From nobody Mon Feb 1 07:42:19 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 138E43A1240; Mon, 1 Feb 2021 07:42:10 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Kyle Rose via Datatracker To: Cc: draft-ietf-stir-rph-emergency-services.all@ietf.org, last-call@ietf.org, stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.24.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161219413003.32284.2089280258287154037@ietfa.amsl.com> Reply-To: Kyle Rose Date: Mon, 01 Feb 2021 07:42:10 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-stir-rph-emergency-services-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Feb 2021 15:42:10 -0000 Reviewer: Kyle Rose Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document is ready: there are no security issues that have not been addressed in reviews of earlier documents (e.g., RFCs 8443, 8225, and 8224). From nobody Mon Feb 1 10:57:38 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E4B633A13CC; Mon, 1 Feb 2021 10:57:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Adam Montville via Datatracker To: Cc: draft-crocker-inreply-react.all@ietf.org, last-call@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.24.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161220585281.32342.13958539908528619271@ietfa.amsl.com> Reply-To: Adam Montville Date: Mon, 01 Feb 2021 10:57:32 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-crocker-inreply-react-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Feb 2021 18:57:33 -0000 Reviewer: Adam Montville Review result: Ready This draft (intended for experimental status) is ready. I agree with the authors that there is really nothing new at play here, with the exception of defining a "Reaction" Content-Disposition, with a Content-Type of "text/plain". The authors have included a Usability Considerations section and point out that certain behaviors need to be worked out in practice (i.e. should reactions be sent to all recipients of a message or only back to the author?). From nobody Mon Feb 1 10:59:12 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D56113A13D1; Mon, 1 Feb 2021 10:59:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qCPOCu4UrdK3; Mon, 1 Feb 2021 10:59:09 -0800 (PST) Received: from mail-oi1-x229.google.com (mail-oi1-x229.google.com [IPv6:2607:f8b0:4864:20::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D56333A13CC; Mon, 1 Feb 2021 10:59:09 -0800 (PST) Received: by mail-oi1-x229.google.com with SMTP id a77so19961544oii.4; Mon, 01 Feb 2021 10:59:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding:content-language; bh=qa5H2lJNjwU8dr4I5hOt7eYb8sCpy3kCyVvH4uneEYM=; b=cvnSRpFV1dzzWxK32PG2BIl1WMimJgkj9Kz24V2tcjuR++BGmPC4wSXu0utdEsqmWF o2KOEmsVXnKAtwi4uRu0dO+f/X7lP0McJYjcB1ZSF9LpmCtGqLmlvrc9Lc5mn/FXMbBp PUDwTb3+/nr07KYFiS8Pq+pTYlVcbxYnczPKhmGpP3D+ftvnM/K5SAZsF4CuuHQj29Ux yVxufpwkFrvE19UAUUNyzxr4aJ2Xmtqj5pIKDj/hJLNK8nnVF8JP4/u6cYzH7ATtch17 +lFdJMf+3E6vcGsnHGFA6jjBApJe9Po8CJGAc625P28fR0JUaT529427WWkalPK+qZ04 lP+Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=qa5H2lJNjwU8dr4I5hOt7eYb8sCpy3kCyVvH4uneEYM=; b=M6dXI0BiGTH1uPxvzToDlm39Y+TiD9b5kIHPmgGQgTyJbDml2HQHRHUcOr4TCJ4BfP CGKnaCG89hy9+covBntYnfIGTkCexdGR4KJr8PbhtR28AUJJ3z00Q9ZvxGTjGIZLjGLo XT7YQ6q+wnxmgqMv+qHwBCu+QJHM4BRD9wpJ8LaJ1a5yS89XfKEwrtQcfcX4LVuQgGwb NVVJGAUf6jt+DiUvuGQkAsJm24zvsVCLZffaks2cbBfLRpCWzZ6vfM4hROSu55mGyk6y kGUga6wZmU+DTRwkoqEI9BhzOZTC6KDOiqv+2DSuU//nKR9M3FqWOd/iviaXdsO32R1x eqXw== X-Gm-Message-State: AOAM533MdF3zXyx/wfrdb4vyshLNl8IEucoCFd2xFMqtZ3OlVukMtfrk X4p/9TZgxrqg/raIFi6J6V6e4D7MB2PamA== X-Google-Smtp-Source: ABdhPJwgwjlY6jsVge5P63cFF71X+0+xoq6L/+EF9HtYb16jg8yECrb7aWXXvz1gVTF+eA6uFVVc7g== X-Received: by 2002:aca:4f55:: with SMTP id d82mr191447oib.119.1612205949136; Mon, 01 Feb 2021 10:59:09 -0800 (PST) Received: from [192.168.0.109] (108-226-162-63.lightspeed.sntcca.sbcglobal.net. [108.226.162.63]) by smtp.gmail.com with ESMTPSA id 7sm4540749oiz.43.2021.02.01.10.59.08 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 01 Feb 2021 10:59:08 -0800 (PST) To: Adam Montville , secdir@ietf.org Cc: draft-crocker-inreply-react.all@ietf.org References: <161220585281.32342.13958539908528619271@ietfa.amsl.com> From: Dave Crocker Message-ID: Date: Mon, 1 Feb 2021 10:59:07 -0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.7.0 MIME-Version: 1.0 In-Reply-To: <161220585281.32342.13958539908528619271@ietfa.amsl.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: Re: [secdir] Secdir last call review of draft-crocker-inreply-react-07 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Feb 2021 18:59:11 -0000 On 2/1/2021 10:57 AM, Adam Montville via Datatracker wrote: > Reviewer: Adam Montville > Review result: Ready thanks! d/ -- Dave Crocker dcrocker@gmail.com 408.329.0791 Volunteer, Silicon Valley Chapter American Red Cross dave.crocker2@redcross.org From nobody Mon Feb 1 11:19:11 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E59163A1405; Mon, 1 Feb 2021 11:19:08 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Rich Salz via Datatracker To: Cc: draft-ietf-regext-rfc7483bis.all@ietf.org, last-call@ietf.org, regext@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.24.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161220714890.15602.5069607060927407996@ietfa.amsl.com> Reply-To: Rich Salz Date: Mon, 01 Feb 2021 11:19:08 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-regext-rfc7483bis-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Feb 2021 19:19:09 -0000 Reviewer: Rich Salz Review result: Has Nits I reviewed this document for the security directorate, which tries to review all IETF drafts From nobody Mon Feb 1 11:22:05 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85CEE3A13FB; Mon, 1 Feb 2021 11:21:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.349 X-Spam-Level: X-Spam-Status: No, score=-2.349 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DPJOfO935wcf; Mon, 1 Feb 2021 11:21:58 -0800 (PST) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 357073A13FE; Mon, 1 Feb 2021 11:21:58 -0800 (PST) Received: from pps.filterd (m0122330.ppops.net [127.0.0.1]) by mx0b-00190b01.pphosted.com (8.16.0.43/8.16.0.43) with SMTP id 111JK7Lv006063; Mon, 1 Feb 2021 19:21:57 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=VLAYVh2JG3ezx1zGNrIcOySfI0yuW0Ya0obg3XWJs1s=; b=ODilxyRzE0G3eVTWOWc5vx5JKBeBUM919VEWhPJBmdAmkpKwPh+lD5tLeA01UQGgMgyd kfCfwp0u1gHi/EXYeTp/IQh12zppPjO5nfGwR0vQfpsZTqbtx/CDYI3JGTHbbbR7vckS uMI67aPRulgx92r16RQeQ5qfq9A7wnLM0g3UbuMFyCJUd+6HK+SEbVHzTXQ2d4L49pjK tis8ZPcyVeTTuB9Rd60kJILffaDRWmhLYIRn6r52PP8d8IG//bwbs5EIEaa5BuOfRx11 W9nMh3x96Kmu++4FVW4/AE8kgj2gXpCLEMIwy0iAYratH1Wi/jzzhiDx0VmI3GAfUHku Mg== Received: from prod-mail-ppoint7 (a72-247-45-33.deploy.static.akamaitechnologies.com [72.247.45.33] (may be forged)) by mx0b-00190b01.pphosted.com with ESMTP id 36d0k9p8u1-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 01 Feb 2021 19:21:57 +0000 Received: from pps.filterd (prod-mail-ppoint7.akamai.com [127.0.0.1]) by prod-mail-ppoint7.akamai.com (8.16.0.43/8.16.0.43) with SMTP id 111JKDwR022127; Mon, 1 Feb 2021 14:21:56 -0500 Received: from email.msg.corp.akamai.com ([172.27.165.117]) by prod-mail-ppoint7.akamai.com with ESMTP id 36d3p35gav-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 01 Feb 2021 14:21:56 -0500 Received: from USTX2EX-DAG1MB1.msg.corp.akamai.com (172.27.165.119) by ustx2ex-dag1mb1.msg.corp.akamai.com (172.27.165.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 1 Feb 2021 13:21:55 -0600 Received: from USTX2EX-DAG1MB1.msg.corp.akamai.com ([172.27.165.119]) by ustx2ex-dag1mb1.msg.corp.akamai.com ([172.27.165.119]) with mapi id 15.00.1497.010; Mon, 1 Feb 2021 13:21:55 -0600 From: "Salz, Rich" To: "secdir@ietf.org" CC: "draft-ietf-regext-rfc7483bis.all@ietf.org" , "last-call@ietf.org" , "regext@ietf.org" Thread-Topic: [secdir] Secdir last call review of draft-ietf-regext-rfc7483bis-04 Thread-Index: AQHW+M8p6wNHzSbT9kaieyflaaSaZKpDviOA Date: Mon, 1 Feb 2021 19:21:55 +0000 Message-ID: <44F5BDA3-4488-4E76-84DE-87EBBFE4F0B0@akamai.com> References: <161220714890.15602.5069607060927407996@ietfa.amsl.com> In-Reply-To: <161220714890.15602.5069607060927407996@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.45.21011103 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.27.118.139] Content-Type: text/plain; charset="utf-8" Content-ID: <0083F4B1DC698541A70FA662ECE65268@akamai.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369, 18.0.737 definitions=2021-02-01_08:2021-01-29, 2021-02-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 suspectscore=0 mlxscore=0 spamscore=0 malwarescore=0 bulkscore=0 phishscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102010098 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369, 18.0.737 definitions=2021-02-01_08:2021-01-29, 2021-02-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 phishscore=0 lowpriorityscore=0 priorityscore=1501 adultscore=0 clxscore=1011 spamscore=0 suspectscore=0 mlxlogscore=999 mlxscore=0 impostorscore=0 malwarescore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102010101 X-Agari-Authentication-Results: mx.akamai.com; spf=${SPFResult} (sender IP is 72.247.45.33) smtp.mailfrom=rsalz@akamai.com smtp.helo=prod-mail-ppoint7 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-regext-rfc7483bis-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Feb 2021 19:22:00 -0000 QnJvd3NlciBjcmFzaGVkLiAgSGVyZSdzIHRoZSByZWFsIHJldmlldy4NCg0KSSBoYXZlIHJldmll d2VkIHRoaXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncyAN Cm9uZ29pbmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBkb2N1bWVudHMgYmVpbmcgcHJvY2Vz c2VkIGJ5IHRoZSANCklFU0cuICBUaGVzZSBjb21tZW50cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5 IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUgDQpzZWN1cml0eSBhcmVhIGRpcmVjdG9ycy4gIERvY3Vt ZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQgDQp0aGVzZSBjb21tZW50cyBq dXN0IGxpa2UgYW55IG90aGVyIGxhc3QgY2FsbCBjb21tZW50cy4NCg0KVGhlIHN1bW1hcnkgb2Yg dGhlIHJldmlldyBpcyByZWFkeSB3aXRoIG5pdHMuDQoNCkkgZXhwZWN0ZWQgdG8gc2VlIG1lbnRp b24gb2YgSFRUUFMsIGFzIG9wcG9zZWQgdG8gSFRUUCwgaW4gdGhlIHByb3RvY29sIGRlZmluaXRp b24uICBBdCBhIG1pbmltdW0NCglIVFRQUyBNVVNUIGJlIHVzZWQuDQpJbiB0aGUgc2VjdXJpdHkg Y29uc2lkZXJhdGlvbnMuDQoNCkkgd29uZGVyIGlmIHVzaW5nICI0NTEiIHN0YXR1cyBpcyB3b3J0 aHdoaWxlPyAgIEkgY2FuIGFjY2VwdCBlaXRoZXIgYW5zd2VyLg0KDQpBcyB0aGlzIGlzIGEgcHJv dG9jb2wgdHJhbnNsaXRlcmF0aW9uLCB0aGUgcmVmZXJlbmNlcyB0byBvdGhlciBSRkMncyBhbmQg c2VjdXJpdHkgY29uc2lkZXJzYXRpb25zIHNlZW0gb24tdGFyZ2V0Lg0KDQoNCu+7v09uIDIvMS8y MSwgMjoxOSBQTSwgIlJpY2ggU2FseiB2aWEgRGF0YXRyYWNrZXIiIDxub3JlcGx5QGlldGYub3Jn PiB3cm90ZToNCg0KICAgIFJldmlld2VyOiBSaWNoIFNhbHoNCiAgICBSZXZpZXcgcmVzdWx0OiBI YXMgTml0cw0KDQogICAgSSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGZvciB0aGUgc2VjdXJpdHkg ZGlyZWN0b3JhdGUsIHdoaWNoIHRyaWVzIHRvIHJldmlldyBhbGwgSUVURiBkcmFmdHMNCiANCg0K From nobody Mon Feb 1 11:30:28 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 445CE3A1403; Mon, 1 Feb 2021 11:30:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ar3nbLxNpweA; Mon, 1 Feb 2021 11:30:25 -0800 (PST) Received: from mail2.verisign.com (mail2.verisign.com [72.13.63.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97E813A1389; Mon, 1 Feb 2021 11:30:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=2332; q=dns/txt; s=VRSN; t=1612207826; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=flbR8VlC+82ixR4efRDqKLNTAmzdgRPo/kbD09G8rxE=; b=M7CnnHJ4AQMRo+eV3E9hFfZWfYpFCneWqIUfUi1IfGZUQ8oqV+nWKHsr hiIlfDTN134Iwa6EljXYCXeq5+Uujq6O4LwuYXZ+Rzf/LoLGAt1B4YN3/ cPYS01X1CMzzWqpBKqVznd32k9CNJlI4AiNnpHeN96wycLcqHYlYhSi5K ukzWBSohwl+SsWewNsmeyWxYsRJnDlYEUdC4yGHiReCGCBaW2GnoU2kuv PhHUzo7ql1eIe5eEwRpb1keQ1McWC9FZCFEutbwFyZkYtsFv6CmI3GKUs SEF1PYabvxUbxH2GXH3A/7DvjJOam2xuxo95XvaoH3C2TXS1tmFb1wyXg w==; IronPort-SDR: Y6S0ApVRjPxg7cFccw4W7jWYeQg0DrJoiZaV0v2u5UNy+nyr4HT8m/FYEDC4yl/iQ6rzKvwKhx x4J6qCeFv7TNMTmZAAHHdmssz1BGZFfFyU58Tv3pBmRMEY3ntqQ8FZzJY4dPRvf7ITwBiBAw/E wGZZn4Wm/ypH3JGecMBoCnKoZIpBZr+PVEIEvSBg9R1l50Xgtxd24BxdDnpi+ugNXohM/FxSVf hFyuAqb8oxUCxt47MiPdXHQaGy5JEVnB9e8AjLjLnRq3saIOrTkPNp4ngqEBAd8mMXegzZ6ujM Yr0= X-IronPort-AV: E=Sophos;i="5.79,393,1602547200"; d="scan'208";a="4513033" IronPort-PHdr: =?us-ascii?q?9a23=3AF/3RRhViSFvzFAgCKbpQGgx95BzV8LGtZVwlr6?= =?us-ascii?q?E/grcLSJyIuqrYZReDvKdThVPEFb/W9+hDw7KP9fy5CCpbsd3Y6SpKMMQVEU?= =?us-ascii?q?Nc1oNOx01oKfXGIHWzFOTtYS0+EZYKf35e1Fb/D3JoHt3jbUbZuHy44G1aMB?= =?us-ascii?q?z+MQ1oOra9QdaK3Iy42O+o5pLcfRhDiiajbrNuNhW2qhjautULjYd4Jas91x?= =?us-ascii?q?/ErmFGdulVym9kOE+fkwjh7cu04JJv7j5ctv08+8NCS6n2Y7g0QblFBzk6Lm?= =?us-ascii?q?4549HmuwPeRgWV/HscVWsWkhtMAwfb6RzxQ4n8vCjnuOdjwSeWJcL5Q6w6Vj?= =?us-ascii?q?Sk9KdrVQTniDwbOD4j8WHYkdJ/gaRGqx+8vRN/worUYIaINPpie67WYN0XSX?= =?us-ascii?q?ZdUstXSidMBJ63YYkSAOobJetWr5fzqUYSrRWwBgesCuHgyj5UiXH50qI3yP?= =?us-ascii?q?ghHhrE3AA8A94CrHbZodPoP6kSS+C1y6zIwC3NY/1U3jf97IzIfQ4nof6XQ7?= =?us-ascii?q?1/bcnRxVEyHA3YklqQrpDlPy+b2u8QtGWb9OpgVeWri24jtQ5xpCOgydkwhY?= =?us-ascii?q?nKnY8V1E7L9T94wIYuJN24R0h7bcS4H5tXsiGXLo17Sd4tTG90oig10KEGuY?= =?us-ascii?q?KlcygQzpQq3wLTZ+GJfoaG/B/uW+mfLSl4in95e7+zmxm8/Fakx+HiSsW50U?= =?us-ascii?q?pHoCRYntTNuX4Byxze59aHR/Z5+kqtxSqC2xzV5+pZL040kq/bJIQgwr42jp?= =?us-ascii?q?cTsVjDHjPumEX3iq+WakUk9faw6+T9ZbXmupicOJNzigH6L6shhMK/AeU+Mg?= =?us-ascii?q?gPQ2ib+OO81Lv58ULjXLVGlv02krXFsJDCPsQbo7O5AxRJ0ok49Rm/Eiym38?= =?us-ascii?q?oFknUdLVJFfhSKhJXqNVHWOP30EOuzj06xnDppyf3KJKDtD5XDI3TZn7rsfq?= =?us-ascii?q?5x51NAxAYp0NxS5Y5YBqscLP/8WUL9rsHUAxw/Pgep2ejoEs992ZkbWW+XB6?= =?us-ascii?q?+ZN77dvkGQ6+I0JumMeJcVuDHgK/g5//LujWE2mVsafaSxwJYZdGi2EulmLE?= =?us-ascii?q?uBbnTjg8sNHXoQsgogUOPqj0eCUSZJa3moQq0w/C87CJi9DYfFXIyinLuB3C?= =?us-ascii?q?KjEp1XYGBJFEyMHG/1e4mYQfsAdSCfL8F7njAZVbWsRZUt2B6tuQPizrpoNO?= =?us-ascii?q?vU+ikWtZL509h14vXelQoy9TxzC8Sd13+CT2dvkWwWWzA237tyoVJjxVeZ0K?= =?us-ascii?q?h4mP1YFdNV5/9TTgg6Mpvcw/RgC9/uQgLBYsuJSFG+T9W8GjE+VNYxwt4Vbk?= =?us-ascii?q?lnGNWtlBXD0DCrA7MPi7OLA5k0+LrG33ftP8Z912rG1K45glk9XMRAKXCphq?= =?us-ascii?q?9l9wXIBo7GjVmZl6iweaQbxi7N+3+JzXCSs0FATA5wTaLFUGgCaUvMt9v56F?= =?us-ascii?q?/CQ6avCbs5LgtBx9eOKrFUZd3mk1pHS+vjNM3EY2K/h2i9BxmFy7CCYYXxem?= =?us-ascii?q?Udxz/RB1IAkwAX5nuGNBYxBjuvo27ECzxuD13vaVv28eZisHO7UlM0zwaSYk?= =?us-ascii?q?1lzbW14QIVieWARPwJ2rIEvDwsqzRqE1ah0dLaEd2ApxBufK9Ee9My/E9H1X?= =?us-ascii?q?7Ftwx6JpGgNb5thlEAfAV4o0PjzBR3BZtckcgktn8qyxByKa3LmG9GInmCxp?= =?us-ascii?q?n0KJXeKWD39RHpYKnTkBmKys2f/rUn4fcxrlzi+gquExxmuz983tJZ0mG055?= =?us-ascii?q?jWAkwVS527GhIs+hN2pqvyYyQh6cXTz3I6YoeutTqXkfIuAO8ozBytdNQbeJ?= =?us-ascii?q?iPExPuWYVOHMipLOgnnVKkZREsIu1I9bU1MMXgfPyDjv34dN18lS6r2DwUqL?= =?us-ascii?q?t21ViBonJx?= X-IPAS-Result: =?us-ascii?q?A2ENNgBHVhhg/zCZrQpiHQEBAQEJARIBBQUBQIFPgiGBA?= =?us-ascii?q?IE9CoQ2jwaCUQOBBZlWgWgLAQEBAQEBAQEBCAEvBAEBhEoCF4FkJjgTAgMBA?= =?us-ascii?q?QsBAQEFAQEBAQEGAwEBAQKGW4I4IoN2AQEBAQMjEUUMBAIBCBEEAQEDAiYCA?= =?us-ascii?q?gIwFQgIAgQBDQUIgx+yajx2gTKKWYEOKoZ8hkJBgUI+gRGCZDU+g38KARIBC?= =?us-ascii?q?YMxgmAEgyoBA1IBgREHOxAvARgLkz2lPgMHgnabdCujE5QqnRcYhDgCBAIEB?= =?us-ascii?q?QIWgSVIgQtwcIM5UBcCDZxqdDcCBgoBAQMJiwSBEQEB?= Received: from BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Mon, 1 Feb 2021 14:30:23 -0500 Received: from BRN1WNEX02.vcorp.ad.vrsn.com ([fe80::7c0a:1cc:5def:9dde]) by BRN1WNEX02.vcorp.ad.vrsn.com ([fe80::7c0a:1cc:5def:9dde%4]) with mapi id 15.01.2106.006; Mon, 1 Feb 2021 14:30:23 -0500 From: "Hollenbeck, Scott" To: "rsalz@akamai.com" , "secdir@ietf.org" CC: "draft-ietf-regext-rfc7483bis.all@ietf.org" , "last-call@ietf.org" , "regext@ietf.org" Thread-Topic: [secdir] Secdir last call review of draft-ietf-regext-rfc7483bis-04 Thread-Index: AQHW+M+EnpkkwTM+eEegnOw2Eg1SQKpDruWQ Date: Mon, 1 Feb 2021 19:30:22 +0000 Message-ID: References: <161220714890.15602.5069607060927407996@ietfa.amsl.com> <44F5BDA3-4488-4E76-84DE-87EBBFE4F0B0@akamai.com> In-Reply-To: <44F5BDA3-4488-4E76-84DE-87EBBFE4F0B0@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.170.148.18] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-regext-rfc7483bis-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Feb 2021 19:30:27 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBTYWx6LCBSaWNoIDxyc2FsekBh a2FtYWkuY29tPg0KPiBTZW50OiBNb25kYXksIEZlYnJ1YXJ5IDEsIDIwMjEgMjoyMiBQTQ0KPiBU bzogc2VjZGlyQGlldGYub3JnDQo+IENjOiBkcmFmdC1pZXRmLXJlZ2V4dC1yZmM3NDgzYmlzLmFs bEBpZXRmLm9yZzsgbGFzdC1jYWxsQGlldGYub3JnOw0KPiByZWdleHRAaWV0Zi5vcmcNCj4gU3Vi amVjdDogW0VYVEVSTkFMXSBSZTogW3NlY2Rpcl0gU2VjZGlyIGxhc3QgY2FsbCByZXZpZXcgb2Yg ZHJhZnQtaWV0Zi1yZWdleHQtDQo+IHJmYzc0ODNiaXMtMDQNCj4NCj4gQ2F1dGlvbjogVGhpcyBl bWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xp Y2sgbGlua3MNCj4gb3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUg c2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50DQo+IGlzIHNhZmUuDQo+DQo+IEJyb3dzZXIgY3Jh c2hlZC4gIEhlcmUncyB0aGUgcmVhbCByZXZpZXcuDQo+DQo+IEkgaGF2ZSByZXZpZXdlZCB0aGlz IGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3Mgb25nb2luZw0K PiBlZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkg dGhlIElFU0cuICBUaGVzZQ0KPiBjb21tZW50cyB3ZXJlIHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0 aGUgYmVuZWZpdCBvZiB0aGUgc2VjdXJpdHkgYXJlYQ0KPiBkaXJlY3RvcnMuICBEb2N1bWVudCBl ZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzDQo+IGp1c3Qg bGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLg0KPg0KPiBUaGUgc3VtbWFyeSBvZiB0 aGUgcmV2aWV3IGlzIHJlYWR5IHdpdGggbml0cy4NCj4NCj4gSSBleHBlY3RlZCB0byBzZWUgbWVu dGlvbiBvZiBIVFRQUywgYXMgb3Bwb3NlZCB0byBIVFRQLCBpbiB0aGUgcHJvdG9jb2wNCj4gZGVm aW5pdGlvbi4gIEF0IGEgbWluaW11bQ0KPiAgICAgICBIVFRQUyBNVVNUIGJlIHVzZWQuDQo+IElu IHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucy4NCj4NCj4gSSB3b25kZXIgaWYgdXNpbmcgIjQ1 MSIgc3RhdHVzIGlzIHdvcnRod2hpbGU/ICAgSSBjYW4gYWNjZXB0IGVpdGhlciBhbnN3ZXIuDQo+ DQo+IEFzIHRoaXMgaXMgYSBwcm90b2NvbCB0cmFuc2xpdGVyYXRpb24sIHRoZSByZWZlcmVuY2Vz IHRvIG90aGVyIFJGQydzIGFuZCBzZWN1cml0eQ0KPiBjb25zaWRlcnNhdGlvbnMgc2VlbSBvbi10 YXJnZXQuDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldywgUmljaC4gVGhlIHNlY3VyaXR5IHNlcnZp Y2VzIGZvciBSREFQIGFyZSBkZXNjcmliZWQgaW4gUkZDIDc0ODEsIHdoZXJlIGl0IHNheXMsICIg SFRUUCBvdmVyIFRMUyBNVVNUIGJlIHVzZWQgdG8gcHJvdGVjdCBhbGwgY2xpZW50LXNlcnZlciBl eGNoYW5nZXMgdW5sZXNzIG9wZXJhdGlvbmFsIGNvbnN0cmFpbnRzIG1ha2UgaXQgaW1wb3NzaWJs ZSB0byBtZWV0IHRoaXMgcmVxdWlyZW1lbnQuIi4gSSBpbnRlbmQgdG8gc3VibWl0IGEgcmVxdWVz dCB0byBtb3ZlIDc0ODEgZnJvbSBQcm9wb3NlZCBTdGFuZGFyZCBzdGF0dXMgdG8gU3RhbmRhcmQg c3RhdHVzIHNob3J0bHkgdG8ga2VlcCB0aGVzZSBpbiBzeW5jaC4NCg0KU2NvdHQNCg== From nobody Mon Feb 1 11:32:38 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 478273A13F6; Mon, 1 Feb 2021 11:32:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.349 X-Spam-Level: X-Spam-Status: No, score=-2.349 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HMnP0k7SoxOv; Mon, 1 Feb 2021 11:32:29 -0800 (PST) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD84D3A1389; Mon, 1 Feb 2021 11:32:28 -0800 (PST) Received: from pps.filterd (m0050093.ppops.net [127.0.0.1]) by m0050093.ppops.net-00190b01. (8.16.0.43/8.16.0.43) with SMTP id 111JTc1l021731; Mon, 1 Feb 2021 19:32:28 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=A9dqdWDamEim3IRTNioAo8VSokEGodz76KSx/H01B68=; b=LAeOjZOjwIZD4BpJyQdZtBvo1kd0rr9sxohygzpAHLFNF528Dyu65/x+ycbJuRrBKbMO /7wHqehxLL1dio7uKML4Dsj1cpfz4iIvVpig+stuQ8+f0FkJ8mOiUhPAkuKXuBmrGjTx yNVAUMXQxB/1J+TD6e6t75XptlZmhJHk4NuJj15f0SIKZANHdhLPOJRbHioUyF40FDOL QG8S8DuTbhQLvIP9pReFCuHxojRzB5f/z2i9e+OXW26VMLlkrh29UjwP7t99mAi+vIW6 KbtasoGLH0KCR0iRKqkWKl8qYlkuW5d+ax1WICJ4mhX74Sgj+l7xaenpjs+tWkIQYT1n /Q== Received: from prod-mail-ppoint4 (a72-247-45-32.deploy.static.akamaitechnologies.com [72.247.45.32] (may be forged)) by m0050093.ppops.net-00190b01. with ESMTP id 36d0k1fvuf-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 01 Feb 2021 19:32:28 +0000 Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.16.0.43/8.16.0.43) with SMTP id 111JL39E028589; Mon, 1 Feb 2021 14:32:27 -0500 Received: from email.msg.corp.akamai.com ([172.27.165.112]) by prod-mail-ppoint4.akamai.com with ESMTP id 36d3p35eub-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 01 Feb 2021 14:32:27 -0500 Received: from USTX2EX-DAG1MB1.msg.corp.akamai.com (172.27.165.119) by ustx2ex-dag1mb3.msg.corp.akamai.com (172.27.165.121) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 1 Feb 2021 13:32:26 -0600 Received: from USTX2EX-DAG1MB1.msg.corp.akamai.com ([172.27.165.119]) by ustx2ex-dag1mb1.msg.corp.akamai.com ([172.27.165.119]) with mapi id 15.00.1497.010; Mon, 1 Feb 2021 13:32:26 -0600 From: "Salz, Rich" To: "Hollenbeck, Scott" , "secdir@ietf.org" CC: "draft-ietf-regext-rfc7483bis.all@ietf.org" , "last-call@ietf.org" , "regext@ietf.org" Thread-Topic: [secdir] Secdir last call review of draft-ietf-regext-rfc7483bis-04 Thread-Index: AQHW+M8p6wNHzSbT9kaieyflaaSaZKpDviOAgABWMQD//6zBgA== Date: Mon, 1 Feb 2021 19:32:25 +0000 Message-ID: References: <161220714890.15602.5069607060927407996@ietfa.amsl.com> <44F5BDA3-4488-4E76-84DE-87EBBFE4F0B0@akamai.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.45.21011103 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.27.118.139] Content-Type: text/plain; charset="utf-8" Content-ID: <5989E9EA7BE4DD45AB3A597F4A9C76E1@akamai.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369, 18.0.737 definitions=2021-02-01_08:2021-01-29, 2021-02-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxscore=0 spamscore=0 adultscore=0 malwarescore=0 mlxlogscore=840 phishscore=0 suspectscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102010101 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369, 18.0.737 definitions=2021-02-01_08:2021-01-29, 2021-02-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 suspectscore=0 clxscore=1011 lowpriorityscore=0 priorityscore=1501 mlxscore=0 impostorscore=0 spamscore=0 mlxlogscore=764 malwarescore=0 bulkscore=0 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102010102 X-Agari-Authentication-Results: mx.akamai.com; spf=${SPFResult} (sender IP is 72.247.45.32) smtp.mailfrom=rsalz@akamai.com smtp.helo=prod-mail-ppoint4 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-regext-rfc7483bis-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Feb 2021 19:32:31 -0000 PiAgICBUaGFua3MgZm9yIHRoZSByZXZpZXcsIFJpY2guIFRoZSBzZWN1cml0eSBzZXJ2aWNlcyBm b3IgUkRBUCBhcmUgZGVzY3JpYmVkIGluIFJGQyA3NDgxLCB3aGVyZSBpdCBzYXlzLCAiIEhUVFAg b3ZlciBUTFMgTVVTVCBiZSB1c2VkIHRvIHByb3RlY3QgYWxsIGNsaWVudC1zZXJ2ZXIgZXhjaGFu Z2VzIHVubGVzcyBvcGVyYXRpb25hbCBjb25zdHJhaW50cyBtYWtlIGl0IGltcG9zc2libGUgdG8g bWVldCB0aGlzIHJlcXVpcmVtZW50LiIuIEkgaW50ZW5kIHRvIHN1Ym1pdCBhIHJlcXVlc3QgdG8g bW92ZSA3NDgxIGZyb20gUHJvcG9zZWQgU3RhbmRhcmQgc3RhdHVzIHRvIFN0YW5kYXJkIHN0YXR1 cyBzaG9ydGx5IHRvIGtlZXAgdGhlc2UgaW4gc3luY2guDQoNCkkgbWlzc2VkIHRoYXQuICAoVG9v IG11Y2ggYmFja2dyb3VuZCByZWFkaW5nKSAgVGhhbmtzLiAgU28gdGhlIGZlZWRiYWNrIGlzIG5v dyAibWFrZSB0aG9zZSBsaWdodHMgYmxpbmsgaW4gc2VxdWVuY2UsIiBlciAia2VlcCB0aGUgdHdv IGRvY3Mgb24gdGhlIHNhbWUgdHJhY2suIiA6KQ0KDQo= From nobody Tue Feb 2 15:15:19 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 112BA3A0CD2 for ; Tue, 2 Feb 2021 15:15:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 55bgSnG3uN-L for ; Tue, 2 Feb 2021 15:15:16 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CA063A0CD3 for ; Tue, 2 Feb 2021 15:15:15 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 112NFEQH046236 for ; Tue, 2 Feb 2021 18:15:14 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu 112NFEQH046236 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1612307714; bh=IUqGqG13q2Q2tFyW8F+/uQRe1JDRlK+gorVvmvos0Fk=; h=From:To:Subject:Date:From; b=gQoQgjnyrlcVVLXkd27kqAzFJhcPI6T4O0B8HHPecr5rE0My9c7wSiEWUoaKE6GwL Yh8M2Ie0a5FKYB2hMbEs3q+BWy8MnhDVpRdW4tO5m9qjfQ91S3zswCM6PNcOpdkTON dJKhMjuc77KdbV1mbkXsgSlwrPxuvjywCUnWESnI= Received: from MORRIS.ad.sei.cmu.edu (morris.ad.sei.cmu.edu [147.72.252.46]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 112NFDA4010780 for ; Tue, 2 Feb 2021 18:15:13 -0500 Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by MORRIS.ad.sei.cmu.edu (147.72.252.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Tue, 2 Feb 2021 18:15:13 -0500 Received: from MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb]) by MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb%13]) with mapi id 15.01.2106.002; Tue, 2 Feb 2021 18:15:13 -0500 From: Roman Danyliw To: "secdir@ietf.org" Thread-Topic: Pre-IETF 110 SECDIR meeting(s) Thread-Index: Adb5uEuOIw5nrxYPQk249UxqOPRVYg== Date: Tue, 2 Feb 2021 23:15:12 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.202.236] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [secdir] Pre-IETF 110 SECDIR meeting(s) X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Feb 2021 23:15:18 -0000 Hi SECDIR reviewers! While the pandemic has prevented us from meeting in person, your helpful re= views have continued to stream in and improve the quality of the documents = the IETF has published. Thank you for this diligence. In recent virtual IETF meetings, there wasn't a convenient way to slot in o= ur usual Tuesday lunch meeting. However, we have now gone too long without= getting together. Therefore, we'd like to schedule two virtual meetings s= lots during the week of February 15th -- one that is relatively convenient = for those in the UTC-8 to UTC+3 timezones (Group 1) and another that is con= venient for those in the UTC+3 to UTC+10 timezones (Group 2). The thinking= is to roughly run our standing agenda of reviewing the SECDIR queue; revie= wing recurring or emerging issues seen in documents; hot topics expected at= IETF 110; and a general social hour, twice in these two time slots. We al= so know that every is quite busy so attendance is optional and best effort. To help us decide which exact time slot on what day works best, please comp= lete one or both Doodle polls by Monday, February 8. These polls will ask = you to select among the following options. Apologizes in advance for every= one's home city or timezone not being listed. Choose: Monday, February 15 through Friday, February 19 =3D=3D[ For Group 1 (UTC-8 to UTC+3) Doodle: https://doodle.com/poll/ek882ytmqwgz4rfw?utm_source=3Dpoll&utm_medi= um=3Dlink Timing source: https://www.timeanddate.com/worldclock/meetingtime.html?iso= =3D20210216&p1=3D224&p2=3D179&p3=3D136&p4=3D83&p5=3D110 * UTC-8 (San Francisco): 0700, 0800, 0900 * UTC-5 (New York): 1000, 1100, 1200 * UTC: 1500, 1600, 1700 * UTC+1 (Frankfurt): 1600, 1700, 1800 * UTC+3 (Jerusalem): 1700, 1800, 1900 =20 =3D=3D[ For Group 2 (UTC+3 to UTC+10) Doodle: https://doodle.com/poll/75hzsnwtkqu373rd?utm_source=3Dpoll&utm_medi= um=3Dlink Timing source: https://www.timeanddate.com/worldclock/meetingtime.html?iso= =3D20210216&p1=3D110&p2=3D438&p3=3D28&p4=3D33&p5=3D248&p6=3D240 * UTC+3 (Jerusalem): 0700, 0800, 0900 * UTC+5 (Bangalore): 1030, 1130, 1230 * UTC+7 (Bangkok): 1200, 1300, 1400 * UTC+8 (Beijing): 1300, 1400, 1500 * UTC+9 (Tokyo): 1400, 1500, 1600 * UTC+10 (Sydney): 1600, 1700, 1800 Regards, Roman and Ben From nobody Wed Feb 3 08:31:26 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C0A23A097B; Wed, 3 Feb 2021 08:31:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25Y438EfOC0s; Wed, 3 Feb 2021 08:31:14 -0800 (PST) Received: from mailer1.neclab.eu (mailer1.neclab.eu [195.37.70.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C9203A0977; Wed, 3 Feb 2021 08:31:12 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailer1.neclab.eu (Postfix) with ESMTP id 2C7CFFFCFD; Wed, 3 Feb 2021 17:31:10 +0100 (CET) X-Virus-Scanned: Amavisd on Debian GNU/Linux (atlas-a.office.hd) Received: from mailer1.neclab.eu ([127.0.0.1]) by localhost (atlas-a.office.hd [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aDqWLJMPx7BT; Wed, 3 Feb 2021 17:31:10 +0100 (CET) X-ENC: Last-Hop-TLS-encrypted X-ENC: Last-Hop-TLS-encrypted Received: from titania.office.hd (titania.office.hd [192.168.24.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailer1.neclab.eu (Postfix) with ESMTPS id F32A3FF9E1; Wed, 3 Feb 2021 17:31:09 +0100 (CET) Received: from puck.office.hd (192.168.24.91) by titania.office.hd (192.168.24.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 3 Feb 2021 17:31:09 +0100 Received: from puck.office.hd ([192.168.126.12]) by puck.office.hd ([192.168.126.12]) with mapi id 15.01.2106.006; Wed, 3 Feb 2021 17:31:09 +0100 From: Marco Liebsch To: Catherine Meadows , "secdir@ietf.org" CC: "dime@ietf.org" , "draft-ietf-dime-group-signaling.all@ietf.org" , "last-call@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-dime-group-signaling-13 Thread-Index: AQHW9AQtbL+WXnrgPkyP5QXIGFMKkqpGq7YA Date: Wed, 3 Feb 2021 16:31:09 +0000 Message-ID: <656fca8e311b4e528137258995b5c22e@neclab.eu> References: <161168017872.21141.3982625411769831365@ietfa.amsl.com> In-Reply-To: <161168017872.21141.3982625411769831365@ietfa.amsl.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.168.24.96] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0080_01D6FA52.5B9BAE80" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-dime-group-signaling-13 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Feb 2021 16:31:16 -0000 ------=_NextPart_000_0080_01D6FA52.5B9BAE80 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Thanks, Catherine, for the review. marco -----Original Message----- From: Catherine Meadows via Datatracker Sent: Dienstag, 26. Januar 2021 17:56 To: secdir@ietf.org Cc: dime@ietf.org; draft-ietf-dime-group-signaling.all@ietf.org; last-call@ietf.org Subject: Secdir last call review of draft-ietf-dime-group-signaling-13 Reviewer: Catherine Meadows Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This draft presents the commands a Diameter node could use to communicate with multiple sessions of the Diameter simultaneously. The Security Considerations section mentions two issues. One is that the use of bulk commands introduces increases the ease of implementing certain types of DoS attacks because a single command, e.g. to terminate a session, could affect multiple sessions instead of just one. The other is that current security mechanisms employed by Diameter do not enforce end-to-end security, and so make it difficult to trust information received from non-adjacent nodes. Work is ongoing on end-to-end security for Diameter, so it is premature to address end-to-end security in this document, which instead relies on available security mechanisms. I think this is a reasonable summary of the security considerations. Since end-to-end security for Diameter is a work in progress, it would be premature to attempt to address it in this document. I consider this document Ready. ------=_NextPart_000_0080_01D6FA52.5B9BAE80 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIUdTCCA8Mw ggKroAMCAQICAQEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5 c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3Qg Q2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTA4MTAwMTEw NDAxNFoXDTMzMTAwMTIzNTk1OVowgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5c3RlbXMg RW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3QgQ2VudGVy MSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAql/aG1/oc5Hl2lz0ouZH5fNoVWAFHQKks5tZ8x6KrzSt/A3C2UgZ7mmP ySD8IaoHGe2wXKxlx1/tAnx7fC0b1rq5gMIYghaE+mawCMZUI4HkzblJP/ZPbjdIKDgPxb7naHD9 OZdN0seYkVCqxESzI305R+lSYtYSk163MZZCBft2px6j9cL86XrFbKlxT+rLeLxgr8fe9NnLvn4z pW6Ug/A0+iGr6o5yoD+k3jBb74ZNapVbQ0SoEBUc5QFXxZjx5gYokaogxbdTJlFDsgsRlVjhwA92 2cCNfIHzcnCeb/4ajtlfNcaybzR8vkhP4lo519ideJ6fhj4DXhmLRKLVxwIDAQABo0IwQDAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUv1kgNgB5oKAia4zV8mHSuCzL gkowDQYJKoZIhvcNAQELBQADggEBADEDomELH3TocjbGbflNnvoiqOGBVs/Nu5/qq5EZOK+qfBVN 87ajjaX0jvZEqafoIZWtPgBiFojwArr8YSPmM5swems2YnutBCOEWGXi2yuK5yVTN2JTX7zaAWIp oqYnceY6In7Bbx2VcCBKBzTf6v8VgOW613rYW3V8BXopR35AqDETd81AO7RRR3ouEeNHEd6dZtCL 1VRm+oNV6nzCKYkb6W+zzuIFhMkvPniFYm7JX8F4Y3RYwEgYDJk566TMGrV5Wo0VnNgUDfZ6B1fH IoMFLTybJSY9GLOpQ3zIyKtkjw6jv5wbnTDb2tAZLqo88fszgHbkza0ZTwUnjhOhbsIwggUSMIID +qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQK DCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMg VHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTE2 MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNVBAYTAkRFMUUwQwYDVQQKEzxWZXJl aW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4x EDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERGTi1WZXJlaW4gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtg1/9moUHN0vqHl4pzq5lN 6mc5WqFggEcVToyVsuXPztNXS43O+FZsFVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8FXRgPxJiZ N7Mg9mZ4F4fCnQ7MSjLnFp2uDo0peQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+BaL2w8pQDc Nb1lDY9/Mm3yWmpLYgHurDg0WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qLNupOkSk9 s1FcragMvp0049ENF4N1xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz9AkH4wKG MUZrAcUQDBHHWekCAwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUk+PYMiba 1fFKpZFK4OpL4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/ BAgwBgEB/wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCAYG Z4EMAQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUvcmwvVGVs ZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYBBQUHMAGG IGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRwOi8vcGtp MDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5jZXIwDQYJKoZI hvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4eTizDnS6dl2e6BiC lmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/MOaZ/SLick0+hFvu+c+Z 6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3SPXez7vTXTf/D6OWST1k+kEcQ SrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc22CzeIs2LgtjZeOJVEqM7h0S2EQvV DFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bPZYoaorVyGTkwggWsMIIElKADAgECAgcb Y7rQHiw9MA0GCSqGSIb3DQEBCwUAMIGVMQswCQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1 ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYD VQQLEwdERk4tUEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IDIwHhcNMTYwNTI0MTEzODQwWhcNMzEwMjIyMjM1OTU5WjCBjTELMAkGA1UEBhMCREUxRTBDBgNV BAoMPFZlcmVpbiB6dXIgRm9lcmRlcnVuZyBlaW5lcyBEZXV0c2NoZW4gRm9yc2NodW5nc25ldHpl cyBlLiBWLjEQMA4GA1UECwwHREZOLVBLSTElMCMGA1UEAwwcREZOLVZlcmVpbiBHbG9iYWwgSXNz dWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ07eRxH3h+Gy8Zp1xCeOdfZ ojDbchwFfylfS2jxrRnWTOFrG7ELf6Gr4HuLi9gtzm6IOhDuV+UefwRRNuu6cG1joL6WLkDh0YNM Zj0cZGnlm6Stcq5oOVGHecwX064vXWNxSzl660Knl5BpBb+Q/6RAcL0D57+eGIgfn5mITQ5HjUhf ZZkQ0tkqSe3BuS0dnxLLFdM/fx5ULzquk1enfnjK1UriGuXtQX1TX8izKvWKMKztFwUkP7agCwf9 TRqaA1KgNpzeJIdl5Of6x5ZzJBTN0OgbaJ4YWa52fvfRCng8h0uwN89Tyjo4EPPLR22MZD08WkVK usqAfLjz56dMTM0CAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQD AgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAdBgNVHQ4EFgQU azqYi/nyU4na4K2yMh4JH+iqO3QwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK4OpL4qIMz+EwgY8G A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1j YS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwt cm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYBBQUHAQEEgdAwgc0wMwYIKwYBBQUH MAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+ aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2Vy dC5jcnQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzIt Y2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQCBeEWkTqR/DlXwCbFq PnjMaDWpHPOVnj/z+N9rOHeJLI21rT7H8pTNoAauusyosa0zCLYkhmI2THhuUPDVbmCNT1IxQ5dG dfBi5G5mUcFCMWdQ5UnnOR7Ln8qGSN4IFP8VSytmm6A4nwDO/afr0X9XLchMX9wQEZc+lgQCXISo KTlslPwQkgZ7nu7YRrQbtQMMONncsKk/cQYLsgMHM8KNSGMlJTx6e1du94oFOO+4oK4v9NsH1VuE GMGpuEvObJAaguS5Pfp38dIfMwK/U+d2+dwmJUFvL6Yb+qQTkPp8ftkLYF3sv8pBoGH7EUkp2Kgt dRXYShjqFu9VNCIaE40GMIIF5DCCBMygAwIBAgIMIRcEoknAmU62D8JoMA0GCSqGSIb3DQEBCwUA MIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERl dXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQD DBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5MDYwNTA5MTA1M1oXDTIyMDYwNDA5 MTA1M1owfjELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzETMBEGA1UE BwwKSGVpZGVsYmVyZzElMCMGA1UECgwcTkVDIExhYm9yYXRvcmllcyBFdXJvcGUgR21iSDEWMBQG A1UEAwwNTWFyY28gTGllYnNjaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUyIof8 z+hrLI9SMX036t+yE93DumjWBZz6IBjIuH6frsK4ijBk0k7ld1vtOaUJk1VqhDlHQvyUQuL9q3rY QJHnx2PDXyFAz9Hu6CtB8RPjgYM1E/iNlbpnABClFKbgxFWV+OGmW2OSJMdEso1L4w40Y9md9cs7 Nl2MNwZUxLFQsE6AYjq7ulcUHFE/NkDBJijBuEP7PL1lHUjYao3P19xQRnl6rumO2JMe8bnvPA7P pNhdsQ6691GerAgZK3imEfQTT7C7q8Vys8DZRPHPwLCpzwIqkpNB/9M7qmxrZE5YLbOvKw7z2DSI 3RVaFyIVAOfaz1xXZ/o6ne0dXIzUfqcCAwEAAaOCAlAwggJMMD4GA1UdIAQ3MDUwDwYNKwYBBAGB rSGCLAEBBDAQBg4rBgEEAYGtIYIsAQEEBDAQBg4rBgEEAYGtIYIsAgEEBDAJBgNVHRMEAjAAMA4G A1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFIwO 8YCTddrM9wma6T9eKHvhnRBnMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MCIGA1Ud EQQbMBmBF01hcmNvLkxpZWJzY2hAbmVjbGFiLmV1MIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6 Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2g O4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2Fjcmwu Y3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5k ZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rm bi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8v Y2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQBTWK8RXWqcsxBz0/wxUUCoGlQOaBssuSCgIkiHY8OvhYjoiSNyD2oZ 0xsuxQ7I7TFd8iGnEONSUTVKZeF3bsl2r+S9l3T8PrYFMzelDBIyxqg10TUjjFMFOEuynjl5MZxd G1lVlddgAT8syWMziVyP5oUH/ch2+WVBoZN/DLdgWmj2Nh5w2OhYz45eTpmD0LoHDPpM3iCUoqHQ 5mKRSBUI1rak8xCrK9f80oW6sRX26GrmLc1JsciF7ygxgEKm+5TgePsdUcC4OneF/aE+OrFfHK4F 7OgLi6rAoVrzFfY3/UZ5ZgFj5ZXJUAPX65POF0QC6p7mDSleQZQ7T0uYnvq5MYIEIzCCBB8CAQEw gZ4wgY0xCzAJBgNVBAYTAkRFMUUwQwYDVQQKDDxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMg RGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsMB0RGTi1QS0kxJTAjBgNV BAMMHERGTi1WZXJlaW4gR2xvYmFsIElzc3VpbmcgQ0ECDCEXBKJJwJlOtg/CaDAJBgUrDgMCGgUA oIICWTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMDMxNjMx MDhaMCMGCSqGSIb3DQEJBDEWBBRIC2OmKkXuYjHcOrpImZ/gh5rmojCBkwYJKoZIhvcNAQkPMYGF MIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4G CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZI AWUDBAICMAsGCWCGSAFlAwQCATCBrwYJKwYBBAGCNxAEMYGhMIGeMIGNMQswCQYDVQQGEwJERTFF MEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdz bmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2Jh bCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwgbEGCyqGSIb3DQEJEAILMYGhoIGeMIGNMQswCQYD VQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBG b3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVy ZWluIEdsb2JhbCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwDQYJKoZIhvcNAQEBBQAEggEAZv40 sZccCJKzgf2/a9Guatklw3RTb8BpOSRqqnttsrkhdiYmEpLzC6XBz/MsY0DsCRqsyN8bZ59g6yI/ fHeHihm8ZwiEmr38hSvfiBhXKRjg8zhLgx13h28aIzO+MHJWZPt+tHfeXrZfIKS4+7H4cTkj/X8R ckLesdoWI7gpjCS/lCAFSGLY4PBuv1kD5Dp0yPqn/ZlZvVd+fGoBkmA3qP/goyqSDTyCTQFIC8Cb bYOCwHleHaO2RtJBPOygxKdcY8ZVa+Zc1w8oejH+TJm/7pQmR6sSDxRIkPIjL5pPAqYaSE7E8oCK o0qy7kzv4LE4EZ/n6yKaSVnSsySf3PtpAQAAAAAAAA== ------=_NextPart_000_0080_01D6FA52.5B9BAE80-- From nobody Thu Feb 4 05:53:47 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55E1D3A14BF; Thu, 4 Feb 2021 05:53:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.35 X-Spam-Level: X-Spam-Status: No, score=-2.35 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 27-APiNaE-zM; Thu, 4 Feb 2021 05:53:40 -0800 (PST) Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12on2042.outbound.protection.outlook.com [40.107.237.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45A0C3A14BE; Thu, 4 Feb 2021 05:53:40 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RG9Dg/ZBM2WifD438fgmnd0l6pH9PvvDWohS34XfUV5GnQ8FwNCyE4Ns9alK0p0O5eR5o7EmauaK+3JzHAB0YVTi1vD8LGEWKvRl6VRsxSi1b0vYpMs4bpl1QVyOExA5x7Z7ogwSjrN/11+kweLtSkzBgxD5D66i3dxTFoMwNQtWD0ygrVoExw183cFDGaYLt0Rnyr5jg3Q/f4e1yI1iJAmhzASctJb7BrlyRjEgXwxbxWwTBPWYP9tz1v34y1QUI+t6aAF6J8x+0IJsuz5gplhXO20KSGHxbWVPGxncNk1e9njLzLOK0MaK0sGCVm62/X++RMG1714eAT3IHasWvg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SR4DGe/HAJ/ON3thiN08tmfSHgaDBWnhSbAukgYJFHo=; b=ZKWcY6o35KSbDlTQ/ryqoa81jMq2eU5q2k+tuLkdXKYAd3LU+WrLckjXWvOgbDx8JdpNCOZeWDAFH6rrucpjcX33m6Qe1uhYAw2nAfylM+0MPIgxCRN6tEmJlNIuwkFhr1bK8VSPPZrPQZuXkFjaWmMSqwA2PH3wz1YR6wKe6BVrsoSklPvTfcT4eCgPzt9NSqTFGeC8mOmZzMoa0JbKO+GzzL3M2s12liT3yX60krWdXCkfwxFXNTxiEWeFPAMZJn5RYpGfSSTGRl0QL9to86obz9FpG9Tj3ZPR/dtD5Umns7qJFGkr0jyHrpHBIG3nFL7N/pidrwszknH0y/M1yA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SR4DGe/HAJ/ON3thiN08tmfSHgaDBWnhSbAukgYJFHo=; b=AoUbvMiRsqOGjUDwEOZEYiGpisEnnuT2KNoe3NhjkC3ttY449UFaBbDWP/jFc0IgnUq506VAD7cC/sAyKdnfu13JNw1d0WiH8URZeIIRX8Iys6lr4BVSWv7EMn42P9Naca9mDLDGv0L1/oFaHmVWf2SNQSc40881pISp8vCCchM= Received: from DM6PR15MB2379.namprd15.prod.outlook.com (2603:10b6:5:8a::16) by DM6PR15MB4005.namprd15.prod.outlook.com (2603:10b6:5:294::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3805.16; Thu, 4 Feb 2021 13:53:37 +0000 Received: from DM6PR15MB2379.namprd15.prod.outlook.com ([fe80::a9f9:326f:8cfb:157b]) by DM6PR15MB2379.namprd15.prod.outlook.com ([fe80::a9f9:326f:8cfb:157b%7]) with mapi id 15.20.3825.017; Thu, 4 Feb 2021 13:53:37 +0000 From: Daniel Migault To: Alexey Melnikov , "secdir@ietf.org" CC: "draft-ietf-extra-imap4rev2.all@ietf.org" , "extra@ietf.org" , "last-call@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-extra-imap4rev2-24 Thread-Index: AQHW8k+UrIvwWNQJJ0uPOXDv4tfXT6pID6Ww Date: Thu, 4 Feb 2021 13:53:37 +0000 Message-ID: References: <161106792581.26552.4563982290675643872@ietfa.amsl.com>, <180cc9c6-f438-f05d-741c-f250024738db@isode.com> In-Reply-To: <180cc9c6-f438-f05d-741c-f250024738db@isode.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: isode.com; dkim=none (message not signed) header.d=none;isode.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [96.22.11.129] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c95d6b78-36d3-46fc-8daf-08d8c9144558 x-ms-traffictypediagnostic: DM6PR15MB4005: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: AY4buC4cEedvVee+Udt+Efhnqq3cmotCc5kWVJPzBlPPls2zsJdM3SrdEe66qx9BI9BfHQ/gXCFakSCmvrBobme/DdzsN00S20DIC+O8myex/aYi+CAoR3lWMYFW8O6fm9Ef6kf5sJeFwgiBSUggsdeUL8Xqw2T9JPK2DLlj2HxzLHSnHUHlI7iZJsk9V+wAwJ0HDUCm+4cpgn14vpZTIc1j2vJDHbKc3ZjhWJzc88EwdP/kSlZtKwo8PPR8spjE5myzxhRnsDUMf4lIUUNmYg3MAvvNPr5Vfw21wIeoZIU07cEdb7ETVYoIWLVAHWMH+kLhtl2unEgu+KpbvZbd91Pvbu3/hLVT1C4/h9lpXclOP82HB+BUrUT2QszgAPbz1AbPkjRa8OZbSqusq+zx2Z1YtWbca6TqWHXN0SOuIn2nf43VphjMEe177qld6/DVUe3UzCM2MSgA3O088PLLE99nRm4U8Lky5T3LvZvk7gQRODsyr5TQPyikjEsPxTijnx9LVQtmxiow9TR0+YzPiP4OdAQxhj5i/klrx6V/rNmiSPkA/mn7R4kedSFg2mSor0omSazc3PEmVEKMP7CcgA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR15MB2379.namprd15.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(39850400004)(346002)(366004)(136003)(396003)(76116006)(8676002)(55016002)(91956017)(9686003)(66476007)(66946007)(66556008)(19627405001)(64756008)(66446008)(83380400001)(2906002)(478600001)(5660300002)(7696005)(4326008)(44832011)(6506007)(53546011)(26005)(71200400001)(316002)(186003)(54906003)(110136005)(86362001)(33656002)(52536014)(8936002)(554374003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?iso-8859-1?Q?lQyHPmo4IngXvthwpacihDSnpwaziAMLOiQuBN5h4Nrohu65xJ3QGAD5qG?= =?iso-8859-1?Q?SyTNHge5WgenBronuAw44DKG/EGogF1eFbTaFh45Dli4RpOVCVUuTSrm2s?= =?iso-8859-1?Q?trrUsrhTi0geTAZ/kjJxBVSGeMiz76YM9RjPG5GI7BA0jiQbXy2+4Gm6bb?= =?iso-8859-1?Q?kIrYwspdcDv+dLwWr4Dek+OsmoQza+pLwyZ77e7Zj+3LMRJuWNSLUcP1jT?= =?iso-8859-1?Q?tAY2jqVx61YVVtNz7XWEZorrIen/IPqpCiXQkDRhC2qaaeEklcU8FJUIMO?= =?iso-8859-1?Q?P3amOnfJhOK7tIrajQfsyyv/idJDzIxpdKwsSSD5qnn6x5fEOTznHsPYf4?= =?iso-8859-1?Q?Kn/Ihxr95jWP36FOljXDKpgCmoKlm6EfpSv7BJWGP00dqBZ2yNBRcy+xue?= =?iso-8859-1?Q?DCWKjeb3RgQlWm4Ef25T3e/MBrXKCEP0nKmejbW/ShfCBtX+lBI5OkZDBk?= =?iso-8859-1?Q?cS6SZaKHCbAFbzQwvQJweeFhRmJsEj+Qz1CAVt3aycluIFQUNUzqw18y9I?= =?iso-8859-1?Q?F2VjmkVkL+qIgIgVaoIJMIZTqZXM0uitQcMEMUhc0ofcjwVHsm7HECrMZG?= =?iso-8859-1?Q?aw1pImC7MDZvW1KZufYivTKmCvp8+f1yTdcIn33COooMbLVMNFbRlommRt?= =?iso-8859-1?Q?4d8e5W+lxpGaag/UTOTBa/+pgKUHB77UiFkGXIgpnz4Ixc3go9RNSY3wnx?= =?iso-8859-1?Q?o9F+DejUKauluFf+ADk1QE56SOMSGZ/23d0Vp8ZaxlWy+mscwbdZgq5iMG?= =?iso-8859-1?Q?w4FJB3HXD5JvBBH/Wegbltzft5Ar0vN5CGcCm40d2sI3OyfrNDbN5rutkI?= =?iso-8859-1?Q?BYMCdHYbTsObPAswzbP+bjcMQZXSHVezGOqxxXQp61fJIOwvURXyBnUWuD?= =?iso-8859-1?Q?aPMMoCo2kocDoZaXW6y0Kzsan67Or9DY8dstIDm4zUYlXMHFZnEF6Fbrd4?= =?iso-8859-1?Q?BnNpP9NNMLcsfj/irMBayKnLGbS2qr0lTpGxwleClFbg6xp6OT44Is8o6p?= =?iso-8859-1?Q?Mgp0ktyqgA6dt61G8w24HjDrbEUN42C2BmZ0jTY2yDKESbGTksTgIACqFf?= =?iso-8859-1?Q?vd6GGgEN81pEAtN9xQ3Q6SQ=3D?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DM6PR15MB2379DB80CAD119DAEF853C1AE3B39DM6PR15MB2379namp_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR15MB2379.namprd15.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c95d6b78-36d3-46fc-8daf-08d8c9144558 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Feb 2021 13:53:37.1566 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: swX34LEgq0Z8ZVpSB+MhH/XZwVxfZK2i3OC6WLbDmeN2jUh+c0qBqRzfqkud39OvQcLjg0oNfoTK0FhZ9jIfXEqutfcwjPX52Q1cYxjYrOY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR15MB4005 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-extra-imap4rev2-24 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Feb 2021 13:53:42 -0000 --_000_DM6PR15MB2379DB80CAD119DAEF853C1AE3B39DM6PR15MB2379namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, I do see your point. My point here was more to point there exists some alte= rnatives that worth being considered and might be developed in the future. = I agree this might require more work than I am currently thinking of. I do = not know how biased I am toward DANE, so I let you do what you think is bes= t. Yours, Daniel ________________________________ From: Alexey Melnikov Sent: Sunday, January 24, 2021 7:50 AM To: Daniel Migault ; secdir@ietf.org Cc: draft-ietf-extra-imap4rev2.all@ietf.org ; extra@ietf.org ; last-call@ietf.org Subject: Re: Secdir last call review of draft-ietf-extra-imap4rev2-24 Hi Daniel, On 19/01/2021 14:52, Daniel Migault via Datatracker wrote: [snip] > During the TLS negotiation [TLS-1.3][TLS-1.2], the client MUST check > its understanding of the server hostname against the server's > identity as presented in the server Certificate message, in order to > prevent man-in-the-middle attacks. This procedure is described in > [RFC7817]. > > > I think it would be good to mention DANE as > well as certificate checks. This came up before, but at this point there is no document describing how to use DANE with email clients (an alternative/update to RFC 7817) and I am not aware of any client implementations that use DANE experimentally for this. Best Regards, Alexey --_000_DM6PR15MB2379DB80CAD119DAEF853C1AE3B39DM6PR15MB2379namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi, 

I do see your point. My point here was more to point there exists some alte= rnatives that worth being considered and might be developed in the future. = I agree this might require more work than I am currently thinking of. I do = not know how biased I am toward DANE, so I let you do what you think is best. 

Yours, 
Daniel



From: Alexey Melnikov <a= lexey.melnikov@isode.com>
Sent: Sunday, January 24, 2021 7:50 AM
To: Daniel Migault <daniel.migault@ericsson.com>; secdir@ietf.= org <secdir@ietf.org>
Cc: draft-ietf-extra-imap4rev2.all@ietf.org <draft-ietf-extra-ima= p4rev2.all@ietf.org>; extra@ietf.org <extra@ietf.org>; last-call@i= etf.org <last-call@ietf.org>
Subject: Re: Secdir last call review of draft-ietf-extra-imap4rev2-2= 4
 
Hi Daniel,

On 19/01/2021 14:52, Daniel Migault via Datatracker wrote:

  [snip]

>     During the TLS negotiation [TLS-1.3][TLS-1.2],= the client MUST check
>     its understanding of the server hostname again= st the server's
>     identity as presented in the server Certificat= e message, in order to
>     prevent man-in-the-middle attacks.  This = procedure is described in
>     [RFC7817].
>
> <mglt>
> I think it would be good to mention DANE as
> well as certificate checks.

This came up before, but at this point there is no document describing
how to use DANE with email clients (an alternative/update to RFC 7817)
and I am not aware of any client implementations that use DANE
experimentally for this.

