From mhejmadi@google.com Wed Apr 3 09:07:41 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4784120133 for ; Wed, 3 Apr 2019 09:07:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mjioo6_ypdCD for ; Wed, 3 Apr 2019 09:07:39 -0700 (PDT) Received: from mail-lj1-x22d.google.com (mail-lj1-x22d.google.com [IPv6:2a00:1450:4864:20::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D30512016D for ; Wed, 3 Apr 2019 09:07:31 -0700 (PDT) Received: by mail-lj1-x22d.google.com with SMTP id y6so15359845ljd.12 for ; Wed, 03 Apr 2019 09:07:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=+aeGX3Dy9RZDF1eK80U3B4pCPNSLMhHK9PsONS8IwGk=; b=D64Efq9OzD8mB2e/dKSNWMi0LKO22Sdad8Ukr8y4EBtb4yO4Eqkm/O4fwYBufVvwtI 4Ccfy3hDZYRSYiJ6os2rYmjJ80CnnIRNd+qfzJZhnvUJoKmEB+17kxDA67xN2iWr6jYl YCXVUU8cBHF1v/RMQ4/RXLaB6nrF82Lv2pAc5xUwcriSy/dt0U+w/YRRNWwRLoEP3hdh p8vvJjgePjAu/yo7Ij9rblFEZNNsgMYQmR5JJnd5iHNZ0+vh9VJtEdoQ+1tyaeWNdpJL eTRSgeu2QdfJS99SsaF0FNpCAfThhCm60Y3bVCJqaZT/tNGSRiarsOPhyoGBjUl8dKvk rwqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=+aeGX3Dy9RZDF1eK80U3B4pCPNSLMhHK9PsONS8IwGk=; b=fwdcnoWIsCtn+Wrr/zzp5SJ4NArT25mmGalAxYV065BXEvSRo9lmlqAE+iFvFNMFne VD16VMJprm3imE6o1wrquEQERXH3nOhFgbXi8idCpWnm9YiNy9Hl8KXl9c5S190hp6vv WfOWFucwZLvYJuKXnLXBk88CyQOGrkVskxz4Zvzt/8iSW9H7oRPlzP30ZImilqC82ZOb BRQ+kt9SaYO1m0eTVJLPi3B8sJN6TH+fAdlIlL9hOG6iKHUqkhjhTNyEwC/oFW8zbqTx WUl00gbGdeHY5wIYJn7ipur2rm2sTeIDHST6dJGXF1RAD7/tTu6AEteVhfrZnvZ6lWyC gE4g== X-Gm-Message-State: APjAAAUPbeOdU+9wz03+9r2YR2dN/7N+cF5EURaIvsn+MQ1zOCN3h5eD NNl3MqiV/TaXQJblXEnvfgaKzNCAvqcrhv9mM0x/FCHNxc1feg== X-Google-Smtp-Source: APXvYqx4o0OCVhxAXZV5IY5LZI46+l2fXeKQC62s2C7LHAMb8MussKen50TlMbGYRc5pzw2LuhOzxBGTcWV4t8ZBuig= X-Received: by 2002:a2e:9a91:: with SMTP id p17mr309545lji.127.1554307648879; Wed, 03 Apr 2019 09:07:28 -0700 (PDT) MIME-Version: 1.0 From: Meera Hejmadi Date: Wed, 3 Apr 2019 09:07:17 -0700 Message-ID: To: id-event@ietf.org Content-Type: multipart/alternative; boundary="00000000000048e1370585a2730e" Archived-At: Subject: [Id-event] Support for draft: Push-Based SET Delivery Using HTTP X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Apr 2019 16:09:23 -0000 --00000000000048e1370585a2730e Content-Type: text/plain; charset="UTF-8" Good morning, I support publication for the draft defined here: https://tools.ietf.org/html/draft-ietf-secevent-http-push-05. Furthermore, Google has an implementation of this spec already in place (see Cross-Account Protection ). Regards, Meera --00000000000048e1370585a2730e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Good morning,

I = support publication for the draft defined here:=C2=A0https://tools.ietf.org/h= tml/draft-ietf-secevent-http-push-05.=C2=A0

<= /div>
Furthermore, Google has an implementation of this spec already in= place (see Cross-A= ccount Protection).

Regards,
Meera
--00000000000048e1370585a2730e-- From nobody Wed Apr 3 11:04:23 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78F69120152 for ; Wed, 3 Apr 2019 11:04:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P4FRpouRSnCY for ; Wed, 3 Apr 2019 11:04:19 -0700 (PDT) Received: from mail-it1-x135.google.com (mail-it1-x135.google.com [IPv6:2607:f8b0:4864:20::135]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B84612014C for ; Wed, 3 Apr 2019 11:04:19 -0700 (PDT) Received: by mail-it1-x135.google.com with SMTP id a190so11105192ite.4 for ; Wed, 03 Apr 2019 11:04:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=w+9lgDwEf2mjzBzg6UREttco7ejHJqxN3MSK186431c=; b=Dt2elqfcB+Q5Cv0KlCC+OpaVpP1CE3H3GWtDTfk5Ia7lj9p/CZ2ob3uvyjLyyqLd+0 QKjQWZYW8yjwHzwfl9rhWzi8HsCiKPbJyhpwl4jrHZ/a4kp5t2pADyePzhuDtO2Ez/EG fsm7HD9IfnIMqIOcwN+5ZrTB1Yqzb4Tvnpwepai71o3qR2UJMLUbEEyqjfrZdcmX/s8w lcycWRlxQLYF5rrM1dRqnNZ52AEnXAS86O1OAFIBR+zluWlPf3fRZ82+G21nZkZVpyy+ 9jzs4TLIvBKJShHx8lbFAw1E4HzegmCe+kOqB2acXI2HofIFHVKeFicT1XY/6rc9Ts8G MyXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=w+9lgDwEf2mjzBzg6UREttco7ejHJqxN3MSK186431c=; b=QLfvNSh/mAbBuB0vVO1FVU/zvb4DpkWD8/TtU5nrb4uLKHNiyc1i9QLhg4J7M5oEf8 tRJc2fy8sYQq1i/Hk2m8CsYNcold/yZ558LKlfnU3lUvMjlFoCQEXzc3tmd4qqDJ2t88 7HnTi6/4WcpgBseTta66Ok7EeJC5ctga3Njgzh+e5gh2wZglNPCC16mZbIHHeFQ3PX9E yPQDVlDfUEwBNwemzIfBbGsRErdyTT1ZE8GIGfijGsP3E/DnydA4wCVFrQcOS9ZIJnHe zFvU9GVMbr7C/jJh9RtMb3XoXZShyAZ56mnRdMjICXKryWgn4tJIrAfBwUzXvkkXVdbW spwA== X-Gm-Message-State: APjAAAXysHZGPcx3vVDjNrOOsdV8IZb0vRMoQsGhWUwxWUjyjI9c+68g u2WAEVeYtdDxL8AMj48pIaxU5MZXTQXRKKVnSVpicQ== X-Google-Smtp-Source: APXvYqyLQNahhoBbJyhIqDfat9fryyX0E2IxaqV7AbKSwBFnH+qQAE5OeiZqDant/Y81PaBBfEhlZZ86nlkjHHMPFlI= X-Received: by 2002:a24:22c5:: with SMTP id o188mr1344120ito.68.1554314658380; Wed, 03 Apr 2019 11:04:18 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: William Denniss Date: Wed, 3 Apr 2019 11:04:05 -0700 Message-ID: To: Meera Hejmadi Cc: ID Events Mailing List Content-Type: multipart/alternative; boundary="000000000000157c280585a415f7" Archived-At: Subject: Re: [Id-event] Support for draft: Push-Based SET Delivery Using HTTP X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Apr 2019 18:04:22 -0000 --000000000000157c280585a415f7 Content-Type: text/plain; charset="UTF-8" +1, I would like to see this draft published. On Wed, Apr 3, 2019 at 9:09 AM Meera Hejmadi wrote: > Good morning, > > I support publication for the draft defined here: > https://tools.ietf.org/html/draft-ietf-secevent-http-push-05. > > Furthermore, Google has an implementation of this spec already in place > (see Cross-Account Protection > ). > > Regards, > Meera > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --000000000000157c280585a415f7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
+1, I would like to see this draft published.
On Wed, A= pr 3, 2019 at 9:09 AM Meera Hejmadi <mhejmadi=3D40google.com@dmarc.ietf.org> wrote:
=
Goo= d morning,

I support publication for t= he draft defined here:=C2=A0https://tools.ietf.org/html/dra= ft-ietf-secevent-http-push-05.=C2=A0

Furthermore, Google has an implementation of this spec already in place = (see Cross-Account Protection).

Regards,
<= div>Meera
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--000000000000157c280585a415f7-- From nobody Wed Apr 3 17:43:28 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 411B312031E for ; Wed, 3 Apr 2019 17:43:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t76NlUglFdXv for ; Wed, 3 Apr 2019 17:43:25 -0700 (PDT) Received: from mail-io1-xd41.google.com (mail-io1-xd41.google.com [IPv6:2607:f8b0:4864:20::d41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DA56120193 for ; Wed, 3 Apr 2019 17:43:25 -0700 (PDT) Received: by mail-io1-xd41.google.com with SMTP id s7so480254iom.12 for ; Wed, 03 Apr 2019 17:43:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=UeXw1yOdWhfdQjtRbau5NKesrQbEl49seouRQj3nnqs=; b=HHzrLcaK570JqDKc9nTH9R6cvSHnAYuHcyjccD2oqFi+Ejd+O9sYEd5ICXi5YqRrWV kju7WEjZtAqNW6ySYGlqPlZGmN+jf5qCbYsv62dE8b96ZHRud5VVTKyhEhYPzMKLUMu3 auF9wunW2KkCccwqRGhniyXXn6ojItrC2nm3MlvfXkoMKHnanFUs9t0TG4iaiLNEcxEE wrpzepXtJhlAplJHu1Jw8vlNubawr/j3eCq74syFvsHU1PaCbHTfARcc81lFfQyTslZf zoT30W1twDs3yi1LXnt7s2c8wCZ+AGzHJVfbVwQ6K2y/JcEyb2h8AI/jgw6X+jkB1q/I ry6w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=UeXw1yOdWhfdQjtRbau5NKesrQbEl49seouRQj3nnqs=; b=gU4nzZhk4oXssxmHx8H5c7tlLyJFXU7msB6Lk1L7JDhUdGLtJBbUvk/aoKhvzmBNKE 2GSMS3+4XKY6KeR4dFIug5A9Qk/YSMTr1iMAkAWi6Fw6sKYwyHvL/iXaLScndMWGub3p JUUFR8v/FVYegS1g+DM0mSUeaLbrRk2fQldWODsnr8VVL0sRtq9IMTV6p97yTV17NdFT cceKUsAPsQ3tVhLxdFXipSXnCFfiuc6zif7oAJxuhCVkBsfy05FYIgAFuWh5M/cyJ6hg REDayHd7YsJ+aBYCnCrRazyg9FCbmqfFsy5D7DuTXhcfZ/SQrl63mWmz3XLz0B2cWfQw WsRw== X-Gm-Message-State: APjAAAUy6dAItw8GV2/yOtp4Tsqija8+3Zz68s6IaGMucayTb7ilSfsK 5sEQKDCTluOkWBbunT0tWFP5u0OURHtCHmxABnIBX7X27vI= X-Google-Smtp-Source: APXvYqzg6rm9JHIcU61SD3vfODmIZa6FH+MmvKkxPnFRfSo5MpY1rDtlanElacXky7fbiC0ojS71TKvnE0vVMQArjq0= X-Received: by 2002:a6b:8b50:: with SMTP id n77mr2382797iod.222.1554338604222; Wed, 03 Apr 2019 17:43:24 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Luke Camery Date: Wed, 3 Apr 2019 17:42:54 -0700 Message-ID: To: William Denniss Cc: Meera Hejmadi , ID Events Mailing List Content-Type: multipart/alternative; boundary="0000000000005dcd3c0585a9a89c" Archived-At: Subject: Re: [Id-event] Support for draft: Push-Based SET Delivery Using HTTP X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Apr 2019 00:43:27 -0000 --0000000000005dcd3c0585a9a89c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable +2, some really great work went into the spec and there are multiple "running code" implementations in the wild. On Wed, Apr 3, 2019 at 11:04 AM William Denniss wrote: > +1, I would like to see this draft published. > > On Wed, Apr 3, 2019 at 9:09 AM Meera Hejmadi 40google.com@dmarc.ietf.org> wrote: > >> Good morning, >> >> I support publication for the draft defined here: >> https://tools.ietf.org/html/draft-ietf-secevent-http-push-05. >> >> Furthermore, Google has an implementation of this spec already in place >> (see Cross-Account Protection >> ). >> >> Regards, >> Meera >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --=20 * =E2=80=A2 **Luke Camery* * =E2=80=A2 *Product Manager * =E2=80=A2 *Docs Security & Trust --0000000000005dcd3c0585a9a89c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
+2, some really great work went into the spec and there ar= e multiple "running code" implementations in the wild.=C2=A0
<= /div>
O= n Wed, Apr 3, 2019 at 11:04 AM William Denniss <wdenniss=3D40google.com@dmarc.ietf.org> wrote= :
+1, I would like to see this draft published.

On Wed, Apr 3, 2019 at = 9:09 AM Meera Hejmadi <mhejmadi=3D40google.com@dmarc.ietf.org> wrote:
Good morning,

I support publication f= or the draft defined here:=C2=A0https://tools.ietf.org/html= /draft-ietf-secevent-http-push-05.=C2=A0

Furthermore, Google has an implementation of this spec already in pl= ace (see Cross-Account Protection).

