From nobody Mon Jun 1 12:52:57 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DE63E3A1505; Mon, 1 Jun 2020 12:52:55 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: ncamwing@cisco.com, rats-chairs@ietf.org, rdd@cert.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <159104117577.1290.6355032943985106559@ietfa.amsl.com> Date: Mon, 01 Jun 2020 12:52:55 -0700 Archived-At: Subject: [Rats] rats - New Meeting Session Request for IETF 108 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2020 19:52:56 -0000 A new meeting session request has just been submitted by Nancy Cam-Winget, a Chair of the rats working group. --------------------------------------------------------- Working Group Name: Remote ATtestation ProcedureS Area Name: Security Area Session Requester: Nancy Cam-Winget Number of Sessions: 2 Length of Session(s): 100 Minutes, 50 Minutes Number of Attendees: 60 Conflicts to Avoid: Chair Conflict: secdispatch saag mile acme tls sacm teep suit netconf opsec masque Key Participant Conflict: anima cose dprive People who must be present: Ned Smith Kathleen Moriarty Nancy Cam-Winget Roman Danyliw Resources Requested: Special Requests: --------------------------------------------------------- From nobody Wed Jun 3 04:19:50 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B32B3A1018; Wed, 3 Jun 2020 04:19:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.887 X-Spam-Level: X-Spam-Status: No, score=-1.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LmCG8zU3HoIp; Wed, 3 Jun 2020 04:19:46 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8348B3A1016; Wed, 3 Jun 2020 04:19:46 -0700 (PDT) Received: from lhreml740-chm.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id 492D93E7F924DFA1F260; Wed, 3 Jun 2020 12:19:43 +0100 (IST) Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by lhreml740-chm.china.huawei.com (10.201.108.190) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 3 Jun 2020 12:19:42 +0100 Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by nkgeml705-chm.china.huawei.com (10.98.57.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 3 Jun 2020 19:19:40 +0800 Received: from nkgeml705-chm.china.huawei.com ([10.98.57.154]) by nkgeml705-chm.china.huawei.com ([10.98.57.154]) with mapi id 15.01.1913.007; Wed, 3 Jun 2020 19:19:40 +0800 From: "Panwei (William)" To: "draft-birkholz-rats-uccs@ietf.org" CC: "rats@ietf.org" Thread-Topic: I-D Action: draft-birkholz-rats-uccs-01.txt Thread-Index: AQHWOET9Q2zpfsRw/U+1FSpSMDXS2qjGLCrw Date: Wed, 3 Jun 2020 11:19:39 +0000 Message-ID: References: <159103716579.28692.17026246183742187844@ietfa.amsl.com> In-Reply-To: <159103716579.28692.17026246183742187844@ietfa.amsl.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.33.152] Content-Type: multipart/alternative; boundary="_000_b79fe5b2252143e68f20ce34c258e760huaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Rats] I-D Action: draft-birkholz-rats-uccs-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2020 11:19:50 -0000 --_000_b79fe5b2252143e68f20ce34c258e760huaweicom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi authors, I've read this draft and have some comments below: Section 1 If a mutually Secured Channel is established between two remote peers, a= nd if that Secure Channel provides the correct properties, it is possible to omit the protection provided by COSE, creating a use case for unprotected CWT Claims Sets. Similarly, if there is one-way authentication, the party that did not authenticate may be in a position to send authentication information through this channel that allows the already authenticated party to authenticate the other party. I'm confused about the 2nd sentence. Based on these two sentences, I think = the 'this channel' in the 2nd sentence means the 'mutually Secured Channel'= in the 1st sentence. If 'this channel' is secure, then the two parties sho= uld have already authenticated each other. In my understanding, maybe the 2= nd sentence is talking about that the channel is half established and one-w= ay authentication is finished, right? If yes, I think the meaning should be= 'after one-way authentication of the channel is finished, the protection o= f the Claims sent from the already authenticated party to the other party t= hat did not authenticate can be provided by this channel'. Consequently, in a well-defined scope, it might be acceptable to strip a CWT of its COSE container an replace the CWT Claims Set's CWT CBOR tag with a UCCS CBOR tag for further processing - or vice versa. Nit: s/COSE container an/COSE container and/ Section 2 Use cases involving the conveyance of claims, in particular, remote attestations [I-D.ietf-rats-architecture] require a standardized data schema and format that can be trasferred and transported using different communication channels. As these are Claims, [RFC8392] are a suitable format but how these Claims are secured depends on the deployment, the security capabilities of the device, as well as their software stack. Nits: s/trasferred/transferred/, s/[RFC8392] are/[RFC8392] is/ Section 3 As UCCS were initially created for use in Remote ATtestation procedureS (RATS) Secure Channels, the following subsection provides a discussion of their use in these channels. In the terminology section, the UCCS is short for "Unprotected CWT Claims S= et", so I think it is a singular noun rather than a plural noun. Section 3.1 If only authenticity/integrity for a Claim is required, a Secure Channel MUST be established to, at minimum, provide integrity of the communication. Further, the provider of the UCCS SHOULD be authenticated by the reciever to ensure the channel is truly secured and the sender is validated. If confidentiality is also required, the receiving side SHOULD also be authenticated. Nit: s/reciever/receiver/ About the first sentence, how the authenticity of a Claim is guaranteed whe= n the Secure Channel only provide the integrity of the communication? About the last sentence, I think the key point of providing confidentiality= of a Claim isn't that the sender authenticates the receiver, but the Claim= should be encrypted. In this UCCS case, the Secure Channel should provide = the encryption mechanism. The extent to which a Secure Channel can provide assurances that UCCS originate from a trustworthy attesting environment depends on the characteristics of both the cryptographic mechanisms used to establish the channel and the characteristics of the attesting environment itself. A Secure Channel established or maintained using weak cryptography may not provide the assurance required by a relying party of the authenticity and integrity of the UCCS. I think if the keys used for signing and encrypting the Claims are also use= d for establishing the Secure Channel, then the authenticity can be easily = guaranteed. But As with EATs nested in other EATs (Section 3.12.1.2 of [I-D.ietf-rats-eat]), the Secure Channel does not endorse fully formed CWTs transferred through it. Effectively, the COSE envelope of a CWT shields the CWT Claims Set from the endorsement of the Secure Channel. (Note that EAT might add a nested UCCS Claim, and this statement does not apply to UCCS nested into UCCS, only to fully formed CWTs) This paragraph is really hard to understand. I guess the meaning is: when u= sing the Secure Channel to transfer the EATs in which other EATs are nested= , the nested EATs and upper-level EATs are endorsed/signed by using COSE an= d the Secure Channel has no direct relationship with these EATs. And when u= sing the Secure Channel to transfer the UCCSs in which other UCCSs are nest= ed, these UCCSs can be seen as signed by the sending party of the Secure Ch= annel. But when using the Secure Channel to transfer the EATs in which the UCCSs a= re nested, which one endorses the UCCSs, the upper-level EATs or the Secure= Channel? Section 5 {#secchan} discusses security considerations for Secure Channels, in which UCCS might be used. Nit: the reference to {#secchan} is missing. Besides the use cases described in the current draft, I think there is anot= her suitable use case for UCCS. The Attester/sender can decompose existing signed structures, then put all = the parts into UCCS claims, including the signature of the 'original' struc= ture. And the Verifier/receiver can compose all the UCCS claims into the or= iginal structure canonically. For example, assume the existing signed structure is {data1, data2, data3, = signature-of-all-data}. After the sender decomposes the structure and puts = all the parts into UCCS claims, the new structure is {UCCS(data1), UCCS(dat= a2), UCCS(data3), UCCS(signature-of-all-data)}. The receiver can recompose = the structure, which will be the original structure {data1, data2, data3, s= ignature-of-all-data}. The remote attestation can be done periodically or several times. The first= set of claims has to be a complete set of all the values in the signed str= ucture. But in the subsequent sets of claims, some of the values can be omi= tted, because they never change and in remote attestation they would always= be transmitted redundantly. So the sender can most definitely only convey = a subset and the receiver can rebuild the original structure. This can save= the bytes. Regards & Thanks! Wei Pan > -----Original Message----- > From: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] On Behalf > Of internet-drafts@ietf.org > Sent: Tuesday, June 2, 2020 2:46 AM > To: i-d-announce@ietf.org > Subject: I-D Action: draft-birkholz-rats-uccs-01.txt > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > > > Title : A CBOR Tag for Unprotected CWT Claims Sets > Authors : Henk Birkholz > Jeremy O'Donoghue > Nancy Cam-Winget > Carsten Bormann > Filename : draft-birkholz-rats-uccs-01.txt > Pages : 8 > Date : 2020-06-01 > > Abstract: > CBOR Web Token (CWT, RFC 8392) Claims Sets sometimes do not need > the > protection afforded by wrapping them into COSE, as is required for a > true CWT. This specification defines a CBOR tag for such unprotected > CWT Claims Sets (UCCS) and discusses conditions for its proper use. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-birkholz-rats-uccs/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-birkholz-rats-uccs-01 > https://datatracker.ietf.org/doc/html/draft-birkholz-rats-uccs-01 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-birkholz-rats-uccs-01 > > > Please note that it may take a couple of minutes from the time of > submission until the htmlized version and diff are available at tools.iet= f.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html or > ftp://ftp.ietf.org/ietf/1shadow-sites.txt --_000_b79fe5b2252143e68f20ce34c258e760huaweicom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi authors,

 

I’ve read this draft a= nd have some comments below:

 

Section 1<= /p>

 

   If a mutually Secured Channel is e= stablished between two remote peers, and

   if that Secure Channel provides the corre= ct properties, it is

   possible to omit the protection provided = by COSE, creating a use case

   for unprotected CWT Claims Sets.  Si= milarly, if there is one-way

   authentication, the party that did not au= thenticate may be in a

   position to send authentication informati= on through this channel that

   allows the already authenticated party to= authenticate the other

   party.

 

I’m confused about the= 2nd sentence. Based on these two sentences, I think the ‘this channe= l’ in the 2nd sentence means the ‘mutually Secured Channel̵= 7; in the 1st sentence. If ‘this channel’ is secure, then the t= wo parties should have already authenticated each other. In my understanding,= maybe the 2nd sentence is talking about that the channel is half establish= ed and one-way authentication is finished, right? If yes, I think the meani= ng should be ‘after one-way authentication of the channel is finished, the protection of the Claims sent from the alr= eady authenticated party to the other party that did not authenticate can b= e provided by this channel’.

 

   Consequently, in a well-defined

   scope, it might be acceptable to strip a = CWT of its COSE container an

   replace the CWT Claims Set's CWT CBOR tag= with a UCCS CBOR tag for

   further processing - or vice versa.<= /o:p>

 

Nit: s/COSE container an/COS= E container and/

 

Section 2<= /p>

 

   Use cases involving the conveyance of cla= ims, in particular, remote

   attestations [I-D.ietf-rats-architecture]= require a standardized data

   schema and format that can be trasferred and transported using

   different communication channels.  A= s these are Claims, [RFC8392] are

   a suitable format but how these Claims ar= e secured depends on the

   deployment, the security capabilities of = the device, as well as their

   software stack.

 

Nits: s/trasferred/transferr= ed/, s/[RFC8392] are/[RFC8392] is/

 

Section 3<= /p>

 

   As UCCS were initially created for use in Remote ATtestation

   procedureS (RATS) Secure Channels, the fo= llowing subsection provides

   a discussion of their use in these channe= ls.

 

In the terminology section, = the UCCS is short for “Unprotected CWT Claims Set”, so I think = it is a singular noun rather than a plural noun.

 

Section 3.1

 

   If only authenticity/integrity for a Clai= m is required, a Secure

   Channel MUST be established to, at minimu= m, provide integrity of the

   communication.  Further, the provide= r of the UCCS SHOULD be

   authenticated by the reciever to ensure the channel is truly secured

   and the sender is validated.  If con= fidentiality is also required,

   the receiving side SHOULD also be authent= icated.

 

Nit: s/reciever/receiver/

About the first sentence, ho= w the authenticity of a Claim is guaranteed when the Secure Channel only pr= ovide the integrity of the communication?

About the last sentence, I t= hink the key point of providing confidentiality of a Claim isn’t that= the sender authenticates the receiver, but the Claim should be encrypted. = In this UCCS case, the Secure Channel should provide the encryption mechanism.

 

   The extent to which a Secure Cha= nnel can provide assurances that UCCS

   originate from a trustworthy att= esting environment depends on the

   characteristics of both the cryp= tographic mechanisms used to

   establish the channel and the ch= aracteristics of the attesting

   environment itself.  A Secu= re Channel established or maintained using

   weak cryptography may not provid= e the assurance required by a relying

   party of the authenticity and in= tegrity of the UCCS.

 

I think if the keys used for= signing and encrypting the Claims are also used for establishing the Secur= e Channel, then the authenticity can be easily guaranteed. But

 

   As with EATs nested in other EATs (Sectio= n 3.12.1.2 of

   [I-D.ietf-rats-eat]), the Secure Channel does not endorse fully

   formed CWTs transferred through it.  Effectively, the COSE envelope

   of a CWT shields the CWT Claims Set fr= om the endorsement of the

   Secure Channel.  (Note that EAT might add a nested UCCS Claim, and

   this statement does not apply to UCCS nested into UCCS, only to fully

   formed CWTs)

 

This paragraph is really har= d to understand. I guess the meaning is: when using the Secure Channel to t= ransfer the EATs in which other EATs are nested, the nested EATs and upper-= level EATs are endorsed/signed by using COSE and the Secure Channel has no direct relationship with these EATs. An= d when using the Secure Channel to transfer the UCCSs in which other UCCSs = are nested, these UCCSs can be seen as signed by the sending party of the S= ecure Channel.

But when using the Secure Ch= annel to transfer the EATs in which the UCCSs are nested, which one endorse= s the UCCSs, the upper-level EATs or the Secure Channel?<= /p>

 

Section 5<= /p>

 

   {#secchan} discusses security considerati= ons for Secure Channels, in

   which UCCS might be used.

 

Nit: the reference to {#secc= han} is missing.

 

Besides the use cases descri= bed in the current draft, I think there is another suitable use case for UC= CS.

The Attester/sender can deco= mpose existing signed structures, then put all the parts into UCCS claims, = including the signature of the 'original' structure. And the Verifier/recei= ver can compose all the UCCS claims into the original structure canonically.

For example, assume the exis= ting signed structure is {data1, data2, data3, signature-of-all-data}. Afte= r the sender decomposes the structure and puts all the parts into UCCS clai= ms, the new structure is {UCCS(data1), UCCS(data2), UCCS(data3), UCCS(signature-of-all-data)}. The receiver can r= ecompose the structure, which will be the original structure {data1, data2,= data3, signature-of-all-data}.

The remote attestation can b= e done periodically or several times. The first set of claims has to be a c= omplete set of all the values in the signed structure. But in the subsequen= t sets of claims, some of the values can be omitted, because they never change and in remote attestation they w= ould always be transmitted redundantly. So the sender can most definitely o= nly convey a subset and the receiver can rebuild the original structure. Th= is can save the bytes.

 

Regards & Thanks!

Wei Pan

 

> -----Original Message--= ---

> From: I-D-Announce [mai= lto:i-d-announce-bounces@ietf.org] On Behalf

> Of internet-drafts@ietf= .org

> Sent: Tuesday, June 2, = 2020 2:46 AM

> To: i-d-announce@ietf.o= rg

> Subject: I-D Action: dr= aft-birkholz-rats-uccs-01.txt

>

>

> A New Internet-Draft is= available from the on-line Internet-Drafts

> directories.

>

>

>     = ;    Title       &nb= sp;   : A CBOR Tag for Unprotected CWT Claims Sets

>     = ;    Authors       &= nbsp; : Henk Birkholz

>     = ;            &n= bsp;         Jeremy O'Donoghue=

>     = ;            &n= bsp;         Nancy Cam-Winget<= /span>

>     = ;            &n= bsp;         Carsten Bormann

>    Filename&n= bsp;       : draft-birkholz-rats-uccs-01.txt<= /span>

>    Pages = ;          : 8

>    Date =            : 2020-06-01

>

> Abstract:

>    CBOR = Web Token (CWT, RFC 8392) Claims Sets sometimes do not need

> the

>    prote= ction afforded by wrapping them into COSE, as is required for a

>    true = CWT.  This specification defines a CBOR tag for such unprotected

>    CWT C= laims Sets (UCCS) and discusses conditions for its proper use.

>

>

> The IETF datatracker st= atus page for this draft is:

> https://datatracker.i= etf.org/doc/draft-birkholz-rats-uccs/

>

> There are also htmlized= versions available at:

> https://tools.ietf.or= g/html/draft-birkholz-rats-uccs-01

> https://datatracker.i= etf.org/doc/html/draft-birkholz-rats-uccs-01

>

> A diff from the previou= s version is available at:

> https://www.ietf.org/= rfcdiff?url2=3Ddraft-birkholz-rats-uccs-01

>

>

> Please note that it may= take a couple of minutes from the time of

> submission until the ht= mlized version and diff are available at tools.ietf.org.

>

> Internet-Drafts are als= o available by anonymous FTP at:

> ftp://ftp.ietf.org/in= ternet-drafts/

>

>

> _______________________= ________________________

> I-D-Announce mailing li= st

> I-D-Announce@ietf.org=

> https://www.ietf.org/= mailman/listinfo/i-d-announce

> Internet-Draft director= ies: http://www.ietf.org/s= hadow.html or

> ftp://ftp.ietf.org/ie= tf/1shadow-sites.txt

--_000_b79fe5b2252143e68f20ce34c258e760huaweicom_-- From nobody Wed Jun 3 06:34:44 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6CD53A0BA1; Wed, 3 Jun 2020 06:34:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XIrHBMFyDhr8; Wed, 3 Jun 2020 06:34:39 -0700 (PDT) Received: from mail-edgeDD24.fraunhofer.de (mail-edgeDD24.fraunhofer.de [192.102.167.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 972A63A0EE4; Wed, 3 Jun 2020 06:34:37 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FXEgBkpYde/xmnZsBmHQEBAQkBEQU?= =?us-ascii?q?FAYF7AoInbANVLyoKh1mNFS2ZYIEQA0UPCgEBAQEBAQEBAQYBARgNCAIEAQE?= =?us-ascii?q?CgU6CdAKCRyQ4EwIQAQEGAQEBAQEFBAICaYVWDEIBDAGDA30BAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBARYCDTYeNxIBAR0BAQEBAgEBATABBTYEBwUHBAsRAQMBAQE?= =?us-ascii?q?nBycfAwYIBgEJAwEFAgEBBRKDCwGCXCAEC65DgieDfTgBAwIOQUGDZ4E+gTg?= =?us-ascii?q?BjBMdD4FMP4ERJw+CWj6CXAsBAQEBAQEYgQuGLgShNI5leQeBSXd8BIZvjzA?= =?us-ascii?q?jgkyBBIc0hDEFJ4gyg22OVF6JI4VCjTgCBAIJAhWBaSOBV00kLiGCaQlHGA2?= =?us-ascii?q?OJgMXhjSCMIVDcgKBJ4dkhAQtgQQBgQ8BAQ?= X-IPAS-Result: =?us-ascii?q?A2FXEgBkpYde/xmnZsBmHQEBAQkBEQUFAYF7AoInbANVL?= =?us-ascii?q?yoKh1mNFS2ZYIEQA0UPCgEBAQEBAQEBAQYBARgNCAIEAQECgU6CdAKCRyQ4E?= =?us-ascii?q?wIQAQEGAQEBAQEFBAICaYVWDEIBDAGDA30BAQEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?RYCDTYeNxIBAR0BAQEBAgEBATABBTYEBwUHBAsRAQMBAQEnBycfAwYIBgEJA?= =?us-ascii?q?wEFAgEBBRKDCwGCXCAEC65DgieDfTgBAwIOQUGDZ4E+gTgBjBMdD4FMP4ERJ?= =?us-ascii?q?w+CWj6CXAsBAQEBAQEYgQuGLgShNI5leQeBSXd8BIZvjzAjgkyBBIc0hDEFJ?= =?us-ascii?q?4gyg22OVF6JI4VCjTgCBAIJAhWBaSOBV00kLiGCaQlHGA2OJgMXhjSCMIVDc?= =?us-ascii?q?gKBJ4dkhAQtgQQBgQ8BAQ?= X-IronPort-AV: E=Sophos;i="5.72,341,1580770800"; d="scan'208";a="32166863" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeDD24.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 03 Jun 2020 15:34:33 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0A+BQBkptde/1lIDI1mHQEBAQEJARI?= =?us-ascii?q?BBQUBQIFKgitvA1QwLAqVKpoSgRADVQsBAwEBAQEBBgEBGA0IAgQBAYFQgnQ?= =?us-ascii?q?CghsCJDgTAhABAQUBAQECAQYEbYVbDIVyAQEBAQIBAQEwAQU2BAcFBwQLEQE?= =?us-ascii?q?DAQEBJwcnHwMGCAYBCQMBBQIBAQUSgwsBglwkC64OdIE0hDoBAwIOQUKDYYF?= =?us-ascii?q?AgTiMLx0PgUw/gREnD4JaPoJcCwEBAQEBARiBC4YyBKM9jy9YKAeBV4EFgQQ?= =?us-ascii?q?ECocikDkKHYJngRSHeIRlBieJFoQfkAxliX6FZI4mAgQCCQIVgWoigVZNJC4?= =?us-ascii?q?hgmkJRxcCDYQSjDcDF4YzgjCFREExAjUCBgEHAQEDCXyLKi2BBgGBDwEB?= X-IronPort-AV: E=Sophos;i="5.73,467,1583190000"; d="scan'208";a="83467088" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 03 Jun 2020 15:34:30 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 053DYTFk018929 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 3 Jun 2020 15:34:29 +0200 Received: from [192.168.16.50] (79.234.115.101) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 3 Jun 2020 15:34:24 +0200 To: "Panwei (William)" , "draft-birkholz-rats-uccs@ietf.org" CC: "rats@ietf.org" References: <159103716579.28692.17026246183742187844@ietfa.amsl.com> From: Henk Birkholz Message-ID: <6fc50ce9-a1ca-334b-34a5-f7ce4120dd71@sit.fraunhofer.de> Date: Wed, 3 Jun 2020 15:34:23 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.115.101] Archived-At: Subject: Re: [Rats] I-D Action: draft-birkholz-rats-uccs-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2020 13:34:43 -0000 Hi Wei, thanks for the review! Please see comments in-line. All assertions are from me as an individual. The authors will discuss your input as soon as possible, but I also have pulled in some editorial fixes already as is visible here: > https://ietf-rats.github.io/draft-birkholz-rats-uccs/draft-birkholz-rats-uccs.html On 03.06.20 13:19, Panwei (William) wrote: > Hi authors, > > I’ve read this draft and have some comments below: > > Section 1 > >    If a*mutually Secured Channel* is established between two remote > peers, and > >    if that Secure Channel provides the correct properties, it is > >    possible to omit the protection provided by COSE, creating a use case > >    for unprotected CWT Claims Sets.  Similarly, if there is one-way > >    authentication, the party that did not authenticate may be in a > >    position to send authentication information through *this channel* that > >    allows the already authenticated party to authenticate the other > >    party. > > I’m confused about the 2nd sentence. Based on these two sentences, I > think the ‘this channel’ in the 2nd sentence means the ‘mutually Secured > Channel’ in the 1st sentence. If ‘this channel’ is secure, then the two > parties should have already authenticated each other. In my > understanding, maybe the 2nd sentence is talking about that the channel > is half established and one-way authentication is finished, right? If > yes, I think the meaning should be ‘after one-way authentication of the > channel is finished, the protection of the Claims sent from the already > authenticated party to the other party that did not authenticate can be > provided by this channel’. Using just one sentence here might have been a tad bit too concise for the sake of readability. Yes, there are situations, where only one of the two peers is authenticated and the secure channel characteristics work only "one way". This can be due to design or due to a channel not been set up completely yet. We probably need more text to elaborate on this. Maybe not in the Intro though. > >    Consequently, in a well-defined > >    scope, it might be acceptable to strip a CWT of its COSE container *an* > >    replace the CWT Claims Set's CWT CBOR tag with a UCCS CBOR tag for > >    further processing - or vice versa. > > Nit: s/COSE container an/COSE container and/ fixed > > Section 2 > >    Use cases involving the conveyance of claims, in particular, remote > >    attestations [I-D.ietf-rats-architecture] require a standardized data > >    schema and format that can be *trasferred* and transported using > >    different communication channels.  As these are Claims, [RFC8392] *are* > >    a suitable format but how these Claims are secured depends on the > >    deployment, the security capabilities of the device, as well as their > >    software stack. > > Nits: s/trasferred/transferred/, s/[RFC8392] are/[RFC8392] is/ fixed > > Section 3 > >    As UCCS *were* initially created for use in Remote ATtestation > >    procedureS (RATS) Secure Channels, the following subsection provides > >    a discussion of their use in these channels. > > In the terminology section, the UCCS is short for “Unprotected CWT > Claims Set”, so I think it is a singular noun rather than a plural noun. As UCCSs does not really flow from the tongue, I tweaked the definition text a bit. It now reads: "Unprotected CWT Claims Set(s); CBOR map(s) of Claims [...]". While that fixes the problem for now, there might be more elegant solutions here. > > Section 3.1 > >    If only authenticity/integrity for a Claim is required, a Secure > >    Channel MUST be established to, at minimum, provide integrity of the > >    communication.  Further, the provider of the UCCS SHOULD be > >    authenticated by the *reciever* to ensure the channel is truly secured > >    and the sender is validated.  If confidentiality is also required, > >    the receiving side SHOULD also be authenticated. > > Nit: s/reciever/receiver/ fixed > > About the first sentence, how the authenticity of a Claim is guaranteed > when the Secure Channel only provide the integrity of the communication? This text implies the characteristics of a signature (authenticity/integrity). As part of the secure channel characteristics, the fact that an UCCS is conveyed via the secure channel by an authenticated peer (that created the secure channel) basically is the substitute of the "authenticity part of the signature characteristic". What remains to be provided is then the "integrity part of the signature characteristic". For this the secure channel must provide integrity protection for the UCCS. This probably also needs more elaboration and clear wording. Thanks! > > About the last sentence, I think the key point of providing > confidentiality of a Claim isn’t that the sender authenticates the > receiver, but the Claim should be encrypted. In this UCCS case, the > Secure Channel should provide the encryption mechanism. Yes, while the UCCS is not encrypted itself, a secure channel that encrypts messages for conveyance is probably the most likely solution here. > >    The extent to which a Secure Channel can provide assurances that UCCS > >    originate from a trustworthy attesting environment depends on the > >    characteristics of both the cryptographic mechanisms used to > >    establish the channel and the characteristics of the attesting > >    environment itself.  A Secure Channel established or maintained using > >    weak cryptography may not provide the assurance required by a relying > >    party of the authenticity and integrity of the UCCS. > > I think if the keys used for signing and encrypting the Claims are also > used for establishing the Secure Channel, then the authenticity can be > easily guaranteed. But This would imply that the creator of UCCS would also be able to create CWT, which I think is not always the case. In general, the key semantics are vital here. If there is a separation of duty here with different sets of keys for different applications, using keys for multiple purposes might not be possible. But maybe I am also missing something here that you tried to highlight. > >    As with EATs nested in other EATs (Section 3.12.1.2 of > >    [I-D.ietf-rats-eat]), *the Secure Channel does not endorse fully* > > *   formed CWTs transferred through it*.  Effectively, *the COSE envelope* > > *   of a CWT shields the CWT Claims Set from the endorsement of the* > > *   Secure Channel.*  (Note that EAT might add a nested UCCS Claim, and > >    this statement does not apply to *UCCS nested into UCCS*, only to fully > >    formed CWTs) > > This paragraph is really hard to understand. I guess the meaning is: > when using the Secure Channel to transfer the EATs in which other EATs > are nested, the nested EATs and upper-level EATs are endorsed/signed by > using COSE and the Secure Channel has no direct relationship with these > EATs. And when using the Secure Channel to transfer the UCCSs in which > other UCCSs are nested, these UCCSs can be seen as signed by the sending > party of the Secure Channel. Yes! I can see how this is also very compact text. Brevity for the sake of readability does not always makes it easier to understand, too. Analogously, we might need more text here, too. > > But when using the Secure Channel to transfer the EATs in which the > UCCSs are nested, which one endorses the UCCSs, the upper-level EATs or > the Secure Channel? That would be the upper-level EAT. If we want that to be more fine-grained, we'd need more text. But here simplicity is an enabler of security and I would like to abstain from that and go with "closest signature to the UCCS wins". > > Section 5 > >    {#secchan} discusses security considerations for Secure Channels, in > >    which UCCS might be used. > > Nit: the reference to {#secchan} is missing. fixed > > Besides the use cases described in the current draft, I think there is > another suitable use case for UCCS. > > The Attester/sender can decompose existing signed structures, then put > all the parts into UCCS claims, including the signature of the > 'original' structure. And the Verifier/receiver can compose all the UCCS > claims into the original structure canonically. > > For example, assume the existing signed structure is {data1, data2, > data3, signature-of-all-data}. After the sender decomposes the structure > and puts all the parts into UCCS claims, the new structure is > {UCCS(data1), UCCS(data2), UCCS(data3), UCCS(signature-of-all-data)}. > The receiver can recompose the structure, which will be the original > structure {data1, data2, data3, signature-of-all-data}. This touches a re-occurring topic that we also find, for example, with "re-encoding XML renders the original signature invalid". It also touches on the topic of canonical decomposition and composition. I think that is basically a third option of "where do the signature characteristics go": 1.) signature 2.) secure channel 3.) signature value in UCCS I think that could be a worthwhile addition to the use of UCCS and we will discuss this and come back to that topic! > > The remote attestation can be done periodically or several times. The > first set of claims has to be a complete set of all the values in the > signed structure. But in the subsequent sets of claims, some of the > values can be omitted, because they never change and in remote > attestation they would always be transmitted redundantly. So the sender > can most definitely only convey a subset and the receiver can rebuild > the original structure. This can save the bytes. That is actually an approach that we use in TUDA already. TUDA is not using maps but arrays to be even more concise than CWT, but the principle is the same - like I-Frames and P-Frames. Omitting "already shared/known" information in the context of a secure channel could be an interesting topic, too. We have to be careful about scope creep, but I am certain we will come back to this topic. > > Regards & Thanks! > > Wei Pan Big thanks for comments and thoughts on content. Please expect another reply in.. some future :-) Viele Grüße, Henk > >> -----Original Message----- > >> From: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] On Behalf > >> Of internet-drafts@ietf.org > >> Sent: Tuesday, June 2, 2020 2:46 AM > >> To: i-d-announce@ietf.org > >> Subject: I-D Action: draft-birkholz-rats-uccs-01.txt > >> > >> > >> A New Internet-Draft is available from the on-line Internet-Drafts > >> directories. > >> > >> > >>         Title           : A CBOR Tag for Unprotected CWT Claims Sets > >>         Authors         : Henk Birkholz > >>                           Jeremy O'Donoghue > >>                           Nancy Cam-Winget > >>                           Carsten Bormann > >>    Filename        : draft-birkholz-rats-uccs-01.txt > >>    Pages           : 8 > >>    Date            : 2020-06-01 > >> > >> Abstract: > >>    CBOR Web Token (CWT, RFC 8392) Claims Sets sometimes do not need > >> the > >>    protection afforded by wrapping them into COSE, as is required for a > >>    true CWT.  This specification defines a CBOR tag for such unprotected > >>    CWT Claims Sets (UCCS) and discusses conditions for its proper use. > >> > >> > >> The IETF datatracker status page for this draft is: > >> https://datatracker.ietf.org/doc/draft-birkholz-rats-uccs/ > >> > >> There are also htmlized versions available at: > >> https://tools.ietf.org/html/draft-birkholz-rats-uccs-01 > >> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-uccs-01 > >> > >> A diff from the previous version is available at: > >> https://www.ietf.org/rfcdiff?url2=draft-birkholz-rats-uccs-01 > >> > >> > >> Please note that it may take a couple of minutes from the time of > >> submission until the htmlized version and diff are available at tools.ietf.org. > >> > >> Internet-Drafts are also available by anonymous FTP at: > >> ftp://ftp.ietf.org/internet-drafts/ > >> > >> > >> _______________________________________________ > >> I-D-Announce mailing list > >> I-D-Announce@ietf.org > >> https://www.ietf.org/mailman/listinfo/i-d-announce > >> Internet-Draft directories: http://www.ietf.org/shadow.html or > >> ftp://ftp.ietf.org/ietf/1shadow-sites.txt > From nobody Wed Jun 3 07:46:52 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B80F13A08B7; Wed, 3 Jun 2020 07:46:23 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rats@ietf.org Message-ID: <159119558361.1657.5506680759177799470@ietfa.amsl.com> Date: Wed, 03 Jun 2020 07:46:23 -0700 Archived-At: Subject: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2020 14:46:24 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. Title : TPM-based Network Device Remote Integrity Verification Authors : Guy Fedorkow Eric Voit Jessica Fitzgerald-McKay Filename : draft-ietf-rats-tpm-based-network-device-attest-00.txt Pages : 36 Date : 2020-06-03 Abstract: This document describes a workflow for remote attestation of integrity of network devices. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-attest/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-rats-tpm-based-network-device-attest-00 https://datatracker.ietf.org/doc/html/draft-ietf-rats-tpm-based-network-device-attest-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jun 3 12:24:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63F863A0E91 for ; Wed, 3 Jun 2020 12:24:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ishX0hMQ-W_b for ; Wed, 3 Jun 2020 12:24:21 -0700 (PDT) Received: from p3plsmtpa07-02.prod.phx3.secureserver.net (p3plsmtpa07-02.prod.phx3.secureserver.net [173.201.192.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7AB773A0E8F for ; Wed, 3 Jun 2020 12:24:21 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id gYzsjBMC0EHrKgYzsjpgEx; Wed, 03 Jun 2020 12:24:21 -0700 X-CMAE-Analysis: v=2.3 cv=C+qXNjH+ c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=IkcTkHD0fZMA:10 a=lLa2_FpPX2HyelkZOr8A:9 a=QEXdDO2ut3YA:10 a=pHzHmUro8NiASowvMSCR:22 a=n87TN5wuljxrRezIQYnT:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Message-Id: <72AE6830-B424-47F1-BA3D-C694989300AF@island-resort.com> Date: Wed, 3 Jun 2020 12:24:20 -0700 Cc: jeremy O'Donoghue To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfOeIy7dRgw202XgSilsUA8tJ1FFEjfWyGC6VrB1Q91Ja+6DRN7ZmOhWwqrD5JQhVvUHpD8e2v3/lcCEdjblumnTwldp4IeQ6FZCk+PAArE0AUTDbjotM v+g8RccrX5yg9NzKsobEaexkLtKKYLHs4Ey0TrdR/FjZwAQmDoG12LdtlVN/z5yPFTUR2xPlZhodeqkjGU37kXR0pUeUv3bh2rs= Archived-At: Subject: [Rats] I-D Action: draft-birkholz-rats-uccs-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2020 19:24:22 -0000 Perfectly in favor of the UCCS tag. The security discussion in this seems like the tail wagging the dog. = UCCS is the tail. Conveyance Security is the dog.=20 I think this draft should only say it is up to you to attach a dog to = this tail. CWT=E2=80=99s are a dog+tail so you don=E2=80=99t have to = worry. UCCS is tail-only so you do. Your choice of dog is of course up = to you. Choose wisely. =20 Note also that UCCS is useful if you don=E2=80=99t like the type of dog = that CWT comes with. It allows you use different types of dogs with a = CWT-style tail. :-) Or said another way, I=E2=80=99m not so much in favor of section 3. = Anything about RATS / EAT security should be in RATS / EAT docs, not = here. Would like the draft to say simply =E2=80=9CBe warned. UCCS does = not have the security that CWT does. If you use UCCS, you should add = security=E2=80=9D. LL From nobody Thu Jun 4 02:00:44 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 183E03A092D; Thu, 4 Jun 2020 02:00:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.101 X-Spam-Level: *** X-Spam-Status: No, score=3.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_SUMOF=5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KxdYPRwQJdDC; Thu, 4 Jun 2020 02:00:41 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7FB6B3A092A; Thu, 4 Jun 2020 02:00:41 -0700 (PDT) Received: from lhreml721-chm.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id 174E7868855DE9E0269F; Thu, 4 Jun 2020 10:00:40 +0100 (IST) Received: from nkgeml708-chm.china.huawei.com (10.98.57.160) by lhreml721-chm.china.huawei.com (10.201.108.72) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Thu, 4 Jun 2020 10:00:39 +0100 Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by nkgeml708-chm.china.huawei.com (10.98.57.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Thu, 4 Jun 2020 17:00:36 +0800 Received: from nkgeml705-chm.china.huawei.com ([10.98.57.154]) by nkgeml705-chm.china.huawei.com ([10.98.57.154]) with mapi id 15.01.1913.007; Thu, 4 Jun 2020 17:00:36 +0800 From: "Panwei (William)" To: "draft-ietf-rats-yang-tpm-charra@ietf.org" CC: "rats@ietf.org" Thread-Topic: Draft-charra's use of RPC to retrieve log entries may have a potential scalability issue Thread-Index: AdY6N8erjNrQvOn7QaWCyoBB751rHw== Date: Thu, 4 Jun 2020 09:00:36 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.33.152] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] Draft-charra's use of RPC to retrieve log entries may have a potential scalability issue X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jun 2020 09:00:43 -0000 Hi authors, When I reviewed the YANG module defined in this draft, I noticed that the l= og is retrieved by using RPC, which I think there may be a scalability issu= e. The draft now defines two types of logs: bios-event-logs and ima-event-logs= , both of them are designed to be retrieved by RPC. I don't know whether th= e bios-event-logs will have too many entries, but I think ima-event-logs do= have the possibility. The IMA measures the files in the device, calculate their hash values, and = extend the hash values into the PCRs. For the ima-event-logs, it records al= l the files measured by IMA, including the file name, hash value, pcr-index= , etc. Therefore, it's easy to see that the size of the IMA log is proporti= onal to the number of the measured files. When there is a large number of f= iles in the Attester that need to be measured, the number of log entries ca= n also be significant. The problem can be much more severe in the Composite= Devices, i.e., a Composite Device contains multiple Attesters, then the to= tal amount of log entries is the sum of all files of all Attesters. The log size is uncertain, it may consist of only a few entries, but it als= o may exceed tens of or even hundreds of megabytes. When the log size is la= rge, it's inappropriate of transferring the log by messages like using NETC= ONF RPC. Because sending the log can take up a lot of bandwidth, and other = features using the same NETCONF connection will be affected. I think other = mechanisms need to be considered here, maybe using a separate protocol to t= ransfer the log. So what do you authors think? Is this a reasonable problem needs to be addr= essed? Regards & Thanks! Wei Pan From nobody Thu Jun 4 12:11:19 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C2383A0DD8 for ; Thu, 4 Jun 2020 12:11:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P8SJP4impYRr for ; Thu, 4 Jun 2020 12:11:14 -0700 (PDT) Received: from p3plsmtpa09-02.prod.phx3.secureserver.net (p3plsmtpa09-02.prod.phx3.secureserver.net [173.201.193.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0613B3A0D6A for ; Thu, 4 Jun 2020 12:11:13 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id gvGijHoC2UWQLgvGijNhHZ; Thu, 04 Jun 2020 12:11:12 -0700 X-CMAE-Analysis: v=2.3 cv=DYNpVclW c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=IkcTkHD0fZMA:10 a=K6EGIJCdAAAA:8 a=48vgC7mUAAAA:8 a=LD-zQ67PKl2J6gDn2lEA:9 a=oC4JMAnEfuleHk8B:21 a=7iTaDj3JUHWPNGUk:21 a=QEXdDO2ut3YA:10 a=L6pVIi0Kn1GYQfi8-iRI:22 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Laurence Lundblade In-Reply-To: <72AE6830-B424-47F1-BA3D-C694989300AF@island-resort.com> Date: Thu, 4 Jun 2020 12:11:12 -0700 Cc: jeremy O'Donoghue Content-Transfer-Encoding: quoted-printable Message-Id: <4F64295D-E8B9-428F-9587-8D0D2C763582@island-resort.com> References: <72AE6830-B424-47F1-BA3D-C694989300AF@island-resort.com> To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfD8LfCiGgD+3dhHmEKug7b2fqHxPFOm7yzJBtv7GdbuREHnaco5crGqBnpWzcbJ0d8qCigiW1melsE+zsN8H/xWo+9G9NQ7GLf9lBw+8En8XR80dGAYU lfM+YvYL5QueO9kr7BTg1x9V/24ZGv8BpmLSBoH90kT1pisZkdoD2eK3AUvl4f/80xdOPSDGkarxrcCpyCzee0b6NPxqbESuktY= Archived-At: Subject: Re: [Rats] I-D Action: draft-birkholz-rats-uccs-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jun 2020 19:11:17 -0000 At least one private response seems to have misunderstood my intent. Let = me try again. I am saying that most security discussion should be moved out of UCCS = and into use case specific documents and contexts: - UCCS as RATS claims - UCCS as RATS endorsements - UCCS as RATS attestation results - UCCS in GlobalPlatform - UCCS in ACE - UCCS in future unanticipated use case #1 that has nothing to do with = RATS or ACE - UCCS in future unanticipated use case #2 that has nothing to do with = RATS or ACE It seems better factoring to associate the security model with the use = cases than with the data structure format. It seems hard to anticipate = the security models needed for future use cases. In the three RATS uses of UCCS (claims, endorsements, results), the = characteristics of the security needed vary a lot and all three are not = all covered here. The text doesn=E2=80=99t seem to anticipate securing UCCS with CMS or a = TPM-based signing scheme. It focuses on TLS / Secure Channels.=20 The security of nested EATs seems better discussed in EAT. CWT is part of the establishment of the Verifier=E2=80=99s trust in an = Attester. That topic requires Endorsements and seems better in the = context of RATS architecture or related.=20 All that said, I don=E2=80=99t think the section 3 security discussion = is harmful, just that it may become outmoded and necessarily bypassed as = the use cases fill in. LL > On Jun 3, 2020, at 12:24 PM, Laurence Lundblade = wrote: >=20 > Perfectly in favor of the UCCS tag. >=20 > The security discussion in this seems like the tail wagging the dog. = UCCS is the tail. Conveyance Security is the dog.=20 >=20 > I think this draft should only say it is up to you to attach a dog to = this tail. CWT=E2=80=99s are a dog+tail so you don=E2=80=99t have to = worry. UCCS is tail-only so you do. Your choice of dog is of course up = to you. Choose wisely. =20 >=20 > Note also that UCCS is useful if you don=E2=80=99t like the type of = dog that CWT comes with. It allows you use different types of dogs with = a CWT-style tail. >=20 > :-) >=20 > Or said another way, I=E2=80=99m not so much in favor of section 3. = Anything about RATS / EAT security should be in RATS / EAT docs, not = here. Would like the draft to say simply =E2=80=9CBe warned. UCCS does = not have the security that CWT does. If you use UCCS, you should add = security=E2=80=9D. >=20 > LL >=20 >=20 >=20 >=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Thu Jun 4 12:21:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67B5B3A0EE4 for ; Thu, 4 Jun 2020 12:21:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V5ifTCTTs4LL for ; Thu, 4 Jun 2020 12:21:22 -0700 (PDT) Received: from p3plsmtpa06-06.prod.phx3.secureserver.net (p3plsmtpa06-06.prod.phx3.secureserver.net [173.201.192.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6176F3A0DD8 for ; Thu, 4 Jun 2020 12:21:22 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id gvQXjM4t74ZBJgvQXjdpUS; Thu, 04 Jun 2020 12:21:22 -0700 X-CMAE-Analysis: v=2.3 cv=cICeTWWN c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=exi46fGUdMMp4p3NMQ0A:9 a=QEXdDO2ut3YA:10 a=lnv5G72teNOAoiqU1U4A:9 a=UsD1P9Y7objpqcCt:21 a=_W_S_7VecoQA:10 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_051646EE-5FA1-46E6-B5E9-CAAF0900A404" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Message-Id: Date: Thu, 4 Jun 2020 12:21:21 -0700 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfDxevF2/WyTr1i5WDYJY+75naQILzdBsJDx3u9IY/Y005pn5x9pEC8XGXQf0carKiBYKOuZ58jIQ8jtZaCKiFcRKoOXBg4QcQvRpB2FmI6SX+PaYAZ+Z WK105Gbq9wTwa4D3vIWpuicbpw/b0mz7F25MdCSZL7b+akbFAI/KciOH Archived-At: Subject: [Rats] A few more comments on UCCS X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jun 2020 19:21:23 -0000 --Apple-Mail=_051646EE-5FA1-46E6-B5E9-CAAF0900A404 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Consider retitle 3.2 to Confidentiality (privacy these days is more = about PII and non-tracking) Please add text like this on converting UCCS to CWT and back again. Note that the UCCS tag is NOT to be used on the map that contains the claims in an actual CWT. A UCCS is distinct from a CWT. The correct way to convert a UCCS to a CWT is to remove the UCCS tag (if it has one), then sign or encrypt it with COSE and add the CWT tag if necessary. To convert a CWT to a UCCS, remove the COSE protection, then add the UCCS tag if necessary. I think section 2 could be more direct in stating that a reason to use = UCCS is because the characteristics of COSE / CWT don=E2=80=99t match = the use case. For example, it is not possible to use a TPM to sign a = CWT, but it is possible to use to sign a UCCS. LL= --Apple-Mail=_051646EE-5FA1-46E6-B5E9-CAAF0900A404 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Consider retitle 3.2 to Confidentiality (privacy these days = is more about PII and non-tracking)


Please add text like this on converting UCCS to CWT and back = again.

Note that the UCCS tag is NOT to be used on the map that = contains the
claims in an actual CWT. A UCCS is = distinct from a CWT. The correct
way to convert a = UCCS to a CWT is to remove the UCCS tag (if it has
one), then sign or encrypt it with COSE and add the CWT tag = if
necessary. To convert a CWT to a UCCS, remove = the COSE protection,
then add the UCCS tag if = necessary.


I think section 2 could = be more direct in stating that a reason to use UCCS is because the = characteristics of COSE / CWT don=E2=80=99t match the use case. =  For example, it is not possible to use a TPM to sign a CWT, but it = is possible to use to sign a UCCS.

LL
= --Apple-Mail=_051646EE-5FA1-46E6-B5E9-CAAF0900A404-- From nobody Tue Jun 9 00:13:05 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE4853A08C9 for ; Tue, 9 Jun 2020 00:13:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=BId3VtwX; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=BId3VtwX Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ug9FU_38nevn for ; Tue, 9 Jun 2020 00:13:01 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2063.outbound.protection.outlook.com [40.107.22.63]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FB723A08B6 for ; Tue, 9 Jun 2020 00:13:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/H9+S1vgEVC8Cgfsj8uLe6TW6uA21Jcbyb7m4/IB7oQ=; b=BId3VtwXiitXssRJcoY0rPuusyGY+qfwS5KmS7qgc+KD9d2aqSjWS6zGoPobi5Ad1saGFIhD5VfNWX15AyshimFFFlfelBVQnoCWQzVF2Iw1i6mFsY/SdGrW/h4x57+pjnLMIwSrSSoUQzhhZBt6znrbizQK+8DgNCEuHsFClL8= Received: from DBBPR09CA0012.eurprd09.prod.outlook.com (2603:10a6:10:c0::24) by VE1PR08MB4717.eurprd08.prod.outlook.com (2603:10a6:802:ad::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.20; Tue, 9 Jun 2020 07:12:58 +0000 Received: from DB5EUR03FT022.eop-EUR03.prod.protection.outlook.com (2603:10a6:10:c0:cafe::e9) by DBBPR09CA0012.outlook.office365.com (2603:10a6:10:c0::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.18 via Frontend Transport; Tue, 9 Jun 2020 07:12:58 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT022.mail.protection.outlook.com (10.152.20.171) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.18 via Frontend Transport; Tue, 9 Jun 2020 07:12:58 +0000 Received: ("Tessian outbound 8bb15bb571b3:v59"); Tue, 09 Jun 2020 07:12:58 +0000 X-CR-MTA-TID: 64aa7808 Received: from 83dab36b495e.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 813F325E-6E3D-4E33-A0E5-B1E2F9FB4C0A.1; Tue, 09 Jun 2020 07:12:53 +0000 Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 83dab36b495e.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 09 Jun 2020 07:12:53 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HquHbZpDh4WdrWEt6xmqB9sgV7KYdRT2H3LOdZGad4cqJGjY6HMHkzPqMv1UMcROxHExO3++iOQz63hMvTyNCKXL01W/xK53lolryFKOuhKAwcHa7PguWaEXpbw03lSoZFZqQfJIgB1hXddiM+NdXR2u6sUao47209qgQFfyr08Kv+2rJxyE38igiFJhzKfsngzU1aMN71cn7pbbRgkgnBQpg+/B8A4DQtAz7tFyA/w2bM2PtTfuUNP36oURWHZ7OkakLG8idJIhaqLRAhj8Ny1bTPFcHvD8OW8i5i9Xn1Z0dqKcngYBxYnEDytZZtAAptAco6zpiajWL1oyEtgVsg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/H9+S1vgEVC8Cgfsj8uLe6TW6uA21Jcbyb7m4/IB7oQ=; b=XeO/69i2MOZ2/EB+pUSjA/fTIYV3CmADVFiMxdraKpmZej74LkHgH33xjyrVPbd5dnUBeaOS8u6ZN6ZRWV9HiQdyblhmSLt+MWy4rvJ2OR3xoxr3LJb64TyFFLw9gQeq4bU+u/8vzhO7VLmlXTqfIkUJNYXo1v4soXlDY7PBfTprj0lfsZCCbcMEzkgdHVrGI10hQ77CAF2qe/LNc8SMOGPe5sRFYKSTEuGpAy0yPPJng9rDK+nxm5yEpeLGGzd190pnX7cmHpsqforWPbgKhmGcheMwnNVrtzTORe+tc4UK1YWgRnEfqHFNKhkQZZEtoo/BsIEmbijF7ZSMpLwjLQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/H9+S1vgEVC8Cgfsj8uLe6TW6uA21Jcbyb7m4/IB7oQ=; b=BId3VtwXiitXssRJcoY0rPuusyGY+qfwS5KmS7qgc+KD9d2aqSjWS6zGoPobi5Ad1saGFIhD5VfNWX15AyshimFFFlfelBVQnoCWQzVF2Iw1i6mFsY/SdGrW/h4x57+pjnLMIwSrSSoUQzhhZBt6znrbizQK+8DgNCEuHsFClL8= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB4131.eurprd08.prod.outlook.com (2603:10a6:208:129::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.20; Tue, 9 Jun 2020 07:12:52 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3066.023; Tue, 9 Jun 2020 07:12:52 +0000 From: Hannes Tschofenig To: "rats@ietf.org" Thread-Topic: Use cases in draft-ietf-rats-architecture-04 Thread-Index: AdY+KXc/9OPetT3DQgie+zOpSv7ebA== Date: Tue, 9 Jun 2020 07:12:52 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 7bb1d8d1-f55d-4617-8ab2-e3dfb137bfb3.0 x-checkrecipientchecked: true Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; x-originating-ip: [156.67.194.193] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 057901e5-3519-4e40-f94e-08d80c448a1d x-ms-traffictypediagnostic: AM0PR08MB4131:|VE1PR08MB4717: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000; x-forefront-prvs: 042957ACD7 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: g1J642yAFklt56eekGjGo25/eSHrS35QLT4g1ozQpmHWQahtI21l0VQknKC+9h6h8DBEZpDyn2JHCpk0Z3Y5v3ZCZBmPLpCV83aSc9kcsN/KyvIr1zBtwAki3xWpaMrqQG9uQZy6nOyQZ+wThL4/CTKNKYQYkLQj3LScSBks/cBOJZ1VtOb+xOkb2xYt4UCA9HDm8mZGYaJlCZMO4QEKzGdVHhMGspWxY7admm1SDU++F+at0ToEVu0P7xfXmxnaaCLFyR6TTRT7krI/jXA7tWuwMgHVftW/lM7X+N1O+ac2tx+aWSiYiGJkTM/4zjXuBoto4SiSoP6WF/3eQuRA0vgeSvOVfttp4XG9qqeLskaTXYKWLrXlKtu0o95tH0+s4dwMyZswFIPPYsM9kz8JtA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(39860400002)(376002)(366004)(136003)(396003)(2906002)(186003)(8936002)(66574014)(8676002)(52536014)(83380400001)(86362001)(478600001)(66946007)(66556008)(316002)(5660300002)(66446008)(71200400001)(76116006)(33656002)(26005)(6916009)(64756008)(7696005)(9686003)(55016002)(66476007)(966005)(6506007); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB4131 Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT022.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(346002)(39860400002)(376002)(136003)(396003)(46966005)(66574014)(186003)(26005)(47076004)(478600001)(82740400003)(8676002)(52536014)(83380400001)(356005)(8936002)(81166007)(82310400002)(86362001)(336012)(70206006)(6916009)(5660300002)(9686003)(966005)(70586007)(2906002)(6506007)(33656002)(316002)(55016002)(7696005); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: ebcf5443-0a62-4dc1-9fa8-08d80c448673 X-Forefront-PRVS: 042957ACD7 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: FQ34RqF9hS2y9SF43AALOLG8HAO0ri4MfTip1oDdvMnUhHJt6nSXIF++KvxhW4YJVwDBPkBKO/nFwwueBMofu582hwRQaDbvau6xNAdQOQQRX/yk8adjnc1lE0sCwILi4EG5PEoIaquLph/wTy1Y1agr74IuEFGZzjveyot2dvTIp/8sd06EoOfVgqRcbWkrauQ3VB6YhJzQqzS/dFyyxpqxBnahlu73TTWDMJOAQGlTcuJ4eTnyrTOv8AxMQlb23w5+zbvtZvVdwgGqzmV2QODHAFlecEYFne9p1ZMOLygjoLKwWoqairDfmqXF67EmbjrZycLBaQJr6+UCr39LDLanXw3j3D/7oY9+NtZe52moOhxQ0hExwUnlpqpYs+BiCZ4gky2UXHAp6bsQ6MFremmj13uW0WXEV0PusIOnQJPRycrxEe88QjEL/3SYEEWC9BxXbFR1SdwKlaLsm8Lq6/+0emgZ1VxO/BSK2uFR9mk= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Jun 2020 07:12:58.7384 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 057901e5-3519-4e40-f94e-08d80c448a1d X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1PR08MB4717 Archived-At: Subject: [Rats] Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2020 07:13:04 -0000 Hi all, I also looked at the use cases in the architecture draft and I believe ther= e is room for improvement. The use case in Section 3.1. "Network Endpoint Assessment". It lists many f= eatures that, IMHO, are probably not provided by attestation (see recent di= scussion on the SUIT mailing list). I would just focus on this aspect " Rem= ote attestation is desired to prevent vulnerable or compromised devices fro= m getting access to the network and potentially harming others." Don't over= sell it. (FWIW I would delete the second paragraph because the use of root= of trust is not useful in context of this use case.) The use case for confidential computing in Section 3.2 with the "Confidenti= al Machine Learning (ML) Model Protection" is fine. Attestation allows me to trust the hardware so that I can put my code and m= y data there so that the computation does not leak to others. The added value of the "Confidential Data Retrieval" scenario is not clear = to me. Yes, can you use confidential computing to prevent disclosing data o= ther than machine learning models as well. If that's the idea of this addit= ional scenario then I would suggest to delete Section 3.3 and rename Sectio= n 3.2 to "Confidential Computing" and put an "for example" in front of mach= ine learning data. I do, however, think that it makes sense to be specific = in the use cases. You could also add a sentence to Section 3.2 and say some= thing like: "This is an example use case for confidential computing." And p= ut a link to the Confidential Computing Consortium website. Section 3.4. Critical Infrastructure Control is a bit too generic because = it talks about authorized code and users. Attestation does not provide anyt= hing about users. Try to be specific about what a device can do with attest= ation that it cannot do without. Pick an example from a critical infrastruc= ture. Section 3.5. talks about the TEEP use case and you could mention that attes= tation aims to ensure that the device has not been rooted, or does not run = in an emulated environment to have a specific example of what attestation c= ould provide us. Section 3.6 "Hardware Watchdog" is something I have not heard about. The co= ncept of a watchdog in embedded systems is well-known but it has a differen= t meaning, see https://en.wikipedia.org/wiki/Watchdog_timer Is there a reference to an article or something that indeed confirms that "= malware that holds a device hostage and does not allow it to reboot to prev= ent updates to be applied". Reading through the text makes me feel that you= made this up. (FWIW we had a researcher proposing such a remote watchdog b= ut it didn't require attestation. It was never implemented and you can imme= diately see that there are practical challenges...) Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Tue Jun 9 00:13:23 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98BD73A0A1C for ; Tue, 9 Jun 2020 00:13:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=Y1qJcaik; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=Y1qJcaik Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r5yc2tBKGVSL for ; Tue, 9 Jun 2020 00:13:18 -0700 (PDT) Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2049.outbound.protection.outlook.com [40.107.20.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DAA03A0A6E for ; Tue, 9 Jun 2020 00:13:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PYwTiOs3WWMffpslBZkwKEgoTrcHciDtoFWtxp+V9H4=; b=Y1qJcaikHetvHVk9Qa45rh4efuWVYtM1RSiK97+fnuuUEaEn5ShV8Q7Ql7lYog9oB47TlF0bS6sFlM7cPLP2j4lDSsw8ipYfYvEB+yv+CAhj++7Lpj4BJcLEkkPfQkda3EVQm+PnsicdCrOn5rC2ENigBxBYNs7cgWnOxLZrIRM= Received: from AM6PR04CA0027.eurprd04.prod.outlook.com (2603:10a6:20b:92::40) by HE1PR08MB2633.eurprd08.prod.outlook.com (2603:10a6:7:37::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.18; Tue, 9 Jun 2020 07:13:09 +0000 Received: from VE1EUR03FT025.eop-EUR03.prod.protection.outlook.com (2603:10a6:20b:92:cafe::b9) by AM6PR04CA0027.outlook.office365.com (2603:10a6:20b:92::40) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.18 via Frontend Transport; Tue, 9 Jun 2020 07:13:09 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT025.mail.protection.outlook.com (10.152.18.74) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.18 via Frontend Transport; Tue, 9 Jun 2020 07:13:09 +0000 Received: ("Tessian outbound 3e82c366635e:v59"); Tue, 09 Jun 2020 07:13:09 +0000 X-CR-MTA-TID: 64aa7808 Received: from 2a0a5155bf5f.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 93245333-C2A0-4A32-B072-3A467D2ECE56.1; Tue, 09 Jun 2020 07:13:04 +0000 Received: from EUR05-AM6-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 2a0a5155bf5f.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 09 Jun 2020 07:13:04 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NPNpmdavbsgLheuRBXrjYAC1HlW7V+KOUNJeB7OREKPWX6z6kUtmemifNbgQ45vg4drwjF0qK4VlY1zOkQkqTs0hxMJraXtDKCnWQLDQdju6iX7ZjK6/BAhUyKFWp6dACZCWUJJMYsCaWZUThkIRNviI5npl/596j5cKNeuxlC6sdFc1dzi+Ij7fctaZ1Vhs5+2VjqeG7g9P7L5q/GEgmuJv6v8P/TbyNQYnQugjKwG5G5k4QTQ1LhPPoqtLH7sUV6glp5xpvAn7fLtPeXp3r06KDrcJgjWxpReA93WPBdqEBxpYM9+KKngRHSL4fm+eiocaf/JmdRn9w8g7pPyrfA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PYwTiOs3WWMffpslBZkwKEgoTrcHciDtoFWtxp+V9H4=; b=dcNZLeHwVzjuYC5HRNiWWoydPQn2IK57fo9CazgundcCKMQlvHKQEAstOvujJp/XPZDkzKXPpq/g8uXAaBGSh7M5xWCZndvBRbgD7+UwqeU9O4AvazMMNc2AUf2Watgom7JcYEhSbbRpVQMepqoNbfzisARfMhB8LUskb2oG6rHxIzAEo3kv52SixuW+9saQSqYq1M44YIAxjlLuzmUrfoXZ5s+yHGOvmhLQJxKgCt48vQaeVOeVQ+DQBfO41w4ReLSpF8g7VuYz9YqGKreJ6n27jwcTH9+JV6GYep8dwpaXCXCXFoaZ70RTAL7s1SLkqaUyGQLYFEvMeA2n3ahJ2A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PYwTiOs3WWMffpslBZkwKEgoTrcHciDtoFWtxp+V9H4=; b=Y1qJcaikHetvHVk9Qa45rh4efuWVYtM1RSiK97+fnuuUEaEn5ShV8Q7Ql7lYog9oB47TlF0bS6sFlM7cPLP2j4lDSsw8ipYfYvEB+yv+CAhj++7Lpj4BJcLEkkPfQkda3EVQm+PnsicdCrOn5rC2ENigBxBYNs7cgWnOxLZrIRM= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB4131.eurprd08.prod.outlook.com (2603:10a6:208:129::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.20; Tue, 9 Jun 2020 07:13:03 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3066.023; Tue, 9 Jun 2020 07:13:03 +0000 From: Hannes Tschofenig To: "rats@ietf.org" Thread-Topic: draft-ietf-rats-architecture-04 Thread-Index: AdY+J0/pF7zZ3ON/SC6hTZ7MnKDnLg== Date: Tue, 9 Jun 2020 07:13:03 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 99bb5e43-0de1-4330-866e-82082b76ac7e.0 x-checkrecipientchecked: true Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; x-originating-ip: [156.67.194.193] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 7d5a6e49-1f8a-4a1c-00c1-08d80c449067 x-ms-traffictypediagnostic: AM0PR08MB4131:|HE1PR08MB2633: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:4941;OLM:6790; x-forefront-prvs: 042957ACD7 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: Ubk+4YDxX+Yh8A0HA53HImjV9FiulOggzG4bGcc2NqdH+45F1XUO8w5yIvFf5NitAZ0GaU8IGiTuzJtWX+PvuOiUIvKstRObTqSiYA6Gpj4p9dkyM5uyG69JT6oKLu56L3dUav0b96fJ0LNyWKFSJVjKLtmaPPC/GuuGNddHFWKBRYN2tL9e7KhnTi/C2lly7K4J08znRXUrMJVWlIhkNJPy9VuZTSxAOfyDZzHXg2voys456MeqKN1jl+s6leUkIfIA2WZk7RWmtE+rqMJoKRPHYlLm+vJ1LlyQfWmIpPF1MGhKwEu/03xcBTVB7TVHgAJL5pWu8bStDHRTP3rvNA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(39860400002)(376002)(366004)(136003)(396003)(2906002)(186003)(8936002)(8676002)(52536014)(83380400001)(86362001)(478600001)(66946007)(66556008)(316002)(5660300002)(66446008)(71200400001)(76116006)(33656002)(26005)(6916009)(64756008)(7696005)(9686003)(55016002)(66476007)(6506007); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: Pu6FX6XgsG53fWlVkO5aSKLIjY09duwzGrb+gwq9FCPu0G6KzNg0xCVNi+vRjdjn6vTORL2O/KkfxIKGlPKusUdUTJv1HdTIvSItkEks1zpvn6tEoX6VEMTY3DN9MMdR/9cO+c34IFLZwWtMSsS2joZ3e0fR/HbnEcJcUY8Wyyc1874XvtQn+eDP47NOEHVhbF3kPSCLWBBcW1BtqnGE8raHQAgl7Ertejrx0xkfrNxYWIrJrn486dOVz8DAw9WYpsCWAL8lam4n5YvpEYIijEyiKjwi022Hd+b7VBxFxdrx1eXnQObu+zT2hcVnkDCVm3r4bJf1fs3o4otHnt1O3CBqJ0Vka0OrjVVYjnwrv9YZLFy/WmAG75KBgnlzAfwlosMeg6PUzbceAXE9hpJ6CTxZaz3hQYw1Y3BGRqKlejILbPDZ8SHps55BOGspChdMCU2t2rqSyrHIatlXBel6wyH7cRRz/zbdzDr8GqtmIHUA7a2XZTT8q6QB5QwMytUx x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR08MB37168B75C592DA7892179957FA820AM0PR08MB3716eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB4131 Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT025.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(136003)(39860400002)(376002)(396003)(346002)(46966005)(86362001)(186003)(47076004)(55016002)(9686003)(2906002)(6506007)(316002)(83380400001)(8676002)(7696005)(70586007)(82310400002)(52536014)(356005)(5660300002)(26005)(70206006)(336012)(36906005)(8936002)(81166007)(478600001)(6916009)(82740400003)(33656002); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: b3129b33-97e2-4983-c9e1-08d80c448cc7 X-Forefront-PRVS: 042957ACD7 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: Te3aVaTspO7hfPGYJmcaomWY7CkoJDCz3fdnEgOXd/iw90OzJMaIRwlYrfHUxdwq7hOJ5r+dc5NUpz7NQfafIVqrxSxMu6zZSnZSlLaKoac31/ciRMd3K7vnmYg+WfIQMa2DqeBtwVN+LtbOED6Hhs39DMIRe/6AgzRl4JLpZ6ToGLD6W+idMvzZokFlM+Yp3nw6JRv/bxYTfdVtHyXD1xBOk2nsUYNkhBYeEfts+dc3NQmiXQl7NCdSC0da9EkVQZWGvJS7Vr86PS8Js70YoQEdf9K2Ol/ZexXCljY8wFzRmvKMWD2yqKdtv16Vx57A53yB8GTlZTnhkfA9pYT1POKuejxyS4ZDMI3U8xWqUQDhB880dCCg8LhNB9lhlTRANPDYSZxM2Wkc3CTMMsAL4A== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Jun 2020 07:13:09.1774 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 7d5a6e49-1f8a-4a1c-00c1-08d80c449067 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR08MB2633 Archived-At: Subject: [Rats] draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2020 07:13:22 -0000 --_000_AM0PR08MB37168B75C592DA7892179957FA820AM0PR08MB3716eurp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all I have re-read the architecture document and IMHO it is still far too compl= ex. It makes the reader believe that attestation is some rocket-science con= cept, which it just isn't. After such a long time the document is unnecessa= rily hard to read and understand. Here is the story as I see it. In the basic form a device puts a bunch of claims together and then signs t= hem. The device is the attester. Then, this information is sent to another party, the relying party, which u= ses this information for some kind of decision making. Of course, there is some prior setup that has to happen (provisioning of ke= ys during manufacturing) and some assumptions have to be made as well (atte= station code on the device has to be well protected, code isolation being u= sed, etc.). Then, there is the a complex case where the relying party cannot use the re= ceived information directly. This is most likely related to any form of sof= tware measurements. If you send a hash of a bootloader to some relying part= y you cannot really expect it to be used for anything. The reason the relyi= ng party cannot use that information directly is because it does not know w= hat software the device is really supposed to be running. Hence, there is a= need to consult another party (let's call it the verifier). The assumption= is that this party knows what the expected fingerprint is and hence what s= oftware is running on the device. That's all. There is not much more complexity to this topic. So, where do all these terms come from? Appraisal policies, evidence, endor= ser, ... I would delete them and see whether the idea still gets across. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM0PR08MB37168B75C592DA7892179957FA820AM0PR08MB3716eurp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all

 

I have re-read the architecture document and IMHO it= is still far too complex. It makes the reader believe that attestation is = some rocket-science concept, which it just isn’t. After such a long t= ime the document is unnecessarily hard to read and understand.

 

Here is the story as I see it.

 

In the basic form a device puts a bunch of claims to= gether and then signs them. The device is the attester.

Then, this information is sent to another party, the= relying party, which uses this information for some kind of decision makin= g.

 

Of course, there is some prior setup that has to hap= pen (provisioning of keys during manufacturing) and some assumptions have t= o be made as well (attestation code on the device has to be well protected,= code isolation being used, etc.).

 

Then, there is the a complex case where the relying = party cannot use the received information directly. This is most likely rel= ated to any form of software measurements. If you send a hash of a bootload= er to some relying party you cannot really expect it to be used for anything. The reason the relying party can= not use that information directly is because it does not know what software= the device is really supposed to be running. Hence, there is a need to con= sult another party (let’s call it the verifier). The assumption is that this party knows what the expected f= ingerprint is and hence what software is running on the device.

 

That’s all. There is not much more complexity = to this topic.  

 

So, where do all these terms come from? Appraisal po= licies, evidence, endorser, ...

 

I would delete them and see whether the idea still g= ets across.  

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM0PR08MB37168B75C592DA7892179957FA820AM0PR08MB3716eurp_-- From nobody Tue Jun 9 09:33:54 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D49B3A097A for ; Tue, 9 Jun 2020 09:33:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IztCyLNKzi4r for ; Tue, 9 Jun 2020 09:33:49 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 390E53A0905 for ; Tue, 9 Jun 2020 09:33:49 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 04E1C38A35; Tue, 9 Jun 2020 12:31:20 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id aRKUhYVBSRvl; Tue, 9 Jun 2020 12:31:18 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id F262D38A32; Tue, 9 Jun 2020 12:31:17 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 36F29696; Tue, 9 Jun 2020 12:33:46 -0400 (EDT) From: Michael Richardson To: Hannes Tschofenig cc: "rats\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2020 16:33:52 -0000 --=-=-= Content-Type: text/plain Thank you for your comments. I believe that documents go from "too little" text, to a point where there is now "too much" (oversell) text, and the feedback I'm hearing from you, is that we are now on the too much side. Hannes Tschofenig wrote: > Section 3.6 "Hardware Watchdog" is something I have not heard > about. The concept of a watchdog in embedded systems is well-known but > it has a different meaning, see > https://en.wikipedia.org/wiki/Watchdog_timer Is there a reference to an > article or something that indeed confirms that "malware that holds a > device hostage and does not allow it to reboot to prevent updates to be > applied". Reading through the text makes me feel that you made this > up. (FWIW we had a researcher proposing such a remote watchdog but it > didn't require attestation. It was never implemented and you can > immediately see that there are practical challenges...) This situation comes from the desktop situation. The machine has upgraded, and as soon as it would reboot, it would be safe, but the malware keeps clicking "Cancel" on the "reboot now" dialog. Applications reasonably can and should say, "No, do not reboot now", but there needs to be a limit, and the use of a watchdog in a hardware/firmware TPM module can do that. It is *exactly* as in the embedded case (keep holding the switch down, or I blow up), but the "reset watchdog" mechanism is no longer just poking some hardware register, but rather, supplying some Attestation Result to it as to health of system. How can we rewrite this to make this clearer for you? -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl7fuekACgkQgItw+93Q 3WVNOAf8DxF5XLMmwFg9fB1rSVJj8WJQAVulHmNg0Ac/GoQmlt3mCtkIIdSpGuaQ f6Ol1iRkjexBcOnMP6uGmUJbjCZg38p1UsbqRKiARbE/8eu85e/xMDLyVX/hqGZK nFBJ68jeUZbRUjClO3AE0Yxcbd2+DmdbXp2YCves3s0AXedGLffl7mZNRxskjRqP 0EXVuzgDGptxiAZjfNrBdrtipIV+aH4KDkBwMTOebPk3YBsWHf7R38qnYq1ytgne 2aauGyPNN8pkW/W3k61qqXyI7bCAQ69dPRC6xzpnB7uQ3914xyAP/AHYGj8q91cS LS/eVogcrw36lPhGAk2lNsYnVGXQ5A== =vj8G -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Jun 9 09:44:20 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17BC23A0991 for ; Tue, 9 Jun 2020 09:44:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=gG6Sg96h; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=gG6Sg96h Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D90_Zvr1oi9I for ; Tue, 9 Jun 2020 09:44:16 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130088.outbound.protection.outlook.com [40.107.13.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 429F73A098C for ; Tue, 9 Jun 2020 09:44:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=61z5dZR0uIWKgVbplk4SV/tAc1fB69Ik7YpCN8usBP0=; b=gG6Sg96hJdQ0co7JPFn3dNfpaku6XQzo+zeGuvtiIRmYOvuEu8d1IcPb68TDqdHnSJJR67IJxk2WQ2y6NK/Bvr0NIGVNq2VwbGTeZ1eX1SM8jGVQBZtH0JnrEQnK3cy/oMVBqgvO0VLIHH18BMy5o9Im3M0S3xLmc1pnfG/aqMU= Received: from DB7PR05CA0026.eurprd05.prod.outlook.com (2603:10a6:10:36::39) by AM0PR08MB4196.eurprd08.prod.outlook.com (2603:10a6:208:129::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.18; Tue, 9 Jun 2020 16:44:13 +0000 Received: from DB5EUR03FT022.eop-EUR03.prod.protection.outlook.com (2603:10a6:10:36:cafe::48) by DB7PR05CA0026.outlook.office365.com (2603:10a6:10:36::39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend Transport; Tue, 9 Jun 2020 16:44:13 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT022.mail.protection.outlook.com (10.152.20.171) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.18 via Frontend Transport; Tue, 9 Jun 2020 16:44:13 +0000 Received: ("Tessian outbound 1145f7a293ca:v59"); Tue, 09 Jun 2020 16:44:13 +0000 X-CR-MTA-TID: 64aa7808 Received: from ccc315cd43a7.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id E1793AB6-CC1D-4125-BEBA-02A79FD693C2.1; Tue, 09 Jun 2020 16:44:08 +0000 Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id ccc315cd43a7.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 09 Jun 2020 16:44:08 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=S4UeTzPwJfB642wpNjEWreeUx/9uLZX5Ud6EJ+hg7w4j1zkPvKvVUlNyNiZ/+ojY9ZdiqzgOgSJ6Ekw5KAnK1s9i3HvHREesja6h31uUMJyasoJnBogNG7Qjh9fPYbmZUEBVzhswJIsAIXVxZCUczo+ktuTqDuGJLztX4Pr3wLUuuPizJ1rmxFHNMGZP2SJE/kgOGUV7swVaO9q+pDbcF3l9g68jtjzn4fbt5+t/D8HkWYBT6bY+QcZx+u6hc29pZZLXAdnqA++waYfa3Xgm16m3AArquWr8gwa/sAc0sV5MWsAx4eMvadEJQPYrbTQhrNUs9QND5Rq7yLmsrGw/Tw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=61z5dZR0uIWKgVbplk4SV/tAc1fB69Ik7YpCN8usBP0=; b=Dcq1FYqqmYauJS1uvRfJRJ6Nn6WV8c0ttDZ6EHck9pYcy2Fq+v0jUNQX+OLTk8r+LVIPEi8bWDbD+LlmdL6fE2AfELvttChyjUx/DV9YtEAbDeT2eic3fyNBlg29Usk7GJG7zsJ7+3c2nU91hZZojPQkDT3risSSxI0vEPtIazizdsaEFw7tXJZ1rnmaLWIRUSlcMiMdYa703f1WgugHUNYQpSSlJR89+CcY8Pp+q8hlyfYShNF0xukP3bXqauUt4nqp5NZmpCWS1nOCDvoefMdkl7+yfzzyjM8jAz1inwZDTZE2/AA49RfLryuZnMQAItHshXOkbNgaha/+YuOBug== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=61z5dZR0uIWKgVbplk4SV/tAc1fB69Ik7YpCN8usBP0=; b=gG6Sg96hJdQ0co7JPFn3dNfpaku6XQzo+zeGuvtiIRmYOvuEu8d1IcPb68TDqdHnSJJR67IJxk2WQ2y6NK/Bvr0NIGVNq2VwbGTeZ1eX1SM8jGVQBZtH0JnrEQnK3cy/oMVBqgvO0VLIHH18BMy5o9Im3M0S3xLmc1pnfG/aqMU= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB3922.eurprd08.prod.outlook.com (2603:10a6:208:128::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.22; Tue, 9 Jun 2020 16:44:07 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3066.023; Tue, 9 Jun 2020 16:44:06 +0000 From: Hannes Tschofenig To: Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] Use cases in draft-ietf-rats-architecture-04 Thread-Index: AdY+KXc/9OPetT3DQgie+zOpSv7ebAAUke4AAAA16CA= Date: Tue, 9 Jun 2020 16:44:06 +0000 Message-ID: References: <27651.1591720426@localhost> In-Reply-To: <27651.1591720426@localhost> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: dbbab0c8-ed1d-4bcd-94f1-22c2828ab692.1 x-checkrecipientchecked: true Authentication-Results-Original: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; x-originating-ip: [156.67.194.193] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 44587560-64cc-4fc0-d31d-08d80c94574e x-ms-traffictypediagnostic: AM0PR08MB3922:|AM0PR08MB4196: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000; x-forefront-prvs: 042957ACD7 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: AVkxt/8RMkTna1nDlkJ2Ou59yXfXwvx64SmW0mR0oMDyoKI3tPiE1lq3GHWRomgfl3gn7RiruV8ty2BDfqKN966xXy5cqU1hBbVL67b1A06ZaU2dabSpA6oklB1J1WtuZ/r29Ign9VR3MOE4CCP55H2OVs98QSU/smDw9kw0ZQBve9VxcBiAhilbsrVp9JBQf07ny8f+V2NAel+1yqbbJX4up0i/oMeQ7FPtbl46Cn/cnxkV1h1krP3FsvUadW8S0TuuYxaFcv86mOwBGmN5he6as7I8wCtGm0DAVGB32Mi9PLCgu9ONMNrarYNt+UetTnQao6iXaWXJqv9hzlnv7G8hq8kr9l6N6nzm1kT0F1RfSpzOBWmpw6BnSpBczR7Ul6g6q7F2JnOMzJAz9bcyMA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(366004)(346002)(376002)(39840400004)(396003)(76116006)(478600001)(6506007)(7696005)(186003)(64756008)(316002)(26005)(66946007)(66556008)(66446008)(8676002)(83380400001)(4326008)(66574014)(55016002)(9686003)(33656002)(66476007)(71200400001)(86362001)(966005)(5660300002)(8936002)(2906002)(52536014); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3922 Original-Authentication-Results: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT022.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(39840400004)(396003)(346002)(376002)(136003)(46966005)(8936002)(55016002)(5660300002)(9686003)(70206006)(6506007)(86362001)(8676002)(186003)(47076004)(26005)(336012)(70586007)(2906002)(83380400001)(81166007)(6862004)(82310400002)(966005)(4326008)(52536014)(478600001)(33656002)(66574014)(356005)(316002)(7696005); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 776f7472-8916-49ba-8d7c-08d80c94538e X-Forefront-PRVS: 042957ACD7 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 6s25DGn5aF++e8RViI+9xLtRPRMjndnYJikJoc7cTD8k5OGorQKaMxaNf5gC+7BYvuMBN6YBtW9sPcutaDWc7ryTpB8jZKuc5r3qhxd9YVdk1eeb20GdEzDmnThj9b0motjFJ4mcqVZqDxo5CV/TdZxRoHRkMxVqpzp9PzVkIwSNkg9/RPezOMLV9HlS08Kkd1b0CyWNlZt3bN2Xi+DxSHvcQ4DN0aYtRpu2v8xgxpZncvNzSYQI9+YMqAjZm87t0D3ePYG3kJitFC2tnDpSDVy3Ol2rkUfIofMVhhZxveY9M+f9KIO9mYfKSIKpsezimF8SNZuKM0HkAcs4wPDm/pbVbMFqA0JQcoOx4O8l9lwOo9iQnXTuX5zh+rl3Y5U1dRlK/C5YxhR1sLXmC2tVZFakYDyzCJTljb5usAo/lJkjRz13YDPLAYBOAnngHIJmbfZeaEPDjd6y32Rf0wOeJcRRezOz7QvNJyjVEO040pw= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Jun 2020 16:44:13.2321 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 44587560-64cc-4fc0-d31d-08d80c94574e X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB4196 Archived-At: Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2020 16:44:19 -0000 Hi Michael Thanks for the quick response. Regarding the hardware watchdog I just feel it is a made-up use case. Is th= is something people actually want to use in practice? Today's use of hardware watchdogs aim to deal with non-security use cases (= mostly dealing with crashing software). Ciao Hannes Hannes Tschofenig wrote: > Section 3.6 "Hardware Watchdog" is something I have not heard > about. The concept of a watchdog in embedded systems is well-known bu= t > it has a different meaning, see > https://en.wikipedia.org/wiki/Watchdog_timer Is there a reference to = an > article or something that indeed confirms that "malware that holds a > device hostage and does not allow it to reboot to prevent updates to = be > applied". Reading through the text makes me feel that you made this > up. (FWIW we had a researcher proposing such a remote watchdog but it > didn't require attestation. It was never implemented and you can > immediately see that there are practical challenges...) This situation comes from the desktop situation. The machine has upgraded, and as soon as it would reboot, it would be safe,= but the malware keeps clicking "Cancel" on the "reboot now" dialog. Applications reasonably can and should say, "No, do not reboot now", but th= ere needs to be a limit, and the use of a watchdog in a hardware/firmware T= PM module can do that. It is *exactly* as in the embedded case (keep holding the switch down, or I= blow up), but the "reset watchdog" mechanism is no longer just poking some= hardware register, but rather, supplying some Attestation Result to it as = to health of system. How can we rewrite this to make this clearer for you? -- Michael Richardson , Sandelman Software Works -=3D = IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Tue Jun 9 10:51:29 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2562B3A0C6F for ; Tue, 9 Jun 2020 10:51:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tFInvqrnAEzg for ; Tue, 9 Jun 2020 10:51:26 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E18283A0C5D for ; Tue, 9 Jun 2020 10:51:25 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 887E838A38; Tue, 9 Jun 2020 13:48:56 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id iJCT9J6dGrmA; Tue, 9 Jun 2020 13:48:56 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id C975E38A36; Tue, 9 Jun 2020 13:48:55 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 13335696; Tue, 9 Jun 2020 13:51:24 -0400 (EDT) From: Michael Richardson To: Hannes Tschofenig cc: "rats\@ietf.org" In-Reply-To: References: <27651.1591720426@localhost> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2020 17:51:28 -0000 --=-=-= Content-Type: text/plain Hannes Tschofenig wrote: > Regarding the hardware watchdog I just feel it is a made-up use > case. Is this something people actually want to use in practice? > Today's use of hardware watchdogs aim to deal with non-security use > cases (mostly dealing with crashing software). We've heard from Enterprise people that this is important. It's not a constrained case. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl7fzBsACgkQgItw+93Q 3WXuzQf9E/UZ2Ku2ZQkciM4Ms4TTp3k1+WODxqyAvKN8fL1TIPrtJHu1Qmo+u8u9 uueL+fZIIuNxkxVi2NqYa7vSK66ByL6JBvlZ4u4ZvIzO/FkCRTfvNkk1ifNYBDJ+ EvMmKdiSs/DsYK0rw2OUmRGQPqLXuI7LlUujouqAwvYbJ5QpfaVMBWSkpWtY+rWR mW7jYGMPba/tFbpLMrb/yRVatIi4lMWtcDrkBOseSBF3tDsKG2TBo9+6Qml+vF1Q 2Sf10R1IT932mbtMgX2KN1Y84kFQrbwhu/yQCT3LY0WMpfw1rHZfEQhoFS4Gpkqm j/fAkGUSbT+6m+aJgXWoXXQzUpGiEw== =8lhw -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Jun 9 12:26:36 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A183D3A0D33 for ; Tue, 9 Jun 2020 12:26:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e46j5BXUZ8H3 for ; Tue, 9 Jun 2020 12:26:33 -0700 (PDT) Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2121.outbound.protection.outlook.com [40.107.20.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B7713A0D30 for ; Tue, 9 Jun 2020 12:26:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AlSUZ2tUxP0QMgIvo+IkKxjEPxDDS/crwVL7mL1vSyuWXEZkPJSyNpF5Sq0gwjfvsAH79xwH+Pia0sw1iKXVOQXt++jvsKVYw5Qvr/dB79c6T69siTvRWOp6f5VDuZbTE7mX43piL/zqB32pGgPo99w3mwrqxBdsyID6vNFwYHImh3CQg6G3YHTaaGTjyCSQGHvg6FMrCo9DHbk8hV3+GHodrVN7Cvb15137uIm6ci9b534h75Y2I2z3zCyZ3fk46LDz8dZwozrT6DxdJL+0poOXbMkh/4vbqqMILzU6sAPwTNBLITdWRwYuJq6SdDXnt9++q8ulOTS957IdbXW+og== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WVpIF/p2vokWfkRMoOf4yzTO4je5DS4Q3xrdP4GBbDY=; b=M3gDUxPRG2ExZkC3NL1rtaEVUynetdRcXcmQyrZBtIENV1hcGI0bBRbjW85qVpTcQFncCvs8A/M0H2vYEuPuP53M4RT+1eodEmPfwI2DAHDLlmIo14qCpsf4WHMyoHTpkxBc6wlQS+sAMqkz8RKitfULITbgOr2W4UfT/P1Fi6VH9asCpsvMlwXwA7VJAI6QFIk6gKXS1R+lZBAFMbhknpCAQYGfWkg92pYvlMA6PZT0emH5x4yHBcQA1BoTarAv+NKpp4lFX1zbu06zdtoHFM3y/9/E3Wq9nxY0g7J1OLQ5+YZ9djtbS+Cr8fSwMEIiv2MZ7oAzo/U+d5U6e5Jkjw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia-bell-labs.com; dmarc=pass action=none header.from=nokia-bell-labs.com; dkim=pass header.d=nokia-bell-labs.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WVpIF/p2vokWfkRMoOf4yzTO4je5DS4Q3xrdP4GBbDY=; b=Nhr66pL3BMQ6OOfLc8xfuONhZ3gUAQ5vIUHXnNqpRcpCd5G16z7OFW0vaLuDs9QofyZowF6ZdG/4yI85nuYFcbwFfb4RFnnskPM/1Tq7viaQwMHDaLMRp+oWnnbZo/k41AtcDk95qjt9HMjE/WQsAxPDkbu0Kaw3aPIGQ2hXkx4= Received: from HE1PR07MB4252.eurprd07.prod.outlook.com (2603:10a6:7:9f::21) by HE1PR07MB4252.eurprd07.prod.outlook.com (2603:10a6:7:9f::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.13; Tue, 9 Jun 2020 19:26:31 +0000 Received: from HE1PR07MB4252.eurprd07.prod.outlook.com ([fe80::393d:8f7f:6869:a10b]) by HE1PR07MB4252.eurprd07.prod.outlook.com ([fe80::393d:8f7f:6869:a10b%7]) with mapi id 15.20.3088.017; Tue, 9 Jun 2020 19:26:30 +0000 From: "Oliver, Ian (Nokia - FI/Espoo)" To: Michael Richardson , Hannes Tschofenig CC: "rats@ietf.org" Thread-Topic: [Rats] Use cases in draft-ietf-rats-architecture-04 Thread-Index: AQHWPpPSiFR4ruzkUU+8JY0PrOPRag== Date: Tue, 9 Jun 2020 19:26:30 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: sandelman.ca; dkim=none (message not signed) header.d=none;sandelman.ca; dmarc=none action=none header.from=nokia-bell-labs.com; x-originating-ip: [93.106.207.238] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9087cc1b-8a52-4e23-0adb-08d80cab0377 x-ms-traffictypediagnostic: HE1PR07MB4252: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 042957ACD7 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: gMP2r8QYhRdrvmuLAfFFsltef40hgEDB+/misMJMd4c3wPeUUwas1GYXra7xBFAerKKBIbd9IJEoVlJDzGYZFSq3H3RXT/iDWP4kO3HUZN5fD5/7+CV9tnK/ksJr5hu4Ioj95T6hsBjG1UBXBBmBhtE4tv4Ig81aQ+sqCVL+dz3yTreqtFdFzORHLfK28gs7AaEvq9/uFZcu2PuAnqLzWw3PEqW8Hz3vl1HWmPsXJgNnr6/Dx3DpJ5Btl9Bm7IwJVRyImr07RvHaWlRPbdsInYDCfMCHziOki6wxGErJuGtpFt9Ogs9GgXkUxf/zmAsK x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR07MB4252.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(136003)(396003)(376002)(39860400002)(366004)(26005)(6506007)(5660300002)(66946007)(66476007)(66556008)(64756008)(52536014)(86362001)(7696005)(66446008)(4744005)(4326008)(110136005)(8936002)(53546011)(2906002)(9686003)(19627405001)(55016002)(76116006)(8676002)(33656002)(71200400001)(478600001)(83380400001)(186003)(316002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_HE1PR07MB4252B6BC39D506E393C30F068F820HE1PR07MB4252eurp_" MIME-Version: 1.0 X-OriginatorOrg: nokia-bell-labs.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9087cc1b-8a52-4e23-0adb-08d80cab0377 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jun 2020 19:26:30.8680 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: jqKwoCqUpxu8+fEA+bQxzNEaKGRWsj2DgXpvbNkgn5fz+a161SoBrQcAAsTqqpMlbtGgNYSn8zhNKjAnXRz6mvwmUqD+Oe3Q3nSw6u1a72Y= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB4252 Archived-At: Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2020 19:26:35 -0000 --_000_HE1PR07MB4252B6BC39D506E393C30F068F820HE1PR07MB4252eurp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Just to add to that, the watchdog case is relevant in our domain Ian -- Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 ________________________________ From: Michael Richardson Sent: Tuesday, June 09, 2020 22:00 To: Hannes Tschofenig Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Hannes Tschofenig wrote: > Regarding the hardware watchdog I just feel it is a made-up use > case. Is this something people actually want to use in practice? > Today's use of hardware watchdogs aim to deal with non-security use > cases (mostly dealing with crashing software). We've heard from Enterprise people that this is important. It's not a constrained case. -- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --_000_HE1PR07MB4252B6BC39D506E393C30F068F820HE1PR07MB4252eurp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Just to add to that, the watchdog case is relevant in our domain

Ian

--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

+358 50 483 6237


From: Michael Richardson
Sent: Tuesday, June 09, 2020 22:00
To: Hannes Tschofenig
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04


Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:
    > Regarding the hardware watchdog I just feel it is a= made-up use
    > case. Is this something people actually want to use= in practice?
    > Today's use of hardware watchdogs aim to deal with = non-security use
    > cases (mostly dealing with crashing software).

We've heard from Enterprise people that this is important.
It's not a constrained case.