Best Regards,

Alexey

--_000_DM6PR15MB2379DB80CAD119DAEF853C1AE3B39DM6PR15MB2379namp_-- From nobody Thu Feb 4 15:51:42 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 05B753A19AE for ; Thu, 4 Feb 2021 15:51:41 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu, Tero Kivinen Message-ID: <161248270094.17938.10207343050052099252@ietfa.amsl.com> Date: Thu, 04 Feb 2021 15:51:40 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Feb 2021 23:51:41 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2021-02-04 Reviewer LC end Draft Daniel Migault R2021-01-20 draft-ietf-extra-imap4rev2 For telechat 2021-02-18 Reviewer LC end Draft Russ Housley R2020-09-08 draft-ietf-lwig-curve-representations Aanchal Malhotra 2021-01-26 draft-ietf-mpls-lsp-ping-registries-update Klaas Wierenga 2020-12-02 draft-ietf-core-echo-request-tag Last calls: Reviewer LC end Draft Daniel Franke 2020-03-09 draft-ietf-regext-dnrd-objects-mapping Daniel Gillmor 2020-09-30 draft-ietf-ccamp-layer0-types Phillip Hallam-Baker 2020-12-03 draft-ietf-tls-ticketrequests Phillip Hallam-Baker 2020-09-30 draft-ietf-lwig-tcp-constrained-node-networks Steve Hanna 2020-09-30 draft-ietf-ccamp-wson-yang Dan Harkins None draft-ietf-rtgwg-policy-model Russ Housley R2020-09-08 draft-ietf-lwig-curve-representations Leif Johansson None draft-ietf-netconf-crypto-types Leif Johansson 2020-10-02 draft-ietf-lpwan-schc-over-lorawan Aanchal Malhotra 2021-01-26 draft-ietf-mpls-lsp-ping-registries-update Daniel Migault R2021-01-20 draft-ietf-extra-imap4rev2 Kathleen Moriarty 2021-02-05 draft-ietf-detnet-ip-over-tsn Sandra Murphy 2020-10-15 draft-ietf-tls-external-psk-importer Magnus Nystrom 2021-02-05 draft-ietf-detnet-tsn-vpn-over-mpls Tim Polk None draft-ietf-opsawg-finding-geofeeds Tirumaleswar Reddy.K 2021-02-09 draft-ietf-regext-unhandled-namespaces Tirumaleswar Reddy.K 2020-11-16 draft-ietf-quic-transport Joseph Salowey 2021-02-09 draft-ietf-oauth-access-token-jwt Rich Salz R2020-08-14 draft-ietf-suit-architecture Stefan Santesson 2021-02-08 draft-ietf-regext-rfc7482bis Yaron Sheffer 2021-02-08 draft-ietf-pce-pcep-extension-for-pce-controller Rifaat Shekh-Yusef 2021-02-16 draft-ietf-ippm-capacity-metric-method Melinda Shore 2021-02-16 draft-ietf-bess-evpn-oam-req-frmwk Valery Smyslov 2021-02-16 draft-ietf-calext-valarm-extensions Robert Sparks 2021-02-15 draft-ietf-6lo-plc Takeshi Takahashi 2021-02-12 draft-ietf-ntp-yang-data-model Brian Weis R2020-12-02 draft-ietf-core-dev-urn Klaas Wierenga 2020-05-26 draft-ietf-kitten-krb-spake-preauth Klaas Wierenga 2020-12-02 draft-ietf-core-echo-request-tag Christopher Wood R2021-01-18 draft-ietf-dtn-tcpclv4 Paul Wouters 2020-09-08 draft-ietf-i2nsf-capability-data-model Liang Xia 2020-11-30 draft-ietf-spring-sr-yang Early review requests: Reviewer Due Draft Tina Tsou 2021-02-15 draft-ietf-idr-eag-distribution Dacheng Zhang 2020-12-07 draft-ietf-idr-eag-distribution Next in the reviewer rotation: Sean Turner Mališa Vučinić Carl Wallace Samuel Weiler Brian Weis Klaas Wierenga Christopher Wood Paul Wouters Liang Xia Dacheng Zhang From nobody Fri Feb 5 07:59:03 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D2A393A12AC; Fri, 5 Feb 2021 07:58:53 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Russ Housley via Datatracker To: Cc: draft-ietf-lwig-curve-representations.all@ietf.org, last-call@ietf.org, lwip@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161254073379.2582.17762016563844503381@ietfa.amsl.com> Reply-To: Russ Housley Date: Fri, 05 Feb 2021 07:58:53 -0800 Archived-At: Subject: [secdir] Secdir telechat review of draft-ietf-lwig-curve-representations-19 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Feb 2021 15:58:54 -0000 Reviewer: Russ Housley Review result: Ready I reviewed this document as part of the Security Directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the Security Area Directors. Document authors, document editors, and WG chairs should treat these comments just like any other IETF Last Call comments. Document: draft-ietf-lwig-curve-representations-19 Reviewer: Russ Housley Review Date: 2021-02-05 IETF LC End Date: 2020-09-08 IESG Telechat date: 2021-02-18 Thank you for addressing my earlier comments on -08 and -12. Thank you for adding Section 11. Summary: Ready Major Concerns: None Minor Concerns: None Nits: None From nobody Fri Feb 5 09:10:41 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E39463A1243; Fri, 5 Feb 2021 07:19:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1612538357; bh=BVSHH06z7prHcbOBL/wTIAa2G3IVMdF8Z0PcYPofg+Y=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=e960cFZDcGcRlbBK1QL3qnCT9bFi6j8lkBoaQaIE2MW9udTH5YJc+atScjgvbDFKg TbCpQKM8580ozRZD2NL8NmhfEq86WoHGtnqvyzw230MUHy7e+/1otURqQYyS17m7x/ YhLbyVEKzbSr4vTkT961zn5CXD0ohqt0hmyA8A3M= X-Mailbox-Line: From new-work-bounces@ietf.org Fri Feb 5 07:19:17 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 63C833A1248; Fri, 5 Feb 2021 07:19:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1612538357; bh=BVSHH06z7prHcbOBL/wTIAa2G3IVMdF8Z0PcYPofg+Y=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=e960cFZDcGcRlbBK1QL3qnCT9bFi6j8lkBoaQaIE2MW9udTH5YJc+atScjgvbDFKg TbCpQKM8580ozRZD2NL8NmhfEq86WoHGtnqvyzw230MUHy7e+/1otURqQYyS17m7x/ YhLbyVEKzbSr4vTkT961zn5CXD0ohqt0hmyA8A3M= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 070063A1248 for ; Fri, 5 Feb 2021 07:19:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v32EcT77297J for ; Fri, 5 Feb 2021 07:19:13 -0800 (PST) Received: from raoul.w3.org (raoul.w3.org [128.30.52.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD9C73A1243 for ; Fri, 5 Feb 2021 07:19:13 -0800 (PST) Received: from [93.30.120.228] (helo=[192.168.1.100]) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l82t5-0005f1-V0; Fri, 05 Feb 2021 15:19:12 +0000 From: Coralie Mercier Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Fri, 5 Feb 2021 16:19:11 +0100 Message-Id: <5226DA14-7104-46EB-97C1-FC7B45A8917B@w3.org> To: new-work@ietf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Precedence: list Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Fri, 05 Feb 2021 09:10:40 -0800 Subject: [secdir] [new-work] Proposed W3C Charter: Pointer Events Working Group (until 2021-03-01/02) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Feb 2021 15:19:20 -0000 SGVsbG8sCgpUb2RheSBXM0MgQWR2aXNvcnkgQ29tbWl0dGVlIFJlcHJlc2VudGF0aXZlcyByZWNl aXZlZCBhIFByb3Bvc2FsIHRvIHJldmlldyBhIGRyYWZ0IGNoYXJ0ZXIgZm9yIHRoZSBQb2ludGVy IEV2ZW50cyBXb3JraW5nIEdyb3VwOgogIGh0dHBzOi8vd3d3LnczLm9yZy8yMDIxLzAxL3Byb3Bv c2VkLXBvaW50ZXItZXZlbnRzLXdnLmh0bWwKCkFzIHBhcnQgb2YgZW5zdXJpbmcgdGhhdCB0aGUg Y29tbXVuaXR5IGlzIGF3YXJlIG9mIHByb3Bvc2VkIHdvcmsgYXQgVzNDLCB0aGlzIGRyYWZ0IGNo YXJ0ZXIgaXMgcHVibGljIGR1cmluZyB0aGUgQWR2aXNvcnkgQ29tbWl0dGVlIHJldmlldyBwZXJp b2QuCgpXM0MgaW52aXRlcyBwdWJsaWMgY29tbWVudHMgdGhyb3VnaCAgMDQ6NTkgVVRDIG9uIDIw MjEtMDMtMDIgKDIzOjU5LCBFYXN0ZXJuIHRpbWUgb24gMjAyMS0wMy0wMSkgWzBdLiBvbiB0aGUg cHJvcG9zZWQgY2hhcnRlci4KClBsZWFzZSBzZW5kIGNvbW1lbnRzIHRvIDxwdWJsaWMtbmV3LXdv cmtAdzMub3JnPiwgd2hpY2ggaGFzIGEgcHVibGljIGFyY2hpdmU6CiAgaHR0cDovL2xpc3RzLncz Lm9yZy9BcmNoaXZlcy9QdWJsaWMvcHVibGljLW5ldy13b3JrLwoKCk90aGVyIHRoYW4gY29tbWVu dHMgc2VudCBpbiBmb3JtYWwgcmVzcG9uc2VzIGJ5IFczQyBBZHZpc29yeSBDb21taXR0ZWUgUmVw cmVzZW50YXRpdmVzLCBXM0MgY2Fubm90IGd1YXJhbnRlZSBhIHJlc3BvbnNlIHRvIGNvbW1lbnRz LiBJZiB5b3Ugd29yayBmb3IgYSBXM0MgTWVtYmVyIFsxXSwgcGxlYXNlIGNvb3JkaW5hdGUgeW91 ciBjb21tZW50cyB3aXRoIHlvdXIgQWR2aXNvcnkgQ29tbWl0dGVlIFJlcHJlc2VudGF0aXZlLiBG b3IgZXhhbXBsZSwgeW91IG1heSB3aXNoIHRvIG1ha2UgcHVibGljIGNvbW1lbnRzIHZpYSB0aGlz IGxpc3QgYW5kIGhhdmUgeW91ciBBZHZpc29yeSBDb21taXR0ZWUgUmVwcmVzZW50YXRpdmUgcmVm ZXIgdG8gaXQgZnJvbSB0aGVpciBmb3JtYWwgcmV2aWV3IGNvbW1lbnRzLgoKCklmIHlvdSBzaG91 bGQgaGF2ZSBhbnkgcXVlc3Rpb25zIG9yIG5lZWQgZnVydGhlciBpbmZvcm1hdGlvbiwgcGxlYXNl IGNvbnRhY3QgUGhpbGlwcGUgTGUgSMOpZ2FyZXQsIFBvaW50ZXIgRXZlbnRzIFdvcmtpbmcgR3Jv dXAgVGVhbSBDb250YWN0IDxwbGhAdzMub3JnPi4KClRoYW5rIHlvdSwKQ29yYWxpZSBNZXJjaWVy LCBIZWFkIG9mIFczQyBNYXJrZXRpbmcgJiBDb21tdW5pY2F0aW9ucwoKWzBdIDxodHRwczovL3d3 dy50aW1lYW5kZGF0ZS5jb20vd29ybGRjbG9jay9maXhlZHRpbWUuaHRtbD9kYXk9MDEmbW9udGg9 MDMmeWVhcj0yMDIxJmhvdXI9MjMmbWluPTU5JnNlYz0wJnAxPTQzPgpbMV0gaHR0cDovL3d3dy53 My5vcmcvQ29uc29ydGl1bS9NZW1iZXIvTGlzdAoKLS0KQ29yYWxpZSBNZXJjaWVyICAtICBXM0Mg TWFya2V0aW5nICYgQ29tbXVuaWNhdGlvbnMgLSAgaHR0cHM6Ly93d3cudzMub3JnCm1haWx0bzpj b3JhbGllQHczLm9yZyArMzM3IDgxMCA3OTUgMjIgaHR0cHM6Ly93d3cudzMub3JnL1Blb3BsZS9D b3JhbGllLwoKCgoKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwpuZXctd29yayBtYWlsaW5nIGxpc3QKbmV3LXdvcmtAaWV0Zi5vcmcKaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZXctd29yawo= From nobody Fri Feb 5 09:10:45 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 235443A135C; Fri, 5 Feb 2021 08:50:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1612543846; bh=YykNk66GwGYFHOBu0CfkYdqcGMWpv/+A7qQMB+9/+IY=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=bMyQQsEKOLDCVuEcNRRfG8wKLCI5S0DySdi/5DP5+DlIq8OjK4dkmxGrWlO1ix52M O70h7Nwk8iMD4c92S1FKohIWgF6owPEPAJkBLs4cMOqmVNGJXny4V6IahJJiX9d3UD 6Ym2bDQZNaNI4VN4L2jP9Lfw3CiXGx5Hsb9HcYGw= X-Mailbox-Line: From new-work-bounces@ietf.org Fri Feb 5 08:50:45 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E7703A134A; Fri, 5 Feb 2021 08:50:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1612543845; bh=YykNk66GwGYFHOBu0CfkYdqcGMWpv/+A7qQMB+9/+IY=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=jQKKNlqOX9Jtpc4fzuPxBv55a711kv8+T0YGy8/d6SqlXpGubUQH81J23j6wchGji j4B10EnjRak2c3ucNBbLPsXN0tZG8PWr6r4Xqec8DBja7qBNkl2hscjpdWaqbKZumL hv0QCv2OnYXSQ60BiTwkWN2ebxgGMUiXkYwMYV9A= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D80393A134A for ; Fri, 5 Feb 2021 08:50:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qfQG2wBjUppe for ; Fri, 5 Feb 2021 08:50:42 -0800 (PST) Received: from raoul.w3.org (raoul.w3.org [128.30.52.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 244D03A1349 for ; Fri, 5 Feb 2021 08:50:41 -0800 (PST) Received: from [93.30.120.228] (helo=[192.168.1.100]) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l84Jc-0001Zt-Fb; Fri, 05 Feb 2021 16:50:40 +0000 From: Coralie Mercier Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Fri, 5 Feb 2021 17:50:39 +0100 Message-Id: <2F1C8292-2785-4B4D-9BE2-04533207EEB5@w3.org> To: new-work@ietf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Precedence: list Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Fri, 05 Feb 2021 09:10:40 -0800 Subject: [secdir] [new-work] Proposed W3C Charter: Patents and Standards Interest Group (PSIG) (until 2021-03-01/02) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Feb 2021 16:50:48 -0000 Hello, Today W3C Advisory Committee Representatives received a Proposal to review a draft charter for the Patents and Standards Interest Group (PSIG): https://w3c.github.io/charter-drafts/PSIG-2021 As part of ensuring that the community is aware of proposed work at W3C, this draft charter is public during the Advisory Committee review period. W3C invites public comments through 04:59 UTC on 2021-03-02 (23:59, Eastern time on 2021-03-01) [0]. on the proposed charter. Please send comments to , which has a public archive: http://lists.w3.org/Archives/Public/public-new-work/ Other than comments sent in formal responses by W3C Advisory Committee Representatives, W3C cannot guarantee a response to comments. If you work for a W3C Member [1], please coordinate your comments with your Advisory Committee Representative. For example, you may wish to make public comments via this list and have your Advisory Committee Representative refer to it from their formal review comments. If you should have any questions or need further information, please contact Wendy Seltzer or Rigo Wenning , PSIG Staff Contacts. Thank you, [0] [1] http://www.w3.org/Consortium/Member/List -- Coralie Mercier - W3C Marketing & Communications - https://www.w3.org mailto:coralie@w3.org +337 810 795 22 https://www.w3.org/People/Coralie/ _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Fri Feb 5 10:06:46 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5681A3A0E22; Fri, 5 Feb 2021 10:05:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1612548318; bh=9bx9vsKJEHcwcTlWKVctCwTOy3Kgn9nR0NK1MY7YkFM=; h=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe:Reply-To; b=RRooCLNIxsIvjavFYzwUQzrYGnF0JBWwwkVh/Mpt7XY0mitVZ2vRUeHtzIDP6jpNU geslQjsP5OzO1FZGu3z+F49+emoLYu0daQ3RCaZNFhokaF0i1a29VXIpAjCc2CxZ6L 6e1UI4nJ3eSD7t6ET2kiutCPZ9PkiGxHlJxXE9U4= X-Mailbox-Line: From new-work-bounces@ietf.org Fri Feb 5 10:05:14 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 451E83A0E23; Fri, 5 Feb 2021 10:05:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1612548313; bh=9bx9vsKJEHcwcTlWKVctCwTOy3Kgn9nR0NK1MY7YkFM=; h=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe:Reply-To; b=Y9YZv1MSb0C7ZtZvvbkkA0yBmWSWDZTHRFI9LBsYjBCI3+/b3rhMNaqXEwME8U6cC IIXATYEEUImGoZuzmaPYmH20ItU77lwWtEs02Gnqm+9lJkH8mih2Tj0eAyF2uIRp1q qksAfzSugSHEKM958STJoVVeLXrXTaJtFsu7TrX8= X-Original-To: new-work@ietf.org Delivered-To: new-work@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 75C343A0DFE for ; Fri, 5 Feb 2021 10:05:06 -0800 (PST) MIME-Version: 1.0 From: The IESG To: X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk MIME-Version: 1.0 Reply_to: Message-ID: <161254830645.24177.3893434515314506627@ietfa.amsl.com> Date: Fri, 05 Feb 2021 10:05:06 -0800 Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Reply-To: iesg@ietf.org Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Fri, 05 Feb 2021 10:06:45 -0800 Subject: [secdir] [new-work] WG Review: Real-Time Communication in WEB-browsers (rtcweb) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Feb 2021 18:05:23 -0000 QSBuZXcgSUVURiBXRyBoYXMgYmVlbiBwcm9wb3NlZCBpbiB0aGUgQXBwbGljYXRpb25zIGFuZCBS ZWFsLVRpbWUgQXJlYS4gVGhlCklFU0cgaGFzIG5vdCBtYWRlIGFueSBkZXRlcm1pbmF0aW9uIHll dC4gVGhlIGZvbGxvd2luZyBkcmFmdCBjaGFydGVyIHdhcwpzdWJtaXR0ZWQsIGFuZCBpcyBwcm92 aWRlZCBmb3IgaW5mb3JtYXRpb25hbCBwdXJwb3NlcyBvbmx5LiBQbGVhc2Ugc2VuZCB5b3VyCmNv bW1lbnRzIHRvIHRoZSBJRVNHIG1haWxpbmcgbGlzdCAoaWVzZ0BpZXRmLm9yZykgYnkgMjAyMS0w Mi0xNS4KClJlYWwtVGltZSBDb21tdW5pY2F0aW9uIGluIFdFQi1icm93c2VycyAocnRjd2ViKQot LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQpDdXJyZW50IHN0YXR1czogUHJvcG9zZWQgV0cKCkNoYWlyczoKICBTZWFu IFR1cm5lciA8c2VhbitpZXRmQHNuM3JkLmNvbT4KICBUZWQgSGFyZGllIDx0ZWQuaWV0ZkBnbWFp bC5jb20+CgpBc3NpZ25lZCBBcmVhIERpcmVjdG9yOgogIE11cnJheSBLdWNoZXJhd3kgPHN1cGVy dXNlckBnbWFpbC5jb20+CgpBcHBsaWNhdGlvbnMgYW5kIFJlYWwtVGltZSBBcmVhIERpcmVjdG9y czoKICBCYXJyeSBMZWliYSA8YmFycnlsZWliYUBjb21wdXRlci5vcmc+CiAgTXVycmF5IEt1Y2hl cmF3eSA8c3VwZXJ1c2VyQGdtYWlsLmNvbT4KCk1haWxpbmcgbGlzdDoKICBBZGRyZXNzOiBydGN3 ZWJAaWV0Zi5vcmcKICBUbyBzdWJzY3JpYmU6IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vcnRjd2ViCiAgQXJjaGl2ZTogaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9h cmNoL2Jyb3dzZS9ydGN3ZWIvCgpHcm91cCBwYWdlOiBodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2dyb3VwL3J0Y3dlYi8KCkNoYXJ0ZXI6IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2NoYXJ0ZXItaWV0Zi1ydGN3ZWIvCgpUaGUgUlRDV0VCIHdvcmtpbmcgZ3JvdXAgd2FzIG9y aWdpbmFsbHkgY2hhcnRlcmVkIHRvIHN0YW5kYXJkaXplIG1lY2hhbmlzbXMKdGhhdCBwcm92aWRl IGRpcmVjdCBpbnRlcmFjdGl2ZSByaWNoIGNvbW11bmljYXRpb24gdXNpbmcgYXVkaW8sIHZpZGVv LApjb2xsYWJvcmF0aW9uLCBnYW1lcywgZXRjLiBiZXR3ZWVuIHR3byBwZWVycycgd2ViLWJyb3dz ZXJzLCB3aXRob3V0IHJlcXVpcmluZwpub24tc3RhbmRhcmQgZXh0ZW5zaW9ucyBvciBwcm9wcmll dGFyeSBwbHVnLWlucy4gIFRoZSByZXN1bHQgd2FzIGEgc2V0IG9mClJGQ3MgZnJvbSBSVENXRUIs IGluIGFkZGl0aW9uIHRvIG1hbnkgb3RoZXIgUkZDcyBmcm9tIG90aGVyIHdvcmtpbmcgZ3JvdXBz LAphbGwgb2Ygd2hpY2ggYXJlIGludGVycmVsYXRlZCBhbmQgaGFkIHRvIGJlIHB1Ymxpc2hlZCB0 b2dldGhlciBpbiB3aGF0IHRoZQpSRkMgRWRpdG9yIHJlZmVycyB0byBhcyBhIOKAnGNsdXN0ZXLi gJ0uICBJbiB0aGUgZW5kLCB0aGF0IGNsdXN0ZXIgY29tcHJpc2VkIG1vcmUKdGhhbiA0MCBSRkNz IGFuZCB3YXMgZmluYWxseSBwdWJsaXNoZWQgaW4gSmFudWFyeSAyMDIxLgoKRHVyaW5nIHRoZSBy dW4tdXAgdG8gcHVibGljYXRpb24gb2YgdGhlIGNsdXN0ZXIsIGEgY29udHJhZGljdGlvbiB3YXMK aWRlbnRpZmllZCBiZXR3ZWVuIHdoYXQgYmVjYW1lIFJGQ3MgODgyOSBhbmQgODg0My4gIEEgZGVz Y3JpcHRpb24gb2YgdGhpcwpjb250cmFkaWN0aW9uIHdhcyBhZGRlZCB0byBib3RoIGRvY3VtZW50 cyB0byBoaWdobGlnaHQgdGhlIHByb2JsZW0sIGFuZCBzdGF0ZQpvdXIgaW50ZW50aW9uIHRvIHBy b2NlZWQgd2l0aCBwdWJsaWNhdGlvbiBidXQgcXVpY2tseSBpbml0aWF0ZSBhbiBlZmZvcnQgdG8K cHVibGlzaCB1cGRhdGVzIHRvIHRoZSBhZmZlY3RlZCBkb2N1bWVudHMuCgpUaGUga2V5IHBhcnQg b2YgdGhlIGFkZGVkIHRleHQgd2FzIGFzIGZvbGxvd3M6CgrigJxUaGUgc3BlY2lmaWMgaXNzdWUg aW52b2x2ZXMgdGhlIGhhbmRsaW5nIG9mICJtPSIgc2VjdGlvbnMgdGhhdCBhcmUKZGVzaWduYXRl ZCBhcyBidW5kbGUtb25seSwgYXMgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNC4xLjEgb2YgW1JGQyA4 ODI5XS4gCkN1cnJlbnRseSwgdGhlcmUgaXMgZGl2ZXJnZW5jZSBiZXR3ZWVuIEpTRVAgYW5kIEJV TkRMRSwgYXMgd2VsbCBhcyBiZXR3ZWVuCnRoZXNlIHNwZWNpZmljYXRpb25zIGFuZCBleGlzdGlu ZyBicm93c2VyIGltcGxlbWVudGF0aW9ucyDigKbigJ0KClRoZSB3b3JraW5nIGdyb3VwIGlzIGJl aW5nIHJlY29uc3RpdHV0ZWQgdG8gdGFrZSB1cCB0aGlzIGNvbnRyYWRpY3Rpb24sIGNvbWUKdG8g Y29uc2Vuc3VzIG9uIGEgcmVzb2x1dGlvbiwgYW5kIGlzc3VlIFN0YW5kYXJkcyBUcmFjayB1cGRh dGVzIGZvciB0aG9zZSB0d28KZG9jdW1lbnRzLiAgU3BlY2lmaWNhbGx5LCB0aGUgZ29hbCBvZiB0 aGlzIHdvcmsgaXMgdG8gYWRkcmVzcyBvbmx5IHRoZQpjb250cmFkaWN0aW9ucyByZWdhcmRpbmcg ImJ1bmRsZS1vbmx5IiBiZXR3ZWVuIEJVTkRMRSBhbmQgSlNFUC4gIFRoZQpyZXN1bHRpbmcgYWxp Z25lZCBzb2x1dGlvbiBzaG91bGQgYXZvaWQgaW1wYWN0aW5nIHRoZSBpbnRlcm9wZXJhYmlsaXR5 IHdpdGgKU0RQIE9mZmVyL0Fuc3dlci4gIEZpbmFsbHksIHRoZSBpbXBhY3Qgb24gZXhpc3Rpbmcg aW1wbGVtZW50YXRpb25zIHRoYXQgYXJlCmFmZmVjdGVkIGJ5IGFueSBjaGFuZ2UgaXMgdG8gYmUg Y29uc2lkZXJlZC4KCmRyYWZ0LWlldGYtcnRjd2ViLXNkcCwgd2hpY2ggaGFzIG5vdCB5ZXQgYmVl biBwdWJsaXNoZWQsIHdpbGwgYmUgcmV0dXJuZWQgdG8KdGhlIHdvcmtpbmcgZ3JvdXAgdG8gYmUg dXBkYXRlZCBhY2NvcmRpbmcgdG8gdGhlIHJlc29sdXRpb24gb2YgdGhlIGlzc3VlCmRlc2NyaWJl ZCBhYm92ZS4gIFRoZSB3b3JraW5nIGdyb3VwIHdpbGwgdGhlcmVmb3JlIHByb2R1Y2UgdXBkYXRl cyB0byB0aGUKSlNFUCBhbmQgQlVORExFIGRvY3VtZW50cywgYW5kIHJlLXN1Ym1pdCBkcmFmdC1p ZXRmLXJ0Y3dlYi1zZHAgZm9yCnB1YmxpY2F0aW9uIGFmdGVyIGl0IGhhcyBiZWVuIHJldmlzZWQu ICBVcGRhdGluZyBhbnkgb3RoZXIgZG9jdW1lbnQsIG9yCnRha2luZyB1cCBhbnkgb3RoZXIgaXNz dWUsIGlzIG91dCBvZiBzY29wZSBhbmQgd2lsbCByZXF1aXJlIElFU0cgYXBwcm92YWwgdmlhCnJl Y2hhcnRlcmluZy4KCkNvb3JkaW5hdGlvbiB3aXRoIHRoZSBNTVVTSUMgd29ya2luZyBncm91cCB0 byBkZXZlbG9wIHRoaXMgc29sdXRpb24gd2lsbCBiZQpyZXF1aXJlZC4KCk1pbGVzdG9uZXM6Cgog IEF1ZyAyMDIxIC0gVXBkYXRlIHRvIGRyYWZ0LWlldGYtcnRjd2ViLXNkcCB0byB0aGUgSUVTRyBh cyBJbmZvcm1hdGlvbmFsLgoKICBBdWcgMjAyMSAtIFVwZGF0ZXMgdG8gdGhlIEpTRVAgYW5kIEJV TkRMRSBkb2N1bWVudHMgdG8gdGhlIElFU0cgYXMgUHJvcG9zZWQKICBTdGFuZGFyZC4KCgoKX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KbmV3LXdvcmsgbWFp bGluZyBsaXN0Cm5ldy13b3JrQGlldGYub3JnCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vbmV3LXdvcmsK From nobody Fri Feb 5 18:15:47 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2DCA53A105A; Fri, 5 Feb 2021 18:15:38 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Takeshi Takahashi via Datatracker To: Cc: draft-ietf-ntp-yang-data-model.all@ietf.org, last-call@ietf.org, ntp@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161257773814.7967.4285334263331418527@ietfa.amsl.com> Reply-To: Takeshi Takahashi Date: Fri, 05 Feb 2021 18:15:38 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-ntp-yang-data-model-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Feb 2021 02:15:38 -0000 Reviewer: Takeshi Takahashi Review result: Ready The security consideration section is written well. I have one minor comment. The security consideration section discusses the necessity of access control by referencing RFC 8341. The access control feature was also discussed in Section 5, but the section refers RFC 5905 and RFC 8519. Since they are both dealing with the necessity of access control, it would be nicer if the security consideration section discusses the need for access control with the same (at least one same) reference. From nobody Fri Feb 5 20:59:31 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAC623A0C4E; Fri, 5 Feb 2021 20:59:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m3ESJjzmePpd; Fri, 5 Feb 2021 20:59:21 -0800 (PST) Received: from mail-il1-x12a.google.com (mail-il1-x12a.google.com [IPv6:2607:f8b0:4864:20::12a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB2AF3A0C49; Fri, 5 Feb 2021 20:59:17 -0800 (PST) Received: by mail-il1-x12a.google.com with SMTP id d6so7817434ilo.6; Fri, 05 Feb 2021 20:59:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=s4zm1oEJm8/EI7vfrDcjtNuKTSkbwV1KgwcFCaVQvMc=; b=sw4kCMRSCf8mqmID7QLrVLEl0kCrLP7WY6UAE4X81J0+lp29VfjoMjMYCe1DRsYArU fxS7HauNkvI2dEMSVWamSLpv/hfS5sejVgrojJ5vfpsCHPWSe0ry0DPwUwn5PGFC/dNU ObRCNB3JsGLp+2ys3bhlGkyc4kGdw4fHP2xFn4D1wmkxqHpbnBWoBoE3Rpsz0THBJBSR p2tqLrrifK4HkdwLY94LwkwQsv9WR7Bgs0pSyPZw7EfZ37l9ZAHvi7XLr0z/ATjCYwmD 31KLR+T8bFYIjmoNQMgAZT5DGJBqO6VMXD4fVATToTMzEH2CD17RwZcl0z9wKRAiDve1 oz2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=s4zm1oEJm8/EI7vfrDcjtNuKTSkbwV1KgwcFCaVQvMc=; b=AgWdTpfymXJXggoMWaKcWU5TCqLu23GnYr9sleQzysx4jezMX/NKLty2DLimjnSzhz 8o9Kj60fA+MFPiY7suSQtROZZ4b0b/bNZnqbGKqLrmiqXQGQIlUOGziP7jGhBjmBZxuz ZpUSb99zalGO7V5b1T0B19Ns1isa/9FL6ZTza2Veew7AZs1z4XTKO+7UPfGY5fcZthYW /pvRtYAsTf+Ymk8SZtN3oorDog4NNtCryg9Uo/oQf1DThQmBKupbbBy9wCWM+Zo3JjMe JInFXpB1SbkpqsJ+c9gzvKNXs/oq0B4lW3AVtZg7xj68orJErxu2t8w2yULJ+FIjsK9/ rGnA== X-Gm-Message-State: AOAM5334GWweZp/TDwdEbiqiWveOfd07tCEIbk8CtN+OAfLMAeS1pEh6 szAYa0NgDK/pBmDFgSGO2QFduDP+cpaiDN1vEpX/GeKQWrujdQ== X-Google-Smtp-Source: ABdhPJw9DqSi7c80+bWE3ABdLm0cRCubNtwurYxMnp53F61kl92YsNUzU1pWdc2yOWbX08Qvy2y5zyhpo7kTFlrXMaU= X-Received: by 2002:a92:c24b:: with SMTP id k11mr6916339ilo.276.1612587556589; Fri, 05 Feb 2021 20:59:16 -0800 (PST) MIME-Version: 1.0 References: <161257773814.7967.4285334263331418527@ietfa.amsl.com> In-Reply-To: <161257773814.7967.4285334263331418527@ietfa.amsl.com> From: Dhruv Dhody Date: Sat, 6 Feb 2021 10:28:40 +0530 Message-ID: To: Takeshi Takahashi Cc: secdir , draft-ietf-ntp-yang-data-model.all@ietf.org, last-call@ietf.org, NTP WG Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-ntp-yang-data-model-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Feb 2021 04:59:23 -0000 Hi Takeshi, Thanks for your review. The confusion might be between Network Access Control Lists (ACLs) and NETCONF Access Control Model (NACM). I can tighten up the text so that this is clear. See https://tools.ietf.org/tools/rfcdiff/rfcdiff.pyht?url1=draft-ietf-ntp-yang-data-model-10&url2=https://raw.githubusercontent.com/dhruvdhody/ietf/master/draft-ietf-ntp-yang-data-model-11.txt Thanks! Dhruv On Sat, Feb 6, 2021 at 7:45 AM Takeshi Takahashi via Datatracker wrote: > > Reviewer: Takeshi Takahashi > Review result: Ready > > The security consideration section is written well. > I have one minor comment. > The security consideration section discusses the necessity of access control by > referencing RFC 8341. The access control feature was also discussed in Section > 5, but the section refers RFC 5905 and RFC 8519. Since they are both dealing > with the necessity of access control, it would be nicer if the security > consideration section discusses the need for access control with the same (at > least one same) reference. > > > From nobody Sat Feb 6 11:34:54 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 38ADA3AD2CE; Sat, 6 Feb 2021 11:34:44 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Yaron Sheffer via Datatracker To: Cc: draft-ietf-pce-pcep-extension-for-pce-controller.all@ietf.org, last-call@ietf.org, pce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161264008418.17090.9500210699717988432@ietfa.amsl.com> Reply-To: Yaron Sheffer Date: Sat, 06 Feb 2021 11:34:44 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-pce-pcep-extension-for-pce-controller-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Feb 2021 19:34:44 -0000 Reviewer: Yaron Sheffer Review result: Not Ready This document defines PCEP extensions for the RFC 8283 architecture, where the PCE acts as a central controller in an SDN. The document is focused on specific use cases, referred to as "basic PCECC mode". Let me state up front that I am not familiar with the PCE architecture other than what I read up in order to review this document. Having said that, I suspect that there would be significant value in a security analysis of the architecture defined here. Having each connection "authenticated and encrypted" is table stakes nowadays, but is it really enough for very large SDN deployments that require this level of protocol sophistication? Details 9.1: "authenticated and encrypted" TLS sessions are typically only authenticated by the server. Please point out explicitly that mutual authentication is required. Also, is there no authorization? I would assume a peer PCE Controller is allowed to do different things than a PCC. Are all PCCs allowed to issue the same commands/queries, targeted at the same resources? - RFC 8283 which defines the architecture that is implemented by this draft says: [The] security implications of SDN have not been fully discussed or described. Therefore, protocol and applicability work-around solutions for this architecture must take proper account of these concerns. It is expected that each new document that is produced for a specific use case will also include considerations of the security impacts of the use of a PCE-based central controller on the network type and services being managed. I don't think that the current document addresses this challenge. In general, this looks like a very monolithic architecture, where everybody trusts everybody else once they've been authenticated. Although Sec. 9.1 discusses the case of a malicious PCE (which would be rather catastrophic), I would encourage the authors to consider whether a malicious PCC can also disrupt the PCE's operations and cause "major impact to the network". From nobody Sun Feb 7 10:48:30 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DE6EE3A11D6; Sun, 7 Feb 2021 10:48:19 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Joseph Salowey via Datatracker To: Cc: draft-ietf-oauth-access-token-jwt.all@ietf.org, last-call@ietf.org, oauth@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161272369978.20616.15063633580755015902@ietfa.amsl.com> Reply-To: Joseph Salowey Date: Sun, 07 Feb 2021 10:48:19 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-oauth-access-token-jwt-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Feb 2021 18:48:20 -0000 Reviewer: Joseph Salowey Review result: Has Issues I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is the document has issues. 1. (Editorial) What is the relationship between this document and RFC 7523. They are using JWT for different purposes, but I think it would be useful to clarify this in the introduction. 2. (Issue) The specification does not specify any mandatory to implement for the recommended asymmetric algorithms. This will not help interop. Perhaps specify one or both of "RS256" and "ES256". 3. (Question) Is it currently possible to use the JWT access token in a mode other than a bearer token? For example is there a way to bind the JWT to a verifiable key or identifier. If there is, there should be some discussion of this in the security considerations. If not, do the authors know if there is any work planned in this area? 4. Genart review pointed out a nit that should be fixed. From nobody Sun Feb 7 16:29:13 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DFD373A0D2A; Sun, 7 Feb 2021 16:29:02 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Rifaat Shekh-Yusef via Datatracker To: Cc: draft-ietf-ippm-capacity-metric-method.all@ietf.org, ippm@ietf.org, last-call@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161274414286.20211.7702078583876731294@ietfa.amsl.com> Reply-To: Rifaat Shekh-Yusef Date: Sun, 07 Feb 2021 16:29:02 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-ippm-capacity-metric-method-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Feb 2021 00:29:03 -0000 Reviewer: Rifaat Shekh-Yusef Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The document relies on an existing and well defined security considerations established by published RFCs. From nobody Sun Feb 7 22:58:51 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B082F3A136E; Sun, 7 Feb 2021 22:58:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id seFJZDg9N-KA; Sun, 7 Feb 2021 22:58:38 -0800 (PST) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66DE63A1378; Sun, 7 Feb 2021 22:58:38 -0800 (PST) Received: from fraeml709-chm.china.huawei.com (unknown [172.18.147.201]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4DYxXQ31Knz67lxD; Mon, 8 Feb 2021 14:52:06 +0800 (CST) Received: from fraeml709-chm.china.huawei.com (10.206.15.37) by fraeml709-chm.china.huawei.com (10.206.15.37) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Mon, 8 Feb 2021 07:58:34 +0100 Received: from DGGEML401-HUB.china.huawei.com (10.3.17.32) by fraeml709-chm.china.huawei.com (10.206.15.37) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.2106.2 via Frontend Transport; Mon, 8 Feb 2021 07:58:34 +0100 Received: from DGGEML532-MBX.china.huawei.com ([169.254.8.91]) by DGGEML401-HUB.china.huawei.com ([fe80::89ed:853e:30a9:2a79%31]) with mapi id 14.03.0509.000; Mon, 8 Feb 2021 14:58:27 +0800 From: "Pengshuping (Peng Shuping)" To: Yaron Sheffer , "secdir@ietf.org" CC: "draft-ietf-pce-pcep-extension-for-pce-controller.all@ietf.org" , "last-call@ietf.org" , "pce@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-pce-pcep-extension-for-pce-controller-10 Thread-Index: AQHW/L8qJ+sg0p8zoEy8y/Iuz/5QvqpNzNWA Date: Mon, 8 Feb 2021 06:58:27 +0000 Message-ID: <4278D47A901B3041A737953BAA078ADE198A9476@DGGEML532-MBX.china.huawei.com> References: <161264008418.17090.9500210699717988432@ietfa.amsl.com> In-Reply-To: <161264008418.17090.9500210699717988432@ietfa.amsl.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.153.194.197] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-pce-pcep-extension-for-pce-controller-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Feb 2021 06:58:41 -0000 RGVhciBZYXJvbiwgDQoNClRoYW5rIHlvdSBmb3IgeW91ciBjb21tZW50cyEgV2UgaGF2ZSBtYWRl IGFuIHVwZGF0ZSBiYXNlZCBvbiB5b3VyIGNvbW1lbnRzLiBQbGVhc2Ugc3VnZ2VzdCBmdXJ0aGVy IHRleHQgaWYgcmVxdWlyZWQuIFRoZSBTZWN1cml0eSBzZWN0aW9uIGlzIGZ1cnRoZXIgZXhwZW5k ZWQgYW5kIG1vcmUgZGV0YWlscyBhcmUgcHJvdmlkZWQsIGVzcGVjaWFsbHkgdGhlIG5ldyBzZWN0 aW9uIG9uIHRoZSBNYWxpY2lvdXMgUENDIGlzIGFkZGVkIGFzIGJlbG93LiANCg0KCSAJOS4yLiAg TWFsaWNpb3VzIFBDQwkNCiAJCQ0KIAkgICBUaGUgUENFQ0MgbWVjaGFuaXNtIGRlc2NyaWJlZCBp biB0aGlzIGRvY3VtZW50IHJlcXVpcmVzIHRoZSBQQ0UgdG8JDQogCSAgIGtlZXAgbGFiZWxzIChD Q0kpIHRoYXQgaXQgZG93bmxvYWRzIGFuZCByZWxpZXMgb24gdGhlIFBDQyByZXNwb25kaW5nCQ0K IAkgICAod2l0aCBlaXRoZXIgYW4gYWNrbm93bGVkZ21lbnQgb3IgYW4gZXJyb3IgbWVzc2FnZSkg dG8gcmVxdWVzdHMgZm9yCQ0KIAkgICBMU1AgaW5zdGFudGlhdGlvbi4gIFRoaXMgaXMgYW4gYWRk aXRpb25hbCBhdHRhY2sgc3VyZmFjZSBieSBwbGFjaW5nIGEJDQogCSAgIHJlcXVpcmVtZW50IGZv ciB0aGUgUENFIHRvIGtlZXAgYSBDQ0kvbGFiZWwgcmVwbGljYSBmb3IgZWFjaCBQQ0MuICBJdAkN CiAJICAgaXMgUkVDT01NRU5ERUQgdGhhdCBQQ0UgaW1wbGVtZW50YXRpb25zIHByb3ZpZGUgYSBs aW1pdCBvbiByZXNvdXJjZXMJDQogCSAgIChpbiB0aGlzIGNhc2UgdGhlIENDSSkgYSBzaW5nbGUg UENDIGNhbiBvY2N1cHkuICBbUkZDODIzMV0gcHJvdmlkZXMgYQkNCiAJICAgbm90aWZpY2F0aW9u IG1lY2hhbmlzbSB3aGVuIHN1Y2ggdGhyZXNob2xkIGlzIHJlYWNoZWQuCQ0KIAkNClBsZWFzZSBh bHNvIGZpbmQgdGhlIHdvcmtpbmcgY29weSBhbmQgdGhlIGRpZmYuIA0KDQpXb3JraW5nIGNvcHk6 IGh0dHBzOi8vcmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbS9kaHJ1dmRob2R5L2lldGYvbWFzdGVy L2RyYWZ0LWlldGYtcGNlLXBjZXAtZXh0ZW5zaW9uLWZvci1wY2UtY29udHJvbGxlci0xMS50eHQg DQpEaWZmOiBodHRwczovL3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvcmZjZGlmZi5weWh0 P3VybDE9ZHJhZnQtaWV0Zi1wY2UtcGNlcC1leHRlbnNpb24tZm9yLXBjZS1jb250cm9sbGVyLTEw JnVybDI9aHR0cHM6Ly9yYXcuZ2l0aHVidXNlcmNvbnRlbnQuY29tL2RocnV2ZGhvZHkvaWV0Zi9t YXN0ZXIvZHJhZnQtaWV0Zi1wY2UtcGNlcC1leHRlbnNpb24tZm9yLXBjZS1jb250cm9sbGVyLTEx LnR4dCANCg0KQmVzdCBSZWdhcmRzLCANClNodXBpbmcgDQoNCg0KPiAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KPiBGcm9tOiBZYXJvbiBTaGVmZmVyIHZpYSBEYXRhdHJhY2tlciBbbWFpbHRv Om5vcmVwbHlAaWV0Zi5vcmddDQo+IFNlbnQ6IFN1bmRheSwgRmVicnVhcnkgNywgMjAyMSAzOjM1 IEFNDQo+IFRvOiBzZWNkaXJAaWV0Zi5vcmcNCj4gQ2M6IGRyYWZ0LWlldGYtcGNlLXBjZXAtZXh0 ZW5zaW9uLWZvci1wY2UtY29udHJvbGxlci5hbGxAaWV0Zi5vcmc7DQo+IGxhc3QtY2FsbEBpZXRm Lm9yZzsgcGNlQGlldGYub3JnDQo+IFN1YmplY3Q6IFNlY2RpciBsYXN0IGNhbGwgcmV2aWV3IG9m DQo+IGRyYWZ0LWlldGYtcGNlLXBjZXAtZXh0ZW5zaW9uLWZvci1wY2UtY29udHJvbGxlci0xMA0K PiANCj4gUmV2aWV3ZXI6IFlhcm9uIFNoZWZmZXINCj4gUmV2aWV3IHJlc3VsdDogTm90IFJlYWR5 DQo+IA0KPiBUaGlzIGRvY3VtZW50IGRlZmluZXMgUENFUCBleHRlbnNpb25zIGZvciB0aGUgUkZD IDgyODMgYXJjaGl0ZWN0dXJlLCB3aGVyZQ0KPiB0aGUgUENFIGFjdHMgYXMgYSBjZW50cmFsIGNv bnRyb2xsZXIgaW4gYW4gU0ROLiBUaGUgZG9jdW1lbnQgaXMgZm9jdXNlZCBvbg0KPiBzcGVjaWZp YyB1c2UgY2FzZXMsIHJlZmVycmVkIHRvIGFzICJiYXNpYyBQQ0VDQyBtb2RlIi4NCj4gDQo+IExl dCBtZSBzdGF0ZSB1cCBmcm9udCB0aGF0IEkgYW0gbm90IGZhbWlsaWFyIHdpdGggdGhlIFBDRSBh cmNoaXRlY3R1cmUgb3RoZXINCj4gdGhhbiB3aGF0IEkgcmVhZCB1cCBpbiBvcmRlciB0byByZXZp ZXcgdGhpcyBkb2N1bWVudC4gSGF2aW5nIHNhaWQgdGhhdCwgSQ0KPiBzdXNwZWN0IHRoYXQgdGhl cmUgd291bGQgYmUgc2lnbmlmaWNhbnQgdmFsdWUgaW4gYSBzZWN1cml0eSBhbmFseXNpcyBvZiB0 aGUNCj4gYXJjaGl0ZWN0dXJlIGRlZmluZWQgaGVyZS4gSGF2aW5nIGVhY2ggY29ubmVjdGlvbiAi YXV0aGVudGljYXRlZCBhbmQNCj4gZW5jcnlwdGVkIg0KPiBpcyB0YWJsZSBzdGFrZXMgbm93YWRh eXMsIGJ1dCBpcyBpdCByZWFsbHkgZW5vdWdoIGZvciB2ZXJ5IGxhcmdlIFNETg0KPiBkZXBsb3lt ZW50cyB0aGF0IHJlcXVpcmUgdGhpcyBsZXZlbCBvZiBwcm90b2NvbCBzb3BoaXN0aWNhdGlvbj8N Cj4gDQo+IERldGFpbHMNCj4gDQo+IDkuMTogImF1dGhlbnRpY2F0ZWQgYW5kIGVuY3J5cHRlZCIg VExTIHNlc3Npb25zIGFyZSB0eXBpY2FsbHkgb25seQ0KPiBhdXRoZW50aWNhdGVkIGJ5IHRoZSBz ZXJ2ZXIuIFBsZWFzZSBwb2ludCBvdXQgZXhwbGljaXRseSB0aGF0IG11dHVhbA0KPiBhdXRoZW50 aWNhdGlvbiBpcyByZXF1aXJlZC4gQWxzbywgaXMgdGhlcmUgbm8gYXV0aG9yaXphdGlvbj8gSSB3 b3VsZCBhc3N1bWUgYQ0KPiBwZWVyIFBDRSBDb250cm9sbGVyIGlzIGFsbG93ZWQgdG8gZG8gZGlm ZmVyZW50IHRoaW5ncyB0aGFuIGEgUENDLiBBcmUgYWxsIFBDQ3MNCj4gYWxsb3dlZCB0byBpc3N1 ZSB0aGUgc2FtZSBjb21tYW5kcy9xdWVyaWVzLCB0YXJnZXRlZCBhdCB0aGUgc2FtZQ0KPiByZXNv dXJjZXM/DQo+IA0KPiAtIFJGQyA4MjgzIHdoaWNoIGRlZmluZXMgdGhlIGFyY2hpdGVjdHVyZSB0 aGF0IGlzIGltcGxlbWVudGVkIGJ5IHRoaXMgZHJhZnQNCj4gc2F5czoNCj4gDQo+IFtUaGVdIHNl Y3VyaXR5IGltcGxpY2F0aW9ucyBvZiBTRE4gaGF2ZSBub3QgYmVlbiBmdWxseSBkaXNjdXNzZWQg b3INCj4gZGVzY3JpYmVkLg0KPiBUaGVyZWZvcmUsIHByb3RvY29sIGFuZCBhcHBsaWNhYmlsaXR5 IHdvcmstYXJvdW5kIHNvbHV0aW9ucyBmb3IgdGhpcw0KPiBhcmNoaXRlY3R1cmUgbXVzdCB0YWtl IHByb3BlciBhY2NvdW50IG9mIHRoZXNlIGNvbmNlcm5zLg0KPiANCj4gSXQgaXMgZXhwZWN0ZWQg dGhhdCBlYWNoIG5ldyBkb2N1bWVudCB0aGF0IGlzIHByb2R1Y2VkIGZvciBhIHNwZWNpZmljIHVz ZQ0KPiBjYXNlIHdpbGwgYWxzbyBpbmNsdWRlIGNvbnNpZGVyYXRpb25zIG9mIHRoZSBzZWN1cml0 eSBpbXBhY3RzIG9mIHRoZSB1c2Ugb2YgYQ0KPiBQQ0UtYmFzZWQgY2VudHJhbCBjb250cm9sbGVy IG9uIHRoZSBuZXR3b3JrIHR5cGUgYW5kIHNlcnZpY2VzIGJlaW5nDQo+IG1hbmFnZWQuDQo+IA0K PiBJIGRvbid0IHRoaW5rIHRoYXQgdGhlIGN1cnJlbnQgZG9jdW1lbnQgYWRkcmVzc2VzIHRoaXMg Y2hhbGxlbmdlLg0KPiANCj4gSW4gZ2VuZXJhbCwgdGhpcyBsb29rcyBsaWtlIGEgdmVyeSBtb25v bGl0aGljIGFyY2hpdGVjdHVyZSwgd2hlcmUgZXZlcnlib2R5DQo+IHRydXN0cyBldmVyeWJvZHkg ZWxzZSBvbmNlIHRoZXkndmUgYmVlbiBhdXRoZW50aWNhdGVkLiBBbHRob3VnaCBTZWMuIDkuMQ0K PiBkaXNjdXNzZXMgdGhlIGNhc2Ugb2YgYSBtYWxpY2lvdXMgUENFICh3aGljaCB3b3VsZCBiZSBy YXRoZXIgY2F0YXN0cm9waGljKSwgSQ0KPiB3b3VsZCBlbmNvdXJhZ2UgdGhlIGF1dGhvcnMgdG8g Y29uc2lkZXIgd2hldGhlciBhIG1hbGljaW91cyBQQ0MgY2FuIGFsc28NCj4gZGlzcnVwdCB0aGUg UENFJ3Mgb3BlcmF0aW9ucyBhbmQgY2F1c2UgIm1ham9yIGltcGFjdCB0byB0aGUgbmV0d29yayIu DQo+IA0KDQo= From nobody Mon Feb 8 01:21:39 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4668C3A1501; Mon, 8 Feb 2021 01:21:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.506 X-Spam-Level: X-Spam-Status: No, score=-0.506 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, MALFORMED_FREEMAIL=1.591, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WMrJHsKL4yIy; Mon, 8 Feb 2021 01:21:27 -0800 (PST) Received: from mail-wr1-x434.google.com (mail-wr1-x434.google.com [IPv6:2a00:1450:4864:20::434]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 776D83A14FF; Mon, 8 Feb 2021 01:21:27 -0800 (PST) Received: by mail-wr1-x434.google.com with SMTP id v14so616938wro.7; Mon, 08 Feb 2021 01:21:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version:content-transfer-encoding; bh=/ds6Muv1939XvrLvPOfIo7W5owsP4Zmt6RTOwdPoySk=; b=dduxTCbkDWQUQxQlSR/yOA2nxKIesZw6cxoCpWWTHXA3Ih3PN0Lj+ysOZaV0pcz8YP 0CvY9r2anRahZ4ocVj6rNwWwVcC3PQC8S9kP+gj9jrQyKifHiRdvuvpeNIHzvGZtWGLZ bFd4gYhFEPji2pHfABTQEr3eeo2ePnCOXtYIN4ooUvQYQYSP3ID50R6ul7xB6fOEf6Xv 5rlMOpicdr1EHw9j49OqgyPMEttkTrU8SkgQ7uEdV2BZaZu6FOvVP4W21J4AoDVc+V47 9Yb+bU9U9+gl7fdLVRoj7lKsZlSVbn0wMNfRsmMH28lATXo89bTENQ1KTYqbkoVzycxv iTkQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=/ds6Muv1939XvrLvPOfIo7W5owsP4Zmt6RTOwdPoySk=; b=XFWAaka8q6+F6MgNOvaOIdhlsUMKx/GvDF2cQDK0bgwlaKA2bQxBif2eBCc6xEoTax dVFWCdvgekUkajXWmB6hpodAphmZtoLyNGfODOkZ0uGrHwrt/kDjPKURBc14mcqdTN3l wljxxi6JbnaFs9CMR3lMMyRVq6ichPtFY4g8Kdk0PgP16udZ8Cc57CTkOv+i1QGdkCHD HS/GgqEV/rXBel96y9ulUHgiaDW+gUjGqiTv7JkAV5/XanoWoJHwv+5FSwBtkA4jFpbf zKZJXKyFSrZTxU99G6dPw4QSM+xU3OVFZuY7kKFSR5NV5wPzyQLW4inLTejVG+AXRTJq bD+g== X-Gm-Message-State: AOAM533vkCdMAgZrWNiKtk1wrIP5jw8nCAjVgPrAP07IhtXoNQXzJq5A 779pi3b62kLIG3+Eq22lMH8FbpxC8P4= X-Google-Smtp-Source: ABdhPJz0OHPGHA2wVeSuibFkc1ZIwnAZLeG3YRYRC6soqqS70uBsWDdmLlyzay6OuyTkkIEsESBLiw== X-Received: by 2002:a05:6000:1374:: with SMTP id q20mr18186596wrz.44.1612776086002; Mon, 08 Feb 2021 01:21:26 -0800 (PST) Received: from [192.168.68.105] (bzq-79-183-113-247.red.bezeqint.net. [79.183.113.247]) by smtp.gmail.com with ESMTPSA id h14sm20887442wmq.45.2021.02.08.01.21.24 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 08 Feb 2021 01:21:25 -0800 (PST) User-Agent: Microsoft-MacOutlook/16.45.21011103 Date: Mon, 08 Feb 2021 11:21:23 +0200 From: Yaron Sheffer To: "Pengshuping (Peng Shuping)" , "secdir@ietf.org" CC: "draft-ietf-pce-pcep-extension-for-pce-controller.all@ietf.org" , "last-call@ietf.org" , "pce@ietf.org" Message-ID: Thread-Topic: Secdir last call review of draft-ietf-pce-pcep-extension-for-pce-controller-10 References: <161264008418.17090.9500210699717988432@ietfa.amsl.com> <4278D47A901B3041A737953BAA078ADE198A9476@DGGEML532-MBX.china.huawei.com> In-Reply-To: <4278D47A901B3041A737953BAA078ADE198A9476@DGGEML532-MBX.china.huawei.com> Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-pce-pcep-extension-for-pce-controller-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Feb 2021 09:21:30 -0000 Hi Shuping, Frankly I don't know if this addresses my comments, that is, if these are a= ll the additional security considerations that apply to SDN, compared to a b= asic PCEP deployment. But thank you for the new text which does improve the = Security Considerations significantly. Thanks, Yaron =EF=BB=BFOn 2/8/21, 08:58, "Pengshuping (Peng Shuping)" = wrote: Dear Yaron,=20 Thank you for your comments! We have made an update based on your comme= nts. Please suggest further text if required. The Security section is furthe= r expended and more details are provided, especially the new section on the = Malicious PCC is added as below.=20 9.2. Malicious PCC The PCECC mechanism described in this document requires the PCE to= keep labels (CCI) that it downloads and relies on the PCC respondi= ng (with either an acknowledgment or an error message) to requests fo= r LSP instantiation. This is an additional attack surface by placin= g a requirement for the PCE to keep a CCI/label replica for each PCC. = It is RECOMMENDED that PCE implementations provide a limit on resourc= es (in this case the CCI) a single PCC can occupy. [RFC8231] provide= s a notification mechanism when such threshold is reached. Please also find the working copy and the diff.=20 Working copy: https://raw.githubusercontent.com/dhruvdhody/ietf/master/= draft-ietf-pce-pcep-extension-for-pce-controller-11.txt=20 Diff: https://tools.ietf.org/tools/rfcdiff/rfcdiff.pyht?url1=3Ddraft-ietf= -pce-pcep-extension-for-pce-controller-10&url2=3Dhttps://raw.githubusercontent= .com/dhruvdhody/ietf/master/draft-ietf-pce-pcep-extension-for-pce-controller= -11.txt=20 Best Regards,=20 Shuping=20 > -----Original Message----- > From: Yaron Sheffer via Datatracker [mailto:noreply@ietf.org] > Sent: Sunday, February 7, 2021 3:35 AM > To: secdir@ietf.org > Cc: draft-ietf-pce-pcep-extension-for-pce-controller.all@ietf.org; > last-call@ietf.org; pce@ietf.org > Subject: Secdir last call review of > draft-ietf-pce-pcep-extension-for-pce-controller-10 >=20 > Reviewer: Yaron Sheffer > Review result: Not Ready >=20 > This document defines PCEP extensions for the RFC 8283 architecture, = where > the PCE acts as a central controller in an SDN. The document is focus= ed on > specific use cases, referred to as "basic PCECC mode". >=20 > Let me state up front that I am not familiar with the PCE architectur= e other > than what I read up in order to review this document. Having said tha= t, I > suspect that there would be significant value in a security analysis = of the > architecture defined here. Having each connection "authenticated and > encrypted" > is table stakes nowadays, but is it really enough for very large SDN > deployments that require this level of protocol sophistication? >=20 > Details >=20 > 9.1: "authenticated and encrypted" TLS sessions are typically only > authenticated by the server. Please point out explicitly that mutual > authentication is required. Also, is there no authorization? I would = assume a > peer PCE Controller is allowed to do different things than a PCC. Are= all PCCs > allowed to issue the same commands/queries, targeted at the same > resources? >=20 > - RFC 8283 which defines the architecture that is implemented by this= draft > says: >=20 > [The] security implications of SDN have not been fully discussed or > described. > Therefore, protocol and applicability work-around solutions for this > architecture must take proper account of these concerns. >=20 > It is expected that each new document that is produced for a specific= use > case will also include considerations of the security impacts of the = use of a > PCE-based central controller on the network type and services being > managed. >=20 > I don't think that the current document addresses this challenge. >=20 > In general, this looks like a very monolithic architecture, where eve= rybody > trusts everybody else once they've been authenticated. Although Sec. = 9.1 > discusses the case of a malicious PCE (which would be rather catastro= phic), I > would encourage the authors to consider whether a malicious PCC can a= lso > disrupt the PCE's operations and cause "major impact to the network". >=20 From nobody Mon Feb 8 12:45:06 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 734D03A167F; Mon, 8 Feb 2021 12:44:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.351 X-Spam-Level: X-Spam-Status: No, score=-2.351 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HvkHs0rUBLEn; Mon, 8 Feb 2021 12:44:46 -0800 (PST) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2068.outbound.protection.outlook.com [40.107.22.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F29373A1641; Mon, 8 Feb 2021 12:44:39 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=haPCmzg+RQ2/Fcr6DOlEyFh9sVOMC0+HGzVfes/A4FhsJmJbIA+//QwQTkF0sY0KbZx92gPGqKsIi8E8TkSOYIO68+Iy2NgauE/2dvRkrujJwyf6SMT27o7TtnNaBx9jUnfXGG7HPa2ZF2rVwJOGQS5FG3qDMg8D9yEEImByjHJTDmi4Lso/6OmY0om3PoprntJeP303k7l5aF+V7AxTkoQL60wtAI+Gx6j5J+CPn7JKQ5h2QajaUfWaVzun1rec7SDZLY7AjXVlywfQWg6qqSUO8zAtEr6UXtQRn0ZZ3Xfh8RuaSmkIe1TAcL/BLi8FC/2T558vIMYcZ+MLx0aOjw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xj6FIiSE2UGOAeeUStWtrVipfL771/RcnMDND8b1TdA=; b=kuK2kgkO9rVHBgKN5WNqgUJOxsUhWl1+zifHm9CSVjsqOF1yZLWmXl8wt8qi0KKgubng4FrzB8aHKtMGDVMfL8XpOcdjgOScgNbD8hW+Efsl1cB0jcqP5PWOUzqV3Hc5nm793ecTWKWWQPLuO6SyJam1JRrn7DVahu05xT8lGjrMYc3yOqKs/ynis5a/MRlzv36vdj/r6KlEnzVuj85bLT+KbHpQURc2/Eg+z61CwUBeLRYlJ/EmhVeemawHsmtMsNwems11ZFHFv9RuFBTaPJWzLsCEbRUMuwYimFAMhiI2g9xBnuASjQrJEm4tXYAf+jaVCSilCX/1uLbZtMQcnw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xj6FIiSE2UGOAeeUStWtrVipfL771/RcnMDND8b1TdA=; b=cI87AVSyNqqUbcOnhg/kIo8qXFMIR0R+ip8q/eBydMypsYrV6opLaH1Z77HJr7X2+vCKqxmIz0kPgiYT1RLljXXj9KRG0e5XdDZ7sfD7PPqbyn9wdoeyU9MLY6D8SO87bZ8TpOu+OXmg6NQVdw1T48Ik9gewu6J72KB2iZhhT7M= Received: from (2603:10a6:208:22::25) by AM9PR07MB7697.eurprd07.prod.outlook.com (2603:10a6:20b:2c2::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3846.20; Mon, 8 Feb 2021 20:44:37 +0000 Received: from AM0PR0702MB3603.eurprd07.prod.outlook.com ([fe80::24d3:85ea:df17:ed0b]) by AM0PR0702MB3603.eurprd07.prod.outlook.com ([fe80::24d3:85ea:df17:ed0b%3]) with mapi id 15.20.3846.024; Mon, 8 Feb 2021 20:44:37 +0000 From: =?iso-8859-1?Q?Bal=E1zs_Varga_A?= To: Yoav Nir , "secdir@ietf.org" CC: "last-call@ietf.org" , "detnet@ietf.org" , "draft-ietf-detnet-mpls-over-tsn.all@ietf.org" Thread-Topic: [Detnet] Secdir last call review of draft-ietf-detnet-mpls-over-tsn-05 Thread-Index: AQHW9osFLO70aGOimU2OmLpVakdv1KpOsRew Date: Mon, 8 Feb 2021 20:44:37 +0000 Message-ID: References: <161195798389.15160.12141368782949515798@ietfa.amsl.com> In-Reply-To: <161195798389.15160.12141368782949515798@ietfa.amsl.com> Accept-Language: hu-HU, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [94.21.210.80] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a4140801-8d2d-460b-eec3-08d8cc7259e3 x-ms-traffictypediagnostic: AM9PR07MB7697: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR0702MB3603.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(346002)(39860400002)(376002)(396003)(366004)(4326008)(71200400001)(53546011)(33656002)(186003)(52536014)(66446008)(64756008)(6506007)(86362001)(8936002)(966005)(26005)(8676002)(5660300002)(2906002)(7696005)(83380400001)(54906003)(66556008)(110136005)(478600001)(316002)(76116006)(66946007)(66476007)(9686003)(55016002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?iso-8859-1?Q?/YMrI+HfpKtAJpSs0VvGmrOioBa6gaSgPRICu0X6W8cvJa0TBFew9SJxmB?= =?iso-8859-1?Q?Rh8/te1Ln07b4ZvapOHv25O4AvAs0gqSOj0P6c9WmCvoHOYbq6A6h2YqSK?= =?iso-8859-1?Q?dkiDMhM7u8TrtKV3wABWtKvwzAwShXgQaA09b3QSE3pRY0C+qakvq0GrDR?= =?iso-8859-1?Q?0iye8B4yKqlJkAaUYXHgN0H35KYTuQta5Tr3qCexGTPifpfLuqcIgzhfgh?= =?iso-8859-1?Q?N0jc9X0di1NugVu333IQoK1F7FbHxmH76rfjKs4a7qLZnMuwOqj9FtlEJL?= =?iso-8859-1?Q?WNzZ21/OWEmo8FcnghY2ebam4aPdbK/SbwGAevHNFGsM8bOIy3Hq+IQ2Ud?= =?iso-8859-1?Q?ACBV9umhhqofskTujaxwn1Qw1QkpKd4wsdrxSZjsa8MzyjwYDLYo7kvOsa?= =?iso-8859-1?Q?zZ9RyeouWIbVs2TuFmSXjCZKmcYZF01URsiDo9pmfG5QXashzlBXw6P+wE?= =?iso-8859-1?Q?9c11rIR4dFjan3RfuEjp2BYaGW+sj/py5gU/NPCtDXfe5p9Nm+MyLN3YqQ?= =?iso-8859-1?Q?bNiUuRf81Ybo2asL7CsYyVb5xmicmyh2Zgfuw/+xlSOk1WfqVoA51IKaHX?= =?iso-8859-1?Q?18+bNCiEic3iHRboL53FZF8MMrLGQzCiOwRLy6npmQJcsdS05OTFeE50mg?= =?iso-8859-1?Q?Gvk0/Qy6atsjbr1soYW/vNuiABGa0wwfHA4kHeF9RgbSXhRzJXm8Sh8P1/?= =?iso-8859-1?Q?lGedlwysBRBkDmCeaaoMQ7WAtP2x+q3mVL3pGWRXD6QPwFnl2FZ0pGkMJv?= =?iso-8859-1?Q?+KtI0IX6e3WouABiVWJQHYVQ2NKl7d6KU4P1Zv+iRXU3ekMVXJWC6bhrmf?= =?iso-8859-1?Q?kicxmV+4Yh8miOhLDOJbMM84pFpV191FAXpUKFuyqck3/++dl/4UW+BFpQ?= =?iso-8859-1?Q?EIV5p3t7nJs1Kicm6s097shXMb8Q9rjslEcv0Z8RA1zrhQxUUYaiahZST9?= =?iso-8859-1?Q?T/Ru7XvGDJ5k5mHQwpxHatCwJnrti0WxQCRvuoF5eE9KBSK8eIY0pfE2te?= =?iso-8859-1?Q?wAYhMZXUkUp2b/69v5/C3SRxH2+r7MRC9Lmq+rx74t091QtG5/NF8MSggU?= =?iso-8859-1?Q?2PwPZbyWDMvpONVsUhVscFMbTGp5GrgwKOVMTRhxZ7gn+Glz1wv1umz5o3?= =?iso-8859-1?Q?OhzlX/OOGJyrY1iO9/t9n08c8OVjia5n7ZfAGb170+dGVzgFU57h1Z3moQ?= =?iso-8859-1?Q?hMFFbXtVQUa5hqUfTuvdaPYKlo6UowXT92uj3KI5TNVAVRiyPvZCVnnQxm?= =?iso-8859-1?Q?4dhkDA2WmLR36piQMtlXjrhmf8IgV8uVSPYDjPyM/5gZdKoc+bXQHbdCox?= =?iso-8859-1?Q?5RnX+VeTFuSUDckhY+RHLE4Fg5EbOeEe6SrGJL4zgN8Oa+Yhd7YRBcIo7z?= =?iso-8859-1?Q?FzBoJkEFQI?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM0PR0702MB3603.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: a4140801-8d2d-460b-eec3-08d8cc7259e3 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Feb 2021 20:44:37.8913 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: EADMlJ1qnsGnyurPSWQ6Wk19w2j3ctkTXY67yXKqOPK5nCK7pAxlcXWyUfUeqdw2vzVmB8KXEHtO6G5m8n73TRfqkD3s6w8EnWFEKm8ZZIw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR07MB7697 Archived-At: Subject: Re: [secdir] [Detnet] Secdir last call review of draft-ietf-detnet-mpls-over-tsn-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Feb 2021 20:44:53 -0000 Hi Yoav, Many thanks for your review. Thanks Bala'zs -----Original Message----- From: detnet On Behalf Of Yoav Nir via Datatracke= r Sent: Friday, January 29, 2021 11:06 PM To: secdir@ietf.org Cc: last-call@ietf.org; detnet@ietf.org; draft-ietf-detnet-mpls-over-tsn.al= l@ietf.org Subject: [Detnet] Secdir last call review of draft-ietf-detnet-mpls-over-ts= n-05 Reviewer: Yoav Nir Review result: Ready I have reviewed this document as part of the security directorate's ongoing= effort to review all IETF documents being processed by the IESG. These co= mments were written primarily for the benefit of the security area director= s. Document editors and WG chairs should treat these comments just like any o= ther last call comments. The document links to two external documents, one dedicated to security con= siderations for DetNet, the other for DetNet over MPLS, both documents are = works in progress. This is a good use of security considerations by referen= ce. For the specific issues regarding MPLS over TSN, the short section provides= adequate details. _______________________________________________ detnet mailing list detnet@ietf.org https://www.ietf.org/mailman/listinfo/detnet From nobody Mon Feb 8 23:26:36 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70CDA3A11CA; Mon, 8 Feb 2021 23:26:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NPJhtZqgHsqG; Mon, 8 Feb 2021 23:26:33 -0800 (PST) Received: from mail-il1-x134.google.com (mail-il1-x134.google.com [IPv6:2607:f8b0:4864:20::134]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E24693A11C0; Mon, 8 Feb 2021 23:26:32 -0800 (PST) Received: by mail-il1-x134.google.com with SMTP id a16so15229593ilq.5; Mon, 08 Feb 2021 23:26:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=70ASxyPI10GjeT+AgFIiUTYipRDJfGahcre7bjIvM2s=; b=QALnsAR3sViSZssW9EgAheaI9TjRllpZ1a4My3+77bVDdwPKWigESghYz5F9zpZXn4 2Dd9RCl/OIybihfJf1tPR3HnX3dYVAZUsAiaBbVdKKwrawJBs+ZgVeAYVYOylTFPGVP5 98C3dNYn7d2cEywHqcZk/OzQ5LeCmrxp0xqgkZwZkKA+6ChKlW5StrKX66Lx1GK3Z6zd Z9CqpgBFpDidY/Azpc5lt/5vk3OcNWuk66dke0Qweovq2nrODoS38Z5JxR/xZUV+TbX3 Cwmq/hagR+8iRWIphT/ufYRALdpEumpFaJPk+ABv14xsMkRWF4i0rmMQO9BPOciRCrdd KeZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=70ASxyPI10GjeT+AgFIiUTYipRDJfGahcre7bjIvM2s=; b=UL4BRH0XsK5vZaW4lx94EBlSmSyOjI0wjC78NaPHTcojarsyUr55g6UyGWc5uo1O0M +gWEuoCG0iybgInTr2W4NTjtfVnXHtEXMkT4XMERlfa+JWY5E960MjdzUOUJgqQBZw2m T74EpzO/m5tepHFCP9V/X/MnxKO0wyfgxfkvdj9u1Kc6oDqtlpNVJMwQTD91PXrejAZg LwP9T5goSBkEmodwLeq0N/WqIKdbZDGzpleGb6KuZG33+gHH8i7S0IlMqcxqIyu74o8q FzgMAuj4JFoYP/tR46JkmHRG8VuuujxuJmYOPoYws+u4DN1yt4cDaroESnoYc0Wum2Fb Hdnw== X-Gm-Message-State: AOAM531fPv326gczX2vZh+9fxQ6P9gi5tlj4KyQ24NLNon5HEW+NCYdw h1rsIfEF2oclJKmaUihlC0K8A/ReuwolmY+H22APUtVJ X-Google-Smtp-Source: ABdhPJw5ZA+NKMxptbjwgB7uOfVPC+BOCUxarDEttPLkvKwu661gmr2/xReL+jpKE012KWT3QLgNZZjBrB55X+mqIO8= X-Received: by 2002:a05:6e02:96d:: with SMTP id q13mr18162883ilt.16.1612855591913; Mon, 08 Feb 2021 23:26:31 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: =?UTF-8?Q?Magnus_Nystr=C3=B6m?= Date: Mon, 8 Feb 2021 23:26:23 -0800 Message-ID: To: draft-ietf-detnet-tsn-vpn-over-mpls@ietf.org, secdir@ietf.org Content-Type: multipart/alternative; boundary="000000000000a14be505bae23464" Archived-At: Subject: [secdir] Secdir review of draft-ietf-detnet-tsn-vpn-over-mpls-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Feb 2021 07:26:35 -0000 --000000000000a14be505bae23464 Content-Type: text/plain; charset="UTF-8" I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document describes a deterministic network data plane when time-sensitive networks are interconnected. The security considerations section seems adequate though the integration of a protocol (TSN) on top of another protocol (DetNet/MPLS) sometimes can yield new results so it is just a question to the authors if no new security consideration results from the application of TSN over DetNet/MPLS? Editorial: - "TSN" is used as an acronym in the abstract as is DetNet (and MPLS, although that is perhaps more common knowledge). Would be goot to spell out these acronyms directly in the abstract. - Section 6, "challanges" -> "challenges" - Section 6, "are member" -> "are members" Thanks, -- Magnus --000000000000a14be505bae23464 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
<= div class=3D"gmail_quote">
I have reviewed this document as part of the security directorate's ong= oing effort to review all IETF documents being processed by the IESG. These= comments were written primarily for the benefit of the security area direc= tors.=C2=A0 Document editors and WG chairs should treat these comments just= like any other last call comments.

This document describes a deterministic network data pl= ane when time-sensitive networks are interconnected.

The security considerations section seems adequate though the integratio= n of a protocol (TSN) on top of another protocol (DetNet/MPLS) sometimes ca= n yield new results so it is just a question to the authors if=C2=A0 no new= security consideration results from the application of TSN over DetNet/MPL= S?

