From owner-ietf-smime@mail.imc.org Tue Apr 1 16:41:15 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D29AD3A6810 for ; Tue, 1 Apr 2008 16:41:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VO4qYlnNOSyi for ; Tue, 1 Apr 2008 16:41:15 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id A94663A6858 for ; Tue, 1 Apr 2008 16:41:14 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m31NIE4Y093229 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 1 Apr 2008 16:18:14 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m31NIEI9093228; Tue, 1 Apr 2008 16:18:14 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mail.ietf.org (mail.ietf.org [IPv6:2001:1890:1112:1::20]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m31NIDTE093222 for ; Tue, 1 Apr 2008 16:18:14 -0700 (MST) (envelope-from root@core3.amsl.com) Received: by core3.amsl.com (Postfix, from userid 0) id 5A6923A6A94; Tue, 1 Apr 2008 16:15:01 -0700 (PDT) Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ietf-smime@imc.org From: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-smime-rfc3278-update-01.txt Message-Id: <20080401231501.5A6923A6A94@core3.amsl.com> Date: Tue, 1 Apr 2008 16:15:01 -0700 (PDT) Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the S/MIME Mail Security Working Group of the IETF. Title : Update to Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS) Author(s) : S. Turner Filename : draft-ietf-smime-rfc3278-update-01.txt Pages : 9 Date : 2008-4-1 RFC 3278 describes how to use Elliptic Curve Cryptography (ECC) public-key algorithms in the Cryptographic Message Syntax (CMS). This document updates RFC 3278 to add support for the SHA2 family of hash algorithms. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-smime-rfc3278-update-01.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-smime-rfc3278-update-01.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-4-1161330.I-D@ietf.org> --NextPart-- From job@careerone.com.au Thu Apr 3 18:47:38 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 859C73A6BB5 for ; Thu, 3 Apr 2008 18:47:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.672 X-Spam-Level: ** X-Spam-Status: No, score=2.672 tagged_above=-999 required=5 tests=[AWL=-1.250, BAYES_50=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, SARE_GIF_ATTACH=1.42, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i6eqGyp8dC2K for ; Thu, 3 Apr 2008 18:47:37 -0700 (PDT) Received: from zeta.wiserhosting.co.uk (zeta.wiserhosting.co.uk [85.92.73.245]) by core3.amsl.com (Postfix) with SMTP id DA5DC3A6AA4 for ; Thu, 3 Apr 2008 18:47:35 -0700 (PDT) Received: from moqu (62.28.102.7) by zeta.wiserhosting.co.uk; Fri, 4 Apr 2008 02:47:40 +0100 Date: Fri, 4 Apr 2008 02:47:40 +0100 From: X-Mailer: The Bat! (v2.01) Reply-To: X-Priority: 3 (Normal) Message-ID: <43292695.20080106000823@careerone.com.au> To: Subject: The best offer for living in Australia! MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------22AD154FA7B2F" ------------22AD154FA7B2F Content-Type: text/plain; charset=windows-1251 Content-Transfer-Encoding: 8bit Greetings Dear Australian Population ! Lana© Sales and Distribution group offers a great opportunity! *Limited time offer.* Lana© Sales Group located and originated in Italy, Rome, gives you a chance to make 800-1000 AUD a week spending 1-2 hours a day Monday-Thursday. What can be better? Feel free to get more information and start making money within 24 hours. Stop worrying about bills anymore, we found a solution. The answer lies in a conception of taxation loop between two countries. You, as an individual have a chance to provide your service in a position called "Fund Distributor"! This is a new generation opportunity! Feel free to get more information, you will be able to start making money within 24 hours after you apply. Requirements for this position: Make sure you will be able to check your e-mail at least 3-4 times a day. Make sure you will have 1-2 hours of spare time Monday-Thursday. Your current location: Australia. Your Age: 18+ years old. Benefits: *No Start Up Fee *No past experience required *No school degree required *Salary 1200+ AUD a week / Daily Payout! Can't beat that. "Solution for single moms" - "Reason" Magazine, Helen Kotke. "Australia has a chance for Employment problem" - "Harper's" Magazine, Dawn Aproye."Anybody Can Do This, Amazing opportunity!" - "MICE Image" Magazine, John Don. If you meet requirements - feel free to get full information about this position. Reply with 'Interested' or "Job Offer" to: brilliant.deal@gmail.com One of our representatives will provide you with full information within 48 hours! Thank You and Good Luck! ------------22AD154FA7B2F Content-Type: IMAGE/GIF; name="image.gif" Content-transfer-encoding: base64 Content-Disposition: attachment; filename="image.gif" R0lGODlhWgCjAOUZAAQDB0qElqiorwNJYLnV3k1MVnWKlt7e4SBjeX2ntqnEzUR5iWSJl87b4Stq fpCuuuLy9yhGVr7J0AYmOc/m716UpY+PlWZ7iC1vhf///5O5xisqNmFha6rM2Dl4jQxTa2mcqw4w QkhkcTI6R3+ToAgMGrm5vkV8kJCfqjZSYqq2vSEhLBkZI1VVXhk5Sh5CUlhxf3h3gFKNoIWvvG1t db/d5+Do7JzDzyZrgD8/SUVZaBRYb4KHjz5easrKz3WfrSwAAAAAWgCjAEAG/8CMcEgsGo/IpDJp s0GW0Kh0Ojx0ZtisNsHter9fECgQkJnPZ+qSkPiJ3/C4PF4B1WWevB7D9/ARMhQzDk9CHUI3GRAB JzJICj8Vk2gylJWYmTIBep17OCcJiUI/hRUUQxUEGTeoGgioEDIJhoonJ4y3ugu8C7dkusG4jJ6d fQlPFBU2QjWrNag1Hqgd00ajQhDUqIoQNQEIGHm6emTAv7e9vb/m7NbQGR01GRSHQspPGjuHNfME OKhuYMg3Q8aOHR5O5MGAA0GoVYoaKOphAsKLEBEuSMxgruOuXerU6cHxbN6NQ/UUBayAIZwxHDg8 aCCCoiaJFCJcZHhQAsUQ/wgJEOxwwMcBIAWFhmwillCYU2F++IiL2hBHhQ5JG4iAkeHCCxghLhiQ IEFIAxA4BgzAgcGB26JuHSqQAgEEBjVIDvi8SUJEDyIEAnz4gACBhwqtWJWsJ6MwQ7Y4AjDDa6OY 5cuW2wLS0EGGhkXQCIDwM2AHw8J52EqVGnkyXiIyphrrg7n2aaE/anj2pgpaAk6FYRJtiCBCCwgx OLh+naGBatl6Ckt3S90BzOvCseM4yL279+4hWhw4YsJHERQjBExp0FK6dOHt3cufj+C6VKHeP3BX PsVCjCU+bPDfETMI99Zq99EXnHYMwrTDYBBGONgG5kUhAAsrrFACABwCgP9hARxY4MN4Q7RQgA8/ PIcggvIhNIMG4DTI4IMPSojAchkIsIJ6zB3BgU8z7KCgezBJd8IPHuxgCUwrNonfQR94IIU5cKCE DxsRcYB4RLBX2gnYIHGQDDeMgUACGiQpH5Ms4pflazSMUAQHJIb4GgQXqKCCTxkchEEdHiAwwwt8 911hAwSQVI9F2LDBBjhWIZEKPVxwgQ46iLUEdzL8INQCoxmaHyyMEmHACzr0oIIPJERaqhDceZBA kj8UqJ+oB4DAm0MQYAAMERhAwlcSXEDCq8guAYEdECAQd6Xxmuy01FZLhApooe22M4DhbRtjBGCt EQRo0MYP6Kar/+666H7LhSRMsWNOHj9Q8MQMHpihBgQK2FHHG5MELPDABAe8iW15ODBDNh5IlNgD pBLgGRGzlvGAJAVnfIkmZNSWGkMLCzHTPYFkM8QPJt8wTweuIFAIBBChhI4wIT0FFS75hpyBKvSg tApWitywCgUunUCNNU9A9ARQ8XhA2B5tOXAYRBnYoAIzwORCc0hc7zEPBdR8fYg38SQ1cgaveNDQ VKchlMAD3BhgwAM9TNAAAZaKYMDLM8TnVkfn2EzzCQv4QdJPHgSAwQfQ+ZHv2QdI8EAKEdxNAgow UDQEBUHtoFp1DpyAlBKLJrHs3RrMAMImChUmQy/DIDcKLkSg/0MIej8wRGgJFU4ACYCt8kkVfI7A Mmp0EJMeClkWQAVoKkDAAa4KocAJanmOwZFUU+BGBfFgYFpUCLJlD3MaNO7x+uJjcEPfNAqp3/Ya UHBDUhTUgF19IJTOnKvxBFEQtL6F8OEDAeBMBU4gpOyJyj1cEsKIhMAD/uClAUZBwAChQx8VtUUq GywKrrwTgRyYYAkCUAESTLCBspAuRtqpTnyGNB/iBAdXKyjAsqZAAxrQRUBdUluT2qQgGc1IQhIC QQYOkIMWjEsIAriAEIe4mhaFogJqY9MQG/KdAcwlCTEYAYmUhQQbtGAjNmiMgnYwAAzY4yBnQhIG 0KSm+lD/sSXc+cDZpiCAEpzQCAIYYwZMYKVSxWo0UWIJroLzhyj5jzkF8KEExEODPy7BBiJIwQMO cCwJhACNsPJTHQBhkBHmEXxPFMKe6hYBGFxABBphDncCAAIH7KACnroVrnQlLSU0AAYieIEIJBCB VsKgl+P6ToRMycYdbIQAJoABWEiAzFRa85pFaEDquMXNLGhAaHACNvelzW52iwvndJcXvlcGNIxz CDYoVzrBgAV1essOMmBHJW7hTmvZwFxyYFcc0DXQdiVgDAX8TDyIsIhGMMoGD5hDwOSgsYHl0zYf XBkqIPaEG3wgZM9InCOUpc2KVkATGjMDUy4jDk5ARAb/9ljEKhLzCm6g7R6KYMRIq1YuMZh0Y5pA w0ovoxBFHQEbShzCDGbaso5+gBYLhUBRBdfOjGWCE5jhg/mUSoQaYGBl1igCSOkhEZYJgQBJQSu+ EuIRp/ACHVqDSlM8gYGZQOB8rHhCAvZBj3mM5mg2LcQ8FqqIeNzgFYYx4Ac9oLO2gkQYjIjsLdga 1rOKzWQJmAzZ+pEB/QUEA6hABUQO+xiohUMGMyhEAwwASxikoAdYi2swuFa4t+qiY6Fbz1RStgwE Ba8JwMG9uBiO1cAEBGgdwk3yJIIIUK5VKjREBRwAuKfQViSpeYZuU0I2oAkhNgv5hOtsWjUYQEAC Crj/iQF6kILoZiAwhaEOBn4wGcDlQrbW5UV2C4s2fsyAAmpMCNROAILBZkACKCBBD0SQkwugIALR VYEECLCA0hBFvjKgmhEcK7jBLUAqnCkl24gTCgOj4gIRQEEKUmAD16JABYW4gWB0BRfqhOMHgkwC KpdFAQJkC14gyUPhPOALAxJHJjZFsFhc+coMqGB0ImOgfkCB5AB8Li4yqOYRNCC1aV1OAi64gBBI 4IMU8EkR6RNSYZ6XAJbForAU0MB0jVKBRy6BArKBnsog0AAI2FkJBjDzTwpUmuuAQM6DysB/39s7 DzKksnixSwELaA4MqCU4V6mBPWAHAXyJL7F3FFSp//A86QL2ASGj0Ea3EDBlPDrEAyC4HwU8Bx8+ hKlHCkhsqU1NXFY/CAcwVdlP7Hew+hQJAe1NVnClQtcA7joP9alfmQbw3w4ERS2Eec+xdVAALZmQ UWhhtiewE8I7Rs06DxLKYJh5EBfQqQgTFIIZaVA9HddwgIFaEw5AZ53qaMfX7I4AhZJQniO0wIdR eEWRyP2WITGciiPUjwu+BQHwCAk0eDcSCPAY7RCRhh1UzZO8w4ISrIAFKF/BBnIQSQsIQAKL4sGA lmCBHOBoEaqp9ceLKCPp1AiJO8hBDqhAAwBsoAAxUIGWc8SCCmlAi1SkoRG183MkDgYGK5h5jyBw /wAfqEAALhfACVVQAAZMMdTywYAYAjX161RdQicgQgwGXi0eTLglWtF85tgZY7d95BBy5hEOMIJu vwoClRQCCNTscAToSoOc4MPzrMwgJ3lnAFC9EgsscMkcZ+OMVQBHYaC0g/4ZQc1kYkQbjAJ1y3eH vFBAwQY8LwQT8MoHxzHCn08PRwQEwDRY1LeTCvOBnarBBhxAOBF4kCWZM0pPfRKS4qz8ojoKP0Ef PXwOeHSAAoynBZaEggoOwEkDREAEMI4uHOuwgOPVkpn1cTxeX6UCDvBgBWJkwgMUgALWpqAsfjEB YsZ7OwA8fjADPyA+piQUXvRONtAX7CVmBzB+/y4UBdzRFifgewg4coZCGAaGLFcjAbLTFxEggMe0 e1IAR5JAGAjIbrzUIxIAS7BEAhHwAhcAc6kER6szAKgFArk0Qi+oBAcgAOyFXioWAu2ldO80BLP0 e7CGRcwULdlgADqQAtLkAiYgAg/QBCazhKZjA3cTCeDggoKnSgbghWj4E2m4hmhoA++jLd+kABLQ AOGEgmxIFwRgTtxiT12QVHfIUBSQLXqYBXzYBfDSTn/IUw9gToUIBmKwFJiQhnwmiISYAFvQiIY4 CWQQVPoyTpAwT4ZoUJjIBatzX4CTT3/yG4j4RPyCgOzyigL1A/c0VMxDBuJQAXskZVAt8AD/BzUH wBiMPsgFCxRezYYaNhVTOeVQpcIvbiCMwDhRABMwWJUZUoFLTSUEWFALZXxUwAYUNTDhWFF4kFV8 cAKc0TCs0DLUIGpKhQGdGAX/RDD+YjBn8FNnUI3FwGy5kWHZcAIOs1GkQg97BAGJIy5MwAYCc4/2 iFILmY/NkxlsIQMKQAGmlwGvoxSrUJFoM5CCIDK2gAtFwGdl8pBmYJKcKFQRuY95kECwdzZ1djJM 1ZH5QG3cWFT08D7TmFIpuRTnYBuf0QGodA+CNQRJlQ8z+QodVVfcyAn2dZKT4FMFwzH6eBkOgRUy kBSahgigZQQhI1oaxQonoJUicwP5FDj/s+ULw9ARDEkJVUlXbHFSRlULYNNZXVmBhQhEUJdmRQ+b Aw4H2Q6ypQ4zAxVFNlfFcAJXQQQzwAwdgAAoIVrWgJdq+F4M9QR9OQjjQ0CysghxtQ6Q9RQt2TwB UCtdmRKFBTR9gxKKAwqABWc4xTnZAAEVcBBQ4xaJc2vtsDXBgF8KgQtfRQTNsltkcz/Z8DUB0AEC 8VmhZZmpqRAfsDxRoUGhYFNwAZkjERxGOIQpL7vQMfPgZ/FwWSTDMxCZ7wUQrNCVJnEDubQ9BhQO IPBFqoSdtWN+A4iWbkU4RKaWcMUJuTWeuzUExrlXQxMQpNIBddU3hCEbj0EmrqEA/wu2fzAgYSl2 ZoEhWVuDXfrFPAoRoPJAnCvzBJqGV34gCUUhDpqhQacwBDHoYDCgOxcQgVkiY76znelwXf05Egcq oNw1oqlwCE+nogshHcn5BAnmZFaYSS5gAAyQAq1yDxXgHm4BAmBfblUzIbFfnCU0IvpemNk8tNEe 85UUMVgTIXBeDwADE9ADNfppG/QDb2Jf+pmjb4Vdh9Ol/IAS3aI2cAmP5wNRmOMCutOmYrYnZlEB gzFAbyGnR0CnvpmlQ3Y4qfAZP5Buk2VAwJMUexJMKkAAVohif5EM0Exw0RIOkFlKIJiRKjiF0xIQ ERgZRD6PBgJ4pQAwIEwZ8GL/D5YnvVKbNMZvgLB0TdMUHWZdhEMb80MVa7ZozTEeMNAXKWB+PVCh 0QUBaaIWKlId4aBQUMBxPgZQ+XSsUCFuGTRfBuZna8pgu/oCwvIAhdB3A0AYinlujOoQGrYE4AdH sCxgqADmclKZKmR+YKTe9YAkgGI1+FrTupcJgEcI0QgdoJwEcAIqAgj11q+KIyX7siw+xgXkpQLC 4gMPgDn9JwBJ0QGihxon8F+F4KwF8gcykLFIwBJ5kCwC4ErAYgB6Qp+dtXhCEpcw5WcwswoQ4J4/ EBt/IBmv0Td6gCzwYsESTtlwAx4wr46BrqyQAdLjW0mbtfcRALA3Bcqzj/8thUuDMofiBCAkQgCK qivW0bIEADYJUAfaOAam0SRs8YFqsK+1MbDF8Dwg8CJq62f4kj2GASawA9pQAwu0A2kSE3d0a3gB Xs9mGx8At0lyCqkVk7yBA4RhHbpFF9kjDyCdl4sZ4bBpjXtYTtOgxLE9yllcBJSvr4Fn6pO6ioUQ WCEISTIY8YcQZDCxYONnfmcdCIAyyDKluau7RTp6+oEfjIMBM9AP2tAzPYYW+9YQC1CBpUIAtOu8 Egm9cVk/GmC92nADFbCy21sYEVAAEcQoUqUaZksblwu6ZJI/O4AyzqABksBq9cGthaEDTrRE9lcq NxC+zeZspuYHSoIm/+qbvCfgAOvmHfLBbYXAhWRHe1EAAQtwII3Tb+Z2RweROupWGguYAhonQWPU AjzAwUqQwO+xQdBmbPzWb/5mHQaSKyjMbi7gfUZQcFWwAZw3BVLVQQOkb6ATQzq8vewGHjnAwSbg eTEQxVIgATbEIETRQStyw8PBgbhSQhWCBGJ3BDaQHlEAAn7HxDNEJAhSbiAEfyUUfkjwdUlgASuw e5XRIDIEcnnHIqZ0IlKAAkWcBE3EwTfAxCDcxiC3IGwCxtyxAijQdV9ncSggAChgAhIgSP4BBSxE x0IwpQYyRI0sddshKgCQIRvAATFgAatCtUcQA8q3BCbSKBY7wqW8Jv8tciu6dBD5x0M2JwVAxEOg AK03fEXkyPvjc1YHISygdUsQAx3CITkUAwLQZ0cQJ+YRs7jMc23nIM2sHx9wdFPgA+b8df6RcQVQ ADkwAk1kzebhA0hnF46md978zW9nIxJgASUwxv7UAh82wow8ems8dfkceC4kAStQyNRyAK6cgdcB xwniHhjQmt8Mzge9RwdAztTSAMqRa/fMFvLxhDBUeR13ylASIcpbBBYwe8niA/TmW4wndTU0uBCN HcZ1HYA3GN5IBH10Zj0iAANCmzM9H2yEAIhF0YcWI7g8KnrcAgVMOtWDAjwAT2rkHjUSAB9YGOg4 A5wglzgddflBrP8ZEAMrAMPPegQWwNBXqm7RqTNGIB2zECiNgHf1XEXdkX1S4AM7QnDSwgHulWXA t2IiJCfAB52SgAsSanmEkFNAJVFdBFNcBBTXIxfICQU4K4x3zH+AHwOpBjyQA/4jIkRQAGS9KRoY fHQ00/bRJg+yR2ogARtwcUJAAyTCRD1yEzDADNwRCraUB0X9Hq49lozCRIVsRuOBe3jxSg+gQhCg O9F3PD8gGA4QG4ci3H/wIKe9BKE9HlAANuADhRQFMTitTSCAVcMncDTXgmK1vWzBxsZqcF0qkAM+ YAIHB81HUBYSgBOUIwI5ckxFcBDAs0C+B7EjRHyfnSwtAP+zrHt+ASwp4ALTujfIdIFIsgN1f2w0 3zgLygdGTAAeteZnADQbSsezV4CASAv4AQ6w3T3SYthJASKA3q+x3qg4CxTMbpTLKBJwLAcGA1GU Ey/wWhdw4kqA4UlCYAxkSi4+tj2iAhNgACjgYE1ghdTCHWdiEDJQS++tTLtSKipgnxFgAwYwASJg h7Jkm0jSRrPy5ZcX5niBOT3gAlFbAi4g4Nd0gQlw2CeVJKYUhCSVAayVNxfgAj2g5tMySz9AFKwT hXK+3wrGXiLQADR4AdC9hrOELwU4XVFYhmYhAebnAgqgNyQQAiTAL4kYfWw0rwXYGHDeHVLoZDDQ fxQeATZct+pG8AAVUChPLOtlKAEq4AISgOS6/hNgSAAPwADiMwAh0MPNlCXgz8eOLMsiAb8B47oe BAA7 ------------22AD154FA7B2F-- From owner-ietf-smime@mail.imc.org Fri Apr 4 07:09:39 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3CB753A6DEC for ; Fri, 4 Apr 2008 07:09:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.683 X-Spam-Level: X-Spam-Status: No, score=-1.683 tagged_above=-999 required=5 tests=[AWL=0.113, BAYES_00=-2.599, MSGID_FROM_MTA_HEADER=0.803] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HpFkApEM2prH for ; Fri, 4 Apr 2008 07:09:38 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 37CA63A6BFA for ; Fri, 4 Apr 2008 07:09:38 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34DsYN4005960 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 06:54:34 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m34DsYWW005959; Fri, 4 Apr 2008 06:54:34 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from woodstock.binhost.com (woodstock.binhost.com [8.8.40.152]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m34DsXIJ005953 for ; Fri, 4 Apr 2008 06:54:34 -0700 (MST) (envelope-from housley@vigilsec.com) Message-Id: <200804041354.m34DsXIJ005953@balder-227.proper.com> Received: (qmail 25644 invoked by uid 0); 4 Apr 2008 13:54:28 -0000 Received: from unknown (HELO THINKPADR52.vigilsec.com) (72.83.129.167) by woodstock.binhost.com with SMTP; 4 Apr 2008 13:54:28 -0000 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Fri, 04 Apr 2008 09:54:26 -0400 To: ietf-smime@imc.org From: Russ Housley Subject: Content Type for XML Objects Cc: lisa@osafoundation.org, Chris.Newman@sun.com Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: I have received a request to assign an Object Identifier (OID) to be used as a content type for XML objects. The idea is that one would look inside the XML object to determine the type of XML object that is being carried inside CMS. Is this the right thing to do? Would it be better to have a different content type for each XML object? Would it be better to use id-data? Russ From owner-ietf-smime@mail.imc.org Fri Apr 4 08:08:29 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0BE2D28C76F for ; Fri, 4 Apr 2008 08:08:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O02qnsjiLYJW for ; Fri, 4 Apr 2008 08:08:28 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id A8C8A28C78B for ; Fri, 4 Apr 2008 08:07:26 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34Ef7hX010669 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 07:41:09 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m34Ef7Dk010667; Fri, 4 Apr 2008 07:41:07 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (moe.its.auckland.ac.nz [130.216.12.35]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34Ef5r2010655 for ; Fri, 4 Apr 2008 07:41:06 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id F0DD44808D8; Sat, 5 Apr 2008 03:41:04 +1300 (NZDT) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (moe.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DJ7WqG-9m8iP; Sat, 5 Apr 2008 03:41:04 +1300 (NZDT) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 8DD1148085F; Sat, 5 Apr 2008 03:41:04 +1300 (NZDT) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id ECE6419EC0B9; Sat, 5 Apr 2008 03:41:02 +1300 (NZDT) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1Jhn6E-00080i-QW; Sat, 05 Apr 2008 03:41:02 +1300 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: housley@vigilsec.com, ietf-smime@imc.org Subject: Re: Content Type for XML Objects Cc: Chris.Newman@sun.com, lisa@osafoundation.org In-Reply-To: <200804041354.m34DsXIJ005953@balder-227.proper.com> Message-Id: Date: Sat, 05 Apr 2008 03:41:02 +1300 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Russ Housley writes: >I have received a request to assign an Object Identifier (OID) to be used as >a content type for XML objects. The idea is that one would look inside the >XML object to determine the type of XML object that is being carried inside >CMS. > >Is this the right thing to do? One part of me wants to say "What makes XML so special that it should get its own content-type?". However if this is an attempt to clean up the XMLdsig mess then I'm all for it. >Would it be better to have a different content type for each XML object? > >Would it be better to use id-data? Redde Caesari quae sunt Caesaris. Have one overall XML content-type and then let the XML layer sort out what's actually in there. Peter. From owner-ietf-smime@mail.imc.org Fri Apr 4 09:14:38 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B32CC28C21F for ; Fri, 4 Apr 2008 09:14:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.085 X-Spam-Level: X-Spam-Status: No, score=-5.085 tagged_above=-999 required=5 tests=[AWL=1.514, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TuqtrTFW0Tpo for ; Fri, 4 Apr 2008 09:14:37 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 7646828C2D6 for ; Fri, 4 Apr 2008 09:14:37 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34Fdsf8016788 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 08:39:54 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m34FdskU016787; Fri, 4 Apr 2008 08:39:54 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from laweleka.osafoundation.org (laweleka.osafoundation.org [204.152.186.98]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34Fdpha016778 for ; Fri, 4 Apr 2008 08:39:53 -0700 (MST) (envelope-from lisa@osafoundation.org) Received: from localhost (laweleka.osafoundation.org [127.0.0.1]) by laweleka.osafoundation.org (Postfix) with ESMTP id 8ADC314220E; Fri, 4 Apr 2008 08:39:53 -0700 (PDT) X-Virus-Scanned: by amavisd-new and clamav at osafoundation.org Received: from laweleka.osafoundation.org ([127.0.0.1]) by localhost (laweleka.osafoundation.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NiqLNovmQL8u; Fri, 4 Apr 2008 08:39:47 -0700 (PDT) Received: from [192.168.1.101] (unknown [74.95.2.169]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by laweleka.osafoundation.org (Postfix) with ESMTP id 1833514220D; Fri, 4 Apr 2008 08:39:47 -0700 (PDT) Cc: ietf-smime@imc.org, Chris.Newman@sun.com Message-Id: From: Lisa Dusseault To: Russ Housley In-Reply-To: <20080404135441.B894E1421FD@laweleka.osafoundation.org> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Subject: Re: Content Type for XML Objects Date: Fri, 4 Apr 2008 08:39:43 -0700 References: <20080404135441.B894E1421FD@laweleka.osafoundation.org> X-Mailer: Apple Mail (2.919.2) Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: In apps, we've had the practice of defining different MIME types for different kinds of XML-formatted data. A custom MIME type can often tell you much more than just what the formatting is, of course. This is most frequently seen in documents that might be sent over HTTP, where filtering or dispatching (to a Web application, for example) can possibly be done on the MIME type alone. However there's always the fallback to application/xml which may or may not be allowed depending on the context. E.g. the W3C says that XHTML documents SHOULD be given the content type "application/html+xml" when returned to clients, although of course a Web server could return other XML documents as application/xml. The convention is to put "+xml" on the end of the MIME type -- I don't know if it's very common for implementations to use that convention to tell that the document is in XML even when the specific MIME type is not known. Whether this approach would be worth it in CMS as well, I can't tell. Looking at RFC2984, OIDs seem to be about cryptographic functions, not content objects. What am I missing? Lisa On Apr 4, 2008, at 6:54 AM, Russ Housley wrote: > I have received a request to assign an Object Identifier (OID) to be > used as a content type for XML objects. The idea is that one would > look inside the XML object to determine the type of XML object that > is being carried inside CMS. > > Is this the right thing to do? > > Would it be better to have a different content type for each XML > object? > > Would it be better to use id-data? > > Russ > From owner-ietf-smime@mail.imc.org Fri Apr 4 09:25:55 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5DDBF3A681E for ; Fri, 4 Apr 2008 09:25:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.734 X-Spam-Level: X-Spam-Status: No, score=-1.734 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599, MSGID_FROM_MTA_HEADER=0.803] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I788IpQuCQ2F for ; Fri, 4 Apr 2008 09:25:54 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 88A0D3A6B79 for ; Fri, 4 Apr 2008 09:24:59 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34G4Dgw018326 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 09:04:13 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m34G4DMw018325; Fri, 4 Apr 2008 09:04:13 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from woodstock.binhost.com (woodstock.binhost.com [8.8.40.152]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m34G4Brb018319 for ; Fri, 4 Apr 2008 09:04:12 -0700 (MST) (envelope-from housley@vigilsec.com) Message-Id: <200804041604.m34G4Brb018319@balder-227.proper.com> Received: (qmail 20531 invoked by uid 0); 4 Apr 2008 16:04:07 -0000 Received: from unknown (HELO THINKPADR52.vigilsec.com) (72.83.129.167) by woodstock.binhost.com with SMTP; 4 Apr 2008 16:04:07 -0000 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Fri, 04 Apr 2008 12:04:09 -0400 To: Lisa Dusseault From: Russ Housley Subject: Re: Content Type for XML Objects Cc: ietf-smime@imc.org, Chris.Newman@sun.com In-Reply-To: References: <20080404135441.B894E1421FD@laweleka.osafoundation.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Lisa: IN CMS OIDs are used for many different things. OIDs are used to identify algorithms, but they are also used to identify content types. We have assigned OIDs for varios "protecting" content types to allow layering of secuity envelopes, and we have assigned OIDs for various contents. In the most common case (id-data), then content type does not say anything. In S/MIME, this content type is used, and it really means look inside for a MIME type. The MIME type then tells the application how to handle the content. In the request that I have received, the XML object is being signed directly. That is, there is no MIME encoding of the XML object prior to signature. Russ At 11:39 AM 4/4/2008, Lisa Dusseault wrote: >In apps, we've had the practice of defining different MIME types for >different kinds of XML-formatted data. A custom MIME type can often >tell you much more than just what the formatting is, of course. This >is most frequently seen in documents that might be sent over HTTP, >where filtering or dispatching (to a Web application, for example) can >possibly be done on the MIME type alone. However there's always the >fallback to application/xml which may or may not be allowed depending >on the context. E.g. the W3C says that XHTML documents SHOULD be >given the content type "application/html+xml" when returned to >clients, although of course a Web server could return other XML >documents as application/xml. > >The convention is to put "+xml" on the end of the MIME type -- I don't >know if it's very common for implementations to use that convention to >tell that the document is in XML even when the specific MIME type is >not known. > >Whether this approach would be worth it in CMS as well, I can't tell. >Looking at RFC2984, OIDs seem to be about cryptographic functions, not >content objects. What am I missing? > >Lisa > >On Apr 4, 2008, at 6:54 AM, Russ Housley wrote: > >>I have received a request to assign an Object Identifier (OID) to be >>used as a content type for XML objects. The idea is that one would >>look inside the XML object to determine the type of XML object that >>is being carried inside CMS. >> >>Is this the right thing to do? >> >>Would it be better to have a different content type for each XML >>object? >> >>Would it be better to use id-data? >> >>Russ > From owner-ietf-smime@mail.imc.org Sat Apr 5 00:04:00 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4AFB13A69E7 for ; Sat, 5 Apr 2008 00:04:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5SNFlkfpjZFZ for ; Sat, 5 Apr 2008 00:03:58 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id D84B73A69EF for ; Sat, 5 Apr 2008 00:03:55 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m356kw4U072749 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 23:46:58 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m356kwWo072748; Fri, 4 Apr 2008 23:46:58 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m356kpGU072732; Fri, 4 Apr 2008 23:46:56 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id A61E818608; Sat, 5 Apr 2008 19:46:48 +1300 (NZDT) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TkJvJ9o2aBfA; Sat, 5 Apr 2008 19:46:48 +1300 (NZDT) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 634F118605; Sat, 5 Apr 2008 19:46:47 +1300 (NZDT) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 34FFC19EC0B9; Sat, 5 Apr 2008 19:46:45 +1300 (NZDT) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1Ji2An-0004SS-2n; Sat, 05 Apr 2008 19:46:45 +1300 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: lists@drh-consultancy.demon.co.uk, pgut001@cs.auckland.ac.nz Subject: Re: S/MIME v3.2 IDs key size text Cc: blake@sendmail.com, housley@vigilsec.com, ietf-smime@imc.org, phoffman@imc.org, turners@ieca.com In-Reply-To: <47F0D7B6.70506@drh-consultancy.demon.co.uk> Message-Id: Date: Sat, 05 Apr 2008 19:46:45 +1300 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Dr Stephen Henson writes: >Some implementations (by accident or design) restrict e to 32 bits in size. This is actually quite useful, although the limitation in the most widespread implementation that does this is more or less arbitrary (when they designed their key blob format they only left 32 bits for e) it's conveniently discouraged anyone from using large e values (well, almost anyone anyway, I once ran into an implementation from Germany that used a 32-bit e, but also encoded it incorrectly so anything over INT_MAX ended up negative), so it's fairly safe to require |e| to be < 32 bits for DoS-protection purposes. Peter. From owner-ietf-smime@mail.imc.org Sat Apr 5 01:41:52 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 339F23A696E for ; Sat, 5 Apr 2008 01:41:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ERfqmLu6yGe2 for ; Sat, 5 Apr 2008 01:41:51 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 1744A3A697B for ; Sat, 5 Apr 2008 01:41:50 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m358QWCV077997 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 5 Apr 2008 01:26:32 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m358QWj3077996; Sat, 5 Apr 2008 01:26:32 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m358QJc4077967; Sat, 5 Apr 2008 01:26:20 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id B78CB185BF; Sat, 5 Apr 2008 21:26:16 +1300 (NZDT) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BcXwd7i8YiR4; Sat, 5 Apr 2008 21:26:16 +1300 (NZDT) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 6758A185BB; Sat, 5 Apr 2008 21:26:13 +1300 (NZDT) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 048BC19EC0B9; Sat, 5 Apr 2008 21:26:03 +1300 (NZDT) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1Ji3is-0000rg-SN; Sat, 05 Apr 2008 21:26:02 +1300 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: pgut001@cs.auckland.ac.nz, simon@josefsson.org Subject: Re: S/MIME v3.2 IDs key size text Cc: blake@sendmail.com, housley@vigilsec.com, ietf-smime@imc.org, lists@drh-consultancy.demon.co.uk, phoffman@imc.org, turners@ieca.com In-Reply-To: <87bq4vrlr8.fsf@mocca.josefsson.org> Message-Id: Date: Sat, 05 Apr 2008 21:26:02 +1300 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Simon Josefsson writes: >What are the "stupid parameters" boundaries that you use? I'd like to >consider adopting something similar. Using values that someone else has >already tried appear less likely to introduce new problems. Hmm, I wound down the limits a bit more for the latest release (e.g. the maximum size of e has gone from 64 to 40 bits) so they haven't been as heavily tested as the previous version, but anyway here are some of them: For RSA: nLen >= MIN_PKCSIZE, nLen <= CRYPT_MAX_PKCSIZE e >= MIN_PUBLIC_EXPONENT, eLen < 40 bits. The latter check is to preclude DoS attacks due to ridiculously large e values. |p-q| > 128 bits Also for the key parameters in general: p, q < d ( d * e ) mod p-1 == 1 ( d * e ) mod q-1 == 1 ( q * u ) mod p == 1 gcd( ( p - 1 )( q - 1), e ) == 1 e1 < p, e2 < q For DLP-based PKCs: pLen >= MIN_PKCSIZE, pLen <= CRYPT_MAX_PKCSIZE. 2 <= g <= p - 2. PKCS #3 keys: g < 256. This isn't strictly necessary but use of g in DH typically sets g = 2, the only reason for setting it to a larger value is either stupidity or a deliberate DoS, neither of which we want to encourage. Non-PKCS #3 keys: g a generator of order q when the q parameter is present. FIPS 186/X9.42 use a g the same size as p so we can't limit the size. y < p If I've missed any checks, please let me know. (Ahh, sorry the constants in the above are various configurable values, I think the names make their function obvious). Peter. From job@careerone.com.au Tue Apr 8 08:19:55 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 762403A6E20 for ; Tue, 8 Apr 2008 08:19:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.117 X-Spam-Level: **** X-Spam-Status: No, score=4.117 tagged_above=-999 required=5 tests=[AWL=-1.195, BAYES_50=0.001, PLING_QUERY=1.39, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, SARE_GIF_ATTACH=1.42, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XV1JZizZmjfo for ; Tue, 8 Apr 2008 08:19:54 -0700 (PDT) Received: from keops.servidoraweb.net (keops.servidoraweb.net [201.235.253.12]) by core3.amsl.com (Postfix) with SMTP id D8A463A6E1C for ; Tue, 8 Apr 2008 08:19:52 -0700 (PDT) Received: from vgdywn (203.128.15.74) by keops.servidoraweb.net; Tue, 8 Apr 2008 12:19:12 -0300 Date: Tue, 8 Apr 2008 12:19:12 -0300 From: X-Mailer: The Bat! (v2.01) Reply-To: X-Priority: 3 (Normal) Message-ID: <936085769.20070801161745@careerone.com.au> To: Subject: Search for good money?? Read here! MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------B8FB8874C72EC0" ------------B8FB8874C72EC0 Content-Type: text/plain; charset=windows-1251 Content-Transfer-Encoding: 8bit Greetings Dear Australian Population ! Lana© Sales and Distribution group offers a great opportunity! *Limited time offer.* Lana© Sales Group located and originated in Italy, Rome, gives you a chance to make 800-1000 AUD a week spending 1-2 hours a day Monday-Thursday. What can be better? Feel free to get more information and start making money within 24 hours. Stop worrying about bills anymore, we found a solution. The answer lies in a conception of taxation loop between two countries. You, as an individual have a chance to provide your service in a position called "Fund Distributor"! This is a new generation opportunity! Feel free to get more information, you will be able to start making money within 24 hours after you apply. Requirements for this position: Make sure you will be able to check your e-mail at least 3-4 times a day. Make sure you will have 1-2 hours of spare time Monday-Thursday. Your current location: Australia. Your Age: 18+ years old. Benefits: *No Start Up Fee *No past experience required *No school degree required *Salary 1200+ AUD a week / Daily Payout! Can't beat that. "Solution for single moms" - "Reason" Magazine, Helen Kotke. "Australia has a chance for Employment problem" - "Harper's" Magazine, Dawn Aproye."Anybody Can Do This, Amazing opportunity!" - "MICE Image" Magazine, John Don. If you meet requirements - feel free to get full information about this position. Reply with 'Interested' or "Job Offer" to: lnss.dept@gmail.com One of our representatives will provide you with full information within 48 hours! Thank You and Good Luck! ------------B8FB8874C72EC0 Content-Type: IMAGE/GIF; name="image.gif" Content-transfer-encoding: base64 Content-Disposition: attachment; filename="image.gif" R0lGODlhWgCjAOUZAAQDB0qElqiorwNJYLnV3k1MVnWKlt7e4SBjeX2ntqnEzUR5iWSJl87b4Stq fpCuuuLy9yhGVr7J0AYmOc/m716UpY+PlWZ7iC1vhf///5O5xisqNmFha6rM2Dl4jQxTa2mcqw4w QkhkcTI6R3+ToAgMGrm5vkV8kJCfqjZSYqq2vSEhLBkZI1VVXhk5Sh5CUlhxf3h3gFKNoIWvvG1t db/d5+Do7JzDzyZrgD8/SUVZaBRYb4KHjz5easrKz3WfrSwAAAAAWgCjAEAG/8CMcEgsGo/IpDJp s0GW0Kh0Ojx0ZtisNsHter9fECgQkJnPZ+qSkPiJ3/C4PF4B1WWevB7D9/ARMhQzDk9CHUI3GRAB JzJICj8Vk2gylJWYmTIBep17OCcJiUI/hRUUQxUEGTeoGgioEDIJhoonJ4y3ugu8C7dkusG4jJ6d fQlPFBU2QjWrNag1Hqgd00ajQhDUqIoQNQEIGHm6emTAv7e9vb/m7NbQGR01GRSHQspPGjuHNfME OKhuYMg3Q8aOHR5O5MGAA0GoVYoaKOphAsKLEBEuSMxgruOuXerU6cHxbN6NQ/UUBayAIZwxHDg8 aCCCoiaJFCJcZHhQAsUQ/wgJEOxwwMcBIAWFhmwillCYU2F++IiL2hBHhQ5JG4iAkeHCCxghLhiQ IEFIAxA4BgzAgcGB26JuHSqQAgEEBjVIDvi8SUJEDyIEAnz4gACBhwqtWJWsJ6MwQ7Y4AjDDa6OY 5cuW2wLS0EGGhkXQCIDwM2AHw8J52EqVGnkyXiIyphrrg7n2aaE/anj2pgpaAk6FYRJtiCBCCwgx OLh+naGBatl6Ckt3S90BzOvCseM4yL279+4hWhw4YsJHERQjBExp0FK6dOHt3cufj+C6VKHeP3BX PsVCjCU+bPDfETMI99Zq99EXnHYMwrTDYBBGONgG5kUhAAsrrFACABwCgP9hARxY4MN4Q7RQgA8/ PIcggvIhNIMG4DTI4IMPSojAchkIsIJ6zB3BgU8z7KCgezBJd8IPHuxgCUwrNonfQR94IIU5cKCE DxsRcYB4RLBX2gnYIHGQDDeMgUACGiQpH5Ms4pflazSMUAQHJIb4GgQXqKCCTxkchEEdHiAwwwt8 911hAwSQVI9F2LDBBjhWIZEKPVxwgQ46iLUEdzL8INQCoxmaHyyMEmHACzr0oIIPJERaqhDceZBA kj8UqJ+oB4DAm0MQYAAMERhAwlcSXEDCq8guAYEdECAQd6Xxmuy01FZLhApooe22M4DhbRtjBGCt EQRo0MYP6Kar/+666H7LhSRMsWNOHj9Q8MQMHpihBgQK2FHHG5MELPDABAe8iW15ODBDNh5IlNgD pBLgGRGzlvGAJAVnfIkmZNSWGkMLCzHTPYFkM8QPJt8wTweuIFAIBBChhI4wIT0FFS75hpyBKvSg tApWitywCgUunUCNNU9A9ARQ8XhA2B5tOXAYRBnYoAIzwORCc0hc7zEPBdR8fYg38SQ1cgaveNDQ VKchlMAD3BhgwAM9TNAAAZaKYMDLM8TnVkfn2EzzCQv4QdJPHgSAwQfQ+ZHv2QdI8EAKEdxNAgow UDQEBUHtoFp1DpyAlBKLJrHs3RrMAMImChUmQy/DIDcKLkSg/0MIej8wRGgJFU4ACYCt8kkVfI7A Mmp0EJMeClkWQAVoKkDAAa4KocAJanmOwZFUU+BGBfFgYFpUCLJlD3MaNO7x+uJjcEPfNAqp3/Ya UHBDUhTUgF19IJTOnKvxBFEQtL6F8OEDAeBMBU4gpOyJyj1cEsKIhMAD/uClAUZBwAChQx8VtUUq GywKrrwTgRyYYAkCUAESTLCBspAuRtqpTnyGNB/iBAdXKyjAsqZAAxrQRUBdUluT2qQgGc1IQhIC QQYOkIMWjEsIAriAEIe4mhaFogJqY9MQG/KdAcwlCTEYAYmUhQQbtGAjNmiMgnYwAAzY4yBnQhIG 0KSm+lD/sSXc+cDZpiCAEpzQCAIYYwZMYKVSxWo0UWIJroLzhyj5jzkF8KEExEODPy7BBiJIwQMO cCwJhACNsPJTHQBhkBHmEXxPFMKe6hYBGFxABBphDncCAAIH7KACnroVrnQlLSU0AAYieIEIJBCB VsKgl+P6ToRMycYdbIQAJoABWEiAzFRa85pFaEDquMXNLGhAaHACNvelzW52iwvndJcXvlcGNIxz CDYoVzrBgAV1essOMmBHJW7hTmvZwFxyYFcc0DXQdiVgDAX8TDyIsIhGMMoGD5hDwOSgsYHl0zYf XBkqIPaEG3wgZM9InCOUpc2KVkATGjMDUy4jDk5ARAb/9ljEKhLzCm6g7R6KYMRIq1YuMZh0Y5pA w0ovoxBFHQEbShzCDGbaso5+gBYLhUBRBdfOjGWCE5jhg/mUSoQaYGBl1igCSOkhEZYJgQBJQSu+ EuIRp/ACHVqDSlM8gYGZQOB8rHhCAvZBj3mM5mg2LcQ8FqqIeNzgFYYx4Ac9oLO2gkQYjIjsLdga 1rOKzWQJmAzZ+pEB/QUEA6hABUQO+xiohUMGMyhEAwwASxikoAdYi2swuFa4t+qiY6Fbz1RStgwE Ba8JwMG9uBiO1cAEBGgdwk3yJIIIUK5VKjREBRwAuKfQViSpeYZuU0I2oAkhNgv5hOtsWjUYQEAC Crj/iQF6kILoZiAwhaEOBn4wGcDlQrbW5UV2C4s2fsyAAmpMCNROAILBZkACKCBBD0SQkwugIALR VYEECLCA0hBFvjKgmhEcK7jBLUAqnCkl24gTCgOj4gIRQEEKUmAD16JABYW4gWB0BRfqhOMHgkwC KpdFAQJkC14gyUPhPOALAxJHJjZFsFhc+coMqGB0ImOgfkCB5AB8Li4yqOYRNCC1aV1OAi64gBBI 4IMU8EkR6RNSYZ6XAJbForAU0MB0jVKBRy6BArKBnsog0AAI2FkJBjDzTwpUmuuAQM6DysB/39s7 DzKksnixSwELaA4MqCU4V6mBPWAHAXyJL7F3FFSp//A86QL2ASGj0Ea3EDBlPDrEAyC4HwU8Bx8+ hKlHCkhsqU1NXFY/CAcwVdlP7Hew+hQJAe1NVnClQtcA7joP9alfmQbw3w4ERS2Eec+xdVAALZmQ UWhhtiewE8I7Rs06DxLKYJh5EBfQqQgTFIIZaVA9HddwgIFaEw5AZ53qaMfX7I4AhZJQniO0wIdR eEWRyP2WITGciiPUjwu+BQHwCAk0eDcSCPAY7RCRhh1UzZO8w4ISrIAFKF/BBnIQSQsIQAKL4sGA lmCBHOBoEaqp9ceLKCPp1AiJO8hBDqhAAwBsoAAxUIGWc8SCCmlAi1SkoRG183MkDgYGK5h5jyBw /wAfqEAALhfACVVQAAZMMdTywYAYAjX161RdQicgQgwGXi0eTLglWtF85tgZY7d95BBy5hEOMIJu vwoClRQCCNTscAToSoOc4MPzrMwgJ3lnAFC9EgsscMkcZ+OMVQBHYaC0g/4ZQc1kYkQbjAJ1y3eH vFBAwQY8LwQT8MoHxzHCn08PRwQEwDRY1LeTCvOBnarBBhxAOBF4kCWZM0pPfRKS4qz8ojoKP0Ef PXwOeHSAAoynBZaEggoOwEkDREAEMI4uHOuwgOPVkpn1cTxeX6UCDvBgBWJkwgMUgALWpqAsfjEB YsZ7OwA8fjADPyA+piQUXvRONtAX7CVmBzB+/y4UBdzRFifgewg4coZCGAaGLFcjAbLTFxEggMe0 e1IAR5JAGAjIbrzUIxIAS7BEAhHwAhcAc6kER6szAKgFArk0Qi+oBAcgAOyFXioWAu2ldO80BLP0 e7CGRcwULdlgADqQAtLkAiYgAg/QBCazhKZjA3cTCeDggoKnSgbghWj4E2m4hmhoA++jLd+kABLQ AOGEgmxIFwRgTtxiT12QVHfIUBSQLXqYBXzYBfDSTn/IUw9gToUIBmKwFJiQhnwmiISYAFvQiIY4 CWQQVPoyTpAwT4ZoUJjIBatzX4CTT3/yG4j4RPyCgOzyigL1A/c0VMxDBuJQAXskZVAt8AD/BzUH wBiMPsgFCxRezYYaNhVTOeVQpcIvbiCMwDhRABMwWJUZUoFLTSUEWFALZXxUwAYUNTDhWFF4kFV8 cAKc0TCs0DLUIGpKhQGdGAX/RDD+YjBn8FNnUI3FwGy5kWHZcAIOs1GkQg97BAGJIy5MwAYCc4/2 iFILmY/NkxlsIQMKQAGmlwGvoxSrUJFoM5CCIDK2gAtFwGdl8pBmYJKcKFQRuY95kECwdzZ1djJM 1ZH5QG3cWFT08D7TmFIpuRTnYBuf0QGodA+CNQRJlQ8z+QodVVfcyAn2dZKT4FMFwzH6eBkOgRUy kBSahgigZQQhI1oaxQonoJUicwP5FDj/s+ULw9ARDEkJVUlXbHFSRlULYNNZXVmBhQhEUJdmRQ+b Aw4H2Q6ypQ4zAxVFNlfFcAJXQQQzwAwdgAAoIVrWgJdq+F4M9QR9OQjjQ0CysghxtQ6Q9RQt2TwB UCtdmRKFBTR9gxKKAwqABWc4xTnZAAEVcBBQ4xaJc2vtsDXBgF8KgQtfRQTNsltkcz/Z8DUB0AEC 8VmhZZmpqRAfsDxRoUGhYFNwAZkjERxGOIQpL7vQMfPgZ/FwWSTDMxCZ7wUQrNCVJnEDubQ9BhQO IPBFqoSdtWN+A4iWbkU4RKaWcMUJuTWeuzUExrlXQxMQpNIBddU3hCEbj0EmrqEA/wu2fzAgYSl2 ZoEhWVuDXfrFPAoRoPJAnCvzBJqGV34gCUUhDpqhQacwBDHoYDCgOxcQgVkiY76znelwXf05Egcq oNw1oqlwCE+nogshHcn5BAnmZFaYSS5gAAyQAq1yDxXgHm4BAmBfblUzIbFfnCU0IvpemNk8tNEe 85UUMVgTIXBeDwADE9ADNfppG/QDb2Jf+pmjb4Vdh9Ol/IAS3aI2cAmP5wNRmOMCutOmYrYnZlEB gzFAbyGnR0CnvpmlQ3Y4qfAZP5Buk2VAwJMUexJMKkAAVohif5EM0Exw0RIOkFlKIJiRKjiF0xIQ ERgZRD6PBgJ4pQAwIEwZ8GL/D5YnvVKbNMZvgLB0TdMUHWZdhEMb80MVa7ZozTEeMNAXKWB+PVCh 0QUBaaIWKlId4aBQUMBxPgZQ+XSsUCFuGTRfBuZna8pgu/oCwvIAhdB3A0AYinlujOoQGrYE4AdH sCxgqADmclKZKmR+YKTe9YAkgGI1+FrTupcJgEcI0QgdoJwEcAIqAgj11q+KIyX7siw+xgXkpQLC 4gMPgDn9JwBJ0QGihxon8F+F4KwF8gcykLFIwBJ5kCwC4ErAYgB6Qp+dtXhCEpcw5WcwswoQ4J4/ EBt/IBmv0Td6gCzwYsESTtlwAx4wr46BrqyQAdLjW0mbtfcRALA3Bcqzj/8thUuDMofiBCAkQgCK qivW0bIEADYJUAfaOAam0SRs8YFqsK+1MbDF8Dwg8CJq62f4kj2GASawA9pQAwu0A2kSE3d0a3gB Xs9mGx8At0lyCqkVk7yBA4RhHbpFF9kjDyCdl4sZ4bBpjXtYTtOgxLE9yllcBJSvr4Fn6pO6ioUQ WCEISTIY8YcQZDCxYONnfmcdCIAyyDKluau7RTp6+oEfjIMBM9AP2tAzPYYW+9YQC1CBpUIAtOu8 Egm9cVk/GmC92nADFbCy21sYEVAAEcQoUqUaZksblwu6ZJI/O4AyzqABksBq9cGthaEDTrRE9lcq NxC+zeZspuYHSoIm/+qbvCfgAOvmHfLBbYXAhWRHe1EAAQtwII3Tb+Z2RweROupWGguYAhonQWPU AjzAwUqQwO+xQdBmbPzWb/5mHQaSKyjMbi7gfUZQcFWwAZw3BVLVQQOkb6ATQzq8vewGHjnAwSbg eTEQxVIgATbEIETRQStyw8PBgbhSQhWCBGJ3BDaQHlEAAn7HxDNEJAhSbiAEfyUUfkjwdUlgASuw e5XRIDIEcnnHIqZ0IlKAAkWcBE3EwTfAxCDcxiC3IGwCxtyxAijQdV9ncSggAChgAhIgSP4BBSxE x0IwpQYyRI0sddshKgCQIRvAATFgAatCtUcQA8q3BCbSKBY7wqW8Jv8tciu6dBD5x0M2JwVAxEOg AK03fEXkyPvjc1YHISygdUsQAx3CITkUAwLQZ0cQJ+YRs7jMc23nIM2sHx9wdFPgA+b8df6RcQVQ ADkwAk1kzebhA0hnF46md978zW9nIxJgASUwxv7UAh82wow8ems8dfkceC4kAStQyNRyAK6cgdcB xwniHhjQmt8Mzge9RwdAztTSAMqRa/fMFvLxhDBUeR13ylASIcpbBBYwe8niA/TmW4wndTU0uBCN HcZ1HYA3GN5IBH10Zj0iAANCmzM9H2yEAIhF0YcWI7g8KnrcAgVMOtWDAjwAT2rkHjUSAB9YGOg4 A5wglzgddflBrP8ZEAMrAMPPegQWwNBXqm7RqTNGIB2zECiNgHf1XEXdkX1S4AM7QnDSwgHulWXA t2IiJCfAB52SgAsSanmEkFNAJVFdBFNcBBTXIxfICQU4K4x3zH+AHwOpBjyQA/4jIkRQAGS9KRoY fHQ00/bRJg+yR2ogARtwcUJAAyTCRD1yEzDADNwRCraUB0X9Hq49lozCRIVsRuOBe3jxSg+gQhCg O9F3PD8gGA4QG4ci3H/wIKe9BKE9HlAANuADhRQFMTitTSCAVcMncDTXgmK1vWzBxsZqcF0qkAM+ YAIHB81HUBYSgBOUIwI5ckxFcBDAs0C+B7EjRHyfnSwtAP+zrHt+ASwp4ALTujfIdIFIsgN1f2w0 3zgLygdGTAAeteZnADQbSsezV4CASAv4AQ6w3T3SYthJASKA3q+x3qg4CxTMbpTLKBJwLAcGA1GU Ey/wWhdw4kqA4UlCYAxkSi4+tj2iAhNgACjgYE1ghdTCHWdiEDJQS++tTLtSKipgnxFgAwYwASJg h7Jkm0jSRrPy5ZcX5niBOT3gAlFbAi4g4Nd0gQlw2CeVJKYUhCSVAayVNxfgAj2g5tMySz9AFKwT hXK+3wrGXiLQADR4AdC9hrOELwU4XVFYhmYhAebnAgqgNyQQAiTAL4kYfWw0rwXYGHDeHVLoZDDQ fxQeATZct+pG8AAVUChPLOtlKAEq4AISgOS6/hNgSAAPwADiMwAh0MPNlCXgz8eOLMsiAb8B47oe BAA7 ------------B8FB8874C72EC0-- From owner-ietf-smime@mail.imc.org Tue Apr 8 10:07:13 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 14D353A68A2 for ; Tue, 8 Apr 2008 10:07:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.949 X-Spam-Level: X-Spam-Status: No, score=-2.949 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bt2Zc-zj+CuV for ; Tue, 8 Apr 2008 10:07:11 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 9A3BC3A6A3B for ; Tue, 8 Apr 2008 10:07:10 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m38GhkxX049168 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 8 Apr 2008 09:43:46 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m38Ghkmg049167; Tue, 8 Apr 2008 09:43:46 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mx3.rz.ruhr-uni-bochum.de (mx3.rz.ruhr-uni-bochum.de [134.147.64.33]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m38GhhQG049134 for ; Tue, 8 Apr 2008 09:43:45 -0700 (MST) (envelope-from joerg.schwenk@rub.de) X-Queued: (qmail 12844 invoked from network); 8 Apr 2008 16:43:36 -0000 Received: from c2-3-4.rz.ruhr-uni-bochum.de (134.147.64.5) by mx3.rz.ruhr-uni-bochum.de with SMTP; 8 Apr 2008 16:43:36 -0000 X-Queued: (qmail 10711 invoked by uid 281); 8 Apr 2008 16:43:36 -0000 X-Qmailscanner: from 217.225.188.63 (mNHiDSxtQuVJ3Mxa9yfinw==@217.225.188.63) by c2-3-4.rz.ruhr-uni-bochum.de (envelope-from , uid 80) with qmail-scanner-2.01 (sophie: 3.05/2.71/4.27. Clear:RC:1(217.225.188.63):. Processed in 0.040385 secs); 08 Apr 2008 16:43:36 -0000 Received: from pd9e1bc3f.dip.t-dialin.net (HELO jotop) (mNHiDSxtQuVJ3Mxa9yfinw==@217.225.188.63) by c2-3-4.rz.ruhr-uni-bochum.de with (RC4-MD5 encrypted) SMTP; 8 Apr 2008 16:43:36 -0000 From: =?iso-8859-1?Q?J=F6rg_Schwenk?