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Wo= rks
 -=3D IPv6 IoT consulting =3D-
--_000_HE1PR07MB4252B6BC39D506E393C30F068F820HE1PR07MB4252eurp_-- From nobody Tue Jun 9 12:31:19 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 625F63A0D40 for ; Tue, 9 Jun 2020 12:31:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=NWcjOgEa; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=NWcjOgEa Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xUtVpUz5FmhB for ; Tue, 9 Jun 2020 12:31:11 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60076.outbound.protection.outlook.com [40.107.6.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABCB13A0D32 for ; Tue, 9 Jun 2020 12:30:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CMpVhXYf5MpYP9M8HkIZc18+7uawMeckiPxzW3pKh20=; b=NWcjOgEaRKOhHaDll1uvph4rG4rGtS/gaP7JfSEAou8g+puY7oefqPm3yVvyzTvz2hOe/NdXgwLnsQ+ixYC+2KOqITLSP8e4fMhWNGjSJJlN6XQXCRljPbNzKqMmHJ6kKb3IpYpi9xYEUM0J0rMETpQ9L1zmT7+EbmDT7+RT/DU= Received: from DB6PR07CA0024.eurprd07.prod.outlook.com (2603:10a6:6:2d::34) by DB6PR0801MB1669.eurprd08.prod.outlook.com (2603:10a6:4:30::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.23; Tue, 9 Jun 2020 19:30:47 +0000 Received: from DB5EUR03FT015.eop-EUR03.prod.protection.outlook.com (2603:10a6:6:2d:cafe::8e) by DB6PR07CA0024.outlook.office365.com (2603:10a6:6:2d::34) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.9 via Frontend Transport; Tue, 9 Jun 2020 19:30:47 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT015.mail.protection.outlook.com (10.152.20.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend Transport; Tue, 9 Jun 2020 19:30:47 +0000 Received: ("Tessian outbound 3e82c366635e:v59"); Tue, 09 Jun 2020 19:30:47 +0000 X-CR-MTA-TID: 64aa7808 Received: from 9ec20907ce55.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 954514CB-1011-4EF2-9EF0-C1B1AFF0B4C8.1; Tue, 09 Jun 2020 19:30:41 +0000 Received: from EUR04-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 9ec20907ce55.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 09 Jun 2020 19:30:41 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KjVOoG7spT7eOGdR7/PDhOn14gmrEYxe5Pthjf3wYcKwxEREZcMFzpfUvBxzlFoei0eawYYYVQ6cdYN8qhAG3SsppxQO5FuHZ0wbleQOoLZAuWEZpnPoPpWUR+6wzMGBQ4GIVC+h886vWk9hdTE+lLW0/rPxwl0kBed5MRFfQwoW5Fc0cKho//sn7r7p4jZUtflt/RpN8BbmUvy82Ly01uhKVvUyzcKmlOHE71AEs2DF18bwJjB/NHUq9rONge6o1ProPAdB3UIcoRT70oNmcwrfTH1CKJswqdt1DyjfVaXwx5G2YqFSWAgh5beXQZQW/7cq6IN/QzmDv887rTeAug== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CMpVhXYf5MpYP9M8HkIZc18+7uawMeckiPxzW3pKh20=; b=hUNnzBnyJM1tGrzEmzhwZrPRR8YZ4ykSJeH0dl6AchuAUdc1x99gjaJRiFwztpJYLRDArYcJac8U35oPuK+gAYn8sCUfEVxJyKupkZFrVHptaYanGGJsTZwAysD8uXxf3Pn7nTNHGPrzvj8SS7TC+3hVwcybBfnzh6iZtXiyM4gJAVO9lelxRTtQ8XKfgwF4Rj2EBRdbxegtsOBLVeqoYHHnbT20neYYrYYxLyBOLhnIWAlswe0DbeGD+52S97KMi8dEdJqAjtdI+EqcqLcO/9ApOCpbuTdWm2U3hMKHW2r73jrhGPYIj0JAbhnBqiVpc7tQkPqmd34FGl+4BBMRKw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CMpVhXYf5MpYP9M8HkIZc18+7uawMeckiPxzW3pKh20=; b=NWcjOgEaRKOhHaDll1uvph4rG4rGtS/gaP7JfSEAou8g+puY7oefqPm3yVvyzTvz2hOe/NdXgwLnsQ+ixYC+2KOqITLSP8e4fMhWNGjSJJlN6XQXCRljPbNzKqMmHJ6kKb3IpYpi9xYEUM0J0rMETpQ9L1zmT7+EbmDT7+RT/DU= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB5027.eurprd08.prod.outlook.com (2603:10a6:208:15c::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.23; Tue, 9 Jun 2020 19:30:40 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3066.023; Tue, 9 Jun 2020 19:30:40 +0000 From: Hannes Tschofenig To: "Oliver, Ian (Nokia - FI/Espoo)" , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] Use cases in draft-ietf-rats-architecture-04 Thread-Index: AQHWPpPSiFR4ruzkUU+8JY0PrOPRaqjQq1gg Date: Tue, 9 Jun 2020 19:30:40 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 945eb1b8-43b9-48c0-8d34-dc33ac03827a.1 x-checkrecipientchecked: true Authentication-Results-Original: nokia-bell-labs.com; dkim=none (message not signed) header.d=none;nokia-bell-labs.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [156.67.194.193] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: c26fdd7b-89b3-4f7a-b21e-08d80cab9c17 x-ms-traffictypediagnostic: AM0PR08MB5027:|DB6PR0801MB1669: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:7219;OLM:9508; x-forefront-prvs: 042957ACD7 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: R4yVdGwx39k65YS78EMYTikXeqNprh+K+wZuumzIWpJwOVUByJ4FjVuqhKill7F1ezsj4LoDHgMpqIvE2rm7At4d2gYgqLbDI4JysXUr0aHjCeglrbzC2R3OiUcTQcSGs9D9mujGt8R/uQx9LPjdRqU6TUqdtBx/iOCuJ/rS9JTD0HDzeyvcU1uyQUY3cs1r01Y2aWbq8v9hbiB/ZtW7ouuJMMDaaRk3Uf/Y3oo+mAc9OHguF1NQ/MF86wpRZFjG6n63fSzF0/9syOViSQM7eDUf65m+6jqu0bAVBWBQuGlWE+5R89OiW7ugu3JGxVLA X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(346002)(376002)(136003)(39850400004)(396003)(2906002)(66946007)(5660300002)(8676002)(66556008)(4326008)(66446008)(71200400001)(86362001)(83380400001)(53546011)(66476007)(76116006)(8936002)(186003)(64756008)(52536014)(9686003)(26005)(9326002)(316002)(478600001)(33656002)(7696005)(110136005)(55016002)(6506007); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR08MB3716D0DCB33D556A0BFA6A6AFA820AM0PR08MB3716eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB5027 Original-Authentication-Results: nokia-bell-labs.com; dkim=none (message not signed) header.d=none;nokia-bell-labs.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT015.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(39850400004)(136003)(376002)(346002)(396003)(46966005)(9686003)(110136005)(186003)(6506007)(55016002)(52536014)(47076004)(26005)(86362001)(478600001)(7696005)(2906002)(5660300002)(53546011)(356005)(336012)(4326008)(70586007)(81166007)(33656002)(316002)(82740400003)(8676002)(83380400001)(70206006)(8936002)(9326002)(82310400002); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 87e492a6-79c6-4b12-8c5d-08d80cab9822 X-Forefront-PRVS: 042957ACD7 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 82T1Qaq+0q1F17fxgudE3rt0I/sljbsAXFsTdS5IgdUpzwKK9XyUgVxunofnrfTGkqmKJRk9gaQcSmcs9NkxRs/IMooqvn3hs4R15TuwTsRJVUyHId8UF16fds9nxHdxArilZgL1hc1n9rF06EbYsWyHZWAsToj0uHWqBavNHTUA4pF6vZbVX6uXB/4wZbu+ZOT1ey9r018yJqodSyR5UGl/0LbKhnNB/pYUpb3EmKKDHKoeuLoTisObabwXhqol44NJFBWyyUWM7FGPgcwSF2doU7f1usoWVf8CknIxxrw/E9jDhIB2W+kvPJyRewEnb5/pV0jJOv3tupv05juevXgGEMoOC9UlnFWx4HIiz0Lis5vuVOqIt3SXY37HvYePUnQDZoMd6ukK9fgB+zoUtQ== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Jun 2020 19:30:47.0584 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: c26fdd7b-89b3-4f7a-b21e-08d80cab9c17 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB1669 Archived-At: Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2020 19:31:14 -0000 --_000_AM0PR08MB3716D0DCB33D556A0BFA6A6AFA820AM0PR08MB3716eurp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Ian, can you provide a bit more details about what your domain is? Ciao Hannes From: Oliver, Ian (Nokia - FI/Espoo) Sent: Tuesday, June 9, 2020 9:27 PM To: Michael Richardson ; Hannes Tschofenig Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Just to add to that, the watchdog case is relevant in our domain Ian -- Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 ________________________________ From: Michael Richardson Sent: Tuesday, June 09, 2020 22:00 To: Hannes Tschofenig Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Hannes Tschofenig > wrote: > Regarding the hardware watchdog I just feel it is a made-up use > case. Is this something people actually want to use in practice? > Today's use of hardware watchdogs aim to deal with non-security use > cases (mostly dealing with crashing software). We've heard from Enterprise people that this is important. It's not a constrained case. -- Michael Richardson >, S= andelman Software Works -=3D IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM0PR08MB3716D0DCB33D556A0BFA6A6AFA820AM0PR08MB3716eurp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Ian,

 

can you provide a bit more details about what your d= omain is?

 

Ciao

Hannes

 

From: Oliver, Ian (Nokia - FI/Espoo) <ian.= oliver@nokia-bell-labs.com>
Sent: Tuesday, June 9, 2020 9:27 PM
To: Michael Richardson <mcr+ietf@sandelman.ca>; Hannes Tsc= hofenig <Hannes.Tschofenig@arm.com>
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04

 

Just to add to that, the watchdog case is relevant in o= ur domain

 

Ian

&n= bsp;

--

Dr. Ian Oliver

Cybersecurity Research=

Distinguished Member of Tec= hnical Staff

Nokia Bell Labs<= /span>

+358 50 483 6237

&n= bsp;

From= : Michael Richardso= n
Sent: Tuesday, June 09, 2020 22:00
To: Hannes Tschofenig
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04

&n= bsp;


Hannes Tschofenig <Hannes.T= schofenig@arm.com> wrote:
    > Regarding the hardware watchdog I just feel it is a= made-up use
    > case. Is this something people actually want to use= in practice?
    > Today's use of hardware watchdogs aim to deal with = non-security use
    > cases (mostly dealing with crashing software).

We've heard from Enterprise people that this is important.
It's not a constrained case.

--
Michael Richardson <mcr+= ;IETF@sandelman.ca>, Sandelman Software Works
 -=3D IPv6 IoT consulting =3D-

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM0PR08MB3716D0DCB33D556A0BFA6A6AFA820AM0PR08MB3716eurp_-- From nobody Wed Jun 10 04:54:06 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 826983A0905 for ; Wed, 10 Jun 2020 04:54:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vJULjPRSgV9N for ; Wed, 10 Jun 2020 04:54:00 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3A5C3A09A8 for ; Wed, 10 Jun 2020 04:53:59 -0700 (PDT) Received: from [172.16.42.112] (p5089ae91.dip0.t-ipconnect.de [80.137.174.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 49hlkt0CllzyXR; Wed, 10 Jun 2020 13:53:58 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) From: Carsten Bormann In-Reply-To: <4F64295D-E8B9-428F-9587-8D0D2C763582@island-resort.com> Date: Wed, 10 Jun 2020 13:53:57 +0200 Cc: rats@ietf.org, jeremy O'Donoghue X-Mao-Original-Outgoing-Id: 613482837.547568-192775dee9e2483eb1b4d9a94de67f6a Content-Transfer-Encoding: quoted-printable Message-Id: <99E5F53A-815B-4BFA-AEBB-5155D7E45D89@tzi.org> References: <72AE6830-B424-47F1-BA3D-C694989300AF@island-resort.com> <4F64295D-E8B9-428F-9587-8D0D2C763582@island-resort.com> To: Laurence Lundblade X-Mailer: Apple Mail (2.3608.80.23.2.2) Archived-At: Subject: Re: [Rats] I-D Action: draft-birkholz-rats-uccs-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jun 2020 11:54:04 -0000 Hi Laurence, > It seems better factoring to associate the security model with the use = cases than with the data structure format. There are many ways to (insert vegan version of =E2=80=9Cskin this = cat=E2=80=9D). Generally, the IESG has not been happy with defining protocols without = discussing their security, so UCCS will need some security = considerations. The pure admonition =E2=80=9Cwrite up your security = considerations=E2=80=9D makes a bad security considerations section. = Picking one use case (here: the one that motivates us to write this = document now) seems like a good way to evoke the kinds of security = considerations other application environments will have. > It seems hard to anticipate the security models needed for future use = cases. Right, that=E2=80=99s why the text focuses on one usage environment. > In the three RATS uses of UCCS (claims, endorsements, results), the = characteristics of the security needed vary a lot and all three are not = all covered here. I don=E2=80=99t think we need to go as far as defining the security = characteristics of those areas =E2=80=94 we do need to explain how = adding UCCS to these areas adds/changed security considerations. > The text doesn=E2=80=99t seem to anticipate securing UCCS with CMS or = a TPM-based signing scheme. It focuses on TLS / Secure Channels.=20 Yes, that would be the one usage environment we are focusing on. > The security of nested EATs seems better discussed in EAT. That may very well be. The main point here is that, for something communicated over the secure = channel to inherit the authentication and authorization properties of = that channel requires a strong relationship. There is a difference = between saying =E2=80=9CI saw Bob buy an apple=E2=80=9D and =E2=80=9CMy = neighbor told me he saw Bob buy an apple=E2=80=9D =E2=80=94 the EAT = encapsulation is the equivalent of =E2=80=9CMy neighbor told me=E2=80=9D. > CWT is part of the establishment of the Verifier=E2=80=99s trust in an = Attester. That topic requires Endorsements and seems better in the = context of RATS architecture or related.=20 I=E2=80=99m sure that some form of architecture document can provide a = refined view of this. > All that said, I don=E2=80=99t think the section 3 security discussion = is harmful, just that it may become outmoded and necessarily bypassed as = the use cases fill in. But that is true: the security considerations here are like the package = insert for some medication =E2=80=94 you should read this, but you = should also heed the instructions from your doctor (i.e., the standard = that specified usage of UCCS in a specific usage environment) and read = up on additional information, in particular about side effects with = other medication (EAT, CMS, TPM). Gr=C3=BC=C3=9Fe, Carsten From nobody Wed Jun 10 09:18:02 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0B133A0A63 for ; Wed, 10 Jun 2020 09:18:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=k097VgBQ; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=ABpzUZlG Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s4xyksv7skGc for ; Wed, 10 Jun 2020 09:17:59 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 048A83A0A62 for ; Wed, 10 Jun 2020 09:17:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=19306; q=dns/txt; s=iport; t=1591805878; x=1593015478; h=from:to:cc:subject:date:message-id:mime-version; bh=u5zpJpQ3rYVM9lZAmOaERiDWCHeppc504hqtCH+UjwI=; b=k097VgBQaWrkowCR2o869sNXyzaqxWZ4yVBoNmwklAqxInzpuR86mpmg qopMNrrzMCvcPGiaOlLHGNGzM6QL2af66EXrL2Fszzkfl3fh+d3AlV9t3 qX6IUxQztSaLD33WVodU3Fkab8KFw9UlnnB6K0ReUwFElgesqMNckAGGn I=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3A10v8QRec0375dVC9sHIdn32ylGMj4e+mNxMJ6p?= =?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwaSB9fA6u4ChfDfrqbgXmIN+9CNvSNKfJ9NUk?= =?us-ascii?q?oDjsMb10wlDdWeAEL2ZPjtc2QhHctEWVMkmhPzMUVcFMvkIVGHpHq04G0JGw?= =?us-ascii?q?m5OxB8O+L1HYDflYK72rP695jaeQ4dgj27bPt7Jwm3qgOEsM4QjO4AYqY8wx?= =?us-ascii?q?fEuD1GYeNTkGhpPlmU2R3745S9?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CkAAATB+Fe/5pdJa1mHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgTgFAQELAYEiL1IHbystLyyHagOVGYwUhGiBLoEkA1UEBwE?= =?us-ascii?q?BAQkDAQEjCgIEAQGERAKCGQIkNgcOAgMBAQsBAQUBAQECAQYEbYVbDIV1Fhs?= =?us-ascii?q?TAQE3AREBUDAmAQQBDQ0GFIMFgX5NAx8PAQ6oCQKBOYhhdIE0gwEBAQWBR0C?= =?us-ascii?q?DQhiCBwcDBoE4AYFSgRGII4FEGoFBP4ERQ4IfgVcZAXRuAoE8KyuDGoItmHe?= =?us-ascii?q?BEJoqCoJZBIQhglOBQ5B4nleREooIlBkCBAIEBQIOAQEFgVkBMoFWcBWDJFA?= =?us-ascii?q?XAg2OHoNxih0BOHQ3AgYIAQEDCXyMUIJFAQE?= X-IronPort-AV: E=Sophos;i="5.73,496,1583193600"; d="p7s'?scan'208,217";a="772334316" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 10 Jun 2020 16:17:56 +0000 Received: from XCH-ALN-004.cisco.com (xch-aln-004.cisco.com [173.36.7.14]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 05AGHukR020342 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 10 Jun 2020 16:17:56 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-ALN-004.cisco.com (173.36.7.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 10 Jun 2020 11:17:56 -0500 Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 10 Jun 2020 11:17:55 -0500 Received: from NAM10-MW2-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 10 Jun 2020 11:17:54 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Kc8gZThCyGmd/QWk1XGrByVuRZAn4d0gHCAJfEy+5lpGnvJIak7/GS1Ph7kISgI/rSMakuZ0pqEqINK6k6UfKHiqvGXKkrVcJIbyl+NjzdYdAgfiCtiTTrnCFtGduRjUJ2m/9UBoCAgMf+WwLr2VhNiafAB0kWKlR6GKUNOFs5oZ7Ox9rTqMLrmtL7FeRMNwu4ShgkWk3dNmQmyIC9nG30lYAUxmX12KYQGFVjZoKV9VuTFZRkcxRGBMxdA+qNvcOwAvU1TsJ7d55I8pt0ZkJt1iSgPPsRbH/WQDv6XCOnGppMEjLMOsRTudZVt9EXozngrr3ceNyEMevST5Zyd4LQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=raROC1AEa9co+lv4C7iPYhgno0OjDCmXp2DlfT7tgko=; b=YhWXnzDGeVarkmyUifPrGFZBb87AVt8B2ADaGg0+v0zQNahCDWQqm7GptnCJF3vqVen6D2SMBqziSSsSbO76X5eksPdvU2JILuStGgK0bN47l3HHxa/ubK+/O0NxmeL2dFdQvc0baUEsGdU5LQXLStbSm2rmoty0mBfVdo6JeoFXTTsxovfdkeKsySMPMwwKCD88mbL9SzXxkzZ/J9d+oal9yz2myZLZ5LG4e4kgg8RfuWytYqrULux6xSJGZ/ZIaR00FYn2oYCsuWrcZIrQCNrUmJyXCjBS3WygyTReGvgYzL6R6EEfOYiz1vf0MizHwKhQyyWcmr0N4tbDb0g/1g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=raROC1AEa9co+lv4C7iPYhgno0OjDCmXp2DlfT7tgko=; b=ABpzUZlGkGbaRl6OVKrz8Jpft7qfOIfJgdrunhYDurugufBbrGwEMVD0v+L0fzN68NtTcAFpTOD3FlJ08/KJ8pxfAo0FFndLIG+Bga3I/wuF9P263scYQugxWyBdO/k8pw6WjNnIaYUcSpiHtXXbbobGZaR3p0qj9QWNkXdamKQ= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by BL0PR11MB3457.namprd11.prod.outlook.com (2603:10b6:208:64::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.23; Wed, 10 Jun 2020 16:17:53 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290%7]) with mapi id 15.20.3088.018; Wed, 10 Jun 2020 16:17:53 +0000 From: "Eric Voit (evoit)" To: "henk.birkholz@sit.fraunhofer.de" , "michael.eckel@sit.fraunhofer.de" , "Shwetha Bhandari (shwethab)" , "Bill Sulzen (bsulzen)" , "frank.xialiang@huawei.com" , "tom.laffey@hpe.com" , Guy Fedorkow CC: "rats@ietf.org" Thread-Topic: Pull request for the charra YANG model Thread-Index: AdY/QqQk1SROUlurQ+m5+hKLyk0H7w== Date: Wed, 10 Jun 2020 16:17:52 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=cisco.com; x-originating-ip: [2001:420:c0c4:1001::87] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 8e8c7aae-e003-4977-0ff7-08d80d59d3e1 x-ms-traffictypediagnostic: BL0PR11MB3457: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0430FA5CB7 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: rMPliPIrOEiCdkRPyZ2C3JhR0FHQc/AfQH0VHpmx7aWMTt6DMqSbHel1Gn0+/jNbLBLx9cQlNsGAWOfQWcFkStjp8blZ5ZD6wQQPSJQ2NDIQL2rooQ8shWV0asrnITX35y/gwOQwP1C98qoCqLemaj4A2Ji8OwIVryYp34kAhay781Gok6jBgGRNKWmdN+2nWh9oHTlfpBdDKbPnLEqbozgxTUvk0Ei37N6atYNPBfmcWwPEIvferqu7fQD27xfOPP7Pbt5yme9Zz7K82WTjjj6EvyQUACyPxY/yrT4tA9BXgjrL9Tc/+u7ldkF+tLsnjinsBcz/52EtP/YHTuH23XR4sskGV4ILHLHSZ4U0SPeTjKVE0QhVgcrWyOCvZlwYMhVCGIWtaGH6BSkEXMnOHw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(136003)(346002)(366004)(39860400002)(376002)(55016002)(110136005)(71200400001)(316002)(8936002)(8676002)(6506007)(7696005)(9686003)(478600001)(66946007)(66556008)(4326008)(52536014)(86362001)(64756008)(66446008)(99936003)(83380400001)(66476007)(66616009)(166002)(76116006)(33656002)(186003)(2906002)(5660300002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: EQhZkisgQdrSnzp410Ggpc0BBN3zH8cvEFeak6xr9+sPxyoBp0ZsithrsSRQz6P1TVapfOfH1/HBfgJIdvN74WdzOSBJTbVzObMcgmgLY+VyEeJLho0AGfXF7ABdpgyrm8slJrsDqERfaHsW9rYDyetX4QQUHp+bAQGLRzNmao3Anx4CIYUsxsx026r1kREw0zrYannVGxEiIgc+1LXmidmlU1S7rqfVyDif+owy/xXoI0VrQpJLwXZAmQC1sK0UPiFrkyT0LdD/xqcxgu16T+sSHGwVyGccmJni6NVybR6xDy2OwJ30+S0CGzp0Tdas/D7IfOHkEaFWN/2G9rD1nSX01CouueZj0OkFa81bElwd4W2XhzMRXJ3S6C/mmlEOYsVB9O7JNPm7gLRH8AbbwnXPclE57VOippAt5LnuXjXdvkDIDZbSgtz7u6Nri92x8t2DW5ro6+lX+oBAIKZhVYsHIzWRu4MKYFqzGO97ClfmXT5LmO7poDYspx/k/OGdSGOtmm4ECEd66B9YB100XQ== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_03D8_01D63F21.1DAC9A90" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 8e8c7aae-e003-4977-0ff7-08d80d59d3e1 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jun 2020 16:17:53.0149 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 0jtjOuatcurhOh1SYlbtcOZfpquuQOwgpdn5fXRB8wrv3/zAZRh0uHbBohweE0n4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR11MB3457 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.14, xch-aln-004.cisco.com X-Outbound-Node: rcdn-core-3.cisco.com Archived-At: Subject: [Rats] Pull request for the charra YANG model X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jun 2020 16:18:01 -0000 ------=_NextPart_000_03D8_01D63F21.1DAC9A90 Content-Type: multipart/alternative; boundary="----=_NextPart_001_03D9_01D63F21.1DAC9A90" ------=_NextPart_001_03D9_01D63F21.1DAC9A90 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Henk, Michael, Shwetha, Bill, Frank, Tom, Guy, As authors of the Charra YANG model, I wanted to let you know I have created a pull request . I am proposing some fixes due to a number of concerns I had about the YANG model: * PCR numbers should be their own type, not a UINT8. PCRs should be limited to [0..31] * We should use ENUMs instead of strings for TCG and IETF crypto algorithm types. Strings allow lots of errors to be introduced which we can protect using a larger, more detailed ENUM construct. * Most devices do not have multiple line cards. Because of that, we should not have nested keys of [node id] [tpm name]. This adds unnecessary complexity for the vast majority of users. Instead the tpm should have a mandatory leafref back to node-id when compute-nodes is not null. * The YANG doctors will not let us have a TPM-Name of "ALL". Instead of "ALL" we should be able to assume that an RPC means all hardware based TPMs if a specific TPM is not named in the RPC. * We should add leaf for a unique 'certificate-name' is used. This allows for a cleaner certificate migration path, and most RPC users won't need to track node-ids. * We should have optional YANG features for TPM1.2 and TPM2.0 so that RPCs are not exposed when there are no such TPMs of that type are supported. * We should create new reusable groupings rather than repeat definitions. If your guys have suggestions and improvements for this pull request, that would be great. I also think the netequip boot pull request can also be integrated. Thanks, Eric ------=_NextPart_001_03D9_01D63F21.1DAC9A90 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Henk, =         Michael,

Shwetha,   Bill,

Frank, =        Tom,

Guy,

 

As authors = of the Charra YANG model, I wanted to let you know I have created a p= ull request.  I am proposing some fixes due to a numbe= r of concerns I had about the YANG model:

 

  • PCR numbers should be their own type, not = a UINT8. PCRs should be limited to [0..31]
  • We should use ENUMs instead of strings for = TCG and IETF crypto algorithm types. Strings allow lots of errors to be = introduced which we can protect using a larger, more detailed ENUM = construct.
  • Most devices do not have multiple line = cards. Because of that, we should not have nested keys of [node id] [tpm = name]. This adds unnecessary complexity for the vast majority of users. = Instead the tpm should have a mandatory leafref back to node-id when = compute-nodes is not null.
  • The YANG doctors will not let us have a = TPM-Name of "ALL". Instead of "ALL" we should be = able to assume that an RPC means all hardware based TPMs if a specific = TPM is not named in the RPC.
  • We should add leaf for a unique 'certificate-name' is used. This allows for a = cleaner certificate migration path, and most RPC users won't need to = track node-ids.
  • We should have optional YANG features for = TPM1.2 and TPM2.0 so that RPCs are not exposed when there are no such = TPMs of that type are supported.
  • We should create new reusable = groupings rather than repeat definitions.

If your guys have suggestions and improvements for = this pull request, that would be great.   I also think the netequi= p boot pull request can also be integrated.

 

Thanks,

Eric

 

------=_NextPart_001_03D9_01D63F21.1DAC9A90-- ------=_NextPart_000_03D8_01D63F21.1DAC9A90 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNjEwMTYxNzMxWjAjBgkqhkiG 9w0BCQQxFgQUktRTDHS5O41CrbIhTaGYJpP5dRIwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAowKSb9/q1epU0f4FpC3FSZfT2WXhuq+Am98+LYiIgL7/hubncoOjtPb7BHzrUbjBO 1kfQfF6XsI+mEJBmhgzLTPsuB/KHpVIXhb3SpQgk/asozPxTNJsK85UJa0CkopZ8pn5wPgcMnsvF /H6h1cdAybSq4JFQz5gqEEtkz3ddaCyncTeKsbs3AusLlmEtWrGumpgYHeO/Mfjpdg2zjgIV6Oqs QUbknXUqtb7EJ2OTtbC/W3Znhx1DX4g2GFoLJI5CQ+R2Xpfc/cYus5isAYnQuNov4eiBbN29j0rz 0lOpDaB+3GjDD1JfYOVXVHxC3e8ll4sF0lksegKC9i8ZrpsiAAAAAAAA ------=_NextPart_000_03D8_01D63F21.1DAC9A90-- From nobody Wed Jun 10 13:13:22 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47B903A1163 for ; Wed, 10 Jun 2020 13:13:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.588 X-Spam-Level: X-Spam-Status: No, score=-9.588 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Wuuc5as+; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=0xoIjvla Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TFaFTDFXJD_c for ; Wed, 10 Jun 2020 13:13:19 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4882C3A1167 for ; Wed, 10 Jun 2020 13:13:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=18723; q=dns/txt; s=iport; t=1591819999; x=1593029599; h=from:to:subject:date:message-id:mime-version; bh=x7A+7XfLKujDMgvYeYLqxGLKy9qGy5XDkxUraoUU6X8=; b=Wuuc5as+8xUS8glKGFbrJei+CrLlc5DkIPW5k7qMPHOVleZFtLBdVDJ2 0jkvMwkfPHkQEk5Tk+elmmBqyetGrh25n51/IK6CsbHQc0LI85XjJps8N OtGz7Aq4xqPfBYRebwK2Wnp4HbU+eqS5lkO3gum0YOpnzo4QvIYT4MyW6 k=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AcAXrlBY3mHdd7o88abA+bxX/LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el21QaTD4TW9/wCjPDZ4OjsWm0FtJCGtn1KMJlBTA?= =?us-ascii?q?QMhshemQs8SNWEBkv2IL+PDWQ6Ec1OWUUj8yS9Nk5YS8fze1OUpWe9vnYeHx?= =?us-ascii?q?zlPl9zIeL4UofZk8Ww0bW0/JveKwVFjTawe/V8NhKz+A7QrcIRx4BlL/U8?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D/CQC4PeFe/4QNJK1mHgEBCxIMgy0?= =?us-ascii?q?vUgdvKy0vLIQkg0YDjUWHVYwUhGiCUgNVBAcBAQEJAwEBJQgCBAEBhEQCghk?= =?us-ascii?q?CJDgTAgMBAQsBAQUBAQECAQYEbYVbAQuFcgEBFxEKEwEBNQMLBgEGEwQBASs?= =?us-ascii?q?CBDAdCQEEEwgGFIMFgX5NAx8PAQ6XKpBnAoE5iGF2gTKDAQEBBUZwAg5Bg0Y?= =?us-ascii?q?YggcHCYE4gVOBEYlnGoFBP4FUgk2DJQEBAgEBGIFLK4JnM4ItmHeBEJoqCoJ?= =?us-ascii?q?ZhCWCU4FDkHiCbYEWiACSVJESigiUGQIEAgQFAg4BAQWBaiKBVnAVGiGCaQl?= =?us-ascii?q?HFwINjh6DcYUUhUJ0AjUCBgEHAQEDCXyPFQEB?= X-IronPort-AV: E=Sophos;i="5.73,497,1583193600"; d="p7s'?scan'208,217";a="765246445" Received: from alln-core-10.cisco.com ([173.36.13.132]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 10 Jun 2020 20:13:17 +0000 Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by alln-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id 05AKDHHK023611 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 10 Jun 2020 20:13:17 GMT Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 10 Jun 2020 15:13:17 -0500 Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 10 Jun 2020 16:13:16 -0400 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 10 Jun 2020 15:13:16 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cZgld35rFVAG39+Jwd3sAD04kgKXbl4AA5y11vZEnUpc+e+MPvgXmeSXVF0aCKipuFhEDQWGPrp8EEdlbVUYmpHKNkTZIhi65Q2N0vKWaA4XoNW3/kxp+QGd62rBAO5GeKexSHulNZuSXVq9+Gr3RxI0T5ysw4hRvFL1ltxd9vc6o2ZFXJBs7LeG3nzfrv3UVJ2iix+wfVQCCg2qqWrc05iq+LEY62QbGND/Z/lLMBAHiou6ozKGRj4/li2r76hS42qbS78H/Tc0LGpUWDbEkxTKboOHDQP0uJrSi9JmMJjNPMdoqEQ4Ub6ZVtSSlh79xSXWPGZqTxFrbNwx7JK67w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=97jbcwV+MYhuR4TJnQaxZKOXJuH39AfmllgPbVfNZyA=; b=YNI11gVWPaDQAdNOAzMYEz4T3wI81g8IU5XdHH94OzdoGSYdc5bcnqkcHOmSQOghnmNx4kzbvMSG1H0xBijYwqRBSx4cRfCfnw0gFKacQMgCiYmRc9ztgAZsM7pjBpMBFMyqXF630K7uu8+BSKjuddWEYv/OZEBvm7qq01LIfUkgzbPgLJzwTnTfNSf9YMRRWvFrtytCRkrtD5WjYNCy70PVV8K127JFQJ9pRvoRO4i/7x1HGRjH8Bpq3FkKJAc8f0WCeuCoDJOzCsTl9Ajw80GWigOADojpjbC3t0etI2XDVpohYgEwaMtuN0gHFmG+jP0LONbevUfRtoZEt5yMTg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=97jbcwV+MYhuR4TJnQaxZKOXJuH39AfmllgPbVfNZyA=; b=0xoIjvla6jNZ51OyQkTZ5RUk7DiRsbtj6nC9no5plTLgXaLnhakTlr3t2G+5dwopNHBdxtZaLSkeGaxqpgw4KsdAzssrWnUNm6Hx7qjJ4o+TQjFAMIIxDvJGxRoyzJ0eiFWiV1AAkNQlj+9cWbaa+QmoEkJs9RB/rvbiGv1jSRc= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by BL0PR11MB2931.namprd11.prod.outlook.com (2603:10b6:208:7d::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.20; Wed, 10 Jun 2020 20:13:15 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290%7]) with mapi id 15.20.3088.018; Wed, 10 Jun 2020 20:13:15 +0000 From: "Eric Voit (evoit)" To: "rats@ietf.org" Thread-Topic: New Version Notification for draft-voit-rats-trusted-path-routing-02 Thread-Index: AdY/Y3lmuUCVz/LWQ6GMKwqBAzFWtQ== Date: Wed, 10 Jun 2020 20:13:15 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [2001:420:c0c4:1001::87] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b99a336d-adb9-44ee-d235-08d80d7ab5b8 x-ms-traffictypediagnostic: BL0PR11MB2931: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0430FA5CB7 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: nEY+sMwI3PbKfMx8eLCiSWaCtklKqUiPIfHE0BnW9fkvsjQ2KKZvYu1kRRPXXMXCmmbbeUo5bXd+QC7Wcsu0zf3aZ96nX5LfwG7/7vsQXCAHvvVkvzWQ19pZTgsbei9RfKVLuQvzG/4NRdyCkl/6VLMlf/W7knUCI9j/q4VX+XeYQaNDjMGUOsmsLd57K5vrRWEYJu1hM4BgtXxLFBixkD9iDYbjQDcs4UoIpfy7KXJQT8uPzNiPqZps9yEimp9LPzolJTz58Hs+WsnQN0V9ZzXbQ7siTk3VNCqiQprbj91AqjALvrcTSIwOl7hIjpzDIg3caxxBFZM/UVwRSsarXpuEPCCKYUOhnNITn+Vxyy9yROYYTPHWB3tt4sIkkftmTASrRDVlstji8YvnGU+PTQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(376002)(136003)(39860400002)(346002)(366004)(33656002)(86362001)(5660300002)(66476007)(66616009)(166002)(71200400001)(66946007)(66574014)(6916009)(52536014)(6506007)(64756008)(53546011)(66556008)(83380400001)(66446008)(186003)(2906002)(7696005)(15650500001)(316002)(8936002)(8676002)(76116006)(966005)(99936003)(9686003)(55016002)(478600001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_041C_01D63F41.F25FB130" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: b99a336d-adb9-44ee-d235-08d80d7ab5b8 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jun 2020 20:13:15.7267 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +pIJj5YldLouQ9jr4JMXLNc7RmQ4Mt4BpR5QbKw8BKHnt54RdjK0ZXebdPAOYA9J X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR11MB2931 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.12, xch-rcd-002.cisco.com X-Outbound-Node: alln-core-10.cisco.com Archived-At: Subject: [Rats] New Version Notification for draft-voit-rats-trusted-path-routing-02 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jun 2020 20:13:21 -0000 ------=_NextPart_000_041C_01D63F41.F25FB130 Content-Type: multipart/alternative; boundary="----=_NextPart_001_041D_01D63F41.F25FB130" ------=_NextPart_001_041D_01D63F41.F25FB130 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Of general interest in this draft the definition of a Trustworthiness Vector which contains a ordered list of Trustworthiness Levels. This vector is returned within Attestation Results, and is actionable by a Relying Party. Eric -----Original Message----- From: internet-drafts@ietf.org Sent: Wednesday, June 10, 2020 3:59 PM To: Eric Voit (evoit) Subject: New Version Notification for draft-voit-rats-trusted-path-routing-02.txt A new version of I-D, draft-voit-rats-trusted-path-routing-02.txt has been successfully submitted by Eric Voit and posted to the IETF repository. Name: draft-voit-rats-trusted-path-routing Revision: 02 Title: Trusted Path Routing Document date: 2020-06-10 Group: Individual Submission Pages: 21 URL: https://www.ietf.org/internet-drafts/draft-voit-rats-trusted-path-routing-02.txt Status: https://datatracker.ietf.org/doc/draft-voit-rats-trusted-path-routing/ Htmlized: https://tools.ietf.org/html/draft-voit-rats-trusted-path-routing-02 Htmlized: https://datatracker.ietf.org/doc/html/draft-voit-rats-trusted-path-routing Diff: https://www.ietf.org/rfcdiff?url2=draft-voit-rats-trusted-path-routing-02 Abstract: There are end-users who believe encryption technologies like IPSec alone are insufficient to protect the confidentiality of their highly sensitive traffic flows. These end-users want their flows to traverse devices which have been freshly appraised and verified. This specification describes Trusted Path Routing. Trusted Path Routing protects sensitive flows as they transit a network by forwarding traffic to/from sensitive subnets across network devices recently appraised as trustworthy. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat ------=_NextPart_001_041D_01D63F41.F25FB130 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Of general interest in this draft the definition of = a Trustworthiness Vector which contains a ordered list = of Trustworthiness Levels. =C2=A0This vector is returned within = Attestation Results, and is actionable by a Relying Party.=C2=A0 =

 

Eric

 

-----Original Message-----
From: = internet-drafts@ietf.org <internet-drafts@ietf.org>
Sent: = Wednesday, June 10, 2020 3:59 PM
To: Eric Voit (evoit) = <evoit@cisco.com>
Subject: New Version Notification for = draft-voit-rats-trusted-path-routing-02.txt

 

 

A new = version of I-D, = draft-voit-rats-trusted-path-routing-02.txt

has been successfully submitted by Eric Voit and = posted to the IETF repository.

 

Name:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = draft-voit-rats-trusted-path-routing

Revision:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 02

Title:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Trusted Path Routing

Document = date:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 2020-06-10

Group:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Individual = Submission

Pages:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = 21

URL:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 https://www.ietf.org/inte= rnet-drafts/draft-voit-rats-trusted-path-routing-02.txt

Status:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 https://datatracker.ietf.= org/doc/draft-voit-rats-trusted-path-routing/

Htmlized:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 https://tools.ietf.org/ht= ml/draft-voit-rats-trusted-path-routing-02

Htmlized:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 https://datatracker.ietf.= org/doc/html/draft-voit-rats-trusted-path-routing

Diff:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 https://www.ietf.org/rfcd= iff?url2=3Ddraft-voit-rats-trusted-path-routing-02<= /p>

 

Abstract:

=C2=A0=C2=A0 There are end-users who believe = encryption technologies like IPSec

=C2=A0=C2=A0 alone are insufficient to protect the = confidentiality of their highly

=C2=A0=C2=A0 sensitive traffic flows.=C2=A0 These = end-users want their flows to

=C2=A0=C2=A0 traverse devices which have been = freshly appraised and verified.

=C2=A0=C2=A0 This specification describes Trusted = Path Routing.=C2=A0 Trusted Path

=C2=A0=C2=A0 Routing protects sensitive flows as = they transit a network by

=C2=A0=C2=A0 forwarding traffic to/from sensitive = subnets across network devices

=C2=A0=C2=A0 recently appraised as = trustworthy.

 

= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0

 

 

Please = note that it may take a couple of minutes from the time of submission = until the htmlized version and diff are available at = tools.ietf.org.

 

The = IETF Secretariat

 

 

------=_NextPart_001_041D_01D63F41.F25FB130-- ------=_NextPart_000_041C_01D63F41.F25FB130 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNjEwMjAxMjMyWjAjBgkqhkiG 9w0BCQQxFgQUJhBU8ShWkv6VU8LXxt2ct3RD76gwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAfiv0qptADc57sxoN0bR9LQ8UDGd7+qOUEDtCLLDP6+K7zSW5xhyslDz/daqDQVATQ ioP17C/4ve15emonP81YQspt8Y9kDjAnwPUyuAbavS2CkhS6KoI1QLxKVJOy2QbaEaaWAenGPCrI KP88BERsJNH9DAEHsvCYsl7hJc8MHcheSQ8IkRZWFMW3th+kdJecW9LIj4IB1VtnpPJGJkGTCzb6 nLmW1c1vC0j+NiaIoZQ6egfKnTfOQ1KLynGzUMzMB6B7LbfQ3KLunhsUY9b83Npwpl95aeX5whdx slNgTsi7dIVJcouTC/mk90Egg+1Yoeo/G+waF+W3gAcVyW4BAAAAAAAA ------=_NextPart_000_041C_01D63F41.F25FB130-- From nobody Thu Jun 11 07:29:34 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C14183A05A0 for ; Thu, 11 Jun 2020 07:29:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ja58qIdEOUUh for ; Thu, 11 Jun 2020 07:29:30 -0700 (PDT) Received: from mail-edgeKA24.fraunhofer.de (mail-edgeka24.fraunhofer.de [153.96.1.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE60F3A090E for ; Thu, 11 Jun 2020 07:29:27 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FPBwBjP+Je/xmnZsBmgQmBTIMYgT2?= =?us-ascii?q?EGpBdJZs/PQsBAQEBAQEBAQEGAQEjCgIEAQEChEICgiEBJDgTAhABAQYBAQE?= =?us-ascii?q?BAQYEAgKGRAxCARABgiJffgEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBEgINVGg?= =?us-ascii?q?BAQEBAgEjDwEFRgsJAg4EBgICJgICRwIOBgEMCAEBgyIBglwgBAuXN5sDdoE?= =?us-ascii?q?yhDoBgRaDP4E6BoEOKgGMSg+BTD+BEScMA4JaPoJnAoR5gmAEkh2hcigHgVe?= =?us-ascii?q?BBYEGBAuHJpBOBQodgm+JGIRpBo1mkROKCpQeAgQCCQIVgWqBeU0kT4JqTxc?= =?us-ascii?q?CDZIPiliBKQIGAQcBAQMJfIhBhgcBgQ8BAQ?= X-IPAS-Result: =?us-ascii?q?A2FPBwBjP+Je/xmnZsBmgQmBTIMYgT2EGpBdJZs/PQsBA?= =?us-ascii?q?QEBAQEBAQEGAQEjCgIEAQEChEICgiEBJDgTAhABAQYBAQEBAQYEAgKGRAxCA?= =?us-ascii?q?RABgiJffgEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBEgINVGgBAQEBAgEjDwEFR?= =?us-ascii?q?gsJAg4EBgICJgICRwIOBgEMCAEBgyIBglwgBAuXN5sDdoEyhDoBgRaDP4E6B?= =?us-ascii?q?oEOKgGMSg+BTD+BEScMA4JaPoJnAoR5gmAEkh2hcigHgVeBBYEGBAuHJpBOB?= =?us-ascii?q?Qodgm+JGIRpBo1mkROKCpQeAgQCCQIVgWqBeU0kT4JqTxcCDZIPiliBKQIGA?= =?us-ascii?q?QcBAQMJfIhBhgcBgQ8BAQ?= X-IronPort-AV: E=Sophos;i="5.73,499,1583190000"; d="scan'208";a="22272551" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeKA24.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Jun 2020 16:29:24 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D6CABjP+Je/1lIDI1mgQmBTIIpbwN?= =?us-ascii?q?UMDaEGpBdJZt8CwEDAQEBAQEGAQEjCgIEAQGERAKCHwIkOBMCEAEBBQEBAQI?= =?us-ascii?q?BBgRthVsMQgEQAYUeAQEBAQIBIw8BBUYLCQIOBAYCAiYCAkcCDgYBDAgBAYM?= =?us-ascii?q?iAYJcJAuXN5sDdoEyhDoBgRaDP4E6BoEOKgGMSg+BTD+BEScMA4JaPoJnAoR?= =?us-ascii?q?5gmAEkh2hcigHgVeBBYEGBAuHJpBOBQodgm+JGIRpBo1mkROKCpQeAgQCCQI?= =?us-ascii?q?VgWoigVZNJE+Cak8XAg2SD4pYQWgCBgEHAQEDCXyIQYYHAYEPAQE?= X-IronPort-AV: E=Sophos;i="5.73,499,1583190000"; d="scan'208";a="83987964" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Jun 2020 16:29:19 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 05BETHVM021585 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 11 Jun 2020 16:29:17 +0200 Received: from [192.168.16.50] (79.234.115.101) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Thu, 11 Jun 2020 16:29:12 +0200 To: Michael Richardson , Kathleen Moriarty , References: <94370ae5-1307-dd28-9e5a-017dfc17538f@sit.fraunhofer.de> <2673.1590100568@dooku> From: Henk Birkholz Message-ID: <1a84271f-c8df-fc01-3546-56e2b414692e@sit.fraunhofer.de> Date: Thu, 11 Jun 2020 16:29:11 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <2673.1590100568@dooku> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.115.101] Archived-At: Subject: Re: [Rats] RATS Architecture X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jun 2020 14:29:33 -0000 Hi Kathleen, Michael, hi list, as agreed on in the last editor's meeting, I just created 7 issues and a pull request from Kathleen's comments (Part I). They can be found (and further addressed) here: > https://github.com/ietf-rats-wg/architecture/pull/95 and > https://github.com/ietf-rats-wg/architecture/issues/96 > https://github.com/ietf-rats-wg/architecture/issues/97 > https://github.com/ietf-rats-wg/architecture/issues/98 > https://github.com/ietf-rats-wg/architecture/issues/99 > https://github.com/ietf-rats-wg/architecture/issues/100 > https://github.com/ietf-rats-wg/architecture/issues/101 > https://github.com/ietf-rats-wg/architecture/issues/102 Viele Grüße, Henk On 22.05.20 00:36, Michael Richardson wrote: > >> I took some time to review the current version of the architecture document >> and have some comments and suggestions.  The comments are from the editor's >> version.  Please do post early and often updates to the IETF draft >> repository.  Version numbers do not matter, it's okay to have a large >> number :-) > > We should have done another version this month. > I don't know if the "editor" version really works: I personally seldom get > the MT makefiles to do the right thing. > > I will arbitrarily do that now with a new version. > We have > https://github.com/ietf-rats-wg/architecture/pull/89 > > which contains some small fixes to the terminology, and the Roles section has > evolved in two ways and need to pick between them. > > We also have: > https://github.com/ietf-rats-wg/architecture/pull/87 > and https://github.com/ietf-rats-wg/architecture/pull/88 > The later has a long conversation/debate which might be worth bringing to the > list. We managed to commit a number of long-standing (3-6 week long) pull > requests on Tuesday though. > From nobody Thu Jun 11 07:53:13 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 815AF3A0946 for ; Thu, 11 Jun 2020 07:53:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iR-gfi3TVwGs for ; Thu, 11 Jun 2020 07:53:11 -0700 (PDT) Received: from mail-ot1-x32f.google.com (mail-ot1-x32f.google.com [IPv6:2607:f8b0:4864:20::32f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E91823A0943 for ; Thu, 11 Jun 2020 07:53:10 -0700 (PDT) Received: by mail-ot1-x32f.google.com with SMTP id m2so4711411otr.12 for ; Thu, 11 Jun 2020 07:53:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ZkBRCrTo3pr+G5DwCxkuygtvj1o2m6Dp9yXr+pJYV1U=; b=s673EmY05MI5wxOStFSz71QTKiih//jO0QhQvmg/Ok+PaUdcZ6hlklWKkLOw6KdM1W 8AvcPzxTDSxMOozBbweRAcRWg154eWsy7r26lDPyeXmLZ5guJHI0WX77T2whhp93dlRA z4swGawIP1AxKX+xREseQ9pu/3j0Jiz3DXQs4cUX8yMJhipoMJsDYOrMMz+h/AgzWRiN MIvRkqzaMDanacPPKr5voQZy/UyJefqwFDgrFCLdrP3b4qu4ihZkX2yNUE6jvHGUa3TF y+47iFiBlHyYaytKRBCA/uzB43h4I+OiCmZqhl5D/YqXeJbrps2NkL3Ej7U/YbKNuf0o eyOA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ZkBRCrTo3pr+G5DwCxkuygtvj1o2m6Dp9yXr+pJYV1U=; b=Sj0xy+7yfTY+rTehDNFsh+lziURGCtlkHP8wqOMI/6WokZUZZJrhMWWmdTNe8OpxWc YhVcIrcJpf8BLqTN9DjhRSlPVitmFnpJkDW/NFS/J3ng8o726mz3kdZyx3r2vp3L/PIq PEtUVqmZuMfH9dxnQ9iSpUvXL7jAP+WwJeImSDFJ5MUNdmp/MdxeV8mSExWLWgn5SK4e bZr8AhgdCir4KOnZXcrKnrIer5+PBZSV2JzCRtMND2R87l7EKkaafsm/Z9E8GSVgiqc5 zmlr/2e3UDCWaU1bsRES3xDIMZm+WmUG8Xok7T63+mGuFgNHFHtNjjtMHXyJAIBzwq2o z3Ow== X-Gm-Message-State: AOAM533ngRi2TXwbq6aBwrO4Sdl6SiLWifWKtAUBREuOjisEi2SG5xMZ zVgA0RJ00Ui2siU+33qzcfODMabqVix6BpdDhOI= X-Google-Smtp-Source: ABdhPJysksfSnyIbBoGhQXUFZ2TS5CB5SV/tUjrHtoGH7aei0JYggwRzRLFWdDI9eFQwATVF/41p7zvPJ0cXqKrXgw0= X-Received: by 2002:a05:6830:10d3:: with SMTP id z19mr2350779oto.151.1591887190172; Thu, 11 Jun 2020 07:53:10 -0700 (PDT) MIME-Version: 1.0 References: <94370ae5-1307-dd28-9e5a-017dfc17538f@sit.fraunhofer.de> <2673.1590100568@dooku> <1a84271f-c8df-fc01-3546-56e2b414692e@sit.fraunhofer.de> In-Reply-To: <1a84271f-c8df-fc01-3546-56e2b414692e@sit.fraunhofer.de> From: Kathleen Moriarty Date: Thu, 11 Jun 2020 10:52:34 -0400 Message-ID: To: Henk Birkholz Cc: Michael Richardson , rats@ietf.org Content-Type: multipart/alternative; boundary="0000000000007e28ec05a7d01ead" Archived-At: Subject: Re: [Rats] RATS Architecture X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jun 2020 14:53:13 -0000 --0000000000007e28ec05a7d01ead Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thank you! On Thu, Jun 11, 2020 at 10:29 AM Henk Birkholz < henk.birkholz@sit.fraunhofer.de> wrote: > Hi Kathleen, Michael, > hi list, > > as agreed on in the last editor's meeting, I just created 7 issues and a > pull request from Kathleen's comments (Part I). > > They can be found (and further addressed) here: > > > https://github.com/ietf-rats-wg/architecture/pull/95 > > and > > > https://github.com/ietf-rats-wg/architecture/issues/96 > > https://github.com/ietf-rats-wg/architecture/issues/97 > > https://github.com/ietf-rats-wg/architecture/issues/98 > > https://github.com/ietf-rats-wg/architecture/issues/99 > > https://github.com/ietf-rats-wg/architecture/issues/100 > > https://github.com/ietf-rats-wg/architecture/issues/101 > > https://github.com/ietf-rats-wg/architecture/issues/102 > > > Viele Gr=C3=BC=C3=9Fe, > > Henk > > On 22.05.20 00:36, Michael Richardson wrote: > > > >> I took some time to review the current version of the architecture > document > >> and have some comments and suggestions. The comments are from the > editor's > >> version. Please do post early and often updates to the IETF draft > >> repository. Version numbers do not matter, it's okay to have a large > >> number :-) > > > > We should have done another version this month. > > I don't know if the "editor" version really works: I personally seldom > get > > the MT makefiles to do the right thing. > > > > I will arbitrarily do that now with a new version. > > We have > > https://github.com/ietf-rats-wg/architecture/pull/89 > > > > which contains some small fixes to the terminology, and the Roles > section has > > evolved in two ways and need to pick between them. > > > > We also have: > > https://github.com/ietf-rats-wg/architecture/pull/87 > > and https://github.com/ietf-rats-wg/architecture/pull/88 > > The later has a long conversation/debate which might be worth bringing > to the > > list. We managed to commit a number of long-standing (3-6 week long) > pull > > requests on Tuesday though. > > > --=20 Best regards, Kathleen --0000000000007e28ec05a7d01ead Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thank you!

On Thu, Jun 11, 2020 at 10:29 AM Henk Birkholz &= lt;henk.birkholz@sit.fra= unhofer.de> wrote:
Hi Kathleen, Michael,
hi list,

as agreed on in the last editor's meeting, I just created 7 issues and = a
pull request from Kathleen's comments (Part I).

They can be found (and further addressed) here:

> https://github.com/ietf-rats-wg/architect= ure/pull/95

and

> https://github.com/ietf-rats-wg/architect= ure/issues/96
> https://github.com/ietf-rats-wg/architect= ure/issues/97
> https://github.com/ietf-rats-wg/architect= ure/issues/98
> https://github.com/ietf-rats-wg/architect= ure/issues/99
> https://github.com/ietf-rats-wg/architec= ture/issues/100
> https://github.com/ietf-rats-wg/architec= ture/issues/101
> https://github.com/ietf-rats-wg/architec= ture/issues/102


Viele Gr=C3=BC=C3=9Fe,

Henk

On 22.05.20 00:36, Michael Richardson wrote:
>
>> I took some time to review the current version of the architecture= document
>> and have some comments and suggestions.=C2=A0 The comments are fro= m the editor's
>> version.=C2=A0 Please do post early and often updates to the IETF = draft
>> repository.=C2=A0 Version numbers do not matter, it's okay to = have a large
>> number :-)
>
> We should have done another version this month.
> I don't know if the "editor" version really works: I per= sonally seldom get
> the MT makefiles to do the right thing.
>
> I will arbitrarily do that now with a new version.
> We have
>=C2=A0 =C2=A0 =C2=A0https://github.com/ietf-= rats-wg/architecture/pull/89
>
> which contains some small fixes to the terminology, and the Roles sect= ion has
> evolved in two ways and need to pick between them.
>
> We also have:
>=C2=A0 =C2=A0 =C2=A0 https://github.com/ietf= -rats-wg/architecture/pull/87
> and https://github.com/ietf-rats-wg/archite= cture/pull/88
> The later has a long conversation/debate which might be worth bringing= to the
> list.=C2=A0 We managed to commit a number of long-standing (3-6 week l= ong) pull
> requests on Tuesday though.
>


--

Best regards,
Kathleen
--0000000000007e28ec05a7d01ead-- From nobody Fri Jun 12 05:36:09 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC13F3A098B for ; Fri, 12 Jun 2020 05:36:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.096 X-Spam-Level: X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5y0nrqYoPOC2 for ; Fri, 12 Jun 2020 05:36:05 -0700 (PDT) Received: from mail-qv1-xf31.google.com (mail-qv1-xf31.google.com [IPv6:2607:f8b0:4864:20::f31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 495C93A0976 for ; Fri, 12 Jun 2020 05:36:05 -0700 (PDT) Received: by mail-qv1-xf31.google.com with SMTP id e2so4257795qvw.7 for ; Fri, 12 Jun 2020 05:36:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=content-transfer-encoding:from:mime-version:date:subject:message-id :references:to; bh=PD/aoSbbCSnlFvyaVx/06nuDr572AOtf/0pzRthF8xE=; b=NBO9EAz9Rc+l+aupk40mxdmV2n066RGRFSoaNYX7s75Z6rQkZG0S1aMifVFqwP9IGi N9lOeBCjDRXiEGZTCCZM/zV+TsvK5rVOVQayeopU39Ag6f9MVXxgSK5AsAyg1QanLR2O BUsTlDRApDiXoSsuuY+FqKpMod4XwZlwtzaPCJ3Hp9fS24gPTRGuS1fIO/ykbjRix3pE fACve6RdD/2GLmz4ozy5GsQ3pJg8Kdwx12A34SG8gcL/KxhQkVaX93cUO/kXO5ooqu9G WivYmXW1G1wVV1MVTrI3H6OV79T3HvGK3PDTPBqU1B6tjfolCLTV6H8P6x2YU0ojw5o7 0yuQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version:date :subject:message-id:references:to; bh=PD/aoSbbCSnlFvyaVx/06nuDr572AOtf/0pzRthF8xE=; b=nfoMSQvCyI6IeiNIoVys8yu3yXF10uHNvngyq4+obDzLlbT/VJY2Z4tsBjaBKvEYi8 /rbdUwISJht0EyWq2of1se0M+rmVQALdEPlc5FlXzc0YaGmXny/AWN1YG723P7NKRqcJ 1/8W34Pm2BbCKmhrvtohXZRvxZ6TDKnwUJVkUMcorfQiRdH3uNP8BSEKumsVVVWzwhQ9 vxwZ0LeDFjbpl8khd4xV+fF5b95My1w4ph/+DrCUkSFbvvfvofsN+3u4634XtZqcbW7y n41HUUhnLl3RkaPQE8RAuKpJvrWPvwDjzZ+f9zzcOt8mrBvIxUAzumg9WTmhWnJFmEwz iFhA== X-Gm-Message-State: AOAM530LnQekp89X1HYWcW//IQewksfraSg6EPt3RmCRMH+gJGxlEGYi IWO1kDj2bQ8gOTKhZj8djiAyt9ED X-Google-Smtp-Source: ABdhPJwAJzJ7XWxLlNdiwq8beCi2dvSmpOkwzGSqRN3gCtJZ7TANgDuRKV0nRjb9JYwfcg8nIZEmOg== X-Received: by 2002:ad4:4572:: with SMTP id o18mr12266331qvu.204.1591965364049; Fri, 12 Jun 2020 05:36:04 -0700 (PDT) Received: from [192.168.1.2] (146-115-73-78.s5196.c3-0.arl-cbr1.sbo-arl.ma.cable.rcncustomer.com. [146.115.73.78]) by smtp.gmail.com with ESMTPSA id s201sm4438701qka.8.2020.06.12.05.36.03 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 12 Jun 2020 05:36:03 -0700 (PDT) Content-Type: multipart/alternative; boundary=Apple-Mail-13E53175-6E27-4DDA-B4C9-BC8613D3A4D0 Content-Transfer-Encoding: 7bit From: Kathleen Moriarty Mime-Version: 1.0 (1.0) Date: Fri, 12 Jun 2020 08:36:02 -0400 Message-Id: <7DBD5320-CF1F-4329-BB95-E9CB86089E49@gmail.com> References: <159181529656.16063.6964178024900109434@ietfa.amsl.com> To: rats@ietf.org X-Mailer: iPhone Mail (17E262) Archived-At: Subject: [Rats] Fwd: Nomcom 2020-2021 Second Call For Volunteers X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2020 12:36:08 -0000 --Apple-Mail-13E53175-6E27-4DDA-B4C9-BC8613D3A4D0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Please consider volunteering for this year=E2=80=99s NomCom. We need a stro= ng pool of volunteers for the selection process. Best regards, Kathleen=20 Sent from my mobile device Begin forwarded message: > From: NomCom Chair 2020 > Date: June 10, 2020 at 2:55:33 PM EDT > To: IETF Announcement List > Cc: ietf@ietf.org > Subject: Nomcom 2020-2021 Second Call For Volunteers >=20 > =EF=BB=BFThis is the second sending of the call for volunteers for the 202= 0-2021 NomCom. >=20 > I wanted to mention a few updates from the previous email (sent 2 weeks ag= o): > - I've fixed the URL at the bottom of the email to point to https://datatr= acker.ietf.org/nomcom/2020/ instead of /2019/. This was a test to see if any= one was paying attention. Apparently, some people were. ;) > - The IETF 108 registration form includes a checkbox that will let you vol= unteer. You can use this instead of emailing me, when you register for IETF 1= 08. > - I currently have 39 volunteers. Last year had 149. I need more volunteer= s! > --------------------------------------------------------------------------= ------- > The IETF NomCom appoints people to fill the open slots on the LLC, IETF Tr= ust, the IAB, and the IESG. >=20 > Ten voting members for the NomCom are selected in a verifiably random way f= rom a pool of volunteers. The more volunteers, the better chance we have of c= hoosing a random yet representative cross section of the IETF population. >=20 > The details of the operation of the NomCom can be found in BCP 10 (RFC 871= 3). RFC 3797 details the selection algorithm. >=20 > Special for this year (and only this year), we also have RFC 8788 (one-off= update to RFC 8713 / BCP 10) to tell us who is eligible to volunteer: >=20 > Members of the IETF community must have attended at least three of > the last five in-person IETF meetings in order to volunteer. >=20 > The five meetings are the five most recent in-person meetings that > ended prior to the date on which the solicitation for NomCom > volunteers was submitted for distribution to the IETF community. > Because no IETF 107 in-person meeting was held, for the 2020-2021 > Nominating Committee those five meetings are IETFs > 102 [Montreal, Canada; July 2018], > 103 [Bangkok, Thailand; November 2018], > 104 [Prague, Czech Republic; March 2019], > 105 [Montreal, Canada; July 2019], and=20 > 106 [Singapore; November 2019]. >=20 > Keep in mind that eligibility is based on in-person attendance at the five= listed meetings. You can check your eligibility at: https://www.ietf.org/re= gistration/nomcom.py. >=20 > If you qualify, please volunteer. Before you decide to volunteer, please r= emember that anyone appointed to this NomCom will not be considered as a can= didate for any of the positions that the 2020 - 2021 NomCom is responsible f= or filling. >=20 > People commonly volunteer by ticking the box on IETF registration forms. T= he IETF 106 form did not ask whether people were willing to volunteer. IETF 1= 07 did ask, but all those registrations were canceled. I have asked the Secr= etariat if it is possible to get the list if volunteers from canceled IETF 1= 07 registrations. If that list is available, I will contact all who are veri= fied as eligible. But given the uncertainty of this process, I would encoura= ge people to volunteer directly (see the bottom of this email for instructio= ns). Thank you for volunteering! >=20 > The list of people and posts whose terms end with the March 2021 IETF meet= ing, and thus the positions for which this NomCom is responsible, are >=20 > IETF Trust: > Joel Halpern >=20 > LLC: > Maja Andjelkovic >=20 > IAB: > Jari Arkko > Jeff Tantsura > Mark Nottingham > Stephen Farrell > Wes Hardaker > Zhenbin Li >=20 > IESG: > Alissa Cooper, IETF Chair/GEN AD > Alvaro Retana, RTG AD > Barry Leiba, ART AD > Deborah Brungard, RTG AD > =C3=89ric Vyncke, INT AD > Magnus Westerlund, TSV AD > Roman Danyliw, SEC AD > Warren Kumari, OPS AD >=20 > All appointments are for 2 years. The Routing area has 3 ADs and the Gener= al area has 1; all other areas have 2 ADs. Thus, all areas (that have more t= han one AD) have at least one continuing AD. >=20 > The primary activity for this NomCom will begin in July 2020 and should be= completed in January 2021. The NomCom will have regularly scheduled confer= ence calls to ensure progress. There will be activities to collect requireme= nts from the community, review candidate questionnaires, review feedback fro= m community members about candidates, and talk to candidates. >=20 > While being a NomCom member does require some time commitment it is also a= very rewarding experience. >=20 > As a member of the NomCom it is very important that you be willing and abl= e to attend either videoconference or in-person meetings (which may not happ= en) during 14-20 November (IETF 109 - Bangkok) to conduct interviews. Videoc= onference attendance will be supported whether or not there are in-person me= etings. Orientation and setting of the NomCom schedule will be done by video= conference during the week 20-24 July (exact time and date to be determined a= fter NomCom membership is finalized on July 12), the week prior to IETF 108.= Being at IETF 110 (Prague) is not essential. >=20 > Please volunteer by sending me an email before 23:59 UTC June 24, 2020, as= follows: >=20 > To: nomcom-chair-2020@ietf.org > Subject: NomCom 2020-21 Volunteer >=20 > Please include the following information in the email body: >=20 > Your Full Name:=20 > // as you write it on the IETF registration form >=20 > Current Primary Affiliation: > // Typically what goes in the Company field > // in the IETF Registration Form >=20 > Emails:=20 > // All email addresses used to register for the past 5 IETF meetings > // Preferred email address first >=20 > Telephone:=20 > // For confirmation if selected >=20 > You should expect an email response from me within 5 business days stating= whether or not you are qualified. If you don't receive this response, plea= se re-send your email with the tag "RESEND"" added to the subject line. >=20 > If you are not yet sure if you would like to volunteer, please consider th= at NomCom members play a very important role in shaping the leadership of th= e IETF. Questions by email or voice are welcome. Volunteering for the NomCo= m is a great way to contribute to the IETF! >=20 > You can find a detailed timeline on the NomCom web site at: > https://datatracker.ietf.org/nomcom/2020/ >=20 > I will be publishing a more detailed target timetable, as well as details o= f the randomness seeds to be used for the RFC 3797 selection process, within= the next few weeks. >=20 > Thank you! >=20 > Barbara Stark > bs7652 at att dot com > nomcom-chair-2020 at ietf dot org >=20 --Apple-Mail-13E53175-6E27-4DDA-B4C9-BC8613D3A4D0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Please consider volunteering for this year=E2= =80=99s NomCom.  We need a strong pool of volunteers for the selection p= rocess.

Best regards,
Kathleen 

Sent from my mobile device

Begin for= warded message:

From:= NomCom Chair 2020 <nomcom-chair-2020@ietf.org>
Date: Ju= ne 10, 2020 at 2:55:33 PM EDT
To: IETF Announcement List <ietf-= announce@ietf.org>
Cc: ietf@ietf.org
Subject: Nomc= om 2020-2021 Second Call For Volunteers

=EF=BB=BFThis is the second sendi= ng of the call for volunteers for the 2020-2021 NomCom.

I wanted to mention a few updates from the previous email (sent= 2 weeks ago):
- I've fixed the URL at the bottom of the em= ail to point to https://datatracker.ietf.org/nomcom/2020/ instead of /2019/.= This was a test to see if anyone was paying attention. Apparently, some peo= ple were. ;)
- The IETF 108 registration form includes a ch= eckbox that will let you volunteer. You can use this instead of emailing me,= when you register for IETF 108.
- I currently have 39 volu= nteers. Last year had 149. I need more volunteers!
---------= ------------------------------------------------------------------------
The IETF NomCom appoints people to fill the open slots on the L= LC, IETF Trust, the IAB, and the IESG.

Ten v= oting members for the NomCom are selected in a verifiably random way from a p= ool of volunteers. The more volunteers, the better chance we have of choosin= g a random yet representative cross section of the IETF population.
The details of the operation of the NomCom can be f= ound in BCP 10 (RFC 8713). RFC 3797 details the selection algorithm.<= br>
Special for this year (and only this year), we als= o have RFC 8788 (one-off update to RFC 8713 / BCP 10) to tell us who is elig= ible to volunteer:

    = ; Members of the IETF community must have attended at least three of
     the last five in-person IETF me= etings in order to volunteer.

  =    The five meetings are the five most recent in-person meeti= ngs that
     ended prior to the d= ate on which the solicitation for NomCom
   =   volunteers was submitted for distribution to the IETF community.=
     Because no IETF 107 in-perso= n meeting was held, for the 2020-2021
   &nb= sp; Nominating Committee those five meetings are IETFs
=        102 [Montreal, Canada; July 2018]= ,
       103 [Bangkok, T= hailand; November 2018],
     &nbs= p; 104 [Prague, Czech Republic; March 2019],
 &nb= sp;     105 [Montreal, Canada; July 2019], and
       106 [Singapore; Nove= mber 2019].

Keep in mind that eligibility i= s based on in-person attendance at the five listed meetings. You can check y= our eligibility at: https://www.ietf.org/registration/nomcom.py.
<= span>
If you qualify, please volunteer. Before you decide to= volunteer, please remember that anyone appointed to this NomCom will not be= considered as a candidate for any of the positions that the 2020 - 2021 Nom= Com is responsible for filling.

People comm= only volunteer by ticking the box on IETF registration forms. The IETF 106 f= orm did not ask whether people were willing to volunteer. IETF 107 did ask, b= ut all those registrations were canceled. I have asked the Secretariat if it= is possible to get the list if volunteers from canceled IETF 107 registrati= ons. If that list is available, I will contact all who are verified as eligi= ble. But given the uncertainty of this process, I would encourage people to v= olunteer directly (see the bottom of this email for instructions). Thank you= for volunteering!

The list of people and p= osts whose terms end with the March 2021 IETF meeting, and thus the position= s for which this NomCom is responsible, are

IETF Trust:
   Joel Halpern

LLC:
   Maja Andjelkovic

IAB:
   Jari= Arkko
   Jeff Tantsura
&nb= sp;  Mark Nottingham
   Stephen Fa= rrell
   Wes Hardaker
 = ;  Zhenbin Li

IESG:
   Alissa Cooper, IETF Chair/GEN AD
&nbs= p;  Alvaro Retana, RTG AD
   Barry= Leiba, ART AD
   Deborah Brungard, RTG AD
   =C3=89ric Vyncke, INT AD
&= nbsp;  Magnus Westerlund, TSV AD
  &nbs= p;Roman Danyliw, SEC AD
   Warren Kumari, OP= S AD

All appointments are for 2 years. The R= outing area has 3 ADs and the General area has 1; all other areas have 2 ADs= . Thus, all areas (that have more than one AD) have at least one continuing A= D.

The primary activity for this NomCom wil= l begin in July 2020 and should be completed in January 2021.  The NomC= om will have regularly scheduled conference calls to ensure progress. There w= ill be activities to collect requirements from the community, review candida= te questionnaires, review feedback from community members about candidates, a= nd talk to candidates.

While being a NomCom= member does require some time commitment it is also a very rewarding experi= ence.

As a member of the NomCom it is very i= mportant that you be willing and able to attend either videoconference or in= -person meetings (which may not happen) during 14-20 November (IETF 109 - Ba= ngkok) to conduct interviews. Videoconference attendance will be supported w= hether or not there are in-person meetings. Orientation and setting of the N= omCom schedule will be done by videoconference during the week 20-24 July (e= xact time and date to be determined after NomCom membership is finalized on J= uly 12), the week prior to IETF 108.  Being at IETF 110 (Prague) is not= essential.

Please volunteer by sending me a= n email before 23:59 UTC June 24, 2020, as follows:
<= br>To: nomcom-chair-2020@ietf.org
Subject: NomCom 2020= -21 Volunteer

Please include the following i= nformation in the email body:

Your Full Nam= e:
   // as you write it on the IETF regist= ration form

Current Primary Affiliation:
   // Typically what goes in the Company field=
   // in the IETF Registration Form<= br>
Emails:
  // All email= addresses used to register for the past 5 IETF meetings
&n= bsp; // Preferred email address first

= Telephone:
   // For confirmation if select= ed

You should expect an email response from= me within 5 business days stating whether or not you are qualified.  I= f you don't receive this response, please re-send your email with the tag "R= ESEND"" added to the subject line.

If you a= re not yet sure if you would like to volunteer, please consider that NomCom m= embers play a very important role in shaping the leadership of the IETF. &nb= sp;Questions by email or voice are welcome. Volunteering for the NomCom is a= great way to contribute to the IETF!

You c= an find a detailed timeline on the NomCom web site at:
&nbs= p;  https://datatracker.ietf.org/nomcom/2020/

I will be publishing a more detailed target timetable, as well a= s details of the randomness seeds to be used for the RFC 3797 selection proc= ess, within the next few weeks.

