From nobody Wed Apr 1 06:19:23 2020 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 190173A0EBC for ; Wed, 1 Apr 2020 06:19:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.697 X-Spam-Level: X-Spam-Status: No, score=-0.697 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_FAIL=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cablelabs.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TjScIX0lshdX for ; Wed, 1 Apr 2020 06:19:20 -0700 (PDT) Received: from pechora2.lax.icann.org (pechora2.icann.org [IPv6:2620:0:2d0:201::1:72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92C773A0EBB for ; Wed, 1 Apr 2020 06:19:20 -0700 (PDT) Received: from NAM04-CO1-obe.outbound.protection.outlook.com (mail-eopbgr690114.outbound.protection.outlook.com [40.107.69.114]) (using TLSv1.2 with cipher AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pechora2.lax.icann.org (Postfix) with ESMTPS id EBC0D1E0162 for ; Wed, 1 Apr 2020 13:19:19 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VdJC8prMpd6aLldhZrvtYKRs+h0UgHG886rKxGWXrOyP4mrBwrmglpubvLBSd4rT6Z0vAk7khxR/y0mIPUMgvZL5MI1XKrMGpHHX6bMdCKNoI0d7wGPd7agYEkPwqi2OYwjmylfOw1K93IzQebcXglm44rcVZCHyaf7lALGx6SzNb5SzkcwFaYch01GZLcTOMqu/KmlenCm0uCULWzDTDxtkS+fpNegLZX5JnX/9Zq4aZbPywOSTfyO5tcFBB04hlodJ7sR7QCUygk9WkXf7tX4eu189hhuk5eKoWpxewKLFzy3jxB+NH7ffd5y9yWdwZuN0i2QcdS1u9Q5aH4UrNw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=E7U6CHAKhYL/uuYuxNFMMJzkJfofcfJXjKP0lTgRHnI=; b=ELEv0PjDXOsxTarBVfGMw1QOK/MBq2MvA4UEcFcnH0gjp7gGHSaE17DS836vlqG7GNdadrnwroxNc1HuezD2qtn6R1sc78pFQbGHLAioILcY0Md4GRO//UVjNxYaQfqTbwncdCMZ7L8Uv8/Q9Oa0Dum/v+JbfriY9xJ6GwxbJexqIoVFFbVn3u/8qIIHspfqqg+MgA56kX2sXvHwRiuErh45+PssyFt/onLnDA6couPQdcQ1/N+zwtgZPPpX9gtTsaXxJgie0ICP2nw7d6NbSCkpGFabos2t4c9GX/9VwtqzSS8mbC2I2pMFSI+sbEJ5rSR0az+3Uanjx3+kGsdbEA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cablelabs.com; dmarc=pass action=none header.from=cablelabs.com; dkim=pass header.d=cablelabs.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cablelabs.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=E7U6CHAKhYL/uuYuxNFMMJzkJfofcfJXjKP0lTgRHnI=; b=XupU5KXWhy7DGGZitZlYbymqYSAuG/6nOjw/X827HqEV7oPKGWNvN/DsX3PWpaTzHdpC1mU/miHySJk50qFiXpoRNK6iVNh6OHihWhMTcPwkkhOwoHr6ikJwe8wBKok5LsAWeO/pDKDa4Sbi4rIGsCwYX1JfCQ6CawkO/360OxI= Received: from DM6PR06MB3897.namprd06.prod.outlook.com (2603:10b6:5:8e::27) by DM6PR06MB4748.namprd06.prod.outlook.com (2603:10b6:5:fd::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2856.18; Wed, 1 Apr 2020 13:18:57 +0000 Received: from DM6PR06MB3897.namprd06.prod.outlook.com ([fe80::8004:2347:dc46:cd71]) by DM6PR06MB3897.namprd06.prod.outlook.com ([fe80::8004:2347:dc46:cd71%6]) with mapi id 15.20.2878.014; Wed, 1 Apr 2020 13:18:56 +0000 From: Darshak Thakore To: "media-types@iana.org" Thread-Topic: Notice of intended registration of "application/captive+json" Thread-Index: AQHWCCgZMOQt9vnr5EWy6Yh2IvN/uA== Date: Wed, 1 Apr 2020 13:18:56 +0000 Message-ID: <7C97D082-89AD-418E-9C1F-158C263BEE82@contoso.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.35.20030802 authentication-results: spf=none (sender IP is ) smtp.mailfrom=d.thakore@cablelabs.com; x-originating-ip: [2601:285:8000:505:8a1:d2d:4b7d:3222] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 54200aee-5406-40f0-23b1-08d7d63f3bb7 x-ms-traffictypediagnostic: DM6PR06MB4748: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5797; x-forefront-prvs: 03607C04F0 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR06MB3897.namprd06.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10019020)(396003)(136003)(346002)(376002)(366004)(39850400004)(478600001)(5660300002)(71200400001)(66556008)(66446008)(186003)(66946007)(86362001)(64756008)(316002)(36756003)(66476007)(91956017)(81156014)(8676002)(76116006)(9686003)(6486002)(6512007)(81166006)(966005)(33656002)(6916009)(2906002)(8936002)(558084003)(6506007); DIR:OUT; SFP:1102; received-spf: None (protection.outlook.com: cablelabs.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata: gCy7erlxGAAqTbFNUcyfmEtzB/kuU2Y3ofTxu5zNqhCphIEE9N7H4E9iGIJ5y5VaQm30WgvtsmUqhK7zliE8u3VQnemUXl5gXyXs4AQvkHEb9JpZwV0TPfvle/JuAmHlK2eUHCocBhRtVu9YD6LgHTLIasAcXRhxr05x4lp/Tk3L4+oaHTAGR6+liEQOAuUufJ6P2r16khR5ihIqtyC5iA== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_7C97D08289AD418E9C1F158C263BEE82contosocom_" MIME-Version: 1.0 X-OriginatorOrg: cablelabs.com X-MS-Exchange-CrossTenant-Network-Message-Id: 54200aee-5406-40f0-23b1-08d7d63f3bb7 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Apr 2020 13:18:56.8636 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: ce4fbcd1-1d81-4af0-ad0b-2998c441e160 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: x65QTNV7Mj+NsUrhh5HPgxun4AFHTTlKqRmIN+ixDcpinilCkIeigJV/rhjbdMGYwR6I2OdS2V61eU31Y7PLhA== X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.2 (pechora2.lax.icann.org [192.0.33.72]); Wed, 01 Apr 2020 13:19:20 +0000 (UTC) X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR06MB4748 Archived-At: Subject: [media-types] Notice of intended registration of "application/captive+json" X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2020 13:19:22 -0000 --_000_7C97D08289AD418E9C1F158C263BEE82contosocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QXMgcGVyIFNlY3Rpb24gNS4xIG9mIFJGQyA2ODM4LCB3ZSB3aXNoIHRvIG5vdGlmeSB0aGUgbGlz dCBvZiB0aGUgaW50ZW5kZWQgcmVnaXN0cmF0aW9uIG9mIGEgbmV3IG1lZGlhIHR5cGUgaW4gdGhl IHN0YW5kYXJkcyB0cmFjayBkb2N1bWVudCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi1jYXBwb3J0LWFwaS0wNi4NCg0KQ29tbWVudHMgYW5kIGZlZWRiYWNrIHdlbGNvbWUu DQoNClJlZ2FyZHMsDQpEYXJzaGFrDQo= --_000_7C97D08289AD418E9C1F158C263BEE82contosocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxl MTcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtY29tcG9zZTsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJn aW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldv cmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hh cGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlm XS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQi Pg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94 bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjND MSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5BcyBwZXIgU2VjdGlv biA1LjEgb2YgUkZDIDY4MzgsIHdlIHdpc2ggdG8gbm90aWZ5IHRoZSBsaXN0IG9mIHRoZSBpbnRl bmRlZCByZWdpc3RyYXRpb24gb2YgYSBuZXcgbWVkaWEgdHlwZSBpbiB0aGUgc3RhbmRhcmRzIHRy YWNrIGRvY3VtZW50DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtY2FwcG9ydC1hcGktMDYiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1pZXRmLWNhcHBvcnQtYXBpLTA2PC9hPi4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5D b21tZW50cyBhbmQgZmVlZGJhY2sgd2VsY29tZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVn YXJkcyw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRhcnNoYWs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_7C97D08289AD418E9C1F158C263BEE82contosocom_-- From rjudge@vmware.com Thu Apr 2 15:21:10 2020 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 257BB3A0B1C for ; Thu, 2 Apr 2020 15:21:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_FAIL=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=vmware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lWltCsSoi-Vh for ; Thu, 2 Apr 2020 15:21:08 -0700 (PDT) Received: from pechora6.dc.icann.org (pechora6.icann.org [192.0.46.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3A253A0B27 for ; Thu, 2 Apr 2020 15:20:59 -0700 (PDT) Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12on2047.outbound.protection.outlook.com [40.107.243.47]) (using TLSv1.2 with cipher AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pechora6.dc.icann.org (Postfix) with ESMTPS id E76E81E03B5 for ; Thu, 2 Apr 2020 22:20:58 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DAAnM18fZDZ5LBxLZvnyNyYdk88UZanmtgY57wrlHxEcYT67xfdmLg/2lJMwIO4HSOVA6rrXMNXBbB9dXfYnvEqwa2yPJttaW1m8gKgRaK2yFns0OiEqhGnHD+VdzmREsolaBG5nzFNJ7S5tLtjdsBajyEp/jVjv+1YE+agXBZ6d28ladO4k1TOxp4unA0xyzVrhzJSeVQJjCe8foGCjkU6i6usburihg9LxiUw7SdkvHb1DSz6X/3LhtDbEbZl05Qd8fe72OEIbfq7qL8Kn61X4oa9/TsUECoT0IBJwMLj+bXqDUZJ7g6pur6ZpBcc2lHAgiMY5dYYdvZVqhFpXAw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JexlTjr+mhFS2sQEr4UVHfH47s69DQFpBaj0FTvRNdk=; b=SSDJAMXX24Loi2ZswYyRo42I58s4PSx6Ln0Q8lTOMb1/o9mMdqnBu13Kxr4KM5kplJs/WS8LX+ospMv3RbXIISb6YJe5aYEqQTbA1m6BnhhgMTeYdYK9E/PRsD+yr6Hn319fBIUyReCueYwV0DxwObvxm5Ve7NdM70KdwdPAVBrhCAIzRVhhehAt6pBI74Mmf+s9GYbn4M8KrxxGT6iGY+VWXBvxBgB63PVmWFL7YsWgDQqcOIBr37OPrWpv1uP9JZRCsrX2M39ghQ+iekO08scBY4awNrRTf+F1eOcKnOpavdWSqGVcF5mMyVgv4TdCia7uqWcosROpEYQx/hEgeQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JexlTjr+mhFS2sQEr4UVHfH47s69DQFpBaj0FTvRNdk=; b=pw40fGlr3hfK19uEu5uJgoIp1hmIAWDJuLj8owR8HiJRjMnMyNxJeMsz5/1Vb4LToD4meRDeo3IBpjyKkHpKlebrgJo8hr0/rbOCD04fAAFJuq5LPrkB6LGvHyLN+stIEJuqUZN+PkWnvoFMOsWgnLOS+4JyrmWBaAcWTdEZZYc= Received: from MWHPR05MB2815.namprd05.prod.outlook.com (2603:10b6:300:5f::18) by MWHPR05MB3679.namprd05.prod.outlook.com (2603:10b6:301:3e::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2878.15; Thu, 2 Apr 2020 22:20:35 +0000 Received: from MWHPR05MB2815.namprd05.prod.outlook.com ([fe80::1d6f:ac70:4115:606e]) by MWHPR05MB2815.namprd05.prod.outlook.com ([fe80::1d6f:ac70:4115:606e%11]) with mapi id 15.20.2878.014; Thu, 2 Apr 2020 22:20:35 +0000 From: Rose Judge To: "ietf-types@iana.org" Thread-Topic: Community review for proposed 'spdx' media type Thread-Index: AQHWCTzt6YlijS0e00utXiVY/6C/uA== Date: Thu, 2 Apr 2020 22:20:34 +0000 Message-ID: <4045F0DF-DD97-42A1-9857-C64566E84842@vmware.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.35.20030802 authentication-results: spf=none (sender IP is ) smtp.mailfrom=rjudge@vmware.com; x-originating-ip: [2601:1c2:1901:e240:584c:e7e4:4ff:f09e] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e0102417-25ff-49d3-2b30-08d7d75410af x-ms-traffictypediagnostic: MWHPR05MB3679: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4941; x-forefront-prvs: 0361212EA8 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR05MB2815.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(376002)(366004)(346002)(39860400002)(396003)(136003)(81156014)(6486002)(9326002)(33656002)(186003)(2906002)(8676002)(8936002)(6512007)(6506007)(81166006)(66946007)(66446008)(478600001)(36756003)(66476007)(6916009)(91956017)(86362001)(66556008)(64756008)(966005)(76116006)(66574012)(316002)(5660300002)(71200400001)(2616005); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: vmware.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata: nhrui3k79scCY5PL8EITaMxY9VSlkuLMhQmdmMY3Yi0tHdX+t4pMEC3JPQSfHR79wu3YVGjHGng7h0CZk2dGlGSJmp2+2pT/GDt04UEQz4lgngKXuk2QSnfavwSDudC43stVHy5PMdjBNQ5ERVkdcVh6+rxOAkjTr583gm08O8T5YFiYjQ/vDrYCfTM7Qk/FACCcZf1O5/WdqQjsHKMeMg== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_4045F0DFDD9742A19857C64566E84842vmwarecom_" MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-Network-Message-Id: e0102417-25ff-49d3-2b30-08d7d75410af X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Apr 2020 22:20:34.9576 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: RFs3F5YRyaiWSrYbdSy9xmseaxNS0voQ9PZmeF+awKRi7hqEjWw848JVCSFrSD+rOlS0+sn7+vpCozxY4dZ22Q== X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.2 (pechora6.dc.icann.org [192.0.46.72]); Thu, 02 Apr 2020 22:20:59 +0000 (UTC) X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3679 Archived-At: X-Mailman-Approved-At: Thu, 02 Apr 2020 15:58:34 -0700 Subject: [media-types] Community review for proposed 'spdx' media type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2020 22:24:23 -0000 --_000_4045F0DFDD9742A19857C64566E84842vmwarecom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNClBsZWFzZSBzZWUgYmVsb3cgZm9yIGFwcGxpY2F0aW9uIG9mIHByb3Bvc2VkIG5l dyBtZWRpYSB0eXBlOg0KDQoNCk5hbWU6IFJvc2UgSnVkZ2UNCkVtYWlsOiByanVkZ2VAdm13YXJl LmNvbTxtYWlsdG86cmp1ZGdlQHZtd2FyZS5jb20+DQoNCk1lZGlhIHR5cGUgbmFtZTogdGV4dA0K TWVkaWEgc3VidHlwZSBuYW1lOiBzcGR4DQoNClJlcXVpcmVkIHBhcmFtZXRlcnM6DQpCYXNlZCBv biAyLjIgc3BlYyB0aGUgZm9sbG93aW5nIGZpZWxkcyBhbmQgdGFncyBhcmUgbWFuZGF0b3J5IGlu IHRoZSBzcGVjaWZpY2F0aW9uIGRvY3VtZW50Lg0KDQpEb2N1bWVudCBDcmVhdGlvbiBJbmZvcm1h dGlvbiBUYWdzOg0KU1BEWFZlcnNpb24sIERhdGFMaWNlbnNlLCBTUERYSUQsIERvY3VtZW50TmFt ZSwgRG9jdW1lbnROYW1lc3BhY2UsIENyZWF0b3IsIENyZWF0ZWQNCg0KUGFja2FnZSBJbmZvcm1h dGlvbiBUYWdzOg0KUGFja2FnZU5hbWUsIFNQRFhJRCwgUGFja2FnZURvd25sb2FkTG9jYXRpb24s IEZpbGVOYW1lLCBQYWNrYWdlVmVyaWZpY2F0aW9uQ29kZSoqLCBQYWNrYWdlTGljZW5zZUNvbmNs dWRlZCwgUGFja2FnZUxpY2Vuc2VJbmZvRnJvbUZpbGVzKiosIFBhY2thZ2VMaWNlbnNlRGVjbGFy ZWQsIFBhY2thZ2VDb3B5cmlnaHRUZXh0LA0KDQpGaWxlIEluZm9ybWF0aW9uIFRhZ3M6DQpGaWxl TmFtZSwgU1BEWElELCBGaWxlQ2hlY2tzdW0sIExpY2Vuc2VDb25jbHVkZWQsIExpY2Vuc2VJbmZv SW5GaWxlLCBGaWxlQ29weXJpZ2h0VGV4dCwNCg0KU25pcHBldCBJbmZvcm1hdGlvbiBUYWdzOg0K U1BEWFJlZiwgRG9jdW1lbnRSZWYsIFNuaXBwZXRCeXRlUmFuZ2UsIFNuaXBwZXRMaWNlbnNlQ29u Y2x1ZGVkLCBTbmlwcGV0Q29weXJpZ2h0VGV4dCwNCg0KQW5ub3RhdGlvbiBJbmZvcm1hdGlvbiBU YWdzOg0KQW5ub3RhdG9yDQoNCg0KKiogTWFuZGF0b3J5LCBvbmUgb3IgbWFueSBpZiBGaWxlc0Fu YWx5emVkIGlzIHRydWUgb3Igb21pdHRlZCwgemVybyAobXVzdCBiZSBvbWl0dGVkKSBpZiBGaWxl c0FuYWx5emVkIGlzIGZhbHNlLg0KDQoNCk9wdGlvbmFsIHBhcmFtZXRlcnM6DQpCYXNlZCBvbiAy LjIgc3BlYyB0aGUgZm9sbG93aW5nIGZpZWxkcyBhbmQgdGFncyBhcmUgb3B0aW9uYWwgaW4gdGhl IHNwZWNpZmljYXRpb24gZG9jdW1lbnQuDQoNCk9wdGlvbmFsIERvY3VtZW50IENyZWF0aW9uIElu Zm9ybWF0aW9uIFRhZ3M6DQpFeHRlcm5hbERvY3VtZW50UmVmLCBMaWNlbnNlTGlzdFZlcnNpb24s IENyZWF0b3JDb21tZW50LCBEb2N1bWVudENvbW1lbnQNCg0KT3B0aW9uYWwgUGFja2FnZSBJbmZv cm1hdGlvbiBUYWdzOg0KUGFja2FnZVZlcnNpb24sIFBhY2thZ2VGaWxlTmFtZSwgUGFja2FnZVN1 cHBsaWVyLCBQYWNrYWdlT3JpZ2luYXRvciwgRmlsZXNBbmFseXplZCwgUGFja2FnZUNoZWNrc3Vt LCBQYWNrYWdlSG9tZVBhZ2UsIFBhY2thZ2VTb3VyY2VJbmZvLCBQYWNrYWdlTGljZW5zZUNvbW1l bnRzLCBQYWNrYWdlU3VtbWFyeSwgUGFja2FnZURlc2NyaXB0aW9uLCBQYWNrYWdlQ29tbWVudCwg RXh0ZXJuYWxSZWYsIEV4dGVybmFsUmVmQ29tbWVudCAoY29uZGl0aW9uYWwgZm9yIGVhY2ggRXh0 ZXJuYWxSZWYpDQoNCk9wdGlvbmFsIEZpbGUgSW5mb3JtYXRpb24gVGFnczoNCkZpbGVUeXBlLCBM aWNlbnNlQ29tbWVudHMsIEFydGlmYWN0T2ZQcm9qZWN0TmFtZSwgQXJ0aWZhY3RPZlByb2plY3RI b21lUGFnZSwgQXJ0aWZhY3RPZlByb2plY3RVUkksIEZpbGVDb21tZW50LCBGaWxlTm90aWNlLCBG aWxlQ29udHJpYnV0b3INCg0KT3B0aW9uYWwgU25pcHBldCBJbmZvcm1hdGlvbiBUYWdzOg0KU25p cHBldExpbmVSYW5nZSwgTGljZW5zZUluZm9JblNuaXBwZXQsIFNuaXBwZXRMaWNlbnNlQ29tbWVu dHMsIFNuaXBwZXRDb21tZW50LCBTbmlwcGV0TmFtZQ0KDQpPcHRpb25hbCBPdGhlciBMaWNlbnNp bmcgSW5mb3JtYXRpb24gRGV0ZWN0ZWQgVGFnczoNCkxpY2Vuc2VDb21tZW50LCBMaWNlbnNlSUQg W0NvbmRpdGlvbmFsIChtYW5kYXRvcnksIG9uZSkgaWYgbGljZW5zZSBpcyBub3Qgb24gU1BEWCBM aWNlbnNlIExpc3RdLCBFeHRyYWN0ZWRUZXh0IFtDb25kaXRpb25hbCAoTWFuZGF0b3J5LCBvbmUp IGlmIHRoZXJlIGlzIGEgTGljZW5zZSBJZGVudGlmaWVyIGFzc2lnbmVkLl0sIExpY2Vuc2VOYW1l IFtDb25kaXRpb25hbCAobWFuZGF0b3J5LCBvbmUpIGlmIGxpY2Vuc2UgaXMgbm90IG9uIFNQRFgg TGljZW5zZSBMaXN0Ll0sIExpY2Vuc2VDcm9zc1JlZmVyZW5jZSBbQ29uZGl0aW9uYWwgKG9wdGlv bmFsLCBvbmUgb3IgbW9yZSkgaWYgbGljZW5zZSBpcyBub3Qgb24gU1BEWCBMaWNlbnNlIExpc3Qu XQ0KDQpPcHRpb25hbCBSZWxhdGlvbnNoaXBzIGJldHdlZW4gU1BEWCBFbGVtZW50czoNClJlbGF0 aW9uc2hpcCwgUmVsYXRpb25zaGlwQ29tbWVudA0KDQpPcHRpb25hbCBBbm5vdGF0aW9uIEluZm9y bWF0aW9uIFRhZ3M6DQpBbm5vdGF0b3IgW0NvbmRpdGlvbmFsIChNYW5kYXRvcnksIG9uZSksIGlm IHRoZXJlIGlzIGFuIEFubm90YXRpb25dLCBBbm5vdGF0aW9uRGF0ZSBbQ29uZGl0aW9uYWwgKE1h bmRhdG9yeSwgb25lKSwgaWYgdGhlcmUgaXMgYW4gQW5ub3RhdGlvbl0sIEFubm90YXRpb25UeXBl IFtDb25kaXRpb25hbCAoTWFuZGF0b3J5LCBvbmUpLCBpZiB0aGVyZSBpcyBhbiBBbm5vdGF0aW9u XSwgU1BEWFJFRiBbQ29uZGl0aW9uYWwgKE1hbmRhdG9yeSwgb25lKSwgaWYgdGhlcmUgaXMgYW4g QW5ub3RhdGlvbl0sIEFubm90YXRpb25Db21tZW50IFtDb25kaXRpb25hbCAoTWFuZGF0b3J5LCBv bmUpLCBpZiB0aGVyZSBpcyBhbiBBbm5vdGF0aW9uXQ0KDQoNCkVuY29kaW5nIGNvbnNpZGVyYXRp