Regards,
Meera
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


--
=C2=A0 =E2=80= =A2 =C2=A0Luke Camery
=C2=A0 =E2=80=A2 =C2=A0Produc= t Manager
=C2=A0 =E2=80=A2=C2=A0 =C2=A0Docs Security & Trust
--0000000000005dcd3c0585a9a89c-- From nobody Thu Apr 4 15:04:59 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E83B120190 for ; Thu, 4 Apr 2019 15:04:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xsXGhx_0qVpG for ; Thu, 4 Apr 2019 15:04:54 -0700 (PDT) Received: from mail-yw1-xc31.google.com (mail-yw1-xc31.google.com [IPv6:2607:f8b0:4864:20::c31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B30A312003E for ; Thu, 4 Apr 2019 15:04:54 -0700 (PDT) Received: by mail-yw1-xc31.google.com with SMTP id e76so1578051ywa.9 for ; Thu, 04 Apr 2019 15:04:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=zNhLVoHCbcNa8i5AkHsViajdeqd2VF34nEZl5Z117yE=; b=wSCidWLJK314uT9ANgOyAYC3BhqA2vekBlFPJlg84CARwA5IHkGFpSjhgeiDfRtq45 fkluXR4DKgQ2iyCseix/ZulaXGYtbQSwDS5a8PSBRIehXqzx+/sedSAQ4K/69V99n57A 1aF9lSX7Mx+kiODM4qMZqM6TkT9GwbKw7s+fLavYo+amp3amnN/cGn+RmmUNCeBnTP/X EEFMEn3CW4Y1yTRk3fZRElgcCk8kyoibeHpXlui7EOTz3JIrmu98x8fpDM63YN/tiqY/ ESrXYHT75RYSq1Te8UrNMqnC+l0E+WndA5BBvMPIMPEDzUMhKJD4m8J/VlGM73ScrcTX wHhg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=zNhLVoHCbcNa8i5AkHsViajdeqd2VF34nEZl5Z117yE=; b=Tcwzgc+9Vr5DRdB03WSLplpZ6AAyUvG8E+uG7tiekRT4FOy5PRzM2/BvQ2EomNGN0Y I/Jkqu+tFap4GqK8BDEVpYLJuYE/N8QyRPGsIS8Mg6UCLAQ3SkzjFsF4WKe4PmcTqFNf wgcX34CDRojBPpRVD/r2UZcdyVqQe9VvQK8k1sAVvM0oCrUp4XspW2lNYcf6A5Hib3RN 2Q9v5bATZ0qEkbiJ8q62yEcm0CMUz8GiC8QfiUgiPYXeg7GPE1NkYbzMtOptlmgtVZdH TXWXfO/SSS8k1WnW8pbNLU7iqecvEkF8vzJ+yjME5yZch2YE+VaqEtwBntJO4TGbuwuA TeBQ== X-Gm-Message-State: APjAAAVNHZcX06xeoHZyqUtdcJmD2Co3RKfp4rF/wqFp7sdsikoqh2LH cqa/KI5v1IoDF98nIldF46hBrDa6pnaZCrJEEpu7Xg== X-Google-Smtp-Source: APXvYqw7qKfZsP2NBZ8V4Vq/jEqGJwq8ZbaXNxKQcOfu2hP68OY/Itoq2G/dRGXNl6c8VinBJGV/KFLk7m/9Kt1hctg= X-Received: by 2002:a81:a60b:: with SMTP id d11mr7097055ywh.251.1554415493484; Thu, 04 Apr 2019 15:04:53 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Adam Dawes Date: Thu, 4 Apr 2019 15:04:41 -0700 Message-ID: To: Luke Camery Cc: William Denniss , Meera Hejmadi , ID Events Mailing List Content-Type: multipart/alternative; boundary="0000000000005309360585bb8f68" Archived-At: Subject: Re: [Id-event] Support for draft: Push-Based SET Delivery Using HTTP X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Apr 2019 22:04:57 -0000 --0000000000005309360585bb8f68 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Yes, we have a growing number of implementers of this spec due to their integration with Google. Adobe, Yelp and more in the pipeline. It would be very counterproductive to have another pattern emerge and have these implementations be incompatible. On Wed, Apr 3, 2019 at 5:43 PM Luke Camery wrote: > +2, some really great work went into the spec and there are multiple > "running code" implementations in the wild. > > On Wed, Apr 3, 2019 at 11:04 AM William Denniss 40google.com@dmarc.ietf.org> wrote: > >> +1, I would like to see this draft published. >> >> On Wed, Apr 3, 2019 at 9:09 AM Meera Hejmadi > 40google.com@dmarc.ietf.org> wrote: >> >>> Good morning, >>> >>> I support publication for the draft defined here: >>> https://tools.ietf.org/html/draft-ietf-secevent-http-push-05. >>> >>> Furthermore, Google has an implementation of this spec already in place >>> (see Cross-Account Protection >>> ). >>> >>> Regards, >>> Meera >>> _______________________________________________ >>> Id-event mailing list >>> Id-event@ietf.org >>> https://www.ietf.org/mailman/listinfo/id-event >>> >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> > > > -- > > * =E2=80=A2 **Luke Camery* > * =E2=80=A2 *Product Manager > * =E2=80=A2 *Docs Security & Trust > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --=20 Adam Dawes | Sr. Product Manager | adawes@google.com | +1 650-214-2410 --0000000000005309360585bb8f68 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Yes, we have a growing number of implementers of this spec= due to their integration with Google. Adobe, Yelp and more in the pipeline= .=C2=A0

It would be very counterproductive to have anoth= er pattern emerge and have these implementations be incompatible.=C2=A0

On Wed, Apr 3, 2019 at 5:43 PM Luke Camery <lcamery=3D40google.com@dmarc.ietf.org> wrote:
= +2, some really great work went into the spec and there are multiple "= running code" implementations in the wild.=C2=A0

On Wed, Apr 3, 201= 9 at 11:04 AM William Denniss <wdenniss=3D40google.com@dmarc.ietf.org> wrot= e:
+1, I would like to see this draft published.

On Wed, Apr 3, 2019 = at 9:09 AM Meera Hejmadi <mhejmadi=3D40google.com@dmarc.ietf.org> wrote:
<= div>Good morning,

I support publicatio= n for the draft defined here:=C2=A0https://tools.ietf.org/h= tml/draft-ietf-secevent-http-push-05.=C2=A0

<= /div>
Furthermore, Google has an implementation of this spec already in= place (see Cross-Account Protection).

Regards= ,
Meera
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


--
=C2=A0 =E2=80=A2 =C2=A0Luke Camery
= =C2=A0 =E2=80=A2 =C2=A0Product Manager
=C2=A0 =E2=80=A2=C2=A0 =C2=A0<= /b>Docs= Security & Trust
_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event


--
Adam Dawes= =C2=A0|=C2=A0Sr. Produc= t Manager=C2=A0|=C2=A0adawes@google.com= =C2=A0|=C2=A0+1 650-214= -2410

--0000000000005309360585bb8f68-- From opincaru@adobe.com Tue Apr 9 01:52:48 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E70C1201B6 for ; Tue, 9 Apr 2019 01:52:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.027 X-Spam-Level: X-Spam-Status: No, score=-0.027 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DEAR_SOMETHING=1.973, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=adobe.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26IQyrP76PxP for ; Tue, 9 Apr 2019 01:52:46 -0700 (PDT) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-eopbgr740079.outbound.protection.outlook.com [40.107.74.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0153C12076D for ; Tue, 9 Apr 2019 01:52:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=adobe.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=z+qjnb4OclgqX2EjhaY4Kr25HxWWXPxJAG3fQhs/yd0=; b=YgyX1cVAXUW2744bTHc+QxFKRokPI4rF4dOpyWt6pOqDXvaAKRfC/U6X0FIQiFTp7NzMmZcAG9LM66Ky1G5jF5HBEsfvqumUqeJ4Aa4h6L0BrYOc+yMuO2GvUN3yXxl9tpXyWuOxJB8qQ17EdIs1BPQIy3RxAZAGA0fHQRDQuTA= Received: from CY4PR02MB2853.namprd02.prod.outlook.com (10.175.81.136) by CY4PR02MB2888.namprd02.prod.outlook.com (10.175.61.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.21; Tue, 9 Apr 2019 08:52:41 +0000 Received: from CY4PR02MB2853.namprd02.prod.outlook.com ([fe80::916f:7cc1:5551:3e04]) by CY4PR02MB2853.namprd02.prod.outlook.com ([fe80::916f:7cc1:5551:3e04%2]) with mapi id 15.20.1771.014; Tue, 9 Apr 2019 08:52:41 +0000 From: Cristian Aurel Opincaru To: "id-event@ietf.org" Thread-Topic: Please publish https://tools.ietf.org/html/draft-ietf-secevent-http-push-05 Thread-Index: AQHU7rGWRAnDswUM5USfBW9vlMKwIw== Date: Tue, 9 Apr 2019 08:52:40 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.18.0.190403 authentication-results: spf=none (sender IP is ) smtp.mailfrom=opincaru@adobe.com; x-originating-ip: [193.105.140.131] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e7178fa5-303c-4c51-3a65-08d6bcc8b977 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600139)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:CY4PR02MB2888; x-ms-traffictypediagnostic: CY4PR02MB2888: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-forefront-prvs: 000227DA0C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(396003)(366004)(39860400002)(376002)(346002)(189003)(199004)(58126008)(99286004)(2351001)(5660300002)(33656002)(786003)(316002)(6436002)(68736007)(97736004)(14444005)(106356001)(256004)(10090500001)(105586002)(83716004)(71200400001)(71190400001)(478600001)(4744005)(25786009)(82746002)(36756003)(6506007)(81156014)(476003)(6306002)(5640700003)(2906002)(26005)(81166006)(102836004)(8676002)(186003)(9686003)(66066001)(6512007)(6486002)(7736002)(14454004)(6916009)(53936002)(790700001)(6116002)(3846002)(486006)(54896002)(2501003)(236005)(86362001)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR02MB2888; H:CY4PR02MB2853.namprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: adobe.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: PI7NW+c38qZ5SeX6pN1uhqGNUiNIXpUFzqQcF5uvAcvr71FzP+7KRypoywLSubXIyrv6e0wNZ8qHPdMotv0ovSGTD5DjNEaotCHoGCq00P592o8Wa956BmVA7P1wlvIb8SRy8/vXdV7dv50FPRII9oE1DXvfhIj9MEJDA2Q4FtHWCa8Qw7fKjIS7cRbZZTkiizixoFlTqyBn1u1K1W3yz7E77q1V8hIj0ctZFjUn6SYyUe1ejV8rrandg5/IOCNxr35jWsZd3cDlrwwwYRRkL9C4quPQGGReP39qYQrZ+d/f3xzAriGL4CCzjXzwdhMfsuGEFwL5ADyUEZKitVz0AmexALPU31XprrQqYVdnH8PNVpmwfUBX7Db+O2Qq9UXUXzwBm9Gjx28mtPRumq89sOHkrmmMYHO45imoKVoQOdw= Content-Type: multipart/alternative; boundary="_000_D854237449F04325B58DAA12B6A034A5contosocom_" MIME-Version: 1.0 X-OriginatorOrg: adobe.com X-MS-Exchange-CrossTenant-Network-Message-Id: e7178fa5-303c-4c51-3a65-08d6bcc8b977 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2019 08:52:40.9552 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: fa7b1b5a-7b34-4387-94ae-d2c178decee1 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR02MB2888 Archived-At: X-Mailman-Approved-At: Tue, 09 Apr 2019 09:12:47 -0700 Subject: [Id-event] Please publish https://tools.ietf.org/html/draft-ietf-secevent-http-push-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Apr 2019 08:53:55 -0000 --_000_D854237449F04325B58DAA12B6A034A5contosocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBTaXIgLyBNYWRhbSwNCg0KUGxlYXNlIHB1Ymxpc2ggUHVzaC1CYXNlZCBTZWN1cml0eSBF dmVudCBUb2tlbiAoU0VUKSBEZWxpdmVyeSBVc2luZyBIVFRQIGFzIFJGQy4gQXQgQWRvYmUsIHdl IGhhdmUgYSB3b3JraW5nIGltcGxlbWVudGF0aW9uIChpbnRlZ3JhdGluZyB0aGUgR29vZ2xlIENy b3NzLUFjY291bnQgUHJvdGVjdGlvbikuDQoNCkJlc3QsDQpDcmlzdGlhbiBPUElOQ0FSVS4NCg0K DQpDcmlzdGlhbiBPcGluY2FydSAgfCAgU3IuIEVuZ2luZWVyaW5nIE1hbmFnZXIsIElkZW50aXR5 IFNlcnZpY2VzIHwgIEFkb2JlICB8ICArNDAzMS00MTMtMzgyNCAgfCAgb3BpbmNhcnVAYWRvYmUu Y29tPG1haWx0bzpvcGluY2FydUBhZG9iZS5jb20+DQoNCg0KDQoNCg0K --_000_D854237449F04325B58DAA12B6A034A5contosocom_ Content-Type: text/html; charset="utf-8" Content-ID: <838F255686D02E4DB7AE2498028EB97B@namprd02.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpo MQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTsNCgltc28tc3R5bGUtbGluazoiSGVhZGluZyAxIENo YXIiOw0KCW1hcmdpbi10b3A6MTIuMHB0Ow0KCW1hcmdpbi1yaWdodDowY207DQoJbWFyZ2luLWJv dHRvbTowY207DQoJbWFyZ2luLWxlZnQ6MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglw YWdlLWJyZWFrLWFmdGVyOmF2b2lkOw0KCWZvbnQtc2l6ZToxNi4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkgTGlnaHQiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzJGNTQ5NjsNCglmb250LXdlaWdo dDpub3JtYWw7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6 dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4u RW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLWNvbXBvc2U7DQoJY29sb3I6 d2luZG93dGV4dDt9DQpzcGFuLkhlYWRpbmcxQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSGVhZGlu ZyAxIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5Ow0KCW1zby1zdHlsZS1saW5rOiJIZWFk aW5nIDEiOw0KCWNvbG9yOiMyRjU0OTY7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIu MHB0Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5Xb3Jk U2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBt c28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYi IC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBl bGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0K PC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0i Uk8iIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0 aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPkRlYXIgU2lyIC8gTWFkYW0sPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlBsZWFzZSBwdWJs aXNoIDwvc3Bhbj4NCjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5QdXNoLUJhc2Vk IFNlY3VyaXR5IEV2ZW50IFRva2VuIChTRVQpIERlbGl2ZXJ5IFVzaW5nIEhUVFANCjwvc3Bhbj48 L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPmFzIFJGQy4gQXQgQWRvYmUsIHdlIGhh dmUgYSB3b3JraW5nIGltcGxlbWVudGF0aW9uIChpbnRlZ3JhdGluZyB0aGUgR29vZ2xlIENyb3Nz LUFjY291bnQgUHJvdGVjdGlvbikuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij5CZXN0LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5DcmlzdGlhbiBPUElOQ0FSVS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZiI+Q3Jpc3RpYW4gT3BpbmNhcnU8L3NwYW4+PC9iPjxzcGFuIGxhbmc9 IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7U3IuIEVuZ2luZWVyaW5n IE1hbmFnZXIsIElkZW50aXR5IFNlcnZpY2VzIHwmbmJzcDsmbmJzcDs8c3BhbiBzdHlsZT0iY29s b3I6cmVkIj5BZG9iZTwvc3Bhbj4mbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7JiM0Mzs0MDMxLTQx My0zODI0DQogJm5ic3A7fCZuYnNwOyZuYnNwOzxhIGhyZWY9Im1haWx0bzpvcGluY2FydUBhZG9i ZS5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjojMDU2M0MxIj5vcGluY2FydUBhZG9iZS5jb208L3Nw YW4+PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D854237449F04325B58DAA12B6A034A5contosocom_-- From nobody Thu Apr 11 14:09:27 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D86F61206EA for ; Thu, 11 Apr 2019 14:09:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IEG0HgNX05sE for ; Thu, 11 Apr 2019 14:09:18 -0700 (PDT) Received: from mail-pf1-x42c.google.com (mail-pf1-x42c.google.com [IPv6:2607:f8b0:4864:20::42c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 295E3120706 for ; Thu, 11 Apr 2019 14:09:18 -0700 (PDT) Received: by mail-pf1-x42c.google.com with SMTP id 188so4026450pfd.8 for ; Thu, 11 Apr 2019 14:09:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=hlaP37jdlD38avOK0hnyeon5CQ89RBHIStz+RiLr31s=; b=lLhoIHhZ2Vy9b/G+0SBHD06YrM1QlIDMnkFkFPF8p3jujRXEJFrd41Z4d1u4WFtbqF uoKMmTfpCgxqC/YQIfAnGaStA3HKPQYe6pg7vh5oBUUHsQoFfnDmmhauZbSuxBSvJ9vS jHaySRMe0pZdQGiaeLpMdRjA/rgcX+/HVj/EncDg/lbls88hTcS5PgPDp28o62Z5RxKn 2DFoNbYftLtGw5y8OoOTLZ5XtUeUKsf1oMNKBZN27kE9nJxW8rdN8i33Vsgw/vW7jA2H 4QPwLzLGLLoS1sUnywTPY59rIIFDkuT05OJvuDawjefmPfXe7DfJGpd+aL7w8In7pMzn m52Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=hlaP37jdlD38avOK0hnyeon5CQ89RBHIStz+RiLr31s=; b=RSUCNo/4Xde+Cz/3vwv+OT6DkOFzZ8SXGvbE/P5B/mki3NHRytzKkWkuIpDjFhtlKG BoXl1fgtv4b7lOdYik6ATSJw52tkMVKYPL7yj+uRjH1+pWn+IVBjfFW8w8+9Q9sAvt5f ovu/wcFcqNusi4qXjXKhhm4F8Uak9rcouRqYM4nK7DPIL/60mU6iS/nYU5ryp8rmeQcA Ddmk68wmq+2/+KPDussELsa7QGsBWuCBm0+IScP/AKwkQLrixnlxsLsS4/lxYEUSCVKR IVxOB3HU1ouD1/WwhKXbOKyJP36jeZt//SCQxUvOVE4HewKtj/CEGX17PnrNQ/5ePOvZ UsKQ== X-Gm-Message-State: APjAAAXYDwCo6B+aMDDiaQqjvvaC2OWDvb4PXZfgVakaLchW7pqt54nn OUYT0Ly+TYSscIqRI+s8Sc9Ch4x2MxupioOzWME= X-Google-Smtp-Source: APXvYqyNFqq+8yXrnqWtc8xKgz9cS3vuQruTcECZ6nyszKB0STid8O+LzAzMrgarH8q2rAKPq7nGDAywL8P1gsY02mI= X-Received: by 2002:a05:6a00:c1:: with SMTP id e1mr46024247pfj.143.1555016957550; Thu, 11 Apr 2019 14:09:17 -0700 (PDT) MIME-Version: 1.0 References: <71b9d281-46f9-8bb4-3524-211e5ab7fa55@curity.io> In-Reply-To: <71b9d281-46f9-8bb4-3524-211e5ab7fa55@curity.io> From: Dick Hardt Date: Thu, 11 Apr 2019 14:09:06 -0700 Message-ID: To: Mark Dobrinic Cc: SecEvent , Annabelle Richard , Yaron Sheffer Content-Type: multipart/alternative; boundary="0000000000005fe5b90586479916" Archived-At: Subject: Re: [Id-event] Review of draft-ietf-secevent-http-push-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Apr 2019 21:09:26 -0000 --0000000000005fe5b90586479916 Content-Type: text/plain; charset="UTF-8" Mark: thanks for the review and feedback Annabelle: have you had a chance to review the feedback? On Wed, Mar 27, 2019 at 3:55 AM Mark Dobrinic wrote: > Hi id-event, > > Read through draft 05, and here's some of my findings. With the > disclaimer that I am not fully aware of the historical discussions that > led to this draft. > > - Section 2.0 mentions: "Once a SET has been validated and persisted, > the SET Recipient SHOULD immediately return a response ..."; there's a > bit of a gap on what to do when the SET was validated but failed to > persist. The errors don't (and probably shouldn't?) cover this, as this > might be considered business logic on the recipient's part? Section 2.2 > talks about "appropriate retention requirements", which is nicely > formulated. This type of wording might be also snuck in to the language > of section 2.0's paragraph ("Once the SET has been validated and > persisted ..") > > - Is the `description` field in the error response REQUIRED? > > - Is there a reason why the `authentication_failed` failure response > should not return a HTTP/401 Unauthorized HTTP status code? > > - Section 5.1 talks about the SET Issuer being authorized to deliver the > SET; should this not be the SET Transmitter? > > - Section 5.4 on authenticating persisted SETs; Not sure if I understood > this correctly, but if a SET Transmitter can send a SET that was issued > by a different SET Issuer, how would the signature verification key be > resolved to authenticate the SET? 5.4 talks about the SET *Transmitter* > signing the SET, should this not be the SET *Issuer*? Or is this out of > scope? > > Nitpicks: > - The sentence above the examples (e.g. in section 2.2) should always > end with a colon ':' ("The following is ... a SET:"), or end with a > period '.'. Don't care which, but looks nicer if it's the same > everywhere. I think only 2.2 falls out of line. > > - The text above Figure 5 says "SET Receiver", should be "SET Recipient" > > Hope this helps to wrap it up to publication :) > > > -- > Regards, > > Mark Dobrinic > Software Engineer and Identity Specialist > Curity AB > > mark.dobrinic@curity.io > www.curity.io > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --0000000000005fe5b90586479916 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Mark: thanks for the review and feedback