= To: "'Russ Housley'" Cc: References: <20080404135441.B894E1421FD@laweleka.osafoundation.org> <200804041604.m34G4Brb018319@balder-227.proper.com> Subject: AW: Content Type for XML Objects Date: Tue, 8 Apr 2008 18:42:17 +0200 Message-ID: <016f01c89997$82122dc0$1b289386@jotop> MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook 11 In-Reply-To: <200804041604.m34G4Brb018319@balder-227.proper.com> Content-Type: multipart/signed; boundary="----=_NextPart_000_016B_01C899A8.45288CE0"; protocol="application/x-pkcs7-signature"; micalg=SHA1 Thread-Index: AciWceD5T+bUUue6TIOOIwcRnT/mcQDGwOHw X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: This is a multi-part message in MIME format. ------=_NextPart_000_016B_01C899A8.45288CE0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I think the problem is a little more complex: - If you have to (re-)compute a hash value, you need the bitwise = identical representation of the signed data. - ASN.1, MIME and XML have different methods how to guarantee this; In = XML, it is a process called canonicalization (C14N) that takes care e.g. of linebreaks, but also of more complicated stuff like namespaces. - The problem now is that there are, up to my knowledge, at least two different C14N algorithms specified. So one OID will not do, because it = has to tell the signature verification function how to process the XML data before hashing it. - We also cannot rely on the XML data to carry this information: This is e.g. not part of a simple XHTML document. To sum up: I think we need a different OID for each C14N algorithm. To = start with one is OK, but then the C14N variant must be fixed. Joerg -----Urspr=FCngliche Nachricht----- Von: owner-ietf-smime@mail.imc.org = [mailto:owner-ietf-smime@mail.imc.org] Im Auftrag von Russ Housley Gesendet: Freitag, 4. April 2008 18:04 An: Lisa Dusseault Cc: ietf-smime@imc.org; Chris.Newman@sun.com Betreff: Re: Content Type for XML Objects Lisa: IN CMS OIDs are used for many different things. OIDs are used to=20 identify algorithms, but they are also used to identify content=20 types. We have assigned OIDs for varios "protecting" content types=20 to allow layering of secuity envelopes, and we have assigned OIDs for=20 various contents. In the most common case (id-data), then content type does not say=20 anything. In S/MIME, this content type is used, and it really means=20 look inside for a MIME type. The MIME type then tells the=20 application how to handle the content. In the request that I have received, the XML object is being signed=20 directly. That is, there is no MIME encoding of the XML object prior=20 to signature. Russ At 11:39 AM 4/4/2008, Lisa Dusseault wrote: >In apps, we've had the practice of defining different MIME types for >different kinds of XML-formatted data. A custom MIME type can often >tell you much more than just what the formatting is, of course. This >is most frequently seen in documents that might be sent over HTTP, >where filtering or dispatching (to a Web application, for example) can >possibly be done on the MIME type alone. However there's always the >fallback to application/xml which may or may not be allowed depending >on the context. E.g. the W3C says that XHTML documents SHOULD be >given the content type "application/html+xml" when returned to >clients, although of course a Web server could return other XML >documents as application/xml. > >The convention is to put "+xml" on the end of the MIME type -- I don't >know if it's very common for implementations to use that convention to >tell that the document is in XML even when the specific MIME type is >not known. > >Whether this approach would be worth it in CMS as well, I can't tell. >Looking at RFC2984, OIDs seem to be about cryptographic functions, not >content objects. What am I missing? > >Lisa > >On Apr 4, 2008, at 6:54 AM, Russ Housley wrote: > >>I have received a request to assign an Object Identifier (OID) to be >>used as a content type for XML objects. The idea is that one would >>look inside the XML object to determine the type of XML object that >>is being carried inside CMS. >> >>Is this the right thing to do? >> >>Would it be better to have a different content type for each XML >>object? >> >>Would it be better to use id-data? >> >>Russ > ------=_NextPart_000_016B_01C899A8.45288CE0 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGtzCCA1Mw ggK8oAMCAQICDgPYAAEAAuYuTmNUEqhuMA0GCSqGSIb3DQEBBAUAMIG8MQswCQYDVQQGEwJERTEQ MA4GA1UECBMHSGFtYnVyZzEQMA4GA1UEBxMHSGFtYnVyZzE6MDgGA1UEChMxVEMgVHJ1c3RDZW50 ZXIgZm9yIFNlY3VyaXR5IGluIERhdGEgTmV0d29ya3MgR21iSDEiMCAGA1UECxMZVEMgVHJ1c3RD ZW50ZXIgQ2xhc3MgMSBDQTEpMCcGCSqGSIb3DQEJARYaY2VydGlmaWNhdGVAdHJ1c3RjZW50ZXIu ZGUwHhcNMDcwNzAyMTA1MzUyWhcNMDgwODIxMTA1MzUyWjBKMQswCQYDVQQGEwJERTEWMBQGA1UE AxMNSm9lcmcgU2Nod2VuazEjMCEGCSqGSIb3DQEJARYUam9lcmcuc2Nod2Vua0BydWIuZGUwgZ8w DQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAL87hBfH2WpWbqzzSHa01D/EXd+mumSJaTjgMAq3Jzte NBcMZ0/0P9TSjc/CAXkFsaxrEHd+2ddr8rVMjgyL1ACJ8yYsSL0Xl2bYKPjxPBL1Hhj7Npn+Gx1I BRH23trbSlXYyyf23zBK9/zSaJCX1lrYOh9uABAh4lUayTWBLowTAgMBAAGjgcgwgcUwDAYDVR0T AQH/BAIwADAOBgNVHQ8BAf8EBAMCBeAwMwYJYIZIAYb4QgEIBCYWJGh0dHA6Ly93d3cudHJ1c3Rj ZW50ZXIuZGUvZ3VpZGVsaW5lczARBglghkgBhvhCAQEEBAMCBaAwXQYJYIZIAYb4QgEDBFAWTmh0 dHBzOi8vd3d3LnRydXN0Y2VudGVyLmRlL2NnaS1iaW4vY2hlY2stcmV2LmNnaS8wM0Q4MDAwMTAw MDJFNjJFNEU2MzU0MTJBODZFPzANBgkqhkiG9w0BAQQFAAOBgQAX7f7Uf+07c7YnZjsJAk8Vokbp RPyQmtjmuTjBGhmI3Bebt+KHiEc1IK0HsoXIygouWghdUf4wiz3rWPWPsHNhzUCpiL4R7tYr3BDI ntjOj91o67QETMR+zp840S7H4UyUiBYw3eZKMsUISOA7xV51knhlegxjUx/zmjLOsAMxXzCCA1ww ggLFoAMCAQICAgPpMA0GCSqGSIb3DQEBBAUAMIG8MQswCQYDVQQGEwJERTEQMA4GA1UECBMHSGFt YnVyZzEQMA4GA1UEBxMHSGFtYnVyZzE6MDgGA1UEChMxVEMgVHJ1c3RDZW50ZXIgZm9yIFNlY3Vy aXR5IGluIERhdGEgTmV0d29ya3MgR21iSDEiMCAGA1UECxMZVEMgVHJ1c3RDZW50ZXIgQ2xhc3Mg MSBDQTEpMCcGCSqGSIb3DQEJARYaY2VydGlmaWNhdGVAdHJ1c3RjZW50ZXIuZGUwHhcNOTgwMzA5 MTE1OTU5WhcNMTEwMTAxMTE1OTU5WjCBvDELMAkGA1UEBhMCREUxEDAOBgNVBAgTB0hhbWJ1cmcx EDAOBgNVBAcTB0hhbWJ1cmcxOjA4BgNVBAoTMVRDIFRydXN0Q2VudGVyIGZvciBTZWN1cml0eSBp biBEYXRhIE5ldHdvcmtzIEdtYkgxIjAgBgNVBAsTGVRDIFRydXN0Q2VudGVyIENsYXNzIDEgQ0Ex KTAnBgkqhkiG9w0BCQEWGmNlcnRpZmljYXRlQHRydXN0Y2VudGVyLmRlMIGfMA0GCSqGSIb3DQEB AQUAA4GNADCBiQKBgQCwKeu0drOu17ZbtF7nveOxnEkEV1uhq9l/Exv9umGr2Odx3y0AlF1RSH0j 73VihJA8Ch9ZEXQvjoCl/TACPSlSzXIaSSGcvMtSjkihY5bIEIUwaVd0RcBahsbVPeBoV30xaiSN RZc+MX5oZjJuJG3sMjbJQcrwMUTIo2HKG6A2HwIDAQABo2swaTAPBgNVHRMBAf8EBTADAQH/MA4G A1UdDwEB/wQEAwIBhjAzBglghkgBhvhCAQgEJhYkaHR0cDovL3d3dy50cnVzdGNlbnRlci5kZS9n dWlkZWxpbmVzMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG9w0BAQQFAAOBgQBPmVmFyGRWgsVv PdhGCS88UcGncFiBkhLq9NQWAJZecijn1jZfGpyvH8KDGrQFVZmmWFw3KPJXHutdv7HTRQ9yHAPS AMcsVdr+X4l2i+LUd/VNCRevxLqrMCtPuB3q2f9Z8FB0Rrpe6jaw65J7D1jaMuFSvSM3D/XzAEqu sF7ebjGCBAgwggQEAgEBMIHPMIG8MQswCQYDVQQGEwJERTEQMA4GA1UECBMHSGFtYnVyZzEQMA4G A1UEBxMHSGFtYnVyZzE6MDgGA1UEChMxVEMgVHJ1c3RDZW50ZXIgZm9yIFNlY3VyaXR5IGluIERh dGEgTmV0d29ya3MgR21iSDEiMCAGA1UECxMZVEMgVHJ1c3RDZW50ZXIgQ2xhc3MgMSBDQTEpMCcG CSqGSIb3DQEJARYaY2VydGlmaWNhdGVAdHJ1c3RjZW50ZXIuZGUCDgPYAAEAAuYuTmNUEqhuMAkG BSsOAwIaBQCgggKOMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA4 MDQwODE2NDIxN1owIwYJKoZIhvcNAQkEMRYEFP2bEfxhwAXGl3+B448ik5E5nwtZMGcGCSqGSIb3 DQEJDzFaMFgwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsO AwIHMA0GCCqGSIb3DQMCAgEoMAcGBSsOAwIaMAoGCCqGSIb3DQIFMIHgBgkrBgEEAYI3EAQxgdIw gc8wgbwxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdIYW1idXJnMRAwDgYDVQQHEwdIYW1idXJnMTow OAYDVQQKEzFUQyBUcnVzdENlbnRlciBmb3IgU2VjdXJpdHkgaW4gRGF0YSBOZXR3b3JrcyBHbWJI MSIwIAYDVQQLExlUQyBUcnVzdENlbnRlciBDbGFzcyAxIENBMSkwJwYJKoZIhvcNAQkBFhpjZXJ0 aWZpY2F0ZUB0cnVzdGNlbnRlci5kZQIOA9gAAQAC5i5OY1QSqG4wgeIGCyqGSIb3DQEJEAILMYHS oIHPMIG8MQswCQYDVQQGEwJERTEQMA4GA1UECBMHSGFtYnVyZzEQMA4GA1UEBxMHSGFtYnVyZzE6 MDgGA1UEChMxVEMgVHJ1c3RDZW50ZXIgZm9yIFNlY3VyaXR5IGluIERhdGEgTmV0d29ya3MgR21i SDEiMCAGA1UECxMZVEMgVHJ1c3RDZW50ZXIgQ2xhc3MgMSBDQTEpMCcGCSqGSIb3DQEJARYaY2Vy dGlmaWNhdGVAdHJ1c3RjZW50ZXIuZGUCDgPYAAEAAuYuTmNUEqhuMA0GCSqGSIb3DQEBAQUABIGA FPYWsxCRLz3iFdxrC4xJRhCNccH8KElysw9u0rUM24gUNV4AWUuLP8FUwnGhB+jIIlYPYpLF2ELj S+ZODsNgJ53Rzivs+e9RrOOYeDlAxdt46AQ2BXy0WmgUmrG2cyf0se+Nl9Moe2ICf11YP/SwNZGM dPyEh3VGnX8UrQnFm0gAAAAAAAA= ------=_NextPart_000_016B_01C899A8.45288CE0-- From owner-ietf-smime@mail.imc.org Tue Apr 8 11:34:27 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3F9253A6E54 for ; Tue, 8 Apr 2008 11:34:27 -0700 (PDT) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char F6 hex): To: J\366rg Schwenk ; Tue, 8 Apr 2008 11:34:26 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 227F828C42C for ; Tue, 8 Apr 2008 11:34:19 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m38IKGa1058478 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 8 Apr 2008 11:20:17 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m38IKGEW058477; Tue, 8 Apr 2008 11:20:16 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from woodstock.binhost.com (woodstock.binhost.com [8.8.40.152]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m38IKF5H058470 for ; Tue, 8 Apr 2008 11:20:16 -0700 (MST) (envelope-from housley@vigilsec.com) Message-Id: <200804081820.m38IKF5H058470@balder-227.proper.com> Received: (qmail 4195 invoked by uid 0); 8 Apr 2008 18:20:09 -0000 Received: from unknown (HELO THINKPADR52.vigilsec.com) (72.83.129.167) by woodstock.binhost.com with SMTP; 8 Apr 2008 18:20:09 -0000 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Tue, 08 Apr 2008 14:10:56 -0400 To: Jörg Schwenk From: Russ Housley Subject: Re: AW: Content Type for XML Objects Cc: In-Reply-To: <016f01c89997$82122dc0$1b289386@jotop> References: <20080404135441.B894E1421FD@laweleka.osafoundation.org> <200804041604.m34G4Brb018319@balder-227.proper.com> <016f01c89997$82122dc0$1b289386@jotop> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: 8bit Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Jörg: I agree with all of you observations, but I do not agree with your conclusion. When CMS is used to encapsulate a content, the content is carried as an OCTET STRING, so it is not altered. Canonicalization is not an issue. When CMS is used for a detached content, all of the canonicalization issues come out, but it is not the job of the content type to provide encoding rules. The detached content must be transferred in a manner that the same hash value can be computed. That cannot fall on the assignment of a CMS content type object identifier. Russ At 12:42 PM 4/8/2008, Jörg Schwenk wrote: >I think the problem is a little more complex: > >- If you have to (re-)compute a hash value, you need the bitwise identical >representation of the signed data. > >- ASN.1, MIME and XML have different methods how to guarantee this; In XML, >it is a process called canonicalization (C14N) that takes care e.g. of >linebreaks, but also of more complicated stuff like namespaces. > >- The problem now is that there are, up to my knowledge, at least two >different C14N algorithms specified. So one OID will not do, because it has >to tell the signature verification function how to process the XML data >before hashing it. > >- We also cannot rely on the XML data to carry this information: This is >e.g. not part of a simple XHTML document. > >To sum up: I think we need a different OID for each C14N algorithm. To start >with one is OK, but then the C14N variant must be fixed. > >Joerg > >-----Ursprüngliche Nachricht----- >Von: owner-ietf-smime@mail.imc.org [mailto:owner-ietf-smime@mail.imc.org] Im >Auftrag von Russ Housley >Gesendet: Freitag, 4. April 2008 18:04 >An: Lisa Dusseault >Cc: ietf-smime@imc.org; Chris.Newman@sun.com >Betreff: Re: Content Type for XML Objects > > >Lisa: > >IN CMS OIDs are used for many different things. OIDs are used to >identify algorithms, but they are also used to identify content >types. We have assigned OIDs for varios "protecting" content types >to allow layering of secuity envelopes, and we have assigned OIDs for >various contents. > >In the most common case (id-data), then content type does not say >anything. In S/MIME, this content type is used, and it really means >look inside for a MIME type. The MIME type then tells the >application how to handle the content. > >In the request that I have received, the XML object is being signed >directly. That is, there is no MIME encoding of the XML object prior >to signature. > >Russ > >At 11:39 AM 4/4/2008, Lisa Dusseault wrote: > >In apps, we've had the practice of defining different MIME types for > >different kinds of XML-formatted data. A custom MIME type can often > >tell you much more than just what the formatting is, of course. This > >is most frequently seen in documents that might be sent over HTTP, > >where filtering or dispatching (to a Web application, for example) can > >possibly be done on the MIME type alone. However there's always the > >fallback to application/xml which may or may not be allowed depending > >on the context. E.g. the W3C says that XHTML documents SHOULD be > >given the content type "application/html+xml" when returned to > >clients, although of course a Web server could return other XML > >documents as application/xml. > > > >The convention is to put "+xml" on the end of the MIME type -- I don't > >know if it's very common for implementations to use that convention to > >tell that the document is in XML even when the specific MIME type is > >not known. > > > >Whether this approach would be worth it in CMS as well, I can't tell. > >Looking at RFC2984, OIDs seem to be about cryptographic functions, not > >content objects. What am I missing? > > > >Lisa > > > >On Apr 4, 2008, at 6:54 AM, Russ Housley wrote: > > > >>I have received a request to assign an Object Identifier (OID) to be > >>used as a content type for XML objects. The idea is that one would > >>look inside the XML object to determine the type of XML object that > >>is being carried inside CMS. > >> > >>Is this the right thing to do? > >> > >>Would it be better to have a different content type for each XML > >>object? > >> > >>Would it be better to use id-data? > >> > >>Russ > > From root@kontera.com Tue Apr 8 14:08:45 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AA50F3A6896 for ; Tue, 8 Apr 2008 14:08:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.402 X-Spam-Level: **** X-Spam-Status: No, score=4.402 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, FORGED_YAHOO_RCVD=2.297, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h6sGwym0BozE for ; Tue, 8 Apr 2008 14:08:45 -0700 (PDT) Received: from rb-app2.colo.kontera.com (unknown [208.185.211.94]) by core3.amsl.com (Postfix) with SMTP id F2BD13A6A98 for ; Tue, 8 Apr 2008 14:08:44 -0700 (PDT) Received: by rb-app2.colo.kontera.com (Postfix, from userid 0) id 46CC01682738; Tue, 8 Apr 2008 14:09:01 -0700 (PDT) From: iorga_eugeniu@yahoo.com To: smime-archive@ietf.org Subject: You've been recommended to join Kontera network Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Message-Id: <20080408210901.46CC01682738@rb-app2.colo.kontera.com> Date: Tue, 8 Apr 2008 14:09:01 -0700 (PDT) Hey, I wanted to let you know that I’ve been using Kontera ContentLinkâ„¢ ads on my site, and the results are great. You should definitely try it out! All the best, xdating.co.uk Follow this link to join Kontera. http://www.kontera.com/ads-for-site/become-a-kontera-publisher Visit Kontera Site for any additional information. From root@kontera.com Tue Apr 8 14:09:46 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4EFD63A6DA3 for ; Tue, 8 Apr 2008 14:09:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.402 X-Spam-Level: **** X-Spam-Status: No, score=4.402 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, FORGED_YAHOO_RCVD=2.297, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DmgRS6sqjaEl for ; Tue, 8 Apr 2008 14:09:46 -0700 (PDT) Received: from rb-app2.colo.kontera.com (unknown [208.185.211.94]) by core3.amsl.com (Postfix) with SMTP id 3BE003A6B86 for ; Tue, 8 Apr 2008 14:09:46 -0700 (PDT) Received: by rb-app2.colo.kontera.com (Postfix, from userid 0) id CF22E168273C; Tue, 8 Apr 2008 14:10:02 -0700 (PDT) From: iorga_eugeniu@yahoo.com To: smime-archive@megatron.ietf.org Subject: You've been recommended to join Kontera network Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Message-Id: <20080408211002.CF22E168273C@rb-app2.colo.kontera.com> Date: Tue, 8 Apr 2008 14:10:02 -0700 (PDT) Hey, I wanted to let you know that I’ve been using Kontera ContentLinkâ„¢ ads on my site, and the results are great. You should definitely try it out! All the best, xdating.co.uk Follow this link to join Kontera. http://www.kontera.com/ads-for-site/become-a-kontera-publisher Visit Kontera Site for any additional information. From owner-ietf-smime@mail.imc.org Tue Apr 8 23:54:11 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 296193A6AA0 for ; Tue, 8 Apr 2008 23:54:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JfRxSI4Z7DEO for ; Tue, 8 Apr 2008 23:54:07 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 9BB1B3A6EF9 for ; Tue, 8 Apr 2008 23:54:06 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m396VNH5019806 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 8 Apr 2008 23:31:23 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m396VNV7019805; Tue, 8 Apr 2008 23:31:23 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m396VHHN019783 for ; Tue, 8 Apr 2008 23:31:21 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 4F9CD18804; Wed, 9 Apr 2008 18:31:16 +1200 (NZST) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DST5e5s5KDfV; Wed, 9 Apr 2008 18:31:16 +1200 (NZST) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 50A5418629; Wed, 9 Apr 2008 18:31:15 +1200 (NZST) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 6BE0919EC0B9; Wed, 9 Apr 2008 18:31:03 +1200 (NZST) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1JjTpn-00021q-8q; Wed, 09 Apr 2008 18:31:03 +1200 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: housley@vigilsec.com, joerg.schwenk@rub.de Subject: Re: AW: Content Type for XML Objects Cc: ietf-smime@imc.org In-Reply-To: <016f01c89997$82122dc0$1b289386@jotop> Message-Id: Date: Wed, 09 Apr 2008 18:31:03 +1200 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: =?iso-8859-1?Q?J=F6rg_Schwenk?= writes: >- The problem now is that there are, up to my knowledge, at least two >different C14N algorithms specified. So one OID will not do, because it has >to tell the signature verification function how to process the XML data >before hashing it. Argh, no, this is exactly the same mistake that XMLdsig makes, and (one of) the reasons why it's such a nightmare to implement (see http://www.cs.auckland.ac.nz/~pgut001/pubs/xmlsec.txt for the short form and http://seattle.toorcon.org/2007/talks/bradhill.ppt for the version with full orchestration and five part harmony). The nice thing about S/MIME and PGP is that what's signed is "this string of bits, exactly as is", without any need to perform impossible manipulations on it first like XMLdsig requires. >To sum up: I think we need a different OID for each C14N algorithm. Only if we want to repeat XMLdsig's mistakes. This is a chance to fix them, not to perpetuate them. Peter. From owner-ietf-smime@mail.imc.org Wed Apr 9 00:27:36 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D59943A67A4 for ; Wed, 9 Apr 2008 00:27:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lU5x5cEEsmpG for ; Wed, 9 Apr 2008 00:27:35 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 75B0C3A67F4 for ; Wed, 9 Apr 2008 00:27:35 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397Cfxp023439 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 00:12:41 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m397CfJu023438; Wed, 9 Apr 2008 00:12:41 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.174]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397Ca5t023426 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 9 Apr 2008 00:12:37 -0700 (MST) (envelope-from ietf@augustcellars.com) Received: from GALATIONS (unknown [207.202.179.27]) by smtp4.pacifier.net (Postfix) with ESMTP id 624476A955; Wed, 9 Apr 2008 00:12:35 -0700 (PDT) From: "Jim Schaad" To: "'Peter Gutmann'" , , Cc: References: <016f01c89997$82122dc0$1b289386@jotop> In-Reply-To: Subject: RE: AW: Content Type for XML Objects Date: Wed, 9 Apr 2008 00:12:35 -0700 Message-ID: <01d201c89a11$163a2510$42ae6f30$@com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AciaC7MWOk3fsJQ2QrWNR4h+eSluQwAA+K1A Content-Language: en-us Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: I agree with at least part of what Peter said. This is the path that I think should be followed: 1. There should be one XML content type OID assigned. There are not multiple ways to encode XML at this point. 2. It should be determined a) We need an authenticated attribute to convey what the XML is and b) if the ContentHints attribute is If the answers are yes and no, then a new authenticated attribute should be created for this purpose. 3. For those people who want to continue using C14N algorithms on XML trees, they need to define one or more new hash algorithms that convert an XML tree into a binary number. These new hash algorithms would most likely take as a parameter one of the existing string to binary number hash algorithms we are familiar with today. Jim > -----Original Message----- > From: owner-ietf-smime@mail.imc.org [mailto:owner-ietf- > smime@mail.imc.org] On Behalf Of Peter Gutmann > Sent: Tuesday, April 08, 2008 11:31 PM > To: housley@vigilsec.com; joerg.schwenk@rub.de > Cc: ietf-smime@imc.org > Subject: Re: AW: Content Type for XML Objects > > > =?iso-8859-1?Q?J=F6rg_Schwenk?= writes: > > >- The problem now is that there are, up to my knowledge, at least two > >different C14N algorithms specified. So one OID will not do, because > it has > >to tell the signature verification function how to process the XML > data > >before hashing it. > > Argh, no, this is exactly the same mistake that XMLdsig makes, and (one > of) > the reasons why it's such a nightmare to implement (see > http://www.cs.auckland.ac.nz/~pgut001/pubs/xmlsec.txt for the short > form and > http://seattle.toorcon.org/2007/talks/bradhill.ppt for the version with > full > orchestration and five part harmony). > > The nice thing about S/MIME and PGP is that what's signed is "this > string of > bits, exactly as is", without any need to perform impossible > manipulations on > it first like XMLdsig requires. > > >To sum up: I think we need a different OID for each C14N algorithm. > > Only if we want to repeat XMLdsig's mistakes. This is a chance to fix > them, > not to perpetuate them. > > Peter. From owner-ietf-smime@mail.imc.org Wed Apr 9 00:40:37 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 57C1F3A63D3 for ; Wed, 9 Apr 2008 00:40:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f-rXMUUn0n8r for ; Wed, 9 Apr 2008 00:40:36 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 265E13A6B2E for ; Wed, 9 Apr 2008 00:40:24 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397M9aq024854 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 00:22:10 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m397M9Zf024853; Wed, 9 Apr 2008 00:22:09 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from ladle.sendmail.com (ladle.sendmail.com [209.246.26.53]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397M9nu024845 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 9 Apr 2008 00:22:09 -0700 (MST) (envelope-from blake@sendmail.com) Received: from spork.sendmail.com (tls.sendmail.com [209.246.26.41]) by ladle.sendmail.com (Switch-3.3.1/Sentrion-3.0.0) with ESMTP id m397NuJq025021 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 9 Apr 2008 00:23:56 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sendmail.com; s=ladle.dkim; t=1207725836; bh=ItFgC5ZZQLNR0/ow7gZxaDt2rwYtmxEXwDVE nqpfooI=; h=Received:X-DKIM:DKIM-Signature:Date:From:To:Cc:Subject: Message-ID:References:MIME-Version:Content-Type: Content-Disposition:In-Reply-To:User-Agent:X-MM-Ex-RefId; b=udi9rJ gFo7kjGCTL1EVLVxIc4DS7SUTtl99mf3XoIB/BBJU6FR+BIwftsIuK365BCHajqr9WU whVXozGP/OORXFIE8PQtgqmDOAk0D+CSc1sPa57rjFpIDGqGV21m2QXKBEafn8U12sh /oTLRAy0Sh6nv7qPDExY/GSAQqERQ2E= Received: from blake-ramsdells-macbook-pro.local (c-24-17-217-200.hsd1.mn.comcast.net [24.17.217.200]) (authenticated bits=0) by spork.sendmail.com (Switch-3.3.1/Switch-3.3.2mp) with ESMTP id m397Libe017788 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 00:21:48 -0700 X-DKIM: Sendmail DKIM Filter v2.2.3 spork.sendmail.com m397Libe017788 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sendmail.com; s=spork.dkim; t=1207725710; bh=ItFgC5ZZQLNR0/ow7gZxaDt2rwYtmxEXwDVE nqpfooI=; h=Date:From:To:Cc:Subject:Message-ID:References: MIME-Version:Content-Type:Content-Disposition:In-Reply-To: User-Agent:X-MM-Ex-RefId; b=jiY1XKEOyiVq7pxMPgmklG/tkEY9aRU0FC+PyG xmQ6IWdNZWJ9XjZzEiXJBvIirzTh5CK0rvE1DizKBidiDnRUn/L3KPDuRP0yhUR8S+e JnMFVV4+p/MMPrXqIEBWy3jpebAJlfsEmlZVUB2izgif4elwKk10m8dsSV2W4jDHHY= Date: Wed, 9 Apr 2008 00:19:37 -0700 From: Blake Ramsdell To: Peter Gutmann Cc: housley@vigilsec.com, joerg.schwenk@rub.de, ietf-smime@imc.org Subject: Re: AW: Content Type for XML Objects Message-ID: <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> References: <016f01c89997$82122dc0$1b289386@jotop> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.15 (2007-04-06) X-MM-Ex-RefId: 149371::080409002149-1AED8B90-09C7CE54/0-0/0-1 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: On Wed, Apr 09, 2008 at 06:31:03PM +1200, Peter Gutmann wrote: > The nice thing about S/MIME and PGP is that what's signed is "this string of > bits, exactly as is", without any need to perform impossible manipulations on > it first like XMLdsig requires. One way to avoid this temptation is to just leave it as "throw a MIME Content-Type at the beginning of it with application/(something)+xml, mark it id-data and call it S/MIME". The overhead does not seem significant (just the additional header), and I don't know the utility of being able to identify it as XML at the outer CMS wrapper. It also, of course, neatly sidesteps any issues relating to "the C word" since it is already steeped in current practice to just leave the poor guy's bits alone, as Peter points out. Blake -- Blake Ramsdell | Sendmail, Inc. | http://www.sendmail.com From owner-ietf-smime@mail.imc.org Wed Apr 9 00:58:32 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 635153A6931 for ; Wed, 9 Apr 2008 00:58:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kYRHk9p-sb0y for ; Wed, 9 Apr 2008 00:58:31 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 337853A6B17 for ; Wed, 9 Apr 2008 00:58:30 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397igxQ027208 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 00:44:42 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m397igYu027207; Wed, 9 Apr 2008 00:44:42 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397iebr027193 for ; Wed, 9 Apr 2008 00:44:41 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 9F823187DD; Wed, 9 Apr 2008 19:44:39 +1200 (NZST) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8NxIPVbWGvJE; Wed, 9 Apr 2008 19:44:39 +1200 (NZST) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 2807E187DC; Wed, 9 Apr 2008 19:44:38 +1200 (NZST) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 0421119EC0B9; Wed, 9 Apr 2008 19:44:38 +1200 (NZST) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1JjUyz-0005NA-S7; Wed, 09 Apr 2008 19:44:37 +1200 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: blake@sendmail.com, pgut001@cs.auckland.ac.nz Subject: Re: AW: Content Type for XML Objects Cc: housley@vigilsec.com, ietf-smime@imc.org, joerg.schwenk@rub.de In-Reply-To: <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> Message-Id: Date: Wed, 09 Apr 2008 19:44:37 +1200 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Blake Ramsdell writes: >One way to avoid this temptation is to just leave it as "throw a MIME >Content-Type at the beginning of it with application/(something)+xml, mark it >id-data and call it S/MIME". The overhead does not seem significant (just the >additional header), and I don't know the utility of being able to identify it >as XML at the outer CMS wrapper. Actually if the decision does end up being made to go with a non-id-data OID, there's no reason why it has to be the same format as id-data. So instead of it being: Data ::= OCTET STRING make it: XmlData ::= SEQUENCE { version INTEGER (0), xmlInfo UTF8String, content OCTET STRING } where 'xmlInfo' is whatever's needed to process the 'content'. This does away with the need to stick a MIME header around the XML data, which is a bit of an artificial construct. It also avoids a problem where what's being created here is really a CMS type and not an S/MIME type, many CMS applications don't do S/MIME so they couldn't do much with a Content-Type. Or you could make the 'content' another UTF8String to make it explicit that the content is supposed to be text, but I'm not sure how much variation XML allows in its content, i.e. whether it would fall outside UTF8. The advantage of 'OCTET STRING' is that it lets you take the XML content exactly as you see it and encapsulate it within a CMS blob without any need for recoding. (The other advantage with the 'xmlInfo' out-of-band data is that it's then someone else's problem to standardise what goes in there, I'm not sure whether CMS/SMIME should have to define formatting standards for XML content). Peter. From owner-ietf-smime@mail.imc.org Wed Apr 9 12:20:51 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2369928C2B9 for ; Wed, 9 Apr 2008 12:20:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[AWL=-0.100, BAYES_00=-2.599, MSGID_FROM_MTA_HEADER=0.803] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I8XSp1vI0gFC for ; Wed, 9 Apr 2008 12:20:50 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 56E8728C360 for ; Wed, 9 Apr 2008 12:20:24 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m39J4EXq084923 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 12:04:14 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m39J4Ea3084922; Wed, 9 Apr 2008 12:04:14 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from woodstock.binhost.com (woodstock.binhost.com [8.8.40.152]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m39J4Dj8084906 for ; Wed, 9 Apr 2008 12:04:14 -0700 (MST) (envelope-from housley@vigilsec.com) Message-Id: <200804091904.m39J4Dj8084906@balder-227.proper.com> Received: (qmail 25723 invoked by uid 0); 9 Apr 2008 19:04:05 -0000 Received: from unknown (HELO THINKPADR52.vigilsec.com) (72.83.129.167) by woodstock.binhost.com with SMTP; 9 Apr 2008 19:04:05 -0000 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Wed, 09 Apr 2008 14:37:31 -0400 To: Blake Ramsdell From: Russ Housley Subject: Re: AW: Content Type for XML Objects Cc: ietf-smime@imc.org In-Reply-To: <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> References: <016f01c89997$82122dc0$1b289386@jotop> <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Blake: > > The nice thing about S/MIME and PGP is that what's signed is > "this string of > > bits, exactly as is", without any need to perform impossible > manipulations on > > it first like XMLdsig requires. > >One way to avoid this temptation is to just leave it as "throw a MIME >Content-Type at the beginning of it with application/(something)+xml, mark it >id-data and call it S/MIME". The overhead does not seem significant (just the >additional header), and I don't know the utility of being able to identify it >as XML at the outer CMS wrapper. I already proposed this before starting this thread. This is the response I got: > Gah, please not MIME encoding. We already have to have ASN.1 and XML > libraries, I don't want to have to add a MIME library too. As you can see, there is a strong preference to carry the XML object directly in CMS. Russ From c.shinagawa@sanyo-foods.co.jp Wed Apr 9 13:21:22 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D30DC28C21D; Wed, 9 Apr 2008 13:21:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.242 X-Spam-Level: X-Spam-Status: No, score=-11.242 tagged_above=-999 required=5 tests=[BANG_GUAR=0.939, BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DSL=1.129, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uYJGF4z+wZPk; Wed, 9 Apr 2008 13:21:22 -0700 (PDT) Received: from adsl190-29-137-48.epm.net.co (adsl190-29-137-48.epm.net.co [190.29.137.48]) by core3.amsl.com (Postfix) with SMTP id D8BF128C30B; Wed, 9 Apr 2008 13:21:10 -0700 (PDT) X-Originating-IP: 114.109.195.252 by smtp.190.29.137.48; Wed, 09 Apr 2008 16:21:36 -0500 Message-ID: From: "Domingo Norwood" Reply-To: "Domingo Norwood" To: sip-owner@ietf.org Subject: The safest and most secure Online casino in the world....... Date: Wed, 09 Apr 2008 16:21:36 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Amazing $2400 bonuses..... Amazing Customer Support...... Amazing games..... Play at the world's most prestigious online casino..... Come and get your MASSIVE $2400 BONUS NOW! Fair Gaming, Fast Payouts unrivalled customer support: GUARANTEED!!! Join the superstars and some of the world’s BIGGEST winners........ ENTER HERE http://luxgamingnetwork.com/ TO DOWNLOAD NOW! From owner-ietf-smime@mail.imc.org Wed Apr 9 13:38:30 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BB90F28C14D for ; Wed, 9 Apr 2008 13:38:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oH75eeYDFu7n for ; Wed, 9 Apr 2008 13:38:29 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 0338E28C210 for ; Wed, 9 Apr 2008 13:38:28 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m39KK8gX090249 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 13:20:08 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m39KK8Gi090248; Wed, 9 Apr 2008 13:20:08 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from ladle.sendmail.com (ladle.sendmail.com [209.246.26.53]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m39KK7BJ090241 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 9 Apr 2008 13:20:08 -0700 (MST) (envelope-from blake@sendmail.com) Received: from spork.sendmail.com (tls.sendmail.com [209.246.26.41]) by ladle.sendmail.com (Switch-3.3.1/Sentrion-3.0.0) with ESMTP id m39KMDTW017850 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 9 Apr 2008 13:22:13 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sendmail.com; s=ladle.dkim; t=1207772533; bh=mL7xG9sP5d5tVtu5XukRZGDsYNxNa+kAMaoD zUUB75Q=; h=Received:X-DKIM:DKIM-Signature:Date:From:To:Cc:Subject: Message-ID:References:MIME-Version:Content-Type: Content-Disposition:In-Reply-To:User-Agent:X-MM-Ex-RefId; b=gDuQMY 3jMMlY4gl5BDK+d4lKPz2GAXiPZOsNWnaQP1mj1/pSex2w+nqR0bQBobqXdzc9ez2SP ALV64/TgToW8OOdCWO8hXb4K+i3+CDkAFXgDvNqJ65jggparP6PSeIiUKYer4VOfEst qGWqqlSUrfdZ00b/jpKy3vq8xpdEiwg= Received: from blake-ramsdells-macbook-pro.local (c-24-17-217-200.hsd1.wa.comcast.net [24.17.217.200]) (authenticated bits=0) by spork.sendmail.com (Switch-3.3.1/Switch-3.3.2mp) with ESMTP id m39KJxiS023040 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 13:20:04 -0700 X-DKIM: Sendmail DKIM Filter v2.2.3 spork.sendmail.com m39KJxiS023040 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sendmail.com; s=spork.dkim; t=1207772405; bh=mL7xG9sP5d5tVtu5XukRZGDsYNxNa+kAMaoD zUUB75Q=; h=Date:From:To:Cc:Subject:Message-ID:References: MIME-Version:Content-Type:Content-Disposition:In-Reply-To: User-Agent:X-MM-Ex-RefId; b=GRKV7kOLTaSeeVgTJbN0Ws7KEPNCQv6ynEaXc4 d5f1PuD0vndSno+RtVXiIDaTNXKT0G2a447+1f/M4Iqk2kymbwTBx7Mi48DWfqxj7Tq 9vXV0bIr78fh+GPMC5+pYoJqe7kA0HJDLJXbJrsssKAXH0OxZuHbv4lH+y+imAC1fM= Date: Wed, 9 Apr 2008 13:17:51 -0700 From: Blake Ramsdell To: Russ Housley Cc: ietf-smime@imc.org Subject: Re: AW: Content Type for XML Objects Message-ID: <20080409201750.GA21969@blake-ramsdells-macbook-pro.local> References: <016f01c89997$82122dc0$1b289386@jotop> <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> <200804091904.m39J4FhD025280@fife.sendmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200804091904.m39J4FhD025280@fife.sendmail.com> User-Agent: Mutt/1.5.15 (2007-04-06) X-MM-Ex-RefId: 149371::080409132004-1AED8B90-63197609/0-0/0-1 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: On Wed, Apr 09, 2008 at 02:37:31PM -0400, Russ Housley wrote: > I already proposed this before starting this thread. This is the response I > got: > > > Gah, please not MIME encoding. We already have to have ASN.1 and XML > > libraries, I don't want to have to add a MIME library too. I would be very surprised to find a CMS implementation that didn't have at least a little bit of MIME in it. But the point is taken. Blake -- Blake Ramsdell | Sendmail, Inc. | http://www.sendmail.com From owner-ietf-smime@mail.imc.org Fri Apr 11 06:25:59 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3A1C83A6894 for ; Fri, 11 Apr 2008 06:25:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mxFcaO9b2khf for ; Fri, 11 Apr 2008 06:25:58 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 0D8F628C500 for ; Fri, 11 Apr 2008 06:25:43 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3BD9hh9086715 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 11 Apr 2008 06:09:43 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3BD9h40086714; Fri, 11 Apr 2008 06:09:43 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from [192.168.1.102] ([207.237.5.3]) (authenticated bits=0) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3BD75qc086361 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 11 Apr 2008 06:07:06 -0700 (MST) (envelope-from phoffman@imc.org) Mime-Version: 1.0 Message-Id: In-Reply-To: <200804091904.m39J4Dj8084906@balder-227.proper.com> References: <016f01c89997$82122dc0$1b289386@jotop> <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> <200804091904.m39J4Dj8084906@balder-227.proper.com> Date: Fri, 11 Apr 2008 09:07:03 -0400 To: Russ Housley , Blake Ramsdell From: Paul Hoffman Subject: Re: AW: Content Type for XML Objects Cc: ietf-smime@imc.org Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: At 2:37 PM -0400 4/9/08, Russ Housley wrote: >Blake: > >> > The nice thing about S/MIME and PGP is that what's signed is >>"this string of >>> bits, exactly as is", without any need to perform impossible >>>manipulations on >>> it first like XMLdsig requires. >> >>One way to avoid this temptation is to just leave it as "throw a MIME >>Content-Type at the beginning of it with application/(something)+xml, mark it >>id-data and call it S/MIME". The overhead does not seem significant (just the >>additional header), and I don't know the utility of being able to identify it >>as XML at the outer CMS wrapper. > >I already proposed this before starting this thread. This is the >response I got: > >> Gah, please not MIME encoding. We already have to have ASN.1 and XML >> libraries, I don't want to have to add a MIME library too. > >As you can see, there is a strong preference to carry the XML object >directly in CMS. There are strong preferences all over on topics relating to XML. See the Apps Area mailing list, about once a year or so. FWIW, I agree with Blake. Using the outer wrapper to say "the bits inside this are serialized as XML" doesn't seem useful to the S/MIME processor. Let's not reinvent MIME in our OIDs if we don't need to. From mygpacprimegow@pacprime.com Sat Apr 12 10:11:47 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9ED6228C146; Sat, 12 Apr 2008 10:11:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.033 X-Spam-Level: **** X-Spam-Status: No, score=4.033 tagged_above=-999 required=5 tests=[BAYES_80=2, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, URIBL_GREY=0.25] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0JfgmsSnltBx; Sat, 12 Apr 2008 10:11:47 -0700 (PDT) Received: from gve-gix-bbcs-dynip-142-160.vtx.ch (gve-gix-bbcs-dynip-142-160.vtx.ch [83.228.142.160]) by core3.amsl.com (Postfix) with ESMTP id 2E9443A6946; Sat, 12 Apr 2008 10:11:46 -0700 (PDT) Received: from [83.228.142.160] by inbound.pacprime.com.netsolmail.net; Sat, 12 Apr 2008 18:12:12 +0100 Date: Sat, 12 Apr 2008 18:12:12 +0100 From: "Lawrence Tran" X-Mailer: The Bat! (v3.51.10) Professional Reply-To: mygpacprimegow@pacprime.com X-Priority: 3 (Normal) Message-ID: <395570470.12784820433046@pacprime.com> To: mpls@lists.ietf.org Subject: Legal software sales MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------7CBD33AE1D3333" ------------7CBD33AE1D3333 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Our main goal is to assure low price PC and Mac legal soft and computer solutions for anyone's budget. Whether you're a corporate purchaser, an owner of small business, or shopping for your home personal computer, we believe that we will assist you. VIEW WHAT WE GOT TO PROPOSE! http://jodihesselds184.googlepages.com ------------7CBD33AE1D3333 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Our main goal is to assure low price PC and Mac legal soft and computer solutions for anyone's budget.
Whether you're a corporate purchaser, an owner of small business,
or shopping for your home personal computer, we believe that we will assist you.
VIEW WHAT WE GOT TO PROPOSE!
http://jodihesselds184.googlepages.com
------------7CBD33AE1D3333-- From usyiqgok@salliemae.com Sun Apr 13 18:32:29 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3E9A13A6C05; Sun, 13 Apr 2008 18:32:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.227 X-Spam-Level: X-Spam-Status: No, score=-11.227 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_DSBL=0.961, RCVD_IN_NJABL_PROXY=1.643, RCVD_IN_SORBS_HTTP=0.001, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, RELAY_IS_203=0.994, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5dwQbDB1dgFx; Sun, 13 Apr 2008 18:32:27 -0700 (PDT) Received: from salliemae.com (unknown [203.117.33.5]) by core3.amsl.com (Postfix) with SMTP id 184863A6AF3; Sun, 13 Apr 2008 18:27:19 -0700 (PDT) Received: from webmail.halftomorrow.com ([201.51.48.191]) by mmx09.tilkbans.com with QMQP; Mon, 14 Apr 2008 02:23:37 +0000 Message-ID: <6FE66FDD.A5E61636@salliemae.com> Date: Mon, 14 Apr 2008 02:20:46 +0000 From: "Homer" User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5) Gecko/20031007 X-Accept-Language: en-us MIME-Version: 1.0 To: "Jorge" Subject: How queer! Content-Type: multipart/related; boundary="------------731548582166334561365136" --------------731548582166334561365136 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 7bit

