc29M aXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBs Zm8xIj5JIGFncmVlIHdpdGggdGhpcyBwcm9wb3NlZCByZXNvbHV0aW9uLiBJIGRvIHRoaW5rIHRo aXMgaXMgYW4gaW1wb3J0YW50IG9taXNzaW9uIHRoYXQgbmVlZHMgdG8gYmUgY2xhcmlmaWVkIGlu IHRoZSBSRkMuIE90aGVyd2lzZSBpdCBpcyBzb21ld2hhdCBndWVzc3dvcmsgdGhhdCB0cnVuY2F0 aW9uIGlzIHRoZSByaWdodA0KIGFjdGlvbi4gSSB0aGluayB0aGUgY3VycmVudCB3b3JkaW5nIGxl YW5zIHRvd2FyZCB0cnVuY2F0aW9uLCBidXQgSSBkZWZpbml0ZWx5IGFza2VkIHRoaXMgcXVlc3Rp b24gbXlzZWxmIHdoaWxlIGltcGxlbWVudGluZy48bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJN c29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVs MSBsZm8xIj5UaGlzIGJsZWVkcyBpbnRvIEFsYW7igJlzIFRMUyAxLjMgZG9jdW1lbnQgc29tZXdo YXQsIGJ1dCBJIGFncmVlIHdpdGggSm91bmkgdGhhdCB0aGlzIHdpbGwgbmVlZCB0byBjaGFuZ2Ug d2hlbiB0aGUgcmVzdCBvZiB0aGUgZG9jdW1lbnQgaXMgZXZlbnR1YWxseSB1cGRhdGVkIHRvIFRM UyAxLjMuIFRoZXJlIGFyZSBlbm91Z2gNCiBUTFMgMS4zIHJlbGF0ZWQgdGhpbmdzIHRvIGFkZHJl c3MgaW4gVEVBUCB0aGF0IEkgZG9u4oCZdCBleGFjdGx5IHZpZXcgdGhpcyBhcyBhbiBlcnJhdGEu IEkgdmlldyBpdCBhcyBhIG5lZWRlZCB1cGRhdGUsIHdoZXRoZXIgaW4gdGhpcyBkb2N1bWVudCwg QWxhbuKAmXMgZG9jdW1lbnQsIG9yIGJvdGguPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNv TGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDEg bGZvMSI+QWdyZWUgd2l0aCBKb3VuaSB0aGF0IEkgZG9u4oCZdCBzZWUgdGhlIHBvaW50IG9mIHRo ZSAweDM3IG9jdGV0LCBidXQgcmVnYXJkbGVzcyB0aGlzIGNsYXJpZmljYXRpb24gb2YgaG93IGl0 IGlzIGVuY29kZWQgaXMgcG9zaXRpdmUgKG1pbm9yKSBjaGFuZ2UuPG86cD48L286cD48L2xpPjwv b2w+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkpvcmdlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFF MSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPkZyb206PC9iPiBFbXUgJmx0O2VtdS1ib3VuY2VzQGlldGYub3JnJmd0OyA8Yj5PbiBCZWhh bGYgT2YgPC9iPg0KT2xlZyBQZWthcjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBNYXkgNSwg MjAyMCA2OjI3IEFNPGJyPg0KPGI+VG86PC9iPiBKb3VuaSBNYWxpbmVuICZsdDtqQHcxLmZpJmd0 OzsgRU1VIFdHICZsdDtlbXVAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFtFbXVd IFRFQVAgLSBSRkMgNzE3MCAtIEVycmF0YSBJRCA1NzY4PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkhpIEpvdW5pLDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkkgcHJvcG9zZSB0aGUgZm9sbG93aW5nIGZpeCBmb3IgdGhlIGlzc3VlcyBk ZXNjcmliZWQgaW4gdGhpcyBlcnJhdGEgaWQ6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4xKSBJbiBTZWN0aW9uICZxdW90OzQuMi4xMy4mbmJzcDsg Q3J5cHRvLUJpbmRpbmcgVExWJnF1b3Q7IG1ha2UgJnF1b3Q7RU1TSyBDb21wb3VuZCBNQUMmcXVv dDsgYW5kICZxdW90O01TSyBDb21wb3VuZCBNQUMmcXVvdDsgZmllbGRzIDMyIG9jdGV0cyBsb25n IChjdXJyZW50bHkgMjAgb2N0ZXRzKS4gVGhlJm5ic3A7TUFDIHZhbHVlIGlzIHRydW5jYXRlZCBh dCAzMiBvY3RldHMgaWYgaXQgaXMgbG9uZ2VyIHRoYW4gMzIgb2N0ZXRzIG9yJm5ic3A7cGFkZGVk IHRvIGEgbGVuZ3RoIG9mIDMyDQogb2N0ZXRzIHdpdGggemVyb3MgdG8gdGhlIHJpZ2h0IGlmIGl0 IGlzIGxlc3MgdGhhbiAzMiBvY3RldHMuIFRoZSBsZW5ndGggb2YgdGhlIFRMViBzaG91bGQgYmUg Y2hhbmdlZCB0byAxMDAgYnl0ZXMgKGN1cnJlbnRseSA3NikuJm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBtb3RpdmF0aW9uIGlz IHRvIGtlZXAmbmJzcDtjb2xsaXNpb24tcmVzaXN0YW5jZSBzdHJlbmd0aCBvZiBNQUMgb24gMTI4 IGJpdC4gSGFzaCB2YWx1ZSZuYnNwO3RydW5jYXRpb24gaXMgZGVzY3JpYmVkIGluDQo8YSBocmVm PSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0 cHMlM0ElMkYlMkZudmxwdWJzLm5pc3QuZ292JTJGbmlzdHB1YnMlMkZMZWdhY3klMkZTUCUyRm5p c3RzcGVjaWFscHVibGljYXRpb244MDAtMTA3cjEucGRmJmFtcDtkYXRhPTAyJTdDMDElN0Nqb3Zl cmdhciU0MG1pY3Jvc29mdC5jb20lN0M0MmM5MGIzNWI5M2Y0MjYxNDAyMDA4ZDdmMGY4MTdjNCU3 QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyNDI4MjExMDUx Njk3MjgmYW1wO3NkYXRhPU1TNkFhWVdQQ20zNzdadmxlTWpWSWZMQ2thQ2FxNkUyNE5RWFNZSyUy Rk5scyUzRCZhbXA7cmVzZXJ2ZWQ9MCI+DQomcXVvdDtOSVNUIFNwZWNpYWwgUHVibGljYXRpb24g ODAwLTEwNyBSZXZpc2lvbiAxOiBSZWNvbW1lbmRhdGlvbiBmb3IgQXBwbGljYXRpb25zIFVzaW5n IEFwcHJvdmVkIEhhc2ggQWxnb3JpdGhtcyZxdW90OzwvYT4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MikgSW4gU2VjdGlvbiAmcXVv dDs1LjMuJm5ic3A7IENvbXB1dGluZyB0aGUgQ29tcG91bmQgTUFDJnF1b3Q7IHNwZWNpZnkgdGhh dCAmcXVvdDtNQUMgaXMgdGhlIE1BQyBmdW5jdGlvbiBuZWdvdGlhdGVkIGluIFRMUyBvZiZuYnNw OzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2NvbG9yOmJsYWNrIj5URUFQIFBoYXNlIDE8 L3NwYW4+JnF1b3Q7IChjdXJyZW50bHkgaXQgc2F5cyBUTFMgMS4yKTxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgbW90aXZhdGlvbiBpcyB0 byBzdXBwb3J0IFRMUyAxLjIsIDEuMyBhbmQgcG9zc2libHkgbGF0ZXIgVExTIHZlcnNpb25zLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4zKSZu YnNwO0luIFNlY3Rpb24gJnF1b3Q7NS4zLiZuYnNwOyBDb21wdXRpbmcgdGhlIENvbXBvdW5kIE1B QyZxdW90OyB3aGVuIHNwZWNpZnlpbmcgdGhlIGxpc3Qgb2YgZmllbGQmbmJzcDt0byBiZSBwbGFj ZWQgaW4gdGhlIEJVRkZFUiZxdW90OyBzaG91bGQgc2F5Jm5ic3A7JnF1b3Q7Li4uMiAmbmJzcDtB IHNpbmdsZSBvY3RldCBjb250YWlucyBURUFQIEVBUCBtZXRob2QgdHlwZSAweDM3JnF1b3Q7LiBB bHRlcm5hdGl2ZWx5IGl0IGNvdWxkIGJlICZxdW90Oy4uLjIgJm5ic3A7QSBzaW5nbGUgb2N0ZXQg Y29udGFpbnMNCiBFQVAgVHlwZSBvZiB0aGUgaW5uZXIgRUFQIG1ldGhvZCByZWxhdGVkIHRvIHRo ZSBjYWxjdWxhdGlvbiBvciAwIGlmIG5vIGlubmVyIEVBUCBtZXRob2Qgd2FzIGV4ZWN1dGVkJnF1 b3Q7IChjdXJyZW50bHkgJnF1b3Q7Li4uMiAmbmJzcDtUaGUgRUFQIFR5cGUgc2VudCBieSB0aGUg b3RoZXIgcGFydHkgaW4gdGhlIGZpcnN0IFRFQVAgbWVzc2FnZSZxdW90Oyk8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UGxlYXNlIG5vdGUgdGhh dCB0aGVyZSdzIHN0aWxsIGEgZGlzY3Vzc2lvbiBvbiBzZW5kaW5nIENyeXB0by1CaW5kaW5nIFRM ViBvbiAmcXVvdDtBdXRoZW50aWNhdGlvbiBpbm5lciBFQVAgbWV0aG9kJnF1b3Q7IG9yICZxdW90 O0lubmVyIEVBUCBtZXRob2QgdGhhdCBleHBvcnRzIE1TSyZxdW90OyBvbmx5LjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3M8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9sZWc8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_CH2PR21MB138134E39EBC0EF2F4EBE9C4D1B40CH2PR21MB1381namp_-- From nobody Fri May 22 13:56:26 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FA3C3A0B3B for ; Fri, 22 May 2020 13:56:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rq5P5WKcy4KY for ; Fri, 22 May 2020 13:56:20 -0700 (PDT) Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12on2093.outbound.protection.outlook.com [40.107.243.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BBC83A0B36 for ; Fri, 22 May 2020 13:56:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ReGI8suPE9JloIngCXIt45SBr3BG/CPwxT+vq+6/DVtdx4fS6TV3ar5ITfxXd1u7aYuR3AAJaK8FGgr5U76Yx35feWfZXbSIOxavV2qjChFFEzkSjVdDNh5uA2HO7zwaESM+N1RsqhM7/jM6UNAKnJ4RMC0Ue1MtKP2IWm+Bsb6kleTOS0FNSjT7JZmVxBmZPkSfJfQr7rWy0ooNd0L6YIlNwEhhJF2iELThlRwrNHkq0X88xKzOOofMQmXxkOaGcYJ/8fr943r9b7jpV5EcMsdqYRyA4PVUU6kqcSZWwJKEXg+q/2lg7PS/h3HJaQSan95WTPEKIvC9uPDA3OI/bw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=D2H5tdE94QYLpT9QPjl98LsiJEThm6p3h0RFNbU9zKk=; b=QswtNDRBj80w7g3e6uEcVt839tO0dFnyw5u5oQrOFKt/HCx8grU1LI/oITBuF8PoDpxAvmVt8aXzitNapvnAkPEMMcEYORySa5N1HY/wvlgMvPluQeuxVmKrdck8l2CrBI7rhxnUJE4Kaj1TXUIXxHovwQlYYzAY3duyU466cgQplnSJq6SVAk2PP0Dq4FnTLa51rrxOBox2OMJIDRcasxQ5I18x/z2TeWXDscgTsnBfTJfDSPDyiFWoOVb7Ktvp7t4S/pHs6ez4ymrmBI7AoWQNDG8XgUUz8OGwH2mJHAisUTF0+1bP2cd45fA3tCevpWaEWflMUDTl7Fj8hC8j3Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=D2H5tdE94QYLpT9QPjl98LsiJEThm6p3h0RFNbU9zKk=; b=JsiUwSgTC2FZLZ9gIkBR7AQdf77jcdJkoK5qP9dFIbzxFnvS2fyPwTDXjkjI7gPwZJApePPP+nzsAlHR50DY5QQMWX1eC+h0sCwqUDYYf/OyU2Z4Zsb+txOq6u2i8u2IgCrUvuyrGfslk6gnnj7ZL4btknojMScLljVxItylD6U= Received: from CH2PR21MB1381.namprd21.prod.outlook.com (2603:10b6:610:8e::12) by CH2PR21MB1414.namprd21.prod.outlook.com (2603:10b6:610:87::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3045.5; Fri, 22 May 2020 20:56:18 +0000 Received: from CH2PR21MB1381.namprd21.prod.outlook.com ([fe80::ed84:e1bc:d1e6:76f8]) by CH2PR21MB1381.namprd21.prod.outlook.com ([fe80::ed84:e1bc:d1e6:76f8%7]) with mapi id 15.20.3045.008; Fri, 22 May 2020 20:56:18 +0000 From: Jorge Vergara To: Oleg Pekar , Jouni Malinen , EMU WG Thread-Topic: [Emu] TEAP - RFC 7170 - Errata Thread-Index: AQHWIWyLdVdVBSXAfEu39KqFb5d9Uqi0rBkg Date: Fri, 22 May 2020 20:56:18 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-05-22T20:56:16Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=354cb553-b48a-4de9-951c-317135058e93; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2001:4898:80e8:7:14dc:e438:9103:7caa] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 344351a1-6b91-431e-5b68-08d7fe92934e x-ms-traffictypediagnostic: CH2PR21MB1414: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 04111BAC64 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 21gC8XRXbsF85KS5LdmnX9zK5CXV5qGsVhvLhMEbefEnoSDYUV3utWkbanUcCcDhhCz57QzyNEBllWZDYpBxwtXyUzcKxkq3bigGjl9gSpb3125UahtNyNNhwO13Br6qjOWj9e3xHwVzBdrt7yFpQIlgQPRtSdrjaOWScwBbafLQ8fDS1S7V7S8F6Tq/BISI6WjcnQba1NdTiH1BH+lmbLjcwAcs52nTyqYrrIxObddWpL0LqIRxU9l9I+Ogadpe3TEbMv0rhTRvRcyoiLnpFxnnIB47z/Gb7R64CsA6DPja/AfP4497WG2V/Js9qFNCLwmkwjTuxJ6rN8Ni5b5QnBEgD8MK8//AHp+jiTpq60BLai72Iikqb79AZH7ZdtH19QSA5DQxG/fxGCPsjcdxjkucktG6lY8Z0qPDis0cvBZBQzQvH1Qe0r++va3Sspe1 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH2PR21MB1381.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(346002)(136003)(39860400002)(376002)(396003)(8936002)(5660300002)(10290500003)(53546011)(186003)(55016002)(33656002)(2906002)(71200400001)(316002)(6506007)(110136005)(52536014)(66946007)(82960400001)(82950400001)(9686003)(8990500004)(76116006)(8676002)(7696005)(66446008)(64756008)(166002)(478600001)(66476007)(66556008)(86362001)(781001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_CH2PR21MB13813339128E14E66B6825F3D1B40CH2PR21MB1381namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 344351a1-6b91-431e-5b68-08d7fe92934e X-MS-Exchange-CrossTenant-originalarrivaltime: 22 May 2020 20:56:18.4488 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: iy/Euim8rhx3/m+FuIkwC50EYAtA5Ni/yVm2yrzBWFU4yG/Mp6k+Y1QM4jxFgl/GfTaffxpdpeZrO8GzPmSSSg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR21MB1414 Archived-At: Subject: Re: [Emu] TEAP - RFC 7170 - Errata X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 May 2020 20:56:25 -0000 --_000_CH2PR21MB13813339128E14E66B6825F3D1B40CH2PR21MB1381namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBhbSBnb2luZyB0byBjb25zaWRlciB0aGVzZSAzIGVycmF0YSBzZXBhcmF0ZWx5IGFzIEkgdGhp bmsgaXQgaXMgY2xlYXJlc3Q6DQoNCkVycmF0YSBJRCA1NzY3Og0KDQpJIGJlbGlldmUgSm91bmni gJlzIGRpZmZlcmVudGlhdGlvbiBvZiBhbiDigJxFQVAgYXV0aGVudGljYXRpb24gbWV0aG9k4oCd IHZzIOKAnEVBUCBtZXRob2TigJ0gaXMgdGhhdCBhbiDigJxFQVAgYXV0aGVudGljYXRpb24gbWV0 aG9k4oCdIGhhcyBhIHR5cGUgPj0gNC4gSm91bmkgbWVudGlvbnMgdGhpcyBpbiBoaXMgZXJyYXRh IGZpbGluZyBhbmQgaXQgaXMgYWxzbyBtZW50aW9uZWQgaW4gUkZDIDM3NDggU2VjdGlvbiAyLjE8 aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzM3NDgjc2VjdGlvbi0yLjE+IChwb3NzaWJs eSBvdGhlciBwbGFjZXMgYWxzbykuIEpvdW5pLCBJIGFwb2xvZ2l6ZSBpZiBJIGhhdmUgbWlzaW50 ZXJwcmV0ZWQg4oCTIHBsZWFzZSBjb3JyZWN0IG1lIGlmIHNvLg0KDQpTbywgYW4gRUFQLUlkZW50 aXR5ICh0eXBlIDEpIHJlcXVlc3QgaXMgYW4g4oCcRUFQIG1ldGhvZOKAnSwgYnV0IHRoZXJlIGlz IG9idmlvdXNseSBubyBpbnRlcm1lZGlhdGUgcmVzdWx0IFRMViBvciBjcnlwdG8gYmluZGluZyBU TFYgZXhjaGFuZ2VkIGFmdGVyIGFuIEVBUC1JZGVudGl0eSBleGNoYW5nZS4NCg0KSm91bmkgaGFz IGRvbmUgYW4gZXhjZWxsZW50IGpvYiBpbiB0aGlzIGVycmF0YSBvZiBpZGVudGlmeWluZyB3aGVy ZSB0aGUgdGVybWlub2xvZ3kgc2hvdWxkIGJlIHVwZGF0ZWQsIGFuZCBJIGFncmVlIHdpdGggSm91 bmnigJlzIGNoYW5nZXMuIEkgdGhpbmsgdGhlIGludGVudCBvZiB0aGUgUkZDIGluIHRoZSBmb3Vy IGluc3RhbmNlcyBKb3VuaSBpZGVudGlmaWVkIHdhcyBmYWlybHkgY2xlYXIuDQoNCkVycmF0YSBJ RCA1ODQ0Og0KDQpPbGVnLCB5b3VyIGZpbmFsIHByb3Bvc2FsIHNlZW1zIHRvIGluZGljYXRlIHRo YXQgYW4gSW50ZXJtZWRpYXRlLVJlc3VsdCBUTFYgc2hvdWxkIE5PVCBiZSBzZW50IGFmdGVyIEJh c2ljIFBhc3N3b3JkIEF1dGhlbnRpY2F0aW9uIOKAkyBJ4oCZbSBub3Qgc3VyZSBJIGZvbGxvdyB0 aGlzLiBTZWN0aW9uIDMuMy4yIG91dGxpbmVzIHRoYXQgYW4gSW50ZXJtZWRpYXRlLVJlc3VsdCBU TFYgU0hPVUxEIGJlIHNlbnQgYWZ0ZXIgQmFzaWMgUGFzc3dvcmQgQXV0aGVudGljYXRpb24uDQoN ClNvIEkgZmluZCB0aGlzIGVycmF0YSB2YWxpZCBhbmQgYWdyZWUgd2l0aCBKb3VuaSB0aGF0IHNl Y3Rpb24gQy4xIGFuZCBDLjIgc2hvdWxkIGJlIHVwZGF0ZWQgdG8gaW5jbHVkZSB0aGUgSW50ZXJt ZWRpYXRlLVJlc3VsdCBUTFYgaW4gdGhlIGRpYWdyYW1zLg0KDQpJIGFncmVlIHdpdGggdGhlIHJl c3Qgb2YgdGhlIHByb3Bvc2FscyBKb3VuaSBoYXMgbWFkZSBhcyB3ZWxsIHRoYXQgdGhpcyBzaG91 bGQgYmUgbWFkZSBjbGVhcmVyIHRocm91Z2hvdXQgdGhlIGRvY3VtZW50LiBNb3N0IG9mIHRoZSB0 aW1lIHdoZXJlIHRoZSBJbnRlcm1lZGlhdGUtUmVzdWx0IFRMViBpcyBtZW50aW9uZWQsIG9ubHkg RUFQIGlzIGRpc2N1c3NlZCBhbmQgdGhlIEJhc2ljIFBhc3N3b3JkIEF1dGhlbnRpY2F0aW9uIGlz IGZvcmdvdHRlbi4gSSBkb27igJl0IGJlbGlldmUgSm91bmnigJlzIHByb3Bvc2FscyBjaGFuZ2Ug YW55IHRpbWluZ3Mg4oCTIGp1c3QgY2xhcmlmeSB0aGUgbGFuZ3VhZ2UuDQoNCkVycmF0YSBJRCA1 ODQ1Og0KDQpJIGZpbmQgdGhlIGVycmF0YSB2YWxpZCBhbmQgYWdyZWUgd2l0aCBKb3VuaS4gVGhl IGRpcmVjdGlvbiBpbiB0aGUgcmVzdCBvZiB0aGUgZG9jdW1lbnQgc2VlbXMgdG8gYmUgdGhhdCBh biBJbnRlcm1lZGlhdGUtUmVzdWx0IFRMViBpcyBhbHdheXMgZXhjaGFuZ2VkIChhZnRlciBib3Ro IEVBUCBhdXRoZW50aWNhdGlvbiBtZXRob2RzIGFuZCBCYXNpYyBQYXNzd29yZCBBdXRoZW50aWNh dGlvbnMpIGFuZCB0aGUgdGV4dCBpbiAzLjMuMSBpcyBjb25mdXNpbmcuDQoNCioqKioqDQoNCklu IHN1bW1hcnkg4oCTIEkgZmluZCBhbGwgb2YgdGhlc2UgZXJyYXRhIHZhbGlkIGFuZCBhcHByZWNp YXRlIEpvdW5p4oCZcyBzdWdnZXN0aW9ucyBmb3IgY2xhcmlmaWNhdGlvbnMuIEkgZmluZCB0aGVt IGFsbCB0byBiZSBsYW5ndWFnZSBjbGFyaWZpY2F0aW9ucyBhbmQgZG9u4oCZdCBiZWxpZXZlIGFu eSBleGNoYW5nZXMgbmVlZCB0byBiZSBhbHRlcmVkLg0KDQpPbGVnLCB5b3VyIGZpbmFsIHByb3Bv c2FsIHNlZW1zIHRvIGJlIHJlbW92aW5nIHRoZSBleGNoYW5nZSBvZiBJbnRlcm1lZGlhdGUtUmVz dWx0IFRMVnMgaW4gdGhlIEJhc2ljIFBhc3N3b3JkIEF1dGhlbnRpY2F0aW9uIGNhc2Ug4oCTIEkg YW0gbm90IHN1cmUgSSBmb2xsb3cgdGhpcyBidXQgaWYgeW91IGJlbGlldmUgdGhpcyBpcyBuZWVk ZWQgZm9yIHRoZSByZXNvbHV0aW9uIG9mIHRoaXMgZXJyYXRhIEkgd291bGQgbGlrZSB0byBiZXR0 ZXIgdW5kZXJzdGFuZCB3aHkuDQoNClRoYW5rcywNCkpvcmdlDQoNCkZyb206IEVtdSA8ZW11LWJv dW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBPbGVnIFBla2FyDQpTZW50OiBTdW5kYXksIE1h