Annabelle: have you had a chance to review the feedback?

<= div class=3D"gmail_quote">
On Wed, Mar= 27, 2019 at 3:55 AM Mark Dobrinic <mark.dobrinic@curity.io> wrote:
Hi id-event,

Read through draft 05, and here's some of my findings. With the
disclaimer that I am not fully aware of the historical discussions that
led to this draft.

- Section 2.0 mentions: "Once a SET has been validated and persisted,<= br> the SET Recipient SHOULD immediately return a response ..."; there'= ;s a
bit of a gap on what to do when the SET was validated but failed to
persist. The errors don't (and probably shouldn't?) cover this, as = this
might be considered business logic on the recipient's part? Section 2.2=
talks about "appropriate retention requirements", which is nicely=
formulated. This type of wording might be also snuck in to the language
of section 2.0's paragraph ("Once the SET has been validated and persisted ..")

- Is the `description` field in the error response REQUIRED?

- Is there a reason why the `authentication_failed` failure response
should not return a HTTP/401 Unauthorized HTTP status code?

- Section 5.1 talks about the SET Issuer being authorized to deliver the SET; should this not be the SET Transmitter?

- Section 5.4 on authenticating persisted SETs; Not sure if I understood this correctly, but if a SET Transmitter can send a SET that was issued
by a different SET Issuer, how would the signature verification key be
resolved to authenticate the SET? 5.4 talks about the SET *Transmitter*
signing the SET, should this not be the SET *Issuer*? Or is this out of
scope?

Nitpicks:
- The sentence above the examples (e.g. in section 2.2) should always
end with a colon ':' ("The following is ... a SET:"), or = end with a
period '.'. Don't care which, but looks nicer if it's the s= ame
everywhere. I think only 2.2 falls out of line.

- The text above Figure 5 says "SET Receiver", should be "SE= T Recipient"

Hope this helps to wrap it up to publication :)


--
Regards,

Mark Dobrinic
Software Engineer and Identity Specialist
Curity AB

mark.dobrinic@= curity.io
www.c= urity.io

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--0000000000005fe5b90586479916-- From nobody Thu Apr 11 14:32:34 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 743221200A2 for ; Thu, 11 Apr 2019 14:32:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CrdoNDl792kT for ; Thu, 11 Apr 2019 14:32:31 -0700 (PDT) Received: from mail-pg1-x52a.google.com (mail-pg1-x52a.google.com [IPv6:2607:f8b0:4864:20::52a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33BF3120086 for ; Thu, 11 Apr 2019 14:32:31 -0700 (PDT) Received: by mail-pg1-x52a.google.com with SMTP id v12so4132472pgq.1 for ; Thu, 11 Apr 2019 14:32:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=enWjAfPEWPOqm6ONRliJXy4n4vLU75wb7cj6ZCzsbtA=; b=SPNGdym53Z4i3L0KqEtsnDS3Fr2Lb0DZUWokslH/GGQ6FIQrPlHcgvkpA9PtYbQj/R AyQBmv9UNXU5EJ7ISD19qi43q85JTgcfozk22kQPctw5n1h1SkS6C4DiCKFeBiYMNR/o qTrfZbbNktjZnAWiSmxPrIyQrXf7umyo9dV7Fl1gC2BIe7ipaKSwHYn8h/90oJFvIQTP 6RupIjibiapeh60Z41hGm1ltfQWdRvK0Aza3we8Hg6+XiDYy5GPd09NaPAA5S+QKvnEw x6CN2SPEfheZXlbW9uGJRqL34VmTSoqQwvmW6N19XpM1tvREs73vnJLDvBjW3cZ5XQau HIRA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=enWjAfPEWPOqm6ONRliJXy4n4vLU75wb7cj6ZCzsbtA=; b=BQ35RjAPb0yde5oUgMGD22kI+9IDR6oP9001fH0hNEvCPodadHqBttbHAdqHHVnGCn p38N2LPDN+lI8LG4m30A72uN2MiZUlHCgxOLcfg6mhvm6JNPRRdNO3+jsh7rWsLtO+14 dR2CQS6JJVNpvH5rNHr/wFQrIuJdjSKtLKJJzLk7O8ES5ant4x0CbUj2sMuiu8cXMQqB K8/9se1MZSM4h7374zZLzI7+5LDofrCxuSuQf6UKIbeBDgkXAFd0WXULZAemVAEiQ6X3 SFjW+oMRPSeBmwidl/zV0cIXfJ/0hI9wLslpqp3saz7F5tb/O2Q4r0UwHJcsKMvIgo8G WtKQ== X-Gm-Message-State: APjAAAVzuX4CUBSlT6fUtRUX3A0+UTxdbhd2qva5QkWtvxIJEPPznz+0 516OooT9Ce5ZTMMTo5GlU881HMfes5o1kX+RzqlXWbvX X-Google-Smtp-Source: APXvYqyA2M+RIN7OGV18tH8okKx27ekCtpbQNszxpuhCFTaX/BsFaM0oRimYIeVMxUsJgolsWZ90N32lZ1LuvqYZFoA= X-Received: by 2002:a62:f20e:: with SMTP id m14mr52794714pfh.228.1555018350478; Thu, 11 Apr 2019 14:32:30 -0700 (PDT) MIME-Version: 1.0 From: Dick Hardt Date: Thu, 11 Apr 2019 14:32:19 -0700 Message-ID: To: SecEvent Cc: Annabelle Richard , Yaron Sheffer , Mark Dobrinic Content-Type: multipart/alternative; boundary="000000000000664f85058647ec73" Archived-At: Subject: [Id-event] WG Last Call consensus for SET Push Delivery X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Apr 2019 21:32:32 -0000 --000000000000664f85058647ec73 Content-Type: text/plain; charset="UTF-8" Hello WG Besides addressing the mainly editorial feedback from Mark (thanks!), it looks like we have gotten rough consensus for Last Call of draft-ietf-secevent-http-push-05 as a number of additional people have posted +1s. Yaron has graciously volunteered to be the Document Shepherd. --000000000000664f85058647ec73 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello WG
Besides addressing the mainly editorial feedback from Mar= k (thanks!), it looks like we have gotten rough consensus for Last Call of = draft-ietf-secevent-http-push-05 as a number of additional people have post= ed=C2=A0+1s.

Yaron has graciously volunteered to b= e the Document Shepherd.=C2=A0

--000000000000664f85058647ec73-- From nobody Thu Apr 11 14:54:36 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADCC0120715 for ; Thu, 11 Apr 2019 14:54:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=coinbase.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 90H9_6eVwj6s for ; Thu, 11 Apr 2019 14:54:13 -0700 (PDT) Received: from mail-pl1-x62f.google.com (mail-pl1-x62f.google.com [IPv6:2607:f8b0:4864:20::62f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 72C5612067E for ; Thu, 11 Apr 2019 14:54:13 -0700 (PDT) Received: by mail-pl1-x62f.google.com with SMTP id t16so4053828plo.0 for ; Thu, 11 Apr 2019 14:54:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coinbase.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=1zpzcY0T0Cj5u7rB7IIVC94nrqBpp2YofBCKlh1MQJM=; b=QDDQD6fV4FZKX2oviXsKn5AlfZBmo3kmJV0BzWPHNUUe3yEwcFndrbujwSl3e7EXUV JULMetP+705foQtE1R9W6K3+Npwq0bOyolcXSYZw+66uywkuh46YwucJLZoCWfA1wDr4 X3fHVb9yeREyNXdW/nFEpZ1TitV/3UZEWyFJo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=1zpzcY0T0Cj5u7rB7IIVC94nrqBpp2YofBCKlh1MQJM=; b=qHGr3SK+hKrTJCx40cTdk7IwIVVFyF4DWdJu/MpSsVCaZscils8iUdqZLGd4qJInq9 jGrZ4AYuPdFEDVPXF5NUL7n+z7pRtgUcPTICPxQM/wVTphzr2Pnc0K4TMTgPB0tLzkj3 jOiXRrSmWQ4Xu0PJB4oTtiHZQfTFD8KuIJIjzA7N6sQCzN2ukeI7qwTkNNTZNY/YduYE m/FnKzBethlgVwO+5VTA5HX8Qza+9K48E1QFtavVIrJqcJvlR3jLMOBC/AxOQO9ULyjI hGPNJyuOr3l2dQn/KuisMIqsP4htXQj71wGNHJLdjoCAAOEqICQ36rMw5prXW6FSMqY3 FXag== X-Gm-Message-State: APjAAAW+gatpaPtTJGLkMB9C0GDOTlu4qxWxP2/1aTSP8ErOUad59gol xXyQqVYHmKNwHy9jmUuXEoPaGe6F0NbH2Fd+HITQcQ== X-Google-Smtp-Source: APXvYqzs28oNhksiX5oA87Nmo36/qIyT45TNFXXYBgmYemtKcSx2FT0mkliy59HA+fsFvBq6dIDRAanPTqkT5YOcge8= X-Received: by 2002:a17:902:7e05:: with SMTP id b5mr53517498plm.127.1555019652804; Thu, 11 Apr 2019 14:54:12 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Marius Scurtescu Date: Thu, 11 Apr 2019 14:54:02 -0700 Message-ID: To: Dick Hardt Cc: SecEvent , Yaron Sheffer , Annabelle Richard , Mark Dobrinic Content-Type: multipart/alternative; boundary="0000000000000664fb0586483a4f" Archived-At: Subject: Re: [Id-event] WG Last Call consensus for SET Push Delivery X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Apr 2019 21:54:20 -0000 --0000000000000664fb0586483a4f Content-Type: text/plain; charset="UTF-8" Great news! I can also look at Mark's feedback and propose a PR over the weekend. On Thu, Apr 11, 2019 at 2:32 PM Dick Hardt wrote: > Hello WG > > Besides addressing the mainly editorial feedback from Mark (thanks!), it > looks like we have gotten rough consensus for Last Call of > draft-ietf-secevent-http-push-05 as a number of additional people have > posted +1s. > > Yaron has graciously volunteered to be the Document Shepherd. > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --0000000000000664fb0586483a4f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Great news!

I can also look at Mark'= ;s feedback and propose a PR over the=C2=A0weekend.

On Thu, Apr 11, 20= 19 at 2:32 PM Dick Hardt <dick.h= ardt@gmail.com> wrote:
Hello WG

Besides addressing the ma= inly editorial feedback from Mark (thanks!), it looks like we have gotten r= ough consensus for Last Call of draft-ietf-secevent-http-push-05 as a numbe= r of additional people have posted=C2=A0+1s.