Thank you!<= /span>

Barbara Stark
bs7652 at att= dot com
nomcom-chair-2020 at ietf dot org
<= /span>
= --Apple-Mail-13E53175-6E27-4DDA-B4C9-BC8613D3A4D0-- From nobody Fri Jun 12 10:00:52 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2FC73A0A0B for ; Fri, 12 Jun 2020 10:00:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=SgPim7vQ; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=SgPim7vQ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZSlfPjaCtXgX for ; Fri, 12 Jun 2020 10:00:47 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80045.outbound.protection.outlook.com [40.107.8.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D5463A0A01 for ; Fri, 12 Jun 2020 10:00:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gGEx/b+SfQbEoQPvOSYeGMoSAaSBDV/IQk3T8J+p1zw=; b=SgPim7vQUInyclNsUwPAsy2cwLVRmfloX5O1C9E/6mPE3KQx687RW3tZXAHR0ebgBhEUOGTcw5eSlrBQJ51v9j2BnUpAb4Rw6k3FM3OCQrh+DXGK9QCQel/6JGXKUB8L9IaPhfiRAInKPqnQLg5emGzxsUJ+cduOaMUv/cDfcFg= Received: from AM6P193CA0092.EURP193.PROD.OUTLOOK.COM (2603:10a6:209:88::33) by AM0PR08MB3780.eurprd08.prod.outlook.com (2603:10a6:208:10a::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.21; Fri, 12 Jun 2020 17:00:44 +0000 Received: from AM5EUR03FT057.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:88:cafe::64) by AM6P193CA0092.outlook.office365.com (2603:10a6:209:88::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.19 via Frontend Transport; Fri, 12 Jun 2020 17:00:44 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT057.mail.protection.outlook.com (10.152.17.44) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend Transport; Fri, 12 Jun 2020 17:00:44 +0000 Received: ("Tessian outbound 3e82c366635e:v59"); Fri, 12 Jun 2020 17:00:44 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 3310c4692fabb6c9 X-CR-MTA-TID: 64aa7808 Received: from d4bd1657caeb.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 6FDF9D82-1800-45A4-907E-D458DB9A4220.1; Fri, 12 Jun 2020 17:00:38 +0000 Received: from EUR01-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id d4bd1657caeb.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 12 Jun 2020 17:00:38 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kCphZLMiDuHu99/dAxcgz1SgI3diKdg0VJb/qcM+BgkM2NdiS5qRh4cplo+b8YD3CVXeqPGc8bW/w2NyRUstkqQsVDP5Rmsl1e8uJYCqi8OOjOoYqe9ydoUcttSWsbz7fpeRXwwDScLlXIt50FFOjlqFFj54DZVBm1WSY8k8o9Zc4wgPZ90eC+gaYj0UyGT7yGNYmB4vnV/GstxstlxDjXFhZVXFveh5eQesxMzxFYLqqSX/53YB1ibVUGmZDTvJv3vHgcQm1w2eF2bLLcUE19nRe2kaZob0JBCTAFdrgZt5LVC6uC8NueR2tRBFiNg5fnd27/qKTz68sFtTHuC8AA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gGEx/b+SfQbEoQPvOSYeGMoSAaSBDV/IQk3T8J+p1zw=; b=LtC5lBpPY5eup1rHodbLwzw7Y3tzFOyDFKjX92F8gyTHZhYT47ewCAa7akRmZElAcpZKNhTEwWdPWU2av1vNlpTGFFU6vPK2gby/aSW/9eRwcWBQPYYShpBiG5JGBatceVcb2WX7ieBShlsd1UIPn8BGle2iwpYAAWGWLCujxdFGSneLBRvTArqr7wRg2btZmhQsbtzEo2NdMANXbkkIQQekYmFCNBgFCcKTV7LCxv9t/G/HJjlwY7aTaMY1lRDIhyZk1K8S/e+yPOX06Y3dc2wSiA9Eq5Qdh96QTELtFAM/NZ14L03OBkJGHK4umeu5/nxJ2SVSu74TSELarRL/wA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gGEx/b+SfQbEoQPvOSYeGMoSAaSBDV/IQk3T8J+p1zw=; b=SgPim7vQUInyclNsUwPAsy2cwLVRmfloX5O1C9E/6mPE3KQx687RW3tZXAHR0ebgBhEUOGTcw5eSlrBQJ51v9j2BnUpAb4Rw6k3FM3OCQrh+DXGK9QCQel/6JGXKUB8L9IaPhfiRAInKPqnQLg5emGzxsUJ+cduOaMUv/cDfcFg= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB3112.eurprd08.prod.outlook.com (2603:10a6:209:46::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.20; Fri, 12 Jun 2020 17:00:37 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::5e0:a53a:d4d6:2e8d]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::5e0:a53a:d4d6:2e8d%6]) with mapi id 15.20.3088.018; Fri, 12 Jun 2020 17:00:37 +0000 From: Thomas Fossati To: "rats@ietf.org" Thread-Topic: New Version Notification for draft-shaw-rats-rear-00.txt Thread-Index: AQHWQNlFdH/OqKSRhkWewqKHNl+chKjVRQwA Date: Fri, 12 Jun 2020 17:00:36 +0000 Message-ID: <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> References: <159198048358.5204.2551532653126853410@ietfa.amsl.com> In-Reply-To: <159198048358.5204.2551532653126853410@ietfa.amsl.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.37.20051002 Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: b40d3785-87dd-4cc6-c338-08d80ef22524 x-ms-traffictypediagnostic: AM6PR08MB3112:|AM0PR08MB3780: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:7219;OLM:8882; x-forefront-prvs: 0432A04947 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: qYJ2+/uQl0EQ2pXza+oeUSZi6+iRXnayNuI5xYJWvkavNlI2AfNGATY7bmCH2hZhzEtEX6D2R6qxEyagY6qqvS1w3Q5eB1Uq754IiHLJKmrAjQsbarLgx1gjVLTlpxAmuV890KmQyWgqoY4LwBpqpG3GWUsJS14xfRYTEBj+L0GXyM3TVjyPC6WwdFACHWfFKd4z8REmOhdmdqo4SEKKDTcaLyVgONGk9MgvhXIsSNk+I6y/zNLY0BUXUEsv6hdY4nIAILw8qEr3ZlLCu1mOHyv+rXUapjylz6R7Z9HUSKhM29JkiFgG0q2RQEI6wmqW9F+vMXW1MlmvQvXpqvOKa26uR9y2/0UsyGS/bNpK9A8Z3uLdkAsPL27Y1Wi504QAV7engoPlLpR/ljw6iwXBOA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(376002)(366004)(39860400002)(136003)(346002)(53546011)(6506007)(6512007)(6486002)(186003)(316002)(26005)(2616005)(33656002)(71200400001)(66446008)(66574014)(66946007)(64756008)(15650500001)(5660300002)(36756003)(966005)(86362001)(76116006)(83380400001)(91956017)(8676002)(2906002)(66476007)(66556008)(6916009)(8936002)(478600001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: uOdaZFgETa4uYku12U3zS1ZwGZVl+OJN3wIET5x2Oe4fX7Yu7ih+ga5w36p7tW/SbttNyX9+8UCjrtzzl3uagCqfsSP+x3TSoI8r+qt7ji7RohRPEpkqQhz4K6tkqZg9fekojNaAMaVeERGC5CiVutNgyDbSM3PYaAPPNXFSWITISm8VZdlUHj4YWP0oJFW5iZeJD3zYGv0aR4hcP2gq1K6H8SzVyXqPsO7RTMKVOkLfJuaOXMWMWAR8yq/ozZ83lEww/gv3hpuVHXhZg+phUDqvmh8PKRlHA/JmWw9aGyuNApPGgwgpXh+ZIPrB/Hcn5PDDn/w04OjC3livEU76Erh+g4NMALvqjqjJZCXAVf9RKKxorQInkbi6Zfw+nGUySV5KLch+JFWtWRHlvi3e4RtFcFNaa+ZZgJ15nzVSJdcYKaz2HNihWiliiM7D1zC3mkhmPK3U/ZzcXNk+TERDkFrly1+ucFsokKxgx5G7LMI= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <7714DFB0B2F2FB49BB9C15C2733A1E3A@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3112 Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT057.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(346002)(136003)(376002)(39860400002)(46966005)(478600001)(82740400003)(47076004)(53546011)(70586007)(70206006)(66574014)(33656002)(81166007)(966005)(6512007)(82310400002)(316002)(36756003)(356005)(36906005)(336012)(6916009)(6486002)(8676002)(6506007)(8936002)(2616005)(186003)(5660300002)(26005)(15650500001)(86362001)(83380400001)(2906002); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: dece3a7c-551f-46f0-4336-08d80ef220eb X-Forefront-PRVS: 0432A04947 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: wXy/z3VKWhjXA7yXaZEFOhQ6AT59ucRnuXbh4EEtvti+SPjnB5cU0gRWnNbrXYzt9CArf8E56X3TG5ie1/QXaxAZ41vEh48m21HCfmK/3vBJcSJ9b4eER/cCj7ENYxPr3hqYLBq2IvRnQsveX63JV3uTV6YBOHRZ9asz1QrD7U9afNFQzNCoxks9s23C6YZ5zaGwekwu8+8egmQsKF0aaEn0j7acIusqRLTwpYsVenpNuSJB6zhFLFCE1JcvwZ9vX+8j+bSp6YRtRFKfCxvbKw8dIApK+LYkyeURcMwN5etHL1Nar1l5nCUQbqULxuJbKEoB2EuDdkEiDobliA/uSvdtfBWtywcz6O+DU/D3x1M6sPFSXshXjEXgcjv2IOJutW0TfpxD/8kaA+381qkMVAbuuBvfSpgUCMCMr8YatN5g4kDoRbpVVVSD9wrmTWxadepR6G5sumgIyv9VIJCywJbkva2+P9CNwiI9usFRApE= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Jun 2020 17:00:44.0396 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b40d3785-87dd-4cc6-c338-08d80ef22524 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3780 Archived-At: Subject: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2020 17:00:50 -0000 SGksIGFsbCwNCg0KV2UgaGF2ZSBqdXN0IHN1Ym1pdHRlZCBhIG5ldyBkcmFmdCAiUkVTVGZ1bCBh dHRlc3RlZCByZXNvdXJjZXMiIChkZXRhaWxzDQpiZWxvdykuDQoNClRoZSBtYWluIGdvYWwgaGVy ZSBpcyBjcmVhdGluZyBhIG1lY2hhbmlzbSB0byBleHBvc2UgYXR0ZXN0ZWQgc3lzdGVtDQpzdGF0 ZSBhcyBSRVNUZnVsIHJlc291cmNlcyAoaS5lLiwgInRoaW5ncyIgdGhhdCBjYW4gYmUgZGUtcmVm ZXJlbmNlZCBieQ0KdGhlaXIgVVJJcykgdG9nZXRoZXIgd2l0aCBhIHdheSB0byBzZWN1cmVseSBi aW5kIHNhaWQgc3lzdGVtIHN0YXRlIHdpdGgNCmFuIEVBVCB0b2tlbi4NCg0KV2UgZGVmaW5lIHR3 byBSRVNUIGludGVyZmFjZXM6IG9uZSB0byB0aGUgQXR0ZXN0ZXIgYW5kIG9uZSB0byB0aGUNClZl cmlmaWVyLCB3aXRoIHRpbWVzdGFtcC0gYW5kIG5vbmNlLWJhc2VkIGZyZXNobmVzcy4gIFdlIHNo b3cgaG93IHRoZXNlDQpjYW4gYmUgY29tcG9zZWQgaW50byB0aGUgdXN1YWwgImJhY2tncm91bmQg Y2hlY2siLCAicGFzc3BvcnQiIGFuZA0KInRpbWUtYmFzZWQgdW5pZGlyZWN0aW9uYWwiIHBhdHRl cm5zLiAgSFRUUCBhbmQgQ29BUCBpbnN0YW50aWF0aW9ucyBhcmUNCnByb3ZpZGVkLCB0b2dldGhl ciB3aXRoIHRoZSBhc3NvY2lhdGVkIE1JTUUgbWFjaGluZXJ5LiAgQSBkaXNjb3ZlcnkNCm1ldGhv ZCBpcyBhbHNvIGRpc2N1c3NlZCBiYXNlZCBvbiB0aGUgQ29SRSBSZXNvdXJjZSBEaXJlY3Rvcnku DQoNClRoaXMgcHJvcG9zYWwgc2VlbXMgaW4gc2NvcGUgd2l0aCB0aGUgUkFUUyBjaGFydGVyLCBp biBwYXJ0aWN1bGFyIGl0cw0KIlN0YW5kYXJkaXplIGludGVyb3BlcmFibGUgcHJvdG9jb2xzIHRv IHNlY3VyZWx5IGNvbnZleQ0KYXNzZXJ0aW9ucy9jbGFpbXMuIiBiaXQuICBXZSBob3BlIHRoaXMg cHJvdmlkZXMgYSB2YWxpZCBjb250cmlidXRpb24gb24NCmhvdyB0aGUgUkFUUyBhcmNoaXRlY3R1 cmUgYW5kIGJhc2ljIHByb3RvY29sIGVsZW1lbnRzIGNhbiBiZSB1c2VkIGluDQpoaWdoIGxldmVs IHByb3RvY29sKHMpLCBhbmQgd291bGQgcmVhbGx5IGFwcHJlY2lhdGUgYW55IGZlZWRiYWNrIHdp dGgNCnJlZ2FyZHMgdG8gaXRzIHVzZWZ1bG5lc3MsIGNvcnJlY3RuZXNzIGFuZCBjb21wbGV0ZW5l c3MuDQoNCmNoZWVycywgdGhhbmtzIQ0KDQpPbiAxMi8wNi8yMDIwLCAxNzo0OCwgImludGVybmV0 LWRyYWZ0c0BpZXRmLm9yZyIgPGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4gd3JvdGU6DQo+IEEg bmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1zaGF3LXJhdHMtcmVhci0wMC50eHQNCj4gaGFzIGJl ZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBUaG9tYXMgRm9zc2F0aSBhbmQgcG9zdGVkIHRv IHRoZQ0KPiBJRVRGIHJlcG9zaXRvcnkuDQo+DQo+IE5hbWU6ZHJhZnQtc2hhdy1yYXRzLXJlYXIN Cj4gUmV2aXNpb246MDANCj4gVGl0bGU6UmVzdGZ1bCBBdHRlc3RlZCBSZXNvdXJjZXMNCj4gRG9j dW1lbnQgZGF0ZToyMDIwLTA2LTEyDQo+IEdyb3VwOkluZGl2aWR1YWwgU3VibWlzc2lvbg0KPiBQ YWdlczoyMw0KPiBVUkw6ICAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQt ZHJhZnRzL2RyYWZ0LXNoYXctcmF0cy1yZWFyLTAwLnR4dA0KPiBTdGF0dXM6ICAgICAgICAgaHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtc2hhdy1yYXRzLXJlYXIvDQo+IEh0 bWxpemVkOiAgICAgICBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtc2hhdy1yYXRz LXJlYXItMDANCj4gSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2h0bWwvZHJhZnQtc2hhdy1yYXRzLXJlYXINCj4NCj4NCj4gQWJzdHJhY3Q6DQo+ICAgIFRo aXMgbWVtbyBkZXNjcmliZXMgYSBSRVNUIGludGVyZmFjZSBiYXNlZCBvbiB0aGUgUkFUUyBhcmNo aXRlY3R1cmUNCj4gICAgdGhhdCBjYW4gYmUgdXNlZCB0byByZXRyaWV2ZSBhdHRlc3RlZCBzeXN0 ZW0gc3RhdGUsIGZvciBleGFtcGxlIHRoZQ0KPiAgICByZWFkaW5nIG9mIGEgc2VjdXJpdHkgY3Jp dGljYWwgc2Vuc29yLiAgVGhlIG9iamVjdGl2ZSBpcyB0byBwcmVzZW50IGENCj4gICAgY29tbW9u IHZvY2FidWxhcnkgb2YgZGF0YSBmb3JtYXRzIGFuZCBiYXNpYyBwcm90b2NvbCB0cmFuc2FjdGlv bnMNCj4gICAgdGhhdCBjYW4gYmUgcGllY2VkIHRvZ2V0aGVyIGludG8gYSBjb2hlc2l2ZSBpbnRl cmZhY2UgdGhhdCBpcyBjYXBhYmxlDQo+ICAgIG9mIHNlcnZpbmcgZGlmZmVyZW50IGF0dGVzdGF0 aW9uIHdvcmtmbG93cy4NCg0KDQoNCg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9m IHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkg YWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9z ZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9z ZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsg eW91Lg0K From nobody Fri Jun 12 13:34:44 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88F993A0F22 for ; Fri, 12 Jun 2020 13:34:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1c7k6F3kG3Td for ; Fri, 12 Jun 2020 13:34:42 -0700 (PDT) Received: from p3plsmtpa06-07.prod.phx3.secureserver.net (p3plsmtpa06-07.prod.phx3.secureserver.net [173.201.192.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7D6D3A0EDD for ; Fri, 12 Jun 2020 13:34:41 -0700 (PDT) Received: from [172.16.8.199] ([65.117.83.146]) by :SMTPAUTH: with ESMTPA id jqNsjgoP1I3xvjqNtjP3go; Fri, 12 Jun 2020 13:34:41 -0700 X-CMAE-Analysis: v=2.3 cv=T5TysMCQ c=1 sm=1 tr=0 a=UU+Bnaz6nmwnxJQnjP64Rg==:117 a=UU+Bnaz6nmwnxJQnjP64Rg==:17 a=IkcTkHD0fZMA:10 a=gKmFwSsBAAAA:8 a=Lh7EjU1HkdtPZskwSpIA:9 a=QuMyyfd2gmEpAXyK:21 a=RNQMSynhVs7bG3Y1:21 a=QEXdDO2ut3YA:10 a=nnPW6aIcBuj1ljLj_o6Q:22 X-SECURESERVER-ACCT: lgl@island-resort.com Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) From: Laurence Lundblade In-Reply-To: <99E5F53A-815B-4BFA-AEBB-5155D7E45D89@tzi.org> Date: Fri, 12 Jun 2020 13:34:40 -0700 Cc: rats@ietf.org, jeremy O'Donoghue Content-Transfer-Encoding: quoted-printable Message-Id: References: <72AE6830-B424-47F1-BA3D-C694989300AF@island-resort.com> <4F64295D-E8B9-428F-9587-8D0D2C763582@island-resort.com> <99E5F53A-815B-4BFA-AEBB-5155D7E45D89@tzi.org> To: Carsten Bormann X-Mailer: Apple Mail (2.3608.80.23.2.2) X-CMAE-Envelope: MS4wfMA/z+UjvOWoLEN1PzrynZzY4jFJI5j3/8uwKBFudcGYmT21z+Z0xacLMh+LEcXP/Rjj8jvx5Ji9nivNkjIN4txac+iTsgIuAdalYxzR0UKW5/T4XgNk XFYI83Omtb/40VSbPXKvso3BCFgPzMysQbfPea+DmSwd2nx5fiQ6rjwSNCsGW6LLWSK3RHR/J5sU7+ICRSF5iGuakiMDCRLyR8CE8T+iolK0NpI59d8UxqNJ Archived-At: Subject: Re: [Rats] I-D Action: draft-birkholz-rats-uccs-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2020 20:34:44 -0000 Still seems like standardizing tails generally and then going into = detail on how to use a tail with poodles when there are many other kinds = of dogs out there. And because of lack of context (lack of normative = reference to EAT and RATS architecture) it is not the best description = of the poodle use case. Note there is use of RATS architecture terms in this UCCS document = (attesting environment, endorsement). > On Jun 10, 2020, at 4:53 AM, Carsten Bormann wrote: >=20 > Hi Laurence, >=20 >> It seems better factoring to associate the security model with the = use cases than with the data structure format. >=20 > There are many ways to (insert vegan version of =E2=80=9Cskin this = cat=E2=80=9D). >=20 > Generally, the IESG has not been happy with defining protocols without = discussing their security, so UCCS will need some security = considerations. The pure admonition =E2=80=9Cwrite up your security = considerations=E2=80=9D makes a bad security considerations section. = Picking one use case (here: the one that motivates us to write this = document now) seems like a good way to evoke the kinds of security = considerations other application environments will have. CWT has pretty minimal security considerations. UCCS goes into security = discussion beyond CWT, like the use of the TEE to protect keys. >=20 >> It seems hard to anticipate the security models needed for future use = cases. >=20 > Right, that=E2=80=99s why the text focuses on one usage environment. >=20 >> In the three RATS uses of UCCS (claims, endorsements, results), the = characteristics of the security needed vary a lot and all three are not = all covered here. >=20 > I don=E2=80=99t think we need to go as far as defining the security = characteristics of those areas =E2=80=94 we do need to explain how = adding UCCS to these areas adds/changed security considerations. So, the one use case that is the focus of this document is RATS = attester->verify conveyance? That should be stated explicitly and the = lack of coverage for the use with endorsements and attestation results = should be called out.=20 >> The text doesn=E2=80=99t seem to anticipate securing UCCS with CMS or = a TPM-based signing scheme. It focuses on TLS / Secure Channels.=20 >=20 > Yes, that would be the one usage environment we are focusing on. So maybe call out this narrow focus and lack of coverage for CMS and = such? >> CWT is part of the establishment of the Verifier=E2=80=99s trust in = an Attester. That topic requires Endorsements and seems better in the = context of RATS architecture or related.=20 >=20 > I=E2=80=99m sure that some form of architecture document can provide a = refined view of this. So should UCCS discuss Endorsements as that is a key part of securing = conveyance from attester->verifier? >=20 >> All that said, I don=E2=80=99t think the section 3 security = discussion is harmful, just that it may become outmoded and necessarily = bypassed as the use cases fill in. >=20 > But that is true: the security considerations here are like the = package insert for some medication =E2=80=94 you should read this, but = you should also heed the instructions from your doctor (i.e., the = standard that specified usage of UCCS in a specific usage environment) = and read up on additional information, in particular about side effects = with other medication (EAT, CMS, TPM). I think I=E2=80=99d call EAT and RATS diseases for which UCCS is a = medication. :-) UCCS usually needs pairing with meds like TLS, IPsec, CMS and TPM = signing. (Not really sure which disease CWT was invented for as I=E2=80=99m not = so familiar with ACE, OAuth and such) So the package insert is for one specific disease when the medication is = good for others we know of today. The insert is only partial information = for that disease and you must talk Dr. Birkholz before you take it. I think I=E2=80=99ve said pretty much everything I have to say on this = and still think same - it is not harmful, but likely to be outmoded. LL From nobody Sun Jun 14 14:23:20 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FE683A00B2; Sun, 14 Jun 2020 14:23:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.792 X-Spam-Level: X-Spam-Status: No, score=-0.792 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, LOCALPART_IN_SUBJECT=1.107, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2FgmbKOx7_2I; Sun, 14 Jun 2020 14:23:15 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D8813A00B0; Sun, 14 Jun 2020 14:23:13 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id E2065389FD; Sun, 14 Jun 2020 17:20:39 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id fn1erizQuSpV; Sun, 14 Jun 2020 17:20:39 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 093F4389FB; Sun, 14 Jun 2020 17:20:39 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id BBACD75F; Sun, 14 Jun 2020 17:23:11 -0400 (EDT) From: Michael Richardson To: draft-moran-suit-mud@ietf.org, suit@ietf.org cc: Eliot Lear , opsawg@ietf.org, rats@ietf.org, Henk Birkholz X-Attribution: mcr X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: [Rats] draft-moran-suit-mud, EAT and MUD X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Jun 2020 21:23:18 -0000 --=-=-= Content-Type: text/plain Hi, I read draft-moran-suit-mud today. It would naturally fall into a MUD WG if we had that. As it is, I have no idea where to discuss this, and thus another shotgun. I gather the mailman deletes my Reply-To suggestions. I feel that this document should be adopted and the details filed in, but I have no idea what WG it belongs in given the current state of things. {It totally fits into the IoT lifecycle security WG I had proposed} I knew it was around since it was talked about at the Hackathon a bunch, but I hadn't read the result until today. If you use Hypothesis my comments are at: https://hyp.is/go?url=https%3A%2F%2Ftools.ietf.org%2Fid%2Fdraft-moran-suit-mud-00.html&group=__world__ I'm not sure what that does if you don't have the plugin installed. I'd prefer to write them as a pull request since they are mostly suggestions on fixing some wording rather than any kind of substantive request for changes. Substantive comments: "At the time of onboarding, devices report their manifest in use to the MUD manager." so I think that we will need to detail this!!! When using an IDevID based onboarding system (BRSKI/BRSKI-TEEP/BRSKI-AE or EAP-NOOB with some certificate based system) then the MUD certificate OID is available. But, that's not the manifest of the software currently running, and it would not be reasonable to embed that into the IDevID for the reasons I explain at: https://datatracker.ietf.org/doc/html/draft-richardson-opsawg-mud-acceptable-urls-00#section-2 More interesting is that you are requesting: Each time a device is updated, rebooted, or otherwise substantially changed, it will execute an attestation. Among other claims in the Entity Attestation Token (EAT) [I-D.ietf-rats-eat], the device will report its software digest(s), configuration digest(s), primary manifest URI, and primary manifest digest to the MUD manager. Well, that attestation is actually ideal for use during onboarding as well. It seems to me that the path of trust should go like: 1) (Manufacturer IDevID PKI) -> IDevID. 2) IDevID -> "generic" MUD file (signed by key from Manufacturer PKI <%>) 3) MUD file -> identifies key that signs firmware manifests 4) SUIT MANIFEST -> "specific" (per version) MUD file I had previous suggested that the SBOM be attached to the per-version MUD file, but I am not so sure anymore. Note that the EAT described above would be *Evidence* (not Attestation Results), per the architecture. It would be signed by the IDevID in <2>. Finally, if you didn't see my message to secdispatch about IDevID. https://mailarchive.ietf.org/arch/msg/secdispatch/Hqe1lHG2wnW_9NxJLazEYbmGYN0/ -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl7mlT8ACgkQgItw+93Q 3WVWsgf/RbQyeq1Nc5xk9rQAXMrIgN3iftaR/n8plHYo3a08wgn2nGQbMYmdt53g VYhKNfwW0JlpFEWlT1enqusqWGzJXAaXC1q9eHxlzbHnhm6QWECnVzLEQ/EO3BbR IPHy+sc57ZonkQwzww69Re2iruquxCX+vg89dBxfO5qatSOV3H7U6XWr3+zXIIgT ddeB+XUEtkXW9K7Y6Wp0OykMTdCiVIKFg59GHdXviJDnO2RqmNrmjOg/DEzXALP0 5lVGbsSTVX2zHvw6vEBRmBogVBK+10gvrVDZdD3RzoylLjHSsYbtp1OS0W3ftHkt b93aGFymtOdh9wAW76i+nEm6cHQIaQ== =fO03 -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Jun 14 14:27:41 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98F5F3A00B2 for ; Sun, 14 Jun 2020 14:27:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LhbQm3Ox42L2 for ; Sun, 14 Jun 2020 14:27:39 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 944D33A00B0 for ; Sun, 14 Jun 2020 14:27:39 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 05ELRY0s019678 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 14 Jun 2020 17:27:37 -0400 Date: Sun, 14 Jun 2020 14:27:34 -0700 From: Benjamin Kaduk To: Carsten Bormann Cc: Laurence Lundblade , rats@ietf.org, "jeremy O'Donoghue" Message-ID: <20200614212734.GY11992@kduck.mit.edu> References: <72AE6830-B424-47F1-BA3D-C694989300AF@island-resort.com> <4F64295D-E8B9-428F-9587-8D0D2C763582@island-resort.com> <99E5F53A-815B-4BFA-AEBB-5155D7E45D89@tzi.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <99E5F53A-815B-4BFA-AEBB-5155D7E45D89@tzi.org> User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Rats] I-D Action: draft-birkholz-rats-uccs-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Jun 2020 21:27:41 -0000 On Wed, Jun 10, 2020 at 01:53:57PM +0200, Carsten Bormann wrote: > Hi Laurence, > > > It seems better factoring to associate the security model with the use cases than with the data structure format. > > There are many ways to (insert vegan version of “skin this catâ€). > > Generally, the IESG has not been happy with defining protocols without discussing their security, so UCCS will need some security considerations. The pure admonition “write up your security considerations†makes a bad security considerations section. Picking one use case (here: the one that motivates us to write this document now) seems like a good way to evoke the kinds of security considerations other application environments will have. Depending on the IESG, you may also get asked to mention situations that could cause big problems in use cases other than the one being considered, even if they are non-issues for the specific use case in question, as a way to avoid potential "gotcha"s for the future documents that provide alternative use cases/analyses. -Ben From nobody Sun Jun 14 14:30:16 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85D4A3A00C3; Sun, 14 Jun 2020 14:30:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1rlhF4SX6NGh; Sun, 14 Jun 2020 14:30:13 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D5ED3A00C4; Sun, 14 Jun 2020 14:30:10 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 05ELU6ZT020271 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 14 Jun 2020 17:30:08 -0400 Date: Sun, 14 Jun 2020 14:30:06 -0700 From: Benjamin Kaduk To: "Eric Voit (evoit)" Cc: "rats@ietf.org" Message-ID: <20200614213006.GZ11992@kduck.mit.edu> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Rats] New Version Notification for draft-voit-rats-trusted-path-routing-02 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Jun 2020 21:30:15 -0000 On Wed, Jun 10, 2020 at 08:13:15PM +0000, Eric Voit (evoit) wrote: > Of general interest in this draft the definition of a Trustworthiness Vector > > which contains a ordered list of Trustworthiness Levels. This vector is > returned within Attestation Results, and is actionable by a Relying Party. I wonder if this usage could be syncrhonized with the RFC 8485 "Vector of Trust". -Ben From nobody Mon Jun 15 15:27:13 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BDF33A0EAD for ; Mon, 15 Jun 2020 15:27:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.599 X-Spam-Level: X-Spam-Status: No, score=-9.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=aWJrgpus; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=uboZObS5 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CM6sBFhol6ER for ; Mon, 15 Jun 2020 15:27:10 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3765A3A0EA8 for ; Mon, 15 Jun 2020 15:27:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8529; q=dns/txt; s=iport; t=1592260030; x=1593469630; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=69XcFcM7om/lCAdMtSj3jZexITeqeLUdlvt2oayL1zA=; b=aWJrgpusLeanCB5CVEp+0oCPUY5JyAvJ6CB7TM9/EO5+FbPfh6sip2g2 pHpUKIRD1IIfrO0LmT0U3+mN8R+Prg7dl86UoIvRCd7jag3zRIe4fCIZt yOXPGMlWEGtOMAGG0Ysr/8texbSCNMgQgSosDDWT3CIotJJeneEA4MHOW 0=; X-Files: smime.p7s : 3975 X-IronPort-AV: E=Sophos;i="5.73,516,1583193600"; d="p7s'?scan'208";a="783158113" Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 15 Jun 2020 22:26:43 +0000 Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by alln-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id 05FMQhbn031556 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 15 Jun 2020 22:26:43 GMT Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 15 Jun 2020 17:26:43 -0500 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 15 Jun 2020 18:26:42 -0400 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 15 Jun 2020 17:26:42 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HrYnFx0lVhHYy0jpoai531kR5xrwTkj/hiFZ3Ii4ssdXxs8ngq8aBpFRcb25XKFdyAfyiaCG6qVskaYXG0ixL+SB0a+p5KR3Fb46EkQm+Egd7sC9lQoOw3PUmk7agHkneezQQxiWlGnk8eZXNQlYVM90I9TXvW5TR1EO0HLtTd9FOIp1IaC+3IQJdhLm4Uzi9WF4j505YorijhBByVqmm3V3igJ5ItHYQDAnQE6+OYynLY2BREFTC/EzVGmXefIcm3z7yb+fsaU1HYb/GEA4LF/fJLTkH641x/rni55fOASkfxc6rcKRA8L9VE5AVSwDoRW2vREGeMvTmH3wctDzrA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TO8EoXd9OPt6l2qlMjlAPExB5/6KmKhI6yzy+2ykoVk=; b=O0HfOCBEx13HUP42DkGtiJ7/8JPEver6VXNQDa6FKU6roN/bxf+l1SgLphg0XGDlV2VBWvGfvBqGTmx52fW2RGMxWNSjfnDK1PWJ8lWcW7+bt5GWSvSiq99YBFGn8pM2bYyLlfD6YppHarulIK2pVulxqAMxNW0W0ikw0jgOTbdpdc1bC9DVaEd6qYuby4TDPnJ+ILiTBQwYIYPhxVEZHL0Num5vyZ82tYj488IWvSE9FG4j9tFBVPkHfhblN+S4W8yhjmMLEgmPpAfDsZExdjArp8/AaDszlm5SrlVhVQ9WodiA6QXKrMtU5YRSKgWwjzO5Bb+CHYkzUVBUvmN00Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TO8EoXd9OPt6l2qlMjlAPExB5/6KmKhI6yzy+2ykoVk=; b=uboZObS5UmJOVbZx8UbklpqsL4HTV84WsnVq9UyQQGJ15JY+Y8fQh97i0jLNhYFuu+uqiFU4RhTb8x0orcAsltc+LM9oEY8JalzrkdVkd/j1lSETU6H+9W/2zkVUH8fdPghQex5ZGEzckuKD/ihu14Ankuj2/tS7ArAGWKMAAr8= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by MN2PR11MB4302.namprd11.prod.outlook.com (2603:10b6:208:179::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18; Mon, 15 Jun 2020 22:26:36 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290%7]) with mapi id 15.20.3088.029; Mon, 15 Jun 2020 22:26:36 +0000 From: "Eric Voit (evoit)" To: Benjamin Kaduk CC: "rats@ietf.org" Thread-Topic: [Rats] New Version Notification for draft-voit-rats-trusted-path-routing-02 Thread-Index: AdY/Y3lmuUCVz/LWQ6GMKwqBAzFWtQDL39YAADH2JTA= Date: Mon, 15 Jun 2020 22:26:36 +0000 Message-ID: References: <20200614213006.GZ11992@kduck.mit.edu> In-Reply-To: <20200614213006.GZ11992@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: mit.edu; dkim=none (message not signed) header.d=none;mit.edu; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.70] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 36520f6a-ec74-4597-4d87-08d8117b2aa3 x-ms-traffictypediagnostic: MN2PR11MB4302: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:1728; x-forefront-prvs: 04359FAD81 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 5e4oPRwRLJrTwOUDjggIdUgv94f/E1iPSRs8w7pzrlrKgyqU64f9MZL60yPkuLovsCCLJWhqR1R+tZmv37QKUXZ/lLlpxBDTPqZ180Wcl7w/uND7KhPU3zLsb3VUpxDLyrbKmEUEbwygOA6uqudNzIBHhPjlqn/+BnpsrteZtZzK27+2kbjowyPvhP+8Z+TpMdXvs7tdL+AHMExbesM+Lo4UNJaDnOa3olp/cI9h5mIDTrHiHa9axY0YiwRverasVUwzEbf0mijC3ieF4Zhz4wDlkyu7kU9bKUtIc6i5L2CfN+94Bff+P1Ik3LzC+uoE+K7DFrO6l2z5km92lFefrN5zkWx1x1gj1auJfbZKIg5X1NG1905hhz06g46TW4AQa7+BKK6N34TpXHCGeT8pzA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(366004)(396003)(346002)(376002)(39860400002)(15650500001)(6916009)(99936003)(2906002)(86362001)(316002)(9686003)(8676002)(66616009)(66476007)(66556008)(64756008)(66446008)(66946007)(76116006)(8936002)(55016002)(33656002)(26005)(186003)(6506007)(7696005)(4326008)(478600001)(52536014)(5660300002)(71200400001)(83380400001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 2y2Y1L2kZx3rrNXa+f6Ep5aumSJNP8TtxD3KWrr1itHVKPVT8b1StFni355KKuN9mHc2XbSlEEokjX1qWq0+AOCJEHaMlLEGP2CGJLkOuAkJyHtWTeKzmt3YYIL46D5AhWJcMI4QG1atKTH5ZcsAYgNpgWSs/LF+mGHnP8yUG1rKrs8QUtCrA4DeHyG1RTSQxPKzx6fdDtBNOSa939g3O0UpL7Z0FP4B1nRYGiJ3gWFm1HhlSUhavYMTZUWUVrhOUYUXq3yKoi+Gns8CGJg/V8lU4nMBUGR35fRlrcCAfNGQ9sdSX75yb9BF+6X7opJz0CXYpR6truiwyZOew2eTfYAGvsH3PUbAqHN2nKU+WW4IVsi87z418I6WtqrqZHIHvv+lN1UBbrpGOIPgGeTVDRlRZNsABmyweoTAyhCEqyQXkrhRcCwJLI+RWVkySsOmXYF8I3WhJdWWZu8qsvWOMnhGde+PofsuZq0yua5V+Iw= x-ms-exchange-transport-forked: True Content-Type: multipart/signed; boundary="----=_NextPart_000_0230_01D64342.7FA96A00"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 36520f6a-ec74-4597-4d87-08d8117b2aa3 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2020 22:26:36.5981 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Ch+87++euBKP7S0mCiG/k/Bzj0bebrDT/vNee+IRYrbQAkfsbBGWKZ8+GAYsXU8f X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4302 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.11, xch-aln-001.cisco.com X-Outbound-Node: alln-core-6.cisco.com Archived-At: Subject: Re: [Rats] New Version Notification for draft-voit-rats-trusted-path-routing-02 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jun 2020 22:27:12 -0000 ------=_NextPart_000_0230_01D64342.7FA96A00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi Ben, > From: Benjamin Kaduk. June 14, 2020 5:30 PM > > On Wed, Jun 10, 2020 at 08:13:15PM +0000, Eric Voit (evoit) wrote: > > Of general interest in this draft the definition of a Trustworthiness > > Vector > > > ection-3.2> which contains a ordered list of Trustworthiness Levels. > > This vector is returned within Attestation Results, and is actionable > > by a Relying Party. > > I wonder if this usage could be syncrhonized with the RFC 8485 "Vector of > Trust". Thanks for pointing this out, I had not seen it. And it is interesting. A few initial thoughts... (1) The universe of RFC8485 Component Dimensions does have a partial overlap with my draft beyond the reuse of the 'vector'. For example Identity proofing and assertion presentation are things RATS cares about. RATS also cares about 'credential' lifecycle. (2) There are many significant domain of claims related to attestation which are not covered in RFC8485. E.g.: (a) whole categories of appraisal assertions such as 'hw-authentic', 'boot-verified' or 'file-blacklisted' would need brand new 'component dimensions'. (Note: RFC8485 does allow other RFCs to grow additional contexts, so perhaps this would be ok, this is of assuming someone is willing to steward this language across many domains.) (b) The lifecycle of Attestation Results beyond credentials quite important with RATS. (3) RFC8485 suggests formal codes for the level of assurance of assertions being made. This would mean that the language of Attestation Results should be very rich. In fact it should be far richer that the small handful of simple human-understandable identities which I proposed in my draft. With this in mind, I have generalized your question to be: how formal should the language of Attestation Results be? In the end, it wouldn't be too hard to map my draft's YANG identities into *new/extended* RFC8485 vector constructs. But I am not yet able to see lots of immediate value. The first question I need to look at from the perspective of routers/switches is how useful it would be to have an expandable standard taxonomy and encoding for Appraisal Results. An early guess would be that someone who has open source code/expertise in formally expressing Appraisal Results would be better positioned to see if this might be worthy of a draft submission. Or said another way: if somebody has the expertise and desire to drive an IETF-wide appraisal results language beyond the RFC8485 starting point, I would happily map my very simple constructs into that language. Thanks, Eric > -Ben ------=_NextPart_000_0230_01D64342.7FA96A00 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNjE1MjIyNjM0WjAjBgkqhkiG 9w0BCQQxFgQUHzsfQyl5/Ri1e80ny0vIYCDDazEwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAml5VJRJcEBqdgG9HjQ1iUwfesuzhruxZHJfUKJstuD68YP9NJia1GtvcAslcNaxRw h8RR3qfzmjIDimiL37Rh4jlsm6N7ZdqpkkXk8ViWpz2VS+iHdUs0HmwlYokdXeMDd8XnoAHH9npd bBwAEnUro7kupBUj1ZsAsuMrdFxsyJJgfSm6vBMzce7+MrS+xyFUBTaDly0LgFREFmx2wY8oVWdH nKjEquvSr8fPzXYow0FAb05xgEFXS+4cKVD0vCP6ZP0lO7cLkpM9NQELpzI1XZHKMK3Ir+fYejo5 nT0EnNAsjG53Q8fJM0CKeaUWjQYPty9qhLZUz2qs/8cwbEcfAAAAAAAA ------=_NextPart_000_0230_01D64342.7FA96A00-- From nobody Mon Jun 15 16:12:09 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 634843A0EDE for ; Mon, 15 Jun 2020 16:12:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3q5mg4dobUWz for ; Mon, 15 Jun 2020 16:12:06 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD6443A0EDA for ; Mon, 15 Jun 2020 16:12:05 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 05FNBxlB012813 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Jun 2020 19:12:02 -0400 Date: Mon, 15 Jun 2020 16:11:59 -0700 From: Benjamin Kaduk To: "Eric Voit (evoit)" Cc: "rats@ietf.org" Message-ID: <20200615231159.GQ11992@kduck.mit.edu> References: <20200614213006.GZ11992@kduck.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Rats] New Version Notification for draft-voit-rats-trusted-path-routing-02 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jun 2020 23:12:07 -0000 Hi Eric, On Mon, Jun 15, 2020 at 10:26:36PM +0000, Eric Voit (evoit) wrote: > Hi Ben, > > > From: Benjamin Kaduk. June 14, 2020 5:30 PM > > > > On Wed, Jun 10, 2020 at 08:13:15PM +0000, Eric Voit (evoit) wrote: > > > Of general interest in this draft the definition of a Trustworthiness > > > Vector > > > > > ection-3.2> which contains a ordered list of Trustworthiness Levels. > > > This vector is returned within Attestation Results, and is actionable > > > by a Relying Party. > > > > I wonder if this usage could be syncrhonized with the RFC 8485 "Vector of > > Trust". > > Thanks for pointing this out, I had not seen it. And it is interesting. A > few initial thoughts... > > (1) The universe of RFC8485 Component Dimensions does have a partial overlap > with my draft beyond the reuse of the 'vector'. For example Identity > proofing and assertion presentation are things RATS cares about. RATS also > cares about 'credential' lifecycle. > > (2) There are many significant domain of claims related to attestation which > are not covered in RFC8485. E.g.: > (a) whole categories of appraisal assertions such as 'hw-authentic', > 'boot-verified' or 'file-blacklisted' would need brand new 'component > dimensions'. (Note: RFC8485 does allow other RFCs to grow additional > contexts, so perhaps this would be ok, this is of assuming someone is > willing to steward this language across many domains.) >From memory, I think it even encourages such growth, not just allowing them. > (b) The lifecycle of Attestation Results beyond credentials quite important > with RATS. > > (3) RFC8485 suggests formal codes for the level of assurance of assertions > being made. This would mean that the language of Attestation Results should > be very rich. In fact it should be far richer that the small handful of > simple human-understandable identities which I proposed in my draft. > > With this in mind, I have generalized your question to be: how formal should > the language of Attestation Results be? In the end, it wouldn't be too > hard to map my draft's YANG identities into *new/extended* RFC8485 vector > constructs. But I am not yet able to see lots of immediate value. That's fair. I certainly don't have an answer in mind, myself :) > The first question I need to look at from the perspective of > routers/switches is how useful it would be to have an expandable standard > taxonomy and encoding for Appraisal Results. An early guess would be that > someone who has open source code/expertise in formally expressing Appraisal > Results would be better positioned to see if this might be worthy of a draft > submission. > > Or said another way: if somebody has the expertise and desire to drive an > IETF-wide appraisal results language beyond the RFC8485 starting point, I > would happily map my very simple constructs into that language. Understood. Thanks for reading and thinking about it! -Ben From nobody Mon Jun 15 18:37:32 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05C7B3A0F71 for ; Mon, 15 Jun 2020 18:37:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qZY1He-k2DLW for ; Mon, 15 Jun 2020 18:37:29 -0700 (PDT) Received: from p3plsmtpa06-02.prod.phx3.secureserver.net (p3plsmtpa06-02.prod.phx3.secureserver.net [173.201.192.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64E673A0F70 for ; Mon, 15 Jun 2020 18:37:29 -0700 (PDT) Received: from laurences-mbp.lan ([70.58.199.219]) by :SMTPAUTH: with ESMTPA id l0XXj9SrOE4Khl0XYjKTJ9; Mon, 15 Jun 2020 18:37:28 -0700 X-CMAE-Analysis: v=2.3 cv=QpUgIm6d c=1 sm=1 tr=0 a=vYbQBYz1awqCo8DrEKtgEg==:117 a=vYbQBYz1awqCo8DrEKtgEg==:17 a=7CQSdrXTAAAA:8 a=CzY0xkpdAAAA:8 a=48vgC7mUAAAA:8 a=3kUTkTNGHhxHt93h84QA:9 a=ffKwp_32ixFjasYi:21 a=la1PaMVOqxSxPs9_:21 a=QEXdDO2ut3YA:10 a=6DiNUfqtzj5sTujcTe8A:9 a=cGWtblw4qRZL_U19:21 a=PyNt6U0Yvf3hqAG8:21 a=1Y4TuuYipmtIveRP:21 a=_W_S_7VecoQA:10 a=a-qgeE7W1pNrGK8U0ZQC:22 a=nHOZnf5REYPFsX_CNJmG:22 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_94B482FA-AA4C-49C8-9A46-17EAF7BDA12B" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Date: Mon, 15 Jun 2020 18:37:27 -0700 In-Reply-To: Cc: "rats@ietf.org" To: Hannes Tschofenig References: X-Mailer: Apple Mail (2.3608.80.23.2.2) X-CMAE-Envelope: MS4wfGga6ZS+DE4cspS94ABtsflcpEsdXfqEjEpo9vX1RWb8GlCF1nssHztnfhJ6MMlDpbeDM9Pz9jPLjB3952VKNQFatUp99Sd6WfEN+1giQ/ilVXVDZ2R0 8Xn+7uWtnhuEOMkRseqL+km1YI7ocTVDxJNKZu+f0OU2P5OYSIcPr1Oxm1ObLluJu64Cn3eEIPg4F+bw0Nd4MiqeKBRGiFW3Ihg= Archived-At: Subject: Re: [Rats] draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 01:37:31 -0000 --Apple-Mail=_94B482FA-AA4C-49C8-9A46-17EAF7BDA12B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Hannes, I think readability of the document could be improved and maybe some = simplification would be OK, but I generally think most of the core = entities and messages make sense. > On Jun 9, 2020, at 12:13 AM, Hannes Tschofenig = wrote: >=20 > Hi all > =20 > I have re-read the architecture document and IMHO it is still far too = complex. It makes the reader believe that attestation is some = rocket-science concept, which it just isn=E2=80=99t. After such a long = time the document is unnecessarily hard to read and understand.=20 > =20 > Here is the story as I see it. > =20 > In the basic form a device puts a bunch of claims together and then = signs them. The device is the attester. > Then, this information is sent to another party, the relying party, = which uses this information for some kind of decision making. Evidence is just the name for =E2=80=9Cthis information=E2=80=9D. > =20 > Of course, there is some prior setup that has to happen (provisioning = of keys during manufacturing) and some assumptions have to be made as = well (attestation code on the device has to be well protected, code = isolation being used, etc.). Endorsements are the mechanism by which this happens. > =20 > Then, there is the a complex case where the relying party cannot use = the received information directly. This is most likely related to any = form of software measurements. If you send a hash of a bootloader to = some relying party you cannot really expect it to be used for anything. = The reason the relying party cannot use that information directly is = because it does not know what software the device is really supposed to = be running. Hence, there is a need to consult another party (let=E2=80=99s= call it the verifier). The assumption is that this party knows what the = expected fingerprint is and hence what software is running on the = device. Which is why the terms Verifier and Results are used. > =20 > That=E2=80=99s all. There is not much more complexity to this topic. =20= I personally would be happy without the Owners and the Appraisal = Policies in the architecture as they seem obviously implied, but not = enough to ask they be removed.=20 > =20 > So, where do all these terms come from? Appraisal policies, evidence, = endorser, ... > =20 > I would delete them and see whether the idea still gets across. I think more clear writing would help. (We could put text in https://www.scribens.com and look at the Flesch = and Gunning Fog indexes for readability under statistics) LL > =20 > Ciao > Hannes > =20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. = _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_94B482FA-AA4C-49C8-9A46-17EAF7BDA12B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Hannes,

I think = readability of the document could be improved and maybe some = simplification would be OK, but I generally think most of the core = entities and messages make sense.


On Jun 9, 2020, at 12:13 AM, = Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:

Hi = all
 
I have = re-read the architecture document and IMHO it is still far too complex. = It makes the reader believe that attestation is some rocket-science = concept, which it just isn=E2=80=99t. After such a long time the = document is unnecessarily hard to read and understand. 
 
Here is = the story as I see it.
 
In the basic form a device puts a bunch of claims together = and then signs them. The device is the attester.
Then, = this information is sent to another party, the relying party, which uses = this information for some kind of decision = making.

Evidence is just the name for =E2=80=9Cthis = information=E2=80=9D.

 
Of = course, there is some prior setup that has to happen (provisioning of = keys during manufacturing) and some assumptions have to be made as well = (attestation code on the device has to be well protected, code isolation = being used, etc.).

Endorsements are the mechanism by which this = happens.

 
Then, = there is the a complex case where the relying party cannot use the = received information directly. This is most likely related to any form = of software measurements. If you send a hash of a bootloader to some = relying party you cannot really expect it to be used for anything. The = reason the relying party cannot use that information directly is because = it does not know what software the device is really supposed to be = running. Hence, there is a need to consult another party (let=E2=80=99s = call it the verifier). The assumption is that this party knows what the = expected fingerprint is and hence what software is running on the = device.

Which= is why the terms Verifier and Results are used.

 
That=E2=80=99= s all. There is not much more complexity to this topic. =  

I = personally would be happy without the Owners and the Appraisal Policies = in the architecture as they seem obviously implied, but not enough to = ask they be removed. 

 
So, where = do all these terms come from? Appraisal policies, evidence, endorser, = ...
 
I would = delete them and see whether the idea still gets = across.

I = think more clear writing would help.

(We could put text in https://www.scribens.com = and look at the Flesch and Gunning Fog indexes for readability under = statistics)

LL

 
Ciao
Hannes
 
IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank you. = _______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_94B482FA-AA4C-49C8-9A46-17EAF7BDA12B-- From nobody Tue Jun 16 01:51:38 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A5EF3A1147 for ; Tue, 16 Jun 2020 01:51:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=zBP0mTAk; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=zBP0mTAk Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gb8-NpvzbnTe for ; Tue, 16 Jun 2020 01:51:34 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150058.outbound.protection.outlook.com [40.107.15.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF44B3A0C9C for ; Tue, 16 Jun 2020 01:51:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eq86TQLE1JuN/pvnvdenOvc4t19+61F4S2ri61AgtDU=; b=zBP0mTAkykvSOUbQ9a494wo0ZxUGLFU8N8Yy7gPKZq+jp1qkPE0Xcv7bUXeVljanAlzeQGF2UhU6HUL7ezI05QUSO312D0VoLItduXvwM2u4gUX9FwxHsmq+HjHACgmDzkkxQ2Wwgv4UAPuy1qgHBMZrB8Z9LN8+zwjM8eWooic= Received: from AM6PR01CA0041.eurprd01.prod.exchangelabs.com (2603:10a6:20b:e0::18) by DBBPR08MB4281.eurprd08.prod.outlook.com (2603:10a6:10:c4::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18; Tue, 16 Jun 2020 08:51:30 +0000 Received: from VE1EUR03FT038.eop-EUR03.prod.protection.outlook.com (2603:10a6:20b:e0:cafe::45) by AM6PR01CA0041.outlook.office365.com (2603:10a6:20b:e0::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.21 via Frontend Transport; Tue, 16 Jun 2020 08:51:30 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT038.mail.protection.outlook.com (10.152.19.112) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend Transport; Tue, 16 Jun 2020 08:51:30 +0000 Received: ("Tessian outbound 79611f28bf50:v59"); Tue, 16 Jun 2020 08:51:30 +0000 X-CR-MTA-TID: 64aa7808 Received: from 6e3b5026e4b2.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id D12A92FA-C9DC-4875-9895-B0A694C9354C.1; Tue, 16 Jun 2020 08:51:25 +0000 Received: from EUR04-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 6e3b5026e4b2.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 16 Jun 2020 08:51:25 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=V6TUzf4NFgZsfdkBx4Hw4usxkj2C1ItMMUC9QcmuHVytQomqnRFSao7E8Y604Zhrv14bwYA+D1pi/DIJ0+xlpKbzJlOwyByDImA6bSb9W3pqh02QEREpmYwoyaqELRvl41avrgs+sZSoOIvFBzcn3aclrbgquJbO1BuqQZ5lc6rDawD+PVCsyHqLDAJHyp9vAVYXybI6wPN7wS5JtZvjmMX3TLOXHcYG58eNTSlQvbVEJVOUKplgzfep88CZDmHs9BtGs0H0r+iojfa4Mo9qPfUVGznsLUcY9ZlSJWvEyaqoWnRTiN+Z86t7cwwlv9d+IlTR+hHTBALNtO0CUxT0Ew== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eq86TQLE1JuN/pvnvdenOvc4t19+61F4S2ri61AgtDU=; b=Zrd29UJg13c9Ba25pccCjF1ZGdj/+G9y4uTH1UQBs2ENWhShYTfpKJxt1PzPggn7UmrCXhcPseUEgGtp7fKGPUCID8BBCMh4GPr81tV+jwDqHSk6QqpyH2Y5eAMwOf6OuFM1QZ4sZ1s2ITozdTJNTgSdrTwd6foWslMKUpU9KC9H9ofCHIgH7jqPgFCtG5lyeFX/ro9Nf/OIVz08HppNeXJ4CpUgX+sseJfP2As1mxYPKWDAaLg7q59BZkYoLG9O7mNissRIfEyrKfO5azWsHX3P9jVhJg4xcGBBFMKSFZdQwcxJFSIOCbsZo7GRj6396ro1zj8cgczPKV5s7mdOMw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eq86TQLE1JuN/pvnvdenOvc4t19+61F4S2ri61AgtDU=; b=zBP0mTAkykvSOUbQ9a494wo0ZxUGLFU8N8Yy7gPKZq+jp1qkPE0Xcv7bUXeVljanAlzeQGF2UhU6HUL7ezI05QUSO312D0VoLItduXvwM2u4gUX9FwxHsmq+HjHACgmDzkkxQ2Wwgv4UAPuy1qgHBMZrB8Z9LN8+zwjM8eWooic= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB3651.eurprd08.prod.outlook.com (2603:10a6:208:d4::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18; Tue, 16 Jun 2020 08:51:23 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3088.029; Tue, 16 Jun 2020 08:51:23 +0000 From: Hannes Tschofenig To: Laurence Lundblade CC: "rats@ietf.org" Thread-Topic: [Rats] draft-ietf-rats-architecture-04 Thread-Index: AdY+J0/pF7zZ3ON/SC6hTZ7MnKDnLgFV2EuAAA6dVIA= Date: Tue, 16 Jun 2020 08:51:23 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 2f5c10c9-ca43-478c-be0a-70c8f7c9b7bc.1 x-checkrecipientchecked: true Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [156.67.194.193] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 4549c64a-bc52-44ad-b5aa-08d811d2768b x-ms-traffictypediagnostic: AM0PR08MB3651:|DBBPR08MB4281: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:8273;OLM:8273; x-forefront-prvs: 04362AC73B X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: dW2usVe9AFIrki7dJlvwDy8m21+Yv9IK0hfgC/sk1WEoNj2t7SmPsSlVWllX0cWbRLhoaRU3Ka4QR0c8M7p4rBTGlGTFoYHBdRmKntLKepsBVcvY+is8iAkUdiGb+bVXL+22YH9zmbDMm75iMWIpk3c9P1jp0+Dmxogp33X7VZF3QnvURBZwLQTR6uKMDLRz+0iAPjLz2iobtqeVvkc+ubtv2cVAjX9i5Op3tBz3hrADuY19U8HUw8AEtujddHWS6dHYAiqbxb/d47oUYgDYJLw1++JRDPJn9hD+03Lfj8ShCKGMVzIWwPQ6knttKKkOvsgj14IAR07b7As2O0GcqXfukWgGt+rBoS0xxPpJC4v3FJGD6FNQdHiwlIfus9+48O74/0x/CtasOLg89IsLCw== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(346002)(136003)(376002)(39860400002)(366004)(83380400001)(166002)(9686003)(2906002)(26005)(55016002)(71200400001)(33656002)(4326008)(64756008)(9326002)(186003)(53546011)(478600001)(6916009)(966005)(6506007)(66446008)(66556008)(76116006)(52536014)(66476007)(66946007)(7696005)(8936002)(316002)(8676002)(5660300002)(86362001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 1EfLR6ycvn8xEh90VNvhGiMjdxhzf3B5e4Y28K4abiRPbk9a5Nz3DMTOu8VZzqlh62oJv+2YSiJatQaOptFbwFzHelITmm7ngQX1ducdBfjhn+BK4zIVtpe12r/hD3SGkOOov6p9KkrtCtNkkWM52C9nbXI7ZKssyrMmrvJRGlayfkVWtxRM1tzTbmRgzURzMYSF9Z4F7x85eHkaZKZIy8B2VpE36N6w0GiTTLHF0hhO8QVTgehdGOrfEJM9xfB/gb1klsOQeo73yuLW7qyyW9qhQ5GMElKEbZFi1FIjYCKrHN+oDFWOqAeorsP0bdTb5ihLo4J8gpLQKzyYdjEWvloNj7IhV68xkfsZG83aqKa9OQJtu0XlXalRRmgKw1qCLLPCcZMgQkh4kNHDkZ7nK9W0cNeDNhHNrEm1CN3KxyETQg+iZxguFKYXZ5N2UtnVDv9x0ANgMvWYj5TBBNwog8GvyFDVcAWBtiV953f88E1CCPpe98kRKD9cWZoC7R3X x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR08MB3716CE71E3C556DE964C5AE9FA9D0AM0PR08MB3716eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3651 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT038.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(39860400002)(346002)(136003)(376002)(46966005)(82740400003)(478600001)(5660300002)(2906002)(52536014)(82310400002)(336012)(4326008)(81166007)(6862004)(70206006)(70586007)(83380400001)(36906005)(7696005)(33964004)(316002)(47076004)(55016002)(26005)(9326002)(53546011)(8936002)(6506007)(86362001)(9686003)(966005)(166002)(186003)(33656002)(356005)(8676002); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 09d44844-aad3-49e1-06c3-08d811d2728b X-Forefront-PRVS: 04362AC73B X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: thXeO/y02VVFoCIyxUK9d2cnRIJmgToUtztQ5iWNFOnMA8JjVaxLynB3IG8fwlezGccjrwLGte888vtYHwUSHHKbGoL31uimdrYE4nv7VyDYF7aNDvMSn0fp0qntAU3zaNa5bXlU0GQ3Iw/jzFZXioEajuN7t4HQMU5Xu6aEI5XeuAbXfgofMu9pviB7MnC9sH3ybJpaIDxQJfawadb+p/W1ak/KSNbBluRe2YDQ+pPzOyhnPgO3Uj6h2zxmZ30pafGIlYMsiNLV54Ie23PNWm4PyzF9gaEB/v1zGq5F1M0PvpyuBRFliRQZF2ulih6cwRsOeZI0nuU0a++5JQ57O2WyA0TQUYzxtB3XsdTdiiOTXrI5HKYCfO1kp0h719he6PX/TZbv0XUsfqVhZI//ZEAUW53SHxv3dlERDRmikUpQGClfm4PAcO0sONB5bUZjncmg9C6zXjV5qDqf+9FEuSEFg4g46aPIZIjqH7YQM+Q= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jun 2020 08:51:30.1097 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 4549c64a-bc52-44ad-b5aa-08d811d2768b X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR08MB4281 Archived-At: Subject: Re: [Rats] draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 08:51:37 -0000 --_000_AM0PR08MB3716CE71E3C556DE964C5AE9FA9D0AM0PR08MB3716eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGF1cmVuY2UsDQoNCmFzIHlvdSBleHBsYWluIGJlbG93IGl0IG1pZ2h0IGhlbHAgdG8gcmVw bGFjZSBzb21lIG9mIHRoZSB0ZXJtcyB3aXRoIG90aGVycy4gSSB0aGluayB0aGUgZGVzY3JpcHRp b24gZG9lcyBub3QgbWFrZSBpdCBlYXN5IHRvIGV4cGxhaW4gdGhlIGNvbmNlcHRzIHRvIHRob3Nl IHdobyBzaG91bGQgYWN0dWFsbHkgYmUgdXNpbmcgdGhlbS4gSSBkaWQgdGhlIHJldmlldyBiZWNh dXNlIEkgdHJpZWQgdG8gZXhwbGFpbiB0aGUgY29uY2VwdCBpbiBhIGxlY3R1cmUgdG8gc3R1ZGVu dHMuDQoNCg0KDQpGb3IgZXhhbXBsZSwgdGhlIHRlcm0g4oCcaW5mb3JtYXRpb27igJ0gKG9yIGNs YWltcykgc291bmRzIGEgbG90IHNpbXBsZXIgdG8gdW5kZXJzdGFuZCBsZXNzIHNvcGhpc3RpY2F0 ZWQgdGhhbiDigJxldmlkZW5jZeKAnS4gUGFydGljdWxhcmx5LCB3aGVuIHRoZSB0ZXJtIOKAnGV2 aWRlbmNl4oCdIGlzIHRoZW4gZGVzY3JpYmVkIGFzIOKAnEEgc2V0IG9mIGluZm9ybWF0aW9uIGFi b3V0IGFuIEF0dGVzdGVyIHRoYXQgaXMgdG8gYmUgYXBwcmFpc2VkIGJ5IGEgVmVyaWZpZXLigJ0u IChUaGUgZGVmaW5pdGlvbiBsYXRlciBwcm92aWRlZCBpbiB0aGUgdGV4dCBpcyBhY3R1YWxseSBi ZXR0ZXIgYnV0IGRvZXMgbm90IG1hdGNoIHRoZSBkZWZpbml0aW9uIGVhcmxpZXIgaW4gdGhlIGRv Y3VtZW50LiBJbmNvbnNpc3RlbmN5IGxpa2VseSBjYXVzZWQgYnkgZHVwbGljYXRpbmcgdGV4dCB0 aHJvdWdob3V0IHRoZSBkb2N1bWVudC4pIEkgZWFybGllciBkZXNjcmlwdGlvbiBpcyBJTUhPIGFj dHVhbGx5IHdyb25nLiBGb3IgZXhhbXBsZSwgd2h5IGRvZXMgdGhlIHZlcmlmaWVyIG5lZWRzIHRv IGJlIHByZXNlbnQgaW4gYWxsIHNjZW5hcmlvcz8gSW4gZmFjdCB0aGUgbW9kZWxzIGluIFNlY3Rp b24gNSBzdWdnZXN0IG90aGVyd2lzZS4gV2h5IGNhbm5vdCBhIGRldmljZSBzZW5kIHRoZSBjbGFp bXMgdG8gYSByZWx5aW5nIHBhcnR5PyBUaGUgY2FzZSB3aGVyZSB5b3UgbmVlZCBhIHZlcmlmaWVy IHRvIGludGVycHJldCB0aGUgY2xhaW1zIG1heSBiZSBhIGNvcm5lciBjYXNlIGluIHNvbWUgZW52 aXJvbm1lbnRzLiBXaHkgaXMgdGhlIGluZm9ybWF0aW9uIGFib3V0IGFuIGF0dGVzdGVyPyBJdCBi ZXR0ZXIgZGVzY3JpYmUgdGhlIGNoYXJhY3RlcmlzdGljcyBvZiB0aGUgZGV2aWNlLCBhcyBpdCBp cyBzYWlkIGluIFNlY3Rpb24gOC4xLg0KDQpJZiB5b3UgbG9vayBhdCB0aGUgd2hvbGUgZXhlcmNp c2UgZnJvbSBhIDEwLDAwMCBmb290IHZpZXcgdGhlbiB3ZSBhcmUgZXNzZW50aWFsbHkgdXNpbmcg ZGVzaWduIHBhdHRlcm5zIGZyb20gdGhlIGlkZW50aXR5IG1hbmFnZW1lbnQgc3BhY2UgYW5kIGFw cGx5IGl0IGhlcmUgd2l0aCBzbGlnaHRseSBkaWZmZXJlbnQgaW5mb3JtYXRpb24uIFRoYXTigJlz IGluIGEgbnV0c2hlbGwgd2hlcmUgdGhlIG1vZGVscyBpbiBTZWN0aW9uIDUgY2FtZSBmcm9tLg0K DQpDaWFvDQpIYW5uZXMNCg0KRnJvbTogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJl c29ydC5jb20+DQpTZW50OiBUdWVzZGF5LCBKdW5lIDE2LCAyMDIwIDM6MzcgQU0NClRvOiBIYW5u ZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4NCkNjOiByYXRzQGlldGYu b3JnDQpTdWJqZWN0OiBSZTogW1JhdHNdIGRyYWZ0LWlldGYtcmF0cy1hcmNoaXRlY3R1cmUtMDQN Cg0KSGkgSGFubmVzLA0KDQpJIHRoaW5rIHJlYWRhYmlsaXR5IG9mIHRoZSBkb2N1bWVudCBjb3Vs ZCBiZSBpbXByb3ZlZCBhbmQgbWF5YmUgc29tZSBzaW1wbGlmaWNhdGlvbiB3b3VsZCBiZSBPSywg YnV0IEkgZ2VuZXJhbGx5IHRoaW5rIG1vc3Qgb2YgdGhlIGNvcmUgZW50aXRpZXMgYW5kIG1lc3Nh Z2VzIG1ha2Ugc2Vuc2UuDQoNCg0KDQpPbiBKdW4gOSwgMjAyMCwgYXQgMTI6MTMgQU0sIEhhbm5l cyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPG1haWx0bzpIYW5uZXMuVHNj aG9mZW5pZ0Bhcm0uY29tPj4gd3JvdGU6DQoNCkhpIGFsbA0KDQpJIGhhdmUgcmUtcmVhZCB0aGUg YXJjaGl0ZWN0dXJlIGRvY3VtZW50IGFuZCBJTUhPIGl0IGlzIHN0aWxsIGZhciB0b28gY29tcGxl eC4gSXQgbWFrZXMgdGhlIHJlYWRlciBiZWxpZXZlIHRoYXQgYXR0ZXN0YXRpb24gaXMgc29tZSBy b2NrZXQtc2NpZW5jZSBjb25jZXB0LCB3aGljaCBpdCBqdXN0IGlzbuKAmXQuIEFmdGVyIHN1Y2gg YSBsb25nIHRpbWUgdGhlIGRvY3VtZW50IGlzIHVubmVjZXNzYXJpbHkgaGFyZCB0byByZWFkIGFu ZCB1bmRlcnN0YW5kLg0KDQpIZXJlIGlzIHRoZSBzdG9yeSBhcyBJIHNlZSBpdC4NCg0KSW4gdGhl IGJhc2ljIGZvcm0gYSBkZXZpY2UgcHV0cyBhIGJ1bmNoIG9mIGNsYWltcyB0b2dldGhlciBhbmQg dGhlbiBzaWducyB0aGVtLiBUaGUgZGV2aWNlIGlzIHRoZSBhdHRlc3Rlci4NClRoZW4sIHRoaXMg aW5mb3JtYXRpb24gaXMgc2VudCB0byBhbm90aGVyIHBhcnR5LCB0aGUgcmVseWluZyBwYXJ0eSwg d2hpY2ggdXNlcyB0aGlzIGluZm9ybWF0aW9uIGZvciBzb21lIGtpbmQgb2YgZGVjaXNpb24gbWFr aW5nLg0KDQpFdmlkZW5jZSBpcyBqdXN0IHRoZSBuYW1lIGZvciDigJx0aGlzIGluZm9ybWF0aW9u 4oCdLg0KDQoNCg0KT2YgY291cnNlLCB0aGVyZSBpcyBzb21lIHByaW9yIHNldHVwIHRoYXQgaGFz IHRvIGhhcHBlbiAocHJvdmlzaW9uaW5nIG9mIGtleXMgZHVyaW5nIG1hbnVmYWN0dXJpbmcpIGFu ZCBzb21lIGFzc3VtcHRpb25zIGhhdmUgdG8gYmUgbWFkZSBhcyB3ZWxsIChhdHRlc3RhdGlvbiBj b2RlIG9uIHRoZSBkZXZpY2UgaGFzIHRvIGJlIHdlbGwgcHJvdGVjdGVkLCBjb2RlIGlzb2xhdGlv biBiZWluZyB1c2VkLCBldGMuKS4NCg0KRW5kb3JzZW1lbnRzIGFyZSB0aGUgbWVjaGFuaXNtIGJ5 IHdoaWNoIHRoaXMgaGFwcGVucy4NCg0KDQoNClRoZW4sIHRoZXJlIGlzIHRoZSBhIGNvbXBsZXgg Y2FzZSB3aGVyZSB0aGUgcmVseWluZyBwYXJ0eSBjYW5ub3QgdXNlIHRoZSByZWNlaXZlZCBpbmZv cm1hdGlvbiBkaXJlY3RseS4gVGhpcyBpcyBtb3N0IGxpa2VseSByZWxhdGVkIHRvIGFueSBmb3Jt IG9mIHNvZnR3YXJlIG1lYXN1cmVtZW50cy4gSWYgeW91IHNlbmQgYSBoYXNoIG9mIGEgYm9vdGxv YWRlciB0byBzb21lIHJlbHlpbmcgcGFydHkgeW91IGNhbm5vdCByZWFsbHkgZXhwZWN0IGl0IHRv IGJlIHVzZWQgZm9yIGFueXRoaW5nLiBUaGUgcmVhc29uIHRoZSByZWx5aW5nIHBhcnR5IGNhbm5v dCB1c2UgdGhhdCBpbmZvcm1hdGlvbiBkaXJlY3RseSBpcyBiZWNhdXNlIGl0IGRvZXMgbm90IGtu b3cgd2hhdCBzb2Z0d2FyZSB0aGUgZGV2aWNlIGlzIHJlYWxseSBzdXBwb3NlZCB0byBiZSBydW5u aW5nLiBIZW5jZSwgdGhlcmUgaXMgYSBuZWVkIHRvIGNvbnN1bHQgYW5vdGhlciBwYXJ0eSAobGV0 4oCZcyBjYWxsIGl0IHRoZSB2ZXJpZmllcikuIFRoZSBhc3N1bXB0aW9uIGlzIHRoYXQgdGhpcyBw YXJ0eSBrbm93cyB3aGF0IHRoZSBleHBlY3RlZCBmaW5nZXJwcmludCBpcyBhbmQgaGVuY2Ugd2hh dCBzb2Z0d2FyZSBpcyBydW5uaW5nIG9uIHRoZSBkZXZpY2UuDQoNCldoaWNoIGlzIHdoeSB0aGUg dGVybXMgVmVyaWZpZXIgYW5kIFJlc3VsdHMgYXJlIHVzZWQuDQoNCg0KVGhhdOKAmXMgYWxsLiBU aGVyZSBpcyBub3QgbXVjaCBtb3JlIGNvbXBsZXhpdHkgdG8gdGhpcyB0b3BpYy4NCg0KSSBwZXJz b25hbGx5IHdvdWxkIGJlIGhhcHB5IHdpdGhvdXQgdGhlIE93bmVycyBhbmQgdGhlIEFwcHJhaXNh bCBQb2xpY2llcyBpbiB0aGUgYXJjaGl0ZWN0dXJlIGFzIHRoZXkgc2VlbSBvYnZpb3VzbHkgaW1w bGllZCwgYnV0IG5vdCBlbm91Z2ggdG8gYXNrIHRoZXkgYmUgcmVtb3ZlZC4NCg0KDQpTbywgd2hl cmUgZG8gYWxsIHRoZXNlIHRlcm1zIGNvbWUgZnJvbT8gQXBwcmFpc2FsIHBvbGljaWVzLCBldmlk ZW5jZSwgZW5kb3JzZXIsIC4uLg0KDQpJIHdvdWxkIGRlbGV0ZSB0aGVtIGFuZCBzZWUgd2hldGhl ciB0aGUgaWRlYSBzdGlsbCBnZXRzIGFjcm9zcy4NCg0KSSB0aGluayBtb3JlIGNsZWFyIHdyaXRp bmcgd291bGQgaGVscC4NCg0KKFdlIGNvdWxkIHB1dCB0ZXh0IGluIGh0dHBzOi8vd3d3LnNjcmli ZW5zLmNvbSBhbmQgbG9vayBhdCB0aGUgRmxlc2NoIGFuZCBHdW5uaW5nIEZvZyBpbmRleGVzIGZv ciByZWFkYWJpbGl0eSB1bmRlciBzdGF0aXN0aWNzKQ0KDQpMTA0KDQoNCg0KQ2lhbw0KSGFubmVz DQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkg YXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4g SWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUg c2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFu eSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkg dGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4gX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRT QGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9yYXRzDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0 aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFs c28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwg cGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2Ug dGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2Us IG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlv dS4NCg== --_000_AM0PR08MB3716CE71E3C556DE964C5AE9FA9D0AM0PR08MB3716eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFuOw0KCXBhbm9zZS0xOjIg MSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0K CXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1p bHk6IlxARGVuZ1hpYW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsN Cgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWls eToiQ291cmllciBOZXciO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHls ZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFy DQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250 LWZhbWlseToiQ291cmllciBOZXciO30NCnNwYW4uRW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10 eXBlOnBlcnNvbmFsLWNvbXBvc2U7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpl eHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtz aXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2 LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYg Z3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0i MTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEi IC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgTGF1cmVuY2UsIDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5hcyB5b3UgZXhwbGFpbiBiZWxvdyBpdCBtaWdodCBoZWxwIHRvIHJlcGxh Y2Ugc29tZSBvZiB0aGUgdGVybXMgd2l0aCBvdGhlcnMuIEkgdGhpbmsgdGhlIGRlc2NyaXB0aW9u IGRvZXMgbm90IG1ha2UgaXQgZWFzeSB0byBleHBsYWluIHRoZSBjb25jZXB0cyB0byB0aG9zZSB3 aG8gc2hvdWxkIGFjdHVhbGx5IGJlIHVzaW5nIHRoZW0uIEkgZGlkIHRoZSByZXZpZXcgYmVjYXVz ZSBJIHRyaWVkIHRvIGV4cGxhaW4gdGhlDQogY29uY2VwdCBpbiBhIGxlY3R1cmUgdG8gc3R1ZGVu dHMuIDxvOnA+PC9vOnA+PC9wPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZvciBleGFtcGxlLCB0aGUg dGVybSDigJxpbmZvcm1hdGlvbuKAnSAob3IgY2xhaW1zKSBzb3VuZHMgYSBsb3Qgc2ltcGxlciB0 byB1bmRlcnN0YW5kIGxlc3Mgc29waGlzdGljYXRlZCB0aGFuIOKAnGV2aWRlbmNl4oCdLiBQYXJ0 aWN1bGFybHksIHdoZW4gdGhlIHRlcm0g4oCcZXZpZGVuY2XigJ0gaXMgdGhlbiBkZXNjcmliZWQg YXMg4oCcQSBzZXQgb2YgaW5mb3JtYXRpb24gYWJvdXQgYW4gQXR0ZXN0ZXIgdGhhdCBpcyB0byBi ZSBhcHByYWlzZWQgYnkgYSBWZXJpZmllcuKAnS4gKFRoZSBkZWZpbml0aW9uIGxhdGVyIHByb3Zp ZGVkIGluIHRoZSB0ZXh0IGlzIGFjdHVhbGx5IGJldHRlciBidXQgZG9lcyBub3QgbWF0Y2ggdGhl IGRlZmluaXRpb24gZWFybGllciBpbiB0aGUgZG9jdW1lbnQuIEluY29uc2lzdGVuY3kgbGlrZWx5 IGNhdXNlZCBieSBkdXBsaWNhdGluZyB0ZXh0IHRocm91Z2hvdXQgdGhlIGRvY3VtZW50LikgSSBl YXJsaWVyIGRlc2NyaXB0aW9uIGlzIElNSE8gYWN0dWFsbHkgd3JvbmcuIEZvciBleGFtcGxlLCB3 aHkgZG9lcyB0aGUgdmVyaWZpZXIgbmVlZHMgdG8gYmUgcHJlc2VudCBpbiBhbGwgc2NlbmFyaW9z PyBJbiBmYWN0IHRoZSBtb2RlbHMgaW4gU2VjdGlvbiA1IHN1Z2dlc3Qgb3RoZXJ3aXNlLiBXaHkg Y2Fubm90IGEgZGV2aWNlIHNlbmQgdGhlIGNsYWltcyB0byBhIHJlbHlpbmcgcGFydHk/IFRoZSBj YXNlIHdoZXJlIHlvdSBuZWVkIGEgdmVyaWZpZXIgdG8gaW50ZXJwcmV0IHRoZSBjbGFpbXMgbWF5 IGJlIGEgY29ybmVyIGNhc2UgaW4gc29tZSBlbnZpcm9ubWVudHMuIFdoeSBpcyB0aGUgaW5mb3Jt YXRpb24gYWJvdXQgYW4gYXR0ZXN0ZXI/IEl0IGJldHRlciBkZXNjcmliZSB0aGUgY2hhcmFjdGVy aXN0aWNzIG9mIHRoZSBkZXZpY2UsIGFzIGl0IGlzIHNhaWQgaW4gU2VjdGlvbiA4LjEuPG86cD48 L286cD48L3NwYW4+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklmIHlvdSBsb29rIGF0IHRoZSB3aG9sZSBleGVy Y2lzZSBmcm9tIGEgMTAsMDAwIGZvb3QgdmlldyZuYnNwO3RoZW4gd2UgYXJlIGVzc2VudGlhbGx5 IHVzaW5nIGRlc2lnbiBwYXR0ZXJucyBmcm9tIHRoZSBpZGVudGl0eSBtYW5hZ2VtZW50IHNwYWNl IGFuZCBhcHBseSBpdCBoZXJlIHdpdGggc2xpZ2h0bHkgZGlmZmVyZW50IGluZm9ybWF0aW9uLiBU aGF04oCZcyBpbiBhIG51dHNoZWxsIHdoZXJlIHRoZSBtb2RlbHMgaW4gU2VjdGlvbg0KIDUgY2Ft ZSBmcm9tLiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Q2lhbzxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SGFubmVzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gTGF1cmVuY2UgTHVuZGJsYWRl ICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7IDxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5 LCBKdW5lIDE2LCAyMDIwIDM6MzcgQU08YnI+DQo8Yj5Ubzo8L2I+IEhhbm5lcyBUc2Nob2Zlbmln ICZsdDtIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gcmF0c0Bp ZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW1JhdHNdIGRyYWZ0LWlldGYtcmF0cy1h cmNoaXRlY3R1cmUtMDQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhp IEhhbm5lcyw8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkg dGhpbmsgcmVhZGFiaWxpdHkgb2YgdGhlIGRvY3VtZW50IGNvdWxkIGJlIGltcHJvdmVkIGFuZCBt YXliZSBzb21lIHNpbXBsaWZpY2F0aW9uIHdvdWxkIGJlIE9LLCBidXQgSSBnZW5lcmFsbHkgdGhp bmsgbW9zdCBvZiB0aGUgY29yZSBlbnRpdGllcyBhbmQgbWVzc2FnZXMgbWFrZSBzZW5zZS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10 b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+T24gSnVuIDksIDIwMjAsIGF0IDEyOjEzIEFNLCBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEg aHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iPkhhbm5lcy5Uc2Nob2Zlbmln QGFybS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkhpIGFsbDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5JIGhhdmUgcmUtcmVhZCB0aGUgYXJjaGl0ZWN0dXJlIGRvY3VtZW50 IGFuZCBJTUhPIGl0IGlzIHN0aWxsIGZhciB0b28gY29tcGxleC4gSXQgbWFrZXMgdGhlIHJlYWRl ciBiZWxpZXZlIHRoYXQgYXR0ZXN0YXRpb24gaXMgc29tZSByb2NrZXQtc2NpZW5jZSBjb25jZXB0 LCB3aGljaCBpdCBqdXN0IGlzbuKAmXQuIEFmdGVyIHN1Y2ggYSBsb25nIHRpbWUgdGhlIGRvY3Vt ZW50IGlzIHVubmVjZXNzYXJpbHkgaGFyZCB0bw0KIHJlYWQgYW5kIHVuZGVyc3RhbmQuPHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IZXJlIGlzIHRoZSBzdG9y eSBhcyBJIHNlZSBpdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+SW4gdGhlIGJhc2ljIGZvcm0gYSBkZXZpY2UgcHV0cyBhIGJ1bmNoIG9mIGNs YWltcyB0b2dldGhlciBhbmQgdGhlbiBzaWducyB0aGVtLiBUaGUgZGV2aWNlIGlzIHRoZSBhdHRl c3Rlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PlRoZW4sIHRoaXMgaW5mb3JtYXRpb24gaXMgc2VudCB0byBhbm90aGVyIHBhcnR5LCB0aGUgcmVs eWluZyBwYXJ0eSwgd2hpY2ggdXNlcyB0aGlzIGluZm9ybWF0aW9uIGZvciBzb21lIGtpbmQgb2Yg ZGVjaXNpb24gbWFraW5nLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkV2aWRlbmNlIGlzIGp1c3QgdGhl IG5hbWUgZm9yIOKAnHRoaXMgaW5mb3JtYXRpb27igJ0uPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T2YgY291cnNlLCB0aGVyZSBpcyBzb21l IHByaW9yIHNldHVwIHRoYXQgaGFzIHRvIGhhcHBlbiAocHJvdmlzaW9uaW5nIG9mIGtleXMgZHVy aW5nIG1hbnVmYWN0dXJpbmcpIGFuZCBzb21lIGFzc3VtcHRpb25zIGhhdmUgdG8gYmUgbWFkZSBh cyB3ZWxsIChhdHRlc3RhdGlvbiBjb2RlIG9uIHRoZSBkZXZpY2UgaGFzIHRvIGJlIHdlbGwgcHJv dGVjdGVkLCBjb2RlIGlzb2xhdGlvbiBiZWluZyB1c2VkLCBldGMuKS48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkVu ZG9yc2VtZW50cyBhcmUgdGhlIG1lY2hhbmlzbSBieSB3aGljaCB0aGlzIGhhcHBlbnMuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+ DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21h cmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PlRoZW4sIHRoZXJlIGlzIHRoZSBhIGNvbXBsZXggY2FzZSB3aGVyZSB0aGUgcmVseWluZyBwYXJ0 eSBjYW5ub3QgdXNlIHRoZSByZWNlaXZlZCBpbmZvcm1hdGlvbiBkaXJlY3RseS4gVGhpcyBpcyBt b3N0IGxpa2VseSByZWxhdGVkIHRvIGFueSBmb3JtIG9mIHNvZnR3YXJlIG1lYXN1cmVtZW50cy4g SWYgeW91IHNlbmQgYSBoYXNoIG9mIGEgYm9vdGxvYWRlciB0byBzb21lIHJlbHlpbmcgcGFydHkg eW91IGNhbm5vdA0KIHJlYWxseSBleHBlY3QgaXQgdG8gYmUgdXNlZCBmb3IgYW55dGhpbmcuIFRo ZSByZWFzb24gdGhlIHJlbHlpbmcgcGFydHkgY2Fubm90IHVzZSB0aGF0IGluZm9ybWF0aW9uIGRp cmVjdGx5IGlzIGJlY2F1c2UgaXQgZG9lcyBub3Qga25vdyB3aGF0IHNvZnR3YXJlIHRoZSBkZXZp Y2UgaXMgcmVhbGx5IHN1cHBvc2VkIHRvIGJlIHJ1bm5pbmcuIEhlbmNlLCB0aGVyZSBpcyBhIG5l ZWQgdG8gY29uc3VsdCBhbm90aGVyIHBhcnR5IChsZXTigJlzIGNhbGwgaXQNCiB0aGUgdmVyaWZp ZXIpLiBUaGUgYXNzdW1wdGlvbiBpcyB0aGF0IHRoaXMgcGFydHkga25vd3Mgd2hhdCB0aGUgZXhw ZWN0ZWQgZmluZ2VycHJpbnQgaXMgYW5kIGhlbmNlIHdoYXQgc29mdHdhcmUgaXMgcnVubmluZyBv biB0aGUgZGV2aWNlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldoaWNoIGlzIHdoeSB0aGUgdGVybXMg VmVyaWZpZXIgYW5kIFJlc3VsdHMgYXJlIHVzZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhdOKAmXMgYWxsLiBUaGVy ZSBpcyBub3QgbXVjaCBtb3JlIGNvbXBsZXhpdHkgdG8gdGhpcyB0b3BpYy4gJm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+SSBwZXJzb25hbGx5IHdvdWxkIGJlIGhhcHB5IHdpdGhvdXQgdGhlIE93 bmVycyBhbmQgdGhlIEFwcHJhaXNhbCBQb2xpY2llcyBpbiB0aGUgYXJjaGl0ZWN0dXJlIGFzIHRo ZXkgc2VlbSBvYnZpb3VzbHkgaW1wbGllZCwgYnV0IG5vdCBlbm91Z2ggdG8gYXNrIHRoZXkgYmUg cmVtb3ZlZC4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHls ZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Tbywgd2hlcmUgZG8gYWxsIHRoZXNlIHRlcm1zIGNvbWUg ZnJvbT8gQXBwcmFpc2FsIHBvbGljaWVzLCBldmlkZW5jZSwgZW5kb3JzZXIsIC4uLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHdvdWxkIGRl bGV0ZSB0aGVtIGFuZCBzZWUgd2hldGhlciB0aGUgaWRlYSBzdGlsbCBnZXRzIGFjcm9zcy48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5JIHRoaW5rIG1vcmUgY2xlYXIgd3JpdGluZyB3b3VsZCBoZWxwLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4oV2Ug Y291bGQgcHV0IHRleHQgaW4gPGEgaHJlZj0iaHR0cHM6Ly93d3cuc2NyaWJlbnMuY29tIj5odHRw czovL3d3dy5zY3JpYmVucy5jb208L2E+IGFuZCBsb29rIGF0IHRoZSBGbGVzY2ggYW5kIEd1bm5p bmcgRm9nIGluZGV4ZXMgZm9yIHJlYWRhYmlsaXR5IHVuZGVyIHN0YXRpc3RpY3MpPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkxMPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9v OnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Q2lhbzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGFubmVzPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFu eSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2Vk LiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRo ZSBzZW5kZXINCiBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0 byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBj b3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuIF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KUkFUUyBtYWlsaW5nIGxp c3Q8YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOlJBVFNAaWV0Zi5vcmciPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPlJBVFNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCjwv c3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v cmF0czwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5k IGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxl Z2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5 IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMg dG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBv ciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8L2JvZHk+ DQo8L2h0bWw+DQo= --_000_AM0PR08MB3716CE71E3C556DE964C5AE9FA9D0AM0PR08MB3716eurp_-- From nobody Tue Jun 16 02:14:16 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA97F3A1170 for ; Tue, 16 Jun 2020 02:14:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vI7eQtwPAlBQ for ; Tue, 16 Jun 2020 02:14:11 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 439D63A116D for ; Tue, 16 Jun 2020 02:14:09 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FDBAD1jOhe/xoBYJldCRwBAQEBAQE?= =?us-ascii?q?HAQESAQEEBAEBQIFKAoF5gR6BMwqEGpEHmhSBXwkLAQEBAQEBAQEBBgEBGAs?= =?us-ascii?q?KAgQBAQKBToJ0AoIVASQ4EwIQAQEGAQEBAQEGBAIChkQMQgEMAYMFfgEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAQEBAQEWAkNRBDEBAQEBAwEBIQ8BBTYCCRAJAhEBAwEBAQI?= =?us-ascii?q?CIwMCAicfAQIGCAYBDAEFAgEBgyIBgnsFC5l3mwR2gTKFUYNegToGgQ4qAYw?= =?us-ascii?q?6Dw+BTD+BEScPgiowPoJcAQGBKgEICgEHRoJogmAEjnWDLIZdmkJaKAeBWIE?= =?us-ascii?q?FgQYEC5I7hUAFCh2CcDWIZYRtBieNRJEbnjECBAIJAhWBaoEJcE0kT4JpUBc?= =?us-ascii?q?CDY4pAReBAgECgkmFFIVEcjcCBgEHAQEDCXyIMIRxB4EuAYEQAQE?= X-IPAS-Result: =?us-ascii?q?A2FDBAD1jOhe/xoBYJldCRwBAQEBAQEHAQESAQEEBAEBQ?= =?us-ascii?q?IFKAoF5gR6BMwqEGpEHmhSBXwkLAQEBAQEBAQEBBgEBGAsKAgQBAQKBToJ0A?= =?us-ascii?q?oIVASQ4EwIQAQEGAQEBAQEGBAIChkQMQgEMAYMFfgEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEWAkNRBDEBAQEBAwEBIQ8BBTYCCRAJAhEBAwEBAQICIwMCAicfAQIGC?= =?us-ascii?q?AYBDAEFAgEBgyIBgnsFC5l3mwR2gTKFUYNegToGgQ4qAYw6Dw+BTD+BEScPg?= =?us-ascii?q?iowPoJcAQGBKgEICgEHRoJogmAEjnWDLIZdmkJaKAeBWIEFgQYEC5I7hUAFC?= =?us-ascii?q?h2CcDWIZYRtBieNRJEbnjECBAIJAhWBaoEJcE0kT4JpUBcCDY4pAReBAgECg?= =?us-ascii?q?kmFFIVEcjcCBgEHAQEDCXyIMIRxB4EuAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.73,518,1583190000"; d="scan'208";a="18440414" Received: from mail-mtaka26.fraunhofer.de ([153.96.1.26]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Jun 2020 11:14:06 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C3AQAqjehe/1lIDI1dCRsBAQEBAQE?= =?us-ascii?q?BAQUBAQESAQEBAwMBAQFAgUoCgXkvbwNUMCwKhBqRB5oUgWgLAQMBAQEBAQY?= =?us-ascii?q?BARgLCgIEAQGBUIJ0AoITAiQ4EwIQAQEFAQEBAgEGBG2FWwxCAQwBhSIBAQE?= =?us-ascii?q?BAwEBIQ8BBTYCCRAJAhEBAwEBAQICIwMCAicfAQIGCAYBDAEFAgEBgyIBgwA?= =?us-ascii?q?LmXKbBHaBMoVRg16BOgaBDioBjDoPD4FMP4ERJw+CKjA+glwBAYEqAQgKAQd?= =?us-ascii?q?GgmiCYASOdYMshl2aQlooB4FYgQWBBgQLkjuFQAUKHYJwNYhlhG0GJ41EkRu?= =?us-ascii?q?eMQIEAgkCFYFqImZwTSRPgmlQFwINjikBF4ECAQKCSYUUhURBMTcCBgEHAQE?= =?us-ascii?q?DCXyIMIRxB4EuAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.73,518,1583190000"; d="scan'208";a="84278749" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA26.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Jun 2020 11:14:04 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 05G9E4am008179 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 16 Jun 2020 11:14:04 +0200 Received: from [192.168.16.50] (79.234.115.101) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Tue, 16 Jun 2020 11:13:58 +0200 To: Hannes Tschofenig , Laurence Lundblade CC: "rats@ietf.org" References: From: Henk Birkholz Message-ID: Date: Tue, 16 Jun 2020 11:13:56 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.115.101] Archived-At: Subject: Re: [Rats] draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 09:14:15 -0000 Hi Hannes, hi Laurence, I think "evidence" vs. "information" is a very good example that shows why the text stabilized in the shape it is in now. I am pretty sure that - and please speak up, if I am missing some vital point here - evidence is not simply information. At the very least there has to be a method to prevent (e.g. secure channel) or even detect (e.g. a signature) tampering with evidence. It also must originate from an attester, etc. So there are a lot of characteristics that are tied to evidence that make it at least a subclass of information. This is only a small arbitrary example to illustrate how that minimal set of definitions came to be. I totally agree that the definition of Evidence early on is not in alignment with the text (which I also think is better) anymore, but an issue about Evidence text is already in the tracker thanks to Kathleen and we will work on a more crisp description after the current open PR are settled. Viele Grüße, Henk On 16.06.20 10:51, Hannes Tschofenig wrote: > Hi Laurence, > > as you explain below it might help to replace some of the terms with > others. I think the description does not make it easy to explain the > concepts to those who should actually be using them. I did the review > because I tried to explain the concept in a lecture to students. > > For example, the term “information†(or claims) sounds a lot simpler to > understand less sophisticated than “evidenceâ€. Particularly, when the > term “evidence†is then described as “A set of information about an > Attester that is to be appraised by a Verifierâ€. (The definition later > provided in the text is actually better but does not match the > definition earlier in the document. Inconsistency likely caused by > duplicating text throughout the document.) I earlier description is IMHO > actually wrong. For example, why does the verifier needs to be present > in all scenarios? In fact the models in Section 5 suggest otherwise. Why > cannot a device send the claims to a relying party? The case where you > need a verifier to interpret the claims may be a corner case in some > environments. Why is the information about an attester? It better > describe the characteristics of the device, as it is said in Section 8.1. > > If you look at the whole exercise from a 10,000 foot view then we are > essentially using design patterns from the identity management space and > apply it here with slightly different information. That’s in a nutshell > where the models in Section 5 came from. > > Ciao > > Hannes > > *From:* Laurence Lundblade > *Sent:* Tuesday, June 16, 2020 3:37 AM > *To:* Hannes Tschofenig > *Cc:* rats@ietf.org > *Subject:* Re: [Rats] draft-ietf-rats-architecture-04 > > Hi Hannes, > > I think readability of the document could be improved and maybe some > simplification would be OK, but I generally think most of the core > entities and messages make sense. > > > > On Jun 9, 2020, at 12:13 AM, Hannes Tschofenig > > wrote: > > Hi all > > I have re-read the architecture document and IMHO it is still far > too complex. It makes the reader believe that attestation is some > rocket-science concept, which it just isn’t. After such a long time > the document is unnecessarily hard to read and understand. > > Here is the story as I see it. > > In the basic form a device puts a bunch of claims together and then > signs them. The device is the attester. > > Then, this information is sent to another party, the relying party, > which uses this information for some kind of decision making. > > Evidence is just the name for “this informationâ€. > > > > Of course, there is some prior setup that has to happen > (provisioning of keys during manufacturing) and some assumptions > have to be made as well (attestation code on the device has to be > well protected, code isolation being used, etc.). > > Endorsements are the mechanism by which this happens. > > > > Then, there is the a complex case where the relying party cannot use > the received information directly. This is most likely related to > any form of software measurements. If you send a hash of a > bootloader to some relying party you cannot really expect it to be > used for anything. The reason the relying party cannot use that > information directly is because it does not know what software the > device is really supposed to be running. Hence, there is a need to > consult another party (let’s call it the verifier). The assumption > is that this party knows what the expected fingerprint is and hence > what software is running on the device. > > Which is why the terms Verifier and Results are used. > > That’s all. There is not much more complexity to this topic. > > I personally would be happy without the Owners and the Appraisal > Policies in the architecture as they seem obviously implied, but not > enough to ask they be removed. > > So, where do all these terms come from? Appraisal policies, > evidence, endorser, ... > > I would delete them and see whether the idea still gets across. > > I think more clear writing would help. > > (We could put text in https://www.scribens.com and look at the Flesch > and Gunning Fog indexes for readability under statistics) > > LL > > > > Ciao > > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose > the contents to any other person, use it for any purpose, or store > or copy the information in any medium. Thank you. > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy > the information in any medium. Thank you. > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Tue Jun 16 03:23:25 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E30B53A14D4 for ; Tue, 16 Jun 2020 03:23:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=zYSaRzoS; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=zYSaRzoS Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ejBsJSO3vtui for ; Tue, 16 Jun 2020 03:23:21 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2077.outbound.protection.outlook.com [40.107.22.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E89003A14D3 for ; Tue, 16 Jun 2020 03:23:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dqdNisW/o5Lf+MuvEYFbIfQPSPstfxxkPQzXXAJfOeI=; b=zYSaRzoSvVt7936tyU5Y4rQDQPrm5HPXylaqT4qp8x0IOtutGNWmDTaer2Sc7EdnWyOKOtiGlGTp/JMHf8/mucw+DKYuo3XbWrCSN4RSZIWPgVVXa6eTTJhlSI+aXNN36zJmC7qwo7JwHw2Bs9HiMCNI7071AxmzSTBDS10Xbgg= Received: from AM5PR0601CA0040.eurprd06.prod.outlook.com (2603:10a6:203:68::26) by AM0PR08MB3844.eurprd08.prod.outlook.com (2603:10a6:208:101::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.24; Tue, 16 Jun 2020 10:23:17 +0000 Received: from AM5EUR03FT043.eop-EUR03.prod.protection.outlook.com (2603:10a6:203:68:cafe::af) by AM5PR0601CA0040.outlook.office365.com (2603:10a6:203:68::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.21 via Frontend Transport; Tue, 16 Jun 2020 10:23:17 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT043.mail.protection.outlook.com (10.152.17.43) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend Transport; Tue, 16 Jun 2020 10:23:17 +0000 Received: ("Tessian outbound 223ba8928d27:v59"); Tue, 16 Jun 2020 10:23:17 +0000 X-CR-MTA-TID: 64aa7808 Received: from eb70063b2c89.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 4597DDE8-4C0B-4CFD-AC42-6B3E31D6A2E9.1; Tue, 16 Jun 2020 10:23:12 +0000 Received: from EUR03-VE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id eb70063b2c89.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 16 Jun 2020 10:23:12 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dXMGy2mLp90/FzqDLPbWLsLDs6edx4SHeu2Rs9Mee0Sg0P6OSoB5ynP5CFPalYWPbKoZkNytUIdHzMG5tr3W0R8Xa2DfsKfOVjEyU0ZJcy9mh0kmsbOP0KhNR8DIvoRkPAI5iyHU/E8u8G3OkXrjx3uJt+ZCi2TVk21KgA0WCf6LWbCYa3RQ8+a4tngE3oASqNy3/8fBPiBECQ5zwmES917hFNsTkqlADlYAv3aUmCgc1/N2B9HbziaOMcWWqK1Gr6uUaPBMJ5z63OG9oYQRQ58xrKvnAcqtObnwfHzI/lqtmycVawDOBjcSqOySS6kW46CIZxTVthiv6gEHPFMPhA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dqdNisW/o5Lf+MuvEYFbIfQPSPstfxxkPQzXXAJfOeI=; b=clfNJTH/F0fiz2UgcUb6PWGQGb36PlHqrMWZTpVKw/PRbl4MteuSBekH3J16bDODmZWiVCXqMs75PXcsKH6N2K9k0XIlUzZ3V3Ct21u3qNcdEVnWHR2Wae3SQSCF1QA6KWFMM0brSagKtkQFQf+5KK8wf+cnyfk+rIfLN8TldHslr9bLulCgy2NLD++milMgLbL+TcWN2Z6Hn4ygh/kis7qsxTtkUZGgLxthzbNDfoRyQ3PbVPFO6PFLeP3fto53ZAsyqJ0cpkiNiQNOpeoTz1sQEkyNw2xZx8QUztXWdA1ORTuIph8P1bo3xmN0auPnMikWfkFgW21zH930fzI+zg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dqdNisW/o5Lf+MuvEYFbIfQPSPstfxxkPQzXXAJfOeI=; b=zYSaRzoSvVt7936tyU5Y4rQDQPrm5HPXylaqT4qp8x0IOtutGNWmDTaer2Sc7EdnWyOKOtiGlGTp/JMHf8/mucw+DKYuo3XbWrCSN4RSZIWPgVVXa6eTTJhlSI+aXNN36zJmC7qwo7JwHw2Bs9HiMCNI7071AxmzSTBDS10Xbgg= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB3905.eurprd08.prod.outlook.com (2603:10a6:208:10a::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.22; Tue, 16 Jun 2020 10:23:10 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3088.029; Tue, 16 Jun 2020 10:23:10 +0000 From: Hannes Tschofenig To: Henk Birkholz , Laurence Lundblade CC: "rats@ietf.org" Thread-Topic: [Rats] draft-ietf-rats-architecture-04 Thread-Index: AdY+J0/pF7zZ3ON/SC6hTZ7MnKDnLgFV2EuAAA6dVIAAAVPzAAAB0/yg Date: Tue, 16 Jun 2020 10:23:10 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: b3aeff4b-5797-49d7-aa3c-3eb5fef41c11.1 x-checkrecipientchecked: true Authentication-Results-Original: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; x-originating-ip: [156.67.194.193] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 5ff0eec0-891f-4645-029f-08d811df4913 x-ms-traffictypediagnostic: AM0PR08MB3905:|AM0PR08MB3844: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:5516;OLM:5516; x-forefront-prvs: 04362AC73B X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: Pe6AYmKpV11wXWXABhPgCaNSjLvgtcYxRtr0RE539RpHGkK9UomD9HwmcQeq1pQWapk7dKlCVdhSVsVm881D9PJ8euolfIdXKvgmTlPktwKcf9gkAZKx/mzqPQh3V/JdS6X9LEvwTaoH8OaHfn7zhBDLoucnwP1gr6LdQjHcdfQ1skussg9MEBx8YzfEjyRp1mCJ5wU1qN9i8D3Gmzthw2ezhRIZiErbZFNi/BOkm93dkQj1aENTfxo2dbz+tXsAaBkk8ogotOV1oPFmrEDBLiVSu8+JSpxbl2A90cG12bjXpwVz3+vPDKoJpj2AqJQw19M5owIGP9M7jQTQ8umoqB2FYZtbPn+wvWNgtop5p+CqX5WNY7JV/4SZyTqq9ivApkZSV8iso+1WD0YX3NUatQ== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(39860400002)(396003)(376002)(346002)(366004)(33656002)(110136005)(9686003)(86362001)(2906002)(6506007)(8936002)(4326008)(7696005)(53546011)(8676002)(5660300002)(71200400001)(478600001)(316002)(186003)(966005)(26005)(64756008)(76116006)(66556008)(52536014)(66946007)(66476007)(66446008)(55016002)(83380400001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3905 Original-Authentication-Results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT043.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(346002)(396003)(39860400002)(136003)(376002)(46966005)(7696005)(47076004)(316002)(82310400002)(6506007)(81166007)(478600001)(26005)(356005)(36906005)(4326008)(82740400003)(966005)(186003)(86362001)(53546011)(110136005)(9686003)(8936002)(52536014)(70586007)(2906002)(8676002)(5660300002)(55016002)(70206006)(336012)(33656002)(83380400001); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: d8188c77-aab9-4fe0-1a13-08d811df44f7 X-Forefront-PRVS: 04362AC73B X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: fR1gOtnbmj/iMgV7mlppdOxW61nuUYTDbBCKmrnOQGlsqgq6++GxhVuoEymSLA/TrWBbMtC9IHeVdjReRlb+Zg8wUAMkC/zHSWcqOUQX3gCKebdG8aCFYSyD+QaBerm1rickJKMpS/5zzcYYqtkVaMFGiTSVF8fR6o0V4wmRyCta0AqSG1q+RHkf2ZqI/lQZISgqy8gmlkdktyZHNEsLAcYynxVh1XNT1+zsbZbNOjr7LRDjvDa4/lquq48YrB4Jj03TnuS/21VKAhppxyg274fcCcM7M+KKvc9Fubla78sOBtff/xQRBgyFoHp2RSI3DODIKbHg7kp7PO10svtxEKUzRedrd/ghmGzmN9C4erwZM/319MEDlmuFTWEb10s2lByLATtDWwVaPfKZ/9mrdAWF9q0AjRbgbd5l4zKmyFD5Cf8fuI7xiZW/lyB0EaxgYWwAC9VEnv97YRtLL7vo5FGxOBE6IfGHhkIOtPkfJsI= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jun 2020 10:23:17.3527 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 5ff0eec0-891f-4645-029f-08d811df4913 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3844 Archived-At: Subject: Re: [Rats] draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 10:23:24 -0000 SGkgSGVuaywNCg0KUmVhZGluZyB0aHJvdWdoIFNlY3Rpb24gOC4xIEkgd29uZGVyIHdoZXRoZXIg dGhlIGRlZmluaXRpb24gZnJvbSB0aGUgdGVybWlub2xvZ3kgc2hvdWxkIGJlIHJlcGxhY2VkIGJ5 IGhvdyB5b3UgZGVmaW5lIGl0IGluIFNlY3Rpb24gOC4xLiBGV0lXIHlvdSBtaWdodCB3YW50IHRv IGFkZCB0aGUgdGVybSAiVGFyZ2V0IEVudmlyb25tZW50IiB0byB0aGUgdGVybWlub2xvZ3kgc2Vj dGlvbiBhcyB3ZWxsIHNpbmNlIHlvdSB1c2UgaXQgaW4gdmFyaW91cyBwbGFjZXMgaW4gdGhlIGRv Y3VtZW50Lg0KDQpJcyB0aGVyZSBhY3R1YWxseSBhIGRpZmZlcmVuY2UgaW4gdGhlIG1lc3NhZ2Ug Zm9ybWF0IGJldHdlZW4gZXZpZGVuY2UgYW5kIGF0dGVzdGF0aW9uIHJlc3VsdD8gRm9yIGV4YW1w bGUsIGNvdWxkIGFuIEVBVCB0b2tlbiBiZSB1c2VkIGZvciBlbmNvZGluZyBldmlkZW5jZSBhbmQg dGhlIGF0dGVzdGF0aW9uIHJlc3VsdD8gRXZpZGVuY2UgY2FuIHRyYXZlbCBmcm9tIHRoZSBhdHRl c3RlciB0byB0aGUgdmVyaWZpZXIgYW5kIHRvIHRoZSByZWx5aW5nIHBhcnR5IGJ1dCB0aGUgYXR0 ZXN0YXRpb24gcmVzdWx0IGNhbiBvbmx5IGJlIG9taXR0ZWQgYnkgdGhlIHZlcmlmaWVyLiBNYXli ZSBJIG1pc3NlZCBpdCBidXQgSSBjb3VsZG4ndCBmaW5kIGEgY2FzZSB3aGVyZSBhIG1lc3NhZ2Ug ZXhjaGFuZ2UgaXMganVzdCBiZXR3ZWVuIGFuIGF0dGVzdGVyIGFuZCBhIHJlbHlpbmcgcGFydHku IElzIHRoaXMgbm90IHBvc3NpYmxlPw0KDQpDaWFvDQpIYW5uZXMNCg0KLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS0NCkZyb206IEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVu aG9mZXIuZGU+DQpTZW50OiBUdWVzZGF5LCBKdW5lIDE2LCAyMDIwIDExOjE0IEFNDQpUbzogSGFu bmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+OyBMYXVyZW5jZSBMdW5k YmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NCkNjOiByYXRzQGlldGYub3JnDQpTdWJqZWN0 OiBSZTogW1JhdHNdIGRyYWZ0LWlldGYtcmF0cy1hcmNoaXRlY3R1cmUtMDQNCg0KSGkgSGFubmVz LA0KaGkgTGF1cmVuY2UsDQoNCkkgdGhpbmsgImV2aWRlbmNlIiB2cy4gImluZm9ybWF0aW9uIiBp cyBhIHZlcnkgZ29vZCBleGFtcGxlIHRoYXQgc2hvd3Mgd2h5IHRoZSB0ZXh0IHN0YWJpbGl6ZWQg aW4gdGhlIHNoYXBlIGl0IGlzIGluIG5vdy4NCg0KSSBhbSBwcmV0dHkgc3VyZSB0aGF0IC0gYW5k IHBsZWFzZSBzcGVhayB1cCwgaWYgSSBhbSBtaXNzaW5nIHNvbWUgdml0YWwgcG9pbnQgaGVyZSAt IGV2aWRlbmNlIGlzIG5vdCBzaW1wbHkgaW5mb3JtYXRpb24uIEF0IHRoZSB2ZXJ5IGxlYXN0IHRo ZXJlIGhhcyB0byBiZSBhIG1ldGhvZCB0byBwcmV2ZW50IChlLmcuIHNlY3VyZSBjaGFubmVsKSBv ciBldmVuIGRldGVjdCAoZS5nLiBhIHNpZ25hdHVyZSkgdGFtcGVyaW5nIHdpdGggZXZpZGVuY2Uu IEl0IGFsc28gbXVzdCBvcmlnaW5hdGUgZnJvbSBhbiBhdHRlc3RlciwgZXRjLiBTbyB0aGVyZSBh cmUgYSBsb3Qgb2YgY2hhcmFjdGVyaXN0aWNzIHRoYXQgYXJlIHRpZWQgdG8gZXZpZGVuY2UgdGhh dCBtYWtlIGl0IGF0IGxlYXN0IGEgc3ViY2xhc3Mgb2YgaW5mb3JtYXRpb24uDQoNClRoaXMgaXMg b25seSBhIHNtYWxsIGFyYml0cmFyeSBleGFtcGxlIHRvIGlsbHVzdHJhdGUgaG93IHRoYXQgbWlu aW1hbCBzZXQgb2YgZGVmaW5pdGlvbnMgY2FtZSB0byBiZS4NCg0KSSB0b3RhbGx5IGFncmVlIHRo YXQgdGhlIGRlZmluaXRpb24gb2YgRXZpZGVuY2UgZWFybHkgb24gaXMgbm90IGluIGFsaWdubWVu dCB3aXRoIHRoZSB0ZXh0ICh3aGljaCBJIGFsc28gdGhpbmsgaXMgYmV0dGVyKSBhbnltb3JlLCBi dXQgYW4gaXNzdWUgYWJvdXQgRXZpZGVuY2UgdGV4dCBpcyBhbHJlYWR5IGluIHRoZSB0cmFja2Vy IHRoYW5rcyB0byBLYXRobGVlbiBhbmQgd2Ugd2lsbCB3b3JrIG9uIGEgbW9yZSBjcmlzcCBkZXNj cmlwdGlvbiBhZnRlciB0aGUgY3VycmVudCBvcGVuIFBSIGFyZSBzZXR0bGVkLg0KDQpWaWVsZSBH csO8w59lLA0KDQpIZW5rDQoNCg0KT24gMTYuMDYuMjAgMTA6NTEsIEhhbm5lcyBUc2Nob2Zlbmln IHdyb3RlOg0KPiBIaSBMYXVyZW5jZSwNCj4NCj4gYXMgeW91IGV4cGxhaW4gYmVsb3cgaXQgbWln aHQgaGVscCB0byByZXBsYWNlIHNvbWUgb2YgdGhlIHRlcm1zIHdpdGgNCj4gb3RoZXJzLiBJIHRo aW5rIHRoZSBkZXNjcmlwdGlvbiBkb2VzIG5vdCBtYWtlIGl0IGVhc3kgdG8gZXhwbGFpbiB0aGUN Cj4gY29uY2VwdHMgdG8gdGhvc2Ugd2hvIHNob3VsZCBhY3R1YWxseSBiZSB1c2luZyB0aGVtLiBJ IGRpZCB0aGUgcmV2aWV3DQo+IGJlY2F1c2UgSSB0cmllZCB0byBleHBsYWluIHRoZSBjb25jZXB0 IGluIGEgbGVjdHVyZSB0byBzdHVkZW50cy4NCj4NCj4gRm9yIGV4YW1wbGUsIHRoZSB0ZXJtIOKA nGluZm9ybWF0aW9u4oCdIChvciBjbGFpbXMpIHNvdW5kcyBhIGxvdCBzaW1wbGVyDQo+IHRvIHVu ZGVyc3RhbmQgbGVzcyBzb3BoaXN0aWNhdGVkIHRoYW4g4oCcZXZpZGVuY2XigJ0uIFBhcnRpY3Vs YXJseSwgd2hlbg0KPiB0aGUgdGVybSDigJxldmlkZW5jZeKAnSBpcyB0aGVuIGRlc2NyaWJlZCBh cyDigJxBIHNldCBvZiBpbmZvcm1hdGlvbiBhYm91dA0KPiBhbiBBdHRlc3RlciB0aGF0IGlzIHRv IGJlIGFwcHJhaXNlZCBieSBhIFZlcmlmaWVy4oCdLiAoVGhlIGRlZmluaXRpb24NCj4gbGF0ZXIg cHJvdmlkZWQgaW4gdGhlIHRleHQgaXMgYWN0dWFsbHkgYmV0dGVyIGJ1dCBkb2VzIG5vdCBtYXRj aCB0aGUNCj4gZGVmaW5pdGlvbiBlYXJsaWVyIGluIHRoZSBkb2N1bWVudC4gSW5jb25zaXN0ZW5j eSBsaWtlbHkgY2F1c2VkIGJ5DQo+IGR1cGxpY2F0aW5nIHRleHQgdGhyb3VnaG91dCB0aGUgZG9j dW1lbnQuKSBJIGVhcmxpZXIgZGVzY3JpcHRpb24gaXMNCj4gSU1ITyBhY3R1YWxseSB3cm9uZy4g Rm9yIGV4YW1wbGUsIHdoeSBkb2VzIHRoZSB2ZXJpZmllciBuZWVkcyB0byBiZQ0KPiBwcmVzZW50 IGluIGFsbCBzY2VuYXJpb3M/IEluIGZhY3QgdGhlIG1vZGVscyBpbiBTZWN0aW9uIDUgc3VnZ2Vz dA0KPiBvdGhlcndpc2UuIFdoeSBjYW5ub3QgYSBkZXZpY2Ugc2VuZCB0aGUgY2xhaW1zIHRvIGEg cmVseWluZyBwYXJ0eT8gVGhlDQo+IGNhc2Ugd2hlcmUgeW91IG5lZWQgYSB2ZXJpZmllciB0byBp bnRlcnByZXQgdGhlIGNsYWltcyBtYXkgYmUgYSBjb3JuZXINCj4gY2FzZSBpbiBzb21lIGVudmly b25tZW50cy4gV2h5IGlzIHRoZSBpbmZvcm1hdGlvbiBhYm91dCBhbiBhdHRlc3Rlcj8NCj4gSXQg YmV0dGVyIGRlc2NyaWJlIHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgdGhlIGRldmljZSwgYXMgaXQg aXMgc2FpZCBpbiBTZWN0aW9uIDguMS4NCj4NCj4gSWYgeW91IGxvb2sgYXQgdGhlIHdob2xlIGV4 ZXJjaXNlIGZyb20gYSAxMCwwMDAgZm9vdCB2aWV3IHRoZW4gd2UgYXJlDQo+IGVzc2VudGlhbGx5 IHVzaW5nIGRlc2lnbiBwYXR0ZXJucyBmcm9tIHRoZSBpZGVudGl0eSBtYW5hZ2VtZW50IHNwYWNl DQo+IGFuZCBhcHBseSBpdCBoZXJlIHdpdGggc2xpZ2h0bHkgZGlmZmVyZW50IGluZm9ybWF0aW9u LiBUaGF04oCZcyBpbiBhDQo+IG51dHNoZWxsIHdoZXJlIHRoZSBtb2RlbHMgaW4gU2VjdGlvbiA1 IGNhbWUgZnJvbS4NCj4NCj4gQ2lhbw0KPg0KPiBIYW5uZXMNCj4NCj4gKkZyb206KiBMYXVyZW5j ZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NCj4gKlNlbnQ6KiBUdWVzZGF5LCBK dW5lIDE2LCAyMDIwIDM6MzcgQU0NCj4gKlRvOiogSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5U c2Nob2ZlbmlnQGFybS5jb20+DQo+ICpDYzoqIHJhdHNAaWV0Zi5vcmcNCj4gKlN1YmplY3Q6KiBS ZTogW1JhdHNdIGRyYWZ0LWlldGYtcmF0cy1hcmNoaXRlY3R1cmUtMDQNCj4NCj4gSGkgSGFubmVz LA0KPg0KPiBJIHRoaW5rIHJlYWRhYmlsaXR5IG9mIHRoZSBkb2N1bWVudCBjb3VsZCBiZSBpbXBy b3ZlZCBhbmQgbWF5YmUgc29tZQ0KPiBzaW1wbGlmaWNhdGlvbiB3b3VsZCBiZSBPSywgYnV0IEkg Z2VuZXJhbGx5IHRoaW5rIG1vc3Qgb2YgdGhlIGNvcmUNCj4gZW50aXRpZXMgYW5kIG1lc3NhZ2Vz IG1ha2Ugc2Vuc2UuDQo+DQo+DQo+DQo+ICAgICBPbiBKdW4gOSwgMjAyMCwgYXQgMTI6MTMgQU0s IEhhbm5lcyBUc2Nob2ZlbmlnDQo+ICAgICA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbSA8bWFp bHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+PiB3cm90ZToNCj4NCj4gICAgIEhpIGFsbA0K Pg0KPiAgICAgSSBoYXZlIHJlLXJlYWQgdGhlIGFyY2hpdGVjdHVyZSBkb2N1bWVudCBhbmQgSU1I TyBpdCBpcyBzdGlsbCBmYXINCj4gICAgIHRvbyBjb21wbGV4LiBJdCBtYWtlcyB0aGUgcmVhZGVy IGJlbGlldmUgdGhhdCBhdHRlc3RhdGlvbiBpcyBzb21lDQo+ICAgICByb2NrZXQtc2NpZW5jZSBj b25jZXB0LCB3aGljaCBpdCBqdXN0IGlzbuKAmXQuIEFmdGVyIHN1Y2ggYSBsb25nIHRpbWUNCj4g ICAgIHRoZSBkb2N1bWVudCBpcyB1bm5lY2Vzc2FyaWx5IGhhcmQgdG8gcmVhZCBhbmQgdW5kZXJz dGFuZC4NCj4NCj4gICAgIEhlcmUgaXMgdGhlIHN0b3J5IGFzIEkgc2VlIGl0Lg0KPg0KPiAgICAg SW4gdGhlIGJhc2ljIGZvcm0gYSBkZXZpY2UgcHV0cyBhIGJ1bmNoIG9mIGNsYWltcyB0b2dldGhl ciBhbmQgdGhlbg0KPiAgICAgc2lnbnMgdGhlbS4gVGhlIGRldmljZSBpcyB0aGUgYXR0ZXN0ZXIu DQo+DQo+ICAgICBUaGVuLCB0aGlzIGluZm9ybWF0aW9uIGlzIHNlbnQgdG8gYW5vdGhlciBwYXJ0 eSwgdGhlIHJlbHlpbmcgcGFydHksDQo+ICAgICB3aGljaCB1c2VzIHRoaXMgaW5mb3JtYXRpb24g Zm9yIHNvbWUga2luZCBvZiBkZWNpc2lvbiBtYWtpbmcuDQo+DQo+IEV2aWRlbmNlIGlzIGp1c3Qg dGhlIG5hbWUgZm9yIOKAnHRoaXMgaW5mb3JtYXRpb27igJ0uDQo+DQo+DQo+DQo+ICAgICBPZiBj b3Vyc2UsIHRoZXJlIGlzIHNvbWUgcHJpb3Igc2V0dXAgdGhhdCBoYXMgdG8gaGFwcGVuDQo+ICAg ICAocHJvdmlzaW9uaW5nIG9mIGtleXMgZHVyaW5nIG1hbnVmYWN0dXJpbmcpIGFuZCBzb21lIGFz c3VtcHRpb25zDQo+ICAgICBoYXZlIHRvIGJlIG1hZGUgYXMgd2VsbCAoYXR0ZXN0YXRpb24gY29k ZSBvbiB0aGUgZGV2aWNlIGhhcyB0byBiZQ0KPiAgICAgd2VsbCBwcm90ZWN0ZWQsIGNvZGUgaXNv bGF0aW9uIGJlaW5nIHVzZWQsIGV0Yy4pLg0KPg0KPiBFbmRvcnNlbWVudHMgYXJlIHRoZSBtZWNo YW5pc20gYnkgd2hpY2ggdGhpcyBoYXBwZW5zLg0KPg0KPg0KPg0KPiAgICAgVGhlbiwgdGhlcmUg aXMgdGhlIGEgY29tcGxleCBjYXNlIHdoZXJlIHRoZSByZWx5aW5nIHBhcnR5IGNhbm5vdCB1c2UN Cj4gICAgIHRoZSByZWNlaXZlZCBpbmZvcm1hdGlvbiBkaXJlY3RseS4gVGhpcyBpcyBtb3N0IGxp a2VseSByZWxhdGVkIHRvDQo+ICAgICBhbnkgZm9ybSBvZiBzb2Z0d2FyZSBtZWFzdXJlbWVudHMu IElmIHlvdSBzZW5kIGEgaGFzaCBvZiBhDQo+ICAgICBib290bG9hZGVyIHRvIHNvbWUgcmVseWlu ZyBwYXJ0eSB5b3UgY2Fubm90IHJlYWxseSBleHBlY3QgaXQgdG8gYmUNCj4gICAgIHVzZWQgZm9y IGFueXRoaW5nLiBUaGUgcmVhc29uIHRoZSByZWx5aW5nIHBhcnR5IGNhbm5vdCB1c2UgdGhhdA0K PiAgICAgaW5mb3JtYXRpb24gZGlyZWN0bHkgaXMgYmVjYXVzZSBpdCBkb2VzIG5vdCBrbm93IHdo YXQgc29mdHdhcmUgdGhlDQo+ICAgICBkZXZpY2UgaXMgcmVhbGx5IHN1cHBvc2VkIHRvIGJlIHJ1 bm5pbmcuIEhlbmNlLCB0aGVyZSBpcyBhIG5lZWQgdG8NCj4gICAgIGNvbnN1bHQgYW5vdGhlciBw YXJ0eSAobGV04oCZcyBjYWxsIGl0IHRoZSB2ZXJpZmllcikuIFRoZSBhc3N1bXB0aW9uDQo+ICAg ICBpcyB0aGF0IHRoaXMgcGFydHkga25vd3Mgd2hhdCB0aGUgZXhwZWN0ZWQgZmluZ2VycHJpbnQg aXMgYW5kIGhlbmNlDQo+ICAgICB3aGF0IHNvZnR3YXJlIGlzIHJ1bm5pbmcgb24gdGhlIGRldmlj ZS4NCj4NCj4gV2hpY2ggaXMgd2h5IHRoZSB0ZXJtcyBWZXJpZmllciBhbmQgUmVzdWx0cyBhcmUg dXNlZC4NCj4NCj4gICAgIFRoYXTigJlzIGFsbC4gVGhlcmUgaXMgbm90IG11Y2ggbW9yZSBjb21w bGV4aXR5IHRvIHRoaXMgdG9waWMuDQo+DQo+IEkgcGVyc29uYWxseSB3b3VsZCBiZSBoYXBweSB3 aXRob3V0IHRoZSBPd25lcnMgYW5kIHRoZSBBcHByYWlzYWwNCj4gUG9saWNpZXMgaW4gdGhlIGFy Y2hpdGVjdHVyZSBhcyB0aGV5IHNlZW0gb2J2aW91c2x5IGltcGxpZWQsIGJ1dCBub3QNCj4gZW5v dWdoIHRvIGFzayB0aGV5IGJlIHJlbW92ZWQuDQo+DQo+ICAgICBTbywgd2hlcmUgZG8gYWxsIHRo ZXNlIHRlcm1zIGNvbWUgZnJvbT8gQXBwcmFpc2FsIHBvbGljaWVzLA0KPiAgICAgZXZpZGVuY2Us IGVuZG9yc2VyLCAuLi4NCj4NCj4gICAgIEkgd291bGQgZGVsZXRlIHRoZW0gYW5kIHNlZSB3aGV0 aGVyIHRoZSBpZGVhIHN0aWxsIGdldHMgYWNyb3NzLg0KPg0KPiBJIHRoaW5rIG1vcmUgY2xlYXIg d3JpdGluZyB3b3VsZCBoZWxwLg0KPg0KPiAoV2UgY291bGQgcHV0IHRleHQgaW4gaHR0cHM6Ly93 d3cuc2NyaWJlbnMuY29tIGFuZCBsb29rIGF0IHRoZSBGbGVzY2gNCj4gYW5kIEd1bm5pbmcgRm9n IGluZGV4ZXMgZm9yIHJlYWRhYmlsaXR5IHVuZGVyIHN0YXRpc3RpY3MpDQo+DQo+IExMDQo+DQo+ DQo+DQo+ICAgICBDaWFvDQo+DQo+ICAgICBIYW5uZXMNCj4NCj4gICAgIElNUE9SVEFOVCBOT1RJ Q0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlDQo+ ICAgICBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUg bm90IHRoZSBpbnRlbmRlZA0KPiAgICAgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5k ZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZQ0KPiAgICAgdGhlIGNvbnRlbnRzIHRv IGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlDQo+ICAg ICBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo+ICAg ICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiAgICAg UkFUUyBtYWlsaW5nIGxpc3QNCj4gICAgIFJBVFNAaWV0Zi5vcmcgPG1haWx0bzpSQVRTQGlldGYu b3JnPg0KPiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzDQo+ DQo+IElNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkg YXR0YWNobWVudHMgYXJlDQo+IGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdl ZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkDQo+IHJlY2lwaWVudCwgcGxlYXNlIG5vdGlm eSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UNCj4gdGhlIGNvbnRl bnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3Jl IG9yDQo+IGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCj4N Cj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gUkFU UyBtYWlsaW5nIGxpc3QNCj4gUkFUU0BpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3JhdHMNCj4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBv ZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5 IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVu dCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xv c2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBv c2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5r IHlvdS4NCg== From nobody Tue Jun 16 03:25:51 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 280B33A117B for ; Tue, 16 Jun 2020 03:25:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=1G8ZJ8Uh; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=1G8ZJ8Uh Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VMiCt9XgpJSA for ; Tue, 16 Jun 2020 03:25:48 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80052.outbound.protection.outlook.com [40.107.8.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 812523A0C7E for ; Tue, 16 Jun 2020 03:25:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9cjqxAa4Mt/nw67Y2EuAZd+AxWsKJg/g1REwNYaVVNw=; b=1G8ZJ8UhHmVb/SscgcPi0JQ0sCW+Fo6cqD+rHX3tY13/DzN++Pfk6V+jR1MrNaoMkmY2uc/ivq//qjMZOZ81jMMxnt/EEhNVTuWcnsf8GxK5AMeIUMdbcR3DPz7GA6PfnBG8TaDhuFpv0x4pkACf58hyIoQfbSZYUqvbVUI/aq4= Received: from AM5PR0502CA0007.eurprd05.prod.outlook.com (2603:10a6:203:91::17) by AM0PR08MB3010.eurprd08.prod.outlook.com (2603:10a6:208:56::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.19; Tue, 16 Jun 2020 10:25:43 +0000 Received: from AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com (2603:10a6:203:91:cafe::f5) by AM5PR0502CA0007.outlook.office365.com (2603:10a6:203:91::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend Transport; Tue, 16 Jun 2020 10:25:43 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT014.mail.protection.outlook.com (10.152.16.130) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend Transport; Tue, 16 Jun 2020 10:25:43 +0000 Received: ("Tessian outbound 299e58e1e4d2:v59"); Tue, 16 Jun 2020 10:25:43 +0000 X-CR-MTA-TID: 64aa7808 Received: from babf3e5b8cec.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 61D15ED7-8B30-499C-B726-23A776EAA036.1; Tue, 16 Jun 2020 10:25:38 +0000 Received: from EUR05-AM6-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id babf3e5b8cec.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 16 Jun 2020 10:25:38 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=TkSKWhqjoOoUJ7sQDeLArM1a/8/32uXkwd9dtzWQGVcmV3Z9hTnpYp2+LC4sDcdkUFsOow2Y6EiK3GPWGCczCLMtPK3zmv9wrhAeqgCQVoAZZiaLr0oOhk4GWG8tsIWUfDY+0CSBp0rdeNiXncHWt8AeJecR3MIsax4LaL/aiotiHhK8a2V3rOKdrSX/bzPkTxt+6xF8JWVP+x9Y30LKtsdu66eMLeh60TzfPXX+3u1UXHcQc50fPwg5kSPcxAt5x8/WUF8OLTLxTZE/PPOpWu+Ap8bkibWAQa0r3OOhtYvPcTAVRUnjdYH3aBFLVnrXPlvGo9PvdBZ9ZWGaiv3mIA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9cjqxAa4Mt/nw67Y2EuAZd+AxWsKJg/g1REwNYaVVNw=; b=XgbM1BFXZ5TiUUk9nxX4Ztz66500VFsaGmLs7ttjnVO+6I4ZPevBm0elNJNZZ0aC11Xw4iWkRoNO2efVM5H9oqV0FRPyqFrVieess1+/PLJ2nobC7wiklFQNdSR3PfjVo1vB7ntV96JHBWtcWrnvQ8c8uQ97CzJyMq128ZJ7/QBEczJjTjuAnmJtWE4OKqeVqLZKKmeiGIvLxlTMK3hW75MLRXBuGUgDHPRYdLGZkkaLfWeQP+xhL+ELJIGP/1JaGaAVwhuMtKDYkpwhCTWNBXgfvEZsir5pfgDWfz8cd/hbns2/zAEwAHwy6cAxgmM/WE3jrJFXcdkmAFTbHrP5KQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9cjqxAa4Mt/nw67Y2EuAZd+AxWsKJg/g1REwNYaVVNw=; b=1G8ZJ8UhHmVb/SscgcPi0JQ0sCW+Fo6cqD+rHX3tY13/DzN++Pfk6V+jR1MrNaoMkmY2uc/ivq//qjMZOZ81jMMxnt/EEhNVTuWcnsf8GxK5AMeIUMdbcR3DPz7GA6PfnBG8TaDhuFpv0x4pkACf58hyIoQfbSZYUqvbVUI/aq4= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB3153.eurprd08.prod.outlook.com (2603:10a6:208:59::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.22; Tue, 16 Jun 2020 10:25:36 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3088.029; Tue, 16 Jun 2020 10:25:36 +0000 From: Hannes Tschofenig To: Hannes Tschofenig , "Oliver, Ian (Nokia - FI/Espoo)" , Michael Richardson CC: "rats@ietf.org" Thread-Topic: watchdog use case ... RE: [Rats] Use cases in draft-ietf-rats-architecture-04 Thread-Index: AdZDxzg1dMUxu36vSHG7cRcC1apYow== Date: Tue, 16 Jun 2020 10:25:36 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 867ea5c6-1f3d-48fb-a019-58d471ae93fc.0 x-checkrecipientchecked: true Authentication-Results-Original: arm.com; dkim=none (message not signed) header.d=none;arm.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [156.67.194.193] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 9376993e-6b97-4049-93d7-08d811dfa062 x-ms-traffictypediagnostic: AM0PR08MB3153:|AM0PR08MB3010: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000; x-forefront-prvs: 04362AC73B X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: /wjTGr0sYTb5fcE+taFXr/CVhSMSXcwGrG2g//zLJGMcQVEP/FNBgoCuHYZbVeKimaWyYAX150jkRYEIuMH4Rngv9FjNEDHJtVGiaP3QVfO2UhIDE2GWzF5ZrlD/UYJO7UazVEthSjaZBZF+i4dPa+0nFSAeIOUzExeHZzEYtn8V5Sn46qeJPJsHHmWCbphBsANIuWnzTyxJ6IrfNfuCAVWSnQrvuClJ0IxKUE7DLz24WqTcSMVhf9a/qRsUDRBoMFAqmwCTpE9VKXvHpfS0tzynBfVtk1OLipqXBjKpB0x1B7ypGg7VY5gZuVdKVJCBbqYd8sUEEalES33IqXjm0Q== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(39860400002)(396003)(346002)(366004)(376002)(5660300002)(110136005)(33656002)(9686003)(2906002)(53546011)(66574015)(86362001)(4326008)(8936002)(8676002)(6506007)(7696005)(55016002)(478600001)(71200400001)(316002)(186003)(26005)(66946007)(64756008)(76116006)(52536014)(66476007)(66446008)(66556008)(83380400001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/alternative; boundary="_000_AM0PR08MB3716A2C59320D3FB8D403FADFA9D0AM0PR08MB3716eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3153 Original-Authentication-Results: arm.com; dkim=none (message not signed) header.d=none;arm.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(39860400002)(136003)(346002)(376002)(46966005)(70206006)(8936002)(2906002)(8676002)(86362001)(478600001)(82740400003)(4326008)(336012)(82310400002)(47076004)(9686003)(83380400001)(55016002)(70586007)(356005)(52536014)(5660300002)(33656002)(6506007)(110136005)(316002)(7696005)(26005)(186003)(81166007)(36906005)(66574015)(53546011); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: c41fcc55-7e8f-47fe-3761-08d811df9bfe X-Forefront-PRVS: 04362AC73B X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: iwAjtgcmQFWzQIw4IEfpYX7KKlM4TBirXo9/LMlKd3PVO9offzxG/CXuMrn0SQBihji1PA7ZboXRCSk1dldcxYwXGLDRdAL3z4I+fiT+FgRgyiXsAw7Kl91u6dm+/HJzJd+bZuV8IIP8ISoDiLDempACb+u/5zVJ447IY5kZFADGehafJ/jVQApCnkF+mjaVGe3cXIIIi6Mc7LpqqWOjAd2WSeW9tY9BnBsSX/VqRakpEmOIbfP254OUF4cURoZA5KG4ZBLo4lC+FIAwVEfZZ1IYbYd63zLpA3wWiqCyAzYlDMF00+viUSt2EcH6h05xANzXXoQRIGkzVVGWAaTqO7r8J2MqJLKmthqcOgFtCGh9qK8S76qyKQ71XsL8bywfOysIF5hq0bkNekotqiFG7w== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jun 2020 10:25:43.8330 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 9376993e-6b97-4049-93d7-08d811dfa062 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3010 Archived-At: Subject: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 10:25:50 -0000 --_000_AM0PR08MB3716A2C59320D3FB8D403FADFA9D0AM0PR08MB3716eurp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi RATS architecture authors, Could the authors of the use case explain the watchdog use case a bit more? I do not understand how this is supposed to work. How is the device allowed= to reboot when it sends attestation information to a remote server? If malware prevents the device from rebooting, as the text indicates, why d= oesn't that malware also prevent the interaction with the attestation serve= r (for example, pretending that network connectivity is down)? Ciao Hannes From: RATS On Behalf Of Hannes Tschofenig Sent: Tuesday, June 9, 2020 9:31 PM To: Oliver, Ian (Nokia - FI/Espoo) ; Michae= l Richardson Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Hi Ian, can you provide a bit more details about what your domain is? Ciao Hannes From: Oliver, Ian (Nokia - FI/Espoo) > Sent: Tuesday, June 9, 2020 9:27 PM To: Michael Richardson = >; Hannes Tschofenig > Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Just to add to that, the watchdog case is relevant in our domain Ian -- Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 ________________________________ From: Michael Richardson Sent: Tuesday, June 09, 2020 22:00 To: Hannes Tschofenig Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Hannes Tschofenig > wrote: > Regarding the hardware watchdog I just feel it is a made-up use > case. Is this something people actually want to use in practice? > Today's use of hardware watchdogs aim to deal with non-security use > cases (mostly dealing with crashing software). We've heard from Enterprise people that this is important. It's not a constrained case. -- Michael Richardson >, S= andelman Software Works -=3D IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM0PR08MB3716A2C59320D3FB8D403FADFA9D0AM0PR08MB3716eurp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi RATS architecture authors,