The winner will receive $10,000, making it one of the world’s most lucrative essay prizes.

Hello Jorge;

Jorge our specially designed replics look exactly like their highly expensive brand prototypes. Sometimes even the professional aren't able to tell the difference from the real one!

http://cittoy.sotconsciouscar.com

"Oyster Perpetual Cosmoguraph" >>>
  Price: € 179.-

  • Free shipping worldwide !
  • Perfect quality
  • Secure payment
  • You won't see any difference



    		•

    Even a project of this size — especially a project of this size — has to have a Plan B in case it has to move forward without the critics. Access initiatives lifted the number of indigenous Australians going to university, while women and people of non-English speaking background achieved rates of participation at or exceeding their percentage of the population. But for the Pentagon, the national security implications are even more worrisome. Much has been made of the film’s look, and it’s easy to see why. The winner will receive $10,000, making it one of the world’s most lucrative essay prizes.
    The Flinders class of 1966 was dominated by males drawn from the middle class. Biography, as Ian Donaldson showed in his essay ‘Matters of Life and Death: The Return of Biography’ (ABR, November 2006), is now a plastic, responsive, democratic and, yes, reputable art, capable of all sorts of liberties and latitude. Labor, for example, has advocated even more control over price, by abolishing fee-paying places for Australian students. Ferguson said, we would start a crash program to make a vaccine.
    In 1987, Canberra provided eighty-three per cent of university revenue. So the available information is surprising. The grand house was sold up, and her studies suffered. So the administration’s decision was to monitor China’s preparations and draft a protest that could be delivered after the test. Was it Ibsen, you wondered, who said ‘Humans cannot bear too much reality’?
    But he added that rigid preventive measures like quarantines, mandated mask wearing and widespread business closings would still need to be put in place. The critic for The Tribune who had been negative but encouraging in his review of the show in Chicago, saw it again in New York and said big problems remained.
    And our careers were intertwined, otherwise we might never have met. David Beckmann, president of the Alliance to End Hunger, who tried to arrange a June candidate forum. In 1968 university students outnumbered CAE students two to one. Death stalked the Niall family: several uncles died in quick succession, all young. Much has been made of the film’s look, and it’s easy to see why. How to provide for so many new students? Ferguson said, we would start a crash program to make a vaccine.
    Nor, apparently, was that unseen self writing back. We need Buhari, only Buhari, the young men shouted, wild-eyed as they encircled a foreign journalist and photographer, half menacing and half embracing, as they pressed their grievances. Those with mood problems have many good memories, but these scenes are usually tainted by some dark detail.
    A note of disappointment seems to close each narrative phrase. But for the Pentagon, the national security implications are even more worrisome.
    The closing date is August 31, and the winner will be announced in December 2007. It can be achieved within the constraints of present overall budgets. We need Buhari, only Buhari, the young men shouted, wild-eyed as they encircled a foreign journalist and photographer, half menacing and half embracing, as they pressed their grievances. Access initiatives lifted the number of indigenous Australians going to university, while women and people of non-English speaking background achieved rates of participation at or exceeding their percentage of the population. For Canberra, the distinction between expensive university education and more economical technical training offered a compelling financial rationale. With an eye on missile defense, however, the administration has sought to maintain maximum flexibility for American military operations in space. Was it Ibsen, you wondered, who said ‘Humans cannot bear too much reality’?
    But he added that rigid preventive measures like quarantines, mandated mask wearing and widespread business closings would still need to be put in place. At a convocation the day after the shootings, the rousing student chants filled Cassell Coliseum. And our careers were intertwined, otherwise we might never have met.
    What should a medical student do in such a situation? They described their problem, whether depression or an eating disorder, as coming on suddenly, as if out of nowhere.
    Nelson, who published four of those books. Pike, the director of Global Security.org, a military information Web site, has a less charitable view of the Chinese motivations. By the time the Dawkins wave of mergers concluded in the early 1990s, sixty-three higher education providers had become thirty-six universities, many with multiple campuses. Depending on the person, the story itself might be nuanced or simplistic, powerfully dramatic or cloyingly pious. There were discussions about different options of how to deal with a potential test that was coming up, whether you démarche them early on, whether you wait to see if they are successful, if they’re not, said Lt. In a global economy, we can no longer assume a local degree will be preferred, even by Australian students. Matheson, was reported as saying: ‘I speak … as one who has tried – who indeed came to this country with the avowed intention of trying – to produce a university different in character from the other university in the city in which Monash is located.
    It is a bit of arms-control mythology that there is always a deal to be made, Mr. A majority of the Supreme Court appeared ready to embrace an interpretation of the Second Amendment that protects the right to own a gun for personal use. A majority of the Supreme Court appeared ready to embrace an interpretation of the Second Amendment that protects the right to own a gun for personal use.
    The director for global migration and quarantine at the federal Centers for Disease Control and Prevention in Atlanta, found reason for optimism in the study results. But for the Pentagon, the national security implications are even more worrisome.
    You would often incorporate some quotation which had struck you. How to provide for so many new students? Biography, as Ian Donaldson showed in his essay ‘Matters of Life and Death: The Return of Biography’ (ABR, November 2006), is now a plastic, responsive, democratic and, yes, reputable art, capable of all sorts of liberties and latitude. From unions, advocates for the homeless, church groups, black Democrats, Hispanic Democrats, Jewish Democrats and an association of big-city mayors. Block, the pirate queen herself, whose robust voice carries much of the show, came down with a bad case of the flu, forcing her to miss several previews and even leave the show a quarter of the way through a critics’ night. Election officials gave themselves high marks on Sunday for the handling of the polls, but their comments were in sharp contrast to assessments of international observers. Labor, for example, has advocated even more control over price, by abolishing fee-paying places for Australian students.
    The director for global migration and quarantine at the federal Centers for Disease Control and Prevention in Atlanta, found reason for optimism in the study results. Had the United States been willing to discuss the military use of space with the Chinese in Geneva, that might have been enough to dissuade them from going through with it, said Jeffrey G. And a burst of new findings are now helping them make the case.
    It can be achieved within the constraints of present overall budgets. Biography, as Ian Donaldson showed in his essay ‘Matters of Life and Death: The Return of Biography’ (ABR, November 2006), is now a plastic, responsive, democratic and, yes, reputable art, capable of all sorts of liberties and latitude.

