From nobody Fri Feb 2 17:32:26 2018 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EB62124235; Fri, 2 Feb 2018 17:32:25 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: id-event@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.71.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151762154514.14739.14196007707532563506@ietfa.amsl.com> Date: Fri, 02 Feb 2018 17:32:25 -0800 Archived-At: Subject: [Id-event] I-D Action: draft-ietf-secevent-token-05.txt X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 01:32:25 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Events WG of the IETF. Title : Security Event Token (SET) Authors : Phil Hunt Michael B. Jones William Denniss Morteza Ansari Filename : draft-ietf-secevent-token-05.txt Pages : 26 Date : 2018-02-02 Abstract: This specification defines the Security Event Token (SET) data structure. A SET describes a statement of fact from the perspective of an issuer, which is intended to be shared with one or more recipients. A SET is a JSON Web Token (JWT), which can be optionally signed and/or encrypted. SETs can be distributed via protocols such as HTTP. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-secevent-token/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-secevent-token-05 https://datatracker.ietf.org/doc/html/draft-ietf-secevent-token-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-secevent-token-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Feb 2 17:40:17 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98801126E01 for ; Fri, 2 Feb 2018 17:40:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.74 X-Spam-Level: X-Spam-Status: No, score=-1.74 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W1tM_aIkhfLk for ; Fri, 2 Feb 2018 17:40:13 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0725.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe45::725]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9F5C126DFF for ; Fri, 2 Feb 2018 17:40:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=RYeiF5kqQmMEtvX9OWscnPbQZ84iPtIREU01IuoebZk=; b=RF9oa5ZsC8HC6cFchlCZqMY4W7R9/OvROhBJcKOUfSeBLJzcKj9AFFW25EVChyKtaAE5wwPOWXTjttona52F2AlqVQKOW4m/2ov1GFMpp64XnHQr40HorKwMPJhbTi2AzZkzYUUV00u9tqhSkOz0PgA6YFiquYjvKxcFi7OcQxs= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1085.namprd21.prod.outlook.com (52.132.115.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.485.5; Sat, 3 Feb 2018 01:40:11 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a%6]) with mapi id 15.20.0485.006; Sat, 3 Feb 2018 01:40:11 +0000 From: Mike Jones To: SecEvent Thread-Topic: Security Event Token (SET) spec simplifying claims usage Thread-Index: AdOcjWOUv2FLjUOWRlysi3A07mR5lg== Date: Sat, 3 Feb 2018 01:40:11 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-03T01:40:09.3445309Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:3::42a] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1085; 7:mAXGx1iTZR0mg1guP7iFTdw4rqP9CYyaltKsHjoeNQtar8VwjAZTv4SQvYDGzcdySzQe1IEHCJz1OzKnFjbNL1cv9qQB9pEXDsKA9vYwIZZuFEcf4HwMDjtUM6i+KDEB2PZ3ZrJd41j+VtGGLQT9gF4Wkiz15PyuYYFnWTMqGAjCdlKAlmvlhj2nt+laeUvvRXtlGCSftnkvyqq5Gj4/BkrsG6e1g7RCK3GQs5Ud/T6WccgiY75NUXc9T2nIGCQp x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 14de8278-b004-4f01-519a-08d56aa710a3 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1085; x-ms-traffictypediagnostic: SN6PR2101MB1085: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(31418570063057)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231101)(2400082)(944501161)(6055026)(61426038)(61427038)(6041288)(20161123560045)(20161123558120)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(6072148)(201708071742011); SRVR:SN6PR2101MB1085; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1085; x-forefront-prvs: 05724A8921 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39860400002)(39380400002)(346002)(396003)(376002)(209900001)(189003)(199004)(9686003)(2906002)(14454004)(3660700001)(86362001)(15650500001)(6506007)(68736007)(97736004)(6436002)(55016002)(25786009)(106356001)(8936002)(5660300001)(2420400007)(186003)(6916009)(3280700002)(105586002)(81156014)(53376002)(81166006)(478600001)(33656002)(59450400001)(606006)(74316002)(7696005)(790700001)(6116002)(10290500003)(8676002)(7736002)(236005)(22452003)(6346003)(86612001)(6306002)(53936002)(7110500001)(54896002)(10090500001)(5250100002)(102836004)(2900100001)(72206003)(316002)(8990500004)(966005)(99286004)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1085; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: /hS0WrbxdqvYHA5BcKDaxrRtDUQC8zo/960xLasDorCSnTWPRxWl7Q5+G0sllxyjl/WKNp5havMkAadNP14J7g== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB09435F3CF0E84743B3913ABCF5F80SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 14de8278-b004-4f01-519a-08d56aa710a3 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Feb 2018 01:40:11.2983 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1085 Archived-At: Subject: [Id-event] Security Event Token (SET) spec simplifying claims usage X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 01:40:15 -0000 --_000_SN6PR2101MB09435F3CF0E84743B3913ABCF5F80SN6PR2101MB0943_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The Security Event Token (SET) specification has been updated to simplify t= he definitions and usage of the "iat" (issued at) and "toe" (time of event)= claims. The full set of changes made was: * Simplified the definitions of the "iat" and "toe" claims in ways sugg= ested by Annabelle Backman. * Added privacy considerations text suggested by Annabelle Backman. * Updated the RISC event example, courtesy of Marius Scurtescu. * Reordered the claim definitions to place the required claims first. * Changed to using the RFC 8174 boilerplate instead of the RFC 2119 boi= lerplate. Thanks to Annabelle Backman, Marius Scurtescu, Phil Hunt, and Dick Hardt fo= r the discussions that led to these simplifications. The specification is available at: * https://tools.ietf.org/html/draft-ietf-secevent-token-05 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-secevent-token-05.html -- Mike P.S. This announcement was also posted at http://self-issued.info/?p=3D177= 3 and as @selfissued. --_000_SN6PR2101MB09435F3CF0E84743B3913ABCF5F80SN6PR2101MB0943_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The Security Event Token (SET) specification has bee= n updated to simplify the definitions and usage of the “iat” (issued at) and = “toe”= ; (time of event) claims.  The full set of changes made was:

  • Simplified the de= finitions of the “iat” and “toe” claims in ways suggested by Annabelle Backman.
  • Added= privacy considerations text suggested by Annabelle Backman.
  • Updated the RISC= event example, courtesy of Marius Scurtescu.
  • Reordered the claim definitions= to place the required claims first.
  • Changed to using the RFC 8174 boilerplat= e instead of the RFC 2119 boilerplate.

 

Thanks to Annabelle Backman, Marius Scurtescu, Phil = Hunt, and Dick Hardt for the discussions that led to these simplifications.=

 

The specification is available at:

 

An HTML-formatted version is also available at:=

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;     -- Mike

 

P.S.  This announcement was also posted at http://self-issued.info/?p=3D1773 and as @selfissued.

 

--_000_SN6PR2101MB09435F3CF0E84743B3913ABCF5F80SN6PR2101MB0943_-- From nobody Mon Feb 5 09:27:57 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C197B1277BB for ; Mon, 5 Feb 2018 09:27:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.83 X-Spam-Level: X-Spam-Status: No, score=-11.83 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9wJgiy1bYwZf for ; Mon, 5 Feb 2018 09:27:53 -0800 (PST) Received: from smtp-fw-6001.amazon.com (smtp-fw-6001.amazon.com [52.95.48.154]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E58C1273B1 for ; Mon, 5 Feb 2018 09:27:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1517851673; x=1549387673; h=from:to:subject:date:message-id:mime-version; bh=n2vQZx4MEj6xITC1/ziSJg109zdTcRNEptYlfd1q5p8=; b=VNc1ArUglM2MMIhD5V8LyWXx8cSdOH6ne/lh7fCJ4FvHYEokS/yJuI68 GAjfuoDyMnl+scm5F45M4lJsxIAdq3ZR7dpDCOl7YCW6vv/TuDMgZtCWO HqheEHFGlYqcbVBNzM62XTThOvzXaruLprpgVhJk3DV0cJHyfh6oYyQGH M=; X-IronPort-AV: E=Sophos;i="5.46,465,1511827200"; d="scan'208,217";a="330664900" Received: from iad6-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-2a-1c1b5cdd.us-west-2.amazon.com) ([10.124.125.6]) by smtp-border-fw-out-6001.iad6.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 05 Feb 2018 17:27:51 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198]) by email-inbound-relay-2a-1c1b5cdd.us-west-2.amazon.com (8.14.7/8.14.7) with ESMTP id w15HRo2B017332 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 5 Feb 2018 17:27:50 GMT Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1236.3; Mon, 5 Feb 2018 17:27:50 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1236.3; Mon, 5 Feb 2018 17:27:49 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1236.000; Mon, 5 Feb 2018 17:27:49 +0000 From: "Richard Backman, Annabelle" To: Mike Jones , SecEvent Thread-Topic: [Id-event] Security Event Token (SET) spec simplifying claims usage Thread-Index: AQHTnqakSHW85t58pUWtxqvYw1ngCQ== Date: Mon, 5 Feb 2018 17:27:48 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.9.0.180116 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.160.245] Content-Type: multipart/alternative; boundary="_000_EDDBD044801F4F55907D758F40F26FA0amazoncom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] Security Event Token (SET) spec simplifying claims usage X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 17:27:55 -0000 --_000_EDDBD044801F4F55907D758F40F26FA0amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzLCBNaWtlLg0KDQpXaXRoIHRoZXNlIGxhdGVzdCBjaGFuZ2VzLCBJIGJlbGlldmUgdGhh dCB3ZSBjYW4gbWFrZSB0aGUgY3VycmVudCBkcmFmdCB3b3JrIGZvciBSSVNDLiBJdCB3aWxsIHJl cXVpcmUgZG9pbmcgbW9yZSB3aXRoaW4gdGhlIFJJU0MgUHJvZmlsZSB0aGFuIGF0IGxlYXN0IEkg d2FzIGV4cGVjdGluZywgYW5kIHRoZSByZXN1bHQgd2lsbCBsaWtlbHkgYmUgaW5jb21wYXRpYmxl IHdpdGggbW9zdC9hbGwgb3RoZXIgU0VUIHByb2ZpbGVzLCBidXQgaXQgd2lsbCB3b3JrIGZvciB1 cy4NCg0KLS0NCkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW4NCkFtYXpvbiDigJMgSWRlbnRpdHkg U2VydmljZXMNCg0KRnJvbTogSWQtZXZlbnQgPGlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc+IG9u IGJlaGFsZiBvZiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+DQpEYXRl OiBGcmlkYXksIEZlYnJ1YXJ5IDIsIDIwMTggYXQgNTo0MSBQTQ0KVG86IFNlY0V2ZW50IDxpZC1l dmVudEBpZXRmLm9yZz4NClN1YmplY3Q6IFtJZC1ldmVudF0gU2VjdXJpdHkgRXZlbnQgVG9rZW4g KFNFVCkgc3BlYyBzaW1wbGlmeWluZyBjbGFpbXMgdXNhZ2UNCg0KVGhlIFNlY3VyaXR5IEV2ZW50 IFRva2VuIChTRVQpIHNwZWNpZmljYXRpb24gaGFzIGJlZW4gdXBkYXRlZCB0byBzaW1wbGlmeSB0 aGUgZGVmaW5pdGlvbnMgYW5kIHVzYWdlIG9mIHRoZSDigJxpYXTigJ0gKGlzc3VlZCBhdCkgYW5k IOKAnHRvZeKAnSAodGltZSBvZiBldmVudCkgY2xhaW1zLiAgVGhlIGZ1bGwgc2V0IG9mIGNoYW5n ZXMgbWFkZSB3YXM6DQoNCiAgKiAgIFNpbXBsaWZpZWQgdGhlIGRlZmluaXRpb25zIG9mIHRoZSDi gJxpYXTigJ0gYW5kIOKAnHRvZeKAnSBjbGFpbXMgaW4gd2F5cyBzdWdnZXN0ZWQgYnkgQW5uYWJl bGxlIEJhY2ttYW4uDQogICogICBBZGRlZCBwcml2YWN5IGNvbnNpZGVyYXRpb25zIHRleHQgc3Vn Z2VzdGVkIGJ5IEFubmFiZWxsZSBCYWNrbWFuLg0KICAqICAgVXBkYXRlZCB0aGUgUklTQyBldmVu dCBleGFtcGxlLCBjb3VydGVzeSBvZiBNYXJpdXMgU2N1cnRlc2N1Lg0KICAqICAgUmVvcmRlcmVk IHRoZSBjbGFpbSBkZWZpbml0aW9ucyB0byBwbGFjZSB0aGUgcmVxdWlyZWQgY2xhaW1zIGZpcnN0 Lg0KICAqICAgQ2hhbmdlZCB0byB1c2luZyB0aGUgUkZDIDgxNzQgYm9pbGVycGxhdGUgaW5zdGVh ZCBvZiB0aGUgUkZDIDIxMTkgYm9pbGVycGxhdGUuDQoNClRoYW5rcyB0byBBbm5hYmVsbGUgQmFj a21hbiwgTWFyaXVzIFNjdXJ0ZXNjdSwgUGhpbCBIdW50LCBhbmQgRGljayBIYXJkdCBmb3IgdGhl IGRpc2N1c3Npb25zIHRoYXQgbGVkIHRvIHRoZXNlIHNpbXBsaWZpY2F0aW9ucy4NCg0KVGhlIHNw ZWNpZmljYXRpb24gaXMgYXZhaWxhYmxlIGF0Og0KDQogICogICBodHRwczovL3Rvb2xzLmlldGYu b3JnL2h0bWwvZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wNQ0KDQpBbiBIVE1MLWZvcm1hdHRl ZCB2ZXJzaW9uIGlzIGFsc28gYXZhaWxhYmxlIGF0Og0KDQogICogICBodHRwOi8vc2VsZi1pc3N1 ZWQuaW5mby9kb2NzL2RyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4tMDUuaHRtbA0KDQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg LS0gTWlrZQ0KDQpQLlMuICBUaGlzIGFubm91bmNlbWVudCB3YXMgYWxzbyBwb3N0ZWQgYXQgaHR0 cDovL3NlbGYtaXNzdWVkLmluZm8vP3A9MTc3MyBhbmQgYXMgQHNlbGZpc3N1ZWQ8aHR0cHM6Ly90 d2l0dGVyLmNvbS9zZWxmaXNzdWVkPi4NCg0K --_000_EDDBD044801F4F55907D758F40F26FA0amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <9D2FD7D6BC4B8D4289AE4B6C7ACF2F0E@amazon.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDAN Cgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0K CW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2lu LWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9 DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5N c29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZTox MC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdp bjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29y ZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0 LWlkOjM1MjA2MTY2Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMTUxNzUxNTA2O30NCkBsaXN0 IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZh bWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250 LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMu MGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6MjA2NTI3MzI0Ow0KCW1zby1saXN0LXR5cGU6aHli cmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxNDYzMTczNTAyIDY3Njk4Njg5IDY3Njk4Njkx IDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3 Njk4NjkzO30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDE6bGV2ZWwzDQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2 ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDE6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3Ijt9DQpAbGlzdCBsMTpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZv bnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDgNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwxOmxl dmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30N CkBsaXN0IGwyDQoJe21zby1saXN0LWlkOjIyMzEwNzY3NzsNCgltc28tbGlzdC10ZW1wbGF0ZS1p ZHM6LTEyODgwMzI4OTI7fQ0KQGxpc3QgbDI6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41 aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpA bGlzdCBsMjpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250 LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDMNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMjpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1m b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDYN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsMjpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZl bDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMw0KCXttc28tbGlzdC1pZDo4NTg1OTE0 MDg7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xNDMz NDUyNTIgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2 OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWwy DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0K CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpA bGlzdCBsMzpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5Oldp bmdkaW5nczt9DQpAbGlzdCBsMzpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZv bnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMzpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwzOmxldmVsNg0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwzOmxl dmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBs aXN0IGwzOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3Vy aWVyIE5ldyI7fQ0KQGxpc3QgbDM6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglm b250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDQNCgl7bXNvLWxpc3QtaWQ6MTc5MzA5NDY2 MDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTM1NjM3MDM2O30NCkBsaXN0IGw0OmxldmVsMQ0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0K CW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDQ6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDQ6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2kt Zm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDQ6bGV2ZWw0 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDQ6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDQ6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDQ6bGV2 ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDQ6bGV2ZWw4DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDQ6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0Kb2wNCgl7bWFy Z2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT4N CjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3 MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhh bmtzLCBNaWtlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XaXRoIHRoZXNlIGxhdGVzdCBjaGFu Z2VzLCBJIGJlbGlldmUgdGhhdCB3ZSBjYW4gbWFrZSB0aGUgY3VycmVudCBkcmFmdCB3b3JrIGZv ciBSSVNDLiBJdCB3aWxsIHJlcXVpcmUgZG9pbmcgbW9yZSB3aXRoaW4gdGhlIFJJU0MgUHJvZmls ZSB0aGFuIGF0IGxlYXN0IEkgd2FzIGV4cGVjdGluZywgYW5kIHRoZSByZXN1bHQgd2lsbCBsaWtl bHkgYmUgaW5jb21wYXRpYmxlIHdpdGggbW9zdC9hbGwgb3RoZXIgU0VUDQogcHJvZmlsZXMsIGJ1 dCBpdCB3aWxsIHdvcmsgZm9yIHVzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj4tLSZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+QW5uYWJlbGxlIFJpY2hhcmQgQmFja21h bjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+QW1hem9uIOKAkyBJZGVudGl0eSBTZXJ2aWNlczxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPjwvYj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+SWQtZXZlbnQgJmx0O2lkLWV2 ZW50LWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiBNaWtlIEpvbmVzICZsdDtNaWNo YWVsLkpvbmVzQG1pY3Jvc29mdC5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPkZyaWRheSwgRmVi cnVhcnkgMiwgMjAxOCBhdCA1OjQxIFBNPGJyPg0KPGI+VG86IDwvYj5TZWNFdmVudCAmbHQ7aWQt ZXZlbnRAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPltJZC1ldmVudF0gU2VjdXJp dHkgRXZlbnQgVG9rZW4gKFNFVCkgc3BlYyBzaW1wbGlmeWluZyBjbGFpbXMgdXNhZ2U8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgbmFtZT0i X01haWxPcmlnaW5hbEJvZHkiPlRoZSBTZWN1cml0eSBFdmVudCBUb2tlbiAoU0VUKSBzcGVjaWZp Y2F0aW9uIGhhcyBiZWVuIHVwZGF0ZWQgdG8gc2ltcGxpZnkgdGhlIGRlZmluaXRpb25zIGFuZCB1 c2FnZSBvZiB0aGUg4oCcPC9hPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5h bEJvZHkiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ aWF0PC9zcGFuPuKAnQ0KIChpc3N1ZWQgYXQpIGFuZCDigJw8L3NwYW4+PHNwYW4gc3R5bGU9Im1z by1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij50b2U8L3NwYW4+4oCdICh0aW1lIG9mIGV2ZW50KSBjbGFp bXMuJm5ic3A7IFRoZSBmdWxsIHNldCBvZiBjaGFuZ2VzIG1hZGUgd2FzOjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9ImRpc2MiPg0KPGxpIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbGlzdDpsMSBsZXZlbDEgbGZvMyI+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+U2ltcGxpZmllZCB0aGUgZGVmaW5p dGlvbnMgb2YgdGhlIOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3Jp Z2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPmlhdDwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdp bmFsQm9keSI+4oCdDQogYW5kIOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9N YWlsT3JpZ2luYWxCb2R5Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPnRvZTwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFp bE9yaWdpbmFsQm9keSI+4oCdIGNsYWltcyBpbiB3YXlzIHN1Z2dlc3RlZCBieSBBbm5hYmVsbGUg QmFja21hbi48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzMiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01h aWxPcmlnaW5hbEJvZHkiPkFkZGVkIHByaXZhY3kgY29uc2lkZXJhdGlvbnMgdGV4dCBzdWdnZXN0 ZWQgYnkgQW5uYWJlbGxlIEJhY2ttYW4uPG86cD48L286cD48L3NwYW4+PC9saT48bGkgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1saXN0OmwxIGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0i bXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij5VcGRhdGVkIHRoZSBSSVNDIGV2ZW50IGV4 YW1wbGUsIGNvdXJ0ZXN5IG9mIE1hcml1cyBTY3VydGVzY3UuPG86cD48L286cD48L3NwYW4+PC9s aT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1saXN0OmwxIGxldmVsMSBsZm8zIj48 c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij5SZW9yZGVyZWQgdGhl IGNsYWltIGRlZmluaXRpb25zIHRvIHBsYWNlIHRoZSByZXF1aXJlZCBjbGFpbXMgZmlyc3QuPG86 cD48L286cD48L3NwYW4+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1saXN0 OmwxIGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxC b2R5Ij5DaGFuZ2VkIHRvIHVzaW5nIHRoZSBSRkMgODE3NCBib2lsZXJwbGF0ZSBpbnN0ZWFkIG9m IHRoZSBSRkMgMjExOSBib2lsZXJwbGF0ZS48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2lu YWxCb2R5Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij5UaGFua3MgdG8g QW5uYWJlbGxlIEJhY2ttYW4sIE1hcml1cyBTY3VydGVzY3UsIFBoaWwgSHVudCwgYW5kIERpY2sg SGFyZHQgZm9yIHRoZSBkaXNjdXNzaW9ucyB0aGF0IGxlZCB0byB0aGVzZSBzaW1wbGlmaWNhdGlv bnMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpf TWFpbE9yaWdpbmFsQm9keSI+VGhlIHNwZWNpZmljYXRpb24gaXMgYXZhaWxhYmxlIGF0OjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9ImRpc2Mi Pg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbGlzdDpsMyBsZXZlbDEgbGZvNiI+ PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+PC9zcGFuPjxhIGhy ZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNlY2V2ZW50LXRva2Vu LTA1Ij48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij5odHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wNTwvc3Bhbj48 c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48L3NwYW4+PC9hPjxz cGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPjxvOnA+PC9vOnA+PC9z cGFuPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9v a21hcms6X01haWxPcmlnaW5hbEJvZHkiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5h bEJvZHkiPkFuIEhUTUwtZm9ybWF0dGVkIHZlcnNpb24gaXMgYWxzbyBhdmFpbGFibGUgYXQ6PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgdHlwZT0iZGlz YyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1saXN0OmwzIGxldmVsMSBsZm82 Ij48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij48L3NwYW4+PGEg aHJlZj0iaHR0cDovL3NlbGYtaXNzdWVkLmluZm8vZG9jcy9kcmFmdC1pZXRmLXNlY2V2ZW50LXRv a2VuLTA1Lmh0bWwiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHki Pmh0dHA6Ly9zZWxmLWlzc3VlZC5pbmZvL2RvY3MvZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0w NS5odG1sPC9zcGFuPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHki Pjwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+ PG86cD48L286cD48L3NwYW4+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9Im1zby1ib29rbWFyazpfTWFpbE9yaWdpbmFsQm9keSI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFy azpfTWFpbE9yaWdpbmFsQm9keSI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IC0tIE1pa2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij4mbmJzcDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWJvb2tt YXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij5QLlMuJm5ic3A7IFRoaXMgYW5ub3VuY2VtZW50IHdhcyBh bHNvIHBvc3RlZCBhdA0KPC9zcGFuPjxhIGhyZWY9Imh0dHA6Ly9zZWxmLWlzc3VlZC5pbmZvLz9w PTE3NzMiPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxPcmlnaW5hbEJvZHkiPmh0dHA6 Ly9zZWxmLWlzc3VlZC5pbmZvLz9wPTE3NzM8L3NwYW4+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFy azpfTWFpbE9yaWdpbmFsQm9keSI+PC9zcGFuPjwvYT48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJr Ol9NYWlsT3JpZ2luYWxCb2R5Ij4gYW5kIGFzDQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly90d2l0 dGVyLmNvbS9zZWxmaXNzdWVkIj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2lu YWxCb2R5Ij5Ac2VsZmlzc3VlZDwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWls T3JpZ2luYWxCb2R5Ij48L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxP cmlnaW5hbEJvZHkiPi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsT3JpZ2luYWxCb2R5Ij4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_EDDBD044801F4F55907D758F40F26FA0amazoncom_-- From nobody Mon Feb 5 10:18:25 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DB6912D93E for ; Mon, 5 Feb 2018 10:18:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K2i3J1Z4leJf for ; Mon, 5 Feb 2018 10:18:22 -0800 (PST) Received: from mail-vk0-x243.google.com (mail-vk0-x243.google.com [IPv6:2607:f8b0:400c:c05::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11F0C12D88E for ; Mon, 5 Feb 2018 10:18:22 -0800 (PST) Received: by mail-vk0-x243.google.com with SMTP id n132so18238573vke.2 for ; Mon, 05 Feb 2018 10:18:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=K0rpwkpaYSil7xmStp/9ibUxXykToKNWw5VnyCChsVU=; b=TT0KLwbWMOg9BEfhC01bgEvi0QRqrijTQbphDR5SVGduI476Ge5ieaBXFPTms2mzRa Lvc4gJ1Ik1k1BJXJB7WqX7T/PW9rsRACXbHEKtbMXVC5g+Tjs/BRPxLLVTDpKV93bhVu aUBMa/algp/dLEsU/y3/ZwRmsDWaBPByhA6N+E5hHyuAsW4RlOTQsmD3b+Q6EAQhExxw mx/p7lAqRrDGFwERMP8CMttnqbdzZoDyLEP1wzDrqG6IuCNXcPPVKfG8UIEm2akVWn+H aozBrKsLhmF1pgjYVp5cr4pwcBsf51OS5xzUPVbGQ+KUxBGNmx0YI70LqWOnRI2W8RE6 TfQQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=K0rpwkpaYSil7xmStp/9ibUxXykToKNWw5VnyCChsVU=; b=r7bMfbryAUVJbU4z6AQu0ODNyrr0Tyx6qoZIJAN2jBGC4NeZxS704jV5/pW4bIUVr1 tu+/bB6ss52joTmbeSyd58mAUyc5jyFyA4UGyv1tHDuPG5hk9wVZ37nYb26VNED39OY1 GXZDSvrKxXwtNRUW+NlUJAHqTjgboPgjDebmSzDT3uGLINcPYZkL1FpK/U+w3q5ntVtD EzAPvmTj97IbE0No8dRZgXn1aGHViWUolZCip0wD/uJAIHA+EF5ie5wgwPwPSIIHh6MZ miMahjWAI7fbasZR+jdKTSctmn8z4Elc5wqOo/PPirapRkwv+9Lgrw1SsmW/hzBgLyIn dsmw== X-Gm-Message-State: AKwxyteqQoCuvsmh7mTSX2Kmt0/yHLe5S3FdYoohSt8izUwqOMOtZ/cz DRKAj7AnMiv63VUGFe2TopTGoA8mIqOqpveYeV3Vzw== X-Google-Smtp-Source: AH8x226AXtCGfaUeP87e7cyDxbbWzCkDOaQ31zyTSzZbfkRR59GDFaTW/PliAWb47ucvm6tluNkTa+x5OMOdcd8Os6s= X-Received: by 10.31.94.207 with SMTP id s198mr40968997vkb.23.1517854700411; Mon, 05 Feb 2018 10:18:20 -0800 (PST) MIME-Version: 1.0 Received: by 10.31.155.66 with HTTP; Mon, 5 Feb 2018 10:17:59 -0800 (PST) In-Reply-To: References: From: Marius Scurtescu Date: Mon, 5 Feb 2018 10:17:59 -0800 Message-ID: To: "Richard Backman, Annabelle" Cc: Mike Jones , SecEvent Content-Type: multipart/alternative; boundary="001a114e51083dd68705647b1615" Archived-At: Subject: Re: [Id-event] Security Event Token (SET) spec simplifying claims usage X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 18:18:24 -0000 --001a114e51083dd68705647b1615 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, Feb 5, 2018 at 9:27 AM, Richard Backman, Annabelle < richanna@amazon.com> wrote: > Thanks, Mike. > > > > With these latest changes, I believe that we can make the current draft > work for RISC. It will require doing more within the RISC Profile than at > least I was expecting, and the result will likely be incompatible with > most/all other SET profiles, but it will work for us. > Agreed, RISC can move forward. Also sharing the profile compatibility concerns and the fact that we are forcing duplication across profiles. Hopefully we will find ways to work around these issues. > > > -- > > Annabelle Richard Backman > > Amazon =E2=80=93 Identity Services > > > > *From: *Id-event on behalf of Mike Jones < > Michael.Jones@microsoft.com> > *Date: *Friday, February 2, 2018 at 5:41 PM > *To: *SecEvent > *Subject: *[Id-event] Security Event Token (SET) spec simplifying claims > usage > > > > The Security Event Token (SET) specification has been updated to simplify > the definitions and usage of the =E2=80=9Ciat=E2=80=9D (issued at) and = =E2=80=9Ctoe=E2=80=9D (time of > event) claims. The full set of changes made was: > > - Simplified the definitions of the =E2=80=9Ciat=E2=80=9D and =E2=80= =9Ctoe=E2=80=9D claims in ways > suggested by Annabelle Backman. > - Added privacy considerations text suggested by Annabelle Backman. > - Updated the RISC event example, courtesy of Marius Scurtescu. > - Reordered the claim definitions to place the required claims first. > - Changed to using the RFC 8174 boilerplate instead of the RFC 2119 > boilerplate. > > > > Thanks to Annabelle Backman, Marius Scurtescu, Phil Hunt, and Dick Hardt > for the discussions that led to these simplifications. > > > > The specification is available at: > > - https://tools.ietf.org/html/draft-ietf-secevent-token-05 > > > > An HTML-formatted version is also available at: > > - http://self-issued.info/docs/draft-ietf-secevent-token-05.html > > > > -- Mike > > > > P.S. This announcement was also posted at http://self-issued.info/?p=3D1= 773 > and as @selfissued . > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > --001a114e51083dd68705647b1615 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On M= on, Feb 5, 2018 at 9:27 AM, Richard Backman, Annabelle &l= t;richanna@amazon.com> wrote:

Thanks, Mike.

=C2=A0

With these latest changes, I believe that we can mak= e the current draft work for RISC. It will require doing more within the RI= SC Profile than at least I was expecting, and the result will likely be inc= ompatible with most/all other SET profiles, but it will work for us.


Agreed, RISC can move forward.

Also shari= ng the profile compatibility concerns and the fact that we are forcing dupl= ication across profiles. Hopefully we will find ways to work around these i= ssues.


=C2=A0

=

=C2=A0

--=C2=A0

Annabelle Richard Backman

Amazon =E2=80=93 Identity Services=

=C2=A0

From= : Id-event <id-event-bounces@ietf.org> on behalf of Mike Jones <Micha= el.Jones@microsoft.com>
Date: Friday, February 2, 2018 at 5:41 PM
To: SecEvent <id-event@ietf.org>
Subject: [Id-event] Security Event Token (SET) spec simplifying clai= ms usage

=C2=A0

The Security Event Token (SET) specification has been upd= ated to simplify the definitions and usage of the =E2=80=9Ciat=E2=80=9D (issued at) and =E2=80=9Ctoe=E2=80=9D (time of event) claims.=C2=A0 The full = set of changes made was:

  • Simplified the definitions of the =E2=80=9Ciat=E2=80=9D and =E2=80=9Ctoe=E2=80=9D claims in ways suggested by Annabelle = Backman.
  • Added priva= cy considerations text suggested by Annabelle Backman.=
  • Updated the RISC event example, courtesy= of Marius Scurtescu.
  • Reordered the claim definitions to place the required claims first.
  • Changed to using the RFC = 8174 boilerplate instead of the RFC 2119 boilerplate.<= /li>

=C2=A0

Thanks to Annabelle Backman, Marius Scurtescu,= Phil Hunt, and Dick Hardt for the discussions that led to these simplifica= tions.

=C2=A0

The specification is available at:

=C2=A0

An HTML-formatted version is also available at= :

=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -- Mike

=C2=A0

P.S.=C2=A0 This announcement was also posted a= t http://self-issued.info/?p=3D1773 and as @selfissued.<= /span>

=C2=A0


_______________________________________________
Id-event mailing list
Id-event@ietf.org=
https://www.ietf.org/mailman/lis= tinfo/id-event


--001a114e51083dd68705647b1615-- From nobody Mon Feb 5 10:36:31 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30EF012778E for ; Mon, 5 Feb 2018 10:36:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2nvG_Y-G0K8t for ; Mon, 5 Feb 2018 10:36:28 -0800 (PST) Received: from mail-yw0-x22f.google.com (mail-yw0-x22f.google.com [IPv6:2607:f8b0:4002:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 411B4127775 for ; Mon, 5 Feb 2018 10:36:28 -0800 (PST) Received: by mail-yw0-x22f.google.com with SMTP id x62so19076881ywg.11 for ; Mon, 05 Feb 2018 10:36:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=0FDM4IREdNqPcbQs2i/jXyLbbrfwqck848D83xvy1eE=; b=XF2S5q31aSaxl7HNz3QGEZ7vm1BkhUPRiapg0ikKXKuu+E0d/927/NGQdWZDarPmWC 42go8frotETYflq6iSNOeVNdvkPK61voxPdbXkLqFmwTjCzjZ9+BQevQCFKUoEP0S4sh WBmyy0rpakVgXGJADNyho1cQ46qHsXFZI+k6ER7V8zosZiEbPzs8/KJHSJX3cQoEsOqb EKeYa/3+03Ibr3Ea8hqqQQvIk+pz3mhJmXcnBQcR30ODRfvhCoBhh+yh0vFhuJuzJqkl 9jfbo+Qvdjh4z12j1KlgGfSzSKEUol2FT+URuHDr3CmhXDXyglAQAsI58y5bNEj0ds4u sZqQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=0FDM4IREdNqPcbQs2i/jXyLbbrfwqck848D83xvy1eE=; b=SCz63XQcG2GCc1gcQoh5DO8mm4cwvMhULPCjMnO5DpVQuGecz6/OpLPvxQsqNncy02 mU1j8r/fvaHjyPbrHivxTSUJrfvGuitZaiwzw7i+Wu2VQD7eNz4g7broo88pUyBpxj2u BQylc0nVwXOc8jyQggRWC25HC162GWfa2X7LDBuLxsH7CEAyTtMHuBFepjXF6WiHqKGp x6bWFZmBbUgs1hCLbtPjrLSaqooYtJZz6ybPEuFwJPhz4jAhUQmJSHNi2YqKewA6Fx7L Q3F86yA5f+vzov1O524J/lOl/sxQj3PS366JncHyu1qTr50D9OI6K9rwOr7fILHqzXpF QQ3g== X-Gm-Message-State: APf1xPCSc62UIJ7r+QHdrpr7VsNHW6lLxulFTirhVrfAx2Xk2uLsM/HN Sx9ELaZBZ2YfUOJNAUhDd89wmZKp/B58eceATXKg5Aid X-Google-Smtp-Source: AH8x224omWZGaXuW3UqCZbzOXewKBdeKUsoTN2j/NW+RyEPIoACJc/6kx8bramPNH/bnJTFaSG9U+qNEAIHWk6EwF/4= X-Received: by 10.13.210.6 with SMTP id u6mr1006189ywd.208.1517855786874; Mon, 05 Feb 2018 10:36:26 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Luke Camery Date: Mon, 05 Feb 2018 18:36:16 +0000 Message-ID: To: Marius Scurtescu Cc: Annabelle Richard , Mike Jones , id-event@ietf.org Content-Type: multipart/alternative; boundary="001a114e4038fff5fd05647b5633" Archived-At: Subject: Re: [Id-event] Security Event Token (SET) spec simplifying claims usage X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 18:36:30 -0000 --001a114e4038fff5fd05647b5633 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I'm really happy to see a solid spec as the result of many discussions. LGTM on this draft. On Mon, Feb 5, 2018 at 10:18 AM Marius Scurtescu wrote: > On Mon, Feb 5, 2018 at 9:27 AM, Richard Backman, Annabelle < > richanna@amazon.com> wrote: > >> Thanks, Mike. >> >> >> >> With these latest changes, I believe that we can make the current draft >> work for RISC. It will require doing more within the RISC Profile than a= t >> least I was expecting, and the result will likely be incompatible with >> most/all other SET profiles, but it will work for us. >> > > Agreed, RISC can move forward. > > Also sharing the profile compatibility concerns and the fact that we are > forcing duplication across profiles. Hopefully we will find ways to work > around these issues. > > > > >> >> >> -- >> >> Annabelle Richard Backman >> >> Amazon =E2=80=93 Identity Services >> >> >> >> *From: *Id-event on behalf of Mike Jones < >> Michael.Jones@microsoft.com> >> *Date: *Friday, February 2, 2018 at 5:41 PM >> *To: *SecEvent >> *Subject: *[Id-event] Security Event Token (SET) spec simplifying claims >> usage >> >> >> >> The Security Event Token (SET) specification has been updated to simplif= y >> the definitions and usage of the =E2=80=9Ciat=E2=80=9D (issued at) and = =E2=80=9Ctoe=E2=80=9D (time of >> event) claims. The full set of changes made was: >> >> - Simplified the definitions of the =E2=80=9Ciat=E2=80=9D and =E2=80= =9Ctoe=E2=80=9D claims in ways >> suggested by Annabelle Backman. >> - Added privacy considerations text suggested by Annabelle Backman. >> - Updated the RISC event example, courtesy of Marius Scurtescu. >> - Reordered the claim definitions to place the required claims first. >> - Changed to using the RFC 8174 boilerplate instead of the RFC 2119 >> boilerplate. >> >> >> >> Thanks to Annabelle Backman, Marius Scurtescu, Phil Hunt, and Dick Hardt >> for the discussions that led to these simplifications. >> >> >> >> The specification is available at: >> >> - https://tools.ietf.org/html/draft-ietf-secevent-token-05 >> >> >> >> An HTML-formatted version is also available at: >> >> - http://self-issued.info/docs/draft-ietf-secevent-token-05.html >> >> >> >> -- Mike >> >> >> >> P.S. This announcement was also posted at >> http://self-issued.info/?p=3D1773 and as @selfissued >> . >> >> >> >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> >> > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --=20 * =E2=80=A2 **Luke Camery* * =E2=80=A2 *Associate Product Manager * =E2=80=A2 *Federated Identity --001a114e4038fff5fd05647b5633 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I'm really happy to see a solid spec as the result of = many discussions. LGTM on this draft.=C2=A0


On Mon, Feb 5, 2018 at 10:18 AM Marius Scurtescu = <mscurtescu@google.com> = wrote:
On Mon, Feb 5, 2018 at 9:27 AM,= Richard Backman, Annabelle <rich= anna@amazon.com> wrote:

Thanks, Mike.

=C2=A0

With these latest changes, I believe that we can mak= e the current draft work for RISC. It will require doing more within the RI= SC Profile than at least I was expecting, and the result will likely be inc= ompatible with most/all other SET profiles, but it will work for us.


Agreed, RISC can move forward.

Also shari= ng the profile compatibility concerns and the fact that we are forcing dupl= ication across profiles. Hopefully we will find ways to work around these i= ssues.


=C2=A0

=C2=A0

--=C2=A0

Annabelle Richard Backman

Amazon =E2=80=93 Identity Services=

=C2=A0

From= : Id-event <id-event-bounces@ietf.org> on behalf of Mike = Jones <Michael.Jones@microsoft.com><= br> Date: Friday, February 2, 2018 at 5:41 PM
To: SecEvent <id-event@ietf.org>
Subject: [Id-event] Security Event Token (SET) spec simplifying clai= ms usage

=C2=A0

The Security= Event Token (SET) specification has been updated to simplify the definitio= ns and usage of the =E2=80=9Ciat=E2=80=9D (issued at) and =E2=80=9Ctoe=E2=80=9D (time of event) claims.=C2=A0 The full = set of changes made was:

  • Simplified the definitions of the =E2=80=9Ciat=E2=80=9D and =E2=80=9Ctoe=E2=80=9D claims in ways suggested by Annabelle = Backman.
  • Added priva= cy considerations text suggested by Annabelle Backman.=
  • Updated the RISC event example, courtesy= of Marius Scurtescu.
  • Reordered the claim definitions to place the required claims first.
  • Changed to using the RFC = 8174 boilerplate instead of the RFC 2119 boilerplate.<= /li>

=C2=A0

Thanks to Annabelle Backman, Marius Scurtescu,= Phil Hunt, and Dick Hardt for the discussions that led to these simplifica= tions.

=C2=A0

The specification is available at:

=C2=A0

An HTML-formatted version is also available at= :

=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -- Mike

=C2=A0

P.S.=C2=A0 This announcement was also posted a= t http://self-issued.info/?p=3D1773<= /span> and as @selfissued.

=C2=A0


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.iet= f.org/mailman/listinfo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