b25zOiA4Yml0DQpUaGUgc3BkeCBtZWRpYSB0eXBlIG11c3Qgc3VwcG9ydCBVVEYtOCBlbmNvZGlu Zy4NCg0KU2VjdXJpdHkgY29uc2lkZXJhdGlvbnM6DQpUaGUgRXh0ZXJuYWxSZWYgdGFnIHByb3Zp ZGVzIGxpbmthZ2UgdG8gdGhlIE5WRCB2aWEgQ1BFLiBEYXRhIGNhbiBiZSBzdG9yZWQgaW4gc3Bk eCBmaWxlcyB0aGF0IG1heSBjb250YWluIHByaW50Zi1zdHlsZSBmb3JtYXQgY2hhcmFjdGVycyB0 aGF0IGNvdWxkIGNhdXNlIGEgcHJvZ3JhbSB0byBkaXNwbGF5IHVuaW50ZW5kZWQgaW5mb3JtYXRp b24uDQoNCkludGVyb3BlcmFiaWxpdHkgY29uc2lkZXJhdGlvbnM6DQpUaGUgc3BkeCBtZWRpYSB0 eXBlIGNhbiBiZSBkaXN0cmlidXRlZCBmcmVlIG9mIGV4dGVybmFsIHN5c3RlbXMgb3IgcHJvY2Vz c29ycyBhbmQgaXMgcmVwcmVzZW50ZWQgaW4gYSBodW1hbi1yZWFkYWJsZSBmb3JtYXQuIFRoZXJl IGFyZSBhbHNvIGludGVybmV0IHRleHQtcHJvY2Vzc2luZyBhcHBsaWNhdGlvbnMgdGhhdCBtYXkg Y29uc3VtZSB0aGVzZSBkb2N1bWVudHMuDQoNClB1Ymxpc2hlZCBzcGVjaWZpY2F0aW9uOg0KQ3Vy cmVudCB2ZXJzaW9ucyBvZiB0aGUgc3BlY2lmaWNhdGlvbiBpcyBhdmFpbGFibGUgYXQgaHR0cHM6 Ly9zcGR4LmdpdGh1Yi5pby9zcGR4LXNwZWMvLiBIaXN0b3JpY2FsIHZlcnNpb25zIGNhbiBiZSBm b3VuZCBhdCBodHRwczovL3NwZHgub3JnL3NwZWNpZmljYXRpb25zLg0KDQpBcHBsaWNhdGlvbnMg d2hpY2ggdXNlIHRoaXMgbWVkaWE6DQpFeGNoYW5nZSBvZiBNZXRhZGF0YSBmb3Igc29mdHdhcmUu DQoNCkZyYWdtZW50IGlkZW50aWZpZXIgY29uc2lkZXJhdGlvbnM6DQpOL0ENCg0KUmVzdHJpY3Rp b25zIG9uIHVzYWdlOg0Kc3BkeCBtZWRpYSB0eXBlcyBzaG91bGQgb25seSBiZSBhc3NvY2lhdGVk IHdpdGggdmFsaWRhdGVkIFNQRFggZG9jdW1lbnRzIHRoYXQgZm9sbG93IHRoZSBTUERYIHNwZWNp ZmljYXRpb24uDQoNClByb3Zpc2lvbmFsIHJlZ2lzdHJhdGlvbj8gKHN0YW5kYXJkcyB0cmVlIG9u bHkpOg0KTi9BDQoNCkFkZGl0aW9uYWwgaW5mb3JtYXRpb246DQoNCjEuIERlcHJlY2F0ZWQgYWxp YXMgbmFtZXMgZm9yIHRoaXMgdHlwZTogTi9BDQoyLiBNYWdpYyBudW1iZXIocyk6IE4vQQ0KMy4g RmlsZSBleHRlbnNpb24ocyk6IC5zcGR4DQo0LiBNYWNpbnRvc2ggZmlsZSB0eXBlIGNvZGU6IE4v QQ0KNS4gT2JqZWN0IElkZW50aWZpZXJzOiBOL0ENCg0KR2VuZXJhbCBDb21tZW50czoNClNvZnR3 YXJlIFBhY2thZ2UgRGF0YSBFeGNoYW5nZcKuIChTUERYwq4pIGlzIGFuIG9wZW4gc3RhbmRhcmQg Zm9yIGNvbW11bmljYXRpbmcgc29mdHdhcmUgYmlsbCBvZiBtYXRlcmlhbCBpbmZvcm1hdGlvbiAo aW5jbHVkaW5nIGNvbXBvbmVudHMsIGxpY2Vuc2VzLCBjb3B5cmlnaHRzLCBhbmQgc2VjdXJpdHkg cmVmZXJlbmNlcykuDQoNClBlcnNvbiB0byBjb250YWN0IGZvciBmdXJ0aGVyIGluZm9ybWF0aW9u Og0KDQoxLiBOYW1lOiBSb3NlIEp1ZGdlDQoyLiBFbWFpbDogcmp1ZGdlQHZtd2FyZS5jb208bWFp bHRvOnJqdWRnZUB2bXdhcmUuY29tPg0KDQpJbnRlbmRlZCB1c2FnZTogQ29tbW9uDQpJbnRlbmRl ZCB0byBiZSB1c2VkIHRvIGVuYWJsZSBjb21wYW5pZXMgYW5kIG9yZ2FuaXphdGlvbnMgdG8gc2hh cmUgaHVtYW4tcmVhZGFibGUgYW5kIG1hY2hpbmUtcHJvY2Vzc2FibGUgc29mdHdhcmUgcGFja2Fn ZSBtZXRhZGF0YSB0byBmYWNpbGl0YXRlIHNvZnR3YXJlIHN1cHBseSBjaGFpbiBwcm9jZXNzZXMu IEFuIFNQRFggbWVkaWEgdHlwZSB3aWxsIGJlIGFzc29jaWF0ZWQgd2l0aCBhIHBhcnRpY3VsYXIg c29mdHdhcmUgcGFja2FnZSBvciBzZXQgb2YgcGFja2FnZXMgYW5kIHdpbGwgY29udGFpbiBpbmZv cm1hdGlvbiBhYm91dCBpdCBpbiB0aGUgU1BEWCBmb3JtYXQuDQoNCkF1dGhvci9DaGFuZ2UgY29u dHJvbGxlcjoga3N0ZXdhcnRAbGludXhmb3VuZGF0aW9uLm9yZzxtYWlsdG86a3N0ZXdhcnRAbGlu dXhmb3VuZGF0aW9uLm9yZz4NCg0KDQoNCg== --_000_4045F0DFDD9742A19857C64566E84842vmwarecom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0K c3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVy dGVkLXNwYWNlO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9u MQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47 fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0K PC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0Rjcy Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iY29sb3I6YmxhY2siPkhlbGxvLCA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+UGxlYXNlIHNlZSBiZWxvdyBmb3IgYXBwbGljYXRpb24gb2YgcHJvcG9zZWQgbmV3IG1l ZGlhIHR5cGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+TmFtZTogUm9zZSBKdWRn ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+RW1haWw6 PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9 Im1haWx0bzpyanVkZ2VAdm13YXJlLmNvbSI+cmp1ZGdlQHZtd2FyZS5jb208L2E+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZGlhIHR5cGUgbmFtZTog dGV4dDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+TWVk aWEgc3VidHlwZSBuYW1lOiBzcGR4PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPlJlcXVpcmVkIHBhcmFtZXRlcnM6PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5CYXNlZCBvbiAyLjIgc3BlYyB0aGUgZm9sbG93aW5n IGZpZWxkcyBhbmQgdGFncyBhcmUgbWFuZGF0b3J5IGluIHRoZSBzcGVjaWZpY2F0aW9uIGRvY3Vt ZW50LjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+RG9jdW1lbnQgQ3Jl YXRpb24gSW5mb3JtYXRpb24gVGFnczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPlNQRFhWZXJzaW9uLCBEYXRhTGljZW5zZSwgU1BEWElELCBEb2N1bWVu dE5hbWUsIERvY3VtZW50TmFtZXNwYWNlLCBDcmVhdG9yLCBDcmVhdGVkPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlBhY2thZ2UgSW5mb3JtYXRpb24gVGFn czo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlBhY2th Z2VOYW1lLCBTUERYSUQsIFBhY2thZ2VEb3dubG9hZExvY2F0aW9uLCBGaWxlTmFtZSwgUGFja2Fn ZVZlcmlmaWNhdGlvbkNvZGUqKiwgUGFja2FnZUxpY2Vuc2VDb25jbHVkZWQsIFBhY2thZ2VMaWNl bnNlSW5mb0Zyb21GaWxlcyoqLCBQYWNrYWdlTGljZW5zZURlY2xhcmVkLCBQYWNrYWdlQ29weXJp Z2h0VGV4dCw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkZpbGUgSW5m b3JtYXRpb24gVGFnczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPkZpbGVOYW1lLCBTUERYSUQsIEZpbGVDaGVja3N1bSwgTGljZW5zZUNvbmNsdWRlZCwg TGljZW5zZUluZm9JbkZpbGUsIEZpbGVDb3B5cmlnaHRUZXh0LDxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+U25pcHBldCBJbmZvcm1hdGlvbiBUYWdzOjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+U1BEWFJlZiwgRG9jdW1lbnRS ZWYsIFNuaXBwZXRCeXRlUmFuZ2UsIFNuaXBwZXRMaWNlbnNlQ29uY2x1ZGVkLCBTbmlwcGV0Q29w eXJpZ2h0VGV4dCw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkFubm90 YXRpb24gSW5mb3JtYXRpb24gVGFnczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPkFubm90YXRvcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPioqIE1hbmRhdG9yeSwgb25lIG9yIG1hbnkgaWYgRmlsZXNBbmFseXpl ZCBpcyB0cnVlIG9yIG9taXR0ZWQsIHplcm8gKG11c3QgYmUgb21pdHRlZCkgaWYgRmlsZXNBbmFs eXplZCBpcyBmYWxzZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5PcHRpb25hbCBwYXJhbWV0ZXJzOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+QmFzZWQgb24gMi4yIHNwZWMgdGhlIGZvbGxvd2luZyBmaWVsZHMg YW5kIHRhZ3MgYXJlIG9wdGlvbmFsIGluIHRoZSBzcGVjaWZpY2F0aW9uIGRvY3VtZW50LjxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+T3B0aW9uYWwgRG9jdW1lbnQgQ3Jl YXRpb24gSW5mb3JtYXRpb24gVGFnczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPkV4dGVybmFsRG9jdW1lbnRSZWYsIExpY2Vuc2VMaXN0VmVyc2lvbiwg Q3JlYXRvckNvbW1lbnQsIERvY3VtZW50Q29tbWVudDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5PcHRpb25hbCBQYWNrYWdlIEluZm9ybWF0aW9uIFRhZ3M6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5QYWNrYWdl VmVyc2lvbiwgUGFja2FnZUZpbGVOYW1lLCBQYWNrYWdlU3VwcGxpZXIsIFBhY2thZ2VPcmlnaW5h dG9yLCBGaWxlc0FuYWx5emVkLCBQYWNrYWdlQ2hlY2tzdW0sIFBhY2thZ2VIb21lUGFnZSwgUGFj a2FnZVNvdXJjZUluZm8sIFBhY2thZ2VMaWNlbnNlQ29tbWVudHMsIFBhY2thZ2VTdW1tYXJ5LCBQ YWNrYWdlRGVzY3JpcHRpb24sDQogUGFja2FnZUNvbW1lbnQsIEV4dGVybmFsUmVmLCBFeHRlcm5h bFJlZkNvbW1lbnQgKGNvbmRpdGlvbmFsIGZvciBlYWNoIEV4dGVybmFsUmVmKTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5PcHRpb25hbCBGaWxlIEluZm9y bWF0aW9uIFRhZ3M6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5GaWxlVHlwZSwgTGljZW5zZUNvbW1lbnRzLCBBcnRpZmFjdE9mUHJvamVjdE5hbWUsIEFy dGlmYWN0T2ZQcm9qZWN0SG9tZVBhZ2UsIEFydGlmYWN0T2ZQcm9qZWN0VVJJLCBGaWxlQ29tbWVu dCwgRmlsZU5vdGljZSwgRmlsZUNvbnRyaWJ1dG9yPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPk9wdGlvbmFsIFNuaXBwZXQgSW5mb3JtYXRpb24gVGFnczo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlNuaXBwZXRM aW5lUmFuZ2UsIExpY2Vuc2VJbmZvSW5TbmlwcGV0LCBTbmlwcGV0TGljZW5zZUNvbW1lbnRzLCBT bmlwcGV0Q29tbWVudCwgU25pcHBldE5hbWU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+T3B0aW9uYWwgT3RoZXIgTGljZW5zaW5nIEluZm9ybWF0aW9uIERl dGVjdGVkIFRhZ3M6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5MaWNlbnNlQ29tbWVudCwgTGljZW5zZUlEIFtDb25kaXRpb25hbCAobWFuZGF0b3J5LCBv bmUpIGlmIGxpY2Vuc2UgaXMgbm90IG9uIFNQRFggTGljZW5zZSBMaXN0XSwgRXh0cmFjdGVkVGV4 dCBbQ29uZGl0aW9uYWwgKE1hbmRhdG9yeSwgb25lKSBpZiB0aGVyZSBpcyBhIExpY2Vuc2UgSWRl bnRpZmllciBhc3NpZ25lZC5dLA0KIExpY2Vuc2VOYW1lIFtDb25kaXRpb25hbCAobWFuZGF0b3J5 LCBvbmUpIGlmIGxpY2Vuc2UgaXMgbm90IG9uIFNQRFggTGljZW5zZSBMaXN0Ll0sIExpY2Vuc2VD cm9zc1JlZmVyZW5jZSBbQ29uZGl0aW9uYWwgKG9wdGlvbmFsLCBvbmUgb3IgbW9yZSkgaWYgbGlj ZW5zZSBpcyBub3Qgb24gU1BEWCBMaWNlbnNlIExpc3QuXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5PcHRpb25hbCBSZWxhdGlvbnNoaXBzIGJldHdlZW4g U1BEWCBFbGVtZW50czo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPlJlbGF0aW9uc2hpcCwgUmVsYXRpb25zaGlwQ29tbWVudDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5PcHRpb25hbCBBbm5vdGF0aW9uIEluZm9y bWF0aW9uIFRhZ3M6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5Bbm5vdGF0b3IgW0NvbmRpdGlvbmFsIChNYW5kYXRvcnksIG9uZSksIGlmIHRoZXJlIGlz IGFuIEFubm90YXRpb25dLCBBbm5vdGF0aW9uRGF0ZSBbQ29uZGl0aW9uYWwgKE1hbmRhdG9yeSwg b25lKSwgaWYgdGhlcmUgaXMgYW4gQW5ub3RhdGlvbl0sIEFubm90YXRpb25UeXBlIFtDb25kaXRp b25hbCAoTWFuZGF0b3J5LCBvbmUpLA0KIGlmIHRoZXJlIGlzIGFuIEFubm90YXRpb25dLCBTUERY UkVGIFtDb25kaXRpb25hbCAoTWFuZGF0b3J5LCBvbmUpLCBpZiB0aGVyZSBpcyBhbiBBbm5vdGF0 aW9uXSwgQW5ub3RhdGlvbkNvbW1lbnQgW0NvbmRpdGlvbmFsIChNYW5kYXRvcnksIG9uZSksIGlm IHRoZXJlIGlzIGFuIEFubm90YXRpb25dPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+RW5jb2RpbmcgY29uc2lkZXJhdGlvbnM6IDhiaXQ8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlRoZSBzcGR4IG1lZGlhIHR5cGUg bXVzdCBzdXBwb3J0IFVURi04IGVuY29kaW5nLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj5TZWN1cml0eSBjb25zaWRlcmF0aW9uczo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlRoZSBFeHRlcm5hbFJlZiB0YWcg cHJvdmlkZXMgbGlua2FnZSB0byB0aGUgTlZEIHZpYSBDUEUuIERhdGEgY2FuIGJlIHN0b3JlZCBp biBzcGR4IGZpbGVzIHRoYXQgbWF5IGNvbnRhaW4gcHJpbnRmLXN0eWxlIGZvcm1hdCBjaGFyYWN0 ZXJzIHRoYXQgY291bGQgY2F1c2UgYSBwcm9ncmFtIHRvIGRpc3BsYXkgdW5pbnRlbmRlZA0KIGlu Zm9ybWF0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij5JbnRlcm9wZXJhYmlsaXR5IGNvbnNpZGVyYXRpb25zOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+VGhlIHNwZHggbWVkaWEgdHlwZSBjYW4gYmUgZGlz dHJpYnV0ZWQgZnJlZSBvZiBleHRlcm5hbCBzeXN0ZW1zIG9yIHByb2Nlc3NvcnMgYW5kIGlzIHJl cHJlc2VudGVkIGluIGEgaHVtYW4tcmVhZGFibGUgZm9ybWF0LiBUaGVyZSBhcmUgYWxzbyBpbnRl cm5ldCB0ZXh0LXByb2Nlc3NpbmcgYXBwbGljYXRpb25zIHRoYXQgbWF5DQogY29uc3VtZSB0aGVz ZSBkb2N1bWVudHMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPlB1Ymxpc2hlZCBzcGVjaWZpY2F0aW9uOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+Q3VycmVudCB2ZXJzaW9ucyBvZiB0aGUgc3BlY2lmaWNhdGlv biBpcyBhdmFpbGFibGUgYXQgaHR0cHM6Ly9zcGR4LmdpdGh1Yi5pby9zcGR4LXNwZWMvLiBIaXN0 b3JpY2FsIHZlcnNpb25zIGNhbiBiZSBmb3VuZCBhdA0KPGEgaHJlZj0iaHR0cHM6Ly9zcGR4Lm9y Zy9zcGVjaWZpY2F0aW9ucyI+aHR0cHM6Ly9zcGR4Lm9yZy9zcGVjaWZpY2F0aW9uczwvYT4uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkFwcGxpY2F0aW9u cyB3aGljaCB1c2UgdGhpcyBtZWRpYTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPkV4Y2hhbmdlIG9mIE1ldGFkYXRhIGZvciBzb2Z0d2FyZS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+RnJhZ21lbnQgaWRlbnRp ZmllciBjb25zaWRlcmF0aW9uczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPk4vQTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj5SZXN0cmljdGlvbnMgb24gdXNhZ2U6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5zcGR4IG1lZGlhIHR5cGVzIHNob3VsZCBvbmx5IGJlIGFz c29jaWF0ZWQgd2l0aCB2YWxpZGF0ZWQgU1BEWCBkb2N1bWVudHMgdGhhdCBmb2xsb3cgdGhlIFNQ RFggc3BlY2lmaWNhdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+UHJvdmlzaW9uYWwgcmVnaXN0cmF0aW9uPyAoc3RhbmRhcmRzIHRyZWUgb25seSk6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5OL0E8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+QWRkaXRpb25hbCBp bmZvcm1hdGlvbjo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+MS4gRGVwcmVjYXRlZCBhbGlhcyBuYW1lcyBmb3IgdGhpcyB0eXBlOiBOL0E8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjIuIE1hZ2ljIG51bWJlcihz KTogTi9BPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4z LiBGaWxlIGV4dGVuc2lvbihzKTogLnNwZHg8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDs7Y29sb3I6YmxhY2siPjQuIE1hY2ludG9zaCBmaWxlIHR5cGUgY29kZTogTi9BPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj41LiBPYmplY3QgSWRl bnRpZmllcnM6IE4vQTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5HZW5lcmFsIENvbW1lbnRzOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+U29mdHdhcmUgUGFja2FnZSBEYXRhIEV4Y2hhbmdlwq4gKFNQRFjCrikg aXMgYW4gb3BlbiBzdGFuZGFyZCBmb3IgY29tbXVuaWNhdGluZyBzb2Z0d2FyZSBiaWxsIG9mIG1h dGVyaWFsIGluZm9ybWF0aW9uIChpbmNsdWRpbmcgY29tcG9uZW50cywgbGljZW5zZXMsIGNvcHly aWdodHMsIGFuZCBzZWN1cml0eSByZWZlcmVuY2VzKS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+UGVyc29uIHRvIGNvbnRhY3QgZm9yIGZ1cnRoZXIgaW5m b3JtYXRpb246PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2si PjEuIE5hbWU6IFJvc2UgSnVkZ2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPjIuIEVtYWlsOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86cmp1ZGdlQHZtd2FyZS5jb20iPnJqdWRnZUB2 bXdhcmUuY29tPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5JbnRlbmRlZCB1c2FnZTogQ29tbW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj5JbnRlbmRlZCB0byBiZSB1c2VkIHRvIGVuYWJsZSBjb21wYW5p ZXMgYW5kIG9yZ2FuaXphdGlvbnMgdG8gc2hhcmUgaHVtYW4tcmVhZGFibGUgYW5kIG1hY2hpbmUt cHJvY2Vzc2FibGUgc29mdHdhcmUgcGFja2FnZSBtZXRhZGF0YSB0byBmYWNpbGl0YXRlIHNvZnR3 YXJlIHN1cHBseSBjaGFpbiBwcm9jZXNzZXMuIEFuIFNQRFgNCiBtZWRpYSB0eXBlIHdpbGwgYmUg YXNzb2NpYXRlZCB3aXRoIGEgcGFydGljdWxhciBzb2Z0d2FyZSBwYWNrYWdlIG9yIHNldCBvZiBw YWNrYWdlcyBhbmQgd2lsbCBjb250YWluIGluZm9ybWF0aW9uIGFib3V0IGl0IGluIHRoZSBTUERY IGZvcm1hdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2si PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ QXV0aG9yL0NoYW5nZSBjb250cm9sbGVyOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86a3N0ZXdhcnRAbGludXhmb3VuZGF0aW9u Lm9yZyI+a3N0ZXdhcnRAbGludXhmb3VuZGF0aW9uLm9yZzwvYT48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+ DQo8L2h0bWw+DQo= --_000_4045F0DFDD9742A19857C64566E84842vmwarecom_-- From nobody Sun Apr 5 07:35:08 2020 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 586E63A090F for ; Sat, 4 Apr 2020 11:55:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.622 X-Spam-Level: X-Spam-Status: No, score=-1.622 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.276, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G-jPoOWLigQ4 for ; Sat, 4 Apr 2020 11:55:18 -0700 (PDT) Received: from pechora2.lax.icann.org (pechora2.icann.org [192.0.33.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C14C83A090E for ; Sat, 4 Apr 2020 11:55:18 -0700 (PDT) Received: from v-smtpout1.han.skanova.net (v-smtpout1.han.skanova.net [81.236.60.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pechora2.lax.icann.org (Postfix) with ESMTPS id 25DA51E076A for ; Sat, 4 Apr 2020 18:55:17 +0000 (UTC) Received: from [192.168.8.101] ([37.250.166.15]) by cmsmtp with ESMTPA id KnwTjpxqzw0i3KnwUjD9Ca; Sat, 04 Apr 2020 20:54:55 +0200 To: Rose Judge , "ietf-types@iana.org" References: <4045F0DF-DD97-42A1-9857-C64566E84842@vmware.com> From: Henrik Andersson Openpgp: preference=signencrypt Message-ID: Date: Sat, 4 Apr 2020 20:54:52 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5 MIME-Version: 1.0 In-Reply-To: <4045F0DF-DD97-42A1-9857-C64566E84842@vmware.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4wfM2k4oDjw+Abir6hUxLoy6xdKvHYlmp1wfoQRvPZ5aQI0FacWIz7KXHn66jao0hQf9kt+5zIvOzzHZIUh7PmY2vmuO/Y9sIG7RJlVpRwpJ1WoAXI5har PZ4l2EgYINVAJKfDdimdX2QdUjjP13VEjd3959kDomJoZXofwOv0AqCaS5ih3tHWKJIPESEiv2y8NmalnXpAzTAaLpfTjulldsCHbF2MuOUSqVTv2tutRUxk Archived-At: X-Mailman-Approved-At: Sun, 05 Apr 2020 07:35:06 -0700 Subject: Re: [media-types] Community review for proposed 'spdx' media type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Apr 2020 18:55:21 -0000 Rose Judge wrote: > > Hello, > >   > > Please see below for application of proposed new media type: > >   > >   > > Name: Rose Judge > > Email: rjudge@vmware.com > >   > > Media type name: text > > Media subtype name: spdx > >   > > Required parameters: > > Based on 2.2 spec the following fields and tags are mandatory in the > specification document.  > >   > > Document Creation Information Tags: > > SPDXVersion, DataLicense, SPDXID, DocumentName, DocumentNamespace, > Creator, Created > >   > > Package Information Tags: > > PackageName, SPDXID, PackageDownloadLocation, FileName, > PackageVerificationCode**, PackageLicenseConcluded, > PackageLicenseInfoFromFiles**, PackageLicenseDeclared, > PackageCopyrightText,  > >   > > File Information Tags: > > FileName, SPDXID, FileChecksum, LicenseConcluded, LicenseInfoInFile, > FileCopyrightText,  > >   > > Snippet Information Tags: > > SPDXRef, DocumentRef, SnippetByteRange, SnippetLicenseConcluded, > SnippetCopyrightText,  > >   > > Annotation Information Tags: > > Annotator > >   > >   > > ** Mandatory, one or many if FilesAnalyzed is true or omitted, zero > (must be omitted) if FilesAnalyzed is false. > >   > >   > > Optional parameters: > > Based on 2.2 spec the following fields and tags are optional in the > specification document.  > >   > > Optional Document Creation Information Tags: > > ExternalDocumentRef, LicenseListVersion, CreatorComment, DocumentComment > >   > > Optional Package Information Tags: > > PackageVersion, PackageFileName, PackageSupplier, PackageOriginator, > FilesAnalyzed, PackageChecksum, PackageHomePage, PackageSourceInfo, > PackageLicenseComments, PackageSummary, PackageDescription, > PackageComment, ExternalRef, ExternalRefComment (conditional for each > ExternalRef) > >   > > Optional File Information Tags: > > FileType, LicenseComments, ArtifactOfProjectName, > ArtifactOfProjectHomePage, ArtifactOfProjectURI, FileComment, > FileNotice, FileContributor > >   > > Optional Snippet Information Tags: > > SnippetLineRange, LicenseInfoInSnippet, SnippetLicenseComments, > SnippetComment, SnippetName > >   > > Optional Other Licensing Information Detected Tags: > > LicenseComment, LicenseID [Conditional (mandatory, one) if license is > not on SPDX License List], ExtractedText [Conditional (Mandatory, one) > if there is a License Identifier assigned.], LicenseName [Conditional > (mandatory, one) if license is not on SPDX License List.], > LicenseCrossReference [Conditional (optional, one or more) if license > is not on SPDX License List.] > >   > > Optional Relationships between SPDX Elements: > > Relationship, RelationshipComment > >   > > Optional Annotation Information Tags: > > Annotator [Conditional (Mandatory, one), if there is an Annotation], > AnnotationDate [Conditional (Mandatory, one), if there is an > Annotation], AnnotationType [Conditional (Mandatory, one), if there is > an Annotation], SPDXREF [Conditional (Mandatory, one), if there is an > Annotation], AnnotationComment [Conditional (Mandatory, one), if there > is an Annotation] > >   > >   > > Encoding considerations: 8bit > > The spdx media type must support UTF-8 encoding. > >   > > Security considerations: > > The ExternalRef tag provides linkage to the NVD via CPE. Data can be > stored in spdx files that may contain printf-style format characters > that could cause a program to display unintended information. > >   > > Interoperability considerations: > > The spdx media type can be distributed free of external systems or > processors and is represented in a human-readable format. There are > also internet text-processing applications that may consume these > documents. > >   > > Published specification: > > Current versions of the specification is available at > https://spdx.github.io/spdx-spec/. Historical versions can be found at > https://spdx.org/specifications. > >   > > Applications which use this media: > > Exchange of Metadata for software. > >   > > Fragment identifier considerations: > > N/A > >   > > Restrictions on usage: > > spdx media types should only be associated with validated SPDX > documents that follow the SPDX specification. > >   > > Provisional registration? (standards tree only): > > N/A > >   > > Additional information: > >   > > 1. Deprecated alias names for this type: N/A > > 2. Magic number(s): N/A > > 3. File extension(s): .spdx > > 4. Macintosh file type code: N/A > > 5. Object Identifiers: N/A > >   > > General Comments: > > Software Package Data Exchange® (SPDX®) is an open standard for > communicating software bill of material information (including > components, licenses, copyrights, and security references). > >   > > Person to contact for further information: > >   > > 1. Name: Rose Judge > > 2. Email: rjudge@vmware.com > >   > > Intended usage: Common > > Intended to be used to enable companies and organizations to share > human-readable and machine-processable software package metadata to > facilitate software supply chain processes. An SPDX media type will be > associated with a particular software package or set of packages and > will contain information about it in the SPDX format. > >   > > Author/Change controller: kstewart@linuxfoundation.org > > >   > >   > >   > > > > _______________________________________________ > media-types mailing list > media-types@ietf.org > https://www.ietf.org/mailman/listinfo/media-types You seem to have misunderstood the purpose of required and optional parameters. They are not about the contents of the file. They are parameters attached to the media type designation as the file is transferred, stored and processed. From nobody Wed Apr 8 08:38:39 2020 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 576D13A0F01 for ; Wed, 8 Apr 2020 08:38:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oasis-open-org.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UFb3BQx_sQZO for ; Wed, 8 Apr 2020 08:38:33 -0700 (PDT) Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com [IPv6:2a00:1450:4864:20::533]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D6703A0EF4 for ; Wed, 8 Apr 2020 08:38:33 -0700 (PDT) Received: by mail-ed1-x533.google.com with SMTP id cf14so9075568edb.13 for ; Wed, 08 Apr 2020 08:38:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oasis-open-org.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=3HtUylubVY6ojzVdJAk/zrZcjTaGqvHxbYIe2T0MuI4=; b=oC/EkMvcqulRWYwCu4LrBMqHPYNKS0IZcfc5i7ljIJJAwDZneA45lVHe5VwonPa7me pBi4DPDnn5OAm1LxcbQMf901SCie7/aRe/EA4Ld7Vt13VE80ZOG+pDE35OePs/BY62hK jX32gvrKMTUxvv9DBY6WVxkXsvR6Y6Sh/3gI08/KYexnUND6K8DyBWoRRkultlKiyflX IjNiNgUM23glywGU5iNvleet/zlRQj0RyRVJpmD1O/VsxYS+O3+/oIbeJWlcX4uispVs 1RJ2dnxTlh1dqQnt+NAttEuncVQpPEyXn7m/U9zlfNdy5+yllyOtXx8e/UdRd+swYTJG 4GxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=3HtUylubVY6ojzVdJAk/zrZcjTaGqvHxbYIe2T0MuI4=; b=OR2yxwoQwej/IGy0q2nya/GKbMThAlmNDO1zLs5xiLg36TCpYaZQcZNMDVVzJpl0RI fanHOemZGQi5oA/DJj9Rywmb06bnbHpaH179X2H+VXacXkoabjECaBHrehCav2p3SgJR 71A0qU+2hhLOHfTeykyUxqEaHB5qgb1tQdLszq9qwt+yYFDjCqZubUF7bkR5lf3aO6v9 kdY3WQ6HpbKvaz2yPon6pVMwX8wP7Cb2FutaOVyHhOfW/aCD/xMPtnfZV9H4yNqVlp0W WfWDpdcdP+fAxdujFih5ChhVVuBdaREa6Z71EcH4u1woUB6aTMq9BRAtgNg5SvqCLI3K Cj2Q== X-Gm-Message-State: AGi0PuaxTJW9Ho+jyNhMzLkupr7v8+7GzU0aa+qFk8CkOOTwHov6EEWI oeivZwtFOh7k+6SCMF2uoXzjzAwAnrP6tI8nyExTLKHsZA== X-Google-Smtp-Source: APiQypKrrCvGi0HmbahXpZR6TdBNjHMcvz2YBBuuK1DX7AaQamABXa0jB9/LiKctUm7NJ1Qj0/FsV9Lrt2CiSoQIMvM= X-Received: by 2002:a17:906:344a:: with SMTP id d10mr7313604ejb.157.1586360310907; Wed, 08 Apr 2020 08:38:30 -0700 (PDT) MIME-Version: 1.0 From: Chet Ensign Date: Wed, 8 Apr 2020 11:38:20 -0400 Message-ID: To: media-types@ietf.org Cc: Bret Jordan Content-Type: multipart/alternative; boundary="000000000000d23e5105a2c94ae3" Archived-At: Subject: [media-types] Update to media type registration: application/stix+json X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2020 15:38:37 -0000 --000000000000d23e5105a2c94ae3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable The members of the OASIS Cyber Threat Intelligence Technical Committee have approved STIX Version 2.1 and wish to update the existing media type registration to reflect this change. This message contains the updated media-type registration from the IANA Considerations appendix of the spec ( https://docs.oasis-open.org/cti/stix/v2.1/cs01/stix-v2.1-cs01.html#_6aygoa1= w5oc6 ). The only change from the current registration is the update to the specification version number. Questions on the specification and this request can be submitted to Chet Ensign (chet.ensign@oasis-open.org) or, for technical details, to Bret Jordan (bret.jordan@broadcom.com), the specification's technical editor. =E2=80=94 Media type name: application Media subtype name: stix+json Required parameters: None Optional parameters: version This parameter is used to designate the specification version of STIX that is being used during HTTP content negotiation. Example: "application/stix+json;version=3D2.1". The parameter value is of the form 'n.m', where n is the major version and m the minor version, both unsigned integer values. Encoding considerations: binary Encoding considerations are identical to those specified for the "application/json" media type. See [RFC8259]. Security considerations: Security considerations relating to the generation and consumption of STIX messages are similar to application/json and are discussed in section 12 of [RFC8259]. Unicode is used to represent text such as descriptions in the format. The considerations documented by Unicode Technical Report #36: Unicode Security Considerations [UnicodeTR#36] should be taken into account. The STIX standard does not itself specify a transport mechanism for STIX documents. It is expected that TAXII is often used (which uses TLS via HTTPS). As there is no transport mechanism specified, it is up to the users of this to use an appropriately secured transport method. For example, TLS, JSON Web Encryption [RFC7516] and/or JSON Web Signature [RFC7515] can provide such mechanisms. Documents of "application/stix+json" are STIX based Cyber Threat Intelligence (CTI) documents. The documents may contain active or executable content as well as URLs, IP addresses, and domain names that are known or suspected to be malicious. Systems should thus take appropriate precautions before decoding any of this content, either for persistent storage or execution purposes. Such precautions may include measures such as de-fanging, sandboxing, or other measures. The samples included in STIX documents are reference samples only, and there is no provision or expectation in the specification that they will be loaded and/or executed. There are provisions in the specification to encrypt these samples so that even if a tool decodes the data, a further active step must be done before the payload will be "live". It is highly recommended that all active code be armored in this manner. STIX specifies the use of hashing and encryption mechanisms for some data types. A cryptography expert should be consulted when choosing which hashing or encryption algorithms to use to ensure that they do not have any security issues. STIX provides a graph-based data model. As such, STIX implementations should implement protections against graph queries that can potentially consume a significant amount of resources and prevent the implementation from functioning in a normal way. This specification also describes "STIX Patterning", a mechanism to describe and evaluate a search/match for data observed on systems and networks. Patterning is a grammar itself and includes PCRE regular expressions. Care should be taken when parsing and evaluating the grammar (particularly when evaluating PCRE from unknown or untrusted sources) as they can potentially consume a significant amount of resources. Privacy considerations: These considerations are, in part, derived from Section 10 of the Resource-Oriented Lightweight Information Exchange [RFC8322]. Documents may include highly confidential, personal (PII), and/or classified information. There are methods in the standard for marking elements of the document such that the consumer knows of these limitations. These markings may not always be used. For example, an out-of-band agreement may cover and restrict sharing. Just because a document is not marked as containing information that should not be shared does not mean that a document is free for sharing. It may be the case that a legal agreement has been entered into between the parties sharing documents, and that each party understands and follows their obligations under that agreement as well as any applicable laws or regulations. Adoption of the information-sharing approach described in this document will enable users to more easily perform correlations across separate, and potentially unrelated, cybersecurity information providers. A client may succeed in assembling a data set that would not have been permitted within the context of the authorization policies of either provider when considered individually. Thus, providers may face a risk of an attacker obtaining an access that constitutes an undetected separation of duties (SOD) violation. It is important to note that this risk is not unique to this specification, and a similar potential for abuse exists with any other cybersecurity information-sharing protocol. Interoperability considerations: The STIX specification specifies the format of conforming messages and the interpretation thereof. In addition, the OASIS Cyber Threat Intelligence (CTI) Technical Committee has defined interoperability tests to ensure conforming products and solutions can exchange STIX documents. Published specification: STIX Version 2.1 OASIS Committee Specification 01 http://docs.oasis-open.org/cti/stix/v2.1/cs01/stix-v2.1-cs01.html Cited in the "OASIS Standards" document: https://www.oasis-open.org/standards#oasiscommiteespecs, from https://www.oasis-open.org/standards#stix2.1 Applications which use this media: Structured Threat Information Expression (STIX) is a language and serialization format used to exchange cyber threat intelligence (CTI) such as Threat Actors, Campaigns, Intrusion Sets, Attack Patterns, Indicators of Compromise, etc. STIX enables organizations to share CTI with one another in a consistent and machine-readable manner, allowing security communities to better understand what computer-based attacks they are most likely to see and to anticipate and/or respond to those attacks faster and more effectively. STIX is designed to improve many different capabilities, such as collaborative threat analysis, automated threat exchange, automated detection and response, and more. Fragment identifier considerations: None Restrictions on usage: None Additional information: 1. Deprecated alias names for this type: application/vnd.oasis.stix+json 2. Magic number(s): n/a [RFC8259] 3. File extension(s): stix 4. Macintosh file type code: TEXT [RFC8259] 5. Object Identifiers: None Person and email to contact for further information: Chet Ensign ( chet.ensign@oasis-open.org) Intended usage: COMMON Author: OASIS Cyber Threat Intelligence (CTI) Technical Committee; URI reference: http://www.oasis-open.org/committees/cti/. Change controller: OASIS Provisional registration: No --=20 /chet ---------------- Chet Ensign Chief Technical Community Steward OASIS: Advancing open source & open standards for the information society http://www.oasis-open.org Mobile: +1 201-341-1393 --000000000000d23e5105a2c94ae3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
The members of the OASIS Cyber Threat Intelligence Technic= al Committee have approved STIX Version 2.1 and wish to update the existing= media type registration to reflect this change.

