From nobody Fri Apr 24 17:43:58 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5EA693A1231; Fri, 24 Apr 2020 17:43:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T2yYY25EYAHk; Fri, 24 Apr 2020 17:43:55 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 980A13A122F; Fri, 24 Apr 2020 17:43:51 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 03P0hlbr000717 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 24 Apr 2020 20:43:49 -0400 Date: Fri, 24 Apr 2020 17:43:46 -0700 From: Benjamin Kaduk To: Mike Jones Cc: "draft-ietf-secevent-http-push.all@ietf.org" , "id-event@ietf.org" Message-ID: <20200425004346.GB27494@kduck.mit.edu> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Apr 2020 00:43:57 -0000 Hi Mike, My apologies for yet another long delay. I'll trim the bits that are in good shape (nearly all of them!). I also took another look at the "diff" (manually, that is) between push and poll, and found a few things in poll that should probably be here as well. Section 1 should get the sentence "How SETs are defined and the process by which security events are identified for SET Recipients are specified in [RFC8417]." In the thread for -poll we said that Section 5.3 of this document would get a s/e.g., subject claims/PII/ to match, but that doesn't seem to have happened yet. The poll Privacy Considerations have a note at the start of the section about "SET Transmistters SHOULD attempt to deliver sets that are targeted to the specific business and protocol needs of subscribers"; would a similar note make sense for us? On Fri, Feb 07, 2020 at 05:17:12PM +0000, Mike Jones wrote: > draft-ietf-secevent-http-push-08 was published to address these review comments. (-09 addressed additional editorial nits.) Descriptions of the changes made for these comments are inline, prefixed by "Mike>". > > > > -----Original Message----- > From: Id-event On Behalf Of Benjamin Kaduk > Sent: Tuesday, December 10, 2019 4:36 PM > To: draft-ietf-secevent-http-push.all@ietf.org > Cc: id-event@ietf.org > Subject: [Id-event] AD review of draft-ietf-secevent-http-push-07 > > > Section 5 > > > > I want to see how the discussion goes on poll's "Access Token Considerations" first, but we may want something like that as well. > > > > Mike> Yes, it makes sense to do that Since we no longer explicitly mention WWW-Authenticate in this document I won't insist on copying the Access Token Considerations over, but it could still be useful to do so. > Section 5.2 > > > > RFC 6125 is great and I'm glad we're referencing it, but it does leave a couple of gaps to be specified for a full picture of application usage. > > Specifically, we should say what name from the certificate we validate (and, ideally, how the application knows what name it is expecting to see in that name field in the certificate). Most applications these days will be using the DNS-ID, and perhaps something about wildcards and/or revocation info. The last time I was making this comment on a document I pointed to RFC 8461 as a potential example to crib from, at least in terms of the types of things to talk about. > > > > Mike> I added DNS-ID. The DNS-ID is the part of the certificate that we compare a name against, but a comparison requires having two things -- since recipients are already configured, can't we say that the expected name will be configured as well? Thanks for all the updates! -Ben From nobody Fri Apr 24 17:53:04 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 286D73A0BF4; Fri, 24 Apr 2020 17:53:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wb0XAwCZp60N; Fri, 24 Apr 2020 17:53:00 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 702333A125C; Fri, 24 Apr 2020 17:52:57 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 03P0qrE1002983 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 24 Apr 2020 20:52:55 -0400 Date: Fri, 24 Apr 2020 17:52:52 -0700 From: Benjamin Kaduk To: Mike Jones Cc: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Message-ID: <20200425005252.GC27494@kduck.mit.edu> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Apr 2020 00:53:02 -0000 Hi Mike, Thanks for the updates, and I continue to be sorry for the long response times. Poll is in quite good shape (well, I guess it's mostly just that -push is taking the brunt of the work for harmonizing the differences in text); just a couple more changes to make and we should be good to start the IETF LCs in parallel. I'll again trim the resolved bits. In Section 3 we have a note about DoS protections embedded in a larger block of text: Authorization for the eligibility to provide actionable SETs can be determined by using the identity of the SET Issuer, validating the polling endpoint URL, perhaps using TLS, or via other employed authentication methods. Among other benefits, authentication can help prevent denial-of-service attacks. Because SETs are not commands, SET Recipients are free to ignore SETs that are not of interest after acknowledging their receipt. I am not 100% sure, but I think this may have been text that originates before the split of documents, and in push got extracted and made into a separate section. Does it still make sense here? The DoS risk would typically be for a server getting lots of inbound connections, but there's not quite as clear a case for (client) authentication helping with that for poll, since the client is not sending huge amounts of stuff that would need to be dropped. Am I misunderstanding the intent here, or should the sentence just get dropped? On Fri, Feb 07, 2020 at 05:18:04PM +0000, Mike Jones wrote: > draft-ietf-secevent-http-poll-07 was published to address these review comments. (-08 addressed additional editorial nits.) Descriptions of the changes made for these comments are inline, prefixed by "Mike>". > > > > -----Original Message----- > From: Id-event On Behalf Of Benjamin Kaduk > Sent: Tuesday, December 10, 2019 4:37 PM > To: draft-ietf-secevent-http-poll.all@ietf.org > Cc: id-event@ietf.org > Subject: [Id-event] AD review of draft-ietf-secevent-http-poll-06 > > > Section 3 > > > Since poll has the TLS server as the SET Transmitter, we could potentially pull in RFC 6125 and talk about validating DNS-IDs to authenticate the Transmitter. Given that the name to be authenticated would be part of the information conveyed out-of-band, though, it's not entirely clear how much value there would be in doing so. > > > Mike> As in Push, this section was formerly poorly worded, and has largely been rewritten. As for -push, I'd really like to be able to say something about the other half of the name comparison. In this case would it be something like "discovery of SET Transmitters (and the names used to authenticate them) is out of scope for this document"? Thanks for the updates, Ben From nobody Fri Apr 24 19:11:45 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 593863A05E2; Fri, 24 Apr 2020 19:11:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b98pe5JTnkVG; Fri, 24 Apr 2020 19:11:40 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650092.outbound.protection.outlook.com [40.107.65.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D7A03A05A7; Fri, 24 Apr 2020 19:11:40 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d5rZol7EKhfQTvvMxmWJbFAawjkEy+ga5TPNuS28ulqA/VX4Gl57PHnlnTDmvVlKmqftWRggI50Tkd8rNeelQYUpbyRuFOcYTAuuBzIhoQKBFZzOyLCg123POr2mwBk3GuRDiIf1gmS2Wnpo5Fm/4a+LIP/GE7rri2wCi19EhpGYhFYG2ZSPeaALqxmGbY1kCL40rYJC2F7h0zGvTLujPdVuQV6tVGogSewAFeozVmzCYbWLnPig5LzkfLQ1Iy+NOVp/KvH7Utkbm+qe6O9MZWRP9UzJElRBZRqSobRT0Pt/GPuomjxkbdd2pVisIR3mMQRrGFxstbo4LgumygG+Hg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mc5K7S4NcrM6pqflHVa75kWN961LdqWgOj5cxQ/k7G0=; b=PAilj1RvlC7Il7Ubs5Wtvli2ykhbZCB7ampweJf38WV8W+AHmsA3rCfTsQPi5FWOTwuyaBZ0IJ6eh/Ot8lkwGIoLnKdvJZKhYi8bSHQMKmBqQ1lAJ7+od0ceBht285CReQuEgSaZ/TPCnTuTbfEkm+WBlGbnNlcIIqM3M70KB8ofsZY91/pA8mwY5yzZVItReXDJyZsYIct2AWAdwBnWzicIKmrkMHXzokj6wwBZ8bXEVbxIsX9b5NfJsXB1e74+dz4LgSpXjqB+pYLkZ4RhOfxWUiESE9Y/JmdJk8JmwIe3ajxcCgxu3M0VEbKPuChQN9MmOZj1v2DnH26mWdb/zg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mc5K7S4NcrM6pqflHVa75kWN961LdqWgOj5cxQ/k7G0=; b=UUaVqvFNT+kFUn64QZ2mFxp5vbsgrrmEoClplw1Mt+gWPy/CKaMahLJzdSL03XRfW8hhZzs3e3tD+7rvvz3B1tMuGI9d13pBQrkTLTW7J7mNj2i2xmxe2F4EsqoZxFecN/EgOqrXazsQuSEE15GlWpqgDxSXRCU5q8RK575yHYQ= Received: from CH2PR00MB0678.namprd00.prod.outlook.com (2603:10b6:610:a9::23) by CH2PR00MB0678.namprd00.prod.outlook.com (2603:10b6:610:a9::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2983.0; Sat, 25 Apr 2020 02:11:38 +0000 Received: from CH2PR00MB0678.namprd00.prod.outlook.com ([fe80::9517:9630:ed53:8dd6]) by CH2PR00MB0678.namprd00.prod.outlook.com ([fe80::9517:9630:ed53:8dd6%6]) with mapi id 15.20.2982.000; Sat, 25 Apr 2020 02:11:38 +0000 From: Mike Jones To: Benjamin Kaduk , "richanna@amazon.com" CC: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Thread-Topic: [EXTERNAL] Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Thread-Index: AdXd2n4v0sjGSvn6Sru3a8O/W+S93g8wVsAAAAKr+lA= Date: Sat, 25 Apr 2020 02:11:38 +0000 Message-ID: References: <20200425005252.GC27494@kduck.mit.edu> In-Reply-To: <20200425005252.GC27494@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=7317f497-4c9b-42fb-b313-0000b4fafaf0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-04-25T02:09:24Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.87.252] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 393f57ed-b277-4275-c80f-08d7e8bdfd08 x-ms-traffictypediagnostic: CH2PR00MB0678: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0384275935 received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH2PR00MB0678.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(396003)(376002)(136003)(346002)(366004)(82960400001)(8676002)(33656002)(7696005)(478600001)(82950400001)(5660300002)(4326008)(10290500003)(6506007)(52536014)(2906002)(53546011)(86362001)(66446008)(9686003)(26005)(8990500004)(71200400001)(186003)(110136005)(8936002)(55016002)(316002)(54906003)(76116006)(66946007)(64756008)(66556008)(66476007); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CH2PR00MB0678.namprd00.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 393f57ed-b277-4275-c80f-08d7e8bdfd08 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Apr 2020 02:11:38.7221 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: H5evOsT8rfifKjzN+XDVpwhceVfbnFbzU+97eRPIT7XzM2rsJ5ZRiA5XmE3EzAEdXbu88LUBS4G63UOpbsUHyA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR00MB0678 Archived-At: Subject: Re: [Id-event] [EXTERNAL] Re: AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Apr 2020 02:11:42 -0000 Thanks Ben. I think the DDOS text can be dropped from Poll. I'll do that = early next week. Thanks again, -- Mike -----Original Message----- From: Benjamin Kaduk =20 Sent: Friday, April 24, 2020 5:53 PM To: Mike Jones Cc: draft-ietf-secevent-http-poll.all@ietf.org; id-event@ietf.org Subject: [EXTERNAL] Re: [Id-event] AD review of draft-ietf-secevent-http-po= ll-06 Hi Mike, Thanks for the updates, and I continue to be sorry for the long response ti= mes. Poll is in quite good shape (well, I guess it's mostly just that -push is t= aking the brunt of the work for harmonizing the differences in text); just = a couple more changes to make and we should be good to start the IETF LCs i= n parallel. I'll again trim the resolved bits. In Section 3 we have a note about DoS protections embedded in a larger bloc= k of text: Authorization for the eligibility to provide actionable SETs can be determined by using the identity of the SET Issuer, validating the polling endpoint URL, perhaps using TLS, or via other employed authentication methods. Among other benefits, authentication can help prevent denial-of-service attacks. Because SETs are not commands, SET Recipients are free to ignore SETs that are not of interest after acknowledging their receipt. I am not 100% sure, but I think this may have been text that originates bef= ore the split of documents, and in push got extracted and made into a separ= ate section. Does it still make sense here? The DoS risk would typically = be for a server getting lots of inbound connections, but there's not quite = as clear a case for (client) authentication helping with that for poll, sin= ce the client is not sending huge amounts of stuff that would need to be dr= opped. Am I misunderstanding the intent here, or should the sentence just = get dropped? On Fri, Feb 07, 2020 at 05:18:04PM +0000, Mike Jones wrote: > draft-ietf-secevent-http-poll-07 was published to address these review comments. (-08= addressed ad= ditional editorial nits.) Descriptions of the changes made for these comme= nts are inline, prefixed by "Mike>". >=20 >=20 >=20 > -----Original Message----- > From: Id-event On Behalf Of Benjamin Kaduk > Sent: Tuesday, December 10, 2019 4:37 PM > To: draft-ietf-secevent-http-poll.all@ietf.org > Cc: id-event@ietf.org > Subject: [Id-event] AD review of draft-ietf-secevent-http-poll-06 >=20 >=20 > Section 3 >=20 >=20 > Since poll has the TLS server as the SET Transmitter, we could potentiall= y pull in RFC 6125 and talk about validating DNS-IDs to authenticate the Tr= ansmitter. Given that the name to be authenticated would be part of the in= formation conveyed out-of-band, though, it's not entirely clear how much va= lue there would be in doing so. >=20 >=20 > Mike> As in Push, this section was formerly poorly worded, and has largel= y been rewritten. As for -push, I'd really like to be able to say something about the other h= alf of the name comparison. In this case would it be something like "disco= very of SET Transmitters (and the names used to authenticate them) is out o= f scope for this document"? Thanks for the updates, Ben From nobody Fri Apr 24 19:12:25 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5ACD63A060A; Fri, 24 Apr 2020 19:12:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qAQRskQvV2gc; Fri, 24 Apr 2020 19:12:21 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650137.outbound.protection.outlook.com [40.107.65.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38E663A03EA; Fri, 24 Apr 2020 19:12:21 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ctLqlt6HCjC5R/+/BRcuHpqmM9oUfjoJ625wCJe4RB8BeR6uNh/kNKvrNdrQcGtmzJJ1Iipx05zGTkjbKjThawLGEe4GpSHDClB2lcXvJwddHqEK6m5TNneDQzwMoC/OZlSgqHRKnmQPrKDeE1keDS5r9C9WHmv4O/GqsSWZsjX9NuxXHQpYZogFuH3mefP5JE/asVmL9/R2xx0B8uKsAVGmzoFLsmKVEZ0XkhM3JClYeHNHxLvCBX8oUkarNvaa7bkxZWi3W6QbCqSJGPhvNxSF0unN4C2YtGgbOfDX9mAzoXk+Is/gu5043phn9baDZN+XPLevASRSkNWVqFwlJg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BlULoY4FrVEiljFEZEEXEwov4Ls1cgECmSQfh5nTSF0=; b=UlbGohGXa6dBx/uXpmj27kaV3WQEqjk1S4/Epp8Zzgro2oJMk8tjedFYAji09u4hW3Py0S/KZO3CCQrfpWm5/hrAckil1TV63EbLOFRud6xRD38mPni+dkDiQlrYEKq7Hxm98O7oSKZ/37j04I1ijdV38JYNcz892u0gjPgw2W/h8oGDLKCUak6iMBrC2dz0DQyPyVVrHXlIpuneMfJ9IijJ6XEek1cPtmGihdnGFV0jievmnc4KNA5TNxwAAzm14w4TTjfJBCpWSkcFcs4cA3WHu2BGMFtC/J/69NEtIoXqrQJZceY8V2A+M7nvmrN2HTe35SporpAfrW5F44R+yQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BlULoY4FrVEiljFEZEEXEwov4Ls1cgECmSQfh5nTSF0=; b=g12qNn1C5KrAtjxGxtIMq4bGot3kv85vbTIkjMNZPI4wFzsoeBFgmVzWU6eg2y7ro43Nb4JeSLyawDmWxX1pPpRLLKcO8w4LAn8PKJjRaNqQ+FESctuU6LW2VWD7YrSXtFcrSlVanxctPGvahrj2nOnBy5A4tT2oK/11iWfesHw= Received: from CH2PR00MB0678.namprd00.prod.outlook.com (2603:10b6:610:a9::23) by CH2PR00MB0678.namprd00.prod.outlook.com (2603:10b6:610:a9::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2983.0; Sat, 25 Apr 2020 02:12:19 +0000 Received: from CH2PR00MB0678.namprd00.prod.outlook.com ([fe80::9517:9630:ed53:8dd6]) by CH2PR00MB0678.namprd00.prod.outlook.com ([fe80::9517:9630:ed53:8dd6%6]) with mapi id 15.20.2982.000; Sat, 25 Apr 2020 02:12:19 +0000 From: Mike Jones To: Benjamin Kaduk , "richanna@amazon.com" CC: "draft-ietf-secevent-http-push.all@ietf.org" , "id-event@ietf.org" Thread-Topic: [Id-event] AD review of draft-ietf-secevent-http-push-07 Thread-Index: AdYapvFcpkAs4jP3S4SfG8JyuYpI/Q== Date: Sat, 25 Apr 2020 02:12:19 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=d865b950-9001-4158-be34-00003ab8cdd0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-04-25T02:08:36Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.87.252] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9bf246a8-463c-4750-1aa5-08d7e8be1589 x-ms-traffictypediagnostic: CH2PR00MB0678: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0384275935 received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH2PR00MB0678.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(396003)(376002)(136003)(346002)(366004)(82960400001)(8676002)(33656002)(7696005)(478600001)(82950400001)(5660300002)(4326008)(10290500003)(6506007)(52536014)(2906002)(53546011)(86362001)(66446008)(9686003)(26005)(8990500004)(71200400001)(186003)(110136005)(8936002)(55016002)(316002)(54906003)(76116006)(66946007)(64756008)(66556008)(66476007); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CH2PR00MB0678.namprd00.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9bf246a8-463c-4750-1aa5-08d7e8be1589 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Apr 2020 02:12:19.8264 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: nOvVAwIX8+unHg8zfnGJvrxAJu5TJHOimkrRhDHXCrwJoriGFbFCujqZdnDMzOVl4l3A8Ein/y2+ZKjEJEWjTg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR00MB0678 Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Apr 2020 02:12:23 -0000 These suggestions make sense to me. Do you want to do these Annabelle, or = would you like me to? If I do it, it will probably be early next week. Thanks all, -- Mike -----Original Message----- From: Benjamin Kaduk =20 Sent: Friday, April 24, 2020 5:44 PM To: Mike Jones Cc: draft-ietf-secevent-http-push.all@ietf.org; id-event@ietf.org Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 Hi Mike, My apologies for yet another long delay. I'll trim the bits that are in go= od shape (nearly all of them!). I also took another look at the "diff" (manually, that is) between push and= poll, and found a few things in poll that should probably be here as well. Section 1 should get the sentence "How SETs are defined and the process by = which security events are identified for SET Recipients are specified in [R= FC8417]." In the thread for -poll we said that Section 5.3 of this document would get= a s/e.g., subject claims/PII/ to match, but that doesn't seem to have happ= ened yet. The poll Privacy Considerations have a note at the start of the section abo= ut "SET Transmistters SHOULD attempt to deliver sets that are targeted to t= he specific business and protocol needs of subscribers"; would a similar no= te make sense for us? On Fri, Feb 07, 2020 at 05:17:12PM +0000, Mike Jones wrote: > draft-ietf-secevent-http-push-08 was published to address these review comments. (-09= addressed ad= ditional editorial nits.) Descriptions of the changes made for these comme= nts are inline, prefixed by "Mike>". >=20 >=20 >=20 > -----Original Message----- > From: Id-event On Behalf Of Benjamin Kaduk > Sent: Tuesday, December 10, 2019 4:36 PM > To: draft-ietf-secevent-http-push.all@ietf.org > Cc: id-event@ietf.org > Subject: [Id-event] AD review of draft-ietf-secevent-http-push-07 >=20 >=20 > Section 5 >=20 >=20 >=20 > I want to see how the discussion goes on poll's "Access Token Considerati= ons" first, but we may want something like that as well. >=20 >=20 >=20 > Mike> Yes, it makes sense to do that Since we no longer explicitly mention WWW-Authenticate in this document I w= on't insist on copying the Access Token Considerations over, but it could s= till be useful to do so. > Section 5.2 >=20 >=20 >=20 > RFC 6125 is great and I'm glad we're referencing it, but it does leave a = couple of gaps to be specified for a full picture of application usage. >=20 > Specifically, we should say what name from the certificate we validate (a= nd, ideally, how the application knows what name it is expecting to see in = that name field in the certificate). Most applications these days will be = using the DNS-ID, and perhaps something about wildcards and/or revocation i= nfo. The last time I was making this comment on a document I pointed to RF= C 8461 as a potential example to crib from, at least in terms of the types = of things to talk about. >=20 >=20 >=20 > Mike> I added DNS-ID. The DNS-ID is the part of the certificate that we compare a name against, b= ut a comparison requires having two things -- since recipients are already = configured, can't we say that the expected name will be configured as well? Thanks for all the updates! -Ben From nobody Mon Apr 27 13:54:34 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC2D03A0A09; Mon, 27 Apr 2020 13:54:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P4gYlaeqx4Vr; Mon, 27 Apr 2020 13:54:21 -0700 (PDT) Received: from smtp-fw-4101.amazon.com (smtp-fw-4101.amazon.com [72.21.198.