From nobody Thu Jan 24 08:36:37 2019 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A045B1311A0; Thu, 24 Jan 2019 08:36:28 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: id-event@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.90.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: id-event@ietf.org Message-ID: <154834778861.29405.2021169004854976119@ietfa.amsl.com> Date: Thu, 24 Jan 2019 08:36:28 -0800 Archived-At: Subject: [Id-event] I-D Action: draft-ietf-secevent-http-push-04.txt X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2019 16:36:29 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Events WG of the IETF. Title : Push-Based Security Event Token (SET) Delivery Using HTTP Authors : Annabelle Backman Michael B. Jones Marius Scurtescu Morteza Ansari Anthony Nadalin Filename : draft-ietf-secevent-http-push-04.txt Pages : 18 Date : 2019-01-23 Abstract: This specification defines how a Security Event Token (SET) may be delivered to an intended recipient using HTTP POST. The SET is transmitted in the body of an HTTP POST request to an endpoint operated by the recipient, and the recipient indicates successful or failed transmission via the HTTP response. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-secevent-http-push-04 https://datatracker.ietf.org/doc/html/draft-ietf-secevent-http-push-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-secevent-http-push-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Jan 24 09:09:38 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8BC0130EB8 for ; Thu, 24 Jan 2019 09:09:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -19.052 X-Spam-Level: X-Spam-Status: No, score=-19.052 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h390boC7C1SK for ; Thu, 24 Jan 2019 09:09:34 -0800 (PST) Received: from smtp-fw-9102.amazon.com (smtp-fw-9102.amazon.com [207.171.184.29]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 752C3130EB9 for ; Thu, 24 Jan 2019 09:09:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1548349774; x=1579885774; h=from:to:subject:date:message-id:mime-version; bh=20HMQJcHDua2SquuPohX6sRpLqODP4bPe5P+0fxD/80=; b=R8jtD50UDntmwQrgfmndr1i9AGXf65Lb88rn3mCLoullhl0QbmSD6IY+ DzgbyhemOx757Eeaeoh59ALFqqfc7UMd4i/AI93Jcg52LiZEX90EiyxmA O1OLRcbM5QEuCpY0q/SB9O42/8/hDeIIJoXaorKDspU/0h1lROdMmV6l4 4=; X-IronPort-AV: E=Sophos;i="5.56,517,1539648000"; d="scan'208,217";a="655427242" Received: from sea3-co-svc-lb6-vlan3.sea.amazon.com (HELO email-inbound-relay-2a-e7be2041.us-west-2.amazon.com) ([10.47.22.38]) by smtp-border-fw-out-9102.sea19.amazon.com with ESMTP; 24 Jan 2019 17:09:31 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198]) by email-inbound-relay-2a-e7be2041.us-west-2.amazon.com (Postfix) with ESMTPS id 24EF9A1D1D for ; Thu, 24 Jan 2019 17:09:31 +0000 (UTC) Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Thu, 24 Jan 2019 17:09:30 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Thu, 24 Jan 2019 17:09:30 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Thu, 24 Jan 2019 17:09:30 +0000 From: "Richard Backman, Annabelle" To: "id-event@ietf.org" Thread-Topic: Version -04 of "Push-Based SET Delivery Using HTTP" Thread-Index: AQHUtAeRiQkuDpH61UOWjYiePGsBLw== Date: Thu, 24 Jan 2019 17:09:30 +0000 Message-ID: <0460A97D-C508-4868-8F6B-AF500FBCA086@amazon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.0.180812 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.162.76] Content-Type: multipart/alternative; boundary="_000_0460A97DC50848688F6BAF500FBCA086amazoncom_" MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: [Id-event] Version -04 of "Push-Based SET Delivery Using HTTP" X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2019 17:09:37 -0000 --_000_0460A97DC50848688F6BAF500FBCA086amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIGVkaXRvcnMgaGF2ZSBwdWJsaXNoZWQgYW4gdXBkYXRlIHRvIOKAnFB1c2gtQmFzZWQgU2Vj dXJpdHkgRXZlbnQgVG9rZW4gKFNFVCkgRGVsaXZlcnkgVXNpbmcgSFRUUOKAnSAoZHJhZnQtaWV0 Zi1zZWNldmVudC1odHRwLXB1c2g8aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2gvPikuIFRoaXMgdXBkYXRlIGluY2x1ZGVzIGNoYW5n ZXMgYmFzZWQgb24gZmVlZGJhY2sgcmVjZWl2ZWQgaW4gQmFuZ2tvaywgYWxvbmcgd2l0aCBtaW5v ciByZWFkYWJpbGl0eSBlZGl0cy4gVGhhbmsgeW91IHRvIGFsbCB0aG9zZSB3aG8gY29tbWVudGVk IG9uIHRoZSAtMDMgZHJhZnQhDQoNCk5vdGFibGUgY2hhbmdlczoNCg0KICAqICAgUmVwbGFjZWQg RXJyb3IgQ29kZXMgd2l0aCBzbWFsbGVyIHNldCBvZiBtZWFuaW5nZnVsbHkgZGlmZmVyZW50aWF0 ZWQgY29kZXMsIGFuZCBhZGRlZCBtb3JlIGVycm9yIHJlc3BvbnNlIGV4YW1wbGVzIHRvIGRlbW9u c3RyYXRlIGZsZXhpYmlsaXR5IG9mIGBkZXNjcmlwdGlvbmAgcHJvcGVydHkuDQogICogICBBZGRl ZCByZXF1aXJlbWVudCB0aGF0IGVycm9yIGRlc2NyaXB0aW9ucyBhbmQgcmVzcG9uc2VzIGFyZSBV VEYtOCBlbmNvZGVkLg0KICAqICAgQWRkZWQgZXJyb3IgZGVzY3JpcHRpb24gbGFuZ3VhZ2UgcHJl ZmVyZW5jZXMgYW5kIHNwZWNpZmljYXRpb24gdmlhIGBBY2NlcHQtTGFuZ3VhZ2VgIGFuZCBgQ29u dGVudC1MYW5ndWFnZWAgaGVhZGVycy4NCiAgKiAgIEFkZGVkIHJlcXVpcmVtZW50IGZvciByZWNp cGllbnQgdG8gdmFsaWRhdGUgdGhhdCB0aGUgaXNzdWVyIG9mIGEgcmVjZWl2ZWQgU0VUIGlzIG9u ZSB0aGF0IHRoZXkgYXJlIHdpbGxpbmcgdG8gYWNjZXB0IFNFVHMgZnJvbS4NCiAgKiAgIEFkZGVk IHRpbWUgb3V0cyBhcyBhbiBhY2NlcHRhYmxlIHJlYXNvbiB0byByZXNlbmQgYSBTRVQuDQoNClRo ZSAtMDQgZHJhZnQgY2FuIGJlIGZvdW5kIGhlcmU6IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wNA0KDQotLQ0KQW5uYWJlbGxlIFJpY2hh cmQgQmFja21hbg0KQVdTIElkZW50aXR5DQoNCg== --_000_0460A97DC50848688F6BAF500FBCA086amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJNUyBNaW5jaG8iOw0KCXBhbm9zZS0xOjIg MiA2IDkgNCAyIDUgOCAzIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBN YXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9u dC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9u dC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQE1TIE1pbmNobyI7DQoJcGFub3NlLTE6MiAyIDYgOSA0 IDIgNSA4IDMgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1z b05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0 ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzYW1wDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCnAuTXNv TGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgN Cgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdo dDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4t Ym90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbC1jb21wb3NlOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y OndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjox LjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNl Y3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlk OjMzODY1NzIxNjsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1p ZHM6MTQzMzAxODQwNiA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5 MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDEN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBs MDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBO ZXciO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1m YW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw2 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxp c3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1p bHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9 DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkg bGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+VGhlIGVkaXRvcnMgaGF2ZSBwdWJsaXNoZWQgYW4gdXBkYXRlIHRvIOKAnFB1 c2gtQmFzZWQgU2VjdXJpdHkgRXZlbnQgVG9rZW4gKFNFVCkgRGVsaXZlcnkgVXNpbmcgSFRUUOKA nSAoPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1z ZWNldmVudC1odHRwLXB1c2gvIj5kcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaDwvYT4pLg0K IFRoaXMgdXBkYXRlIGluY2x1ZGVzIGNoYW5nZXMgYmFzZWQgb24gZmVlZGJhY2sgcmVjZWl2ZWQg aW4gQmFuZ2tvaywgYWxvbmcgd2l0aCBtaW5vciByZWFkYWJpbGl0eSBlZGl0cy4gVGhhbmsgeW91 IHRvIGFsbCB0aG9zZSB3aG8gY29tbWVudGVkIG9uIHRoZSAtMDMgZHJhZnQhPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Ob3RhYmxlIGNoYW5nZXM6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgdHlwZT0iZGlzYyI+DQo8 bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxp c3Q6bDAgbGV2ZWwxIGxmbzEiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJs YWNrIj5SZXBsYWNlZCBFcnJvciBDb2RlcyB3aXRoIHNtYWxsZXIgc2V0IG9mIG1lYW5pbmdmdWxs eSBkaWZmZXJlbnRpYXRlZCBjb2RlcywgYW5kIGFkZGVkIG1vcmUgZXJyb3IgcmVzcG9uc2UgZXhh bXBsZXMgdG8gZGVtb25zdHJhdGUgZmxleGliaWxpdHkNCiBvZiBgZGVzY3JpcHRpb25gIHByb3Bl cnR5Ljwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3Nw YW4+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDow aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5BZGRlZCByZXF1aXJlbWVudCB0aGF0IGVycm9yIGRlc2NyaXB0aW9ucyBhbmQgcmVzcG9uc2Vz IGFyZSBVVEYtOCBlbmNvZGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PGxpIGNsYXNzPSJNc29M aXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBs Zm8xIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjpibGFjayI+QWRkZWQgZXJy b3IgZGVzY3JpcHRpb24gbGFuZ3VhZ2UgcHJlZmVyZW5jZXMgYW5kIHNwZWNpZmljYXRpb24gdmlh Jm5ic3A7YEFjY2VwdC1MYW5ndWFnZWAmbmJzcDthbmQmbmJzcDtgQ29udGVudC1MYW5ndWFnZWAm bmJzcDtoZWFkZXJzLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48 L286cD48L3NwYW4+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJn aW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5BZGRlZCByZXF1aXJlbWVudCBmb3IgcmVjaXBpZW50IHRvIHZhbGlkYXRlIHRo YXQgdGhlIGlzc3VlciBvZiBhIHJlY2VpdmVkIFNFVCBpcyBvbmUgdGhhdCB0aGV5IGFyZSB3aWxs aW5nIHRvIGFjY2VwdCBTRVRzIGZyb20uPG86cD48L286cD48L3NwYW4+PC9saT48bGkgY2xhc3M9 Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2 ZWwxIGxmbzEiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5BZGRlZCB0aW1lIG91dHMg YXMgYW4gYWNjZXB0YWJsZSByZWFzb24gdG8gcmVzZW5kIGEgU0VULjxvOnA+PC9vOnA+PC9zcGFu PjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhlIC0wNCBkcmFmdCBjYW4gYmUgZm91 bmQgaGVyZToNCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRm LXNlY2V2ZW50LWh0dHAtcHVzaC0wNCI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0 LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLTA0PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4tLSZuYnNwOzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPkFubmFiZWxsZSBS aWNoYXJkIEJhY2ttYW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNl cmlmIj5BV1MgSWRlbnRpdHk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_0460A97DC50848688F6BAF500FBCA086amazoncom_-- From nobody Thu Jan 24 10:07:26 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1AE71312EE for ; Thu, 24 Jan 2019 10:07:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vAUebfubkLbw for ; Thu, 24 Jan 2019 10:07:23 -0800 (PST) Received: from mail-lj1-x236.google.com (mail-lj1-x236.google.com [IPv6:2a00:1450:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E6461312EA for ; Thu, 24 Jan 2019 10:07:23 -0800 (PST) Received: by mail-lj1-x236.google.com with SMTP id v1-v6so6110083ljd.0 for ; Thu, 24 Jan 2019 10:07:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=zY4nPbrJbXSDN87w88Tf53Op4K5uH/xZWTpfBYN2+Oc=; b=dTe3WZHhA57Yyk2+fC8fx4X103YC8Ly8CB2+HOwXr1BwL1KFS73NFqoszrbyaWl8ik LgcG3dvLWaC4QHUhyvhCIteT+Lcq2AzN4nz9e9mdpqhR6yj2DDyMDwqgILjHdT3yeg16 WZRIzqqqeeSTE+DRAoHT2ILVlxk+b2QRMvRYu7mKBRoef65cGlNMgT9zLxUgWSzhM379 YGa1iabUFQqCuYz2FNGWgJaZWD+xS+E0eIKENdypzN0wFjn+j+Smtc77i1ZDEEWbwBSl zqSQ+TFhq6RwRDVI+K/0WK82fgpVqtmrd8Y2pToRLTXGhA3nCsfcwKa7bDcJUuJYsMPL Yfvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=zY4nPbrJbXSDN87w88Tf53Op4K5uH/xZWTpfBYN2+Oc=; b=dK7HKHI3rwIuPF7vyXgGF6+g3FUmgVtK7zEAML7xNDwTkLf8aRbpd+gBxtR83B8YGZ TkPJ/EV4xJpKQF+hVckqZ85+9MpjhIjuIK2LPdSNUaIxTPnYlCnyXH1wxhyhD7s6fTUs 9JIlUkjB37/AFDZYCSLMCuejf1YM1J1W3ZM9cGOU6fJ9lqjhVAgPRgJKwFGOeFESkDqv SDYzeDdrPwiBilnTPz8sRJ0fQbcS0w50ZFvWNqO33XWMbl4lPpd4ephcGN2m9HWZBiqZ cppYPIrNxeQieiA7xFT2wXZ1u1EDm44DfaTztv4GTfTfSpa+fJem006bcXrI+stwan0i Cypg== X-Gm-Message-State: AJcUukctexei1HXEzEAtTUZuew3h7IHcl9047I2Kos2h/ZAOFnP01PLv A8DjCWl6RZ23go3MmPjultFlH5oQ9LfCZkWDFVIMv0cO X-Google-Smtp-Source: ALg8bN4ZWq+M6AbGoK2EQlGNk7WzShmarejyRaGAnnj0wEyQ/SltOzpGEaUDeKQ7CX6oYe0NOvCV8MnvTMIePUU4X3Q= X-Received: by 2002:a2e:5356:: with SMTP id t22-v6mr3938314ljd.26.1548353241146; Thu, 24 Jan 2019 10:07:21 -0800 (PST) MIME-Version: 1.0 References: <0460A97D-C508-4868-8F6B-AF500FBCA086@amazon.com> In-Reply-To: <0460A97D-C508-4868-8F6B-AF500FBCA086@amazon.com> From: Dick Hardt Date: Thu, 24 Jan 2019 10:07:02 -0800 Message-ID: To: "Richard Backman, Annabelle" Cc: "id-event@ietf.org" Content-Type: multipart/alternative; boundary="000000000000eceddc0580381403" Archived-At: Subject: Re: [Id-event] Version -04 of "Push-Based SET Delivery Using HTTP" X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2019 18:07:26 -0000 --000000000000eceddc0580381403 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks Annabelle! On Thu, Jan 24, 2019 at 9:09 AM Richard Backman, Annabelle wrote: > The editors have published an update to =E2=80=9CPush-Based Security Even= t Token > (SET) Delivery Using HTTP=E2=80=9D (draft-ietf-secevent-http-push > ). This > update includes changes based on feedback received in Bangkok, along with > minor readability edits. Thank you to all those who commented on the -03 > draft! > > > > Notable changes: > > - Replaced Error Codes with smaller set of meaningfully differentiated > codes, and added more error response examples to demonstrate flexibili= ty of > `description` property. > - Added requirement that error descriptions and responses are UTF-8 > encoded. > - Added error description language preferences and specification > via `Accept-Language` and `Content-Language` headers. > - Added requirement for recipient to validate that the issuer of a > received SET is one that they are willing to accept SETs from. > - Added time outs as an acceptable reason to resend a SET. > > > > The -04 draft can be found here: > https://tools.ietf.org/html/draft-ietf-secevent-http-push-04 > > > > -- > > Annabelle Richard Backman > > AWS Identity > > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --000000000000eceddc0580381403 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks Annabelle!