--
=C2=A0 =E2=80=A2 =C2=A0Lu= ke Camery
=C2=A0 =E2=80=A2 =C2=A0Associate Product = Manager
=C2=A0 =E2=80=A2 =C2=A0Federated Identity
--001a114e4038fff5fd05647b5633-- From nobody Mon Feb 5 11:24:11 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5FF912D949 for ; Mon, 5 Feb 2018 11:24:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h-TKw9Fd0sj2 for ; Mon, 5 Feb 2018 11:24:07 -0800 (PST) Received: from mail-wr0-x22c.google.com (mail-wr0-x22c.google.com [IPv6:2a00:1450:400c:c0c::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 082271275C5 for ; Mon, 5 Feb 2018 11:24:07 -0800 (PST) Received: by mail-wr0-x22c.google.com with SMTP id s5so30842556wra.0 for ; Mon, 05 Feb 2018 11:24:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:subject:to:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=fdNZB3NsqGebSrgL+LWlPTWH8YDl3y9FypcM/JxftYg=; b=lpVBIEdYeDvJeHruYw/IQXqzg/ncMbk+n4jy/JlO1+YN40DgISVJdnvIFKnjZLoRQY rq2u/If7gYkLKYO4zWvtq+JEPRnOS0MNeynXIpKz38Hr5Yqf3z/vytEwz3LQ7F0NQ5+X CQIkz9QM1m4WTwnrlYldlTCHWRHzZkjThre2wxCxjFfgUg80WYn/UuAXMOZrss2tuxWp ZFGi40IBBN3xzX0Qlf0TWC5ZD1SIdIiufT1EA5hVz8+a7TTeU+MWn2kkBKETCF71shYJ CKrDPEWQYqWfGppjfKEeXOmZmTynRh0YQwYGH7CmY8Q2QHj9TioAil7lfP24RD0JG1QP rcBw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:subject:to:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=fdNZB3NsqGebSrgL+LWlPTWH8YDl3y9FypcM/JxftYg=; b=EKxhQuC+MOUsX0K1aVWatNB1Z8q3jwtM/+d7gmw6Qq4iTErIh8csjiNQtP8Bp2uq79 /riCPLRYxqR26XXGzt9X80tkFl3D8SYzUIOwE6Hjx8rkpzQ0cB/MYp+95sZhk5bhlq1E Eu/14DuxBluDA2nJrMCd8+r6/lLYUQt9g0k5KHZHp+9ruWxyUdyCtK1fyTxm/dMqne2L lWouQEX1WQw49c7buFDvQCQSFzK3DPnEV83PsaCfqe1u/++rekfj1z0EtiX9jJwHlIYo NkizJOdEiarXiw2FaYhnbVmieYhnEgt+37wsHlmwC1RnfKRIcK72SuhS292N3iDKZSke RzUQ== X-Gm-Message-State: AKwxyteQcHcgxSdCeSGYnV10+FsrKbA7116ZA6uteJzDhFPuJ4gF4q0O miToSE4NY/vxAnCEOc+8CzqGpsbV X-Google-Smtp-Source: AH8x225NaUz/JqX21I+Hhxt5ZrUXQsvmOFQi6YMRbWYBBIxeb8IsqziguULHfvs+TPi9E+pIfkMq/A== X-Received: by 10.223.162.210 with SMTP id t18mr14714348wra.259.1517858645380; Mon, 05 Feb 2018 11:24:05 -0800 (PST) Received: from [10.0.0.147] (bzq-79-177-49-244.red.bezeqint.net. [79.177.49.244]) by smtp.gmail.com with ESMTPSA id p4sm10449733wrb.59.2018.02.05.11.24.04 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 05 Feb 2018 11:24:04 -0800 (PST) From: Yaron Sheffer To: SecEvent Message-ID: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> Date: Mon, 5 Feb 2018 21:24:01 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 19:24:09 -0000 First, we would like to thank the authors and the working group members who have been working since Singapore to clarify and resolve several controversial topics. With this work behind us, we can now move forward to publication. This is to announce working group last call on this draft (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/). Please send your comments to the list. Even if you are perfectly happy with the draft, please let us know that you support its publication as-is by posting to the list. Please send your comment within the next two weeks, until Feb. 19. Thanks,     Dick and Yaron From nobody Mon Feb 5 11:57:08 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2A35128961 for ; Mon, 5 Feb 2018 11:57:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iVosLF3JvmSN for ; Mon, 5 Feb 2018 11:57:04 -0800 (PST) Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0112.outbound.protection.outlook.com [104.47.42.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7334F127909 for ; Mon, 5 Feb 2018 11:57:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=B0S6+nwWnu3b+rFpbUbVcP4t59zJRytbI38C2QDpXBs=; b=MXbpLWZIOHMigChV56z7J2U/Xlveuxb7U3gfFwP2r7RGIG4EraSk880AORo3RfRC6Uhxzu/WLKqQT5aRy3zEvM8Iq9ybM+RpJIlbCvdNI/fEaKdx5cki8YS726GB+yA7E9ZhDxDJD0ZCOXz88+xO1a3eFRlSfCVzkM/e8kkZ6tg= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1023.namprd21.prod.outlook.com (52.132.117.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.506.4; Mon, 5 Feb 2018 19:57:03 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a%6]) with mapi id 15.20.0506.007; Mon, 5 Feb 2018 19:57:02 +0000 From: Mike Jones To: Yaron Sheffer , SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-05 Thread-Index: AQHTnrboZGlv7WjXXUqAp/XotWZJi6OWOXow Date: Mon, 5 Feb 2018 19:57:02 +0000 Message-ID: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> In-Reply-To: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-05T19:56:57.3307105Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:b::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1023; 7:GFhwg1mRMclWeml4w/Ikb4ZRY3Q+jGiBiOxyG+mp4YSkutDZff+aKjvQGrxfStULqK8wHSC2xj5narbsD8JeM2Oc7vuKIeTkmaOF844yfwFEscjK1LwSMmezRBajIqfOyttBtkm3fLfociabc85+elNeu35tH4SMkPVUwRg/3x4fFI9WxU5ld8S5C7BKnfodMjdOMn2Tk+Y6+9Hhm2DUrGXH7ENmTWgil1luEiG+jMkSAMgUioGIj11wJXbMPZux x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: a85d1531-76be-4bee-5d11-08d56cd2a036 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1023; x-ms-traffictypediagnostic: SN6PR2101MB1023: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(3231101)(2400082)(944501161)(10201501046)(6055026)(61426038)(61427038)(6041288)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(6072148)(201708071742011); SRVR:SN6PR2101MB1023; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1023; x-forefront-prvs: 0574D4712B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(39380400002)(346002)(376002)(366004)(396003)(189003)(199004)(13464003)(8990500004)(99286004)(6246003)(5250100002)(2900100001)(6346003)(97736004)(105586002)(55016002)(9686003)(7696005)(39060400002)(6436002)(3280700002)(3660700001)(6306002)(86612001)(478600001)(86362001)(14454004)(10290500003)(966005)(53936002)(2950100002)(305945005)(7736002)(229853002)(25786009)(2906002)(5660300001)(72206003)(68736007)(76176011)(74316002)(106356001)(102836004)(6116002)(22452003)(186003)(8676002)(6506007)(53546011)(33656002)(81166006)(81156014)(316002)(10090500001)(8936002)(110136005); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1023; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: Fj83q8Wq2uLf4zNak2rZuAMF8BfkEsT+hbb2LUujPNcopxEIK19rgZQG0SZVDdhvS+jw3bogiC2JVA2si4Ak+w== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: a85d1531-76be-4bee-5d11-08d56cd2a036 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Feb 2018 19:57:02.8101 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1023 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 19:57:07 -0000 UmVhZHkgZm9yIHB1YmxpY2F0aW9uDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9t OiBJZC1ldmVudCBbbWFpbHRvOmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBP ZiBZYXJvbiBTaGVmZmVyDQpTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDUsIDIwMTggMTE6MjQgQU0N ClRvOiBTZWNFdmVudCA8aWQtZXZlbnRAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbSWQtZXZlbnRdIFdH IExhc3QgQ2FsbCBmb3IgZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wNQ0KDQpGaXJzdCwgd2Ug d291bGQgbGlrZSB0byB0aGFuayB0aGUgYXV0aG9ycyBhbmQgdGhlIHdvcmtpbmcgZ3JvdXAgbWVt YmVycyB3aG8gaGF2ZSBiZWVuIHdvcmtpbmcgc2luY2UgU2luZ2Fwb3JlIHRvIGNsYXJpZnkgYW5k IHJlc29sdmUgc2V2ZXJhbCBjb250cm92ZXJzaWFsIHRvcGljcy4gV2l0aCB0aGlzIHdvcmsgYmVo aW5kIHVzLCB3ZSBjYW4gbm93IG1vdmUgZm9yd2FyZCB0byBwdWJsaWNhdGlvbi4NCg0KVGhpcyBp cyB0byBhbm5vdW5jZSB3b3JraW5nIGdyb3VwIGxhc3QgY2FsbCBvbiB0aGlzIGRyYWZ0IChodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLyku DQoNClBsZWFzZSBzZW5kIHlvdXIgY29tbWVudHMgdG8gdGhlIGxpc3QuIEV2ZW4gaWYgeW91IGFy ZSBwZXJmZWN0bHkgaGFwcHkgd2l0aCB0aGUgZHJhZnQsIHBsZWFzZSBsZXQgdXMga25vdyB0aGF0 IHlvdSBzdXBwb3J0IGl0cyBwdWJsaWNhdGlvbiBhcy1pcyBieSBwb3N0aW5nIHRvIHRoZSBsaXN0 Lg0KDQpQbGVhc2Ugc2VuZCB5b3VyIGNvbW1lbnQgd2l0aGluIHRoZSBuZXh0IHR3byB3ZWVrcywg dW50aWwgRmViLiAxOS4NCg0KVGhhbmtzLA0KIMKgwqDCoCBEaWNrIGFuZCBZYXJvbg0KDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSWQtZXZlbnQgbWFp bGluZyBsaXN0DQpJZC1ldmVudEBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9pZC1ldmVudA0K From nobody Mon Feb 5 12:33:07 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74431127978 for ; Mon, 5 Feb 2018 12:33:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.031 X-Spam-Level: X-Spam-Status: No, score=-2.031 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oracle.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TgFS0Q-AgnnQ for ; Mon, 5 Feb 2018 12:33:03 -0800 (PST) Received: from aserp2130.oracle.com (aserp2130.oracle.com [141.146.126.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04645128D2E for ; Mon, 5 Feb 2018 12:33:02 -0800 (PST) Received: from pps.filterd (aserp2130.oracle.com [127.0.0.1]) by aserp2130.oracle.com (8.16.0.22/8.16.0.22) with SMTP id w15KWVl9147471; Mon, 5 Feb 2018 20:33:01 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=content-type : mime-version : subject : from : in-reply-to : date : cc : content-transfer-encoding : message-id : references : to; s=corp-2017-10-26; bh=zaDhT2MDXndZcbTsbg5K4pwv+iOZmXKFIvOxIw3uaV4=; b=FhKry2Y519N2VKU2aAvu8yzqeVBE4NuoC5LvlNmG++BUD4kK79qtIbbdbru9668v75we FMkBr3cb7vWFmGV7WifMt7ucQ6UADuWpDTo6GjnMDUD4+W5Cf0hpMSVQJ+8PZr4H159p y/3St4MSlAjsBEltwtujG2Q12LfTbb0xkWz0QpPoF7WDAe3pV1dVSPgt08ecAw0JYWzQ mjJeHu8OQX+2l0lNJBSlkvmL00GqiEJNV8XsM852BQpSJYBDe3dnQa6abDsTEz73MXli nMr+jGEJJf1txqjM4U/HaT+90k/KMjSGjjo80aGUu06UKt8v0447jCnxZ6bX+KlrDHfV 4g== Received: from aserv0021.oracle.com (aserv0021.oracle.com [141.146.126.233]) by aserp2130.oracle.com with ESMTP id 2fxwsm88wh-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 05 Feb 2018 20:33:01 +0000 Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by aserv0021.oracle.com (8.14.4/8.14.4) with ESMTP id w15KX0k7017748 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Mon, 5 Feb 2018 20:33:00 GMT Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by aserv0121.oracle.com (8.14.4/8.13.8) with ESMTP id w15KX0l8012498; Mon, 5 Feb 2018 20:33:00 GMT Received: from [192.168.1.45] (/70.70.142.148) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 05 Feb 2018 12:33:00 -0800 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (15D60) In-Reply-To: Date: Mon, 5 Feb 2018 12:32:58 -0800 Cc: Yaron Sheffer , SecEvent Content-Transfer-Encoding: quoted-printable Message-Id: <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> To: Mike Jones X-Proofpoint-Virus-Version: vendor=nai engine=5900 definitions=8796 signatures=668662 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1802050253 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 20:33:05 -0000 +1. Lets get this published.=20 Phil > On Feb 5, 2018, at 11:57 AM, Mike Jones wrot= e: >=20 > Ready for publication >=20 > -----Original Message----- > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron Sheff= er > Sent: Monday, February 5, 2018 11:24 AM > To: SecEvent > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 >=20 > First, we would like to thank the authors and the working group members wh= o have been working since Singapore to clarify and resolve several controver= sial topics. With this work behind us, we can now move forward to publicatio= n. >=20 > This is to announce working group last call on this draft (https://urldefe= nse.proofpoint.com/v2/url?u=3Dhttps-3A__datatracker.ietf.org_doc_draft-2Diet= f-2Dsecevent-2Dtoken_&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI= _JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-= QhajSSLuCHhPdHSjTC59M_YY&s=3DroIu0H8c1Pidp5yVt_nuHmPN3_dtFUuupi2qEPm4tis&e=3D= ). >=20 > Please send your comments to the list. Even if you are perfectly happy wit= h the draft, please let us know that you support its publication as-is by po= sting to the list. >=20 > Please send your comment within the next two weeks, until Feb. 19. >=20 > Thanks, > Dick and Yaron >=20 > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI= _JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-= QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&e=3D= > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI= _JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-= QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&e=3D= From nobody Mon Feb 5 12:38:35 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1C1412D94A for ; Mon, 5 Feb 2018 12:38:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OiBYjlgVjzoo for ; Mon, 5 Feb 2018 12:38:31 -0800 (PST) Received: from smtp-fw-4101.amazon.com (smtp-fw-4101.amazon.com [72.21.198.25]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6944712D879 for ; Mon, 5 Feb 2018 12:38:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1517863111; x=1549399111; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=0f+GCbxhxXtqAXrR+WzJw3aPr2oFM0IBdUTx3Vq7u7M=; b=bMijztk8vb74RNtQ//sbBme8rpvt1UJUszWYbk86grAEng8p52QU9j09 hTxhHSE6ugBpIuzhOn6Eh/HHF9Y203pZRN1fFPRzskQREcE0QsUi4lG8i JLQ0Thki8btSmu4Kw3xBwX7sKEPEfm7wR24g8coAJxVnWptXGEID5/nUC o=; X-IronPort-AV: E=Sophos;i="5.46,466,1511827200"; d="scan'208";a="706912529" Received: from iad6-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-1d-474bcd9f.us-east-1.amazon.com) ([10.124.125.6]) by smtp-border-fw-out-4101.iad4.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 05 Feb 2018 20:38:30 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1d-474bcd9f.us-east-1.amazon.com (8.14.7/8.14.7) with ESMTP id w15KcNsH081899 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 5 Feb 2018 20:38:28 GMT Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1236.3; Mon, 5 Feb 2018 20:38:28 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC004.ant.amazon.com (10.43.162.101) with Microsoft SMTP Server (TLS) id 15.0.1236.3; Mon, 5 Feb 2018 20:38:27 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1236.000; Mon, 5 Feb 2018 20:38:27 +0000 From: "Richard Backman, Annabelle" To: Phil Hunt , Mike Jones CC: Yaron Sheffer , SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-05 Thread-Index: AQHTnrb81EmjHBEfXEiVI/zbHTG7jKOWOYwAgAAKCgD//3tsgA== Date: Mon, 5 Feb 2018 20:38:27 +0000 Message-ID: <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> In-Reply-To: <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.9.0.180116 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.161.160] Content-Type: text/plain; charset="utf-8" Content-ID: <27F628AF19305D478C7C7FEE0B52CFCE@amazon.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 20:38:34 -0000 SSdkIGxpa2UgdG8gc2VlIGl0ZW0gMSBiZWxvdyBhZGRyZXNzZWQgYmVmb3JlIHB1Ymxpc2hpbmcs IGFzIGl0IGFsdGVycyAoY29ycmVjdHMpIHRoZSBtZWFuaW5nIG9mIHRoZSB0ZXh0Lg0KDQpPbmUg ZXJyb3I6DQoxLiAgSW4gdGhlICJpYXQiIGRlZmluaXRpb24gaW4gc2VjdGlvbiAyLjI6IGNoYW5n ZSAiLi4ud2hlbiB0aGUgZXZlbnQgd2FzIGlzc3VlZC4iIHRvICIuLi53aGVuIHRoZSBTRVQgd2Fz IGlzc3VlZC4iDQoNCk9uZSBjbGFyaWZpY2F0aW9uOg0KMi4gIFRoZSAybmQgdG8gbGFzdCBwYXJh Z3JhcGggb2Ygc2VjdGlvbiAyLjQgc3RhdGVzICJ0aGUgRXZlbnQgUmVjaXBpZW50IE1VU1QiIGVu c3VyZSBpbnRlZ3JpdHksIGNvbmZpZGVudGlhbGl0eSwgZXRjLiBJc24ndCB0aGlzIHByb3Blcmx5 IHRoZSBpc3N1ZXIncyByZXNwb25zaWJpbGl0eT8gT3IgYm90aD8NCg0KQSBoYW5kZnVsIG9mIG5p dHM6DQozLiAgVGhlICJhdWQiIGRlZmluaXRpb24gaW4gc2VjdGlvbiAyLjIgaXMgYXdrd2FyZGx5 IHdyaXR0ZW47IEkgc3VnZ2VzdCByZXBocmFzaW5nIGl0IHRvIG1pcnJvciB0aGUgImlhdCIgZGVm aW5pdGlvbi4NCjQuICBNaXNzaW5nICJ0aGUiIGluIHRoZSAiZXhwIiBkZWZpbml0aW9uIGluIHNl Y3Rpb24gMi4yOiAidGhpcyBjbGFpbSBpcyB0aW1lIiAtPiAidGhpcyBjbGFpbSBpcyB0aGUgdGlt ZSINCjUuICBTeW50YXggZXJyb3IgaW4gdGhlIDNyZCBsaXN0IGl0ZW0gb2Ygc2VjdGlvbiAyOiAi Li4uaXMgYSBVUkkgc3RyaW5nIHZhbHVlIGlzIGFuIGV2ZW50IGlkZW50aWZpZXIuLi4iDQo2LiAg SW5jb25zaXN0ZW50IHVzZSBvZiB0ZXJtcyBmb3IgaXNzdWVyLCByZWNpcGllbnQsIHN1YmplY3Qu IEF0IHRoZSB2ZXJ5IGxlYXN0IHdlIHNob3VsZCBoYXZlIGNvbnNpc3RlbnQgY2FwaXRhbGl6YXRp b246DQogIGEuICBJc3N1ZXIsIGlzc3VlciwgRXZlbnQgSXNzdWVyLCBTRVQgSXNzdWVyDQogIGIu ICBSZWNpcGllbnQsIHJlY2lwaWVudCwgRXZlbnQgUmVjaXBpZW50DQogIGMuICBTdWJqZWN0LCBz dWJqZWN0LCBTZWN1cml0eSBTdWJqZWN0LCBzZWN1cml0eSBzdWJqZWN0LCBldmVudCBTdWJqZWN0 LCBldmVudCBzdWJqZWN0DQoNCk9LLCBJJ20gcHV0dGluZyBhd2F5IHRoZSByZWQgcGVuIG5vdy4g OikNCg0KLS0gDQpBbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFuDQpBbWF6b24g4oCTIElkZW50aXR5 IFNlcnZpY2VzDQogDQrvu79PbiAyLzUvMTgsIDEyOjMzIFBNLCAiSWQtZXZlbnQgb24gYmVoYWxm IG9mIFBoaWwgSHVudCIgPGlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIHBo aWwuaHVudEBvcmFjbGUuY29tPiB3cm90ZToNCg0KICAgICsxLiBMZXRzIGdldCB0aGlzIHB1Ymxp c2hlZC4gDQogICAgDQogICAgUGhpbA0KICAgIA0KICAgID4gT24gRmViIDUsIDIwMTgsIGF0IDEx OjU3IEFNLCBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+IHdyb3RlOg0K ICAgID4gDQogICAgPiBSZWFkeSBmb3IgcHVibGljYXRpb24NCiAgICA+IA0KICAgID4gLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCiAgICA+IEZyb206IElkLWV2ZW50IFttYWlsdG86aWQtZXZl bnQtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIFlhcm9uIFNoZWZmZXINCiAgICA+IFNl bnQ6IE1vbmRheSwgRmVicnVhcnkgNSwgMjAxOCAxMToyNCBBTQ0KICAgID4gVG86IFNlY0V2ZW50 IDxpZC1ldmVudEBpZXRmLm9yZz4NCiAgICA+IFN1YmplY3Q6IFtJZC1ldmVudF0gV0cgTGFzdCBD YWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTA1DQogICAgPiANCiAgICA+IEZpcnN0 LCB3ZSB3b3VsZCBsaWtlIHRvIHRoYW5rIHRoZSBhdXRob3JzIGFuZCB0aGUgd29ya2luZyBncm91 cCBtZW1iZXJzIHdobyBoYXZlIGJlZW4gd29ya2luZyBzaW5jZSBTaW5nYXBvcmUgdG8gY2xhcmlm eSBhbmQgcmVzb2x2ZSBzZXZlcmFsIGNvbnRyb3ZlcnNpYWwgdG9waWNzLiBXaXRoIHRoaXMgd29y ayBiZWhpbmQgdXMsIHdlIGNhbiBub3cgbW92ZSBmb3J3YXJkIHRvIHB1YmxpY2F0aW9uLg0KICAg ID4gDQogICAgPiBUaGlzIGlzIHRvIGFubm91bmNlIHdvcmtpbmcgZ3JvdXAgbGFzdCBjYWxsIG9u IHRoaXMgZHJhZnQgKGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1o dHRwcy0zQV9fZGF0YXRyYWNrZXIuaWV0Zi5vcmdfZG9jX2RyYWZ0LTJEaWV0Zi0yRHNlY2V2ZW50 LTJEdG9rZW5fJmQ9RHdJR2FRJmM9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVl YXBJX0puRSZyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmbT1u TzhDS1FLcjJrZ2NCOEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJnM9cm9JdTBIOGMxUGlk cDV5VnRfbnVIbVBOM19kdEZVdXVwaTJxRVBtNHRpcyZlPSkuDQogICAgPiANCiAgICA+IFBsZWFz ZSBzZW5kIHlvdXIgY29tbWVudHMgdG8gdGhlIGxpc3QuIEV2ZW4gaWYgeW91IGFyZSBwZXJmZWN0 bHkgaGFwcHkgd2l0aCB0aGUgZHJhZnQsIHBsZWFzZSBsZXQgdXMga25vdyB0aGF0IHlvdSBzdXBw b3J0IGl0cyBwdWJsaWNhdGlvbiBhcy1pcyBieSBwb3N0aW5nIHRvIHRoZSBsaXN0Lg0KICAgID4g DQogICAgPiBQbGVhc2Ugc2VuZCB5b3VyIGNvbW1lbnQgd2l0aGluIHRoZSBuZXh0IHR3byB3ZWVr cywgdW50aWwgRmViLiAxOS4NCiAgICA+IA0KICAgID4gVGhhbmtzLA0KICAgID4gICAgIERpY2sg YW5kIFlhcm9uDQogICAgPiANCiAgICA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQogICAgPiBJZC1ldmVudCBtYWlsaW5nIGxpc3QNCiAgICA+IElkLWV2 ZW50QGlldGYub3JnDQogICAgPiBodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIv dXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQm ZD1Ed0lHYVEmYz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJnI9 bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZtPW5POENLUUtyMmtn Y0I4Qzh6Ri1RaGFqU1NMdUNIaFBkSFNqVEM1OU1fWVkmcz1yWEhRaTh2UnpFb01QZmF4VHRudDBF c0cxblpDRkRZQW1RSGM0NVRuRGFZJmU9DQogICAgPiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KICAgID4gSWQtZXZlbnQgbWFpbGluZyBsaXN0DQogICAg PiBJZC1ldmVudEBpZXRmLm9yZw0KICAgID4gaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQu Y29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19pZC0y RGV2ZW50JmQ9RHdJR2FRJmM9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJ X0puRSZyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmbT1uTzhD S1FLcjJrZ2NCOEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJnM9clhIUWk4dlJ6RW9NUGZh eFR0bnQwRXNHMW5aQ0ZEWUFtUUhjNDVUbkRhWSZlPQ0KICAgIA0KICAgIF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgSWQtZXZlbnQgbWFpbGluZyBs aXN0DQogICAgSWQtZXZlbnRAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2lkLWV2ZW50DQogICAgDQoNCg== From nobody Mon Feb 5 12:51:04 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29FD412D879 for ; Mon, 5 Feb 2018 12:51:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ANsNOn5X6In for ; Mon, 5 Feb 2018 12:51:00 -0800 (PST) Received: from mail-ua0-x244.google.com (mail-ua0-x244.google.com [IPv6:2607:f8b0:400c:c08::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5D34128954 for ; Mon, 5 Feb 2018 12:50:59 -0800 (PST) Received: by mail-ua0-x244.google.com with SMTP id j23so19569383uak.13 for ; Mon, 05 Feb 2018 12:50:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=a+KcAQMdtxR4OEJcYNs03IvTrKuP9K8zmIm+lJcVRlQ=; b=cdeqcovXNWS6K0dobzVQH37OJZkFkMTZb9jwc4OXsA59kpJG38m0ynRVLR9UJIx5XA 2aSw7m8pKscXt+f9tfXdK7NzcYNYei0uLu07esG5dZr6abf8iJMG1aqTqmV4Z26wFkEc 8QLEtOfBsSGymYZq82sqlD+COtdWyG9s3EmU60j4X2i7SgTVxHxx3pschbo1QnzHU1qD xXgqgTfW5TlIBPKOfkYrE1FxEJqjjHGicyTpo2Xq78G5veP2nuV0dTY9mQfI1jGU/S7M PpLz+ReVIJVowj+nJzgNkSEkaqAOg9mRCq0mbZoowlfFL8SeL94azuUhdqyZhkOFmkV4 IfNg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=a+KcAQMdtxR4OEJcYNs03IvTrKuP9K8zmIm+lJcVRlQ=; b=k1nq6u0b8IdPcpgcftyNXTsDHl9kda/ySAfGNTrEBinC4mAbNS4SoS+dMg0d9gvqNt 1ymNpkiIhrwLxoiX793s7sTbMEvn3TkBsrZpMMIGgw3UkFjaFWqI9/md7UwbsRqb8rZD K19rx/DWd2/QnBNWMjSNGbQW7ESzC4cil+YNkZrM4/16tvzzrJ3tGtHV335Wg0GtusVP 2/FAiwwqXv6F9qz8Hq7WNVfKTfwHyXyDYdbh3a2+wc+sZUB8CEI5RmMtBcytH1zTrFrU +izlwe8/Odu5owTRaWxHm7sWBdtwO6G7DsxCl6ICODv8CLelIGvmfBUV93RNuOglE04n DWdw== X-Gm-Message-State: APf1xPCA+EIOrH2aavYEcCSLfIfPvQMBf2VopcM0/e43jaGKVgHfOuel 4TXPrqrvtdiNm6Fn4bDFeanFYDHfb+LyXFYi1i02PQ== X-Google-Smtp-Source: AH8x2278JsYyGh3fmoE6BiVnSp4Vejip9a7AWG6gU+XMxQ6Dx0hZfpRjwTkFLfhrozZlckH170lw2OphCDWJNm2feCU= X-Received: by 10.176.78.203 with SMTP id x11mr121520uah.194.1517863858170; Mon, 05 Feb 2018 12:50:58 -0800 (PST) MIME-Version: 1.0 Received: by 10.31.155.66 with HTTP; Mon, 5 Feb 2018 12:50:37 -0800 (PST) In-Reply-To: <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> From: Marius Scurtescu Date: Mon, 5 Feb 2018 12:50:37 -0800 Message-ID: To: "Richard Backman, Annabelle" Cc: Phil Hunt , Mike Jones , Yaron Sheffer , SecEvent Content-Type: multipart/alternative; boundary="089e08e4f99315f4fe05647d38ef" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 20:51:03 -0000 --089e08e4f99315f4fe05647d38ef Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Yes, let's make final fixes and move forward. A couple of minor nits: - in the "events" definition, I don't think "Multiple event identifiers with the same value MUST NOT be used." is needed, since that is not possible anyhow (assuming I read the statement correctly) - do we need a formal definition for "event identifier"? Marius On Mon, Feb 5, 2018 at 12:38 PM, Richard Backman, Annabelle < richanna@amazon.com> wrote: > I'd like to see item 1 below addressed before publishing, as it alters > (corrects) the meaning of the text. > > One error: > 1. In the "iat" definition in section 2.2: change "...when the event was > issued." to "...when the SET was issued." > > One clarification: > 2. The 2nd to last paragraph of section 2.4 states "the Event Recipient > MUST" ensure integrity, confidentiality, etc. Isn't this properly the > issuer's responsibility? Or both? > > A handful of nits: > 3. The "aud" definition in section 2.2 is awkwardly written; I suggest > rephrasing it to mirror the "iat" definition. > 4. Missing "the" in the "exp" definition in section 2.2: "this claim is > time" -> "this claim is the time" > 5. Syntax error in the 3rd list item of section 2: "...is a URI string > value is an event identifier..." > 6. Inconsistent use of terms for issuer, recipient, subject. At the very > least we should have consistent capitalization: > a. Issuer, issuer, Event Issuer, SET Issuer > b. Recipient, recipient, Event Recipient > c. Subject, subject, Security Subject, security subject, event Subject= , > event subject > > OK, I'm putting away the red pen now. :) > > -- > Annabelle Richard Backman > Amazon =E2=80=93 Identity Services > > =EF=BB=BFOn 2/5/18, 12:33 PM, "Id-event on behalf of Phil Hunt" < > id-event-bounces@ietf.org on behalf of phil.hunt@oracle.com> wrote: > > +1. Lets get this published. > > Phil > > > On Feb 5, 2018, at 11:57 AM, Mike Jones > wrote: > > > > Ready for publication > > > > -----Original Message----- > > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of > Yaron Sheffer > > Sent: Monday, February 5, 2018 11:24 AM > > To: SecEvent > > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > > > First, we would like to thank the authors and the working group > members who have been working since Singapore to clarify and resolve > several controversial topics. With this work behind us, we can now move > forward to publication. > > > > This is to announce working group last call on this draft ( > https://urldefense.proofpoint.com/v2/url?u=3Dhttps- > 3A__datatracker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Dtoken_&d=3DDwIGaQ&= c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DroIu0H8c1Pidp5yVt_nuHmPN3_dtFUuupi2qEPm4tis&= e=3D > ). > > > > Please send your comments to the list. Even if you are perfectly > happy with the draft, please let us know that you support its publication > as-is by posting to the list. > > > > Please send your comment within the next two weeks, until Feb. 19. > > > > Thanks, > > Dick and Yaron > > > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www. > ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&= e=3D > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www. > ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&= e=3D > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --089e08e4f99315f4fe05647d38ef Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Yes, let's make final fixes and move forward.

=
A couple of minor nits:
- in the "events" de= finition, I don't think "Multiple event identifiers with the same = value MUST NOT be used." is needed, since that is not possible anyhow = (assuming I read the statement correctly)
- do we need a formal d= efinition for "event identifier"?


Marius

On Mon, Feb 5, 2018 at 12:38 PM, Richard Bac= kman, Annabelle <richanna@amazon.com> wrote:
I'd like to see item 1 below addressed before publ= ishing, as it alters (corrects) the meaning of the text.

One error:
1.=C2=A0 In the "iat" definition in section 2.2: change "...= when the event was issued." to "...when the SET was issued."=

One clarification:
2.=C2=A0 The 2nd to last paragraph of section 2.4 states "the Event Re= cipient MUST" ensure integrity, confidentiality, etc. Isn't this p= roperly the issuer's responsibility? Or both?

A handful of nits:
3.=C2=A0 The "aud" definition in section 2.2 is awkwardly written= ; I suggest rephrasing it to mirror the "iat" definition.
4.=C2=A0 Missing "the" in the "exp" definition in secti= on 2.2: "this claim is time" -> "this claim is the time&q= uot;
5.=C2=A0 Syntax error in the 3rd list item of section 2: "...is a URI = string value is an event identifier..."
6.=C2=A0 Inconsistent use of terms for issuer, recipient, subject. At the v= ery least we should have consistent capitalization:
=C2=A0 a.=C2=A0 Issuer, issuer, Event Issuer, SET Issuer
=C2=A0 b.=C2=A0 Recipient, recipient, Event Recipient
=C2=A0 c.=C2=A0 Subject, subject, Security Subject, security subject, event= Subject, event subject

OK, I'm putting away the red pen now. :)

--
Annabelle Richard Backman
Amazon =E2=80=93 Identity Services

=EF=BB=BFOn 2/5/18, 12:33 PM, "Id-event on behalf of Phil Hunt" &= lt;id-event-bounces@ietf.org on behalf of phil.hunt@oracle.co= m> wrote:

=C2=A0 =C2=A0 +1. Lets get this published.

=C2=A0 =C2=A0 Phil

=C2=A0 =C2=A0 > On Feb 5, 2018, at 11:57 AM, Mike Jones <Michael.Jones@microsoft.com> wrot= e:
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Ready for publication
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > -----Original Message-----
=C2=A0 =C2=A0 > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron Sheffer<= br> =C2=A0 =C2=A0 > Sent: Monday, February 5, 2018 11:24 AM
=C2=A0 =C2=A0 > To: SecEvent <id= -event@ietf.org>
=C2=A0 =C2=A0 > Subject: [Id-event] WG Last Call for draft-ietf-secevent= -token-05
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > First, we would like to thank the authors and the workin= g group members who have been working since Singapore to clarify and resolv= e several controversial topics. With this work behind us, we can now move f= orward to publication.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > This is to announce working group last call on this draf= t (https://urldefense.proofpoint.com/v2/url?u=3Dhtt= ps-3A__datatracker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Dto= ken_&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65ea= pI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m= =3DnO8CKQKr2kgcB8C8zF-QhajSSLuCHhPdHSjTC59M_YY&s=3DroIu0= H8c1Pidp5yVt_nuHmPN3_dtFUuupi2qEPm4tis&e=3D).
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Please send your comments to the list. Even if you are p= erfectly happy with the draft, please let us know that you support its publ= ication as-is by posting to the list.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Please send your comment within the next two weeks, unti= l Feb. 19.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Thanks,
=C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0Dick and Yaron
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > _______________________________________________
=C2=A0 =C2=A0 > Id-event mailing list
=C2=A0 =C2=A0 > Id-event@ietf.org
=C2=A0 =C2=A0 > https://urldefense.proofpoint.com/v2/url?u=3Dhttp= s-3A__www.ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&= ;c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5= FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8= zF-QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCF= DYAmQHc45TnDaY&e=3D
=C2=A0 =C2=A0 > _______________________________________________
=C2=A0 =C2=A0 > Id-event mailing list
=C2=A0 =C2=A0 > Id-event@ietf.org
=C2=A0 =C2=A0 > https://urldefense.proofpoint.com/v2/url?u=3Dhttp= s-3A__www.ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&= ;c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5= FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8= zF-QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCF= DYAmQHc45TnDaY&e=3D

=C2=A0 =C2=A0 _______________________________________________
=C2=A0 =C2=A0 Id-event mailing list
=C2=A0 =C2=A0 Id-event@ietf.org =C2=A0 =C2=A0 https://www.ietf.org/mailman/listin= fo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event

--089e08e4f99315f4fe05647d38ef-- From nobody Mon Feb 5 13:29:19 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 619B112D969 for ; Mon, 5 Feb 2018 13:29:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.45 X-Spam-Level: X-Spam-Status: No, score=-2.45 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PPlS1D15PY_a for ; Mon, 5 Feb 2018 13:29:14 -0800 (PST) Received: from mail-yw0-x235.google.com (mail-yw0-x235.google.com [IPv6:2607:f8b0:4002:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD53112711E for ; Mon, 5 Feb 2018 13:29:14 -0800 (PST) Received: by mail-yw0-x235.google.com with SMTP id j128so19463038ywg.7 for ; Mon, 05 Feb 2018 13:29:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=4umPQxS61XzjaYLmPV3hwdl8mFJWlOv6AmuJ4ZKDcFQ=; b=uq0+7PPz2I2fcmIFCt/RtACXX0DJ2qSrzhVybuAs5RH0ucdI6p7LvX1YZUHHs0IAg0 y7+bJ0H57GO/6kcF5UQ1p7BTsIVWAyVUOF5xe2JjIQT29OleJOT7lXbLI5XtFeXhMicL 5R9FRfsMJj0lJ+DjaSsA0SpQqaEyU/8p2/9dUox22TKvDhid1PZiLjZCXNGhe3x+vSf+ wlbAME1bYxtKZKGyM9KfL8rpxJETEsRSimemZW39yBg5qtrz070fxe1G3u9fziSn1L/n ucPaG0mCs+JAahv0aVMTGwNRqnrxyY0VfabjMqTiotuhTR2SJzXX2HQXYlQCGvSOVGyy S/cg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=4umPQxS61XzjaYLmPV3hwdl8mFJWlOv6AmuJ4ZKDcFQ=; b=YRG7hd+WkUrGPUT3BQiehUGppTYpLqi/48+UfkQ2fUyE6a896MAMYfg8R/HyUeFX4q iyndYJjQF8ddg/0E60ulvUWqIJNzm3HgJxXAFZgP7pLx0jB5IVUeSgvUDQfZ8WqzExm4 IGj8F45G+L4czueONMamcJOVd2V7GwzWOY/AEHkOeH38wiMQS6AmKIbop9BOd/pj0F/h HwHdmr8Dim3GruXrUcEkAe8Fg584OiAlyR96J/U7CDnec6uqFuFwxxYFPD+OKcU3nqcw uYS4Oos5xJA6xMopQ6SHXrMNorvBPSKdcUcYVitIhx274mTmcSKwkQK8azBC8nQwxYAp hvzg== X-Gm-Message-State: APf1xPBl4vRnthy4ZsOVeZqPUCSNuEOAyc0BtlpmsSckJ50d0Q+OAl7d mTQYL5TNJxcrNKjwNA/91VMogVKQQIEV3OSIMSw8bg== X-Google-Smtp-Source: AH8x224qEGZl08aAzoZXL5hy1EfjyM/7EE4KklKwLa6iLKfXiF0ECFknnw5YwENTLi2o5zxVPXCLZ3KyUODdDSAFVF8= X-Received: by 10.37.128.197 with SMTP id c5mr131789ybm.17.1517866153146; Mon, 05 Feb 2018 13:29:13 -0800 (PST) MIME-Version: 1.0 Received: by 10.129.87.131 with HTTP; Mon, 5 Feb 2018 13:28:52 -0800 (PST) In-Reply-To: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> From: William Denniss Date: Mon, 5 Feb 2018 13:28:52 -0800 Message-ID: To: Marius Scurtescu Cc: "Richard Backman, Annabelle" , Yaron Sheffer , Mike Jones , SecEvent , Phil Hunt Content-Type: multipart/alternative; boundary="089e0822f5f4e0981705647dc08f" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 21:29:17 -0000 --089e0822f5f4e0981705647dc08f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Good catch Annabelle on the "iat" definition, it's quite ambiguous. I believe "event" there actually intended to mean "event token" (though it could be read either way). Changing it to "SET" should clear that up. I support the publication of this document, once corrected. On Mon, Feb 5, 2018 at 12:50 PM, Marius Scurtescu wrote: > Yes, let's make final fixes and move forward. > > A couple of minor nits: > - in the "events" definition, I don't think "Multiple event identifiers > with the same value MUST NOT be used." is needed, since that is not > possible anyhow (assuming I read the statement correctly) > - do we need a formal definition for "event identifier"? > > > Marius > > On Mon, Feb 5, 2018 at 12:38 PM, Richard Backman, Annabelle < > richanna@amazon.com> wrote: > >> I'd like to see item 1 below addressed before publishing, as it alters >> (corrects) the meaning of the text. >> >> One error: >> 1. In the "iat" definition in section 2.2: change "...when the event wa= s >> issued." to "...when the SET was issued." >> >> One clarification: >> 2. The 2nd to last paragraph of section 2.4 states "the Event Recipient >> MUST" ensure integrity, confidentiality, etc. Isn't this properly the >> issuer's responsibility? Or both? >> >> A handful of nits: >> 3. The "aud" definition in section 2.2 is awkwardly written; I suggest >> rephrasing it to mirror the "iat" definition. >> 4. Missing "the" in the "exp" definition in section 2.2: "this claim is >> time" -> "this claim is the time" >> 5. Syntax error in the 3rd list item of section 2: "...is a URI string >> value is an event identifier..." >> 6. Inconsistent use of terms for issuer, recipient, subject. At the ver= y >> least we should have consistent capitalization: >> a. Issuer, issuer, Event Issuer, SET Issuer >> b. Recipient, recipient, Event Recipient >> c. Subject, subject, Security Subject, security subject, event >> Subject, event subject >> >> OK, I'm putting away the red pen now. :) >> >> -- >> Annabelle Richard Backman >> Amazon =E2=80=93 Identity Services >> >> =EF=BB=BFOn 2/5/18, 12:33 PM, "Id-event on behalf of Phil Hunt" < >> id-event-bounces@ietf.org on behalf of phil.hunt@oracle.com> wrote: >> >> +1. Lets get this published. >> >> Phil >> >> > On Feb 5, 2018, at 11:57 AM, Mike Jones < >> Michael.Jones@microsoft.com> wrote: >> > >> > Ready for publication >> > >> > -----Original Message----- >> > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of >> Yaron Sheffer >> > Sent: Monday, February 5, 2018 11:24 AM >> > To: SecEvent >> > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 >> > >> > First, we would like to thank the authors and the working group >> members who have been working since Singapore to clarify and resolve >> several controversial topics. With this work behind us, we can now move >> forward to publication. >> > >> > This is to announce working group last call on this draft ( >> https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__ >> datatracker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Dtoken_&d=3D >> DwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FV >> zBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- >> QhajSSLuCHhPdHSjTC59M_YY&s=3DroIu0H8c1Pidp5yVt_nuHmPN3_dtFUuupi2qEPm4tis= &e=3D >> ). >> > >> > Please send your comments to the list. Even if you are perfectly >> happy with the draft, please let us know that you support its publicatio= n >> as-is by posting to the list. >> > >> > Please send your comment within the next two weeks, until Feb. 19. >> > >> > Thanks, >> > Dick and Yaron >> > >> > _______________________________________________ >> > Id-event mailing list >> > Id-event@ietf.org >> > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.iet >> f.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHv >> lZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYq >> PkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-QhajSSLuCHhPdHSjTC59M_ >> YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&e=3D >> > _______________________________________________ >> > Id-event mailing list >> > Id-event@ietf.org >> > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.iet >> f.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHv >> lZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYq >> PkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-QhajSSLuCHhPdHSjTC59M_ >> YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&e=3D >> >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> >> >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > --089e0822f5f4e0981705647dc08f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Good catch Annabelle on the "iat" definition, it's qu= ite ambiguous. I believe "event" there actually intended to mean = "event token" (though it could be read either way). Changing it t= o "SET" should clear that up.

I support the publication of this document, o= nce corrected.


On Mon, Feb 5, 2018 at 12:50 PM, Marius Scurtescu <mscurt= escu@google.com> wrote:
Yes, let's make final fixes and move forward.

A couple of minor nits:
- in the "events" defin= ition, I don't think "Multiple event identifiers with the same val= ue MUST NOT be used." is needed, since that is not possible anyhow (as= suming I read the statement correctly)
- do we need a formal defi= nition for "event identifier"?


=
Marius

On Mon, Feb 5, 2018 at 12:38 PM, Richard Bac= kman, Annabelle <richanna@amazon.com> wrote:
I'd like to see item 1 below addressed before publ= ishing, as it alters (corrects) the meaning of the text.

One error:
1.=C2=A0 In the "iat" definition in section 2.2: change "...= when the event was issued." to "...when the SET was issued."=

One clarification:
2.=C2=A0 The 2nd to last paragraph of section 2.4 states "the Event Re= cipient MUST" ensure integrity, confidentiality, etc. Isn't this p= roperly the issuer's responsibility? Or both?

A handful of nits:
3.=C2=A0 The "aud" definition in section 2.2 is awkwardly written= ; I suggest rephrasing it to mirror the "iat" definition.
4.=C2=A0 Missing "the" in the "exp" definition in secti= on 2.2: "this claim is time" -> "this claim is the time&q= uot;
5.=C2=A0 Syntax error in the 3rd list item of section 2: "...is a URI = string value is an event identifier..."
6.=C2=A0 Inconsistent use of terms for issuer, recipient, subject. At the v= ery least we should have consistent capitalization:
=C2=A0 a.=C2=A0 Issuer, issuer, Event Issuer, SET Issuer
=C2=A0 b.=C2=A0 Recipient, recipient, Event Recipient
=C2=A0 c.=C2=A0 Subject, subject, Security Subject, security subject, event= Subject, event subject

OK, I'm putting away the red pen now. :)

--
Annabelle Richard Backman
Amazon =E2=80=93 Identity Services

=EF=BB=BFOn 2/5/18, 12:33 PM, "Id-event on behalf of Phil Hunt" &= lt;id-event-= bounces@ietf.org on behalf of phil.hunt@oracle.com> wrote:

=C2=A0 =C2=A0 +1. Lets get this published.

=C2=A0 =C2=A0 Phil

=C2=A0 =C2=A0 > On Feb 5, 2018, at 11:57 AM, Mike Jones <Michael.Jones@microsof= t.com> wrote:
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Ready for publication
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > -----Original Message-----
=C2=A0 =C2=A0 > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf= Of Yaron Sheffer
=C2=A0 =C2=A0 > Sent: Monday, February 5, 2018 11:24 AM
=C2=A0 =C2=A0 > To: SecEvent <id-event@ietf.org>
=C2=A0 =C2=A0 > Subject: [Id-event] WG Last Call for draft-ietf-secevent= -token-05
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > First, we would like to thank the authors and the workin= g group members who have been working since Singapore to clarify and resolv= e several controversial topics. With this work behind us, we can now move f= orward to publication.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > This is to announce working group last call on this draf= t (https://urldefense.proofpoint.com/v2/url?u=3Dhtt= ps-3A__datatracker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Dtoken_&= amp;d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_Jn= E&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8= CKQKr2kgcB8C8zF-QhajSSLuCHhPdHSjTC59M_YY&s=3DroIu0H8c1Pidp5yV= t_nuHmPN3_dtFUuupi2qEPm4tis&e=3D).
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Please send your comments to the list. Even if you are p= erfectly happy with the draft, please let us know that you support its publ= ication as-is by posting to the list.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Please send your comment within the next two weeks, unti= l Feb. 19.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Thanks,
=C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0Dick and Yaron
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > _______________________________________________
=C2=A0 =C2=A0 > Id-event mailing list
=C2=A0 =C2=A0 > I= d-event@ietf.org
=C2=A0 =C2=A0 > https://urldefense.proofpoint.com/v2/url?u=3Dhttp= s-3A__www.ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&= ;c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBT= WmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-Qh= ajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQ= Hc45TnDaY&e=3D
=C2=A0 =C2=A0 > _______________________________________________
=C2=A0 =C2=A0 > Id-event mailing list
=C2=A0 =C2=A0 > I= d-event@ietf.org
=C2=A0 =C2=A0 > https://urldefense.proofpoint.com/v2/url?u=3Dhttp= s-3A__www.ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&= ;c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBT= WmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-Qh= ajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQ= Hc45TnDaY&e=3D

=C2=A0 =C2=A0 _______________________________________________
=C2=A0 =C2=A0 Id-event mailing list
=C2=A0 =C2=A0 Id-eve= nt@ietf.org
=C2=A0 =C2=A0 https://www.ietf.org/mailman/listin= fo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


--089e0822f5f4e0981705647dc08f-- From nobody Mon Feb 5 16:01:06 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AA52127869 for ; Mon, 5 Feb 2018 16:00:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5-UEiyI0XPv9 for ; Mon, 5 Feb 2018 16:00:26 -0800 (PST) Received: from mail-wr0-x232.google.com (mail-wr0-x232.google.com [IPv6:2a00:1450:400c:c0c::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4074412D85E for ; Mon, 5 Feb 2018 16:00:19 -0800 (PST) Received: by mail-wr0-x232.google.com with SMTP id w50so115720wrc.2 for ; Mon, 05 Feb 2018 16:00:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=qVnzwgVWNCOpupFF8STQY52xubF6rZhc+XVXx17rct0=; b=blmu1oCPZzg6KxjEi+PxANcteplXlZ+BSr0iveCuMW9ZvyF1GUyPhmliasR1crN5+C 8yviKwc16FGnSBd8w3ti7iZDW9PGSmAqmtSS1Z8bbptW53bjE9xXSjmCggI6cRrPFu0m jahdb7xJuZbGM2tCjZ93WIcCncFBmB23UcEDQAAja2Sb0WH84s220z6klRB/yQeJKQum ZrpwEyoMAHFEqP5PkKk2Q4IeP9PPiLKNDrBH1WF+Uy2kz0P5Ds5oND3uLIZ4zLnn/AOw yocptnmMbT9kKyUQnDwXzEkJqLX4scIixgmOj97yx8VdRNfuQTpqVjh3hWoQIXEO6At2 A1Pw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=qVnzwgVWNCOpupFF8STQY52xubF6rZhc+XVXx17rct0=; b=ZFPS4N4FYj8fKr/mwNweCvhzxxgQn33QkA4Myidzv8vJhWcw8Bc4hr7ZUxTnmuix4A lmzxtChNlJ5fp3runx0PdBCF57zo9M7ThtTLWy2pxpESnvyG27Pg7GKsY27Evai6045G Nw0vndptnW/ajgGaaVTXvozFyABmnZTIxgEsZDgB/s9Cr8eQXql+/m2oQ83kDDjFLDgp uIwEUMrSt8IHFzI5atvJEBz6h05+pqCopOC5uuNQJjDKVBljn3kUSr6OpRrtDXRtF/+x flxKAobECWJQSlKWx6WlrWXWLZ6fiEUIgEtM5D97UVoBlODsVHJKQZd2ezkDL3iupHfX YJbw== X-Gm-Message-State: APf1xPD+nb8mpG3RwXpouWD1FoNJ96igo60vyzfXeJ0qR+ck5qhOyngI NdMk17oNpMyAxWv0oiUeecDiDMdw/OI0cGteGPMTzfUt X-Google-Smtp-Source: AH8x225SrMPHIbLGeMWLFXdblU3f3izzADqQAaqwIG+XjOUojMEHqRb6MR2UBFgwq6+WsAY+e8XqT7MwiUXzzxNy1Dk= X-Received: by 10.223.153.120 with SMTP id x111mr416966wrb.249.1517875217401; Mon, 05 Feb 2018 16:00:17 -0800 (PST) MIME-Version: 1.0 Received: by 10.28.116.1 with HTTP; Mon, 5 Feb 2018 16:00:16 -0800 (PST) In-Reply-To: References: From: Adam Dawes Date: Mon, 5 Feb 2018 16:00:16 -0800 Message-ID: To: Luke Camery Cc: Marius Scurtescu , Annabelle Richard , Mike Jones , ID Events Mailing List Content-Type: multipart/alternative; boundary="f403045d58fc25f24d05647fddd4" Archived-At: Subject: Re: [Id-event] Security Event Token (SET) spec simplifying claims usage X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Feb 2018 00:00:29 -0000 --f403045d58fc25f24d05647fddd4 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I support the current draft for RISC. On Mon, Feb 5, 2018 at 10:36 AM, Luke Camery wrote: > I'm really happy to see a solid spec as the result of many discussions. > LGTM on this draft. > > > On Mon, Feb 5, 2018 at 10:18 AM Marius Scurtescu > wrote: > >> On Mon, Feb 5, 2018 at 9:27 AM, Richard Backman, Annabelle < >> richanna@amazon.com> wrote: >> >>> Thanks, Mike. >>> >>> >>> >>> With these latest changes, I believe that we can make the current draft >>> work for RISC. It will require doing more within the RISC Profile than = at >>> least I was expecting, and the result will likely be incompatible with >>> most/all other SET profiles, but it will work for us. >>> >> >> Agreed, RISC can move forward. >> >> Also sharing the profile compatibility concerns and the fact that we are >> forcing duplication across profiles. Hopefully we will find ways to work >> around these issues. >> >> >> >> >>> >>> >>> -- >>> >>> Annabelle Richard Backman >>> >>> Amazon =E2=80=93 Identity Services >>> >>> >>> >>> *From: *Id-event on behalf of Mike Jones < >>> Michael.Jones@microsoft.com> >>> *Date: *Friday, February 2, 2018 at 5:41 PM >>> *To: *SecEvent >>> *Subject: *[Id-event] Security Event Token (SET) spec simplifying >>> claims usage >>> >>> >>> >>> The Security Event Token (SET) specification has been updated to >>> simplify the definitions and usage of the =E2=80=9Ciat=E2=80=9D (issued= at) and =E2=80=9Ctoe=E2=80=9D >>> (time of event) claims. The full set of changes made was: >>> >>> - Simplified the definitions of the =E2=80=9Ciat=E2=80=9D and =E2=80= =9Ctoe=E2=80=9D claims in ways >>> suggested by Annabelle Backman. >>> - Added privacy considerations text suggested by Annabelle Backman. >>> - Updated the RISC event example, courtesy of Marius Scurtescu. >>> - Reordered the claim definitions to place the required claims first= . >>> - Changed to using the RFC 8174 boilerplate instead of the RFC 2119 >>> boilerplate. >>> >>> >>> >>> Thanks to Annabelle Backman, Marius Scurtescu, Phil Hunt, and Dick Hard= t >>> for the discussions that led to these simplifications. >>> >>> >>> >>> The specification is available at: >>> >>> - https://tools.ietf.org/html/draft-ietf-secevent-token-05 >>> >>> >>> >>> An HTML-formatted version is also available at: >>> >>> - http://self-issued.info/docs/draft-ietf-secevent-token-05.html >>> >>> >>> >>> -- Mike >>> >>> >>> >>> P.S. This announcement was also posted at http://self-issued.info/?p= =3D >>> 1773 and as @selfissued . >>> >>> >>> >>> _______________________________________________ >>> Id-event mailing list >>> Id-event@ietf.org >>> https://www.ietf.org/mailman/listinfo/id-event >>> >>> >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> > > > -- > > * =E2=80=A2 **Luke Camery* > * =E2=80=A2 *Associate Product Manager > * =E2=80=A2 *Federated Identity > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > --=20 Adam Dawes | Sr. Product Manager | adawes@google.com | +1 650-214-2410 --f403045d58fc25f24d05647fddd4 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I support the current draft for RISC.

On Mon, Feb 5, 2018 at 10:36 AM,= Luke Camery <lcamery@google.com> wrote:
I'm really happy to see a solid spec a= s the result of many discussions. LGTM on this draft.=C2=A0


On Mon, Feb 5, 2018 at 10:18 AM Marius Scurtescu <mscurtescu@google.com>= wrote:
On Mon, Feb 5, 2018 at 9:27 AM,= Richard Backman, Annabelle <richanna@amazon.com> wrote:

Thanks, Mike.

=C2=A0

With these latest changes, I believe that we can mak= e the current draft work for RISC. It will require doing more within the RI= SC Profile than at least I was expecting, and the result will likely be inc= ompatible with most/all other SET profiles, but it will work for us.


Agreed, RISC can move forward.

Also shari= ng the profile compatibility concerns and the fact that we are forcing dupl= ication across profiles. Hopefully we will find ways to work around these i= ssues.


=C2=A0

=C2=A0

--=C2=A0

Annabelle Richard Backman

Amazon =E2=80=93 Identity Services=

=C2=A0

From= : Id-event <id-event-bounces@ietf.org&g= t; on behalf of Mike Jones <Michael.Jones@microsoft.com>
Date: Friday, February 2, 2018 at 5:41 PM
To: SecEvent <id-event@ie= tf.org>
Subject: [Id-event] Security Event Token (SET) spec simplifying clai= ms usage

=C2=A0

The Security Event Token (SET) specification= has been updated to simplify the definitions and usage of the =E2=80=9Ciat=E2=80= =9D (issued at) and =E2=80=9Ctoe=E2=80=9D (time of event) claims.=C2=A0 The full = set of changes made was:

  • Simplified the definitions of the =E2=80=9Ciat=E2=80=9D and =E2=80=9Ctoe=E2=80=9D claims in ways suggested by Annabelle = Backman.
  • Added priva= cy considerations text suggested by Annabelle Backman.=
  • Updated the RISC event example, courtesy= of Marius Scurtescu.
  • Reordered the claim definitions to place the required claims first.
  • Changed to using the RFC = 8174 boilerplate instead of the RFC 2119 boilerplate.<= /li>

=C2=A0

Thanks to Annabelle Backman, Marius Scurtescu,= Phil Hunt, and Dick Hardt for the discussions that led to these simplifica= tions.

=C2=A0

The specification is available at:

=C2=A0

An HTML-formatted version is also available at= :

=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -- Mike

=C2=A0

P.S.=C2=A0 This announcement was also posted a= t http://self-i= ssued.info/?p=3D1773 and as @selfissued.

=C2=A0


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


--
=C2=A0 =E2=80=A2 =C2= =A0Luke Camery
=C2=A0 =E2=80=A2 =C2=A0Associate Pro= duct Manager
=C2=A0 =E2=80=A2 =C2=A0Federated Identity

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event




--
--f403045d58fc25f24d05647fddd4-- From nobody Thu Feb 15 14:50:11 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C963127871 for ; Thu, 15 Feb 2018 14:50:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sDdAQagq32hW for ; Thu, 15 Feb 2018 14:50:05 -0800 (PST) Received: from mail-wr0-x230.google.com (mail-wr0-x230.google.com [IPv6:2a00:1450:400c:c0c::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A676B124B0A for ; Thu, 15 Feb 2018 14:50:04 -0800 (PST) Received: by mail-wr0-x230.google.com with SMTP id 34so1228338wre.13 for ; Thu, 15 Feb 2018 14:50:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=7WzP3X5Ay5cCxwrVVDNA0+sT2bY3yeW2sAhl7erdhT0=; b=ewTeEcM7kRxWkvhJV6ysSFm9sQxYi/hKOb0HJIlneGDTZIYfhYD+Vk0rmn6jpJQFHD KbqDUmjLxirrd7w1G28+gFTn1GaIMTuFjw8uFfXyzKF2xejfhHmhUw8sdaRJEvpKX0SA Nf2aZyPZBXa4Oq5oMjrkGFmUJv+WPQg8r/OcH3CRjr0M2HFZdqqvy/8b2ELfd7whEiIu GzOsPyi0q/McJvrmxV20m4TcDPmRaULH1eymFLZlQbKDBPMtNkbnBMtYiUNmy3W8HaAJ uK/PqRP2xzgmjYV5o2WbqDVEYm5N4FdOs13sXaYzQJZFEVJAbQNvHaXCe+fja8R/fHWV jxCA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=7WzP3X5Ay5cCxwrVVDNA0+sT2bY3yeW2sAhl7erdhT0=; b=ZjIKPRLTNBXQBvClHGN9YpCjYUBUm+5kdFQ1R6++KPA6VBogS3ZrDMJBmAIcEJnyDu vChkesetOzVCcZTJ/ME4B7J1gZgLcae97f/i78kpfWZjDXNsMYYtSXMzwhRx3GxEf3aK SO34REBjCkPuN5GykUPbbz7EKHmjQnt0UBrFTawcVn/wrQMMYybzUisAqAoC9GF6b8P/ ZES2IzMrT7+6DR1ZbHP0d7tvvUDXf21Ms4PHDAN5GW1IqebjD26reNWjO/rAwcovH95P Pv8OuCAPQBJzsvbvhgHTWmmFyyp6NTY9/hQut/QUz7jX4EGLxJ2/h44Lmd4bDWaURkee EXGw== X-Gm-Message-State: APf1xPD3gYzvCXWaIID7eUb3a5vTF7VMRpTsKbM3u+WIkgt0cYlftRpv WKYR9jy9BLvJ/wUexG8Jhpn5TBNg X-Google-Smtp-Source: AH8x225ldVLK/ZXj+ghBcgLFOowmCjtGGIdMLbHoOguReV7/Maer9svPyy84kEq/wzlDtYH18QgyQA== X-Received: by 10.223.189.147 with SMTP id l19mr3577497wrh.132.1518735002964; Thu, 15 Feb 2018 14:50:02 -0800 (PST) Received: from [10.0.0.149] (bzq-109-65-61-134.red.bezeqint.net. [109.65.61.134]) by smtp.gmail.com with ESMTPSA id d27sm12925007wrd.60.2018.02.15.14.50.01 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 15 Feb 2018 14:50:02 -0800 (PST) To: SecEvent References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> From: Yaron Sheffer Message-ID: <5f0ac0fd-d971-b73c-cc1e-6210193a7eec@gmail.com> Date: Fri, 16 Feb 2018 00:50:00 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Feb 2018 22:50:07 -0000 Quick reminder: this last call is open until Feb. 19. If you haven't yet, please let us know if you support publication of this document. Thanks, Yaron > -----Original Message----- > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron Sheffer > Sent: Monday, February 5, 2018 11:24 AM > To: SecEvent > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > First, we would like to thank the authors and the working group members who have been working since Singapore to clarify and resolve several controversial topics. With this work behind us, we can now move forward to publication. > > This is to announce working group last call on this draft (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/). > > Please send your comments to the list. Even if you are perfectly happy with the draft, please let us know that you support its publication as-is by posting to the list. > > Please send your comment within the next two weeks, until Feb. 19. > > Thanks, >     Dick and Yaron > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > From nobody Thu Feb 15 15:36:21 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E34311243F3 for ; Thu, 15 Feb 2018 15:36:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.709 X-Spam-Level: X-Spam-Status: No, score=-2.709 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bax_gsYAnDsd for ; Thu, 15 Feb 2018 15:36:17 -0800 (PST) Received: from mail-yw0-x229.google.com (mail-yw0-x229.google.com [IPv6:2607:f8b0:4002:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C26F3124234 for ; Thu, 15 Feb 2018 15:36:17 -0800 (PST) Received: by mail-yw0-x229.google.com with SMTP id e65so974751ywh.9 for ; Thu, 15 Feb 2018 15:36:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=WFr6CxZ8o2SV5jQ50b4wZ9s5bKqCYPQkZ3UgSPDFfBY=; b=R2lsKV0a/zvF7qquefn0CPc4rqHZT9jvXp0c4fYQpBX3WJ0MjXryCBwNtNjXdYtwvN ZY8C5nGY7JBRYUYhomPP1w+yiQ6dUVItziT6paglQLsMvPV68PD855GM6p/WnjBkWmA/ 7QcdVY8vfgM1/HdRi5TOYk/NeZccmFGmSo7OALUxuzvHskI/1wApu+id40BwPscyEl1l RRN5IrtUg7Fy9fXOxB6dA6u/j4+etso/EDH6oSWE9QBwe1GmVlZxnmLNLIIVglZRMkP1 6OZcYztobMKrMgQoHpF0gfYVZhxSyqPurtI2k+Zyo2eE/VoFzNvea4uvZLmwLzu/wnOV qCww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=WFr6CxZ8o2SV5jQ50b4wZ9s5bKqCYPQkZ3UgSPDFfBY=; b=D8cDrQmsjGfLKHMT2ZOMh5Dd8ZbMa7aWPrJlfi/Z/z+THlhWWs57v4AMLGBIQQlEp5 KTZgH1InOyGM0EkQYqSpMiCy8eKSmtr1bWOi/Os+MrOrwV+mB/l2x9Pbhn7k+dKHVSfJ Rhw0FjHvCrN2X4LUanUX5YhcPcdxWYqo1D0AYS917QwbgnnsqG/PXo4Td3fgmD6HeD3o uclC5Ffl71qvMoApCVXNwnesYo6GIWIha6wyO9HyBSeZnLSBUTRJXY3Jxsum7hjCqT9o DY5Adrj4aV6yF3jdJWgL/AfBB6Fut6NMF8bGYyPuSBcc0ai8pb0VaY7QpLyHvSwiKxE9 YuRw== X-Gm-Message-State: APf1xPCR9x97QO054QdSsEBNAt17o2+6CrMAOZStb/Efd2X57adx+uiH 2c2F1gpIbTJa2K+sryscErnYFFsXxigf+mfxEEFZFw== X-Google-Smtp-Source: AH8x224GC1B+sLMVeKaGZ8frr9UTTr3Y7/hr2f/TF5bE9dnBWth1EWDL54uCk6icHIiMbl8OsVXSNGUZPd3TaEim9j0= X-Received: by 10.129.50.141 with SMTP id y135mr1996136ywy.355.1518737776559; Thu, 15 Feb 2018 15:36:16 -0800 (PST) MIME-Version: 1.0 References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <5f0ac0fd-d971-b73c-cc1e-6210193a7eec@gmail.com> In-Reply-To: <5f0ac0fd-d971-b73c-cc1e-6210193a7eec@gmail.com> From: Luke Camery Date: Thu, 15 Feb 2018 23:36:06 +0000 Message-ID: To: Yaron Sheffer Cc: id-event@ietf.org Content-Type: multipart/alternative; boundary="001a114084ceae729b056548b11f" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Feb 2018 23:36:20 -0000 --001a114084ceae729b056548b11f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable +1, looks great with those minor edits. On Thu, Feb 15, 2018 at 2:50 PM Yaron Sheffer wrote= : > Quick reminder: this last call is open until Feb. 19. If you haven't > yet, please let us know if you support publication of this document. > > Thanks, > Yaron > > > -----Original Message----- > > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron > Sheffer > > Sent: Monday, February 5, 2018 11:24 AM > > To: SecEvent > > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > > > First, we would like to thank the authors and the working group members > who have been working since Singapore to clarify and resolve several > controversial topics. With this work behind us, we can now move forward t= o > publication. > > > > This is to announce working group last call on this draft ( > https://datatracker.ietf.org/doc/draft-ietf-secevent-token/). > > > > Please send your comments to the list. Even if you are perfectly happy > with the draft, please let us know that you support its publication as-is > by posting to the list. > > > > Please send your comment within the next two weeks, until Feb. 19. > > > > Thanks, > > Dick and Yaron > > > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://www.ietf.org/mailman/listinfo/id-event > > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --=20 * =E2=80=A2 **Luke Camery* * =E2=80=A2 *Associate Product Manager * =E2=80=A2 *Federated Identity --001a114084ceae729b056548b11f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
+1, looks great with those minor edits.=C2=A0

On Thu, Feb 15, 2018 at 2:50 P= M Yaron Sheffer <yaronf.ietf@gm= ail.com> wrote:
Quick remind= er: this last call is open until Feb. 19. If you haven't
yet, please let us know if you support publication of this document.