 

Could the authors of the use case explain the watchd= og use case a bit more?

 

I do not understand how this is supposed to work. Ho= w is the device allowed to reboot when it sends attestation information to = a remote server?

If malware prevents the device from rebooting, as th= e text indicates, why doesn’t that malware also prevent the interacti= on with the attestation server (for example, pretending that network connec= tivity is down)?

 

Ciao

Hannes

 

From: RATS <rats-bounces@ietf.org> O= n Behalf Of Hannes Tschofenig
Sent: Tuesday, June 9, 2020 9:31 PM
To: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.co= m>; Michael Richardson <mcr+ietf@sandelman.ca>
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04

 

Hi Ian,

 

can you provide a bit more details about what your d= omain is?

 

Ciao

Hannes

 

From: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.co= m>
Sent: Tuesday, June 9, 2020 9:27 PM
To: Michael Richardson <mcr+ietf@sandelman.ca>; Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04

 

Just to add to that, the watchdog case is relevant in o= ur domain

 

Ian

&n= bsp;

--

Dr. Ian Oliver

Cybersecurity Research=

Distinguished Member of Tec= hnical Staff

Nokia Bell Labs<= /span>

+358 50 483 6237

&n= bsp;

From= : Michael Richardso= n
Sent: Tuesday, June 09, 2020 22:00
To: Hannes Tschofenig
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04

&n= bsp;


Hannes Tschofenig <Hannes.T= schofenig@arm.com> wrote:
    > Regarding the hardware watchdog I just feel it is a= made-up use
    > case. Is this something people actually want to use= in practice?
    > Today's use of hardware watchdogs aim to deal with = non-security use
    > cases (mostly dealing with crashing software).

We've heard from Enterprise people that this is important.
It's not a constrained case.

--
Michael Richardson <mcr+= ;IETF@sandelman.ca>, Sandelman Software Works
 -=3D IPv6 IoT consulting =3D-

IMPORTANT NOTICE: The contents of this email and any= attachments are confidential and may also be privileged. If you are not th= e intended recipient, please notify the sender immediately and do not discl= ose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Th= ank you.

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM0PR08MB3716A2C59320D3FB8D403FADFA9D0AM0PR08MB3716eurp_-- From nobody Tue Jun 16 05:26:15 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 515593A0DA6 for ; Tue, 16 Jun 2020 05:26:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1w64xZ19I-7e for ; Tue, 16 Jun 2020 05:26:10 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CB133A0D39 for ; Tue, 16 Jun 2020 05:26:07 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2GFAACCuehe/xoHYZldCRoBAQEBAQE?= =?us-ascii?q?BAQEBAwEBAQESAQEBAQICAQEBAUCBSgKBeYEegTMKhBqRBoEBmROBYgYLAQE?= =?us-ascii?q?BAQEBAQEBBgEBGAsKAgQBAQKBToJ0AoIXASQ4EwIQAQEGAQEBAQEGBAIChkQ?= =?us-ascii?q?MQgEMAYMFfgEBAQEBAQEBAQEBAQEBAQEBAQEWAkNRBDEBAQEBAwEBIQ8BBTY?= =?us-ascii?q?CCQwECQIRAQMBAQECAhESAwICJx8BAgYIBgEMAQUCAQGDIgGCewULmUmbBHa?= =?us-ascii?q?BMoVRg1CBOgaBDioBiyuBDw8PgUw/JmsnD4IlBTA+glwBAYEYEgEICgEHRhO?= =?us-ascii?q?CVYJgBIxbghpMgmCGXZpCWigHgViBBYEGBAuSPoVABQodgnA1iGWEbQYnjUS?= =?us-ascii?q?RHZ4zAgQCCQIVgWqBCXBNJE+CaVAXAg2OKQEXgQIBAoJJhRSFRHICNQIGAQc?= =?us-ascii?q?BAQMJfIgthHMHCoEkAXkXAQE?= X-IPAS-Result: =?us-ascii?q?A2GFAACCuehe/xoHYZldCRoBAQEBAQEBAQEBAwEBAQESA?= =?us-ascii?q?QEBAQICAQEBAUCBSgKBeYEegTMKhBqRBoEBmROBYgYLAQEBAQEBAQEBBgEBG?= =?us-ascii?q?AsKAgQBAQKBToJ0AoIXASQ4EwIQAQEGAQEBAQEGBAIChkQMQgEMAYMFfgEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEWAkNRBDEBAQEBAwEBIQ8BBTYCCQwECQIRAQMBA?= =?us-ascii?q?QECAhESAwICJx8BAgYIBgEMAQUCAQGDIgGCewULmUmbBHaBMoVRg1CBOgaBD?= =?us-ascii?q?ioBiyuBDw8PgUw/JmsnD4IlBTA+glwBAYEYEgEICgEHRhOCVYJgBIxbghpMg?= =?us-ascii?q?mCGXZpCWigHgViBBYEGBAuSPoVABQodgnA1iGWEbQYnjUSRHZ4zAgQCCQIVg?= =?us-ascii?q?WqBCXBNJE+CaVAXAg2OKQEXgQIBAoJJhRSFRHICNQIGAQcBAQMJfIgthHMHC?= =?us-ascii?q?oEkAXkXAQE?= X-IronPort-AV: E=Sophos;i="5.73,518,1583190000"; d="scan'208";a="18447151" Received: from mail-mtas26.fraunhofer.de ([153.97.7.26]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Jun 2020 14:26:05 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CdAAD+uehe/1lIDI1dCRoBAQEBAQE?= =?us-ascii?q?BAQEBAwEBAQESAQEBAQICAQEBAUCBSgKBeS9vA1QwLAqEGpEGgQGZE4FoCwE?= =?us-ascii?q?DAQEBAQEGAQEYCwoCBAEBgVCCdAKCFQIkOBMCEAEBBQEBAQIBBgRthVsMQgE?= =?us-ascii?q?MAYUiAQEBAQMBASEPAQU2AgkMBAkCEQEDAQEBAgIREgMCAicfAQIGCAYBDAE?= =?us-ascii?q?FAgEBgyIBgwALmUybBHaBMoVRg1mBOgaBDioBiyuBDw8PgUw/JmsnD4IlBTA?= =?us-ascii?q?+glwBAYEYEgEICgEHRhOCVYJgBIxbghpMgmCGXZpCWigHgViBBYEGBAuSPoV?= =?us-ascii?q?ABQodgnA1iGWEbQYnjUSRHZ4zAgQCCQIVgWoiZnBNJE+CaVAXAg2OKQEXgQI?= =?us-ascii?q?BAoJJhRSFREExAjUCBgEHAQEDCXyILYRzBwoXgQ0BeRcBAQ?= X-IronPort-AV: E=Sophos;i="5.73,518,1583190000"; d="scan'208";a="115573914" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaS26.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Jun 2020 14:26:02 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 05GCQ1sj018143 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 16 Jun 2020 14:26:01 +0200 Received: from [192.168.16.50] (79.234.115.101) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Tue, 16 Jun 2020 14:25:56 +0200 To: Hannes Tschofenig , Laurence Lundblade CC: "rats@ietf.org" References: From: Henk Birkholz Message-ID: Date: Tue, 16 Jun 2020 14:25:55 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.115.101] Archived-At: Subject: Re: [Rats] draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 12:26:13 -0000 Hi Hannes, we will most certainly take your comments into account and I will add an issue on "environments" definitions. Thanks! In an ideal case, every message type (evidence, endorsement, attestation result, policies, and complementary documents) will be encoded the same. I'd assume that only "new" or very well-scoped or well-controlled domains will be able to do that, today. There is the "bow-tie" diagram in the architecture that illustrates potential mixes of "message formats", which are referred to encodings in the text. One target of the architecture is to explicitly not prescribe an encoding here. Having said that, some things are easier, if the encoding is identical (aside from the typical suspects, such as cost, interoperability, or foot-print). One of these things is the composition of composite evidence that can also include attestation results and potentially even endorsements. In cases that build on composite evidence, attestation results might traverse other entities than relying parties. It is most certainly possible to augment the exemplary model "passport" as well as "background-check" to that extent. Every "model" and the corresponding flow of conceptual messages (and their encodings) is never prescriptive but intended to be expositional. Viele Grüße, Henk On 16.06.20 12:23, Hannes Tschofenig wrote: > Hi Henk, > > Reading through Section 8.1 I wonder whether the definition from the terminology should be replaced by how you define it in Section 8.1. FWIW you might want to add the term "Target Environment" to the terminology section as well since you use it in various places in the document. > > Is there actually a difference in the message format between evidence and attestation result? For example, could an EAT token be used for encoding evidence and the attestation result? Evidence can travel from the attester to the verifier and to the relying party but the attestation result can only be omitted by the verifier. Maybe I missed it but I couldn't find a case where a message exchange is just between an attester and a relying party. Is this not possible? > > Ciao > Hannes > > -----Original Message----- > From: Henk Birkholz > Sent: Tuesday, June 16, 2020 11:14 AM > To: Hannes Tschofenig ; Laurence Lundblade > Cc: rats@ietf.org > Subject: Re: [Rats] draft-ietf-rats-architecture-04 > > Hi Hannes, > hi Laurence, > > I think "evidence" vs. "information" is a very good example that shows why the text stabilized in the shape it is in now. > > I am pretty sure that - and please speak up, if I am missing some vital point here - evidence is not simply information. At the very least there has to be a method to prevent (e.g. secure channel) or even detect (e.g. a signature) tampering with evidence. It also must originate from an attester, etc. So there are a lot of characteristics that are tied to evidence that make it at least a subclass of information. > > This is only a small arbitrary example to illustrate how that minimal set of definitions came to be. > > I totally agree that the definition of Evidence early on is not in alignment with the text (which I also think is better) anymore, but an issue about Evidence text is already in the tracker thanks to Kathleen and we will work on a more crisp description after the current open PR are settled. > > Viele Grüße, > > Henk > > > On 16.06.20 10:51, Hannes Tschofenig wrote: >> Hi Laurence, >> >> as you explain below it might help to replace some of the terms with >> others. I think the description does not make it easy to explain the >> concepts to those who should actually be using them. I did the review >> because I tried to explain the concept in a lecture to students. >> >> For example, the term “information†(or claims) sounds a lot simpler >> to understand less sophisticated than “evidenceâ€. Particularly, when >> the term “evidence†is then described as “A set of information about >> an Attester that is to be appraised by a Verifierâ€. (The definition >> later provided in the text is actually better but does not match the >> definition earlier in the document. Inconsistency likely caused by >> duplicating text throughout the document.) I earlier description is >> IMHO actually wrong. For example, why does the verifier needs to be >> present in all scenarios? In fact the models in Section 5 suggest >> otherwise. Why cannot a device send the claims to a relying party? The >> case where you need a verifier to interpret the claims may be a corner >> case in some environments. Why is the information about an attester? >> It better describe the characteristics of the device, as it is said in Section 8.1. >> >> If you look at the whole exercise from a 10,000 foot view then we are >> essentially using design patterns from the identity management space >> and apply it here with slightly different information. That’s in a >> nutshell where the models in Section 5 came from. >> >> Ciao >> >> Hannes >> >> *From:* Laurence Lundblade >> *Sent:* Tuesday, June 16, 2020 3:37 AM >> *To:* Hannes Tschofenig >> *Cc:* rats@ietf.org >> *Subject:* Re: [Rats] draft-ietf-rats-architecture-04 >> >> Hi Hannes, >> >> I think readability of the document could be improved and maybe some >> simplification would be OK, but I generally think most of the core >> entities and messages make sense. >> >> >> >> On Jun 9, 2020, at 12:13 AM, Hannes Tschofenig >> > wrote: >> >> Hi all >> >> I have re-read the architecture document and IMHO it is still far >> too complex. It makes the reader believe that attestation is some >> rocket-science concept, which it just isn’t. After such a long time >> the document is unnecessarily hard to read and understand. >> >> Here is the story as I see it. >> >> In the basic form a device puts a bunch of claims together and then >> signs them. The device is the attester. >> >> Then, this information is sent to another party, the relying party, >> which uses this information for some kind of decision making. >> >> Evidence is just the name for “this informationâ€. >> >> >> >> Of course, there is some prior setup that has to happen >> (provisioning of keys during manufacturing) and some assumptions >> have to be made as well (attestation code on the device has to be >> well protected, code isolation being used, etc.). >> >> Endorsements are the mechanism by which this happens. >> >> >> >> Then, there is the a complex case where the relying party cannot use >> the received information directly. This is most likely related to >> any form of software measurements. If you send a hash of a >> bootloader to some relying party you cannot really expect it to be >> used for anything. The reason the relying party cannot use that >> information directly is because it does not know what software the >> device is really supposed to be running. Hence, there is a need to >> consult another party (let’s call it the verifier). The assumption >> is that this party knows what the expected fingerprint is and hence >> what software is running on the device. >> >> Which is why the terms Verifier and Results are used. >> >> That’s all. There is not much more complexity to this topic. >> >> I personally would be happy without the Owners and the Appraisal >> Policies in the architecture as they seem obviously implied, but not >> enough to ask they be removed. >> >> So, where do all these terms come from? Appraisal policies, >> evidence, endorser, ... >> >> I would delete them and see whether the idea still gets across. >> >> I think more clear writing would help. >> >> (We could put text in https://www.scribens.com and look at the Flesch >> and Gunning Fog indexes for readability under statistics) >> >> LL >> >> >> >> Ciao >> >> Hannes >> >> IMPORTANT NOTICE: The contents of this email and any attachments are >> confidential and may also be privileged. If you are not the intended >> recipient, please notify the sender immediately and do not disclose >> the contents to any other person, use it for any purpose, or store >> or copy the information in any medium. Thank you. >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> >> IMPORTANT NOTICE: The contents of this email and any attachments are >> confidential and may also be privileged. If you are not the intended >> recipient, please notify the sender immediately and do not disclose >> the contents to any other person, use it for any purpose, or store or >> copy the information in any medium. Thank you. >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > From nobody Tue Jun 16 07:04:18 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42AF63A1579 for ; Tue, 16 Jun 2020 07:04:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dXquJ_Nmlwj5 for ; Tue, 16 Jun 2020 07:04:14 -0700 (PDT) Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11on2096.outbound.protection.outlook.com [40.107.223.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60CB73A1578 for ; Tue, 16 Jun 2020 07:04:14 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=c8+pjDgIuziwHnaX9/RL24ngjZ7TtpERUHolGME8U/VSq5lKmWMaCTKt1dIfB5/5Of+PRArVWkP93w7SPCYMUqPuo0+39+ixzQA4sCczt4dfwKD0VJ4m8xpiYhjSIctP6D3k9Yhh3pBL5hOzMiY0e2J6n+VjYabvZ0WdyEP9sSvQLJAI/8DjRLH3pFveNyZBnb8ot8i4fV5bn+UcUEU9L32+D9LLDEhjNIhY8L2yYuv4tlfX6l1dfQbVtGU4rssQjpgU8GH7U/RB8LXZmVfN+Qy09dUjsNGUDLuVypVrfnlMJT9GgTtIBChgjWCThKQv6Y4V4BChTzSzH7YYIyoCIg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YPAjwEATedQGprlKmGS+rvtD7Wzwv/DAk8Pjm43Z1/Y=; b=EN9POMSBwQeLk6pBAPm47Be8hvKGuSA0NdI+4GShxjWUmmICtaXB+bapx/JbziF3wgOsvuUUN3qYWGuvOvxemLe6B2IcLXO/LmLyfogCStFeRR0qjIQvRhbW6kgUNJ4igfBQeslFLJszKHBud55S8lqHDwYKbkFpyrZheTi4619hUGyIoHmmXpYHYsY7vxVRvjDTr+jTlrJWPSU6ujJCuh/3T02f2qGIexkFJO50leRGZhkrFg1TXWnDq59Aupfm1tANecUGREJh4f5sFoWrQAtEBp6+/iwxizUKfcSeYaovmmrCvV4Qqqs0zpjWY7kB2ChQoojVojlaqqOodre6kA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YPAjwEATedQGprlKmGS+rvtD7Wzwv/DAk8Pjm43Z1/Y=; b=eonsJqdjBBdlzQ8kZPXS5QKQWiK1hT5B+G3PXUEPzbPXz4YxQxC1UCtTwxve3hz9bd8m7dlYUShu8qsg1u6syPRX1P6fyg1WMh7nRejjTcyVjivxbade/O//eqTMsqSNfXxqZ8wSknwcLOxm12CxuGSVt70diXqW6Ya2ydtjUH0= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1811.namprd21.prod.outlook.com (2603:10b6:207:1e::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.8; Tue, 16 Jun 2020 14:04:12 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::29cb:295d:97bc:3f7f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::29cb:295d:97bc:3f7f%9]) with mapi id 15.20.3131.009; Tue, 16 Jun 2020 14:04:12 +0000 From: Dave Thaler To: Hannes Tschofenig , "Oliver, Ian (Nokia - FI/Espoo)" , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 Thread-Index: AdZDxzg1dMUxu36vSHG7cRcC1apYowAH6M3Q Date: Tue, 16 Jun 2020 14:04:12 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-06-16T14:04:10Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=f0b1067e-0911-4412-a97e-0f67d1cf4afa; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: arm.com; dkim=none (message not signed) header.d=none;arm.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:16f0:163:b41f:2414:db3a] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 0ea843be-2365-47ef-d755-08d811fe258e x-ms-traffictypediagnostic: BL0PR2101MB1811: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 04362AC73B x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(396003)(366004)(136003)(376002)(346002)(186003)(110136005)(478600001)(33656002)(316002)(66946007)(8990500004)(66556008)(10290500003)(66446008)(64756008)(166002)(66574015)(53546011)(71200400001)(8676002)(66476007)(76116006)(55016002)(6506007)(9686003)(8936002)(83380400001)(7696005)(966005)(4326008)(86362001)(82960400001)(82950400001)(52536014)(2906002)(5660300002)(12290500007)(15398625002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: KOj5Ou7SmUVc9sfw//JnTkeDPj3m5Ad9yOcts0JE8QQAmR4n8pTISXdiQVng2ufNMiIOS8fUpuqO9xCbOsnrJtESwdFZFx9PDX4LMQun99a71RmTMpu0cLmba3rJg76LThujYKIhB6mDJTI264waFaTPwS+tYFQJdMIgJvc4XMy200/TaiaUV4yGItJmthtkkSKbNrQY3d6dRl6dhD7if+QNeu3Q/7c10TML2Q4Ed/90pFkXSmoDjantUODQRZY2z8oY6ri8SWFsj63NGJK2d8caDxwUuGq6ys6d3uqE+k2J5MIYcLnLum/CoXF5vFC3R0zeNQa0y9nRv22m+9Zq/JxiJkU3G08vVSjtHLZULwQAMF5gnRv2knc32MsZhvoR7ZDcFQgvRTAM7ZIojtTPF1CO2FA408401yCfkITSoQtNuzxOpvIm91o/7xBulFqfzRDJBa2eKTuyP+BOyRB/rOhqd9DMZAIHhRajNjArwuRU/nGbrpOsMsTOL1FkVhNS+z9z/GzXMb0q0Fw5mm19wTmerV9d/iFmvRSv5LGRB1Z3R0I/77LWVbvrJVlI5xAk x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB10272130B6B053169384CAA5A39D0BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0ea843be-2365-47ef-d755-08d811fe258e X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2020 14:04:12.1059 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Bug6Wzt/WFIUiXLulHHNILt9x587MKQ3M1fgVqamSoFwgEhQmSovSMAYfVcV+2qYAw16QdTSOTJDQHkv16ylOzj0SEAN2A/vyU3TnSm4aQk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1811 Archived-At: Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 14:04:16 -0000 --_000_BL0PR2101MB10272130B6B053169384CAA5A39D0BL0PR2101MB1027_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks for the feedback. One reference we can add is https://trustedcomputinggroup.org/wp-content/uploads/TCG_TPM2_r1p62_Part1_A= rchitecture_7july2020.pdf section 43 (especially 43.3). Dave From: RATS On Behalf Of Hannes Tschofenig Sent: Tuesday, June 16, 2020 3:26 AM To: Hannes Tschofenig ; Oliver, Ian (Nokia - FI/= Espoo) ; Michael Richardson Cc: rats@ietf.org Subject: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-arch= itecture-04 Hi RATS architecture authors, Could the authors of the use case explain the watchdog use case a bit more? I do not understand how this is supposed to work. How is the device allowed= to reboot when it sends attestation information to a remote server? If malware prevents the device from rebooting, as the text indicates, why d= oesn't that malware also prevent the interaction with the attestation serve= r (for example, pretending that network connectivity is down)? Ciao Hannes From: RATS > On Behalf = Of Hannes Tschofenig Sent: Tuesday, June 9, 2020 9:31 PM To: Oliver, Ian (Nokia - FI/Espoo) >; Michael Richardson > Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Hi Ian, can you provide a bit more details about what your domain is? Ciao Hannes From: Oliver, Ian (Nokia - FI/Espoo) > Sent: Tuesday, June 9, 2020 9:27 PM To: Michael Richardson = >; Hannes Tschofenig > Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Just to add to that, the watchdog case is relevant in our domain Ian -- Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 ________________________________ From: Michael Richardson Sent: Tuesday, June 09, 2020 22:00 To: Hannes Tschofenig Cc: rats@ietf.org Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04 Hannes Tschofenig > wrote: > Regarding the hardware watchdog I just feel it is a made-up use > case. Is this something people actually want to use in practice? > Today's use of hardware watchdogs aim to deal with non-security use > cases (mostly dealing with crashing software). We've heard from Enterprise people that this is important. It's not a constrained case. -- Michael Richardson >, S= andelman Software Works -=3D IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_BL0PR2101MB10272130B6B053169384CAA5A39D0BL0PR2101MB1027_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks for the feedback.  One reference we can = add is

https://truste= dcomputinggroup.org/wp-content/uploads/TCG_TPM2_r1p62_Part1_Architecture_7j= uly2020.pdf

section 43 (especially 43.3).

 

Dave=

 

From: RATS <rats-bounces@ietf.org> O= n Behalf Of Hannes Tschofenig
Sent: Tuesday, June 16, 2020 3:26 AM
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>; Oliver, Ian= (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.com>; Michael Richard= son <mcr+ietf@sandelman.ca>
Cc: rats@ietf.org
Subject: [Rats] watchdog use case ... RE: Use cases in draft-ietf-ra= ts-architecture-04

 

Hi RATS architecture authors,

 

Could the authors of the use case explain the watchd= og use case a bit more?

 

I do not understand how this is supposed to work. Ho= w is the device allowed to reboot when it sends attestation information to = a remote server?

If malware prevents the device from rebooting, as th= e text indicates, why doesn’t that malware also prevent the interacti= on with the attestation server (for example, pretending that network connec= tivity is down)?

 

Ciao

Hannes

 

From: RATS <rats-bounces@ietf.org> On Behalf Of Hannes Tschofenig
Sent: Tuesday, June 9, 2020 9:31 PM
To: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.com>; Michael Richar= dson <mcr+ietf@sandelma= n.ca>
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04

 

Hi Ian,

 

can you provide a bit more details about what your d= omain is?

 

Ciao

Hannes

 

From: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.co= m>
Sent: Tuesday, June 9, 2020 9:27 PM
To: Michael Richardson <mcr+ietf@sandelman.ca>; Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04

 

Just to add to that, the watchdog case is relevant in o= ur domain

 

Ian

&n= bsp;

--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff=

Nokia Bell Labs

+358 50 483 6237

&n= bsp;

From= : Michael Richardso= n
Sent: Tuesday, June 09, 2020 22:00
To: Hannes Tschofenig
Cc: rats@ietf.org
Subject: Re: [Rats] Use cases in draft-ietf-rats-architecture-04

&n= bsp;


Hannes Tschofenig <Hannes.T= schofenig@arm.com> wrote:
    > Regarding the hardware watchdog I just feel it is a= made-up use
    > case. Is this something people actually want to use= in practice?
    > Today's use of hardware watchdogs aim to deal with = non-security use
    > cases (mostly dealing with crashing software).

We've heard from Enterprise people that this is important.
It's not a constrained case.

--
Michael Richardson <mcr+= ;IETF@sandelman.ca>, Sandelman Software Works
 -=3D IPv6 IoT consulting =3D-

IMPORTANT NOTICE: The contents of this email and any= attachments are confidential and may also be privileged. If you are not th= e intended recipient, please notify the sender immediately and do not discl= ose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Th= ank you.

IMPORTANT NOTICE: The contents of this email and= any attachments are confidential and may also be privileged. If you are no= t the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it f= or any purpose, or store or copy the information in any medium. Thank you.

--_000_BL0PR2101MB10272130B6B053169384CAA5A39D0BL0PR2101MB1027_-- From nobody Tue Jun 16 13:19:46 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 926EB3A0925 for ; Tue, 16 Jun 2020 13:19:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H_DtI2erjJMs for ; Tue, 16 Jun 2020 13:19:42 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D0393A0921 for ; Tue, 16 Jun 2020 13:19:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 8D91F38A40; Tue, 16 Jun 2020 16:17:06 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id KQ7rAyXltJ1o; Tue, 16 Jun 2020 16:17:06 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id E858838A20; Tue, 16 Jun 2020 16:17:05 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 518B5AB9; Tue, 16 Jun 2020 16:19:40 -0400 (EDT) From: Michael Richardson To: Hannes Tschofenig cc: "Oliver\, Ian \(Nokia - FI\/Espoo\)" , "rats\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 20:19:46 -0000 --=-=-= Content-Type: text/plain Hannes Tschofenig wrote: > Could the authors of the use case explain the watchdog use case a bit > more? Sure. Dave's reference to the TCG "Authenticated Countdown Timer" is rather detailed, but perhaps misses the forest for the trees. Perhaps I can be a bit more concise. Ian, please let us know if this describes your situation as well. > I do not understand how this is supposed to work. How is the device > allowed to reboot when it sends attestation information to a remote > server? There are usual three parties: Attester, Verifier, Relying Party. The Attester (secure enclave/TPM/etc.) collects Evidence as to health and sends this to a remote Verifier. The Verify creates an Attestation Result as normal. But, in the case, the Relying Party is the Watch Dog timer in the TPM/secure enclave itself. So the Attestation Results are returned to the PC, and provided to the enclave. If the watch dog does not receive regular, and fresh, Attestation Results as to the systems' health, then it forces a reboot. > If malware prevents the device from rebooting, as the text indicates, > why doesn't that malware also prevent the interaction with the > attestation server (for example, pretending that network connectivity > is down)? The arrangement is that of a deadman's switch: if the malware were to prevent the communication, then the watch dog would go off. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl7pKVsACgkQgItw+93Q 3WXd/ggAis60wj4Mti+W9j9obdwzRiUBpX7VfsGyk6i1m0JHQKUk/6ymfEQSo4bc M7ID+vgwXZrWihPoAk8xOZbWyATQmzMTNiAR+XpqJm8BlsWt5G5Qp9qAPEpLZWil Za8zcPio8Ner5IA0EZTVaIX409hP9qqFS4QO7/sf1VpR/tf7Zhhhk67feL1gok7T /ByGzziWBjjXxNfR+4wQAxJeTwDDXRXtAdZjzadPUjhl+uHTjT7JeOKxAkOk6QT+ QlTviPOfWSBuYgAGAObHkjHaFHn9hMP/laW/pgdtxZhYYg0VKQJUTPDREj3OV3ga Z20I5M8kO3SdZdKYpM/+rG2rxRxGsg== =CjA6 -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Jun 17 05:17:15 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B03B83A0A4D for ; Wed, 17 Jun 2020 05:17:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=3U2qAt8i; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=3U2qAt8i Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OoEjDFdKTR_1 for ; Wed, 17 Jun 2020 05:17:11 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150085.outbound.protection.outlook.com [40.107.15.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14EDD3A0A47 for ; Wed, 17 Jun 2020 05:17:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ewFksbx0QR3E4vsphrw0D+1U9hoN9Q3pLzF1jJAMCZA=; b=3U2qAt8ioCLS93tWfPmmb4W8UyXlcEhXXRAMor6nUGnoOsrFzCUMrSWdNyAHjS32H0eONerBeTBO70lGpXXJsksWRd2YVArdINigvZRudijnxhqG0DQ9ztzaHNwfpGUPB4cu/3X1Bq+BF/7YtYsZ1ElC41FpsE7geIXy5QhKW1k= Received: from MR2P264CA0102.FRAP264.PROD.OUTLOOK.COM (2603:10a6:500:33::18) by AM0PR08MB5188.eurprd08.prod.outlook.com (2603:10a6:208:165::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.21; Wed, 17 Jun 2020 12:17:08 +0000 Received: from VE1EUR03FT016.eop-EUR03.prod.protection.outlook.com (2603:10a6:500:33:cafe::86) by MR2P264CA0102.outlook.office365.com (2603:10a6:500:33::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.21 via Frontend Transport; Wed, 17 Jun 2020 12:17:08 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT016.mail.protection.outlook.com (10.152.18.115) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22 via Frontend Transport; Wed, 17 Jun 2020 12:17:07 +0000 Received: ("Tessian outbound 830790f176a8:v59"); Wed, 17 Jun 2020 12:17:07 +0000 X-CR-MTA-TID: 64aa7808 Received: from 0adebdd1e55a.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 56E05FD9-97F1-4F82-A957-65EA31E4B295.1; Wed, 17 Jun 2020 12:17:02 +0000 Received: from EUR05-AM6-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 0adebdd1e55a.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 17 Jun 2020 12:17:02 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DXMBxl74hqzdGDnT9gOPHZIJH9u4wVGSFc5SB9eXPGJk2CZ4UFgvQHiWV3tr2TzPNjn+dUyrv0mUUcwdo6uMTVf0RnzlR61ekyriIXWsvrltE+yqhSc9iIbpIfPanVSPC/TjpF0LYlp+LT8J6V0mxNc8XmYQ/TDiZ6gOGIx6gkEX7N7aNgelsgjoW1exUvZSePP9rDGoItqP33wudeC3T0y+QUECT/LVzEFxf6CthhT+YOXnKp4rkfSKzyf7k9OnTTrTBA8SDNxSbPmDXQp8SpuMhBcmf2U/qpcoxx2mf6QCeX47kmObhhMo5ORMQEYm8lrvXuxh6wvWV8IhQWEe4Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ewFksbx0QR3E4vsphrw0D+1U9hoN9Q3pLzF1jJAMCZA=; b=XUuILYoeN0u6CgytRDAF2FRMiFUQRxmpjOsmKkWkxPI2fBuEnm1FQ53wlgmUzraovn84XxcGPbe79lxCIHdsnsS9qXwqGLOntjsd+nKrb8WkH8NAAUpMKF6DK0VUtj3iF+WmcB7H9FhqdKo7kZBG4AHbwo2X3R99RQbOhHBcs3L+Dzu8CW+Mnm1v02ydeYV5DLABsfE28nhJVNUlaM2l68AQS8wDVSQjo7EfdZFhe6he/Dzq1Rs5r6u+yeyOQvv6nhNeHO1i7iKb7p/CuwKIIntygDVc9bC5X+pSTw9jfXjnaj1iRATHp9BV2MG0E/MS8IBklwDehuGNtdSQ8amWvA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ewFksbx0QR3E4vsphrw0D+1U9hoN9Q3pLzF1jJAMCZA=; b=3U2qAt8ioCLS93tWfPmmb4W8UyXlcEhXXRAMor6nUGnoOsrFzCUMrSWdNyAHjS32H0eONerBeTBO70lGpXXJsksWRd2YVArdINigvZRudijnxhqG0DQ9ztzaHNwfpGUPB4cu/3X1Bq+BF/7YtYsZ1ElC41FpsE7geIXy5QhKW1k= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB3169.eurprd08.prod.outlook.com (2603:10a6:208:59::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22; Wed, 17 Jun 2020 12:17:01 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3109.021; Wed, 17 Jun 2020 12:17:01 +0000 From: Hannes Tschofenig To: Michael Richardson CC: "Oliver, Ian (Nokia - FI/Espoo)" , "rats@ietf.org" Thread-Topic: watchdog use case ... RE: [Rats] Use cases in draft-ietf-rats-architecture-04 Thread-Index: AdZDxzg1dMUxu36vSHG7cRcC1apYowAVD54AACALsPA= Date: Wed, 17 Jun 2020 12:17:00 +0000 Message-ID: References: <12088.1592338780@localhost> In-Reply-To: <12088.1592338780@localhost> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 4953195f-630d-4f44-b9ff-b5de390f35b4.1 x-checkrecipientchecked: true Authentication-Results-Original: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; x-originating-ip: [80.92.122.58] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 8b384341-0488-44e6-1d3f-08d812b85abc x-ms-traffictypediagnostic: AM0PR08MB3169:|AM0PR08MB5188: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:9508;OLM:10000; x-forefront-prvs: 04371797A5 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: Qe7aEV7ramHub//w3WRGwqrEErIjujjj/OSP9QOCpnXT97BaBp3U+CjOQ1ppEboEVudR/adubL032Omw6ME2NbcRQDwX5T9uPIU+nqrEGbRS3M5a99YpmdpBh0H0QSxZDyzlMwiDuWHxfQpon+y7rKWUwt/x/oAAw+mEzC8h6AGUYhAeYqPO71kUd8JYTcWkG0+G1dIXCbuRqC0Aq8wr+gHw+RoI+BLA4DNmKskUKbs+vMscTZseu+N9XMg7DgHwoxz3BHROjCgg9FpBAlq9J9ewXmBddZB8UFN4GakYUMej+9AIZwpNB1mr3nMt/HQGmves5NJOxSkRO6TDmzrucA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(346002)(136003)(366004)(39860400002)(376002)(5660300002)(316002)(52536014)(26005)(6506007)(83380400001)(2906002)(53546011)(478600001)(86362001)(8936002)(33656002)(66446008)(66946007)(7696005)(66574015)(186003)(76116006)(4326008)(71200400001)(55016002)(54906003)(66476007)(9686003)(66556008)(8676002)(64756008); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 98rcwzXSmvd5hbRluHjQZpOX0RPAgiWS1gpY8SrNPY5wwqXk2jLrgG4LufusT6P749Wa1zaMHp8b8gj6SYZZr+On9W5XIVG0jvcGq3du1gv2hmAe6x1sfdi3+ZLDj8yvUxTfpKdF7AzZ/e37A8ThfqyNc4Sh0PbzwuMqyxGhhBoPDBtMNW9G1ezT4hvlOShrvn4FjUADwPL++W3ksuphNXIkHlYvZctBant2lEcJUEMN5F1bnHb4wZEM1jeSmBgIdjGZw9/etDRE9jvAqVfPwY8ZmfcY7dzaSX8onDtCnvsxtcQVCLEIvRuUpaydf9NWmot1WeCHIo1yOSUqinSr744Sj+hlrCYwmK/P7L7uvTGCY2iRtEE/3fA9UXqGaLMS9Pz2XUfKDqMttz6XbR+ratY4h9ELb9NHUbMGTf9aSIc8ueFlWA5PC9bGgyfMlN1bAyu0whjCN+/5Yai+dnstAoi70inJkA02r8r818iIAoY= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3169 Original-Authentication-Results: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT016.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(136003)(346002)(39860400002)(376002)(46966005)(33656002)(7696005)(8936002)(8676002)(83380400001)(54906003)(6862004)(86362001)(478600001)(4326008)(55016002)(316002)(52536014)(186003)(26005)(5660300002)(6506007)(356005)(81166007)(47076004)(53546011)(336012)(70586007)(70206006)(82740400003)(66574015)(9686003)(82310400002)(36906005)(2906002); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: a94ebb9f-05d0-46dd-f481-08d812b856c3 X-Forefront-PRVS: 04371797A5 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: wfzMCorokGxhRGjDm27HMvSQycn8G7j4YVqLJqFXFO1ztkA6V2HJkfTGbQjUqqi11hEX76tcpX87k9XFfWmAO5sjOtEWhZtDBgHIpenWuiswGyYn0R4gECmu7Liqry7yH4d63gdk6a6Ea9QmOCBmYgoUr6d9d8q7FsHBPXZywuOcrY7jxlOS7O1Dh9dkCM7UPyxK1b95xscgg8zK0E72Lr8MfWRzJFJAReRGV+Po+X/A0U/uH+qluqZQ6bNmW3Fk11IQf/DOxd7h8PyyRS6rQhr4DUlCeDTSlFkmuToT1/B+keVV5L+6XYKj5MySQRKB+uO2q9pbeh2EhBHiRgK28yQ2meGD9lyddduVqJmQTmaMlTu/cuoiZxN8rM14aWmJLrXaZeDasrp/hcPHK9L6sg== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jun 2020 12:17:07.7325 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 8b384341-0488-44e6-1d3f-08d812b85abc X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB5188 Archived-At: Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jun 2020 12:17:14 -0000 Hi Michael, thanks for the reference to the TCG "Authenticated Countdown Timer" spec. I= have not seen that spec before. It says: " A typical example for the use of an ACT is as a watchdog timer that will ca= use a platform reset when the timer reaches zero (expires). In a system using an ACT, a periodic platform action outsid= e the TPM indicates that the timeout should be set anew using TPM2_ACT_SetTimeout(). The most common reason why timeout= is not set anew is that the local system is not behaving properly because of some type of corruption (either = inadvertent or malicious). The intent of the timer is that, in the absence of a properly authorized timeout extensio= n, the platform would be reset, putting it back into a known state with the expectation that the corruption can be removed. " Thanks for the description of a possible message flow. This makes much more= sense to me now. In fact, we have the building blocks to get this working already when you c= ombine the EAT token (for the attestation), the CWT for authorization (as m= entioned in the TPM spec above), and SUIT (for the update of the software t= hat is needed to fix the system). When we look at TEEP then we actually see= these building blocks combined to get this use case working via a standard= ized protocol. Now I am excited about this and maybe someone in the RATS/TEEP group wants = to prototype it. Ciao Hannes -----Original Message----- From: Michael Richardson Sent: Tuesday, June 16, 2020 10:20 PM To: Hannes Tschofenig Cc: Oliver, Ian (Nokia - FI/Espoo) ; rats@i= etf.org Subject: Re: watchdog use case ... RE: [Rats] Use cases in draft-ietf-rats-= architecture-04 Hannes Tschofenig wrote: > Could the authors of the use case explain the watchdog use case a bit > more? Sure. Dave's reference to the TCG "Authenticated Countdown Timer" is rather detai= led, but perhaps misses the forest for the trees. Perhaps I can be a bit more concise. Ian, please let us know if this describes your situation as well. > I do not understand how this is supposed to work. How is the device > allowed to reboot when it sends attestation information to a remote > server? There are usual three parties: Attester, Verifier, Relying Party. The Attester (secure enclave/TPM/etc.) collects Evidence as to health and s= ends this to a remote Verifier. The Verify creates an Attestation Result as normal. But, in the case, the Relying Party is the Watch Dog timer in the TPM/secur= e enclave itself. So the Attestation Results are returned to the PC, and p= rovided to the enclave. If the watch dog does not receive regular, and fresh, Attestation Results a= s to the systems' health, then it forces a reboot. > If malware prevents the device from rebooting, as the text indicates, > why doesn't that malware also prevent the interaction with the > attestation server (for example, pretending that network connectivity > is down)? The arrangement is that of a deadman's switch: if the malware were to preve= nt the communication, then the watch dog would go off. -- Michael Richardson , Sandelman Software Works -=3D = IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Wed Jun 17 05:21:52 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4115E3A00B3 for ; Wed, 17 Jun 2020 05:21:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0lLIi_uGyuV8 for ; Wed, 17 Jun 2020 05:21:48 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBC883A0062 for ; Wed, 17 Jun 2020 05:21:46 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2HQBQAtCupe/xmnZsBmHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUoCgXmBHoEzCoQakQiaFIFfCQsBAQEBAQEBAQEGAQEYCwo?= =?us-ascii?q?CBAEBAoFOgnUCghwBJDgTAhABAQYBAQEBAQYEAgKGFwYnDEIWAYJ8fgEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAQEBAQEWAkNVEgEBHQEBAQEDAQEhDwEFNgIJDAQJAhEBAwE?= =?us-ascii?q?BAQICJgICJyACBggGAQwBBQIBAYMiAYJ8BAuabJsEdoEyhVGDcIE6BoEOKgG?= =?us-ascii?q?LPIEPDw+BTD8maycPglo+glwBAYEhCQESAQcBAUSCaIJgBI51gyyhH1ooB4F?= =?us-ascii?q?YgQWBBgQLkj6FQAUKHYJwNYhlhG0GjWuRHYFjnFACBAIJAhWBaoEJcE0kT4J?= =?us-ascii?q?pUBcCDVWJM4RNbgECh12FRHI3AgYBBwEBAwl8jHeBbAGBEAEB?= X-IPAS-Result: =?us-ascii?q?A2HQBQAtCupe/xmnZsBmHAEBAQEBAQcBARIBAQQEAQFAg?= =?us-ascii?q?UoCgXmBHoEzCoQakQiaFIFfCQsBAQEBAQEBAQEGAQEYCwoCBAEBAoFOgnUCg?= =?us-ascii?q?hwBJDgTAhABAQYBAQEBAQYEAgKGFwYnDEIWAYJ8fgEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEWAkNVEgEBHQEBAQEDAQEhDwEFNgIJDAQJAhEBAwEBAQICJgICJyACB?= =?us-ascii?q?ggGAQwBBQIBAYMiAYJ8BAuabJsEdoEyhVGDcIE6BoEOKgGLPIEPDw+BTD8ma?= =?us-ascii?q?ycPglo+glwBAYEhCQESAQcBAUSCaIJgBI51gyyhH1ooB4FYgQWBBgQLkj6FQ?= =?us-ascii?q?AUKHYJwNYhlhG0GjWuRHYFjnFACBAIJAhWBaoEJcE0kT4JpUBcCDVWJM4RNb?= =?us-ascii?q?gECh12FRHI3AgYBBwEBAwl8jHeBbAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.73,522,1583190000"; d="scan'208";a="22511417" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Jun 2020 14:21:44 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AHBwC3Cepe/1lIDI1mHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUoCgXkvbwNUMCwKhBqRCJoUgWgLAQMBAQEBAQYBARgLCgI?= =?us-ascii?q?EAQGBUIJ1AoIaAiQ4EwIQAQEFAQEBAgEGBG2FLgYnDEIWAYUZAQEBAQMBASE?= =?us-ascii?q?PAQU2AgkMBAkCEQEDAQEBAgImAgInIAIGCAYBDAEFAgEBgyIBgwALmmebBHa?= =?us-ascii?q?BMoVRg3GBOgaBDioBizyBDw8PgUw/JmsnD4JaPoJcAQGBIQkBEgEHAQFEgmi?= =?us-ascii?q?CYASOdYMsoR9aKAeBWIEFgQYEC5I+hUAFCh2CcDWIZYRtBo1rkR2BY5xQAgQ?= =?us-ascii?q?CCQIVgWoiZnBNJE+CaVAXAg1ViTOETW4BAoddhURBMTcCBgEHAQEDCXyMd4F?= =?us-ascii?q?sAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.73,522,1583190000"; d="scan'208";a="84341304" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Jun 2020 14:21:41 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 05HCLeKg016681 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 17 Jun 2020 14:21:40 +0200 Received: from [192.168.16.50] (79.234.115.101) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 17 Jun 2020 14:21:35 +0200 To: Hannes Tschofenig , Michael Richardson CC: "Oliver, Ian (Nokia - FI/Espoo)" , "rats@ietf.org" References: <12088.1592338780@localhost> From: Henk Birkholz Message-ID: <53a1c6c3-5e85-cb04-b10b-e0d8d5b5ded5@sit.fraunhofer.de> Date: Wed, 17 Jun 2020 14:21:35 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.115.101] Archived-At: Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jun 2020 12:21:51 -0000 Hi Hannes, the fact remains that the corresponding use case text alone was not enough to get you exited (I am glad that you are now *g*). Are you in a position to maybe provide a proposal how to rephrase the use case description in a way that would have helped you from the very start? Viele Grüße, Henk On 17.06.20 14:17, Hannes Tschofenig wrote: > Hi Michael, > > thanks for the reference to the TCG "Authenticated Countdown Timer" spec. I have not seen that spec before. > > It says: > > " > A typical example for the use of an ACT is as a watchdog timer that will cause a platform reset when the timer reaches > zero (expires). In a system using an ACT, a periodic platform action outside the TPM indicates that the timeout should > be set anew using TPM2_ACT_SetTimeout(). The most common reason why timeout is not set anew is that the local > system is not behaving properly because of some type of corruption (either inadvertent or malicious). The intent of > the timer is that, in the absence of a properly authorized timeout extension, the platform would be reset, putting it back > into a known state with the expectation that the corruption can be removed. > " > > Thanks for the description of a possible message flow. This makes much more sense to me now. > > In fact, we have the building blocks to get this working already when you combine the EAT token (for the attestation), the CWT for authorization (as mentioned in the TPM spec above), and SUIT (for the update of the software that is needed to fix the system). When we look at TEEP then we actually see these building blocks combined to get this use case working via a standardized protocol. > > Now I am excited about this and maybe someone in the RATS/TEEP group wants to prototype it. > > Ciao > Hannes > > -----Original Message----- > From: Michael Richardson > Sent: Tuesday, June 16, 2020 10:20 PM > To: Hannes Tschofenig > Cc: Oliver, Ian (Nokia - FI/Espoo) ; rats@ietf.org > Subject: Re: watchdog use case ... RE: [Rats] Use cases in draft-ietf-rats-architecture-04 > > > Hannes Tschofenig wrote: > > Could the authors of the use case explain the watchdog use case a bit > > more? > > Sure. > Dave's reference to the TCG "Authenticated Countdown Timer" is rather detailed, but perhaps misses the forest for the trees. > Perhaps I can be a bit more concise. > Ian, please let us know if this describes your situation as well. > > > I do not understand how this is supposed to work. How is the device > > allowed to reboot when it sends attestation information to a remote > > server? > > There are usual three parties: Attester, Verifier, Relying Party. > > The Attester (secure enclave/TPM/etc.) collects Evidence as to health and sends this to a remote Verifier. > > The Verify creates an Attestation Result as normal. > > But, in the case, the Relying Party is the Watch Dog timer in the TPM/secure enclave itself. So the Attestation Results are returned to the PC, and provided to the enclave. > > If the watch dog does not receive regular, and fresh, Attestation Results as to the systems' health, then it forces a reboot. > > > If malware prevents the device from rebooting, as the text indicates, > > why doesn't that malware also prevent the interaction with the > > attestation server (for example, pretending that network connectivity > > is down)? > > The arrangement is that of a deadman's switch: if the malware were to prevent the communication, then the watch dog would go off. > > -- > Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Jun 17 05:34:05 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DFBD3A0420 for ; Wed, 17 Jun 2020 05:34:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=Zre1tUFl; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=Zre1tUFl Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zAvcr0n1kFXk for ; Wed, 17 Jun 2020 05:34:02 -0700 (PDT) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70044.outbound.protection.outlook.com [40.107.7.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7679B3A0415 for ; Wed, 17 Jun 2020 05:34:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3zTXCZpPBv+KhwLeSS1jcw6JygX5Z7O2EYgW4DuX398=; b=Zre1tUFldGrsqDfYk1XGUgMDP35oQqjJeyB6QkYWWMvl2iCn/lzMNx/EtYkYzUNmTudfWEppDQe+y1uSPedR9LtJTp+6v4fodRY8OIC8f6QABqHMjnmk0y35+CgRPB4aKYIzSOKUV9vJCsC32kQ2afS26G8Nft7um/2ZDi1FjcM= Received: from AM0PR01CA0083.eurprd01.prod.exchangelabs.com (2603:10a6:208:10e::24) by DBBPR08MB4521.eurprd08.prod.outlook.com (2603:10a6:10:cd::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18; Wed, 17 Jun 2020 12:33:58 +0000 Received: from VE1EUR03FT019.eop-EUR03.prod.protection.outlook.com (2603:10a6:208:10e:cafe::59) by AM0PR01CA0083.outlook.office365.com (2603:10a6:208:10e::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22 via Frontend Transport; Wed, 17 Jun 2020 12:33:58 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT019.mail.protection.outlook.com (10.152.18.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22 via Frontend Transport; Wed, 17 Jun 2020 12:33:58 +0000 Received: ("Tessian outbound 13f833fb3c6d:v59"); Wed, 17 Jun 2020 12:33:58 +0000 X-CR-MTA-TID: 64aa7808 Received: from fb3806623fa5.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id E88702AF-F419-4036-B324-5AE9EE0FEA6B.1; Wed, 17 Jun 2020 12:33:53 +0000 Received: from EUR01-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id fb3806623fa5.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 17 Jun 2020 12:33:53 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ki6koGgYsaaN00TT2W9Hfz6Sy3r2z7zamtR+agpReVOoeR+xfIESWws9h780ECNzWiBB9ve1KbCBXJvLRkpKFyf6lki+uRJN24HDmRMrZblJVnWZgNLGXgx+o/E4iA98ffAlJEr4JRDuw6SU1XS+QUcPmFU7tTeAUvvssiEvuCSSfGb/lS4GwNmwvslVorcoPookXdW305eIQ+5AIkd3ErKHBkqNloaptjbP9d+Saf1VyRCJuZSKPOFuPVNnXH00TZZhKGV6hxfOKt//LLv+r9HOfqVBcSrOXCTuhtG8tlASJ36Kza8ZvsrBRHWSrJdrCkliPryA3hIyeMMS3RcCJw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3zTXCZpPBv+KhwLeSS1jcw6JygX5Z7O2EYgW4DuX398=; b=HFvvfumd9g4itrywXLtNwKGlx8wFVLS0TG4SMrwBsUwnN0eBCqawTZoJgNzh4DHLD6q+OGIZe8dbLkWDYUFZjptSMiIKGqTkHPXEGFO4EVpweCnIl8dNxAxn88vOYQCRyvNzaM2jt814c7H+TFxZ8gbhfTufEgeBvLBzDwzjmAY+GY41xdVo6In/g0k6QUvYnWP78aqIE1tUTeGZ9cCf04nxcoFRtiRb+aYOTX4I2c2iAtY6gO7+tVTtYAOY3GU+YkhEICubyTba+rPCpap6G8XD3qyxAetpjqcKB5hDhJFndqwELaD/2+Nofib4IJQkUu7738AfmGtM8zJ8vXHRww== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3zTXCZpPBv+KhwLeSS1jcw6JygX5Z7O2EYgW4DuX398=; b=Zre1tUFldGrsqDfYk1XGUgMDP35oQqjJeyB6QkYWWMvl2iCn/lzMNx/EtYkYzUNmTudfWEppDQe+y1uSPedR9LtJTp+6v4fodRY8OIC8f6QABqHMjnmk0y35+CgRPB4aKYIzSOKUV9vJCsC32kQ2afS26G8Nft7um/2ZDi1FjcM= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB4227.eurprd08.prod.outlook.com (2603:10a6:208:13d::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22; Wed, 17 Jun 2020 12:33:51 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::39f5:e4d9:51ff:eae%7]) with mapi id 15.20.3109.021; Wed, 17 Jun 2020 12:33:51 +0000 From: Hannes Tschofenig To: Henk Birkholz , Michael Richardson CC: "Oliver, Ian (Nokia - FI/Espoo)" , "rats@ietf.org" Thread-Topic: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 Thread-Index: AQHWRKHogdWuHIa0MkSpF8nyrgo23ajcvSmg Date: Wed, 17 Jun 2020 12:33:51 +0000 Message-ID: References: <12088.1592338780@localhost> <53a1c6c3-5e85-cb04-b10b-e0d8d5b5ded5@sit.fraunhofer.de> In-Reply-To: <53a1c6c3-5e85-cb04-b10b-e0d8d5b5ded5@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 190910d7-ae27-4b3a-b8e0-28c41bda4575.1 x-checkrecipientchecked: true Authentication-Results-Original: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; x-originating-ip: [80.92.122.58] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 3658f049-d0ce-40c6-349d-08d812bab51b x-ms-traffictypediagnostic: AM0PR08MB4227:|DBBPR08MB4521: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:9508;OLM:9508; x-forefront-prvs: 04371797A5 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: EEASg8vmbMqmtJGXSZEyL5Hfqqh4odbL3S1nzr+oBMT9abh5poqpdwwzCTowM/NBrm29Oet66eL3WuoAN8sve/AHqgNM9GhrZEQ1P+Jr9P5PKwlAsL3s0bner18sx28ZkxgidYxaJr1WCLnDhD9vgEyf7couEABsjHqG4zpksqXcVAQMI5Eujt8raANLbYPxWTFiBy5VuDYrXv7ZwXMLKdVdHIaQYceYDGw7MIhbZ4ssyXCNrX6scoyhR/Lqo1RimztPwfFmQv/T2wEDdmGnhYXbWRmycoGRRMPG7GUCf9TxK4AiTwZvcwh9Fpghk0ShOiLxoWDP71EOIvyRaYOiarKbtttpO5jtemoctyZREu0PLXMfMMABuR2nL/AT2yJqBnLbb94/dOwZB5gt52B2Zg== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39850400004)(366004)(346002)(396003)(136003)(376002)(4326008)(7696005)(478600001)(966005)(9686003)(186003)(26005)(71200400001)(53546011)(316002)(55016002)(6506007)(54906003)(110136005)(86362001)(8936002)(33656002)(8676002)(66574015)(83380400001)(66476007)(64756008)(5660300002)(76116006)(2906002)(66556008)(66946007)(52536014)(66446008); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: bJoO/52v+6qWgtnz7/J8/m6GXs7BCskKV1s4D20edhjHCz1VMnDt+7kflhXXlDBGIesNp32NH3SGlaTs84nWe1GL36D0fPGpC01f7CaH+wq/mO8aXHc78xVNrr8+SMzZJxAGkVwuJMhgo+dyaNM1kYZ1R4zMRsxFET73SkXHMU9YoHBs6o9aFSCh/ZPNCygPfU9CjNbnWfxLnpocc/Q3lY7EIciacleM5oCfDNQ8NYyf8XllD/JA4Bz4c05pISvJoUs/8kQ2w1YjhlWkBjcHWdty+xM5QwnUQnu5/fDclk1kCbn9KjLHqdP4HCAyrFcF6bjs0QIzRTx6WZJdIcWJkaz6F8LA7GmzRUmRz6iY/m188iGFxOSmK7sr4A+5mtrcLh8U5SnIh/mhDSg7gMud7TIcvYRorg9T1g7skEjHpwhLaCzr2Csx4qv+INv7g2sf7Jpkdtg+tsfGfZCIW2v5WvApAwWH72OhgqXmWP5vPsI= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB4227 Original-Authentication-Results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT019.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(136003)(39860400002)(396003)(46966005)(33656002)(2906002)(26005)(8936002)(5660300002)(7696005)(110136005)(8676002)(66574015)(54906003)(4326008)(9686003)(55016002)(316002)(36906005)(6506007)(52536014)(70206006)(82740400003)(478600001)(83380400001)(70586007)(53546011)(186003)(336012)(966005)(356005)(81166007)(82310400002)(86362001)(47076004); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: e643cbfa-b169-4844-9bbf-08d812bab107 X-Forefront-PRVS: 04371797A5 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: GJ5NkBq/1p+ovuC9VzmP1BEH5tSB2gMPhGlLEgSkrsV38cziHs9zQs1njXJeR+ZASIlDPQQZqawKyOD8J5gFOAdcvJTanf++6iEMl6mQg0gcf36z1Xl81+uUH2J7W7t1mQOaBab3CeJsfCJ+M0LsSkeCfYPmoVHN2dLtS9ZGNqYFnHlbxuD0oRugSm75f6wRk2WGAFyCxGbUVcBSh1I2yicvMtQCfX74bMEYJvf6vDgpNi0vGzuiCjmKgFwMICBmeS9QE3lnykSnG0vvyUeJpWTwbTs7s0sYXkNRph477drRR7XNmug2YZviNdy1N81AMLlLR8fnHKPV950yswukfesMdnkc/HZoOhuaivmRkb2oH1KzZ4XXGGO/4ql/U/k6ugTon5FTMZk/uHHqj/TCz6p3gPMQN4AiLoY65lvEVlNy71ZspAjf+fGoKj66/jC6yAzG0EYHZGakezDHu98VX6A2kAjY30QkzNlO7vbaWPo= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jun 2020 12:33:58.3178 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 3658f049-d0ce-40c6-349d-08d812bab51b X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR08MB4521 Archived-At: Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jun 2020 12:34:04 -0000 SGkgSGVuaywNCg0KSXQgaXMgcXVpdGUgcG9zc2libGUgdGhhdCBJIHdhcyB0aGUgb25seSBwZXJz b24gd2hvIGRpZCBub3QgdW5kZXJzdG9vZCB0aGlzIHVzZSBjYXNlIGFuZCB0aGUgcmVzdCBvZiBn cm91cCB3YXMgcHV6emxlZCBhYm91dCBtZSBub3QgdW5kZXJzdGFuZGluZyBpdC4gSWFuIHdhcyB0 aGUgb3RoZXIgcGVyc29uIGNvbW1lbnRpbmcgYW5kIHVuZGVyc3Rvb2QgaXQgYXMgd2VsbC4NCg0K Tm93IEkgZ2V0IGl0IGFuZCBJIGFtIGhhcHB5Lg0KDQpDaWFvDQpIYW5uZXMNCg0KLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0 LmZyYXVuaG9mZXIuZGU+DQpTZW50OiBXZWRuZXNkYXksIEp1bmUgMTcsIDIwMjAgMjoyMiBQTQ0K VG86IEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPjsgTWljaGFl bCBSaWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E+DQpDYzogT2xpdmVyLCBJYW4gKE5v a2lhIC0gRkkvRXNwb28pIDxpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20+OyByYXRzQGll dGYub3JnDQpTdWJqZWN0OiBSZTogW1JhdHNdIHdhdGNoZG9nIHVzZSBjYXNlIC4uLiBSRTogVXNl IGNhc2VzIGluIGRyYWZ0LWlldGYtcmF0cy1hcmNoaXRlY3R1cmUtMDQNCg0KSGkgSGFubmVzLA0K DQp0aGUgZmFjdCByZW1haW5zIHRoYXQgdGhlIGNvcnJlc3BvbmRpbmcgdXNlIGNhc2UgdGV4dCBh bG9uZSB3YXMgbm90IGVub3VnaCB0byBnZXQgeW91IGV4aXRlZCAoSSBhbSBnbGFkIHRoYXQgeW91 IGFyZSBub3cgKmcqKS4gQXJlIHlvdSBpbiBhIHBvc2l0aW9uIHRvIG1heWJlIHByb3ZpZGUgYSBw cm9wb3NhbCBob3cgdG8gcmVwaHJhc2UgdGhlIHVzZSBjYXNlIGRlc2NyaXB0aW9uIGluIGEgd2F5 IHRoYXQgd291bGQgaGF2ZSBoZWxwZWQgeW91IGZyb20gdGhlIHZlcnkgc3RhcnQ/DQoNClZpZWxl IEdyw7zDn2UsDQoNCkhlbmsNCg0KT24gMTcuMDYuMjAgMTQ6MTcsIEhhbm5lcyBUc2Nob2Zlbmln IHdyb3RlOg0KPiBIaSBNaWNoYWVsLA0KPg0KPiB0aGFua3MgZm9yIHRoZSByZWZlcmVuY2UgdG8g dGhlIFRDRyAiQXV0aGVudGljYXRlZCBDb3VudGRvd24gVGltZXIiIHNwZWMuIEkgaGF2ZSBub3Qg c2VlbiB0aGF0IHNwZWMgYmVmb3JlLg0KPg0KPiBJdCBzYXlzOg0KPg0KPiAiDQo+IEEgdHlwaWNh bCBleGFtcGxlIGZvciB0aGUgdXNlIG9mIGFuIEFDVCBpcyBhcyBhIHdhdGNoZG9nIHRpbWVyIHRo YXQNCj4gd2lsbCBjYXVzZSBhIHBsYXRmb3JtIHJlc2V0IHdoZW4gdGhlIHRpbWVyIHJlYWNoZXMg emVybyAoZXhwaXJlcykuIEluDQo+IGEgc3lzdGVtIHVzaW5nIGFuIEFDVCwgYSBwZXJpb2RpYyBw bGF0Zm9ybSBhY3Rpb24gb3V0c2lkZSB0aGUgVFBNDQo+IGluZGljYXRlcyB0aGF0IHRoZSB0aW1l b3V0IHNob3VsZCBiZSBzZXQgYW5ldyB1c2luZw0KPiBUUE0yX0FDVF9TZXRUaW1lb3V0KCkuIFRo ZSBtb3N0IGNvbW1vbiByZWFzb24gd2h5IHRpbWVvdXQgaXMgbm90IHNldA0KPiBhbmV3IGlzIHRo YXQgdGhlIGxvY2FsIHN5c3RlbSBpcyBub3QgYmVoYXZpbmcgcHJvcGVybHkgYmVjYXVzZSBvZiBz b21lIHR5cGUgb2YgY29ycnVwdGlvbiAoZWl0aGVyIGluYWR2ZXJ0ZW50IG9yIG1hbGljaW91cyku IFRoZSBpbnRlbnQgb2YgdGhlIHRpbWVyIGlzIHRoYXQsIGluIHRoZSBhYnNlbmNlIG9mIGEgcHJv cGVybHkgYXV0aG9yaXplZCB0aW1lb3V0IGV4dGVuc2lvbiwgdGhlIHBsYXRmb3JtIHdvdWxkIGJl IHJlc2V0LCBwdXR0aW5nIGl0IGJhY2sgaW50byBhIGtub3duIHN0YXRlIHdpdGggdGhlIGV4cGVj dGF0aW9uIHRoYXQgdGhlIGNvcnJ1cHRpb24gY2FuIGJlIHJlbW92ZWQuDQo+ICINCj4NCj4gVGhh bmtzIGZvciB0aGUgZGVzY3JpcHRpb24gb2YgYSBwb3NzaWJsZSBtZXNzYWdlIGZsb3cuIFRoaXMg bWFrZXMgbXVjaCBtb3JlIHNlbnNlIHRvIG1lIG5vdy4NCj4NCj4gSW4gZmFjdCwgd2UgaGF2ZSB0 aGUgYnVpbGRpbmcgYmxvY2tzIHRvIGdldCB0aGlzIHdvcmtpbmcgYWxyZWFkeSB3aGVuIHlvdSBj b21iaW5lIHRoZSBFQVQgdG9rZW4gKGZvciB0aGUgYXR0ZXN0YXRpb24pLCB0aGUgQ1dUIGZvciBh dXRob3JpemF0aW9uIChhcyBtZW50aW9uZWQgaW4gdGhlIFRQTSBzcGVjIGFib3ZlKSwgYW5kIFNV SVQgKGZvciB0aGUgdXBkYXRlIG9mIHRoZSBzb2Z0d2FyZSB0aGF0IGlzIG5lZWRlZCB0byBmaXgg dGhlIHN5c3RlbSkuIFdoZW4gd2UgbG9vayBhdCBURUVQIHRoZW4gd2UgYWN0dWFsbHkgc2VlIHRo ZXNlIGJ1aWxkaW5nIGJsb2NrcyBjb21iaW5lZCB0byBnZXQgdGhpcyB1c2UgY2FzZSB3b3JraW5n IHZpYSBhIHN0YW5kYXJkaXplZCBwcm90b2NvbC4NCj4NCj4gTm93IEkgYW0gZXhjaXRlZCBhYm91 dCB0aGlzIGFuZCBtYXliZSBzb21lb25lIGluIHRoZSBSQVRTL1RFRVAgZ3JvdXAgd2FudHMgdG8g cHJvdG90eXBlIGl0Lg0KPg0KPiBDaWFvDQo+IEhhbm5lcw0KPg0KPiAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KPiBGcm9tOiBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitpZXRmQHNhbmRlbG1h bi5jYT4NCj4gU2VudDogVHVlc2RheSwgSnVuZSAxNiwgMjAyMCAxMDoyMCBQTQ0KPiBUbzogSGFu bmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+DQo+IENjOiBPbGl2ZXIs IElhbiAoTm9raWEgLSBGSS9Fc3BvbykgPGlhbi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJzLmNvbT47 DQo+IHJhdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IHdhdGNoZG9nIHVzZSBjYXNlIC4uLiBS RTogW1JhdHNdIFVzZSBjYXNlcyBpbg0KPiBkcmFmdC1pZXRmLXJhdHMtYXJjaGl0ZWN0dXJlLTA0 DQo+DQo+DQo+IEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPiB3 cm90ZToNCj4gICAgICA+IENvdWxkIHRoZSBhdXRob3JzIG9mIHRoZSB1c2UgY2FzZSBleHBsYWlu IHRoZSB3YXRjaGRvZyB1c2UgY2FzZSBhIGJpdA0KPiAgICAgID4gbW9yZT8NCj4NCj4gU3VyZS4N Cj4gRGF2ZSdzIHJlZmVyZW5jZSB0byB0aGUgVENHICJBdXRoZW50aWNhdGVkIENvdW50ZG93biBU aW1lciIgaXMgcmF0aGVyIGRldGFpbGVkLCBidXQgcGVyaGFwcyBtaXNzZXMgdGhlIGZvcmVzdCBm b3IgdGhlIHRyZWVzLg0KPiBQZXJoYXBzIEkgY2FuIGJlIGEgYml0IG1vcmUgY29uY2lzZS4NCj4g SWFuLCBwbGVhc2UgbGV0IHVzIGtub3cgaWYgdGhpcyBkZXNjcmliZXMgeW91ciBzaXR1YXRpb24g YXMgd2VsbC4NCj4NCj4gICAgICA+IEkgZG8gbm90IHVuZGVyc3RhbmQgaG93IHRoaXMgaXMgc3Vw cG9zZWQgdG8gd29yay4gSG93IGlzIHRoZSBkZXZpY2UNCj4gICAgICA+IGFsbG93ZWQgdG8gcmVi b290IHdoZW4gaXQgc2VuZHMgYXR0ZXN0YXRpb24gaW5mb3JtYXRpb24gdG8gYSByZW1vdGUNCj4g ICAgICA+IHNlcnZlcj8NCj4NCj4gVGhlcmUgYXJlIHVzdWFsIHRocmVlIHBhcnRpZXM6IEF0dGVz dGVyLCBWZXJpZmllciwgUmVseWluZyBQYXJ0eS4NCj4NCj4gVGhlIEF0dGVzdGVyIChzZWN1cmUg ZW5jbGF2ZS9UUE0vZXRjLikgY29sbGVjdHMgRXZpZGVuY2UgYXMgdG8gaGVhbHRoIGFuZCBzZW5k cyB0aGlzIHRvIGEgcmVtb3RlIFZlcmlmaWVyLg0KPg0KPiBUaGUgVmVyaWZ5IGNyZWF0ZXMgYW4g QXR0ZXN0YXRpb24gUmVzdWx0IGFzIG5vcm1hbC4NCj4NCj4gQnV0LCBpbiB0aGUgY2FzZSwgdGhl IFJlbHlpbmcgUGFydHkgaXMgdGhlIFdhdGNoIERvZyB0aW1lciBpbiB0aGUgVFBNL3NlY3VyZSBl bmNsYXZlIGl0c2VsZi4gIFNvIHRoZSBBdHRlc3RhdGlvbiBSZXN1bHRzIGFyZSByZXR1cm5lZCB0 byB0aGUgUEMsIGFuZCBwcm92aWRlZCB0byB0aGUgZW5jbGF2ZS4NCj4NCj4gSWYgdGhlIHdhdGNo IGRvZyBkb2VzIG5vdCByZWNlaXZlIHJlZ3VsYXIsIGFuZCBmcmVzaCwgQXR0ZXN0YXRpb24gUmVz dWx0cyBhcyB0byB0aGUgc3lzdGVtcycgaGVhbHRoLCB0aGVuIGl0IGZvcmNlcyBhIHJlYm9vdC4N Cj4NCj4gICAgICA+IElmIG1hbHdhcmUgcHJldmVudHMgdGhlIGRldmljZSBmcm9tIHJlYm9vdGlu ZywgYXMgdGhlIHRleHQgaW5kaWNhdGVzLA0KPiAgICAgID4gd2h5IGRvZXNuJ3QgdGhhdCBtYWx3 YXJlIGFsc28gcHJldmVudCB0aGUgaW50ZXJhY3Rpb24gd2l0aCB0aGUNCj4gICAgICA+IGF0dGVz dGF0aW9uIHNlcnZlciAoZm9yIGV4YW1wbGUsIHByZXRlbmRpbmcgdGhhdCBuZXR3b3JrIGNvbm5l Y3Rpdml0eQ0KPiAgICAgID4gaXMgZG93bik/DQo+DQo+IFRoZSBhcnJhbmdlbWVudCBpcyB0aGF0 IG9mIGEgZGVhZG1hbidzIHN3aXRjaDogaWYgdGhlIG1hbHdhcmUgd2VyZSB0byBwcmV2ZW50IHRo ZSBjb21tdW5pY2F0aW9uLCB0aGVuIHRoZSB3YXRjaCBkb2cgd291bGQgZ28gb2ZmLg0KPg0KPiAt LQ0KPiBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitJRVRGQHNhbmRlbG1hbi5jYT4sIFNhbmRlbG1h biBTb2Z0d2FyZSBXb3Jrcw0KPiAtPSBJUHY2IElvVCBjb25zdWx0aW5nID0tIElNUE9SVEFOVCBO T1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJl IGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3Qg dGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0 ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24s IHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9u IGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCj4NCj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gUkFUUyBtYWlsaW5nIGxpc3QNCj4gUkFUU0BpZXRm Lm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCj4NCklN UE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNo bWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91 IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVy IGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhl ciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGlu Zm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== From nobody Wed Jun 17 05:44:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 493D33A077A for ; Wed, 17 Jun 2020 05:44:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GqV0EAiRi_lK for ; Wed, 17 Jun 2020 05:44:20 -0700 (PDT) Received: from mail-vs1-xe32.google.com (mail-vs1-xe32.google.com [IPv6:2607:f8b0:4864:20::e32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 592F43A0771 for ; Wed, 17 Jun 2020 05:44:20 -0700 (PDT) Received: by mail-vs1-xe32.google.com with SMTP id g129so1287494vsc.4 for ; Wed, 17 Jun 2020 05:44:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=dosU+zAoKmB42Qb4LYk7QX9PnVFnYDjt5ON365Cdb4A=; b=ud7WB08uUbNu5WeIw+ex1DoS7ahR6p0RBzzoXu8NWtU7NTrXV43h5B72BzSQyek7VQ MKSEhNfdmXlSIrwgwEnwNQjz3JW1JZj5hnZ+CxVb42rr7sMqS1drLr65P4wnkISL0v3B nrQSyFjPcAy+IMLwZsBLxAkoaUle4zySuYAA1QtyX7vPEcVGULvdtsOwQCusfXkUhQYE 21ZT7/kpm2pkWBcwPOaySbT1uplM5ggsC55BQAqB8DVwyJw/zQu7DI3LvgLRAgtd/z0D gSHTexzJ6tdjX7GIqqGlCYlaIPETtwliu87haj0LGK7R8FiykweIQpqOKsIWsTpBsIIx rzQQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=dosU+zAoKmB42Qb4LYk7QX9PnVFnYDjt5ON365Cdb4A=; b=Cqjf5oy2ash8ATK70ezyR/E3c4n51ejEJlKnDEo7S2ZqJLj2dQzQFe1q5iMPsFUych inc19skXLvZbKI6sCdoUvRbEhYZ3jAMmRupsE0SYkdMaWKMhvEDhiJcl3VBAT3BfRHEn 3kL65XZyrZZ3obdctYnsOecQChMylM2uo5/l1hyRZqYo6K8QXraTk6gBJEBzqImjKL21 HwBcNOnUeRnmi4JZcdlACyz1X4OOTZerY/CiqgHPDOuc/18DWUD17Nfn5p9bFEeEG8zS f8DzWAVRR9nTnA/Oht/Fm6wAe5jsV+qrkkZfvuBjQ7efcT3konCC3if8DAgCOFRpllsD gHKA== X-Gm-Message-State: AOAM53341emlgTC+zuRzlIDtC5ojEie4EFjo9rNqMCge08f13D7EVnV5 E+BvCGOI1E8YZ7c4YST4NPKgfYGgo/rypoyJSVY= X-Google-Smtp-Source: ABdhPJwYp4L0HiK01qJuxpfHSvCgekJwAb24IFFVynBiKCveNtL8ZqCXJSRCZF2xVfyvyQ3jY3Oz0BjyCxruTw1/Q5k= X-Received: by 2002:a67:30d1:: with SMTP id w200mr5247089vsw.40.1592397859230; Wed, 17 Jun 2020 05:44:19 -0700 (PDT) MIME-Version: 1.0 References: <12088.1592338780@localhost> <53a1c6c3-5e85-cb04-b10b-e0d8d5b5ded5@sit.fraunhofer.de> In-Reply-To: From: Ira McDonald Date: Wed, 17 Jun 2020 08:44:06 -0400 Message-ID: To: Hannes Tschofenig , Ira McDonald Cc: Henk Birkholz , Michael Richardson , "Oliver, Ian (Nokia - FI/Espoo)" , "rats@ietf.org" Content-Type: multipart/alternative; boundary="000000000000bda16105a847041c" Archived-At: Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jun 2020 12:44:23 -0000 --000000000000bda16105a847041c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Hannes, This thread was useful. I also thought (and still think) that the original watchdog use case was obscure. I note that no remote system will ever be able to "force a reboot" in an attesting system infected w/ malware. Only the Platform Manufacturer who has chose to wire the watchdog timer to the reset line can achieve that (and it still won't obviously clea= r out the malware). I don't like the inclusion of this "and then a miracle happens" use case in the already too tricky RATS Architecture. Cheers, - Ira *Ira McDonald (Musician / Software Architect)Co-Chair - TCG Trusted Mobility Solutions WG* *Co-Chair - TCG Metadata Access Protocol SG* *Chair - Linux Foundation Open Printing WGSecretary - IEEE-ISTO Printer Working GroupCo-Chair - IEEE-ISTO PWG Internet Printing Protocol WGIETF Designated Expert - IPP & Printer MIBBlue Roof Music / High North Inchttp://sites.google.com/site/blueroofmusic http://sites.google.com/site/hi= ghnorthinc mailto: blueroofmusic@gmail.com (permanent) PO Box 221 Grand Marais, MI 49839 906-494-2434* On Wed, Jun 17, 2020 at 8:34 AM Hannes Tschofenig wrote: > Hi Henk, > > It is quite possible that I was the only person who did not understood > this use case and the rest of group was puzzled about me not understandin= g > it. Ian was the other person commenting and understood it as well. > > Now I get it and I am happy. > > Ciao > Hannes > > -----Original Message----- > From: Henk Birkholz > Sent: Wednesday, June 17, 2020 2:22 PM > To: Hannes Tschofenig ; Michael Richardson < > mcr+ietf@sandelman.ca> > Cc: Oliver, Ian (Nokia - FI/Espoo) ; > rats@ietf.org > Subject: Re: [Rats] watchdog use case ... RE: Use cases in > draft-ietf-rats-architecture-04 > > Hi Hannes, > > the fact remains that the corresponding use case text alone was not enoug= h > to get you exited (I am glad that you are now *g*). Are you in a position > to maybe provide a proposal how to rephrase the use case description in a > way that would have helped you from the very start? > > Viele Gr=C3=BC=C3=9Fe, > > Henk > > On 17.06.20 14:17, Hannes Tschofenig wrote: > > Hi Michael, > > > > thanks for the reference to the TCG "Authenticated Countdown Timer" > spec. I have not seen that spec before. > > > > It says: > > > > " > > A typical example for the use of an ACT is as a watchdog timer that > > will cause a platform reset when the timer reaches zero (expires). In > > a system using an ACT, a periodic platform action outside the TPM > > indicates that the timeout should be set anew using > > TPM2_ACT_SetTimeout(). The most common reason why timeout is not set > > anew is that the local system is not behaving properly because of some > type of corruption (either inadvertent or malicious). The intent of the > timer is that, in the absence of a properly authorized timeout extension, > the platform would be reset, putting it back into a known state with the > expectation that the corruption can be removed. > > " > > > > Thanks for the description of a possible message flow. This makes much > more sense to me now. > > > > In fact, we have the building blocks to get this working already when > you combine the EAT token (for the attestation), the CWT for authorizatio= n > (as mentioned in the TPM spec above), and SUIT (for the update of the > software that is needed to fix the system). When we look at TEEP then we > actually see these building blocks combined to get this use case working > via a standardized protocol. > > > > Now I am excited about this and maybe someone in the RATS/TEEP group > wants to prototype it. > > > > Ciao > > Hannes > > > > -----Original Message----- > > From: Michael Richardson > > Sent: Tuesday, June 16, 2020 10:20 PM > > To: Hannes Tschofenig > > Cc: Oliver, Ian (Nokia - FI/Espoo) ; > > rats@ietf.org > > Subject: Re: watchdog use case ... RE: [Rats] Use cases in > > draft-ietf-rats-architecture-04 > > > > > > Hannes Tschofenig wrote: > > > Could the authors of the use case explain the watchdog use case = a > bit > > > more? > > > > Sure. > > Dave's reference to the TCG "Authenticated Countdown Timer" is rather > detailed, but perhaps misses the forest for the trees. > > Perhaps I can be a bit more concise. > > Ian, please let us know if this describes your situation as well. > > > > > I do not understand how this is supposed to work. How is the > device > > > allowed to reboot when it sends attestation information to a > remote > > > server? > > > > There are usual three parties: Attester, Verifier, Relying Party. > > > > The Attester (secure enclave/TPM/etc.) collects Evidence as to health > and sends this to a remote Verifier. > > > > The Verify creates an Attestation Result as normal. > > > > But, in the case, the Relying Party is the Watch Dog timer in the > TPM/secure enclave itself. So the Attestation Results are returned to th= e > PC, and provided to the enclave. > > > > If the watch dog does not receive regular, and fresh, Attestation > Results as to the systems' health, then it forces a reboot. > > > > > If malware prevents the device from rebooting, as the text > indicates, > > > why doesn't that malware also prevent the interaction with the > > > attestation server (for example, pretending that network > connectivity > > > is down)? > > > > The arrangement is that of a deadman's switch: if the malware were to > prevent the communication, then the watch dog would go off. > > > > -- > > Michael Richardson , Sandelman Software Works > > -=3D IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this em= ail > and any attachments are confidential and may also be privileged. If you a= re > not the intended recipient, please notify the sender immediately and do n= ot > disclose the contents to any other person, use it for any purpose, or sto= re > or copy the information in any medium. Thank you. > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy th= e > information in any medium. Thank you. > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --000000000000bda16105a847041c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Hannes,

This thread was u= seful.=C2=A0 I also thought (and still think) that the original
w= atchdog use case was obscure.=C2=A0 I note that no remote system will ever<= /div>
be able to "force a reboot" in an attesting system infe= cted w/ malware.
Only the Platform Manufacturer who has chose to = wire the watchdog
timer to the reset line can achieve that (and i= t still won't obviously clear
out the malware).
I don't like the inclusion of this "and then a miracle= happens" use case
in the already too tricky RATS Architectu= re.

