From nobody Fri Nov 1 00:09:18 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C881312002E; Fri, 1 Nov 2019 00:09:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0NsDKNHpo7NR; Fri, 1 Nov 2019 00:09:11 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130048.outbound.protection.outlook.com [40.107.13.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46133120072; Fri, 1 Nov 2019 00:09:10 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Qkl9QFCOyO6AQwigM+R6veTRPMOZ/xub6t4uPmNKkXcdyiIvu0XBk6os/FO8HEtXtBlWD5ttLaut6hr3P9mx9YdMJCIaSk1LfW0xIlaeQpivbubRrjSCkbjejhnIe9s9eYttSlOIkgL1kvn6PNEd1iREghNKzrvYPZjZQZCrKSaN6GFMp2cpxnlVXeVnq/2AiSZ+QvDpqrKZQHjZzcvPyyB48ev7A6NnJh13rwCcymgyulgUDj8kN2ZodVDg+7BmpFNudgdS4vdGKFfIsqibp1/vaOInPDeIqlPkUR0/El0KAuC4Ux/v9L/BM9nNsXrOMnbZWg+KAOgOyc+lFH1KOA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=E6pGnW/nbwOs9crovYKj/Q9Z5CcEv7BLWi3u52Sdk8U=; b=d4vcPAKqr/NtyT8yC/Q39yq9ASMSDlhNrp+2xZxeCNGcLvqX0/V/WwBYmreV9lhpKxvJC9Wg3EbMnxuIxtwDsixlJ8oQHOkPrGNynoNtVP9Ei/6KTyOyjeWdeO6yVMwrtRyEYYOIiNb+4q5No69Wcqc+q2c6f427JE8VL6EpEmvHZ6eiJh9IDGbh3j1YGcJiHjs0j/xldzMLFlF1F3gPmEPNcwO+ERCK8q12ZX9Yvql72dU5VSwW2YMGAzSiYln2/rg5EJVH+GmQxel9Cx5U9dk2xKY1pwaXdtpAPaF+hSHA35IWgZvdsJ0hWhCIXdw+QmIVq6BNtI5cb/ZDcEFZJw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=E6pGnW/nbwOs9crovYKj/Q9Z5CcEv7BLWi3u52Sdk8U=; b=ECbDuDAaDtUrjfPVx88SODT6mhi6e98o5ycAdwIEd4jqA0pTA4TFtu/LqgdC+rB+r+cQ7pHqSkvKva0VJmGs64hH0WpNAayJjrUh95QFQGfhb8inuioWs20iVfjtrRGwgg6LZWlB9DhYao9Pb2bLfKVd4BluZIWOK+Pth09qAVE= Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB3067.eurprd07.prod.outlook.com (10.170.247.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.15; Fri, 1 Nov 2019 07:09:05 +0000 Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::5499:1231:e707:4cb7]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::5499:1231:e707:4cb7%7]) with mapi id 15.20.2408.024; Fri, 1 Nov 2019 07:09:05 +0000 From: Christer Holmberg To: Rifaat Shekh-Yusef CC: Christer Holmberg , "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-digest-scheme@ietf.org" , The IESG , SIPCORE , Alexey Melnikov Thread-Topic: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) Thread-Index: AQHVj+3+/XQWOAP0gUmCkUmQAngGd6d04liA///hPYCAACLmgIAAH3GA///5uYCAAClCgIAAHA2AgADDMwA= Date: Fri, 1 Nov 2019 07:09:04 +0000 Message-ID: <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [89.166.49.243] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e820fd84-e770-452c-5f3c-08d75e9a618d x-ms-traffictypediagnostic: HE1PR07MB3067: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 020877E0CB x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(396003)(346002)(136003)(366004)(376002)(18543002)(189003)(199004)(6306002)(236005)(54896002)(6486002)(6436002)(99286004)(86362001)(478600001)(316002)(229853002)(966005)(71200400001)(71190400001)(21615005)(6512007)(6916009)(11346002)(44832011)(76116006)(26005)(102836004)(36756003)(66556008)(64756008)(66446008)(4326008)(186003)(66946007)(2616005)(486006)(6506007)(53546011)(446003)(66476007)(6116002)(54906003)(3846002)(58126008)(76176011)(6246003)(66066001)(2906002)(14454004)(7736002)(256004)(14444005)(5660300002)(8936002)(81156014)(81166006)(8676002)(606006)(33656002)(5070765005)(476003)(25786009)(87000200001); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3067; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: fIFbUCJW+EFIXQeUaRvoYb7SuDxXnGhPzCaj3NInfHzg2pJKhzQKPqJbEWaSe5zyHd0hlVHVhGpeYD0B+2B9awX5g3+2nDHKNAtvbG32nHZfke3kXTo0tYTmXtkpifoog7mfETtWoGBaAPb5owZe3w7tBL2DdlPbpoBgLwnFaLRj4dg/WIzaKTr5WGBi8prqS7H305YoMjsEM48t/zbPNQolLWtqJXhnAhW1fhmQ42NavebLw14FD6DqO0N/jBfr6Gti7/iJxgGU94tSm/YRj4m9lVHrAuOm1RKIfo4CSfEAqrYfZgWIfoVwEdjBHYGpyC+we82nYwJGgGO/b9KFihYGyi2kfe0BWXlpHwx/BQENSjB5n+XpELuYr6grU7Kgm3MAwp0QK3WmEKJpw6EtdJmcJBc+3RkDAjcHsAu4mW+2/2kEzcMJkHOSyU4Di34odswvE4bfk3U80J178sJ+Hdk7swC5eDqMn44e3lbYN00= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_7D911FFD814F4DCFA13EC3E19A5D0EE5ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: e820fd84-e770-452c-5f3c-08d75e9a618d X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2019 07:09:04.9814 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: dYUVyz5InF8itnr/qxOm2SG92t7sMC472LxdnTgC3hWCOAJG9gDF+oicI4p7glh7iF4uRT7VsKNvkwoaox7NMqd7Mr3q4RjICnasABXsIwg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3067 Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 07:09:16 -0000 --_000_7D911FFD814F4DCFA13EC3E19A5D0EE5ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCj5JIGRvIG5vdCBoYXZlIGEgc3Ryb25nIG9waW5pb24gaGVyZS4NCj4NCj5Bbnlib2R5 IGhhcyBhbiBvcGluaW9uIG9yIHRob3VnaHRzIGFib3V0IGFkZGluZyBzdWNoIGEgdGV4dD8NCg0K SW4gYWRkaXRpb24gd2XigJlkIG9idmlvdXNseSBhbHNvIGNoYW5nZSB0aGUgQUJORiBiYWNrLCB0 byBhbGxvdyBlbXB0eSB2YWx1ZXMuDQoNClJlZ2FyZHMsDQoNCkNocmlzdGVyDQoNCg0KDQoNCk9u IFRodSwgT2N0IDMxLCAyMDE5IGF0IDE6NTAgUE0gQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVy LmhvbG1iZXJnQGVyaWNzc29uLmNvbTxtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24u Y29tPj4gd3JvdGU6DQpTb21ldGhpbmcgbGlrZSB0aGlzOg0KDQrigJxJbiBzb21lIGNhc2VzIGEg VUFDIG5lZWRzIHRvIGluY2x1ZGUgYW4gQXV0aG9yaXphdGlvbiBoZWFkZXIgZmllbGQgaW4gYSBy ZXF1ZXN0IGJlZm9yZSBpdCBoYXMgcmVjZWl2ZWQgYSBjaGFsbGVuZ2UsIGluIG9yZGVyIHRvIHBy b3ZpZGUgdXNlciBpbmZvcm1hdGlvbiAodXNpbmcgdGhlIOKAmHVzZXJpbmZv4oCZIGhlYWRlciBm aWVsZCBwYXJhbWV0ZXIpIHRoYXQgaXMgbmVlZGVkIGluIG9yZGVyIHRvIGNyZWF0ZSB0aGUgY2hh bGxlbmdlLiBBbiBleGFtcGxlIG9mIHN1Y2ggY2FzZSBpcyB3aGVuIHRoZSBIVFRQIERpZ2VzdCBB dXRoZW50aWNhdGlvbiBVc2luZyBBS0EgbWVjaGFuaXNtIChSRkMzMzEwKSAoUkZDNDE2OSkgaXMg dXNlZC4gSW4gc3VjaCBjYXNlIHRoZSBBdXRob3JpemF0aW9uIGhlYWRlciBmaWVsZCB3b3VsZCB0 eXBpY2FsbHkgbm90IGNvbnRhaW4gYSDigJhyZXNwb25zZeKAmSBoZWFkZXIgZmllbGQgcGFyYW1l dGVyIGJlZm9yZSBhIGNoYWxsZW5nZSByZXNwb25zZSBpcyBwcm92aWRlZC4gSG93ZXZlciwgZm9y IHRoZSBJUCBNdWx0aW1lZGlhIFN1YnN5c3RlbSAoSU1TKSBpdCBoYXMgYmVlbiBzcGVjaWZpZWQg dGhhdCB0aGUgQXV0aG9yaXphdGlvbiBoZWFkZXIgZmllbGQgaW4gc3VjaCBjYXNlIGRvZXMgY29u dGFpbiBhICDigJhyZXNwb25zZeKAmSBoZWFkZXIgZmllbGQgcGFyYW1ldGVyLCB3aXRoIGFuIGVt cHR5IHZhbHVlIChlbXB0eSBzdHJpbmcpLiBGb3IgdGhhdCByZWFzb24gdGhlIG1vZGlmaWVkIHJl cXVlc3QtZGlnZXN0IEFCTkYgYWxsb3dzIHN1Y2ggZW1wdHkgdmFsdWVzLuKAnQ0KDQpSZWdhcmRz LA0KDQpDaHJpc3Rlcg0KDQoNCkZyb206IFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0LmlldGZA Z21haWwuY29tPG1haWx0bzpyaWZhYXQuaWV0ZkBnbWFpbC5jb20+Pg0KRGF0ZTogVGh1cnNkYXks IDMxIE9jdG9iZXIgMjAxOSBhdCAxOS4yMg0KVG86IENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rl ci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29u LmNvbT4+DQpDYzogQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnPTQwZXJpY3Nz b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9y Zz4+LCAic2lwY29yZS1jaGFpcnNAaWV0Zi5vcmc8bWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYu b3JnPiIgPHNpcGNvcmUtY2hhaXJzQGlldGYub3JnPG1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRm Lm9yZz4+LCAiZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc8bWFpbHRv OmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnPiIgPGRyYWZ0LWlldGYt c2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUt ZGlnZXN0LXNjaGVtZUBpZXRmLm9yZz4+LCAiaWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRm Lm9yZz4iIDxpZXNnQGlldGYub3JnPG1haWx0bzppZXNnQGlldGYub3JnPj4sICJzaXBjb3JlQGll dGYub3JnPG1haWx0bzpzaXBjb3JlQGlldGYub3JnPiIgPHNpcGNvcmVAaWV0Zi5vcmc8bWFpbHRv OnNpcGNvcmVAaWV0Zi5vcmc+PiwgQWxleGV5IE1lbG5pa292IDxhYW1lbG5pa292QGZhc3RtYWls LmZtPG1haWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtPj4NClN1YmplY3Q6IFJlOiBbc2lwY29y ZV0gQWxleGV5IE1lbG5pa292J3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtc2lwY29yZS1k aWdlc3Qtc2NoZW1lLTEyOiAod2l0aCBDT01NRU5UKQ0KDQpDYW4geW91IHByb3Bvc2Ugc29tZSB0 ZXh0Pw0KDQpUaGFua3MsDQogUmlmYWF0DQoNCg0KT24gVGh1LCBPY3QgMzEsIDIwMTkgYXQgMTE6 NDQgQU0gQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTxt YWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPj4gd3JvdGU6DQpIaSwNCg0KUGVy aGFwcyB3ZSBjb3VsZCBhZGQgc29tZSB0ZXh0IGFib3V0IHRoZSBJTVMgdXNlLWNhc2UsIGluIG9y ZGVyIHRvIGV4cGxhaW4gdGhlIGVtcHR5IHZhbHVlPw0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0K DQpGcm9tOiBzaXBjb3JlIDxzaXBjb3JlLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnNpcGNvcmUt Ym91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZiBDaHJpc3RlciBIb2xtYmVyZyA8Y2hyaXN0 ZXIuaG9sbWJlcmc9NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOjQwZXJpY3Nz b24uY29tQGRtYXJjLmlldGYub3JnPj4NCkRhdGU6IFRodXJzZGF5LCAzMSBPY3RvYmVyIDIwMTkg YXQgMTUuNTINClRvOiBSaWZhYXQgU2hla2gtWXVzZWYgPHJpZmFhdC5pZXRmQGdtYWlsLmNvbTxt YWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tPj4NCkNjOiAic2lwY29yZS1jaGFpcnNAaWV0Zi5v cmc8bWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYub3JnPiIgPHNpcGNvcmUtY2hhaXJzQGlldGYu b3JnPG1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZz4+LCAiZHJhZnQtaWV0Zi1zaXBjb3Jl LWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qt c2NoZW1lQGlldGYub3JnPiIgPGRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYu b3JnPG1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZz4+LCAi aWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRmLm9yZz4iIDxpZXNnQGlldGYub3JnPG1haWx0 bzppZXNnQGlldGYub3JnPj4sICJzaXBjb3JlQGlldGYub3JnPG1haWx0bzpzaXBjb3JlQGlldGYu b3JnPiIgPHNpcGNvcmVAaWV0Zi5vcmc8bWFpbHRvOnNpcGNvcmVAaWV0Zi5vcmc+PiwgQWxleGV5 IE1lbG5pa292IDxhYW1lbG5pa292QGZhc3RtYWlsLmZtPG1haWx0bzphYW1lbG5pa292QGZhc3Rt YWlsLmZtPj4NClN1YmplY3Q6IFJlOiBbc2lwY29yZV0gQWxleGV5IE1lbG5pa292J3MgTm8gT2Jq ZWN0aW9uIG9uIGRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLTEyOiAod2l0aCBDT01N RU5UKQ0KDQpIaSwNCg0KPlRoaXMgSU1TIGJlaGF2aW9yIHdvdWxkIGhhdmUgYmVlbiBpbiB2aW9s YXRpb24gb2YgUkZDMzI2MSB3aGljaCBzcGVjaWZpZWQgZXhhY3RseSAzMiBIZXggY2hhcmFjdGVy cy4NCj5TbywgdGhpcyBjaGFuZ2Ugc2hvdWxkIG5vdCBtYWtlIG11Y2ggb2YgYSBkaWZmZXJlbmNl IGluIHRoaXMgY2FzZS4NCg0KSW4gcmVhbGl0eSBpdCBwcm9iYWJseSBkb2VzbuKAmXQgbWFrZSBh IGRpZmZlcmVuY2UsIGJ1dCBpdCB3b3VsZCBtYWtlIHRoZSBJTVMgcHJvY2VkdXJlcyDigJxhbGln bmVk4oCdIHdpdGggdGhlIElFVEYgc3BlYy4NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXINCg0KDQoN Cg0KT24gVGh1LCBPY3QgMzEsIDIwMTkgYXQgOTozNyBBTSBDaHJpc3RlciBIb2xtYmVyZyA8Y2hy aXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPG1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmlj c3Nvbi5jb20+PiB3cm90ZToNCg0KSGksDQoNClRoZSByZWFzb24gZm9yIHRoZSBlbXB0eSB2YWx1 ZSBjb21lcyBmcm9tIElNUyBhbmQgQUtBLCB3aGVyZSB5b3UgbmVlZCB0byBpbmNsdWRlIHRoZSB1 c2VyIGlkIGFscmVhZHkgaW4gdGhlIGluaXRpYWwgUkVHSVNURVIgcmVxdWVzdCAodGhpcyBzZWVt cyB0byBiZSBtaXNzaW5nIGZyb20gUkZDIDMzMTAsIGJ1dCB0aGF04oCZcyBhIHNlcGFyYXRlIHRv cGljKSBpbiBvcmRlciBmb3IgdGhlIHNlcnZlciB0byBjcmVhdGUgdGhlIGNoYWxsZW5nZSwgIG1l YW5pbmcgdGhhdCBpbiB0aGUgaW5pdGlhbCBSRUdJU1RFUiByZXF1ZXN0IHlvdSBpbmNsdWRlIGFu IEF1dGhvcml6YXRpb24gaGVhZGVyIGZpZWxkIHdpdGggdGhlIHVzZXJuYW1lIHBhcmFtZXRlciBj YXJyeWluZyB0aGUgSU1TIHByaXZhdGUgdXNlciBpZGVudGl0eSwgdGhlIHJlYWxtIHBhcmFtZXRl ciBhbmQgdGhlIHVyaSBwYXJhbWV0ZXIuIEF0IHRoaXMgcG9pbnQgeW91IG9idmlvdXNseSBkb27i gJl0IHlldCBoYXZlIHRoZSByZXNwb25zZSwgc28gaW4gSU1TIGl0IGlzIHNwZWNpZmllZCB0aGF0 IHRoZSByZXNwb25zZSBwYXJhbWV0ZXIgaXMgaW5zZXJ0ZWQgd2l0aCBhbiBlbXB0eSB2YWx1ZS4N Cg0KV0hZIGl0IHdhcyBzcGVjaWZpZWQgdGhhdCB3YXkgKGluc3RlYWQgb2Ygc2ltcGx5IG5vdCBp bmNsdWRpbmcgdGhlIHJlc3BvbnNlIHBhcmFtZXRlcikgSSBkb27igJl0IGtub3csIGJ1dCBJIGRv IGtub3cgdGhhdCBpdCBoYXMgYmVlbiBpbXBsZW1lbnRlZCBhbmQgZGVwbG95ZWQgdGhhdCB3YXkg Zm9yIG1hbnkgeWVhcnMuDQoNClJlZ2FyZHMsDQoNCkNocmlzdGVyDQoNCg0KRnJvbTogc2lwY29y ZSA8c2lwY29yZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpzaXBjb3JlLWJvdW5jZXNAaWV0Zi5v cmc+PiBvbiBiZWhhbGYgb2YgUmlmYWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5j b208bWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNvbT4+DQpEYXRlOiBUaHVyc2RheSwgMzEgT2N0 b2JlciAyMDE5IGF0IDE1LjIwDQpUbzogQWxleGV5IE1lbG5pa292IDxhYW1lbG5pa292QGZhc3Rt YWlsLmZtPG1haWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtPj4NCkNjOiAic2lwY29yZS1jaGFp cnNAaWV0Zi5vcmc8bWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYub3JnPiIgPHNpcGNvcmUtY2hh aXJzQGlldGYub3JnPG1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZz4+LCAiZHJhZnQtaWV0 Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtc2lwY29y ZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnPiIgPGRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2No ZW1lQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRm Lm9yZz4+LCAiaWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRmLm9yZz4iIDxpZXNnQGlldGYu b3JnPG1haWx0bzppZXNnQGlldGYub3JnPj4sICJzaXBjb3JlQGlldGYub3JnPG1haWx0bzpzaXBj b3JlQGlldGYub3JnPiIgPHNpcGNvcmVAaWV0Zi5vcmc8bWFpbHRvOnNpcGNvcmVAaWV0Zi5vcmc+ Pg0KU3ViamVjdDogUmU6IFtzaXBjb3JlXSBBbGV4ZXkgTWVsbmlrb3YncyBObyBPYmplY3Rpb24g b24gZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6ICh3aXRoIENPTU1FTlQpDQoN CkRvbmUuDQoNCk9uIFRodSwgT2N0IDMxLCAyMDE5IGF0IDk6MTMgQU0gQWxleGV5IE1lbG5pa292 IDxhYW1lbG5pa292QGZhc3RtYWlsLmZtPG1haWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtPj4g d3JvdGU6DQpPbiBUaHUsIE9jdCAzMSwgMjAxOSwgYXQgMToxMSBQTSwgUmlmYWF0IFNoZWtoLVl1 c2VmIHdyb3RlOg0KSGkgQWxleGV5LA0KDQpJIGFtIGZpbmUgd2l0aCBQYXVsJ3Mgc3VnZ2VzdGlv bi4NCkFyZSB5b3Ugb2sgd2l0aCAiMzIqTEhFWCI/DQpZZXMhDQoNClRoYW5rIHlvdSwNCkFsZXhl eQ0KDQpSZWdhcmRzLA0KIFJmYWF0DQoNCg0KT24gVGh1LCBPY3QgMzEsIDIwMTkgYXQgNzoyMiBB TSBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVsbmlrb3ZAZmFzdG1haWwuZm08bWFpbHRvOmFhbWVsbmlr b3ZAZmFzdG1haWwuZm0+PiB3cm90ZToNCg0KSGkgUmlmYWF0LA0KDQpPbiBXZWQsIE9jdCAzMCwg MjAxOSwgYXQgOTo1MCBQTSwgUmlmYWF0IFNoZWtoLVl1c2VmIHdyb3RlOg0KVGhhbmtzIEFsZXhl eSENCg0KSSBhbSBmaW5lIHdpdGggdGhlIGZpcnN0IHR3byBjb21tZW50cywgYW5kIHdpbGwgZml4 IHRoZXNlIGluIHRoZSBjb21pbmcgdmVyc2lvbiBvZiB0aGUgZG9jdW1lbnQuDQoNCkkgYW0gbm90 IHN1cmUgSSBmb2xsb3cgdGhlIDNyZCBvbmUuIFdoeSBkbyB5b3Ugc2VlIHRoZSBuZWVkIGZvciBh IG1pbmltdW0gbnVtYmVyIG9mIGhleCBkaWdpdHM/DQpZb3UgZG8gc2F5IHRoYXQgdGhlIG51bWJl ciBvZiBoZXggZGlnaXRzIG1hdGNoIHRoZSBoYXNoIGxlbmdodCwgc28gaXQgaXMgcHJvYmFibHkg T2suIEhvd2V2ZXIgZW1wdHkgdmFsdWUgaXMgbmV2ZXIgdmFsaWQgKGFuZCBJIGFtIHdvcnJpZWQg aXQgbWlnaHQgaGl0IHNvbWUgYm91bmRhcnkgY29uZGl0aW9uIGJ1ZyBpbiBpbXBsZW1lbnRhdGlv bnMpLCBzbyBwcm9oaWJpdGluZyBpdCBpbiBBQk5GIHdvdWxkIGJlIHRoZSBiZXN0Lg0KDQpCZXN0 IFJlZ2FyZHMsDQpBbGV4ZXkNCg0KUmVnYXJkcywNCiBSaWZhYXQNCg0KDQoNCk9uIFdlZCwgT2N0 IDMwLCAyMDE5IGF0IDE6MTYgUE0gQWxleGV5IE1lbG5pa292IHZpYSBEYXRhdHJhY2tlciA8bm9y ZXBseUBpZXRmLm9yZzxtYWlsdG86bm9yZXBseUBpZXRmLm9yZz4+IHdyb3RlOg0KQWxleGV5IE1l bG5pa292IGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KZHJh ZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6IE5vIE9iamVjdGlvbg0KDQpXaGVuIHJl c3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBseSB0 byBhbGwNCmVtYWlsIGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8gYW5kIENDIGxpbmVzLiAo RmVlbCBmcmVlIHRvIGN1dCB0aGlzDQppbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikN Cg0KDQpQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQv ZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQpmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJ U0NVU1MgYW5kIENPTU1FTlQgcG9zaXRpb25zLg0KDQoNClRoZSBkb2N1bWVudCwgYWxvbmcgd2l0 aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCmh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLw0K DQoNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLQ0KQ09NTUVOVDoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KSSBhbSBhZ3Jl ZWluZyB3aXRoIEFsaXNzYSdzIERJU0NVU1MuDQoNCkFsc28sIEkgaGF2ZSBhIGZldyBjb21tZW50 cyBvZiBteSBvd246DQoNCjEpIExhc3QgcGFyYSBvZiBTZWN0aW9uIDIuMToNCg0KMi4xLiAgSGFz aCBBbGdvcml0aG1zDQoNCiAgIEEgVUFTIHByaW9yaXRpemVzIHdoaWNoIGFsZ29yaXRobSB0byB1 c2UgYmFzZWQgb24gdGhlIG9yZGVyaW5nIG9mIHRoZQ0KICAgY2hhbGxlbmdlIGhlYWRlciBmaWVs ZHMgaW4gdGhlIHJlc3BvbnNlIGl0IGlzIHByZXBhcmluZy4NCg0KVGhpcyBsb29rcyBlaXRoZXIg d3Jvbmcgb3IgY29uZnVzaW5nIHRvIG1lLiBJIHRoaW5rIHlvdSBhcmUganVzdCBzYXlpbmcgaGVy ZQ0KdGhhdCB0aGUgb3JkZXIgaXMgZGVjaWRlZCBieSB0aGUgc2VydmVyIGF0IHRoaXMgcG9pbnQu DQoNCiAgIFRoYXQNCiAgIHByb2Nlc3MgaXMgc3BlY2lmaWVkIGluIHNlY3Rpb24gMi4zIGFuZCBw YXJhbGxlbHMgdGhlIHByb2Nlc3MgdXNlZCBpbg0KICAgSFRUUCBzcGVjaWZpZWQgYnkgW1JGQzc2 MTZdLg0KDQpTbyBiYXNlZCBvbiB0aGUgYWJvdmUsIG15IHN1Z2dlc3RlZCByZXBsYWNlbWVudCBm b3IgYm90aCBzZW50ZW5jZXM6DQoNCiAgIEEgVUFTIHByaW9yaXRpemVzIHdoaWNoIGFsZ29yaXRo bSB0byB1c2UgYmFzZWQgb24gaXRzIHBvbGljeSwNCiAgIHdoaWNoIGlzIHNwZWNpZmllZCBpbiBz ZWN0aW9uIDIuMyBhbmQgcGFyYWxsZWxzIHRoZSBwcm9jZXNzIHVzZWQgaW4NCiAgIEhUVFAgc3Bl Y2lmaWVkIGJ5IFtSRkM3NjE2XS4NCg0KMikgTGFzdCBwYXJhIG9mIFNlY3Rpb24gMi40Og0KDQog ICBJZiB0aGUgVUFDIGNhbm5vdCByZXNwb25kIHRvIGFueSBvZiB0aGUgY2hhbGxlbmdlcyBpbiB0 aGUgcmVzcG9uc2UsDQogICB0aGVuIGl0IFNIT1VMRCBhYmFuZG9uIGF0dGVtcHRzIHRvIHNlbmQg dGhlIHJlcXVlc3QgdW5sZXNzIGEgbG9jYWwNCiAgIHBvbGljeSBkaWN0YXRlcyBvdGhlcndpc2Uu DQoNCklzIHRyeWluZyBvdGhlciBub24gRGlnZXN0IGFsZ29yaXRobXMgY292ZXJlZCBieSAiU0hP VUxEIGFiYW5kb24iPw0KSWYgeWVzLCBtYXliZSB5b3Ugc2hvdWxkIG1ha2UgdGhpcyBjbGVhcmVy Lg0KDQogICBGb3IgZXhhbXBsZSwgaWYgdGhlIFVBQyBkb2VzIG5vdCBoYXZlDQogICBjcmVkZW50 aWFscyBvciBoYXMgc3RhbGUgY3JlZGVudGlhbHMgZm9yIGFueSBvZiB0aGUgcmVhbG1zLCB0aGUg VUFDDQogICB3aWxsIGFiYW5kb24gdGhlIHJlcXVlc3QuDQoNCjMpIEluIFNlY3Rpb24gMi43Og0K DQogICAgICByZXF1ZXN0LWRpZ2VzdCA9IExEUVVPVCAqTEhFWCBSRFFVT1QNCg0KVGhpcyBub3cg YWxsb3dzIGVtcHR5IHZhbHVlLiBJIHN1Z2dlc3QgeW91IHNwZWNpZnkgYSBtaW5pbXVtIG51bWJl ciBvZiBoZXgNCmRpZ2l0cyBhbGxvd2VkIGluIHRoZSBBQk5GLiBPciBhdCBsZWFzdCBjaGFuZ2Ug IipMSEVYIiB0byAiMipMSEVYIi4NCg0KDQoNCg0K --_000_7D911FFD814F4DCFA13EC3E19A5D0EE5ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <1885863A464B034F895BBC1B6E191207@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNv bm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6 bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowY207 DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGNtOw0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAu ODVwdCAyLjBjbSA3MC44NXB0IDIuMGNtO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkZJIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkhp LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIj4mZ3Q7SSBkbyBub3QgaGF2ZSBhIHN0cm9uZyBvcGluaW9uIGhlcmUu IDxvOnA+DQo8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIj4mZ3Q7PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZndDtBbnli b2R5IGhhcyBhbiBvcGluaW9uIG9yIHRob3VnaHRzIGFib3V0IGFkZGluZyBzdWNoIGEgdGV4dD88 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkluIGFkZGl0aW9uIHdl4oCZZCBvYnZp b3VzbHkgYWxzbyBjaGFuZ2UgdGhlIEFCTkYgYmFjaywgdG8gYWxsb3cgZW1wdHkgdmFsdWVzLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkNocmlzdGVyPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPk9uIFRodSwgT2N0IDMxLCAyMDE5IGF0IDE6NTAgUE0gQ2hyaXN0ZXIgSG9sbWJlcmcgJmx0 OzxhIGhyZWY9Im1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20iPmNocmlzdGVy LmhvbG1iZXJnQGVyaWNzc29uLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0ND Q0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21h cmdpbi1yaWdodDowY20iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj5Tb21ldGhpbmcgbGlrZSB0aGlzOjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiPuKAnEluIHNvbWUgY2FzZXMgYSBVQUMgbmVlZHMgdG8gaW5jbHVkZSBhbiBBdXRob3JpemF0 aW9uIGhlYWRlciBmaWVsZCBpbiBhIHJlcXVlc3QgYmVmb3JlIGl0IGhhcyByZWNlaXZlZCBhIGNo YWxsZW5nZSwgaW4gb3JkZXIgdG8gcHJvdmlkZSB1c2VyIGluZm9ybWF0aW9uICh1c2luZw0KIHRo ZSDigJh1c2VyaW5mb+KAmSBoZWFkZXIgZmllbGQgcGFyYW1ldGVyKSB0aGF0IGlzIG5lZWRlZCBp biBvcmRlciB0byBjcmVhdGUgdGhlIGNoYWxsZW5nZS4gQW4gZXhhbXBsZSBvZiBzdWNoIGNhc2Ug aXMgd2hlbiB0aGUgSFRUUCBEaWdlc3QgQXV0aGVudGljYXRpb24gVXNpbmcgQUtBIG1lY2hhbmlz bSAoUkZDMzMxMCkgKFJGQzQxNjkpIGlzIHVzZWQuIEluIHN1Y2ggY2FzZSB0aGUgQXV0aG9yaXph dGlvbiBoZWFkZXIgZmllbGQgd291bGQgdHlwaWNhbGx5DQogbm90IGNvbnRhaW4gYSDigJhyZXNw b25zZeKAmSBoZWFkZXIgZmllbGQgcGFyYW1ldGVyIGJlZm9yZSBhIGNoYWxsZW5nZSByZXNwb25z ZSBpcyBwcm92aWRlZC4gSG93ZXZlciwgZm9yIHRoZSBJUCBNdWx0aW1lZGlhIFN1YnN5c3RlbSAo SU1TKSBpdCBoYXMgYmVlbiBzcGVjaWZpZWQgdGhhdCB0aGUgQXV0aG9yaXphdGlvbiBoZWFkZXIg ZmllbGQgaW4gc3VjaCBjYXNlIGRvZXMgY29udGFpbiBhICZuYnNwO+KAmHJlc3BvbnNl4oCZIGhl YWRlciBmaWVsZCBwYXJhbWV0ZXIsDQogd2l0aCBhbiBlbXB0eSB2YWx1ZSAoZW1wdHkgc3RyaW5n KS4gRm9yIHRoYXQgcmVhc29uIHRoZSBtb2RpZmllZCByZXF1ZXN0LWRpZ2VzdCBBQk5GIGFsbG93 cyBzdWNoIGVtcHR5IHZhbHVlcy7igJ08L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5SZWdhcmRzLDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiPkNocmlzdGVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xv cjpibGFjayI+RnJvbToNCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7 Y29sb3I6YmxhY2siPlJpZmFhdCBTaGVraC1ZdXNlZiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJpZmFh dC5pZXRmQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnJpZmFhdC5pZXRmQGdtYWlsLmNvbTwv YT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlRodXJzZGF5LCAzMSBPY3RvYmVyIDIwMTkgYXQgMTku MjI8YnI+DQo8Yj5UbzogPC9iPkNocmlzdGVyIEhvbG1iZXJnICZsdDs8YSBocmVmPSJtYWlsdG86 Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayI+Y2hyaXN0ZXIu aG9sbWJlcmdAZXJpY3Nzb24uY29tPC9hPiZndDs8YnI+DQo8Yj5DYzogPC9iPkNocmlzdGVyIEhv bG1iZXJnICZsdDtjaHJpc3Rlci5ob2xtYmVyZz08YSBocmVmPSJtYWlsdG86NDBlcmljc3Nvbi5j b21AZG1hcmMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj40MGVyaWNzc29uLmNvbUBkbWFyYy5p ZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86c2lwY29yZS1jaGFpcnNAaWV0 Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zaXBjb3JlLWNoYWlyc0BpZXRmLm9yZzwvYT4mcXVvdDsg Jmx0OzxhIGhyZWY9Im1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPnNpcGNvcmUtY2hhaXJzQGlldGYub3JnPC9hPiZndDssDQogJnF1b3Q7PGEgaHJlZj0ibWFp bHRvOmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnIiB0YXJnZXQ9Il9i bGFuayI+ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc8L2E+JnF1b3Q7 ICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0 Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBp ZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPmllc2dAaWV0Zi5vcmc8L2E+JnF1b3Q7DQogJmx0OzxhIGhyZWY9Im1haWx0 bzppZXNnQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+aWVzZ0BpZXRmLm9yZzwvYT4mZ3Q7LCAm cXVvdDs8YSBocmVmPSJtYWlsdG86c2lwY29yZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNp cGNvcmVAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86c2lwY29yZUBpZXRm Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5vcmc8L2E+Jmd0OywgQWxleGV5IE1l bG5pa292ICZsdDs8YSBocmVmPSJtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbSIgdGFyZ2V0 PSJfYmxhbmsiPmFhbWVsbmlrb3ZAZmFzdG1haWwuZm08L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6 IDwvYj5SZTogW3NpcGNvcmVdIEFsZXhleSBNZWxuaWtvdidzIE5vIE9iamVjdGlvbiBvbiBkcmFm dC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xMjogKHdpdGggQ09NTUVOVCk8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5D YW4geW91IHByb3Bvc2Ugc29tZSB0ZXh0Pw0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDtSaWZhYXQ8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBUaHUsIE9jdCAz MSwgMjAxOSBhdCAxMTo0NCBBTSBDaHJpc3RlciBIb2xtYmVyZyAmbHQ7PGEgaHJlZj0ibWFpbHRv OmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmNocmlzdGVy LmhvbG1iZXJnQGVyaWNzc29uLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0ND Q0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5IaSw8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5QZXJoYXBzIHdlIGNvdWxkIGFkZCBzb21lIHRl eHQgYWJvdXQgdGhlIElNUyB1c2UtY2FzZSwgaW4gb3JkZXIgdG8gZXhwbGFpbiB0aGUgZW1wdHkg dmFsdWU/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+UmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIj5DaHJpc3Rlcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5n OjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5zaXBjb3JlICZsdDs8YSBocmVm PSJtYWlsdG86c2lwY29yZS1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+c2lwY29y ZS1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsgb24gYmVoYWxmIG9mIENocmlzdGVyIEhvbG1iZXJn ICZsdDtjaHJpc3Rlci5ob2xtYmVyZz08YSBocmVmPSJtYWlsdG86NDBlcmljc3Nvbi5jb21AZG1h cmMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj40MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9y ZzwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlRodXJzZGF5LCAzMSBPY3RvYmVyIDIwMTkgYXQg MTUuNTI8YnI+DQo8Yj5UbzogPC9iPlJpZmFhdCBTaGVraC1ZdXNlZiAmbHQ7PGEgaHJlZj0ibWFp bHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnJpZmFhdC5pZXRmQGdt YWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVvdDs8YSBocmVmPSJtYWlsdG86c2lw Y29yZS1jaGFpcnNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zaXBjb3JlLWNoYWlyc0BpZXRm Lm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmUtY2hhaXJzQGlldGYub3JnPC9hPiZndDssICZxdW90 OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYu b3JnPC9hPiZxdW90Ow0KICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRp Z2VzdC1zY2hlbWVAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kcmFmdC1pZXRmLXNpcGNvcmUt ZGlnZXN0LXNjaGVtZUBpZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86aWVz Z0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmllc2dAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8 YSBocmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmllc2dAaWV0Zi5v cmc8L2E+Jmd0OywNCiAmcXVvdDs8YSBocmVmPSJtYWlsdG86c2lwY29yZUBpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWls dG86c2lwY29yZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5vcmc8L2E+ Jmd0OywgQWxleGV5IE1lbG5pa292ICZsdDs8YSBocmVmPSJtYWlsdG86YWFtZWxuaWtvdkBmYXN0 bWFpbC5mbSIgdGFyZ2V0PSJfYmxhbmsiPmFhbWVsbmlrb3ZAZmFzdG1haWwuZm08L2E+Jmd0Ozxi cj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW3NpcGNvcmVdIEFsZXhleSBNZWxuaWtvdidzIE5vIE9i amVjdGlvbiBvbiBkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xMjogKHdpdGggQ09N TUVOVCk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPkhpLDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZndDtUaGlzIElNUyBiZWhhdmlv ciB3b3VsZCBoYXZlIGJlZW4gaW4gdmlvbGF0aW9uIG9mIFJGQzMyNjEgd2hpY2ggc3BlY2lmaWVk IGV4YWN0bHkgMzIgSGV4IGNoYXJhY3RlcnMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jmd0O1Nv LCB0aGlzIGNoYW5nZSBzaG91bGQgbm90IG1ha2UgbXVjaCBvZiZuYnNwO2EgZGlmZmVyZW5jZSBp biB0aGlzIGNhc2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+SW4gcmVh bGl0eSBpdCBwcm9iYWJseSBkb2VzbuKAmXQgbWFrZSBhIGRpZmZlcmVuY2UsIGJ1dCBpdCB3b3Vs ZCBtYWtlIHRoZSBJTVMgcHJvY2VkdXJlcyDigJxhbGlnbmVk4oCdIHdpdGggdGhlIElFVEYgc3Bl Yy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5SZWdhcmRzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PkNocmlzdGVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj5PbiBUaHUsIE9jdCAzMSwgMjAxOSBhdCA5OjM3IEFNIENocmlzdGVyIEhvbG1iZXJnICZs dDs8YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tIiB0YXJnZXQ9 Il9ibGFuayI+Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPC9hPiZndDsgd3JvdGU6PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFy Z2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1i b3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+SGksPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIHJlYXNvbiBmb3IgdGhlIGVtcHR5IHZh bHVlIGNvbWVzIGZyb20gSU1TIGFuZCBBS0EsIHdoZXJlIHlvdSBuZWVkIHRvIGluY2x1ZGUgdGhl IHVzZXIgaWQgYWxyZWFkeSBpbiB0aGUgaW5pdGlhbCBSRUdJU1RFUiByZXF1ZXN0ICh0aGlzIHNl ZW1zIHRvIGJlIG1pc3NpbmcNCiBmcm9tIFJGQyAzMzEwLCBidXQgdGhhdOKAmXMgYSBzZXBhcmF0 ZSB0b3BpYykgaW4gb3JkZXIgZm9yIHRoZSBzZXJ2ZXIgdG8gY3JlYXRlIHRoZSBjaGFsbGVuZ2Us Jm5ic3A7IG1lYW5pbmcgdGhhdCBpbiB0aGUgaW5pdGlhbCBSRUdJU1RFUiByZXF1ZXN0IHlvdSBp bmNsdWRlIGFuIEF1dGhvcml6YXRpb24gaGVhZGVyIGZpZWxkIHdpdGggdGhlIHVzZXJuYW1lIHBh cmFtZXRlciBjYXJyeWluZyB0aGUgSU1TIHByaXZhdGUgdXNlciBpZGVudGl0eSwgdGhlIHJlYWxt DQogcGFyYW1ldGVyIGFuZCB0aGUgdXJpIHBhcmFtZXRlci4gQXQgdGhpcyBwb2ludCB5b3Ugb2J2 aW91c2x5IGRvbuKAmXQgeWV0IGhhdmUgdGhlIHJlc3BvbnNlLCBzbyBpbiBJTVMgaXQgaXMgc3Bl Y2lmaWVkIHRoYXQgdGhlIHJlc3BvbnNlIHBhcmFtZXRlciBpcyBpbnNlcnRlZCB3aXRoIGFuIGVt cHR5IHZhbHVlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPldIWSBpdCB3YXMgc3BlY2lmaWVkIHRo YXQgd2F5IChpbnN0ZWFkIG9mIHNpbXBseSBub3QgaW5jbHVkaW5nIHRoZSByZXNwb25zZSBwYXJh bWV0ZXIpIEkgZG9u4oCZdCBrbm93LCBidXQgSSBkbyBrbm93IHRoYXQgaXQgaGFzIGJlZW4gaW1w bGVtZW50ZWQgYW5kIGRlcGxveWVkIHRoYXQNCiB3YXkgZm9yIG1hbnkgeWVhcnMuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+UmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5DaHJpc3Rlcjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbToNCjwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPnNpcGNvcmUgJmx0Ozxh IGhyZWY9Im1haWx0bzpzaXBjb3JlLWJvdW5jZXNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5z aXBjb3JlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyBvbiBiZWhhbGYgb2YgUmlmYWF0IFNoZWto LVl1c2VmICZsdDs8YSBocmVmPSJtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tIiB0YXJnZXQ9 Il9ibGFuayI+cmlmYWF0LmlldGZAZ21haWwuY29tPC9hPiZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+ VGh1cnNkYXksIDMxIE9jdG9iZXIgMjAxOSBhdCAxNS4yMDxicj4NCjxiPlRvOiA8L2I+QWxleGV5 IE1lbG5pa292ICZsdDs8YSBocmVmPSJtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbSIgdGFy Z2V0PSJfYmxhbmsiPmFhbWVsbmlrb3ZAZmFzdG1haWwuZm08L2E+Jmd0Ozxicj4NCjxiPkNjOiA8 L2I+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYub3JnIiB0YXJnZXQ9 Il9ibGFuayI+c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJt YWlsdG86c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zaXBjb3JlLWNo YWlyc0BpZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1z aXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kcmFmdC1pZXRm LXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZzwvYT4mcXVvdDsNCiAmbHQ7PGEgaHJlZj0i bWFpbHRvOmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnIiB0YXJnZXQ9 Il9ibGFuayI+ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc8L2E+Jmd0 OywgJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmllc2dAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5p ZXNnQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmllc2dAaWV0Zi5vcmci IHRhcmdldD0iX2JsYW5rIj5pZXNnQGlldGYub3JnPC9hPiZndDssDQogJnF1b3Q7PGEgaHJlZj0i bWFpbHRvOnNpcGNvcmVAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zaXBjb3JlQGlldGYub3Jn PC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNpcGNvcmVAaWV0Zi5vcmciIHRhcmdldD0i X2JsYW5rIj5zaXBjb3JlQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6 IFtzaXBjb3JlXSBBbGV4ZXkgTWVsbmlrb3YncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0Zi1z aXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6ICh3aXRoIENPTU1FTlQpPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+RG9uZS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBUaHUsIE9j dCAzMSwgMjAxOSBhdCA5OjEzIEFNIEFsZXhleSBNZWxuaWtvdiAmbHQ7PGEgaHJlZj0ibWFpbHRv OmFhbWVsbmlrb3ZAZmFzdG1haWwuZm0iIHRhcmdldD0iX2JsYW5rIj5hYW1lbG5pa292QGZhc3Rt YWlsLmZtPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRp bmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDtt YXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPk9uIFRodSwgT2N0IDMxLCAyMDE5LCBhdCAxOjExIFBNLCBSaWZh YXQgU2hla2gtWXVzZWYgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiIGlkPSJnbWFpbC1t Xy0zNTg3MjM3ODQ5MDM5MTUzMDYwZ21haWwtbV8tODQ2NzUyODcwMzYzNjI1MDY0MGdtYWlsLW1f LTY1NTQ4Njk1NjEzOTcxMzQxMjJnbWFpbC1tXy04NDA1MDc5NzM4NTQ5NDM4NzA2cXQiPg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkhpIEFsZXhleSw8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkkgYW0gZmluZSB3 aXRoIFBhdWwncyBzdWdnZXN0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj5BcmUgeW91IG9rIHdpdGgmbmJzcDs8c3BhbiBzdHlsZT0iY29s b3I6YmxhY2siPiZxdW90OzMyKkxIRVgmcXVvdDs/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PlllcyE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPlRoYW5rIHlvdSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+QWxleGV5PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiIGlkPSJnbWFpbC1t Xy0zNTg3MjM3ODQ5MDM5MTUzMDYwZ21haWwtbV8tODQ2NzUyODcwMzYzNjI1MDY0MGdtYWlsLW1f LTY1NTQ4Njk1NjEzOTcxMzQxMjJnbWFpbC1tXy04NDA1MDc5NzM4NTQ5NDM4NzA2cXQiPg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5SZWdhcmRzLDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDtSZmFhdDxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPk9uIFRodSwgT2N0IDMxLCAyMDE5IGF0IDc6MjIgQU0gQWxleGV5 IE1lbG5pa292ICZsdDs8YSBocmVmPSJtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbSIgdGFy Z2V0PSJfYmxhbmsiPmFhbWVsbmlrb3ZAZmFzdG1haWwuZm08L2E+Jmd0OyB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4t bGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkhpIFJp ZmFhdCw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPk9uIFdlZCwgT2N0IDMwLCAyMDE5LCBhdCA5OjUwIFBNLCBSaWZhYXQgU2hla2gtWXVz ZWYgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiIGlkPSJnbWFpbC1tXy0zNTg3MjM3ODQ5 MDM5MTUzMDYwZ21haWwtbV8tODQ2NzUyODcwMzYzNjI1MDY0MGdtYWlsLW1fLTY1NTQ4Njk1NjEz OTcxMzQxMjJnbWFpbC1tXy04NDA1MDc5NzM4NTQ5NDM4NzA2cXQtZ21haWwtbV8tNjYzNjA0MjM1 OTIxMDg1MjkyNXF0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+VGhhbmtzIEFsZXhleSE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPkkgYW0gZmluZSB3aXRoIHRoZSBmaXJzdCB0d28gY29tbWVudHMs IGFuZCB3aWxsIGZpeCB0aGVzZSBpbiB0aGUgY29taW5nIHZlcnNpb24gb2YgdGhlIGRvY3VtZW50 LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj5JIGFtIG5vdCBzdXJlIEkgZm9sbG93IHRoZSAzcmQgb25lLiBXaHkgZG8geW91 IHNlZSB0aGUgbmVlZCBmb3IgYSBtaW5pbXVtIG51bWJlciBvZiBoZXggZGlnaXRzPzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPllvdSBkbyBzYXkgdGhhdCB0aGUgbnVtYmVyIG9mIGhleCBkaWdpdHMgbWF0 Y2ggdGhlIGhhc2ggbGVuZ2h0LCBzbyBpdCBpcyBwcm9iYWJseSBPay4gSG93ZXZlciBlbXB0eSB2 YWx1ZSBpcyBuZXZlciB2YWxpZCAoYW5kIEkgYW0gd29ycmllZCBpdCBtaWdodCBoaXQgc29tZSBi b3VuZGFyeSBjb25kaXRpb24gYnVnDQogaW4gaW1wbGVtZW50YXRpb25zKSwgc28gcHJvaGliaXRp bmcgaXQgaW4gQUJORiB3b3VsZCBiZSB0aGUgYmVzdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkJlc3QgUmVnYXJkcyw8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+QWxleGV5PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21h cmdpbi1ib3R0b206NS4wcHQiIGlkPSJnbWFpbC1tXy0zNTg3MjM3ODQ5MDM5MTUzMDYwZ21haWwt bV8tODQ2NzUyODcwMzYzNjI1MDY0MGdtYWlsLW1fLTY1NTQ4Njk1NjEzOTcxMzQxMjJnbWFpbC1t Xy04NDA1MDc5NzM4NTQ5NDM4NzA2cXQtZ21haWwtbV8tNjYzNjA0MjM1OTIxMDg1MjkyNXF0Ij4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+UmVnYXJkcyw8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7Umlm YWF0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBXZWQsIE9jdCAzMCwg MjAxOSBhdCAxOjE2IFBNIEFsZXhleSBNZWxuaWtvdiB2aWEgRGF0YXRyYWNrZXIgJmx0OzxhIGhy ZWY9Im1haWx0bzpub3JlcGx5QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+bm9yZXBseUBpZXRm Lm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5n OjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPkFsZXhleSBNZWxuaWtvdiBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxv dCBwb3NpdGlvbiBmb3I8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6IE5vIE9iamVj dGlvbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+V2hlbiByZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFj dCBhbmQgcmVwbHkgdG8gYWxsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPmVtYWlsIGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8gYW5kIEND IGxpbmVzLiAoRmVlbCBmcmVlIHRvIGN1dCB0aGlzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPmludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2 ZXIuKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPlBsZWFzZSByZWZlciB0bw0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcv aWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sIiB0YXJnZXQ9Il9ibGFuayI+DQpo dHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLWNyaXRlcmlhLmh0bWw8 L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PmZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3Np dGlvbnMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+VGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlv bnMsIGNhbiBiZSBmb3VuZCBoZXJlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RvYy9kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS8iIHRhcmdldD0iX2JsYW5rIj5o dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0 LXNjaGVtZS88L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Q09NTUVOVDo8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+LS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBh bSBhZ3JlZWluZyB3aXRoIEFsaXNzYSdzIERJU0NVU1MuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5BbHNvLCBJIGhhdmUgYSBmZXcgY29t bWVudHMgb2YgbXkgb3duOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+MSkgTGFzdCBwYXJhIG9mIFNlY3Rpb24gMi4xOjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Mi4xLiZuYnNw OyBIYXNoIEFsZ29yaXRobXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOyAmbmJzcDtBIFVBUyBwcmlvcml0aXplcyB3aGljaCBh bGdvcml0aG0gdG8gdXNlIGJhc2VkIG9uIHRoZSBvcmRlcmluZyBvZiB0aGU8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7ICZuYnNwO2No YWxsZW5nZSBoZWFkZXIgZmllbGRzIGluIHRoZSByZXNwb25zZSBpdCBpcyBwcmVwYXJpbmcuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5U aGlzIGxvb2tzIGVpdGhlciB3cm9uZyBvciBjb25mdXNpbmcgdG8gbWUuIEkgdGhpbmsgeW91IGFy ZSBqdXN0IHNheWluZyBoZXJlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPnRoYXQgdGhlIG9yZGVyIGlzIGRlY2lkZWQgYnkgdGhlIHNlcnZlciBh dCB0aGlzIHBvaW50LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7ICZuYnNwO1RoYXQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7ICZuYnNwO3Byb2Nlc3MgaXMgc3Bl Y2lmaWVkIGluIHNlY3Rpb24gMi4zIGFuZCBwYXJhbGxlbHMgdGhlIHByb2Nlc3MgdXNlZCBpbjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz cDsgJm5ic3A7SFRUUCBzcGVjaWZpZWQgYnkgW1JGQzc2MTZdLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+U28gYmFzZWQgb24gdGhlIGFi b3ZlLCBteSBzdWdnZXN0ZWQgcmVwbGFjZW1lbnQgZm9yIGJvdGggc2VudGVuY2VzOjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7 ICZuYnNwO0EgVUFTIHByaW9yaXRpemVzIHdoaWNoIGFsZ29yaXRobSB0byB1c2UgYmFzZWQgb24g aXRzIHBvbGljeSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+Jm5ic3A7ICZuYnNwO3doaWNoIGlzIHNwZWNpZmllZCBpbiBzZWN0aW9uIDIuMyBh bmQgcGFyYWxsZWxzIHRoZSBwcm9jZXNzIHVzZWQgaW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7ICZuYnNwO0hUVFAgc3BlY2lmaWVk IGJ5IFtSRkM3NjE2XS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjIpIExhc3QgcGFyYSBvZiBTZWN0aW9uIDIuNDo8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOyAmbmJz cDtJZiB0aGUgVUFDIGNhbm5vdCByZXNwb25kIHRvIGFueSBvZiB0aGUgY2hhbGxlbmdlcyBpbiB0 aGUgcmVzcG9uc2UsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOyAmbmJzcDt0aGVuIGl0IFNIT1VMRCBhYmFuZG9uIGF0dGVtcHRzIHRv IHNlbmQgdGhlIHJlcXVlc3QgdW5sZXNzIGEgbG9jYWw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7ICZuYnNwO3BvbGljeSBkaWN0YXRl cyBvdGhlcndpc2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj5JcyB0cnlpbmcgb3RoZXIgbm9uIERpZ2VzdCBhbGdvcml0aG1zIGNvdmVy ZWQgYnkgJnF1b3Q7U0hPVUxEIGFiYW5kb24mcXVvdDs/PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPklmIHllcywgbWF5YmUgeW91IHNob3VsZCBt YWtlIHRoaXMgY2xlYXJlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOyAmbmJzcDtGb3IgZXhhbXBsZSwgaWYgdGhlIFVBQyBk b2VzIG5vdCBoYXZlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOyAmbmJzcDtjcmVkZW50aWFscyBvciBoYXMgc3RhbGUgY3JlZGVudGlh bHMgZm9yIGFueSBvZiB0aGUgcmVhbG1zLCB0aGUgVUFDPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOyAmbmJzcDt3aWxsIGFiYW5kb24g dGhlIHJlcXVlc3QuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj4zKSBJbiBTZWN0aW9uIDIuNzo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOyAmbmJzcDsgJm5ic3A7IHJl cXVlc3QtZGlnZXN0ID0gTERRVU9UICpMSEVYIFJEUVVPVDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VGhpcyBub3cgYWxsb3dzIGVtcHR5 IHZhbHVlLiBJIHN1Z2dlc3QgeW91IHNwZWNpZnkgYSBtaW5pbXVtIG51bWJlciBvZiBoZXg8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ZGlnaXRz IGFsbG93ZWQgaW4gdGhlIEFCTkYuIE9yIGF0IGxlYXN0IGNoYW5nZSAmcXVvdDsqTEhFWCZxdW90 OyB0byAmcXVvdDsyKkxIRVgmcXVvdDsuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_7D911FFD814F4DCFA13EC3E19A5D0EE5ericssoncom_-- From nobody Fri Nov 1 00:26:36 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97B401200FA for ; Fri, 1 Nov 2019 00:26:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oiN_NFhfqXyL for ; Fri, 1 Nov 2019 00:26:32 -0700 (PDT) Received: from smtp7.webway.se (smtp7.webway.se [212.3.14.205]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38A8F12009E for ; Fri, 1 Nov 2019 00:26:31 -0700 (PDT) Received: from [192.168.1.170] (194-161-217-66.ip.assaabloy.com [194.161.217.66]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp7.webway.se (Postfix) with ESMTPSA id C8DB218F0; Fri, 1 Nov 2019 08:26:27 +0100 (CET) From: "Olle E. Johansson" Message-Id: <787C4342-330A-435F-A350-2237B442CA2B@edvina.net> Content-Type: multipart/alternative; boundary="Apple-Mail=_840A1D35-7148-4C24-A29A-C02F85B16103" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 1 Nov 2019 08:26:26 +0100 In-Reply-To: <413a75e5-7aa9-9940-70d2-2aa4596f78f8@alum.mit.edu> Cc: Olle E Johansson , sipcore@ietf.org To: Paul Kyzivat References: <157252797201.30364.11393682991189471576@ietfa.amsl.com> <413a75e5-7aa9-9940-70d2-2aa4596f78f8@alum.mit.edu> X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [sipcore] I-D Action: draft-ietf-sipcore-digest-scheme-14.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 07:26:35 -0000 --Apple-Mail=_840A1D35-7148-4C24-A29A-C02F85B16103 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On 31 Oct 2019, at 22:55, Paul Kyzivat wrote: >=20 > On 10/31/19 1:37 PM, Maxim Sobolev wrote: >> Hi, I am new here, so not sure what the proper process is, but there = are few comments I have with regards to the proposed RFC: >> 1. In the Abstract section there is a phrase "the broken MD5 = algorithm". I think "broken" might be a bit strong and emotionally = charged. There is nothing broken about MD5 as far as hashing algorithm = is concerned. It is proven to be not very secure in this day and age, = but given the right amount of time any today's algorithm would probably = be in that category. >=20 > This is a good point. MD5 is simply obsolete, not broken. >=20 You may add a reference to https://tools.ietf.org/html/rfc6151 "The published attacks against MD5 show that it is not prudent to use MD5 when collision resistance is required." "The attacks presented in [KLIM2006 = ] can find MD5 = collision in about one minute on a standard notebook PC (Intel Pentium, 1.6GHz). [STEV2007 ] claims = that it takes 10 seconds or less on a 2.6Ghz Pentium4 to find collisions. " In essence, it=E2=80=99s not broken, but quite open for succesful = attacks. /O= --Apple-Mail=_840A1D35-7148-4C24-A29A-C02F85B16103 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On 31 Oct 2019, at 22:55, Paul Kyzivat <pkyzivat@alum.mit.edu> wrote:

On = 10/31/19 1:37 PM, Maxim Sobolev wrote:
Hi, I am new here, so not sure what the proper = process is, but there are few comments I have with regards to the = proposed RFC:
1. In the Abstract section there is a = phrase "the broken MD5 algorithm". I think "broken" might be a bit = strong and emotionally charged. There is nothing broken about MD5 as far = as hashing algorithm is concerned. It is proven to be not very secure in = this day and age, but given the right amount of time any today's = algorithm would probably be in that category.

This is a good point. MD5 is = simply obsolete, not broken.

You may add a reference to https://tools.ietf.org/html/rfc6151

"The published attacks against MD5
   show that it is not =
prudent to use MD5 when collision resistance is
   required."

"The attacks = presented in [KLIM2006] can find MD5 collision in
   about one minute on a =
standard notebook PC (Intel Pentium, 1.6GHz).
   [STEV2007] =
claims that it takes 10 seconds or less on a 2.6Ghz
   Pentium4 to find collisions.
"

In essence, it=E2=80=99s not broken, but = quite open for succesful attacks.

/O
= --Apple-Mail=_840A1D35-7148-4C24-A29A-C02F85B16103-- From nobody Fri Nov 1 03:10:25 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6FB812004E; Fri, 1 Nov 2019 03:10:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.697 X-Spam-Level: X-Spam-Status: No, score=-2.697 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fastmail.fm header.b=CogtpnnY; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=f4TjkZRc Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id evIqKmuUmwUX; Fri, 1 Nov 2019 03:10:16 -0700 (PDT) Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE62B120220; Fri, 1 Nov 2019 03:10:15 -0700 (PDT) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 2A9F8222B3; Fri, 1 Nov 2019 06:10:14 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute7.internal (MEProxy); Fri, 01 Nov 2019 06:10:14 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.fm; h= content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=fm1; bh=H E1bnBsJj1O8zS40/IFz0WVZZx1HBD5TDfpW+j2Zr3I=; b=CogtpnnY4sAc0ULm2 GTaKInpwYFoeOJ+Huhv0/Csvhn3E8z/YJZiY2v5xe/xSj8crQZqnLT5BVi7isZSk /njsF6h4bFhCP8IJUD+K0OkDyULPH6P17AK/3JDmhd+FttMEyvgHzgvS3HkGiirz P8OHUdxy7Vq9+owIosIvDcz3/qv44kXFnBVrXfoaFZLZkqlAf/Ps/qj2x3SZZqQb yU3YlCvcPpqPqVAd19ZQsLlT1dqM2115DvOqzMEbBDsBMH9XmscmJDO5JBm1sgSD xp6vC7r1sD4kb1LRQfni+9wHhd1mmFEG/kHRHKiTOAp3mpb8qw9xoBRJu9M73XPS sdOSA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=HE1bnBsJj1O8zS40/IFz0WVZZx1HBD5TDfpW+j2Zr 3I=; b=f4TjkZRcRoSYv+GfE2tL1tjhvaNPe5xPcgGLxvMYi5Kyrxh/RiBfih971 qmKFThkKGJgosIXoKWoz3K11ECxjjzy1eD22VmDNTqISjnNO3dATt8iOskUUCJlS 8aQ8dS3SnnAdgxoNC62LqoDorxKom2OUbcxaZXIUDYgGFJQgB8mzDuwo+0dOMQCf gCE/WWy0uKBVCsPpMCgJ9vrqbKWesIfQEcLomFLfHPWS4L5ckfndEoy5in/wKY4T SabtrBzoNT1dgy4XuihuKzXTaGGEDyedBGdDiHuEOeCcrzrHP//U5upSmFcHxzZ3 1gZiD+xPuTFf+QVzbRkaFVeXRu1Ww== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedruddtjedgudduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurheptggguffhofgjfffgkfhfvfesrgejmherhhdtjeenucfhrhhomheptehlvgig vgihucfovghlnhhikhhovhcuoegrrghmvghlnhhikhhovhesfhgrshhtmhgrihhlrdhfmh eqnecuffhomhgrihhnpehhthhtphguihhgvghsthgruhhthhgvnhhtihgtrghtihhonhhu shhinhhgrghkrghmvggthhgrnhhishhmrhhftgeffedutdhrfhgtgeduieelihhsuhhsvg gurdhinhdpihgvthhfrdhorhhgpdhhthhtphhsphgvtghifhhivggusgihrhhftgejiedu iedrshhonecukfhppeekhedrvdehhedrvdefgedrfeefnecurfgrrhgrmhepmhgrihhlfh hrohhmpegrrghmvghlnhhikhhovhesfhgrshhtmhgrihhlrdhfmhenucevlhhushhtvghr ufhiiigvpedt X-ME-Proxy: Received: from [10.233.236.62] (unknown [85.255.234.33]) by mail.messagingengine.com (Postfix) with ESMTPA id 326503060057; Fri, 1 Nov 2019 06:10:06 -0400 (EDT) Content-Type: multipart/alternative; boundary=Apple-Mail-65A59479-9956-4349-9B71-DDDE1FE3419F Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPhone Mail (15G77) In-Reply-To: <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> Date: Fri, 1 Nov 2019 10:10:01 +0000 Cc: "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-digest-scheme@ietf.org" , The IESG , SIPCORE Content-Transfer-Encoding: 7bit Message-Id: <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> To: Rifaat Shekh-Yusef , Christer Holmberg Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 10:10:19 -0000 --Apple-Mail-65A59479-9956-4349-9B71-DDDE1FE3419F Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable > On 1 Nov 2019, at 07:09, Christer Holmberg wrote: >=20 > Hi, > =20 > >I do not have a strong opinion here. > >=20 > >Anybody has an opinion or thoughts about adding such a text? > =20 > In addition we=E2=80=99d obviously also change the ABNF back, to allow emp= ty values. If the ABNF is changed back for this, I think some extra text would be usefu= l. > =20 > Regards, > =20 > Christer > =20 > =20 > =20 > =20 > On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg wrote: > Something like this: > =20 > =E2=80=9CIn some cases a UAC needs to include an Authorization header fiel= d in a request before it has received a challenge, in order to provide user i= nformation (using the =E2=80=98userinfo=E2=80=99 header field parameter) tha= t is needed in order to create the challenge. An example of such case is whe= n the HTTP Digest Authentication Using AKA mechanism (RFC3310) (RFC4169) is u= sed. In such case the Authorization header field would typically not contain= a =E2=80=98response=E2=80=99 header field parameter before a challenge resp= onse is provided. However, for the IP Multimedia Subsystem (IMS) it has been= specified that the Authorization header field in such case does contain a =E2= =80=98response=E2=80=99 header field parameter, with an empty value (empty s= tring). For that reason the modified request-digest ABNF allows such empty v= alues.=E2=80=9D > =20 > Regards, > =20 > Christer > =20 > =20 > From: Rifaat Shekh-Yusef > Date: Thursday, 31 October 2019 at 19.22 > To: Christer Holmberg > Cc: Christer Holmberg ,= "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-di= gest-scheme@ietf.org" , "iesg@iet= f.org" , "sipcore@ietf.org" , Alexey Melnik= ov > Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcor= e-digest-scheme-12: (with COMMENT) > =20 > Can you propose some text? > =20 > Thanks, > Rifaat > =20 > =20 > On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg wrote: > Hi, > =20 > Perhaps we could add some text about the IMS use-case, in order to explain= the empty value? > =20 > Regards, > =20 > Christer > =20 > From: sipcore on behalf of Christer Holmberg > Date: Thursday, 31 October 2019 at 15.52 > To: Rifaat Shekh-Yusef > Cc: "sipcore-chairs@ietf.org" , "draft-ietf-sipco= re-digest-scheme@ietf.org" , "ies= g@ietf.org" , "sipcore@ietf.org" , Alexey M= elnikov > Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcor= e-digest-scheme-12: (with COMMENT) > =20 > Hi, > =20 > >This IMS behavior would have been in violation of RFC3261 which specified= exactly 32 Hex characters. > >So, this change should not make much of a difference in this case. > =20 > In reality it probably doesn=E2=80=99t make a difference, but it would mak= e the IMS procedures =E2=80=9Caligned=E2=80=9D with the IETF spec. > =20 > Regards, > =20 > Christer > =20 > =20 > =20 > =20 > On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg wrote: > =20 > Hi, > =20 > The reason for the empty value comes from IMS and AKA, where you need to i= nclude the user id already in the initial REGISTER request (this seems to be= missing from RFC 3310, but that=E2=80=99s a separate topic) in order for th= e server to create the challenge, meaning that in the initial REGISTER requ= est you include an Authorization header field with the username parameter ca= rrying the IMS private user identity, the realm parameter and the uri parame= ter. At this point you obviously don=E2=80=99t yet have the response, so in I= MS it is specified that the response parameter is inserted with an empty val= ue. > =20 > WHY it was specified that way (instead of simply not including the respons= e parameter) I don=E2=80=99t know, but I do know that it has been implemente= d and deployed that way for many years. > =20 > Regards, > =20 > Christer > =20 > =20 > From: sipcore on behalf of Rifaat Shekh-Yusef <= rifaat.ietf@gmail.com> > Date: Thursday, 31 October 2019 at 15.20 > To: Alexey Melnikov > Cc: "sipcore-chairs@ietf.org" , "draft-ietf-sipco= re-digest-scheme@ietf.org" , "ies= g@ietf.org" , "sipcore@ietf.org" > Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcor= e-digest-scheme-12: (with COMMENT) > =20 > Done. > =20 > On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov w= rote: > On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef wrote: > Hi Alexey, > =20 > I am fine with Paul's suggestion. > Are you ok with "32*LHEX"? > Yes! > =20 > Thank you, > Alexey > =20 > Regards, > Rfaat > =20 > =20 > On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov w= rote: > =20 > Hi Rifaat, > =20 > On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef wrote: > Thanks Alexey! > =20 > I am fine with the first two comments, and will fix these in the coming ve= rsion of the document. > =20 > I am not sure I follow the 3rd one. Why do you see the need for a minimum n= umber of hex digits? > You do say that the number of hex digits match the hash lenght, so it is p= robably Ok. However empty value is never valid (and I am worried it might hi= t some boundary condition bug in implementations), so prohibiting it in ABNF= would be the best. > =20 > Best Regards, > Alexey > =20 > Regards, > Rifaat > =20 > =20 > =20 > On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via Datatracker wrote: > Alexey Melnikov has entered the following ballot position for > draft-ietf-sipcore-digest-scheme-12: No Objection > =20 > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > =20 > =20 > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > =20 > =20 > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ > =20 > =20 > =20 > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > =20 > I am agreeing with Alissa's DISCUSS. > =20 > Also, I have a few comments of my own: > =20 > 1) Last para of Section 2.1: > =20 > 2.1. Hash Algorithms > =20 > A UAS prioritizes which algorithm to use based on the ordering of the > challenge header fields in the response it is preparing. > =20 > This looks either wrong or confusing to me. I think you are just saying he= re > that the order is decided by the server at this point. > =20 > That > process is specified in section 2.3 and parallels the process used in > HTTP specified by [RFC7616]. > =20 > So based on the above, my suggested replacement for both sentences: > =20 > A UAS prioritizes which algorithm to use based on its policy, > which is specified in section 2.3 and parallels the process used in > HTTP specified by [RFC7616]. > =20 > 2) Last para of Section 2.4: > =20 > If the UAC cannot respond to any of the challenges in the response, > then it SHOULD abandon attempts to send the request unless a local > policy dictates otherwise. > =20 > Is trying other non Digest algorithms covered by "SHOULD abandon"? > If yes, maybe you should make this clearer. > =20 > For example, if the UAC does not have > credentials or has stale credentials for any of the realms, the UAC > will abandon the request. > =20 > 3) In Section 2.7: > =20 > request-digest =3D LDQUOT *LHEX RDQUOT > =20 > This now allows empty value. I suggest you specify a minimum number of hex= > digits allowed in the ABNF. Or at least change "*LHEX" to "2*LHEX". > =20 > =20 > =20 > =20 --Apple-Mail-65A59479-9956-4349-9B71-DDDE1FE3419F Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
On 1 Nov 2019, at 07:09, Christer H= olmberg <christer.holmb= erg@ericsson.com> wrote:

=

Hi,

 

>I do not have a strong opini= on here.

> 

=

>Anybody has an opinion or th= oughts about adding such a text?

 

In addition we=E2=80=99d obvious= ly also change the ABNF back, to allow empty values.

<= /div>

If the ABNF is changed back for this,= I think some extra text would be useful.
=

 

Regards,

 

Christer

 

 

 

 

On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg <= ;christer.holmberg@ericsso= n.com> wrote:

Something like this:

 

=E2=80=9CIn some cases a UAC needs to include a= n Authorization header field in a request before it has received a challenge= , in order to provide user information (using the =E2=80=98userinfo=E2=80=99 header field parameter) that is needed in or= der to create the challenge. An example of such case is when the HTTP Digest= Authentication Using AKA mechanism (RFC3310) (RFC4169) is used. In such cas= e the Authorization header field would typically not contain a =E2=80=98response=E2=80=99 header field parameter before a ch= allenge response is provided. However, for the IP Multimedia Subsystem (IMS)= it has been specified that the Authorization header field in such case does= contain a  =E2=80=98response=E2=80=99 header field parameter, with an empty value (empty string). For that reason the modified request-di= gest ABNF allows such empty values.=E2=80=9D

 

Regards,

 

Christer

 

 

From: Rifaat Shekh-Yusef &= lt;rifaat.ietf@gm= ail.com>
Date: Thursday, 31 October 2019 at 19.22
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.ietf.org>, "sipcore= -chairs@ietf.org" <sipcore-chairs@ietf.org>, "draft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcor= e-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>= ;, "sipcore@ietf.org" <sipcore@ietf.o= rg>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-s= ipcore-digest-scheme-12: (with COMMENT)

 

Can you propose some text?

 

Thanks,

 Rifaat

 

 

On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg <christer.holmberg@eri= csson.com> wrote:

Hi,

 

Perhaps we could add some text about the IMS us= e-case, in order to explain the empty value?

 

Regards,

 

Christer

 

From: sipcore <sipcore-bounces@ietf.org= > on behalf of Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.= ietf.org>
Date: Thursday, 31 October 2019 at 15.52
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: "sip= core-chairs@ietf.org" <sipcore-chairs@ietf.org>, "draft-ietf-sipcore-diges= t-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.org= " <sipcore@ietf.org= >, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-s= ipcore-digest-scheme-12: (with COMMENT)

 

Hi,

 

>This IMS behavior would have been in violat= ion of RFC3261 which specified exactly 32 Hex characters.<= /p>

>So, this change should not make much of&nbs= p;a difference in this case.

 

In reality it probably doesn=E2=80=99t make a d= ifference, but it would make the IMS procedures =E2=80=9Caligned=E2=80=9D wi= th the IETF spec.

 

Regards,

 

Christer

 

 

 

 

On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg <christer.holmberg@eric= sson.com> wrote:

 

Hi,

 

The reason for the empty value comes from IMS a= nd AKA, where you need to include the user id already in the initial REGISTE= R request (this seems to be missing from RFC 3310, but that=E2=80=99s a separate topic) in order for the server= to create the challenge,  meaning that in the initial REGISTER request= you include an Authorization header field with the username parameter carry= ing the IMS private user identity, the realm parameter and the uri parameter. At this point you obviously don=E2=80=99t y= et have the response, so in IMS it is specified that the response parameter i= s inserted with an empty value.

 

WHY it was specified that way (instead of simpl= y not including the response parameter) I don=E2=80=99t know, but I do know t= hat it has been implemented and deployed that way for many years.

 

Regards,

 

Christer

 

 

From: sipcore <sipcore-bounces@ietf.org= > on behalf of Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Thursday, 31 October 2019 at 15.20
To: Alexey Melnikov <aamelnikov@fastmail.fm>
Cc: "sip= core-chairs@ietf.org" <sipcore-chairs@ietf.org>, "draft-ietf-sipcore-diges= t-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.org= " <sipcore@ietf.org= >
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-s= ipcore-digest-scheme-12: (with COMMENT)

 

Done.

 

On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov <aamelnikov@fastmail.fm> w= rote:

On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef wrote:

Hi Alexey,

 

I am fine with Paul's suggestion.

Are you ok with "32*LHEX"?

Yes!

 

Thank you,

Alexey

 

Regards,

 Rfaat

 

 

On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov <aamelnikov@fastmail.fm> w= rote:

 

Hi Rifaat,

 

On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef wrote:

Thanks Alexey!

 

I am fine with the first two comments, and will fix these in the com= ing version of the document.

 

I am not sure I follow the 3rd one. Why do you see the need for a mi= nimum number of hex digits?

You do say that the number of hex digits match the hash lenght, so i= t is probably Ok. However empty value is never valid (and I am worried it mi= ght hit some boundary condition bug in implementations), so prohibiting it in ABNF would be the best.

 

Best Regards,

Alexey

 

Regards,

 Rifaat

 

 

 

On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via Datatracker <= noreply@ietf.org&g= t; wrote:

Alexey Melnikov has entered the following ballot position for

draft-ietf-sipcore-digest-scheme-12: No Objection

 

When responding, please keep the subject line intact and reply to al= l

email addresses included in the To and CC lines. (Feel free to cut t= his

introductory paragraph, however.)

 

 

for more information about IESG DISCUSS and COMMENT positions.<= /o:p>

 

 

The document, along with other ballot positions, can be found here:<= o:p>

 

 

 

--------------------------------------------------------------------= --

COMMENT:

--------------------------------------------------------------------= --

 

I am agreeing with Alissa's DISCUSS.

 

Also, I have a few comments of my own:

 

1) Last para of Section 2.1:

 

2.1.  Hash Algorithms

 

   A UAS prioritizes which algorithm to use based on the o= rdering of the

   challenge header fields in the response it is preparing= .

 

This looks either wrong or confusing to me. I think you are just say= ing here

that the order is decided by the server at this point.

 

   That

   process is specified in section 2.3 and parallels the p= rocess used in

   HTTP specified by [RFC7616].

 

So based on the above, my suggested replacement for both sentences:<= o:p>

 

   A UAS prioritizes which algorithm to use based on its p= olicy,

   which is specified in section 2.3 and parallels the pro= cess used in

   HTTP specified by [RFC7616].