Yaron= has graciously volunteered to be the Document Shepherd.=C2=A0
<= /div>

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--0000000000000664fb0586483a4f-- From nobody Thu Apr 11 14:55:16 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32A9B120606 for ; Thu, 11 Apr 2019 14:55:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lgBlsDxg7meU for ; Thu, 11 Apr 2019 14:55:13 -0700 (PDT) Received: from mail-pl1-x62c.google.com (mail-pl1-x62c.google.com [IPv6:2607:f8b0:4864:20::62c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B9731205FF for ; Thu, 11 Apr 2019 14:55:11 -0700 (PDT) Received: by mail-pl1-x62c.google.com with SMTP id bf11so4019030plb.12 for ; Thu, 11 Apr 2019 14:55:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=UENy2ZN7CNiwXEq2AhnKMl4n3pExxU3iX5dSV1lWseM=; b=gOEvjmZt+TleezBhywTfcfxSLDmb6LSuPAycl8LoN3Fc8q6pTje7qkB375h0FQM+RZ NzjZJDO2B1WOfXDE3Av9zbWS1Vq2KNrENoPpyKrP4NLrjIiFUdhon5nIk02ZomoZXTx6 BxQ0c6BsLaL9wmxMxHMTpgVrc89NrVcN1YiHAuezwyayZmvE/S3GbxEcbGA7SlIv7g+6 QQwqy8x7CRrzqZNp1GtKFBzfnvsu0w1yB88EsI1YGQ4PnOTZI3RH/Y7dBKJJLk2SHk/1 /S8IYFEsMMjxTvG4N2hzA6g7wXdb+zMjwB5vu7BqqRX28BT2UdZwC72TDvK030pqnc05 Mg5w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=UENy2ZN7CNiwXEq2AhnKMl4n3pExxU3iX5dSV1lWseM=; b=lhm4um9JPPe0uJolUsisuGjVPBw2u7TN4FEl+iVs3g0c8rOylj72EdO9pEWxKfTn4s FNUXwpA73bnIsVVHXZvc/YfvxOSR1AxEkJu5KmDqp32uleNSdlvkwQ9tufwricr8i9vs mxw8LyJ1IzGS6gbi7sW14gjOLGmnBSKwHeDztpsL/cSg5bZ+k3/mCr8WseNjS5GiDyCY dxxXBq/hPeDiJvqVZ8agNibSc1nsE1Vp7wkMR0aHBedqK/j3sfc9mWx+Pc0Tm1hG5xnU oOXF176lsmIaPHb0D4IEKgVVPkNlfRSsDQbvPRZ4EMGQNqZinEMf5lLZTAL+du05tHh8 /Xwg== X-Gm-Message-State: APjAAAWmfqz40iCBUBaJSkpXfkftY3glZeSLe7Gfk5iYkwfw3SV7bz9x ZRihF6XKIfue0SehGVUYf2ETSPStMWwFLodLwO8= X-Google-Smtp-Source: APXvYqxuNpKGRp40XXfDGnaDSMXpr6rZ5d2bXQ1Acn8Xl86O7vB8AqOuCYJoR7EVpcfaJGqx85CLgaYBdAL0m2kbSzg= X-Received: by 2002:a17:902:8483:: with SMTP id c3mr36184121plo.19.1555019710715; Thu, 11 Apr 2019 14:55:10 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Dick Hardt Date: Thu, 11 Apr 2019 14:54:59 -0700 Message-ID: To: Marius Scurtescu Cc: SecEvent , Yaron Sheffer , Annabelle Richard , Mark Dobrinic Content-Type: multipart/alternative; boundary="00000000000079ddb80586483dad" Archived-At: Subject: Re: [Id-event] WG Last Call consensus for SET Push Delivery X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Apr 2019 21:55:15 -0000 --00000000000079ddb80586483dad Content-Type: text/plain; charset="UTF-8" That would be great Marius, thanks! On Thu, Apr 11, 2019 at 2:54 PM Marius Scurtescu < marius.scurtescu@coinbase.com> wrote: > Great news! > > I can also look at Mark's feedback and propose a PR over the weekend. > > On Thu, Apr 11, 2019 at 2:32 PM Dick Hardt wrote: > >> Hello WG >> >> Besides addressing the mainly editorial feedback from Mark (thanks!), it >> looks like we have gotten rough consensus for Last Call of >> draft-ietf-secevent-http-push-05 as a number of additional people have >> posted +1s. >> >> Yaron has graciously volunteered to be the Document Shepherd. >> >> _______________________________________________ >> Id-event mailing list >> Id-event@ietf.org >> https://www.ietf.org/mailman/listinfo/id-event >> > --00000000000079ddb80586483dad Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
That would be great Marius, thanks!

On Thu, Apr 11, 2019 at= 2:54 PM Marius Scurtescu <marius.scurtescu@coinbase.com> wrote:
Great news!

I can also look at Mark's feedback and propose a PR over the=C2= =A0weekend.

On Thu, Apr 11, 2019 at 2:32 PM Dick Hardt <dick.hardt@gmail.com>= wrote:
Hello WG

Besides addressing the mainly editoria= l feedback from Mark (thanks!), it looks like we have gotten rough consensu= s for Last Call of draft-ietf-secevent-http-push-05 as a number of addition= al people have posted=C2=A0+1s.

Yaron has gracious= ly volunteered to be the Document Shepherd.=C2=A0

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--00000000000079ddb80586483dad-- From nobody Fri Apr 12 04:34:20 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8536D1202A1 for ; Fri, 12 Apr 2019 04:34:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.999 X-Spam-Level: X-Spam-Status: No, score=-0.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u-o8wqaQqH_O for ; Fri, 12 Apr 2019 04:34:17 -0700 (PDT) Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com [IPv6:2a00:1450:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B498912028F for ; Fri, 12 Apr 2019 04:34:16 -0700 (PDT) Received: by mail-wm1-x335.google.com with SMTP id y197so10602359wmd.0 for ; Fri, 12 Apr 2019 04:34:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=11WMWwCsxRoYxUjueB2n83uysvA1z3TLWznMPIt2KtU=; b=C4knzXOdmpngIhbvnQcXiTiCaR+XGI+GbQo+SDuTfJAw+hrh0qhum/bHuJMjruzaWU m38kEABwrjM/svVmhU58bM1fXkz/HbOyJht17CQxfIGI37DyBqTsGISe7iFjsbt9vU5S scTps3aKSZk0FGxlyPr+BTwipCegCFOTpZihdi1I6DORh/nICA5SY2sM1FQ95kgNohuy 1r8B3Q4aFhR6MKzWxSDeLQc9mp9kFQNfU0NrBCGI9YNzX0IgdNVTPyjJn2D54RIqS0Q/ JP87BYyOBvl/vY3k4XLA6Y6Wt6rvdnsWJJX1s54qBPXdgH3ceAverQNwGxmr9qBUrM2r yCgQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=11WMWwCsxRoYxUjueB2n83uysvA1z3TLWznMPIt2KtU=; b=ASCQa1ms64m8NZR5szvHsQfrjaAH9mb1Cu0lSHlt0+3M+RRrMUl4a5CGZN0FbPNeOv lcd2QBR13HRWJaiiF0ivnathoAgEYLXQHcxcOkCWoxFjgn9KEDo2D0NxiexmSodzeY4o rVwscSF1rQlayx9kKnaJ6ECn4a0kdQxM9GkWn+s8Ne0+Qv9D1v3Jq2z423U+DSWriP8j Nj2TExHzksmRPwbDOqSPxiWuOfXK3kpZ+yFIl/zo+l1apxFJHxtig6mPwcvuYCBed0Bo 8goZW+wZvM4vPmglDikhu/2L64Yo5Vc48wYNO+4e+Sku4aSHC98kUuozWhqWognJiI1F 4cAg== X-Gm-Message-State: APjAAAXQSrfc4ebk/ZQXMFdT+HK/QjcPO/pUFPTXI3JK62FLj8tvQJ2O c8pliyUcGUVOKcL1h1kfZxY= X-Google-Smtp-Source: APXvYqzdCWFPUKx4/Rld/aIB4r+u/JlvxHKAIpR5pM9P0kJ2pGfmDSISwZisxQFxpSqxlUVSdUjb8g== X-Received: by 2002:a1c:f115:: with SMTP id p21mr10491402wmh.93.1555068855290; Fri, 12 Apr 2019 04:34:15 -0700 (PDT) Received: from [10.0.0.147] (bzq-109-66-94-12.red.bezeqint.net. [109.66.94.12]) by smtp.gmail.com with ESMTPSA id x205sm11157688wmg.9.2019.04.12.04.34.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 12 Apr 2019 04:34:14 -0700 (PDT) To: Dick Hardt , Marius Scurtescu Cc: SecEvent , Annabelle Richard , Mark Dobrinic References: From: Yaron Sheffer Message-ID: Date: Fri, 12 Apr 2019 14:34:10 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Id-event] WG Last Call consensus for SET Push Delivery X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Apr 2019 11:34:19 -0000 Marius, while you are at it, please update the JSON normative reference from RFC 7159 to RFC 8259 (this is flagged by the ID Nits tool). Thanks, Yaron On 12/04/2019 0:54, Dick Hardt wrote: > That would be great Marius, thanks! > > On Thu, Apr 11, 2019 at 2:54 PM Marius Scurtescu > > > wrote: > > Great news! > > I can also look at Mark's feedback and propose a PR over the weekend. > > On Thu, Apr 11, 2019 at 2:32 PM Dick Hardt > wrote: > > Hello WG > > Besides addressing the mainly editorial feedback from Mark > (thanks!), it looks like we have gotten rough consensus for Last > Call of draft-ietf-secevent-http-push-05 as a number of > additional people have posted +1s. > > Yaron has graciously volunteered to be the Document Shepherd. > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > From nobody Fri Apr 12 05:44:49 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF15D12047B for ; Fri, 12 Apr 2019 05:44:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.276 X-Spam-Level: X-Spam-Status: No, score=-1.276 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vkOQh7xspcGX for ; Fri, 12 Apr 2019 05:44:46 -0700 (PDT) Received: from mail-wr1-x42a.google.com (mail-wr1-x42a.google.com [IPv6:2a00:1450:4864:20::42a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AA76120373 for ; Fri, 12 Apr 2019 05:44:46 -0700 (PDT) Received: by mail-wr1-x42a.google.com with SMTP id r4so11738073wrq.8 for ; Fri, 12 Apr 2019 05:44:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-language:content-transfer-encoding; bh=xEiMEAxkguK7RYKiXMXPYH4IVrlvc9gDu6MQz2EQqDw=; b=dJVPLlQ1+YnvYiSQyYUfEz6AulZjx6rW7JS9FKQ3EpwaMFPzYHXBXufJ1+jMHOU5Ps N01lGXafF0W3E7kZfwOKlv/WglBUOjWrROWOC8O8UgiHGkTNavyNNPhHceiMWIh/YJUK Rny56tRMVqvcI7F9q0SV8wrvULrYVGOg0Np2fwkzzD44dxJT8ADkvotR4d4lRrK89nAa V3CgBAFw66Qhs1IGZ2unD9QlR+Jh6rI7a6YuQ9mFVfMp6vdf9Rb+tT+xFD3Wfe3Tunpd stp/CgDj3XcfOS2ZERqSomcsfVQAGtEzf246LiS5sss1510P/vTq/YELkQhxN0qVaLfa izXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=xEiMEAxkguK7RYKiXMXPYH4IVrlvc9gDu6MQz2EQqDw=; b=TvmpB4Co6kJWpESwXfuqgNcPPzGhJrzbEPZjjg4tioPm57MzpmmXWPcBkybGs9KS7u R0pATdlMihc4bIhb1bHugMKJN8dfEhVDX75DbL8X95PYz7MCs49VPIJdaJ/mPtT494tS ufOnH6qB/nnUMnH9NWyxl8pS5Z5Ps0M+/a8XcnSAVm/7Wmzpi1FocL9pE7J4jgAld58s ctJtC073ZuVqnN39ay9VRYQ42YsCWqCzlKxTiwUXglk4ZwJqXU+o4mRxKhlthQq93Utr 0Ko89ixlkz9FAVddg/YMjv0yh02VGEU8ZOrFRNIJqNWUEke+a0fHJtyeVY/ypZuNK6Ku u3zw== X-Gm-Message-State: APjAAAXHM5+7kn9rGAJ2Ha4hSJ3guSwmW8o5xae5JYlQ5OxCiJTIXsN8 Q/HMNEEL3rphO/jCS03ObDO+gcz8 X-Google-Smtp-Source: APXvYqxDVpJ4scQH1NQOA32Iclnk+u+1EVTqKe6LTMGnWEEx/WXevVdwOPAcIPtAiXQSwm/2HCit/A== X-Received: by 2002:adf:eed1:: with SMTP id a17mr36815220wrp.268.1555073084361; Fri, 12 Apr 2019 05:44:44 -0700 (PDT) Received: from [10.0.0.147] (bzq-109-66-94-12.red.bezeqint.net. [109.66.94.12]) by smtp.gmail.com with ESMTPSA id s203sm12670117wmf.14.2019.04.12.05.44.43 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 12 Apr 2019 05:44:43 -0700 (PDT) To: SecEvent From: Yaron Sheffer Message-ID: <40c0d06d-2df5-e776-0ec3-142358d91086@gmail.com> Date: Fri, 12 Apr 2019 15:44:42 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: [Id-event] Push delivery - shepherd review X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Apr 2019 12:44:48 -0000

There's always one more nit...

  • 1.1: this documents -> this document
  • 2: i.e., return an "access_denied" error response -> i.e., return an error response such as "access_denied" [because rejection can result in other responses]
  • 2.3: detects an error parsing or validating a SET transmitted in a SET Transmission Request -> detects an error parsing, validating or authenticating a SET transmitted in a SET Transmission Request [because all later examples use status code 400 for this rather than 401, and this is an important enough case to be stated  normatively].
  • 5.2: PII: expand the acronym.
  • 5.4: "then the SET Transmitter SHOULD sign the SET in accordance with [RFC7515] and/or encrypt it using authenticated encryption in accordance with [RFC7516]." The second half of this sentence is incorrect. JWE with RSA (encrypted to the Recipient) and AES-GCM does NOT authenticate the Transmitter. It ensures message integrity but not authenticity.
  • 7.1.1: error_code: please review again the ASCII ranges, or better yet, spell out the allowed characters. For example, 0x20 is "space" which we probably don't want.