Thanks,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Yaron

> -----Original Message-----
> From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron Sheffer > Sent: Monday, February 5, 2018 11:24 AM
> To: SecEvent <id-event@ietf.org>
> Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05
>
> First, we would like to thank the authors and the working group member= s who have been working since Singapore to clarify and resolve several cont= roversial topics. With this work behind us, we can now move forward to publ= ication.
>
> This is to announce working group last call on this draft (https://datatracker.ietf.org/doc/draft-ietf-secevent= -token/).
>
> Please send your comments to the list. Even if you are perfectly happy= with the draft, please let us know that you support its publication as-is = by posting to the list.
>
> Please send your comment within the next two weeks, until Feb. 19.
>
> Thanks,
>=C2=A0 =C2=A0=C2=A0=C2=A0=C2=A0 Dick and Yaron
>
> _______________________________________________
> Id-event mailing list
> Id-event@ietf.o= rg
> https://www.ietf.org/mailman/listinfo/id-event
>

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


--
=C2=A0 =E2=80=A2 =C2=A0Lu= ke Camery
=C2=A0 =E2=80=A2 =C2=A0Associate Product = Manager
=C2=A0 =E2=80=A2 =C2=A0Federated Identity
--001a114084ceae729b056548b11f-- From nobody Fri Feb 16 13:37:34 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD4E4126BF0 for ; Fri, 16 Feb 2018 13:37:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.231 X-Spam-Level: X-Spam-Status: No, score=-4.231 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B8kts7yre4-V for ; Fri, 16 Feb 2018 13:37:31 -0800 (PST) Received: from dmz-mailsec-scanner-3.mit.edu (dmz-mailsec-scanner-3.mit.edu [18.9.25.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5FE9124205 for ; Fri, 16 Feb 2018 13:37:30 -0800 (PST) X-AuditID: 1209190e-fabff70000000479-1c-5a874f195c97 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-3.mit.edu (Symantec Messaging Gateway) with SMTP id 14.98.01145.91F478A5; Fri, 16 Feb 2018 16:37:29 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w1GLbSCu002250; Fri, 16 Feb 2018 16:37:29 -0500 Received: from [192.168.1.4] (static-71-174-62-56.bstnma.fios.verizon.net [71.174.62.56]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w1GLbQWU023635 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 16 Feb 2018 16:37:27 -0500 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) From: Justin Richer In-Reply-To: <5f0ac0fd-d971-b73c-cc1e-6210193a7eec@gmail.com> Date: Fri, 16 Feb 2018 16:37:26 -0500 Cc: SecEvent Content-Transfer-Encoding: quoted-printable Message-Id: <1D6FC83B-E870-4C0A-BAA3-D1B2F497B3F1@mit.edu> References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <5f0ac0fd-d971-b73c-cc1e-6210193a7eec@gmail.com> To: Yaron Sheffer X-Mailer: Apple Mail (2.3445.5.20) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrOIsWRmVeSWpSXmKPExsUixCmqrSvp3x5l0NtrYtGxoJvJYtX9GewO TB47Z91l91iy5CdTAFMUl01Kak5mWWqRvl0CV8aVKeUFjYIVF892szYwNvB1MXJySAiYSLTc 3snSxcjFISSwmEniyr25UM5GRokFvyYwglQJCVxjklixJRHEZhbQlNjfvZwFxOYF6n7/9iET iC0s4Cqxa8EMZhCbTUBVYvqaFrA4p4CtREffFLA5LEDxOfO/MUHMUZD41vaHBcLWlli28DUz xEwriY5jh6COOMYocfHQVaBmDg4RoMXTjlpBXK0kMf37bbYJjAKzkJw0C8lJs5CMXcDIvIpR NiW3Sjc3MTOnODVZtzg5MS8vtUjXWC83s0QvNaV0EyM4TCX5djBOavA+xCjAwajEw/vgcVuU EGtiWXFl7iFGSQ4mJVHeRQ+BQnxJ+SmVGYnFGfFFpTmpxYcYJTiYlUR4GUzao4R4UxIrq1KL 8mFS0hwsSuK87ibaUUIC6YklqdmpqQWpRTBZGQ4OJQnep75AjYJFqempFWmZOSUIaSYOTpDh PEDDX4DU8BYXJOYWZ6ZD5E8x6nLcePG6jVmIJS8/L1VKnNcZpEgApCijNA9uDii9uK+zs3jF KA70ljDvdZAqHmBqgpv0CmgJE9ASXqVWkCUliQgpqQbGww5Tn+fHXj99LZdD3/p11H5Zm5it N6W+Wv44LbFtytdmfgU/vj8dcwx/RV4/dOfN9ndqpYG7WE7n7a5bc/iIyJYMz/kMC6b+VfcO VPuQyHw3MvjpnV8GK5MnH7m90yX/Y1xe6sOk190PPtsVLD7L/n/GjYm3s+6UhyyU2p75o95z c0mFR0OgqRJLcUaioRZzUXEiAFVz4eYKAwAA Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Feb 2018 21:37:33 -0000 I still disagree with the direction, syntax, and scope of the solution = in this document, and I stand by all of my objections that were raised = in Singapore. I do not believe that my base objections have been = addressed by recent changes, merely pushed off to =E2=80=9Cprofiles=E2=80=9D= which I still believe is going to cause an implementation and = interoperability nightmare, rendering this specification all but useless = in my view. I see and acknowledge that the working group is deciding to continue = with this model in spite of lengthy discussions, and concede that the = work will continue toward publication in spite of my objections. =E2=80=94 Justin > On Feb 15, 2018, at 5:50 PM, Yaron Sheffer = wrote: >=20 > Quick reminder: this last call is open until Feb. 19. If you haven't = yet, please let us know if you support publication of this document. >=20 > Thanks, > Yaron >=20 >> -----Original Message----- >> From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron = Sheffer >> Sent: Monday, February 5, 2018 11:24 AM >> To: SecEvent >> Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 >> First, we would like to thank the authors and the working group = members who have been working since Singapore to clarify and resolve = several controversial topics. With this work behind us, we can now move = forward to publication. >> This is to announce working group last call on this draft = (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/). >> Please send your comments to the list. Even if you are perfectly = happy with the draft, please let us know that you support its = publication as-is by posting to the list. >> Please send your comment within the next two weeks, until Feb. 19. >> Thanks, >> Dick and Yaron >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >=20 > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event From nobody Fri Feb 16 13:55:00 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DEF3126BF0 for ; Fri, 16 Feb 2018 13:54:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I5yy9r2OzyJP for ; Fri, 16 Feb 2018 13:54:55 -0800 (PST) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0135.outbound.protection.outlook.com [104.47.36.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61832124205 for ; Fri, 16 Feb 2018 13:54:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=54U3oyhjnZWjcfvFH4a0fIuthqd60IxSlJOX5aP6AtQ=; b=GRdNthhZpxhjzSVmaDxcYJXOLYD9MP2pH4ZQDpCg/MAFqRlOMfLmckaeM41mJjT67bK4fgN8yt7jlpEhwuXChuyNP92HYf/Kokdgl8I2m7x5fzZSYy4c1jXxt4DbhSn8nR+YmSGMpZx+dU5T5gMTQMc0ClSAgfA3+j9BxdaRv+8= Received: from SN6PR00MB0367.namprd00.prod.outlook.com (52.132.118.22) by SN6PR00MB0382.namprd00.prod.outlook.com (52.132.118.25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.552.0; Fri, 16 Feb 2018 21:54:48 +0000 Received: from SN6PR00MB0367.namprd00.prod.outlook.com ([fe80::691d:a82e:2a98:ee4c]) by SN6PR00MB0367.namprd00.prod.outlook.com ([fe80::691d:a82e:2a98:ee4c%5]) with mapi id 15.20.0550.000; Fri, 16 Feb 2018 21:54:48 +0000 From: Anthony Nadalin To: Yaron Sheffer , SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-05 Thread-Index: AQHTnrbpm5Tf0k6+A0qPhX8DaqoRqqOno9qw Date: Fri, 16 Feb 2018 21:54:47 +0000 Message-ID: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> In-Reply-To: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [167.220.58.16] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR00MB0382; 6:M3PhL/zbg1YQ82jveZKcsnShkcIl3BC8zBiMmbMYTff8VrZO+VdstjFlTSbb/EIvvnlTQ12d0emz9mfbnXOKV5XzxTbPAwpTrX+EE+Oxvol/qWl6JVRfC6VjX/rtr/F9abDv8g1S0G2q+QnhA8dHYHcN3sI2FmhP9gOkzYy/AUGwYv2TUKOyMWCasWpdJpThF5EpZl3MckgQRr6WloE3EPsB/6rk0eYNWTmx+9ydhGYRuFTqRCde72QvfUH5rDiO50gSDJhU+ZMvlwKgpV8iHygS/9FhS2Zs6PbbV3QjZJx9NddDbzVgp9tUSbMJieNNuZ6yx5c+1Qi5EEyRFNzgsqZlTCiyN/VCXA58odXbyZ33QRluTOX0k4ga6xuwkTx5; 5:hymkjxK37yBzAmDCN4OwhTT711n3HLopaWCzYLSerW0fXUen5WC0sc8Bg2RqvcWLo2vUOWpspy9+5WVsXOwnA7vbRMEVpzfDB2iqK9Jk07nBgik+1ahBDOYDhULYhXRmgl8T0qQ9+PJhgnBi/kSvSrnStBWJGrsv0wcGq2/722U=; 24:JdGtgiIjXinvkrN3xxrZuDSlF6GVX8puQdUHd1OAdBcYnI3ThZ89NHL3fG9eCsFxbDxlCEoZvuyFkVFhWinG/QHqAGx0PRgBI8Cur47MCGg=; 7:vFbKAiyImVV+Vp3efKphYV1KzZjt/4q7NdbT8XTz+uBjFya0oUfAm8nR0s4rngXRtHDrdauiK6BHmRfzISAbE/ztwp54nYZl6wnhayLJgmVzHW36FSS+FLC2EfdWwmuKAM286G7iirben5E2ZGX9sqdiv63TZUrUzvS8UfCsmR6HYwv+ocaOAOSPkPRp7KnlfHTaN3vDN9XfgaJzvM+G/TTNS2IupCaJ8nmAtxz2sJrcaIHWev2hDdZdkqofNDUj x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 15762880-6fa6-455d-9192-08d57587e604 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7193020); SRVR:SN6PR00MB0382; x-ms-traffictypediagnostic: SN6PR00MB0382: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(189930954265078)(219752817060721); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001040)(61425038)(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(3231137)(944501161)(52105033)(6055026)(61426038)(61427038)(6041288)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:SN6PR00MB0382; BCL:0; PCL:0; RULEID:(3232008); SRVR:SN6PR00MB0382; x-forefront-prvs: 0585417D7B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(39860400002)(396003)(366004)(346002)(39380400002)(13464003)(199004)(189003)(478600001)(7696005)(6116002)(8990500004)(22452003)(74316002)(10290500003)(76176011)(86612001)(68736007)(110136005)(316002)(99286004)(26005)(6506007)(102836004)(53546011)(33656002)(2950100002)(3846002)(2900100001)(186003)(106356001)(6246003)(105586002)(8936002)(6436002)(39060400002)(6346003)(229853002)(53936002)(6306002)(97736004)(3660700001)(55016002)(3280700002)(9686003)(81156014)(8676002)(81166006)(7736002)(66066001)(966005)(10090500001)(5660300001)(5250100002)(305945005)(2906002)(14454004)(86362001)(575784001)(25786009)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR00MB0382; H:SN6PR00MB0367.namprd00.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=tonynad@microsoft.com; x-microsoft-antispam-message-info: XrccE1RZYSb/6DVOutG5IqCJ7aZIHP2OdYItZc+gfM1NR4D1NN8lj5DltjeU/ej5RmaFnsUWdztXDZL8NQy4Uw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 15762880-6fa6-455d-9192-08d57587e604 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Feb 2018 21:54:48.0955 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR00MB0382 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Feb 2018 21:54:58 -0000 SSBzdXBwb3J0IHB1YmxpY2F0aW9uLiANCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZy b206IElkLWV2ZW50IFttYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mIFlhcm9uIFNoZWZmZXINClNlbnQ6IE1vbmRheSwgRmVicnVhcnkgNSwgMjAxOCAxMToyNCBB TQ0KVG86IFNlY0V2ZW50IDxpZC1ldmVudEBpZXRmLm9yZz4NClN1YmplY3Q6IFtJZC1ldmVudF0g V0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTA1DQoNCkZpcnN0LCB3 ZSB3b3VsZCBsaWtlIHRvIHRoYW5rIHRoZSBhdXRob3JzIGFuZCB0aGUgd29ya2luZyBncm91cCBt ZW1iZXJzIHdobyBoYXZlIGJlZW4gd29ya2luZyBzaW5jZSBTaW5nYXBvcmUgdG8gY2xhcmlmeSBh bmQgcmVzb2x2ZSBzZXZlcmFsIGNvbnRyb3ZlcnNpYWwgdG9waWNzLiBXaXRoIHRoaXMgd29yayBi ZWhpbmQgdXMsIHdlIGNhbiBub3cgbW92ZSBmb3J3YXJkIHRvIHB1YmxpY2F0aW9uLg0KDQpUaGlz IGlzIHRvIGFubm91bmNlIHdvcmtpbmcgZ3JvdXAgbGFzdCBjYWxsIG9uIHRoaXMgZHJhZnQgKGh0 dHBzOi8vbmEwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNB JTJGJTJGZGF0YXRyYWNrZXIuaWV0Zi5vcmclMkZkb2MlMkZkcmFmdC1pZXRmLXNlY2V2ZW50LXRv a2VuJTJGJmRhdGE9MDIlN0MwMSU3Q3RvbnluYWQlNDBtaWNyb3NvZnQuY29tJTdDN2I5NGFlNThm ZDQ4NDZkZjk4MzYwOGQ1NmNjZTA5ZjIlN0NlZTMzMDNkN2ZiNzM0YjBjODU4OWJjZDg0N2YxYzI3 NyU3QzElN0MwJTdDNjM2NTM0NTU0NTQzMDgzOTczJnNkYXRhPWFlcExoUGlxSXplUTFIMjRGUVZS dWNIN3p5eFJwVXklMkZjS3JqVElVRTludyUzRCZyZXNlcnZlZD0wKS4NCg0KUGxlYXNlIHNlbmQg eW91ciBjb21tZW50cyB0byB0aGUgbGlzdC4gRXZlbiBpZiB5b3UgYXJlIHBlcmZlY3RseSBoYXBw eSB3aXRoIHRoZSBkcmFmdCwgcGxlYXNlIGxldCB1cyBrbm93IHRoYXQgeW91IHN1cHBvcnQgaXRz IHB1YmxpY2F0aW9uIGFzLWlzIGJ5IHBvc3RpbmcgdG8gdGhlIGxpc3QuDQoNClBsZWFzZSBzZW5k IHlvdXIgY29tbWVudCB3aXRoaW4gdGhlIG5leHQgdHdvIHdlZWtzLCB1bnRpbCBGZWIuIDE5Lg0K DQpUaGFua3MsDQogwqDCoMKgIERpY2sgYW5kIFlhcm9uDQoNCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJZC1ldmVudCBtYWlsaW5nIGxpc3QNCklkLWV2 ZW50QGlldGYub3JnDQpodHRwczovL25hMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5j b20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUy RmlkLWV2ZW50JmRhdGE9MDIlN0MwMSU3Q3RvbnluYWQlNDBtaWNyb3NvZnQuY29tJTdDN2I5NGFl NThmZDQ4NDZkZjk4MzYwOGQ1NmNjZTA5ZjIlN0NlZTMzMDNkN2ZiNzM0YjBjODU4OWJjZDg0N2Yx YzI3NyU3QzElN0MwJTdDNjM2NTM0NTU0NTQzMDgzOTczJnNkYXRhPXhEZXNjcGJJVHV3VHl6enBT MjVtblVDdkFTUWoxTkNtYjN5YnJYWGc4OTQlM0QmcmVzZXJ2ZWQ9MA0K From nobody Fri Feb 16 23:26:22 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6123127010 for ; Fri, 16 Feb 2018 23:26:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oracle.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JYkCOeeUocNM for ; Fri, 16 Feb 2018 23:26:20 -0800 (PST) Received: from userp2130.oracle.com (userp2130.oracle.com [156.151.31.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34623126E01 for ; Fri, 16 Feb 2018 23:26:20 -0800 (PST) Received: from pps.filterd (userp2130.oracle.com [127.0.0.1]) by userp2130.oracle.com (8.16.0.22/8.16.0.22) with SMTP id w1H7MWfo124353; Sat, 17 Feb 2018 07:26:18 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=content-type : mime-version : subject : from : in-reply-to : date : cc : content-transfer-encoding : message-id : references : to; s=corp-2017-10-26; bh=frNemUfHKk5srFrdbG8gn9yT6HB2o6pmCfpvZ/R3jzc=; b=tZDGVUIRuBDpC0tPIxLgdETXY8+AdA4yTm1lY/aKiqk6wxXB11sbAkth4zX8y0mCtTB/ c7CVETA9sWiyBWGBHCGCzkl7H4guM6CudDjjRBUTb6/I12LkQx/iHHPZFeKUd6pFK9sa FmfdG0jG0upSFMX/kvet9r3bTSifnJhOS6Tr2PZcUxvMLG0wmWMkKWWNZOSwPBM1jiww YdfnYjgxU7smVu8wW6ZYZbWpvBo1mIwsr6IrvPejHsqgMjkAAWJi8LQQTI8qllHrFTm4 soxUGA5LAgCxlX8be/HTIoeNZyeelqvaP2IyVSiwUCRwkp0yeqSqL6gRzyUTcIOCO1QU Tw== Received: from userv0021.oracle.com (userv0021.oracle.com [156.151.31.71]) by userp2130.oracle.com with ESMTP id 2g6fmgr117-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Sat, 17 Feb 2018 07:26:18 +0000 Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by userv0021.oracle.com (8.14.4/8.14.4) with ESMTP id w1H7QHIL021380 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Sat, 17 Feb 2018 07:26:17 GMT Received: from abhmp0012.oracle.com (abhmp0012.oracle.com [141.146.116.18]) by userv0121.oracle.com (8.14.4/8.13.8) with ESMTP id w1H7QHQk012182; Sat, 17 Feb 2018 07:26:17 GMT Received: from [10.0.1.20] (/24.86.190.97) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 16 Feb 2018 23:26:17 -0800 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (15D60) In-Reply-To: Date: Fri, 16 Feb 2018 23:26:15 -0800 Cc: Yaron Sheffer , SecEvent Content-Transfer-Encoding: quoted-printable Message-Id: <9E2E4BB0-2DA9-482E-8021-2A9AE44DE9D6@oracle.com> References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> To: Anthony Nadalin X-Proofpoint-Virus-Version: vendor=nai engine=5900 definitions=8807 signatures=668673 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1802170098 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Feb 2018 07:26:22 -0000 I support.=20 Phil > On Feb 16, 2018, at 1:54 PM, Anthony Nadalin wrote= : >=20 > I support publication.=20 >=20 > -----Original Message----- > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron Sheff= er > Sent: Monday, February 5, 2018 11:24 AM > To: SecEvent > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 >=20 > First, we would like to thank the authors and the working group members wh= o have been working since Singapore to clarify and resolve several controver= sial topics. With this work behind us, we can now move forward to publicatio= n. >=20 > This is to announce working group last call on this draft (https://urldefe= nse.proofpoint.com/v2/url?u=3Dhttps-3A__na01.safelinks.protection.outlook.co= m_-3Furl-3Dhttps-253A-252F-252Fdatatracker.ietf.org-252Fdoc-252Fdraft-2Dietf= -2Dsecevent-2Dtoken-252F-26data-3D02-257C01-257Ctonynad-2540microsoft.com-25= 7C7b94ae58fd4846df983608d56cce09f2-257Cee3303d7fb734b0c8589bcd847f1c277-257C= 1-257C0-257C636534554543083973-26sdata-3DaepLhPiqIzeQ1H24FQVRucH7zyxRpUy-252= FcKrjTIUE9nw-253D-26reserved-3D0&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7q= IrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DwIOXkkpk= GDDkuROuiY9SRUw12qzKWvV0xVpxBlE-0pc&s=3Dc0ZK2XslvBobg0Iik951SKbUOLTaCaFosrHh= HfXXBOY&e=3D). >=20 > Please send your comments to the list. Even if you are perfectly happy wit= h the draft, please let us know that you support its publication as-is by po= sting to the list. >=20 > Please send your comment within the next two weeks, until Feb. 19. >=20 > Thanks, > Dick and Yaron >=20 > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__na01.safelinks.prot= ection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.ietf.org-252Fmailman-252= Flistinfo-252Fid-2Devent-26data-3D02-257C01-257Ctonynad-2540microsoft.com-25= 7C7b94ae58fd4846df983608d56cce09f2-257Cee3303d7fb734b0c8589bcd847f1c277-257C= 1-257C0-257C636534554543083973-26sdata-3DxDescpbITuwTyzzpS25mnUCvASQj1NCmb3y= brXXg894-253D-26reserved-3D0&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMU= B65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DwIOXkkpkGDDk= uROuiY9SRUw12qzKWvV0xVpxBlE-0pc&s=3D1OYSNt_4H4qNdooSYT5dAPSy5sTBCO6NFo_JQI_s= hz0&e=3D > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI= _JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DwIOXkkpkGDDkuROuiY9= SRUw12qzKWvV0xVpxBlE-0pc&s=3D0gd7eQzSVtqBPjcnstlJbXKUwtOjdhXI05wf3MC7n7g&e=3D= From nobody Sat Feb 17 22:06:03 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3A691242F5 for ; Sat, 17 Feb 2018 22:06:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.617 X-Spam-Level: X-Spam-Status: No, score=-2.617 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTML_OBFUSCATE_10_20=0.093, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SC3K6NEpki2q for ; Sat, 17 Feb 2018 22:06:00 -0800 (PST) Received: from mail-wm0-x236.google.com (mail-wm0-x236.google.com [IPv6:2a00:1450:400c:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0625512426E for ; Sat, 17 Feb 2018 22:05:59 -0800 (PST) Received: by mail-wm0-x236.google.com with SMTP id q83so285308wme.5 for ; Sat, 17 Feb 2018 22:05:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=ToA4MGzpJ7hGrq3wS3bi7kTYZWuOfoDh8/3GqvH0Bnk=; b=i6dPHWo2ueV6CBe0Kuef0NixKmw31Q76yHPukfomVibup01kzKWtRUXmP9oCwAX3Q5 hJpPQwX2RI20ucoKuGwrmB2vAB/MO/OyhAoCZyjQWrUbViOEbw4u01u3HfDVgh6CP7FG fTsh7x7txjN5aqp/v6FfbPnZGnPc+pzfCcqPElFWw96aTo/uKJI69M/tegtz7GQ7HbJK vgriaUfOS+WMTQFyl2kbsI22QvmNNZtzSwXR/kcKoXRDFWlgk8WKX5kudbw+W6s3Nz0L H8oF+8eIoDzcuHbAenV1IwNj0gfH4HQ7zLUbXgur9Tq6Bvq8f9jdpa7jVqY/9uNRS4Ix 28Fg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=ToA4MGzpJ7hGrq3wS3bi7kTYZWuOfoDh8/3GqvH0Bnk=; b=afm+DMph0yLqA+8jyc+qHT99M6sO0EHj9b5HwxHPHiySr5RyhTz378wp1cviBbgY1Z CI0B+diRD9/W5uVpmujh6BriRcZHZuAc2uUdcFxTxgI18+gAYtqBPdb/2RDes+0fL2go hhN4z6ukiLDdSTrV4sh4sl3rtA4PVD87FCIjLm9ofhNbqkHZj7YcHDSwCrYqChcPLqhA mc/07SibvseGIZzW0j3l6u1zUU/VV7wI0QXBxbzSnj26DrwPKNykc+xPyFfBaOnxbvoo LiXByLUH9vWnKoMSkXwc+Ln+o3e9qMDBw1I1wDqUnk9FfusvaV4qXmN1UXoflVErD5dr UN+Q== X-Gm-Message-State: APf1xPAXAQz68r5eEoImNaud5/9lDATi7nxBNGJFvywUD5lXpcX//+Es YbnmY3XVwcWqWagIHHEB3zKztRndZnGgfmf/fookeA== X-Google-Smtp-Source: AH8x225iGvPVTc1sTh+gQoFe8JKDks8R0+YnC4dXxUrzlj5NWzHKin50a8MF4hhF1raeac+GlHO7qRq4hQdnycY437s= X-Received: by 10.28.125.150 with SMTP id y144mr1835406wmc.75.1518933958016; Sat, 17 Feb 2018 22:05:58 -0800 (PST) MIME-Version: 1.0 Received: by 10.28.114.24 with HTTP; Sat, 17 Feb 2018 22:05:57 -0800 (PST) Received: by 10.28.114.24 with HTTP; Sat, 17 Feb 2018 22:05:57 -0800 (PST) In-Reply-To: <9E2E4BB0-2DA9-482E-8021-2A9AE44DE9D6@oracle.com> References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9E2E4BB0-2DA9-482E-8021-2A9AE44DE9D6@oracle.com> From: Adam Dawes Date: Sat, 17 Feb 2018 22:05:57 -0800 Message-ID: To: Phil Hunt Cc: Anthony Nadalin , Yaron Sheffer , SecEvent Content-Type: multipart/alternative; boundary="001a1141a23a01c4df0565765fb2" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 06:06:02 -0000 --001a1141a23a01c4df0565765fb2 Content-Type: text/plain; charset="UTF-8" I support. ------- sent from my hand phone On Feb 16, 2018 11:26 PM, "Phil Hunt" wrote: > I support. > > Phil > > > On Feb 16, 2018, at 1:54 PM, Anthony Nadalin > wrote: > > > > I support publication. > > > > -----Original Message----- > > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of Yaron > Sheffer > > Sent: Monday, February 5, 2018 11:24 AM > > To: SecEvent > > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > > > First, we would like to thank the authors and the working group members > who have been working since Singapore to clarify and resolve several > controversial topics. With this work behind us, we can now move forward to > publication. > > > > This is to announce working group last call on this draft ( > https://urldefense.proofpoint.com/v2/url?u=https- > 3A__na01.safelinks.protection.outlook.com_-3Furl-3Dhttps- > 253A-252F-252Fdatatracker.ietf.org-252Fdoc-252Fdraft- > 2Dietf-2Dsecevent-2Dtoken-252F-26data-3D02-257C01- > 257Ctonynad-2540microsoft.com-257C7b94ae58fd4846df983608d56cce09f2- > 257Cee3303d7fb734b0c8589bcd847f1c277-257C1-257C0-257C636534554543083973- > 26sdata-3DaepLhPiqIzeQ1H24FQVRucH7zyxRpUy-252FcKrjTIUE9nw-253D- > 26reserved-3D0&d=DwIGaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r= > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m= > wIOXkkpkGDDkuROuiY9SRUw12qzKWvV0xVpxBlE-0pc&s= > c0ZK2XslvBobg0Iik951SKbUOLTaCaFosrHhHfXXBOY&e=). > > > > Please send your comments to the list. Even if you are perfectly happy > with the draft, please let us know that you support its publication as-is > by posting to the list. > > > > Please send your comment within the next two weeks, until Feb. 19. > > > > Thanks, > > Dick and Yaron > > > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=https-3A__na01. > safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F- > 252Fwww.ietf.org-252Fmailman-252Flistinfo-252Fid-2Devent- > 26data-3D02-257C01-257Ctonynad-2540microsoft.com- > 257C7b94ae58fd4846df983608d56cce09f2-257Cee3303d7fb734b0c8589bcd847 > f1c277-257C1-257C0-257C636534554543083973-26sdata- > 3DxDescpbITuwTyzzpS25mnUCvASQj1NCmb3ybrXXg894-253D- > 26reserved-3D0&d=DwIGaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r= > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m= > wIOXkkpkGDDkuROuiY9SRUw12qzKWvV0xVpxBlE-0pc&s=1OYSNt_ > 4H4qNdooSYT5dAPSy5sTBCO6NFo_JQI_shz0&e= > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=https-3A__www. > ietf.org_mailman_listinfo_id-2Devent&d=DwIGaQ&c= > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r= > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m= > wIOXkkpkGDDkuROuiY9SRUw12qzKWvV0xVpxBlE-0pc&s= > 0gd7eQzSVtqBPjcnstlJbXKUwtOjdhXI05wf3MC7n7g&e= > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --001a1141a23a01c4df0565765fb2 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I support.=C2=A0

-------
sent from my hand phone

On Feb 16, 2018 11:26 PM, "Phil Hu= nt" <phil.hunt@oracle.com> wrote:
I supp= ort.

Phil

> On Feb 16, 2018, at 1:54 PM, Anthony Nadalin <tonynad@microsoft.com> wrote:
>
> I support publication.
>
> -----Original Message-----
> From: Id-event [mailto:id= -event-bounces@ietf.org] On Behalf Of Yaron Sheffer
> Sent: Monday, February 5, 2018 11:24 AM
> To: SecEvent <id-event@ietf.or= g>
> Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05
>
> First, we would like to thank the authors and the working group member= s who have been working since Singapore to clarify and resolve several cont= roversial topics. With this work behind us, we can now move forward to publ= ication.
>
> This is to announce working group last call on this draft (https://urldefense.proofpoint.com/v2/url?u=3D= https-3A__na01.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fdatatracker.ietf.org-252Fdoc-252Fdraft-2Dietf-2D= secevent-2Dtoken-252F-26data-3D02-257C01-257Ctonynad-2540microsof= t.com-257C7b94ae58fd4846df983608d56cce09f2-257Cee3303d7fb734= b0c8589bcd847f1c277-257C1-257C0-257C636534554543083973-26sda= ta-3DaepLhPiqIzeQ1H24FQVRucH7zyxRpUy-252FcKrjTIUE9nw-253D-26= reserved-3D0&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZN= A&m=3DwIOXkkpkGDDkuROuiY9SRUw12qzKWvV0xVpxBlE-0pc&s=3Dc0ZK2XslvBobg0Iik951SKbUOLTaCaFosrHhHfXXBOY&e=3D).
>
> Please send your comments to the list. Even if you are perfectly happy= with the draft, please let us know that you support its publication as-is = by posting to the list.
>
> Please send your comment within the next two weeks, until Feb. 19.
>
> Thanks,
>=C2=A0 =C2=A0 =C2=A0Dick and Yaron
>
> _______________________________________________
> Id-event mailing list
> Id-event@ietf.org
> https://urldefense.proofpoint.com/v2/url?u=3Dhttps-= 3A__na01.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252= F-252Fwww.ietf.org-252Fmailman-252Flistinfo-252Fid-2Devent-2= 6data-3D02-257C01-257Ctonynad-2540microsoft.com-257C7b94ae58fd484= 6df983608d56cce09f2-257Cee3303d7fb734b0c8589bcd847f1c277-257= C1-257C0-257C636534554543083973-26sdata-3DxDescpbITuwTyzzpS2= 5mnUCvASQj1NCmb3ybrXXg894-253D-26reserved-3D0&d=3DDwIGaQ&= c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5F= VzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DwIOXkkpkGDDkuROui= Y9SRUw12qzKWvV0xVpxBlE-0pc&s=3D1OYSNt_4H4qNdooSYT5dAPSy5sTBCO= 6NFo_JQI_shz0&e=3D
> _______________________________________________
> Id-event mailing list
> Id-event@ietf.org
> https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1= YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4= DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DwIOXkkpkGDDkuROuiY9SRUw12qzKWv= V0xVpxBlE-0pc&s=3D0gd7eQzSVtqBPjcnstlJbXKUwtOjdhXI05wf3M= C7n7g&e=3D