eSAzLCAyMDIwIDEwOjAyIEFNDQpUbzogSm91bmkgTWFsaW5lbiA8akB3MS5maT47IEVNVSBXRyA8 ZW11QGlldGYub3JnPg0KU3ViamVjdDogW0VtdV0gVEVBUCAtIFJGQyA3MTcwIC0gRXJyYXRhDQoN CkhpIEpvdW5pLA0KWW91IGZpbGVkIEVycmF0YSBJRDogNTc2NywgNTg0NCwgNTg0NSByZWdhcmRp bmcgc2VuZGluZyBvZiBJbnRlcm1lZGlhdGUtUmVzdWx0IFRMVi4gQ2FuIHdlIGNsYXJpZnkgYSBn ZW5lcmFsIHNjaGVtZSBvZiBzZW5kaW5nIEludGVybWVkaWF0ZS1SZXN1bHQgVExWIGFuZCBDcnlw dG8tQmluZGluZyBUTFYgaW4gYWxsIGNhc2VzPyBJdCBpcyBub3QgZXhhY3RseSBjbGVhciB3aGF0 IGlzICJFQVAgYXV0aGVudGljYXRpb24gbWV0aG9kIiBhbmQgd2hhdCBpcyBpdHMgZGlmZmVyZW50 IGZyb20gIkVBUCBtZXRob2QiICh5b3UgcmVmZXJyZWQgdG8gYXBwZW5kaXggQy4zIGFzIGFuIGV4 YW1wbGUgb2YgIkVBUCBNZXRob2QiIGJ1dCBpdCBpcyBub3QgY2xlYXIgd2h5IGl0IGlzIG5vdCBh biAiRUFQIGF1dGhlbnRpY2F0aW9uIG1ldGhvZCIgLSBjb3VsZCB5b3UgcGxlYXNlIGNsYXJpZnkp Lg0KDQpIZXJlJ3MgdGhlIGxpc3Qgb2YgY2FzZXMgd2l0aCB0aGUgY3VycmVudCBSRkMgaW5zdHJ1 Y3Rpb25zIChwbGVhc2UgYWRkIGlmIHNvbWV0aGluZyBpcyBtaXNzaW5nKToNCg0KMS4gQSBzaW5n bGUgaW5uZXIgRUFQIG1ldGhvZCBpcyBleGVjdXRlZCBpbnNpZGUgdGhlIHR1bm5lbC4NCioqKiBS RkMgc2F5cyAqKioNClNlY3Rpb24gNC4yLjExICJBbiBJbnRlcm1lZGlhdGUtUmVzdWx0IFRMViBp bmRpY2F0aW5nIHN1Y2Nlc3MgTVVTVCBiZSBhY2NvbXBhbmllZCBieSBhIENyeXB0by1CaW5kaW5n IFRMViIuIFNlY3Rpb24gMy4zICJQaGFzZSAyIE1VU1QgYWx3YXlzIGVuZCB3aXRoIGEgQ3J5cHRv LUJpbmRpbmcgVExWIGV4Y2hhbmdlIg0KDQoyLiBNdWx0aXBsZSBpbm5lciBFQVAgbWV0aG9kcyBh cmUgZXhlY3V0ZWQgaW5zaWRlIHRoZSB0dW5uZWwuDQoqKiogUkZDIHNheXMgKioqDQpTZW5kIElu dGVybWVkaWF0ZS1SZXN1bHQgVExWIGlmIG1vcmUgdGhhbiBvbmUgbWV0aG9kIGlzIGdvaW5nIHRv IGJlIGV4ZWN1dGVkIGluIHRoZSB0dW5uZWwuIFNlbmQgQ3J5cHRvLUJpbmRpbmcgVExWIGlmIElu dGVybWVkaWF0ZS1SZXN1bHQgVExWIGluZGljYXRlcyBzdWNjZXNzLg0KU2VjdGlvbiAzLjMuMSAi SWYgbW9yZSB0aGFuIG9uZSBtZXRob2QgaXMgZ29pbmcgdG8gYmUgZXhlY3V0ZWQgaW4gdGhlIHR1 bm5lbCwgdGhlbiB1cG9uIG1ldGhvZCBjb21wbGV0aW9uLCB0aGUgc2VydmVyIE1VU1Qgc2VuZCBh biBJbnRlcm1lZGlhdGUtUmVzdWx0IFRMViBpbmRpY2F0aW5nIHRoZSByZXN1bHQiIC0gd3JvbmcN ClNlY3Rpb24gMy4zLjMgIlRoZSBDcnlwdG8tQmluZGluZyBUTFYgYW5kIEludGVybWVkaWF0ZS1S ZXN1bHQgVExWIE1VU1QgYmUgaW5jbHVkZWQgdG8gcGVyZm9ybSBjcnlwdG9ncmFwaGljIGJpbmRp bmcgYWZ0ZXIgZWFjaCBzdWNjZXNzZnVsIEVBUCBtZXRob2QgaW4gYSBzZXF1ZW5jZSBvZiBvbmUg b3IgbW9yZSBFQVAgbWV0aG9kcyIgLSBjb3JyZWN0DQoNCjMuIEJhc2ljIFBhc3N3b3JkIEF1dGhl bnRpY2F0aW9uICh1c2luZyBCYXNpYy1QYXNzd29yZC1BdXRoLVJlcS9SZXNwb25zZSkgaXMgZXhl Y3V0ZWQgaW5zaWRlIHRoZSB0dW5uZWwNCioqKiBSRkMgc2F5cyAqKioNClNlbmQgSW50ZXJtZWRp YXRlLVJlc3VsdCBUTFYuDQpTZWN0aW9uIDMuMy4yICJVcG9uIHJlY2VpdmluZyB0aGUgcmVzcG9u c2UsIHRoZSBzZXJ2ZXIgaW5kaWNhdGVzIHRoZSBzdWNjZXNzIG9yIGZhaWx1cmUgb2YgdGhlIGV4 Y2hhbmdlIHVzaW5nIGFuIEludGVybWVkaWF0ZS1SZXN1bHQgVExWIiAtIHRodXMgQ3J5cHRvLUJp bmRpbmcgVExWIE1VU1QgYmUgYWxzbyBzZW50IGFzIHF1b3RlZCBpbiAjMS4NCg0KNC4gTm8gaW5u ZXIgRUFQIG1ldGhvZCBpcyBleGVjdXRlZCBpbnNpZGUgdGhlIHR1bm5lbC4NCioqKiBSRkMgc2F5 cyAqKioNClNlY3Rpb24gMy4zLjMgIkEgc3VjY2Vzc2Z1bCBURUFQIFBoYXNlIDIgY29udmVyc2F0 aW9uIE1VU1QgYWx3YXlzIGVuZCBpbiBhIHN1Y2Nlc3NmdWwgQ3J5cHRvLUJpbmRpbmcgVExWIGFu ZCBSZXN1bHQgVExWIGV4Y2hhbmdlLiAgQSBURUFQIHNlcnZlciBtYXkgaW5pdGlhdGUgdGhlIENy eXB0by1CaW5kaW5nIFRMViBhbmQgUmVzdWx0IFRMViBleGNoYW5nZSB3aXRob3V0IGluaXRpYXRp bmcgYW55IEVBUCBjb252ZXJzYXRpb24gaW4gVEVBUCBQaGFzZSAyIg0KU2VjdGlvbiA0LjIuMTMg IlRoZSBDcnlwdG8tQmluZGluZyBUTFYgTVVTVCBiZSBleGNoYW5nZWQgYW5kIHZlcmlmaWVkIGJl Zm9yZSB0aGUgZmluYWwgUmVzdWx0IFRMViBleGNoYW5nZSwgcmVnYXJkbGVzcyBvZiB3aGV0aGVy IHRoZXJlIGlzIGFuIGlubmVyIEVBUCBtZXRob2QgYXV0aGVudGljYXRpb24gb3Igbm90Ig0KDQoq KioqKioNCkpvdW5pLCB5b3UgcHJvdmlkZWQgbXVsdGlwbGUgc3VnZ2VzdGlvbnMgZm9yIGZpeGlu ZyB0aGlzLiBJbmNvcnBvcmF0aW5nIHlvdSBzdWdnZXN0aW9ucywgdGhlIGJvdHRvbWxpbmUgY291 bGQgYmU6DQoqIFNlbmQgSW50ZXJtZWRpYXRlLVJlc3VsdCBUTFYgYWZ0ZXIgZWFjaCBpbm5lciBF QVAgbWV0aG9kIGJ1dCBub3QgYWZ0ZXIgQmFzaWMgUGFzc3dvcmQgQXV0aGVudGljYXRpb24gVExW IGV4Y2hhbmdlDQoqIFNlbmQgQ3J5cHRvLUJpbmRpbmcgVExWIGJhc2VkIG9uIGlubmVyIG1ldGhv ZCBNU0svRU1TSyBhZnRlciBlYWNoIGlubmVyIEVBUCBtZXRob2QgdGhhdCBleHBvcnRzIE1TSy9F TVNLIGFuZCBzZW5kIENyeXB0by1CaW5kaW5nIFRMViBiYXNlZCBvbiBaZXJvLU1TSyBpbiBjYXNl IG9mIG5vIGlubmVyIG1ldGhvZCB3YXMgZXhlY3V0ZWQNCg0KQW5kIHRoZW4gaXQgc2hvdWxkIGJl IGRlY2xhcmVkIGV4cGxpY2l0bHkgYW5kIGFsbCB0aGUgcGxhY2VzIHdoZXJlIHRoZXNlIFRMViBh cmUgbWVudGlvbmVkIGNhbiBiZSBmaXhlZCBhY2NvcmRpbmdseS4NCg0KUGxlYXNlIHNoYXJlIHlv dXIgb3Bpbmlvbi4NCn4gT2xlZw0KDQoNCg0K --_000_CH2PR21MB13813339128E14E66B6825F3D1B40CH2PR21MB1381namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KLk1zb0NocERlZmF1bHQN Cgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3Np emU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIx MDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIg Lz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxh bmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBhbSBnb2luZyB0byBjb25zaWRl ciB0aGVzZSAzIGVycmF0YSBzZXBhcmF0ZWx5IGFzIEkgdGhpbmsgaXQgaXMgY2xlYXJlc3Q6PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkVycmF0YSBJRCA1NzY3OjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5JIGJlbGlldmUgSm91bmnigJlzIGRpZmZlcmVudGlhdGlvbiBvZiBhbiDigJxFQVAgYXV0 aGVudGljYXRpb24gbWV0aG9k4oCdIHZzIOKAnEVBUCBtZXRob2TigJ0gaXMgdGhhdCBhbiDigJxF QVAgYXV0aGVudGljYXRpb24gbWV0aG9k4oCdIGhhcyBhIHR5cGUgJmd0Oz0gNC4gSm91bmkgbWVu dGlvbnMgdGhpcyBpbiBoaXMgZXJyYXRhIGZpbGluZyBhbmQgaXQgaXMgYWxzbyBtZW50aW9uZWQg aW4NCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmMzNzQ4I3NlY3Rpb24t Mi4xIj5SRkMgMzc0OCBTZWN0aW9uIDIuMTwvYT4gKHBvc3NpYmx5IG90aGVyIHBsYWNlcyBhbHNv KS4gSm91bmksIEkgYXBvbG9naXplIGlmIEkgaGF2ZSBtaXNpbnRlcnByZXRlZCDigJMgcGxlYXNl IGNvcnJlY3QgbWUgaWYgc28uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNvLCBhbiBFQVAtSWRl bnRpdHkgKHR5cGUgMSkgcmVxdWVzdCBpcyBhbiDigJxFQVAgbWV0aG9k4oCdLCBidXQgdGhlcmUg aXMgb2J2aW91c2x5IG5vIGludGVybWVkaWF0ZSByZXN1bHQgVExWIG9yIGNyeXB0byBiaW5kaW5n IFRMViBleGNoYW5nZWQgYWZ0ZXIgYW4gRUFQLUlkZW50aXR5IGV4Y2hhbmdlLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5Kb3VuaSBoYXMgZG9uZSBhbiBleGNlbGxlbnQgam9iIGluIHRoaXMgZXJy YXRhIG9mIGlkZW50aWZ5aW5nIHdoZXJlIHRoZSB0ZXJtaW5vbG9neSBzaG91bGQgYmUgdXBkYXRl ZCwgYW5kIEkgYWdyZWUgd2l0aCBKb3VuaeKAmXMgY2hhbmdlcy4gSSB0aGluayB0aGUgaW50ZW50 IG9mIHRoZSBSRkMgaW4gdGhlIGZvdXIgaW5zdGFuY2VzIEpvdW5pIGlkZW50aWZpZWQgd2FzIGZh aXJseSBjbGVhci48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RXJyYXRhIElEIDU4NDQ6PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPk9sZWcsIHlvdXIgZmluYWwgcHJvcG9zYWwgc2VlbXMgdG8gaW5k aWNhdGUgdGhhdCBhbiBJbnRlcm1lZGlhdGUtUmVzdWx0IFRMViBzaG91bGQgTk9UIGJlIHNlbnQg YWZ0ZXIgQmFzaWMgUGFzc3dvcmQgQXV0aGVudGljYXRpb24g4oCTIEnigJltIG5vdCBzdXJlIEkg Zm9sbG93IHRoaXMuIFNlY3Rpb24gMy4zLjIgb3V0bGluZXMgdGhhdCBhbiBJbnRlcm1lZGlhdGUt UmVzdWx0IFRMViBTSE9VTEQgYmUgc2VudCBhZnRlcg0KIEJhc2ljIFBhc3N3b3JkIEF1dGhlbnRp Y2F0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TbyBJIGZpbmQgdGhpcyBlcnJhdGEgdmFs aWQgYW5kIGFncmVlIHdpdGggSm91bmkgdGhhdCBzZWN0aW9uIEMuMSBhbmQgQy4yIHNob3VsZCBi ZSB1cGRhdGVkIHRvIGluY2x1ZGUgdGhlIEludGVybWVkaWF0ZS1SZXN1bHQgVExWIGluIHRoZSBk aWFncmFtcy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBhZ3JlZSB3aXRoIHRoZSByZXN0IG9m IHRoZSBwcm9wb3NhbHMgSm91bmkgaGFzIG1hZGUgYXMgd2VsbCB0aGF0IHRoaXMgc2hvdWxkIGJl IG1hZGUgY2xlYXJlciB0aHJvdWdob3V0IHRoZSBkb2N1bWVudC4gTW9zdCBvZiB0aGUgdGltZSB3 aGVyZSB0aGUgSW50ZXJtZWRpYXRlLVJlc3VsdCBUTFYgaXMgbWVudGlvbmVkLCBvbmx5IEVBUCBp cyBkaXNjdXNzZWQgYW5kIHRoZSBCYXNpYyBQYXNzd29yZCBBdXRoZW50aWNhdGlvbg0KIGlzIGZv cmdvdHRlbi4gSSBkb27igJl0IGJlbGlldmUgSm91bmnigJlzIHByb3Bvc2FscyBjaGFuZ2UgYW55 IHRpbWluZ3Mg4oCTIGp1c3QgY2xhcmlmeSB0aGUgbGFuZ3VhZ2UuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkVycmF0YSBJRCA1ODQ1OjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGZpbmQgdGhl IGVycmF0YSB2YWxpZCBhbmQgYWdyZWUgd2l0aCBKb3VuaS4gVGhlIGRpcmVjdGlvbiBpbiB0aGUg cmVzdCBvZiB0aGUgZG9jdW1lbnQgc2VlbXMgdG8gYmUgdGhhdCBhbiBJbnRlcm1lZGlhdGUtUmVz dWx0IFRMViBpcyBhbHdheXMgZXhjaGFuZ2VkIChhZnRlciBib3RoIEVBUCBhdXRoZW50aWNhdGlv biBtZXRob2RzIGFuZCBCYXNpYyBQYXNzd29yZCBBdXRoZW50aWNhdGlvbnMpIGFuZCB0aGUgdGV4 dA0KIGluIDMuMy4xIGlzIGNvbmZ1c2luZy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+KioqKio8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SW4gc3VtbWFyeSDigJMgSSBmaW5kIGFsbCBvZiB0aGVz ZSBlcnJhdGEgdmFsaWQgYW5kIGFwcHJlY2lhdGUgSm91bmnigJlzIHN1Z2dlc3Rpb25zIGZvciBj bGFyaWZpY2F0aW9ucy4gSSBmaW5kIHRoZW0gYWxsIHRvIGJlIGxhbmd1YWdlIGNsYXJpZmljYXRp b25zIGFuZCBkb27igJl0IGJlbGlldmUgYW55IGV4Y2hhbmdlcyBuZWVkIHRvIGJlIGFsdGVyZWQu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9sZWcsIHlvdXIgZmluYWwgcHJvcG9zYWwgc2VlbXMg dG8gYmUgcmVtb3ZpbmcgdGhlIGV4Y2hhbmdlIG9mIEludGVybWVkaWF0ZS1SZXN1bHQgVExWcyBp biB0aGUgQmFzaWMgUGFzc3dvcmQgQXV0aGVudGljYXRpb24gY2FzZSDigJMgSSBhbSBub3Qgc3Vy ZSBJIGZvbGxvdyB0aGlzIGJ1dCBpZiB5b3UgYmVsaWV2ZSB0aGlzIGlzIG5lZWRlZCBmb3IgdGhl IHJlc29sdXRpb24gb2YgdGhpcyBlcnJhdGEgSSB3b3VsZA0KIGxpa2UgdG8gYmV0dGVyIHVuZGVy c3RhbmQgd2h5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MsPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Kb3JnZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gRW11ICZsdDtlbXUtYm91bmNlc0Bp ZXRmLm9yZyZndDsgPGI+T24gQmVoYWxmIE9mIDwvYj4NCk9sZWcgUGVrYXI8YnI+DQo8Yj5TZW50 OjwvYj4gU3VuZGF5LCBNYXkgMywgMjAyMCAxMDowMiBBTTxicj4NCjxiPlRvOjwvYj4gSm91bmkg TWFsaW5lbiAmbHQ7akB3MS5maSZndDs7IEVNVSBXRyAmbHQ7ZW11QGlldGYub3JnJmd0Ozxicj4N CjxiPlN1YmplY3Q6PC9iPiBbRW11XSBURUFQIC0gUkZDIDcxNzAgLSBFcnJhdGE8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkmbmJzcDtKb3VuaSw8bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Zb3UgZmlsZWQmbmJzcDtFcnJhdGEgSUQ6 IDU3NjcsIDU4NDQsIDU4NDUgcmVnYXJkaW5nIHNlbmRpbmcgb2YgSW50ZXJtZWRpYXRlLVJlc3Vs dCBUTFYuIENhbiB3ZSBjbGFyaWZ5IGEgZ2VuZXJhbCBzY2hlbWUgb2Ygc2VuZGluZyZuYnNwO0lu dGVybWVkaWF0ZS1SZXN1bHQgVExWIGFuZCBDcnlwdG8tQmluZGluZyBUTFYgaW4gYWxsIGNhc2Vz PyBJdCBpcyBub3QgZXhhY3RseSBjbGVhciB3aGF0IGlzICZxdW90O0VBUCBhdXRoZW50aWNhdGlv bg0KIG1ldGhvZCZxdW90OyBhbmQgd2hhdCBpcyBpdHMgZGlmZmVyZW50IGZyb20gJnF1b3Q7RUFQ IG1ldGhvZCZxdW90OyAoeW91IHJlZmVycmVkIHRvIGFwcGVuZGl4IEMuMyBhcyBhbiBleGFtcGxl IG9mICZxdW90O0VBUCBNZXRob2QmcXVvdDsgYnV0IGl0IGlzIG5vdCBjbGVhciB3aHkgaXQgaXMg bm90IGFuICZxdW90O0VBUCBhdXRoZW50aWNhdGlvbiBtZXRob2QmcXVvdDsgLSBjb3VsZCB5b3Ug cGxlYXNlIGNsYXJpZnkpLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5IZXJlJ3MgdGhlIGxpc3Qgb2YgY2FzZXMgd2l0aCB0aGUgY3VycmVudCBS RkMgaW5zdHJ1Y3Rpb25zIChwbGVhc2UgYWRkIGlmIHNvbWV0aGluZyBpcyBtaXNzaW5nKTo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MS4gQSBz aW5nbGUgaW5uZXIgRUFQIG1ldGhvZCBpcyBleGVjdXRlZCBpbnNpZGUgdGhlIHR1bm5lbC4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+KioqIFJGQyBzYXlzICoqKiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Y29sb3I6YmxhY2siPlNlY3Rpb24gNC4yLjExICZxdW90Ozwvc3Bhbj5BbiBJbnRlcm1lZGlh dGUtUmVzdWx0IFRMViBpbmRpY2F0aW5nIHN1Y2Nlc3MgTVVTVCBiZSBhY2NvbXBhbmllZCBieSBh IENyeXB0by1CaW5kaW5nIFRMViZxdW90Oy4gU2VjdGlvbiAzLjMgJnF1b3Q7UGhhc2UgMiBNVVNU IGFsd2F5cyBlbmQgd2l0aCBhIENyeXB0by1CaW5kaW5nIFRMViBleGNoYW5nZSZxdW90OzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Mi4gTXVsdGlwbGUmbmJzcDtpbm5lciBFQVAgbWV0aG9kcyBhcmUgZXhlY3V0ZWQg aW5zaWRlIHRoZSB0dW5uZWwuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4qKiogUkZDIHNheXMgKioqJm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Y29sb3I6YmxhY2siPlNlbmQmbmJzcDtJbnRlcm1lZGlhdGUtUmVz dWx0IFRMViZuYnNwOzwvc3Bhbj5pZiBtb3JlIHRoYW4gb25lIG1ldGhvZCBpcyBnb2luZyB0byBi ZSBleGVjdXRlZCBpbiB0aGUgdHVubmVsLiBTZW5kJm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Y29sb3I6YmxhY2siPkNyeXB0by1CaW5kaW5nIFRMViBpZiZuYnNwOzwvc3Bhbj5J bnRlcm1lZGlhdGUtUmVzdWx0DQogVExWIGluZGljYXRlcyBzdWNjZXNzLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U2VjdGlvbiAzLjMuMSAmcXVv dDtJZiBtb3JlIHRoYW4gb25lIG1ldGhvZCBpcyBnb2luZyB0byBiZSBleGVjdXRlZCBpbiB0aGUg dHVubmVsLCB0aGVuIHVwb24gbWV0aG9kIGNvbXBsZXRpb24sIHRoZSBzZXJ2ZXIgTVVTVCBzZW5k IGFuIEludGVybWVkaWF0ZS1SZXN1bHQgVExWIGluZGljYXRpbmcgdGhlIHJlc3VsdCZxdW90OyAt IHdyb25nPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5TZWN0aW9uIDMuMy4zICZxdW90O1RoZSBDcnlwdG8tQmluZGluZyBUTFYgYW5kIEludGVybWVk aWF0ZS1SZXN1bHQgVExWIE1VU1QgYmUgaW5jbHVkZWQgdG8gcGVyZm9ybSBjcnlwdG9ncmFwaGlj IGJpbmRpbmcgYWZ0ZXIgZWFjaCBzdWNjZXNzZnVsIEVBUCBtZXRob2QgaW4gYSBzZXF1ZW5jZSBv ZiBvbmUgb3IgbW9yZSBFQVAgbWV0aG9kcyZxdW90OyAtIGNvcnJlY3Q8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4zLiZuYnNwOzxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2NvbG9yOmJsYWNrIj5CYXNpYyBQYXNzd29yZCBB dXRoZW50aWNhdGlvbiAodXNpbmcmbmJzcDtCYXNpYy1QYXNzd29yZC1BdXRoLVJlcS9SZXNwb25z ZSkgaXMgZXhlY3V0ZWQgaW5zaWRlIHRoZSB0dW5uZWw8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+KioqIFJGQyBzYXlzICoq KjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Y29sb3I6YmxhY2siPlNlbmQmbmJzcDtJbnRlcm1l ZGlhdGUtUmVzdWx0IFRMVi4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtj b2xvcjpibGFjayI+U2VjdGlvbiAzLjMuMiAmcXVvdDs8L3NwYW4+VXBvbiByZWNlaXZpbmcgdGhl IHJlc3BvbnNlLCB0aGUgc2VydmVyIGluZGljYXRlcyB0aGUgc3VjY2VzcyBvciBmYWlsdXJlIG9m IHRoZSBleGNoYW5nZSB1c2luZyBhbiBJbnRlcm1lZGlhdGUtUmVzdWx0IFRMViZxdW90OyAtIHRo dXMgQ3J5cHRvLUJpbmRpbmcgVExWIE1VU1QgYmUgYWxzbyBzZW50IGFzIHF1b3RlZA0KIGluICMx LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2NvbG9yOmJsYWNrIj40LiBObyBp bm5lciBFQVAgbWV0aG9kIGlzIGV4ZWN1dGVkIGluc2lkZSB0aGUgdHVubmVsLjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4q KiogUkZDIHNheXMgKioqPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtjb2xvcjpibGFjayI+U2Vj dGlvbiAzLjMuMyAmcXVvdDs8L3NwYW4+QSBzdWNjZXNzZnVsIFRFQVAgUGhhc2UgMiBjb252ZXJz YXRpb24gTVVTVCBhbHdheXMgZW5kIGluIGEgc3VjY2Vzc2Z1bCBDcnlwdG8tQmluZGluZyBUTFYg YW5kIFJlc3VsdCBUTFYgZXhjaGFuZ2UuJm5ic3A7IEEgVEVBUCBzZXJ2ZXIgbWF5IGluaXRpYXRl IHRoZSBDcnlwdG8tQmluZGluZyBUTFYgYW5kIFJlc3VsdA0KIFRMViBleGNoYW5nZSB3aXRob3V0 