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 247C93A0977; Mon, 27 Apr 2020 13:54:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1588020862; x=1619556862; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=ZEyEKkJNDAaTXbekPaafIfdxRh3mZWkP+CnMKuUeeNc=; b=JPeRelI/QGnr2QNBfDxz8bQNGKVJCB/JuRRybd7emRQCHJqTQLTJqG20 3gO9rSnPYsfS8wXfupB8xzOvR5XImjXz8JGi11rHpj1F6Oy7z57g3E3ej Dar0zKpP07zyVxRjKctGEQIrID3PxxsC4Y6d9EKMIqnDs0DrVwLNtX4Qr A=; IronPort-SDR: YS5I0GcFOOTF+Lbf3jrOwnbCmpQRqaZ5DzzC4KPgavmmPdGX0yXoKcS62Kdmdeakc2Grz1b0tP Ay3QyQuLKIUQ== X-IronPort-AV: E=Sophos;i="5.73,325,1583193600"; d="scan'208";a="27662770" Thread-Topic: [UNVERIFIED SENDER] Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 Received: from iad12-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-1e-62350142.us-east-1.amazon.com) ([10.43.8.6]) by smtp-border-fw-out-4101.iad4.amazon.com with ESMTP; 27 Apr 2020 20:54:08 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1e-62350142.us-east-1.amazon.com (Postfix) with ESMTPS id 05894A1CE3; Mon, 27 Apr 2020 20:54:05 +0000 (UTC) Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 20:54:05 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 20:54:04 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1497.006; Mon, 27 Apr 2020 20:54:05 +0000 From: "Richard Backman, Annabelle" To: Mike Jones , Benjamin Kaduk CC: "draft-ietf-secevent-http-push.all@ietf.org" , "id-event@ietf.org" Thread-Index: AdYapvFcpkAs4jP3S4SfG8JyuYpI/QB9F6IA Date: Mon, 27 Apr 2020 20:54:05 +0000 Message-ID: <06FCE524-D221-475A-998B-24E3CE85635E@amazon.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.21.0.200113 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.162.200] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] [UNVERIFIED SENDER] Re: AD review of draft-ietf-secevent-http-push-07 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 20:54:31 -0000 SSBjYW4gcHV0IG91dCBhbiB1cGRhdGUsIGJ1dCBJIHRoaW5rIEknbSBtaXNzaW5nIHBhcnQgb2Yg dGhlIGNvbnZlcnNhdGlvbiBoZXJlLg0KDQpIZXJlIGlzIHdoYXQgSSB1bmRlcnN0YW5kIHRoZSBj aGFuZ2VzIHRvIGJlLCBhbGwgd2l0aGluIC1wdXNoOg0KDQoxLiBTZWN0aW9uIDEgc2hvdWxkIGdl dCB0aGUgc2VudGVuY2UgIkhvdyBTRVRzIGFyZSBkZWZpbmVkIGFuZCB0aGUgcHJvY2VzcyBieSB3 aGljaCBzZWN1cml0eSBldmVudHMgYXJlIGlkZW50aWZpZWQgZm9yIFNFVCBSZWNpcGllbnRzIGFy ZSBzcGVjaWZpZWQgaW4gW1JGQzg0MTddLiINCg0KMi4gSW4gU2VjdGlvbiA1LjMsIHJlcGxhY2Ug ImUuZy4sIHN1YmplY3QgY2xhaW1zIiB3aXRoICJQSUkiIGFzIHdhcyBhbHJlYWR5IGRvbmUgaW4g LXBvbGwuDQoNCjMuIEluIFNlY3Rpb24gNS4zLCBhZGQgdGV4dCBleHBsYWluaW5nIHRoYXQgZGV0 ZXJtaW5pbmcgdGhlIGV4cGVjdGVkIHNlcnZpY2UgaWRlbnRpdHkgdG8gbWF0Y2ggYWdhaW5zdCB1 c2luZyBETlMtSUQgaXMgb3V0IG9mIHNjb3BlLg0KDQo0LiBJbiBQcml2YWN5IENvbnNpZGVyYXRp b25zLCBhZGQgIlNFVCBUcmFuc21pc3R0ZXJzIFNIT1VMRCBhdHRlbXB0IHRvIGRlbGl2ZXIgc2V0 cyB0aGF0IGFyZSB0YXJnZXRlZCB0byB0aGUgc3BlY2lmaWMgYnVzaW5lc3MgYW5kIHByb3RvY29s IG5lZWRzIG9mIHN1YnNjcmliZXJzIiwgYXMgYWxyZWFkeSBleGlzdHMgd2l0aGluIC1wb2xsLg0K DQrigJMNCkFubmFiZWxsZSBCYWNrbWFuIChzaGUvaGVyKQ0KQVdTIElkZW50aXR5DQpodHRwczov L2F3cy5hbWF6b24uY29tL2lkZW50aXR5Lw0KIA0KDQrvu79PbiA0LzI0LzIwLCA3OjEyIFBNLCAi TWlrZSBKb25lcyIgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4gd3JvdGU6DQoNCkNBVVRJ T046IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlv bi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSBjYW4g Y29uZmlybSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQoNCg0KDQpU aGVzZSBzdWdnZXN0aW9ucyBtYWtlIHNlbnNlIHRvIG1lLiAgRG8geW91IHdhbnQgdG8gZG8gdGhl c2UgQW5uYWJlbGxlLCBvciB3b3VsZCB5b3UgbGlrZSBtZSB0bz8gIElmIEkgZG8gaXQsIGl0IHdp bGwgcHJvYmFibHkgYmUgZWFybHkgbmV4dCB3ZWVrLg0KDQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFRoYW5rcyBhbGwsDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0t IE1pa2UNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEJlbmphbWluIEthZHVr IDxrYWR1a0BtaXQuZWR1Pg0KU2VudDogRnJpZGF5LCBBcHJpbCAyNCwgMjAyMCA1OjQ0IFBNDQpU bzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPg0KQ2M6IGRyYWZ0LWll dGYtc2VjZXZlbnQtaHR0cC1wdXNoLmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0Zi5vcmcNClN1 YmplY3Q6IFJlOiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0 dHAtcHVzaC0wNw0KDQpIaSBNaWtlLA0KDQpNeSBhcG9sb2dpZXMgZm9yIHlldCBhbm90aGVyIGxv bmcgZGVsYXkuICBJJ2xsIHRyaW0gdGhlIGJpdHMgdGhhdCBhcmUgaW4gZ29vZCBzaGFwZSAobmVh cmx5IGFsbCBvZiB0aGVtISkuDQoNCkkgYWxzbyB0b29rIGFub3RoZXIgbG9vayBhdCB0aGUgImRp ZmYiIChtYW51YWxseSwgdGhhdCBpcykgYmV0d2VlbiBwdXNoIGFuZCBwb2xsLCBhbmQgZm91bmQg YSBmZXcgdGhpbmdzIGluIHBvbGwgdGhhdCBzaG91bGQgcHJvYmFibHkgYmUgaGVyZSBhcyB3ZWxs Lg0KDQpTZWN0aW9uIDEgc2hvdWxkIGdldCB0aGUgc2VudGVuY2UgIkhvdyBTRVRzIGFyZSBkZWZp bmVkIGFuZCB0aGUgcHJvY2VzcyBieSB3aGljaCBzZWN1cml0eSBldmVudHMgYXJlIGlkZW50aWZp ZWQgZm9yIFNFVCBSZWNpcGllbnRzIGFyZSBzcGVjaWZpZWQgaW4gW1JGQzg0MTddLiINCg0KSW4g dGhlIHRocmVhZCBmb3IgLXBvbGwgd2Ugc2FpZCB0aGF0IFNlY3Rpb24gNS4zIG9mIHRoaXMgZG9j dW1lbnQgd291bGQgZ2V0IGEgcy9lLmcuLCBzdWJqZWN0IGNsYWltcy9QSUkvIHRvIG1hdGNoLCBi dXQgdGhhdCBkb2Vzbid0IHNlZW0gdG8gaGF2ZSBoYXBwZW5lZCB5ZXQuDQoNClRoZSBwb2xsIFBy aXZhY3kgQ29uc2lkZXJhdGlvbnMgaGF2ZSBhIG5vdGUgYXQgdGhlIHN0YXJ0IG9mIHRoZSBzZWN0 aW9uIGFib3V0ICJTRVQgVHJhbnNtaXN0dGVycyBTSE9VTEQgYXR0ZW1wdCB0byBkZWxpdmVyIHNl dHMgdGhhdCBhcmUgdGFyZ2V0ZWQgdG8gdGhlIHNwZWNpZmljIGJ1c2luZXNzIGFuZCBwcm90b2Nv bCBuZWVkcyBvZiBzdWJzY3JpYmVycyI7IHdvdWxkIGEgc2ltaWxhciBub3RlIG1ha2Ugc2Vuc2Ug Zm9yIHVzPw0KDQpPbiBGcmksIEZlYiAwNywgMjAyMCBhdCAwNToxNzoxMlBNICswMDAwLCBNaWtl IEpvbmVzIHdyb3RlOg0KPiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wODxodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2gtMDg+IHdh cyBwdWJsaXNoZWQgdG8gYWRkcmVzcyB0aGVzZSByZXZpZXcgY29tbWVudHMuICAoLTA5PGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wOT4g YWRkcmVzc2VkIGFkZGl0aW9uYWwgZWRpdG9yaWFsIG5pdHMuKSAgRGVzY3JpcHRpb25zIG9mIHRo ZSBjaGFuZ2VzIG1hZGUgZm9yIHRoZXNlIGNvbW1lbnRzIGFyZSBpbmxpbmUsIHByZWZpeGVkIGJ5 ICJNaWtlPiIuDQo+DQo+DQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206 IElkLWV2ZW50IDxpZC1ldmVudC1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgQmVuamFt aW4gS2FkdWsNCj4gU2VudDogVHVlc2RheSwgRGVjZW1iZXIgMTAsIDIwMTkgNDozNiBQTQ0KPiBU bzogZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2guYWxsQGlldGYub3JnDQo+IENjOiBpZC1l dmVudEBpZXRmLm9yZw0KPiBTdWJqZWN0OiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1p ZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wNw0KPg0KPg0KPiBTZWN0aW9uIDUNCj4NCj4NCj4NCj4g SSB3YW50IHRvIHNlZSBob3cgdGhlIGRpc2N1c3Npb24gZ29lcyBvbiBwb2xsJ3MgIkFjY2VzcyBU b2tlbiBDb25zaWRlcmF0aW9ucyIgZmlyc3QsIGJ1dCB3ZSBtYXkgd2FudCBzb21ldGhpbmcgbGlr ZSB0aGF0IGFzIHdlbGwuDQo+DQo+DQo+DQo+IE1pa2U+IFllcywgaXQgbWFrZXMgc2Vuc2UgdG8g ZG8gdGhhdA0KDQpTaW5jZSB3ZSBubyBsb25nZXIgZXhwbGljaXRseSBtZW50aW9uIFdXVy1BdXRo ZW50aWNhdGUgaW4gdGhpcyBkb2N1bWVudCBJIHdvbid0IGluc2lzdCBvbiBjb3B5aW5nIHRoZSBB Y2Nlc3MgVG9rZW4gQ29uc2lkZXJhdGlvbnMgb3ZlciwgYnV0IGl0IGNvdWxkIHN0aWxsIGJlIHVz ZWZ1bCB0byBkbyBzby4NCg0KPiBTZWN0aW9uIDUuMg0KPg0KPg0KPg0KPiBSRkMgNjEyNSBpcyBn cmVhdCBhbmQgSSdtIGdsYWQgd2UncmUgcmVmZXJlbmNpbmcgaXQsIGJ1dCBpdCBkb2VzIGxlYXZl IGEgY291cGxlIG9mIGdhcHMgdG8gYmUgc3BlY2lmaWVkIGZvciBhIGZ1bGwgcGljdHVyZSBvZiBh cHBsaWNhdGlvbiB1c2FnZS4NCj4NCj4gU3BlY2lmaWNhbGx5LCB3ZSBzaG91bGQgc2F5IHdoYXQg bmFtZSBmcm9tIHRoZSBjZXJ0aWZpY2F0ZSB3ZSB2YWxpZGF0ZSAoYW5kLCBpZGVhbGx5LCBob3cg dGhlIGFwcGxpY2F0aW9uIGtub3dzIHdoYXQgbmFtZSBpdCBpcyBleHBlY3RpbmcgdG8gc2VlIGlu IHRoYXQgbmFtZSBmaWVsZCBpbiB0aGUgY2VydGlmaWNhdGUpLiAgTW9zdCBhcHBsaWNhdGlvbnMg dGhlc2UgZGF5cyB3aWxsIGJlIHVzaW5nIHRoZSBETlMtSUQsIGFuZCBwZXJoYXBzIHNvbWV0aGlu ZyBhYm91dCB3aWxkY2FyZHMgYW5kL29yIHJldm9jYXRpb24gaW5mby4gIFRoZSBsYXN0IHRpbWUg SSB3YXMgbWFraW5nIHRoaXMgY29tbWVudCBvbiBhIGRvY3VtZW50IEkgcG9pbnRlZCB0byBSRkMg ODQ2MSBhcyBhIHBvdGVudGlhbCBleGFtcGxlIHRvIGNyaWIgZnJvbSwgYXQgbGVhc3QgaW4gdGVy bXMgb2YgdGhlIHR5cGVzIG9mIHRoaW5ncyB0byB0YWxrIGFib3V0Lg0KPg0KPg0KPg0KPiBNaWtl PiBJIGFkZGVkIEROUy1JRC4NCg0KVGhlIEROUy1JRCBpcyB0aGUgcGFydCBvZiB0aGUgY2VydGlm aWNhdGUgdGhhdCB3ZSBjb21wYXJlIGEgbmFtZSBhZ2FpbnN0LCBidXQgYSBjb21wYXJpc29uIHJl cXVpcmVzIGhhdmluZyB0d28gdGhpbmdzIC0tIHNpbmNlIHJlY2lwaWVudHMgYXJlIGFscmVhZHkg Y29uZmlndXJlZCwgY2FuJ3Qgd2Ugc2F5IHRoYXQgdGhlIGV4cGVjdGVkIG5hbWUgd2lsbCBiZSBj b25maWd1cmVkIGFzIHdlbGw/DQoNClRoYW5rcyBmb3IgYWxsIHRoZSB1cGRhdGVzIQ0KDQotQmVu DQoNCg== From nobody Mon Apr 27 15:08:27 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98BC83A0C20; Mon, 27 Apr 2020 15:08:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wVqpRyB7KjKc; Mon, 27 Apr 2020 15:08:23 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CC703A0C1F; Mon, 27 Apr 2020 15:08:22 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 03RM8HvO018735 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 27 Apr 2020 18:08:19 -0400 Date: Mon, 27 Apr 2020 15:08:16 -0700 From: Benjamin Kaduk To: "Richard Backman, Annabelle" Cc: Mike Jones , "draft-ietf-secevent-http-push.all@ietf.org" , "id-event@ietf.org" Message-ID: <20200427220816.GE27494@kduck.mit.edu> References: <06FCE524-D221-475A-998B-24E3CE85635E@amazon.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <06FCE524-D221-475A-998B-24E3CE85635E@amazon.com> User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Id-event] [UNVERIFIED SENDER] Re: AD review of draft-ietf-secevent-http-push-07 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 22:08:26 -0000 On Mon, Apr 27, 2020 at 08:54:05PM +0000, Richard Backman, Annabelle wrote: > I can put out an update, but I think I'm missing part of the conversation here. > > Here is what I understand the changes to be, all within -push: I think that's right, as much as putting (3) out of scope pains me. Thanks, Ben > 1. Section 1 should get the sentence "How SETs are defined and the process by which security events are identified for SET Recipients are specified in [RFC8417]." > > 2. In Section 5.3, replace "e.g., subject claims" with "PII" as was already done in -poll. > > 3. In Section 5.3, add text explaining that determining the expected service identity to match against using DNS-ID is out of scope. > > 4. In Privacy Considerations, add "SET Transmistters SHOULD attempt to deliver sets that are targeted to the specific business and protocol needs of subscribers", as already exists within -poll. > > – > Annabelle Backman (she/her) > AWS Identity > https://aws.amazon.com/identity/ > > > On 4/24/20, 7:12 PM, "Mike Jones" wrote: > > CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe. > > > > These suggestions make sense to me. Do you want to do these Annabelle, or would you like me to? If I do it, it will probably be early next week. > > Thanks all, > -- Mike > > -----Original Message----- > From: Benjamin Kaduk > Sent: Friday, April 24, 2020 5:44 PM > To: Mike Jones > Cc: draft-ietf-secevent-http-push.all@ietf.org; id-event@ietf.org > Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 > > Hi Mike, > > My apologies for yet another long delay. I'll trim the bits that are in good shape (nearly all of them!). > > I also took another look at the "diff" (manually, that is) between push and poll, and found a few things in poll that should probably be here as well. > > Section 1 should get the sentence "How SETs are defined and the process by which security events are identified for SET Recipients are specified in [RFC8417]." > > In the thread for -poll we said that Section 5.3 of this document would get a s/e.g., subject claims/PII/ to match, but that doesn't seem to have happened yet. > > The poll Privacy Considerations have a note at the start of the section about "SET Transmistters SHOULD attempt to deliver sets that are targeted to the specific business and protocol needs of subscribers"; would a similar note make sense for us? > > On Fri, Feb 07, 2020 at 05:17:12PM +0000, Mike Jones wrote: > > draft-ietf-secevent-http-push-08 was published to address these review comments. (-09 addressed additional editorial nits.) Descriptions of the changes made for these comments are inline, prefixed by "Mike>". > > > > > > > > -----Original Message----- > > From: Id-event On Behalf Of Benjamin Kaduk > > Sent: Tuesday, December 10, 2019 4:36 PM > > To: draft-ietf-secevent-http-push.all@ietf.org > > Cc: id-event@ietf.org > > Subject: [Id-event] AD review of draft-ietf-secevent-http-push-07 > > > > > > Section 5 > > > > > > > > I want to see how the discussion goes on poll's "Access Token Considerations" first, but we may want something like that as well. > > > > > > > > Mike> Yes, it makes sense to do that > > Since we no longer explicitly mention WWW-Authenticate in this document I won't insist on copying the Access Token Considerations over, but it could still be useful to do so. > > > Section 5.2 > > > > > > > > RFC 6125 is great and I'm glad we're referencing it, but it does leave a couple of gaps to be specified for a full picture of application usage. > > > > Specifically, we should say what name from the certificate we validate (and, ideally, how the application knows what name it is expecting to see in that name field in the certificate). Most applications these days will be using the DNS-ID, and perhaps something about wildcards and/or revocation info. The last time I was making this comment on a document I pointed to RFC 8461 as a potential example to crib from, at least in terms of the types of things to talk about. > > > > > > > > Mike> I added DNS-ID. > > The DNS-ID is the part of the certificate that we compare a name against, but a comparison requires having two things -- since recipients are already configured, can't we say that the expected name will be configured as well? > > Thanks for all the updates! > > -Ben > From nobody Mon Apr 27 15:23:58 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92D993A0C91; Mon, 27 Apr 2020 15:23:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.599 X-Spam-Level: X-Spam-Status: No, score=-9.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 36TMWyU3z2yA; Mon, 27 Apr 2020 15:23:54 -0700 (PDT) Received: from smtp-fw-9102.amazon.com (smtp-fw-9102.amazon.com [207.171.184.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 828753A0C90; Mon, 27 Apr 2020 15:23:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1588026235; x=1619562235; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=ShvRWThyqIWgu28u0Oqkn8RVvXbJDSrmAexoOq4088s=; b=WbVnsBlQpXv/XoJLJedUx2Qae/pxAeBugNgeleF1vAnJ+APzx4RHwVBW ENw/ayc4x7Ez2DsfrguAf1K5/iF88FNgfrOtVCZOUrUPoUoUThMmCQnz4 dV/h1zayizdzfejQJVWDtuwBJh2+11fBrA6Z5SN3U75zA5Udvj6snDvd6 c=; IronPort-SDR: xoaVIRp554n0TIbjtHDfmrzPKx8Ux3/ZeO4Y9lkVL/0yH8IrK33z+wfYr99typ2p4p6lDMKtnU +0OVDju2AG5g== X-IronPort-AV: E=Sophos;i="5.73,325,1583193600"; d="scan'208";a="39819366" Thread-Topic: [UNVERIFIED SENDER] Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-1e-62350142.us-east-1.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-9102.sea19.amazon.com with ESMTP; 27 Apr 2020 22:23:52 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1e-62350142.us-east-1.amazon.com (Postfix) with ESMTPS id AB89EA06F6; Mon, 27 Apr 2020 22:23:50 +0000 (UTC) Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 22:23:49 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 22:23:49 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1497.006; Mon, 27 Apr 2020 22:23:49 +0000 From: "Richard Backman, Annabelle" To: Benjamin Kaduk CC: Mike Jones , "draft-ietf-secevent-http-push.all@ietf.org" , "id-event@ietf.org" Thread-Index: AdYapvFcpkAs4jP3S4SfG8JyuYpI/QB9F6IAABFCfgD//47/gA== Date: Mon, 27 Apr 2020 22:23:49 +0000 Message-ID: <5237A696-05A8-483D-BB7E-D10D372B8247@amazon.com> References: <06FCE524-D221-475A-998B-24E3CE85635E@amazon.com> <20200427220816.GE27494@kduck.mit.edu> In-Reply-To: <20200427220816.GE27494@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.21.0.200113 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.162.38] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] [UNVERIFIED SENDER] Re: AD review of draft-ietf-secevent-http-push-07 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 22:23:57 -0000 T2theSwgSSdsbCBtYWtlIHRoZSBjaGFuZ2VzIGFuZCBnZXQgb3V0IGFuIHVwZGF0ZS4NCg0KTm90 ZSB0aGF0IHNpbmNlIGFsbCBjb25maWd1cmF0aW9uIG9mIHRoZSB0cmFuc21pdHRlci9yZWNlaXZl ciByZWxhdGlvbnNoaXAgaXMgb3V0IG9mIHNjb3BlIHBlciBTZWN0aW9uIDEsIHNheWluZyB0aGF0 IHRoZSBleHBlY3RlZCBpZGVudGl0eSBmb3IgRE5TLUlEIGlzICJvdXQgb2Ygc2NvcGUiIGlzIGp1 c3QgcmVwaHJhc2luZyB5b3VyIHN1Z2dlc3Rpb24gb2YgInRoZSBleHBlY3RlZCBuYW1lIHdpbGwg YmUgY29uZmlndXJlZCIgd2l0aCBsYW5ndWFnZSBjb25zaXN0ZW50IHdpdGggdGhlIHJlc3Qgb2Yg dGhlIHRleHQuIF9fDQoNCuKAkw0KQW5uYWJlbGxlIEJhY2ttYW4gKHNoZS9oZXIpDQpBV1MgSWRl bnRpdHkNCmh0dHBzOi8vYXdzLmFtYXpvbi5jb20vaWRlbnRpdHkvDQogDQoNCu+7v09uIDQvMjcv MjAsIDM6MDggUE0sICJCZW5qYW1pbiBLYWR1ayIgPGthZHVrQG1pdC5lZHU+IHdyb3RlOg0KDQpD QVVUSU9OOiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6 YXRpb24uIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3Ug Y2FuIGNvbmZpcm0gdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KDQoN Cg0KT24gTW9uLCBBcHIgMjcsIDIwMjAgYXQgMDg6NTQ6MDVQTSArMDAwMCwgUmljaGFyZCBCYWNr bWFuLCBBbm5hYmVsbGUgd3JvdGU6DQo+IEkgY2FuIHB1dCBvdXQgYW4gdXBkYXRlLCBidXQgSSB0 aGluayBJJ20gbWlzc2luZyBwYXJ0IG9mIHRoZSBjb252ZXJzYXRpb24gaGVyZS4NCj4NCj4gSGVy ZSBpcyB3aGF0IEkgdW5kZXJzdGFuZCB0aGUgY2hhbmdlcyB0byBiZSwgYWxsIHdpdGhpbiAtcHVz aDoNCg0KSSB0aGluayB0aGF0J3MgcmlnaHQsIGFzIG11Y2ggYXMgcHV0dGluZyAoMykgb3V0IG9m IHNjb3BlIHBhaW5zIG1lLg0KDQpUaGFua3MsDQoNCkJlbg0KDQo+IDEuIFNlY3Rpb24gMSBzaG91 bGQgZ2V0IHRoZSBzZW50ZW5jZSAiSG93IFNFVHMgYXJlIGRlZmluZWQgYW5kIHRoZSBwcm9jZXNz IGJ5IHdoaWNoIHNlY3VyaXR5IGV2ZW50cyBhcmUgaWRlbnRpZmllZCBmb3IgU0VUIFJlY2lwaWVu dHMgYXJlIHNwZWNpZmllZCBpbiBbUkZDODQxN10uIg0KPg0KPiAyLiBJbiBTZWN0aW9uIDUuMywg cmVwbGFjZSAiZS5nLiwgc3ViamVjdCBjbGFpbXMiIHdpdGggIlBJSSIgYXMgd2FzIGFscmVhZHkg ZG9uZSBpbiAtcG9sbC4NCj4NCj4gMy4gSW4gU2VjdGlvbiA1LjMsIGFkZCB0ZXh0IGV4cGxhaW5p bmcgdGhhdCBkZXRlcm1pbmluZyB0aGUgZXhwZWN0ZWQgc2VydmljZSBpZGVudGl0eSB0byBtYXRj aCBhZ2FpbnN0IHVzaW5nIEROUy1JRCBpcyBvdXQgb2Ygc2NvcGUuDQo+DQo+IDQuIEluIFByaXZh Y3kgQ29uc2lkZXJhdGlvbnMsIGFkZCAiU0VUIFRyYW5zbWlzdHRlcnMgU0hPVUxEIGF0dGVtcHQg dG8gZGVsaXZlciBzZXRzIHRoYXQgYXJlIHRhcmdldGVkIHRvIHRoZSBzcGVjaWZpYyBidXNpbmVz cyBhbmQgcHJvdG9jb2wgbmVlZHMgb2Ygc3Vic2NyaWJlcnMiLCBhcyBhbHJlYWR5IGV4aXN0cyB3 aXRoaW4gLXBvbGwuDQo+DQo+IOKAkw0KPiBBbm5hYmVsbGUgQmFja21hbiAoc2hlL2hlcikNCj4g QVdTIElkZW50aXR5DQo+IGh0dHBzOi8vYXdzLmFtYXpvbi5jb20vaWRlbnRpdHkvDQo+DQo+DQo+ IE9uIDQvMjQvMjAsIDc6MTIgUE0sICJNaWtlIEpvbmVzIiA8TWljaGFlbC5Kb25lc0BtaWNyb3Nv ZnQuY29tPiB3cm90ZToNCj4NCj4gQ0FVVElPTjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20g b3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBh dHRhY2htZW50cyB1bmxlc3MgeW91IGNhbiBjb25maXJtIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhl IGNvbnRlbnQgaXMgc2FmZS4NCj4NCj4NCj4NCj4gVGhlc2Ugc3VnZ2VzdGlvbnMgbWFrZSBzZW5z ZSB0byBtZS4gIERvIHlvdSB3YW50IHRvIGRvIHRoZXNlIEFubmFiZWxsZSwgb3Igd291bGQgeW91 IGxpa2UgbWUgdG8/ICBJZiBJIGRvIGl0LCBpdCB3aWxsIHByb2JhYmx5IGJlIGVhcmx5IG5leHQg d2Vlay4NCj4NCj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGFua3MgYWxsLA0K PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCj4NCj4gLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+ DQo+IFNlbnQ6IEZyaWRheSwgQXByaWwgMjQsIDIwMjAgNTo0NCBQTQ0KPiBUbzogTWlrZSBKb25l cyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPg0KPiBDYzogZHJhZnQtaWV0Zi1zZWNldmVu dC1odHRwLXB1c2guYWxsQGlldGYub3JnOyBpZC1ldmVudEBpZXRmLm9yZw0KPiBTdWJqZWN0OiBS ZTogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2gt MDcNCj4NCj4gSGkgTWlrZSwNCj4NCj4gTXkgYXBvbG9naWVzIGZvciB5ZXQgYW5vdGhlciBsb25n IGRlbGF5LiAgSSdsbCB0cmltIHRoZSBiaXRzIHRoYXQgYXJlIGluIGdvb2Qgc2hhcGUgKG5lYXJs eSBhbGwgb2YgdGhlbSEpLg0KPg0KPiBJIGFsc28gdG9vayBhbm90aGVyIGxvb2sgYXQgdGhlICJk aWZmIiAobWFudWFsbHksIHRoYXQgaXMpIGJldHdlZW4gcHVzaCBhbmQgcG9sbCwgYW5kIGZvdW5k IGEgZmV3IHRoaW5ncyBpbiBwb2xsIHRoYXQgc2hvdWxkIHByb2JhYmx5IGJlIGhlcmUgYXMgd2Vs bC4NCj4NCj4gU2VjdGlvbiAxIHNob3VsZCBnZXQgdGhlIHNlbnRlbmNlICJIb3cgU0VUcyBhcmUg ZGVmaW5lZCBhbmQgdGhlIHByb2Nlc3MgYnkgd2hpY2ggc2VjdXJpdHkgZXZlbnRzIGFyZSBpZGVu dGlmaWVkIGZvciBTRVQgUmVjaXBpZW50cyBhcmUgc3BlY2lmaWVkIGluIFtSRkM4NDE3XS4iDQo+ DQo+IEluIHRoZSB0aHJlYWQgZm9yIC1wb2xsIHdlIHNhaWQgdGhhdCBTZWN0aW9uIDUuMyBvZiB0 aGlzIGRvY3VtZW50IHdvdWxkIGdldCBhIHMvZS5nLiwgc3ViamVjdCBjbGFpbXMvUElJLyB0byBt YXRjaCwgYnV0IHRoYXQgZG9lc24ndCBzZWVtIHRvIGhhdmUgaGFwcGVuZWQgeWV0Lg0KPg0KPiBU aGUgcG9sbCBQcml2YWN5IENvbnNpZGVyYXRpb25zIGhhdmUgYSBub3RlIGF0IHRoZSBzdGFydCBv ZiB0aGUgc2VjdGlvbiBhYm91dCAiU0VUIFRyYW5zbWlzdHRlcnMgU0hPVUxEIGF0dGVtcHQgdG8g ZGVsaXZlciBzZXRzIHRoYXQgYXJlIHRhcmdldGVkIHRvIHRoZSBzcGVjaWZpYyBidXNpbmVzcyBh bmQgcHJvdG9jb2wgbmVlZHMgb2Ygc3Vic2NyaWJlcnMiOyB3b3VsZCBhIHNpbWlsYXIgbm90ZSBt YWtlIHNlbnNlIGZvciB1cz8NCj4NCj4gT24gRnJpLCBGZWIgMDcsIDIwMjAgYXQgMDU6MTc6MTJQ TSArMDAwMCwgTWlrZSBKb25lcyB3cm90ZToNCj4gPiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAt cHVzaC0wODxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1zZWNldmVudC1o dHRwLXB1c2gtMDg+IHdhcyBwdWJsaXNoZWQgdG8gYWRkcmVzcyB0aGVzZSByZXZpZXcgY29tbWVu dHMuICAoLTA5PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNlY2V2ZW50 LWh0dHAtcHVzaC0wOT4gYWRkcmVzc2VkIGFkZGl0aW9uYWwgZWRpdG9yaWFsIG5pdHMuKSAgRGVz Y3JpcHRpb25zIG9mIHRoZSBjaGFuZ2VzIG1hZGUgZm9yIHRoZXNlIGNvbW1lbnRzIGFyZSBpbmxp bmUsIHByZWZpeGVkIGJ5ICJNaWtlPiIuDQo+ID4NCj4gPg0KPiA+DQo+ID4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBJZC1ldmVudCA8aWQtZXZlbnQtYm91bmNlc0BpZXRm Lm9yZz4gT24gQmVoYWxmIE9mIEJlbmphbWluIEthZHVrDQo+ID4gU2VudDogVHVlc2RheSwgRGVj ZW1iZXIgMTAsIDIwMTkgNDozNiBQTQ0KPiA+IFRvOiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAt cHVzaC5hbGxAaWV0Zi5vcmcNCj4gPiBDYzogaWQtZXZlbnRAaWV0Zi5vcmcNCj4gPiBTdWJqZWN0 OiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0w Nw0KPiA+DQo+ID4NCj4gPiBTZWN0aW9uIDUNCj4gPg0KPiA+DQo+ID4NCj4gPiBJIHdhbnQgdG8g c2VlIGhvdyB0aGUgZGlzY3Vzc2lvbiBnb2VzIG9uIHBvbGwncyAiQWNjZXNzIFRva2VuIENvbnNp ZGVyYXRpb25zIiBmaXJzdCwgYnV0IHdlIG1heSB3YW50IHNvbWV0aGluZyBsaWtlIHRoYXQgYXMg d2VsbC4NCj4gPg0KPiA+DQo+ID4NCj4gPiBNaWtlPiBZZXMsIGl0IG1ha2VzIHNlbnNlIHRvIGRv IHRoYXQNCj4NCj4gU2luY2Ugd2Ugbm8gbG9uZ2VyIGV4cGxpY2l0bHkgbWVudGlvbiBXV1ctQXV0 aGVudGljYXRlIGluIHRoaXMgZG9jdW1lbnQgSSB3b24ndCBpbnNpc3Qgb24gY29weWluZyB0aGUg QWNjZXNzIFRva2VuIENvbnNpZGVyYXRpb25zIG92ZXIsIGJ1dCBpdCBjb3VsZCBzdGlsbCBiZSB1 c2VmdWwgdG8gZG8gc28uDQo+DQo+ID4gU2VjdGlvbiA1LjINCj4gPg0KPiA+DQo+ID4NCj4gPiBS RkMgNjEyNSBpcyBncmVhdCBhbmQgSSdtIGdsYWQgd2UncmUgcmVmZXJlbmNpbmcgaXQsIGJ1dCBp dCBkb2VzIGxlYXZlIGEgY291cGxlIG9mIGdhcHMgdG8gYmUgc3BlY2lmaWVkIGZvciBhIGZ1bGwg cGljdHVyZSBvZiBhcHBsaWNhdGlvbiB1c2FnZS4NCj4gPg0KPiA+IFNwZWNpZmljYWxseSwgd2Ug c2hvdWxkIHNheSB3aGF0IG5hbWUgZnJvbSB0aGUgY2VydGlmaWNhdGUgd2UgdmFsaWRhdGUgKGFu ZCwgaWRlYWxseSwgaG93IHRoZSBhcHBsaWNhdGlvbiBrbm93cyB3aGF0IG5hbWUgaXQgaXMgZXhw ZWN0aW5nIHRvIHNlZSBpbiB0aGF0IG5hbWUgZmllbGQgaW4gdGhlIGNlcnRpZmljYXRlKS4gIE1v c3QgYXBwbGljYXRpb25zIHRoZXNlIGRheXMgd2lsbCBiZSB1c2luZyB0aGUgRE5TLUlELCBhbmQg cGVyaGFwcyBzb21ldGhpbmcgYWJvdXQgd2lsZGNhcmRzIGFuZC9vciByZXZvY2F0aW9uIGluZm8u ICBUaGUgbGFzdCB0aW1lIEkgd2FzIG1ha2luZyB0aGlzIGNvbW1lbnQgb24gYSBkb2N1bWVudCBJ IHBvaW50ZWQgdG8gUkZDIDg0NjEgYXMgYSBwb3RlbnRpYWwgZXhhbXBsZSB0byBjcmliIGZyb20s IGF0IGxlYXN0IGluIHRlcm1zIG9mIHRoZSB0eXBlcyBvZiB0aGluZ3MgdG8gdGFsayBhYm91dC4N Cj4gPg0KPiA+DQo+ID4NCj4gPiBNaWtlPiBJIGFkZGVkIEROUy1JRC4NCj4NCj4gVGhlIEROUy1J RCBpcyB0aGUgcGFydCBvZiB0aGUgY2VydGlmaWNhdGUgdGhhdCB3ZSBjb21wYXJlIGEgbmFtZSBh Z2FpbnN0LCBidXQgYSBjb21wYXJpc29uIHJlcXVpcmVzIGhhdmluZyB0d28gdGhpbmdzIC0tIHNp bmNlIHJlY2lwaWVudHMgYXJlIGFscmVhZHkgY29uZmlndXJlZCwgY2FuJ3Qgd2Ugc2F5IHRoYXQg dGhlIGV4cGVjdGVkIG5hbWUgd2lsbCBiZSBjb25maWd1cmVkIGFzIHdlbGw/DQo+DQo+IFRoYW5r cyBmb3IgYWxsIHRoZSB1cGRhdGVzIQ0KPg0KPiAtQmVuDQo+DQoNCg== From nobody Mon Apr 27 15:29:52 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A62F43A0CD3; Mon, 27 Apr 2020 15:29:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 87lDFxNloRkx; Mon, 27 Apr 2020 15:29:41 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640104.outbound.protection.outlook.com [40.107.64.