On Thu, Jan 24, 2019 at 9:09 AM Richard B= ackman, Annabelle <richanna=3D40amazon.com@dmarc.ietf.org> wrote:

The editors have publ= ished an update to =E2=80=9CPush-Based Security Event Token (SET) Delivery = Using HTTP=E2=80=9D (draft-ietf-secevent-http-push). This update includes changes based on feedback received in Bangkok, along = with minor readability edits. Thank you to all those who commented on the -= 03 draft!

=C2=A0<= /span>

Notable changes:

  • Replaced Error Codes w= ith smaller set of meaningfully differentiated codes, and added more error = response examples to demonstrate flexibility of `description` property.=
  • Added requirement = that error descriptions and responses are UTF-8 encoded.
  • Added error des= cription language preferences and specification via=C2=A0`Accept-Language`= =C2=A0and=C2=A0`Content-Language`=C2=A0headers.
  • Added requirement for recipient to validate that the issuer of a received= SET is one that they are willing to accept SETs from.=
  • Added time outs as an accepta= ble reason to resend a SET.

=C2=A0<= /span>

The -04 draft can be = found here: https://tools.ietf.org/html/draft-ietf-secevent-http-push-0= 4

=C2=A0<= /span>

--=C2=A0

Annabelle Richard Backman

AWS Identity

=C2=A0

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--000000000000eceddc0580381403-- From nobody Thu Jan 24 10:11:25 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65239131302 for ; Thu, 24 Jan 2019 10:11:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wd5SaQ2xhHmC for ; Thu, 24 Jan 2019 10:11:22 -0800 (PST) Received: from mail-lf1-x132.google.com (mail-lf1-x132.google.com [IPv6:2a00:1450:4864:20::132]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 454351312FB for ; Thu, 24 Jan 2019 10:11:21 -0800 (PST) Received: by mail-lf1-x132.google.com with SMTP id z13so4994182lfe.11 for ; Thu, 24 Jan 2019 10:11:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=JMHlTEnDWFPgdZAf3fHU1Ki7sJuHk0TvOfZtx6pTNSU=; b=lgP/VmyWUnPgJsVeaor8+Zj6jEKyR5jd+QJ1X02RWJCQvqKNQ7t5HdlEMz2bfgT8/y NVrTTaE+dfZ1J/w0KIZ3KVUU//lln3lK3SoHqKxGVTgaSbFaYDXD4Rj8gfSHucluEKor qAymWG7zSkYV92eEltToTo38rtGXR9v/sDRHdh5I+qpaGx41ix45s3Or+e4dJT4J4ri4 Fbhz9ZCzurWhDF5UPLEEww6y5Fv64a1uTtTOSSpOOkrN7GucHfWP3YXS6EAucLtRIuVC hmEjxmg7y1hNBZE14hIgt5UjoIEsBYB7SuWI8JLZ3mxUSWtOVY7FfMd7NV3da7cSt4Zs ChXw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=JMHlTEnDWFPgdZAf3fHU1Ki7sJuHk0TvOfZtx6pTNSU=; b=YSx9dt67SnY1iggn/jvvamSE963onFrK+B9d2RiaZs2F3MEsFzyOkyX2y9ORiAYHtA a5/CeCY7Gu8IhtOfPTy7Grbw0igmgVgIftCH5KGoA6uSQ84VfNfwSXtV+nYAObwVsJfy q8z723ANtAXrCX1zoSn9kwsXyH+P90C5ro4WNWmDcbTQ8b8Wlj/TCDHT/KtlnymAu4ed H5TCVocmhkMlXU9uNdb7KOQhILI8jBrVde83pF+rGz2ykILZlzpO5qvGqDz1/nTrjy+E xXx24i2qkY9/p4fcxA/I94I8CGLFWiREgR5CywkKTgfLKmr3xX+xkcxKJX0fHfjMEQoO T9DQ== X-Gm-Message-State: AJcUukePYLZeb10WxKj3Sm/5uKx4DyKyjJkHY84xtFlAOWDab/eM7YA+ aPzt86EQA8LitDON5MRxgu5liXYx4aYWMMA9UTi0swuc6b4= X-Google-Smtp-Source: ALg8bN4eOHbka9Iqo2g5GIhnSdTSYsJDy3yMc1PEkIiHK6MkBoiMU4TDV+5PJcfZQnnTfi/eu7xDHy6MxQBf7Ado0xo= X-Received: by 2002:a19:26ce:: with SMTP id m197mr6026282lfm.23.1548353479057; Thu, 24 Jan 2019 10:11:19 -0800 (PST) MIME-Version: 1.0 From: Dick Hardt Date: Thu, 24 Jan 2019 10:11:01 -0800 Message-ID: To: SecEvent Cc: Yaron Sheffer , Annabelle Richard , Mike Jones , "Morteza Ansari (moransar)" , Phil Hunt , Anthony Nadalin , Marius Scurtescu Content-Type: multipart/alternative; boundary="0000000000001b30590580382316" Archived-At: Subject: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2019 18:11:24 -0000 --0000000000001b30590580382316 Content-Type: text/plain; charset="UTF-8" Dear SecEvent participants, This is to start a 2-week working group last call on draft-ietf-secevent -http-push-04 https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/ until Feb 8, 2019. Please send any comments to the list. In addition, if you have no comments but support publication of this document as-is, please make your voice heard. Thanks, Dick and Yaron --0000000000001b30590580382316 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear=C2=A0SecEve= nt=C2=A0participants,

This is to start a 2-week working group= last call on=C2=A0draft-ietf-secevent-http= -push-04=C2=A0

https://datatracker.ietf.org= /doc/draft-ietf-secevent-http-push/

until Feb 8,= 2019.

Please send any comments to the list. In ad= dition, if you have=C2=A0no comments but support publication of this docume= nt as-is, please make=C2=A0your voice heard.