Cheers,
- Ira

I= ra McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobil= ity Solutions WG
Co-Chair - TCG Me= tadata Access Protocol SG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO = Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protoco= l WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music /= High North Inc
http://sites.google.com/sit= e/blueroofmusic
http://sites.google.com/= site/highnorthinc
mailto: blueroofmusic@gmail.com
(permanent) PO Box 221=C2= =A0 Grand Marais, MI 49839=C2=A0 906-494-2434
<= /div>


On Wed, Jun 17, 2020 at 8:34 AM Hannes Tschof= enig <Hannes.Tschofenig@arm= .com> wrote:
Hi Henk,

It is quite possible that I was the only person who did not understood this= use case and the rest of group was puzzled about me not understanding it. = Ian was the other person commenting and understood it as well.

Now I get it and I am happy.

Ciao
Hannes

-----Original Message-----
From: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>
Sent: Wednesday, June 17, 2020 2:22 PM
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>; Michael Richardson <mcr+ietf@sandelma= n.ca>
Cc: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.com>; rats@ietf.org
Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-= architecture-04

Hi Hannes,

the fact remains that the corresponding use case text alone was not enough = to get you exited (I am glad that you are now *g*). Are you in a position t= o maybe provide a proposal how to rephrase the use case description in a wa= y that would have helped you from the very start?

Viele Gr=C3=BC=C3=9Fe,

Henk

On 17.06.20 14:17, Hannes Tschofenig wrote:
> Hi Michael,
>
> thanks for the reference to the TCG "Authenticated Countdown Time= r" spec. I have not seen that spec before.
>
> It says:
>
> "
> A typical example for the use of an ACT is as a watchdog timer that > will cause a platform reset when the timer reaches zero (expires). In<= br> > a system using an ACT, a periodic platform action outside the TPM
> indicates that the timeout should be set anew using
> TPM2_ACT_SetTimeout(). The most common reason why timeout is not set > anew is that the local system is not behaving properly because of some= type of corruption (either inadvertent or malicious). The intent of the ti= mer is that, in the absence of a properly authorized timeout extension, the= platform would be reset, putting it back into a known state with the expec= tation that the corruption can be removed.
> "
>
> Thanks for the description of a possible message flow. This makes much= more sense to me now.
>
> In fact, we have the building blocks to get this working already when = you combine the EAT token (for the attestation), the CWT for authorization = (as mentioned in the TPM spec above), and SUIT (for the update of the softw= are that is needed to fix the system). When we look at TEEP then we actuall= y see these building blocks combined to get this use case working via a sta= ndardized protocol.
>
> Now I am excited about this and maybe someone in the RATS/TEEP group w= ants to prototype it.
>
> Ciao
> Hannes
>
> -----Original Message-----
> From: Michael Richardson <mcr+ietf@sandelman.ca>
> Sent: Tuesday, June 16, 2020 10:20 PM
> To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
> Cc: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.com>= ;
> rats@ietf.org > Subject: Re: watchdog use case ... RE: [Rats] Use cases in
> draft-ietf-rats-architecture-04
>
>
> Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:
>=C2=A0 =C2=A0 =C2=A0 > Could the authors of the use case explain the= watchdog use case a bit
>=C2=A0 =C2=A0 =C2=A0 > more?
>
> Sure.
> Dave's reference to the TCG "Authenticated Countdown Timer&qu= ot; is rather detailed, but perhaps misses the forest for the trees.
> Perhaps I can be a bit more concise.
> Ian, please let us know if this describes your situation as well.
>
>=C2=A0 =C2=A0 =C2=A0 > I do not understand how this is supposed to w= ork. How is the device
>=C2=A0 =C2=A0 =C2=A0 > allowed to reboot when it sends attestation i= nformation to a remote
>=C2=A0 =C2=A0 =C2=A0 > server?
>
> There are usual three parties: Attester, Verifier, Relying Party.
>
> The Attester (secure enclave/TPM/etc.) collects Evidence as to health = and sends this to a remote Verifier.
>
> The Verify creates an Attestation Result as normal.
>
> But, in the case, the Relying Party is the Watch Dog timer in the TPM/= secure enclave itself.=C2=A0 So the Attestation Results are returned to the= PC, and provided to the enclave.
>
> If the watch dog does not receive regular, and fresh, Attestation Resu= lts as to the systems' health, then it forces a reboot.
>
>=C2=A0 =C2=A0 =C2=A0 > If malware prevents the device from rebooting= , as the text indicates,
>=C2=A0 =C2=A0 =C2=A0 > why doesn't that malware also prevent the= interaction with the
>=C2=A0 =C2=A0 =C2=A0 > attestation server (for example, pretending t= hat network connectivity
>=C2=A0 =C2=A0 =C2=A0 > is down)?
>
> The arrangement is that of a deadman's switch: if the malware were= to prevent the communication, then the watch dog would go off.
>
> --
> Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
> -=3D IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this e= mail and any attachments are confidential and may also be privileged. If yo= u are not the intended recipient, please notify the sender immediately and = do not disclose the contents to any other person, use it for any purpose, o= r store or copy the information in any medium. Thank you.
>
> _______________________________________________
> RATS mailing list
> RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats
>
IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you.
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
--000000000000bda16105a847041c-- From nobody Wed Jun 17 05:47:28 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE1E73A07A2 for ; Wed, 17 Jun 2020 05:47:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JEmK8p8WXIYT for ; Wed, 17 Jun 2020 05:47:24 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DDCA3A079C for ; Wed, 17 Jun 2020 05:47:22 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2EaBgAdEOpe/xmnZsBmHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUoCgXmBHoEzCoQakGAlmhSBXwkLAQEBAQEBAQEBBgEBGAs?= =?us-ascii?q?KAgQBAQKBToJ1AoIcASQ4EwIQAQEGAQEBAQEGBAIChhcGJwxCFgGCfH4BAQE?= =?us-ascii?q?BAQEBAQEBAQEBAQEBAQEBFgJDVRIBAR0BAQEBAgEBASEPAQU2AgkFBwQJAhE?= =?us-ascii?q?BAwEBAQICJgICJyACBggGAQwBBQIBAYMiAYJcIAQLmm6bBHaBMoVRg1iBOga?= =?us-ascii?q?BDioBizyBDw8PgUw/JmsnDAOCWj6CXAEBAgGBHgkBEgEHAQFEgmiCYASOdYM?= =?us-ascii?q?soG4xWigHgViBBYEGBAuHKosUhUAFCh2CcDWIZYRtBo1rkR2BY4gqlCYCBAI?= =?us-ascii?q?JAhWBaoEJcE0kT4JpUBcCDVWJM4QiFxRuAQKHXYVEcgI1AgYBBwEBAwl8jHe?= =?us-ascii?q?BbAGBEAEB?= X-IPAS-Result: =?us-ascii?q?A2EaBgAdEOpe/xmnZsBmHAEBAQEBAQcBARIBAQQEAQFAg?= =?us-ascii?q?UoCgXmBHoEzCoQakGAlmhSBXwkLAQEBAQEBAQEBBgEBGAsKAgQBAQKBToJ1A?= =?us-ascii?q?oIcASQ4EwIQAQEGAQEBAQEGBAIChhcGJwxCFgGCfH4BAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBFgJDVRIBAR0BAQEBAgEBASEPAQU2AgkFBwQJAhEBAwEBAQICJgICJ?= =?us-ascii?q?yACBggGAQwBBQIBAYMiAYJcIAQLmm6bBHaBMoVRg1iBOgaBDioBizyBDw8Pg?= =?us-ascii?q?Uw/JmsnDAOCWj6CXAEBAgGBHgkBEgEHAQFEgmiCYASOdYMsoG4xWigHgViBB?= =?us-ascii?q?YEGBAuHKosUhUAFCh2CcDWIZYRtBo1rkR2BY4gqlCYCBAIJAhWBaoEJcE0kT?= =?us-ascii?q?4JpUBcCDVWJM4QiFxRuAQKHXYVEcgI1AgYBBwEBAwl8jHeBbAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.73,522,1583190000"; d="scan'208";a="22512284" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Jun 2020 14:47:20 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DqBwBtD+pe/1lIDI1mHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUoCgXkvbwNUMCwKhBqQYCWaFIFoCwEDAQEBAQEGAQEYCwo?= =?us-ascii?q?CBAEBgVCCdQKCGgIkOBMCEAEBBQEBAQIBBgRthS4GJwxCFgGFGQEBAQECAQE?= =?us-ascii?q?BIQ8BBTYCCQUHBAkCEQEDAQEBAgImAgInIAIGCAYBDAEFAgEBgyIBglwkC5p?= =?us-ascii?q?smwR2gTKFUYNYgToGgQ4qAYs8gQ8PD4FMPyZrJwwDglo+glwBAQIBgR4JARI?= =?us-ascii?q?BBwEBRIJogmAEjnWDLKBuMVooB4FYgQWBBgQLhyqLFIVABQodgnA1iGWEbQa?= =?us-ascii?q?Na5EdgWOIKpQmAgQCCQIVgWoiZnBNJE+CaVAXAg1ViTOEIhcUbgECh12FREE?= =?us-ascii?q?xAjUCBgEHAQEDCXyMd4FsAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.73,522,1583190000"; d="scan'208";a="84344065" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Jun 2020 14:47:14 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 05HCl74f017428 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 17 Jun 2020 14:47:07 +0200 Received: from [192.168.16.50] (79.234.115.101) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 17 Jun 2020 14:47:03 +0200 To: Hannes Tschofenig , Michael Richardson CC: "Oliver, Ian (Nokia - FI/Espoo)" , "rats@ietf.org" References: <12088.1592338780@localhost> <53a1c6c3-5e85-cb04-b10b-e0d8d5b5ded5@sit.fraunhofer.de> From: Henk Birkholz Message-ID: <8ce9aea4-0e0c-6358-920a-4abfe596bfd0@sit.fraunhofer.de> Date: Wed, 17 Jun 2020 14:47:01 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.115.101] Archived-At: Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jun 2020 12:47:27 -0000 Understood. Thx! @list: If you can find the time, please check the use cases in the current architecture I-D via the following link and tell us, if one of them is confusing to you (positive feedback is of course also welcome!). The use cases can be found in section 3 of the latest draft: > https://tools.ietf.org/html/draft-ietf-rats-architecture-04#section-3 Viele Grüße, Henk On 17.06.20 14:33, Hannes Tschofenig wrote: > Hi Henk, > > It is quite possible that I was the only person who did not understood this use case and the rest of group was puzzled about me not understanding it. Ian was the other person commenting and understood it as well. > > Now I get it and I am happy. > > Ciao > Hannes > > -----Original Message----- > From: Henk Birkholz > Sent: Wednesday, June 17, 2020 2:22 PM > To: Hannes Tschofenig ; Michael Richardson > Cc: Oliver, Ian (Nokia - FI/Espoo) ; rats@ietf.org > Subject: Re: [Rats] watchdog use case ... RE: Use cases in draft-ietf-rats-architecture-04 > > Hi Hannes, > > the fact remains that the corresponding use case text alone was not enough to get you exited (I am glad that you are now *g*). Are you in a position to maybe provide a proposal how to rephrase the use case description in a way that would have helped you from the very start? > > Viele Grüße, > > Henk > > On 17.06.20 14:17, Hannes Tschofenig wrote: >> Hi Michael, >> >> thanks for the reference to the TCG "Authenticated Countdown Timer" spec. I have not seen that spec before. >> >> It says: >> >> " >> A typical example for the use of an ACT is as a watchdog timer that >> will cause a platform reset when the timer reaches zero (expires). In >> a system using an ACT, a periodic platform action outside the TPM >> indicates that the timeout should be set anew using >> TPM2_ACT_SetTimeout(). The most common reason why timeout is not set >> anew is that the local system is not behaving properly because of some type of corruption (either inadvertent or malicious). The intent of the timer is that, in the absence of a properly authorized timeout extension, the platform would be reset, putting it back into a known state with the expectation that the corruption can be removed. >> " >> >> Thanks for the description of a possible message flow. This makes much more sense to me now. >> >> In fact, we have the building blocks to get this working already when you combine the EAT token (for the attestation), the CWT for authorization (as mentioned in the TPM spec above), and SUIT (for the update of the software that is needed to fix the system). When we look at TEEP then we actually see these building blocks combined to get this use case working via a standardized protocol. >> >> Now I am excited about this and maybe someone in the RATS/TEEP group wants to prototype it. >> >> Ciao >> Hannes >> >> -----Original Message----- >> From: Michael Richardson >> Sent: Tuesday, June 16, 2020 10:20 PM >> To: Hannes Tschofenig >> Cc: Oliver, Ian (Nokia - FI/Espoo) ; >> rats@ietf.org >> Subject: Re: watchdog use case ... RE: [Rats] Use cases in >> draft-ietf-rats-architecture-04 >> >> >> Hannes Tschofenig wrote: >> > Could the authors of the use case explain the watchdog use case a bit >> > more? >> >> Sure. >> Dave's reference to the TCG "Authenticated Countdown Timer" is rather detailed, but perhaps misses the forest for the trees. >> Perhaps I can be a bit more concise. >> Ian, please let us know if this describes your situation as well. >> >> > I do not understand how this is supposed to work. How is the device >> > allowed to reboot when it sends attestation information to a remote >> > server? >> >> There are usual three parties: Attester, Verifier, Relying Party. >> >> The Attester (secure enclave/TPM/etc.) collects Evidence as to health and sends this to a remote Verifier. >> >> The Verify creates an Attestation Result as normal. >> >> But, in the case, the Relying Party is the Watch Dog timer in the TPM/secure enclave itself. So the Attestation Results are returned to the PC, and provided to the enclave. >> >> If the watch dog does not receive regular, and fresh, Attestation Results as to the systems' health, then it forces a reboot. >> >> > If malware prevents the device from rebooting, as the text indicates, >> > why doesn't that malware also prevent the interaction with the >> > attestation server (for example, pretending that network connectivity >> > is down)? >> >> The arrangement is that of a deadman's switch: if the malware were to prevent the communication, then the watch dog would go off. >> >> -- >> Michael Richardson , Sandelman Software Works >> -= IPv6 IoT consulting =- IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > From nobody Wed Jun 17 14:25:33 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B424F3A0045 for ; Wed, 17 Jun 2020 14:25:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=AawoeqFu; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=xxmXWHAf Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jrLmeM5YoCm1 for ; Wed, 17 Jun 2020 14:25:27 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8951D3A003B for ; Wed, 17 Jun 2020 14:25:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=27251; q=dns/txt; s=iport; t=1592429127; x=1593638727; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=uAXvqfYHuJBNdYGdN/a98Zjwbsf5z/cdnylh5luN/3I=; b=AawoeqFud5m0ZXXu9eCPwBGx8Na5kShwHNvALwEhqR6csLTi6DeeDCrU gjqQMiEfPsBVKZDmNQfB+DwF8POBzkz46OAxHDW23SEe/b4oE8K8NQYds jgYZdrsmJgn6MJjGfLqGcBV2Kath33NX9D8bS0rAv6r0Jo67p253Ljamy A=; X-Files: smime.p7s : 3975 X-IPAS-Result: =?us-ascii?q?A0CwAABbiepe/4kNJK1mGgEBAQEBAQEBAQEDAQEBARIBA?= =?us-ascii?q?QEBAgIBAQEBQIFKgSMvUQdvKy0vLAqHYAONQIdVkH2CUgNVBAcBAQEJAwEBI?= =?us-ascii?q?woCBAEBhEQCghoCJDgTAgMBAQEDAgMBAQEBBQEBAQIBBgRthVsMhXIBAQEBA?= =?us-ascii?q?xIbEwEBNwEPAgEIEQQBASEOAjAdCAEBBAENBQgGFIMFgX5NAx8PAQ6sVwKBO?= =?us-ascii?q?YhhdIE0gwEBAQWBR0CDPxiCBwcDBoE4gVOBFIg1gUMagUE/gRFDgh8uPmsZA?= =?us-ascii?q?XRjAoE2KxUWgxqCLZkGgRGaNgqCWoQnglOBRpEBnm6RI4oQlCkCBAIEBQIOA?= =?us-ascii?q?QEFgWoigVZwFYMkUBcCDY4eg3GKHQE4dAI1AgYIAQEDCXyNPYE1AYEQAQE?= IronPort-PHdr: =?us-ascii?q?9a23=3AO1JpxhQqmGuShSPyi5BE1Qk/GNpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESQBt+J8PNYzeTMur3mWWsO7IzHvH1ROJBPVh?= =?us-ascii?q?pQj8IQkkRgBcOeEkT0IbbsaDByB8VNUlJpvhTZeUhYEcrzfRve93u16zNBAR?= =?us-ascii?q?TjcwRvL/nzGoncgt7x2+3hs5HWah9D0Ty6Z746JR6qrALX488Rh4YHSO4xxx?= =?us-ascii?q?LFr2EOdf5RwDZjJEmYmFD34cLj8Q=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.73,523,1583193600"; d="p7s'?scan'208,217";a="487945824" Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 17 Jun 2020 21:25:25 +0000 Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by alln-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id 05HLPP9v011293 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 17 Jun 2020 21:25:25 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 17 Jun 2020 16:25:25 -0500 Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 17 Jun 2020 16:25:24 -0500 Received: from NAM10-MW2-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 17 Jun 2020 16:25:24 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LZlZG5AN3hQJxe4W1GafN2wkTZzFL6eW6QVLkTmzcmtlBQUYzYn5CjpUleLZC06uYWJoU/f7tMwhHs3SbFbBpVhByK9PVYghSIvXwRTn3q89ArhxzM9ZZpjaZxDz8zHQ32RXjDX7CtKXgQuRtP7nqou1ZPum1LDhEWj8auiIkllDsNZPZn8YRzNr2p1u+bJeI7oHGLbadJMMXOBaGZbp1Fk6A4PxFCxitLNl4pMmggX7NvjCmK4U7vWADve0DVryu5vx9YOcrVIykQvJ7LX314MIo8drq/6OEyG/Us21et+Czkh913pZfL5csp3/5gdxhZKkWb0ZceovU+Oa5x1+wA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rQU2kTHl/3JIpONpC10GnpLZZ2K3Kq8QAk5UQ7aNTUE=; b=UCpwTr1yG0XOpMy/ZTp2Gdp/0YiB5ZP/s1qiZ6hD4oaoWPgcOpojbJ2EWAuPyIb01r6QNCAEiehVMu7P/hgnlXuryNsuIodJ6S3DcjUzAhynmWAzf3VlA3bLs7lisrmVADeIbFBXre8ovT/aAeClcXrbNxeg/Mxpfh8oedO/DAsi20WkaPD3/53sSubSsoUAO5pHwYph/ARPsfpj0AAPZKGA+Futn4IywjuFDGpCRB+AmUxP+9VH1OXORvNKeeGEhoCYOd8SU4NTBcGL+kkInwxFIs4OmH32ZK9k5eIUrMTUVIe6IO+KGgffWz1vv1gMdYisKxfbXdKdSRnxn6nzaQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rQU2kTHl/3JIpONpC10GnpLZZ2K3Kq8QAk5UQ7aNTUE=; b=xxmXWHAfTT058Y13KPF26qguKv9DEGrc1cAt5QK50cs9p8pL1PA1OEWhiiAEtXbBLsv00JN0v5CSHHYXTsQ5xsKdQnvztbt/z+ezFOb4rTxZGQ2EWZSBW1FcNP0GsyX7xc24iwnhQId8ZtEwWR1Km7+zvix4poR1nwE/EahwALo= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by MN2PR11MB4077.namprd11.prod.outlook.com (2603:10b6:208:13f::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22; Wed, 17 Jun 2020 21:25:22 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290%7]) with mapi id 15.20.3088.029; Wed, 17 Jun 2020 21:25:22 +0000 From: "Eric Voit (evoit)" To: "henk.birkholz@sit.fraunhofer.de" , "michael.eckel@sit.fraunhofer.de" , "Shwetha Bhandari (shwethab)" , "Bill Sulzen (bsulzen)" , "frank.xialiang@huawei.com" , "tom.laffey@hpe.com" , Guy Fedorkow CC: "rats@ietf.org" Thread-Topic: Pull request for the charra YANG model Thread-Index: AdY/QqQk1SROUlurQ+m5+hKLyk0H7wFpq9+w Date: Wed, 17 Jun 2020 21:25:22 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.79] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a442364a-c4c6-4dfc-b749-08d81304f1ba x-ms-traffictypediagnostic: MN2PR11MB4077: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 04371797A5 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: ty4B7H3luZBLyKpZhF2ZYjDQO+HNgbS9QbW0peNLouJaKt54mFK4Kr7fi+gmTKZj248jEqUfxHNE0/zwp6/+fH8JRkhH8qeIej1OFAypsWTNraOhEUJ9S7dHPmTBTksbz7RiWm37Pu11rpRQRT4qlpLDsjl0SS7ySXk5uFZJeYviwBDfS2CfV4e+xHa78j4rMEU7bVUQNBwUc4t7wrNkEMFvsGr6+3RHA0GEyTiOM67bdU4K70t9NuQzibQX2+Voyfg8gRa7hIUbQT/3Ivg6ZP2Jj9st+c80i7BvCLMJ/jrRz11DjQwgOYKXBep834dVpVSkqinmcwwVDtYLyd9qlbF88MXq82ebJtoGtAy3lEJ1LiysGx9ke9+ima2OLAfUIRqhTa9uV7Jk+pDsxDrUHw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(376002)(39860400002)(366004)(136003)(396003)(52536014)(2906002)(9686003)(26005)(55016002)(99936003)(6506007)(53546011)(478600001)(4326008)(5660300002)(8676002)(110136005)(83380400001)(71200400001)(8936002)(86362001)(316002)(186003)(66946007)(76116006)(66446008)(66476007)(64756008)(166002)(33656002)(7696005)(66556008)(66616009); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 8xP1K6GH/YMCa8p2rUf3sq//UcY1yFC8h9kzjT0nL5DD5IIh0lP2uGKrDBOTx0ADuUgHsEILnqh6R3KK35S6lyMDPFRlYQjdFtKoIkPGgUBFEkaGuxwrkt471SJgl6nd1x7+Iw8zPEaizvDKTjPJ1G0+2g/evO5DyMNX6TBgmBzm37M9jtVgBZnlocUEN4qobH5HClrCHbXZsQP1CHRTsLDubeM61qoV5HpCizU+Y9KdXtYxF2CM4Urftu7uooXnaB7+oe7z7SOV2jq0Aho3LSSakDlCj+YQaA7QoCeU65Kuu4GMn4TNesoWmpJRI8xVjvd8nY027BF/VEpkhA15t7I4MSBPsj4y7n5CSR/XYvlCKnaydISsmyho0vfDaPKzOL6khbpVpv8H0/yEfH0TWKDK7gCWyLC23DPPSq+IsuVqpFNkFW1VqSa9TEAmrNTmAuIZueV2rba5XzSqVFh1HjGA8nYalVld2jy1AFU4aU0= Content-Type: multipart/signed; boundary="----=_NextPart_000_0509_01D644CA.EA53C790"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: a442364a-c4c6-4dfc-b749-08d81304f1ba X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jun 2020 21:25:22.7995 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: W2oJbXl8R7Ppn+TymDlilW4zoR0hOdUiPpV1EhVKWrUQuxcgCr6Cv0Y789IyTvuQ X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4077 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.11, xch-aln-001.cisco.com X-Outbound-Node: alln-core-4.cisco.com Archived-At: Subject: Re: [Rats] Pull request for the charra YANG model X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jun 2020 21:25:30 -0000 ------=_NextPart_000_0509_01D644CA.EA53C790 Content-Type: multipart/alternative; boundary="----=_NextPart_001_050A_01D644CA.EA53C790" ------=_NextPart_001_050A_01D644CA.EA53C790 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I have updated the pull request based on some more thoughts. The links below show the full set of proposed deltas. Main changes are: * Align to the drafts currently under WGLC in NETCONF * Extracted Crypto-types into a separate YANG file ietf-crypto-types.yang. (Note: The proposed structure his matches to the stated intent of the NETCONF WG. They almost took iana-crypto-types.yang to WGLC, but pulled that file to simplify things.) * Made certificate leaf-refs to ietf-keystore.yang (this improves the richness of what can be stored, while making this YANG model smaller.) * Made a few uint types into more explicit typing. Eric From: Eric Voit (evoit) Sent: Wednesday, June 10, 2020 12:18 PM To: henk.birkholz@sit.fraunhofer.de; michael.eckel@sit.fraunhofer.de; Shwetha Bhandari (shwethab) ; Bill Sulzen (bsulzen) ; frank.xialiang@huawei.com; tom.laffey@hpe.com; Guy Fedorkow Cc: rats@ietf.org Subject: Pull request for the charra YANG model Henk, Michael, Shwetha, Bill, Frank, Tom, Guy, As authors of the Charra YANG model, I wanted to let you know I have created a pull request . I am proposing some fixes due to a number of concerns I had about the YANG model: * PCR numbers should be their own type, not a UINT8. PCRs should be limited to [0..31] * We should use ENUMs instead of strings for TCG and IETF crypto algorithm types. Strings allow lots of errors to be introduced which we can protect using a larger, more detailed ENUM construct. * Most devices do not have multiple line cards. Because of that, we should not have nested keys of [node id] [tpm name]. This adds unnecessary complexity for the vast majority of users. Instead the tpm should have a mandatory leafref back to node-id when compute-nodes is not null. * The YANG doctors will not let us have a TPM-Name of "ALL". Instead of "ALL" we should be able to assume that an RPC means all hardware based TPMs if a specific TPM is not named in the RPC. * We should add leaf for a unique 'certificate-name' is used. This allows for a cleaner certificate migration path, and most RPC users won't need to track node-ids. * We should have optional YANG features for TPM1.2 and TPM2.0 so that RPCs are not exposed when there are no such TPMs of that type are supported. * We should create new reusable groupings rather than repeat definitions. If your guys have suggestions and improvements for this pull request, that would be great. I also think the netequip boot pull request can also be integrated. Thanks, Eric ------=_NextPart_001_050A_01D644CA.EA53C790 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I have updated the pull request based on some more = thoughts.  The links below show the full set of proposed = deltas.  Main changes are:

 

  • Align to the drafts = currently under WGLC in NETCONF
    • Extracted Crypto-types = into a separate YANG file ietf-crypto-types.yang.  (Note: The = proposed structure his matches to the stated intent of the NETCONF = WG.  They almost took iana-crypto-types.yang to WGLC, but pulled = that file to simplify things.)
    • Made certificate leaf-refs to ietf-keystore.yang (this improves = the richness of what can be stored, while making this YANG model = smaller.)

 

  • Made a few uint types = into more explicit typing.

 

Eric

 

From: Eric = Voit (evoit)
Sent: Wednesday, June 10, 2020 12:18 = PM
To: henk.birkholz@sit.fraunhofer.de; = michael.eckel@sit.fraunhofer.de; Shwetha Bhandari (shwethab) = <shwethab@cisco.com>; Bill Sulzen (bsulzen) = <bsulzen@cisco.com>; frank.xialiang@huawei.com; = tom.laffey@hpe.com; Guy Fedorkow = <gfedorkow@juniper.net>
Cc: = rats@ietf.org
Subject: Pull request for the charra YANG = model

 

Henk, =         Michael,

Shwetha,   Bill,

Frank, =        Tom,

Guy,

 

As authors = of the Charra YANG model, I wanted to let you know I have created a p= ull request.  I am proposing some fixes due to a numbe= r of concerns I had about the YANG model:

 

  • PCR numbers should be their own type, not = a UINT8. PCRs should be limited to [0..31]
  • We should use ENUMs instead of strings for = TCG and IETF crypto algorithm types. Strings allow lots of errors to be = introduced which we can protect using a larger, more detailed ENUM = construct.
  • Most devices do not have multiple line = cards. Because of that, we should not have nested keys of [node id] [tpm = name]. This adds unnecessary complexity for the vast majority of users. = Instead the tpm should have a mandatory leafref back to node-id when = compute-nodes is not null.
  • The YANG doctors will not let us have a = TPM-Name of "ALL". Instead of "ALL" we should be = able to assume that an RPC means all hardware based TPMs if a specific = TPM is not named in the RPC.
  • We should add leaf for a unique 'certificate-name' is used. This allows for a = cleaner certificate migration path, and most RPC users won't need to = track node-ids.
  • We should have optional YANG features for = TPM1.2 and TPM2.0 so that RPCs are not exposed when there are no such = TPMs of that type are supported.
  • We should create new reusable = groupings rather than repeat definitions.

If your guys have suggestions and improvements for = this pull request, that would be great.   I also think the netequi= p boot pull request can also be integrated.

 

Thanks,

Eric

 

------=_NextPart_001_050A_01D644CA.EA53C790-- ------=_NextPart_000_0509_01D644CA.EA53C790 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNjE3MjExNTM1WjAjBgkqhkiG 9w0BCQQxFgQUPND//X9T6CuqIHl7PxbZxURjMlgwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAUhwpBdAUyHkaghrNFgRM9+Ln1baQDp6EyuOKA22l3d8SBFjSkhzadFcgYHc42RBBs Ejbb8Bozt56RCUj9sG1mSGwxIHb42yiiqWP4/DGRvCuvNB+tBS6unyBAq/sogMg//UQ+dYskCHrd VNjjHPN5TLt/OKPi2NGIsPfo58eBtElaLwCSZs6YvGCTU5OaCCLi7vQ0jDKNGbhBlS+KliNTHOe8 1QenEMTroWT7Qg7U/Ibo6u2rLC3/gQk7kv9G+D9rsSZfxedTF1s7RMJJVxpgF71SacgDciqdRwkp qwsj5MwfgVKz/pKu9zKU5GAvfUA0K3jkTrXxB9LtgDTCyYhwAAAAAAAA ------=_NextPart_000_0509_01D644CA.EA53C790-- From nobody Mon Jun 22 07:21:37 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A9F03A0D96 for ; Mon, 22 Jun 2020 07:21:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RPMp1hCmB30U for ; Mon, 22 Jun 2020 07:21:33 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 811AA3A0DAB for ; Mon, 22 Jun 2020 07:21:33 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 036C4300B84 for ; Mon, 22 Jun 2020 10:21:30 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id un91XW26BGKK for ; Mon, 22 Jun 2020 10:21:27 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id C1849300A98; Mon, 22 Jun 2020 10:21:26 -0400 (EDT) From: Russ Housley Message-Id: Content-Type: multipart/signed; boundary="Apple-Mail=_9CA36E55-8400-47A1-B3C0-53B490A39E07"; protocol="application/pgp-signature"; micalg=pgp-sha1 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Date: Mon, 22 Jun 2020 10:21:27 -0400 In-Reply-To: <12373.1592169791@localhost> Cc: draft-moran-suit-mud@ietf.org, suit , rats@ietf.org, opsawg@ietf.org, Henk Birkholz , Eliot Lear To: Michael Richardson References: <12373.1592169791@localhost> X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [Rats] [Suit] draft-moran-suit-mud, EAT and MUD X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2020 14:21:36 -0000 --Apple-Mail=_9CA36E55-8400-47A1-B3C0-53B490A39E07 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I think that the best way forward is to ask SECDISPATCH. I do not think = SUIT is a bad answer, but we have a process to pick. Russ > On Jun 14, 2020, at 5:23 PM, Michael Richardson = wrote: >=20 > Hi, I read draft-moran-suit-mud today. > It would naturally fall into a MUD WG if we had that. > As it is, I have no idea where to discuss this, and thus another = shotgun. > I gather the mailman deletes my Reply-To suggestions. >=20 > I feel that this document should be adopted and the details filed in, = but I > have no idea what WG it belongs in given the current state of things. > {It totally fits into the IoT lifecycle security WG I had proposed} >=20 > I knew it was around since it was talked about at the Hackathon a = bunch, but > I hadn't read the result until today. >=20 > If you use Hypothesis my comments are at: > = https://hyp.is/go?url=3Dhttps%3A%2F%2Ftools.ietf.org%2Fid%2Fdraft-moran-su= it-mud-00.html&group=3D__world__ > I'm not sure what that does if you don't have the plugin installed. > I'd prefer to write them as a pull request since they are mostly = suggestions > on fixing some wording rather than any kind of substantive request for > changes. >=20 > Substantive comments: > "At the time of onboarding, devices report their manifest in use to = the MUD > manager." >=20 > so I think that we will need to detail this!!! > When using an IDevID based onboarding system = (BRSKI/BRSKI-TEEP/BRSKI-AE or > EAP-NOOB with some certificate based system) then the MUD certificate = OID is available. > But, that's not the manifest of the software currently running, and it = would > not be reasonable to embed that into the IDevID for the reasons I = explain at: > = https://datatracker.ietf.org/doc/html/draft-richardson-opsawg-mud-acceptab= le-urls-00#section-2 >=20 > More interesting is that you are requesting: > Each time a device is updated, rebooted, or otherwise = substantially > changed, it will execute an attestation. > Among other claims in the Entity Attestation Token (EAT) > [I-D.ietf-rats-eat], the device will report its software = digest(s), > configuration digest(s), primary manifest URI, and primary = manifest > digest to the MUD manager. >=20 > Well, that attestation is actually ideal for use during onboarding as = well. >=20 > It seems to me that the path of trust should go like: >=20 > 1) (Manufacturer IDevID PKI) -> IDevID. > 2) IDevID -> "generic" MUD file (signed by key from Manufacturer = PKI <%>) > 3) MUD file -> identifies key that signs firmware manifests > 4) SUIT MANIFEST -> "specific" (per version) MUD file >=20 > I had previous suggested that the SBOM be attached to the per-version = MUD > file, but I am not so sure anymore. >=20 > Note that the EAT described above would be *Evidence* (not Attestation > Results), per the architecture. It would be signed by the IDevID in = <2>. >=20 > Finally, if you didn't see my message to secdispatch about IDevID. > = https://mailarchive.ietf.org/arch/msg/secdispatch/Hqe1lHG2wnW_9NxJLazEYbmG= YN0/ >=20 > -- > Michael Richardson , Sandelman Software Works > -=3D IPv6 IoT consulting =3D- --Apple-Mail=_9CA36E55-8400-47A1-B3C0-53B490A39E07 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iFwEARECAB0WIQRJuTEKFXbtfFQz5huK5O7Q9ZwRywUCXvC+ZwAKCRCK5O7Q9ZwR ywfdAKDArxi5FjeP6SZWbDyo2gyPzFQYwgCYkDEPfERC5U1w58kYYe+04dP9aw== =Stry -----END PGP SIGNATURE----- --Apple-Mail=_9CA36E55-8400-47A1-B3C0-53B490A39E07-- From nobody Mon Jun 22 07:33:29 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8D8F3A0DC5 for ; Mon, 22 Jun 2020 07:33:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=B2d89Bs0; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=yrp6FlBv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mAjXTGNQHxzq for ; Mon, 22 Jun 2020 07:33:19 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B77A13A0DD4 for ; Mon, 22 Jun 2020 07:33:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=20933; q=dns/txt; s=iport; t=1592836399; x=1594045999; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=Q267syMtTDbYwyMGycp+XsYKhAOG/dm0oQK6pRKGGRY=; b=B2d89Bs0KoOX3ufdsQ6s/mpCBCkz1HE4hIQl9juf8B6uabtxkUSet0Jx qrD8aU2XVsrbCokbXtnudaFxIIRI1ny6B61eQQ/h+ziBY/t8KpaYFPPOq 6b+/ygTaZ5R7vB8wHTkhHnqAx8+dipV0JV9AMBM847kti314ZvCTOmrx+ U=; X-Files: smime.p7s : 3983 IronPort-PHdr: =?us-ascii?q?9a23=3A3kDqRxL7nenesAxUXtmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeGvKk/h17SVoKd4PVB2KLasKHlDGoH55vJ8HUPa4dFWB?= =?us-ascii?q?JNj8IK1xchD8iIBQyeTrbqYiU2Ed4EWApj+He2YkNUA835IVbVpy764TsbAB?= =?us-ascii?q?6qMw1zK6z8EZLTiMLi0ee09tXTbgxEiSD7b6l1KUC9rB7asY8dho4xJw=3D?= =?us-ascii?q?=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CwAABwwPBe/4MNJK1mGgEBAQEBAQE?= =?us-ascii?q?BAQEDAQEBARIBAQEBAgIBAQEBQIFKgSMvUQdvKy0vLAqHYAONRIdWjBaEaIJ?= =?us-ascii?q?SA1UEBwEBAQkDAQEjCgIEAQGERwKCKwIkOBMCAwEBCwEBBQEBAQIBBgRthVs?= =?us-ascii?q?MhXIBAQEBAxIbEwEBNwEPAgEIEQQBAS8CMB0IAQEEAQ0FCAYUgwWBfk0DHw8?= =?us-ascii?q?BDqsiAoE5iGF0gTSDAQEBBYFHQIM8GIIHBwMGgTiBU4EUiDmBQxqBQT+BEUO?= =?us-ascii?q?CHy4+axkBdGMCgTYrFRaDGoItmQmBEZo9CoJahCiCVIFGkQeCcY5AjUqRK4o?= =?us-ascii?q?VlDMCBAIEBQIOAQEFgWoigVZwFYMkUBcCDY4eg3GKHQE4dAI1AgYIAQEDCXy?= =?us-ascii?q?NIoE1AYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,267,1589241600"; d="p7s'?scan'208,217";a="517838950" Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Jun 2020 14:33:18 +0000 Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by alln-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id 05MEXIHa023830 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 22 Jun 2020 14:33:18 GMT Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 22 Jun 2020 09:33:18 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 22 Jun 2020 10:33:16 -0400 Received: from NAM04-BN3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 22 Jun 2020 10:33:16 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QMh+VE9N3FQHo4au1BRanNlFdO4xZtSFwN1AhhlHBTEHcDoMI86Kr+CTS2meLgLC3KFz5jFHASNOicCCQOpwfFTI4fRWj93jvfJ2UJWXDujq2Lxilkhn3kXAqvLxmdiLxu1EcBU5Uz0vKqxlMVQ3elYr4IcxTR4IwpRZYZQQSalnSno9e2tE/pq62j9OGMFU4uRpezT7zc/QD7FDFnqEV1AP9uE/2rKocAkt9KqwNf4A9rC1uTwU3SbFbRamYjL7rlSk4e62OUT4zoTv39UsUHfToJVKe4doFB1zQV+pzlFpirEEcdBJEQOwwjHSzEEhoEYpnS1jjUsQ3AayZkTEuA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PRKTiWsE3NgnU3aSrp47aWLk2mRR3fSy3HSi+abVA/E=; b=oJ4b4nN0QilWY7Zc3FIY5clFBhd2Sw1lHwdH+DFA4R4OinftI+Xr8+EXjzyYJ6BxMPwiB7b4gIetJB+ursjv1ELg1bfsUWnZ0lE78XH4t5M+znWY3E0FqPnnecMg3gWA4KDiEUtEWSRcSQTZi/q9bapunDFcXIthF8ijMadvP1ckn3Tu5SW8YHlkHnJJ48RQuwWu8/gMjmt6b/0piDgGhK8DxBQp5KPjJJ7Av84sOqF8nRxRqOc4Eqj9uyA1kskBU0o648TMJKAGvOUyHCfE2LLEAmY4cgt2P8eyAbMk8hopHQWZ/K4DR5PqF79/i9y0UGf7j/ZDz4mMTclf1DCBEg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PRKTiWsE3NgnU3aSrp47aWLk2mRR3fSy3HSi+abVA/E=; b=yrp6FlBvlQfqRDM+6VsF6XFNwcopsuHlycJlJzBemXQg114ZngJW/EFTIkZraiECRQ+sGHuYWPguorUklwbwJInKZF7bd6LFVHrlonFqO3fKIe7LUhWKJsU/h2RN3+kuYo1gbDxzjQQB1HhDdPpNy8WMCE2eUtwGNJKX6dT3tP0= Received: from MN2PR11MB3901.namprd11.prod.outlook.com (2603:10b6:208:138::12) by MN2PR11MB3742.namprd11.prod.outlook.com (2603:10b6:208:f9::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.23; Mon, 22 Jun 2020 14:33:15 +0000 Received: from MN2PR11MB3901.namprd11.prod.outlook.com ([fe80::8492:8c63:dd5f:39c7]) by MN2PR11MB3901.namprd11.prod.outlook.com ([fe80::8492:8c63:dd5f:39c7%5]) with mapi id 15.20.3109.027; Mon, 22 Jun 2020 14:33:15 +0000 From: "Bill Sulzen (bsulzen)" To: "Eric Voit (evoit)" , "henk.birkholz@sit.fraunhofer.de" , "michael.eckel@sit.fraunhofer.de" , "Shwetha Bhandari (shwethab)" , "frank.xialiang@huawei.com" , "tom.laffey@hpe.com" , "Guy Fedorkow" CC: "rats@ietf.org" Thread-Topic: Pull request for the charra YANG model Thread-Index: AdY/QqQk1SROUlurQ+m5+hKLyk0H7wJXtqdA Date: Mon, 22 Jun 2020 14:33:15 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [24.162.241.222] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 4a91a631-0639-42e9-8e46-08d816b93360 x-ms-traffictypediagnostic: MN2PR11MB3742: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0442E569BC x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: dsYbCYpByHRmw6QDiYTK8B4wublWre35ty5RFkZxUNImIw7PW4A/ZCJVdUjNCcTyfsBqx1n5o1p72NCl54lrbBYn1VfLlevMVE0PnTfc3tQ/LUroR3m4LZAU+RE+nLI6GKKSYKmzffsRC8W+ji8afgat4BJFnzjs8Lt/QvOFVQs8f+dzQbR3H3yzibgT37dLcuknOCysNwanaKa7dn80ZQRVCfRzVL/hEwfevR/dSKaVfrzz4MGNSe9ZGeHdzfyZovPUaOYkT8pWU8vPlH5f9wb6YeMn5/7aCDOZLL+2iAbUML+/XNhOA4jqrHuPYETqATiXltUCanQvRKL4ACqlnHFMuyOUsignGP1NvAhq11bDmEJvpcVG2IdgEVZ68695I67+YM6F9gyHXEq8kT0ikA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR11MB3901.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(136003)(396003)(366004)(346002)(39860400002)(33656002)(86362001)(26005)(83380400001)(53546011)(6506007)(5660300002)(7696005)(8936002)(186003)(71200400001)(66616009)(66476007)(66946007)(110136005)(166002)(9686003)(52536014)(66556008)(76116006)(99936003)(8676002)(55016002)(316002)(66446008)(64756008)(2906002)(478600001)(4326008); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_008C_01D64880.88DFF240" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 4a91a631-0639-42e9-8e46-08d816b93360 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jun 2020 14:33:15.7063 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: dOZAyOHmjwQBVd/q6sAQ8G1DCYG8k01LzazJ7ACNvOtOxPz/2kyjM7bOavpVYP7mBnT6A1+JzQNfvati21ex2g== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3742 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.15, xch-aln-005.cisco.com X-Outbound-Node: alln-core-1.cisco.com Archived-At: Subject: Re: [Rats] Pull request for the charra YANG model X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2020 14:33:25 -0000 ------=_NextPart_000_008C_01D64880.88DFF240 Content-Type: multipart/alternative; boundary="----=_NextPart_001_008D_01D64880.88DFF240" ------=_NextPart_001_008D_01D64880.88DFF240 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Eric, Regarding your issue: * Most devices do not have multiple line cards. Because of that, we should not have nested keys of [node id] [tpm name]. This adds unnecessary complexity for the vast majority of users. Instead the tpm should have a mandatory leafref back to node-id when compute-nodes is not null. as I read the updated attestation tree, there still is support for multiple TPMs in a given management plane (i.e. there's still support for multiple linecards - AKA "composite systems.") But if a given linecard/node within a management plane entity, then they would have to be differentiated by tpm-name rather than by node-id. Is that correct? Thanks, Bill From: Eric Voit (evoit) Sent: Wednesday, June 10, 2020 12:18 PM To: henk.birkholz@sit.fraunhofer.de; michael.eckel@sit.fraunhofer.de; Shwetha Bhandari (shwethab) ; Bill Sulzen (bsulzen) ; frank.xialiang@huawei.com; tom.laffey@hpe.com; Guy Fedorkow Cc: rats@ietf.org Subject: Pull request for the charra YANG model Henk, Michael, Shwetha, Bill, Frank, Tom, Guy, As authors of the Charra YANG model, I wanted to let you know I have created a pull request . I am proposing some fixes due to a number of concerns I had about the YANG model: * PCR numbers should be their own type, not a UINT8. PCRs should be limited to [0..31] * We should use ENUMs instead of strings for TCG and IETF crypto algorithm types. Strings allow lots of errors to be introduced which we can protect using a larger, more detailed ENUM construct. * Most devices do not have multiple line cards. Because of that, we should not have nested keys of [node id] [tpm name]. This adds unnecessary complexity for the vast majority of users. Instead the tpm should have a mandatory leafref back to node-id when compute-nodes is not null. * The YANG doctors will not let us have a TPM-Name of "ALL". Instead of "ALL" we should be able to assume that an RPC means all hardware based TPMs if a specific TPM is not named in the RPC. * We should add leaf for a unique 'certificate-name' is used. This allows for a cleaner certificate migration path, and most RPC users won't need to track node-ids. * We should have optional YANG features for TPM1.2 and TPM2.0 so that RPCs are not exposed when there are no such TPMs of that type are supported. * We should create new reusable groupings rather than repeat definitions. If your guys have suggestions and improvements for this pull request, that would be great. I also think the netequip boot pull request can also be integrated. Thanks, Eric ------=_NextPart_001_008D_01D64880.88DFF240 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Eric,

 

Regarding = your issue:

 

  • Most devices do not have multiple line cards. = Because of that, we should not have nested keys of [node id] [tpm name]. = This adds unnecessary complexity for the vast majority of users. Instead = the tpm should have a mandatory leafref back to node-id when = compute-nodes is not null.

as I = read the updated attestation tree, there still is support for multiple = TPMs in a given management plane (i.e. there’s still support for = multiple linecards – AKA “composite systems.”) But if = a given linecard/node within a management plane entity, then they would = have to be differentiated by tpm-name rather than by node-id. Is that = correct?

 

Thanks,

Bill

 

From: Eric = Voit (evoit)
Sent: Wednesday, June 10, 2020 12:18 = PM
To: henk.birkholz@sit.fraunhofer.de; = michael.eckel@sit.fraunhofer.de; Shwetha Bhandari (shwethab) = <shwethab@cisco.com>; Bill Sulzen (bsulzen) = <bsulzen@cisco.com>; frank.xialiang@huawei.com; = tom.laffey@hpe.com; Guy Fedorkow = <gfedorkow@juniper.net>
Cc: = rats@ietf.org
Subject: Pull request for the charra YANG = model

 

Henk, =         Michael,

Shwetha,   Bill,

Frank, =        Tom,

Guy,

 

As authors = of the Charra YANG model, I wanted to let you know I have created a p= ull request.  I am proposing some fixes due to a numbe= r of concerns I had about the YANG model:

 

  • PCR numbers should be their own type, not a = UINT8. PCRs should be limited to [0..31]
  • We should use ENUMs instead of strings for TCG = and IETF crypto algorithm types. Strings allow lots of errors to be = introduced which we can protect using a larger, more detailed ENUM = construct.
  • Most devices do not have multiple line cards. = Because of that, we should not have nested keys of [node id] [tpm name]. = This adds unnecessary complexity for the vast majority of users. Instead = the tpm should have a mandatory leafref back to node-id when = compute-nodes is not null.
  • The YANG doctors will not let us have a TPM-Name = of "ALL". Instead of "ALL" we should be able to = assume that an RPC means all hardware based TPMs if a specific TPM is = not named in the RPC.
  • We should add leaf for a unique 'certificate-name' is used. This allows for a = cleaner certificate migration path, and most RPC users won't need to = track node-ids.
  • We should have optional YANG features for TPM1.2 = and TPM2.0 so that RPCs are not exposed when there are no such TPMs of = that type are supported.
  • We should create new reusable groupings rather = than repeat definitions.

If = your guys have suggestions and improvements for this pull request, that = would be great.   I also think the netequi= p boot pull request can also be integrated.

 

Thanks,

Eric

 

------=_NextPart_001_008D_01D64880.88DFF240-- ------=_NextPart_000_008C_01D64880.88DFF240 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMYTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBKQwggOMoAMCAQICCgGGFYU1ZTLO wbAwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTIwMDIyNDEzMjEzNloXDTIyMDIyMzEzMzEzNlowgZgxHjAcBgNVBAMTFUJpbGwg U3VsemVuIChic3VsemVuKTEUMBIGA1UECxMLQ2lzY28gVXNlcnMxEjAQBgNVBAsTCUVtcGxveWVl czETMBEGCgmSJomT8ixkARkTA2NvbTEVMBMGCgmSJomT8ixkARkTBWNpc2NvMSAwHgYJKoZIhvcN AQkBDBFic3VsemVuQGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIRU x/IUEvpTrvqBPRI35mVonx9w/St7dQAVrVaGNNBAldgKdRl4NR+k/c6v6p6yWqz8F/bcDOrnPw1u 09YMfo8ynwFjq0DLa5kVCUNhVx9XobuzHIiCbb0P9cgTExT8gvmrDah7zbYQzPRscpLcFuo7p8wQ pH/f5QwSyLOXMZ6ujPX8vsIOt+iNweXGoN7QYXD4QThGStcRFEwTYgq1GNrS5d9wzdVz/+teCoYT 13a6UMhQoNlv5P81MEbqCvJUXQ1K5pD6hxbXEHdRkBhUmoGn6zBvzbvZDTsp9A//QJnxx/gGdZ5/ heRgEyL1H3XUhiizSTn/UuOZIPqBRwUrMJsCAwEAAaOCAVkwggFVMA4GA1UdDwEB/wQEAwIE8DAM BgNVHRMBAf8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNj by5jb20vc2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtp Y3ZzLmNpc2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6 BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNy bDAcBgNVHREEFTATgRFic3VsemVuQGNpc2NvLmNvbTAdBgNVHQ4EFgQUbHBEfXFYwLZrNH3tLMtW ZbptVTYwHwYDVR0lBBgwFgYKKwYBBAGCNwoDDAYIKwYBBQUHAwQwDQYJKoZIhvcNAQELBQADggEB ABOzIogt6iMPxtc5OZE7rKO2IEqik5ky+3V1kWI6EE1AdljA9doi6iq1I3k09cddVKva3LSs8HQh bKCqSMwH2Bl+ytf2jgVzEVJoBbZbV5t7c1q1wZKTkY1MiCRQikNyIUYHVjoCCWDkJa+w/AEdjiy4 KeCeDfbY/00hSGwnAd0YuoosK5geqs6SFy6dxKxygkppnt9npUmK2toiC5WH9y65RDmER9Oz5rEC nkjoE+zLKPs0/7iDw113ZASiCky6n7L5oWWLSSDx09vOI8ldzPjx/cJ6lt2+Tz0nm34q7mMn+ZJB j4+10UzDMLNOk5QxkEqk0CFAWNrqvUPDjnEWo10xggLwMIIC7AIBATA6MCwxDjAMBgNVBAoTBUNp c2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIKAYYVhTVlMs7BsDAJBgUrDgMCGgUAoIIB izAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMDA2MjIxNDMzMTRa MCMGCSqGSIb3DQEJBDEWBBQHxk2DdbAf3DzE8jOmRFVrmaLiNTBJBgkrBgEEAYI3EAQxPDA6MCwx DjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIKAYYVhTVlMs7BsDBL BgsqhkiG9w0BCRACCzE8oDowLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBAgoBhhWFNWUyzsGwMIGTBgkqhkiG9w0BCQ8xgYUwgYIwCwYJYIZIAWUDBAEqMAsGCWCG SAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQMEAQIwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3 DQMCAgFAMAcGBSsOAwIaMAsGCWCGSAFlAwQCAzALBglghkgBZQMEAgIwCwYJYIZIAWUDBAIBMA0G CSqGSIb3DQEBAQUABIIBAFj/9AGTMilc0y5CwVSruxm8i2WT/8/+4fEZWzpILAlnFXNWCvbDSQAW +QxO/RGEEJ3sPCgmI5mOcxMH2lqTTf4THZj0zM4ao7RMObdHwyX9dx4zt9kwMhx2PYEB32accguU 5RxOs1pkd12gfB0pEJyNQo2+s8HWngzqaBtMbf8W54dklR2LeDebCIsStsK+ElX/z01zLNu5DCsJ fOJGCGUZrZuu8i8EVy7ZNNvvdzieqwGCJVnXYp9snGgV18aRMD0N8tAoC6AGcll8/RqkJbD6KSCh f1iLYvgJtBUaEsjrFqP3jJ0/ztwvYjYncKkAd1pFFCuoD+uuOSucmXZjtkIAAAAAAAA= ------=_NextPart_000_008C_01D64880.88DFF240-- From nobody Mon Jun 22 07:43:21 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6066B3A0DB0; Mon, 22 Jun 2020 07:43:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.601 X-Spam-Level: X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aA3YxN6HcQ7o; Mon, 22 Jun 2020 07:43:11 -0700 (PDT) Received: from aer-iport-1.cisco.com (aer-iport-1.cisco.com [173.38.203.51]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36EEF3A0D54; Mon, 22 Jun 2020 07:43:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1233; q=dns/txt; s=iport; t=1592836986; x=1594046586; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=WqJdOYFFh2vYOJsLjb3cjW3rOgAgwy9ZHWedBsGT9OM=; b=VzLHhMrYY2Yzg2AH2bqHZeIoSSYACW999eX1tatOY/ZaOlEEhHa7HfTi M8uZaNU7gWzL2B6/bai4j8VNghDXXeD+gr7NlbDurjakyaXZpMdh/uWy2 X3IelQuE/VFGdnghm6q1nUjW+AjMedmKUynGmU7P1PvEgf9x11sURe3Eg Y=; X-Files: signature.asc : 488 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CNAwCnwvBe/xbLJq1mHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQGCCoIqgUMBIBIshCSJAYgMm34EBwEBAQkDAQEvBAEBhEAHAoI?= =?us-ascii?q?sJTgTAgMBAQsBAQUBAQECAQYEbYVnhXIBAQEBAgEjVgULCxgqAgJXBhODJgG?= =?us-ascii?q?CXCC1TnaBMoVRhRMQgTiBU4sqggCBESccgk0+h1Ezgi0EmhaaPYJkgwKBJpU?= =?us-ascii?q?BAx2CXwGcG6wkg08CBAYFAhWBaiKBVjMaCBsVZQGCPj4SGQ2cZz8DMDcCBgE?= =?us-ascii?q?HAQEDCZBkAQE?= X-IronPort-AV: E=Sophos;i="5.75,267,1589241600"; d="asc'?scan'208";a="27340009" Received: from aer-iport-nat.cisco.com (HELO aer-core-3.cisco.com) ([173.38.203.22]) by aer-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Jun 2020 14:43:02 +0000 Received: from dhcp-10-61-111-164.cisco.com (dhcp-10-61-111-164.cisco.com [10.61.111.164]) by aer-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 05MEh1Hv027450 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 22 Jun 2020 14:43:01 GMT From: Eliot Lear Message-Id: <4BE0A1F6-D474-4AEA-AF2B-6C67A1A37F5F@cisco.com> Content-Type: multipart/signed; boundary="Apple-Mail=_F3B85A6A-45E4-412D-A6C2-8C286D23BB89"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Date: Mon, 22 Jun 2020 16:43:00 +0200 In-Reply-To: Cc: Michael Richardson , draft-moran-suit-mud@ietf.org, suit , rats@ietf.org, opsawg@ietf.org, Henk Birkholz To: Russ Housley References: <12373.1592169791@localhost> X-Mailer: Apple Mail (2.3608.80.23.2.2) X-Outbound-SMTP-Client: 10.61.111.164, dhcp-10-61-111-164.cisco.com X-Outbound-Node: aer-core-3.cisco.com Archived-At: Subject: Re: [Rats] [Suit] draft-moran-suit-mud, EAT and MUD X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2020 14:43:14 -0000 --Apple-Mail=_F3B85A6A-45E4-412D-A6C2-8C286D23BB89 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I think that=E2=80=99s a fine answer. > On 22 Jun 2020, at 16:21, Russ Housley wrote: >=20 >=20 > I think that the best way forward is to ask SECDISPATCH. I do not = think SUIT is a bad answer, but we have a process to pick. >=20 > Russ --Apple-Mail=_F3B85A6A-45E4-412D-A6C2-8C286D23BB89 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAl7ww3QACgkQh7ZrRtnS ejNVFQf+IN2jV83t7wKYx67fYxrtXIExuR5Jh+Z4DxbDLcTTGIJEfqlNm/ygKD+5 gQQhshJMSYbVTshPp4ex5Jta6fmaS1VyR2uEfVR0Q7IUpt/nkEuVqIg3JKxSTRnY ngW6yxsqEDxsw0RmV8n0k2P97UhtgRGZ0d6lOPMnS/FRLx+EmB9I69kt5JncCBzN mqiVTAxu8ctJVvLEpV7Bm6Irxs9CjsYuIWnQ0b3t4veAS/UHT3VyZehfqCkoQkeb 0l9oBo2jE3EapDWhZimcanGnVSBIbs3KXIl9iYNHFTHnjLlBHI8V/L99O+MlRjZh k7juZCFecadF4mcnqRr9+ZwEeEqogg== =LWDS -----END PGP SIGNATURE----- --Apple-Mail=_F3B85A6A-45E4-412D-A6C2-8C286D23BB89-- From nobody Mon Jun 22 07:58:39 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0B543A0D94 for ; Mon, 22 Jun 2020 07:58:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=lm+3jsud; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=f3O4karu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e6UySgwj1ohX for ; Mon, 22 Jun 2020 07:58:35 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9B623A0D93 for ; Mon, 22 Jun 2020 07:58:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=26368; q=dns/txt; s=iport; t=1592837914; x=1594047514; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=3UrFVX2+5RfWGjTc0rkV/ci0pgn7j5qNWOFgvh7QcqE=; b=lm+3jsud1pUlhlXyn6iSHt+pNqv4LQ75WDPT8XaBXmxM+afMkX4SIydx Cl+7ca7lt6A2hwcl73X7Jqu1J/2BD5yCDtFHxl+3efTl5b5II1u/QXN0r 0P6/CktlGSrSoav3smaGQeHOAUbhW4fKmjoX7ybrDNmtgMziDpbqrYpVx o=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AAW+iChK6cw3Ed+HfD9mcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeGvKk/h17SVoKd4PVB2KLasKHlDGoH55vJ8HUPa4dFWB?= =?us-ascii?q?JNj8IK1xchD8iIBQyeTrbqYiU2Ed4EWApj+He2YkNUA835IVbVpy764TsbAB?= =?us-ascii?q?6qMw1zK6z8EZLTiMLi0ee09tXTbgxEiSD7b6l1KUC9rB7asY8dho4xJw=3D?= =?us-ascii?q?=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CwAABdxvBe/5tdJa1mGgEBAQEBAQE?= =?us-ascii?q?BAQEDAQEBARIBAQEBAgIBAQEBQIFKgSMvUQdvKy0vLAqHYAONQ4dWkH6CUgN?= =?us-ascii?q?VBAcBAQEJAwEBIwoCBAEBhEcCgisCJDgTAgMBAQsBAQUBAQECAQYEbYVbDIV?= =?us-ascii?q?yAQEBAQMSGxMBATcBDwIBCBEEAQEhBwcCMBQJCAEBBAENBQgGFIMFgX5NAx8?= =?us-ascii?q?PAQ6rJgKBOYhhdIE0gwEBAQWBR0CDNxiCBwcDBoE4gVOBFIg5gUMagUE/gRF?= =?us-ascii?q?Dgh8uPmsZAXRjAoE2KxUWCYMRgi2ZCYERmj0KglqEKIJUgUaRB4JxjkCNSpE?= =?us-ascii?q?rihWUMwIEAgQFAg4BAQWBaiKBVnAVgyRQFwINjh6DcYodATh0AjUCBggBAQM?= =?us-ascii?q?JfI0igTUBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,267,1589241600"; d="p7s'?scan'208,217";a="511746801" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Jun 2020 14:58:33 +0000 Received: from XCH-ALN-004.cisco.com (xch-aln-004.cisco.com [173.36.7.14]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id 05MEwXYV010188 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 22 Jun 2020 14:58:33 GMT Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-004.cisco.com (173.36.7.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 22 Jun 2020 09:58:33 -0500 Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 22 Jun 2020 09:58:33 -0500 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 22 Jun 2020 10:58:32 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NVFkB1YUPwYDjrtl+Hr53nSD+Irap0Nu+wR3UFWuh4eZX2YUhLJxXB3jp2iHxlq7rSdyrJ+iPj90n8qpqawCU0neVdK+/As+fDSMUrgPOg7noNksMJHrzM1aYdfdEH85N1pBYgat/Dl2pX2zT+SUypu0wyxOSf17ZZFlhC7wmMcaGQm20Q54yi4pATxkqTXJbjgC7EdYKb+cEfHdYo/QvT+LdLudBU94mnBlFrX/gGmhKwbEXyNKW1CM6m+57lP52aHq8knk7G0ltVPAkAE+objulRC4uPqyIgsBYcOwq8kGqgeNRUZWNsMP0ZHjRITnB8SnJSttm5CCsso7TFPK8A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=H1wCzxjqhwx7aUz/mX7hVGeklGkVfmoJrGPl6uhX6g8=; b=U4dmxk4eO1GvnzpKw40qHPaImiBH9vsCaMLh1I/SOYzFly2J8eJ3C+Z0q+B0Y9BcPacSMf666X6VI5bMb98tR0dNzAdsEcw7WKwIhdWlOFk9YTBvNv2MgXaSad+TGhSVyDgKE97vvI4zNoTPUal8qdGym4oJ4vti8R/7lUsKkGP97tJXzwDNvqIjqkgtQKsF8DscjODCeuMnOXAEYLMAmIPw8uLIuspXQxaiyhVVOmj+nOqbnrUa5VFWH1I9WrAH9nkT3oDweIUVnu6tA11qU+FpzNPJzyku9gjRPwppL5nqb1vHuDcDzqh5R6eOYJkqIQr9J3Jc7W3zHfgSNaPFyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=H1wCzxjqhwx7aUz/mX7hVGeklGkVfmoJrGPl6uhX6g8=; b=f3O4karuIPQlQfvHQnqzw/TLWTJ6Gby7FK1fXQFehvP1jfpGrIXOUObPc9esGGWAqHqX5832ln2xYwrJj+EBYTlgP5LkoMoPGXnBuQODHYOqoC5QgF/PjWu1VV47bgxeFpYRVku/39Q2pzBCEQ/tmQ2PtY+ruWqntD/PGvlk/vU= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by BL0PR11MB3314.namprd11.prod.outlook.com (2603:10b6:208:6d::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.23; Mon, 22 Jun 2020 14:58:31 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290%7]) with mapi id 15.20.3109.027; Mon, 22 Jun 2020 14:58:31 +0000 From: "Eric Voit (evoit)" To: "Bill Sulzen (bsulzen)" , "henk.birkholz@sit.fraunhofer.de" , "michael.eckel@sit.fraunhofer.de" , "Shwetha Bhandari (shwethab)" , "frank.xialiang@huawei.com" , "tom.laffey@hpe.com" , "Guy Fedorkow" CC: "rats@ietf.org" Thread-Topic: Pull request for the charra YANG model Thread-Index: AdY/QqQk1SROUlurQ+m5+hKLyk0H7wJXtqdAAACZD4A= Date: Mon, 22 Jun 2020 14:58:31 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.85] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 72e19ad1-7660-41f9-2eb6-08d816bcbad9 x-ms-traffictypediagnostic: BL0PR11MB3314: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0442E569BC x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: UO2F3nwRSZKj2A1HN3upxwNkzWFpe9QC6J6UwF7GDGUNQ9k1hnnIrPW4QaE+U5ga/ybdosYDXWxDf2UDsJprGYbwrr9JTrpL7A1r9o3kNi7gXyT7uTiD4eGa9OF9lNxjg4jVrRup6NgrKfMiD5470vXzkIojSoElan/9dUXlIkimmd5zdWXJLSnxc9YldvmSpOaocbyP+z0i8dL5thGAW84F+POgk0FmkYLEE2WkLEvIAWKgqbD8/IvW90WAqRFgms/Pz+fZ8DPHym8PXaPL0AE2GeopRbh/eiLoRQd0qWVJWauRWFxwEzrzN08m8NQCXe++wMs0/7F4yGLGBZV6UH1ivWJTeCFdIyVtOWqbBfpi1mYvQy5bzM7SoL2E8hcjnCwoXt2KVkT4wlYeEsl01w== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(136003)(396003)(366004)(346002)(39860400002)(33656002)(26005)(83380400001)(86362001)(53546011)(7696005)(71200400001)(8936002)(186003)(6506007)(5660300002)(66616009)(66476007)(66946007)(110136005)(166002)(9686003)(9326002)(66556008)(76116006)(52536014)(99936003)(478600001)(64756008)(316002)(66446008)(4326008)(2906002)(55016002)(8676002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: QdnS3DGzsdmsMoIUThHEwiejH7Mc2rTwr6tPwhswgxtB3PKlm17G/0desQVkKFJSfr6OKo7+W2fGHMB4llI/qtkiJMvZtIJKz3ksD0X8ESqR3qTE0kdKzgc3J6vKG7NZLQ4bwNV5h9XMKCn8pxUdERkL1hKuCrf+vE/gFvIqGaCmnveNhSfiABEl5uFsnFec58mf9oOFAKn25eFdym5BaUyoFgqsPoQp/YeCgHorzg0xavJS+fNSFsSvVHJkWWFS9pQBa1IaHsdfuWDgLAGmfvrCLKmQbqh7QCL2QB6OlLryICpu+/1kqNrlgg22u3HB7TCfnstMzO2UHyAE9CkT0o9kpiLestJLdTKjwRrV+4WMjnZFAHv6X5eREtoGIxCOcaq+bsGZdzp5PR2lLCTCJmvuQmjBW8ZoQgVZKXTJEX90z84NQKFd3T4lNiaMrfxFO04GNYCWV49TB9RUVi1yTYAoRc7m6x9LLBKPHQqsoKHjVKQFdCNiwliZgR6GOg34 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; boundary="----=_NextPart_000_0063_01D64884.0C6C85D0"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 72e19ad1-7660-41f9-2eb6-08d816bcbad9 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jun 2020 14:58:31.5654 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: xhmBSNU/letSBQ8oP7w5lSX5re+ch6RrgKSoN8mRaqr9pPtVrxxjUxbD5Z4mzLMU X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR11MB3314 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.14, xch-aln-004.cisco.com X-Outbound-Node: rcdn-core-4.cisco.com Archived-At: Subject: Re: [Rats] Pull request for the charra YANG model X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2020 14:58:37 -0000 ------=_NextPart_000_0063_01D64884.0C6C85D0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0064_01D64884.0C6C85D0" ------=_NextPart_001_0064_01D64884.0C6C85D0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi Bill, From: Bill Sulzen (bsulzen), June 22, 2020 10:33 AM Subject: RE: Pull request for the charra YANG model Eric, Regarding your issue: * Most devices do not have multiple line cards. Because of that, we should not have nested keys of [node id] [tpm name]. This adds unnecessary complexity for the vast majority of users. Instead the tpm should have a mandatory leafref back to node-id when compute-nodes is not null. as I read the updated attestation tree, there still is support for multiple TPMs in a given management plane (i.e. there's still support for multiple linecards - AKA "composite systems.") Yes your interpretation is correct. When there are multiple line-cards, the YANG model requires a leaf-ref to that card. But if a given linecard/node within a management plane entity, then they would have to be differentiated by tpm-name rather than by node-id. Is that correct? The 'tpm-name' object needs to be unique across a composite device, it could be a random string (in fact this is a common practice for YANG models). Initially I thought about populating that name with the 'tpm-path'. However that 'tpm-path' might change across reboots. Both the 'tpm-path' and 'tpm-name' are unique within a single boot cycle, and can be used as part of a lookup within the data nodes of 'rats-support-structures'. Eric Thanks, Bill From: Eric Voit (evoit) Sent: Wednesday, June 10, 2020 12:18 PM To: henk.birkholz@sit.fraunhofer.de ; michael.eckel@sit.fraunhofer.de ; Shwetha Bhandari (shwethab) >; Bill Sulzen (bsulzen) >; frank.xialiang@huawei.com ; tom.laffey@hpe.com ; Guy Fedorkow > Cc: rats@ietf.org Subject: Pull request for the charra YANG model Henk, Michael, Shwetha, Bill, Frank, Tom, Guy, As authors of the Charra YANG model, I wanted to let you know I have created a pull request . I am proposing some fixes due to a number of concerns I had about the YANG model: * PCR numbers should be their own type, not a UINT8. PCRs should be limited to [0..31] * We should use ENUMs instead of strings for TCG and IETF crypto algorithm types. Strings allow lots of errors to be introduced which we can protect using a larger, more detailed ENUM construct. * Most devices do not have multiple line cards. Because of that, we should not have nested keys of [node id] [tpm name]. This adds unnecessary complexity for the vast majority of users. Instead the tpm should have a mandatory leafref back to node-id when compute-nodes is not null. * The YANG doctors will not let us have a TPM-Name of "ALL". Instead of "ALL" we should be able to assume that an RPC means all hardware based TPMs if a specific TPM is not named in the RPC. * We should add leaf for a unique 'certificate-name' is used. This allows for a cleaner certificate migration path, and most RPC users won't need to track node-ids. * We should have optional YANG features for TPM1.2 and TPM2.0 so that RPCs are not exposed when there are no such TPMs of that type are supported. * We should create new reusable groupings rather than repeat definitions. If your guys have suggestions and improvements for this pull request, that would be great. I also think the netequip boot pull request can also be integrated. Thanks, Eric ------=_NextPart_001_0064_01D64884.0C6C85D0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi = Bill,

 

From: Bill = Sulzen (bsulzen), June 22, 2020 10:33 AM
Subject: RE: Pull = request for the charra YANG model

 

Eric,

 

Regarding = your issue:

 

  • Most devices do not have multiple line cards. = Because of that, we should not have nested keys of [node id] [tpm name]. = This adds unnecessary complexity for the vast majority of users. Instead = the tpm should have a mandatory leafref back to node-id when = compute-nodes is not null.

as I = read the updated attestation tree, there still is support for multiple = TPMs in a given management plane (i.e. there’s still support for = multiple linecards – AKA “composite systems.”) =

 

<eric>   = Yes your interpretation is correct.  When there are multiple = line-cards, the YANG model requires a leaf-ref to that card. =

 

But if a given linecard/node within a management plane = entity, then they would have to be differentiated by tpm-name rather = than by node-id. Is that correct?

 

<eric> The 'tpm-name' object needs to be = unique across a composite device, it could be a random string (in fact = this is a common practice for YANG models).   =

 

Initially I thought = about populating that name with the 'tpm-path'.  However that = 'tpm-path' might change across reboots.   Both the 'tpm-path' = and 'tpm-name' are unique within a single boot cycle, and can be used as = part of a lookup within the data nodes of = 'rats-support-structures'.

 

Eric

 

Thanks,

Bill

 

From: Eric = Voit (evoit)
Sent: Wednesday, June 10, 2020 12:18 = PM
To: henk.birkholz@sit.fraunho= fer.de; michael.eckel@sit.fraunho= fer.de; Shwetha Bhandari (shwethab) <shwethab@cisco.com>; Bill = Sulzen (bsulzen) <bsulzen@cisco.com>; frank.xialiang@huawei.com; = tom.laffey@hpe.com; Guy = Fedorkow <gfedorkow@juniper.net>
Cc: rats@ietf.org
Subject: Pull = request for the charra YANG model

 

Henk, =         Michael,

Shwetha,   Bill,

Frank, =        Tom,

Guy,

 

As authors = of the Charra YANG model, I wanted to let you know I have created a p= ull request.  I am proposing some fixes due to a numbe= r of concerns I had about the YANG model:

 

  • PCR numbers should be their own type, not a = UINT8. PCRs should be limited to [0..31]
  • We should use ENUMs instead of strings for TCG = and IETF crypto algorithm types. Strings allow lots of errors to be = introduced which we can protect using a larger, more detailed ENUM = construct.
  • Most devices do not have multiple line cards. = Because of that, we should not have nested keys of [node id] [tpm name]. = This adds unnecessary complexity for the vast majority of users. Instead = the tpm should have a mandatory leafref back to node-id when = compute-nodes is not null.
  • The YANG doctors will not let us have a TPM-Name = of "ALL". Instead of "ALL" we should be able to = assume that an RPC means all hardware based TPMs if a specific TPM is = not named in the RPC.
  • We should add leaf for a unique 'certificate-name' is used. This allows for a = cleaner certificate migration path, and most RPC users won't need to = track node-ids.
  • We should have optional YANG features for TPM1.2 = and TPM2.0 so that RPCs are not exposed when there are no such TPMs of = that type are supported.
  • We should create new reusable groupings rather = than repeat definitions.

If = your guys have suggestions and improvements for this pull request, that = would be great.   I also think the netequi= p boot pull request can also be integrated.

 

Thanks,

Eric

 

------=_NextPart_001_0064_01D64884.0C6C85D0-- ------=_NextPart_000_0063_01D64884.0C6C85D0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNjIyMTQ1ODIzWjAjBgkqhkiG 9w0BCQQxFgQU7ffpKc+x6ChAGT8LJ52e+k8tfzQwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAH3C4exVTgGaC29tHP9KSPSpr6EetwcI2CmKWvAjgKBr0ezSElYsZcc7u7airb/RvE W40dUncHLwD3uqmI0Q1fQ7PoKEnSDGlTRfga9Y0DZogEK5l0pqpXBHmWCwwL026S/7oMb3Y0I9JY pLgDu8QFRyyRQ2ioF7jFvXMQpPqaQ971oI21qlZYnC6i0PQktifAqOLbBJKhFeG2IAPytV0qPpFi SCB/qh8u0LSkv6guMau4J2L+ae7mgso5lWd7SbU/KN5WozzJGbxOGrUNZTwSmYEYxEGSXLm4bIIx onGXhoM6Vo9AiIb1gPzNNJ5OTkzPTvr0193s+v84rV0lu6fyAAAAAAAA ------=_NextPart_000_0063_01D64884.0C6C85D0-- From nobody Tue Jun 23 08:37:59 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB3DC3A1014 for ; Tue, 23 Jun 2020 08:01:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com header.b=O3i72ho+; dkim=pass (2048-bit key) header.d=gmail.com header.b=vgmI9sWY Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xdYTxHAdM8sA for ; Tue, 23 Jun 2020 08:01:26 -0700 (PDT) Received: from mail-vk1-xa4a.google.com (mail-vk1-xa4a.google.com [IPv6:2607:f8b0:4864:20::a4a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0DDC3A1002 for ; Tue, 23 Jun 2020 08:01:26 -0700 (PDT) Received: by mail-vk1-xa4a.google.com with SMTP id g3so6060380vkb.23 for ; Tue, 23 Jun 2020 08:01:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:reply-to:sender:message-id:date:subject:from:to; bh=PggZ9efZ7iCiZFZGqdNzwpuXdQtzlNDYm022Rz0qr2c=; b=O3i72ho+dJ1fSfzjf6LnGnLAkd/B7XpQ+sEo9LK49gClvD2K3Wg7hHLxDsiCNVmfbq vpW5rxMYvkemKI48BteiSnkXCcK2BlgXd+Nx2qCIpDbbwcoTE95xVJeTDp0QLOzwAWWP lNggCCJ0OSP6gGFsKPd4YkDx6A8wNVfZwqYrNxjUO6Aus+5JSFJUoKPzZUCJTgPI01Z8 JseogzKc1LBZAOamlnOXM4vvRxbLKwHtyGSsfBX0ffy87BrDR86g8/0YnkkDI1lDDFY/ 07pPxg7xMhJgJm6VeV2XXc5SBruNiCeY4Lo/ZKP9zwsGkNUcjBN/dIVq0b1SZDU+0kvt Ex5w== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:reply-to:sender:message-id:date:subject:from:to; bh=PggZ9efZ7iCiZFZGqdNzwpuXdQtzlNDYm022Rz0qr2c=; b=vgmI9sWYZiVg+yZBu615YpRAhMoIBIZZfl+WC3w6jV++Dkl/pjV8P7+coTW8PThXdB zAwpTTxLzHduTmXjY9K6NujznlFOdXL/JxFMxLpUJN4RkJ51wAhfJ7U/LXKUhUsIfqIi qeL3nfirCIvs+1hcEesLglGMpb3H606n40hDZRi6F+Fdbz6d+DIwhK3SPXEP8r7FYs9K eRlrPMxdI5gtzW+zcKZpNCkLgOnxt5iMT//I4k+zz3dCtc9b9z2x/M0k4XPMuXcSIzx6 0dLyHYmXR6HWUCQUvBCaneH5xfe/f2xlewMp1Qte6YJL0PqW/o5K0IuKNatSL7SOybEV sBqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:reply-to:sender:message-id:date :subject:from:to; bh=PggZ9efZ7iCiZFZGqdNzwpuXdQtzlNDYm022Rz0qr2c=; b=TBM335mERbLyG2dQppl2UkjllRyYyRI3Sjf7wdG1+fEaTrmfo7vZjHwTfotX7AvIGd REtU0RWWob25ybr9CNWsz7EHOH3gPSclB4OksMdkCLY6/YSZ8P6JI+w2hP7bh94zeM4j Z2QjM3f2CUOABBEY+OaFNlF5yhXhP9jiR3WZu6fysAa4IfsRmHhu4IyWnz/pb5y/7I3Y 4aTiBtUCK7JUN2tORrcr+caKCkVzNWaEqsoz/yM5usUXT5AXF13FLWRtXeDAsnr+ZIlM kl3/PSxkM+B2gsCmU3j8Kux99U17RCeXWKlVBGPy+6VFmJ3o/1/qI7AjrOkDcexGBB0y jlVw== X-Gm-Message-State: AOAM533Y4kZYldv0NAHNztQuA8Oi1CQX3ZHTNkWM+w64LduZgbhxH7YJ lL/y3BXQiJzo08+Kj5TA0/fSdoLhPiMU4X3SBK4= X-Google-Smtp-Source: ABdhPJwpxN0LIca5VHT46WHVJ5KbSinVzQWYVEv/l4GBkJkw9niiV8y+P2MynxqL6gDN9rm0eFnf61aOiZJK/bMXw937 MIME-Version: 1.0 X-Received: by 2002:a67:d201:: with SMTP id y1mr19450001vsi.75.1592924484949; Tue, 23 Jun 2020 08:01:24 -0700 (PDT) Reply-To: mcharlesr@gmail.com Sender: Google Calendar Message-ID: <000000000000145c7505a8c1a292@google.com> Date: Tue, 23 Jun 2020 15:01:24 +0000 From: mcharlesr@gmail.com To: rats@ietf.org, prowe@mitre.org, elear@cisco.com, mdb@juniper.net, ncamwing@cisco.com, Nicolae Paladi , jodonogh@qti.qualcomm.com, lgl@island-resort.com, Thomas Hardjono , blueroofmusic@gmail.com, Thomas Fossati , mathias.brossard@arm.com, Pete Loscocco , Thomas Fossati , "Guinn, Andrew L." , Ned Smith , Henk Birkholz , shwethab@cisco.com, dthaler@microsoft.com, Peter Loscocco , "Helble, Sarah C." Content-Type: multipart/mixed; boundary="000000000000145c4505a8c1a291" Archived-At: X-Mailman-Approved-At: Tue, 23 Jun 2020 08:37:58 -0700 Subject: [Rats] Invitation: RATS Architecture Design Team weekly meeting time @ Weekly from 10:00 to 11:00 on Friday from Fri 2020-06-26 to Tue 2020-06-30 (EDT) (rats@ietf.org) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jun 2020 15:01:29 -0000 --000000000000145c4505a8c1a291 Content-Type: multipart/alternative; boundary="000000000000145c4205a8c1a28f" --000000000000145c4205a8c1a28f Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes You have been invited to the following event. Title: RATS Architecture Design Team weekly meeting time Meeting link:https://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452794c25Meeting number:610 366 750Password:4vY2aS6X8DFHost key:820822More ways to join When: Weekly from 10:00 to 11:00 on Friday from Fri 2020-06-26 to Tue 2020-06-30 Eastern Time - Toronto Where: https://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452794c25, Joining info: Join with Google Meet https://meet.google.com/tju-xpot-axd Calendar: rats@ietf.org Who: * mcharlesr@gmail.com - organizer * prowe@mitre.org * elear@cisco.com * mdb@juniper.net * ncamwing@cisco.com * Nicolae Paladi * rats@ietf.org * jodonogh@qti.qualcomm.com * lgl@island-resort.com * Thomas Hardjono * blueroofmusic@gmail.com * Thomas Fossati * mathias.brossard@arm.com * Pete Loscocco * Thomas Fossati * Guinn, Andrew L. * Ned Smith * Henk Birkholz * shwethab@cisco.com * dthaler@microsoft.com * Peter Loscocco * Helble, Sarah C. Event details: https://www.google.com/calendar/event?action=VIEW&eid=NGxjcmowdnNzazA5Y2tqNW5mOXJrMmgxZzkgcmF0c0BpZXRmLm9yZw&tok=MTkjbWNoYXJsZXNyQGdtYWlsLmNvbWU2NTk2ODcyODUyYmVlNWVlMDJjZTMzN2Q0NDBhZTM3MjNhNWNiZTQ&ctz=America%2FToronto&hl=en&es=0 Invitation from Google Calendar: https://www.google.com/calendar/ You are receiving this courtesy email at the account rats@ietf.org because you are an attendee of this event. To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar. Forwarding this invitation could allow any recipient to send a response to the organizer and be added to the guest list, or invite others regardless of their own invitation status, or to modify your RSVP. Learn more at https://support.google.com/calendar/answer/37135#forwarding --000000000000145c4205a8c1a28f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
=

You have been invited to the follo= wing event.

RATS Architecture Design Team weekl= y meeting time

=
Calendar
Meeting link:
https://ietf.web= ex.com/ietf/j.php?MTID=3Dm4c3d7395a15dad1ed8c0f95452794c25
Meet= ing number:
610 366 750
Password:
4vY2aS6X8DF
<= dt>Host key:
820822


More ways to join
<= /div>

Going (rats@ietf.org)?   All events in this= series:   Yes - Maybe - No    more opt= ions »

When
W= eekly from 10:00 to 11:00 on Friday from Fri 2020-06-26 to Tue 2020-06-30 <= span style=3D"color:#888">Eastern Time - Toronto
Where
= https://ietf.webex.com/ietf/j.php?MTID=3Dm4c3d7395a15dad1ed8c0f95452794c25,= (map)
= Joining info
Join with Google Meet
rats@ietf.org
Who
<= td style=3D"padding-right:10px;font-family:Arial,Sans-serif;font-size:13px;= color:#222;width:10px">
•
= =
•
Thomas Fossati=
=
•
•
mcharlesr@gm= ail.com - organizer
•
prowe@mitre.org
elear@cisco.com
•
<= div style=3D"text-indent:-1px">
mdb@juniper.net
•
= ncamwing@cisco.com
<= span style=3D"font-family:Courier New,monospace">•
Nicolae Paladi
<= /div>
•
rats@ietf.or= g
•
jodonogh@qti.= qualcomm.com
•
<= div>
lgl@island-resort.com
•
Thomas Hardjono
blueroofmusic@gmail.com
•
•
mathias.brossard@= arm.com
&#x= 2022;
Pete Loscocco
<= div style=3D"text-indent:-1px">•
Thomas Fossati
•
Guinn, Andrew L.
•
Ned Smith
Henk Birkholz
=
•
shwethab@cisco.com
•
=
dthaler@micros= oft.com<= /span>
Ȃ= 2;
Peter Loscocco
Helble, Sarah C.

Invitation from Google Calendar

You are receiving this cou= rtesy email at the account rats@ietf.org because you are an attendee of thi= s event.

To stop receiving future updates for this event, decline thi= s event. Alternatively you can sign up for a Google account at https://www.= google.com/calendar/ and control your notification settings for your entire= calendar.

Forwarding this invitation could allow any recipient to se= nd a response to the organizer and be added to the guest list, or invite ot= hers regardless of their own invitation status, or to modify your RSVP. Learn = More.