Editorial:
  • "TSN" is used as an acronym in the abstract as is De= tNet (and MPLS, although that is perhaps more common knowledge). Would be g= oot to spell out these acronyms directly in the abstract.
  • Secti= on 6, "challanges" -> "challenges"
  • Section 6= , "are member" -> "are members"
<= div dir=3D"ltr">Thanks,
-- Magnus
--000000000000a14be505bae23464-- From nobody Tue Feb 9 08:17:23 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA08B3A0EF2; Tue, 9 Feb 2021 08:17:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.349 X-Spam-Level: X-Spam-Status: No, score=-2.349 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZutvvUpOSvwy; Tue, 9 Feb 2021 08:17:18 -0800 (PST) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40046.outbound.protection.outlook.com [40.107.4.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 555BA3A0EFA; Tue, 9 Feb 2021 08:17:17 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=bEsrJTFwmyO0MNgUYFgKq7P5Ig6WipKnwuWY3fQP4apHQChosK5ui7TCOMMUXNfzXdpkMj7to/qSzsjG5fkNnO2fYg3vWphBEZYDcy3MCZETgNrICPSq9z9Pi2DjirG8uVf68z+ZZdGCICe8GXvFjYZZQGCdhv8n5oKaPhBBHl3dte/rMe2vHJDI94Z3Cd+ahkht7B50rxBL5+ii4n0JRAt5hSJmj3dZBKV4xsSEzFN8WJyo//VPneuaRTRJzjxizkvGFyL8XCDeqsIINd4JSOSNjfTOEx35RXFRIe1A8B/ZsOkgdW6QnPR/85mPk16jf6KI63TMuWUQWDWpSST/bQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1xl6rzFevSRbSyOEYv6VunPtpLVNyCQqL0J8TEaLgiI=; b=S1P0UoJs7inwACt2qS8eilsB/EB330eylhFejFNyXzMe1/WaaCWUKD5IIqVpIBq+CzDVnkMylqbK3hGT9LPTTAzaCsvdoPNvjVZN0gna80+XYGfNIyK2+7K1AhHrdrn82yQBY9Uyrkz89aYt/me5n8Fot/0R8f4SyXFAgLEdKdb+tF6odL/pjYBSCGJlV5rhnWg5BPW888qwYOhBFz4ExPOL7ma++T2q9ujDyHfqn+0uBNLlerjb3A2IGNN2svuimRjSBfgz2VqgVPegw0b1i+VXalsNyFXAXACqr5XB9TJAnDlZuSiBiErTYbIDEiNb021u4NmfljlXUuecn1GXbg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1xl6rzFevSRbSyOEYv6VunPtpLVNyCQqL0J8TEaLgiI=; b=FPNSZtMeBUrmpO39TqC8VgYA7PxKYwopGRtcoA+zfqbRLWx/2empKCKMq30Nca3gvG1MO2FTX39mgYtD8aFaztkB07h9KkBvEuVYdpifMeV55hqYl/JCQcDb0qsG3HsIVx+heb6r48J5jRh9e1ljjE26DJq7K60NtTG6o9IfFtI= Received: from (2603:10a6:208:22::25) by AM0PR07MB5586.eurprd07.prod.outlook.com (2603:10a6:208:f1::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3846.24; Tue, 9 Feb 2021 16:17:14 +0000 Received: from AM0PR0702MB3603.eurprd07.prod.outlook.com ([fe80::24d3:85ea:df17:ed0b]) by AM0PR0702MB3603.eurprd07.prod.outlook.com ([fe80::24d3:85ea:df17:ed0b%3]) with mapi id 15.20.3846.024; Tue, 9 Feb 2021 16:17:13 +0000 From: =?utf-8?B?QmFsw6F6cyBWYXJnYSBB?= To: =?utf-8?B?TWFnbnVzIE55c3Ryw7Zt?= , "draft-ietf-detnet-tsn-vpn-over-mpls@ietf.org" , "secdir@ietf.org" Thread-Topic: Secdir review of draft-ietf-detnet-tsn-vpn-over-mpls-05 Thread-Index: AQHW/rTuo0qEMlGb/EaLZWTlBX+cB6pP/3FA Date: Tue, 9 Feb 2021 16:17:13 +0000 Message-ID: References: In-Reply-To: Accept-Language: hu-HU, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [94.21.210.80] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f0ea1cc2-90e2-4ecd-bc24-08d8cd162945 x-ms-traffictypediagnostic: AM0PR07MB5586: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR0702MB3603.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(396003)(376002)(366004)(346002)(136003)(85202003)(83380400001)(66446008)(66556008)(76116006)(478600001)(55016002)(66946007)(9686003)(66574015)(52536014)(64756008)(5660300002)(86362001)(71200400001)(66476007)(8676002)(316002)(33656002)(26005)(8936002)(6506007)(9326002)(53546011)(2906002)(7696005)(110136005)(85182001)(186003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?Y1hrMnZRTUlralRLR2tJU1YwMXBFTnAwQmo4VHlXS3o5eldvOHExUkxXSkNs?= =?utf-8?B?MUdCZnM0aVdmTTB0cGg2WGk5bTN0b2JQVVZUeSt3eUlDelFzdHVxRTRKa3BX?= =?utf-8?B?czVPN2RndDhsNGdDL3ptSUlxcG85TFZBYTVhOUlaOEYxd3lpdW5TQTFqbmFy?= =?utf-8?B?UThaVHYyOE8xSVo5MFovU1k1dGVuRXFMUDhEdjRvNkJoODdubTQ0bzFwN0Fy?= =?utf-8?B?V3N0YUhJRyt3T0pKTDgrRG1qaDY3R2RXdEZhOXVuMWpVUzRlbXNmSmdKQjlj?= =?utf-8?B?dzNVOEIrN0lxU1c2K3pOK0t3a3pJUDVKTjd4UUdsRUVKc2M2aEtSZWpuNUVh?= =?utf-8?B?YzJQM052eFQ2aElIdkVFWlNwTXNFWmlDT3hhdGxkMWNPWXR1L0FBanpBMWtk?= =?utf-8?B?aHIvME4vUG9BalBremNDTi9iMFAvVXJkbjZYKys0SE9pcGl6TFExZmFybStt?= =?utf-8?B?L1A1WUp2THg2am05aERId3IvYms1ZWJPQWlsbC90Z0pFc2tUV2RRR3U5Umgv?= =?utf-8?B?Mys3VlFyaXdqTENDRVkyQ29RVU0zOVFHeFBPOUNZbnhQbXR3S1VOYndoNVRO?= =?utf-8?B?eC9TbnJMWm5GeWY1eXp5Z21Wanl6WHd4MXByQ2ZOcjZyMmVFdVlsZmRMKzhW?= =?utf-8?B?cUhsY2tCRmhZZzNLM3NlNVlrTzVoU21FcGRwK2tEVmNqTk9Ba1RLTW5Zempa?= =?utf-8?B?L1NSZTdENnN4ZVAraDVJcHlsaUhGR2dPMFNGTWRjZU9YNHdocklkb0s3OTlx?= =?utf-8?B?cngzV1BqYzJGZUVWbVdwM2NhbFFDdFBGOUpmWVY0akVMT25pdjFqSmNYeWxU?= =?utf-8?B?bVZxZ2lKVjNwVzRseEQxckFja3RnWUtpQVRFYmt2MmpFbEZFL1lSbXB0TVZT?= =?utf-8?B?TU9wMGpkVDQxWHRMMjRNTXR1SVJZaDhqRXdoSEhkRHNaMWc2MnYrTWQvSklu?= =?utf-8?B?VlQ1Y01FMlJ4TXpaTXVoU2VOaFZQTWFkT2VhRE9YQ3ZTcXlreVpHemR1RHBJ?= =?utf-8?B?VWYxZ1NRV0pJM05oaENmOUFjTzkvQ0NLUzhEZ0prRWE5UW51a0owM2x6YjE0?= =?utf-8?B?c2pRQm1VdXd3WjdaMU04L1VWZXFhVFpNMmoxMDZZY1F0V0NENXhuYndraU8x?= =?utf-8?B?N1c0MzFtSzhnSmFYdGl5U0lyTW5ERHdnYURZc2Q1NHFXblZUc0VseForWVZE?= =?utf-8?B?Y3hLbE9uWE1lMGQ2a0FDb00ycU44YzR4YnZ1Sm5Ta01YSEFZbEVVWTNGdkhL?= =?utf-8?B?aDdXVXhZNFlaS2FXSHRqdTZJeDE2clZyZTQvakMzVUswZDJSdjMzMWl3ZGlt?= =?utf-8?B?WFBnWkExWnVkdnFKVFgrU1NFOE81OERldnFMVHJGaExIR2dvL29RSWFRSTBw?= =?utf-8?B?NC9laU9JYWg4ekk5MDJFaFZIQWxyM1lXQlRiMWphSmFQaE44MVA2VU82U1E2?= =?utf-8?B?L2liUGZJdjlBRzdZRkFtZDVVSDhPMUZXcUxNN0pTbHlFSnlxU1h5OWpaVVR0?= =?utf-8?B?OXNpRHpIRTE0aXJEbGloQTNTR3hPc0k4UElDbHlhVTBpODBNc1QvRlBJQ3lS?= =?utf-8?B?RnVsTXQwOCtGRWpzRnNWaDM4VWJxcURob2ZFSEZRRXJVR2JzdkNSelhhbS91?= =?utf-8?B?Z3gwRWpBcFRpLzhUbTFWQk1ZSFdrRGxRckxOaWhvT3hoK2tKZjlkRUtlS3R1?= =?utf-8?B?T2RkMUJic2NjN05RL0lzL0c1MXIyZEtsWG9KTjZ5Z3huV2lrRkJESURML2NY?= =?utf-8?Q?kwFZbl0xJxOPxoa8q5dbbsI00MfuowyP8+qg4c8?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR0702MB360337E4BCB497286CFECC33AC8E9AM0PR0702MB3603_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM0PR0702MB3603.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f0ea1cc2-90e2-4ecd-bc24-08d8cd162945 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Feb 2021 16:17:13.7336 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: DQTcTjhu5anV7NkdAqQWa4nsMd/O5B6zQO2t+XkhcCGI70MDl17E+heGysVRMy/k+spEs/OfDjZ/ClxR0LLTws4LcvHmHtrzsv8zPFFySAI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR07MB5586 Archived-At: Subject: Re: [secdir] Secdir review of draft-ietf-detnet-tsn-vpn-over-mpls-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Feb 2021 16:17:23 -0000 --_000_AM0PR0702MB360337E4BCB497286CFECC33AC8E9AM0PR0702MB3603_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTWFnbnVzLA0KTWFueSB0aGFua3MgZm9yIHlvdXIgcmV2aWV3Lg0KU2VjdXJpdHkgcmVsYXRl ZCBhc3BlY3RzIGFyZSBjb3ZlcmVkIGluIGEgZGVkaWNhdGVkIGRyYWZ0IChkcmFmdC1pZXRmLWRl dG5ldC1zZWN1cml0eS0xNCksDQpzbyBubyBuZXcgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgd2Vy ZSBuZWVkZWQgaGVyZSBpbiB0aGlzIGRyYWZ0Lg0KQWxsIHlvdXIgZWRpdG9yaWFsIGNvbW1lbnRz IGFyZSB3ZWxjb21lIGFuZCB3aWxsIGJlIHVwZGF0ZWQgaW4gdGhlIG5ldyB2ZXJzaW9uLg0KVGhh bmtzDQpCYWxh4oCZenMNCg0KDQpGcm9tOiBNYWdudXMgTnlzdHLDtm0gPG1hZ251c25AZ21haWwu Y29tPg0KU2VudDogVHVlc2RheSwgRmVicnVhcnkgOSwgMjAyMSA4OjI2IEFNDQpUbzogZHJhZnQt aWV0Zi1kZXRuZXQtdHNuLXZwbi1vdmVyLW1wbHNAaWV0Zi5vcmc7IHNlY2RpckBpZXRmLm9yZw0K U3ViamVjdDogU2VjZGlyIHJldmlldyBvZiBkcmFmdC1pZXRmLWRldG5ldC10c24tdnBuLW92ZXIt bXBscy0wNQ0KDQpJIGhhdmUgcmV2aWV3ZWQgdGhpcyBkb2N1bWVudCBhcyBwYXJ0IG9mIHRoZSBz ZWN1cml0eSBkaXJlY3RvcmF0ZSdzIG9uZ29pbmcgZWZmb3J0IHRvIHJldmlldyBhbGwgSUVURiBk b2N1bWVudHMgYmVpbmcgcHJvY2Vzc2VkIGJ5IHRoZSBJRVNHLiBUaGVzZSBjb21tZW50cyB3ZXJl IHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUgc2VjdXJpdHkgYXJlYSBk aXJlY3RvcnMuICBEb2N1bWVudCBlZGl0b3JzIGFuZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0IHRo ZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkgb3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLg0KDQpU aGlzIGRvY3VtZW50IGRlc2NyaWJlcyBhIGRldGVybWluaXN0aWMgbmV0d29yayBkYXRhIHBsYW5l IHdoZW4gdGltZS1zZW5zaXRpdmUgbmV0d29ya3MgYXJlIGludGVyY29ubmVjdGVkLg0KDQpUaGUg c2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlvbiBzZWVtcyBhZGVxdWF0ZSB0aG91Z2ggdGhl IGludGVncmF0aW9uIG9mIGEgcHJvdG9jb2wgKFRTTikgb24gdG9wIG9mIGFub3RoZXIgcHJvdG9j b2wgKERldE5ldC9NUExTKSBzb21ldGltZXMgY2FuIHlpZWxkIG5ldyByZXN1bHRzIHNvIGl0IGlz IGp1c3QgYSBxdWVzdGlvbiB0byB0aGUgYXV0aG9ycyBpZiAgbm8gbmV3IHNlY3VyaXR5IGNvbnNp ZGVyYXRpb24gcmVzdWx0cyBmcm9tIHRoZSBhcHBsaWNhdGlvbiBvZiBUU04gb3ZlciBEZXROZXQv TVBMUz8NCg0KRWRpdG9yaWFsOg0KDQogICogICAiVFNOIiBpcyB1c2VkIGFzIGFuIGFjcm9ueW0g aW4gdGhlIGFic3RyYWN0IGFzIGlzIERldE5ldCAoYW5kIE1QTFMsIGFsdGhvdWdoIHRoYXQgaXMg cGVyaGFwcyBtb3JlIGNvbW1vbiBrbm93bGVkZ2UpLiBXb3VsZCBiZSBnb290IHRvIHNwZWxsIG91 dCB0aGVzZSBhY3JvbnltcyBkaXJlY3RseSBpbiB0aGUgYWJzdHJhY3QuDQogICogICBTZWN0aW9u IDYsICJjaGFsbGFuZ2VzIiAtPiAiY2hhbGxlbmdlcyINCiAgKiAgIFNlY3Rpb24gNiwgImFyZSBt ZW1iZXIiIC0+ICJhcmUgbWVtYmVycyINClRoYW5rcywNCi0tIE1hZ251cw0K --_000_AM0PR0702MB360337E4BCB497286CFECC33AC8E9AM0PR0702MB3603_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFy Z2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpX b3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxp c3QtaWQ6MzA4NjI5MjYwOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMjAxODk4NDk5ODt9DQpA bGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQt c2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMg0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBS b21hbiI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3Qg bDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250 LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGlu Z3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6 bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEw LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZh bWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2lu LWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRp Zl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0 Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0Pjwv eG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYz QzEiIHZsaW5rPSIjOTU0RjcyIiBzdHlsZT0id29yZC13cmFwOmJyZWFrLXdvcmQiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpIE1hZ251cyw8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1hbnkgdGhhbmtzIGZvciB5b3VyIHJl dmlldy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNlY3VyaXR5IHJlbGF0 ZWQgYXNwZWN0cyBhcmUgY292ZXJlZCBpbiBhIGRlZGljYXRlZCBkcmFmdCAoZHJhZnQtaWV0Zi1k ZXRuZXQtc2VjdXJpdHktMTQpLA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5zbyBubyBuZXcgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgd2VyZSBuZWVkZWQgaGVyZSBpbiB0 aGlzIGRyYWZ0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWxsIHlvdXIg ZWRpdG9yaWFsIGNvbW1lbnRzIGFyZSB3ZWxjb21lIGFuZCB3aWxsIGJlIHVwZGF0ZWQgaW4gdGhl IG5ldyB2ZXJzaW9uLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtz PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CYWxh4oCZenM8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu IDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gTWFnbnVzIE55c3Ryw7Zt ICZsdDttYWdudXNuQGdtYWlsLmNvbSZndDsgPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIEZl YnJ1YXJ5IDksIDIwMjEgODoyNiBBTTxicj4NCjxiPlRvOjwvYj4gZHJhZnQtaWV0Zi1kZXRuZXQt dHNuLXZwbi1vdmVyLW1wbHNAaWV0Zi5vcmc7IHNlY2RpckBpZXRmLm9yZzxicj4NCjxiPlN1Ympl Y3Q6PC9iPiBTZWNkaXIgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZGV0bmV0LXRzbi12cG4tb3Zlci1t cGxzLTA1PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBoYXZlIHJldmlld2VkIHRoaXMgZG9jdW1l bnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkgZGlyZWN0b3JhdGUncyBvbmdvaW5nIGVmZm9ydCB0 byByZXZpZXcgYWxsIElFVEYgZG9jdW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGUgSUVTRy4g VGhlc2UgY29tbWVudHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJlbmVmaXQgb2Yg dGhlIHNlY3VyaXR5IGFyZWEgZGlyZWN0b3JzLiZuYnNwOyBEb2N1bWVudA0KIGVkaXRvcnMgYW5k IFdHIGNoYWlycyBzaG91bGQgdHJlYXQgdGhlc2UgY29tbWVudHMganVzdCBsaWtlIGFueSBvdGhl ciBsYXN0IGNhbGwgY29tbWVudHMuPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5UaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBhIGRldGVybWluaXN0aWMgbmV0d29y ayBkYXRhIHBsYW5lIHdoZW4gdGltZS1zZW5zaXRpdmUgbmV0d29ya3MgYXJlIGludGVyY29ubmVj dGVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5UaGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlvbiBzZWVtcyBhZGVxdWF0ZSB0aG91 Z2ggdGhlIGludGVncmF0aW9uIG9mIGEgcHJvdG9jb2wgKFRTTikgb24gdG9wIG9mIGFub3RoZXIg cHJvdG9jb2wgKERldE5ldC9NUExTKSBzb21ldGltZXMgY2FuIHlpZWxkIG5ldyByZXN1bHRzIHNv IGl0IGlzIGp1c3QgYSBxdWVzdGlvbiB0byB0aGUgYXV0aG9ycyBpZiZuYnNwOyBubyBuZXcgc2Vj dXJpdHkgY29uc2lkZXJhdGlvbg0KIHJlc3VsdHMgZnJvbSB0aGUgYXBwbGljYXRpb24gb2YgVFNO IG92ZXIgRGV0TmV0L01QTFM/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RWRpdG9yaWFs OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+DQomcXVvdDtUU04mcXVv dDsgaXMgdXNlZCBhcyBhbiBhY3JvbnltIGluIHRoZSBhYnN0cmFjdCBhcyBpcyBEZXROZXQgKGFu ZCBNUExTLCBhbHRob3VnaCB0aGF0IGlzIHBlcmhhcHMgbW9yZSBjb21tb24ga25vd2xlZGdlKS4g V291bGQgYmUgZ29vdCB0byBzcGVsbCBvdXQgdGhlc2UgYWNyb255bXMgZGlyZWN0bHkgaW4gdGhl IGFic3RyYWN0LjxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0 OmwwIGxldmVsMSBsZm8xIj4NClNlY3Rpb24gNiwgJnF1b3Q7Y2hhbGxhbmdlcyZxdW90OyAtJmd0 OyAmcXVvdDtjaGFsbGVuZ2VzJnF1b3Q7PG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG87bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KU2VjdGlvbiA2LCAmcXVvdDthcmUgbWVt YmVyJnF1b3Q7IC0mZ3Q7ICZxdW90O2FyZSBtZW1iZXJzJnF1b3Q7PG86cD48L286cD48L2xpPjwv dWw+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MsIDxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tLSBNYWdudXM8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_AM0PR0702MB360337E4BCB497286CFECC33AC8E9AM0PR0702MB3603_-- From nobody Wed Feb 10 04:44:57 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D0593A0EC6; Wed, 10 Feb 2021 04:44:47 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Valery Smyslov via Datatracker To: Cc: calsify@ietf.org, draft-ietf-calext-valarm-extensions.all@ietf.org, last-call@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161296108746.13523.4234835837695144328@ietfa.amsl.com> Reply-To: Valery Smyslov Date: Wed, 10 Feb 2021 04:44:47 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-calext-valarm-extensions-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Feb 2021 12:44:48 -0000 Reviewer: Valery Smyslov Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The draft defines a set of extensions to the VALARM component of iCalendar. The document is short and well written, its Security Considerations and Privacy Considerations sections are sensible. I found the document ready. Nit: I would recommend adding a sentence to the Security Considerations section saying that these VALARM extensions inherited security properties of iCalendar [RFC5545]. From nobody Wed Feb 10 05:18:41 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9307E3A0FC5; Wed, 10 Feb 2021 05:18:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.119 X-Spam-Level: X-Spam-Status: No, score=-2.119 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fastmail.com header.b=eDDFRlml; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=sjf1R1Iy Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fFIuthlKeNM0; Wed, 10 Feb 2021 05:18:30 -0800 (PST) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF0B13A0FBD; Wed, 10 Feb 2021 05:18:30 -0800 (PST) Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.nyi.internal (Postfix) with ESMTP id 21A6D5C020F; Wed, 10 Feb 2021 08:18:30 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute2.internal (MEProxy); Wed, 10 Feb 2021 08:18:30 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.com; h= subject:to:cc:references:from:message-id:date:mime-version :in-reply-to:content-type; s=fm2; bh=WaHfuOLWVaLpq9BSdRnvauia+fL E9ASVWhmf/k4MjVY=; b=eDDFRlmlU61rV8Jl5f+TPecLUzW088J7bjPg8sgQgVY 5ELXKDLNPV6WO4N9kpXWulgbqHYu46PysgFB+1AXa2Zbf+QYLPdTAnpNToA9LF2k mTS9Oq3Bcu9c8g4zuNtxadGFqJ2D/iHoKRZa9l1WcPjykV9BZrxMaa8nai0RB9DA jyObalY1noZhX7Ch4gC8cwwVJxfJnCnQvFhaZdZTPzsppXelKPKdBlw0OA94RZvE ctXzWHup3dMh0SYePSAYa/ohNEXKJFpYXGZ7+cTs1ZsZGPC3RRfKB/ZFP8iToS0/ FHabRkIwMHhLyFTtdGuXBkiVJe/AaBCSRSFeMe2Tdjw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=WaHfuO LWVaLpq9BSdRnvauia+fLE9ASVWhmf/k4MjVY=; b=sjf1R1Iy/0h9UBPwiE/Si3 cMnebkHFUWNuJzEGNRjXQVSXpAhc9Rr+lh0sQO1jiE/3Eoeo6XgHJxevMrafy1GG RwD85OceQvWu1wxKBoNIvecjXSfxIZYegp0rfF8AN3wOtkQ6Rwhca6nWSf5SN5eJ cKtxc0zVsoX9IRTVajqPCGGVoBIeg+JIyV0Td98A+/tYP5nZ57J6HvPu19uO6AAG azPUbbgZXgJ1Ar8xZQ8eesi954yF+Hm6TBhRuPYQ1/XKJ0GNRDF6d9GYTcRaxEYc q7uU+u6SHED2SUujp4UwTSb4tlMp9PsF4RcB6Ft1KBhkzs+m+wfUvaHgHMYNbs3g == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrheejgdehtdcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpefuvfhfhffkffgfgggjtgesrgdtreertdefjeenucfhrhhomhepmfgvnhcuofhu rhgthhhishhonhcuoehmuhhrtghhsehfrghsthhmrghilhdrtghomheqnecuggftrfgrth htvghrnhepffeuhfevgffgvdduuedvteeijeeuvddvkedugeegvdffvefgudffueeileeg geegnecuffhomhgrihhnpehivghtfhdrohhrghenucfkphepjeegrdejjedrkeehrddvhe dtnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepmhhu rhgthhesfhgrshhtmhgrihhlrdgtohhm X-ME-Proxy: Received: from [192.168.1.22] (cpe-74-77-85-250.buffalo.res.rr.com [74.77.85.250]) by mail.messagingengine.com (Postfix) with ESMTPA id B2A291080069; Wed, 10 Feb 2021 08:18:29 -0500 (EST) To: Valery Smyslov , secdir@ietf.org Cc: calsify@ietf.org, draft-ietf-calext-valarm-extensions.all@ietf.org, last-call@ietf.org References: <161296108746.13523.4234835837695144328@ietfa.amsl.com> From: Ken Murchison Message-ID: Date: Wed, 10 Feb 2021 08:18:28 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.7.0 MIME-Version: 1.0 In-Reply-To: <161296108746.13523.4234835837695144328@ietfa.amsl.com> Content-Type: multipart/alternative; boundary="------------428DE647C397FD62D781091F" Content-Language: en-US Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-calext-valarm-extensions-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Feb 2021 13:18:33 -0000 This is a multi-part message in MIME format. --------------428DE647C397FD62D781091F Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Hi Valery, Thank you for the review.  Per your recommendation, I have added the following phrase to the beginning of the Security Considerations section: "In addition to the security properties of iCalendar (see Section of [RFC5545] ), ..." Is this sufficient, or do you have alternative text that you'd like to see? On 2/10/21 7:44 AM, Valery Smyslov via Datatracker wrote: > Reviewer: Valery Smyslov > Review result: Ready > > I have reviewed this document as part of the security directorate's ongoing > effort to review all IETF documents being processed by the IESG. These > comments were written primarily for the benefit of the security area directors. > Document editors and WG chairs should treat these comments just like any other > last call comments. > > The draft defines a set of extensions to the VALARM component of iCalendar. > The document is short and well written, its Security Considerations and Privacy Considerations > sections are sensible. I found the document ready. > > Nit: I would recommend adding a sentence to the Security Considerations section saying that > these VALARM extensions inherited security properties of iCalendar [RFC5545]. > > > -- Kenneth Murchison Senior Software Developer Fastmail US LLC --------------428DE647C397FD62D781091F Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

Hi Valery,

Thank you for the review.  Per your recommendation, I have added the following phrase to the beginning of the Security Considerations section:

"In addition to the security properties of iCalendar (see Section of [RFC5545]), ..."

Is this sufficient, or do you have alternative text that you'd like to see?


On 2/10/21 7:44 AM, Valery Smyslov via Datatracker wrote:
Reviewer: Valery Smyslov
Review result: Ready

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written primarily for the benefit of the security area directors.
Document editors and WG chairs should treat these comments just like any other
last call comments.

The draft defines a set of extensions to the VALARM component of iCalendar.
The document is short and well written, its Security Considerations and Privacy Considerations
sections are sensible. I found the document ready.

Nit: I would recommend adding a sentence to the Security Considerations section saying that 
these VALARM extensions inherited security properties of iCalendar [RFC5545].




-- 
Kenneth Murchison
Senior Software Developer
Fastmail US LLC
--------------428DE647C397FD62D781091F-- From nobody Wed Feb 10 05:21:01 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55D353A0FD2; Wed, 10 Feb 2021 05:20:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.119 X-Spam-Level: X-Spam-Status: No, score=-2.119 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fastmail.com header.b=Q/vZ8yUx; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=voR+P45E Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rHwGhHWT-2PF; Wed, 10 Feb 2021 05:20:49 -0800 (PST) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CBD93A0FCF; Wed, 10 Feb 2021 05:20:49 -0800 (PST) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 5BF8F5C0207; Wed, 10 Feb 2021 08:20:48 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Wed, 10 Feb 2021 08:20:48 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.com; h= subject:from:to:cc:references:message-id:date:mime-version :in-reply-to:content-type; s=fm2; bh=lkeE1/ScwmCaRjT1G9twD85TiS7 s/dUkFBfymlXutYk=; b=Q/vZ8yUxK+/gIJENuj2vBPoQTpJBXSL3/y2cYexgrU6 BtL5fRo5fbKZTj6l8rGxDuRgLSj7oBGWfrn8/OCVlY3U9dM5EduI5iLMUzNKT+t4 /Z3xz+led4tzOkHM0ZLqxo4HpsdbvdwVvQq1fEESUsuyPftLtbZK4DP9mSWPrjBc WwK0rTxWWnTdJbUnoIBHhz28MkIhBvoVQ+hRzDbTlH4JHMntER4YEMqHl9kRzN4l 2swZubwTRnUXkX8z8DuR5JCkVoQYloBvdV5AeDKcLIIqcawd7AlpjdEEZaQ0ITTl yExtnbfFWtLrEya93cZtjzpyercH9G4iGUGbhqrhr9A== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=lkeE1/ ScwmCaRjT1G9twD85TiS7s/dUkFBfymlXutYk=; b=voR+P45EAlo3rWb5jfci8e IpSk6lVOI74AsO/LUEo/XC9ubN4A4Xhq0B06kpxdZN5Vp6KjllmL18+PLY6EwvQv n+T5iF2ZCJVcorPLQsOFQ03LQaTF4jxYtu9MF8MjUtPXZxnxYsKnGy5y3+jWXSOj bZf87m0CdXOZRxC6Dxmc3PKEKp6aqgE45xgiWC8tFf7PuXQ84udr03wsF4yYhJtr q9w+t0zyhAYROGGU6iml4jXqquebQqtas0ftC9Fxln+esDoEf6jQK+S6AP61DNTQ 0ns0Ey6vs0ke5vftoaApiOP+9btzpYKPqd/q4Qq1Clyp/+5DY6gMreBJP9EwO+pA == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrheejgdehudcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpefuhffvfhfkffgfgggjtgesrgdtreertdefjeenucfhrhhomhepmfgvnhcuofhu rhgthhhishhonhcuoehmuhhrtghhsehfrghsthhmrghilhdrtghomheqnecuggftrfgrth htvghrnhepvdefueejffdukedtfffhjeejtdffudejhfdvkeeujeffjeevgeekffelgefg vddvnecuffhomhgrihhnpehivghtfhdrohhrghenucfkphepjeegrdejjedrkeehrddvhe dtnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepmhhu rhgthhesfhgrshhtmhgrihhlrdgtohhm X-ME-Proxy: Received: from [192.168.1.22] (cpe-74-77-85-250.buffalo.res.rr.com [74.77.85.250]) by mail.messagingengine.com (Postfix) with ESMTPA id 837A9108006B; Wed, 10 Feb 2021 08:20:47 -0500 (EST) From: Ken Murchison To: Valery Smyslov , secdir@ietf.org Cc: calsify@ietf.org, draft-ietf-calext-valarm-extensions.all@ietf.org, last-call@ietf.org References: <161296108746.13523.4234835837695144328@ietfa.amsl.com> Message-ID: Date: Wed, 10 Feb 2021 08:20:47 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------97990FC17170505E4241F062" Content-Language: en-US Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-calext-valarm-extensions-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Feb 2021 13:20:53 -0000 This is a multi-part message in MIME format. --------------97990FC17170505E4241F062 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit On 2/10/21 8:18 AM, Ken Murchison wrote: > > Hi Valery, > > Thank you for the review.  Per your recommendation, I have added the > following phrase to the beginning of the Security Considerations section: > > "In addition to the security properties of iCalendar (see Section of > [RFC5545] > ), ..." > Copy and paste error above: this should say "Section 7 of" > Is this sufficient, or do you have alternative text that you'd like to > see? > > > On 2/10/21 7:44 AM, Valery Smyslov via Datatracker wrote: >> Reviewer: Valery Smyslov >> Review result: Ready >> >> I have reviewed this document as part of the security directorate's ongoing >> effort to review all IETF documents being processed by the IESG. These >> comments were written primarily for the benefit of the security area directors. >> Document editors and WG chairs should treat these comments just like any other >> last call comments. >> >> The draft defines a set of extensions to the VALARM component of iCalendar. >> The document is short and well written, its Security Considerations and Privacy Considerations >> sections are sensible. I found the document ready. >> >> Nit: I would recommend adding a sentence to the Security Considerations section saying that >> these VALARM extensions inherited security properties of iCalendar [RFC5545]. >> >> >> > -- > Kenneth Murchison > Senior Software Developer > Fastmail US LLC -- Kenneth Murchison Senior Software Developer Fastmail US LLC --------------97990FC17170505E4241F062 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit


On 2/10/21 8:18 AM, Ken Murchison wrote:

Hi Valery,

Thank you for the review.  Per your recommendation, I have added the following phrase to the beginning of the Security Considerations section:

"In addition to the security properties of iCalendar (see Section of [RFC5545]), ..."

Copy and paste error above: this should say "Section 7 of"


Is this sufficient, or do you have alternative text that you'd like to see?


On 2/10/21 7:44 AM, Valery Smyslov via Datatracker wrote:
Reviewer: Valery Smyslov
Review result: Ready

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written primarily for the benefit of the security area directors.
Document editors and WG chairs should treat these comments just like any other
last call comments.

The draft defines a set of extensions to the VALARM component of iCalendar.
The document is short and well written, its Security Considerations and Privacy Considerations
sections are sensible. I found the document ready.

Nit: I would recommend adding a sentence to the Security Considerations section saying that 
these VALARM extensions inherited security properties of iCalendar [RFC5545].




-- 
Kenneth Murchison
Senior Software Developer
Fastmail US LLC
-- 
Kenneth Murchison
Senior Software Developer
Fastmail US LLC
--------------97990FC17170505E4241F062-- From nobody Wed Feb 10 05:33:06 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FCA73A0FED; Wed, 10 Feb 2021 05:33:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BOPIBPxXpe-o; Wed, 10 Feb 2021 05:33:02 -0800 (PST) Received: from mail-ed1-x529.google.com (mail-ed1-x529.google.com [IPv6:2a00:1450:4864:20::529]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCEFC3A0FEC; Wed, 10 Feb 2021 05:33:01 -0800 (PST) Received: by mail-ed1-x529.google.com with SMTP id l12so3020937edt.3; Wed, 10 Feb 2021 05:33:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:thread-index:content-language; bh=kiYb9XsXypYSW/XSeW0U/9cLZac76nHv4gmLMWNbh3Q=; b=n8VamtSxmLeI4dOjRlIHhT86xTbELfBY6nHEj4SFZUwPIDrxpKehwLnkksFsEgJV6e lOyX6wtECwuu2a5EkWq0v33ucu0u138EuuA1TgOLdxPJs7E+Rd+dpooZaBI8dl3Vvx/F EBsak8YdruVd4FcvNx9qE4vRfBxauD7lEQr2bmrmA9SxJ/KTC5W9u11l8hrQ4bd0IjQg DzekufmAeHVZ9E86nmjZNU3XKbSoh8Al/6rQMEkUbP5bpr7LdS+P1QGFWNaG2XoLkE5+ 4wa+8+13GeBHs1cc3lgJrEOSBM6oQhyiwf9GSorXqhjU3d0XE3Vj0PFUsxGZqQU/xioW lo6A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:thread-index:content-language; bh=kiYb9XsXypYSW/XSeW0U/9cLZac76nHv4gmLMWNbh3Q=; b=DcpxIIIq8CssVlZ8RxH8nVQiDlOWyL6KF3GO6wuwEXLOdCEiX7JJFH7aYuoI+UlYSt 6o9diICS0usxKSxZQqJoOam2pALJwh54GwZVzRRqy3uoJhFeOUQK6KBLLTbxl7YfwTOz e1fafeu/rBWIdfJBwL6c9N7E8qiwk3ymMsWdjK9b5xnzb7S4Qt1DL4oMYAsEd5sh+8yJ 5Lsmvi3OZ/EA3cXEbHUehBkNsLz/y+Xqq5FWXSycVB/rYjKqQVU5Vi2tISbM174Juvm4 /3VJjhhV8LB/nL6fpf7+Tx3ged/GV5fS572q4gjL3PcNFMq96m1DaoOh8iJgUQA5XAqa yF5A== X-Gm-Message-State: AOAM531yy49fzFfU8Gman1HEjeepW9jt7DGpfwKNVcJ7eoLwOK0y03oB bXkMp1Vpc7Hruna7ZZtnP6uPJQuEdbY= X-Google-Smtp-Source: ABdhPJy6IEUK5fQwbJ1+pb7aWb9bZ1ia/DFatGKGuh6UMQmlvX/XJDwE3jiJkCgmt1qUWdCicoRWBQ== X-Received: by 2002:a05:6402:1398:: with SMTP id b24mr3050535edv.108.1612963978917; Wed, 10 Feb 2021 05:32:58 -0800 (PST) Received: from buildpc ([93.188.44.203]) by smtp.gmail.com with ESMTPSA id c3sm1027535edr.94.2021.02.10.05.32.58 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 10 Feb 2021 05:32:58 -0800 (PST) From: "Valery Smyslov" To: "'Ken Murchison'" , "'Valery Smyslov'" , Cc: , , References: <161296108746.13523.4234835837695144328@ietfa.amsl.com> In-Reply-To: Date: Wed, 10 Feb 2021 16:33:00 +0300 Message-ID: <03b801d6ffb1$40de67e0$c29b37a0$@gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_03B9_01D6FFCA.662D2680" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQLTTaZ0+UFogF+cMETFyy7NkxKZ3AJur/63qEVQr2A= Content-Language: ru Archived-At: Subject: Re: [secdir] [Last-Call] Secdir last call review of draft-ietf-calext-valarm-extensions-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Feb 2021 13:33:04 -0000 This is a multipart message in MIME format. ------=_NextPart_000_03B9_01D6FFCA.662D2680 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Kenneth, =20 I think this addition is OK. =20 Thank you, Valery. =20 Hi Valery, Thank you for the review. Per your recommendation, I have added the = following phrase to the beginning of the Security Considerations = section: "In addition to the security properties of iCalendar (see Section of = [RFC5545] = ), ..." Is this sufficient, or do you have alternative text that you'd like to = see? =20 On 2/10/21 7:44 AM, Valery Smyslov via Datatracker wrote: Reviewer: Valery Smyslov Review result: Ready =20 I have reviewed this document as part of the security directorate's = ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area = directors. Document editors and WG chairs should treat these comments just like any = other last call comments. =20 The draft defines a set of extensions to the VALARM component of = iCalendar. The document is short and well written, its Security Considerations and = Privacy Considerations sections are sensible. I found the document ready. =20 Nit: I would recommend adding a sentence to the Security Considerations = section saying that=20 these VALARM extensions inherited security properties of iCalendar = [RFC5545]. =20 =20 =20 --=20 Kenneth Murchison Senior Software Developer Fastmail US LLC ------=_NextPart_000_03B9_01D6FFCA.662D2680 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi Kenneth,

 

I think this addition is OK.

 

Thank you,

Valery.

 

Hi Valery,

Thank = you for the review.  Per your recommendation, I have added the = following phrase to the beginning of the Security Considerations = section:

"In addition to the security properties of iCalendar (see = Section of [RFC5= 545]), ..."

Is this sufficient, or do = you have alternative text that you'd like to = see?

 

On = 2/10/21 7:44 AM, Valery Smyslov via Datatracker = wrote:

Reviewer: Valery =
Smyslov
Review result: =
Ready
 
I have reviewed =
this document as part of the security directorate's =
ongoing
effort to review all IETF documents being =
processed by the IESG.=C2=A0 These
comments were =
written primarily for the benefit of the security area =
directors.
Document editors and WG chairs should =
treat these comments just like any other
last call =
comments.
 
The draft =
defines a set of extensions to the VALARM component of =
iCalendar.
The document is short and well written, =
its Security Considerations and Privacy =
Considerations
sections are sensible. I found the =
document ready.
 
Nit: I =
would recommend adding a sentence to the Security Considerations section =
saying that 
these VALARM extensions inherited =
security properties of iCalendar =
[RFC5545].
 
 
 
-- =

Kenneth Murchison
Senior =
Software Developer
Fastmail US =
LLC
------=_NextPart_000_03B9_01D6FFCA.662D2680-- From nobody Wed Feb 10 07:04:13 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 523BD3A0D1E for ; Wed, 10 Feb 2021 07:04:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i9qRv7MgX3WB for ; Wed, 10 Feb 2021 07:04:06 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F8CB3A0D00 for ; Wed, 10 Feb 2021 07:04:06 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 11AF45mu044832 for ; Wed, 10 Feb 2021 10:04:05 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu 11AF45mu044832 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1612969445; bh=xA88mHgLcosPyGpO9WJIs+l7QUrb1skyQdbmusiE8Ws=; h=From:To:Subject:Date:From; b=JAFUJnfuIG2hyCTTwRVBRauHOKlPFLoW7vmesHCzMAgUHMgBQ0HHtw81zeoa8KiJD O80s1LXaEnB8HYWpzKdl9fdfv+fkPCkaJ7rO9ZSvUBaKu9DZriNmOeS07KA5yQ5Un2 OINJ/Jx+JD3vrMdr5ymncutkMhZMHokaz2+0XCNk= Received: from MORRIS.ad.sei.cmu.edu (morris.ad.sei.cmu.edu [147.72.252.46]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 11AF44VJ020849 for ; Wed, 10 Feb 2021 10:04:04 -0500 Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by MORRIS.ad.sei.cmu.edu (147.72.252.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 10 Feb 2021 10:04:03 -0500 Received: from MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb]) by MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb%13]) with mapi id 15.01.2106.002; Wed, 10 Feb 2021 10:04:03 -0500 From: Roman Danyliw To: "secdir@ietf.org" Thread-Topic: Pre-IETF 110 SECDIR meetings Thread-Index: Adb/uX7XWeae/LkJTk+Tt3gm5ruuBQ== Date: Wed, 10 Feb 2021 15:04:02 +0000 Message-ID: <094e60b6f42a41a28fe6d5a8341c23c5@cert.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.64.201.31] Content-Type: multipart/mixed; boundary="_003_094e60b6f42a41a28fe6d5a8341c23c5certorg_" MIME-Version: 1.0 Archived-At: Subject: [secdir] Pre-IETF 110 SECDIR meetings X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Feb 2021 15:04:10 -0000 --_003_094e60b6f42a41a28fe6d5a8341c23c5certorg_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi SECDIR reviewers! Thanks to all who responded to the availability. Based on this feedback, w= e'll convene two meetings based on the Group 1 (Feb-16) and Group 2 (Feb-17= ) timezone construct. =3D=3D[ snip ]=3D=3D # SECDIR Per-IETF110 Meeting Agenda ## Discussion Items * Welcome (Sec ADs) * SECDIR Assignments (Tero) * Hot Topics for IETF 100 Meeting (all) * Hot Topics from recent reviews (all) * Open Mic/Social=20 ## Group 1 Tuesday, February 16, 2021 > * UTC-8 (San Francisco): 0700 > * UTC-5 (New York): 1000 > * UTC: 1500 > * UTC+1 (Frankfurt): 1600 > * UTC+3 (Jerusalem): 1700 https://ietf.webex.com/ietf/j.php?MTID=3Dmde85e0c1c949a5b4ac9531bed6b3bb04= =20 Meeting number: 185 357 2277 Password: f3CbpMpHm76 ## Group 2 Wednesday, February 17, 2021 > * UTC-8 (San Francisco): 2100 (Tue, Feb 16) > * UTC-5 (New York): 0000 > * UTC+2 (Helsinki): 0700 > * UTC+5 (Bangalore): 1030 > * UTC+7 (Bangkok): 1200 > * UTC+8 (Beijing): 1300 > * UTC+9 (Tokyo): 1400 > * UTC+10 (Sydney): 1600 https://ietf.webex.com/ietf/j.php?MTID=3Dm4d565f1d688f294be97897ed13ed4f26= =20 Meeting number: 185 992 0048 Password: i53xJud4QPx =3D=3D[ end ]=3D=3D Regards, Roman and Ben > -----Original Message----- > From: secdir On Behalf Of Roman Danyliw > Sent: Tuesday, February 2, 2021 6:15 PM > To: secdir@ietf.org > Subject: [secdir] Pre-IETF 110 SECDIR meeting(s) >=20 > Hi SECDIR reviewers! >=20 > While the pandemic has prevented us from meeting in person, your helpful > reviews have continued to stream in and improve the quality of the docume= nts > the IETF has published. Thank you for this diligence. >=20 > In recent virtual IETF meetings, there wasn't a convenient way to slot in= our > usual Tuesday lunch meeting. However, we have now gone too long without > getting together. Therefore, we'd like to schedule two virtual meetings = slots > during the week of February 15th -- one that is relatively convenient for= those > in the UTC-8 to UTC+3 timezones (Group 1) and another that is convenient = for > those in the UTC+3 to UTC+10 timezones (Group 2). The thinking is to rou= ghly > run our standing agenda of reviewing the SECDIR queue; reviewing recurrin= g or > emerging issues seen in documents; hot topics expected at IETF 110; and a > general social hour, twice in these two time slots. We also know that ev= ery is > quite busy so attendance is optional and best effort. >=20 > To help us decide which exact time slot on what day works best, please > complete one or both Doodle polls by Monday, February 8. These polls wil= l ask > you to select among the following options. Apologizes in advance for > everyone's home city or timezone not being listed. >=20 > Choose: Monday, February 15 through Friday, February 19 >=20 > =3D=3D[ For Group 1 (UTC-8 to UTC+3) > Doodle: > https://doodle.com/poll/ek882ytmqwgz4rfw?utm_source=3Dpoll&utm_medium=3Dl > ink >=20 > Timing source: > https://www.timeanddate.com/worldclock/meetingtime.html?iso=3D20210216& > p1=3D224&p2=3D179&p3=3D136&p4=3D83&p5=3D110 > * UTC-8 (San Francisco): 0700, 0800, 0900 > * UTC-5 (New York): 1000, 1100, 1200 > * UTC: 1500, 1600, 1700 > * UTC+1 (Frankfurt): 1600, 1700, 1800 > * UTC+3 (Jerusalem): 1700, 1800, 1900 >=20 > =3D=3D[ For Group 2 (UTC+3 to UTC+10) > Doodle: > https://doodle.com/poll/75hzsnwtkqu373rd?utm_source=3Dpoll&utm_medium=3Dl= i > nk >=20 > Timing source: > https://www.timeanddate.com/worldclock/meetingtime.html?iso=3D20210216& > p1=3D110&p2=3D438&p3=3D28&p4=3D33&p5=3D248&p6=3D240 > * UTC+3 (Jerusalem): 0700, 0800, 0900 > * UTC+5 (Bangalore): 1030, 1130, 1230 > * UTC+7 (Bangkok): 1200, 1300, 1400 > * UTC+8 (Beijing): 1300, 1400, 1500 > * UTC+9 (Tokyo): 1400, 1500, 1600 > * UTC+10 (Sydney): 1600, 1700, 1800 >=20 > Regards, > Roman and Ben >=20 > _______________________________________________ > secdir mailing list > secdir@ietf.org > https://www.ietf.org/mailman/listinfo/secdir > wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview --_003_094e60b6f42a41a28fe6d5a8341c23c5certorg_ Content-Type: text/calendar; name="SECDIR-pre-IETF110-Group-1-Webex_Meeting.ics" Content-Description: SECDIR-pre-IETF110-Group-1-Webex_Meeting.ics Content-Disposition: attachment; filename="SECDIR-pre-IETF110-Group-1-Webex_Meeting.ics"; size=8463; creation-date="Wed, 10 Feb 2021 14:37:05 GMT"; modification-date="Wed, 10 Feb 2021 14:46:12 GMT" Content-Transfer-Encoding: base64 QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vTWljcm9zb2Z0IENvcnBvcmF0aW9uLy9PdXRsb29r IDEwLjAgTUlNRURJUi8vRU4NClZFUlNJT046Mi4wDQpNRVRIT0Q6UkVRVUVTVA0KQkVHSU46VlRJ TUVaT05FDQpUWklEOkFtZXJpY2EvTmV3X1lvcmsNClRaVVJMOmh0dHA6Ly90enVybC5vcmcvem9u ZWluZm8tb3V0bG9vay9BbWVyaWNhL05ld19Zb3JrDQpYLUxJQy1MT0NBVElPTjpBbWVyaWNhL05l d19Zb3JrDQpCRUdJTjpEQVlMSUdIVA0KVFpPRkZTRVRGUk9NOi0wNTAwDQpUWk9GRlNFVFRPOi0w NDAwDQpUWk5BTUU6RURUDQpEVFNUQVJUOjE5NzAwMzA4VDAyMDAwMA0KUlJVTEU6RlJFUT1ZRUFS TFk7QllNT05USD0zO0JZREFZPTJTVQ0KRU5EOkRBWUxJR0hUDQpCRUdJTjpTVEFOREFSRA0KVFpP RkZTRVRGUk9NOi0wNDAwDQpUWk9GRlNFVFRPOi0wNTAwDQpUWk5BTUU6RVNUDQpEVFNUQVJUOjE5 NzAxMTAxVDAyMDAwMA0KUlJVTEU6RlJFUT1ZRUFSTFk7QllNT05USD0xMTtCWURBWT0xU1UNCkVO RDpTVEFOREFSRA0KRU5EOlZUSU1FWk9ORQ0KQkVHSU46VkVWRU5UDQpEVFNUQU1QOjIwMjEwMjEw VDE0Mjg1NloNCkFUVEVOREVFO0NOPSJzZWNhcmVhIjtST0xFPVJFUS1QQVJUSUNJUEFOVDtSU1ZQ PUZBTFNFOk1BSUxUTzpzZWMtYWRzQGlldGYub3JnDQpPUkdBTklaRVI7Q049IkNpc2NvIFdlYmV4 IjpNQUlMVE86bWVzc2VuZ2VyQHdlYmV4LmNvbQ0KRFRTVEFSVDtUWklEPUFtZXJpY2EvTmV3X1lv cms6MjAyMTAyMTZUMTAwMDAwDQpEVEVORDtUWklEPUFtZXJpY2EvTmV3X1lvcms6MjAyMTAyMTZU MTEwMDAwDQpMT0NBVElPTjpodHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1t ZGU4NWUwYzFjOTQ5YTViNGFjOTUzMWJlZDZiM2JiMDQNClRSQU5TUDpPUEFRVUUNClNFUVVFTkNF OjE2MTI5NjczMzYNClVJRDowM2ZlYWY2Ny02MzlmLTRkYmEtYTc3Zi00OTEzMWRhZWQ5YWYNCkRF U0NSSVBUSU9OOlxuXG5cbkpPSU4gV0VCRVggTUVFVElOR1xuaHR0cHM6Ly9pZXRmLndlYmV4LmNv bS9pZXRmL2oucGhwP01USUQ9bWRlODVlMGMxYzk0OWE1YjRhYzk1MzFiZWQ2YjNiYjA0XG5NZWV0 aW5nIG51bWJlciAoYWNjZXNzIGNvZGUpOiAxODUgMzU3IDIyNzdcblxuXG5NZWV0aW5nIHBhc3N3 b3JkOiBmM0NicE1wSG03NlxuXG5cblxuVEFQIFRPIEpPSU4gRlJPTSBBIE1PQklMRSBERVZJQ0Ug KEFUVEVOREVFUyBPTkxZKVxuKzEtNjUwLTQ3OS0zMjA4LCwxODUzNTcyMjc3IyMgdGVsOiUyQjEt NjUwLTQ3OS0zMjA4LCwqMDEqMTg1MzU3MjI3NyUyMyUyMyowMSogQ2FsbC1pbiB0b2xsIG51bWJl ciAoVVMvQ2FuYWRhKVxuXG5cbkpPSU4gQlkgUEhPTkVcbjEtNjUwLTQ3OS0zMjA4IENhbGwtaW4g dG9sbCBudW1iZXIgKFVTL0NhbmFkYSlcblxuR2xvYmFsIGNhbGwtaW4gbnVtYmVyc1xuaHR0cHM6 Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2dsb2JhbGNhbGxpbi5waHA/TVRJRD1tMWUzNzljZjM0MDE0 ZTBlNjI3ZjczOTM0YmY0YjVhODlcblxuXG5KT0lOIEZST00gQSBWSURFTyBTWVNURU0gT1IgQVBQ TElDQVRJT05cbkRpYWwgc2lwOjE4NTM1NzIyNzdAaWV0Zi53ZWJleC5jb21cbllvdSBjYW4gYWxz byBkaWFsIDE3My4yNDMuMi42OCBhbmQgZW50ZXIgeW91ciBtZWV0aW5nIG51bWJlci5cblxuXG5K b2luIHVzaW5nIE1pY3Jvc29mdCBMeW5jIG9yIE1pY3Jvc29mdCBTa3lwZSBmb3IgQnVzaW5lc3Nc bkRpYWwgc2lwOjE4NTM1NzIyNzcuaWV0ZkBseW5jLndlYmV4LmNvbVxuXG5cblxuQ2FuJ3Qgam9p biB0aGUgbWVldGluZz8gQ29udGFjdCBzdXBwb3J0IGhlcmU6XG5odHRwczovL2lldGYud2ViZXgu Y29tL2lldGYvbWNcblxuXG5JTVBPUlRBTlQgTk9USUNFOiBQbGVhc2Ugbm90ZSB0aGF0IHRoaXMg V2ViZXggc2VydmljZSBhbGxvd3MgYXVkaW8gYW5kIG90aGVyIGluZm9ybWF0aW9uIHNlbnQgZHVy aW5nIHRoZSBzZXNzaW9uIHRvIGJlIHJlY29yZGVkLCB3aGljaCBtYXkgYmUgZGlzY292ZXJhYmxl IGluIGEgbGVnYWwgbWF0dGVyLiBZb3Ugc2hvdWxkIGluZm9ybSBhbGwgbWVldGluZyBhdHRlbmRl ZXMgcHJpb3IgdG8gcmVjb3JkaW5nIGlmIHlvdSBpbnRlbmQgdG8gcmVjb3JkIHRoZSBtZWV0aW5n LlxuDQpYLUFMVC1ERVNDO0ZNVFRZUEU9dGV4dC9odG1sOjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+ XG50YWJsZSB7XG4JYm9yZGVyLWNvbGxhcHNlOiBzZXBhcmF0ZTsgd2lkdGggPTEwMCU7CWJvcmRl cjogMDsJYm9yZGVyLXNwYWNpbmc6IDA7fVxuXG50ciB7XG4JbGluZS1oZWlnaHQ6IDE4cHg7fVxu XG5hLCB0ZCB7XG4JZm9udC1zaXplOiAxNHB4Owlmb250LWZhbWlseTogQXJpYWw7CWNvbG9yOiAj MzMzOwl3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7CXdvcmQtYnJlYWs6IG5vcm1hbDsJcGFkZGluZzog MDt9XG5cbi50aXRsZSB7XG4JZm9udC1zaXplOiAyOHB4O31cblxuLmltYWdlIHtcbgl3aWR0aDog YXV0bzsJbWF4LXdpZHRoOiBhdXRvO31cblxuLmZvb3RlciB7XG4Jd2lkdGg6IDYwNHB4O31cblxu Lm1haW4ge1xuXG59QG1lZGlhIHNjcmVlbiBhbmQgKG1heC1kZXZpY2Utd2lkdGg6IDgwMHB4KSB7 XG4JLnRpdGxlIHtcbgkJZm9udC1zaXplOiAyMnB4ICFpbXBvcnRhbnQ7CX1cbgkuaW1hZ2Uge1xu CQl3aWR0aDogYXV0byAhaW1wb3J0YW50OwkJbWF4LXdpZHRoOiAxMDAlICFpbXBvcnRhbnQ7CX1c bgkuZm9vdGVyIHtcbgkJd2lkdGg6IDEwMCUgIWltcG9ydGFudDsJCW1heC13aWR0aDogNjA0cHgg IWltcG9ydGFudFxuCX1cbgkubWFpbiB7XG4JCXdpZHRoOiAxMDAlICFpbXBvcnRhbnQ7CQltYXgt d2lkdGg6IDYwNHB4ICFpbXBvcnRhbnRcbgl9XG59XG48L3N0eWxlPlxuXG48dGFibGUgYmdjb2xv cj0iI0ZGRkZGRiIgc3R5bGU9InBhZGRpbmc6IDA7IG1hcmdpbjogMDsgYm9yZGVyOiAwOyB3aWR0 aDogMTAwJTsiIGFsaWduPSJsZWZ0Ij5cbgk8dHIgc3R5bGU9ImhlaWdodDogMjhweCI+PHRkPiZu YnNwOzwvdGQ+PC90cj5cbgk8dHI+XG4JCTx0ZCBhbGlnbj0ibGVmdCIgc3R5bGU9InBhZGRpbmc6 IDAgMjBweDsgbWFyZ2luOiAwIj5cbgkJCTwhLS08dGFibGUgYmdjb2xvcj0iI0ZGRkZGRiIgc3R5 bGU9ImJvcmRlcjogMHB4OyB3aWR0aDogMTAwJTsgcGFkZGluZy1sZWZ0OiA1MHB4OyBwYWRkaW5n LXJpZ2h0OiA1MHB4OyIgYWxpZ249ImxlZnQiIGNsYXNzPSJtYWluIj5cbgkJCQk8dHI+XG4JCQkJ CTx0ZCBhbGlnbj0iY2VudGVyIiB2YWxpZ249InRvcCIgPiZuYnNwOwkJCQkJPC90ZD5cbgkJCQk8 L3RyPlxuCQkJPC90YWJsZT4tLT5cblxuXG5cbgkJCTx0YWJsZT5cbgkJCQk8dHI+XG4JCQkJCTx0 ZD5cbgkJCQkJCTxGT05UIFNJWkU9IjQiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+V2hl biBpdCdzIHRpbWUsIGpvaW4gdGhlIFdlYmV4IG1lZXRpbmcgaGVyZS48L0ZPTlQ+XG4JCQkJCTwv dGQ+XG4JCQkJPC90cj5cbgkJPC90YWJsZT5cbiAgICAgICAgPHRhYmxlPlxuICAgICAgICAJPHRy IHN0eWxlPSJsaW5lLWhlaWdodDogMjBweDsiPjx0ZCBzdHlsZT0iaGVpZ2h0OjIwcHgiPiZuYnNw OzwvdGQ+PC90cj5cbgkJCTx0cj5cbgkJCQk8dGQgc3R5bGU9IndpZHRoOmF1dG8haW1wb3J0YW50 OyAiPlxuCQkJCQk8dGFibGUgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9 IjAiIHN0eWxlPSJ3aWR0aDphdXRvO3dpZHRoOmF1dG8haW1wb3J0YW50O2JhY2tncm91bmQtY29s b3I6IzAwODIzQjsgYm9yZGVyOjBweCBzb2xpZCAjMDA4MjNCOyBib3JkZXItcmFkaXVzOjI1cHg7 IG1pbi13aWR0aDoxNjBweCFpbXBvcnRhbnQ7Ij5cbgkJCQkJCTx0cj5cbgkJCQkJCQk8dGQgYWxp Z249ImNlbnRlciIgc3R5bGU9InBhZGRpbmc6MTBweCAzNnB4OyI+PGEgaHJlZj0iaHR0cHM6Ly9p ZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWRlODVlMGMxYzk0OWE1YjRhYzk1MzFiZWQ2 YjNiYjA0IiBzdHlsZT0iY29sb3I6I0ZGRkZGRjsgZm9udC1zaXplOjIwcHg7IHRleHQtZGVjb3Jh dGlvbjpub25lOyI+Sm9pbiBtZWV0aW5nPC9hPjwvdGQ+XG4JCQkJCQk8L3RyPlxuCQkJCQk8L3Rh YmxlPlxuCQkJCTwvdGQ+XG4JCQk8L3RyPlxuCQk8L3RhYmxlPlxuCQk8dGFibGU+XG4JCQk8dHIg c3R5bGU9ImxpbmUtaGVpZ2h0OiAyMHB4OyI+PHRkIHN0eWxlPSJoZWlnaHQ6MjBweCI+Jm5ic3A7 PC90ZD48L3RyPlxuCQkJPHRyPlxuCQkJCTx0ZD5cbgkJCQkJCTxGT05UIFNJWkU9IjMiIENPTE9S PSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+TW9yZSB3YXlzIHRvIGpvaW46PC9GT05UPlxuCQkJCTwv dGQ+XG4gICAgICAgIAk8L3RyPlxuICAgICAgICAgICAgPHRyIHN0eWxlPSJsaW5lLWhlaWdodDog MTBweDsiPjx0ZCBzdHlsZT0iaGVpZ2h0OiAxMHB4OyI+Jm5ic3A7PC90ZD48L3RyPlxuICAgICAg ICAJPHRyPlxuCQkJCTx0ZD5cbgkJCQkJCTxGT05UIFNJWkU9IjMiIENPTE9SPSIjNjY2NjY2IiBG QUNFPSJhcmlhbCI+Sm9pbiBmcm9tIHRoZSBtZWV0aW5nIGxpbms8L0ZPTlQ+XG4JCQkJPC90ZD5c biAgICAgICAgCTwvdHI+XG4gICAgICAgIAk8dHI+XG4JCQkJPHRkPlxuCQkJCQkJPEZPTlQgU0la RT0iMiIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj48YSBocmVmPSdodHRwczovL2lldGYu d2ViZXguY29tL2lldGYvai5waHA/TVRJRD1tZGU4NWUwYzFjOTQ5YTViNGFjOTUzMWJlZDZiM2Ji MDQnIHN0eWxlPSdjb2xvcjojMDA1RTdEOyAgdGV4dC1kZWNvcmF0aW9uOm5vbmU7IGZvbnQtZmFt aWx5OiBBcmlhbDtmb250LXNpemU6IDE0cHg7bGluZS1oZWlnaHQ6IDI0cHg7Jz5odHRwczovL2ll dGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1tZGU4NWUwYzFjOTQ5YTViNGFjOTUzMWJlZDZi M2JiMDQ8L2E+PC9GT05UPlxuCQkJCTwvdGQ+XG4gICAgICAgIAk8L3RyPlxuICAgICAgICAJPHRy IHN0eWxlPSJsaW5lLWhlaWdodDogMjBweDsiPjx0ZCBzdHlsZT0iaGVpZ2h0OjIwcHgiPiZuYnNw OzwvdGQ+PC90cj5cbgkJCTx0cj5cbgkJCQk8dGQ+XG4JCQkJCQk8Rk9OVCBTSVpFPSIzIiBDT0xP Uj0iIzY2NjY2NiIgRkFDRT0iYXJpYWwiPkpvaW4gYnkgbWVldGluZyBudW1iZXI8L0ZPTlQ+XG4J CQkJPC90ZD5cbiAgICAgICAgCTwvdHI+XG4JCQk8dHI+XG4JCQkJPHRkPlxuCQkJCQk8Rk9OVCBT SVpFPSIyIiBDT0xPUj0iIzY2NjY2NiIgRkFDRT0iYXJpYWwiPk1lZXRpbmcgbnVtYmVyIChhY2Nl c3MgY29kZSk6IDE4NSAzNTcgMjI3NzwvRk9OVD5cbgkJCQk8L3RkPlxuCQkJPC90cj5cbgkJPC90 YWJsZT5cbgkJPHRhYmxlPjx0cj48dGQ+PEZPTlQgU0laRT0iMiIgQ09MT1I9IiM2NjY2NjYiIEZB Q0U9ImFyaWFsIj5NZWV0aW5nIHBhc3N3b3JkOjwvRk9OVD48L3RkPjx0ZD48Rk9OVCBTSVpFPSIy IiAgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj5mM0NicE1wSG03NjwvRk9OVD48L3RkPjwv dHI+PC90YWJsZT5cblxuIDxGT05UIHNpemU9IjIiIENPTE9SPSIjRkYwMDAwIiBzdHlsZT0iZm9u dC1mYW1pbHk6IEFyaWFsOyI+PC9GT05UPlxuPEZPTlQgU0laRT0iMSIgRkFDRT0iQVJJQUwiPiZu YnNwOzxCUj4mbmJzcDs8QlI+PC9GT05UPlxuXG4mbmJzcDsgPEJSPjxGT05UIFNJWkU9IjQiIEZB Q0U9IkFSSUFMIj48Rk9OVCBTSVpFPSIzIiBDT0xPUj0iIzY2NjY2NiIgRkFDRT0iYXJpYWwiPlRh cCB0byBqb2luIGZyb20gYSBtb2JpbGUgZGV2aWNlIChhdHRlbmRlZXMgb25seSk8L0ZPTlQ+ICZu YnNwOyA8QlI+PEZPTlQgU0laRT0iMiIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj48YSBo cmVmPSd0ZWw6JTJCMS02NTAtNDc5LTMyMDgsLCowMSoxODUzNTcyMjc3JTIzJTIzKjAxKicgc3R5 bGU9J2NvbG9yOiMwMDVFN0Q7ICB0ZXh0LWRlY29yYXRpb246bm9uZTsgZm9udC1mYW1pbHk6IEFy aWFsO2ZvbnQtc2l6ZTogMTRweDtsaW5lLWhlaWdodDogMjRweDsnPisxLTY1MC00NzktMzIwOCws MTg1MzU3MjI3NyMjPC9hPiBDYWxsLWluIHRvbGwgbnVtYmVyIChVUy9DYW5hZGEpPC9GT05UPiZu YnNwOyA8QlI+PEJSPjxGT05UIFNJWkU9IjQiIEZBQ0U9IkFSSUFMIj48Rk9OVCBTSVpFPSIzIiBD T0xPUj0iIzY2NjY2NiIgRkFDRT0iYXJpYWwiPkpvaW4gYnkgcGhvbmU8L0ZPTlQ+ICZuYnNwOyA8 QlI+PEZPTlQgU0laRT0iMiIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj4xLTY1MC00Nzkt MzIwOCBDYWxsLWluIHRvbGwgbnVtYmVyIChVUy9DYW5hZGEpPC9GT05UPiAmbmJzcDsgPEJSPjxG T05UIFNJWkU9IjIiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+PGEgaHJlZj0iaHR0cHM6 Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2dsb2JhbGNhbGxpbi5waHA/TVRJRD1tMWUzNzljZjM0MDE0 ZTBlNjI3ZjczOTM0YmY0YjVhODkiIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246bm9uZTtmb250LXNp emU6MTRweDtjb2xvcjojMDA1RTdEIj5HbG9iYWwgY2FsbC1pbiBudW1iZXJzPC9hPjwvRk9OVD4m bmJzcDsgPEJSPjxCUj48QlI+XG5cbjx0YWJsZT48dHIgc3R5bGU9ImxpbmUtaGVpZ2h0OiAyMHB4 OyI+PHRkIHN0eWxlPSJoZWlnaHQ6MjBweCI+Jm5ic3A7PC90ZD48L3RyPjwvdGFibGU+XG5cbjxG T05UIFNJWkU9IjQiIEZBQ0U9IkFSSUFMIj48Rk9OVCBTSVpFPSIzIiBDT0xPUj0iIzY2NjY2NiIg RkFDRT0iYXJpYWwiPkpvaW4gZnJvbSBhIHZpZGVvIHN5c3RlbSBvciBhcHBsaWNhdGlvbjwvRk9O VD48QlI+PEZPTlQgU0laRT0iMiIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj5EaWFsPC9G T05UPiA8YSBocmVmPSJzaXA6MTg1MzU3MjI3N0BpZXRmLndlYmV4LmNvbSI+PEZPTlQgU0laRT0i MiIgQ09MT1I9IiMwMDVFN0QiIEZBQ0U9ImFyaWFsIj4xODUzNTcyMjc3QGlldGYud2ViZXguY29t PC9GT05UPjwvYT4mbmJzcDsgPEJSPjxGT05UIFNJWkU9IjIiIENPTE9SPSIjNjY2NjY2IiBGQUNF PSJhcmlhbCI+WW91IGNhbiBhbHNvIGRpYWwgMTczLjI0My4yLjY4IGFuZCBlbnRlciB5b3VyIG1l ZXRpbmcgbnVtYmVyLjwvRk9OVD4gJm5ic3A7IDxCUj48L0ZPTlQ+Jm5ic3A7IDxCUj5cblxuPHRh YmxlPjx0ciBzdHlsZT0ibGluZS1oZWlnaHQ6IDIwcHg7Ij48dGQgc3R5bGU9ImhlaWdodDoyMHB4 Ij4mbmJzcDs8L3RkPjwvdHI+PC90YWJsZT48dGFibGUgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFj aW5nPSIwIj48dHI+PHRkICBzdHlsZT0iY29sb3I6ICMwMDAwMDA7IGZvbnQtZmFtaWx5OiBBcmlh bDtmb250LXNpemU6IDEycHg7IGZvbnQtd2VpZ2h0OiBib2xkOyBsaW5lLWhlaWdodDogMjRweDsi PjxiPkpvaW4gdXNpbmcgTWljcm9zb2Z0IEx5bmMgb3IgTWljcm9zb2Z0IFNreXBlIGZvciBCdXNp bmVzczwvYj48L3RkPjwvdHI+PHRyIHN0eWxlPSJtYXJnaW46MHB4Ij48dGQgc3R5bGU9ImNvbG9y OiAjMzMzMzMzOyBmb250LWZhbWlseTogQXJpYWw7IGZvbnQtc2l6ZTogMTRweDsgbGluZS1oZWln aHQ6IDI0cHg7Ij5EaWFsIDxhIGhyZWY9IiBzaXA6MTg1MzU3MjI3Ny5pZXRmQGx5bmMud2ViZXgu Y29tIiAgIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246bm9uZTtjb2xvcjojMDA1RTdEIj4xODUzNTcy Mjc3LmlldGZAbHluYy53ZWJleC5jb208L2E+PC90ZD48L3RyPjwvdGFibGU+XG5cbgk8dGFibGU+ PHRyIHN0eWxlPSJsaW5lLWhlaWdodDogMjBweCI+PHRkIHN0eWxlPSJoZWlnaHQ6MjBweCI+Jm5i c3A7PC90ZD48L3RyPjwvdGFibGU+XG4JPHRhYmxlPjx0ciBzdHlsZT0ibWFyZ2luOjBweCI+PHRk IHN0eWxlPSJjb2xvcjogIzMzMzMzMzsgZm9udC1mYW1pbHk6IEFyaWFsOyBmb250LXNpemU6IDE0 cHg7IGxpbmUtaGVpZ2h0OiAyNHB4OyI+PC90ZD48L3RyPjwvdGFibGU+XG5cbgkJCTx0YWJsZSBz dHlsZT0id2lkdGg6IDEwMCU7IiBhbGlnbj0ibGVmdCIgY2xhc3M9Im1haW4iPlxuICAgICAgICAg ICAgICAgIDx0ciBzdHlsZT0iaGVpZ2h0OiAyMHB4Ij48dGQ+Jm5ic3A7PC90ZD48L3RyPlxuCQkJ CTx0cj5cbgkJCQkJPHRkIHN0eWxlPSJoZWlnaHQ6IDI0cHg7IGNvbG9yOiAjMDAwMDAwOyBmb250 LWZhbWlseTpBcmlhbDsgZm9udC1zaXplOiAxNHB4OyBsaW5lLWhlaWdodDogMjRweDsiPk5lZWQg aGVscD8gR28gdG8gPGEgaHJlZj0iaHR0cHM6Ly9oZWxwLndlYmV4LmNvbSIgc3R5bGU9ImNvbG9y OiMwMDVFN0Q7IHRleHQtZGVjb3JhdGlvbjpub25lOyI+aHR0cHM6Ly9oZWxwLndlYmV4LmNvbTwv YT5cbgkJCQkJPC90ZD5cbgkJCQk8L3RyPlxuICAgICAgICAgICAgICAgIDx0ciBzdHlsZT0iaGVp Z2h0OiA0NHB4Ij48dGQ+Jm5ic3A7PC90ZD48L3RyPlxuCQkJPC90YWJsZT5cbgkJPC90ZD5cbgk8 L3RyPlxuPC90YWJsZT5cbg0KU1VNTUFSWTpQcmUtSUVURiAxMTAgU0VDRElSIE1lZXRpbmcgLS0g R3JvdXAgMQ0KUFJJT1JJVFk6NQ0KQ0xBU1M6UFVCTElDDQpCRUdJTjpWQUxBUk0NClRSSUdHRVI6 LVBUNU0NCkFDVElPTjpESVNQTEFZDQpERVNDUklQVElPTjpSZW1pbmRlcg0KRU5EOlZBTEFSTQ0K RU5EOlZFVkVOVA0KRU5EOlZDQUxFTkRBUg0K --_003_094e60b6f42a41a28fe6d5a8341c23c5certorg_ Content-Type: text/calendar; name="SECDIR-pre-IETF110-Group-2-Webex_Meeting.ics" Content-Description: SECDIR-pre-IETF110-Group-2-Webex_Meeting.ics Content-Disposition: attachment; filename="SECDIR-pre-IETF110-Group-2-Webex_Meeting.ics"; size=8785; creation-date="Wed, 10 Feb 2021 14:46:28 GMT"; modification-date="Wed, 10 Feb 2021 14:45:24 GMT" Content-Transfer-Encoding: base64 QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vTWljcm9zb2Z0IENvcnBvcmF0aW9uLy9PdXRsb29r IDEwLjAgTUlNRURJUi8vRU4NClZFUlNJT046Mi4wDQpNRVRIT0Q6UkVRVUVTVA0KQkVHSU46VlRJ TUVaT05FDQpUWklEOkFtZXJpY2EvTmV3X1lvcmsNClRaVVJMOmh0dHA6Ly90enVybC5vcmcvem9u ZWluZm8tb3V0bG9vay9BbWVyaWNhL05ld19Zb3JrDQpYLUxJQy1MT0NBVElPTjpBbWVyaWNhL05l d19Zb3JrDQpCRUdJTjpEQVlMSUdIVA0KVFpPRkZTRVRGUk9NOi0wNTAwDQpUWk9GRlNFVFRPOi0w NDAwDQpUWk5BTUU6RURUDQpEVFNUQVJUOjE5NzAwMzA4VDAyMDAwMA0KUlJVTEU6RlJFUT1ZRUFS TFk7QllNT05USD0zO0JZREFZPTJTVQ0KRU5EOkRBWUxJR0hUDQpCRUdJTjpTVEFOREFSRA0KVFpP RkZTRVRGUk9NOi0wNDAwDQpUWk9GRlNFVFRPOi0wNTAwDQpUWk5BTUU6RVNUDQpEVFNUQVJUOjE5 NzAxMTAxVDAyMDAwMA0KUlJVTEU6RlJFUT1ZRUFSTFk7QllNT05USD0xMTtCWURBWT0xU1UNCkVO RDpTVEFOREFSRA0KRU5EOlZUSU1FWk9ORQ0KQkVHSU46VkVWRU5UDQpEVFNUQU1QOjIwMjEwMjEw VDE0NDQyNVoNCkFUVEVOREVFO0NOPSJzZWNhcmVhIjtST0xFPVJFUS1QQVJUSUNJUEFOVDtSU1ZQ PUZBTFNFOk1BSUxUTzpzZWMtYWRzQGlldGYub3JnDQpPUkdBTklaRVI7Q049IkNpc2NvIFdlYmV4 IjpNQUlMVE86bWVzc2VuZ2VyQHdlYmV4LmNvbQ0KRFRTVEFSVDtUWklEPUFtZXJpY2EvTmV3X1lv cms6MjAyMTAyMTdUMDAwMDAwDQpEVEVORDtUWklEPUFtZXJpY2EvTmV3X1lvcms6MjAyMTAyMTdU MDEwMDAwDQpMT0NBVElPTjpodHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1t NGQ1NjVmMWQ2ODhmMjk0YmU5Nzg5N2VkMTNlZDRmMjYNClRSQU5TUDpPUEFRVUUNClNFUVVFTkNF OjE2MTI5NjgyNjUNClVJRDo2MTViZGRiYi02ZDY3LTQyMWYtYTgxZS1iYzdkNTdjMGZkZTQNCkRF U0NSSVBUSU9OOlxuXG5cbkpPSU4gV0VCRVggTUVFVElOR1xuaHR0cHM6Ly9pZXRmLndlYmV4LmNv bS9pZXRmL2oucGhwP01USUQ9bTRkNTY1ZjFkNjg4ZjI5NGJlOTc4OTdlZDEzZWQ0ZjI2XG5NZWV0 aW5nIG51bWJlciAoYWNjZXNzIGNvZGUpOiAxODUgOTkyIDAwNDhcblxuXG5NZWV0aW5nIHBhc3N3 b3JkOiBpNTN4SnVkNFFQeFxuXG5cblxuVEFQIFRPIEpPSU4gRlJPTSBBIE1PQklMRSBERVZJQ0Ug KEFUVEVOREVFUyBPTkxZKVxuKzEtNjUwLTQ3OS0zMjA4LCwxODU5OTIwMDQ4IyMgdGVsOiUyQjEt NjUwLTQ3OS0zMjA4LCwqMDEqMTg1OTkyMDA0OCUyMyUyMyowMSogQ2FsbC1pbiB0b2xsIG51bWJl ciAoVVMvQ2FuYWRhKVxuXG5cbkpPSU4gQlkgUEhPTkVcbjEtNjUwLTQ3OS0zMjA4IENhbGwtaW4g dG9sbCBudW1iZXIgKFVTL0NhbmFkYSlcblxuR2xvYmFsIGNhbGwtaW4gbnVtYmVyc1xuaHR0cHM6 Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2dsb2JhbGNhbGxpbi5waHA/TVRJRD1tMDU1ZjMwYmE1MzY3 NTM1NjQxYmQ5NjE3ODBkYjZmZjBcblxuXG5KT0lOIEZST00gQSBWSURFTyBTWVNURU0gT1IgQVBQ TElDQVRJT05cbkRpYWwgc2lwOjE4NTk5MjAwNDhAaWV0Zi53ZWJleC5jb21cbllvdSBjYW4gYWxz byBkaWFsIDE3My4yNDMuMi42OCBhbmQgZW50ZXIgeW91ciBtZWV0aW5nIG51bWJlci5cblxuXG5K b2luIHVzaW5nIE1pY3Jvc29mdCBMeW5jIG9yIE1pY3Jvc29mdCBTa3lwZSBmb3IgQnVzaW5lc3Nc bkRpYWwgc2lwOjE4NTk5MjAwNDguaWV0ZkBseW5jLndlYmV4LmNvbVxuXG5cblxuSWYgeW91IGFy ZSBhIGhvc3QsIGNsaWNrIGhlcmUgdG8gdmlldyBob3N0IGluZm9ybWF0aW9uOlxuaHR0cHM6Ly9p ZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bTVkZDcwYmM2ZTkwMTIxMzI0OTlhN2NiMTFh YTg3NTRlXG5cblxuXG5DYW4ndCBqb2luIHRoZSBtZWV0aW5nPyBDb250YWN0IHN1cHBvcnQgaGVy ZTpcbmh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9tY1xuXG5cbklNUE9SVEFOVCBOT1RJQ0U6 IFBsZWFzZSBub3RlIHRoYXQgdGhpcyBXZWJleCBzZXJ2aWNlIGFsbG93cyBhdWRpbyBhbmQgb3Ro ZXIgaW5mb3JtYXRpb24gc2VudCBkdXJpbmcgdGhlIHNlc3Npb24gdG8gYmUgcmVjb3JkZWQsIHdo aWNoIG1heSBiZSBkaXNjb3ZlcmFibGUgaW4gYSBsZWdhbCBtYXR0ZXIuIFlvdSBzaG91bGQgaW5m b3JtIGFsbCBtZWV0aW5nIGF0dGVuZGVlcyBwcmlvciB0byByZWNvcmRpbmcgaWYgeW91IGludGVu ZCB0byByZWNvcmQgdGhlIG1lZXRpbmcuXG4NClgtQUxULURFU0M7Rk1UVFlQRT10ZXh0L2h0bWw6 PHN0eWxlIHR5cGU9InRleHQvY3NzIj5cbnRhYmxlIHtcbglib3JkZXItY29sbGFwc2U6IHNlcGFy YXRlOyB3aWR0aCA9MTAwJTsJYm9yZGVyOiAwOwlib3JkZXItc3BhY2luZzogMDt9XG5cbnRyIHtc bglsaW5lLWhlaWdodDogMThweDt9XG5cbmEsIHRkIHtcbglmb250LXNpemU6IDE0cHg7CWZvbnQt ZmFtaWx5OiBBcmlhbDsJY29sb3I6ICMzMzM7CXdvcmQtd3JhcDogYnJlYWstd29yZDsJd29yZC1i cmVhazogbm9ybWFsOwlwYWRkaW5nOiAwO31cblxuLnRpdGxlIHtcbglmb250LXNpemU6IDI4cHg7 fVxuXG4uaW1hZ2Uge1xuCXdpZHRoOiBhdXRvOwltYXgtd2lkdGg6IGF1dG87fVxuXG4uZm9vdGVy IHtcbgl3aWR0aDogNjA0cHg7fVxuXG4ubWFpbiB7XG5cbn1AbWVkaWEgc2NyZWVuIGFuZCAobWF4 LWRldmljZS13aWR0aDogODAwcHgpIHtcbgkudGl0bGUge1xuCQlmb250LXNpemU6IDIycHggIWlt cG9ydGFudDsJfVxuCS5pbWFnZSB7XG4JCXdpZHRoOiBhdXRvICFpbXBvcnRhbnQ7CQltYXgtd2lk dGg6IDEwMCUgIWltcG9ydGFudDsJfVxuCS5mb290ZXIge1xuCQl3aWR0aDogMTAwJSAhaW1wb3J0 YW50OwkJbWF4LXdpZHRoOiA2MDRweCAhaW1wb3J0YW50XG4JfVxuCS5tYWluIHtcbgkJd2lkdGg6 IDEwMCUgIWltcG9ydGFudDsJCW1heC13aWR0aDogNjA0cHggIWltcG9ydGFudFxuCX1cbn1cbjwv c3R5bGU+XG5cbjx0YWJsZSBiZ2NvbG9yPSIjRkZGRkZGIiBzdHlsZT0icGFkZGluZzogMDsgbWFy Z2luOiAwOyBib3JkZXI6IDA7IHdpZHRoOiAxMDAlOyIgYWxpZ249ImxlZnQiPlxuCTx0ciBzdHls ZT0iaGVpZ2h0OiAyOHB4Ij48dGQ+Jm5ic3A7PC90ZD48L3RyPlxuCTx0cj5cbgkJPHRkIGFsaWdu PSJsZWZ0IiBzdHlsZT0icGFkZGluZzogMCAyMHB4OyBtYXJnaW46IDAiPlxuCQkJPCEtLTx0YWJs ZSBiZ2NvbG9yPSIjRkZGRkZGIiBzdHlsZT0iYm9yZGVyOiAwcHg7IHdpZHRoOiAxMDAlOyBwYWRk aW5nLWxlZnQ6IDUwcHg7IHBhZGRpbmctcmlnaHQ6IDUwcHg7IiBhbGlnbj0ibGVmdCIgY2xhc3M9 Im1haW4iPlxuCQkJCTx0cj5cbgkJCQkJPHRkIGFsaWduPSJjZW50ZXIiIHZhbGlnbj0idG9wIiA+ Jm5ic3A7CQkJCQk8L3RkPlxuCQkJCTwvdHI+XG4JCQk8L3RhYmxlPi0tPlxuXG5cblxuCQkJPHRh YmxlPlxuCQkJCTx0cj5cbgkJCQkJPHRkPlxuCQkJCQkJPEZPTlQgU0laRT0iNCIgQ09MT1I9IiM2 NjY2NjYiIEZBQ0U9ImFyaWFsIj5XaGVuIGl0J3MgdGltZSwgam9pbiB0aGUgV2ViZXggbWVldGlu ZyBoZXJlLjwvRk9OVD5cbgkJCQkJPC90ZD5cbgkJCQk8L3RyPlxuCQk8L3RhYmxlPlxuICAgICAg ICA8dGFibGU+XG4gICAgICAgIAk8dHIgc3R5bGU9ImxpbmUtaGVpZ2h0OiAyMHB4OyI+PHRkIHN0 eWxlPSJoZWlnaHQ6MjBweCI+Jm5ic3A7PC90ZD48L3RyPlxuCQkJPHRyPlxuCQkJCTx0ZCBzdHls ZT0id2lkdGg6YXV0byFpbXBvcnRhbnQ7ICI+XG4JCQkJCTx0YWJsZSBib3JkZXI9IjAiIGNlbGxw YWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgc3R5bGU9IndpZHRoOmF1dG87d2lkdGg6YXV0byFp bXBvcnRhbnQ7YmFja2dyb3VuZC1jb2xvcjojMDA4MjNCOyBib3JkZXI6MHB4IHNvbGlkICMwMDgy M0I7IGJvcmRlci1yYWRpdXM6MjVweDsgbWluLXdpZHRoOjE2MHB4IWltcG9ydGFudDsiPlxuCQkJ CQkJPHRyPlxuCQkJCQkJCTx0ZCBhbGlnbj0iY2VudGVyIiBzdHlsZT0icGFkZGluZzoxMHB4IDM2 cHg7Ij48YSBocmVmPSJodHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1tNGQ1 NjVmMWQ2ODhmMjk0YmU5Nzg5N2VkMTNlZDRmMjYiIHN0eWxlPSJjb2xvcjojRkZGRkZGOyBmb250 LXNpemU6MjBweDsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij5Kb2luIG1lZXRpbmc8L2E+PC90ZD5c bgkJCQkJCTwvdHI+XG4JCQkJCTwvdGFibGU+XG4JCQkJPC90ZD5cbgkJCTwvdHI+XG4JCTwvdGFi bGU+XG4JCTx0YWJsZT5cbgkJCTx0ciBzdHlsZT0ibGluZS1oZWlnaHQ6IDIwcHg7Ij48dGQgc3R5 bGU9ImhlaWdodDoyMHB4Ij4mbmJzcDs8L3RkPjwvdHI+XG4JCQk8dHI+XG4JCQkJPHRkPlxuCQkJ CQkJPEZPTlQgU0laRT0iMyIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj5Nb3JlIHdheXMg dG8gam9pbjo8L0ZPTlQ+XG4JCQkJPC90ZD5cbiAgICAgICAgCTwvdHI+XG4gICAgICAgICAgICA8 dHIgc3R5bGU9ImxpbmUtaGVpZ2h0OiAxMHB4OyI+PHRkIHN0eWxlPSJoZWlnaHQ6IDEwcHg7Ij4m bmJzcDs8L3RkPjwvdHI+XG4gICAgICAgIAk8dHI+XG4JCQkJPHRkPlxuCQkJCQkJPEZPTlQgU0la RT0iMyIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj5Kb2luIGZyb20gdGhlIG1lZXRpbmcg bGluazwvRk9OVD5cbgkJCQk8L3RkPlxuICAgICAgICAJPC90cj5cbiAgICAgICAgCTx0cj5cbgkJ CQk8dGQ+XG4JCQkJCQk8Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzY2NjY2NiIgRkFDRT0iYXJpYWwi PjxhIGhyZWY9J2h0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW00ZDU2NWYx ZDY4OGYyOTRiZTk3ODk3ZWQxM2VkNGYyNicgc3R5bGU9J2NvbG9yOiMwMDVFN0Q7ICB0ZXh0LWRl Y29yYXRpb246bm9uZTsgZm9udC1mYW1pbHk6IEFyaWFsO2ZvbnQtc2l6ZTogMTRweDtsaW5lLWhl aWdodDogMjRweDsnPmh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW00ZDU2 NWYxZDY4OGYyOTRiZTk3ODk3ZWQxM2VkNGYyNjwvYT48L0ZPTlQ+XG4JCQkJPC90ZD5cbiAgICAg ICAgCTwvdHI+XG4gICAgICAgIAk8dHIgc3R5bGU9ImxpbmUtaGVpZ2h0OiAyMHB4OyI+PHRkIHN0 eWxlPSJoZWlnaHQ6MjBweCI+Jm5ic3A7PC90ZD48L3RyPlxuCQkJPHRyPlxuCQkJCTx0ZD5cbgkJ CQkJCTxGT05UIFNJWkU9IjMiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+Sm9pbiBieSBt ZWV0aW5nIG51bWJlcjwvRk9OVD5cbgkJCQk8L3RkPlxuICAgICAgICAJPC90cj5cbgkJCTx0cj5c bgkJCQk8dGQ+XG4JCQkJCTxGT05UIFNJWkU9IjIiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlh bCI+TWVldGluZyBudW1iZXIgKGFjY2VzcyBjb2RlKTogMTg1IDk5MiAwMDQ4PC9GT05UPlxuCQkJ CTwvdGQ+XG4JCQk8L3RyPlxuCQk8L3RhYmxlPlxuCQk8dGFibGU+PHRyPjx0ZD48Rk9OVCBTSVpF PSIyIiBDT0xPUj0iIzY2NjY2NiIgRkFDRT0iYXJpYWwiPk1lZXRpbmcgcGFzc3dvcmQ6PC9GT05U PjwvdGQ+PHRkPjxGT05UIFNJWkU9IjIiICBDT0xPUj0iIzY2NjY2NiIgRkFDRT0iYXJpYWwiPmk1 M3hKdWQ0UVB4PC9GT05UPjwvdGQ+PC90cj48L3RhYmxlPlxuXG4gPEZPTlQgc2l6ZT0iMiIgQ09M T1I9IiNGRjAwMDAiIHN0eWxlPSJmb250LWZhbWlseTogQXJpYWw7Ij48L0ZPTlQ+XG48Rk9OVCBT SVpFPSIxIiBGQUNFPSJBUklBTCI+Jm5ic3A7PEJSPiZuYnNwOzxCUj48L0ZPTlQ+XG5cbiZuYnNw OyA8QlI+PEZPTlQgU0laRT0iNCIgRkFDRT0iQVJJQUwiPjxGT05UIFNJWkU9IjMiIENPTE9SPSIj NjY2NjY2IiBGQUNFPSJhcmlhbCI+VGFwIHRvIGpvaW4gZnJvbSBhIG1vYmlsZSBkZXZpY2UgKGF0 dGVuZGVlcyBvbmx5KTwvRk9OVD4gJm5ic3A7IDxCUj48Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzY2 NjY2NiIgRkFDRT0iYXJpYWwiPjxhIGhyZWY9J3RlbDolMkIxLTY1MC00NzktMzIwOCwsKjAxKjE4 NTk5MjAwNDglMjMlMjMqMDEqJyBzdHlsZT0nY29sb3I6IzAwNUU3RDsgIHRleHQtZGVjb3JhdGlv bjpub25lOyBmb250LWZhbWlseTogQXJpYWw7Zm9udC1zaXplOiAxNHB4O2xpbmUtaGVpZ2h0OiAy NHB4Oyc+KzEtNjUwLTQ3OS0zMjA4LCwxODU5OTIwMDQ4IyM8L2E+IENhbGwtaW4gdG9sbCBudW1i ZXIgKFVTL0NhbmFkYSk8L0ZPTlQ+Jm5ic3A7IDxCUj48QlI+PEZPTlQgU0laRT0iNCIgRkFDRT0i QVJJQUwiPjxGT05UIFNJWkU9IjMiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+Sm9pbiBi eSBwaG9uZTwvRk9OVD4gJm5ic3A7IDxCUj48Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzY2NjY2NiIg RkFDRT0iYXJpYWwiPjEtNjUwLTQ3OS0zMjA4IENhbGwtaW4gdG9sbCBudW1iZXIgKFVTL0NhbmFk YSk8L0ZPTlQ+ICZuYnNwOyA8QlI+PEZPTlQgU0laRT0iMiIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9 ImFyaWFsIj48YSBocmVmPSJodHRwczovL2lldGYud2ViZXguY29tL2lldGYvZ2xvYmFsY2FsbGlu LnBocD9NVElEPW0wNTVmMzBiYTUzNjc1MzU2NDFiZDk2MTc4MGRiNmZmMCIgc3R5bGU9InRleHQt ZGVjb3JhdGlvbjpub25lO2ZvbnQtc2l6ZToxNHB4O2NvbG9yOiMwMDVFN0QiPkdsb2JhbCBjYWxs LWluIG51bWJlcnM8L2E+PC9GT05UPiZuYnNwOyA8QlI+PEJSPjxCUj5cblxuPHRhYmxlPjx0ciBz dHlsZT0ibGluZS1oZWlnaHQ6IDIwcHg7Ij48dGQgc3R5bGU9ImhlaWdodDoyMHB4Ij4mbmJzcDs8 L3RkPjwvdHI+PC90YWJsZT5cblxuPEZPTlQgU0laRT0iNCIgRkFDRT0iQVJJQUwiPjxGT05UIFNJ WkU9IjMiIENPTE9SPSIjNjY2NjY2IiBGQUNFPSJhcmlhbCI+Sm9pbiBmcm9tIGEgdmlkZW8gc3lz dGVtIG9yIGFwcGxpY2F0aW9uPC9GT05UPjxCUj48Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzY2NjY2 NiIgRkFDRT0iYXJpYWwiPkRpYWw8L0ZPTlQ+IDxhIGhyZWY9InNpcDoxODU5OTIwMDQ4QGlldGYu d2ViZXguY29tIj48Rk9OVCBTSVpFPSIyIiBDT0xPUj0iIzAwNUU3RCIgRkFDRT0iYXJpYWwiPjE4 NTk5MjAwNDhAaWV0Zi53ZWJleC5jb208L0ZPTlQ+PC9hPiZuYnNwOyA8QlI+PEZPTlQgU0laRT0i MiIgQ09MT1I9IiM2NjY2NjYiIEZBQ0U9ImFyaWFsIj5Zb3UgY2FuIGFsc28gZGlhbCAxNzMuMjQz LjIuNjggYW5kIGVudGVyIHlvdXIgbWVldGluZyBudW1iZXIuPC9GT05UPiAmbmJzcDsgPEJSPjwv Rk9OVD4mbmJzcDsgPEJSPlxuXG48dGFibGU+PHRyIHN0eWxlPSJsaW5lLWhlaWdodDogMjBweDsi Pjx0ZCBzdHlsZT0iaGVpZ2h0OjIwcHgiPiZuYnNwOzwvdGQ+PC90cj48L3RhYmxlPjx0YWJsZSBj ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiPjx0cj48dGQgIHN0eWxlPSJjb2xvcjogIzAw MDAwMDsgZm9udC1mYW1pbHk6IEFyaWFsO2ZvbnQtc2l6ZTogMTJweDsgZm9udC13ZWlnaHQ6IGJv bGQ7IGxpbmUtaGVpZ2h0OiAyNHB4OyI+PGI+Sm9pbiB1c2luZyBNaWNyb3NvZnQgTHluYyBvciBN aWNyb3NvZnQgU2t5cGUgZm9yIEJ1c2luZXNzPC9iPjwvdGQ+PC90cj48dHIgc3R5bGU9Im1hcmdp bjowcHgiPjx0ZCBzdHlsZT0iY29sb3I6ICMzMzMzMzM7IGZvbnQtZmFtaWx5OiBBcmlhbDsgZm9u dC1zaXplOiAxNHB4OyBsaW5lLWhlaWdodDogMjRweDsiPkRpYWwgPGEgaHJlZj0iIHNpcDoxODU5 OTIwMDQ4LmlldGZAbHluYy53ZWJleC5jb20iICAgc3R5bGU9InRleHQtZGVjb3JhdGlvbjpub25l O2NvbG9yOiMwMDVFN0QiPjE4NTk5MjAwNDguaWV0ZkBseW5jLndlYmV4LmNvbTwvYT48L3RkPjwv dHI+PC90YWJsZT5cblxuCTx0YWJsZT48dHIgc3R5bGU9ImxpbmUtaGVpZ2h0OiAyMHB4Ij48dGQg c3R5bGU9ImhlaWdodDoyMHB4Ij4mbmJzcDs8L3RkPjwvdHI+PC90YWJsZT5cbgk8dGFibGU+PHRy IHN0eWxlPSJtYXJnaW46MHB4Ij48dGQgc3R5bGU9ImNvbG9yOiAjMzMzMzMzOyBmb250LWZhbWls eTogQXJpYWw7IGZvbnQtc2l6ZTogMTRweDsgbGluZS1oZWlnaHQ6IDI0cHg7Ij5JZiB5b3UgYXJl IGEgaG9zdCwgPGEgaHJlZj0iaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9 bTVkZDcwYmM2ZTkwMTIxMzI0OTlhN2NiMTFhYTg3NTRlIiBzdHlsZT0idGV4dC1kZWNvcmF0aW9u Om5vbmU7Y29sb3I6IzAwNUU3RCI+Y2xpY2sgaGVyZTwvYT4gdG8gdmlldyBob3N0IGluZm9ybWF0 aW9uLjwvdGQ+PC90cj48L3RhYmxlPlxuXG4JCQk8dGFibGUgc3R5bGU9IndpZHRoOiAxMDAlOyIg YWxpZ249ImxlZnQiIGNsYXNzPSJtYWluIj5cbiAgICAgICAgICAgICAgICA8dHIgc3R5bGU9Imhl aWdodDogMjBweCI+PHRkPiZuYnNwOzwvdGQ+PC90cj5cbgkJCQk8dHI+XG4JCQkJCTx0ZCBzdHls ZT0iaGVpZ2h0OiAyNHB4OyBjb2xvcjogIzAwMDAwMDsgZm9udC1mYW1pbHk6QXJpYWw7IGZvbnQt c2l6ZTogMTRweDsgbGluZS1oZWlnaHQ6IDI0cHg7Ij5OZWVkIGhlbHA/IEdvIHRvIDxhIGhyZWY9 Imh0dHBzOi8vaGVscC53ZWJleC5jb20iIHN0eWxlPSJjb2xvcjojMDA1RTdEOyB0ZXh0LWRlY29y YXRpb246bm9uZTsiPmh0dHBzOi8vaGVscC53ZWJleC5jb208L2E+XG4JCQkJCTwvdGQ+XG4JCQkJ PC90cj5cbiAgICAgICAgICAgICAgICA8dHIgc3R5bGU9ImhlaWdodDogNDRweCI+PHRkPiZuYnNw OzwvdGQ+PC90cj5cbgkJCTwvdGFibGU+XG4JCTwvdGQ+XG4JPC90cj5cbjwvdGFibGU+XG4NClNV TU1BUlk6UHJlLUlFVEYgMTEwIFNFQ0RJUiBNZWV0aW5nIC0tIEdyb3VwIDINClBSSU9SSVRZOjUN CkNMQVNTOlBVQkxJQw0KQkVHSU46VkFMQVJNDQpUUklHR0VSOi1QVDVNDQpBQ1RJT046RElTUExB WQ0KREVTQ1JJUFRJT046UmVtaW5kZXINCkVORDpWQUxBUk0NCkVORDpWRVZFTlQNCkVORDpWQ0FM RU5EQVINCg== --_003_094e60b6f42a41a28fe6d5a8341c23c5certorg_-- From nobody Thu Feb 11 09:24:12 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 008923A17AE for ; Thu, 11 Feb 2021 09:24:11 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu, Tero Kivinen Message-ID: <161306425048.10699.13381542341945547979@ietfa.amsl.com> Date: Thu, 11 Feb 2021 09:24:10 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Feb 2021 17:24:11 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2021-02-18 Reviewer LC end Draft Aanchal Malhotra 2021-01-26 draft-ietf-mpls-lsp-ping-registries-update Kathleen Moriarty 2021-02-05 draft-ietf-detnet-ip-over-tsn Tirumaleswar Reddy.K 2021-02-09 draft-ietf-regext-unhandled-namespaces Stefan Santesson 2021-02-08 draft-ietf-regext-rfc7482bis Klaas Wierenga 2020-12-02 draft-ietf-core-echo-request-tag For telechat 2021-02-25 Reviewer LC end Draft Yaron Sheffer R2021-02-08 draft-ietf-pce-pcep-extension-for-pce-controller Last calls: Reviewer LC end Draft Leif Johansson None draft-ietf-netconf-crypto-types Aanchal Malhotra 2021-01-26 draft-ietf-mpls-lsp-ping-registries-update Daniel Migault R2021-01-20 draft-ietf-extra-imap4rev2 Kathleen Moriarty 2021-02-05 draft-ietf-detnet-ip-over-tsn Sandra Murphy 2020-10-15 draft-ietf-tls-external-psk-importer Tim Polk None draft-ietf-opsawg-finding-geofeeds Tirumaleswar Reddy.K 2021-02-09 draft-ietf-regext-unhandled-namespaces Stefan Santesson 2021-02-08 draft-ietf-regext-rfc7482bis Yaron Sheffer R2021-02-08 draft-ietf-pce-pcep-extension-for-pce-controller Melinda Shore 2021-02-16 draft-ietf-bess-evpn-oam-req-frmwk Robert Sparks 2021-02-15 draft-ietf-6lo-plc Sean Turner 2021-02-25 draft-ietf-ntp-port-randomization Mališa Vučinić 2021-02-24 draft-ietf-curdle-ssh-kex-sha2 Carl Wallace 2021-02-22 draft-ietf-tcpm-2140bis Samuel Weiler 2021-02-22 draft-ietf-tls-dtls13 Brian Weis 2021-02-19 draft-ietf-lamps-cms-aes-gmac-alg Brian Weis R2020-12-02 draft-ietf-core-dev-urn Klaas Wierenga 2020-05-26 draft-ietf-kitten-krb-spake-preauth Klaas Wierenga 2020-12-02 draft-ietf-core-echo-request-tag Christopher Wood R2021-02-19 draft-ietf-tsvwg-transport-encrypt Christopher Wood R2021-01-18 draft-ietf-dtn-tcpclv4 Paul Wouters 2020-09-08 draft-ietf-i2nsf-capability-data-model Early review requests: Reviewer Due Draft Tina Tsou 2021-02-15 draft-ietf-idr-eag-distribution Paul Wouters 2021-02-19 draft-ietf-idr-bgp-ls-app-specific-attr Dacheng Zhang 2020-12-07 draft-ietf-idr-eag-distribution Next in the reviewer rotation: Liang Xia Dacheng Zhang Derek Atkins John Bradley Nancy Cam-Winget Shaun Cooley Alan DeKok Linda Dunbar Donald Eastlake Shawn Emery From nobody Thu Feb 11 10:48:41 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 73B7E3A1862; Thu, 11 Feb 2021 10:48:30 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Yaron Sheffer via Datatracker To: Cc: draft-ietf-pce-pcep-extension-for-pce-controller.all@ietf.org, last-call@ietf.org, pce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161306931043.578.6786653763396770812@ietfa.amsl.com> Reply-To: Yaron Sheffer Date: Thu, 11 Feb 2021 10:48:30 -0800 Archived-At: Subject: [secdir] Secdir telechat review of draft-ietf-pce-pcep-extension-for-pce-controller-12 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Feb 2021 18:48:31 -0000 Reviewer: Yaron Sheffer Review result: Ready I reviewed the latest version and I'm OK with the changes. I'd like to thank the authors for their prompt response. From nobody Thu Feb 11 11:53:56 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C09863A1353; Wed, 10 Feb 2021 13:18:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1612991939; bh=ozBHe7wcU1xBVrgWg3TDT9tSzVKvDuitJrSu3Y+vq4E=; h=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe:Cc; b=nFjjrN3opET3NhOuvkh2Pbml9ahZubqR7Ffe0i5iHa5O1dHgL+NTqafuamZd5VR5d epuhnDEyKEaaC1vnjA5nruetdGuexpI8UqtR5tyiWWpvTM2PnVX95JMBMd5AKByXHy lQ6nkRwYbrAGSo2qNlqOFwpB2PYYlKmu/D1hHwkE= X-Mailbox-Line: From new-work-bounces@ietf.org Wed Feb 10 13:18:53 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 560A13A153D; Wed, 10 Feb 2021 13:18:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1612991933; bh=ozBHe7wcU1xBVrgWg3TDT9tSzVKvDuitJrSu3Y+vq4E=; h=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe:Cc; b=bFSl/49BdjZUQcKoDoYpTSJI7ICWUSfSXekzfRIm0onDSLAvki4sOzNviyyiynFhc TrlPO/KEz7EDKGxk6UuK7dwg7IwZ5Jv/ld4rIMwWOc0Jedebgf/g7nBK++cmMRRTWd lcMugkr6UZu8Jq+ORVopiUahNN65RKZAMjb/idDw= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A45F3A136C for ; Wed, 10 Feb 2021 13:18:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jf1EyyMuQtyO for ; Wed, 10 Feb 2021 13:18:43 -0800 (PST) Received: from mail-qk1-x731.google.com (mail-qk1-x731.google.com [IPv6:2607:f8b0:4864:20::731]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B96293A1363 for ; Wed, 10 Feb 2021 13:18:42 -0800 (PST) Received: by mail-qk1-x731.google.com with SMTP id s77so3218075qke.4 for ; Wed, 10 Feb 2021 13:18:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:mime-version:thread-index :content-language; bh=uucQ2PfdCVJpDscuceudWlXArZ9OycORV6riYrI/+Eo=; b=pJSV8QHXwv8KHZ0oXBU9yAhUoP788n8DgVFNyhk7OuVZtZ3xC3aA+MHl4boR/eJDXm FfNEb67bJHVRVjBLJ4yzZfT4DQHTlb5FTStRyFnzdd47dbQVaSbts9H97VNwkHF7M9nb Nns13iGClKSSiZT3HMLICVV3z0jrCgoqMXvkBDVSQv8v33amNHYWyufaKw5aUC58oMDQ 0gw27AghPWjt/pawLFSz1owhpfDllOnb/KcvLqSslcBGCR+4kcdABmahWuyfe7S8n9mh H/8rn9ME3qk047UYRVUDUdMK3XmbxIXnu2c+kxgxV1OqZw8RpxLHtrU0k8GD0KGINw9l lbfA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :thread-index:content-language; bh=uucQ2PfdCVJpDscuceudWlXArZ9OycORV6riYrI/+Eo=; b=i4urCc3Iyx8mOojEpJE3e1RWEGBm/8sgXvMKzW7ef91EkbYdgODK780fwY0QT2ZSXI 8m5z1JoxO3PCEJfyhq38nvG6/yGZ1MuLz72M1yXWhWKGGZ3VVrwoORshSmgNxsR/LMXN RsJZ9u64p9C1Tg3FxPKVOCrC5+MqP7b+KpX+nGjpym/6rYEeGbgD4rS2RCMRWTrPGRUZ wVMA0UBk8jSzB++EDXRJPjHBv4klofrsUWBp0U5vPalKaLA/hydU5OWzsB/k4CPbAVez ZIzFdHaMB04Vg8OniAH0zGGoQ6iD3WjklMLk1K8RrJNZIStWQc8tDqHWil4234/pzMzs sDlQ== X-Gm-Message-State: AOAM533HsKOYhw44c0xtpP7Dv7OsFbBEflaFlgatKLQbCcPl9tnSjtCO LMvEeCpbYMih2S9oUDjRO+U= X-Google-Smtp-Source: ABdhPJzzGuqd3kgSROLxe1OAAkV6cBCQbkzA5DgMzocuHkj1z7vTyIrCBT2xnfoNfnZrk9Z50OYKDA== X-Received: by 2002:a37:b2c4:: with SMTP id b187mr5377313qkf.153.1612991921735; Wed, 10 Feb 2021 13:18:41 -0800 (PST) Received: from DESKTOP6VF5FH7 ([152.208.106.92]) by smtp.gmail.com with ESMTPSA id j46sm2184466qtk.1.2021.02.10.13.18.40 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 10 Feb 2021 13:18:41 -0800 (PST) From: To: Date: Wed, 10 Feb 2021 16:18:38 -0500 Message-ID: <058e01d6fff2$4e0669e0$ea133da0$@gmail.com> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Thread-Index: Adb/8a+rzAAa8QXiThq9Qyi1HSA78g== Content-Language: en-us Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Precedence: list Cc: "'Stanley, Dorothy'" , Paul Nikolich Content-Type: multipart/mixed; boundary="===============2650727223394070646==" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Thu, 11 Feb 2021 11:53:56 -0800 Subject: [secdir] [new-work] IEEE 802 PARs under Consideration - Mar 2021 Plenary X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Feb 2021 21:19:06 -0000 This is a multipart message in MIME format. --===============2650727223394070646== Content-Type: multipart/alternative; boundary="----=_NextPart_000_058F_01D6FFC8.6530FE20" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_058F_01D6FFC8.6530FE20 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit All, The following Project Authorization Requests (PARs) and ICAID will be considered at the IEEE 802 Nov 2020 Plenary, which will be held electronically - * 802.1Qdq Amendment: Shaper Parameter Settings for Bursty Traffic requiring Bounded Latency, PAR and CSD * 802.1ASdr - Amendment: Inclusive Terminology, PAR and CSD The PARs and ICAID can be found at http://www.ieee802.org/PARs.shtml along with the supporting IEEE 802 Criteria for Standards Development, or CSD, (which includes the 5 criteria, i.e. the explanations of how they fit the IEEE 802 criteria for initiating new work). Any comments on a proposed PAR / ICAID should be sent to the Working Group chair identified on the respective document to be received by 10 Mar 2021, AoE Regards, John D'Ambrosia Recording Secretary, IEEE 802 LMSC ------=_NextPart_000_058F_01D6FFC8.6530FE20 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