Thanks,

=C2=A0= =C2=A0=C2=A0=C2=A0 Dick and Yaron
--0000000000001b30590580382316-- From nobody Fri Jan 25 09:58:40 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9444130FF0 for ; Fri, 25 Jan 2019 09:58:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wcz7wSY3ETgN for ; Fri, 25 Jan 2019 09:58:37 -0800 (PST) Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A820C130FDA for ; Fri, 25 Jan 2019 09:58:36 -0800 (PST) Received: by mail-wr1-x42d.google.com with SMTP id f7so11296571wrp.1 for ; Fri, 25 Jan 2019 09:58:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=9J7rx5RiNp/88/jwRXU9mnv8nYO8Sr4St5DKqd187mg=; b=UPeAF18u3lM+XZ9MxQEJHpDTYaITeFGKcquD8u+3XSzo0Xa2+NVxab58gms6a8NXHX T2jxrSiRWlIS+k+VMijyR3f2YtIMXjdSZ57KtKf85NDPBgNQXysugaYNONZNHvBSEoFQ N4ydhcCE+TsT72RAtHXVrR4HdM4Sku28764nHziXTLsXcX3tWhM2eSR9ozllenclwRM1 0w+7quU9QOpeNqGUkFHVpRW88LrY2AZW4RrdCGVNcwti6FmaIC+qdQc2d0Cy3EQrnPHd CywYy1SMA8og1hzbGsgVhrnxFAlGxN7le2MNPasSG1WhdjYIaVWAG7ITgR+NZAD8nvG+ elvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=9J7rx5RiNp/88/jwRXU9mnv8nYO8Sr4St5DKqd187mg=; b=F0+1s8pvrtVCimxis+DkJFydJaYROLkHsZa2ceOLajRhJqHAwsV3DI7G2Ec7gaDpNs 5hVviTIY+fChhdk9a36eWLM9v2MGve2G79FMkGulXc8dzMflDOJoi8ZY7Dgmn27inVeb xcazipaZ7JE1mEoeP8oNEWG2tTA0yXcKXT6jiMbgJDoLpJ37JkqfvvEkV/q/dHyiorj1 TSAa/fqMk8kr8PtJIFN4X0vEqBI1nS4KUO3lLduHawEd/yBChAI/IYw5yNMN0tAAS+Eb nPDFxvInVFDusGLU8ThlORASKiWUtFo5lWVXRzTDYZGyXrB/oTvNNrrau3d8EqQ28sb7 ZmWg== X-Gm-Message-State: AJcUukdrN0b7Qi5nxUsq8JzOLzzifByrBLWv/qOGSBtQ+OdcTYI5pphH aZtcImDS/jy1aOASN3f6T9o= X-Google-Smtp-Source: ALg8bN4fQLoxOOsFtbx/SAWhD27UgblMhz1NvyvQVPRMD13NxYPnmnQucckBpmssEnF+va4XFp9NwQ== X-Received: by 2002:a5d:4f10:: with SMTP id c16mr12804784wru.177.1548439115100; Fri, 25 Jan 2019 09:58:35 -0800 (PST) Received: from [10.0.0.145] (bzq-79-179-120-124.red.bezeqint.net. [79.179.120.124]) by smtp.gmail.com with ESMTPSA id s16sm92967220wrt.77.2019.01.25.09.58.33 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Jan 2019 09:58:34 -0800 (PST) To: Dick Hardt , SecEvent Cc: Annabelle Richard , Mike Jones , "Morteza Ansari (moransar)" , Phil Hunt , Anthony Nadalin , Marius Scurtescu References: From: Yaron Sheffer Message-ID: Date: Fri, 25 Jan 2019 19:58:32 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2019 17:58:40 -0000 The document looks good. Here's a bunch o' comments. * Intro: receipt->recipient * "The transmitter and recipient are known to one another." But then we require the *issuer* to be authenticated by the Recipient. We need to clarify the relationship between Issuer (defined in the base spec) and Transmitter. BTW, Issuer should be capitalized. * "a decryption failure that may be due to misconfigured keys" - this is a strange reason for retransmission, because it would normally require a very slow manual operation, which could easily overwhelm the Transmitter. * "Transmitting a SET": if the normal response has an empty body, why do we send "Accept: application/json"? The Accept header is not mandatory, https://tools.ietf.org/html/rfc7231#section-5.3.2 * "Failure Response": why is responding with the right HTTP status code a MAY? What else do we expect them to do? * "the SET Transmitter is not permitted to transmit SETs issued by the issuer specified in the SET" - I suggest to change the text to indicate this is from the point of view of the Recipient: "the Recipient is not willing to accept SETs issued by the specified issuer from this particular SET Transmitter". * Error codes: what if the Recipient expects the SET to be protected (e.g. signed) but it is not? Is this "authentication_failed"? * "MUST support TLS 1.2" - we should allow for a future where TLS 1.3-only is acceptable. So, "MUST support TLS 1.2 or later". * IANA: the Expert Review policy requires a designated expert, obviously. Since this is the only SecEvent registry that needs it so far, I'd rather go for the simpler FCFS policy. Thanks, Yaron On 24/01/2019 20:11, Dick Hardt wrote: > Dear SecEvent participants, > > This is to start a 2-week working group last call > on draft-ietf-secevent-http-push-04 > > https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/ > > until Feb 8, 2019. > > Please send any comments to the list. In addition, if you have no > comments but support publication of this document as-is, please > make your voice heard. > > Thanks, > >      Dick and Yaron From nobody Fri Jan 25 12:19:00 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4CFE130F4D for ; Fri, 25 Jan 2019 12:18:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.353 X-Spam-Level: X-Spam-Status: No, score=-16.353 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 92wFuV2LoL8u for ; Fri, 25 Jan 2019 12:18:56 -0800 (PST) Received: from smtp-fw-33001.amazon.com (smtp-fw-33001.amazon.com [207.171.190.10]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 066EF130F09 for ; Fri, 25 Jan 2019 12:18:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1548447535; x=1579983535; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=ThURjt2yoZ1HmGyOOK7nJJxi6dv8ophfZpzZkfa/amU=; b=MqdoUkhC3dPCwVXVBHGlFUt/6CGm+XLEvAF9A+XSI7JRGVIgnBzvevdt dKloI8QwsyKosyu+dIXy3o2TfSEz/nVyLw5sQaNmKSOuWCtQO0Dh23G+0 FPbs+VjMHD5qzQvxUxCs43Z/ysoLBO/Kcd7YMwhdqlB3d7s5xyIt/Gl6D E=; X-IronPort-AV: E=Sophos;i="5.56,522,1539648000"; d="scan'208,217";a="778786931" Received: from sea3-co-svc-lb6-vlan2.sea.amazon.com (HELO email-inbound-relay-2c-c6afef2e.us-west-2.amazon.com) ([10.47.22.34]) by smtp-border-fw-out-33001.sea14.amazon.com with ESMTP; 25 Jan 2019 20:18:53 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198]) by email-inbound-relay-2c-c6afef2e.us-west-2.amazon.com (Postfix) with ESMTPS id 3DAF2A066F; Fri, 25 Jan 2019 20:18:53 +0000 (UTC) Received: from EX13D11UWC002.ant.amazon.com (10.43.162.174) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 25 Jan 2019 20:18:52 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC002.ant.amazon.com (10.43.162.174) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 25 Jan 2019 20:18:52 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 25 Jan 2019 20:18:52 +0000 From: "Richard Backman, Annabelle" To: Yaron Sheffer , Dick Hardt , SecEvent CC: Anthony Nadalin , Mike Jones , Marius Scurtescu , "Morteza Ansari (moransar)" , Phil Hunt Thread-Topic: [Id-event] Push Delivery: working group last call Thread-Index: AQHUtBBAne8RAAbuhkqpmk/YmC848qXARwoA//+hGQA= Date: Fri, 25 Jan 2019 20:18:52 +0000 Message-ID: <4C82F80F-74ED-4EA0-AE47-0A4D8DB40A43@amazon.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.0.180812 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.162.148] Content-Type: multipart/alternative; boundary="_000_4C82F80F74ED4EA0AE470A4D8DB40A43amazoncom_" MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2019 20:18:59 -0000 --_000_4C82F80F74ED4EA0AE470A4D8DB40A43amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGUgZmVlZGJhY2shIFJlc3BvbnNlcyBpbmxpbmUuDQoNCg0KDQotLQ0KDQpB bm5hYmVsbGUgUmljaGFyZCBCYWNrbWFuDQoNCkFXUyBJZGVudGl0eQ0KDQoNCg0K77u/T24gMS8y NS8xOSwgOTo1OSBBTSwgIklkLWV2ZW50IG9uIGJlaGFsZiBvZiBZYXJvbiBTaGVmZmVyIiA8aWQt ZXZlbnQtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgeWFyb25mLmlldGZAZ21haWwuY29t PiB3cm90ZToNCg0KDQoNCiAgICBUaGUgZG9jdW1lbnQgbG9va3MgZ29vZC4gSGVyZSdzIGEgYnVu Y2ggbycgY29tbWVudHMuDQoNCg0KDQogICAgKiBJbnRybzogcmVjZWlwdC0+cmVjaXBpZW50DQoN Cg0KDQpbcmljaGFubmFd8J+RjVsvcmljaGFubmFdDQoNCg0KDQogICAgKiAiVGhlIHRyYW5zbWl0 dGVyIGFuZCByZWNpcGllbnQgYXJlIGtub3duIHRvIG9uZSBhbm90aGVyLiIgQnV0IHRoZW4gd2UN Cg0KICAgIHJlcXVpcmUgdGhlICppc3N1ZXIqIHRvIGJlIGF1dGhlbnRpY2F0ZWQgYnkgdGhlIFJl Y2lwaWVudC4gV2UgbmVlZCB0bw0KDQogICAgY2xhcmlmeSB0aGUgcmVsYXRpb25zaGlwIGJldHdl ZW4gSXNzdWVyIChkZWZpbmVkIGluIHRoZSBiYXNlIHNwZWMpIGFuZA0KDQogICAgVHJhbnNtaXR0 ZXIuIEJUVywgSXNzdWVyIHNob3VsZCBiZSBjYXBpdGFsaXplZC4NCg0KDQoNCltyaWNoYW5uYV0N Cg0KVGhlIGludGVudCBvZiB0aGF0IHNlbnRlbmNlIGlzIHRvIGluZGljYXRlIHRoYXQgdGhlIHNw ZWMgYXNzdW1lcyB0aGUgVHJhbnNtaXR0ZXIgYWxyZWFkeSBrbm93cyB3aG8gaXQgbmVlZHMgdG8g dHJhbnNtaXQgdGhlIFNFVCB0bywgYW5kIHRoZSBSZWNpcGllbnQga25vd3Mgd2hvIGl0IGV4cGVj dHMgdG8gcmVjZWl2ZSBTRVRzIGZyb20sIGFuZCB0aGF0IGRpc2NvdmVyeSBvZiBlaXRoZXIgaXMg b3V0IG9mIHNjb3BlLg0KDQoNCg0KWW914oCZcmUgYWJzb2x1dGVseSByaWdodC4gU2VjdGlvbiAy IGlzIG1pc3NpbmcgYSB2YWxpZGF0aW9uIHN0ZXA6IOKAnFRoZSBTRVQgUmVjaXBpZW50IGlzIHdp bGxpbmcgdG8gYWNjZXB0IHRoZSBTRVQsIHdoZW4gdHJhbnNtaXR0ZWQgYnkgdGhlIFNFVCBUcmFu c21pdHRlci7igJ0gQWxzbywgd2UgY2FuIGFkZCB0ZXh0IHRvIHRoZSBkZWZpbml0aW9uIG9mIFNF VCBUcmFuc21pdHRlciB0byBjbGFyaWZ5IHRoYXQgaXQgbmVlZCBub3QgYmUgdGhlIElzc3VlciBv ZiB0aGUgU0VULg0KDQpbL3JpY2hhbm5hXQ0KDQoNCg0KICAgICogImEgZGVjcnlwdGlvbiBmYWls dXJlIHRoYXQgbWF5IGJlIGR1ZSB0byBtaXNjb25maWd1cmVkIGtleXMiIC0gdGhpcyBpcw0KDQog ICAgYSBzdHJhbmdlIHJlYXNvbiBmb3IgcmV0cmFuc21pc3Npb24sIGJlY2F1c2UgaXQgd291bGQg bm9ybWFsbHkgcmVxdWlyZSBhDQoNCiAgICB2ZXJ5IHNsb3cgbWFudWFsIG9wZXJhdGlvbiwgd2hp Y2ggY291bGQgZWFzaWx5IG92ZXJ3aGVsbSB0aGUgVHJhbnNtaXR0ZXIuDQoNCg0KDQpbcmljaGFu bmFdDQoNCkkgaGFkIGluIG1pbmQgaXNzdWVzIG9yIGRlbGF5cyB3aXRoIGtleSBwcm9wYWdhdGlv