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7353B3A0CA1; Mon, 27 Apr 2020 15:29:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dxm8mec2Y+YAVzTzU8WrA/6R0gm7GQtZWa3Cy8lnU4XOj21luelGX9p56f5p2wfpQ1dqZRh52Mj/9oifnLUMu8I+uAbx2w/A0TD68Rk8/Llst6m5WLdeZ5aVcBymr+js6203Jh5bwqD1hb9pAI6ZDRFVeUehm+mytWcf7hvPzIZVI9iiYpd294cemIfu3H0bCO6Oc9t9btZvaeL0RkvLs+JcG79uCg/S0KhgyeEKsF8Mz66p13kuh2xdFsuB7g94FSPNMIejSaLGFX0rl4DVwi+dcNnjLK15oWvOosGl+KV6emAGdJvCCE2K8/xVlJ0M+O3Nk5PLnElkHTNGFM3/uQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZY9Nt3UCE5FHEmjegokjrkgetkYedDeWFQ50EshqqrU=; b=STSPy7cEn+LtUs7VGO3CU9cV+WbU3EF1H2yYDPz0yfLPGHgO5x+rFiljIC1l2ZdADqpiSvQw+jsO5kNW2uY2/XJycFc3nBykitta0Rf/73jMfqh3VQohS5dqT5V/q4lnsAfTorcEqgcD5e+G1j2WMN+MjWl17+TSn74Gd5pxY0GxAl5C212kiZB4rUHsTSpAKm/ok1tweDvVkEhwHJmB3MBrHvoqVpWag6UWPCtyOQDs0uJ3QC3c020Xu377jKd5HqP3ZoLI6nQWSyOehAMRdrhdXXc5qyEpdmqIrDIV7+SyQRtRfQgaNj1Reg+F5LktQ9cI+Za8Sgyx0RwccKCX6A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZY9Nt3UCE5FHEmjegokjrkgetkYedDeWFQ50EshqqrU=; b=X0gki6ZX+jXWG2RwBC107AALowr3BHLMZZDWbURc+ZKQvSzcP7CEs0km4HLLMCrERCCDX8n1koBkB8pVXj8MBY66RIFQsYbLEvWRKJO/kCgOnS5oDRGXiszPjoL0yjEtRycxy+PR2Ouw1Q/I1pk1ypBBp709Q+dUTvW6t7lSiSI= Received: from MN2PR00MB0688.namprd00.prod.outlook.com (2603:10b6:208:199::23) by BL0PR00MB0337.namprd00.prod.outlook.com (2603:10b6:207:1f::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2993.0; Mon, 27 Apr 2020 22:29:36 +0000 Received: from MN2PR00MB0688.namprd00.prod.outlook.com ([fe80::d8ef:3352:9393:c073]) by MN2PR00MB0688.namprd00.prod.outlook.com ([fe80::d8ef:3352:9393:c073%8]) with mapi id 15.20.2992.000; Mon, 27 Apr 2020 22:29:36 +0000 From: Mike Jones To: "Richard Backman, Annabelle" , Benjamin Kaduk CC: "draft-ietf-secevent-http-push.all@ietf.org" , "id-event@ietf.org" Thread-Topic: [UNVERIFIED SENDER] Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 Thread-Index: AQHWHOKLnL62sYM0HkKqShEwe6AFvKiNjEHw Date: Mon, 27 Apr 2020 22:29:36 +0000 Message-ID: References: <06FCE524-D221-475A-998B-24E3CE85635E@amazon.com> <20200427220816.GE27494@kduck.mit.edu> <5237A696-05A8-483D-BB7E-D10D372B8247@amazon.com> In-Reply-To: <5237A696-05A8-483D-BB7E-D10D372B8247@amazon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5490ebb0-32bb-4219-9228-00007dff6942; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-04-27T22:27:21Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.87.252] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 64badcc0-380f-4170-c54a-08d7eafa7774 x-ms-traffictypediagnostic: BL0PR00MB0337: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0386B406AA received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR00MB0688.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(366004)(376002)(39860400002)(396003)(136003)(33656002)(86362001)(2906002)(71200400001)(4326008)(8990500004)(8676002)(8936002)(5660300002)(10290500003)(186003)(26005)(76116006)(66446008)(110136005)(7696005)(316002)(54906003)(966005)(53546011)(82950400001)(66476007)(66556008)(64756008)(66946007)(82960400001)(9686003)(55016002)(6506007)(52536014)(478600001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MN2PR00MB0688.namprd00.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 64badcc0-380f-4170-c54a-08d7eafa7774 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Apr 2020 22:29:36.0640 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: K8KOPuwvVhtBbUKPDJOkGtw3HcaOtjHS3rDCULT7YzHX9I6YB4jOH1E2NwjkwvnbcbXBmo6lmvGDsjcjKHXQvw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR00MB0337 Archived-At: Subject: Re: [Id-event] [UNVERIFIED SENDER] Re: AD review of draft-ietf-secevent-http-push-07 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 22:29:51 -0000 VGhhbmtzIEFubmFiZWxsZS4gIFNvIHlvdSdsbCBkbyBQdWxsIGFuZCBJJ2xsIGRvIFBvbGwsIHJp Z2h0PyAgTGV0J3MgY2hlY2sgYm90aCBvZiBvdXIgY2hhbmdlcyBpbnRvIEdpdEh1YiBhbmQgcmV2 aWV3IHRoZW0gZm9yIGVhY2ggb3RoZXIsIGFuZCB0aGVuIHB1Ymxpc2ggdG9nZXRoZXIuDQoNCgkJ CQktLSBNaWtlDQoNClAuUy4gIFdpbGwgeW91IGJlIGF0IHRoZSB2aXJ0dWFsIElJVyB0aGlzIHdl ZWssIEFubmFiZWxsZT8gIE1heWJlIHdlIGNvdWxkIHZpcnR1YWxseSB0YWxrIGFib3V0IHRoZSBj aGFuZ2VzIHRoZXJlLCBpZiBkb2luZyBzbyB3b3VsZCBiZSB1c2VmdWwuDQoNCi0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSA8cmljaGFu bmFAYW1hem9uLmNvbT4gDQpTZW50OiBNb25kYXksIEFwcmlsIDI3LCAyMDIwIDM6MjQgUE0NClRv OiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT4NCkNjOiBNaWtlIEpvbmVzIDxNaWNoYWVs LkpvbmVzQG1pY3Jvc29mdC5jb20+OyBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC5hbGxA aWV0Zi5vcmc7IGlkLWV2ZW50QGlldGYub3JnDQpTdWJqZWN0OiBbRVhURVJOQUxdIFJlOiBbVU5W RVJJRklFRCBTRU5ERVJdIFJlOiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLXNl Y2V2ZW50LWh0dHAtcHVzaC0wNw0KDQpPa2F5LCBJJ2xsIG1ha2UgdGhlIGNoYW5nZXMgYW5kIGdl dCBvdXQgYW4gdXBkYXRlLg0KDQpOb3RlIHRoYXQgc2luY2UgYWxsIGNvbmZpZ3VyYXRpb24gb2Yg dGhlIHRyYW5zbWl0dGVyL3JlY2VpdmVyIHJlbGF0aW9uc2hpcCBpcyBvdXQgb2Ygc2NvcGUgcGVy IFNlY3Rpb24gMSwgc2F5aW5nIHRoYXQgdGhlIGV4cGVjdGVkIGlkZW50aXR5IGZvciBETlMtSUQg aXMgIm91dCBvZiBzY29wZSIgaXMganVzdCByZXBocmFzaW5nIHlvdXIgc3VnZ2VzdGlvbiBvZiAi dGhlIGV4cGVjdGVkIG5hbWUgd2lsbCBiZSBjb25maWd1cmVkIiB3aXRoIGxhbmd1YWdlIGNvbnNp c3RlbnQgd2l0aCB0aGUgcmVzdCBvZiB0aGUgdGV4dC4gX18NCg0K4oCTDQpBbm5hYmVsbGUgQmFj a21hbiAoc2hlL2hlcikNCkFXUyBJZGVudGl0eQ0KaHR0cHM6Ly9hd3MuYW1hem9uLmNvbS9pZGVu dGl0eS8NCiANCg0K77u/T24gNC8yNy8yMCwgMzowOCBQTSwgIkJlbmphbWluIEthZHVrIiA8a2Fk dWtAbWl0LmVkdT4gd3JvdGU6DQoNCkNBVVRJT046IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9t IG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4g YXR0YWNobWVudHMgdW5sZXNzIHlvdSBjYW4gY29uZmlybSB0aGUgc2VuZGVyIGFuZCBrbm93IHRo ZSBjb250ZW50IGlzIHNhZmUuDQoNCg0KDQpPbiBNb24sIEFwciAyNywgMjAyMCBhdCAwODo1NDow NVBNICswMDAwLCBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSB3cm90ZToNCj4gSSBjYW4gcHV0 IG91dCBhbiB1cGRhdGUsIGJ1dCBJIHRoaW5rIEknbSBtaXNzaW5nIHBhcnQgb2YgdGhlIGNvbnZl cnNhdGlvbiBoZXJlLg0KPg0KPiBIZXJlIGlzIHdoYXQgSSB1bmRlcnN0YW5kIHRoZSBjaGFuZ2Vz IHRvIGJlLCBhbGwgd2l0aGluIC1wdXNoOg0KDQpJIHRoaW5rIHRoYXQncyByaWdodCwgYXMgbXVj aCBhcyBwdXR0aW5nICgzKSBvdXQgb2Ygc2NvcGUgcGFpbnMgbWUuDQoNClRoYW5rcywNCg0KQmVu DQoNCj4gMS4gU2VjdGlvbiAxIHNob3VsZCBnZXQgdGhlIHNlbnRlbmNlICJIb3cgU0VUcyBhcmUg ZGVmaW5lZCBhbmQgdGhlIHByb2Nlc3MgYnkgd2hpY2ggc2VjdXJpdHkgZXZlbnRzIGFyZSBpZGVu dGlmaWVkIGZvciBTRVQgUmVjaXBpZW50cyBhcmUgc3BlY2lmaWVkIGluIFtSRkM4NDE3XS4iDQo+ DQo+IDIuIEluIFNlY3Rpb24gNS4zLCByZXBsYWNlICJlLmcuLCBzdWJqZWN0IGNsYWltcyIgd2l0 aCAiUElJIiBhcyB3YXMgYWxyZWFkeSBkb25lIGluIC1wb2xsLg0KPg0KPiAzLiBJbiBTZWN0aW9u IDUuMywgYWRkIHRleHQgZXhwbGFpbmluZyB0aGF0IGRldGVybWluaW5nIHRoZSBleHBlY3RlZCBz ZXJ2aWNlIGlkZW50aXR5IHRvIG1hdGNoIGFnYWluc3QgdXNpbmcgRE5TLUlEIGlzIG91dCBvZiBz Y29wZS4NCj4NCj4gNC4gSW4gUHJpdmFjeSBDb25zaWRlcmF0aW9ucywgYWRkICJTRVQgVHJhbnNt aXN0dGVycyBTSE9VTEQgYXR0ZW1wdCB0byBkZWxpdmVyIHNldHMgdGhhdCBhcmUgdGFyZ2V0ZWQg dG8gdGhlIHNwZWNpZmljIGJ1c2luZXNzIGFuZCBwcm90b2NvbCBuZWVkcyBvZiBzdWJzY3JpYmVy cyIsIGFzIGFscmVhZHkgZXhpc3RzIHdpdGhpbiAtcG9sbC4NCj4NCj4g4oCTDQo+IEFubmFiZWxs ZSBCYWNrbWFuIChzaGUvaGVyKQ0KPiBBV1MgSWRlbnRpdHkNCj4gaHR0cHM6Ly9hd3MuYW1hem9u LmNvbS9pZGVudGl0eS8NCj4NCj4NCj4gT24gNC8yNC8yMCwgNzoxMiBQTSwgIk1pa2UgSm9uZXMi IDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+IHdyb3RlOg0KPg0KPiBDQVVUSU9OOiBUaGlz IGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5v dCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZpcm0g dGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KPg0KPg0KPg0KPiBUaGVz ZSBzdWdnZXN0aW9ucyBtYWtlIHNlbnNlIHRvIG1lLiAgRG8geW91IHdhbnQgdG8gZG8gdGhlc2Ug QW5uYWJlbGxlLCBvciB3b3VsZCB5b3UgbGlrZSBtZSB0bz8gIElmIEkgZG8gaXQsIGl0IHdpbGwg cHJvYmFibHkgYmUgZWFybHkgbmV4dCB3ZWVrLg0KPg0KPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFRoYW5rcyBhbGwsDQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg LS0gTWlrZQ0KPg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCZW5qYW1p biBLYWR1ayA8a2FkdWtAbWl0LmVkdT4NCj4gU2VudDogRnJpZGF5LCBBcHJpbCAyNCwgMjAyMCA1 OjQ0IFBNDQo+IFRvOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+DQo+ IENjOiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC5hbGxAaWV0Zi5vcmc7IGlkLWV2ZW50 QGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1p ZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wNw0KPg0KPiBIaSBNaWtlLA0KPg0KPiBNeSBhcG9sb2dp ZXMgZm9yIHlldCBhbm90aGVyIGxvbmcgZGVsYXkuICBJJ2xsIHRyaW0gdGhlIGJpdHMgdGhhdCBh cmUgaW4gZ29vZCBzaGFwZSAobmVhcmx5IGFsbCBvZiB0aGVtISkuDQo+DQo+IEkgYWxzbyB0b29r IGFub3RoZXIgbG9vayBhdCB0aGUgImRpZmYiIChtYW51YWxseSwgdGhhdCBpcykgYmV0d2VlbiBw dXNoIGFuZCBwb2xsLCBhbmQgZm91bmQgYSBmZXcgdGhpbmdzIGluIHBvbGwgdGhhdCBzaG91bGQg cHJvYmFibHkgYmUgaGVyZSBhcyB3ZWxsLg0KPg0KPiBTZWN0aW9uIDEgc2hvdWxkIGdldCB0aGUg c2VudGVuY2UgIkhvdyBTRVRzIGFyZSBkZWZpbmVkIGFuZCB0aGUgcHJvY2VzcyBieSB3aGljaCBz ZWN1cml0eSBldmVudHMgYXJlIGlkZW50aWZpZWQgZm9yIFNFVCBSZWNpcGllbnRzIGFyZSBzcGVj aWZpZWQgaW4gW1JGQzg0MTddLiINCj4NCj4gSW4gdGhlIHRocmVhZCBmb3IgLXBvbGwgd2Ugc2Fp ZCB0aGF0IFNlY3Rpb24gNS4zIG9mIHRoaXMgZG9jdW1lbnQgd291bGQgZ2V0IGEgcy9lLmcuLCBz dWJqZWN0IGNsYWltcy9QSUkvIHRvIG1hdGNoLCBidXQgdGhhdCBkb2Vzbid0IHNlZW0gdG8gaGF2 ZSBoYXBwZW5lZCB5ZXQuDQo+DQo+IFRoZSBwb2xsIFByaXZhY3kgQ29uc2lkZXJhdGlvbnMgaGF2 ZSBhIG5vdGUgYXQgdGhlIHN0YXJ0IG9mIHRoZSBzZWN0aW9uIGFib3V0ICJTRVQgVHJhbnNtaXN0 dGVycyBTSE9VTEQgYXR0ZW1wdCB0byBkZWxpdmVyIHNldHMgdGhhdCBhcmUgdGFyZ2V0ZWQgdG8g dGhlIHNwZWNpZmljIGJ1c2luZXNzIGFuZCBwcm90b2NvbCBuZWVkcyBvZiBzdWJzY3JpYmVycyI7 IHdvdWxkIGEgc2ltaWxhciBub3RlIG1ha2Ugc2Vuc2UgZm9yIHVzPw0KPg0KPiBPbiBGcmksIEZl YiAwNywgMjAyMCBhdCAwNToxNzoxMlBNICswMDAwLCBNaWtlIEpvbmVzIHdyb3RlOg0KPiA+IGRy YWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLTA4PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wOD4gd2FzIHB1Ymxpc2hlZCB0byBhZGRy ZXNzIHRoZXNlIHJldmlldyBjb21tZW50cy4gICgtMDk8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLTA5PiBhZGRyZXNzZWQgYWRkaXRpb25h bCBlZGl0b3JpYWwgbml0cy4pICBEZXNjcmlwdGlvbnMgb2YgdGhlIGNoYW5nZXMgbWFkZSBmb3Ig dGhlc2UgY29tbWVudHMgYXJlIGlubGluZSwgcHJlZml4ZWQgYnkgIk1pa2U+Ii4NCj4gPg0KPiA+ DQo+ID4NCj4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206IElkLWV2ZW50 IDxpZC1ldmVudC1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgQmVuamFtaW4gS2FkdWsN Cj4gPiBTZW50OiBUdWVzZGF5LCBEZWNlbWJlciAxMCwgMjAxOSA0OjM2IFBNDQo+ID4gVG86IGRy YWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLmFsbEBpZXRmLm9yZw0KPiA+IENjOiBpZC1ldmVu dEBpZXRmLm9yZw0KPiA+IFN1YmplY3Q6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWll dGYtc2VjZXZlbnQtaHR0cC1wdXNoLTA3DQo+ID4NCj4gPg0KPiA+IFNlY3Rpb24gNQ0KPiA+DQo+ ID4NCj4gPg0KPiA+IEkgd2FudCB0byBzZWUgaG93IHRoZSBkaXNjdXNzaW9uIGdvZXMgb24gcG9s bCdzICJBY2Nlc3MgVG9rZW4gQ29uc2lkZXJhdGlvbnMiIGZpcnN0LCBidXQgd2UgbWF5IHdhbnQg c29tZXRoaW5nIGxpa2UgdGhhdCBhcyB3ZWxsLg0KPiA+DQo+ID4NCj4gPg0KPiA+IE1pa2U+IFll cywgaXQgbWFrZXMgc2Vuc2UgdG8gZG8gdGhhdA0KPg0KPiBTaW5jZSB3ZSBubyBsb25nZXIgZXhw bGljaXRseSBtZW50aW9uIFdXVy1BdXRoZW50aWNhdGUgaW4gdGhpcyBkb2N1bWVudCBJIHdvbid0 IGluc2lzdCBvbiBjb3B5aW5nIHRoZSBBY2Nlc3MgVG9rZW4gQ29uc2lkZXJhdGlvbnMgb3Zlciwg YnV0IGl0IGNvdWxkIHN0aWxsIGJlIHVzZWZ1bCB0byBkbyBzby4NCj4NCj4gPiBTZWN0aW9uIDUu Mg0KPiA+DQo+ID4NCj4gPg0KPiA+IFJGQyA2MTI1IGlzIGdyZWF0IGFuZCBJJ20gZ2xhZCB3ZSdy ZSByZWZlcmVuY2luZyBpdCwgYnV0IGl0IGRvZXMgbGVhdmUgYSBjb3VwbGUgb2YgZ2FwcyB0byBi ZSBzcGVjaWZpZWQgZm9yIGEgZnVsbCBwaWN0dXJlIG9mIGFwcGxpY2F0aW9uIHVzYWdlLg0KPiA+ DQo+ID4gU3BlY2lmaWNhbGx5LCB3ZSBzaG91bGQgc2F5IHdoYXQgbmFtZSBmcm9tIHRoZSBjZXJ0 aWZpY2F0ZSB3ZSB2YWxpZGF0ZSAoYW5kLCBpZGVhbGx5LCBob3cgdGhlIGFwcGxpY2F0aW9uIGtu b3dzIHdoYXQgbmFtZSBpdCBpcyBleHBlY3RpbmcgdG8gc2VlIGluIHRoYXQgbmFtZSBmaWVsZCBp biB0aGUgY2VydGlmaWNhdGUpLiAgTW9zdCBhcHBsaWNhdGlvbnMgdGhlc2UgZGF5cyB3aWxsIGJl IHVzaW5nIHRoZSBETlMtSUQsIGFuZCBwZXJoYXBzIHNvbWV0aGluZyBhYm91dCB3aWxkY2FyZHMg YW5kL29yIHJldm9jYXRpb24gaW5mby4gIFRoZSBsYXN0IHRpbWUgSSB3YXMgbWFraW5nIHRoaXMg Y29tbWVudCBvbiBhIGRvY3VtZW50IEkgcG9pbnRlZCB0byBSRkMgODQ2MSBhcyBhIHBvdGVudGlh bCBleGFtcGxlIHRvIGNyaWIgZnJvbSwgYXQgbGVhc3QgaW4gdGVybXMgb2YgdGhlIHR5cGVzIG9m IHRoaW5ncyB0byB0YWxrIGFib3V0Lg0KPiA+DQo+ID4NCj4gPg0KPiA+IE1pa2U+IEkgYWRkZWQg RE5TLUlELg0KPg0KPiBUaGUgRE5TLUlEIGlzIHRoZSBwYXJ0IG9mIHRoZSBjZXJ0aWZpY2F0ZSB0 aGF0IHdlIGNvbXBhcmUgYSBuYW1lIGFnYWluc3QsIGJ1dCBhIGNvbXBhcmlzb24gcmVxdWlyZXMg aGF2aW5nIHR3byB0aGluZ3MgLS0gc2luY2UgcmVjaXBpZW50cyBhcmUgYWxyZWFkeSBjb25maWd1 cmVkLCBjYW4ndCB3ZSBzYXkgdGhhdCB0aGUgZXhwZWN0ZWQgbmFtZSB3aWxsIGJlIGNvbmZpZ3Vy ZWQgYXMgd2VsbD8NCj4NCj4gVGhhbmtzIGZvciBhbGwgdGhlIHVwZGF0ZXMhDQo+DQo+IC1CZW4N Cj4NCg0K From nobody Mon Apr 27 15:54:59 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E36403A0D2A; Mon, 27 Apr 2020 15:54:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rjmaKltIRvTG; Mon, 27 Apr 2020 15:54:41 -0700 (PDT) Received: from smtp-fw-2101.amazon.com (smtp-fw-2101.amazon.com [72.21.196.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 628713A0D0B; Mon, 27 Apr 2020 15:54:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1588028081; x=1619564081; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=0AtRwnzt1vMBSyL40Q3C3KiZkRl3ZUbdO31Qo3lresk=; b=Mt2UosLZ3AyBC0wlJiUi5TcISGOvPrfFfLoVn2BPYLj5ZNYm8MWN8P4T xAJI6bruKaAe8SvZCieQkGSwzdgNTNh9maZo/AioNEJNdReTQSFyUJ+Aq Lld4wIyb1B5Km/ktnV2sjx3oEEFndQBF4Oz8zuVuMQ6R2FOsiJ3TxsB16 s=; IronPort-SDR: zA4SaLYHe9jm5JStB+2FpQ4SQeqiDjA0ygcZ6NhYx7sVaO/P3YmcNMBHuDHwDv34a42SOmkV6J 7Jic2s8rAAYQ== X-IronPort-AV: E=Sophos;i="5.73,325,1583193600"; d="scan'208";a="27819104" Thread-Topic: [UNVERIFIED SENDER] Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 Received: from iad12-co-svc-p1-lb1-vlan2.amazon.com (HELO email-inbound-relay-1e-27fb8269.us-east-1.amazon.com) ([10.43.8.2]) by smtp-border-fw-out-2101.iad2.amazon.com with ESMTP; 27 Apr 2020 22:54:28 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1e-27fb8269.us-east-1.amazon.com (Postfix) with ESMTPS id BF127A226B; Mon, 27 Apr 2020 22:54:25 +0000 (UTC) Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 22:54:24 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 22:54:24 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1497.006; Mon, 27 Apr 2020 22:54:24 +0000 From: "Richard Backman, Annabelle" To: Mike Jones , Benjamin Kaduk CC: "draft-ietf-secevent-http-push.all@ietf.org" , "id-event@ietf.org" Thread-Index: AdYapvFcpkAs4jP3S4SfG8JyuYpI/QB9F6IAABFCfgD//47/gIAAdvYA//+RlQA= Date: Mon, 27 Apr 2020 22:54:24 +0000 Message-ID: <90E0D5D6-6741-403A-9E6B-8489CE0D0158@amazon.com> References: <06FCE524-D221-475A-998B-24E3CE85635E@amazon.com> <20200427220816.GE27494@kduck.mit.edu> <5237A696-05A8-483D-BB7E-D10D372B8247@amazon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.21.0.200113 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.160.8] Content-Type: text/plain; charset="utf-8" Content-ID: <527751C629FFF241BBB13F311C27A1F6@amazon.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] [UNVERIFIED SENDER] Re: AD review of draft-ietf-secevent-http-push-07 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 22:54:45 -0000 TXkgaW1wcmVzc2lvbiB3YXMgdGhlIGNoYW5nZXMgd2VyZSBvbmx5IGluIC1wdXNoLiBJZiB0aGVy ZSBzb21lIG9mIHRoZXNlIGNoYW5nZXMgbmVlZCB0byBiZSBtYWRlIHRvIC1wb2xsIEkgY2FuIGRv IHRoYXQgYXMgd2VsbC4gT3IgaXMgdGhlcmUgYSBzZXBhcmF0ZSBzZXQgb2YgY2hhbmdlcyBmb3Ig LXBvbGw/DQoNCkkgd2lsbCBhdCBsZWFzdCBkcm9wIGluIG9uIHRoZSB2aXJ0dWFsIElJVy4gSSBh bSBub3Qgc3VyZSBob3cgbXVjaCBvZiBhIHByZXNlbmNlIEkgd2lsbCBiZSB0aGVyZSwgYnV0IGhh cHB5IHRvIHNldCBhc2lkZSBzb21lIHRpbWUgdG8gZGlzY3VzcyBlaXRoZXIgdGhlcmUgb3IgMTox IHZpYSA8dmlkZW8gY29uZmVyZW5jZSBwbGF0Zm9ybSBkdSBqb3VyIGFzIGxvbmcgYXMgaXQgaXNu J3QgWm9vbT4uDQoNCuKAkw0KQW5uYWJlbGxlIEJhY2ttYW4gKHNoZS9oZXIpDQpBV1MgSWRlbnRp dHkNCmh0dHBzOi8vYXdzLmFtYXpvbi5jb20vaWRlbnRpdHkvDQogDQoNCu+7v09uIDQvMjcvMjAs IDM6MzAgUE0sICJNaWtlIEpvbmVzIiA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPiB3cm90 ZToNCg0KQ0FVVElPTjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUg b3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1bmxl c3MgeW91IGNhbiBjb25maXJtIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2Fm ZS4NCg0KDQoNClRoYW5rcyBBbm5hYmVsbGUuICBTbyB5b3UnbGwgZG8gUHVsbCBhbmQgSSdsbCBk byBQb2xsLCByaWdodD8gIExldCdzIGNoZWNrIGJvdGggb2Ygb3VyIGNoYW5nZXMgaW50byBHaXRI dWIgYW5kIHJldmlldyB0aGVtIGZvciBlYWNoIG90aGVyLCBhbmQgdGhlbiBwdWJsaXNoIHRvZ2V0 aGVyLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KUC5TLiAg V2lsbCB5b3UgYmUgYXQgdGhlIHZpcnR1YWwgSUlXIHRoaXMgd2VlaywgQW5uYWJlbGxlPyAgTWF5 YmUgd2UgY291bGQgdmlydHVhbGx5IHRhbGsgYWJvdXQgdGhlIGNoYW5nZXMgdGhlcmUsIGlmIGRv aW5nIHNvIHdvdWxkIGJlIHVzZWZ1bC4NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZy b206IFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5uYUBhbWF6b24uY29tPg0KU2Vu dDogTW9uZGF5LCBBcHJpbCAyNywgMjAyMCAzOjI0IFBNDQpUbzogQmVuamFtaW4gS2FkdWsgPGth ZHVrQG1pdC5lZHU+DQpDYzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29t PjsgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2guYWxsQGlldGYub3JnOyBpZC1ldmVudEBp ZXRmLm9yZw0KU3ViamVjdDogW0VYVEVSTkFMXSBSZTogW1VOVkVSSUZJRUQgU0VOREVSXSBSZTog W0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2gtMDcN Cg0KT2theSwgSSdsbCBtYWtlIHRoZSBjaGFuZ2VzIGFuZCBnZXQgb3V0IGFuIHVwZGF0ZS4NCg0K Tm90ZSB0aGF0IHNpbmNlIGFsbCBjb25maWd1cmF0aW9uIG9mIHRoZSB0cmFuc21pdHRlci9yZWNl aXZlciByZWxhdGlvbnNoaXAgaXMgb3V0IG9mIHNjb3BlIHBlciBTZWN0aW9uIDEsIHNheWluZyB0 aGF0IHRoZSBleHBlY3RlZCBpZGVudGl0eSBmb3IgRE5TLUlEIGlzICJvdXQgb2Ygc2NvcGUiIGlz IGp1c3QgcmVwaHJhc2luZyB5b3VyIHN1Z2dlc3Rpb24gb2YgInRoZSBleHBlY3RlZCBuYW1lIHdp bGwgYmUgY29uZmlndXJlZCIgd2l0aCBsYW5ndWFnZSBjb25zaXN0ZW50IHdpdGggdGhlIHJlc3Qg b2YgdGhlIHRleHQuIF9fDQoNCuKAkw0KQW5uYWJlbGxlIEJhY2ttYW4gKHNoZS9oZXIpDQpBV1Mg SWRlbnRpdHkNCmh0dHBzOi8vYXdzLmFtYXpvbi5jb20vaWRlbnRpdHkvDQoNCg0KT24gNC8yNy8y MCwgMzowOCBQTSwgIkJlbmphbWluIEthZHVrIiA8a2FkdWtAbWl0LmVkdT4gd3JvdGU6DQoNCkNB VVRJT046IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXph dGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSBj YW4gY29uZmlybSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQoNCg0K DQpPbiBNb24sIEFwciAyNywgMjAyMCBhdCAwODo1NDowNVBNICswMDAwLCBSaWNoYXJkIEJhY2tt YW4sIEFubmFiZWxsZSB3cm90ZToNCj4gSSBjYW4gcHV0IG91dCBhbiB1cGRhdGUsIGJ1dCBJIHRo aW5rIEknbSBtaXNzaW5nIHBhcnQgb2YgdGhlIGNvbnZlcnNhdGlvbiBoZXJlLg0KPg0KPiBIZXJl IGlzIHdoYXQgSSB1bmRlcnN0YW5kIHRoZSBjaGFuZ2VzIHRvIGJlLCBhbGwgd2l0aGluIC1wdXNo Og0KDQpJIHRoaW5rIHRoYXQncyByaWdodCwgYXMgbXVjaCBhcyBwdXR0aW5nICgzKSBvdXQgb2Yg c2NvcGUgcGFpbnMgbWUuDQoNClRoYW5rcywNCg0KQmVuDQoNCj4gMS4gU2VjdGlvbiAxIHNob3Vs ZCBnZXQgdGhlIHNlbnRlbmNlICJIb3cgU0VUcyBhcmUgZGVmaW5lZCBhbmQgdGhlIHByb2Nlc3Mg Ynkgd2hpY2ggc2VjdXJpdHkgZXZlbnRzIGFyZSBpZGVudGlmaWVkIGZvciBTRVQgUmVjaXBpZW50 cyBhcmUgc3BlY2lmaWVkIGluIFtSRkM4NDE3XS4iDQo+DQo+IDIuIEluIFNlY3Rpb24gNS4zLCBy ZXBsYWNlICJlLmcuLCBzdWJqZWN0IGNsYWltcyIgd2l0aCAiUElJIiBhcyB3YXMgYWxyZWFkeSBk b25lIGluIC1wb2xsLg0KPg0KPiAzLiBJbiBTZWN0aW9uIDUuMywgYWRkIHRleHQgZXhwbGFpbmlu ZyB0aGF0IGRldGVybWluaW5nIHRoZSBleHBlY3RlZCBzZXJ2aWNlIGlkZW50aXR5IHRvIG1hdGNo IGFnYWluc3QgdXNpbmcgRE5TLUlEIGlzIG91dCBvZiBzY29wZS4NCj4NCj4gNC4gSW4gUHJpdmFj eSBDb25zaWRlcmF0aW9ucywgYWRkICJTRVQgVHJhbnNtaXN0dGVycyBTSE9VTEQgYXR0ZW1wdCB0 byBkZWxpdmVyIHNldHMgdGhhdCBhcmUgdGFyZ2V0ZWQgdG8gdGhlIHNwZWNpZmljIGJ1c2luZXNz IGFuZCBwcm90b2NvbCBuZWVkcyBvZiBzdWJzY3JpYmVycyIsIGFzIGFscmVhZHkgZXhpc3RzIHdp dGhpbiAtcG9sbC4NCj4NCj4g4oCTDQo+IEFubmFiZWxsZSBCYWNrbWFuIChzaGUvaGVyKQ0KPiBB V1MgSWRlbnRpdHkNCj4gaHR0cHM6Ly9hd3MuYW1hem9uLmNvbS9pZGVudGl0eS8NCj4NCj4NCj4g T24gNC8yNC8yMCwgNzoxMiBQTSwgIk1pa2UgSm9uZXMiIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29m dC5jb20+IHdyb3RlOg0KPg0KPiBDQVVUSU9OOiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBv dXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0 dGFjaG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZpcm0gdGhlIHNlbmRlciBhbmQga25vdyB0aGUg Y29udGVudCBpcyBzYWZlLg0KPg0KPg0KPg0KPiBUaGVzZSBzdWdnZXN0aW9ucyBtYWtlIHNlbnNl IHRvIG1lLiAgRG8geW91IHdhbnQgdG8gZG8gdGhlc2UgQW5uYWJlbGxlLCBvciB3b3VsZCB5b3Ug bGlrZSBtZSB0bz8gIElmIEkgZG8gaXQsIGl0IHdpbGwgcHJvYmFibHkgYmUgZWFybHkgbmV4dCB3 ZWVrLg0KPg0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcyBhbGwsDQo+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KPg0KPiAtLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT4N Cj4gU2VudDogRnJpZGF5LCBBcHJpbCAyNCwgMjAyMCA1OjQ0IFBNDQo+IFRvOiBNaWtlIEpvbmVz IDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+DQo+IENjOiBkcmFmdC1pZXRmLXNlY2V2ZW50 LWh0dHAtcHVzaC5hbGxAaWV0Zi5vcmc7IGlkLWV2ZW50QGlldGYub3JnDQo+IFN1YmplY3Q6IFJl OiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0w Nw0KPg0KPiBIaSBNaWtlLA0KPg0KPiBNeSBhcG9sb2dpZXMgZm9yIHlldCBhbm90aGVyIGxvbmcg ZGVsYXkuICBJJ2xsIHRyaW0gdGhlIGJpdHMgdGhhdCBhcmUgaW4gZ29vZCBzaGFwZSAobmVhcmx5 IGFsbCBvZiB0aGVtISkuDQo+DQo+IEkgYWxzbyB0b29rIGFub3RoZXIgbG9vayBhdCB0aGUgImRp ZmYiIChtYW51YWxseSwgdGhhdCBpcykgYmV0d2VlbiBwdXNoIGFuZCBwb2xsLCBhbmQgZm91bmQg YSBmZXcgdGhpbmdzIGluIHBvbGwgdGhhdCBzaG91bGQgcHJvYmFibHkgYmUgaGVyZSBhcyB3ZWxs Lg0KPg0KPiBTZWN0aW9uIDEgc2hvdWxkIGdldCB0aGUgc2VudGVuY2UgIkhvdyBTRVRzIGFyZSBk