All,

The following = Project Authorization Requests (PARs) and ICAID will be considered at = the IEEE 802 Nov 2020 Plenary, which will be held electronically – =  

  • 802.1Qdq = Amendment: Shaper Parameter Settings for Bursty Traffic requiring = Bounded Latency, PAR and CSD
  • 802.1ASdr - = Amendment: Inclusive Terminology, PAR and CSD

The PARs and ICAID can be = found at http://www.ieee802.org/PARs.sh= tml along with the supporting IEEE 802 Criteria for Standards = Development, or CSD, (which includes the 5 criteria, i.e. the = explanations of how they fit the IEEE 802 criteria for initiating new = work).

 

Any comments on a = proposed PAR / ICAID should be sent to the Working Group chair = identified on the respective document to be received by 10 Mar 2021, = AoE

Regards,

John = D’Ambrosia

Recording Secretary, IEEE 802 LMSC =

 

------=_NextPart_000_058F_01D6FFC8.6530FE20-- --===============2650727223394070646== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work --===============2650727223394070646==-- From nobody Thu Feb 11 11:54:00 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 712343A14F3; Thu, 11 Feb 2021 03:38:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1613043488; bh=+JDK+zkiJG+kwkUSwxX1R8mXJMI2VhxUmqJ0cW7KBYI=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=r52XduA4hLJv1BAT2SI2HBcIYKVD4fKcz+0az2M2Rqig097KkeIBT/wtasCOTXMiA spu8/1mAXjcWWDtW1xoOItGcwnKx3VyjuuGRu9tL0Zy4b+jlwaGTeao0H6o/nMGhP6 943slhFJlaGZN74aR9cjFH6Y/P+Th9REQINP40sI= X-Mailbox-Line: From new-work-bounces@ietf.org Thu Feb 11 03:38:08 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C16EE3A14E1; Thu, 11 Feb 2021 03:38:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1613043487; bh=+JDK+zkiJG+kwkUSwxX1R8mXJMI2VhxUmqJ0cW7KBYI=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=Wz8tUGI5Xxjyni1M/xpG7DYt/SHKTo7oxUYilIlgIZe0aMCGpR7k1t2wVOlJw5jZw allenNc3GMXRzZxwSq8b1vAmTYRC0eLmINSyoJckpEii+818aPdi68SKU/l/QkEcs+ MsA4Uj8uPnmpGh4swPz2lggtXyPCGgysL/gGpf9E= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BE273A14BC for ; Thu, 11 Feb 2021 03:38:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9UGJygyfWK90 for ; Thu, 11 Feb 2021 03:38:03 -0800 (PST) Received: from raoul.w3.org (raoul.w3.org [128.30.52.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4C8F3A14AA for ; Thu, 11 Feb 2021 03:38:03 -0800 (PST) Received: from [93.30.120.228] (helo=[192.168.1.100]) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lAAIM-00060k-9J; Thu, 11 Feb 2021 11:38:02 +0000 From: Coralie Mercier Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Thu, 11 Feb 2021 12:38:01 +0100 Message-Id: <28371196-9ED6-4EEC-9C2B-745D6C58ECB8@w3.org> To: new-work@ietf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Precedence: list Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Thu, 11 Feb 2021 11:53:56 -0800 Subject: [secdir] [new-work] Proposed W3C Charter: Math Working Group (until 2021-03-11/12) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Feb 2021 11:38:10 -0000 Hello, Today W3C Advisory Committee Representatives received a Proposal to review a draft charter for the Math Working Group: https://w3c.github.io/charter-drafts/math-2020.html As part of ensuring that the community is aware of proposed work at W3C, this draft charter is public during the Advisory Committee review period. W3C invites public comments through 04:59 UTC on 2021-03-12 (23:59, Eastern time on 2021-03-11) on the proposed charter. Please send comments to public-new-work@w3.org, which has a public archive: http://lists.w3.org/Archives/Public/public-new-work/ Other than comments sent in formal responses by W3C Advisory Committee Representatives, W3C cannot guarantee a response to comments. If you work for a W3C Member [1], please coordinate your comments with your Advisory Committee Representative. For example, you may wish to make public comments via this list and have your Advisory Committee Representative refer to it from their formal review comments. If you should have any questions or need further information, please contact Bert Bos, Team Contact for the proposed group . Thank you, Coralie Mercier, Head of W3C Marketing & Communications [1] http://www.w3.org/Consortium/Member/List -- Coralie Mercier - W3C Marketing & Communications - https://www.w3.org mailto:coralie@w3.org +337 810 795 22 https://www.w3.org/People/Coralie/ _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Thu Feb 11 13:21:15 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BCF813A1969; Thu, 11 Feb 2021 12:56:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1613076988; bh=D0Hyd3iHYsx8RZQFQrz+AhBcbLUzlRYWQMws/Lifc5A=; h=From:Date:In-Reply-To:To:References:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Cc; b=acC9G+ydR7l/Tx7bYsekRmKkJsBP+7uA3m7/HPA3qXU/9XZG+sB91wtYReXDjTrQe vaataH5lU+uNR0ON5czU2TFs9kMa2BU3Ixw8Z9ocFaBgrA2iDF8BBOx8tQ5fB0Hhzf aCSD4dyQtIoaeJR4cXdOYO7TWQkxQ32XxlJGubqA= X-Mailbox-Line: From new-work-bounces@ietf.org Thu Feb 11 12:56:28 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 19FAE3A1963; Thu, 11 Feb 2021 12:56:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1613076988; bh=D0Hyd3iHYsx8RZQFQrz+AhBcbLUzlRYWQMws/Lifc5A=; h=From:Date:In-Reply-To:To:References:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Cc; b=acC9G+ydR7l/Tx7bYsekRmKkJsBP+7uA3m7/HPA3qXU/9XZG+sB91wtYReXDjTrQe vaataH5lU+uNR0ON5czU2TFs9kMa2BU3Ixw8Z9ocFaBgrA2iDF8BBOx8tQ5fB0Hhzf aCSD4dyQtIoaeJR4cXdOYO7TWQkxQ32XxlJGubqA= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E79EB3A1963 for ; Thu, 11 Feb 2021 12:56:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K6XRVh7xMH7h for ; Thu, 11 Feb 2021 12:56:23 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B95E03A1962 for ; Thu, 11 Feb 2021 12:56:23 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 094DF300B3C for ; Thu, 11 Feb 2021 15:56:21 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id IrypQx8QW8TG for ; Thu, 11 Feb 2021 15:56:17 -0500 (EST) Received: from a860b60074bd.fios-router.home (pool-141-156-161-153.washdc.fios.verizon.net [141.156.161.153]) by mail.smeinc.net (Postfix) with ESMTPSA id A6927300ADB; Thu, 11 Feb 2021 15:56:17 -0500 (EST) From: Russ Housley Message-Id: <48CF4774-17BF-456B-9F9D-059F7F12A79F@vigilsec.com> Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Thu, 11 Feb 2021 15:56:19 -0500 In-Reply-To: <058e01d6fff2$4e0669e0$ea133da0$@gmail.com> To: jdambrosia@gmail.com References: <058e01d6fff2$4e0669e0$ea133da0$@gmail.com> X-Mailer: Apple Mail (2.3445.104.17) Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Precedence: list Cc: Dorothy Stanley , new-work@ietf.org, Paul Nikolich Content-Type: multipart/mixed; boundary="===============8161397607653520651==" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Thu, 11 Feb 2021 13:21:14 -0800 Subject: Re: [secdir] [new-work] IEEE 802 PARs under Consideration - Mar 2021 Plenary X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Feb 2021 20:56:31 -0000 --===============8161397607653520651== Content-Type: multipart/alternative; boundary="Apple-Mail=_ABD30C62-114D-4FB7-89D0-1B98BA5303D8" --Apple-Mail=_ABD30C62-114D-4FB7-89D0-1B98BA5303D8 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 John: I'm guessing that there is a cut-and-paste error. March 2021? Russ > On Feb 10, 2021, at 4:18 PM, = wrote: >=20 > All, > The following Project Authorization Requests (PARs) and ICAID will be = considered at the IEEE 802 Nov 2020 Plenary, which will be held = electronically =E2=80=93 =20 > 802.1Qdq Amendment: Shaper Parameter Settings for Bursty Traffic = requiring Bounded Latency, PAR = = and CSD = > 802.1ASdr - Amendment: Inclusive Terminology, PAR = = and CSD = > The PARs and ICAID can be found at http://www.ieee802.org/PARs.shtml = along with the supporting IEEE 802 = Criteria for Standards Development, or CSD, (which includes the 5 = criteria, i.e. the explanations of how they fit the IEEE 802 criteria = for initiating new work). > =20 > Any comments on a proposed PAR / ICAID should be sent to the Working = Group chair identified on the respective document to be received by 10 = Mar 2021, AoE > Regards, > John D=E2=80=99Ambrosia > Recording Secretary, IEEE 802 LMSC=20 > =20 > _______________________________________________ > new-work mailing list > new-work@ietf.org > https://www.ietf.org/mailman/listinfo/new-work = > _______________________________________________ > secdir mailing list > secdir@ietf.org > https://www.ietf.org/mailman/listinfo/secdir = > wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview = --Apple-Mail=_ABD30C62-114D-4FB7-89D0-1B98BA5303D8 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 John:

I'm = guessing that there is a cut-and-paste error.  March = 2021?

Russ

On Feb 10, 2021, at 4:18 PM, <jdambrosia@gmail.com> <jdambrosia@gmail.com> wrote:

All,
The following Project = Authorization Requests (PARs) and ICAID will be considered at the IEEE = 802 Nov 2020 Plenary, which will be held electronically =E2=80=93 =  
  • 802.1Qdq = Amendment: Shaper Parameter Settings for Bursty Traffic requiring = Bounded Latency, PAR and CSD
  • 802.1ASdr - Amendment: Inclusive Terminology, PAR and CSD

The PARs and = ICAID can be found at http://www.ieee802.org/PARs.shtml along with the supporting = IEEE 802 Criteria for Standards Development, or CSD, (which includes the = 5 criteria, i.e. the explanations of how they fit the IEEE 802 criteria = for initiating new work).

 
Any comments on a proposed PAR / = ICAID should be sent to the Working Group chair identified on the = respective document to be received by 10 Mar 2021, AoE

Regards,

John D=E2=80=99Ambrosia

Recording Secretary, IEEE 802 = LMSC 
 
_______________________________________________
new-work mailing list
new-work@ietf.org
https://www.ietf.org/mailman/listinfo/new-work
_______________________________________________
secdir mailing list
secdir@ietf.org
https://www.ietf.org/mailman/listinfo/secdir
wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview
=

= --Apple-Mail=_ABD30C62-114D-4FB7-89D0-1B98BA5303D8-- --===============8161397607653520651== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work --===============8161397607653520651==-- From nobody Thu Feb 11 13:21:19 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 14C353A1972; Thu, 11 Feb 2021 13:00:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1613077204; bh=semUjC3CtmNROFIpUcnZWsNTCXpL48db6udzNv2yGJ8=; h=From:To:References:In-Reply-To:Date:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Cc; b=IAYTSU0xiZyc7VlLW13eFBqFzfOCE6BChP6DHbkYfKU/ScpvgDPfMYLYYOGvT5wcM 3dt7IaqRR7JtYDSMSMGlyvwz6BQRe0tyNZq2SAMGa+PEfE64pc8juK6XBjLatDNTgA 95ST2IU894C3r7QysY9e0Qa7ntDHyWebg5oz3QgE= X-Mailbox-Line: From new-work-bounces@ietf.org Thu Feb 11 13:00:03 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 59EFE3A196B; Thu, 11 Feb 2021 13:00:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1613077203; bh=semUjC3CtmNROFIpUcnZWsNTCXpL48db6udzNv2yGJ8=; h=From:To:References:In-Reply-To:Date:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Cc; b=mz5LmnY2rm7nSrSMgHeYB0K/myMUk/iNPzVyTdS5Xu5b5NRuXRJcyyf6BnZuyfJEz TmOn3cpNVHSm0LduRplYg7RoNAMxe29IH+xCCLQwZs40j10mudqSlnkrEsDhNfxg+q gXNc4lPbZcOPdXd64+3YlbxI+I3XqTHD1mIxyrNE= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C45AE3A196B for ; Thu, 11 Feb 2021 13:00:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9claCZAko5xn for ; Thu, 11 Feb 2021 12:59:59 -0800 (PST) Received: from mail-qt1-x829.google.com (mail-qt1-x829.google.com [IPv6:2607:f8b0:4864:20::829]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6F263A1969 for ; Thu, 11 Feb 2021 12:59:59 -0800 (PST) Received: by mail-qt1-x829.google.com with SMTP id c5so5250740qth.2 for ; Thu, 11 Feb 2021 12:59:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:content-language:thread-index; bh=vcg4X3BbVufUQBnRHiQE93g6JGyiGv318drbtSgDjls=; b=vT8xmQULz7WHn+ptmswFlgpIA3NqCIkymybVrJCF9WzAUe7nYEbXnot3gopeNq6KIs 2r+UIYZJdjcqnlJa58lQ8Jt/no6ugH2c6ia+WrYOXSPM42oJEgBtPNmiQ4ZrWB3khbpC DTO6pxB20fIXIuFBNMgzskfApoCcPXyHEy5YcZw66b3JrZnQhfpZ/5a6ODQ9e2GU2s0B 35E2xfQOYTIz1ntdeLsRFOr+2D7nkTk05CKQ8/23S6BxO810QbHrwc0XkZVeSCQwC3dJ g6AmHx4DOrIxEvE1yFqTJBZox7RIGS/354W4ZwgcD/KUy5kerAtlL4vOGX68V1Si8J1E WaHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:content-language:thread-index; bh=vcg4X3BbVufUQBnRHiQE93g6JGyiGv318drbtSgDjls=; b=n+2Hn90bmQrSWGFQC99silWopDvbnMh4iOUWfRo6aa+ZDet+PCuMo0lPwQKYxPSyWp oxfWeUJBJAa8GGBvPvpTZUZqE4BgrHfvqXOGiIh3shQXKi9WisWVWPGV8aIgN1DYKXB4 NPAUHmIEj6bDzvK+PcG6uMmwYYMcBP3nlZ1A2Q/PnLKuBdnM4kB/FmArIJpoBLb1hzvM fcFzAMLEGGbA6LT+evXm8LRmVzXCwjGS/xB13pHH9cUo6cZHwt85p9teKJSTLZ+MzIuT 6C6dMMBZn+nT7oUwlrfYDa67TtOrHY4tdYo5HXC9Mcx9T1EsHqZ0/SzLYRiogZbbt1Xu q4Cw== X-Gm-Message-State: AOAM5317eoEIVX/XmlvpnFW+dZuZQtxHmzPipphfm9ZdRbUpanmNiHGu bexgdlTnOwv/dGTB9/qndgg= X-Google-Smtp-Source: ABdhPJwZYUwhbyVvVbmwsR/migbaB0rpDZkkm4joJvIPBLpS8EkUg/DFagLnYCxhgvpzLBgBvBM0JA== X-Received: by 2002:ac8:110d:: with SMTP id c13mr8989911qtj.361.1613077197077; Thu, 11 Feb 2021 12:59:57 -0800 (PST) Received: from DESKTOP6VF5FH7 ([152.208.106.92]) by smtp.gmail.com with ESMTPSA id t1sm4321644qkf.55.2021.02.11.12.59.56 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 11 Feb 2021 12:59:56 -0800 (PST) From: To: "'Russ Housley'" References: <058e01d6fff2$4e0669e0$ea133da0$@gmail.com> <48CF4774-17BF-456B-9F9D-059F7F12A79F@vigilsec.com> In-Reply-To: <48CF4774-17BF-456B-9F9D-059F7F12A79F@vigilsec.com> Date: Thu, 11 Feb 2021 15:59:52 -0500 Message-ID: <088d01d700b8$d9cf8f80$8d6eae80$@gmail.com> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQI+7yTuVYonah4T6ujIQKPzqZ7ZCgKGVB0SqW9gfRA= Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Precedence: list Cc: 'Dorothy Stanley' , new-work@ietf.org, 'Paul Nikolich' Content-Type: multipart/mixed; boundary="===============4723634232240155304==" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Thu, 11 Feb 2021 13:21:15 -0800 Subject: Re: [secdir] [new-work] IEEE 802 PARs under Consideration - Mar 2021 Plenary X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Feb 2021 21:00:05 -0000 This is a multipart message in MIME format. --===============4723634232240155304== Content-Type: multipart/alternative; boundary="----=_NextPart_000_088E_01D7008E.F0FC46A0" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_088E_01D7008E.F0FC46A0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Russ Thank you for the catch. Not a cut / paste error =E2=80=93 an issue with not changing base = =E2=80=93 email I started from. Nov 2020 should be Mar 2021 =E2=80=93 = but the PARs are correct, as is the date below. =20 Regards =20 John D=E2=80=99Ambrosia =20 From: Russ Housley =20 Sent: Thursday, February 11, 2021 3:56 PM To: jdambrosia@gmail.com Cc: new-work@ietf.org; Dorothy Stanley ; Paul = Nikolich Subject: Re: [secdir] [new-work] IEEE 802 PARs under Consideration - Mar = 2021 Plenary =20 John: =20 I'm guessing that there is a cut-and-paste error. March 2021? =20 Russ On Feb 10, 2021, at 4:18 PM, > > wrote: =20 All, The following Project Authorization Requests (PARs) and ICAID will be = considered at the IEEE 802 Nov 2020 Plenary, which will be held = electronically =E2=80=93 =20 * 802.1Qdq Amendment: Shaper Parameter Settings for Bursty Traffic = requiring Bounded Latency, = = PAR and = = CSD * 802.1ASdr - Amendment: Inclusive Terminology, = = PAR and = = CSD The PARs and ICAID can be found at = http://www.ieee802.org/PARs.shtml along with the supporting IEEE 802 = Criteria for Standards Development, or CSD, (which includes the 5 = criteria, i.e. the explanations of how they fit the IEEE 802 criteria = for initiating new work). =20 Any comments on a proposed PAR / ICAID should be sent to the Working = Group chair identified on the respective document to be received by 10 = Mar 2021, AoE Regards, John D=E2=80=99Ambrosia Recording Secretary, IEEE 802 LMSC=20 =20 _______________________________________________ new-work mailing list new-work@ietf.org = https://www.ietf.org/mailman/listinfo/new-work _______________________________________________ secdir mailing list secdir@ietf.org = https://www.ietf.org/mailman/listinfo/secdir wiki: = http://tools.ietf.org/area/sec/trac/wiki/SecDirReview =20 ------=_NextPart_000_088E_01D7008E.F0FC46A0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Russ

Thank you for the catch.

Not a cut / paste error =E2=80=93 an issue with not = changing base =E2=80=93 email I started from.=C2=A0 Nov 2020 should be = Mar 2021 =E2=80=93 but the PARs are correct, as is the date = below.

 

Regards

 

John = D=E2=80=99Ambrosia

 

From: Russ Housley = <housley@vigilsec.com>
Sent: Thursday, February 11, = 2021 3:56 PM
To: jdambrosia@gmail.com
Cc: = new-work@ietf.org; Dorothy Stanley <dorothy.stanley@hpe.com>; Paul = Nikolich <paul.nikolich@ATT.NET>
Subject: Re: [secdir] = [new-work] IEEE 802 PARs under Consideration - Mar 2021 = Plenary

 

John:

 

I'm guessing that there is a cut-and-paste error. =  March 2021?

 

Russ



On Feb 10, 2021, at 4:18 PM, <jdambrosia@gmail.com> <jdambrosia@gmail.com> = wrote:

 

All,= <= /span>

The = following Project Authorization Requests (PARs) and ICAID will be = considered at the IEEE 802 Nov 2020 Plenary, which will be held = electronically =E2=80=93  <= /span>

  • 802.1Qdq Amendment: Shaper Parameter Settings = for Bursty Traffic requiring Bounded Latency, PAR and CSD
  • 802.1ASdr - Amendment: Inclusive = Terminology, PAR and CSD

The PARs = and ICAID can be found at http://www.ieee802.org/PARs.shtml along with the supporting = IEEE 802 Criteria for Standards Development, or CSD, (which includes the = 5 criteria, i.e. the explanations of how they fit the IEEE 802 criteria = for initiating new work).<= /span>

 

Any comments on a = proposed PAR / ICAID should be sent to the Working Group chair = identified on the respective document to be received by 10 Mar 2021, = AoE

Regards,<= /span>

John = D=E2=80=99Ambrosia<= /span>

Recording = Secretary, IEEE 802 LMSC <= /span>

 

____________= ___________________________________
new-work mailing = list
new-work@ietf.org
<= a href=3D"https://www.ietf.org/mailman/listinfo/new-work">https://www.ietf.org/mailman/listinfo/new-work
________= _______________________________________
secdir mailing = list
secdir@ietf.org
<= a href=3D"https://www.ietf.org/mailman/listinfo/secdir">https://www.ietf.org/mailman/listinfo/secdir
wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview

 

------=_NextPart_000_088E_01D7008E.F0FC46A0-- --===============4723634232240155304== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work --===============4723634232240155304==-- From nobody Thu Feb 11 15:48:33 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37D7A3A0E4F for ; Thu, 11 Feb 2021 15:48:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.919 X-Spam-Level: X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NO4JwT1XI_YE for ; Thu, 11 Feb 2021 15:48:29 -0800 (PST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 483403A0E4C for ; Thu, 11 Feb 2021 15:48:28 -0800 (PST) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 11BNmM4S010933 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 11 Feb 2021 18:48:26 -0500 Date: Thu, 11 Feb 2021 15:48:22 -0800 From: Benjamin Kaduk To: Yaron Sheffer Cc: secdir@ietf.org Message-ID: <20210211234822.GL21@kduck.mit.edu> References: <161264008418.17090.9500210699717988432@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <161264008418.17090.9500210699717988432@ietfa.amsl.com> Archived-At: Subject: Re: [secdir] [Last-Call] Secdir last call review of draft-ietf-pce-pcep-extension-for-pce-controller-10 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Feb 2021 23:48:31 -0000 Thanks for this review, Yaron! In particular... On Sat, Feb 06, 2021 at 11:34:44AM -0800, Yaron Sheffer via Datatracker wrote: > Reviewer: Yaron Sheffer > Review result: Not Ready > [...] > > - RFC 8283 which defines the architecture that is implemented by this draft > says: > > [The] security implications of SDN have not been fully discussed or described. > Therefore, protocol and applicability work-around solutions for this > architecture must take proper account of these concerns. > > It is expected that each new document that is produced for a specific use case > will also include considerations of the security impacts of the use of a > PCE-based central controller on the network type and services being managed. > > I don't think that the current document addresses this challenge. ... this point is something that I am *very* happy is being raised as soon as possible. Like you, I am not very satisfied with the initial email response (though I did not open up the attached diff), so I hope that we will see more on this front before the document advances to the IESG. Thanks again, Ben > In general, this looks like a very monolithic architecture, where everybody > trusts everybody else once they've been authenticated. Although Sec. 9.1 > discusses the case of a malicious PCE (which would be rather catastrophic), I > would encourage the authors to consider whether a malicious PCC can also > disrupt the PCE's operations and cause "major impact to the network". > > > -- > last-call mailing list > last-call@ietf.org > https://www.ietf.org/mailman/listinfo/last-call From nobody Sun Feb 14 14:50:17 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 138483A0CE1; Sun, 14 Feb 2021 14:50:09 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Robert Sparks via Datatracker To: Cc: 6lo@ietf.org, draft-ietf-6lo-plc.all@ietf.org, last-call@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161334300902.2919.6271890974537335347@ietfa.amsl.com> Reply-To: Robert Sparks Date: Sun, 14 Feb 2021 14:50:09 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-6lo-plc-05 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Feb 2021 22:50:09 -0000 Reviewer: Robert Sparks Review result: Has Issues I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document has issues that should be addressed before publication as Proposed Standard RFC. Document reviewed: draft-ietf-6lo-plc-05 This document's primary point is to standardize mappings of ipv6 identifiers for using ipv6 over IEEE 1901.1, 1901.2, and IT-T G.9903 networks. Those standards are not publicy available, and I have not reviewed how these mappings and the security mechanisms in those protocols interact. The document has content that is not needed for its purpose. Section 5 in particular might be useful in an informational RFC, but is has no impact on someone implementing what this document is trying to standardize. The security considerations section speaks primarily to generic considerations for 6lo-like networks. There is no specific discussion of the impact of the identifier mappings with the underlying protocols, in particular the constraints that don't allow using the full number of bits of entropy in the identifiers in those underlying protocols. There is only a passing mention of RFC8065. Implementors are advised to "look at" RFC8604 when considering building stable addresses, but this document specifies doing things that RFC8604 recommends against (see the use of RFC2464, for example). More discussion seems warranted. There is a short mention of the possibility of acquiring a network encryption key during onboarding but there's no discussion about what that means for these specific layer-2 protocols. Editorial comments: At section 4.6, the first paragraph can make its point more clearly. All that's needed to say is that the lower layers handle segmentation and reassembly, but the adaptation layer still needs to be ready to do so in the lower layer cant handle the 1280 octet MTU. At the last paragraph, when you say "referring to" do you mean "as specified in"? At section 7, "For security consideration, link layer security is guaranteed in every PLC technology." needs clarification. Do you mean the three protocols discussed here provide link layer security? Or do you mean to say that if anyone plans to provide an adaptation layer to some other PLC protocol, that it must provide link layer security? Or do you mean something else? Nit: Expand LLN on first use. From nobody Mon Feb 15 01:20:01 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 578073A0FD9; Mon, 15 Feb 2021 01:19:52 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Stefan Santesson via Datatracker To: Cc: draft-ietf-regext-rfc7482bis.all@ietf.org, last-call@ietf.org, regext@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161338079230.21191.4755037249161520724@ietfa.amsl.com> Reply-To: Stefan Santesson Date: Mon, 15 Feb 2021 01:19:52 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-regext-rfc7482bis-02 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Feb 2021 09:19:53 -0000 Reviewer: Stefan Santesson Review result: Ready This document appears to be ready and well written. >From a security point of view this document does not have much to review as security services related to this protocol is handled by a separate document (Security Services for the Registration Data Access Protocol (RDAP) RFC 7481). At a first glance the security considerations sections seems a bit limited, but when taking RFC 7481 into account, which has already been approved as a reasonable set of security functions for this protocol, the security considerations section seems adequate. From nobody Mon Feb 15 21:19:42 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D65C13A0DAC; Mon, 15 Feb 2021 21:19:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Melinda Shore via Datatracker To: Cc: bess@ietf.org, draft-ietf-bess-evpn-oam-req-frmwk.all@ietf.org, last-call@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161345277284.30643.18088597111622319295@ietfa.amsl.com> Reply-To: Melinda Shore Date: Mon, 15 Feb 2021 21:19:32 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-bess-evpn-oam-req-frmwk-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Feb 2021 05:19:33 -0000 Reviewer: Melinda Shore Review result: Has Nits This is a very nicely-structured, efficient, well-written document - among the most clearly-written that I've read in a few years. Nits: As a minor point, I am really not a fan of using RFC 2119 language for informational documents, and in this case it's being used somewhat inconsistently (for example, the lowercase "must" in section 4). I'm also a bit unclear on what's intended by "must optionally authenticate" and suggest that that should be clarified as to whether what's meant is "mandatory to implement but optional to use," or "optional to implement" and should probably be a "SHOULD" (or a "should"). Additionally, it may be helpful to provide an example or two of how the EVPN OAM channel could be exploited as a DOS vector, and to explain what problem is solved by authenticating EVPN endpoints. From nobody Tue Feb 16 17:40:22 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 145063A0855; Tue, 16 Feb 2021 17:40:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.848 X-Spam-Level: X-Spam-Status: No, score=-1.848 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sTJaRAsHsgSn; Tue, 16 Feb 2021 17:40:11 -0800 (PST) Received: from mail-io1-xd2b.google.com (mail-io1-xd2b.google.com [IPv6:2607:f8b0:4864:20::d2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACFCC3A08C5; Tue, 16 Feb 2021 17:40:10 -0800 (PST) Received: by mail-io1-xd2b.google.com with SMTP id f6so12228189ioz.5; Tue, 16 Feb 2021 17:40:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=+YuqZoEg+4JozwwmwDr/wJ7ruj/xqGXEc2IDk4+LS2w=; b=Dii2nQ7kUw6DPeq4LgzY7hv6LfZw1U7ICNaeDdwX4YTwLdKelqyU11pEW50XyzCX3z 3n0NAC0bGVJXt3EmtGeG8DRp7PlbfIAbOudL9wbt3zzqiyoB6/DIRdiMNzU+vPwXCBrH ePXhrC0Z/MDeCN0zARJ4FlT26DZbUOZJlqeEYAFX7x8993CH19CA1KWRx2BnlBcaT1l/ rsdVgoKRoqhS0kD/n7mBGH0jc4X/gx3GMOtQnO00fRh53H7tN1GiNVubvtTnRJ4d1cex kAy7hLM/fUHVcm0IaOX3rIP5Na3+Dj1mKyWV0c0ebArVHTjszMW6X+FO8jBcylMMZ5GD 3xUA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=+YuqZoEg+4JozwwmwDr/wJ7ruj/xqGXEc2IDk4+LS2w=; b=l1NK9kdBlS0mqPynvoJLP1L5CShY9/v3KpXKXAlQanbrBuS0NVzcxa1U42Q4JOgSkK rXkw6bh2LgmKE588MA2uVKyv39AqZGUq64Mvc88k8j+Pc+2x7aq7bAgGXg/LOpsJlPbe 3htJ/bHsyY0OOMoj0mdhEAGDqkZN8NlABTdXkNP4LM5bb7CKYafd0a2GBChqF3MI8ieq 5Wist5xj9wTKXZjfKdub+9SehQgbP4On4VpCCD35c/a9bMNOcztP62FRw2Sdaah9eeQM m6uL0BUz0O+0yPUIsj70TIVh616V2irE1lLvMzWtCLlaBJMCF7FnEikuqx/s6TU0wD72 1v/Q== X-Gm-Message-State: AOAM532/cEV/KvJMuhOgVykW7TR4ZziDs6ZIqkD2M5ylAySI4US7u0ZE 5XnldaIzEPWMQyi1uWgEb65vpYa7HMcCGi+o/uvIC1bn9M0= X-Google-Smtp-Source: ABdhPJzq0gtNU1HDoibatfvXHgAgj4xa+A+ZMGVhaWhAqx+dCnjI6+Hrn+x0pS77yGnNpq7Fl/tfIJHcMiif/rz/n5U= X-Received: by 2002:a6b:db0a:: with SMTP id t10mr19237508ioc.158.1613526009749; Tue, 16 Feb 2021 17:40:09 -0800 (PST) MIME-Version: 1.0 References: <161345277284.30643.18088597111622319295@ietfa.amsl.com> In-Reply-To: <161345277284.30643.18088597111622319295@ietfa.amsl.com> From: Donald Eastlake Date: Tue, 16 Feb 2021 20:39:58 -0500 Message-ID: To: Melinda Shore Cc: secdir , bess@ietf.org, draft-ietf-bess-evpn-oam-req-frmwk.all@ietf.org, last-call@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-bess-evpn-oam-req-frmwk-04 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Feb 2021 01:40:13 -0000 Hi Melinda On Tue, Feb 16, 2021 at 12:19 AM Melinda Shore via Datatracker wrote: > Reviewer: Melinda Shore > Review result: Has Nits > > This is a very nicely-structured, efficient, well-written document - among the > most clearly-written that I've read in a few years. Thanks. > Nits: As a minor point, I am really not a fan of using RFC 2119 language for > informational documents, and in this case it's being used somewhat > inconsistently (for example, the lowercase "must" in section 4). I agree that usage should be consistent. I'll capitalize that "must". As to the general question of using RFC 2119 language in this document, I guess we will see what the IESG says. > I'm also a > bit unclear on what's intended by "must optionally authenticate" and suggest > that that should be clarified as to whether what's meant is "mandatory to > implement but optional to use," or "optional to implement" and should probably > be a "SHOULD" (or a "should"). Of the three points listed in the Security Considerations, I would agree that the first two should be SHOULD. But the third, preventing OAM packet leaking, is, I believe, correctly a MUST. "Optionally authenticate communicating endpoints" refers, in opinion, to an implementation requirement, not a use requirement. > Additionally, it may be helpful to provide an > example or two of how the EVPN OAM channel could be exploited as a DOS vector, > and to explain what problem is solved by authenticating EVPN endpoints. One example would be forged communications that overflow the capability of an OAM endpoint to maintain state. Thanks, Donald =============================== Donald E. Eastlake 3rd +1-508-333-2270 (cell) 2386 Panoramic Circle, Apopka, FL 32703 USA d3e3e3@gmail.com From nobody Thu Feb 18 11:21:37 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AC843A161A for ; Thu, 18 Feb 2021 11:21:30 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 7.26.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu, Tero Kivinen Message-ID: <161367608952.31334.16760272297836614296@ietfa.amsl.com> Date: Thu, 18 Feb 2021 11:21:30 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Feb 2021 19:21:36 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2021-02-18 Reviewer LC end Draft Aanchal Malhotra 2021-01-26 draft-ietf-mpls-lsp-ping-registries-update Kathleen Moriarty 2021-02-05 draft-ietf-detnet-ip-over-tsn Tirumaleswar Reddy.K 2021-02-09 draft-ietf-regext-unhandled-namespaces Klaas Wierenga 2020-12-02 draft-ietf-core-echo-request-tag Last calls: Reviewer LC end Draft Derek Atkins 2021-02-19 draft-ietf-tsvwg-transport-encrypt Steve Hanna RNone draft-ietf-sfc-nsh-integrity Leif Johansson None draft-ietf-netconf-crypto-types Aanchal Malhotra 2021-01-26 draft-ietf-mpls-lsp-ping-registries-update Kathleen Moriarty 2021-02-05 draft-ietf-detnet-ip-over-tsn Sandra Murphy 2020-10-15 draft-ietf-tls-external-psk-importer Tim Polk None draft-ietf-opsawg-finding-geofeeds Tirumaleswar Reddy.K 2021-02-09 draft-ietf-regext-unhandled-namespaces Sean Turner 2021-02-25 draft-ietf-ntp-port-randomization Mališa Vučinić 2021-02-24 draft-ietf-curdle-ssh-kex-sha2 Carl Wallace 2021-02-22 draft-ietf-tcpm-2140bis Samuel Weiler 2021-02-22 draft-ietf-tls-dtls13 Brian Weis 2021-02-19 draft-ietf-lamps-cms-aes-gmac-alg Brian Weis R2020-12-02 draft-ietf-core-dev-urn Klaas Wierenga 2020-05-26 draft-ietf-kitten-krb-spake-preauth Klaas Wierenga 2020-12-02 draft-ietf-core-echo-request-tag Paul Wouters 2020-09-08 draft-ietf-i2nsf-capability-data-model Liang Xia 2021-02-25 draft-ietf-v6ops-ipv6-ehs-packet-drops Early review requests: Reviewer Due Draft Tina Tsou 2021-02-15 draft-ietf-idr-eag-distribution Paul Wouters 2021-02-19 draft-ietf-idr-bgp-ls-app-specific-attr Dacheng Zhang 2020-12-07 draft-ietf-idr-eag-distribution Next in the reviewer rotation: John Bradley Nancy Cam-Winget Shaun Cooley Alan DeKok Linda Dunbar Donald Eastlake Shawn Emery Stephen Farrell Daniel Franke Daniel Gillmor From nobody Sat Feb 20 00:42:36 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD3313A0D5C for ; Sat, 20 Feb 2021 00:42:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=auth0.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JNiWQjAAloZ1 for ; Sat, 20 Feb 2021 00:42:20 -0800 (PST) Received: from mail-pj1-x102f.google.com (mail-pj1-x102f.google.com [IPv6:2607:f8b0:4864:20::102f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DAB333A0CED for ; Sat, 20 Feb 2021 00:42:19 -0800 (PST) Received: by mail-pj1-x102f.google.com with SMTP id s23so2341299pji.1 for ; Sat, 20 Feb 2021 00:42:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=auth0.com; s=google; h=from:to:cc:subject:thread-topic:thread-index:date:message-id :references:in-reply-to:accept-language:content-language :content-transfer-encoding:mime-version; bh=EJL2y5Zm0Y/YifYvveg85JkqPKWYnv+oNaR+2Ubf1OI=; b=gdtdca1l90pe/83qrlQqOGRVy1V+Sgx0gJQ2syGeMpiIRU9eo6VbXxbNYDhWnW28gq VpjT2xAK0UBZUhaNI+U+VbCtajvqDbJ5d50OcssyVCz8aRmqpSTShJDoV2aFfkdLR1Ze WL54MYWOju1XVc4PPYddq2KC/IfefODmRstF+2sS1rYlEG3q2Lce//a0uKFGPvA3ntuJ ZIhmvD8vSXTLPgH4e5D/Xs3rQPRSj+6kGY4zpMfTHwGcQjedyOmE7fJaZCQmXzahcmep w9kZsKgqi3bNbUZiAeUAbjiKRTirKjEGu/KXhxuqgnQ3lV001J59qQTz303wJr4fhHbc LSqA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:thread-topic:thread-index :date:message-id:references:in-reply-to:accept-language :content-language:content-transfer-encoding:mime-version; bh=EJL2y5Zm0Y/YifYvveg85JkqPKWYnv+oNaR+2Ubf1OI=; b=HpWDLtAb0rXbphLblPE83NPlA1NmY5wAJgYU03MhnrAm44WZaFJ53vRB7NsS89UQYY dYa+kefmg9+kV4L8Wg2jUyudOEzVjuvthLVkEfOo+XivqHoRxAdJpn6phYFQJXQzxv95 yoLkvMhKpWRylqRtcmIuvYP4ByW4ZKpWFlMypy+HZwkgx2POyEbcJZyCUyiJXkFnVEaZ Zrdp1J7xCNnJexDLk1q35tRsYeB6TgZLxuaj6JwMuk6UpN5Sar496Z8xkfYhvGr0GGr6 /zZljBPKCCL55OQfZi1d48GKdHI6O8Xl9a4BTJKj7s8xlxjG1Htce2jqHJ6bYONmwC4Y jL8A== X-Gm-Message-State: AOAM531psf4Q/9esg1kYOPIip9YqBtIV6wj40TBPdcM3F76pj8bVXDrL q//bsMzyUahO69j9NkMoEpvSGQ== X-Google-Smtp-Source: ABdhPJzbG8HQdteyuhWc4QVf4ywecEGTPVgQ/gXskqQCZoYcWMBEu67eGFdKD+y/+mAABCKRFZMGKQ== X-Received: by 2002:a17:90a:d14c:: with SMTP id t12mr9103176pjw.5.1613810539227; Sat, 20 Feb 2021 00:42:19 -0800 (PST) Received: from CO6PR18MB4052.namprd18.prod.outlook.com ([2603:1036:301:402a::5]) by smtp.gmail.com with ESMTPSA id b10sm9752268pgm.76.2021.02.20.00.42.18 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sat, 20 Feb 2021 00:42:18 -0800 (PST) From: Vittorio Bertocci To: Joseph Salowey , "secdir@ietf.org" CC: "draft-ietf-oauth-access-token-jwt.all@ietf.org" , "last-call@ietf.org" , "oauth@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-oauth-access-token-jwt-11 Thread-Index: ATI1NjY3HTXdqRcwZ27bx4dm5mgVQsmkXCXT X-MS-Exchange-MessageSentRepresentingType: 1 Date: Sat, 20 Feb 2021 08:42:13 +0000 Message-ID: References: <161272369978.20616.15063633580755015902@ietfa.amsl.com> In-Reply-To: <161272369978.20616.15063633580755015902@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-Exchange-Organization-SCL: -1 X-MS-TNEF-Correlator: X-MS-Exchange-Organization-RecordReviewCfmType: 0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-oauth-access-token-jwt-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Feb 2021 08:42:29 -0000 VGhhbmsgeW91IEpvc2VwaCBmb3IgeW91ciBjb21tZW50cyENCg0KPiAxLiAgKEVkaXRvcmlhbCkg V2hhdCBpcyB0aGUgcmVsYXRpb25zaGlwIGJldHdlZW4gdGhpcyBkb2N1bWVudCBhbmQgUkZDIDc1 MjMuIA0KPiAgIFRoZXkgYXJlIHVzaW5nIEpXVCBmb3IgZGlmZmVyZW50IHB1cnBvc2VzLCBidXQg SSB0aGluayBpdCB3b3VsZCBiZSB1c2VmdWwgdG8NCj4gICAgY2xhcmlmeSB0aGlzIGluIHRoZSBp bnRyb2R1Y3Rpb24uDQpHb29kIHBvaW50LCBJIGFncmVlIGl0IHdvdWxkIGJlIGdvb2QgdG8gcHJl ZW1wdCBkb3VidHMgb24gdGhpcy4gSSBhbSBzdWdnZXN0aW5nIHRvIGFwcGVuZCB0aGUgZm9sbG93 aW5nIGxhbmd1YWdlIHRvIHRoZSBjdXJyZW50IGludHJvZHVjdGlvbiAocGFyZG9uIHRoZSBYTUwp Lg0KDQpQbGVhc2Ugbm90ZTogYWx0aG91Z2ggYm90aCB0aGlzIGRvY3VtZW50IGFuZCA8eHJlZiB0 YXJnZXQ9IlJGQzc1MjMiLz4gYm90aCB1c2UgSlNPTiBXZWIgVG9rZW5zIGluIHRoZSBjb250ZXh0 IG9mIHRoZSBPQXV0aDIgZnJhbWV3b3JrLCB0aGUgdHdvIHNwZWNpZmljYXRpb25zIGRpZmZlciBp biBib3RoIGludGVudCBhbmQgbWVjaGFuaWNzLiBXaGVyZWFzIDx4cmVmIHRhcmdldD0iIFJGQzc1 MjMiLz4gZGVmaW5lcyBob3cgYSBKV1QgQmVhcmVyIFRva2VuIGNhbiBiZSB1c2VkIHRvIHJlcXVl c3QgYW4gYWNjZXNzIHRva2VuLCB0aGlzIGRvY3VtZW50cyBkZXNjcmliZXMgaG93IHRvIGVuY29k ZSBhY2Nlc3MgdG9rZW5zIGluIEpXVCBmb3JtYXQuDQoNCj4gICAgMi4gIChJc3N1ZSkgVGhlIHNw ZWNpZmljYXRpb24gZG9lcyBub3Qgc3BlY2lmeSBhbnkgbWFuZGF0b3J5IHRvIGltcGxlbWVudCBm b3INCj4gICAgdGhlIHJlY29tbWVuZGVkIGFzeW1tZXRyaWMgYWxnb3JpdGhtcy4gIFRoaXMgd2ls bCBub3QgaGVscCBpbnRlcm9wLiAgUGVyaGFwcw0KPiAgICBzcGVjaWZ5IG9uZSBvciBib3RoIG9m ICAiUlMyNTYiIGFuZCAiRVMyNTYiLg0KVGhlIGN1cnJlbnQgdGV4dCBkb2VzbuKAmXQgbWFuZGF0 ZSBhIGZvcm1hdCBmb3IgdHdvIG1haW4gcmVhc29uczogDQotIHRoYW5rcyB0byB0aGUgQVMgbWV0 YWRhdGEgdGhlIG5lZ290aWF0aW9uIGJldHdlZW4gYSBSUyBhbmQgYW4gQVMgaXMgdmVyeSBlYXN5 IHRvIHBlcmZvcm0sIGhlbmNlIHRoZSBsaWtlbGlob29kIG9mIGludGVyb3AgaXNzdWVzIGF0IHJ1 bnRpbWUgaXMgdmVyeSBsb3cNCi0gd29ycmllcyB0aGF0IGFzIGNyeXB0byBhZHZhbmNlcywgd2hh dCB3ZSBtYW5kYXRlIGF0IHRoaXMgcG9pbnQgbWlnaHQgbm8gbG9uZ2VyIGJlIHN1aXRhYmxlLg0K VGhhdCBzYWlkLCBpZiB5b3UgZmVlbCBzdHJvbmdseSBhYm91dCB0aGlzIHBsZWFzZSBkbyBsZXQg bWUga25vdywgYW5kIEkgd2lsbCBiZSBPSyB3aXRoIGFkZGluZyBSUzI1NiBhcyBhIG1hbmRhdG9y eSBzdXBwb3J0ZWQgYWxnIGZvciBib3RoIEFTIGFuZCBSUy4NCkZyb20gYSBjdXJzb3J5IGNoZWNr LCBFUzI1NiBkb2VzbuKAmXQgc2VlbSB0byBlbmpveSBhcyB3aWRlc3ByZWFkIHN1cHBvcnQgYXQg dGhlIG1vbWVudCAoc2VlIGh0dHBzOi8vand0LmlvLyBsaWJyYXJpZXMgbGlzdCkgaGVuY2UgSSB3 b3VsZCBiZSBoZXNpdGFudCB0byBtYWtlIGl0IG1hbmRhdG9yeS4gDQoNCj4gICAgMy4gKFF1ZXN0 aW9uKSBJcyBpdCBjdXJyZW50bHkgcG9zc2libGUgdG8gdXNlIHRoZSBKV1QgYWNjZXNzIHRva2Vu IGluIGEgbW9kZQ0KPiAgICBvdGhlciB0aGFuIGEgYmVhcmVyIHRva2VuPyAgRm9yIGV4YW1wbGUg aXMgdGhlcmUgYSB3YXkgdG8gYmluZCB0aGUgSldUIHRvIGENCj4gICAgdmVyaWZpYWJsZSBrZXkg b3IgaWRlbnRpZmllci4gIElmIHRoZXJlIGlzLCB0aGVyZSBzaG91bGQgYmUgc29tZSBkaXNjdXNz aW9uIG9mDQo+ICAgIHRoaXMgaW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zLiAgSWYgbm90 LCBkbyB0aGUgYXV0aG9ycyBrbm93IGlmIHRoZXJlIGlzDQo+ICAgIGFueSB3b3JrIHBsYW5uZWQg aW4gdGhpcyBhcmVhPw0KQXQgdGhpcyB0aW1lLCB0aGUgbWFpbiBtZWNoYW5pc21zIHRoYXQgY2Fu IHdvcmsgd2l0aCBub24tYmVhcmVyIEFUcyBhcmUgZFBPUCBhbmQgTVRMUy4gSW4gYm90aCBjYXNl cywgdGhlIGJpbmRpbmcgbWVjaGFuaXNtIHJlbGllcyBvbiBhIGNuZiBjbGFpbSAob3IgcmVmZXJl bmNlIHRvIGl0KSAtIHdoaWNoIGNhbiBiZSBhZGRlZCB0byBhIEpXVCBhY2Nlc3MgdG9rZW4gd2l0 aG91dCBjaGFuZ2luZyBhbnkgb2YgdGhlIGd1aWRhbmNlIGluIHRoaXMgc3BlY2lmaWNhdGlvbi4g VGhlcmUncyBhIHF1aWNrIHByaW1lciBmb3IgYm90aCBhcHByb2FjaGVzIGluIGh0dHBzOi8vYXV0 aDAuY29tL2Jsb2cvaWRlbnRpdHktdW5sb2NrZWQtZXhwbGFpbmVkLWVwaXNvZGUtMS8uIEdpdmVu IHRoYXQgdGhlcmUgYXJlIG5vIGNoYW5nZXMgaW4gdGhlIEFUIGZvcm1hdCBhbmQgdmVyaWZpY2F0 aW9uLCBhbmQgTVRMUy9EUE9QIHdvdWxkIGJlIHB1cmVseSBhZGRpdGl2ZSwgYW55IGxhbmd1YWdl IGhlcmUgd291bGQgbGlrZWx5IGJlIGZ1bmN0aW9uYWxseSBlcXVpdmFsZW50IHRvICJZb3Ugc2hv dWxkIGJlIGF3YXJlIHRoYXQgTVRMUyBleGlzdHMsIGFuZCB0aGUgdG9rZW5zIGRlZmluZWQgaGVy ZSBkbyBub3QgYnJlYWsgaXQiIChEUE9QIGlzbuKAmXQgbWVudGlvbmVkIGJlY2F1c2UgaXQncyBz dGlsbCBpbiBwcm9ncmVzcykgYnV0IG15IGludHVpdGlvbiBpcyB0aGF0IHRoZSBjb21wYXRpYmls aXR5IHNob3VsZCBiZSBhc3N1bWVkLCB3aXRoIGEgbm90ZSBiZWluZyByZXF1aXJlZCB3aGVuIGl0 J3Mgbm90IHRoZSBjYXNlIGFuZCB0aGUgcmVhZGVyIHNob3VsZCBiZSBhd2FyZSBvZiBwb3RlbnRp YWwgcHJvYmxlbXMuIFdoYXQgZG8geW91IHRoaW5rPyAgDQoNCg0K77u/T24gMi83LzIxLCAxMDo0 OCwgIkpvc2VwaCBTYWxvd2V5IHZpYSBEYXRhdHJhY2tlciIgPG5vcmVwbHlAaWV0Zi5vcmc+IHdy b3RlOg0KDQogICAgUmV2aWV3ZXI6IEpvc2VwaCBTYWxvd2V5DQogICAgUmV2aWV3IHJlc3VsdDog SGFzIElzc3Vlcw0KICAgIA0KICAgIEkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFzIHBh cnQgb2YgdGhlIHNlY3VyaXR5IGRpcmVjdG9yYXRlJ3MNCiAgICBvbmdvaW5nIGVmZm9ydCB0byBy ZXZpZXcgYWxsIElFVEYgZG9jdW1lbnRzIGJlaW5nIHByb2Nlc3NlZCBieSB0aGUNCiAgICBJRVNH LiAgVGhlc2UgY29tbWVudHMgd2VyZSB3cml0dGVuIHByaW1hcmlseSBmb3IgdGhlIGJlbmVmaXQg b2YgdGhlDQogICAgc2VjdXJpdHkgYXJlYSBkaXJlY3RvcnMuICBEb2N1bWVudCBlZGl0b3JzIGFu ZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0DQogICAgdGhlc2UgY29tbWVudHMganVzdCBsaWtlIGFu eSBvdGhlciBsYXN0IGNhbGwgY29tbWVudHMuDQogICAgDQogICAgVGhlIHN1bW1hcnkgb2YgdGhl IHJldmlldyBpcyB0aGUgZG9jdW1lbnQgaGFzIGlzc3Vlcy4NCiAgICANCiAgICAxLiAgKEVkaXRv cmlhbCkgV2hhdCBpcyB0aGUgcmVsYXRpb25zaGlwIGJldHdlZW4gdGhpcyBkb2N1bWVudCBhbmQg UkZDIDc1MjMuIA0KICAgIFRoZXkgYXJlIHVzaW5nIEpXVCBmb3IgZGlmZmVyZW50IHB1cnBvc2Vz LCBidXQgSSB0aGluayBpdCB3b3VsZCBiZSB1c2VmdWwgdG8NCiAgICBjbGFyaWZ5IHRoaXMgaW4g dGhlIGludHJvZHVjdGlvbi4NCiAgICANCiAgICAyLiAgKElzc3VlKSBUaGUgc3BlY2lmaWNhdGlv biBkb2VzIG5vdCBzcGVjaWZ5IGFueSBtYW5kYXRvcnkgdG8gaW1wbGVtZW50IGZvcg0KICAgIHRo ZSByZWNvbW1lbmRlZCBhc3ltbWV0cmljIGFsZ29yaXRobXMuICBUaGlzIHdpbGwgbm90IGhlbHAg aW50ZXJvcC4gIFBlcmhhcHMNCiAgICBzcGVjaWZ5IG9uZSBvciBib3RoIG9mICAiUlMyNTYiIGFu ZCAiRVMyNTYiLg0KICAgIA0KICAgIDMuIChRdWVzdGlvbikgSXMgaXQgY3VycmVudGx5IHBvc3Np YmxlIHRvIHVzZSB0aGUgSldUIGFjY2VzcyB0b2tlbiBpbiBhIG1vZGUNCiAgICBvdGhlciB0aGFu IGEgYmVhcmVyIHRva2VuPyAgRm9yIGV4YW1wbGUgaXMgdGhlcmUgYSB3YXkgdG8gYmluZCB0aGUg SldUIHRvIGENCiAgICB2ZXJpZmlhYmxlIGtleSBvciBpZGVudGlmaWVyLiAgSWYgdGhlcmUgaXMs IHRoZXJlIHNob3VsZCBiZSBzb21lIGRpc2N1c3Npb24gb2YNCiAgICB0aGlzIGluIHRoZSBzZWN1 cml0eSBjb25zaWRlcmF0aW9ucy4gIElmIG5vdCwgZG8gdGhlIGF1dGhvcnMga25vdyBpZiB0aGVy ZSBpcw0KICAgIGFueSB3b3JrIHBsYW5uZWQgaW4gdGhpcyBhcmVhPw0KICAgIA0KICAgIDQuIEdl bmFydCByZXZpZXcgcG9pbnRlZCBvdXQgYSBuaXQgdGhhdCBzaG91bGQgYmUgZml4ZWQuDQogICAg DQogICAgDQogICAgDQogICAgDQo= From nobody Sun Feb 21 03:48:45 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A21E93A1A0D for ; Sun, 21 Feb 2021 03:48:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.67 X-Spam-Level: X-Spam-Status: No, score=-2.67 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.57, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5IOzwmaSzAha for ; Sun, 21 Feb 2021 03:48:41 -0800 (PST) Received: from us-smtp-delivery-140.mimecast.com (us-smtp-delivery-140.mimecast.com [63.128.21.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CCBB3A1A0C for ; Sun, 21 Feb 2021 03:48:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=mimecast20190606; t=1613908120; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=YA+K+7rtKTQ/6zeL831eJlTe/64vKPVIbvQ94OgyfnA=; b=g0f2tLcj4SYFoDRssEkte3THZea8xcNbhEg8Ls/x3nMvzO3/bEkq574aYUh9WfI4XXGZ/k hqAXTCJwIioY7VxywKOLUBzP7fyo3E3s4Vszcm2uKVCnyIxSm7B8FsjzzaEGKXpYeKxNNy NyhplU4xoj/IaIiOr3AH7FoJRoGUUI8= Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10lp2102.outbound.protection.outlook.com [104.47.70.102]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-174-R1lNxD5JP1KEju11YVKL7g-1; Sun, 21 Feb 2021 06:48:38 -0500 X-MC-Unique: R1lNxD5JP1KEju11YVKL7g-1 Received: from PH0PR16MB4118.namprd16.prod.outlook.com (2603:10b6:510:59::7) by PH0PR16MB4166.namprd16.prod.outlook.com (2603:10b6:510:5d::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.30; Sun, 21 Feb 2021 11:48:37 +0000 Received: from PH0PR16MB4118.namprd16.prod.outlook.com ([fe80::d8f:de34:7e0:8f57]) by PH0PR16MB4118.namprd16.prod.outlook.com ([fe80::d8f:de34:7e0:8f57%7]) with mapi id 15.20.3868.032; Sun, 21 Feb 2021 11:48:37 +0000 From: "Konda, Tirumaleswar Reddy" To: "secdir@ietf.org" , "regext@ietf.org" , "draft-ietf-regext-unhandled-namespaces.all@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-regext-unhandled-namespaces Thread-Index: AdcIRsEdMoPcgxXERhinE+RBwxlfZw== Date: Sun, 21 Feb 2021 11:48:37 +0000 Message-ID: Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.6.0.76 dlp-reaction: no-action x-originating-ip: [49.37.161.1] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 38bdfaea-cbeb-4bec-9c6e-08d8d65ea039 x-ms-traffictypediagnostic: PH0PR16MB4166: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0 x-microsoft-antispam-message-info: Q3AqQ06I959Mr94ZcCuGAlVbMyJNBDoSGu6Op/t7PIdW28jv4WyZ4HnSBwTjLuawym6Hjo0jDp9D2YB0rvmO7v4MAl75NPXRJy3SkeIIqO4W1Ta582fyFU9PQtjuio6vQLHJ6zqOzkniweH46eG8UgOmO80IIsMAyyoFu7Jtn7eWNKHFRez9HImDKI0/qfWt82hQ62GSM6eGgAdbks7ZSuR5ZXVXxrH+PSshtkaasMJL24U6FHCoCpCYZsiHN6zSM9XC+0X5QH/D6yrt5iQVl3qJHNSqJW3FicWjRgtiYPAUnpKYL9rfJN33yAHB7FnWVTk4z45SFklwBL0wMfJbzXcX9sg68cqU+5IzT4LbgzC1jyFTcBZVIX5AGwgu/TVPzuzFJnVxyYviH4yOwc6xaW3iGWHs1unBM0BJzGBCj1RGVr2Mbz7czAQylvEFjrVH4SClPbnYArU+LYaR70jsd3w+A/w/CuP0oP3gHHaIaMgGuIAIQAvEB+BbEWZBLfv6NWJdpKO3aYD7h8W7Vaqyg5AtUW4IxhPQOWzcrBlIP1VhsED/fiX+lhER08ayaRPH3lsmrTL8qKV7U7BrJy63zcN/Msa+7SQlAGhdelJZK+Q= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH0PR16MB4118.namprd16.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(346002)(366004)(376002)(39860400002)(136003)(32952001)(55016002)(2906002)(86362001)(26005)(33656002)(9686003)(8936002)(186003)(6506007)(8676002)(7696005)(450100002)(478600001)(64756008)(66476007)(66446008)(66946007)(66556008)(5660300002)(52536014)(83380400001)(110136005)(76116006)(316002)(71200400001)(4744005)(85282002); DIR:OUT; SFP:1101 x-ms-exchange-antispam-messagedata: =?us-ascii?Q?W1vpYtu4P1GGPJNxPTZs4HjNE2iW4dEEVSnIGjzkxEzdo8tPCaew6eVR6NOA?= =?us-ascii?Q?YoNd5fQjO1LeaG0tnxm2iN6XXa9VfHsj3WgHP0wlXUbbmSezXqlX+zyNC9JQ?= =?us-ascii?Q?CarTndm9G9IBy9f3YrDAQxOlRS+Zw9kr4JYYuoM40q0TM058sQ6JU69H5h8P?= =?us-ascii?Q?2gGrE09DDw/LB3qHFJklnKFapVI9qT0p0+UQ9OIW0lBgmSUQSE8GFlQqAt+L?= =?us-ascii?Q?KQxh2pa7jYKg0FmGOxlw+KlKhWpXBZDH61U5QEPzkATI2J/5ubCVc7QVSDH6?= =?us-ascii?Q?x7lHM8FnymhCrtGm3D5EooVr2eVHs/40djC/7GViP5qBx1vkbAwtts6h8Dvw?= =?us-ascii?Q?jt2PzPmLb5fiIVvSHHESHOzgA9zYHSWfexp46dtREcQ9eLS0V5kln9tDs6hq?= =?us-ascii?Q?h8vtGgR4JqIoDZmNPUZ/o3ImlNBXdv8JJ5JRS1mT+sSob115RyGSL35IzgVR?= =?us-ascii?Q?rCEXhghCRP8bmF4A5zXyFEc4AlyBWnSVFWDwUBmnL6K3EqYG+m8zp5o2qgvT?= =?us-ascii?Q?JFHw58yJSBT+qNls+K2pbmhG3Dat57Mu7bjjEQF6zc6UoOic3kpqrzlu9n8u?= =?us-ascii?Q?R9NQZdHBBqVfaDzyvgoN3ouhPu5501iEFHdlfGIiDBB1FrjE4xtMO7tu+W2V?= =?us-ascii?Q?QRgnY2Pia95VEy83us2HeNGu2sNVKxTyPK/qEwznI7X21jvP9W317pLT35QJ?= =?us-ascii?Q?ujJyAg+ntCNvhVKwjSlLkHyUzKzvRjipHsvbKTjTA6DnE4WjLvvEUgdSfAh2?= =?us-ascii?Q?egmp9recKbLcLlz1XY0lB1O3R0lbzauGguQ5yzFAtonv8BiPT/mrrGqDitIB?= =?us-ascii?Q?RJrIXKZF+lJ2Z0MkC2dIgFlyKF/hUGH0hroCEZXHqlWzFFnRK4w2Yq1/vRSa?= =?us-ascii?Q?la2Lnf9In4rqpLEb/bh10KG2J9JzWNeRsnhVmVCYD6pElF2lzPnJmuHP8ShG?= =?us-ascii?Q?FBhcYyrISLjCDcD1bqKLBa05xI7gyeJdDzEw3gohCQpMmvky3Y/vlkE16IK5?= =?us-ascii?Q?/nO5TsLoJnCMQB+42s8wyH8d6lEXFfftCmKfuVYLqSbMBbp1iTre7Slg+/4i?= =?us-ascii?Q?HvCKNvndJuhDn85rtL5ts5K2zThOQ03s+c2CiA4Lz9T7VaBR7Sxuc9b0cn2p?= =?us-ascii?Q?FgZJihP2fCIonqfZG7BDVPqqOfCITYCzx7JlI+yxyK8raKeCkHK/yrI0F7i2?= =?us-ascii?Q?bJ0Xhs8OPly3QXb9f7nRXIP6e0A7ZO3Es1TXjIvSM0fT52rALRmC3wNCNQpE?= =?us-ascii?Q?Nmw19wyiOR7AwxAhBp+f/l+HZ7oPiHe2P34h/0ygstVVkLdb/orN1RvAMJKl?= =?us-ascii?Q?/dw=3D?= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: mcafee.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PH0PR16MB4118.namprd16.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 38bdfaea-cbeb-4bec-9c6e-08d8d65ea039 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Feb 2021 11:48:37.5070 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fCHNT6vH14LAjbGu+rx0l+Rc64cekcLoTQ6VZxeB1MOiAA5WTVOKnknlZSPMD8anq26kAUaEoXI374pGJsMZ5ljwYcBTOX0L5eJkCWf+8ymxXphN56rg7xXBQHWsGODY X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR16MB4166 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA40A35 smtp.mailfrom=tirumaleswarreddy_konda@mcafee.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: mcafee.com Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_PH0PR16MB41184F173F51F983010FAD1AEA829PH0PR16MB4118namp_" Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-regext-unhandled-namespaces X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Feb 2021 11:48:44 -0000 --_000_PH0PR16MB41184F173F51F983010FAD1AEA829PH0PR16MB4118namp_ Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Reviewer: Tirumaleswar Reddy Review result: Has nits This document does not define any new EPP protocol elements, it specifies a= n operational practice using the existing EPP protocol. It does not discuss= any security aspects other than relying on the security considerations in = EPP protocol [RFC5730]. The security considerations described in these other specifications apply t= o this specification as well. Comment> What other specifications are you referring to ? -Tiru --_000_PH0PR16MB41184F173F51F983010FAD1AEA829PH0PR16MB4118namp_ Content-Type: text/html; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable

Reviewer: Tirumaleswar Reddy

Review result: Has nits

 

This document does not define any new EPP protocol e= lements, it specifies an operational practice using the existing EPP protoc= ol. It does not discuss any security aspects other than relying on the secu= rity considerations in EPP protocol [RFC5730].

 

The security considerations described in these other= specifications apply to this specification as well.

 

Comment> What other specifications are you referr= ing to ?

 

-Tiru

--_000_PH0PR16MB41184F173F51F983010FAD1AEA829PH0PR16MB4118namp_-- From nobody Sun Feb 21 09:02:36 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A469C3A1569; Thu, 18 Feb 2021 10:30:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1613673025; bh=Lul62TPNW5CffraePRlU3Kf880Xldz3X07VHxufuCgs=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=oeWJMONRin5s6iOytf/VJlT0BpCqIbY6E3gGcuQMgpcAlv3LLIweyidBOo6VnRDvX acMtQKN61gmuMpQpjaHK2kHDsabAcAueFL4PfxpDDILeyca1MB3msNrXLE0T7HBIJB SoQLZ/b7fn4hkRWxdHvXJAaBGQWQCbbaKNB6m6hM= X-Mailbox-Line: From new-work-bounces@ietf.org Thu Feb 18 10:30:25 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F28643A14BC; Thu, 18 Feb 2021 10:30:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1613673025; bh=Lul62TPNW5CffraePRlU3Kf880Xldz3X07VHxufuCgs=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=oeWJMONRin5s6iOytf/VJlT0BpCqIbY6E3gGcuQMgpcAlv3LLIweyidBOo6VnRDvX acMtQKN61gmuMpQpjaHK2kHDsabAcAueFL4PfxpDDILeyca1MB3msNrXLE0T7HBIJB SoQLZ/b7fn4hkRWxdHvXJAaBGQWQCbbaKNB6m6hM= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 584B13A14BC for ; Thu, 18 Feb 2021 10:30:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Y4gU7NHaUIm for ; Thu, 18 Feb 2021 10:30:21 -0800 (PST) Received: from raoul.w3.org (raoul.w3.org [128.30.52.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02E303A14B1 for ; Thu, 18 Feb 2021 10:30:20 -0800 (PST) Received: from [93.30.120.228] (helo=[192.168.1.100]) by raoul.w3.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCo4A-00037U-0h; Thu, 18 Feb 2021 18:30:18 +0000 From: Coralie Mercier Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Thu, 18 Feb 2021 19:30:17 +0100 Message-Id: <870B6EC7-6BF6-4A5B-9EB1-EAF7EADA67C8@w3.org> To: new-work@ietf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Precedence: list Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Sun, 21 Feb 2021 09:02:35 -0800 Subject: [secdir] [new-work] Proposed W3C Charter: Service Workers Working Group (until 2021-03-19/20) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Feb 2021 18:30:27 -0000 Hello, Today W3C Advisory Committee Representatives received a Proposal to review a draft charter for the Service Workers Working Group: https://w3c.github.io/charter-drafts/sw-2020.html As part of ensuring that the community is aware of proposed work at W3C, this draft charter is public during the Advisory Committee review period. W3C invites public comments through 04:59 UTC on 2021-03-20 (23:59, Boston time on 2021-03-19) on the proposed charter. Please send comments to public-new-work@w3.org, which has a public archive: http://lists.w3.org/Archives/Public/public-new-work/ Other than comments sent in formal responses by W3C Advisory Committee Representatives, W3C cannot guarantee a response to comments. If you work for a W3C Member [1], please coordinate your comments with your Advisory Committee Representative. For example, you may wish to make public comments via this list and have your Advisory Committee Representative refer to it from their formal review comments. If you should have any questions or need further information, please contact Yves Lafon, ylafon@w3.org . Thank you, Coralie Mercier, Head of W3C Marketing & Communications [1] http://www.w3.org/Consortium/Member/List -- Coralie Mercier - W3C Marketing & Communications - https://www.w3.org mailto:coralie@w3.org +337 810 795 22 https://www.w3.org/People/Coralie/ _______________________________________________ new-work mailing list new-work@ietf.org https://www.ietf.org/mailman/listinfo/new-work From nobody Mon Feb 22 03:44:03 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C40F3A13BC for ; Mon, 22 Feb 2021 03:44:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H8fQXiGenTwi for ; Mon, 22 Feb 2021 03:44:00 -0800 (PST) Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0F933A137B for ; Mon, 22 Feb 2021 03:43:59 -0800 (PST) Received: by mail-qt1-x82e.google.com with SMTP id c1so8971188qtc.1 for ; Mon, 22 Feb 2021 03:43:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:message-id:thread-topic :mime-version:content-transfer-encoding; bh=qTswHHahnjE5BlMj/4R/H/hG6p0R6/r2XV8ePA7sD1E=; b=jsIsEYcF/jLhjHECQrZoaMq3sOE8wMWartB7p58+VAzpm7Z96KSoPCtklXbtkl2InB PAvF7bQYVBDjgm5urxJPGqfBILjMtDguV40iopE6Rk8by8n9Ux8nTJRv5Ck/JA10beY/ cRV5Fo2kfH6l9C7VhoELHZ1J6VThr+SK5604g= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:mime-version:content-transfer-encoding; bh=qTswHHahnjE5BlMj/4R/H/hG6p0R6/r2XV8ePA7sD1E=; b=GsTOABvvedm0CQHHMHG0Tnlzb6KqJpPKWcazUVKt4f7+Zo+0GIfhc7Y/1Vz/QQSWwu KiL8/mJyRanCb47ghcsvVd6rkehHUDHXFrUq+8Nskz3WLyC/hb13dGjCnSlvv3ZM+2vm 58lELRufEyRKt94LW5rnrCA2PxMEw+8VurBu3dm1XKQCwXb7gkO8g6/2VoQ/Sa5H/iqL 4nxq23DHiFdiTh++OphxyOaZNhkWhue+vkvTgwunbAJVJUw89juaajCmZI6ZQhT9g2+O gulwcL6G9lAnoo4N/ATIA5AfsmpzYFJhHXI3ih37fMK/8LbM+SOdHRhapbuts5ITaIQC S4hw== X-Gm-Message-State: AOAM532WTtGS9gCW05CxqTAqEpjSkl/0mEWgmBIrHQ1aorh1yAr5Vsj+ khtwDJ3CydK0xM9F4CmVCB9EipGwXhyDUaWR X-Google-Smtp-Source: ABdhPJwnz5GVUQBqX0Gj933AKptwt2irrB+30sr3rLYtLPiUQWT59Zh1l0ERYaP1pd/XxCwE7joVlw== X-Received: by 2002:aed:38c8:: with SMTP id k66mr10338434qte.142.1613994237593; Mon, 22 Feb 2021 03:43:57 -0800 (PST) Received: from [192.168.2.143] (pool-108-18-106-102.washdc.fios.verizon.net. [108.18.106.102]) by smtp.gmail.com with ESMTPSA id n4sm10956845qtl.77.2021.02.22.03.43.56 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 22 Feb 2021 03:43:56 -0800 (PST) User-Agent: Microsoft-MacOutlook/16.46.21021202 Date: Mon, 22 Feb 2021 06:43:56 -0500 From: Carl Wallace To: , "iesg@ietf.org" , Message-ID: <3780299D-34DB-4B6D-ABA4-BA579C946CA5@redhoundsoftware.com> Thread-Topic: secdir review of draft-ietf-tcpm-2140bis Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: 7bit Archived-At: Subject: [secdir] secdir review of draft-ietf-tcpm-2140bis X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Feb 2021 11:44:01 -0000 I reviewed this document as part of the Security Directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the Security Area Directors. Document authors, document editors, and WG chairs should treat these comments just like any other IETF Last Call comments. This document obsoletes RFC 2140. It provides a description of interdependent TCP control blocks and the ways that part of TCP state can be shared among similar concurrent or consecutive connections. TCP state includes a combination of parameters, such as connection state, current round-trip time estimates, congestion control information, and process information. I found no issues or nits with the document. The document is ready. From nobody Mon Feb 22 08:41:26 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C46693A09DE; Mon, 22 Feb 2021 08:41:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.398 X-Spam-Level: X-Spam-Status: No, score=-4.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5TMfuRApgbrx; Mon, 22 Feb 2021 08:41:19 -0800 (PST) Received: from mail2.verisign.com (mail2.verisign.com [72.13.63.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CC883A1E26; Mon, 22 Feb 2021 08:41:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=19962; q=dns/txt; s=VRSN; t=1614012068; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=DY7LprpCRBKN6+VHTJzYs3nWDdgJ020xczSuAqfYViI=; b=djUx9MXfv676HTnyNMWxtEv5b/DydJe2TTo0m6bbCIQuPMvL6MlrZkS2 2lovVTy1PSseGeJeXNnnM1yKixgOCEtB2OIw+vOytGtqbs10IRXb2nOjO us+Z7L53cMTKfwnFK8jO2lzoAn3YjZcQzlRW09+NmKdIRQOJF7zclfqlG m40C4Y89lBP+4RQ9yDLhg++REB9F0x7MD/POqkkYn8rFH6VywDWRvRucj GnMO9hpEcAVQSBmSimflVovPThmH/+fjJ7YxJcI1GOzuHVoWtbjoFYWy3 ACK1dUQmBrXyvYacctrDognNygdbPePFRHq0Y6A43L0XOx6yB/rNRbXrr Q==; IronPort-SDR: 3BLkUXzAGRdFEnv7Jc9Krwq1alNHiXpvrnJUABnUBv4oV7/j6GI0CHiMas+CclU+PofuBSgfsQ ELU6GKVoQXTmJIFEjpfb6PsGIypmrLmKOkQB8dzVzjdYkq6Nf0Q/AJzuNOj4ZYu4NOC41uQqPD Dz8MyrVnXf9xXFQaK4PAMINkK4fsvEX6ZgFTP8aIW/MaXN6iiWUkFsVGSJ/bfhqW9UXdA+ldbF GFnBsY/+QWJLFKnyocI3wSRkswovWggv4qT7nKPe6e6uHT9uoWYg+Oyd+bvfUkcdYs6uJTsODY iaA= X-IronPort-AV: E=Sophos;i="5.81,197,1610409600"; d="png'150?scan'150,208,217,150";a="4900952" Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2176.2; Mon, 22 Feb 2021 11:41:05 -0500 Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d]) by BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d%4]) with mapi id 15.01.2176.002; Mon, 22 Feb 2021 11:41:05 -0500 From: "Gould, James" To: "TirumaleswarReddy_Konda@McAfee.com" , "secdir@ietf.org" , "regext@ietf.org" , "draft-ietf-regext-unhandled-namespaces.all@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-regext-unhandled-namespaces Thread-Index: AdcIRsEdMoPcgxXERhinE+RBwxlfZwA8sIaA Date: Mon, 22 Feb 2021 16:41:05 +0000 Message-ID: <84410DC5-0D46-4EAF-88F6-BB390902A0CD@verisign.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.41.20091302 x-originating-ip: [10.170.148.18] Content-Type: multipart/related; boundary="_004_84410DC50D464EAF88F6BB390902A0CDverisigncom_"; type="multipart/alternative" MIME-Version: 1.0 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-regext-unhandled-namespaces X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Feb 2021 16:41:21 -0000 --_004_84410DC50D464EAF88F6BB390902A0CDverisigncom_ Content-Type: multipart/alternative; boundary="_000_84410DC50D464EAF88F6BB390902A0CDverisigncom_" --_000_84410DC50D464EAF88F6BB390902A0CDverisigncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGlydSwNCg0KDQpJbiByZS1sb29raW5nIGF0IGl0LCBpdCB3YXMgaW50ZW5kZWQgdG8gcmVmZXJl bmNlIHRoZSBzZXQgb2Ygbm9ybWF0aXZlIEVQUCBSRkPigJlzIHVzZWQgaW4gdGhlIGRyYWZ0LCB3 aGljaCBvcmlnaW5hbGx5IGluY2x1ZGVkIFJGQyA1NzMwLCA1NzMxLCAzOTE1LCA1OTEwLCBhbmQg ODU5MC4gIFdlIG1vdmVkIGFsbCBvZiB0aGUgRVBQIFJGQ3MgMzkxNSwgNTkxMCwgYW5kIDg1OTAg ZnJvbSBub3JtYXRpdmUgcmVmZXJlbmNlcyB0byBpbmZvcm1hdGlvbmFsIHJlZmVyZW5jZXMgYmVj YXVzZSB0aGV54oCZcmUgb25seSB1c2VkIGluIHRoZSBleGFtcGxlcywgd2hpY2ggbGVhdmVzIHRo ZSBSRkMgNTczMCBhbmQgNTczMSBub3JtYXRpdmUgcmVmZXJlbmNlcy4gIEkgYmVsaWV2ZSB0aGF0 IHRoZSBSRkMgNTczMSBub3JtYXRpdmUgcmVmZXJlbmNlIGNhbiBhbHNvIGJlIG1hZGUgYW4gaW5m b3JtYXRpb25hbCByZWZlcmVuY2UsIHNpbmNlIGl04oCZcyBvbmx5IHVzZWQgaW4gdGhlIGV4YW1w bGVzLiAgSWYgdGhhdCB3YXMgdG8gYmUgZG9uZSwgaXQgd291bGQgb25seSBsZWF2ZSBSRkMgNTcz MCwgd2hpY2ggaXMgdGhlIHRhcmdldCBvZiB0aGUgc3RhdGVtZW50IGluIHRoZSBTZWN1cml0eSBD b25zaWRlcmF0aW9ucyBzZWN0aW9uLiAgVGhpcyBpcyBhIGxvbmcgd2F5IG9mIHByb3Bvc2luZyBt b3ZpbmcgUkZDIDU3MzEgdG8gYmUgaW5mb3JtYXRpb25hbCBhbmQgcmVtb3ZlIHRoZSBzZWNvbmQg c2VudGVuY2Ug4oCcVGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIGRlc2NyaWJlZCBpbiB0aGVz ZSBvdGhlciBzcGVjaWZpY2F0aW9ucyBhcHBseSB0byB0aGlzIHNwZWNpZmljYXRpb24gYXMgd2Vs bC4g4oCcIGZyb20gdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rpb24sIHNpbmNlIHRo ZSBmaXJzdCBzZW50ZW5jZSBjb3ZlcnMgUkZDIDU3MzAgYW5kIG5vIG90aGVyIEVQUCBSRkNzIGFw cGx5Lg0KDQoNCg0KVGhhbmtzLA0KDQotLQ0KDQpKRw0KDQpbY2lkOmltYWdlMDAxLnBuZ0AwMUQ3 MDkwRi45QUExQkY5MF0NCg0KSmFtZXMgR291bGQNCkZlbGxvdyBFbmdpbmVlcg0KamdvdWxkQFZl cmlzaWduLmNvbTxhcHBsZXdlYmRhdGE6Ly8xMzg5MEM1NS1BQUU4LTRCRjMtQTZDRS1CNEJBNDI3 NDA4MDMvamdvdWxkQFZlcmlzaWduLmNvbT4NCg0KNzAzLTk0OC0zMjcxDQoxMjA2MSBCbHVlbW9u dCBXYXkNClJlc3RvbiwgVkEgMjAxOTANCg0KVmVyaXNpZ24uY29tPGh0dHA6Ly92ZXJpc2lnbmlu Yy5jb20vPg0KDQpGcm9tOiAiS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSIgPFRpcnVtYWxlc3dh clJlZGR5X0tvbmRhQE1jQWZlZS5jb20+DQpEYXRlOiBTdW5kYXksIEZlYnJ1YXJ5IDIxLCAyMDIx IGF0IDY6NDggQU0NClRvOiAic2VjZGlyQGlldGYub3JnIiA8c2VjZGlyQGlldGYub3JnPiwgInJl Z2V4dEBpZXRmLm9yZyIgPHJlZ2V4dEBpZXRmLm9yZz4sICJkcmFmdC1pZXRmLXJlZ2V4dC11bmhh bmRsZWQtbmFtZXNwYWNlcy5hbGxAaWV0Zi5vcmciIDxkcmFmdC1pZXRmLXJlZ2V4dC11bmhhbmRs ZWQtbmFtZXNwYWNlcy5hbGxAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbRVhURVJOQUxdIFNlY2RpciBs YXN0IGNhbGwgcmV2aWV3IG9mIGRyYWZ0LWlldGYtcmVnZXh0LXVuaGFuZGxlZC1uYW1lc3BhY2Vz DQpSZXNlbnQtRnJvbTogPGFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc+DQpSZXNlbnQtVG86IEphbWVz IEdvdWxkIDxqZ291bGRAdmVyaXNpZ24uY29tPiwgPG1hcnRpbi5jYXNhbm92YUBzd2l0Y2guY2g+ LCA8aWV0ZkBhbnRvaW4ubmw+LCA8Z2FsdmluQGVsaXN0eC5jb20+LCA8c3VwZXJ1c2VyQGdtYWls LmNvbT4sIDxiYXJyeWxlaWJhQGdtYWlsLmNvbT4sIDxmcmFuY2VzY2EucGFsb21iaW5pQGVyaWNz c29uLmNvbT4sIDxiYXJyeWxlaWJhQGNvbXB1dGVyLm9yZz4sIERhdmlkIFNtaXRoIDxkc21pdGhA dmVyaXNpZ24uY29tPiwgRGF2aWQgU21pdGggPGRzbWl0aEB2ZXJpc2lnbi5jb20+DQpSZXNlbnQt RGF0ZTogU3VuZGF5LCBGZWJydWFyeSAyMSwgMjAyMSBhdCA2OjQ4IEFNDQoNClJldmlld2VyOiBU aXJ1bWFsZXN3YXIgUmVkZHkNClJldmlldyByZXN1bHQ6IEhhcyBuaXRzDQoNClRoaXMgZG9jdW1l bnQgZG9lcyBub3QgZGVmaW5lIGFueSBuZXcgRVBQIHByb3RvY29sIGVsZW1lbnRzLCBpdCBzcGVj aWZpZXMgYW4gb3BlcmF0aW9uYWwgcHJhY3RpY2UgdXNpbmcgdGhlIGV4aXN0aW5nIEVQUCBwcm90 b2NvbC4gSXQgZG9lcyBub3QgZGlzY3VzcyBhbnkgc2VjdXJpdHkgYXNwZWN0cyBvdGhlciB0aGFu IHJlbHlpbmcgb24gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIGluIEVQUCBwcm90b2NvbCBb UkZDNTczMF0uDQoNClRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBkZXNjcmliZWQgaW4gdGhl c2Ugb3RoZXIgc3BlY2lmaWNhdGlvbnMgYXBwbHkgdG8gdGhpcyBzcGVjaWZpY2F0aW9uIGFzIHdl bGwuDQoNCkNvbW1lbnQ+IFdoYXQgb3RoZXIgc3BlY2lmaWNhdGlvbnMgYXJlIHlvdSByZWZlcnJp bmcgdG8gPw0KDQotVGlydQ0K --_000_84410DC50D464EAF88F6BB390902A0CDverisigncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJZm9udC1zaXpl OjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwcmUNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCBD aGFyIjsNCgltYXJnaW46MGluOw0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bC1yZXBseTsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6 IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28t c3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyI7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9u dC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47 DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7 cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVO LVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiIgc3R5bGU9IndvcmQtd3JhcDpicmVh ay13b3JkIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssc2VyaWYiPlRpcnUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+SW4gcmUtbG9va2luZyBhdCBpdCwgaXQg d2FzIGludGVuZGVkIHRvIHJlZmVyZW5jZSB0aGUgc2V0IG9mIG5vcm1hdGl2ZSBFUFAgUkZD4oCZ cyB1c2VkIGluIHRoZSBkcmFmdCwgd2hpY2ggb3JpZ2luYWxseSBpbmNsdWRlZCBSRkMgNTczMCwg NTczMSwgMzkxNSwgNTkxMCwgYW5kIDg1OTAuJm5ic3A7IFdlIG1vdmVkIGFsbCBvZiB0aGUgRVBQ IFJGQ3MgMzkxNSwgNTkxMCwgYW5kIDg1OTAgZnJvbSBub3JtYXRpdmUgcmVmZXJlbmNlcyB0byBp bmZvcm1hdGlvbmFsIHJlZmVyZW5jZXMgYmVjYXVzZSB0aGV54oCZcmUgb25seSB1c2VkIGluIHRo ZSBleGFtcGxlcywgd2hpY2ggbGVhdmVzIHRoZSBSRkMgNTczMCBhbmQgNTczMSBub3JtYXRpdmUg cmVmZXJlbmNlcy4mbmJzcDsgSSBiZWxpZXZlIHRoYXQgdGhlIFJGQyA1NzMxIG5vcm1hdGl2ZSBy ZWZlcmVuY2UgY2FuIGFsc28gYmUgbWFkZSBhbiBpbmZvcm1hdGlvbmFsIHJlZmVyZW5jZSwgc2lu Y2UgaXTigJlzIG9ubHkgdXNlZCBpbiB0aGUgZXhhbXBsZXMuJm5ic3A7IElmIHRoYXQgd2FzIHRv IGJlIGRvbmUsIGl0IHdvdWxkIG9ubHkgbGVhdmUgUkZDIDU3MzAsIHdoaWNoIGlzIHRoZSB0YXJn ZXQgb2YgdGhlIHN0YXRlbWVudCBpbiB0aGUgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgc2VjdGlv bi4mbmJzcDsgVGhpcyBpcyBhIGxvbmcgd2F5IG9mIHByb3Bvc2luZyBtb3ZpbmcgUkZDIDU3MzEg dG8gYmUgaW5mb3JtYXRpb25hbCBhbmQgcmVtb3ZlIHRoZSBzZWNvbmQgc2VudGVuY2Ug4oCcPC9z cGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+VGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25z IGRlc2NyaWJlZCBpbiB0aGVzZSBvdGhlciBzcGVjaWZpY2F0aW9ucyBhcHBseSB0byB0aGlzIHNw ZWNpZmljYXRpb24gYXMgd2VsbC48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4g4oCcIGZyb20g dGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rpb24sIHNpbmNlIHRoZSBmaXJzdCBzZW50 ZW5jZSBjb3ZlcnMgUkZDIDU3MzAgYW5kIG5vIG90aGVyIEVQUCBSRkNzIGFwcGx5LiZuYnNwOyA8 bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5UaGFua3Ms PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wcmU+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250 LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tLSZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp Zjtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNl cmlmO2NvbG9yOmJsYWNrIj5KRzwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp Zjtjb2xvcjpibGFjayI+PGJyPg0KPGltZyB3aWR0aD0iNzMiIGhlaWdodD0iNjQiIHN0eWxlPSJ3 aWR0aDouNzYwNGluO2hlaWdodDouNjY2NmluIiBpZD0iUGljdHVyZV94MDAyMF8xIiBzcmM9ImNp ZDppbWFnZTAwMS5wbmdAMDFENzA5MEYuOUFBMUJGOTAiPjxicj4NCjxicj4NCjxiPkphbWVzIEdv dWxkPGJyPg0KPC9iPkZlbGxvdyBFbmdpbmVlcjxicj4NCjxhIGhyZWY9ImFwcGxld2ViZGF0YTov LzEzODkwQzU1LUFBRTgtNEJGMy1BNkNFLUI0QkE0Mjc0MDgwMy9qZ291bGRAVmVyaXNpZ24uY29t Ij48c3BhbiBzdHlsZT0iY29sb3I6Izk1NEY3MiI+amdvdWxkQFZlcmlzaWduLmNvbTwvc3Bhbj48 L2E+PGJyPg0KPGJyPg0KNzAzLTk0OC0zMjcxPGJyPg0KMTIwNjEgQmx1ZW1vbnQgV2F5PGJyPg0K UmVzdG9uLCBWQSAyMDE5MDxicj4NCjxicj4NCjxhIGhyZWY9Imh0dHA6Ly92ZXJpc2lnbmluYy5j b20vIj48c3BhbiBzdHlsZT0iY29sb3I6Izk1NEY3MiI+VmVyaXNpZ24uY29tPC9zcGFuPjwvYT48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj4mcXVvdDtLb25kYSwgVGlydW1hbGVzd2Fy IFJlZGR5JnF1b3Q7ICZsdDtUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tJmd0Ozxi cj4NCjxiPkRhdGU6IDwvYj5TdW5kYXksIEZlYnJ1YXJ5IDIxLCAyMDIxIGF0IDY6NDggQU08YnI+ DQo8Yj5UbzogPC9iPiZxdW90O3NlY2RpckBpZXRmLm9yZyZxdW90OyAmbHQ7c2VjZGlyQGlldGYu b3JnJmd0OywgJnF1b3Q7cmVnZXh0QGlldGYub3JnJnF1b3Q7ICZsdDtyZWdleHRAaWV0Zi5vcmcm Z3Q7LCAmcXVvdDtkcmFmdC1pZXRmLXJlZ2V4dC11bmhhbmRsZWQtbmFtZXNwYWNlcy5hbGxAaWV0 Zi5vcmcmcXVvdDsgJmx0O2RyYWZ0LWlldGYtcmVnZXh0LXVuaGFuZGxlZC1uYW1lc3BhY2VzLmFs bEBpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+W0VYVEVSTkFMXSBTZWNkaXIgbGFz dCBjYWxsIHJldmlldyBvZiBkcmFmdC1pZXRmLXJlZ2V4dC11bmhhbmRsZWQtbmFtZXNwYWNlczxi cj4NCjxiPlJlc2VudC1Gcm9tOiA8L2I+Jmx0O2FsaWFzLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7PGJy Pg0KPGI+UmVzZW50LVRvOiA8L2I+SmFtZXMgR291bGQgJmx0O2pnb3VsZEB2ZXJpc2lnbi5jb20m Z3Q7LCAmbHQ7bWFydGluLmNhc2Fub3ZhQHN3aXRjaC5jaCZndDssICZsdDtpZXRmQGFudG9pbi5u bCZndDssICZsdDtnYWx2aW5AZWxpc3R4LmNvbSZndDssICZsdDtzdXBlcnVzZXJAZ21haWwuY29t Jmd0OywgJmx0O2JhcnJ5bGVpYmFAZ21haWwuY29tJmd0OywgJmx0O2ZyYW5jZXNjYS5wYWxvbWJp bmlAZXJpY3Nzb24uY29tJmd0OywgJmx0O2JhcnJ5bGVpYmFAY29tcHV0ZXIub3JnJmd0OywgRGF2 aWQgU21pdGggJmx0O2RzbWl0aEB2ZXJpc2lnbi5jb20mZ3Q7LA0KIERhdmlkIFNtaXRoICZsdDtk c21pdGhAdmVyaXNpZ24uY29tJmd0Ozxicj4NCjxiPlJlc2VudC1EYXRlOiA8L2I+U3VuZGF5LCBG ZWJydWFyeSAyMSwgMjAyMSBhdCA2OjQ4IEFNPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+UmV2aWV3ZXI6IFRpcnVtYWxlc3dhciBSZWRkeTxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlJldmll dyByZXN1bHQ6IEhhcyBuaXRzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+VGhpcyBkb2N1bWVudCBkb2VzIG5v dCBkZWZpbmUgYW55IG5ldyBFUFAgcHJvdG9jb2wgZWxlbWVudHMsIGl0IHNwZWNpZmllcyBhbiBv cGVyYXRpb25hbCBwcmFjdGljZSB1c2luZyB0aGUgZXhpc3RpbmcgRVBQIHByb3RvY29sLiBJdCBk b2VzIG5vdCBkaXNjdXNzIGFueSBzZWN1cml0eSBhc3BlY3RzIG90aGVyIHRoYW4gcmVseWluZyBv biB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMNCiBpbiBFUFAgcHJvdG9jb2wgW1JGQzU3MzBd LiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj5UaGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgZGVzY3JpYmVk IGluIHRoZXNlIG90aGVyIHNwZWNpZmljYXRpb25zIGFwcGx5IHRvIHRoaXMgc3BlY2lmaWNhdGlv biBhcyB3ZWxsLg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Q29tbWVudCZndDsgV2hhdCBvdGhlciBzcGVj aWZpY2F0aW9ucyBhcmUgeW91IHJlZmVycmluZyB0byA/PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+LVRpcnU8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_84410DC50D464EAF88F6BB390902A0CDverisigncom_-- --_004_84410DC50D464EAF88F6BB390902A0CDverisigncom_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=4114; creation-date="Mon, 22 Feb 2021 16:41:05 GMT"; modification-date="Mon, 22 Feb 2021 16:41:05 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAEkAAABACAIAAADZHs1DAAAP1ElEQVRoBe2aa3CU1RnHN3vLJtmQ hEtiwlUBtZUUCiU6tU7wVhinjOB0xmJnFIdpO1Y6DY586Iwdo36gLc4Iip3pVAL9IKjTDnhDEEWC 1GoICHLRctEkXHIPuZHr7qa/c553T152N9lsNvnWM5nDec97Ls//+T+X854lZWBgwDFuRRaXOiUl hX2kHrcNr1vYfd1T0g/ACIVCQV0CgQD/8miwOZ1Ol8vldrupKTyOK9QU2ThpUA4w9Pf39/X19fT0 UCsYYHA6QcLiYKCwF2MEMNh8Pp/X6/V4PAxOXoDoFcYAG7ICplsXNvClpSFvipAimGy1wQmrMgV4 aUzxekEbLV8yPUlhE66u6YJkqT6fMjKDyjRs2GgaeNKA587OTqZnZGSMLYejx4biEautrQ3eUlNT LUiCx6AyjWHhAbKrqwuEwMNQxYyTYUzmjhIbboMo7e3tyIwoMYA5nZ+duXiyur6ju88u5ZL5s+ff mJ+TmUan4JUGNVbQ2tqKNvx+PwTaZ42uPRpseBeoYMygUvRoijp7AnuPXdhz9PyeyvPI7khxqtoU yTcDofk35j1674LH7luY7U8zVsoo2qgMc5gwYQIeaOaNrpEwNoCBqraujgBALDeoOnr6X9t/4rX9 x9t7gg6Xx+F0K1QEQOBRFKoBVYdCjoGgI6T+MtO9j9+74Nlf3gNChhiQHR0dwMvKykoSXmLYMEUY u3T5MoyxMZEDbJTK81fWlR242NrrcHsdToBpSBZpsKeps0gDocYWDDhC6i8zzbO9ZOWKH38/Ah5K hL1kjDMBbMQMDKa6pgaE6enpggp4r+z5cvOeLx0en6bLpRkTbIKKWjGnijoCgQ3qdB3sdwR6FcJg 8NF7Crc99XNeG/ZQIvkQ3xt1bhgpNrYhlMFYY0NDVna2Bczp/MPrh3dVVjncAHOrvxSwuSw3U3SF SVPIxDKpBVuYQOABMtg3f+aUA39aY/fApqYmLB89CmBZY+T1SA8EcIWb1dfXk8QIaFIUsKM1Dk+a w+1xuLQ1Ag9s1p9uC9rBTk2sUoRLq8Ojp6cy/UR100MvvK41oPkdGMjJySF3svXI8dhHjggbSDhD ED8wSxgTYLsqLihgbsRCULBp3gghBobyN5AY33NalKoeuA2rgInYs1rHU37m4rq/vW/gsReZk63Z 0S70CNsjwiakNTU2etxuAXax5dpf3juuuBJgFiQtPdgUKv3n1DZpPdrawFPDwvBoW/C8L79bceD4 eQOPcELMHB118bHhab29vYq0UIhjvGB77p+VHeRk7MpCIn5lgobRrHY5noCnQgrD5JX5sJJOPZ0Y q/h3rdn0NpsaePgbAkiPWXckjfjfOJytMHrcmngltnGsqqmyqllZUYozK82z4MY8tZNYmtnT6T5+ saWtV1DpXuARRYLB4ltyVWw0hZRA4VDS1Xfiu3pe1TR3vLDz4B9XLSGEAIlw0tzcTJ1oPoiPDXto uXoVzfkzM/kyQ4y/f3JW0QVpig3H7vXLJfkqEW3l4OlLd/95n7JbU0KB4rkTDz6z3HTYGyVlH5+o alTjQ6FtHx575hfFvAUeXodaESNRbHFsErWRQxsaGpRBpqRQX2ru/LKmRScxZZBtnd0lr31oF9G0 l9w2rfjmXJWppdDo79n+xL1mgL1RVd+6+f1jWmUq9dc0tb/z+TfsTmEYB2jEkLZ91vDtONgwQhgj ZavPaf1N/enZegUM3uTP7f3Hga8OnqyKuc323xQ7OH9ICQaefWjRrCkTYo5c/fK7yshlTXVkc739 +RlGanQDREvEEI+IOT1mZxxsBH0WlfO+uioIhQ6dbdSuhffrUI5Aqf7SNz6NuTpInl2xQHlXKJDl CZU8sCDmsN1fnC0/16wCiVqTU6jS3cGvqoUoakk87B9z+lCdcbChKoAJY7SBV9PUobMTE3VwQ9Me X/nXtds/Ph5zj5JlhVk+J2erTY/+JDvDF3tM2ceaNI41kjzw5BTMsrWzx8DD8caBt76+YEDZlaYt 1N4bUqo1fyBE39700rf+09rZHS16dkbqplWL5xf4Vy9Rp+HoUvrG4eo2/emgzmgUWVzBO/Fdrdgk vZjlGPPG0nClCVP1uXpIE6qtPKVBOtF6dUv3pt2faeEiK1Bt/+39kb36ufVaz6YPz6jEDf+WvvQL Mor+WhVsSozwfVnMdWJ2DpcDZF0MElj9+kKuvZuERdEJ16p1B/nAk/bcv46svn/RrLxs3XVdBaUp KzYoR7UX1IS7qg+I62+BLALVUGSQGQbkyM/N129m31jnFukQ3kBoey9bWhuTudWXmze9ZOsQ+aBw 1oN3znOkZTsyJg3+pecQh3QCDFvB4AaqR1NlgZI3IwfG+OGwqdda0xg6qRPjnJGdqveIAKb7OBx6 fG8frR4qH2xaXZzl12diuDJ/KjbiYNevqriytGboMsLooSOq4mBDT1wbWLwFgz5sx3xZyh1B2GaU fDqolJR9FHNn8kHJT2+77rRlH6ew8EUnqHRjYGD65Ex1Ka0Lyk2INJaLg43DzqRJk8BG4WQAgd/L y9ASKFfQsoWl4UH7z4lL7cPkg5k5sdKAAFPLWahYnNuU6ZMnWDFkYEBpOcIt9fbDVHGwyRcUVyNg 6+ntxeVmT0pVx6jBb2cjjd6FtOtJKyk7MFQ+KF35Qz6xBwViHWV++m9wzRD03nXrVIs09tZxUhxk cG68VhxsqIrEkpOdDWPwxi43TUzVt1TcC+g/uyHRxnncqW39rtK3hsgHxbfOn04g1WFJARNcRkE0 9LKh4AOL5hjSerq7EWOMecMSIC0/Px9UwOMzceE0/+QMtyUBcqg7Of5EOK1Jwo/Ht/m9So6/0Zol oVXVNmueBJidNFmKNdVF2LKFsxVvmjTUihhj7G8GG1KyC2dLEN4xw69ub7QEgyAlDIgT6qCijr9R pfTNf7f1Ch4YE1O0kabW5Nqr/+E7b8HfLN50Khh7bMjGVSQ2mX/DDRBHsEKFS+dOSHMNqAO+OgSL 74VVrkxUZUYss/ybuoh8UNXYvnnfaXUNQRkExly9iFpKX10G+p56sMgAQ6EYJGJEKSpORxx/YzZW zlf9DwoL+aUQeHyDp7oGfnW7/nYWNataY6OWBtN0UFm95QP7/qu37FUpnnAKfqWFsEbURI0KfQFs +aJpE/3GIFEoAiTqbEoE+95DtbGHvLy8adOmCTwunublehfc4NWWGWZPtG6FUO1Lbm91c9emdypk WT7DYVJhpoijGkiWjrilDMzLz/j9zxYpLwt7mvwEOZRsw/SPCBs649ejosWLyePA69W/jD6+aNL0 TKe+NhV42j5F/cKeTnelbx6WfKDcT04h8lZpQXOlv+5knUxP8K+/vl9QCTyiCVuPgjQwu0pLS4eB Lq+IKOQWNiDF1dXVYVB89fi8njtmZp6u62rvjfpk5IwiQcXh6O3rr2u6WtXQ/mZFtcKmStjBFHth eMFApjuwY+19N+XlMEIdwrjCCAYzMzPBlmhmU5uwAIqRVtyaKNLS0rJv//5Lly6xGT/iZPj9AYfr xU8bLnaElNzqRkDukuUTUx8TddxT0UUNIHnoqIizKfYEWBBVwdi2J+6bN30SK8tPKMjD3dbEiRPx iLiyxRyQADa0QH6rra19b88efkayw3v3m7aPLnQp0YmB6kssjA1IFKU+/cVptXUUUf7JlZ6y5x/N yN782J1ZGT4FTBcuDjP9fo57OFuiac3gTAAbc/ABAsmV2toP9u418Pgxghh9rrlv29Hmpi5NINjI 4NQUqa0NNWkqPMIbpAVmZPseL5774KJZYVBwlkLQz87Kys3NhTf6ramJ/5MYNtYHHj/ocM1sh+f2 eOTHpM8vdh3+ruPrhm7NXvhT2vqGYbZgA1VozpSMh4tmLl84w6CiweJYfu4UVYj7yQBjs4SxCTzY u3r16ifl5TU1NUigfkB1uVAzJkTIaekOfl3f9d/G3sbOvsZr/U3X1HVLps81c2J6flba3Dz/XTfn FWSnMYW5jBcM5DHaBfn5+FiSjLEdZTTYmCYK5grs9JkzlZWVJAaBh5QKIeda/R9nlNxadgEgtYUG VBqZOqeyXCgEpKkFBfJLt6DVEo6+GiU2NiS04PHYZ0Nj4+lTp85duECXoYIjEgg9/LcfQBqcNpaY TgEXMPhpG1Rgww6ZOOrgEaGG0WOThYRAEDa3tJw/f/7Ct98SCTQfihXT4AGcBApmCXtkTMATCfNy c/kNEVTEesZHyJfMY7LYZG/Uj7eQIQBZ39DAz6tkQvXY3W2HRxuLJeqo+D55MkdwIOGi/IgB4GRg xJw7NthkaTgUkPK5QI3R0kM/AwQkJgcSKKKmCIcxJUu+cyyxGWnEl4BEkTav8CIKCCnSNuPHqTEu 2MZJ1kSXHUvfTXTv8R7/f2zjreHxWT/hS4hkxLhy5QqHNVaYOnUqoX/4pS5wGNCFnE4CHH5wzLfu jS++eOXyZd5t2LBB9tu9e3d5eTk9a9as2bp1a/S0tWvXzp49+9VXXyVZ298iRFFR0dKlS+k0b196 6SUeQcVSJD0znpErV65kRzBs2bKF/mXLlsncYQYzbN26ddQFU6euf/ppGma6SLVz586TJ0/Sj/DO 24uKaFGki8Y5LTFJdt68efrNSCtE37t376lTp6InRABjQEVFxfPPP09+jxgMMKCKFpCBIoNf0fjN YPg4dOiQeTQNVIZRiHW4CwsLd+3axTtIWLx4Mad7oZF+M2HOnDlPPvmkeYxoGGY2btzIK4SOUAqq FVmLi4tXrFgBHlTAMFQbbZm8EskeeeQR5GFBoYKLtoh9GQmSiE4MyojqxpThFzzwtmrVKmNmdmxI tm/fPrOKWI55lAYGKQ2RLOKtPLIFPKBXZALkUGPoRyQBRhupMNdol2MjWImGZ5ZVsQSzZBBDsQex TCSw616MzcyJwIZr8UqYoQHJZqQ00KWoz74OW+BvBkDEFGEJecSm5C3jCwoKpM10BIZ8NBUx1zwq bMYsASa82UljgCjbzIloGKrpR4sYXsQAHn+3di0mhCeLwdODZDt27IjYyEzkrYyxLy6dMoaNkNau LDPXNBQ2Y5Zsb2aaETTQjTFie7+0MZivTp4UoQEW7UIyTJyNNmywkRjIZR2i7WsKIbzFaNmX6McY O3syWGgnRNkB29ehbZ1LltiUjedgRfZxfKoQD0xBOPtbTPShlSulJ1oI+omchEQizZEjR4hV9PCx J+ONl8ojtTAJIWVlZYL8iwrrZtqMkQZeE23/9jGKN4rdNuxteQsnkoLkMTpsogtmiUmDxO6rTEG1 ol2MUFaQGrvCZIyjSidWwDqMp6bYx0e3iaVoLbpfeixsGBI2I3qyR56YihH3jXBiHF0AIBDY7G8J GPDDecDIyiO7SEzCumQX4RC069evh38ZzFsEE6+jjdARg9GF/a0d5/8ActOtScHpPCkAAAAASUVO RK5CYIIAAAAAAA== --_004_84410DC50D464EAF88F6BB390902A0CDverisigncom_-- From nobody Tue Feb 23 00:53:44 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63DC73A28B2 for ; Tue, 23 Feb 2021 00:53:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.669 X-Spam-Level: X-Spam-Status: No, score=-2.669 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.57, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1poHyAqOp3l3 for ; Tue, 23 Feb 2021 00:53:38 -0800 (PST) Received: from us-smtp-delivery-140.mimecast.com (us-smtp-delivery-140.mimecast.com [216.205.24.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E5133A0E34 for ; Tue, 23 Feb 2021 00:53:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=mimecast20190606; t=1614070417; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=L/SkgGisqH7PySLFPHH5rpvDET4wen1bKYIcZ+LQm1w=; b=LCr327rQE72CeA7QrcEu9m0SrzMCn3vZQkpXW8vskL5BTjIyg2IeCRec6m771niE8oAgO5 TTgoNCM0CwDJt7w17FrFGA6+yrr4cCPJep1qtCa9uqD2YwAre/WRGDd2sdb23zGjfPQl5S 9GtcpVZBley9zneMn5UZ6pSu+2nLbRo= Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11lp2174.outbound.protection.outlook.com [104.47.57.174]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-255-eNQaivbDPIKa13DU-9RBkg-1; Tue, 23 Feb 2021 03:53:33 -0500 X-MC-Unique: eNQaivbDPIKa13DU-9RBkg-1 Received: from PH0PR16MB4118.namprd16.prod.outlook.com (2603:10b6:510:59::7) by PH0PR16MB4134.namprd16.prod.outlook.com (2603:10b6:510:4f::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.29; Tue, 23 Feb 2021 08:53:30 +0000 Received: from PH0PR16MB4118.namprd16.prod.outlook.com ([fe80::d8f:de34:7e0:8f57]) by PH0PR16MB4118.namprd16.prod.outlook.com ([fe80::d8f:de34:7e0:8f57%7]) with mapi id 15.20.3868.033; Tue, 23 Feb 2021 08:53:30 +0000 From: "Konda, Tirumaleswar Reddy" To: "Gould, James" , "secdir@ietf.org" , "regext@ietf.org" , "draft-ietf-regext-unhandled-namespaces.all@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-regext-unhandled-namespaces Thread-Index: AdcIRsEdMoPcgxXERhinE+RBwxlfZwA8sIaAACHgJ7A= Date: Tue, 23 Feb 2021 08:53:30 +0000 Message-ID: References: <84410DC5-0D46-4EAF-88F6-BB390902A0CD@verisign.com> In-Reply-To: <84410DC5-0D46-4EAF-88F6-BB390902A0CD@verisign.com> Accept-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.6.0.76 dlp-reaction: no-action x-originating-ip: [49.37.161.1] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 74577f34-1b6a-41b6-5864-08d8d7d87e38 x-ms-traffictypediagnostic: PH0PR16MB4134: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0 x-microsoft-antispam-message-info: rmY+gZ2KBOdBDU7WsOX72tf9/6y5zc9YdanizvRnWyTvh4WlTLvXamCz4BCjkjL4J1R/sIsjCgNo/NFyyysItq1pIA1H+k+8pJORdvyoBSiZbQWoCZxKW/xtmwsE0ZJfCpYA2A0/BJD84eVZip1FvamWq+Rp/uQzWy1R+EilzqkVpDtg6+AEALd66txsGrBx5g0Jou/88LEG9Cpde3atLtuP9AEG3SxDgSRHfrHz3MZz5p/Rzfx1HJgOXt6BMTPleZsQBulMs1aXUbyKCd1Upx72FmZPGv+H2U4vprGgotSq36HqnlxBtQPmMriUYP+7SP733R0Jr+LvZ4sfXonKlh+yUrr+iN5ZrIM1KPzoEElBHMfJiRjBgyISDREivhp5Sp5+BNsz1sd6x9+oDz+l9QVJU39x4g3Cp0xN32USY/SvlhCSm8fBkE2pEIWBe4ZhUEhMoQ4anVaqbaB7IplpxyK3XEMQD3SA5oq4ZlwCK7/77PDDT/2vEtGJWk89pUelLfxkMamrG7cPI7w7sPnocXCFqadWwOenfo8Y8ODwyUrC/EC9EqCG84IaO0lYXrAkJn2jj2L4vWJsa3R6mB9MUDb8htotFOU+0gPoCDo2P+EK4kqY7gi/G3E6INaupyqO7x7a8llUtSFV6rn37quNTcWl19liKqzJB2ycOWV/Is4= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH0PR16MB4118.namprd16.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(346002)(136003)(396003)(376002)(39860400002)(366004)(32952001)(33656002)(8936002)(86362001)(66616009)(7696005)(99936003)(166002)(110136005)(6506007)(53546011)(83380400001)(316002)(186003)(478600001)(9686003)(55016002)(5660300002)(52536014)(66446008)(26005)(64756008)(8676002)(2906002)(66556008)(71200400001)(66476007)(66946007)(76116006)(85282002); DIR:OUT; SFP:1101 x-ms-exchange-antispam-messagedata: =?utf-8?B?QS80cWVEQTgvelEveHNDMEgrVHI2Z0tWNE5VcGUxc0hpbGZObUo1ZnRqam1I?= =?utf-8?B?UlpyYjB0SFVvbVUzcERnR1VxTkk2ZzlEckxuTThWUjN2c3FDVUN1aExEenZU?= =?utf-8?B?TTZEc1FNRVZ1RW1WWkZ1Wm16aEN0dldab3Vjb2lqb1NQdHVYb2s1ZFBUdVNK?= =?utf-8?B?dTdLc21vS0JKaDluMGszZHNiRW16RzUya0YxMUhzMmFFdjViYVV3b0lqck5s?= =?utf-8?B?amdjdW45RENQaGFKNUhQN3JGNWJ5SDVYRER1Nk9ybUN3blZGSnZiTTV4TlFZ?= =?utf-8?B?WXlYUFd1N2dBaVdpRDNyZi9NS0VPV0cwOXRXNEl5M0tiZXNPdmZvWC9nbEUv?= =?utf-8?B?c3AxQXFxMFp1SmxWQ2twT090YlRwSTRhOWc2WVRpQTVRRVpqSUNsakRNckc5?= =?utf-8?B?OW1kUlVBVCs1MmkrakRVdzNXTFdSeVBOK1RLVXdDZVQ3R3p1Um5jdVlIN1lB?= =?utf-8?B?TndZQ3AwZi9QSU51eGtzbUlDMVdNazZoSDJhdk80aGhRVmJ1cjlSdlE1eUdr?= =?utf-8?B?ZE9NMTlxWnJGdjVJaVdjemdtSm5EL0ZXbGpjMS91ekMrNzVxbFN6dEpURHJv?= =?utf-8?B?ODlsQ2hjbVo4QUdKckJHRU9hY1VPZ0piZjFCb2hSbWxlM25QczR4djlqSFlE?= =?utf-8?B?NDcvK0M2MVZWUmZFK0dJaEErVjJCeEhDdTJwTjl4ZlVPaFBxbVB0NkQ1NDV6?= =?utf-8?B?cDFhRWVhQjF5ZjlucVlCS1hCQ1ZYMTdoT3JkcDVkYm1Eai9TejQyTWNuVkts?= =?utf-8?B?a1ZxQjJMNzFqaVNnTFBOdmx1dTJHQ1J1UXh5SVR4VFBTUUEvQUtqd3RqT2Y3?= =?utf-8?B?b015YzRPUXRaSkhYakNscEdiQWdJNzZyUVQ0d0tXdFk1OTd6V1gwUjJiVzFu?= =?utf-8?B?azlIR0FUbUdaMnlqQ0pkdktvMDZMSERPNW1wRnNKUTNwUThsdlhFM0NTcWYy?= =?utf-8?B?ekdReWM3WmVmblhwS3lQYUdzZEV0VGE1Ym1hcjdjUmpKNldDRFNFdm1JODhM?= =?utf-8?B?bEhTdDhlSEJkWVh4TlVRS2hFRnY2dmRDekx0WGo5YWQ1TXJUVTNhS3dJcENw?= =?utf-8?B?SXdWeE9zV1hQaTNKbmN1MnQvcTFFcCtCWUthdXFSczJTMkM1amVzZ0ZMeUJF?= =?utf-8?B?S0dITDlwMXJ4dWV2emlPL3VLUHdwSGtiQmttTVFRV2o3ay91OWFEbWNNSjVa?= =?utf-8?B?QkF1TlVqdDl4eUpmSHRJVTFqZ0xsZGV0enFHeUVXWnhvZEJOVFp3ekNKbGFy?= =?utf-8?B?M2VOeDFzQlBheElxbnFaenF6M2p2cmZmOU1OTXBHSjNFSWI4UWlWMGgrd0NE?= =?utf-8?B?Vm1xMUpjMnZmZnZ3V3kycVR1dnAreXdUWTQvY295d1UrYUtTUkUyTmtXWjNC?= =?utf-8?B?WUNLODYvQ0pGdjRaZTdqalpDS0YxR1lSdEZibWVHZ1ZpL0drc2U2NnhYc0FU?= =?utf-8?B?UUZzdGdNd2pvSXBUcHRLZVhJb2dHS2ozZEdlN0drWm8yWVRXUkdiRXRMSkNv?= =?utf-8?B?cEZubkIxQ2UySmJkdmtpSFhrQVM5Yi9RT3JVSVJ6bWhmSzFFbHRMa08wVy9l?= =?utf-8?B?bmpMUmhoNVRjWEZnRzQyYUtaWmx4c1FkTCs4VWpaVVN2MkJ6Qkluei9MdHFw?= =?utf-8?B?NktzSDM1NXBUU0txZVFtMzhyMmttQVlvRkJNaTM1MlZtOVBpRVRtR0hOTWJ6?= =?utf-8?B?c2tLdWd4c2d4VHUxY2R5bmJYZkVvdUZXK3B0VGJrcEt0ZWVKaHVGVHAyajZK?= =?utf-8?Q?N/q8YJ+VOgXUtX4X9I=3D?= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: mcafee.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PH0PR16MB4118.namprd16.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 74577f34-1b6a-41b6-5864-08d8d7d87e38 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Feb 2021 08:53:30.1961 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: A5YIFlzO+9WBJYqgdusXdDIA57ujqhCMJO7uJIloGiD/L4V1Ul/X0Bs/pTltKXUPF/WT058jkWsT9SLsMuk/5JURhG/TqqRoTnZAlIgzlO5TWyY9UwBxprLiPcJoYqaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR16MB4134 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA40A35 smtp.mailfrom=tirumaleswarreddy_konda@mcafee.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: mcafee.com Content-Language: en-US Content-Type: multipart/related; boundary="_004_PH0PR16MB4118027581BD266B23DC3ED4EA809PH0PR16MB4118namp_"; type="multipart/alternative" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-regext-unhandled-namespaces X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Feb 2021 08:53:40 -0000 --_004_PH0PR16MB4118027581BD266B23DC3ED4EA809PH0PR16MB4118namp_ Content-Type: multipart/alternative; boundary="_000_PH0PR16MB4118027581BD266B23DC3ED4EA809PH0PR16MB4118namp_" --_000_PH0PR16MB4118027581BD266B23DC3ED4EA809PH0PR16MB4118namp_ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 VGhhbmtzIEphbWVzIGZvciB0aGUgY2xhcmlmaWNhdGlvbiBhbmQgdXBkYXRlIHRvIHRoZSBkcmFm dC4NCg0KQ2hlZXJzLA0KLVRpcnUNCg0KRnJvbTogR291bGQsIEphbWVzIDxqZ291bGRAdmVyaXNp Z24uY29tPg0KU2VudDogTW9uZGF5LCBGZWJydWFyeSAyMiwgMjAyMSAxMDoxMSBQTQ0KVG86IEtv bmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5j b20+OyBzZWNkaXJAaWV0Zi5vcmc7IHJlZ2V4dEBpZXRmLm9yZzsgZHJhZnQtaWV0Zi1yZWdleHQt dW5oYW5kbGVkLW5hbWVzcGFjZXMuYWxsQGlldGYub3JnDQpTdWJqZWN0OiBSZTogU2VjZGlyIGxh c3QgY2FsbCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1yZWdleHQtdW5oYW5kbGVkLW5hbWVzcGFjZXMN Cg0KDQpDQVVUSU9OOiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4g YXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUg Y29udGVudCBpcyBzYWZlLg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KVGly dSwNCg0KDQpJbiByZS1sb29raW5nIGF0IGl0LCBpdCB3YXMgaW50ZW5kZWQgdG8gcmVmZXJlbmNl IHRoZSBzZXQgb2Ygbm9ybWF0aXZlIEVQUCBSRkPigJlzIHVzZWQgaW4gdGhlIGRyYWZ0LCB3aGlj aCBvcmlnaW5hbGx5IGluY2x1ZGVkIFJGQyA1NzMwLCA1NzMxLCAzOTE1LCA1OTEwLCBhbmQgODU5 MC4gIFdlIG1vdmVkIGFsbCBvZiB0aGUgRVBQIFJGQ3MgMzkxNSwgNTkxMCwgYW5kIDg1OTAgZnJv bSBub3JtYXRpdmUgcmVmZXJlbmNlcyB0byBpbmZvcm1hdGlvbmFsIHJlZmVyZW5jZXMgYmVjYXVz ZSB0aGV54oCZcmUgb25seSB1c2VkIGluIHRoZSBleGFtcGxlcywgd2hpY2ggbGVhdmVzIHRoZSBS RkMgNTczMCBhbmQgNTczMSBub3JtYXRpdmUgcmVmZXJlbmNlcy4gIEkgYmVsaWV2ZSB0aGF0IHRo ZSBSRkMgNTczMSBub3JtYXRpdmUgcmVmZXJlbmNlIGNhbiBhbHNvIGJlIG1hZGUgYW4gaW5mb3Jt YXRpb25hbCByZWZlcmVuY2UsIHNpbmNlIGl04oCZcyBvbmx5IHVzZWQgaW4gdGhlIGV4YW1wbGVz LiAgSWYgdGhhdCB3YXMgdG8gYmUgZG9uZSwgaXQgd291bGQgb25seSBsZWF2ZSBSRkMgNTczMCwg d2hpY2ggaXMgdGhlIHRhcmdldCBvZiB0aGUgc3RhdGVtZW50IGluIHRoZSBTZWN1cml0eSBDb25z aWRlcmF0aW9ucyBzZWN0aW9uLiAgVGhpcyBpcyBhIGxvbmcgd2F5IG9mIHByb3Bvc2luZyBtb3Zp bmcgUkZDIDU3MzEgdG8gYmUgaW5mb3JtYXRpb25hbCBhbmQgcmVtb3ZlIHRoZSBzZWNvbmQgc2Vu dGVuY2Ug4oCcVGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIGRlc2NyaWJlZCBpbiB0aGVzZSBv dGhlciBzcGVjaWZpY2F0aW9ucyBhcHBseSB0byB0aGlzIHNwZWNpZmljYXRpb24gYXMgd2VsbC4g 4oCcIGZyb20gdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rpb24sIHNpbmNlIHRoZSBm aXJzdCBzZW50ZW5jZSBjb3ZlcnMgUkZDIDU3MzAgYW5kIG5vIG90aGVyIEVQUCBSRkNzIGFwcGx5 Lg0KDQoNCg0KVGhhbmtzLA0KDQotLQ0KDQpKRw0KDQpbY2lkOmltYWdlMDAxLnBuZ0AwMUQ3MDlF Ri43MDgxM0E3MF0NCg0KSmFtZXMgR291bGQNCkZlbGxvdyBFbmdpbmVlcg0KamdvdWxkQFZlcmlz aWduLmNvbTxhcHBsZXdlYmRhdGE6Ly8xMzg5MEM1NS1BQUU4LTRCRjMtQTZDRS1CNEJBNDI3NDA4 MDMvamdvdWxkQFZlcmlzaWduLmNvbT4NCg0KNzAzLTk0OC0zMjcxDQoxMjA2MSBCbHVlbW9udCBX YXkNClJlc3RvbiwgVkEgMjAxOTANCg0KVmVyaXNpZ24uY29tPGh0dHA6Ly92ZXJpc2lnbmluYy5j b20vPg0KDQpGcm9tOiAiS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSIgPFRpcnVtYWxlc3dhclJl ZGR5X0tvbmRhQE1jQWZlZS5jb208bWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZl ZS5jb20+Pg0KRGF0ZTogU3VuZGF5LCBGZWJydWFyeSAyMSwgMjAyMSBhdCA2OjQ4IEFNDQpUbzog InNlY2RpckBpZXRmLm9yZzxtYWlsdG86c2VjZGlyQGlldGYub3JnPiIgPHNlY2RpckBpZXRmLm9y ZzxtYWlsdG86c2VjZGlyQGlldGYub3JnPj4sICJyZWdleHRAaWV0Zi5vcmc8bWFpbHRvOnJlZ2V4 dEBpZXRmLm9yZz4iIDxyZWdleHRAaWV0Zi5vcmc8bWFpbHRvOnJlZ2V4dEBpZXRmLm9yZz4+LCAi ZHJhZnQtaWV0Zi1yZWdleHQtdW5oYW5kbGVkLW5hbWVzcGFjZXMuYWxsQGlldGYub3JnPG1haWx0 bzpkcmFmdC1pZXRmLXJlZ2V4dC11bmhhbmRsZWQtbmFtZXNwYWNlcy5hbGxAaWV0Zi5vcmc+IiA8 ZHJhZnQtaWV0Zi1yZWdleHQtdW5oYW5kbGVkLW5hbWVzcGFjZXMuYWxsQGlldGYub3JnPG1haWx0 bzpkcmFmdC1pZXRmLXJlZ2V4dC11bmhhbmRsZWQtbmFtZXNwYWNlcy5hbGxAaWV0Zi5vcmc+Pg0K U3ViamVjdDogW0VYVEVSTkFMXSBTZWNkaXIgbGFzdCBjYWxsIHJldmlldyBvZiBkcmFmdC1pZXRm LXJlZ2V4dC11bmhhbmRsZWQtbmFtZXNwYWNlcw0KUmVzZW50LUZyb206IDxhbGlhcy1ib3VuY2Vz QGlldGYub3JnPG1haWx0bzphbGlhcy1ib3VuY2VzQGlldGYub3JnPj4NClJlc2VudC1UbzogSmFt ZXMgR291bGQgPGpnb3VsZEB2ZXJpc2lnbi5jb208bWFpbHRvOmpnb3VsZEB2ZXJpc2lnbi5jb20+ PiwgPG1hcnRpbi5jYXNhbm92YUBzd2l0Y2guY2g8bWFpbHRvOm1hcnRpbi5jYXNhbm92YUBzd2l0 Y2guY2g+PiwgPGlldGZAYW50b2luLm5sPG1haWx0bzppZXRmQGFudG9pbi5ubD4+LCA8Z2Fsdmlu QGVsaXN0eC5jb208bWFpbHRvOmdhbHZpbkBlbGlzdHguY29tPj4sIDxzdXBlcnVzZXJAZ21haWwu Y29tPG1haWx0bzpzdXBlcnVzZXJAZ21haWwuY29tPj4sIDxiYXJyeWxlaWJhQGdtYWlsLmNvbTxt YWlsdG86YmFycnlsZWliYUBnbWFpbC5jb20+PiwgPGZyYW5jZXNjYS5wYWxvbWJpbmlAZXJpY3Nz b24uY29tPG1haWx0bzpmcmFuY2VzY2EucGFsb21iaW5pQGVyaWNzc29uLmNvbT4+LCA8YmFycnls ZWliYUBjb21wdXRlci5vcmc8bWFpbHRvOmJhcnJ5bGVpYmFAY29tcHV0ZXIub3JnPj4sIERhdmlk IFNtaXRoIDxkc21pdGhAdmVyaXNpZ24uY29tPG1haWx0bzpkc21pdGhAdmVyaXNpZ24uY29tPj4s IERhdmlkIFNtaXRoIDxkc21pdGhAdmVyaXNpZ24uY29tPG1haWx0bzpkc21pdGhAdmVyaXNpZ24u Y29tPj4NClJlc2VudC1EYXRlOiBTdW5kYXksIEZlYnJ1YXJ5IDIxLCAyMDIxIGF0IDY6NDggQU0N Cg0KUmV2aWV3ZXI6IFRpcnVtYWxlc3dhciBSZWRkeQ0KUmV2aWV3IHJlc3VsdDogSGFzIG5pdHMN Cg0KVGhpcyBkb2N1bWVudCBkb2VzIG5vdCBkZWZpbmUgYW55IG5ldyBFUFAgcHJvdG9jb2wgZWxl bWVudHMsIGl0IHNwZWNpZmllcyBhbiBvcGVyYXRpb25hbCBwcmFjdGljZSB1c2luZyB0aGUgZXhp c3RpbmcgRVBQIHByb3RvY29sLiBJdCBkb2VzIG5vdCBkaXNjdXNzIGFueSBzZWN1cml0eSBhc3Bl Y3RzIG90aGVyIHRoYW4gcmVseWluZyBvbiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgaW4g RVBQIHByb3RvY29sIFtSRkM1NzMwXS4NCg0KVGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIGRl c2NyaWJlZCBpbiB0aGVzZSBvdGhlciBzcGVjaWZpY2F0aW9ucyBhcHBseSB0byB0aGlzIHNwZWNp ZmljYXRpb24gYXMgd2VsbC4NCg0KQ29tbWVudD4gV2hhdCBvdGhlciBzcGVjaWZpY2F0aW9ucyBh cmUgeW91IHJlZmVycmluZyB0byA/DQoNCi1UaXJ1DQo= --_000_PH0PR16MB4118027581BD266B23DC3ED4EA809PH0PR16MB4118namp_ Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCi8qIFN0 eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9y bWFsDQoJe21hcmdpbjowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRN TCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCglmb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0K CXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1m YW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLkVtYWlsU3R5bGUyNA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj b2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29y ZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2 IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4N CjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9 IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiIgc3R5bGU9IndvcmQtd3JhcDpi cmVhay13b3JkIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5UaGFua3MgSmFtZXMgZm9yIHRoZSBjbGFyaWZpY2F0aW9uIGFuZCB1cGRhdGUgdG8gdGhl IGRyYWZ0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DaGVlcnMsPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4tVGlydTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRp dj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBw dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZy b206PC9iPiBHb3VsZCwgSmFtZXMgJmx0O2pnb3VsZEB2ZXJpc2lnbi5jb20mZ3Q7IDxicj4NCjxi PlNlbnQ6PC9iPiBNb25kYXksIEZlYnJ1YXJ5IDIyLCAyMDIxIDEwOjExIFBNPGJyPg0KPGI+VG86 PC9iPiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5ICZsdDtUaXJ1bWFsZXN3YXJSZWRkeV9Lb25k YUBNY0FmZWUuY29tJmd0Ozsgc2VjZGlyQGlldGYub3JnOyByZWdleHRAaWV0Zi5vcmc7IGRyYWZ0 LWlldGYtcmVnZXh0LXVuaGFuZGxlZC1uYW1lc3BhY2VzLmFsbEBpZXRmLm9yZzxicj4NCjxiPlN1 YmplY3Q6PC9iPiBSZTogU2VjZGlyIGxhc3QgY2FsbCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1yZWdl eHQtdW5oYW5kbGVkLW5hbWVzcGFjZXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8dGFibGUg Y2xhc3M9Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjEiIGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0i YmFja2dyb3VuZDojRjNGRjMzO2JvcmRlcjpzb2xpZCAjOUI5QTg3IDEuNXB0Ij4NCjx0Ym9keT4N Cjx0cj4NCjx0ZCBzdHlsZT0iYm9yZGVyOm5vbmU7cGFkZGluZzouNzVwdCAuNzVwdCAuNzVwdCAu NzVwdCI+DQo8cD48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJvbmc+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzlCOEIzRSI+Ojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sg bGlua3Mgb3Igb3Blbg0KIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5k ZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNl bnRlciIgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4NCjxociBzaXplPSIyIiB3aWR0aD0iMTAw JSIgYWxpZ249ImNlbnRlciI+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj5UaXJ1LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVv dDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPkluIHJlLWxvb2tpbmcgYXQgaXQsIGl0IHdh cyBpbnRlbmRlZCB0byByZWZlcmVuY2UgdGhlIHNldCBvZiBub3JtYXRpdmUgRVBQIFJGQ+KAmXMg dXNlZCBpbiB0aGUgZHJhZnQsIHdoaWNoIG9yaWdpbmFsbHkgaW5jbHVkZWQgUkZDIDU3MzAsIDU3 MzEsIDM5MTUsIDU5MTAsIGFuZCA4NTkwLiZuYnNwOyBXZSBtb3ZlZCBhbGwgb2YgdGhlIEVQUCBS RkNzIDM5MTUsIDU5MTAsIGFuZCA4NTkwIGZyb20gbm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8gaW5m b3JtYXRpb25hbCByZWZlcmVuY2VzIGJlY2F1c2UgdGhleeKAmXJlIG9ubHkgdXNlZCBpbiB0aGUg ZXhhbXBsZXMsIHdoaWNoIGxlYXZlcyB0aGUgUkZDIDU3MzAgYW5kIDU3MzEgbm9ybWF0aXZlIHJl ZmVyZW5jZXMuJm5ic3A7IEkgYmVsaWV2ZSB0aGF0IHRoZSBSRkMgNTczMSBub3JtYXRpdmUgcmVm ZXJlbmNlIGNhbiBhbHNvIGJlIG1hZGUgYW4gaW5mb3JtYXRpb25hbCByZWZlcmVuY2UsIHNpbmNl IGl04oCZcyBvbmx5IHVzZWQgaW4gdGhlIGV4YW1wbGVzLiZuYnNwOyBJZiB0aGF0IHdhcyB0byBi ZSBkb25lLCBpdCB3b3VsZCBvbmx5IGxlYXZlIFJGQyA1NzMwLCB3aGljaCBpcyB0aGUgdGFyZ2V0 IG9mIHRoZSBzdGF0ZW1lbnQgaW4gdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rpb24u Jm5ic3A7IFRoaXMgaXMgYSBsb25nIHdheSBvZiBwcm9wb3NpbmcgbW92aW5nIFJGQyA1NzMxIHRv IGJlIGluZm9ybWF0aW9uYWwgYW5kIHJlbW92ZSB0aGUgc2Vjb25kIHNlbnRlbmNlIOKAnDwvc3Bh bj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPlRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBk ZXNjcmliZWQgaW4gdGhlc2Ugb3RoZXIgc3BlY2lmaWNhdGlvbnMgYXBwbHkgdG8gdGhpcyBzcGVj aWZpY2F0aW9uIGFzIHdlbGwuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+IOKAnCBmcm9tIHRo ZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBzZWN0aW9uLCBzaW5jZSB0aGUgZmlyc3Qgc2VudGVu Y2UgY292ZXJzIFJGQyA1NzMwIGFuZCBubyBvdGhlciBFUFAgUkZDcyBhcHBseS4mbmJzcDsgPG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+VGhhbmtzLDwv c3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LS0mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWY7 Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp Zjtjb2xvcjpibGFjayI+Skc8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWY7 Y29sb3I6YmxhY2siPjxicj4NCjxpbWcgd2lkdGg9IjczIiBoZWlnaHQ9IjY0IiBzdHlsZT0id2lk dGg6Ljc2MDRpbjtoZWlnaHQ6LjY2NjZpbiIgaWQ9IlBpY3R1cmVfeDAwMjBfMSIgc3JjPSJjaWQ6 aW1hZ2UwMDEucG5nQDAxRDcwOUVGLjcwODEzQTcwIj48YnI+DQo8YnI+DQo8Yj5KYW1lcyBHb3Vs ZDxicj4NCjwvYj5GZWxsb3cgRW5naW5lZXI8YnI+DQo8YSBocmVmPSJhcHBsZXdlYmRhdGE6Ly8x Mzg5MEM1NS1BQUU4LTRCRjMtQTZDRS1CNEJBNDI3NDA4MDMvamdvdWxkQFZlcmlzaWduLmNvbSI+ PHNwYW4gc3R5bGU9ImNvbG9yOiM5NTRGNzIiPmpnb3VsZEBWZXJpc2lnbi5jb208L3NwYW4+PC9h Pjxicj4NCjxicj4NCjcwMy05NDgtMzI3MTxicj4NCjEyMDYxIEJsdWVtb250IFdheTxicj4NClJl c3RvbiwgVkEgMjAxOTA8YnI+DQo8YnI+DQo8YSBocmVmPSJodHRwOi8vdmVyaXNpZ25pbmMuY29t LyI+PHNwYW4gc3R5bGU9ImNvbG9yOiM5NTRGNzIiPlZlcmlzaWduLmNvbTwvc3Bhbj48L2E+PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+JnF1b3Q7S29uZGEsIFRpcnVtYWxlc3dhciBS ZWRkeSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1j QWZlZS5jb20iPlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb208L2E+Jmd0Ozxicj4N CjxiPkRhdGU6IDwvYj5TdW5kYXksIEZlYnJ1YXJ5IDIxLCAyMDIxIGF0IDY6NDggQU08YnI+DQo8 Yj5UbzogPC9iPiZxdW90OzxhIGhyZWY9Im1haWx0bzpzZWNkaXJAaWV0Zi5vcmciPnNlY2RpckBp ZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpzZWNkaXJAaWV0Zi5vcmciPnNl Y2RpckBpZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86cmVnZXh0QGlldGYu b3JnIj5yZWdleHRAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86cmVnZXh0 QGlldGYub3JnIj5yZWdleHRAaWV0Zi5vcmc8L2E+Jmd0OywgJnF1b3Q7PGEgaHJlZj0ibWFpbHRv OmRyYWZ0LWlldGYtcmVnZXh0LXVuaGFuZGxlZC1uYW1lc3BhY2VzLmFsbEBpZXRmLm9yZyI+ZHJh ZnQtaWV0Zi1yZWdleHQtdW5oYW5kbGVkLW5hbWVzcGFjZXMuYWxsQGlldGYub3JnPC9hPiZxdW90 Ow0KICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1yZWdleHQtdW5oYW5kbGVkLW5hbWVz cGFjZXMuYWxsQGlldGYub3JnIj5kcmFmdC1pZXRmLXJlZ2V4dC11bmhhbmRsZWQtbmFtZXNwYWNl cy5hbGxAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5bRVhURVJOQUxdIFNl Y2RpciBsYXN0IGNhbGwgcmV2aWV3IG9mIGRyYWZ0LWlldGYtcmVnZXh0LXVuaGFuZGxlZC1uYW1l c3BhY2VzPGJyPg0KPGI+UmVzZW50LUZyb206IDwvYj4mbHQ7PGEgaHJlZj0ibWFpbHRvOmFsaWFz LWJvdW5jZXNAaWV0Zi5vcmciPmFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxi PlJlc2VudC1UbzogPC9iPkphbWVzIEdvdWxkICZsdDs8YSBocmVmPSJtYWlsdG86amdvdWxkQHZl cmlzaWduLmNvbSI+amdvdWxkQHZlcmlzaWduLmNvbTwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFp bHRvOm1hcnRpbi5jYXNhbm92YUBzd2l0Y2guY2giPm1hcnRpbi5jYXNhbm92YUBzd2l0Y2guY2g8 L2E+Jmd0OywgJmx0OzxhIGhyZWY9Im1haWx0bzppZXRmQGFudG9pbi5ubCI+aWV0ZkBhbnRvaW4u bmw8L2E+Jmd0OywgJmx0OzxhIGhyZWY9Im1haWx0bzpnYWx2aW5AZWxpc3R4LmNvbSI+Z2Fsdmlu QGVsaXN0eC5jb208L2E+Jmd0OywNCiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnN1cGVydXNlckBnbWFp bC5jb20iPnN1cGVydXNlckBnbWFpbC5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9Im1haWx0bzpi YXJyeWxlaWJhQGdtYWlsLmNvbSI+YmFycnlsZWliYUBnbWFpbC5jb208L2E+Jmd0OywgJmx0Ozxh IGhyZWY9Im1haWx0bzpmcmFuY2VzY2EucGFsb21iaW5pQGVyaWNzc29uLmNvbSI+ZnJhbmNlc2Nh LnBhbG9tYmluaUBlcmljc3Nvbi5jb208L2E+Jmd0OywgJmx0OzxhIGhyZWY9Im1haWx0bzpiYXJy eWxlaWJhQGNvbXB1dGVyLm9yZyI+YmFycnlsZWliYUBjb21wdXRlci5vcmc8L2E+Jmd0OywNCiBE YXZpZCBTbWl0aCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRzbWl0aEB2ZXJpc2lnbi5jb20iPmRzbWl0 aEB2ZXJpc2lnbi5jb208L2E+Jmd0OywgRGF2aWQgU21pdGggJmx0OzxhIGhyZWY9Im1haWx0bzpk c21pdGhAdmVyaXNpZ24uY29tIj5kc21pdGhAdmVyaXNpZ24uY29tPC9hPiZndDs8YnI+DQo8Yj5S ZXNlbnQtRGF0ZTogPC9iPlN1bmRheSwgRmVicnVhcnkgMjEsIDIwMjEgYXQgNjo0OCBBTTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlJldmlld2VyOiBUaXJ1 bWFsZXN3YXIgUmVkZHk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj5SZXZpZXcgcmVzdWx0OiBIYXMgbml0czxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPlRoaXMgZG9jdW1lbnQgZG9lcyBub3QgZGVmaW5lIGFueSBuZXcgRVBQIHByb3RvY29sIGVs ZW1lbnRzLCBpdCBzcGVjaWZpZXMgYW4gb3BlcmF0aW9uYWwgcHJhY3RpY2UgdXNpbmcgdGhlIGV4 aXN0aW5nIEVQUCBwcm90b2NvbC4gSXQgZG9lcyBub3QgZGlzY3VzcyBhbnkgc2VjdXJpdHkgYXNw ZWN0cyBvdGhlciB0aGFuIHJlbHlpbmcgb24gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zDQog aW4gRVBQIHByb3RvY29sIFtSRkM1NzMwXS4gPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+VGhlIHNlY3VyaXR5 IGNvbnNpZGVyYXRpb25zIGRlc2NyaWJlZCBpbiB0aGVzZSBvdGhlciBzcGVjaWZpY2F0aW9ucyBh cHBseSB0byB0aGlzIHNwZWNpZmljYXRpb24gYXMgd2VsbC4NCjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkNv bW1lbnQmZ3Q7IFdoYXQgb3RoZXIgc3BlY2lmaWNhdGlvbnMgYXJlIHlvdSByZWZlcnJpbmcgdG8g PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPi1UaXJ1PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ib2R5Pg0KPC9odG1sPg0K --_000_PH0PR16MB4118027581BD266B23DC3ED4EA809PH0PR16MB4118namp_-- --_004_PH0PR16MB4118027581BD266B23DC3ED4EA809PH0PR16MB4118namp_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=4114; creation-date="Tue, 23 Feb 2021 08:53:28 GMT"; modification-date="Tue, 23 Feb 2021 08:53:28 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAEkAAABACAIAAADZHs1DAAAP1ElEQVRoBe2aa3CU1RnHN3vLJtmQ hEtiwlUBtZUUCiU6tU7wVhinjOB0xmJnFIdpO1Y6DY586Iwdo36gLc4Iip3pVAL9IKjTDnhDEEWC 1GoICHLRctEkXHIPuZHr7qa/c553T152N9lsNvnWM5nDec97Ls//+T+X854lZWBgwDFuRRaXOiUl hX2kHrcNr1vYfd1T0g/ACIVCQV0CgQD/8miwOZ1Ol8vldrupKTyOK9QU2ThpUA4w9Pf39/X19fT0 UCsYYHA6QcLiYKCwF2MEMNh8Pp/X6/V4PAxOXoDoFcYAG7ICplsXNvClpSFvipAimGy1wQmrMgV4 aUzxekEbLV8yPUlhE66u6YJkqT6fMjKDyjRs2GgaeNKA587OTqZnZGSMLYejx4biEautrQ3eUlNT LUiCx6AyjWHhAbKrqwuEwMNQxYyTYUzmjhIbboMo7e3tyIwoMYA5nZ+duXiyur6ju88u5ZL5s+ff mJ+TmUan4JUGNVbQ2tqKNvx+PwTaZ42uPRpseBeoYMygUvRoijp7AnuPXdhz9PyeyvPI7khxqtoU yTcDofk35j1674LH7luY7U8zVsoo2qgMc5gwYQIeaOaNrpEwNoCBqraujgBALDeoOnr6X9t/4rX9 x9t7gg6Xx+F0K1QEQOBRFKoBVYdCjoGgI6T+MtO9j9+74Nlf3gNChhiQHR0dwMvKykoSXmLYMEUY u3T5MoyxMZEDbJTK81fWlR242NrrcHsdToBpSBZpsKeps0gDocYWDDhC6i8zzbO9ZOWKH38/Ah5K hL1kjDMBbMQMDKa6pgaE6enpggp4r+z5cvOeLx0en6bLpRkTbIKKWjGnijoCgQ3qdB3sdwR6FcJg 8NF7Crc99XNeG/ZQIvkQ3xt1bhgpNrYhlMFYY0NDVna2Bczp/MPrh3dVVjncAHOrvxSwuSw3U3SF SVPIxDKpBVuYQOABMtg3f+aUA39aY/fApqYmLB89CmBZY+T1SA8EcIWb1dfXk8QIaFIUsKM1Dk+a w+1xuLQ1Ag9s1p9uC9rBTk2sUoRLq8Ojp6cy/UR100MvvK41oPkdGMjJySF3svXI8dhHjggbSDhD ED8wSxgTYLsqLihgbsRCULBp3gghBobyN5AY33NalKoeuA2rgInYs1rHU37m4rq/vW/gsReZk63Z 0S70CNsjwiakNTU2etxuAXax5dpf3juuuBJgFiQtPdgUKv3n1DZpPdrawFPDwvBoW/C8L79bceD4 eQOPcELMHB118bHhab29vYq0UIhjvGB77p+VHeRk7MpCIn5lgobRrHY5noCnQgrD5JX5sJJOPZ0Y q/h3rdn0NpsaePgbAkiPWXckjfjfOJytMHrcmngltnGsqqmyqllZUYozK82z4MY8tZNYmtnT6T5+ saWtV1DpXuARRYLB4ltyVWw0hZRA4VDS1Xfiu3pe1TR3vLDz4B9XLSGEAIlw0tzcTJ1oPoiPDXto uXoVzfkzM/kyQ4y/f3JW0QVpig3H7vXLJfkqEW3l4OlLd/95n7JbU0KB4rkTDz6z3HTYGyVlH5+o alTjQ6FtHx575hfFvAUeXodaESNRbHFsErWRQxsaGpRBpqRQX2ru/LKmRScxZZBtnd0lr31oF9G0 l9w2rfjmXJWppdDo79n+xL1mgL1RVd+6+f1jWmUq9dc0tb/z+TfsTmEYB2jEkLZ91vDtONgwQhgj ZavPaf1N/enZegUM3uTP7f3Hga8OnqyKuc323xQ7OH9ICQaefWjRrCkTYo5c/fK7yshlTXVkc739 +RlGanQDREvEEI+IOT1mZxxsBH0WlfO+uioIhQ6dbdSuhffrUI5Aqf7SNz6NuTpInl2xQHlXKJDl CZU8sCDmsN1fnC0/16wCiVqTU6jS3cGvqoUoakk87B9z+lCdcbChKoAJY7SBV9PUobMTE3VwQ9Me X/nXtds/Ph5zj5JlhVk+J2erTY/+JDvDF3tM2ceaNI41kjzw5BTMsrWzx8DD8caBt76+YEDZlaYt 1N4bUqo1fyBE39700rf+09rZHS16dkbqplWL5xf4Vy9Rp+HoUvrG4eo2/emgzmgUWVzBO/Fdrdgk vZjlGPPG0nClCVP1uXpIE6qtPKVBOtF6dUv3pt2faeEiK1Bt/+39kb36ufVaz6YPz6jEDf+WvvQL Mor+WhVsSozwfVnMdWJ2DpcDZF0MElj9+kKuvZuERdEJ16p1B/nAk/bcv46svn/RrLxs3XVdBaUp KzYoR7UX1IS7qg+I62+BLALVUGSQGQbkyM/N129m31jnFukQ3kBoey9bWhuTudWXmze9ZOsQ+aBw 1oN3znOkZTsyJg3+pecQh3QCDFvB4AaqR1NlgZI3IwfG+OGwqdda0xg6qRPjnJGdqveIAKb7OBx6 fG8frR4qH2xaXZzl12diuDJ/KjbiYNevqriytGboMsLooSOq4mBDT1wbWLwFgz5sx3xZyh1B2GaU fDqolJR9FHNn8kHJT2+77rRlH6ew8EUnqHRjYGD65Ex1Ka0Lyk2INJaLg43DzqRJk8BG4WQAgd/L y9ASKFfQsoWl4UH7z4lL7cPkg5k5sdKAAFPLWahYnNuU6ZMnWDFkYEBpOcIt9fbDVHGwyRcUVyNg 6+ntxeVmT0pVx6jBb2cjjd6FtOtJKyk7MFQ+KF35Qz6xBwViHWV++m9wzRD03nXrVIs09tZxUhxk cG68VhxsqIrEkpOdDWPwxi43TUzVt1TcC+g/uyHRxnncqW39rtK3hsgHxbfOn04g1WFJARNcRkE0 9LKh4AOL5hjSerq7EWOMecMSIC0/Px9UwOMzceE0/+QMtyUBcqg7Of5EOK1Jwo/Ht/m9So6/0Zol oVXVNmueBJidNFmKNdVF2LKFsxVvmjTUihhj7G8GG1KyC2dLEN4xw69ub7QEgyAlDIgT6qCijr9R pfTNf7f1Ch4YE1O0kabW5Nqr/+E7b8HfLN50Khh7bMjGVSQ2mX/DDRBHsEKFS+dOSHMNqAO+OgSL 74VVrkxUZUYss/ybuoh8UNXYvnnfaXUNQRkExly9iFpKX10G+p56sMgAQ6EYJGJEKSpORxx/YzZW zlf9DwoL+aUQeHyDp7oGfnW7/nYWNataY6OWBtN0UFm95QP7/qu37FUpnnAKfqWFsEbURI0KfQFs +aJpE/3GIFEoAiTqbEoE+95DtbGHvLy8adOmCTwunublehfc4NWWGWZPtG6FUO1Lbm91c9emdypk WT7DYVJhpoijGkiWjrilDMzLz/j9zxYpLwt7mvwEOZRsw/SPCBs649ejosWLyePA69W/jD6+aNL0 TKe+NhV42j5F/cKeTnelbx6WfKDcT04h8lZpQXOlv+5knUxP8K+/vl9QCTyiCVuPgjQwu0pLS4eB Lq+IKOQWNiDF1dXVYVB89fi8njtmZp6u62rvjfpk5IwiQcXh6O3rr2u6WtXQ/mZFtcKmStjBFHth eMFApjuwY+19N+XlMEIdwrjCCAYzMzPBlmhmU5uwAIqRVtyaKNLS0rJv//5Lly6xGT/iZPj9AYfr xU8bLnaElNzqRkDukuUTUx8TddxT0UUNIHnoqIizKfYEWBBVwdi2J+6bN30SK8tPKMjD3dbEiRPx iLiyxRyQADa0QH6rra19b88efkayw3v3m7aPLnQp0YmB6kssjA1IFKU+/cVptXUUUf7JlZ6y5x/N yN782J1ZGT4FTBcuDjP9fo57OFuiac3gTAAbc/ABAsmV2toP9u418Pgxghh9rrlv29Hmpi5NINjI 4NQUqa0NNWkqPMIbpAVmZPseL5774KJZYVBwlkLQz87Kys3NhTf6ramJ/5MYNtYHHj/ocM1sh+f2 eOTHpM8vdh3+ruPrhm7NXvhT2vqGYbZgA1VozpSMh4tmLl84w6CiweJYfu4UVYj7yQBjs4SxCTzY u3r16ifl5TU1NUigfkB1uVAzJkTIaekOfl3f9d/G3sbOvsZr/U3X1HVLps81c2J6flba3Dz/XTfn FWSnMYW5jBcM5DHaBfn5+FiSjLEdZTTYmCYK5grs9JkzlZWVJAaBh5QKIeda/R9nlNxadgEgtYUG VBqZOqeyXCgEpKkFBfJLt6DVEo6+GiU2NiS04PHYZ0Nj4+lTp85duECXoYIjEgg9/LcfQBqcNpaY TgEXMPhpG1Rgww6ZOOrgEaGG0WOThYRAEDa3tJw/f/7Ct98SCTQfihXT4AGcBApmCXtkTMATCfNy c/kNEVTEesZHyJfMY7LYZG/Uj7eQIQBZ39DAz6tkQvXY3W2HRxuLJeqo+D55MkdwIOGi/IgB4GRg xJw7NthkaTgUkPK5QI3R0kM/AwQkJgcSKKKmCIcxJUu+cyyxGWnEl4BEkTav8CIKCCnSNuPHqTEu 2MZJ1kSXHUvfTXTv8R7/f2zjreHxWT/hS4hkxLhy5QqHNVaYOnUqoX/4pS5wGNCFnE4CHH5wzLfu jS++eOXyZd5t2LBB9tu9e3d5eTk9a9as2bp1a/S0tWvXzp49+9VXXyVZ298iRFFR0dKlS+k0b196 6SUeQcVSJD0znpErV65kRzBs2bKF/mXLlsncYQYzbN26ddQFU6euf/ppGma6SLVz586TJ0/Sj/DO 24uKaFGki8Y5LTFJdt68efrNSCtE37t376lTp6InRABjQEVFxfPPP09+jxgMMKCKFpCBIoNf0fjN YPg4dOiQeTQNVIZRiHW4CwsLd+3axTtIWLx4Mad7oZF+M2HOnDlPPvmkeYxoGGY2btzIK4SOUAqq FVmLi4tXrFgBHlTAMFQbbZm8EskeeeQR5GFBoYKLtoh9GQmSiE4MyojqxpThFzzwtmrVKmNmdmxI tm/fPrOKWI55lAYGKQ2RLOKtPLIFPKBXZALkUGPoRyQBRhupMNdol2MjWImGZ5ZVsQSzZBBDsQex TCSw616MzcyJwIZr8UqYoQHJZqQ00KWoz74OW+BvBkDEFGEJecSm5C3jCwoKpM10BIZ8NBUx1zwq bMYsASa82UljgCjbzIloGKrpR4sYXsQAHn+3di0mhCeLwdODZDt27IjYyEzkrYyxLy6dMoaNkNau LDPXNBQ2Y5Zsb2aaETTQjTFie7+0MZivTp4UoQEW7UIyTJyNNmywkRjIZR2i7WsKIbzFaNmX6McY O3syWGgnRNkB29ehbZ1LltiUjedgRfZxfKoQD0xBOPtbTPShlSulJ1oI+omchEQizZEjR4hV9PCx J+ONl8ojtTAJIWVlZYL8iwrrZtqMkQZeE23/9jGKN4rdNuxteQsnkoLkMTpsogtmiUmDxO6rTEG1 ol2MUFaQGrvCZIyjSidWwDqMp6bYx0e3iaVoLbpfeixsGBI2I3qyR56YihH3jXBiHF0AIBDY7G8J GPDDecDIyiO7SEzCumQX4RC069evh38ZzFsEE6+jjdARg9GF/a0d5/8ActOtScHpPCkAAAAASUVO RK5CYIIAAAAAAA== --_004_PH0PR16MB4118027581BD266B23DC3ED4EA809PH0PR16MB4118namp_-- From nobody Wed Feb 24 18:11:04 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 561623A0C6D for ; Wed, 24 Feb 2021 18:10:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=salowey-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B29yKqucucfT for ; Wed, 24 Feb 2021 18:10:52 -0800 (PST) Received: from mail-lf1-x12f.google.com (mail-lf1-x12f.google.com [IPv6:2a00:1450:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 616E13A0C77 for ; Wed, 24 Feb 2021 18:10:52 -0800 (PST) Received: by mail-lf1-x12f.google.com with SMTP id u4so6227201lfs.0 for ; Wed, 24 Feb 2021 18:10:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salowey-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=48YcDm9c/I0Gs87VMmNMcSN0unJHvvNeyXB+nXJk8TY=; b=buEq94Kp/+1bWD5QZGMN0HfoyKu2Dhtug4cR1p0F8ZeXWAfvPefj/9PjjzJqC1hz/C ULprzXUCEOjrBf9hzcARoZ4roUC9c5cyXju0VDmXCQOxtMVGNN3hcQpyYalaUoyx6px7 s83AZNSiAVKtIbxuZxoXsFdqCPHZLJBN+vQ6fKEANVbZtISN209GLylEEuT4c+mJXFpy JB6gQasK9fvS7cA7MD+IoQBQonkkx2d2H/WznAhCTfSzrGTjq9WW8haRdzqNjK6rflhQ GZji4m0ePgw5DfVj+Rsc+VR0w4+s9nsJ7gXVnlkXe+ijbwvBKeFJp9p/HlXjqjgiJp6u FjIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=48YcDm9c/I0Gs87VMmNMcSN0unJHvvNeyXB+nXJk8TY=; b=V/x8WVpbLn55BU18MKWAkdGY9cT4YYRWtdCjxXi90Su2MK0cW5HcKgiveoH2RDyOZU lsdZX/ePgs6BEB5Kki3OvJjrzz18qBaW1gxb+FMtn37BaT4cte8M0EYVZ3TktwveZ1Kn 7lohD8bg11tRspOHPYbIHmuhAwCuKjJuqox1wMBOHJQskqHQoUWBvO4Fj+Df+dyNNWli 9S0amrMXKzKj0v+7b9qLULOOc8uDHOXMSD2xoKjHyTLnBoo/wyJl2unIoUcrqetDaULg 1K8SCNzlFSJ4Cmwy7HQrvhAZVtvZMnGQM4aaa1ldSR2ZhBoTT07I43+utenxlxRhDJYH yA7w== X-Gm-Message-State: AOAM5317uI6DkSwcfpYO/yyAVdHf4FxQVexlipgyNG1bo0lGWGj6NcBO ptSUoUW1BM0dI6RhtHQQi6gqHye9iQ2hJUw5iRh80A== X-Google-Smtp-Source: ABdhPJz5kgxz0lVvkNg/TN+lKBGTnghmLz0AgCUVWLqBqV3vWnnMM028RvxI7Vivr9/uLz7wl38thPnFLPh2H/rykl4= X-Received: by 2002:a05:6512:38ce:: with SMTP id p14mr533458lft.428.1614219050457; Wed, 24 Feb 2021 18:10:50 -0800 (PST) MIME-Version: 1.0 References: <161272369978.20616.15063633580755015902@ietfa.amsl.com> In-Reply-To: From: Joseph Salowey Date: Wed, 24 Feb 2021 18:10:39 -0800 Message-ID: To: Vittorio Bertocci Cc: "secdir@ietf.org" , "draft-ietf-oauth-access-token-jwt.all@ietf.org" , "last-call@ietf.org" , "oauth@ietf.org" Content-Type: multipart/alternative; boundary="00000000000017aaba05bc1fa905" Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-oauth-access-token-jwt-11 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Feb 2021 02:10:55 -0000 --00000000000017aaba05bc1fa905 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, Feb 20, 2021 at 12:42 AM Vittorio Bertocci < vittorio.bertocci@auth0.com> wrote: > Thank you Joseph for your comments! > > [Joe] Thanks for your response, comments inline below: > > 1. (Editorial) What is the relationship between this document and RFC > 7523. > > They are using JWT for different purposes, but I think it would be > useful to > > clarify this in the introduction. > Good point, I agree it would be good to preempt doubts on this. I am > suggesting to append the following language to the current introduction > (pardon the XML). > > Please note: although both this document and b= oth > use JSON Web Tokens in the context of the OAuth2 framework, the two > specifications differ in both intent and mechanics. Whereas RFC7523"/> defines how a JWT Bearer Token can be used to request an acces= s > token, this documents describes how to encode access tokens in JWT format= . > > [Joe] Yes, that looks good to me. > > 2. (Issue) The specification does not specify any mandatory to > implement for > > the recommended asymmetric algorithms. This will not help interop. > Perhaps > > specify one or both of "RS256" and "ES256". > The current text doesn=E2=80=99t mandate a format for two main reasons: > - thanks to the AS metadata the negotiation between a RS and an AS is ver= y > easy to perform, hence the likelihood of interop issues at runtime is ver= y > low > - worries that as crypto advances, what we mandate at this point might no > longer be suitable. > That said, if you feel strongly about this please do let me know, and I > will be OK with adding RS256 as a mandatory supported alg for both AS and > RS. > From a cursory check, ES256 doesn=E2=80=99t seem to enjoy as widespread s= upport at > the moment (see https://jwt.io/ libraries list) hence I would be hesitant > to make it mandatory. > > [Joe] I think you should add RS256 as mandatory to implement. Since RFC 7518 does not mandate an asymmetric algorithm it's possible that two implementations make different choices on which one to support. > > 3. (Question) Is it currently possible to use the JWT access token i= n > a mode > > other than a bearer token? For example is there a way to bind the > JWT to a > > verifiable key or identifier. If there is, there should be some > discussion of > > this in the security considerations. If not, do the authors know if > there is > > any work planned in this area? > At this time, the main mechanisms that can work with non-bearer ATs are > dPOP and MTLS. In both cases, the binding mechanism relies on a cnf claim > (or reference to it) - which can be added to a JWT access token without > changing any of the guidance in this specification. There's a quick prime= r > for both approaches in > https://auth0.com/blog/identity-unlocked-explained-episode-1/. Given that > there are no changes in the AT format and verification, and MTLS/DPOP wou= ld > be purely additive, any language here would likely be functionally > equivalent to "You should be aware that MTLS exists, and the tokens defin= ed > here do not break it" (DPOP isn=E2=80=99t mentioned because it's still in= progress) > but my intuition is that the compatibility should be assumed, with a note > being required when it's not the case and the reader should be aware of > potential problems. What do you think? > > [Joe] Thanks for the explanation. I don't think there needs to be anything added to the document for this. --00000000000017aaba05bc1fa905 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Sat, Feb 20, 2021 at 12:42 AM Vitt= orio Bertocci <vittorio.b= ertocci@auth0.com> wrote:
Thank you Joseph for your comments!