Thanks,

    Yaron

From nobody Fri Apr 12 05:57:54 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE470120711 for ; Fri, 12 Apr 2019 05:57:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=coinbase.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s4kD1zYVZCkP for ; Fri, 12 Apr 2019 05:57:44 -0700 (PDT) Received: from mail-pg1-x534.google.com (mail-pg1-x534.google.com [IPv6:2607:f8b0:4864:20::534]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 306F412074C for ; Fri, 12 Apr 2019 05:57:44 -0700 (PDT) Received: by mail-pg1-x534.google.com with SMTP id d31so5178207pgl.7 for ; Fri, 12 Apr 2019 05:57:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coinbase.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=gwcy8q7vBCiPEXS7W/iYojtDgSLzN4HI4s3mMfTIo5E=; b=VDpAoFWcxWQ5obUfw1XGQBhyN9NWLXvJ6xrvvxPBfw+sKyBBaE56MFXM6iyaGtEQkY DNTSNZfXzoFjG8/zzaB6jfW9BhPawoOS6gabaYTt/knQq6xH/1w5hQFsHfdisbmyBPi1 ut2Ziy9fm6Nou9hgIT0B7IsgCxRWllaxEubcc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=gwcy8q7vBCiPEXS7W/iYojtDgSLzN4HI4s3mMfTIo5E=; b=C6h3DDK69d5C/19Ojkh1RjIaN8rK+AO2qNo26g6jfeqYsZPEvnKLTYkioNuA6O+oqm /9Jwk2s/SRhQ/Rjx+Y5xj8mOC40y74qyaCNbF2p4P3mahb5Y/9nGxIrohRi6Yf7oqpvv TF4WGg2LanJnW3IB9jphml6e1TuB52Ln7BVup+JASda5oZowr9gSUaoO3m6Dj9eBSjUh mNicIIGtG1qdui5cm9s5R/61rnlD+LqfWCV8/rEX2HoKJGhSRxbpHzMDldV4JCA4s2XQ coGnjme7NF/TAoy8GGjQgvp7mcgkTGhSY3VDRAy0KT7OnISEdbo457Hd5VhiSpGa6/eK nxGw== X-Gm-Message-State: APjAAAVY9k3ZEkVd+sEzU3oEwjue4xYwOxWYys3HiVoOLpaBE4HzEHXr M7KuHkq3cKzG2N02sjFSNhlUtJ1q6KIJY6HlN4CDPw== X-Google-Smtp-Source: APXvYqzu56jkkIj6VsNUhbYsIgXWTMLNrmZoJ0480rD/zueN8RVlvg2ZiCrNFDgEUN8mOPySM84W7tnPdAUFlkMtNMw= X-Received: by 2002:a63:9dc4:: with SMTP id i187mr49900792pgd.259.1555073863347; Fri, 12 Apr 2019 05:57:43 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Marius Scurtescu Date: Fri, 12 Apr 2019 05:57:30 -0700 Message-ID: To: Yaron Sheffer Cc: Dick Hardt , SecEvent , Annabelle Richard , Mark Dobrinic Content-Type: multipart/alternative; boundary="00000000000039a228058654d958" Archived-At: Subject: Re: [Id-event] WG Last Call consensus for SET Push Delivery X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Apr 2019 12:57:52 -0000 --00000000000039a228058654d958 Content-Type: text/plain; charset="UTF-8" Will do. On Fri, Apr 12, 2019, 4:34 AM Yaron Sheffer wrote: > Marius, while you are at it, please update the JSON normative reference > from RFC 7159 to RFC 8259 (this is flagged by the ID Nits tool). > > Thanks, > Yaron > > On 12/04/2019 0:54, Dick Hardt wrote: > > That would be great Marius, thanks! > > > > On Thu, Apr 11, 2019 at 2:54 PM Marius Scurtescu > > > > > wrote: > > > > Great news! > > > > I can also look at Mark's feedback and propose a PR over the weekend. > > > > On Thu, Apr 11, 2019 at 2:32 PM Dick Hardt > > wrote: > > > > Hello WG > > > > Besides addressing the mainly editorial feedback from Mark > > (thanks!), it looks like we have gotten rough consensus for Last > > Call of draft-ietf-secevent-http-push-05 as a number of > > additional people have posted +1s. > > > > Yaron has graciously volunteered to be the Document Shepherd. > > > > _______________________________________________ > > Id-event mailing list > > Id-event@ietf.org > > https://www.ietf.org/mailman/listinfo/id-event > > > --00000000000039a228058654d958 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Will do.

On Fri, Apr 12, 2019, 4:34 AM Yaron Sheffer <<= a href=3D"mailto:yaronf.ietf@gmail.com">yaronf.ietf@gmail.com> wrote= :
Marius, while you are at it, plea= se update the JSON normative reference
from RFC 7159 to RFC 8259 (this is flagged by the ID Nits tool).