--000000000000145c4205a8c1a28f Content-Type: text/calendar; charset="UTF-8"; method=REQUEST Content-Transfer-Encoding: 7bit BEGIN:VCALENDAR PRODID:-//Google Inc//Google Calendar 70.9054//EN VERSION:2.0 CALSCALE:GREGORIAN METHOD:REQUEST BEGIN:VTIMEZONE TZID:America/Toronto X-LIC-LOCATION:America/Toronto BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:19700308T020000 RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=2SU END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:19701101T020000 RRULE:FREQ=YEARLY;BYMONTH=11;BYDAY=1SU END:STANDARD END:VTIMEZONE BEGIN:VEVENT DTSTART;TZID=America/Toronto:20200626T100000 DTEND;TZID=America/Toronto:20200626T110000 RRULE:FREQ=WEEKLY;WKST=MO;UNTIL=20200701T035959Z;BYDAY=FR DTSTAMP:20200623T150124Z ORGANIZER;CN=mcharlesr@gmail.com:mailto:mcharlesr@gmail.com UID:4lcrj0vssk09ckj5nf9rk2h1g9@google.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=prowe@mitre.org;X-NUM-GUESTS=0:mailto:prowe@mitre.org ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=elear@cisco.com;X-NUM-GUESTS=0:mailto:elear@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=mdb@juniper.net;X-NUM-GUESTS=0:mailto:mdb@juniper.net ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=ncamwing@cisco.com;X-NUM-GUESTS=0:mailto:ncamwing@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Nicolae Paladi;X-NUM-GUESTS=0:mailto:nicolae.paladi@ri.se ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=rats@ietf.org;X-NUM-GUESTS=0:mailto:rats@ietf.org ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=jodonogh@qti.qualcomm.com;X-NUM-GUESTS=0:mailto:jodonogh@qti.qualco mm.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=lgl@island-resort.com;X-NUM-GUESTS=0:mailto:lgl@island-resort.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Hardjono;X-NUM-GUESTS=0:mailto:ietf-rats@hardjono.net ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=blueroofmusic@gmail.com;X-NUM-GUESTS=0:mailto:blueroofmusic@gmail.c om ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Fossati;X-NUM-GUESTS=0:mailto:tho@koanlogic.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=mathias.brossard@arm.com;X-NUM-GUESTS=0:mailto:mathias.brossard@arm .com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Pete Loscocco;X-NUM-GUESTS=0:mailto:pete.loscocco@gmail.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Fossati;X-NUM-GUESTS=0:mailto:thomas.fossati@arm.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN="Guinn, Andrew L.";X-NUM-GUESTS=0:mailto:andrew.guinn@jhuapl.edu ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Ned Smith;X-NUM-GUESTS=0:mailto:ned.smith@intel.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Henk Birkholz;X-NUM-GUESTS=0:mailto:henk.birkholz@sit.fraunhofer.de ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=shwethab@cisco.com;X-NUM-GUESTS=0:mailto:shwethab@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=dthaler@microsoft.com;X-NUM-GUESTS=0:mailto:dthaler@microsoft.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Peter Loscocco;X-NUM-GUESTS=0:mailto:palosco@tycho.nsa.gov ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN="Helble, Sarah C.";X-NUM-GUESTS=0:mailto:sarah.helble@jhuapl.edu ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=ACCEPTED;RSVP=TRUE ;CN=mcharlesr@gmail.com;X-NUM-GUESTS=0:mailto:mcharlesr@gmail.com X-MICROSOFT-CDO-OWNERAPPTID:-401892368 CREATED:20200623T150123Z DESCRIPTION:
Meeting link:
h ttps://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452794c25
Meeting number:
610 366 750
Password:
4vY2 aS6X8DF
Host key:
820822


More ways to join
\n\n-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~ :~:~:~:~:~:~:~:~:~:~:~::~:~::-\nPlease do not edit this section of the desc ription.\n\nThis event has a video call.\nJoin: https://meet.google.com/tju -xpot-axd\n\nView your event at https://www.google.com/calendar/event?actio n=VIEW&eid=NGxjcmowdnNzazA5Y2tqNW5mOXJrMmgxZzkgcmF0c0BpZXRmLm9yZw&tok=MTkjb WNoYXJsZXNyQGdtYWlsLmNvbWU2NTk2ODcyODUyYmVlNWVlMDJjZTMzN2Q0NDBhZTM3MjNhNWNi ZTQ&ctz=America%2FToronto&hl=en&es=1.\n-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~: ~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::- LAST-MODIFIED:20200623T150123Z LOCATION:https://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452 794c25\, SEQUENCE:0 STATUS:CONFIRMED SUMMARY:RATS Architecture Design Team weekly meeting time TRANSP:OPAQUE END:VEVENT END:VCALENDAR --000000000000145c4205a8c1a28f-- --000000000000145c4505a8c1a291 Content-Type: application/ics; name="invite.ics" Content-Disposition: attachment; filename="invite.ics" Content-Transfer-Encoding: base64 QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT VA0KQkVHSU46VlRJTUVaT05FDQpUWklEOkFtZXJpY2EvVG9yb250bw0KWC1MSUMtTE9DQVRJT046 QW1lcmljYS9Ub3JvbnRvDQpCRUdJTjpEQVlMSUdIVA0KVFpPRkZTRVRGUk9NOi0wNTAwDQpUWk9G RlNFVFRPOi0wNDAwDQpUWk5BTUU6RURUDQpEVFNUQVJUOjE5NzAwMzA4VDAyMDAwMA0KUlJVTEU6 RlJFUT1ZRUFSTFk7QllNT05USD0zO0JZREFZPTJTVQ0KRU5EOkRBWUxJR0hUDQpCRUdJTjpTVEFO REFSRA0KVFpPRkZTRVRGUk9NOi0wNDAwDQpUWk9GRlNFVFRPOi0wNTAwDQpUWk5BTUU6RVNUDQpE VFNUQVJUOjE5NzAxMTAxVDAyMDAwMA0KUlJVTEU6RlJFUT1ZRUFSTFk7QllNT05USD0xMTtCWURB WT0xU1UNCkVORDpTVEFOREFSRA0KRU5EOlZUSU1FWk9ORQ0KQkVHSU46VkVWRU5UDQpEVFNUQVJU O1RaSUQ9QW1lcmljYS9Ub3JvbnRvOjIwMjAwNjI2VDEwMDAwMA0KRFRFTkQ7VFpJRD1BbWVyaWNh L1Rvcm9udG86MjAyMDA2MjZUMTEwMDAwDQpSUlVMRTpGUkVRPVdFRUtMWTtXS1NUPU1PO1VOVElM PTIwMjAwNzAxVDAzNTk1OVo7QllEQVk9RlINCkRUU1RBTVA6MjAyMDA2MjNUMTUwMTI0Wg0KT1JH QU5JWkVSO0NOPW1jaGFybGVzckBnbWFpbC5jb206bWFpbHRvOm1jaGFybGVzckBnbWFpbC5jb20N ClVJRDo0bGNyajB2c3NrMDlja2o1bmY5cmsyaDFnOUBnb29nbGUuY29tDQpBVFRFTkRFRTtDVVRZ UEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047 UlNWUD0NCiBUUlVFO0NOPXByb3dlQG1pdHJlLm9yZztYLU5VTS1HVUVTVFM9MDptYWlsdG86cHJv d2VAbWl0cmUub3JnDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJ UEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPWVsZWFyQGNpc2NvLmNv bTtYLU5VTS1HVUVTVFM9MDptYWlsdG86ZWxlYXJAY2lzY28uY29tDQpBVFRFTkRFRTtDVVRZUEU9 SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNW UD0NCiBUUlVFO0NOPW1kYkBqdW5pcGVyLm5ldDtYLU5VTS1HVUVTVFM9MDptYWlsdG86bWRiQGp1 bmlwZXIubmV0DQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFO VDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPW5jYW13aW5nQGNpc2NvLmNv bTtYLU5VTS1HVUVTVFM9MDptYWlsdG86bmNhbXdpbmdAY2lzY28uY29tDQpBVFRFTkRFRTtDVVRZ UEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047 UlNWUD0NCiBUUlVFO0NOPU5pY29sYWUgUGFsYWRpO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpuaWNv bGFlLnBhbGFkaUByaS5zZQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFS VElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1yYXRzQGlldGYu b3JnO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpyYXRzQGlldGYub3JnDQpBVFRFTkRFRTtDVVRZUEU9 SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNW UD0NCiBUUlVFO0NOPWpvZG9ub2doQHF0aS5xdWFsY29tbS5jb207WC1OVU0tR1VFU1RTPTA6bWFp bHRvOmpvZG9ub2doQHF0aS5xdWFsY28NCiBtbS5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklE VUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRS VUU7Q049bGdsQGlzbGFuZC1yZXNvcnQuY29tO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpsZ2xAaXNs YW5kLXJlc29ydC5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJ Q0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049VGhvbWFzIEhhcmRq b25vO1gtTlVNLUdVRVNUUz0wOm1haWx0bzppZXRmLXJhdHNAaGFyZGpvbm8ubmV0DQpBVFRFTkRF RTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1B Q1RJT047UlNWUD0NCiBUUlVFO0NOPWJsdWVyb29mbXVzaWNAZ21haWwuY29tO1gtTlVNLUdVRVNU Uz0wOm1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmMNCiBvbQ0KQVRURU5ERUU7Q1VUWVBFPUlO RElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9 DQogVFJVRTtDTj1UaG9tYXMgRm9zc2F0aTtYLU5VTS1HVUVTVFM9MDptYWlsdG86dGhvQGtvYW5s b2dpYy5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5U O1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049bWF0aGlhcy5icm9zc2FyZEBh cm0uY29tO1gtTlVNLUdVRVNUUz0wOm1haWx0bzptYXRoaWFzLmJyb3NzYXJkQGFybQ0KIC5jb20N CkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFU PU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049UGV0ZSBMb3Njb2NjbztYLU5VTS1HVUVTVFM9 MDptYWlsdG86cGV0ZS5sb3Njb2Njb0BnbWFpbC5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklE VUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRS VUU7Q049VGhvbWFzIEZvc3NhdGk7WC1OVU0tR1VFU1RTPTA6bWFpbHRvOnRob21hcy5mb3NzYXRp QGFybS5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5U O1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049Ikd1aW5uLCBBbmRyZXcgTC4i O1gtTlVNLUdVRVNUUz0wOm1haWx0bzphbmRyZXcuZ3Vpbm5Aamh1YXBsLmVkdQ0KQVRURU5ERUU7 Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNU SU9OO1JTVlA9DQogVFJVRTtDTj1OZWQgU21pdGg7WC1OVU0tR1VFU1RTPTA6bWFpbHRvOm5lZC5z bWl0aEBpbnRlbC5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJ Q0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049SGVuayBCaXJraG9s ejtYLU5VTS1HVUVTVFM9MDptYWlsdG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZQ0K QVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9 TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1zaHdldGhhYkBjaXNjby5jb207WC1OVU0tR1VF U1RTPTA6bWFpbHRvOnNod2V0aGFiQGNpc2NvLmNvbQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURV QUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJV RTtDTj1kdGhhbGVyQG1pY3Jvc29mdC5jb207WC1OVU0tR1VFU1RTPTA6bWFpbHRvOmR0aGFsZXJA bWljcm9zb2Z0LmNvbQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElD SVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1QZXRlciBMb3Njb2Nj bztYLU5VTS1HVUVTVFM9MDptYWlsdG86cGFsb3Njb0B0eWNoby5uc2EuZ292DQpBVFRFTkRFRTtD VVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJ T047UlNWUD0NCiBUUlVFO0NOPSJIZWxibGUsIFNhcmFoIEMuIjtYLU5VTS1HVUVTVFM9MDptYWls dG86c2FyYWguaGVsYmxlQGpodWFwbC5lZHUNCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JP TEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPUFDQ0VQVEVEO1JTVlA9VFJVRQ0KIDtDTj1tY2hh cmxlc3JAZ21haWwuY29tO1gtTlVNLUdVRVNUUz0wOm1haWx0bzptY2hhcmxlc3JAZ21haWwuY29t DQpYLU1JQ1JPU09GVC1DRE8tT1dORVJBUFBUSUQ6LTQwMTg5MjM2OA0KQ1JFQVRFRDoyMDIwMDYy M1QxNTAxMjNaDQpERVNDUklQVElPTjo8ZGQ+TWVldGluZyBsaW5rOjxicj48L2RkPjxkZD48ZGw+ PGRkPjxhIGhyZWY9Imh0dHBzOi8vaWV0Zi53ZWINCiBleC5jb20vaWV0Zi9qLnBocD9NVElEPW00 YzNkNzM5NWExNWRhZDFlZDhjMGY5NTQ1Mjc5NGMyNSIgdGFyZ2V0PSJfYmxhbmsiPmgNCiB0dHBz Oi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW00YzNkNzM5NWExNWRhZDFlZDhjMGY5 NTQ1Mjc5NGMyNTwvYT4NCiA8L2RkPjxkdD5NZWV0aW5nIG51bWJlcjo8L2R0PjxkZD42MTAgMzY2 IDc1MDwvZGQ+PGR0PlBhc3N3b3JkOjwvZHQ+PGRkPjR2WTINCiBhUzZYOERGPC9kZD48ZHQ+SG9z dCBrZXk6PC9kdD48ZGQ+ODIwODIyPC9kZD48L2RsPjxicj48YnI+PGg1Pk1vcmUgd2F5cyB0byAN CiBqb2luPC9oNT48L2RkPlxuXG4tOjp+On46On46fjp+On46fjp+On46fjp+On46fjp+On46fjp+ On46fjp+On46fjp+On46fjp+On4NCiA6fjp+On46fjp+On46fjp+On46fjp+Ojp+On46Oi1cblBs ZWFzZSBkbyBub3QgZWRpdCB0aGlzIHNlY3Rpb24gb2YgdGhlIGRlc2MNCiByaXB0aW9uLlxuXG5U aGlzIGV2ZW50IGhhcyBhIHZpZGVvIGNhbGwuXG5Kb2luOiBodHRwczovL21lZXQuZ29vZ2xlLmNv bS90anUNCiAteHBvdC1heGRcblxuVmlldyB5b3VyIGV2ZW50IGF0IGh0dHBzOi8vd3d3Lmdvb2ds ZS5jb20vY2FsZW5kYXIvZXZlbnQ/YWN0aW8NCiBuPVZJRVcmZWlkPU5HeGpjbW93ZG5OemF6QTVZ MnRxTlc1bU9YSnJNbWd4WnprZ2NtRjBjMEJwWlhSbUxtOXladyZ0b2s9TVRramINCiBXTm9ZWEpz WlhOeVFHZHRZV2xzTG1OdmJXVTJOVGsyT0RjeU9EVXlZbVZsTldWbE1ESmpaVE16TjJRME5EQmha VE0zTWpOaE5XTmkNCiBaVFEmY3R6PUFtZXJpY2ElMkZUb3JvbnRvJmhsPWVuJmVzPTEuXG4tOjp+ On46On46fjp+On46fjp+On46fjp+On46fjp+On46fjoNCiB+On46fjp+On46fjp+On46fjp+On46 fjp+On46fjp+On46fjp+On46fjp+Ojp+On46Oi0NCkxBU1QtTU9ESUZJRUQ6MjAyMDA2MjNUMTUw MTIzWg0KTE9DQVRJT046aHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bTRj M2Q3Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyDQogNzk0YzI1XCwgDQpTRVFVRU5DRTowDQpTVEFUVVM6 Q09ORklSTUVEDQpTVU1NQVJZOlJBVFMgQXJjaGl0ZWN0dXJlIERlc2lnbiBUZWFtIHdlZWtseSBt ZWV0aW5nIHRpbWUNClRSQU5TUDpPUEFRVUUNCkVORDpWRVZFTlQNCkVORDpWQ0FMRU5EQVINCg== --000000000000145c4505a8c1a291-- From nobody Tue Jun 23 08:38:03 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 966B33A0D9E for ; Tue, 23 Jun 2020 08:06:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zZ1v5AMR4Xa1 for ; Tue, 23 Jun 2020 08:06:18 -0700 (PDT) Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-eopbgr680137.outbound.protection.outlook.com [40.107.68.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF0073A0E10 for ; Tue, 23 Jun 2020 08:06:17 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=K/wcoEGN2zTPrc2yRL/nAwPgWMZjCxF2ubHJUMjCmHORJDHRIlhrasIO6C4z1+qM2BT8FpLtp+6nhgdsEBWNikDGvtLS9qBKL+QAx/5Vn+59MDes9yGh8VZhbJI81aV/TDSMkDztyhDtKDuDTfrc/iSqWnlsQas2o2TF0Iv0nVyH8K7ffzc97R3Za0ZDWnrGAHU0dCM/N4bWVsI4zwtEqpizhsyp/+Z3K9KXu4eh9BjXEquylIcSNplDts4LtPLFhSlvGk8VuGahAI9i/PrTocoJI2mIrt9hu7QYkvaa4o3Afgag3eoA1TGM1BmE2X2E3GLvwz1Z3nupP/bX+rISvA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5MmAKRcN7Datk4Rol6A9gC7C8nXIhy4K8va802yoZKg=; b=EbbTUNjgGXlXMd7/nRnUoDglIEED/NyCKovUV4y9vPm8pRQjVxuqUah29Jo6glr8ISunxY6Gz7ioX7Z/YdvXk4SDEIj4HHm8q3qFlgzelPMJeiNqwNRYQLL4KLWigHmKq55uNYirfkN8QBn3ZXS3QNNaCgTyhJoT5Px66PKCjtG+/d9AzCLS0SiVf5b4PLPk7/cLf0hxN2F+v4PNXzJnIeT6gP+bHQjEpqIzxSnp8Lym0IqvNwj/t1G9S1fEJX2ihWeVJNJA0sEOP7N86we5M43VkwrEGm81vSxkbHyV/CNK4HF8PjKpS8mh32leEEG0BkFw6O7a3SQRZkPl5hT/NA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5MmAKRcN7Datk4Rol6A9gC7C8nXIhy4K8va802yoZKg=; b=CvYqVl0+pGbtdaWXp+rh1DEqo96fTW4LrcmtJbrK4dwuKO7EzDt8rD7ltAt269+L48RIbHdLLrImaQvOCF5Hbe4qJj2oK63+8hMhjRAHl6JHPP5PG4GPt+t3f2jdMrf7129GQQ316El66nb6CVLliLXxQrELSwLVcbw67NUCzGo= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1842.namprd21.prod.outlook.com (2603:10b6:207:1a::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.2; Tue, 23 Jun 2020 15:06:15 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::29cb:295d:97bc:3f7f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::29cb:295d:97bc:3f7f%9]) with mapi id 15.20.3153.006; Tue, 23 Jun 2020 15:06:15 +0000 From: Dave Thaler To: "mcharlesr@gmail.com" , "prowe@mitre.org" , "elear@cisco.com" , "mdb@juniper.net" , "ncamwing@cisco.com" , Nicolae Paladi , "rats@ietf.org" , "jodonogh@qti.qualcomm.com" , "lgl@island-resort.com" , Thomas Hardjono , "blueroofmusic@gmail.com" , Thomas Fossati , "mathias.brossard@arm.com" , Pete Loscocco , Thomas Fossati , "Guinn, Andrew L." , Ned Smith , Henk Birkholz , "shwethab@cisco.com" , Peter Loscocco , "Helble, Sarah C." Thread-Topic: Invitation: RATS Architecture Design Team weekly meeting time @ Weekly from 10:00 to 11:00 on Friday from Fri 2020-06-26 to Tue 2020-06-30 (EDT) (dthaler@microsoft.com) Thread-Index: AQHWSW8ssl+wVcSSIkqq8+X1TfesuKjmTGfw Date: Tue, 23 Jun 2020 15:06:14 +0000 Message-ID: References: <00000000000014513405a8c1a2a1@google.com> In-Reply-To: <00000000000014513405a8c1a2a1@google.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-06-23T15:06:11Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=799ed7ee-a596-4e96-934e-c8f01ea4e113; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:16f0:ad39:5e3f:d70d:4700] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 4c04b5c4-ac46-4d95-979b-08d81786f969 x-ms-traffictypediagnostic: BL0PR2101MB1842: x-ld-processed: 72f988bf-86f1-41af-91ab-2d7cd011db47,ExtAddr x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4125; x-forefront-prvs: 04433051BF x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: nQL1xLiFr0A4Ztj550FCr58E1zRXYBdG31HEFY1Vk3MAIXK2F5nO+NZf94H7jCxfZvX9RRg37BRYZE71p4BO/p/iYwY+5LqymizIdwBKFIwWeVezGUPnee/w4O5tydjT33R2cjpFwwSsJXLvxXGS3e9lENZSO/RazmzvXwx7dDmdWiIcbE9lS+cNcW0wkVaUJtIo+e2QzMoi+cgfobjVk5sSViDTmh0diqXfMF5cPsvodmsRWP4v9EpnKLNq7ZSm+AdRQO5cR7nGLtbAbElVKicYeWoRp4cD9AKLENhcWCkbzraWIC3FAKYya7yc7Dl3XRVhfg4TtRbqsx12dWNRlAkcFh4YDieXGStYNiGP59uvVCNrwmfyIZfQf3FG4lrmlujHPrM/vb8hRRCsIOFKjElXmYG2Ofn8FgtPB4XQh44tjHq6P4A0CbNe4HVW0gEGhEp+ONcBC3nHA14eNZXhvg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(39860400002)(396003)(346002)(366004)(136003)(47530400004)(7696005)(66476007)(66556008)(7416002)(66946007)(66446008)(10290500003)(64756008)(166002)(16799955002)(76116006)(71200400001)(52536014)(82950400001)(186003)(8936002)(82960400001)(8676002)(6506007)(86362001)(53546011)(110136005)(33656002)(316002)(478600001)(5660300002)(966005)(55016002)(9686003)(83380400001)(2906002)(8990500004)(94303002)(921003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB102763AC567739C7CD4A0EAAA3940BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4c04b5c4-ac46-4d95-979b-08d81786f969 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jun 2020 15:06:14.8829 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7NIAyzHgA1X2rhA7mHELEFjiicpzeyJQD3AkOdN7zgiMkfSBvc+rcMEJI0LeKrwLGGKzmdq/UthdQBj9jNumkevKS0iEcXwZRFTqx8vqOZM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1842 Archived-At: X-Mailman-Approved-At: Tue, 23 Jun 2020 08:37:58 -0700 Subject: Re: [Rats] Invitation: RATS Architecture Design Team weekly meeting time @ Weekly from 10:00 to 11:00 on Friday from Fri 2020-06-26 to Tue 2020-06-30 (EDT) (dthaler@microsoft.com) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jun 2020 15:06:21 -0000 --_000_BL0PR2101MB102763AC567739C7CD4A0EAAA3940BL0PR2101MB1027_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBjaGVja2VkIHRoZSBPU1Mgc2NoZWR1bGUgYW5kIGlmIEkgZGlkIHRpbWUgem9uZSBjb252ZXJz aW9uIGNvcnJlY3RseSwgdGhlIG9ubHkgcmVsZXZhbnQgY29uZmxpY3QgaXMgYSBoYWxmIGhvdXIg aW4sIHRoZXJl4oCZcyBhIHRhbGsgcmVsZXZhbnQgdG8gdGhlIFNVSVQgV0c6DQoNCmh0dHBzOi8v b3NzbmEyMDIwLnNjaGVkLmNvbS9ldmVudC9jM1d4L3NlY3VyZS1ib290LWFuZC1vdmVyLXRoZS1h aXItdXBkYXRlcy10aGF0cy1zaW1wbGUtbm8tamFuLWtpc3prYS1zaWVtZW5zLWFnP2lmcmFtZT15 ZXMmdz0xMDAlJnNpZGViYXI9eWVzJmJnPW5vIzxodHRwczovL29zc25hMjAyMC5zY2hlZC5jb20v ZXZlbnQvYzNXeC9zZWN1cmUtYm9vdC1hbmQtb3Zlci10aGUtYWlyLXVwZGF0ZXMtdGhhdHMtc2lt cGxlLW5vLWphbi1raXN6a2Etc2llbWVucy1hZz9pZnJhbWU9eWVzJnc9MTAwJTI1JnNpZGViYXI9 eWVzJmJnPW5vIz4NCg0KDQotLS0tLU9yaWdpbmFsIEFwcG9pbnRtZW50LS0tLS0NCkZyb206IG1j aGFybGVzckBnbWFpbC5jb20gPG1jaGFybGVzckBnbWFpbC5jb20+DQpTZW50OiBUdWVzZGF5LCBK dW5lIDIzLCAyMDIwIDg6MDEgQU0NClRvOiBwcm93ZUBtaXRyZS5vcmc7IGVsZWFyQGNpc2NvLmNv bTsgbWRiQGp1bmlwZXIubmV0OyBuY2Ftd2luZ0BjaXNjby5jb207IE5pY29sYWUgUGFsYWRpOyBy YXRzQGlldGYub3JnOyBqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tOyBsZ2xAaXNsYW5kLXJlc29y dC5jb207IFRob21hcyBIYXJkam9ubzsgYmx1ZXJvb2ZtdXNpY0BnbWFpbC5jb207IFRob21hcyBG b3NzYXRpOyBtYXRoaWFzLmJyb3NzYXJkQGFybS5jb207IFBldGUgTG9zY29jY287IFRob21hcyBG b3NzYXRpOyBHdWlubiwgQW5kcmV3IEwuOyBOZWQgU21pdGg7IEhlbmsgQmlya2hvbHo7IHNod2V0 aGFiQGNpc2NvLmNvbTsgRGF2ZSBUaGFsZXI7IFBldGVyIExvc2NvY2NvOyBIZWxibGUsIFNhcmFo IEMuDQpTdWJqZWN0OiBJbnZpdGF0aW9uOiBSQVRTIEFyY2hpdGVjdHVyZSBEZXNpZ24gVGVhbSB3 ZWVrbHkgbWVldGluZyB0aW1lIEAgV2Vla2x5IGZyb20gMTA6MDAgdG8gMTE6MDAgb24gRnJpZGF5 IGZyb20gRnJpIDIwMjAtMDYtMjYgdG8gVHVlIDIwMjAtMDYtMzAgKEVEVCkgKGR0aGFsZXJAbWlj cm9zb2Z0LmNvbSkNCldoZW46IE9jY3VycyBldmVyeSBGcmlkYXkgZWZmZWN0aXZlIDYvMjYvMjAy MCB1bnRpbCA2LzMwLzIwMjAgZnJvbSAxMDowMCBBTSB0byAxMTowMCBBTSBBbWVyaWNhL1Rvcm9u dG8uDQpXaGVyZTogaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bTRjM2Q3 Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyNzk0YzI1LA0KDQpZb3UgaGF2ZSBiZWVuIGludml0ZWQgdG8g dGhlIGZvbGxvd2luZyBldmVudC4NClJBVFMgQXJjaGl0ZWN0dXJlIERlc2lnbiBUZWFtIHdlZWts eSBtZWV0aW5nIHRpbWUNCldoZW4NCldlZWtseSBmcm9tIDEwOjAwIHRvIDExOjAwIG9uIEZyaWRh eSBmcm9tIEZyaSAyMDIwLTA2LTI2IHRvIFR1ZSAyMDIwLTA2LTMwIEVhc3Rlcm4gVGltZSAtIFRv cm9udG8NCldoZXJlDQpodHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1tNGMz ZDczOTVhMTVkYWQxZWQ4YzBmOTU0NTI3OTRjMjUsIChtYXA8aHR0cHM6Ly9uYW0wNi5zYWZlbGlu a3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5j b20lMkZ1cmwlM0ZxJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZpZXRmLndlYmV4LmNvbSUyNTJGaWV0 ZiUyNTJGai5waHAlMjUzRk1USUQlMjUzRG00YzNkNzM5NWExNWRhZDFlZDhjMGY5NTQ1Mjc5NGMy NSUyNTJDJTI2c2ElM0REJTI2dXN0JTNEMTU5MzM1NjQ4NDY0NDAwMCUyNnVzZyUzREFPdlZhdzNT VlFmQ0pRbW5OeGNaYm1iNFZGQWImZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5j b20lN0MyNTAzMDVlOWY3MWM0ZmUyMjNlYjA4ZDgxNzg2NGNlMSU3QzcyZjk4OGJmODZmMTQxYWY5 MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyODUyMTI4ODQxODc3OTEmc2RhdGE9RGNmcEMy dnpmRXFaWTRWYTRnMEJjWHBEYUFMTUNZWGZqSU9PWHElMkJ6ZVRVJTNEJnJlc2VydmVkPTA+KQ0K Sm9pbmluZyBpbmZvDQpKb2luIHdpdGggR29vZ2xlIE1lZXQNCm1lZXQuZ29vZ2xlLmNvbS90anUt eHBvdC1heGQ8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/ dXJsPWh0dHBzJTNBJTJGJTJGbWVldC5nb29nbGUuY29tJTJGdGp1LXhwb3QtYXhkJmRhdGE9MDIl N0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDMjUwMzA1ZTlmNzFjNGZlMjIzZWIwOGQ4 MTc4NjRjZTElN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3 Mjg1MjEyODg0MTg3NzkxJnNkYXRhPUZtZGc2b1R2aSUyQjFLT0tnQkMwUWJMMERBQjI2aVFaZGZG cUtIenNmNUVsayUzRCZyZXNlcnZlZD0wPg0KQ2FsZW5kYXINCmR0aGFsZXJAbWljcm9zb2Z0LmNv bTxtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQuY29tPg0KV2hvDQrigKINCm1jaGFybGVzckBnbWFp bC5jb208bWFpbHRvOm1jaGFybGVzckBnbWFpbC5jb20+IC0gb3JnYW5pemVyDQrigKINCnByb3dl QG1pdHJlLm9yZzxtYWlsdG86cHJvd2VAbWl0cmUub3JnPg0K4oCiDQplbGVhckBjaXNjby5jb208 bWFpbHRvOmVsZWFyQGNpc2NvLmNvbT4NCuKAog0KbWRiQGp1bmlwZXIubmV0PG1haWx0bzptZGJA anVuaXBlci5uZXQ+DQrigKINCm5jYW13aW5nQGNpc2NvLmNvbTxtYWlsdG86bmNhbXdpbmdAY2lz Y28uY29tPg0K4oCiDQpOaWNvbGFlIFBhbGFkaQ0K4oCiDQpyYXRzQGlldGYub3JnPG1haWx0bzpy YXRzQGlldGYub3JnPg0K4oCiDQpqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tPG1haWx0bzpqb2Rv bm9naEBxdGkucXVhbGNvbW0uY29tPg0K4oCiDQpsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRv OmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NCuKAog0KVGhvbWFzIEhhcmRqb25vDQrigKINCmJsdWVy b29mbXVzaWNAZ21haWwuY29tPG1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4NCuKAog0K VGhvbWFzIEZvc3NhdGkNCuKAog0KbWF0aGlhcy5icm9zc2FyZEBhcm0uY29tPG1haWx0bzptYXRo aWFzLmJyb3NzYXJkQGFybS5jb20+DQrigKINClBldGUgTG9zY29jY28NCuKAog0KVGhvbWFzIEZv c3NhdGkNCuKAog0KR3Vpbm4sIEFuZHJldyBMLg0K4oCiDQpOZWQgU21pdGgNCuKAog0KSGVuayBC aXJraG9seg0K4oCiDQpzaHdldGhhYkBjaXNjby5jb208bWFpbHRvOnNod2V0aGFiQGNpc2NvLmNv bT4NCuKAog0KZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVyQG1pY3Jvc29mdC5j b20+DQrigKINClBldGVyIExvc2NvY2NvDQrigKINCkhlbGJsZSwgU2FyYWggQy4NCm1vcmUgZGV0 YWlscyDCuzxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cHMlM0ElMkYlMkZ3d3cuZ29vZ2xlLmNvbSUyRmNhbGVuZGFyJTJGZXZlbnQlM0ZhY3Rp b24lM0RWSUVXJTI2ZWlkJTNETkd4amNtb3dkbk56YXpBNVkydHFOVzVtT1hKck1tZ3haemtnWkhS b1lXeGxja0J0YVdOeWIzTnZablF1WTI5dCUyNnRvayUzRE1Ua2piV05vWVhKc1pYTnlRR2R0WVds c0xtTnZiV1kyTXpNeVptTXhNVFJsWkRZek1qSTFNbUppT1daaFl6SmhZMkUyWmpVd01EaGxaRFEx WWprJTI2Y3R6JTNEQW1lcmljYSUyNTJGVG9yb250byUyNmhsJTNEZW4lMjZlcyUzRDAmZGF0YT0w MiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0MyNTAzMDVlOWY3MWM0ZmUyMjNlYjA4 ZDgxNzg2NGNlMSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2 MzcyODUyMTI4ODQxOTc3NDcmc2RhdGE9MXZuZ1Z2YUwzNHA3MTFzVGRsRk5ES3g0T3VWanI2ZyUy Qmx4Y0JMcjFWUyUyRkklM0QmcmVzZXJ2ZWQ9MD4NCk1lZXRpbmcgbGluazoNCmh0dHBzOi8vaWV0 Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW00YzNkNzM5NWExNWRhZDFlZDhjMGY5NTQ1Mjc5 NGMyNTxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9 aHR0cHMlM0ElMkYlMkZ3d3cuZ29vZ2xlLmNvbSUyRnVybCUzRnElM0RodHRwcyUyNTNBJTI1MkYl MjUyRmlldGYud2ViZXguY29tJTI1MkZpZXRmJTI1MkZqLnBocCUyNTNGTVRJRCUyNTNEbTRjM2Q3 Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyNzk0YzI1JTI2c2ElM0REJTI2dXN0JTNEMTU5MzM1NjQ4NDYz NjAwMCUyNnVzZyUzREFPdlZhdzFEMW4xZlp0V183bko4Z2JQVVJKU2kmZGF0YT0wMiU3QzAxJTdD ZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0MyNTAzMDVlOWY3MWM0ZmUyMjNlYjA4ZDgxNzg2NGNl MSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyODUyMTI4 ODQxOTc3NDcmc2RhdGE9cWZwUWhZWEJJSHRFYTltRUNGNEFDa05CZTBLRFF2WCUyQnRaOVpOSVVs RUxFJTNEJnJlc2VydmVkPTA+DQpNZWV0aW5nIG51bWJlcjoNCjYxMCAzNjYgNzUwDQpQYXNzd29y ZDoNCjR2WTJhUzZYOERGDQpIb3N0IGtleToNCjgyMDgyMg0KDQpNb3JlIHdheXMgdG8gam9pbg0K DQpHb2luZyAoZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVyQG1pY3Jvc29mdC5j b20+KT8gICBBbGwgZXZlbnRzIGluIHRoaXMgc2VyaWVzOiAgIFllczxodHRwczovL25hbTA2LnNh ZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuZ29v Z2xlLmNvbSUyRmNhbGVuZGFyJTJGZXZlbnQlM0ZhY3Rpb24lM0RSRVNQT05EJTI2ZWlkJTNETkd4 amNtb3dkbk56YXpBNVkydHFOVzVtT1hKck1tZ3haemtnWkhSb1lXeGxja0J0YVdOeWIzTnZablF1 WTI5dCUyNnJzdCUzRDElMjZ0b2slM0RNVGtqYldOb1lYSnNaWE55UUdkdFlXbHNMbU52YldZMk16 TXlabU14TVRSbFpEWXpNakkxTW1KaU9XWmhZekpoWTJFMlpqVXdNRGhsWkRRMVlqayUyNmN0eiUz REFtZXJpY2ElMjUyRlRvcm9udG8lMjZobCUzRGVuJTI2ZXMlM0QwJmRhdGE9MDIlN0MwMSU3Q2R0 aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDMjUwMzA1ZTlmNzFjNGZlMjIzZWIwOGQ4MTc4NjRjZTEl N0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3Mjg1MjEyODg0 MjA3NzA1JnNkYXRhPU4xZVhSMXZsN0J2NmFXTzdqUzBrekFYVjJjQkRDVjRFejJscXhFMU8lMkJT YyUzRCZyZXNlcnZlZD0wPiAtIE1heWJlPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rp b24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5nb29nbGUuY29tJTJGY2FsZW5k YXIlMkZldmVudCUzRmFjdGlvbiUzRFJFU1BPTkQlMjZlaWQlM0ROR3hqY21vd2RuTnphekE1WTJ0 cU5XNW1PWEpyTW1neFp6a2daSFJvWVd4bGNrQnRhV055YjNOdlpuUXVZMjl0JTI2cnN0JTNEMyUy NnRvayUzRE1Ua2piV05vWVhKc1pYTnlRR2R0WVdsc0xtTnZiV1kyTXpNeVptTXhNVFJsWkRZek1q STFNbUppT1daaFl6SmhZMkUyWmpVd01EaGxaRFExWWprJTI2Y3R6JTNEQW1lcmljYSUyNTJGVG9y b250byUyNmhsJTNEZW4lMjZlcyUzRDAmZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29m dC5jb20lN0MyNTAzMDVlOWY3MWM0ZmUyMjNlYjA4ZDgxNzg2NGNlMSU3QzcyZjk4OGJmODZmMTQx YWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyODUyMTI4ODQyMDc3MDUmc2RhdGE9NGJs N1F3cHZscm5qcCUyQnNXeHBYYXBjV0t3OVBrbDQ3dUVEcGM3TVpESHlJJTNEJnJlc2VydmVkPTA+ IC0gTm88aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJs PWh0dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZjYWxlbmRhciUyRmV2ZW50JTNGYWN0aW9u JTNEUkVTUE9ORCUyNmVpZCUzRE5HeGpjbW93ZG5OemF6QTVZMnRxTlc1bU9YSnJNbWd4WnprZ1pI Um9ZV3hsY2tCdGFXTnliM052Wm5RdVkyOXQlMjZyc3QlM0QyJTI2dG9rJTNETVRramJXTm9ZWEpz WlhOeVFHZHRZV2xzTG1OdmJXWTJNek15Wm1NeE1UUmxaRFl6TWpJMU1tSmlPV1poWXpKaFkyRTJa alV3TURobFpEUTFZamslMjZjdHolM0RBbWVyaWNhJTI1MkZUb3JvbnRvJTI2aGwlM0RlbiUyNmVz JTNEMCZkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1MDMwNWU5Zjcx YzRmZTIyM2ViMDhkODE3ODY0Y2UxJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDcl N0MxJTdDMCU3QzYzNzI4NTIxMjg4NDIxNzY1OSZzZGF0YT1McU5WUHNUOVAlMkJjJTJGdTY5aEE2 cXJZbFhrWHZIVTFIYkVpdkg4V0VjSW5EUSUzRCZyZXNlcnZlZD0wPiAgICBtb3JlIG9wdGlvbnMg wrs8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0 dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZjYWxlbmRhciUyRmV2ZW50JTNGYWN0aW9uJTNE VklFVyUyNmVpZCUzRE5HeGpjbW93ZG5OemF6QTVZMnRxTlc1bU9YSnJNbWd4WnprZ1pIUm9ZV3hs Y2tCdGFXTnliM052Wm5RdVkyOXQlMjZ0b2slM0RNVGtqYldOb1lYSnNaWE55UUdkdFlXbHNMbU52 YldZMk16TXlabU14TVRSbFpEWXpNakkxTW1KaU9XWmhZekpoWTJFMlpqVXdNRGhsWkRRMVlqayUy NmN0eiUzREFtZXJpY2ElMjUyRlRvcm9udG8lMjZobCUzRGVuJTI2ZXMlM0QwJmRhdGE9MDIlN0Mw MSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDMjUwMzA1ZTlmNzFjNGZlMjIzZWIwOGQ4MTc4 NjRjZTElN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3Mjg1 MjEyODg0MjE3NjU5JnNkYXRhPVU3V01heXZDWkc2Yjl5QjJNJTJGVWpvJTJCbVEwVFpqRFFvMHM5 bjNWMWdtNXMwJTNEJnJlc2VydmVkPTA+DQoNCkludml0YXRpb24gZnJvbSBHb29nbGUgQ2FsZW5k YXI8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0 dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZjYWxlbmRhciUyRiZkYXRhPTAyJTdDMDElN0Nk dGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1MDMwNWU5ZjcxYzRmZTIyM2ViMDhkODE3ODY0Y2Ux JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI4NTIxMjg4 NDIxNzY1OSZzZGF0YT1qZ3B2QjE4ejBwcUhjanFTUm9hTDdBREpDcExhZGdYQVExUjlBaW1WUzJn JTNEJnJlc2VydmVkPTA+DQoNCllvdSBhcmUgcmVjZWl2aW5nIHRoaXMgY291cnRlc3kgZW1haWwg YXQgdGhlIGFjY291bnQgZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVyQG1pY3Jv c29mdC5jb20+IGJlY2F1c2UgeW91IGFyZSBhbiBhdHRlbmRlZSBvZiB0aGlzIGV2ZW50Lg0KDQpU byBzdG9wIHJlY2VpdmluZyBmdXR1cmUgdXBkYXRlcyBmb3IgdGhpcyBldmVudCwgZGVjbGluZSB0 aGlzIGV2ZW50LiBBbHRlcm5hdGl2ZWx5IHlvdSBjYW4gc2lnbiB1cCBmb3IgYSBHb29nbGUgYWNj b3VudCBhdCBodHRwczovL3d3dy5nb29nbGUuY29tL2NhbGVuZGFyLyBhbmQgY29udHJvbCB5b3Vy IG5vdGlmaWNhdGlvbiBzZXR0aW5ncyBmb3IgeW91ciBlbnRpcmUgY2FsZW5kYXIuDQoNCkZvcndh cmRpbmcgdGhpcyBpbnZpdGF0aW9uIGNvdWxkIGFsbG93IGFueSByZWNpcGllbnQgdG8gc2VuZCBh IHJlc3BvbnNlIHRvIHRoZSBvcmdhbml6ZXIgYW5kIGJlIGFkZGVkIHRvIHRoZSBndWVzdCBsaXN0 LCBvciBpbnZpdGUgb3RoZXJzIHJlZ2FyZGxlc3Mgb2YgdGhlaXIgb3duIGludml0YXRpb24gc3Rh dHVzLCBvciB0byBtb2RpZnkgeW91ciBSU1ZQLiBMZWFybiBNb3JlPGh0dHBzOi8vbmFtMDYuc2Fm ZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnN1cHBvcnQu Z29vZ2xlLmNvbSUyRmNhbGVuZGFyJTJGYW5zd2VyJTJGMzcxMzUlMjNmb3J3YXJkaW5nJmRhdGE9 MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDMjUwMzA1ZTlmNzFjNGZlMjIzZWIw OGQ4MTc4NjRjZTElN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdD NjM3Mjg1MjEyODg0MjI3NjE3JnNkYXRhPUJ5a2dnNURmMFBzaFElMkJoJTJCSWR2d0hxN3pma2I2 NyUyRjFSNlNpa0U2JTJGSmwlMkI4JTNEJnJlc2VydmVkPTA+Lg0KDQo= --_000_BL0PR2101MB102763AC567739C7CD4A0EAAA3940BL0PR2101MB1027_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQpoMw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTsNCgltc28tc3R5bGUtbGluazoiSGVhZGluZyAz IENoYXIiOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJ bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6 ZToxMy41cHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7DQoJZm9udC13 ZWlnaHQ6Ym9sZDt9DQpoNA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTsNCgltc28tc3R5bGUtbGlu azoiSGVhZGluZyA0IENoYXIiOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1y aWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGlu Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2Vy aWY7DQoJZm9udC13ZWlnaHQ6Ym9sZDt9DQpoNQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTsNCglt c28tc3R5bGUtbGluazoiSGVhZGluZyA1IENoYXIiOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRv Ow0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFy Z2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5l dyBSb21hbiIsc2VyaWY7DQoJZm9udC13ZWlnaHQ6Ym9sZDt9DQphOmxpbmssIHNwYW4uTXNvSHlw ZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2Vk DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0 aW9uOnVuZGVybGluZTt9DQpwDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFs MCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJn aW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0Kc3Bhbi5IZWFkaW5nNENoYXINCgl7bXNv LXN0eWxlLW5hbWU6IkhlYWRpbmcgNCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTsNCglt c28tc3R5bGUtbGluazoiSGVhZGluZyA0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSBMaWdodCIs c2Fucy1zZXJpZjsNCgljb2xvcjojMkU3NEI1Ow0KCWZvbnQtc3R5bGU6aXRhbGljO30NCnNwYW4u SGVhZGluZzNDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIZWFkaW5nIDMgQ2hhciI7DQoJbXNvLXN0 eWxlLXByaW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgMyI7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkgTGlnaHQiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNEQ3ODt9DQpzcGFuLm5v dHJhbnNsYXRlDQoJe21zby1zdHlsZS1uYW1lOm5vdHJhbnNsYXRlO30NCnNwYW4uSGVhZGluZzVD aGFyDQoJe21zby1zdHlsZS1uYW1lOiJIZWFkaW5nIDUgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9y aXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgNSI7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkgTGlnaHQiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzJFNzRCNTt9DQpzcGFuLkVtYWlsU3R5bGUy NA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1z dHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4w aW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0 aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZh dWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwh LS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86 aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFb ZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9 InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkkgY2hlY2tlZCB0aGUgT1NTIHNjaGVk dWxlIGFuZCBpZiBJIGRpZCB0aW1lIHpvbmUgY29udmVyc2lvbiBjb3JyZWN0bHksIHRoZSBvbmx5 IHJlbGV2YW50IGNvbmZsaWN0IGlzIGEgaGFsZiBob3VyIGluLCB0aGVyZeKAmXMgYSB0YWxrIHJl bGV2YW50IHRvIHRoZSBTVUlUIFdHOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+PGEgaHJlZj0iaHR0cHM6Ly9vc3NuYTIwMjAuc2NoZWQuY29tL2V2ZW50L2MzV3gv c2VjdXJlLWJvb3QtYW5kLW92ZXItdGhlLWFpci11cGRhdGVzLXRoYXRzLXNpbXBsZS1uby1qYW4t a2lzemthLXNpZW1lbnMtYWc/aWZyYW1lPXllcyZhbXA7dz0xMDAlMjUmYW1wO3NpZGViYXI9eWVz JmFtcDtiZz1ubyMiPmh0dHBzOi8vb3NzbmEyMDIwLnNjaGVkLmNvbS9ldmVudC9jM1d4L3NlY3Vy ZS1ib290LWFuZC1vdmVyLXRoZS1haXItdXBkYXRlcy10aGF0cy1zaW1wbGUtbm8tamFuLWtpc3pr YS1zaWVtZW5zLWFnP2lmcmFtZT15ZXMmYW1wO3c9MTAwJSZhbXA7c2lkZWJhcj15ZXMmYW1wO2Jn PW5vIzwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+LS0tLS1PcmlnaW5hbCBBcHBvaW50bWVudC0tLS0tPGJyPg0KPGI+RnJvbTo8L2I+IG1j aGFybGVzckBnbWFpbC5jb20gJmx0O21jaGFybGVzckBnbWFpbC5jb20mZ3Q7IDxicj4NCjxiPlNl bnQ6PC9iPiBUdWVzZGF5LCBKdW5lIDIzLCAyMDIwIDg6MDEgQU08YnI+DQo8Yj5Ubzo8L2I+IHBy b3dlQG1pdHJlLm9yZzsgZWxlYXJAY2lzY28uY29tOyBtZGJAanVuaXBlci5uZXQ7IG5jYW13aW5n QGNpc2NvLmNvbTsgTmljb2xhZSBQYWxhZGk7IHJhdHNAaWV0Zi5vcmc7IGpvZG9ub2doQHF0aS5x dWFsY29tbS5jb207IGxnbEBpc2xhbmQtcmVzb3J0LmNvbTsgVGhvbWFzIEhhcmRqb25vOyBibHVl cm9vZm11c2ljQGdtYWlsLmNvbTsgVGhvbWFzIEZvc3NhdGk7IG1hdGhpYXMuYnJvc3NhcmRAYXJt LmNvbTsgUGV0ZSBMb3Njb2NjbzsNCiBUaG9tYXMgRm9zc2F0aTsgR3Vpbm4sIEFuZHJldyBMLjsg TmVkIFNtaXRoOyBIZW5rIEJpcmtob2x6OyBzaHdldGhhYkBjaXNjby5jb207IERhdmUgVGhhbGVy OyBQZXRlciBMb3Njb2NjbzsgSGVsYmxlLCBTYXJhaCBDLjxicj4NCjxiPlN1YmplY3Q6PC9iPiBJ bnZpdGF0aW9uOiBSQVRTIEFyY2hpdGVjdHVyZSBEZXNpZ24gVGVhbSB3ZWVrbHkgbWVldGluZyB0 aW1lIEAgV2Vla2x5IGZyb20gMTA6MDAgdG8gMTE6MDAgb24gRnJpZGF5IGZyb20gRnJpIDIwMjAt MDYtMjYgdG8gVHVlIDIwMjAtMDYtMzAgKEVEVCkgKGR0aGFsZXJAbWljcm9zb2Z0LmNvbSk8YnI+ DQo8Yj5XaGVuOjwvYj4gT2NjdXJzIGV2ZXJ5IEZyaWRheSBlZmZlY3RpdmUgNi8yNi8yMDIwIHVu dGlsIDYvMzAvMjAyMCBmcm9tIDEwOjAwIEFNIHRvIDExOjAwIEFNIEFtZXJpY2EvVG9yb250by48 YnI+DQo8Yj5XaGVyZTo8L2I+IGh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElE PW00YzNkNzM5NWExNWRhZDFlZDhjMGY5NTQ1Mjc5NGMyNSwNCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjx0 YWJsZSBjbGFzcz0iTXNvTm9ybWFsVGFibGUiIGJvcmRlcj0iMSIgY2VsbHNwYWNpbmc9IjAiIGNl bGxwYWRkaW5nPSIwIiBzdW1tYXJ5PSIiIHdpZHRoPSIxMDAlIiBzdHlsZT0id2lkdGg6MTAwLjAl O2JhY2tncm91bmQ6d2hpdGU7Ym9yZGVyLXRvcDoxLjBwdDtib3JkZXItbGVmdDoxLjBwdDtib3Jk ZXItYm90dG9tOjEuNXB0O2JvcmRlci1yaWdodDoxLjVwdDtib3JkZXItY29sb3I6I0NDQ0NDQzti b3JkZXItc3R5bGU6c29saWQiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxlPSJib3JkZXI6bm9u ZTtwYWRkaW5nOjQuOHB0IDQuOHB0IDQuOHB0IDQuOHB0Ij4NCjxkaXYgc3R5bGU9Im1zby1lbGVt ZW50OnBhcmEtYm9yZGVyLWRpdjtib3JkZXI6c29saWQgd2hpdGUgMS4wcHQ7cGFkZGluZzo1LjBw dCAwaW4gNS4wcHQgMGluO2JhY2tncm91bmQ6d2hpdGUiPg0KPGg0IHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTozLjBwdDttYXJnaW4t bGVmdDowaW47YmFja2dyb3VuZDp3aGl0ZTtib3JkZXI6bm9uZTtwYWRkaW5nOjBpbiI+DQo8c3Ry b25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzAwOTkwMCI+WW91IGhhdmUgYmVlbiBpbnZpdGVkIHRv IHRoZSBmb2xsb3dpbmcgZXZlbnQuPC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzAwOTkwMDtmb250LXdlaWdodDpub3JtYWwiPjxvOnA+PC9vOnA+PC9zcGFuPjwvaDQ+DQo8L2Rp dj4NCjxkaXY+DQo8aDMgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPlJBVFMgQXJjaGl0ZWN0dXJlIERlc2lnbiBUZWFt IHdlZWtseSBtZWV0aW5nIHRpbWU8bzpwPjwvbzpwPjwvc3Bhbj48L2gzPg0KPHRhYmxlIGNsYXNz PSJNc29Ob3JtYWxUYWJsZSIgYm9yZGVyPSIwIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9 IjAiIHN1bW1hcnk9IkV2ZW50IGRldGFpbHMiIHN0eWxlPSJkaXNwbGF5OmlubGluZS10YWJsZSI+ DQo8dGJvZHk+DQo8dHI+DQo8dGQgd2lkdGg9IjkwIiBub3dyYXA9IiIgdmFsaWduPSJ0b3AiIHN0 eWxlPSJ3aWR0aDo2Ny41cHQ7cGFkZGluZzowaW4gMTIuMHB0IDcuNXB0IDBpbiI+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5XaGVuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHZhbGlnbj0idG9wIiBzdHls ZT0icGFkZGluZzowaW4gMGluIDcuNXB0IDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIy Ij5XZWVrbHkgZnJvbSAxMDowMCB0byAxMTowMCBvbiBGcmlkYXkgZnJvbSBGcmkgMjAyMC0wNi0y NiB0byBUdWUgMjAyMC0wNi0zMA0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izg4ODg4OCI+ RWFzdGVybiBUaW1lIC0gVG9yb250bzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQg d2lkdGg9IjkwIiBub3dyYXA9IiIgdmFsaWduPSJ0b3AiIHN0eWxlPSJ3aWR0aDo2Ny41cHQ7cGFk ZGluZzowaW4gMTIuMHB0IDcuNXB0IDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5XaGVyZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC90ZD4NCjx0ZCB2YWxpZ249InRvcCIgc3R5bGU9InBhZGRpbmc6MGluIDBpbiA3 LjVwdCAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVu dDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MjIyMjIyIj48YSBocmVmPSJodHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1t NGMzZDczOTVhMTVkYWQxZWQ4YzBmOTU0NTI3OTRjMjUiPmh0dHBzOi8vaWV0Zi53ZWJleC5jb20v aWV0Zi9qLnBocD9NVElEPW00YzNkNzM5NWExNWRhZDFlZDhjMGY5NTQ1Mjc5NGMyNTwvYT4sDQo8 L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+KDxhIGhyZWY9Imh0dHBz Oi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUy RiUyRnd3dy5nb29nbGUuY29tJTJGdXJsJTNGcSUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGaWV0Zi53 ZWJleC5jb20lMjUyRmlldGYlMjUyRmoucGhwJTI1M0ZNVElEJTI1M0RtNGMzZDczOTVhMTVkYWQx ZWQ4YzBmOTU0NTI3OTRjMjUlMjUyQyUyNnNhJTNERCUyNnVzdCUzRDE1OTMzNTY0ODQ2NDQwMDAl MjZ1c2clM0RBT3ZWYXczU1ZRZkNKUW1uTnhjWmJtYjRWRkFiJmFtcDtkYXRhPTAyJTdDMDElN0Nk dGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1MDMwNWU5ZjcxYzRmZTIyM2ViMDhkODE3ODY0Y2Ux JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI4NTIxMjg4 NDE4Nzc5MSZhbXA7c2RhdGE9RGNmcEMydnpmRXFaWTRWYTRnMEJjWHBEYUFMTUNZWGZqSU9PWHEl MkJ6ZVRVJTNEJmFtcDtyZXNlcnZlZD0wIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNv bG9yOiMyMjAwQ0MiPm1hcDwvc3Bhbj48L2E+KTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjkwIiBub3dyYXA9IiIgdmFsaWduPSJ0 b3AiIHN0eWxlPSJ3aWR0aDo2Ny41cHQ7cGFkZGluZzowaW4gMTIuMHB0IDMuMHB0IDBpbiI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5K b2luaW5nIGluZm88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgdmFs aWduPSJ0b3AiIHN0eWxlPSJwYWRkaW5nOjBpbiAwaW4gMy4wcHQgMGluIj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMyMjIyMjIiPkpvaW4gd2l0aCBHb29nbGUgTWVldDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjkwIiBub3dyYXA9IiIg c3R5bGU9IndpZHRoOjY3LjVwdDtwYWRkaW5nOjBpbiAxMi4wcHQgNy41cHQgMGluIj48L3RkPg0K PHRkIHZhbGlnbj0idG9wIiBzdHlsZT0icGFkZGluZzowaW4gMGluIDcuNXB0IDBpbiI+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZl bGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGbWVldC5nb29n bGUuY29tJTJGdGp1LXhwb3QtYXhkJmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9z b2Z0LmNvbSU3QzI1MDMwNWU5ZjcxYzRmZTIyM2ViMDhkODE3ODY0Y2UxJTdDNzJmOTg4YmY4NmYx NDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI4NTIxMjg4NDE4Nzc5MSZhbXA7c2Rh dGE9Rm1kZzZvVHZpJTJCMUtPS2dCQzBRYkwwREFCMjZpUVpkZkZxS0h6c2Y1RWxrJTNEJmFtcDty ZXNlcnZlZD0wIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNvbG9yOiMyMjAwQ0MiPm1l ZXQuZ29vZ2xlLmNvbS90anUteHBvdC1heGQ8L3NwYW4+PC9hPg0KPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSI5MCIg bm93cmFwPSIiIHZhbGlnbj0idG9wIiBzdHlsZT0id2lkdGg6NjcuNXB0O3BhZGRpbmc6MGluIDEy LjBwdCA3LjVwdCAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6Izg4ODg4OCI+Q2FsZW5kYXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvdGQ+DQo8dGQgdmFsaWduPSJ0b3AiIHN0eWxlPSJwYWRkaW5nOjBpbiAwaW4gNy41cHQgMGlu Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxhIGhyZWY9Im1haWx0bzpkdGhhbGVyQG1p Y3Jvc29mdC5jb20iPmR0aGFsZXJAbWljcm9zb2Z0LmNvbTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSI5MCIgbm93cmFwPSIi IHZhbGlnbj0idG9wIiBzdHlsZT0id2lkdGg6NjcuNXB0O3BhZGRpbmc6MGluIDEyLjBwdCA3LjVw dCAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 Izg4ODg4OCI+V2hvPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHZh bGlnbj0idG9wIiBzdHlsZT0icGFkZGluZzowaW4gMGluIDcuNXB0IDBpbiI+DQo8dGFibGUgY2xh c3M9Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjAiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGlu Zz0iMCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7 cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFu c2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0ibWFpbHRvOm1jaGFy bGVzckBnbWFpbC5jb20iPm1jaGFybGVzckBnbWFpbC5jb208L2E+PC9zcGFuPjwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6Izg4ODg4OCI+DQogLSBvcmdhbml6ZXI8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3 LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7i gKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4i Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJu b3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48YSBocmVmPSJtYWlsdG86 cHJvd2VAbWl0cmUub3JnIj5wcm93ZUBtaXRyZS5vcmc8L2E+PC9zcGFuPjwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9Indp ZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIy MjIiPuKAojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQgMGlu IDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xh c3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxhIGhyZWY9Im1h aWx0bzplbGVhckBjaXNjby5jb20iPmVsZWFyQGNpc2NvLmNvbTwvYT48L3NwYW4+PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHls ZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVw dCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3Bh biBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJl Zj0ibWFpbHRvOm1kYkBqdW5pcGVyLm5ldCI+bWRiQGp1bmlwZXIubmV0PC9hPjwvc3Bhbj48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTci IHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGlu IDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9t Oi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQi PjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48 YSBocmVmPSJtYWlsdG86bmNhbXdpbmdAY2lzY28uY29tIj5uY2Ftd2luZ0BjaXNjby5jb208L2E+ PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRk IHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4i Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMy MjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0i cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5k ZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMyMjIyMjIiPk5pY29sYWUgUGFsYWRpPC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3Bh ZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNs YXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlh bCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxhIGhyZWY9Im1haWx0bzpyYXRzQGll dGYub3JnIj5yYXRzQGlldGYub3JnPC9hPjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtw YWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRp dj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5z bGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48YSBocmVmPSJtYWlsdG86am9kb25v Z2hAcXRpLnF1YWxjb21tLmNvbSI+am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbTwvYT48L3NwYW4+ PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9 IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5n OjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJv dHRvbTouMDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43 NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIy MiI+PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNv cnQuY29tPC9hPjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4N Cjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVw dCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRl bnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8 dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMjIyMjIyIj5UaG9tYXMgSGFyZGpvbm88L3NwYW4+PC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lk dGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIy MiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4g MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFz cz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0ibWFp bHRvOmJsdWVyb29mbXVzaWNAZ21haWwuY29tIj5ibHVlcm9vZm11c2ljQGdtYWlsLmNvbTwvYT48 L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQg d2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIy MjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJw YWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWJvdHRvbTouMDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRl bnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzIyMjIyMiI+VGhvbWFzIEZvc3NhdGk8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFk ZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xh dGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0ibWFpbHRvOm1hdGhpYXMu YnJvc3NhcmRAYXJtLmNvbSI+bWF0aGlhcy5icm9zc2FyZEBhcm0uY29tPC9hPjwvc3Bhbj48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTci IHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGlu IDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9t Oi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQi PjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj5Q ZXRlIExvc2NvY2NvPC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3Ry Pg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcu NXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWlu ZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4N Cjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMyMjIyMjIiPlRob21hcyBGb3NzYXRpPC9zcGFuPjwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9Indp ZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIy MjIiPuKAojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQgMGlu IDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xh c3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPkd1aW5uLCBBbmRy ZXcgTC48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+ DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGlu IDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0u NzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0 eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4 dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzIyMjIyMiI+TmVkIFNtaXRoPC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3Bh ZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNs YXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlh bCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPkhlbmsgQmlya2hvbHo8L3NwYW4+PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3 IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBp biA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRv bTouMDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0 Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+ PGEgaHJlZj0ibWFpbHRvOnNod2V0aGFiQGNpc2NvLmNvbSI+c2h3ZXRoYWJAY2lzY28uY29tPC9h Pjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0 ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGlu Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9 InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWlu ZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMjIyMjIyIj48YSBocmVmPSJtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQuY29tIj5kdGhhbGVy QG1pY3Jvc29mdC5jb208L2E+PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIy MjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+ DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3BhZGRpbmc6 MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0 ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPGRp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPlBldGVyIExvc2NvY2NvPC9zcGFuPjwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5 bGU9IndpZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OiMyMjIyMjIiPuKAojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41 cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1 aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNw YW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPkhlbGJs ZSwgU2FyYWggQy48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+ DQo8L3Rib2R5Pg0KPC90YWJsZT4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+PGEgaHJlZj0iaHR0 cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNB JTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZjYWxlbmRhciUyRmV2ZW50JTNGYWN0aW9uJTNEVklFVyUy NmVpZCUzRE5HeGpjbW93ZG5OemF6QTVZMnRxTlc1bU9YSnJNbWd4WnprZ1pIUm9ZV3hsY2tCdGFX TnliM052Wm5RdVkyOXQlMjZ0b2slM0RNVGtqYldOb1lYSnNaWE55UUdkdFlXbHNMbU52YldZMk16 TXlabU14TVRSbFpEWXpNakkxTW1KaU9XWmhZekpoWTJFMlpqVXdNRGhsWkRRMVlqayUyNmN0eiUz REFtZXJpY2ElMjUyRlRvcm9udG8lMjZobCUzRGVuJTI2ZXMlM0QwJmFtcDtkYXRhPTAyJTdDMDEl N0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1MDMwNWU5ZjcxYzRmZTIyM2ViMDhkODE3ODY0 Y2UxJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI4NTIx Mjg4NDE5Nzc0NyZhbXA7c2RhdGE9MXZuZ1Z2YUwzNHA3MTFzVGRsRk5ES3g0T3VWanI2ZyUyQmx4 Y0JMcjFWUyUyRkklM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxlPSJjb2xvcjojMjIwMEND Ij5tb3JlDQogZGV0YWlscyDCuzwvc3Bhbj48L2E+PG86cD48L286cD48L3NwYW4+PC9iPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlh bCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPk1lZXRpbmcgbGluazo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48YSBocmVmPSJodHRwczovL25hbTA2LnNh ZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuZ29v Z2xlLmNvbSUyRnVybCUzRnElM0RodHRwcyUyNTNBJTI1MkYlMjUyRmlldGYud2ViZXguY29tJTI1 MkZpZXRmJTI1MkZqLnBocCUyNTNGTVRJRCUyNTNEbTRjM2Q3Mzk1YTE1ZGFkMWVkOGMwZjk1NDUy Nzk0YzI1JTI2c2ElM0REJTI2dXN0JTNEMTU5MzM1NjQ4NDYzNjAwMCUyNnVzZyUzREFPdlZhdzFE MW4xZlp0V183bko4Z2JQVVJKU2kmYW1wO2RhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3Nv ZnQuY29tJTdDMjUwMzA1ZTlmNzFjNGZlMjIzZWIwOGQ4MTc4NjRjZTElN0M3MmY5ODhiZjg2ZjE0 MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3Mjg1MjEyODg0MTk3NzQ3JmFtcDtzZGF0 YT1xZnBRaFlYQklIdEVhOW1FQ0Y0QUNrTkJlMEtEUXZYJTJCdFo5Wk5JVWxFTEUlM0QmYW1wO3Jl c2VydmVkPTAiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5w aHA/TVRJRD1tNGMzZDczOTVhMTVkYWQxZWQ4YzBmOTU0NTI3OTRjMjU8L2E+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+TWVldGluZyBudW1iZXI6PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+NjEwIDM2NiA3NTA8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj5QYXNzd29yZDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMjIyMjIyIj40dlkyYVM2WDhERjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMyMjIyMjIiPkhvc3Qga2V5OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMyMjIyMjIiPjgyMDgyMjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2lu LWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6LjVpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMy MjIyMjIiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxoNSBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzIyMjIyMiI+TW9yZSB3YXlzIHRvIGpvaW48bzpwPjwvbzpwPjwvc3Bhbj48 L2g1Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206 LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5Hb2luZyAoPGEgaHJlZj0ibWFp bHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbSI+ZHRoYWxlckBtaWNyb3NvZnQuY29tPC9hPik/Jm5i c3A7Jm5ic3A7Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+QWxsDQog ZXZlbnRzIGluIHRoaXMgc2VyaWVzOiZuYnNwOyZuYnNwOyZuYnNwOzxzdHJvbmc+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxhIGhyZWY9Imh0 dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUz QSUyRiUyRnd3dy5nb29nbGUuY29tJTJGY2FsZW5kYXIlMkZldmVudCUzRmFjdGlvbiUzRFJFU1BP TkQlMjZlaWQlM0ROR3hqY21vd2RuTnphekE1WTJ0cU5XNW1PWEpyTW1neFp6a2daSFJvWVd4bGNr QnRhV055YjNOdlpuUXVZMjl0JTI2cnN0JTNEMSUyNnRvayUzRE1Ua2piV05vWVhKc1pYTnlRR2R0 WVdsc0xtTnZiV1kyTXpNeVptTXhNVFJsWkRZek1qSTFNbUppT1daaFl6SmhZMkUyWmpVd01EaGxa RFExWWprJTI2Y3R6JTNEQW1lcmljYSUyNTJGVG9yb250byUyNmhsJTNEZW4lMjZlcyUzRDAmYW1w O2RhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDMjUwMzA1ZTlmNzFjNGZl MjIzZWIwOGQ4MTc4NjRjZTElN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzEl N0MwJTdDNjM3Mjg1MjEyODg0MjA3NzA1JmFtcDtzZGF0YT1OMWVYUjF2bDdCdjZhV083alMwa3pB WFYyY0JEQ1Y0RXoybHF4RTFPJTJCU2MlM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxlPSJj b2xvcjojMjIwMENDIj5ZZXM8L3NwYW4+PC9hPjwvc3Bhbj48L3N0cm9uZz48c3Ryb25nPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2ZvbnQtd2Vp Z2h0Om5vcm1hbCI+DQogLSA8L3NwYW4+PC9zdHJvbmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+PGEgaHJlZj0iaHR0cHM6Ly9u YW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJG d3d3Lmdvb2dsZS5jb20lMkZjYWxlbmRhciUyRmV2ZW50JTNGYWN0aW9uJTNEUkVTUE9ORCUyNmVp ZCUzRE5HeGpjbW93ZG5OemF6QTVZMnRxTlc1bU9YSnJNbWd4WnprZ1pIUm9ZV3hsY2tCdGFXTnli M052Wm5RdVkyOXQlMjZyc3QlM0QzJTI2dG9rJTNETVRramJXTm9ZWEpzWlhOeVFHZHRZV2xzTG1O dmJXWTJNek15Wm1NeE1UUmxaRFl6TWpJMU1tSmlPV1poWXpKaFkyRTJaalV3TURobFpEUTFZamsl MjZjdHolM0RBbWVyaWNhJTI1MkZUb3JvbnRvJTI2aGwlM0RlbiUyNmVzJTNEMCZhbXA7ZGF0YT0w MiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0MyNTAzMDVlOWY3MWM0ZmUyMjNlYjA4 ZDgxNzg2NGNlMSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2 MzcyODUyMTI4ODQyMDc3MDUmYW1wO3NkYXRhPTRibDdRd3B2bHJuanAlMkJzV3hwWGFwY1dLdzlQ a2w0N3VFRHBjN01aREh5SSUzRCZhbXA7cmVzZXJ2ZWQ9MCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMy MjAwQ0MiPk1heWJlPC9zcGFuPjwvYT48L3NwYW4+PC9zdHJvbmc+PHN0cm9uZz48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtmb250LXdlaWdodDpu b3JtYWwiPg0KIC0gPC9zcGFuPjwvc3Ryb25nPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxhIGhyZWY9Imh0dHBzOi8vbmFtMDYu c2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5n b29nbGUuY29tJTJGY2FsZW5kYXIlMkZldmVudCUzRmFjdGlvbiUzRFJFU1BPTkQlMjZlaWQlM0RO R3hqY21vd2RuTnphekE1WTJ0cU5XNW1PWEpyTW1neFp6a2daSFJvWVd4bGNrQnRhV055YjNOdlpu UXVZMjl0JTI2cnN0JTNEMiUyNnRvayUzRE1Ua2piV05vWVhKc1pYTnlRR2R0WVdsc0xtTnZiV1ky TXpNeVptTXhNVFJsWkRZek1qSTFNbUppT1daaFl6SmhZMkUyWmpVd01EaGxaRFExWWprJTI2Y3R6 JTNEQW1lcmljYSUyNTJGVG9yb250byUyNmhsJTNEZW4lMjZlcyUzRDAmYW1wO2RhdGE9MDIlN0Mw MSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDMjUwMzA1ZTlmNzFjNGZlMjIzZWIwOGQ4MTc4 NjRjZTElN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3Mjg1 MjEyODg0MjE3NjU5JmFtcDtzZGF0YT1McU5WUHNUOVAlMkJjJTJGdTY5aEE2cXJZbFhrWHZIVTFI YkVpdkg4V0VjSW5EUSUzRCZhbXA7cmVzZXJ2ZWQ9MCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMyMjAw Q0MiPk5vPC9zcGFuPjwvYT48L3NwYW4+PC9zdHJvbmc+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/ dXJsPWh0dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZjYWxlbmRhciUyRmV2ZW50JTNGYWN0 aW9uJTNEVklFVyUyNmVpZCUzRE5HeGpjbW93ZG5OemF6QTVZMnRxTlc1bU9YSnJNbWd4WnprZ1pI Um9ZV3hsY2tCdGFXTnliM052Wm5RdVkyOXQlMjZ0b2slM0RNVGtqYldOb1lYSnNaWE55UUdkdFlX bHNMbU52YldZMk16TXlabU14TVRSbFpEWXpNakkxTW1KaU9XWmhZekpoWTJFMlpqVXdNRGhsWkRR MVlqayUyNmN0eiUzREFtZXJpY2ElMjUyRlRvcm9udG8lMjZobCUzRGVuJTI2ZXMlM0QwJmFtcDtk YXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1MDMwNWU5ZjcxYzRmZTIy M2ViMDhkODE3ODY0Y2UxJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdD MCU3QzYzNzI4NTIxMjg4NDIxNzY1OSZhbXA7c2RhdGE9VTdXTWF5dkNaRzZiOXlCMk0lMkZVam8l MkJtUTBUWmpEUW8wczluM1YxZ201czAlM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxlPSJj b2xvcjojMjIwMENDIj5tb3JlDQogb3B0aW9ucyDCuzwvc3Bhbj48L2E+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0NDQ0NDQyAxLjBwdDtiYWNrZ3JvdW5kOiNGNkY2RjY7cGFkZGluZzo0Ljhw dCA0LjhwdCA0LjhwdCA0LjhwdCI+DQo8cD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izg4ODg4OCI+SW52 aXRhdGlvbiBmcm9tDQo8YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9u Lm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuZ29vZ2xlLmNvbSUyRmNhbGVuZGFy JTJGJmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1MDMwNWU5 ZjcxYzRmZTIyM2ViMDhkODE3ODY0Y2UxJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRi NDclN0MxJTdDMCU3QzYzNzI4NTIxMjg4NDIxNzY1OSZhbXA7c2RhdGE9amdwdkIxOHowcHFIY2px U1JvYUw3QURKQ3BMYWRnWEFRMVI5QWltVlMyZyUzRCZhbXA7cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJf YmxhbmsiPg0KR29vZ2xlIENhbGVuZGFyPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5Zb3UgYXJlIHJlY2VpdmluZyB0aGlzIGNvdXJ0ZXN5 IGVtYWlsIGF0IHRoZSBhY2NvdW50DQo8YSBocmVmPSJtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQu Y29tIj5kdGhhbGVyQG1pY3Jvc29mdC5jb208L2E+IGJlY2F1c2UgeW91IGFyZSBhbiBhdHRlbmRl ZSBvZiB0aGlzIGV2ZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojODg4ODg4Ij5UbyBzdG9wIHJlY2VpdmluZyBmdXR1cmUgdXBkYXRlcyBmb3IgdGhpcyBl dmVudCwgZGVjbGluZSB0aGlzIGV2ZW50LiBBbHRlcm5hdGl2ZWx5IHlvdSBjYW4gc2lnbiB1cCBm b3IgYSBHb29nbGUgYWNjb3VudCBhdA0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS9j YWxlbmRhci8iPmh0dHBzOi8vd3d3Lmdvb2dsZS5jb20vY2FsZW5kYXIvPC9hPiBhbmQgY29udHJv bCB5b3VyIG5vdGlmaWNhdGlvbiBzZXR0aW5ncyBmb3IgeW91ciBlbnRpcmUgY2FsZW5kYXIuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHA+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM4ODg4ODgiPkZvcndh cmRpbmcgdGhpcyBpbnZpdGF0aW9uIGNvdWxkIGFsbG93IGFueSByZWNpcGllbnQgdG8gc2VuZCBh IHJlc3BvbnNlIHRvIHRoZSBvcmdhbml6ZXIgYW5kIGJlIGFkZGVkIHRvIHRoZSBndWVzdCBsaXN0 LCBvciBpbnZpdGUgb3RoZXJzIHJlZ2FyZGxlc3Mgb2YgdGhlaXIgb3duIGludml0YXRpb24gc3Rh dHVzLA0KIG9yIHRvIG1vZGlmeSB5b3VyIFJTVlAuIDxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2Fm ZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnN1cHBvcnQu Z29vZ2xlLmNvbSUyRmNhbGVuZGFyJTJGYW5zd2VyJTJGMzcxMzUlMjNmb3J3YXJkaW5nJmFtcDtk YXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1MDMwNWU5ZjcxYzRmZTIy M2ViMDhkODE3ODY0Y2UxJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdD MCU3QzYzNzI4NTIxMjg4NDIyNzYxNyZhbXA7c2RhdGE9QnlrZ2c1RGYwUHNoUSUyQmglMkJJZHZ3 SHE3emZrYjY3JTJGMVI2U2lrRTYlMkZKbCUyQjglM0QmYW1wO3Jlc2VydmVkPTAiPg0KTGVhcm4g TW9yZTwvYT4uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0K PC90YWJsZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BL0PR2101MB102763AC567739C7CD4A0EAAA3940BL0PR2101MB1027_-- From nobody Wed Jun 24 08:08:25 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 457163A0F12; Wed, 24 Jun 2020 08:08:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.4.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rats@ietf.org Message-ID: <159301130019.1457.3076270539782376163@ietfa.amsl.com> Date: Wed, 24 Jun 2020 08:08:20 -0700 Archived-At: Subject: [Rats] I-D Action: draft-ietf-rats-yang-tpm-charra-02.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Jun 2020 15:08:21 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. Title : A YANG Data Model for Challenge-Response-based Remote Attestation Procedures using TPMs Authors : Henk Birkholz Michael Eckel Shwetha Bhandari Bill Sulzen Eric Voit Liang Xia (Frank) Tom Laffey Guy C. Fedorkow Filename : draft-ietf-rats-yang-tpm-charra-02.txt Pages : 45 Date : 2020-06-24 Abstract: This document defines a YANG RPC and a minimal datastore tree required to retrieve attestation evidence about integrity measurements from a composite device with one or more roots of trust for reporting. Complementary measurement logs are also provided by the YANG RPC originating from one or more roots of trust of measurement. The module defined requires at least one TPM 1.2 or TPM 2.0 and corresponding Trusted Software Stack included in the device components of the composite device the YANG server is running on. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-rats-yang-tpm-charra/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-rats-yang-tpm-charra-02 https://datatracker.ietf.org/doc/html/draft-ietf-rats-yang-tpm-charra-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-rats-yang-tpm-charra-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jun 24 09:41:35 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23AC43A1059 for ; Wed, 24 Jun 2020 09:41:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.599 X-Spam-Level: X-Spam-Status: No, score=-9.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=S4EOrz2m; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=lIzGQ1mI Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZohC8SXfopQB for ; Wed, 24 Jun 2020 09:41:32 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68E353A1045 for ; Wed, 24 Jun 2020 09:41:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7678; q=dns/txt; s=iport; t=1593016889; x=1594226489; h=from:to:cc:subject:date:message-id:mime-version; bh=CEQdcP4o4gVp+kwO2tnleSY9zPBP9iLzubaRIgPGNdg=; b=S4EOrz2m5eIQ6D5L2pMnhFicp5CdWuh2LVrKfcSP8ZxJ7A0Y5cZX/ncE 29TisYsdmh/synFbz0XJUFkVs3GrdQ7WJfnUaj0mzLHTCZxI00f2nFWrP h4i2upynR4UegBvoeWw27k3DSC3hEimMksXxHWvkg59J9+IKvZSCTBcyY Y=; X-Files: smime.p7s : 3975 X-IPAS-Result: =?us-ascii?q?A0BuCACCgfNe/4kNJK1mHgEBCxIMgX8LgVIpKAdvKy0vL?= =?us-ascii?q?AqEGoNGA41FmFeBLoEkA1UEBwEBAQkDAQEYDQgCBAEBhEcCghUCJDYHDgIDA?= =?us-ascii?q?QEBAwIDAQEBAQUBAQECAQYEbYVbAQuFcgEBAQEVER0BATcBCwYBGQQBAQ0BH?= =?us-ascii?q?QIEMB0JAQQOAQQIBhSCOUyBfk0DHw8BDqwRAoE5iGF2gTKDAQEBBYE2Ag5Bg?= =?us-ascii?q?yYYggcHCYE4gVOBFIluDxqBQT+BVIVnAQECAQGBXRUnglYzgi2ZFIERiXiQT?= =?us-ascii?q?gqCWoQpglWBRpELgnGBGIgNkm2FNIwFiheUNAIEAgQFAg4BAQWBWgQugVZwF?= =?us-ascii?q?RqDCglHFwINjh6DcYUUhUJ0Ag4nAgYIAQEDCXyPPgGBEAEB?= IronPort-PHdr: =?us-ascii?q?9a23=3AUHiY4hxqBuIjUNLXCy+N+z0EezQntrPoPwUc9p?= =?us-ascii?q?sgjfdUf7+++4j5ZRWFt/RgkFGPWp/UuLpIiOvT5qbnX2FIoZOMq2sLf5EEUR?= =?us-ascii?q?gZwd4XkAotDI/gawX7IffmYjZ8EJFEU1lorHC2LUYTH9zxNBXep3So5msUHR?= =?us-ascii?q?PyfQN+OuXyHNvUiMK6n+C/8pHeeUNGnj24NLhzNx6x6w7Ws5ob?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.75,276,1589241600"; d="p7s'?scan'208";a="492412180" Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 24 Jun 2020 16:41:20 +0000 Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by alln-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id 05OGfKYU011213 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 24 Jun 2020 16:41:20 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 24 Jun 2020 11:41:20 -0500 Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 24 Jun 2020 12:41:19 -0400 Received: from NAM10-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 24 Jun 2020 11:41:19 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kMpOvTEIq+JVaoFVWhsO9WJ0XUKJJN+Q6Ifx3zWZVU+BFIuMTS4tNwa9sDC0g9SwyUCzmCPx7VWWdwcqORGxIJQXo3GXJE7ItF9Lp/1dTX/5OTx8my/JwmXWMLj1PRMtoaL6HJ4G+fRhesZCxrNQ4/TjRb6YIXqnIoVFv/92/A+hbaC58IkN8r7ciSwEhk/kFBSYKTp0KqxfyY+BmuQL9q0i7Huokx0opnfo0DkbmaVHJ6YoHlSbfz7WgwEnEf5W1lLQgo1TQ4M/sAkviQmISz0k0/4LRlWinqqimzLFCFUfDw6SGDvRjSfQy2X628ZmLmnGTBzG9tte2ohIzgW4lw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sqr15QN6rWQLJ+DWt4Ph++TWXI5GAhRTu2pzEiK1c9w=; b=PFJYsgbHEsh/b1dvyTCH2Wf0GLKKBN7xCjKOJ7dJTM7EPTJVSSJKhfGR2PsN2EaErtDNd3Kfn2g2F9g+OissVmcUA9uq6lwv8qBcWVHIzJGGGDF8ktPW6jPB3tEBPrY1RrJ3C+G3vJ0MRYaGh9JZeS9J+YqM65G+M7eg4ZqmkahZrjIyrLnzGDVQh+lt2Npfg4E9hy3vm0bSApk4WqwVT/W2W42+rVOMS09W7m40ydH0FLYKSQdkHZlmg7OW0dnoLPE3Cmi8a5dGFxweYSEqecrK9/jhCR1R6um+Kb75PIrxtB6n8zNAuQjyZBK9fH4BlujqDZkCH7xsT1hnozo18g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sqr15QN6rWQLJ+DWt4Ph++TWXI5GAhRTu2pzEiK1c9w=; b=lIzGQ1mI85SmE5njWRW/3V5o4YclZ5m7SdMutOZWjI6MRZn9QGek5gnau9LmDueDLmk6ThCYti4leoNn3gL9+s6jDBgcAe0w2gTSJLXQrj9v6lwaIz5Nb6/11Sg2e8FDXxrZKmvwcdfTlK6YWg6M34zY6sNt3Vm4PCgCFKv/OoA= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by MN2PR11MB4382.namprd11.prod.outlook.com (2603:10b6:208:18c::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22; Wed, 24 Jun 2020 16:41:18 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290%7]) with mapi id 15.20.3109.027; Wed, 24 Jun 2020 16:41:18 +0000 From: "Eric Voit (evoit)" To: "rats@ietf.org" CC: "Birkholz, Henk" , Wei Pan Thread-Topic: draft-birkholz-rats-network-device-subscription-00 Thread-Index: AdZKRjugUmuktT1iTCKR70EUNGNj/g== Date: Wed, 24 Jun 2020 16:41:18 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.72] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cf5d000d-09b4-4f34-fb25-08d8185d6b58 x-ms-traffictypediagnostic: MN2PR11MB4382: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0444EB1997 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: pHLiBSJvkF31TpXYZvxhGEXm6pA2wnz+m2nczfGPWwfSTtE5weUAcXF5uiHMiighfXC1UazXU4oUmbQmmJh1tXWIskUbeWwMf3ATUPPtGZruGp4ye77hqu/eI4dsQXyHVGoqjuWHhYpDyTHTGZP5JEB+j5XYXgfveZhIw/7ysD7hAN/QtuPOvfwAobe23JodEwSQ3fvj5Y2GRGsxcMYONQ62P3BrGkwXBNhLIcBuunOxhR97wkDyOzOj53YxPR8KUqsk85bOI+BeMn9sBJQZo/kGUTQijL1Wk2ZzEhwjMjDDKY3Vn71Ka+7OD3p8fjd3GkwUFcHyNvMULU43EisCEvmvX3+YEv7wlO/GACopaFSF+ger74nVvPPCpxjU1XQXoYgZ59GxgleeZOvbrLLEFw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(39860400002)(376002)(366004)(136003)(396003)(7696005)(66476007)(66446008)(66946007)(76116006)(64756008)(316002)(33656002)(66556008)(66616009)(52536014)(8936002)(54906003)(71200400001)(4326008)(2906002)(26005)(55016002)(186003)(86362001)(9686003)(6916009)(5660300002)(8676002)(53546011)(6506007)(99936003)(478600001)(83380400001)(966005)(66574015); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; boundary="----=_NextPart_000_03D2_01D64A24.B7AEC290"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: cf5d000d-09b4-4f34-fb25-08d8185d6b58 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jun 2020 16:41:18.3744 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: LejflKE2l9BjxMf0+4GyV1DkRtzDlWzyViZIQ/qfDNu7VpH1MoL7Tfoa65w2PF/y X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4382 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.15, xch-aln-005.cisco.com X-Outbound-Node: alln-core-4.cisco.com Archived-At: Subject: [Rats] draft-birkholz-rats-network-device-subscription-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Jun 2020 16:41:34 -0000 ------=_NextPart_000_03D2_01D64A24.B7AEC290 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Hi All, This draft defines how to subscribe to a stream of attestation related Evidence on TPM-based network devices. When subscribed, a Telemetry stream of verifiably fresh YANG notifications (which are generated when TPM PCRs are extended) are pushed to the subscriber. This draft integrates: * Section 5 of draft-voit-rats-trusted-path-routing-01 * Elements of draft-xia-rats-pubsub-model Thanks! Eric, Henk, and Wei -----Original Message----- From: internet-drafts@ietf.org Sent: Wednesday, June 24, 2020 12:19 PM To: Eric Voit (evoit) ; Wei Pan ; Henk Birkholz Subject: New Version Notification for draft-birkholz-rats-network-device-subscription-00.txt A new version of I-D, draft-birkholz-rats-network-device-subscription-00.txt has been successfully submitted by Eric Voit and posted to the IETF repository. Name: draft-birkholz-rats-network-device-subscription Revision: 00 Title: Attestation Event Stream Subscription Document date: 2020-06-24 Group: Individual Submission Pages: 20 URL: https://www.ietf.org/internet-drafts/draft-birkholz-rats-network-device-subscription-00.txt Status: https://datatracker.ietf.org/doc/draft-birkholz-rats-network-device-subscription/ Htmlized: https://tools.ietf.org/html/draft-birkholz-rats-network-device-subscription-00 Htmlized: https://datatracker.ietf.org/doc/html/draft-birkholz-rats-network-device-subscription Abstract: This document defines how to subscribe to a stream of attestation related Evidence on TPM-based network devices. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat ------=_NextPart_000_03D2_01D64A24.B7AEC290 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNjI0MTY0MTAxWjAjBgkqhkiG 9w0BCQQxFgQUd7NNWC7YGUz63u6kZxuoAJ4bRokwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAgfnEWkBRTdCcOPiiaKjnAoN5CvaXHagddPrVR25aFQKtfoCDuN5SLLOW0N1aG8pp2 u1KLdNFMa5HaOBMX+3zz3BQWLMC0qFkt+D4zXjFj+sPVjRoNpZ3x5D7kUNp7HS3YXAZKfkt8ZjUt D4uomzVGDZkrfgBfEKjIqnQNKq547F8Tta0ry1oIsbHTnRxq3esfQzFE2jqvz7f8okRJealHICIq cyBF9NMzsw5CxAyjDP5vJARTz72SM1tbFt4VO1u7b8BKCnqMHkVuxPcfr4jv/kMBnDx7iSMNGhIn 1vDeJyH/+XDYLZlzcykWckLpAY6e9jK2EzbUFqQp5kc/LYRUAAAAAAAA ------=_NextPart_000_03D2_01D64A24.B7AEC290-- From nobody Thu Jun 25 18:11:36 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81E2B3A10BD for ; Thu, 25 Jun 2020 18:11:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.599 X-Spam-Level: X-Spam-Status: No, score=-9.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=KVHhgtFx; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=094CsXQA Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i0-phCsH-yyU for ; Thu, 25 Jun 2020 18:11:32 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D7283A10BA for ; Thu, 25 Jun 2020 18:11:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8043; q=dns/txt; s=iport; t=1593133892; x=1594343492; h=from:to:subject:date:message-id:mime-version; bh=Wb1WyisIIkYc2zrQrt+4/q2EYdDJSzCcTw7uVaylLrY=; b=KVHhgtFx13osqLGeGcoNwCJ/YYqy8trAXVcwT4S12pyofgDT8tfNd6bK TTbnu+wqyn9RkGKgkpvU27dJAtlvVgSErrHhbL+DzI1WfxpOQI4gfIMTs CSPOWWXrprLqYPfECnHFQekcjAnyJdearGkgK/DS6kDvrBSTclCKZ0Okr o=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3A22Ei0R2OR3pWcnqasmDT+zVfbzU7u7jyIg8e44?= =?us-ascii?q?YmjLQLaKm44pD+JxWGv6dsgUPHG4LB5KEMh+nXtvXmXmoNqdaEvWsZeZNBHx?= =?us-ascii?q?kClY0NngMmDcLEbC+zLPPjYyEgWsgXUlhj8iK6PFRbXsHkaA6arni79zVHHB?= =?us-ascii?q?L5OEJ8Lfj0HYiHicOx2qiy9pTfbh8OiiC6ZOZ5LQ69qkPascxFjA=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AQCgAYSvVe/5FdJa1ghCVRB28rLS8?= =?us-ascii?q?sCoQmg0YDjUyYWIJSA1UEBwEBAQkDAQElCAIEAQGERwKCJgIkOBMCAwEBCwE?= =?us-ascii?q?BBQEBAQIBBgRthVsBC4VuAQEXER0BATgLBgEZAQMBASsCBDAXBgkBBBMIBhS?= =?us-ascii?q?DBYF+TQMfDwEOoh0CgTmIYXaBMoMBAQEFgTYCDkGDNRiCBwcJgTiBU4EUiX4?= =?us-ascii?q?agUE/gVSFZwEBAgEBgV2DEjOCLZkXgRGaSgqCW4QqglaBRpERgnKBGIgNknO?= =?us-ascii?q?RQ4oYlDYCBAIEBQIOAQEFgWoigVZwFRqDCglHFwINkg6FFIVCdAI1AgYIAQE?= =?us-ascii?q?DCXyNaAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,281,1589241600"; d="p7s'?scan'208";a="779905547" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 26 Jun 2020 01:11:31 +0000 Received: from XCH-RCD-004.cisco.com (xch-rcd-004.cisco.com [173.37.102.14]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 05Q1BVRm015290 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Fri, 26 Jun 2020 01:11:31 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-RCD-004.cisco.com (173.37.102.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 25 Jun 2020 20:11:31 -0500 Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 25 Jun 2020 20:11:30 -0500 Received: from NAM12-DM6-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 25 Jun 2020 21:11:30 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gsIi0N3JulwlZAIziYmf81uDCGzvYWxVOQxnz/IEfCJTaQHfrVtSm4NMwd+3vnVdtQINPeLGUefGCanvdsGpipdF3KTHDlL8eDQCu3FtpAe/2SDzVnVUqWlSN8n4lT8QBXCHK/jLWbb5I/P9ExQnuUjqd8w0k2p64G70BJr5MaYEqy1vBmP9FU8OStqANqI8nWhGxdHiQpwD82UaF7RQ01dlLVTs32e0GLqTaDjcxVl61dtCpOPDmnFAk2dtUMiqPssgClYY53bBMlVbJ4uMHPzkRJ83gY3402Q5+nNBZRqWnVk1rpF1J3x2FQf7YxQA9mhoZGhWRDiEt2JeTjcFqA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3DwXGq0TxCtHvoVdOO11xuGqvKWUrUX8oWIWjiNP30M=; b=YPHoM8Ac3pZrvE+jvYOHMvp+5H7L1QO8NSrjKglr6n01yHqcQBaiXUm+P1ghy0/+e3CxKqrZERksNNIk1AhwJ/fEqoA1M76Hm1lTHtVcctMOQD+jXamdSJF4kYlKXW+mkrM65RJWfAgy6XCkAR3p9NY/5ESyDU7Urvz7L3ysi3ptusUkkVU2hJS6byvFKjWgu+HIKJMJnMZhT9JFihaSq/mJL0uutqOoReKg1pzKyyBioBoKdghsedrbgTNbrIH8HHUTSrq7RZipzUNzDYZWMKCwd/7k8Y6E7sVG54EqJX6NzY83vKmTNNCarf9vAkDZNVpA+YYdl4B43dR7801H/g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3DwXGq0TxCtHvoVdOO11xuGqvKWUrUX8oWIWjiNP30M=; b=094CsXQASXELOvCHmMsjCPh3XbK8O03z//OCGjgEb+glhSZ22mLxjvbQQpi0PtF6lWAI5Zhu7pkrEBoSr7i5BX4G1LgHqNud90tmdBn1nsGiJg5EQvzWhTG0JTno8XHT1/Lv+kJSrDJlYQmemRWvcmMrc9jfzboaj/fw8W60e5k= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by MN2PR11MB4238.namprd11.prod.outlook.com (2603:10b6:208:188::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.21; Fri, 26 Jun 2020 01:11:29 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::20ac:d8b4:4a4f:4290%7]) with mapi id 15.20.3131.023; Fri, 26 Jun 2020 01:11:29 +0000 From: "Eric Voit (evoit)" To: "rats@ietf.org" Thread-Topic: draft-voit-rats-trustworthy-path-routing updated Thread-Index: AdZLQCLuiyDkoxMqSPSfT3Ptq4IDbA== Date: Fri, 26 Jun 2020 01:11:29 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.87] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cca3ce6e-eb89-4af4-0759-08d8196ddb5a x-ms-traffictypediagnostic: MN2PR11MB4238: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0446F0FCE1 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: QsmgRMgQWn2QLwx0GDpUTfcoFNXCzI9ezeB9u+6ApN+sIzw6GKQaRYPPhBz4Gs3Xqsb4axhJq/W3XRip3404WhgvfS+yepddjnesqjEkxgxQJajt5jpuFc9GDY7PmEDJxy1cFRM8d5nwqGs0nOifv3lYLw36zZr90jSA5rHbq1TgHtMjbhQKby9zTM50pgr7vGxOwiXNgehDg3M69W8ToldItOkfiDijjXZ1QeMWMg4lCxsAKSCdXQuSkZYliXWnTJqgIge385tqjpPRS4siLqCGEIZrabTQepV4oHlvEg/mw6adD22+crCl3u4/Smd++JtUIC1ei/uIOYoXF/cZJs7kQL4PW/ZXdAYj1v86ineW0MFuAQXyO48gUmqe8fb3L+yt/4XVnlqMexqWOYBnug== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(39860400002)(366004)(136003)(376002)(396003)(33656002)(15650500001)(66574015)(26005)(83380400001)(64756008)(6506007)(53546011)(2906002)(66946007)(478600001)(7696005)(186003)(966005)(99936003)(316002)(66446008)(66556008)(52536014)(6916009)(9686003)(8676002)(71200400001)(66476007)(8936002)(76116006)(5660300002)(66616009)(55016002)(86362001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 166Q94Zv3NPXwXnVHLDihDcMeeoERhopHysR/fOn9eO93P/XzYRC0U1nH/zXpB9wN+sHREm8uvwrB1Tw7lSWFHCjpwj4O5xhSg/g4PcNac8WO+E4EC5UE3+DsHzdDAju8Y65N3epCjkIdYvsKylN7dxuyLz4OXu4FVApBhYRYU/uL17JyTa5aN4Y55EuQX50oliZZQbotyIiqMZebqI7IFghfh1MDw7aZYaTXvKFmSezpD2smPBZLlYGGMvuUS8h0MP/30H6hd7OhgwKEESt0VXN9/fyLNVwb7Xcwx74XPW9FphTqxjCJfh/V0RXH/uKJlrpgi3fM9QJwv1eFepJQ+ikL0a0ZXYvEMrPRD6QNQmboDIWTqAWZP0d69Bqr3nk+0BW0Y4xQLIzR74tR4ZueM5p2yeanzLQR4IpUe+OYyI55U8LcQwG0uKkmZRg2Oq572gZLbNu0f34xUPAHv6PDmtInJ+IvXDYeISgtxIQszL4w1JX84xRBCPmnixHotUF x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; boundary="----=_NextPart_000_0603_01D64B1E.A2B28980"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR11MB3122.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: cca3ce6e-eb89-4af4-0759-08d8196ddb5a X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jun 2020 01:11:29.3736 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: HOm3r3MUnvAk+UXp01RhDC4Br5t18VPiHzM1Kml2NihoSvNK1A3cZgBJpSRqHXle X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4238 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.14, xch-rcd-004.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: Subject: [Rats] draft-voit-rats-trustworthy-path-routing updated X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jun 2020 01:11:35 -0000 ------=_NextPart_000_0603_01D64B1E.A2B28980 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Updates from v02 of draft-voit-rats-trusted-path-routing go into draft-voit-rats-trustworthy-path-routing-00 (I needed to do a file rename due to an IETF submission glitch). Changes include: o Added timing diagram that aligns to the architecture draft and the interaction model draft. o The Attester's AIK is included within the Stamped Passport. This eliminates the need to provision to AIK certificate on the Relying Party. o YANG modules integrate fully with charra as well as NETCONF cryptotypes and keystores. Thanks, Eric -----Original Message----- From: internet-drafts@ietf.org Sent: Thursday, June 25, 2020 6:20 PM To: Eric Voit (evoit) Subject: New Version Notification for draft-voit-rats-trustworthy-path-routing-00.txt A new version of I-D, draft-voit-rats-trustworthy-path-routing-00.txt has been successfully submitted by Eric Voit and posted to the IETF repository. Name: draft-voit-rats-trustworthy-path-routing Revision: 00 Title: Trusted Path Routing Document date: 2020-06-25 Group: Individual Submission Pages: 26 URL: https://www.ietf.org/internet-drafts/draft-voit-rats-trustworthy-path-routing-00.txt Status: https://datatracker.ietf.org/doc/draft-voit-rats-trustworthy-path-routing/ Htmlized: https://tools.ietf.org/html/draft-voit-rats-trustworthy-path-routing-00 Htmlized: https://datatracker.ietf.org/doc/html/draft-voit-rats-trustworthy-path-routing Abstract: There are end-users who believe encryption technologies like IPSec alone are insufficient to protect the confidentiality of their highly sensitive traffic flows. These end-users want their flows to traverse devices which have been freshly appraised and verified. This specification describes Trusted Path Routing. Trusted Path Routing protects sensitive flows as they transit a network by forwarding traffic to/from sensitive subnets across network devices recently appraised as trustworthy. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat ------=_NextPart_000_0603_01D64B1E.A2B28980 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNjI1MjIzMDAwWjAjBgkqhkiG 9w0BCQQxFgQUULUBWox7GPE5VZvd+ThqE5huUBgwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQBK3H8tMRcosi+z7V1fIPWseYWuqyn+kIdk39wcZP0HnkA00GFBKcxkAXOCgJ0PdCFa ae4mU1IwathsIA2qxtQKxSVfqFRdR4Cn8Vvbm9t+dyr59o2hKYVQjTizXGmE/x8w6avYVWgNiEdk VLivplF5C2A7uZhE8Yr2++z4MJ8cdqFTtHtsxvZhlCUNC8vXh1wo0xJZ9FLGf76WteitM5RYOKN/ RvaHoFtpdrpLHCcofVbkavx2RyKCJjTa6LBcIQdmDalwL8pIyyMoEJd4vHH5SV5rKjt+MFAEr7+L 4hp/BIBhjUDOXhx3Y4HvRfIfYsOLDBTmTOwPtiD5FiTXNFgwAAAAAAAA ------=_NextPart_000_0603_01D64B1E.A2B28980-- From nobody Sat Jun 27 01:30:28 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E3DB3A07CB; Sat, 27 Jun 2020 01:30:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pymnh01bM-sF; Sat, 27 Jun 2020 01:30:19 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 305543A07C6; Sat, 27 Jun 2020 01:30:18 -0700 (PDT) Received: from [192.168.217.116] (p5089ae91.dip0.t-ipconnect.de [80.137.174.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 49v5F273KjzyXW; Sat, 27 Jun 2020 09:37:26 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Mao-Original-Outgoing-Id: 614936246.760429-e878f76976a86e074d77e63a5ef9909c Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Message-Id: <77085D5E-EC1C-4285-A880-1EC02A73FF0F@tzi.org> Date: Sat, 27 Jun 2020 09:37:26 +0200 To: suit@ietf.org, teep@ietf.org, din@irtf.org, rats@ietf.org, lake@ietf.org X-Mailer: Apple Mail (2.3608.80.23.2.2) Archived-At: Subject: [Rats] [Ace] Constrained Node/Network Cluster @ IETF108: DRAFT AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Jun 2020 08:30:23 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF108. Remember that there is still quite some potential for changes. Conflicts that meet the eye: LAKE/SUIT (!). ACE/RATS. (I think 6LO/COSE can be ignored.) HACKATHON is on top of CORE, but I don't know what that slot on Friday is supposed to be. All times appear to be in UTC, even though nothing says so; https://datatracker.ietf.org/meeting/agenda-utc gives the same times. Gr=C3=BC=C3=9Fe, Carsten MONDAY, July 27, 2020 1100-1240 Session I Rm 1 ART dispatch Dispatch WG Rm 5 IRTF pearg Privacy Enhancements and Assessments = Research Group Rm 2 SEC *** teep Trusted Execution Environment = Provisioning WG 1300-1350 Session II Rm 4 ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Rm 6 INT intarea Internet Area Working Group WG Rm 2 RTG babel Babel routing protocol WG Rm 5 RTG detnet Deterministic Networking WG 1410-1550 Session III Rm 5 ART webtrans WebTransport WG Rm 4 IRTF qirg Quantum Internet Research Group Rm 2 SEC gnap Grant Negotiation and Authorization = Protocol WG TUESDAY, July 28, 2020 1100-1240 Session I Rm 1 ART *** asdf A Semantic Definition Format for Data = and Interactions of Things BOF Rm 2 INT 6man IPv6 Maintenance WG Rm 3 IRTF irtfopen IRTF Open Meeting Rm 8 TSV masque Multiplexed Application Substrate over = QUIC Encryption WG 1300-1350 Session II Rm 4 SEC mls Messaging Layer Security WG Rm 3 SEC *** rats Remote ATtestation ProcedureS WG 1410-1550 Session III Rm 4 SEC *** lake Lightweight Authenticated Key Exchange = WG Rm 3 SEC *** suit Software Updates for Internet of Things = WG Rm 2 TSV loops Local Optimizations on Path Segments BOF WEDNESDAY, July 29, 2020 1100-1240 Session I Rm 5 RTG bier Bit Indexed Explicit Replication WG Rm 4 SEC *** ace Authentication and Authorization for = Constrained Environments WG Rm 3 SEC *** rats Remote ATtestation ProcedureS WG Rm 2 TSV quic QUIC WG 1300-1350 Session II Rm 6 ART webtrans WebTransport WG Rm 2 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Rm 4 RTG rift Routing In Fat Trees WG Rm 5 SEC *** cose CBOR Object Signing and Encryption WG Rm 1 TSV tsvarea Transport Area Open Meeting THURSDAY, July 30, 2020 1100-1240 Session I Rm 6 OPS anima Autonomic Networking Integrated Model = and Approach WG Rm 4 RTG raw Reliable and Available Wireless WG Rm 5 SEC secdispatch Security Dispatch WG Rm 2 TSV tsvwg Transport Area Working Group WG 1300-1350 Session II Rm 3 INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Rm 2 SEC saag Security Area Open Meeting 1410-1550 Session III Rm 6 INT add Adaptive DNS Discovery WG Rm 7 INT *** drip Drone Remote ID Protocol WG Rm 4 SEC acme Automated Certificate Management = Environment WG FRIDAY, July 31, 2020 1100-1240 Session I Rm 8 ART *** core Constrained RESTful Environments WG Rm 6 GEN hackathon Hackathon Rm 2 SEC tls Transport Layer Security WG Rm 1 TSV tsvwg Transport Area Working Group WG 1300-1350 Session II Rm 3 ART wpack Web Packaging WG Rm 4 INT 6man IPv6 Maintenance WG Rm 6 SEC emu EAP Method Update WG 1410-1550 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 7 IRTF coinrg Computing in the Network Research Group Rm 3 SEC privacypass Privacy Pass WG _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Mon Jun 29 11:34:40 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10CFF3A0C70 for ; Mon, 29 Jun 2020 11:34:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C-V1FSQDG5B1 for ; Mon, 29 Jun 2020 11:34:30 -0700 (PDT) Received: from p3plsmtpa08-03.prod.phx3.secureserver.net (p3plsmtpa08-03.prod.phx3.secureserver.net [173.201.193.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00ED73A0C10 for ; Mon, 29 Jun 2020 11:34:24 -0700 (PDT) Received: from laurences-mbp.lan ([70.58.199.219]) by :SMTPAUTH: with ESMTPA id pybnjO3vldxNlpybojVbPG; Mon, 29 Jun 2020 11:34:24 -0700 X-CMAE-Analysis: v=2.3 cv=XPZOtjpE c=1 sm=1 tr=0 a=vYbQBYz1awqCo8DrEKtgEg==:117 a=vYbQBYz1awqCo8DrEKtgEg==:17 a=0XtbOteLAAAA:20 a=hBRnNPMDZ0kWKaiq3xkA:9 a=IKBfvZNoeQbITef-:21 a=c7KaBhLyqnBG7McE:21 a=QEXdDO2ut3YA:10 a=xbhRuRAyewH50itxapoA:9 a=Kdi9RpkxgjNDbNfE:21 a=85O3ZxjNsr-8Ey1T:21 a=PVKONA2Qxgr9af6a:21 a=_W_S_7VecoQA:10 a=WQnItmPV2fbdzLaCP6-h:22 a=pHzHmUro8NiASowvMSCR:22 a=Ew2E2A-JSTLzCXPT_086:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_D001EE9C-4296-4B01-BFFD-181981872EED" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Message-Id: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> Date: Mon, 29 Jun 2020 11:34:23 -0700 To: rats@ietf.org X-Mailer: Apple Mail (2.3608.80.23.2.2) X-CMAE-Envelope: MS4wfCANtWMDbzckuUQHW/QMbxbLctPfhsLGLzdTHtx2a0F7qGZD1R4OnSPctnXWrA8TT29wCdh8ZXgE+9TphBjNMO/0C76qG/whoD+uymlGlcvYCd4op4mL 4hRJ1lqnRP0Rsm0so/TLDYSVck1EicotHtCrhs6hzRCH4Z86yDVlJ8nK Archived-At: Subject: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jun 2020 18:34:39 -0000 --Apple-Mail=_D001EE9C-4296-4B01-BFFD-181981872EED Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Stepping back a bit on the definition of an Endorsement, I think the = four inputs to a Verifier are these: - Key material for verifying trust in the Attester - Known-good/Reference values for comparison with claims - Static implicit claims that are passed to RP's via Attestation = Results - Appraisal Policy These can and will be conveyed to the Verifier in many different ways: - X.509 certs with extensions - Signed documents - HTTP queries against the Attester/device manufacturer - Remote SQL or some other sort of database access to manufacturer(s) - Data storage like flash drives the are hand carried into the = Verifier's site - One-time special file transfers - Ceremonial procedures with M out of N people physical present = approving transfer It seems like shoe-horning all of the above (except policy) into an = Endorsement, like I=E2=80=99ve tried to do = is too much. I = tried this shoe-horning because I think the architecture document needs = to cover all this and Endorsements was what was in it. A typical = Endorsement seems to be just the first two mentioned, X.509 and signed = documents expanding its definition to include database access is a = stretch. Rather than defining Endorsement, I=E2=80=99d like to define Verifier = Input: ******************* ************ **************** * Manufacturer(s) * * Verifier * * Relying Party* ******************* * Owner * * Owner * | ************ **************** | | | Verifier Input| | | | |Appraisal | | |Policy | | |for | Appraisal | |Evidence | Policy for | | | Attestation | | | Result v v | .-----------------. | .----->| Verifier |------. | | '-----------------' | | | | | | Attestation| | | Results | | | Evidence | | | | | | v v .----------. .-----------------. | Attester | | Relying Party | '----------' '=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=98 Endorsements must still be mentioned, but as one form of Verifier input = just like EAT is one form of Attestation Evidence. Verifier Input would be defined as: - Key material for verifying trust in the Attester - Known-good/Reference values for comparison with claims - Static implicit claims that are passed to RP's via Attestation = Results To do this, I=E2=80=99d replace the current PR = and issue = I have on = Endorsements with a new PR. It will be a fair bit of work, so I want to = see if there is some consensus first. LL --Apple-Mail=_D001EE9C-4296-4B01-BFFD-181981872EED Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Stepping back a bit on the = definition of an Endorsement, I think the four inputs to a Verifier are = these:
  - Key material for verifying trust in the = Attester
  - Known-good/Reference values for = comparison with claims
  - Static implicit claims = that are passed to RP's via Attestation Results
  - = Appraisal Policy