=
[Joe] Thanks for your=C2=A0respons= e, comments inline below:
=C2=A0
> 1.=C2= =A0 (Editorial) What is the relationship between this document and RFC 7523= .
>=C2=A0 =C2=A0They are using JWT for different purposes, but I thin= k it would be useful to
>=C2=A0 =C2=A0 clarify this in the introducti= on.
Good point, I agree it would be good to preempt doubts on this. I am= suggesting to append the following language to the current introduction (p= ardon the XML).

Please note: although both this document and <xre= f target=3D"RFC7523"/> both use JSON Web Tokens in the context= of the OAuth2 framework, the two specifications differ in both intent and = mechanics. Whereas <xref target=3D" RFC7523"/> defines how = a JWT Bearer Token can be used to request an access token, this documents d= escribes how to encode access tokens in JWT format.


[Joe] Yes, that looks good to me.=C2=A0
=C2=A0
>=C2=A0 =C2=A0 2.=C2=A0 (Issue) = The specification does not specify any mandatory to implement for
>= =C2=A0 =C2=A0 the recommended asymmetric algorithms.=C2=A0 This will not he= lp interop.=C2=A0 Perhaps
>=C2=A0 =C2=A0 specify one or both of=C2=A0= "RS256" and "ES256".
The current text doesn=E2=80= =99t mandate a format for two main reasons:
- thanks to the AS metadata = the negotiation between a RS and an AS is very easy to perform, hence the l= ikelihood of interop issues at runtime is very low
- worries that as cry= pto advances, what we mandate at this point might no longer be suitable.That said, if you feel strongly about this please do let me know, and I wi= ll be OK with adding RS256 as a mandatory supported alg for both AS and RS.=
From a cursory check, ES256 doesn=E2=80=99t seem to enjoy as widespread= support at the moment (see=C2=A0https://jwt.io/=C2=A0libraries list) hence I wou= ld be hesitant to make it mandatory.


[Joe] I think you should add RS256 as mandatory to implement.=C2= =A0 Since RFC 7518 does not mandate an asymmetric algorithm it's possib= le that two implementations make different choices on which one to support.= =C2=A0=C2=A0
=C2=A0
>=C2=A0 = =C2=A0 3. (Question) Is it currently possible to use the JWT access token i= n a mode
>=C2=A0 =C2=A0 other than a bearer token?=C2=A0 For example = is there a way to bind the JWT to a
>=C2=A0 =C2=A0 verifiable key or = identifier.=C2=A0 If there is, there should be some discussion of
>= =C2=A0 =C2=A0 this in the security considerations.=C2=A0 If not, do the aut= hors know if there is
>=C2=A0 =C2=A0 any work planned in this area?At this time, the main mechanisms that can work with non-bearer ATs are d= POP and MTLS. In both cases, the binding mechanism relies on a cnf claim (o= r reference to it) - which can be added to a JWT access token without chang= ing any of the guidance in this specification. There's a quick primer f= or both approaches in=C2=A0https://auth= 0.com/blog/identity-unlocked-explained-episode-1/. Given that there are= no changes in the AT format and verification, and MTLS/DPOP would be purel= y additive, any language here would likely be functionally equivalent to &q= uot;You should be aware that MTLS exists, and the tokens defined here do no= t break it" (DPOP isn=E2=80=99t mentioned because it's still in pr= ogress) but my intuition is that the compatibility should be assumed, with = a note being required when it's not the case and the reader should be a= ware of potential problems. What do you think?=C2=A0


[Joe] Thanks for the explanation. I don't thin= k there needs to be anything added to the document for this.=C2=A0=C2=A0