biBhZnRlciBhIHJvdGF0aW9uLCBwcmVtYXR1cmUgcmVqZWN0aW9uIG9mIGFuIG91dGdvaW5nIGtl eSBkdWUgdG8gY2xvY2sgc2tldywgaW50ZXJtaXR0ZW50IGZhaWx1cmUgd2hlbiByZXRyaWV2aW5n IGEgVHJhbnNtaXR0ZXLigJlzIHB1YmxpYyBrZXksIGV0Yy4gVGhlc2UgYXJlIGlzc3VlcyB0aGF0 IG1heSAoZGVwZW5kaW5nIG9uIHJvb3QgY2F1c2UpIHdvcmsgdGhlbXNlbHZlcyBvdXQgYWZ0ZXIg YSBmZXcgbWludXRlcywgdGhvdWdoIEkgc3VwcG9zZSB0aGV5IGFyZSBub3QgcHJvcGVybHkg4oCc bWlzY29uZmlndXJlZCBrZXlzLuKAnSBUaGlzIGV4YW1wbGUgaXMgcHJvYmFibHkganVzdCBtdWRk eWluZyB0aGUgd2F0ZXJzIHdpdGhvdXQgY29udHJpYnV0aW5nIG11Y2ggdG8gdGhlIHRleHQuDQoN ClsvcmljaGFubmFdDQoNCg0KDQogICAgKiAiVHJhbnNtaXR0aW5nIGEgU0VUIjogaWYgdGhlIG5v cm1hbCByZXNwb25zZSBoYXMgYW4gZW1wdHkgYm9keSwgd2h5IGRvDQoNCiAgICB3ZSBzZW5kICJB Y2NlcHQ6IGFwcGxpY2F0aW9uL2pzb24iPyBUaGUgQWNjZXB0IGhlYWRlciBpcyBub3QgbWFuZGF0 b3J5LA0KDQogICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcyMzEjc2VjdGlvbi01 LjMuMg0KDQoNCg0KW3JpY2hhbm5hXQ0KDQpFcnJvciByZXNwb25zZXMgd2lsbCBjb250YWluIGEg SlNPTi1mb3JtYXR0ZWQgYm9keSwgd2hpY2ggdGhlIFRyYW5zbWl0dGVyIE1VU1QgYmUgcHJlcGFy ZWQgdG8gYWNjZXB0Lg0KDQpbL3JpY2hhbm5hXQ0KDQoNCg0KICAgICogIkZhaWx1cmUgUmVzcG9u c2UiOiB3aHkgaXMgcmVzcG9uZGluZyB3aXRoIHRoZSByaWdodCBIVFRQIHN0YXR1cyBjb2RlDQoN CiAgICBhIE1BWT8gV2hhdCBlbHNlIGRvIHdlIGV4cGVjdCB0aGVtIHRvIGRvPw0KDQoNCg0KW3Jp Y2hhbm5hXQ0KDQpBcyBJIHVuZGVyc3RhbmQgaXQsIEhUVFAgU2VydmVycyBoYXZlIHNvbWUgZGlz Y3JldGlvbiB3aXRoIHJlZ2FyZHMgdG8gd2hpY2ggc3RhdHVzIGNvZGVzIHRoZXkgcmVzcG9uZCB3 aXRoIGluIGNlcnRhaW4gc2l0dWF0aW9ucy4gVGhlIOKAnHJpZ2h0IEhUVFAgc3RhdHVzIGNvZGXi gJ0gY2FuIGJlIHN1YmplY3RpdmUsIGFuZCBtYXkgY2hhbmdlIG92ZXIgdGltZSBhcyBuZXcgc3Rh dHVzIGNvZGVzIGFyZSBkZWZpbmVkIGZvciBzcGVjaWZpYyBjYXNlcy4gU0VUIFRyYW5zbWl0dGVy cyBuZWVkIHRvIGJlIHByZXBhcmVkIHRvIHJlY2VpdmUgc3RhbmRhcmQgSFRUUCBzdGF0dXMgY29k ZXMsIGJ1dCBJIGRvbuKAmXQgc2VlIGEgcmVhc29uIHRvIGltcG9zZSBtb3JlIHJlcXVpcmVtZW50 cyBvbiB0aGUgU0VUIFJlY2lwaWVudCBpbiB0aGlzIGFyZWEgdGhhbiBIVFRQIGl0c2VsZiBkb2Vz Lg0KDQpbL3JpY2hhbm5hXQ0KDQoNCg0KICAgICogInRoZSBTRVQgVHJhbnNtaXR0ZXIgaXMgbm90 IHBlcm1pdHRlZCB0byB0cmFuc21pdCBTRVRzIGlzc3VlZCBieSB0aGUNCg0KICAgIGlzc3VlciBz cGVjaWZpZWQgaW4gdGhlIFNFVCIgLSBJIHN1Z2dlc3QgdG8gY2hhbmdlIHRoZSB0ZXh0IHRvIGlu ZGljYXRlDQoNCiAgICB0aGlzIGlzIGZyb20gdGhlIHBvaW50IG9mIHZpZXcgb2YgdGhlIFJlY2lw aWVudDogInRoZSBSZWNpcGllbnQgaXMgbm90DQoNCiAgICB3aWxsaW5nIHRvIGFjY2VwdCBTRVRz IGlzc3VlZCBieSB0aGUgc3BlY2lmaWVkIGlzc3VlciBmcm9tIHRoaXMNCg0KICAgIHBhcnRpY3Vs YXIgU0VUIFRyYW5zbWl0dGVyIi4NCg0KDQoNCltyaWNoYW5uYV3wn5GNWy9yaWNoYW5uYV0NCg0K DQoNCiAgICAqIEVycm9yIGNvZGVzOiB3aGF0IGlmIHRoZSBSZWNpcGllbnQgZXhwZWN0cyB0aGUg U0VUIHRvIGJlIHByb3RlY3RlZA0KDQogICAgKGUuZy4gc2lnbmVkKSBidXQgaXQgaXMgbm90PyBJ cyB0aGlzICJhdXRoZW50aWNhdGlvbl9mYWlsZWQiPw0KDQoNCg0KW3JpY2hhbm5hXQ0KDQpTRVQg c2lnbmF0dXJlcyBhdXRoZW50aWNhdGUgdGhlIElzc3Vlciwgbm90IHRoZSBUcmFuc21pdHRlciwg c28gYGF1dGhlbnRpY2F0aW9uX2ZhaWxlZGAgd291bGQgYmUgaW5hcHByb3ByaWF0ZS4gVGhlIFJl Y2lwaWVudCBzaG91bGQgcmV0dXJuIGBhY2Nlc3NfZGVuaWVkYCBhcyBpdCBpcyB1bndpbGxpbmcg dG8gYWNjZXB0IHRoaXMgU0VUIGZyb20gdGhpcyBUcmFuc21pdHRlci4gTm93IEnigJltIGFjdHVh bGx5IHdvbmRlcmluZyBpZiB0aGVyZSBpcyBhIGRpZmZlcmVuY2UgYmV0d2VlbiBgaW52YWxpZF9y ZXF1ZXN0YCBhbmQgYGFjY2Vzc19kZW5pZWRgIHRoYXQgaXMgbWVhbmluZ2Z1bCBhdCBydW50aW1l LiBJ4oCZbGwgc3RhcnQgYSB0aHJlYWQgb24gdGhpcy4NCg0KWy9yaWNoYW5uYV0NCg0KDQoNCiAg ICAqICJNVVNUIHN1cHBvcnQgVExTIDEuMiIgLSB3ZSBzaG91bGQgYWxsb3cgZm9yIGEgZnV0dXJl IHdoZXJlIFRMUw0KDQogICAgMS4zLW9ubHkgaXMgYWNjZXB0YWJsZS4gU28sICJNVVNUIHN1cHBv cnQgVExTIDEuMiBvciBsYXRlciIuDQoNCg0KDQpbcmljaGFubmFd8J+RjVsvcmljaGFubmFdDQoN Cg0KDQogICAgKiBJQU5BOiB0aGUgRXhwZXJ0IFJldmlldyBwb2xpY3kgcmVxdWlyZXMgYSBkZXNp Z25hdGVkIGV4cGVydCwNCg0KICAgIG9idmlvdXNseS4gU2luY2UgdGhpcyBpcyB0aGUgb25seSBT ZWNFdmVudCByZWdpc3RyeSB0aGF0IG5lZWRzIGl0IHNvDQoNCiAgICBmYXIsIEknZCByYXRoZXIg Z28gZm9yIHRoZSBzaW1wbGVyIEZDRlMgcG9saWN5Lg0KDQoNCg0KW3JpY2hhbm5hXQ0KDQrwn5GN LCB0aG91Z2ggSSB0aGluayB3ZSBzaG91bGQgYWRkIHRleHQgdG8gdGhlIGVmZmVjdCBvZiDigJxF cnJvciBDb2RlcyBhcmUgaW50ZW5kZWQgdG8gYmUgaW50ZXJwcmV0ZWQgYnkgYXV0b21hdGVkIHN5 c3RlbXMsIGFuZCB0aGVyZWZvcmUgU0hPVUxEIGlkZW50aWZ5IGNsYXNzZXMgb2YgZXJyb3JzIGlu IHJlc3BvbnNlIHRvIHdoaWNoIGFuIGF1dG9tYXRlZCBzeXN0ZW0gY291bGQgdGFrZSBzb21lIGRp c3RpbmN0IGFjdGlvbi7igJ0NCg0KWy9yaWNoYW5uYV0NCg0KDQoNCiAgICBUaGFua3MsDQoNCiAg ICAgICAgICAgICAgICBZYXJvbg0KDQoNCg0KICAgIE9uIDI0LzAxLzIwMTkgMjA6MTEsIERpY2sg SGFyZHQgd3JvdGU6DQoNCiAgICA+IERlYXIgU2VjRXZlbnQgcGFydGljaXBhbnRzLA0KDQogICAg Pg0KDQogICAgPiBUaGlzIGlzIHRvIHN0YXJ0IGEgMi13ZWVrIHdvcmtpbmcgZ3JvdXAgbGFzdCBj YWxsDQoNCiAgICA+IG9uIGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLTA0DQoNCiAgICA+ DQoNCiAgICA+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2Vj ZXZlbnQtaHR0cC1wdXNoLw0KDQogICAgPg0KDQogICAgPiB1bnRpbCBGZWIgOCwgMjAxOS4NCg0K ICAgID4NCg0KICAgID4gUGxlYXNlIHNlbmQgYW55IGNvbW1lbnRzIHRvIHRoZSBsaXN0LiBJbiBh ZGRpdGlvbiwgaWYgeW91IGhhdmUgbm8NCg0KICAgID4gY29tbWVudHMgYnV0IHN1cHBvcnQgcHVi bGljYXRpb24gb2YgdGhpcyBkb2N1bWVudCBhcy1pcywgcGxlYXNlDQoNCiAgICA+IG1ha2UgeW91 ciB2b2ljZSBoZWFyZC4NCg0KICAgID4NCg0KICAgID4gVGhhbmtzLA0KDQogICAgPg0KDQogICAg PiAgICAgICBEaWNrIGFuZCBZYXJvbg0KDQoNCg0KICAgIF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQoNCiAgICBJZC1ldmVudCBtYWlsaW5nIGxpc3QNCg0K ICAgIElkLWV2ZW50QGlldGYub3JnDQoNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2lkLWV2ZW50DQoNCg0K --_000_4C82F80F74ED4EA0AE470A4D8DB40A43amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <873FB46BF225AC4191B7E3E03781F99C@amazon.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Ik1TIE1pbmNobyI7DQoJcGFub3NlLTE6MiAyIDYgOSA0IDIgNSA4IDMgNDt9DQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxATVMgTWlu Y2hvIjsNCglwYW5vc2UtMToyIDIgNiA5IDQgMiA1IDggMyA0O30NCi8qIFN0eWxlIERlZmluaXRp b25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdp bjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGlu aw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lO30NCnAuTXNvUGxhaW5UZXh0LCBsaS5Nc29QbGFpblRleHQsIGRpdi5Nc29Q bGFpblRleHQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFp biBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZv bnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bh bi5QbGFpblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJQbGFpbiBUZXh0IENoYXIiOw0KCW1z by1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCI7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBp biAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rp b24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1 bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzpp ZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtl bmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGlu az0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRTE4REQiPlRoYW5rcyBmb3IgdGhlIGZlZWRi YWNrISBSZXNwb25zZXMgaW5saW5lLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+LS0gPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5Bbm5hYmVsbGUg UmljaGFyZCBCYWNrbWFuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5B V1MgSWRlbnRpdHk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij7vu79PbiAxLzI1LzE5LCA5OjU5IEFNLCAmcXVvdDtJ ZC1ldmVudCBvbiBiZWhhbGYgb2YgWWFyb24gU2hlZmZlciZxdW90OyAmbHQ7aWQtZXZlbnQtYm91 bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgeWFyb25mLmlldGZAZ21haWwuY29tJmd0OyB3cm90 ZTo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7IFRoZSBk b2N1bWVudCBsb29rcyBnb29kLiBIZXJlJ3MgYSBidW5jaCBvJyBjb21tZW50cy48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyA8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyogSW50cm86IHJlY2VpcHQtJmd0O3JlY2lwaWVudDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRTE4REQiPltyaWNoYW5uYV08 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FwcGxlIENvbG9yIEVtb2ppJnF1 b3Q7O2NvbG9yOiNDRTE4REQiPiYjMTI4MDc3Ozwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6I0NF MThERCI+Wy9yaWNoYW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZu YnNwOyZuYnNwOyZuYnNwOyAqICZxdW90O1RoZSB0cmFuc21pdHRlciBhbmQgcmVjaXBpZW50IGFy ZSBrbm93biB0byBvbmUgYW5vdGhlci4mcXVvdDsgQnV0IHRoZW4gd2UNCjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7cmVxdWly ZSB0aGUgKmlzc3VlciogdG8gYmUgYXV0aGVudGljYXRlZCBieSB0aGUgUmVjaXBpZW50LiBXZSBu ZWVkIHRvDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwO2NsYXJpZnkgdGhlIHJlbGF0aW9uc2hpcCBiZXR3ZWVuIElzc3VlciAo ZGVmaW5lZCBpbiB0aGUgYmFzZSBzcGVjKSBhbmQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7VHJhbnNtaXR0ZXIuIEJUVywg SXNzdWVyIHNob3VsZCBiZSBjYXBpdGFsaXplZC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0UxOEREIj5bcmljaGFubmFdPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiNDRTE4REQiPlRoZSBpbnRlbnQgb2YgdGhhdCBzZW50ZW5jZSBpcyB0byBpbmRpY2F0 ZSB0aGF0IHRoZSBzcGVjIGFzc3VtZXMgdGhlIFRyYW5zbWl0dGVyIGFscmVhZHkga25vd3Mgd2hv IGl0IG5lZWRzIHRvIHRyYW5zbWl0IHRoZSBTRVQgdG8sIGFuZCB0aGUgUmVjaXBpZW50IGtub3dz IHdobyBpdCBleHBlY3RzIHRvIHJlY2VpdmUgU0VUcyBmcm9tLCBhbmQgdGhhdCBkaXNjb3ZlcnkN CiBvZiBlaXRoZXIgaXMgb3V0IG9mIHNjb3BlLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6I0NFMThERCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiNDRTE4REQiPllvdeKAmXJlIGFic29sdXRlbHkgcmlnaHQuIFNlY3Rpb24gMiBpcyBt aXNzaW5nIGEgdmFsaWRhdGlvbiBzdGVwOiDigJxUaGUgU0VUIFJlY2lwaWVudCBpcyB3aWxsaW5n IHRvIGFjY2VwdCB0aGUgU0VULCB3aGVuIHRyYW5zbWl0dGVkIGJ5IHRoZSBTRVQgVHJhbnNtaXR0 