 

2) Last para of Section 2.4:

 

   If the UAC cannot respond to any of the challenges in t= he response,

   then it SHOULD abandon attempts to send the request unl= ess a local

   policy dictates otherwise.

 

Is trying other non Digest algorithms covered by "SHOULD abandon"?

If yes, maybe you should make this clearer.

 

   For example, if the UAC does not have

   credentials or has stale credentials for any of the rea= lms, the UAC

   will abandon the request.

 

3) In Section 2.7:

 

      request-digest =3D LDQUOT *LHEX RDQUOT

 

This now allows empty value. I suggest you specify a minimum number o= f hex

digits allowed in the ABNF. Or at least change "*LHEX" to "2*LHEX".<= o:p>

 

 

 

 

= --Apple-Mail-65A59479-9956-4349-9B71-DDDE1FE3419F-- From nobody Fri Nov 1 04:50:53 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DED4120118; Fri, 1 Nov 2019 04:50:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6xQCMHcBRTw8; Fri, 1 Nov 2019 04:50:42 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40066.outbound.protection.outlook.com [40.107.4.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D15C12010E; Fri, 1 Nov 2019 04:50:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VwbEreHSGsEiQ1TyyDXuEnehIEcxDvjXDoQVFd3XYD/Kj80IeD2qRVn/26Ur9mtbEh+Sw99wwI95PL8jLF8wA1IiSXwD9K/w6EzlkNyxw9QHbCpZ8pCAYrAM4ac0VDYW882Tg7YidvekVthVGNLxtR6xgIgWA75fTgYX5mKufdKDNJzFW/DHjGHD4nUzPrzmdYy8DpibHZ2GPA2dcioR6tfe/PuJbA1wkCzSlyUkyPL9wCz3gZbo7iwfVz8uWbyGdmfUaTInZygtA7DijMhXDKy+t5SDmLn7rG3MNoJ9aPpTWX7UW1wTFMpFnvEw8KhWv/beOZsNcPrIhiXCCf+QEQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9hhQWg2J+KLtlwrUdhh83Dy3Uoz1mWguG+hpEoEFkkM=; b=iwZ6yfGsQJzAToawECnnewaO82OTr6iaw66Jd+924ZLc/J3q2Pp/Jgp0gAOnGyT+Dzjo8YNP6wY8tXko3msp/6W/9lrfN0RMWJmGQ2OaKIaeoMWnTUCe4TLXqLDOc+yksB7+5nFIApjXbli47PSPsrFzkKHv0gaYZjIpZGi4nBsNrV7rDAYkjcY6vJ++C3lnQYtHJlV/+3Ah+qp4QM0KAEWeV8JKEgu519wdiXVQHd34tiYMOwSwl53nRFG5WxMh7WR80QY0Cr26Vl5BtXBvmJXHPwZnCKdRz/IZb4OeCwB9ZuAh+UK7KTRIjlDaIjBiYdJ8goanDU4LK536ouKvwA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9hhQWg2J+KLtlwrUdhh83Dy3Uoz1mWguG+hpEoEFkkM=; b=aePBy1oQ2uzUEY1EypG+zA5GfER683bje0W503dLAXAYi/9oPMwqCMEsk+AHeAmABwsdKEulfdQP/V54JOKNgs8KcW13CU8slbLf9p0CXoMrOgQ7YM6phKevfLPN6kh33afVFjJA1HrUgp/STVYd+t2ebkwMvvrk/beca6oGY+s= Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB3404.eurprd07.prod.outlook.com (10.170.242.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.15; Fri, 1 Nov 2019 11:50:39 +0000 Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::5499:1231:e707:4cb7]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::5499:1231:e707:4cb7%7]) with mapi id 15.20.2408.024; Fri, 1 Nov 2019 11:50:39 +0000 From: Christer Holmberg To: Alexey Melnikov , Rifaat Shekh-Yusef CC: "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-digest-scheme@ietf.org" , The IESG , SIPCORE Thread-Topic: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) Thread-Index: AQHVj+3+/XQWOAP0gUmCkUmQAngGd6d04liA///hPYCAACLmgIAAH3GA///5uYCAAClCgIAAHA2AgADDMwCAABEIgIAAPaQA Date: Fri, 1 Nov 2019 11:50:39 +0000 Message-ID: References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> In-Reply-To: <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [89.166.49.243] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3c5265ca-878d-4e8c-a687-08d75ec1b77a x-ms-traffictypediagnostic: HE1PR07MB3404: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 020877E0CB x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(39860400002)(376002)(366004)(346002)(396003)(189003)(199004)(18543002)(33656002)(5660300002)(66446008)(81156014)(8676002)(66476007)(66946007)(64756008)(6246003)(6306002)(4326008)(229853002)(71200400001)(7736002)(305945005)(71190400001)(6486002)(8936002)(6512007)(14444005)(66556008)(256004)(81166006)(76116006)(6436002)(36756003)(102836004)(486006)(99286004)(86362001)(44832011)(478600001)(2906002)(11346002)(25786009)(26005)(76176011)(2616005)(53546011)(6506007)(3846002)(110136005)(66066001)(58126008)(54906003)(14454004)(446003)(6116002)(476003)(966005)(316002)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3404; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: I9Hg7K+18y3YvuGNQdVQdYvrKyktbiM0dmAPh9wIUli7Fip2H8Oz/AW/Xf01Y7mJ6i5vVeju5X8jZUiV4FEK2Bc47n6E187wg46xF/T2YkJJqbx/rVB7t2IhvNdRACmO0cbsm9N7cpcgkX7FpcoGXFe4OXRgWlQdT/UO8f6WDhWRMDnKf9TQZZtfTRddFOPW4/B4Eo8e2smjkI4Dw3QVvcoPVglofF0l4cCLtJsxOOs8iP/W3I8ZXbluGgSfGORsYXm9CMabcUpvWQ9bDJlC6kmNfpFwG3BI/cE01lhw7Pa8WjzHAyuRxKE/gHlXJ31n/lD9Rq+EY7lw5AWvA3Z+1E6Xd1HL74Qt1nN43CcOUbTGqVMnkffIgmZRin1xT6kEYnHYixx96zbxyApRpoFoZ3XnQhQTxwC+Hie16vv6v909ywf7rYNu6tyuPTr08Wy8czD/DOvKoUji9unazxNRwnlAuydGO8wKwszDET0o4Es= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <2FD62FB048BDB840ACFEDCFE05C066DD@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3c5265ca-878d-4e8c-a687-08d75ec1b77a X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2019 11:50:39.5092 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: UZ7FYTp4aHEDlJ+TgWGD/RORi171WhnSFKcOq/aj+K22VrNw1l91SdNhZTcyfpLuPze6eV+3oXT0P6I9huIxKtB5v7zrxs9f3Y1xk7BQMiQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3404 Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 11:50:46 -0000 SGksDQoNCj4+PkkgZG8gbm90IGhhdmUgYSBzdHJvbmcgb3BpbmlvbiBoZXJlLiANCj4+PsKgDQo+ Pj5Bbnlib2R5IGhhcyBhbiBvcGluaW9uIG9yIHRob3VnaHRzIGFib3V0IGFkZGluZyBzdWNoIGEg dGV4dD8NCj4+DQo+PkluIGFkZGl0aW9uIHdl4oCZZCBvYnZpb3VzbHkgYWxzbyBjaGFuZ2UgdGhl IEFCTkYgYmFjaywgdG8gYWxsb3cgZW1wdHkgdmFsdWVzLg0KPg0KPklmIHRoZSBBQk5GIGlzIGNo YW5nZWQgYmFjayBmb3IgdGhpcywgSSB0aGluayBzb21lIGV4dHJhIHRleHQgd291bGQgYmUgdXNl ZnVsLg0KDQpEaWQgeW91IHNlZSBteSBzdWdnZXN0ZWQgdGV4dCBiZWxvdz8gT3IsIGRvIHlvdSB0 aGluayB0aGF0IG1vcmUgaXMgbmVlZGVkPyDCoA0KDQpSZWdhcmRzLA0KwqANCkNocmlzdGVyDQrC oA0KwqANCsKgDQrCoA0KT24gVGh1LCBPY3QgMzEsIDIwMTkgYXQgMTo1MCBQTSBDaHJpc3RlciBI b2xtYmVyZyA8bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4gd3JvdGU6DQpT b21ldGhpbmcgbGlrZSB0aGlzOg0KwqANCuKAnEluIHNvbWUgY2FzZXMgYSBVQUMgbmVlZHMgdG8g aW5jbHVkZSBhbiBBdXRob3JpemF0aW9uIGhlYWRlciBmaWVsZCBpbiBhIHJlcXVlc3QgYmVmb3Jl IGl0IGhhcyByZWNlaXZlZCBhIGNoYWxsZW5nZSwgaW4gb3JkZXIgdG8gcHJvdmlkZSB1c2VyIGlu Zm9ybWF0aW9uICh1c2luZyB0aGUg4oCYdXNlcmluZm/igJkgaGVhZGVyIGZpZWxkIHBhcmFtZXRl cikgdGhhdCBpcyBuZWVkZWQgaW4gb3JkZXIgdG8gY3JlYXRlIHRoZSBjaGFsbGVuZ2UuIEFuIGV4 YW1wbGUgb2Ygc3VjaCBjYXNlIGlzIHdoZW4gdGhlIEhUVFAgRGlnZXN0IEF1dGhlbnRpY2F0aW9u IFVzaW5nIEFLQSBtZWNoYW5pc20gKFJGQzMzMTApIChSRkM0MTY5KSBpcyB1c2VkLiBJbiBzdWNo IGNhc2UgdGhlIEF1dGhvcml6YXRpb24gaGVhZGVyIGZpZWxkIHdvdWxkIHR5cGljYWxseSBub3Qg Y29udGFpbiBhIOKAmHJlc3BvbnNl4oCZIGhlYWRlciBmaWVsZCBwYXJhbWV0ZXIgYmVmb3JlIGEg Y2hhbGxlbmdlIHJlc3BvbnNlIGlzIHByb3ZpZGVkLiBIb3dldmVyLCBmb3IgdGhlIElQIE11bHRp bWVkaWEgU3Vic3lzdGVtIChJTVMpIGl0IGhhcyBiZWVuIHNwZWNpZmllZCB0aGF0IHRoZSBBdXRo b3JpemF0aW9uIGhlYWRlciBmaWVsZCBpbiBzdWNoIGNhc2UgZG9lcyBjb250YWluIGEgwqDigJhy ZXNwb25zZeKAmSBoZWFkZXIgZmllbGQgcGFyYW1ldGVyLCB3aXRoIGFuIGVtcHR5IHZhbHVlIChl bXB0eSBzdHJpbmcpLiBGb3IgdGhhdCByZWFzb24gdGhlIG1vZGlmaWVkIHJlcXVlc3QtZGlnZXN0 IEFCTkYgYWxsb3dzIHN1Y2ggZW1wdHkgdmFsdWVzLuKAnQ0KwqANClJlZ2FyZHMsDQrCoA0KQ2hy aXN0ZXINCsKgDQrCoA0KRnJvbTogUmlmYWF0IFNoZWtoLVl1c2VmIDxtYWlsdG86cmlmYWF0Lmll dGZAZ21haWwuY29tPg0KRGF0ZTogVGh1cnNkYXksIDMxIE9jdG9iZXIgMjAxOSBhdCAxOS4yMg0K VG86IENocmlzdGVyIEhvbG1iZXJnIDxtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24u Y29tPg0KQ2M6IENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xtYmVyZz1tYWlsdG86NDBl cmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc+LCAibWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYu b3JnIiA8bWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYub3JnPiwgIm1haWx0bzpkcmFmdC1pZXRm LXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZyIgPG1haWx0bzpkcmFmdC1pZXRmLXNpcGNv cmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZz4sICJtYWlsdG86aWVzZ0BpZXRmLm9yZyIgPG1haWx0 bzppZXNnQGlldGYub3JnPiwgIm1haWx0bzpzaXBjb3JlQGlldGYub3JnIiA8bWFpbHRvOnNpcGNv cmVAaWV0Zi5vcmc+LCBBbGV4ZXkgTWVsbmlrb3YgPG1haWx0bzphYW1lbG5pa292QGZhc3RtYWls LmZtPg0KU3ViamVjdDogUmU6IFtzaXBjb3JlXSBBbGV4ZXkgTWVsbmlrb3YncyBObyBPYmplY3Rp b24gb24gZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6ICh3aXRoIENPTU1FTlQp DQrCoA0KQ2FuIHlvdSBwcm9wb3NlIHNvbWUgdGV4dD8gDQrCoA0KVGhhbmtzLA0KwqBSaWZhYXQN CsKgDQrCoA0KT24gVGh1LCBPY3QgMzEsIDIwMTkgYXQgMTE6NDQgQU0gQ2hyaXN0ZXIgSG9sbWJl cmcgPG1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20+IHdyb3RlOg0KSGksDQrC oA0KUGVyaGFwcyB3ZSBjb3VsZCBhZGQgc29tZSB0ZXh0IGFib3V0IHRoZSBJTVMgdXNlLWNhc2Us IGluIG9yZGVyIHRvIGV4cGxhaW4gdGhlIGVtcHR5IHZhbHVlPw0KwqANClJlZ2FyZHMsDQrCoA0K Q2hyaXN0ZXINCsKgDQpGcm9tOiBzaXBjb3JlIDxtYWlsdG86c2lwY29yZS1ib3VuY2VzQGlldGYu b3JnPiBvbiBiZWhhbGYgb2YgQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnPW1h aWx0bzo0MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZz4NCkRhdGU6IFRodXJzZGF5LCAzMSBP Y3RvYmVyIDIwMTkgYXQgMTUuNTINClRvOiBSaWZhYXQgU2hla2gtWXVzZWYgPG1haWx0bzpyaWZh YXQuaWV0ZkBnbWFpbC5jb20+DQpDYzogIm1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZyIg PG1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZz4sICJtYWlsdG86ZHJhZnQtaWV0Zi1zaXBj b3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmciIDxtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRp Z2VzdC1zY2hlbWVAaWV0Zi5vcmc+LCAibWFpbHRvOmllc2dAaWV0Zi5vcmciIDxtYWlsdG86aWVz Z0BpZXRmLm9yZz4sICJtYWlsdG86c2lwY29yZUBpZXRmLm9yZyIgPG1haWx0bzpzaXBjb3JlQGll dGYub3JnPiwgQWxleGV5IE1lbG5pa292IDxtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbT4N ClN1YmplY3Q6IFJlOiBbc2lwY29yZV0gQWxleGV5IE1lbG5pa292J3MgTm8gT2JqZWN0aW9uIG9u IGRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLTEyOiAod2l0aCBDT01NRU5UKQ0KwqAN CkhpLA0KwqANCj5UaGlzIElNUyBiZWhhdmlvciB3b3VsZCBoYXZlIGJlZW4gaW4gdmlvbGF0aW9u IG9mIFJGQzMyNjEgd2hpY2ggc3BlY2lmaWVkIGV4YWN0bHkgMzIgSGV4IGNoYXJhY3RlcnMuDQo+ U28sIHRoaXMgY2hhbmdlIHNob3VsZCBub3QgbWFrZSBtdWNoIG9mwqBhIGRpZmZlcmVuY2UgaW4g dGhpcyBjYXNlLg0KwqANCkluIHJlYWxpdHkgaXQgcHJvYmFibHkgZG9lc27igJl0IG1ha2UgYSBk aWZmZXJlbmNlLCBidXQgaXQgd291bGQgbWFrZSB0aGUgSU1TIHByb2NlZHVyZXMg4oCcYWxpZ25l ZOKAnSB3aXRoIHRoZSBJRVRGIHNwZWMuDQrCoA0KUmVnYXJkcywNCsKgDQpDaHJpc3Rlcg0KwqAN CsKgDQrCoA0KwqANCk9uIFRodSwgT2N0IDMxLCAyMDE5IGF0IDk6MzcgQU0gQ2hyaXN0ZXIgSG9s bWJlcmcgPG1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20+IHdyb3RlOg0KwqAN CkhpLA0KwqANClRoZSByZWFzb24gZm9yIHRoZSBlbXB0eSB2YWx1ZSBjb21lcyBmcm9tIElNUyBh bmQgQUtBLCB3aGVyZSB5b3UgbmVlZCB0byBpbmNsdWRlIHRoZSB1c2VyIGlkIGFscmVhZHkgaW4g dGhlIGluaXRpYWwgUkVHSVNURVIgcmVxdWVzdCAodGhpcyBzZWVtcyB0byBiZSBtaXNzaW5nIGZy b20gUkZDIDMzMTAsIGJ1dCB0aGF04oCZcyBhIHNlcGFyYXRlIHRvcGljKSBpbiBvcmRlciBmb3Ig dGhlIHNlcnZlciB0byBjcmVhdGUgdGhlIGNoYWxsZW5nZSzCoCBtZWFuaW5nIHRoYXQgaW4gdGhl IGluaXRpYWwgUkVHSVNURVIgcmVxdWVzdCB5b3UgaW5jbHVkZSBhbiBBdXRob3JpemF0aW9uIGhl YWRlciBmaWVsZCB3aXRoIHRoZSB1c2VybmFtZSBwYXJhbWV0ZXIgY2FycnlpbmcgdGhlIElNUyBw cml2YXRlIHVzZXIgaWRlbnRpdHksIHRoZSByZWFsbSBwYXJhbWV0ZXIgYW5kIHRoZSB1cmkgcGFy YW1ldGVyLiBBdCB0aGlzIHBvaW50IHlvdSBvYnZpb3VzbHkgZG9u4oCZdCB5ZXQgaGF2ZSB0aGUg cmVzcG9uc2UsIHNvIGluIElNUyBpdCBpcyBzcGVjaWZpZWQgdGhhdCB0aGUgcmVzcG9uc2UgcGFy YW1ldGVyIGlzIGluc2VydGVkIHdpdGggYW4gZW1wdHkgdmFsdWUuDQrCoA0KV0hZIGl0IHdhcyBz cGVjaWZpZWQgdGhhdCB3YXkgKGluc3RlYWQgb2Ygc2ltcGx5IG5vdCBpbmNsdWRpbmcgdGhlIHJl c3BvbnNlIHBhcmFtZXRlcikgSSBkb27igJl0IGtub3csIGJ1dCBJIGRvIGtub3cgdGhhdCBpdCBo YXMgYmVlbiBpbXBsZW1lbnRlZCBhbmQgZGVwbG95ZWQgdGhhdCB3YXkgZm9yIG1hbnkgeWVhcnMu DQrCoA0KUmVnYXJkcywNCsKgDQpDaHJpc3Rlcg0KwqANCsKgDQpGcm9tOiBzaXBjb3JlIDxtYWls dG86c2lwY29yZS1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgUmlmYWF0IFNoZWtoLVl1 c2VmIDxtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tPg0KRGF0ZTogVGh1cnNkYXksIDMxIE9j dG9iZXIgMjAxOSBhdCAxNS4yMA0KVG86IEFsZXhleSBNZWxuaWtvdiA8bWFpbHRvOmFhbWVsbmlr b3ZAZmFzdG1haWwuZm0+DQpDYzogIm1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZyIgPG1h aWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZz4sICJtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3Jl LWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmciIDxtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2Vz dC1zY2hlbWVAaWV0Zi5vcmc+LCAibWFpbHRvOmllc2dAaWV0Zi5vcmciIDxtYWlsdG86aWVzZ0Bp ZXRmLm9yZz4sICJtYWlsdG86c2lwY29yZUBpZXRmLm9yZyIgPG1haWx0bzpzaXBjb3JlQGlldGYu b3JnPg0KU3ViamVjdDogUmU6IFtzaXBjb3JlXSBBbGV4ZXkgTWVsbmlrb3YncyBObyBPYmplY3Rp b24gb24gZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6ICh3aXRoIENPTU1FTlQp DQrCoA0KRG9uZS4NCsKgDQpPbiBUaHUsIE9jdCAzMSwgMjAxOSBhdCA5OjEzIEFNIEFsZXhleSBN ZWxuaWtvdiA8bWFpbHRvOmFhbWVsbmlrb3ZAZmFzdG1haWwuZm0+IHdyb3RlOg0KT24gVGh1LCBP Y3QgMzEsIDIwMTksIGF0IDE6MTEgUE0sIFJpZmFhdCBTaGVraC1ZdXNlZiB3cm90ZToNCkhpIEFs ZXhleSwNCsKgDQpJIGFtIGZpbmUgd2l0aCBQYXVsJ3Mgc3VnZ2VzdGlvbi4NCkFyZSB5b3Ugb2sg d2l0aMKgIjMyKkxIRVgiPw0KWWVzIQ0KwqANClRoYW5rIHlvdSwNCkFsZXhleQ0KwqANClJlZ2Fy ZHMsDQrCoFJmYWF0DQrCoA0KwqANCk9uIFRodSwgT2N0IDMxLCAyMDE5IGF0IDc6MjIgQU0gQWxl eGV5IE1lbG5pa292IDxtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbT4gd3JvdGU6DQrCoA0K SGkgUmlmYWF0LA0KwqANCk9uIFdlZCwgT2N0IDMwLCAyMDE5LCBhdCA5OjUwIFBNLCBSaWZhYXQg U2hla2gtWXVzZWYgd3JvdGU6DQpUaGFua3MgQWxleGV5IQ0KwqANCkkgYW0gZmluZSB3aXRoIHRo ZSBmaXJzdCB0d28gY29tbWVudHMsIGFuZCB3aWxsIGZpeCB0aGVzZSBpbiB0aGUgY29taW5nIHZl cnNpb24gb2YgdGhlIGRvY3VtZW50Lg0KwqANCkkgYW0gbm90IHN1cmUgSSBmb2xsb3cgdGhlIDNy ZCBvbmUuIFdoeSBkbyB5b3Ugc2VlIHRoZSBuZWVkIGZvciBhIG1pbmltdW0gbnVtYmVyIG9mIGhl eCBkaWdpdHM/DQpZb3UgZG8gc2F5IHRoYXQgdGhlIG51bWJlciBvZiBoZXggZGlnaXRzIG1hdGNo IHRoZSBoYXNoIGxlbmdodCwgc28gaXQgaXMgcHJvYmFibHkgT2suIEhvd2V2ZXIgZW1wdHkgdmFs dWUgaXMgbmV2ZXIgdmFsaWQgKGFuZCBJIGFtIHdvcnJpZWQgaXQgbWlnaHQgaGl0IHNvbWUgYm91 bmRhcnkgY29uZGl0aW9uIGJ1ZyBpbiBpbXBsZW1lbnRhdGlvbnMpLCBzbyBwcm9oaWJpdGluZyBp dCBpbiBBQk5GIHdvdWxkIGJlIHRoZSBiZXN0Lg0KwqANCkJlc3QgUmVnYXJkcywNCkFsZXhleQ0K wqANClJlZ2FyZHMsDQrCoFJpZmFhdA0KwqANCsKgDQrCoA0KT24gV2VkLCBPY3QgMzAsIDIwMTkg YXQgMToxNiBQTSBBbGV4ZXkgTWVsbmlrb3YgdmlhIERhdGF0cmFja2VyIDxtYWlsdG86bm9yZXBs eUBpZXRmLm9yZz4gd3JvdGU6DQpBbGV4ZXkgTWVsbmlrb3YgaGFzIGVudGVyZWQgdGhlIGZvbGxv d2luZyBiYWxsb3QgcG9zaXRpb24gZm9yDQpkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVt ZS0xMjogTm8gT2JqZWN0aW9uDQrCoA0KV2hlbiByZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0aGUg c3ViamVjdCBsaW5lIGludGFjdCBhbmQgcmVwbHkgdG8gYWxsDQplbWFpbCBhZGRyZXNzZXMgaW5j bHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpcw0KaW50 cm9kdWN0b3J5IHBhcmFncmFwaCwgaG93ZXZlci4pDQrCoA0KwqANClBsZWFzZSByZWZlciB0byBo dHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLWNyaXRlcmlhLmh0bWwN CmZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3Np dGlvbnMuDQrCoA0KwqANClRoZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9z aXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLw0KwqANCsKgDQrCoA0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KQ09NTUVOVDoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCsKgDQpJIGFtIGFncmVlaW5nIHdpdGgg QWxpc3NhJ3MgRElTQ1VTUy4NCsKgDQpBbHNvLCBJIGhhdmUgYSBmZXcgY29tbWVudHMgb2YgbXkg b3duOg0KwqANCjEpIExhc3QgcGFyYSBvZiBTZWN0aW9uIDIuMToNCsKgDQoyLjEuwqAgSGFzaCBB bGdvcml0aG1zDQrCoA0KwqAgwqBBIFVBUyBwcmlvcml0aXplcyB3aGljaCBhbGdvcml0aG0gdG8g dXNlIGJhc2VkIG9uIHRoZSBvcmRlcmluZyBvZiB0aGUNCsKgIMKgY2hhbGxlbmdlIGhlYWRlciBm aWVsZHMgaW4gdGhlIHJlc3BvbnNlIGl0IGlzIHByZXBhcmluZy4NCsKgDQpUaGlzIGxvb2tzIGVp dGhlciB3cm9uZyBvciBjb25mdXNpbmcgdG8gbWUuIEkgdGhpbmsgeW91IGFyZSBqdXN0IHNheWlu ZyBoZXJlDQp0aGF0IHRoZSBvcmRlciBpcyBkZWNpZGVkIGJ5IHRoZSBzZXJ2ZXIgYXQgdGhpcyBw b2ludC4NCsKgDQrCoCDCoFRoYXQNCsKgIMKgcHJvY2VzcyBpcyBzcGVjaWZpZWQgaW4gc2VjdGlv biAyLjMgYW5kIHBhcmFsbGVscyB0aGUgcHJvY2VzcyB1c2VkIGluDQrCoCDCoEhUVFAgc3BlY2lm aWVkIGJ5IFtSRkM3NjE2XS4NCsKgDQpTbyBiYXNlZCBvbiB0aGUgYWJvdmUsIG15IHN1Z2dlc3Rl ZCByZXBsYWNlbWVudCBmb3IgYm90aCBzZW50ZW5jZXM6DQrCoA0KwqAgwqBBIFVBUyBwcmlvcml0 aXplcyB3aGljaCBhbGdvcml0aG0gdG8gdXNlIGJhc2VkIG9uIGl0cyBwb2xpY3ksDQrCoCDCoHdo aWNoIGlzIHNwZWNpZmllZCBpbiBzZWN0aW9uIDIuMyBhbmQgcGFyYWxsZWxzIHRoZSBwcm9jZXNz IHVzZWQgaW4NCsKgIMKgSFRUUCBzcGVjaWZpZWQgYnkgW1JGQzc2MTZdLg0KwqANCjIpIExhc3Qg cGFyYSBvZiBTZWN0aW9uIDIuNDoNCsKgDQrCoCDCoElmIHRoZSBVQUMgY2Fubm90IHJlc3BvbmQg dG8gYW55IG9mIHRoZSBjaGFsbGVuZ2VzIGluIHRoZSByZXNwb25zZSwNCsKgIMKgdGhlbiBpdCBT SE9VTEQgYWJhbmRvbiBhdHRlbXB0cyB0byBzZW5kIHRoZSByZXF1ZXN0IHVubGVzcyBhIGxvY2Fs DQrCoCDCoHBvbGljeSBkaWN0YXRlcyBvdGhlcndpc2UuDQrCoA0KSXMgdHJ5aW5nIG90aGVyIG5v biBEaWdlc3QgYWxnb3JpdGhtcyBjb3ZlcmVkIGJ5ICJTSE9VTEQgYWJhbmRvbiI/DQpJZiB5ZXMs IG1heWJlIHlvdSBzaG91bGQgbWFrZSB0aGlzIGNsZWFyZXIuDQrCoA0KwqAgwqBGb3IgZXhhbXBs ZSwgaWYgdGhlIFVBQyBkb2VzIG5vdCBoYXZlDQrCoCDCoGNyZWRlbnRpYWxzIG9yIGhhcyBzdGFs ZSBjcmVkZW50aWFscyBmb3IgYW55IG9mIHRoZSByZWFsbXMsIHRoZSBVQUMNCsKgIMKgd2lsbCBh YmFuZG9uIHRoZSByZXF1ZXN0Lg0KwqANCjMpIEluIFNlY3Rpb24gMi43Og0KwqANCsKgIMKgIMKg IHJlcXVlc3QtZGlnZXN0ID0gTERRVU9UICpMSEVYIFJEUVVPVA0KwqANClRoaXMgbm93IGFsbG93 cyBlbXB0eSB2YWx1ZS4gSSBzdWdnZXN0IHlvdSBzcGVjaWZ5IGEgbWluaW11bSBudW1iZXIgb2Yg aGV4DQpkaWdpdHMgYWxsb3dlZCBpbiB0aGUgQUJORi4gT3IgYXQgbGVhc3QgY2hhbmdlICIqTEhF WCIgdG8gIjIqTEhFWCIuDQrCoA0KwqANCsKgDQrCoA0KDQo= From nobody Sun Nov 3 02:01:33 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E729120108; Sun, 3 Nov 2019 02:01:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NO6Tetr_wOsv; Sun, 3 Nov 2019 02:01:21 -0800 (PST) Received: from mail-il1-x142.google.com (mail-il1-x142.google.com [IPv6:2607:f8b0:4864:20::142]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A212120104; Sun, 3 Nov 2019 02:01:21 -0800 (PST) Received: by mail-il1-x142.google.com with SMTP id y5so12270028ilb.5; Sun, 03 Nov 2019 02:01:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=VutVg5vsqyAIO6v+6UAamxga5CdbRcHl4dwFGMa00CY=; b=HC77Rb6nuLn8fDZpTDYMr8eA7RMZnBWEZmjU0iwyWX/ZlFYWDjQ64LztM9xN8/rnZP nKtKPIMyqLT0YAR/XPot7OGp0JpznOiSUPjRm20pMNbnAcj1sVQvvGK99ze/9iyIkvYf fSAvqfGZjUmrtO6IF3vVXqlhYhxaO7very/k+EMzCWk3LomUpo48coEgTbiDyaaizE+/ KlSWQkMkpWW5PiKZNNsVnNJcfod5A5yUvZQiStdAKQOTMENV4jHDNV6ffL9T6L4aCYCI XCBOtIRxFU8sgozxvIdG+y/2vf8KQTELbcQfkNKQ4WJLPkOuFb4VzsxtvaLk71rNo6eI WjOQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=VutVg5vsqyAIO6v+6UAamxga5CdbRcHl4dwFGMa00CY=; b=g7mKiWdbFL+l00kgdNZpcHtciEDVD8Hdpkzrk4i2Wcg8gF99PBMl/oT+QcLWOUuEmD uTByQDH3YCLrzCtjoHq/T9UICQBSf6STdB24xagDqH++hn+aZweWGuvJFSAw2RgCvihe Dab6P3r06NbUXvObT8mCgIL2uaEYgzyREUWWebzcgUbxjFoWKEbcSj5fVt5h068heJcr tc4Arm3XkC9t4vkOqq7F4tF388Nv9ooO/6cGkTedRm6usd+qCFaTfMBp7ZwBHQQ18nN8 gTH0ABXbs7AEPnaCzWfIgGx9lnbjiWCWlEN4dnrVhnhYGSwt4fEHoNA2Wd2nlQlm1wIf bWPw== X-Gm-Message-State: APjAAAUhTwsxshK4ZkwGcthQ5cgdA792AOuwt6sqz9cvrXgG9r/4jVLH 3Pb0mbTp9YAR9g9NKQ1MGoIp0W0Ljn8yDbUkVBw= X-Google-Smtp-Source: APXvYqxGFnLbQZlrcxcenYpEK5Fe/J4O7058T7IzkpRNN+zxjcxdzubUA+CfV2wsk+0l9PishQ83d+FVCpOdspC1EOI= X-Received: by 2002:a92:9cce:: with SMTP id x75mr22989480ill.31.1572775280760; Sun, 03 Nov 2019 02:01:20 -0800 (PST) MIME-Version: 1.0 References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> In-Reply-To: <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> From: Rifaat Shekh-Yusef Date: Sun, 3 Nov 2019 05:01:09 -0500 Message-ID: To: Alexey Melnikov Cc: Christer Holmberg , "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-digest-scheme@ietf.org" , The IESG , SIPCORE Content-Type: multipart/alternative; boundary="000000000000ebdb3005966e470f" Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Nov 2019 10:01:26 -0000 --000000000000ebdb3005966e470f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Alexey, Christer, How about the following: 1. Change the ABNF to "request-digest =3D LDQUOT *LHEX RDQUOT" 2. Change the text below it to say "The number of hex digits is implied by the length of the value of the algorithm used, with the minimum size of 32. A parameter with an empty value (empty string) is allowed when the algorithm is not specified."" Regards, Rifaat On Fri, Nov 1, 2019 at 6:10 AM Alexey Melnikov wrote: > > On 1 Nov 2019, at 07:09, Christer Holmberg > wrote: > > Hi, > > > > >I do not have a strong opinion here. > > > > > >Anybody has an opinion or thoughts about adding such a text? > > > > In addition we=E2=80=99d obviously also change the ABNF back, to allow em= pty > values. > > > If the ABNF is changed back for this, I think some extra text would be > useful. > > > > Regards, > > > > Christer > > > > > > > > > > On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > Something like this: > > > > =E2=80=9CIn some cases a UAC needs to include an Authorization header fie= ld in a > request before it has received a challenge, in order to provide user > information (using the =E2=80=98userinfo=E2=80=99 header field parameter)= that is needed in > order to create the challenge. An example of such case is when the HTTP > Digest Authentication Using AKA mechanism (RFC3310) (RFC4169) is used. In > such case the Authorization header field would typically not contain a > =E2=80=98response=E2=80=99 header field parameter before a challenge resp= onse is provided. > However, for the IP Multimedia Subsystem (IMS) it has been specified that > the Authorization header field in such case does contain a =E2=80=98resp= onse=E2=80=99 > header field parameter, with an empty value (empty string). For that reas= on > the modified request-digest ABNF allows such empty values.=E2=80=9D > > > > Regards, > > > > Christer > > > > > > *From: *Rifaat Shekh-Yusef > *Date: *Thursday, 31 October 2019 at 19.22 > *To: *Christer Holmberg > *Cc: *Christer Holmberg , > "sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" , Alexey Melnikov < > aamelnikov@fastmail.fm> > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Can you propose some text? > > > > Thanks, > > Rifaat > > > > > > On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > Hi, > > > > Perhaps we could add some text about the IMS use-case, in order to explai= n > the empty value? > > > > Regards, > > > > Christer > > > > *From: *sipcore on behalf of Christer Holmberg > > *Date: *Thursday, 31 October 2019 at 15.52 > *To: *Rifaat Shekh-Yusef > *Cc: *"sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" , Alexey Melnikov < > aamelnikov@fastmail.fm> > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Hi, > > > > >This IMS behavior would have been in violation of RFC3261 which specifie= d > exactly 32 Hex characters. > > >So, this change should not make much of a difference in this case. > > > > In reality it probably doesn=E2=80=99t make a difference, but it would ma= ke the > IMS procedures =E2=80=9Caligned=E2=80=9D with the IETF spec. > > > > Regards, > > > > Christer > > > > > > > > > > On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > > > Hi, > > > > The reason for the empty value comes from IMS and AKA, where you need to > include the user id already in the initial REGISTER request (this seems t= o > be missing from RFC 3310, but that=E2=80=99s a separate topic) in order f= or the > server to create the challenge, meaning that in the initial REGISTER > request you include an Authorization header field with the username > parameter carrying the IMS private user identity, the realm parameter and > the uri parameter. At this point you obviously don=E2=80=99t yet have the= response, > so in IMS it is specified that the response parameter is inserted with an > empty value. > > > > WHY it was specified that way (instead of simply not including the > response parameter) I don=E2=80=99t know, but I do know that it has been > implemented and deployed that way for many years. > > > > Regards, > > > > Christer > > > > > > *From: *sipcore on behalf of Rifaat > Shekh-Yusef > *Date: *Thursday, 31 October 2019 at 15.20 > *To: *Alexey Melnikov > *Cc: *"sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Done. > > > > On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov > wrote: > > On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef wrote: > > Hi Alexey, > > > > I am fine with Paul's suggestion. > > Are you ok with "32*LHEX"? > > Yes! > > > > Thank you, > > Alexey > > > > Regards, > > Rfaat > > > > > > On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov > wrote: > > > > Hi Rifaat, > > > > On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef wrote: > > Thanks Alexey! > > > > I am fine with the first two comments, and will fix these in the coming > version of the document. > > > > I am not sure I follow the 3rd one. Why do you see the need for a minimum > number of hex digits? > > You do say that the number of hex digits match the hash lenght, so it is > probably Ok. However empty value is never valid (and I am worried it migh= t > hit some boundary condition bug in implementations), so prohibiting it in > ABNF would be the best. > > > > Best Regards, > > Alexey > > > > Regards, > > Rifaat > > > > > > > > On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via Datatracker < > noreply@ietf.org> wrote: > > Alexey Melnikov has entered the following ballot position for > > draft-ietf-sipcore-digest-scheme-12: No Objection > > > > When responding, please keep the subject line intact and reply to all > > email addresses included in the To and CC lines. (Feel free to cut this > > introductory paragraph, however.) > > > > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > I am agreeing with Alissa's DISCUSS. > > > > Also, I have a few comments of my own: > > > > 1) Last para of Section 2.1: > > > > 2.1. Hash Algorithms > > > > A UAS prioritizes which algorithm to use based on the ordering of the > > challenge header fields in the response it is preparing. > > > > This looks either wrong or confusing to me. I think you are just saying > here > > that the order is decided by the server at this point. > > > > That > > process is specified in section 2.3 and parallels the process used in > > HTTP specified by [RFC7616]. > > > > So based on the above, my suggested replacement for both sentences: > > > > A UAS prioritizes which algorithm to use based on its policy, > > which is specified in section 2.3 and parallels the process used in > > HTTP specified by [RFC7616]. > > > > 2) Last para of Section 2.4: > > > > If the UAC cannot respond to any of the challenges in the response, > > then it SHOULD abandon attempts to send the request unless a local > > policy dictates otherwise. > > > > Is trying other non Digest algorithms covered by "SHOULD abandon"? > > If yes, maybe you should make this clearer. > > > > For example, if the UAC does not have > > credentials or has stale credentials for any of the realms, the UAC > > will abandon the request. > > > > 3) In Section 2.7: > > > > request-digest =3D LDQUOT *LHEX RDQUOT > > > > This now allows empty value. I suggest you specify a minimum number of he= x > > digits allowed in the ABNF. Or at least change "*LHEX" to "2*LHEX". > > > > > > > > > > --000000000000ebdb3005966e470f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Alexey, Christer,