IGluaXRpYXRpbmcgYW55IEVBUCBjb252ZXJzYXRpb24gaW4gVEVBUCBQaGFzZSAyJnF1b3Q7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtjb2xvcjpibGFjayI+U2VjdGlvbiA0LjIuMTMgJnF1b3Q7 PC9zcGFuPlRoZSBDcnlwdG8tQmluZGluZyBUTFYgTVVTVCBiZSBleGNoYW5nZWQgYW5kIHZlcmlm aWVkIGJlZm9yZSB0aGUgZmluYWwgUmVzdWx0IFRMViBleGNoYW5nZSwgcmVnYXJkbGVzcyBvZiB3 aGV0aGVyIHRoZXJlIGlzIGFuIGlubmVyIEVBUCBtZXRob2QgYXV0aGVudGljYXRpb24gb3Igbm90 JnF1b3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Y29sb3I6YmxhY2siPioq KioqKjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2NvbG9yOmJsYWNrIj5Kb3VuaSwg eW91IHByb3ZpZGVkIG11bHRpcGxlIHN1Z2dlc3Rpb25zIGZvciZuYnNwO2ZpeGluZyB0aGlzLiBJ bmNvcnBvcmF0aW5nIHlvdSBzdWdnZXN0aW9ucywgdGhlJm5ic3A7PC9zcGFuPmJvdHRvbWxpbmUg Y291bGQgYmU8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtjb2xvcjpibGFjayI+Ojwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2NvbG9yOmJsYWNrIj4qJm5ic3A7U2VuZCZuYnNw O0ludGVybWVkaWF0ZS1SZXN1bHQgVExWIGFmdGVyIGVhY2ggaW5uZXIgRUFQIG1ldGhvZCBidXQg bm90IGFmdGVyJm5ic3A7PC9zcGFuPkJhc2ljIFBhc3N3b3JkIEF1dGhlbnRpY2F0aW9uIFRMViBl eGNoYW5nZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+KiBTZW5kJm5ic3A7Q3J5cHRvLUJpbmRpbmcgVExWIGJhc2VkIG9uIGlubmVyIG1ldGhvZCBN U0svRU1TSyBhZnRlciBlYWNoIGlubmVyIEVBUCBtZXRob2QgdGhhdCBleHBvcnRzIE1TSy9FTVNL IGFuZCBzZW5kIENyeXB0by1CaW5kaW5nIFRMViBiYXNlZCBvbiBaZXJvLU1TSyBpbiBjYXNlIG9m IG5vIGlubmVyIG1ldGhvZCB3YXMgZXhlY3V0ZWQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QW5kIHRoZW4gaXQgc2hvdWxkIGJlIGRlY2xhcmVk IGV4cGxpY2l0bHkgYW5kIGFsbCB0aGUgcGxhY2VzIHdoZXJlIHRoZXNlIFRMViBhcmUgbWVudGlv bmVkIGNhbiBiZSBmaXhlZCBhY2NvcmRpbmdseS4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UGxlYXNlIHNoYXJlIHlvdXIgb3Bpbmlv bi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPn4g T2xlZzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5 Pg0KPC9odG1sPg0K --_000_CH2PR21MB13813339128E14E66B6825F3D1B40CH2PR21MB1381namp_-- From nobody Sun May 24 01:46:36 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E5DDF3A02BE; Sun, 24 May 2020 01:46:33 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Menachem Dodge via Datatracker To: Cc: draft-ietf-emu-eap-session-id.all@ietf.org, emu@ietf.org, last-call@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <159030999389.18523.3562586090873207782@ietfa.amsl.com> Reply-To: Menachem Dodge Date: Sun, 24 May 2020 01:46:33 -0700 Archived-At: Subject: [Emu] Opsdir last call review of draft-ietf-emu-eap-session-id-03 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 May 2020 08:46:34 -0000 Reviewer: Menachem Dodge Review result: Has Nits The document is well written and clearly expressed. I have a couple of nits: 1. The paragraphing could be made clearer in my opinion. "Section 2.3 Rationale" is the Rationale for sections 2.1 and 2.2 so I would put this in the section header, "Section 2.3 Rationale for EAP-AKA and EAP-SIM updates". it may be worth putting Section 2.4 as a separate numbering like 3. "Session-Id for PEAP" to keep it separate from 2.1, 2.2 and 2.3. 2. Is "Rationale" needed for the section 2.4 "Session-Id for PEAP"? I suppose that as it is missing altogether the "rationale" is implied but it may be worth adding a sentence to keep consistency in the document. From nobody Sun May 24 22:52:44 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E12D3A0BE3 for ; Sun, 24 May 2020 22:52:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eslX_fnRvQa7 for ; Sun, 24 May 2020 22:52:30 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50065.outbound.protection.outlook.com [40.107.5.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76D9B3A0BE1 for ; Sun, 24 May 2020 22:52:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=meWagdEJmnNqQUMDpDVSTfLKLaQQxTFBsFbP3c5eSM+t+R2iPJF+ut08pMaXh65L0+OH0MpFb3lEznsXtrpF78YfgkgmBDVeS3XV14DVeUpulPue+5E0429QbG+pQTfkBkD0XPORO64oJFf17NjTqLn25L0XJbU+2ew1yGVYdvnyM1hyw+xt1+WWuUsEHRBUkrK/50huEy9Ih3a1mTWtLn5Lmm9PUWdTYsBV+yfwSaCBzrVY9VjJ8r/xIQdRp8QE2DF5SBAQA4XZkDeYJIv3HlWrGEdZfFTpZtxElk/s31gToWSW0WJxMCekj+r6Y4tyNQo777jXFEzf7Je5d9PxZw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cz3b6w5uBHcF8q8zoN7ERkR3T7F+MA33EPw7u3pqQ1E=; b=T6OPlgSkSN8ZRKvNZspK0w9vxWnFBo3g1Qt2vhssIcCLjNBicEdyPflHK8Xs+a3Id86QPQPVLbLFloSZavNnYF8lhn1pdku6w4C1rNRp+0OJrjL7uoHHwtRjT6OMRtoEZM1j1vPYqJMGj6Z7qdQCNBfuMs9NP0jFHQWAbiJwfNAKvdqDKJLfMHV29c1Vk+r+x6WpPmskIjWfhtbKx2cG44ouRsWwc8vg7QBrarabyLGWrzPTlrpo65xK55TWlyJdrGYoiiIvf2SD53dOnJgn0I4/nSHa48dShYH3sbuhiHDxBAzX4yIsRY+W/T6tBA2tVHSV/4UzM3zINflCxCy9WA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cz3b6w5uBHcF8q8zoN7ERkR3T7F+MA33EPw7u3pqQ1E=; b=cDxpBEGGzp3HWu+YNvcmH1IHE4hUsMmBe9l6+2zU4ScWD+1zLqCadvCiY47RIuMnabiYhBtT6Xyd3LSYv1JUHWLFJX9tUYKCy8SvFqfcsXmCAtNYqP9vu79zMWZc2lkR0ayLG+S8W7uceVZ3QyZCs+xxuBPR6pGcj4nNm49imbo= Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com (2603:10a6:3:99::15) by HE1PR0701MB2940.eurprd07.prod.outlook.com (2603:10a6:3:4c::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3045.13; Mon, 25 May 2020 05:52:26 +0000 Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74]) by HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74%6]) with mapi id 15.20.3045.014; Mon, 25 May 2020 05:52:26 +0000 From: Mohit Sethi M To: "emu@ietf.org" Thread-Topic: Minutes and bluesheets from EMU virtual interim Thread-Index: AQHWMliqb3IZ+e0qMU+kwjAx0ZO7xw== Date: Mon, 25 May 2020 05:52:26 +0000 Message-ID: <0dd795c9-9c9f-6716-b5be-70ae75c305e0@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [178.55.173.23] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 33b2a9b6-161d-4dad-54a6-08d8006fcdd6 x-ms-traffictypediagnostic: HE1PR0701MB2940: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0414DF926F x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: SccRcoSRcrI2yNeN+iRXLlNAm5BNJHfb/kMe5wcb8WTBzbINSA5dW9nn3uLCvgJf94j2cootQavampYeO2BptgwE8mfsMUIX97UY+KUNbDRK3ao/1ja8536CHUw2ZZFlv7SZ3y4ohrAOSA9nAUrKtO2qUCy//jud4LeBMeYdmnd5a/yb4JRMdxsbujgaTUGueMaM0uAV7rskeI3MKnym4VXv2XCGUdija14aAovhlCTJsFFj5rCF2ia2tnHp1lLCrO54ofuqWemX+17y9MALoLREw+ODe6sIR5SN3qmDy+uC6E6o9w1jFzFzPe3I9LRe4lif4e/5i6zeRobqhTmqGiL4RG9rYUjCEvFeRztwVXqle9nJhI/fkeQN8ZhVWVQsjMtx3WsWIm8PeD+mB04ZcYd1klibQ6b5GlcsIc51B3XJ5Vz1OjG46pK8Rs0vL8BUJueV5J7FsALhV5guehyynQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB2761.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(136003)(396003)(366004)(346002)(39860400002)(76116006)(66476007)(64756008)(66446008)(66946007)(66556008)(478600001)(8676002)(31696002)(6916009)(316002)(31686004)(4744005)(966005)(8936002)(36756003)(2616005)(5660300002)(86362001)(26005)(6506007)(186003)(71200400001)(6512007)(6486002)(2906002)(43740500002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 6ZXOCm100sNwHW2vidkkcLkXJ04dNBqj/CzVLpXiy6jvsU6FjNu97FdmrCxVWcIBBr94FyE75I+KT6ZVqh/nv0RsSLToZPT7gylCAS/jwMcBJL8quCR3NDx+L2dO09zjG68zakXstl2OeDyQXUDPPevzOy4n5w5GGHdlWHaAwiMdGmD5jGJJxlnlIXgyOxJQbHuiViHjnwKvDZzHSmR2RMJ9MLb1SmC2oNGIm9eXrTYLp/Qc9UKAQ+00CO1MSUmWnjH3zDZ2Wnj0hs7bCiJl4E7aFKFVKNLw1NQdcMBrdQ7QWqlzCESEaJbJu7G+NFwfvTKAhApKQ6TYWVD270nbKA0U/A+E6g2x+GnhfbF/hcna7gV5EVZuIqq+i1aeiX9pepbYzwi+u+c15Awfs0PBIYn9MNYjR+teHJicBeBqolao7ejdwuxoWWubhqa0lVW6Dc6DxSNxgYdgMTm77YNptUPbKzyc9f0BIAHNYqqHidQ= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 33b2a9b6-161d-4dad-54a6-08d8006fcdd6 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 May 2020 05:52:26.5991 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: PH1Xax/kj5B6/hjQNuPAQuLkFJPXDXEfjFypj7gnNScf8TXkoZk2AO5h6ptipp8KAkOatKMnkMvkwaJVasI11ZDVXqW6Af0sj4Ehf+ZCCeQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2940 Archived-At: Subject: [Emu] Minutes and bluesheets from EMU virtual interim X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 May 2020 05:52:40 -0000 RGVhciBhbGwsDQoNClRoYW5rIHlvdSBmb3IgcGFydGljaXBhdGluZyBpbiB0aGUgRU1VIHZpcnR1 YWwgaW50ZXJpbSBvbiBGcmlkYXkuIEEgDQpzcGVjaWFsIHRoYW5rIHlvdSB0byBNYXggQ3JvbmUg Zm9yIHZvbHVudGVlcmluZyBhcyB0aGUgbWludXRlIHRha2VyLiANCk1lZXRpbmcgbWludXRlcyBh bmQgYmx1ZXNoZWV0cyBmcm9tIHRoZSB2aXJ0dWFsIGludGVyaW0gaGF2ZSBub3cgYmVlbiANCnVw bG9hZGVkLg0KDQpNaW51dGVzOiANCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvbWVldGlu Zy9pbnRlcmltLTIwMjAtZW11LTAxL21hdGVyaWFscy9taW51dGVzLWludGVyaW0tMjAyMC1lbXUt MDEtMjAyMDA1MjIxODAwDQpCbHVlc2hlZXRzOiANCmh0dHBzOi8vd3d3LmlldGYub3JnL3Byb2Nl ZWRpbmdzL2ludGVyaW0tMjAyMC1lbXUtMDEvYmx1ZXNoZWV0cy9ibHVlc2hlZXRzLWludGVyaW0t MjAyMC1lbXUtMDEtMjAyMDA1MjIxODAwLTAwLnR4dA0KDQpQbGVhc2UgcmVwb3J0IGFueSBpc3N1 ZXMgYnkgSnVuZSAxLCAyMDIwLg0KDQpKb2UgYW5kIE1vaGl0DQoNCg== From nobody Mon May 25 20:57:09 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 985583A02BB for ; Mon, 25 May 2020 20:57:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=salowey-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3bXziwPVHzJ8 for ; Mon, 25 May 2020 20:57:06 -0700 (PDT) Received: from mail-qt1-x835.google.com (mail-qt1-x835.google.com [IPv6:2607:f8b0:4864:20::835]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB2163A017E for ; Mon, 25 May 2020 20:57:05 -0700 (PDT) Received: by mail-qt1-x835.google.com with SMTP id m44so15167890qtm.8 for ; Mon, 25 May 2020 20:57:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salowey-net.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=9oMcOk0TxjlQdZgsP4ostVFVj2+1h/eRhAfieGQD0xM=; b=G/u5CadnCLKE5b48Vq3cWY3h16negtdI283GQzmIB32tT/QkDTwTpoYqohOEYYk0ry dyS3akmDv8y6jB6rWU8ha7jlIyOz8I32mrepLilANnKS9lCoIMrvI/XzIKshtCUd+I5H EziJkMnn11ljvBJvDg1vVtKZCc+R+3RfjO76sG5hvpgF18ATQxvdRRlAGaUqmktxvsy6 H+eQoD4OEOr5oPDj5+Psli0fUx5lUDBHKCJByDwSg8WSivv0gBvk3AKrLCjBG5QcD/2m CX+ChOmtlJ+cdUWGo0DjCbWFAxwL6CaiW8xEVBlQdZ8HbslKHvazfk4naxcFTK4z/4ij kAJQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=9oMcOk0TxjlQdZgsP4ostVFVj2+1h/eRhAfieGQD0xM=; b=LeYHXHMkMgDdKwC9s7DRdLoP3IWDuvgvAelp5hM+w4H8rstGfXMpuCorZ2S0blqqe2 UTUMVCS9fiQJ0QDABukujRpTJrAPQUq8lnyh7FN/suQZDGgrgzgWaNhppWzAJ52FH6DK GOdbyP93bEG+sUplscR+GIun2JHHYp/V1Y6QdVsBa3vTsbZPIsFG8ZqFzw/Zp95x855V yzoOCy9xtyZZNqE0r4h7L6WTVrsCPDTNMxnDGjEfpk6IdG8C41usSJqEHmSa5o3+XMtm k7rdAgGoyOi0wGxEbjx2cN6M1qo+k9L0xYW+cWyJXArfI3lAgxPK5UpEV50FKhXCPvWg OI2g== X-Gm-Message-State: AOAM533Q+xGH9G+BhK2iaAsZluaWlomhM9mOkpo32N+dkHoNiwFpykua ch8Brux4n+lwAhTTYGz/b5LXAg6cr9Zu/r7tkFTiDk1wiw0= X-Google-Smtp-Source: ABdhPJxOfHJc94a5GIugqw14YfTUGGGspYP/It1fLLo6/syXcT6rcv6GdFxrlv3GdfYjiN9gMAn5YaMMagRheO1+I20= X-Received: by 2002:ac8:4c8d:: with SMTP id j13mr294807qtv.38.1590465423657; Mon, 25 May 2020 20:57:03 -0700 (PDT) MIME-Version: 1.0 From: Joseph Salowey Date: Mon, 25 May 2020 20:56:52 -0700 Message-ID: To: EMU WG Content-Type: multipart/alternative; boundary="0000000000009adf4905a685167d" Archived-At: Subject: [Emu] Early allocation request for an EAP Method Type number for draft-ietf-emu-eap-noob X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 03:57:09 -0000 --0000000000009adf4905a685167d Content-Type: text/plain; charset="UTF-8" The authors of EAP-NOOB (draft-ietf-emu-eap-noob) have requested early allocation of the EAP type code value 56. If you object to the early code point assignment please let the list know why by June 14, 2020. The criteria for early assignment includes the following: A. The code points must be from a space designated as "RFC Required", "IETF Review", or "Standards Action". Additionally, requests for early assignment of code points from a "Specification Required" registry are allowed if the specification will be published as an RFC. EAP Methods have an allocation policy of Designated Expert, with Specification Required. The specification in this case the draft-ietf-emu-eap-noob. B. The format, semantics, processing, and other rules related to handling the protocol entities defined by the code points henceforth called "specifications") must be adequately described in an Internet-Draft. The specification draft-ietf-emu-eap-noob-00 contains the protocol specifics. There are implementations based on this specification listed below C. The specifications of these code points must be stable; i.e., if there is a change, implementations based on the earlier and later specifications must be seamlessly interoperable. Although the document is a 00 document, the predecessor document draft-aura-eap-noob has been discussed for over a year. This call is a request for working group members to review the document and object if the specification is not stable. D. There is sufficient interest in the community for early (pre-RFC) implementation and deployment, or that failure to make an early allocation might lead to contention for the code point in the field. Several implementations exist, but it would be good to see if there is additional interest in implementing this protocol The authors note that currently, the following implementations of EAP-NOOB exist: 1. Implementation with wpa_supplicant (client) and hostapd (server): https://github.com/tuomaura/eap-noob 2. Lightweight implementation on Contiki (client only): https://github.com/eduingles/coap-eap-noob (Tested with server implementation from #1) 3. Minimal EAP-NOOB (based on #1 with cleaner code and updates to match current draft version): https://github.com/Vogeltak/eap-noob Thanks, Joe --0000000000009adf4905a685167d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
The authors of EAP-NOOB (draft-ietf-emu-eap-noob) have req= uested early allocation of the EAP type code value 56.=C2=A0 If you object = to the early code point assignment please let the list know why by June 14,= 2020.=C2=A0=C2=A0