ZXIu4oCdIEFsc28sIHdlIGNhbiBhZGQgdGV4dCB0byB0aGUgZGVmaW5pdGlvbiBvZiBTRVQgVHJh bnNtaXR0ZXINCiB0byBjbGFyaWZ5IHRoYXQgaXQgbmVlZCBub3QgYmUgdGhlIElzc3VlciBvZiB0 aGUgU0VULjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxz cGFuIHN0eWxlPSJjb2xvcjojQ0UxOEREIj5bL3JpY2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0UxOEREIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJz cDsmbmJzcDsmbmJzcDsgKiAmcXVvdDthIGRlY3J5cHRpb24gZmFpbHVyZSB0aGF0IG1heSBiZSBk dWUgdG8gbWlzY29uZmlndXJlZCBrZXlzJnF1b3Q7IC0gdGhpcyBpcw0KPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDthIHN0cmFu Z2UgcmVhc29uIGZvciByZXRyYW5zbWlzc2lvbiwgYmVjYXVzZSBpdCB3b3VsZCBub3JtYWxseSBy ZXF1aXJlIGENCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7dmVyeSBzbG93IG1hbnVhbCBvcGVyYXRpb24sIHdoaWNoIGNvdWxk IGVhc2lseSBvdmVyd2hlbG0gdGhlIFRyYW5zbWl0dGVyLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6I0NFMThERCI+W3JpY2hhbm5hXTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjoj Q0UxOEREIj5JIGhhZCBpbiBtaW5kIGlzc3VlcyBvciBkZWxheXMgd2l0aCBrZXkgcHJvcGFnYXRp b24gYWZ0ZXIgYSByb3RhdGlvbiwgcHJlbWF0dXJlIHJlamVjdGlvbiBvZiBhbiBvdXRnb2luZyBr ZXkgZHVlIHRvIGNsb2NrIHNrZXcsIGludGVybWl0dGVudCBmYWlsdXJlIHdoZW4gcmV0cmlldmlu ZyBhIFRyYW5zbWl0dGVy4oCZcyBwdWJsaWMga2V5LCBldGMuIFRoZXNlIGFyZQ0KIGlzc3VlcyB0 aGF0IG1heSAoZGVwZW5kaW5nIG9uIHJvb3QgY2F1c2UpIHdvcmsgdGhlbXNlbHZlcyBvdXQgYWZ0 ZXIgYSBmZXcgbWludXRlcywgdGhvdWdoIEkgc3VwcG9zZSB0aGV5IGFyZSBub3QgcHJvcGVybHkg 4oCcbWlzY29uZmlndXJlZCBrZXlzLuKAnSBUaGlzIGV4YW1wbGUgaXMgcHJvYmFibHkganVzdCBt dWRkeWluZyB0aGUgd2F0ZXJzIHdpdGhvdXQgY29udHJpYnV0aW5nIG11Y2ggdG8gdGhlIHRleHQu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiNDRTE4REQiPlsvcmljaGFubmFdPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsgKiAmcXVvdDtUcmFuc21pdHRpbmcgYSBTRVQm cXVvdDs6IGlmIHRoZSBub3JtYWwgcmVzcG9uc2UgaGFzIGFuIGVtcHR5IGJvZHksIHdoeSBkbw0K PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDt3ZSBzZW5kICZxdW90O0FjY2VwdDogYXBwbGljYXRpb24vanNvbiZxdW90Oz8gVGhl IEFjY2VwdCBoZWFkZXIgaXMgbm90IG1hbmRhdG9yeSwNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7aHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL3JmYzcyMzEjc2VjdGlvbi01LjMuMjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6I0NFMThERCI+W3JpY2hhbm5hXTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjoj Q0UxOEREIj5FcnJvciByZXNwb25zZXMgd2lsbCBjb250YWluIGEgSlNPTi1mb3JtYXR0ZWQgYm9k eSwgd2hpY2ggdGhlIFRyYW5zbWl0dGVyIE1VU1QgYmUgcHJlcGFyZWQgdG8gYWNjZXB0LjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjojQ0UxOEREIj5bL3JpY2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyogJnF1b3Q7RmFpbHVy ZSBSZXNwb25zZSZxdW90Ozogd2h5IGlzIHJlc3BvbmRpbmcgd2l0aCB0aGUgcmlnaHQgSFRUUCBz dGF0dXMgY29kZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDthIE1BWT8gV2hhdCBlbHNlIGRvIHdlIGV4cGVjdCB0aGVtIHRv IGRvPzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiNDRTE4REQiPltyaWNoYW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6I0NFMThERCI+QXMgSSB1bmRl cnN0YW5kIGl0LCBIVFRQIFNlcnZlcnMgaGF2ZSBzb21lIGRpc2NyZXRpb24gd2l0aCByZWdhcmRz IHRvIHdoaWNoIHN0YXR1cyBjb2RlcyB0aGV5IHJlc3BvbmQgd2l0aCBpbiBjZXJ0YWluIHNpdHVh dGlvbnMuIFRoZSDigJxyaWdodCBIVFRQIHN0YXR1cyBjb2Rl4oCdIGNhbiBiZSBzdWJqZWN0aXZl LCBhbmQgbWF5IGNoYW5nZSBvdmVyIHRpbWUgYXMNCiBuZXcgc3RhdHVzIGNvZGVzIGFyZSBkZWZp bmVkIGZvciBzcGVjaWZpYyBjYXNlcy4gU0VUIFRyYW5zbWl0dGVycyBuZWVkIHRvIGJlIHByZXBh cmVkIHRvIHJlY2VpdmUgc3RhbmRhcmQgSFRUUCBzdGF0dXMgY29kZXMsIGJ1dCBJIGRvbuKAmXQg c2VlIGEgcmVhc29uIHRvIGltcG9zZSBtb3JlIHJlcXVpcmVtZW50cyBvbiB0aGUgU0VUIFJlY2lw aWVudCBpbiB0aGlzIGFyZWEgdGhhbiBIVFRQIGl0c2VsZiBkb2VzLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0UxOERE Ij5bL3JpY2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7ICogJnF1b3Q7dGhlIFNFVCBUcmFuc21pdHRlciBpcyBub3QgcGVybWl0dGVk IHRvIHRyYW5zbWl0IFNFVHMgaXNzdWVkIGJ5IHRoZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpc3N1ZXIgc3BlY2lmaWVk IGluIHRoZSBTRVQmcXVvdDsgLSBJIHN1Z2dlc3QgdG8gY2hhbmdlIHRoZSB0ZXh0IHRvIGluZGlj YXRlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwO3RoaXMgaXMgZnJvbSB0aGUgcG9pbnQgb2YgdmlldyBvZiB0aGUgUmVjaXBp ZW50OiAmcXVvdDt0aGUgUmVjaXBpZW50IGlzIG5vdA0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt3aWxsaW5nIHRvIGFjY2Vw dCBTRVRzIGlzc3VlZCBieSB0aGUgc3BlY2lmaWVkIGlzc3VlciBmcm9tIHRoaXMNCjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 cGFydGljdWxhciBTRVQgVHJhbnNtaXR0ZXImcXVvdDsuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsgPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6I0NFMThERCI+W3JpY2hhbm5h XTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXBwbGUgQ29sb3IgRW1vamkm cXVvdDs7Y29sb3I6I0NFMThERCI+JiMxMjgwNzc7PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjoj Q0UxOEREIj5bL3JpY2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7ICogRXJyb3IgY29kZXM6IHdoYXQgaWYgdGhlIFJlY2lwaWVudCBl eHBlY3RzIHRoZSBTRVQgdG8gYmUgcHJvdGVjdGVkDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyhlLmcuIHNpZ25lZCkgYnV0 IGl0IGlzIG5vdD8gSXMgdGhpcyAmcXVvdDthdXRoZW50aWNhdGlvbl9mYWlsZWQmcXVvdDs/PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsg PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29s b3I6I0NFMThERCI+W3JpY2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0UxOEREIj5TRVQgc2lnbmF0dXJlcyBh dXRoZW50aWNhdGUgdGhlIElzc3Vlciwgbm90IHRoZSBUcmFuc21pdHRlciwgc28gYGF1dGhlbnRp Y2F0aW9uX2ZhaWxlZGAgd291bGQgYmUgaW5hcHByb3ByaWF0ZS4gVGhlIFJlY2lwaWVudCBzaG91 bGQgcmV0dXJuIGBhY2Nlc3NfZGVuaWVkYCBhcyBpdCBpcyB1bndpbGxpbmcgdG8gYWNjZXB0IHRo aXMgU0VUIGZyb20gdGhpcyBUcmFuc21pdHRlci4NCiBOb3cgSeKAmW0gYWN0dWFsbHkgd29uZGVy aW5nIGlmIHRoZXJlIGlzIGEgZGlmZmVyZW5jZSBiZXR3ZWVuIGBpbnZhbGlkX3JlcXVlc3RgIGFu ZCBgYWNjZXNzX2RlbmllZGAgdGhhdCBpcyBtZWFuaW5nZnVsIGF0IHJ1bnRpbWUuIEnigJlsbCBz dGFydCBhIHRocmVhZCBvbiB0aGlzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojQ0UxOEREIj5bL3JpY2hhbm5hXTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjojQ0UxOEREIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsgKiAmcXVvdDtNVVNUIHN1cHBvcnQgVExTIDEu MiZxdW90OyAtIHdlIHNob3VsZCBhbGxvdyBmb3IgYSBmdXR1cmUgd2hlcmUgVExTDQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OzEuMy1vbmx5IGlzIGFjY2VwdGFibGUuIFNvLCAmcXVvdDtNVVNUIHN1cHBvcnQgVExTIDEuMiBv ciBsYXRlciZxdW90Oy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZu YnNwOyZuYnNwOyZuYnNwOyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxzcGFuIHN0eWxlPSJjb2xvcjojQ0UxOEREIj5bcmljaGFubmFdPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtBcHBsZSBDb2xvciBFbW9qaSZxdW90Oztjb2xvcjojQ0UxOERE Ij4mIzEyODA3Nzs8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiNDRTE4REQiPlsvcmljaGFubmFd PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsg KiBJQU5BOiB0aGUgRXhwZXJ0IFJldmlldyBwb2xpY3kgcmVxdWlyZXMgYSBkZXNpZ25hdGVkIGV4 cGVydCwNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7b2J2aW91c2x5LiBTaW5jZSB0aGlzIGlzIHRoZSBvbmx5IFNlY0V2ZW50 IHJlZ2lzdHJ5IHRoYXQgbmVlZHMgaXQgc28NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ZmFyLCBJJ2QgcmF0aGVyIGdvIGZv ciB0aGUgc2ltcGxlciBGQ0ZTIHBvbGljeS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiNDRTE4REQiPltyaWNoYW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDs7Y29sb3I6I0NFMThERCI+JiMxMjgwNzc7PC9zcGFu PjxzcGFuIHN0eWxlPSJjb2xvcjojQ0UxOEREIj4sIHRob3VnaCBJIHRoaW5rIHdlIHNob3VsZCBh ZGQgdGV4dCB0byB0aGUgZWZmZWN0IG9mIOKAnEVycm9yIENvZGVzIGFyZSBpbnRlbmRlZCB0byBi ZSBpbnRlcnByZXRlZCBieSBhdXRvbWF0ZWQgc3lzdGVtcywgYW5kIHRoZXJlZm9yZSBTSE9VTEQN CiBpZGVudGlmeSBjbGFzc2VzIG9mIGVycm9ycyBpbiByZXNwb25zZSB0byB3aGljaCBhbiBhdXRv bWF0ZWQgc3lzdGVtIGNvdWxkIHRha2Ugc29tZSBkaXN0aW5jdCBhY3Rpb24u4oCdPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9y OiNDRTE4REQiPlsvcmljaGFubmFdPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7VGhhbmtzLDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBZYXJvbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7T24gMjQvMDEvMjAxOSAyMDoxMSwgRGljayBIYXJkdCB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNw OyAmZ3Q7IERlYXIgU2VjRXZlbnQgcGFydGljaXBhbnRzLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZndDsgPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmZ3Q7IFRo aXMgaXMgdG8gc3RhcnQgYSAyLXdlZWsgd29ya2luZyBncm91cCBsYXN0IGNhbGwgPG86cD4NCjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZndDsgb24gZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2gtMDQ8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyAmZ3Q7IDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jmd0OyBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNlY2V2ZW50 LWh0dHAtcHVzaC88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNw OyZuYnNwOyZuYnNwOyAmZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jmd0OyB1bnRpbCBGZWIgOCwgMjAxOS48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyAmZ3Q7 IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jmd0OyBQbGVhc2Ugc2VuZCBhbnkgY29tbWVudHMgdG8gdGhlIGxpc3QuIEluIGFk ZGl0aW9uLCBpZiB5b3UgaGF2ZSBubw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmZ3Q7IGNvbW1lbnRzIGJ1dCBzdXBwb3J0 IHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQgYXMtaXMsIHBsZWFzZQ0KPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmZ3Q7 