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--001a1141a23a01c4df0565765fb2-- From nobody Sun Feb 18 01:38:03 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B54B2126DEE for ; Sun, 18 Feb 2018 01:38:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id of8mSC4gU1-a for ; Sun, 18 Feb 2018 01:38:00 -0800 (PST) Received: from p3plsmtpa11-09.prod.phx3.secureserver.net (p3plsmtpa11-09.prod.phx3.secureserver.net [68.178.252.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6634F124D6C for ; Sun, 18 Feb 2018 01:38:00 -0800 (PST) Received: from [192.168.102.112] ([77.85.62.66]) by :SMTPAUTH: with SMTP id nLPweaxVBN0hKnLPyeNo6t; Sun, 18 Feb 2018 02:37:59 -0700 To: id-event@ietf.org References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> From: Vladimir Dzhuvinov Organization: Connect2id Ltd. Message-ID: <5ef07e7a-3233-cb5f-f7c8-ee8746302e23@connect2id.com> Date: Sun, 18 Feb 2018 11:37:55 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms090907040402050408080704" X-CMAE-Envelope: MS4wfFgAjKNU4UQT73Q4BJFthozf9wulPzqClLJFESXNHIrmvVcn9RLoGGrjovnKqNlnfRfVI7uWtzatI4FEU/IAyN9CmEzV8j09lmNDO6ai4ByhsAwAccyQ VqWx+FVe+1f8kQGhPIXolBZhgaOkIACOtLX5w6CU52pgzIDf/aoXyaTV Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 09:38:02 -0000 This is a cryptographically signed message in MIME format. --------------ms090907040402050408080704 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US I support publication. Thanks, Vladimir On 05/02/18 21:24, Yaron Sheffer wrote: > First, we would like to thank the authors and the working group > members who have been working since Singapore to clarify and resolve > several controversial topics. With this work behind us, we can now > move forward to publication. > > This is to announce working group last call on this draft > (https://datatracker.ietf.org/doc/draft-ietf-secevent-token/). > > Please send your comments to the list. Even if you are perfectly happy > with the draft, please let us know that you support its publication > as-is by posting to the list. > > Please send your comment within the next two weeks, until Feb. 19. > > Thanks, > =C2=A0=C2=A0=C2=A0 Dick and Yaron > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event --------------ms090907040402050408080704 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CfwwggSvMIIDl6ADAgECAhEA4CPLFRKDU4mtYW56VGdrITANBgkqhkiG9w0BAQsFADBvMQsw CQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4 dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290 MB4XDTE0MTIyMjAwMDAwMFoXDTIwMDUzMDEwNDgzOFowgZsxCzAJBgNVBAYTAkdCMRswGQYD VQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNP TU9ETyBDQSBMaW1pdGVkMUEwPwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAImxDdp6UxlOcFIdvFamBia3uEngludRq/HwWhNJFaO0jBtgvHpRQqd5jKQi3xdh TpHVdiMKFNNKAn+2HQmAbqUEPdm6uxb+oYepLkNSQxZ8rzJQyKZPWukI2M+TJZx7iOgwZOak +FaA/SokFDMXmaxE5WmLo0YGS8Iz1OlAnwawsayTQLm1CJM6nCpToxDbPSBhPFUDjtlOdiUC ISn6o3xxdk/u4V+B6ftUgNvDezVSt4TeIj0sMC0xf1m9UjewM2ktQ+v61qXxl3dnUYzZ7ifr vKUHOHaMpKk4/9+M9QOsSb7K93OZOg8yq5yVOhM9DkY6V3RhUL7GQD/L5OKfoiECAwEAAaOC ARcwggETMB8GA1UdIwQYMBaAFK29mHo0tCb3+sQmVO8DveAky1QaMB0GA1UdDgQWBBSSYWuC 4aKgqk/sZ/HCo/e0gADB7DAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEQYDVR0gBAowCDAGBgRVHSAAMEQGA1Ud HwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4dGVybmFs Q0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz ZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQELBQADggEBABsqbqxVwTqriMXY7c1V86prYSvACRAj mQ/FZmpvsfW0tXdeDwJhAN99Bf4Ss6SAgAD8+x1banICCkG8BbrBWNUmwurVTYT7/oKYz1gb 4yJjnFL4uwU2q31Ypd6rO2Pl2tVz7+zg+3vio//wQiOcyraNTT7kSxgDsqgt1Ni7QkuQaYUQ 26Y3NOh74AEQpZzKOsefT4g0bopl0BqKu6ncyso20fT8wmQpNa/WsadxEdIDQ7GPPprsnjJT 9HaSyoY0B7ksyuYcStiZDcGG4pCS+1pCaiMhEOllx/XVu37qjIUgAmLq0ToHLFnFmTPyOInl tukWeh95FPZKEBom+nyK+5swggVFMIIELaADAgECAhAlSsBX16i/yGZZkfkyj/exMA0GCSqG SIb3DQEBCwUAMIGbMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVy MRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UE AxM4Q09NT0RPIFNIQS0yNTYgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0EwHhcNMTcwNDA2MDAwMDAwWhcNMTgwNDA2MjM1OTU5WjAoMSYwJAYJKoZIhvcNAQkB Fhd2bGFkaW1pckBjb25uZWN0MmlkLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHntIxpX2yNwHUcSrxfJihY9EtYTwC4VArv/C03YlEV92AQljLFYVKtRp+iKT8WDKo2 CqzPYaIHbKD0ivoou0qXQgv4yOk8rQxFmpTzCCe2c1KercueHfy595CnMz1u8GsQyblZqFMD HmzoEvD1YZiI3FEh049tVixBnHwPD9fyiGlf8+QdjwmBLMQwdrrib7xcswNXKYIsfj6Qm5oa d83bsz8VmYm5U39DbNPh01SzqAzwZt3jMuhy0su7lMs75lKYzWMA7b/9qrp40E3vR0yDvOn5 7Ijs+LFE2wPDTebVVfYT+m24e5/v/2w6sX5g/6oJsZnwPM737zIXV7x6jqECAwEAAaOCAfUw ggHxMB8GA1UdIwQYMBaAFJJha4LhoqCqT+xn8cKj97SAAMHsMB0GA1UdDgQWBBQA+4E14UMY HyjzXHClSV9VfWHpPzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAgBgNVHSUEGTAX BggrBgEFBQcDBAYLKwYBBAGyMQEDBQIwEQYJYIZIAYb4QgEBBAQDAgUgMEYGA1UdIAQ/MD0w OwYMKwYBBAGyMQECAQEBMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5u ZXQvQ1BTMF0GA1UdHwRWMFQwUqBQoE6GTGh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NPTU9E T1NIQTI1NkNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcmwwgZAGCCsG AQUFBwEBBIGDMIGAMFgGCCsGAQUFBzAChkxodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01P RE9TSEEyNTZDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3J0MCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wIgYDVR0RBBswGYEXdmxhZGltaXJA Y29ubmVjdDJpZC5jb20wDQYJKoZIhvcNAQELBQADggEBACYLv9z6ZOucvt5MlRhNY6SJISDN 880UmdH7IdeP2kJjS3GwuVaVUCQY/frypeIm3A+y0fKEVNJAJO7tfL88yOW4wjA9JMGokpy5 RswZ0uikkNSOt6CF3YGagsfr4VnrcoUxCH+FoGZcWvWYHajJy+QkVG2i6XvsTE7jv1PIsoDU SJuCW+Dvg6iJI9Etpfv1ZrBeDEL05PkPBZfazKMj4MkVirkfbG3qgbzRzAb+7Vsm309NKQ+i EUfoxt83ByC6+URLl3PoR2UTZv7M1JQmTtaQWe1LrAEKlBGHkfnSlxueLnmpCUJRS7Ldyfh5 60OdVFcB5twXPnYWtoZfdTlbv5oxggRBMIIEPQIBATCBsDCBmzELMAkGA1UEBhMCR0IxGzAZ BgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR Q09NT0RPIENBIExpbWl0ZWQxQTA/BgNVBAMTOENPTU9ETyBTSEEtMjU2IENsaWVudCBBdXRo ZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhAlSsBX16i/yGZZkfkyj/exMA0GCWCG SAFlAwQCAQUAoIICYTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP Fw0xODAyMTgwOTM3NTZaMC8GCSqGSIb3DQEJBDEiBCCfGjUP+7PYCXRdwwAmpHpJQQcUq+cF DXYypf8qQD43jzBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIw CgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0G CCqGSIb3DQMCAgEoMIHBBgkrBgEEAYI3EAQxgbMwgbAwgZsxCzAJBgNVBAYTAkdCMRswGQYD VQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNP TU9ETyBDQSBMaW1pdGVkMUEwPwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQJUrAV9eov8hmWZH5Mo/3sTCBwwYLKoZI hvcNAQkQAgsxgbOggbAwgZsxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNo ZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMUEw PwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3Vy ZSBFbWFpbCBDQQIQJUrAV9eov8hmWZH5Mo/3sTANBgkqhkiG9w0BAQEFAASCAQBtPZ0H6AYa dfR3efzArwY5bcr88ch8wrKTlnrVht0QF/y7z3pbic7jSaRHups2NarCNuxqvRDXeMJVWJ8L Yt67mHyd5CJm7/L9LKm1QFG4R1dP3qoPMvKGhTbvncg2kV7Fk/ds3TT1wgwYUBtTV0D0ZIhQ 7lw5x1mbtCY2n1B16aWSxWqVEeOJ24jFVVjwM7Z9kjoQCVnANJA2cC937uH1qZ2xgxmIR6qr TOQbMR/d7jB4i1JMUD973Yo7dZTTSuF5ynoiJYBKfTh0NfQHeCA9hI7T+uN/pK4FGT+lJKZj aGumTmqJ+5hl6fV6SrwzhB75pSm3yq9uas+EV2IHoYYpAAAAAAAA --------------ms090907040402050408080704-- From nobody Tue Feb 20 10:45:30 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27C7212D96A for ; Tue, 20 Feb 2018 10:45:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.53 X-Spam-Level: X-Spam-Status: No, score=-14.53 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rQHX2RLebMms for ; Tue, 20 Feb 2018 10:45:28 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9520124319 for ; Tue, 20 Feb 2018 10:45:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2374; q=dns/txt; s=iport; t=1519152327; x=1520361927; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=puorfoQSfOw9x1Yka1dmPyObx8TmIRMcNaI9UFuQQF8=; b=VQ/vKXMfcH6/KP+RS8FREliCD2B0kVSzZ+PKNJ7/b9L76J25DWn2oR1T z9ut0cSEZx8KWp/2yKdweP5Kznpp0IhrtOUCNzgTH0Os28JPJEuMo9Bny 7wFOH9eZ5YuzS+oNosUNMTGZzpabhvu3hnS/hygGqurYPwgT3Jy5sckAb w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BYAQBAbIxa/4kNJK1cGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAYNPZnAoCoNdiiWOB4FbJ4EXh3+OSoIWChgLhRgCGoJSVBg?= =?us-ascii?q?BAgEBAQEBAQJrKIUjAQEBBAEBGwYROhcEAgEIEQQBAQMCIwMCAgIfBgsUAQg?= =?us-ascii?q?IAgQBEooLAxUQrRSCJ4UBgjwNgTKCEwEBAQEBAQEBAQEBAQEBAQEBAQEBARg?= =?us-ascii?q?FgQ+Df4IogVeCEQyCeYJsRAEBAwGBbYMXMYI0BaQANQkCiCKIW4ULgiCGKot?= =?us-ascii?q?9jgZIiSQCERkBgTsBHzmBUXAVOioBghiEdniMB4EZAQEB?= X-IronPort-AV: E=Sophos;i="5.46,540,1511827200"; d="scan'208";a="356511984" Received: from alln-core-4.cisco.com ([173.36.13.137]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Feb 2018 18:45:26 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id w1KIjQ11007413 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 20 Feb 2018 18:45:26 GMT Received: from xch-rcd-004.cisco.com (173.37.102.14) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 20 Feb 2018 12:45:26 -0600 Received: from xch-rcd-004.cisco.com ([173.37.102.14]) by XCH-RCD-004.cisco.com ([173.37.102.14]) with mapi id 15.00.1320.000; Tue, 20 Feb 2018 12:45:25 -0600 From: "Morteza Ansari (moransar)" To: Yaron Sheffer , SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-05 Thread-Index: AQHTnrbqZ2hrQYYAxEmlgYKjWADA36OWniEAgA/npACABxE2gA== Date: Tue, 20 Feb 2018 18:45:25 +0000 Message-ID: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <5f0ac0fd-d971-b73c-cc1e-6210193a7eec@gmail.com> In-Reply-To: <5f0ac0fd-d971-b73c-cc1e-6210193a7eec@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.9.0.180116 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.24.22.134] Content-Type: text/plain; charset="utf-8" Content-ID: <1B22B1A844F4734F92EE59FDE4AB3B6B@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Feb 2018 18:45:29 -0000 U29ycnkgZm9yIGdldHRpbmcgdG8gdGhpcyBsYXRlISBJIHN1cHBvcnQgcHVibGljYXRpb24gYXMg d2VsbC4NCg0KDQpDaGVlcnMsDQpNb3J0ZXphDQoNCu+7v09uIDIvMTUvMTgsIDI6NTAgUE0sICJJ ZC1ldmVudCBvbiBiZWhhbGYgb2YgWWFyb24gU2hlZmZlciIgPGlkLWV2ZW50LWJvdW5jZXNAaWV0 Zi5vcmcgb24gYmVoYWxmIG9mIHlhcm9uZi5pZXRmQGdtYWlsLmNvbT4gd3JvdGU6DQoNCiAgICBR dWljayByZW1pbmRlcjogdGhpcyBsYXN0IGNhbGwgaXMgb3BlbiB1bnRpbCBGZWIuIDE5LiBJZiB5 b3UgaGF2ZW4ndCANCiAgICB5ZXQsIHBsZWFzZSBsZXQgdXMga25vdyBpZiB5b3Ugc3VwcG9ydCBw dWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50Lg0KICAgIA0KICAgIFRoYW5rcywNCiAgICAJWWFy b24NCiAgICANCiAgICA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgPiBGcm9tOiBJ ZC1ldmVudCBbbWFpbHRvOmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBZ YXJvbiBTaGVmZmVyDQogICAgPiBTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDUsIDIwMTggMTE6MjQg QU0NCiAgICA+IFRvOiBTZWNFdmVudCA8aWQtZXZlbnRAaWV0Zi5vcmc+DQogICAgPiBTdWJqZWN0 OiBbSWQtZXZlbnRdIFdHIExhc3QgQ2FsbCBmb3IgZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0w NQ0KICAgID4gDQogICAgPiBGaXJzdCwgd2Ugd291bGQgbGlrZSB0byB0aGFuayB0aGUgYXV0aG9y cyBhbmQgdGhlIHdvcmtpbmcgZ3JvdXAgbWVtYmVycyB3aG8gaGF2ZSBiZWVuIHdvcmtpbmcgc2lu Y2UgU2luZ2Fwb3JlIHRvIGNsYXJpZnkgYW5kIHJlc29sdmUgc2V2ZXJhbCBjb250cm92ZXJzaWFs IHRvcGljcy4gV2l0aCB0aGlzIHdvcmsgYmVoaW5kIHVzLCB3ZSBjYW4gbm93IG1vdmUgZm9yd2Fy ZCB0byBwdWJsaWNhdGlvbi4NCiAgICA+IA0KICAgID4gVGhpcyBpcyB0byBhbm5vdW5jZSB3b3Jr aW5nIGdyb3VwIGxhc3QgY2FsbCBvbiB0aGlzIGRyYWZ0IChodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9kcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLykuDQogICAgPiANCiAgICA+IFBs ZWFzZSBzZW5kIHlvdXIgY29tbWVudHMgdG8gdGhlIGxpc3QuIEV2ZW4gaWYgeW91IGFyZSBwZXJm ZWN0bHkgaGFwcHkgd2l0aCB0aGUgZHJhZnQsIHBsZWFzZSBsZXQgdXMga25vdyB0aGF0IHlvdSBz dXBwb3J0IGl0cyBwdWJsaWNhdGlvbiBhcy1pcyBieSBwb3N0aW5nIHRvIHRoZSBsaXN0Lg0KICAg ID4gDQogICAgPiBQbGVhc2Ugc2VuZCB5b3VyIGNvbW1lbnQgd2l0aGluIHRoZSBuZXh0IHR3byB3 ZWVrcywgdW50aWwgRmViLiAxOS4NCiAgICA+IA0KICAgID4gVGhhbmtzLA0KICAgID4gICAgICAg RGljayBhbmQgWWFyb24NCiAgICA+IA0KICAgID4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCiAgICA+IElkLWV2ZW50IG1haWxpbmcgbGlzdA0KICAgID4g SWQtZXZlbnRAaWV0Zi5vcmcNCiAgICA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vaWQtZXZlbnQNCiAgICA+IA0KICAgIA0KICAgIF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQogICAgSWQtZXZlbnQgbWFpbGluZyBsaXN0DQogICAg SWQtZXZlbnRAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2lkLWV2ZW50DQogICAgDQoNCg== From nobody Tue Feb 27 15:13:39 2018 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 175E812EAA3; Tue, 27 Feb 2018 15:11:11 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: Kathleen.Moriarty.ietf@gmail.com, id-event@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151977307108.5200.3945393996991632418.idtracker@ietfa.amsl.com> Date: Tue, 27 Feb 2018 15:11:11 -0800 Archived-At: Subject: [Id-event] secevent - Requested session has been scheduled for IETF 101 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 23:11:11 -0000 Dear Yaron Sheffer, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. secevent Session 1 (2:00:00) Friday, Morning Session I 0930-1130 Room Name: Park Suite size: 100 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Security Events Area Name: Security Area Session Requester: Yaron Sheffer Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: saag httpbis dispatch oauth tokbind tls acme Second Priority: ipsecme sacm ace People who must be present: Yaron Sheffer Kathleen Moriarty Dick Hardt Resources Requested: Special Requests: Please avoid cfrg. --------------------------------------------------------- From nobody Tue Feb 27 15:38:03 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1BB512EA54 for ; Tue, 27 Feb 2018 15:38:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QhRUbULcqrvt for ; Tue, 27 Feb 2018 15:37:58 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0117.outbound.protection.outlook.com [104.47.32.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C65A12D892 for ; Tue, 27 Feb 2018 15:37:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=RK/wL/y951O17OnFqCGXuR+qpCQsQsPXxwu32zEy/ko=; b=g2NWB/o6sqRNblVSc+dZn0gaH8aiySQtXPyjHht0wpsZchbYyRYASZzQeqZ1OWFJBT3o3kwOoJAj2g+c6AOAfDEZbeW9crSZwrSZB4qxeFEj6UA057KS9xNMI76K3hHpHxnBTSQZ2+zWOc+K9KwHcITqG4pyvJzXFzynyqgQQU4= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1085.namprd21.prod.outlook.com (52.132.115.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.2; Tue, 27 Feb 2018 23:37:56 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Tue, 27 Feb 2018 23:37:56 +0000 From: Mike Jones To: Marius Scurtescu , "Richard Backman, Annabelle" CC: Phil Hunt , Yaron Sheffer , SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-05 Thread-Index: AQHTnrboZGlv7WjXXUqAp/XotWZJi6OWOXowgAAKHACAAAGIgIAAA2eAgCLBRFA= Date: Tue, 27 Feb 2018 23:37:56 +0000 Message-ID: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-27T23:37:54.4039740Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:b::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1085; 7:anAPX0X6FgyilFcnQxEzN7tx/XR7ANp08GFxuHIvYuegye1JM2Nx7IQpIJvkpDhcR+Wk9ge5ProGq43CLWAQDzh7vFzrYJ/qSXfzJTkvQUBACfy3iGUYF1NxOD9K+BusKNO9vRItRDieLMzPJzGxbAAjAlHKH/L3cmKyUsRsOe9m+L6dkN0A39TUrzPz76inJjNont01AAAl9BGNdbMLPfuwd4IWT19S59k1+3A1Ck4mBrJUYt1xNfNRUIAXwxrC x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d79ffc65-d7e0-4487-4a07-08d57e3b20ea x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1085; x-ms-traffictypediagnostic: SN6PR2101MB1085: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(10436049006162)(89211679590171)(166708455590820)(192374486261705)(33061846794335)(85827821059158)(211936372134217)(153496737603132)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(3231220)(944501208)(52105095)(6055026)(61426038)(61427038)(6041288)(20161123564045)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:SN6PR2101MB1085; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1085; x-forefront-prvs: 05961EBAFC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39860400002)(39380400002)(346002)(396003)(376002)(199004)(189003)(13464003)(57704003)(72206003)(86612001)(6346003)(86362001)(105586002)(316002)(5250100002)(3280700002)(22452003)(14454004)(186003)(25786009)(68736007)(575784001)(2900100001)(39060400002)(59450400001)(4326008)(6506007)(53546011)(102836004)(97736004)(966005)(93886005)(5660300001)(106356001)(110136005)(54906003)(9686003)(54896002)(53936002)(606006)(6306002)(8936002)(10090500001)(2950100002)(7736002)(8990500004)(55016002)(6436002)(6246003)(229853002)(10290500003)(99286004)(790700001)(6116002)(7696005)(2906002)(81166006)(8676002)(478600001)(33656002)(81156014)(19609705001)(3660700001)(76176011)(236005)(74316002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1085; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: BP89aXl2b0z/ya776jzeUUNg966WT+YJfSzPrHjZzv7Jpf/Rj8s7KJNnJyM9nBPDWtEorR6zVJkoBfkQXEeZ3A9eXiy+uocvWd+eQT+9KnEi+qu/z59YMiS8zvrBaHUZF1Vf/8p3RdmXAbJfcVQCr9jwFdy2zguPD+sOgNW4NBs= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943C1569B8FD068F2ADDE60F5C00SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: d79ffc65-d7e0-4487-4a07-08d57e3b20ea X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2018 23:37:56.1607 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1085 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 23:38:01 -0000 --_000_SN6PR2101MB0943C1569B8FD068F2ADDE60F5C00SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UGxlYXNlIHNlZSBodHRwczovL2dpdGh1Yi5jb20vaW5kZXBlbmRlbnRpZC9JZGVudGl0eS1FdmVu dHMvcHVsbC8xMSBmb3IgZWRpdHMgdGhhdCBhcmUgaW50ZW5kZWQgdG8gYWRkcmVzcyB0aGUgV0dM QyBjb21tZW50cyByZWNlaXZlZC4NCg0KTWFyaXVzLCBJIGRvbuKAmXQgdGhpbmsgd2UgbmVlZCBh IGZvcm1hbCBkZWZpbml0aW9uIG9mIOKAnGV2ZW50IGlkZW50aWZpZXLigJ0gYmVjYXVzZSBpdOKA mXMgY2xlYXJseSBkZWZpbmVkIGJ5IHRoaXMgdXNhZ2UgaW4gU2VjdGlvbiAyIChUaGUgU2VjdXJp dHkgRXZlbnQgVG9rZW4gKFNFVCk6DQpFYWNoIG1lbWJlciBvZiB0aGUgZXZlbnRzIEpTT04gb2Jq ZWN0IGlzIGEgbmFtZS92YWx1ZSBwYWlyLiBUaGUgSlNPTiBtZW1iZXIgbmFtZSBpcyBhIFVSSSBz dHJpbmcgdmFsdWUsIHdoaWNoIGlzIHRoZSBldmVudCBpZGVudGlmaWVyLCBhbmQgdGhlIGNvcnJl c3BvbmRpbmcgdmFsdWUgaXMgYSBKU09OIG9iamVjdCBrbm93biBhcyB0aGUgZXZlbnQgInBheWxv YWQiLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgVGhhbmtzIGFsbCwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IE1hcml1 cyBTY3VydGVzY3UgPG1zY3VydGVzY3VAZ29vZ2xlLmNvbT4NClNlbnQ6IE1vbmRheSwgRmVicnVh cnkgNSwgMjAxOCAxMjo1MSBQTQ0KVG86IFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNo YW5uYUBhbWF6b24uY29tPg0KQ2M6IFBoaWwgSHVudCA8cGhpbC5odW50QG9yYWNsZS5jb20+OyBN aWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+OyBZYXJvbiBTaGVmZmVyIDx5 YXJvbmYuaWV0ZkBnbWFpbC5jb20+OyBTZWNFdmVudCA8aWQtZXZlbnRAaWV0Zi5vcmc+DQpTdWJq ZWN0OiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0IENhbGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQt dG9rZW4tMDUNCg0KWWVzLCBsZXQncyBtYWtlIGZpbmFsIGZpeGVzIGFuZCBtb3ZlIGZvcndhcmQu DQoNCkEgY291cGxlIG9mIG1pbm9yIG5pdHM6DQotIGluIHRoZSAiZXZlbnRzIiBkZWZpbml0aW9u LCBJIGRvbid0IHRoaW5rICJNdWx0aXBsZSBldmVudCBpZGVudGlmaWVycyB3aXRoIHRoZSBzYW1l IHZhbHVlIE1VU1QgTk9UIGJlIHVzZWQuIiBpcyBuZWVkZWQsIHNpbmNlIHRoYXQgaXMgbm90IHBv c3NpYmxlIGFueWhvdyAoYXNzdW1pbmcgSSByZWFkIHRoZSBzdGF0ZW1lbnQgY29ycmVjdGx5KQ0K LSBkbyB3ZSBuZWVkIGEgZm9ybWFsIGRlZmluaXRpb24gZm9yICJldmVudCBpZGVudGlmaWVyIj8N Cg0KDQpNYXJpdXMNCg0KT24gTW9uLCBGZWIgNSwgMjAxOCBhdCAxMjozOCBQTSwgUmljaGFyZCBC YWNrbWFuLCBBbm5hYmVsbGUgPHJpY2hhbm5hQGFtYXpvbi5jb208bWFpbHRvOnJpY2hhbm5hQGFt YXpvbi5jb20+PiB3cm90ZToNCkknZCBsaWtlIHRvIHNlZSBpdGVtIDEgYmVsb3cgYWRkcmVzc2Vk IGJlZm9yZSBwdWJsaXNoaW5nLCBhcyBpdCBhbHRlcnMgKGNvcnJlY3RzKSB0aGUgbWVhbmluZyBv ZiB0aGUgdGV4dC4NCg0KT25lIGVycm9yOg0KMS4gIEluIHRoZSAiaWF0IiBkZWZpbml0aW9uIGlu IHNlY3Rpb24gMi4yOiBjaGFuZ2UgIi4uLndoZW4gdGhlIGV2ZW50IHdhcyBpc3N1ZWQuIiB0byAi Li4ud2hlbiB0aGUgU0VUIHdhcyBpc3N1ZWQuIg0KDQpPbmUgY2xhcmlmaWNhdGlvbjoNCjIuICBU aGUgMm5kIHRvIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gMi40IHN0YXRlcyAidGhlIEV2ZW50 IFJlY2lwaWVudCBNVVNUIiBlbnN1cmUgaW50ZWdyaXR5LCBjb25maWRlbnRpYWxpdHksIGV0Yy4g SXNuJ3QgdGhpcyBwcm9wZXJseSB0aGUgaXNzdWVyJ3MgcmVzcG9uc2liaWxpdHk/IE9yIGJvdGg/ DQoNCkEgaGFuZGZ1bCBvZiBuaXRzOg0KMy4gIFRoZSAiYXVkIiBkZWZpbml0aW9uIGluIHNlY3Rp b24gMi4yIGlzIGF3a3dhcmRseSB3cml0dGVuOyBJIHN1Z2dlc3QgcmVwaHJhc2luZyBpdCB0byBt aXJyb3IgdGhlICJpYXQiIGRlZmluaXRpb24uDQo0LiAgTWlzc2luZyAidGhlIiBpbiB0aGUgImV4 cCIgZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDIuMjogInRoaXMgY2xhaW0gaXMgdGltZSIgLT4gInRo aXMgY2xhaW0gaXMgdGhlIHRpbWUiDQo1LiAgU3ludGF4IGVycm9yIGluIHRoZSAzcmQgbGlzdCBp dGVtIG9mIHNlY3Rpb24gMjogIi4uLmlzIGEgVVJJIHN0cmluZyB2YWx1ZSBpcyBhbiBldmVudCBp ZGVudGlmaWVyLi4uIg0KNi4gIEluY29uc2lzdGVudCB1c2Ugb2YgdGVybXMgZm9yIGlzc3Vlciwg cmVjaXBpZW50LCBzdWJqZWN0LiBBdCB0aGUgdmVyeSBsZWFzdCB3ZSBzaG91bGQgaGF2ZSBjb25z aXN0ZW50IGNhcGl0YWxpemF0aW9uOg0KICBhLiAgSXNzdWVyLCBpc3N1ZXIsIEV2ZW50IElzc3Vl ciwgU0VUIElzc3Vlcg0KICBiLiAgUmVjaXBpZW50LCByZWNpcGllbnQsIEV2ZW50IFJlY2lwaWVu dA0KICBjLiAgU3ViamVjdCwgc3ViamVjdCwgU2VjdXJpdHkgU3ViamVjdCwgc2VjdXJpdHkgc3Vi amVjdCwgZXZlbnQgU3ViamVjdCwgZXZlbnQgc3ViamVjdA0KDQpPSywgSSdtIHB1dHRpbmcgYXdh eSB0aGUgcmVkIHBlbiBub3cuIDopDQoNCi0tDQpBbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFuDQpB bWF6b24g4oCTIElkZW50aXR5IFNlcnZpY2VzDQoNCu+7v09uIDIvNS8xOCwgMTI6MzMgUE0sICJJ ZC1ldmVudCBvbiBiZWhhbGYgb2YgUGhpbCBIdW50IiA8aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9y ZzxtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIHBoaWwuaHVu dEBvcmFjbGUuY29tPG1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQogICAg KzEuIExldHMgZ2V0IHRoaXMgcHVibGlzaGVkLg0KDQogICAgUGhpbA0KDQogICAgPiBPbiBGZWIg NSwgMjAxOCwgYXQgMTE6NTcgQU0sIE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0 LmNvbTxtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4gd3JvdGU6DQogICAgPg0K ICAgID4gUmVhZHkgZm9yIHB1YmxpY2F0aW9uDQogICAgPg0KICAgID4gLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS0NCiAgICA+IEZyb206IElkLWV2ZW50IFttYWlsdG86aWQtZXZlbnQtYm91bmNl c0BpZXRmLm9yZzxtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFsZiBP ZiBZYXJvbiBTaGVmZmVyDQogICAgPiBTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDUsIDIwMTggMTE6 MjQgQU0NCiAgICA+IFRvOiBTZWNFdmVudCA8aWQtZXZlbnRAaWV0Zi5vcmc8bWFpbHRvOmlkLWV2 ZW50QGlldGYub3JnPj4NCiAgICA+IFN1YmplY3Q6IFtJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZv ciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTA1DQogICAgPg0KICAgID4gRmlyc3QsIHdlIHdv dWxkIGxpa2UgdG8gdGhhbmsgdGhlIGF1dGhvcnMgYW5kIHRoZSB3b3JraW5nIGdyb3VwIG1lbWJl cnMgd2hvIGhhdmUgYmVlbiB3b3JraW5nIHNpbmNlIFNpbmdhcG9yZSB0byBjbGFyaWZ5IGFuZCBy ZXNvbHZlIHNldmVyYWwgY29udHJvdmVyc2lhbCB0b3BpY3MuIFdpdGggdGhpcyB3b3JrIGJlaGlu ZCB1cywgd2UgY2FuIG5vdyBtb3ZlIGZvcndhcmQgdG8gcHVibGljYXRpb24uDQogICAgPg0KICAg ID4gVGhpcyBpcyB0byBhbm5vdW5jZSB3b3JraW5nIGdyb3VwIGxhc3QgY2FsbCBvbiB0aGlzIGRy YWZ0IChodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0Ff X2RhdGF0cmFja2VyLmlldGYub3JnX2RvY19kcmFmdC0yRGlldGYtMkRzZWNldmVudC0yRHRva2Vu XyZkPUR3SUdhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUm cj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09bk84Q0tRS3Iy a2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZzPXJvSXUwSDhjMVBpZHA1eVZ0X251 SG1QTjNfZHRGVXV1cGkycUVQbTR0aXMmZT0pLg0KICAgID4NCiAgICA+IFBsZWFzZSBzZW5kIHlv dXIgY29tbWVudHMgdG8gdGhlIGxpc3QuIEV2ZW4gaWYgeW91IGFyZSBwZXJmZWN0bHkgaGFwcHkg d2l0aCB0aGUgZHJhZnQsIHBsZWFzZSBsZXQgdXMga25vdyB0aGF0IHlvdSBzdXBwb3J0IGl0cyBw dWJsaWNhdGlvbiBhcy1pcyBieSBwb3N0aW5nIHRvIHRoZSBsaXN0Lg0KICAgID4NCiAgICA+IFBs ZWFzZSBzZW5kIHlvdXIgY29tbWVudCB3aXRoaW4gdGhlIG5leHQgdHdvIHdlZWtzLCB1bnRpbCBG ZWIuIDE5Lg0KICAgID4NCiAgICA+IFRoYW5rcywNCiAgICA+ICAgICBEaWNrIGFuZCBZYXJvbg0K ICAgID4NCiAgICA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQogICAgPiBJZC1ldmVudCBtYWlsaW5nIGxpc3QNCiAgICA+IElkLWV2ZW50QGlldGYub3Jn PG1haWx0bzpJZC1ldmVudEBpZXRmLm9yZz4NCiAgICA+IGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9v ZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGlu Zm9faWQtMkRldmVudCZkPUR3SUdhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1V QjY1ZWFwSV9KbkUmcj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5B Jm09bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZzPXJYSFFpOHZS ekVvTVBmYXhUdG50MEVzRzFuWkNGRFlBbVFIYzQ1VG5EYVkmZT0NCiAgICA+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgPiBJZC1ldmVudCBtYWls aW5nIGxpc3QNCiAgICA+IElkLWV2ZW50QGlldGYub3JnPG1haWx0bzpJZC1ldmVudEBpZXRmLm9y Zz4NCiAgICA+IGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRw cy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZkPUR3SUdhUSZj PVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmcj1uYTVGVnpCVFdt YW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09bk84Q0tRS3Iya2djQjhDOHpGLVFo YWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZzPXJYSFFpOHZSekVvTVBmYXhUdG50MEVzRzFuWkNGRFlB bVFIYzQ1VG5EYVkmZT0NCg0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQogICAgSWQtZXZlbnQgbWFpbGluZyBsaXN0DQogICAgSWQtZXZlbnRAaWV0 Zi5vcmc8bWFpbHRvOklkLWV2ZW50QGlldGYub3JnPg0KICAgIGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQNCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KSWQtZXZlbnQgbWFpbGluZyBsaXN0DQpJZC1ldmVudEBp ZXRmLm9yZzxtYWlsdG86SWQtZXZlbnRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2lkLWV2ZW50DQoNCg== --_000_SN6PR2101MB0943C1569B8FD068F2ADDE60F5C00SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpWZXJkYW5hOw0KCXBhbm9zZS0xOjIgMTEg NiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwg bGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlz aXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc2FtcA0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4u aG9lbnpiDQoJe21zby1zdHlsZS1uYW1lOmhvZW56Yjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMDAyMDYwO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBw YWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4w aW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9 DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2 OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYg Z3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAg djpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZd LS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBs ZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPlBsZWFzZSBzZWUgPGEgaHJlZj0iaHR0cHM6Ly9naXRo dWIuY29tL2luZGVwZW5kZW50aWQvSWRlbnRpdHktRXZlbnRzL3B1bGwvMTEiPg0KaHR0cHM6Ly9n aXRodWIuY29tL2luZGVwZW5kZW50aWQvSWRlbnRpdHktRXZlbnRzL3B1bGwvMTE8L2E+IGZvciBl ZGl0cyB0aGF0IGFyZSBpbnRlbmRlZCB0byBhZGRyZXNzIHRoZSBXR0xDIGNvbW1lbnRzIHJlY2Vp dmVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+TWFyaXVzLCBJIGRvbuKA mXQgdGhpbmsgd2UgbmVlZCBhIGZvcm1hbCBkZWZpbml0aW9uIG9mIOKAnGV2ZW50IGlkZW50aWZp ZXLigJ0gYmVjYXVzZSBpdOKAmXMgY2xlYXJseSBkZWZpbmVkIGJ5IHRoaXMgdXNhZ2UgaW4gU2Vj dGlvbiAyIChUaGUgU2VjdXJpdHkgRXZlbnQgVG9rZW4gKFNFVCk6PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjpibGFjayI+RWFjaCBtZW1iZXIgb2YgdGhlDQo8L3NwYW4+PHNhbXA+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5ldmVudHM8L3NwYW4+PC9zYW1wPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjpibGFjayI+IEpTT04gb2JqZWN0IGlzIGEgbmFtZS92YWx1ZSBwYWlyLiBU aGUgSlNPTiBtZW1iZXIgbmFtZSBpcyBhIFVSSSBzdHJpbmcNCiB2YWx1ZSwgd2hpY2ggaXMgdGhl IGV2ZW50IGlkZW50aWZpZXIsIGFuZCB0aGUgY29ycmVzcG9uZGluZyB2YWx1ZSBpcyBhIEpTT04g b2JqZWN0IGtub3duIGFzIHRoZSBldmVudCAmcXVvdDtwYXlsb2FkJnF1b3Q7Ljwvc3Bhbj48c3Bh biBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAy MDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVGhhbmtzIGFsbCw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29s b3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Y29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PGI+RnJvbTo8L2I+IE1hcml1cyBTY3VydGVzY3UgJmx0O21zY3VydGVzY3VAZ29v Z2xlLmNvbSZndDsgPGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwgRmVicnVhcnkgNSwgMjAxOCAx Mjo1MSBQTTxicj4NCjxiPlRvOjwvYj4gUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgJmx0O3Jp Y2hhbm5hQGFtYXpvbi5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBQaGlsIEh1bnQgJmx0O3BoaWwu aHVudEBvcmFjbGUuY29tJmd0OzsgTWlrZSBKb25lcyAmbHQ7TWljaGFlbC5Kb25lc0BtaWNyb3Nv ZnQuY29tJmd0OzsgWWFyb24gU2hlZmZlciAmbHQ7eWFyb25mLmlldGZAZ21haWwuY29tJmd0Ozsg U2VjRXZlbnQgJmx0O2lkLWV2ZW50QGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBS ZTogW0lkLWV2ZW50XSBXRyBMYXN0IENhbGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4t MDU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlllcywgbGV0J3MgbWFrZSBmaW5hbCBm aXhlcyBhbmQgbW92ZSBmb3J3YXJkLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+QSBjb3VwbGUgb2YgbWlub3Igbml0czo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gaW4gdGhlICZxdW90O2V2ZW50cyZxdW90 OyBkZWZpbml0aW9uLCBJIGRvbid0IHRoaW5rICZxdW90O011bHRpcGxlIGV2ZW50IGlkZW50aWZp ZXJzIHdpdGggdGhlIHNhbWUgdmFsdWUgTVVTVCBOT1QgYmUgdXNlZC4mcXVvdDsgaXMgbmVlZGVk LCBzaW5jZSB0aGF0IGlzIG5vdCBwb3NzaWJsZSBhbnlob3cgKGFzc3VtaW5nIEkgcmVhZCB0aGUg c3RhdGVtZW50IGNvcnJlY3RseSk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPi0gZG8gd2UgbmVlZCBhIGZvcm1hbCBkZWZpbml0aW9uIGZvciAmcXVv dDtldmVudCBpZGVudGlmaWVyJnF1b3Q7PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGVhcj0iYWxsIj4NCjxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NYXJpdXM8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBNb24sIEZlYiA1LCAy MDE4IGF0IDEyOjM4IFBNLCBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSAmbHQ7PGEgaHJlZj0i bWFpbHRvOnJpY2hhbm5hQGFtYXpvbi5jb20iIHRhcmdldD0iX2JsYW5rIj5yaWNoYW5uYUBhbWF6 b24uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAw aW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+SSdkIGxpa2UgdG8gc2VlIGl0ZW0gMSBiZWxvdyBhZGRyZXNzZWQgYmVm b3JlIHB1Ymxpc2hpbmcsIGFzIGl0IGFsdGVycyAoY29ycmVjdHMpIHRoZSBtZWFuaW5nIG9mIHRo ZSB0ZXh0Ljxicj4NCjxicj4NCk9uZSBlcnJvcjo8YnI+DQoxLiZuYnNwOyBJbiB0aGUgJnF1b3Q7 aWF0JnF1b3Q7IGRlZmluaXRpb24gaW4gc2VjdGlvbiAyLjI6IGNoYW5nZSAmcXVvdDsuLi53aGVu IHRoZSBldmVudCB3YXMgaXNzdWVkLiZxdW90OyB0byAmcXVvdDsuLi53aGVuIHRoZSBTRVQgd2Fz IGlzc3VlZC4mcXVvdDs8YnI+DQo8YnI+DQpPbmUgY2xhcmlmaWNhdGlvbjo8YnI+DQoyLiZuYnNw OyBUaGUgMm5kIHRvIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gMi40IHN0YXRlcyAmcXVvdDt0 aGUgRXZlbnQgUmVjaXBpZW50IE1VU1QmcXVvdDsgZW5zdXJlIGludGVncml0eSwgY29uZmlkZW50 aWFsaXR5LCBldGMuIElzbid0IHRoaXMgcHJvcGVybHkgdGhlIGlzc3VlcidzIHJlc3BvbnNpYmls aXR5PyBPciBib3RoPzxicj4NCjxicj4NCkEgaGFuZGZ1bCBvZiBuaXRzOjxicj4NCjMuJm5ic3A7 IFRoZSAmcXVvdDthdWQmcXVvdDsgZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDIuMiBpcyBhd2t3YXJk bHkgd3JpdHRlbjsgSSBzdWdnZXN0IHJlcGhyYXNpbmcgaXQgdG8gbWlycm9yIHRoZSAmcXVvdDtp YXQmcXVvdDsgZGVmaW5pdGlvbi48YnI+DQo0LiZuYnNwOyBNaXNzaW5nICZxdW90O3RoZSZxdW90 OyBpbiB0aGUgJnF1b3Q7ZXhwJnF1b3Q7IGRlZmluaXRpb24gaW4gc2VjdGlvbiAyLjI6ICZxdW90 O3RoaXMgY2xhaW0gaXMgdGltZSZxdW90OyAtJmd0OyAmcXVvdDt0aGlzIGNsYWltIGlzIHRoZSB0 aW1lJnF1b3Q7PGJyPg0KNS4mbmJzcDsgU3ludGF4IGVycm9yIGluIHRoZSAzcmQgbGlzdCBpdGVt IG9mIHNlY3Rpb24gMjogJnF1b3Q7Li4uaXMgYSBVUkkgc3RyaW5nIHZhbHVlIGlzIGFuIGV2ZW50 IGlkZW50aWZpZXIuLi4mcXVvdDs8YnI+DQo2LiZuYnNwOyBJbmNvbnNpc3RlbnQgdXNlIG9mIHRl cm1zIGZvciBpc3N1ZXIsIHJlY2lwaWVudCwgc3ViamVjdC4gQXQgdGhlIHZlcnkgbGVhc3Qgd2Ug c2hvdWxkIGhhdmUgY29uc2lzdGVudCBjYXBpdGFsaXphdGlvbjo8YnI+DQombmJzcDsgYS4mbmJz cDsgSXNzdWVyLCBpc3N1ZXIsIEV2ZW50IElzc3VlciwgU0VUIElzc3Vlcjxicj4NCiZuYnNwOyBi LiZuYnNwOyBSZWNpcGllbnQsIHJlY2lwaWVudCwgRXZlbnQgUmVjaXBpZW50PGJyPg0KJm5ic3A7 IGMuJm5ic3A7IFN1YmplY3QsIHN1YmplY3QsIFNlY3VyaXR5IFN1YmplY3QsIHNlY3VyaXR5IHN1 YmplY3QsIGV2ZW50IFN1YmplY3QsIGV2ZW50IHN1YmplY3Q8YnI+DQo8YnI+DQpPSywgSSdtIHB1 dHRpbmcgYXdheSB0aGUgcmVkIHBlbiBub3cuIDopPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiM4 ODg4ODgiPjxicj4NCjxzcGFuIGNsYXNzPSJob2VuemIiPi0tPC9zcGFuPjxicj4NCjxzcGFuIGNs YXNzPSJob2VuemIiPkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW48L3NwYW4+PGJyPg0KPHNwYW4g Y2xhc3M9ImhvZW56YiI+QW1hem9uIOKAkyBJZGVudGl0eSBTZXJ2aWNlczwvc3Bhbj48L3NwYW4+ PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4N Cu+7v09uIDIvNS8xOCwgMTI6MzMgUE0sICZxdW90O0lkLWV2ZW50IG9uIGJlaGFsZiBvZiBQaGls IEh1bnQmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzppZC1ldmVudC1ib3VuY2VzQGlldGYub3Jn Ij5pZC1ldmVudC1ib3VuY2VzQGlldGYub3JnPC9hPiBvbiBiZWhhbGYgb2YNCjxhIGhyZWY9Im1h aWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSI+cGhpbC5odW50QG9yYWNsZS5jb208L2E+Jmd0OyB3 cm90ZTo8YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7ICYjNDM7MS4gTGV0cyBnZXQgdGhpcyBwdWJs aXNoZWQuPGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNwOyBQaGlsPGJyPg0KPGJyPg0KJm5ic3A7ICZu YnNwOyAmZ3Q7IE9uIEZlYiA1LCAyMDE4LCBhdCAxMTo1NyBBTSwgTWlrZSBKb25lcyAmbHQ7PGEg aHJlZj0ibWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbSI+TWljaGFlbC5Kb25lc0Bt aWNyb3NvZnQuY29tPC9hPiZndDsgd3JvdGU6PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7PGJyPg0K Jm5ic3A7ICZuYnNwOyAmZ3Q7IFJlYWR5IGZvciBwdWJsaWNhdGlvbjxicj4NCiZuYnNwOyAmbmJz cDsgJmd0Ozxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0t LTxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBGcm9tOiBJZC1ldmVudCBbbWFpbHRvOjxhIGhyZWY9 Im1haWx0bzppZC1ldmVudC1ib3VuY2VzQGlldGYub3JnIj5pZC1ldmVudC1ib3VuY2VzQGlldGYu b3JnPC9hPl0gT24gQmVoYWxmIE9mIFlhcm9uIFNoZWZmZXI8YnI+DQombmJzcDsgJm5ic3A7ICZn dDsgU2VudDogTW9uZGF5LCBGZWJydWFyeSA1LCAyMDE4IDExOjI0IEFNPGJyPg0KJm5ic3A7ICZu YnNwOyAmZ3Q7IFRvOiBTZWNFdmVudCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlkLWV2ZW50QGlldGYu b3JnIj5pZC1ldmVudEBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IFN1 YmplY3Q6IFtJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRv a2VuLTA1PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IEZp cnN0LCB3ZSB3b3VsZCBsaWtlIHRvIHRoYW5rIHRoZSBhdXRob3JzIGFuZCB0aGUgd29ya2luZyBn cm91cCBtZW1iZXJzIHdobyBoYXZlIGJlZW4gd29ya2luZyBzaW5jZSBTaW5nYXBvcmUgdG8gY2xh cmlmeSBhbmQgcmVzb2x2ZSBzZXZlcmFsIGNvbnRyb3ZlcnNpYWwgdG9waWNzLiBXaXRoIHRoaXMg d29yayBiZWhpbmQgdXMsIHdlIGNhbiBub3cgbW92ZSBmb3J3YXJkIHRvIHB1YmxpY2F0aW9uLjxi cj4NCiZuYnNwOyAmbmJzcDsgJmd0Ozxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBUaGlzIGlzIHRv IGFubm91bmNlIHdvcmtpbmcgZ3JvdXAgbGFzdCBjYWxsIG9uIHRoaXMgZHJhZnQgKDxhIGhyZWY9 Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fZGF0 YXRyYWNrZXIuaWV0Zi5vcmdfZG9jX2RyYWZ0LTJEaWV0Zi0yRHNlY2V2ZW50LTJEdG9rZW5fJmFt cDtkPUR3SUdhUSZhbXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElf Sm5FJmFtcDtyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmYW1w O209bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZhbXA7cz1yb0l1 MEg4YzFQaWRwNXlWdF9udUhtUE4zX2R0RlV1dXBpMnFFUG00dGlzJmFtcDtlPSIgdGFyZ2V0PSJf YmxhbmsiPmh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0z QV9fZGF0YXRyYWNrZXIuaWV0Zi5vcmdfZG9jX2RyYWZ0LTJEaWV0Zi0yRHNlY2V2ZW50LTJEdG9r ZW5fJmFtcDtkPUR3SUdhUSZhbXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2 NWVhcElfSm5FJmFtcDtyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEta TkEmYW1wO209bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZhbXA7 cz1yb0l1MEg4YzFQaWRwNXlWdF9udUhtUE4zX2R0RlV1dXBpMnFFUG00dGlzJmFtcDtlPTwvYT4p Ljxicj4NCiZuYnNwOyAmbmJzcDsgJmd0Ozxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBQbGVhc2Ug c2VuZCB5b3VyIGNvbW1lbnRzIHRvIHRoZSBsaXN0LiBFdmVuIGlmIHlvdSBhcmUgcGVyZmVjdGx5 IGhhcHB5IHdpdGggdGhlIGRyYWZ0LCBwbGVhc2UgbGV0IHVzIGtub3cgdGhhdCB5b3Ugc3VwcG9y dCBpdHMgcHVibGljYXRpb24gYXMtaXMgYnkgcG9zdGluZyB0byB0aGUgbGlzdC48YnI+DQombmJz cDsgJm5ic3A7ICZndDs8YnI+DQombmJzcDsgJm5ic3A7ICZndDsgUGxlYXNlIHNlbmQgeW91ciBj b21tZW50IHdpdGhpbiB0aGUgbmV4dCB0d28gd2Vla3MsIHVudGlsIEZlYi4gMTkuPGJyPg0KJm5i c3A7ICZuYnNwOyAmZ3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IFRoYW5rcyw8YnI+DQombmJz cDsgJm5ic3A7ICZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO0RpY2sgYW5kIFlhcm9uPGJyPg0KJm5i c3A7ICZuYnNwOyAmZ3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IElk LWV2ZW50IG1haWxpbmcgbGlzdDxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyA8YSBocmVmPSJtYWls dG86SWQtZXZlbnRAaWV0Zi5vcmciPklkLWV2ZW50QGlldGYub3JnPC9hPjxicj4NCiZuYnNwOyAm bmJzcDsgJmd0OyA8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIv dXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQm YW1wO2Q9RHdJR2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFw SV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZh bXA7bT1uTzhDS1FLcjJrZ2NCOEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJmFtcDtzPXJY SFFpOHZSekVvTVBmYXhUdG50MEVzRzFuWkNGRFlBbVFIYzQ1VG5EYVkmYW1wO2U9IiB0YXJnZXQ9 Il9ibGFuayI+DQpodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0 cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmYW1wO2Q9RHdJ R2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1w O3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT1uTzhD S1FLcjJrZ2NCOEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJmFtcDtzPXJYSFFpOHZSekVv TVBmYXhUdG50MEVzRzFuWkNGRFlBbVFIYzQ1VG5EYVkmYW1wO2U9PC9hPjxicj4NCiZuYnNwOyAm bmJzcDsgJmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xzxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBJZC1ldmVudCBtYWlsaW5nIGxpc3Q8YnI+DQombmJz cDsgJm5ic3A7ICZndDsgPGEgaHJlZj0ibWFpbHRvOklkLWV2ZW50QGlldGYub3JnIj5JZC1ldmVu dEBpZXRmLm9yZzwvYT48YnI+DQombmJzcDsgJm5ic3A7ICZndDsgPGEgaHJlZj0iaHR0cHM6Ly91 cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdf bWFpbG1hbl9saXN0aW5mb19pZC0yRGV2ZW50JmFtcDtkPUR3SUdhUSZhbXA7Yz1Sb1AxWXVtQ1hD Z2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJmFtcDtyPW5hNUZWekJUV21hbnFXTnk0 RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmYW1wO209bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpT U0x1Q0hoUGRIU2pUQzU5TV9ZWSZhbXA7cz1yWEhRaTh2UnpFb01QZmF4VHRudDBFc0cxblpDRkRZ QW1RSGM0NVRuRGFZJmFtcDtlPSIgdGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly91cmxkZWZlbnNl LnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9s aXN0aW5mb19pZC0yRGV2ZW50JmFtcDtkPUR3SUdhUSZhbXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllS OFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJmFtcDtyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1 WXFQa0FJMWFMY0xONEtaTkEmYW1wO209bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRI U2pUQzU5TV9ZWSZhbXA7cz1yWEhRaTh2UnpFb01QZmF4VHRudDBFc0cxblpDRkRZQW1RSGM0NVRu RGFZJmFtcDtlPTwvYT48YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KJm5ic3A7ICZuYnNwOyBJZC1ldmVu dCBtYWlsaW5nIGxpc3Q8YnI+DQombmJzcDsgJm5ic3A7IDxhIGhyZWY9Im1haWx0bzpJZC1ldmVu dEBpZXRmLm9yZyI+SWQtZXZlbnRAaWV0Zi5vcmc8L2E+PGJyPg0KJm5ic3A7ICZuYnNwOyA8YSBo cmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lkLWV2ZW50IiB0YXJn ZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pZC1ldmVu dDwvYT48YnI+DQo8YnI+DQo8YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXzxicj4NCklkLWV2ZW50IG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1h aWx0bzpJZC1ldmVudEBpZXRmLm9yZyI+SWQtZXZlbnRAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJl Zj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pZC1ldmVudCIgdGFyZ2V0 PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQ8 L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_SN6PR2101MB0943C1569B8FD068F2ADDE60F5C00SN6PR2101MB0943_-- From nobody Tue Feb 27 16:18:44 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC4C712EAC2 for ; Tue, 27 Feb 2018 16:18:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.009 X-Spam-Level: X-Spam-Status: No, score=-2.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ZV28V4Q_YUi for ; Tue, 27 Feb 2018 16:18:39 -0800 (PST) Received: from mail-ua0-x233.google.com (mail-ua0-x233.google.com [IPv6:2607:f8b0:400c:c08::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8392F12EABD for ; Tue, 27 Feb 2018 16:18:39 -0800 (PST) Received: by mail-ua0-x233.google.com with SMTP id i15so450068uak.3 for ; Tue, 27 Feb 2018 16:18:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=F6+5v2uYdmmO3VZLxb1ncjPxS0Emt0HnABLmJbHHtAw=; b=oMy3d/U+xGdKBdZ8qWD6k0+mtQNvqtcAGeLyi+BdURsqH2aHI5bDXEZTUwukEQB3G1 YYwAwLb+Z8/JVPrZSq3+vtmsuntuyoSOX+zZSOmdc1Bp4MKW+qeLszNfykdB59CNec8/ 69D1SPsWDFSIf/a8p9Ve+/qZttH5YQWerEHZbisJ4yXpS0Xojob5HE9Fs8TN4pTl4wyX AsihCCSx6Ss7fAovMt9L7pLZHYIoqF2I1x60jtHQhxZ7t+Ep4Uh9MGLTGFW90uBXvJd5 9auA5+6h2d10LI91Z/MsK1dH2tLZNG8nxGJqmstp57bgtxZgi3Y+Fz7UWKjRxu7+D0ba uu2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=F6+5v2uYdmmO3VZLxb1ncjPxS0Emt0HnABLmJbHHtAw=; b=G+WIXwhUPc97ZJL1+vgC0mQ/yaFwkYDMi06PLc9VfyWfYT8ZFSSMUJreM9kqyU/o6W VZceWbeO6BbrLF6Zs83l+e9oxs9RMnOcli+aGOvvRljDunSUYsasmqq8qo6NNbvtVMHX qqEE3YI2X9yAG23BkK4Ne45twlH3LxX4FB6EtXGTQEB0aWVnhKy6sOZsZ6GZ9sIFw5u1 Huoa7nbVCl33+y2bZuemp89pz1FrvYACjyo0BaVS2ydLDDOL+Zdbdvzjl8wM79R6I38N 5vcAALPl7EoS0mjd8tviGNTIQhM2UojnEpUPfGbKrPuCuEwpOwZbm8OrLRMJQwQtlWf0 S1TQ== X-Gm-Message-State: APf1xPDYs9/TkV5NywcGbGqv6I0XxhCyLorWnLtaSFTkQNASe2iiKv41 PQEhJFnCNBBewvEjHeyDn0p/9M43YGiqKaBB5NrmFQ== X-Google-Smtp-Source: AG47ELseKuXI4+jcqUDHhGLOQmJTFF/TVBhSjfDBxIuzHzodO2TARBVCorah9HVuO4XPK7dr4femOcFt9e16YjqU7Ao= X-Received: by 10.159.60.89 with SMTP id w25mr12072691uah.59.1519777117964; Tue, 27 Feb 2018 16:18:37 -0800 (PST) MIME-Version: 1.0 Received: by 10.31.94.88 with HTTP; Tue, 27 Feb 2018 16:18:17 -0800 (PST) In-Reply-To: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> From: Marius Scurtescu Date: Tue, 27 Feb 2018 16:18:17 -0800 Message-ID: To: Mike Jones Cc: "Richard Backman, Annabelle" , Phil Hunt , Yaron Sheffer , SecEvent Content-Type: multipart/alternative; boundary="f40304364a8441cb0305663aaf6f" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 00:18:43 -0000 --f40304364a8441cb0305663aaf6f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Feb 27, 2018 at 3:37 PM, Mike Jones wrote: > Please see https://github.com/independentid/Identity-Events/pull/11 for > edits that are intended to address the WGLC comments received. > I just want to bring up the fact that the SET spec uses "Event Issuer" and "Event Recipient" while the distribution spec and proposed API specs all use "Event Transmitter" and "Event Receiver". I just want to make sure we all make a conscious decision here and see if there are ways to prevent potential confusion. I understand that "Event Issuer" and "Event Recipient" are in line with JWT. Also, Transmitter/Receiver might have slightly different meaning (the entity that issues vs the entity that transmits). But I think they are close enough to be confusing. > > > Marius, I don=E2=80=99t think we need a formal definition of =E2=80=9Ceve= nt identifier=E2=80=9D > because it=E2=80=99s clearly defined by this usage in Section 2 (The Secu= rity Event > Token (SET): > > Each member of the events JSON object is a name/value pair. The JSON > member name is a URI string value, which is the event identifier, and the > corresponding value is a JSON object known as the event "payload". > A formal definition would be useful IMO. Many profiles will define events and they will all have to create event identifiers and make reference to the concept. A clear definition of the term would help. > > Thanks > all, > > -- Mike > > > > *From:* Marius Scurtescu > *Sent:* Monday, February 5, 2018 12:51 PM > *To:* Richard Backman, Annabelle > *Cc:* Phil Hunt ; Mike Jones < > Michael.Jones@microsoft.com>; Yaron Sheffer ; > SecEvent > *Subject:* Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > > > Yes, let's make final fixes and move forward. > > > > A couple of minor nits: > > - in the "events" definition, I don't think "Multiple event identifiers > with the same value MUST NOT be used." is needed, since that is not > possible anyhow (assuming I read the statement correctly) > > - do we need a formal definition for "event identifier"? > > > > > Marius > > > > On Mon, Feb 5, 2018 at 12:38 PM, Richard Backman, Annabelle < > richanna@amazon.com> wrote: > > I'd like to see item 1 below addressed before publishing, as it alters > (corrects) the meaning of the text. > > One error: > 1. In the "iat" definition in section 2.2: change "...when the event was > issued." to "...when the SET was issued." > > One clarification: > 2. The 2nd to last paragraph of section 2.4 states "the Event Recipient > MUST" ensure integrity, confidentiality, etc. Isn't this properly the > issuer's responsibility? Or both? > > A handful of nits: > 3. The "aud" definition in section 2.2 is awkwardly written; I suggest > rephrasing it to mirror the "iat" definition. > 4. Missing "the" in the "exp" definition in section 2.2: "this claim is > time" -> "this claim is the time" > 5. Syntax error in the 3rd list item of section 2: "...is a URI string > value is an event identifier..." > 6. Inconsistent use of terms for issuer, recipient, subject. At the very > least we should have consistent capitalization: > a. Issuer, issuer, Event Issuer, SET Issuer > b. Recipient, recipient, Event Recipient > c. Subject, subject, Security Subject, security subject, event Subject= , > event subject > > OK, I'm putting away the red pen now. :) > > -- > Annabelle Richard Backman > Amazon =E2=80=93 Identity Services > > > =EF=BB=BFOn 2/5/18, 12:33 PM, "Id-event on behalf of Phil Hunt" < > id-event-bounces@ietf.org on behalf of phil.hunt@oracle.com> wrote: > > +1. Lets get this published. > > Phil > > > On Feb 5, 2018, at 11:57 AM, Mike Jones > wrote: > > > > Ready for publication > > > > -----Original Message----- > > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of > Yaron Sheffer > > Sent: Monday, February 5, 2018 11:24 AM > > To: SecEvent > > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > > > First, we would like to thank the authors and the working group > members who have been working since Singapore to clarify and resolve > several controversial topics. With this work behind us, we can now move > forward to publication. > > > > This is to announce working group last call on this draft ( > https://urldefense.proofpoint.com/v2/url?u=3Dhttps- > 3A__datatracker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Dtoken_&d=3DDwIGaQ&= c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DroIu0H8c1Pidp5yVt_nuHmPN3_dtFUuupi2qEPm4tis&= e=3D > ). > > > > Please send your comments to the list. Even if you are perfectly > happy with the draft, please let us know that you support its publication > as-is by posting to the list. > > > > Please send your comment within the next two weeks, until Feb. 19. > > > > Thanks, > > Dick and Yaron > > > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www. > ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&= e=3D > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www. > ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&= e=3D > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > > --f40304364a8441cb0305663aaf6f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On T= ue, Feb 27, 2018 at 3:37 PM, Mike Jones <Michael.Jones@microsoft.com> wrote:

Please see https://github.com/independentid/Identity-Events/pull/11 for = edits that are intended to address the WGLC comments received.


I just want to bring up the fact= that the SET spec uses "Event Issuer" and "Event Recipient&= quot; while the distribution spec and proposed API specs all use "Even= t Transmitter" and "Event Receiver".

I just want to make sure we all make a conscious decision here and see if= there are ways to prevent potential confusion.

I = understand that=C2=A0"Event Issuer" and "Event Recipient&quo= t; are in line with JWT. Also, Transmitter/Receiver might have slightly dif= ferent meaning (the entity that issues vs the entity that transmits). But I= think they are close enough to be confusing.
=C2=A0

=C2=A0<= /u>

Marius, I don=E2= =80=99t think we need a formal definition of =E2=80=9Cevent identifier=E2= =80=9D because it=E2=80=99s clearly defined by this usage in Section 2 (The= Security Event Token (SET):

Each member of the events JSON object is a name/value pair. The JSON = member name is a URI string value, which is the event identifier, and the corresponding value is a JSO= N object known as the event "payload".


A formal definition would be useful IMO. Many = profiles will define events and they will all have to create event identifi= ers and make reference to the concept. A clear definition of the term would= help.


=C2=A0<= /u>

=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Thanks all,

=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = -- Mike

=C2=A0<= /u>

From: Marius Scurtescu <mscu= rtescu@google.com>
Sent: Monday, February 5, 2018 12:51 PM
To: Richard Backman, Annabelle <richanna@amazon.com>
Cc: Phil Hunt <phil.hunt@oracle.com>; Mike Jo= nes <Michael.Jones@microsoft.com>; Yaron Shef= fer <yaronf.ietf@gmail.com>; SecEvent <id-event@ietf.org>
Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-0= 5

=C2=A0

Yes, let's make final fixes and move forward.=

=C2=A0

A couple of minor nits:

- in the "events" definition, I don't = think "Multiple event identifiers with the same value MUST NOT be used= ." is needed, since that is not possible anyhow (assuming I read the s= tatement correctly)

- do we need a formal definition for "event ide= ntifier"?

=C2=A0


Marius

=C2=A0

On Mon, Feb 5, 2018 at 12:38 PM, Richard Backman, An= nabelle <richanna@amazon.com> wrote:

I'd like to see item 1 below addressed before pu= blishing, as it alters (corrects) the meaning of the text.

One error:
1.=C2=A0 In the "iat" definition in section 2.2: change "...= when the event was issued." to "...when the SET was issued."=

One clarification:
2.=C2=A0 The 2nd to last paragraph of section 2.4 states "the Event Re= cipient MUST" ensure integrity, confidentiality, etc. Isn't this p= roperly the issuer's responsibility? Or both?

A handful of nits:
3.=C2=A0 The "aud" definition in section 2.2 is awkwardly written= ; I suggest rephrasing it to mirror the "iat" definition.
4.=C2=A0 Missing "the" in the "exp" definition in secti= on 2.2: "this claim is time" -> "this claim is the time&q= uot;
5.=C2=A0 Syntax error in the 3rd list item of section 2: "...is a URI = string value is an event identifier..."
6.=C2=A0 Inconsistent use of terms for issuer, recipient, subject. At the v= ery least we should have consistent capitalization:
=C2=A0 a.=C2=A0 Issuer, issuer, Event Issuer, SET Issuer
=C2=A0 b.=C2=A0 Recipient, recipient, Event Recipient
=C2=A0 c.=C2=A0 Subject, subject, Security Subject, security subject, event= Subject, event subject

OK, I'm putting away the red pen now. :)

--
Annabelle Richard Backman=
Amazon =E2=80=93 Identity= Services


=EF=BB=BFOn 2/5/18, 12:33 PM, "Id-event on behalf of Phil Hunt" &= lt;id-event-bounces@ietf.org on behalf of phil.hunt@oracle.com> wrote:

=C2=A0 =C2=A0 +1. Lets get this published.