The criteria for early assignment inc= ludes the following:

A.=C2=A0 =C2=A0 The code points must be = from a space designated as "RFC Required", "IETF Review"= ;, or "Standards Action".=C2=A0 Additionally,=C2=A0requests for e= arly assignment of code points from a "Specification Required" re= gistry are allowed if the specification will be published as an RFC.
<= div>
EAP Methods have an allocation policy of=C2=A0Designated Expert, with Specific= ation Required.=C2=A0 The specification in this case the=C2=A0draft-= ietf-emu-eap-noob.

B.=C2=A0 The format, semantics, processing, and o= ther rules related to handling the protocol entities defined by the code po= ints henceforth called "specifications") must be adequately descr= ibed in an Internet-Draft.

The specification draft= -ietf-emu-eap-noob-00 contains the protocol specifics.=C2=A0 There are impl= ementations based on this specification listed below

C. The specifications of these code points must be stable; i.e., if = there is a change, implementations based on the earlier and later specifica= tions must be seamlessly interoperable.=C2=A0

Alth= ough the document is a 00 document, the predecessor document=C2=A0draft-aura-eap-noob=C2=A0has been discussed for over a year.= =C2=A0 This call is a request for working group members to review the docum= ent and object if the specification is not stable.=C2=A0=C2=A0

=
D. There is sufficient interest in the community for early (pre-RFC) i= mplementation and deployment, or that failure to make an early allocation m= ight lead to contention for the code point in the field.
Several implementations exist, but it would be good to see if = there is additional interest in implementing this protocol

The authors note that currently, the following implementations of = EAP-NOOB exist:

1. Implementation with wpa_supplicant (client) and= hostapd (server):
https://github.com/tuomaura/eap-noob<= br>
2. Lightweight implementation on Contiki (client only):
https://github.com/eduingles/coap-eap-noob=C2=A0(Tested wit= h server
implementation from #1)

3. Minimal EAP-NOOB (based on #1= with cleaner code and updates to match
current draft version):=C2=A0https://github.com/Vogeltak/eap-noob

Thanks,=

Joe
--0000000000009adf4905a685167d-- From nobody Mon May 25 21:27:26 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E7A63A0831 for ; Mon, 25 May 2020 21:27:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=salowey-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JXfnKlYTO2bu for ; Mon, 25 May 2020 21:27:22 -0700 (PDT) Received: from mail-qk1-x72f.google.com (mail-qk1-x72f.google.com [IPv6:2607:f8b0:4864:20::72f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B6263A082F for ; Mon, 25 May 2020 21:27:22 -0700 (PDT) Received: by mail-qk1-x72f.google.com with SMTP id f18so2578091qkh.1 for ; Mon, 25 May 2020 21:27:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salowey-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=LIY3GZQftC3rTBqc+E5a9hi1zZlP2dUvSR0NfvqOObI=; b=iajAaMOWB8M8SZarnwjeogLmV/6QZfpsD1FFqE2rWiNXcokxMqZeoYwX1q4VNF4DvW uv9NWb0eFh4dYbuMJ/FPBQSUnFPgK8rfkb9cttSLuOTAs52R9wf4QnsZrAsRwdE0aiIe KAOtdQyKhNz7KxnLKb/KAenOV/YTok1O1BpO8YY3TZ/dFY70890Vzz62m2OhgHjiTLZf sa6n/hxx/wo+t5kyX3gsIkZ+qPEswo/6JKAsP1XQtuLkg/wSAsqSRM0Q3ifR9hRvDwrl D0B27LHVWJ0CPZ2p27MAX9SWfaahcc0+sREiSGfJTCzfPtQgalWTlkZo21+DqgXQN5OF 4a/g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=LIY3GZQftC3rTBqc+E5a9hi1zZlP2dUvSR0NfvqOObI=; b=NcP+AfElBalMw52LO8Q6cgd2xlhqrb9D+djRRsISpia/wBEyebC7J8TxiXzDFnYydK 77eOxqNwL1Uiy5SKLbeCPGGt2F3wxMykRdnZKSJBcxDQgsOP+qfhViT4QosOVoGtFvNA MArJSvjZJyK+kjxyzqp8uH1t771DkfFOQdxEUr/7nbWPtNDPF4T1pjb7/5MdP/PxtSu6 CKggCyVYnMR/Sky6inmrwGWXenGL4pkcxVz+wgBvBMFAKzK0NAaGtJXKH8DdltKxkw84 anrmesX4Q0m/7uaX28faT2IVycOzglwtRPPS5h0/IwRd8pg3e7PRe0wuXooZRg3FB+h2 R2tA== X-Gm-Message-State: AOAM5308s6FeX3qVFt2gex9YTI1JTJElPzjn2nrKwby8icW6SJ19LeWg MKLQKf/V/FxcA0ZWlzU5B8cQk7QcuGkJAZiPBncvvw== X-Google-Smtp-Source: ABdhPJzNnU72rlCeklobYNrSqWJkrLx4loZZJ/KXNUJitlSfJ7rV8rBgNOPFflournvbVO6vB1t1bT9eKNxWMKYNUmI= X-Received: by 2002:a37:4c48:: with SMTP id z69mr29128502qka.138.1590467241354; Mon, 25 May 2020 21:27:21 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Joseph Salowey Date: Mon, 25 May 2020 21:27:10 -0700 Message-ID: To: Jorge Vergara Cc: Oleg Pekar , Jouni Malinen , EMU WG Content-Type: multipart/alternative; boundary="000000000000f2cae505a6858204" Archived-At: Subject: Re: [Emu] TEAP - RFC 7170 - Errata ID 5768 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 04:27:25 -0000 --000000000000f2cae505a6858204 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, May 22, 2020 at 1:18 PM Jorge Vergara wrote: > My review of this errata and the current responses from Oleg: > > > > 1. I agree with this proposed resolution. I do think this is an > important omission that needs to be clarified in the RFC. Otherwise it= is > somewhat guesswork that truncation is the right action. I think the cu= rrent > wording leans toward truncation, but I definitely asked this question > myself while implementing. > > [Joe] Why not just change the TLV to be variable length? It seems if we hardcode the length to 100 we risk having the same problem in the future? > > 1. > 2. This bleeds into Alan=E2=80=99s TLS 1.3 document somewhat, but I ag= ree with > Jouni that this will need to change when the rest of the document is > eventually updated to TLS 1.3. There are enough TLS 1.3 related things= to > address in TEAP that I don=E2=80=99t exactly view this as an errata. I= view it as a > needed update, whether in this document, Alan=E2=80=99s document, or b= oth. > > [Joe] I tend to agree that this is not an errata. However an update to TEAP should address these. > > 1. > 2. Agree with Jouni that I don=E2=80=99t see the point of the 0x37 oct= et, but > regardless this clarification of how it is encoded is positive (minor) > change. > > [Joe] I think the original reason to include the TEAP method ID in the specification was to make sure that we differentiated between similar crypto binding implementations in other protocols such as EAP-FAST. I don't think there is much ambiguity here, but I am OK with including 0x37 in the description. > > > Thanks, > > Jorge > > > > *From:* Emu *On Behalf Of * Oleg Pekar > *Sent:* Tuesday, May 5, 2020 6:27 AM > *To:* Jouni Malinen ; EMU WG > *Subject:* [Emu] TEAP - RFC 7170 - Errata ID 5768 > > > > Hi Jouni, > > I propose the following fix for the issues described in this errata id: > > 1) In Section "4.2.13. Crypto-Binding TLV" make "EMSK Compound MAC" and > "MSK Compound MAC" fields 32 octets long (currently 20 octets). The MAC > value is truncated at 32 octets if it is longer than 32 octets or padded = to > a length of 32 octets with zeros to the right if it is less than 32 octet= s. > The length of the TLV should be changed to 100 bytes (currently 76). > > > > The motivation is to keep collision-resistance strength of MAC on 128 bit= . > Hash value truncation is described in "NIST Special Publication 800-107 > Revision 1: Recommendation for Applications Using Approved Hash Algorithm= s" > > > > > > 2) In Section "5.3. Computing the Compound MAC" specify that "MAC is the > MAC function negotiated in TLS of TEAP Phase 1" (currently it says TLS > 1.2) > > > > The motivation is to support TLS 1.2, 1.3 and possibly later TLS versions= . > > > > 3) In Section "5.3. Computing the Compound MAC" when specifying the list > of field to be placed in the BUFFER" should say "...2 A single octet > contains TEAP EAP method type 0x37". Alternatively it could be "...2 A > single octet contains EAP Type of the inner EAP method related to the > calculation or 0 if no inner EAP method was executed" (currently "...2 T= he > EAP Type sent by the other party in the first TEAP message") > > > > Please note that there's still a discussion on sending Crypto-Binding TLV > on "Authentication inner EAP method" or "Inner EAP method that exports MS= K" > only. > > > > Thanks > > Oleg > _______________________________________________ > Emu mailing list > Emu@ietf.org > https://www.ietf.org/mailman/listinfo/emu > --000000000000f2cae505a6858204 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Fri, May 22, 2020 at 1:18 PM Jorge= Vergara <jovergar=3D4= 0microsoft.com@dmarc.ietf.org> wrote:

My review of this errata and the current responses f= rom Oleg:

=C2=A0

  1. I agree with this proposed resolution. I do think this is an impor= tant omission that needs to be clarified in the RFC. Otherwise it is somewh= at guesswork that truncation is the right action. I think the current wording leans toward truncation, but I definit= ely asked this question myself while implementing.
[Joe]=C2=A0 Why not just change the TLV to be variable lengt= h?=C2=A0 It seems if we hardcode the length to 100 we risk having the same = problem in the future?=C2=A0=C2=A0
=C2=A0
  2. This bleeds into Alan=E2= =80=99s TLS 1.3 document somewhat, but I agree with Jouni that this will ne= ed to change when the rest of the document is eventually updated to TLS 1.3= . There are enough TLS 1.3 related things to address in TEAP that I don=E2=80=99t exactly vie= w this as an errata. I view it as a needed update, whether in this document= , Alan=E2=80=99s document, or both.
= [Joe]=C2=A0 I tend to agree that this is not an errata.=C2=A0 However an up= date to TEAP should address these.=C2=A0
=C2=A0
  2. Agree with Jouni that I= don=E2=80=99t see the point of the 0x37 octet, but regardless this clarifi= cation of how it is encoded is positive (minor) change.
    3. <= /ol>

[Joe] I thi= nk the original reason to include the TEAP method ID in the specification w= as to make sure that we differentiated between similar crypto binding imple= mentations in other protocols such as EAP-FAST.=C2=A0 =C2=A0I don't thi= nk there is much ambiguity here, but I am OK with including 0x37 in the des= cription.=C2=A0=C2=A0
=C2=A0

=C2=A0

Thanks,

Jorge

=C2=A0

From: Emu <emu-bounces@ietf.org> On Behalf Of Oleg Pekar
Sent: Tuesday, May 5, 2020 6:27 AM
To: Jouni Malinen <j= @w1.fi>; EMU WG <emu@ietf.org>
Subject: [Emu] TEAP - RFC 7170 - Errata ID 5768

=C2=A0

Hi Jouni,

I propose the following fix for the issues described= in this errata id:

1) In Section "4.2.13.=C2=A0 Crypto-Binding TLV= " make "EMSK Compound MAC" and "MSK Compound MAC" = fields 32 octets long (currently 20 octets). The=C2=A0MAC value is truncate= d at 32 octets if it is longer than 32 octets or=C2=A0padded to a length of= 32 octets with zeros to the right if it is less than 32 octets. The length of= the TLV should be changed to 100 bytes (currently 76).=C2=A0=

=C2=A0

The motivation is to keep=C2=A0collision-resistance = strength of MAC on 128 bit. Hash value=C2=A0truncation is described in "NIST Special Publication 800-107 Revision 1: Recommendation for Appli= cations Using Approved Hash Algorithms"=C2=A0

=C2=A0

2) In Section "5.3.=C2=A0 Computing the Compoun= d MAC" specify that "MAC is the MAC function negotiated in TLS of= =C2=A0TEAP Phase 1" = (currently it says TLS 1.2)

=C2=A0

The motivation is to support TLS 1.2, 1.3 and possib= ly later TLS versions.

=C2=A0

3)=C2=A0In Section "5.3.=C2=A0 Computing the Co= mpound MAC" when specifying the list of field=C2=A0to be placed in the= BUFFER" should say=C2=A0"...2 =C2=A0A single octet contains TEAP= EAP method type 0x37". Alternatively it could be "...2 =C2=A0A s= ingle octet contains EAP Type of the inner EAP method related to the calculation or 0 if no inn= er EAP method was executed" (currently "...2 =C2=A0The EAP Type s= ent by the other party in the first TEAP message")

=C2=A0

Please note that there's still a discussion on s= ending Crypto-Binding TLV on "Authentication inner EAP method" or= "Inner EAP method that exports MSK" only.