How about the followi= ng:
1. Change the ABNF to "request-digest =3D LDQUOT *LHEX R= DQUOT"
2. Change the text below it to say "The number o= f hex digits is implied by the length of the value of the algorithm used, w= ith the minimum size of 32. A parameter with an empty value (empty string) = is allowed when the algorithm is not specified.""

<= /div>
Regards,
=C2=A0Rifaat

On Fri, Nov 1, 2019 at 6:10 = AM Alexey Melnikov <aamelnikov= @fastmail.fm> wrote:

On 1 Nov 2019, at 07:09, Christer Ho= lmberg <christer.holmberg@ericsson.com> wrote:

Hi,

=C2=A0

>I do not have a strong opin= ion here.

>=C2=A0=

>Anybody has an opinion or t= houghts about adding such a text?

=C2=A0

In addition we=E2=80=99d obviou= sly also change the ABNF back, to allow empty values.


If the ABNF is changed back for th= is, I think some extra text would be useful.
<= div>

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg &l= t;chris= ter.holmberg@ericsson.com> wrote:

Something like this:<= /u>

=C2=A0

=E2=80=9CIn some cases a UAC ne= eds to include an Authorization header field in a request before it has rec= eived a challenge, in order to provide user information (using the =E2=80=98userinfo=E2=80=99 header field parameter) that is needed in o= rder to create the challenge. An example of such case is when the HTTP Dige= st Authentication Using AKA mechanism (RFC3310) (RFC4169) is used. In such = case the Authorization header field would typically not contain a =E2=80=98response=E2=80=99 header field parameter before a c= hallenge response is provided. However, for the IP Multimedia Subsystem (IM= S) it has been specified that the Authorization header field in such case d= oes contain a =C2=A0=E2=80=98response=E2=80=99 header field parameter, with an empty value (empty string). For that reason the modified request-d= igest ABNF allows such empty values.=E2=80=9D

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

From: Rifaat Shekh-Yusef &l= t;rifaat.ietf@gm= ail.com>
Date: Thursday, 31 October 2019 at 19.22
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.ietf.org<= /a>>, "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "draft-ietf-sipcore-digest-scheme@ietf.org" <dra= ft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org&g= t;, "sipcore@iet= f.org" <s= ipcore@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Can you propose some text?

=C2=A0

Thanks,

=C2=A0Rifaat

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg &= lt;chri= ster.holmberg@ericsson.com> wrote:

Hi,

=C2=A0

Perhaps we could add some text = about the IMS use-case, in order to explain the empty value?<= u>

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

From: sipcore <sipcore-bounces@ietf= .org> on behalf of Christer Holmberg <christer.holmberg=3D40ericsson.com@= dmarc.ietf.org>
Date: Thursday, 31 October 2019 at 15.52
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "dra= ft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.o= rg" <sipc= ore@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Hi,

=C2=A0

>This IMS behavior would hav= e been in violation of RFC3261 which specified exactly 32 Hex characters.

>So, this change should not = make much of=C2=A0a difference in this case.

=C2=A0

In reality it probably doesn=E2= =80=99t make a difference, but it would make the IMS procedures =E2=80=9Cal= igned=E2=80=9D with the IETF spec.

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg &l= t;chris= ter.holmberg@ericsson.com> wrote:

=C2=A0

Hi,

=C2=A0

The reason for the empty value = comes from IMS and AKA, where you need to include the user id already in th= e initial REGISTER request (this seems to be missing from RFC 3310, but that=E2=80=99s a separate topic) in order for the serve= r to create the challenge,=C2=A0 meaning that in the initial REGISTER reque= st you include an Authorization header field with the username parameter ca= rrying the IMS private user identity, the realm parameter and the uri parameter. At this point you obviously don=E2=80=99t= yet have the response, so in IMS it is specified that the response paramet= er is inserted with an empty value.

=C2=A0

WHY it was specified that way (= instead of simply not including the response parameter) I don=E2=80=99t kno= w, but I do know that it has been implemented and deployed that way for many years.

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

From: sipcore <sipcore-bounces@ietf= .org> on behalf of Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Thursday, 31 October 2019 at 15.20
To: Alexey Melnikov <aamelnikov@fastmail.fm>
Cc: "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "dra= ft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.o= rg" <sipc= ore@ietf.org>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Done.

=C2=A0

On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov <= aamelnikov@fast= mail.fm> wrote:

On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef= wrote:

Hi Alexey,

=C2=A0

I am fine with Paul's suggestion.<= /p>

Are you ok with=C2=A0&qu= ot;32*LHEX"?

Yes!

=C2=A0

Thank you,

Alexey

=C2=A0

Regards,

=C2=A0Rfaat

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov <= aamelnikov@fast= mail.fm> wrote:

=C2=A0

Hi Rifaat,

=C2=A0

On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef= wrote:

Thanks Alexey!

=C2=A0

I am fine with the first two comments, and will fix = these in the coming version of the document.

=C2=A0

I am not sure I follow the 3rd one. Why do you see t= he need for a minimum number of hex digits?

You do say that the number of hex digits match the h= ash lenght, so it is probably Ok. However empty value is never valid (and I= am worried it might hit some boundary condition bug in implementations), so prohibiting it in ABNF would be the best.

=C2=A0

Best Regards,

Alexey

=C2=A0

Regards,

=C2=A0Rifaat

=C2=A0

=C2=A0

=C2=A0

On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via = Datatracker <norep= ly@ietf.org> wrote:

Alexey Melnikov has entered the following ballot pos= ition for

draft-ietf-sipcore-digest-scheme-12: No Objection=

=C2=A0

When responding, please keep the subject line intact= and reply to all

email addresses included in the To and CC lines. (Fe= el free to cut this

introductory paragraph, however.)

=C2=A0

=C2=A0

for more information about IESG DISCUSS and COMMENT = positions.

=C2=A0

=C2=A0

The document, along with other ballot positions, can= be found here:

=C2=A0

=C2=A0

=C2=A0

----------------------------------------------------= ------------------

COMMENT:

----------------------------------------------------= ------------------

=C2=A0

I am agreeing with Alissa's DISCUSS.

=C2=A0

Also, I have a few comments of my own:=

=C2=A0

1) Last para of Section 2.1:

=C2=A0

2.1.=C2=A0 Hash Algorithms

=C2=A0

=C2=A0 =C2=A0A UAS prioritizes which algorithm to us= e based on the ordering of the

=C2=A0 =C2=A0challenge header fields in the response= it is preparing.

=C2=A0

This looks either wrong or confusing to me. I think = you are just saying here

that the order is decided by the server at this poin= t.

=C2=A0

=C2=A0 =C2=A0That

=C2=A0 =C2=A0process is specified in section 2.3 and= parallels the process used in

=C2=A0 =C2=A0HTTP specified by [RFC7616].<= /u>

=C2=A0

So based on the above, my suggested replacement for = both sentences:

=C2=A0

=C2=A0 =C2=A0A UAS prioritizes which algorithm to us= e based on its policy,

=C2=A0 =C2=A0which is specified in section 2.3 and p= arallels the process used in

=C2=A0 =C2=A0HTTP specified by [RFC7616].<= /u>

=C2=A0

2) Last para of Section 2.4:

=C2=A0

=C2=A0 =C2=A0If the UAC cannot respond to any of the= challenges in the response,

=C2=A0 =C2=A0then it SHOULD abandon attempts to send= the request unless a local

=C2=A0 =C2=A0policy dictates otherwise.

=C2=A0

Is trying other non Digest algorithms covered by &qu= ot;SHOULD abandon"?

If yes, maybe you should make this clearer.

=C2=A0

=C2=A0 =C2=A0For example, if the UAC does not have

=C2=A0 =C2=A0credentials or has stale credentials fo= r any of the realms, the UAC

=C2=A0 =C2=A0will abandon the request.=

=C2=A0

3) In Section 2.7:

=C2=A0

=C2=A0 =C2=A0 =C2=A0 request-digest =3D LDQUOT *LHEX= RDQUOT

=C2=A0

This now allows empty value. I suggest you specify a= minimum number of hex

digits allowed in the ABNF. Or at least change "= ;*LHEX" to "2*LHEX".