These= can and will be conveyed to the Verifier in many different = ways:
  - X.509 certs with = extensions
  - Signed documents
  - HTTP queries against the Attester/device = manufacturer
  - Remote SQL or some other sort = of database access to manufacturer(s)
  - Data = storage like flash drives the are hand carried into the Verifier's = site
  - One-time special file = transfers
  - Ceremonial procedures with M out = of N people physical present approving transfer

It seems like shoe-horning all of the = above (except policy) into an Endorsement, like I=E2=80=99ve tried to do  is too much. I tried = this shoe-horning because I think the architecture document needs to = cover all this and Endorsements was what was in it. A typical = Endorsement seems to be just the first two mentioned, X.509 and signed = documents expanding its definition to include database access is a = stretch.

Rather = than defining Endorsement, I=E2=80=99d like to define Verifier = Input:

      =     *******************   ************     = ****************
          * Manufacturer(s) *   = * Verifier *     * Relying Party*
      =     *******************   *  Owner   *   =   *  Owner       *
      =                  |   =      ************     = ****************
                =        |             =  |                 = |
 =        Verifier Input|         =      |               =   |
                =        |             =  |Appraisal        |
      =                  |   =            |Policy       =     |
                =        |             =  |for              | = Appraisal
                =        |             =  |Evidence         | Policy = for
                =        |             =  |                 | = Attestation
                =        |             =  |                 | =  Result
                =        v             =  v                 = |
 =                   =  .-----------------.             =    |
              .----->| =     Verifier    |------.         = |
 =             |     =  '-----------------'      |       =   |
              |   =                     =         |         = |
 =             |         =            Attestation|     =     |
              |   =                  Results =    |         |
      =         | Evidence         =              |       =   |
              |   =                     =         |         = |
 =             |         =                     =   v         v
        .----------. =                     =  .-----------------.
        | Attester | =                     =  | Relying Party   |
        '----------' =                     =  '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=98



Endorsements must still be mentioned, but as one form of = Verifier input just like EAT is one form of Attestation = Evidence.

Verifier Input would be defined as:
 = - Key material for verifying trust in the Attester
  = - Known-good/Reference values for comparison with claims
  - Static implicit claims that are passed to RP's via = Attestation Results

To do this, I=E2=80=99d replace the current PR and issue I have on Endorsements with a new PR. It will = be a fair bit of work, so I want to see if there is some consensus = first.

LL





= --Apple-Mail=_D001EE9C-4296-4B01-BFFD-181981872EED-- From nobody Mon Jun 29 20:56:15 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 215D13A0AB1 for ; Mon, 29 Jun 2020 20:56:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1-tJZzhTSImQ for ; Mon, 29 Jun 2020 20:56:12 -0700 (PDT) Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12on2097.outbound.protection.outlook.com [40.107.237.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A27E3A0AAE for ; Mon, 29 Jun 2020 20:56:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FXa/ORo5k36sGLFH/gKtzlXHYcKVhYvzz4Zntnf1TCiLjCbS7hXrWU4lAChptLuHIkWksZPwivfCTTXSHUQ5JkP1CmsL6ZqzJPv4AucVyPM38zufZ2WlTQ5UdYs6X8SGotrB5br+hpKnBPCJMNQ6jZIE7wto7mKn9+dl6S+hFEzcztdzZgzDk/Q5zWFizwEjRVN4omDaDGLQEPtRMtsW4X1BH6Ww/9jRL8EZ0+KT78eWiPLTuTCAcB4lOZRXXFtG3aXSU/z7kDaCZBH62GH1t4CLBBT8pXQmQc3h9M9RG9xT6jVTLSHuGRXKrMZEHMlyOpG8tdK6/OjzZ9mNTUzWkQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=g0dKuWHMcZu8e1yN+rzStU8NihOL+5YWKq4FOgXQVgQ=; b=THS6S+IFveVrTx3nYU1znoW3G8XdPDwW1neFqaNIPVMRuw3LezKxO9XToQuFMfze/SJkrmzcIeo7gxtmy3xBebJqJOr00wT3ddiAdgJQnQf1YSW9cp4eEYzvnud1XM1htFjAQJGXCs4teSG2ggeordJ0sxiYQ1uoXx+tovVYHpDiF3E4Vc0gWO4f49Dt4fkUCzXZD6raoHYEaetTv5fqZHW22qsar5ICMsXwLBziNXeSEUiX6bFq4kIMrGxZlyMBbuT/MBsN0lYc0UeftlqsgwO4NmWfize+Im33wigr3gTAB1/Pn+ydCx/Smob4VWbsjcpwERmRNupyYQrdz+iACg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=g0dKuWHMcZu8e1yN+rzStU8NihOL+5YWKq4FOgXQVgQ=; b=TNcHxS/6qLwrm1LQXL22tOnPH3GMt5WCQYpSOBfLA85XU3zyrNMd4yxwSIJZ6bhEJ+Os5yjBUlwKQMtXCR8/twRB5n7cdUqGGhitChM1D0PpHCDU7T2ypaiTglWqJYboh4bs1t4n84w3m45riJ6ZOQlgtZ/E97tYa68lhBPqaIc= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB0899.namprd21.prod.outlook.com (2603:10b6:207:36::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.2; Tue, 30 Jun 2020 03:56:10 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::29cb:295d:97bc:3f7f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::29cb:295d:97bc:3f7f%9]) with mapi id 15.20.3174.001; Tue, 30 Jun 2020 03:56:10 +0000 From: Dave Thaler To: Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] Verifier Input instead of Endorsement? Thread-Index: AQHWTkP+FnrtkqE4YE232Ks3KGvDAKjwhzrw Date: Tue, 30 Jun 2020 03:56:09 +0000 Message-ID: References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> In-Reply-To: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-06-30T03:56:09Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=19eceaed-ea6f-4eec-99c8-29cd17012219; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:16f0:5c6d:a267:2ce1:5e74] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 469767cb-3d83-4ec6-2c6b-08d81ca98658 x-ms-traffictypediagnostic: BL0PR2101MB0899: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:785; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: uRR2gBYrqiPUW7USaSaIpdWqiVkGDSYR+de6iyD03aGEyoEiBCtxbMPhprfCamb6oHsGwoug+1sZZ4TMsv/FfPh6fW+R01wdUdMr8c+hRIncvd/IQMhy41eC3yJiDvvQm6a7lRPd3lDfRczDo4CGCvtfzsQ0vB7hUqW0Tny27PYM7nfV+pseFNnbv3y5kAwrl9un2iEbn2r9iWIpZSpZxKhzGQgIfx9+TXgVUZagMYSokMy0uA1B3Bx86ZMiAY7Yh/cF5oefnKzp6ac4zqticz4naNkPwrN0jtT9QVzBH7GDMJIhYfcCffvOPmpnqO5Ja3sGATcALvS7I1yzurum96KZLagso/a54lWVe5NzkT0WNkHWGeIVZw0tz9w5JR5DpkVWnJAxFnQ9gOKCHP5Rgw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(346002)(39860400002)(376002)(366004)(396003)(2906002)(82960400001)(82950400001)(71200400001)(83380400001)(10290500003)(86362001)(53546011)(166002)(186003)(6506007)(8936002)(478600001)(66946007)(33656002)(66446008)(64756008)(66556008)(66476007)(7696005)(76116006)(110136005)(8990500004)(55016002)(9686003)(5660300002)(8676002)(316002)(52536014); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB10279501A4ECA5BB7B6AED63A36F0BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 469767cb-3d83-4ec6-2c6b-08d81ca98658 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jun 2020 03:56:10.0582 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: YBVaC+BgRTyFTT7bcKj/GpQmRzU2ZKrNOCJzC+bGq5Puh5fcZTatJnbPRBr2rVby02yGnJDpM5a0n1z/AH3w9trNce9O/nEkurm1vp1xDK8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB0899 Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jun 2020 03:56:14 -0000 --_000_BL0PR2101MB10279501A4ECA5BB7B6AED63A36F0BL0PR2101MB1027_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBkb27igJl0IGxpa2UgdGhlIHRlcm0g4oCcVmVyaWZpZXIgSW5wdXTigJ0gc2luY2Ug4oCcQXBw cmFpc2FsIFBvbGljeSBmb3IgRXZpZGVuY2XigJ0gaXMgYWxzbyBWZXJpZmllciBJbnB1dCwgc28g SSB3b3VsZCBmaW5kIGl0IGNvbmZ1c2luZy4NCkkgdGhpbmsgdGhhdCB0aGUgcnVsZXMgZm9yIHdo YXQgdG8gcHV0IGluIEF0dGVzdGF0aW9uIFJlc3VsdHMgKGJ1bGxldCAzKSwgYXMgd2VsbCBhcyDi gJxrbm93bi1nb29kL3JlZmVyZW5jZSB2YWx1ZXPigJ0gaWYgc3VjaCBleGlzdA0KKGFuZCB0aGVy ZSBjYW4gYmUgdmFsaWQgcG9saWNpZXMgd2hlcmUgdGhleSBtYXkgbm90IGV4aXN0LCBvciByYXRo ZXIgd2hlcmUgdGhlIHBvbGljaWVzIHVzZSBtb3JlIGNvbXBsZXggcnVsZXMgdGhhbg0KYSBzaW1w bGUgdGVzdCBmb3IgZXF1YWxpdHkgYWdhaW5zdCBhIGNvbnN0YW50KSBhcmUgY29uY2VwdHVhbGx5 IHBhcnQgb2YgQXBwcmFpc2FsIFBvbGljeS4NCg0KSSBkbyBhZ3JlZSB0aGF0IEFwcHJhaXNhbCBQ b2xpY3kgY2FuIGJlIGNvbnZleWVkIHRvIHRoZSBWZXJpZmllciBpbiBtYW55IGRpZmZlcmVudCB3 YXlzLCBhbmQgbWF5IGJlIGNvbXBvc2VkDQpvZiBkaWZmZXJlbnQgdGhpbmdzIGZyb20gZGlmZmVy ZW50IHNvdXJjZXMuDQoNCkRhdmUNCg0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3Jn PiBPbiBCZWhhbGYgT2YgTGF1cmVuY2UgTHVuZGJsYWRlDQpTZW50OiBNb25kYXksIEp1bmUgMjks IDIwMjAgMTE6MzQgQU0NClRvOiByYXRzQGlldGYub3JnDQpTdWJqZWN0OiBbUmF0c10gVmVyaWZp ZXIgSW5wdXQgaW5zdGVhZCBvZiBFbmRvcnNlbWVudD8NCg0KU3RlcHBpbmcgYmFjayBhIGJpdCBv biB0aGUgZGVmaW5pdGlvbiBvZiBhbiBFbmRvcnNlbWVudCwgSSB0aGluayB0aGUgZm91ciBpbnB1 dHMgdG8gYSBWZXJpZmllciBhcmUgdGhlc2U6DQogIC0gS2V5IG1hdGVyaWFsIGZvciB2ZXJpZnlp bmcgdHJ1c3QgaW4gdGhlIEF0dGVzdGVyDQogIC0gS25vd24tZ29vZC9SZWZlcmVuY2UgdmFsdWVz IGZvciBjb21wYXJpc29uIHdpdGggY2xhaW1zDQogIC0gU3RhdGljIGltcGxpY2l0IGNsYWltcyB0 aGF0IGFyZSBwYXNzZWQgdG8gUlAncyB2aWEgQXR0ZXN0YXRpb24gUmVzdWx0cw0KICAtIEFwcHJh aXNhbCBQb2xpY3kNCg0KVGhlc2UgY2FuIGFuZCB3aWxsIGJlIGNvbnZleWVkIHRvIHRoZSBWZXJp ZmllciBpbiBtYW55IGRpZmZlcmVudCB3YXlzOg0KICAtIFguNTA5IGNlcnRzIHdpdGggZXh0ZW5z aW9ucw0KICAtIFNpZ25lZCBkb2N1bWVudHMNCiAgLSBIVFRQIHF1ZXJpZXMgYWdhaW5zdCB0aGUg QXR0ZXN0ZXIvZGV2aWNlIG1hbnVmYWN0dXJlcg0KICAtIFJlbW90ZSBTUUwgb3Igc29tZSBvdGhl ciBzb3J0IG9mIGRhdGFiYXNlIGFjY2VzcyB0byBtYW51ZmFjdHVyZXIocykNCiAgLSBEYXRhIHN0 b3JhZ2UgbGlrZSBmbGFzaCBkcml2ZXMgdGhlIGFyZSBoYW5kIGNhcnJpZWQgaW50byB0aGUgVmVy aWZpZXIncyBzaXRlDQogIC0gT25lLXRpbWUgc3BlY2lhbCBmaWxlIHRyYW5zZmVycw0KICAtIENl cmVtb25pYWwgcHJvY2VkdXJlcyB3aXRoIE0gb3V0IG9mIE4gcGVvcGxlIHBoeXNpY2FsIHByZXNl bnQgYXBwcm92aW5nIHRyYW5zZmVyDQoNCkl0IHNlZW1zIGxpa2Ugc2hvZS1ob3JuaW5nIGFsbCBv ZiB0aGUgYWJvdmUgKGV4Y2VwdCBwb2xpY3kpIGludG8gYW4gRW5kb3JzZW1lbnQsIGxpa2UgSeKA mXZlIHRyaWVkIHRvIGRvPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9v ay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZpZXRmLXJhdHMtd2clMkZhcmNo aXRlY3R1cmUlMkZwdWxsJTJGOTQmZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5j b20lN0NmMTVhY2U2ZThiNGI0NDdlZWJjMDA4ZDgxYzViMWYzMyU3QzcyZjk4OGJmODZmMTQxYWY5 MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyOTA1MjQ5ODYzNjUwOTgmc2RhdGE9Mk5rdFBY JTJCM0xKWGpNRWpFRm9NOGtwVUl5NnlPeHRlJTJCdWhGWXIxRVRONGclM0QmcmVzZXJ2ZWQ9MD4g IGlzIHRvbyBtdWNoLiBJIHRyaWVkIHRoaXMgc2hvZS1ob3JuaW5nIGJlY2F1c2UgSSB0aGluayB0 aGUgYXJjaGl0ZWN0dXJlIGRvY3VtZW50IG5lZWRzIHRvIGNvdmVyIGFsbCB0aGlzIGFuZCBFbmRv cnNlbWVudHMgd2FzIHdoYXQgd2FzIGluIGl0LiBBIHR5cGljYWwgRW5kb3JzZW1lbnQgc2VlbXMg dG8gYmUganVzdCB0aGUgZmlyc3QgdHdvIG1lbnRpb25lZCwgWC41MDkgYW5kIHNpZ25lZCBkb2N1 bWVudHMgZXhwYW5kaW5nIGl0cyBkZWZpbml0aW9uIHRvIGluY2x1ZGUgZGF0YWJhc2UgYWNjZXNz IGlzIGEgc3RyZXRjaC4NCg0KUmF0aGVyIHRoYW4gZGVmaW5pbmcgRW5kb3JzZW1lbnQsIEnigJlk IGxpa2UgdG8gZGVmaW5lIFZlcmlmaWVyIElucHV0Og0KDQogICAgICAgICAgKioqKioqKioqKioq KioqKioqKiAgICoqKioqKioqKioqKiAgICAgKioqKioqKioqKioqKioqKg0KICAgICAgICAgICog TWFudWZhY3R1cmVyKHMpICogICAqIFZlcmlmaWVyICogICAgICogUmVseWluZyBQYXJ0eSoNCiAg ICAgICAgICAqKioqKioqKioqKioqKioqKioqICAgKiAgT3duZXIgICAqICAgICAqICBPd25lciAg ICAgICAqDQogICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICoqKioqKioqKioqKiAgICAg KioqKioqKioqKioqKioqKg0KICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8 ICAgICAgICAgICAgICAgICB8DQogICAgICAgICBWZXJpZmllciBJbnB1dHwgICAgICAgICAgICAg IHwgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAg ICAgfEFwcHJhaXNhbCAgICAgICAgfA0KICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAg ICAgICB8UG9saWN5ICAgICAgICAgICB8DQogICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAg ICAgICAgIHxmb3IgICAgICAgICAgICAgIHwgQXBwcmFpc2FsDQogICAgICAgICAgICAgICAgICAg ICAgIHwgICAgICAgICAgICAgIHxFdmlkZW5jZSAgICAgICAgIHwgUG9saWN5IGZvcg0KICAgICAg ICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICB8IEF0dGVz dGF0aW9uDQogICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgIHwgICAgICAgICAg ICAgICAgIHwgIFJlc3VsdA0KICAgICAgICAgICAgICAgICAgICAgICB2ICAgICAgICAgICAgICB2 ICAgICAgICAgICAgICAgICB8DQogICAgICAgICAgICAgICAgICAgICAuLS0tLS0tLS0tLS0tLS0t LS0uICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAgLi0tLS0tPnwgICAgIFZlcmlmaWVy ICAgIHwtLS0tLS0uICAgICAgICAgfA0KICAgICAgICAgICAgICB8ICAgICAgJy0tLS0tLS0tLS0t LS0tLS0tJyAgICAgIHwgICAgICAgICB8DQogICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfCAgICAgICAgIHwNCiAgICAgICAgICAgICAgfCAgICAgICAgICAgICAg ICAgICAgQXR0ZXN0YXRpb258ICAgICAgICAgfA0KICAgICAgICAgICAgICB8ICAgICAgICAgICAg ICAgICAgICBSZXN1bHRzICAgIHwgICAgICAgICB8DQogICAgICAgICAgICAgIHwgRXZpZGVuY2Ug ICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwNCiAgICAgICAgICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfA0KICAgICAgICAgICAgICB8ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHYgICAgICAgICB2DQogICAgICAgIC4tLS0tLS0tLS0t LiAgICAgICAgICAgICAgICAgICAgICAuLS0tLS0tLS0tLS0tLS0tLS0uDQogICAgICAgIHwgQXR0 ZXN0ZXIgfCAgICAgICAgICAgICAgICAgICAgICB8IFJlbHlpbmcgUGFydHkgICB8DQogICAgICAg ICctLS0tLS0tLS0tJyAgICAgICAgICAgICAgICAgICAgICAn4oCU4oCU4oCU4oCU4oCU4oCU4oCU 4oCU4oCYDQoNCg0KRW5kb3JzZW1lbnRzIG11c3Qgc3RpbGwgYmUgbWVudGlvbmVkLCBidXQgYXMg b25lIGZvcm0gb2YgVmVyaWZpZXIgaW5wdXQganVzdCBsaWtlIEVBVCBpcyBvbmUgZm9ybSBvZiBB dHRlc3RhdGlvbiBFdmlkZW5jZS4NCg0KVmVyaWZpZXIgSW5wdXQgd291bGQgYmUgZGVmaW5lZCBh czoNCiAgLSBLZXkgbWF0ZXJpYWwgZm9yIHZlcmlmeWluZyB0cnVzdCBpbiB0aGUgQXR0ZXN0ZXIN CiAgLSBLbm93bi1nb29kL1JlZmVyZW5jZSB2YWx1ZXMgZm9yIGNvbXBhcmlzb24gd2l0aCBjbGFp bXMNCiAgLSBTdGF0aWMgaW1wbGljaXQgY2xhaW1zIHRoYXQgYXJlIHBhc3NlZCB0byBSUCdzIHZp YSBBdHRlc3RhdGlvbiBSZXN1bHRzDQoNClRvIGRvIHRoaXMsIEnigJlkIHJlcGxhY2UgdGhlIGN1 cnJlbnQgUFI8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/ dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYtcmF0cy13ZyUyRmFyY2hpdGVjdHVy ZSUyRnB1bGwlMkY5NCZkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2Yx NWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdj ZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM2NTA5OCZzZGF0YT0yTmt0UFglMkIzTEpY ak1FakVGb004a3BVSXk2eU94dGUlMkJ1aEZZcjFFVE40ZyUzRCZyZXNlcnZlZD0wPiBhbmQgaXNz dWU8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0 dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYtcmF0cy13ZyUyRmFyY2hpdGVjdHVyZSUyRmlz c3VlcyUyRjY1JmRhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDZjE1YWNl NmU4YjRiNDQ3ZWViYzAwOGQ4MWM1YjFmMzMlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDEx ZGI0NyU3QzElN0MwJTdDNjM3MjkwNTI0OTg2Mzc1MDkyJnNkYXRhPUdmTTVxRWxPNHRlTmRqZkFC bG1WYXllR1h1WUhXQkRxSFRWdHBlZWV3N2clM0QmcmVzZXJ2ZWQ9MD4gSSBoYXZlIG9uIEVuZG9y c2VtZW50cyB3aXRoIGEgbmV3IFBSLiBJdCB3aWxsIGJlIGEgZmFpciBiaXQgb2Ygd29yaywgc28g SSB3YW50IHRvIHNlZSBpZiB0aGVyZSBpcyBzb21lIGNvbnNlbnN1cyBmaXJzdC4NCg0KTEwNCg0K DQoNCg0KDQo= --_000_BL0PR2101MB10279501A4ECA5BB7B6AED63A36F0BL0PR2101MB1027_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2Vj dGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEu MGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHls ZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQi IHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+ PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0 IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFk Pg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMUY0OTdEIj5JIGRvbuKAmXQgbGlrZSB0aGUgdGVybSDigJxWZXJpZmllciBJbnB1 dOKAnSBzaW5jZSDigJxBcHByYWlzYWwgUG9saWN5IGZvciBFdmlkZW5jZeKAnSBpcyBhbHNvIFZl cmlmaWVyIElucHV0LCBzbyBJIHdvdWxkIGZpbmQgaXQgY29uZnVzaW5nLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj5JIHRoaW5rIHRoYXQgdGhlIHJ1bGVzIGZvciB3aGF0IHRvIHB1dCBpbiBBdHRlc3RhdGlv biBSZXN1bHRzIChidWxsZXQgMyksIGFzIHdlbGwgYXMg4oCca25vd24tZ29vZC9yZWZlcmVuY2Ug dmFsdWVz4oCdIGlmIHN1Y2ggZXhpc3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+KGFuZCB0aGVyZSBjYW4g YmUgdmFsaWQgcG9saWNpZXMgd2hlcmUgdGhleSBtYXkgbm90IGV4aXN0LCBvciByYXRoZXIgd2hl cmUgdGhlIHBvbGljaWVzIHVzZSBtb3JlIGNvbXBsZXggcnVsZXMgdGhhbjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj5hIHNpbXBsZSB0ZXN0IGZvciBlcXVhbGl0eSBhZ2FpbnN0IGEgY29uc3RhbnQpIGFyZSBj b25jZXB0dWFsbHkgcGFydCBvZiBBcHByYWlzYWwgUG9saWN5LjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SSBkbyBhZ3JlZSB0aGF0IEFwcHJhaXNhbCBQb2xpY3kg Y2FuIGJlIGNvbnZleWVkIHRvIHRoZSBWZXJpZmllciBpbiBtYW55IGRpZmZlcmVudCB3YXlzLCBh bmQgbWF5IGJlIGNvbXBvc2VkPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPm9mIGRpZmZlcmVudCB0aGluZ3Mg ZnJvbSBkaWZmZXJlbnQgc291cmNlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPkRhdmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0Ux RTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ IFJBVFMgJmx0O3JhdHMtYm91bmNlc0BpZXRmLm9yZyZndDsNCjxiPk9uIEJlaGFsZiBPZiA8L2I+ TGF1cmVuY2UgTHVuZGJsYWRlPGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwgSnVuZSAyOSwgMjAy MCAxMTozNCBBTTxicj4NCjxiPlRvOjwvYj4gcmF0c0BpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6 PC9iPiBbUmF0c10gVmVyaWZpZXIgSW5wdXQgaW5zdGVhZCBvZiBFbmRvcnNlbWVudD88bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TdGVwcGluZyBiYWNrIGEg Yml0IG9uIHRoZSBkZWZpbml0aW9uIG9mIGFuIEVuZG9yc2VtZW50LCBJIHRoaW5rIHRoZSBmb3Vy IGlucHV0cyB0byBhIFZlcmlmaWVyIGFyZSB0aGVzZTo8YnI+DQombmJzcDsgLSBLZXkgbWF0ZXJp YWwgZm9yIHZlcmlmeWluZyB0cnVzdCBpbiB0aGUgQXR0ZXN0ZXI8YnI+DQombmJzcDsgLSBLbm93 bi1nb29kL1JlZmVyZW5jZSB2YWx1ZXMgZm9yIGNvbXBhcmlzb24gd2l0aCBjbGFpbXM8YnI+DQom bmJzcDsgLSBTdGF0aWMgaW1wbGljaXQgY2xhaW1zIHRoYXQgYXJlIHBhc3NlZCB0byBSUCdzIHZp YSBBdHRlc3RhdGlvbiBSZXN1bHRzPGJyPg0KJm5ic3A7IC0gQXBwcmFpc2FsIFBvbGljeTxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlc2UgY2FuIGFuZCB3 aWxsIGJlIGNvbnZleWVkIHRvIHRoZSBWZXJpZmllciBpbiBtYW55IGRpZmZlcmVudCB3YXlzOjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 IC0gWC41MDkgY2VydHMgd2l0aCBleHRlbnNpb25zPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgLSBTaWduZWQgZG9jdW1lbnRzPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgLSBI VFRQIHF1ZXJpZXMgYWdhaW5zdCB0aGUgQXR0ZXN0ZXIvZGV2aWNlIG1hbnVmYWN0dXJlcjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7IC0g UmVtb3RlIFNRTCBvciBzb21lIG90aGVyIHNvcnQgb2YgZGF0YWJhc2UgYWNjZXNzIHRvIG1hbnVm YWN0dXJlcihzKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7IC0gRGF0YSBzdG9yYWdlIGxpa2UgZmxhc2ggZHJpdmVzIHRoZSBhcmUgaGFu ZCBjYXJyaWVkIGludG8gdGhlIFZlcmlmaWVyJ3Mgc2l0ZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7IC0gT25lLXRpbWUgc3BlY2lhbCBm aWxlIHRyYW5zZmVyczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7IC0gQ2VyZW1vbmlhbCBwcm9jZWR1cmVzIHdpdGggTSBvdXQgb2YgTiBw ZW9wbGUgcGh5c2ljYWwgcHJlc2VudCBhcHByb3ZpbmcgdHJhbnNmZXI8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SXQgc2VlbXMgbGlrZSBzaG9l LWhvcm5pbmcgYWxsIG9mIHRoZSBhYm92ZSAoZXhjZXB0IHBvbGljeSkgaW50byBhbiBFbmRvcnNl bWVudCwmbmJzcDs8YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91 dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJG YXJjaGl0ZWN0dXJlJTJGcHVsbCUyRjk0JmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWlj cm9zb2Z0LmNvbSU3Q2YxNWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJmOTg4YmY4 NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM2NTA5OCZhbXA7 c2RhdGE9Mk5rdFBYJTJCM0xKWGpNRWpFRm9NOGtwVUl5NnlPeHRlJTJCdWhGWXIxRVRONGclM0Qm YW1wO3Jlc2VydmVkPTAiPmxpa2UNCiBJ4oCZdmUgdHJpZWQgdG8gZG88L2E+Jm5ic3A7IGlzIHRv byBtdWNoLiBJIHRyaWVkIHRoaXMgc2hvZS1ob3JuaW5nIGJlY2F1c2UgSSB0aGluayB0aGUgYXJj aGl0ZWN0dXJlIGRvY3VtZW50IG5lZWRzIHRvIGNvdmVyIGFsbCB0aGlzIGFuZCBFbmRvcnNlbWVu dHMgd2FzIHdoYXQgd2FzIGluIGl0LiBBIHR5cGljYWwgRW5kb3JzZW1lbnQgc2VlbXMgdG8gYmUg anVzdCB0aGUgZmlyc3QgdHdvIG1lbnRpb25lZCwgWC41MDkgYW5kIHNpZ25lZCBkb2N1bWVudHMg ZXhwYW5kaW5nDQogaXRzIGRlZmluaXRpb24gdG8gaW5jbHVkZSBkYXRhYmFzZSBhY2Nlc3MgaXMg YSBzdHJldGNoLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5SYXRoZXIgdGhhbiBkZWZpbmluZyBFbmRvcnNlbWVudCwgSeKAmWQgbGlrZSB0byBk ZWZpbmUgVmVyaWZpZXIgSW5wdXQ6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgKioq KioqKioqKioqKioqKioqKiAmbmJzcDsgKioqKioqKioqKioqICZuYnNwOyAmbmJzcDsgKioqKioq KioqKioqKioqKjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAqIE1hbnVmYWN0dXJlcihz KSAqICZuYnNwOyAqIFZlcmlmaWVyICogJm5ic3A7ICZuYnNwOyAqIFJlbHlpbmcgUGFydHkqPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICoqKioqKioqKioqKioqKioqKiogJm5ic3A7ICog Jm5ic3A7T3duZXIgJm5ic3A7ICogJm5ic3A7ICZuYnNwOyAqICZuYnNwO093bmVyICZuYnNwOyAm bmJzcDsgJm5ic3A7ICo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsqKioqKioqKioqKiogJm5ic3A7ICZuYnNwOyAqKioqKioqKioqKioqKioqPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7IHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtWZXJpZmllciBJbnB1dHwg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDt8QXBwcmFpc2FsICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3w8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDt8UG9saWN5ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwO3xmb3IgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7fCBBcHByYWlzYWw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8RXZpZGVuY2UgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7IHwgUG9saWN5IGZvcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8IEF0dGVzdGF0aW9uPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7IHwgJm5ic3A7UmVzdWx0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3YgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7diAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsu LS0tLS0tLS0tLS0tLS0tLS0uICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDt8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgLi0tLS0tJmd0O3wgJm5ic3A7ICZuYnNwOyBWZXJpZmllciAmbmJzcDsgJm5ic3A7fC0t LS0tLS4gJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jy0tLS0tLS0tLS0t LS0tLS0tJyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 IHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7IHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO0F0dGVzdGF0aW9ufCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7UmVzdWx0cyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgRXZpZGVuY2UgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 IHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHYgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7IHY8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAuLS0tLS0tLS0tLS4gJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOy4tLS0tLS0tLS0tLS0tLS0tLS48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8 IEF0dGVzdGVyIHwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgUmVseWluZyBQYXJ0eSAmbmJzcDsgfDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICctLS0tLS0tLS0tJyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7J+KA lOKAlOKAlOKAlOKAlOKAlOKAlOKAlOKAmDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RW5k b3JzZW1lbnRzIG11c3Qgc3RpbGwgYmUgbWVudGlvbmVkLCBidXQgYXMgb25lIGZvcm0gb2YgVmVy aWZpZXIgaW5wdXQganVzdCBsaWtlIEVBVCBpcyBvbmUgZm9ybSBvZiBBdHRlc3RhdGlvbiBFdmlk ZW5jZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+VmVyaWZpZXIgSW5wdXQgd291bGQgYmUgZGVmaW5lZCBhczo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAtIEtleSBtYXRlcmlhbCBm b3IgdmVyaWZ5aW5nIHRydXN0IGluIHRoZSBBdHRlc3Rlcjxicj4NCiZuYnNwOyAtIEtub3duLWdv b2QvUmVmZXJlbmNlIHZhbHVlcyBmb3IgY29tcGFyaXNvbiB3aXRoIGNsYWltczxicj4NCiZuYnNw OyAtIFN0YXRpYyBpbXBsaWNpdCBjbGFpbXMgdGhhdCBhcmUgcGFzc2VkIHRvIFJQJ3MgdmlhIEF0 dGVzdGF0aW9uIFJlc3VsdHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+VG8gZG8gdGhpcywgSeKAmWQgcmVwbGFjZSB0aGUgY3VycmVudCZuYnNw OzxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20v P3VybD1odHRwcyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZpZXRmLXJhdHMtd2clMkZhcmNoaXRlY3R1 cmUlMkZwdWxsJTJGOTQmYW1wO2RhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29t JTdDZjE1YWNlNmU4YjRiNDQ3ZWViYzAwOGQ4MWM1YjFmMzMlN0M3MmY5ODhiZjg2ZjE0MWFmOTFh YjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MjkwNTI0OTg2MzY1MDk4JmFtcDtzZGF0YT0yTmt0 UFglMkIzTEpYak1FakVGb004a3BVSXk2eU94dGUlMkJ1aEZZcjFFVE40ZyUzRCZhbXA7cmVzZXJ2 ZWQ9MCI+UFI8L2E+Jm5ic3A7YW5kJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlu a3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUy RmlldGYtcmF0cy13ZyUyRmFyY2hpdGVjdHVyZSUyRmlzc3VlcyUyRjY1JmFtcDtkYXRhPTAyJTdD MDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2YxNWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFj NWIxZjMzJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5 MDUyNDk4NjM3NTA5MiZhbXA7c2RhdGE9R2ZNNXFFbE80dGVOZGpmQUJsbVZheWVHWHVZSFdCRHFI VFZ0cGVlZXc3ZyUzRCZhbXA7cmVzZXJ2ZWQ9MCI+aXNzdWU8L2E+Jm5ic3A7SQ0KIGhhdmUgb24g RW5kb3JzZW1lbnRzIHdpdGggYSBuZXcgUFIuIEl0IHdpbGwgYmUgYSBmYWlyIGJpdCBvZiB3b3Jr LCBzbyBJIHdhbnQgdG8gc2VlIGlmIHRoZXJlIGlzIHNvbWUgY29uc2Vuc3VzIGZpcnN0LjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5MTDxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_BL0PR2101MB10279501A4ECA5BB7B6AED63A36F0BL0PR2101MB1027_-- From nobody Tue Jun 30 10:41:29 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AFB183A0DD5 for ; Tue, 30 Jun 2020 10:38:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com header.b=a6IZIAOO; dkim=pass (2048-bit key) header.d=gmail.com header.b=qDat+A14 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QybJ3BjZt9t0 for ; Tue, 30 Jun 2020 10:38:36 -0700 (PDT) Received: from mail-yb1-xb49.google.com (mail-yb1-xb49.google.com [IPv6:2607:f8b0:4864:20::b49]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8DB63A0D7E for ; Tue, 30 Jun 2020 10:38:28 -0700 (PDT) Received: by mail-yb1-xb49.google.com with SMTP id j3so23535602yba.14 for ; Tue, 30 Jun 2020 10:38:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:reply-to:sender:message-id:date:subject:from:to; bh=HJuJWUaMFupcC04/fxIQxoVDzeHpeAxPtdpqCKlrxfA=; b=a6IZIAOOVPEuue/999tOfwH2LaQ4MZn8CUz7nS4nRjFUXJw/2+briEtnTLynH255Op K7bdFRvH5idqJKu+4WXbvlOej6XNNM3reM6n4imAm9OoQ/oAbQa+TWctc28S4d0ZwRvT qW0kdK2ZLXCv1ZLbjVFME1BwDn5IwOrTGgvbdhNEtSI9LCDT/C3J2CnxOHvIG+bu/uei H/6BJj0BIUnruaXwxsh2B+OHz4ovUoEQU6l78PuqrWX8FrYhhAD7BxHyyK2HhMi/ZCVX WFROKzLoUhFIhvxsG7GdLoU7XLkChK5zfJnHzNNA991m0nOnkWsIcYbFFvrDldF7WFDb IBJQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:reply-to:sender:message-id:date:subject:from:to; bh=HJuJWUaMFupcC04/fxIQxoVDzeHpeAxPtdpqCKlrxfA=; b=qDat+A14ezx8F66Nlpjd/RbtvMmoGAWXEhPaheQsAl23KqdZaEC41mqkYCubOsQYC5 c7drL7ylOZ3O8BPU2NcYzJGCFkPmD/4V/Fn7EcCTOyeSICQ/CpO0vxTrnwjXSSZe3ub9 4WDpGHQIcHabuaKWgRgGOP5XEgU3dd5whuzZFFRqu0yYcFHRr09l/OwAul63bzdbpnyv SxAmD+/FN8om/AtQ8mQoJXY+09iaOXxmld2KJ/fgNzH0y5f13Bdz/9Nzr8JBnzW/5uHr QVKPRIBNPEmYj0C/EqvNN7YM16ZJt5Qf6X3B4+fCWLjImEjJ3Spv3mdS+S1qv0GS6XPs SrGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:reply-to:sender:message-id:date :subject:from:to; bh=HJuJWUaMFupcC04/fxIQxoVDzeHpeAxPtdpqCKlrxfA=; b=nuaOqRwPl79soAMxMXYJm1aTNkdY6rWz9Rk8PRxZWmEB6sel5y5FEfueLulRWTB/Ek m+je01c2CYXX4Zvtd61kPQFOhvtKRI/7ftH6u/zicT91qCxurNcwt55PimcDKo1QLH+8 tcybks8wlu3EBZmkMxkGps3OML8qWPcQejaqEqhmmZsRzNK9MB5t1t/GWjV9Y7QzNMFV xJJkmv1nGC1LkgHY3bInRYQf3mbA72rSUxH5pkUzBTLUCSV/Kmv/n3xadbVeW4PI9b97 0PkkvDQr6fnhPa4Pa/kDvdEmulwTTSBN0SI42kO7FG2xrbZXOw93pdbCWLkjgYThE3dz MY/Q== X-Gm-Message-State: AOAM533GLGxtslIeELLp7jBdGYQXdaYlopKJTfCSPDQP+flBntAMNqEX qgC1w5DPwJ0n921PPFbk9MorApLtil7lglEl2BQ= X-Google-Smtp-Source: ABdhPJz477dfi89NoVePX/54ph8NVTYKdoMoWAqaTy28ve9wwGFdh38izpSmKJjCMoc/laQlRr5Pfj0u97ztDgCY+anT MIME-Version: 1.0 X-Received: by 2002:a25:abef:: with SMTP id v102mr34785069ybi.518.1593538707979; Tue, 30 Jun 2020 10:38:27 -0700 (PDT) Reply-To: mcharlesr@gmail.com Sender: Google Calendar Message-ID: <000000000000a0053105a950a4b1@google.com> Date: Tue, 30 Jun 2020 17:38:27 +0000 From: mcharlesr@gmail.com To: rats@ietf.org, prowe@mitre.org, elear@cisco.com, mdb@juniper.net, ncamwing@cisco.com, Nicolae Paladi , jodonogh@qti.qualcomm.com, lgl@island-resort.com, Thomas Hardjono , blueroofmusic@gmail.com, Thomas Fossati , mathias.brossard@arm.com, Pete Loscocco , Thomas Fossati , "Guinn, Andrew L." , Ned Smith , Henk Birkholz , shwethab@cisco.com, dthaler@microsoft.com, Peter Loscocco , "Helble, Sarah C." Content-Type: multipart/mixed; boundary="000000000000a004f605a950a4ad" Archived-At: X-Mailman-Approved-At: Tue, 30 Jun 2020 10:41:28 -0700 Subject: [Rats] Invitation: RATS Architecture Design Team weekly meeting time @ Weekly from 10:00 to 11:00 on Tuesday, Friday from Tue 2020-06-23 to Tue 2020-07-14 (EDT) (rats@ietf.org) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jun 2020 17:38:40 -0000 --000000000000a004f605a950a4ad Content-Type: multipart/alternative; boundary="000000000000a004f305a950a4ab" --000000000000a004f305a950a4ab Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes You have been invited to the following event. Title: RATS Architecture Design Team weekly meeting time Meeting link:https://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452794c25Meeting number:610 366 750Password:4vY2aS6X8DFHost key:820822More ways to join When: Weekly from 10:00 to 11:00 on Tuesday, Friday from Tue 2020-06-23 to Tue 2020-07-14 Eastern Time - Toronto Where: https://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452794c25, Joining info: Join with Google Meet https://meet.google.com/voo-ixyf-kii Calendar: rats@ietf.org Who: * mcharlesr@gmail.com - organizer * prowe@mitre.org * elear@cisco.com * mdb@juniper.net * ncamwing@cisco.com * Nicolae Paladi * rats@ietf.org * jodonogh@qti.qualcomm.com * lgl@island-resort.com * Thomas Hardjono * blueroofmusic@gmail.com * Thomas Fossati * mathias.brossard@arm.com * Pete Loscocco * Thomas Fossati * Guinn, Andrew L. * Ned Smith * Henk Birkholz * shwethab@cisco.com * dthaler@microsoft.com * Peter Loscocco * Helble, Sarah C. Event details: https://www.google.com/calendar/event?action=VIEW&eid=MGw5aDlkdW1yNDA2aDN0ZWt0aTJlbjM5Z2IgcmF0c0BpZXRmLm9yZw&tok=MTkjbWNoYXJsZXNyQGdtYWlsLmNvbThkMDYwYTQyOWVkZWVlOTUyMmJmMjMyMDMwMGFlZTdjYjVmMmQwMGU&ctz=America%2FToronto&hl=en&es=0 Invitation from Google Calendar: https://www.google.com/calendar/ You are receiving this courtesy email at the account rats@ietf.org because you are an attendee of this event. To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar. Forwarding this invitation could allow any recipient to send a response to the organizer and be added to the guest list, or invite others regardless of their own invitation status, or to modify your RSVP. Learn more at https://support.google.com/calendar/answer/37135#forwarding --000000000000a004f305a950a4ab Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
=

You have been invited to the follo= wing event.

RATS Architecture Design Team weekl= y meeting time

=
When
W= eekly from 10:00 to 11:00 on Tuesday, Friday from Tue 2020-06-23 to Tue 202= 0-07-14 Eastern Time - Toronto
<= i style=3D"font-style:normal">Where
https://ietf.webex.com/ietf/j.php?MTID=3Dm4c3d7395a15dad1ed8c0f95452= 794c25, (map)
Joining info
Join with Google Meet
Calendar
rats@ietf.org
Who
=
ncamwing@cisco.com
•
=
•
mcha= rlesr@gmail.com - organizer
•
<= div style=3D"text-indent:-1px">
prowe@mitre.org
•
= elear@cisco.com
•
mdb@juniper.net
•
•
Nicolae Palad= i<= /div>
•
rats= @ietf.org=
•
jodo= nogh@qti.qualcomm.com
•
lgl@island-resort.com
•
Thomas Hardjono
•
= blueroofmusic@gmail.com
•<= /div>
Thomas Fo= ssati=
•
math= ias.brossard@arm.com
•
Pete Loscocco
•
Thomas Fossati
Guinn, Andrew L.
•
= Ned Smith
•
Henk Birkholz
•
shwethab@c= isco.com
•=
dthaler@microsoft.com
•
Peter Loscocco
•
Helble, Sarah C.
Meeting link:
= = https://ietf.webex.com/ietf/j.php?MTID=3Dm4c3d7395a15dad1ed8c0f95452794c25<= /a>
Meeting number:
610 366 750
Password:
4= vY2aS6X8DF
Host key:
820822


More ways = to join

Going (rats@ietf.org)?   Al= l events in this series:   Yes - Maybe - No    more options »

Invitation from Google Calendar

You are recei= ving this courtesy email at the account rats@ietf.org because you are an at= tendee of this event.

To stop receiving future updates for this event= , decline this event. Alternatively you can sign up for a Google account at= https://www.google.com/calendar/ and control your notification settings fo= r your entire calendar.

Forwarding this invitation could allow any re= cipient to send a response to the organizer and be added to the guest list,= or invite others regardless of their own invitation status, or to modify y= our RSVP. Learn More.

--000000000000a004f305a950a4ab Content-Type: text/calendar; charset="UTF-8"; method=REQUEST Content-Transfer-Encoding: 7bit BEGIN:VCALENDAR PRODID:-//Google Inc//Google Calendar 70.9054//EN VERSION:2.0 CALSCALE:GREGORIAN METHOD:REQUEST BEGIN:VTIMEZONE TZID:America/Toronto X-LIC-LOCATION:America/Toronto BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:19700308T020000 RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=2SU END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:19701101T020000 RRULE:FREQ=YEARLY;BYMONTH=11;BYDAY=1SU END:STANDARD END:VTIMEZONE BEGIN:VEVENT DTSTART;TZID=America/Toronto:20200623T100000 DTEND;TZID=America/Toronto:20200623T110000 RRULE:FREQ=WEEKLY;WKST=MO;UNTIL=20200715T035959Z;BYDAY=FR,TU DTSTAMP:20200630T173827Z ORGANIZER;CN=mcharlesr@gmail.com:mailto:mcharlesr@gmail.com UID:0l9h9dumr406h3tekti2en39gb@google.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=prowe@mitre.org;X-NUM-GUESTS=0:mailto:prowe@mitre.org ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=elear@cisco.com;X-NUM-GUESTS=0:mailto:elear@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=mdb@juniper.net;X-NUM-GUESTS=0:mailto:mdb@juniper.net ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=ncamwing@cisco.com;X-NUM-GUESTS=0:mailto:ncamwing@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Nicolae Paladi;X-NUM-GUESTS=0:mailto:nicolae.paladi@ri.se ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=rats@ietf.org;X-NUM-GUESTS=0:mailto:rats@ietf.org ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=jodonogh@qti.qualcomm.com;X-NUM-GUESTS=0:mailto:jodonogh@qti.qualco mm.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=lgl@island-resort.com;X-NUM-GUESTS=0:mailto:lgl@island-resort.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Hardjono;X-NUM-GUESTS=0:mailto:ietf-rats@hardjono.net ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=blueroofmusic@gmail.com;X-NUM-GUESTS=0:mailto:blueroofmusic@gmail.c om ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Fossati;X-NUM-GUESTS=0:mailto:tho@koanlogic.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=mathias.brossard@arm.com;X-NUM-GUESTS=0:mailto:mathias.brossard@arm .com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Pete Loscocco;X-NUM-GUESTS=0:mailto:pete.loscocco@gmail.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Fossati;X-NUM-GUESTS=0:mailto:thomas.fossati@arm.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN="Guinn, Andrew L.";X-NUM-GUESTS=0:mailto:andrew.guinn@jhuapl.edu ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Ned Smith;X-NUM-GUESTS=0:mailto:ned.smith@intel.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Henk Birkholz;X-NUM-GUESTS=0:mailto:henk.birkholz@sit.fraunhofer.de ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=shwethab@cisco.com;X-NUM-GUESTS=0:mailto:shwethab@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=dthaler@microsoft.com;X-NUM-GUESTS=0:mailto:dthaler@microsoft.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Peter Loscocco;X-NUM-GUESTS=0:mailto:palosco@tycho.nsa.gov ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN="Helble, Sarah C.";X-NUM-GUESTS=0:mailto:sarah.helble@jhuapl.edu ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=ACCEPTED;RSVP=TRUE ;CN=mcharlesr@gmail.com;X-NUM-GUESTS=0:mailto:mcharlesr@gmail.com X-MICROSOFT-CDO-OWNERAPPTID:-814265952 CREATED:20200630T173826Z DESCRIPTION:
Meeting link:
h ttps://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452794c25
Meeting number:
610 366 750
Password:
4vY2 aS6X8DF
Host key:
820822