=C2=A0 =C2=A0 Phil

=C2=A0 =C2=A0 > On Feb 5, 2018, at 11:57 AM, Mike Jones <Michael.Jones@microsoft.com> wrote:
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Ready for publication
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > -----Original Message-----
=C2=A0 =C2=A0 > From: Id-event [mailto:id-event-bounce= s@ietf.org] On Behalf Of Yaron Sheffer
=C2=A0 =C2=A0 > Sent: Monday, February 5, 2018 11:24 AM
=C2=A0 =C2=A0 > To: SecEvent <id-event@ietf.org>
=C2=A0 =C2=A0 > Subject: [Id-event] WG Last Call for draft-ietf-secevent= -token-05
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > First, we would like to thank the authors and the workin= g group members who have been working since Singapore to clarify and resolv= e several controversial topics. With this work behind us, we can now move f= orward to publication.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > This is to announce working group last call on this draf= t (https://urldefense.proofpoint.com/v2/= url?u=3Dhttps-3A__datatracker.ietf.org_doc_draft-2Dietf-2Dseceven= t-2Dtoken_&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIr<= wbr>MUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4= KZNA&m=3DnO8CKQKr2kgcB8C8zF-QhajSSLuCHhPdHSjTC59M_YY&s=3D= roIu0H8c1Pidp5yVt_nuHmPN3_dtFUuupi2qEPm4tis&e=3D).
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Please send your comments to the list. Even if you are p= erfectly happy with the draft, please let us know that you support its publ= ication as-is by posting to the list.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Please send your comment within the next two weeks, unti= l Feb. 19.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Thanks,
=C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0Dick and Yaron
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > _______________________________________________
=C2=A0 =C2=A0 > Id-event mailing list
=C2=A0 =C2=A0 > Id-event@ietf.org
=C2=A0 =C2=A0 > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.o= rg_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCg= aWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXP= puYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-QhajSSLuCHhPd= HSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&a= mp;e=3D
=C2=A0 =C2=A0 > _______________________________________________
=C2=A0 =C2=A0 > Id-event mailing list
=C2=A0 =C2=A0 > Id-event@ietf.org
=C2=A0 =C2=A0 > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.o= rg_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCg= aWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXP= puYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-QhajSSLuCHhPd= HSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&a= mp;e=3D

=C2=A0 =C2=A0 _______________________________________________
=C2=A0 =C2=A0 Id-event mailing list
=C2=A0 =C2=A0 Id-event@ietf.org
=C2=A0 =C2=A0 https://www.ietf.org/mailman/= listinfo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/= id-event

=C2=A0


--f40304364a8441cb0305663aaf6f-- From nobody Tue Feb 27 16:22:13 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54F2312EAC9 for ; Tue, 27 Feb 2018 16:22:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.019 X-Spam-Level: X-Spam-Status: No, score=-2.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sWRaMwFmFA6l for ; Tue, 27 Feb 2018 16:22:08 -0800 (PST) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0136.outbound.protection.outlook.com [104.47.33.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90D7312EAC3 for ; Tue, 27 Feb 2018 16:22:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=G2nqwQ6WtTT5q61WSr0o6qSU68hzUfkJBfPMilUyYsA=; b=C94haKNf1Zz9kjZw6Gh0pnXZCAgfxd27Iv6sKD082zdgN5leTsFmoP70UwRoYN/60r6wJo9JPX2aEfQ5tF4WDu9QmlfksrRu1vHfa1kbFHg/IwwsnKPOJ5sugtDjw6kixueYYVjimb0nymGTPWPEitqe1dhl2ci4ex72iHphs80= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1070.namprd21.prod.outlook.com (52.132.115.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.3; Wed, 28 Feb 2018 00:22:04 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Wed, 28 Feb 2018 00:22:04 +0000 From: Mike Jones To: Marius Scurtescu CC: "Richard Backman, Annabelle" , Phil Hunt , Yaron Sheffer , SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-05 Thread-Index: AQHTnrboZGlv7WjXXUqAp/XotWZJi6OWOXowgAAKHACAAAGIgIAAA2eAgCLBRFCAAAwLgIAAANrQ Date: Wed, 28 Feb 2018 00:22:04 +0000 Message-ID: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-28T00:22:02.9828498Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:b::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1070; 7:dUA6Jrq2H4vPxYXsJStdSX+kGGdS8L6Cl6jORQwDfHksLdLSJdfu7Lv1q7cmWPaI3t5pKVq7RdyP1g54PBtpoiwisffQF/R5vtWw5VqK6RfQ3fRpcD8fGSqYsbBEjtzwcf7qt2EJi0aJLm2jtH9o6GxOqUZEIJB3QjEy72nTu3Qi9wuYt2INcHQ7VVhKSJZa1sRrptyVpodkDW78sXxr55DZmLGY6PhYvewGr++dGcuyKUzfUK83D56n6wzFUgKF x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 663f633b-bb6f-4604-880f-08d57e414b8c x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1070; x-ms-traffictypediagnostic: SN6PR2101MB1070: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(10436049006162)(89211679590171)(166708455590820)(192374486261705)(33061846794335)(85827821059158)(211936372134217)(153496737603132)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(3231220)(944501209)(52105095)(93006095)(93001095)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:SN6PR2101MB1070; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1070; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(39380400002)(396003)(366004)(376002)(39860400002)(13464003)(189003)(57704003)(199004)(33656002)(5250100002)(93886005)(10290500003)(105586002)(106356001)(19609705001)(186003)(8990500004)(68736007)(316002)(7736002)(22452003)(8936002)(14454004)(790700001)(966005)(74316002)(478600001)(97736004)(54906003)(3280700002)(72206003)(6246003)(53936002)(3660700001)(99286004)(2900100001)(59450400001)(25786009)(53546011)(6506007)(76176011)(6306002)(54896002)(9686003)(102836004)(236005)(8676002)(55016002)(39060400002)(606006)(575784001)(81166006)(81156014)(5660300001)(229853002)(2906002)(10090500001)(6916009)(4326008)(6346003)(6116002)(86362001)(86612001)(6436002)(2950100002)(7696005); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1070; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: c9Kt4Zmn2yDRqOJpLOeornFomdgHmXpmAOq6F5x5QUzT8bm9eFVqoSShzR3TFRHjYtf3QTz8ZJirNpoWHtqDKtrHNCqGAU3DreKSfhGPQIBmu15/dDWhlRbHZeEivlP+cQxG1Aiv9Cz6HN6lJgRA0Lo9wpqPW7Q5xmfE2ZvaFyY= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943870B4F56606FE47E0CCBF5C70SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 663f633b-bb6f-4604-880f-08d57e414b8c X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 00:22:04.7297 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1070 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 00:22:11 -0000 --_000_SN6PR2101MB0943870B4F56606FE47E0CCBF5C70SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBjb3VsZCBhZGQgZGVmaW5pdGlvbnMgZm9yIOKAnGV2ZW50IGlkZW50aWZpZXLigJ0gYW5kIOKA nGV2ZW50IHBheWxvYWTigJ0gaWYgcGVvcGxlIGZlZWwgdGhhdCBpdCB3b3VsZCBpbXByb3ZlIHRo ZSBzcGVjaWZpY2F0aW9uLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBNYXJpdXMgU2N1cnRl c2N1IDxtc2N1cnRlc2N1QGdvb2dsZS5jb20+DQpTZW50OiBUdWVzZGF5LCBGZWJydWFyeSAyNywg MjAxOCA0OjE4IFBNDQpUbzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29t Pg0KQ2M6IFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5uYUBhbWF6b24uY29tPjsg UGhpbCBIdW50IDxwaGlsLmh1bnRAb3JhY2xlLmNvbT47IFlhcm9uIFNoZWZmZXIgPHlhcm9uZi5p ZXRmQGdtYWlsLmNvbT47IFNlY0V2ZW50IDxpZC1ldmVudEBpZXRmLm9yZz4NClN1YmplY3Q6IFJl OiBbSWQtZXZlbnRdIFdHIExhc3QgQ2FsbCBmb3IgZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0w NQ0KDQpPbiBUdWUsIEZlYiAyNywgMjAxOCBhdCAzOjM3IFBNLCBNaWtlIEpvbmVzIDxNaWNoYWVs LkpvbmVzQG1pY3Jvc29mdC5jb208bWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4+ IHdyb3RlOg0KUGxlYXNlIHNlZSBodHRwczovL2dpdGh1Yi5jb20vaW5kZXBlbmRlbnRpZC9JZGVu dGl0eS1FdmVudHMvcHVsbC8xMSBmb3IgZWRpdHMgdGhhdCBhcmUgaW50ZW5kZWQgdG8gYWRkcmVz cyB0aGUgV0dMQyBjb21tZW50cyByZWNlaXZlZC4NCg0KSSBqdXN0IHdhbnQgdG8gYnJpbmcgdXAg dGhlIGZhY3QgdGhhdCB0aGUgU0VUIHNwZWMgdXNlcyAiRXZlbnQgSXNzdWVyIiBhbmQgIkV2ZW50 IFJlY2lwaWVudCIgd2hpbGUgdGhlIGRpc3RyaWJ1dGlvbiBzcGVjIGFuZCBwcm9wb3NlZCBBUEkg c3BlY3MgYWxsIHVzZSAiRXZlbnQgVHJhbnNtaXR0ZXIiIGFuZCAiRXZlbnQgUmVjZWl2ZXIiLg0K DQpJIGp1c3Qgd2FudCB0byBtYWtlIHN1cmUgd2UgYWxsIG1ha2UgYSBjb25zY2lvdXMgZGVjaXNp b24gaGVyZSBhbmQgc2VlIGlmIHRoZXJlIGFyZSB3YXlzIHRvIHByZXZlbnQgcG90ZW50aWFsIGNv bmZ1c2lvbi4NCg0KSSB1bmRlcnN0YW5kIHRoYXQgIkV2ZW50IElzc3VlciIgYW5kICJFdmVudCBS ZWNpcGllbnQiIGFyZSBpbiBsaW5lIHdpdGggSldULiBBbHNvLCBUcmFuc21pdHRlci9SZWNlaXZl ciBtaWdodCBoYXZlIHNsaWdodGx5IGRpZmZlcmVudCBtZWFuaW5nICh0aGUgZW50aXR5IHRoYXQg aXNzdWVzIHZzIHRoZSBlbnRpdHkgdGhhdCB0cmFuc21pdHMpLiBCdXQgSSB0aGluayB0aGV5IGFy ZSBjbG9zZSBlbm91Z2ggdG8gYmUgY29uZnVzaW5nLg0KDQoNCk1hcml1cywgSSBkb27igJl0IHRo aW5rIHdlIG5lZWQgYSBmb3JtYWwgZGVmaW5pdGlvbiBvZiDigJxldmVudCBpZGVudGlmaWVy4oCd IGJlY2F1c2UgaXTigJlzIGNsZWFybHkgZGVmaW5lZCBieSB0aGlzIHVzYWdlIGluIFNlY3Rpb24g MiAoVGhlIFNlY3VyaXR5IEV2ZW50IFRva2VuIChTRVQpOg0KRWFjaCBtZW1iZXIgb2YgdGhlIGV2 ZW50cyBKU09OIG9iamVjdCBpcyBhIG5hbWUvdmFsdWUgcGFpci4gVGhlIEpTT04gbWVtYmVyIG5h bWUgaXMgYSBVUkkgc3RyaW5nIHZhbHVlLCB3aGljaCBpcyB0aGUgZXZlbnQgaWRlbnRpZmllciwg YW5kIHRoZSBjb3JyZXNwb25kaW5nIHZhbHVlIGlzIGEgSlNPTiBvYmplY3Qga25vd24gYXMgdGhl IGV2ZW50ICJwYXlsb2FkIi4NCg0KQSBmb3JtYWwgZGVmaW5pdGlvbiB3b3VsZCBiZSB1c2VmdWwg SU1PLiBNYW55IHByb2ZpbGVzIHdpbGwgZGVmaW5lIGV2ZW50cyBhbmQgdGhleSB3aWxsIGFsbCBo YXZlIHRvIGNyZWF0ZSBldmVudCBpZGVudGlmaWVycyBhbmQgbWFrZSByZWZlcmVuY2UgdG8gdGhl IGNvbmNlcHQuIEEgY2xlYXIgZGVmaW5pdGlvbiBvZiB0aGUgdGVybSB3b3VsZCBoZWxwLg0KDQoN Cg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFRoYW5rcyBhbGwsDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBNYXJpdXMgU2N1 cnRlc2N1IDxtc2N1cnRlc2N1QGdvb2dsZS5jb208bWFpbHRvOm1zY3VydGVzY3VAZ29vZ2xlLmNv bT4+DQpTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDUsIDIwMTggMTI6NTEgUE0NClRvOiBSaWNoYXJk IEJhY2ttYW4sIEFubmFiZWxsZSA8cmljaGFubmFAYW1hem9uLmNvbTxtYWlsdG86cmljaGFubmFA YW1hem9uLmNvbT4+DQpDYzogUGhpbCBIdW50IDxwaGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86 cGhpbC5odW50QG9yYWNsZS5jb20+PjsgTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3Nv ZnQuY29tPG1haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+PjsgWWFyb24gU2hlZmZl ciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1haWx0bzp5YXJvbmYuaWV0ZkBnbWFpbC5jb20+Pjsg U2VjRXZlbnQgPGlkLWV2ZW50QGlldGYub3JnPG1haWx0bzppZC1ldmVudEBpZXRmLm9yZz4+DQpT dWJqZWN0OiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0IENhbGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZl bnQtdG9rZW4tMDUNCg0KWWVzLCBsZXQncyBtYWtlIGZpbmFsIGZpeGVzIGFuZCBtb3ZlIGZvcndh cmQuDQoNCkEgY291cGxlIG9mIG1pbm9yIG5pdHM6DQotIGluIHRoZSAiZXZlbnRzIiBkZWZpbml0 aW9uLCBJIGRvbid0IHRoaW5rICJNdWx0aXBsZSBldmVudCBpZGVudGlmaWVycyB3aXRoIHRoZSBz YW1lIHZhbHVlIE1VU1QgTk9UIGJlIHVzZWQuIiBpcyBuZWVkZWQsIHNpbmNlIHRoYXQgaXMgbm90 IHBvc3NpYmxlIGFueWhvdyAoYXNzdW1pbmcgSSByZWFkIHRoZSBzdGF0ZW1lbnQgY29ycmVjdGx5 KQ0KLSBkbyB3ZSBuZWVkIGEgZm9ybWFsIGRlZmluaXRpb24gZm9yICJldmVudCBpZGVudGlmaWVy Ij8NCg0KDQpNYXJpdXMNCg0KT24gTW9uLCBGZWIgNSwgMjAxOCBhdCAxMjozOCBQTSwgUmljaGFy ZCBCYWNrbWFuLCBBbm5hYmVsbGUgPHJpY2hhbm5hQGFtYXpvbi5jb208bWFpbHRvOnJpY2hhbm5h QGFtYXpvbi5jb20+PiB3cm90ZToNCkknZCBsaWtlIHRvIHNlZSBpdGVtIDEgYmVsb3cgYWRkcmVz c2VkIGJlZm9yZSBwdWJsaXNoaW5nLCBhcyBpdCBhbHRlcnMgKGNvcnJlY3RzKSB0aGUgbWVhbmlu ZyBvZiB0aGUgdGV4dC4NCg0KT25lIGVycm9yOg0KMS4gIEluIHRoZSAiaWF0IiBkZWZpbml0aW9u IGluIHNlY3Rpb24gMi4yOiBjaGFuZ2UgIi4uLndoZW4gdGhlIGV2ZW50IHdhcyBpc3N1ZWQuIiB0 byAiLi4ud2hlbiB0aGUgU0VUIHdhcyBpc3N1ZWQuIg0KDQpPbmUgY2xhcmlmaWNhdGlvbjoNCjIu ICBUaGUgMm5kIHRvIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gMi40IHN0YXRlcyAidGhlIEV2 ZW50IFJlY2lwaWVudCBNVVNUIiBlbnN1cmUgaW50ZWdyaXR5LCBjb25maWRlbnRpYWxpdHksIGV0 Yy4gSXNuJ3QgdGhpcyBwcm9wZXJseSB0aGUgaXNzdWVyJ3MgcmVzcG9uc2liaWxpdHk/IE9yIGJv dGg/DQoNCkEgaGFuZGZ1bCBvZiBuaXRzOg0KMy4gIFRoZSAiYXVkIiBkZWZpbml0aW9uIGluIHNl Y3Rpb24gMi4yIGlzIGF3a3dhcmRseSB3cml0dGVuOyBJIHN1Z2dlc3QgcmVwaHJhc2luZyBpdCB0 byBtaXJyb3IgdGhlICJpYXQiIGRlZmluaXRpb24uDQo0LiAgTWlzc2luZyAidGhlIiBpbiB0aGUg ImV4cCIgZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDIuMjogInRoaXMgY2xhaW0gaXMgdGltZSIgLT4g InRoaXMgY2xhaW0gaXMgdGhlIHRpbWUiDQo1LiAgU3ludGF4IGVycm9yIGluIHRoZSAzcmQgbGlz dCBpdGVtIG9mIHNlY3Rpb24gMjogIi4uLmlzIGEgVVJJIHN0cmluZyB2YWx1ZSBpcyBhbiBldmVu dCBpZGVudGlmaWVyLi4uIg0KNi4gIEluY29uc2lzdGVudCB1c2Ugb2YgdGVybXMgZm9yIGlzc3Vl ciwgcmVjaXBpZW50LCBzdWJqZWN0LiBBdCB0aGUgdmVyeSBsZWFzdCB3ZSBzaG91bGQgaGF2ZSBj b25zaXN0ZW50IGNhcGl0YWxpemF0aW9uOg0KICBhLiAgSXNzdWVyLCBpc3N1ZXIsIEV2ZW50IElz c3VlciwgU0VUIElzc3Vlcg0KICBiLiAgUmVjaXBpZW50LCByZWNpcGllbnQsIEV2ZW50IFJlY2lw aWVudA0KICBjLiAgU3ViamVjdCwgc3ViamVjdCwgU2VjdXJpdHkgU3ViamVjdCwgc2VjdXJpdHkg c3ViamVjdCwgZXZlbnQgU3ViamVjdCwgZXZlbnQgc3ViamVjdA0KDQpPSywgSSdtIHB1dHRpbmcg YXdheSB0aGUgcmVkIHBlbiBub3cuIDopDQoNCi0tDQpBbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFu DQpBbWF6b24g4oCTIElkZW50aXR5IFNlcnZpY2VzDQoNCu+7v09uIDIvNS8xOCwgMTI6MzMgUE0s ICJJZC1ldmVudCBvbiBiZWhhbGYgb2YgUGhpbCBIdW50IiA8aWQtZXZlbnQtYm91bmNlc0BpZXRm Lm9yZzxtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIHBoaWwu aHVudEBvcmFjbGUuY29tPG1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQog ICAgKzEuIExldHMgZ2V0IHRoaXMgcHVibGlzaGVkLg0KDQogICAgUGhpbA0KDQogICAgPiBPbiBG ZWIgNSwgMjAxOCwgYXQgMTE6NTcgQU0sIE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9z b2Z0LmNvbTxtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4gd3JvdGU6DQogICAg Pg0KICAgID4gUmVhZHkgZm9yIHB1YmxpY2F0aW9uDQogICAgPg0KICAgID4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCiAgICA+IEZyb206IElkLWV2ZW50IFttYWlsdG86aWQtZXZlbnQtYm91 bmNlc0BpZXRmLm9yZzxtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFs ZiBPZiBZYXJvbiBTaGVmZmVyDQogICAgPiBTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDUsIDIwMTgg MTE6MjQgQU0NCiAgICA+IFRvOiBTZWNFdmVudCA8aWQtZXZlbnRAaWV0Zi5vcmc8bWFpbHRvOmlk LWV2ZW50QGlldGYub3JnPj4NCiAgICA+IFN1YmplY3Q6IFtJZC1ldmVudF0gV0cgTGFzdCBDYWxs IGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTA1DQogICAgPg0KICAgID4gRmlyc3QsIHdl IHdvdWxkIGxpa2UgdG8gdGhhbmsgdGhlIGF1dGhvcnMgYW5kIHRoZSB3b3JraW5nIGdyb3VwIG1l bWJlcnMgd2hvIGhhdmUgYmVlbiB3b3JraW5nIHNpbmNlIFNpbmdhcG9yZSB0byBjbGFyaWZ5IGFu ZCByZXNvbHZlIHNldmVyYWwgY29udHJvdmVyc2lhbCB0b3BpY3MuIFdpdGggdGhpcyB3b3JrIGJl aGluZCB1cywgd2UgY2FuIG5vdyBtb3ZlIGZvcndhcmQgdG8gcHVibGljYXRpb24uDQogICAgPg0K ICAgID4gVGhpcyBpcyB0byBhbm5vdW5jZSB3b3JraW5nIGdyb3VwIGxhc3QgY2FsbCBvbiB0aGlz IGRyYWZ0IChodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMt M0FfX2RhdGF0cmFja2VyLmlldGYub3JnX2RvY19kcmFmdC0yRGlldGYtMkRzZWNldmVudC0yRHRv a2VuXyZkPUR3SUdhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9K bkUmcj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09bk84Q0tR S3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZzPXJvSXUwSDhjMVBpZHA1eVZ0 X251SG1QTjNfZHRGVXV1cGkycUVQbTR0aXMmZT0pLg0KICAgID4NCiAgICA+IFBsZWFzZSBzZW5k IHlvdXIgY29tbWVudHMgdG8gdGhlIGxpc3QuIEV2ZW4gaWYgeW91IGFyZSBwZXJmZWN0bHkgaGFw cHkgd2l0aCB0aGUgZHJhZnQsIHBsZWFzZSBsZXQgdXMga25vdyB0aGF0IHlvdSBzdXBwb3J0IGl0 cyBwdWJsaWNhdGlvbiBhcy1pcyBieSBwb3N0aW5nIHRvIHRoZSBsaXN0Lg0KICAgID4NCiAgICA+ IFBsZWFzZSBzZW5kIHlvdXIgY29tbWVudCB3aXRoaW4gdGhlIG5leHQgdHdvIHdlZWtzLCB1bnRp bCBGZWIuIDE5Lg0KICAgID4NCiAgICA+IFRoYW5rcywNCiAgICA+ICAgICBEaWNrIGFuZCBZYXJv bg0KICAgID4NCiAgICA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQogICAgPiBJZC1ldmVudCBtYWlsaW5nIGxpc3QNCiAgICA+IElkLWV2ZW50QGlldGYu b3JnPG1haWx0bzpJZC1ldmVudEBpZXRmLm9yZz4NCiAgICA+IGh0dHBzOi8vdXJsZGVmZW5zZS5w cm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlz dGluZm9faWQtMkRldmVudCZkPUR3SUdhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJ ck1VQjY1ZWFwSV9KbkUmcj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRL Wk5BJm09bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZzPXJYSFFp OHZSekVvTVBmYXhUdG50MEVzRzFuWkNGRFlBbVFIYzQ1VG5EYVkmZT0NCiAgICA+IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgPiBJZC1ldmVudCBt YWlsaW5nIGxpc3QNCiAgICA+IElkLWV2ZW50QGlldGYub3JnPG1haWx0bzpJZC1ldmVudEBpZXRm Lm9yZz4NCiAgICA+IGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1o dHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZkPUR3SUdh USZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmcj1uYTVGVnpC VFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09bk84Q0tRS3Iya2djQjhDOHpG LVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZzPXJYSFFpOHZSekVvTVBmYXhUdG50MEVzRzFuWkNG RFlBbVFIYzQ1VG5EYVkmZT0NCg0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQogICAgSWQtZXZlbnQgbWFpbGluZyBsaXN0DQogICAgSWQtZXZlbnRA aWV0Zi5vcmc8bWFpbHRvOklkLWV2ZW50QGlldGYub3JnPg0KICAgIGh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQNCg0KDQpfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KSWQtZXZlbnQgbWFpbGluZyBsaXN0DQpJZC1ldmVu dEBpZXRmLm9yZzxtYWlsdG86SWQtZXZlbnRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2lkLWV2ZW50DQoNCg0K --_000_SN6PR2101MB0943870B4F56606FE47E0CCBF5C70SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpWZXJkYW5hOw0KCXBhbm9zZS0xOjIgMTEg NiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwg bGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlz aXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc2FtcA0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4u Z21haWwtbTczMDY1NjM3OTA3NDc3MTY4Njlob2VuemINCgl7bXNvLXN0eWxlLW5hbWU6Z21haWwt bV83MzA2NTYzNzkwNzQ3NzE2ODY5aG9lbnpiO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOiMwMDIwNjA7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6 ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2Ug V29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAx LjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0t Pjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0 PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4 dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4N CjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4N CjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+SSBjb3VsZCBhZGQgZGVmaW5pdGlvbnMgZm9yIOKAnGV2ZW50 IGlkZW50aWZpZXLigJ0gYW5kIOKAnGV2ZW50IHBheWxvYWTigJ0gaWYgcGVvcGxlIGZlZWwgdGhh dCBpdCB3b3VsZCBpbXByb3ZlIHRoZSBzcGVjaWZpY2F0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC0t IE1pa2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IE1hcml1cyBTY3VydGVzY3UgJmx0O21zY3VydGVz Y3VAZ29vZ2xlLmNvbSZndDsgPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIEZlYnJ1YXJ5IDI3 LCAyMDE4IDQ6MTggUE08YnI+DQo8Yj5Ubzo8L2I+IE1pa2UgSm9uZXMgJmx0O01pY2hhZWwuSm9u ZXNAbWljcm9zb2Z0LmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IFJpY2hhcmQgQmFja21hbiwgQW5u YWJlbGxlICZsdDtyaWNoYW5uYUBhbWF6b24uY29tJmd0OzsgUGhpbCBIdW50ICZsdDtwaGlsLmh1 bnRAb3JhY2xlLmNvbSZndDs7IFlhcm9uIFNoZWZmZXIgJmx0O3lhcm9uZi5pZXRmQGdtYWlsLmNv bSZndDs7IFNlY0V2ZW50ICZsdDtpZC1ldmVudEBpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0 OjwvYj4gUmU6IFtJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50 LXRva2VuLTA1PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9u IFR1ZSwgRmViIDI3LCAyMDE4IGF0IDM6MzcgUE0sIE1pa2UgSm9uZXMgJmx0OzxhIGhyZWY9Im1h aWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20iIHRhcmdldD0iX2JsYW5rIj5NaWNoYWVs LkpvbmVzQG1pY3Jvc29mdC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9j a3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0 O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0 OjBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMwMDIwNjAiPlBsZWFzZSBzZWUNCjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9p bmRlcGVuZGVudGlkL0lkZW50aXR5LUV2ZW50cy9wdWxsLzExIiB0YXJnZXQ9Il9ibGFuayI+DQpo dHRwczovL2dpdGh1Yi5jb20vaW5kZXBlbmRlbnRpZC9JZGVudGl0eS1FdmVudHMvcHVsbC8xMTwv YT4gZm9yIGVkaXRzIHRoYXQgYXJlIGludGVuZGVkIHRvIGFkZHJlc3MgdGhlIFdHTEMgY29tbWVu dHMgcmVjZWl2ZWQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkganVzdCB3YW50IHRvIGJy aW5nIHVwIHRoZSBmYWN0IHRoYXQgdGhlIFNFVCBzcGVjIHVzZXMgJnF1b3Q7RXZlbnQgSXNzdWVy JnF1b3Q7IGFuZCAmcXVvdDtFdmVudCBSZWNpcGllbnQmcXVvdDsgd2hpbGUgdGhlIGRpc3RyaWJ1 dGlvbiBzcGVjIGFuZCBwcm9wb3NlZCBBUEkgc3BlY3MgYWxsIHVzZSAmcXVvdDtFdmVudCBUcmFu c21pdHRlciZxdW90OyBhbmQgJnF1b3Q7RXZlbnQgUmVjZWl2ZXImcXVvdDsuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkganVzdCB3YW50IHRv IG1ha2Ugc3VyZSB3ZSBhbGwgbWFrZSBhIGNvbnNjaW91cyBkZWNpc2lvbiBoZXJlIGFuZCBzZWUg aWYgdGhlcmUgYXJlIHdheXMgdG8gcHJldmVudCBwb3RlbnRpYWwgY29uZnVzaW9uLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHVuZGVyc3Rh bmQgdGhhdCZuYnNwOyZxdW90O0V2ZW50IElzc3VlciZxdW90OyBhbmQgJnF1b3Q7RXZlbnQgUmVj aXBpZW50JnF1b3Q7IGFyZSBpbiBsaW5lIHdpdGggSldULiBBbHNvLCBUcmFuc21pdHRlci9SZWNl aXZlciBtaWdodCBoYXZlIHNsaWdodGx5IGRpZmZlcmVudCBtZWFuaW5nICh0aGUgZW50aXR5IHRo YXQgaXNzdWVzIHZzIHRoZSBlbnRpdHkgdGhhdCB0cmFuc21pdHMpLiBCdXQgSSB0aGluayB0aGV5 IGFyZSBjbG9zZSBlbm91Z2ggdG8gYmUNCiBjb25mdXNpbmcuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+TWFyaXVz LCBJIGRvbuKAmXQgdGhpbmsgd2UgbmVlZCBhIGZvcm1hbCBkZWZpbml0aW9uIG9mIOKAnGV2ZW50 IGlkZW50aWZpZXLigJ0gYmVjYXVzZSBpdOKAmXMgY2xlYXJseSBkZWZpbmVkIGJ5IHRoaXMgdXNh Z2UgaW4gU2VjdGlvbiAyIChUaGUgU2VjdXJpdHkgRXZlbnQgVG9rZW4NCiAoU0VUKTo8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6LjVpbiI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtWZXJkYW5h JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkVhY2ggbWVtYmVyIG9mIHRoZQ0KPC9zcGFu PjxzYW1wPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Zl cmRhbmEmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+ZXZlbnRzPC9zcGFuPjwvc2FtcD48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiBKU09OIG9iamVjdCBpcyBhIG5hbWUvdmFsdWUg cGFpci4gVGhlIEpTT04gbWVtYmVyIG5hbWUgaXMgYSBVUkkgc3RyaW5nDQogdmFsdWUsIHdoaWNo IGlzIHRoZSBldmVudCBpZGVudGlmaWVyLCBhbmQgdGhlIGNvcnJlc3BvbmRpbmcgdmFsdWUgaXMg YSBKU09OIG9iamVjdCBrbm93biBhcyB0aGUgZXZlbnQgJnF1b3Q7cGF5bG9hZCZxdW90Oy48L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QSBmb3JtYWwgZGVmaW5pdGlvbiB3b3VsZCBiZSB1c2Vm dWwgSU1PLiBNYW55IHByb2ZpbGVzIHdpbGwgZGVmaW5lIGV2ZW50cyBhbmQgdGhleSB3aWxsIGFs bCBoYXZlIHRvIGNyZWF0ZSBldmVudCBpZGVudGlmaWVycyBhbmQgbWFrZSByZWZlcmVuY2UgdG8g dGhlIGNvbmNlcHQuIEEgY2xlYXIgZGVmaW5pdGlvbiBvZiB0aGUgdGVybSB3b3VsZCBoZWxwLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBw dDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Y29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFRoYW5r cyBhbGwsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IC0tIE1pa2U8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPkZyb206PC9iPiBNYXJpdXMgU2N1cnRlc2N1ICZs dDs8YSBocmVmPSJtYWlsdG86bXNjdXJ0ZXNjdUBnb29nbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+ bXNjdXJ0ZXNjdUBnb29nbGUuY29tPC9hPiZndDsNCjxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXks IEZlYnJ1YXJ5IDUsIDIwMTggMTI6NTEgUE08YnI+DQo8Yj5Ubzo8L2I+IFJpY2hhcmQgQmFja21h biwgQW5uYWJlbGxlICZsdDs8YSBocmVmPSJtYWlsdG86cmljaGFubmFAYW1hem9uLmNvbSIgdGFy Z2V0PSJfYmxhbmsiPnJpY2hhbm5hQGFtYXpvbi5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4g UGhpbCBIdW50ICZsdDs8YSBocmVmPSJtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20iIHRhcmdl dD0iX2JsYW5rIj5waGlsLmh1bnRAb3JhY2xlLmNvbTwvYT4mZ3Q7OyBNaWtlIEpvbmVzICZsdDs8 YSBocmVmPSJtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tIiB0YXJnZXQ9Il9ibGFu ayI+TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPC9hPiZndDs7IFlhcm9uIFNoZWZmZXIgJmx0 OzxhIGhyZWY9Im1haWx0bzp5YXJvbmYuaWV0ZkBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj55 YXJvbmYuaWV0ZkBnbWFpbC5jb208L2E+Jmd0OzsNCiBTZWNFdmVudCAmbHQ7PGEgaHJlZj0ibWFp bHRvOmlkLWV2ZW50QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+aWQtZXZlbnRAaWV0Zi5vcmc8 L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0IENhbGwg Zm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4tMDU8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlllcywgbGV0J3MgbWFrZSBmaW5hbCBmaXhlcyBhbmQg bW92ZSBmb3J3YXJkLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPkEgY291cGxlIG9mIG1pbm9yIG5pdHM6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPi0gaW4gdGhlICZxdW90O2V2ZW50cyZxdW90OyBk ZWZpbml0aW9uLCBJIGRvbid0IHRoaW5rICZxdW90O011bHRpcGxlIGV2ZW50IGlkZW50aWZpZXJz IHdpdGggdGhlIHNhbWUgdmFsdWUgTVVTVCBOT1QgYmUgdXNlZC4mcXVvdDsgaXMgbmVlZGVkLCBz aW5jZSB0aGF0IGlzIG5vdCBwb3NzaWJsZSBhbnlob3cgKGFzc3VtaW5nIEkgcmVhZCB0aGUNCiBz dGF0ZW1lbnQgY29ycmVjdGx5KTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj4tIGRvIHdlIG5lZWQgYSBmb3JtYWwgZGVmaW5pdGlvbiBmb3IgJnF1 b3Q7ZXZlbnQgaWRlbnRpZmllciZxdW90Oz88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGJyIGNsZWFyPSJhbGwiPg0KPG86 cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+TWFyaXVz PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9uIE1v biwgRmViIDUsIDIwMTggYXQgMTI6MzggUE0sIFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlICZs dDs8YSBocmVmPSJtYWlsdG86cmljaGFubmFAYW1hem9uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnJp Y2hhbm5hQGFtYXpvbi5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1 b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3Bh ZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBw dDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj5JJ2QgbGlrZSB0byBzZWUgaXRlbSAxIGJlbG93IGFkZHJlc3NlZCBiZWZvcmUgcHVi bGlzaGluZywgYXMgaXQgYWx0ZXJzIChjb3JyZWN0cykgdGhlIG1lYW5pbmcgb2YgdGhlIHRleHQu PGJyPg0KPGJyPg0KT25lIGVycm9yOjxicj4NCjEuJm5ic3A7IEluIHRoZSAmcXVvdDtpYXQmcXVv dDsgZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDIuMjogY2hhbmdlICZxdW90Oy4uLndoZW4gdGhlIGV2 ZW50IHdhcyBpc3N1ZWQuJnF1b3Q7IHRvICZxdW90Oy4uLndoZW4gdGhlIFNFVCB3YXMgaXNzdWVk LiZxdW90Ozxicj4NCjxicj4NCk9uZSBjbGFyaWZpY2F0aW9uOjxicj4NCjIuJm5ic3A7IFRoZSAy bmQgdG8gbGFzdCBwYXJhZ3JhcGggb2Ygc2VjdGlvbiAyLjQgc3RhdGVzICZxdW90O3RoZSBFdmVu dCBSZWNpcGllbnQgTVVTVCZxdW90OyBlbnN1cmUgaW50ZWdyaXR5LCBjb25maWRlbnRpYWxpdHks IGV0Yy4gSXNuJ3QgdGhpcyBwcm9wZXJseSB0aGUgaXNzdWVyJ3MgcmVzcG9uc2liaWxpdHk/IE9y IGJvdGg/PGJyPg0KPGJyPg0KQSBoYW5kZnVsIG9mIG5pdHM6PGJyPg0KMy4mbmJzcDsgVGhlICZx dW90O2F1ZCZxdW90OyBkZWZpbml0aW9uIGluIHNlY3Rpb24gMi4yIGlzIGF3a3dhcmRseSB3cml0 dGVuOyBJIHN1Z2dlc3QgcmVwaHJhc2luZyBpdCB0byBtaXJyb3IgdGhlICZxdW90O2lhdCZxdW90 OyBkZWZpbml0aW9uLjxicj4NCjQuJm5ic3A7IE1pc3NpbmcgJnF1b3Q7dGhlJnF1b3Q7IGluIHRo ZSAmcXVvdDtleHAmcXVvdDsgZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDIuMjogJnF1b3Q7dGhpcyBj bGFpbSBpcyB0aW1lJnF1b3Q7IC0mZ3Q7ICZxdW90O3RoaXMgY2xhaW0gaXMgdGhlIHRpbWUmcXVv dDs8YnI+DQo1LiZuYnNwOyBTeW50YXggZXJyb3IgaW4gdGhlIDNyZCBsaXN0IGl0ZW0gb2Ygc2Vj dGlvbiAyOiAmcXVvdDsuLi5pcyBhIFVSSSBzdHJpbmcgdmFsdWUgaXMgYW4gZXZlbnQgaWRlbnRp Zmllci4uLiZxdW90Ozxicj4NCjYuJm5ic3A7IEluY29uc2lzdGVudCB1c2Ugb2YgdGVybXMgZm9y IGlzc3VlciwgcmVjaXBpZW50LCBzdWJqZWN0LiBBdCB0aGUgdmVyeSBsZWFzdCB3ZSBzaG91bGQg aGF2ZSBjb25zaXN0ZW50IGNhcGl0YWxpemF0aW9uOjxicj4NCiZuYnNwOyBhLiZuYnNwOyBJc3N1 ZXIsIGlzc3VlciwgRXZlbnQgSXNzdWVyLCBTRVQgSXNzdWVyPGJyPg0KJm5ic3A7IGIuJm5ic3A7 IFJlY2lwaWVudCwgcmVjaXBpZW50LCBFdmVudCBSZWNpcGllbnQ8YnI+DQombmJzcDsgYy4mbmJz cDsgU3ViamVjdCwgc3ViamVjdCwgU2VjdXJpdHkgU3ViamVjdCwgc2VjdXJpdHkgc3ViamVjdCwg ZXZlbnQgU3ViamVjdCwgZXZlbnQgc3ViamVjdDxicj4NCjxicj4NCk9LLCBJJ20gcHV0dGluZyBh d2F5IHRoZSByZWQgcGVuIG5vdy4gOik8YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6Izg4ODg4OCI+ PGJyPg0KPHNwYW4gY2xhc3M9ImdtYWlsLW03MzA2NTYzNzkwNzQ3NzE2ODY5aG9lbnpiIj4tLTwv c3Bhbj48YnI+DQo8c3BhbiBjbGFzcz0iZ21haWwtbTczMDY1NjM3OTA3NDc3MTY4Njlob2VuemIi PkFubmFiZWxsZSBSaWNoYXJkIEJhY2ttYW48L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9ImdtYWls LW03MzA2NTYzNzkwNzQ3NzE2ODY5aG9lbnpiIj5BbWF6b24g4oCTIElkZW50aXR5IFNlcnZpY2Vz PC9zcGFuPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48YnI+DQrvu79PbiAyLzUvMTgsIDEyOjMzIFBNLCAmcXVvdDtJZC1ldmVudCBv biBiZWhhbGYgb2YgUGhpbCBIdW50JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnQt Ym91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5v cmc8L2E+IG9uIGJlaGFsZiBvZg0KPGEgaHJlZj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29t IiB0YXJnZXQ9Il9ibGFuayI+cGhpbC5odW50QG9yYWNsZS5jb208L2E+Jmd0OyB3cm90ZTo8YnI+ DQo8YnI+DQombmJzcDsgJm5ic3A7ICYjNDM7MS4gTGV0cyBnZXQgdGhpcyBwdWJsaXNoZWQuPGJy Pg0KPGJyPg0KJm5ic3A7ICZuYnNwOyBQaGlsPGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7 IE9uIEZlYiA1LCAyMDE4LCBhdCAxMTo1NyBBTSwgTWlrZSBKb25lcyAmbHQ7PGEgaHJlZj0ibWFp bHRvOk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPk1pY2hhZWwu Sm9uZXNAbWljcm9zb2Z0LmNvbTwvYT4mZ3Q7IHdyb3RlOjxicj4NCiZuYnNwOyAmbmJzcDsgJmd0 Ozxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBSZWFkeSBmb3IgcHVibGljYXRpb248YnI+DQombmJz cDsgJm5ic3A7ICZndDs8YnI+DQombmJzcDsgJm5ic3A7ICZndDsgLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS08YnI+DQombmJzcDsgJm5ic3A7ICZndDsgRnJvbTogSWQtZXZlbnQgW21haWx0bzo8 YSBocmVmPSJtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsi PmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhhbGYgT2YgWWFyb24gU2hlZmZl cjxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDUsIDIwMTgg MTE6MjQgQU08YnI+DQombmJzcDsgJm5ic3A7ICZndDsgVG86IFNlY0V2ZW50ICZsdDs8YSBocmVm PSJtYWlsdG86aWQtZXZlbnRAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5pZC1ldmVudEBpZXRm Lm9yZzwvYT4mZ3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IFN1YmplY3Q6IFtJZC1ldmVudF0g V0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2VuLTA1PGJyPg0KJm5ic3A7 ICZuYnNwOyAmZ3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IEZpcnN0LCB3ZSB3b3VsZCBsaWtl IHRvIHRoYW5rIHRoZSBhdXRob3JzIGFuZCB0aGUgd29ya2luZyBncm91cCBtZW1iZXJzIHdobyBo YXZlIGJlZW4gd29ya2luZyBzaW5jZSBTaW5nYXBvcmUgdG8gY2xhcmlmeSBhbmQgcmVzb2x2ZSBz ZXZlcmFsIGNvbnRyb3ZlcnNpYWwgdG9waWNzLiBXaXRoIHRoaXMgd29yayBiZWhpbmQgdXMsIHdl IGNhbiBub3cgbW92ZSBmb3J3YXJkIHRvIHB1YmxpY2F0aW9uLjxicj4NCiZuYnNwOyAmbmJzcDsg Jmd0Ozxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBUaGlzIGlzIHRvIGFubm91bmNlIHdvcmtpbmcg Z3JvdXAgbGFzdCBjYWxsIG9uIHRoaXMgZHJhZnQgKDxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5z ZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fZGF0YXRyYWNrZXIuaWV0Zi5vcmdf ZG9jX2RyYWZ0LTJEaWV0Zi0yRHNlY2V2ZW50LTJEdG9rZW5fJmFtcDtkPUR3SUdhUSZhbXA7Yz1S b1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJmFtcDtyPW5hNUZWekJU V21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmYW1wO209bk84Q0tRS3Iya2djQjhD OHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZhbXA7cz1yb0l1MEg4YzFQaWRwNXlWdF9udUht UE4zX2R0RlV1dXBpMnFFUG00dGlzJmFtcDtlPSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vdXJs ZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fZGF0YXRyYWNrZXIuaWV0 Zi5vcmdfZG9jX2RyYWZ0LTJEaWV0Zi0yRHNlY2V2ZW50LTJEdG9rZW5fJmFtcDtkPUR3SUdhUSZh bXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJmFtcDtyPW5h NUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmYW1wO209bk84Q0tRS3Iy a2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZhbXA7cz1yb0l1MEg4YzFQaWRwNXlW dF9udUhtUE4zX2R0RlV1dXBpMnFFUG00dGlzJmFtcDtlPTwvYT4pLjxicj4NCiZuYnNwOyAmbmJz cDsgJmd0Ozxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBQbGVhc2Ugc2VuZCB5b3VyIGNvbW1lbnRz IHRvIHRoZSBsaXN0LiBFdmVuIGlmIHlvdSBhcmUgcGVyZmVjdGx5IGhhcHB5IHdpdGggdGhlIGRy YWZ0LCBwbGVhc2UgbGV0IHVzIGtub3cgdGhhdCB5b3Ugc3VwcG9ydCBpdHMgcHVibGljYXRpb24g YXMtaXMgYnkgcG9zdGluZyB0byB0aGUgbGlzdC48YnI+DQombmJzcDsgJm5ic3A7ICZndDs8YnI+ DQombmJzcDsgJm5ic3A7ICZndDsgUGxlYXNlIHNlbmQgeW91ciBjb21tZW50IHdpdGhpbiB0aGUg bmV4dCB0d28gd2Vla3MsIHVudGlsIEZlYi4gMTkuPGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7PGJy Pg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IFRoYW5rcyw8YnI+DQombmJzcDsgJm5ic3A7ICZndDsmbmJz cDsgJm5ic3A7ICZuYnNwO0RpY2sgYW5kIFlhcm9uPGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7PGJy Pg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fPGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IElkLWV2ZW50IG1haWxpbmcgbGlz dDxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyA8YSBocmVmPSJtYWlsdG86SWQtZXZlbnRAaWV0Zi5v cmciIHRhcmdldD0iX2JsYW5rIj5JZC1ldmVudEBpZXRmLm9yZzwvYT48YnI+DQombmJzcDsgJm5i c3A7ICZndDsgPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3Vy bD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19pZC0yRGV2ZW50JmFt cDtkPUR3SUdhUSZhbXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElf Sm5FJmFtcDtyPW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmYW1w O209bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZhbXA7cz1yWEhR aTh2UnpFb01QZmF4VHRudDBFc0cxblpDRkRZQW1RSGM0NVRuRGFZJmFtcDtlPSIgdGFyZ2V0PSJf YmxhbmsiPg0KaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBz LTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19pZC0yRGV2ZW50JmFtcDtkPUR3SUdh USZhbXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJmFtcDty PW5hNUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmYW1wO209bk84Q0tR S3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZhbXA7cz1yWEhRaTh2UnpFb01Q ZmF4VHRudDBFc0cxblpDRkRZQW1RSGM0NVRuRGFZJmFtcDtlPTwvYT48YnI+DQombmJzcDsgJm5i c3A7ICZndDsgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188 YnI+DQombmJzcDsgJm5ic3A7ICZndDsgSWQtZXZlbnQgbWFpbGluZyBsaXN0PGJyPg0KJm5ic3A7 ICZuYnNwOyAmZ3Q7IDxhIGhyZWY9Im1haWx0bzpJZC1ldmVudEBpZXRmLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPklkLWV2ZW50QGlldGYub3JnPC9hPjxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyA8YSBo cmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0Ff X3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmYW1wO2Q9RHdJR2FRJmFt cDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9bmE1 RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT1uTzhDS1FLcjJr Z2NCOEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJmFtcDtzPXJYSFFpOHZSekVvTVBmYXhU dG50MEVzRzFuWkNGRFlBbVFIYzQ1VG5EYVkmYW1wO2U9IiB0YXJnZXQ9Il9ibGFuayI+DQpodHRw czovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRm Lm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmYW1wO2Q9RHdJR2FRJmFtcDtjPVJvUDFZ dW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFu cVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT1uTzhDS1FLcjJrZ2NCOEM4ekYt UWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJmFtcDtzPXJYSFFpOHZSekVvTVBmYXhUdG50MEVzRzFu WkNGRFlBbVFIYzQ1VG5EYVkmYW1wO2U9PC9hPjxicj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQombmJzcDsg Jm5ic3A7IElkLWV2ZW50IG1haWxpbmcgbGlzdDxicj4NCiZuYnNwOyAmbmJzcDsgPGEgaHJlZj0i bWFpbHRvOklkLWV2ZW50QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+SWQtZXZlbnRAaWV0Zi5v cmc8L2E+PGJyPg0KJm5ic3A7ICZuYnNwOyA8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2lkLWV2ZW50IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pZC1ldmVudDwvYT48YnI+DQo8YnI+DQo8YnI+DQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCklkLWV2ZW50 IG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpJZC1ldmVudEBpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPklkLWV2ZW50QGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQiIHRhcmdldD0iX2JsYW5rIj5o dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lkLWV2ZW50PC9hPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_SN6PR2101MB0943870B4F56606FE47E0CCBF5C70SN6PR2101MB0943_-- From nobody Tue Feb 27 16:24:41 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 226AB12EAD7 for ; Tue, 27 Feb 2018 16:24:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.009 X-Spam-Level: X-Spam-Status: No, score=-2.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p5XsMqoncVsK for ; Tue, 27 Feb 2018 16:24:37 -0800 (PST) Received: from mail-ua0-x22a.google.com (mail-ua0-x22a.google.com [IPv6:2607:f8b0:400c:c08::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7571812D954 for ; Tue, 27 Feb 2018 16:24:37 -0800 (PST) Received: by mail-ua0-x22a.google.com with SMTP id z3so437365uae.12 for ; Tue, 27 Feb 2018 16:24:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=LcRxjuFQZe255P34KhXXLx8n9iaGw8yIlMaAzz4BdAU=; b=Xrqj41lvWd0UfGXMpsVessQmWhDZf1NKAk9UAH3kV1YvKspNtIY8dXAVUZcu7tv/w/ +R2QQ+V8Gd3RPgfy7px04P0Q+Bj8VIR0Az3p8XrZEIqynelizuaK9uWrlxOfiFeJ6shF Oh96ZZY4fE4HDpSitlSr4i93mEElPTEvPZYTV8DKvh3a3RAIkaPamFy6TwnqRn9IfnSO OCRkoy2rkSzrHi6kYrzlFu89PE+E83zwhjxkMW+sJnLZiT8lRXmKFn00fF26YPhPkKq4 iB/GhoccbaHU1t6r732c2HiN2xRcT0Ksx2xjVKyCSIpc8CVhaaupFAvKi8GQ5Z55jXWy i7yA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=LcRxjuFQZe255P34KhXXLx8n9iaGw8yIlMaAzz4BdAU=; b=nyPmQQ58lLBjFMb6kpPhyvENOrvcrIgc4Sxi0cQLKR+jx5FfdlYDhrMWvmDnt6x4P9 MScH50NJj5I39Cj3LgKOW0mSITIkUfpGvPrNtvC8aWRQ+y2zDzEZlYFVwz+cB6HCAuKO 7rVMcSW0tYPf3L4YaIJFPuuxjB3PEPr2fteV14CyIKZCuAzT6qugC5kF7Cx2NiBJE+x9 hcoNmUVap+bPGT3MDohNmf8wi/juuFTyMqYCa+X63DWiclEFhOiSfrXZdOCL1Z8y4xp4 W4G/udH6XV22I5k1GwAe2TWsb37gMtUhlgX6YpP3/X4NRKr8AHpXKdXt3zlG/NVlnFd/ hk9g== X-Gm-Message-State: APf1xPDNZIk39NpyjjJPP1njJsFjbRuSYjxS/M0ziT7/o/eLX24vZj8W CPidURkbd92dGIiAq0I+PHaTajXyFi6sULraAgGv7A== X-Google-Smtp-Source: AG47ELvCmu4xDs3iNhUBf7SBV9dnO81O2K5NAj01Lbro1K/U1UZjGrzPizxVH4kckloE7LBsDLnRqQJzB3WvcYwZSto= X-Received: by 10.176.81.137 with SMTP id g9mr12545591uaa.171.1519777476015; Tue, 27 Feb 2018 16:24:36 -0800 (PST) MIME-Version: 1.0 Received: by 10.31.94.88 with HTTP; Tue, 27 Feb 2018 16:24:15 -0800 (PST) In-Reply-To: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> From: Marius Scurtescu Date: Tue, 27 Feb 2018 16:24:15 -0800 Message-ID: To: Mike Jones Cc: "Richard Backman, Annabelle" , Phil Hunt , Yaron Sheffer , SecEvent Content-Type: multipart/alternative; boundary="94eb2c1927aa9912c805663ac457" Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 00:24:41 -0000 --94eb2c1927aa9912c805663ac457 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable +1 Thanks Mike Marius On Tue, Feb 27, 2018 at 4:22 PM, Mike Jones wrote: > I could add definitions for =E2=80=9Cevent identifier=E2=80=9D and =E2=80= =9Cevent payload=E2=80=9D if > people feel that it would improve the specification. > > > > -- Mike > > > > *From:* Marius Scurtescu > *Sent:* Tuesday, February 27, 2018 4:18 PM > *To:* Mike Jones > *Cc:* Richard Backman, Annabelle ; Phil Hunt < > phil.hunt@oracle.com>; Yaron Sheffer ; SecEvent < > id-event@ietf.org> > > *Subject:* Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > > > On Tue, Feb 27, 2018 at 3:37 PM, Mike Jones > wrote: > > Please see https://github.com/independentid/Identity-Events/pull/11 for > edits that are intended to address the WGLC comments received. > > > > I just want to bring up the fact that the SET spec uses "Event Issuer" an= d > "Event Recipient" while the distribution spec and proposed API specs all > use "Event Transmitter" and "Event Receiver". > > > > I just want to make sure we all make a conscious decision here and see if > there are ways to prevent potential confusion. > > > > I understand that "Event Issuer" and "Event Recipient" are in line with > JWT. Also, Transmitter/Receiver might have slightly different meaning (th= e > entity that issues vs the entity that transmits). But I think they are > close enough to be confusing. > > > > > > Marius, I don=E2=80=99t think we need a formal definition of =E2=80=9Ceve= nt identifier=E2=80=9D > because it=E2=80=99s clearly defined by this usage in Section 2 (The Secu= rity Event > Token (SET): > > Each member of the events JSON object is a name/value pair. The JSON > member name is a URI string value, which is the event identifier, and the > corresponding value is a JSON object known as the event "payload". > > > > A formal definition would be useful IMO. Many profiles will define events > and they will all have to create event identifiers and make reference to > the concept. A clear definition of the term would help. > > > > > > > > Thanks > all, > > -- Mike > > > > *From:* Marius Scurtescu > *Sent:* Monday, February 5, 2018 12:51 PM > *To:* Richard Backman, Annabelle > *Cc:* Phil Hunt ; Mike Jones < > Michael.Jones@microsoft.com>; Yaron Sheffer ; > SecEvent > *Subject:* Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > > > Yes, let's make final fixes and move forward. > > > > A couple of minor nits: > > - in the "events" definition, I don't think "Multiple event identifiers > with the same value MUST NOT be used." is needed, since that is not > possible anyhow (assuming I read the statement correctly) > > - do we need a formal definition for "event identifier"? > > > > > Marius > > > > On Mon, Feb 5, 2018 at 12:38 PM, Richard Backman, Annabelle < > richanna@amazon.com> wrote: > > I'd like to see item 1 below addressed before publishing, as it alters > (corrects) the meaning of the text. > > One error: > 1. In the "iat" definition in section 2.2: change "...when the event was > issued." to "...when the SET was issued." > > One clarification: > 2. The 2nd to last paragraph of section 2.4 states "the Event Recipient > MUST" ensure integrity, confidentiality, etc. Isn't this properly the > issuer's responsibility? Or both? > > A handful of nits: > 3. The "aud" definition in section 2.2 is awkwardly written; I suggest > rephrasing it to mirror the "iat" definition. > 4. Missing "the" in the "exp" definition in section 2.2: "this claim is > time" -> "this claim is the time" > 5. Syntax error in the 3rd list item of section 2: "...is a URI string > value is an event identifier..." > 6. Inconsistent use of terms for issuer, recipient, subject. At the very > least we should have consistent capitalization: > a. Issuer, issuer, Event Issuer, SET Issuer > b. Recipient, recipient, Event Recipient > c. Subject, subject, Security Subject, security subject, event Subject= , > event subject > > OK, I'm putting away the red pen now. :) > > -- > Annabelle Richard Backman > Amazon =E2=80=93 Identity Services > > > =EF=BB=BFOn 2/5/18, 12:33 PM, "Id-event on behalf of Phil Hunt" < > id-event-bounces@ietf.org on behalf of phil.hunt@oracle.com> wrote: > > +1. Lets get this published. > > Phil > > > On Feb 5, 2018, at 11:57 AM, Mike Jones > wrote: > > > > Ready for publication > > > > -----Original Message----- > > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf Of > Yaron Sheffer > > Sent: Monday, February 5, 2018 11:24 AM > > To: SecEvent > > Subject: [Id-event] WG Last Call for draft-ietf-secevent-token-05 > > > > First, we would like to thank the authors and the working group > members who have been working since Singapore to clarify and resolve > several controversial topics. With this work behind us, we can now move > forward to publication. > > > > This is to announce working group last call on this draft ( > https://urldefense.proofpoint.com/v2/url?u=3Dhttps- > 3A__datatracker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Dtoken_&d=3DDwIGaQ&= c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DroIu0H8c1Pidp5yVt_nuHmPN3_dtFUuupi2qEPm4tis&= e=3D > ). > > > > Please send your comments to the list. Even if you are perfectly > happy with the draft, please let us know that you support its publication > as-is by posting to the list. > > > > Please send your comment within the next two weeks, until Feb. 19. > > > > Thanks, > > Dick and Yaron > > > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www. > ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&= e=3D > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www. > ietf.org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3D > RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3D > na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF- > QhajSSLuCHhPdHSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&= e=3D > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > > > > --94eb2c1927aa9912c805663ac457 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
+1=C2=A0

Thanks Mike

Marius

On Tue, Feb 27, 2018 at 4:22 PM, Mike Jones = <Michael.Jones@microsoft.com> wrote:

I could add definition= s for =E2=80=9Cevent identifier=E2=80=9D and =E2=80=9Cevent payload=E2=80= =9D if people feel that it would improve the specification.