=C2=A0

=C2=A0

=C2=A0

=C2=A0

--000000000000ebdb3005966e470f-- From nobody Sun Nov 3 10:54:09 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EB2312008F; Sun, 3 Nov 2019 10:54:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uaCEpyDNYL4V; Sun, 3 Nov 2019 10:53:56 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140089.outbound.protection.outlook.com [40.107.14.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF292120018; Sun, 3 Nov 2019 10:53:55 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KMZPJVzTiM62v3AaZ5Tq9BqgvEVToYoASo5UYDfYLYNyeIovefbglKPuReNxKlHy8dtaY6dVKCLfU9wk9QgsRt81qc0zx6iPpiwu6BfbCRw4XQrh/PpFmVYklsxCCbGnODKXlZZ8DEZR5+2Pa7s/0HxxPjfFrG+X2KWCus2VxnIKJs4MgCSKmG2eqLKN3T6pBbgapPo54ZDP/kvPu7nYN6EbHyqzZDdMonrk2XQr253AHh5Gzs0wgrPk6ujhOxzMxGAO+fjJGq+iGnBbrtHNoeTcY1vyhEsjAAR7WSmfM8xNAyqCwG4Gf2WAiDQRt+71Xi5PHYbKr5F/k/MQYOydAw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MZTQbR2HkVGvSVHswQVNe3g7HgHdpRwi5giTtE+zZ2A=; b=GLM0d9P2JBY7ay2rV6Rq5PSEvif3AxJXQ7d2F+AjAenPxoRq1akcREC6m+Rck9bAOxvdOsCdFUgm+63w600W54ybMhGVGZt+VWTvd8gj2vZ7xRD/PZ50eKfx+bVqHU2MMvMX9T7T0NiQw1a0wfd8EMJvQO+IAuuDxpaKQIGESZOM909nij/utNQeFMetsR9R69P65e1sMRRcraSQPO07wx0DSKcAF6RQwEmxjhM2RP02S3L/MkMDLVrzfOz3MQlG2t7xm4IbuXX3EeMMOyHL/wjbMuFiu2jQbjc4h2Qf/u1lUyGzFcxwHKbD3+P37mjlbYoNwDpoYdAQrFwR3n3sqw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MZTQbR2HkVGvSVHswQVNe3g7HgHdpRwi5giTtE+zZ2A=; b=L5dS+JEhM6B23ITZcTRhmX4+uAHir5GEa4hIpYWNH7wdtx0JFmtrggscN85RcrsM7HDv3+g05kVBFcjR2T4kw6SW/7F9cCTA2ldCi2C9HCpvtpEqtsebV238DVSQJj9UJEGekc+7mRekClIWbxybyiZ5TNg3hrvFTqZczg5xBfs= Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB3292.eurprd07.prod.outlook.com (10.170.246.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.15; Sun, 3 Nov 2019 18:53:52 +0000 Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::5499:1231:e707:4cb7]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::5499:1231:e707:4cb7%7]) with mapi id 15.20.2408.024; Sun, 3 Nov 2019 18:53:52 +0000 From: Christer Holmberg To: Rifaat Shekh-Yusef , Alexey Melnikov CC: "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-digest-scheme@ietf.org" , The IESG , SIPCORE Thread-Topic: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) Thread-Index: AQHVj+3+/XQWOAP0gUmCkUmQAngGd6d04liA///hPYCAACLmgIAAH3GA///5uYCAAClCgIAAHA2AgADDMwCAABEIgIADIi+AgACUUBs= Date: Sun, 3 Nov 2019 18:53:52 +0000 Message-ID: References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [188.127.223.154] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3eddb733-8203-4823-bd91-08d7608f2bb8 x-ms-traffictypediagnostic: HE1PR07MB3292: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0210479ED8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(396003)(366004)(376002)(39860400002)(346002)(189003)(199004)(18543002)(5660300002)(6436002)(14454004)(316002)(7696005)(966005)(66476007)(52536014)(55016002)(5070765005)(4326008)(256004)(54896002)(3846002)(44832011)(9686003)(7736002)(6306002)(2906002)(74316002)(81156014)(81166006)(8676002)(71190400001)(71200400001)(236005)(229853002)(14444005)(86362001)(110136005)(54906003)(105004)(11346002)(21615005)(99286004)(8936002)(66066001)(446003)(6246003)(33656002)(486006)(6116002)(186003)(6506007)(66946007)(53546011)(66446008)(476003)(102836004)(19627405001)(64756008)(66556008)(25786009)(26005)(606006)(76116006)(478600001)(76176011); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3292; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 6Gs5JiqZ6WbzyU5sJzeQ3j6QoX82MjdEk9u0tpa6kW1yAePZ+XVlDT7odMjUOLtgNpserE6G4w+fIG0u8cnjWHTkJ+I/f+BxuWqUIFh7KXkG2mqvQ9TE+3DlArJNKpRmx0F8/XLr5yj1UczZRYt0+EA0jh4e/7KrpmHs1Zc5mgZvgcOvVLpueSDHLM9StMpW2nLv+F+qjtPKRdzF1Eczok6fHn31z+TAdtVhamCo5U84rVD/scxVQoThNVHLdpedYVOEFtJSYF1818T4TC4Cjltzz58+lx1pDrpDZpKZw6v2ebesYo3XbE0zLVP9fKESlEgujwmjXW5Usdg0omYIaV2KV2fksHrd1BD+nqIj2MygEFBbmLfyFN1x07AVscBYbHKfkETUgFPjkLVr7sSRY176J8Ih4RmoSYPfapYgpHLw3RL7qU2vPzHvV3+zEtuHpOzN/BpjXlnB1t/nlEOuW7Qmavie3omFJj0rcEuyRb4= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_HE1PR07MB31611E03B4AE9575E9C224D8937C0HE1PR07MB3161eurp_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3eddb733-8203-4823-bd91-08d7608f2bb8 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Nov 2019 18:53:52.4402 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 978raziBj93lS7YD0kCO+qdsSp3BSWtN6EWzU/hvxKeiqrrIlbsfQbRluGVZDPU20Ss3SpZfIb5djVUAu8NwwiFVe15oQWLcY8uTyPwjfTc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3292 Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Nov 2019 18:54:01 -0000 --_000_HE1PR07MB31611E03B4AE9575E9C224D8937C0HE1PR07MB3161eurp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, I am fine with the suggestion, but instead of talking about an algorithm no= t being provided I would like to talk about a *challenge response* not bein= g provided. Regards, Christer ________________________________ From: Rifaat Shekh-Yusef Sent: Sunday, November 3, 2019 12:01 PM To: Alexey Melnikov Cc: Christer Holmberg ; sipcore-chairs@ietf= .org ; draft-ietf-sipcore-digest-scheme@ietf.org <= draft-ietf-sipcore-digest-scheme@ietf.org>; The IESG ; SIPCO= RE Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore= -digest-scheme-12: (with COMMENT) Alexey, Christer, How about the following: 1. Change the ABNF to "request-digest =3D LDQUOT *LHEX RDQUOT" 2. Change the text below it to say "The number of hex digits is implied by = the length of the value of the algorithm used, with the minimum size of 32.= A parameter with an empty value (empty string) is allowed when the algorit= hm is not specified."" Regards, Rifaat On Fri, Nov 1, 2019 at 6:10 AM Alexey Melnikov > wrote: On 1 Nov 2019, at 07:09, Christer Holmberg > wrote: Hi, >I do not have a strong opinion here. > >Anybody has an opinion or thoughts about adding such a text? In addition we=92d obviously also change the ABNF back, to allow empty valu= es. If the ABNF is changed back for this, I think some extra text would be usef= ul. Regards, Christer On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg > wrote: Something like this: =93In some cases a UAC needs to include an Authorization header field in a = request before it has received a challenge, in order to provide user inform= ation (using the =91userinfo=92 header field parameter) that is needed in o= rder to create the challenge. An example of such case is when the HTTP Dige= st Authentication Using AKA mechanism (RFC3310) (RFC4169) is used. In such = case the Authorization header field would typically not contain a =91respon= se=92 header field parameter before a challenge response is provided. Howev= er, for the IP Multimedia Subsystem (IMS) it has been specified that the Au= thorization header field in such case does contain a =91response=92 header= field parameter, with an empty value (empty string). For that reason the m= odified request-digest ABNF allows such empty values.=94 Regards, Christer From: Rifaat Shekh-Yusef > Date: Thursday, 31 October 2019 at 19.22 To: Christer Holmberg > Cc: Christer Holmberg >, "sipcore-chairs@ietf.org" >, "draft-ietf-sipcore-digest-scheme@ietf.org" >, "iesg@ietf.org" >, "sipcore@ietf.org" >, Alexey Melnikov= > Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore= -digest-scheme-12: (with COMMENT) Can you propose some text? Thanks, Rifaat On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg > wrote: Hi, Perhaps we could add some text about the IMS use-case, in order to explain = the empty value? Regards, Christer From: sipcore > o= n behalf of Christer Holmberg > Date: Thursday, 31 October 2019 at 15.52 To: Rifaat Shekh-Yusef = > Cc: "sipcore-chairs@ietf.org" >, "draft-ietf-sipcore-digest-sc= heme@ietf.org" >, "iesg@ietf.org" >, "sipcore@ietf.org" >, Alexey Melnikov > Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore= -digest-scheme-12: (with COMMENT) Hi, >This IMS behavior would have been in violation of RFC3261 which specified = exactly 32 Hex characters. >So, this change should not make much of a difference in this case. In reality it probably doesn=92t make a difference, but it would make the I= MS procedures =93aligned=94 with the IETF spec. Regards, Christer On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg > wrote: Hi, The reason for the empty value comes from IMS and AKA, where you need to in= clude the user id already in the initial REGISTER request (this seems to be= missing from RFC 3310, but that=92s a separate topic) in order for the ser= ver to create the challenge, meaning that in the initial REGISTER request = you include an Authorization header field with the username parameter carry= ing the IMS private user identity, the realm parameter and the uri paramete= r. At this point you obviously don=92t yet have the response, so in IMS it = is specified that the response parameter is inserted with an empty value. WHY it was specified that way (instead of simply not including the response= parameter) I don=92t know, but I do know that it has been implemented and = deployed that way for many years. Regards, Christer From: sipcore > o= n behalf of Rifaat Shekh-Yusef > Date: Thursday, 31 October 2019 at 15.20 To: Alexey Melnikov > Cc: "sipcore-chairs@ietf.org" >, "draft-ietf-sipcore-digest-sc= heme@ietf.org" >, "iesg@ietf.org" >, "sipcore@ietf.org" > Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore= -digest-scheme-12: (with COMMENT) Done. On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov > wrote: On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef wrote: Hi Alexey, I am fine with Paul's suggestion. Are you ok with "32*LHEX"? Yes! Thank you, Alexey Regards, Rfaat On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov > wrote: Hi Rifaat, On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef wrote: Thanks Alexey! I am fine with the first two comments, and will fix these in the coming ver= sion of the document. I am not sure I follow the 3rd one. Why do you see the need for a minimum n= umber of hex digits? You do say that the number of hex digits match the hash lenght, so it is pr= obably Ok. However empty value is never valid (and I am worried it might hi= t some boundary condition bug in implementations), so prohibiting it in ABN= F would be the best. Best Regards, Alexey Regards, Rifaat On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via Datatracker > wrote: Alexey Melnikov has entered the following ballot position for draft-ietf-sipcore-digest-scheme-12: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I am agreeing with Alissa's DISCUSS. Also, I have a few comments of my own: 1) Last para of Section 2.1: 2.1. Hash Algorithms A UAS prioritizes which algorithm to use based on the ordering of the challenge header fields in the response it is preparing. This looks either wrong or confusing to me. I think you are just saying her= e that the order is decided by the server at this point. That process is specified in section 2.3 and parallels the process used in HTTP specified by [RFC7616]. So based on the above, my suggested replacement for both sentences: A UAS prioritizes which algorithm to use based on its policy, which is specified in section 2.3 and parallels the process used in HTTP specified by [RFC7616]. 2) Last para of Section 2.4: If the UAC cannot respond to any of the challenges in the response, then it SHOULD abandon attempts to send the request unless a local policy dictates otherwise. Is trying other non Digest algorithms covered by "SHOULD abandon"? If yes, maybe you should make this clearer. For example, if the UAC does not have credentials or has stale credentials for any of the realms, the UAC will abandon the request. 3) In Section 2.7: request-digest =3D LDQUOT *LHEX RDQUOT This now allows empty value. I suggest you specify a minimum number of hex digits allowed in the ABNF. Or at least change "*LHEX" to "2*LHEX". --_000_HE1PR07MB31611E03B4AE9575E9C224D8937C0HE1PR07MB3161eurp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
Hi,

I am fine with the suggestion, but instead of talking about an algori= thm not being provided I would like to talk about a *challenge response* no= t being provided.

Regards,

Christer


From: Rifaat Shekh-Yusef &l= t;rifaat.ietf@gmail.com>
Sent: Sunday, November 3, 2019 12:01 PM
To: Alexey Melnikov <aamelnikov@fastmail.fm>
Cc: Christer Holmberg <christer.holmberg@ericsson.com>; sipcor= e-chairs@ietf.org <sipcore-chairs@ietf.org>; draft-ietf-sipcore-diges= t-scheme@ietf.org <draft-ietf-sipcore-digest-scheme@ietf.org>; The IE= SG <iesg@ietf.org>; SIPCORE <sipcore@ietf.org>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-= sipcore-digest-scheme-12: (with COMMENT)
 
Alexey, Christer,

How about the following:
1. Change the ABNF to "request-digest =3D LDQUOT *LHEX RDQUOT&quo= t;
2. Change the text below it to say "The number of hex digits is i= mplied by the length of the value of the algorithm used, with the minimum s= ize of 32. A parameter with an empty value (empty string) is allowed when t= he algorithm is not specified.""

Regards,
 Rifaat

On Fri, Nov 1, 2019 at 6:10 AM Alex= ey Melnikov <aamelnikov@fastma= il.fm> wrote:

On 1 Nov 2019, at 07:09, Christer Holmberg <christer.holmberg@ericsson.com= > wrote:

Hi,

 

>I do not have a strong op= inion here.

> 

>Anybody has an opinion or= thoughts about adding such a text?

 

In addition we=92d obviously = also change the ABNF back, to allow empty values.


If the ABNF is changed back for this, I think some extra text would be usef= ul.

 

Regards,=

 

Christer=

 

 

 

 

On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg = <chr= ister.holmberg@ericsson.com> wrote:

Something like this:

 

=93In some cases a UAC needs = to include an Authorization header field in a request before it has receive= d a challenge, in order to provide user information (using the =91userinfo= =92 header field parameter) that is needed in order to create the challenge. An example of such case is when the HTTP= Digest Authentication Using AKA mechanism (RFC3310) (RFC4169) is used. In = such case the Authorization header field would typically not contain a =91r= esponse=92 header field parameter before a challenge response is provided. However, for the IP Multimedia Subsystem= (IMS) it has been specified that the Authorization header field in such ca= se does contain a  =91response=92 header field parameter, with an empt= y value (empty string). For that reason the modified request-digest ABNF allows such empty values.=94=

 

Regards,=

 

Christer=

 

 

Fro= m: Rifaat Shekh-Yusef <rifaat.ietf@gmail.co= m>
Date: Thursday, 31 October 2019 at 19.22
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.ietf.org<= /a>>, "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "draft-ietf-sipcore-digest-scheme@ietf.org" <dra= ft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org&g= t;, "sipcore@iet= f.org" <s= ipcore@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-= sipcore-digest-scheme-12: (with COMMENT)

 

Can you propose some text?

 

Thanks,

 Rifaat

 

 

On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg= <ch= rister.holmberg@ericsson.com> wrote:

Hi,

 

Perhaps we could add some tex= t about the IMS use-case, in order to explain the empty value?

 

Regards,=

 

Christer=

 

Fro= m: sipcore <sipcore-bounces@ietf.org= > on behalf of Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.ie= tf.org>
Date: Thursday, 31 October 2019 at 15.52
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "dra= ft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.o= rg" <sipc= ore@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-= sipcore-digest-scheme-12: (with COMMENT)

 

Hi,

 

>This IMS behavior would h= ave been in violation of RFC3261 which specified exactly 32 Hex characters.=

>So, this change should no= t make much of a difference in this case.

 

In reality it probably doesn= =92t make a difference, but it would make the IMS procedures =93aligned=94 = with the IETF spec.

 

Regards,=

 

Christer=

 

 

 

 

On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg = <chr= ister.holmberg@ericsson.com> wrote:

 

Hi,

 

The reason for the empty valu= e comes from IMS and AKA, where you need to include the user id already in = the initial REGISTER request (this seems to be missing from RFC 3310, but t= hat=92s a separate topic) in order for the server to create the challenge,  meaning that in the initial REGI= STER request you include an Authorization header field with the username pa= rameter carrying the IMS private user identity, the realm parameter and the= uri parameter. At this point you obviously don=92t yet have the response, so in IMS it is specified that the response= parameter is inserted with an empty value.

 

WHY it was specified that way= (instead of simply not including the response parameter) I don=92t know, b= ut I do know that it has been implemented and deployed that way for many ye= ars.

 

Regards,=

 

Christer=

 

 

Fro= m: sipcore <sipcore-bounces@ietf.org= > on behalf of Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Thursday, 31 October 2019 at 15.20
To: Alexey Melnikov <aamelnikov@fastmail.fm>
Cc: "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "dra= ft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.o= rg" <sipc= ore@ietf.org>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-= sipcore-digest-scheme-12: (with COMMENT)

 

Done.

 

On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov &l= t;aamelnikov@fa= stmail.fm> wrote:

On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yus= ef wrote:

Hi Alexey,

 

I am fine with Paul's suggestion.

Are you ok with &= quot;32*LHEX"?

Yes!

 

Thank you,

Alexey

 

Regards,

 Rfaat

 

 

On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov &l= t;aamelnikov@fa= stmail.fm> wrote:

 

Hi Rifaat,

 

On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yus= ef wrote:

Thanks Alexey!

 

I am fine with the first two comments, and will fi= x these in the coming version of the document.

 

I am not sure I follow the 3rd one. Why do you see= the need for a minimum number of hex digits?

You do say that the number of hex digits match the= hash lenght, so it is probably Ok. However empty value is never valid (and= I am worried it might hit some boundary condition bug in implementations),= so prohibiting it in ABNF would be the best.

 

Best Regards,

Alexey

 

Regards,

 Rifaat

 

 

 

On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov vi= a Datatracker <nor= eply@ietf.org> wrote:

Alexey Melnikov has entered the following ballot p= osition for

draft-ietf-sipcore-digest-scheme-12: No Objection<= u>

 

When responding, please keep the subject line inta= ct and reply to all

email addresses included in the To and CC lines. (= Feel free to cut this

introductory paragraph, however.)

 

 

for more information about IESG DISCUSS and COMMEN= T positions.

 

 

The document, along with other ballot positions, c= an be found here:

 

 

 

--------------------------------------------------= --------------------

COMMENT:

--------------------------------------------------= --------------------

 

I am agreeing with Alissa's DISCUSS.=

 

Also, I have a few comments of my own:

 

1) Last para of Section 2.1:

 

2.1.  Hash Algorithms

 

   A UAS prioritizes which algorithm to = use based on the ordering of the

   challenge header fields in the respon= se it is preparing.

 

This looks either wrong or confusing to me. I thin= k you are just saying here

that the order is decided by the server at this po= int.

 

   That

   process is specified in section 2.3 a= nd parallels the process used in

   HTTP specified by [RFC7616].

 

So based on the above, my suggested replacement fo= r both sentences:

 

   A UAS prioritizes which algorithm to = use based on its policy,

   which is specified in section 2.3 and= parallels the process used in

   HTTP specified by [RFC7616].

 

2) Last para of Section 2.4:

 

   If the UAC cannot respond to any of t= he challenges in the response,

   then it SHOULD abandon attempts to se= nd the request unless a local

   policy dictates otherwise.<= /u>

 

Is trying other non Digest algorithms covered by &= quot;SHOULD abandon"?

If yes, maybe you should make this clearer.=

 

   For example, if the UAC does not have=

   credentials or has stale credentials = for any of the realms, the UAC

   will abandon the request.

 

3) In Section 2.7:

 

      request-digest =3D LDQUOT *LH= EX RDQUOT

 

This now allows empty value. I suggest you specify= a minimum number of hex

digits allowed in the ABNF. Or at least change &qu= ot;*LHEX" to "2*LHEX".

 

 

 

 

--_000_HE1PR07MB31611E03B4AE9575E9C224D8937C0HE1PR07MB3161eurp_-- From nobody Sun Nov 3 12:28:55 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 094FC12007C; Sun, 3 Nov 2019 12:28:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nHELPNkqC6uC; Sun, 3 Nov 2019 12:28:49 -0800 (PST) Received: from mail-il1-x144.google.com (mail-il1-x144.google.com [IPv6:2607:f8b0:4864:20::144]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7ED13120073; Sun, 3 Nov 2019 12:28:49 -0800 (PST) Received: by mail-il1-x144.google.com with SMTP id s5so2744808iln.4; Sun, 03 Nov 2019 12:28:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=LUHI2zL5MHEYLS5z7/gtQF4wTaiOueAlGmMUK0UPjvY=; b=m/F47nO6ECfJhW4g0NU0UIs/VQnvzPAWp9K92Frilaf5/nSkQjbCDfgCwPhB3z/1Pv 2CXl34Xg7P3exeERyGIxy13afgKATztvD/hrWO6VUyX2so8ID4XpIro8X69mpkk5lnAK /oob5SzqicRg2LHa1MVjcZlMzliG23VGpxWXNx51GVWgqxesUWUFc0N+/t7JpIJArhxN F1Sar7FLDLIloNY1vQptlkWrGtqgIEAK6pPBGqRRJSd2n3dBDvilGkymUYUbnUF9rVNA rIObkpS0byyjFmiG4Le0BixDVagXIHIJ7mi4E+HIWPHoK4cjabJur/dJ5iF9cTo02FBd vBaQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=LUHI2zL5MHEYLS5z7/gtQF4wTaiOueAlGmMUK0UPjvY=; b=QyxkP5qOKaxRJonpVQ3T6JtSng4Q5u7sHT/D9P5RG8EtgS5MtIsDXBT4/MsgZhLB9k 1EvBCtFmqDirJLE0T5T9FmoWjBrS6nWixkCQyUgUJrHBcu3x8C2/cwHwoFLWaZdkNc7L EicroorTtWeGueUoQZqGWcZX6dz0dOW3RbvvB3eazZAv7LwcvJjmF3UHPkESNFoGD1JN JyWSq3LiuejncxVV0/c1TX8Sp7glv/rUyxllWUBcsMB5Isikdk31F71gcqaS7dLBkgw5 XZ1meUaIBmg+UxDMyWplbFhJu+Moo+JMKB/coQsSfgZcOuRfw2oS8j8ONIOp7lyluwzx HWxQ== X-Gm-Message-State: APjAAAXcnTuG2VS3GgHHQPznrS6igUQW4Lp8ViJshj2R/IeTOtM1XODw 7uEg4LSGw4Z9MYyisdCAds+u+2f6Bve9UKmo9mKN3Q== X-Google-Smtp-Source: APXvYqx0JQA1Tq8A8HjdiYZiDcPUJtyxFlSHGFNUvV932S4jFKZvuNGruLkgB4hc/afqDsHKSqr2vZShfd9DY7EwqJo= X-Received: by 2002:a92:9cce:: with SMTP id x75mr25105041ill.31.1572812928723; Sun, 03 Nov 2019 12:28:48 -0800 (PST) MIME-Version: 1.0 References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> In-Reply-To: From: Rifaat Shekh-Yusef Date: Sun, 3 Nov 2019 15:28:37 -0500 Message-ID: To: Christer Holmberg Cc: Alexey Melnikov , "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-digest-scheme@ietf.org" , The IESG , SIPCORE Content-Type: multipart/alternative; boundary="000000000000ea30b90596770b8c" Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Nov 2019 20:28:53 -0000 --000000000000ea30b90596770b8c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I am not sure I am following, What do you mean by "challenge response not being provided"? Regards, Rifaat On Sun, Nov 3, 2019 at 1:53 PM Christer Holmberg < christer.holmberg@ericsson.com> wrote: > Hi, > > I am fine with the suggestion, but instead of talking about an algorithm > not being provided I would like to talk about a *challenge response* not > being provided. > > Regards, > > Christer > > > ------------------------------ > *From:* Rifaat Shekh-Yusef > *Sent:* Sunday, November 3, 2019 12:01 PM > *To:* Alexey Melnikov > *Cc:* Christer Holmberg ; > sipcore-chairs@ietf.org ; > draft-ietf-sipcore-digest-scheme@ietf.org < > draft-ietf-sipcore-digest-scheme@ietf.org>; The IESG ; > SIPCORE > *Subject:* Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > Alexey, Christer, > > How about the following: > 1. Change the ABNF to "request-digest =3D LDQUOT *LHEX RDQUOT" > 2. Change the text below it to say "The number of hex digits is implied b= y > the length of the value of the algorithm used, with the minimum size of 3= 2. > A parameter with an empty value (empty string) is allowed when the > algorithm is not specified."" > > Regards, > Rifaat > > On Fri, Nov 1, 2019 at 6:10 AM Alexey Melnikov > wrote: > > > On 1 Nov 2019, at 07:09, Christer Holmberg > wrote: > > Hi, > > > > >I do not have a strong opinion here. > > > > > >Anybody has an opinion or thoughts about adding such a text? > > > > In addition we=E2=80=99d obviously also change the ABNF back, to allow em= pty > values. > > > If the ABNF is changed back for this, I think some extra text would be > useful. > > > > Regards, > > > > Christer > > > > > > > > > > On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > Something like this: > > > > =E2=80=9CIn some cases a UAC needs to include an Authorization header fie= ld in a > request before it has received a challenge, in order to provide user > information (using the =E2=80=98userinfo=E2=80=99 header field parameter)= that is needed in > order to create the challenge. An example of such case is when the HTTP > Digest Authentication Using AKA mechanism (RFC3310) (RFC4169) is used. In > such case the Authorization header field would typically not contain a > =E2=80=98response=E2=80=99 header field parameter before a challenge resp= onse is provided. > However, for the IP Multimedia Subsystem (IMS) it has been specified that > the Authorization header field in such case does contain a =E2=80=98resp= onse=E2=80=99 > header field parameter, with an empty value (empty string). For that reas= on > the modified request-digest ABNF allows such empty values.=E2=80=9D > > > > Regards, > > > > Christer > > > > > > *From: *Rifaat Shekh-Yusef > *Date: *Thursday, 31 October 2019 at 19.22 > *To: *Christer Holmberg > *Cc: *Christer Holmberg , > "sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" , Alexey Melnikov < > aamelnikov@fastmail.fm> > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Can you propose some text? > > > > Thanks, > > Rifaat > > > > > > On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > Hi, > > > > Perhaps we could add some text about the IMS use-case, in order to explai= n > the empty value? > > > > Regards, > > > > Christer > > > > *From: *sipcore on behalf of Christer Holmberg > > *Date: *Thursday, 31 October 2019 at 15.52 > *To: *Rifaat Shekh-Yusef > *Cc: *"sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" , Alexey Melnikov < > aamelnikov@fastmail.fm> > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Hi, > > > > >This IMS behavior would have been in violation of RFC3261 which specifie= d > exactly 32 Hex characters. > > >So, this change should not make much of a difference in this case. > > > > In reality it probably doesn=E2=80=99t make a difference, but it would ma= ke the > IMS procedures =E2=80=9Caligned=E2=80=9D with the IETF spec. > > > > Regards, > > > > Christer > > > > > > > > > > On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > > > Hi, > > > > The reason for the empty value comes from IMS and AKA, where you need to > include the user id already in the initial REGISTER request (this seems t= o > be missing from RFC 3310, but that=E2=80=99s a separate topic) in order f= or the > server to create the challenge, meaning that in the initial REGISTER > request you include an Authorization header field with the username > parameter carrying the IMS private user identity, the realm parameter and > the uri parameter. At this point you obviously don=E2=80=99t yet have the= response, > so in IMS it is specified that the response parameter is inserted with an > empty value. > > > > WHY it was specified that way (instead of simply not including the > response parameter) I don=E2=80=99t know, but I do know that it has been > implemented and deployed that way for many years. > > > > Regards, > > > > Christer > > > > > > *From: *sipcore on behalf of Rifaat > Shekh-Yusef > *Date: *Thursday, 31 October 2019 at 15.20 > *To: *Alexey Melnikov > *Cc: *"sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Done. > > > > On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov > wrote: > > On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef wrote: > > Hi Alexey, > > > > I am fine with Paul's suggestion. > > Are you ok with "32*LHEX"? > > Yes! > > > > Thank you, > > Alexey > > > > Regards, > > Rfaat > > > > > > On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov > wrote: > > > > Hi Rifaat, > > > > On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef wrote: > > Thanks Alexey! > > > > I am fine with the first two comments, and will fix these in the coming > version of the document. > > > > I am not sure I follow the 3rd one. Why do you see the need for a minimum > number of hex digits? > > You do say that the number of hex digits match the hash lenght, so it is > probably Ok. However empty value is never valid (and I am worried it migh= t > hit some boundary condition bug in implementations), so prohibiting it in > ABNF would be the best. > > > > Best Regards, > > Alexey > > > > Regards, > > Rifaat > > > > > > > > On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via Datatracker < > noreply@ietf.org> wrote: > > Alexey Melnikov has entered the following ballot position for > > draft-ietf-sipcore-digest-scheme-12: No Objection > > > > When responding, please keep the subject line intact and reply to all > > email addresses included in the To and CC lines. (Feel free to cut this > > introductory paragraph, however.) > > > > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > I am agreeing with Alissa's DISCUSS. > > > > Also, I have a few comments of my own: > > > > 1) Last para of Section 2.1: > > > > 2.1. Hash Algorithms > > > > A UAS prioritizes which algorithm to use based on the ordering of the > > challenge header fields in the response it is preparing. > > > > This looks either wrong or confusing to me. I think you are just saying > here > > that the order is decided by the server at this point. > > > > That > > process is specified in section 2.3 and parallels the process used in > > HTTP specified by [RFC7616]. > > > > So based on the above, my suggested replacement for both sentences: > > > > A UAS prioritizes which algorithm to use based on its policy, > > which is specified in section 2.3 and parallels the process used in > > HTTP specified by [RFC7616]. > > > > 2) Last para of Section 2.4: > > > > If the UAC cannot respond to any of the challenges in the response, > > then it SHOULD abandon attempts to send the request unless a local > > policy dictates otherwise. > > > > Is trying other non Digest algorithms covered by "SHOULD abandon"? > > If yes, maybe you should make this clearer. > > > > For example, if the UAC does not have > > credentials or has stale credentials for any of the realms, the UAC > > will abandon the request. > > > > 3) In Section 2.7: > > > > request-digest =3D LDQUOT *LHEX RDQUOT > > > > This now allows empty value. I suggest you specify a minimum number of he= x > > digits allowed in the ABNF. Or at least change "*LHEX" to "2*LHEX". > > > > > > > > > > --000000000000ea30b90596770b8c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I am not sure I am following, What do you= mean by "challenge response not being provided"?