This message contai= ns the updated media-type registration from the IANA Considerations appendi= x of the spec (https://docs.oasis-open.org/cti/stix/v2.1/= cs01/stix-v2.1-cs01.html#_6aygoa1w5oc6).

The only change from th= e current registration is the update to the specification version number. <= br>
Questions on the specification and this request can be submitted to = Chet Ensign (chet.ensign@oasi= s-open.org) or, for technical details, to Bret Jordan (bret.jordan@broadcom.com), the specificatio= n's technical editor.

=E2=80=94

Media type name: =C2=A0ap= plication

Media subtype name: =C2=A0stix+json

Required parame= ters: =C2=A0None

Optional parameters: =C2=A0version

This para= meter is used to designate the specification version of STIX that is being = used during HTTP content negotiation. Example: "application/stix+json;= version=3D2.1". The parameter value is of the form 'n.m', wher= e n is the major version and m the minor version, both unsigned integer val= ues.

Encoding considerations: =C2=A0binary

Encoding considera= tions are identical to those specified for the "application/json"= media type. See [RFC8259].

Security considerations:

Security= considerations relating to the generation and consumption of STIX messages= are similar to application/json and are discussed in section 12 of [RFC825= 9].

Unicode is used to represent text such as descriptions in the fo= rmat. The considerations documented by Unicode Technical Report #36: Unicod= e Security Considerations [UnicodeTR#36] should be taken into account.
<= br>The STIX standard does not itself specify a transport mechanism for STIX= documents. It is expected that TAXII is often used (which uses TLS via HTT= PS). As there is no transport mechanism specified, it is up to the users of= this to use an appropriately secured transport method. For example, TLS, J= SON Web Encryption [RFC7516] and/or JSON Web Signature [RFC7515] can provid= e such mechanisms.

Documents of "application/stix+json" ar= e STIX based Cyber Threat Intelligence (CTI) documents. The documents may c= ontain active or executable content as well as URLs, IP addresses, and doma= in names that are known or suspected to be malicious. Systems should thus t= ake appropriate precautions before decoding any of this content, either for= persistent storage or execution purposes. Such precautions may include mea= sures such as de-fanging, sandboxing, or other measures. The samples includ= ed in STIX documents are reference samples only, and there is no provision = or expectation in the specification that they will be loaded and/or execute= d. There are provisions in the specification to encrypt these samples so th= at even if a tool decodes the data, a further active step must be done befo= re the payload will be "live". It is highly recommended that all = active code be armored in this manner.

STIX specifies the use of has= hing and encryption mechanisms for some data types. A cryptography expert s= hould be consulted when choosing which hashing or encryption algorithms to = use to ensure that they do not have any security issues.

STIX provid= es a graph-based data model. As such, STIX implementations should implement= protections against graph queries that can potentially consume a significa= nt amount of resources and prevent the implementation from functioning in a= normal way.

This specification also describes "STIX Patterning= ", a mechanism to describe and evaluate a search/match for data observ= ed on systems and networks. Patterning is a grammar itself and includes PCR= E regular expressions. Care should be taken when parsing and evaluating the= grammar (particularly when evaluating PCRE from unknown or untrusted sourc= es) as they can potentially consume a significant amount of resources.
<= br>Privacy considerations:

These considerations are, in part, derive= d from Section 10 of the Resource-Oriented Lightweight Information Exchange= [RFC8322].

Documents may include highly confidential, personal (PII= ), and/or classified information. There are methods in the standard for mar= king elements of the document such that the consumer knows of these limitat= ions. These markings may not always be used. For example, an out-of-band ag= reement may cover and restrict sharing. Just because a document is not mark= ed as containing information that should not be shared does not mean that a= document is free for sharing. It may be the case that a legal agreement ha= s been entered into between the parties sharing documents, and that each pa= rty understands and follows their obligations under that agreement as well = as any applicable laws or regulations.

Adoption of the information-s= haring approach described in this document will enable users to more easily= perform correlations across separate, and potentially unrelated, cybersecu= rity information providers. A client may succeed in assembling a data set t= hat would not have been permitted within the context of the authorization p= olicies of either provider when considered individually. Thus, providers ma= y face a risk of an attacker obtaining an access that constitutes an undete= cted separation of duties (SOD) violation. It is important to note that thi= s risk is not unique to this specification, and a similar potential for abu= se exists with any other cybersecurity information-sharing protocol.
Interoperability considerations:

The STIX specification specifies t= he format of conforming messages and the interpretation thereof. In additio= n, the OASIS Cyber Threat Intelligence (CTI) Technical Committee has define= d interoperability tests to ensure conforming products and solutions can ex= change STIX documents.

Published specification:

STIX Version = 2.1 OASIS Committee Specification 01

http://docs.oasis-open.org/c= ti/stix/v2.1/cs01/stix-v2.1-cs01.html

Cited in the "OASIS S= tandards" document:

https://www.oasis-open.org/standards#oasiscommitee= specs, from

https://www.oasis-open.org/standards#stix2.1

Applications w= hich use this media:

Structured Threat Information Expression (STIX)= is a language and serialization format used to exchange cyber threat intel= ligence (CTI) such as Threat Actors, Campaigns, Intrusion Sets, Attack Patt= erns, Indicators of Compromise, etc. STIX enables organizations to share CT= I with one another in a consistent and machine-readable manner, allowing se= curity communities to better understand what computer-based attacks they ar= e most likely to see and to anticipate and/or respond to those attacks fast= er and more effectively. STIX is designed to improve many different capabil= ities, such as collaborative threat analysis, automated threat exchange, au= tomated detection and response, and more.

Fragment identifier consid= erations: =C2=A0None

Restrictions on usage: =C2=A0None

Additi= onal information:

1. Deprecated alias names for this type: applicati= on/vnd.oasis.stix+json

2. Magic number(s): n/a [RFC8259]

3. F= ile extension(s): stix

4. Macintosh file type code: TEXT [RFC8259]
5. Object Identifiers: None

Person and email to contact for fu= rther information: =C2=A0Chet Ensign (chet.ensign@oasis-open.org)

Intended usage: =C2=A0COMMO= N

Author:

OASIS Cyber Threat Intelligence (CTI) Technical Com= mittee;

URI reference: http://www.oasis-open.org/committees/cti/.

Change contr= oller: =C2=A0OASIS

Provisional registration: =C2=A0No

--

/chet=C2=A0
----------------
Chet Ensign
Chief Technical Community Steward
OASIS: Advancing open sou= rce & open standards for the information society
http://www.oasis-open.org

Mobile: +1 201-341-1393=C2=A0
--000000000000d23e5105a2c94ae3-- From nobody Thu Apr 9 11:34:19 2020 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7F443A0B8C for ; Thu, 9 Apr 2020 11:34:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.232 X-Spam-Level: X-Spam-Status: No, score=-1.232 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oasis-open-org.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gIFbQ95HxZK5 for ; Thu, 9 Apr 2020 11:34:15 -0700 (PDT) Received: from pechora1.lax.icann.org (pechora1.icann.org [IPv6:2620:0:2d0:201::1:71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DF683A0B87 for ; Thu, 9 Apr 2020 11:34:14 -0700 (PDT) Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pechora1.lax.icann.org (Postfix) with ESMTPS id 3DA401E0AF9 for ; Thu, 9 Apr 2020 18:34:14 +0000 (UTC) Received: by mail-ed1-x531.google.com with SMTP id z65so1170269ede.0 for ; Thu, 09 Apr 2020 11:34:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oasis-open-org.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=xLpOP/3MiuFK76P8kYZ5aki/s6aKqDra4g9WtmW3NPQ=; b=NG5y+MOaT9X5kl64Tf+N+g5SEdxv77XzRMfNcTbqACwdSd1RAcBVjqBYIrnLN00BUd +4z2vXkPEpK74hbTWufmU6RRi3gX59ZImqglSg+ZUeprmDeOw8eEdlpF/8ffXAnJuwrP Goe/YTHEJPdpQdCaQXdoF9i3DVCGNkF4vKv06jwO5RVyHACo9nz3/t2kPSUTjdbNyV4i TMZ6935UUUXu++R9Dr/NpnW4Y3t4dpgYbEUaoTPy4nTfc8veDDIv59kmvqjiPP5+/h9v Pps/yVLQUW/BkESkr0+viDuI0rVMms19N6XBE2xXVIfMXmDyuR/CPDL8W+FDYxXTz2WA Tq7g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=xLpOP/3MiuFK76P8kYZ5aki/s6aKqDra4g9WtmW3NPQ=; b=NAz3yYszhZWYty24lTzkB0VtRpNvrRHxNdGbp9c8W+tRGXoHu22lHPjM3zHFn8ijpv Y92t16CpGp5QH8YAx6gfGhLaoNJ4G48yhXL7J0yPgFaLhNOlwPsoQVF3jfcStwg8yFK9 1Ycwp9ru39KODAt5j5VyX4vT+yW5ViEr4N/iNcsVukBf+N60YPx8LRA37zJHEIeQauIS HlfH15DnIti20TzAqLk0qFJrWH9HLeMowjye3AzF54juHHrvzgdcYsmCkZXoSTrl/+xJ lXAGrPKP4YQFYBxThVXdSWFIcqPp43s4T51tCBSczGdDdV9OF8ikACEGJxL+b/aziftq wtdA== X-Gm-Message-State: AGi0PuYihA2A6YUNOQvaQagIEpW7wBbJ/CQEscDLcm35wK4qxFcO8Hdv 1cvdbM1swmE62l98vvStWIiodWCNE4gQreCgoAV5iO+RBg== X-Google-Smtp-Source: APiQypLdAyUWgJXjKtsEUYJikIeOAgGNHHK7OU0gvYwQj+h4vBgO93BCWsWx4sV5u+VNsEmfIBYKvgQW2BtlmHyT0SQ= X-Received: by 2002:a05:6402:1655:: with SMTP id s21mr1333833edx.295.1586457233018; Thu, 09 Apr 2020 11:33:53 -0700 (PDT) MIME-Version: 1.0 From: Chet Ensign Date: Thu, 9 Apr 2020 14:33:42 -0400 Message-ID: To: media-types@iana.org Cc: mikefan@microsoft.com, "Larry Golding (Myriad Consulting Inc)" Content-Type: multipart/alternative; boundary="000000000000d37dbe05a2dfdbd0" Archived-At: Subject: [media-types] Notice of request for media-type registration: application/sarif+json X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 18:34:17 -0000 --000000000000d37dbe05a2dfdbd0 Content-Type: text/plain; charset="UTF-8" Members of the OASIS Static Analysis Results Interchange Format (SARIF) Technical Committee wish to register a media type associated with the recently-approved SARIF Version 2.1.0 OASIS Standard. We post the registration request form here for review before submitting it to IANA. I am the administrative contact for OASIS for IANA registration requests. The technical contacts for this request are Michael Fanning ( mikefan@microsoft.com) and Laurence Golding (v-lgold@microsoft.com). They are tasked by the OASIS SARIF TC to provide any additional information or answers to questions that you may have. Thank you in advance for your comments and feedback. /chet ensign OASIS Open, Inc. IETF RFC6838 Section 5.6. Registration Template https://tools.ietf.org/html/rfc6838#section-5.6 --- Type name: application Subtype name: sarif+json Required parameters: N/A Optional parameters: N/A Encoding considerations: UTF8 only Security considerations: - The use of absolute paths in analysis result location URIs might reveal sensitive information about the machine on which the scan was performed. - The use of the hostname component in analysis result location URI might reveal the network location of the machine on which the scan was performed. - The use of raw HTML in message strings expressed in Markdown might allow arbitrary code execution (for example, through javascript: links). - The use of deeply nested constructs in Markdown message strings might lead to stack overflow in some Markdown implementations. - Certain properties of the SARIF object model might reveal information about the machine on which a scan was run. (The specification allows such properties to be omitted or "redacted".) - Certain properties of the SARIF object model (such as the command line that invoked the analysis tool) can contain arbitrary commands which might damage a machine on which they are run. Interoperability considerations: N/A Published specification: Static Analysis Results Interchange Format (SARIF) Version 2.1.0. Edited by Michael C. Fanning and Laurence J. Golding. 27 March 2020. OASIS Standard. https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.html. Latest stage: https://docs.oasis-open.org/sarif/sarif/v2.1.0/sarif-v2.1.0.html. Applications that use this media type: The following list is not exhaustive: - Static analysis tools - Static analysis results visualization tools (viewers) - Bug filing tools - Defect databases - Compliance systems Fragment identifier considerations: N/A Additional information: Deprecated alias names for this type: N/A Magic number(s): N/A File extension(s): .sarif, .sarif.json Macintosh file type code(s): N/A Person & email address to contact for further information: Michael C. Fanning (mikefan@microsoft.com), Laurence J. Golding ( v-lgold@microsoft.com), and Chet Ensign (chet.ensign@oasis-open.org) Intended usage: LIMITED USE Restrictions on usage: N/A Author: OASIS Static Analysis Results Interchange Format (SARIF) TC ( https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=sarif) Change controller: OASIS Open (https://www.oasis-open.org/) Provisional registration? (standards tree only): No -- /chet ---------------- Chet Ensign Chief Technical Community Steward OASIS: Advancing open source & open standards for the information society http://www.oasis-open.org Mobile: +1 201-341-1393 --000000000000d37dbe05a2dfdbd0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Members of the OASIS Static Analysis Results Interchange F= ormat (SARIF) Technical Committee wish to register a media type associated = with the recently-approved SARIF Version 2.1.0 OASIS Standard. We post the = registration request form here for review before submitting it to IANA.
I am the administrative contact for OASIS for IANA registration reques= ts. The technical contacts for this request are Michael Fanning (mikefan@microsoft.com) and Laurence Gold= ing (v-lgold@microsoft.com). T= hey are tasked by the OASIS SARIF TC to provide any additional information = or answers to questions that you may have.

Thank you in advance for= your comments and feedback.