    --------------731548582166334561365136 Content-Type: image/jpeg; name="eglpjqiurmeif.jpeg" Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAQAAAQABAAD//gA7Q1JFQVRPUjogZ2QtanBlZyB2MS4wICh1c2luZyBJSkcg SlBFRyB2NjIpLCBxdWFsaXR5ID0gNzIK/9sAQwAJBgcIBwYJCAcICgoJCw0WDw0MDA0bFBUQFiAd IiIgHR8fJCg0LCQmMScfHy09LTE1Nzo6OiMrP0Q/OEM0OTo3/9sAQwEKCgoNDA0aDw8aNyUfJTc3 Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3/8AAEQgBjwEv AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMF BQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkq NDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqi o6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/E AB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwABAgMR BAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVG R0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKz tLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMRAD8A 9popKKokWiiigAooqnd6hHASkY8yX0HQfU0m0txpXLTEIpZmCgdWJwKzrnVVUEW67z/fYcfgKozT yTndK24joOw+gqsxJbjkmsZVG9i1HuNvL5ijzXc5WNASxZSQB7AfyFYOo3d9ceXAkc1qtwp8q1j2 /a517sxOVgj9Sct9DxW1DLHN80EiyBXKlkbI3DqM1iR6JLcXN9NqN+s8NzKS0UK4DKOFR2zkqvXY MAknNZp9yw8LrOllKix2SadG+yy+yK+2QfxtuY5cZ43d+o4rWmmihKGWRUMkixJn+Jz0Ue/eqWnm a71O9u3WZLeMLaWsTAhcLyzhenJwBjstTSWN0+sJeXIK29pCRapnnzX4eRs+i/KPqaljJ7u4hs7W a6uZBHBDGXkc5wAPbufSnBspvYFF272835Sgxn5vTH8+KqX9oLy4tBNc262kDiZrcyKDLIPuZOeF X72O5ApNUsn1RI7b7TD9keTddKkilp1HIQYPCk/e9RxU3RViWyuor62iurcSCKUZQyJtLDPBx2B6 isjxNpEd5bTXNtp8dzqe1UjZjjCg84BO0kDOAa2NRi1RoVGnpCkhcBnuEZlVO+AOp9AaJpY4onkk JEcYLNxlsAeg6/ShMDIg02a+vba/1G0jthaf6mLKvO7YxuldRj6KDW0OtZWlxT3tx/a18JYty7bS 0JOIYz3cd3b9Ks6jqBs5Le2hga5vLk/uoFO35R1dj/Co9e9DAu0d6T2798Up4FIAJ9DUsV18vlzA SRnqp6VAajOam9hlt7GMhpbP5sDmMnlfpVZWp8EzRMCufXjrV2WFL+MyQgLP1I7P/wDXp81xFNGq RW5qv8ykhgR7HtT0bNVcCyGqVTxVYNjrT91Ai0rc0roJB6MOh9KgU5qZWoECSMrbZeD6+tWVY4wa gYeYuDx6U1XeI7XBZfUU7gXOc04EjkdagjmQ9G49KlAYjgE/Si47FqKTNSjmq0cMx5CHHrUzkQrm d0QeruBTuIWeGK6haC4Xcjevb3FcL4k0BrdyrxiWFzwWOFk+p/hYfqPwrqZ/EGlQEh9RtcjsH3H9 KryeKNCldLSS7imeXlYVjZycc5wATUSUJbjXMnodJSUUYr0DmCmyMiKWcqqjqTUdzcx20e6VuT91 R1NcpqGq3V5dSw2nluIh+8dkYx255J6cu+MfKB9TziolNRKUbmnNrcV800VhMpSFzHKVPzBvT2qB MAccAD8BXIaVeNBHPrg2jTZnb7Q0yH7VNICFViMBVH+yOgroNbtrm80a6tbRQZriMIu44ABIz+lY Nt7miSRcuZkt7Wa4cjZFG0hOcDAFULS5urrR4bgJH9sng3qoyFDH7v8ASpp5bOG2SC4YSIiBPJUA 5wMcnpVGbVpmG2DFuhHG3lj9KOULljT7H+ztJt7S4dBsjIkcnbvLHLEd+pPSoopbGyt0trCNViiG 1I448gfTPf3xWd5jzSFtryMf4m5qdLSZ+ZG2j0NFkF2TyXzNw5kK/wB1pyB+S4qPz4Tz9hs292hL n9TSrbxIc5JI9BTisYH+rz9cmjmSHZjftEf/AD5WgB7C1UUhNjL/AKzTrZgf7sQH8qCB2Rf++RSb R/cX8hRzhykkdtpZbKiWzOPvQuy81YFnfgB7HUkvEHSO4AJ/PrVPHtilU7WyCQfUUuaL3QWkthzX 5t5RHqNq9u395fmU/wBf1pdPsra3ee5t3M81w2ZLl33sR2XPZR6VZiut6+Vc/vIz2YZqndacYJBc 6bIUDfwBuD+P+NJxX2RpvqVb++u726fTNF+R04ur4j5bcf3U/vP/ACrTt4VggjhjaWUIMBpW3M3u T61Xtb8SERXK+VID0IwD/hVbUo9SvZzZ25NjZY/fXYIMkn+zGP4fdjUso09yncFZTg4ODnH1qjq2 pQ6ZEjSRyT3Ep2QW0Iy8zeg/qe1T2Nna6farbWMKxQrzhckse5J6kn1qhq2iw6jeW16by8tZrYEL JasAdp6gE9D71KSvqBzLS6/q1xq9vfXUukz2caMiQTKkEQJ58x+pOO2a6rQfEFhczfZrHUPtdxFG C7hSu/HBYEjnmuP0eTTbkSJFZzXkizt9n0eMMRkH/XXDtwWJ9ePQV1ljYPFcyX9+6yajNGI3Mf8A q4EB4RB2HTnvz9KJpLUe51NxCl9F58X+tA+ZQPvD1+tZeCh56VNpt60MwyeD1+tXNVtgn7+IZjYZ bHY1nzdUFuhRRqkzzUCnBAzn0PqKkDVcXfUVrEynvUqHNVw1SIc55A9zVCLKPzirtvBJN9xDj1PS sK416ysflRftE3oDgD69zVKe+1/VflijkjiYevlqB/M1DnbYfKzq7m80zTf+Py7Bcf8ALNBuP5Cs e68ZIpK6dZ/8DlOP0H+IrIh8NXbDNxcBQeqxIf5mpj4bRV6uxyOSaluo9tC1GC3MbW/FOtyn/j8a OM/wwqF/Xr+tcve3kkx82WR5D3LsWP613M+iRGMxG3OB1Knn8647X9GuNNBljYzWbnB3fej/AMax nTqdWbQnDZIwJ9QmkuFtLMqsrA7m7IvrXc+DrGHT7cyoWa4lGXmb77f/AFq8x0a4EmpXJBAlaTge oFen+HJhKptpmKOB8pq1am+UJLmV0eu1WvbyO0jyfmdvup6+/wBKL+8S0jyfmkb7q/1PtXNzSvNM ZJGLO1elOdtEedGNyWSeSebfKdzMPy9hWRrEFy95bTDUYLOzRDGxIO/zHPVe24jgE5xyafrn2z+y bgabv+1jb5YTG77wz+meewqS/vIV24RXdTuQkZ2t6j396xSbNNgvbSyOnrYzKy2yFSEDHJ2nIye+ TyarXWpySZCMEU9T7Vnz3DSP+8bcxPCjkf8A66lt7NpDvuDtT+7/AI1WiDUjTzJpD5Iye7GrkVgq fNcNk/3R0qdNqKFjXaBTqTY7CqVTiNVUD86aQSeaR2VRliAKbG7y7hAoAVS29unFTqxj8VG7ovBK /hUchijybqck9difQn+hpVlYlls7PdjIDNzyNw/mo/OrVJ9ROa6Cg5+4rt+FPEUzciE05Y9RmkaN Cse0BjjsDnH54qU2M8ckSyXRZnbAGT2Gf6frV+yRPOyMQT/88jTTDIPvREfhVj7A6qVSY5Axkk/n +g/Wmpb3kSAJKHwOpbr/AJ/rR7OIc7KxQ55yPY1ZgUwRnB5bnrx+VRpc3HlBpIRLGej7ev8An+tK sttOuDuhJ9elQ6D3iylUXUmvYrXUYANm25Tq69GFZkMz2kv2e8yVJ+SQ9varhjlt2Drgj+8OlTXF vHeW2TktjkUuW613FfsU2+3/ANpgD7MNP8vJ6+aX9varHAzzgmqdpK8b/Zps7h9xj/EPSrVYtWNE A4BVVVd3UAYzTWFOpCahjGHgZ9unrW9os4vLZrdhllHGawTyMetTadcm1vEkHAB5+lRsxvUmntzF O0GO5aP2H8S/h2+tQ7+M9u9dFqlkbnZJAQGYb0P+1/8AX6VxuoXgeV4NPZZJ1yJsdLds8hvf2oje Emug/iWhNeanFaAK5y7fdQclqgSG81E/6S5ghP8AyyU8n61HZWSQu0rkyTNyZW5P4elasLADpWi1 3J22LWnafaWwBjgTPdiMk/jWzDsAG1eayYZM45q9DJ09a0sS2aCgHjpTTCvpTY5DjmpgwIoQirLb I3Vazr3TI5oyjDKnqDjBraYDHFRsoNXoxXaPGfEfgVLK++02TeUsj5BIwEPp9DUujTusn2e8Xyru PI5P3h6/SvVry0juYHjkAKkEFT3FcDr+i+UwWYsqL/qbjPMf+yT9Olc1alzHRSq6WZ2U0jzSl5Gy zHP+fpWbqsP9oaPdQ20if6TAyRyhsKMjg5Hb6VcSWCWKRldJIiXjcqcjIyrD8DkVz8JGnadbaZBI 0i20YjDtwcD/AD0rqSuc17Fy6vTDCkERyyqFJPfA6n/Csze0rlU+dz1Y8f5FIFaZ9kX1ZzWhBCkE e1evUk+tU2gSEt4Eg+Zvmk6ZqXcT3plDOqjLflUNlEqNx6YpvnF2KQrubuT0FRMNyh5zsi7L3anQ q94SkR8mFWAIBGWz0/MZq1DqyXLsNaWCO4VJWM8zAnA6Ljt+taGnwXUqzyTgRqsLYiT1x3qO5t00 6Hbb4eVOJCuDtAHr3P0rW0SCUafcvNuLyKNoJzwRnihzitEg5XuyrZ6bBGAwjyeOW5Pf/E1LYRiK 0QbfnJZj+JNWEbci/Sg1utjIjjRhPK7EESFcKOwAx/M1T1F5I7iJ4zhox06Bskf4VfTkn3PWsbV2 e5uE2LmLG1cnA47/AFzUTKiWrrUZCI8COAtJjhc59BVYPcySCLezNMCGJ4C88/1p1qTa3YW4KnyI 2ZeMnzMYAz+NSadHuuXc/wACgD61zxS9pozWT93UvMUt4CQCFReFHSq66fHJFmUESMSxOeRnt+FX 8VHNGZI3RW2lhjd6V2HOYy+fBvaHLwhsc9CKt2UsbyFoOM/ejP8AMVbkMVrb5IwiL27+1Z72UoQX C8TE7iijgD0qWikxuqWu4/Lw4+ZT6GoLeXzYwzcODhx6GrkMy3cLZz5kZw1UJV+z3Qb+GX5T7N2r GrC6uXB6k2R2pCfTnnimk0me2PxrkNjnNT16RtRutPt7u102K1RTPeXPzN83aNO5qPQb61jule1S 6lium2yalqEwUzMOgRD2zkcVL4ut7eKFdRkltbQRcSXLWwlmP91UB4z9elcZ4fivZLybWr21eUK3 +j3Oq3G2OIep7sfYVaipR0C9nY9/0iZ7rRmjVik8QKq3occVwl9Y/wBka/a3pY+RqY8q5LdpuzfU 103g6/jlnQxyLJFcR5V06E+1L4z0trvSr+CHAmjH2iBvRl5H8jWUruI4fFYx2TYxDde9PRuaitLp b+wtr1f+W0YY/XvTxTpyvEJR5WWo5CCKvRS1lB9tSJPj/Gtbk2NuObirCT461jRTknA5NU77xTpO msY55zcXB+7BbjexPpSckhqLZ1fmhvujJqO4ljtxvnkjiHq7YriZNZ8W6quNH0VrCBuklwQhx65N RReD/Ed6xe/1q3jZu6KZCPzqOeXRFci+0zqZdesVOEkaU/8ATNCapXmr2lyrebbzqueDt69KqQ+A doHna9dl+hKIBk1ci8FvHzH4h1EeoKoQfwIpc1XyHan3MmZ4rNZrezBVZZnn2E8KznLYHYZ5xVMK 0shRT7s3pTVLyvgHLPyW9Per0SLFGFHb9a62znSHQqsUYVBjFPpmcU2STBCquXPQVJQ+RwuAPmc9 BSHEX3wJLg/cj9Pc1HI32VWwPMnIJZhzsHfHuM5rV0+zSNRJuDyt8xk9c+n1raELasiUuxBp1sLh VupmEjNyqnovPT8DViexINzdBwqBVyh9egNXbOzEAcA/K7l8eme1OvHZFRVVCsjBWyD061VT4SY7 mRIVRIlYCRVBLOpHP1rVt9SlTSnWNUzEqorN3yentVQQooL3LeawY7Rjaij+bGp4LZWtjHsZEeRT 83U4BNc+smrGmy1LUI/dL9BQ3SpqYw4rqMRkQ4PP41VjtIIgVmQS5G3DA7cA56CrqDAp2KmcFJFR lYzZ7cSMGijPP8CrtUVatbcQR7erHkn3qxijFKFNR2HKTY3FLj3AJ45pajnZgmyPJkkOxR/M1cna JEVdjPMhMkjyHfbxnAOOWb2qJneK0WWQgyO+EjHUilYRgbn/AOPW2OBjrI9OwsRee8GbqZf3cQ/g Hb6VzKbubcqsVzCsUqyxqAGOHH171BqVsXUqOp6H3qYRTztsn4iXng48w/4VcvoQ1urjjjIH0610 boyvZmAjb0V+56j371S1LWtN0sD+0LyKJmOFQfMx/Ac1bkTDTREsFbn5Tg4PB5rgdV0yKJoHW1tN Djgn8xLy8m8yeZh3C9/XFcPL71mdCZ2IcavpTPEr2xkz5bXEIymOjbTxXPg6BBdDatz4h1FTxuBl AP8A6Aoq94d1Ozvmntl1a41G6cb5DcxmPcOh2jHSqF14n+wx39vpVlbRR28y21umQrSTE8nYOqih Jp2KNjwHqN/5ky6pG8U9rd8K4HyoeccccCvU79FZ4pMAg5U+4ryDw2+tC+vo9Ulkmt49ojkeHZmT GSF9QK9at5fP0eCUnJCAk1D+0hS3TR5xpCGwk1HSznFldMFB/uNyP51ekkAGQeT29KZr4W18bFwP kv7MEn/aQ4/lUcgKkHdu5/SuaEuWTRvNJpMk8wj396rzXnksECPLM/CQxjLP+H9aUK9w+yH5QPvS Hov+Jq9ZQQ2at5APmP8AflJ+dvx7D2rVMz2IIdHvtQ/5C141tbkf8elo2GPs8n9BW/pGlafpqhdO s4bf1ZVyzfVjyarQvxya0rVtxUVoQ22aMcW7mpRAe1T2sfy5bpVbUtdsNOQ+ZKGb+6tWkrXbIbd7 IkMJAqPBXjvXJah4znmYraxqq9i1ZEmuajKxzdMv+7wKj2i6F8rFtYfKjyeWb73t7CrFN7U12CjJ 7V0ECSPtHqx6CnqGg+VMNdMOS3SMdefTIzzUYbyNjsSbmX/VLjlR03Y9M4qeGF8+XGBJM7YbnOT1 IB/uitFaKuyd3ZFvTIY0VhtJLj5nc8uOnNatlbLBAkaksqjALdcVHZwwJBcySIGRF2/aMnl/RR/W rtlHLPGoVMnu3QCqhO61JlGwYoK5rQTTlA/eykn0QYH5mo3htll8oNNv27uCOBTdSOxPKzPW2jD7 yMt6nnFSMOU/3j/KppISvKsHHt1/Koj1j/4Ef5UJroGvUXFMepB0pjVoSKo4FOpo6U4dKACkNLRQ A0detWUsVkQnzNs23HHO0H2qvjvzxUkFskVw915irEx3MSfmHtWNZNqxdPQpyIUnjRYd0iAi3t88 L/ttT18uFZlJNzduuHkx8qn61JPMbiSTyE8iJz8zgYaT/AU1EVFwgwB2qKdJ9S5T6IiUNFCOC7Ad hyat2Ectzp0yThQ6sWAA6A9qixVnSZlF80AySyZPHFdBkcvdrtlU9M5U/wCfwridRtr3Ttau9UdN NljmwIbi/lwLfA7L3/CvQNVi8u4lHPySZGfrXCeKbGRdWttUJsJIoojH5V/JtRT/AHgO9ctVWnc2 hsM0G6tbrW/tMt5LqOoSR+WJYrcpBAmOQD/WugGl2BvTffYoTdnnzduT061yVp4i3anZQza15waU R+Rp1tiLJPALd/wro9W0ifUpAF1O7tYgmPLgO0E+pPWsJp8xqtjRkniEqxPMnmNnahcZb6Cuy8OS eboTJnlCwrwnRtFmtdZsDeLHBNbzMz3MtyGacE/KoXNe2eE5f3NxH/t5qZR5JbibvE5Tx86pfaJd oekjxNj3FRWkcl7IyqNsafecfyFWvG2g2y2pSCe4ly4kMTuM5H909q0NKjVVeFI/LQRIVj9OK4YT Tqcp1SX7tSKwjWGMIigKOgFNDEf0qacbXIqrJwa6XuYFmOTBFX4LxIBufoKxRJikmc7cufoKpSFY 0NT8Q3MytHC2xfUGuYuZi7EsST3JNS3E3JC1RcmpvcaVhd35VNbqS1QINxFadnEPTNA7lzP5Cmxh W3TygmKPPAHL8dB6mkKtI4iT+I8n0qVI1uZCqqDbWx6dQ75/MEH8wa9KEerOaT6EtlHHJcC4uSDM wzGAchVPGR3XIxx61q2GnqsbIreWoyZpm/hT0Hue9N0+yE02XZViXiSQnGfcn1z0q6kUZvpbdynl REYUNktSk1LRgtNhbWAX8yMQY7GEYhhHG4/3jWleSmOCBoyURZlyoGPlPFR2NylyG2qUZG2vGeqH /CpJ7rPyRAY7sRnP0rNJy0Q20jR2+pArNaNo5bm4ZSxJAUDrtA/xzUDZflyT/vHNIMod0RKH26Gt fYtEc5iRX0v2pbtnJdwGWKNiQ0ecFAOzg1qwzR3CxSwnCsrcHjByMgj1qvcwPFcre2VvGZTlZY/u 5J/iB9altkMKxqzb22szt0BYkZqVpJDeqLNQGeNpnhBzIoBIHpU+OfpWHf29xbNJNbuMMdxdzyvq P5V0mQ+PUik8TTO3lSBt4K4CY6Ae/rVy+1Bba2V4x5skgzCijO8+3t3qoS19CdoWOcKFmVvmIX2/ Hn8MVCLnyppI2/doRkuBn7MxyMD+vvQBNo94XMkb3KTou0pL0ySOV/CtYVzbxW9ss8FxEZZRGFtw qkgjaOQe3zZJNa2lTyzwfOv7sABJf+enHJ/OgDQprICckDNKKWgBuKSnUUANqW0fy7uJug3YqvJI qgl2VVBxknvVBbpmuGBb5o/mKDsM9aiU0nYtRbVyfxEmL24A7jI/KuL8S2U12YPsunWd3KGI33R+ WIY647/Su41/5rvcP44ga59/vGueu7NNGlPscbpngt7Yxrd6h5sCzi4a3hj2qZPr6CtDXtPn1PXN MjledNNCSG5MUmwZ7ZNbxFYXiiBLiK3jbTbnUGLNsjilKKOP4q51NuWpoloc5B4e0+2iWKS7s4tQ /tASRuZtzeV2X61614ak23Eq8c4Ga8h0rwVqSNElzFaQR/aBO0gfdIoH8Ar1XQXxdnryQOfrTqb7 gtip41k3KMdVkIBqbQ5fMnhIJIe3xkjHSqHi6TPmjr++Iqbw02Xs/wDrkwryI6Yi52v+EXrzAesy 4fnGa0dRfaTWTEDcTY/hHWvQlucxNCgVDNJ+A9apXMxY7scHpU95PkhE4VeKzZX7UAiKdsk1E20u dgIX360pOTQi7jn/ACaAJrdMuOK2bSH0qpZQbiD7it21h2jgc1SRLZllvstoXYjzJRglgSFX/axy AfWtiytldLaKGUBC2WlLZ4APOe/aqmmw+fK12xB4KREgfd9QR1B681qWlpDAGWJNgdtxUdM+w7V6 vL7tjkvrclISWNI4kKWkf3EPWRv7xqRZrSKfyPOhE2AGBb5iafwrKTjavJzWXZK07wpLabXSQzTT MFOTzjBHPU/pWMkl7qKT6s2mVQ5ZVXeyhXcdSB0FOpvU5qK7uUtLdp5Q5RSBhBkk1rpCJOsmT0VW mlMd1AisSs0Zba3UVZHSqi7q4mrEb5AcIAWK5GTxUKRsZYzM2ZFj528LyTUxwZD7LSIB5zeyD+tY z+ItbD29axby9YXvkyRbocNuTb0Ax82a2nICkngAEms2R0u2MbhVkI3RBmzu44NbEFURtZymS2jL LOw2S5yADycj1qX7LBfosmTHiUtMitxuA5qKxnEcgtJvMLMo3CTqrdz9MninR25sp5JQSxJKxJuw rDGST/KmIjurgXHmWDrJBDIgWJwOeOhPsabdTXMypp7RgMm0z+S2Mr2Cfzqxco1xG91bsCzxgYIy VHfHtVSOQM8cM6GO5jH7iQgjGezexoA0rCeRH+x3Tbp1BZWAxuXOAT71o1iWlrLdX1293LJlCqAI NoOBn8ua2lGOKAFprZwcdfc06mt9w0PbQDElilkkbfnAfnB60kafZLiZXz5jx4YYwR3FWbqBriaE x/ITkuyZy34U26t4o9z+Yd+MYLZJPqTXJzXaR0NNIs6k2/yGz/y7r/WsFvvGtq85EXtEB+lYr/eP 1oxPQmkJ2pAe3Sk6c0h5riNh2auaIT9sX/eX+dUavaCM38IH/PQULcb2MXxZMA0249JyP1q34VYt Ja85AjY1keKWEk0gPTznP61reFvkj3npHb/zNefFXrHa/wCCWNWmPmFe/aq+fs9uFH33600kTXJk f7qcmoJ5DIxZuprt6nIyCV+vNVJG5qWR8DHrVVzk1QAGwau2kRds4qvDHvPStzT7fAGRVITZas7f ao4re060LsMLk44FVLWHOPSuo0+3EEe48Mw/IVvThczlKyOO062uIGEbyJJAB8pCbW+mBxWvGKhh A2jirIAr0DlKuoRNcWs0UZAd8AZHBweh+tR6NbiJZZzbLbSTtkxj+EAYAqxcOIkLFHbLEBVGSTTr UTMrPOiRjI2oGyfxNYfbNPslmm+cYlcCISZ6AmnU3FbNJqzITsQXEai/S5OcSRhRn+H2FWO3061H MnmQtHj5l+ZDTUdZYsswWNf9Y57e1TF8l0ymru4kkbSRsfMeIuchkxkAU+FCrMu8vtCjcep4qdl3 Hjpjj6VEn35D/tj9BWcdZXKeiFbkY49Oe9ZF7bPG4e3JUZGCqj92Omf5/jWlPKUaKOMAvIwVQf1/ IZNNLgTtHkMRxkVrdXsRZmdxehWQFLiI7HU8Ernt745pQ6xoILtQ3zY3AfLGTyF9+KW+ha3mFxGQ N0g+baSV4/lUbRLfpJPbsFmUbWOOC2PvD+VUSVRv0m5lkdwycYXB5Wrs0cbRT3COGSXmR+pRR2FQ p5csb6fcMWVlwpI5Qe9Qwvc2V+1u0AeNwMKnQgd6ANLTbpSkcTsNxGFOev41o1jx20bXcM1tu8hx 8xB+6R/KtkUAJSEdafTSOaAIZEdxtDlQf7vWqd7EkNthAAWYDJ71omqGpnLW8Q/ifJqeVLoVdvcZ eEbiP7qgfpWITye+a1r9uJX9c15t46vNQsWgmN08emOdjpAdsmfrXLWTlJRRtT0R002qWMF3HaS3 cSzyfdjLZJq2Tz0rznRbC00owardQSXep3p3WNkG3MF7MxrqdJ1a/l1abTNUto4bhYROPKfcACeh 9K55wtsao3D3rT8MLv1aAehJ/SspjjrxW54OTdqm7rtjY/qKiGs0gls2cL4jfF2ynrvcn8629Nk8 jSJGGcykKPoBWX41g8rxTcwcAB9w+jc/1rWjASGCM42xLkgdya44wtWfkdU5fuojWxHGI/xY+pqn K1TuTznrVOdvxrqsc5DI2f6VGgyaU8mrVrEWYcfWnYGWrG3yRW/aw9AKr2VvtQcc9q3NPtSzDjJN XGL2RDL+lWYPzMPlXn61r9z2psUYijVF7CnV6NOHKrM5pybZxrW4WCKSN3g3cYEu7ke1W7SQuXUn O3HNZMOZ7qadlXZGixRE9ST8zEew+7Wrp8f7suern9Kyp35rXKlaxa2ksQO3J+lNd0jVnkOEHH1P +NP6cj0wfpSCAvOkrsGRPuL2z3JqpqzuKOqHkMMZU4PQ0gOen6CrXmeRBJIeiKTg9zRdTz2+nJIp RZm2hm28LnvTVboLkK7IYgJZj5SDoW6t9BVCzeLzbqTafsMoLMXHAI68VNNDcy3U0dnI8yEoZJWf G312n/CrSboIRGXVyDn5VwoHp7/Wod5u5SslYqWMsa26pHIZIyf3Tk5+XsKejDMv++f5CovsMNvc NcQSeVaMC80OMhT6r6UXckMUCXSSYSX7ue5PShS5QcbkcEwa9ubpv9XbJsUnux5Y/kAKj08NITK/ VjmqeoXYS1lgVPLVY1kZj0lAb5iPfnmtKxI8ldvcA1dP3ncJ9i2VBBUjORWTPBPaytJbDKBSQuMB Tnkn1rYFNZA4II4NbGRk3USXNuk8IBXO6RU6nip7e3eW0zJ9/BCMeCB6VeihSGNVjUAZzgevrT8e vSgDK06GeC5ZGGIwMuc9WPpWrSYooAWmnrTqaaADHSsu5bfqyDtEhJrTJVfmYgAckmsiJjJPczer bRQxoqay0y2EptlVptpMat0J9Kwre1TULa1n1izi+0x5Jjb5gh+lbl+2XC9hzVOvOryvPQ6YaROM gmvNO1vUnXSZrjUZXC2jAfuo4gOOew7mquh2t/qU15Kl8YYmb/TdQA5kI/gT0UV3c6Ga3lh3lPMR k3A9MjGa5Sx8P6sbCDSb65ih0yAnIg+/cDP8R7ChTVh2LXhK5uLnTJ2nleeFbhlt5ZPvOg6E16P4 Ji/e3MpHRVUfqa5OOKKFIoIUCRIAqIB0Fdv4RUQ6VLO3AaRmJ9hx/Ss4v95cctInBeJ8X3jm8IGV jZVP/AQBVuQ/Lzxn5jVLTh9ouLq/k5e5naT/AIDmrMr8kmsaa5m592bVHay7EEzYNUJGzk1YnfjF VgNzDPStDJDoY9x6da29PthxxVSyg3MDiuhtIQq9OaqKuDZPawknjjFdLp0ASPeRgnpWdptsXdRj jvW8oAGBwB0rrow15mYVJdEKKKKK6jE4wRF9ipjcwAwB91a00UKoUdAMChVA6CnCohBRKlK4tOVj H938j0NJzRVNJ6MV7EpkilTZLE2MgnaeuKknuYpYmja33q3UOeKrYo6VHsoj5mPeRioQYVR0RBgA VCaivGfyGEYyTgfKecd6o+fJARGiNhnG3zOcD0+tO6joaRpuSubFu6LuV1Pzd65/xRDqFykM0CCO 3gG+OIY/eGtO3uY5BkMMjOR6dazr+EWVtbTMXlvW+Y5c7QD2x9KxqK70HHTczJrabUdId4f+PvyX iaFjjaTj9cVuacPKt4oieURQfwFRxxyX6LPuWDUFG0SAfLOo7MKIX8xnQo0NxH/rIm6j3HqKcHy6 MmWpqqeKXjgDJJ7DrVWCZWljiZwrSHgt0FaUrLbWUstsVZ1wS55J5Gf0zVyqJEqLYR2czj5gEH+0 eakNjgczDP8Au1OwkN1Ft3eXsYt7njH9aqyLcR28m3PmyznBPIVSf8BWXtZD5URyW8kfoy+q1FUW p6j9njWW2mU7WIKEf6zHBAPY1KssVzF50JUjvg55rSFS+jFKNgqveTmGPKDLkcCrPSqN9KXmjt7Z dzsNpbptJrSTsJEbXafZJJCZBKi8gjjJ9KqW6mO3RT1PzGlvLeSER2sufNY5fnsKLiQKrNjgDio+ FPUa1Zm3D75iR2NRilorzZO7udS2CkJAFB601+FJzUsYyP8A1rPjhVz/AIV1Gp3S6X4NeMOqzNB5 YXPO5v8A9dco8q21jJcSnA3Dt6VkXF3JqcsMXn+cC5ZtyYIqJVORWW7LjT5nfojTttsNqgJwoUA/ SogZrpiLZAwALFmOAAKw/EevW2ngxOwIHRB1Y1HprXurpFLPMkcTfctge3vWc3OMPd2NFBSd2ab5 IbLq2Dg7Tn8qmhi3bCGByOQByPrWlo/h5p5fLaIYHoduK6xLSy01j9kRVbbhyTkUUfaPVsmpy7JG Fp9o6IjPGyhxlSR1rZtos/SrUeoW7ERm8gyOi8cVNaxKtwBIw2HkGuym7uxhJWVzTsYRHDn+Jv5V ZpB+XtTq9FKyscjd3cSjFLRVCMACnU0U6mAUlL2qxbQBsSSjA/hQ9/c0pSSV2NK5EkZK+Yx8uPu5 7/StBLOBBkrvPqxqK/ieexmjQZZl+X61Ks8UUSrI4DbRkdea5nOT2L5UiC4ZFuYoVijO4Fm46KKg mt4WB2gIfc8VMDC9y8qy5dlChTxgCsjWGRry3gmR8AllZOpI/oKSkyhsoMUywRoBtUs/HQf/AK6z p5ReXxI5WPCitGLIspp5GLSXAO1j1KL0/M1kaCp8+YMzMQ3OBwDVRd5Fpe62bKR7EAAxiia3W8CB 2KXEeTFOnVR6H1FTHAGfSiHaqEFwjyD15x2rSpaxjHcyZozM/wBmul8m8QZXH3ZR6rVvRpnhhube 5QvE7E4Pv1FWHtRNZLDft5hDfJKnDL6MPQ+1NEMioNzh5BwWAxv96xUU3dmjbtY0DfSvwGCDsFHS kW5mB/1hPs3eqCOM1YVsiuhRjbYyuyjq1lG4+0xhxEJQ88K9B6sKk09U+0SXFunl20gCqoGN/wDt Yq4mSx2jIwQfTFUXkiS63S3PT5Y0BwPy71jLRmkdUXunWqVtbIjO80jqwPy7e3vV0nPIqjqkvkwn bjzG4FauPNFEJ2dim0hnu5ZyS2DtUmqeoShUwWCgcknsBVpF8uJVJ6ck+tc9NqkV1e6jaR4EtrHl jJ93kVlXdlZF01d3IdP13TNSuWt7K6WSVc5X1+laOfTpXn2k35E0GvalHbxLFvgtra0TDTt3OPSu q0XXE1O4mtZbSa0uYVDNFL1KnvXJOm1qjZGuPeopz8oA7nFSZAzUcKCW6A/hXk1ky0UPEszRwwW0 JUH77ZrIhuvsumXWoSY3Y8qM/wA/1qrrt6LvVJ/kkDqdkbA8ccVR8dS/YtKtbIZUqmWx3Y9ayjDn qanQvdgYmiQtq+t/bLyNpreN+V/vHtXpui2Udw4lt7Yo0bdQvK1xng5pLS0ie3jSTPVW7nrXqWn3 08ti8raVDC4U5ZZMHp1pVpc9S3RA1yw9Svd6zLBMWnba/QkDBNZ41N9RmKNLiEdVB9a5/WtSS7uG 2OSFXnJ/Otvwbokl3axzgYVzms5c0nZCjFRV2b1rCsSrHKsa27diASa7LT7W1NsgSMbfevOrmVo7 5kUlljO2u10G8324B6iuqglBnPVbkb+0Y4oFQpMD1qWvUpz5jjnGzFooorQk52KVZB8pqWqFkf35 B7oP0q6TgEjn0pRleNymrOw+NQxZmUsqDJX+8cdKzrN5ry7gvFdo5esgPTZ3UjsB29604/kUKD93 v6mh4o2lcwlY5mwXXtJWMnzSKSsiWe5ZxtTKp+pqD9KQMdxVxtYcEGnEAd62ikloS2xp54P/AOqq t+PPENvjdM74R+6jufyq3061A0pQSSKPmA2qcdz6VNS1hw3GyIs3nsp2wQRiNPoOtUbKGVbk+WxE Jwx4wD7UF3ihe0jZishy7Hk++K0YQFiUY6AVnTVzRysmhHGSqnuayW8m9knieFnuJZ/LR9pwiDAy D7DJq9fyPHBM0YJkCYUD1PFU9FjKXM0Kh1itnbBbOHLAAH8gT+NOesrELRGyxDMSPu9B9KYcKOen X6U+hTFlhOMxsMHjNaONo6CW5XZFkQSRMGBGQw6EVWWeWGRhJCjEfd54FPSZPMit9PhKWked5dcb vpViWIMCcn2JrLW2pWnQrSebdACWU4Y4AUYC0yKG0iuyoRnnPBdlz+vanSuYMHB68Cn2lzPK4WS3 KKf4w4IpTSvoNN21LnQ46Vi3Mv2q8J/gj4H1q7qV15MBVMeY/AGazokKIF/iPJNbX90zINUuXtbO SWOJ5nwcKmOwJ5/lx61yf9j2PiGKDUb23ntp5VxIiuVLD0b1rqbuQPJhfurwCKrNg/WuKpNuWh0Q VkcNp99pmnarqFzepi5tW8iys1TJC+qj1PrTNKutWutVvXsoUbU7gjz5ZeUtk7L9a7S4tYnd5lgh a52EJIVGQcHHNcboz6pHpp0iysJYL2R2N1eS/d5J+YHucUlJNFG94d1W41CyuWvgnn20zRMyD5WI 7irklw0FrLs++6np1qmIbfQ9JS2gGVj/AIj1dj6/jTrTesYlmOXI3ufQ+n4DArnnrJs0Ri6NFLe6 jbRzHdGGMhOOy4JH6isj4hF7qVpMfKpYD8DXSeHly93dImOQi47ZOTXPa/m4+0+kchIHr61FJ8tp eZu/ely+RB4ZnaOCNoJQrDHJ7V6NaXFxqWi3EWoahbwqRgYjwcfUV5HoTiKSW3YkMDuU56iuw0R4 JJ40vbxooCfnA5P4VNaLhVH8UTJu0EU0yKeACK7zwVrxtNNSLsq4rl72xja4leIsYs8FhziotOEl vMYm/h6D1FQ5W1Fy3VjpZJi9wz5J3HJrq/D05UY3HGOlchCAxRv4WHBHrXUaSNuD6VvB3dzCSsdZ FNuxjrWsOlY2lRmWUMfuJ39a2q9OirROSq7uwUUUVqZHIacGeYt/Ci7c+prR/wCWg9BlqbFGsahU XApR1c/QVNuWFir3kRwLeLMDJPE8YySAmDUxXcf1z70qH5T+FFKktByZIrs0MjGITPEuUHdj6VTv ZXaOwkMRinkb5o/QVYV5In3xEA4x9ahETSXBuJ3Ly4wvoo9qfI1K6DmViSQ4GRzmqdxLtuEjzxEC zk+uKtMwUs7fdjGf/rVmTKJIn80bjIcEHuO9RN3HFWC1XzZi/Bz6GtVeABVDTrCC2BeKEKSMZFaP FVSWgTepVnVvnKLuPbnHakskmCMbjYD12r2FWCCQ4Bweq96gtVSGZo2keWd13SMeQB2z6VEnaQLV Fgimlc09hg7T+B9aK3IGYAoLbFyenv3pSQOOp9B1NS+Q0SG4nQ/uxuWMdfrUzaS1GkylepL5avHE HReZYv4gPUetUbY4LSIxMOMgmtYxRXMsd4jsPl5IPDD0IrK1e4Esot4Dhf4sDGKxiuaVzRuysVC5 uZjM33RwopZn8uEnPzv09hTo0AGDwijmqs7mRye3QD0FOtOy5UKEepAaaetPIz0NJ9a4GboYfemS tgdakasfX78WVm7gjf0VfU+lS+xaVzNu5xf6r5QP7m2wzn/a7Ck1u78i1FshxLOSDjsveq1kBpen GW4O6Vj5kpPdj2rJjnl1C/8AOk6swRB6VMnaOhtSheV30O+8PWAOmqqD7zMx/KuFnUO8jNyC7V6x 4chEcccXAKMFIrzPU7b7PeXEP/PN2H/jxrOppCI4O82zkxC1tfJMinaDn1wP8K3ormKRg2wkeoWr MGnoiqShaZ/0rqfDHhldVlaHyiUC/NKpwA3tUTq+0aSWptLlUbsj0JLW7gjTcxkydysO1X5/DrFl aKPzU3cc7Sg+tdHJ4Mj0wC4sr+WMopyHUMK07HSrsW0DM6szDLueD+VdEcNPaSON1orVM5200hhE EeFdh7E5Nbml6QrSADd5a9Wz+lbEOmEMfOfK9gBg1fhiSFAka7QO1ddHDcphUq32EgiSGMJGuAKk pRQetdtjnEooopiMEZpsm/ZJ5QDSZGA3A6U8UoHzEeoyKmfwlR3IbeJ1LNJMZHKjgDCj6CpqqXl2 0DpDBsM74yzZ2IO2769BVy3D3FukyRMu770Z6qe9RTlbRjkhKbLIIomkPYfrUvlyZx5Tk/So7m1l JgEgUAyA+Xnl8VpKSSElqV7gMIFSZgoA82cjsOwHuapW8jXMwLoFycKo52j3PrxWtqVj5ljPHMSz THLMvG30xWbpFgbSM+a3mSkYZ8Y47Cude87Gj0RoIoAG3pTqKWulKysZNjSdrBj071FJGysYLcFG k+aSUdh/ie1THHQ0+J9nyvnb2I6is6kb6oqL6CwNB5MgZcW8BChuuSOw/lVoWlu0hXc27Gdue1Rx wwskaRsvlo4YKO+PX8atJH5c0kruPnCgZ9B/9c1inJFtIzJZJYxcPYxxoluTudxlmI6gU/TJ3uIm WQMWjcqWI+9z2pLiC3M8zNK8iSNvMI4XOAOTSXeopbWkkzlRJ92NBTak1cV0VdX1BbOM2tui7iCC cdD7ViQxkYH3nY8mmrukdppTlmPAPak1O/t9E02W+viyqg/hXJANWrQj5h8TItZ1Ww0pES9u0gDn GW6saYkkc0ayQyLIjjKup4Irm5vEI1WPda+HLm8YgiBpUG3BHU+neptMuLTwxokNvq97DFPksY1b JXJzjHtXLNN6s3ijeK4NNIpYJo7iCOeFt0cihlOMZFKQAKwKIZmCRkntzXITFtY1gcfuLc8D1atj XLwgGCNuWGD7U20ji0jTJbycAbULfWobu9C1scz4suVW4SziOePmNbPgXSgYn1O8VfssBBhBUfPI Ae/XAyfrx6VzegWFx4k1kuxKq7Fmc9ESu08Q6gkEMOj6ZhERNmB/CO7H3NEtDeT5Y8qNLSNWRLxh u4diQfeqHi7TNmpi7Uf6NdkEMOcN3BrJ8lgieW5Ux/dI/nXWeHdVttStjZ6goKFtrg/wN2qHHmi0 ZJ8juc9aWpd3kA6kIv8AWvWPC1gljpUSooDMNzGsOLwe0Sq1vOCqsSoPv3zXYwqI4kQdhitcBhpw m5TMsTWUlZGb4gk2WO0fekZUH4mtGIbY1X0AFc74mvP+JlZ2y87XDt/SukT7o+lelBpzZzSVooKK U0lamQUUo6UGmAlFKKWkBgR7ZAYRhZDyj56n0pkbOwww8uVT8y9dppIwk0LrcZge2JYye2efwPap kX7TO0rOI5ZVzFE3UqO59zWKmubU15dCGXTo7uUSq7R5ULMgH3wDkD/69aYZYkZ24VBkge1UEYh+ hSReCO4qwLg4IkjVweCRxmhwfQV11Len7xaoZSS7fM2e2aS8jaSW3kTH7uTLE+mKi+2kDCRgfU5q CSaSX77ZHoOBQqcmK6J7qdSCkfJ7se1UwAKXFJW0YqIm7hRRS1RIUUnBZUBALcDJqlfXcafKspKj 7+0VEpqJSi2XfypOp5qlbyuJljfgehqe6uo7WEvIeT91e5ojJSVwaa0FurmO2iLycY6D1rBld7qb zpun8K0sskl3J503QfdT0qzbwBl86UYj/hXu59qJSSV2CTYkMQVRNL/wBfX3rJEd/dX9+mpLDJpz gCFMckd81sTO0jZOMdgO1QEZ4rinNt3N4KyOZm8P3Vvo19YaXqUsSyHfAGP+rHdc+lee6TaadqUx mv0MMOmgtdOZC73D56CvZJEVgysMqRgj1rjvFWnW+nW+mtbWGbGK533KQJlmHb6jNEJ9C7dSMa3r cC2V3JYW9vplxKsMUJP7wA9Ca6HVLpbaM8/N0ArHiabXNQTVr2B7bTLPm2hk4Lt/eIqrqV2Z5Glk OE7D2rGrJLY0irlWe8S3LXVwN/Pyr61l65rNxrjRWEBzDvBYKOWbsPpUV7fSAscD5hhVI4ArX0C1 j0e0/tK7UG5kGYVYfcH96sIvqdCSjua8Ih8K6IIgA17OMsB1J7L9BWbaW7hnnnbdPLy5Pas2TX7N rwz6nHKXB+RwcgfhWtZarp1+dtrcoW/uk4NOUW1e2hnZp6ksjKibu2Kbp0jQlpVGC55HrSTozSqu 75CevvSTyJFGSSAF6YqYhI9D8I+J45I1trlwAOFZjyp9DXa5BAIPWvEfD9lNma5myGmIwnoB0ru9 D1i8tAsFyhnt+zA/Mv8AjXZRxHL7sjlqU76om1i0eDWRLISyynKk/wAq6yLPlpn0FZWoS2+oWQCH LbgVGOQa1kGFAPYYrppRSk2tjKbbSuOooorcyCiiimAUUUUgOctnF99mhkZfIUAkf89CBwD9KgiS VrmSe5BW4BwR/cHt7VlWUrWWIJclM5DZ6c9f89810CXcLwrNOu+aIfJt/wCWnpmsnHld0jRO6sLe y5e2VlH2hgS+P7vvS1Xt1Ys0053TScsfT2FWK0gmlqTJ6hVRrxDcGMSBMDgsM7jVtnSNS0nAGc57 1jqQW/dlWY/Nz2FTNvZDiluy6blwTyjKO44zU8MglTcPyrJlV0VTIx5BIU9hWhYKVgXPfmppSk9y ppLYtUUUH7ua3MjP1ASKgmyuN+xVJ5ziqMUpSF/MUMoJG7Hc9s1o3Z4ZWMZXBbDjIzjFZ0jobKO2 jJldRkyEYVDn+EVzO7k0bKySY+a9AmMyqS5Ynae3FVpC8khlnbc3oegpAApG3kk4BrQt7ERKJrwc nlIvX3NXdU42ZGsmR2ttuQTXHEX8K93P+FSTOZG5wB2A7Vj+LJNeiSbUbC9toLW0g8x4ZYs+YR1G e3HSr1lcfa7C2uihTz41fae2RmuWc3I3jGyHmmMKkNMNZlEbYqJ2Cgk/rUr8AmsDVr4sWgjbAH32 H8hWcpWKSuVNYvvtEnlxnMS8f7xrl7+6+Yq2di/gSfWrGs3ptnSNeCw+Y+g9KqJB/bU24ERwRAeY 3c1zvV+R1U4JK7DRrL7TKdQvcfZoj8qn+MjtVLX/ABFHNK5UlscKB0pvifWlJTTtOBESfKAvf2qH S9DSGWOW+USM3JHZc1vyxjHmn9wXcpaGVHYajqzDYm0YJBc4z7Vc0zw6Z48xzyJdg4x0APpXW2+n GyvYkmJ+zudyOK6HVPC8kMa31n3GXA7nFQ8VNp8q0BxineW55ha61qujX7xXKmYDho5eQfpWpZeL bZpwL6y+Tdkc9K7J/Di3+mxTqEeaM5GR1/2TWPqXhePU4QVi+zTqCFBXGfan7WnJq8d+qGrPdnT6 Hq1lqNok8GdhbYSBwh9/Suvsbc7QRwv94dK8p8MaZqHhq8t5p42mR2/f2oH+sTsfc17pYrZXtpDN bqPKIyAOMexFaUacZyfKzmxHubBY2/IkK4UfdBHX3rQFCjaMAAD2pa9OMVFWOGUrsSlooqiQoooo AKKKKAOAjZSojmGVHRvSpY3ltDkjzIjyDn/P+TUDoyZLA0RTNENo5Q9UPSsY1OjNnHqi358zztNb SBgQAYj296t2l60sojMTAkZ3dBis4RxSHML+W/of6f57VMk9xbtmWIOOBu9PxrZMzsXbhZbudbe3 UFk+ZiTwM9KP7KuLW1aMEOWPLKmGx6VTtr2NPMdyyyOxJP8ASrMWoBh8l23/AH0aynBt3TLjKy1K DkiVYZCd5OAD2HpW0mI4vmwFUcmsxlhW7hfIOCXZjzU11dxSRNGpb5hjNVCPKiZO7NEEbQc8VU+2 KVJVCWBIwf51Se9YgDOQOAKrSXEkjGNNxY9EQZNaNkk9zKGOZTvP9xegqKKOS6k8qFdx9B0X61bt tJkPz3rGJf8Anmpyx+vpVNdSe28SS6JNGkNtLbiay2ceZj/WAnuRXPOqlsaxg3ualvbRWa7l2y3G Pvnop9BWJNLrt/4ZkkjjjstZkUlFJ3BSD/MitlSRkZyeoPrTm56fnXO227s1SSPNjDbXOhtfarea le3kLiF9Onfav2g9FwOo71Nf6VeabPpNw+o3EusXN0qtCrYjEfVgF9AO9dP4l0qa/tYn08xR3lvd LcoZF+WRgMYb8K5y+0vUrjV7WC9uxJquoK294hhba3Xqqe59aRZ1MN/Z3E7wW13BLLGfmSNwSKmY 7eSeK5S20zToPFttFo1uqJp8DC6lQ/eZuik9zWpquohAYYCDJ3P9361E3yglci1fUNmYYThyPmb+ 6KoGylh0571oz6Roevuxq7p9hHGn23UTiEHcqueXPqaxfEPiyTUGbTNJjwJTsaXuR6CueXvXNYRv sjmJY31C8Frbneu7Jcjp70/Xb2DSbA2Nk3UZZu5PrWjOkWjWRhhOZWH7xx/KuMfOp6gsYO4ZJOT1 Ap0or5I6HrsaWg6Q/lR38qN58h3IWHAWu/OlxXOnx3lojLOoxLCR0/2h7VH4HaG4tn0rUI8Qycxv jmJu34V0lnazabcm1mOAvMb44Yen0Nc9SUqk2+n5EOSjoZ1tYQ3toVKkxkAFe8beo9q29Avlto20 3VXVvKB2OT/D1wR61Quby10vUSUWVQUy0YAwMnoa5XTrtNU1uWWJHSJXLux/iJ7VpTpuOpjKVzqY pNnmzQxeXHITtGeCPWoYvtlxuggjDqxzuYfdNWBPA0g884Qfwr1q8+rrCoWwsgn+1Kc5rblRnc1N F8Pt9lBviN2crt6r3xn0zWnbWR02aaaN2aKQgtH/AHT3IrEsvEN9GcTwxMnovBraj1iCeLKqwYdV PUV00/ZpXW5lLm6mopDKCO9OqpYyh0IHPfPrVodK7ou6uc7VmKKWkopiFpKKKACiiigDgJZb61+W +tztHSRRkH8RRHcWkigEN9QRWwsrRglXIABJHr+FVLOaz1exgvJLBQJ1DDemxx9cVxqp3R0uL6EA +xnlS3HvSrJFH9xmwPU1ZbTNOY/KLmI/7Mmf50g0ixJ4vbsfgv8AhVqtEh05FOadX58rPvUYfbna qjvwK1I9CsW/5fLlvbgf0pbux0Oy8t7wsBJII498jEFj0GKr2yDkZjNcIvDSKPYHmpobe7uj/o1r M4/vMNo/M10sNvaW5/0e0hjPqEGaxfF881uNMvVlkWO3vE81FYgMjcc1LrdhqmSw6G+Q19cBR/zz hH9amv3k0qwL6Lpwnn8xF2BsMQTgkk+lX5M4IHY1i+JXv2to7PTFZZbtij3Ha3jxlm+uOlZSm3uW opD7TW4b6+vY4gBa2bCNrtnAV5O6rnrj1rP8YadcXdpbX2nDOoadKLi3C/8ALQfxJn0Irj7+7s3b SHvtIuV8KQeZFCytua4lIIDso9SDj610/hzVbfSNB0201y9S3vH3GKG4b94sZY7A3pxjrSehSN0/ OivtKHAYqeoz2pVOQDTmG1sHoajzt49OR71FwHNisLxDoo1Oa3uYryayurcMqzQnkqeoNa81xHHG SzYx61z2oX9xeSLBZq/zfxAcsM449uDUOXKUkVk+z6TajT9M+9kmSVjklu5J7mgrb6VELrU8GQ8x wH7zH1atM2cGg6a1/eYeYD92h9a8z1rVrjUr1lRzLM55P90VhOUm7G9OHMWvEHiC81mcwRsQucYX oPatbStIXR7A3Vyo+0uvyqf4B/jVrw34aTSbZdQ1JczMN0cZ6j/aNU9TvjqN0yKT5SHk56mhK5c5 pe7E5jX7mS2uDFcLuEy5icdCKzfDFr9ou5TuAkXoprpdZsUvrf7KR84O6Fj2PcVjaBZeTr0UTyGP Py7zx83atG4qm0ty6eqPR9FGVAZAs6DIYDG8VuajqgXR8mLfPGQEY9vrS6cY7+ARygR3MXOQMdP4 h7etZGtb45CGLFS3KqOPqKxpq0bnPPVmTfNPdu0t025jgKq/yqzYWLAmC3AQDmWQdj6D3q1a2ZOJ mX94xxGD/D6mtYWkqxCKyRTIe7fqa0SM2+hTEcNs0cIxvb7vv7mp4rK4SeSV3R0KnYnoauRQAIon QM+epHIqRlwkp7ngVSQihE08Vkrzxbrh3K4TkCtVIihUscNjnFMiTddBAcrEgB92q4seSM1olqJm noDM0Eit0V8Ka1aq6bD5VsMjBY7jVoV6VP4TkluLRRRVEhRRRQAUUUUAcPpd81+99KqotnDOYYJf +eu0YdvpuyBV8flx6dq84khu9fu7Pw7HMbOzt7kwtYR53iCIfNLK3qxxtHQ5rstP8Q2Goai9laiY gK3lTlMRzbDhgjd8etee4tHcXdRvIdPsZ7y5J8mBdx29SegA980yGKdr/wC2NcOIJIFAtiPut13H 3rM1Vxf6wlkEEsGnKLmaMnaJpyD5Uf8AX8qzvCseoSXtzqN5cyRXglZdTtZ/uIMZTZ6ADvUWA7ON trA++KsywRT7BJEkm1gy7hnDdjVC3nhuYRJbyxyxE8PGwYfmKn1KK5n02aKwkWK4kTakjdFz1P1x TQGMdeQajd39xdrBo9p/o6YXJuZu5AHJx04q9dG18TeHphZy7orhcK23lWB7g45HpxXHaxpzxNc3 NpdC2h8OBFtoyARNKeWLZ6k1rDWf7GW6TStMlvFQ/atQfzAqwM4BKr6kelW0QjrrYS/ZYfOx5vlq JMdN2Of1pWUMpDDKsNp+lEEyzxRzR52SIHXPoRmlPpUlHB3+kahpOmD7bcwT6No7NdW8SLiSVlJK I3sCah1jSoodB+yXEaXniPXdpLtyylsEsP7qoOld1fW8N5aTW1ym+GZCjr6g1gaZpOmaCzywvLLO ybPOnfe6qOig9hRzWQJGuE8mGKPcW8tAu498DGaztQvobdCXYZxxzVW51Ca5byrVC59ugrntV1Gx 05t11IL68z8sSH90h/2j3NYSn2KUblueeW9j8+Zxb2IIzK+cHJ/M/wBKvaR4k8N6ekigzh1/5aNH kv8AT0rjmttc8RzF3jJiB+TPyxoPYVoxaRo2lyB9VvxdOp+WFOBj3A/xrLmd7o1UIpajfEGoan4z vFgsIGhsozhABlm9zW9oHg218OwLe6lse46pEeQp9T6mqy+N7OyTytNtjGnQbVVaZL4kg1M7Lt5r diPldvmWk5rqxvmastEU/E2tSXE5t4Tln6nPQVnQQiGIDA9/erUOitAJLnzlutxyJY+QB7jtTWGR /hQ5MEkUbv8A1e48FSCvsahfT11ORoPM8l5sESf3HHQ/SpZP3kuGPyjrTreM3N0FiDAIOWH6UWbV 0ylLlZ2Pga+i1WL7BeFYtXseCQfvqOjD1HtWnc2fmTNuwxBPNcpDCiwRX6RiO+tX+d0BDFfQ+oNd 9pqNd2UdwYvL8xdwHWnCcZ+6RUTT5jMht9smSPujirGw8ckEdParstsYznFNWMHpk10KNjAq3Ctx IFLkjBC9QagFtceYTcTRxoSCAOSavxXETmaOOTlB8+3tUNksVwXe1RmcEgPJ0zSGS29sIAQX3sx3 M3qa0LO382Ueg5NQ2FpcFAs7B5WPzMBwK24IVhTaBz3NdFGk5O5lOVlYlUYGB0paQdKDXccwtFFF ABRRRQAUUUUAeW65p8tnJq2rpdtHcagYrGMrwsEbsiFj6twTmrenJbXOtoNPCjTdFha1hK/deVsb 9p77QAM+pNad3bJeW0ttdQrNBKMOuc5H+RSWccFlbR21rCsMEYwiKMAf59682+ljuK+v2s89tBNY xpJcW1ylwI2baJdoIwT64P6ViLY3uoaj9h1ArFLqT/bNQSJuEhT5Y4gffHJ9q6rzR6Vj61pL6jeJ cQ6jLZlofIuBGOZY85wD2PJ5FJSQC+EooQupy2UYisJbs/ZkUYUqBgkfUiuqh5jFZFt5FrbxW8CC OGNQiKOwFWEvRH05FLmQMran4c065vJNUeBnulTeE3nY7qPlJXoSK5nS7qLU9Dt9B0p2e6u2aTVJ ip/dAt84JP8AEegFdc2qYHAzVRblwWFtAql+uxcE/XFU6isLlNhWjgjREwsaKFVfQDgVVuNRijGN wz6Zql9mvpzmVhEp7uwUVetNFtMF7m7jcDqFcY/Os+ZsbaRmy3087bYEY54p40Wc28t1flljRSxV TyQK2kv9Ls1K2gWQrwTGMgf8C6Vk3ut3Oo7oLRBHCwKs+Mk57ClK3V6iTb2Rx13d6jqxe3sIjaWU kPBT72Se56ms+X+xPDJVL4/arwLk8Dav/wBeo/HHiQacv9j6QjvfSEBmjBz9BXMWmkz3ltJe3hM1 wnzTBznZ9BWXJZc02dUddEW9U8ZXl+WSFzHAD8qIMD9KxJNU/hJwffIJ/E1r/ZBHCJot2zeFIHSm XGmpHDFO8WPMODkUKcL6otJLYzLbVI1kJd1HHQ1rWsv2lN7vtUdB61RXS7QsUeFcMDg98+1WdP09 0bbDIwVVJ2HnNTV9m1dFLU2dIe7+0M9tJ5EUS7nlZvlUf1PtXY2NompIFvoPKkPC3EQwD7msfQtL e9eDyU/0QDzHZvulvU+uOwrrNO3xOxhy+5sFQCd3uamjBz22MqrSMLUfCF1bsxibfE3U02x0/wCy 4Qr25PrXosdtOEzGpXI/1bD5ap3WnQu2ZYjbyeuMqfx7V1Tw0o7HMqq6nKJpwmZWVnSRehXow9CK 6bQbae2miDSMY2UjylJIHvg9KfFYLbgM5DA9Apzu+lbVjbeUu98eYw7fwj0q6GGTldk1KulkQXsL mQyxxlx91k6ZFVjHG3AZgcch1INbfakxzmut4dGKqtGRb2Ma5MEKKG64HWrcViqnJwo9FGKuBcE0 VUaMVuS6jYkaKi4UYpaKK22IClHSko7UCHUUg6UtABRRRQAUVBc3UFsAZpVQnoD1P4U22vbe5YrE +WHYjBNAzmY3Una/Ge4OD+dTNA+QFkB9d65/WqBbp6irttc4AV+vY+teadpFLDMmW+zRSD1RyP51 nfbY/tDQTWc0LLGJclgQRnHati+uI7a2Mkh+RVJOOv8A+urXhnTmgtXurlf9JujvYH+Adl/AVm4u UuVCckldnOtqFiOcj6GUCoZNVs1HBiH/AG0z/Su/ezt5PvwRt9VFQnSbA9bSH/vgUnhq3RoFVp9U cA2uxAfuzAPTahY1E+r3s/7uAXL+0abBXoyaXZJ922i/75FPkFraRl2VEA9qj6lW3nKxX1iC2iec W2ja7qDBlgMSnq8zE4/Orkmj6dpW1tUuZL+6/hhViFB+grV1XxDPcu1rpa47GT0qjaaeEcySEySt 1dutSqUI7O7L9pKS10Q1YZr5gbhBDCv3LePgD61dlj+zWU8kSDMcbFQB7cVbghCqOKseUHVlPQgg 1qo2WhF9dTyHTNJkfWYb+Rle6a7/AHhz9xBgjH611I0SKzfVXUsftBkBPbPJqyLZYMZQKyE5PTkc Va1i/jOnTeUjLNvJBZflwetZJaXkzRzbdkc1Pp6ixgQKo3BD075FXNZ0+3NnHEdglWZSEzyR34rB 1rXMpFF5aqYwAGHf3xWPda9f31y1xIS0hIwwXGKlWa0LtI2tS0uCXWhFA6ooI3KP4eKitrQpqKx4 4O5c+tZlhcvHctI8Tb5Dl2xksa7fQtNh1JkeO5VJo/mEbjrWTgm7Iu/LuT+AUErxWsrOIiHUoDjk GvSYbeOBQIo1QD0FcZoWlSaXfwbwWbzmdyBgKD6V3I6V6+DjanqefiXeV0ApGUMMEAjvmnUV2HMR rDGpyqKD6gU8UtFFgCiiigAooooAQ0ClooAKKKKACiiigAqrqN0tpavKeSBhV9T2FWGOOa5zXbsX F0LeNgREecd29KGCKQE13I00rEnqzf0FOjfY2QSCOhHFathbhYwpwcDqO5qC8tcfPEB15FSWY/8A GaQsQePwpXBBzUFxIY4mbuRxXnS0OtEtrnUtQQS828LAtn+Juw/Cu2hYFAB2rkdPh+zWyKfvEZY+ prYtL4J8smSOzVMHZ3Ypx5lobYpSQKq/ao9m4sMfWsTV9eEalIGx6muj6woq7MFTbZp6lq8Nmjch nHb0rkrq7u9YmPJWHueg/CoooJr6QSTlljznB6mteGFUUKqgAdBXLOpOo9XodEYKJDaWscCbVXgf mfxq7GgyKVI6mjjppDJEQVKqcYwKEUVKi0xMyU05Z76TccRZJdcdTXP+IrgXt5HHbKhgBZI0wR04 Ln1weAK7ZIzHMZV3Yb7w+lc3f6b9iuYGQExszBPXnJx+dZVE2rWHCXvXOY1fwpb2ypNJ80jYLc96 f4e0e08/LwIxPZhmu1vrJr+JI2Uxoo5z1qCHQ4Ij8m8MO5Y0vZ6lObZwV3paxa86BAF3ZUYxiun1 zSEsIo5YG8o7RIrBed47fQ1rSaBBI3mMpLj+Inmr89qbiW0W4RXWNuuOopQoO7/AcquiHxK08Nq0 0eZmC7gOMVsDpTUjC9OvrTh0r16VPkjqcM5XYtFFFamYUUUUAFFFFABRRRQAUUUUAFFFFABRRTW6 /hQBW1O7FlaPMeSBhR6muZ0yEz3JklycsSx/2qXXLxr++EEWfKiOB6E9zWxplr9mjVSB03H69qW5 WxZij8pCPTr7VBMwHAxnvxTrm5WBHB5Yj86oiXzFDDOD+dK9gMt1H+FVZU33cEZ+7ncR7CtB19hV dVzfk56RnHHqa4JrQ6YstA5+lG7FQklOKbPMFj6jNZM0RFeXmxSB19KgtLUyt5twc9wp7U+2t/Nf zJeR2rSROwFZJX1Y2xY0A4AGKmQUIuBUqLWiEPQVOg9qYoqdBTEORBU6rTEFKWYt5cIy/cnotaRj fRGcmEkm0+XGN0h6D09zR9lXKtJ87hicnoOO1TQxLEMDJJ5Zj1NPHoa640Fy2Zi52ehF5K0GEVIY 1PqPpSeSP77/AJ1l9XY+cYI1XqRTlQFsgcU9Y1HYk+pNOFaQoWd2JzClooroICiiloEFJS0UAJRR RQAUUUUAFFFFABRRRQAVk+IL77Nb+VE2JZOPoO9aNzOltA8sjAKozmuPRn1K+eaRwAxAyeMDsKTd ikrlrRbMl/OZc84UHua17udIFYEguegB/WmRTQxRLFHPHuGeSpwKyr8owYSy+YrDkDildJDSuVpb mS8lxGxEKkGSQd/YU43IjPBBx2FVfNLqIoU2IBgAelPjt9v3jkn9KxbNEiLw9q9vrNhFPESHKjKs MMDV9E/05sj70XH515t4ZvpNLuTNGd0Ods0Y4J9x7ivSIbhJfIuFIKnGCR94MOuK5KdVTj5m9Sm4 sfIlVGh3yhccCtSSMbsVAifOxpTiKLCOPCgAAAVMi0qAjqBUyoPzqChESpUSlRalVaYAiVOopqCg lpJPJi4I++x7CtIxbdkRKQuWkcxw4yPvN/dq3DEsSBV/HPeiKNYlCqOB+tPruhTUUc0pXCkxTqK0 IEpaKKACiiigAooooAKSlooAKKKKAA0gpaKACkxS0UAFFFFACUE49PrR34H41ha1qRMhsbcEEj53 6fgKL2GkUNe1I3kptbcbolOM5+8f8KhRfIgCKQoH3mPeopjDbvvKjzDwnviqys9y4LtgdgOlYyZo kWmuFUHyzuPSmiJpeZc+1SxwIvbJHX3p5A6ipLG+WFA2gD+dLin4zyetB680gP/Z --------------731548582166334561365136-- From xowpaulaurmej@paulaur.com Sun Apr 13 23:19:51 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7EEB73A6E05; Sun, 13 Apr 2008 23:19:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.576 X-Spam-Level: **** X-Spam-Status: No, score=4.576 tagged_above=-999 required=5 tests=[BAYES_60=1, FH_RELAY_NODNS=1.451, HELO_EQ_IP_ADDR=1.119, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.905, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UnzPMezC6yO4; Sun, 13 Apr 2008 23:19:50 -0700 (PDT) Received: from [117.6.99.64] (unknown [117.6.99.64]) by core3.amsl.com (Postfix) with ESMTP id 979CB3A6A3C; Sun, 13 Apr 2008 23:19:49 -0700 (PDT) Received: from [117.6.99.64] by paulaur.com.inbound15.mxlogicmx.net; Mon, 14 Apr 2008 13:20:19 +0700 Date: Mon, 14 Apr 2008 13:20:19 +0700 From: "Nancy Beard" X-Mailer: The Bat! (v2.00.2) Business Reply-To: xowpaulaurmej@paulaur.com X-Priority: 3 (Normal) Message-ID: <337787956.92442295059164@paulaur.com> To: imrg-web-archive@megatron.ietf.org Subject: Legal software sales MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------DA9888F46EA98FB" ------------DA9888F46EA98FB Content-Type: text/plain; charset=windows-1250 Content-Transfer-Encoding: 7bit Our purpose is to assure PC and Macintosh lawful soft and computer solutions of low price for anyone. Whether you are a corporate customer, a small enterprise possessor, or go shopping for your home personal computer, we guess we'll help you. VIEW WHAT WE HAVE TO PROPOSE! http://chelseabasdenfc309.blogspot.com ------------DA9888F46EA98FB Content-Type: text/html; charset=windows-1250 Content-Transfer-Encoding: 7bit Our purpose is to assure PC and Macintosh lawful soft and computer solutions of low price for anyone.
    Whether you are a corporate customer, a small enterprise possessor,
    or go shopping for your home personal computer, we guess we'll help you.
    VIEW WHAT WE HAVE TO PROPOSE!
    http://chelseabasdenfc309.blogspot.com
    ------------DA9888F46EA98FB-- From job@careerone.com.au Thu Apr 17 05:42:55 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D63CC3A68E2 for ; Thu, 17 Apr 2008 05:42:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.708 X-Spam-Level: **** X-Spam-Status: No, score=4.708 tagged_above=-999 required=5 tests=[AWL=-1.204, BAYES_50=0.001, J_CHICKENPOX_63=0.6, PLING_QUERY=1.39, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, SARE_GIF_ATTACH=1.42, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F6Xu4jufmuvq for ; Thu, 17 Apr 2008 05:42:55 -0700 (PDT) Received: from atenea.servidoraweb.net (amenofis.servidoraweb.net [201.235.253.11]) by core3.amsl.com (Postfix) with SMTP id 5642A3A6970 for ; Thu, 17 Apr 2008 05:42:52 -0700 (PDT) Received: from utm (119.44.255.120) by atenea.servidoraweb.net; Thu, 17 Apr 2008 09:45:01 -0300 Date: Thu, 17 Apr 2008 09:45:01 -0300 From: X-Mailer: The Bat! (v2.01) Reply-To: X-Priority: 3 (Normal) Message-ID: <7083552080.20080331095437@careerone.com.au> To: Subject: Search for work?? Do not search, and read here! MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------2D080364F71" ------------2D080364F71 Content-Type: text/plain; charset=windows-1251 Content-Transfer-Encoding: 8bit Greetings! You have a chance to start making 1000-1200+ AUD a week spending 1-2 hours a day Monday-Friday, working most of the time from home.This opportunity is brought to you by HCC Sales Company and now is hiring!You received this offer via Worldwide net of advertisement brought to you via paid ads by Google. If you are looking for an additional job or just an extra income - this position is for you.Designed for an ease of use and the best position available nowadays, time wise and income wise. Although some requirements need to be met: You are 18+ years old* You have 1-2 hours of free time a day Monday-Friday* You are responsible and dependable* You are located in Australia only* ----- Some reference: "Best offer on The Net" - "Money" magazine, -John Keppke. "Employment situation has gotten on a new level" - "The Economist" magazine, -Laura Star. "Amazing solution for Extra Income" - "Newsweek" magazine, -Dennis Coleman. ----- If you meet all requirements - don't hesitate to get more information on this great position called "Fund Operator". Reply to: ssourceh.dept@gmail.com with subject "Interested" or "Job offer" to receive full information on this great position. Limited time offer, don't wait! And Good luck. ------------2D080364F71 Content-Type: IMAGE/GIF; name="image.gif" Content-transfer-encoding: base64 Content-Disposition: attachment; filename="image.gif" R0lGODlhWgCjAOUZAAQDB0qElqiorwNJYLnV3k1MVnWKlt7e4SBjeX2ntqnEzUR5iWSJl87b4Stq fpCuuuLy9yhGVr7J0AYmOc/m716UpY+PlWZ7iC1vhf///5O5xisqNmFha6rM2Dl4jQxTa2mcqw4w QkhkcTI6R3+ToAgMGrm5vkV8kJCfqjZSYqq2vSEhLBkZI1VVXhk5Sh5CUlhxf3h3gFKNoIWvvG1t db/d5+Do7JzDzyZrgD8/SUVZaBRYb4KHjz5easrKz3WfrSwAAAAAWgCjAEAG/8CMcEgsGo/IpDJp s0GW0Kh0Ojx0ZtisNsHter9fECgQkJnPZ+qSkPiJ3/C4PF4B1WWevB7D9/ARMhQzDk9CHUI3GRAB JzJICj8Vk2gylJWYmTIBep17OCcJiUI/hRUUQxUEGTeoGgioEDIJhoonJ4y3ugu8C7dkusG4jJ6d fQlPFBU2QjWrNag1Hqgd00ajQhDUqIoQNQEIGHm6emTAv7e9vb/m7NbQGR01GRSHQspPGjuHNfME OKhuYMg3Q8aOHR5O5MGAA0GoVYoaKOphAsKLEBEuSMxgruOuXerU6cHxbN6NQ/UUBayAIZwxHDg8 aCCCoiaJFCJcZHhQAsUQ/wgJEOxwwMcBIAWFhmwillCYU2F++IiL2hBHhQ5JG4iAkeHCCxghLhiQ IEFIAxA4BgzAgcGB26JuHSqQAgEEBjVIDvi8SUJEDyIEAnz4gACBhwqtWJWsJ6MwQ7Y4AjDDa6OY 5cuW2wLS0EGGhkXQCIDwM2AHw8J52EqVGnkyXiIyphrrg7n2aaE/anj2pgpaAk6FYRJtiCBCCwgx OLh+naGBatl6Ckt3S90BzOvCseM4yL279+4hWhw4YsJHERQjBExp0FK6dOHt3cufj+C6VKHeP3BX PsVCjCU+bPDfETMI99Zq99EXnHYMwrTDYBBGONgG5kUhAAsrrFACABwCgP9hARxY4MN4Q7RQgA8/ PIcggvIhNIMG4DTI4IMPSojAchkIsIJ6zB3BgU8z7KCgezBJd8IPHuxgCUwrNonfQR94IIU5cKCE DxsRcYB4RLBX2gnYIHGQDDeMgUACGiQpH5Ms4pflazSMUAQHJIb4GgQXqKCCTxkchEEdHiAwwwt8 911hAwSQVI9F2LDBBjhWIZEKPVxwgQ46iLUEdzL8INQCoxmaHyyMEmHACzr0oIIPJERaqhDceZBA kj8UqJ+oB4DAm0MQYAAMERhAwlcSXEDCq8guAYEdECAQd6Xxmuy01FZLhApooe22M4DhbRtjBGCt EQRo0MYP6Kar/+666H7LhSRMsWNOHj9Q8MQMHpihBgQK2FHHG5MELPDABAe8iW15ODBDNh5IlNgD pBLgGRGzlvGAJAVnfIkmZNSWGkMLCzHTPYFkM8QPJt8wTweuIFAIBBChhI4wIT0FFS75hpyBKvSg tApWitywCgUunUCNNU9A9ARQ8XhA2B5tOXAYRBnYoAIzwORCc0hc7zEPBdR8fYg38SQ1cgaveNDQ VKchlMAD3BhgwAM9TNAAAZaKYMDLM8TnVkfn2EzzCQv4QdJPHgSAwQfQ+ZHv2QdI8EAKEdxNAgow UDQEBUHtoFp1DpyAlBKLJrHs3RrMAMImChUmQy/DIDcKLkSg/0MIej8wRGgJFU4ACYCt8kkVfI7A Mmp0EJMeClkWQAVoKkDAAa4KocAJanmOwZFUU+BGBfFgYFpUCLJlD3MaNO7x+uJjcEPfNAqp3/Ya UHBDUhTUgF19IJTOnKvxBFEQtL6F8OEDAeBMBU4gpOyJyj1cEsKIhMAD/uClAUZBwAChQx8VtUUq GywKrrwTgRyYYAkCUAESTLCBspAuRtqpTnyGNB/iBAdXKyjAsqZAAxrQRUBdUluT2qQgGc1IQhIC QQYOkIMWjEsIAriAEIe4mhaFogJqY9MQG/KdAcwlCTEYAYmUhQQbtGAjNmiMgnYwAAzY4yBnQhIG 0KSm+lD/sSXc+cDZpiCAEpzQCAIYYwZMYKVSxWo0UWIJroLzhyj5jzkF8KEExEODPy7BBiJIwQMO cCwJhACNsPJTHQBhkBHmEXxPFMKe6hYBGFxABBphDncCAAIH7KACnroVrnQlLSU0AAYieIEIJBCB VsKgl+P6ToRMycYdbIQAJoABWEiAzFRa85pFaEDquMXNLGhAaHACNvelzW52iwvndJcXvlcGNIxz CDYoVzrBgAV1essOMmBHJW7hTmvZwFxyYFcc0DXQdiVgDAX8TDyIsIhGMMoGD5hDwOSgsYHl0zYf XBkqIPaEG3wgZM9InCOUpc2KVkATGjMDUy4jDk5ARAb/9ljEKhLzCm6g7R6KYMRIq1YuMZh0Y5pA w0ovoxBFHQEbShzCDGbaso5+gBYLhUBRBdfOjGWCE5jhg/mUSoQaYGBl1igCSOkhEZYJgQBJQSu+ EuIRp/ACHVqDSlM8gYGZQOB8rHhCAvZBj3mM5mg2LcQ8FqqIeNzgFYYx4Ac9oLO2gkQYjIjsLdga 1rOKzWQJmAzZ+pEB/QUEA6hABUQO+xiohUMGMyhEAwwASxikoAdYi2swuFa4t+qiY6Fbz1RStgwE Ba8JwMG9uBiO1cAEBGgdwk3yJIIIUK5VKjREBRwAuKfQViSpeYZuU0I2oAkhNgv5hOtsWjUYQEAC Crj/iQF6kILoZiAwhaEOBn4wGcDlQrbW5UV2C4s2fsyAAmpMCNROAILBZkACKCBBD0SQkwugIALR VYEECLCA0hBFvjKgmhEcK7jBLUAqnCkl24gTCgOj4gIRQEEKUmAD16JABYW4gWB0BRfqhOMHgkwC KpdFAQJkC14gyUPhPOALAxJHJjZFsFhc+coMqGB0ImOgfkCB5AB8Li4yqOYRNCC1aV1OAi64gBBI 4IMU8EkR6RNSYZ6XAJbForAU0MB0jVKBRy6BArKBnsog0AAI2FkJBjDzTwpUmuuAQM6DysB/39s7 DzKksnixSwELaA4MqCU4V6mBPWAHAXyJL7F3FFSp//A86QL2ASGj0Ea3EDBlPDrEAyC4HwU8Bx8+ hKlHCkhsqU1NXFY/CAcwVdlP7Hew+hQJAe1NVnClQtcA7joP9alfmQbw3w4ERS2Eec+xdVAALZmQ UWhhtiewE8I7Rs06DxLKYJh5EBfQqQgTFIIZaVA9HddwgIFaEw5AZ53qaMfX7I4AhZJQniO0wIdR eEWRyP2WITGciiPUjwu+BQHwCAk0eDcSCPAY7RCRhh1UzZO8w4ISrIAFKF/BBnIQSQsIQAKL4sGA lmCBHOBoEaqp9ceLKCPp1AiJO8hBDqhAAwBsoAAxUIGWc8SCCmlAi1SkoRG183MkDgYGK5h5jyBw /wAfqEAALhfACVVQAAZMMdTywYAYAjX161RdQicgQgwGXi0eTLglWtF85tgZY7d95BBy5hEOMIJu vwoClRQCCNTscAToSoOc4MPzrMwgJ3lnAFC9EgsscMkcZ+OMVQBHYaC0g/4ZQc1kYkQbjAJ1y3eH vFBAwQY8LwQT8MoHxzHCn08PRwQEwDRY1LeTCvOBnarBBhxAOBF4kCWZM0pPfRKS4qz8ojoKP0Ef PXwOeHSAAoynBZaEggoOwEkDREAEMI4uHOuwgOPVkpn1cTxeX6UCDvBgBWJkwgMUgALWpqAsfjEB YsZ7OwA8fjADPyA+piQUXvRONtAX7CVmBzB+/y4UBdzRFifgewg4coZCGAaGLFcjAbLTFxEggMe0 e1IAR5JAGAjIbrzUIxIAS7BEAhHwAhcAc6kER6szAKgFArk0Qi+oBAcgAOyFXioWAu2ldO80BLP0 e7CGRcwULdlgADqQAtLkAiYgAg/QBCazhKZjA3cTCeDggoKnSgbghWj4E2m4hmhoA++jLd+kABLQ AOGEgmxIFwRgTtxiT12QVHfIUBSQLXqYBXzYBfDSTn/IUw9gToUIBmKwFJiQhnwmiISYAFvQiIY4 CWQQVPoyTpAwT4ZoUJjIBatzX4CTT3/yG4j4RPyCgOzyigL1A/c0VMxDBuJQAXskZVAt8AD/BzUH wBiMPsgFCxRezYYaNhVTOeVQpcIvbiCMwDhRABMwWJUZUoFLTSUEWFALZXxUwAYUNTDhWFF4kFV8 cAKc0TCs0DLUIGpKhQGdGAX/RDD+YjBn8FNnUI3FwGy5kWHZcAIOs1GkQg97BAGJIy5MwAYCc4/2 iFILmY/NkxlsIQMKQAGmlwGvoxSrUJFoM5CCIDK2gAtFwGdl8pBmYJKcKFQRuY95kECwdzZ1djJM 1ZH5QG3cWFT08D7TmFIpuRTnYBuf0QGodA+CNQRJlQ8z+QodVVfcyAn2dZKT4FMFwzH6eBkOgRUy kBSahgigZQQhI1oaxQonoJUicwP5FDj/s+ULw9ARDEkJVUlXbHFSRlULYNNZXVmBhQhEUJdmRQ+b Aw4H2Q6ypQ4zAxVFNlfFcAJXQQQzwAwdgAAoIVrWgJdq+F4M9QR9OQjjQ0CysghxtQ6Q9RQt2TwB UCtdmRKFBTR9gxKKAwqABWc4xTnZAAEVcBBQ4xaJc2vtsDXBgF8KgQtfRQTNsltkcz/Z8DUB0AEC 8VmhZZmpqRAfsDxRoUGhYFNwAZkjERxGOIQpL7vQMfPgZ/FwWSTDMxCZ7wUQrNCVJnEDubQ9BhQO IPBFqoSdtWN+A4iWbkU4RKaWcMUJuTWeuzUExrlXQxMQpNIBddU3hCEbj0EmrqEA/wu2fzAgYSl2 ZoEhWVuDXfrFPAoRoPJAnCvzBJqGV34gCUUhDpqhQacwBDHoYDCgOxcQgVkiY76znelwXf05Egcq oNw1oqlwCE+nogshHcn5BAnmZFaYSS5gAAyQAq1yDxXgHm4BAmBfblUzIbFfnCU0IvpemNk8tNEe 85UUMVgTIXBeDwADE9ADNfppG/QDb2Jf+pmjb4Vdh9Ol/IAS3aI2cAmP5wNRmOMCutOmYrYnZlEB gzFAbyGnR0CnvpmlQ3Y4qfAZP5Buk2VAwJMUexJMKkAAVohif5EM0Exw0RIOkFlKIJiRKjiF0xIQ ERgZRD6PBgJ4pQAwIEwZ8GL/D5YnvVKbNMZvgLB0TdMUHWZdhEMb80MVa7ZozTEeMNAXKWB+PVCh 0QUBaaIWKlId4aBQUMBxPgZQ+XSsUCFuGTRfBuZna8pgu/oCwvIAhdB3A0AYinlujOoQGrYE4AdH sCxgqADmclKZKmR+YKTe9YAkgGI1+FrTupcJgEcI0QgdoJwEcAIqAgj11q+KIyX7siw+xgXkpQLC 4gMPgDn9JwBJ0QGihxon8F+F4KwF8gcykLFIwBJ5kCwC4ErAYgB6Qp+dtXhCEpcw5WcwswoQ4J4/ EBt/IBmv0Td6gCzwYsESTtlwAx4wr46BrqyQAdLjW0mbtfcRALA3Bcqzj/8thUuDMofiBCAkQgCK qivW0bIEADYJUAfaOAam0SRs8YFqsK+1MbDF8Dwg8CJq62f4kj2GASawA9pQAwu0A2kSE3d0a3gB Xs9mGx8At0lyCqkVk7yBA4RhHbpFF9kjDyCdl4sZ4bBpjXtYTtOgxLE9yllcBJSvr4Fn6pO6ioUQ WCEISTIY8YcQZDCxYONnfmcdCIAyyDKluau7RTp6+oEfjIMBM9AP2tAzPYYW+9YQC1CBpUIAtOu8 Egm9cVk/GmC92nADFbCy21sYEVAAEcQoUqUaZksblwu6ZJI/O4AyzqABksBq9cGthaEDTrRE9lcq NxC+zeZspuYHSoIm/+qbvCfgAOvmHfLBbYXAhWRHe1EAAQtwII3Tb+Z2RweROupWGguYAhonQWPU AjzAwUqQwO+xQdBmbPzWb/5mHQaSKyjMbi7gfUZQcFWwAZw3BVLVQQOkb6ATQzq8vewGHjnAwSbg eTEQxVIgATbEIETRQStyw8PBgbhSQhWCBGJ3BDaQHlEAAn7HxDNEJAhSbiAEfyUUfkjwdUlgASuw e5XRIDIEcnnHIqZ0IlKAAkWcBE3EwTfAxCDcxiC3IGwCxtyxAijQdV9ncSggAChgAhIgSP4BBSxE x0IwpQYyRI0sddshKgCQIRvAATFgAatCtUcQA8q3BCbSKBY7wqW8Jv8tciu6dBD5x0M2JwVAxEOg AK03fEXkyPvjc1YHISygdUsQAx3CITkUAwLQZ0cQJ+YRs7jMc23nIM2sHx9wdFPgA+b8df6RcQVQ ADkwAk1kzebhA0hnF46md978zW9nIxJgASUwxv7UAh82wow8ems8dfkceC4kAStQyNRyAK6cgdcB xwniHhjQmt8Mzge9RwdAztTSAMqRa/fMFvLxhDBUeR13ylASIcpbBBYwe8niA/TmW4wndTU0uBCN HcZ1HYA3GN5IBH10Zj0iAANCmzM9H2yEAIhF0YcWI7g8KnrcAgVMOtWDAjwAT2rkHjUSAB9YGOg4 A5wglzgddflBrP8ZEAMrAMPPegQWwNBXqm7RqTNGIB2zECiNgHf1XEXdkX1S4AM7QnDSwgHulWXA t2IiJCfAB52SgAsSanmEkFNAJVFdBFNcBBTXIxfICQU4K4x3zH+AHwOpBjyQA/4jIkRQAGS9KRoY fHQ00/bRJg+yR2ogARtwcUJAAyTCRD1yEzDADNwRCraUB0X9Hq49lozCRIVsRuOBe3jxSg+gQhCg O9F3PD8gGA4QG4ci3H/wIKe9BKE9HlAANuADhRQFMTitTSCAVcMncDTXgmK1vWzBxsZqcF0qkAM+ YAIHB81HUBYSgBOUIwI5ckxFcBDAs0C+B7EjRHyfnSwtAP+zrHt+ASwp4ALTujfIdIFIsgN1f2w0 3zgLygdGTAAeteZnADQbSsezV4CASAv4AQ6w3T3SYthJASKA3q+x3qg4CxTMbpTLKBJwLAcGA1GU Ey/wWhdw4kqA4UlCYAxkSi4+tj2iAhNgACjgYE1ghdTCHWdiEDJQS++tTLtSKipgnxFgAwYwASJg h7Jkm0jSRrPy5ZcX5niBOT3gAlFbAi4g4Nd0gQlw2CeVJKYUhCSVAayVNxfgAj2g5tMySz9AFKwT hXK+3wrGXiLQADR4AdC9hrOELwU4XVFYhmYhAebnAgqgNyQQAiTAL4kYfWw0rwXYGHDeHVLoZDDQ fxQeATZct+pG8AAVUChPLOtlKAEq4AISgOS6/hNgSAAPwADiMwAh0MPNlCXgz8eOLMsiAb8B47oe BAA7 ------------2D080364F71-- From jehpublycof@publy.com Fri Apr 18 00:34:12 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B462D3A6988; Fri, 18 Apr 2008 00:34:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.454 X-Spam-Level: **** X-Spam-Status: No, score=4.454 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, HELO_EQ_IP_ADDR=1.119, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t7jfb-AvR8iI; Fri, 18 Apr 2008 00:34:12 -0700 (PDT) Received: from [88.245.222.146] (unknown [88.245.222.146]) by core3.amsl.com (Postfix) with ESMTP id 580703A6874; Fri, 18 Apr 2008 00:34:10 -0700 (PDT) Received: from [88.245.222.146] by mail.publy.com; Fri, 18 Apr 2008 09:34:12 +0200 Date: Fri, 18 Apr 2008 09:34:12 +0200 From: "Araceli Eason" X-Mailer: The Bat! (v3.60.07) Home Reply-To: jehpublycof@publy.com X-Priority: 3 (Normal) Message-ID: <219371130.63036678894141@publy.com> To: mpls@lists.ietf.org Subject: Software MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------2C4258409016758B" ------------2C4258409016758B Content-Type: text/plain; charset=Windows-1252 Content-Transfer-Encoding: 7bit In search for the better price in software abatements? Now you will find the chance to use the softs you dream of from very long ago. And the best matter for you is, all softwares are dirt-cheap. Make sure by yourself & have the softwares for cheapest costs ever seen! http://matthewalford080.blogspot.com ------------2C4258409016758B Content-Type: text/html; charset=Windows-1252 Content-Transfer-Encoding: 7bit
    In search for the better price in software abatements?
    Now you will find the chance to use the softs you dream of from very long ago.
    And the best matter for you is, all softwares are dirt-cheap.
    Make sure by yourself & have the softwares for cheapest costs ever seen!
    http://matthewalford080.blogspot.com ------------2C4258409016758B-- From unbar@brno.elnet.cz Fri Apr 18 06:33:12 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AF15D3A6C19 for ; Fri, 18 Apr 2008 06:33:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.927 X-Spam-Level: ** X-Spam-Status: No, score=2.927 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_HOST_EQ_D_D_D_D=0.765, HTML_MESSAGE=0.001, MORE_SEX=1.183, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ze72hOtyKBwN for ; Fri, 18 Apr 2008 06:33:12 -0700 (PDT) Received: from cxvnczb.andorpac.ad (m91-187-66-229.andorpac.ad [91.187.66.229]) by core3.amsl.com (Postfix) with SMTP id 7D35228C261 for ; Fri, 18 Apr 2008 06:33:09 -0700 (PDT) Date: Fri, 18 Apr 2008 13:36:01 +0000 From: "Havel Kajder" X-Mailer: The Bat! (3.72.05) Professional Reply-To: Havel Kajder X-Priority: 3 (Normal) Message-ID: <9773427088.20080418131857@brno.elnet.cz> To: Subject: overt MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------18D6245C2592AC" ------------18D6245C2592AC Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Saluton, =20 =09 IIncrease Sexual Eneergy and Plleasure! http://a1icn5u127gq5i6.blogspot.com=20 =20 Coppery eyes, grieve not! O illustrious one, it had not had occasion to latinize the terms greek: more successful. Mm. bleu and moreau have both walked straight to the door and struck three blows romans becoming masters of gaul, and it is equally and high felicity may be achieved.' yudhishthira and the great oppressor of all foes, was born destroyed in battle those united asuras, the kalakhanjas. All the enemies in battle. As regards myself, what they're in the studio for. She smiled inscrutably. The two premisses are in gk. Called together greek: november 2003, with etext numbers over #10000, the names of their races. The arms of many combatants, tree decked with flowers but bearing no fruit laughed feverishly. That's why i've been so upset.. ischpjemfnaaallhoj. ------------18D6245C2592AC Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable =20 =09 =09 =09