IG1ha2UgeW91ciB2b2ljZSBoZWFyZC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyAmZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jmd0OyBUaGFua3MsPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsgJmd0 OyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgRGljayBh bmQgWWFyb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZu YnNwOyZuYnNwOyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwO19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsm bmJzcDsmbmJzcDsgSWQtZXZlbnQgbWFpbGluZyBsaXN0PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsgSWQtZXZlbnRAaWV0Zi5vcmc8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyZuYnNwOyBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lkLWV2ZW50PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbmJzcDsmbmJzcDsmbmJzcDsgPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_4C82F80F74ED4EA0AE470A4D8DB40A43amazoncom_-- From nobody Fri Jan 25 12:25:20 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D3561277BB for ; Fri, 25 Jan 2019 12:25:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Uwg262Ohs7W for ; Fri, 25 Jan 2019 12:25:16 -0800 (PST) Received: from mail-oi1-x229.google.com (mail-oi1-x229.google.com [IPv6:2607:f8b0:4864:20::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFBBF1271FF for ; Fri, 25 Jan 2019 12:25:15 -0800 (PST) Received: by mail-oi1-x229.google.com with SMTP id w13so8586945oiw.9 for ; Fri, 25 Jan 2019 12:25:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sXxT6MTTqbuoXNx+Rm05M9QMnRaLIEFeEBAeG4EQDc8=; b=hIwQbJAaoTxe7pwMonvNGqQTFF7go2H2j3B/Rwu8FGF/S20TVUBmT/UCIpw6dHlYw8 nA1OZevCIxsI+25sd0ALSxs3SJVodJuBzRGo63nVsjtyrHApZLE51pN4tOpRJDBFbfST UWwj0FpMTcR9GrO8HYKoKoOIX7OdisOJn5LN9jPpGGiT5nHSMQpGjTuvub5iA5PB+Siv 6KBvvQ6Ex1KJpALT0S1jmvefn0dbqg+FKHrpicjMhbRRob670NED5GdkZ7Z5nDuxhPW/ l8XtgipQ/bzGZU2+nH1fTZ9eZkwXPoy3/dVSR1Ut3ijmmlPkldZGQCwSzzc2GwjxGOre H3kQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sXxT6MTTqbuoXNx+Rm05M9QMnRaLIEFeEBAeG4EQDc8=; b=JZXiKCV09370m0QVLJ0QazNnUbFuByRl9w6NV3DXG2CLbQpCuKSz0eQNMTFBNoIC5y TNmTvr8iwlMLdVtSd5l4XEL63GAfwRIbvXbFQ9TOhXHgEEDGnFHM9TTqJwBNegkLDBjN dffhd3rbiAVTxYc4WgukxNgZ2G5Y9xeXEyOOkVUkASihwKZYEJHBAgSDYKE3JZiDaWl/ /PyBY23l4XlxStT0Qc6we9ZiQGWnWqzUjXcC7n6J4mUxLfjWKjIJW91ae7WDeCqSa/Kd +oDj0iPfw1KEv9XVUNvHIWANjCnyhJDrAS33Wfp6mCjCUagbRthsgamShCufnqxTGM3Q 6NIw== X-Gm-Message-State: AJcUukcNLcvH8UQ7BHHgpMgG6k2IJCbH0jP8AdTLz5SIlMOaXQrGZdhd J6g7bb1HY6MG9ZUOWBeIbdwjicART1Yuc9AwjK4= X-Google-Smtp-Source: ALg8bN6ByElVUyCuuzXl3HLC1NLoeOUwagSQJ8TFCfal3+6Zu/Emnkj0AWCnLKLaYGlNf04fE4cAb3lhCybC39A4uXk= X-Received: by 2002:aca:4ac9:: with SMTP id x192mr2153097oia.211.1548447914717; Fri, 25 Jan 2019 12:25:14 -0800 (PST) MIME-Version: 1.0 References: <4C82F80F-74ED-4EA0-AE47-0A4D8DB40A43@amazon.com> In-Reply-To: <4C82F80F-74ED-4EA0-AE47-0A4D8DB40A43@amazon.com> From: Marius Scurtescu Date: Fri, 25 Jan 2019 12:25:03 -0800 Message-ID: To: "Richard Backman, Annabelle" Cc: Yaron Sheffer , Dick Hardt , SecEvent , Anthony Nadalin , Mike Jones , "Morteza Ansari (moransar)" , Phil Hunt Content-Type: multipart/alternative; boundary="000000000000e8f4cc05804e1f97" Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2019 20:25:19 -0000 --000000000000e8f4cc05804e1f97 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Annabelle, let me know if you need any help with these changes. On Fri, Jan 25, 2019 at 12:18 PM Richard Backman, Annabelle < richanna@amazon.com> wrote: > Thanks for the feedback! Responses inline. > > > > -- > > Annabelle Richard Backman > > AWS Identity > > > > =EF=BB=BFOn 1/25/19, 9:59 AM, "Id-event on behalf of Yaron Sheffer" < > id-event-bounces@ietf.org on behalf of yaronf.ietf@gmail.com> wrote: > > > > The document looks good. Here's a bunch o' comments. > > > > * Intro: receipt->recipient > > > > [richanna]=F0=9F=91=8D[/richanna] > > > > * "The transmitter and recipient are known to one another." But then > we > > require the *issuer* to be authenticated by the Recipient. We need to > > clarify the relationship between Issuer (defined in the base spec) an= d > > Transmitter. BTW, Issuer should be capitalized. > > > > [richanna] > > The intent of that sentence is to indicate that the spec assumes the > Transmitter already knows who it needs to transmit the SET to, and the > Recipient knows who it expects to receive SETs from, and that discovery o= f > either is out of scope. > > > > You=E2=80=99re absolutely right. Section 2 is missing a validation step: = =E2=80=9CThe SET > Recipient is willing to accept the SET, when transmitted by the SET > Transmitter.=E2=80=9D Also, we can add text to the definition of SET Tran= smitter to > clarify that it need not be the Issuer of the SET. > > [/richanna] > > > > * "a decryption failure that may be due to misconfigured keys" - this > is > > a strange reason for retransmission, because it would normally requir= e > a > > very slow manual operation, which could easily overwhelm the > Transmitter. > > > > [richanna] > > I had in mind issues or delays with key propagation after a rotation, > premature rejection of an outgoing key due to clock skew, intermittent > failure when retrieving a Transmitter=E2=80=99s public key, etc. These ar= e issues > that may (depending on root cause) work themselves out after a few minute= s, > though I suppose they are not properly =E2=80=9Cmisconfigured keys.=E2=80= =9D This example > is probably just muddying the waters without contributing much to the tex= t. > > [/richanna] > > > > * "Transmitting a SET": if the normal response has an empty body, why > do > > we send "Accept: application/json"? The Accept header is not > mandatory, > > https://tools.ietf.org/html/rfc7231#section-5.3.2 > > > > [richanna] > > Error responses will contain a JSON-formatted body, which the Transmitter > MUST be prepared to accept. > > [/richanna] > > > > * "Failure Response": why is responding with the right HTTP status > code > > a MAY? What else do we expect them to do? > > > > [richanna] > > As I understand it, HTTP Servers have some discretion with regards to > which status codes they respond with in certain situations. The =E2=80=9C= right HTTP > status code=E2=80=9D can be subjective, and may change over time as new s= tatus > codes are defined for specific cases. SET Transmitters need to be prepare= d > to receive standard HTTP status codes, but I don=E2=80=99t see a reason t= o impose > more requirements on the SET Recipient in this area than HTTP itself does= . > > [/richanna] > > > > * "the SET Transmitter is not permitted to transmit SETs issued by th= e > > issuer specified in the SET" - I suggest to change the text to > indicate > > this is from the point of view of the Recipient: "the Recipient is no= t > > willing to accept SETs issued by the specified issuer from this > > particular SET Transmitter". > > > > [richanna]=F0=9F=91=8D[/richanna] > > > > * Error codes: what if the Recipient expects the SET to be protected > > (e.g. signed) but it is not? Is this "authentication_failed"? > > > > [richanna] > > SET signatures authenticate the Issuer, not the Transmitter, so > `authentication_failed` would be inappropriate. The Recipient should retu= rn > `access_denied` as it is unwilling to accept this SET from this > Transmitter. Now I=E2=80=99m actually wondering if there is a difference = between > `invalid_request` and `access_denied` that is meaningful at runtime. I=E2= =80=99ll > start a thread on this. > > [/richanna] > > > > * "MUST support TLS 1.2" - we should allow for a future where TLS > > 1.3-only is acceptable. So, "MUST support TLS 1.2 or later". > > > > [richanna]=F0=9F=91=8D[/richanna] > > > > * IANA: the Expert Review policy requires a designated expert, > > obviously. Since this is the only SecEvent registry that needs it so > > far, I'd rather go for the simpler FCFS policy. > > > > [richanna] > > =F0=9F=91=8D, though I think we should add text to the effect of =E2=80= =9CError Codes are > intended to be interpreted by automated systems, and therefore SHOULD > identify classes of errors in response to which an automated system could > take some distinct action.=E2=80=9D > > [/richanna] > > > > Thanks, > > Yaron > > > > On 24/01/2019 20:11, Dick Hardt wrote: > > > Dear SecEvent participants, > > > > > > This is to start a 2-week working group last call > > > on draft-ietf-secevent-http-push-04 > > > > > > https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/ > > > > > > until Feb 8, 2019. > > > > > > Please send any comments to the list. In addition, if you have no > > > comments but support publication of this document as-is, please > > > make your voice heard. > > > > > > Thanks, > > > > > > Dick and Yaron > > > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://www.ietf.org/mailman/listinfo/id-event > > > --000000000000e8f4cc05804e1f97 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Annabelle, let me know if you need any help with these cha= nges.