/chet ensign
OASIS Open, Inc.
IETF RFC6838 Section 5.6. Registration Template
https://tools.ietf.org/html/rfc6838#s= ection-5.6

---

Type name: application

Subtype name= : sarif+json

Required parameters: N/A

Optional parameters: N/= A

Encoding considerations: UTF8 only

Security considerations= :

- The use of absolute paths in analysis result location URIs might= reveal sensitive information about the machine on which the scan was perfo= rmed.
- The use of the hostname component in analysis result location UR= I might reveal the network location of the machine on which the scan was pe= rformed.
- The use of raw HTML in message strings expressed in Markdown = might allow arbitrary code execution (for example, through javascript: link= s).
- The use of deeply nested constructs in Markdown message strings mi= ght lead to stack overflow in some Markdown implementations.
- Certain p= roperties of the SARIF object model might reveal information about the mach= ine on which a scan was run. (The specification allows such properties to b= e omitted or "redacted".)
- Certain properties of the SARIF ob= ject model (such as the command line that invoked the analysis tool) can co= ntain arbitrary commands which might damage a machine on which they are run= .

Interoperability considerations: N/A

Published specificatio= n:

Static Analysis Results Interchange Format (SARIF) Version 2.1.0= . Edited by Michael C. Fanning and Laurence J. Golding. 27 March 2020. OASI= S Standard. https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif= -v2.1.0-os.html. Latest stage: https://docs.oasis-open.org/sarif/sari= f/v2.1.0/sarif-v2.1.0.html.

Applications that use this media typ= e:

The following list is not exhaustive:

- Static analysis t= ools
- Static analysis results visualization tools (viewers)
- Bug fi= ling tools
- Defect databases
- Compliance systems

Fragment id= entifier considerations: N/A

Additional information:

=C2=A0 D= eprecated alias names for this type: N/A
=C2=A0 Magic number(s): N/A
= =C2=A0 File extension(s): .sarif, .sarif.json
=C2=A0 Macintosh file type= code(s): N/A

Person & email address to contact for further info= rmation:=C2=A0

Michael C. Fanning (mikefan@microsoft.com), Laurence J. Golding (v-lgold@microsoft.com), and Chet Ens= ign (chet.ensign@oasis-open.o= rg)

Intended usage: LIMITED USE

Restrictions on usage: N/= A

Author:

OASIS Static Analysis Results Interchange Format (= SARIF) TC (https://www.oasis-open.org/committees/tc_home.php?wg_abbrev= =3Dsarif)

Change controller:

OASIS Open (https://www.oasis-open.org/)

Provisiona= l registration? (standards tree only): No

-= -
=

/chet=C2=A0
----------------
Chet Ens= ign
Chief Techni= cal Community Steward
OASIS: Advancing open source & open sta= ndards for the information society
http://www.oasis-open.org