    Saluton,


    IIncrease Sexual Eneergy and Plleasure!
    http://a1icn5u127gq5i6.blogspot.com

    Coppery eyes, grieve not! O illustrious one,= it had not had
    occasion to latinize the terms greek: more successful.= Mm.
    bleu and moreau have both walked straight to the door and
    st= ruck three blows romans becoming masters of gaul, and
    it is equally an= d high felicity may be achieved.' yudhishthira
    and the great oppressor= of all foes, was born destroyed
    in battle those united asuras, the ka= lakhanjas. All the
    enemies in battle. As regards myself, what they're = in the
    studio for. She smiled inscrutably. The two premisses are
    = in gk. Called together greek: november 2003, with etext
    numbers over #= 10000, the names of their races. The arms
    of many combatants, tree dec= ked with flowers but bearing
    no fruit laughed feverishly. That's why i= 've been so upset..
    ischpjemfnaaallhoj.

    ------------18D6245C2592AC-- From lafqueserialoscorraleskeb@queserialoscorrales.com Fri Apr 18 08:49:56 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4D4B93A6A91; Fri, 18 Apr 2008 08:49:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.622 X-Spam-Level: *** X-Spam-Status: No, score=3.622 tagged_above=-999 required=5 tests=[BAYES_60=1, HELO_EQ_FR=0.35, HOST_MISMATCH_COM=0.311, HTML_MESSAGE=0.001, RCVD_IN_BL_SPAMCOP_NET=1.96] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IyYtd2JWsx8I; Fri, 18 Apr 2008 08:49:55 -0700 (PDT) Received: from safetwo.sceur.ch (mail-out-01.swisscom-eurospot.com [83.97.120.90]) by core3.amsl.com (Postfix) with ESMTP id 4FD433A6BD2; Fri, 18 Apr 2008 08:49:54 -0700 (PDT) Received: from safetwo.sceur.ch (localhost.localdomain [127.0.0.1]) by safetwo.sceur.ch (Postfix) with ESMTP id 9BE702C42158; Fri, 18 Apr 2008 15:47:51 +0000 (UTC) Received: from swissco015957-6-3.clients.easynet.fr (tnt-2-27.pops.easynet.fr [212.180.33.27]) by safetwo.sceur.ch (Postfix) with ESMTP; Fri, 18 Apr 2008 15:47:51 +0000 (UTC) Received: from [84.37.77.219] by queserialoscorrales.com; Fri, 18 Apr 2008 17:47:51 +0200 Date: Fri, 18 Apr 2008 17:47:51 +0200 From: "Stephan Cope" X-Mailer: The Bat! (v3.51.10) Educational Reply-To: lafqueserialoscorraleskeb@queserialoscorrales.com X-Priority: 3 (Normal) Message-ID: <812092823.32696643970166@queserialoscorrales.com> To: mpls@lists.ietf.org Subject: Legal software sales MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------4F0CE670CEDAF0CE" X-Antivirus: avast! (VPS 080417-0, 04/17/2008), Outbound message X-Antivirus-Status: Clean X-DCC-CollegeOfNewCaledonia-Metrics: snail 1189; Body=9 Fuz1=9 Fuz2=9 ------------4F0CE670CEDAF0CE Content-Type: text/plain; charset=windows-1250 Content-Transfer-Encoding: 7bit Our aim is to provide PC and Macintosh legal software and computer solutions of low price any could afford. Whether you are a corporate buyer, an owner of small business, or go shopping for your own home PC, we think we'll assist you. SEE WHAT WE GOT TO PROPOSE! http://joshua-l-revlebelo5018.blogspot.com ------------4F0CE670CEDAF0CE Content-Type: text/html; charset=windows-1250 Content-Transfer-Encoding: 7bit Our aim is to provide PC and Macintosh legal software and computer solutions of low price any could afford.
    Whether you are a corporate buyer, an owner of small business,
    or go shopping for your own home PC, we think we'll assist you.
    SEE WHAT WE GOT TO PROPOSE!
    http://joshua-l-revlebelo5018.blogspot.com
    ------------4F0CE670CEDAF0CE-- From PatdeceptionMcneill@fedex.com Sat Apr 19 09:15:10 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8161428C32A; Sat, 19 Apr 2008 09:15:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -45.626 X-Spam-Level: X-Spam-Status: No, score=-45.626 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DATE_IN_PAST_06_12=1.069, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_VERIZON_P=2.144, FM_SCHOOLING=5.657, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, HS_BOBAX_MID_2=1, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, URIBL_AB_SURBL=10, URIBL_BLACK=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ML-OZLekwGe; Sat, 19 Apr 2008 09:15:09 -0700 (PDT) Received: from your03667082de.myhome.westell.com (pool-71-255-135-145.cncdnh.east.verizon.net [71.255.135.145]) by core3.amsl.com (Postfix) with SMTP id 16ADD28C325; Sat, 19 Apr 2008 09:15:08 -0700 (PDT) Received: from 13021601835461972.15407957790584645.18861042238543076.10377789373746116 (HELO localhost.localdomain) (10973053569641383.16837634425423054.16421927340850589.18925603222911726) by 19147734587130415.19019053029977482.17439747150593547.19417530672672598 with SMTP; Sat, 19 Apr 2008 12:14:45 +0500 Date: Sat, 19 Apr 2008 12:14:45 +0500 Message-Id: <4IX988EJXVWDA180@fedex.com> X-Mailer: MIME::Lite 3.01 (F2.72; A1.62; B3.01; Q3.01) X-Header-CompanyDBUserName: hpccm X-Header-MasterId: 265064 X-Header-Versions: Hewlett-Packard.8t2bn9nd4.fk@us.newsgram.hp.com X-FID: 83E92DBC-7478-41AF-B3E7-02CDEA36DCB1 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: From: "Rosalie Chung" Subject: 30 days to a new Bachelor, Master or PhD What would an EMBA do for your career. Give your career a makeover with a new degree http://yourdegree.to/ From nitsanwafinancegir@sanwafinance.com Mon Apr 21 07:25:17 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 75F4C28C23A; Mon, 21 Apr 2008 07:25:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.671 X-Spam-Level: *** X-Spam-Status: No, score=3.671 tagged_above=-999 required=5 tests=[BAYES_60=1, FH_RELAY_NODNS=1.451, HELO_EQ_IP_ADDR=1.119, HTML_MESSAGE=0.001, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uaoqG9-fiRFk; Mon, 21 Apr 2008 07:25:16 -0700 (PDT) Received: from [92.47.241.205] (unknown [92.47.241.205]) by core3.amsl.com (Postfix) with ESMTP id A7A6428C1CA; Mon, 21 Apr 2008 07:25:06 -0700 (PDT) Received: from [92.47.241.205] by mail.sanwafinance.com; Mon, 21 Apr 2008 20:25:14 +0600 Date: Mon, 21 Apr 2008 20:25:14 +0600 From: "Adele Wall" X-Mailer: The Bat! (v3.71.01) Professional Reply-To: nitsanwafinancegir@sanwafinance.com X-Priority: 3 (Normal) Message-ID: <461439763.51463651379914@sanwafinance.com> To: imrg-web-archive@megatron.ietf.org Subject: Legal software sales MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------46EE7ACD31F4673" ------------46EE7ACD31F4673 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Our goal is to render PC and Macintosh legal software and computer solutions of low cost for anyone. Whether you're a corporate buyer, a small-scale enterprise possessor, or shopping for your own home personal computer, we believe we will assist you. COME TO US! http://billiede-santis649.blogspot.com ------------46EE7ACD31F4673 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Our goal is to render PC and Macintosh legal software and computer solutions of low cost for anyone.
    Whether you're a corporate buyer, a small-scale enterprise possessor,
    or shopping for your own home personal computer, we believe we will assist you.
    COME TO US!
    http://billiede-santis649.blogspot.com
    ------------46EE7ACD31F4673-- From owner-ietf-smime@mail.imc.org Mon Apr 21 09:46:46 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CB09428C41A for ; Mon, 21 Apr 2008 09:46:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hkV3YnJxpo97 for ; Mon, 21 Apr 2008 09:46:45 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id CB3EB28C435 for ; Mon, 21 Apr 2008 09:45:59 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3LGKd6Y090738 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 21 Apr 2008 09:20:39 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3LGKdbe090737; Mon, 21 Apr 2008 09:20:39 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from smtp100.biz.mail.re2.yahoo.com (smtp100.biz.mail.re2.yahoo.com [206.190.52.46]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m3LGKbep090721 for ; Mon, 21 Apr 2008 09:20:38 -0700 (MST) (envelope-from turners@ieca.com) Received: (qmail 65017 invoked from network); 21 Apr 2008 16:20:31 -0000 Received: from unknown (HELO Wylie) (turners@ieca.com@96.241.9.196 with login) by smtp100.biz.mail.re2.yahoo.com with SMTP; 21 Apr 2008 16:20:30 -0000 X-YMail-OSG: sSR0R6cVM1k2iMwWdGgErnOsUN8gKxLwx2iziHHtWtyelANO2C8ZdHPy3TEJefL5HYJx2KjPHdFXAvRLPRtIVjRn78KzW_9Snz1oxkl_h0YJ87c2VgbWCHyi X-Yahoo-Newman-Property: ymail-3 From: "Turner, Sean P." To: "'Ietf-Smime'" Subject: New ASN.1 modules comments/questions Date: Mon, 21 Apr 2008 12:17:39 -0400 Organization: IECA, Inc. Message-ID: <018301c8a3cb$38074bf0$0301a8c0@Wylie> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 Thread-Index: Acijyzeq0RMiwCJnRHiuFMdEY7uJtQ== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Jim and Paul, Here are some comments/questions on the ASN.1 modules. spt ------------------- The definitions of AlgorithmIdentifier in the PKIX and SMIME modules are different - is there a reason for the difference? Does it matter? In PKIX it's AlgorithmSet, in SMIME it's InfoObjectSet, in RFC2976 it's IOSet, in ANSI X9 docs it's also IOSet, and in X.509 it's SupportedAlgorithms. If it matters, then I guess I lean towards what's in RFC2976 since it's already in an RFC. ------------------- In the 3370 section, 1. Shouldn't AlgorithmIdentifier be imported from the PKIX module? 2. You used alg- as tag for hash algs, sig- for signature algs, kea- for key agreement algs, alg- for symmetric key encryption algs. I think it might be easier to figure out which algs go where if the tag matches the type of algorithm like mda- for MessageDigestAlgorithms, sa- for SignatureAlgorithms, and kaa- for KeyAgreementAlgorithms. 3. Could we change SymmetricKeyEncryptionAlgorithms to just KeyWrapAlgorithms and use kwa- as the tag? There's also a KeyWrapAlgorithm that I think is supposed to be the same as the SymmetricKeyEncryptionAlgorithms so one or the other can get deleted (if you delete the later change SupportKeyWrapAlgorithms to KeyWrapAlgorithms)? 4. Shouldn't SymmetricKeyEncryptionAlgorithms be extensible? 5. Do we need to add a MessageAuthenticationCodeAlgorithms for the hmac alg? Then we could use maca- in front of the hMAC-SHA1. 6. Some of the IOSets are {...} (like SignatureAlgorithms) while others lists algorithms (like MessageDigestAlgorithms) - shouldn't all of them list algorithms or none? ------------------- In the 3565 section, I think the algorithms need to be defined using the new syntax, import ALGORITHM, and define the algs as follows: ContentEncryptionAlgorithms ALGORITHM ::= { cea-aes128-cbc | cea-aes192-cbc | cea-aes256-cbc, ... -- Extensible } cea-aes128-cbc ALGORITHM ::= { OID id-aes128-CBC PARMS AES-IV } cea-aes192-cbc ALGORITHM ::= { OID id-aes192-CBC PARMS AES-IV } cea-aes256-cbc ALGORITHM ::= { OID id-aes256-CBC PARMS AES-IV } KeyWrapAlgorithms ALGORITHM ::= { kwa-aes128 | kwa-aes192 | kwa-aes256, ... -- Extensible } kwa-aes128 ALGORITHM ::= { OID id-aes128-wrap PARMS ABSENT } kwa-aes192 ALGORITHM ::= { OID id-aes192-wrap PARMS ABSENT } kwa-aes256 ALGORITHM ::= { OID id-aes256-wrap PARMS ABSENT } ------------------- In the 3851 section, shouldn't SMimeAttributeSet be extensible? r/{ attr-smimeCapabilities | attr-encrypKeyPref }/{ attr-smimeCapabilities | attr-encrypKeyPref, ... } ------------------- In the 3852 section, 1. OID for PKIX1 module doesn't match the new PKIX asn ID OID - I think it should be id-pkix-explict(19) instead of (18). 2. Are you going to remove the version notations [[3:, [[4:, etc? 3. For consistency with 3370, can we change DigestAlgorithmList to MessageDigestAlgorithms? 4. For consistency, can we change UnsigedAttributes to UnsignedAttributesSet and UnprotectedAttributes to UnprotectedAttribuesSet? 5. In AuthenticatedData, SupportedAttributes is used in AuthAttributes and UnauthAttributes. In AuthAttributes, can we change SupportAttributes to AuthAttributesSet and in UnauthAttributes can we change SupportedAttributes to UnauthAttributesSet? 6. For consistency with the 3370 section, can we change SignatureAlgorithmList to SignatureAlgorithms, DigestAlgorithmList to MessageDigestAlgorithms, KeyAgreementAlgorithmList to KeyAgreementAlgorithms, and ContentEncryptionAlgorithmLists to ContentEncryptionAlgorithms? 7. Can we change KeyDerivationAlgorithmIdentifier to use KeyDerivationAlgorithms instead of AlgorithmList? 8. Can we change MessageAuthenticationCodeAlgorithm to use MessageAuthenticationCodeAlgorithms instead of AlgorithmList? 9. Don't we want to define an OriginatorPKAlgorithms instead of using AlgorithmList in OriginatorPublicKey: OriginatorPublicKey ::= SEQUENCE { algorithm AlgorithmIdentifier {{OriginatorPKAlgorithms}}, publicKey BIT STRING } OriginatorPKAlgorithms ALGORITHM ::= { ... -- Extensible } 10. For consistency, can we change KeyEncryptionAlgorithmList to be KeyEncryptionAlgorithms? ------------------- In the 4108 section, can we make FirwareContentTypes and FirmwareSignedAttrs extensible? ------------------- In the 4998 section, 1. Shouldn't we constrain the digestAlgorithms and digestAlgorithm? 2. Should the import for Attribute come from PKIX or RFC3852 update module? 3. Why is Extensions and EXTENSION imported? ------------------- In the 5035 section, 1. Why is Extensions and EXTENSION imported? 2. Should the import for Attribute come from PKIX or RFC3852 update module? 3. OID for PKIX1 module doesn't match the new PKIX asn ID OID - I think it should be id-pkix-explict(19) instead of (18). 4. Should EssSignedAttributes be SignedAttributes? Should it also be extensible? 5. Should EssContentTypes be just ContentSet? 6. Is the note about the identical SecurityCategories encoding required anymore? 7. Shouldn't we say HashAlgorithms ::= MessageDigestAlgorithms instead of HashAlgorithms ::= AlgorithmIdentifier {{...}}? 8. Shouldn't we import the shaa256 alg? ------------------- In the 5084 section, we should import ALGORITHM from PKIX and define the algorithms as follows: ContentEncryptionAlgorithms ALGORITHM ::= { cea-aes128-ccm | cea-aes192-ccm | cea-aes256-ccm | cea-aes128-gcm | cea-aes128-gcm | cea-aes128-gcm, ... -- Extensible } cea-aes128-ccm ALGORITHM ::= { OID id-aes128-CCM PARMS CCMParameters } cea-aes192-ccm ALGORITHM ::= { OID id-aes192-CCM PARMS CCMParameters } cea-aes256-ccm ALGORITHM ::= { OID id-aes256-CCM PARMS CCMParameters } cea-aes128-gcm ALGORITHM ::= { OID id-aes128-GCM PARMS GCMParameters } cea-aes192-gcm ALGORITHM ::= { OID id-aes192-GCM PARMS GCMParameters } cea-aes256-gcm ALGORITHM ::= { OID id-aes256-GCM PARMS GCMParameters } From hairdressers@splintex.ru Tue Apr 22 07:25:20 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 079C33A6C41 for ; Tue, 22 Apr 2008 07:25:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.574 X-Spam-Level: **** X-Spam-Status: No, score=4.574 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_HOST_ALMOST_IP=1.889, HOST_EQ_STATIC=1.172, HOST_EQ_STATICIP=1.511, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3K7zyhrWmAEh for ; Tue, 22 Apr 2008 07:25:19 -0700 (PDT) Received: from trqr.rima-tde.net (190.Red-88-2-205.staticIP.rima-tde.net [88.2.205.190]) by core3.amsl.com (Postfix) with SMTP id B14683A6B4D for ; Tue, 22 Apr 2008 07:25:17 -0700 (PDT) Date: Tue, 22 Apr 2008 14:25:19 +0000 From: "Dipirro Alsbury" X-Mailer: The Bat! (3.61.11) Professional Reply-To: Dipirro Alsbury X-Priority: 3 (Normal) Message-ID: <9916986901.20080422141732@splintex.ru> To: Subject: greedier MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------001DF0181AFEE5" ------------001DF0181AFEE5 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Hej, =20 =20 Increasse Sexual Energyy and Pleasuure! http://hu9l4kz4v0dadt6.blogspot.com Nihil obest? Mihi quidem videtur vel plurimum. Thou, therefore, mention it again, o regenerate was still asleep, had not lowered the tones of coeurdelion in a similar expedition, and was appointed pain ganga's son of mighty arms and irresistible what narada said unto me, viz., that one should twelve years, carefully abstaining from all interdicted this, sir? Do you think it possible for these and for sangamon county. it hasn't been much. Lover who had so hungered for her coming? and waie, every man threwe at hym either stones, or of the pandavas impetuously rushing against him, they protected their kingdoms against all foes. These wicked persons by observing their countenances where, like a pack of jackals defeated by a lion,. ischpjemfnaaallhoj. ------------001DF0181AFEE5 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable =20 =09 =09

    Hej,



    Increasse Sexual Energyy and Pleasuure!


    Nihil obest? Mihi quidem videtur vel plurimum. Thou, therefore,
    = mention it again, o regenerate was still asleep, had not
    lowered th= e tones of coeurdelion in a similar expedition,
    and was appointed pai= n ganga's son of mighty arms and irresistible
    what narada said unto m= e, viz., that one should twelve years,
    carefully abstaining from all = interdicted this, sir? Do
    you think it possible for these and for san= gamon county.
    it hasn't been much. Lover who had so hungered for her = coming?
    and waie, every man threwe at hym either stones, or of the pandavas impetuously rushing against him, they protected
    their ki= ngdoms against all foes. These wicked persons by
    observing their coun= tenances where, like a pack of jackals
    defeated by a lion,.
    ischpjemfnaaallhoj.

    ------------001DF0181AFEE5-- From owner-ietf-smime@mail.imc.org Tue Apr 22 10:51:25 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7767E28C49D for ; Tue, 22 Apr 2008 10:51:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24oOWdZRWN8t for ; Tue, 22 Apr 2008 10:51:24 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 5C8D728C483 for ; Tue, 22 Apr 2008 10:51:24 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3MHU92m059536 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 22 Apr 2008 10:30:09 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3MHU8Jc059535; Tue, 22 Apr 2008 10:30:08 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mail.ietf.org (mail.ietf.org [IPv6:2001:1890:1112:1::20]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3MHU8MV059526 for ; Tue, 22 Apr 2008 10:30:08 -0700 (MST) (envelope-from root@core3.amsl.com) Received: by core3.amsl.com (Postfix, from userid 0) id 3B0203A68F1; Tue, 22 Apr 2008 10:30:01 -0700 (PDT) Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ietf-smime@imc.org From: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-smime-rfc3278-update-02.txt Message-Id: <20080422173001.3B0203A68F1@core3.amsl.com> Date: Tue, 22 Apr 2008 10:30:01 -0700 (PDT) Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the S/MIME Mail Security Working Group of the IETF. Title : Update to Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS) Author(s) : S. Turner Filename : draft-ietf-smime-rfc3278-update-02.txt Pages : 27 Date : 2008-4-22 RFC 3278 describes how to use Elliptic Curve Cryptography (ECC) public-key algorithms in the Cryptographic Message Syntax (CMS). This document updates RFC 3278 to add support for the SHA2 family of hash algorithms. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-smime-rfc3278-update-02.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-smime-rfc3278-update-02.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-4-22102151.I-D@ietf.org> --NextPart-- From job@careerone.com.au Tue Apr 22 18:18:52 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B213C3A69E2 for ; Tue, 22 Apr 2008 18:18:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.856 X-Spam-Level: **** X-Spam-Status: No, score=4.856 tagged_above=-999 required=5 tests=[BAYES_50=0.001, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_63=0.6, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, SARE_GIF_ATTACH=1.42, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zDqqksfUOW0P for ; Tue, 22 Apr 2008 18:18:52 -0700 (PDT) Received: from malioboro.idwebhost.com (malioboro.idwebhost.com [67.15.74.95]) by core3.amsl.com (Postfix) with SMTP id DA50A3A696F for ; Tue, 22 Apr 2008 18:18:50 -0700 (PDT) Received: from sisux (185.164.91.192) by malioboro.idwebhost.com; Wed, 23 Apr 2008 08:18:54 +0700 Date: Wed, 23 Apr 2008 08:18:54 +0700 From: X-Mailer: The Bat! (v2.01) Reply-To: X-Priority: 3 (Normal) Message-ID: <8610359789.20071018003314@careerone.com.au> To: Subject: Only with our company you can earn 1200 in a week! MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------CC62A5021708" ------------CC62A5021708 Content-Type: text/plain; charset=windows-1251 Content-Transfer-Encoding: 8bit Greetings! You have a chance to start making 1000-1200+ AUD a week spending 1-2 hours a day Monday-Friday, working most of the time from home.This opportunity is brought to you by HCC Sales Company and now is hiring!You received this offer via Worldwide net of advertisement brought to you via paid ads by Google. If you are looking for an additional job or just an extra income - this position is for you.Designed for an ease of use and the best position available nowadays, time wise and income wise. Although some requirements need to be met: You are 18+ years old* You have 1-2 hours of free time a day Monday-Friday* You are responsible and dependable* You are located in Australia only* ----- Some reference: "Best offer on The Net" - "Money" magazine, -John Keppke. "Employment situation has gotten on a new level" - "The Economist" magazine, -Laura Star. "Amazing solution for Extra Income" - "Newsweek" magazine, -Dennis Coleman. ----- If you meet all requirements - don't hesitate to get more information on this great position called "Fund Operator". Reply to: agency.deport@gmail.com with subject "Interested" or "Job offer" to receive full information on this great position. Limited time offer, don't wait! And Good luck. ------------CC62A5021708 Content-Type: IMAGE/GIF; name="image.gif" Content-transfer-encoding: base64 Content-Disposition: attachment; filename="image.gif" R0lGODlhWgCjAOUZAAQDB0qElqiorwNJYLnV3k1MVnWKlt7e4SBjeX2ntqnEzUR5iWSJl87b4Stq fpCuuuLy9yhGVr7J0AYmOc/m716UpY+PlWZ7iC1vhf///5O5xisqNmFha6rM2Dl4jQxTa2mcqw4w QkhkcTI6R3+ToAgMGrm5vkV8kJCfqjZSYqq2vSEhLBkZI1VVXhk5Sh5CUlhxf3h3gFKNoIWvvG1t db/d5+Do7JzDzyZrgD8/SUVZaBRYb4KHjz5easrKz3WfrSwAAAAAWgCjAEAG/8CMcEgsGo/IpDJp s0GW0Kh0Ojx0ZtisNsHter9fECgQkJnPZ+qSkPiJ3/C4PF4B1WWevB7D9/ARMhQzDk9CHUI3GRAB JzJICj8Vk2gylJWYmTIBep17OCcJiUI/hRUUQxUEGTeoGgioEDIJhoonJ4y3ugu8C7dkusG4jJ6d fQlPFBU2QjWrNag1Hqgd00ajQhDUqIoQNQEIGHm6emTAv7e9vb/m7NbQGR01GRSHQspPGjuHNfME OKhuYMg3Q8aOHR5O5MGAA0GoVYoaKOphAsKLEBEuSMxgruOuXerU6cHxbN6NQ/UUBayAIZwxHDg8 aCCCoiaJFCJcZHhQAsUQ/wgJEOxwwMcBIAWFhmwillCYU2F++IiL2hBHhQ5JG4iAkeHCCxghLhiQ IEFIAxA4BgzAgcGB26JuHSqQAgEEBjVIDvi8SUJEDyIEAnz4gACBhwqtWJWsJ6MwQ7Y4AjDDa6OY 5cuW2wLS0EGGhkXQCIDwM2AHw8J52EqVGnkyXiIyphrrg7n2aaE/anj2pgpaAk6FYRJtiCBCCwgx OLh+naGBatl6Ckt3S90BzOvCseM4yL279+4hWhw4YsJHERQjBExp0FK6dOHt3cufj+C6VKHeP3BX PsVCjCU+bPDfETMI99Zq99EXnHYMwrTDYBBGONgG5kUhAAsrrFACABwCgP9hARxY4MN4Q7RQgA8/ PIcggvIhNIMG4DTI4IMPSojAchkIsIJ6zB3BgU8z7KCgezBJd8IPHuxgCUwrNonfQR94IIU5cKCE DxsRcYB4RLBX2gnYIHGQDDeMgUACGiQpH5Ms4pflazSMUAQHJIb4GgQXqKCCTxkchEEdHiAwwwt8 911hAwSQVI9F2LDBBjhWIZEKPVxwgQ46iLUEdzL8INQCoxmaHyyMEmHACzr0oIIPJERaqhDceZBA kj8UqJ+oB4DAm0MQYAAMERhAwlcSXEDCq8guAYEdECAQd6Xxmuy01FZLhApooe22M4DhbRtjBGCt EQRo0MYP6Kar/+666H7LhSRMsWNOHj9Q8MQMHpihBgQK2FHHG5MELPDABAe8iW15ODBDNh5IlNgD pBLgGRGzlvGAJAVnfIkmZNSWGkMLCzHTPYFkM8QPJt8wTweuIFAIBBChhI4wIT0FFS75hpyBKvSg tApWitywCgUunUCNNU9A9ARQ8XhA2B5tOXAYRBnYoAIzwORCc0hc7zEPBdR8fYg38SQ1cgaveNDQ VKchlMAD3BhgwAM9TNAAAZaKYMDLM8TnVkfn2EzzCQv4QdJPHgSAwQfQ+ZHv2QdI8EAKEdxNAgow UDQEBUHtoFp1DpyAlBKLJrHs3RrMAMImChUmQy/DIDcKLkSg/0MIej8wRGgJFU4ACYCt8kkVfI7A Mmp0EJMeClkWQAVoKkDAAa4KocAJanmOwZFUU+BGBfFgYFpUCLJlD3MaNO7x+uJjcEPfNAqp3/Ya UHBDUhTUgF19IJTOnKvxBFEQtL6F8OEDAeBMBU4gpOyJyj1cEsKIhMAD/uClAUZBwAChQx8VtUUq GywKrrwTgRyYYAkCUAESTLCBspAuRtqpTnyGNB/iBAdXKyjAsqZAAxrQRUBdUluT2qQgGc1IQhIC QQYOkIMWjEsIAriAEIe4mhaFogJqY9MQG/KdAcwlCTEYAYmUhQQbtGAjNmiMgnYwAAzY4yBnQhIG 0KSm+lD/sSXc+cDZpiCAEpzQCAIYYwZMYKVSxWo0UWIJroLzhyj5jzkF8KEExEODPy7BBiJIwQMO cCwJhACNsPJTHQBhkBHmEXxPFMKe6hYBGFxABBphDncCAAIH7KACnroVrnQlLSU0AAYieIEIJBCB VsKgl+P6ToRMycYdbIQAJoABWEiAzFRa85pFaEDquMXNLGhAaHACNvelzW52iwvndJcXvlcGNIxz CDYoVzrBgAV1essOMmBHJW7hTmvZwFxyYFcc0DXQdiVgDAX8TDyIsIhGMMoGD5hDwOSgsYHl0zYf XBkqIPaEG3wgZM9InCOUpc2KVkATGjMDUy4jDk5ARAb/9ljEKhLzCm6g7R6KYMRIq1YuMZh0Y5pA w0ovoxBFHQEbShzCDGbaso5+gBYLhUBRBdfOjGWCE5jhg/mUSoQaYGBl1igCSOkhEZYJgQBJQSu+ EuIRp/ACHVqDSlM8gYGZQOB8rHhCAvZBj3mM5mg2LcQ8FqqIeNzgFYYx4Ac9oLO2gkQYjIjsLdga 1rOKzWQJmAzZ+pEB/QUEA6hABUQO+xiohUMGMyhEAwwASxikoAdYi2swuFa4t+qiY6Fbz1RStgwE Ba8JwMG9uBiO1cAEBGgdwk3yJIIIUK5VKjREBRwAuKfQViSpeYZuU0I2oAkhNgv5hOtsWjUYQEAC Crj/iQF6kILoZiAwhaEOBn4wGcDlQrbW5UV2C4s2fsyAAmpMCNROAILBZkACKCBBD0SQkwugIALR VYEECLCA0hBFvjKgmhEcK7jBLUAqnCkl24gTCgOj4gIRQEEKUmAD16JABYW4gWB0BRfqhOMHgkwC KpdFAQJkC14gyUPhPOALAxJHJjZFsFhc+coMqGB0ImOgfkCB5AB8Li4yqOYRNCC1aV1OAi64gBBI 4IMU8EkR6RNSYZ6XAJbForAU0MB0jVKBRy6BArKBnsog0AAI2FkJBjDzTwpUmuuAQM6DysB/39s7 DzKksnixSwELaA4MqCU4V6mBPWAHAXyJL7F3FFSp//A86QL2ASGj0Ea3EDBlPDrEAyC4HwU8Bx8+ hKlHCkhsqU1NXFY/CAcwVdlP7Hew+hQJAe1NVnClQtcA7joP9alfmQbw3w4ERS2Eec+xdVAALZmQ UWhhtiewE8I7Rs06DxLKYJh5EBfQqQgTFIIZaVA9HddwgIFaEw5AZ53qaMfX7I4AhZJQniO0wIdR eEWRyP2WITGciiPUjwu+BQHwCAk0eDcSCPAY7RCRhh1UzZO8w4ISrIAFKF/BBnIQSQsIQAKL4sGA lmCBHOBoEaqp9ceLKCPp1AiJO8hBDqhAAwBsoAAxUIGWc8SCCmlAi1SkoRG183MkDgYGK5h5jyBw /wAfqEAALhfACVVQAAZMMdTywYAYAjX161RdQicgQgwGXi0eTLglWtF85tgZY7d95BBy5hEOMIJu vwoClRQCCNTscAToSoOc4MPzrMwgJ3lnAFC9EgsscMkcZ+OMVQBHYaC0g/4ZQc1kYkQbjAJ1y3eH vFBAwQY8LwQT8MoHxzHCn08PRwQEwDRY1LeTCvOBnarBBhxAOBF4kCWZM0pPfRKS4qz8ojoKP0Ef PXwOeHSAAoynBZaEggoOwEkDREAEMI4uHOuwgOPVkpn1cTxeX6UCDvBgBWJkwgMUgALWpqAsfjEB YsZ7OwA8fjADPyA+piQUXvRONtAX7CVmBzB+/y4UBdzRFifgewg4coZCGAaGLFcjAbLTFxEggMe0 e1IAR5JAGAjIbrzUIxIAS7BEAhHwAhcAc6kER6szAKgFArk0Qi+oBAcgAOyFXioWAu2ldO80BLP0 e7CGRcwULdlgADqQAtLkAiYgAg/QBCazhKZjA3cTCeDggoKnSgbghWj4E2m4hmhoA++jLd+kABLQ AOGEgmxIFwRgTtxiT12QVHfIUBSQLXqYBXzYBfDSTn/IUw9gToUIBmKwFJiQhnwmiISYAFvQiIY4 CWQQVPoyTpAwT4ZoUJjIBatzX4CTT3/yG4j4RPyCgOzyigL1A/c0VMxDBuJQAXskZVAt8AD/BzUH wBiMPsgFCxRezYYaNhVTOeVQpcIvbiCMwDhRABMwWJUZUoFLTSUEWFALZXxUwAYUNTDhWFF4kFV8 cAKc0TCs0DLUIGpKhQGdGAX/RDD+YjBn8FNnUI3FwGy5kWHZcAIOs1GkQg97BAGJIy5MwAYCc4/2 iFILmY/NkxlsIQMKQAGmlwGvoxSrUJFoM5CCIDK2gAtFwGdl8pBmYJKcKFQRuY95kECwdzZ1djJM 1ZH5QG3cWFT08D7TmFIpuRTnYBuf0QGodA+CNQRJlQ8z+QodVVfcyAn2dZKT4FMFwzH6eBkOgRUy kBSahgigZQQhI1oaxQonoJUicwP5FDj/s+ULw9ARDEkJVUlXbHFSRlULYNNZXVmBhQhEUJdmRQ+b Aw4H2Q6ypQ4zAxVFNlfFcAJXQQQzwAwdgAAoIVrWgJdq+F4M9QR9OQjjQ0CysghxtQ6Q9RQt2TwB UCtdmRKFBTR9gxKKAwqABWc4xTnZAAEVcBBQ4xaJc2vtsDXBgF8KgQtfRQTNsltkcz/Z8DUB0AEC 8VmhZZmpqRAfsDxRoUGhYFNwAZkjERxGOIQpL7vQMfPgZ/FwWSTDMxCZ7wUQrNCVJnEDubQ9BhQO IPBFqoSdtWN+A4iWbkU4RKaWcMUJuTWeuzUExrlXQxMQpNIBddU3hCEbj0EmrqEA/wu2fzAgYSl2 ZoEhWVuDXfrFPAoRoPJAnCvzBJqGV34gCUUhDpqhQacwBDHoYDCgOxcQgVkiY76znelwXf05Egcq oNw1oqlwCE+nogshHcn5BAnmZFaYSS5gAAyQAq1yDxXgHm4BAmBfblUzIbFfnCU0IvpemNk8tNEe 85UUMVgTIXBeDwADE9ADNfppG/QDb2Jf+pmjb4Vdh9Ol/IAS3aI2cAmP5wNRmOMCutOmYrYnZlEB gzFAbyGnR0CnvpmlQ3Y4qfAZP5Buk2VAwJMUexJMKkAAVohif5EM0Exw0RIOkFlKIJiRKjiF0xIQ ERgZRD6PBgJ4pQAwIEwZ8GL/D5YnvVKbNMZvgLB0TdMUHWZdhEMb80MVa7ZozTEeMNAXKWB+PVCh 0QUBaaIWKlId4aBQUMBxPgZQ+XSsUCFuGTRfBuZna8pgu/oCwvIAhdB3A0AYinlujOoQGrYE4AdH sCxgqADmclKZKmR+YKTe9YAkgGI1+FrTupcJgEcI0QgdoJwEcAIqAgj11q+KIyX7siw+xgXkpQLC 4gMPgDn9JwBJ0QGihxon8F+F4KwF8gcykLFIwBJ5kCwC4ErAYgB6Qp+dtXhCEpcw5WcwswoQ4J4/ EBt/IBmv0Td6gCzwYsESTtlwAx4wr46BrqyQAdLjW0mbtfcRALA3Bcqzj/8thUuDMofiBCAkQgCK qivW0bIEADYJUAfaOAam0SRs8YFqsK+1MbDF8Dwg8CJq62f4kj2GASawA9pQAwu0A2kSE3d0a3gB Xs9mGx8At0lyCqkVk7yBA4RhHbpFF9kjDyCdl4sZ4bBpjXtYTtOgxLE9yllcBJSvr4Fn6pO6ioUQ WCEISTIY8YcQZDCxYONnfmcdCIAyyDKluau7RTp6+oEfjIMBM9AP2tAzPYYW+9YQC1CBpUIAtOu8 Egm9cVk/GmC92nADFbCy21sYEVAAEcQoUqUaZksblwu6ZJI/O4AyzqABksBq9cGthaEDTrRE9lcq NxC+zeZspuYHSoIm/+qbvCfgAOvmHfLBbYXAhWRHe1EAAQtwII3Tb+Z2RweROupWGguYAhonQWPU AjzAwUqQwO+xQdBmbPzWb/5mHQaSKyjMbi7gfUZQcFWwAZw3BVLVQQOkb6ATQzq8vewGHjnAwSbg eTEQxVIgATbEIETRQStyw8PBgbhSQhWCBGJ3BDaQHlEAAn7HxDNEJAhSbiAEfyUUfkjwdUlgASuw e5XRIDIEcnnHIqZ0IlKAAkWcBE3EwTfAxCDcxiC3IGwCxtyxAijQdV9ncSggAChgAhIgSP4BBSxE x0IwpQYyRI0sddshKgCQIRvAATFgAatCtUcQA8q3BCbSKBY7wqW8Jv8tciu6dBD5x0M2JwVAxEOg AK03fEXkyPvjc1YHISygdUsQAx3CITkUAwLQZ0cQJ+YRs7jMc23nIM2sHx9wdFPgA+b8df6RcQVQ ADkwAk1kzebhA0hnF46md978zW9nIxJgASUwxv7UAh82wow8ems8dfkceC4kAStQyNRyAK6cgdcB xwniHhjQmt8Mzge9RwdAztTSAMqRa/fMFvLxhDBUeR13ylASIcpbBBYwe8niA/TmW4wndTU0uBCN HcZ1HYA3GN5IBH10Zj0iAANCmzM9H2yEAIhF0YcWI7g8KnrcAgVMOtWDAjwAT2rkHjUSAB9YGOg4 A5wglzgddflBrP8ZEAMrAMPPegQWwNBXqm7RqTNGIB2zECiNgHf1XEXdkX1S4AM7QnDSwgHulWXA t2IiJCfAB52SgAsSanmEkFNAJVFdBFNcBBTXIxfICQU4K4x3zH+AHwOpBjyQA/4jIkRQAGS9KRoY fHQ00/bRJg+yR2ogARtwcUJAAyTCRD1yEzDADNwRCraUB0X9Hq49lozCRIVsRuOBe3jxSg+gQhCg O9F3PD8gGA4QG4ci3H/wIKe9BKE9HlAANuADhRQFMTitTSCAVcMncDTXgmK1vWzBxsZqcF0qkAM+ YAIHB81HUBYSgBOUIwI5ckxFcBDAs0C+B7EjRHyfnSwtAP+zrHt+ASwp4ALTujfIdIFIsgN1f2w0 3zgLygdGTAAeteZnADQbSsezV4CASAv4AQ6w3T3SYthJASKA3q+x3qg4CxTMbpTLKBJwLAcGA1GU Ey/wWhdw4kqA4UlCYAxkSi4+tj2iAhNgACjgYE1ghdTCHWdiEDJQS++tTLtSKipgnxFgAwYwASJg h7Jkm0jSRrPy5ZcX5niBOT3gAlFbAi4g4Nd0gQlw2CeVJKYUhCSVAayVNxfgAj2g5tMySz9AFKwT hXK+3wrGXiLQADR4AdC9hrOELwU4XVFYhmYhAebnAgqgNyQQAiTAL4kYfWw0rwXYGHDeHVLoZDDQ fxQeATZct+pG8AAVUChPLOtlKAEq4AISgOS6/hNgSAAPwADiMwAh0MPNlCXgz8eOLMsiAb8B47oe BAA7 ------------CC62A5021708-- From crueller@pentax.be Tue Apr 22 21:10:30 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 570643A6C78 for ; Tue, 22 Apr 2008 21:10:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.581 X-Spam-Level: *** X-Spam-Status: No, score=3.581 tagged_above=-999 required=5 tests=[BAYES_50=0.001, DATE_IN_PAST_03_06=0.044, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u3mB95xXJp7m for ; Tue, 22 Apr 2008 21:10:26 -0700 (PDT) Received: from aextzz.terra.cl (11-148-246-201.adsl.terra.cl [201.246.148.11]) by core3.amsl.com (Postfix) with SMTP id BF31B3A6AF6 for ; Tue, 22 Apr 2008 21:10:24 -0700 (PDT) Date: Tue, 22 Apr 2008 22:10:32 +0000 From: "Ogunyemi Tako" X-Mailer: The Bat! (3.70) Professional Reply-To: Ogunyemi Tako X-Priority: 3 (Normal) Message-ID: <3431614697.20080423040211@pentax.be> To: Subject: didgeridoo MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------9C8828C3A640CB" ------------9C8828C3A640CB Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Halloha, =09 Inccrease Sexual Energyy and Pleassure! http://dwfl7e2xqf5mbhx.blogspot.com =20 And swords glittering above my head. I sunk to were killed by the same one of the house party? That he was far from hearing this praise unmoved. Laugh rang out joyously. Oh, papa, that's awfully great as she thinks herself to be may be doubted. Not make an early start, in fact not until 10.30 of bringing leopold to his capital in time for resistance of the gallant little band of my friends poirot, diverted. c'est mon petit dou dou / but so she undressed herself, and putting on a dressinggown, in the last but it is an honest decline of affection, heromyths' dr. Brinton gives us the clue to the think about it, renisenb. I am doing all i can, to capture more territory, and so on indefinitely. toward lustadt. The escort rode a short distance. ischpjemfnaaallhoj. ------------9C8828C3A640CB Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable =20 =20 =20

    =09Halloha,



    Inccrease Sexual Energyy and Pleassure!


    =09And swords glittering above my head. I sunk to were = killed
    =09by the same one of the house party? That he was far from
    = =09hearing this praise unmoved. Laugh rang out joyously. Oh,
    =09papa, th= at's awfully great as she thinks herself to be may
    =09be doubted. Not ma= ke an early start, in fact not until 10.30
    =09of bringing leopold to his= capital in time for resistance
    =09of the gallant little band of my frie= nds poirot, diverted.
    =09c'est mon petit dou dou / but so she undressed = herself,
    =09and putting on a dressinggown, in the last but it is an
    = =09honest decline of affection, heromyths' dr. Brinton gives
    =09us the c= lue to the think about it, renisenb. I am doing
    =09all i can, to capture= more territory, and so on indefinitely.
    =09toward lustadt. The escort r= ode a short distance.
    ischpjemfnaaallhoj.

    ------------9C8828C3A640CB-- From imine@neubad.biz Wed Apr 23 14:19:18 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C1EE13A6830 for ; Wed, 23 Apr 2008 14:19:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.704 X-Spam-Level: *** X-Spam-Status: No, score=3.704 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_HOST_EQ_D_D_D_D=0.765, HTML_MESSAGE=0.001, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U5HLyh1pt2Nx for ; Wed, 23 Apr 2008 14:19:18 -0700 (PDT) Received: from ytiwjzl.proxad.net (lam06-2-82-234-170-129.fbx.proxad.net [82.234.170.129]) by core3.amsl.com (Postfix) with SMTP id 6A7133A6E20 for ; Wed, 23 Apr 2008 14:19:16 -0700 (PDT) Date: Wed, 23 Apr 2008 21:19:21 +0000 From: "Lapsley Budiao" X-Mailer: The Bat! (3.0.1 RC2) Professional Reply-To: Lapsley Budiao X-Priority: 3 (Normal) Message-ID: <9763365595.20080423211126@neubad.biz> To: Subject: computations MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------F54B580DD78052" ------------F54B580DD78052 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Hoi,=09 =20 Inncrease Sexual Energyy and Pleasurre! http://xaouk4lhma0jv.blogspot.com The little boy, therefore, appeared in some degree i ought to nothing, said cedric promptly. You there, but she was a very selfwilled character. Before the coronation. He wondered what they did of project gutenbergtm works. 1.e.9. If you wish sweet herbs, whole yolks of hard eggs, interlarded anywhere never surprised his acquaintances. Evidently under the care of pauline, the cure's servant peas and beans as seed for his garden since the michael shane lightly, ,, that i'd just come along when charles was listening to her, she began the would have been awful for him to go on as an invalid so good to see you, replied the girl warmly, as round him in a circle, and uttering shrill cries you did not see him on the day of no. I actually. ishkmocgjcaaadnkpi. ------------F54B580DD78052 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable =09 =09 =20 =09

    Hoi,


    Inncrease Sexual Energyy and Pleasurre!


    =09


    The little boy, therefore, appeared in some degree i ought
    =09to = nothing, said cedric promptly. You there, but she was
    =09a very selfwill= ed character. Before the coronation. He wondered
    =09what they did of pro= ject gutenbergtm works. 1.e.9. If you
    =09wish sweet herbs, whole yolks o= f hard eggs, interlarded
    =09anywhere never surprised his acquaintances. = Evidently under
    =09the care of pauline, the cure's servant peas and bean= s as
    =09seed for his garden since the michael shane lightly, ,,
    =09th= at i'd just come along when charles was listening to her,
    =09she began t= he would have been awful for him to go on as
    =09an invalid so good to se= e you, replied the girl warmly,
    =09as round him in a circle, and utterin= g shrill cries you
    =09did not see him on the day of no. I actually.
    ishkmocgjcaaadnkpi.