=C2=A0

Thanks

Oleg

_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu
--000000000000f2cae505a6858204-- From nobody Mon May 25 23:57:28 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DDDF23A0C10; Mon, 25 May 2020 23:57:25 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: emu@ietf.org Message-ID: <159047624580.18151.8173719540463566179@ietfa.amsl.com> Date: Mon, 25 May 2020 23:57:25 -0700 Archived-At: Subject: [Emu] I-D Action: draft-ietf-emu-aka-pfs-04.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 06:57:26 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the EAP Method Update WG of the IETF. Title : Perfect-Forward Secrecy for the Extensible Authentication Protocol Method for Authentication and Key Agreement (EAP-AKA' PFS) Authors : Jari Arkko Karl Norrman Vesa Torvinen Filename : draft-ietf-emu-aka-pfs-04.txt Pages : 26 Date : 2020-05-25 Abstract: Many different attacks have been reported as part of revelations associated with pervasive surveillance. Some of the reported attacks involved compromising smart cards, such as attacking SIM card manufacturers and operators in an effort to compromise shared secrets stored on these cards. Since the publication of those reports, manufacturing and provisioning processes have gained much scrutiny and have improved. However, the danger of resourceful attackers for these systems is still a concern. This specification is an optional extension to the EAP-AKA' authentication method which was defined in [I-D.ietf-emu-rfc5448bis]. The extension, when negotiated, provides Perfect Forward Secrecy for the session key generated as a part of the authentication run in EAP- AKA'. This prevents an attacker who has gained access to the long- term pre-shared secret in a SIM card from being able to decrypt any past communications. In addition, if the attacker stays merely a passive eavesdropper, the extension prevents attacks against future sessions. This forces attackers to use active attacks instead. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-emu-aka-pfs/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-emu-aka-pfs-04 https://datatracker.ietf.org/doc/html/draft-ietf-emu-aka-pfs-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-emu-aka-pfs-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue May 26 01:53:17 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F0093A00E1 for ; Tue, 26 May 2020 01:53:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z92GcIha0Jky for ; Tue, 26 May 2020 01:53:11 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80085.outbound.protection.outlook.com [40.107.8.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42FA93A00DB for ; Tue, 26 May 2020 01:53:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hV/fyGRoz+D2m4MtSbMPN2xv8OT6NI1X1AcoC8EP4UvmJA2Oc2KI9u8E5RN6ucdnuEZbWuCaIyWDSQnHTB7rMUHI8NwfOJ4UM/6A9n8+Igt8dVyYNPpHEjcmpuvV/Vw1xPWwKQt7DfzsYbn3+6GOcGsi5ZQ3d+JlbEixYDyt0n9Vj4qPpDZZvXH6MC0uJQYSULVClXF38q5+Ayc/o1P7vvWS/mRzqjHY9F32M55zV++aCIwYoyh3hqPWMXXoAx1vCeb0iDvzwZ5k6wa6KR2LcDDjDgRPL1wNA670pODyoBZQkYgLSoWrk6awNOkblRWx5eWOD/gkAu8DwPhq68jzuA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8SCeNm2N3qdqbbOjRmgI5Sp0exKVj8K1TjVWkDi04mI=; b=kH6egtmj3B68hpu+qt7CFrm7MnooJG+pHN7tkXOJfysxL7mAOYEWz/dVAnPtwZKaDs7RJnJb1AOfEH4yqUWTLHU/HmTeQ74NoBE0RjpvqEE5QatR2ohX9BL/N4mEgH/3cBR2vBxeWWcLoZGhqkseRt6CplLbkH6JI2XjNJK9v8hvQgAZQf/fGrezVRUm/55cQKh/Yu8kLg1g5gqkCnE7R8PmljIuKaAiT8G2YYi6Ofytq/2jyPaSCJAzKAQRplNbU6zH8GpVk9ilQMuddB+RG8CmYGIMJwNJqu+4qNrosySC3twvfpxvK50+byoe9TQW09odOvUaySu2pqcQfBzLRA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8SCeNm2N3qdqbbOjRmgI5Sp0exKVj8K1TjVWkDi04mI=; b=W2Q2eb3j/adUlLjBIy8k76q1gIwVEpH3DrPbawGgXvdkR6CFCjbvs4wmafi0Uod74hPsV/pdirzDsh8J0MjWtc8Xl8IfFn5o1erlHRGftMVnRVsDPiMTrqyYp4LSwrwmUEdqdbF4j8CfKi0vJoBjfQX11An8VUCigVSYwS0EZb0= Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com (2603:10a6:3:99::15) by HE1PR0701MB2298.eurprd07.prod.outlook.com (2603:10a6:3:6d::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3045.10; Tue, 26 May 2020 08:53:06 +0000 Received: from HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74]) by HE1PR0701MB2761.eurprd07.prod.outlook.com ([fe80::25ab:14fb:244f:6d74%6]) with mapi id 15.20.3045.014; Tue, 26 May 2020 08:53:06 +0000 From: Mohit Sethi M To: Joseph Salowey , EMU WG Thread-Topic: [Emu] Early allocation request for an EAP Method Type number for draft-ietf-emu-eap-noob Thread-Index: AQHWMzsSV1Y3ulNYnUGIbR142aNHFQ== Date: Tue, 26 May 2020 08:53:06 +0000 Message-ID: <58e59e51-c023-2947-cd6b-4718a32585a5@ericsson.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 authentication-results: salowey.net; dkim=none (message not signed) header.d=none;salowey.net; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [178.55.173.23] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f70d026f-f071-4de1-389c-08d80152351d x-ms-traffictypediagnostic: HE1PR0701MB2298: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 041517DFAB x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: tZgjjkOsR1wiNYW4XztbhaqVW+b0pOZsT22+ZsKT0MsVgeB/O+Z3XCefQzCsnUgRgB4AjAgfdIc19/VXBTpv5fr+4iTnHTp71k9aSCECjplV9oeFzDPRMoKQd+GOGsUMKz75cf/X+V1XGLtD59X38P6H2ONLKbSxOz/8L6PqaicBp6FEsnKbq2mbeOwKWpyJIVwwGN9H8zD1i+rWnLZB7NN8e8BT0P37Rs6SujYpQMph6Jicvz7PE+YXcwdj0H5SyqAPAvwxOeMQI0vVzAj+H1u8nxVlV4MnwqcrWD9sgF466ckk2SZXmw+6g9Ch4sczRNIuVti8nzZmHpmTWtmHdk86gvKK/LTKbcE/vgXP5Zg1OEWSXCFJROyVr0Qskid1i70IGyLnqnj4ZO+SwrzVh40z3SKKOwNNzkTK98EyWEQysDL8K5NEBrDtrZDpIavsnY6HPZGg3jxIdDzydNWtvg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB2761.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(396003)(366004)(376002)(136003)(346002)(8676002)(110136005)(6512007)(5660300002)(86362001)(31686004)(66946007)(31696002)(6486002)(2906002)(64756008)(316002)(76116006)(36756003)(66556008)(66476007)(66574014)(2616005)(66446008)(166002)(71200400001)(966005)(6506007)(478600001)(53546011)(186003)(26005)(8936002)(43740500002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 1gHmYW2QRmRqK8dpEvz2MEMCEGzQLVlurd5VV1nvpg2DITfZKl9mG/kfMqXNbNLiK2bY9SmaPqvE4ebZix8ocaZCrjMsFVF5jbF77VwsPHl6KR3Tqgj641nBdF+FldHrtDXiCnPBvKNRIMfaQ93P77lgpDdEMfd0/sx3j09y2nvOPd7LinYlIn520OOfEjgGYrCPNTNAxwKfcG94AQWlQoM/kEITNhaWaZ4xiB8pW80EdW960sAxQULAGoKvtpMULxCSyBc/Z65H3uvDjl/ezzFGhhyOnmOp4/5a0CURtf6TqnUV1W3Vem9ONzfapM6u8qCx3P8ctGLsJQN3bm3Hk4yGoQNk02aYtBReEgoXSHYEfrq+fxS+twokm08o7059aXhqyMDkMkUv2mTux5gSySRN4yIedGtEzUkXT1e5e149/zU0YST8DWoo4qIxA5lwpplh1Ph37BHLASu+RMjgeY2G7Wea0xA6ZLJet9F6cEs= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_58e59e51c0232947cd6b4718a32585a5ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: f70d026f-f071-4de1-389c-08d80152351d X-MS-Exchange-CrossTenant-originalarrivaltime: 26 May 2020 08:53:06.2209 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: GiPaLWhWmKU39rNQtenRzFuJUi2ON2H5NnqMesx526b8eCZ0hzNWg5C0F1lbZ2N7bv84pNn8kYona7pc3GPYkug1+1jA98THup2IB1C6IgE= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2298 Archived-At: Subject: Re: [Emu] Early allocation request for an EAP Method Type number for draft-ietf-emu-eap-noob X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 08:53:15 -0000 --_000_58e59e51c0232947cd6b4718a32585a5ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSB3b3VsZCBhZGQgdGhhdCB0aGVyZSBpcyBhbHNvIGFuIGVhcmx5IGltcGxlbWVudGF0aW9uIG9m IEVBUC1UTFMtUFNLOiBodHRwczovL2dpdGh1Yi5jb20vcm9oaXRzaHViaGFtL0VBUC1UTFMtUFNL DQoNCldlIGhhZCBhZ3JlZWQgdGhhdCBleHRlcm5hbCBQU0sgYXV0aGVudGljYXRpb24gZm9yIEVB UC1UTFMgd2lsbCB1c2UgYSBuZXcgbWV0aG9kIHR5cGUgbnVtYmVyLiBUaGUgZHJhZnQgZm9yIEVB UC1UTFMtUFNLIChodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtbWF0dHNzb24tZW11 LWVhcC10bHMtcHNrLTAwKSBpcyBzdGlsbCBpbiB0aGUgZWFybHkgc3RhZ2VzIGFuZCB3aWxsIHVu ZGVyZ28gbWFueSBjaGFuZ2VzIGJlZm9yZSBpdCBjYW4gYmUgY29uc2lkZXJlZCBmb3IgYWRvcHRp b24gYnkgdGhlIHdvcmtpbmcgZ3JvdXAuIEhvd2V2ZXIsIGFsbG9jYXRpbmcgYSBtZXRob2QgdHlw ZSBudW1iZXIgZm9yIEVBUC1OT09CIG5vdyB3b3VsZCBlbnN1cmUgdGhhdCBFQVAtVExTLVBTSyBk b2Vzbid0IHVzZSB0aGUgc2FtZSBjb2RlIHBvaW50Lg0KDQotLU1vaGl0DQoNCk9uIDUvMjYvMjAg Njo1NiBBTSwgSm9zZXBoIFNhbG93ZXkgd3JvdGU6DQpUaGUgYXV0aG9ycyBvZiBFQVAtTk9PQiAo ZHJhZnQtaWV0Zi1lbXUtZWFwLW5vb2IpIGhhdmUgcmVxdWVzdGVkIGVhcmx5IGFsbG9jYXRpb24g b2YgdGhlIEVBUCB0eXBlIGNvZGUgdmFsdWUgNTYuICBJZiB5b3Ugb2JqZWN0IHRvIHRoZSBlYXJs eSBjb2RlIHBvaW50IGFzc2lnbm1lbnQgcGxlYXNlIGxldCB0aGUgbGlzdCBrbm93IHdoeSBieSBK dW5lIDE0LCAyMDIwLg0KDQpUaGUgY3JpdGVyaWEgZm9yIGVhcmx5IGFzc2lnbm1lbnQgaW5jbHVk ZXMgdGhlIGZvbGxvd2luZzoNCg0KQS4gICAgVGhlIGNvZGUgcG9pbnRzIG11c3QgYmUgZnJvbSBh IHNwYWNlIGRlc2lnbmF0ZWQgYXMgIlJGQyBSZXF1aXJlZCIsICJJRVRGIFJldmlldyIsIG9yICJT dGFuZGFyZHMgQWN0aW9uIi4gIEFkZGl0aW9uYWxseSwgcmVxdWVzdHMgZm9yIGVhcmx5IGFzc2ln bm1lbnQgb2YgY29kZSBwb2ludHMgZnJvbSBhICJTcGVjaWZpY2F0aW9uIFJlcXVpcmVkIiByZWdp c3RyeSBhcmUgYWxsb3dlZCBpZiB0aGUgc3BlY2lmaWNhdGlvbiB3aWxsIGJlIHB1Ymxpc2hlZCBh cyBhbiBSRkMuDQoNCkVBUCBNZXRob2RzIGhhdmUgYW4gYWxsb2NhdGlvbiBwb2xpY3kgb2YgRGVz aWduYXRlZCBFeHBlcnQsIHdpdGggU3BlY2lmaWNhdGlvbiBSZXF1aXJlZC4gIFRoZSBzcGVjaWZp Y2F0aW9uIGluIHRoaXMgY2FzZSB0aGUgZHJhZnQtaWV0Zi1lbXUtZWFwLW5vb2IuDQoNCkIuICBU aGUgZm9ybWF0LCBzZW1hbnRpY3MsIHByb2Nlc3NpbmcsIGFuZCBvdGhlciBydWxlcyByZWxhdGVk IHRvIGhhbmRsaW5nIHRoZSBwcm90b2NvbCBlbnRpdGllcyBkZWZpbmVkIGJ5IHRoZSBjb2RlIHBv aW50cyBoZW5jZWZvcnRoIGNhbGxlZCAic3BlY2lmaWNhdGlvbnMiKSBtdXN0IGJlIGFkZXF1YXRl bHkgZGVzY3JpYmVkIGluIGFuIEludGVybmV0LURyYWZ0Lg0KDQpUaGUgc3BlY2lmaWNhdGlvbiBk cmFmdC1pZXRmLWVtdS1lYXAtbm9vYi0wMCBjb250YWlucyB0aGUgcHJvdG9jb2wgc3BlY2lmaWNz LiAgVGhlcmUgYXJlIGltcGxlbWVudGF0aW9ucyBiYXNlZCBvbiB0aGlzIHNwZWNpZmljYXRpb24g bGlzdGVkIGJlbG93DQoNCkMuIFRoZSBzcGVjaWZpY2F0aW9ucyBvZiB0aGVzZSBjb2RlIHBvaW50 cyBtdXN0IGJlIHN0YWJsZTsgaS5lLiwgaWYgdGhlcmUgaXMgYSBjaGFuZ2UsIGltcGxlbWVudGF0 aW9ucyBiYXNlZCBvbiB0aGUgZWFybGllciBhbmQgbGF0ZXIgc3BlY2lmaWNhdGlvbnMgbXVzdCBi ZSBzZWFtbGVzc2x5IGludGVyb3BlcmFibGUuDQoNCkFsdGhvdWdoIHRoZSBkb2N1bWVudCBpcyBh IDAwIGRvY3VtZW50LCB0aGUgcHJlZGVjZXNzb3IgZG9jdW1lbnQgZHJhZnQtYXVyYS1lYXAtbm9v YjxodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1hdXJhLWVhcC1ub29iLz4g aGFzIGJlZW4gZGlzY3Vzc2VkIGZvciBvdmVyIGEgeWVhci4gIFRoaXMgY2FsbCBpcyBhIHJlcXVl c3QgZm9yIHdvcmtpbmcgZ3JvdXAgbWVtYmVycyB0byByZXZpZXcgdGhlIGRvY3VtZW50IGFuZCBv YmplY3QgaWYgdGhlIHNwZWNpZmljYXRpb24gaXMgbm90IHN0YWJsZS4NCg0KRC4gVGhlcmUgaXMg c3VmZmljaWVudCBpbnRlcmVzdCBpbiB0aGUgY29tbXVuaXR5IGZvciBlYXJseSAocHJlLVJGQykg aW1wbGVtZW50YXRpb24gYW5kIGRlcGxveW1lbnQsIG9yIHRoYXQgZmFpbHVyZSB0byBtYWtlIGFu IGVhcmx5IGFsbG9jYXRpb24gbWlnaHQgbGVhZCB0byBjb250ZW50aW9uIGZvciB0aGUgY29kZSBw b2ludCBpbiB0aGUgZmllbGQuDQoNClNldmVyYWwgaW1wbGVtZW50YXRpb25zIGV4aXN0LCBidXQg aXQgd291bGQgYmUgZ29vZCB0byBzZWUgaWYgdGhlcmUgaXMgYWRkaXRpb25hbCBpbnRlcmVzdCBp biBpbXBsZW1lbnRpbmcgdGhpcyBwcm90b2NvbA0KDQpUaGUgYXV0aG9ycyBub3RlIHRoYXQgY3Vy cmVudGx5LCB0aGUgZm9sbG93aW5nIGltcGxlbWVudGF0aW9ucyBvZiBFQVAtTk9PQiBleGlzdDoN Cg0KMS4gSW1wbGVtZW50YXRpb24gd2l0aCB3cGFfc3VwcGxpY2FudCAoY2xpZW50KSBhbmQgaG9z dGFwZCAoc2VydmVyKToNCmh0dHBzOi8vZ2l0aHViLmNvbS90dW9tYXVyYS9lYXAtbm9vYg0KDQoy LiBMaWdodHdlaWdodCBpbXBsZW1lbnRhdGlvbiBvbiBDb250aWtpIChjbGllbnQgb25seSk6DQpo dHRwczovL2dpdGh1Yi5jb20vZWR1aW5nbGVzL2NvYXAtZWFwLW5vb2IgKFRlc3RlZCB3aXRoIHNl cnZlcg0KaW1wbGVtZW50YXRpb24gZnJvbSAjMSkNCg0KMy4gTWluaW1hbCBFQVAtTk9PQiAoYmFz ZWQgb24gIzEgd2l0aCBjbGVhbmVyIGNvZGUgYW5kIHVwZGF0ZXMgdG8gbWF0Y2gNCmN1cnJlbnQg ZHJhZnQgdmVyc2lvbik6IGh0dHBzOi8vZ2l0aHViLmNvbS9Wb2dlbHRhay9lYXAtbm9vYg0KDQpU aGFua3MsDQoNCkpvZQ0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCkVtdSBtYWlsaW5nIGxpc3QNCkVtdUBpZXRmLm9yZzxtYWlsdG86RW11QGll dGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lbXUNCg0K --_000_58e59e51c0232947cd6b4718a32585a5ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <25E5731CA2AE354683A2EFA28DFCBF80@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KPHA+SSB3b3VsZCBh ZGQgdGhhdCB0aGVyZSBpcyBhbHNvIGFuIGVhcmx5IGltcGxlbWVudGF0aW9uIG9mIEVBUC1UTFMt UFNLOiA8YSBtb3otZG8tbm90LXNlbmQ9InRydWUiIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9y b2hpdHNodWJoYW0vRUFQLVRMUy1QU0siPg0KaHR0cHM6Ly9naXRodWIuY29tL3JvaGl0c2h1Ymhh bS9FQVAtVExTLVBTSzwvYT48L3A+DQo8cD5XZSBoYWQgYWdyZWVkIHRoYXQgZXh0ZXJuYWwgUFNL IGF1dGhlbnRpY2F0aW9uIGZvciBFQVAtVExTIHdpbGwgdXNlIGEgbmV3IG1ldGhvZCB0eXBlIG51 bWJlci4gVGhlIGRyYWZ0IGZvciBFQVAtVExTLVBTSyAoPGEgbW96LWRvLW5vdC1zZW5kPSJ0cnVl IiBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtbWF0dHNzb24tZW11LWVh cC10bHMtcHNrLTAwIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtbWF0dHNzb24t ZW11LWVhcC10bHMtcHNrLTAwPC9hPikNCiBpcyBzdGlsbCBpbiB0aGUgZWFybHkgc3RhZ2VzIGFu ZCB3aWxsIHVuZGVyZ28gbWFueSBjaGFuZ2VzIGJlZm9yZSBpdCBjYW4gYmUgY29uc2lkZXJlZCBm b3IgYWRvcHRpb24gYnkgdGhlIHdvcmtpbmcgZ3JvdXAuIEhvd2V2ZXIsIGFsbG9jYXRpbmcgYSBt ZXRob2QgdHlwZSBudW1iZXIgZm9yIEVBUC1OT09CIG5vdyB3b3VsZCBlbnN1cmUgdGhhdCBFQVAt VExTLVBTSyBkb2Vzbid0IHVzZSB0aGUgc2FtZSBjb2RlIHBvaW50Lg0KPGJyPg0KPC9wPg0KPHA+ LS1Nb2hpdDxicj4NCjwvcD4NCjxkaXYgY2xhc3M9Im1vei1jaXRlLXByZWZpeCI+T24gNS8yNi8y MCA2OjU2IEFNLCBKb3NlcGggU2Fsb3dleSB3cm90ZTo8YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IHR5cGU9ImNpdGUiIGNpdGU9Im1pZDpDQU9nUEdvRDYzRTg2V3RVcFNSUTFPUk95JiM0MzswYTBI eUxtdVJ1bVNRaGg1U1JpZTE3cXpnQG1haWwuZ21haWwuY29tIj4NCjxkaXYgZGlyPSJsdHIiPlRo ZSBhdXRob3JzIG9mIEVBUC1OT09CIChkcmFmdC1pZXRmLWVtdS1lYXAtbm9vYikgaGF2ZSByZXF1 ZXN0ZWQgZWFybHkgYWxsb2NhdGlvbiBvZiB0aGUgRUFQIHR5cGUgY29kZSB2YWx1ZSA1Ni4mbmJz cDsgSWYgeW91IG9iamVjdCB0byB0aGUgZWFybHkgY29kZSBwb2ludCBhc3NpZ25tZW50IHBsZWFz ZSBsZXQgdGhlIGxpc3Qga25vdyB3aHkgYnkgSnVuZSAxNCwgMjAyMC4mbmJzcDsmbmJzcDsNCjxk aXY+PGJyPg0KPC9kaXY+DQo8ZGl2PlRoZSBjcml0ZXJpYSBmb3IgZWFybHkgYXNzaWdubWVudCBp bmNsdWRlcyB0aGUgZm9sbG93aW5nOjwvZGl2Pg0KPGRpdj48YnI+DQpBLiZuYnNwOyAmbmJzcDsg VGhlIGNvZGUgcG9pbnRzIG11c3QgYmUgZnJvbSBhIHNwYWNlIGRlc2lnbmF0ZWQgYXMgJnF1b3Q7 UkZDIFJlcXVpcmVkJnF1b3Q7LCAmcXVvdDtJRVRGIFJldmlldyZxdW90Oywgb3IgJnF1b3Q7U3Rh bmRhcmRzIEFjdGlvbiZxdW90Oy4mbmJzcDsgQWRkaXRpb25hbGx5LCZuYnNwO3JlcXVlc3RzIGZv ciBlYXJseSBhc3NpZ25tZW50IG9mIGNvZGUgcG9pbnRzIGZyb20gYSAmcXVvdDtTcGVjaWZpY2F0 aW9uIFJlcXVpcmVkJnF1b3Q7IHJlZ2lzdHJ5IGFyZSBhbGxvd2VkIGlmIHRoZSBzcGVjaWZpY2F0 aW9uIHdpbGwgYmUgcHVibGlzaGVkDQogYXMgYW4gUkZDLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rp