ZWZpbmVkIGFuZCB0aGUgcHJvY2VzcyBieSB3aGljaCBzZWN1cml0eSBldmVudHMgYXJlIGlkZW50 aWZpZWQgZm9yIFNFVCBSZWNpcGllbnRzIGFyZSBzcGVjaWZpZWQgaW4gW1JGQzg0MTddLiINCj4N Cj4gSW4gdGhlIHRocmVhZCBmb3IgLXBvbGwgd2Ugc2FpZCB0aGF0IFNlY3Rpb24gNS4zIG9mIHRo aXMgZG9jdW1lbnQgd291bGQgZ2V0IGEgcy9lLmcuLCBzdWJqZWN0IGNsYWltcy9QSUkvIHRvIG1h dGNoLCBidXQgdGhhdCBkb2Vzbid0IHNlZW0gdG8gaGF2ZSBoYXBwZW5lZCB5ZXQuDQo+DQo+IFRo ZSBwb2xsIFByaXZhY3kgQ29uc2lkZXJhdGlvbnMgaGF2ZSBhIG5vdGUgYXQgdGhlIHN0YXJ0IG9m IHRoZSBzZWN0aW9uIGFib3V0ICJTRVQgVHJhbnNtaXN0dGVycyBTSE9VTEQgYXR0ZW1wdCB0byBk ZWxpdmVyIHNldHMgdGhhdCBhcmUgdGFyZ2V0ZWQgdG8gdGhlIHNwZWNpZmljIGJ1c2luZXNzIGFu ZCBwcm90b2NvbCBuZWVkcyBvZiBzdWJzY3JpYmVycyI7IHdvdWxkIGEgc2ltaWxhciBub3RlIG1h a2Ugc2Vuc2UgZm9yIHVzPw0KPg0KPiBPbiBGcmksIEZlYiAwNywgMjAyMCBhdCAwNToxNzoxMlBN ICswMDAwLCBNaWtlIEpvbmVzIHdyb3RlOg0KPiA+IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1w dXNoLTA4PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNlY2V2ZW50LWh0 dHAtcHVzaC0wOD4gd2FzIHB1Ymxpc2hlZCB0byBhZGRyZXNzIHRoZXNlIHJldmlldyBjb21tZW50 cy4gICgtMDk8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtc2VjZXZlbnQt aHR0cC1wdXNoLTA5PiBhZGRyZXNzZWQgYWRkaXRpb25hbCBlZGl0b3JpYWwgbml0cy4pICBEZXNj cmlwdGlvbnMgb2YgdGhlIGNoYW5nZXMgbWFkZSBmb3IgdGhlc2UgY29tbWVudHMgYXJlIGlubGlu ZSwgcHJlZml4ZWQgYnkgIk1pa2U+Ii4NCj4gPg0KPiA+DQo+ID4NCj4gPiAtLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206IElkLWV2ZW50IDxpZC1ldmVudC1ib3VuY2VzQGlldGYu b3JnPiBPbiBCZWhhbGYgT2YgQmVuamFtaW4gS2FkdWsNCj4gPiBTZW50OiBUdWVzZGF5LCBEZWNl bWJlciAxMCwgMjAxOSA0OjM2IFBNDQo+ID4gVG86IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1w dXNoLmFsbEBpZXRmLm9yZw0KPiA+IENjOiBpZC1ldmVudEBpZXRmLm9yZw0KPiA+IFN1YmplY3Q6 IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNoLTA3 DQo+ID4NCj4gPg0KPiA+IFNlY3Rpb24gNQ0KPiA+DQo+ID4NCj4gPg0KPiA+IEkgd2FudCB0byBz ZWUgaG93IHRoZSBkaXNjdXNzaW9uIGdvZXMgb24gcG9sbCdzICJBY2Nlc3MgVG9rZW4gQ29uc2lk ZXJhdGlvbnMiIGZpcnN0LCBidXQgd2UgbWF5IHdhbnQgc29tZXRoaW5nIGxpa2UgdGhhdCBhcyB3 ZWxsLg0KPiA+DQo+ID4NCj4gPg0KPiA+IE1pa2U+IFllcywgaXQgbWFrZXMgc2Vuc2UgdG8gZG8g dGhhdA0KPg0KPiBTaW5jZSB3ZSBubyBsb25nZXIgZXhwbGljaXRseSBtZW50aW9uIFdXVy1BdXRo ZW50aWNhdGUgaW4gdGhpcyBkb2N1bWVudCBJIHdvbid0IGluc2lzdCBvbiBjb3B5aW5nIHRoZSBB Y2Nlc3MgVG9rZW4gQ29uc2lkZXJhdGlvbnMgb3ZlciwgYnV0IGl0IGNvdWxkIHN0aWxsIGJlIHVz ZWZ1bCB0byBkbyBzby4NCj4NCj4gPiBTZWN0aW9uIDUuMg0KPiA+DQo+ID4NCj4gPg0KPiA+IFJG QyA2MTI1IGlzIGdyZWF0IGFuZCBJJ20gZ2xhZCB3ZSdyZSByZWZlcmVuY2luZyBpdCwgYnV0IGl0 IGRvZXMgbGVhdmUgYSBjb3VwbGUgb2YgZ2FwcyB0byBiZSBzcGVjaWZpZWQgZm9yIGEgZnVsbCBw aWN0dXJlIG9mIGFwcGxpY2F0aW9uIHVzYWdlLg0KPiA+DQo+ID4gU3BlY2lmaWNhbGx5LCB3ZSBz aG91bGQgc2F5IHdoYXQgbmFtZSBmcm9tIHRoZSBjZXJ0aWZpY2F0ZSB3ZSB2YWxpZGF0ZSAoYW5k LCBpZGVhbGx5LCBob3cgdGhlIGFwcGxpY2F0aW9uIGtub3dzIHdoYXQgbmFtZSBpdCBpcyBleHBl Y3RpbmcgdG8gc2VlIGluIHRoYXQgbmFtZSBmaWVsZCBpbiB0aGUgY2VydGlmaWNhdGUpLiAgTW9z dCBhcHBsaWNhdGlvbnMgdGhlc2UgZGF5cyB3aWxsIGJlIHVzaW5nIHRoZSBETlMtSUQsIGFuZCBw ZXJoYXBzIHNvbWV0aGluZyBhYm91dCB3aWxkY2FyZHMgYW5kL29yIHJldm9jYXRpb24gaW5mby4g IFRoZSBsYXN0IHRpbWUgSSB3YXMgbWFraW5nIHRoaXMgY29tbWVudCBvbiBhIGRvY3VtZW50IEkg cG9pbnRlZCB0byBSRkMgODQ2MSBhcyBhIHBvdGVudGlhbCBleGFtcGxlIHRvIGNyaWIgZnJvbSwg YXQgbGVhc3QgaW4gdGVybXMgb2YgdGhlIHR5cGVzIG9mIHRoaW5ncyB0byB0YWxrIGFib3V0Lg0K PiA+DQo+ID4NCj4gPg0KPiA+IE1pa2U+IEkgYWRkZWQgRE5TLUlELg0KPg0KPiBUaGUgRE5TLUlE IGlzIHRoZSBwYXJ0IG9mIHRoZSBjZXJ0aWZpY2F0ZSB0aGF0IHdlIGNvbXBhcmUgYSBuYW1lIGFn YWluc3QsIGJ1dCBhIGNvbXBhcmlzb24gcmVxdWlyZXMgaGF2aW5nIHR3byB0aGluZ3MgLS0gc2lu Y2UgcmVjaXBpZW50cyBhcmUgYWxyZWFkeSBjb25maWd1cmVkLCBjYW4ndCB3ZSBzYXkgdGhhdCB0 aGUgZXhwZWN0ZWQgbmFtZSB3aWxsIGJlIGNvbmZpZ3VyZWQgYXMgd2VsbD8NCj4NCj4gVGhhbmtz IGZvciBhbGwgdGhlIHVwZGF0ZXMhDQo+DQo+IC1CZW4NCj4NCg0KDQo= From nobody Mon Apr 27 16:31:18 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B2563A0DEF; Mon, 27 Apr 2020 16:31:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zAOZnyYwRH2H; Mon, 27 Apr 2020 16:31:13 -0700 (PDT) Received: from smtp-fw-6002.amazon.com (smtp-fw-6002.amazon.com [52.95.49.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64CDD3A0DE7; Mon, 27 Apr 2020 16:31:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1588030274; x=1619566274; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=t4JmFHJ1pRitp1Eljvpo4QkSRcR51fGWK3Us1LyDjCo=; b=siN3+mySyOczeX2cw6RTTmDZHyT4zZAlszo5ovil8yxLjvKtfaUZFibY JnSl6aOZXrTmp/Unn3GuIZRJmkaGi6/8xYhXfiNI/Eb3ASIljPcEkqRd1 OABWycF8LqR8sdN8u4hw7Bgtv87Chho/Y1S/IjGVyCT9JsnZ2d2u7ZNc/ Y=; IronPort-SDR: 3Yw+JnFS5Y2xcYTOtzvLRMZ5dIS42WFvJaNIwDqn4mQ0ky48ztdElb7/MgoWEOxGLkiYXTyqIk TiOnREvTPAtg== X-IronPort-AV: E=Sophos;i="5.73,325,1583193600"; d="scan'208";a="27539081" Thread-Topic: [UNVERIFIED SENDER] Re: [Id-event] AD review of draft-ietf-secevent-http-push-07 Received: from iad12-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-2b-a7fdc47a.us-west-2.amazon.com) ([10.43.8.6]) by smtp-border-fw-out-6002.iad6.amazon.com with ESMTP; 27 Apr 2020 23:30:58 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan2.pdx.amazon.com [10.170.41.162]) by email-inbound-relay-2b-a7fdc47a.us-west-2.amazon.com (Postfix) with ESMTPS id 863F7C5C07; Mon, 27 Apr 2020 23:30:57 +0000 (UTC) Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 23:30:56 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC004.ant.amazon.com (10.43.162.101) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 23:30:56 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1497.006; Mon, 27 Apr 2020 23:30:56 +0000 From: "Richard Backman, Annabelle" To: Mike Jones , Benjamin Kaduk CC: "draft-ietf-secevent-http-push.all@ietf.org" , "id-event@ietf.org" Thread-Index: AdYapvFcpkAs4jP3S4SfG8JyuYpI/QB9F6IAABFCfgD//47/gIAAdvYA//+RlQCAAAo2AA== Date: Mon, 27 Apr 2020 23:30:56 +0000 Message-ID: References: <06FCE524-D221-475A-998B-24E3CE85635E@amazon.com> <20200427220816.GE27494@kduck.mit.edu> <5237A696-05A8-483D-BB7E-D10D372B8247@amazon.com> <90E0D5D6-6741-403A-9E6B-8489CE0D0158@amazon.com> In-Reply-To: <90E0D5D6-6741-403A-9E6B-8489CE0D0158@amazon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.21.0.200113 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.160.8] Content-Type: text/plain; charset="utf-8" Content-ID: <3EC6709367FC3249817785FC16F5E06C@amazon.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] [UNVERIFIED SENDER] Re: AD review of draft-ietf-secevent-http-push-07 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 23:31:16 -0000 UHVsbCByZXF1ZXN0IHN1Ym1pdHRlZDogaHR0cHM6Ly9naXRodWIuY29tL2luZGVwZW5kZW50aWQv SWRlbnRpdHktRXZlbnRzL3B1bGwvMzINCg0K4oCTDQpBbm5hYmVsbGUgQmFja21hbiAoc2hlL2hl cikNCkFXUyBJZGVudGl0eQ0KaHR0cHM6Ly9hd3MuYW1hem9uLmNvbS9pZGVudGl0eS8NCiANCg0K 77u/T24gNC8yNy8yMCwgMzo1NCBQTSwgIlJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIiA8cmlj aGFubmFAYW1hem9uLmNvbT4gd3JvdGU6DQoNCk15IGltcHJlc3Npb24gd2FzIHRoZSBjaGFuZ2Vz IHdlcmUgb25seSBpbiAtcHVzaC4gSWYgdGhlcmUgc29tZSBvZiB0aGVzZSBjaGFuZ2VzIG5lZWQg dG8gYmUgbWFkZSB0byAtcG9sbCBJIGNhbiBkbyB0aGF0IGFzIHdlbGwuIE9yIGlzIHRoZXJlIGEg c2VwYXJhdGUgc2V0IG9mIGNoYW5nZXMgZm9yIC1wb2xsPw0KDQpJIHdpbGwgYXQgbGVhc3QgZHJv cCBpbiBvbiB0aGUgdmlydHVhbCBJSVcuIEkgYW0gbm90IHN1cmUgaG93IG11Y2ggb2YgYSBwcmVz ZW5jZSBJIHdpbGwgYmUgdGhlcmUsIGJ1dCBoYXBweSB0byBzZXQgYXNpZGUgc29tZSB0aW1lIHRv IGRpc2N1c3MgZWl0aGVyIHRoZXJlIG9yIDE6MSB2aWEgPHZpZGVvIGNvbmZlcmVuY2UgcGxhdGZv cm0gZHUgam91ciBhcyBsb25nIGFzIGl0IGlzbid0IFpvb20+Lg0KDQrigJMNCkFubmFiZWxsZSBC YWNrbWFuIChzaGUvaGVyKQ0KQVdTIElkZW50aXR5DQpodHRwczovL2F3cy5hbWF6b24uY29tL2lk ZW50aXR5Lw0KIA0KDQpPbiA0LzI3LzIwLCAzOjMwIFBNLCAiTWlrZSBKb25lcyIgPE1pY2hhZWwu Sm9uZXNAbWljcm9zb2Z0LmNvbT4gd3JvdGU6DQoNCkNBVVRJT046IFRoaXMgZW1haWwgb3JpZ2lu YXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtz IG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSBjYW4gY29uZmlybSB0aGUgc2VuZGVyIGFu ZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQoNCg0KDQpUaGFua3MgQW5uYWJlbGxlLiAgU28g eW91J2xsIGRvIFB1bGwgYW5kIEknbGwgZG8gUG9sbCwgcmlnaHQ/ICBMZXQncyBjaGVjayBib3Ro IG9mIG91ciBjaGFuZ2VzIGludG8gR2l0SHViIGFuZCByZXZpZXcgdGhlbSBmb3IgZWFjaCBvdGhl ciwgYW5kIHRoZW4gcHVibGlzaCB0b2dldGhlci4NCg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAtLSBNaWtlDQoNClAuUy4gIFdpbGwgeW91IGJlIGF0IHRoZSB2aXJ0dWFsIElJVyB0 aGlzIHdlZWssIEFubmFiZWxsZT8gIE1heWJlIHdlIGNvdWxkIHZpcnR1YWxseSB0YWxrIGFib3V0 IHRoZSBjaGFuZ2VzIHRoZXJlLCBpZiBkb2luZyBzbyB3b3VsZCBiZSB1c2VmdWwuDQoNCi0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSA8 cmljaGFubmFAYW1hem9uLmNvbT4NClNlbnQ6IE1vbmRheSwgQXByaWwgMjcsIDIwMjAgMzoyNCBQ TQ0KVG86IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pg0KQ2M6IE1pa2UgSm9uZXMgPE1p Y2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT47IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wdXNo LmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0Zi5vcmcNClN1YmplY3Q6IFtFWFRFUk5BTF0gUmU6 IFtVTlZFUklGSUVEIFNFTkRFUl0gUmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWll dGYtc2VjZXZlbnQtaHR0cC1wdXNoLTA3DQoNCk9rYXksIEknbGwgbWFrZSB0aGUgY2hhbmdlcyBh bmQgZ2V0IG91dCBhbiB1cGRhdGUuDQoNCk5vdGUgdGhhdCBzaW5jZSBhbGwgY29uZmlndXJhdGlv biBvZiB0aGUgdHJhbnNtaXR0ZXIvcmVjZWl2ZXIgcmVsYXRpb25zaGlwIGlzIG91dCBvZiBzY29w ZSBwZXIgU2VjdGlvbiAxLCBzYXlpbmcgdGhhdCB0aGUgZXhwZWN0ZWQgaWRlbnRpdHkgZm9yIERO Uy1JRCBpcyAib3V0IG9mIHNjb3BlIiBpcyBqdXN0IHJlcGhyYXNpbmcgeW91ciBzdWdnZXN0aW9u IG9mICJ0aGUgZXhwZWN0ZWQgbmFtZSB3aWxsIGJlIGNvbmZpZ3VyZWQiIHdpdGggbGFuZ3VhZ2Ug Y29uc2lzdGVudCB3aXRoIHRoZSByZXN0IG9mIHRoZSB0ZXh0LiBfXw0KDQrigJMNCkFubmFiZWxs ZSBCYWNrbWFuIChzaGUvaGVyKQ0KQVdTIElkZW50aXR5DQpodHRwczovL2F3cy5hbWF6b24uY29t L2lkZW50aXR5Lw0KDQoNCk9uIDQvMjcvMjAsIDM6MDggUE0sICJCZW5qYW1pbiBLYWR1ayIgPGth ZHVrQG1pdC5lZHU+IHdyb3RlOg0KDQpDQVVUSU9OOiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJv bSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVu IGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZpcm0gdGhlIHNlbmRlciBhbmQga25vdyB0 aGUgY29udGVudCBpcyBzYWZlLg0KDQoNCg0KT24gTW9uLCBBcHIgMjcsIDIwMjAgYXQgMDg6NTQ6 MDVQTSArMDAwMCwgUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgd3JvdGU6DQo+IEkgY2FuIHB1 dCBvdXQgYW4gdXBkYXRlLCBidXQgSSB0aGluayBJJ20gbWlzc2luZyBwYXJ0IG9mIHRoZSBjb252 ZXJzYXRpb24gaGVyZS4NCj4NCj4gSGVyZSBpcyB3aGF0IEkgdW5kZXJzdGFuZCB0aGUgY2hhbmdl cyB0byBiZSwgYWxsIHdpdGhpbiAtcHVzaDoNCg0KSSB0aGluayB0aGF0J3MgcmlnaHQsIGFzIG11 Y2ggYXMgcHV0dGluZyAoMykgb3V0IG9mIHNjb3BlIHBhaW5zIG1lLg0KDQpUaGFua3MsDQoNCkJl bg0KDQo+IDEuIFNlY3Rpb24gMSBzaG91bGQgZ2V0IHRoZSBzZW50ZW5jZSAiSG93IFNFVHMgYXJl IGRlZmluZWQgYW5kIHRoZSBwcm9jZXNzIGJ5IHdoaWNoIHNlY3VyaXR5IGV2ZW50cyBhcmUgaWRl bnRpZmllZCBmb3IgU0VUIFJlY2lwaWVudHMgYXJlIHNwZWNpZmllZCBpbiBbUkZDODQxN10uIg0K Pg0KPiAyLiBJbiBTZWN0aW9uIDUuMywgcmVwbGFjZSAiZS5nLiwgc3ViamVjdCBjbGFpbXMiIHdp dGggIlBJSSIgYXMgd2FzIGFscmVhZHkgZG9uZSBpbiAtcG9sbC4NCj4NCj4gMy4gSW4gU2VjdGlv biA1LjMsIGFkZCB0ZXh0IGV4cGxhaW5pbmcgdGhhdCBkZXRlcm1pbmluZyB0aGUgZXhwZWN0ZWQg c2VydmljZSBpZGVudGl0eSB0byBtYXRjaCBhZ2FpbnN0IHVzaW5nIEROUy1JRCBpcyBvdXQgb2Yg c2NvcGUuDQo+DQo+IDQuIEluIFByaXZhY3kgQ29uc2lkZXJhdGlvbnMsIGFkZCAiU0VUIFRyYW5z bWlzdHRlcnMgU0hPVUxEIGF0dGVtcHQgdG8gZGVsaXZlciBzZXRzIHRoYXQgYXJlIHRhcmdldGVk IHRvIHRoZSBzcGVjaWZpYyBidXNpbmVzcyBhbmQgcHJvdG9jb2wgbmVlZHMgb2Ygc3Vic2NyaWJl cnMiLCBhcyBhbHJlYWR5IGV4aXN0cyB3aXRoaW4gLXBvbGwuDQo+DQo+IOKAkw0KPiBBbm5hYmVs bGUgQmFja21hbiAoc2hlL2hlcikNCj4gQVdTIElkZW50aXR5DQo+IGh0dHBzOi8vYXdzLmFtYXpv bi5jb20vaWRlbnRpdHkvDQo+DQo+DQo+IE9uIDQvMjQvMjAsIDc6MTIgUE0sICJNaWtlIEpvbmVz IiA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPiB3cm90ZToNCj4NCj4gQ0FVVElPTjogVGhp cyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBu b3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IGNhbiBjb25maXJt IHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4NCj4NCj4NCj4NCj4gVGhl c2Ugc3VnZ2VzdGlvbnMgbWFrZSBzZW5zZSB0byBtZS4gIERvIHlvdSB3YW50IHRvIGRvIHRoZXNl IEFubmFiZWxsZSwgb3Igd291bGQgeW91IGxpa2UgbWUgdG8/ICBJZiBJIGRvIGl0LCBpdCB3aWxs IHByb2JhYmx5IGJlIGVhcmx5IG5leHQgd2Vlay4NCj4NCj4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBUaGFua3MgYWxsLA0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IC0tIE1pa2UNCj4NCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQmVuamFt aW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+DQo+IFNlbnQ6IEZyaWRheSwgQXByaWwgMjQsIDIwMjAg NTo0NCBQTQ0KPiBUbzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPg0K PiBDYzogZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2guYWxsQGlldGYub3JnOyBpZC1ldmVu dEBpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQt aWV0Zi1zZWNldmVudC1odHRwLXB1c2gtMDcNCj4NCj4gSGkgTWlrZSwNCj4NCj4gTXkgYXBvbG9n aWVzIGZvciB5ZXQgYW5vdGhlciBsb25nIGRlbGF5LiAgSSdsbCB0cmltIHRoZSBiaXRzIHRoYXQg YXJlIGluIGdvb2Qgc2hhcGUgKG5lYXJseSBhbGwgb2YgdGhlbSEpLg0KPg0KPiBJIGFsc28gdG9v ayBhbm90aGVyIGxvb2sgYXQgdGhlICJkaWZmIiAobWFudWFsbHksIHRoYXQgaXMpIGJldHdlZW4g cHVzaCBhbmQgcG9sbCwgYW5kIGZvdW5kIGEgZmV3IHRoaW5ncyBpbiBwb2xsIHRoYXQgc2hvdWxk IHByb2JhYmx5IGJlIGhlcmUgYXMgd2VsbC4NCj4NCj4gU2VjdGlvbiAxIHNob3VsZCBnZXQgdGhl IHNlbnRlbmNlICJIb3cgU0VUcyBhcmUgZGVmaW5lZCBhbmQgdGhlIHByb2Nlc3MgYnkgd2hpY2gg c2VjdXJpdHkgZXZlbnRzIGFyZSBpZGVudGlmaWVkIGZvciBTRVQgUmVjaXBpZW50cyBhcmUgc3Bl Y2lmaWVkIGluIFtSRkM4NDE3XS4iDQo+DQo+IEluIHRoZSB0aHJlYWQgZm9yIC1wb2xsIHdlIHNh aWQgdGhhdCBTZWN0aW9uIDUuMyBvZiB0aGlzIGRvY3VtZW50IHdvdWxkIGdldCBhIHMvZS5nLiwg c3ViamVjdCBjbGFpbXMvUElJLyB0byBtYXRjaCwgYnV0IHRoYXQgZG9lc24ndCBzZWVtIHRvIGhh dmUgaGFwcGVuZWQgeWV0Lg0KPg0KPiBUaGUgcG9sbCBQcml2YWN5IENvbnNpZGVyYXRpb25zIGhh dmUgYSBub3RlIGF0IHRoZSBzdGFydCBvZiB0aGUgc2VjdGlvbiBhYm91dCAiU0VUIFRyYW5zbWlz dHRlcnMgU0hPVUxEIGF0dGVtcHQgdG8gZGVsaXZlciBzZXRzIHRoYXQgYXJlIHRhcmdldGVkIHRv IHRoZSBzcGVjaWZpYyBidXNpbmVzcyBhbmQgcHJvdG9jb2wgbmVlZHMgb2Ygc3Vic2NyaWJlcnMi OyB3b3VsZCBhIHNpbWlsYXIgbm90ZSBtYWtlIHNlbnNlIGZvciB1cz8NCj4NCj4gT24gRnJpLCBG ZWIgMDcsIDIwMjAgYXQgMDU6MTc6MTJQTSArMDAwMCwgTWlrZSBKb25lcyB3cm90ZToNCj4gPiBk cmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wODxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXB1c2gtMDg+IHdhcyBwdWJsaXNoZWQgdG8gYWRk cmVzcyB0aGVzZSByZXZpZXcgY29tbWVudHMuICAoLTA5PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv aHRtbC9kcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wOT4gYWRkcmVzc2VkIGFkZGl0aW9u YWwgZWRpdG9yaWFsIG5pdHMuKSAgRGVzY3JpcHRpb25zIG9mIHRoZSBjaGFuZ2VzIG1hZGUgZm9y IHRoZXNlIGNvbW1lbnRzIGFyZSBpbmxpbmUsIHByZWZpeGVkIGJ5ICJNaWtlPiIuDQo+ID4NCj4g Pg0KPiA+DQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBJZC1ldmVu dCA8aWQtZXZlbnQtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIEJlbmphbWluIEthZHVr DQo+ID4gU2VudDogVHVlc2RheSwgRGVjZW1iZXIgMTAsIDIwMTkgNDozNiBQTQ0KPiA+IFRvOiBk cmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC5hbGxAaWV0Zi5vcmcNCj4gPiBDYzogaWQtZXZl bnRAaWV0Zi5vcmcNCj4gPiBTdWJqZWN0OiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1p ZXRmLXNlY2V2ZW50LWh0dHAtcHVzaC0wNw0KPiA+DQo+ID4NCj4gPiBTZWN0aW9uIDUNCj4gPg0K PiA+DQo+ID4NCj4gPiBJIHdhbnQgdG8gc2VlIGhvdyB0aGUgZGlzY3Vzc2lvbiBnb2VzIG9uIHBv bGwncyAiQWNjZXNzIFRva2VuIENvbnNpZGVyYXRpb25zIiBmaXJzdCwgYnV0IHdlIG1heSB3YW50 IHNvbWV0aGluZyBsaWtlIHRoYXQgYXMgd2VsbC4NCj4gPg0KPiA+DQo+ID4NCj4gPiBNaWtlPiBZ ZXMsIGl0IG1ha2VzIHNlbnNlIHRvIGRvIHRoYXQNCj4NCj4gU2luY2Ugd2Ugbm8gbG9uZ2VyIGV4 cGxpY2l0bHkgbWVudGlvbiBXV1ctQXV0aGVudGljYXRlIGluIHRoaXMgZG9jdW1lbnQgSSB3b24n dCBpbnNpc3Qgb24gY29weWluZyB0aGUgQWNjZXNzIFRva2VuIENvbnNpZGVyYXRpb25zIG92ZXIs IGJ1dCBpdCBjb3VsZCBzdGlsbCBiZSB1c2VmdWwgdG8gZG8gc28uDQo+DQo+ID4gU2VjdGlvbiA1 LjINCj4gPg0KPiA+DQo+ID4NCj4gPiBSRkMgNjEyNSBpcyBncmVhdCBhbmQgSSdtIGdsYWQgd2Un cmUgcmVmZXJlbmNpbmcgaXQsIGJ1dCBpdCBkb2VzIGxlYXZlIGEgY291cGxlIG9mIGdhcHMgdG8g YmUgc3BlY2lmaWVkIGZvciBhIGZ1bGwgcGljdHVyZSBvZiBhcHBsaWNhdGlvbiB1c2FnZS4NCj4g Pg0KPiA+IFNwZWNpZmljYWxseSwgd2Ugc2hvdWxkIHNheSB3aGF0IG5hbWUgZnJvbSB0aGUgY2Vy dGlmaWNhdGUgd2UgdmFsaWRhdGUgKGFuZCwgaWRlYWxseSwgaG93IHRoZSBhcHBsaWNhdGlvbiBr bm93cyB3aGF0IG5hbWUgaXQgaXMgZXhwZWN0aW5nIHRvIHNlZSBpbiB0aGF0IG5hbWUgZmllbGQg aW4gdGhlIGNlcnRpZmljYXRlKS4gIE1vc3QgYXBwbGljYXRpb25zIHRoZXNlIGRheXMgd2lsbCBi ZSB1c2luZyB0aGUgRE5TLUlELCBhbmQgcGVyaGFwcyBzb21ldGhpbmcgYWJvdXQgd2lsZGNhcmRz IGFuZC9vciByZXZvY2F0aW9uIGluZm8uICBUaGUgbGFzdCB0aW1lIEkgd2FzIG1ha2luZyB0aGlz IGNvbW1lbnQgb24gYSBkb2N1bWVudCBJIHBvaW50ZWQgdG8gUkZDIDg0NjEgYXMgYSBwb3RlbnRp YWwgZXhhbXBsZSB0byBjcmliIGZyb20sIGF0IGxlYXN0IGluIHRlcm1zIG9mIHRoZSB0eXBlcyBv ZiB0aGluZ3MgdG8gdGFsayBhYm91dC4NCj4gPg0KPiA+DQo+ID4NCj4gPiBNaWtlPiBJIGFkZGVk IEROUy1JRC4NCj4NCj4gVGhlIEROUy1JRCBpcyB0aGUgcGFydCBvZiB0aGUgY2VydGlmaWNhdGUg dGhhdCB3ZSBjb21wYXJlIGEgbmFtZSBhZ2FpbnN0LCBidXQgYSBjb21wYXJpc29uIHJlcXVpcmVz IGhhdmluZyB0d28gdGhpbmdzIC0tIHNpbmNlIHJlY2lwaWVudHMgYXJlIGFscmVhZHkgY29uZmln dXJlZCwgY2FuJ3Qgd2Ugc2F5IHRoYXQgdGhlIGV4cGVjdGVkIG5hbWUgd2lsbCBiZSBjb25maWd1 cmVkIGFzIHdlbGw/DQo+DQo+IFRoYW5rcyBmb3IgYWxsIHRoZSB1cGRhdGVzIQ0KPg0KPiAtQmVu DQo+DQoNCg0KDQo= From nobody Mon Apr 27 16:51:07 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4EBB3A077F; Mon, 27 Apr 2020 16:51:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iKztufMSEBTw; Mon, 27 Apr 2020 16:51:03 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650132.outbound.protection.outlook.com [40.107.65.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9180D3A0772; Mon, 27 Apr 2020 16:51:03 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SAVnWjTpzcQ4QKuc4woLp9FoeONOcChPxU1scs/WXvYh91SKeUQZZ7PnVlxVj+jAdyOTOhJxE7EYiTwwGpu4B703t82Hl5+4T+8eRQVu0BKJLNzajepdpd1Z4b1lhjDjMCD4gKJZCDAoqC2ATf6znR0GriVKbSTHdhn636p/R4o9S9DO1Z/z4gL/OWasbhTcHFEijzLqFUcvQX0Vri/4WJUi+ssILDIB/YJYP1CfPkwoJ62TXm74rvEqa3UrBVDrQLigBn21iR2QRDtM6v92W7Si8dx3aY7+kz/vAzekNTllczp4BGKLogdjJe3OjKy6Wpd6COrqCQcYl9na5MV4/A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mUMewT6P2QwqAGn9tG1lhsqp1n05ioXl86Bps7AODA0=; b=jMZQZAyTEuXYWkpCLKNuoZLSEraIFBEdLsNh5g5eEY2PSX9kEnr5r3XP799XqRHDYfO6j9I6uvaBQ/qKWp3mXjXg0qhJNgU+/sMD78q3B4j4aY96RLmXKIuTqtvBCwoaWPZdW6EgM0ga+lu6Ub5DMMe0JpG035uSjwll2Un0zb/x1Q9W082dm/112DgAPWhG+Arm88f8AeJ6aa994/tVwXlltfue6vd948pzRWx+4kSE4JDjpbO2efg0hH7jEYlbgIvC1sW5yNYJ4u1GPrzDE9JzMi1IlUhhkCDmdXAJnIT4ZPquSemcNDHWEAOv/itshi1OKEsmpBlrH+zcEBGRnA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mUMewT6P2QwqAGn9tG1lhsqp1n05ioXl86Bps7AODA0=; b=YaFn3z70ieVf9WbFyc+PB5BChhRlUaIKj7Oyci9+NtmtNDNYAzlEkDfgunY0PCInfcZbZFYr+6nhbTEJHKDtb7YG782sI7JrgbrcyFaFhWurJLl9B8AP6NBLO2Y2MQAfvrhI2uK6Y8v0ueVRsae0c08b9rt4sNEezxQEXe2Sn04= Received: from CH2PR00MB0678.namprd00.prod.outlook.com (2603:10b6:610:a9::23) by CH2PR00MB0793.namprd00.prod.outlook.com (2603:10b6:610:6f::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2984.0; Mon, 27 Apr 2020 23:51:01 +0000 Received: from CH2PR00MB0678.namprd00.prod.outlook.com ([fe80::d5c1:bba5:bf6c:8786]) by CH2PR00MB0678.namprd00.prod.outlook.com ([fe80::d5c1:bba5:bf6c:8786%7]) with mapi id 15.20.2993.000; Mon, 27 Apr 2020 23:51:01 +0000 From: Mike Jones To: "richanna@amazon.com" , Benjamin Kaduk CC: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Thread-Topic: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Thread-Index: AdYc7rOyODjwbpyaR1unVK/WNvqD+A== Date: Mon, 27 Apr 2020 23:51:01 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=7317f497-4c9b-42fb-b313-0000b4fafaf0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-04-25T02:09:24Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.87.252] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 17ef8f0b-d122-42e5-38ab-08d7eb05d737 x-ms-traffictypediagnostic: CH2PR00MB0793: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0386B406AA received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH2PR00MB0678.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(186003)(66556008)(64756008)(66476007)(76116006)(66446008)(86362001)(66946007)(10290500003)(8990500004)(4326008)(5660300002)(26005)(33656002)(71200400001)(54906003)(53546011)(498600001)(9686003)(7696005)(6506007)(82960400001)(82950400001)(8936002)(2906002)(8676002)(55016002)(110136005)(52536014); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CH2PR00MB0678.namprd00.