Thanks,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Yaron

On 12/04/2019 0:54, Dick Hardt wrote:
> That would be great Marius, thanks!
>
> On Thu, Apr 11, 2019 at 2:54 PM Marius Scurtescu
> <marius.scurtescu@coinbase.com <mailto:marius.scurtescu@coinbase.com>>
> wrote:
>
>=C2=A0 =C2=A0 =C2=A0Great news!
>
>=C2=A0 =C2=A0 =C2=A0I can also look at Mark's feedback and propose = a PR over the=C2=A0weekend.
>
>=C2=A0 =C2=A0 =C2=A0On Thu, Apr 11, 2019 at 2:32 PM Dick Hardt <di= ck.hardt@gmail.com
>=C2=A0 =C2=A0 =C2=A0<mailto:dick.hardt@gmail.com>> wrote= :
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Hello WG
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Besides addressing the mainly editori= al feedback from Mark
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0(thanks!), it looks like we have gott= en rough consensus for Last
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Call of draft-ietf-secevent-http-push= -05 as a number of
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0additional people have posted=C2=A0+1= s.
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Yaron has graciously volunteered to b= e the Document Shepherd.
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0_____________________________________= __________
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Id-event mailing list
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Id-event@ietf.org <mailto:Id-eve= nt@ietf.org>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https= ://www.ietf.org/mailman/listinfo/id-event
>
--00000000000039a228058654d958-- From nobody Fri Apr 12 11:45:36 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 974BA1204AE for ; Fri, 12 Apr 2019 11:45:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hm2TkOBbAIVW for ; Fri, 12 Apr 2019 11:45:32 -0700 (PDT) Received: from smtp-fw-2101.amazon.com (smtp-fw-2101.amazon.com [72.21.196.25]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8525F120486 for ; Fri, 12 Apr 2019 11:45:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1555094731; x=1586630731; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=fLbAvMlFKYNRSvGYaCQ7Xq0csi0o3IFDdKA6hm+MlH4=; b=q47556OtWnyMwUbcAJXMzThO2YMLmUKN/V7/zfbUSbHIl3fyAayhlSn5 HDnwKwpYzvJffMwrBJ6aqOZvfrkypvjoCZEVFZfaQm/v/xdsXNYfHv74v 2+T6T/g3buv5d7vcLeC7Un3M+Eoyv2p0D3OzXFQVWsRO8IecOdKF8jpmm w=; X-IronPort-AV: E=Sophos;i="5.60,342,1549929600"; d="scan'208,217";a="727722806" Received: from iad6-co-svc-p1-lb1-vlan2.amazon.com (HELO email-inbound-relay-2a-6e2fc477.us-west-2.amazon.com) ([10.124.125.2]) by smtp-border-fw-out-2101.iad2.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 12 Apr 2019 18:45:29 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198]) by email-inbound-relay-2a-6e2fc477.us-west-2.amazon.com (8.14.7/8.14.7) with ESMTP id x3CIjSiO042873 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 12 Apr 2019 18:45:28 GMT Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 12 Apr 2019 18:45:27 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Fri, 12 Apr 2019 18:45:27 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1367.000; Fri, 12 Apr 2019 18:45:26 +0000 From: "Richard Backman, Annabelle" To: Dick Hardt , Mark Dobrinic CC: Yaron Sheffer , SecEvent Thread-Topic: [Id-event] Review of draft-ietf-secevent-http-push-05 Thread-Index: AQHU5IutOZUVrVTrJESXp7DKtzB1gKY3jIAAgAD02QA= Date: Fri, 12 Apr 2019 18:45:26 +0000 Message-ID: <6FECBDD3-DE6B-4050-BBD8-E40C46475A21@amazon.com> References: <71b9d281-46f9-8bb4-3524-211e5ab7fa55@curity.io> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.0.180812 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.161.23] Content-Type: multipart/alternative; boundary="_000_6FECBDD3DE6B4050BBD8E40C46475A21amazoncom_" MIME-Version: 1.0 Precedence: Bulk Archived-At: Subject: Re: [Id-event] Review of draft-ietf-secevent-http-push-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Apr 2019 18:45:35 -0000 --_000_6FECBDD3DE6B4050BBD8E40C46475A21amazoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGUgcmV2aWV3LCBNYXJrISBbcmljaGFubmFdUmVzcG9uc2VzIGlubGluZVsv cmljaGFubmFdLg0KDQotLQ0KQW5uYWJlbGxlIFJpY2hhcmQgQmFja21hbg0KQVdTIElkZW50aXR5 DQoNCg0KRnJvbTogSWQtZXZlbnQgPGlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFs ZiBvZiBEaWNrIEhhcmR0IDxkaWNrLmhhcmR0QGdtYWlsLmNvbT4NCkRhdGU6IFRodXJzZGF5LCBB cHJpbCAxMSwgMjAxOSBhdCAyOjA5IFBNDQpUbzogTWFyayBEb2JyaW5pYyA8bWFyay5kb2JyaW5p Y0BjdXJpdHkuaW8+DQpDYzogWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPiwg IlJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIiA8cmljaGFubmFAYW1hem9uLmNvbT4sIFNlY0V2 ZW50IDxpZC1ldmVudEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbSWQtZXZlbnRdIFJldmlldyBv ZiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wNQ0KDQpNYXJrOiB0aGFua3MgZm9yIHRo ZSByZXZpZXcgYW5kIGZlZWRiYWNrDQoNCkFubmFiZWxsZTogaGF2ZSB5b3UgaGFkIGEgY2hhbmNl IHRvIHJldmlldyB0aGUgZmVlZGJhY2s/DQoNCk9uIFdlZCwgTWFyIDI3LCAyMDE5IGF0IDM6NTUg QU0gTWFyayBEb2JyaW5pYyA8bWFyay5kb2JyaW5pY0BjdXJpdHkuaW88bWFpbHRvOm1hcmsuZG9i cmluaWNAY3VyaXR5LmlvPj4gd3JvdGU6DQpIaSBpZC1ldmVudCwNCg0KUmVhZCB0aHJvdWdoIGRy YWZ0IDA1LCBhbmQgaGVyZSdzIHNvbWUgb2YgbXkgZmluZGluZ3MuIFdpdGggdGhlDQpkaXNjbGFp bWVyIHRoYXQgSSBhbSBub3QgZnVsbHkgYXdhcmUgb2YgdGhlIGhpc3RvcmljYWwgZGlzY3Vzc2lv bnMgdGhhdA0KbGVkIHRvIHRoaXMgZHJhZnQuDQoNCi0gU2VjdGlvbiAyLjAgbWVudGlvbnM6ICJP bmNlIGEgU0VUIGhhcyBiZWVuIHZhbGlkYXRlZCBhbmQgcGVyc2lzdGVkLA0KdGhlIFNFVCBSZWNp cGllbnQgU0hPVUxEIGltbWVkaWF0ZWx5IHJldHVybiBhIHJlc3BvbnNlIC4uLiI7IHRoZXJlJ3Mg YQ0KYml0IG9mIGEgZ2FwIG9uIHdoYXQgdG8gZG8gd2hlbiB0aGUgU0VUIHdhcyB2YWxpZGF0ZWQg YnV0IGZhaWxlZCB0bw0KcGVyc2lzdC4gVGhlIGVycm9ycyBkb24ndCAoYW5kIHByb2JhYmx5IHNo b3VsZG4ndD8pIGNvdmVyIHRoaXMsIGFzIHRoaXMNCm1pZ2h0IGJlIGNvbnNpZGVyZWQgYnVzaW5l c3MgbG9naWMgb24gdGhlIHJlY2lwaWVudCdzIHBhcnQ/IFNlY3Rpb24gMi4yDQp0YWxrcyBhYm91 dCAiYXBwcm9wcmlhdGUgcmV0ZW50aW9uIHJlcXVpcmVtZW50cyIsIHdoaWNoIGlzIG5pY2VseQ0K Zm9ybXVsYXRlZC4gVGhpcyB0eXBlIG9mIHdvcmRpbmcgbWlnaHQgYmUgYWxzbyBzbnVjayBpbiB0 byB0aGUgbGFuZ3VhZ2UNCm9mIHNlY3Rpb24gMi4wJ3MgcGFyYWdyYXBoICgiT25jZSB0aGUgU0VU IGhhcyBiZWVuIHZhbGlkYXRlZCBhbmQNCnBlcnNpc3RlZCAuLiIpDQoNCltyaWNoYW5uYV0NClBl cnNpc3RlbmNlIGZhaWx1cmVzIGFyZSBubyBkaWZmZXJlbnQgZnJvbSBhbnkgb3RoZXIgYnVzaW5l c3MgbG9naWMgZmFpbHVyZSBvbiB0aGUgU0VUIFJlY2lwaWVudCBzaWRlLiBJbiBzdWNoIGNhc2Vz IHRoZSBTRVQgUmVjaXBpZW50IHdvdWxkIHJldHVybiBhIDUwMCwgYXMgYWxsb3dlZCBmb3IgYnkg dGhlIGZpcnN0IHBhcmFncmFwaCBvZiAyLjM6DQoNCkluIHRoZSBldmVudCBvZiBhIGdlbmVyYWwg SFRUUCBlcnJvciBjb25kaXRpb24sIHRoZSBTRVQgUmVjaXBpZW50DQpTSE9VTEQgcmVzcG9uZCB3 aXRoIGFuIGFwcHJvcHJpYXRlIEhUVFAgU3RhdHVzIENvZGUgYXMgZGVmaW5lZCBpbg0KU2VjdGlv biA2IG9mIFtSRkM3MjMxXS4NCg0KVGhlIHBhcmFncmFwaCBpbiAyLjAgYmVmb3JlIHRoZSBvbmUg eW91IHF1b3RlIHJlY29tbWVuZHMgdGhlIFNFVCBSZWNpcGllbnQgcGVyc2lzdCB0aGUgU0VUIOKA nGluIGEgd2F5IHRoYXQgaXMgc3VmZmljaWVudCB0byBtZWV0IFt0aGVpcl0gcmVsaWFiaWxpdHkg cmVxdWlyZW1lbnRz4oCdLiBUaGlzIHNlZW1zIHRvIG1lIHRvIHByb3ZpZGUgdGhlIHNhbWUgZ3Vp ZGFuY2UgYXMgdGhlIHRleHQgaW4gMi4yOyBkbyB5b3UgZmVlbCB0aGF0IHNvbWV0aGluZyBpcyBt aXNzaW5nIG9yIHVuY2xlYXIgZnJvbSB0aGF0IHBhcmFncmFwaD8NClsvcmljaGFubmFdDQoNCi0g SXMgdGhlIGBkZXNjcmlwdGlvbmAgZmllbGQgaW4gdGhlIGVycm9yIHJlc3BvbnNlIFJFUVVJUkVE Pw0KDQpbcmljaGFubmFdDQpZZXMsIGJvdGggYGVycmAgYW5kIGBkZXNjcmlwdGlvbmAgYXJlIFJF UVVJUkVELiBUaGUgc2Vjb25kIHBhcmFncmFwaCBvZiAyLjMgY29udGFpbnMgdGhlIHRleHQ6DQoN CuKApnRoZSBib2R5IFtvZiB0aGUgZXJyb3IgcmVzcG9uc2VdIE1VU1QgYmUgYSBVVEYtOCBlbmNv ZGVkIEpTT04gW1JGQzcxNTldIG9iamVjdCBjb250YWluaW5nIHRoZSBmb2xsb3dpbmcgbmFtZS92 YWx1ZSBwYWlyczoNCg0K4oCmZm9sbG93ZWQgYnkgdGhlIGBlcnJgIGFuZCBgZGVzY3JpcHRpb24g cHJvcGVydHkgZGVmaW5pdGlvbnMuDQpbL3JpY2hhbm5hXQ0KDQotIElzIHRoZXJlIGEgcmVhc29u IHdoeSB0aGUgYGF1dGhlbnRpY2F0aW9uX2ZhaWxlZGAgZmFpbHVyZSByZXNwb25zZQ0Kc2hvdWxk IG5vdCByZXR1cm4gYSBIVFRQLzQwMSBVbmF1dGhvcml6ZWQgSFRUUCBzdGF0dXMgY29kZT8NCg0K W3JpY2hhbm5hXQ0KSFRUUCBzdGF0dXMgNDAxIHJlcXVpcmVzIGEgV1dXLUF1dGhlbnRpY2F0ZSBy ZXNwb25zZSBoZWFkZXIsIHdoaWNoIG1heSBvciBtYXkgbm90IGJlIGFwcHJvcHJpYXRlIGRlcGVu ZGluZyBvbiB0aGUgYXV0aGVudGljYXRpb24gbWV0aG9kKHMpIGluIHVzZSBieSB0aGUgU0VUIFJl Y2lwaWVudC4NClsvcmljaGFubmFdDQoNCi0gU2VjdGlvbiA1LjEgdGFsa3MgYWJvdXQgdGhlIFNF VCBJc3N1ZXIgYmVpbmcgYXV0aG9yaXplZCB0byBkZWxpdmVyIHRoZQ0KU0VUOyBzaG91bGQgdGhp cyBub3QgYmUgdGhlIFNFVCBUcmFuc21pdHRlcj8NCg0KW3JpY2hhbm5hXQ0KWWVzLCB0aGlzIHNo b3VsZCBzYXkg4oCcU0VUIFRyYW5zbWl0dGVy4oCdIGluc3RlYWQgb2Yg4oCcU0VUIElzc3VlcuKA nS4NClsvcmljaGFubmFdDQoNCi0gU2VjdGlvbiA1LjQgb24gYXV0aGVudGljYXRpbmcgcGVyc2lz dGVkIFNFVHM7IE5vdCBzdXJlIGlmIEkgdW5kZXJzdG9vZA0KdGhpcyBjb3JyZWN0bHksIGJ1dCBp ZiBhIFNFVCBUcmFuc21pdHRlciBjYW4gc2VuZCBhIFNFVCB0aGF0IHdhcyBpc3N1ZWQNCmJ5IGEg ZGlmZmVyZW50IFNFVCBJc3N1ZXIsIGhvdyB3b3VsZCB0aGUgc2lnbmF0dXJlIHZlcmlmaWNhdGlv biBrZXkgYmUNCnJlc29sdmVkIHRvIGF1dGhlbnRpY2F0ZSB0aGUgU0VUPyA1LjQgdGFsa3MgYWJv dXQgdGhlIFNFVCAqVHJhbnNtaXR0ZXIqDQpzaWduaW5nIHRoZSBTRVQsIHNob3VsZCB0aGlzIG5v dCBiZSB0aGUgU0VUICpJc3N1ZXIqPyBPciBpcyB0aGlzIG91dCBvZg0Kc2NvcGU/DQoNCltyaWNo YW5uYV0NClRlY2huaWNhbGx5LCBpdCBjb3VsZCBiZSBlaXRoZXIsIGUuZy4sIGlmIHRoZSBpc3N1 ZXIgaXNzdWVkIGFuIHVuc2lnbmVkLCB1bmVuY3J5cHRlZCBTRVQgYW5kIHByb3ZpZGVkIGl0IHRv IHRoZSB0cmFuc21pdHRlciwgdGhlIHRyYW5zbWl0dGVyIGNvdWxkIGVuY3J5cHQgdGhlIFNFVCAo Y3JlYXRpbmcgYSBuZXN0ZWQgSldUKSwgYW5kIHRoYXQgd291bGQgYWRkcmVzcyB0aGUgY29uY2Vy bnMgbGFpZCBvdXQgaW4gNS40LiBCdXQgb24gcmUtcmVhZGluZyA1LjQsIEkgdGhpbmsgdGhpcyBy ZXF1aXJlbWVudCBzaG91bGQgYmUgYXBwbGllZCB0byB0aGUgKlNFVCBSZWNpcGllbnQqLCBhcyB0 aGV5IGFyZSB0aGUgcGFydHkgdGhhdCBoYXMgdGhlIGRvd25zdHJlYW0gYXV0aGVudGljYXRpb24g cmVxdWlyZW1lbnRzIG5lY2Vzc2l0YXRpbmcgdGhpcyBiZWhhdmlvci4gVGhlIGxhc3QgcGFydCBv ZiB0aGUgbGFzdCBzZW50ZW5jZSBvZiA1LjQgc2hvdWxkIGJlIGNoYW5nZWQgdG8gc29tZXRoaW5n IGxpa2U6DQoNCuKApnRoZW4gdGhlIFNFVCBSZWNpcGllbnQgU0hPVUxEIGVuc3VyZSB0aGF0IHN1 Y2ggU0VUcyBoYXZlIGJlZW4gc2lnbmVkIGluIGFjY29yZGFuY2Ugd2l0aCBSRkM3NTE1IGFuZC9v ciBlbmNyeXB0ZWQgdXNpbmcgYXV0aGVudGljYXRlZCBlbmNyeXB0aW9uIGluIGFjY29yZGFuY2Ug d2l0aCBSRkM3NTE2Lg0KDQpbL3JpY2hhbm5hXQ0KDQpOaXRwaWNrczoNCi0gVGhlIHNlbnRlbmNl IGFib3ZlIHRoZSBleGFtcGxlcyAoZS5nLiBpbiBzZWN0aW9uIDIuMikgc2hvdWxkIGFsd2F5cw0K ZW5kIHdpdGggYSBjb2xvbiAnOicgKCJUaGUgZm9sbG93aW5nIGlzIC4uLiBhIFNFVDoiKSwgb3Ig ZW5kIHdpdGggYQ0KcGVyaW9kICcuJy4gRG9uJ3QgY2FyZSB3aGljaCwgYnV0IGxvb2tzIG5pY2Vy IGlmIGl0J3MgdGhlIHNhbWUNCmV2ZXJ5d2hlcmUuIEkgdGhpbmsgb25seSAyLjIgZmFsbHMgb3V0 IG9mIGxpbmUuDQoNCi0gVGhlIHRleHQgYWJvdmUgRmlndXJlIDUgc2F5cyAiU0VUIFJlY2VpdmVy Iiwgc2hvdWxkIGJlICJTRVQgUmVjaXBpZW50Ig0KDQpIb3BlIHRoaXMgaGVscHMgdG8gd3JhcCBp dCB1cCB0byBwdWJsaWNhdGlvbiA6KQ0KDQoNCi0tDQpSZWdhcmRzLA0KDQpNYXJrIERvYnJpbmlj DQpTb2Z0d2FyZSBFbmdpbmVlciBhbmQgSWRlbnRpdHkgU3BlY2lhbGlzdA0KQ3VyaXR5IEFCDQoN Cm1hcmsuZG9icmluaWNAY3VyaXR5LmlvPG1haWx0bzptYXJrLmRvYnJpbmljQGN1cml0eS5pbz4N Cnd3dy5jdXJpdHkuaW88aHR0cDovL3d3dy5jdXJpdHkuaW8+DQoNCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJZC1ldmVudCBtYWlsaW5nIGxpc3QNCklk LWV2ZW50QGlldGYub3JnPG1haWx0bzpJZC1ldmVudEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQNCg== --_000_6FECBDD3DE6B4050BBD8E40C46475A21amazoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <954FC0FFD35D164685FAA0099378CFE8@amazon.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiTVMgTWluY2hvIjsNCglwYW5vc2UtMToyIDIgNiA5IDQgMiA1IDgg MyA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3Nl LTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGli cmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseToiXEBNUyBNaW5jaG8iOw0KCXBhbm9zZS0xOjIgMiA2IDkgNCAyIDUgOCAzIDQ7fQ0K LyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5N c29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmss IHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVy bGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAs IGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm Ow0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6 ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7 c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVh ZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYg Y2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MgZm9yIHRo ZSByZXZpZXcsIE1hcmshIDxzcGFuIHN0eWxlPSJjb2xvcjojODIwMEMzIj5bcmljaGFubmFdUmVz cG9uc2VzIGlubGluZVsvcmljaGFubmFdPC9zcGFuPi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+LS0mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250 LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPkFubmFiZWxsZSBSaWNo YXJkIEJhY2ttYW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDssc2VyaWYiPkFXUyBJZGVudGl0eTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4g MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2NvbG9yOmJsYWNrIj5JZC1ldmVudCAmbHQ7aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9y ZyZndDsgb24gYmVoYWxmIG9mIERpY2sgSGFyZHQgJmx0O2RpY2suaGFyZHRAZ21haWwuY29tJmd0 Ozxicj4NCjxiPkRhdGU6IDwvYj5UaHVyc2RheSwgQXByaWwgMTEsIDIwMTkgYXQgMjowOSBQTTxi cj4NCjxiPlRvOiA8L2I+TWFyayBEb2JyaW5pYyAmbHQ7bWFyay5kb2JyaW5pY0BjdXJpdHkuaW8m Z3Q7PGJyPg0KPGI+Q2M6IDwvYj5ZYXJvbiBTaGVmZmVyICZsdDt5YXJvbmYuaWV0ZkBnbWFpbC5j b20mZ3Q7LCAmcXVvdDtSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSZxdW90OyAmbHQ7cmljaGFu bmFAYW1hem9uLmNvbSZndDssIFNlY0V2ZW50ICZsdDtpZC1ldmVudEBpZXRmLm9yZyZndDs8YnI+ DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtJZC1ldmVudF0gUmV2aWV3IG9mIGRyYWZ0LWlldGYtc2Vj ZXZlbnQtaHR0cC1wdXNoLTA1PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NYXJrOiB0aGFua3MgZm9yIHRoZSByZXZpZXcgYW5kIGZl ZWRiYWNrIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QW5u YWJlbGxlOiBoYXZlIHlvdSBoYWQgYSBjaGFuY2UgdG8gcmV2aWV3IHRoZSBmZWVkYmFjaz88bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gV2Vk LCBNYXIgMjcsIDIwMTkgYXQgMzo1NSBBTSBNYXJrIERvYnJpbmljICZsdDs8YSBocmVmPSJtYWls dG86bWFyay5kb2JyaW5pY0BjdXJpdHkuaW8iPm1hcmsuZG9icmluaWNAY3VyaXR5LmlvPC9hPiZn dDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAw aW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5IaSBpZC1ldmVudCw8YnI+DQo8YnI+DQpSZWFkIHRocm91Z2ggZHJhZnQgMDUs IGFuZCBoZXJlJ3Mgc29tZSBvZiBteSBmaW5kaW5ncy4gV2l0aCB0aGU8YnI+DQpkaXNjbGFpbWVy IHRoYXQgSSBhbSBub3QgZnVsbHkgYXdhcmUgb2YgdGhlIGhpc3RvcmljYWwgZGlzY3Vzc2lvbnMg dGhhdDxicj4NCmxlZCB0byB0aGlzIGRyYWZ0Ljxicj4NCjxicj4NCi0gU2VjdGlvbiAyLjAgbWVu dGlvbnM6ICZxdW90O09uY2UgYSBTRVQgaGFzIGJlZW4gdmFsaWRhdGVkIGFuZCBwZXJzaXN0ZWQs PGJyPg0KdGhlIFNFVCBSZWNpcGllbnQgU0hPVUxEIGltbWVkaWF0ZWx5IHJldHVybiBhIHJlc3Bv bnNlIC4uLiZxdW90OzsgdGhlcmUncyBhPGJyPg0KYml0IG9mIGEgZ2FwIG9uIHdoYXQgdG8gZG8g d2hlbiB0aGUgU0VUIHdhcyB2YWxpZGF0ZWQgYnV0IGZhaWxlZCB0bzxicj4NCnBlcnNpc3QuIFRo ZSBlcnJvcnMgZG9uJ3QgKGFuZCBwcm9iYWJseSBzaG91bGRuJ3Q/KSBjb3ZlciB0aGlzLCBhcyB0 aGlzPGJyPg0KbWlnaHQgYmUgY29uc2lkZXJlZCBidXNpbmVzcyBsb2dpYyBvbiB0aGUgcmVjaXBp ZW50J3MgcGFydD8gU2VjdGlvbiAyLjI8YnI+DQp0YWxrcyBhYm91dCAmcXVvdDthcHByb3ByaWF0 ZSByZXRlbnRpb24gcmVxdWlyZW1lbnRzJnF1b3Q7LCB3aGljaCBpcyBuaWNlbHk8YnI+DQpmb3Jt dWxhdGVkLiBUaGlzIHR5cGUgb2Ygd29yZGluZyBtaWdodCBiZSBhbHNvIHNudWNrIGluIHRvIHRo ZSBsYW5ndWFnZTxicj4NCm9mIHNlY3Rpb24gMi4wJ3MgcGFyYWdyYXBoICgmcXVvdDtPbmNlIHRo ZSBTRVQgaGFzIGJlZW4gdmFsaWRhdGVkIGFuZDxicj4NCnBlcnNpc3RlZCAuLiZxdW90Oyk8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNBRTAwRkYiPltyaWNoYW5u YV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6I0FFMDBGRiI+UGVyc2lzdGVuY2UgZmFpbHVyZXMgYXJlIG5vIGRpZmZlcmVudCBm cm9tIGFueSBvdGhlciBidXNpbmVzcyBsb2dpYyBmYWlsdXJlIG9uIHRoZSBTRVQgUmVjaXBpZW50 