dj4NCjxkaXY+RUFQIE1ldGhvZHMgaGF2ZSBhbiBhbGxvY2F0aW9uIHBvbGljeSBvZiZuYnNwOzxz cGFuIHN0eWxlPSJjb2xvcjpyZ2IoMCwwLDApO2ZvbnQtc2l6ZToxMy4zMzMzcHgiPkRlc2lnbmF0 ZWQgRXhwZXJ0LCB3aXRoIFNwZWNpZmljYXRpb24gUmVxdWlyZWQuJm5ic3A7IFRoZSBzcGVjaWZp Y2F0aW9uIGluIHRoaXMgY2FzZSB0aGUmbmJzcDs8L3NwYW4+ZHJhZnQtaWV0Zi1lbXUtZWFwLW5v b2IuPGJyPg0KPGJyPg0KQi4mbmJzcDsgVGhlIGZvcm1hdCwgc2VtYW50aWNzLCBwcm9jZXNzaW5n LCBhbmQgb3RoZXIgcnVsZXMgcmVsYXRlZCB0byBoYW5kbGluZyB0aGUgcHJvdG9jb2wgZW50aXRp ZXMgZGVmaW5lZCBieSB0aGUgY29kZSBwb2ludHMgaGVuY2Vmb3J0aCBjYWxsZWQgJnF1b3Q7c3Bl Y2lmaWNhdGlvbnMmcXVvdDspIG11c3QgYmUgYWRlcXVhdGVseSBkZXNjcmliZWQgaW4gYW4gSW50 ZXJuZXQtRHJhZnQuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5UaGUgc3BlY2lmaWNh dGlvbiBkcmFmdC1pZXRmLWVtdS1lYXAtbm9vYi0wMCBjb250YWlucyB0aGUgcHJvdG9jb2wgc3Bl Y2lmaWNzLiZuYnNwOyBUaGVyZSBhcmUgaW1wbGVtZW50YXRpb25zIGJhc2VkIG9uIHRoaXMgc3Bl Y2lmaWNhdGlvbiBsaXN0ZWQgYmVsb3c8YnI+DQo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8 ZGl2PkMuIFRoZSBzcGVjaWZpY2F0aW9ucyBvZiB0aGVzZSBjb2RlIHBvaW50cyBtdXN0IGJlIHN0 YWJsZTsgaS5lLiwgaWYgdGhlcmUgaXMgYSBjaGFuZ2UsIGltcGxlbWVudGF0aW9ucyBiYXNlZCBv biB0aGUgZWFybGllciBhbmQgbGF0ZXIgc3BlY2lmaWNhdGlvbnMgbXVzdCBiZSBzZWFtbGVzc2x5 IGludGVyb3BlcmFibGUuJm5ic3A7PC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5BbHRo b3VnaCB0aGUgZG9jdW1lbnQgaXMgYSAwMCBkb2N1bWVudCwgdGhlIHByZWRlY2Vzc29yIGRvY3Vt ZW50Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQt YXVyYS1lYXAtbm9vYi8iIHRpdGxlPSIiIHN0eWxlPSJib3gtc2l6aW5nOmJvcmRlci1ib3g7Y29s b3I6cmdiKDYxLDM0LDE3OSk7dGV4dC1kZWNvcmF0aW9uLWxpbmU6bm9uZTtmb250LWZhbWlseTom cXVvdDtQVA0KICAgICAgICAgICAgU2VyaWYmcXVvdDssUGFsYXRpbm8sJnF1b3Q7TmV1ZQ0KICAg ICAgICAgICAgU3dpZnQmcXVvdDssc2VyaWY7Zm9udC1zaXplOjE1cHgiIG1vei1kby1ub3Qtc2Vu ZD0idHJ1ZSI+ZHJhZnQtYXVyYS1lYXAtbm9vYjwvYT4mbmJzcDtoYXMNCiBiZWVuIGRpc2N1c3Nl ZCBmb3Igb3ZlciBhIHllYXIuJm5ic3A7IFRoaXMgY2FsbCBpcyBhIHJlcXVlc3QgZm9yIHdvcmtp bmcgZ3JvdXAgbWVtYmVycyB0byByZXZpZXcgdGhlIGRvY3VtZW50IGFuZCBvYmplY3QgaWYgdGhl IHNwZWNpZmljYXRpb24gaXMgbm90IHN0YWJsZS4mbmJzcDsmbmJzcDs8YnI+DQo8ZGl2Pjxicj4N CjxkaXY+RC4gVGhlcmUgaXMgc3VmZmljaWVudCBpbnRlcmVzdCBpbiB0aGUgY29tbXVuaXR5IGZv ciBlYXJseSAocHJlLVJGQykgaW1wbGVtZW50YXRpb24gYW5kIGRlcGxveW1lbnQsIG9yIHRoYXQg ZmFpbHVyZSB0byBtYWtlIGFuIGVhcmx5IGFsbG9jYXRpb24gbWlnaHQgbGVhZCB0byBjb250ZW50 aW9uIGZvciB0aGUgY29kZSBwb2ludCBpbiB0aGUgZmllbGQuPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ PGJyPg0KPC9kaXY+DQo8ZGl2PlNldmVyYWwgaW1wbGVtZW50YXRpb25zIGV4aXN0LCBidXQgaXQg d291bGQgYmUgZ29vZCB0byBzZWUgaWYgdGhlcmUgaXMgYWRkaXRpb25hbCBpbnRlcmVzdCBpbiBp bXBsZW1lbnRpbmcgdGhpcyBwcm90b2NvbDwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+ VGhlIGF1dGhvcnMgbm90ZSB0aGF0IGN1cnJlbnRseSwgdGhlIGZvbGxvd2luZyBpbXBsZW1lbnRh dGlvbnMgb2YgRUFQLU5PT0IgZXhpc3Q6PC9kaXY+DQo8YnI+DQoxLiBJbXBsZW1lbnRhdGlvbiB3 aXRoIHdwYV9zdXBwbGljYW50IChjbGllbnQpIGFuZCBob3N0YXBkIChzZXJ2ZXIpOjxicj4NCjxh IGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS90dW9tYXVyYS9lYXAtbm9vYiIgcmVsPSJub3JlZmVy cmVyIiB0YXJnZXQ9Il9ibGFuayIgbW96LWRvLW5vdC1zZW5kPSJ0cnVlIj5odHRwczovL2dpdGh1 Yi5jb20vdHVvbWF1cmEvZWFwLW5vb2I8L2E+PGJyPg0KPGJyPg0KMi4gTGlnaHR3ZWlnaHQgaW1w bGVtZW50YXRpb24gb24gQ29udGlraSAoY2xpZW50IG9ubHkpOjxicj4NCjxhIGhyZWY9Imh0dHBz Oi8vZ2l0aHViLmNvbS9lZHVpbmdsZXMvY29hcC1lYXAtbm9vYiIgcmVsPSJub3JlZmVycmVyIiB0 YXJnZXQ9Il9ibGFuayIgbW96LWRvLW5vdC1zZW5kPSJ0cnVlIj5odHRwczovL2dpdGh1Yi5jb20v ZWR1aW5nbGVzL2NvYXAtZWFwLW5vb2I8L2E+Jm5ic3A7KFRlc3RlZCB3aXRoIHNlcnZlcjxicj4N CmltcGxlbWVudGF0aW9uIGZyb20gIzEpPGJyPg0KPGJyPg0KMy4gTWluaW1hbCBFQVAtTk9PQiAo YmFzZWQgb24gIzEgd2l0aCBjbGVhbmVyIGNvZGUgYW5kIHVwZGF0ZXMgdG8gbWF0Y2g8YnI+DQpj dXJyZW50IGRyYWZ0IHZlcnNpb24pOiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9W b2dlbHRhay9lYXAtbm9vYiIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayIgbW96LWRv LW5vdC1zZW5kPSJ0cnVlIj5odHRwczovL2dpdGh1Yi5jb20vVm9nZWx0YWsvZWFwLW5vb2I8L2E+ DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5UaGFua3MsPC9kaXY+DQo8L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2PkpvZTwvZGl2Pg0KPC9kaXY+DQo8YnI+DQo8ZmllbGRzZXQgY2xhc3M9 Im1pbWVBdHRhY2htZW50SGVhZGVyIj48L2ZpZWxkc2V0Pg0KPHByZSBjbGFzcz0ibW96LXF1b3Rl LXByZSIgd3JhcD0iIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KRW11IG1haWxpbmcgbGlzdA0KPGEgY2xhc3M9Im1vei10eHQtbGluay1hYmJyZXZpYXRl ZCIgaHJlZj0ibWFpbHRvOkVtdUBpZXRmLm9yZyI+RW11QGlldGYub3JnPC9hPg0KPGEgY2xhc3M9 Im1vei10eHQtbGluay1mcmVldGV4dCIgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9lbXUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZW11 PC9hPg0KPC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_58e59e51c0232947cd6b4718a32585a5ericssoncom_-- From nobody Tue May 26 02:29:17 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57C9A3A0D72 for ; Tue, 26 May 2020 02:29:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6F6IxtwIXldp for ; Tue, 26 May 2020 02:29:13 -0700 (PDT) Received: from NAM11-CO1-obe.outbound.protection.outlook.com (mail-co1nam11on2126.outbound.protection.outlook.com [40.107.220.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D67153A0D6E for ; Tue, 26 May 2020 02:29:12 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Z+LuDw2am2+eGKp0+1szxndfL6PjRL61K+A4YzadoaSzI6CuRZ8eNPs3xPjMnkQb5b2g/krfiZj/gWdaX7JU+HPRcGDDyyn9sMog8BKZBqDdoallMh0G8JSDCZx7xUqodplmhG/mfP7EHuCn0bvP7wrUD+zGxjdTJ7os0lU7rnKtnI2/JgYBevK8C6XC4QqrsGYicPN0EGB47Z1x64DrfMFEwhRvCr3Pm1eh5E01OImR+hSnpaNGuowSiFvrNyWRrB8xUD00/pBRQP3BrZobeWm5kDeQhvpwh0dynQGSAafq0tLEdadUBTqmJ57PYBDczBERWRUO/r/a/B5Z+6lw0A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PaTHX3Np36vPS9qzHXSnpB1ESQH3mzJLolMiebkWG9s=; b=CkinLltzbUtrA56I8QiMfZToazD/Ime9YSrHi9UBfgLyksyr5Jvse2NMRgk6hGFuicvDxfqpZDYbp2GWPoIJK4rUCFrehESYXKN0Ysk2/2so9jLzdRrRv6cBSaeZSK5A+/y5FtoxKw+Op+F4Fw+4j2wFDv/b4AqxrIiDqb4g5QKqEEr4KpiQvpU76MS1rjFxKzyVS80a2/2+6rd37sqUacO7yHPy6bHqHdD+UdLhr/im934l/gV9KSvjohHFFg1OxV/yAIdAr3F7yU+Fyz13/UsFVU6LEwBs7eC76t4YAWOiliMWVBlk/Ir99nfrF4Rli9hr07MvGElerNUvJfjeaQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PaTHX3Np36vPS9qzHXSnpB1ESQH3mzJLolMiebkWG9s=; b=iJ+EgaVApVEvS8TsgMxbQE9ghXdAIq1feBszJFLgwJwTa8xMvQ8pXW6jYZh0ttkFr9T940AwnJG0d9FuH1Pn2xQ7l1PrR42YQFmqDEg/pjDGh9sLUn1DvWz7oe+UDeE2AwHRswBlX/91WsaSW02dkzGjSHYXgAxbvUJJuFUYSWY= Received: from CH2PR21MB1381.namprd21.prod.outlook.com (2603:10b6:610:8e::12) by CH2PR21MB1400.namprd21.prod.outlook.com (2603:10b6:610:88::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.3; Tue, 26 May 2020 09:29:11 +0000 Received: from CH2PR21MB1381.namprd21.prod.outlook.com ([fe80::ed84:e1bc:d1e6:76f8]) by CH2PR21MB1381.namprd21.prod.outlook.com ([fe80::ed84:e1bc:d1e6:76f8%7]) with mapi id 15.20.3045.016; Tue, 26 May 2020 09:29:10 +0000 From: Jorge Vergara To: Joseph Salowey CC: Oleg Pekar , Jouni Malinen , EMU WG Thread-Topic: [Emu] TEAP - RFC 7170 - Errata ID 5768 Thread-Index: AQHWIuERCgU2395ftU2yD1GBLzOOXKi0ouNggAVDMgCAAFPrsA== Date: Tue, 26 May 2020 09:29:10 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-05-26T09:29:09Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=0deba6de-c9db-42d4-a1ea-4a8f1901e14c; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: salowey.net; dkim=none (message not signed) header.d=none;salowey.net; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2001:4898:80e8:0:8cc3:ff16:6cc:c1c5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: cf2745be-df8e-4c60-65b4-08d801573f4a x-ms-traffictypediagnostic: CH2PR21MB1400: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 041517DFAB x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: lFPDxrmcBJ9TyT6VN0tyM8rV5oATaikg91Kf/HLqcBzmzccXrkUFobYtWmffNcUa6TPrql6GYN0BRRXhF0SNw9lzrd2766D7kLQv9mFNzjk3SiVeuFFeoidD8aoso1mAdaWFfhY89T4aOYsL7b57EmK4pgqFB6qKNjzL2a7xodYpaoyeak9KkCv9EDlFPZywH1paE9vRBFrd63PwcpA5jLzB0kyUj1fs4j+TwHLWKRLCykLfjP5kHGv/XfTmqDuWFl1me8FAyWkvbFgMBJfQfiVyB8t2g19K9crj68DH1ksSdystJ5u45sEwV2IHoZ6QknWeZekczAS8Wjdg7y1EAzGa+ACGPuQj1HDdspV3WTEfTrgwMQG3F/ZVGln7il0FTbkS7YzABCUtFbu3MzJ2/w== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH2PR21MB1381.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(136003)(376002)(39860400002)(366004)(346002)(6916009)(2906002)(55016002)(5660300002)(9686003)(52536014)(4326008)(8990500004)(33656002)(8676002)(166002)(86362001)(186003)(66446008)(76116006)(66556008)(66476007)(53546011)(82960400001)(966005)(316002)(54906003)(10290500003)(66946007)(82950400001)(478600001)(6506007)(7696005)(8936002)(71200400001)(83080400001)(64756008); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_CH2PR21MB13815E6F39A40C156A5A3388D1B00CH2PR21MB1381namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: cf2745be-df8e-4c60-65b4-08d801573f4a X-MS-Exchange-CrossTenant-originalarrivaltime: 26 May 2020 09:29:10.7124 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: DgINSxVI8BLBmNQlX7a4pOArjIsihNMFd6wlVrn10LCUBFxMsZxTiUG8aTzbVbc8wpDqgOdU64d4XouIURn5iQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR21MB1400 Archived-At: Subject: Re: [Emu] TEAP - RFC 7170 - Errata ID 5768 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 09:29:15 -0000 --_000_CH2PR21MB13815E6F39A40C156A5A3388D1B00CH2PR21MB1381namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpGcm9tOiBKb3NlcGggU2Fsb3dleSA8am9lQHNhbG93ZXkubmV0Pg0KU2VudDogTW9uZGF5LCBN YXkgMjUsIDIwMjAgOToyNyBQTQ0KVG86IEpvcmdlIFZlcmdhcmEgPGpvdmVyZ2FyQG1pY3Jvc29m dC5jb20+DQpDYzogT2xlZyBQZWthciA8b2xlZy5wZWthci4yMDE3QGdtYWlsLmNvbT47IEpvdW5p IE1hbGluZW4gPGpAdzEuZmk+OyBFTVUgV0cgPGVtdUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBb RW11XSBURUFQIC0gUkZDIDcxNzAgLSBFcnJhdGEgSUQgNTc2OA0KDQoNCg0KT24gRnJpLCBNYXkg MjIsIDIwMjAgYXQgMToxOCBQTSBKb3JnZSBWZXJnYXJhIDxqb3Zlcmdhcj00MG1pY3Jvc29mdC5j b21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOjQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4+ IHdyb3RlOg0KTXkgcmV2aWV3IG9mIHRoaXMgZXJyYXRhIGFuZCB0aGUgY3VycmVudCByZXNwb25z ZXMgZnJvbSBPbGVnOg0KDQoNCiAgMS4gIEkgYWdyZWUgd2l0aCB0aGlzIHByb3Bvc2VkIHJlc29s dXRpb24uIEkgZG8gdGhpbmsgdGhpcyBpcyBhbiBpbXBvcnRhbnQgb21pc3Npb24gdGhhdCBuZWVk cyB0byBiZSBjbGFyaWZpZWQgaW4gdGhlIFJGQy4gT3RoZXJ3aXNlIGl0IGlzIHNvbWV3aGF0IGd1 ZXNzd29yayB0aGF0IHRydW5jYXRpb24gaXMgdGhlIHJpZ2h0IGFjdGlvbi4gSSB0aGluayB0aGUg Y3VycmVudCB3b3JkaW5nIGxlYW5zIHRvd2FyZCB0cnVuY2F0aW9uLCBidXQgSSBkZWZpbml0ZWx5 IGFza2VkIHRoaXMgcXVlc3Rpb24gbXlzZWxmIHdoaWxlIGltcGxlbWVudGluZy4NCltKb2VdICBX aHkgbm90IGp1c3QgY2hhbmdlIHRoZSBUTFYgdG8gYmUgdmFyaWFibGUgbGVuZ3RoPyAgSXQgc2Vl bXMgaWYgd2UgaGFyZGNvZGUgdGhlIGxlbmd0aCB0byAxMDAgd2UgcmlzayBoYXZpbmcgdGhlIHNh bWUgcHJvYmxlbSBpbiB0aGUgZnV0dXJlPw0KDQpbSm9yZ2VdIEkgaGF2ZSB0byBhZG1pdCB0aGF0 IGluIG15IG9yaWdpbmFsIHJlc3BvbnNlIG15IGJyYWluIHNraXBwZWQgb3ZlciB0aGUgVExWIGxl bmd0aCBhZGp1c3RtZW50IGFuZCBmb2N1c2VkIG9ubHkgb24gdGhlIHRydW5jYXRpb24uIElmIHRo ZSBUTFYgbGVuZ3RoIGlzIGdvaW5nIHRvIGJlIGFkanVzdGVkIGF0IGFsbCwgSSBhbSBpbiBmYXZv ciBvZiBtYWtpbmcgdGhlIFRMViB2YXJpYWJsZSBsZW5ndGguIEEgbWluaW11bSBsZW5ndGggY291 bGQgYWxzbyBiZSBhZGRlZCAoMzIgYml0cyBzZWVtcyB0byBiZSB0aGUgY3VycmVudCByZWNvbW1l bmRhdGlvbikuIEhvd2V2ZXIsIEkgZG8gYmVsaWV2ZSB0aGlzIGlzIGEgYnJlYWtpbmcgY2hhbmdl IHRvIGFueSBURUFQIGltcGxlbWVudGF0aW9uIOKAkyB3b3VsZCB0aGUgVEVBUCB2ZXJzaW9uIG5l ZWQgdG8gYmUgYnVtcGVkPw0KDQogIDEuDQogIDIuICBUaGlzIGJsZWVkcyBpbnRvIEFsYW7igJlz IFRMUyAxLjMgZG9jdW1lbnQgc29tZXdoYXQsIGJ1dCBJIGFncmVlIHdpdGggSm91bmkgdGhhdCB0 aGlzIHdpbGwgbmVlZCB0byBjaGFuZ2Ugd2hlbiB0aGUgcmVzdCBvZiB0aGUgZG9jdW1lbnQgaXMg ZXZlbnR1YWxseSB1cGRhdGVkIHRvIFRMUyAxLjMuLiBUaGVyZSBhcmUgZW5vdWdoIFRMUyAxLjMg cmVsYXRlZCB0aGluZ3MgdG8gYWRkcmVzcyBpbiBURUFQIHRoYXQgSSBkb27igJl0IGV4YWN0bHkg dmlldyB0aGlzIGFzIGFuIGVycmF0YS4gSSB2aWV3IGl0IGFzIGEgbmVlZGVkIHVwZGF0ZSwgd2hl dGhlciBpbiB0aGlzIGRvY3VtZW50LCBBbGFu4oCZcyBkb2N1bWVudCwgb3IgYm90aC4NCltKb2Vd ICBJIHRlbmQgdG8gYWdyZWUgdGhhdCB0aGlzIGlzIG5vdCBhbiBlcnJhdGEuICBIb3dldmVyIGFu IHVwZGF0ZSB0byBURUFQIHNob3VsZCBhZGRyZXNzIHRoZXNlLg0KDQoNCiAgMS4NCiAgMi4gIEFn cmVlIHdpdGggSm91bmkgdGhhdCBJIGRvbuKAmXQgc2VlIHRoZSBwb2ludCBvZiB0aGUgMHgzNyBv Y3RldCwgYnV0IHJlZ2FyZGxlc3MgdGhpcyBjbGFyaWZpY2F0aW9uIG9mIGhvdyBpdCBpcyBlbmNv ZGVkIGlzIHBvc2l0aXZlIChtaW5vcikgY2hhbmdlLg0KW0pvZV0gSSB0aGluayB0aGUgb3JpZ2lu YWwgcmVhc29uIHRvIGluY2x1ZGUgdGhlIFRFQVAgbWV0aG9kIElEIGluIHRoZSBzcGVjaWZpY2F0 aW9uIHdhcyB0byBtYWtlIHN1cmUgdGhhdCB3ZSBkaWZmZXJlbnRpYXRlZCBiZXR3ZWVuIHNpbWls YXIgY3J5cHRvIGJpbmRpbmcgaW1wbGVtZW50YXRpb25zIGluIG90aGVyIHByb3RvY29scyBzdWNo IGFzIEVBUC1GQVNULiAgIEkgZG9uJ3QgdGhpbmsgdGhlcmUgaXMgbXVjaCBhbWJpZ3VpdHkgaGVy ZSwgYnV0IEkgYW0gT0sgd2l0aCBpbmNsdWRpbmcgMHgzNyBpbiB0aGUgZGVzY3JpcHRpb24uDQoN Cg0KVGhhbmtzLA0KSm9yZ2UNCg0KRnJvbTogRW11IDxlbXUtYm91bmNlc0BpZXRmLm9yZzxtYWls dG86ZW11LWJvdW5jZXNAaWV0Zi5vcmc+PiBPbiBCZWhhbGYgT2YgT2xlZyBQZWthcg0KU2VudDog VHVlc2RheSwgTWF5IDUsIDIwMjAgNjoyNyBBTQ0KVG86IEpvdW5pIE1hbGluZW4gPGpAdzEuZmk8 bWFpbHRvOmpAdzEuZmk+PjsgRU1VIFdHIDxlbXVAaWV0Zi5vcmc8bWFpbHRvOmVtdUBpZXRmLm9y Zz4+DQpTdWJqZWN0OiBbRW11XSBURUFQIC0gUkZDIDcxNzAgLSBFcnJhdGEgSUQgNTc2OA0KDQpI aSBKb3VuaSwNCkkgcHJvcG9zZSB0aGUgZm9sbG93aW5nIGZpeCBmb3IgdGhlIGlzc3VlcyBkZXNj cmliZWQgaW4gdGhpcyBlcnJhdGEgaWQ6DQoxKSBJbiBTZWN0aW9uICI0LjIuMTMuICBDcnlwdG8t QmluZGluZyBUTFYiIG1ha2UgIkVNU0sgQ29tcG91bmQgTUFDIiBhbmQgIk1TSyBDb21wb3VuZCBN QUMiIGZpZWxkcyAzMiBvY3RldHMgbG9uZyAoY3VycmVudGx5IDIwIG9jdGV0cykuIFRoZSBNQUMg dmFsdWUgaXMgdHJ1bmNhdGVkIGF0IDMyIG9jdGV0cyBpZiBpdCBpcyBsb25nZXIgdGhhbiAzMiBv Y3RldHMgb3IgcGFkZGVkIHRvIGEgbGVuZ3RoIG9mIDMyIG9jdGV0cyB3aXRoIHplcm9zIHRvIHRo ZSByaWdodCBpZiBpdCBpcyBsZXNzIHRoYW4gMzIgb2N0ZXRzLiBUaGUgbGVuZ3RoIG9mIHRoZSBU TFYgc2hvdWxkIGJlIGNoYW5nZWQgdG8gMTAwIGJ5dGVzIChjdXJyZW50bHkgNzYpLg0KDQpUaGUg bW90aXZhdGlvbiBpcyB0byBrZWVwIGNvbGxpc2lvbi1yZXNpc3RhbmNlIHN0cmVuZ3RoIG9mIE1B QyBvbiAxMjggYml0LiBIYXNoIHZhbHVlIHRydW5jYXRpb24gaXMgZGVzY3JpYmVkIGluICJOSVNU IFNwZWNpYWwgUHVibGljYXRpb24gODAwLTEwNyBSZXZpc2lvbiAxOiBSZWNvbW1lbmRhdGlvbiBm b3IgQXBwbGljYXRpb25zIFVzaW5nIEFwcHJvdmVkIEhhc2ggQWxnb3JpdGhtcyI8aHR0cHM6Ly9u YW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJG bnZscHVicy5uaXN0LmdvdiUyRm5pc3RwdWJzJTJGTGVnYWN5JTJGU1AlMkZuaXN0c3BlY2lhbHB1 YmxpY2F0aW9uODAwLTEwN3IxLnBkZiZkYXRhPTAyJTdDMDElN0Nqb3ZlcmdhciU0MG1pY3Jvc29m dC5jb20lN0M2MTAyYjQxOGZmZDY0YmUyMGYwYjA4ZDgwMTJkMWFkZSU3QzcyZjk4OGJmODZmMTQx YWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyNjA2NDA5OTU5OTM4MTUmc2RhdGE9TUlP