= Mobile: +1 201-341-1393=C2=A0
--000000000000d37dbe05a2dfdbd0-- From nobody Fri Apr 10 08:35:37 2020 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B2773A0E05 for ; Thu, 9 Apr 2020 13:41:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.266 X-Spam-Level: X-Spam-Status: No, score=-2.266 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.168, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_FAIL=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=vmware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sMz_5iYCxzfW for ; Thu, 9 Apr 2020 13:41:46 -0700 (PDT) Received: from pechora8.dc.icann.org (pechora8.icann.org [192.0.46.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 629183A0E04 for ; Thu, 9 Apr 2020 13:41:46 -0700 (PDT) Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10on2064.outbound.protection.outlook.com [40.107.92.64]) (using TLSv1.2 with cipher AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pechora8.dc.icann.org (Postfix) with ESMTPS id 4CC4CC0E53 for ; Thu, 9 Apr 2020 20:41:45 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=X7YAifPyDvWHkEW7JuJbbSz9XF0aaGMJjIRstRBZQFnuxcP+1Z9CZ5lLyB3Z/dnbz1bjsh6P0QBMHg3o+3KdpbMXgc0itg6FbTNDx27EhVzAGS7XBXK2KUqYvruFHJ+rpatycJYB3YxCR+WAaOKecynNP4+eCYLfIFEfze90LTWVKyU0O2HzfVYA+lEZHChh07nm2iGzHjkvGzIKnZ3e71vLpLjYpus3fOGnXKaA1WR4d1rpXEsC2P1UuBoo1sFYXfYbF1NDunGzwUbOzIfHLRWWdxH8ZL/T44dt4K2YuubJ6nouy9+X1i0+DcR/zaupJ0YCoFY10Epn/6PcBdhYfw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eVETsAOVYn62q/dM5uReHr/OMn5FydSF0UrGR+Z89XA=; b=d5Mpte9SMXj2deRI4ovTQikEfDw4z5Db9Qt6z7VeKL6H1iRB4p0eQWcDASR9XG6ELioYo0ZwF9LGdEPHh39djKP6f7e0BkqA03hU+N/67VPyXsxnnR+68m4IncuC3KRadCpKRKOpe+i/ERMWn/EHvh1gQ9rBYPv3XdT/abiqMGb9vksxajZWcOKo9zlG42OC8gv9dO8PRIDXgU3uS75/tvkQEOwQcQalljT12TnebbB7rg7JZc/0GBEzZIOnD5AUcKwVYq1MQ1Mjq7Z3Hq+tPlKGfQuDZHIbtGzyR22jrMigJdP1lba/OOOK99LyYEHHV8ZTNvLqX7EoDhtcr7eSrQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eVETsAOVYn62q/dM5uReHr/OMn5FydSF0UrGR+Z89XA=; b=OCDjGRe4sIxvxn9zi54GNmN0mcgTC2BrSrKrQhNParPkLUSntKSYUGn8cSKNsLu07OVroqM4p51eO+1bNp6BjSvCy7/zoiGwf8K1oNmdZ7a0SYN56HrexH1dtM59/RJFB8Q6llhD4sNIPQ3JDAsz2++2JkM1wPRad8BjtdHf9XE= Received: from MWHPR05MB2815.namprd05.prod.outlook.com (2603:10b6:300:5f::18) by MWHPR05MB3280.namprd05.prod.outlook.com (2603:10b6:300:b5::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2900.13; Thu, 9 Apr 2020 20:41:22 +0000 Received: from MWHPR05MB2815.namprd05.prod.outlook.com ([fe80::1d6f:ac70:4115:606e]) by MWHPR05MB2815.namprd05.prod.outlook.com ([fe80::1d6f:ac70:4115:606e%11]) with mapi id 15.20.2900.015; Thu, 9 Apr 2020 20:41:22 +0000 From: Rose Judge To: Henrik Andersson , "ietf-types@iana.org" Thread-Topic: [media-types] Community review for proposed 'spdx' media type Thread-Index: AQHWCTzt6YlijS0e00utXiVY/6C/uKhpUpEAgAeEEQA= Date: Thu, 9 Apr 2020 20:41:22 +0000 Message-ID: <30F09CC3-41AE-447F-A177-2A983332D488@vmware.com> References: <4045F0DF-DD97-42A1-9857-C64566E84842@vmware.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.35.20030802 authentication-results: spf=none (sender IP is ) smtp.mailfrom=rjudge@vmware.com; x-originating-ip: [64.98.17.25] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e23f67c1-f29c-4134-c725-08d7dcc65d8b x-ms-traffictypediagnostic: MWHPR05MB3280: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:2803; x-forefront-prvs: 0368E78B5B x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR05MB2815.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(366004)(396003)(136003)(376002)(346002)(39860400002)(81156014)(33656002)(91956017)(83080400001)(45080400002)(26005)(110136005)(76116006)(66574012)(186003)(66946007)(36756003)(86362001)(478600001)(966005)(6506007)(2616005)(8936002)(8676002)(6486002)(316002)(66556008)(66476007)(66446008)(5660300002)(71200400001)(6512007)(64756008)(2906002)(81166007); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: vmware.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 9mBpIhfLPyNdxqsuao9GDN9aimIgtexuIMtjXrNW+zjGaUFZpdZ96JRbVRszCtsgYiHPj/OOeRgAcpSe8SKZFQCWZNk70AaahekBwBVb4jZ2Kf3DSWdzq/8bz2i2+PDz98ewF642nzNh9XqykeFl1AKGTMVa4u+5r5anaWgpy/ZpwdT4cew1dutfWMsWhFypzlULbYukO5ewBUvaxZ77DUr89SNJpiUqQerrYsIKe0JU7cbJyWLmnGQVHmzgrsOD6Hv25uM8I/YiQHBJtcwGPBNbx6CU50hNbN8+gJSBH+5eXr56YZiuM0rYh2SZ2nfntRwOEOlMjePVMBR0qoCCTHHzyh+W/l2yAzWUWu43Z0N2cq11ogAAM68Ucpn1/+q0yHRo8fQO39rlBJmqvpKiIVb9Gtu+5hPV0rtke+eG/R5+XWZJLNcw2FrS1UMxjujO4ZhvJ8DXPrJ3N4XRYha2v0o7RU7fZQ9uGeU2sZf6u57rv1Yah3Eo31Hhc14t0b7hXPZch8VAnYGvljhEcmiP8A== x-ms-exchange-antispam-messagedata: YHngeP4YSErznmsISATuT+kJ3AthSyfBedtvSR3IU3TuI6+MGhY5RBiatiNh9Nxb8NR5+DaTxz7hIjru0FR6REpXMiPI/Mx1AH+s7iSM28RgN/+TfCqvRm/5FUffJaE9trsk27l0fpczoMeCtNsQAA== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <9C383C6F0CF52444AA6BA52F75714027@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-Network-Message-Id: e23f67c1-f29c-4134-c725-08d7dcc65d8b X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2020 20:41:22.6401 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: AeMdHQ15RJ6SVzPe+N/d0oUPN5Lz/4goXM71sCgGDn7CvBNq2ZBg1KoLqlvQQd/Q3J68OLmlZ/U/OOOxHYoXFw== X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.2 (pechora8.dc.icann.org [192.0.46.74]); Thu, 09 Apr 2020 20:41:45 +0000 (UTC) X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3280 Archived-At: X-Mailman-Approved-At: Fri, 10 Apr 2020 08:35:35 -0700 Subject: Re: [media-types] Community review for proposed 'spdx' media type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 20:41:48 -0000 ICAgPj4+ICBZb3Ugc2VlbSB0byBoYXZlIG1pc3VuZGVyc3Rvb2QgdGhlIHB1cnBvc2Ugb2YgcmVx dWlyZWQgYW5kIG9wdGlvbmFsDQogICAgPj4+IHBhcmFtZXRlcnMuIFRoZXkgYXJlIG5vdCBhYm91 dCB0aGUgY29udGVudHMgb2YgdGhlIGZpbGUuIFRoZXkgYXJlDQogICAgPj4+IHBhcmFtZXRlcnMg YXR0YWNoZWQgdG8gdGhlIG1lZGlhIHR5cGUgZGVzaWduYXRpb24gYXMgdGhlIGZpbGUgaXMNCiAg ICA+Pj4gdHJhbnNmZXJyZWQsIHN0b3JlZCBhbmQgcHJvY2Vzc2VkLg0KDQpUaGFua3MgZm9yIHBv aW50aW5nIHRoaXMgb3V0LCBIZW5yaWsuIEkgd2lsbCByZXZpc2Ugb3VyIGFuc3dlciBmb3IgdGhp cyBxdWVzdGlvbi4gSSB0b29rIGJldHRlciBsb29rIGF0IHRoZSBUZXh0IE1lZGlhIFR5cGVzIElu Zm8gYW5kICBOZXcgUnVsZXMgZm9yIERlZmF1bHQg4oCcY2hhcnNldOKAnSBQYXJhbWV0ZXIgVmFs dWVzIGZvciDigJx0ZXh0LyrigJ0gTWVkaWEgVHlwZXMgc2VjdGlvbnMgYW5kIGl0IHNlZW1zIGxp a2UgaXQgYm9pbHMgZG93biB0byB0aGUgZm9sbG93aW5nLCBpbiB3aGljaCBjYXNlIHRoZSBzcGR4 IG1lZGlhIHR5cGUgd291bGQgcXVhbGlmeSBhcyBhIHR5cGUgd2hlcmUgdGhlIGNoYXJzZXQgaW5m b3JtYXRpb24gaXMgdHJhbnNwb3J0ZWQgaW5zaWRlIHRoZSBwYXlsb2FkLiBJbiB0aGlzIGNhc2Us IGRvIEkganVzdCBsZWF2ZSB0aGUgUmVxdWlyZWQvT3B0aW9uYWwgcGFyYW1ldGVyIGZpZWxkcyB3 aXRoIE4vQT8NCg0KPT09PQ0KSW4gb3JkZXIgdG8gaW1wcm92ZSBpbnRlcm9wZXJhYmlsaXR5IHdp dGggZGVwbG95ZWQgYWdlbnRzLCAidGV4dC8qIg0KICAgbWVkaWEgdHlwZSByZWdpc3RyYXRpb25z IFNIT1VMRCBlaXRoZXINCiANCiAgIGEuICBzcGVjaWZ5IHRoYXQgdGhlICJjaGFyc2V0IiBwYXJh bWV0ZXIgaXMgbm90IHVzZWQgZm9yIHRoZSBkZWZpbmVkDQogICAgICAgc3VidHlwZSwgYmVjYXVz ZSB0aGUgY2hhcnNldCBpbmZvcm1hdGlvbiBpcyB0cmFuc3BvcnRlZCBpbnNpZGUNCiAgICAgICB0 aGUgcGF5bG9hZCAoc3VjaCBhcyBpbiAidGV4dC94bWwiKSwgb3INCiANCiAgIGIuICByZXF1aXJl IGV4cGxpY2l0IHVuY29uZGl0aW9uYWwgaW5jbHVzaW9uIG9mIHRoZSAiY2hhcnNldCINCiAgICAg ICBwYXJhbWV0ZXIsIGVsaW1pbmF0aW5nIHRoZSBuZWVkIGZvciBhIGRlZmF1bHQgdmFsdWUuDQog DQogICBJbiBhY2NvcmRhbmNlIHdpdGggb3B0aW9uIChhKSBhYm92ZSwgcmVnaXN0cmF0aW9ucyBm b3IgInRleHQvKiIgbWVkaWENCiAgIHR5cGVzIHRoYXQgY2FuIHRyYW5zcG9ydCBjaGFyc2V0IGlu Zm9ybWF0aW9uIGluc2lkZSB0aGUgY29ycmVzcG9uZGluZw0KICAgcGF5bG9hZHMgKHN1Y2ggYXMg InRleHQvaHRtbCIgYW5kICJ0ZXh0L3htbCIpIFNIT1VMRCBOT1Qgc3BlY2lmeSB0aGUNCiAgIHVz ZSBvZiBhICJjaGFyc2V0IiBwYXJhbWV0ZXIsIG5vciBhbnkgZGVmYXVsdCB2YWx1ZSwgaW4gb3Jk ZXIgdG8NCiAgIGF2b2lkIGNvbmZsaWN0aW5nIGludGVycHJldGF0aW9ucyBzaG91bGQgdGhlICJj aGFyc2V0IiBwYXJhbWV0ZXINCiAgIHZhbHVlIGFuZCB0aGUgdmFsdWUgc3BlY2lmaWVkIGluIHRo ZSBwYXlsb2FkIGRpc2FncmVlLg0KPT09PQ0KDQpUaGFua3MsDQpSb3NlDQoNCiAgICANCg0K77u/ T24gNC80LzIwLCAxMTo1NiBBTSwgIkhlbnJpayBBbmRlcnNzb24iIDxoZW5rZUBoZW5rZTM3LmNq Yi5uZXQ+IHdyb3RlOg0KDQogICAgUm9zZSBKdWRnZSB3cm90ZToNCiAgICA+DQogICAgPiBIZWxs bywNCiAgICA+DQogICAgPiAgDQogICAgPg0KICAgID4gUGxlYXNlIHNlZSBiZWxvdyBmb3IgYXBw bGljYXRpb24gb2YgcHJvcG9zZWQgbmV3IG1lZGlhIHR5cGU6DQogICAgPg0KICAgID4gIA0KICAg ID4NCiAgICA+ICANCiAgICA+DQogICAgPiBOYW1lOiBSb3NlIEp1ZGdlDQogICAgPg0KICAgID4g RW1haWw6IHJqdWRnZUB2bXdhcmUuY29tIDxtYWlsdG86cmp1ZGdlQHZtd2FyZS5jb20+DQogICAg Pg0KICAgID4gIA0KICAgID4NCiAgICA+IE1lZGlhIHR5cGUgbmFtZTogdGV4dA0KICAgID4NCiAg ICA+IE1lZGlhIHN1YnR5cGUgbmFtZTogc3BkeA0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAg PiBSZXF1aXJlZCBwYXJhbWV0ZXJzOg0KICAgID4NCiAgICA+IEJhc2VkIG9uIDIuMiBzcGVjIHRo ZSBmb2xsb3dpbmcgZmllbGRzIGFuZCB0YWdzIGFyZSBtYW5kYXRvcnkgaW4gdGhlDQogICAgPiBz cGVjaWZpY2F0aW9uIGRvY3VtZW50LiANCiAgICA+DQogICAgPiAgDQogICAgPg0KICAgID4gRG9j dW1lbnQgQ3JlYXRpb24gSW5mb3JtYXRpb24gVGFnczoNCiAgICA+DQogICAgPiBTUERYVmVyc2lv biwgRGF0YUxpY2Vuc2UsIFNQRFhJRCwgRG9jdW1lbnROYW1lLCBEb2N1bWVudE5hbWVzcGFjZSwN CiAgICA+IENyZWF0b3IsIENyZWF0ZWQNCiAgICA+DQogICAgPiAgDQogICAgPg0KICAgID4gUGFj a2FnZSBJbmZvcm1hdGlvbiBUYWdzOg0KICAgID4NCiAgICA+IFBhY2thZ2VOYW1lLCBTUERYSUQs IFBhY2thZ2VEb3dubG9hZExvY2F0aW9uLCBGaWxlTmFtZSwNCiAgICA+IFBhY2thZ2VWZXJpZmlj YXRpb25Db2RlKiosIFBhY2thZ2VMaWNlbnNlQ29uY2x1ZGVkLA0KICAgID4gUGFja2FnZUxpY2Vu c2VJbmZvRnJvbUZpbGVzKiosIFBhY2thZ2VMaWNlbnNlRGVjbGFyZWQsDQogICAgPiBQYWNrYWdl Q29weXJpZ2h0VGV4dCwgDQogICAgPg0KICAgID4gIA0KICAgID4NCiAgICA+IEZpbGUgSW5mb3Jt YXRpb24gVGFnczoNCiAgICA+DQogICAgPiBGaWxlTmFtZSwgU1BEWElELCBGaWxlQ2hlY2tzdW0s IExpY2Vuc2VDb25jbHVkZWQsIExpY2Vuc2VJbmZvSW5GaWxlLA0KICAgID4gRmlsZUNvcHlyaWdo dFRleHQsIA0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBTbmlwcGV0IEluZm9ybWF0aW9u IFRhZ3M6DQogICAgPg0KICAgID4gU1BEWFJlZiwgRG9jdW1lbnRSZWYsIFNuaXBwZXRCeXRlUmFu Z2UsIFNuaXBwZXRMaWNlbnNlQ29uY2x1ZGVkLA0KICAgID4gU25pcHBldENvcHlyaWdodFRleHQs IA0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBBbm5vdGF0aW9uIEluZm9ybWF0aW9uIFRh Z3M6DQogICAgPg0KICAgID4gQW5ub3RhdG9yDQogICAgPg0KICAgID4gIA0KICAgID4NCiAgICA+ ICANCiAgICA+DQogICAgPiAqKiBNYW5kYXRvcnksIG9uZSBvciBtYW55IGlmIEZpbGVzQW5hbHl6 ZWQgaXMgdHJ1ZSBvciBvbWl0dGVkLCB6ZXJvDQogICAgPiAobXVzdCBiZSBvbWl0dGVkKSBpZiBG aWxlc0FuYWx5emVkIGlzIGZhbHNlLg0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiAgDQog ICAgPg0KICAgID4gT3B0aW9uYWwgcGFyYW1ldGVyczoNCiAgICA+DQogICAgPiBCYXNlZCBvbiAy LjIgc3BlYyB0aGUgZm9sbG93aW5nIGZpZWxkcyBhbmQgdGFncyBhcmUgb3B0aW9uYWwgaW4gdGhl DQogICAgPiBzcGVjaWZpY2F0aW9uIGRvY3VtZW50LiANCiAgICA+DQogICAgPiAgDQogICAgPg0K ICAgID4gT3B0aW9uYWwgRG9jdW1lbnQgQ3JlYXRpb24gSW5mb3JtYXRpb24gVGFnczoNCiAgICA+ DQogICAgPiBFeHRlcm5hbERvY3VtZW50UmVmLCBMaWNlbnNlTGlzdFZlcnNpb24sIENyZWF0b3JD b21tZW50LCBEb2N1bWVudENvbW1lbnQNCiAgICA+DQogICAgPiAgDQogICAgPg0KICAgID4gT3B0 aW9uYWwgUGFja2FnZSBJbmZvcm1hdGlvbiBUYWdzOg0KICAgID4NCiAgICA+IFBhY2thZ2VWZXJz aW9uLCBQYWNrYWdlRmlsZU5hbWUsIFBhY2thZ2VTdXBwbGllciwgUGFja2FnZU9yaWdpbmF0b3Is DQogICAgPiBGaWxlc0FuYWx5emVkLCBQYWNrYWdlQ2hlY2tzdW0sIFBhY2thZ2VIb21lUGFnZSwg UGFja2FnZVNvdXJjZUluZm8sDQogICAgPiBQYWNrYWdlTGljZW5zZUNvbW1lbnRzLCBQYWNrYWdl U3VtbWFyeSwgUGFja2FnZURlc2NyaXB0aW9uLA0KICAgID4gUGFja2FnZUNvbW1lbnQsIEV4dGVy bmFsUmVmLCBFeHRlcm5hbFJlZkNvbW1lbnQgKGNvbmRpdGlvbmFsIGZvciBlYWNoDQogICAgPiBF eHRlcm5hbFJlZikNCiAgICA+DQogICAgPiAgDQogICAgPg0KICAgID4gT3B0aW9uYWwgRmlsZSBJ bmZvcm1hdGlvbiBUYWdzOg0KICAgID4NCiAgICA+IEZpbGVUeXBlLCBMaWNlbnNlQ29tbWVudHMs IEFydGlmYWN0T2ZQcm9qZWN0TmFtZSwNCiAgICA+IEFydGlmYWN0T2ZQcm9qZWN0SG9tZVBhZ2Us IEFydGlmYWN0T2ZQcm9qZWN0VVJJLCBGaWxlQ29tbWVudCwNCiAgICA+IEZpbGVOb3RpY2UsIEZp bGVDb250cmlidXRvcg0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBPcHRpb25hbCBTbmlw cGV0IEluZm9ybWF0aW9uIFRhZ3M6DQogICAgPg0KICAgID4gU25pcHBldExpbmVSYW5nZSwgTGlj ZW5zZUluZm9JblNuaXBwZXQsIFNuaXBwZXRMaWNlbnNlQ29tbWVudHMsDQogICAgPiBTbmlwcGV0 Q29tbWVudCwgU25pcHBldE5hbWUNCiAgICA+DQogICAgPiAgDQogICAgPg0KICAgID4gT3B0aW9u YWwgT3RoZXIgTGljZW5zaW5nIEluZm9ybWF0aW9uIERldGVjdGVkIFRhZ3M6DQogICAgPg0KICAg ID4gTGljZW5zZUNvbW1lbnQsIExpY2Vuc2VJRCBbQ29uZGl0aW9uYWwgKG1hbmRhdG9yeSwgb25l KSBpZiBsaWNlbnNlIGlzDQogICAgPiBub3Qgb24gU1BEWCBMaWNlbnNlIExpc3RdLCBFeHRyYWN0 ZWRUZXh0IFtDb25kaXRpb25hbCAoTWFuZGF0b3J5LCBvbmUpDQogICAgPiBpZiB0aGVyZSBpcyBh