Regards,
=C2=A0Rifaat


On Su= n, Nov 3, 2019 at 1:53 PM Christer Holmberg <christer.holmberg@ericsson.com> wrote:
Hi,

I am fine with the suggestion, but instead of talking about an algori= thm not being provided I would like to talk about a *challenge response* no= t being provided.

Regards,

Christer


Fro= m: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Sent: Sunday, November 3, 2019 12:01 PM
To: Alexey Melnikov <aamelnikov@fastmail.fm>
Cc: Christer Holmberg <christer.holmberg@ericsson.com>; sipcore-chairs@ietf.o= rg <sip= core-chairs@ietf.org>; draft-ietf-sipcore-digest-scheme@ietf.org= <draft-ietf-sipcore-digest-scheme@ietf.org>; The IESG &l= t;iesg@ietf.org>;= SIPCORE <sipcore@= ietf.org>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)
=C2=A0
Alexey, Christer,

How about the following:
1. Change the ABNF to "request-digest =3D LDQUOT *LHEX RDQUOT&quo= t;
2. Change the text below it to say "The number of hex digits is i= mplied by the length of the value of the algorithm used, with the minimum s= ize of 32. A parameter with an empty value (empty string) is allowed when t= he algorithm is not specified.""

Regards,
=C2=A0Rifaat

On Fri, Nov 1, 2019 at 6:10 AM Alexey Melnikov <aamelnikov@fastmail.fm= > wrote:

On 1 Nov 2019, at 07:09, Christer Holmberg <christer.holmberg@ericsson.com= > wrote:

Hi,

=C2=A0

>I do not have a strong opinion here.

>=C2=A0

>Anybody has an opinion or thoughts about adding= such a text?

=C2=A0

In addition we=E2=80=99d obviously also change the = ABNF back, to allow empty values.


If the ABNF is changed back for this, I think some extra text would be usef= ul.

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg <christer.holmberg@ericsso= n.com> wrote:

Something like this:

=C2=A0

=E2=80=9CIn some cases a UAC needs to include an Au= thorization header field in a request before it has received a challenge, i= n order to provide user information (using the =E2=80=98userinfo=E2=80=99 h= eader field parameter) that is needed in order to create the challenge. An example of such case is when the HTTP= Digest Authentication Using AKA mechanism (RFC3310) (RFC4169) is used. In = such case the Authorization header field would typically not contain a =E2= =80=98response=E2=80=99 header field parameter before a challenge response is provided. However, for the IP Multimedia Subsystem= (IMS) it has been specified that the Authorization header field in such ca= se does contain a =C2=A0=E2=80=98response=E2=80=99 header field parameter, = with an empty value (empty string). For that reason the modified request-digest ABNF allows such empty values.=E2=80=9D<= /u>

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com= >
Date: Thursday, 31 October 2019 at 19.22
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.ietf.org<= /a>>, "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "draft-ietf-sipcore-digest-scheme@ietf.org" <dra= ft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org&g= t;, "sipcore@iet= f.org" <s= ipcore@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Can you propose some text?

=C2=A0

Thanks,

=C2=A0Rifaat

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg <christer.holmberg@ericss= on.com> wrote:

Hi,

=C2=A0

Perhaps we could add some text about the IMS use-ca= se, in order to explain the empty value?

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

From: sipcore <sipcore-bounces@ietf.org&= gt; on behalf of Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.iet= f.org>
Date: Thursday, 31 October 2019 at 15.52
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "dra= ft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.o= rg" <sipc= ore@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Hi,

=C2=A0

>This IMS behavior would have been in violation = of RFC3261 which specified exactly 32 Hex characters.<= /p>

>So, this change should not make much of=C2=A0a = difference in this case.

=C2=A0

In reality it probably doesn=E2=80=99t make a diffe= rence, but it would make the IMS procedures =E2=80=9Caligned=E2=80=9D with = the IETF spec.

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg <christer.holmberg@ericsso= n.com> wrote:

=C2=A0

Hi,

=C2=A0

The reason for the empty value comes from IMS and A= KA, where you need to include the user id already in the initial REGISTER r= equest (this seems to be missing from RFC 3310, but that=E2=80=99s a separa= te topic) in order for the server to create the challenge,=C2=A0 meaning that in the initial REGI= STER request you include an Authorization header field with the username pa= rameter carrying the IMS private user identity, the realm parameter and the= uri parameter. At this point you obviously don=E2=80=99t yet have the response, so in IMS it is specified that the re= sponse parameter is inserted with an empty value.

=C2=A0

WHY it was specified that way (instead of simply no= t including the response parameter) I don=E2=80=99t know, but I do know tha= t it has been implemented and deployed that way for many years.

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

From: sipcore <sipcore-bounces@ietf.org&= gt; on behalf of Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Thursday, 31 October 2019 at 15.20
To: Alexey Melnikov <aamelnikov@fastmail.fm>
Cc: "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "dra= ft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.o= rg" <sipc= ore@ietf.org>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Done.

=C2=A0

On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov <aamelnikov@fastmail.fm> wrot= e:

On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef wrote:

Hi Alexey,

=C2=A0

I am fine with Paul's suggestion.

Are you ok with=C2=A0"32*LHEX"?

Yes!

=C2=A0

Thank you,

Alexey

=C2=A0

Regards,

=C2=A0Rfaat

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov <aamelnikov@fastmail.fm> wrot= e:

=C2=A0

Hi Rifaat,

=C2=A0

On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef wrote:

Thanks Alexey!

=C2=A0

I am fine with the first two comments, and will fix these in the coming = version of the document.

=C2=A0

I am not sure I follow the 3rd one. Why do you see the need for a minimu= m number of hex digits?

You do say that the number of hex digits match the hash lenght, so it is= probably Ok. However empty value is never valid (and I am worried it might= hit some boundary condition bug in implementations), so prohibiting it in = ABNF would be the best.

=C2=A0

Best Regards,

Alexey

=C2=A0

Regards,

=C2=A0Rifaat

=C2=A0

=C2=A0

=C2=A0

On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via Datatracker <noreply@ietf.org> = wrote:

Alexey Melnikov has entered the following ballot position for<= /u>

draft-ietf-sipcore-digest-scheme-12: No Objection

=C2=A0

When responding, please keep the subject line intact and reply to all=

email addresses included in the To and CC lines. (Feel free to cut this<= u>

introductory paragraph, however.)

=C2=A0

=C2=A0

for more information about IESG DISCUSS and COMMENT positions.=

=C2=A0

=C2=A0

The document, along with other ballot positions, can be found here:

=C2=A0

=C2=A0

=C2=A0

----------------------------------------------------------------------

COMMENT:

----------------------------------------------------------------------

=C2=A0

I am agreeing with Alissa's DISCUSS.

=C2=A0

Also, I have a few comments of my own:

=C2=A0

1) Last para of Section 2.1:

=C2=A0

2.1.=C2=A0 Hash Algorithms

=C2=A0

=C2=A0 =C2=A0A UAS prioritizes which algorithm to use based on the order= ing of the

=C2=A0 =C2=A0challenge header fields in the response it is preparing.=

=C2=A0

This looks either wrong or confusing to me. I think you are just saying = here

that the order is decided by the server at this point.

=C2=A0

=C2=A0 =C2=A0That

=C2=A0 =C2=A0process is specified in section 2.3 and parallels the proce= ss used in

=C2=A0 =C2=A0HTTP specified by [RFC7616].

=C2=A0

So based on the above, my suggested replacement for both sentences:

=C2=A0

=C2=A0 =C2=A0A UAS prioritizes which algorithm to use based on its polic= y,

=C2=A0 =C2=A0which is specified in section 2.3 and parallels the process= used in

=C2=A0 =C2=A0HTTP specified by [RFC7616].

=C2=A0

2) Last para of Section 2.4:

=C2=A0

=C2=A0 =C2=A0If the UAC cannot respond to any of the challenges in the r= esponse,

=C2=A0 =C2=A0then it SHOULD abandon attempts to send the request unless = a local

=C2=A0 =C2=A0policy dictates otherwise.

=C2=A0

Is trying other non Digest algorithms covered by "SHOULD abandon&qu= ot;?

If yes, maybe you should make this clearer.

=C2=A0

=C2=A0 =C2=A0For example, if the UAC does not have

=C2=A0 =C2=A0credentials or has stale credentials for any of the realms,= the UAC

=C2=A0 =C2=A0will abandon the request.

=C2=A0

3) In Section 2.7:

=C2=A0

=C2=A0 =C2=A0 =C2=A0 request-digest =3D LDQUOT *LHEX RDQUOT

=C2=A0

This now allows empty value. I suggest you specify a minimum number of h= ex

digits allowed in the ABNF. Or at least change "*LHEX" to &quo= t;2*LHEX".