More ways to join
\n\n-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~ :~:~:~:~:~:~:~:~:~:~:~::~:~::-\nPlease do not edit this section of the desc ription.\n\nThis event has a video call.\nJoin: https://meet.google.com/voo -ixyf-kii\n\nView your event at https://www.google.com/calendar/event?actio n=VIEW&eid=MGw5aDlkdW1yNDA2aDN0ZWt0aTJlbjM5Z2IgcmF0c0BpZXRmLm9yZw&tok=MTkjb WNoYXJsZXNyQGdtYWlsLmNvbThkMDYwYTQyOWVkZWVlOTUyMmJmMjMyMDMwMGFlZTdjYjVmMmQw MGU&ctz=America%2FToronto&hl=en&es=1.\n-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~: ~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::- LAST-MODIFIED:20200630T173827Z LOCATION:https://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452 794c25\, SEQUENCE:0 STATUS:CONFIRMED SUMMARY:RATS Architecture Design Team weekly meeting time TRANSP:OPAQUE END:VEVENT END:VCALENDAR --000000000000a004f305a950a4ab-- --000000000000a004f605a950a4ad Content-Type: application/ics; name="invite.ics" Content-Disposition: attachment; filename="invite.ics" Content-Transfer-Encoding: base64 QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT VA0KQkVHSU46VlRJTUVaT05FDQpUWklEOkFtZXJpY2EvVG9yb250bw0KWC1MSUMtTE9DQVRJT046 QW1lcmljYS9Ub3JvbnRvDQpCRUdJTjpEQVlMSUdIVA0KVFpPRkZTRVRGUk9NOi0wNTAwDQpUWk9G RlNFVFRPOi0wNDAwDQpUWk5BTUU6RURUDQpEVFNUQVJUOjE5NzAwMzA4VDAyMDAwMA0KUlJVTEU6 RlJFUT1ZRUFSTFk7QllNT05USD0zO0JZREFZPTJTVQ0KRU5EOkRBWUxJR0hUDQpCRUdJTjpTVEFO REFSRA0KVFpPRkZTRVRGUk9NOi0wNDAwDQpUWk9GRlNFVFRPOi0wNTAwDQpUWk5BTUU6RVNUDQpE VFNUQVJUOjE5NzAxMTAxVDAyMDAwMA0KUlJVTEU6RlJFUT1ZRUFSTFk7QllNT05USD0xMTtCWURB WT0xU1UNCkVORDpTVEFOREFSRA0KRU5EOlZUSU1FWk9ORQ0KQkVHSU46VkVWRU5UDQpEVFNUQVJU O1RaSUQ9QW1lcmljYS9Ub3JvbnRvOjIwMjAwNjIzVDEwMDAwMA0KRFRFTkQ7VFpJRD1BbWVyaWNh L1Rvcm9udG86MjAyMDA2MjNUMTEwMDAwDQpSUlVMRTpGUkVRPVdFRUtMWTtXS1NUPU1PO1VOVElM PTIwMjAwNzE1VDAzNTk1OVo7QllEQVk9RlIsVFUNCkRUU1RBTVA6MjAyMDA2MzBUMTczODI3Wg0K T1JHQU5JWkVSO0NOPW1jaGFybGVzckBnbWFpbC5jb206bWFpbHRvOm1jaGFybGVzckBnbWFpbC5j b20NClVJRDowbDloOWR1bXI0MDZoM3Rla3RpMmVuMzlnYkBnb29nbGUuY29tDQpBVFRFTkRFRTtD VVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJ T047UlNWUD0NCiBUUlVFO0NOPXByb3dlQG1pdHJlLm9yZztYLU5VTS1HVUVTVFM9MDptYWlsdG86 cHJvd2VAbWl0cmUub3JnDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJU SUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPWVsZWFyQGNpc2Nv LmNvbTtYLU5VTS1HVUVTVFM9MDptYWlsdG86ZWxlYXJAY2lzY28uY29tDQpBVFRFTkRFRTtDVVRZ UEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047 UlNWUD0NCiBUUlVFO0NOPW1kYkBqdW5pcGVyLm5ldDtYLU5VTS1HVUVTVFM9MDptYWlsdG86bWRi QGp1bmlwZXIubmV0DQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJ UEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPW5jYW13aW5nQGNpc2Nv LmNvbTtYLU5VTS1HVUVTVFM9MDptYWlsdG86bmNhbXdpbmdAY2lzY28uY29tDQpBVFRFTkRFRTtD VVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJ T047UlNWUD0NCiBUUlVFO0NOPU5pY29sYWUgUGFsYWRpO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpu aWNvbGFlLnBhbGFkaUByaS5zZQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEt UEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1yYXRzQGll dGYub3JnO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpyYXRzQGlldGYub3JnDQpBVFRFTkRFRTtDVVRZ UEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047 UlNWUD0NCiBUUlVFO0NOPWpvZG9ub2doQHF0aS5xdWFsY29tbS5jb207WC1OVU0tR1VFU1RTPTA6 bWFpbHRvOmpvZG9ub2doQHF0aS5xdWFsY28NCiBtbS5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJ VklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0K IFRSVUU7Q049bGdsQGlzbGFuZC1yZXNvcnQuY29tO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpsZ2xA aXNsYW5kLXJlc29ydC5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBB UlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049VGhvbWFzIEhh cmRqb25vO1gtTlVNLUdVRVNUUz0wOm1haWx0bzppZXRmLXJhdHNAaGFyZGpvbm8ubmV0DQpBVFRF TkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVE Uy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPWJsdWVyb29mbXVzaWNAZ21haWwuY29tO1gtTlVNLUdV RVNUUz0wOm1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmMNCiBvbQ0KQVRURU5ERUU7Q1VUWVBF PUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JT VlA9DQogVFJVRTtDTj1UaG9tYXMgRm9zc2F0aTtYLU5VTS1HVUVTVFM9MDptYWlsdG86dGhvQGtv YW5sb2dpYy5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQ QU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049bWF0aGlhcy5icm9zc2Fy ZEBhcm0uY29tO1gtTlVNLUdVRVNUUz0wOm1haWx0bzptYXRoaWFzLmJyb3NzYXJkQGFybQ0KIC5j b20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRT VEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049UGV0ZSBMb3Njb2NjbztYLU5VTS1HVUVT VFM9MDptYWlsdG86cGV0ZS5sb3Njb2Njb0BnbWFpbC5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJ VklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0K IFRSVUU7Q049VGhvbWFzIEZvc3NhdGk7WC1OVU0tR1VFU1RTPTA6bWFpbHRvOnRob21hcy5mb3Nz YXRpQGFybS5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQ QU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049Ikd1aW5uLCBBbmRyZXcg TC4iO1gtTlVNLUdVRVNUUz0wOm1haWx0bzphbmRyZXcuZ3Vpbm5Aamh1YXBsLmVkdQ0KQVRURU5E RUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMt QUNUSU9OO1JTVlA9DQogVFJVRTtDTj1OZWQgU21pdGg7WC1OVU0tR1VFU1RTPTA6bWFpbHRvOm5l ZC5zbWl0aEBpbnRlbC5jb20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBB UlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049SGVuayBCaXJr aG9sejtYLU5VTS1HVUVTVFM9MDptYWlsdG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5k ZQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNU QVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1zaHdldGhhYkBjaXNjby5jb207WC1OVU0t R1VFU1RTPTA6bWFpbHRvOnNod2V0aGFiQGNpc2NvLmNvbQ0KQVRURU5ERUU7Q1VUWVBFPUlORElW SURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQog VFJVRTtDTj1kdGhhbGVyQG1pY3Jvc29mdC5jb207WC1OVU0tR1VFU1RTPTA6bWFpbHRvOmR0aGFs ZXJAbWljcm9zb2Z0LmNvbQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFS VElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1QZXRlciBMb3Nj b2NjbztYLU5VTS1HVUVTVFM9MDptYWlsdG86cGFsb3Njb0B0eWNoby5uc2EuZ292DQpBVFRFTkRF RTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1B Q1RJT047UlNWUD0NCiBUUlVFO0NOPSJIZWxibGUsIFNhcmFoIEMuIjtYLU5VTS1HVUVTVFM9MDpt YWlsdG86c2FyYWguaGVsYmxlQGpodWFwbC5lZHUNCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFM O1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPUFDQ0VQVEVEO1JTVlA9VFJVRQ0KIDtDTj1t Y2hhcmxlc3JAZ21haWwuY29tO1gtTlVNLUdVRVNUUz0wOm1haWx0bzptY2hhcmxlc3JAZ21haWwu Y29tDQpYLU1JQ1JPU09GVC1DRE8tT1dORVJBUFBUSUQ6LTgxNDI2NTk1Mg0KQ1JFQVRFRDoyMDIw MDYzMFQxNzM4MjZaDQpERVNDUklQVElPTjo8ZGQ+TWVldGluZyBsaW5rOjxicj48L2RkPjxkZD48 ZGw+PGRkPjxhIGhyZWY9Imh0dHBzOi8vaWV0Zi53ZWINCiBleC5jb20vaWV0Zi9qLnBocD9NVElE PW00YzNkNzM5NWExNWRhZDFlZDhjMGY5NTQ1Mjc5NGMyNSIgdGFyZ2V0PSJfYmxhbmsiPmgNCiB0 dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW00YzNkNzM5NWExNWRhZDFlZDhj MGY5NTQ1Mjc5NGMyNTwvYT4NCiA8L2RkPjxkdD5NZWV0aW5nIG51bWJlcjo8L2R0PjxkZD42MTAg MzY2IDc1MDwvZGQ+PGR0PlBhc3N3b3JkOjwvZHQ+PGRkPjR2WTINCiBhUzZYOERGPC9kZD48ZHQ+ SG9zdCBrZXk6PC9kdD48ZGQ+ODIwODIyPC9kZD48L2RsPjxicj48YnI+PGg1Pk1vcmUgd2F5cyB0 byANCiBqb2luPC9oNT48L2RkPlxuXG4tOjp+On46On46fjp+On46fjp+On46fjp+On46fjp+On46 fjp+On46fjp+On46fjp+On46fjp+On4NCiA6fjp+On46fjp+On46fjp+On46fjp+Ojp+On46Oi1c blBsZWFzZSBkbyBub3QgZWRpdCB0aGlzIHNlY3Rpb24gb2YgdGhlIGRlc2MNCiByaXB0aW9uLlxu XG5UaGlzIGV2ZW50IGhhcyBhIHZpZGVvIGNhbGwuXG5Kb2luOiBodHRwczovL21lZXQuZ29vZ2xl LmNvbS92b28NCiAtaXh5Zi1raWlcblxuVmlldyB5b3VyIGV2ZW50IGF0IGh0dHBzOi8vd3d3Lmdv b2dsZS5jb20vY2FsZW5kYXIvZXZlbnQ/YWN0aW8NCiBuPVZJRVcmZWlkPU1HdzVhRGxrZFcxeU5E QTJhRE4wWld0MGFUSmxiak01WjJJZ2NtRjBjMEJwWlhSbUxtOXladyZ0b2s9TVRramINCiBXTm9Z WEpzWlhOeVFHZHRZV2xzTG1OdmJUaGtNRFl3WVRReU9XVmtaV1ZsT1RVeU1tSm1Nak15TURNd01H RmxaVGRqWWpWbU1tUXcNCiBNR1UmY3R6PUFtZXJpY2ElMkZUb3JvbnRvJmhsPWVuJmVzPTEuXG4t Ojp+On46On46fjp+On46fjp+On46fjp+On46fjp+On46fjoNCiB+On46fjp+On46fjp+On46fjp+ On46fjp+On46fjp+On46fjp+On46fjp+Ojp+On46Oi0NCkxBU1QtTU9ESUZJRUQ6MjAyMDA2MzBU MTczODI3Wg0KTE9DQVRJT046aHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9 bTRjM2Q3Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyDQogNzk0YzI1XCwgDQpTRVFVRU5DRTowDQpTVEFU VVM6Q09ORklSTUVEDQpTVU1NQVJZOlJBVFMgQXJjaGl0ZWN0dXJlIERlc2lnbiBUZWFtIHdlZWts eSBtZWV0aW5nIHRpbWUNClRSQU5TUDpPUEFRVUUNCkVORDpWRVZFTlQNCkVORDpWQ0FMRU5EQVIN Cg== --000000000000a004f605a950a4ad-- From nobody Tue Jun 30 12:06:38 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF2173A0062 for ; Tue, 30 Jun 2020 12:06:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=0NOVYnXl; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=0NOVYnXl Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NsW3RYnE8U0I for ; Tue, 30 Jun 2020 12:06:33 -0700 (PDT) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70042.outbound.protection.outlook.com [40.107.7.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 980FB3A0064 for ; Tue, 30 Jun 2020 12:06:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=E+xu1sfX4aNVwFzusl/K0sqINPu4XdzW4Vp5d6jchmI=; b=0NOVYnXlAjMSTYY/sBwFhK6Z0GeLrU4XJFn//jfOPa325AH3eJX1k9kdHLulTEbt1tqQC2MF9NRMWRdYafGCTPjjXX2UEOeyqGSf113z034I6Ot0v6Bvunu5RWvhKa9pJn1fUZjZsCQ0I75IY1+AI2HCW94mN6H2GSv3Fe0pra4= Received: from DB3PR06CA0001.eurprd06.prod.outlook.com (2603:10a6:8:1::14) by HE1PR0802MB2491.eurprd08.prod.outlook.com (2603:10a6:3:de::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.21; Tue, 30 Jun 2020 19:06:28 +0000 Received: from DB5EUR03FT023.eop-EUR03.prod.protection.outlook.com (2603:10a6:8:1:cafe::67) by DB3PR06CA0001.outlook.office365.com (2603:10a6:8:1::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.21 via Frontend Transport; Tue, 30 Jun 2020 19:06:28 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT023.mail.protection.outlook.com (10.152.20.68) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.20 via Frontend Transport; Tue, 30 Jun 2020 19:06:28 +0000 Received: ("Tessian outbound aa49e94c93f4:v61"); Tue, 30 Jun 2020 19:06:28 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 5375acadc217c1a8 X-CR-MTA-TID: 64aa7808 Received: from 9a5098ad2f1b.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 356126E0-238F-4464-A705-A62F17597A28.1; Tue, 30 Jun 2020 19:06:23 +0000 Received: from EUR05-DB8-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 9a5098ad2f1b.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 30 Jun 2020 19:06:23 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UMKGTko6IFGuYezco/JKZao2PFmxoSAuAqLJlaICapECYk5iwe6xCrAkf9bEFugYabtCmnc8v9OdMdfmxuV7MQLfMS3vh1HCMyiDar7QcPIx2kiWDbwvaV+B7pBmgVUU/fVzwaeumD/Kl8qU4NowhOL9NoFvVjSmmwuIJt7y9HNGpO2dhHOIDhEwUtgDedT6EtJlVIH1Xz3UgNHobc7vYZxICWAr47WgbD6at+kqnr8ARrvk3v3hm0WNPh6G4SbchzUDvQZZsajDFklYNYlWmIsnMzwPzd0Y2UR7KbiRbwAN79mWjcu6ieW8A1IgWXpIEh01QuOM1+jNdUgYHxwhUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=E+xu1sfX4aNVwFzusl/K0sqINPu4XdzW4Vp5d6jchmI=; b=KzfqlMlKWwxX4HWmrMqhEvvarSS46d/TQJCrm1bgZT8xYZvGbuHnTU/ANW94SkKOWmEL3BdROgn7Mewh2azGiwGmduVhkiEUjrbm+xRyhQMcu5KjgCdQ7jne3copiTVwmxtK71alfnIMB8T/HBVPX6wlqRStSeMU5dCT7HCK9LJv+TEcjszNwdCaNCENai4TOOc8xgR8Ya2DYlvwAwjki+ZOm32NJycRL1xxnAnhfwZP+Ut9Ja/lWEbEpANuIhPhsjsPfgJ231v1YzUVdaoYsmsuNqVY1ANsmLhWz1RapqOgNEdmpLVqvw3kAt1IezQ7ffHn0+WogmKMOSSKdJ1MlA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=E+xu1sfX4aNVwFzusl/K0sqINPu4XdzW4Vp5d6jchmI=; b=0NOVYnXlAjMSTYY/sBwFhK6Z0GeLrU4XJFn//jfOPa325AH3eJX1k9kdHLulTEbt1tqQC2MF9NRMWRdYafGCTPjjXX2UEOeyqGSf113z034I6Ot0v6Bvunu5RWvhKa9pJn1fUZjZsCQ0I75IY1+AI2HCW94mN6H2GSv3Fe0pra4= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB4935.eurprd08.prod.outlook.com (2603:10a6:20b:d5::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.21; Tue, 30 Jun 2020 19:06:21 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3131.027; Tue, 30 Jun 2020 19:06:21 +0000 From: Thomas Fossati To: Kathleen Moriarty , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] RATS Architecture continued Thread-Index: AQHWMGWdazT03iq/bECLJLRetgUHcajx0wwA Date: Tue, 30 Jun 2020 19:06:21 +0000 Message-ID: <52EC2B8C-578E-49E5-ADBD-037B5F3738FF@arm.com> References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.38.20061401 Authentication-Results-Original: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: ff9281c4-c88e-4b7b-9b1b-08d81d28b179 x-ms-traffictypediagnostic: AM6PR08MB4935:|HE1PR0802MB2491: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:9508;OLM:10000; x-forefront-prvs: 0450A714CB X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: uWymWLja2137KX8871DMFHhBlc1luZGdW60kFVCWmFOa1HRpjgiMSOqLLfQNzQTerlwJeEZTS0TcNPgaIVN17HggVLaJJsQCU28NA9TQdHjuoblxrcsDO6ytqIoNsWwK/gpkrmP93ZBLlSaJh0pzdDi8FiR1P0Ghqwdsm+9QdMW2VOqPWaKSeCwbEFGu3K0vZyKX0fc7PtsiesweSx2R3+JCEfUd4qCjlCIHAviaoKXpkSwfOQ27XmbUsC80+zpCJLHvRCWwfh3YJgPAlTH1ZER3EUnDRg64YwBI2upxVphRtzqCOdJrlXAKlCsor/5ixSZnjKm9uWAHFd+thV6VRiJrFmYH7Qh4L9y089XuE6AEwzHPXQXBLBsbh1HfMmfk8R318Kne93SO7uWKCMvuRA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(136003)(346002)(366004)(396003)(39860400002)(2906002)(2616005)(26005)(186003)(6486002)(9326002)(76116006)(33656002)(8936002)(66946007)(966005)(64756008)(66446008)(66556008)(91956017)(478600001)(8676002)(66476007)(66574015)(71200400001)(316002)(110136005)(86362001)(5660300002)(166002)(83380400001)(30864003)(4326008)(36756003)(6506007)(6512007)(579004)(559001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: COG228K/IEoELP3/5F6MwD8LgRfm+xrTn65xpvIphmkwFxR3jKw3uTsT1CCbPW2ly3+m+DI8H/epW+E8PiTTJDPPXlq6EQeK6meud2V77N4w3/fL6u5UiFMUSwboP8W/Jmmuoux9U3NnKc98Kc5wQn0fzbNQon7WAAJ/O42rJvAIXLOvyWUfRWnC8qmNMXonFTfVJ1gso8dIR2mNMdJMjFd+X6xGkmn9tN/8ArjIj1OscGbBZxFRCYdlONkeUV+41rjZUV37EEu/UvYyfLVB9LQ/brg6pndJblQvQeEnePb+2Nd9JVzrtuPGRSYjZkiagTI+AKhfT6aPUaxdddY1DEyYuiCK+1HKKGq8UtYulD4x98UGynTC3UcirT9iqQobiVQDRVLBpnUZnDxoYgVkj7oKVSwWB1Goy0AjzpZsuDPOhAjCpwYoOCuiEu4iu42X1osoHwYddODt/Ai2D4dg5c/kXvgKgRjCYiOoaN+4Yjc= Content-Type: multipart/alternative; boundary="_000_52EC2B8C578E49E5ADBD037B5F3738FFarmcom_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4935 Original-Authentication-Results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT023.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(136003)(346002)(376002)(39860400002)(46966005)(186003)(66574015)(478600001)(83380400001)(6486002)(2906002)(45080400002)(26005)(36756003)(47076004)(5660300002)(336012)(2616005)(6506007)(30864003)(33964004)(6512007)(166002)(110136005)(8676002)(70206006)(70586007)(316002)(82310400002)(9326002)(4326008)(966005)(33656002)(86362001)(81166007)(82740400003)(8936002)(356005)(579004)(559001); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 0cd34a0e-9fbc-49ab-41b3-08d81d28ad2d X-Forefront-PRVS: 0450A714CB X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: KC4CIH8Txmv0z+u9s8Xnw91VhuRxuVm8t2/MXcOFUdGnXuILo/kRnxufjllf7dQQpu4gr78mPxcT2DXLw3hGvcX3h7NMKU5MkjsgWd6MKGDmsHj8pSpjLLMHDtZLjLXormdCjJlo34o85dlIlPDrGdnBawjA5ULm6N/f/mr5tRnL/HLP7xpivL5G0r6ShVc7wxtQ4zmP2RbZxhppZrp89oGq5NEqgp0xr1ZgLAbG+4LEGKtC1EM3ogGCFc05y90vaqsnQPnuCtWDRn/bZPxgdblz7vbvRh2BhQXzIMduFqrK+b2sNqoR8vvFJvG/ZFKUjxGkhCWXy4i8l60O5VPYwxN6G+mEdGmC5iBPJlo92gVLJqDFp8hO67zF/X0Mt43cV9KkxuKAhFU3bm7zVlmlJ+jjumB0MG6EE222Rp1wHxKL7zSu2ouMLuGinsZJ8jjn5UdCkKZCgfNxkn9rWsn/skuRiD4S1JfMf6im+/U9CuI= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jun 2020 19:06:28.6289 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ff9281c4-c88e-4b7b-9b1b-08d81d28b179 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: DB5EUR03FT023.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0802MB2491 Archived-At: Subject: Re: [Rats] RATS Architecture continued X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jun 2020 19:06:37 -0000 --_000_52EC2B8C578E49E5ADBD037B5F3738FFarmcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgS2F0aGxlZW4sDQoNClRoYW5rcyBhZ2FpbiBmb3IgeW91ciByZXZpZXchDQoNCknigJl2ZSBz cGxpdCB5b3VyIGVkaXRvcmlhbCBzdWdnZXN0aW9ucyBpbiB0byBhIGJ1bmNoIG9mIFBScywgb25l IHBlciBpbXBhY3RlZCBzZWN0aW9uLg0KSeKAmXZlIGRvbmUgc28gaW4gb3JkZXIgdG8gY29uc3Ry YWluIHRoZSBzY29wZSBhbmQgZWFzZSByZXZpZXcsIGJ1dCBhbHNvIGJlY2F1c2UgeW91IG1lbnRp b25lZCB5b3Ugd2FudGVkIHRvIGRvIGFub3RoZXIgcGFzcyBvbiBzb21lIG9mIHRoZSBzZWN0aW9u cy4NClNvIEkgZ3Vlc3MgeW91IGNhbiBwcm92aWRlIGFueSBmdXJ0aGVyIHN1Z2dlc3Rpb24gZGly ZWN0bHkgb24gdGhlIFBScz8NCg0KSGVyZeKAmXMgdGhlIGxpc3Q6DQoNCiAgKiAgIGh0dHBzOi8v Z2l0aHViLmNvbS9pZXRmLXJhdHMtd2cvYXJjaGl0ZWN0dXJlL3B1bGwvMTE3DQogICogICBodHRw czovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzLXdnL2FyY2hpdGVjdHVyZS9wdWxsLzExOA0KICAqICAg aHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUvcHVsbC8xMTkNCiAg KiAgIGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMtd2cvYXJjaGl0ZWN0dXJlL3B1bGwvMTIw DQogICogICBodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzLXdnL2FyY2hpdGVjdHVyZS9wdWxs LzEyMQ0KICAqICAgaHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUv cHVsbC8xMjINCg0KDQpJIGhhdmUgbWFkZSBJc3N1ZXMgZm9yIHRob3NlIGNvbW1lbnRzIHRoYXQg bmVlZGVkIHNvbWUgbW9yZSBkaXNjdXNzaW9uOg0KDQogICogICBodHRwczovL2dpdGh1Yi5jb20v aWV0Zi1yYXRzLXdnL2FyY2hpdGVjdHVyZS9pc3N1ZXMvMTE0DQogICogICBodHRwczovL2dpdGh1 Yi5jb20vaWV0Zi1yYXRzLXdnL2FyY2hpdGVjdHVyZS9pc3N1ZXMvMTE1DQogICogICBodHRwczov L2dpdGh1Yi5jb20vaWV0Zi1yYXRzLXdnL2FyY2hpdGVjdHVyZS9pc3N1ZXMvMTE2DQoNCg0KDQpB bmQgZmluYWxseSBhIGNvdXBsZSBvZiB0aGluZ3MgSeKAmW0gaGF2aW5nIGEgYml0IG9mIHRyb3Vi bGUgdW5kZXJzdGFuZGluZywgZm9yIHdoaWNoIEkgbmVlZCB5b3VyIGhlbHA6DQoNClNlY3Rpb24g NC4yIOKAnFR3byBUeXBlcyBvZiBFbnZpcm9ubWVudHMgb2YgYW4gQXR0ZXN0ZXLigJ0gKEEpDQoN CkkgZmluZCB0aGUgZm9sbG93aW5nIGdyb3VwaW5nIGEgYml0IGNvbmZ1c2luZzoNCg0KICAgICAg ICAgICAgIlBsYWNlcyB0aGF0IEF0dGVzdGluZyBFbnZpcm9ubWVudHMgY2FuIGV4aXN0IGluY2x1 ZGUgVHJ1c3RlZCBFeGVjdXRpb24gRW52aXJvbm1lbnRzIChURUUpLCBlbWJlZGRlZCBTZWN1cmUg RWxlbWVudHMgKGVTRSksIGFuZCBCSU9TIGZpcm13YXJlLiINCg0KVGhpcyBoYXMgYW4gYXR0ZXN0 aW5nIGVudmlyb25tZW50IGFzIGEgcHJvY2Vzc29yLCBhbiBlbGVtZW50LCBhbmQgYXMgY29tcGls ZWQgY29kZS4gIFRoYXQgZG9lc24ndCBzZWVtIHJpZ2h0LCBlc3BlY2lhbGx5IHdoZW4geW91IHJl ZmVyIHRvIHRoZSBhdHRlc3RpbmcgZW52aXJvbm1lbnQgYXMgYSAicGxhY2UiLiAgRG8geW91IG1l YW4gd2hlcmUgQklPUyBpcyBleGVjdXRlZCBwZXJoYXBzPyAgSSB3b3VsZCBleHBlY3QgYSBURUUg YW5kIG1heWJlIG90aGVyIGNvbXBvbmVudHMgd2hlcmUgc2VjdXJpdHkgZnVuY3Rpb25zIGFyZSBv ZmZsb2FkZWQsIHdoaWNoIGlzIGluIHNvbWUgY2FzZXMgdG8gYSBwcm9jZXNzb3Igb3RoZXIgdGhh biBhIFRFRSBsaWtlIGEgR1BVIChJJ20gbm90IG1ha2luZyBhIHJlY29tbWVuZGF0aW9uIHRvIGRv IHRoYXQgaGVyZSwganVzdCBzdGF0aW5nIHdoYXQgaXMgaGFwcGVuaW5nIGluIGVjb3N5c3RlbXMg dGhhdCBleGlzdCkuDQoNCkhlcmUgSSBkb27igJl0IHVuZGVyc3RhbmQgeW91ciBjb21tZW50IGZ1 bGx5IGFuZCB0aGVyZWZvcmUgSSBmaW5kIGl0IGRpZmZpY3VsdCB0byBmb3JtdWxhdGUgYW4gYWN0 aW9uLiAgQ291bGQgeW91IHByb3ZpZGUgYSBzdWdnZXN0aW9uPw0KDQpTZWN0aW9uIDcuNC4gVmVy aWZpZXINCg0KVGhlbiB3aXRoIHRoZSBmb2xsb3dpbmcgc2VudGVuY2UsDQoNCiJUaGUgY29tcG9u ZW50IHRoYXQgaXMgaW1wbGljaXRseSB0cnVzdGVkIGlzIG9mdGVuIHJlZmVycmVkIHRvIGFzIGEg Um9vdCBvZiBUcnVzdC4iDQoNCkkgdGhpbmsgaXQgd291bGQgYmUgd29ydGggbWVudGlvbmluZyB0 aGF0IGEgaGFyZHdhcmUgUm9UIGlzIGltbXV0YWJsZSBhbmQgbXV0YWJsZSBSb1RzIGluIHNvZnR3 YXJlIGFyZSBhbHNvIHBvc3NpYmxlLCBvZmZlcmluZyBkaWZmZXJlbnQgbGV2ZWxzIGZvciBhbiBh c3N1cmFuY2Ugb2YgdHJ1c3Qvc2VjdXJpdHkuDQoNCkhlcmUgeW91IG1lYW4gcHVyZWx5IHNvZnR3 YXJlIFJvVHM/ICBJ4oCZbSBub3QgYXdhcmUgb2YgYW55LCBjYW4geW91IHByb3ZpZGUgYW4gZXhh bXBsZSBwbGVhc2U/DQoNClRoYXQgc2hvdWxkIGJlIGFsbC4NCg0KQ2hlZXJzLCB0aGFua3MhDQoN Cg0KT24gMjIvMDUvMjAyMCwgMTk6MjAsICJSQVRTIG9uIGJlaGFsZiBvZiBLYXRobGVlbiBNb3Jp YXJ0eSIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3Jn PiBvbiBiZWhhbGYgb2Yga2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb208bWFpbHRvOmth dGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPj4gd3JvdGU6DQoNCkdyZWV0aW5ncyENCg0K SSBnb3QgYXMgZmFyIGFzIEkgY291bGQgd2l0aCB0aW1lIGNvbnN0cmFpbnRzIHRocm91Z2ggdGhl IHJlc3Qgb2YgdGhlIGRvY3VtZW50LiAgVGhlcmUgYXJlIGEgZmV3IHNlY3Rpb25zIEknbGwgbGlr ZWx5IGdvIGJhY2sgb3ZlciBhZ2FpbiBhcyBJIHdhcyBzaG9ydCBvbiB0aW1lIHdoZW4gcmV2aWV3 aW5nIHRoZW0sIGJ1dCBkbyBob3BlIHRoaXMgaXMgaGVscGZ1bCB0b3dhcmRzIGltcHJvdmluZyB0 aGUgZG9jdW1lbnQuLiAgVGhpcyByZXZpZXcgaXMgZnJvbSB0aGUgZWRpdG9ycyByZXZpc2lvbiBv biBnaXRodWIgdGhhdCBJIHN0YXJ0ZWQgbXkgcmV2aWV3IGVhcmxpZXIgaW50IGhlIHdlZWsuDQoN ClNlY3Rpb24gNC4yOg0KSSBmaW5kIHRoZSBmb2xsb3dpbmcgZ3JvdXBpbmcgYSBiaXQgY29uZnVz aW5nOg0KIlBsYWNlcyB0aGF0IEF0dGVzdGluZyBFbnZpcm9ubWVudHMgY2FuIGV4aXN0IGluY2x1 ZGUgVHJ1c3RlZCBFeGVjdXRpb24gRW52aXJvbm1lbnRzIChURUUpLCBlbWJlZGRlZCBTZWN1cmUg RWxlbWVudHMgKGVTRSksIGFuZCBCSU9TIGZpcm13YXJlLiINCg0KVGhpcyBoYXMgYW4gYXR0ZXN0 aW5nIGVudmlyb25tZW50IGFzIGEgcHJvY2Vzc29yLCBhbiBlbGVtZW50LCBhbmQgYXMgY29tcGls ZWQgY29kZS4gIFRoYXQgZG9lc24ndCBzZWVtIHJpZ2h0LCBlc3BlY2lhbGx5IHdoZW4geW91IHJl ZmVyIHRvIHRoZSBhdHRlc3RpbmcgZW52aXJvbm1lbnQgYXMgYSAicGxhY2UiLiAgRG8geW91IG1l YW4gd2hlcmUgQklPUyBpcyBleGVjdXRlZCBwZXJoYXBzPyAgSSB3b3VsZCBleHBlY3QgYSBURUUg YW5kIG1heWJlIG90aGVyIGNvbXBvbmVudHMgd2hlcmUgc2VjdXJpdHkgZnVuY3Rpb25zIGFyZSBv ZmZsb2FkZWQsIHdoaWNoIGlzIGluIHNvbWUgY2FzZXMgdG8gYSBwcm9jZXNzb3Igb3RoZXIgdGhh biBhIFRFRSBsaWtlIGEgR1BVIChJJ20gbm90IG1ha2luZyBhIHJlY29tbWVuZGF0aW9uIHRvIGRv IHRoYXQgaGVyZSwganVzdCBzdGF0aW5nIHdoYXQgaXMgaGFwcGVuaW5nIGluIGVjb3N5c3RlbXMg dGhhdCBleGlzdCkuDQoNClRoZSBmb2xsb3dpbmcgdGV4dCBpcyBhIGxpdHRsZSBjb25mdXNpbmcs IGluIHBhcnRpY3VsYXIsIHRoZSBsYXN0IHNlbnRlbmNlOg0KIkFuIGV4ZWN1dGlvbiBlbnZpcm9u bWVudCBtYXkgbm90LCBieSBkZWZhdWx0LCBiZSBjYXBhYmxlIG9mIGNsYWltcyBjb2xsZWN0aW9u IGZvciBhIGdpdmVuIFRhcmdldCBFbnZpcm9ubWVudC4gQXR0ZXN0aW5nIEVudmlyb25tZW50cyBh cmUgZGVzaWduZWQgc3BlY2lmaWNhbGx5IHdpdGggY2xhaW1zIGNvbGxlY3Rpb24gaW4gbWluZC4i DQoNCklmIHRoZSBhdHRlc3RpbmcgZW52aXJvbm1lbnQgaXMgYSBwbGFjZSwgVEVFcyBhbmQgb3Ro ZXIgcHJvY2Vzc29ycyB3ZXJlIG5vdCBuZWNlc3NhcmlseSBkZXNpZ25lZCB3aXRoIGNsYWltcyBp biBtaW5kLiAgSWYgeW91IGNhbiBoZWxwIHRvIGV4cGxhaW4gYW4gYXR0ZXN0aW5nIGVudmlyb25t ZW50IGJldHRlciwgSSBjYW4gaGVscCB0byBwaHJhc2UgaXQgbW9yZSBjbGVhcmx5IHRvIGNvbnZl eSB0aGUgaW50ZW5kZWQgc2V0IG9mIHBvaW50cyBhcyBJIHRoaW5rIHRoZXJlIGFyZSBzZXZlcmFs Lg0KDQpTZWN0aW9uIDQuMw0KQ29uc2lkZXIgY2hhbmdpbmcgZnJvbToNCiJCeSBkZWZpbml0aW9u LCB0aGUgQXR0ZXN0ZXIgcm9sZSB0YWtlcyBvbiB0aGUgZHV0eSB0byBjcmVhdGUgRXZpZGVuY2Uu Ig0KVG86DQoiQnkgZGVmaW5pdGlvbiwgdGhlIEF0dGVzdGVyIHJvbGUgY3JlYXRlcyBFdmlkZW5j ZS4iDQoNClRoZSBmb2xsb3dpbmcgc2VudGVuY2UgaXMgYSBydW4gb24gYW5kIEkgdGhpbmsgc29t ZSBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIHdpbGwgaGVscCBwcm92aWRlIGNsYXJpdHkuIEkgZG9u J3QgdGhpbmsgaXQncyB0aGUgcm9sZSB0aGF0IGlzIGNvbXBvc2VkIG9mIG5lc3QgZW52aXJvbm1l bnRzLiAgQ3VycmVudDoNCiJUaGUgZmFjdCB0aGF0IGFuIEF0dGVzdGVyIHJvbGUgaXMgY29tcG9z ZWQgb2YgZW52aXJvbm1lbnRzIHRoYXQgY2FuIGJlIG5lc3RlZCBvciBzdGFnZWQgYWRkcyBjb21w bGV4aXR5IHRvIHRoZSBhcmNoaXRlY3R1cmFsIGxheW91dCBvZiBob3cgYW4gQXR0ZXN0ZXIgY2Fu IGJlIGNvbXBvc2VkIGFuZCB0aGVyZWZvcmUgaGFzIHRvIGNvbmR1Y3QgdGhlIENsYWltcyBjb2xs ZWN0aW9uIGluIG9yZGVyIHRvIGNyZWF0ZSBiZWxpZXZhYmxlIGF0dGVzdGF0aW9uIEV2aWRlbmNl LiINCkhvdyBhYm91dDoNCiJBbiBBdHRlc3RlciBtYXkgYmUgb25lIG9yIG1vcmUgbmVzdGVkIG9y IHN0YWdlZCBlbnZpcm9ubWVudHMsIGFkZGluZyBjb21wbGV4aXR5IHRvIHRoZSBhcmNoaXRlY3R1 cmFsIHN0cnVjdHVyZS4gIFRoZSB1bmlmeWluZyBjb21wb25lbnQgaXMgdGhlIHJvb3Qgb2YgdHJ1 c3QgYW5kIHRoZSBuZXN0ZWQsIHN0YWdlZCwgb3IgY2hhaW5lZCBhdHRlc3RhdGlvbnMgcHJvZHVj ZWQuICBUaGUgbmVzdGVkIG9yIGNoYWluZWQgc3RydWN0dXJlIHNob3VsZCBpbmNsdWRlIGNsYWlt cywgY29sbGVjdGVkIGJ5IHRoZSBhdHRlc3RlciB0byBhaWQgaW4gdGhlIGFzc3VyYW5jZSBvciBi ZWxpZXZhYmlsaXR5IG9mIHRoZSBhdHRlc3RhdGlvbiBFdmlkZW5jZS4iDQoNClRoZSBmb2xsb3dp bmcgc2VudGVuY2Ugc2hvdWxkIGJlIGJyb2tlbiBpbnRvIHR3bzoNCiJUaGlzIGV4YW1wbGUgY291 bGQgYmUgZXh0ZW5kZWQgZnVydGhlciBieSwgc2F5LCBtYWtpbmcgdGhlIGtlcm5lbCBiZWNvbWUg YW5vdGhlciBBdHRlc3RpbmcgRW52aXJvbm1lbnQgZm9yIGFuIGFwcGxpY2F0aW9uIGFzIGFub3Ro ZXIgVGFyZ2V0IEVudmlyb25tZW50LCByZXN1bHRpbmcgaW4gYSB0aGlyZCBzZXQgb2YgQ2xhaW1z IGluIHRoZSBFdmlkZW5jZSBwZXJ0YWluaW5nIHRvIHRoYXQgYXBwbGljYXRpb24uIg0KUHJvcG9z ZWQ6DQoiVGhpcyBleGFtcGxlIGNvdWxkIGJlIGV4dGVuZGVkIGZ1cnRoZXIgYnkgbWFraW5nIHRo ZSBrZXJuZWwgYmVjb21lIGFub3RoZXIgQXR0ZXN0aW5nIEVudmlyb25tZW50IGZvciBhbiBhcHBs aWNhdGlvbiBhcyBhbm90aGVyIFRhcmdldCBFbnZpcm9ubWVudC4gVGhpcyByZXN1bHRzIGluIGEg dGhpcmQgc2V0IG9mIENsYWltcyBpbiB0aGUgRXZpZGVuY2UgcGVydGFpbmluZyB0byB0aGF0IGFw cGxpY2F0aW9uLiINCg0KDQpIb3cgYWJvdXQgY2hhbmdpbmcgdGhlIGZvbGxvd2luZyBzZW50ZW5j ZSBmcm9tOg0KIkFtb25nIHRoZXNlIHJvdXRlcnMsIHRoZXJlIGlzIG9ubHkgb25lIG1haW4gcm91 dGVyIHRoYXQgY29ubmVjdHMgdG8gdGhlIFZlcmlmaWVyLiAiDQpUbzoNCiJBIG11bHRpLWNoYXNz aXMgcm91dGVyLCBwcm92aWRlcyBhIG1hbmFnZW1lbnQgcG9pbnQgYW5kIGlzIHRoZSBvbmx5IG9u ZSB0aGF0IGNvbm5lY3RzIHRvIHRoZSBWZXJpZmllci4gIg0KDQpGb3IgdGhlIGZvbGxvd2luZyBz ZW50ZW5jZSwgdHJ5aW5nIHRvIHJlbW92ZSB0aGUgdXNlIG9mIGEgd29yZCB0d2ljZSBpbiBhIHJv dyBhbmQgY29udmV5IHRoZSBzYW1lIGludGVudC4NCk9sZDoNCiJBZnRlciBjb2xsZWN0aW5nIHRo ZSBFdmlkZW5jZSBvZiBvdGhlciBBdHRlc3RlcnMsIHRoaXMgaW5zaWRlIFZlcmlmaWVyIHZlcmlm aWVzIHRoZW0gdXNpbmcgRW5kb3JzZW1lbnRzIGFuZCBBcHByYWlzYWwgUG9saWNpZXMgKG9idGFp bmVkIHRoZSBzYW1lIHdheSBhcyBhbnkgb3RoZXIgVmVyaWZpZXIpLCB0byBnZW5lcmF0ZSBBdHRl c3RhdGlvbiBSZXN1bHRzLiINClByb3Bvc2VkOg0KIkFmdGVyIGNvbGxlY3RpbmcgdGhlIEV2aWRl bmNlIG9mIG90aGVyIEF0dGVzdGVycywgdGhpcyBpbnNpZGUgVmVyaWZpZXIgdXNlcyBFbmRvcnNl bWVudHMgYW5kIEFwcHJhaXNhbCBQb2xpY2llcyAob2J0YWluZWQgdGhlIHNhbWUgd2F5IGFzIGFu eSBvdGhlciBWZXJpZmllcikgaW4gdGhlIHZlcmlmaWNhdGlvbiBwcm9jZXNzIHRvIGdlbmVyYXRl IEF0dGVzdGF0aW9uIFJlc3VsdHMuIg0KDQpJIG1heSB0cnkgYW5vdGhlciBwYXNzIGF0IHNlY3Rp b24gNCB0byBpbXByb3ZlIHJlYWRhYmlsaXR5Lg0KDQpTZWN0aW9uIDUsDQpDb25zaWRlciBicmVh a2luZyB0aGlzIGludG8gMiBzZW50ZW5jZXMsIGZyb206DQoiVGhpcyBzZWN0aW9uIGluY2x1ZGVz IHNvbWUgcmVmZXJlbmNlIG1vZGVscywgYnV0IHRoaXMgaXMgbm90IGludGVuZGVkIHRvIGJlIGEg cmVzdHJpY3RpdmUgbGlzdCwgYW5kIG90aGVyIHZhcmlhdGlvbnMgbWF5IGV4aXN0LiINClRvOg0K IlRoaXMgc2VjdGlvbiBpbmNsdWRlcyBzb21lIHJlZmVyZW5jZSBtb2RlbHMuIFRoaXMgaXMgbm90 IGludGVuZGVkIHRvIGJlIGEgcmVzdHJpY3RpdmUgbGlzdCwgYW5kIG90aGVyIHZhcmlhdGlvbnMg bWF5IGV4aXN0LiINCg0KU2VjdGlvbiA1LjENClR3byByZXN1bHQgd29yZHMgdG9nZXRoZXIgaXMg bm90IG5lY2Vzc2FyeS4NCkNoYW5nZSBmcm9tOg0KIlRoZSBzZWNvbmQgd2F5IGluIHdoaWNoIHRo ZSBwcm9jZXNzIG1heSBmYWlsIGlzIHdoZW4gdGhlIHJlc3VsdGluZyBSZXN1bHQgaXMgZXhhbWlu ZWQgYnkgdGhlIFJlbHlpbmcgUGFydHksIGFuZCBiYXNlZCB1cG9uIHRoZSBBcHByYWlzYWwgUG9s aWN5LCB0aGUgcmVzdWx0IGRvZXMgbm90IHBhc3MgdGhlIHBvbGljeS4gIg0KVG86DQoiVGhlIHNl Y29uZCB3YXkgaW4gd2hpY2ggdGhlIHByb2Nlc3MgbWF5IGZhaWwgaXMgd2hlbiB0aGUgUmVzdWx0 IGlzIGV4YW1pbmVkIGJ5IHRoZSBSZWx5aW5nIFBhcnR5LCBhbmQgYmFzZWQgdXBvbiB0aGUgQXBw cmFpc2FsIFBvbGljeSwgdGhlIHJlc3VsdCBkb2VzIG5vdCBwYXNzIHRoZSBwb2xpY3kuICINCg0K SSBzdWdnZXN0IG1ha2luZyB0aGUgbGFzdCBwYXJhZ3JhcGggdGhlIHNlY29uZCBwYXJhZ3JhcGgu ICBJdCdzIGVhc2llciB0byByZWFkIHRoYW4gdGhlIG90aGVycyBhbmQgcHJvdmlkZXMgYW4gaW50 cm9kdWN0aW9uIHRvIHRoZSBtb2RlbCBiZWZvcmUgeW91IGJlZ2luIHRhbGtpbmcgYWJvdXQgaG93 IGl0IG1pZ2h0IGZhaWwuDQoNCioqIEkgbWF5IGNvbWUgYmFjayB0byB0aGlzIHNlY3Rpb24gdG8g cHJvdmlkZSB3b3JkaW5nIHN1Z2dlc3Rpb25zLg0KDQpTZWN0aW9uIDUuMg0KSSBzdWdnZXN0IG1v dmluZyB0aGUgbGFzdCBwYXJhZ3JhcGggdG8gdGhlIGZpcnN0IGluIHRoaXMgaW5zdGFuY2UuICBJ dCBhbHNvIHByb3ZpZGVzIGEgbmljZSBoaWdoLWxldmVsIG92ZXJ2aWV3LiAgVGhlIGN1cnJlbnQg cGFyYWdyYXBoIDEmMiBmbG93IHdlbGwgdG9nZXRoZXIsIGhlbmNlIHRoaXMgb3JkZXIgc3VnZ2Vz dGlvbi4NCg0KVGhlIHRoaXJkIHBhcmFncmFwaCBpcyBhIHJlYWxseSBsb25nIHdheSBvZiBzdGF0 aW5nIHRoYXQgaW50ZXJvcGVyYWJpbGl0eSBpcyByZXF1aXJlZC4gIEVudGl0aWVzIG11c3QgYmUg YWJsZSB0byBjcmVhdGUsIHNlbmQsIHJlY2VpdmUsIGFuZCBwcm9jZXNzIGRhdGEgKGhlbmNlIHRo ZSBuZWVkIGZvciBhIHN0YW5kYXJkKS4gIEl0J3MgZmluZSwgYnV0IGNvdWxkIGJlIHNob3J0ZXIu DQoNClNlY3Rpb24gNS4zOg0KT0xEOg0KIk9uZSB2YXJpYXRpb24gb2YgdGhlIGJhY2tncm91bmQt Y2hlY2sgbW9kZWwgaXMgd2hlcmUgdGhlIFJlbHlpbmcgUGFydHkgYW5kIHRoZSBWZXJpZmllciBv biB0aGUgc2FtZSBtYWNoaW5lLCBhbmQgc28gdGhlcmUgaXMgbm8gbmVlZCBmb3IgYSBwcm90b2Nv bCBiZXR3ZWVuIHRoZSB0d28uIg0KUHJvcG9zZWQ6DQoiT25lIHZhcmlhdGlvbiBvZiB0aGUgYmFj a2dyb3VuZC1jaGVjayBtb2RlbCBpcyB3aGVyZSB0aGUgUmVseWluZyBQYXJ0eSBhbmQgdGhlIFZl cmlmaWVyIGFyZSBvbiB0aGUgc2FtZSBtYWNoaW5lLCBwZXJmb3JtaW5nIGJvdGggZnVuY3Rpb25z IHRvZ2V0aGVyLiAgSW4gdGhpcyBjYXNlLCB0aGVyZSBpcyBubyBuZWVkIGZvciBhIHByb3RvY29s IGJldHdlZW4gdGhlIHR3by4iDQpJIHRoaW5rIHRoZSBhZGRpdGlvbiBpcyBuZWNlc3Nhcnkgb3Ig eW91IGNvdWxkIHNjcmF0Y2ggeW91ciBoZWFkIHdvbmRlcmluZyB3aHkgbm8gcHJvdG9jb2wgaXMg bmVlZGVkLiAgSWYgdGhleSBhcmUgc2VwYXJhdGUgZnVuY3Rpb25zIG9uIHRoZSBzYW1lIHN5c3Rl bSwgeW91J2QgbmVlZCBzb21lIHdheSBmb3IgdGhlIHJlbHlpbmcgcGFydHkgdG8gYWNjZXNzIHRo ZSByZXN1bHRzIG9mIHRoZSB2ZXJpZmllci4NCg0KVGhlIG5leHQgc2VudGVuY2UgY291bGQgYmVu ZWZpdCBmcm9tIGJlaW5nIG1hZGUgaW50byBzZXZlcmFsLg0KT0xEOg0KIkl0IGlzIGFsc28gd29y dGggcG9pbnRpbmcgb3V0IHRoYXQgdGhlIGNob2ljZSBvZiBtb2RlbCBpcyBnZW5lcmFsbHkgdXAg dG8gdGhlIFJlbHlpbmcgUGFydHksIGFuZCB0aGUgc2FtZSBkZXZpY2UgbWF5IG5lZWQgdG8gY3Jl YXRlIEV2aWRlbmNlIGZvciBkaWZmZXJlbnQgUmVseWluZyBQYXJ0aWVzIGFuZCBkaWZmZXJlbnQg dXNlIGNhc2VzIChlLmcuLCBhIG5ldHdvcmsgaW5mcmFzdHJ1Y3R1cmUgZGV2aWNlIHRvIGdhaW4g YWNjZXNzIHRvIHRoZSBuZXR3b3JrLCBhbmQgdGhlbiBhIHNlcnZlciBob2xkaW5nIGNvbmZpZGVu dGlhbCBkYXRhIHRvIGdldCBhY2Nlc3MgdG8gdGhhdCBkYXRhKS4gQXMgc3VjaCwgYm90aCBtb2Rl bHMgbWF5IHNpbXVsdGFuZW91c2x5IGJlIGluIHVzZSBieSB0aGUgc2FtZSBkZXZpY2UuIg0KDQpJ ZiB0aGUgc2VydmVyIGhvbGRzIGNvbmZpZGVudGlhbCBkYXRhLCB3aHkgZG9lcyBpdCBuZWVkIHRv IGNyZWF0ZSBldmlkZW5jZSB0byBhY2Nlc3MgdGhlIGRhdGE/ICBJJ20gbm90IGZvbGxvd2luZyB0 aGUgc2Vjb25kIGV4YW1wbGUgYXMgd3JpdHRlbiwgc28gbXkgcHJvcG9zZWQgdGV4dCBtYXkgbm90 IGJlIGFzIGludGVuZGVkLg0KDQpQcm9wb3NlZDoNCiJJdCBpcyBhbHNvIHdvcnRoIHBvaW50aW5n IG91dCB0aGF0IHRoZSBjaG9pY2Ugb2YgbW9kZWwgaXMgZ2VuZXJhbGx5IHVwIHRvIHRoZSBSZWx5 aW5nIFBhcnR5LiAgVGhlIHNhbWUgZGV2aWNlIG1heSBuZWVkIHRvIGNyZWF0ZSBFdmlkZW5jZSBm b3IgZGlmZmVyZW50IFJlbHlpbmcgUGFydGllcyBhbmQvb3IgZGlmZmVyZW50IHVzZSBjYXNlcy4g IEZvciBpbnN0YW5jZSwgYSBuZXR3b3JrIGluZnJhc3RydWN0dXJlIGRldmljZSBtYXkgYXR0ZXN0 IGV2aWRlbmNlIHRvIGdhaW4gYWNjZXNzIHRvIHRoZSBuZXR3b3JrIG9yIGEgc2VydmVyIGhvbGRp bmcgY29uZmlkZW50aWFsIGRhdGEgIG1heSByZXF1aXJlIGF0dGVzdGF0aW9ucyBvZiBldmlkZW5j ZSB0byBnYWluIGFjY2VzcyB0byB0aGUgZGF0YS4gQXMgc3VjaCwgYm90aCBtb2RlbHMgbWF5IHNp bXVsdGFuZW91c2x5IGJlIGluIHVzZSBieSB0aGUgc2FtZSBkZXZpY2UuIg0KDQpTZWN0aW9uIDY6 DQpUaGUgZmlyc3QgMyBzZW50ZW5jZXMgYXJlIGZpbmUsIGJ1dCBpZiB5b3Ugd2FudGVkIHRvIHJl ZHVjZSBpdCwgaXQgY291bGQgYmUgb25lIHNlbnRlbmNlLg0KQ3VycmVudDoNCiJBbiBlbnRpdHkg aW4gdGhlIFJBVFMgYXJjaGl0ZWN0dXJlIGluY2x1ZGVzIGF0IGxlYXN0IG9uZSBvZiB0aGUgcm9s ZXMgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50LiBBcyBhIHJlc3VsdCwgdGhlIGVudGl0eSBjYW4g cGFydGljaXBhdGUgYXMgYSBjb25zdGl0dWVudCBvZiB0aGUgUkFUUyBhcmNoaXRlY3R1cmUuIEFk ZGl0aW9uYWxseSwgYW4gZW50aXR5IGNhbiBhZ2dyZWdhdGUgbW9yZSB0aGFuIG9uZSByb2xlIGlu dG8gaXRzZWxmLiAiDQpQcm9wb3NlZDoNCiJBbiBlbnRpdHkgaW4gdGhlIFJBVFMgYXJjaGl0ZWN0 dXJlIGluY2x1ZGVzIGF0IGxlYXN0IG9uZSBbb3IgbW9yZV0gb2YgdGhlIHJvbGVzIGRlZmluZWQg aW4gdGhpcyBkb2N1bWVudC4gIg0KT3IgbW9yZSBpcyByZWR1bmRhbnQsIHNvIHRoYXQgcmVhbGx5 IGlzbid0IG5lY2Vzc2FyeSB0byBjb252ZXkgdGhlIHNhbWUgcG9pbnQuDQoNClRoZW4gdGhlIGxh c3Qgc2VudGVuY2U6DQpJJ2QgY2hhbmdlIGl0IGEgbGl0dGxlIGZyb206DQoiSW4gZXNzZW5jZSwg YW4gZW50aXR5IHRoYXQgY29tYmluZXMgbW9yZSB0aGFuIG9uZSByb2xlIGFsc28gY3JlYXRlcyBh bmQgY29uc3VtZXMgdGhlIGNvcnJlc3BvbmRpbmcgY29uY2VwdHVhbCBtZXNzYWdlcyBhcyBkZWZp bmVkIGluIHRoaXMgZG9jdW1lbnQuIg0KVG86DQoiSW4gZXNzZW5jZSwgYW4gZW50aXR5IHRoYXQg Y29tYmluZXMgbW9yZSB0aGFuIG9uZSByb2xlIG1heSBjcmVhdGUgYW5kIGNvbnN1bWUgdGhlIGNv cnJlc3BvbmRpbmcgY29uY2VwdHVhbCBtZXNzYWdlcyBhcyBkZWZpbmVkIGluIHRoaXMgZG9jdW1l bnQuIg0KDQpJdCBtaWdodCBub3QsIGl0IGNvdWxkIGJlIHRoZSB2ZXJpZmllciBhbmQgcmVseWlu ZyBwYXJ0eS4NCg0KU2VjdGlvbiA1Og0KQ29uc2lkZXIgY2hhbmdpbmcgZnJvbToNCiJUaGF0IGlz LCBpdCBtaWdodCBhcHByYWlzZSB0aGUgdHJ1c3R3b3J0aGluZXNzIG9mIGFuIGFwcGxpY2F0aW9u IGNvbXBvbmVudCwgb3Igb3BlcmF0aW5nIHN5c3RlbSBjb21wb25lbnQgb3Igc2VydmljZSwgdW5k ZXIgdGhlIGFzc3VtcHRpb24gdGhhdCBpbmZvcm1hdGlvbiBwcm92aWRlZCBhYm91dCBpdCBieSB0 aGUgbG93ZXItbGF5ZXIgaHlwZXJ2aXNvciBvciBmaXJtd2FyZSBpcyB0cnVlLiAiDQpUbzoNCiJU aGF0IGlzLCBpdCBtaWdodCBhcHByYWlzZSB0aGUgdHJ1c3R3b3J0aGluZXNzIG9mIGFuIGFwcGxp Y2F0aW9uIGNvbXBvbmVudCwgb3BlcmF0aW5nIHN5c3RlbSBjb21wb25lbnQsIG9yIHNlcnZpY2Ug dW5kZXIgdGhlIGFzc3VtcHRpb24gdGhhdCBpbmZvcm1hdGlvbiBwcm92aWRlZCBhYm91dCBpdCBi eSB0aGUgbG93ZXItbGF5ZXIgaHlwZXJ2aXNvciBvciBmaXJtd2FyZSBpcyB0cnVlLi4gIg0KDQpT ZWN0aW9uIDc6DQoNCkknZCBzYXkgaXQncyByZWFsbHkgYSBzdHJvbmdlciBsZXZlbCBvZiBhc3N1 cmFuY2Ugb2Ygc2VjdXJpdHkgcmF0aGVyIHRoYW4gYSBzdHJvbmdlciBsZXZlbCBvZiBzZWN1cml0 eSBpbiB0aGUgZm9sbG93aW5nOg0KIkEgc3Ryb25nZXIgbGV2ZWwgb2Ygc2VjdXJpdHkgY29tZXMg d2hlbiBpbmZvcm1hdGlvbiBjYW4gYmUgdm91Y2hlZCBmb3IgYnkgaGFyZHdhcmUgb3IgYnkgUk9N IGNvZGUsIGVzcGVjaWFsbHkgaWYgc3VjaCBoYXJkd2FyZSBpcyBwaHlzaWNhbGx5IHJlc2lzdGFu dCB0byBoYXJkd2FyZSB0YW1wZXJpbmcuICINCg0KVGhlbiB3aXRoIHRoZSBmb2xsb3dpbmcgc2Vu dGVuY2UsDQoiVGhlIGNvbXBvbmVudCB0aGF0IGlzIGltcGxpY2l0bHkgdHJ1c3RlZCBpcyBvZnRl biByZWZlcnJlZCB0byBhcyBhIFJvb3Qgb2YgVHJ1c3QuIg0KSSB0aGluayBpdCB3b3VsZCBiZSB3 b3J0aCBtZW50aW9uaW5nIHRoYXQgYSBoYXJkd2FyZSBSb1QgaXMgaW1tdXRhYmxlIGFuZCBtdXRh YmxlIFJvVHMgaW4gc29mdHdhcmUgYXJlIGFsc28gcG9zc2libGUsIG9mZmVyaW5nIGRpZmZlcmVu dCBsZXZlbHMgZm9yIGFuIGFzc3VyYW5jZSBvZiB0cnVzdC9zZWN1cml0eS4NCg0KU2VjdGlvbiA5 Lg0KDQpTaW5jZSBST0xJRSBbUkZDODMyMl0gaGFzIGJlZW4gYWRkZWQgdG8gU0NBUDIuMCwgaXQg d291bGQgYmUgZ29vZCB0byBsaXN0IHRoYXQgYXMgYW4gb3B0aW9uIHNpbmNlIGEgbG90IG9mIHRp bWUgYW5kIGVmZm9ydCB3ZW50IGludG8gaG93IHRvIHNlY3VyZSB0aGUgZXhjaGFuZ2Ugb2YgZm9y bWF0dGVkIGRhdGEgZm9yIHRoYXQgcHJvdG9jb2wuDQoNClNlY3Rpb24gMTEuIFByaXZhY3kNClRo aXMgaXMgYSBnb29kIHN0YXJ0LiAgUmVtb3RlIGF0dGVzdGF0aW9uIGFsc28gcHJvdmlkZXMgYSB3 YXkgdG8gcHJvZmlsZSBzeXN0ZW1zIGFzIHdlbGwgYXMgdGhlIHVzZXIgYmVoaW5kIHRoYXQgc3lz dGVtLiAgSWYgYXR0ZXN0YXRpb24gcmVzdWx0cyBnbyBoaWdoZXIgaW4gdGhlIHN0YWNrIHRvIGlu Y2x1ZGUgY29udGFpbmVycyBhbmQgYXBwbGljYXRpb25zLCBpdCBjb3VsZCByZXZlYWwgZXZlbiBt b3JlIGFib3V0IGEgc3lzdGVtIG9yIHVzZXIuICBUaGUgc2NvcGUgb2YgYWNjZXNzIG5lZWRzIHRv IGJlIGVtcGhhc2l6ZWQsIGluY2x1ZGluZyB0aGUgYWRtaW5pc3RyYXRvcnMgYWNjZXNzIHRvIGRh dGEgKG9yIHJlc3RyaWN0aW9ucykuICBJZiB0aGVyZSBpcyBhIHdheSB0byBtYWtlIGluZmVyZW5j ZXMgYWJvdXQgYXR0ZXN0YXRpb25zIGZyb20gdGhlaXIgcHJvY2Vzc2luZywgdGhhdCBzaG91bGQg YmUgbm90ZWQgYXMgd2VsbC4NCg0KU2VjdGlvbiAxMjoNClRoaXMgd2lsbCBuZWVkIHRvIHN0YXRl IGFuIGV4cGxpY2l0IHJlcXVpcmVtZW50IGZvciB0cmFuc3BvcnQgZW5jcnlwdGlvbi4gIEluIHRo ZSBpbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCB0aGUgdGV4dCBpcyBhcyBmb2xsb3dzOg0KIkFueSBz b2x1dGlvbiB0aGF0IGNvbnZleXMgaW5mb3JtYXRpb24gdXNlZCBmb3Igc2VjdXJpdHkgcHVycG9z ZXMsIHdoZXRoZXIgc3VjaCBpbmZvcm1hdGlvbiBpcyBpbiB0aGUgZm9ybSBvZiBFdmlkZW5jZSwg QXR0ZXN0YXRpb24gUmVzdWx0cywgRW5kb3JzZW1lbnRzLCBvciBBcHByYWlzYWwgUG9saWN5LCBu ZWVkcyB0byBzdXBwb3J0IGVuZC10by1lbmQgaW50ZWdyaXR5IHByb3RlY3Rpb24gYW5kIHJlcGxh eSBhdHRhY2sgcHJldmVudGlvbiwgYW5kIG9mdGVuIGFsc28gbmVlZHMgdG8gc3VwcG9ydCBhZGRp dGlvbmFsIHNlY3VyaXR5IHByb3RlY3Rpb25zLiBGb3IgZXhhbXBsZSwgYWRkaXRpb25hbCBtZWFu cyBvZiBhdXRoZW50aWNhdGlvbiwgY29uZmlkZW50aWFsaXR5LCBpbnRlZ3JpdHksIHJlcGxheSwg ZGVuaWFsIG9mIHNlcnZpY2UgYW5kIHByaXZhY3kgcHJvdGVjdGlvbiBhcmUgbmVlZGVkIGluIG1h bnkgdXNlIGNhc2VzLiAiDQpQcm9wb3NlZDoNCiJBbnkgc29sdXRpb24gdGhhdCBjb252ZXlzIGlu Zm9ybWF0aW9uIHVzZWQgZm9yIHNlY3VyaXR5IHB1cnBvc2VzLCB3aGV0aGVyIHN1Y2ggaW5mb3Jt YXRpb24gaXMgaW4gdGhlIGZvcm0gb2YgRXZpZGVuY2UsIEF0dGVzdGF0aW9uIFJlc3VsdHMsIEVu ZG9yc2VtZW50cywgb3IgQXBwcmFpc2FsIFBvbGljeSBtdXN0IHN1cHBvcnQgdGhlIHNlY3VyaXR5 IHByb3BlcnRpZXMgb2YgY29uZmlkZW50aWFsaXR5LCBpbnRlZ3JpdHksIGFuZCBhdmFpbGFiaWxp dHkuICBBIGNvbnZleWFuY2UgcHJvdG9jb2wgaW5jbHVkZXMgdGhlIHR5cGljYWwgdHJhbnNwb3J0 IHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zOg0KbyAgZW5kLXRvLWVuZCBlbmNyeXB0aW9uLA0KbyAg ZW5kLXRvLWVuZCBpbnRlZ3JpdHkgcHJvdGVjdGlvbiwNCm8gIHJlcGxheSBhdHRhY2sgcHJldmVu dGlvbiwNCm8gIGRlbmlhbCBvZiBzZXJ2aWNlIHByb3RlY3Rpb24sDQpvICBhdXRoZW50aWNhdGlv biwNCm8gIGF1dGhvcml6YXRpb24sDQpvICBmaW5lIGdyYWluZWQgYWNjZXNzIGNvbnRyb2xzLCBh bmQNCm8gIGxvZ2dpbmcgaW4gbGluZSB3aXRoIGN1cnJlbnQgdGhyZWF0IG1vZGVscyBhbmQgemVy byB0cnVzdCBhcmNoaXRlY3R1cmVzLiINCg0KDQotLQ0KDQpCZXN0IHJlZ2FyZHMsDQpLYXRobGVl bg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBh dHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJ ZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBz ZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55 IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0 aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K --_000_52EC2B8C578E49E5ADBD037B5F3738FFarmcom_ Content-Type: text/html; charset="utf-8" Content-ID: <38F01CA1E0905B4CBF5E31BD93F5514B@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiBcKEJvZHkgQ1NcKSI7DQoJcGFub3NlLTE6MiAxMSA2IDQg MiAyIDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiT3Nha2EgUmVndWxhci1N b25vIjsNCglwYW5vc2UtMToyIDExIDYgMCAwIDAgMCAwIDAgMDt9DQpAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OiJIZWx2ZXRpY2EgTmV1ZSI7DQoJcGFub3NlLTE6MiAwIDUgMyAwIDAgMCAyIDAg NDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwg ZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglm b250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6 bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9y OmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgs IGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1w cmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBjbTsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1hcmdp bi1ib3R0b206MGNtOw0KCW1hcmdpbi1sZWZ0OjM2LjBwdDsNCgltYXJnaW4tYm90dG9tOi4wMDAx cHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp Zjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsN Cglmb250LWZhbWlseToiT3Nha2EgUmVndWxhci1Nb25vIixzZXJpZjsNCgljb2xvcjp3aW5kb3d0 ZXh0O30NCnAubGkxLCBsaS5saTEsIGRpdi5saTENCgl7bXNvLXN0eWxlLW5hbWU6bGkxOw0KCW1h cmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo5LjBwdDsNCglm b250LWZhbWlseToiSGVsdmV0aWNhIE5ldWUiO30NCnAucDEsIGxpLnAxLCBkaXYucDENCgl7bXNv LXN0eWxlLW5hbWU6cDE7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjkuMHB0Ow0KCWZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EgTmV1ZSI7DQoJY29sb3I6 I0RDQTEwRDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsN Cglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQg NzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3Jk U2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0K QGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6NzY4NTAzMjUxOw0KCW1zby1saXN0LXR5cGU6aHlicmlk Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczo3MjQ4OTgxMCAxMzQ4MDc1NTMgMTM0ODA3NTU1IDEz NDgwNzU1NyAxMzQ4MDc1NTMgMTM0ODA3NTU1IDEzNDgwNzU1NyAxMzQ4MDc1NTMgMTM0ODA3NTU1 IDEzNDgwNzU1Nzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot MTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0 IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1p bHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4 LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVs OA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30N CkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5 OldpbmdkaW5nczt9DQpAbGlzdCBsMQ0KCXttc28tbGlzdC1pZDo4NTY1MDg5MTg7DQoJbXNvLWxp c3QtdGVtcGxhdGUtaWRzOjEwMzM5MzI2ODQ7fQ0KQGxpc3QgbDE6bGV2ZWwxDQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NzIuMHB0 Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0 Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBs aXN0IGwxOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxMDguMHB0Ow0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZv bnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNA0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0K CW1zby1sZXZlbC10YWItc3RvcDoxNDQuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7 DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWIt c3RvcDoxODAuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyMTYuMHB0Ow0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0K CW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0 IGwxOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyNTIuMHB0Ow0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQt c2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsOA0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1z by1sZXZlbC10YWItc3RvcDoyODguMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDozMjQuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3lt Ym9sO30NCkBsaXN0IGwyDQoJe21zby1saXN0LWlkOjEyNTg3MDk2NjQ7DQoJbXNvLWxpc3QtdGVt cGxhdGUtaWRzOi05NjQ1NTE1NjQ7fQ0KQGxpc3QgbDI6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NzIuMHB0Ow0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1z by1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwy OmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxMDguMHB0Ow0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6 ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwyOmxldmVsNA0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDoxNDQuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwyOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDox ODAuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot MTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwyOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyMTYuMHB0Ow0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1h bnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwyOmxl dmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyNTIuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZTox MC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwyOmxldmVsOA0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZl bC10YWItc3RvcDoyODguMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6U3ltYm9sO30NCkBsaXN0IGwyOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozMjQu MHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwzDQoJe21zby1saXN0LWlkOjE0MjU4NzkzNDM7DQoJbXNvLWxpc3QtdGVtcGxhdGUt aWRzOjMxODQwMDg2ODt9DQpAbGlzdCBsMzpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MzYu MHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwzOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDo3Mi4wcHQ7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2kt Zm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWwz DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEwOC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw0DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjE0NC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWls eTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjE4MC4wcHQ7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDM6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIxNi4wcHQ7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw3DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjI1Mi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjI4OC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMyNC4wcHQ7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJ bXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3Qg bDQNCgl7bXNvLWxpc3QtaWQ6MTQyODgxNzEzODsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCglt c28tbGlzdC10ZW1wbGF0ZS1pZHM6LTExODU3NDM0OTAgMTM0ODA3NTUzIDEzNDgwNzU1NSAxMzQ4 MDc1NTcgMTM0ODA3NTUzIDEzNDgwNzU1NSAxMzQ4MDc1NTcgMTM0ODA3NTUzIDEzNDgwNzU1NSAx MzQ4MDc1NTc7fQ0KQGxpc3QgbDQ6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJ Zm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGw0OmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4 LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGw0OmxldmVsMw0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBs NDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDQ6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDQ6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4w cHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGw0OmxldmVsNw0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsNDpsZXZlbDgN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpA bGlzdCBsNDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpX aW5nZGluZ3M7fQ0KQGxpc3QgbDUNCgl7bXNvLWxpc3QtaWQ6MTg3MDA5NjM0MzsNCgltc28tbGlz dC10ZW1wbGF0ZS1pZHM6LTYzMTYxNTI5MDt9DQpAbGlzdCBsNTpsZXZlbDENCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1p bHk6U3ltYm9sO30NCkBsaXN0IGw1OmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpi dWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDo3Mi4wcHQ7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDU6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEwOC4wcHQ7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDU6bGV2ZWw0DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjE0NC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDU6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjE4MC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDU6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIxNi4wcHQ7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJ bXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3Qg bDU6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjI1Mi4wcHQ7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDU6bGV2ZWw4DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjI4OC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDU6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjMyNC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowY207 fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLUdCIiBsaW5rPSJibHVlIiB2 bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFyZWFzdC1sYW5ndWFn ZTpFTi1VUyI+SGkgS2F0aGxlZW4sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVO LVVTIj5UaGFua3MgYWdhaW4gZm9yIHlvdXIgcmV2aWV3ITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O21zby1m YXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFyZWFz dC1sYW5ndWFnZTpFTi1VUyI+SeKAmXZlIHNwbGl0IHlvdXIgZWRpdG9yaWFsIHN1Z2dlc3Rpb25z IGluIHRvIGEgYnVuY2ggb2YgUFJzLCBvbmUgcGVyIGltcGFjdGVkIHNlY3Rpb24uPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPknigJl2ZSBkb25lIHNvIGluIG9y ZGVyIHRvIGNvbnN0cmFpbiB0aGUgc2NvcGUgYW5kIGVhc2UgcmV2aWV3LCBidXQgYWxzbyBiZWNh dXNlIHlvdSBtZW50aW9uZWQgeW91IHdhbnRlZCB0byBkbyBhbm90aGVyIHBhc3Mgb24gc29tZSBv ZiB0aGUgc2VjdGlvbnMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t VVMiPlNvIEkgZ3Vlc3MgeW91IGNhbiBwcm92aWRlIGFueSBmdXJ0aGVyIHN1Z2dlc3Rpb24gZGly ZWN0bHkgb24gdGhlIFBScz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PkhlcmXigJlzIHRoZSBsaXN0OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCBzdHlsZT0ibWFy Z2luLXRvcDowY20iIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MGNtO21zby1saXN0Omw0IGxldmVsMSBsZm8zIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PGEgaHJlZj0i aHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUvcHVsbC8xMTciPmh0 dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMtd2cvYXJjaGl0ZWN0dXJlL3B1bGwvMTE3PC9hPjxv OnA+PC9vOnA+PC9zcGFuPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MGNtO21zby1saXN0Omw0IGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PGEgaHJlZj0iaHR0cHM6 Ly9naXRodWIuY29tL2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUvcHVsbC8xMTgiPmh0dHBzOi8v Z2l0aHViLmNvbS9pZXRmLXJhdHMtd2cvYXJjaGl0ZWN0dXJlL3B1bGwvMTE4PC9hPjxvOnA+PC9v OnA+PC9zcGFuPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MGNtO21zby1saXN0Omw0IGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PGEgaHJlZj0iaHR0cHM6Ly9naXRo dWIuY29tL2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUvcHVsbC8xMTkiPmh0dHBzOi8vZ2l0aHVi LmNvbS9pZXRmLXJhdHMtd2cvYXJjaGl0ZWN0dXJlL3B1bGwvMTE5PC9hPjxvOnA+PC9vOnA+PC9z cGFuPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MGNtO21zby1saXN0Omw0IGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29t L2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUvcHVsbC8xMjAiPmh0dHBzOi8vZ2l0aHViLmNvbS9p ZXRmLXJhdHMtd2cvYXJjaGl0ZWN0dXJlL3B1bGwvMTIwPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwv bGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGNtO21z by1saXN0Omw0IGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL2lldGYt cmF0cy13Zy9hcmNoaXRlY3R1cmUvcHVsbC8xMjEiPmh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJh dHMtd2cvYXJjaGl0ZWN0dXJlL3B1bGwvMTIxPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PGxp IGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGNtO21zby1saXN0 Omw0IGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFyZWFz dC1sYW5ndWFnZTpFTi1VUyI+PGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy13 Zy9hcmNoaXRlY3R1cmUvcHVsbC8xMjIiPmh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMtd2cv YXJjaGl0ZWN0dXJlL3B1bGwvMTIyPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O21zby1mYXJl YXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0ibGkxIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkkgaGF2ZSBtYWRlIElzc3VlcyBmb3IgdGhvc2UgY29t bWVudHMgdGhhdCBuZWVkZWQgc29tZSBtb3JlIGRpc2N1c3Npb246PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9wOjBjbSIgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9 InAxIiBzdHlsZT0ibXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzUiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PGEg aHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUvaXNzdWVz LzExNCI+aHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUvaXNzdWVz LzExNDwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjxsaSBjbGFzcz0icDEiIHN0eWxlPSJtc28t bGlzdDpsMCBsZXZlbDEgbGZvNSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48YSBocmVmPSJodHRwczovL2dp dGh1Yi5jb20vaWV0Zi1yYXRzLXdnL2FyY2hpdGVjdHVyZS9pc3N1ZXMvMTE1Ij5odHRwczovL2dp dGh1Yi5jb20vaWV0Zi1yYXRzLXdnL2FyY2hpdGVjdHVyZS9pc3N1ZXMvMTE1PC9hPjxvOnA+PC9v OnA+PC9zcGFuPjwvbGk+PGxpIGNsYXNzPSJwMSIgc3R5bGU9Im1zby1saXN0OmwwIGxldmVsMSBs Zm81Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJh dHMtd2cvYXJjaGl0ZWN0dXJlL2lzc3Vlcy8xMTYiPmh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJh dHMtd2cvYXJjaGl0ZWN0dXJlL2lzc3Vlcy8xMTY8L2E+PG86cD48L286cD48L3NwYW4+PC9saT48 L3VsPg0KPHAgY2xhc3M9ImxpMSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0ibGkxIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkFuZCBmaW5hbGx5IGEg Y291cGxlIG9mIHRoaW5ncyBJ4oCZbSBoYXZpbmcgYSBiaXQgb2YgdHJvdWJsZSB1bmRlcnN0YW5k aW5nLCBmb3Igd2hpY2ggSSBuZWVkIHlvdXIgaGVscDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlNlY3Rpb24gNC4y IOKAnFR3byBUeXBlcyBvZiBFbnZpcm9ubWVudHMgb2YgYW4gQXR0ZXN0ZXLigJ0gKEEpPC9zcGFu PjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5JIGZpbmQgdGhlIGZv bGxvd2luZyBncm91cGluZyBhIGJpdCBjb25mdXNpbmc6PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O21zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLVVTIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7UGxhY2VzIHRoYXQgQXR0ZXN0aW5nIEVu dmlyb25tZW50cyBjYW4gZXhpc3QgaW5jbHVkZSBUcnVzdGVkIEV4ZWN1dGlvbiBFbnZpcm9ubWVu dHMgKFRFRSksIGVtYmVkZGVkIFNlY3VyZSBFbGVtZW50cyAoZVNFKSwgYW5kIEJJT1MgZmlybXdh cmUuJnF1b3Q7PC9zcGFuPjwvaT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVT Ij5UaGlzIGhhcyBhbiBhdHRlc3RpbmcgZW52aXJvbm1lbnQgYXMgYSBwcm9jZXNzb3IsIGFuIGVs ZW1lbnQsIGFuZCBhcyBjb21waWxlZCZuYnNwO2NvZGUuJm5ic3A7IFRoYXQgZG9lc24ndCBzZWVt IHJpZ2h0LCBlc3BlY2lhbGx5IHdoZW4geW91IHJlZmVyIHRvIHRoZSBhdHRlc3RpbmcNCiBlbnZp cm9ubWVudCBhcyBhICZxdW90O3BsYWNlJnF1b3Q7LiZuYnNwOyBEbyB5b3UgbWVhbiB3aGVyZSBC SU9TIGlzIGV4ZWN1dGVkIHBlcmhhcHM/Jm5ic3A7IEkgd291bGQgZXhwZWN0IGEgVEVFIGFuZCBt YXliZSBvdGhlciBjb21wb25lbnRzIHdoZXJlIHNlY3VyaXR5IGZ1bmN0aW9ucyBhcmUgb2ZmbG9h ZGVkLCB3aGljaCBpcyBpbiBzb21lIGNhc2VzIHRvIGEgcHJvY2Vzc29yIG90aGVyIHRoYW4gYSBU RUUgbGlrZSBhIEdQVSAoSSdtIG5vdCBtYWtpbmcgYSByZWNvbW1lbmRhdGlvbg0KIHRvIGRvIHRo YXQgaGVyZSwmbmJzcDtqdXN0IHN0YXRpbmcgd2hhdCBpcyBoYXBwZW5pbmcgaW4gZWNvc3lzdGVt cyB0aGF0IGV4aXN0KS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1V UyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkhl cmUgSSBkb27igJl0IHVuZGVyc3RhbmQgeW91ciBjb21tZW50IGZ1bGx5IGFuZCB0aGVyZWZvcmUg SSBmaW5kIGl0IGRpZmZpY3VsdCB0byBmb3JtdWxhdGUgYW4gYWN0aW9uLiZuYnNwOyBDb3VsZCB5 b3UgcHJvdmlkZSBhIHN1Z2dlc3Rpb24/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5TZWN0aW9uIDcuNC4gVmVyaWZp ZXI8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O21zby1mYXJlYXN0LWxh bmd1YWdlOkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlRoZW4g d2l0aCB0aGUgZm9sbG93aW5nIHNlbnRlbmNlLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0O3RleHQtaW5kZW50OjM2LjBwdCI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPiZxdW90O1RoZSBjb21wb25lbnQgdGhhdCBp cyBpbXBsaWNpdGx5IHRydXN0ZWQgaXMgb2Z0ZW4gcmVmZXJyZWQgdG8gYXMgYSBSb290IG9mIFRy dXN0LiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvaT48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkkgdGhp bmsgaXQgd291bGQgYmUgd29ydGggbWVudGlvbmluZyB0aGF0IGEgaGFyZHdhcmUgUm9UIGlzIGlt bXV0YWJsZSBhbmQgbXV0YWJsZSBSb1RzIGluIHNvZnR3YXJlIGFyZSBhbHNvIHBvc3NpYmxlLCBv ZmZlcmluZyBkaWZmZXJlbnQgbGV2ZWxzIGZvciBhbg0KIGFzc3VyYW5jZSBvZiB0cnVzdC9zZWN1 cml0eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkhlcmUgeW91IG1l YW4NCjxpPnB1cmVseTwvaT4gc29mdHdhcmUgUm9Ucz8mbmJzcDsgSeKAmW0gbm90IGF3YXJlIG9m IGFueSwgY2FuIHlvdSBwcm92aWRlIGFuIGV4YW1wbGUgcGxlYXNlPzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDttc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+VGhhdCBzaG91bGQgYmUgYWxsLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtt c28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+Q2hlZXJzLCB0aGFua3MhPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O21z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5PbiAyMi8wNS8yMDIwLCAxOToyMCwg JnF1b3Q7UkFUUyBvbiBiZWhhbGYgb2YgS2F0aGxlZW4gTW9yaWFydHkmcXVvdDsgJmx0OzxhIGhy ZWY9Im1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmciPnJhdHMtYm91bmNlc0BpZXRmLm9yZzwv YT4gb24gYmVoYWxmIG9mDQo8YSBocmVmPSJtYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBn bWFpbC5jb20iPmthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQiPkdyZWV0aW5ncyE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5JIGdvdCBhcyBmYXIgYXMgSSBj b3VsZCB3aXRoIHRpbWUgY29uc3RyYWludHMgdGhyb3VnaCB0aGUgcmVzdCBvZiB0aGUgZG9jdW1l bnQuJm5ic3A7IFRoZXJlIGFyZSBhIGZldyBzZWN0aW9ucyBJJ2xsIGxpa2VseSBnbyBiYWNrIG92 ZXIgYWdhaW4gYXMgSSB3YXMgc2hvcnQgb24gdGltZSB3aGVuIHJldmlld2luZyB0aGVtLA0KIGJ1 dCBkbyBob3BlIHRoaXMgaXMgaGVscGZ1bCB0b3dhcmRzIGltcHJvdmluZyZuYnNwO3RoZSBkb2N1 bWVudC4uJm5ic3A7IFRoaXMgcmV2aWV3IGlzIGZyb20gdGhlIGVkaXRvcnMgcmV2aXNpb24gb24g Z2l0aHViIHRoYXQgSSBzdGFydGVkIG15IHJldmlldyBlYXJsaWVyIGludCBoZSB3ZWVrLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48 YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQiPlNlY3Rpb24gNC4yOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5JIGZpbmQgdGhlIGZvbGxvd2luZyBncm91cGlu ZyBhIGJpdCBjb25mdXNpbmc6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZxdW90O1BsYWNlcyB0aGF0IEF0dGVzdGluZyBFbnZpcm9u bWVudHMgY2FuIGV4aXN0IGluY2x1ZGUgVHJ1c3RlZCBFeGVjdXRpb24gRW52aXJvbm1lbnRzIChU RUUpLCBlbWJlZGRlZCBTZWN1cmUgRWxlbWVudHMgKGVTRSksIGFuZCBCSU9TIGZpcm13YXJlLiZx dW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdCI+VGhpcyBoYXMgYW4gYXR0ZXN0aW5nIGVudmlyb25tZW50IGFzIGEg cHJvY2Vzc29yLCBhbiBlbGVtZW50LCBhbmQgYXMgY29tcGlsZWQmbmJzcDtjb2RlLiZuYnNwOyBU aGF0IGRvZXNuJ3Qgc2VlbSByaWdodCwgZXNwZWNpYWxseSB3aGVuIHlvdSByZWZlciB0byB0aGUg YXR0ZXN0aW5nIGVudmlyb25tZW50IGFzIGEgJnF1b3Q7cGxhY2UmcXVvdDsuJm5ic3A7DQogRG8g eW91IG1lYW4gd2hlcmUgQklPUyBpcyBleGVjdXRlZCBwZXJoYXBzPyZuYnNwOyBJIHdvdWxkIGV4 cGVjdCBhIFRFRSBhbmQgbWF5YmUgb3RoZXIgY29tcG9uZW50cyB3aGVyZSBzZWN1cml0eSBmdW5j dGlvbnMgYXJlIG9mZmxvYWRlZCwgd2hpY2ggaXMgaW4gc29tZSBjYXNlcyB0byBhIHByb2Nlc3Nv ciBvdGhlciB0aGFuIGEgVEVFIGxpa2UgYSBHUFUgKEknbSBub3QgbWFraW5nIGEgcmVjb21tZW5k YXRpb24gdG8gZG8gdGhhdCBoZXJlLCZuYnNwO2p1c3Qgc3RhdGluZw0KIHdoYXQgaXMgaGFwcGVu aW5nIGluIGVjb3N5c3RlbXMgdGhhdCBleGlzdCkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5UaGUgZm9sbG93aW5n IHRleHQgaXMgYSBsaXR0bGUgY29uZnVzaW5nLCBpbiBwYXJ0aWN1bGFyLCB0aGUgbGFzdCBzZW50 ZW5jZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdCI+JnF1b3Q7QW4gZXhlY3V0aW9uIGVudmlyb25tZW50IG1heSBub3QsIGJ5IGRlZmF1 bHQsIGJlIGNhcGFibGUgb2YgY2xhaW1zIGNvbGxlY3Rpb24gZm9yIGEgZ2l2ZW4gVGFyZ2V0IEVu dmlyb25tZW50LiBBdHRlc3RpbmcgRW52aXJvbm1lbnRzIGFyZSBkZXNpZ25lZCBzcGVjaWZpY2Fs bHkgd2l0aCBjbGFpbXMgY29sbGVjdGlvbg0KIGluIG1pbmQuJnF1b3Q7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5J ZiB0aGUgYXR0ZXN0aW5nIGVudmlyb25tZW50IGlzIGEgcGxhY2UsIFRFRXMgYW5kIG90aGVyIHBy b2Nlc3NvcnMgd2VyZSBub3QgbmVjZXNzYXJpbHkgZGVzaWduZWQgd2l0aCBjbGFpbXMgaW4gbWlu ZC4mbmJzcDsgSWYgeW91IGNhbiBoZWxwIHRvIGV4cGxhaW4gYW4gYXR0ZXN0aW5nIGVudmlyb25t ZW50IGJldHRlciwNCiBJIGNhbiBoZWxwIHRvIHBocmFzZSBpdCBtb3JlIGNsZWFybHkgdG8gY29u dmV5IHRoZSBpbnRlbmRlZCBzZXQgb2YgcG9pbnRzIGFzIEkgdGhpbmsgdGhlcmUgYXJlIHNldmVy YWwuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0Ij5TZWN0aW9uIDQuMzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5Db25zaWRlciBjaGFuZ2luZyBmcm9tOjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 Ij4mcXVvdDtCeSBkZWZpbml0aW9uLCB0aGUgQXR0ZXN0ZXIgcm9sZSB0YWtlcyBvbiB0aGUgZHV0 eSB0byBjcmVhdGUgRXZpZGVuY2UuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPlRvOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4mcXVvdDtCeSBkZWZpbml0aW9u LCB0aGUgQXR0ZXN0ZXIgcm9sZSBjcmVhdGVzIEV2aWRlbmNlLiZxdW90OzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+ VGhlIGZvbGxvd2luZyBzZW50ZW5jZSBpcyBhIHJ1biBvbiBhbmQgSSB0aGluayBzb21lIGFkZGl0 aW9uYWwgaW5mb3JtYXRpb24gd2lsbCBoZWxwIHByb3ZpZGUgY2xhcml0eS4gSSBkb24ndCB0aGlu ayBpdCdzIHRoZSByb2xlIHRoYXQgaXMgY29tcG9zZWQgb2YgbmVzdCBlbnZpcm9ubWVudHMuJm5i c3A7IEN1cnJlbnQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQiPiZxdW90O1RoZSBmYWN0IHRoYXQgYW4gQXR0ZXN0ZXIgcm9sZSBpcyBj b21wb3NlZCBvZiBlbnZpcm9ubWVudHMgdGhhdCBjYW4gYmUgbmVzdGVkIG9yIHN0YWdlZCBhZGRz IGNvbXBsZXhpdHkgdG8gdGhlIGFyY2hpdGVjdHVyYWwgbGF5b3V0IG9mIGhvdyBhbiBBdHRlc3Rl ciBjYW4gYmUgY29tcG9zZWQgYW5kIHRoZXJlZm9yZQ0KIGhhcyB0byBjb25kdWN0IHRoZSBDbGFp bXMgY29sbGVjdGlvbiBpbiBvcmRlciB0byBjcmVhdGUgYmVsaWV2YWJsZSBhdHRlc3RhdGlvbiBF dmlkZW5jZS4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdCI+SG93IGFib3V0OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4mcXVvdDtBbiBBdHRlc3RlciBtYXkgYmUg b25lIG9yIG1vcmUgbmVzdGVkIG9yIHN0YWdlZCBlbnZpcm9ubWVudHMsIGFkZGluZyBjb21wbGV4 aXR5IHRvIHRoZSBhcmNoaXRlY3R1cmFsIHN0cnVjdHVyZS4mbmJzcDsgVGhlIHVuaWZ5aW5nIGNv bXBvbmVudCBpcyB0aGUgcm9vdCBvZiB0cnVzdCBhbmQgdGhlIG5lc3RlZCwgc3RhZ2VkLA0KIG9y IGNoYWluZWQgYXR0ZXN0YXRpb25zIHByb2R1Y2VkLiZuYnNwOyBUaGUgbmVzdGVkIG9yIGNoYWlu ZWQgc3RydWN0dXJlIHNob3VsZCBpbmNsdWRlIGNsYWltcywgY29sbGVjdGVkIGJ5IHRoZSBhdHRl c3RlciB0byBhaWQgaW4gdGhlIGFzc3VyYW5jZSBvciBiZWxpZXZhYmlsaXR5IG9mIHRoZSBhdHRl c3RhdGlvbiBFdmlkZW5jZS4mcXVvdDsmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPlRoZSBmb2xsb3dpbmcg c2VudGVuY2Ugc2hvdWxkIGJlIGJyb2tlbiBpbnRvIHR3bzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+JnF1b3Q7VGhpcyBleGFtcGxl IGNvdWxkIGJlIGV4dGVuZGVkIGZ1cnRoZXIgYnksIHNheSwgbWFraW5nIHRoZSBrZXJuZWwgYmVj b21lIGFub3RoZXIgQXR0ZXN0aW5nIEVudmlyb25tZW50IGZvciBhbiBhcHBsaWNhdGlvbiBhcyBh bm90aGVyIFRhcmdldCBFbnZpcm9ubWVudCwgcmVzdWx0aW5nIGluIGEgdGhpcmQgc2V0DQogb2Yg Q2xhaW1zIGluIHRoZSBFdmlkZW5jZSBwZXJ0YWluaW5nIHRvIHRoYXQgYXBwbGljYXRpb24uJnF1 b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQiPlByb3Bvc2VkOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0Ij4mcXVvdDtUaGlzIGV4YW1wbGUgY291bGQgYmUgZXh0ZW5kZWQg ZnVydGhlciBieSBtYWtpbmcgdGhlIGtlcm5lbCBiZWNvbWUgYW5vdGhlciBBdHRlc3RpbmcgRW52 aXJvbm1lbnQgZm9yIGFuIGFwcGxpY2F0aW9uIGFzIGFub3RoZXIgVGFyZ2V0IEVudmlyb25tZW50 LiBUaGlzIHJlc3VsdHMgaW4gYSB0aGlyZCBzZXQgb2YNCiBDbGFpbXMgaW4gdGhlIEV2aWRlbmNl IHBlcnRhaW5pbmcgdG8gdGhhdCBhcHBsaWNhdGlvbi4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0Ij5Ib3cgYWJvdXQgY2hhbmdpbmcgdGhlIGZvbGxvd2luZyBzZW50ZW5jZSBmcm9tOjxicj4N CiZxdW90O0Ftb25nIHRoZXNlIHJvdXRlcnMsIHRoZXJlIGlzIG9ubHkgb25lIG1haW4gcm91dGVy IHRoYXQgY29ubmVjdHMgdG8gdGhlIFZlcmlmaWVyLiAmcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+VG86PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZxdW90O0Eg bXVsdGktY2hhc3NpcyByb3V0ZXIsIHByb3ZpZGVzIGEgbWFuYWdlbWVudCBwb2ludCBhbmQgaXMg dGhlIG9ubHkgb25lIHRoYXQgY29ubmVjdHMgdG8gdGhlIFZlcmlmaWVyLiAmcXVvdDs8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQiPkZvciB0aGUgZm9sbG93aW5nIHNlbnRlbmNlLCB0cnlpbmcgdG8gcmVtb3ZlIHRoZSB1 c2Ugb2YgYSB3b3JkIHR3aWNlIGluIGEgcm93IGFuZCBjb252ZXkgdGhlIHNhbWUgaW50ZW50Ljxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 Ij5PbGQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQiPiZxdW90O0FmdGVyIGNvbGxlY3RpbmcgdGhlIEV2aWRlbmNlIG9mIG90aGVyIEF0 dGVzdGVycywgdGhpcyBpbnNpZGUgVmVyaWZpZXIgdmVyaWZpZXMgdGhlbSB1c2luZyBFbmRvcnNl bWVudHMgYW5kIEFwcHJhaXNhbCBQb2xpY2llcyAob2J0YWluZWQgdGhlIHNhbWUgd2F5IGFzIGFu eSBvdGhlciBWZXJpZmllciksIHRvDQogZ2VuZXJhdGUgQXR0ZXN0YXRpb24gUmVzdWx0cy4mcXVv dDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdCI+UHJvcG9zZWQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQiPiZxdW90O0FmdGVyIGNvbGxlY3RpbmcgdGhlIEV2aWRlbmNlIG9m IG90aGVyIEF0dGVzdGVycywgdGhpcyBpbnNpZGUgVmVyaWZpZXIgdXNlcyBFbmRvcnNlbWVudHMg YW5kIEFwcHJhaXNhbCBQb2xpY2llcyAob2J0YWluZWQgdGhlIHNhbWUgd2F5IGFzIGFueSBvdGhl ciBWZXJpZmllcikgaW4gdGhlIHZlcmlmaWNhdGlvbg0KIHByb2Nlc3MgdG8gZ2VuZXJhdGUgQXR0 ZXN0YXRpb24gUmVzdWx0cy4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPkkgbWF5IHRyeSBhbm90aGVyIHBh c3MgYXQgc2VjdGlvbiA0IHRvIGltcHJvdmUgcmVhZGFiaWxpdHkuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5TZWN0 aW9uIDUsJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQiPkNvbnNpZGVyIGJyZWFraW5nIHRoaXMgaW50byAyIHNlbnRlbmNlcywg ZnJvbTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdCI+JnF1b3Q7VGhpcyBzZWN0aW9uIGluY2x1ZGVzIHNvbWUgcmVmZXJlbmNlIG1vZGVs cywgYnV0IHRoaXMgaXMgbm90IGludGVuZGVkIHRvIGJlIGEgcmVzdHJpY3RpdmUgbGlzdCwgYW5k IG90aGVyIHZhcmlhdGlvbnMgbWF5IGV4aXN0LiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5Ubzo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+JnF1b3Q7VGhpcyBz ZWN0aW9uIGluY2x1ZGVzIHNvbWUgcmVmZXJlbmNlIG1vZGVscy4gVGhpcyBpcyBub3QgaW50ZW5k ZWQgdG8gYmUgYSByZXN0cmljdGl2ZSBsaXN0LCBhbmQgb3RoZXIgdmFyaWF0aW9ucyBtYXkgZXhp c3QuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0Ij5TZWN0aW9uIDUuMTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5Ud28gcmVzdWx0IHdvcmRzIHRv Z2V0aGVyIGlzIG5vdCBuZWNlc3NhcnkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPkNoYW5nZSBmcm9tOjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4mcXVvdDtUaGUgc2Vj b25kIHdheSBpbiB3aGljaCB0aGUgcHJvY2VzcyBtYXkgZmFpbCBpcyB3aGVuIHRoZSByZXN1bHRp bmcgUmVzdWx0IGlzIGV4YW1pbmVkIGJ5IHRoZSBSZWx5aW5nIFBhcnR5LCBhbmQgYmFzZWQgdXBv biB0aGUgQXBwcmFpc2FsIFBvbGljeSwgdGhlIHJlc3VsdCBkb2VzIG5vdCBwYXNzIHRoZSBwb2xp Y3kuDQogJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQiPlRvOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0Ij4mcXVvdDtUaGUgc2Vjb25kIHdheSBpbiB3aGljaCB0aGUg cHJvY2VzcyBtYXkgZmFpbCBpcyB3aGVuIHRoZSBSZXN1bHQgaXMgZXhhbWluZWQgYnkgdGhlIFJl bHlpbmcgUGFydHksIGFuZCBiYXNlZCB1cG9uIHRoZSBBcHByYWlzYWwgUG9saWN5LCB0aGUgcmVz dWx0IGRvZXMgbm90IHBhc3MgdGhlIHBvbGljeS4gJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5JIHN1Z2dl c3QgbWFraW5nIHRoZSBsYXN0IHBhcmFncmFwaCB0aGUgc2Vjb25kIHBhcmFncmFwaC4mbmJzcDsg SXQncyBlYXNpZXIgdG8gcmVhZCB0aGFuIHRoZSBvdGhlcnMgYW5kIHByb3ZpZGVzIGFuIGludHJv ZHVjdGlvbiB0byB0aGUgbW9kZWwgYmVmb3JlIHlvdSBiZWdpbiB0YWxraW5nIGFib3V0IGhvdyBp dCBtaWdodA0KIGZhaWwuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4qKiBJIG1heSBjb21lIGJhY2sgdG8gdGhpcyBz ZWN0aW9uIHRvIHByb3ZpZGUgd29yZGluZyBzdWdnZXN0aW9ucy48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPlNlY3Rp b24gNS4yPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQiPkkgc3VnZ2VzdCBtb3ZpbmcgdGhlIGxhc3QgcGFyYWdyYXBoIHRvIHRoZSBmaXJz dCBpbiB0aGlzIGluc3RhbmNlLiZuYnNwOyBJdCBhbHNvIHByb3ZpZGVzIGEgbmljZSBoaWdoLWxl dmVsIG92ZXJ2aWV3LiZuYnNwOyBUaGUgY3VycmVudCBwYXJhZ3JhcGgmbmJzcDsxJmFtcDsyIGZs b3cgd2VsbCB0b2dldGhlciwgaGVuY2UgdGhpcyBvcmRlciBzdWdnZXN0aW9uLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dCI+VGhlIHRoaXJkIHBhcmFncmFwaCBpcyBhIHJlYWxseSBsb25nIHdheSBvZiBzdGF0aW5nIHRo YXQgaW50ZXJvcGVyYWJpbGl0eSBpcyByZXF1aXJlZC4mbmJzcDsgRW50aXRpZXMgbXVzdCBiZSBh YmxlIHRvIGNyZWF0ZSwgc2VuZCwgcmVjZWl2ZSwgYW5kIHByb2Nlc3MgZGF0YSAoaGVuY2UgdGhl IG5lZWQgZm9yIGEgc3RhbmRhcmQpLiZuYnNwOw0KIEl0J3MgZmluZSwgYnV0IGNvdWxkIGJlIHNo b3J0ZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0Ij5TZWN0aW9uIDUuMzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+T0xEOjxicj4NCiZxdW90O09uZSB2 YXJpYXRpb24gb2YgdGhlIGJhY2tncm91bmQtY2hlY2sgbW9kZWwgaXMgd2hlcmUgdGhlIFJlbHlp bmcgUGFydHkgYW5kIHRoZSBWZXJpZmllciBvbiB0aGUgc2FtZSBtYWNoaW5lLCBhbmQgc28gdGhl cmUgaXMgbm8gbmVlZCBmb3IgYSBwcm90b2NvbCBiZXR3ZWVuIHRoZSB0d28uJnF1b3Q7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPlBy b3Bvc2VkOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0Ij4mcXVvdDtPbmUgdmFyaWF0aW9uIG9mIHRoZSBiYWNrZ3JvdW5kLWNoZWNrIG1v ZGVsIGlzIHdoZXJlIHRoZSBSZWx5aW5nIFBhcnR5IGFuZCB0aGUgVmVyaWZpZXIgYXJlIG9uIHRo ZSBzYW1lIG1hY2hpbmUsJm5ic3A7cGVyZm9ybWluZyBib3RoIGZ1bmN0aW9ucyB0b2dldGhlci4m bmJzcDsgSW4gdGhpcyBjYXNlLCB0aGVyZSBpcyBubyBuZWVkDQogZm9yIGEgcHJvdG9jb2wgYmV0 d2VlbiB0aGUgdHdvLiZxdW90OyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5JIHRoaW5rIHRoZSBhZGRpdGlvbiBpcyBuZWNl c3Nhcnkgb3IgeW91IGNvdWxkIHNjcmF0Y2ggeW91ciBoZWFkIHdvbmRlcmluZyB3aHkgbm8gcHJv dG9jb2wgaXMgbmVlZGVkLiZuYnNwOyBJZiB0aGV5IGFyZSBzZXBhcmF0ZSBmdW5jdGlvbnMgb24g dGhlIHNhbWUgc3lzdGVtLCB5b3UnZCBuZWVkIHNvbWUgd2F5IGZvcg0KIHRoZSByZWx5aW5nIHBh cnR5IHRvIGFjY2VzcyB0aGUgcmVzdWx0cyBvZiB0aGUgdmVyaWZpZXIuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5U aGUgbmV4dCBzZW50ZW5jZSBjb3VsZCBiZW5lZml0IGZyb20gYmVpbmcgbWFkZSBpbnRvIHNldmVy YWwuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQiPk9MRDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdCI+JnF1b3Q7SXQgaXMgYWxzbyB3b3J0aCBwb2ludGluZyBvdXQgdGhhdCB0 aGUgY2hvaWNlIG9mIG1vZGVsIGlzIGdlbmVyYWxseSB1cCB0byB0aGUgUmVseWluZyBQYXJ0eSwg YW5kIHRoZSBzYW1lIGRldmljZSBtYXkgbmVlZCB0byBjcmVhdGUgRXZpZGVuY2UgZm9yIGRpZmZl cmVudCBSZWx5aW5nIFBhcnRpZXMgYW5kIGRpZmZlcmVudA0KIHVzZSBjYXNlcyAoZS5nLiwgYSBu ZXR3b3JrIGluZnJhc3RydWN0dXJlIGRldmljZSB0byBnYWluIGFjY2VzcyB0byB0aGUgbmV0d29y aywgYW5kIHRoZW4gYSBzZXJ2ZXIgaG9sZGluZyBjb25maWRlbnRpYWwgZGF0YSB0byBnZXQgYWNj ZXNzIHRvIHRoYXQgZGF0YSkuIEFzIHN1Y2gsIGJvdGggbW9kZWxzIG1heSBzaW11bHRhbmVvdXNs eSBiZSBpbiB1c2UgYnkgdGhlIHNhbWUgZGV2aWNlLiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+SWYgdGhl IHNlcnZlciBob2xkcyBjb25maWRlbnRpYWwgZGF0YSwgd2h5IGRvZXMgaXQgbmVlZCB0byBjcmVh dGUgZXZpZGVuY2UgdG8gYWNjZXNzIHRoZSBkYXRhPyZuYnNwOyBJJ20gbm90IGZvbGxvd2luZyB0 aGUgc2Vjb25kIGV4YW1wbGUgYXMgd3JpdHRlbiwgc28gbXkgcHJvcG9zZWQgdGV4dCBtYXkgbm90 IGJlIGFzDQogaW50ZW5kZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5Qcm9wb3NlZDo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+JnF1b3Q7SXQgaXMg YWxzbyB3b3J0aCBwb2ludGluZyBvdXQgdGhhdCB0aGUgY2hvaWNlIG9mIG1vZGVsIGlzIGdlbmVy YWxseSB1cCB0byB0aGUgUmVseWluZyBQYXJ0eS4mbmJzcDsgVGhlIHNhbWUgZGV2aWNlIG1heSBu ZWVkIHRvIGNyZWF0ZSBFdmlkZW5jZSBmb3IgZGlmZmVyZW50IFJlbHlpbmcgUGFydGllcyBhbmQv b3IgZGlmZmVyZW50DQogdXNlIGNhc2VzLiZuYnNwOyBGb3IgaW5zdGFuY2UsIGEgbmV0d29yayBp bmZyYXN0cnVjdHVyZSBkZXZpY2UgbWF5IGF0dGVzdCBldmlkZW5jZSB0byBnYWluIGFjY2VzcyB0 byB0aGUgbmV0d29yayBvciBhIHNlcnZlciBob2xkaW5nIGNvbmZpZGVudGlhbCBkYXRhJm5ic3A7 IG1heSByZXF1aXJlIGF0dGVzdGF0aW9ucyBvZiBldmlkZW5jZSB0byBnYWluIGFjY2VzcyB0byB0 aGUgZGF0YS4gQXMgc3VjaCwgYm90aCBtb2RlbHMgbWF5IHNpbXVsdGFuZW91c2x5IGJlIGluDQog dXNlIGJ5IHRoZSBzYW1lIGRldmljZS4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPlNlY3Rpb24gNjo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+ VGhlIGZpcnN0IDMgc2VudGVuY2VzIGFyZSBmaW5lLCBidXQgaWYgeW91IHdhbnRlZCB0byByZWR1 Y2UgaXQsIGl0IGNvdWxkIGJlIG9uZSBzZW50ZW5jZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Q3VycmVudDo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+JnF1b3Q7QW4g ZW50aXR5IGluIHRoZSBSQVRTIGFyY2hpdGVjdHVyZSBpbmNsdWRlcyBhdCBsZWFzdCBvbmUgb2Yg dGhlIHJvbGVzIGRlZmluZWQgaW4gdGhpcyBkb2N1bWVudC4gQXMgYSByZXN1bHQsIHRoZSBlbnRp dHkgY2FuIHBhcnRpY2lwYXRlIGFzIGEgY29uc3RpdHVlbnQgb2YgdGhlIFJBVFMgYXJjaGl0ZWN0 dXJlLg0KIEFkZGl0aW9uYWxseSwgYW4gZW50aXR5IGNhbiBhZ2dyZWdhdGUgbW9yZSB0aGFuIG9u ZSByb2xlIGludG8gaXRzZWxmLiAmcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+UHJvcG9zZWQ6PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZxdW90O0FuIGVudGl0 eSBpbiB0aGUgUkFUUyBhcmNoaXRlY3R1cmUgaW5jbHVkZXMgYXQgbGVhc3Qgb25lIFtvciBtb3Jl XSBvZiB0aGUgcm9sZXMgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50LiAmcXVvdDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+T3IgbW9y ZSBpcyByZWR1bmRhbnQsIHNvIHRoYXQgcmVhbGx5IGlzbid0IG5lY2Vzc2FyeSB0byBjb252ZXkg dGhlIHNhbWUgcG9pbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5UaGVuIHRoZSBsYXN0IHNlbnRlbmNlOjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5J J2QgY2hhbmdlIGl0IGEgbGl0dGxlIGZyb206PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZxdW90O0luIGVzc2VuY2UsIGFuIGVudGl0 eSB0aGF0IGNvbWJpbmVzIG1vcmUgdGhhbiBvbmUgcm9sZSBhbHNvIGNyZWF0ZXMgYW5kIGNvbnN1 bWVzIHRoZSBjb3JyZXNwb25kaW5nIGNvbmNlcHR1YWwgbWVzc2FnZXMgYXMgZGVmaW5lZCBpbiB0 aGlzIGRvY3VtZW50LiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0Ij5Ubzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+JnF1b3Q7SW4gZXNzZW5jZSwgYW4gZW50aXR5 IHRoYXQgY29tYmluZXMgbW9yZSB0aGFuIG9uZSByb2xlIG1heSBjcmVhdGUgYW5kIGNvbnN1bWUg dGhlIGNvcnJlc3BvbmRpbmcgY29uY2VwdHVhbCBtZXNzYWdlcyBhcyBkZWZpbmVkIGluIHRoaXMg ZG9jdW1lbnQuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5JdCBtaWdodCBub3QsIGl0IGNvdWxkIGJlIHRo ZSB2ZXJpZmllciBhbmQgcmVseWluZyBwYXJ0eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPlNlY3Rpb24gNTo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+ Q29uc2lkZXIgY2hhbmdpbmcgZnJvbTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+JnF1b3Q7VGhhdCBpcywgaXQgbWlnaHQgYXBwcmFp c2UgdGhlIHRydXN0d29ydGhpbmVzcyBvZiBhbiBhcHBsaWNhdGlvbiBjb21wb25lbnQsIG9yIG9w ZXJhdGluZyBzeXN0ZW0gY29tcG9uZW50IG9yIHNlcnZpY2UsIHVuZGVyIHRoZSBhc3N1bXB0aW9u IHRoYXQgaW5mb3JtYXRpb24gcHJvdmlkZWQgYWJvdXQgaXQgYnkNCiB0aGUgbG93ZXItbGF5ZXIg aHlwZXJ2aXNvciBvciBmaXJtd2FyZSBpcyB0cnVlLiAmcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+VG86PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZxdW90O1Ro YXQgaXMsIGl0IG1pZ2h0IGFwcHJhaXNlIHRoZSB0cnVzdHdvcnRoaW5lc3Mgb2YgYW4gYXBwbGlj YXRpb24gY29tcG9uZW50LCBvcGVyYXRpbmcgc3lzdGVtIGNvbXBvbmVudCwgb3Igc2VydmljZSB1 bmRlciB0aGUgYXNzdW1wdGlvbiB0aGF0IGluZm9ybWF0aW9uIHByb3ZpZGVkIGFib3V0IGl0IGJ5 IHRoZQ0KIGxvd2VyLWxheWVyIGh5cGVydmlzb3Igb3IgZmlybXdhcmUgaXMgdHJ1ZS4uICZxdW90 OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdCI+U2VjdGlvbiA3OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+SSdkIHNheSBpdCdzIHJlYWxs eSBhIHN0cm9uZ2VyIGxldmVsIG9mIGFzc3VyYW5jZSBvZiBzZWN1cml0eSByYXRoZXIgdGhhbiBh IHN0cm9uZ2VyIGxldmVsIG9mIHNlY3VyaXR5IGluIHRoZSBmb2xsb3dpbmc6PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZxdW90O0Eg c3Ryb25nZXIgbGV2ZWwgb2Ygc2VjdXJpdHkgY29tZXMgd2hlbiBpbmZvcm1hdGlvbiBjYW4gYmUg dm91Y2hlZCBmb3IgYnkgaGFyZHdhcmUgb3IgYnkgUk9NIGNvZGUsIGVzcGVjaWFsbHkgaWYgc3Vj aCBoYXJkd2FyZSBpcyBwaHlzaWNhbGx5IHJlc2lzdGFudCB0byBoYXJkd2FyZSB0YW1wZXJpbmcu ICZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdCI+VGhlbiB3aXRoIHRoZSBmb2xsb3dpbmcgc2VudGVuY2UsPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQi PiZxdW90O1RoZSBjb21wb25lbnQgdGhhdCBpcyBpbXBsaWNpdGx5IHRydXN0ZWQgaXMgb2Z0ZW4g cmVmZXJyZWQgdG8gYXMgYSBSb290IG9mIFRydXN0LiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5JIHRoaW5rIGl0IHdvdWxk IGJlIHdvcnRoIG1lbnRpb25pbmcgdGhhdCBhIGhhcmR3YXJlIFJvVCBpcyBpbW11dGFibGUgYW5k IG11dGFibGUgUm9UcyBpbiBzb2Z0d2FyZSBhcmUgYWxzbyBwb3NzaWJsZSwgb2ZmZXJpbmcgZGlm ZmVyZW50IGxldmVscyBmb3IgYW4gYXNzdXJhbmNlIG9mIHRydXN0L3NlY3VyaXR5LjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdCI+U2VjdGlvbiA5LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+U2luY2UgUk9MSUUgW1JGQzgzMjJdIGhhcyBi ZWVuIGFkZGVkIHRvIFNDQVAyLjAsIGl0IHdvdWxkIGJlIGdvb2QgdG8gbGlzdCB0aGF0IGFzIGFu IG9wdGlvbiBzaW5jZSBhIGxvdCBvZiB0aW1lIGFuZCBlZmZvcnQgd2VudCBpbnRvIGhvdyB0byBz ZWN1cmUgdGhlIGV4Y2hhbmdlIG9mIGZvcm1hdHRlZCZuYnNwO2RhdGENCiBmb3IgdGhhdCBwcm90 b2NvbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQiPlNlY3Rpb24gMTEuIFByaXZhY3k8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+VGhpcyBpcyBhIGdvb2Qg c3RhcnQuJm5ic3A7IFJlbW90ZSBhdHRlc3RhdGlvbiBhbHNvIHByb3ZpZGVzIGEgd2F5IHRvIHBy b2ZpbGUgc3lzdGVtcyBhcyB3ZWxsIGFzIHRoZSB1c2VyIGJlaGluZCB0aGF0IHN5c3RlbS4mbmJz cDsgSWYgYXR0ZXN0YXRpb24gcmVzdWx0cyBnbyBoaWdoZXIgaW4gdGhlIHN0YWNrIHRvIGluY2x1 ZGUNCiBjb250YWluZXJzIGFuZCBhcHBsaWNhdGlvbnMsIGl0IGNvdWxkIHJldmVhbCBldmVuIG1v cmUgYWJvdXQgYSBzeXN0ZW0gb3IgdXNlci4mbmJzcDsgVGhlIHNjb3BlIG9mIGFjY2VzcyBuZWVk cyB0byBiZSBlbXBoYXNpemVkLCBpbmNsdWRpbmcgdGhlIGFkbWluaXN0cmF0b3JzIGFjY2VzcyB0 byBkYXRhIChvciByZXN0cmljdGlvbnMpLiZuYnNwOyBJZiB0aGVyZSBpcyBhIHdheSB0byBtYWtl IGluZmVyZW5jZXMgYWJvdXQgYXR0ZXN0YXRpb25zIGZyb20gdGhlaXIgcHJvY2Vzc2luZywNCiB0 aGF0IHNob3VsZCBiZSBub3RlZCBhcyB3ZWxsLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+U2VjdGlvbiAxMjo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+ VGhpcyB3aWxsIG5lZWQgdG8gc3RhdGUgYW4gZXhwbGljaXQgcmVxdWlyZW1lbnQgZm9yIHRyYW5z cG9ydCBlbmNyeXB0aW9uLiZuYnNwOyBJbiB0aGUgaW50cm9kdWN0b3J5IHBhcmFncmFwaCwgdGhl IHRleHQgaXMgYXMgZm9sbG93czo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdCI+JnF1b3Q7QW55IHNvbHV0aW9uIHRoYXQgY29udmV5cyBp bmZvcm1hdGlvbiB1c2VkIGZvciBzZWN1cml0eSBwdXJwb3Nlcywgd2hldGhlciBzdWNoIGluZm9y bWF0aW9uIGlzIGluIHRoZSBmb3JtIG9mIEV2aWRlbmNlLCBBdHRlc3RhdGlvbiBSZXN1bHRzLCBF bmRvcnNlbWVudHMsIG9yIEFwcHJhaXNhbCBQb2xpY3ksIG5lZWRzDQogdG8gc3VwcG9ydCBlbmQt dG8tZW5kIGludGVncml0eSBwcm90ZWN0aW9uIGFuZCByZXBsYXkgYXR0YWNrIHByZXZlbnRpb24s IGFuZCBvZnRlbiBhbHNvIG5lZWRzIHRvIHN1cHBvcnQgYWRkaXRpb25hbCBzZWN1cml0eSBwcm90 ZWN0aW9ucy4gRm9yIGV4YW1wbGUsIGFkZGl0aW9uYWwgbWVhbnMgb2YgYXV0aGVudGljYXRpb24s IGNvbmZpZGVudGlhbGl0eSwgaW50ZWdyaXR5LCByZXBsYXksIGRlbmlhbCBvZiBzZXJ2aWNlIGFu ZCBwcml2YWN5IHByb3RlY3Rpb24NCiBhcmUgbmVlZGVkIGluIG1hbnkgdXNlIGNhc2VzLiAmcXVv dDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdCI+UHJvcG9zZWQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQiPiZxdW90O0FueSBzb2x1dGlvbiB0aGF0IGNvbnZleXMgaW5mb3Jt YXRpb24gdXNlZCBmb3Igc2VjdXJpdHkgcHVycG9zZXMsIHdoZXRoZXIgc3VjaCBpbmZvcm1hdGlv biBpcyBpbiB0aGUgZm9ybSBvZiBFdmlkZW5jZSwgQXR0ZXN0YXRpb24gUmVzdWx0cywgRW5kb3Jz ZW1lbnRzLCBvciBBcHByYWlzYWwgUG9saWN5IG11c3QNCiBzdXBwb3J0IHRoZSBzZWN1cml0eSBw cm9wZXJ0aWVzIG9mIGNvbmZpZGVudGlhbGl0eSwgaW50ZWdyaXR5LCBhbmQgYXZhaWxhYmlsaXR5 LiZuYnNwOyBBIGNvbnZleWFuY2UgcHJvdG9jb2wgaW5jbHVkZXMgdGhlIHR5cGljYWwgdHJhbnNw b3J0IHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5vJm5ic3A7IGVuZC10by1lbmQgZW5jcnlw dGlvbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdCI+byZuYnNwOyBlbmQtdG8tZW5kIGludGVncml0eSBwcm90ZWN0aW9uLDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5vJm5i c3A7IHJlcGxheSBhdHRhY2sgcHJldmVudGlvbiwmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+byZuYnNwOyBkZW5pYWwgb2Yg c2VydmljZSBwcm90ZWN0aW9uLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0Ij5vJm5ic3A7IGF1dGhlbnRpY2F0aW9uLCZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5v Jm5ic3A7IGF1dGhvcml6YXRpb24sPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPm8mbmJzcDsgZmluZSBncmFpbmVkIGFjY2VzcyBjb250 cm9scywgYW5kPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQiPm8mbmJzcDsgbG9nZ2luZyBpbiBsaW5lIHdpdGggY3VycmVudCB0aHJlYXQg bW9kZWxzIGFuZCB6ZXJvIHRydXN0IGFyY2hpdGVjdHVyZXMuJnF1b3Q7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 Ij4tLQ0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0Ij5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPkthdGhsZWVuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KSU1QT1JU QU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50 cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJl IG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1t ZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBl cnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZv cm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_52EC2B8C578E49E5ADBD037B5F3738FFarmcom_-- From nobody Tue Jun 30 18:54:42 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 185913A08DB for ; Tue, 30 Jun 2020 18:54:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e7yaHS3RWwwS for ; Tue, 30 Jun 2020 18:54:39 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1CD23A08D7 for ; Tue, 30 Jun 2020 18:54:38 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 16EF8389BC for ; Tue, 30 Jun 2020 21:51:50 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id mv4WKpoF2Ck3 for ; Tue, 30 Jun 2020 21:51:49 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 3012B389BB for ; Tue, 30 Jun 2020 21:51:49 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 520D8476 for ; Tue, 30 Jun 2020 21:54:36 -0400 (EDT) From: Michael Richardson To: rats@ietf.org In-Reply-To: References: X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jul 2020 01:54:41 -0000 --=-=-= Content-Type: text/plain The architecture design team is working hard to come to consensus! We discussed for a few minutes an aside comment I had made about some text we just added about keeping sensitive Evidence private. Thomas Fossati has just included some of Kathleen's comments as a new ticket: > Kathleen's review [part 2](https://mailarchive.ietf.org/arch/msg/rats/7-UJAqHPMLhrGCk9tyh3JqGu8rw/) > Further privacy considerations: > * Remote attestation also provides a way to profile systems as well as > the user behind that system. > * If attestation results go higher in the stack to include containers > and applications, it could reveal even more about a system or user. ... I had asked in my aside, if the *ARCHITECTURE* document should create a requirement on Evidence (such as EAT) that it should *explicitely* flag when it contains PII. There are three pieces to this. Let's start with the Evidence container, and use as an example: 1) A claim about a device serial number, 2) or a claim about a device location a) PII could be implicit. The Verifier could just know this fact. That would be implicit: serial numbers are PII, device location is PII. Even if the device is a water-tower or a lighthouse. [cf: https://en.wikipedia.org/wiki/Lighthouse_and_naval_vessel_urban_legend ] The onus is now on the Verifier to ALWAYS know everything about every claim. Even ones it does not understand or use. This may have impacts upon audit trails, and who can see those audit trails. b) PII could be explicit. The Attester would mark the claim with a flag, "pii: true" or something when it fills out a claim with data that it thinks is PII. This allows the Attester to mark every piece of data that might be sensitive as such, even if they are newly standardized claims that not every Verifier even uses. {The lighthouse in the joke above, might decide that it's location is not PII} This relieves the Verifier from having to know the PII status of every item. (It is likely that "pii: true" would be the default, and pii:false would have to explicit, or rather, that the inverse: "public: true" would be what would be flagged) An Evidence container, (such as EAT) could standardize the above. We could debate this when we get to LC on EAT. Another container (PKIX) might not. This could be annoying. So part of my question was should we debate this now, and make this an architectural requirement for all containers? -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl777NwACgkQgItw+93Q 3WWOQAgAul/JwEu5WK+x51xzg38Qhdg7WgClr+lFjCOhOoZQfl46zRoKxvYljbj/ FTQiHEentB+NwyfwvAaRQaFBWi+U8+53j3SWcFZRdSzpDnDyzzhpcT0cDR8ITZQp aVW9iK6oKyvJkbTm5/ViVTKaZVoXWUEH055WyeT11H+RddXmf2bNOfhlFFE3Xse9 Ws1yIv6dAOnX0gTNMqI2MVTdE6FjCRIbpYGy1N2+3sbl+TubidSx+y+t37zWYv0Z SFvwuQKlzkVDF9ma45FEhl37fCqYiljauROeTVPUVlpfDcDif6axfql8bfPtOSxt mSmSpvcvVOWTZ0tMHak25yEn05bgWw== =WHtD -----END PGP SIGNATURE----- --=-=-=--