=C2=A0
--00000000000017aaba05bc1fa905-- From nobody Thu Feb 25 05:43:56 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 67D883A1534 for ; Thu, 25 Feb 2021 05:43:54 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Tero Kivinen via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 7.26.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: secdir-secretary@mit.edu, Tero Kivinen Message-ID: <161426063391.28546.12112320790102609737@ietfa.amsl.com> Date: Thu, 25 Feb 2021 05:43:54 -0800 Archived-At: Subject: [secdir] Assignments X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Feb 2021 13:43:54 -0000 Review instructions and related resources are at: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview For telechat 2021-02-25 Reviewer LC end Draft Brian Weis 2021-02-19 draft-ietf-lamps-cms-aes-gmac-alg Last calls: Reviewer LC end Draft Derek Atkins 2021-02-19 draft-ietf-tsvwg-transport-encrypt John Bradley 2021-03-16 draft-ietf-idr-bgp-ls-registry Nancy Cam-Winget 2021-03-16 draft-ietf-acme-authority-token-tnauthlist Shaun Cooley 2021-02-25 draft-ietf-v6ops-ipv6-ehs-packet-drops Steve Hanna RNone draft-ietf-sfc-nsh-integrity Leif Johansson None draft-ietf-netconf-crypto-types Aanchal Malhotra 2021-01-26 draft-ietf-mpls-lsp-ping-registries-update Kathleen Moriarty 2021-02-05 draft-ietf-detnet-ip-over-tsn Sandra Murphy 2020-10-15 draft-ietf-tls-external-psk-importer Tim Polk None draft-ietf-opsawg-finding-geofeeds Sean Turner 2021-02-25 draft-ietf-ntp-port-randomization Mališa Vučinić 2021-02-24 draft-ietf-curdle-ssh-kex-sha2 Samuel Weiler 2021-02-22 draft-ietf-tls-dtls13 Brian Weis R2020-12-02 draft-ietf-core-dev-urn Brian Weis 2021-02-19 draft-ietf-lamps-cms-aes-gmac-alg Klaas Wierenga 2020-12-02 draft-ietf-core-echo-request-tag Klaas Wierenga 2020-05-26 draft-ietf-kitten-krb-spake-preauth Christopher Wood 2021-03-17 draft-ietf-core-yang-cbor Paul Wouters 2020-09-08 draft-ietf-i2nsf-capability-data-model Liang Xia 2021-03-17 draft-ietf-core-sid Early review requests: Reviewer Due Draft Tina Tsou 2021-02-15 draft-ietf-idr-eag-distribution Paul Wouters 2021-02-19 draft-ietf-idr-bgp-ls-app-specific-attr Dacheng Zhang 2020-12-07 draft-ietf-idr-eag-distribution Next in the reviewer rotation: Alan DeKok Linda Dunbar Donald Eastlake Shawn Emery Stephen Farrell Daniel Franke Daniel Gillmor Phillip Hallam-Baker Steve Hanna Dan Harkins From nobody Thu Feb 25 06:14:29 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F2273A15BB; Thu, 25 Feb 2021 06:14:18 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?b?TWFsacWhYSBWdcSNaW5pxIcgdmlhIERhdGF0cmFja2Vy?= To: Cc: curdle@ietf.org, draft-ietf-curdle-ssh-kex-sha2.all@ietf.org, last-call@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.26.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161426245763.32636.14586046669535474103@ietfa.amsl.com> Reply-To: =?utf-8?b?TWFsacWhYSBWdcSNaW5pxIc=?= Date: Thu, 25 Feb 2021 06:14:18 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-curdle-ssh-kex-sha2-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Feb 2021 14:14:18 -0000 Reviewer: Mališa Vučinić Review result: Has Issues I reviewed this document as part of the Security Directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the Security Area Directors.  Document authors, document editors, and WG chairs should treat these comments just like any other IETF Last Call comments. I have found this document to have several issues related to the normative language, imprecise wording, and inconsistent structure. Security Considerations section is too generic and needs to detail the considerations of using specific methods. My detailed comments are given below and I would suggest a major editorial pass over the document. Technical comments =================== Section 1.2.2. “The minimum MODP group that MAY be used is the 2048-bit MODP group14. Implementations SHOULD support a 3072-bit MODP group or larger.” - The use of RFC2119 keywords here does not seem appropriate. These are the guiding principles for specifying requirement levels of specific key exchange methods, which are given in Section 3. Section 1.2.3: “The use of a SHA-2 Family hash with RSA 2048-bit keys has sufficient security.” - Please define “sufficient” security “The rsa1024-sha1 key exchange has less than 2048 bits and MUST NOT be implemented.” - My view of Sections 1.2.1, 1.2.2 and 1.2.3 is that they give a recap of public-key approaches with corresponding security levels when used with different parameters. II am missing how a normative text on rsa1024-sha1 key exchange belongs here, and not to Section 3.4. Only in this section (compared to 1.2.1 and 1.2.2) you reference specific SSH key exchange methods. What does the security strength column in Table 3 refer to? The security level of the RSA variant or of the hash function? Please make this consistent with 1.2.1 and 1.2.2. Section 3.1: “All of the key exchanges using the SHA-1 hashing algorithm should be deprecated and phased out of use because SHA-1 has security concerns, as documented in [RFC6194].” "It is reasonable to retain the diffie-hellman-group14-sha1 exchange for interoperability with legacy implementations. The diffie-hellman-group14-sha1 key exchange MAY be implemented.” - This text is conflicting with the statement just above that SHA-1 should be deprecated, as you keep SHA1-based method as MAY for legacy interop. Could you point me to the relevant discussion in the working group where this decision has been made? Could you comment in the text on security properties of the construct. “The SHA-2 Family of hashes [RFC6234] is the only one which is more secure than SHA-1 and has been standardized for use with SSH key exchanges.” - “is the only one which is more secure than SHA-1” seems too general of a statement, what about SHA3? Section 3.2.3: - Title of the section got me confused. Sections 3.2.2 and 3.2.1 already discuss ECDH-based key exchange methods. Could you make a clear differentiation between the methods referenced in this section in terms of their cryptographic core from those discussed in 3.2.2 and 3.2.1 “All of the NISTP curves named therein are mandatory to implement if any of that RFC is implemented.” - Since this document does not update RFC 5656, I am missing how it is appropriate to make this statement. Section 3.3.1: “This random selection from a set of pre-generated moduli for key exchange uses SHA2-256 as defined in [RFC4419].” - RFC 4491 defines two key exchange methods, diffie-hellman-group-exchange-sha1 using SHA1, and diffie-hellman-group-exchange-sha256 using SHA-256. In this section you do not mention the former. Phrasing “This key exchange MAY be used.” leaves ambiguity which of the two methods you refer to. Section 6: - Security Considerations section is extremely generic and needs to be improved. Referencing security considerations of the SSH protocol in RFC 4251 is appropriate, but since the point of this document is the update of the requirement level of key exchange methods, the last paragraph should be extended and more specific. While the discussion in Section 1.1 gives details on the attacks on SHA-1, which can be referenced here, I would suggest reiterating in the Security Considerations the practical consequences of using the SHA-1 -based methods that are listed as SHOULD NOT, but also the rsa1024-sha1 method that is listed as MUST NOT. Please stress the security considerations of using diffie-hellman-group14-sha1 which is still a MAY. Editorial comments and nits =================== - Please explicitly reference each table in the text. I would further suggest adding a table in each section discussing new requirement levels of specific key exchange methods, even if it would consist of a single entry, in order to have a consistent structure. Section 1: “This document updates [RFC4250] [RFC4253] [RFC4432] [RFC4462] by changing the requirement level ("MUST" moving to "SHOULD" or "MAY" or "SHOULD NOT", and "MAY" moving to "MUST" or "SHOULD" or "SHOULD NOT" or "MUST NOT") of various key-exchange mechanisms.” - The specific updates to these documents are spread out throughout the text and pretty hard to grasp. It would be nice to see Table 6 updated, by adding the reference RFC that is being updated, alongside the RFC specifying the key exchange method, and maybe an old requirement level. Section 1.1: - introduce protocol parameters I_C and I_S Section 3: “and provides a suggested suitability for implementation of MUST, SHOULD, SHOULD NOT, and MUST NOT. Any method not explicitly listed MAY be implemented.” - there are some explicit MAYs in the document, yet MAY is not listed here. Section 3.2.1: “The use of SHA2-256 (also known as SHA-256 and sha256) as defined in [RFC6234] for integrity is a reasonable one for this method” - “this” method not clear. Be explicit and mention curve25519-sha256 key exchange method. "it shares the same performance and security characteristics as curve25519-sha2” - the key exchange method as standardized seems to be curve25519-sha256. Section 3.2.2: “It uses SHA2-512 (also known as SHA-512) defined in [RFC6234] for integrity.” - “it” refers to the curve, not to the key exchange method. Rephrase to e.g. corresponding key exchange method(s) Section 3.2.1 and 3.2.2: - Shuffle the content in these sections, first introduce the key exchange methods, then talk about curves and hash function they use Section 3.2.3: - s/The are described in /These are described in - s/Diffie Hellman/Diffie-Hellman - s/elliptic curve Diffie Hellman/Elliptic-curve Diffie-Hellman Section 3.3.1: - You open a section with “This” which is confusing. Please rephrase. - Add a table summarizing the requirement level per method, even if it consists of a single method, in order to be consistent with other sections. Section 3.3.2 - Please add some context and differentiation from Section 3.3.1 - Can you reference the RFC that specifies the methods discussed in this section? Section 3.5 “There are two key exchange methods, ext-info-c and ext-info-s, defined in [RFC8308] which are not actually key exchanges.” - s/two key exchange methods/two methods From nobody Fri Feb 26 06:41:46 2021 Return-Path: X-Original-To: secdir@ietf.org Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C713C3A03EE; Fri, 26 Feb 2021 06:41:39 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Derek Atkins via Datatracker To: Cc: draft-ietf-tsvwg-transport-encrypt.all@ietf.org, last-call@ietf.org, tsvwg@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.26.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <161435049976.8163.13266299314342363126@ietfa.amsl.com> Reply-To: Derek Atkins Date: Fri, 26 Feb 2021 06:41:39 -0800 Archived-At: Subject: [secdir] Secdir last call review of draft-ietf-tsvwg-transport-encrypt-19 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Feb 2021 14:41:40 -0000 Reviewer: Derek Atkins Review result: Has Nits Hi, I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written with the intent of improving security requirements and considerations in IETF drafts. Comments not addressed in last call may be included in AD reviews during the IESG review. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: * With Nits Details: * Section 2: Unencrypted transport headers provide information can support network operations and management I think this is missing a "that" -- "..provide information that can.." * Section 3.2: For example, [I-D.ietf-quic-transport] specifies a way for a QUIC endpoint to optionally set the spin-bit to reflect to explicitly reveal the RTT of an encrypted transport session to the on-path I think "to reflect to explicitly reveal" is incorrect; it should be either "to reflect" or "to explicitly reveal"... Or add a conjunction: "to reflect AND to explicitly reveal" (emphasis mine). * In section 4, Greasing: A protocol can intentionally vary the value, format, and/or presence of observable transport header fields [RFC8701]. This This suggestion has a negative security impact in that it could leave room for a hidden communication channel. A bad actor could intentionally vary those bits by inserting data they wish to exfiltrate. -derek From nobody Fri Feb 26 12:54:57 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E091C3A0890; Fri, 26 Feb 2021 12:54:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.66 X-Spam-Level: X-Spam-Status: No, score=-2.66 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.57, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pwYpXagweZjx; Fri, 26 Feb 2021 12:54:37 -0800 (PST) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640106.outbound.protection.outlook.com [40.107.64.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 877F03A0888; Fri, 26 Feb 2021 12:54:37 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Y3/l4dB0vPrYpfAaFsVCjWKTYf3ZiOu5PRtEFlACyuWzaqRTNB0RY5AYWHvzdiDYaPEhJCSb3KdkpqgyBLHA97j4klPAGlcqxmQNoY6HdUW4bJdiG016h1PE3guCA1i7xGMo8iJPZ8tEO2zw9IlCaLtx38Av+KOeEhQkTV8kqdX/aWnrCpA0Sm9Py/b4LNc/NXaI5JfesW61ioKqD0g6N6LtYgsiD8+4ERSFcmAywWQjzMjDG6Q0BJpGJcCk70gNa0JPkwbblPsy5pULZ3B6X+lYFdu0wT0MT5B5LRJg+lJ8n+p2tt5GPGa7gIvY585G04F4Jxzm+qccfAAAl4W/fg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VfttT5tRZM7MrLQXfIDGBUEW93ioQS747HuhHuM1ONU=; b=N7Pk3GegSmUwhcsRaa8ion32yowibpzScjrONIIzYpCuu5Qk+46K43+T/jZjClqfYCx50f1P2rO+9AW7JI793kb5VuIwBzjCmTwoR+oTETNlBY0VLB1mssvhqcPGobjVwLHcDiKG81duOkPKB5v1rUuwI8h3DPxkXDOv/08p6rOIJpv1I2mnszU4m07Ob9E4k7ZeHA5iCUN4CA7JIGZ3cJ+f0uEE6RZo3nxzItDSENTCDcuLJHwzoTgAwfczPDbByAIhyk9oulgCvfQwDmfLThfZNFDO0NSn0xcz4SVs5qulZojwonkFOlHTp6tieB/FjyA/2c2JEufAhCf/TxP5AQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VfttT5tRZM7MrLQXfIDGBUEW93ioQS747HuhHuM1ONU=; b=Bk1ZxCteAuhWF2Y9J6Ah6Fr+TAItavGOPtde1fuzEUPgE6cS+iOBRL62KK17AKwfsuCGDvB4RIyyTZxstQ3wqsRo3rexZDU7+8D3YE/uAOwSKZAIj0sy0bIgTOsY+42zSeZfsNfBx6ZDzaA/cnrWEmwRJ7YHUjugrbYvnBfhxZw= Received: from SN6PR00MB0429.namprd00.prod.outlook.com (2603:10b6:805:d::12) by SN2PR00MB0191.namprd00.prod.outlook.com (2603:10b6:804:14::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3933.0; Fri, 26 Feb 2021 20:54:34 +0000 Received: from SN6PR00MB0429.namprd00.prod.outlook.com ([fe80::3d4a:f218:c10c:e4f]) by SN6PR00MB0429.namprd00.prod.outlook.com ([fe80::3d4a:f218:c10c:e4f%4]) with mapi id 15.20.3935.000; Fri, 26 Feb 2021 20:54:34 +0000 From: Mike Jones To: "watsonbladd@gmail.com" , nat , "rdd@cert.org" CC: "secdir@ietf.org" , "oauth@ietf.org" , "last-call@ietf.org" , "draft-ietf-oauth-jwsreq.all@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-oauth-jwsreq-30 Thread-Index: AdcMgZCvYIwrbG0eQzWUUepTetS2xA== Date: Fri, 26 Feb 2021 20:54:34 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2021-02-26T18:45:46Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=d0870aa9-8291-4ab0-8ef5-bbc0f75710c3; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2607:fb90:b2a9:d916:758c:2f2d:f93b:98de] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: e11448f7-d2a1-436d-1e67-08d8da98b8dc x-ms-traffictypediagnostic: SN2PR00MB0191: x-ms-exchange-minimumurldomainage: arxiv.org#8096 x-ld-processed: 72f988bf-86f1-41af-91ab-2d7cd011db47,ExtAddr x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SN6PR00MB0429.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(376002)(136003)(396003)(39860400002)(346002)(66946007)(82950400001)(66574015)(186003)(166002)(66476007)(76116006)(86362001)(82960400001)(64756008)(966005)(478600001)(110136005)(7696005)(66556008)(316002)(83380400001)(54906003)(66446008)(8936002)(30864003)(33656002)(5660300002)(71200400001)(9686003)(55016002)(6506007)(10290500003)(52536014)(8676002)(8990500004)(4326008)(2906002)(53546011)(546114003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: =?utf-8?B?Zy9CcytEeTVCTERBMTFPclBPOXVIelllQjhQblZmNFVSaHNtVHRqZlRPV2Nr?= =?utf-8?B?TnIrMGlDYzl6Tk5pblRPOXA5Y2dhaHRiSHFId011cDVacnh4WDVLSHNMenJY?= =?utf-8?B?TVd4QndIaERnbTNUQ3lDNWhjdVowUFR2QW1LbSs3a2crTHFtSUdPMWV5QVNT?= =?utf-8?B?RElWNGFKNHlicnVzLzNwbVRlVUpwd3ovTnFpcVduWjZKSzZRWUVUV1JVNjdH?= =?utf-8?B?MU9nUVd6ZmpEeGsyYjdyZitacnFBWTlSZ1lSOHJ3OGVFRlgxc3V2V0txbktB?= =?utf-8?B?cHorWVRrcnBwa1E0d0pDcURUOUZyWFNhZUZQeG4vbHZtSnpSeVR5bTUwUjZh?= =?utf-8?B?OGN6amVPUDduczBkaFFqeml2SC9tZkx6ZlMrR2ZLNkZtb01vTS85YzRMT0ZH?= =?utf-8?B?TUhPc0wrYXdDWU1uYXVGZjA5ckt2RHRMV2lNY2lPc1BlR09wOHkvcTA0NTdZ?= =?utf-8?B?YmNDVmdpOFdTYzNzcVQ3THpkaUZrOWF1RFZsYUNib2g5MXQzaXN1b2tjbWFD?= =?utf-8?B?bnNzVGt1bUJyNVVBcDNBZ3BuN21VN28xTG53aEhDRWJJTDVpVzRma3FkZmdo?= =?utf-8?B?MzZ4U0NOZUZRak80WU1ZbzBxSEExenBIMVRJN1dkNkp6dUliV2QzU3MvR1pK?= =?utf-8?B?elRnVTBuRm93S0txTmI1Q05pbC9EbU9zMWU5ZG90WXV6b3B3ZVRrQmthSHBD?= =?utf-8?B?RnE3NGZlSSsxeHFZTjBpL0JNVVNxTGRwckFxSWJHWXpEbDZEZzlSdkRkdWRK?= =?utf-8?B?S3ByYW1VMzlZVERlbmp3VytVcnl6TS9pNk9uRUQ4TnBFV3VMUVkxdFViZERU?= =?utf-8?B?eVZUb0FVNGtjTklpUDA2WitaU2N1ZUR5UnNUb3czZ2xXUVVxNElIQVdyWnhG?= =?utf-8?B?eUJLdkxVSGNwN09DQy9MTTZvOEFNTndIemN1WWp0UE5xWkZhcDZTZDVHSTVx?= =?utf-8?B?S2FsUW9ENFhxRUd3RjhIN2NUNG1SOWN5amRmd21ZUnBDdm5PNmFyMnEvekFD?= =?utf-8?B?aW81NTBVYlQ4LzZoaWpmRkxsLzA3MWtqQTdoYjBpbDlUYWxucVVMVTRLMERu?= =?utf-8?B?N1B3WHVuZFErYmkxa2VoQ08zUGZ6WStMQTJPWElTcnBBd3JiZGFuV2QwYkUw?= =?utf-8?B?aFJPdVpNVGo4WlR6N0xaUVZUTEVWSWpCektHaWptejgrVGROdFdkLy9WT1pR?= =?utf-8?B?RzZGdXY2YWl2NVBTZDd6RjIvMmc3Rkp1RjFYZkdzZ09NUU5RYm1zeDd6azVy?= =?utf-8?B?dmI5dHltQndBOWdaa0dnZnNXckJwV2gzY2dzbWJzdGhjRmJLcDFnSXpVSWd3?= =?utf-8?B?ME1TMVVmeCtFa3pBcm94aEYwUUluVDdGVTU3Sk9sNXl6QUtkV2psanhXTXov?= =?utf-8?B?MzlyVWhETFJISDJqOW1oNi82OXRCb0lPMkpHUlRsRysraVhGWjc5d0UwVmZF?= =?utf-8?B?VnVLeEt5U3IvK1dZQm95WWVHbjFiQzhENzQ2dVExU0JYWnVwaC80N1pNYzQy?= =?utf-8?B?c0hqeDZlNGZ4R2N1L2NoZlMycE12dEltb3BlZFVVNlRhQk9xNGw3d1ZlOHph?= =?utf-8?B?bnRXekpWRjhhK0dDKzgzSGh0RVM1eHQ2aThuU09ubnFvSDV4bzFkOHg0VUlu?= =?utf-8?B?Rjg3Rkl5dmQ4S1ZXNzc1bXZUQkpjQk15UThWWkVqbmRMZERCSk5rL1hvVVVm?= =?utf-8?B?Y01lZFV4WFo5ZWtVV3dKNm9CZWRtQWxpTmdMbE0wYmxsWmYrNE1COVB0VXhv?= =?utf-8?B?WEgrR1UreEErQ080WVZXalNwTFp3NDdpbmY3eDFvK211VTNJVnQ4TGZJZ1Fq?= =?utf-8?B?WTNMNWZKQnVnZTFmUDA3TnduY0tGblREcWo0M0drN3Q5RU9PcVJLYy9xdDly?= =?utf-8?Q?q8cxkmzPeH7CH?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_SN6PR00MB042990C1C9C0DAE300E79A48F59D9SN6PR00MB0429namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SN6PR00MB0429.namprd00.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: e11448f7-d2a1-436d-1e67-08d8da98b8dc X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Feb 2021 20:54:34.3393 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ayF/8uu0rXwLuGGeVSmL/pyBV1l5RvgYYHOOhW5jvb7mWmUf7fDORLnTe8gDhRaog4cRROyzuEYXCioZNmQi5Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR00MB0191 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-oauth-jwsreq-30 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Feb 2021 20:54:42 -0000 --_000_SN6PR00MB042990C1C9C0DAE300E79A48F59D9SN6PR00MB0429namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGFnYWluIGZvciB5b3VyIHJldmlldywgV2F0c29uLiAgTXkgcmVwbGllcyB0byB5b3Vy IGNvbW1lbnRzIGJlbG93IGFyZSBwcmVmaXhlZCBieSAiTWlrZT4iLg0KDQoNCg0KLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IFdhdHNvbiBMYWRkIDx3YXRzb25ibGFkZEBnbWFpbC5j b20+DQpTZW50OiBUdWVzZGF5LCBEZWNlbWJlciAxNSwgMjAyMCA5OjAxIFBNDQpUbzogTmF0IFNh a2ltdXJhIDxuYXRAbmF0LmNvbnN1bHRpbmc+DQpDYzogc2VjZGlyIDxzZWNkaXJAaWV0Zi5vcmc+ OyBJRVRGIG9hdXRoIFdHIDxvYXV0aEBpZXRmLm9yZz47IGxhc3QtY2FsbEBpZXRmLm9yZzsgZHJh ZnQtaWV0Zi1vYXV0aC1qd3NyZXEuYWxsQGlldGYub3JnDQpTdWJqZWN0OiBbRVhURVJOQUxdIFJl OiBTZWNkaXIgbGFzdCBjYWxsIHJldmlldyBvZiBkcmFmdC1pZXRmLW9hdXRoLWp3c3JlcS0zMA0K DQoNCg0KT24gU2F0LCBPY3QgMzEsIDIwMjAgYXQgNjoxMyBBTSBOYXQgU2FraW11cmEgPG5hdEBu YXQuY29uc3VsdGluZzxtYWlsdG86bmF0QG5hdC5jb25zdWx0aW5nPj4gd3JvdGU6DQoNCj4NCg0K PiBIaSBXYXRzb24sDQoNCj4NCg0KPiBUaGFua3MgdmVyeSBtdWNoIGZvciB0aGUgcmV2aWV3LiBJ IHRob3VnaHQgSSBoYXZlIHNlbnQgbXkgcmVzcG9uc2UNCg0KPiBlYXJsaWVyLCB3aGljaCBJIGFj dHVhbGx5IGRpZCBub3QuIEl0IHdhcyBzaXR0aW5nIGluIG15IGRyYWZ0IGJveC4gSQ0KDQo+IGFw b2xvZ2l6ZSBmb3IgaXQuDQoNCg0KDQpNeSBhcG9sb2dpZXMgZm9yIG1pc3NpbmcgaXQgaW4gbXkg aW5ib3ggZm9yIGEgbnVtYmVyIG9mIG1vbnRocy4NCg0KPg0KDQo+IE15IHJlc3BvbnNlcyBpbmxp bmU6DQoNCj4NCg0KPiBPbiBTYXQsIFNlcCAyNiwgMjAyMCBhdCA5OjQ2IEFNIFdhdHNvbiBMYWRk IHZpYSBEYXRhdHJhY2tlcg0KDQo+IDxub3JlcGx5QGlldGYub3JnPG1haWx0bzpub3JlcGx5QGll dGYub3JnPj4gd3JvdGU6DQoNCj4gPg0KDQo+ID4gUmV2aWV3ZXI6IFdhdHNvbiBMYWRkDQoNCj4g PiBSZXZpZXcgcmVzdWx0OiBTZXJpb3VzIElzc3Vlcw0KDQo+ID4NCg0KPiA+IEkgZ2VuZXJhdGVk IHRoaXMgcmV2aWV3IG9mIHRoaXMgZG9jdW1lbnQgYXMgcGFydCBvZiB0aGUgc2VjdXJpdHkNCg0K PiA+IGRpcmVjdG9yYXRlJ3Mgb25nb2luZyBlZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRvY3Vt ZW50cyBiZWluZw0KDQo+ID4gcHJvY2Vzc2VkIGJ5IHRoZSBJRVNHLiAgVGhlc2UgY29tbWVudHMg d2VyZSB3cml0dGVuIHdpdGggdGhlIGludGVudA0KDQo+ID4gb2YgaW1wcm92aW5nIHNlY3VyaXR5 IHJlcXVpcmVtZW50cyBhbmQgY29uc2lkZXJhdGlvbnMgaW4gSUVURg0KDQo+ID4gZHJhZnRzLiAg Q29tbWVudHMgbm90IGFkZHJlc3NlZCBpbiBsYXN0IGNhbGwgbWF5IGJlIGluY2x1ZGVkIGluIEFE DQoNCj4gPiByZXZpZXdzIGR1cmluZyB0aGUgSUVTRyByZXZpZXcuICBEb2N1bWVudCBlZGl0b3Jz IGFuZCBXRyBjaGFpcnMgc2hvdWxkIHRyZWF0IHRoZXNlIGNvbW1lbnRzIGp1c3QgbGlrZSBhbnkg b3RoZXIgbGFzdCBjYWxsIGNvbW1lbnRzLg0KDQo+ID4NCg0KPiA+IFR3byBtaW5vciBpc3N1ZXM6 IE9uIHBhZ2UgNCwgIlRoaXMgb2ZmZXJzIGFuIGFkZGl0aW9uYWwgZGVncmVlIG9mDQoNCj4gPiBw cml2YWN5IHByb3RlY3Rpb24uIiBzaG91bGQgYmUgcmV3b3JkZWQuIEkgZG9uJ3QgdGhpbmsgaXQg bWFrZXMNCg0KPiA+IHNlbnNlIGluIGNvbnRleHQsIHdoZXJlIGF1dGhlbnRpY2l0eSB3YXMgZGlz Y3Vzc2VkLg0KDQo+DQoNCj4NCg0KPiBJbiB0aGUgY291cnNlIG9mIHRoZSBlZGl0LCBleHBsYW5h dGlvbiBhYm91dCB0d28gZGlzdGluY3QgcHJpdmFjeQ0KDQo+IGJlbmVmaXRzIHdhcyBjb2xsYXRl ZCBpbiBvbmUgc2VudGVuY2UgYW5kIGhhcyBiZWNvbWUgdmVyeSBkaWZmaWN1bHQgdG8NCg0KPiBw YXJzZS4NCg0KPg0KDQo+IFdoYXQgaXQgaXMgdHJ5aW5nIHRvIGV4cHJlc3MgYXMgcHJpdmFjeSBi ZW5lZml0cyBhcmUgdGhlIGZvbGxvd2luZy4NCg0KPg0KDQo+IDEpIFRoZSBhdXRob3JpemF0aW9u IHJlcXVlc3QgY29udGVudCBpcyBzZW50IHRvIHRoZSBBUyBpbiB0aGUNCg0KPiBiYWNrY2hhbm5l bCBzbyBpdCB3aWxsIG5vdCBiZSBleHBvc2VkIHRocm91Z2ggdGhlIGJyb3dzZXIgdG8gdGhlIGV5 ZXMNCg0KPiBvZiBhbiBhY3RpdmUgb3IgcGFzc2l2ZSBvdXRzaWRlciBvYnNlcnZpbmcgd2hhdCBp cyBnb2luZyBvbiBpbiB0aGUNCg0KPiBicm93c2VyLiAgSW4gdGhlIFJGQzY3NDkgZnJhbWV3b3Jr IGNhc2UsIHRoZSBhdXRob3JpemF0aW9uIHJlcXVlc3QNCg0KPiBnb2VzIHRocm91Z2ggdGhlIGJy b3dzZXIgcmVkaXJlY3QgYW5kIGl0IGNvdWxkIGxlYWsgdG8gdGhlIGFkdmVyc2FyeQ0KDQo+IHZp YSBXUEFEL1BBQyBBdHRhY2ssIHJlZmVycmVyLCBicm93c2VyIGhpc3RvcnksIGV0Yy4gQWxzbywg aWYgdGhlDQoNCj4gYnJvd3NlciB3YXMgaW5mZWN0ZWQgYnkgYW4gYWR2ZXJzYXJ5IGNvbnRyb2xs ZWQgbWFsd2FyZSwgdGhlIGNvbnRlbnQNCg0KPiBjYW4gYmUgc25pZmZlZCBieSB0aGUgYWR2ZXJz YXJ5LiBJbiB0aGUgY2FzZSBvZiBKQVIsIGl0IGRvZXMgbm90DQoNCj4gaGFwcGVuLiBUaGlzIGlz IG9uZSBwcml2YWN5IGJlbmVmaXQgaXQgaXMgdHJ5aW5nIHRvIGV4cGxhaW4uDQoNCj4NCg0KPiAy KSBUaGUgbG9jYXRpb24gdGhhdCB0aGUgYXV0aG9yaXphdGlvbiByZXF1ZXN0IGlzIGdldHRpbmcg cHVzaGVkIHRvDQoNCj4gZG9lcyBub3QgaGF2ZSB0byBiZSB0aGUgQVMuIEEgdHJ1c3RlZCB0aGly ZCBwYXJ0eSB0aGF0IGV4YW1pbmVzIHRoZQ0KDQo+IGNvbnRlbnQgZm9yIHRoZSBjb25mb3JtYW5j ZSB0byB0aGUgY29sbGVjdGlvbiBtaW5pbWl6YXRpb24gcHJpbmNpcGxlDQoNCj4gbWF5IGFjdCBh cyB0aGUgcGFydHkgdGhhdCBhY2NlcHRzIHRoZSBhdXRob3JpemF0aW9uIHJlcXVlc3QgYW5kIGlz c3Vlcw0KDQo+IHRoZSByZXF1ZXN0X3VyaS4gQVMgY2FuIHRoZW4ganVzdCBldmFsdWF0ZSB0aGUg ZG9tYWluIHBhcnQgb2YNCg0KPiByZXF1ZXN0X3VyaSB0byBldmFsdWF0ZSB0aGF0IHRoZSBhdXRo b3JpemF0aW9uIHJlcXVlc3QgaXMgY29uZm9ybWFudA0KDQo+IHRvIHRoaXMgcHJpbmNpcGxlLiBU aGlzIGlzIGFub3RoZXIgcHJpdmFjeSBiZW5lZml0IGZyb20gdGhlIHBvaW50IG9mDQoNCj4gdmll dyBvZiB0aGUgaW5kaXZpZHVhbCB1c2VyLg0KDQoNCg0KSSdtIGZpbmUgd2l0aCBhbnkgZml4IHRv IHRoZSBzZW50ZW5jZSB0aGF0IG1ha2VzIHNlbnNlLiBEb24ndCB0aGluayB3ZSBuZWVkIHRvIGlu c2VydCB0aGUgYWJvdmUgYnV0IEkgdmVyeSBtdWNoIGFwcHJlY2lhdGUgdGhlIGV4cGxhbmF0aW9u Lg0KDQoNCg0KTWlrZT4gR2l2ZW4gdGhhdCBpdHMgbWVhbmluZyBpcyBmYWlybHkgaW5zY3J1dGFi bGUsIGFuZCB0aGF0IHRoZSB0d28gYmVuZWZpdHMgZGVzY3JpYmVkIGJ5IE5hdCBhYm92ZSBhcmUg cGFydGlhbGx5IHJlbGF0ZWQgdG8gcGFyYWdyYXBocyBvdGhlciB0aGFuIHRoZSBvbmUgd2l0aCB0 aGUgcHJpdmFjeSBzdGF0ZW1lbnQsIEkgcHJvcG9zZSB0aGF0IHdlIHNpbXBseSBkZWxldGUgdGhl IHNlbnRlbmNlICJUaGlzIG9mZmVycyBhbiBhZGRpdGlvbmFsIGRlZ3JlZSBvZiBwcml2YWN5IHBy b3RlY3Rpb24uIiBmcm9tIHRoaXMgcGFyYWdyYXBoLg0KDQoNCg0KPiA+IEl0IHRvb2sgbWUgYSB3 aGlsZSB0byB1bmRlcnN0YW5kIHdoYXQgdGhlIGJ5IHJlZmVyZW5jZSBtZXRob2QgaXM6DQoNCj4g PiBtYXliZSB0aGUgaW50cm8gc2hvdWxkIHNheSB2aWEgVVJMIGluc3RlYWQgb2YgYnkgcmVmZXJl bmNlLg0KDQo+DQoNCj4NCg0KPiByZXF1ZXN0X3VyaSBjYW4gYmUgVVJMIG9yIGEgaGFuZGxlIHN1 Y2ggYXMgVVJOLiBUaGF0IGlzIHdoeSB0aGUgImJ5DQoNCj4gcmVmZXJlbmNlIiB3b3JkIGlzIGJl aW5nIHVzZWQsIHBlciB0aGUgc3VnZ2VzdGlvbiBvZiB0aGUgV0cuDQoNCg0KDQpJJ20gZmluZSB3 aXRoIHRoYXQsIGp1c3Qgbm90aW5nIG15IGNvbmZ1c2lvbi4NCg0KDQoNCk1pa2U+IFVuZGVyc3Rv b2QuICBJIGxvb2tlZCBhdCB3YXlzIHRvIHBvc3NpYmx5IG1vdmUgdGhlICJieSByZWZlcmVuY2Ui IHRleHQgdGhhdCBmb2xsb3dzIGluIGEgZmV3IHBhcmFncmFwaHMgZWFybGllciB0byBwb3NzaWJs eSBtYWtlIHRoaXMgY2xlYXJlciwgYnV0IGl0IHdvdWxkIG1lc3MgdXAgdGhlIGxvZ2ljYWwgZmxv dyBvZiB0aGUgSW50cm9kdWN0aW9uLiAgVW5sZXNzIHlvdSBoYXZlIGEgYmV0dGVyIHN1Z2dlc3Rp b24sIEkgcHJvcG9zZSB0aGF0IHdlIGxlYXZlIHRoaXMgYXMtaXMuDQoNCg0KDQo+ID4gQW5kIG5v dyBmb3IgdGhlIHRob3JueSBpc3N1ZXMgd2l0aCB0aGlzIGRyYWZ0LiBTaWduYXR1cmVzIGFuZA0K DQo+ID4gZW5jcnlwdGlvbiBhcmUgZGlmZmVyZW50LiBBbmQgZW5jcnlwdGluZyBhIHNpZ25lZCBi bG9iIGRvZXNuJ3QgbWVhbiB0aGUgc2lnbmVyIGVuY3J5cHRlZCBpdC4NCg0KPiA+IFRoZW4gdGhl cmUgYXJlIGEgcGxldGhvcmEgb2YgbWV0aG9kcyBzcGVjaWZpZWQgaW4gdGhlIGRyYWZ0ICB0bw0K DQo+ID4gYXV0aGVudGljYXRlIHRoZSBibG9iLCB3aGljaCB3aWxsIGdpdmUgZGlmZmVyZW50IHJl c3VsdHMgaW4NCg0KPiA+IG1hbGljaW91c2x5IGNvbnN0cnVjdGVkIGV4YW1wbGVzLiBUaGUgc2Vj dXJpdHkgY29uc2lkZXJhdGlvbnMNCg0KPiA+IHNlY3Rpb24gc2hvdWxkIGRpc2N1c3Mgd2hhdCB0 aGUgZW5jcnlwdGVkIHZzIHNpZ25lZCBjaG9pY2VzIGdpdmUgaW4NCg0KPiA+IHRoZSB3YXkgb2Yg c2VjdXJpdHksIGFuZCBpdCBkb2Vzbid0LiBUaGlzIG1ha2VzIG1lIHdvcnJ5Lg0KDQo+DQoNCj4g V2UgZG9u4oCZdCBleHBlY3QgdGhlIGVuY3J5cHRpb24gdG8gZW5zdXJlIGF1dGhlbnRpY2l0eSwg dGhhdOKAmXMgd2hhdCB0aGUNCg0KPiBzaWduYXR1cmVzIGFyZSB1c2VkIGZvci4NCg0KDQoNClRo aXMgbmVlZHMgdG8gYmUgdmVyeSBjbGVhcmx5IHNwZWxsZWQgb3V0IGluIHRoZSB0ZXh0LiBMb3Rz IG9mIHBlb3BsZSB3aWxsIG5vdCB1bmRlcnN0YW5kIHRoaXMuIFRoZSB3b3JkaW5nIG9mIHNlY3Rp b24gMTAuMiBpcyBhdCBiZXN0IGFtYml2YWxlbnQsIHdpdGggbXVsdGlwbGUgYWx0ZXJuYXRpdmVz IHByZXNlbnRlZCBhcyBhY2NlcHRhYmxlLg0KDQoNCg0KTWlrZT4gQWZ0ZXIgdGhlIHNlbnRlbmNl IGF0IDEwLjIgKGIpIGFib3V0IHN5bW1ldHJpYyBlbmNyeXB0aW9uLCBJIHByb3Bvc2UgdGhhdCB3 ZSBhZGQgdGhlIGZvbGxvd2luZyBzZW50ZW5jZSB0byBlbXBoYXNpemUgdGhlIHBvaW50IHlvdSdy ZSByYWlzaW5nOiAgIk5vdGUgaG93ZXZlciwgdGhhdCBpZiBwdWJsaWMga2V5IGVuY3J5cHRpb24g aXMgdXNlZCwgbm8gc291cmNlIGF1dGhlbnRpY2F0aW9uIGlzIGVuYWJsZWQgYnkgdGhlIGVuY3J5 cHRpb24sIGFzIGFueSBwYXJ0eSBjYW4gZW5jcnlwdCBjb250ZW50IHRvIHRoZSBwdWJsaWMga2V5 LiINCg0KDQoNCjxjaG9wPg0KDQo+DQoNCj4gSSBkaWRuJ3QgcXVpdGUgZ2V0IHdoYXQgaXMgbWVh bnQgYnkgInBsZXRob3JhIG9mIG1ldGhvZHMgc3BlY2lmaWVkIGluDQoNCj4gdGhlIGRyYWZ0IHRv IGF1dGhlbnRpY2F0ZSB0aGUgYmxvYiAuLi4gIg0KDQo+IFRoZXJlIGlzIGEgYml0IG9mIHRleHQg YWJvdXQgYXV0aGVudGljYXRpbmcgdGhlIHNvdXJjZSAoPWNsaWVudCkgYnV0DQoNCj4gbm90IG11 Y2ggb24gdGhlIGJsb2IgaXRzZWxmLg0KDQo+IFRoZSBkaXNjdXNzaW9uIGFyb3VuZCB0aGUgc2ln bmF0dXJlIGFuZC9vciBlbmNyeXB0aW9uIGlzIGNvdmVyZWQgaW4NCg0KPiBSRkM3NTE5IChKV1Qp LCB0aGUgZm9ybWF0IHRoYXQgdGhlIHJlcXVlc3Qgb2JqZWN0IGFzc3VtZXMuDQoNCj4gVGhpcyBp cyByZXF1aXJlZCByZWFkaW5nIHdoZW4gaW1wbGVtZW50aW5nIHRoaXMgc3BlYywgc28gV0cgdGhv dWdodCBpdA0KDQo+IGlzIG5vdCB3b3J0aCByZXBlYXRpbmcgaGVyZS4NCg0KPiBBdHRhY2tzIGV0 Yy4gb24gdGhlIHNpZ25hdHVyZSBhbmQgZW5jcnlwdGlvbiBhcmUgY292ZXJlZCBpbiBSRkM3NTE1 DQoNCj4gYW5kIFJGQzc1MTYgcmVzcGVjdGl2ZWx5Lg0KDQoNCg0KV2VsbCwgdGhlIGRyYWZ0IGhh cHBlbnMgdG8gaW5jbHVkZSB0aGUgZm9sbG93aW5nIHRleHQ6DQoNCiAgICJUaGUgQXV0aG9yaXph dGlvbiBTZXJ2ZXIgTVVTVCB2YWxpZGF0ZSB0aGUgc2lnbmF0dXJlIG9mIHRoZSBKU09OIFdlYg0K DQogICBTaWduYXR1cmUgW1JGQzc1MTVdIHNpZ25lZCBSZXF1ZXN0IE9iamVjdC4gIFRoZSBzaWdu YXR1cmUgTVVTVCBiZQ0KDQogICB2YWxpZGF0ZWQgdXNpbmcgdGhlIGtleSBmb3IgdGhhdCAiY2xp ZW50X2lkIiBhbmQgdGhlIGFsZ29yaXRobQ0KDQogICBzcGVjaWZpZWQgaW4gdGhlICJhbGciIEhl YWRlciBQYXJhbWV0ZXIuIg0KDQoNCg0KU2hvdWxkbid0IHRoZSBrZXkgYmUgYXNzb2NpYXRlZCB3 aXRoIGEgc2luZ2xlIGFsZ29yaXRobT8gSG93IGRvIHdlIGVuc3VyZSB0aGF0IHRoZSBjb21tb24g YXR0YWNrIG9mIHRlbGxpbmcgdGhlIHNlcnZlciB0byB1c2UgaG1hYyB0byB2ZXJpZnkgdGhlIHNp Z25hdHVyZSBkb2Vzbid0IHdvcmsgaGVyZT8NCg0KDQoNCk1pa2U+IEdvb2QgcG9pbnQuICBUaGlz IGF0dGFjayBpcyBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjEgb2YgUkZDIDg3MjUgYW5kIG1pdGln YXRlZCBieSB0aGUgcHJhY3RpY2VzIGluIFNlY3Rpb25zIDMuMSBhbmQgMy4yIG9mIHRoZSBzYW1l LiAgSSBwcm9wb3NlIHRoYXQgd2UgcmVwbGFjZSB0aGUgc2VudGVuY2U6DQoNCiAgICAiVGhlIHNp Z25hdHVyZSBNVVNUIGJlIHZhbGlkYXRlZCB1c2luZyB0aGUga2V5IGZvciB0aGF0ICJjbGllbnRf aWQiIGFuZCB0aGUgYWxnb3JpdGhtIHNwZWNpZmllZCBpbiB0aGUgImFsZyIgSGVhZGVyIFBhcmFt ZXRlci4iDQoNCndpdGg6DQoNCiAgICAiVGhlIHNpZ25hdHVyZSBNVVNUIGJlIHZhbGlkYXRlZCB1 c2luZyBhIGtleSBhc3NvY2lhdGVkIHdpdGggdGhlIGNsaWVudCBhbmQgdGhlIGFsZ29yaXRobSBz cGVjaWZpZWQgaW4gdGhlICJhbGciIEhlYWRlciBQYXJhbWV0ZXIuICBJZiBhICJraWQiIEhlYWRl ciBQYXJhbWV0ZXIgaXMgcHJlc2VudCwgdGhlIGtleSBpZGVudGlmaWVkIE1VU1QgYmUgdGhlIGtl eSB1c2VkLCBhbmQgTVVTVCBiZSBhIGtleSBhc3NvY2lhdGVkIHdpdGggdGhlIGNsaWVudC4gIEFs Z29yaXRobSB2ZXJpZmljYXRpb24gTVVTVCBiZSBwZXJmb3JtZWQsIGFzIHNwZWNpZmllZCBpbiBT ZWN0aW9ucyAzLjEgYW5kIDMuMiBvZiBSRkMgODcyNS4iDQoNCg0KDQo+ID4gTG9va2luZyBhdCB0 aGUgY2l0ZWQgcmVmZXJlbmNlIGZvciBhdHRhY2tzLCBJIHNlZSB0aGUgZml4IGlzIHRvDQoNCj4g PiBpbmNsdWRlIGluZm9ybWF0aW9uIGFib3V0IHdoaWNoIElQRCB3YXMgdXNlZCBieSB0aGUgUlAu IEJ1dCB0aGUNCg0KPiA+IGRyYWZ0IGJlZm9yZSB1cyBkb2Vzbid0IG1hbmRhdGUgdGhhdC4gSXQn cyBub3QgY2xlYXIgdGhhbiBob3cgdGhlDQoNCj4gPiBjaXRlZCBhdHRhY2sgaXMgcHJldmVudGVk IGJ5IHRoZSBkcmFmdC4gU2F5aW5nIHRoYXQgdGhlDQoNCj4gPiBjb21tdW5pY2F0aW9uIHRocm91 Z2ggdGhlIHVzZXItYWdlbnQgaXMgc3ViamVjdCB0bw0KDQo+DQoNCj4gVGhlIG1lbnRpb24gb2Yg bWl4LXVwIGF0dGFjayB3YXMgaW50cm9kdWNlZCBhZnRlciB0aGUgTGFzdCBjYWxsIGJ5IG9uZQ0K DQo+IG9mIHRoZSBjb21tZW50LiBJdCBqdXN0IGFkZGVkIGl0IGluIHRoZSBzZW50ZW5jZSB3aXRo IGEgcmVmZXJlbmNlLiBJDQoNCj4gYW0gb2sgdG8gcmVtb3ZlIGl0Lg0KDQoNCg0KVGhhdCB3b3Jr cyBmb3IgbWUuDQoNCg0KDQpNaWtlPiBJIHdpbGwgcmVtb3ZlIHRoZSBtaXgtdXAgYXR0YWNrIHJl ZmVyZW5jZSBpbiB0aGUgbmV4dCBkcmFmdC4NCg0KDQoNCj4gSGF2aW5nIHNhaWQgdGhhdCwgdGhl IGhlYXJ0IG9mIG1peC11cCBhdHRhY2sgaXMgdGhhdCB0aGUgY29tYmluYXRpb24NCg0KPiBvZiB0 aGUgY2xpZW50IGJlbGlldmVzIHRoYXQgaXQgaXMgY29tbXVuaWNhdGluZyB3aXRoIHRoZQ0KDQo+ IGF0dGFja2VyLWNvbnRyb2xsZWQgQVMgKEFBUykgd2hpbGUgaXQgaW4tZmFjdCBpcyB0YWxraW5n IHRvIEhvbmVzdCBBUw0KDQo+IChIQVMpLCBBTkQgSEFTIHVuYWJsZSB0byBmaW5kIG91dCB0aGF0 IHRoZSBjbGllbnQgaXMgdGhpbmtpbmcgdGhhdCBpdA0KDQo+IGlzIHRhbGtpbmcgdG8gQUFTIG5v dCBoaW0uDQoNCj4NCg0KPiBPQXV0aCBKQVIgc2VlbXMgdG8gbWl0aWdhdGUgaXQgaW4gdHdvIHdh eXM6DQoNCj4NCg0KPiBhKSBVc2UgcmVxdWVzdF91cmkgd2hpY2ggaXMgaG9zdGVkIGJ5IHRoZSBB Uy4gVGhlbiwgaWYgdGhlIGNsaWVudCBpcw0KDQo+IHRoaW5raW5nIHRoYXQgaXQgaXMgdGFsa2lu ZyB0byB0aGUgQUFTLCB0aGVuIGl0IHdpbGwgcHVzaCBpdCB0byBBQVMNCg0KPiBhbmQgd2hlbiB0 aGUgdXNlciBpcyByZWRpcmVjdGVkIHRvIEhBUywgSEFTIHdpbGwgZmluZCBvdXQgdGhhdCB0aGUN Cg0KPiByZXF1ZXN0X3VyaSBpcyBub3QgY3JlYXRlZCBieSBoZXJzZWxmIGFuZCByZXR1cm4gYW4g ZXJyb3IsIG1ha2luZyB0aGUNCg0KPiBtaXgtdXAgYXR0YWNrIGZhaWwuDQoNCj4NCg0KPiBiKSBJ bmNsdWRlIGBhdWRgIGluIHRoZSByZXF1ZXN0LiBUaGVuLCB3aGVuIHRoZSBIQVMgd2lsbCBmaW5k IHRoYXQgdGhlDQoNCj4gcmVxdWVzdCB3YXMgbWludGVkIHRvIEFBUyBhbmQgbm90IGhlci4gU28s IGl0IHdpbGwgcmVzdWx0IGluIGFuIGVycm9yLA0KDQo+IG1ha2luZyB0aGUgbWl4LXVwIGF0dGFj ayBmYWlsLg0KDQoNCg0KSWYgdGhlIGRyYWZ0IG1hbmRhdGVzIGRvaW5nIHRoaXMgaXQgYWRkcmVz c2VzIHRoZSBhdHRhY2sgYW5kIHRoZSBzZW50ZW5jZSBjYW4gc3RheS4NCg0KDQoNCk1pa2U+IFRo ZSBkcmFmdCBtYW5kYXRlcyB1c2Ugb2YgImF1ZCIgYnV0IGl0IGRvZXMgbm90IG1hbmRhdGUgdGhh dCB0aGUgcmVxdWVzdF91cmkgYmUgaG9zdGVkIGJ5IHRoZSBBUy4gIFRoZXJlZm9yZSwgSSB0aGlu ayB3ZSBzaG91bGQgcmVtb3ZlIHRoZSBtaXgtdXAgYXR0YWNrIHJlZmVyZW5jZS4NCg0KDQoNCj4g U28sIEkgYWRkZWQgbWl4LXVwIGF0dGFjayB0byB0aGUgc2VudGVuY2UgdGhpbmtpbmcgdGhlIGNv bW1lbnRlcidzDQoNCj4gcmVxdWVzdCB0byBhZGQgaXQgaXMgZmluZSwgYnV0IEkgYW0gZmluZSB3 aXRoIHJlbW92aW5nIGl0Lg0KDQo+DQoNCj4gPiBtYW5pcHVsYXRpb24sIGFuZCB0aGlzIHByZXZl bnRzIGl0LCBpZ25vcmVzIHRoYXQgdGhlIGF0dGFja2VyIGluDQoNCj4gPiB0aGF0IHBvc2l0aW9u IHNlZXMgYSBsb3QgbW9yZS4gVGhlIHVzZXItYWdlbnQgYXMgcmVzb3VyY2Ugb3duZXINCg0KPiA+ IG1vZGlmeWluZyB0aGUgcmVxdWVzdGVkIHJlc291cmNlcyBpcyBhIHZlcnkgZnVubnkgc29ydCBv ZiBhdHRhY2s6DQoNCj4gPiBjYW4ndCB0aGV5IGRvIHdoYXQgdGhleSB3YW50IHdpdGggdGhlIHJl c291cmNlcyBzaW5jZSB0aGV5IGNvbnRyb2wgdGhlIGFjY2Vzcz8NCg0KPg0KDQo+IElmIHRoZSBj bGllbnQgaXMgaW4gdGhlIGJyb3dzZXIsIHllcy4NCg0KPiBCdXQgaW4gdGhlIG1haW5zdHJlYW0g Y2FzZSwgdGhlIGNsaWVudCBpcyBub3QgaW4gdGhlIGJyb3dzZXIgYnV0IHRoZQ0KDQo+IHdlYi1z ZXJ2ZXIgdGhhdCB0aGUgYnJvd3NlciBpcyBjb21tdW5pY2F0aW5nIHdpdGggYW5kIHRoZSByZXNv dXJjZQ0KDQo+IGFjY2VzcyBoYXBwZW5zIHdpdGhvdXQgYmVpbmcgbWVkaWF0ZWQgYnkgdGhlIGJy b3dzZXIuDQoNCg0KDQpNeSBjb25jZXJuIG9uIHRoaXMgcG9pbnQgaXMgcmVzb2x2ZWQuDQoNCg0K DQpNaWtlPiBUaGFua3MNCg0KDQoNCj4gPiBLZXkgbWFuYWdlbWVudCBpcyBpZ25vcmVkLiBUaGlz IGlzIGEgdmVyeSBpbXBvcnRhbnQgaXNzdWUsDQoNCj4gPiBlc3BlY2lhbGx5DQoNCj4NCg0KPiBB IGxvdCBvZiBncm91bmQgaXMgY292ZXJlZCBieSBSRkMgNzUxNSwgNzUxNiwgNzUxNywgNzUxOCwg NzUxOSwgNzU5MSwNCg0KPiBhbmQgODQxNCBzbyB0aGlzIGRvY3VtZW50IGlzIG5vdCBzcGVjaWZp Y2FsbHkgcmVzdGF0aW5nIHRoZW0uDQoNCj4NCg0KPiA+DQoNCj4gPiBjb25zaWRlcmluZyB0aGUg cG90ZW50aWFsIHByb2JsZW1zIHdpdGggdGhlIHJldXNlIG9mIEpXVC4gSSdkIGxpa2UNCg0KPiA+ IHRvIHNlZSBhDQoNCj4NCg0KPiBBcmUgeW91IHRhbGtpbmcgYWJvdXQgdGhlIHJldXNlIG9mIHRo ZSByZXF1ZXN0IG9iamVjdCBieSBhbiBhZHZlcnNhcnkNCg0KPiB0cnlpbmcgdG8gYWN0IGFzIGFu IGhvbmVzdCBjbGllbnQ/DQoNCj4gRXZlbiBpZiBpdCBoYXBwZW5zLCB0aGUgbWFsaWNpb3VzIGNs aWVudCBkb2VzIG5vdCBoYXZlIHRoZSBwcm9wZXINCg0KPiBjbGllbnQgY3JlZGVudGlhbCBzbyBp dCBjYW5ub3QgcmVkZWVtIHRoZSBjb2RlIGl0IG9idGFpbmVkIHdpdGggdGhlDQoNCj4gdG9rZW4u IEl0IGlzIG5vIGRpZmZlcmVudCB0aGFuIFJGQzY3NDkgY29kZSBncmFudC4gUHJvdG9jb2xzIHRo YXQNCg0KPiBleHRlbmQgaXQsIHN1Y2ggYXMgT3BlbklEIENvbm5lY3QsIGhhdmUgaW50cm9kdWNl ZCBub25jZSB0byBwcmV2ZW50DQoNCj4gdGhlIHJldXNlIGFuZCB1c2VkIEpBUiAoaXQgaXMgY2Fs bGVkIHJlcXVlc3Qgb2JqZWN0IHRoZXJlKSB0byBmdXJ0aGVyDQoNCj4gcHJvdGVjdCB0YW1wZXJp bmcgYW5kIGFjaGlldmUgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGV2ZW4gaW4gdGhlIGZyb250DQoN Cj4gY2hhbm5lbC4NCg0KPg0KDQo+ID4gcmVjb21tZW5kYXRpb24gdGhhdCBrZXlzIGJlIHNlcGFy YXRlZCBieSBpbnRlbmRlZCB1c2VzLCByYXRoZXIgdGhhbg0KDQo+ID4gbGltaXRpbmcgcGFydGlj dWxhciBmaWVsZHMgaW4gYW4gYWQtaG9jIG1hbm5lci4NCg0KPg0KDQo+IENvdWxkIHlvdSBraW5k bHkgZWxhYm9yYXRlIG9uIHRoZSAiYWQtaG9jIG1hbm5lciIgcGFydCBzbyB0aGF0IEkgY2FuDQoN Cj4gdW5kZXJzdGFuZCBpdCBtb3JlIGZ1bGx5Pw0KDQoNCg0KMTAuOCwgQ3Jvc3MtSldUIENvbmZ1 c2lvbiBkaXNjdXNzZXMgYXZvaWRpbmcgc2lnbmluZyBjZXJ0YWluIGZpZWxkcywgcmF0aGVyIHRo YW4gc3VnZ2VzdGluZyBnb29kIGtleSB1c2FnZSBhcyBhIHNvbHV0aW9uLg0KDQoNCg0KTWlrZT4g SSBwcm9wb3NlIHRvIGFkZCB0aGlzIG5ldyBwYXJhZ3JhcGggYXQgdGhlIGVuZCBvZiBTZWN0aW9u IDEwLjggdG8gaW1wbGVtZW50IHlvdXIgc3VnZ2VzdGlvbjoNCg0KICAgICJGaW5hbGx5LCBhbm90 aGVyIHdheSB0byBwcmV2ZW50IGNyb3NzLUpXVCBjb25mdXNpb24gaXMgdG8gdXNlIGEga2V5IG1h bmFnZW1lbnQgcmVnaW1lIGluIHdoaWNoIGtleXMgdXNlZCB0byBzaWduIFJlcXVlc3QgT2JqZWN0 cyBhcmUgaWRlbnRpZmlhYmx5IGRpc3RpbmN0IGZyb20gdGhvc2UgdXNlZCBmb3Igb3RoZXIgcHVy cG9zZXMuICBUaGVuLCBpZiBhbiBhZHZlcnNhcnkgYXR0ZW1wdHMgdG8gcmVwdXJwb3NlIHRoZSBS ZXF1ZXN0IE9iamVjdCBpbiBhbm90aGVyIGNvbnRleHQsIGEga2V5IG1pc21hdGNoIHdpbGwgb2Nj dXIsIHRod2FydGluZyB0aGUgYXR0YWNrLiINCg0KDQoNCj4gPiBUaGVuIHdlIGhhdmUgc2VjdGlv biAxMS4gV2hhdCBzZWN0aW9uIDExIGludHJvZHVjZXMgaXMgYW4gZW50aXJlIG5ldw0KDQo+ID4g ZHJhbWF0aXMgcGVyc29uYWUsIHRoZSBUcnVzdCBGcmFtZXdvcmsgUHJvdmlkZXIsIHdpdGggbm8g cHJpb3INCg0KPiA+IGRpc2N1c3Npb24gb2Ygd2hhdCBpdCBpcyBvciBhIHJlZmVyZW5jZSB0byB3 aGVyZSBpdCBpcyBkZWZpbmVkIGFuZCBhDQoNCj4gPiBnb29kIG51bWJlciBvZiBzdGF0ZW1lbnRz IGFib3V0IGhvdyBpdCB3b3JrcyB0aGF0IGFyZW4ndCByZWFsbHkgIGNsZWFyIHdoYXQgdGhleSBt ZWFuIGZyb20gdGhlIGRvY3VtZW50IHRvIG1lLg0KDQo+DQoNCj4gVHJ1c3QgRnJhbWV3b3JrIFBy b3ZpZGVyIGZpcnN0IGFwcGVhcnMgaW4gNS4yLjEuDQoNCj4gQXQgdGhlIHRpbWUgb2Ygd3JpdGlu ZyB0aGUgcmVsYXRlZCB0ZXh0LCBpdCB3YXMgYSBwcmV0dHkgd2VsbC1rbm93bg0KDQo+IGNvbmNl cHQuIEluIHRoZSBVbml0ZWQgU3RhdGUsIGl0IHdhcyBwYXJ0IG9mIGl0cyBOYXRpb25hbCBTdHJh dGVneQ0KDQo+IChOU1RJQykgYW5kIGludGVybmF0aW9uYWxseSwgaXQgd2FzIGV2ZW4gdGFrZW4g dXAgYXQgV0VGIERhdm9zDQoNCj4gbWVldGluZy4gSXQgaXMgcXVpdGUgc3VycHJpc2luZyB0aGF0 IHN1Y2ggYSBtYWluc3RyZWFtIGNvbmNlcHQgZmFkZWQNCg0KPiBpbnRvIG9ic2N1cml0eSBzbyBx dWlja2x5LiBUaGUgcmVhc29uIGZvciBpbnRyb2R1Y2luZyBpdCB3YXMgdG8gYSkNCg0KPiBqdXN0 aWZ5IHJlcXVlc3RfdXJpIGFzIHNvbWUgV0cgbWVtYmVycyB3YW50ZWQgaXQgdG8gYmUgcmVtb3Zl ZCwgYikNCg0KPiBqdXN0aWZ5IHRoYXQgcmVxdXN0X3VyaSB0byBiZSBzZXJ2ZWQgZnJvbSBhIGRp ZmZlcmVudCBkb21haW4uIE5vdyB0aGF0DQoNCj4gcGVvcGxlIGFwcHJlY2lhdGUgaXQsIGUuZy4s IGl0IGNhbiBiZSBzZWVuIGZyb20gUEFSLCB0aGUganVzdGlmaWNhdGlvbg0KDQo+IGZvciBhKSBw cm9iYWJseSBpcyBubyBsb25nZXIgcmVxdWlyZWQuIEEgZnVsbCBleHBsYW5hdGlvbiBmb3IgYikg d291bGQNCg0KPiBwcm9iYWJseSBiZSBhIG11Y2ggbG9uZ2VyIHRleHQgYnV0IEkgZG91YnQgaWYg aXQgYmVsb25ncyB0byB0aGlzDQoNCj4gZG9jdW1lbnQuIEkgYW0gZmluZSB3aXRoIHJlbW92aW5n IHRoZSByZWZlcmVuY2UgdG8gVHJ1c3QgZnJhbWV3b3JrDQoNCj4gZXRjLiBhcyBsb25nIGFzIHRo ZSBjYXBhYmlsaXR5IHRvIHB1c2ggdGhlIGF1dGhvcml6YXRpb24gcmVxdWVzdCB0byBhDQoNCj4g cGxhY2Ugb3RoZXIgdGhhbiB0aGUgY2xpZW50IG9yIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBp cyBub3QNCg0KPiByZW1vdmVkLg0KDQoNCg0KTGV0J3MgcmVtb3ZlIHRoZSB0ZXh0IHRoZW4sIGJ1 dCBrZWVwIHRoZSBjYXBhYmlsaXR5Lg0KDQoNCg0KTWlrZT4gSSBwcm9wb3NlIHRvIHJlbW92ZSB1 c2VzIG9mIHRoZSB0ZXJtICJUcnVzdCBGcmFtZXdvcmsgUHJvdmlkZXIiIGFuZCBpbnN0ZWFkIHJl cGxhY2UgdGhlbSBieSB0aGUgbW9yZSBnZW5lcmljIHRlcm0gInRydXN0ZWQgdGhpcmQtcGFydHkg c2VydmljZSIuDQoNCg0KDQo+ID4gTXkgYmlnZ2VzdCBjb25jZXJuIGlzIHRoYXQgdGhlc2UgaXNz dWVzIGFyZSBzaWducyB0aGF0IHRoZSBwcm9ibGVtDQoNCj4gPiB0aGlzIGRyYWZ0IGlzIHRyeWlu ZyB0byBzb2x2ZSBhbmQgdGhlIG1lY2hhbmlzbXMgdG8gc29sdmUgaXQgaGF2ZW4ndA0KDQo+ID4g YmVlbiBhbmFseXplZCBhcyB0aG9yb3VnaGx5IGFzIHRoZXkgc2hvdWxkIGhhdmUgYmVlbi4gV2l0 aG91dCB0aGF0DQoNCj4gPiBzb3J0IG9mIHRob3JvdWdoIGFuYWx5c2lzIGl0J3Mgbm90IGNlcnRh aW4gdGhhdCB0aGUgbWVjaGFuaXNtcw0KDQo+ID4gYWN0dWFsbHkgc29sdmUgdGhlIHByb2JsZW0g YW5kIGl0J3Mgbm90IGNsZWFyIHdoYXQgdGhlDQoNCj4gPiByZWNvbW1lbmRhdGlvbnMgdG8gaW1w bGVtZW50ZXJzIGhhdmUgdG8gYmUgdG8gcHJlc2VydmUgdGhvc2UgcHJvcGVydGllcy4NCg0KPg0K DQo+IE9BdXRoIEpBUiwgYXMgdGhlIG5hbWUgIlRoZSBPQXV0aCAyLjAgQXV0aG9yaXphdGlvbiBG cmFtZXdvcms6IEpXVA0KDQo+IFNlY3VyZWQgQXV0aG9yaXphdGlvbiBSZXF1ZXN0IChKQVIpIiBz dWdnZXN0cywgaXMgYSBmcmFtZXdvcmsgYW5kIG5vdA0KDQo+IGEgaG91c2UgaXRzZWxmLiBPbmUg c3VjaCBleGFtcGxlIGlzIEZBUEkgWzFdIHdoaWNoIHdhcyBmb3JtYWxseQ0KDQo+IHZlcmlmaWVk IFsyXS4NCg0KDQoNCiJJdCdzIHBvc3NpYmxlIHRvIHVzZSB0aGlzIGRyYWZ0IHNlY3VyaXR5IiBJ IGRvbid0IHRoaW5rIHNob3VsZCBiZSBlbm91Z2ggYW55bW9yZS4gUmF0aGVyIGl0IHNob3VsZCBi ZSBpbXBvc3NpYmxlIHRvIHVzZSBpbnNlY3VyZWx5Lg0KDQoNCg0KTWlrZT4gVGhlIGRyYWZ0IGRl c2NyaWJlcyBob3cgdG8gdXNlIHRoZSBtZWNoYW5pc20gc2VjdXJlbHkuICBZZXMsIGlmIHBvcnRp b25zIG9mIHRoZSBkcmFmdCAoYW5kIHRob3NlIGl0IGRlcGVuZHMgdXBvbikgYXJlIG5vdCBmb2xs b3dlZCwgaW5zZWN1cmUgdXNhZ2UgY2FuIHJlc3VsdC4gIFRoYXQncyB0cnVlIG9mIGFueSBzZWN1 cml0eSBkcmFmdC4gIElmIHRoZXJlIGFyZSBhZGRpdGlvbmFsIHNwZWNpZmljIHJlcXVpcmVtZW50 cyBhbmQvb3IgcmVjb21tZW5kYXRpb25zIG5lZWRlZCwgd2UnZCBiZSBnbGFkIHRvIGFkZCB0aGVt LiAgSWYgc28sIHBsZWFzZSBpZGVudGlmeSB0aGVtLiAgKEluZGVlZCwgd2UncmUgYWxyZWFkeSBk b2luZyBzbyBpbiByZXNwb25zZSB0byB5b3VyIGV4aXN0aW5nIHNwZWNpZmljIGZlZWRiYWNrLikN Cg0KDQoNCk1pa2U+IEFzIGZvciBwYXN0IEpXVCBwcm9ibGVtcywgdGhlIEpXVCBCQ1AgW1JGQyA4 NzI1XSB3YXMgd3JpdHRlbiBhdCB0aGUgcmVxdWVzdCBvZiB0aGUgSUVTRyB0byBpZGVudGlmeSBh bmQgbWl0aWdhdGUgdGhlbSAtIGVzcGVjaWFsbHkgaW4gbGlnaHQgb2YgSldUcyBiZWluZyB1c2Vk IGZvciBhZGRpdGlvbmFsIHVzZSBjYXNlcywgc3VjaCBhcyBTVElSIHNlY3VyZWQgdGVsZXBob255 IGFuZCBzZWN1cmluZyBmaXJzdC1yZXNwb25kZXIgc2VydmljZXMuICBJZiB5b3UgYmVsaWV2ZSB0 aGF0IGFkZGl0aW9uYWwgZ2VuZXJpYyBKV1QgaXNzdWVzIHNob3VsZCBiZSBkaXNjdXNzZWQgYW5k IGFkZHJlc3NlZCwgd2UgY291bGQgYWx3YXlzIHJldmlzZSB0aGlzIEJDUC4gIEJ1dCBkb2luZyBz byBpcyBiZXlvbmQgdGhlIHNjb3BlIG9mIHRoaXMgUkZDLg0KDQoNCg0KPiBbMV0NCg0KPiBodHRw czovL2JpdGJ1Y2tldC5vcmcvb3BlbmlkL2ZhcGkvc3JjL21hc3Rlci9GaW5hbmNpYWxfQVBJX1dE XzAwMi5tZA0KDQo+IFsyXSBodHRwczovL2FyeGl2Lm9yZy9hYnMvMTkwMS4xMTUyMA0KDQo+DQoN Cj4gPg0KDQo+ID4gT2J2aW91c2x5IHRoaXMgZHJhZnQgaGFzIGhhZCBhIGxvbmcgYW5kIHRvcnR1 cmVkIGhpc3Rvcnkgd2l0aA0KDQo+ID4gbXVsdGlwbGUgcmV2aWV3cywgIGFuZCB3aGF0IEknbSBz dWdnZXN0aW5nIG5lZWRzIHRvIGhhcHBlbiBpcyBhIGxvdA0KDQo+ID4gb2Ygd29yay4gQnV0IGl0 J3MgZXNzZW50aWFsIGluIGFueSBzZWN1cml0eSBwcm90b2NvbCB0byBkbyB0aGlzDQoNCj4gPiBh bmFseXNpcyBhbmQgYmUgY2xlYXIgYWJvdXQgd2hhdCBpcywgYW5kIHdoYXQgaXMgbm90LCBwcm90 ZWN0ZWQgYnkgdGhlIHByb3RvY29sLg0KDQo+DQoNCj4gT0F1dGggSkFSIGlzIG5vdGhpbmcgYnV0 IGp1c3QgYW5vdGhlciBiaW5kaW5nIHRvIE9BdXRoIDIuMC4gV2hlcmUNCg0KPiBSRkM2NzQ5IGJp bmRzIGl0IHRvIGZvcm0gZW5jb2RpbmcsIGl0IHByb3ZpZGVzIHR3byBhZGRpdGlvbmFsIGJpbmRp bmdzOg0KDQo+ICAgICAxKSBiaW5kaW5nIHRvIEpXVCwgYW5kDQoNCj4gICAgIDIpIGJpbmRpbmcg dG8gdGhlIHB1c2hlZCBhdXRob3JpemF0aW9uIHJlcXVlc3QgdGhhdCBpcyByZWZlcmVuY2VkIGJ5 IGEgVVJJLg0KDQo+IEl0IGlzIHRoaXMgc2ltcGxlLiBBcyBzdWNoLCBpdCB3b3VsZCBhbHNvIGlu aGVyaXQgc29tZSBvZiB0aGUNCg0KPiBzaG9ydGNvbWluZ3MgaW4gUkZDNjc0OS4gSG93ZXZlciwg aXQgaXMgbm90IHRoaXMgZG9jdW1lbnQgdG8gYWRkcmVzcw0KDQo+IHRoZW0uIEl0IHNob3VsZCBi ZSBkb25lIGJ5IG90aGVyIGRvY3VtZW50cyBzbyB0aGF0IHRoZSByZXN1bHQgY2FuIGJlDQoNCj4g ZW5jb2RlZCB1c2luZyB0aGUgbWVjaGFuaXNtcyBwcm92aWRlZCBpbiB0aGlzIGRvY3VtZW50Lg0K DQoNCg0KVGhpcyBpcyBub3QgYSBzaW1wbGUgbWF0dGVyLiBKV1QgaGFzIGEgbG9uZyBhbmQgdHdp c3RlZCBoaXN0b3J5IHdpdGggc29tZSBwZXJ2YXNpdmUgZXJyb3JzIGluIGNvbW1vbiBsaWJyYXJp ZXMsIGFuZCBpcyBhIGZhaXJseSBsYXJnZSBzdGFuZGFyZC4gT0F1dGggMi4wIGlzIGFsc28gbGFy Z2UuIEVuc3VyaW5nIHRoYXQgdGhlIG1hcHBpbmcgaGFzIHRoZSByaWdodCBwcm9wZXJ0aWVzIGlz IGdvaW5nIHRvIGJlIGEgbWVzcy4gSWYgdGhlIGVuY29kaW5nIGRvZXMgbm90IHJlc3BlY3QgdGhl IHNlbWFudGljcyB3ZSBoYXZlIGEgc2VyaW91cyBzZWN1cml0eSBpc3N1ZS4gSWYgaW1wbGVtZW50 b3JzIGFzc3VtZSB0aGUgZW5jb2RpbmcgcHJvdmlkZXMgcHJvcGVydGllcyBpdCBkb2VzIG5vdCwg d2UgYWdhaW4gaGF2ZSBhIHNlY3VyaXR5IGlzc3VlLg0KDQoNCg0KTWlrZT4gU2VlIG15IHByZXZp b3VzIGNvbW1lbnRzIG9uIHBhc3QgSldUIGltcGxlbWVudGF0aW9uIGVycm9ycyBhbmQgdGhlIHdy aXRpbmcgb2YgdGhlIEpXVCBCQ1AgW1JGQyA4NzI1XSB0byBhZGRyZXNzIHRoZXNlLg0KDQoNCg0K PiBJdCBpcyBxdWl0ZSBzdXJwcmlzaW5nIHRoYXQgdGhpcyBmYWN0IGlzIG5vdCBnZXR0aW5nIGFw cHJlY2lhdGVkIGFuZA0KDQo+IGlzIHRha2luZyBzdWNoIGEgbG9uZyB0aW1lIHRvIGNvbXBsZXRl Lg0KDQo+IE1heWJlIEkgc2hvdWxkIGRlbGV0ZSBhbGwgdGhlIGV4cGxhbmF0aW9uIHRleHQgYW5k IGxlYXZlIGl0IHdpdGgganVzdA0KDQo+IHRoZSBjb3JlIHRleHQuIEV4cGxhbmF0aW9uIGFuZCBq dXN0aWZpY2F0aW9uIHRleHQgZm9yIGRlZmluaW5nDQoNCj4gYWRkaXRpb25hbCBiaW5kaW5ncyBw cm9iYWJseSBhcmUganVzdCBkaXN0cmFjdGlvbnMgbm93IGFzIGl0IGlzIG5vdw0KDQo+IGFwcHJl Y2lhdGVkIGFuZCB1c2VkIGFsbCBvdmVyIHRoZSB3b3JsZCB1bmxpa2Ugd2hlbiB0aGUgcHJvamVj dCB3YXMNCg0KPiBzdGFydGVkLg0KDQoNCg0KTWlrZT4gSSB3b3VsZCBwcm9wb3NlIHRoYXQgd2Ug bWFrZSBvbmx5IG5lY2Vzc2FyeSBjaGFuZ2VzIHRvIHRoZSBkcmFmdCBhdCB0aGlzIHBvaW50LiAg TGV0J3MgZmluaXNoIHRoaXMgbG9uZy1vdmVyZHVlIHNwZWNpZmljYXRpb24hDQoNCg0KDQo+DQoN Cj4gPg0KDQo+ID4gU2luY2VyZWx5LA0KDQo+ID4gV2F0c29uIExhZGQNCg0KPiA+DQoNCj4NCg0K PiBUaGFua3MgYWdhaW4gZm9yIHlvdXIgZGV0YWlsZWQgY29tbWVudHMuDQoNCj4NCg0KPiBCZXN0 IHdpc2hlcywNCg0KPg0KDQo+IC0tDQoNCj4gTmF0IFNha2ltdXJhDQoNCj4gTkFULkNvbnN1bHRp bmcgTExDDQoNCg0KDQpNaWtlPiBJIG5vdyBwbGFuIHRvIGNyZWF0ZSBlZGl0cyBpbmNvcnBvcmF0 aW5nIHRoZSBwcm9wb3NlZCByZXNvbHV0aW9ucyBhYm92ZSBmb3IgcmV2aWV3Lg0KDQoNCg0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEJlc3Qg d2lzaGVzLA0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgLS0gTWlrZQ0KDQoNCg0KLS0NCg0KQXN0cmEgbW9ydGVtcXVlIHByYWVzdGFyZSBn cmFkYXRpbQ0K --_000_SN6PR00MB042990C1C9C0DAE300E79A48F59D9SN6PR00MB0429namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvUGxhaW5UZXh0LCBsaS5Nc29QbGFp blRleHQsIGRpdi5Nc29QbGFpblRleHQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1z dHlsZS1saW5rOiJQbGFpbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4 dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpl eHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBX b3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEu MGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+ PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9 ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBt c28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0 PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0K PC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0Rjcy IiBzdHlsZT0id29yZC13cmFwOmJyZWFrLXdvcmQiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24x Ij4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPlRoYW5rcyBhZ2FpbiBmb3IgeW91ciByZXZpZXcs IFdhdHNvbi4mbmJzcDsgTXkgcmVwbGllcyB0byB5b3VyIGNvbW1lbnRzIGJlbG93IGFyZSBwcmVm aXhlZCBieSAmcXVvdDs8c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDs8L3NwYW4+ JnF1b3Q7LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4tLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLTxicj4NCkZyb206IFdhdHNvbiBMYWRkICZsdDt3YXRzb25ibGFkZEBnbWFpbC5jb20m Z3Q7IDxicj4NClNlbnQ6IFR1ZXNkYXksIERlY2VtYmVyIDE1LCAyMDIwIDk6MDEgUE08YnI+DQpU bzogTmF0IFNha2ltdXJhICZsdDtuYXRAbmF0LmNvbnN1bHRpbmcmZ3Q7PGJyPg0KQ2M6IHNlY2Rp ciAmbHQ7c2VjZGlyQGlldGYub3JnJmd0OzsgSUVURiBvYXV0aCBXRyAmbHQ7b2F1dGhAaWV0Zi5v cmcmZ3Q7OyBsYXN0LWNhbGxAaWV0Zi5vcmc7IGRyYWZ0LWlldGYtb2F1dGgtandzcmVxLmFsbEBp ZXRmLm9yZzxicj4NClN1YmplY3Q6IFtFWFRFUk5BTF0gUmU6IFNlY2RpciBsYXN0IGNhbGwgcmV2 aWV3IG9mIGRyYWZ0LWlldGYtb2F1dGgtandzcmVxLTMwPC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5PbiBT YXQsIE9jdCAzMSwgMjAyMCBhdCA2OjEzIEFNIE5hdCBTYWtpbXVyYSAmbHQ7PGEgaHJlZj0ibWFp bHRvOm5hdEBuYXQuY29uc3VsdGluZyI+PHNwYW4gc3R5bGU9ImNvbG9yOndpbmRvd3RleHQ7dGV4 dC1kZWNvcmF0aW9uOm5vbmUiPm5hdEBuYXQuY29uc3VsdGluZzwvc3Bhbj48L2E+Jmd0OyB3cm90 ZTo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgSGkgV2F0c29uLDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBUaGFua3MgdmVyeSBtdWNoIGZvciB0 aGUgcmV2aWV3LiBJIHRob3VnaHQgSSBoYXZlIHNlbnQgbXkgcmVzcG9uc2UNCjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBlYXJsaWVyLCB3aGljaCBJIGFjdHVh bGx5IGRpZCBub3QuIEl0IHdhcyBzaXR0aW5nIGluIG15IGRyYWZ0IGJveC4gSQ0KPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IGFwb2xvZ2l6ZSBmb3IgaXQuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPk15IGFwb2xvZ2llcyBmb3IgbWlzc2luZyBpdCBp biBteSBpbmJveCBmb3IgYSBudW1iZXIgb2YgbW9udGhzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyBNeSByZXNwb25zZXMgaW5saW5lOjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyBPbiBTYXQsIFNlcCAyNiwgMjAyMCBhdCA5OjQ2IEFNIFdhdHNv biBMYWRkIHZpYSBEYXRhdHJhY2tlcg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86bm9yZXBseUBpZXRmLm9yZyI+PHNwYW4g c3R5bGU9ImNvbG9yOndpbmRvd3RleHQ7dGV4dC1kZWNvcmF0aW9uOm5vbmUiPm5vcmVwbHlAaWV0 Zi5vcmc8L3NwYW4+PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7ICZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsgJmd0OyBSZXZpZXdlcjogV2F0c29uIExhZGQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBSZXZpZXcgcmVzdWx0OiBTZXJpb3VzIElzc3Vl czxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgSSBnZW5lcmF0ZWQg dGhpcyByZXZpZXcgb2YgdGhpcyBkb2N1bWVudCBhcyBwYXJ0IG9mIHRoZSBzZWN1cml0eQ0KPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgZGlyZWN0b3Jh dGUncyBvbmdvaW5nIGVmZm9ydCB0byByZXZpZXcgYWxsIElFVEYgZG9jdW1lbnRzIGJlaW5nDQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBwcm9jZXNz ZWQgYnkgdGhlIElFU0cuJm5ic3A7IFRoZXNlIGNvbW1lbnRzIHdlcmUgd3JpdHRlbiB3aXRoIHRo ZSBpbnRlbnQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAm Z3Q7IG9mIGltcHJvdmluZyBzZWN1cml0eSByZXF1aXJlbWVudHMgYW5kIGNvbnNpZGVyYXRpb25z IGluIElFVEYNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAm Z3Q7IGRyYWZ0cy4mbmJzcDsgQ29tbWVudHMgbm90IGFkZHJlc3NlZCBpbiBsYXN0IGNhbGwgbWF5 IGJlIGluY2x1ZGVkIGluIEFEDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsgJmd0OyByZXZpZXdzIGR1cmluZyB0aGUgSUVTRyByZXZpZXcuJm5ic3A7IERvY3Vt ZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQgdGhlc2UgY29tbWVudHMganVz dCBsaWtlIGFueSBvdGhlciBsYXN0IGNhbGwgY29tbWVudHMuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsgJmd0OyBUd28gbWlub3IgaXNzdWVzOiBPbiBwYWdlIDQsICZxdW90 O1RoaXMgb2ZmZXJzIGFuIGFkZGl0aW9uYWwgZGVncmVlIG9mDQo8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBwcml2YWN5IHByb3RlY3Rpb24uJnF1b3Q7 IHNob3VsZCBiZSByZXdvcmRlZC4gSSBkb24ndCB0aGluayBpdCBtYWtlcw0KPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgc2Vuc2UgaW4gY29udGV4dCwg d2hlcmUgYXV0aGVudGljaXR5IHdhcyBkaXNjdXNzZWQuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7IEluIHRoZSBjb3Vyc2Ugb2YgdGhlIGVkaXQsIGV4cGxhbmF0aW9uIGFib3V0IHR3 byBkaXN0aW5jdCBwcml2YWN5DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsgYmVuZWZpdHMgd2FzIGNvbGxhdGVkIGluIG9uZSBzZW50ZW5jZSBhbmQgaGFzIGJl Y29tZSB2ZXJ5IGRpZmZpY3VsdCB0bw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7IHBhcnNlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyBXaGF0IGl0IGlzIHRyeWluZyB0byBleHByZXNzIGFzIHByaXZhY3kgYmVuZWZpdHMgYXJlIHRo ZSBmb2xsb3dpbmcuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IDEpIFRo ZSBhdXRob3JpemF0aW9uIHJlcXVlc3QgY29udGVudCBpcyBzZW50IHRvIHRoZSBBUyBpbiB0aGUN CjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBiYWNrY2hhbm5l bCBzbyBpdCB3aWxsIG5vdCBiZSBleHBvc2VkIHRocm91Z2ggdGhlIGJyb3dzZXIgdG8gdGhlIGV5 ZXMNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBvZiBhbiBh Y3RpdmUgb3IgcGFzc2l2ZSBvdXRzaWRlciBvYnNlcnZpbmcgd2hhdCBpcyBnb2luZyBvbiBpbiB0 aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBicm93c2Vy LiZuYnNwOyBJbiB0aGUgUkZDNjc0OSBmcmFtZXdvcmsgY2FzZSwgdGhlIGF1dGhvcml6YXRpb24g cmVxdWVzdA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IGdv ZXMgdGhyb3VnaCB0aGUgYnJvd3NlciByZWRpcmVjdCBhbmQgaXQgY291bGQgbGVhayB0byB0aGUg YWR2ZXJzYXJ5DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsg dmlhIFdQQUQvUEFDIEF0dGFjaywgcmVmZXJyZXIsIGJyb3dzZXIgaGlzdG9yeSwgZXRjLiBBbHNv LCBpZiB0aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBi cm93c2VyIHdhcyBpbmZlY3RlZCBieSBhbiBhZHZlcnNhcnkgY29udHJvbGxlZCBtYWx3YXJlLCB0 aGUgY29udGVudA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 IGNhbiBiZSBzbmlmZmVkIGJ5IHRoZSBhZHZlcnNhcnkuIEluIHRoZSBjYXNlIG9mIEpBUiwgaXQg ZG9lcyBub3QNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBo YXBwZW4uIFRoaXMgaXMgb25lIHByaXZhY3kgYmVuZWZpdCBpdCBpcyB0cnlpbmcgdG8gZXhwbGFp bi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgMikgVGhlIGxvY2F0aW9u IHRoYXQgdGhlIGF1dGhvcml6YXRpb24gcmVxdWVzdCBpcyBnZXR0aW5nIHB1c2hlZCB0bw0KPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IGRvZXMgbm90IGhhdmUg dG8gYmUgdGhlIEFTLiBBIHRydXN0ZWQgdGhpcmQgcGFydHkgdGhhdCBleGFtaW5lcyB0aGUNCjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBjb250ZW50IGZvciB0 aGUgY29uZm9ybWFuY2UgdG8gdGhlIGNvbGxlY3Rpb24gbWluaW1pemF0aW9uIHByaW5jaXBsZQ0K PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IG1heSBhY3QgYXMg dGhlIHBhcnR5IHRoYXQgYWNjZXB0cyB0aGUgYXV0aG9yaXphdGlvbiByZXF1ZXN0IGFuZCBpc3N1 ZXMNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyB0aGUgcmVx dWVzdF91cmkuIEFTIGNhbiB0aGVuIGp1c3QgZXZhbHVhdGUgdGhlIGRvbWFpbiBwYXJ0IG9mDQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgcmVxdWVzdF91cmkg dG8gZXZhbHVhdGUgdGhhdCB0aGUgYXV0aG9yaXphdGlvbiByZXF1ZXN0IGlzIGNvbmZvcm1hbnQN CjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyB0byB0aGlzIHBy aW5jaXBsZS4gVGhpcyBpcyBhbm90aGVyIHByaXZhY3kgYmVuZWZpdCBmcm9tIHRoZSBwb2ludCBv Zg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IHZpZXcgb2Yg dGhlIGluZGl2aWR1YWwgdXNlci48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+SSdtIGZp bmUgd2l0aCBhbnkgZml4IHRvIHRoZSBzZW50ZW5jZSB0aGF0IG1ha2VzIHNlbnNlLiBEb24ndCB0 aGluayB3ZSBuZWVkIHRvIGluc2VydCB0aGUgYWJvdmUgYnV0IEkgdmVyeSBtdWNoIGFwcHJlY2lh dGUgdGhlIGV4cGxhbmF0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBz dHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgR2l2ZW4gdGhhdCBpdHMgbWVhbmluZyBpcyBm YWlybHkgaW5zY3J1dGFibGUsIGFuZCB0aGF0IHRoZSB0d28gYmVuZWZpdHMgZGVzY3JpYmVkIGJ5 IE5hdCBhYm92ZSBhcmUgcGFydGlhbGx5IHJlbGF0ZWQgdG8gcGFyYWdyYXBocyBvdGhlciB0aGFu IHRoZSBvbmUgd2l0aCB0aGUgcHJpdmFjeSBzdGF0ZW1lbnQsIEkgcHJvcG9zZSB0aGF0IHdlIHNp bXBseQ0KIGRlbGV0ZSB0aGUgc2VudGVuY2UgJnF1b3Q7VGhpcyBvZmZlcnMgYW4gYWRkaXRpb25h bCBkZWdyZWUgb2YgcHJpdmFjeSBwcm90ZWN0aW9uLiZxdW90OyBmcm9tIHRoaXMgcGFyYWdyYXBo LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IEl0IHRvb2sg bWUgYSB3aGlsZSB0byB1bmRlcnN0YW5kIHdoYXQgdGhlIGJ5IHJlZmVyZW5jZSBtZXRob2QgaXM6 DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBtYXli ZSB0aGUgaW50cm8gc2hvdWxkIHNheSB2aWEgVVJMIGluc3RlYWQgb2YgYnkgcmVmZXJlbmNlLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyByZXF1ZXN0X3VyaSBjYW4gYmUgVVJMIG9y IGEgaGFuZGxlIHN1Y2ggYXMgVVJOLiBUaGF0IGlzIHdoeSB0aGUgJnF1b3Q7YnkNCjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyByZWZlcmVuY2UmcXVvdDsgd29y ZCBpcyBiZWluZyB1c2VkLCBwZXIgdGhlIHN1Z2dlc3Rpb24gb2YgdGhlIFdHLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij5JJ20gZmluZSB3aXRoIHRoYXQsIGp1c3Qgbm90aW5nIG15IGNv bmZ1c2lvbi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9y OiMwMEIwNTAiPk1pa2UmZ3Q7IFVuZGVyc3Rvb2QuJm5ic3A7IEkgbG9va2VkIGF0IHdheXMgdG8g cG9zc2libHkgbW92ZSB0aGUgJnF1b3Q7YnkgcmVmZXJlbmNlJnF1b3Q7IHRleHQgdGhhdCBmb2xs b3dzIGluIGEgZmV3IHBhcmFncmFwaHMgZWFybGllciB0byBwb3NzaWJseSBtYWtlIHRoaXMgY2xl YXJlciwgYnV0IGl0IHdvdWxkIG1lc3MgdXAgdGhlIGxvZ2ljYWwgZmxvdyBvZiB0aGUgSW50cm9k dWN0aW9uLiZuYnNwOw0KIFVubGVzcyB5b3UgaGF2ZSBhIGJldHRlciBzdWdnZXN0aW9uLCBJIHBy b3Bvc2UgdGhhdCB3ZSBsZWF2ZSB0aGlzIGFzLWlzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IEFuZCBub3cgZm9yIHRoZSB0aG9ybnkgaXNzdWVzIHdpdGgg dGhpcyBkcmFmdC4gU2lnbmF0dXJlcyBhbmQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IGVuY3J5cHRpb24gYXJlIGRpZmZlcmVudC4gQW5kIGVuY3J5 cHRpbmcgYSBzaWduZWQgYmxvYiBkb2Vzbid0IG1lYW4gdGhlIHNpZ25lciBlbmNyeXB0ZWQgaXQu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgVGhlbiB0 aGVyZSBhcmUgYSBwbGV0aG9yYSBvZiBtZXRob2RzIHNwZWNpZmllZCBpbiB0aGUgZHJhZnQmbmJz cDsgdG8NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7 IGF1dGhlbnRpY2F0ZSB0aGUgYmxvYiwgd2hpY2ggd2lsbCBnaXZlIGRpZmZlcmVudCByZXN1bHRz IGluDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBt YWxpY2lvdXNseSBjb25zdHJ1Y3RlZCBleGFtcGxlcy4gVGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRp b25zDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBz ZWN0aW9uIHNob3VsZCBkaXNjdXNzIHdoYXQgdGhlIGVuY3J5cHRlZCB2cyBzaWduZWQgY2hvaWNl cyBnaXZlIGluDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsg Jmd0OyB0aGUgd2F5IG9mIHNlY3VyaXR5LCBhbmQgaXQgZG9lc24ndC4gVGhpcyBtYWtlcyBtZSB3 b3JyeS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgV2UgZG9u4oCZdCBl eHBlY3QgdGhlIGVuY3J5cHRpb24gdG8gZW5zdXJlIGF1dGhlbnRpY2l0eSwgdGhhdOKAmXMgd2hh dCB0aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBzaWdu YXR1cmVzIGFyZSB1c2VkIGZvci48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+VGhpcyBu ZWVkcyB0byBiZSB2ZXJ5IGNsZWFybHkgc3BlbGxlZCBvdXQgaW4gdGhlIHRleHQuIExvdHMgb2Yg cGVvcGxlIHdpbGwgbm90IHVuZGVyc3RhbmQgdGhpcy4gVGhlIHdvcmRpbmcgb2Ygc2VjdGlvbiAx MC4yIGlzIGF0IGJlc3QgYW1iaXZhbGVudCwgd2l0aCBtdWx0aXBsZSBhbHRlcm5hdGl2ZXMgcHJl c2VudGVkIGFzIGFjY2VwdGFibGUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFu IHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBBZnRlciB0aGUgc2VudGVuY2UgYXQgMTAu MiAoYikgYWJvdXQgc3ltbWV0cmljIGVuY3J5cHRpb24sIEkgcHJvcG9zZSB0aGF0IHdlIGFkZCB0 aGUgZm9sbG93aW5nIHNlbnRlbmNlIHRvIGVtcGhhc2l6ZSB0aGUgcG9pbnQgeW91J3JlIHJhaXNp bmc6ICZuYnNwOyZxdW90O05vdGUgaG93ZXZlciwgdGhhdCBpZiBwdWJsaWMga2V5IGVuY3J5cHRp b24gaXMgdXNlZCwgbm8NCiBzb3VyY2UgYXV0aGVudGljYXRpb24gaXMgZW5hYmxlZCBieSB0aGUg ZW5jcnlwdGlvbiwgYXMgYW55IHBhcnR5IGNhbiBlbmNyeXB0IGNvbnRlbnQgdG8gdGhlIHB1Ymxp YyBrZXkuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mbHQ7Y2hvcCZndDs8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsgSSBkaWRuJ3QgcXVpdGUgZ2V0IHdoYXQgaXMgbWVhbnQgYnkg JnF1b3Q7cGxldGhvcmEgb2YgbWV0aG9kcyBzcGVjaWZpZWQgaW4NCjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyB0aGUgZHJhZnQgdG8gYXV0aGVudGljYXRlIHRo ZSBibG9iIC4uLiAmcXVvdDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsgVGhlcmUgaXMgYSBiaXQgb2YgdGV4dCBhYm91dCBhdXRoZW50aWNhdGluZyB0aGUgc291 cmNlICg9Y2xpZW50KSBidXQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyBub3QgbXVjaCBvbiB0aGUgYmxvYiBpdHNlbGYuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IFRoZSBkaXNjdXNzaW9uIGFyb3VuZCB0aGUgc2lnbmF0 dXJlIGFuZC9vciBlbmNyeXB0aW9uIGlzIGNvdmVyZWQgaW48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsgUkZDNzUxOSAoSldUKSwgdGhlIGZvcm1hdCB0aGF0IHRo ZSByZXF1ZXN0IG9iamVjdCBhc3N1bWVzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyBUaGlzIGlzIHJlcXVpcmVkIHJlYWRpbmcgd2hlbiBpbXBsZW1lbnRpbmcg dGhpcyBzcGVjLCBzbyBXRyB0aG91Z2h0IGl0DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsgaXMgbm90IHdvcnRoIHJlcGVhdGluZyBoZXJlLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBBdHRhY2tzIGV0Yy4gb24gdGhlIHNp Z25hdHVyZSBhbmQgZW5jcnlwdGlvbiBhcmUgY292ZXJlZCBpbiBSRkM3NTE1DQo8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgYW5kIFJGQzc1MTYgcmVzcGVjdGl2 ZWx5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5XZWxsLCB0aGUgZHJhZnQgaGFwcGVu cyB0byBpbmNsdWRlIHRoZSBmb2xsb3dpbmcgdGV4dDo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyAmcXVvdDtUaGUgQXV0aG9yaXphdGlvbiBTZXJ2 ZXIgTVVTVCB2YWxpZGF0ZSB0aGUgc2lnbmF0dXJlIG9mIHRoZSBKU09OIFdlYjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jm5ic3A7Jm5ic3A7IFNpZ25hdHVyZSBbUkZD NzUxNV0gc2lnbmVkIFJlcXVlc3QgT2JqZWN0LiZuYnNwOyBUaGUgc2lnbmF0dXJlIE1VU1QgYmU8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNwOyZuYnNwOyB2YWxp ZGF0ZWQgdXNpbmcgdGhlIGtleSBmb3IgdGhhdCAmcXVvdDtjbGllbnRfaWQmcXVvdDsgYW5kIHRo ZSBhbGdvcml0aG08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZuYnNw OyZuYnNwOyBzcGVjaWZpZWQgaW4gdGhlICZxdW90O2FsZyZxdW90OyBIZWFkZXIgUGFyYW1ldGVy LiZxdW90OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5TaG91bGRuJ3QgdGhlIGtleSBi ZSBhc3NvY2lhdGVkIHdpdGggYSBzaW5nbGUgYWxnb3JpdGhtPyBIb3cgZG8gd2UgZW5zdXJlIHRo YXQgdGhlIGNvbW1vbiBhdHRhY2sgb2YgdGVsbGluZyB0aGUgc2VydmVyIHRvIHVzZSBobWFjIHRv IHZlcmlmeSB0aGUgc2lnbmF0dXJlIGRvZXNuJ3Qgd29yayBoZXJlPzxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgR29vZCBw b2ludC4mbmJzcDsgVGhpcyBhdHRhY2sgaXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gMi4xIG9mIFJG QyA4NzI1IGFuZCBtaXRpZ2F0ZWQgYnkgdGhlIHByYWN0aWNlcyBpbiBTZWN0aW9ucyAzLjEgYW5k IDMuMiBvZiB0aGUgc2FtZS4mbmJzcDsgSSBwcm9wb3NlIHRoYXQgd2UgcmVwbGFjZSB0aGUgc2Vu dGVuY2U6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPiZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtUaGUgc2ln bmF0dXJlIE1VU1QgYmUgdmFsaWRhdGVkIHVzaW5nIHRoZSBrZXkgZm9yIHRoYXQgJnF1b3Q7Y2xp ZW50X2lkJnF1b3Q7IGFuZCB0aGUgYWxnb3JpdGhtIHNwZWNpZmllZCBpbiB0aGUgJnF1b3Q7YWxn JnF1b3Q7IEhlYWRlciBQYXJhbWV0ZXIuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPndpdGg6PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMwMEIwNTAiPiZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtUaGUgc2lnbmF0dXJlIE1V U1QgYmUgdmFsaWRhdGVkIHVzaW5nIGEga2V5IGFzc29jaWF0ZWQgd2l0aCB0aGUgY2xpZW50IGFu ZCB0aGUgYWxnb3JpdGhtIHNwZWNpZmllZCBpbiB0aGUgJnF1b3Q7YWxnJnF1b3Q7IEhlYWRlciBQ YXJhbWV0ZXIuJm5ic3A7IElmIGEgJnF1b3Q7a2lkJnF1b3Q7IEhlYWRlciBQYXJhbWV0ZXIgaXMg cHJlc2VudCwgdGhlIGtleSBpZGVudGlmaWVkIE1VU1QgYmUgdGhlDQoga2V5IHVzZWQsIGFuZCBN VVNUIGJlIGEga2V5IGFzc29jaWF0ZWQgd2l0aCB0aGUgY2xpZW50LiZuYnNwOyBBbGdvcml0aG0g dmVyaWZpY2F0aW9uIE1VU1QgYmUgcGVyZm9ybWVkLCBhcyBzcGVjaWZpZWQgaW4gU2VjdGlvbnMg My4xIGFuZCAzLjIgb2YgUkZDIDg3MjUuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7ICZndDsgTG9va2luZyBhdCB0aGUgY2l0ZWQgcmVmZXJlbmNlIGZvciBh dHRhY2tzLCBJIHNlZSB0aGUgZml4IGlzIHRvDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsgJmd0OyBpbmNsdWRlIGluZm9ybWF0aW9uIGFib3V0IHdoaWNoIElQ RCB3YXMgdXNlZCBieSB0aGUgUlAuIEJ1dCB0aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IGRyYWZ0IGJlZm9yZSB1cyBkb2Vzbid0IG1hbmRhdGUg dGhhdC4gSXQncyBub3QgY2xlYXIgdGhhbiBob3cgdGhlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBjaXRlZCBhdHRhY2sgaXMgcHJldmVudGVkIGJ5 IHRoZSBkcmFmdC4gU2F5aW5nIHRoYXQgdGhlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsgJmd0OyBjb21tdW5pY2F0aW9uIHRocm91Z2ggdGhlIHVzZXItYWdl bnQgaXMgc3ViamVjdCB0bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBU aGUgbWVudGlvbiBvZiBtaXgtdXAgYXR0YWNrIHdhcyBpbnRyb2R1Y2VkIGFmdGVyIHRoZSBMYXN0 IGNhbGwgYnkgb25lDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsgb2YgdGhlIGNvbW1lbnQuIEl0IGp1c3QgYWRkZWQgaXQgaW4gdGhlIHNlbnRlbmNlIHdpdGgg YSByZWZlcmVuY2UuIEkNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyBhbSBvayB0byByZW1vdmUgaXQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPlRo YXQgd29ya3MgZm9yIG1lLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHls ZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgSSB3aWxsIHJlbW92ZSB0aGUgbWl4LXVwIGF0dGFj ayByZWZlcmVuY2UgaW4gdGhlIG5leHQgZHJhZnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7IEhhdmluZyBzYWlkIHRoYXQsIHRoZSBoZWFydCBvZiBtaXgtdXAgYXR0 YWNrIGlzIHRoYXQgdGhlIGNvbWJpbmF0aW9uDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsgb2YgdGhlIGNsaWVudCBiZWxpZXZlcyB0aGF0IGl0IGlzIGNvbW11 bmljYXRpbmcgd2l0aCB0aGUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyBhdHRhY2tlci1jb250cm9sbGVkIEFTIChBQVMpIHdoaWxlIGl0IGluLWZhY3QgaXMg dGFsa2luZyB0byBIb25lc3QgQVMNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyAoSEFTKSwgQU5EIEhBUyB1bmFibGUgdG8gZmluZCBvdXQgdGhhdCB0aGUgY2xp ZW50IGlzIHRoaW5raW5nIHRoYXQgaXQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+Jmd0OyBpcyB0YWxraW5nIHRvIEFBUyBub3QgaGltLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBPQXV0aCBKQVIgc2VlbXMgdG8gbWl0aWdhdGUgaXQgaW4g dHdvIHdheXM6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IGEpIFVzZSBy ZXF1ZXN0X3VyaSB3aGljaCBpcyBob3N0ZWQgYnkgdGhlIEFTLiBUaGVuLCBpZiB0aGUgY2xpZW50 IGlzDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgdGhpbmtp bmcgdGhhdCBpdCBpcyB0YWxraW5nIHRvIHRoZSBBQVMsIHRoZW4gaXQgd2lsbCBwdXNoIGl0IHRv IEFBUw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IGFuZCB3 aGVuIHRoZSB1c2VyIGlzIHJlZGlyZWN0ZWQgdG8gSEFTLCBIQVMgd2lsbCBmaW5kIG91dCB0aGF0 IHRoZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IHJlcXVl c3RfdXJpIGlzIG5vdCBjcmVhdGVkIGJ5IGhlcnNlbGYgYW5kIHJldHVybiBhbiBlcnJvciwgbWFr