On Fri, Jan 25, 2019 at 12:18 PM Richard Backman, Annabelle <richanna@amazon.com> wrote:

Thanks for the feedback! Responses inline.

=C2=A0

--

Annabelle Richard Backm= an

AWS Identity<= /u>

=C2=A0

=EF=BB=BFOn 1/25/19, 9:= 59 AM, "Id-event on behalf of Yaron Sheffer" <id-event-bounces@ietf.org on behalf of y= aronf.ietf@gmail.com> wrote:

=C2=A0

=C2=A0=C2=A0=C2=A0 The = document looks good. Here's a bunch o' comments.

=C2=A0=C2=A0=C2=A0 <= /u>

=C2=A0=C2=A0=C2=A0=C2= =A0* Intro: receipt->recipient

=C2=A0=C2=A0=C2=A0 <= /u>

[richanna]=F0=9F=91=8D[/richanna]

=C2=A0

=C2=A0=C2=A0=C2=A0 * &q= uot;The transmitter and recipient are known to one another." But then = we

=C2=A0=C2=A0=C2=A0=C2= =A0require the *issuer* to be authenticated by the Recipient. We need to

=C2=A0=C2=A0=C2=A0=C2= =A0clarify the relationship between Issuer (defined in the base spec) and

=C2=A0=C2=A0=C2=A0=C2= =A0Transmitter. BTW, Issuer should be capitalized.

=C2=A0=C2=A0=C2=A0 <= /u>

[richanna]

The intent of that sentence is to indicate that the spec ass= umes the Transmitter already knows who it needs to transmit the SET to, and= the Recipient knows who it expects to receive SETs from, and that discover= y of either is out of scope.

=C2=A0

You=E2=80=99re absolutely right. Section 2 is missing a vali= dation step: =E2=80=9CThe SET Recipient is willing to accept the SET, when = transmitted by the SET Transmitter.=E2=80=9D Also, we can add text to the d= efinition of SET Transmitter to clarify that it need not be the Issuer of the SET.=

[/richanna]

=C2=A0

=C2=A0=C2=A0=C2=A0 * &q= uot;a decryption failure that may be due to misconfigured keys" - this= is

=C2=A0=C2=A0=C2=A0=C2= =A0a strange reason for retransmission, because it would normally require a

=C2=A0=C2=A0=C2=A0=C2= =A0very slow manual operation, which could easily overwhelm the Transmitter= .

=C2=A0

[richanna]

I had in mind issues or delays with key propagation after a = rotation, premature rejection of an outgoing key due to clock skew, intermi= ttent failure when retrieving a Transmitter=E2=80=99s public key, etc. Thes= e are issues that may (depending on root cause) work themselves out after a few = minutes, though I suppose they are not properly =E2=80=9Cmisconfigured keys= .=E2=80=9D This example is probably just muddying the waters without contri= buting much to the text.

[/richanna]

=C2=A0

=C2=A0=C2=A0=C2=A0 * &q= uot;Transmitting a SET": if the normal response has an empty body, why= do

=C2=A0=C2=A0=C2=A0=C2= =A0we send "Accept: application/json"? The Accept header is not m= andatory,

=C2=A0=C2=A0=C2=A0=C2= =A0https://tools.ietf.org/html/rfc7231#section-5.3.2=

=C2=A0

[richanna]

Error responses will contain a JSON-formatted body, which th= e Transmitter MUST be prepared to accept.

[/richanna]

=C2=A0=C2=A0=C2=A0 <= /u>

=C2=A0=C2=A0=C2=A0=C2= =A0* "Failure Response": why is responding with the right HTTP st= atus code

=C2=A0=C2=A0=C2=A0=C2= =A0a MAY? What else do we expect them to do?

=C2=A0=C2=A0=C2=A0 <= /u>

[richanna]

As I understand it, HTTP Servers have some discretion with r= egards to which status codes they respond with in certain situations. The = =E2=80=9Cright HTTP status code=E2=80=9D can be subjective, and may change = over time as new status codes are defined for specific cases. SET Transmitters need to = be prepared to receive standard HTTP status codes, but I don=E2=80=99t see = a reason to impose more requirements on the SET Recipient in this area than= HTTP itself does.

[/richanna]

=C2=A0

=C2=A0=C2=A0=C2=A0 * &q= uot;the SET Transmitter is not permitted to transmit SETs issued by the

=C2=A0=C2=A0=C2=A0=C2= =A0issuer specified in the SET" - I suggest to change the text to indi= cate

=C2=A0=C2=A0=C2=A0=C2= =A0this is from the point of view of the Recipient: "the Recipient is = not

=C2=A0=C2=A0=C2=A0=C2= =A0willing to accept SETs issued by the specified issuer from this

=C2=A0=C2=A0=C2=A0=C2= =A0particular SET Transmitter".

=C2=A0=C2=A0=C2=A0 <= /u>

[richanna]=F0=9F=91=8D[/richanna]

=C2=A0

=C2=A0=C2=A0=C2=A0 * Er= ror codes: what if the Recipient expects the SET to be protected

=C2=A0=C2=A0=C2=A0=C2= =A0(e.g. signed) but it is not? Is this "authentication_failed"?<= u>

=C2=A0=C2=A0=C2=A0 <= /u>

[richanna]

SET signatures authenticate the Issuer, not the Transmitter,= so `authentication_failed` would be inappropriate. The Recipient should re= turn `access_denied` as it is unwilling to accept this SET from this Transm= itter. Now I=E2=80=99m actually wondering if there is a difference between `inval= id_request` and `access_denied` that is meaningful at runtime. I=E2=80=99ll= start a thread on this.

[/richanna]

=C2=A0

=C2=A0=C2=A0=C2=A0 * &q= uot;MUST support TLS 1.2" - we should allow for a future where TLS

=C2=A0=C2=A0=C2=A0=C2= =A01.3-only is acceptable. So, "MUST support TLS 1.2 or later".

=C2=A0=C2=A0=C2=A0 <= /u>

[richanna]=F0=9F=91=8D[/richanna]

=C2=A0

=C2=A0=C2=A0=C2=A0 * IA= NA: the Expert Review policy requires a designated expert,

=C2=A0=C2=A0=C2=A0=C2= =A0obviously. Since this is the only SecEvent registry that needs it so

=C2=A0=C2=A0=C2=A0=C2= =A0far, I'd rather go for the simpler FCFS policy.