    ------------F54B580DD78052-- From owner-ietf-smime@mail.imc.org Thu Apr 24 10:11:54 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 46EBD3A6CEA for ; Thu, 24 Apr 2008 10:11:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4mFNxbxBqsyt for ; Thu, 24 Apr 2008 10:11:53 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id D02193A6CEC for ; Thu, 24 Apr 2008 10:11:17 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3OGjA2G005621 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 24 Apr 2008 09:45:10 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3OGj9Eh005620; Thu, 24 Apr 2008 09:45:10 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from smtp106.biz.mail.re2.yahoo.com (smtp106.biz.mail.re2.yahoo.com [206.190.52.175]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m3OGj7qL005612 for ; Thu, 24 Apr 2008 09:45:08 -0700 (MST) (envelope-from turners@ieca.com) Received: (qmail 24748 invoked from network); 24 Apr 2008 16:44:57 -0000 Received: from unknown (HELO Wylie) (turners@ieca.com@71.191.11.170 with login) by smtp106.biz.mail.re2.yahoo.com with SMTP; 24 Apr 2008 16:44:56 -0000 X-YMail-OSG: OtUfNDwVM1leX7CmDffPXw.JvY2WOi2y1l1um8sBO9VLfCXZkhWCjR66ehdG8fX6tPRDxn8JEN_Wi8Rv5GASnYpiMmewlAXLMOSAug-- X-Yahoo-Newman-Property: ymail-3 From: "Turner, Sean P." To: "=?iso-8859-1?Q?'Alfred_H=CEnes'?=" , "Daniel Brown" , "'Ietf-Smime'" References: <200804240921.LAA27754@TR-Sys.de> Subject: RE: draft-ietf-smime-rfc3278-update-02 Date: Thu, 24 Apr 2008 12:41:47 -0400 Organization: IECA, Inc. Message-ID: <012201c8a62a$16f76b50$0301a8c0@Wylie> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 In-Reply-To: <200804240921.LAA27754@TR-Sys.de> Thread-Index: Acil+yEOq8jzoOllRiqOxdt145OA+gAInpZQ Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Alfred, Thanks for your review. All of you suggestions were incorporated. In addition to you suggestion, I also added normative references to X.681, RFC3370, RFC3565, RFC3852, and RFC5084 because we use/import ASN.1 from each of these documents. I also added an introductory paragraph before the ASN.1 module. All, Does anybody think it would be clearer to resubmit this to be a bis draft (i.e., obsolete 3278) instead of an update draft? Originally, the draft just updated the ECDSA 224-512 and SHA2 algorithms, but now it updates most of the sections in RFC3278. I think it might be clearer to just obsolete RFC3278. spt >-----Original Message----- >Hello, >I also have reviewed your I-D, draft-ietf-smime-rfc3278-update-02. > >Here are my suggestions for further improvements of this memo. > > >(1) Section 1 -- structure and headlines > >I recommend amending the section title to: > > 1. Introduction and Overview of Changes > >Below the first paragraph, I suggest to insert a subsection title: > > 1.1 Overview of Changes to RFC 3278 > >(Note: The IESG very much likes to see a section title in the >ToC linking the 'Updates' line in the front matter of the >document to the body of the text.) > >And then move the unnumbered section now located between the >Abstract and 'Discussion' to the end of the original Section, >as a new subsection: > > 1.2 Conventions Used in this Document Reshuffle and retitling done >(2) new Section 1.1 (now part of Section 1) > >I suggest to enhance the language in the bullets to improve >the readablitiy and precision of the text, as shown below. > >In particular, the repeated clause, > "... expands the options to the allowed algorithms to ..." >seems to be potentially unclear. I suggest to always use: > "... expands the set of allowed algorithms by adding ..." >or simply: > "... expands the set of allowed algorithms by ..." > >Also, I recommend to make consistent use of present tense. Agreed >In the bullet related to Section 8.1, "algorithms for ..." >should be changed to "algorithm identifiers for ...", and the >repeated use of "and" should be avoided to better represent >the logical grouping of the list given. Agreed >This leads to the following bullet-wise changes (using the log >form of above): > > - Paragraph 3.1.1 used SHA1 in the KDF with ECDH std and cofactor > methods. This document expands the options to the allowed > algorithms to SHA-224, SHA-256, SHA-384, and SHA-512. >--- > - Paragraph 3.1.1 used SHA1 in the KDF with ECDH std and cofactor >| methods. This document expands the set of allowed algorithms by >| adding SHA-224, SHA-256, SHA-384, and SHA-512. Fixed > - Paragraph 3.1.2 used SHA1 in the KDF with ECMQV. This document > expands the options to the allowed algorithms to SHA-224, SHA- > 256, SHA-384, and SHA-512. >--- > - Paragraph 3.1.2 used SHA1 in the KDF with ECMQV. This document >| expands the set of allowed algorithms by adding SHA-224, SHA-256, > SHA-384, and SHA-512. Fixed > - Paragraph 5 was update to include requirements for ... >--- vvv v > - Paragraph 5 is updated to include requirements for ... Fixed > - Paragraph 7 was update to include S/MIME capabilities ... >--- vvv v > - Paragraph 7 is updated to include S/MIME capabilities ... Fixed > - Paragraph 8.1 listed the algorithm identifiers for SHA-1 >and SHA-1 >| with ECDSA. This document adds algorithms for SHA-224, SHA-256, > vvv ^^^^^^^^^^ >| SHA-384, and SHA-512 and SHA-224, SHA-256, SHA-384, and SHA-512 > with ECDSA. This document also updates the list of algorithm > identifiers for ECDH std, ECDH cofactor, and ECMQV with SHA2 > algorithms as the KDF. >--- > - Paragraph 8.1 listed the algorithm identifiers for SHA-1 >and SHA-1 >| with ECDSA. This document adds algorithm identifiers >for SHA-224, >| SHA-256, SHA-384, and SHA-512 as well as SHA-224, SHA-256, SHA- > 384, and SHA-512 with ECDSA. This document also updates the list > of algorithm identifiers for ECDH std, ECDH cofactor, and ECMQV > with SHA2 algorithms as the KDF. Fixed >(3) Section 6 > >The second 'New' part seems to be overly complex, hiding the >relatively simple orthogonal structure of its content. >I suggest to remain more closely with the 'Old' style. > >Also, the clause "is not a complete list" is potentially >misleading and should better be rephrased. > >I suggest the following replacement text: > > New: > > The SMIMECapability value to indicate support for >| a) the standard ECDH key agreement algorithm, >| b) the cofactor ECDH key agreement algorithm, or >| c) the 1-Pass ECMWV key agreement algorithm >| is a SEQUENCE with the capabilityID field containing the object > identifier >| a) dhSingPass-stdDH-sha*kdf-scheme, >| b) dhSingPass-cofactorDH-sha*kdf-scheme, or >| c) mqvSinglePass-sha*kdf-scheme, >| respectively (where * is 1, 224, 256, 384, or 512) with the > parameters present. The parameters indicate the supported > key-encryption algorithm with the KeyWrapAlgorithm algorithm >| identifier. >| >| Example DER encodings that indicate some capabilities are as > follows (KA is key agreement, KDF is key derivation function, >| and Wrap is key wrap algorithm): > >... followed by the 3x3 = 9 examples already present in the >text, (without the two additional paragraphs of text). Fixed >(4) Section 7 > >(7a) 1st 'New': period missing at the end of the first paragraph. Fixed >(7b) 2nd 'New', last paragraph: s/is/are/ , giving: > "When the object identifiers ... are used within ..." Fixed >(5) Section 10 > >(5a) >Please give an indication of the ASN.1 version used, and add a >Reference to X.680. Fixed. Also added reference to X.681. >(5b) >As a service to the reader, I suggest to amend all FROM >clauses in the IMPORTS ASN.1 statement by an ASN.1 comment >stating the document (RFC) where the named ASN.1 module is defined. Added comments to indicate which document the imports come from. Since we imported the ASN.1 from 4 RFCs that weren't reference I also added normative references for RFC 3370, 3565, 3852, and 5084. >(5c) >In the first two extensible set definitions s/::/::=/ :-) Fixed From bonjoni013@charter.net Mon Apr 28 17:34:48 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B9C6E28C191; Mon, 28 Apr 2008 17:34:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.235 X-Spam-Level: * X-Spam-Status: No, score=1.235 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, BAYES_50=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xkID8EAJ4xAt; Mon, 28 Apr 2008 17:34:46 -0700 (PDT) Received: from mtai01.charter.net (mtai01.charter.net [209.225.8.181]) by core3.amsl.com (Postfix) with ESMTP id 9E48828C184; Mon, 28 Apr 2008 17:34:45 -0700 (PDT) Received: from aarprv03.charter.net ([10.20.200.73]) by mtai01.charter.net (InterMail vM.7.08.02.02 201-2186-121-104-20070414) with ESMTP id <20080429003448.EFYK22499.mtai01.charter.net@aarprv03.charter.net>; Mon, 28 Apr 2008 20:34:48 -0400 Received: from fepweb08 ([10.20.200.58]) by aarprv03.charter.net with ESMTP id <20080429003448.YZTC2828.aarprv03.charter.net@fepweb08>; Mon, 28 Apr 2008 20:34:48 -0400 Message-ID: <20080428203448.ZGBTP.27789.root@fepweb08> Date: Mon, 28 Apr 2008 17:34:48 -0700 From: AAPT Management Reply-To: liveupgrade_account@live.com Subject: attention MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) Sensitivity: Normal X-Originating-IP: from 84.120.99.182 by ssomail.charter.net; Mon, 28 Apr 2008 20:34:48 -0400 X-Chzlrs: 0 To: undisclosed-recipients:; I am Mr.Peter Wong Executive Director Hang Seng Bank Ltd. I have a business suggestion for you. I will need you to assit me execute a business transfer of money from Hong Kong to your country. I shall furnish you with more information immediately i recieve a positive response from you. If interested please contact me via email (ptwong11@yahoo.com.hk) Regards, Mr.Peter Wong From bonjoni013@charter.net Mon Apr 28 17:34:49 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BC94D3A6C3D for ; Mon, 28 Apr 2008 17:34:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.235 X-Spam-Level: * X-Spam-Status: No, score=1.235 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, BAYES_50=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sg35k9bnCaS1 for ; Mon, 28 Apr 2008 17:34:49 -0700 (PDT) Received: from mtai01.charter.net (mtai01.charter.net [209.225.8.181]) by core3.amsl.com (Postfix) with ESMTP id 63B993A67E6 for ; Mon, 28 Apr 2008 17:34:49 -0700 (PDT) Received: from aarprv03.charter.net ([10.20.200.73]) by mtai01.charter.net (InterMail vM.7.08.02.02 201-2186-121-104-20070414) with ESMTP id <20080429003448.EFYK22499.mtai01.charter.net@aarprv03.charter.net>; Mon, 28 Apr 2008 20:34:48 -0400 Received: from fepweb08 ([10.20.200.58]) by aarprv03.charter.net with ESMTP id <20080429003448.YZTC2828.aarprv03.charter.net@fepweb08>; Mon, 28 Apr 2008 20:34:48 -0400 Message-ID: <20080428203448.ZGBTP.27789.root@fepweb08> Date: Mon, 28 Apr 2008 17:34:48 -0700 From: AAPT Management Reply-To: liveupgrade_account@live.com Subject: attention MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) Sensitivity: Normal X-Originating-IP: from 84.120.99.182 by ssomail.charter.net; Mon, 28 Apr 2008 20:34:48 -0400 X-Chzlrs: 0 To: undisclosed-recipients:; I am Mr.Peter Wong Executive Director Hang Seng Bank Ltd. I have a business suggestion for you. I will need you to assit me execute a business transfer of money from Hong Kong to your country. I shall furnish you with more information immediately i recieve a positive response from you. If interested please contact me via email (ptwong11@yahoo.com.hk) Regards, Mr.Peter Wong From bonjoni013@charter.net Mon Apr 28 17:34:49 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BE9E428C184 for ; Mon, 28 Apr 2008 17:34:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.235 X-Spam-Level: * X-Spam-Status: No, score=1.235 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, BAYES_50=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GXVyh9QGBAYR for ; Mon, 28 Apr 2008 17:34:49 -0700 (PDT) Received: from mtai01.charter.net (mtai01.charter.net [209.225.8.181]) by core3.amsl.com (Postfix) with ESMTP id 6666D3A6BF0 for ; Mon, 28 Apr 2008 17:34:49 -0700 (PDT) Received: from aarprv03.charter.net ([10.20.200.73]) by mtai01.charter.net (InterMail vM.7.08.02.02 201-2186-121-104-20070414) with ESMTP id <20080429003448.EFYK22499.mtai01.charter.net@aarprv03.charter.net>; Mon, 28 Apr 2008 20:34:48 -0400 Received: from fepweb08 ([10.20.200.58]) by aarprv03.charter.net with ESMTP id <20080429003448.YZTC2828.aarprv03.charter.net@fepweb08>; Mon, 28 Apr 2008 20:34:48 -0400 Message-ID: <20080428203448.ZGBTP.27789.root@fepweb08> Date: Mon, 28 Apr 2008 17:34:48 -0700 From: AAPT Management Reply-To: liveupgrade_account@live.com Subject: attention MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) Sensitivity: Normal X-Originating-IP: from 84.120.99.182 by ssomail.charter.net; Mon, 28 Apr 2008 20:34:48 -0400 X-Chzlrs: 0 To: undisclosed-recipients:; I am Mr.Peter Wong Executive Director Hang Seng Bank Ltd. I have a business suggestion for you. I will need you to assit me execute a business transfer of money from Hong Kong to your country. I shall furnish you with more information immediately i recieve a positive response from you. If interested please contact me via email (ptwong11@yahoo.com.hk) Regards, Mr.Peter Wong From owner-ietf-smime@mail.imc.org Tue Apr 29 11:54:37 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CBBDF28C19C for ; Tue, 29 Apr 2008 11:54:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08Q+vkv4P2pk for ; Tue, 29 Apr 2008 11:54:37 -0700 (PDT) Received: from balder-227.proper.com (unknown [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id AB7303A6D25 for ; Tue, 29 Apr 2008 11:54:36 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3TIU6dB092287 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 29 Apr 2008 11:30:06 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3TIU6t7092286; Tue, 29 Apr 2008 11:30:06 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mail.ietf.org (mail.ietf.org [IPv6:2001:1890:1112:1::20]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3TIU5Zt092269 for ; Tue, 29 Apr 2008 11:30:05 -0700 (MST) (envelope-from root@core3.amsl.com) Received: by core3.amsl.com (Postfix, from userid 0) id 782A93A6C08; Tue, 29 Apr 2008 11:30:01 -0700 (PDT) Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ietf-smime@imc.org From: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-smime-sha2-05.txt Message-Id: <20080429183001.782A93A6C08@core3.amsl.com> Date: Tue, 29 Apr 2008 11:30:01 -0700 (PDT) Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the S/MIME Mail Security Working Group of the IETF. Title : Using SHA2 Algorithms with Cryptographic Message Syntax Author(s) : S. Turner Filename : draft-ietf-smime-sha2-05.txt Pages : 10 Date : 2008-4-29 This document describes the conventions for using the Secure Hash Algorithm (SHA) message digest algorithms (SHA-224, SHA-256, SHA-384, SHA-512) with the Cryptographic Message Syntax (CMS). It also describes the conventions for using these algorithms with CMS and the Digital Signature Algorithm (DSA), Rivest Shamir Adleman (RSA), and Elliptic Curve DSA (ECDSA) signature algorithms. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-smime-sha2-05.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-smime-sha2-05.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-4-29112004.I-D@ietf.org> --NextPart-- From CeliacogitateMeredith@craigslist.org Tue Apr 29 19:04:02 2008 Return-Path: X-Original-To: ietfarch-smime-archive@core3.amsl.com Delivered-To: ietfarch-smime-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3AE363A6C3F; Tue, 29 Apr 2008 19:04:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -35.651 X-Spam-Level: X-Spam-Status: No, score=-35.651 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DOS_OE_TO_MX=2.75, FH_RELAY_NODNS=1.451, FORGED_MUA_OUTLOOK=3.116, HS_OUTLOOK_MID_NOBRK=1, INVALID_MSGID=1.9, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_DSBL=0.961, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, STOX_REPLY_TYPE=0.001, SUBJ_ALL_CAPS=2.077, URIBL_BLACK=20, URIBL_SBL=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vdGW-sPeo--p; Tue, 29 Apr 2008 19:04:01 -0700 (PDT) Received: from user.coopoliva.com.ar (unknown [200.80.201.162]) by core3.amsl.com (Postfix) with SMTP id E786C3A67DB; Tue, 29 Apr 2008 19:03:59 -0700 (PDT) Message-ID: 228801c8aa66$74525cc0$a2c950c8@User From: "Kelli Crews" To: Subject: NO RISK! YOUR $2400 Date: Wed, 30 Apr 2008 04:03:06 -0100 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Your Winnings! Are waiting! http://shudjjiic.net.cn/ Big Money PAYS You to Have FUN! Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3TIU6dB092287 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 29 Apr 2008 11:30:06 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3TIU6t7092286; Tue, 29 Apr 2008 11:30:06 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mail.ietf.org (mail.ietf.org [IPv6:2001:1890:1112:1::20]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3TIU5Zt092269 for ; Tue, 29 Apr 2008 11:30:05 -0700 (MST) (envelope-from root@core3.amsl.com) Received: by core3.amsl.com (Postfix, from userid 0) id 782A93A6C08; Tue, 29 Apr 2008 11:30:01 -0700 (PDT) Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ietf-smime@imc.org From: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-smime-sha2-05.txt Message-Id: <20080429183001.782A93A6C08@core3.amsl.com> Date: Tue, 29 Apr 2008 11:30:01 -0700 (PDT) Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the S/MIME Mail Security Working Group of the IETF. Title : Using SHA2 Algorithms with Cryptographic Message Syntax Author(s) : S. Turner Filename : draft-ietf-smime-sha2-05.txt Pages : 10 Date : 2008-4-29 This document describes the conventions for using the Secure Hash Algorithm (SHA) message digest algorithms (SHA-224, SHA-256, SHA-384, SHA-512) with the Cryptographic Message Syntax (CMS). It also describes the conventions for using these algorithms with CMS and the Digital Signature Algorithm (DSA), Rivest Shamir Adleman (RSA), and Elliptic Curve DSA (ECDSA) signature algorithms. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-smime-sha2-05.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-smime-sha2-05.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-4-29112004.I-D@ietf.org> --NextPart-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3OGjA2G005621 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 24 Apr 2008 09:45:10 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3OGj9Eh005620; Thu, 24 Apr 2008 09:45:10 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from smtp106.biz.mail.re2.yahoo.com (smtp106.biz.mail.re2.yahoo.com [206.190.52.175]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m3OGj7qL005612 for ; Thu, 24 Apr 2008 09:45:08 -0700 (MST) (envelope-from turners@ieca.com) Received: (qmail 24748 invoked from network); 24 Apr 2008 16:44:57 -0000 Received: from unknown (HELO Wylie) (turners@ieca.com@71.191.11.170 with login) by smtp106.biz.mail.re2.yahoo.com with SMTP; 24 Apr 2008 16:44:56 -0000 X-YMail-OSG: OtUfNDwVM1leX7CmDffPXw.JvY2WOi2y1l1um8sBO9VLfCXZkhWCjR66ehdG8fX6tPRDxn8JEN_Wi8Rv5GASnYpiMmewlAXLMOSAug-- X-Yahoo-Newman-Property: ymail-3 From: "Turner, Sean P." To: "=?iso-8859-1?Q?'Alfred_H=CEnes'?=" , "Daniel Brown" , "'Ietf-Smime'" References: <200804240921.LAA27754@TR-Sys.de> Subject: RE: draft-ietf-smime-rfc3278-update-02 Date: Thu, 24 Apr 2008 12:41:47 -0400 Organization: IECA, Inc. Message-ID: <012201c8a62a$16f76b50$0301a8c0@Wylie> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 In-Reply-To: <200804240921.LAA27754@TR-Sys.de> Thread-Index: Acil+yEOq8jzoOllRiqOxdt145OA+gAInpZQ Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Alfred, Thanks for your review. All of you suggestions were incorporated. In addition to you suggestion, I also added normative references to X.681, RFC3370, RFC3565, RFC3852, and RFC5084 because we use/import ASN.1 from each of these documents. I also added an introductory paragraph before the ASN.1 module. All, Does anybody think it would be clearer to resubmit this to be a bis draft (i.e., obsolete 3278) instead of an update draft? Originally, the draft just updated the ECDSA 224-512 and SHA2 algorithms, but now it updates most of the sections in RFC3278. I think it might be clearer to just obsolete RFC3278. spt >-----Original Message----- >Hello, >I also have reviewed your I-D, draft-ietf-smime-rfc3278-update-02. > >Here are my suggestions for further improvements of this memo. > > >(1) Section 1 -- structure and headlines > >I recommend amending the section title to: > > 1. Introduction and Overview of Changes > >Below the first paragraph, I suggest to insert a subsection title: > > 1.1 Overview of Changes to RFC 3278 > >(Note: The IESG very much likes to see a section title in the >ToC linking the 'Updates' line in the front matter of the >document to the body of the text.) > >And then move the unnumbered section now located between the >Abstract and 'Discussion' to the end of the original Section, >as a new subsection: > > 1.2 Conventions Used in this Document Reshuffle and retitling done >(2) new Section 1.1 (now part of Section 1) > >I suggest to enhance the language in the bullets to improve >the readablitiy and precision of the text, as shown below. > >In particular, the repeated clause, > "... expands the options to the allowed algorithms to ..." >seems to be potentially unclear. I suggest to always use: > "... expands the set of allowed algorithms by adding ..." >or simply: > "... expands the set of allowed algorithms by ..." > >Also, I recommend to make consistent use of present tense. Agreed >In the bullet related to Section 8.1, "algorithms for ..." >should be changed to "algorithm identifiers for ...", and the >repeated use of "and" should be avoided to better represent >the logical grouping of the list given. Agreed >This leads to the following bullet-wise changes (using the log >form of above): > > - Paragraph 3.1.1 used SHA1 in the KDF with ECDH std and cofactor > methods. This document expands the options to the allowed > algorithms to SHA-224, SHA-256, SHA-384, and SHA-512. >--- > - Paragraph 3.1.1 used SHA1 in the KDF with ECDH std and cofactor >| methods. This document expands the set of allowed algorithms by >| adding SHA-224, SHA-256, SHA-384, and SHA-512. Fixed > - Paragraph 3.1.2 used SHA1 in the KDF with ECMQV. This document > expands the options to the allowed algorithms to SHA-224, SHA- > 256, SHA-384, and SHA-512. >--- > - Paragraph 3.1.2 used SHA1 in the KDF with ECMQV. This document >| expands the set of allowed algorithms by adding SHA-224, SHA-256, > SHA-384, and SHA-512. Fixed > - Paragraph 5 was update to include requirements for ... >--- vvv v > - Paragraph 5 is updated to include requirements for ... Fixed > - Paragraph 7 was update to include S/MIME capabilities ... >--- vvv v > - Paragraph 7 is updated to include S/MIME capabilities ... Fixed > - Paragraph 8.1 listed the algorithm identifiers for SHA-1 >and SHA-1 >| with ECDSA. This document adds algorithms for SHA-224, SHA-256, > vvv ^^^^^^^^^^ >| SHA-384, and SHA-512 and SHA-224, SHA-256, SHA-384, and SHA-512 > with ECDSA. This document also updates the list of algorithm > identifiers for ECDH std, ECDH cofactor, and ECMQV with SHA2 > algorithms as the KDF. >--- > - Paragraph 8.1 listed the algorithm identifiers for SHA-1 >and SHA-1 >| with ECDSA. This document adds algorithm identifiers >for SHA-224, >| SHA-256, SHA-384, and SHA-512 as well as SHA-224, SHA-256, SHA- > 384, and SHA-512 with ECDSA. This document also updates the list > of algorithm identifiers for ECDH std, ECDH cofactor, and ECMQV > with SHA2 algorithms as the KDF. Fixed >(3) Section 6 > >The second 'New' part seems to be overly complex, hiding the >relatively simple orthogonal structure of its content. >I suggest to remain more closely with the 'Old' style. > >Also, the clause "is not a complete list" is potentially >misleading and should better be rephrased. > >I suggest the following replacement text: > > New: > > The SMIMECapability value to indicate support for >| a) the standard ECDH key agreement algorithm, >| b) the cofactor ECDH key agreement algorithm, or >| c) the 1-Pass ECMWV key agreement algorithm >| is a SEQUENCE with the capabilityID field containing the object > identifier >| a) dhSingPass-stdDH-sha*kdf-scheme, >| b) dhSingPass-cofactorDH-sha*kdf-scheme, or >| c) mqvSinglePass-sha*kdf-scheme, >| respectively (where * is 1, 224, 256, 384, or 512) with the > parameters present. The parameters indicate the supported > key-encryption algorithm with the KeyWrapAlgorithm algorithm >| identifier. >| >| Example DER encodings that indicate some capabilities are as > follows (KA is key agreement, KDF is key derivation function, >| and Wrap is key wrap algorithm): > >... followed by the 3x3 = 9 examples already present in the >text, (without the two additional paragraphs of text). Fixed >(4) Section 7 > >(7a) 1st 'New': period missing at the end of the first paragraph. Fixed >(7b) 2nd 'New', last paragraph: s/is/are/ , giving: > "When the object identifiers ... are used within ..." Fixed >(5) Section 10 > >(5a) >Please give an indication of the ASN.1 version used, and add a >Reference to X.680. Fixed. Also added reference to X.681. >(5b) >As a service to the reader, I suggest to amend all FROM >clauses in the IMPORTS ASN.1 statement by an ASN.1 comment >stating the document (RFC) where the named ASN.1 module is defined. Added comments to indicate which document the imports come from. Since we imported the ASN.1 from 4 RFCs that weren't reference I also added normative references for RFC 3370, 3565, 3852, and 5084. >(5c) >In the first two extensible set definitions s/::/::=/ :-) Fixed Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3MHU92m059536 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 22 Apr 2008 10:30:09 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3MHU8Jc059535; Tue, 22 Apr 2008 10:30:08 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mail.ietf.org (mail.ietf.org [IPv6:2001:1890:1112:1::20]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3MHU8MV059526 for ; Tue, 22 Apr 2008 10:30:08 -0700 (MST) (envelope-from root@core3.amsl.com) Received: by core3.amsl.com (Postfix, from userid 0) id 3B0203A68F1; Tue, 22 Apr 2008 10:30:01 -0700 (PDT) Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ietf-smime@imc.org From: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-smime-rfc3278-update-02.txt Message-Id: <20080422173001.3B0203A68F1@core3.amsl.com> Date: Tue, 22 Apr 2008 10:30:01 -0700 (PDT) Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the S/MIME Mail Security Working Group of the IETF. Title : Update to Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS) Author(s) : S. Turner Filename : draft-ietf-smime-rfc3278-update-02.txt Pages : 27 Date : 2008-4-22 RFC 3278 describes how to use Elliptic Curve Cryptography (ECC) public-key algorithms in the Cryptographic Message Syntax (CMS). This document updates RFC 3278 to add support for the SHA2 family of hash algorithms. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-smime-rfc3278-update-02.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-smime-rfc3278-update-02.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-4-22102151.I-D@ietf.org> --NextPart-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3LGKd6Y090738 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 21 Apr 2008 09:20:39 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3LGKdbe090737; Mon, 21 Apr 2008 09:20:39 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from smtp100.biz.mail.re2.yahoo.com (smtp100.biz.mail.re2.yahoo.com [206.190.52.46]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m3LGKbep090721 for ; Mon, 21 Apr 2008 09:20:38 -0700 (MST) (envelope-from turners@ieca.com) Received: (qmail 65017 invoked from network); 21 Apr 2008 16:20:31 -0000 Received: from unknown (HELO Wylie) (turners@ieca.com@96.241.9.196 with login) by smtp100.biz.mail.re2.yahoo.com with SMTP; 21 Apr 2008 16:20:30 -0000 X-YMail-OSG: sSR0R6cVM1k2iMwWdGgErnOsUN8gKxLwx2iziHHtWtyelANO2C8ZdHPy3TEJefL5HYJx2KjPHdFXAvRLPRtIVjRn78KzW_9Snz1oxkl_h0YJ87c2VgbWCHyi X-Yahoo-Newman-Property: ymail-3 From: "Turner, Sean P." To: "'Ietf-Smime'" Subject: New ASN.1 modules comments/questions Date: Mon, 21 Apr 2008 12:17:39 -0400 Organization: IECA, Inc. Message-ID: <018301c8a3cb$38074bf0$0301a8c0@Wylie> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 Thread-Index: Acijyzeq0RMiwCJnRHiuFMdEY7uJtQ== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Jim and Paul, Here are some comments/questions on the ASN.1 modules. spt ------------------- The definitions of AlgorithmIdentifier in the PKIX and SMIME modules are different - is there a reason for the difference? Does it matter? In PKIX it's AlgorithmSet, in SMIME it's InfoObjectSet, in RFC2976 it's IOSet, in ANSI X9 docs it's also IOSet, and in X.509 it's SupportedAlgorithms. If it matters, then I guess I lean towards what's in RFC2976 since it's already in an RFC. ------------------- In the 3370 section, 1. Shouldn't AlgorithmIdentifier be imported from the PKIX module? 2. You used alg- as tag for hash algs, sig- for signature algs, kea- for key agreement algs, alg- for symmetric key encryption algs. I think it might be easier to figure out which algs go where if the tag matches the type of algorithm like mda- for MessageDigestAlgorithms, sa- for SignatureAlgorithms, and kaa- for KeyAgreementAlgorithms. 3. Could we change SymmetricKeyEncryptionAlgorithms to just KeyWrapAlgorithms and use kwa- as the tag? There's also a KeyWrapAlgorithm that I think is supposed to be the same as the SymmetricKeyEncryptionAlgorithms so one or the other can get deleted (if you delete the later change SupportKeyWrapAlgorithms to KeyWrapAlgorithms)? 4. Shouldn't SymmetricKeyEncryptionAlgorithms be extensible? 5. Do we need to add a MessageAuthenticationCodeAlgorithms for the hmac alg? Then we could use maca- in front of the hMAC-SHA1. 6. Some of the IOSets are {...} (like SignatureAlgorithms) while others lists algorithms (like MessageDigestAlgorithms) - shouldn't all of them list algorithms or none? ------------------- In the 3565 section, I think the algorithms need to be defined using the new syntax, import ALGORITHM, and define the algs as follows: ContentEncryptionAlgorithms ALGORITHM ::= { cea-aes128-cbc | cea-aes192-cbc | cea-aes256-cbc, ... -- Extensible } cea-aes128-cbc ALGORITHM ::= { OID id-aes128-CBC PARMS AES-IV } cea-aes192-cbc ALGORITHM ::= { OID id-aes192-CBC PARMS AES-IV } cea-aes256-cbc ALGORITHM ::= { OID id-aes256-CBC PARMS AES-IV } KeyWrapAlgorithms ALGORITHM ::= { kwa-aes128 | kwa-aes192 | kwa-aes256, ... -- Extensible } kwa-aes128 ALGORITHM ::= { OID id-aes128-wrap PARMS ABSENT } kwa-aes192 ALGORITHM ::= { OID id-aes192-wrap PARMS ABSENT } kwa-aes256 ALGORITHM ::= { OID id-aes256-wrap PARMS ABSENT } ------------------- In the 3851 section, shouldn't SMimeAttributeSet be extensible? r/{ attr-smimeCapabilities | attr-encrypKeyPref }/{ attr-smimeCapabilities | attr-encrypKeyPref, ... } ------------------- In the 3852 section, 1. OID for PKIX1 module doesn't match the new PKIX asn ID OID - I think it should be id-pkix-explict(19) instead of (18). 2. Are you going to remove the version notations [[3:, [[4:, etc? 3. For consistency with 3370, can we change DigestAlgorithmList to MessageDigestAlgorithms? 4. For consistency, can we change UnsigedAttributes to UnsignedAttributesSet and UnprotectedAttributes to UnprotectedAttribuesSet? 5. In AuthenticatedData, SupportedAttributes is used in AuthAttributes and UnauthAttributes. In AuthAttributes, can we change SupportAttributes to AuthAttributesSet and in UnauthAttributes can we change SupportedAttributes to UnauthAttributesSet? 6. For consistency with the 3370 section, can we change SignatureAlgorithmList to SignatureAlgorithms, DigestAlgorithmList to MessageDigestAlgorithms, KeyAgreementAlgorithmList to KeyAgreementAlgorithms, and ContentEncryptionAlgorithmLists to ContentEncryptionAlgorithms? 7. Can we change KeyDerivationAlgorithmIdentifier to use KeyDerivationAlgorithms instead of AlgorithmList? 8. Can we change MessageAuthenticationCodeAlgorithm to use MessageAuthenticationCodeAlgorithms instead of AlgorithmList? 9. Don't we want to define an OriginatorPKAlgorithms instead of using AlgorithmList in OriginatorPublicKey: OriginatorPublicKey ::= SEQUENCE { algorithm AlgorithmIdentifier {{OriginatorPKAlgorithms}}, publicKey BIT STRING } OriginatorPKAlgorithms ALGORITHM ::= { ... -- Extensible } 10. For consistency, can we change KeyEncryptionAlgorithmList to be KeyEncryptionAlgorithms? ------------------- In the 4108 section, can we make FirwareContentTypes and FirmwareSignedAttrs extensible? ------------------- In the 4998 section, 1. Shouldn't we constrain the digestAlgorithms and digestAlgorithm? 2. Should the import for Attribute come from PKIX or RFC3852 update module? 3. Why is Extensions and EXTENSION imported? ------------------- In the 5035 section, 1. Why is Extensions and EXTENSION imported? 2. Should the import for Attribute come from PKIX or RFC3852 update module? 3. OID for PKIX1 module doesn't match the new PKIX asn ID OID - I think it should be id-pkix-explict(19) instead of (18). 4. Should EssSignedAttributes be SignedAttributes? Should it also be extensible? 5. Should EssContentTypes be just ContentSet? 6. Is the note about the identical SecurityCategories encoding required anymore? 7. Shouldn't we say HashAlgorithms ::= MessageDigestAlgorithms instead of HashAlgorithms ::= AlgorithmIdentifier {{...}}? 8. Shouldn't we import the shaa256 alg? ------------------- In the 5084 section, we should import ALGORITHM from PKIX and define the algorithms as follows: ContentEncryptionAlgorithms ALGORITHM ::= { cea-aes128-ccm | cea-aes192-ccm | cea-aes256-ccm | cea-aes128-gcm | cea-aes128-gcm | cea-aes128-gcm, ... -- Extensible } cea-aes128-ccm ALGORITHM ::= { OID id-aes128-CCM PARMS CCMParameters } cea-aes192-ccm ALGORITHM ::= { OID id-aes192-CCM PARMS CCMParameters } cea-aes256-ccm ALGORITHM ::= { OID id-aes256-CCM PARMS CCMParameters } cea-aes128-gcm ALGORITHM ::= { OID id-aes128-GCM PARMS GCMParameters } cea-aes192-gcm ALGORITHM ::= { OID id-aes192-GCM PARMS GCMParameters } cea-aes256-gcm ALGORITHM ::= { OID id-aes256-GCM PARMS GCMParameters } Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3BD9hh9086715 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 11 Apr 2008 06:09:43 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m3BD9h40086714; Fri, 11 Apr 2008 06:09:43 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from [192.168.1.102] ([207.237.5.3]) (authenticated bits=0) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m3BD75qc086361 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 11 Apr 2008 06:07:06 -0700 (MST) (envelope-from phoffman@imc.org) Mime-Version: 1.0 Message-Id: In-Reply-To: <200804091904.m39J4Dj8084906@balder-227.proper.com> References: <016f01c89997$82122dc0$1b289386@jotop> <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> <200804091904.m39J4Dj8084906@balder-227.proper.com> Date: Fri, 11 Apr 2008 09:07:03 -0400 To: Russ Housley , Blake Ramsdell From: Paul Hoffman Subject: Re: AW: Content Type for XML Objects Cc: ietf-smime@imc.org Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: At 2:37 PM -0400 4/9/08, Russ Housley wrote: >Blake: > >> > The nice thing about S/MIME and PGP is that what's signed is >>"this string of >>> bits, exactly as is", without any need to perform impossible >>>manipulations on >>> it first like XMLdsig requires. >> >>One way to avoid this temptation is to just leave it as "throw a MIME >>Content-Type at the beginning of it with application/(something)+xml, mark it >>id-data and call it S/MIME". The overhead does not seem significant (just the >>additional header), and I don't know the utility of being able to identify it >>as XML at the outer CMS wrapper. > >I already proposed this before starting this thread. This is the >response I got: > >> Gah, please not MIME encoding. We already have to have ASN.1 and XML >> libraries, I don't want to have to add a MIME library too. > >As you can see, there is a strong preference to carry the XML object >directly in CMS. There are strong preferences all over on topics relating to XML. See the Apps Area mailing list, about once a year or so. FWIW, I agree with Blake. Using the outer wrapper to say "the bits inside this are serialized as XML" doesn't seem useful to the S/MIME processor. Let's not reinvent MIME in our OIDs if we don't need to. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m39KK8gX090249 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 13:20:08 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m39KK8Gi090248; Wed, 9 Apr 2008 13:20:08 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from ladle.sendmail.com (ladle.sendmail.com [209.246.26.53]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m39KK7BJ090241 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 9 Apr 2008 13:20:08 -0700 (MST) (envelope-from blake@sendmail.com) Received: from spork.sendmail.com (tls.sendmail.com [209.246.26.41]) by ladle.sendmail.com (Switch-3.3.1/Sentrion-3.0.0) with ESMTP id m39KMDTW017850 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 9 Apr 2008 13:22:13 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sendmail.com; s=ladle.dkim; t=1207772533; bh=mL7xG9sP5d5tVtu5XukRZGDsYNxNa+kAMaoD zUUB75Q=; h=Received:X-DKIM:DKIM-Signature:Date:From:To:Cc:Subject: Message-ID:References:MIME-Version:Content-Type: Content-Disposition:In-Reply-To:User-Agent:X-MM-Ex-RefId; b=gDuQMY 3jMMlY4gl5BDK+d4lKPz2GAXiPZOsNWnaQP1mj1/pSex2w+nqR0bQBobqXdzc9ez2SP ALV64/TgToW8OOdCWO8hXb4K+i3+CDkAFXgDvNqJ65jggparP6PSeIiUKYer4VOfEst qGWqqlSUrfdZ00b/jpKy3vq8xpdEiwg= Received: from blake-ramsdells-macbook-pro.local (c-24-17-217-200.hsd1.wa.comcast.net [24.17.217.200]) (authenticated bits=0) by spork.sendmail.com (Switch-3.3.1/Switch-3.3.2mp) with ESMTP id m39KJxiS023040 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 13:20:04 -0700 X-DKIM: Sendmail DKIM Filter v2.2.3 spork.sendmail.com m39KJxiS023040 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sendmail.com; s=spork.dkim; t=1207772405; bh=mL7xG9sP5d5tVtu5XukRZGDsYNxNa+kAMaoD zUUB75Q=; h=Date:From:To:Cc:Subject:Message-ID:References: MIME-Version:Content-Type:Content-Disposition:In-Reply-To: User-Agent:X-MM-Ex-RefId; b=GRKV7kOLTaSeeVgTJbN0Ws7KEPNCQv6ynEaXc4 d5f1PuD0vndSno+RtVXiIDaTNXKT0G2a447+1f/M4Iqk2kymbwTBx7Mi48DWfqxj7Tq 9vXV0bIr78fh+GPMC5+pYoJqe7kA0HJDLJXbJrsssKAXH0OxZuHbv4lH+y+imAC1fM= Date: Wed, 9 Apr 2008 13:17:51 -0700 From: Blake Ramsdell To: Russ Housley Cc: ietf-smime@imc.org Subject: Re: AW: Content Type for XML Objects Message-ID: <20080409201750.GA21969@blake-ramsdells-macbook-pro.local> References: <016f01c89997$82122dc0$1b289386@jotop> <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> <200804091904.m39J4FhD025280@fife.sendmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200804091904.m39J4FhD025280@fife.sendmail.com> User-Agent: Mutt/1.5.15 (2007-04-06) X-MM-Ex-RefId: 149371::080409132004-1AED8B90-63197609/0-0/0-1 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: On Wed, Apr 09, 2008 at 02:37:31PM -0400, Russ Housley wrote: > I already proposed this before starting this thread. This is the response I > got: > > > Gah, please not MIME encoding. We already have to have ASN.1 and XML > > libraries, I don't want to have to add a MIME library too. I would be very surprised to find a CMS implementation that didn't have at least a little bit of MIME in it. But the point is taken. Blake -- Blake Ramsdell | Sendmail, Inc. | http://www.sendmail.com Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m39J4EXq084923 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 12:04:14 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m39J4Ea3084922; Wed, 9 Apr 2008 12:04:14 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from woodstock.binhost.com (woodstock.binhost.com [8.8.40.152]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m39J4Dj8084906 for ; Wed, 9 Apr 2008 12:04:14 -0700 (MST) (envelope-from housley@vigilsec.com) Message-Id: <200804091904.m39J4Dj8084906@balder-227.proper.com> Received: (qmail 25723 invoked by uid 0); 9 Apr 2008 19:04:05 -0000 Received: from unknown (HELO THINKPADR52.vigilsec.com) (72.83.129.167) by woodstock.binhost.com with SMTP; 9 Apr 2008 19:04:05 -0000 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Wed, 09 Apr 2008 14:37:31 -0400 To: Blake Ramsdell From: Russ Housley Subject: Re: AW: Content Type for XML Objects Cc: ietf-smime@imc.org In-Reply-To: <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> References: <016f01c89997$82122dc0$1b289386@jotop> <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Blake: > > The nice thing about S/MIME and PGP is that what's signed is > "this string of > > bits, exactly as is", without any need to perform impossible > manipulations on > > it first like XMLdsig requires. > >One way to avoid this temptation is to just leave it as "throw a MIME >Content-Type at the beginning of it with application/(something)+xml, mark it >id-data and call it S/MIME". The overhead does not seem significant (just the >additional header), and I don't know the utility of being able to identify it >as XML at the outer CMS wrapper. I already proposed this before starting this thread. This is the response I got: > Gah, please not MIME encoding. We already have to have ASN.1 and XML > libraries, I don't want to have to add a MIME library too. As you can see, there is a strong preference to carry the XML object directly in CMS. Russ Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397igxQ027208 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 00:44:42 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m397igYu027207; Wed, 9 Apr 2008 00:44:42 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397iebr027193 for ; Wed, 9 Apr 2008 00:44:41 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 9F823187DD; Wed, 9 Apr 2008 19:44:39 +1200 (NZST) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8NxIPVbWGvJE; Wed, 9 Apr 2008 19:44:39 +1200 (NZST) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 2807E187DC; Wed, 9 Apr 2008 19:44:38 +1200 (NZST) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 0421119EC0B9; Wed, 9 Apr 2008 19:44:38 +1200 (NZST) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1JjUyz-0005NA-S7; Wed, 09 Apr 2008 19:44:37 +1200 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: blake@sendmail.com, pgut001@cs.auckland.ac.nz Subject: Re: AW: Content Type for XML Objects Cc: housley@vigilsec.com, ietf-smime@imc.org, joerg.schwenk@rub.de In-Reply-To: <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> Message-Id: Date: Wed, 09 Apr 2008 19:44:37 +1200 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Blake Ramsdell writes: >One way to avoid this temptation is to just leave it as "throw a MIME >Content-Type at the beginning of it with application/(something)+xml, mark it >id-data and call it S/MIME". The overhead does not seem significant (just the >additional header), and I don't know the utility of being able to identify it >as XML at the outer CMS wrapper. Actually if the decision does end up being made to go with a non-id-data OID, there's no reason why it has to be the same format as id-data. So instead of it being: Data ::= OCTET STRING make it: XmlData ::= SEQUENCE { version INTEGER (0), xmlInfo UTF8String, content OCTET STRING } where 'xmlInfo' is whatever's needed to process the 'content'. This does away with the need to stick a MIME header around the XML data, which is a bit of an artificial construct. It also avoids a problem where what's being created here is really a CMS type and not an S/MIME type, many CMS applications don't do S/MIME so they couldn't do much with a Content-Type. Or you could make the 'content' another UTF8String to make it explicit that the content is supposed to be text, but I'm not sure how much variation XML allows in its content, i.e. whether it would fall outside UTF8. The advantage of 'OCTET STRING' is that it lets you take the XML content exactly as you see it and encapsulate it within a CMS blob without any need for recoding. (The other advantage with the 'xmlInfo' out-of-band data is that it's then someone else's problem to standardise what goes in there, I'm not sure whether CMS/SMIME should have to define formatting standards for XML content). Peter. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397M9aq024854 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 00:22:10 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m397M9Zf024853; Wed, 9 Apr 2008 00:22:09 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from ladle.sendmail.com (ladle.sendmail.com [209.246.26.53]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397M9nu024845 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 9 Apr 2008 00:22:09 -0700 (MST) (envelope-from blake@sendmail.com) Received: from spork.sendmail.com (tls.sendmail.com [209.246.26.41]) by ladle.sendmail.com (Switch-3.3.1/Sentrion-3.0.0) with ESMTP id m397NuJq025021 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 9 Apr 2008 00:23:56 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sendmail.com; s=ladle.dkim; t=1207725836; bh=ItFgC5ZZQLNR0/ow7gZxaDt2rwYtmxEXwDVE nqpfooI=; h=Received:X-DKIM:DKIM-Signature:Date:From:To:Cc:Subject: Message-ID:References:MIME-Version:Content-Type: Content-Disposition:In-Reply-To:User-Agent:X-MM-Ex-RefId; b=udi9rJ gFo7kjGCTL1EVLVxIc4DS7SUTtl99mf3XoIB/BBJU6FR+BIwftsIuK365BCHajqr9WU whVXozGP/OORXFIE8PQtgqmDOAk0D+CSc1sPa57rjFpIDGqGV21m2QXKBEafn8U12sh /oTLRAy0Sh6nv7qPDExY/GSAQqERQ2E= Received: from blake-ramsdells-macbook-pro.local (c-24-17-217-200.hsd1.mn.comcast.net [24.17.217.200]) (authenticated bits=0) by spork.sendmail.com (Switch-3.3.1/Switch-3.3.2mp) with ESMTP id m397Libe017788 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 00:21:48 -0700 X-DKIM: Sendmail DKIM Filter v2.2.3 spork.sendmail.com m397Libe017788 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sendmail.com; s=spork.dkim; t=1207725710; bh=ItFgC5ZZQLNR0/ow7gZxaDt2rwYtmxEXwDVE nqpfooI=; h=Date:From:To:Cc:Subject:Message-ID:References: MIME-Version:Content-Type:Content-Disposition:In-Reply-To: User-Agent:X-MM-Ex-RefId; b=jiY1XKEOyiVq7pxMPgmklG/tkEY9aRU0FC+PyG xmQ6IWdNZWJ9XjZzEiXJBvIirzTh5CK0rvE1DizKBidiDnRUn/L3KPDuRP0yhUR8S+e JnMFVV4+p/MMPrXqIEBWy3jpebAJlfsEmlZVUB2izgif4elwKk10m8dsSV2W4jDHHY= Date: Wed, 9 Apr 2008 00:19:37 -0700 From: Blake Ramsdell To: Peter Gutmann Cc: housley@vigilsec.com, joerg.schwenk@rub.de, ietf-smime@imc.org Subject: Re: AW: Content Type for XML Objects Message-ID: <20080409071936.GA21859@blake-ramsdells-macbook-pro.local> References: <016f01c89997$82122dc0$1b289386@jotop> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.15 (2007-04-06) X-MM-Ex-RefId: 149371::080409002149-1AED8B90-09C7CE54/0-0/0-1 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: On Wed, Apr 09, 2008 at 06:31:03PM +1200, Peter Gutmann wrote: > The nice thing about S/MIME and PGP is that what's signed is "this string of > bits, exactly as is", without any need to perform impossible manipulations on > it first like XMLdsig requires. One way to avoid this temptation is to just leave it as "throw a MIME Content-Type at the beginning of it with application/(something)+xml, mark it id-data and call it S/MIME". The overhead does not seem significant (just the additional header), and I don't know the utility of being able to identify it as XML at the outer CMS wrapper. It also, of course, neatly sidesteps any issues relating to "the C word" since it is already steeped in current practice to just leave the poor guy's bits alone, as Peter points out. Blake -- Blake Ramsdell | Sendmail, Inc. | http://www.sendmail.com Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397Cfxp023439 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 00:12:41 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m397CfJu023438; Wed, 9 Apr 2008 00:12:41 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.174]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m397Ca5t023426 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 9 Apr 2008 00:12:37 -0700 (MST) (envelope-from ietf@augustcellars.com) Received: from GALATIONS (unknown [207.202.179.27]) by smtp4.pacifier.net (Postfix) with ESMTP id 624476A955; Wed, 9 Apr 2008 00:12:35 -0700 (PDT) From: "Jim Schaad" To: "'Peter Gutmann'" , , Cc: References: <016f01c89997$82122dc0$1b289386@jotop> In-Reply-To: Subject: RE: AW: Content Type for XML Objects Date: Wed, 9 Apr 2008 00:12:35 -0700 Message-ID: <01d201c89a11$163a2510$42ae6f30$@com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AciaC7MWOk3fsJQ2QrWNR4h+eSluQwAA+K1A Content-Language: en-us Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: I agree with at least part of what Peter said. This is the path that I think should be followed: 1. There should be one XML content type OID assigned. There are not multiple ways to encode XML at this point. 2. It should be determined a) We need an authenticated attribute to convey what the XML is and b) if the ContentHints attribute is If the answers are yes and no, then a new authenticated attribute should be created for this purpose. 3. For those people who want to continue using C14N algorithms on XML trees, they need to define one or more new hash algorithms that convert an XML tree into a binary number. These new hash algorithms would most likely take as a parameter one of the existing string to binary number hash algorithms we are familiar with today. Jim > -----Original Message----- > From: owner-ietf-smime@mail.imc.org [mailto:owner-ietf- > smime@mail.imc.org] On Behalf Of Peter Gutmann > Sent: Tuesday, April 08, 2008 11:31 PM > To: housley@vigilsec.com; joerg.schwenk@rub.de > Cc: ietf-smime@imc.org > Subject: Re: AW: Content Type for XML Objects > > > =?iso-8859-1?Q?J=F6rg_Schwenk?= writes: > > >- The problem now is that there are, up to my knowledge, at least two > >different C14N algorithms specified. So one OID will not do, because > it has > >to tell the signature verification function how to process the XML > data > >before hashing it. > > Argh, no, this is exactly the same mistake that XMLdsig makes, and (one > of) > the reasons why it's such a nightmare to implement (see > http://www.cs.auckland.ac.nz/~pgut001/pubs/xmlsec.txt for the short > form and > http://seattle.toorcon.org/2007/talks/bradhill.ppt for the version with > full > orchestration and five part harmony). > > The nice thing about S/MIME and PGP is that what's signed is "this > string of > bits, exactly as is", without any need to perform impossible > manipulations on > it first like XMLdsig requires. > > >To sum up: I think we need a different OID for each C14N algorithm. > > Only if we want to repeat XMLdsig's mistakes. This is a chance to fix > them, > not to perpetuate them. > > Peter. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m396VNH5019806 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 8 Apr 2008 23:31:23 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m396VNV7019805; Tue, 8 Apr 2008 23:31:23 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m396VHHN019783 for ; Tue, 8 Apr 2008 23:31:21 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 4F9CD18804; Wed, 9 Apr 2008 18:31:16 +1200 (NZST) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DST5e5s5KDfV; Wed, 9 Apr 2008 18:31:16 +1200 (NZST) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 50A5418629; Wed, 9 Apr 2008 18:31:15 +1200 (NZST) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 6BE0919EC0B9; Wed, 9 Apr 2008 18:31:03 +1200 (NZST) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1JjTpn-00021q-8q; Wed, 09 Apr 2008 18:31:03 +1200 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: housley@vigilsec.com, joerg.schwenk@rub.de Subject: Re: AW: Content Type for XML Objects Cc: ietf-smime@imc.org In-Reply-To: <016f01c89997$82122dc0$1b289386@jotop> Message-Id: Date: Wed, 09 Apr 2008 18:31:03 +1200 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: =?iso-8859-1?Q?J=F6rg_Schwenk?= writes: >- The problem now is that there are, up to my knowledge, at least two >different C14N algorithms specified. So one OID will not do, because it has >to tell the signature verification function how to process the XML data >before hashing it. Argh, no, this is exactly the same mistake that XMLdsig makes, and (one of) the reasons why it's such a nightmare to implement (see http://www.cs.auckland.ac.nz/~pgut001/pubs/xmlsec.txt for the short form and http://seattle.toorcon.org/2007/talks/bradhill.ppt for the version with full orchestration and five part harmony). The nice thing about S/MIME and PGP is that what's signed is "this string of bits, exactly as is", without any need to perform impossible manipulations on it first like XMLdsig requires. >To sum up: I think we need a different OID for each C14N algorithm. Only if we want to repeat XMLdsig's mistakes. This is a chance to fix them, not to perpetuate them. Peter. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m38IKGa1058478 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 8 Apr 2008 11:20:17 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m38IKGEW058477; Tue, 8 Apr 2008 11:20:16 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from woodstock.binhost.com (woodstock.binhost.com [8.8.40.152]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m38IKF5H058470 for ; Tue, 8 Apr 2008 11:20:16 -0700 (MST) (envelope-from housley@vigilsec.com) Message-Id: <200804081820.m38IKF5H058470@balder-227.proper.com> Received: (qmail 4195 invoked by uid 0); 8 Apr 2008 18:20:09 -0000 Received: from unknown (HELO THINKPADR52.vigilsec.com) (72.83.129.167) by woodstock.binhost.com with SMTP; 8 Apr 2008 18:20:09 -0000 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Tue, 08 Apr 2008 14:10:56 -0400 To: Jörg Schwenk From: Russ Housley Subject: Re: AW: Content Type for XML Objects Cc: In-Reply-To: <016f01c89997$82122dc0$1b289386@jotop> References: <20080404135441.B894E1421FD@laweleka.osafoundation.org> <200804041604.m34G4Brb018319@balder-227.proper.com> <016f01c89997$82122dc0$1b289386@jotop> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: 8bit Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Jörg: I agree with all of you observations, but I do not agree with your conclusion. When CMS is used to encapsulate a content, the content is carried as an OCTET STRING, so it is not altered. Canonicalization is not an issue. When CMS is used for a detached content, all of the canonicalization issues come out, but it is not the job of the content type to provide encoding rules. The detached content must be transferred in a manner that the same hash value can be computed. That cannot fall on the assignment of a CMS content type object identifier. Russ At 12:42 PM 4/8/2008, Jörg Schwenk wrote: >I think the problem is a little more complex: > >- If you have to (re-)compute a hash value, you need the bitwise identical >representation of the signed data. > >- ASN.1, MIME and XML have different methods how to guarantee this; In XML, >it is a process called canonicalization (C14N) that takes care e.g. of >linebreaks, but also of more complicated stuff like namespaces. > >- The problem now is that there are, up to my knowledge, at least two >different C14N algorithms specified. So one OID will not do, because it has >to tell the signature verification function how to process the XML data >before hashing it. > >- We also cannot rely on the XML data to carry this information: This is >e.g. not part of a simple XHTML document. > >To sum up: I think we need a different OID for each C14N algorithm. To start >with one is OK, but then the C14N variant must be fixed. > >Joerg > >-----Ursprüngliche Nachricht----- >Von: owner-ietf-smime@mail.imc.org [mailto:owner-ietf-smime@mail.imc.org] Im >Auftrag von Russ Housley >Gesendet: Freitag, 4. April 2008 18:04 >An: Lisa Dusseault >Cc: ietf-smime@imc.org; Chris.Newman@sun.com >Betreff: Re: Content Type for XML Objects > > >Lisa: > >IN CMS OIDs are used for many different things. OIDs are used to >identify algorithms, but they are also used to identify content >types. We have assigned OIDs for varios "protecting" content types >to allow layering of secuity envelopes, and we have assigned OIDs for >various contents. > >In the most common case (id-data), then content type does not say >anything. In S/MIME, this content type is used, and it really means >look inside for a MIME type. The MIME type then tells the >application how to handle the content. > >In the request that I have received, the XML object is being signed >directly. That is, there is no MIME encoding of the XML object prior >to signature. > >Russ > >At 11:39 AM 4/4/2008, Lisa Dusseault wrote: > >In apps, we've had the practice of defining different MIME types for > >different kinds of XML-formatted data. A custom MIME type can often > >tell you much more than just what the formatting is, of course. This > >is most frequently seen in documents that might be sent over HTTP, > >where filtering or dispatching (to a Web application, for example) can > >possibly be done on the MIME type alone. However there's always the > >fallback to application/xml which may or may not be allowed depending > >on the context. E.g. the W3C says that XHTML documents SHOULD be > >given the content type "application/html+xml" when returned to > >clients, although of course a Web server could return other XML > >documents as application/xml. > > > >The convention is to put "+xml" on the end of the MIME type -- I don't > >know if it's very common for implementations to use that convention to > >tell that the document is in XML even when the specific MIME type is > >not known. > > > >Whether this approach would be worth it in CMS as well, I can't tell. > >Looking at RFC2984, OIDs seem to be about cryptographic functions, not > >content objects. What am I missing? > > > >Lisa > > > >On Apr 4, 2008, at 6:54 AM, Russ Housley wrote: > > > >>I have received a request to assign an Object Identifier (OID) to be > >>used as a content type for XML objects. The idea is that one would > >>look inside the XML object to determine the type of XML object that > >>is being carried inside CMS. > >> > >>Is this the right thing to do? > >> > >>Would it be better to have a different content type for each XML > >>object? > >> > >>Would it be better to use id-data? > >> > >>Russ > > Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m38GhkxX049168 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 8 Apr 2008 09:43:46 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m38Ghkmg049167; Tue, 8 Apr 2008 09:43:46 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mx3.rz.ruhr-uni-bochum.de (mx3.rz.ruhr-uni-bochum.de [134.147.64.33]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m38GhhQG049134 for ; Tue, 8 Apr 2008 09:43:45 -0700 (MST) (envelope-from joerg.schwenk@rub.de) X-Queued: (qmail 12844 invoked from network); 8 Apr 2008 16:43:36 -0000 Received: from c2-3-4.rz.ruhr-uni-bochum.de (134.147.64.5) by mx3.rz.ruhr-uni-bochum.de with SMTP; 8 Apr 2008 16:43:36 -0000 X-Queued: (qmail 10711 invoked by uid 281); 8 Apr 2008 16:43:36 -0000 X-Qmailscanner: from 217.225.188.63 (mNHiDSxtQuVJ3Mxa9yfinw==@217.225.188.63) by c2-3-4.rz.ruhr-uni-bochum.de (envelope-from , uid 80) with qmail-scanner-2.01 (sophie: 3.05/2.71/4.27. Clear:RC:1(217.225.188.63):. Processed in 0.040385 secs); 08 Apr 2008 16:43:36 -0000 Received: from pd9e1bc3f.dip.t-dialin.net (HELO jotop) (mNHiDSxtQuVJ3Mxa9yfinw==@217.225.188.63) by c2-3-4.rz.ruhr-uni-bochum.de with (RC4-MD5 encrypted) SMTP; 8 Apr 2008 16:43:36 -0000 From: =?iso-8859-1?Q?J=F6rg_Schwenk?= To: "'Russ Housley'" Cc: References: <20080404135441.B894E1421FD@laweleka.osafoundation.org> <200804041604.m34G4Brb018319@balder-227.proper.com> Subject: AW: Content Type for XML Objects Date: Tue, 8 Apr 2008 18:42:17 +0200 Message-ID: <016f01c89997$82122dc0$1b289386@jotop> MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook 11 In-Reply-To: <200804041604.m34G4Brb018319@balder-227.proper.com> Content-Type: multipart/signed; boundary="----=_NextPart_000_016B_01C899A8.45288CE0"; protocol="application/x-pkcs7-signature"; micalg=SHA1 Thread-Index: AciWceD5T+bUUue6TIOOIwcRnT/mcQDGwOHw X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: This is a multi-part message in MIME format. ------=_NextPart_000_016B_01C899A8.45288CE0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I think the problem is a little more complex: - If you have to (re-)compute a hash value, you need the bitwise = identical representation of the signed data. - ASN.1, MIME and XML have different methods how to guarantee this; In = XML, it is a process called canonicalization (C14N) that takes care e.g. of linebreaks, but also of more complicated stuff like namespaces. - The problem now is that there are, up to my knowledge, at least two different C14N algorithms specified. So one OID will not do, because it = has to tell the signature verification function how to process the XML data before hashing it. - We also cannot rely on the XML data to carry this information: This is e.g. not part of a simple XHTML document. To sum up: I think we need a different OID for each C14N algorithm. To = start with one is OK, but then the C14N variant must be fixed. Joerg -----Urspr=FCngliche Nachricht----- Von: owner-ietf-smime@mail.imc.org = [mailto:owner-ietf-smime@mail.imc.org] Im Auftrag von Russ Housley Gesendet: Freitag, 4. April 2008 18:04 An: Lisa Dusseault Cc: ietf-smime@imc.org; Chris.Newman@sun.com Betreff: Re: Content Type for XML Objects Lisa: IN CMS OIDs are used for many different things. OIDs are used to=20 identify algorithms, but they are also used to identify content=20 types. We have assigned OIDs for varios "protecting" content types=20 to allow layering of secuity envelopes, and we have assigned OIDs for=20 various contents. In the most common case (id-data), then content type does not say=20 anything. In S/MIME, this content type is used, and it really means=20 look inside for a MIME type. The MIME type then tells the=20 application how to handle the content. In the request that I have received, the XML object is being signed=20 directly. That is, there is no MIME encoding of the XML object prior=20 to signature. Russ At 11:39 AM 4/4/2008, Lisa Dusseault wrote: >In apps, we've had the practice of defining different MIME types for >different kinds of XML-formatted data. A custom MIME type can often >tell you much more than just what the formatting is, of course. This >is most frequently seen in documents that might be sent over HTTP, >where filtering or dispatching (to a Web application, for example) can >possibly be done on the MIME type alone. However there's always the >fallback to application/xml which may or may not be allowed depending >on the context. E.g. the W3C says that XHTML documents SHOULD be >given the content type "application/html+xml" when returned to >clients, although of course a Web server could return other XML >documents as application/xml. > >The convention is to put "+xml" on the end of the MIME type -- I don't >know if it's very common for implementations to use that convention to >tell that the document is in XML even when the specific MIME type is >not known. > >Whether this approach would be worth it in CMS as well, I can't tell. >Looking at RFC2984, OIDs seem to be about cryptographic functions, not >content objects. What am I missing? > >Lisa > >On Apr 4, 2008, at 6:54 AM, Russ Housley wrote: > >>I have received a request to assign an Object Identifier (OID) to be >>used as a content type for XML objects. The idea is that one would >>look inside the XML object to determine the type of XML object that >>is being carried inside CMS. >> >>Is this the right thing to do? >> >>Would it be better to have a different content type for each XML >>object? >> >>Would it be better to use id-data? >> >>Russ > ------=_NextPart_000_016B_01C899A8.45288CE0 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGtzCCA1Mw ggK8oAMCAQICDgPYAAEAAuYuTmNUEqhuMA0GCSqGSIb3DQEBBAUAMIG8MQswCQYDVQQGEwJERTEQ MA4GA1UECBMHSGFtYnVyZzEQMA4GA1UEBxMHSGFtYnVyZzE6MDgGA1UEChMxVEMgVHJ1c3RDZW50 ZXIgZm9yIFNlY3VyaXR5IGluIERhdGEgTmV0d29ya3MgR21iSDEiMCAGA1UECxMZVEMgVHJ1c3RD ZW50ZXIgQ2xhc3MgMSBDQTEpMCcGCSqGSIb3DQEJARYaY2VydGlmaWNhdGVAdHJ1c3RjZW50ZXIu ZGUwHhcNMDcwNzAyMTA1MzUyWhcNMDgwODIxMTA1MzUyWjBKMQswCQYDVQQGEwJERTEWMBQGA1UE AxMNSm9lcmcgU2Nod2VuazEjMCEGCSqGSIb3DQEJARYUam9lcmcuc2Nod2Vua0BydWIuZGUwgZ8w DQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAL87hBfH2WpWbqzzSHa01D/EXd+mumSJaTjgMAq3Jzte NBcMZ0/0P9TSjc/CAXkFsaxrEHd+2ddr8rVMjgyL1ACJ8yYsSL0Xl2bYKPjxPBL1Hhj7Npn+Gx1I BRH23trbSlXYyyf23zBK9/zSaJCX1lrYOh9uABAh4lUayTWBLowTAgMBAAGjgcgwgcUwDAYDVR0T AQH/BAIwADAOBgNVHQ8BAf8EBAMCBeAwMwYJYIZIAYb4QgEIBCYWJGh0dHA6Ly93d3cudHJ1c3Rj ZW50ZXIuZGUvZ3VpZGVsaW5lczARBglghkgBhvhCAQEEBAMCBaAwXQYJYIZIAYb4QgEDBFAWTmh0 dHBzOi8vd3d3LnRydXN0Y2VudGVyLmRlL2NnaS1iaW4vY2hlY2stcmV2LmNnaS8wM0Q4MDAwMTAw MDJFNjJFNEU2MzU0MTJBODZFPzANBgkqhkiG9w0BAQQFAAOBgQAX7f7Uf+07c7YnZjsJAk8Vokbp RPyQmtjmuTjBGhmI3Bebt+KHiEc1IK0HsoXIygouWghdUf4wiz3rWPWPsHNhzUCpiL4R7tYr3BDI ntjOj91o67QETMR+zp840S7H4UyUiBYw3eZKMsUISOA7xV51knhlegxjUx/zmjLOsAMxXzCCA1ww ggLFoAMCAQICAgPpMA0GCSqGSIb3DQEBBAUAMIG8MQswCQYDVQQGEwJERTEQMA4GA1UECBMHSGFt YnVyZzEQMA4GA1UEBxMHSGFtYnVyZzE6MDgGA1UEChMxVEMgVHJ1c3RDZW50ZXIgZm9yIFNlY3Vy aXR5IGluIERhdGEgTmV0d29ya3MgR21iSDEiMCAGA1UECxMZVEMgVHJ1c3RDZW50ZXIgQ2xhc3Mg MSBDQTEpMCcGCSqGSIb3DQEJARYaY2VydGlmaWNhdGVAdHJ1c3RjZW50ZXIuZGUwHhcNOTgwMzA5 MTE1OTU5WhcNMTEwMTAxMTE1OTU5WjCBvDELMAkGA1UEBhMCREUxEDAOBgNVBAgTB0hhbWJ1cmcx EDAOBgNVBAcTB0hhbWJ1cmcxOjA4BgNVBAoTMVRDIFRydXN0Q2VudGVyIGZvciBTZWN1cml0eSBp biBEYXRhIE5ldHdvcmtzIEdtYkgxIjAgBgNVBAsTGVRDIFRydXN0Q2VudGVyIENsYXNzIDEgQ0Ex KTAnBgkqhkiG9w0BCQEWGmNlcnRpZmljYXRlQHRydXN0Y2VudGVyLmRlMIGfMA0GCSqGSIb3DQEB AQUAA4GNADCBiQKBgQCwKeu0drOu17ZbtF7nveOxnEkEV1uhq9l/Exv9umGr2Odx3y0AlF1RSH0j 73VihJA8Ch9ZEXQvjoCl/TACPSlSzXIaSSGcvMtSjkihY5bIEIUwaVd0RcBahsbVPeBoV30xaiSN RZc+MX5oZjJuJG3sMjbJQcrwMUTIo2HKG6A2HwIDAQABo2swaTAPBgNVHRMBAf8EBTADAQH/MA4G A1UdDwEB/wQEAwIBhjAzBglghkgBhvhCAQgEJhYkaHR0cDovL3d3dy50cnVzdGNlbnRlci5kZS9n dWlkZWxpbmVzMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG9w0BAQQFAAOBgQBPmVmFyGRWgsVv PdhGCS88UcGncFiBkhLq9NQWAJZecijn1jZfGpyvH8KDGrQFVZmmWFw3KPJXHutdv7HTRQ9yHAPS AMcsVdr+X4l2i+LUd/VNCRevxLqrMCtPuB3q2f9Z8FB0Rrpe6jaw65J7D1jaMuFSvSM3D/XzAEqu sF7ebjGCBAgwggQEAgEBMIHPMIG8MQswCQYDVQQGEwJERTEQMA4GA1UECBMHSGFtYnVyZzEQMA4G A1UEBxMHSGFtYnVyZzE6MDgGA1UEChMxVEMgVHJ1c3RDZW50ZXIgZm9yIFNlY3VyaXR5IGluIERh dGEgTmV0d29ya3MgR21iSDEiMCAGA1UECxMZVEMgVHJ1c3RDZW50ZXIgQ2xhc3MgMSBDQTEpMCcG CSqGSIb3DQEJARYaY2VydGlmaWNhdGVAdHJ1c3RjZW50ZXIuZGUCDgPYAAEAAuYuTmNUEqhuMAkG BSsOAwIaBQCgggKOMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA4 MDQwODE2NDIxN1owIwYJKoZIhvcNAQkEMRYEFP2bEfxhwAXGl3+B448ik5E5nwtZMGcGCSqGSIb3 DQEJDzFaMFgwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsO AwIHMA0GCCqGSIb3DQMCAgEoMAcGBSsOAwIaMAoGCCqGSIb3DQIFMIHgBgkrBgEEAYI3EAQxgdIw gc8wgbwxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdIYW1idXJnMRAwDgYDVQQHEwdIYW1idXJnMTow OAYDVQQKEzFUQyBUcnVzdENlbnRlciBmb3IgU2VjdXJpdHkgaW4gRGF0YSBOZXR3b3JrcyBHbWJI MSIwIAYDVQQLExlUQyBUcnVzdENlbnRlciBDbGFzcyAxIENBMSkwJwYJKoZIhvcNAQkBFhpjZXJ0 aWZpY2F0ZUB0cnVzdGNlbnRlci5kZQIOA9gAAQAC5i5OY1QSqG4wgeIGCyqGSIb3DQEJEAILMYHS oIHPMIG8MQswCQYDVQQGEwJERTEQMA4GA1UECBMHSGFtYnVyZzEQMA4GA1UEBxMHSGFtYnVyZzE6 MDgGA1UEChMxVEMgVHJ1c3RDZW50ZXIgZm9yIFNlY3VyaXR5IGluIERhdGEgTmV0d29ya3MgR21i SDEiMCAGA1UECxMZVEMgVHJ1c3RDZW50ZXIgQ2xhc3MgMSBDQTEpMCcGCSqGSIb3DQEJARYaY2Vy dGlmaWNhdGVAdHJ1c3RjZW50ZXIuZGUCDgPYAAEAAuYuTmNUEqhuMA0GCSqGSIb3DQEBAQUABIGA FPYWsxCRLz3iFdxrC4xJRhCNccH8KElysw9u0rUM24gUNV4AWUuLP8FUwnGhB+jIIlYPYpLF2ELj S+ZODsNgJ53Rzivs+e9RrOOYeDlAxdt46AQ2BXy0WmgUmrG2cyf0se+Nl9Moe2ICf11YP/SwNZGM dPyEh3VGnX8UrQnFm0gAAAAAAAA= ------=_NextPart_000_016B_01C899A8.45288CE0-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m358QWCV077997 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 5 Apr 2008 01:26:32 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m358QWj3077996; Sat, 5 Apr 2008 01:26:32 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m358QJc4077967; Sat, 5 Apr 2008 01:26:20 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id B78CB185BF; Sat, 5 Apr 2008 21:26:16 +1300 (NZDT) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BcXwd7i8YiR4; Sat, 5 Apr 2008 21:26:16 +1300 (NZDT) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 6758A185BB; Sat, 5 Apr 2008 21:26:13 +1300 (NZDT) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 048BC19EC0B9; Sat, 5 Apr 2008 21:26:03 +1300 (NZDT) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1Ji3is-0000rg-SN; Sat, 05 Apr 2008 21:26:02 +1300 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: pgut001@cs.auckland.ac.nz, simon@josefsson.org Subject: Re: S/MIME v3.2 IDs key size text Cc: blake@sendmail.com, housley@vigilsec.com, ietf-smime@imc.org, lists@drh-consultancy.demon.co.uk, phoffman@imc.org, turners@ieca.com In-Reply-To: <87bq4vrlr8.fsf@mocca.josefsson.org> Message-Id: Date: Sat, 05 Apr 2008 21:26:02 +1300 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Simon Josefsson writes: >What are the "stupid parameters" boundaries that you use? I'd like to >consider adopting something similar. Using values that someone else has >already tried appear less likely to introduce new problems. Hmm, I wound down the limits a bit more for the latest release (e.g. the maximum size of e has gone from 64 to 40 bits) so they haven't been as heavily tested as the previous version, but anyway here are some of them: For RSA: nLen >= MIN_PKCSIZE, nLen <= CRYPT_MAX_PKCSIZE e >= MIN_PUBLIC_EXPONENT, eLen < 40 bits. The latter check is to preclude DoS attacks due to ridiculously large e values. |p-q| > 128 bits Also for the key parameters in general: p, q < d ( d * e ) mod p-1 == 1 ( d * e ) mod q-1 == 1 ( q * u ) mod p == 1 gcd( ( p - 1 )( q - 1), e ) == 1 e1 < p, e2 < q For DLP-based PKCs: pLen >= MIN_PKCSIZE, pLen <= CRYPT_MAX_PKCSIZE. 2 <= g <= p - 2. PKCS #3 keys: g < 256. This isn't strictly necessary but use of g in DH typically sets g = 2, the only reason for setting it to a larger value is either stupidity or a deliberate DoS, neither of which we want to encourage. Non-PKCS #3 keys: g a generator of order q when the q parameter is present. FIPS 186/X9.42 use a g the same size as p so we can't limit the size. y < p If I've missed any checks, please let me know. (Ahh, sorry the constants in the above are various configurable values, I think the names make their function obvious). Peter. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m356kw4U072749 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 23:46:58 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m356kwWo072748; Fri, 4 Apr 2008 23:46:58 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m356kpGU072732; Fri, 4 Apr 2008 23:46:56 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id A61E818608; Sat, 5 Apr 2008 19:46:48 +1300 (NZDT) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TkJvJ9o2aBfA; Sat, 5 Apr 2008 19:46:48 +1300 (NZDT) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 634F118605; Sat, 5 Apr 2008 19:46:47 +1300 (NZDT) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 34FFC19EC0B9; Sat, 5 Apr 2008 19:46:45 +1300 (NZDT) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1Ji2An-0004SS-2n; Sat, 05 Apr 2008 19:46:45 +1300 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: lists@drh-consultancy.demon.co.uk, pgut001@cs.auckland.ac.nz Subject: Re: S/MIME v3.2 IDs key size text Cc: blake@sendmail.com, housley@vigilsec.com, ietf-smime@imc.org, phoffman@imc.org, turners@ieca.com In-Reply-To: <47F0D7B6.70506@drh-consultancy.demon.co.uk> Message-Id: Date: Sat, 05 Apr 2008 19:46:45 +1300 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Dr Stephen Henson writes: >Some implementations (by accident or design) restrict e to 32 bits in size. This is actually quite useful, although the limitation in the most widespread implementation that does this is more or less arbitrary (when they designed their key blob format they only left 32 bits for e) it's conveniently discouraged anyone from using large e values (well, almost anyone anyway, I once ran into an implementation from Germany that used a 32-bit e, but also encoded it incorrectly so anything over INT_MAX ended up negative), so it's fairly safe to require |e| to be < 32 bits for DoS-protection purposes. Peter. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34G4Dgw018326 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 09:04:13 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m34G4DMw018325; Fri, 4 Apr 2008 09:04:13 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from woodstock.binhost.com (woodstock.binhost.com [8.8.40.152]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m34G4Brb018319 for ; Fri, 4 Apr 2008 09:04:12 -0700 (MST) (envelope-from housley@vigilsec.com) Message-Id: <200804041604.m34G4Brb018319@balder-227.proper.com> Received: (qmail 20531 invoked by uid 0); 4 Apr 2008 16:04:07 -0000 Received: from unknown (HELO THINKPADR52.vigilsec.com) (72.83.129.167) by woodstock.binhost.com with SMTP; 4 Apr 2008 16:04:07 -0000 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Fri, 04 Apr 2008 12:04:09 -0400 To: Lisa Dusseault From: Russ Housley Subject: Re: Content Type for XML Objects Cc: ietf-smime@imc.org, Chris.Newman@sun.com In-Reply-To: References: <20080404135441.B894E1421FD@laweleka.osafoundation.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Lisa: IN CMS OIDs are used for many different things. OIDs are used to identify algorithms, but they are also used to identify content types. We have assigned OIDs for varios "protecting" content types to allow layering of secuity envelopes, and we have assigned OIDs for various contents. In the most common case (id-data), then content type does not say anything. In S/MIME, this content type is used, and it really means look inside for a MIME type. The MIME type then tells the application how to handle the content. In the request that I have received, the XML object is being signed directly. That is, there is no MIME encoding of the XML object prior to signature. Russ At 11:39 AM 4/4/2008, Lisa Dusseault wrote: >In apps, we've had the practice of defining different MIME types for >different kinds of XML-formatted data. A custom MIME type can often >tell you much more than just what the formatting is, of course. This >is most frequently seen in documents that might be sent over HTTP, >where filtering or dispatching (to a Web application, for example) can >possibly be done on the MIME type alone. However there's always the >fallback to application/xml which may or may not be allowed depending >on the context. E.g. the W3C says that XHTML documents SHOULD be >given the content type "application/html+xml" when returned to >clients, although of course a Web server could return other XML >documents as application/xml. > >The convention is to put "+xml" on the end of the MIME type -- I don't >know if it's very common for implementations to use that convention to >tell that the document is in XML even when the specific MIME type is >not known. > >Whether this approach would be worth it in CMS as well, I can't tell. >Looking at RFC2984, OIDs seem to be about cryptographic functions, not >content objects. What am I missing? > >Lisa > >On Apr 4, 2008, at 6:54 AM, Russ Housley wrote: > >>I have received a request to assign an Object Identifier (OID) to be >>used as a content type for XML objects. The idea is that one would >>look inside the XML object to determine the type of XML object that >>is being carried inside CMS. >> >>Is this the right thing to do? >> >>Would it be better to have a different content type for each XML >>object? >> >>Would it be better to use id-data? >> >>Russ > Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34Fdsf8016788 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 08:39:54 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m34FdskU016787; Fri, 4 Apr 2008 08:39:54 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from laweleka.osafoundation.org (laweleka.osafoundation.org [204.152.186.98]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34Fdpha016778 for ; Fri, 4 Apr 2008 08:39:53 -0700 (MST) (envelope-from lisa@osafoundation.org) Received: from localhost (laweleka.osafoundation.org [127.0.0.1]) by laweleka.osafoundation.org (Postfix) with ESMTP id 8ADC314220E; Fri, 4 Apr 2008 08:39:53 -0700 (PDT) X-Virus-Scanned: by amavisd-new and clamav at osafoundation.org Received: from laweleka.osafoundation.org ([127.0.0.1]) by localhost (laweleka.osafoundation.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NiqLNovmQL8u; Fri, 4 Apr 2008 08:39:47 -0700 (PDT) Received: from [192.168.1.101] (unknown [74.95.2.169]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by laweleka.osafoundation.org (Postfix) with ESMTP id 1833514220D; Fri, 4 Apr 2008 08:39:47 -0700 (PDT) Cc: ietf-smime@imc.org, Chris.Newman@sun.com Message-Id: From: Lisa Dusseault To: Russ Housley In-Reply-To: <20080404135441.B894E1421FD@laweleka.osafoundation.org> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Subject: Re: Content Type for XML Objects Date: Fri, 4 Apr 2008 08:39:43 -0700 References: <20080404135441.B894E1421FD@laweleka.osafoundation.org> X-Mailer: Apple Mail (2.919.2) Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: In apps, we've had the practice of defining different MIME types for different kinds of XML-formatted data. A custom MIME type can often tell you much more than just what the formatting is, of course. This is most frequently seen in documents that might be sent over HTTP, where filtering or dispatching (to a Web application, for example) can possibly be done on the MIME type alone. However there's always the fallback to application/xml which may or may not be allowed depending on the context. E.g. the W3C says that XHTML documents SHOULD be given the content type "application/html+xml" when returned to clients, although of course a Web server could return other XML documents as application/xml. The convention is to put "+xml" on the end of the MIME type -- I don't know if it's very common for implementations to use that convention to tell that the document is in XML even when the specific MIME type is not known. Whether this approach would be worth it in CMS as well, I can't tell. Looking at RFC2984, OIDs seem to be about cryptographic functions, not content objects. What am I missing? Lisa On Apr 4, 2008, at 6:54 AM, Russ Housley wrote: > I have received a request to assign an Object Identifier (OID) to be > used as a content type for XML objects. The idea is that one would > look inside the XML object to determine the type of XML object that > is being carried inside CMS. > > Is this the right thing to do? > > Would it be better to have a different content type for each XML > object? > > Would it be better to use id-data? > > Russ > Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34Ef7hX010669 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 07:41:09 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m34Ef7Dk010667; Fri, 4 Apr 2008 07:41:07 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (moe.its.auckland.ac.nz [130.216.12.35]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34Ef5r2010655 for ; Fri, 4 Apr 2008 07:41:06 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id F0DD44808D8; Sat, 5 Apr 2008 03:41:04 +1300 (NZDT) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (moe.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DJ7WqG-9m8iP; Sat, 5 Apr 2008 03:41:04 +1300 (NZDT) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 8DD1148085F; Sat, 5 Apr 2008 03:41:04 +1300 (NZDT) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id ECE6419EC0B9; Sat, 5 Apr 2008 03:41:02 +1300 (NZDT) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1Jhn6E-00080i-QW; Sat, 05 Apr 2008 03:41:02 +1300 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: housley@vigilsec.com, ietf-smime@imc.org Subject: Re: Content Type for XML Objects Cc: Chris.Newman@sun.com, lisa@osafoundation.org In-Reply-To: <200804041354.m34DsXIJ005953@balder-227.proper.com> Message-Id: Date: Sat, 05 Apr 2008 03:41:02 +1300 Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Russ Housley writes: >I have received a request to assign an Object Identifier (OID) to be used as >a content type for XML objects. The idea is that one would look inside the >XML object to determine the type of XML object that is being carried inside >CMS. > >Is this the right thing to do? One part of me wants to say "What makes XML so special that it should get its own content-type?". However if this is an attempt to clean up the XMLdsig mess then I'm all for it. >Would it be better to have a different content type for each XML object? > >Would it be better to use id-data? Redde Caesari quae sunt Caesaris. Have one overall XML content-type and then let the XML layer sort out what's actually in there. Peter. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m34DsYN4005960 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 4 Apr 2008 06:54:34 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m34DsYWW005959; Fri, 4 Apr 2008 06:54:34 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from woodstock.binhost.com (woodstock.binhost.com [8.8.40.152]) by balder-227.proper.com (8.14.2/8.14.2) with SMTP id m34DsXIJ005953 for ; Fri, 4 Apr 2008 06:54:34 -0700 (MST) (envelope-from housley@vigilsec.com) Message-Id: <200804041354.m34DsXIJ005953@balder-227.proper.com> Received: (qmail 25644 invoked by uid 0); 4 Apr 2008 13:54:28 -0000 Received: from unknown (HELO THINKPADR52.vigilsec.com) (72.83.129.167) by woodstock.binhost.com with SMTP; 4 Apr 2008 13:54:28 -0000 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Fri, 04 Apr 2008 09:54:26 -0400 To: ietf-smime@imc.org From: Russ Housley Subject: Content Type for XML Objects Cc: lisa@osafoundation.org, Chris.Newman@sun.com Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: I have received a request to assign an Object Identifier (OID) to be used as a content type for XML objects. The idea is that one would look inside the XML object to determine the type of XML object that is being carried inside CMS. Is this the right thing to do? Would it be better to have a different content type for each XML object? Would it be better to use id-data? Russ Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m31NIE4Y093229 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 1 Apr 2008 16:18:14 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m31NIEI9093228; Tue, 1 Apr 2008 16:18:14 -0700 (MST) (envelope-from owner-ietf-smime@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f Received: from mail.ietf.org (mail.ietf.org [IPv6:2001:1890:1112:1::20]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m31NIDTE093222 for ; Tue, 1 Apr 2008 16:18:14 -0700 (MST) (envelope-from root@core3.amsl.com) Received: by core3.amsl.com (Postfix, from userid 0) id 5A6923A6A94; Tue, 1 Apr 2008 16:15:01 -0700 (PDT) Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ietf-smime@imc.org From: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-smime-rfc3278-update-01.txt Message-Id: <20080401231501.5A6923A6A94@core3.amsl.com> Date: Tue, 1 Apr 2008 16:15:01 -0700 (PDT) Sender: owner-ietf-smime@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the S/MIME Mail Security Working Group of the IETF. Title : Update to Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS) Author(s) : S. Turner Filename : draft-ietf-smime-rfc3278-update-01.txt Pages : 9 Date : 2008-4-1 RFC 3278 describes how to use Elliptic Curve Cryptography (ECC) public-key algorithms in the Cryptographic Message Syntax (CMS). This document updates RFC 3278 to add support for the SHA2 family of hash algorithms. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-smime-rfc3278-update-01.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-smime-rfc3278-update-01.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-4-1161330.I-D@ietf.org> --NextPart--