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 17ef8f0b-d122-42e5-38ab-08d7eb05d737 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Apr 2020 23:51:01.2277 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ejl74+f2PpUGgpOkB5IkVFzRn1fa4t5X9Kfelw6K9E3qxtGg+QF5xTFKfbNOmfFgSDd604uMGhe4x8LSQ8bzTQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR00MB0793 Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 23:51:06 -0000 Thanks for the edits you made, Annabelle. Do we also want to delete this t= ext from Poll before publishing, per Ben's suggestion? Authorization for the eligibility to provide actionable SETs can be determ= ined by using the identity of the SET Issuer, validating the polling endpoint URL, perhaps using TLS, or via other employed authentication methods. Among other benefits, authentication can help prevent denial-of-service at= tacks. Because SETs are not commands, SET Recipients are free to ignore SETs that are not of interest after acknowledging their receipt. -- Mike -----Original Message----- From: Mike Jones=20 Sent: Friday, April 24, 2020 7:12 PM To: 'Benjamin Kaduk' ; richanna@amazon.com Cc: draft-ietf-secevent-http-poll.all@ietf.org; id-event@ietf.org Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Thanks Ben. I think the DDOS text can be dropped from Poll. I'll do that = early next week. Thanks again, -- Mike -----Original Message----- From: Benjamin Kaduk =20 Sent: Friday, April 24, 2020 5:53 PM To: Mike Jones Cc: draft-ietf-secevent-http-poll.all@ietf.org; id-event@ietf.org Subject: [EXTERNAL] Re: [Id-event] AD review of draft-ietf-secevent-http-po= ll-06 Hi Mike, Thanks for the updates, and I continue to be sorry for the long response ti= mes. Poll is in quite good shape (well, I guess it's mostly just that -push is t= aking the brunt of the work for harmonizing the differences in text); just = a couple more changes to make and we should be good to start the IETF LCs i= n parallel. I'll again trim the resolved bits. In Section 3 we have a note about DoS protections embedded in a larger bloc= k of text: Authorization for the eligibility to provide actionable SETs can be determined by using the identity of the SET Issuer, validating the polling endpoint URL, perhaps using TLS, or via other employed authentication methods. Among other benefits, authentication can help prevent denial-of-service attacks. Because SETs are not commands, SET Recipients are free to ignore SETs that are not of interest after acknowledging their receipt. I am not 100% sure, but I think this may have been text that originates bef= ore the split of documents, and in push got extracted and made into a separ= ate section. Does it still make sense here? The DoS risk would typically = be for a server getting lots of inbound connections, but there's not quite = as clear a case for (client) authentication helping with that for poll, sin= ce the client is not sending huge amounts of stuff that would need to be dr= opped. Am I misunderstanding the intent here, or should the sentence just = get dropped? On Fri, Feb 07, 2020 at 05:18:04PM +0000, Mike Jones wrote: > draft-ietf-secevent-http-poll-07 was published to address these review comments. (-08= addressed ad= ditional editorial nits.) Descriptions of the changes made for these comme= nts are inline, prefixed by "Mike>". >=20 >=20 >=20 > -----Original Message----- > From: Id-event On Behalf Of Benjamin Kaduk > Sent: Tuesday, December 10, 2019 4:37 PM > To: draft-ietf-secevent-http-poll.all@ietf.org > Cc: id-event@ietf.org > Subject: [Id-event] AD review of draft-ietf-secevent-http-poll-06 >=20 >=20 > Section 3 >=20 >=20 > Since poll has the TLS server as the SET Transmitter, we could potentiall= y pull in RFC 6125 and talk about validating DNS-IDs to authenticate the Tr= ansmitter. Given that the name to be authenticated would be part of the in= formation conveyed out-of-band, though, it's not entirely clear how much va= lue there would be in doing so. >=20 >=20 > Mike> As in Push, this section was formerly poorly worded, and has largel= y been rewritten. As for -push, I'd really like to be able to say something about the other h= alf of the name comparison. In this case would it be something like "disco= very of SET Transmitters (and the names used to authenticate them) is out o= f scope for this document"? Thanks for the updates, Ben From nobody Mon Apr 27 16:52:25 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1E4C3A07A2; Mon, 27 Apr 2020 16:52:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id URmCl5ceZlXJ; Mon, 27 Apr 2020 16:52:22 -0700 (PDT) Received: from smtp-fw-4101.amazon.com (smtp-fw-4101.amazon.com [72.21.198.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C2763A0791; Mon, 27 Apr 2020 16:52:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1588031543; x=1619567543; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=qELxdAItQzbW6pTQEgwllgcrwttHq8y+KJB4NiOef7M=; b=uz3bLSHmI1HCRRaEu3ku8r7Pck3ieMoBanwT89jZuIhGkuj/I/vmcN0k Sgb07Eosm2+h+EyQ4V7ZP6TipWWNnPnZnDWHjwbNWJ8ncSXp5acVPr9sq BEPLGnRzzoYYpG6jUhyzO5EIltn/kOng9fvQ6BMvtgyrvx5YXFsHu0MnZ 8=; IronPort-SDR: 52n9WzrUjIT3Pdx4vf7hEM1GUm8HgXmMccKoj00rXg+RuKTw6IPEYLK/iZh+R72/HW+B6Eltwv iK7x+KoqzQyg== X-IronPort-AV: E=Sophos;i="5.73,325,1583193600"; d="scan'208";a="27684208" Thread-Topic: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Received: from iad12-co-svc-p1-lb1-vlan3.amazon.com (HELO email-inbound-relay-1d-2c665b5d.us-east-1.amazon.com) ([10.43.8.6]) by smtp-border-fw-out-4101.iad4.amazon.com with ESMTP; 27 Apr 2020 23:52:06 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1d-2c665b5d.us-east-1.amazon.com (Postfix) with ESMTPS id 6109BA1C8A; Mon, 27 Apr 2020 23:52:04 +0000 (UTC) Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 23:52:03 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 27 Apr 2020 23:52:03 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1497.006; Mon, 27 Apr 2020 23:52:03 +0000 From: "Richard Backman, Annabelle" To: Mike Jones , Benjamin Kaduk CC: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Thread-Index: AdYc7rOyODjwbpyaR1unVK/WNvqD+P//ivKA Date: Mon, 27 Apr 2020 23:52:03 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.21.0.200113 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.160.8] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 23:52:24 -0000 WWVzLCB3aWxsIHJlbW92ZSB0aGF0Lg0KDQrigJMNCkFubmFiZWxsZSBCYWNrbWFuIChzaGUvaGVy KQ0KQVdTIElkZW50aXR5DQpodHRwczovL2F3cy5hbWF6b24uY29tL2lkZW50aXR5Lw0KIA0KDQrv u79PbiA0LzI3LzIwLCA0OjUxIFBNLCAiTWlrZSBKb25lcyIgPE1pY2hhZWwuSm9uZXNAbWljcm9z b2Z0LmNvbT4gd3JvdGU6DQoNCkNBVVRJT046IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91 dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0 YWNobWVudHMgdW5sZXNzIHlvdSBjYW4gY29uZmlybSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBj b250ZW50IGlzIHNhZmUuDQoNCg0KDQpUaGFua3MgZm9yIHRoZSBlZGl0cyB5b3UgbWFkZSwgQW5u YWJlbGxlLiAgRG8gd2UgYWxzbyB3YW50IHRvIGRlbGV0ZSB0aGlzIHRleHQgZnJvbSBQb2xsIGJl Zm9yZSBwdWJsaXNoaW5nLCBwZXIgQmVuJ3Mgc3VnZ2VzdGlvbj8NCg0KICAgICAgPHQ+DQogICAg ICAgIEF1dGhvcml6YXRpb24gZm9yIHRoZSBlbGlnaWJpbGl0eSB0byBwcm92aWRlIGFjdGlvbmFi bGUgU0VUcyBjYW4gYmUgZGV0ZXJtaW5lZCBieQ0KICAgICAgICB1c2luZyB0aGUgaWRlbnRpdHkg b2YgdGhlIFNFVCBJc3N1ZXIsDQogICAgICAgIHZhbGlkYXRpbmcgdGhlIHBvbGxpbmcgZW5kcG9p bnQgVVJMLCBwZXJoYXBzIHVzaW5nIFRMUywNCiAgICAgICAgb3IgdmlhIG90aGVyIGVtcGxveWVk IGF1dGhlbnRpY2F0aW9uIG1ldGhvZHMuDQogICAgICAgIEFtb25nIG90aGVyIGJlbmVmaXRzLCBh dXRoZW50aWNhdGlvbiBjYW4gaGVscCBwcmV2ZW50IGRlbmlhbC1vZi1zZXJ2aWNlIGF0dGFja3Mu DQogICAgICAgIEJlY2F1c2UgU0VUcyBhcmUNCiAgICAgIG5vdCBjb21tYW5kcywgU0VUIFJlY2lw aWVudHMgYXJlIGZyZWUgdG8gaWdub3JlIFNFVHMgdGhhdA0KICAgICAgYXJlIG5vdCBvZiBpbnRl cmVzdCBhZnRlciBhY2tub3dsZWRnaW5nIHRoZWlyIHJlY2VpcHQuPC90Pg0KDQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS0NCkZyb206IE1pa2UgSm9uZXMNClNlbnQ6IEZyaWRheSwgQXByaWwgMjQsIDIwMjAgNzoxMiBQ TQ0KVG86ICdCZW5qYW1pbiBLYWR1aycgPGthZHVrQG1pdC5lZHU+OyByaWNoYW5uYUBhbWF6b24u Y29tDQpDYzogZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwuYWxsQGlldGYub3JnOyBpZC1l dmVudEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0 LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA2DQoNClRoYW5rcyBCZW4uICBJIHRoaW5rIHRoZSBE RE9TIHRleHQgY2FuIGJlIGRyb3BwZWQgZnJvbSBQb2xsLiAgSSdsbCBkbyB0aGF0IGVhcmx5IG5l eHQgd2Vlay4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGFua3MgYWdhaW4s DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCkZyb206IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pg0KU2Vu dDogRnJpZGF5LCBBcHJpbCAyNCwgMjAyMCA1OjUzIFBNDQpUbzogTWlrZSBKb25lcyA8TWljaGFl bC5Kb25lc0BtaWNyb3NvZnQuY29tPg0KQ2M6IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xs LmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0Zi5vcmcNClN1YmplY3Q6IFtFWFRFUk5BTF0gUmU6 IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA2 DQoNCkhpIE1pa2UsDQoNClRoYW5rcyBmb3IgdGhlIHVwZGF0ZXMsIGFuZCBJIGNvbnRpbnVlIHRv IGJlIHNvcnJ5IGZvciB0aGUgbG9uZyByZXNwb25zZSB0aW1lcy4NCg0KUG9sbCBpcyBpbiBxdWl0 ZSBnb29kIHNoYXBlICh3ZWxsLCBJIGd1ZXNzIGl0J3MgbW9zdGx5IGp1c3QgdGhhdCAtcHVzaCBp cyB0YWtpbmcgdGhlIGJydW50IG9mIHRoZSB3b3JrIGZvciBoYXJtb25pemluZyB0aGUgZGlmZmVy ZW5jZXMgaW4gdGV4dCk7IGp1c3QgYSBjb3VwbGUgbW9yZSBjaGFuZ2VzIHRvIG1ha2UgYW5kIHdl IHNob3VsZCBiZSBnb29kIHRvIHN0YXJ0IHRoZSBJRVRGIExDcyBpbiBwYXJhbGxlbC4gIEknbGwg YWdhaW4gdHJpbSB0aGUgcmVzb2x2ZWQgYml0cy4NCg0KSW4gU2VjdGlvbiAzIHdlIGhhdmUgYSBu b3RlIGFib3V0IERvUyBwcm90ZWN0aW9ucyBlbWJlZGRlZCBpbiBhIGxhcmdlciBibG9jayBvZiB0 ZXh0Og0KDQogICBBdXRob3JpemF0aW9uIGZvciB0aGUgZWxpZ2liaWxpdHkgdG8gcHJvdmlkZSBh Y3Rpb25hYmxlIFNFVHMgY2FuIGJlDQogICBkZXRlcm1pbmVkIGJ5IHVzaW5nIHRoZSBpZGVudGl0 eSBvZiB0aGUgU0VUIElzc3VlciwgdmFsaWRhdGluZyB0aGUNCiAgIHBvbGxpbmcgZW5kcG9pbnQg VVJMLCBwZXJoYXBzIHVzaW5nIFRMUywgb3IgdmlhIG90aGVyIGVtcGxveWVkDQogICBhdXRoZW50 aWNhdGlvbiBtZXRob2RzLiAgQW1vbmcgb3RoZXIgYmVuZWZpdHMsIGF1dGhlbnRpY2F0aW9uIGNh bg0KICAgaGVscCBwcmV2ZW50IGRlbmlhbC1vZi1zZXJ2aWNlIGF0dGFja3MuICBCZWNhdXNlIFNF VHMgYXJlIG5vdA0KICAgY29tbWFuZHMsIFNFVCBSZWNpcGllbnRzIGFyZSBmcmVlIHRvIGlnbm9y ZSBTRVRzIHRoYXQgYXJlIG5vdCBvZg0KICAgaW50ZXJlc3QgYWZ0ZXIgYWNrbm93bGVkZ2luZyB0 aGVpciByZWNlaXB0Lg0KDQpJIGFtIG5vdCAxMDAlIHN1cmUsIGJ1dCBJIHRoaW5rIHRoaXMgbWF5 IGhhdmUgYmVlbiB0ZXh0IHRoYXQgb3JpZ2luYXRlcyBiZWZvcmUgdGhlIHNwbGl0IG9mIGRvY3Vt ZW50cywgYW5kIGluIHB1c2ggZ290IGV4dHJhY3RlZCBhbmQgbWFkZSBpbnRvIGEgc2VwYXJhdGUg c2VjdGlvbi4gIERvZXMgaXQgc3RpbGwgbWFrZSBzZW5zZSBoZXJlPyAgVGhlIERvUyByaXNrIHdv dWxkIHR5cGljYWxseSBiZSBmb3IgYSBzZXJ2ZXIgZ2V0dGluZyBsb3RzIG9mIGluYm91bmQgY29u bmVjdGlvbnMsIGJ1dCB0aGVyZSdzIG5vdCBxdWl0ZSBhcyBjbGVhciBhIGNhc2UgZm9yIChjbGll bnQpIGF1dGhlbnRpY2F0aW9uIGhlbHBpbmcgd2l0aCB0aGF0IGZvciBwb2xsLCBzaW5jZSB0aGUg Y2xpZW50IGlzIG5vdCBzZW5kaW5nIGh1Z2UgYW1vdW50cyBvZiBzdHVmZiB0aGF0IHdvdWxkIG5l ZWQgdG8gYmUgZHJvcHBlZC4gIEFtIEkgbWlzdW5kZXJzdGFuZGluZyB0aGUgaW50ZW50IGhlcmUs IG9yIHNob3VsZCB0aGUgc2VudGVuY2UganVzdCBnZXQgZHJvcHBlZD8NCg0KT24gRnJpLCBGZWIg MDcsIDIwMjAgYXQgMDU6MTg6MDRQTSArMDAwMCwgTWlrZSBKb25lcyB3cm90ZToNCj4gZHJhZnQt aWV0Zi1zZWNldmVudC1odHRwLXBvbGwtMDc8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA3PiB3YXMgcHVibGlzaGVkIHRvIGFkZHJlc3Mg dGhlc2UgcmV2aWV3IGNvbW1lbnRzLiAgKC0wODxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwtMDg+IGFkZHJlc3NlZCBhZGRpdGlvbmFsIGVk aXRvcmlhbCBuaXRzLikgIERlc2NyaXB0aW9ucyBvZiB0aGUgY2hhbmdlcyBtYWRlIGZvciB0aGVz ZSBjb21tZW50cyBhcmUgaW5saW5lLCBwcmVmaXhlZCBieSAiTWlrZT4iLg0KPg0KPg0KPg0KPiAt LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBJZC1ldmVudCA8aWQtZXZlbnQtYm91 bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIEJlbmphbWluIEthZHVrDQo+IFNlbnQ6IFR1ZXNk YXksIERlY2VtYmVyIDEwLCAyMDE5IDQ6MzcgUE0NCj4gVG86IGRyYWZ0LWlldGYtc2VjZXZlbnQt aHR0cC1wb2xsLmFsbEBpZXRmLm9yZw0KPiBDYzogaWQtZXZlbnRAaWV0Zi5vcmcNCj4gU3ViamVj dDogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwt MDYNCj4NCj4NCj4gU2VjdGlvbiAzDQo+DQo+DQo+IFNpbmNlIHBvbGwgaGFzIHRoZSBUTFMgc2Vy dmVyIGFzIHRoZSBTRVQgVHJhbnNtaXR0ZXIsIHdlIGNvdWxkIHBvdGVudGlhbGx5IHB1bGwgaW4g UkZDIDYxMjUgYW5kIHRhbGsgYWJvdXQgdmFsaWRhdGluZyBETlMtSURzIHRvIGF1dGhlbnRpY2F0 ZSB0aGUgVHJhbnNtaXR0ZXIuICBHaXZlbiB0aGF0IHRoZSBuYW1lIHRvIGJlIGF1dGhlbnRpY2F0 ZWQgd291bGQgYmUgcGFydCBvZiB0aGUgaW5mb3JtYXRpb24gY29udmV5ZWQgb3V0LW9mLWJhbmQs IHRob3VnaCwgaXQncyBub3QgZW50aXJlbHkgY2xlYXIgaG93IG11Y2ggdmFsdWUgdGhlcmUgd291 bGQgYmUgaW4gZG9pbmcgc28uDQo+DQo+DQo+IE1pa2U+IEFzIGluIFB1c2gsIHRoaXMgc2VjdGlv biB3YXMgZm9ybWVybHkgcG9vcmx5IHdvcmRlZCwgYW5kIGhhcyBsYXJnZWx5IGJlZW4gcmV3cml0 dGVuLg0KDQpBcyBmb3IgLXB1c2gsIEknZCByZWFsbHkgbGlrZSB0byBiZSBhYmxlIHRvIHNheSBz b21ldGhpbmcgYWJvdXQgdGhlIG90aGVyIGhhbGYgb2YgdGhlIG5hbWUgY29tcGFyaXNvbi4gIElu IHRoaXMgY2FzZSB3b3VsZCBpdCBiZSBzb21ldGhpbmcgbGlrZSAiZGlzY292ZXJ5IG9mIFNFVCBU cmFuc21pdHRlcnMgKGFuZCB0aGUgbmFtZXMgdXNlZCB0byBhdXRoZW50aWNhdGUgdGhlbSkgaXMg b3V0IG9mIHNjb3BlIGZvciB0aGlzIGRvY3VtZW50Ij8NCg0KVGhhbmtzIGZvciB0aGUgdXBkYXRl cywNCg0KQmVuDQoNCg== From nobody Mon Apr 27 16:53:27 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E14633A07B9; Mon, 27 Apr 2020 16:53:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YsicpX8y8zAF; Mon, 27 Apr 2020 16:53:24 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 016853A07B5; Mon, 27 Apr 2020 16:53:23 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 03RNrHG7015569 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 27 Apr 2020 19:53:20 -0400 Date: Mon, 27 Apr 2020 16:53:17 -0700 From: Benjamin Kaduk To: "Richard Backman, Annabelle" Cc: Mike Jones , "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Message-ID: <20200427235317.GJ27494@kduck.mit.edu> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 23:53:26 -0000 Just the sentence about DoS attacks, not the whole paragraph, right? -Ben On Mon, Apr 27, 2020 at 11:52:03PM +0000, Richard Backman, Annabelle wrote: > Yes, will remove that. > > – > Annabelle Backman (she/her) > AWS Identity > https://aws.amazon.com/identity/ > > > On 4/27/20, 4:51 PM, "Mike Jones" wrote: > > CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe. > > > > Thanks for the edits you made, Annabelle. Do we also want to delete this text from Poll before publishing, per Ben's suggestion? > > > Authorization for the eligibility to provide actionable SETs can be determined by > using the identity of the SET Issuer, > validating the polling endpoint URL, perhaps using TLS, > or via other employed authentication methods. > Among other benefits, authentication can help prevent denial-of-service attacks. > Because SETs are > not commands, SET Recipients are free to ignore SETs that > are not of interest after acknowledging their receipt. > > -- Mike > > -----Original Message----- > From: Mike Jones > Sent: Friday, April 24, 2020 7:12 PM > To: 'Benjamin Kaduk' ; richanna@amazon.com > Cc: draft-ietf-secevent-http-poll.all@ietf.org; id-event@ietf.org > Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 > > Thanks Ben. I think the DDOS text can be dropped from Poll. I'll do that early next week. > > Thanks again, > -- Mike > > -----Original Message----- > From: Benjamin Kaduk > Sent: Friday, April 24, 2020 5:53 PM > To: Mike Jones > Cc: draft-ietf-secevent-http-poll.all@ietf.org; id-event@ietf.org > Subject: [EXTERNAL] Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 > > Hi Mike, > > Thanks for the updates, and I continue to be sorry for the long response times. > > Poll is in quite good shape (well, I guess it's mostly just that -push is taking the brunt of the work for harmonizing the differences in text); just a couple more changes to make and we should be good to start the IETF LCs in parallel. I'll again trim the resolved bits. > > In Section 3 we have a note about DoS protections embedded in a larger block of text: > > Authorization for the eligibility to provide actionable SETs can be > determined by using the identity of the SET Issuer, validating the > polling endpoint URL, perhaps using TLS, or via other employed > authentication methods. Among other benefits, authentication can > help prevent denial-of-service attacks. Because SETs are not > commands, SET Recipients are free to ignore SETs that are not of > interest after acknowledging their receipt. > > I am not 100% sure, but I think this may have been text that originates before the split of documents, and in push got extracted and made into a separate section. Does it still make sense here? The DoS risk would typically be for a server getting lots of inbound connections, but there's not quite as clear a case for (client) authentication helping with that for poll, since the client is not sending huge amounts of stuff that would need to be dropped. Am I misunderstanding the intent here, or should the sentence just get dropped? > > On Fri, Feb 07, 2020 at 05:18:04PM +0000, Mike Jones wrote: > > draft-ietf-secevent-http-poll-07 was published to address these review comments. (-08 addressed additional editorial nits.) Descriptions of the changes made for these comments are inline, prefixed by "Mike>". > > > > > > > > -----Original Message----- > > From: Id-event On Behalf Of Benjamin Kaduk > > Sent: Tuesday, December 10, 2019 4:37 PM > > To: draft-ietf-secevent-http-poll.all@ietf.org > > Cc: id-event@ietf.org > > Subject: [Id-event] AD review of draft-ietf-secevent-http-poll-06 > > > > > > Section 3 > > > > > > Since poll has the TLS server as the SET Transmitter, we could potentially pull in RFC 6125 and talk about validating DNS-IDs to authenticate the Transmitter. Given that the name to be authenticated would be part of the information conveyed out-of-band, though, it's not entirely clear how much value there would be in doing so. > > > > > > Mike> As in Push, this section was formerly poorly worded, and has largely been rewritten. > > As for -push, I'd really like to be able to say something about the other half of the name comparison. In this case would it be something like "discovery of SET Transmitters (and the names used to authenticate them) is out of scope for this document"? > > Thanks for the updates, > > Ben > From nobody Tue Apr 28 17:36:58 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 885723A0762; Tue, 28 Apr 2020 17:36:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mtkq0xNgUPFP; Tue, 28 Apr 2020 17:36:54 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650139.outbound.protection.outlook.com [40.107.65.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B39473A077D; Tue, 28 Apr 2020 17:36:52 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=X3RhBiQSQu2Y6jqPqWao9qH/wAWcHFbkaycKn5HdWJTXNtw2/HYPZa31vtO6ORqGNZ3QxX+cSkFKJFkRnLhX9D0cIAnPhcbivDliwgryLgEszWKi4jhlOI6qmgCWW00DuMPLYGIv0RJq+145nJGRlvLFc2htrqiRla1M4UQmDUzMV1kxZ3JDqNqVw5C+fzp1dmE/XpmQENKswykHhVwc2eIUKX6aCumKfq2biykrr+kklXcj6D7vyjiqjkJZBO5HG8muiUQ/UBGZcDBMXPdaY9YGrXjL140wCCVnd739nVq3z/MxrnphuxJL8siYEwZEpP270jPDgf4kP2ugebzidw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sb66Sx91pxtzcI4e/wL/Ea6jPNmDoG+lRcPWJ3s1E0Y=; b=braE/39ZpJ3d5/QEZeXpPrpKx3IIXJWraDUwnYabQ8NE3F1Lr3yS2wChekA3AA9zKgED+7SFiNxoGbilNz4xqPGa5f8tgjDWaqSudx1FEuEN0u4RgVbap6kOVzvNaLboEM6kxOjvbiObSSAYrO6JQqm/4XoOR1omdV+To7EcAbC84DbR7XryogQ6jYyW+FIu6NNcYghULiPKZlv904rFpOGX1s1Pm09vK1kujMvf0bziCkKcjrbMc3sTrb2eAjzHYDZaC+Ish/VFeOmcIhAOcleLwNbXOzsWfbexoW4XruzBI8jNhNeic+rTNHOExlYoLPFdeXjIIQFqVmeXYlVj1w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sb66Sx91pxtzcI4e/wL/Ea6jPNmDoG+lRcPWJ3s1E0Y=; b=bwGZNWwoWiW7lKDQhswgEeiedMawScSKQVrJjQDGrWZwGg3G4APT32SrMt3/BRn43TGjm/Jaf3F2FtNASQ9DLO7v67vBm97BK0xNudPwjCFhbn8utUokuXuQU37dVOCZq1aCpU6/RQ7TCpmBKldp1EYa0Is6r303sPLuIzzTP54= Received: from BY5PR00MB0676.namprd00.prod.outlook.com (2603:10b6:a03:20c::15) by BYAPR00MB0549.namprd00.prod.outlook.com (2603:10b6:a03:101::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2992.0; Wed, 29 Apr 2020 00:36:48 +0000 Received: from BY5PR00MB0676.namprd00.prod.outlook.com ([fe80::2c69:97fa:f3be:7b60]) by BY5PR00MB0676.namprd00.prod.outlook.com ([fe80::2c69:97fa:f3be:7b60%7]) with mapi id 15.20.2996.000; Wed, 29 Apr 2020 00:36:48 +0000 From: Mike Jones To: "Richard Backman, Annabelle" , Benjamin Kaduk CC: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Thread-Topic: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Thread-Index: AdYdvj9GgpyFeFHbTjS+FM/WYCMCUA== Date: Wed, 29 Apr 2020 00:36:48 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=4a74a595-d77d-4493-b88f-00008ddbaa97; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-04-29T00:35:50Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: amazon.com; dkim=none (message not signed) header.d=none;amazon.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [50.47.87.252] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: db8c1a60-79b5-4bfe-5cf2-08d7ebd5670b x-ms-traffictypediagnostic: BYAPR00MB0549: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 03883BD916 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR00MB0676.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(376002)(346002)(136003)(396003)(39860400002)(110136005)(54906003)(186003)(316002)(53546011)(82960400001)(71200400001)(82950400001)(55016002)(6506007)(966005)(4326008)(26005)(9686003)(478600001)(10290500003)(66946007)(52536014)(8676002)(66476007)(66556008)(8990500004)(8936002)(86362001)(76116006)(66446008)(5660300002)(64756008)(33656002)(2906002)(7696005); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR00MB0676.namprd00.