aW5nIHRoZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IG1p eC11cCBhdHRhY2sgZmFpbC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsg YikgSW5jbHVkZSBgYXVkYCBpbiB0aGUgcmVxdWVzdC4gVGhlbiwgd2hlbiB0aGUgSEFTIHdpbGwg ZmluZCB0aGF0IHRoZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7IHJlcXVlc3Qgd2FzIG1pbnRlZCB0byBBQVMgYW5kIG5vdCBoZXIuIFNvLCBpdCB3aWxsIHJl c3VsdCBpbiBhbiBlcnJvciwNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyBtYWtpbmcgdGhlIG1peC11cCBhdHRhY2sgZmFpbC48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+SWYgdGhlIGRyYWZ0IG1hbmRhdGVzIGRvaW5nIHRoaXMgaXQgYWRkcmVzc2Vz IHRoZSBhdHRhY2sgYW5kIHRoZSBzZW50ZW5jZSBjYW4gc3RheS48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IFRoZSBkcmFm dCBtYW5kYXRlcyB1c2Ugb2YgJnF1b3Q7YXVkJnF1b3Q7IGJ1dCBpdCBkb2VzIG5vdCBtYW5kYXRl IHRoYXQgdGhlIHJlcXVlc3RfdXJpIGJlIGhvc3RlZCBieSB0aGUgQVMuJm5ic3A7IFRoZXJlZm9y ZSwgSSB0aGluayB3ZSBzaG91bGQgcmVtb3ZlIHRoZSBtaXgtdXAgYXR0YWNrIHJlZmVyZW5jZS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgU28sIEkgYWRkZWQgbWl4 LXVwIGF0dGFjayB0byB0aGUgc2VudGVuY2UgdGhpbmtpbmcgdGhlIGNvbW1lbnRlcidzDQo8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgcmVxdWVzdCB0byBhZGQg aXQgaXMgZmluZSwgYnV0IEkgYW0gZmluZSB3aXRoIHJlbW92aW5nIGl0LjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IG1hbmlwdWxhdGlvbiwgYW5kIHRoaXMgcHJl dmVudHMgaXQsIGlnbm9yZXMgdGhhdCB0aGUgYXR0YWNrZXIgaW4NCjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IHRoYXQgcG9zaXRpb24gc2VlcyBhIGxv dCBtb3JlLiBUaGUgdXNlci1hZ2VudCBhcyByZXNvdXJjZSBvd25lcg0KPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgbW9kaWZ5aW5nIHRoZSByZXF1ZXN0 ZWQgcmVzb3VyY2VzIGlzIGEgdmVyeSBmdW5ueSBzb3J0IG9mIGF0dGFjazoNCjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IGNhbid0IHRoZXkgZG8gd2hh dCB0aGV5IHdhbnQgd2l0aCB0aGUgcmVzb3VyY2VzIHNpbmNlIHRoZXkgY29udHJvbCB0aGUgYWNj ZXNzPzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBJZiB0aGUgY2xpZW50 IGlzIGluIHRoZSBicm93c2VyLCB5ZXMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7IEJ1dCBpbiB0aGUgbWFpbnN0cmVhbSBjYXNlLCB0aGUgY2xpZW50IGlzIG5v dCBpbiB0aGUgYnJvd3NlciBidXQgdGhlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsgd2ViLXNlcnZlciB0aGF0IHRoZSBicm93c2VyIGlzIGNvbW11bmljYXRp bmcgd2l0aCBhbmQgdGhlIHJlc291cmNlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsgYWNjZXNzIGhhcHBlbnMgd2l0aG91dCBiZWluZyBtZWRpYXRlZCBieSB0 aGUgYnJvd3Nlci48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+TXkgY29uY2VybiBvbiB0 aGlzIHBvaW50IGlzIHJlc29sdmVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3Bh biBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgVGhhbmtzPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 ICZndDsgS2V5IG1hbmFnZW1lbnQgaXMgaWdub3JlZC4gVGhpcyBpcyBhIHZlcnkgaW1wb3J0YW50 IGlzc3VlLA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZn dDsgZXNwZWNpYWxseTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBBIGxv dCBvZiBncm91bmQgaXMgY292ZXJlZCBieSBSRkMgNzUxNSwgNzUxNiwgNzUxNywgNzUxOCwgNzUx OSwgNzU5MSwNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBh bmQgODQxNCBzbyB0aGlzIGRvY3VtZW50IGlzIG5vdCBzcGVjaWZpY2FsbHkgcmVzdGF0aW5nIHRo ZW0uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDs8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBjb25zaWRlcmluZyB0aGUg cG90ZW50aWFsIHByb2JsZW1zIHdpdGggdGhlIHJldXNlIG9mIEpXVC4gSSdkIGxpa2UNCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IHRvIHNlZSBhPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IEFyZSB5b3UgdGFsa2luZyBhYm91 dCB0aGUgcmV1c2Ugb2YgdGhlIHJlcXVlc3Qgb2JqZWN0IGJ5IGFuIGFkdmVyc2FyeQ0KPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IHRyeWluZyB0byBhY3QgYXMg YW4gaG9uZXN0IGNsaWVudD88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsgRXZlbiBpZiBpdCBoYXBwZW5zLCB0aGUgbWFsaWNpb3VzIGNsaWVudCBkb2VzIG5vdCBo YXZlIHRoZSBwcm9wZXINCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyBjbGllbnQgY3JlZGVudGlhbCBzbyBpdCBjYW5ub3QgcmVkZWVtIHRoZSBjb2RlIGl0IG9i dGFpbmVkIHdpdGggdGhlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsgdG9rZW4uIEl0IGlzIG5vIGRpZmZlcmVudCB0aGFuIFJGQzY3NDkgY29kZSBncmFudC4g UHJvdG9jb2xzIHRoYXQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ Jmd0OyBleHRlbmQgaXQsIHN1Y2ggYXMgT3BlbklEIENvbm5lY3QsIGhhdmUgaW50cm9kdWNlZCBu b25jZSB0byBwcmV2ZW50DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsgdGhlIHJldXNlIGFuZCB1c2VkIEpBUiAoaXQgaXMgY2FsbGVkIHJlcXVlc3Qgb2JqZWN0 IHRoZXJlKSB0byBmdXJ0aGVyDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsgcHJvdGVjdCB0YW1wZXJpbmcgYW5kIGFjaGlldmUgY2xpZW50IGF1dGhlbnRpY2F0 aW9uIGV2ZW4gaW4gdGhlIGZyb250DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsgY2hhbm5lbC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDs8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsgJmd0OyByZWNvbW1lbmRhdGlvbiB0aGF0IGtleXMgYmUgc2VwYXJhdGVkIGJ5IGludGVuZGVk IHVzZXMsIHJhdGhlciB0aGFuDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsgJmd0OyBsaW1pdGluZyBwYXJ0aWN1bGFyIGZpZWxkcyBpbiBhbiBhZC1ob2MgbWFu bmVyLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBDb3VsZCB5b3Uga2lu ZGx5IGVsYWJvcmF0ZSBvbiB0aGUgJnF1b3Q7YWQtaG9jIG1hbm5lciZxdW90OyBwYXJ0IHNvIHRo YXQgSSBjYW4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyB1 bmRlcnN0YW5kIGl0IG1vcmUgZnVsbHk/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjEw LjgsIENyb3NzLUpXVCBDb25mdXNpb24gZGlzY3Vzc2VzIGF2b2lkaW5nIHNpZ25pbmcgY2VydGFp biBmaWVsZHMsIHJhdGhlciB0aGFuIHN1Z2dlc3RpbmcgZ29vZCBrZXkgdXNhZ2UgYXMgYSBzb2x1 dGlvbi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMw MEIwNTAiPk1pa2UmZ3Q7IEkgcHJvcG9zZSB0byBhZGQgdGhpcyBuZXcgcGFyYWdyYXBoIGF0IHRo ZSBlbmQgb2YgU2VjdGlvbiAxMC44IHRvIGltcGxlbWVudCB5b3VyIHN1Z2dlc3Rpb246PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMEIwNTAiPiZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtGaW5hbGx5LCBhbm90aGVyIHdh eSB0byBwcmV2ZW50IGNyb3NzLUpXVCBjb25mdXNpb24gaXMgdG8gdXNlIGEga2V5IG1hbmFnZW1l bnQgcmVnaW1lIGluIHdoaWNoIGtleXMgdXNlZCB0byBzaWduIFJlcXVlc3QgT2JqZWN0cyBhcmUg aWRlbnRpZmlhYmx5IGRpc3RpbmN0IGZyb20gdGhvc2UgdXNlZCBmb3Igb3RoZXIgcHVycG9zZXMu Jm5ic3A7IFRoZW4sIGlmDQogYW4gYWR2ZXJzYXJ5IGF0dGVtcHRzIHRvIHJlcHVycG9zZSB0aGUg UmVxdWVzdCBPYmplY3QgaW4gYW5vdGhlciBjb250ZXh0LCBhIGtleSBtaXNtYXRjaCB3aWxsIG9j Y3VyLCB0aHdhcnRpbmcgdGhlIGF0dGFjay4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsgJmd0OyBUaGVuIHdlIGhhdmUgc2VjdGlvbiAxMS4gV2hhdCBzZWN0 aW9uIDExIGludHJvZHVjZXMgaXMgYW4gZW50aXJlIG5ldw0KPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgZHJhbWF0aXMgcGVyc29uYWUsIHRoZSBUcnVz dCBGcmFtZXdvcmsgUHJvdmlkZXIsIHdpdGggbm8gcHJpb3INCjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IGRpc2N1c3Npb24gb2Ygd2hhdCBpdCBpcyBv ciBhIHJlZmVyZW5jZSB0byB3aGVyZSBpdCBpcyBkZWZpbmVkIGFuZCBhDQo8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBnb29kIG51bWJlciBvZiBzdGF0 ZW1lbnRzIGFib3V0IGhvdyBpdCB3b3JrcyB0aGF0IGFyZW4ndCByZWFsbHkmbmJzcDsgY2xlYXIg d2hhdCB0aGV5IG1lYW4gZnJvbSB0aGUgZG9jdW1lbnQgdG8gbWUuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IFRydXN0IEZyYW1ld29yayBQcm92aWRlciBmaXJzdCBhcHBl YXJzIGluIDUuMi4xLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0 OyBBdCB0aGUgdGltZSBvZiB3cml0aW5nIHRoZSByZWxhdGVkIHRleHQsIGl0IHdhcyBhIHByZXR0 eSB3ZWxsLWtub3duDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsgY29uY2VwdC4gSW4gdGhlIFVuaXRlZCBTdGF0ZSwgaXQgd2FzIHBhcnQgb2YgaXRzIE5hdGlv bmFsIFN0cmF0ZWd5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 IChOU1RJQykgYW5kIGludGVybmF0aW9uYWxseSwgaXQgd2FzIGV2ZW4gdGFrZW4gdXAgYXQgV0VG IERhdm9zDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgbWVl dGluZy4gSXQgaXMgcXVpdGUgc3VycHJpc2luZyB0aGF0IHN1Y2ggYSBtYWluc3RyZWFtIGNvbmNl cHQgZmFkZWQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBp bnRvIG9ic2N1cml0eSBzbyBxdWlja2x5LiBUaGUgcmVhc29uIGZvciBpbnRyb2R1Y2luZyBpdCB3 YXMgdG8gYSkNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBq dXN0aWZ5IHJlcXVlc3RfdXJpIGFzIHNvbWUgV0cgbWVtYmVycyB3YW50ZWQgaXQgdG8gYmUgcmVt b3ZlZCwgYikNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBq dXN0aWZ5IHRoYXQgcmVxdXN0X3VyaSB0byBiZSBzZXJ2ZWQgZnJvbSBhIGRpZmZlcmVudCBkb21h aW4uIE5vdyB0aGF0DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZn dDsgcGVvcGxlIGFwcHJlY2lhdGUgaXQsIGUuZy4sIGl0IGNhbiBiZSBzZWVuIGZyb20gUEFSLCB0 aGUganVzdGlmaWNhdGlvbg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7IGZvciBhKSBwcm9iYWJseSBpcyBubyBsb25nZXIgcmVxdWlyZWQuIEEgZnVsbCBleHBs YW5hdGlvbiBmb3IgYikgd291bGQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyBwcm9iYWJseSBiZSBhIG11Y2ggbG9uZ2VyIHRleHQgYnV0IEkgZG91YnQgaWYg aXQgYmVsb25ncyB0byB0aGlzDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsgZG9jdW1lbnQuIEkgYW0gZmluZSB3aXRoIHJlbW92aW5nIHRoZSByZWZlcmVuY2Ug dG8gVHJ1c3QgZnJhbWV3b3JrDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsgZXRjLiBhcyBsb25nIGFzIHRoZSBjYXBhYmlsaXR5IHRvIHB1c2ggdGhlIGF1dGhv cml6YXRpb24gcmVxdWVzdCB0byBhDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZndDsgcGxhY2Ugb3RoZXIgdGhhbiB0aGUgY2xpZW50IG9yIHRoZSBhdXRob3JpemF0 aW9uIHNlcnZlciBpcyBub3QNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyByZW1vdmVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5MZXQncyByZW1v dmUgdGhlIHRleHQgdGhlbiwgYnV0IGtlZXAgdGhlIGNhcGFiaWxpdHkuPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+TWlrZSZndDsgSSBwcm9w b3NlIHRvIHJlbW92ZSB1c2VzIG9mIHRoZSB0ZXJtICZxdW90O1RydXN0IEZyYW1ld29yayBQcm92 aWRlciZxdW90OyBhbmQgaW5zdGVhZCByZXBsYWNlIHRoZW0gYnkgdGhlIG1vcmUgZ2VuZXJpYyB0 ZXJtICZxdW90O3RydXN0ZWQgdGhpcmQtcGFydHkgc2VydmljZSZxdW90Oy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBNeSBiaWdnZXN0IGNvbmNlcm4gaXMg dGhhdCB0aGVzZSBpc3N1ZXMgYXJlIHNpZ25zIHRoYXQgdGhlIHByb2JsZW0NCjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IHRoaXMgZHJhZnQgaXMgdHJ5 aW5nIHRvIHNvbHZlIGFuZCB0aGUgbWVjaGFuaXNtcyB0byBzb2x2ZSBpdCBoYXZlbid0DQo8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBiZWVuIGFuYWx5 emVkIGFzIHRob3JvdWdobHkgYXMgdGhleSBzaG91bGQgaGF2ZSBiZWVuLiBXaXRob3V0IHRoYXQN CjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IHNvcnQg b2YgdGhvcm91Z2ggYW5hbHlzaXMgaXQncyBub3QgY2VydGFpbiB0aGF0IHRoZSBtZWNoYW5pc21z DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBhY3R1 YWxseSBzb2x2ZSB0aGUgcHJvYmxlbSBhbmQgaXQncyBub3QgY2xlYXIgd2hhdCB0aGUNCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IHJlY29tbWVuZGF0 aW9ucyB0byBpbXBsZW1lbnRlcnMgaGF2ZSB0byBiZSB0byBwcmVzZXJ2ZSB0aG9zZSBwcm9wZXJ0 aWVzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBPQXV0aCBKQVIsIGFz IHRoZSBuYW1lICZxdW90O1RoZSBPQXV0aCAyLjAgQXV0aG9yaXphdGlvbiBGcmFtZXdvcms6IEpX VA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IFNlY3VyZWQg QXV0aG9yaXphdGlvbiBSZXF1ZXN0IChKQVIpJnF1b3Q7IHN1Z2dlc3RzLCBpcyBhIGZyYW1ld29y ayBhbmQgbm90DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsg YSBob3VzZSBpdHNlbGYuIE9uZSBzdWNoIGV4YW1wbGUgaXMgRkFQSSBbMV0gd2hpY2ggd2FzIGZv cm1hbGx5DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgdmVy aWZpZWQgWzJdLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mcXVvdDtJdCdzIHBvc3Np YmxlIHRvIHVzZSB0aGlzIGRyYWZ0IHNlY3VyaXR5JnF1b3Q7IEkgZG9uJ3QgdGhpbmsgc2hvdWxk IGJlIGVub3VnaCBhbnltb3JlLiBSYXRoZXIgaXQgc2hvdWxkIGJlIGltcG9zc2libGUgdG8gdXNl IGluc2VjdXJlbHkuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjojMDBCMDUwIj5NaWtlJmd0OyBUaGUgZHJhZnQgZGVzY3JpYmVzIGhvdyB0byB1c2UgdGhl IG1lY2hhbmlzbSBzZWN1cmVseS4mbmJzcDsgWWVzLCBpZiBwb3J0aW9ucyBvZiB0aGUgZHJhZnQg KGFuZCB0aG9zZSBpdCBkZXBlbmRzIHVwb24pIGFyZSBub3QgZm9sbG93ZWQsIGluc2VjdXJlIHVz YWdlIGNhbiByZXN1bHQuJm5ic3A7IFRoYXQncyB0cnVlIG9mIGFueSBzZWN1cml0eSBkcmFmdC4m bmJzcDsgSWYNCiB0aGVyZSBhcmUgYWRkaXRpb25hbCBzcGVjaWZpYyByZXF1aXJlbWVudHMgYW5k L29yIHJlY29tbWVuZGF0aW9ucyBuZWVkZWQsIHdlJ2QgYmUgZ2xhZCB0byBhZGQgdGhlbS4mbmJz cDsgSWYgc28sIHBsZWFzZSBpZGVudGlmeSB0aGVtLiZuYnNwOyAoSW5kZWVkLCB3ZSdyZSBhbHJl YWR5IGRvaW5nIHNvIGluIHJlc3BvbnNlIHRvIHlvdXIgZXhpc3Rpbmcgc3BlY2lmaWMgZmVlZGJh Y2suKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFu IHN0eWxlPSJjb2xvcjojMDBCMDUwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsg QXMgZm9yIHBhc3QgSldUIHByb2JsZW1zLCB0aGUgSldUIEJDUCBbUkZDIDg3MjVdIHdhcyB3cml0 dGVuIGF0IHRoZSByZXF1ZXN0IG9mIHRoZSBJRVNHIHRvIGlkZW50aWZ5IGFuZCBtaXRpZ2F0ZSB0 aGVtIC0gZXNwZWNpYWxseSBpbiBsaWdodCBvZiBKV1RzIGJlaW5nIHVzZWQgZm9yIGFkZGl0aW9u YWwgdXNlIGNhc2VzLCBzdWNoIGFzIFNUSVIgc2VjdXJlZA0KIHRlbGVwaG9ueSBhbmQgc2VjdXJp bmcgZmlyc3QtcmVzcG9uZGVyIHNlcnZpY2VzLiZuYnNwOyBJZiB5b3UgYmVsaWV2ZSB0aGF0IGFk ZGl0aW9uYWwgZ2VuZXJpYyBKV1QgaXNzdWVzIHNob3VsZCBiZSBkaXNjdXNzZWQgYW5kIGFkZHJl c3NlZCwgd2UgY291bGQgYWx3YXlzIHJldmlzZSB0aGlzIEJDUC4mbmJzcDsgQnV0IGRvaW5nIHNv IGlzIGJleW9uZCB0aGUgc2NvcGUgb2YgdGhpcyBSRkMuPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IFsxXSA8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgPGEgaHJlZj0iaHR0 cHM6Ly9iaXRidWNrZXQub3JnL29wZW5pZC9mYXBpL3NyYy9tYXN0ZXIvRmluYW5jaWFsX0FQSV9X RF8wMDIubWQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOndpbmRvd3RleHQ7dGV4dC1kZWNvcmF0aW9u Om5vbmUiPmh0dHBzOi8vYml0YnVja2V0Lm9yZy9vcGVuaWQvZmFwaS9zcmMvbWFzdGVyL0ZpbmFu Y2lhbF9BUElfV0RfMDAyLm1kPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsgWzJdIDxhIGhyZWY9Imh0dHBzOi8vYXJ4aXYub3JnL2Ficy8xOTAx LjExNTIwIj48c3BhbiBzdHlsZT0iY29sb3I6d2luZG93dGV4dDt0ZXh0LWRlY29yYXRpb246bm9u ZSI+aHR0cHM6Ly9hcnhpdi5vcmcvYWJzLzE5MDEuMTE1MjA8L3NwYW4+PC9hPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgT2J2aW91c2x5IHRoaXMgZHJhZnQgaGFzIGhhZCBh IGxvbmcgYW5kIHRvcnR1cmVkIGhpc3Rvcnkgd2l0aA0KPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgbXVsdGlwbGUgcmV2aWV3cywmbmJzcDsgYW5kIHdo YXQgSSdtIHN1Z2dlc3RpbmcgbmVlZHMgdG8gaGFwcGVuIGlzIGEgbG90DQo8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OyBvZiB3b3JrLiBCdXQgaXQncyBl c3NlbnRpYWwgaW4gYW55IHNlY3VyaXR5IHByb3RvY29sIHRvIGRvIHRoaXMNCjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAmZ3Q7IGFuYWx5c2lzIGFuZCBiZSBj bGVhciBhYm91dCB3aGF0IGlzLCBhbmQgd2hhdCBpcyBub3QsIHByb3RlY3RlZCBieSB0aGUgcHJv dG9jb2wuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IE9BdXRoIEpBUiBp cyBub3RoaW5nIGJ1dCBqdXN0IGFub3RoZXIgYmluZGluZyB0byBPQXV0aCAyLjAuIFdoZXJlDQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgUkZDNjc0OSBiaW5k cyBpdCB0byBmb3JtIGVuY29kaW5nLCBpdCBwcm92aWRlcyB0d28gYWRkaXRpb25hbCBiaW5kaW5n czo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgMSkgYmluZGluZyB0byBKV1QsIGFuZDxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAyKSBiaW5k aW5nIHRvIHRoZSBwdXNoZWQgYXV0aG9yaXphdGlvbiByZXF1ZXN0IHRoYXQgaXMgcmVmZXJlbmNl ZCBieSBhIFVSSS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsg SXQgaXMgdGhpcyBzaW1wbGUuIEFzIHN1Y2gsIGl0IHdvdWxkIGFsc28gaW5oZXJpdCBzb21lIG9m IHRoZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IHNob3J0 Y29taW5ncyBpbiBSRkM2NzQ5LiBIb3dldmVyLCBpdCBpcyBub3QgdGhpcyBkb2N1bWVudCB0byBh ZGRyZXNzDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgdGhl bS4gSXQgc2hvdWxkIGJlIGRvbmUgYnkgb3RoZXIgZG9jdW1lbnRzIHNvIHRoYXQgdGhlIHJlc3Vs dCBjYW4gYmUNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBl bmNvZGVkIHVzaW5nIHRoZSBtZWNoYW5pc21zIHByb3ZpZGVkIGluIHRoaXMgZG9jdW1lbnQuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPlRoaXMgaXMgbm90IGEgc2ltcGxlIG1hdHRlci4g SldUIGhhcyBhIGxvbmcgYW5kIHR3aXN0ZWQgaGlzdG9yeSB3aXRoIHNvbWUgcGVydmFzaXZlIGVy cm9ycyBpbiBjb21tb24gbGlicmFyaWVzLCBhbmQgaXMgYSBmYWlybHkgbGFyZ2Ugc3RhbmRhcmQu IE9BdXRoIDIuMCBpcyBhbHNvIGxhcmdlLiBFbnN1cmluZyB0aGF0IHRoZSBtYXBwaW5nIGhhcyB0 aGUgcmlnaHQgcHJvcGVydGllcyBpcyBnb2luZyB0byBiZQ0KIGEgbWVzcy4gSWYgdGhlIGVuY29k aW5nIGRvZXMgbm90IHJlc3BlY3QgdGhlIHNlbWFudGljcyB3ZSBoYXZlIGEgc2VyaW91cyBzZWN1 cml0eSBpc3N1ZS4gSWYgaW1wbGVtZW50b3JzIGFzc3VtZSB0aGUgZW5jb2RpbmcgcHJvdmlkZXMg cHJvcGVydGllcyBpdCBkb2VzIG5vdCwgd2UgYWdhaW4gaGF2ZSBhIHNlY3VyaXR5IGlzc3VlLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+ TWlrZSZndDsgU2VlIG15IHByZXZpb3VzIGNvbW1lbnRzIG9uIHBhc3QgSldUIGltcGxlbWVudGF0 aW9uIGVycm9ycyBhbmQgdGhlIHdyaXRpbmcgb2YgdGhlIEpXVCBCQ1AgW1JGQyA4NzI1XSB0byBh ZGRyZXNzIHRoZXNlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBJ dCBpcyBxdWl0ZSBzdXJwcmlzaW5nIHRoYXQgdGhpcyBmYWN0IGlzIG5vdCBnZXR0aW5nIGFwcHJl Y2lhdGVkIGFuZA0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7 IGlzIHRha2luZyBzdWNoIGEgbG9uZyB0aW1lIHRvIGNvbXBsZXRlLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBNYXliZSBJIHNob3VsZCBkZWxldGUgYWxsIHRo ZSBleHBsYW5hdGlvbiB0ZXh0IGFuZCBsZWF2ZSBpdCB3aXRoIGp1c3QNCjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyB0aGUgY29yZSB0ZXh0LiBFeHBsYW5hdGlv biBhbmQganVzdGlmaWNhdGlvbiB0ZXh0IGZvciBkZWZpbmluZw0KPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IGFkZGl0aW9uYWwgYmluZGluZ3MgcHJvYmFibHkg YXJlIGp1c3QgZGlzdHJhY3Rpb25zIG5vdyBhcyBpdCBpcyBub3cNCjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBhcHByZWNpYXRlZCBhbmQgdXNlZCBhbGwgb3Zl ciB0aGUgd29ybGQgdW5saWtlIHdoZW4gdGhlIHByb2plY3Qgd2FzDQo8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgc3RhcnRlZC48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IEkgd291bGQg cHJvcG9zZSB0aGF0IHdlIG1ha2Ugb25seSBuZWNlc3NhcnkgY2hhbmdlcyB0byB0aGUgZHJhZnQg YXQgdGhpcyBwb2ludC4mbmJzcDsgTGV0J3MgZmluaXNoIHRoaXMgbG9uZy1vdmVyZHVlIHNwZWNp ZmljYXRpb24hPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+ PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsgJmd0OyBTaW5jZXJlbHksPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7ICZndDsgV2F0c29uIExhZGQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPiZndDsgJmd0OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyBUaGFua3MgYWdhaW4gZm9yIHlvdXIgZGV0YWlsZWQgY29tbWVudHMuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IEJlc3Qgd2lzaGVzLDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OzxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyAtLTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+Jmd0OyBOYXQgU2FraW11cmE8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsgTkFULkNvbnN1bHRpbmcgTExDPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBJIG5vdyBw bGFuIHRvIGNyZWF0ZSBlZGl0cyBpbmNvcnBvcmF0aW5nIHRoZSBwcm9wb3NlZCByZXNvbHV0aW9u cyBhYm92ZSBmb3IgcmV2aWV3LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAw QjA1MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEJlc3Qgd2lzaGVz LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDBCMDUwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+LS08bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPkFzdHJhIG1vcnRlbXF1ZSBwcmFlc3Rh cmUgZ3JhZGF0aW08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_SN6PR00MB042990C1C9C0DAE300E79A48F59D9SN6PR00MB0429namp_-- From nobody Sat Feb 27 12:59:39 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E0A93A195B; Thu, 25 Feb 2021 04:43:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1614257030; bh=FhK/tzjQTCexRX4WbGZSxtcZ6WWGOKqVKfivF9pIZws=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=GH+yjQXOCGviSoKFsHXIBFNseNcANp9VYBVxgwtVHQ1WdKDY5RDZOPIf8ls8+TyPl DMUb1R4B0TB2ZYeXxIgDXgfFDCkltd2CRKpWUG0SSKi0NmA8cNPuYnBDQ0ncOPxPx4 tTuqGI+o7jS5/DtlBX/+B3FFO70Qyh1111rx/D8w= X-Mailbox-Line: From new-work-bounces@ietf.org Thu Feb 25 04:43:49 2021 Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FA513A190E; Thu, 25 Feb 2021 04:43:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1614257029; bh=FhK/tzjQTCexRX4WbGZSxtcZ6WWGOKqVKfivF9pIZws=; h=To:From:Date:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe; b=PrwqlSiNmYlzCh5S/45iDulDsXabd/5D7vSVseWsOMF+NxdaFUzhlsIblJzrq0E+2 B3RFC2b7R9r/GnspRxHtLO5CDFLfaa3DIgf04tEcaxOO9biNyaBinVw8DZ2CMDKq5/ JxvwD+y/Lt7l3KbALOJct50w6CnQIB2vP3eu8rlA= X-Original-To: new-work@ietfa.amsl.com Delivered-To: new-work@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69BD03A190E for ; Thu, 25 Feb 2021 04:43:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.901 X-Spam-Level: X-Spam-Status: No, score=-0.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MckcLsed3EDX for ; Thu, 25 Feb 2021 04:43:46 -0800 (PST) Received: from raoul.w3.org (raoul.w3.org [128.30.52.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C31643A18CE for ; Thu, 25 Feb 2021 04:43:45 -0800 (PST) Received: from [220.201.228.238] (helo=[192.168.0.101]) by raoul.w3.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1lFFzb-0003u1-UW for new-work@ietf.org; Thu, 25 Feb 2021 12:43:44 +0000 To: new-work@ietf.org From: xueyuan Message-ID: <0aacba0f-cd45-c093-d7ff-65a0e82f4396@w3.org> Date: Thu, 25 Feb 2021 20:43:18 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:78.0) Gecko/20100101 Thunderbird/78.6.1 MIME-Version: 1.0 Content-Language: en-US Archived-At: X-BeenThere: new-work@ietf.org X-Mailman-Version: 2.1.29 Precedence: list Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: new-work-bounces@ietf.org Sender: "new-work" Archived-At: X-Mailman-Approved-At: Sat, 27 Feb 2021 12:59:38 -0800 Subject: [secdir] [new-work] Proposed W3C Charter: Web Machine Learning Working Group (until 2021-03-26/27) X-BeenThere: secdir@ietf.org List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Feb 2021 12:43:52 -0000 CkhlbGxvLAoKVG9kYXkgVzNDIEFkdmlzb3J5IENvbW1pdHRlZSBSZXByZXNlbnRhdGl2ZXMgcmVj ZWl2ZWQgYSBQcm9wb3NhbAp0byByZXZpZXcgYSBkcmFmdCBjaGFydGVyIGZvciB0aGUgV2ViIE1h Y2hpbmUgTGVhcm5pbmcgV29ya2luZyBHcm91cDoKaHR0cHM6Ly93d3cudzMub3JnLzIwMjEvMDIv cHJvcG9zZWQtbWFjaGluZS1sZWFybmluZy1jaGFydGVyLmh0bWwKCkFzIHBhcnQgb2YgZW5zdXJp bmcgdGhhdCB0aGUgY29tbXVuaXR5IGlzIGF3YXJlIG9mIHByb3Bvc2VkIHdvcmsKYXQgVzNDLCB0 aGlzIGRyYWZ0IGNoYXJ0ZXIgaXMgcHVibGljIGR1cmluZyB0aGUgQWR2aXNvcnkKQ29tbWl0dGVl IHJldmlldyBwZXJpb2QuCgpXM0MgaW52aXRlcyBwdWJsaWMgY29tbWVudHMgdGhyb3VnaCAwMzo1 OSBVVEMgb24gMjAyMS0wMy0yNwooMjM6NTksIEVhc3Rlcm4gdGltZSBvbiAyMDIxLTAzLTI2KSBv biB0aGUgcHJvcG9zZWQgY2hhcnRlci4KUGxlYXNlIHNlbmQgY29tbWVudHMgdG8gcHVibGljLW5l dy13b3JrQHczLm9yZywgd2hpY2ggaGFzIGEgcHVibGljIGFyY2hpdmU6CiDCoCBodHRwOi8vbGlz dHMudzMub3JnL0FyY2hpdmVzL1B1YmxpYy9wdWJsaWMtbmV3LXdvcmsvCgpPdGhlciB0aGFuIGNv bW1lbnRzIHNlbnQgaW4gZm9ybWFsIHJlc3BvbnNlcyBieSBXM0MgQWR2aXNvcnkKQ29tbWl0dGVl IFJlcHJlc2VudGF0aXZlcywgVzNDIGNhbm5vdCBndWFyYW50ZWUgYSByZXNwb25zZSB0bwpjb21t ZW50cy4gSWYgeW91IHdvcmsgZm9yIGEgVzNDIE1lbWJlciBbMV0sIHBsZWFzZSBjb29yZGluYXRl CnlvdXIgY29tbWVudHMgd2l0aCB5b3VyIEFkdmlzb3J5IENvbW1pdHRlZSBSZXByZXNlbnRhdGl2 ZS4gRm9yCmV4YW1wbGUsIHlvdSBtYXkgd2lzaCB0byBtYWtlIHB1YmxpYyBjb21tZW50cyB2aWEg dGhpcyBsaXN0IGFuZApoYXZlIHlvdXIgQWR2aXNvcnkgQ29tbWl0dGVlIFJlcHJlc2VudGF0aXZl IHJlZmVyIHRvIGl0IGZyb20gaGlzCm9yIGhlciBmb3JtYWwgcmV2aWV3IGNvbW1lbnRzLgoKSWYg eW91IHNob3VsZCBoYXZlIGFueSBxdWVzdGlvbnMgb3IgbmVlZCBmdXJ0aGVyIGluZm9ybWF0aW9u LCBwbGVhc2UKY29udGFjdCBEb21pbmlxdWUgSGF6YWVsLU1hc3NpZXV4LCBUZWFtIENvbnRhY3Qg Zm9yIHRoZSBwcm9wb3NlZApXZWIgTWFjaGluZSBMZWFybmluZyBXb3JraW5nIEdyb3VwIDxkb21A dzMub3JnPi4KClRoYW5rIHlvdSwKWHVleXVhbiBKaWEswqAgVzNDIE1hcmtldGluZyAmIENvbW11 bmljYXRpb25zCgpbMV0gaHR0cDovL3d3dy53My5vcmcvQ29uc29ydGl1bS9NZW1iZXIvTGlzdAoK X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KbmV3LXdvcmsg bWFpbGluZyBsaXN0Cm5ldy13b3JrQGlldGYub3JnCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vbmV3LXdvcmsK From nobody Sat Feb 27 17:01:58 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 672413A1733; Sat, 27 Feb 2021 17:01:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cGY1h9TzU_HB; Sat, 27 Feb 2021 17:01:45 -0800 (PST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69B003A1731; Sat, 27 Feb 2021 17:01:45 -0800 (PST) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 11S11bJu020505 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 27 Feb 2021 20:01:42 -0500 Date: Sat, 27 Feb 2021 17:01:37 -0800 From: Benjamin Kaduk To: =?utf-8?B?TWFsacWhYSBWdcSNaW5pxIc=?= Cc: secdir@ietf.org, curdle@ietf.org, draft-ietf-curdle-ssh-kex-sha2.all@ietf.org, last-call@ietf.org Message-ID: <20210228010137.GU21@kduck.mit.edu> References: <161426245763.32636.14586046669535474103@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <161426245763.32636.14586046669535474103@ietfa.amsl.com> Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-curdle-ssh-kex-sha2-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Feb 2021 01:01:49 -0000 Hi Mališa, Thanks for the detailed review! I can only answer for some of the points, so hopefully Mark can chime in as needed. On Thu, Feb 25, 2021 at 06:14:18AM -0800, Mališa Vučinić via Datatracker wrote: > Reviewer: Mališa Vučinić > Review result: Has Issues > > I reviewed this document as part of the Security Directorate's ongoing effort > to review all IETF documents being processed by the IESG.  These comments were > written primarily for the benefit of the Security Area Directors.  Document > authors, document editors, and WG chairs should treat these comments just like > any other IETF Last Call comments. > > I have found this document to have several issues related to the normative > language, imprecise wording, and inconsistent structure. Security > Considerations section is too generic and needs to detail the considerations of > using specific methods. My detailed comments are given below and I would > suggest a major editorial pass over the document. > > Technical comments > =================== > > Section 1.2.2. > “The minimum MODP group that MAY be used is the 2048-bit MODP group14. > Implementations SHOULD support a 3072-bit MODP group or larger.” - The use of > RFC2119 keywords here does not seem appropriate. These are the guiding > principles for specifying requirement levels of specific key exchange methods, > which are given in Section 3. > > Section 1.2.3: > “The use of a SHA-2 Family hash with RSA 2048-bit keys has sufficient security.” > - Please define “sufficient” security > > “The rsa1024-sha1 key exchange has less than 2048 bits and MUST NOT be > implemented.” - My view of Sections 1.2.1, 1.2.2 and 1.2.3 is that they give a > recap of public-key approaches with corresponding security levels when used > with different parameters. II am missing how a normative text on rsa1024-sha1 > key exchange belongs here, and not to Section 3.4. Only in this section > (compared to 1.2.1 and 1.2.2) you reference specific SSH key exchange methods. > What does the security strength column in Table 3 refer to? The security level > of the RSA variant or of the hash function? Please make this consistent with > 1.2.1 and 1.2.2. It seems that an overarching consideration here is that we only need to make any given normative statement once in the document, and can refer to it or make other supporting statements as needed in other parts of the document. I probably didn't pay as much care to this point in my review as I could have... > Section 3.1: > “All of the key exchanges using the SHA-1 hashing algorithm should be > deprecated and phased out of use because SHA-1 has security concerns, as > documented in [RFC6194].” "It is reasonable to retain the > diffie-hellman-group14-sha1 exchange for interoperability with legacy > implementations. The diffie-hellman-group14-sha1 key exchange MAY be > implemented.” - This text is conflicting with the statement just above that > SHA-1 should be deprecated, as you keep SHA1-based method as MAY for legacy > interop. Could you point me to the relevant discussion in the working group > where this decision has been made? Could you comment in the text on security > properties of the construct. The concern here is that diffie-hellman-group14-sha1 was one of only two "MUST implement" algorithms in the previous version of the spec, and that both (1) moving directly from "MUST" to "MUST NOT" is a huge leap that requires correspondingly strong justification; and (2) there was desire preserve the option to have backwards compatibility with non-updated implementations that, for example, only had the old MTI key-exchange method. There's some more extensive text discussing this that was produced in response to the genart review; the last consolidated version is at https://mailarchive.ietf.org/arch/msg/gen-art/GSb7vxgIDwu8ocOfiFwTRhTsoF0/ but a few more edits were suggested in follow-up messages. > “The SHA-2 Family of hashes [RFC6234] is the only one which is more secure than > SHA-1 and has been standardized for use with SSH key exchanges.” - “is the only > one which is more secure than SHA-1” seems too general of a statement, what > about SHA3? SHA3 is not standardized for use with SSH key exchange (yet). The options are pretty limited when we limit it to just standardized ones. > Section 3.2.3: > - Title of the section got me confused. Sections 3.2.2 and 3.2.1 already > discuss ECDH-based key exchange methods. Could you make a clear differentiation > between the methods referenced in this section in terms of their cryptographic > core from those discussed in 3.2.2 and 3.2.1 > > “All of the NISTP curves named therein are mandatory to implement if any of > that RFC is implemented.” - Since this document does not update RFC 5656, I am > missing how it is appropriate to make this statement. My reading of this statement is that it is already a requirement of RFC 5656 §10.1: Every SSH ECC implementation MUST support the named curves below. [table including nistp256, nistp384, and nistp521] > Section 3.3.1: > “This random selection from a set of pre-generated moduli for key exchange uses > SHA2-256 as defined in [RFC4419].” - RFC 4491 defines two key exchange methods, > diffie-hellman-group-exchange-sha1 using SHA1, and > diffie-hellman-group-exchange-sha256 using SHA-256. In this section you do not > mention the former. Phrasing “This key exchange MAY be used.” leaves ambiguity > which of the two methods you refer to. > > Section 6: > - Security Considerations section is extremely generic and needs to be > improved. Referencing security considerations of the SSH protocol in RFC 4251 > is appropriate, but since the point of this document is the update of the > requirement level of key exchange methods, the last paragraph should be > extended and more specific. While the discussion in Section 1.1 gives details > on the attacks on SHA-1, which can be referenced here, I would suggest > reiterating in the Security Considerations the practical consequences of using > the SHA-1 -based methods that are listed as SHOULD NOT, but also the > rsa1024-sha1 method that is listed as MUST NOT. Please stress the security > considerations of using diffie-hellman-group14-sha1 which is still a MAY. > > Editorial comments and nits > =================== > > - Please explicitly reference each table in the text. I would further suggest > adding a table in each section discussing new requirement levels of specific > key exchange methods, even if it would consist of a single entry, in order to > have a consistent structure. > > Section 1: > “This document updates [RFC4250] [RFC4253] [RFC4432] [RFC4462] by changing the > requirement level ("MUST" moving to "SHOULD" or "MAY" or "SHOULD NOT", and > "MAY" moving to "MUST" or "SHOULD" or "SHOULD NOT" or "MUST NOT") of various > key-exchange mechanisms.” - The specific updates to these documents are spread > out throughout the text and pretty hard to grasp. It would be nice to see Table > 6 updated, by adding the reference RFC that is being updated, alongside the RFC > specifying the key exchange method, and maybe an old requirement level. > > Section 1.1: > - introduce protocol parameters I_C and I_S These are standard protocol elements from RFC 4253; we should probably have a note at the top of the document that we freely use the terminology from that document. -Ben > Section 3: > “and provides a suggested suitability for implementation of MUST, SHOULD, > SHOULD NOT, and MUST NOT. Any method not explicitly listed MAY be > implemented.” - there are some explicit MAYs in the document, yet MAY is not > listed here. > > Section 3.2.1: > “The use of SHA2-256 (also known as SHA-256 and sha256) as defined in [RFC6234] > for integrity is a reasonable one for this method” - “this” method not clear. > Be explicit and mention curve25519-sha256 key exchange method. > > "it shares the same performance and security characteristics as curve25519-sha2” > - the key exchange method as standardized seems to be curve25519-sha256. > > Section 3.2.2: > “It uses SHA2-512 (also known as SHA-512) defined in [RFC6234] for integrity.” > - “it” refers to the curve, not to the key exchange method. Rephrase to e.g. > corresponding key exchange method(s) > > Section 3.2.1 and 3.2.2: > - Shuffle the content in these sections, first introduce the key exchange > methods, then talk about curves and hash function they use > > Section 3.2.3: > - s/The are described in /These are described in > - s/Diffie Hellman/Diffie-Hellman > - s/elliptic curve Diffie Hellman/Elliptic-curve Diffie-Hellman > > Section 3.3.1: > - You open a section with “This” which is confusing. Please rephrase. > - Add a table summarizing the requirement level per method, even if it consists > of a single method, in order to be consistent with other sections. > > Section 3.3.2 > - Please add some context and differentiation from Section 3.3.1 > - Can you reference the RFC that specifies the methods discussed in this > section? > > Section 3.5 > “There are two key exchange methods, ext-info-c and ext-info-s, defined in > [RFC8308] which are not actually key exchanges.” - s/two key exchange > methods/two methods > > > From nobody Sun Feb 28 09:26:57 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A42623A1999; Sun, 28 Feb 2021 09:26:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.447 X-Spam-Level: X-Spam-Status: No, score=-0.447 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.248, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=j4u/kJBk; dkim=pass (1024-bit key) header.d=juniper.net header.b=Z7tZ/8vA Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qN58C1dJAW-v; Sun, 28 Feb 2021 09:26:47 -0800 (PST) Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6D3E3A1992; Sun, 28 Feb 2021 09:26:47 -0800 (PST) Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.43/8.16.0.43) with SMTP id 11SHPYsa032620; Sun, 28 Feb 2021 09:26:47 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=to : cc : subject : in-reply-to : references : from : mime-version : content-type : content-transfer-encoding : date : message-id; s=PPS1017; bh=yp6HFdJaG1pptgzHF2fjFvVO8cDv6fgQph1UikfkRzk=; b=j4u/kJBkbYBwR6HyGBCGx88jTGd5vehW+2gUq8Etph2Gks63gyZNHq4oqPymX/em3hLU GYkM6QhhI0StKwSHxNJqXOn/BSoghh5yCgP6QKUXr6zZSMfT2Ss0m1N6gGgQCYlHOqH3 uTH29qErOU6ogOKWfo29H3lKnpFcrKj6yuai0rdX3ABY0lzp1N93wih9iaMsX3T6bB4J qC101hS2hRuFtOhZxk3G79ClAWYzuJ+RCvDBh5rT+0T97HlEAklk04+ZincyNd3/ho2r ZhKo23drO/vXLShvM63DVC6OiJA9vBZiLIlJ3N8VBqOiO4G8hux+Hc6VrMSEE/LMpmUd fQ== Received: from nam11-dm6-obe.outbound.protection.outlook.com (mail-dm6nam11lp2170.outbound.protection.outlook.com [104.47.57.170]) by mx0a-00273201.pphosted.com with ESMTP id 36yp7rsfc3-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 28 Feb 2021 09:26:46 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=bnaR4L/lu+h7DnLz8WrIIUFg+HF5S6aaxhRnXXai5ieWfqcG87/VwuyBzgnZghaZ6NTKp09YxgrGfgKVYX21AySj23EicQPz+bobR69iuEuBjyYvjn6BRPPIxict2aNpAv8iAMeC7a2jWydJuhX7xr0ITxzCH3gZMQOJRhxZgbFkQscoGMJ8jp/wuwE4HSREZ2YmueKtrvYU2stgzuJj5nvPMm/QUGOLBlWmc8tnqFim6cepQuff2XPDozKTmnd2jSf6nedLXQoGpeaJFBHRwIUGVaj69DaypyYP4RznjTg7InVbgZofbyUzhqbFazS/uYAfz8+CSKYGesU5WnTguQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yp6HFdJaG1pptgzHF2fjFvVO8cDv6fgQph1UikfkRzk=; b=AN4veu7Ltm2oMs9f5rDnZxxiDc7ldP45f8I5A5+GpUYfs4QU+YHIDQaRbahtyYVY6ADL3j+xWZmGozycQ5kauVA8pADxrVM7z03LQ4onuVApDl3HRXOfjnzFQ5olvDE4pA9uOeMSRa0QbQAibMoxzmQ0SWfDcD+ESTKUlFf9e6yQJLseQjVAZum0n/hX9Y906RtxPuBIv3asWnF1QUh2rJFYzEqcOwOzTBiEZ0r29t5saChCeJXDqDf2LiNlcRPI43bAh3uvQ2TID8HF6poCxqgAPTlKur0+KVk5e6Y9WSdDLmsf7Eu+v0s031UOsOPT+cV1yJJNEmOhClIfYb08Tw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip is 66.129.239.12) smtp.rcpttodomain=ietf.org smtp.mailfrom=juniper.net; dmarc=fail (p=reject sp=reject pct=100) action=oreject header.from=juniper.net; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yp6HFdJaG1pptgzHF2fjFvVO8cDv6fgQph1UikfkRzk=; b=Z7tZ/8vAFW3pjAMKAQhQLQI/+UbnDHOMpaD2F+Mu5MeXSV5KRxorlL2oBPHAr7K2egXiCG/8RsrP4Mkghdz0aJmc1ydl2yPs+QnoO1iqpDCzrQTaN9md6LrB3bVXZXJOgsbRVW+L8fhnAKjiqa3QFVkLhXQHYfzPzi8S0XWBqq4= Received: from DM5PR19CA0045.namprd19.prod.outlook.com (2603:10b6:3:9a::31) by BYAPR05MB4807.namprd05.prod.outlook.com (2603:10b6:a03:46::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3846.21; Sun, 28 Feb 2021 17:26:39 +0000 Received: from DM6NAM12FT059.eop-nam12.prod.protection.outlook.com (2603:10b6:3:9a:cafe::a7) by DM5PR19CA0045.outlook.office365.com (2603:10b6:3:9a::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3890.28 via Frontend Transport; Sun, 28 Feb 2021 17:26:39 +0000 X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is 66.129.239.12) smtp.mailfrom=juniper.net; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=fail action=oreject header.from=juniper.net; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.12 as permitted sender) Received: from P-EXFEND-EQX-01.jnpr.net (66.129.239.12) by DM6NAM12FT059.mail.protection.outlook.com (10.13.179.1) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.3912.9 via Frontend Transport; Sun, 28 Feb 2021 17:26:39 +0000 Received: from P-EXBEND-EQX-03.jnpr.net (10.104.8.56) by P-EXFEND-EQX-01.jnpr.net (10.104.8.54) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Sun, 28 Feb 2021 09:26:38 -0800 Received: from P-EXBEND-EQX-01.jnpr.net (10.104.8.52) by P-EXBEND-EQX-03.jnpr.net (10.104.8.56) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Sun, 28 Feb 2021 09:26:38 -0800 Received: from p-mailhub01.juniper.net (10.104.20.6) by P-EXBEND-EQX-01.jnpr.net (10.104.8.52) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Sun, 28 Feb 2021 09:26:38 -0800 Received: from eng-mail03.juniper.net (eng-mail03.juniper.net [10.108.22.11]) by p-mailhub01.juniper.net (8.14.4/8.11.3) with ESMTP id 11SHQbbP027517; Sun, 28 Feb 2021 09:26:37 -0800 (envelope-from mdb@juniper.net) Received: from eng-mail03 (localhost [127.0.0.1]) by eng-mail03.juniper.net (8.16.1/8.14.9) with ESMTP id 11SHTtNa087905; Sun, 28 Feb 2021 09:29:55 -0800 (PST) (envelope-from mdb@juniper.net) To: Benjamin Kaduk , =?us-ascii?Q?=3D=3Futf-8=3FB=3FTWFsacWhYSBWdcSNaW5pxIc=3D=3F=3D?= , Rene Struik CC: , , In-Reply-To: <20210228010137.GU21@kduck.mit.edu> References: <161426245763.32636.14586046669535474103@ietfa.amsl.com> <20210228010137.GU21@kduck.mit.edu> Comments: In-reply-to: Benjamin Kaduk message dated "Sat, 27 Feb 2021 17:01:37 -0800." From: "Mark D. Baushke" MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Date: Sun, 28 Feb 2021 09:29:50 -0800 Message-ID: <87903.1614533390@eng-mail03> X-EXCLAIMER-MD-CONFIG: e3cb0ff2-54e7-4646-8a04-0dae4ac7b136 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 3839a2ad-598c-47d0-08c1-08d8dc0e01fa X-MS-TrafficTypeDiagnostic: BYAPR05MB4807: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:10000; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: P1Y8JhVyBcTfBq2Ju39nxDgMXbaR5aOUQiC6dGSLHeEqa/5FXieVm5ZrAmJe1xReV9OAl16uK80LT1g6UZMvkRe/ldxArp1jUU+hLDEu4uKlK8T90SX4fD9o7iVftV1uJB258fcKcO9k+vIWupIZk8woHmAgWhBwLfyzTtnZRkuZaH16hCRUCpYEfgU+ct7fWXfAr+XZA8HBj1Qt4RQJtivZqfffCX5ZxG2s30g9dpk+x22rn323ECSLNbV+Od7MW3RXLBO01cWPdoL2HkgL+vbF3DiIox3DbkWA8wg1n2OGORFfK5mIYyziP5ZJDGn7ktuzSQCO/GK7BsjuI7x/r+r53iYv0RClS2pgzuvLU4iM2x8OH1lRN+JESMANB45mwN/JlRP5vLF8BV/pcL8xID5lhArC+yB20uaVIb1QHftKQErVAiwiixp0pKSpDb/izGetbq0vegLnJczbG8loNU5JECXx064zFJec7J4pCQu2DFgirRtzTEyzLmgUO7Tba+8MpgPhE+C4M7SBPdW4n3YzeadKHFuAcBK3zyANWbZK4njAt3KCyIqDg6o5qWC2RzjM6yk/WJUb9/qbmaotWZBeMN/47p2tQaWlX6APEM1+MSaAmqGt5zE+KUPgpO0YVpRrMvkblMsNG1e9eZptKMFP03LDDF41ywGAg3qrrCapQmTC7QZ6QRg1SxVLOvnYY56ux7O+7/jM5fjmdYKwsQ== X-Forefront-Antispam-Report: CIP:66.129.239.12; CTRY:US; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:P-EXFEND-EQX-01.jnpr.net; PTR:InfoDomainNonexistent; CAT:NONE; SFS:(4636009)(136003)(346002)(376002)(396003)(39860400002)(36840700001)(46966006)(54906003)(86362001)(336012)(8676002)(356005)(70206006)(66574015)(186003)(83380400001)(478600001)(70586007)(9686003)(33716001)(82310400003)(316002)(110136005)(36860700001)(6666004)(81166007)(5660300002)(8936002)(7126003)(82740400003)(26005)(4326008)(47076005)(2906002)(426003)(62816006)(36900700001); DIR:OUT; SFP:1102; X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Feb 2021 17:26:39.2762 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 3839a2ad-598c-47d0-08c1-08d8dc0e01fa X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.12]; Helo=[P-EXFEND-EQX-01.jnpr.net] X-MS-Exchange-CrossTenant-AuthSource: DM6NAM12FT059.eop-nam12.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4807 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369, 18.0.761 definitions=2021-02-28_07:2021-02-26, 2021-02-28 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 spamscore=0 impostorscore=0 lowpriorityscore=0 phishscore=0 adultscore=0 clxscore=1011 priorityscore=1501 mlxlogscore=999 malwarescore=0 mlxscore=0 bulkscore=0 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102280148 Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-curdle-ssh-kex-sha2-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Feb 2021 17:26:51 -0000 [CC- last-call@ietf.org] This message really only addresses specific review comments... Hi Ben and Mali=C5=A1a and Rene, Benjamin Kaduk writes: > Hi=20 >=20 > Thanks for the detailed review! >=20 > I can only answer for some of the points, so hopefully Mark can chime in = as > needed. I will do what I can to address the points raised by everyone. I do not believe that I can introduce anything about SHA-3 hashing as that is not being used by Secure Shell key exchanges today and this is really only a survey of the existing key exchanges. I will try to do a better job about the objective requirements. For example, the use of a 2048-bit MODP group with 112 bits of security is fine to protect a 3des-cbc 112 bits of security symmetric cipher. However, it is not sufficient to protect an aes128 bit key with 128 bits of security. Likewise, a SHA-1 hash with 80 bits or less of security is not really good to protect even the 3des-cbc cipher. The reason I recommended that a 3072-bit MODP group be used was to protect aes128 keys. I will try to make that point more explicit. Thank you for all of the comments. I have to find time to incorporate them. With regard to Rene's question about changing Table 6... Rene wrote: > Section 1: =E2=80=9CThis document updates [RFC4250] [RFC4253] [RFC4432] > [RFC4462] by changing the requirement level ("MUST" moving to "SHOULD" > or "MAY" or "SHOULD NOT", and "MAY" moving to "MUST" or "SHOULD" or > "SHOULD NOT" or "MUST NOT") of various key-exchange mechanisms.=E2=80=9D = - The > specific updates to these documents are spread out throughout the text > and pretty hard to grasp. It would be nice to see Table 6 updated, by > adding the reference RFC that is being updated, alongside the RFC > specifying the key exchange method, and maybe an old requirement > level. Table 6 presently has the kex name, RFC reference, and the implementation guidance for the method. This is intended to be what becomes the IANA table for key exchange method names. I am not entirely sure I understand what is desired. Some methods do not have any language about MUST, SHOULD, or MAY implement. So, the previous history is not really defined. This is how the table might look if I list "none" for those that are not called out in their RFCs: +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+ | Key Exchange Method | Reference | Previous | Implement | | Name | | Recommendation | | +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+ | curve25519-sha256 | RFC8731 | none | SHOULD | +--------------------------+-----------+----------------+-----------+ | curve448-sha512 | RFC8731 | none | MAY | +--------------------------+-----------+----------------+-----------+ | diffie-hellman-group- | RFC4419 | none | SHOULD | | exchange-sha1 | RFC8270 | | NOT | +--------------------------+-----------+----------------+-----------+ | diffie-hellman-group- | RFC4419 | none | MAY | | exchange-sha256 | RFC8720 | | | +--------------------------+-----------+----------------+-----------+ | diffie-hellman- | RFC4253 | MUST | SHOULD | | group1-sha1 | | | NOT | +--------------------------+-----------+----------------+-----------+ | diffie-hellman- | RFC4253 | MUST | MAY | | group14-sha1 | | | | +--------------------------+-----------+----------------+-----------+ | diffie-hellman- | RFC8268 | none | MUST | | group14-sha256 | | | | +--------------------------+-----------+----------------+-----------+ | diffie-hellman- | RFC8268 | none | MAY | | group15-sha512 | | | | +--------------------------+-----------+----------------+-----------+ | diffie-hellman- | RFC8268 | none | SHOULD | | group16-sha512 | | | | +--------------------------+-----------+----------------+-----------+ | diffie-hellman- | RFC8268 | none | MAY | | group17-sha512 | | | | +--------------------------+-----------+----------------+-----------+ | diffie-hellman- | RFC8268 | none | MAY | | group18-sha512 | | | | +--------------------------+-----------+----------------+-----------+ | ecdh-sha2-* | RFC5656 | MAY | MAY | +--------------------------+-----------+----------------+-----------+ | ecdh-sha2-nistp256 | RFC5656 | MUST | SHOULD | +--------------------------+-----------+----------------+-----------+ | ecdh-sha2-nistp384 | RFC5656 | MUST | SHOULD | +--------------------------+-----------+----------------+-----------+ | ecdh-sha2-nistp521 | RFC5656 | MUST | SHOULD | +--------------------------+-----------+----------------+-----------+ | ecmqv-sha2 | RFC5656 | MAY | MAY | +--------------------------+-----------+----------------+-----------+ | ext-info-c | RFC8308 | SHOULD | SHOULD | +--------------------------+-----------+----------------+-----------+ | ext-info-s | RFC8308 | SHOULD | SHOULD | +--------------------------+-----------+----------------+-----------+ | gss-* | RFC4462 | none | MAY | +--------------------------+-----------+----------------+-----------+ | gss- | RFC8732 | SHOULD | SHOULD | | curve25519-sha256-* | | | | +--------------------------+-----------+----------------+-----------+ | gss-curve448-sha512-* | RFC8732 | MAY | MAY | +--------------------------+-----------+----------------+-----------+ | gss-gex-sha1-* | RFC4462 | none | SHOULD | | | | | NOT | +--------------------------+-----------+----------------+-----------+ | gss-group1-sha1-* | RFC4462 | none | SHOULD | | | | | NOT | +--------------------------+-----------+----------------+-----------+ | gss-group14-sha256-* | RFC8732 | none | SHOULD | +--------------------------+-----------+----------------+-----------+ | gss-group15-sha512-* | RFC8732 | none | MAY | +--------------------------+-----------+----------------+-----------+ | gss-group16-sha512-* | RFC8732 | none | MAY | +--------------------------+-----------+----------------+-----------+ | gss-group17-sha512-* | RFC8732 | none | MAY | +--------------------------+-----------+----------------+-----------+ | gss-group18-sha512-* | RFC8732 | none | MAY | +--------------------------+-----------+----------------+-----------+ | gss-nistp256-sha256-* | RFC8732 | none | SHOULD | +--------------------------+-----------+----------------+-----------+ | gss-nistp384-sha384-* | RFC8732 | none | SHOULD | +--------------------------+-----------+----------------+-----------+ | gss-nistp521-sha512-* | RFC8732 | none | SHOULD | +--------------------------+-----------+----------------+-----------+ | rsa1024-sha1 | RFC4432 | none | MUST NOT | +--------------------------+-----------+----------------+-----------+ | rsa2048-sha256 | RFC4432 | none | MAY | +--------------------------+-----------+----------------+-----------+ I am not sure if this table is now too busy to be in the IANA table or not and ask for suggestions to make the IANA table more useful. My goal is to upload a -15 revision of the document on or soon after March 8th when submissions are open again. Be safe, stay healthy, -- Mark From nobody Sun Feb 28 22:22:01 2021 Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9C763A1624; Sun, 28 Feb 2021 22:21:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.198 X-Spam-Level: X-Spam-Status: No, score=-0.198 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZSzKFHAOmoKo; Sun, 28 Feb 2021 22:21:48 -0800 (PST) Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com [IPv6:2a00:1450:4864:20::533]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D5DE3A161F; Sun, 28 Feb 2021 22:21:48 -0800 (PST) Received: by mail-ed1-x533.google.com with SMTP id p1so14618250edy.2; Sun, 28 Feb 2021 22:21:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=gcL3+LUYTQuq67Xmhai6446kW8AtUV4CuqPfzNkoJIE=; b=e4yZeRxv8n0IWK53DLYSpBsYHxTzbddpTIHGoRdmByupLnZn6e6Cll07WQ40DhMiht LxeoIQk6JawY2hxUaRvSD5pNc7IZfKeLvx9BmZ8I20crF82HD9L2hpI4wY01C0obS5CS uSyBpqMAxhhYlcU5LKNw+7PsD8nHd6INKVsFDSW+hkc7gye2Fer5+vH91SxBxp68T3MD rjhFwRLDELAvyjovTBiKa0ed38bFxhNUEz0PR2nKHMesx/lHxV7aPVZ8OmPvouQSzGdH bbJgs9kOIz2sMJZnktdZcd+krFj3jAARng2ywoM/eNoxH/jLdpcZ+2MeXTLgk2F8dFau +gvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=gcL3+LUYTQuq67Xmhai6446kW8AtUV4CuqPfzNkoJIE=; b=MzuLbq2aQ9jU8X0hQI3zcKXzSPYcSzwolvHP8Ae2mMYufeh+EW0wSHvY9ScKY5iDhg RcU+siqpQDQBn51tta6FlZaNqY35XFS0rQmK1FxYoipTjXriNihGwpeFggyUcSUFz88I /g8ywArD5/dksIW8MGmjlah2wNWpngCxVMcAXDETIpJNZy+/vVu9tAB7+hSoet6iBYZa ZlAa+AZ/vsJMZr/3w7/x5HSLrr3DLtpLbff+XBusMclaN+m7ANTv/kPsgSc0LICx4Xfw 2la+IeOxuqKXyMuN4rvdCbrEdgRpCBUs/FQVZPHp1udg5pwvvdDc2DK5wFsHmd3QpVnF KyAQ== X-Gm-Message-State: AOAM530039Vj+AtBjY15ueo0i6hJxYyXE688Wx48COUvBtStQ+kHntzZ 2l5MsK3U1zDTHpcMt/6R1fKtCe72DtMtTCbU2/9g3k5iqGw= X-Google-Smtp-Source: ABdhPJxeYoFF/ezYPcoRyJeb5fYIGs0hfEQLwTOh4No/c32ZylunZ3nWPlhqnKt7wTj2A8t3/qUFpWoRlShE3u74FYE= X-Received: by 2002:a05:6402:84b:: with SMTP id b11mr5905815edz.56.1614579705450; Sun, 28 Feb 2021 22:21:45 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Watson Ladd Date: Sun, 28 Feb 2021 22:21:33 -0800 Message-ID: To: Mike Jones Cc: nat , "rdd@cert.org" , "secdir@ietf.org" , "oauth@ietf.org" , "last-call@ietf.org" , "draft-ietf-oauth-jwsreq.all@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [secdir] Secdir last call review of draft-ietf-oauth-jwsreq-30 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Mar 2021 06:21:51 -0000 On Fri, Feb 26, 2021 at 12:54 PM Mike Jones w= rote: > > Thanks again for your review, Watson. My replies to your comments below = are prefixed by "Mike>". Thank you for the work on the draft. I've removed places where we agree in the interest of readability, so the result may be more contentious than it ought to be. > > > > > > And now for the thorny issues with this draft. Signatures and > > > > encryption are different. And encrypting a signed blob doesn't mean t= he signer encrypted it. > > > > Then there are a plethora of methods specified in the draft to > > > > authenticate the blob, which will give different results in > > > > maliciously constructed examples. The security considerations > > > > section should discuss what the encrypted vs signed choices give in > > > > the way of security, and it doesn't. This makes me worry. > > > > > > We don=E2=80=99t expect the encryption to ensure authenticity, that=E2= =80=99s what the > > > signatures are used for. > > > > This needs to be very clearly spelled out in the text. Lots of people wil= l not understand this. The wording of section 10.2 is at best ambivalent, w= ith multiple alternatives presented as acceptable. > > > > Mike> After the sentence at 10.2 (b) about symmetric encryption, I propos= e that we add the following sentence to emphasize the point you're raising:= "Note however, that if public key encryption is used, no source authentic= ation is enabled by the encryption, as any party can encrypt content to the= public key." 10.2(b) relies on assumptions about key handling that I don't think are necessarily true. 10.2(a) is more foolproof. Can everyone just use that? > > > > > > > > > > I didn't quite get what is meant by "plethora of methods specified in > > > the draft to authenticate the blob ... " > > > There is a bit of text about authenticating the source (=3Dclient) but > > > not much on the blob itself. > > > The discussion around the signature and/or encryption is covered in > > > RFC7519 (JWT), the format that the request object assumes. > > > This is required reading when implementing this spec, so WG thought it > > > is not worth repeating here. > > > Attacks etc. on the signature and encryption are covered in RFC7515 > > > and RFC7516 respectively. > > > > Well, the draft happens to include the following text: > > "The Authorization Server MUST validate the signature of the JSON Web > > Signature [RFC7515] signed Request Object. The signature MUST be > > validated using the key for that "client_id" and the algorithm > > specified in the "alg" Header Parameter." > > > > Shouldn't the key be associated with a single algorithm? How do we ensure= that the common attack of telling the server to use hmac to verify the sig= nature doesn't work here? > > > > Mike> Good point. This attack is described in Section 2.1 of RFC 8725 an= d mitigated by the practices in Sections 3.1 and 3.2 of the same. I propos= e that we replace the sentence: > > "The signature MUST be validated using the key for that "client_id" a= nd the algorithm specified in the "alg" Header Parameter." > > with: > > "The signature MUST be validated using a key associated with the clie= nt and the algorithm specified in the "alg" Header Parameter. If a "kid" H= eader Parameter is present, the key identified MUST be the key used, and MU= ST be a key associated with the client. Algorithm verification MUST be per= formed, as specified in Sections 3.1 and 3.2 of RFC 8725." So I think 3.2 of RFC 8725 imposes requirements on the storage of keys and association with algorithms that have implications for the whole system. Leaving that to a reference is going to be surprising. > > > > > Key management is ignored. This is a very important issue, > > > > especially > > > > > > A lot of ground is covered by RFC 7515, 7516, 7517, 7518, 7519, 7591, > > > and 8414 so this document is not specifically restating them. The problem with pointing to very generic drafts that don't use ths > > > > > > > > > > > considering the potential problems with the reuse of JWT. I'd like > > > > to see a > > > > > > Are you talking about the reuse of the request object by an adversary > > > trying to act as an honest client? > > > Even if it happens, the malicious client does not have the proper > > > client credential so it cannot redeem the code it obtained with the > > > token. It is no different than RFC6749 code grant. Protocols that > > > extend it, such as OpenID Connect, have introduced nonce to prevent > > > the reuse and used JAR (it is called request object there) to further > > > protect tampering and achieve client authentication even in the front > > > channel. > > > > > > > recommendation that keys be separated by intended uses, rather than > > > > limiting particular fields in an ad-hoc manner. > > > > > > Could you kindly elaborate on the "ad-hoc manner" part so that I can > > > understand it more fully? > > > > 10.8, Cross-JWT Confusion discusses avoiding signing certain fields, rath= er than suggesting good key usage as a solution. > > > > Mike> I propose to add this new paragraph at the end of Section 10.8 to i= mplement your suggestion: > > "Finally, another way to prevent cross-JWT confusion is to use a key = management regime in which keys used to sign Request Objects are identifiab= ly distinct from those used for other purposes. Then, if an adversary atte= mpts to repurpose the Request Object in another context, a key mismatch wil= l occur, thwarting the attack." This should be the only way to do it. It's far safer than assuming symmetric key hygiene (in particular, are you sure your own encryptions can't come back). > > > > > > My biggest concern is that these issues are signs that the problem > > > > this draft is trying to solve and the mechanisms to solve it haven't > > > > been analyzed as thoroughly as they should have been. Without that > > > > sort of thorough analysis it's not certain that the mechanisms > > > > actually solve the problem and it's not clear what the > > > > recommendations to implementers have to be to preserve those properti= es. > > > > > > OAuth JAR, as the name "The OAuth 2.0 Authorization Framework: JWT > > > Secured Authorization Request (JAR)" suggests, is a framework and not > > > a house itself. One such example is FAPI [1] which was formally > > > verified [2]. > > > > "It's possible to use this draft security" I don't think should be enough= anymore. Rather it should be impossible to use insecurely. > > > > Mike> The draft describes how to use the mechanism securely. Yes, if por= tions of the draft (and those it depends upon) are not followed, insecure u= sage can result. That's true of any security draft. If there are addition= al specific requirements and/or recommendations needed, we'd be glad to add= them. If so, please identify them. (Indeed, we're already doing so in re= sponse to your existing specific feedback.) Are all possible choices implementors have when complying with this draft going to end up with secure results? That should mean that there aren't additional requirements or recommendations needed. What sorts of analysis informed this draft? The goal should be that any conforming implementation not be subject to any attack, no matter the combination of options selected. Pointing to a particular secure subset of the draft doesn't help justify the elements not in that subset. > > > > Mike> As for past JWT problems, the JWT BCP [RFC 8725] was written at the= request of the IESG to identify and mitigate them - especially in light of= JWTs being used for additional use cases, such as STIR secured telephony a= nd securing first-responder services. If you believe that additional gener= ic JWT issues should be discussed and addressed, we could always revise thi= s BCP. But doing so is beyond the scope of this RFC. > > > > > [1] > > > https://bitbucket.org/openid/fapi/src/master/Financial_API_WD_002.md > > > [2] https://arxiv.org/abs/1901.11520 > > > > > > > > > > > Obviously this draft has had a long and tortured history with > > > > multiple reviews, and what I'm suggesting needs to happen is a lot > > > > of work. But it's essential in any security protocol to do this > > > > analysis and be clear about what is, and what is not, protected by th= e protocol. > > > > > > OAuth JAR is nothing but just another binding to OAuth 2.0. Where > > > RFC6749 binds it to form encoding, it provides two additional bindings: > > > 1) binding to JWT, and > > > 2) binding to the pushed authorization request that is referenced b= y a URI. > > > It is this simple. As such, it would also inherit some of the > > > shortcomings in RFC6749. However, it is not this document to address > > > them. It should be done by other documents so that the result can be > > > encoded using the mechanisms provided in this document. > > > > This is not a simple matter. JWT has a long and twisted history with some= pervasive errors in common libraries, and is a fairly large standard. OAut= h 2.0 is also large. Ensuring that the mapping has the right properties is = going to be a mess. If the encoding does not respect the semantics we have = a serious security issue. If implementors assume the encoding provides prop= erties it does not, we again have a security issue. > > > > Mike> See my previous comments on past JWT implementation errors and the = writing of the JWT BCP [RFC 8725] to address these. JWT provides certain properties. OAUTH 2.0 assumes certain properties. Are the properties required by OAUTH 2.0 those provided by this draft's use of JWT? That's independent of generic problems of JWT but very specific. By way of analogy if you use HMAC as a signature scheme you're going to have a bad time, even though HMAC is secure, because its properties are not those of a signature scheme. That's true no matter how much you insist your HMAC implementation is correct. > > > > > It is quite surprising that this fact is not getting appreciated and > > > is taking such a long time to complete. > > > Maybe I should delete all the explanation text and leave it with just > > > the core text. Explanation and justification text for defining > > > additional bindings probably are just distractions now as it is now > > > appreciated and used all over the world unlike when the project was > > > started. > > > > Mike> I would propose that we make only necessary changes to the draft at= this point. Let's finish this long-overdue specification! > > > > > > > > > > > > > Sincerely, > > > > Watson Ladd > > > > > > > > > > Thanks again for your detailed comments. > > > > > > Best wishes, > > > > > > -- > > > Nat Sakimura > > > NAT.Consulting LLC > > > > Mike> I now plan to create edits incorporating the proposed resolutions a= bove for review. > > > > Best wishes, > > -- Mike > > > > -- > > Astra mortemque praestare gradatim -- Astra mortemque praestare gradatim