IExpY2Vuc2UgSWRlbnRpZmllciBhc3NpZ25lZC5dLCBMaWNlbnNlTmFtZSBbQ29uZGl0aW9uYWwN CiAgICA+IChtYW5kYXRvcnksIG9uZSkgaWYgbGljZW5zZSBpcyBub3Qgb24gU1BEWCBMaWNlbnNl IExpc3QuXSwNCiAgICA+IExpY2Vuc2VDcm9zc1JlZmVyZW5jZSBbQ29uZGl0aW9uYWwgKG9wdGlv bmFsLCBvbmUgb3IgbW9yZSkgaWYgbGljZW5zZQ0KICAgID4gaXMgbm90IG9uIFNQRFggTGljZW5z ZSBMaXN0Ll0NCiAgICA+DQogICAgPiAgDQogICAgPg0KICAgID4gT3B0aW9uYWwgUmVsYXRpb25z aGlwcyBiZXR3ZWVuIFNQRFggRWxlbWVudHM6DQogICAgPg0KICAgID4gUmVsYXRpb25zaGlwLCBS ZWxhdGlvbnNoaXBDb21tZW50DQogICAgPg0KICAgID4gIA0KICAgID4NCiAgICA+IE9wdGlvbmFs IEFubm90YXRpb24gSW5mb3JtYXRpb24gVGFnczoNCiAgICA+DQogICAgPiBBbm5vdGF0b3IgW0Nv bmRpdGlvbmFsIChNYW5kYXRvcnksIG9uZSksIGlmIHRoZXJlIGlzIGFuIEFubm90YXRpb25dLA0K ICAgID4gQW5ub3RhdGlvbkRhdGUgW0NvbmRpdGlvbmFsIChNYW5kYXRvcnksIG9uZSksIGlmIHRo ZXJlIGlzIGFuDQogICAgPiBBbm5vdGF0aW9uXSwgQW5ub3RhdGlvblR5cGUgW0NvbmRpdGlvbmFs IChNYW5kYXRvcnksIG9uZSksIGlmIHRoZXJlIGlzDQogICAgPiBhbiBBbm5vdGF0aW9uXSwgU1BE WFJFRiBbQ29uZGl0aW9uYWwgKE1hbmRhdG9yeSwgb25lKSwgaWYgdGhlcmUgaXMgYW4NCiAgICA+ IEFubm90YXRpb25dLCBBbm5vdGF0aW9uQ29tbWVudCBbQ29uZGl0aW9uYWwgKE1hbmRhdG9yeSwg b25lKSwgaWYgdGhlcmUNCiAgICA+IGlzIGFuIEFubm90YXRpb25dDQogICAgPg0KICAgID4gIA0K ICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBFbmNvZGluZyBjb25zaWRlcmF0aW9uczogOGJp dA0KICAgID4NCiAgICA+IFRoZSBzcGR4IG1lZGlhIHR5cGUgbXVzdCBzdXBwb3J0IFVURi04IGVu Y29kaW5nLg0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBTZWN1cml0eSBjb25zaWRlcmF0 aW9uczoNCiAgICA+DQogICAgPiBUaGUgRXh0ZXJuYWxSZWYgdGFnIHByb3ZpZGVzIGxpbmthZ2Ug dG8gdGhlIE5WRCB2aWEgQ1BFLiBEYXRhIGNhbiBiZQ0KICAgID4gc3RvcmVkIGluIHNwZHggZmls ZXMgdGhhdCBtYXkgY29udGFpbiBwcmludGYtc3R5bGUgZm9ybWF0IGNoYXJhY3RlcnMNCiAgICA+ IHRoYXQgY291bGQgY2F1c2UgYSBwcm9ncmFtIHRvIGRpc3BsYXkgdW5pbnRlbmRlZCBpbmZvcm1h dGlvbi4NCiAgICA+DQogICAgPiAgDQogICAgPg0KICAgID4gSW50ZXJvcGVyYWJpbGl0eSBjb25z aWRlcmF0aW9uczoNCiAgICA+DQogICAgPiBUaGUgc3BkeCBtZWRpYSB0eXBlIGNhbiBiZSBkaXN0 cmlidXRlZCBmcmVlIG9mIGV4dGVybmFsIHN5c3RlbXMgb3INCiAgICA+IHByb2Nlc3NvcnMgYW5k IGlzIHJlcHJlc2VudGVkIGluIGEgaHVtYW4tcmVhZGFibGUgZm9ybWF0LiBUaGVyZSBhcmUNCiAg ICA+IGFsc28gaW50ZXJuZXQgdGV4dC1wcm9jZXNzaW5nIGFwcGxpY2F0aW9ucyB0aGF0IG1heSBj b25zdW1lIHRoZXNlDQogICAgPiBkb2N1bWVudHMuDQogICAgPg0KICAgID4gIA0KICAgID4NCiAg ICA+IFB1Ymxpc2hlZCBzcGVjaWZpY2F0aW9uOg0KICAgID4NCiAgICA+IEN1cnJlbnQgdmVyc2lv bnMgb2YgdGhlIHNwZWNpZmljYXRpb24gaXMgYXZhaWxhYmxlIGF0DQogICAgPiBodHRwczovL25h bTA0LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZz cGR4LmdpdGh1Yi5pbyUyRnNwZHgtc3BlYyUyRiZhbXA7ZGF0YT0wMiU3QzAxJTdDcmp1ZGdlJTQw dm13YXJlLmNvbSU3QzNjMzM2YWM4MWY1NzRiYjJiNmQ5MDhkN2Q4YzliNGYwJTdDYjM5MTM4Y2Ez Y2VlNGI0YWE0ZDZjZDgzZDlkZDYyZjAlN0MwJTdDMSU3QzYzNzIxNjIzNDA3ODI4MDUwNyZhbXA7 c2RhdGE9QiUyRnV4SmZPQmRHM1A0aWVGcDBnSlA5d1VxUnI4d0hHYlR3akRTUEYwcklNJTNEJmFt cDtyZXNlcnZlZD0wLiBIaXN0b3JpY2FsIHZlcnNpb25zIGNhbiBiZSBmb3VuZCBhdA0KICAgID4g aHR0cHM6Ly9uYW0wNC5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBz JTNBJTJGJTJGc3BkeC5vcmclMkZzcGVjaWZpY2F0aW9ucyZhbXA7ZGF0YT0wMiU3QzAxJTdDcmp1 ZGdlJTQwdm13YXJlLmNvbSU3QzNjMzM2YWM4MWY1NzRiYjJiNmQ5MDhkN2Q4YzliNGYwJTdDYjM5 MTM4Y2EzY2VlNGI0YWE0ZDZjZDgzZDlkZDYyZjAlN0MwJTdDMSU3QzYzNzIxNjIzNDA3ODI4MDUw NyZhbXA7c2RhdGE9bEQ0TGVob3ROQWwxJTJCejdXZ2VZUE1oVEY2b29namhLQURrUmd6M1dNVGJN JTNEJmFtcDtyZXNlcnZlZD0wLg0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBBcHBsaWNh dGlvbnMgd2hpY2ggdXNlIHRoaXMgbWVkaWE6DQogICAgPg0KICAgID4gRXhjaGFuZ2Ugb2YgTWV0 YWRhdGEgZm9yIHNvZnR3YXJlLg0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBGcmFnbWVu dCBpZGVudGlmaWVyIGNvbnNpZGVyYXRpb25zOg0KICAgID4NCiAgICA+IE4vQQ0KICAgID4NCiAg ICA+ICANCiAgICA+DQogICAgPiBSZXN0cmljdGlvbnMgb24gdXNhZ2U6DQogICAgPg0KICAgID4g c3BkeCBtZWRpYSB0eXBlcyBzaG91bGQgb25seSBiZSBhc3NvY2lhdGVkIHdpdGggdmFsaWRhdGVk IFNQRFgNCiAgICA+IGRvY3VtZW50cyB0aGF0IGZvbGxvdyB0aGUgU1BEWCBzcGVjaWZpY2F0aW9u Lg0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBQcm92aXNpb25hbCByZWdpc3RyYXRpb24/ IChzdGFuZGFyZHMgdHJlZSBvbmx5KToNCiAgICA+DQogICAgPiBOL0ENCiAgICA+DQogICAgPiAg DQogICAgPg0KICAgID4gQWRkaXRpb25hbCBpbmZvcm1hdGlvbjoNCiAgICA+DQogICAgPiAgDQog ICAgPg0KICAgID4gMS4gRGVwcmVjYXRlZCBhbGlhcyBuYW1lcyBmb3IgdGhpcyB0eXBlOiBOL0EN CiAgICA+DQogICAgPiAyLiBNYWdpYyBudW1iZXIocyk6IE4vQQ0KICAgID4NCiAgICA+IDMuIEZp bGUgZXh0ZW5zaW9uKHMpOiAuc3BkeA0KICAgID4NCiAgICA+IDQuIE1hY2ludG9zaCBmaWxlIHR5 cGUgY29kZTogTi9BDQogICAgPg0KICAgID4gNS4gT2JqZWN0IElkZW50aWZpZXJzOiBOL0ENCiAg ICA+DQogICAgPiAgDQogICAgPg0KICAgID4gR2VuZXJhbCBDb21tZW50czoNCiAgICA+DQogICAg PiBTb2Z0d2FyZSBQYWNrYWdlIERhdGEgRXhjaGFuZ2XCriAoU1BEWMKuKSBpcyBhbiBvcGVuIHN0 YW5kYXJkIGZvcg0KICAgID4gY29tbXVuaWNhdGluZyBzb2Z0d2FyZSBiaWxsIG9mIG1hdGVyaWFs IGluZm9ybWF0aW9uIChpbmNsdWRpbmcNCiAgICA+IGNvbXBvbmVudHMsIGxpY2Vuc2VzLCBjb3B5 cmlnaHRzLCBhbmQgc2VjdXJpdHkgcmVmZXJlbmNlcykuDQogICAgPg0KICAgID4gIA0KICAgID4N CiAgICA+IFBlcnNvbiB0byBjb250YWN0IGZvciBmdXJ0aGVyIGluZm9ybWF0aW9uOg0KICAgID4N CiAgICA+ICANCiAgICA+DQogICAgPiAxLiBOYW1lOiBSb3NlIEp1ZGdlDQogICAgPg0KICAgID4g Mi4gRW1haWw6IHJqdWRnZUB2bXdhcmUuY29tIDxtYWlsdG86cmp1ZGdlQHZtd2FyZS5jb20+DQog ICAgPg0KICAgID4gIA0KICAgID4NCiAgICA+IEludGVuZGVkIHVzYWdlOiBDb21tb24NCiAgICA+ DQogICAgPiBJbnRlbmRlZCB0byBiZSB1c2VkIHRvIGVuYWJsZSBjb21wYW5pZXMgYW5kIG9yZ2Fu aXphdGlvbnMgdG8gc2hhcmUNCiAgICA+IGh1bWFuLXJlYWRhYmxlIGFuZCBtYWNoaW5lLXByb2Nl c3NhYmxlIHNvZnR3YXJlIHBhY2thZ2UgbWV0YWRhdGEgdG8NCiAgICA+IGZhY2lsaXRhdGUgc29m dHdhcmUgc3VwcGx5IGNoYWluIHByb2Nlc3Nlcy4gQW4gU1BEWCBtZWRpYSB0eXBlIHdpbGwgYmUN CiAgICA+IGFzc29jaWF0ZWQgd2l0aCBhIHBhcnRpY3VsYXIgc29mdHdhcmUgcGFja2FnZSBvciBz ZXQgb2YgcGFja2FnZXMgYW5kDQogICAgPiB3aWxsIGNvbnRhaW4gaW5mb3JtYXRpb24gYWJvdXQg aXQgaW4gdGhlIFNQRFggZm9ybWF0Lg0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPiBBdXRo b3IvQ2hhbmdlIGNvbnRyb2xsZXI6IGtzdGV3YXJ0QGxpbnV4Zm91bmRhdGlvbi5vcmcNCiAgICA+ IDxtYWlsdG86a3N0ZXdhcnRAbGludXhmb3VuZGF0aW9uLm9yZz4NCiAgICA+DQogICAgPiAgDQog ICAgPg0KICAgID4gIA0KICAgID4NCiAgICA+ICANCiAgICA+DQogICAgPg0KICAgID4NCiAgICA+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgPiBt ZWRpYS10eXBlcyBtYWlsaW5nIGxpc3QNCiAgICA+IG1lZGlhLXR5cGVzQGlldGYub3JnDQogICAg PiBodHRwczovL25hbTA0LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0 cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZtZWRpYS10eXBl cyZhbXA7ZGF0YT0wMiU3QzAxJTdDcmp1ZGdlJTQwdm13YXJlLmNvbSU3QzNjMzM2YWM4MWY1NzRi YjJiNmQ5MDhkN2Q4YzliNGYwJTdDYjM5MTM4Y2EzY2VlNGI0YWE0ZDZjZDgzZDlkZDYyZjAlN0Mw JTdDMSU3QzYzNzIxNjIzNDA3ODI4MDUwNyZhbXA7c2RhdGE9dXZLQWpHMXJjJTJCeiUyRjJ4bGNE dWcyV1hIUFVlbXJCR1JkSXk2R1ZNeHloN3clM0QmYW1wO3Jlc2VydmVkPTANCiAgICANCiAgICBZ b3Ugc2VlbSB0byBoYXZlIG1pc3VuZGVyc3Rvb2QgdGhlIHB1cnBvc2Ugb2YgcmVxdWlyZWQgYW5k IG9wdGlvbmFsDQogICAgcGFyYW1ldGVycy4gVGhleSBhcmUgbm90IGFib3V0IHRoZSBjb250ZW50 cyBvZiB0aGUgZmlsZS4gVGhleSBhcmUNCiAgICBwYXJhbWV0ZXJzIGF0dGFjaGVkIHRvIHRoZSBt ZWRpYSB0eXBlIGRlc2lnbmF0aW9uIGFzIHRoZSBmaWxlIGlzDQogICAgdHJhbnNmZXJyZWQsIHN0 b3JlZCBhbmQgcHJvY2Vzc2VkLg0KICAgIA0KDQo= From nobody Wed Apr 15 10:47:33 2020 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA4E93A0E8C for ; Wed, 15 Apr 2020 10:47:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.064 X-Spam-Level: * X-Spam-Status: No, score=1.064 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, KHOP_HELO_FCRDNS=0.398, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JHnsV-kzWd39 for ; Wed, 15 Apr 2020 10:47:30 -0700 (PDT) Received: from pechora1.lax.icann.org (pechora1.icann.org [IPv6:2620:0:2d0:201::1:71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A1DD3A0E89 for ; Wed, 15 Apr 2020 10:47:29 -0700 (PDT) Received: from mail.tcool.fr (ks3359019.kimsufi.com [37.187.96.26]) by pechora1.lax.icann.org (Postfix) with ESMTP id C44A91E0AEE for ; Wed, 15 Apr 2020 17:47:28 +0000 (UTC) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.tcool.fr (Postfix) with ESMTP id 4260AC60081 for ; Wed, 15 Apr 2020 19:27:25 +0200 (CEST) Received: from mail.tcool.fr ([127.0.0.1]) by localhost (ks3359019.kimsufi.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oSQDI1yxWCIl for ; Wed, 15 Apr 2020 19:27:25 +0200 (CEST) Received: from mail-ed1-f42.google.com (mail-ed1-f42.google.com [209.85.208.42]) by mail.tcool.fr (Postfix) with ESMTPSA id EB129C60074 for ; Wed, 15 Apr 2020 19:27:24 +0200 (CEST) Received: by mail-ed1-f42.google.com with SMTP id j20so6023381edj.0 for ; Wed, 15 Apr 2020 10:27:24 -0700 (PDT) X-Gm-Message-State: AGi0PuYjaVpJUVCzYV929sE2MU3sUkhnkikDw2CAUEZOuzG0hwcc1g27 3FWcUSXd1suj5xw476J39KiVHnrNoNZB6vpUdQA= X-Google-Smtp-Source: APiQypLuYgSx3YvO3yVIoLiXeLc6h76mDFrNJJx4OuRxudM/rybiHEkurPDlWxWLSdoMK9GGwA2zD1m+EVWSoh57Bac= X-Received: by 2002:a50:b003:: with SMTP id i3mr26007094edd.303.1586971644265; Wed, 15 Apr 2020 10:27:24 -0700 (PDT) MIME-Version: 1.0 References: <7C97D082-89AD-418E-9C1F-158C263BEE82@contoso.com> In-Reply-To: <7C97D082-89AD-418E-9C1F-158C263BEE82@contoso.com> From: "Florent Viard (Sodria)" Date: Wed, 15 Apr 2020 19:27:13 +0200 X-Gmail-Original-Message-ID: Message-ID: To: Darshak Thakore Cc: "media-types@iana.org" X-Greylist: Delayed for 00:19:41 by milter-greylist-4.6.2 (pechora1.lax.icann.org [192.0.33.71]); Wed, 15 Apr 2020 17:47:29 +0000 (UTC) Content-Type: multipart/alternative; boundary="000000000000200a2805a357a172" Archived-At: Subject: Re: [media-types] Notice of intended registration of "application/captive+json" X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2020 17:47:32 -0000 --000000000000200a2805a357a172 Content-Type: text/plain; charset="UTF-8" Hi, I don't understand why you want to use(/register) as specific application/captive+json and not simply application/json. >From what I can see in the specification, you are not using that as a "specific" file in itself. It is just a standard json reply to a standard request without added value. Regarding the capport-api, I don't know where would be the relevant place for me to submit some remarks? But I profit of this email to list of few of them that I have. It is nice to attempt to fix the "captive portal" situation but I think there a few things that could be improved. 1) There should probably be the current api version inside the reply (json) 2) There could probably be more fields that would be useful: - network access when "captive" ie (before login): restricted, lan, wan, internet - network access when not anymore captive (after login): restricted, lan, wan, internet - If the network is restricted to using a specific dns server, and in that case its address 3) MOST Important: You can't force HTTPS/TLS for such an usage! - Most of the time, it will be an embedded consumer devices that can't get easily a domain name and certificate. - Client devices might not already be on a correct date/time, with updated root certificates, as they might never have connected to internet without a captive portal first. - In the end, the captive portal can give you access to an internal network that is not connected to internet - As the client device will have no internet/dns connection before being authorized by the portal, the captive-portal server will probably be targeted by IP addr and not domain name. (cf. RFC7710) - I guess it will be the role of the "UX" to warn the user of the dangers before doing any action if no TLS available. Also: - This rule was designed against man in the middle attack impersonating the captive-portal. But, in small structures that would not be able to offer TLS, we can assume that if we are behind a captive-portal, it is this captive portal that is in control of the network and the only one in position to do man in the middle. Regards, Florent On Wed, Apr 1, 2020 at 3:19 PM Darshak Thakore wrote: > As per Section 5.1 of RFC 6838, we wish to notify the list of the intended > registration of a new media type in the standards track document > https://tools.ietf.org/html/draft-ietf-capport-api-06. > > > > Comments and feedback welcome. > > > > Regards, > > Darshak > _______________________________________________ > media-types mailing list > media-types@ietf.org > https://www.ietf.org/mailman/listinfo/media-types > --000000000000200a2805a357a172 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