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: db8c1a60-79b5-4bfe-5cf2-08d7ebd5670b X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Apr 2020 00:36:48.4757 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7l6toib11OJ5jIX3xwE9JSmxD2QEdqYnEQieSSRUIMXD2EyWR/nilqwI0yTzzQgxyJMm9H+s20/1l1IzZeBdPQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0549 Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 00:36:57 -0000 QW5uYWJlbGxlLCBkbyB5b3Ugd2FudCB0byByZW1vdmUgdGhlIERET1Mgc2VudGVuY2Ugb3IgZG8g eW91IHdhbnQgbWUgdG8/ICBBZnRlciB0aGF0LCBhcmUgd2UgcmVhZHkgdG8gcHVibGlzaCBib3Ro IGRyYWZ0cz8NCg0KCQkJCVRoYW5rcywNCgkJCQktLSBNaWtlDQoNCi0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT4gDQpTZW50OiBN b25kYXksIEFwcmlsIDI3LCAyMDIwIDQ6NTMgUE0NClRvOiBSaWNoYXJkIEJhY2ttYW4sIEFubmFi ZWxsZSA8cmljaGFubmFAYW1hem9uLmNvbT4NCkNjOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVz QG1pY3Jvc29mdC5jb20+OyBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcG9sbC5hbGxAaWV0Zi5v cmc7IGlkLWV2ZW50QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBBRCByZXZpZXcg b2YgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwtMDYNCg0KSnVzdCB0aGUgc2VudGVuY2Ug YWJvdXQgRG9TIGF0dGFja3MsIG5vdCB0aGUgd2hvbGUgcGFyYWdyYXBoLCByaWdodD8NCg0KLUJl bg0KDQpPbiBNb24sIEFwciAyNywgMjAyMCBhdCAxMTo1MjowM1BNICswMDAwLCBSaWNoYXJkIEJh Y2ttYW4sIEFubmFiZWxsZSB3cm90ZToNCj4gWWVzLCB3aWxsIHJlbW92ZSB0aGF0Lg0KPiANCj4g 4oCTDQo+IEFubmFiZWxsZSBCYWNrbWFuIChzaGUvaGVyKQ0KPiBBV1MgSWRlbnRpdHkNCj4gaHR0 cHM6Ly9hd3MuYW1hem9uLmNvbS9pZGVudGl0eS8NCj4gIA0KPiANCj4g77u/T24gNC8yNy8yMCwg NDo1MSBQTSwgIk1pa2UgSm9uZXMiIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+IHdyb3Rl Og0KPiANCj4gQ0FVVElPTjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0 aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1 bmxlc3MgeW91IGNhbiBjb25maXJtIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMg c2FmZS4NCj4gDQo+IA0KPiANCj4gVGhhbmtzIGZvciB0aGUgZWRpdHMgeW91IG1hZGUsIEFubmFi ZWxsZS4gIERvIHdlIGFsc28gd2FudCB0byBkZWxldGUgdGhpcyB0ZXh0IGZyb20gUG9sbCBiZWZv cmUgcHVibGlzaGluZywgcGVyIEJlbidzIHN1Z2dlc3Rpb24/DQo+IA0KPiAgICAgICA8dD4NCj4g ICAgICAgICBBdXRob3JpemF0aW9uIGZvciB0aGUgZWxpZ2liaWxpdHkgdG8gcHJvdmlkZSBhY3Rp b25hYmxlIFNFVHMgY2FuIGJlIGRldGVybWluZWQgYnkNCj4gICAgICAgICB1c2luZyB0aGUgaWRl bnRpdHkgb2YgdGhlIFNFVCBJc3N1ZXIsDQo+ICAgICAgICAgdmFsaWRhdGluZyB0aGUgcG9sbGlu ZyBlbmRwb2ludCBVUkwsIHBlcmhhcHMgdXNpbmcgVExTLA0KPiAgICAgICAgIG9yIHZpYSBvdGhl ciBlbXBsb3llZCBhdXRoZW50aWNhdGlvbiBtZXRob2RzLg0KPiAgICAgICAgIEFtb25nIG90aGVy IGJlbmVmaXRzLCBhdXRoZW50aWNhdGlvbiBjYW4gaGVscCBwcmV2ZW50IGRlbmlhbC1vZi1zZXJ2 aWNlIGF0dGFja3MuDQo+ICAgICAgICAgQmVjYXVzZSBTRVRzIGFyZQ0KPiAgICAgICBub3QgY29t bWFuZHMsIFNFVCBSZWNpcGllbnRzIGFyZSBmcmVlIHRvIGlnbm9yZSBTRVRzIHRoYXQNCj4gICAg ICAgYXJlIG5vdCBvZiBpbnRlcmVzdCBhZnRlciBhY2tub3dsZWRnaW5nIHRoZWlyIHJlY2VpcHQu PC90Pg0KPiANCj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQo+IA0K PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBNaWtlIEpvbmVzDQo+IFNlbnQ6 IEZyaWRheSwgQXByaWwgMjQsIDIwMjAgNzoxMiBQTQ0KPiBUbzogJ0JlbmphbWluIEthZHVrJyA8 a2FkdWtAbWl0LmVkdT47IHJpY2hhbm5hQGFtYXpvbi5jb20NCj4gQ2M6IGRyYWZ0LWlldGYtc2Vj ZXZlbnQtaHR0cC1wb2xsLmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0Zi5vcmcNCj4gU3ViamVj dDogUmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1w b2xsLTA2DQo+IA0KPiBUaGFua3MgQmVuLiAgSSB0aGluayB0aGUgRERPUyB0ZXh0IGNhbiBiZSBk cm9wcGVkIGZyb20gUG9sbC4gIEknbGwgZG8gdGhhdCBlYXJseSBuZXh0IHdlZWsuDQo+IA0KPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcyBhZ2FpbiwNCj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQo+IA0KPiAtLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KPiBGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT4NCj4gU2VudDog RnJpZGF5LCBBcHJpbCAyNCwgMjAyMCA1OjUzIFBNDQo+IFRvOiBNaWtlIEpvbmVzIDxNaWNoYWVs LkpvbmVzQG1pY3Jvc29mdC5jb20+DQo+IENjOiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcG9s bC5hbGxAaWV0Zi5vcmc7IGlkLWV2ZW50QGlldGYub3JnDQo+IFN1YmplY3Q6IFtFWFRFUk5BTF0g UmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xs LTA2DQo+IA0KPiBIaSBNaWtlLA0KPiANCj4gVGhhbmtzIGZvciB0aGUgdXBkYXRlcywgYW5kIEkg Y29udGludWUgdG8gYmUgc29ycnkgZm9yIHRoZSBsb25nIHJlc3BvbnNlIHRpbWVzLg0KPiANCj4g UG9sbCBpcyBpbiBxdWl0ZSBnb29kIHNoYXBlICh3ZWxsLCBJIGd1ZXNzIGl0J3MgbW9zdGx5IGp1 c3QgdGhhdCAtcHVzaCBpcyB0YWtpbmcgdGhlIGJydW50IG9mIHRoZSB3b3JrIGZvciBoYXJtb25p emluZyB0aGUgZGlmZmVyZW5jZXMgaW4gdGV4dCk7IGp1c3QgYSBjb3VwbGUgbW9yZSBjaGFuZ2Vz IHRvIG1ha2UgYW5kIHdlIHNob3VsZCBiZSBnb29kIHRvIHN0YXJ0IHRoZSBJRVRGIExDcyBpbiBw YXJhbGxlbC4gIEknbGwgYWdhaW4gdHJpbSB0aGUgcmVzb2x2ZWQgYml0cy4NCj4gDQo+IEluIFNl Y3Rpb24gMyB3ZSBoYXZlIGEgbm90ZSBhYm91dCBEb1MgcHJvdGVjdGlvbnMgZW1iZWRkZWQgaW4g YSBsYXJnZXIgYmxvY2sgb2YgdGV4dDoNCj4gDQo+ICAgIEF1dGhvcml6YXRpb24gZm9yIHRoZSBl bGlnaWJpbGl0eSB0byBwcm92aWRlIGFjdGlvbmFibGUgU0VUcyBjYW4gYmUNCj4gICAgZGV0ZXJt aW5lZCBieSB1c2luZyB0aGUgaWRlbnRpdHkgb2YgdGhlIFNFVCBJc3N1ZXIsIHZhbGlkYXRpbmcg dGhlDQo+ICAgIHBvbGxpbmcgZW5kcG9pbnQgVVJMLCBwZXJoYXBzIHVzaW5nIFRMUywgb3Igdmlh IG90aGVyIGVtcGxveWVkDQo+ICAgIGF1dGhlbnRpY2F0aW9uIG1ldGhvZHMuICBBbW9uZyBvdGhl ciBiZW5lZml0cywgYXV0aGVudGljYXRpb24gY2FuDQo+ICAgIGhlbHAgcHJldmVudCBkZW5pYWwt b2Ytc2VydmljZSBhdHRhY2tzLiAgQmVjYXVzZSBTRVRzIGFyZSBub3QNCj4gICAgY29tbWFuZHMs IFNFVCBSZWNpcGllbnRzIGFyZSBmcmVlIHRvIGlnbm9yZSBTRVRzIHRoYXQgYXJlIG5vdCBvZg0K PiAgICBpbnRlcmVzdCBhZnRlciBhY2tub3dsZWRnaW5nIHRoZWlyIHJlY2VpcHQuDQo+IA0KPiBJ IGFtIG5vdCAxMDAlIHN1cmUsIGJ1dCBJIHRoaW5rIHRoaXMgbWF5IGhhdmUgYmVlbiB0ZXh0IHRo YXQgb3JpZ2luYXRlcyBiZWZvcmUgdGhlIHNwbGl0IG9mIGRvY3VtZW50cywgYW5kIGluIHB1c2gg Z290IGV4dHJhY3RlZCBhbmQgbWFkZSBpbnRvIGEgc2VwYXJhdGUgc2VjdGlvbi4gIERvZXMgaXQg c3RpbGwgbWFrZSBzZW5zZSBoZXJlPyAgVGhlIERvUyByaXNrIHdvdWxkIHR5cGljYWxseSBiZSBm b3IgYSBzZXJ2ZXIgZ2V0dGluZyBsb3RzIG9mIGluYm91bmQgY29ubmVjdGlvbnMsIGJ1dCB0aGVy ZSdzIG5vdCBxdWl0ZSBhcyBjbGVhciBhIGNhc2UgZm9yIChjbGllbnQpIGF1dGhlbnRpY2F0aW9u IGhlbHBpbmcgd2l0aCB0aGF0IGZvciBwb2xsLCBzaW5jZSB0aGUgY2xpZW50IGlzIG5vdCBzZW5k aW5nIGh1Z2UgYW1vdW50cyBvZiBzdHVmZiB0aGF0IHdvdWxkIG5lZWQgdG8gYmUgZHJvcHBlZC4g IEFtIEkgbWlzdW5kZXJzdGFuZGluZyB0aGUgaW50ZW50IGhlcmUsIG9yIHNob3VsZCB0aGUgc2Vu dGVuY2UganVzdCBnZXQgZHJvcHBlZD8NCj4gDQo+IE9uIEZyaSwgRmViIDA3LCAyMDIwIGF0IDA1 OjE4OjA0UE0gKzAwMDAsIE1pa2UgSm9uZXMgd3JvdGU6DQo+ID4gZHJhZnQtaWV0Zi1zZWNldmVu dC1odHRwLXBvbGwtMDc8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtc2Vj ZXZlbnQtaHR0cC1wb2xsLTA3PiB3YXMgcHVibGlzaGVkIHRvIGFkZHJlc3MgdGhlc2UgcmV2aWV3 IGNvbW1lbnRzLiAgKC0wODxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1z ZWNldmVudC1odHRwLXBvbGwtMDg+IGFkZHJlc3NlZCBhZGRpdGlvbmFsIGVkaXRvcmlhbCBuaXRz LikgIERlc2NyaXB0aW9ucyBvZiB0aGUgY2hhbmdlcyBtYWRlIGZvciB0aGVzZSBjb21tZW50cyBh cmUgaW5saW5lLCBwcmVmaXhlZCBieSAiTWlrZT4iLg0KPiA+DQo+ID4NCj4gPg0KPiA+IC0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogSWQtZXZlbnQgPGlkLWV2ZW50LWJvdW5j ZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBCZW5qYW1pbiBLYWR1aw0KPiA+IFNlbnQ6IFR1ZXNk YXksIERlY2VtYmVyIDEwLCAyMDE5IDQ6MzcgUE0NCj4gPiBUbzogZHJhZnQtaWV0Zi1zZWNldmVu dC1odHRwLXBvbGwuYWxsQGlldGYub3JnDQo+ID4gQ2M6IGlkLWV2ZW50QGlldGYub3JnDQo+ID4g U3ViamVjdDogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRw LXBvbGwtMDYNCj4gPg0KPiA+DQo+ID4gU2VjdGlvbiAzDQo+ID4NCj4gPg0KPiA+IFNpbmNlIHBv bGwgaGFzIHRoZSBUTFMgc2VydmVyIGFzIHRoZSBTRVQgVHJhbnNtaXR0ZXIsIHdlIGNvdWxkIHBv dGVudGlhbGx5IHB1bGwgaW4gUkZDIDYxMjUgYW5kIHRhbGsgYWJvdXQgdmFsaWRhdGluZyBETlMt SURzIHRvIGF1dGhlbnRpY2F0ZSB0aGUgVHJhbnNtaXR0ZXIuICBHaXZlbiB0aGF0IHRoZSBuYW1l IHRvIGJlIGF1dGhlbnRpY2F0ZWQgd291bGQgYmUgcGFydCBvZiB0aGUgaW5mb3JtYXRpb24gY29u dmV5ZWQgb3V0LW9mLWJhbmQsIHRob3VnaCwgaXQncyBub3QgZW50aXJlbHkgY2xlYXIgaG93IG11 Y2ggdmFsdWUgdGhlcmUgd291bGQgYmUgaW4gZG9pbmcgc28uDQo+ID4NCj4gPg0KPiA+IE1pa2U+ IEFzIGluIFB1c2gsIHRoaXMgc2VjdGlvbiB3YXMgZm9ybWVybHkgcG9vcmx5IHdvcmRlZCwgYW5k IGhhcyBsYXJnZWx5IGJlZW4gcmV3cml0dGVuLg0KPiANCj4gQXMgZm9yIC1wdXNoLCBJJ2QgcmVh bGx5IGxpa2UgdG8gYmUgYWJsZSB0byBzYXkgc29tZXRoaW5nIGFib3V0IHRoZSBvdGhlciBoYWxm IG9mIHRoZSBuYW1lIGNvbXBhcmlzb24uICBJbiB0aGlzIGNhc2Ugd291bGQgaXQgYmUgc29tZXRo aW5nIGxpa2UgImRpc2NvdmVyeSBvZiBTRVQgVHJhbnNtaXR0ZXJzIChhbmQgdGhlIG5hbWVzIHVz ZWQgdG8gYXV0aGVudGljYXRlIHRoZW0pIGlzIG91dCBvZiBzY29wZSBmb3IgdGhpcyBkb2N1bWVu dCI/DQo+IA0KPiBUaGFua3MgZm9yIHRoZSB1cGRhdGVzLA0KPiANCj4gQmVuDQo+IA0K From nobody Wed Apr 29 15:54:34 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 271393A096E; Wed, 29 Apr 2020 15:54:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dm_AdUb5t_pW; Wed, 29 Apr 2020 15:54:30 -0700 (PDT) Received: from smtp-fw-9102.amazon.com (smtp-fw-9102.amazon.com [207.171.184.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB1183A096B; Wed, 29 Apr 2020 15:54:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1588200871; x=1619736871; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=0GpXRlXRN3YhdxEGdcghPlngkYD5Qpf3lIezAaZnU+Q=; b=XKF9lv9KuT9X3PwjQJ9bVNVY3Cqy+7KBqIznT7VkGUwSxbRXATVIBuQf AOUit3TRhZLhnvO7MQYOdag8YXYdN33fcXFzoinoWGp0MvpKikOQPmiui g3JAS3C+8ecOse7Pb6q2jfxsSdbs+oJ+/cW8eo3je5k5QmM79BTDGMD3Z 8=; IronPort-SDR: PUbqH0X+LhqfOmNR/Z1owtlMvga7bPZoXJysMISxjDY2GXkCgEOQHY1lOiKLApdIP9gs5lmgBv SXGn2rkQ4FrQ== X-IronPort-AV: E=Sophos;i="5.73,333,1583193600"; d="scan'208";a="40330065" Thread-Topic: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-2c-6f38efd9.us-west-2.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-9102.sea19.amazon.com with ESMTP; 29 Apr 2020 22:54:28 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan3.pdx.amazon.com [10.170.41.166]) by email-inbound-relay-2c-6f38efd9.us-west-2.amazon.com (Postfix) with ESMTPS id BF4BDA1BA6; Wed, 29 Apr 2020 22:54:25 +0000 (UTC) Received: from EX13D11UWC002.ant.amazon.com (10.43.162.174) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 29 Apr 2020 22:54:25 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC002.ant.amazon.com (10.43.162.174) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 29 Apr 2020 22:54:24 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1497.006; Wed, 29 Apr 2020 22:54:24 +0000 From: "Richard Backman, Annabelle" To: Mike Jones , Benjamin Kaduk CC: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Thread-Index: AdYdvj9GODjwbpyaR1unVK/WNvqD+AAgDToA Date: Wed, 29 Apr 2020 22:54:24 +0000 Message-ID: <87C847B1-937A-4579-8B90-09F879A4DC05@amazon.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.21.0.200113 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.160.65] Content-Type: text/plain; charset="utf-8" Content-ID: <8CB4BF2C220FA34584118E69E6CC1056@amazon.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 22:54:32 -0000 U29ycnksIHdhcyB3YWl0aW5nIGZvciBjb25maXJtYXRpb24gdGhhdCB3ZSdyZSByZW1vdmluZyB0 aGUgc2VudGVuY2UgYW5kIG5vdCB0aGUgcGFyYWdyYXBoLiBZZXMsIEknbGwgcmVtb3ZlIHRoZSBz ZW50ZW5jZSBhbmQgZG8gYW5vdGhlciBwdWxsIHJlcXVlc3QuIE9uY2UgeW91IGNvbmZpcm0gdmlh IHB1bGwgcmVxdWVzdCBhcHByb3ZhbCBJJ2xsIHB1Ymxpc2ggdGhlIGRyYWZ0cy4NCg0K4oCTDQpB bm5hYmVsbGUgQmFja21hbiAoc2hlL2hlcikNCkFXUyBJZGVudGl0eQ0KaHR0cHM6Ly9hd3MuYW1h em9uLmNvbS9pZGVudGl0eS8NCiANCg0K77u/T24gNC8yOC8yMCwgNTozNyBQTSwgIk1pa2UgSm9u ZXMiIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+IHdyb3RlOg0KDQpDQVVUSU9OOiBUaGlz IGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5v dCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZpcm0g dGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KDQoNCg0KQW5uYWJlbGxl LCBkbyB5b3Ugd2FudCB0byByZW1vdmUgdGhlIERET1Mgc2VudGVuY2Ugb3IgZG8geW91IHdhbnQg bWUgdG8/ICBBZnRlciB0aGF0LCBhcmUgd2UgcmVhZHkgdG8gcHVibGlzaCBib3RoIGRyYWZ0cz8N Cg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGFua3MsDQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N CkZyb206IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pg0KU2VudDogTW9uZGF5LCBBcHJp bCAyNywgMjAyMCA0OjUzIFBNDQpUbzogUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgPHJpY2hh bm5hQGFtYXpvbi5jb20+DQpDYzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQu Y29tPjsgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwuYWxsQGlldGYub3JnOyBpZC1ldmVu dEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWll dGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA2DQoNCkp1c3QgdGhlIHNlbnRlbmNlIGFib3V0IERvUyBh dHRhY2tzLCBub3QgdGhlIHdob2xlIHBhcmFncmFwaCwgcmlnaHQ/DQoNCi1CZW4NCg0KT24gTW9u LCBBcHIgMjcsIDIwMjAgYXQgMTE6NTI6MDNQTSArMDAwMCwgUmljaGFyZCBCYWNrbWFuLCBBbm5h YmVsbGUgd3JvdGU6DQo+IFllcywgd2lsbCByZW1vdmUgdGhhdC4NCj4NCj4g4oCTDQo+IEFubmFi ZWxsZSBCYWNrbWFuIChzaGUvaGVyKQ0KPiBBV1MgSWRlbnRpdHkNCj4gaHR0cHM6Ly9hd3MuYW1h em9uLmNvbS9pZGVudGl0eS8NCj4NCj4NCj4gT24gNC8yNy8yMCwgNDo1MSBQTSwgIk1pa2UgSm9u ZXMiIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+IHdyb3RlOg0KPg0KPiBDQVVUSU9OOiBU aGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERv IG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZp cm0gdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KPg0KPg0KPg0KPiBU aGFua3MgZm9yIHRoZSBlZGl0cyB5b3UgbWFkZSwgQW5uYWJlbGxlLiAgRG8gd2UgYWxzbyB3YW50 IHRvIGRlbGV0ZSB0aGlzIHRleHQgZnJvbSBQb2xsIGJlZm9yZSBwdWJsaXNoaW5nLCBwZXIgQmVu J3Mgc3VnZ2VzdGlvbj8NCj4NCj4gICAgICAgPHQ+DQo+ICAgICAgICAgQXV0aG9yaXphdGlvbiBm b3IgdGhlIGVsaWdpYmlsaXR5IHRvIHByb3ZpZGUgYWN0aW9uYWJsZSBTRVRzIGNhbiBiZSBkZXRl cm1pbmVkIGJ5DQo+ICAgICAgICAgdXNpbmcgdGhlIGlkZW50aXR5IG9mIHRoZSBTRVQgSXNzdWVy LA0KPiAgICAgICAgIHZhbGlkYXRpbmcgdGhlIHBvbGxpbmcgZW5kcG9pbnQgVVJMLCBwZXJoYXBz IHVzaW5nIFRMUywNCj4gICAgICAgICBvciB2aWEgb3RoZXIgZW1wbG95ZWQgYXV0aGVudGljYXRp b24gbWV0aG9kcy4NCj4gICAgICAgICBBbW9uZyBvdGhlciBiZW5lZml0cywgYXV0aGVudGljYXRp b24gY2FuIGhlbHAgcHJldmVudCBkZW5pYWwtb2Ytc2VydmljZSBhdHRhY2tzLg0KPiAgICAgICAg IEJlY2F1c2UgU0VUcyBhcmUNCj4gICAgICAgbm90IGNvbW1hbmRzLCBTRVQgUmVjaXBpZW50cyBh cmUgZnJlZSB0byBpZ25vcmUgU0VUcyB0aGF0DQo+ICAgICAgIGFyZSBub3Qgb2YgaW50ZXJlc3Qg YWZ0ZXIgYWNrbm93bGVkZ2luZyB0aGVpciByZWNlaXB0LjwvdD4NCj4NCj4gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQo+IEZyb206IE1pa2UgSm9uZXMNCj4gU2VudDogRnJpZGF5LCBBcHJpbCAyNCwgMjAyMCA3 OjEyIFBNDQo+IFRvOiAnQmVuamFtaW4gS2FkdWsnIDxrYWR1a0BtaXQuZWR1PjsgcmljaGFubmFA YW1hem9uLmNvbQ0KPiBDYzogZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwuYWxsQGlldGYu b3JnOyBpZC1ldmVudEBpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBBRCByZXZp ZXcgb2YgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwtMDYNCj4NCj4gVGhhbmtzIEJlbi4g IEkgdGhpbmsgdGhlIERET1MgdGV4dCBjYW4gYmUgZHJvcHBlZCBmcm9tIFBvbGwuICBJJ2xsIGRv IHRoYXQgZWFybHkgbmV4dCB3ZWVrLg0KPg0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFRoYW5rcyBhZ2FpbiwNCj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBN aWtlDQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEJlbmphbWluIEth ZHVrIDxrYWR1a0BtaXQuZWR1Pg0KPiBTZW50OiBGcmlkYXksIEFwcmlsIDI0LCAyMDIwIDU6NTMg UE0NCj4gVG86IE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4NCj4gQ2M6 IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0 Zi5vcmcNCj4gU3ViamVjdDogW0VYVEVSTkFMXSBSZTogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2Yg ZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwtMDYNCj4NCj4gSGkgTWlrZSwNCj4NCj4gVGhh bmtzIGZvciB0aGUgdXBkYXRlcywgYW5kIEkgY29udGludWUgdG8gYmUgc29ycnkgZm9yIHRoZSBs b25nIHJlc3BvbnNlIHRpbWVzLg0KPg0KPiBQb2xsIGlzIGluIHF1aXRlIGdvb2Qgc2hhcGUgKHdl bGwsIEkgZ3Vlc3MgaXQncyBtb3N0bHkganVzdCB0aGF0IC1wdXNoIGlzIHRha2luZyB0aGUgYnJ1 bnQgb2YgdGhlIHdvcmsgZm9yIGhhcm1vbml6aW5nIHRoZSBkaWZmZXJlbmNlcyBpbiB0ZXh0KTsg anVzdCBhIGNvdXBsZSBtb3JlIGNoYW5nZXMgdG8gbWFrZSBhbmQgd2Ugc2hvdWxkIGJlIGdvb2Qg dG8gc3RhcnQgdGhlIElFVEYgTENzIGluIHBhcmFsbGVsLiAgSSdsbCBhZ2FpbiB0cmltIHRoZSBy ZXNvbHZlZCBiaXRzLg0KPg0KPiBJbiBTZWN0aW9uIDMgd2UgaGF2ZSBhIG5vdGUgYWJvdXQgRG9T IHByb3RlY3Rpb25zIGVtYmVkZGVkIGluIGEgbGFyZ2VyIGJsb2NrIG9mIHRleHQ6DQo+DQo+ICAg IEF1dGhvcml6YXRpb24gZm9yIHRoZSBlbGlnaWJpbGl0eSB0byBwcm92aWRlIGFjdGlvbmFibGUg U0VUcyBjYW4gYmUNCj4gICAgZGV0ZXJtaW5lZCBieSB1c2luZyB0aGUgaWRlbnRpdHkgb2YgdGhl IFNFVCBJc3N1ZXIsIHZhbGlkYXRpbmcgdGhlDQo+ICAgIHBvbGxpbmcgZW5kcG9pbnQgVVJMLCBw ZXJoYXBzIHVzaW5nIFRMUywgb3IgdmlhIG90aGVyIGVtcGxveWVkDQo+ICAgIGF1dGhlbnRpY2F0 aW9uIG1ldGhvZHMuICBBbW9uZyBvdGhlciBiZW5lZml0cywgYXV0aGVudGljYXRpb24gY2FuDQo+ ICAgIGhlbHAgcHJldmVudCBkZW5pYWwtb2Ytc2VydmljZSBhdHRhY2tzLiAgQmVjYXVzZSBTRVRz IGFyZSBub3QNCj4gICAgY29tbWFuZHMsIFNFVCBSZWNpcGllbnRzIGFyZSBmcmVlIHRvIGlnbm9y ZSBTRVRzIHRoYXQgYXJlIG5vdCBvZg0KPiAgICBpbnRlcmVzdCBhZnRlciBhY2tub3dsZWRnaW5n IHRoZWlyIHJlY2VpcHQuDQo+DQo+IEkgYW0gbm90IDEwMCUgc3VyZSwgYnV0IEkgdGhpbmsgdGhp cyBtYXkgaGF2ZSBiZWVuIHRleHQgdGhhdCBvcmlnaW5hdGVzIGJlZm9yZSB0aGUgc3BsaXQgb2Yg ZG9jdW1lbnRzLCBhbmQgaW4gcHVzaCBnb3QgZXh0cmFjdGVkIGFuZCBtYWRlIGludG8gYSBzZXBh cmF0ZSBzZWN0aW9uLiAgRG9lcyBpdCBzdGlsbCBtYWtlIHNlbnNlIGhlcmU/ICBUaGUgRG9TIHJp c2sgd291bGQgdHlwaWNhbGx5IGJlIGZvciBhIHNlcnZlciBnZXR0aW5nIGxvdHMgb2YgaW5ib3Vu ZCBjb25uZWN0aW9ucywgYnV0IHRoZXJlJ3Mgbm90IHF1aXRlIGFzIGNsZWFyIGEgY2FzZSBmb3Ig KGNsaWVudCkgYXV0aGVudGljYXRpb24gaGVscGluZyB3aXRoIHRoYXQgZm9yIHBvbGwsIHNpbmNl IHRoZSBjbGllbnQgaXMgbm90IHNlbmRpbmcgaHVnZSBhbW91bnRzIG9mIHN0dWZmIHRoYXQgd291 bGQgbmVlZCB0byBiZSBkcm9wcGVkLiAgQW0gSSBtaXN1bmRlcnN0YW5kaW5nIHRoZSBpbnRlbnQg aGVyZSwgb3Igc2hvdWxkIHRoZSBzZW50ZW5jZSBqdXN0IGdldCBkcm9wcGVkPw0KPg0KPiBPbiBG cmksIEZlYiAwNywgMjAyMCBhdCAwNToxODowNFBNICswMDAwLCBNaWtlIEpvbmVzIHdyb3RlOg0K PiA+IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA3PGh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcG9sbC0wNz4gd2FzIHB1Ymxpc2hlZCB0 byBhZGRyZXNzIHRoZXNlIHJldmlldyBjb21tZW50cy4gICgtMDg8aHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA4PiBhZGRyZXNzZWQgYWRk aXRpb25hbCBlZGl0b3JpYWwgbml0cy4pICBEZXNjcmlwdGlvbnMgb2YgdGhlIGNoYW5nZXMgbWFk ZSBmb3IgdGhlc2UgY29tbWVudHMgYXJlIGlubGluZSwgcHJlZml4ZWQgYnkgIk1pa2U+Ii4NCj4g Pg0KPiA+DQo+ID4NCj4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206IElk LWV2ZW50IDxpZC1ldmVudC1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgQmVuamFtaW4g S2FkdWsNCj4gPiBTZW50OiBUdWVzZGF5LCBEZWNlbWJlciAxMCwgMjAxOSA0OjM3IFBNDQo+ID4g VG86IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLmFsbEBpZXRmLm9yZw0KPiA+IENjOiBp ZC1ldmVudEBpZXRmLm9yZw0KPiA+IFN1YmplY3Q6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRy YWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA2DQo+ID4NCj4gPg0KPiA+IFNlY3Rpb24gMw0K PiA+DQo+ID4NCj4gPiBTaW5jZSBwb2xsIGhhcyB0aGUgVExTIHNlcnZlciBhcyB0aGUgU0VUIFRy YW5zbWl0dGVyLCB3ZSBjb3VsZCBwb3RlbnRpYWxseSBwdWxsIGluIFJGQyA2MTI1IGFuZCB0YWxr IGFib3V0IHZhbGlkYXRpbmcgRE5TLUlEcyB0byBhdXRoZW50aWNhdGUgdGhlIFRyYW5zbWl0dGVy LiAgR2l2ZW4gdGhhdCB0aGUgbmFtZSB0byBiZSBhdXRoZW50aWNhdGVkIHdvdWxkIGJlIHBhcnQg b2YgdGhlIGluZm9ybWF0aW9uIGNvbnZleWVkIG91dC1vZi1iYW5kLCB0aG91Z2gsIGl0J3Mgbm90 IGVudGlyZWx5IGNsZWFyIGhvdyBtdWNoIHZhbHVlIHRoZXJlIHdvdWxkIGJlIGluIGRvaW5nIHNv Lg0KPiA+DQo+ID4NCj4gPiBNaWtlPiBBcyBpbiBQdXNoLCB0aGlzIHNlY3Rpb24gd2FzIGZvcm1l cmx5IHBvb3JseSB3b3JkZWQsIGFuZCBoYXMgbGFyZ2VseSBiZWVuIHJld3JpdHRlbi4NCj4NCj4g QXMgZm9yIC1wdXNoLCBJJ2QgcmVhbGx5IGxpa2UgdG8gYmUgYWJsZSB0byBzYXkgc29tZXRoaW5n IGFib3V0IHRoZSBvdGhlciBoYWxmIG9mIHRoZSBuYW1lIGNvbXBhcmlzb24uICBJbiB0aGlzIGNh c2Ugd291bGQgaXQgYmUgc29tZXRoaW5nIGxpa2UgImRpc2NvdmVyeSBvZiBTRVQgVHJhbnNtaXR0 ZXJzIChhbmQgdGhlIG5hbWVzIHVzZWQgdG8gYXV0aGVudGljYXRlIHRoZW0pIGlzIG91dCBvZiBz Y29wZSBmb3IgdGhpcyBkb2N1bWVudCI/DQo+DQo+IFRoYW5rcyBmb3IgdGhlIHVwZGF0ZXMsDQo+ DQo+IEJlbg0KPg0KDQo= From nobody Wed Apr 29 15:57:02 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D770C3A0B33; Wed, 29 Apr 2020 15:56:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L6WtPpMoXdFZ; Wed, 29 Apr 2020 15:56:50 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640125.outbound.protection.outlook.com [40.107.64.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 010343A0A9C; Wed, 29 Apr 2020 15:56:27 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iGo8jTPFOU+1bQq45HtT93pU8EG/ykw4Mk6KonFp80tyLQtRW1JFkIrINha1VEXStFj9O7mNMMOHeJFgsF1mjEVAU4ypAhvPTKcKZ/cryk/2mBtosha7QBqzNIcMzT+XdAPlVpcy4Lww1m3BKh4BLnxgyRb7xR1/FNmg4Z6Ja83GDnEMLfWccWslD3WZgi42AlXoziTasFhQNEo1u/raMM3aXz86Ff5Khg8Oc3y2IKpKsJea2AtcQoPuJeO6IfcZwAgaU86Rs7vN/PQ5OMIw7eLTClUkjP2XfNQ9FDOAFwTWOl1Dk4lqNbLNuxFGndzFsQImteW9IiHAe5GfsptQEQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=y3MuSue0YHdtY3bVwb6a6Q7Cp0H39oq3nyJMMrdzwRU=; b=QGkC/WRjlKAMLK547AL13Ll5SPn8ZShsqDuq+psvNNGoO3R5YkRyXHP8sfPvjOc/Sud6q6k5RW6RGoJeo7oaa0iit3+X7j4q3hpaQtlOJwa544FLT1jjL85tGllyNfTqUNUzz1wMRrR4En+RTpAs6VNdb2LCjRUVNcPDKtSlk0VzOYdw/y/yK0CspweZWurJ948CsHPEGp4GZIi9KlVVIqarK6hYY8bAVShR3ObdcnKWNpVrjSvUjF0YIaqHjUTl4DIlXcWUeMT32ulVM2JIByn4M095V6ylVN1gfhzDKsDK1ieGmeXdjV7K+Tjli0rgu/5ZF0hmmKsN4GxXhvSVKw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=y3MuSue0YHdtY3bVwb6a6Q7Cp0H39oq3nyJMMrdzwRU=; b=TQsqCNq2ig0dK1yX99OSF1KZORsd/bThNSCPARYWd/cBHaRJI14upwux/4c0RQMT5gT1XIaYBoRQX1WOQv6MGzKxxWQ4tkhnWO73K3NqQdPm2N3eubqygbd9AWYnw3tiVmzAGJiNFnvdAXtQaprJ9XOkC/4I4WB5s+JYtfkkrlY= Received: from DM6PR00MB0684.namprd00.prod.outlook.com (2603:10b6:5:21c::8) by DM5PR00MB0422.namprd00.prod.outlook.com (2603:10b6:4:a0::34) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2997.0; Wed, 29 Apr 2020 22:56:25 +0000 Received: from DM6PR00MB0684.namprd00.prod.outlook.com ([fe80::28ba:39bb:f9ca:658b]) by DM6PR00MB0684.namprd00.prod.outlook.com ([fe80::28ba:39bb:f9ca:658b%4]) with mapi id 15.20.2994.000; Wed, 29 Apr 2020 22:56:25 +0000 From: Mike Jones To: "Richard Backman, Annabelle" , Benjamin Kaduk CC: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Thread-Topic: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Thread-Index: AdYdvj9GgpyFeFHbTjS+FM/WYCMCUAAuuFEAAAAPkTA= Date: Wed, 29 Apr 2020 22:56:25 +0000 Message-ID: References: <87C847B1-937A-4579-8B90-09F879A4DC05@amazon.com> In-Reply-To: <87C847B1-937A-4579-8B90-09F879A4DC05@amazon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=4b2afdac-efc3-4561-a546-000010763995; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-04-29T22:56:09Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: amazon.com; dkim=none (message not signed) header.d=none;amazon.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [50.47.87.252] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 031a2d62-469c-49a5-8644-08d7ec908b9d x-ms-traffictypediagnostic: DM5PR00MB0422: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 03883BD916 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR00MB0684.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(136003)(376002)(39860400002)(396003)(366004)(9686003)(478600001)(55016002)(71200400001)(2906002)(52536014)(8936002)(76116006)(8676002)(86362001)(66946007)(66446008)(8990500004)(64756008)(66556008)(66476007)(966005)(82960400001)(33656002)(186003)(5660300002)(53546011)(10290500003)(6506007)(110136005)(26005)(82950400001)(54906003)(7696005)(4326008)(316002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR00MB0684.namprd00.