IHNpZGUuIEluIHN1Y2ggY2FzZXMgdGhlIFNFVCBSZWNpcGllbnQgd291bGQgcmV0dXJuIGEgNTAw LCBhcyBhbGxvd2VkIGZvciBieSB0aGUgZmlyc3QgcGFyYWdyYXBoIG9mIDIuMzo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0FF MDBGRiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojQUUwMEZGIj5JbiB0 aGUgZXZlbnQgb2YgYSBnZW5lcmFsIEhUVFAgZXJyb3IgY29uZGl0aW9uLCB0aGUgU0VUIFJlY2lw aWVudDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDoxMS41NXB0O3RleHQtaW5kZW50OjIzLjFwdCI+PHNwYW4gc3R5bGU9ImNvbG9y OiNBRTAwRkYiPlNIT1VMRCByZXNwb25kIHdpdGggYW4gYXBwcm9wcmlhdGUgSFRUUCBTdGF0dXMg Q29kZSBhcyBkZWZpbmVkIGluPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM0LjY1cHQ7dGV4dC1pbmRlbnQ6MS4zNXB0Ij48c3Bh biBzdHlsZT0iY29sb3I6I0FFMDBGRiI+U2VjdGlvbiA2IG9mIFtSRkM3MjMxXS48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0FF MDBGRiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiNBRTAwRkYiPlRoZSBwYXJhZ3JhcGggaW4gMi4wIGJlZm9yZSB0 aGUgb25lIHlvdSBxdW90ZSByZWNvbW1lbmRzIHRoZSBTRVQgUmVjaXBpZW50IHBlcnNpc3QgdGhl IFNFVCDigJxpbiBhIHdheSB0aGF0IGlzIHN1ZmZpY2llbnQgdG8gbWVldCBbdGhlaXJdIHJlbGlh YmlsaXR5IHJlcXVpcmVtZW50c+KAnS4gVGhpcyBzZWVtcyB0byBtZSB0byBwcm92aWRlIHRoZSBz YW1lIGd1aWRhbmNlDQogYXMgdGhlIHRleHQgaW4gMi4yOyBkbyB5b3UgZmVlbCB0aGF0IHNvbWV0 aGluZyBpcyBtaXNzaW5nIG9yIHVuY2xlYXIgZnJvbSB0aGF0IHBhcmFncmFwaD88bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0FF MDBGRiI+Wy9yaWNoYW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnI+DQotIElzIHRoZSBgZGVzY3JpcHRpb25gIGZpZWxkIGluIHRoZSBlcnJvciByZXNw b25zZSBSRVFVSVJFRD88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9y OiNBRTAwRkYiPltyaWNoYW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0FFMDBGRiI+WWVzLCBib3RoIGBlcnJgIGFuZCBg ZGVzY3JpcHRpb25gIGFyZSBSRVFVSVJFRC4gVGhlIHNlY29uZCBwYXJhZ3JhcGggb2YgMi4zIGNv bnRhaW5zIHRoZSB0ZXh0OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojQUUwMEZGIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjIuNXB0Ij48c3Bh biBzdHlsZT0iY29sb3I6I0FFMDBGRiI+4oCmdGhlIGJvZHkgW29mIHRoZSBlcnJvciByZXNwb25z ZV0gTVVTVCBiZSBhIFVURi04IGVuY29kZWQgSlNPTiBbUkZDNzE1OV0gb2JqZWN0IGNvbnRhaW5p bmcgdGhlIGZvbGxvd2luZyBuYW1lL3ZhbHVlIHBhaXJzOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMi41cHQiPjxzcGFuIHN0 eWxlPSJjb2xvcjojQUUwMEZGIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0FFMDBGRiI+4oCmZm9sbG93ZWQgYnkg dGhlIGBlcnJgIGFuZCBgZGVzY3JpcHRpb24gcHJvcGVydHkgZGVmaW5pdGlvbnMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNB RTAwRkYiPlsvcmljaGFubmFdPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGJyPg0KLSBJcyB0aGVyZSBhIHJlYXNvbiB3aHkgdGhlIGBhdXRoZW50aWNhdGlvbl9m YWlsZWRgIGZhaWx1cmUgcmVzcG9uc2U8YnI+DQpzaG91bGQgbm90IHJldHVybiBhIEhUVFAvNDAx IFVuYXV0aG9yaXplZCBIVFRQIHN0YXR1cyBjb2RlPzxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNBRTAwRkYiPltyaWNo YW5uYV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6I0FFMDBGRiI+SFRUUCBzdGF0dXMgNDAxIHJlcXVpcmVzIGEgV1dXLUF1dGhl bnRpY2F0ZSByZXNwb25zZSBoZWFkZXIsIHdoaWNoIG1heSBvciBtYXkgbm90IGJlIGFwcHJvcHJp YXRlIGRlcGVuZGluZyBvbiB0aGUgYXV0aGVudGljYXRpb24gbWV0aG9kKHMpIGluIHVzZSBieSB0 aGUgU0VUIFJlY2lwaWVudC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0FFMDBGRiI+Wy9yaWNoYW5uYV08bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6I0FFMDBG RiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBT ZWN0aW9uIDUuMSB0YWxrcyBhYm91dCB0aGUgU0VUIElzc3VlciBiZWluZyBhdXRob3JpemVkIHRv IGRlbGl2ZXIgdGhlPGJyPg0KU0VUOyBzaG91bGQgdGhpcyBub3QgYmUgdGhlIFNFVCBUcmFuc21p dHRlcj88YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojQUUwMEZGIj5bcmljaGFubmFdPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNBRTAwRkYiPlllcywg dGhpcyBzaG91bGQgc2F5IOKAnFNFVCBUcmFuc21pdHRlcuKAnSBpbnN0ZWFkIG9mIOKAnFNFVCBJ c3N1ZXLigJ0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiNBRTAwRkYiPlsvcmljaGFubmFdPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KLSBTZWN0aW9uIDUuNCBvbiBhdXRoZW50aWNh dGluZyBwZXJzaXN0ZWQgU0VUczsgTm90IHN1cmUgaWYgSSB1bmRlcnN0b29kPGJyPg0KdGhpcyBj b3JyZWN0bHksIGJ1dCBpZiBhIFNFVCBUcmFuc21pdHRlciBjYW4gc2VuZCBhIFNFVCB0aGF0IHdh cyBpc3N1ZWQ8YnI+DQpieSBhIGRpZmZlcmVudCBTRVQgSXNzdWVyLCBob3cgd291bGQgdGhlIHNp Z25hdHVyZSB2ZXJpZmljYXRpb24ga2V5IGJlPGJyPg0KcmVzb2x2ZWQgdG8gYXV0aGVudGljYXRl IHRoZSBTRVQ/IDUuNCB0YWxrcyBhYm91dCB0aGUgU0VUICpUcmFuc21pdHRlcio8YnI+DQpzaWdu aW5nIHRoZSBTRVQsIHNob3VsZCB0aGlzIG5vdCBiZSB0aGUgU0VUICpJc3N1ZXIqPyBPciBpcyB0 aGlzIG91dCBvZjxicj4NCnNjb3BlPzxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojQUUw MEZGIj5bcmljaGFubmFdPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNBRTAwRkYiPlRlY2huaWNhbGx5LCBpdCBjb3VsZCBiZSBl aXRoZXIsIGUuZy4sIGlmIHRoZSBpc3N1ZXIgaXNzdWVkIGFuIHVuc2lnbmVkLCB1bmVuY3J5cHRl ZCBTRVQgYW5kIHByb3ZpZGVkIGl0IHRvIHRoZSB0cmFuc21pdHRlciwgdGhlIHRyYW5zbWl0dGVy IGNvdWxkIGVuY3J5cHQgdGhlIFNFVCAoY3JlYXRpbmcgYSBuZXN0ZWQgSldUKSwgYW5kIHRoYXQg d291bGQgYWRkcmVzcw0KIHRoZSBjb25jZXJucyBsYWlkIG91dCBpbiA1LjQuIEJ1dCBvbiByZS1y ZWFkaW5nIDUuNCwgSSB0aGluayB0aGlzIHJlcXVpcmVtZW50IHNob3VsZCBiZSBhcHBsaWVkIHRv IHRoZSAqU0VUIFJlY2lwaWVudCosIGFzIHRoZXkgYXJlIHRoZSBwYXJ0eSB0aGF0IGhhcyB0aGUg ZG93bnN0cmVhbSBhdXRoZW50aWNhdGlvbiByZXF1aXJlbWVudHMgbmVjZXNzaXRhdGluZyB0aGlz IGJlaGF2aW9yLiBUaGUgbGFzdCBwYXJ0IG9mIHRoZSBsYXN0IHNlbnRlbmNlDQogb2YgNS40IHNo b3VsZCBiZSBjaGFuZ2VkIHRvIHNvbWV0aGluZyBsaWtlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojQUUwMEZGIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuNnB0Ij48c3BhbiBzdHlsZT0iY29sb3I6I0FFMDBGRiI+4oCmdGhlbiB0aGUgU0VU IFJlY2lwaWVudCBTSE9VTEQgZW5zdXJlIHRoYXQgc3VjaCBTRVRzIGhhdmUgYmVlbiBzaWduZWQg aW4gYWNjb3JkYW5jZSB3aXRoIFJGQzc1MTUgYW5kL29yIGVuY3J5cHRlZCB1c2luZyBhdXRoZW50 aWNhdGVkIGVuY3J5cHRpb24gaW4gYWNjb3JkYW5jZSB3aXRoIFJGQzc1MTYuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjZw dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiNBRTAwRkYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojQUUwMEZGIj5bL3Jp Y2hhbm5hXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4N Ck5pdHBpY2tzOjxicj4NCi0gVGhlIHNlbnRlbmNlIGFib3ZlIHRoZSBleGFtcGxlcyAoZS5nLiBp biBzZWN0aW9uIDIuMikgc2hvdWxkIGFsd2F5czxicj4NCmVuZCB3aXRoIGEgY29sb24gJzonICgm cXVvdDtUaGUgZm9sbG93aW5nIGlzIC4uLiBhIFNFVDomcXVvdDspLCBvciBlbmQgd2l0aCBhPGJy Pg0KcGVyaW9kICcuJy4gRG9uJ3QgY2FyZSB3aGljaCwgYnV0IGxvb2tzIG5pY2VyIGlmIGl0J3Mg dGhlIHNhbWU8YnI+DQpldmVyeXdoZXJlLiBJIHRoaW5rIG9ubHkgMi4yIGZhbGxzIG91dCBvZiBs aW5lLjxicj4NCjxicj4NCi0gVGhlIHRleHQgYWJvdmUgRmlndXJlIDUgc2F5cyAmcXVvdDtTRVQg UmVjZWl2ZXImcXVvdDssIHNob3VsZCBiZSAmcXVvdDtTRVQgUmVjaXBpZW50JnF1b3Q7PGJyPg0K PGJyPg0KSG9wZSB0aGlzIGhlbHBzIHRvIHdyYXAgaXQgdXAgdG8gcHVibGljYXRpb24gOik8YnI+ DQo8YnI+DQo8YnI+DQotLSA8YnI+DQpSZWdhcmRzLDxicj4NCjxicj4NCk1hcmsgRG9icmluaWM8 YnI+DQpTb2Z0d2FyZSBFbmdpbmVlciBhbmQgSWRlbnRpdHkgU3BlY2lhbGlzdDxicj4NCkN1cml0 eSBBQjxicj4NCjxicj4NCjxhIGhyZWY9Im1haWx0bzptYXJrLmRvYnJpbmljQGN1cml0eS5pbyIg dGFyZ2V0PSJfYmxhbmsiPm1hcmsuZG9icmluaWNAY3VyaXR5LmlvPC9hPjxicj4NCjxhIGhyZWY9 Imh0dHA6Ly93d3cuY3VyaXR5LmlvIiB0YXJnZXQ9Il9ibGFuayI+d3d3LmN1cml0eS5pbzwvYT48 YnI+DQo8YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xzxicj4NCklkLWV2ZW50IG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpJZC1ldmVu dEBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPklkLWV2ZW50QGlldGYub3JnPC9hPjxicj4NCjxh IGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaWQtZXZlbnQiIHRh cmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lkLWV2 ZW50PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_6FECBDD3DE6B4050BBD8E40C46475A21amazoncom_-- From nobody Sun Apr 14 10:11:49 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 205A012012F for ; Sun, 14 Apr 2019 10:11:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=coinbase.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cL2nYACUuN2Q for ; Sun, 14 Apr 2019 10:11:43 -0700 (PDT) Received: from mail-pg1-x533.google.com (mail-pg1-x533.google.com [IPv6:2607:f8b0:4864:20::533]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F16012011D for ; Sun, 14 Apr 2019 10:11:43 -0700 (PDT) Received: by mail-pg1-x533.google.com with SMTP id f6so7437412pgs.8 for ; Sun, 14 Apr 2019 10:11:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coinbase.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=CJIGuT69ZZGBRhr+2FeR0CzqwwMCOYE0Hp777T0XTHQ=; b=ONjqZGxGDI/drQ+r2/NJDkilwQg/u6smjIvg+6Z1LrFUZgQmgUazbnUV134p26Gp4J cmPXA6h0PEGpQ0qdy6DRcmAA6dJAgGR08rAvUbByVglmSZpm+mNy8GNo0+YCpOxn+u3v 3rVQxpucx0kxs7RKiRmHwOnyKXYYuT56Xd9fg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=CJIGuT69ZZGBRhr+2FeR0CzqwwMCOYE0Hp777T0XTHQ=; b=akS9MZH7NGeyU9G/ZLPdVigYbC0c2rh3QVTT/QK55UCs/eA5ZArxYQW5GQb/NeQrnw seVMPoVkmlYEjWIq7A77cLJ6rLFHHWeOGnIzGud6cD+GVIL6QJvGrPu1OS1aO0NEBHCX BKWzFGjEiHeELWI2Y6O2/Dx0LVWrYNVpeS22J4x+2h2M7dkdfYGfRgohiWy0aWFHbnO/ AJZlJd7F2VfJA+9OVfSp9MNY5mHyAmHbY4IKiLGAPwxmNVbjdTtVB4/9wkAv2wrPJXke qyzdxwfyzvIEGujWI5rJX6HJ8op7ROwZ16jy6ARAd9xuzuqGNXywr7+SwlNxlYWpEYmF UhPw== X-Gm-Message-State: APjAAAW7E4e3GMDKtCmIc3XxXxhEE6DNuENAxPoCPloselDt/5X8S7ic eJ0GwCT8ZG+U8hoqp4JltOOxIMBWrIKdQ2p7pRLwqA== X-Google-Smtp-Source: APXvYqzS56KKUbZi8os7HO8EjcVBT/hMqjB5YILIM26nyKdDNv+p4fjF1BKJZplYXj1hluElHdNtEhGcEbHv8T5Imgo= X-Received: by 2002:a62:2587:: with SMTP id l129mr70622190pfl.151.1555261902939; Sun, 14 Apr 2019 10:11:42 -0700 (PDT) MIME-Version: 1.0 References: <71b9d281-46f9-8bb4-3524-211e5ab7fa55@curity.io> <6FECBDD3-DE6B-4050-BBD8-E40C46475A21@amazon.com> In-Reply-To: <6FECBDD3-DE6B-4050-BBD8-E40C46475A21@amazon.com> From: Marius Scurtescu Date: Sun, 14 Apr 2019 10:11:31 -0700 Message-ID: To: "Richard Backman, Annabelle" Cc: Dick Hardt , Mark Dobrinic , Yaron Sheffer , SecEvent Content-Type: multipart/alternative; boundary="000000000000420e29058680a10c" Archived-At: Subject: Re: [Id-event] Review of draft-ietf-secevent-http-push-05 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Apr 2019 17:11:47 -0000 --000000000000420e29058680a10c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks for the feedback Mark and for the suggested edits Annabelle. I am incorporating the two suggested changes into a PR, along with other feedback. On Fri, Apr 12, 2019 at 11:45 AM Richard Backman, Annabelle wrote: > Thanks for the review, Mark! [richanna]Responses inline[/richanna]. > > > > -- > > Annabelle Richard Backman > > AWS Identity > > > > > > *From: *Id-event on behalf of Dick Hardt < > dick.hardt@gmail.com> > *Date: *Thursday, April 11, 2019 at 2:09 PM > *To: *Mark Dobrinic > *Cc: *Yaron Sheffer , "Richard Backman, Annabelle" > , SecEvent > *Subject: *Re: [Id-event] Review of draft-ietf-secevent-http-push-05 > > > > Mark: thanks for the review and feedback > > > > Annabelle: have you had a chance to review the feedback? > > > > On Wed, Mar 27, 2019 at 3:55 AM Mark Dobrinic > wrote: > > Hi id-event, > > Read through draft 05, and here's some of my findings. With the > disclaimer that I am not fully aware of the historical discussions that > led to this draft. > > - Section 2.0 mentions: "Once a SET has been validated and persisted, > the SET Recipient SHOULD immediately return a response ..."; there's a > bit of a gap on what to do when the SET was validated but failed to > persist. The errors don't (and probably shouldn't?) cover this, as this > might be considered business logic on the recipient's part? Section 2.2 > talks about "appropriate retention requirements", which is nicely > formulated. This type of wording might be also snuck in to the language > of section 2.0's paragraph ("Once the SET has been validated and > persisted ..") > > > > [richanna] > > Persistence failures are no different from any other business logic > failure on the SET Recipient side. In such cases the SET Recipient would > return a 500, as allowed for by the first paragraph of 2.3: > > > > In the event of a general HTTP error condition, the SET Recipient > > SHOULD respond with an appropriate HTTP Status Code as defined in > > Section 6 of [RFC7231]. > > > > The paragraph in 2.0 before the one you quote recommends the SET Recipien= t > persist the SET =E2=80=9Cin a way that is sufficient to meet [their] reli= ability > requirements=E2=80=9D. This seems to me to provide the same guidance as t= he text in > 2.2; do you feel that something is missing or unclear from that paragraph= ? > > [/richanna] > > > - Is the `description` field in the error response REQUIRED? > > > > [richanna] > > Yes, both `err` and `description` are REQUIRED. The second paragraph of > 2.3 contains the text: > > > > =E2=80=A6the body [of the error response] MUST be a UTF-8 encoded JSON [R= FC7159] > object containing the following name/value pairs: > > > > =E2=80=A6followed by the `err` and `description property definitions. > > [/richanna] > > > - Is there a reason why the `authentication_failed` failure response > should not return a HTTP/401 Unauthorized HTTP status code? > > [richanna] > > HTTP status 401 requires a WWW-Authenticate response header, which may or > may not be appropriate depending on the authentication method(s) in use b= y > the SET Recipient. > > [/richanna] > > > > - Section 5.1 talks about the SET Issuer being authorized to deliver the > SET; should this not be the SET Transmitter? > > [richanna] > > Yes, this should say =E2=80=9CSET Transmitter=E2=80=9D instead of =E2=80= =9CSET Issuer=E2=80=9D. > > [/richanna] > > > - Section 5.4 on authenticating persisted SETs; Not sure if I understood > this correctly, but if a SET Transmitter can send a SET that was issued > by a different SET Issuer, how would the signature verification key be > resolved to authenticate the SET? 5.4 talks about the SET *Transmitter* > signing the SET, should this not be the SET *Issuer*? Or is this out of > scope? > > [richanna] > > Technically, it could be either, e.g., if the issuer issued an unsigned, > unencrypted SET and provided it to the transmitter, the transmitter could > encrypt the SET (creating a nested JWT), and that would address the > concerns laid out in 5.4. But on re-reading 5.4, I think this requirement > should be applied to the *SET Recipient*, as they are the party that has > the downstream authentication requirements necessitating this behavior. T= he > last part of the last sentence of 5.4 should be changed to something like= : > > > > =E2=80=A6then the SET Recipient SHOULD ensure that such SETs have been si= gned in > accordance with RFC7515 and/or encrypted using authenticated encryption i= n > accordance with RFC7516. > > > > [/richanna] > > > Nitpicks: > - The sentence above the examples (e.g. in section 2.2) should always > end with a colon ':' ("The following is ... a SET:"), or end with a > period '.'. Don't care which, but looks nicer if it's the same > everywhere. I think only 2.2 falls out of line. > > - The text above Figure 5 says "SET Receiver", should be "SET Recipient" > > Hope this helps to wrap it up to publication :) > > > -- > Regards, > > Mark Dobrinic > Software Engineer and Identity Specialist > Curity AB > > mark.dobrinic@curity.io > www.curity.io > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --000000000000420e29058680a10c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks for the feedback Mark and for the suggested edits A= nnabelle.