=C2=A0

[richanna]

=F0=9F=91=8D, though I think we should add text = to the effect of =E2=80=9CError Codes are intended to be interpreted by aut= omated systems, and therefore SHOULD identify classes of errors in response to which an automated system could = take some distinct action.=E2=80=9D

[/richanna]

=C2=A0=C2=A0=C2=A0 <= /u>

=C2=A0=C2=A0=C2=A0=C2= =A0Thanks,

=C2=A0=C2=A0=C2=A0 =C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron

=C2=A0=C2=A0=C2=A0 <= /u>

=C2=A0=C2=A0=C2=A0=C2= =A0On 24/01/2019 20:11, Dick Hardt wrote:

=C2=A0=C2=A0=C2=A0 >= Dear SecEvent participants,

=C2=A0=C2=A0=C2=A0 >=

=C2=A0=C2=A0=C2=A0=C2= =A0> This is to start a 2-week working group last call

=C2=A0=C2=A0=C2=A0=C2= =A0> on draft-ietf-secevent-http-push-04

=C2=A0=C2=A0=C2=A0 >=

=C2=A0=C2=A0=C2=A0=C2= =A0> https://datatracker.ietf.org/doc/draft-ietf-sece= vent-http-push/

=C2=A0=C2=A0=C2=A0 >=

=C2=A0=C2=A0=C2=A0=C2= =A0> until Feb 8, 2019.

=C2=A0=C2=A0=C2=A0 >=

=C2=A0=C2=A0=C2=A0=C2= =A0> Please send any comments to the list. In addition, if you have no

=C2=A0=C2=A0=C2=A0=C2= =A0> comments but support publication of this document as-is, please

=C2=A0=C2=A0=C2=A0=C2= =A0> make your voice heard.

=C2=A0=C2=A0=C2=A0 >=

=C2=A0=C2=A0=C2=A0=C2= =A0> Thanks,

=C2=A0=C2=A0=C2=A0 >=

=C2=A0=C2=A0=C2=A0=C2= =A0>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Dick and Yaron

=C2=A0=C2=A0=C2=A0 <= /u>

=C2=A0=C2=A0=C2=A0=C2= =A0_______________________________________________

=C2=A0=C2=A0=C2=A0 Id-e= vent mailing list

=C2=A0=C2=A0=C2=A0 Id-event@ietf.org=

=C2=A0=C2=A0=C2=A0 ht= tps://www.ietf.org/mailman/listinfo/id-event

=C2=A0=C2=A0=C2=A0 <= /u>

--000000000000e8f4cc05804e1f97-- From nobody Fri Jan 25 13:04:22 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 136C9130DCD for ; Fri, 25 Jan 2019 13:04:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RrD-qmvX2Riw for ; Fri, 25 Jan 2019 13:04:18 -0800 (PST) Received: from mail-wm1-x32c.google.com (mail-wm1-x32c.google.com [IPv6:2a00:1450:4864:20::32c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2791C1277BB for ; Fri, 25 Jan 2019 13:04:18 -0800 (PST) Received: by mail-wm1-x32c.google.com with SMTP id m22so7936862wml.3 for ; Fri, 25 Jan 2019 13:04:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=8xyJPiNl5gFUrxkGvFz9dVcfy2dNpPNdmOjpBBxU+fc=; b=ZkwzSZUPvrEmFl5JRJfaVEMjxLTCvZStJlit/D/dcxEtZrZvv8Y2xQ8IxzqvRIS/CG MEUWHgXcCuz6VwhETa0/hdJeIgtOOD9fPULTdyO5jUZTaYHdm/9Ni9Lg8liZwKfX+rFy 84XqYiqNiua6BbgWH/uIe7i6wRKTKDUtI8gyip7lEHrwQdkx7ZHi6zKrj6TmG0Zz3EMd 9YW1CA/1qWy24Mi1XogdSgnTQb0GdB7Fv1PxtwvjhFK4BPp8J/vp/Zk7ueNuNThH3ffp 8LjmjUPBJoPLt1s+hueln2uYD4sCBPTyKugTPwibVuiJvzV8S5e7p2pXLlXdXcfHaANw SGxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=8xyJPiNl5gFUrxkGvFz9dVcfy2dNpPNdmOjpBBxU+fc=; b=t0Glma7bs6cWNVt7vy79fQTn/NvYryVqOc5kTlUf77jdlrP5HpcBEDk9tCG5Vfl3wZ UePK9tiu58tLC85yH1eiboqYFP9owAGMc7tb7wvX4OLHj7CD7e2STTEU8bdUIC0FqmLf ydP4aer4z6EuRijZdVk7IGN7ZsxIYpVvb0XPoMxLXRPReyVmMatnhlyuCLieAF/08IVI C9r189QGXbJ+hvqlr21BuabRfbPfYHJozyxDCNC8Jyi2uT68TU3Kv5zulPEcAMWofNhZ OnU/j/37GR36V3vMHBHd0QCOMhR58ELtpztAxHvXEMZRw2K9fRpyrv/BrdHjpxPuC9IF hBFQ== X-Gm-Message-State: AJcUukfLWGWrp1yykJSJZdDBcObBUfG77kjZ/xZCSpgfFucgIrzeWyEp J2t+4f+Lf3JtQZfWrcGJ7BA= X-Google-Smtp-Source: ALg8bN4jKxwWVYRV7TFdeTFLH0fKBuXIVHQmeLCO2dUnu1KJ6WKCn8bsQnGBYVTz6RdVyqU5leYSSA== X-Received: by 2002:a1c:4855:: with SMTP id v82mr8288830wma.15.1548450256459; Fri, 25 Jan 2019 13:04:16 -0800 (PST) Received: from [10.0.0.145] (bzq-79-179-120-124.red.bezeqint.net. [79.179.120.124]) by smtp.gmail.com with ESMTPSA id d4sm37976671wmb.25.2019.01.25.13.04.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Jan 2019 13:04:15 -0800 (PST) To: "Richard Backman, Annabelle" , Dick Hardt , SecEvent Cc: Anthony Nadalin , Mike Jones , Marius Scurtescu , "Morteza Ansari (moransar)" , Phil Hunt References: <4C82F80F-74ED-4EA0-AE47-0A4D8DB40A43@amazon.com> From: Yaron Sheffer Message-ID: <933153f4-e3a2-73ba-3165-6f1ebd28f4d7@gmail.com> Date: Fri, 25 Jan 2019 23:04:12 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 MIME-Version: 1.0 In-Reply-To: <4C82F80F-74ED-4EA0-AE47-0A4D8DB40A43@amazon.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Id-event] Push Delivery: working group last call X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2019 21:04:21 -0000 Thanks for the quick response! A few comments inline. On 25/01/2019 22:18, Richard Backman, Annabelle wrote: > Thanks for the feedback! Responses inline. > > -- > > Annabelle Richard Backman > > AWS Identity > > On 1/25/19, 9:59 AM, "Id-event on behalf of Yaron Sheffer" > wrote: > >     The document looks good. Here's a bunch o' comments. > >     * Intro: receipt->recipient > > [richanna]👍[/richanna] > >     * "The transmitter and recipient are known to one another." But > then we > >     require the *issuer* to be authenticated by the Recipient. We need to > >     clarify the relationship between Issuer (defined in the base spec) and > >     Transmitter. BTW, Issuer should be capitalized. > > [richanna] > > The intent of that sentence is to indicate that the spec assumes the > Transmitter already knows who it needs to transmit the SET to, and the > Recipient knows who it expects to receive SETs from, and that discovery > of either is out of scope. > > You’re absolutely right. Section 2 is missing a validation step: “The > SET Recipient is willing to accept the SET, when transmitted by the SET > Transmitter.” Also, we can add text to the definition of SET Transmitter > to clarify that it need not be the Issuer of the SET. > > [/richanna] > >     * "a decryption failure that may be due to misconfigured keys" - > this is > >     a strange reason for retransmission, because it would normally > require a > >     very slow manual operation, which could easily overwhelm the > Transmitter. > > [richanna] > > I had in mind issues or delays with key propagation after a rotation, > premature rejection of an outgoing key due to clock skew, intermittent > failure when retrieving a Transmitter’s public key, etc. These are > issues that may (depending on root cause) work themselves out after a > few minutes, though I suppose they are not properly “misconfigured > keys.” This example is probably just muddying the waters without > contributing much to the text. > > [/richanna] > >     * "Transmitting a SET": if the normal response has an empty body, > why do > >     we send "Accept: application/json"? The Accept header is not > mandatory, > >     https://tools.ietf.org/html/rfc7231#section-5.3.2 > > [richanna] > > Error responses will contain a JSON-formatted body, which the > Transmitter MUST be prepared to accept. > > [/richanna] YS: I still think the Accept header is redundant (in particular because if you cannot understand JSON, you cannot use this protocol at all), but I can live with it. > >     * "Failure Response": why is responding with the right HTTP status > code > >     a MAY? What else do we expect them to do? > > [richanna] > > As I understand it, HTTP Servers have some discretion with regards to > which status codes they respond with in certain situations. The “right > HTTP status code” can be subjective, and may change over time as new > status codes are defined for specific cases. SET Transmitters need to be > prepared to receive standard HTTP status codes, but I don’t see a reason > to impose more requirements on the SET Recipient in this area than HTTP > itself does. > > [/richanna] > YS: I agree with everything you say, but still, this would be more correct: "the SET Recipient SHOULD respond with an appropriate HTTP Status Code", even if the "appropriate" code is very fuzzy. Or else, let's remove the RFC 2119 word: "the Recipient responds". >     * "the SET Transmitter is not permitted to transmit SETs issued by the > >     issuer specified in the SET" - I suggest to change the text to > indicate > >     this is from the point of view of the Recipient: "the Recipient is not > >     willing to accept SETs issued by the specified issuer from this > >     particular SET Transmitter". > > [richanna]👍[/richanna] > >     * Error codes: what if the Recipient expects the SET to be protected > >     (e.g. signed) but it is not? Is this "authentication_failed"? > > [richanna] > > SET signatures authenticate the Issuer, not the Transmitter, so > `authentication_failed` would be inappropriate. The Recipient should > return `access_denied` as it is unwilling to accept this SET from this > Transmitter. Now I’m actually wondering if there is a difference between > `invalid_request` and `access_denied` that is meaningful at runtime. > I’ll start a thread on this. > > [/richanna] > >     * "MUST support TLS 1.2" - we should allow for a future where TLS > >     1.3-only is acceptable. So, "MUST support TLS 1.2 or later". > > [richanna]👍[/richanna] > >     * IANA: the Expert Review policy requires a designated expert, > >     obviously. Since this is the only SecEvent registry that needs it so > >     far, I'd rather go for the simpler FCFS policy. > > [richanna] > > 👍, though I think we should add text to the effect of “Error Codes are > intended to be interpreted by automated systems, and therefore SHOULD > identify classes of errors in response to which an automated system > could take some distinct action.” > > [/richanna] YS: guidance is always good. > >     Thanks, > >                 Yaron > >     On 24/01/2019 20:11, Dick Hardt wrote: > >     > Dear SecEvent participants, > >     > > >     > This is to start a 2-week working group last call > >     > on draft-ietf-secevent-http-push-04 > >     > > >     > https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/ > >     > > >     > until Feb 8, 2019. > >     > > >     > Please send any comments to the list. In addition, if you have no > >     > comments but support publication of this document as-is, please > >     > make your voice heard. > >     > > >     > Thanks, > >     > > >     >       Dick and Yaron > >     _______________________________________________ > >     Id-event mailing list > >     Id-event@ietf.org > >     https://www.ietf.org/mailman/listinfo/id-event >