=C2=A0

=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -- Mik= e

=C2=A0

From: Marius Scurtescu <mscurtescu@google.com>
Sent: Tuesday, February 27, 2018 4:18 PM
To: Mike Jones <Michael.Jones@microsoft.com>
Cc: Richard Backman, Annabelle <richanna@amazon.com>; Phil Hunt <phil.hunt@oracle.com= >; Yaron Sheffer <yaronf.ietf@gmail.com>; SecEvent <id-event@ietf.org>


Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-0= 5

=C2=A0

On Tue, Feb 27, 2018 at 3:37 PM, Mike Jones <Michael.Jones@= microsoft.com> wrote:

Please see https://github.com/independentid/Identity-Events/pull/11 for = edits that are intended to address the WGLC comments received.

=C2=A0

I just want to bring up the fact that the SET spec u= ses "Event Issuer" and "Event Recipient" while the dist= ribution spec and proposed API specs all use "Event Transmitter" = and "Event Receiver".

=C2=A0

I just want to make sure we all make a conscious dec= ision here and see if there are ways to prevent potential confusion.=

=C2=A0

I understand that=C2=A0"Event Issuer" and = "Event Recipient" are in line with JWT. Also, Transmitter/Receive= r might have slightly different meaning (the entity that issues vs the enti= ty that transmits). But I think they are close enough to be confusing.

=C2=A0

=C2=A0

Marius, I don=E2=80=99= t think we need a formal definition of =E2=80=9Cevent identifier=E2=80=9D b= ecause it=E2=80=99s clearly defined by this usage in Section 2 (The Securit= y Event Token (SET):

Each member of the events JSON object is = a name/value pair. The JSON member name is a URI string value, which is the event identifier, and the corresponding value is a JSO= N object known as the event "payload".

=C2=A0

A formal definition would be useful IMO. Many profil= es will define events and they will all have to create event identifiers an= d make reference to the concept. A clear definition of the term would help.=

=C2=A0

=C2=A0

=C2=A0

=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Thanks= all,

=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -- Mik= e

=C2=A0

From: Marius Scurtescu <mscurtescu@google.com>
Sent: Monday, February 5, 2018 12:51 PM
To: Richard Backman, Annabelle <richanna@amazon.com>
Cc: Phil Hunt <phil.hunt@oracle.com>; Mike Jones <Michael.Jones@microsoft.com&= gt;; Yaron Sheffer <yaronf.ietf@gmail.com>; SecEvent <id-eve= nt@ietf.org>
Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-0= 5

=C2=A0

Yes, let's make final fixes and move forward.=

=C2=A0

A couple of minor nits:

- in the "events" definition, I don't = think "Multiple event identifiers with the same value MUST NOT be used= ." is needed, since that is not possible anyhow (assuming I read the statement correctly)

- do we need a formal definition for "event ide= ntifier"?

=C2=A0


Marius

=C2=A0

On Mon, Feb 5, 2018 at 12:38 PM, Richard Backman, An= nabelle <richan= na@amazon.com> wrote:

I'd like to see item 1 below addressed before pu= blishing, as it alters (corrects) the meaning of the text.

One error:
1.=C2=A0 In the "iat" definition in section 2.2: change "...= when the event was issued." to "...when the SET was issued."=

One clarification:
2.=C2=A0 The 2nd to last paragraph of section 2.4 states "the Event Re= cipient MUST" ensure integrity, confidentiality, etc. Isn't this p= roperly the issuer's responsibility? Or both?

A handful of nits:
3.=C2=A0 The "aud" definition in section 2.2 is awkwardly written= ; I suggest rephrasing it to mirror the "iat" definition.
4.=C2=A0 Missing "the" in the "exp" definition in secti= on 2.2: "this claim is time" -> "this claim is the time&q= uot;
5.=C2=A0 Syntax error in the 3rd list item of section 2: "...is a URI = string value is an event identifier..."
6.=C2=A0 Inconsistent use of terms for issuer, recipient, subject. At the v= ery least we should have consistent capitalization:
=C2=A0 a.=C2=A0 Issuer, issuer, Event Issuer, SET Issuer
=C2=A0 b.=C2=A0 Recipient, recipient, Event Recipient
=C2=A0 c.=C2=A0 Subject, subject, Security Subject, security subject, event= Subject, event subject

OK, I'm putting away the red pen now. :)

--
Annab= elle Richard Backman
Amazo= n =E2=80=93 Identity Services


=EF=BB=BFOn 2/5/18, 12:33 PM, "Id-event on behalf of Phil Hunt" &= lt;id-event-= bounces@ietf.org on behalf of phil.hunt@oracle.= com> wrote:

=C2=A0 =C2=A0 +1. Lets get this published.

=C2=A0 =C2=A0 Phil

=C2=A0 =C2=A0 > On Feb 5, 2018, at 11:57 AM, Mike Jones <Michael.Jones@microsof= t.com> wrote:
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Ready for publication
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > -----Original Message-----
=C2=A0 =C2=A0 > From: Id-event [mailto:id-event-bounces@ietf.org] On Behalf= Of Yaron Sheffer
=C2=A0 =C2=A0 > Sent: Monday, February 5, 2018 11:24 AM
=C2=A0 =C2=A0 > To: SecEvent <id-event@ietf.org>
=C2=A0 =C2=A0 > Subject: [Id-event] WG Last Call for draft-ietf-secevent= -token-05
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > First, we would like to thank the authors and the workin= g group members who have been working since Singapore to clarify and resolv= e several controversial topics. With this work behind us, we can now move f= orward to publication.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > This is to announce working group last call on this draf= t (https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__datatra= cker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Dtoken_&d=3DDwIGaQ= &c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgc= B8C8zF-QhajSSLuCHhPdHSjTC59M_YY&s=3DroIu0H8c1Pidp5yVt_nuHmPN3= _dtFUuupi2qEPm4tis&e=3D).
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Please send your comments to the list. Even if you are p= erfectly happy with the draft, please let us know that you support its publ= ication as-is by posting to the list.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Please send your comment within the next two weeks, unti= l Feb. 19.
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > Thanks,
=C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0Dick and Yaron
=C2=A0 =C2=A0 >
=C2=A0 =C2=A0 > _______________________________________________
=C2=A0 =C2=A0 > Id-event mailing list
=C2=A0 =C2=A0 > I= d-event@ietf.org
=C2=A0 =C2=A0 > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.o= rg_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCg= aWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXP= puYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-QhajSSLuCHhPd= HSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&a= mp;e=3D
=C2=A0 =C2=A0 > _______________________________________________
=C2=A0 =C2=A0 > Id-event mailing list
=C2=A0 =C2=A0 > I= d-event@ietf.org
=C2=A0 =C2=A0 > https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.o= rg_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCg= aWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXP= puYqPkAI1aLcLN4KZNA&m=3DnO8CKQKr2kgcB8C8zF-QhajSSLuCHhPd= HSjTC59M_YY&s=3DrXHQi8vRzEoMPfaxTtnt0EsG1nZCFDYAmQHc45TnDaY&a= mp;e=3D

=C2=A0 =C2=A0 _______________________________________________
=C2=A0 =C2=A0 Id-event mailing list
=C2=A0 =C2=A0 Id-eve= nt@ietf.org
=C2=A0 =C2=A0 https://www.ietf.org/mailman/listinfo/id-event


_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event

=C2=A0

=C2=A0


--94eb2c1927aa9912c805663ac457-- From nobody Wed Feb 28 15:27:29 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBC3E1270A7 for ; Wed, 28 Feb 2018 15:27:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0XbD9BSDxfGl for ; Wed, 28 Feb 2018 15:27:26 -0800 (PST) Received: from mail-wr0-x229.google.com (mail-wr0-x229.google.com [IPv6:2a00:1450:400c:c0c::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AED7127058 for ; Wed, 28 Feb 2018 15:27:26 -0800 (PST) Received: by mail-wr0-x229.google.com with SMTP id m5so4208558wrg.1 for ; Wed, 28 Feb 2018 15:27:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:subject:to:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=VsTnBun4hAzI/L9t/FXBtXimpROEv9aZLiYrvfRp5NU=; b=SDWQoFi0MbiG5v0na3ocfUtRf3UOtdgUA4+Xo6JOuI99+66xrDjL3u7UNxsfazOAW4 NphlS5Ews6LdIpThcraiNg191Es+FJEi1psKfZKDbBkz8Wh4NQCc2IO0jGCJFxnQZYN8 TqoGwW+vVoNIQ6ARQhjb5WZR7had0UwYcJSQIjtFQ5wnyRRtOwl85V/pqyOuLZMDwKPW F6yc5Idpg2piZiYDDkgAUZn2gG59vQSTH1sb9V9qT+OtupB5OjdTy93mcuSqXU6coATq SUaXY4IRsXe3zncDdr9N62gSNa+Q9d2kSakBUlUVb3DrE+dGfWC5HTqeSmns3AJU0oln CgLg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:subject:to:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=VsTnBun4hAzI/L9t/FXBtXimpROEv9aZLiYrvfRp5NU=; b=fO4wKujReTqFJghdwruRRxuqKD58tdSC3U8sAqQ2gAgautxckZmr64DxMzLL3w5NWN iHxnvvMGBcCXq68KhVhAmw/TK8omRWyz+H1Rit0qGosJzlwEzjuSXsdIaiX72VYSUg71 jqQPvidSfa0f/EbGPPWBaTN5/GSJg6WcVMs0ArRF5jQ2aiJ52hxBIoCsTPsuQGQGZSks kqpsopPLkptNPtBf8WjEgIDOYZieCHadj3QfjuVc5ihlzSncGqPWrWO5+oJTm3W2aUQ6 ul0hwkn3GH4TnnfHpdDiwh6yAsp6+zZG48/FMYAvs9NUe92jes+3vm7vemVmobvGWEbT ArRw== X-Gm-Message-State: APf1xPDrAP2yymPZlreZPCrKjijjg6CPh0AX7XjOmF2BH/Rr89jeYTY/ CfKaCm2FBO9cXK+LwYb3e31K7Lr1 X-Google-Smtp-Source: AH8x227NEaf/VagLba46s+dvzE0rtyoi6ilhDKbi7zBEnHgymxmolFMuNfWcHIZukMUBDJjobqxlkw== X-Received: by 10.223.143.101 with SMTP id p92mr17079338wrb.241.1519860444527; Wed, 28 Feb 2018 15:27:24 -0800 (PST) Received: from [10.0.0.149] (bzq-109-65-61-134.red.bezeqint.net. [109.65.61.134]) by smtp.gmail.com with ESMTPSA id k18sm4523293wmd.4.2018.02.28.15.27.23 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Feb 2018 15:27:23 -0800 (PST) From: Yaron Sheffer To: SecEvent Message-ID: <6e8afb70-3e6b-0ea5-7749-442c1c2d4c41@gmail.com> Date: Thu, 1 Mar 2018 01:27:22 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: [Id-event] Doc shepherd review X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 23:27:28 -0000 Hi, I will be document shepherd for the SET spec. As such, I just reread it once again, and I think it is in very good shape. Here are my (mostly editorial) comments. - Abstract: please add the following to clarify, e.g. after the first sentence: SETs serve to exchange information about identity-related events. - A security subject MAY be permanent - this is descriptive text, please change "MAY" to "may". - "SETs have no capability for error signaling to ensure the validation of a received SET" - SETs are a format, so it is a higher level protocol that may or may not signal errors. I suggest to remove this sentence. - "has occurred about a Subject." Should this be "has occurred to a Subject"? - 2.2: for readability, please include the full names of the claims ("Issuer", "JWT ID" etc.). - IMO the distinction between JWTs and SETs with regard to the need to use "exp" is not convincing. I suggest we refer to Sec. 4.5 for a better rationale why we make this claim NOT RECOMMENDED rather than OPTIONAL as in RFC 7519. - txn: this paragraph should speak about SETs rather than JWTs. - "to provide integrity, confidentiality, and issuer validation", should be "issuer authenticity". - "Whether and how multiple "events" values are used": the reader who has not been following our discussions may not understand what this means, maybe we should say in parentheses, (i.e. multiple members in the "events" JSON object). - "MUST support TLS 1.2" - add "or a higher version". - 4.5: intentionally - I think we mean "maliciously". - 6.1.1: "Security Event URI" - this description is incorrect, should probably be "Security Event information" or something similarly vague. - RFC 7617 - unused ref. Similarly saml-core. Thanks,     Yaron From nobody Wed Feb 28 15:29:51 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1962127058 for ; Wed, 28 Feb 2018 15:29:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.011 X-Spam-Level: X-Spam-Status: No, score=-3.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y82OF9hnL2i8 for ; Wed, 28 Feb 2018 15:29:47 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0107.outbound.protection.outlook.com [104.47.40.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4EC81270A7 for ; Wed, 28 Feb 2018 15:29:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=IpM6CzJZ167W0hVDzFvh6e5z+2PRhJDJnouJPGICz88=; b=NhGimDauYLm10EOMXT1hTXIhYqm28AwBIfoc/9ycQTvnP6jsE1CPmT5Xm7kJCvZ/FCa0yWfY0NO5FIYsbpi/93n9OGoQ2un943ooxT+LTB+AJa2sWUUUqzMnpW+7U6WLHDLJQ9eOzySAzsE68CXIbWqED179JTH72x6jm4t+1TE= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0895.namprd21.prod.outlook.com (52.132.116.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.3; Wed, 28 Feb 2018 23:29:46 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Wed, 28 Feb 2018 23:29:46 +0000 From: Mike Jones To: Yaron Sheffer , SecEvent Thread-Topic: [Id-event] Doc shepherd review Thread-Index: AQHTsOu1MSk9fbz0K0q+w+e8f4Rw8aO6dfNQ Date: Wed, 28 Feb 2018 23:29:46 +0000 Message-ID: References: <6e8afb70-3e6b-0ea5-7749-442c1c2d4c41@gmail.com> In-Reply-To: <6e8afb70-3e6b-0ea5-7749-442c1c2d4c41@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-28T23:29:45.0811114Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:e::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0895; 6:VCm0ZnayrzK4Ksg/axRSxs32VwutnQOXkwbMQgyf6gUnVHFccZVcXUlHWy+9Ftk6/7Ccw3pUdq4mRrdErliCur+pK4clrTzfN86F3UrQA1EJk6AwN1jKwQ7Hb9+LGvCtMF3JgO6JtfyYj9BZBs14RME/sR2jZlUCDsKphSJ+hhAeQDAAm2nJ+7/OAsm4aMioWy7gFdLgh+4oL/r7MyKKQnAsqalcTRW5As7Rs+yyowrx/I9V/MizdfMlZ7q2jIFsOKuCiUWzgD7Ghm62cF6l7NcrIkbZQQCX+brN6QGkPwKK9i2CD13q2KzA5q+gIvKSsDUDUruwwqH9LyOn1Fq6cvK2bEcwaXT6QTvRGVl6mDkBwUZ+uOfuI49y5GV2qmt4; 5:VRVBrA7z/5UJedL0r64UAHdWLPpK357ix8Gys/BYPp1WXK/ma8eVrsnP7s5T3NTZkPdMOi4un4ury3DSKQ4eV4+IcntSDd/sAcuR4KyNjbrbbVWrbSV7frGjwMD1F9851BhJ9w5OnJRRMRD0MpPPYKZL8m5mHolE51XKqGleGxE=; 24:B2NUa1SQ52yM8IevI1IBQ6PM/ypqIG1i8/N0A5IArFCqfGgC9RPg0nwZFhyFRtxnTzjs+LEONTLbIzCrBl5GF20ZKEfU7oHVfSkcVe3fENo=; 7:EWgWIfGgz6rwafxAmiWzYYU8eIxU8XI/xKELUnGyiknjCQwmSx7nON9gcsCj40f+SAshK7m23FLxIhEnnJM+chPsRJqPsk4mLNsYdM9p0VpBBtAzV1YHZ+ZSN46E7fm9Ctl2IJSQ1jk1o//0aNWvfIpsVbyxBIp6DsfO77gf0y0v98Zi1Ub9kEEmeFJahHdhX3ZC3DkvNXEMrHtw3DOhzCgez6pyrTTM5bQrLK1cxt3D38+zzs2RLWUObSc+LvO5 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 2abe7c22-14c4-4c05-a52d-08d57f032745 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB0895; x-ms-traffictypediagnostic: SN6PR2101MB0895: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(3231220)(944501221)(52105095)(6055026)(61426038)(61427038)(6041288)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:SN6PR2101MB0895; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0895; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39380400002)(396003)(366004)(39860400002)(346002)(376002)(13464003)(189003)(199004)(110136005)(53546011)(8990500004)(33656002)(6506007)(305945005)(105586002)(6116002)(55016002)(9686003)(39060400002)(6306002)(22452003)(316002)(74316002)(2950100002)(7696005)(3280700002)(478600001)(102836004)(186003)(10290500003)(59450400001)(76176011)(2900100001)(6346003)(86362001)(14454004)(68736007)(3660700001)(97736004)(81166006)(966005)(2906002)(8936002)(72206003)(6436002)(7736002)(99286004)(8676002)(25786009)(81156014)(6246003)(86612001)(106356001)(5250100002)(10090500001)(53936002)(229853002)(5660300001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0895; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: JqMjGOm75I6snuuu/MPJohzD9pWfRor/x00wQxpoW2u+XHXWsOb4y7Dt+MjG3y1k+CdGyEMMNLgNqVR+6qrcgeYbnnA5lwf9kJKyVEnvreK8ZPflMK78y8HVeUc8NP/cSQDwBSpbcBbegcX6jscB8OkU/Rn6GqBgeMJWJdnaiiQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2abe7c22-14c4-4c05-a52d-08d57f032745 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 23:29:46.2618 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0895 Archived-At: Subject: Re: [Id-event] Doc shepherd review X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 23:29:50 -0000 VGhhbmtzLCBZYXJvbi4gIEknbSByaWdodCBub3cgYWRkaW5nIHRoZSBkZWZpbmVkIHRlcm1zIHRo YXQgTWFyaXVzIGhhZCBhc2tlZCBmb3IuICBJJ2xsIGFwcGx5IHRoZXNlIGNvcnJlY3Rpb25zIGFz IHdlbGwgYXQgdGhlIHNhbWUgdGltZS4NCg0KCQkJCVRoYW5rcyBhZ2FpbiwNCgkJCQktLSBNaWtl DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBJZC1ldmVudCA8aWQtZXZlbnQt Ym91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIFlhcm9uIFNoZWZmZXINClNlbnQ6IFdlZG5l c2RheSwgRmVicnVhcnkgMjgsIDIwMTggMzoyNyBQTQ0KVG86IFNlY0V2ZW50IDxpZC1ldmVudEBp ZXRmLm9yZz4NClN1YmplY3Q6IFtJZC1ldmVudF0gRG9jIHNoZXBoZXJkIHJldmlldw0KDQpIaSwN Cg0KSSB3aWxsIGJlIGRvY3VtZW50IHNoZXBoZXJkIGZvciB0aGUgU0VUIHNwZWMuIEFzIHN1Y2gs IEkganVzdCByZXJlYWQgaXQgb25jZSBhZ2FpbiwgYW5kIEkgdGhpbmsgaXQgaXMgaW4gdmVyeSBn b29kIHNoYXBlLiBIZXJlIGFyZSBteSAobW9zdGx5DQplZGl0b3JpYWwpIGNvbW1lbnRzLg0KDQot IEFic3RyYWN0OiBwbGVhc2UgYWRkIHRoZSBmb2xsb3dpbmcgdG8gY2xhcmlmeSwgZS5nLiBhZnRl ciB0aGUgZmlyc3QNCnNlbnRlbmNlOiBTRVRzIHNlcnZlIHRvIGV4Y2hhbmdlIGluZm9ybWF0aW9u IGFib3V0IGlkZW50aXR5LXJlbGF0ZWQgZXZlbnRzLg0KLSBBIHNlY3VyaXR5IHN1YmplY3QgTUFZ IGJlIHBlcm1hbmVudCAtIHRoaXMgaXMgZGVzY3JpcHRpdmUgdGV4dCwgcGxlYXNlIGNoYW5nZSAi TUFZIiB0byAibWF5Ii4NCi0gIlNFVHMgaGF2ZSBubyBjYXBhYmlsaXR5IGZvciBlcnJvciBzaWdu YWxpbmcgdG8gZW5zdXJlIHRoZSB2YWxpZGF0aW9uIG9mIGEgcmVjZWl2ZWQgU0VUIiAtIFNFVHMg YXJlIGEgZm9ybWF0LCBzbyBpdCBpcyBhIGhpZ2hlciBsZXZlbCBwcm90b2NvbCB0aGF0IG1heSBv ciBtYXkgbm90IHNpZ25hbCBlcnJvcnMuIEkgc3VnZ2VzdCB0byByZW1vdmUgdGhpcyBzZW50ZW5j ZS4NCi0gImhhcyBvY2N1cnJlZCBhYm91dCBhIFN1YmplY3QuIiBTaG91bGQgdGhpcyBiZSAiaGFz IG9jY3VycmVkIHRvIGEgU3ViamVjdCI/DQotIDIuMjogZm9yIHJlYWRhYmlsaXR5LCBwbGVhc2Ug aW5jbHVkZSB0aGUgZnVsbCBuYW1lcyBvZiB0aGUgY2xhaW1zICgiSXNzdWVyIiwgIkpXVCBJRCIg ZXRjLikuDQotIElNTyB0aGUgZGlzdGluY3Rpb24gYmV0d2VlbiBKV1RzIGFuZCBTRVRzIHdpdGgg cmVnYXJkIHRvIHRoZSBuZWVkIHRvIHVzZSAiZXhwIiBpcyBub3QgY29udmluY2luZy4gSSBzdWdn ZXN0IHdlIHJlZmVyIHRvIFNlYy4gNC41IGZvciBhIGJldHRlciByYXRpb25hbGUgd2h5IHdlIG1h a2UgdGhpcyBjbGFpbSBOT1QgUkVDT01NRU5ERUQgcmF0aGVyIHRoYW4gT1BUSU9OQUwgYXMgaW4g UkZDIDc1MTkuDQotIHR4bjogdGhpcyBwYXJhZ3JhcGggc2hvdWxkIHNwZWFrIGFib3V0IFNFVHMg cmF0aGVyIHRoYW4gSldUcy4NCi0gInRvIHByb3ZpZGUgaW50ZWdyaXR5LCBjb25maWRlbnRpYWxp dHksIGFuZCBpc3N1ZXIgdmFsaWRhdGlvbiIsIHNob3VsZCBiZSAiaXNzdWVyIGF1dGhlbnRpY2l0 eSIuDQotICJXaGV0aGVyIGFuZCBob3cgbXVsdGlwbGUgImV2ZW50cyIgdmFsdWVzIGFyZSB1c2Vk IjogdGhlIHJlYWRlciB3aG8gaGFzIG5vdCBiZWVuIGZvbGxvd2luZyBvdXIgZGlzY3Vzc2lvbnMg bWF5IG5vdCB1bmRlcnN0YW5kIHdoYXQgdGhpcyBtZWFucywgbWF5YmUgd2Ugc2hvdWxkIHNheSBp biBwYXJlbnRoZXNlcywgKGkuZS4gbXVsdGlwbGUgbWVtYmVycyBpbiB0aGUgImV2ZW50cyIgSlNP TiBvYmplY3QpLg0KLSAiTVVTVCBzdXBwb3J0IFRMUyAxLjIiIC0gYWRkICJvciBhIGhpZ2hlciB2 ZXJzaW9uIi4NCi0gNC41OiBpbnRlbnRpb25hbGx5IC0gSSB0aGluayB3ZSBtZWFuICJtYWxpY2lv dXNseSIuDQotIDYuMS4xOiAiU2VjdXJpdHkgRXZlbnQgVVJJIiAtIHRoaXMgZGVzY3JpcHRpb24g aXMgaW5jb3JyZWN0LCBzaG91bGQgcHJvYmFibHkgYmUgIlNlY3VyaXR5IEV2ZW50IGluZm9ybWF0 aW9uIiBvciBzb21ldGhpbmcgc2ltaWxhcmx5IHZhZ3VlLg0KLSBSRkMgNzYxNyAtIHVudXNlZCBy ZWYuIFNpbWlsYXJseSBzYW1sLWNvcmUuDQoNClRoYW5rcywNCiDCoMKgwqAgWWFyb24NCg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCklkLWV2ZW50IG1h aWxpbmcgbGlzdA0KSWQtZXZlbnRAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vaWQtZXZlbnQNCg== From nobody Wed Feb 28 15:34:51 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3845612711E for ; Wed, 28 Feb 2018 15:34:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.03 X-Spam-Level: X-Spam-Status: No, score=-2.03 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oracle.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RelVu7CPIBCg for ; Wed, 28 Feb 2018 15:34:47 -0800 (PST) Received: from userp2120.oracle.com (userp2120.oracle.com [156.151.31.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7F51127023 for ; Wed, 28 Feb 2018 15:34:46 -0800 (PST) Received: from pps.filterd (userp2120.oracle.com [127.0.0.1]) by userp2120.oracle.com (8.16.0.22/8.16.0.22) with SMTP id w1SNW68G105832; Wed, 28 Feb 2018 23:34:45 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=corp-2017-10-26; bh=tqxPoTEWF3+EvYctyZKghqTurwvSq7vyvfalgJNss2I=; b=FDRKLuysC4VwucCZANUX20SxeymOn27hh93Uh2fxVp08ogMdiRkH4qZBHsC4A7WtxT2P EhXYxfAHD2rzB2pkInh2GMAYbc+0PJtnq2L1oO3Owp95hr3S+5ht4AP0A5liIgsn0Ktf 4m2h3gndM/20HxWTIZEPypliawPjP637LIqBgaS0f+qJ5JtS8HDASl0HE3+RZ4oeiCRD bDlA38PWU/Xuqd/BdEtcMuP9OK+aGqARMClBqCqXe/GK+lM/W+nH5M/ZdXc6MXGUGNT+ +DwLyjb7ibSLNNAJsZaT7buewLSRVBUPHyY4Fy3ipST/4z0DtkB1qglOzVXRt7IAvxIa aw== Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by userp2120.oracle.com with ESMTP id 2ge5nc83ut-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 28 Feb 2018 23:34:45 +0000 Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by aserv0022.oracle.com (8.14.4/8.14.4) with ESMTP id w1SNYiEp025052 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Wed, 28 Feb 2018 23:34:44 GMT Received: from abhmp0008.oracle.com (abhmp0008.oracle.com [141.146.116.14]) by userv0121.oracle.com (8.14.4/8.13.8) with ESMTP id w1SNYhCg030337; Wed, 28 Feb 2018 23:34:43 GMT Received: from [192.168.1.28] (/70.70.142.148) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 28 Feb 2018 15:34:43 -0800 From: Phil Hunt Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_967CEF54-7729-4281-82F4-4F87DA71C415" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Wed, 28 Feb 2018 15:34:39 -0800 In-Reply-To: <6e8afb70-3e6b-0ea5-7749-442c1c2d4c41@gmail.com> Cc: SecEvent To: Yaron Sheffer References: <6e8afb70-3e6b-0ea5-7749-442c1c2d4c41@gmail.com> X-Mailer: Apple Mail (2.3445.5.20) X-Proofpoint-Virus-Version: vendor=nai engine=5900 definitions=8818 signatures=668682 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1802280281 Archived-At: Subject: Re: [Id-event] Doc shepherd review X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 23:34:49 -0000 --Apple-Mail=_967CEF54-7729-4281-82F4-4F87DA71C415 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Yaron, Thanks for the comments, will add to the next update. Mike has added some other minor editorial fixes for consistency with JWT = etc which I believe the group discussed. A couple questions inline=E2=80=A6 Phil Oracle Corporation, Identity Cloud Services Architect @independentid www.independentid.com = phil.hunt@oracle.com = > On Feb 28, 2018, at 3:27 PM, Yaron Sheffer = wrote: >=20 > Hi, >=20 > I will be document shepherd for the SET spec. As such, I just reread = it once again, and I think it is in very good shape. Here are my (mostly = editorial) comments. >=20 > - Abstract: please add the following to clarify, e.g. after the first = sentence: SETs serve to exchange information about identity-related = events. > - A security subject MAY be permanent - this is descriptive text, = please change "MAY" to "may". > - "SETs have no capability for error signaling to ensure the = validation of a received SET" - SETs are a format, so it is a higher = level protocol that may or may not signal errors. I suggest to remove = this sentence. > - "has occurred about a Subject." Should this be "has occurred to a = Subject=E2=80=9D? I will re-read. I think what the spec is trying to say is to or related = to. Meaning the even is directly related to the subject but not = necessarily to the subject. I will review and suggest some text. > - 2.2: for readability, please include the full names of the claims = ("Issuer", "JWT ID" etc.). > - IMO the distinction between JWTs and SETs with regard to the need to = use "exp" is not convincing. I suggest we refer to Sec. 4.5 for a better = rationale why we make this claim NOT RECOMMENDED rather than OPTIONAL as = in RFC 7519. > - txn: this paragraph should speak about SETs rather than JWTs. I will defer to Mike, but I believe he suggested to have this registered = for general JWT use.=20 > - "to provide integrity, confidentiality, and issuer validation", = should be "issuer authenticity". > - "Whether and how multiple "events" values are used": the reader who = has not been following our discussions may not understand what this = means, maybe we should say in parentheses, (i.e. multiple members in the = "events" JSON object). > - "MUST support TLS 1.2" - add "or a higher version". > - 4.5: intentionally - I think we mean "maliciously". > - 6.1.1: "Security Event URI" - this description is incorrect, should = probably be "Security Event information" or something similarly vague. > - RFC 7617 - unused ref. Similarly saml-core. >=20 > Thanks, > Yaron >=20 > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65ea= pI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=3DF-QmvDFTApiQ6Wj= ga0U9ssZq_QMLIYG_XiU2g5JO0Ug&s=3DnLwDZhuM4B_ZVxX3dGEafZgxYOCRDGLBAPTA7IJ3Y= Uo&e=3D --Apple-Mail=_967CEF54-7729-4281-82F4-4F87DA71C415 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Yaron,

Thanks for the comments, will add to the next = update.

Mike = has added some other minor editorial fixes for consistency with JWT etc = which I believe the group discussed.

A couple questions inline=E2=80=A6
<= div class=3D"">
Phil

Oracle Corporation, Identity Cloud = Services Architect
@independentid
www.independentid.com
phil.hunt@oracle.com

On Feb 28, 2018, at 3:27 PM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:

Hi,
I will be document shepherd for the SET spec. = As such, I just reread it once again, and I think it is in very good = shape. Here are my (mostly editorial) comments.

- Abstract: please add the following to clarify, e.g. after = the first sentence: SETs serve to exchange information about = identity-related events.
- A security subject MAY be = permanent - this is descriptive text, please change "MAY" to "may".
- "SETs have no capability for error signaling to ensure the = validation of a received SET" - SETs are a format, so it is a higher = level protocol that may or may not signal errors. I suggest to remove = this sentence.
- "has occurred about a Subject." Should = this be "has occurred to a Subject=E2=80=9D?

I will = re-read. I think what the spec is trying to say is to or related to. = Meaning the even is directly related to the subject but not necessarily = to the subject.  I will review and suggest some text.

- 2.2: for readability, please include the full names of the = claims ("Issuer", "JWT ID" etc.).
- IMO the distinction = between JWTs and SETs with regard to the need to use "exp" is not = convincing. I suggest we refer to Sec. 4.5 for a better rationale why we = make this claim NOT RECOMMENDED rather than OPTIONAL as in RFC 7519.
- txn: this paragraph should speak about SETs rather than = JWTs.

I = will defer to Mike, but I believe he suggested to have this registered = for general JWT use. 

- "to provide = integrity, confidentiality, and issuer validation", should be "issuer = authenticity".
- "Whether and how multiple "events" values = are used": the reader who has not been following our discussions may not = understand what this means, maybe we should say in parentheses, (i.e. = multiple members in the "events" JSON object).
- "MUST = support TLS 1.2" - add "or a higher version".
- 4.5: = intentionally - I think we mean "maliciously".
- 6.1.1: = "Security Event URI" - this description is incorrect, should probably be = "Security Event information" or something similarly vague.
-= RFC 7617 - unused ref. Similarly saml-core.

Thanks,
    Yaron

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_id-2Devent&d=3DDwIGaQ&c=3DRoP1YumCXCgaWHvlZY= R8PZh8Bv7qIrMUB65eapI_JnE&r=3Dna5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4K= ZNA&m=3DF-QmvDFTApiQ6Wjga0U9ssZq_QMLIYG_XiU2g5JO0Ug&s=3DnLwDZhuM4B= _ZVxX3dGEafZgxYOCRDGLBAPTA7IJ3YUo&e=3D