ZlQ5dFNFSFRtYnVQMm9UakF4bGdKZEJPa2UzVjR1QXFRcTdZRHpOMCUzRCZyZXNlcnZlZD0wPg0K DQoyKSBJbiBTZWN0aW9uICI1LjMuICBDb21wdXRpbmcgdGhlIENvbXBvdW5kIE1BQyIgc3BlY2lm eSB0aGF0ICJNQUMgaXMgdGhlIE1BQyBmdW5jdGlvbiBuZWdvdGlhdGVkIGluIFRMUyBvZiBURUFQ IFBoYXNlIDEiIChjdXJyZW50bHkgaXQgc2F5cyBUTFMgMS4yKQ0KDQpUaGUgbW90aXZhdGlvbiBp cyB0byBzdXBwb3J0IFRMUyAxLjIsIDEuMyBhbmQgcG9zc2libHkgbGF0ZXIgVExTIHZlcnNpb25z Lg0KDQozKSBJbiBTZWN0aW9uICI1LjMuICBDb21wdXRpbmcgdGhlIENvbXBvdW5kIE1BQyIgd2hl biBzcGVjaWZ5aW5nIHRoZSBsaXN0IG9mIGZpZWxkIHRvIGJlIHBsYWNlZCBpbiB0aGUgQlVGRkVS IiBzaG91bGQgc2F5ICIuLi4yICBBIHNpbmdsZSBvY3RldCBjb250YWlucyBURUFQIEVBUCBtZXRo b2QgdHlwZSAweDM3Ii4gQWx0ZXJuYXRpdmVseSBpdCBjb3VsZCBiZSAiLi4uMiAgQSBzaW5nbGUg b2N0ZXQgY29udGFpbnMgRUFQIFR5cGUgb2YgdGhlIGlubmVyIEVBUCBtZXRob2QgcmVsYXRlZCB0 byB0aGUgY2FsY3VsYXRpb24gb3IgMCBpZiBubyBpbm5lciBFQVAgbWV0aG9kIHdhcyBleGVjdXRl ZCIgKGN1cnJlbnRseSAiLi4uMiAgVGhlIEVBUCBUeXBlIHNlbnQgYnkgdGhlIG90aGVyIHBhcnR5 IGluIHRoZSBmaXJzdCBURUFQIG1lc3NhZ2UiKQ0KDQpQbGVhc2Ugbm90ZSB0aGF0IHRoZXJlJ3Mg c3RpbGwgYSBkaXNjdXNzaW9uIG9uIHNlbmRpbmcgQ3J5cHRvLUJpbmRpbmcgVExWIG9uICJBdXRo ZW50aWNhdGlvbiBpbm5lciBFQVAgbWV0aG9kIiBvciAiSW5uZXIgRUFQIG1ldGhvZCB0aGF0IGV4 cG9ydHMgTVNLIiBvbmx5Lg0KDQpUaGFua3MNCk9sZWcNCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQpFbXUgbWFpbGluZyBsaXN0DQpFbXVAaWV0Zi5vcmc8 bWFpbHRvOkVtdUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vZW11PGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3Vy bD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRmVtdSZk YXRhPTAyJTdDMDElN0Nqb3ZlcmdhciU0MG1pY3Jvc29mdC5jb20lN0M2MTAyYjQxOGZmZDY0YmUy MGYwYjA4ZDgwMTJkMWFkZSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3 QzAlN0M2MzcyNjA2NDA5OTYwMDM4MDcmc2RhdGE9a0JSa1dNMkdBRFMyaVpQJTJGNkE5WWdyNjFK TzZoY0VlOGNOSzJaNnA5UGcwJTNEJnJlc2VydmVkPTA+DQo= --_000_CH2PR21MB13815E6F39A40C156A5A3388D1B00CH2PR21MB1381namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5nbWFpbC1tMjMzMTA5MTgw NjY5NDg5MzgzNm1zb2xpc3RwYXJhZ3JhcGgsIGxpLmdtYWlsLW0yMzMxMDkxODA2Njk0ODkzODM2 bXNvbGlzdHBhcmFncmFwaCwgZGl2LmdtYWlsLW0yMzMxMDkxODA2Njk0ODkzODM2bXNvbGlzdHBh cmFncmFwaA0KCXttc28tc3R5bGUtbmFtZTpnbWFpbC1tXzIzMzEwOTE4MDY2OTQ4OTM4MzZtc29s aXN0cGFyYWdyYXBoOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDow aW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZv bnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29yZFNl Y3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAx LjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3Qg RGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjg0NDMxOTE4NDsNCgltc28t bGlzdC10ZW1wbGF0ZS1pZHM6LTg2MTExODM5ODt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxl dmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLXRhYi1zdG9w OjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZl bDUNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1s ZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0 b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0K QGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxDQoJ e21zby1saXN0LWlkOjE5MTU3MDE3MjM7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjQ0NDM1OTc1 ODt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBs MTpsZXZlbDINCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWwzDQoJ e21zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsNA0KCXttc28tbGV2ZWwt dGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjIu NWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJe21zby1sZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0 IGwxOmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDgN Cgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJe21zby1sZXZl bC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyDQoJe21zby1saXN0LWlkOjIwMDY3ODE5Njk7DQoJ bXNvLWxpc3QtdGVtcGxhdGUtaWRzOjQ1NTUzNzEwNjt9DQpAbGlzdCBsMjpsZXZlbDENCgl7bXNv LWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDINCgl7bXNvLWxldmVsLXRhYi1z dG9wOjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWwzDQoJe21zby1sZXZlbC10YWItc3RvcDoxLjVpbjsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30N CkBsaXN0IGwyOmxldmVsNA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjps ZXZlbDUNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWw2DQoJe21z by1sZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxldmVsNw0KCXttc28tbGV2ZWwtdGFi LXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDgNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuMGlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 fQ0KQGxpc3QgbDI6bGV2ZWw5DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCm9sDQoJe21h cmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBz cGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIg ZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4N Cjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xh c3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAx LjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi PkZyb206PC9iPiBKb3NlcGggU2Fsb3dleSAmbHQ7am9lQHNhbG93ZXkubmV0Jmd0OyA8YnI+DQo8 Yj5TZW50OjwvYj4gTW9uZGF5LCBNYXkgMjUsIDIwMjAgOToyNyBQTTxicj4NCjxiPlRvOjwvYj4g Sm9yZ2UgVmVyZ2FyYSAmbHQ7am92ZXJnYXJAbWljcm9zb2Z0LmNvbSZndDs8YnI+DQo8Yj5DYzo8 L2I+IE9sZWcgUGVrYXIgJmx0O29sZWcucGVrYXIuMjAxN0BnbWFpbC5jb20mZ3Q7OyBKb3VuaSBN YWxpbmVuICZsdDtqQHcxLmZpJmd0OzsgRU1VIFdHICZsdDtlbXVAaWV0Zi5vcmcmZ3Q7PGJyPg0K PGI+U3ViamVjdDo8L2I+IFJlOiBbRW11XSBURUFQIC0gUkZDIDcxNzAgLSBFcnJhdGEgSUQgNTc2 ODxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBGcmksIE1heSAy MiwgMjAyMCBhdCAxOjE4IFBNIEpvcmdlIFZlcmdhcmEgJmx0O2pvdmVyZ2FyPTxhIGhyZWY9Im1h aWx0bzo0MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmciPjQwbWljcm9zb2Z0LmNvbUBkbWFy Yy5pZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2tx dW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtw YWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDow aW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk15IHJldmlldyBvZiB0 aGlzIGVycmF0YSBhbmQgdGhlIGN1cnJlbnQgcmVzcG9uc2VzIGZyb20gT2xlZzo8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8b2wg c3RhcnQ9IjEiIHR5cGU9IjEiPg0KPGxpIGNsYXNzPSJnbWFpbC1tMjMzMTA5MTgwNjY5NDg5Mzgz Nm1zb2xpc3RwYXJhZ3JhcGgiIHN0eWxlPSJtc28tbGlzdDpsMSBsZXZlbDEgbGZvMSI+DQpJIGFn cmVlIHdpdGggdGhpcyBwcm9wb3NlZCByZXNvbHV0aW9uLiBJIGRvIHRoaW5rIHRoaXMgaXMgYW4g aW1wb3J0YW50IG9taXNzaW9uIHRoYXQgbmVlZHMgdG8gYmUgY2xhcmlmaWVkIGluIHRoZSBSRkMu IE90aGVyd2lzZSBpdCBpcyBzb21ld2hhdCBndWVzc3dvcmsgdGhhdCB0cnVuY2F0aW9uIGlzIHRo ZSByaWdodCBhY3Rpb24uIEkgdGhpbmsgdGhlIGN1cnJlbnQgd29yZGluZyBsZWFucyB0b3dhcmQg dHJ1bmNhdGlvbiwgYnV0IEkgZGVmaW5pdGVseQ0KIGFza2VkIHRoaXMgcXVlc3Rpb24gbXlzZWxm IHdoaWxlIGltcGxlbWVudGluZy48bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+W0pvZV0mbmJzcDsg V2h5IG5vdCBqdXN0IGNoYW5nZSB0aGUgVExWIHRvIGJlIHZhcmlhYmxlIGxlbmd0aD8mbmJzcDsg SXQgc2VlbXMgaWYgd2UgaGFyZGNvZGUgdGhlIGxlbmd0aCB0byAxMDAgd2UgcmlzayBoYXZpbmcg dGhlIHNhbWUgcHJvYmxlbSBpbiB0aGUgZnV0dXJlPyZuYnNwOyZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5bSm9yZ2VdIEkgaGF2ZSB0byBhZG1pdCB0aGF0IGlu IG15IG9yaWdpbmFsIHJlc3BvbnNlIG15IGJyYWluIHNraXBwZWQgb3ZlciB0aGUgVExWIGxlbmd0 aCBhZGp1c3RtZW50IGFuZCBmb2N1c2VkIG9ubHkgb24gdGhlIHRydW5jYXRpb24uIElmIHRoZSBU TFYgbGVuZ3RoIGlzIGdvaW5nIHRvIGJlIGFkanVzdGVkIGF0IGFsbCwgSSBhbSBpbiBmYXZvciBv ZiBtYWtpbmcgdGhlIFRMViB2YXJpYWJsZSBsZW5ndGguDQogQSBtaW5pbXVtIGxlbmd0aCBjb3Vs ZCBhbHNvIGJlIGFkZGVkICgzMiBiaXRzIHNlZW1zIHRvIGJlIHRoZSBjdXJyZW50IHJlY29tbWVu ZGF0aW9uKS4gSG93ZXZlciwgSSBkbyBiZWxpZXZlIHRoaXMgaXMgYSBicmVha2luZyBjaGFuZ2Ug dG8gYW55IFRFQVAgaW1wbGVtZW50YXRpb24g4oCTIHdvdWxkIHRoZSBURUFQIHZlcnNpb24gbmVl ZCB0byBiZSBidW1wZWQ/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGlu IDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2 Pg0KPGRpdj4NCjxvbCBzdGFydD0iMSIgdHlwZT0iMSI+DQo8bGkgY2xhc3M9ImdtYWlsLW0yMzMx MDkxODA2Njk0ODkzODM2bXNvbGlzdHBhcmFncmFwaCIgc3R5bGU9Im1zby1saXN0OmwwIGxldmVs MSBsZm8yIj4NCjxvOnA+Jm5ic3A7PC9vOnA+PC9saT48bGkgY2xhc3M9ImdtYWlsLW0yMzMxMDkx ODA2Njk0ODkzODM2bXNvbGlzdHBhcmFncmFwaCIgc3R5bGU9Im1zby1saXN0OmwwIGxldmVsMSBs Zm8yIj4NClRoaXMgYmxlZWRzIGludG8gQWxhbuKAmXMgVExTIDEuMyBkb2N1bWVudCBzb21ld2hh dCwgYnV0IEkgYWdyZWUgd2l0aCBKb3VuaSB0aGF0IHRoaXMgd2lsbCBuZWVkIHRvIGNoYW5nZSB3 aGVuIHRoZSByZXN0IG9mIHRoZSBkb2N1bWVudCBpcyBldmVudHVhbGx5IHVwZGF0ZWQgdG8gVExT IDEuMy4uIFRoZXJlIGFyZSBlbm91Z2ggVExTIDEuMyByZWxhdGVkIHRoaW5ncyB0byBhZGRyZXNz IGluIFRFQVAgdGhhdCBJIGRvbuKAmXQgZXhhY3RseSB2aWV3IHRoaXMNCiBhcyBhbiBlcnJhdGEu IEkgdmlldyBpdCBhcyBhIG5lZWRlZCB1cGRhdGUsIHdoZXRoZXIgaW4gdGhpcyBkb2N1bWVudCwg QWxhbuKAmXMgZG9jdW1lbnQsIG9yIGJvdGguPG86cD48L286cD48L2xpPjwvb2w+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPltKb2Vd Jm5ic3A7IEkgdGVuZCB0byBhZ3JlZSB0aGF0IHRoaXMgaXMgbm90IGFuIGVycmF0YS4mbmJzcDsg SG93ZXZlciBhbiB1cGRhdGUgdG8gVEVBUCBzaG91bGQgYWRkcmVzcyB0aGVzZS4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21h cmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8b2wgc3Rh cnQ9IjEiIHR5cGU9IjEiPg0KPGxpIGNsYXNzPSJnbWFpbC1tMjMzMTA5MTgwNjY5NDg5MzgzNm1z b2xpc3RwYXJhZ3JhcGgiIHN0eWxlPSJtc28tbGlzdDpsMiBsZXZlbDEgbGZvMyI+DQo8bzpwPiZu YnNwOzwvbzpwPjwvbGk+PGxpIGNsYXNzPSJnbWFpbC1tMjMzMTA5MTgwNjY5NDg5MzgzNm1zb2xp c3RwYXJhZ3JhcGgiIHN0eWxlPSJtc28tbGlzdDpsMiBsZXZlbDEgbGZvMyI+DQpBZ3JlZSB3aXRo IEpvdW5pIHRoYXQgSSBkb27igJl0IHNlZSB0aGUgcG9pbnQgb2YgdGhlIDB4Mzcgb2N0ZXQsIGJ1 dCByZWdhcmRsZXNzIHRoaXMgY2xhcmlmaWNhdGlvbiBvZiBob3cgaXQgaXMgZW5jb2RlZCBpcyBw b3NpdGl2ZSAobWlub3IpIGNoYW5nZS48bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+W0pvZV0gSSB0 aGluayB0aGUgb3JpZ2luYWwgcmVhc29uIHRvIGluY2x1ZGUgdGhlIFRFQVAgbWV0aG9kIElEIGlu IHRoZSBzcGVjaWZpY2F0aW9uIHdhcyB0byBtYWtlIHN1cmUgdGhhdCB3ZSBkaWZmZXJlbnRpYXRl ZCBiZXR3ZWVuIHNpbWlsYXIgY3J5cHRvIGJpbmRpbmcgaW1wbGVtZW50YXRpb25zIGluIG90aGVy IHByb3RvY29scyBzdWNoIGFzIEVBUC1GQVNULiZuYnNwOyAmbmJzcDtJIGRvbid0IHRoaW5rIHRo ZXJlIGlzIG11Y2gNCiBhbWJpZ3VpdHkgaGVyZSwgYnV0IEkgYW0gT0sgd2l0aCBpbmNsdWRpbmcg MHgzNyBpbiB0aGUgZGVzY3JpcHRpb24uJm5ic3A7Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VGhhbmtzLDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5Kb3JnZTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+RnJvbTo8L2I+IEVtdSAm bHQ7PGEgaHJlZj0ibWFpbHRvOmVtdS1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+ ZW11LWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5PbGVnIFBl a2FyPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIE1heSA1LCAyMDIwIDY6MjcgQU08YnI+DQo8 Yj5Ubzo8L2I+IEpvdW5pIE1hbGluZW4gJmx0OzxhIGhyZWY9Im1haWx0bzpqQHcxLmZpIiB0YXJn ZXQ9Il9ibGFuayI+akB3MS5maTwvYT4mZ3Q7OyBFTVUgV0cgJmx0OzxhIGhyZWY9Im1haWx0bzpl bXVAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5lbXVAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxi PlN1YmplY3Q6PC9iPiBbRW11XSBURUFQIC0gUkZDIDcxNzAgLSBFcnJhdGEgSUQgNTc2ODxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SGkgSm91bmksPG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5JIHByb3Bvc2UgdGhlIGZvbGxv d2luZyBmaXggZm9yIHRoZSBpc3N1ZXMgZGVzY3JpYmVkIGluIHRoaXMgZXJyYXRhIGlkOjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4xKSBJbiBT ZWN0aW9uICZxdW90OzQuMi4xMy4mbmJzcDsgQ3J5cHRvLUJpbmRpbmcgVExWJnF1b3Q7IG1ha2Ug JnF1b3Q7RU1TSyBDb21wb3VuZCBNQUMmcXVvdDsgYW5kICZxdW90O01TSyBDb21wb3VuZCBNQUMm cXVvdDsgZmllbGRzIDMyIG9jdGV0cyBsb25nIChjdXJyZW50bHkgMjAgb2N0ZXRzKS4gVGhlJm5i c3A7TUFDIHZhbHVlIGlzIHRydW5jYXRlZCBhdCAzMiBvY3RldHMNCiBpZiBpdCBpcyBsb25nZXIg dGhhbiAzMiBvY3RldHMgb3ImbmJzcDtwYWRkZWQgdG8gYSBsZW5ndGggb2YgMzIgb2N0ZXRzIHdp dGggemVyb3MgdG8gdGhlIHJpZ2h0IGlmIGl0IGlzIGxlc3MgdGhhbiAzMiBvY3RldHMuIFRoZSBs ZW5ndGggb2YgdGhlIFRMViBzaG91bGQgYmUgY2hhbmdlZCB0byAxMDAgYnl0ZXMgKGN1cnJlbnRs eSA3NikuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj5UaGUgbW90aXZhdGlvbiBpcyB0byBrZWVwJm5ic3A7Y29sbGlzaW9uLXJl c2lzdGFuY2Ugc3RyZW5ndGggb2YgTUFDIG9uIDEyOCBiaXQuIEhhc2ggdmFsdWUmbmJzcDt0cnVu Y2F0aW9uIGlzIGRlc2NyaWJlZCBpbg0KPGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3Mu cHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGbnZscHVicy5uaXN0Lmdv diUyRm5pc3RwdWJzJTJGTGVnYWN5JTJGU1AlMkZuaXN0c3BlY2lhbHB1YmxpY2F0aW9uODAwLTEw N3IxLnBkZiZhbXA7ZGF0YT0wMiU3QzAxJTdDam92ZXJnYXIlNDBtaWNyb3NvZnQuY29tJTdDNjEw MmI0MThmZmQ2NGJlMjBmMGIwOGQ4MDEyZDFhZGUlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2Nk MDExZGI0NyU3QzElN0MwJTdDNjM3MjYwNjQwOTk1OTkzODE1JmFtcDtzZGF0YT1NSU9mVDl0U0VI VG1idVAyb1RqQXhsZ0pkQk9rZTNWNHVBcVFxN1lEek4wJTNEJmFtcDtyZXNlcnZlZD0wIiB0YXJn ZXQ9Il9ibGFuayI+DQomcXVvdDtOSVNUIFNwZWNpYWwgUHVibGljYXRpb24gODAwLTEwNyBSZXZp c2lvbiAxOiBSZWNvbW1lbmRhdGlvbiBmb3IgQXBwbGljYXRpb25zIFVzaW5nIEFwcHJvdmVkIEhh c2ggQWxnb3JpdGhtcyZxdW90OzwvYT4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjIpIEluIFNlY3Rpb24gJnF1b3Q7NS4zLiZu YnNwOyBDb21wdXRpbmcgdGhlIENvbXBvdW5kIE1BQyZxdW90OyBzcGVjaWZ5IHRoYXQgJnF1b3Q7 TUFDIGlzIHRoZSBNQUMgZnVuY3Rpb24gbmVnb3RpYXRlZCBpbiBUTFMgb2YmbmJzcDs8c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtjb2xvcjpibGFjayI+VEVBUCBQaGFzZSAxPC9zcGFuPiZx dW90OyAoY3VycmVudGx5DQogaXQgc2F5cyBUTFMgMS4yKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VGhlIG1vdGl2YXRpb24gaXMgdG8g c3VwcG9ydCBUTFMgMS4yLCAxLjMgYW5kIHBvc3NpYmx5IGxhdGVyIFRMUyB2ZXJzaW9ucy48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjMp Jm5ic3A7SW4gU2VjdGlvbiAmcXVvdDs1LjMuJm5ic3A7IENvbXB1dGluZyB0aGUgQ29tcG91bmQg TUFDJnF1b3Q7IHdoZW4gc3BlY2lmeWluZyB0aGUgbGlzdCBvZiBmaWVsZCZuYnNwO3RvIGJlIHBs YWNlZCBpbiB0aGUgQlVGRkVSJnF1b3Q7IHNob3VsZCBzYXkmbmJzcDsmcXVvdDsuLi4yICZuYnNw O0Egc2luZ2xlIG9jdGV0IGNvbnRhaW5zIFRFQVAgRUFQIG1ldGhvZCB0eXBlIDB4MzcmcXVvdDsu DQogQWx0ZXJuYXRpdmVseSBpdCBjb3VsZCBiZSAmcXVvdDsuLi4yICZuYnNwO0Egc2luZ2xlIG9j dGV0IGNvbnRhaW5zIEVBUCBUeXBlIG9mIHRoZSBpbm5lciBFQVAgbWV0aG9kIHJlbGF0ZWQgdG8g dGhlIGNhbGN1bGF0aW9uIG9yIDAgaWYgbm8gaW5uZXIgRUFQIG1ldGhvZCB3YXMgZXhlY3V0ZWQm cXVvdDsgKGN1cnJlbnRseSAmcXVvdDsuLi4yICZuYnNwO1RoZSBFQVAgVHlwZSBzZW50IGJ5IHRo ZSBvdGhlciBwYXJ0eSBpbiB0aGUgZmlyc3QgVEVBUCBtZXNzYWdlJnF1b3Q7KTxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+UGxlYXNlIG5v dGUgdGhhdCB0aGVyZSdzIHN0aWxsIGEgZGlzY3Vzc2lvbiBvbiBzZW5kaW5nIENyeXB0by1CaW5k aW5nIFRMViBvbiAmcXVvdDtBdXRoZW50aWNhdGlvbiBpbm5lciBFQVAgbWV0aG9kJnF1b3Q7IG9y ICZxdW90O0lubmVyIEVBUCBtZXRob2QgdGhhdCBleHBvcnRzIE1TSyZxdW90OyBvbmx5LjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VGhh bmtzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i Pk9sZWc8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX188YnI+DQpFbXUgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOkVtdUBp ZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPkVtdUBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJo dHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMl M0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZlbXUmYW1wO2RhdGE9 MDIlN0MwMSU3Q2pvdmVyZ2FyJTQwbWljcm9zb2Z0LmNvbSU3QzYxMDJiNDE4ZmZkNjRiZTIwZjBi MDhkODAxMmQxYWRlJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3 QzYzNzI2MDY0MDk5NjAwMzgwNyZhbXA7c2RhdGE9a0JSa1dNMkdBRFMyaVpQJTJGNkE5WWdyNjFK TzZoY0VlOGNOSzJaNnA5UGcwJTNEJmFtcDtyZXNlcnZlZD0wIiB0YXJnZXQ9Il9ibGFuayI+aHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lbXU8L2E+PG86cD48L286cD48L3A+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+ DQo= --_000_CH2PR21MB13815E6F39A40C156A5A3388D1B00CH2PR21MB1381namp_-- From nobody Tue May 26 06:54:06 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C57863A0F7C; Tue, 26 May 2020 06:52:56 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?b?TWFsacWhYSBWdcSNaW5pxIcgdmlhIERhdGF0cmFja2Vy?