I am incorporating the two suggested changes i= nto a PR, along with other feedback.

On Fri, Apr 12, 2019 at 11:45 AM = Richard Backman, Annabelle <richanna=3D40amazon.com@dmarc.ietf.org> wrote:

Thanks for the review, Mark! [richanna]Responses inline[/richanna].

=C2=A0

--=C2=A0

Annabelle Richard Backman

AWS Identity

=C2=A0

=C2=A0

From: = Id-event <id-event-bounces@ie= tf.org> on behalf of Dick Hardt <dick.hardt@gmail.com>
Date: Thursday, April 11, 2019 at 2:09 PM
To: Mark Dobrinic <mark.dobrinic@curity.io>
Cc: Yaron Sheffer <yaronf.ietf@gmail.com>, "Richard Backman, Annabell= e" <richan= na@amazon.com>, SecEvent <id-event@ietf.org>
Subject: Re: [Id-event] Review of draft-ietf-secevent-http-push-05

=C2=A0

Mark: thanks for the review and feedback <= /u>

=C2=A0

Annabelle: have you had a chance to review the feedb= ack?

=C2=A0

On Wed, Mar 27, 2019 at 3:55 AM Mark Dobrinic <mark.dobrinic@cu= rity.io> wrote:

Hi id-event,

Read through draft 05, and here's some of my findings. With the
disclaimer that I am not fully aware of the historical discussions that
led to this draft.

- Section 2.0 mentions: "Once a SET has been validated and persisted,<= br> the SET Recipient SHOULD immediately return a response ..."; there'= ;s a
bit of a gap on what to do when the SET was validated but failed to
persist. The errors don't (and probably shouldn't?) cover this, as = this
might be considered business logic on the recipient's part? Section 2.2=
talks about "appropriate retention requirements", which is nicely=
formulated. This type of wording might be also snuck in to the language
of section 2.0's paragraph ("Once the SET has been validated and persisted ..")

=C2=A0

[richanna]

Persistence fai= lures are no different from any other business logic failure on the SET Rec= ipient side. In such cases the SET Recipient would return a 500, as allowed= for by the first paragraph of 2.3:

=C2=A0

In the event of a general HTTP error condition, the SET Recipi= ent

SHOULD respond with an appropriate HTTP S= tatus Code as defined in

Section 6 of [RFC7231].

=C2=A0

The paragraph i= n 2.0 before the one you quote recommends the SET Recipient persist the SET= =E2=80=9Cin a way that is sufficient to meet [their] reliability requireme= nts=E2=80=9D. This seems to me to provide the same guidance as the text in 2.2; do you feel that something is missing or unclear from = that paragraph?

[/richanna]<= /u>


- Is the `description` field in the error response REQUIRED?<= /p>

=C2=A0

[richanna]

Yes, both `err`= and `description` are REQUIRED. The second paragraph of 2.3 contains the t= ext:

=C2=A0

=E2=80=A6the body [of the error response] MUST be a UTF-8 enc= oded JSON [RFC7159] object containing the following name/value pairs:

=C2=A0

=E2=80=A6follow= ed by the `err` and `description property definitions.=

[/richanna]<= /u>


- Is there a reason why the `authentication_failed` failure response
should not return a HTTP/401 Unauthorized HTTP status code?

[richanna]

HTTP status 401= requires a WWW-Authenticate response header, which may or may not be appro= priate depending on the authentication method(s) in use by the SET Recipien= t.

[/richanna]<= /u>

=C2=A0

- Section 5.1 talks about the SET Issuer being autho= rized to deliver the
SET; should this not be the SET Transmitter?

[richanna]

Yes, this shoul= d say =E2=80=9CSET Transmitter=E2=80=9D instead of =E2=80=9CSET Issuer=E2= =80=9D.

[/richanna]<= /u>


- Section 5.4 on authenticating persisted SETs; Not sure if I understood this correctly, but if a SET Transmitter can send a SET that was issued
by a different SET Issuer, how would the signature verification key be
resolved to authenticate the SET? 5.4 talks about the SET *Transmitter*
signing the SET, should this not be the SET *Issuer*? Or is this out of
scope?

[richanna]

Technically, it= could be either, e.g., if the issuer issued an unsigned, unencrypted SET a= nd provided it to the transmitter, the transmitter could encrypt the SET (c= reating a nested JWT), and that would address the concerns laid out in 5.4. But on re-reading 5.4, I think this requirem= ent should be applied to the *SET Recipient*, as they are the party that ha= s the downstream authentication requirements necessitating this behavior. T= he last part of the last sentence of 5.4 should be changed to something like:

=C2=A0

=E2=80=A6then the SET Recipient SHOULD ensure that such SETs = have been signed in accordance with RFC7515 and/or encrypted using authenti= cated encryption in accordance with RFC7516.

=C2=A0

[/richanna]<= /u>


Nitpicks:
- The sentence above the examples (e.g. in section 2.2) should always
end with a colon ':' ("The following is ... a SET:"), or = end with a
period '.'. Don't care which, but looks nicer if it's the s= ame
everywhere. I think only 2.2 falls out of line.

- The text above Figure 5 says "SET Receiver", should be "SE= T Recipient"

Hope this helps to wrap it up to publication :)


--
Regards,

Mark Dobrinic
Software Engineer and Identity Specialist
Curity AB

mark.dobrinic@= curity.io
www.curity.io

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--000000000000420e29058680a10c-- From nobody Sun Apr 14 11:52:14 2019 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A74F61201BE for ; Sun, 14 Apr 2019 11:52:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=coinbase.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ObuMkVIkohbP for ; Sun, 14 Apr 2019 11:52:11 -0700 (PDT) Received: from mail-pg1-x530.google.com (mail-pg1-x530.google.com [IPv6:2607:f8b0:4864:20::530]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 96A491201B8 for ; Sun, 14 Apr 2019 11:52:11 -0700 (PDT) Received: by mail-pg1-x530.google.com with SMTP id 85so7507421pgc.3 for ; Sun, 14 Apr 2019 11:52:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coinbase.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=wyG213E6r6lRnshDZ3QCp6oPPxPXkOnFFwIkRYI+XTQ=; b=Oa8G830r4+jTehs5cBOva8OSEeV2CsuwZxMoVyfxMqu8drO6XkEYqe8v3wfluuaMgz 2qBKR6cdydNdWMgSJvWX7h9DHJFCPXJVU3BKgG1+6hL2SGiBSkmeL1EMVRZSIjP5CL8w L2nrZMsBmYa1tOtsEWV/Vo8/69hNwHkC22CNs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=wyG213E6r6lRnshDZ3QCp6oPPxPXkOnFFwIkRYI+XTQ=; b=MTgXCxsnyIt00lJpULfvQSZRaUyj64Pw9RuU3/JGOZZFSFu1kiZKd/ww3KQlHqaIjo qmHiUARSSwWaGn1wBvksb8rxmxmUIjlKGQ0EC6fRXzoURsE+uQ2sZ5n9Pi6zC7Ypfxtp HTKxRnFEOz3shpjBhd6BjYe3GDjHqc0u6oYfeQlAFEkkehUhkj0H6XDzl1ERHjuwIi6e 4m8YgODyi5umhTWtmVtDDUYCzZywsen91TcltY4lyfgdju7FSH0+4vUL3jDXsPr6+iap z6dyE7DhgCuiMVSBujP249d3KpuUlBu0pvKmOjXNtgw9VrzTXWJXRdhxxq2lejGqjVpZ 03/g== X-Gm-Message-State: APjAAAW+pEDrxYTE871JltCeC+IRSKtPkFQLnCUjdW+WUTi/ln7XN0nX nXarF+enGoQIHCSvSxcmkr9p9i67QUuz0SG1U5yJBA== X-Google-Smtp-Source: APXvYqyfw21TAD8ZkRqUOvXsnaKgsIKyVK5L4vCNjwg7UtIJuE83XZctm+jpOQyslF/+xPId6DkN2edG2egoy5hunt4= X-Received: by 2002:a62:26c1:: with SMTP id m184mr33518550pfm.102.1555267930797; Sun, 14 Apr 2019 11:52:10 -0700 (PDT) MIME-Version: 1.0 References: <40c0d06d-2df5-e776-0ec3-142358d91086@gmail.com> In-Reply-To: <40c0d06d-2df5-e776-0ec3-142358d91086@gmail.com> From: Marius Scurtescu Date: Sun, 14 Apr 2019 11:51:58 -0700 Message-ID: To: Yaron Sheffer , "Richard Backman, Annabelle" , Mike Jones , Mark Dobrinic Cc: SecEvent Content-Type: multipart/alternative; boundary="0000000000008be2d40586820860" Archived-At: Subject: Re: [Id-event] Push delivery - shepherd review X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Apr 2019 18:52:14 -0000 --0000000000008be2d40586820860 Content-Type: text/plain; charset="UTF-8" I captured all feedback here: https://github.com/independentid/Identity-Events/pull/25 Please review and let me know if further edits are needed. Thanks, Marius On Fri, Apr 12, 2019 at 5:45 AM Yaron Sheffer wrote: > There's always one more nit... > > - 1.1: this documents -> this document > - 2: i.e., return an "access_denied" error response -> i.e., return an > error response such as "access_denied" [because rejection can result in > other responses] > - 2.3: detects an error parsing or validating a SET transmitted in a > SET Transmission Request -> detects an error parsing, validating or > authenticating a SET transmitted in a SET Transmission Request [because all > later examples use status code 400 for this rather than 401, and this is an > important enough case to be stated normatively]. > - 5.2: PII: expand the acronym. > - 5.4: "then the SET Transmitter SHOULD sign the SET in accordance > with [RFC7515] and/or encrypt it using authenticated encryption in > accordance with [RFC7516]." The second half of this sentence is incorrect. > JWE with RSA (encrypted to the Recipient) and AES-GCM does NOT authenticate > the Transmitter. It ensures message integrity but not authenticity. > - 7.1.1: error_code: please review again the ASCII ranges, or better > yet, spell out the allowed characters. For example, 0x20 is "space" which > we probably don't want. > > Thanks, > > Yaron > _______________________________________________ > Id-event mailing list > Id-event@ietf.org > https://www.ietf.org/mailman/listinfo/id-event > --0000000000008be2d40586820860 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I captured all feedback here:

Please review and let me know if further edits are needed.
Thanks,
Marius


On Fri, Apr 12, 20= 19 at 5:45 AM Yaron Sheffer <yaronf.ietf@gmail.com> wrote:
=20 =20 =20

There's always one more nit...

  • 1.1: this documents -> this document
  • 2: i.e., return an "access_denied" error response ->= i.e., return an error response such as "access_denied" [because rejection can result in other responses]
  • 2.3: detects an error parsing or validating a SET transmitted in a SET Transmission Request -> detects an error parsing, validating or authenticating a SET transmitted in a SET Transmission Request [because all later examples use status code 400 for this rather than 401, and this is an important enough case to be stated=C2=A0 normatively].
  • 5.2: PII: expand the acronym.
  • 5.4: "then the SET Transmitter SHOULD sign the SET in accordance with [RFC7515] and/or encrypt it using authenticated encryption in accordance with [RFC7516]." The second half of this sentence is incorrect. JWE with RSA (encrypted to the Recipient) and AES-GCM does NOT authenticate the Transmitter. It ensures message integrity but not authenticity.
  • 7.1.1: error_code: please review again the ASCII ranges, or better yet, spell out the allowed characters. For example, 0x20 is "space" which we probably don't want.

Thanks,

=C2=A0=C2=A0=C2=A0 Yaron

_______________________________________________
Id-event mailing list
Id-event@ietf.org
https://www.ietf.org/mailman/listinfo/id-event
--0000000000008be2d40586820860-- From nobody Thu Apr 25 04:28:50 2019 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EBE70120072; Thu, 25 Apr 2019 04:28:47 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: secevent-chairs@ietf.org, yaronf.ietf@gmail.com, id-event@ietf.org, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 6.95.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155619172792.23479.16763399487482636633.idtracker@ietfa.amsl.com> Date: Thu, 25 Apr 2019 04:28:47 -0700 Archived-At: Subject: [Id-event] secevent - New Meeting Session Request for IETF 105 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Apr 2019 11:28:48 -0000 A new meeting session request has just been submitted by Yaron Sheffer, a Chair of the secevent working group. --------------------------------------------------------- Working Group Name: Security Events Area Name: Security Area Session Requester: Yaron Sheffer Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: saag dispatch oauth tokbind tls acme secdispatch cfrg Second Priority: ipsecme sacm ace rats People who must be present: Yaron Sheffer Dick Hardt Benjamin Kaduk Resources Requested: Special Requests: ---------------------------------------------------------