= --Apple-Mail=_967CEF54-7729-4281-82F4-4F87DA71C415-- From nobody Wed Feb 28 15:45:43 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BF381270AE for ; Wed, 28 Feb 2018 15:45:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8K-Nnb-4L7Tc for ; Wed, 28 Feb 2018 15:45:38 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0100.outbound.protection.outlook.com [104.47.38.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FE7A1270AC for ; Wed, 28 Feb 2018 15:45:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=WrjbM7vrBzY7oT+/wvWyMJmBC31IHLDGoVy7k/pYOSg=; b=DKHybw3GqCLRuKCYdHHhL3pnJMz7Hwdk81cGsgrVdeN4/0r/whcr7ZwDV4IbRVhilljAUgKV1bX9rNurE20ZiDbWjjwU2kgDMngbWoOyj3gbspDKdSEoc9dUaUFplR07pQNw9bvDdbd5Uza7CGiq/cROilxHMj5ZChJhrEybqwI= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1071.namprd21.prod.outlook.com (52.132.115.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.2; Wed, 28 Feb 2018 23:45:36 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Wed, 28 Feb 2018 23:45:36 +0000 From: Mike Jones To: Phil Hunt , Yaron Sheffer CC: SecEvent Thread-Topic: [Id-event] Doc shepherd review Thread-Index: AQHTsOu1MSk9fbz0K0q+w+e8f4Rw8aO6d4+AgAABG+A= Date: Wed, 28 Feb 2018 23:45:35 +0000 Message-ID: References: <6e8afb70-3e6b-0ea5-7749-442c1c2d4c41@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-28T23:45:34.0062304Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:e::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1071; 7:n4zgBEc453ay/LVAn8/YCMIu3VAABmVpEb1HLu/DyOv4+ZRfkpKyQdvGUZdlTI/zCdu9ov3ZHbj3OWSjpEP+45rRvCLBQmGPCEn2VZWp0SXMuIA6GpWqN5v430twdq9DDoXpRP9sc3jwmYgKyX1MynZXFOTyGidRFQGgucWWkdzK4Vb1dTE+QULwesEJmKa2KlJbi0nie/h42dNdiHPpVKBJETq1h+YaUhAYe0ffnTmdajHFgvQaerVcZNzbme3A x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 85491f38-827d-40dd-fa71-08d57f055d56 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1071; x-ms-traffictypediagnostic: SN6PR2101MB1071: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(10436049006162)(192374486261705)(85827821059158)(21748063052155)(146099531331640); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(3231220)(944501221)(52105095)(10201501046)(6055026)(61426038)(61427038)(6041288)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(6072148)(201708071742011); SRVR:SN6PR2101MB1071; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1071; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(39380400002)(396003)(376002)(366004)(346002)(51914003)(199004)(189003)(316002)(22452003)(606006)(5660300001)(81156014)(8676002)(81166006)(106356001)(10090500001)(33656002)(8936002)(3660700001)(74316002)(7736002)(54896002)(9686003)(236005)(53936002)(6306002)(6436002)(6246003)(25786009)(39060400002)(4326008)(2900100001)(8990500004)(5250100002)(105586002)(55016002)(10290500003)(2906002)(14454004)(478600001)(53386004)(1680700002)(19609705001)(790700001)(3280700002)(72206003)(229853002)(2950100002)(102836004)(99286004)(110136005)(186003)(53546011)(6506007)(86362001)(97736004)(6116002)(7696005)(76176011)(6346003)(966005)(575784001)(68736007)(59450400001)(86612001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1071; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: TP0I5EjL23nw4P4FFewZpuUmZaj7GX8LpjNCepwmkN7xT81Vcaz4BiVwVblKtmrz6AgpprQVwPt2OyERljFfWIIpcdH5hJ3PukXysu2v7HmxhbEDFclLFsNI0WwLy0UntYQdfggMGem0/jFWCP/WaDSJuFDPl+eWT1LaYY9O4M8= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB094303514A8A2E8CFFC6251BF5C70SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 85491f38-827d-40dd-fa71-08d57f055d56 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 23:45:35.9387 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1071 Archived-At: Subject: Re: [Id-event] Doc shepherd review X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 23:45:41 -0000 --_000_SN6PR2101MB094303514A8A2E8CFFC6251BF5C70SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UGhpbCBpcyBjb3JyZWN0LiAgVGhlIOKAnHR4buKAnSBjbGFpbSBpcyBpbnRlbnRpb25hbGx5IHVz YWJsZSB3aXRoIGFueSBKV1QgYW5kIG5vdCBzcGVjaWZpYyB0byBTRVRzLiBUaGlzIGp1c3QgaGFw cGVucyB0byBiZSB0aGUgc3BlYyB0byBkZWZpbmUgaXQgYW5kIGFkZCBpdCB0byB0aGUgSUFOQSBK V1QgQ2xhaW1zIHJlZ2lzdHJ5Lg0KDQpZYXJvbiwgSSBwbGFuIHRvIHR3ZWFrIHlvdXIgbGFuZ3Vh Z2Ug4oCcU0VUcyBzZXJ2ZSB0byBleGNoYW5nZSBpbmZvcm1hdGlvbiBhYm91dCBpZGVudGl0eS1y ZWxhdGVkIGV2ZW50c+KAnSBiZWNhdXNlIHRoZSBjaGFydGVyIGlzIGFib3V0IHNlY3VyaXR5IGV2 ZW50cywgb25seSBzb21lIG9mIHdoaWNoIGFyZSBpZGVudGl0eSBldmVudHMuICBXZSBzaG91bGRu 4oCZdCBuYXJyb3cgdGhlIHNjb3BlIG9mIGFwcGxpY2FiaWxpdHkgYmV5b25kIHdoYXTigJlzIGlu dGVuZGVkLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBJZC1ldmVudCA8aWQtZXZlbnQtYm91 bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIFBoaWwgSHVudA0KU2VudDogV2VkbmVzZGF5LCBG ZWJydWFyeSAyOCwgMjAxOCAzOjM1IFBNDQpUbzogWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZA Z21haWwuY29tPg0KQ2M6IFNlY0V2ZW50IDxpZC1ldmVudEBpZXRmLm9yZz4NClN1YmplY3Q6IFJl OiBbSWQtZXZlbnRdIERvYyBzaGVwaGVyZCByZXZpZXcNCg0KWWFyb24sDQoNClRoYW5rcyBmb3Ig dGhlIGNvbW1lbnRzLCB3aWxsIGFkZCB0byB0aGUgbmV4dCB1cGRhdGUuDQoNCk1pa2UgaGFzIGFk ZGVkIHNvbWUgb3RoZXIgbWlub3IgZWRpdG9yaWFsIGZpeGVzIGZvciBjb25zaXN0ZW5jeSB3aXRo IEpXVCBldGMgd2hpY2ggSSBiZWxpZXZlIHRoZSBncm91cCBkaXNjdXNzZWQuDQoNCkEgY291cGxl IHF1ZXN0aW9ucyBpbmxpbmXigKYNCg0KUGhpbA0KDQpPcmFjbGUgQ29ycG9yYXRpb24sIElkZW50 aXR5IENsb3VkIFNlcnZpY2VzIEFyY2hpdGVjdA0KQGluZGVwZW5kZW50aWQNCnd3dy5pbmRlcGVu ZGVudGlkLmNvbTxodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29tPg0KcGhpbC5odW50QG9yYWNs ZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tPg0KDQoNCk9uIEZlYiAyOCwgMjAxOCwg YXQgMzoyNyBQTSwgWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1haWx0bzp5 YXJvbmYuaWV0ZkBnbWFpbC5jb20+PiB3cm90ZToNCg0KSGksDQoNCkkgd2lsbCBiZSBkb2N1bWVu dCBzaGVwaGVyZCBmb3IgdGhlIFNFVCBzcGVjLiBBcyBzdWNoLCBJIGp1c3QgcmVyZWFkIGl0IG9u Y2UgYWdhaW4sIGFuZCBJIHRoaW5rIGl0IGlzIGluIHZlcnkgZ29vZCBzaGFwZS4gSGVyZSBhcmUg bXkgKG1vc3RseSBlZGl0b3JpYWwpIGNvbW1lbnRzLg0KDQotIEFic3RyYWN0OiBwbGVhc2UgYWRk IHRoZSBmb2xsb3dpbmcgdG8gY2xhcmlmeSwgZS5nLiBhZnRlciB0aGUgZmlyc3Qgc2VudGVuY2U6 IFNFVHMgc2VydmUgdG8gZXhjaGFuZ2UgaW5mb3JtYXRpb24gYWJvdXQgaWRlbnRpdHktcmVsYXRl ZCBldmVudHMuDQotIEEgc2VjdXJpdHkgc3ViamVjdCBNQVkgYmUgcGVybWFuZW50IC0gdGhpcyBp cyBkZXNjcmlwdGl2ZSB0ZXh0LCBwbGVhc2UgY2hhbmdlICJNQVkiIHRvICJtYXkiLg0KLSAiU0VU cyBoYXZlIG5vIGNhcGFiaWxpdHkgZm9yIGVycm9yIHNpZ25hbGluZyB0byBlbnN1cmUgdGhlIHZh bGlkYXRpb24gb2YgYSByZWNlaXZlZCBTRVQiIC0gU0VUcyBhcmUgYSBmb3JtYXQsIHNvIGl0IGlz IGEgaGlnaGVyIGxldmVsIHByb3RvY29sIHRoYXQgbWF5IG9yIG1heSBub3Qgc2lnbmFsIGVycm9y cy4gSSBzdWdnZXN0IHRvIHJlbW92ZSB0aGlzIHNlbnRlbmNlLg0KLSAiaGFzIG9jY3VycmVkIGFi b3V0IGEgU3ViamVjdC4iIFNob3VsZCB0aGlzIGJlICJoYXMgb2NjdXJyZWQgdG8gYSBTdWJqZWN0 4oCdPw0KDQpJIHdpbGwgcmUtcmVhZC4gSSB0aGluayB3aGF0IHRoZSBzcGVjIGlzIHRyeWluZyB0 byBzYXkgaXMgdG8gb3IgcmVsYXRlZCB0by4gTWVhbmluZyB0aGUgZXZlbiBpcyBkaXJlY3RseSBy ZWxhdGVkIHRvIHRoZSBzdWJqZWN0IGJ1dCBub3QgbmVjZXNzYXJpbHkgdG8gdGhlIHN1YmplY3Qu ICBJIHdpbGwgcmV2aWV3IGFuZCBzdWdnZXN0IHNvbWUgdGV4dC4NCg0KDQotIDIuMjogZm9yIHJl YWRhYmlsaXR5LCBwbGVhc2UgaW5jbHVkZSB0aGUgZnVsbCBuYW1lcyBvZiB0aGUgY2xhaW1zICgi SXNzdWVyIiwgIkpXVCBJRCIgZXRjLikuDQotIElNTyB0aGUgZGlzdGluY3Rpb24gYmV0d2VlbiBK V1RzIGFuZCBTRVRzIHdpdGggcmVnYXJkIHRvIHRoZSBuZWVkIHRvIHVzZSAiZXhwIiBpcyBub3Qg Y29udmluY2luZy4gSSBzdWdnZXN0IHdlIHJlZmVyIHRvIFNlYy4gNC41IGZvciBhIGJldHRlciBy YXRpb25hbGUgd2h5IHdlIG1ha2UgdGhpcyBjbGFpbSBOT1QgUkVDT01NRU5ERUQgcmF0aGVyIHRo YW4gT1BUSU9OQUwgYXMgaW4gUkZDIDc1MTkuDQotIHR4bjogdGhpcyBwYXJhZ3JhcGggc2hvdWxk IHNwZWFrIGFib3V0IFNFVHMgcmF0aGVyIHRoYW4gSldUcy4NCg0KSSB3aWxsIGRlZmVyIHRvIE1p a2UsIGJ1dCBJIGJlbGlldmUgaGUgc3VnZ2VzdGVkIHRvIGhhdmUgdGhpcyByZWdpc3RlcmVkIGZv ciBnZW5lcmFsIEpXVCB1c2UuDQoNCg0KLSAidG8gcHJvdmlkZSBpbnRlZ3JpdHksIGNvbmZpZGVu dGlhbGl0eSwgYW5kIGlzc3VlciB2YWxpZGF0aW9uIiwgc2hvdWxkIGJlICJpc3N1ZXIgYXV0aGVu dGljaXR5Ii4NCi0gIldoZXRoZXIgYW5kIGhvdyBtdWx0aXBsZSAiZXZlbnRzIiB2YWx1ZXMgYXJl IHVzZWQiOiB0aGUgcmVhZGVyIHdobyBoYXMgbm90IGJlZW4gZm9sbG93aW5nIG91ciBkaXNjdXNz aW9ucyBtYXkgbm90IHVuZGVyc3RhbmQgd2hhdCB0aGlzIG1lYW5zLCBtYXliZSB3ZSBzaG91bGQg c2F5IGluIHBhcmVudGhlc2VzLCAoaS5lLiBtdWx0aXBsZSBtZW1iZXJzIGluIHRoZSAiZXZlbnRz IiBKU09OIG9iamVjdCkuDQotICJNVVNUIHN1cHBvcnQgVExTIDEuMiIgLSBhZGQgIm9yIGEgaGln aGVyIHZlcnNpb24iLg0KLSA0LjU6IGludGVudGlvbmFsbHkgLSBJIHRoaW5rIHdlIG1lYW4gIm1h bGljaW91c2x5Ii4NCi0gNi4xLjE6ICJTZWN1cml0eSBFdmVudCBVUkkiIC0gdGhpcyBkZXNjcmlw dGlvbiBpcyBpbmNvcnJlY3QsIHNob3VsZCBwcm9iYWJseSBiZSAiU2VjdXJpdHkgRXZlbnQgaW5m b3JtYXRpb24iIG9yIHNvbWV0aGluZyBzaW1pbGFybHkgdmFndWUuDQotIFJGQyA3NjE3IC0gdW51 c2VkIHJlZi4gU2ltaWxhcmx5IHNhbWwtY29yZS4NCg0KVGhhbmtzLA0KICAgIFlhcm9uDQoNCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJZC1ldmVudCBt YWlsaW5nIGxpc3QNCklkLWV2ZW50QGlldGYub3JnPG1haWx0bzpJZC1ldmVudEBpZXRmLm9yZz4N Cmh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3 LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZkPUR3SUdhUSZjPVJvUDFZdW1D WENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmcj1uYTVGVnpCVFdtYW5xV055NERw Y3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09Ri1RbXZERlRBcGlRNldqZ2EwVTlzc1pxX1FNTElZ R19YaVUyZzVKTzBVZyZzPW5Md0RaaHVNNEJfWlZ4WDNkR0VhZlpneFlPQ1JER0xCQVBUQTdJSjNZ VW8mZT0NCg0K --_000_SN6PR2101MB094303514A8A2E8CFFC6251BF5C70SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25v cm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uYXBwbGUtc3R5bGUtc3Bhbg0K CXttc28tc3R5bGUtbmFtZTphcHBsZS1zdHlsZS1zcGFuO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmOw0KCWNvbG9yOiMwMDIwNjA7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxl LXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlv bjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGlu O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNw aWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBk YXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFz cz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjojMDAyMDYwIj5QaGlsIGlzIGNvcnJlY3QuJm5ic3A7IFRoZSDigJx0eG7igJ0gY2xhaW0gaXMg aW50ZW50aW9uYWxseSB1c2FibGUgd2l0aCBhbnkgSldUIGFuZCBub3Qgc3BlY2lmaWMgdG8gU0VU cy4gVGhpcyBqdXN0IGhhcHBlbnMgdG8gYmUgdGhlIHNwZWMgdG8gZGVmaW5lIGl0IGFuZCBhZGQg aXQgdG8gdGhlIElBTkEgSldUIENsYWltcyByZWdpc3RyeS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMwMDIwNjAiPllhcm9uLCBJIHBsYW4gdG8gdHdlYWsgeW91ciBsYW5ndWFnZSDigJw8 L3NwYW4+U0VUcyBzZXJ2ZSB0byBleGNoYW5nZSBpbmZvcm1hdGlvbiBhYm91dCBpZGVudGl0eS1y ZWxhdGVkIGV2ZW50czxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj7igJ0gYmVjYXVzZSB0aGUg Y2hhcnRlciBpcyBhYm91dCBzZWN1cml0eSBldmVudHMsIG9ubHkgc29tZSBvZiB3aGljaCBhcmUN CiBpZGVudGl0eSBldmVudHMuJm5ic3A7IFdlIHNob3VsZG7igJl0IG5hcnJvdyB0aGUgc2NvcGUg b2YgYXBwbGljYWJpbGl0eSBiZXlvbmQgd2hhdOKAmXMgaW50ZW5kZWQuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+ RnJvbTo8L2I+IElkLWV2ZW50ICZsdDtpZC1ldmVudC1ib3VuY2VzQGlldGYub3JnJmd0OyA8Yj5P biBCZWhhbGYgT2YNCjwvYj5QaGlsIEh1bnQ8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBG ZWJydWFyeSAyOCwgMjAxOCAzOjM1IFBNPGJyPg0KPGI+VG86PC9iPiBZYXJvbiBTaGVmZmVyICZs dDt5YXJvbmYuaWV0ZkBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBTZWNFdmVudCAmbHQ7 aWQtZXZlbnRAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbSWQtZXZlbnRd IERvYyBzaGVwaGVyZCByZXZpZXc8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPllhcm9uLDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ VGhhbmtzIGZvciB0aGUgY29tbWVudHMsIHdpbGwgYWRkIHRvIHRoZSBuZXh0IHVwZGF0ZS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TWlrZSBo YXMgYWRkZWQgc29tZSBvdGhlciBtaW5vciBlZGl0b3JpYWwgZml4ZXMgZm9yIGNvbnNpc3RlbmN5 IHdpdGggSldUIGV0YyB3aGljaCBJIGJlbGlldmUgdGhlIGdyb3VwIGRpc2N1c3NlZC48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QSBjb3VwbGUg cXVlc3Rpb25zIGlubGluZeKApjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPlBo aWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjpibGFjayI+T3JhY2xlIENvcnBvcmF0aW9uLCBJZGVudGl0eSBDbG91ZCBTZXJ2aWNlcyBBcmNo aXRlY3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkBpbmRlcGVuZGVudGlkPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOmJsYWNrIj48YSBocmVmPSJodHRwOi8vd3d3LmluZGVwZW5kZW50aWQuY29t Ij53d3cuaW5kZXBlbmRlbnRpZC5jb208L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6YmxhY2siPjxhIGhyZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSI+cGhp bC5odW50QG9yYWNsZS5jb208L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPk9uIEZlYiAyOCwgMjAxOCwgYXQgMzoyNyBQTSwgWWFyb24gU2hlZmZl ciAmbHQ7PGEgaHJlZj0ibWFpbHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbSI+eWFyb25mLmlldGZA Z21haWwuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5IaSw8YnI+DQo8YnI+DQpJIHdpbGwgYmUgZG9jdW1lbnQgc2hlcGhlcmQg Zm9yIHRoZSBTRVQgc3BlYy4gQXMgc3VjaCwgSSBqdXN0IHJlcmVhZCBpdCBvbmNlIGFnYWluLCBh bmQgSSB0aGluayBpdCBpcyBpbiB2ZXJ5IGdvb2Qgc2hhcGUuIEhlcmUgYXJlIG15IChtb3N0bHkg ZWRpdG9yaWFsKSBjb21tZW50cy48YnI+DQo8YnI+DQotIEFic3RyYWN0OiBwbGVhc2UgYWRkIHRo ZSBmb2xsb3dpbmcgdG8gY2xhcmlmeSwgZS5nLiBhZnRlciB0aGUgZmlyc3Qgc2VudGVuY2U6IFNF VHMgc2VydmUgdG8gZXhjaGFuZ2UgaW5mb3JtYXRpb24gYWJvdXQgaWRlbnRpdHktcmVsYXRlZCBl dmVudHMuPGJyPg0KLSBBIHNlY3VyaXR5IHN1YmplY3QgTUFZIGJlIHBlcm1hbmVudCAtIHRoaXMg aXMgZGVzY3JpcHRpdmUgdGV4dCwgcGxlYXNlIGNoYW5nZSAmcXVvdDtNQVkmcXVvdDsgdG8gJnF1 b3Q7bWF5JnF1b3Q7Ljxicj4NCi0gJnF1b3Q7U0VUcyBoYXZlIG5vIGNhcGFiaWxpdHkgZm9yIGVy cm9yIHNpZ25hbGluZyB0byBlbnN1cmUgdGhlIHZhbGlkYXRpb24gb2YgYSByZWNlaXZlZCBTRVQm cXVvdDsgLSBTRVRzIGFyZSBhIGZvcm1hdCwgc28gaXQgaXMgYSBoaWdoZXIgbGV2ZWwgcHJvdG9j b2wgdGhhdCBtYXkgb3IgbWF5IG5vdCBzaWduYWwgZXJyb3JzLiBJIHN1Z2dlc3QgdG8gcmVtb3Zl IHRoaXMgc2VudGVuY2UuPGJyPg0KLSAmcXVvdDtoYXMgb2NjdXJyZWQgYWJvdXQgYSBTdWJqZWN0 LiZxdW90OyBTaG91bGQgdGhpcyBiZSAmcXVvdDtoYXMgb2NjdXJyZWQgdG8gYSBTdWJqZWN04oCd PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+SSB3aWxsIHJlLXJlYWQuIEkgdGhpbmsgd2hhdCB0aGUgc3BlYyBpcyB0 cnlpbmcgdG8gc2F5IGlzIHRvIG9yIHJlbGF0ZWQgdG8uIE1lYW5pbmcgdGhlIGV2ZW4gaXMgZGly ZWN0bHkgcmVsYXRlZCB0byB0aGUgc3ViamVjdCBidXQgbm90IG5lY2Vzc2FyaWx5IHRvIHRoZSBz dWJqZWN0LiAmbmJzcDtJIHdpbGwgcmV2aWV3IGFuZCBzdWdnZXN0IHNvbWUgdGV4dC48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4N CjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0g Mi4yOiBmb3IgcmVhZGFiaWxpdHksIHBsZWFzZSBpbmNsdWRlIHRoZSBmdWxsIG5hbWVzIG9mIHRo ZSBjbGFpbXMgKCZxdW90O0lzc3VlciZxdW90OywgJnF1b3Q7SldUIElEJnF1b3Q7IGV0Yy4pLjxi cj4NCi0gSU1PIHRoZSBkaXN0aW5jdGlvbiBiZXR3ZWVuIEpXVHMgYW5kIFNFVHMgd2l0aCByZWdh cmQgdG8gdGhlIG5lZWQgdG8gdXNlICZxdW90O2V4cCZxdW90OyBpcyBub3QgY29udmluY2luZy4g SSBzdWdnZXN0IHdlIHJlZmVyIHRvIFNlYy4gNC41IGZvciBhIGJldHRlciByYXRpb25hbGUgd2h5 IHdlIG1ha2UgdGhpcyBjbGFpbSBOT1QgUkVDT01NRU5ERUQgcmF0aGVyIHRoYW4gT1BUSU9OQUwg YXMgaW4gUkZDIDc1MTkuPGJyPg0KLSB0eG46IHRoaXMgcGFyYWdyYXBoIHNob3VsZCBzcGVhayBh Ym91dCBTRVRzIHJhdGhlciB0aGFuIEpXVHMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHdpbGwgZGVmZXIgdG8g TWlrZSwgYnV0IEkgYmVsaWV2ZSBoZSBzdWdnZXN0ZWQgdG8gaGF2ZSB0aGlzIHJlZ2lzdGVyZWQg Zm9yIGdlbmVyYWwgSldUIHVzZS4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gJnF1b3Q7dG8gcHJvdmlkZSBpbnRlZ3Jp dHksIGNvbmZpZGVudGlhbGl0eSwgYW5kIGlzc3VlciB2YWxpZGF0aW9uJnF1b3Q7LCBzaG91bGQg YmUgJnF1b3Q7aXNzdWVyIGF1dGhlbnRpY2l0eSZxdW90Oy48YnI+DQotICZxdW90O1doZXRoZXIg YW5kIGhvdyBtdWx0aXBsZSAmcXVvdDtldmVudHMmcXVvdDsgdmFsdWVzIGFyZSB1c2VkJnF1b3Q7 OiB0aGUgcmVhZGVyIHdobyBoYXMgbm90IGJlZW4gZm9sbG93aW5nIG91ciBkaXNjdXNzaW9ucyBt YXkgbm90IHVuZGVyc3RhbmQgd2hhdCB0aGlzIG1lYW5zLCBtYXliZSB3ZSBzaG91bGQgc2F5IGlu IHBhcmVudGhlc2VzLCAoaS5lLiBtdWx0aXBsZSBtZW1iZXJzIGluIHRoZSAmcXVvdDtldmVudHMm cXVvdDsgSlNPTiBvYmplY3QpLjxicj4NCi0gJnF1b3Q7TVVTVCBzdXBwb3J0IFRMUyAxLjImcXVv dDsgLSBhZGQgJnF1b3Q7b3IgYSBoaWdoZXIgdmVyc2lvbiZxdW90Oy48YnI+DQotIDQuNTogaW50 ZW50aW9uYWxseSAtIEkgdGhpbmsgd2UgbWVhbiAmcXVvdDttYWxpY2lvdXNseSZxdW90Oy48YnI+ DQotIDYuMS4xOiAmcXVvdDtTZWN1cml0eSBFdmVudCBVUkkmcXVvdDsgLSB0aGlzIGRlc2NyaXB0 aW9uIGlzIGluY29ycmVjdCwgc2hvdWxkIHByb2JhYmx5IGJlICZxdW90O1NlY3VyaXR5IEV2ZW50 IGluZm9ybWF0aW9uJnF1b3Q7IG9yIHNvbWV0aGluZyBzaW1pbGFybHkgdmFndWUuPGJyPg0KLSBS RkMgNzYxNyAtIHVudXNlZCByZWYuIFNpbWlsYXJseSBzYW1sLWNvcmUuPGJyPg0KPGJyPg0KVGhh bmtzLDxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyBZYXJvbjxicj4NCjxicj4NCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KSWQtZXZlbnQgbWFpbGlu ZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOklkLWV2ZW50QGlldGYub3JnIj5JZC1ldmVudEBp ZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5j b20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJE ZXZlbnQmYW1wO2Q9RHdJR2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1V QjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40 S1pOQSZhbXA7bT1GLVFtdkRGVEFwaVE2V2pnYTBVOXNzWnFfUU1MSVlHX1hpVTJnNUpPMFVnJmFt cDtzPW5Md0RaaHVNNEJfWlZ4WDNkR0VhZlpneFlPQ1JER0xCQVBUQTdJSjNZVW8mYW1wO2UiPmh0 dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3Lmll dGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZhbXA7ZD1Ed0lHYVEmYW1wO2M9Um9Q MVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZhbXA7cj1uYTVGVnpCVFdt YW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJmFtcDttPUYtUW12REZUQXBpUTZXamdh MFU5c3NacV9RTUxJWUdfWGlVMmc1Sk8wVWcmYW1wO3M9bkx3RFpodU00Ql9aVnhYM2RHRWFmWmd4 WU9DUkRHTEJBUFRBN0lKM1lVbyZhbXA7ZTwvYT49PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_SN6PR2101MB094303514A8A2E8CFFC6251BF5C70SN6PR2101MB0943_-- From nobody Wed Feb 28 15:53:27 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B34FA127058 for ; Wed, 28 Feb 2018 15:53:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.02 X-Spam-Level: X-Spam-Status: No, score=-2.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hKYITKBhs3o9 for ; Wed, 28 Feb 2018 15:53:22 -0800 (PST) Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0125.outbound.protection.outlook.com [104.47.42.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 492861241F3 for ; Wed, 28 Feb 2018 15:53:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VDnxn9FNGkh5KmqQrnNO7+8Wx5D0WASRoZRRqWc57pk=; b=MrQVe+Qo7aNJLUNoGvypXefvtuBuocIF45UDAr51XDEBVYlyQAAAQfW/El34BQo7v0jMjh4zF1S28uw0btRxOjKtIKHF5Wv3uycwBV5y7ASawnC9R2/EMbjHkNH3GIEichCTgInuC5laoywsblAG2k+7gbC86bv+sxrNzAcXk80= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1040.namprd21.prod.outlook.com (52.132.115.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.3; Wed, 28 Feb 2018 23:53:20 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Wed, 28 Feb 2018 23:53:20 +0000 From: Mike Jones To: Marius Scurtescu CC: "Richard Backman, Annabelle" , Phil Hunt , Yaron Sheffer , SecEvent Thread-Topic: [Id-event] WG Last Call for draft-ietf-secevent-token-05 Thread-Index: AQHTnrboZGlv7WjXXUqAp/XotWZJi6OWOXowgAAKHACAAAGIgIAAA2eAgCLBRFCAAAwLgIAAANrQgAAA0YCAAYmBcA== Date: Wed, 28 Feb 2018 23:53:20 +0000 Message-ID: References: <9bbd28d8-c5c9-851a-6660-64e3a085e730@gmail.com> <9D516EEA-4A6D-491C-86C8-7D9B9496A000@oracle.com> <9F9CAD18-65E9-4D61-8AE7-DCC931E88E67@amazon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-28T23:53:18.8240816Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:e::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1040; 7:e+C/tcU+e+OcPaApIXJ2TkIXgj8i+tR+/i+Ygz4iJ1eJH629PGmIx9KwXSfHPS/QnqumVoLo5goqzVXF0edA8yF7YvRJdJPSYvPlMvep1Y2+8O6EOFSGZwnEs2rP8e3UewLd1u1uq7sug5338o59/MeWBXy4YhdIGXIy2phcJJcwX+cCSxu8Ccwkwa9vYNv28xR8rhNu8dEREIJok5xkyfIDwHO/7HAgBzOrTtaZ7oECR7AtGiW0LMUk6fvBbAqa x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d052ca7a-b5e2-4a5f-01bd-08d57f067242 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB1040; x-ms-traffictypediagnostic: SN6PR2101MB1040: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(10436049006162)(89211679590171)(166708455590820)(192374486261705)(33061846794335)(85827821059158)(211936372134217)(153496737603132)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231220)(944501221)(52105095)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041288)(20161123558120)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(6072148)(201708071742011); SRVR:SN6PR2101MB1040; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB1040; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39380400002)(346002)(396003)(376002)(366004)(39860400002)(199004)(13464003)(57704003)(189003)(74316002)(10290500003)(5250100002)(6246003)(316002)(236005)(9686003)(7736002)(68736007)(86612001)(53936002)(6306002)(3280700002)(86362001)(54896002)(229853002)(97736004)(575784001)(8936002)(6436002)(81166006)(55016002)(14454004)(6116002)(99286004)(81156014)(790700001)(10090500001)(105586002)(4326008)(106356001)(186003)(5660300001)(2900100001)(72206003)(478600001)(22452003)(93886005)(966005)(7696005)(76176011)(19609705001)(3660700001)(6346003)(102836004)(6506007)(33656002)(6916009)(8676002)(54906003)(606006)(39060400002)(53546011)(8990500004)(25786009)(59450400001)(2950100002)(2906002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1040; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: 0ozGblJ+Ol+gG1Lwj/iNuGcAuH5g2WtxJyikslApd5BU4UkPt7T00SnXL/RzgZcdUulvOETcR3YOwEvugI9wq0kAZVsV5VFTlk1XrYzHUhwx809KAkCuF/9v5OhTzW3B19gc9+OCA8ga9CIQjPn785YoN2kOVLB8LBeUzFz4Jns= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943C1D31DB8327744AB48D8F5C70SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: d052ca7a-b5e2-4a5f-01bd-08d57f067242 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 23:53:20.5022 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1040 Archived-At: Subject: Re: [Id-event] WG Last Call for draft-ietf-secevent-token-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 23:53:26 -0000 --_000_SN6PR2101MB0943C1D31DB8327744AB48D8F5C70SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIHRlcm1zIGFyZSBub3cgZGVmaW5lZCwgYXMgeW91IHJlcXVlc3RlZCwgTWFyaXVzLiAgU2Vl IGh0dHBzOi8vZ2l0aHViLmNvbS9pbmRlcGVuZGVudGlkL0lkZW50aXR5LUV2ZW50cy9wdWxsLzEx L2NvbW1pdHMvN2Y0OTI3ODExZmVhMzgxOWM5ODE5M2JjM2ZlOGJjY2I4MmY4NGQwMS4NCg0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIC0tIE1pa2UNCg0KRnJvbTogTWFyaXVzIFNjdXJ0ZXNjdSA8bXNjdXJ0ZXNjdUBnb29nbGUu Y29tPg0KU2VudDogVHVlc2RheSwgRmVicnVhcnkgMjcsIDIwMTggNDoyNCBQTQ0KVG86IE1pa2Ug Sm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4NCkNjOiBSaWNoYXJkIEJhY2ttYW4s IEFubmFiZWxsZSA8cmljaGFubmFAYW1hem9uLmNvbT47IFBoaWwgSHVudCA8cGhpbC5odW50QG9y YWNsZS5jb20+OyBZYXJvbiBTaGVmZmVyIDx5YXJvbmYuaWV0ZkBnbWFpbC5jb20+OyBTZWNFdmVu dCA8aWQtZXZlbnRAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0IENh bGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4tMDUNCg0KKzENCg0KVGhhbmtzIE1pa2UN Cg0KTWFyaXVzDQoNCk9uIFR1ZSwgRmViIDI3LCAyMDE4IGF0IDQ6MjIgUE0sIE1pa2UgSm9uZXMg PE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTxtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3Nv ZnQuY29tPj4gd3JvdGU6DQpJIGNvdWxkIGFkZCBkZWZpbml0aW9ucyBmb3Ig4oCcZXZlbnQgaWRl bnRpZmllcuKAnSBhbmQg4oCcZXZlbnQgcGF5bG9hZOKAnSBpZiBwZW9wbGUgZmVlbCB0aGF0IGl0 IHdvdWxkIGltcHJvdmUgdGhlIHNwZWNpZmljYXRpb24uDQoNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZy b206IE1hcml1cyBTY3VydGVzY3UgPG1zY3VydGVzY3VAZ29vZ2xlLmNvbTxtYWlsdG86bXNjdXJ0 ZXNjdUBnb29nbGUuY29tPj4NClNlbnQ6IFR1ZXNkYXksIEZlYnJ1YXJ5IDI3LCAyMDE4IDQ6MTgg UE0NClRvOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208bWFpbHRvOk1p Y2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4+DQpDYzogUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVs bGUgPHJpY2hhbm5hQGFtYXpvbi5jb208bWFpbHRvOnJpY2hhbm5hQGFtYXpvbi5jb20+PjsgUGhp bCBIdW50IDxwaGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20+ PjsgWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1haWx0bzp5YXJvbmYuaWV0 ZkBnbWFpbC5jb20+PjsgU2VjRXZlbnQgPGlkLWV2ZW50QGlldGYub3JnPG1haWx0bzppZC1ldmVu dEBpZXRmLm9yZz4+DQoNClN1YmplY3Q6IFJlOiBbSWQtZXZlbnRdIFdHIExhc3QgQ2FsbCBmb3Ig ZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wNQ0KDQpPbiBUdWUsIEZlYiAyNywgMjAxOCBhdCAz OjM3IFBNLCBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208bWFpbHRvOk1p Y2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4+IHdyb3RlOg0KUGxlYXNlIHNlZSBodHRwczovL2dp dGh1Yi5jb20vaW5kZXBlbmRlbnRpZC9JZGVudGl0eS1FdmVudHMvcHVsbC8xMSBmb3IgZWRpdHMg dGhhdCBhcmUgaW50ZW5kZWQgdG8gYWRkcmVzcyB0aGUgV0dMQyBjb21tZW50cyByZWNlaXZlZC4N Cg0KSSBqdXN0IHdhbnQgdG8gYnJpbmcgdXAgdGhlIGZhY3QgdGhhdCB0aGUgU0VUIHNwZWMgdXNl cyAiRXZlbnQgSXNzdWVyIiBhbmQgIkV2ZW50IFJlY2lwaWVudCIgd2hpbGUgdGhlIGRpc3RyaWJ1 dGlvbiBzcGVjIGFuZCBwcm9wb3NlZCBBUEkgc3BlY3MgYWxsIHVzZSAiRXZlbnQgVHJhbnNtaXR0 ZXIiIGFuZCAiRXZlbnQgUmVjZWl2ZXIiLg0KDQpJIGp1c3Qgd2FudCB0byBtYWtlIHN1cmUgd2Ug YWxsIG1ha2UgYSBjb25zY2lvdXMgZGVjaXNpb24gaGVyZSBhbmQgc2VlIGlmIHRoZXJlIGFyZSB3 YXlzIHRvIHByZXZlbnQgcG90ZW50aWFsIGNvbmZ1c2lvbi4NCg0KSSB1bmRlcnN0YW5kIHRoYXQg IkV2ZW50IElzc3VlciIgYW5kICJFdmVudCBSZWNpcGllbnQiIGFyZSBpbiBsaW5lIHdpdGggSldU LiBBbHNvLCBUcmFuc21pdHRlci9SZWNlaXZlciBtaWdodCBoYXZlIHNsaWdodGx5IGRpZmZlcmVu dCBtZWFuaW5nICh0aGUgZW50aXR5IHRoYXQgaXNzdWVzIHZzIHRoZSBlbnRpdHkgdGhhdCB0cmFu c21pdHMpLiBCdXQgSSB0aGluayB0aGV5IGFyZSBjbG9zZSBlbm91Z2ggdG8gYmUgY29uZnVzaW5n Lg0KDQoNCk1hcml1cywgSSBkb27igJl0IHRoaW5rIHdlIG5lZWQgYSBmb3JtYWwgZGVmaW5pdGlv biBvZiDigJxldmVudCBpZGVudGlmaWVy4oCdIGJlY2F1c2UgaXTigJlzIGNsZWFybHkgZGVmaW5l ZCBieSB0aGlzIHVzYWdlIGluIFNlY3Rpb24gMiAoVGhlIFNlY3VyaXR5IEV2ZW50IFRva2VuIChT RVQpOg0KRWFjaCBtZW1iZXIgb2YgdGhlIGV2ZW50cyBKU09OIG9iamVjdCBpcyBhIG5hbWUvdmFs dWUgcGFpci4gVGhlIEpTT04gbWVtYmVyIG5hbWUgaXMgYSBVUkkgc3RyaW5nIHZhbHVlLCB3aGlj aCBpcyB0aGUgZXZlbnQgaWRlbnRpZmllciwgYW5kIHRoZSBjb3JyZXNwb25kaW5nIHZhbHVlIGlz IGEgSlNPTiBvYmplY3Qga25vd24gYXMgdGhlIGV2ZW50ICJwYXlsb2FkIi4NCg0KQSBmb3JtYWwg ZGVmaW5pdGlvbiB3b3VsZCBiZSB1c2VmdWwgSU1PLiBNYW55IHByb2ZpbGVzIHdpbGwgZGVmaW5l IGV2ZW50cyBhbmQgdGhleSB3aWxsIGFsbCBoYXZlIHRvIGNyZWF0ZSBldmVudCBpZGVudGlmaWVy cyBhbmQgbWFrZSByZWZlcmVuY2UgdG8gdGhlIGNvbmNlcHQuIEEgY2xlYXIgZGVmaW5pdGlvbiBv ZiB0aGUgdGVybSB3b3VsZCBoZWxwLg0KDQoNCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcyBhbGwsDQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg LS0gTWlrZQ0KDQpGcm9tOiBNYXJpdXMgU2N1cnRlc2N1IDxtc2N1cnRlc2N1QGdvb2dsZS5jb208 bWFpbHRvOm1zY3VydGVzY3VAZ29vZ2xlLmNvbT4+DQpTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDUs IDIwMTggMTI6NTEgUE0NClRvOiBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSA8cmljaGFubmFA YW1hem9uLmNvbTxtYWlsdG86cmljaGFubmFAYW1hem9uLmNvbT4+DQpDYzogUGhpbCBIdW50IDxw aGlsLmh1bnRAb3JhY2xlLmNvbTxtYWlsdG86cGhpbC5odW50QG9yYWNsZS5jb20+PjsgTWlrZSBK b25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPG1haWx0bzpNaWNoYWVsLkpvbmVzQG1p Y3Jvc29mdC5jb20+PjsgWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1haWx0 bzp5YXJvbmYuaWV0ZkBnbWFpbC5jb20+PjsgU2VjRXZlbnQgPGlkLWV2ZW50QGlldGYub3JnPG1h aWx0bzppZC1ldmVudEBpZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0 IENhbGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4tMDUNCg0KWWVzLCBsZXQncyBtYWtl IGZpbmFsIGZpeGVzIGFuZCBtb3ZlIGZvcndhcmQuDQoNCkEgY291cGxlIG9mIG1pbm9yIG5pdHM6 DQotIGluIHRoZSAiZXZlbnRzIiBkZWZpbml0aW9uLCBJIGRvbid0IHRoaW5rICJNdWx0aXBsZSBl dmVudCBpZGVudGlmaWVycyB3aXRoIHRoZSBzYW1lIHZhbHVlIE1VU1QgTk9UIGJlIHVzZWQuIiBp cyBuZWVkZWQsIHNpbmNlIHRoYXQgaXMgbm90IHBvc3NpYmxlIGFueWhvdyAoYXNzdW1pbmcgSSBy ZWFkIHRoZSBzdGF0ZW1lbnQgY29ycmVjdGx5KQ0KLSBkbyB3ZSBuZWVkIGEgZm9ybWFsIGRlZmlu aXRpb24gZm9yICJldmVudCBpZGVudGlmaWVyIj8NCg0KDQpNYXJpdXMNCg0KT24gTW9uLCBGZWIg NSwgMjAxOCBhdCAxMjozOCBQTSwgUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgPHJpY2hhbm5h QGFtYXpvbi5jb208bWFpbHRvOnJpY2hhbm5hQGFtYXpvbi5jb20+PiB3cm90ZToNCkknZCBsaWtl IHRvIHNlZSBpdGVtIDEgYmVsb3cgYWRkcmVzc2VkIGJlZm9yZSBwdWJsaXNoaW5nLCBhcyBpdCBh bHRlcnMgKGNvcnJlY3RzKSB0aGUgbWVhbmluZyBvZiB0aGUgdGV4dC4NCg0KT25lIGVycm9yOg0K MS4gIEluIHRoZSAiaWF0IiBkZWZpbml0aW9uIGluIHNlY3Rpb24gMi4yOiBjaGFuZ2UgIi4uLndo ZW4gdGhlIGV2ZW50IHdhcyBpc3N1ZWQuIiB0byAiLi4ud2hlbiB0aGUgU0VUIHdhcyBpc3N1ZWQu Ig0KDQpPbmUgY2xhcmlmaWNhdGlvbjoNCjIuICBUaGUgMm5kIHRvIGxhc3QgcGFyYWdyYXBoIG9m IHNlY3Rpb24gMi40IHN0YXRlcyAidGhlIEV2ZW50IFJlY2lwaWVudCBNVVNUIiBlbnN1cmUgaW50 ZWdyaXR5LCBjb25maWRlbnRpYWxpdHksIGV0Yy4gSXNuJ3QgdGhpcyBwcm9wZXJseSB0aGUgaXNz dWVyJ3MgcmVzcG9uc2liaWxpdHk/IE9yIGJvdGg/DQoNCkEgaGFuZGZ1bCBvZiBuaXRzOg0KMy4g IFRoZSAiYXVkIiBkZWZpbml0aW9uIGluIHNlY3Rpb24gMi4yIGlzIGF3a3dhcmRseSB3cml0dGVu OyBJIHN1Z2dlc3QgcmVwaHJhc2luZyBpdCB0byBtaXJyb3IgdGhlICJpYXQiIGRlZmluaXRpb24u DQo0LiAgTWlzc2luZyAidGhlIiBpbiB0aGUgImV4cCIgZGVmaW5pdGlvbiBpbiBzZWN0aW9uIDIu MjogInRoaXMgY2xhaW0gaXMgdGltZSIgLT4gInRoaXMgY2xhaW0gaXMgdGhlIHRpbWUiDQo1LiAg U3ludGF4IGVycm9yIGluIHRoZSAzcmQgbGlzdCBpdGVtIG9mIHNlY3Rpb24gMjogIi4uLmlzIGEg VVJJIHN0cmluZyB2YWx1ZSBpcyBhbiBldmVudCBpZGVudGlmaWVyLi4uIg0KNi4gIEluY29uc2lz dGVudCB1c2Ugb2YgdGVybXMgZm9yIGlzc3VlciwgcmVjaXBpZW50LCBzdWJqZWN0LiBBdCB0aGUg dmVyeSBsZWFzdCB3ZSBzaG91bGQgaGF2ZSBjb25zaXN0ZW50IGNhcGl0YWxpemF0aW9uOg0KICBh LiAgSXNzdWVyLCBpc3N1ZXIsIEV2ZW50IElzc3VlciwgU0VUIElzc3Vlcg0KICBiLiAgUmVjaXBp ZW50LCByZWNpcGllbnQsIEV2ZW50IFJlY2lwaWVudA0KICBjLiAgU3ViamVjdCwgc3ViamVjdCwg U2VjdXJpdHkgU3ViamVjdCwgc2VjdXJpdHkgc3ViamVjdCwgZXZlbnQgU3ViamVjdCwgZXZlbnQg c3ViamVjdA0KDQpPSywgSSdtIHB1dHRpbmcgYXdheSB0aGUgcmVkIHBlbiBub3cuIDopDQoNCi0t DQpBbm5hYmVsbGUgUmljaGFyZCBCYWNrbWFuDQpBbWF6b24g4oCTIElkZW50aXR5IFNlcnZpY2Vz DQoNCu+7v09uIDIvNS8xOCwgMTI6MzMgUE0sICJJZC1ldmVudCBvbiBiZWhhbGYgb2YgUGhpbCBI dW50IiA8aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86aWQtZXZlbnQtYm91bmNlc0Bp ZXRmLm9yZz4gb24gYmVoYWxmIG9mIHBoaWwuaHVudEBvcmFjbGUuY29tPG1haWx0bzpwaGlsLmh1 bnRAb3JhY2xlLmNvbT4+IHdyb3RlOg0KDQogICAgKzEuIExldHMgZ2V0IHRoaXMgcHVibGlzaGVk Lg0KDQogICAgUGhpbA0KDQogICAgPiBPbiBGZWIgNSwgMjAxOCwgYXQgMTE6NTcgQU0sIE1pa2Ug Sm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTxtYWlsdG86TWljaGFlbC5Kb25lc0Bt aWNyb3NvZnQuY29tPj4gd3JvdGU6DQogICAgPg0KICAgID4gUmVhZHkgZm9yIHB1YmxpY2F0aW9u DQogICAgPg0KICAgID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCiAgICA+IEZyb206IElk LWV2ZW50IFttYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86aWQtZXZlbnQt Ym91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFsZiBPZiBZYXJvbiBTaGVmZmVyDQogICAgPiBTZW50 OiBNb25kYXksIEZlYnJ1YXJ5IDUsIDIwMTggMTE6MjQgQU0NCiAgICA+IFRvOiBTZWNFdmVudCA8 aWQtZXZlbnRAaWV0Zi5vcmc8bWFpbHRvOmlkLWV2ZW50QGlldGYub3JnPj4NCiAgICA+IFN1Ympl Y3Q6IFtJZC1ldmVudF0gV0cgTGFzdCBDYWxsIGZvciBkcmFmdC1pZXRmLXNlY2V2ZW50LXRva2Vu LTA1DQogICAgPg0KICAgID4gRmlyc3QsIHdlIHdvdWxkIGxpa2UgdG8gdGhhbmsgdGhlIGF1dGhv cnMgYW5kIHRoZSB3b3JraW5nIGdyb3VwIG1lbWJlcnMgd2hvIGhhdmUgYmVlbiB3b3JraW5nIHNp bmNlIFNpbmdhcG9yZSB0byBjbGFyaWZ5IGFuZCByZXNvbHZlIHNldmVyYWwgY29udHJvdmVyc2lh bCB0b3BpY3MuIFdpdGggdGhpcyB3b3JrIGJlaGluZCB1cywgd2UgY2FuIG5vdyBtb3ZlIGZvcndh cmQgdG8gcHVibGljYXRpb24uDQogICAgPg0KICAgID4gVGhpcyBpcyB0byBhbm5vdW5jZSB3b3Jr aW5nIGdyb3VwIGxhc3QgY2FsbCBvbiB0aGlzIGRyYWZ0IChodHRwczovL3VybGRlZmVuc2UucHJv b2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX2RhdGF0cmFja2VyLmlldGYub3JnX2RvY19k cmFmdC0yRGlldGYtMkRzZWNldmVudC0yRHRva2VuXyZkPUR3SUdhUSZjPVJvUDFZdW1DWENnYVdI dmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmcj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBw dVlxUGtBSTFhTGNMTjRLWk5BJm09bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pU QzU5TV9ZWSZzPXJvSXUwSDhjMVBpZHA1eVZ0X251SG1QTjNfZHRGVXV1cGkycUVQbTR0aXMmZT0p Lg0KICAgID4NCiAgICA+IFBsZWFzZSBzZW5kIHlvdXIgY29tbWVudHMgdG8gdGhlIGxpc3QuIEV2 ZW4gaWYgeW91IGFyZSBwZXJmZWN0bHkgaGFwcHkgd2l0aCB0aGUgZHJhZnQsIHBsZWFzZSBsZXQg dXMga25vdyB0aGF0IHlvdSBzdXBwb3J0IGl0cyBwdWJsaWNhdGlvbiBhcy1pcyBieSBwb3N0aW5n IHRvIHRoZSBsaXN0Lg0KICAgID4NCiAgICA+IFBsZWFzZSBzZW5kIHlvdXIgY29tbWVudCB3aXRo aW4gdGhlIG5leHQgdHdvIHdlZWtzLCB1bnRpbCBGZWIuIDE5Lg0KICAgID4NCiAgICA+IFRoYW5r cywNCiAgICA+ICAgICBEaWNrIGFuZCBZYXJvbg0KICAgID4NCiAgICA+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgPiBJZC1ldmVudCBtYWlsaW5n IGxpc3QNCiAgICA+IElkLWV2ZW50QGlldGYub3JnPG1haWx0bzpJZC1ldmVudEBpZXRmLm9yZz4N CiAgICA+IGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0z QV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZkPUR3SUdhUSZjPVJv UDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmcj1uYTVGVnpCVFdtYW5x V055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpT U0x1Q0hoUGRIU2pUQzU5TV9ZWSZzPXJYSFFpOHZSekVvTVBmYXhUdG50MEVzRzFuWkNGRFlBbVFI YzQ1VG5EYVkmZT0NCiAgICA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQogICAgPiBJZC1ldmVudCBtYWlsaW5nIGxpc3QNCiAgICA+IElkLWV2ZW50QGll dGYub3JnPG1haWx0bzpJZC1ldmVudEBpZXRmLm9yZz4NCiAgICA+IGh0dHBzOi8vdXJsZGVmZW5z ZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5f bGlzdGluZm9faWQtMkRldmVudCZkPUR3SUdhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2 N3FJck1VQjY1ZWFwSV9KbkUmcj1uYTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNM TjRLWk5BJm09bk84Q0tRS3Iya2djQjhDOHpGLVFoYWpTU0x1Q0hoUGRIU2pUQzU5TV9ZWSZzPXJY SFFpOHZSekVvTVBmYXhUdG50MEVzRzFuWkNGRFlBbVFIYzQ1VG5EYVkmZT0NCg0KICAgIF9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgSWQtZXZlbnQg bWFpbGluZyBsaXN0DQogICAgSWQtZXZlbnRAaWV0Zi5vcmc8bWFpbHRvOklkLWV2ZW50QGlldGYu b3JnPg0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQN Cg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSWQt ZXZlbnQgbWFpbGluZyBsaXN0DQpJZC1ldmVudEBpZXRmLm9yZzxtYWlsdG86SWQtZXZlbnRAaWV0 Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lkLWV2ZW50DQoN Cg0KDQo= --_000_SN6PR2101MB0943C1D31DB8327744AB48D8F5C70SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpWZXJkYW5hOw0KCXBhbm9zZS0xOjIgMTEg NiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwg bGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlz aXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc2FtcA0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4u bS0yNTc5MDY5ODUxODEwMzQ4OTlnbWFpbC1tNzMwNjU2Mzc5MDc0NzcxNjg2OWhvZW56Yg0KCXtt c28tc3R5bGUtbmFtZTptXy0yNTc5MDY5ODUxODEwMzQ4OTlnbWFpbC1tNzMwNjU2Mzc5MDc0Nzcx Njg2OWhvZW56Yjt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMDAy MDYwO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtz aXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2 LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYg Z3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0i MTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEi IC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIw NjAiPlRoZSB0ZXJtcyBhcmUgbm93IGRlZmluZWQsIGFzIHlvdSByZXF1ZXN0ZWQsIE1hcml1cy4m bmJzcDsgU2VlDQo8YSBocmVmPSJodHRwczovL2dpdGh1Yi5jb20vaW5kZXBlbmRlbnRpZC9JZGVu dGl0eS1FdmVudHMvcHVsbC8xMS9jb21taXRzLzdmNDkyNzgxMWZlYTM4MTljOTgxOTNiYzNmZThi Y2NiODJmODRkMDEiPg0KaHR0cHM6Ly9naXRodWIuY29tL2luZGVwZW5kZW50aWQvSWRlbnRpdHkt RXZlbnRzL3B1bGwvMTEvY29tbWl0cy83ZjQ5Mjc4MTFmZWEzODE5Yzk4MTkzYmMzZmU4YmNjYjgy Zjg0ZDAxPC9hPi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBNaWtlPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9i PiBNYXJpdXMgU2N1cnRlc2N1ICZsdDttc2N1cnRlc2N1QGdvb2dsZS5jb20mZ3Q7IDxicj4NCjxi PlNlbnQ6PC9iPiBUdWVzZGF5LCBGZWJydWFyeSAyNywgMjAxOCA0OjI0IFBNPGJyPg0KPGI+VG86 PC9iPiBNaWtlIEpvbmVzICZsdDtNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20mZ3Q7PGJyPg0K PGI+Q2M6PC9iPiBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSAmbHQ7cmljaGFubmFAYW1hem9u LmNvbSZndDs7IFBoaWwgSHVudCAmbHQ7cGhpbC5odW50QG9yYWNsZS5jb20mZ3Q7OyBZYXJvbiBT aGVmZmVyICZsdDt5YXJvbmYuaWV0ZkBnbWFpbC5jb20mZ3Q7OyBTZWNFdmVudCAmbHQ7aWQtZXZl bnRAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbSWQtZXZlbnRdIFdHIExh c3QgQ2FsbCBmb3IgZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wNTxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+JiM0MzsxJm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5UaGFua3MgTWlrZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TWFyaXVzPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gVHVlLCBGZWIgMjcs IDIwMTggYXQgNDoyMiBQTSwgTWlrZSBKb25lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOk1pY2hhZWwu Sm9uZXNAbWljcm9zb2Z0LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPk1pY2hhZWwuSm9uZXNAbWljcm9z b2Z0LmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4g MGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2 MCI+SSBjb3VsZCBhZGQgZGVmaW5pdGlvbnMgZm9yIOKAnGV2ZW50IGlkZW50aWZpZXLigJ0gYW5k IOKAnGV2ZW50IHBheWxvYWTigJ0gaWYgcGVvcGxlIGZlZWwgdGhhdCBpdCB3b3VsZCBpbXByb3Zl IHRoZSBzcGVjaWZpY2F0aW9uLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIw NjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBNaWtlPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48Yj5Gcm9tOjwvYj4gTWFyaXVzIFNjdXJ0ZXNjdSAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1z Y3VydGVzY3VAZ29vZ2xlLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPm1zY3VydGVzY3VAZ29vZ2xlLmNv bTwvYT4mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgRmVicnVhcnkgMjcsIDIwMTgg NDoxOCBQTTxicj4NCjxiPlRvOjwvYj4gTWlrZSBKb25lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOk1p Y2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPk1pY2hhZWwuSm9uZXNA bWljcm9zb2Z0LmNvbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBSaWNoYXJkIEJhY2ttYW4sIEFu bmFiZWxsZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJpY2hhbm5hQGFtYXpvbi5jb20iIHRhcmdldD0i X2JsYW5rIj5yaWNoYW5uYUBhbWF6b24uY29tPC9hPiZndDs7IFBoaWwgSHVudCAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+cGhpbC5odW50 QG9yYWNsZS5jb208L2E+Jmd0OzsgWWFyb24gU2hlZmZlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOnlh cm9uZi5pZXRmQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnlhcm9uZi5pZXRmQGdtYWlsLmNv bTwvYT4mZ3Q7Ow0KIFNlY0V2ZW50ICZsdDs8YSBocmVmPSJtYWlsdG86aWQtZXZlbnRAaWV0Zi5v cmciIHRhcmdldD0iX2JsYW5rIj5pZC1ldmVudEBpZXRmLm9yZzwvYT4mZ3Q7PG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSZTogW0lkLWV2ZW50XSBXRyBMYXN0IENhbGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQt dG9rZW4tMDU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9uIFR1ZSwgRmViIDI3LCAyMDE4IGF0IDM6 MzcgUE0sIE1pa2UgSm9uZXMgJmx0OzxhIGhyZWY9Im1haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jv c29mdC5jb20iIHRhcmdldD0iX2JsYW5rIj5NaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208L2E+ Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4w cHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21h cmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5QbGVhc2Ugc2VlDQo8YSBocmVmPSJodHRwczov L2dpdGh1Yi5jb20vaW5kZXBlbmRlbnRpZC9JZGVudGl0eS1FdmVudHMvcHVsbC8xMSIgdGFyZ2V0 PSJfYmxhbmsiPg0KaHR0cHM6Ly9naXRodWIuY29tL2luZGVwZW5kZW50aWQvSWRlbnRpdHktRXZl bnRzL3B1bGwvMTE8L2E+IGZvciBlZGl0cyB0aGF0IGFyZSBpbnRlbmRlZCB0byBhZGRyZXNzIHRo ZSBXR0xDIGNvbW1lbnRzIHJlY2VpdmVkLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ SSBqdXN0IHdhbnQgdG8gYnJpbmcgdXAgdGhlIGZhY3QgdGhhdCB0aGUgU0VUIHNwZWMgdXNlcyAm cXVvdDtFdmVudCBJc3N1ZXImcXVvdDsgYW5kICZxdW90O0V2ZW50IFJlY2lwaWVudCZxdW90OyB3 aGlsZSB0aGUgZGlzdHJpYnV0aW9uIHNwZWMgYW5kIHByb3Bvc2VkIEFQSSBzcGVjcyBhbGwgdXNl ICZxdW90O0V2ZW50IFRyYW5zbWl0dGVyJnF1b3Q7IGFuZCAmcXVvdDtFdmVudA0KIFJlY2VpdmVy JnF1b3Q7LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+SSBqdXN0IHdhbnQgdG8gbWFrZSBzdXJlIHdlIGFsbCBtYWtlIGEgY29uc2Npb3Vz IGRlY2lzaW9uIGhlcmUgYW5kIHNlZSBpZiB0aGVyZSBhcmUgd2F5cyB0byBwcmV2ZW50IHBvdGVu dGlhbCBjb25mdXNpb24uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj5JIHVuZGVyc3RhbmQgdGhhdCZuYnNwOyZxdW90O0V2ZW50IElzc3Vl ciZxdW90OyBhbmQgJnF1b3Q7RXZlbnQgUmVjaXBpZW50JnF1b3Q7IGFyZSBpbiBsaW5lIHdpdGgg SldULiBBbHNvLCBUcmFuc21pdHRlci9SZWNlaXZlciBtaWdodCBoYXZlIHNsaWdodGx5IGRpZmZl cmVudCBtZWFuaW5nICh0aGUgZW50aXR5IHRoYXQgaXNzdWVzIHZzIHRoZSBlbnRpdHkNCiB0aGF0 IHRyYW5zbWl0cykuIEJ1dCBJIHRoaW5rIHRoZXkgYXJlIGNsb3NlIGVub3VnaCB0byBiZSBjb25m dXNpbmcuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4g MGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0 OjBpbjttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2 MCI+TWFyaXVzLCBJIGRvbuKAmXQgdGhpbmsgd2UgbmVlZCBhIGZvcm1hbCBkZWZpbml0aW9uIG9m IOKAnGV2ZW50IGlkZW50aWZpZXLigJ0gYmVjYXVzZSBpdOKAmXMgY2xlYXJseSBkZWZpbmVkIGJ5 IHRoaXMgdXNhZ2UgaW4gU2VjdGlvbiAyIChUaGUgU2VjdXJpdHkgRXZlbnQgVG9rZW4NCiAoU0VU KTo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxl ZnQ6LjVpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkVhY2ggbWVtYmVyIG9mIHRo ZQ0KPC9zcGFuPjxzYW1wPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+ZXZlbnRzPC9zcGFu Pjwvc2FtcD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtW ZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiBKU09OIG9iamVjdCBpcyBhIG5h bWUvdmFsdWUgcGFpci4gVGhlIEpTT04gbWVtYmVyIG5hbWUgaXMgYSBVUkkgc3RyaW5nDQogdmFs dWUsIHdoaWNoIGlzIHRoZSBldmVudCBpZGVudGlmaWVyLCBhbmQgdGhlIGNvcnJlc3BvbmRpbmcg dmFsdWUgaXMgYSBKU09OIG9iamVjdCBrbm93biBhcyB0aGUgZXZlbnQgJnF1b3Q7cGF5bG9hZCZx dW90Oy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkEgZm9ybWFsIGRlZmluaXRpb24g d291bGQgYmUgdXNlZnVsIElNTy4gTWFueSBwcm9maWxlcyB3aWxsIGRlZmluZSBldmVudHMgYW5k IHRoZXkgd2lsbCBhbGwgaGF2ZSB0byBjcmVhdGUgZXZlbnQgaWRlbnRpZmllcnMgYW5kIG1ha2Ug cmVmZXJlbmNlIHRvIHRoZSBjb25jZXB0LiBBIGNsZWFyIGRlZmluaXRpb24NCiBvZiB0aGUgdGVy bSB3b3VsZCBoZWxwLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRp bmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDtt YXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJj b2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVGhhbmtz IGFsbCw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgLS0gTWlrZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+RnJvbTo8L2I+IE1hcml1cyBTY3VydGVzY3UgJmx0 OzxhIGhyZWY9Im1haWx0bzptc2N1cnRlc2N1QGdvb2dsZS5jb20iIHRhcmdldD0iX2JsYW5rIj5t c2N1cnRlc2N1QGdvb2dsZS5jb208L2E+Jmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwg RmVicnVhcnkgNSwgMjAxOCAxMjo1MSBQTTxicj4NCjxiPlRvOjwvYj4gUmljaGFyZCBCYWNrbWFu LCBBbm5hYmVsbGUgJmx0OzxhIGhyZWY9Im1haWx0bzpyaWNoYW5uYUBhbWF6b24uY29tIiB0YXJn ZXQ9Il9ibGFuayI+cmljaGFubmFAYW1hem9uLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBQ aGlsIEh1bnQgJmx0OzxhIGhyZWY9Im1haWx0bzpwaGlsLmh1bnRAb3JhY2xlLmNvbSIgdGFyZ2V0 PSJfYmxhbmsiPnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPiZndDs7IE1pa2UgSm9uZXMgJmx0Ozxh IGhyZWY9Im1haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20iIHRhcmdldD0iX2JsYW5r Ij5NaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208L2E+Jmd0OzsgWWFyb24gU2hlZmZlciAmbHQ7 PGEgaHJlZj0ibWFpbHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnlh cm9uZi5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7Ow0KIFNlY0V2ZW50ICZsdDs8YSBocmVmPSJtYWls dG86aWQtZXZlbnRAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5pZC1ldmVudEBpZXRmLm9yZzwv YT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbSWQtZXZlbnRdIFdHIExhc3QgQ2FsbCBm b3IgZHJhZnQtaWV0Zi1zZWNldmVudC10b2tlbi0wNTxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+WWVzLCBsZXQncyBtYWtlIGZpbmFsIGZpeGVzIGFuZCBt b3ZlIGZvcndhcmQuPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+QSBjb3VwbGUgb2YgbWlub3Igbml0czo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+LSBpbiB0aGUgJnF1b3Q7ZXZlbnRzJnF1b3Q7IGRl ZmluaXRpb24sIEkgZG9uJ3QgdGhpbmsgJnF1b3Q7TXVsdGlwbGUgZXZlbnQgaWRlbnRpZmllcnMg d2l0aCB0aGUgc2FtZSB2YWx1ZSBNVVNUIE5PVCBiZSB1c2VkLiZxdW90OyBpcyBuZWVkZWQsIHNp bmNlIHRoYXQgaXMgbm90IHBvc3NpYmxlIGFueWhvdyAoYXNzdW1pbmcgSSByZWFkIHRoZQ0KIHN0 YXRlbWVudCBjb3JyZWN0bHkpPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPi0gZG8gd2UgbmVlZCBhIGZvcm1hbCBkZWZpbml0aW9uIGZvciAmcXVv dDtldmVudCBpZGVudGlmaWVyJnF1b3Q7PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48YnIgY2xlYXI9ImFsbCI+DQo8bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5NYXJpdXM8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+T24gTW9u LCBGZWIgNSwgMjAxOCBhdCAxMjozOCBQTSwgUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgJmx0 OzxhIGhyZWY9Im1haWx0bzpyaWNoYW5uYUBhbWF6b24uY29tIiB0YXJnZXQ9Il9ibGFuayI+cmlj aGFubmFAYW1hem9uLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVv dGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFk ZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPkknZCBsaWtlIHRvIHNlZSBpdGVtIDEgYmVsb3cgYWRkcmVzc2VkIGJlZm9yZSBwdWJs aXNoaW5nLCBhcyBpdCBhbHRlcnMgKGNvcnJlY3RzKSB0aGUgbWVhbmluZyBvZiB0aGUgdGV4dC48 YnI+DQo8YnI+DQpPbmUgZXJyb3I6PGJyPg0KMS4mbmJzcDsgSW4gdGhlICZxdW90O2lhdCZxdW90 OyBkZWZpbml0aW9uIGluIHNlY3Rpb24gMi4yOiBjaGFuZ2UgJnF1b3Q7Li4ud2hlbiB0aGUgZXZl bnQgd2FzIGlzc3VlZC4mcXVvdDsgdG8gJnF1b3Q7Li4ud2hlbiB0aGUgU0VUIHdhcyBpc3N1ZWQu JnF1b3Q7PGJyPg0KPGJyPg0KT25lIGNsYXJpZmljYXRpb246PGJyPg0KMi4mbmJzcDsgVGhlIDJu ZCB0byBsYXN0IHBhcmFncmFwaCBvZiBzZWN0aW9uIDIuNCBzdGF0ZXMgJnF1b3Q7dGhlIEV2ZW50 IFJlY2lwaWVudCBNVVNUJnF1b3Q7IGVuc3VyZSBpbnRlZ3JpdHksIGNvbmZpZGVudGlhbGl0eSwg ZXRjLiBJc24ndCB0aGlzIHByb3Blcmx5IHRoZSBpc3N1ZXIncyByZXNwb25zaWJpbGl0eT8gT3Ig Ym90aD88YnI+DQo8YnI+DQpBIGhhbmRmdWwgb2Ygbml0czo8YnI+DQozLiZuYnNwOyBUaGUgJnF1 b3Q7YXVkJnF1b3Q7IGRlZmluaXRpb24gaW4gc2VjdGlvbiAyLjIgaXMgYXdrd2FyZGx5IHdyaXR0 ZW47IEkgc3VnZ2VzdCByZXBocmFzaW5nIGl0IHRvIG1pcnJvciB0aGUgJnF1b3Q7aWF0JnF1b3Q7 IGRlZmluaXRpb24uPGJyPg0KNC4mbmJzcDsgTWlzc2luZyAmcXVvdDt0aGUmcXVvdDsgaW4gdGhl ICZxdW90O2V4cCZxdW90OyBkZWZpbml0aW9uIGluIHNlY3Rpb24gMi4yOiAmcXVvdDt0aGlzIGNs YWltIGlzIHRpbWUmcXVvdDsgLSZndDsgJnF1b3Q7dGhpcyBjbGFpbSBpcyB0aGUgdGltZSZxdW90 Ozxicj4NCjUuJm5ic3A7IFN5bnRheCBlcnJvciBpbiB0aGUgM3JkIGxpc3QgaXRlbSBvZiBzZWN0 aW9uIDI6ICZxdW90Oy4uLmlzIGEgVVJJIHN0cmluZyB2YWx1ZSBpcyBhbiBldmVudCBpZGVudGlm aWVyLi4uJnF1b3Q7PGJyPg0KNi4mbmJzcDsgSW5jb25zaXN0ZW50IHVzZSBvZiB0ZXJtcyBmb3Ig aXNzdWVyLCByZWNpcGllbnQsIHN1YmplY3QuIEF0IHRoZSB2ZXJ5IGxlYXN0IHdlIHNob3VsZCBo YXZlIGNvbnNpc3RlbnQgY2FwaXRhbGl6YXRpb246PGJyPg0KJm5ic3A7IGEuJm5ic3A7IElzc3Vl ciwgaXNzdWVyLCBFdmVudCBJc3N1ZXIsIFNFVCBJc3N1ZXI8YnI+DQombmJzcDsgYi4mbmJzcDsg UmVjaXBpZW50LCByZWNpcGllbnQsIEV2ZW50IFJlY2lwaWVudDxicj4NCiZuYnNwOyBjLiZuYnNw OyBTdWJqZWN0LCBzdWJqZWN0LCBTZWN1cml0eSBTdWJqZWN0LCBzZWN1cml0eSBzdWJqZWN0LCBl dmVudCBTdWJqZWN0LCBldmVudCBzdWJqZWN0PGJyPg0KPGJyPg0KT0ssIEknbSBwdXR0aW5nIGF3 YXkgdGhlIHJlZCBwZW4gbm93LiA6KTxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojODg4ODg4Ij48 YnI+DQo8c3BhbiBjbGFzcz0ibS0yNTc5MDY5ODUxODEwMzQ4OTlnbWFpbC1tNzMwNjU2Mzc5MDc0 NzcxNjg2OWhvZW56YiI+LS08L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9Im0tMjU3OTA2OTg1MTgx MDM0ODk5Z21haWwtbTczMDY1NjM3OTA3NDc3MTY4Njlob2VuemIiPkFubmFiZWxsZSBSaWNoYXJk IEJhY2ttYW48L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9Im0tMjU3OTA2OTg1MTgxMDM0ODk5Z21h aWwtbTczMDY1NjM3OTA3NDc3MTY4Njlob2VuemIiPkFtYXpvbiDigJMgSWRlbnRpdHkgU2Vydmlj ZXM8L3NwYW4+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxicj4NCu+7v09uIDIvNS8xOCwgMTI6MzMgUE0sICZxdW90O0lkLWV2ZW50 IG9uIGJlaGFsZiBvZiBQaGlsIEh1bnQmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzppZC1ldmVu dC1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+aWQtZXZlbnQtYm91bmNlc0BpZXRm Lm9yZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVmPSJtYWlsdG86cGhpbC5odW50QG9yYWNsZS5j b20iIHRhcmdldD0iX2JsYW5rIj5waGlsLmh1bnRAb3JhY2xlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxi cj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgJiM0MzsxLiBMZXRzIGdldCB0aGlzIHB1Ymxpc2hlZC48 YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7IFBoaWw8YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7ICZn dDsgT24gRmViIDUsIDIwMTgsIGF0IDExOjU3IEFNLCBNaWtlIEpvbmVzICZsdDs8YSBocmVmPSJt YWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tIiB0YXJnZXQ9Il9ibGFuayI+TWljaGFl bC5Kb25lc0BtaWNyb3NvZnQuY29tPC9hPiZndDsgd3JvdGU6PGJyPg0KJm5ic3A7ICZuYnNwOyAm Z3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IFJlYWR5IGZvciBwdWJsaWNhdGlvbjxicj4NCiZu YnNwOyAmbmJzcDsgJmd0Ozxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLTxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBGcm9tOiBJZC1ldmVudCBbbWFpbHRv OjxhIGhyZWY9Im1haWx0bzppZC1ldmVudC1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFu ayI+aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZzwvYT5dIE9uIEJlaGFsZiBPZiBZYXJvbiBTaGVm ZmVyPGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IFNlbnQ6IE1vbmRheSwgRmVicnVhcnkgNSwgMjAx OCAxMToyNCBBTTxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBUbzogU2VjRXZlbnQgJmx0OzxhIGhy ZWY9Im1haWx0bzppZC1ldmVudEBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmlkLWV2ZW50QGll dGYub3JnPC9hPiZndDs8YnI+DQombmJzcDsgJm5ic3A7ICZndDsgU3ViamVjdDogW0lkLWV2ZW50 XSBXRyBMYXN0IENhbGwgZm9yIGRyYWZ0LWlldGYtc2VjZXZlbnQtdG9rZW4tMDU8YnI+DQombmJz cDsgJm5ic3A7ICZndDs8YnI+DQombmJzcDsgJm5ic3A7ICZndDsgRmlyc3QsIHdlIHdvdWxkIGxp a2UgdG8gdGhhbmsgdGhlIGF1dGhvcnMgYW5kIHRoZSB3b3JraW5nIGdyb3VwIG1lbWJlcnMgd2hv IGhhdmUgYmVlbiB3b3JraW5nIHNpbmNlIFNpbmdhcG9yZSB0byBjbGFyaWZ5IGFuZCByZXNvbHZl IHNldmVyYWwgY29udHJvdmVyc2lhbCB0b3BpY3MuIFdpdGggdGhpcyB3b3JrIGJlaGluZCB1cywg d2UgY2FuIG5vdyBtb3ZlIGZvcndhcmQgdG8gcHVibGljYXRpb24uPGJyPg0KJm5ic3A7ICZuYnNw OyAmZ3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IFRoaXMgaXMgdG8gYW5ub3VuY2Ugd29ya2lu ZyBncm91cCBsYXN0IGNhbGwgb24gdGhpcyBkcmFmdCAoPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZl bnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX19kYXRhdHJhY2tlci5pZXRmLm9y Z19kb2NfZHJhZnQtMkRpZXRmLTJEc2VjZXZlbnQtMkR0b2tlbl8mYW1wO2Q9RHdJR2FRJmFtcDtj PVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6 QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT1uTzhDS1FLcjJrZ2NC OEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJmFtcDtzPXJvSXUwSDhjMVBpZHA1eVZ0X251 SG1QTjNfZHRGVXV1cGkycUVQbTR0aXMmYW1wO2U9IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly91 cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNBX19kYXRhdHJhY2tlci5p ZXRmLm9yZ19kb2NfZHJhZnQtMkRpZXRmLTJEc2VjZXZlbnQtMkR0b2tlbl8mYW1wO2Q9RHdJR2FR JmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9 bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT1uTzhDS1FL cjJrZ2NCOEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJmFtcDtzPXJvSXUwSDhjMVBpZHA1 eVZ0X251SG1QTjNfZHRGVXV1cGkycUVQbTR0aXMmYW1wO2U9PC9hPikuPGJyPg0KJm5ic3A7ICZu YnNwOyAmZ3Q7PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IFBsZWFzZSBzZW5kIHlvdXIgY29tbWVu dHMgdG8gdGhlIGxpc3QuIEV2ZW4gaWYgeW91IGFyZSBwZXJmZWN0bHkgaGFwcHkgd2l0aCB0aGUg ZHJhZnQsIHBsZWFzZSBsZXQgdXMga25vdyB0aGF0IHlvdSBzdXBwb3J0IGl0cyBwdWJsaWNhdGlv biBhcy1pcyBieSBwb3N0aW5nIHRvIHRoZSBsaXN0Ljxicj4NCiZuYnNwOyAmbmJzcDsgJmd0Ozxi cj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBQbGVhc2Ugc2VuZCB5b3VyIGNvbW1lbnQgd2l0aGluIHRo ZSBuZXh0IHR3byB3ZWVrcywgdW50aWwgRmViLiAxOS48YnI+DQombmJzcDsgJm5ic3A7ICZndDs8 YnI+DQombmJzcDsgJm5ic3A7ICZndDsgVGhhbmtzLDxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7RGljayBhbmQgWWFyb248YnI+DQombmJzcDsgJm5ic3A7ICZndDs8 YnI+DQombmJzcDsgJm5ic3A7ICZndDsgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX188YnI+DQombmJzcDsgJm5ic3A7ICZndDsgSWQtZXZlbnQgbWFpbGluZyBs aXN0PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IDxhIGhyZWY9Im1haWx0bzpJZC1ldmVudEBpZXRm Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPklkLWV2ZW50QGlldGYub3JnPC9hPjxicj4NCiZuYnNwOyAm bmJzcDsgJmd0OyA8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIv dXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQm YW1wO2Q9RHdJR2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFw SV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZh bXA7bT1uTzhDS1FLcjJrZ2NCOEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJmFtcDtzPXJY SFFpOHZSekVvTVBmYXhUdG50MEVzRzFuWkNGRFlBbVFIYzQ1VG5EYVkmYW1wO2U9IiB0YXJnZXQ9 Il9ibGFuayI+DQpodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0 cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2lkLTJEZXZlbnQmYW1wO2Q9RHdJ R2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1w O3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBrQUkxYUxjTE40S1pOQSZhbXA7bT1uTzhD S1FLcjJrZ2NCOEM4ekYtUWhhalNTTHVDSGhQZEhTalRDNTlNX1lZJmFtcDtzPXJYSFFpOHZSekVv TVBmYXhUdG50MEVzRzFuWkNGRFlBbVFIYzQ1VG5EYVkmYW1wO2U9PC9hPjxicj4NCiZuYnNwOyAm bmJzcDsgJmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xzxicj4NCiZuYnNwOyAmbmJzcDsgJmd0OyBJZC1ldmVudCBtYWlsaW5nIGxpc3Q8YnI+DQombmJz cDsgJm5ic3A7ICZndDsgPGEgaHJlZj0ibWFpbHRvOklkLWV2ZW50QGlldGYub3JnIiB0YXJnZXQ9 Il9ibGFuayI+SWQtZXZlbnRAaWV0Zi5vcmc8L2E+PGJyPg0KJm5ic3A7ICZuYnNwOyAmZ3Q7IDxh IGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0z QV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZhbXA7ZD1Ed0lHYVEm YW1wO2M9Um9QMVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZhbXA7cj1u YTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJmFtcDttPW5POENLUUty MmtnY0I4Qzh6Ri1RaGFqU1NMdUNIaFBkSFNqVEM1OU1fWVkmYW1wO3M9clhIUWk4dlJ6RW9NUGZh eFR0bnQwRXNHMW5aQ0ZEWUFtUUhjNDVUbkRhWSZhbXA7ZT0iIHRhcmdldD0iX2JsYW5rIj4NCmh0 dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3Lmll dGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZhbXA7ZD1Ed0lHYVEmYW1wO2M9Um9Q MVl1bUNYQ2dhV0h2bFpZUjhQWmg4QnY3cUlyTVVCNjVlYXBJX0puRSZhbXA7cj1uYTVGVnpCVFdt YW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJmFtcDttPW5POENLUUtyMmtnY0I4Qzh6 Ri1RaGFqU1NMdUNIaFBkSFNqVEM1OU1fWVkmYW1wO3M9clhIUWk4dlJ6RW9NUGZheFR0bnQwRXNH MW5aQ0ZEWUFtUUhjNDVUbkRhWSZhbXA7ZT08L2E+PGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNwOyBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCiZuYnNw OyAmbmJzcDsgSWQtZXZlbnQgbWFpbGluZyBsaXN0PGJyPg0KJm5ic3A7ICZuYnNwOyA8YSBocmVm PSJtYWlsdG86SWQtZXZlbnRAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5JZC1ldmVudEBpZXRm Lm9yZzwvYT48YnI+DQombmJzcDsgJm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lkLWV2ZW50PC9hPjxicj4NCjxicj4NCjxicj4NCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KSWQtZXZl bnQgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOklkLWV2ZW50QGlldGYub3JnIiB0 YXJnZXQ9Il9ibGFuayI+SWQtZXZlbnRAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pZC1ldmVudCIgdGFyZ2V0PSJfYmxhbmsi Pmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQ8L2E+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5 Pg0KPC9odG1sPg0K --_000_SN6PR2101MB0943C1D31DB8327744AB48D8F5C70SN6PR2101MB0943_-- From nobody Wed Feb 28 17:15:53 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAC4D12D86B for ; Wed, 28 Feb 2018 17:15:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.018 X-Spam-Level: X-Spam-Status: No, score=-2.018 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TBkzzsnhcKQM for ; Wed, 28 Feb 2018 17:15:48 -0800 (PST) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0095.outbound.protection.outlook.com [104.47.36.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8505E129515 for ; Wed, 28 Feb 2018 17:15:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ryf9gypaBXCXnHYpd2CvJf7+aYbOI8gsxdtif3jgx0c=; b=Sr9fImbx7vIUqE2C8xM7oi4ygcv4bvU15ZYLJnFG8URm3Ck89snYjFrvXAHnmJ/gbzVzDb/pyf3dqIl7hoIZAfS53zBq4FKAJEMN8ZGDdQULHT6ljvKpM3eIl3i2Gn/uXwuFZ+vykR8usByCgstLn2raFQYUTc46MzQyyfgKifM= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0928.namprd21.prod.outlook.com (52.132.117.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.2; Thu, 1 Mar 2018 01:15:46 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Thu, 1 Mar 2018 01:15:46 +0000 From: Mike Jones To: Yaron Sheffer CC: SecEvent , Phil Hunt Thread-Topic: [Id-event] Doc shepherd review Thread-Index: AQHTsOu1MSk9fbz0K0q+w+e8f4Rw8aO6d4+AgAABG+CAABr/wA== Date: Thu, 1 Mar 2018 01:15:46 +0000 Message-ID: References: <6e8afb70-3e6b-0ea5-7749-442c1c2d4c41@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-28T23:45:34.0062304Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:e::36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0928; 7:eNV2BCAIIRb+LHjkHLSqGPvTew1kSMHWPNoDyFBmWwYhv8W1+mIqXjQumHYvjULZ50cg4edLW6Vagy5TuURS/YBfNLJmzqRDEDsgbLUUV/wriI9rwcXKjXQO5yc7KQbb3daXFgRwjoDE1T9IwLdPV5lk3yVDCQ5lJsoKJ8pLhP3NWhwpbR66EwaMx5nbN4zJC3ur24FXXX+DVGs+mkrq/lw9Oc3qHgNS5x9wvQINtX+ST5FSiKI70/r/XZpAU1pG x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 2ab74e7e-1e98-4186-baa9-08d57f11f685 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB0928; x-ms-traffictypediagnostic: SN6PR2101MB0928: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(10436049006162)(166708455590820)(192374486261705)(85827821059158)(21748063052155)(146099531331640); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(8121501046)(5005006)(10201501046)(3002001)(3231220)(944501221)(52105095)(93006095)(93001095)(6055026)(61426038)(61427038)(6041288)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:SN6PR2101MB0928; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0928; x-forefront-prvs: 05986C03E0 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(346002)(39860400002)(39380400002)(396003)(51914003)(189003)(199004)(54896002)(236005)(6306002)(9686003)(86612001)(4326008)(14454004)(25786009)(33656002)(74316002)(55016002)(53546011)(72206003)(2950100002)(102836004)(6916009)(3280700002)(6506007)(7696005)(81156014)(19609705001)(8676002)(5660300001)(229853002)(81166006)(53386004)(99286004)(966005)(8990500004)(59450400001)(10290500003)(6116002)(790700001)(2900100001)(76176011)(105586002)(6346003)(6436002)(478600001)(10090500001)(186003)(1680700002)(7736002)(54906003)(2906002)(53936002)(68736007)(22452003)(39060400002)(86362001)(316002)(97736004)(575784001)(6246003)(3660700001)(106356001)(8936002)(5250100002)(606006); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0928; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: 0rAO49503LkUJB1kx8JnAvoj3dXiWiFNU9+vCgezASXjnWyklamq31hC/4QM9Z8Rvk5U2tZDTPoXb+m8qoYuxlGj1HXq92CkTBE6KCMJtW4eFq9rh3QUY6Pxaz7DJmJzTTHcc1/QZMIHjC9f6x5Ww7OEht8mMgYnUyhtePsJ2x8= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943B97C731235DF20722E46F5C60SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2ab74e7e-1e98-4186-baa9-08d57f11f685 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2018 01:15:46.9133 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0928 Archived-At: Subject: Re: [Id-event] Doc shepherd review X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 01:15:52 -0000 --_000_SN6PR2101MB0943B97C731235DF20722E46F5C60SN6PR2101MB0943_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 WWFyb24sIHRoZSBlZGl0cyBpbiBodHRwczovL2dpdGh1Yi5jb20vaW5kZXBlbmRlbnRpZC9JZGVu dGl0eS1FdmVudHMvcHVsbC8xMS9jb21taXRzL2UyN2EyNjk2ZjcwNzEwN2VjODVhOTk0ODQ0YzZj YmUyMjgzMzU2ZWMgYWRkcmVzcyB5b3VyIHJldmlldyBjb21tZW50cy4NCg0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1p a2UNCg0KRnJvbTogSWQtZXZlbnQgPGlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFs ZiBPZiBNaWtlIEpvbmVzDQpTZW50OiBXZWRuZXNkYXksIEZlYnJ1YXJ5IDI4LCAyMDE4IDM6NDYg UE0NClRvOiBQaGlsIEh1bnQgPHBoaWwuaHVudEBvcmFjbGUuY29tPjsgWWFyb24gU2hlZmZlciA8 eWFyb25mLmlldGZAZ21haWwuY29tPg0KQ2M6IFNlY0V2ZW50IDxpZC1ldmVudEBpZXRmLm9yZz4N ClN1YmplY3Q6IFJlOiBbSWQtZXZlbnRdIERvYyBzaGVwaGVyZCByZXZpZXcNCg0KUGhpbCBpcyBj b3JyZWN0LiAgVGhlIOKAnHR4buKAnSBjbGFpbSBpcyBpbnRlbnRpb25hbGx5IHVzYWJsZSB3aXRo IGFueSBKV1QgYW5kIG5vdCBzcGVjaWZpYyB0byBTRVRzLiBUaGlzIGp1c3QgaGFwcGVucyB0byBi ZSB0aGUgc3BlYyB0byBkZWZpbmUgaXQgYW5kIGFkZCBpdCB0byB0aGUgSUFOQSBKV1QgQ2xhaW1z IHJlZ2lzdHJ5Lg0KDQpZYXJvbiwgSSBwbGFuIHRvIHR3ZWFrIHlvdXIgbGFuZ3VhZ2Ug4oCcU0VU cyBzZXJ2ZSB0byBleGNoYW5nZSBpbmZvcm1hdGlvbiBhYm91dCBpZGVudGl0eS1yZWxhdGVkIGV2 ZW50c+KAnSBiZWNhdXNlIHRoZSBjaGFydGVyIGlzIGFib3V0IHNlY3VyaXR5IGV2ZW50cywgb25s eSBzb21lIG9mIHdoaWNoIGFyZSBpZGVudGl0eSBldmVudHMuICBXZSBzaG91bGRu4oCZdCBuYXJy b3cgdGhlIHNjb3BlIG9mIGFwcGxpY2FiaWxpdHkgYmV5b25kIHdoYXTigJlzIGludGVuZGVkLg0K DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBJZC1ldmVudCA8aWQtZXZlbnQtYm91bmNlc0BpZXRm Lm9yZzxtYWlsdG86aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZz4+IE9uIEJlaGFsZiBPZiBQaGls IEh1bnQNClNlbnQ6IFdlZG5lc2RheSwgRmVicnVhcnkgMjgsIDIwMTggMzozNSBQTQ0KVG86IFlh cm9uIFNoZWZmZXIgPHlhcm9uZi5pZXRmQGdtYWlsLmNvbTxtYWlsdG86eWFyb25mLmlldGZAZ21h aWwuY29tPj4NCkNjOiBTZWNFdmVudCA8aWQtZXZlbnRAaWV0Zi5vcmc8bWFpbHRvOmlkLWV2ZW50 QGlldGYub3JnPj4NClN1YmplY3Q6IFJlOiBbSWQtZXZlbnRdIERvYyBzaGVwaGVyZCByZXZpZXcN Cg0KWWFyb24sDQoNClRoYW5rcyBmb3IgdGhlIGNvbW1lbnRzLCB3aWxsIGFkZCB0byB0aGUgbmV4 dCB1cGRhdGUuDQoNCk1pa2UgaGFzIGFkZGVkIHNvbWUgb3RoZXIgbWlub3IgZWRpdG9yaWFsIGZp eGVzIGZvciBjb25zaXN0ZW5jeSB3aXRoIEpXVCBldGMgd2hpY2ggSSBiZWxpZXZlIHRoZSBncm91 cCBkaXNjdXNzZWQuDQoNCkEgY291cGxlIHF1ZXN0aW9ucyBpbmxpbmXigKYNCg0KUGhpbA0KDQpP cmFjbGUgQ29ycG9yYXRpb24sIElkZW50aXR5IENsb3VkIFNlcnZpY2VzIEFyY2hpdGVjdA0KQGlu ZGVwZW5kZW50aWQNCnd3dy5pbmRlcGVuZGVudGlkLmNvbTxodHRwOi8vd3d3LmluZGVwZW5kZW50 aWQuY29tPg0KcGhpbC5odW50QG9yYWNsZS5jb208bWFpbHRvOnBoaWwuaHVudEBvcmFjbGUuY29t Pg0KDQpPbiBGZWIgMjgsIDIwMTgsIGF0IDM6MjcgUE0sIFlhcm9uIFNoZWZmZXIgPHlhcm9uZi5p ZXRmQGdtYWlsLmNvbTxtYWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tPj4gd3JvdGU6DQoNCkhp LA0KDQpJIHdpbGwgYmUgZG9jdW1lbnQgc2hlcGhlcmQgZm9yIHRoZSBTRVQgc3BlYy4gQXMgc3Vj aCwgSSBqdXN0IHJlcmVhZCBpdCBvbmNlIGFnYWluLCBhbmQgSSB0aGluayBpdCBpcyBpbiB2ZXJ5 IGdvb2Qgc2hhcGUuIEhlcmUgYXJlIG15IChtb3N0bHkgZWRpdG9yaWFsKSBjb21tZW50cy4NCg0K LSBBYnN0cmFjdDogcGxlYXNlIGFkZCB0aGUgZm9sbG93aW5nIHRvIGNsYXJpZnksIGUuZy4gYWZ0 ZXIgdGhlIGZpcnN0IHNlbnRlbmNlOiBTRVRzIHNlcnZlIHRvIGV4Y2hhbmdlIGluZm9ybWF0aW9u IGFib3V0IGlkZW50aXR5LXJlbGF0ZWQgZXZlbnRzLg0KLSBBIHNlY3VyaXR5IHN1YmplY3QgTUFZ IGJlIHBlcm1hbmVudCAtIHRoaXMgaXMgZGVzY3JpcHRpdmUgdGV4dCwgcGxlYXNlIGNoYW5nZSAi TUFZIiB0byAibWF5Ii4NCi0gIlNFVHMgaGF2ZSBubyBjYXBhYmlsaXR5IGZvciBlcnJvciBzaWdu YWxpbmcgdG8gZW5zdXJlIHRoZSB2YWxpZGF0aW9uIG9mIGEgcmVjZWl2ZWQgU0VUIiAtIFNFVHMg YXJlIGEgZm9ybWF0LCBzbyBpdCBpcyBhIGhpZ2hlciBsZXZlbCBwcm90b2NvbCB0aGF0IG1heSBv ciBtYXkgbm90IHNpZ25hbCBlcnJvcnMuIEkgc3VnZ2VzdCB0byByZW1vdmUgdGhpcyBzZW50ZW5j ZS4NCi0gImhhcyBvY2N1cnJlZCBhYm91dCBhIFN1YmplY3QuIiBTaG91bGQgdGhpcyBiZSAiaGFz IG9jY3VycmVkIHRvIGEgU3ViamVjdOKAnT8NCg0KSSB3aWxsIHJlLXJlYWQuIEkgdGhpbmsgd2hh dCB0aGUgc3BlYyBpcyB0cnlpbmcgdG8gc2F5IGlzIHRvIG9yIHJlbGF0ZWQgdG8uIE1lYW5pbmcg dGhlIGV2ZW4gaXMgZGlyZWN0bHkgcmVsYXRlZCB0byB0aGUgc3ViamVjdCBidXQgbm90IG5lY2Vz c2FyaWx5IHRvIHRoZSBzdWJqZWN0LiAgSSB3aWxsIHJldmlldyBhbmQgc3VnZ2VzdCBzb21lIHRl eHQuDQoNCi0gMi4yOiBmb3IgcmVhZGFiaWxpdHksIHBsZWFzZSBpbmNsdWRlIHRoZSBmdWxsIG5h bWVzIG9mIHRoZSBjbGFpbXMgKCJJc3N1ZXIiLCAiSldUIElEIiBldGMuKS4NCi0gSU1PIHRoZSBk aXN0aW5jdGlvbiBiZXR3ZWVuIEpXVHMgYW5kIFNFVHMgd2l0aCByZWdhcmQgdG8gdGhlIG5lZWQg dG8gdXNlICJleHAiIGlzIG5vdCBjb252aW5jaW5nLiBJIHN1Z2dlc3Qgd2UgcmVmZXIgdG8gU2Vj LiA0LjUgZm9yIGEgYmV0dGVyIHJhdGlvbmFsZSB3aHkgd2UgbWFrZSB0aGlzIGNsYWltIE5PVCBS RUNPTU1FTkRFRCByYXRoZXIgdGhhbiBPUFRJT05BTCBhcyBpbiBSRkMgNzUxOS4NCi0gdHhuOiB0 aGlzIHBhcmFncmFwaCBzaG91bGQgc3BlYWsgYWJvdXQgU0VUcyByYXRoZXIgdGhhbiBKV1RzLg0K DQpJIHdpbGwgZGVmZXIgdG8gTWlrZSwgYnV0IEkgYmVsaWV2ZSBoZSBzdWdnZXN0ZWQgdG8gaGF2 ZSB0aGlzIHJlZ2lzdGVyZWQgZm9yIGdlbmVyYWwgSldUIHVzZS4NCg0KLSAidG8gcHJvdmlkZSBp bnRlZ3JpdHksIGNvbmZpZGVudGlhbGl0eSwgYW5kIGlzc3VlciB2YWxpZGF0aW9uIiwgc2hvdWxk IGJlICJpc3N1ZXIgYXV0aGVudGljaXR5Ii4NCi0gIldoZXRoZXIgYW5kIGhvdyBtdWx0aXBsZSAi ZXZlbnRzIiB2YWx1ZXMgYXJlIHVzZWQiOiB0aGUgcmVhZGVyIHdobyBoYXMgbm90IGJlZW4gZm9s bG93aW5nIG91ciBkaXNjdXNzaW9ucyBtYXkgbm90IHVuZGVyc3RhbmQgd2hhdCB0aGlzIG1lYW5z LCBtYXliZSB3ZSBzaG91bGQgc2F5IGluIHBhcmVudGhlc2VzLCAoaS5lLiBtdWx0aXBsZSBtZW1i ZXJzIGluIHRoZSAiZXZlbnRzIiBKU09OIG9iamVjdCkuDQotICJNVVNUIHN1cHBvcnQgVExTIDEu MiIgLSBhZGQgIm9yIGEgaGlnaGVyIHZlcnNpb24iLg0KLSA0LjU6IGludGVudGlvbmFsbHkgLSBJ IHRoaW5rIHdlIG1lYW4gIm1hbGljaW91c2x5Ii4NCi0gNi4xLjE6ICJTZWN1cml0eSBFdmVudCBV UkkiIC0gdGhpcyBkZXNjcmlwdGlvbiBpcyBpbmNvcnJlY3QsIHNob3VsZCBwcm9iYWJseSBiZSAi U2VjdXJpdHkgRXZlbnQgaW5mb3JtYXRpb24iIG9yIHNvbWV0aGluZyBzaW1pbGFybHkgdmFndWUu DQotIFJGQyA3NjE3IC0gdW51c2VkIHJlZi4gU2ltaWxhcmx5IHNhbWwtY29yZS4NCg0KVGhhbmtz LA0KICAgIFlhcm9uDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQpJZC1ldmVudCBtYWlsaW5nIGxpc3QNCklkLWV2ZW50QGlldGYub3JnPG1haWx0bzpJ ZC1ldmVudEBpZXRmLm9yZz4NCmh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91 cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9faWQtMkRldmVudCZk PUR3SUdhUSZjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpoOEJ2N3FJck1VQjY1ZWFwSV9KbkUmcj1u YTVGVnpCVFdtYW5xV055NERwY3R5WFBwdVlxUGtBSTFhTGNMTjRLWk5BJm09Ri1RbXZERlRBcGlR NldqZ2EwVTlzc1pxX1FNTElZR19YaVUyZzVKTzBVZyZzPW5Md0RaaHVNNEJfWlZ4WDNkR0VhZlpn eFlPQ1JER0xCQVBUQTdJSjNZVW8mZT0NCg0K --_000_SN6PR2101MB0943B97C731235DF20722E46F5C60SN6PR2101MB0943_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25v cm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uYXBwbGUtc3R5bGUtc3Bhbg0K CXttc28tc3R5bGUtbmFtZTphcHBsZS1zdHlsZS1zcGFuO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOiMwMDIwNjA7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6IzAwMjA2MDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjgu NWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRT ZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1z byA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIg Lz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVs YXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8 L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJF Ti1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlv bjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPllh cm9uLCB0aGUgZWRpdHMgaW4gPGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL2luZGVwZW5kZW50 aWQvSWRlbnRpdHktRXZlbnRzL3B1bGwvMTEvY29tbWl0cy9lMjdhMjY5NmY3MDcxMDdlYzg1YTk5 NDg0NGM2Y2JlMjI4MzM1NmVjIj4NCmh0dHBzOi8vZ2l0aHViLmNvbS9pbmRlcGVuZGVudGlkL0lk ZW50aXR5LUV2ZW50cy9wdWxsLzExL2NvbW1pdHMvZTI3YTI2OTZmNzA3MTA3ZWM4NWE5OTQ4NDRj NmNiZTIyODMzNTZlYzwvYT4gYWRkcmVzcyB5b3VyIHJldmlldyBjb21tZW50cy48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAw MjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyAtLSBNaWtlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUx RTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48Yj5Gcm9tOjwvYj4gSWQtZXZlbnQgJmx0O2lkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7 IDxiPk9uIEJlaGFsZiBPZg0KPC9iPk1pa2UgSm9uZXM8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVz ZGF5LCBGZWJydWFyeSAyOCwgMjAxOCAzOjQ2IFBNPGJyPg0KPGI+VG86PC9iPiBQaGlsIEh1bnQg Jmx0O3BoaWwuaHVudEBvcmFjbGUuY29tJmd0OzsgWWFyb24gU2hlZmZlciAmbHQ7eWFyb25mLmll dGZAZ21haWwuY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gU2VjRXZlbnQgJmx0O2lkLWV2ZW50QGll dGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0lkLWV2ZW50XSBEb2Mgc2hlcGhl cmQgcmV2aWV3PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+UGhpbCBpcyBjb3JyZWN0LiZuYnNwOyBUaGUg4oCcdHhu4oCd IGNsYWltIGlzIGludGVudGlvbmFsbHkgdXNhYmxlIHdpdGggYW55IEpXVCBhbmQgbm90IHNwZWNp ZmljIHRvIFNFVHMuIFRoaXMganVzdCBoYXBwZW5zIHRvIGJlIHRoZSBzcGVjIHRvIGRlZmluZSBp dCBhbmQgYWRkIGl0IHRvIHRoZSBJQU5BIEpXVCBDbGFpbXMgcmVnaXN0cnkuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIw NjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5ZYXJvbiwgSSBwbGFuIHRvIHR3ZWFrIHlvdXIgbGFu Z3VhZ2Ug4oCcPC9zcGFuPlNFVHMgc2VydmUgdG8gZXhjaGFuZ2UgaW5mb3JtYXRpb24gYWJvdXQg aWRlbnRpdHktcmVsYXRlZCBldmVudHM8c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+4oCdIGJl Y2F1c2UgdGhlIGNoYXJ0ZXIgaXMgYWJvdXQgc2VjdXJpdHkgZXZlbnRzLCBvbmx5IHNvbWUgb2Yg d2hpY2ggYXJlDQogaWRlbnRpdHkgZXZlbnRzLiZuYnNwOyBXZSBzaG91bGRu4oCZdCBuYXJyb3cg dGhlIHNjb3BlIG9mIGFwcGxpY2FiaWxpdHkgYmV5b25kIHdoYXTigJlzIGludGVuZGVkLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPkZyb206PC9iPiBJZC1ldmVudCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlkLWV2ZW50 LWJvdW5jZXNAaWV0Zi5vcmciPmlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KPGI+ T24gQmVoYWxmIE9mIDwvYj5QaGlsIEh1bnQ8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBG ZWJydWFyeSAyOCwgMjAxOCAzOjM1IFBNPGJyPg0KPGI+VG86PC9iPiBZYXJvbiBTaGVmZmVyICZs dDs8YSBocmVmPSJtYWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tIj55YXJvbmYuaWV0ZkBnbWFp bC5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gU2VjRXZlbnQgJmx0OzxhIGhyZWY9Im1haWx0 bzppZC1ldmVudEBpZXRmLm9yZyI+aWQtZXZlbnRAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlN1 YmplY3Q6PC9iPiBSZTogW0lkLWV2ZW50XSBEb2Mgc2hlcGhlcmQgcmV2aWV3PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5ZYXJvbiw8bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBmb3IgdGhlIGNvbW1lbnRzLCB3aWxsIGFk ZCB0byB0aGUgbmV4dCB1cGRhdGUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPk1pa2UgaGFzIGFkZGVkIHNvbWUgb3RoZXIgbWlub3IgZWRpdG9y aWFsIGZpeGVzIGZvciBjb25zaXN0ZW5jeSB3aXRoIEpXVCBldGMgd2hpY2ggSSBiZWxpZXZlIHRo ZSBncm91cCBkaXNjdXNzZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkEgY291cGxlIHF1ZXN0aW9ucyBpbmxpbmXigKY8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5QaGlsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPk9yYWNsZSBDb3Jwb3JhdGlvbiwgSWRl bnRpdHkgQ2xvdWQgU2VydmljZXMgQXJjaGl0ZWN0PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNr Ij5AaW5kZXBlbmRlbnRpZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PGEgaHJlZj0iaHR0 cDovL3d3dy5pbmRlcGVuZGVudGlkLmNvbSI+d3d3LmluZGVwZW5kZW50aWQuY29tPC9hPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86 cGhpbC5odW50QG9yYWNsZS5jb20iPnBoaWwuaHVudEBvcmFjbGUuY29tPC9hPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0 b206MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk9uIEZlYiAyOCwgMjAxOCwgYXQgMzoyNyBQTSwgWWFyb24gU2hlZmZlciAmbHQ7PGEg aHJlZj0ibWFpbHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbSI+eWFyb25mLmlldGZAZ21haWwuY29t PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5IaSw8YnI+DQo8YnI+DQpJIHdpbGwgYmUgZG9jdW1lbnQgc2hlcGhlcmQgZm9yIHRoZSBT RVQgc3BlYy4gQXMgc3VjaCwgSSBqdXN0IHJlcmVhZCBpdCBvbmNlIGFnYWluLCBhbmQgSSB0aGlu ayBpdCBpcyBpbiB2ZXJ5IGdvb2Qgc2hhcGUuIEhlcmUgYXJlIG15IChtb3N0bHkgZWRpdG9yaWFs KSBjb21tZW50cy48YnI+DQo8YnI+DQotIEFic3RyYWN0OiBwbGVhc2UgYWRkIHRoZSBmb2xsb3dp bmcgdG8gY2xhcmlmeSwgZS5nLiBhZnRlciB0aGUgZmlyc3Qgc2VudGVuY2U6IFNFVHMgc2VydmUg dG8gZXhjaGFuZ2UgaW5mb3JtYXRpb24gYWJvdXQgaWRlbnRpdHktcmVsYXRlZCBldmVudHMuPGJy Pg0KLSBBIHNlY3VyaXR5IHN1YmplY3QgTUFZIGJlIHBlcm1hbmVudCAtIHRoaXMgaXMgZGVzY3Jp cHRpdmUgdGV4dCwgcGxlYXNlIGNoYW5nZSAmcXVvdDtNQVkmcXVvdDsgdG8gJnF1b3Q7bWF5JnF1 b3Q7Ljxicj4NCi0gJnF1b3Q7U0VUcyBoYXZlIG5vIGNhcGFiaWxpdHkgZm9yIGVycm9yIHNpZ25h bGluZyB0byBlbnN1cmUgdGhlIHZhbGlkYXRpb24gb2YgYSByZWNlaXZlZCBTRVQmcXVvdDsgLSBT RVRzIGFyZSBhIGZvcm1hdCwgc28gaXQgaXMgYSBoaWdoZXIgbGV2ZWwgcHJvdG9jb2wgdGhhdCBt YXkgb3IgbWF5IG5vdCBzaWduYWwgZXJyb3JzLiBJIHN1Z2dlc3QgdG8gcmVtb3ZlIHRoaXMgc2Vu dGVuY2UuPGJyPg0KLSAmcXVvdDtoYXMgb2NjdXJyZWQgYWJvdXQgYSBTdWJqZWN0LiZxdW90OyBT aG91bGQgdGhpcyBiZSAmcXVvdDtoYXMgb2NjdXJyZWQgdG8gYSBTdWJqZWN04oCdPzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SSB3aWxsIHJlLXJlYWQuIEkgdGhpbmsgd2hhdCB0aGUgc3BlYyBpcyB0cnlpbmcgdG8g c2F5IGlzIHRvIG9yIHJlbGF0ZWQgdG8uIE1lYW5pbmcgdGhlIGV2ZW4gaXMgZGlyZWN0bHkgcmVs YXRlZCB0byB0aGUgc3ViamVjdCBidXQgbm90IG5lY2Vzc2FyaWx5IHRvIHRoZSBzdWJqZWN0LiAm bmJzcDtJIHdpbGwgcmV2aWV3IGFuZCBzdWdnZXN0IHNvbWUgdGV4dC48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9t OjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+LSAyLjI6IGZvciByZWFkYWJpbGl0eSwgcGxlYXNlIGluY2x1ZGUgdGhlIGZ1 bGwgbmFtZXMgb2YgdGhlIGNsYWltcyAoJnF1b3Q7SXNzdWVyJnF1b3Q7LCAmcXVvdDtKV1QgSUQm cXVvdDsgZXRjLikuPGJyPg0KLSBJTU8gdGhlIGRpc3RpbmN0aW9uIGJldHdlZW4gSldUcyBhbmQg U0VUcyB3aXRoIHJlZ2FyZCB0byB0aGUgbmVlZCB0byB1c2UgJnF1b3Q7ZXhwJnF1b3Q7IGlzIG5v dCBjb252aW5jaW5nLiBJIHN1Z2dlc3Qgd2UgcmVmZXIgdG8gU2VjLiA0LjUgZm9yIGEgYmV0dGVy IHJhdGlvbmFsZSB3aHkgd2UgbWFrZSB0aGlzIGNsYWltIE5PVCBSRUNPTU1FTkRFRCByYXRoZXIg dGhhbiBPUFRJT05BTCBhcyBpbiBSRkMgNzUxOS48YnI+DQotIHR4bjogdGhpcyBwYXJhZ3JhcGgg c2hvdWxkIHNwZWFrIGFib3V0IFNFVHMgcmF0aGVyIHRoYW4gSldUcy48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkg d2lsbCBkZWZlciB0byBNaWtlLCBidXQgSSBiZWxpZXZlIGhlIHN1Z2dlc3RlZCB0byBoYXZlIHRo aXMgcmVnaXN0ZXJlZCBmb3IgZ2VuZXJhbCBKV1QgdXNlLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206 MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t dG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4tICZxdW90O3RvIHByb3ZpZGUgaW50ZWdyaXR5LCBjb25maWRlbnRpYWxpdHks IGFuZCBpc3N1ZXIgdmFsaWRhdGlvbiZxdW90Oywgc2hvdWxkIGJlICZxdW90O2lzc3VlciBhdXRo ZW50aWNpdHkmcXVvdDsuPGJyPg0KLSAmcXVvdDtXaGV0aGVyIGFuZCBob3cgbXVsdGlwbGUgJnF1 b3Q7ZXZlbnRzJnF1b3Q7IHZhbHVlcyBhcmUgdXNlZCZxdW90OzogdGhlIHJlYWRlciB3aG8gaGFz IG5vdCBiZWVuIGZvbGxvd2luZyBvdXIgZGlzY3Vzc2lvbnMgbWF5IG5vdCB1bmRlcnN0YW5kIHdo YXQgdGhpcyBtZWFucywgbWF5YmUgd2Ugc2hvdWxkIHNheSBpbiBwYXJlbnRoZXNlcywgKGkuZS4g bXVsdGlwbGUgbWVtYmVycyBpbiB0aGUgJnF1b3Q7ZXZlbnRzJnF1b3Q7IEpTT04gb2JqZWN0KS48 YnI+DQotICZxdW90O01VU1Qgc3VwcG9ydCBUTFMgMS4yJnF1b3Q7IC0gYWRkICZxdW90O29yIGEg aGlnaGVyIHZlcnNpb24mcXVvdDsuPGJyPg0KLSA0LjU6IGludGVudGlvbmFsbHkgLSBJIHRoaW5r IHdlIG1lYW4gJnF1b3Q7bWFsaWNpb3VzbHkmcXVvdDsuPGJyPg0KLSA2LjEuMTogJnF1b3Q7U2Vj dXJpdHkgRXZlbnQgVVJJJnF1b3Q7IC0gdGhpcyBkZXNjcmlwdGlvbiBpcyBpbmNvcnJlY3QsIHNo b3VsZCBwcm9iYWJseSBiZSAmcXVvdDtTZWN1cml0eSBFdmVudCBpbmZvcm1hdGlvbiZxdW90OyBv ciBzb21ldGhpbmcgc2ltaWxhcmx5IHZhZ3VlLjxicj4NCi0gUkZDIDc2MTcgLSB1bnVzZWQgcmVm LiBTaW1pbGFybHkgc2FtbC1jb3JlLjxicj4NCjxicj4NClRoYW5rcyw8YnI+DQombmJzcDsmbmJz cDsmbmJzcDsgWWFyb248YnI+DQo8YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXzxicj4NCklkLWV2ZW50IG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9 Im1haWx0bzpJZC1ldmVudEBpZXRmLm9yZyI+SWQtZXZlbnRAaWV0Zi5vcmc8L2E+PGJyPg0KPGEg aHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNB X193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19pZC0yRGV2ZW50JmFtcDtkPUR3SUdhUSZh bXA7Yz1Sb1AxWXVtQ1hDZ2FXSHZsWllSOFBaaDhCdjdxSXJNVUI2NWVhcElfSm5FJmFtcDtyPW5h NUZWekJUV21hbnFXTnk0RHBjdHlYUHB1WXFQa0FJMWFMY0xONEtaTkEmYW1wO209Ri1RbXZERlRB cGlRNldqZ2EwVTlzc1pxX1FNTElZR19YaVUyZzVKTzBVZyZhbXA7cz1uTHdEWmh1TTRCX1pWeFgz ZEdFYWZaZ3hZT0NSREdMQkFQVEE3SUozWVVvJmFtcDtlIj5odHRwczovL3VybGRlZmVuc2UucHJv b2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3Rp bmZvX2lkLTJEZXZlbnQmYW1wO2Q9RHdJR2FRJmFtcDtjPVJvUDFZdW1DWENnYVdIdmxaWVI4UFpo OEJ2N3FJck1VQjY1ZWFwSV9KbkUmYW1wO3I9bmE1RlZ6QlRXbWFucVdOeTREcGN0eVhQcHVZcVBr QUkxYUxjTE40S1pOQSZhbXA7bT1GLVFtdkRGVEFwaVE2V2pnYTBVOXNzWnFfUU1MSVlHX1hpVTJn NUpPMFVnJmFtcDtzPW5Md0RaaHVNNEJfWlZ4WDNkR0VhZlpneFlPQ1JER0xCQVBUQTdJSjNZVW8m YW1wO2U8L2E+PTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_SN6PR2101MB0943B97C731235DF20722E46F5C60SN6PR2101MB0943_-- From nobody Wed Feb 28 23:04:10 2018 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 377F7120713; Wed, 28 Feb 2018 23:04:03 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: id-event@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151988784312.9998.11132569878436513908@ietfa.amsl.com> Date: Wed, 28 Feb 2018 23:04:03 -0800 Archived-At: Subject: [Id-event] I-D Action: draft-ietf-secevent-token-06.txt X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 07:04:03 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Events WG of the IETF. Title : Security Event Token (SET) Authors : Phil Hunt Michael B. Jones William Denniss Morteza Ansari Filename : draft-ietf-secevent-token-06.txt Pages : 27 Date : 2018-02-28 Abstract: This specification defines the Security Event Token (SET) data structure. A SET describes a statement of fact from the perspective of an issuer about the state of a security subject, which is intended to be shared with one or more recipients. This statement of fact represents an event that occurred to the security subject. In some use cases, the security subject may be a digitial identity, but SETs are also applicable to non-identity use cases. A SET is a JSON Web Token (JWT), which can be optionally signed and/or encrypted. SETs can be distributed via protocols such as HTTP. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-secevent-token/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-secevent-token-06 https://datatracker.ietf.org/doc/html/draft-ietf-secevent-token-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-secevent-token-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Feb 28 23:10:01 2018 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBBD6120713 for ; Wed, 28 Feb 2018 23:09:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GvekfGlEeQtC for ; Wed, 28 Feb 2018 23:09:57 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on071e.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe45::71e]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6346B1205D3 for ; Wed, 28 Feb 2018 23:09:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9yJZJ7MhzmSmJrSLHpZDl9JATJusyptYFh1zopOcKbk=; b=cKSYChAfw8V2RcyuCF0q3WvjDxzENTidHUhCAT9Aj9ZoZRbBV5CrWPXHI4rvn3SJkWbU8wKe9HWSZcqH7HIdeihMdBEBwzCpaDyNgz0jp/WgcRxhi/XJ2UVLQCXieJzbcaWKF9Yo+fwQ96r0ehHLxydSC2JDyskx9kOcwfNvOs0= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB0975.namprd21.prod.outlook.com (52.132.114.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.3; Thu, 1 Mar 2018 07:09:56 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::9866:f6b5:e2d6:50%2]) with mapi id 15.20.0567.002; Thu, 1 Mar 2018 07:09:55 +0000 From: Mike Jones To: SecEvent Thread-Topic: Security Event Token (SET) spec addressing 2nd WGLC and shepherd comments Thread-Index: AdOxKd7g2h3TSbOhQ+aIgKVQLYi88A== Date: Thu, 1 Mar 2018 07:09:55 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.47.88.236] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB0975; 6:hn59ZYlp3o51ArLDhRPerwHCPZp1nPvH5LbbDweBx+YI2dtEASlOTCnq7tBa+npMgE7Ei69Zd2FnncjhuccNVpDmgHgvFRlK240+ikhh/ZKtkWn2G8fPDS/Sc0hVPWfxDJj0tTjWXRiYxMjli4KnRFc2FV9A9Tl/SefJz+FcEA+ieT/HLFCQxfjEMRHsvH5VgFvLDxWHObPEu0gFrk5UVk2QjvHBSNr2g2U+8tN2ChX8mbJ6r+AXQA+ZDLpD4ueeE/1LnnspYUdD+SsWr956kP9t8VIWhra24l0vGoGJ/DC1gG0lePeIRqGU2OH+MxjeIGLwf7nD/cTr60CW5SJehDZ2wGgbAbBJcRMb2o42QlTQ5DofGUOQhVsUR3xcN7pq; 5:JIO/39ewQEl/o9rkIKbpaMDdRUjWuxJUJhKRQrNs15440qQu8mv0IwJLA9DRulnvQXLcDbCQv121zXniIW0O7u1IhnSSStkuZbP3qv59KrkW0x8I2XniVgpKAkevQ8YCkYV3aqEjo3nyDb7mLhA8GfyP/t/IwcSlLKM/bae+p7s=; 24:vWFetDuwrVhIljNpDMwoX3Q0R1tSSyBGROUR3O0ahiCOXuoyZ+vUQU62Ug5a/hlhpRD394w/JYEXQsFivIiEX8OpQ/Q6/NBn+uj4GtHFHV8=; 7:MK8Y26RreCoKTX5vuwe186jIXf6YmdrQq0I49jMV4i+doh+asdZ/dcPWt6TBjkmKORkD8+U7S9xRYBi8dfwE5AGV2WAVqGMnVDlxC+rfvWXJAVp5bnTMBkqEgasTvlCa/byEV5EhZYuM1vwQItgyZYqWwqck0aQ3orpnCarTkaCfUCVBoppYoH4wkjrPOm0qqtKQSDAX8lLaE2i51e6BsxmewNFqDGKnpYsaLp1nx7VvlqU0VV0oQmsUvLAhz6L9 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: aaa3248b-cdc6-4222-1ccb-08d57f436fe6 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:SN6PR2101MB0975; x-ms-traffictypediagnostic: SN6PR2101MB0975: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(31418570063057)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3002001)(3231220)(944501224)(52105095)(6055026)(61426038)(61427038)(6041288)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:SN6PR2101MB0975; BCL:0; PCL:0; RULEID:; SRVR:SN6PR2101MB0975; x-forefront-prvs: 05986C03E0 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(39860400002)(39380400002)(376002)(346002)(209900001)(189003)(199004)(8936002)(10290500003)(26005)(3660700001)(81166006)(8676002)(33656002)(790700001)(606006)(3846002)(66066001)(186003)(81156014)(6116002)(2900100001)(86612001)(5250100002)(3280700002)(53376002)(2906002)(106356001)(316002)(68736007)(6916009)(74316002)(478600001)(966005)(22452003)(55016002)(9686003)(7696005)(10090500001)(54896002)(6306002)(236005)(99286004)(7736002)(72206003)(8990500004)(6436002)(97736004)(6506007)(7110500001)(6346003)(5660300001)(86362001)(53936002)(15650500001)(59450400001)(14454004)(105586002)(2420400007)(25786009)(102836004)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB0975; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: LEALqE4iWCVhDamJL4alABbFkK5cugfOopEr3NINz3cLNwtjOyK5oX7oLAL3xwMvgrfMBIvxgggN32CH4RkhBi/mD/mQNI8bqBxpGPj2l5ARA9fLCv5krh2BRs2whAm9k1rUBfwt3LltZXBGCGOdW+QGXw3j7WQ6uIhPE6aiK3I= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB09437801FF965E7D858C719BF5C60SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: aaa3248b-cdc6-4222-1ccb-08d57f436fe6 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2018 07:09:55.8410 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB0975 Archived-At: Subject: [Id-event] Security Event Token (SET) spec addressing 2nd WGLC and shepherd comments X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 07:10:00 -0000 --_000_SN6PR2101MB09437801FF965E7D858C719BF5C60SN6PR2101MB0943_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable A new draft of the Security Event Token (SET) specification has published t= hat addresses review comments from the second Working Group Last Call and s= hepherd comments from Yaron Sheffer. Changes were: * Changed "when the event was issued" to "when the SET was issued" in t= he "iat" description, as suggested by Annabelle Backman. * Applied editorial improvements that improve the consistency of the sp= ecification that were suggested by Annabelle Backman, Marius Scurtescu, and= Yaron Sheffer. The specification is available at: * https://tools.ietf.org/html/draft-ietf-secevent-token-06 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-secevent-token-06.html -- Mike P.S. This announcement was also posted at http://self-issued.info/?p=3D178= 1 and as @selfissued. --_000_SN6PR2101MB09437801FF965E7D858C719BF5C60SN6PR2101MB0943_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

A new draft of the Security Event Token (SET) specif= ication has published that addresses review comments from the second Workin= g Group Last Call and shepherd comments from Yaron Sheffer.  Changes w= ere:

  • Changed “wh= en the event was issued” to “when the SET was issued” in = the “iat&#= 8221; description, as suggested by Annabelle Backman.
  • Applied editorial impro= vements that improve the consistency of the specification that were suggest= ed by Annabelle Backman, Marius Scurtescu, and Yaron Sheffer.

 

The specification is available at:

 

An HTML-formatted version is also available at:=

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;        -- Mike

 

P.S.  This announcement was also posted at http://self-issued.info/?p=3D1781 and as @selfissued.

--_000_SN6PR2101MB09437801FF965E7D858C719BF5C60SN6PR2101MB0943_--