= To: Cc: last-call@ietf.org, draft-ietf-emu-eap-session-id.all@ietf.org, emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <159050117661.11337.1336987637854906717@ietfa.amsl.com> Reply-To: =?utf-8?b?TWFsacWhYSBWdcSNaW5pxIc=?= Date: Tue, 26 May 2020 06:52:56 -0700 Archived-At: Subject: [Emu] Secdir last call review of draft-ietf-emu-eap-session-id-03 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 13:52:59 -0000 Reviewer: Mališa Vučinić Review result: Has Nits I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The document updates RFC5247 to specify EAP Session-ID definition in case fast re-authentication is used with EAP-AKA and EAP-SIM. The Session-ID definition is based on a server-generated nonce and a MAC. The document also specifies the Session-ID definition for the PEAP method, following the definition of EAP-TLS. The document is clear and well written. Security considerations section is clear and states no known security issues in the definitions used. A reference to PEAP is missing. Nits: Section 3: s/to not modify/do not modify From nobody Wed May 27 14:05:20 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B3303A0B8D; Wed, 27 May 2020 14:05:18 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: emu@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: emu@ietf.org Message-ID: <159061351820.6984.7860159912130943525@ietfa.amsl.com> Date: Wed, 27 May 2020 14:05:18 -0700 Archived-At: Subject: [Emu] I-D Action: draft-ietf-emu-eap-session-id-04.txt X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 May 2020 21:05:18 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the EAP Method Update WG of the IETF. Title : EAP Session-Id Derivation for EAP-SIM, EAP-AKA, and PEAP Author : Alan DeKok Filename : draft-ietf-emu-eap-session-id-04.txt Pages : 9 Date : 2020-05-27 Abstract: EAP Session-Id derivation has not been defined for EAP-SIM or EAP-AKA when using the fast re-authentication exchange instead of full authentication. This document updates RFC 5247 to define those derivations for EAP-SIM and EAP-AKA. RFC 5247 also does not define Session-Id derivation for PEAP. A definition is given here which follows the definition for other TLS-based EAP methods. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-emu-eap-session-id/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-emu-eap-session-id-04 https://datatracker.ietf.org/doc/html/draft-ietf-emu-eap-session-id-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-emu-eap-session-id-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu May 28 11:31:48 2020 Return-Path: X-Original-To: emu@ietfa.amsl.com Delivered-To: emu@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CFED3A0602 for ; Thu, 28 May 2020 11:31:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rIU-isz4373P for ; Thu, 28 May 2020 11:31:44 -0700 (PDT) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A49F3A053F for ; Thu, 28 May 2020 11:31:43 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 04SIVgQU004846 for ; Thu, 28 May 2020 14:31:42 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu 04SIVgQU004846 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1590690702; bh=rtbutiMYltc26x/l+svLz8Tvl05nd3Go/0ofbnWXxVE=; h=From:To:Subject:Date:From; b=p7MYTTCHRgkWbOYxTkYABqiAQS7EAUf/tWhmDxLbrL/AWFl24SUicCRLs65T/bye5 0O2whICBMj5pKpwbatGb83GjgysB9pvDOJMnXW8H25sPdKjnUvxx//2XZ4gFuw2E0F yQp/Abt/IYGBJdjnOma9fetxEE/d27ycBEH3PKFU= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 04SIVeuP039358 for ; Thu, 28 May 2020 14:31:40 -0400 Received: from MURIEL.ad.sei.cmu.edu (147.72.252.47) by CASSINA.ad.sei.cmu.edu (10.64.28.249) with Microsoft SMTP Server (TLS) id 14.3.487.0; Thu, 28 May 2020 14:31:39 -0400 Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by MURIEL.ad.sei.cmu.edu (147.72.252.47) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1847.3; Thu, 28 May 2020 14:31:39 -0400 Received: from MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb]) by MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb%22]) with mapi id 15.01.1847.007; Thu, 28 May 2020 14:31:39 -0400 From: Roman Danyliw To: "emu@ietf.org" Thread-Topic: AD review of draft-ietf-emu-eap-tls13-09 Thread-Index: AdY1Havq25wDKQqtT3yaV6cHPacFdA== Date: Thu, 28 May 2020 18:31:39 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.203.21] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Emu] AD review of draft-ietf-emu-eap-tls13-09 X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2020 18:31:46 -0000 Hi! I performed an AD review of draft-ietf-emu-eap-tls13-09. Thanks for the wo= rk on modernizing existing guidance to cover TLS 1.3. Two high level things caught my attention: ** The abstract, introduction and title suggested to me that this document = is only about TLS 1.3+EAP. If I wasn't using TLS 1.3, then there is nothin= g here of interest. However, there appears to be text here that updates no= n-TLS 1.3 guidance. I recommend being clear about that up front (in the ab= stract and introduction). ** Section 2.1 explicitly says that "[t]his document only lists additional = and different requirements, restrictions, and processing compared to [RFC84= 46] and [RFC5216]." The text tries to match section headers names with [RF= C5216] (which is helpful). However, I didn't always follow the "updates" w= ithout some searching. Editorially, given a particular description of beha= vior, I recommend being clearer by consistently making explicit reference t= o a particular section in RFC5216 that is being updated.=20 More details on the above observations and others below: (1) Can you please check the boiler plate language, idnits is complaining i= s as follows: =3D=3D The document seems to lack the recommended RFC 2119 boilerplate, e= ven if it appears to use RFC 2119 keywords -- however, there's a paragraph wi= th a matching beginning. Boilerplate error? (The document does seem to have the reference to RFC 2119 which the ID-Checklist requires). (Using the creation date from RFC5216, updated by this document, for RFC5378 checks: 2007-07-01) -- The document seems to lack a disclaimer for pre-RFC5378 work, but may have content which was first submitted before 10 November 2008. If yo= u have contacted all the original authors and they are all willing to gr= ant the BCP78 rights to the IETF Trust, then this is fine, and you can ign= ore this comment. If not, you may need to add the pre-RFC5378 disclaimer.= =20 (See the Legal Provisions document at https://trustee.ietf.org/license-info for more information.) (2) Section 1. Editorial. Instead of something working "perfectly", maybe= just "supports" OLD EAP-TLS [RFC5216] references TLS 1.0 [RFC2246] and TLS 1.1 [RFC4346], but works perfectly also with TLS 1.2 [RFC5246]. =20 NEW EAP-TLS [RFC5216] explicitly references TLS 1.0 [RFC2246] and TLS 1.1 [RFC4= 346], but it also supports TLS 1.2 [RFC5246]. =20 (3) Section 1. Editorial. "Easy" might be relative. OLD Privacy is mandatory and achieved without any additional round-trips, revocation checking is mandatory and easy with OCSP stapling, NEW Privacy is mandatory and achieved without any additional round-trips, rev= ocation checking is mandatory and simplified with OCSP stapling, (3) Section 2.1.1. What is the relationship between this section and NAI g= uidance in RFC5216 Section 2.1.4? Is it that anonymous NAIs are RECOMMENDE= D for TLS 1.3, but stay a MAY in old EAP-TLS? (4) Section 2.1.3. Editorial. To prevent the reader from having to line u= p which paragraphs are being replaced in Section 2.1.3 of [RFC5216], I woul= d recommend citing the old text and showing how this text replaces it. Add= itionally, since RFC5216 lists the peer guidance before the server, I'd rec= ommend reversing the order. For example: Original TLS guidance from RFC5216: If the peer authenticates successfully, the EAP server MUST respond with an EAP-Request packet with EAP-Type=3DEAP-TLS, which includes, in the case of a new TLS session, one or more TLS records containing TLS change_cipher_spec and finished handshake messages. The latter contains the EAP server's authentication response to the peer. The peer will then verify the finished message in order to authenticate the EAP server. ... If the EAP server authenticates successfully, the peer MUST send an EAP-Response packet of EAP-Type=3DEAP-TLS, and no data. The EAP Server then MUST respond with an EAP-Success message. TLS 1.3 guidance: [insert new language in the draft now] (5) Section 2.1.5. Is Figure 6 supposed to be read as being inclusive of a= ll TLS messages? The figure doesn't contain TLS CertificateRequest, TLS Ce= rtificate, or TLS CertificateVerify. It wouldn't be germane to what the fi= gure is trying to demonstrate but the examples in prior sections are "compl= ete". (6) Section 2.1.6. The text here seems right to describe TLS 1.3 behavior.= Recommend being clearer on which behavior this is replacing in TLS-EAP (i= .e., explicitly citing a given section in RFC5216; is it Section 2.1.2?) (7) Section 2.1.7. The text here seems right to describe TLS 1.3 behavior.= Recommend being clearer on which behavior this is replacing in TLS EAP (i= .e., explicitly citing a given section in RFC5216) (8) Section 2.1.7. Per "When NAI reuse can be done without privacy implica= tions", is there any guidance that can be provided on where there would be = a privacy issue? (9) Section 2.1.9. The text here seems right to describe TLS 1.3 behavior.= Recommend being clearer on which behavior this is replacing in TLS EAP (i= .e., explicitly citing a given section in RFC5216, is it Section 2.1.5?) (10) Section 5.1. Editorial. Wrong section reference. s/Section 4.1. of [R= FC5216]/Section 5.1 of [RFC5216]/ (11) Section 5.1. Per "better confidentiality" in [2], this seems imprecis= e (12) Section 5.4. Per "While certificates often have a long validity perio= d spanning several years, there are ...", as this is changing perhaps just = say "While certificates may have long validity periods, there are ..." (13) Section 5.5. Recommend that this section read "No updates to Section = 5.5 of [RFC5216]" (14) Section 5.6. The guidance in this section does appear to be TLS 1.3 s= pecific. If it isn't, it should be noted as such. (15) Section 5.7. Per "Since accounting must be tied to an authenticated i= dentity ...", is there is a reason not to use a normative MUST here? Espec= ially since later a normative RECOMMENDED is used for "It is RECOMMENDED th= at authorization, accounting and policy decisions are reevaluated based on = information given in resumptions". (16) Section 5.8. Editorial. Per "[RFC6973] suggests that the privacy cons= iderations of IETF protocols be documented", it isn't clear to me what this= sentence is adding. (17) Section 5.8. Editorial. s/TLS 1.3 offers much better privacy than ..= ./TLS 1.3 offers better privacy properties than .../ (18) Section 5.8. Editorial. Per "If privacy-friendly identifiers with enc= rypted usernames need to be generated with care", as written, this is a onl= y sentence fragment. (19) Section 5.8. Per "An EAP peer with a policy allowing communication wi= th EAP servers supporting only TLS 1.2 without privacy and with a static R= SA key exchange is vulnerable to disclosure of the peer username", the "wit= hout privacy" would benefit from being more precisely stated. (20) Section 5.9. Editorial. Per "As required by [RFC7258] ...", I'm not s= ure what this sentence adds. (21) Section 5.9. Could you contextualize this "widespread surveillance of= users " more specifically within the EAP context. Regards, Roman From nobody Fri May 29 20:38:59 2020 Return-Path: X-Original-To: emu@ietf.org Delivered-To: emu@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id ACF1F3A1378; Fri, 29 May 2020 20:38:50 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Murray Kucherawy via Datatracker To: "The IESG" Cc: draft-ietf-emu-eap-session-id@ietf.org, emu-chairs@ietf.org, emu@ietf.org, Mohit Sethi X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Murray Kucherawy Message-ID: <159080993011.23889.1099821701386816438@ietfa.amsl.com> Date: Fri, 29 May 2020 20:38:50 -0700 Archived-At: Subject: [Emu] Murray Kucherawy's No Objection on draft-ietf-emu-eap-session-id-04: (with COMMENT) X-BeenThere: emu@ietf.org X-Mailman-Version: 2.1.29 List-Id: "EAP Methods Update \(EMU\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 May 2020 03:38:51 -0000 Murray Kucherawy has entered the following ballot position for draft-ietf-emu-eap-session-id-04: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-emu-eap-session-id/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I suspect it would be helpful to expand EAP, EAP-SIM, EAP-AKA, PEAP, and FILS on first use. Section 2 feels like it's phrased as an erratum. I suggest removing the explicit citation of the existing document and just include the new text.