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 031a2d62-469c-49a5-8644-08d7ec908b9d X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Apr 2020 22:56:25.6861 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: eRM2MsgNs6UlOzLVnhjDBur0x0RbrQbCXcupnB+221Y7fdMZ2w2Un7dW3x0MU1KJBsLCVzV6az7CMrxDlvGrvQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR00MB0422 Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 22:56:59 -0000 Q29vbCAtIHRoYW5rcy4NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IFJpY2hh cmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5uYUBhbWF6b24uY29tPiANClNlbnQ6IFdlZG5l c2RheSwgQXByaWwgMjksIDIwMjAgMzo1NCBQTQ0KVG86IE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9u ZXNAbWljcm9zb2Z0LmNvbT47IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pg0KQ2M6IGRy YWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0Zi5v cmcNClN1YmplY3Q6IFtFWFRFUk5BTF0gUmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0 LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA2DQoNClNvcnJ5LCB3YXMgd2FpdGluZyBmb3IgY29u ZmlybWF0aW9uIHRoYXQgd2UncmUgcmVtb3ZpbmcgdGhlIHNlbnRlbmNlIGFuZCBub3QgdGhlIHBh cmFncmFwaC4gWWVzLCBJJ2xsIHJlbW92ZSB0aGUgc2VudGVuY2UgYW5kIGRvIGFub3RoZXIgcHVs bCByZXF1ZXN0LiBPbmNlIHlvdSBjb25maXJtIHZpYSBwdWxsIHJlcXVlc3QgYXBwcm92YWwgSSds bCBwdWJsaXNoIHRoZSBkcmFmdHMuDQoNCuKAkw0KQW5uYWJlbGxlIEJhY2ttYW4gKHNoZS9oZXIp DQpBV1MgSWRlbnRpdHkNCmh0dHBzOi8vYXdzLmFtYXpvbi5jb20vaWRlbnRpdHkvDQogDQoNCu+7 v09uIDQvMjgvMjAsIDU6MzcgUE0sICJNaWtlIEpvbmVzIiA8TWljaGFlbC5Kb25lc0BtaWNyb3Nv ZnQuY29tPiB3cm90ZToNCg0KQ0FVVElPTjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0 c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRh Y2htZW50cyB1bmxlc3MgeW91IGNhbiBjb25maXJtIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNv bnRlbnQgaXMgc2FmZS4NCg0KDQoNCkFubmFiZWxsZSwgZG8geW91IHdhbnQgdG8gcmVtb3ZlIHRo ZSBERE9TIHNlbnRlbmNlIG9yIGRvIHlvdSB3YW50IG1lIHRvPyAgQWZ0ZXIgdGhhdCwgYXJlIHdl IHJlYWR5IHRvIHB1Ymxpc2ggYm90aCBkcmFmdHM/DQoNCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgVGhhbmtzLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtl DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2Fk dWtAbWl0LmVkdT4NClNlbnQ6IE1vbmRheSwgQXByaWwgMjcsIDIwMjAgNDo1MyBQTQ0KVG86IFJp Y2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5uYUBhbWF6b24uY29tPg0KQ2M6IE1pa2Ug Sm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT47IGRyYWZ0LWlldGYtc2VjZXZlbnQt aHR0cC1wb2xsLmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBb SWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcG9sbC0wNg0K DQpKdXN0IHRoZSBzZW50ZW5jZSBhYm91dCBEb1MgYXR0YWNrcywgbm90IHRoZSB3aG9sZSBwYXJh Z3JhcGgsIHJpZ2h0Pw0KDQotQmVuDQoNCk9uIE1vbiwgQXByIDI3LCAyMDIwIGF0IDExOjUyOjAz UE0gKzAwMDAsIFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIHdyb3RlOg0KPiBZZXMsIHdpbGwg cmVtb3ZlIHRoYXQuDQo+DQo+IOKAkw0KPiBBbm5hYmVsbGUgQmFja21hbiAoc2hlL2hlcikNCj4g QVdTIElkZW50aXR5DQo+IGh0dHBzOi8vYXdzLmFtYXpvbi5jb20vaWRlbnRpdHkvDQo+DQo+DQo+ IE9uIDQvMjcvMjAsIDQ6NTEgUE0sICJNaWtlIEpvbmVzIiA8TWljaGFlbC5Kb25lc0BtaWNyb3Nv ZnQuY29tPiB3cm90ZToNCj4NCj4gQ0FVVElPTjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20g b3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBh dHRhY2htZW50cyB1bmxlc3MgeW91IGNhbiBjb25maXJtIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhl IGNvbnRlbnQgaXMgc2FmZS4NCj4NCj4NCj4NCj4gVGhhbmtzIGZvciB0aGUgZWRpdHMgeW91IG1h ZGUsIEFubmFiZWxsZS4gIERvIHdlIGFsc28gd2FudCB0byBkZWxldGUgdGhpcyB0ZXh0IGZyb20g UG9sbCBiZWZvcmUgcHVibGlzaGluZywgcGVyIEJlbidzIHN1Z2dlc3Rpb24/DQo+DQo+ICAgICAg IDx0Pg0KPiAgICAgICAgIEF1dGhvcml6YXRpb24gZm9yIHRoZSBlbGlnaWJpbGl0eSB0byBwcm92 aWRlIGFjdGlvbmFibGUgU0VUcyBjYW4gYmUgZGV0ZXJtaW5lZCBieQ0KPiAgICAgICAgIHVzaW5n IHRoZSBpZGVudGl0eSBvZiB0aGUgU0VUIElzc3VlciwNCj4gICAgICAgICB2YWxpZGF0aW5nIHRo ZSBwb2xsaW5nIGVuZHBvaW50IFVSTCwgcGVyaGFwcyB1c2luZyBUTFMsDQo+ICAgICAgICAgb3Ig dmlhIG90aGVyIGVtcGxveWVkIGF1dGhlbnRpY2F0aW9uIG1ldGhvZHMuDQo+ICAgICAgICAgQW1v bmcgb3RoZXIgYmVuZWZpdHMsIGF1dGhlbnRpY2F0aW9uIGNhbiBoZWxwIHByZXZlbnQgZGVuaWFs LW9mLXNlcnZpY2UgYXR0YWNrcy4NCj4gICAgICAgICBCZWNhdXNlIFNFVHMgYXJlDQo+ICAgICAg IG5vdCBjb21tYW5kcywgU0VUIFJlY2lwaWVudHMgYXJlIGZyZWUgdG8gaWdub3JlIFNFVHMgdGhh dA0KPiAgICAgICBhcmUgbm90IG9mIGludGVyZXN0IGFmdGVyIGFja25vd2xlZGdpbmcgdGhlaXIg cmVjZWlwdC48L3Q+DQo+DQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlr ZQ0KPg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBNaWtlIEpvbmVzDQo+ IFNlbnQ6IEZyaWRheSwgQXByaWwgMjQsIDIwMjAgNzoxMiBQTQ0KPiBUbzogJ0JlbmphbWluIEth ZHVrJyA8a2FkdWtAbWl0LmVkdT47IHJpY2hhbm5hQGFtYXpvbi5jb20NCj4gQ2M6IGRyYWZ0LWll dGYtc2VjZXZlbnQtaHR0cC1wb2xsLmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0Zi5vcmcNCj4g U3ViamVjdDogUmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtc2VjZXZlbnQt aHR0cC1wb2xsLTA2DQo+DQo+IFRoYW5rcyBCZW4uICBJIHRoaW5rIHRoZSBERE9TIHRleHQgY2Fu IGJlIGRyb3BwZWQgZnJvbSBQb2xsLiAgSSdsbCBkbyB0aGF0IGVhcmx5IG5leHQgd2Vlay4NCj4N Cj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGFua3MgYWdhaW4sDQo+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KPg0KPiAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KPiBGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT4NCj4gU2Vu dDogRnJpZGF5LCBBcHJpbCAyNCwgMjAyMCA1OjUzIFBNDQo+IFRvOiBNaWtlIEpvbmVzIDxNaWNo YWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+DQo+IENjOiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAt cG9sbC5hbGxAaWV0Zi5vcmc7IGlkLWV2ZW50QGlldGYub3JnDQo+IFN1YmplY3Q6IFtFWFRFUk5B TF0gUmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1w b2xsLTA2DQo+DQo+IEhpIE1pa2UsDQo+DQo+IFRoYW5rcyBmb3IgdGhlIHVwZGF0ZXMsIGFuZCBJ IGNvbnRpbnVlIHRvIGJlIHNvcnJ5IGZvciB0aGUgbG9uZyByZXNwb25zZSB0aW1lcy4NCj4NCj4g UG9sbCBpcyBpbiBxdWl0ZSBnb29kIHNoYXBlICh3ZWxsLCBJIGd1ZXNzIGl0J3MgbW9zdGx5IGp1 c3QgdGhhdCAtcHVzaCBpcyB0YWtpbmcgdGhlIGJydW50IG9mIHRoZSB3b3JrIGZvciBoYXJtb25p emluZyB0aGUgZGlmZmVyZW5jZXMgaW4gdGV4dCk7IGp1c3QgYSBjb3VwbGUgbW9yZSBjaGFuZ2Vz IHRvIG1ha2UgYW5kIHdlIHNob3VsZCBiZSBnb29kIHRvIHN0YXJ0IHRoZSBJRVRGIExDcyBpbiBw YXJhbGxlbC4gIEknbGwgYWdhaW4gdHJpbSB0aGUgcmVzb2x2ZWQgYml0cy4NCj4NCj4gSW4gU2Vj dGlvbiAzIHdlIGhhdmUgYSBub3RlIGFib3V0IERvUyBwcm90ZWN0aW9ucyBlbWJlZGRlZCBpbiBh IGxhcmdlciBibG9jayBvZiB0ZXh0Og0KPg0KPiAgICBBdXRob3JpemF0aW9uIGZvciB0aGUgZWxp Z2liaWxpdHkgdG8gcHJvdmlkZSBhY3Rpb25hYmxlIFNFVHMgY2FuIGJlDQo+ICAgIGRldGVybWlu ZWQgYnkgdXNpbmcgdGhlIGlkZW50aXR5IG9mIHRoZSBTRVQgSXNzdWVyLCB2YWxpZGF0aW5nIHRo ZQ0KPiAgICBwb2xsaW5nIGVuZHBvaW50IFVSTCwgcGVyaGFwcyB1c2luZyBUTFMsIG9yIHZpYSBv dGhlciBlbXBsb3llZA0KPiAgICBhdXRoZW50aWNhdGlvbiBtZXRob2RzLiAgQW1vbmcgb3RoZXIg YmVuZWZpdHMsIGF1dGhlbnRpY2F0aW9uIGNhbg0KPiAgICBoZWxwIHByZXZlbnQgZGVuaWFsLW9m LXNlcnZpY2UgYXR0YWNrcy4gIEJlY2F1c2UgU0VUcyBhcmUgbm90DQo+ICAgIGNvbW1hbmRzLCBT RVQgUmVjaXBpZW50cyBhcmUgZnJlZSB0byBpZ25vcmUgU0VUcyB0aGF0IGFyZSBub3Qgb2YNCj4g ICAgaW50ZXJlc3QgYWZ0ZXIgYWNrbm93bGVkZ2luZyB0aGVpciByZWNlaXB0Lg0KPg0KPiBJIGFt IG5vdCAxMDAlIHN1cmUsIGJ1dCBJIHRoaW5rIHRoaXMgbWF5IGhhdmUgYmVlbiB0ZXh0IHRoYXQg b3JpZ2luYXRlcyBiZWZvcmUgdGhlIHNwbGl0IG9mIGRvY3VtZW50cywgYW5kIGluIHB1c2ggZ290 IGV4dHJhY3RlZCBhbmQgbWFkZSBpbnRvIGEgc2VwYXJhdGUgc2VjdGlvbi4gIERvZXMgaXQgc3Rp bGwgbWFrZSBzZW5zZSBoZXJlPyAgVGhlIERvUyByaXNrIHdvdWxkIHR5cGljYWxseSBiZSBmb3Ig YSBzZXJ2ZXIgZ2V0dGluZyBsb3RzIG9mIGluYm91bmQgY29ubmVjdGlvbnMsIGJ1dCB0aGVyZSdz IG5vdCBxdWl0ZSBhcyBjbGVhciBhIGNhc2UgZm9yIChjbGllbnQpIGF1dGhlbnRpY2F0aW9uIGhl bHBpbmcgd2l0aCB0aGF0IGZvciBwb2xsLCBzaW5jZSB0aGUgY2xpZW50IGlzIG5vdCBzZW5kaW5n IGh1Z2UgYW1vdW50cyBvZiBzdHVmZiB0aGF0IHdvdWxkIG5lZWQgdG8gYmUgZHJvcHBlZC4gIEFt IEkgbWlzdW5kZXJzdGFuZGluZyB0aGUgaW50ZW50IGhlcmUsIG9yIHNob3VsZCB0aGUgc2VudGVu Y2UganVzdCBnZXQgZHJvcHBlZD8NCj4NCj4gT24gRnJpLCBGZWIgMDcsIDIwMjAgYXQgMDU6MTg6 MDRQTSArMDAwMCwgTWlrZSBKb25lcyB3cm90ZToNCj4gPiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0 dHAtcG9sbC0wNzxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1zZWNldmVu dC1odHRwLXBvbGwtMDc+IHdhcyBwdWJsaXNoZWQgdG8gYWRkcmVzcyB0aGVzZSByZXZpZXcgY29t bWVudHMuICAoLTA4PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNlY2V2 ZW50LWh0dHAtcG9sbC0wOD4gYWRkcmVzc2VkIGFkZGl0aW9uYWwgZWRpdG9yaWFsIG5pdHMuKSAg RGVzY3JpcHRpb25zIG9mIHRoZSBjaGFuZ2VzIG1hZGUgZm9yIHRoZXNlIGNvbW1lbnRzIGFyZSBp bmxpbmUsIHByZWZpeGVkIGJ5ICJNaWtlPiIuDQo+ID4NCj4gPg0KPiA+DQo+ID4gLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBJZC1ldmVudCA8aWQtZXZlbnQtYm91bmNlc0Bp ZXRmLm9yZz4gT24gQmVoYWxmIE9mIEJlbmphbWluIEthZHVrDQo+ID4gU2VudDogVHVlc2RheSwg RGVjZW1iZXIgMTAsIDIwMTkgNDozNyBQTQ0KPiA+IFRvOiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0 dHAtcG9sbC5hbGxAaWV0Zi5vcmcNCj4gPiBDYzogaWQtZXZlbnRAaWV0Zi5vcmcNCj4gPiBTdWJq ZWN0OiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcG9s bC0wNg0KPiA+DQo+ID4NCj4gPiBTZWN0aW9uIDMNCj4gPg0KPiA+DQo+ID4gU2luY2UgcG9sbCBo YXMgdGhlIFRMUyBzZXJ2ZXIgYXMgdGhlIFNFVCBUcmFuc21pdHRlciwgd2UgY291bGQgcG90ZW50 aWFsbHkgcHVsbCBpbiBSRkMgNjEyNSBhbmQgdGFsayBhYm91dCB2YWxpZGF0aW5nIEROUy1JRHMg dG8gYXV0aGVudGljYXRlIHRoZSBUcmFuc21pdHRlci4gIEdpdmVuIHRoYXQgdGhlIG5hbWUgdG8g YmUgYXV0aGVudGljYXRlZCB3b3VsZCBiZSBwYXJ0IG9mIHRoZSBpbmZvcm1hdGlvbiBjb252ZXll ZCBvdXQtb2YtYmFuZCwgdGhvdWdoLCBpdCdzIG5vdCBlbnRpcmVseSBjbGVhciBob3cgbXVjaCB2 YWx1ZSB0aGVyZSB3b3VsZCBiZSBpbiBkb2luZyBzby4NCj4gPg0KPiA+DQo+ID4gTWlrZT4gQXMg aW4gUHVzaCwgdGhpcyBzZWN0aW9uIHdhcyBmb3JtZXJseSBwb29ybHkgd29yZGVkLCBhbmQgaGFz IGxhcmdlbHkgYmVlbiByZXdyaXR0ZW4uDQo+DQo+IEFzIGZvciAtcHVzaCwgSSdkIHJlYWxseSBs aWtlIHRvIGJlIGFibGUgdG8gc2F5IHNvbWV0aGluZyBhYm91dCB0aGUgb3RoZXIgaGFsZiBvZiB0 aGUgbmFtZSBjb21wYXJpc29uLiAgSW4gdGhpcyBjYXNlIHdvdWxkIGl0IGJlIHNvbWV0aGluZyBs aWtlICJkaXNjb3Zlcnkgb2YgU0VUIFRyYW5zbWl0dGVycyAoYW5kIHRoZSBuYW1lcyB1c2VkIHRv IGF1dGhlbnRpY2F0ZSB0aGVtKSBpcyBvdXQgb2Ygc2NvcGUgZm9yIHRoaXMgZG9jdW1lbnQiPw0K Pg0KPiBUaGFua3MgZm9yIHRoZSB1cGRhdGVzLA0KPg0KPiBCZW4NCj4NCg0K From nobody Wed Apr 29 16:00:37 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38DFB3A0A40; Wed, 29 Apr 2020 16:00:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lG29mkGZuRQj; Wed, 29 Apr 2020 16:00:33 -0700 (PDT) Received: from smtp-fw-9102.amazon.com (smtp-fw-9102.amazon.com [207.171.184.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4FE83A0A18; Wed, 29 Apr 2020 16:00:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1588201234; x=1619737234; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=SKALzaSV0THo3hDUIREruX2xXddSP9tW0Qtqcer8M/k=; b=l8EgeVfAheuOCH+626CLFMl2dGe41HxbTK7k5MZnrJ97kBoJKM6I1X/c NCXPsb4oU9ZIQp2PO6WlTr4nUfWy3D334Pid5LEb+xdwcLDYxSaCg1jK5 /YMB62y3meAIK8RupCGJRZSkYtO/ogDQ3GxNwS23ls/j5tJHUpRUCgadi o=; IronPort-SDR: 3ZChDozJL8Iy04n8Dt13VLnEfjdj4as/rJL8+zNYMKylOjbiINOTkZ6WBxe4UQCF4kznKIc3nd 8LMdgSOf2BTA== X-IronPort-AV: E=Sophos;i="5.73,333,1583193600"; d="scan'208";a="40330937" Thread-Topic: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-2b-4ff6265a.us-west-2.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-9102.sea19.amazon.com with ESMTP; 29 Apr 2020 23:00:34 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx4-ws-svc-p6-lb7-vlan3.pdx.amazon.com [10.170.41.166]) by email-inbound-relay-2b-4ff6265a.us-west-2.amazon.com (Postfix) with ESMTPS id DF3F9A1895; Wed, 29 Apr 2020 23:00:32 +0000 (UTC) Received: from EX13D11UWC001.ant.amazon.com (10.43.162.151) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 29 Apr 2020 23:00:32 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC001.ant.amazon.com (10.43.162.151) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 29 Apr 2020 23:00:32 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1497.006; Wed, 29 Apr 2020 23:00:32 +0000 From: "Richard Backman, Annabelle" To: Mike Jones , Benjamin Kaduk CC: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Thread-Index: AdYdvj9GODjwbpyaR1unVK/WNvqD+AAgDToAAA69H4D//4vMgA== Date: Wed, 29 Apr 2020 23:00:32 +0000 Message-ID: <14B055A2-A54A-4C21-A71C-125C3D508BBD@amazon.com> References: <87C847B1-937A-4579-8B90-09F879A4DC05@amazon.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.21.0.200113 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.162.200] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 23:00:36 -0000 UHVsbCByZXF1ZXN0IHN1Ym1pdHRlZDogaHR0cHM6Ly9naXRodWIuY29tL2luZGVwZW5kZW50aWQv SWRlbnRpdHktRXZlbnRzL3B1bGwvMzMNCg0K4oCTDQpBbm5hYmVsbGUgQmFja21hbiAoc2hlL2hl cikNCkFXUyBJZGVudGl0eQ0KaHR0cHM6Ly9hd3MuYW1hem9uLmNvbS9pZGVudGl0eS8NCiANCg0K 77u/T24gNC8yOS8yMCwgMzo1NiBQTSwgIk1pa2UgSm9uZXMiIDxNaWNoYWVsLkpvbmVzQG1pY3Jv c29mdC5jb20+IHdyb3RlOg0KDQpDQVVUSU9OOiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBv dXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0 dGFjaG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZpcm0gdGhlIHNlbmRlciBhbmQga25vdyB0aGUg Y29udGVudCBpcyBzYWZlLg0KDQoNCg0KQ29vbCAtIHRoYW5rcy4NCg0KLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS0NCkZyb206IFJpY2hhcmQgQmFja21hbiwgQW5uYWJlbGxlIDxyaWNoYW5uYUBh bWF6b24uY29tPg0KU2VudDogV2VkbmVzZGF5LCBBcHJpbCAyOSwgMjAyMCAzOjU0IFBNDQpUbzog TWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPjsgQmVuamFtaW4gS2FkdWsg PGthZHVrQG1pdC5lZHU+DQpDYzogZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwuYWxsQGll dGYub3JnOyBpZC1ldmVudEBpZXRmLm9yZw0KU3ViamVjdDogW0VYVEVSTkFMXSBSZTogW0lkLWV2 ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwtMDYNCg0KU29y cnksIHdhcyB3YWl0aW5nIGZvciBjb25maXJtYXRpb24gdGhhdCB3ZSdyZSByZW1vdmluZyB0aGUg c2VudGVuY2UgYW5kIG5vdCB0aGUgcGFyYWdyYXBoLiBZZXMsIEknbGwgcmVtb3ZlIHRoZSBzZW50 ZW5jZSBhbmQgZG8gYW5vdGhlciBwdWxsIHJlcXVlc3QuIE9uY2UgeW91IGNvbmZpcm0gdmlhIHB1 bGwgcmVxdWVzdCBhcHByb3ZhbCBJJ2xsIHB1Ymxpc2ggdGhlIGRyYWZ0cy4NCg0K4oCTDQpBbm5h YmVsbGUgQmFja21hbiAoc2hlL2hlcikNCkFXUyBJZGVudGl0eQ0KaHR0cHM6Ly9hd3MuYW1hem9u LmNvbS9pZGVudGl0eS8NCg0KDQpPbiA0LzI4LzIwLCA1OjM3IFBNLCAiTWlrZSBKb25lcyIgPE1p Y2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4gd3JvdGU6DQoNCkNBVVRJT046IFRoaXMgZW1haWwg b3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNr IGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSBjYW4gY29uZmlybSB0aGUgc2Vu ZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQoNCg0KDQpBbm5hYmVsbGUsIGRvIHlv dSB3YW50IHRvIHJlbW92ZSB0aGUgRERPUyBzZW50ZW5jZSBvciBkbyB5b3Ugd2FudCBtZSB0bz8g IEFmdGVyIHRoYXQsIGFyZSB3ZSByZWFkeSB0byBwdWJsaXNoIGJvdGggZHJhZnRzPw0KDQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcywNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgLS0gTWlrZQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTog QmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+DQpTZW50OiBNb25kYXksIEFwcmlsIDI3LCAy MDIwIDQ6NTMgUE0NClRvOiBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSA8cmljaGFubmFAYW1h em9uLmNvbT4NCkNjOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+OyBk cmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcG9sbC5hbGxAaWV0Zi5vcmc7IGlkLWV2ZW50QGlldGYu b3JnDQpTdWJqZWN0OiBSZTogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1zZWNl dmVudC1odHRwLXBvbGwtMDYNCg0KSnVzdCB0aGUgc2VudGVuY2UgYWJvdXQgRG9TIGF0dGFja3Ms IG5vdCB0aGUgd2hvbGUgcGFyYWdyYXBoLCByaWdodD8NCg0KLUJlbg0KDQpPbiBNb24sIEFwciAy NywgMjAyMCBhdCAxMTo1MjowM1BNICswMDAwLCBSaWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSB3 cm90ZToNCj4gWWVzLCB3aWxsIHJlbW92ZSB0aGF0Lg0KPg0KPiDigJMNCj4gQW5uYWJlbGxlIEJh Y2ttYW4gKHNoZS9oZXIpDQo+IEFXUyBJZGVudGl0eQ0KPiBodHRwczovL2F3cy5hbWF6b24uY29t L2lkZW50aXR5Lw0KPg0KPg0KPiBPbiA0LzI3LzIwLCA0OjUxIFBNLCAiTWlrZSBKb25lcyIgPE1p Y2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4gd3JvdGU6DQo+DQo+IENBVVRJT046IFRoaXMgZW1h aWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNs aWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSBjYW4gY29uZmlybSB0aGUg c2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQo+DQo+DQo+DQo+IFRoYW5rcyBm b3IgdGhlIGVkaXRzIHlvdSBtYWRlLCBBbm5hYmVsbGUuICBEbyB3ZSBhbHNvIHdhbnQgdG8gZGVs ZXRlIHRoaXMgdGV4dCBmcm9tIFBvbGwgYmVmb3JlIHB1Ymxpc2hpbmcsIHBlciBCZW4ncyBzdWdn ZXN0aW9uPw0KPg0KPiAgICAgICA8dD4NCj4gICAgICAgICBBdXRob3JpemF0aW9uIGZvciB0aGUg ZWxpZ2liaWxpdHkgdG8gcHJvdmlkZSBhY3Rpb25hYmxlIFNFVHMgY2FuIGJlIGRldGVybWluZWQg YnkNCj4gICAgICAgICB1c2luZyB0aGUgaWRlbnRpdHkgb2YgdGhlIFNFVCBJc3N1ZXIsDQo+ICAg ICAgICAgdmFsaWRhdGluZyB0aGUgcG9sbGluZyBlbmRwb2ludCBVUkwsIHBlcmhhcHMgdXNpbmcg VExTLA0KPiAgICAgICAgIG9yIHZpYSBvdGhlciBlbXBsb3llZCBhdXRoZW50aWNhdGlvbiBtZXRo b2RzLg0KPiAgICAgICAgIEFtb25nIG90aGVyIGJlbmVmaXRzLCBhdXRoZW50aWNhdGlvbiBjYW4g aGVscCBwcmV2ZW50IGRlbmlhbC1vZi1zZXJ2aWNlIGF0dGFja3MuDQo+ICAgICAgICAgQmVjYXVz ZSBTRVRzIGFyZQ0KPiAgICAgICBub3QgY29tbWFuZHMsIFNFVCBSZWNpcGllbnRzIGFyZSBmcmVl IHRvIGlnbm9yZSBTRVRzIHRoYXQNCj4gICAgICAgYXJlIG5vdCBvZiBpbnRlcmVzdCBhZnRlciBh Y2tub3dsZWRnaW5nIHRoZWlyIHJlY2VpcHQuPC90Pg0KPg0KPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIC0tIE1pa2UNCj4NCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4g RnJvbTogTWlrZSBKb25lcw0KPiBTZW50OiBGcmlkYXksIEFwcmlsIDI0LCAyMDIwIDc6MTIgUE0N Cj4gVG86ICdCZW5qYW1pbiBLYWR1aycgPGthZHVrQG1pdC5lZHU+OyByaWNoYW5uYUBhbWF6b24u Y29tDQo+IENjOiBkcmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcG9sbC5hbGxAaWV0Zi5vcmc7IGlk LWV2ZW50QGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBk cmFmdC1pZXRmLXNlY2V2ZW50LWh0dHAtcG9sbC0wNg0KPg0KPiBUaGFua3MgQmVuLiAgSSB0aGlu ayB0aGUgRERPUyB0ZXh0IGNhbiBiZSBkcm9wcGVkIGZyb20gUG9sbC4gIEknbGwgZG8gdGhhdCBl YXJseSBuZXh0IHdlZWsuDQo+DQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVGhh bmtzIGFnYWluLA0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCj4N Cj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQmVuamFtaW4gS2FkdWsgPGth ZHVrQG1pdC5lZHU+DQo+IFNlbnQ6IEZyaWRheSwgQXByaWwgMjQsIDIwMjAgNTo1MyBQTQ0KPiBU bzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPg0KPiBDYzogZHJhZnQt aWV0Zi1zZWNldmVudC1odHRwLXBvbGwuYWxsQGlldGYub3JnOyBpZC1ldmVudEBpZXRmLm9yZw0K PiBTdWJqZWN0OiBbRVhURVJOQUxdIFJlOiBbSWQtZXZlbnRdIEFEIHJldmlldyBvZiBkcmFmdC1p ZXRmLXNlY2V2ZW50LWh0dHAtcG9sbC0wNg0KPg0KPiBIaSBNaWtlLA0KPg0KPiBUaGFua3MgZm9y IHRoZSB1cGRhdGVzLCBhbmQgSSBjb250aW51ZSB0byBiZSBzb3JyeSBmb3IgdGhlIGxvbmcgcmVz cG9uc2UgdGltZXMuDQo+DQo+IFBvbGwgaXMgaW4gcXVpdGUgZ29vZCBzaGFwZSAod2VsbCwgSSBn dWVzcyBpdCdzIG1vc3RseSBqdXN0IHRoYXQgLXB1c2ggaXMgdGFraW5nIHRoZSBicnVudCBvZiB0 aGUgd29yayBmb3IgaGFybW9uaXppbmcgdGhlIGRpZmZlcmVuY2VzIGluIHRleHQpOyBqdXN0IGEg Y291cGxlIG1vcmUgY2hhbmdlcyB0byBtYWtlIGFuZCB3ZSBzaG91bGQgYmUgZ29vZCB0byBzdGFy dCB0aGUgSUVURiBMQ3MgaW4gcGFyYWxsZWwuICBJJ2xsIGFnYWluIHRyaW0gdGhlIHJlc29sdmVk IGJpdHMuDQo+DQo+IEluIFNlY3Rpb24gMyB3ZSBoYXZlIGEgbm90ZSBhYm91dCBEb1MgcHJvdGVj dGlvbnMgZW1iZWRkZWQgaW4gYSBsYXJnZXIgYmxvY2sgb2YgdGV4dDoNCj4NCj4gICAgQXV0aG9y aXphdGlvbiBmb3IgdGhlIGVsaWdpYmlsaXR5IHRvIHByb3ZpZGUgYWN0aW9uYWJsZSBTRVRzIGNh biBiZQ0KPiAgICBkZXRlcm1pbmVkIGJ5IHVzaW5nIHRoZSBpZGVudGl0eSBvZiB0aGUgU0VUIElz c3VlciwgdmFsaWRhdGluZyB0aGUNCj4gICAgcG9sbGluZyBlbmRwb2ludCBVUkwsIHBlcmhhcHMg dXNpbmcgVExTLCBvciB2aWEgb3RoZXIgZW1wbG95ZWQNCj4gICAgYXV0aGVudGljYXRpb24gbWV0 aG9kcy4gIEFtb25nIG90aGVyIGJlbmVmaXRzLCBhdXRoZW50aWNhdGlvbiBjYW4NCj4gICAgaGVs cCBwcmV2ZW50IGRlbmlhbC1vZi1zZXJ2aWNlIGF0dGFja3MuICBCZWNhdXNlIFNFVHMgYXJlIG5v dA0KPiAgICBjb21tYW5kcywgU0VUIFJlY2lwaWVudHMgYXJlIGZyZWUgdG8gaWdub3JlIFNFVHMg dGhhdCBhcmUgbm90IG9mDQo+ICAgIGludGVyZXN0IGFmdGVyIGFja25vd2xlZGdpbmcgdGhlaXIg cmVjZWlwdC4NCj4NCj4gSSBhbSBub3QgMTAwJSBzdXJlLCBidXQgSSB0aGluayB0aGlzIG1heSBo YXZlIGJlZW4gdGV4dCB0aGF0IG9yaWdpbmF0ZXMgYmVmb3JlIHRoZSBzcGxpdCBvZiBkb2N1bWVu dHMsIGFuZCBpbiBwdXNoIGdvdCBleHRyYWN0ZWQgYW5kIG1hZGUgaW50byBhIHNlcGFyYXRlIHNl Y3Rpb24uICBEb2VzIGl0IHN0aWxsIG1ha2Ugc2Vuc2UgaGVyZT8gIFRoZSBEb1MgcmlzayB3b3Vs ZCB0eXBpY2FsbHkgYmUgZm9yIGEgc2VydmVyIGdldHRpbmcgbG90cyBvZiBpbmJvdW5kIGNvbm5l Y3Rpb25zLCBidXQgdGhlcmUncyBub3QgcXVpdGUgYXMgY2xlYXIgYSBjYXNlIGZvciAoY2xpZW50 KSBhdXRoZW50aWNhdGlvbiBoZWxwaW5nIHdpdGggdGhhdCBmb3IgcG9sbCwgc2luY2UgdGhlIGNs aWVudCBpcyBub3Qgc2VuZGluZyBodWdlIGFtb3VudHMgb2Ygc3R1ZmYgdGhhdCB3b3VsZCBuZWVk IHRvIGJlIGRyb3BwZWQuICBBbSBJIG1pc3VuZGVyc3RhbmRpbmcgdGhlIGludGVudCBoZXJlLCBv ciBzaG91bGQgdGhlIHNlbnRlbmNlIGp1c3QgZ2V0IGRyb3BwZWQ/DQo+DQo+IE9uIEZyaSwgRmVi IDA3LCAyMDIwIGF0IDA1OjE4OjA0UE0gKzAwMDAsIE1pa2UgSm9uZXMgd3JvdGU6DQo+ID4gZHJh ZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwtMDc8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA3PiB3YXMgcHVibGlzaGVkIHRvIGFkZHJl c3MgdGhlc2UgcmV2aWV3IGNvbW1lbnRzLiAgKC0wODxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwtMDg+IGFkZHJlc3NlZCBhZGRpdGlvbmFs IGVkaXRvcmlhbCBuaXRzLikgIERlc2NyaXB0aW9ucyBvZiB0aGUgY2hhbmdlcyBtYWRlIGZvciB0 aGVzZSBjb21tZW50cyBhcmUgaW5saW5lLCBwcmVmaXhlZCBieSAiTWlrZT4iLg0KPiA+DQo+ID4N Cj4gPg0KPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogSWQtZXZlbnQg PGlkLWV2ZW50LWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBCZW5qYW1pbiBLYWR1aw0K PiA+IFNlbnQ6IFR1ZXNkYXksIERlY2VtYmVyIDEwLCAyMDE5IDQ6MzcgUE0NCj4gPiBUbzogZHJh ZnQtaWV0Zi1zZWNldmVudC1odHRwLXBvbGwuYWxsQGlldGYub3JnDQo+ID4gQ2M6IGlkLWV2ZW50 QGlldGYub3JnDQo+ID4gU3ViamVjdDogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0 Zi1zZWNldmVudC1odHRwLXBvbGwtMDYNCj4gPg0KPiA+DQo+ID4gU2VjdGlvbiAzDQo+ID4NCj4g Pg0KPiA+IFNpbmNlIHBvbGwgaGFzIHRoZSBUTFMgc2VydmVyIGFzIHRoZSBTRVQgVHJhbnNtaXR0 ZXIsIHdlIGNvdWxkIHBvdGVudGlhbGx5IHB1bGwgaW4gUkZDIDYxMjUgYW5kIHRhbGsgYWJvdXQg dmFsaWRhdGluZyBETlMtSURzIHRvIGF1dGhlbnRpY2F0ZSB0aGUgVHJhbnNtaXR0ZXIuICBHaXZl biB0aGF0IHRoZSBuYW1lIHRvIGJlIGF1dGhlbnRpY2F0ZWQgd291bGQgYmUgcGFydCBvZiB0aGUg aW5mb3JtYXRpb24gY29udmV5ZWQgb3V0LW9mLWJhbmQsIHRob3VnaCwgaXQncyBub3QgZW50aXJl bHkgY2xlYXIgaG93IG11Y2ggdmFsdWUgdGhlcmUgd291bGQgYmUgaW4gZG9pbmcgc28uDQo+ID4N Cj4gPg0KPiA+IE1pa2U+IEFzIGluIFB1c2gsIHRoaXMgc2VjdGlvbiB3YXMgZm9ybWVybHkgcG9v cmx5IHdvcmRlZCwgYW5kIGhhcyBsYXJnZWx5IGJlZW4gcmV3cml0dGVuLg0KPg0KPiBBcyBmb3Ig LXB1c2gsIEknZCByZWFsbHkgbGlrZSB0byBiZSBhYmxlIHRvIHNheSBzb21ldGhpbmcgYWJvdXQg dGhlIG90aGVyIGhhbGYgb2YgdGhlIG5hbWUgY29tcGFyaXNvbi4gIEluIHRoaXMgY2FzZSB3b3Vs ZCBpdCBiZSBzb21ldGhpbmcgbGlrZSAiZGlzY292ZXJ5IG9mIFNFVCBUcmFuc21pdHRlcnMgKGFu ZCB0aGUgbmFtZXMgdXNlZCB0byBhdXRoZW50aWNhdGUgdGhlbSkgaXMgb3V0IG9mIHNjb3BlIGZv ciB0aGlzIGRvY3VtZW50Ij8NCj4NCj4gVGhhbmtzIGZvciB0aGUgdXBkYXRlcywNCj4NCj4gQmVu DQo+DQoNCg0K From nobody Wed Apr 29 16:07:21 2020 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 716DF3A097C; Wed, 29 Apr 2020 16:07:18 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: id-event@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.128.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: id-event@ietf.org Message-ID: <158820163840.8007.4524796188184013830@ietfa.amsl.com> Date: Wed, 29 Apr 2020 16:07:18 -0700 Archived-At: Subject: [Id-event] I-D Action: draft-ietf-secevent-http-poll-09.txt X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 23:07:19 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Events WG of the IETF. Title : Poll-Based Security Event Token (SET) Delivery Using HTTP Authors : Annabelle Backman Michael B. Jones Marius Scurtescu Morteza Ansari Anthony Nadalin Filename : draft-ietf-secevent-http-poll-09.txt Pages : 20 Date : 2020-04-29 Abstract: This specification defines how a series of Security Event Tokens (SETs) may be delivered to an intended recipient using HTTP POST over TLS initiated as a poll by the recipient. The specification also defines how delivery can be assured, subject to the SET Recipient's need for assurance. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-secevent-http-poll/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-secevent-http-poll-09 https://datatracker.ietf.org/doc/html/draft-ietf-secevent-http-poll-09 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-secevent-http-poll-09 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Apr 29 16:12:26 2020 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D18473A098B; Wed, 29 Apr 2020 16:12:06 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: id-event@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.128.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: id-event@ietf.org Message-ID: <158820192675.7632.16465133255440701418@ietfa.amsl.com> Date: Wed, 29 Apr 2020 16:12:06 -0700 Archived-At: Subject: [Id-event] I-D Action: draft-ietf-secevent-http-push-10.txt X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 23:12:08 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Events WG of the IETF. Title : Push-Based Security Event Token (SET) Delivery Using HTTP Authors : Annabelle Backman Michael B. Jones Marius Scurtescu Morteza Ansari Anthony Nadalin Filename : draft-ietf-secevent-http-push-10.txt Pages : 21 Date : 2020-04-29 Abstract: This specification defines how a Security Event Token (SET) may be delivered to an intended recipient using HTTP POST. The SET is transmitted in the body of an HTTP POST request to an endpoint operated by the recipient, and the recipient indicates successful or failed transmission via the HTTP response. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-secevent-http-push-10 https://datatracker.ietf.org/doc/html/draft-ietf-secevent-http-push-10 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-secevent-http-push-10 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Apr 29 16:14:22 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 939123A09B1; Wed, 29 Apr 2020 16:14:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fj76M1wX-OAl; Wed, 29 Apr 2020 16:14:18 -0700 (PDT) Received: from smtp-fw-9101.amazon.com (smtp-fw-9101.amazon.com [207.171.184.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73CAF3A0A14; Wed, 29 Apr 2020 16:13:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1588201999; x=1619737999; h=from:to:cc:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version:subject; bh=+mnRmQR2cozyk6yWdwQwbwEAdq8qKwcDgR3kr6GardI=; b=OrokFMFHzGxO+cVeoLeov+w4yl5QaBM3/EAb25trQSAWUftkNVGJoI6a x+LeFgMddtKxjyMsf02FClCQCK8lo9I01JBTKZtlGHfoZf4gdvtESMxx5 hrxHFq0aO/c+kdK9sdapTrCkm7Ce7GnvwESXmsAboJ4DmvCcOpy54cxkO c=; IronPort-SDR: 7C+2L0muwqCoIjytXJOKrp771NfnYXIaqtyXtfnneUwFUKsj0q37OX7jBOCo836Xg9ouxwayS9 qqgHgIWN952Q== X-IronPort-AV: E=Sophos;i="5.73,333,1583193600"; d="scan'208";a="32006164" Thread-Topic: [Id-event] AD review of draft-ietf-secevent-http-poll-06 Received: from sea32-co-svc-lb4-vlan3.sea.corp.amazon.com (HELO email-inbound-relay-1d-98acfc19.us-east-1.amazon.com) ([10.47.23.38]) by smtp-border-fw-out-9101.sea19.amazon.com with ESMTP; 29 Apr 2020 23:13:17 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1d-98acfc19.us-east-1.amazon.com (Postfix) with ESMTPS id 8FDCFA2131; Wed, 29 Apr 2020 23:13:16 +0000 (UTC) Received: from EX13D11UWC003.ant.amazon.com (10.43.162.162) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 29 Apr 2020 23:13:16 +0000 Received: from EX13D11UWC004.ant.amazon.com (10.43.162.101) by EX13D11UWC003.ant.amazon.com (10.43.162.162) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 29 Apr 2020 23:13:15 +0000 Received: from EX13D11UWC004.ant.amazon.com ([10.43.162.101]) by EX13D11UWC004.ant.amazon.com ([10.43.162.101]) with mapi id 15.00.1497.006; Wed, 29 Apr 2020 23:13:15 +0000 From: "Richard Backman, Annabelle" To: Mike Jones , Benjamin Kaduk CC: "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Thread-Index: AdYdvj9GODjwbpyaR1unVK/WNvqD+AAgDToAAA69H4D//4vMgIAAA4+A Date: Wed, 29 Apr 2020 23:13:15 +0000 Message-ID: <2183F624-3C9B-4956-9E4B-FC26A0C22AC4@amazon.com> References: <87C847B1-937A-4579-8B90-09F879A4DC05@amazon.com> <14B055A2-A54A-4C21-A71C-125C3D508BBD@amazon.com> In-Reply-To: <14B055A2-A54A-4C21-A71C-125C3D508BBD@amazon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.21.0.200113 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.160.90] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 23:14:21 -0000 RGVzcGl0ZSBzb21lIGZ1biB3aXRoIGdhdGV3YXkgdGltZW91dHMgb24gdGhlIGRhdGF0cmFja2Vy LCBib3RoIGRyYWZ0cyBhcmUgbm93IHB1Ymxpc2hlZC4gX18NCg0K4oCTDQpBbm5hYmVsbGUgQmFj a21hbiAoc2hlL2hlcikNCkFXUyBJZGVudGl0eQ0KaHR0cHM6Ly9hd3MuYW1hem9uLmNvbS9pZGVu dGl0eS8NCiANCg0K77u/T24gNC8yOS8yMCwgNDowMCBQTSwgIlJpY2hhcmQgQmFja21hbiwgQW5u YWJlbGxlIiA8cmljaGFubmFAYW1hem9uLmNvbT4gd3JvdGU6DQoNClB1bGwgcmVxdWVzdCBzdWJt aXR0ZWQ6IGh0dHBzOi8vZ2l0aHViLmNvbS9pbmRlcGVuZGVudGlkL0lkZW50aXR5LUV2ZW50cy9w dWxsLzMzDQoNCuKAkw0KQW5uYWJlbGxlIEJhY2ttYW4gKHNoZS9oZXIpDQpBV1MgSWRlbnRpdHkN Cmh0dHBzOi8vYXdzLmFtYXpvbi5jb20vaWRlbnRpdHkvDQogDQoNCk9uIDQvMjkvMjAsIDM6NTYg UE0sICJNaWtlIEpvbmVzIiA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPiB3cm90ZToNCg0K Q0FVVElPTjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5p emF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91 IGNhbiBjb25maXJtIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4NCg0K DQoNCkNvb2wgLSB0aGFua3MuDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBS aWNoYXJkIEJhY2ttYW4sIEFubmFiZWxsZSA8cmljaGFubmFAYW1hem9uLmNvbT4NClNlbnQ6IFdl ZG5lc2RheSwgQXByaWwgMjksIDIwMjAgMzo1NCBQTQ0KVG86IE1pa2UgSm9uZXMgPE1pY2hhZWwu Sm9uZXNAbWljcm9zb2Z0LmNvbT47IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pg0KQ2M6 IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0 Zi5vcmcNClN1YmplY3Q6IFtFWFRFUk5BTF0gUmU6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRy YWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA2DQoNClNvcnJ5LCB3YXMgd2FpdGluZyBmb3Ig Y29uZmlybWF0aW9uIHRoYXQgd2UncmUgcmVtb3ZpbmcgdGhlIHNlbnRlbmNlIGFuZCBub3QgdGhl IHBhcmFncmFwaC4gWWVzLCBJJ2xsIHJlbW92ZSB0aGUgc2VudGVuY2UgYW5kIGRvIGFub3RoZXIg cHVsbCByZXF1ZXN0LiBPbmNlIHlvdSBjb25maXJtIHZpYSBwdWxsIHJlcXVlc3QgYXBwcm92YWwg SSdsbCBwdWJsaXNoIHRoZSBkcmFmdHMuDQoNCuKAkw0KQW5uYWJlbGxlIEJhY2ttYW4gKHNoZS9o ZXIpDQpBV1MgSWRlbnRpdHkNCmh0dHBzOi8vYXdzLmFtYXpvbi5jb20vaWRlbnRpdHkvDQoNCg0K T24gNC8yOC8yMCwgNTozNyBQTSwgIk1pa2UgSm9uZXMiIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29m dC5jb20+IHdyb3RlOg0KDQpDQVVUSU9OOiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRz aWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFj aG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZpcm0gdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29u dGVudCBpcyBzYWZlLg0KDQoNCg0KQW5uYWJlbGxlLCBkbyB5b3Ugd2FudCB0byByZW1vdmUgdGhl IERET1Mgc2VudGVuY2Ugb3IgZG8geW91IHdhbnQgbWUgdG8/ICBBZnRlciB0aGF0LCBhcmUgd2Ug cmVhZHkgdG8gcHVibGlzaCBib3RoIGRyYWZ0cz8NCg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBUaGFua3MsDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UN Cg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEJlbmphbWluIEthZHVrIDxrYWR1 a0BtaXQuZWR1Pg0KU2VudDogTW9uZGF5LCBBcHJpbCAyNywgMjAyMCA0OjUzIFBNDQpUbzogUmlj aGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgPHJpY2hhbm5hQGFtYXpvbi5jb20+DQpDYzogTWlrZSBK b25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPjsgZHJhZnQtaWV0Zi1zZWNldmVudC1o dHRwLXBvbGwuYWxsQGlldGYub3JnOyBpZC1ldmVudEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtJ ZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xsLTA2DQoN Ckp1c3QgdGhlIHNlbnRlbmNlIGFib3V0IERvUyBhdHRhY2tzLCBub3QgdGhlIHdob2xlIHBhcmFn cmFwaCwgcmlnaHQ/DQoNCi1CZW4NCg0KT24gTW9uLCBBcHIgMjcsIDIwMjAgYXQgMTE6NTI6MDNQ TSArMDAwMCwgUmljaGFyZCBCYWNrbWFuLCBBbm5hYmVsbGUgd3JvdGU6DQo+IFllcywgd2lsbCBy ZW1vdmUgdGhhdC4NCj4NCj4g4oCTDQo+IEFubmFiZWxsZSBCYWNrbWFuIChzaGUvaGVyKQ0KPiBB V1MgSWRlbnRpdHkNCj4gaHR0cHM6Ly9hd3MuYW1hem9uLmNvbS9pZGVudGl0eS8NCj4NCj4NCj4g T24gNC8yNy8yMCwgNDo1MSBQTSwgIk1pa2UgSm9uZXMiIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29m dC5jb20+IHdyb3RlOg0KPg0KPiBDQVVUSU9OOiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBv dXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0 dGFjaG1lbnRzIHVubGVzcyB5b3UgY2FuIGNvbmZpcm0gdGhlIHNlbmRlciBhbmQga25vdyB0aGUg Y29udGVudCBpcyBzYWZlLg0KPg0KPg0KPg0KPiBUaGFua3MgZm9yIHRoZSBlZGl0cyB5b3UgbWFk ZSwgQW5uYWJlbGxlLiAgRG8gd2UgYWxzbyB3YW50IHRvIGRlbGV0ZSB0aGlzIHRleHQgZnJvbSBQ b2xsIGJlZm9yZSBwdWJsaXNoaW5nLCBwZXIgQmVuJ3Mgc3VnZ2VzdGlvbj8NCj4NCj4gICAgICAg PHQ+DQo+ICAgICAgICAgQXV0aG9yaXphdGlvbiBmb3IgdGhlIGVsaWdpYmlsaXR5IHRvIHByb3Zp ZGUgYWN0aW9uYWJsZSBTRVRzIGNhbiBiZSBkZXRlcm1pbmVkIGJ5DQo+ICAgICAgICAgdXNpbmcg dGhlIGlkZW50aXR5IG9mIHRoZSBTRVQgSXNzdWVyLA0KPiAgICAgICAgIHZhbGlkYXRpbmcgdGhl IHBvbGxpbmcgZW5kcG9pbnQgVVJMLCBwZXJoYXBzIHVzaW5nIFRMUywNCj4gICAgICAgICBvciB2 aWEgb3RoZXIgZW1wbG95ZWQgYXV0aGVudGljYXRpb24gbWV0aG9kcy4NCj4gICAgICAgICBBbW9u ZyBvdGhlciBiZW5lZml0cywgYXV0aGVudGljYXRpb24gY2FuIGhlbHAgcHJldmVudCBkZW5pYWwt b2Ytc2VydmljZSBhdHRhY2tzLg0KPiAgICAgICAgIEJlY2F1c2UgU0VUcyBhcmUNCj4gICAgICAg bm90IGNvbW1hbmRzLCBTRVQgUmVjaXBpZW50cyBhcmUgZnJlZSB0byBpZ25vcmUgU0VUcyB0aGF0 DQo+ICAgICAgIGFyZSBub3Qgb2YgaW50ZXJlc3QgYWZ0ZXIgYWNrbm93bGVkZ2luZyB0aGVpciBy ZWNlaXB0LjwvdD4NCj4NCj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtl DQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IE1pa2UgSm9uZXMNCj4g U2VudDogRnJpZGF5LCBBcHJpbCAyNCwgMjAyMCA3OjEyIFBNDQo+IFRvOiAnQmVuamFtaW4gS2Fk dWsnIDxrYWR1a0BtaXQuZWR1PjsgcmljaGFubmFAYW1hem9uLmNvbQ0KPiBDYzogZHJhZnQtaWV0 Zi1zZWNldmVudC1odHRwLXBvbGwuYWxsQGlldGYub3JnOyBpZC1ldmVudEBpZXRmLm9yZw0KPiBT dWJqZWN0OiBSZTogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1zZWNldmVudC1o dHRwLXBvbGwtMDYNCj4NCj4gVGhhbmtzIEJlbi4gIEkgdGhpbmsgdGhlIERET1MgdGV4dCBjYW4g YmUgZHJvcHBlZCBmcm9tIFBvbGwuICBJJ2xsIGRvIHRoYXQgZWFybHkgbmV4dCB3ZWVrLg0KPg0K PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcyBhZ2FpbiwNCj4gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQo+IEZyb206IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pg0KPiBTZW50 OiBGcmlkYXksIEFwcmlsIDI0LCAyMDIwIDU6NTMgUE0NCj4gVG86IE1pa2UgSm9uZXMgPE1pY2hh ZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4NCj4gQ2M6IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1w b2xsLmFsbEBpZXRmLm9yZzsgaWQtZXZlbnRAaWV0Zi5vcmcNCj4gU3ViamVjdDogW0VYVEVSTkFM XSBSZTogW0lkLWV2ZW50XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1zZWNldmVudC1odHRwLXBv bGwtMDYNCj4NCj4gSGkgTWlrZSwNCj4NCj4gVGhhbmtzIGZvciB0aGUgdXBkYXRlcywgYW5kIEkg Y29udGludWUgdG8gYmUgc29ycnkgZm9yIHRoZSBsb25nIHJlc3BvbnNlIHRpbWVzLg0KPg0KPiBQ b2xsIGlzIGluIHF1aXRlIGdvb2Qgc2hhcGUgKHdlbGwsIEkgZ3Vlc3MgaXQncyBtb3N0bHkganVz dCB0aGF0IC1wdXNoIGlzIHRha2luZyB0aGUgYnJ1bnQgb2YgdGhlIHdvcmsgZm9yIGhhcm1vbml6 aW5nIHRoZSBkaWZmZXJlbmNlcyBpbiB0ZXh0KTsganVzdCBhIGNvdXBsZSBtb3JlIGNoYW5nZXMg dG8gbWFrZSBhbmQgd2Ugc2hvdWxkIGJlIGdvb2QgdG8gc3RhcnQgdGhlIElFVEYgTENzIGluIHBh cmFsbGVsLiAgSSdsbCBhZ2FpbiB0cmltIHRoZSByZXNvbHZlZCBiaXRzLg0KPg0KPiBJbiBTZWN0 aW9uIDMgd2UgaGF2ZSBhIG5vdGUgYWJvdXQgRG9TIHByb3RlY3Rpb25zIGVtYmVkZGVkIGluIGEg bGFyZ2VyIGJsb2NrIG9mIHRleHQ6DQo+DQo+ICAgIEF1dGhvcml6YXRpb24gZm9yIHRoZSBlbGln aWJpbGl0eSB0byBwcm92aWRlIGFjdGlvbmFibGUgU0VUcyBjYW4gYmUNCj4gICAgZGV0ZXJtaW5l ZCBieSB1c2luZyB0aGUgaWRlbnRpdHkgb2YgdGhlIFNFVCBJc3N1ZXIsIHZhbGlkYXRpbmcgdGhl DQo+ICAgIHBvbGxpbmcgZW5kcG9pbnQgVVJMLCBwZXJoYXBzIHVzaW5nIFRMUywgb3IgdmlhIG90 aGVyIGVtcGxveWVkDQo+ICAgIGF1dGhlbnRpY2F0aW9uIG1ldGhvZHMuICBBbW9uZyBvdGhlciBi ZW5lZml0cywgYXV0aGVudGljYXRpb24gY2FuDQo+ICAgIGhlbHAgcHJldmVudCBkZW5pYWwtb2Yt c2VydmljZSBhdHRhY2tzLiAgQmVjYXVzZSBTRVRzIGFyZSBub3QNCj4gICAgY29tbWFuZHMsIFNF VCBSZWNpcGllbnRzIGFyZSBmcmVlIHRvIGlnbm9yZSBTRVRzIHRoYXQgYXJlIG5vdCBvZg0KPiAg ICBpbnRlcmVzdCBhZnRlciBhY2tub3dsZWRnaW5nIHRoZWlyIHJlY2VpcHQuDQo+DQo+IEkgYW0g bm90IDEwMCUgc3VyZSwgYnV0IEkgdGhpbmsgdGhpcyBtYXkgaGF2ZSBiZWVuIHRleHQgdGhhdCBv cmlnaW5hdGVzIGJlZm9yZSB0aGUgc3BsaXQgb2YgZG9jdW1lbnRzLCBhbmQgaW4gcHVzaCBnb3Qg ZXh0cmFjdGVkIGFuZCBtYWRlIGludG8gYSBzZXBhcmF0ZSBzZWN0aW9uLiAgRG9lcyBpdCBzdGls bCBtYWtlIHNlbnNlIGhlcmU/ICBUaGUgRG9TIHJpc2sgd291bGQgdHlwaWNhbGx5IGJlIGZvciBh IHNlcnZlciBnZXR0aW5nIGxvdHMgb2YgaW5ib3VuZCBjb25uZWN0aW9ucywgYnV0IHRoZXJlJ3Mg bm90IHF1aXRlIGFzIGNsZWFyIGEgY2FzZSBmb3IgKGNsaWVudCkgYXV0aGVudGljYXRpb24gaGVs cGluZyB3aXRoIHRoYXQgZm9yIHBvbGwsIHNpbmNlIHRoZSBjbGllbnQgaXMgbm90IHNlbmRpbmcg aHVnZSBhbW91bnRzIG9mIHN0dWZmIHRoYXQgd291bGQgbmVlZCB0byBiZSBkcm9wcGVkLiAgQW0g SSBtaXN1bmRlcnN0YW5kaW5nIHRoZSBpbnRlbnQgaGVyZSwgb3Igc2hvdWxkIHRoZSBzZW50ZW5j ZSBqdXN0IGdldCBkcm9wcGVkPw0KPg0KPiBPbiBGcmksIEZlYiAwNywgMjAyMCBhdCAwNToxODow NFBNICswMDAwLCBNaWtlIEpvbmVzIHdyb3RlOg0KPiA+IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0 cC1wb2xsLTA3PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNlY2V2ZW50 LWh0dHAtcG9sbC0wNz4gd2FzIHB1Ymxpc2hlZCB0byBhZGRyZXNzIHRoZXNlIHJldmlldyBjb21t ZW50cy4gICgtMDg8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtc2VjZXZl bnQtaHR0cC1wb2xsLTA4PiBhZGRyZXNzZWQgYWRkaXRpb25hbCBlZGl0b3JpYWwgbml0cy4pICBE ZXNjcmlwdGlvbnMgb2YgdGhlIGNoYW5nZXMgbWFkZSBmb3IgdGhlc2UgY29tbWVudHMgYXJlIGlu bGluZSwgcHJlZml4ZWQgYnkgIk1pa2U+Ii4NCj4gPg0KPiA+DQo+ID4NCj4gPiAtLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206IElkLWV2ZW50IDxpZC1ldmVudC1ib3VuY2VzQGll dGYub3JnPiBPbiBCZWhhbGYgT2YgQmVuamFtaW4gS2FkdWsNCj4gPiBTZW50OiBUdWVzZGF5LCBE ZWNlbWJlciAxMCwgMjAxOSA0OjM3IFBNDQo+ID4gVG86IGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0 cC1wb2xsLmFsbEBpZXRmLm9yZw0KPiA+IENjOiBpZC1ldmVudEBpZXRmLm9yZw0KPiA+IFN1Ympl Y3Q6IFtJZC1ldmVudF0gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtc2VjZXZlbnQtaHR0cC1wb2xs LTA2DQo+ID4NCj4gPg0KPiA+IFNlY3Rpb24gMw0KPiA+DQo+ID4NCj4gPiBTaW5jZSBwb2xsIGhh cyB0aGUgVExTIHNlcnZlciBhcyB0aGUgU0VUIFRyYW5zbWl0dGVyLCB3ZSBjb3VsZCBwb3RlbnRp YWxseSBwdWxsIGluIFJGQyA2MTI1IGFuZCB0YWxrIGFib3V0IHZhbGlkYXRpbmcgRE5TLUlEcyB0 byBhdXRoZW50aWNhdGUgdGhlIFRyYW5zbWl0dGVyLiAgR2l2ZW4gdGhhdCB0aGUgbmFtZSB0byBi ZSBhdXRoZW50aWNhdGVkIHdvdWxkIGJlIHBhcnQgb2YgdGhlIGluZm9ybWF0aW9uIGNvbnZleWVk IG91dC1vZi1iYW5kLCB0aG91Z2gsIGl0J3Mgbm90IGVudGlyZWx5IGNsZWFyIGhvdyBtdWNoIHZh bHVlIHRoZXJlIHdvdWxkIGJlIGluIGRvaW5nIHNvLg0KPiA+DQo+ID4NCj4gPiBNaWtlPiBBcyBp biBQdXNoLCB0aGlzIHNlY3Rpb24gd2FzIGZvcm1lcmx5IHBvb3JseSB3b3JkZWQsIGFuZCBoYXMg bGFyZ2VseSBiZWVuIHJld3JpdHRlbi4NCj4NCj4gQXMgZm9yIC1wdXNoLCBJJ2QgcmVhbGx5IGxp a2UgdG8gYmUgYWJsZSB0byBzYXkgc29tZXRoaW5nIGFib3V0IHRoZSBvdGhlciBoYWxmIG9mIHRo ZSBuYW1lIGNvbXBhcmlzb24uICBJbiB0aGlzIGNhc2Ugd291bGQgaXQgYmUgc29tZXRoaW5nIGxp a2UgImRpc2NvdmVyeSBvZiBTRVQgVHJhbnNtaXR0ZXJzIChhbmQgdGhlIG5hbWVzIHVzZWQgdG8g YXV0aGVudGljYXRlIHRoZW0pIGlzIG91dCBvZiBzY29wZSBmb3IgdGhpcyBkb2N1bWVudCI/DQo+ DQo+IFRoYW5rcyBmb3IgdGhlIHVwZGF0ZXMsDQo+DQo+IEJlbg0KPg0KDQoNCg0K From nobody Wed Apr 29 16:20:10 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B6073A09C5; Wed, 29 Apr 2020 16:20:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uf3wwWC6EXOJ; Wed, 29 Apr 2020 16:20:06 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 251263A09C0; Wed, 29 Apr 2020 16:20:04 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 03TNJxnh031024 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 29 Apr 2020 19:20:02 -0400 Date: Wed, 29 Apr 2020 16:19:59 -0700 From: Benjamin Kaduk To: "Richard Backman, Annabelle" Cc: Mike Jones , "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Message-ID: <20200429231959.GI27494@kduck.mit.edu> References: <87C847B1-937A-4579-8B90-09F879A4DC05@amazon.com> <14B055A2-A54A-4C21-A71C-125C3D508BBD@amazon.com> <2183F624-3C9B-4956-9E4B-FC26A0C22AC4@amazon.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <2183F624-3C9B-4956-9E4B-FC26A0C22AC4@amazon.com> User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 23:20:08 -0000 On Wed, Apr 29, 2020 at 11:13:15PM +0000, Richard Backman, Annabelle wrote: > Despite some fun with gateway timeouts on the datatracker, both drafts are now published. __ I was fortunate enough to "only" have the usual slowness of response from the datatracker; IETF LC has been requested for both. Thanks for the updates! -Ben From nobody Wed Apr 29 16:21:30 2020 Return-Path: X-Original-To: id-event@ietfa.amsl.com Delivered-To: id-event@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02AAC3A09CC; Wed, 29 Apr 2020 16:21:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.027 X-Spam-Level: X-Spam-Status: No, score=-0.027 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OFGCxNLah6ge; Wed, 29 Apr 2020 16:21:26 -0700 (PDT) Received: from mail-lj1-x22a.google.com (mail-lj1-x22a.google.com [IPv6:2a00:1450:4864:20::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 117683A09C6; Wed, 29 Apr 2020 16:21:25 -0700 (PDT) Received: by mail-lj1-x22a.google.com with SMTP id l19so4460253lje.10; Wed, 29 Apr 2020 16:21:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=8i1vdCT+9s4NGcdN+4nmPVJAP2Ucfymaddf5YxC2gIs=; b=F9+xA1K3WWcOBq8KAJG++tFYaPEmQb1HMyVqFDYo/HAv/BQIc9cO3NjHqp9ude2MAJ juET/pHDNDMtnVG1jj0bSRd3lBc0ijO8jTS6DlRxdYc2zID1TVc8MVbRg0kaIzmQnNjl PMmeC1sKKVSxrv7+EmdpVE/73SD5umIxgV6IAFF/6iuP7hXw8D7SndzLBpJufNYRYA/t CyXflCkN9p1Ggdzag48smtCK+7+vkYceyBxg09NLRemaYQNFgMP6JVZKAP8gvchWQ7Pe UZwo8H7y7l8VFLew8QQWpSrNqTnyAy+5Fig50aScDjqV+mlytGzWbZg8aBqwDmDvhcXh sujw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=8i1vdCT+9s4NGcdN+4nmPVJAP2Ucfymaddf5YxC2gIs=; b=sqNrdYQm5Fq/iFf/Sh6aC+TFzUNnGss7FFhJssJNGSVAdHNCmoktARiE3a9m2QRspG BVPvxcAI3z2ifc2Ivv84QGMmwLYttL+weH9sNtypZg/ye+sMQMelfJE+uTCUKExPXnF1 A/NoBQcQ90mCGNfpBP88IMEvg34s79FCXuJpfBAhOPlYxK4Q/uY1VDOI/tavM0/p9hla 8edEGxwG8E14idKV8mdm/NT/Vsm4+zWalAp+al9m7LGCsBjwbI5QlwZo3fozCV8JpaE2 XHfpqQAWez/Pvnb3CvXNR6fDKQzC6XlXKZ0ooDvXTo7JfChj0zX4NWEZmUfQmvzZ0Nao Wocw== X-Gm-Message-State: AGi0Pubdhk9/N9rDh2JDTikvH8yu5NQYTCzDBQr69MQLiVST7/HQD59s f/jo/0ADd1wSJmy3U+XBFeuBLRIj/ABJa3Ug89zDOqYK X-Google-Smtp-Source: APiQypJqb9+CwAorit6aJiCkUzgg1IG6cdG7TNMkF9P624k9tokcF6wlSk5O5WFwqsqCsh5ffYgGcvufmm0QzTlvJ3Q= X-Received: by 2002:a2e:9011:: with SMTP id h17mr386377ljg.138.1588202483820; Wed, 29 Apr 2020 16:21:23 -0700 (PDT) MIME-Version: 1.0 References: <87C847B1-937A-4579-8B90-09F879A4DC05@amazon.com> <14B055A2-A54A-4C21-A71C-125C3D508BBD@amazon.com> <2183F624-3C9B-4956-9E4B-FC26A0C22AC4@amazon.com> <20200429231959.GI27494@kduck.mit.edu> In-Reply-To: <20200429231959.GI27494@kduck.mit.edu> From: Dick Hardt Date: Wed, 29 Apr 2020 16:20:57 -0700 Message-ID: To: Benjamin Kaduk Cc: "Richard Backman, Annabelle" , Mike Jones , "draft-ietf-secevent-http-poll.all@ietf.org" , "id-event@ietf.org" Content-Type: multipart/alternative; boundary="000000000000e12fe005a47634ce" Archived-At: Subject: Re: [Id-event] AD review of draft-ietf-secevent-http-poll-06 X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 23:21:28 -0000 --000000000000e12fe005a47634ce Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks Ben, Annabelle, and Mike! =E1=90=A7 On Wed, Apr 29, 2020 at 4:20 PM Benjamin Kaduk wrote: > On Wed, Apr 29, 2020 at 11:13:15PM +0000, Richard Backman, Annabelle wrot= e: > > Despite some fun with gateway timeouts on the datatracker, both drafts > are now published. __ > > I was fortunate enough to "only" have the usual slowness of response from > the datatracker; IETF LC has been requested for both. > > Thanks for the updates! > > -Ben > --000000000000e12fe005a47634ce Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks Ben, Annabelle, and Mike!
3D""=E1=90=A7

On Wed, Apr 29, 2020 at 4:20 PM Benjamin Kaduk <kaduk@mit.edu> wrote:
On Wed, Apr 29, 2020 at 11:13:15PM +0000, Richar= d Backman, Annabelle wrote:
> Despite some fun with gateway timeouts on the datatracker, both drafts= are now published. __

I was fortunate enough to "only" have the usual slowness of respo= nse from
the datatracker; IETF LC has been requested for both.

Thanks for the updates!

-Ben
--000000000000e12fe005a47634ce-- From nobody Wed Apr 29 16:32:17 2020 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A2633A0AAF; Wed, 29 Apr 2020 16:32:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.128.0 Auto-Submitted: auto-generated Precedence: bulk CC: Yaron Sheffer , draft-ietf-secevent-http-push@ietf.org, secevent-chairs@ietf.org, kaduk@mit.edu, yaronf.ietf@gmail.com, id-event@ietf.org Reply-To: last-call@ietf.org Sender: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <158820312379.13441.1879321961741360115@ietfa.amsl.com> Date: Wed, 29 Apr 2020 16:32:03 -0700 Archived-At: Subject: [Id-event] Last Call: (Push-Based Security Event Token (SET) Delivery Using HTTP) to Proposed Standard X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 23:32:10 -0000 The IESG has received a request from the Security Events WG (secevent) to consider the following document: - 'Push-Based Security Event Token (SET) Delivery Using HTTP' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the last-call@ietf.org mailing lists by 2020-05-13. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This specification defines how a Security Event Token (SET) may be delivered to an intended recipient using HTTP POST. The SET is transmitted in the body of an HTTP POST request to an endpoint operated by the recipient, and the recipient indicates successful or failed transmission via the HTTP response. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-secevent-http-push/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Wed Apr 29 16:32:32 2020 Return-Path: X-Original-To: id-event@ietf.org Delivered-To: id-event@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DD2E3A0B5A; Wed, 29 Apr 2020 16:32:23 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.128.0 Auto-Submitted: auto-generated Precedence: bulk CC: Yaron Sheffer , yaronf.ietf@gmail.com, id-event@ietf.org, kaduk@mit.edu, draft-ietf-secevent-http-poll@ietf.org, secevent-chairs@ietf.org Reply-To: last-call@ietf.org Sender: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <158820314329.8065.5649161881109410292@ietfa.amsl.com> Date: Wed, 29 Apr 2020 16:32:23 -0700 Archived-At: Subject: [Id-event] Last Call: (Poll-Based Security Event Token (SET) Delivery Using HTTP) to Proposed Standard X-BeenThere: id-event@ietf.org X-Mailman-Version: 2.1.29 List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2020 23:32:30 -0000 The IESG has received a request from the Security Events WG (secevent) to consider the following document: - 'Poll-Based Security Event Token (SET) Delivery Using HTTP' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the last-call@ietf.org mailing lists by 2020-05-13. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This specification defines how a series of Security Event Tokens (SETs) may be delivered to an intended recipient using HTTP POST over TLS initiated as a poll by the recipient. The specification also defines how delivery can be assured, subject to the SET Recipient's need for assurance. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-secevent-http-poll/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-secevent-http-poll/ballot/ No IPR declarations have been submitted directly on this I-D.