I don't understand why you want to us= e(/register) as specific application/captive+json and not simply applicatio= n/json.
From what I can see in the specification, you are n= ot using that as a "specific" file in itself.
It is jus= t a standard json reply to a standard request without added value.

Regarding the capport-api, I don't know where would be= the relevant=C2=A0place for me to submit some remarks?
But I pro= fit of this email to list of few of them that I have.
It is nice = to attempt to fix the "captive portal" situation but I think ther= e a few things that could be improved.
1) There should probably b= e the current api version inside the reply (json)
2) There could = probably be more fields that would be useful:
- network access wh= en "captive" ie (before login): restricted, lan, wan, internet
- network access when not anymore captive (after login): restricted= , lan, wan, internet
- If the network is restricted to using a sp= ecific dns server, and in that case its address
3) MOST Important= : You can't force HTTPS/TLS for such an usage!
- Most of the = time, it will be an embedded consumer devices that can't get easily a d= omain name and certificate.
- Client devices might not already be= on a correct date/time, with updated root certificates, as they might neve= r have connected to internet without a captive portal first.
- In= the end, the captive portal can give you access to an internal network tha= t is not connected to internet
- As the client device will have n= o internet/dns connection before being authorized by the portal, the captiv= e-portal server will probably be targeted by IP addr and not domain name.
(cf. RFC7710)
- I guess it will be the role of the "= ;UX" to warn the user of the dangers before doing any action if no TLS= available.
Also:
- This rule was designed against man = in the middle attack impersonating the captive-portal.
But, in sm= all structures that would not be able to offer TLS, we can assume that if w= e are behind a captive-portal,
it is this captive portal that is = in control of the network and the only one in position to do man in the mid= dle.

Regards,

Florent


On Wed, Apr 1, 2020 at 3:19 PM Darshak Thakore <d.thakore@cablelabs.com> wrote:<= br>

As per Section 5.1 of= RFC 6838, we wish to notify the list of the intended registration of a new= media type in the standards track document https://tools.ietf.org/html/draft-ietf-capport-api-06.

=C2=A0

Comments and feedback welcome.

=C2=A0

Regards,

Darshak

_______________________________________________
media-types mailing list
media-types@ietf.= org
https://www.ietf.org/mailman/listinfo/media-types
--000000000000200a2805a357a172--