=C2=A0

=C2=A0

=C2=A0

=C2=A0

--000000000000ea30b90596770b8c-- From nobody Sun Nov 3 23:58:06 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB4C41200B9; Sun, 3 Nov 2019 23:58:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OPo2M8v9jYIv; Sun, 3 Nov 2019 23:58:00 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150057.outbound.protection.outlook.com [40.107.15.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A555612006D; Sun, 3 Nov 2019 23:57:59 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FElCTSx59ENOX2sJYa1prrxzLxWz5RpXSeoPAAVenDVZZtL1MS9qS/kVhPoIfPq76db0Biq1KdINQSRfyRtRnl5Eyg97t3stgTBSg/pCNHpHd6ZOSVT/Pl28mgMLJsGhSs0a8oYSB/F8Jtk2Q/NjBb7g1LBH1XjJSCV6xVyeQifqFT1W8gIMKoN2ZjzJEWk19DDXliiMwQCKk0cCjDhWTKKMZgt1NPjfYYe5YMSm+4AZTUphwnyasph5iD4aDz10bVA7JzvE/IlG/TaCrqXCucw+GlqL84PxawjMQahjIQddX17ZH1X/xJGy75j6hKnbfoQo8hDzhfdXBuFOaqJy4A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6QF5USMEcx+FlGRgEGkIqqzxx8lweILd5n25xsPoug8=; b=VtQ+JXxYdaPIc5wTQHaPpEw1+Xe/6yJzR5bqpKtb7FEnFhf8gM9TKdaSYSik0IM5GTpB1/pu8of4cyYMS6JrRkFTYvxsnZyUDdSydgh8hx9psagV4jklcq38yGQ2QyW9lO8NsdOB7tolQtUPecMX5bmFaU4nUKZCTc5MqgMbL72FfwakE1tYrqR+DZnpuA7xqzEkuFMcYsbV9r3zd/LdX8xovvRQ+GTja/GEjQnI9irzIGMq0oDa/d9/5b/KngrM0kefHejNYuyWpK93jX3VPZOi6krJ3NXsq5hpzk+y3FIje4h7gsNtJqo4Cn2EAO0gUb3A5nyGId4ST3lrPXxMAA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6QF5USMEcx+FlGRgEGkIqqzxx8lweILd5n25xsPoug8=; b=hLlHYjkIBPvsLjdSLxr8/rm7FofmYA1vhrehX6j1YWgYO1Yb8U2lUGqpi12JDyLPSd5kMSrB0mIa5om5L6svEMZa2vArxz8PVVRgRXZBwiSKFewSZq2QwR/MdKWkvHLGKUtFFtxHNqXyl+eEzFphtII79hnYuiJajeSEImGgIc4= Received: from VI1PR07MB3167.eurprd07.prod.outlook.com (10.175.243.17) by VI1PR07MB5296.eurprd07.prod.outlook.com (20.178.12.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.10; Mon, 4 Nov 2019 07:57:57 +0000 Received: from VI1PR07MB3167.eurprd07.prod.outlook.com ([fe80::41a:f6a0:9660:bc09]) by VI1PR07MB3167.eurprd07.prod.outlook.com ([fe80::41a:f6a0:9660:bc09%3]) with mapi id 15.20.2430.014; Mon, 4 Nov 2019 07:57:56 +0000 From: Christer Holmberg To: Rifaat Shekh-Yusef CC: Alexey Melnikov , "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-digest-scheme@ietf.org" , The IESG , SIPCORE Thread-Topic: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) Thread-Index: AQHVj+3+/XQWOAP0gUmCkUmQAngGd6d04liA///hPYCAACLmgIAAH3GA///5uYCAAClCgIAAHA2AgADDMwCAABEIgIADIi+AgACUUBuAABsAgIAA4h8A Date: Mon, 4 Nov 2019 07:57:56 +0000 Message-ID: <84CA4DD0-3877-46A0-8772-43F35BB788A3@ericsson.com> References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [89.166.49.243] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 1c19669c-e16d-44a4-6c49-08d760fcb439 x-ms-traffictypediagnostic: VI1PR07MB5296: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0211965D06 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(39860400002)(396003)(376002)(366004)(346002)(18543002)(199004)(189003)(81166006)(6246003)(6116002)(790700001)(81156014)(14444005)(517774005)(99286004)(25786009)(606006)(33656002)(53546011)(3846002)(966005)(478600001)(5660300002)(102836004)(256004)(186003)(6916009)(4326008)(66476007)(76116006)(66556008)(86362001)(64756008)(66946007)(66446008)(91956017)(71200400001)(71190400001)(14454004)(476003)(236005)(2616005)(58126008)(7736002)(44832011)(26005)(446003)(76176011)(6506007)(36756003)(8936002)(66066001)(54896002)(6512007)(486006)(6306002)(6436002)(6486002)(316002)(2906002)(8676002)(21615005)(54906003)(5070765005)(229853002)(11346002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB5296; H:VI1PR07MB3167.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: f5E/kSK2QvOTVGh5IKZD0bEORs91jWZV/ac8t8J71acFjYFNEXqigDgNxgJEhXnFek3BObrSjdpl8C0CqzhnQJYFP7GLAKN8ttgwr+mFJT7LSKUJTdNs9Vl8qm5DMSiAj3sbyv1eduS3JvWsEJHvsv0uKS+4rVBSZ3/QdxZ0DOwIye5CX+Oi/o30ZyyHLT2xlyPPqfIJ4M8V5IT7KMXh1n0WBqLoy4aqheKTgTXP8XX2w3VqzktrWWCNrO+5TnfvSpdfRRXtdD25qSWamRqMjB0dhs7OfufTp94nV3kPfwrri5xspkIChvskWw1QNzH+utkqOemBeL3H0rl1Zi9/Stf5iFSgjdCs4upgh267pgpJJwzrK982Uak2rMo1R7eHmkVdwTokFQWO9JV1kyrdPxhp5NcuLicLiASP66XbhIZ2DI6FxoV5CGeavnKsKm4Ycu2VnR2BCRPBgQ32s5B+RURF0XaQpV9r0OxiTeRuoX0= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_84CA4DD0387746A0877243F35BB788A3ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1c19669c-e16d-44a4-6c49-08d760fcb439 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2019 07:57:56.7122 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mroOzLf9USBBpbqtr6NBSg1yA+IohpAhcsiLYEEOaSGTw4fjSdFJRXShMLaS290Xf7s5L8bj+aDtmIFOQd5h4TMef1zpKBO8+6Y4VUhEYNw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5296 Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 07:58:04 -0000 --_000_84CA4DD0387746A0877243F35BB788A3ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCj5JIGFtIG5vdCBzdXJlIEkgYW0gZm9sbG93aW5nLCBXaGF0IGRvIHlvdSBtZWFuIGJ5 ICJjaGFsbGVuZ2UgcmVzcG9uc2Ugbm90IGJlaW5nIHByb3ZpZGVkIj8NCg0KVGhlIHJlc3BvbnNl IHRvIHRoZSBjaGFsbGVuZ2UgcHJvdmlkZWQgYnkgdGhlIHNlcnZlci4NCg0KSWYgeW91IHRoaW5r IGl0IGlzIHVuY2xlYXIsIG1heWJlIHNvbWV0aGluZyBsaWtlOg0KDQrigJxBIHBhcmFtZXRlciB3 aXRoIGFuIGVtcHR5IHZhbHVlIChlbXB0eSBzdHJpbmcpIGlzIGFsbG93ZWQgd2hlbiB0aGUgVUFD IGhhcyBub3QgeWV0IHJlY2VpdmVkIGEgY2hhbGxlbmdlLiINCg0KUmVnYXJkcywNCg0KQ2hyaXN0 ZXINCg0KDQoNCg0KDQoNCk9uIFN1biwgTm92IDMsIDIwMTkgYXQgMTo1MyBQTSBDaHJpc3RlciBI b2xtYmVyZyA8Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPG1haWx0bzpjaHJpc3Rlci5o b2xtYmVyZ0Blcmljc3Nvbi5jb20+PiB3cm90ZToNCkhpLA0KDQpJIGFtIGZpbmUgd2l0aCB0aGUg c3VnZ2VzdGlvbiwgYnV0IGluc3RlYWQgb2YgdGFsa2luZyBhYm91dCBhbiBhbGdvcml0aG0gbm90 IGJlaW5nIHByb3ZpZGVkIEkgd291bGQgbGlrZSB0byB0YWxrIGFib3V0IGEgKmNoYWxsZW5nZSBy ZXNwb25zZSogbm90IGJlaW5nIHByb3ZpZGVkLg0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0KDQoN Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpGcm9tOiBSaWZhYXQgU2hla2gtWXVz ZWYgPHJpZmFhdC5pZXRmQGdtYWlsLmNvbTxtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tPj4N ClNlbnQ6IFN1bmRheSwgTm92ZW1iZXIgMywgMjAxOSAxMjowMSBQTQ0KVG86IEFsZXhleSBNZWxu aWtvdiA8YWFtZWxuaWtvdkBmYXN0bWFpbC5mbTxtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5m bT4+DQpDYzogQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNv bTxtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPj47IHNpcGNvcmUtY2hhaXJz QGlldGYub3JnPG1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZz4gPHNpcGNvcmUtY2hhaXJz QGlldGYub3JnPG1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZz4+OyBkcmFmdC1pZXRmLXNp cGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRp Z2VzdC1zY2hlbWVAaWV0Zi5vcmc+IDxkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBp ZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc+ PjsgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc8bWFpbHRvOmllc2dAaWV0Zi5vcmc+PjsgU0lQQ09S RSA8c2lwY29yZUBpZXRmLm9yZzxtYWlsdG86c2lwY29yZUBpZXRmLm9yZz4+DQpTdWJqZWN0OiBS ZTogW3NpcGNvcmVdIEFsZXhleSBNZWxuaWtvdidzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRm LXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xMjogKHdpdGggQ09NTUVOVCkNCg0KQWxleGV5LCBDaHJp c3RlciwNCg0KSG93IGFib3V0IHRoZSBmb2xsb3dpbmc6DQoxLiBDaGFuZ2UgdGhlIEFCTkYgdG8g InJlcXVlc3QtZGlnZXN0ID0gTERRVU9UICpMSEVYIFJEUVVPVCINCjIuIENoYW5nZSB0aGUgdGV4 dCBiZWxvdyBpdCB0byBzYXkgIlRoZSBudW1iZXIgb2YgaGV4IGRpZ2l0cyBpcyBpbXBsaWVkIGJ5 IHRoZSBsZW5ndGggb2YgdGhlIHZhbHVlIG9mIHRoZSBhbGdvcml0aG0gdXNlZCwgd2l0aCB0aGUg bWluaW11bSBzaXplIG9mIDMyLiBBIHBhcmFtZXRlciB3aXRoIGFuIGVtcHR5IHZhbHVlIChlbXB0 eSBzdHJpbmcpIGlzIGFsbG93ZWQgd2hlbiB0aGUgYWxnb3JpdGhtIGlzIG5vdCBzcGVjaWZpZWQu IiINCg0KUmVnYXJkcywNCiBSaWZhYXQNCg0KT24gRnJpLCBOb3YgMSwgMjAxOSBhdCA2OjEwIEFN IEFsZXhleSBNZWxuaWtvdiA8YWFtZWxuaWtvdkBmYXN0bWFpbC5mbTxtYWlsdG86YWFtZWxuaWtv dkBmYXN0bWFpbC5mbT4+IHdyb3RlOg0KDQpPbiAxIE5vdiAyMDE5LCBhdCAwNzowOSwgQ2hyaXN0 ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTxtYWlsdG86Y2hyaXN0 ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPj4gd3JvdGU6DQoNCkhpLA0KDQoNCg0KPkkgZG8gbm90 IGhhdmUgYSBzdHJvbmcgb3BpbmlvbiBoZXJlLg0KDQo+DQoNCj5Bbnlib2R5IGhhcyBhbiBvcGlu aW9uIG9yIHRob3VnaHRzIGFib3V0IGFkZGluZyBzdWNoIGEgdGV4dD8NCg0KDQoNCkluIGFkZGl0 aW9uIHdl4oCZZCBvYnZpb3VzbHkgYWxzbyBjaGFuZ2UgdGhlIEFCTkYgYmFjaywgdG8gYWxsb3cg ZW1wdHkgdmFsdWVzLg0KDQpJZiB0aGUgQUJORiBpcyBjaGFuZ2VkIGJhY2sgZm9yIHRoaXMsIEkg dGhpbmsgc29tZSBleHRyYSB0ZXh0IHdvdWxkIGJlIHVzZWZ1bC4NCg0KDQoNCg0KUmVnYXJkcywN Cg0KDQoNCkNocmlzdGVyDQoNCg0KDQoNCg0KDQoNCg0KDQpPbiBUaHUsIE9jdCAzMSwgMjAxOSBh dCAxOjUwIFBNIENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5j b208bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KDQpTb21l dGhpbmcgbGlrZSB0aGlzOg0KDQoNCg0K4oCcSW4gc29tZSBjYXNlcyBhIFVBQyBuZWVkcyB0byBp bmNsdWRlIGFuIEF1dGhvcml6YXRpb24gaGVhZGVyIGZpZWxkIGluIGEgcmVxdWVzdCBiZWZvcmUg aXQgaGFzIHJlY2VpdmVkIGEgY2hhbGxlbmdlLCBpbiBvcmRlciB0byBwcm92aWRlIHVzZXIgaW5m b3JtYXRpb24gKHVzaW5nIHRoZSDigJh1c2VyaW5mb+KAmSBoZWFkZXIgZmllbGQgcGFyYW1ldGVy KSB0aGF0IGlzIG5lZWRlZCBpbiBvcmRlciB0byBjcmVhdGUgdGhlIGNoYWxsZW5nZS4gQW4gZXhh bXBsZSBvZiBzdWNoIGNhc2UgaXMgd2hlbiB0aGUgSFRUUCBEaWdlc3QgQXV0aGVudGljYXRpb24g VXNpbmcgQUtBIG1lY2hhbmlzbSAoUkZDMzMxMCkgKFJGQzQxNjkpIGlzIHVzZWQuIEluIHN1Y2gg Y2FzZSB0aGUgQXV0aG9yaXphdGlvbiBoZWFkZXIgZmllbGQgd291bGQgdHlwaWNhbGx5IG5vdCBj b250YWluIGEg4oCYcmVzcG9uc2XigJkgaGVhZGVyIGZpZWxkIHBhcmFtZXRlciBiZWZvcmUgYSBj aGFsbGVuZ2UgcmVzcG9uc2UgaXMgcHJvdmlkZWQuIEhvd2V2ZXIsIGZvciB0aGUgSVAgTXVsdGlt ZWRpYSBTdWJzeXN0ZW0gKElNUykgaXQgaGFzIGJlZW4gc3BlY2lmaWVkIHRoYXQgdGhlIEF1dGhv cml6YXRpb24gaGVhZGVyIGZpZWxkIGluIHN1Y2ggY2FzZSBkb2VzIGNvbnRhaW4gYSAg4oCYcmVz cG9uc2XigJkgaGVhZGVyIGZpZWxkIHBhcmFtZXRlciwgd2l0aCBhbiBlbXB0eSB2YWx1ZSAoZW1w dHkgc3RyaW5nKS4gRm9yIHRoYXQgcmVhc29uIHRoZSBtb2RpZmllZCByZXF1ZXN0LWRpZ2VzdCBB Qk5GIGFsbG93cyBzdWNoIGVtcHR5IHZhbHVlcy7igJ0NCg0KDQoNClJlZ2FyZHMsDQoNCg0KDQpD aHJpc3Rlcg0KDQoNCg0KDQoNCkZyb206IFJpZmFhdCBTaGVraC1ZdXNlZiA8cmlmYWF0LmlldGZA Z21haWwuY29tPG1haWx0bzpyaWZhYXQuaWV0ZkBnbWFpbC5jb20+Pg0KRGF0ZTogVGh1cnNkYXks IDMxIE9jdG9iZXIgMjAxOSBhdCAxOS4yMg0KVG86IENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rl ci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29u LmNvbT4+DQpDYzogQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnPTQwZXJpY3Nz b24uY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9y Zz4+LCAic2lwY29yZS1jaGFpcnNAaWV0Zi5vcmc8bWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYu b3JnPiIgPHNpcGNvcmUtY2hhaXJzQGlldGYub3JnPG1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRm Lm9yZz4+LCAiZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc8bWFpbHRv OmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnPiIgPGRyYWZ0LWlldGYt c2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUt ZGlnZXN0LXNjaGVtZUBpZXRmLm9yZz4+LCAiaWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRm Lm9yZz4iIDxpZXNnQGlldGYub3JnPG1haWx0bzppZXNnQGlldGYub3JnPj4sICJzaXBjb3JlQGll dGYub3JnPG1haWx0bzpzaXBjb3JlQGlldGYub3JnPiIgPHNpcGNvcmVAaWV0Zi5vcmc8bWFpbHRv OnNpcGNvcmVAaWV0Zi5vcmc+PiwgQWxleGV5IE1lbG5pa292IDxhYW1lbG5pa292QGZhc3RtYWls LmZtPG1haWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtPj4NClN1YmplY3Q6IFJlOiBbc2lwY29y ZV0gQWxleGV5IE1lbG5pa292J3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtc2lwY29yZS1k aWdlc3Qtc2NoZW1lLTEyOiAod2l0aCBDT01NRU5UKQ0KDQoNCg0KQ2FuIHlvdSBwcm9wb3NlIHNv bWUgdGV4dD8NCg0KDQoNClRoYW5rcywNCg0KIFJpZmFhdA0KDQoNCg0KDQoNCk9uIFRodSwgT2N0 IDMxLCAyMDE5IGF0IDExOjQ0IEFNIENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xtYmVy Z0Blcmljc3Nvbi5jb208bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4+IHdy b3RlOg0KDQpIaSwNCg0KDQoNClBlcmhhcHMgd2UgY291bGQgYWRkIHNvbWUgdGV4dCBhYm91dCB0 aGUgSU1TIHVzZS1jYXNlLCBpbiBvcmRlciB0byBleHBsYWluIHRoZSBlbXB0eSB2YWx1ZT8NCg0K DQoNClJlZ2FyZHMsDQoNCg0KDQpDaHJpc3Rlcg0KDQoNCg0KRnJvbTogc2lwY29yZSA8c2lwY29y ZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpzaXBjb3JlLWJvdW5jZXNAaWV0Zi5vcmc+PiBvbiBi ZWhhbGYgb2YgQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJnPTQwZXJpY3Nzb24u Y29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZz4+ DQpEYXRlOiBUaHVyc2RheSwgMzEgT2N0b2JlciAyMDE5IGF0IDE1LjUyDQpUbzogUmlmYWF0IFNo ZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb208bWFpbHRvOnJpZmFhdC5pZXRmQGdtYWls LmNvbT4+DQpDYzogInNpcGNvcmUtY2hhaXJzQGlldGYub3JnPG1haWx0bzpzaXBjb3JlLWNoYWly c0BpZXRmLm9yZz4iIDxzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZzxtYWlsdG86c2lwY29yZS1jaGFp cnNAaWV0Zi5vcmc+PiwgImRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3Jn PG1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZz4iIDxkcmFm dC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1z aXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc+PiwgImllc2dAaWV0Zi5vcmc8bWFpbHRvOmll c2dAaWV0Zi5vcmc+IiA8aWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRmLm9yZz4+LCAic2lw Y29yZUBpZXRmLm9yZzxtYWlsdG86c2lwY29yZUBpZXRmLm9yZz4iIDxzaXBjb3JlQGlldGYub3Jn PG1haWx0bzpzaXBjb3JlQGlldGYub3JnPj4sIEFsZXhleSBNZWxuaWtvdiA8YWFtZWxuaWtvdkBm YXN0bWFpbC5mbTxtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbT4+DQpTdWJqZWN0OiBSZTog W3NpcGNvcmVdIEFsZXhleSBNZWxuaWtvdidzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLXNp cGNvcmUtZGlnZXN0LXNjaGVtZS0xMjogKHdpdGggQ09NTUVOVCkNCg0KDQoNCkhpLA0KDQoNCg0K PlRoaXMgSU1TIGJlaGF2aW9yIHdvdWxkIGhhdmUgYmVlbiBpbiB2aW9sYXRpb24gb2YgUkZDMzI2 MSB3aGljaCBzcGVjaWZpZWQgZXhhY3RseSAzMiBIZXggY2hhcmFjdGVycy4NCg0KPlNvLCB0aGlz IGNoYW5nZSBzaG91bGQgbm90IG1ha2UgbXVjaCBvZiBhIGRpZmZlcmVuY2UgaW4gdGhpcyBjYXNl Lg0KDQoNCg0KSW4gcmVhbGl0eSBpdCBwcm9iYWJseSBkb2VzbuKAmXQgbWFrZSBhIGRpZmZlcmVu Y2UsIGJ1dCBpdCB3b3VsZCBtYWtlIHRoZSBJTVMgcHJvY2VkdXJlcyDigJxhbGlnbmVk4oCdIHdp dGggdGhlIElFVEYgc3BlYy4NCg0KDQoNClJlZ2FyZHMsDQoNCg0KDQpDaHJpc3Rlcg0KDQoNCg0K DQoNCg0KDQoNCg0KT24gVGh1LCBPY3QgMzEsIDIwMTkgYXQgOTozNyBBTSBDaHJpc3RlciBIb2xt YmVyZyA8Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPG1haWx0bzpjaHJpc3Rlci5ob2xt YmVyZ0Blcmljc3Nvbi5jb20+PiB3cm90ZToNCg0KDQoNCkhpLA0KDQoNCg0KVGhlIHJlYXNvbiBm b3IgdGhlIGVtcHR5IHZhbHVlIGNvbWVzIGZyb20gSU1TIGFuZCBBS0EsIHdoZXJlIHlvdSBuZWVk IHRvIGluY2x1ZGUgdGhlIHVzZXIgaWQgYWxyZWFkeSBpbiB0aGUgaW5pdGlhbCBSRUdJU1RFUiBy ZXF1ZXN0ICh0aGlzIHNlZW1zIHRvIGJlIG1pc3NpbmcgZnJvbSBSRkMgMzMxMCwgYnV0IHRoYXTi gJlzIGEgc2VwYXJhdGUgdG9waWMpIGluIG9yZGVyIGZvciB0aGUgc2VydmVyIHRvIGNyZWF0ZSB0 aGUgY2hhbGxlbmdlLCAgbWVhbmluZyB0aGF0IGluIHRoZSBpbml0aWFsIFJFR0lTVEVSIHJlcXVl c3QgeW91IGluY2x1ZGUgYW4gQXV0aG9yaXphdGlvbiBoZWFkZXIgZmllbGQgd2l0aCB0aGUgdXNl cm5hbWUgcGFyYW1ldGVyIGNhcnJ5aW5nIHRoZSBJTVMgcHJpdmF0ZSB1c2VyIGlkZW50aXR5LCB0 aGUgcmVhbG0gcGFyYW1ldGVyIGFuZCB0aGUgdXJpIHBhcmFtZXRlci4gQXQgdGhpcyBwb2ludCB5 b3Ugb2J2aW91c2x5IGRvbuKAmXQgeWV0IGhhdmUgdGhlIHJlc3BvbnNlLCBzbyBpbiBJTVMgaXQg aXMgc3BlY2lmaWVkIHRoYXQgdGhlIHJlc3BvbnNlIHBhcmFtZXRlciBpcyBpbnNlcnRlZCB3aXRo IGFuIGVtcHR5IHZhbHVlLg0KDQoNCg0KV0hZIGl0IHdhcyBzcGVjaWZpZWQgdGhhdCB3YXkgKGlu c3RlYWQgb2Ygc2ltcGx5IG5vdCBpbmNsdWRpbmcgdGhlIHJlc3BvbnNlIHBhcmFtZXRlcikgSSBk b27igJl0IGtub3csIGJ1dCBJIGRvIGtub3cgdGhhdCBpdCBoYXMgYmVlbiBpbXBsZW1lbnRlZCBh bmQgZGVwbG95ZWQgdGhhdCB3YXkgZm9yIG1hbnkgeWVhcnMuDQoNCg0KDQpSZWdhcmRzLA0KDQoN Cg0KQ2hyaXN0ZXINCg0KDQoNCg0KDQpGcm9tOiBzaXBjb3JlIDxzaXBjb3JlLWJvdW5jZXNAaWV0 Zi5vcmc8bWFpbHRvOnNpcGNvcmUtYm91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZiBSaWZh YXQgU2hla2gtWXVzZWYgPHJpZmFhdC5pZXRmQGdtYWlsLmNvbTxtYWlsdG86cmlmYWF0LmlldGZA Z21haWwuY29tPj4NCkRhdGU6IFRodXJzZGF5LCAzMSBPY3RvYmVyIDIwMTkgYXQgMTUuMjANClRv OiBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVsbmlrb3ZAZmFzdG1haWwuZm08bWFpbHRvOmFhbWVsbmlr b3ZAZmFzdG1haWwuZm0+Pg0KQ2M6ICJzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZzxtYWlsdG86c2lw Y29yZS1jaGFpcnNAaWV0Zi5vcmc+IiA8c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmc8bWFpbHRvOnNp cGNvcmUtY2hhaXJzQGlldGYub3JnPj4sICJkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVt ZUBpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5v cmc+IiA8ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc8bWFpbHRvOmRy YWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnPj4sICJpZXNnQGlldGYub3Jn PG1haWx0bzppZXNnQGlldGYub3JnPiIgPGllc2dAaWV0Zi5vcmc8bWFpbHRvOmllc2dAaWV0Zi5v cmc+PiwgInNpcGNvcmVAaWV0Zi5vcmc8bWFpbHRvOnNpcGNvcmVAaWV0Zi5vcmc+IiA8c2lwY29y ZUBpZXRmLm9yZzxtYWlsdG86c2lwY29yZUBpZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW3NpcGNv cmVdIEFsZXhleSBNZWxuaWtvdidzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLXNpcGNvcmUt ZGlnZXN0LXNjaGVtZS0xMjogKHdpdGggQ09NTUVOVCkNCg0KDQoNCkRvbmUuDQoNCg0KDQpPbiBU aHUsIE9jdCAzMSwgMjAxOSBhdCA5OjEzIEFNIEFsZXhleSBNZWxuaWtvdiA8YWFtZWxuaWtvdkBm YXN0bWFpbC5mbTxtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbT4+IHdyb3RlOg0KDQpPbiBU aHUsIE9jdCAzMSwgMjAxOSwgYXQgMToxMSBQTSwgUmlmYWF0IFNoZWtoLVl1c2VmIHdyb3RlOg0K DQpIaSBBbGV4ZXksDQoNCg0KDQpJIGFtIGZpbmUgd2l0aCBQYXVsJ3Mgc3VnZ2VzdGlvbi4NCg0K QXJlIHlvdSBvayB3aXRoICIzMipMSEVYIj8NCg0KWWVzIQ0KDQoNCg0KVGhhbmsgeW91LA0KDQpB bGV4ZXkNCg0KDQoNClJlZ2FyZHMsDQoNCiBSZmFhdA0KDQoNCg0KDQoNCk9uIFRodSwgT2N0IDMx LCAyMDE5IGF0IDc6MjIgQU0gQWxleGV5IE1lbG5pa292IDxhYW1lbG5pa292QGZhc3RtYWlsLmZt PG1haWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtPj4gd3JvdGU6DQoNCg0KDQpIaSBSaWZhYXQs DQoNCg0KDQpPbiBXZWQsIE9jdCAzMCwgMjAxOSwgYXQgOTo1MCBQTSwgUmlmYWF0IFNoZWtoLVl1 c2VmIHdyb3RlOg0KDQpUaGFua3MgQWxleGV5IQ0KDQoNCg0KSSBhbSBmaW5lIHdpdGggdGhlIGZp cnN0IHR3byBjb21tZW50cywgYW5kIHdpbGwgZml4IHRoZXNlIGluIHRoZSBjb21pbmcgdmVyc2lv biBvZiB0aGUgZG9jdW1lbnQuDQoNCg0KDQpJIGFtIG5vdCBzdXJlIEkgZm9sbG93IHRoZSAzcmQg b25lLiBXaHkgZG8geW91IHNlZSB0aGUgbmVlZCBmb3IgYSBtaW5pbXVtIG51bWJlciBvZiBoZXgg ZGlnaXRzPw0KDQpZb3UgZG8gc2F5IHRoYXQgdGhlIG51bWJlciBvZiBoZXggZGlnaXRzIG1hdGNo IHRoZSBoYXNoIGxlbmdodCwgc28gaXQgaXMgcHJvYmFibHkgT2suIEhvd2V2ZXIgZW1wdHkgdmFs dWUgaXMgbmV2ZXIgdmFsaWQgKGFuZCBJIGFtIHdvcnJpZWQgaXQgbWlnaHQgaGl0IHNvbWUgYm91 bmRhcnkgY29uZGl0aW9uIGJ1ZyBpbiBpbXBsZW1lbnRhdGlvbnMpLCBzbyBwcm9oaWJpdGluZyBp dCBpbiBBQk5GIHdvdWxkIGJlIHRoZSBiZXN0Lg0KDQoNCg0KQmVzdCBSZWdhcmRzLA0KDQpBbGV4 ZXkNCg0KDQoNClJlZ2FyZHMsDQoNCiBSaWZhYXQNCg0KDQoNCg0KDQoNCg0KT24gV2VkLCBPY3Qg MzAsIDIwMTkgYXQgMToxNiBQTSBBbGV4ZXkgTWVsbmlrb3YgdmlhIERhdGF0cmFja2VyIDxub3Jl cGx5QGlldGYub3JnPG1haWx0bzpub3JlcGx5QGlldGYub3JnPj4gd3JvdGU6DQoNCkFsZXhleSBN ZWxuaWtvdiBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCg0K ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6IE5vIE9iamVjdGlvbg0KDQoNCg0K V2hlbiByZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFjdCBhbmQg cmVwbHkgdG8gYWxsDQoNCmVtYWlsIGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8gYW5kIEND IGxpbmVzLiAoRmVlbCBmcmVlIHRvIGN1dCB0aGlzDQoNCmludHJvZHVjdG9yeSBwYXJhZ3JhcGgs IGhvd2V2ZXIuKQ0KDQoNCg0KDQoNClBsZWFzZSByZWZlciB0byBodHRwczovL3d3dy5pZXRmLm9y Zy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLWNyaXRlcmlhLmh0bWwNCg0KZm9yIG1vcmUgaW5mb3Jt YXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCg0KDQoNCg0K DQpUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJl IGZvdW5kIGhlcmU6DQoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWll dGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLw0KDQoNCg0KDQoNCg0KDQotLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoN CkNPTU1FTlQ6DQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KDQoNCkkgYW0gYWdyZWVpbmcgd2l0aCBBbGlz c2EncyBESVNDVVNTLg0KDQoNCg0KQWxzbywgSSBoYXZlIGEgZmV3IGNvbW1lbnRzIG9mIG15IG93 bjoNCg0KDQoNCjEpIExhc3QgcGFyYSBvZiBTZWN0aW9uIDIuMToNCg0KDQoNCjIuMS4gIEhhc2gg QWxnb3JpdGhtcw0KDQoNCg0KICAgQSBVQVMgcHJpb3JpdGl6ZXMgd2hpY2ggYWxnb3JpdGhtIHRv IHVzZSBiYXNlZCBvbiB0aGUgb3JkZXJpbmcgb2YgdGhlDQoNCiAgIGNoYWxsZW5nZSBoZWFkZXIg ZmllbGRzIGluIHRoZSByZXNwb25zZSBpdCBpcyBwcmVwYXJpbmcuDQoNCg0KDQpUaGlzIGxvb2tz IGVpdGhlciB3cm9uZyBvciBjb25mdXNpbmcgdG8gbWUuIEkgdGhpbmsgeW91IGFyZSBqdXN0IHNh eWluZyBoZXJlDQoNCnRoYXQgdGhlIG9yZGVyIGlzIGRlY2lkZWQgYnkgdGhlIHNlcnZlciBhdCB0 aGlzIHBvaW50Lg0KDQoNCg0KICAgVGhhdA0KDQogICBwcm9jZXNzIGlzIHNwZWNpZmllZCBpbiBz ZWN0aW9uIDIuMyBhbmQgcGFyYWxsZWxzIHRoZSBwcm9jZXNzIHVzZWQgaW4NCg0KICAgSFRUUCBz cGVjaWZpZWQgYnkgW1JGQzc2MTZdLg0KDQoNCg0KU28gYmFzZWQgb24gdGhlIGFib3ZlLCBteSBz dWdnZXN0ZWQgcmVwbGFjZW1lbnQgZm9yIGJvdGggc2VudGVuY2VzOg0KDQoNCg0KICAgQSBVQVMg cHJpb3JpdGl6ZXMgd2hpY2ggYWxnb3JpdGhtIHRvIHVzZSBiYXNlZCBvbiBpdHMgcG9saWN5LA0K DQogICB3aGljaCBpcyBzcGVjaWZpZWQgaW4gc2VjdGlvbiAyLjMgYW5kIHBhcmFsbGVscyB0aGUg cHJvY2VzcyB1c2VkIGluDQoNCiAgIEhUVFAgc3BlY2lmaWVkIGJ5IFtSRkM3NjE2XS4NCg0KDQoN CjIpIExhc3QgcGFyYSBvZiBTZWN0aW9uIDIuNDoNCg0KDQoNCiAgIElmIHRoZSBVQUMgY2Fubm90 IHJlc3BvbmQgdG8gYW55IG9mIHRoZSBjaGFsbGVuZ2VzIGluIHRoZSByZXNwb25zZSwNCg0KICAg dGhlbiBpdCBTSE9VTEQgYWJhbmRvbiBhdHRlbXB0cyB0byBzZW5kIHRoZSByZXF1ZXN0IHVubGVz cyBhIGxvY2FsDQoNCiAgIHBvbGljeSBkaWN0YXRlcyBvdGhlcndpc2UuDQoNCg0KDQpJcyB0cnlp bmcgb3RoZXIgbm9uIERpZ2VzdCBhbGdvcml0aG1zIGNvdmVyZWQgYnkgIlNIT1VMRCBhYmFuZG9u Ij8NCg0KSWYgeWVzLCBtYXliZSB5b3Ugc2hvdWxkIG1ha2UgdGhpcyBjbGVhcmVyLg0KDQoNCg0K ICAgRm9yIGV4YW1wbGUsIGlmIHRoZSBVQUMgZG9lcyBub3QgaGF2ZQ0KDQogICBjcmVkZW50aWFs cyBvciBoYXMgc3RhbGUgY3JlZGVudGlhbHMgZm9yIGFueSBvZiB0aGUgcmVhbG1zLCB0aGUgVUFD DQoNCiAgIHdpbGwgYWJhbmRvbiB0aGUgcmVxdWVzdC4NCg0KDQoNCjMpIEluIFNlY3Rpb24gMi43 Og0KDQoNCg0KICAgICAgcmVxdWVzdC1kaWdlc3QgPSBMRFFVT1QgKkxIRVggUkRRVU9UDQoNCg0K DQpUaGlzIG5vdyBhbGxvd3MgZW1wdHkgdmFsdWUuIEkgc3VnZ2VzdCB5b3Ugc3BlY2lmeSBhIG1p bmltdW0gbnVtYmVyIG9mIGhleA0KDQpkaWdpdHMgYWxsb3dlZCBpbiB0aGUgQUJORi4gT3IgYXQg bGVhc3QgY2hhbmdlICIqTEhFWCIgdG8gIjIqTEhFWCIuDQoNCg0KDQoNCg0KDQoNCg0K --_000_84CA4DD0387746A0877243F35BB788A3ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <30FD4748BD2075439023CD549AE40854@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6 dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29u b3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTpt c29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBjbTsN Cgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVt YWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44 NXB0IDIuMGNtIDcwLjg1cHQgMi4wY207fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRT ZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVk ZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0t PjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0K PG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+ PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJGSSIgbGluaz0iYmx1ZSIgdmxpbms9 InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5IaSw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiPiZndDtJIGFtIG5vdCBzdXJlIEkgYW0gZm9sbG93aW5nLCBXaGF0IGRvIHlv dSBtZWFuIGJ5ICZxdW90O2NoYWxsZW5nZSByZXNwb25zZSBub3QgYmVpbmcgcHJvdmlkZWQmcXVv dDs/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgcmVzcG9uc2UgdG8gdGhl IGNoYWxsZW5nZSBwcm92aWRlZCBieSB0aGUgc2VydmVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+SWYg eW91IHRoaW5rIGl0IGlzIHVuY2xlYXIsIG1heWJlIHNvbWV0aGluZyBsaWtlOjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyI+4oCcQSBwYXJhbWV0ZXIgd2l0aCBhbiBlbXB0eSB2YWx1ZSAoZW1wdHkgc3RyaW5n KSBpcyBhbGxvd2VkIHdoZW4gdGhlIFVBQyBoYXMgbm90IHlldCByZWNlaXZlZCBhIGNoYWxsZW5n ZS4mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5D aHJpc3RlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPk9uIFN1biwgTm92IDMsIDIwMTkgYXQgMTo1 MyBQTSBDaHJpc3RlciBIb2xtYmVyZyAmbHQ7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpjaHJpc3Rl ci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20iPjxzcGFuIGxhbmc9IkVOLVVTIj5jaHJpc3Rlci5ob2xt YmVyZ0Blcmljc3Nvbi5jb208L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7IHdyb3Rl OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBj bSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29s b3I6YmxhY2siPkhpLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNr Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+SSBh bSBmaW5lIHdpdGggdGhlIHN1Z2dlc3Rpb24sIGJ1dCBpbnN0ZWFkIG9mIHRhbGtpbmcgYWJvdXQg YW4gYWxnb3JpdGhtIG5vdCBiZWluZyBwcm92aWRlZCBJIHdvdWxkIGxpa2UgdG8gdGFsayBhYm91 dCBhICpjaGFsbGVuZ2UgcmVzcG9uc2UqIG5vdCBiZWluZyBwcm92aWRlZC48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2NvbG9yOmJsYWNrIj5DaHJpc3RlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGlnbjpj ZW50ZXIiPg0KPGhyIHNpemU9IjAiIHdpZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVyIj4NCjwvZGl2 Pg0KPGRpdiBpZD0iZ21haWwtbV8tNDkzNTI1OTc0NzY2NzQyMTMzNGRpdlJwbHlGd2RNc2ciPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5Gcm9tOjwv c3Bhbj48L2I+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4gUmlmYWF0IFNoZWtoLVl1c2VmICZs dDs8YSBocmVmPSJtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+ cmlmYWF0LmlldGZAZ21haWwuY29tPC9hPiZndDs8YnI+DQo8Yj5TZW50OjwvYj4gU3VuZGF5LCBO b3ZlbWJlciAzLCAyMDE5IDEyOjAxIFBNPGJyPg0KPGI+VG86PC9iPiBBbGV4ZXkgTWVsbmlrb3Yg Jmx0OzxhIGhyZWY9Im1haWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtIiB0YXJnZXQ9Il9ibGFu ayI+YWFtZWxuaWtvdkBmYXN0bWFpbC5mbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBDaHJpc3Rl ciBIb2xtYmVyZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29u LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbTwvYT4m Z3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYub3JnIiB0YXJnZXQ9Il9i bGFuayI+c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmc8L2E+ICZsdDs8YSBocmVmPSJtYWlsdG86c2lw Y29yZS1jaGFpcnNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zaXBjb3JlLWNoYWlyc0BpZXRm Lm9yZzwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qt c2NoZW1lQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2Vz dC1zY2hlbWVAaWV0Zi5vcmc8L2E+ICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1zaXBj b3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kcmFmdC1pZXRmLXNp cGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZzwvYT4mZ3Q7OyBUaGUgSUVTRyAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmllc2dAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5pZXNnQGlldGYub3JnPC9h PiZndDs7DQogU0lQQ09SRSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNpcGNvcmVAaWV0Zi5vcmciIHRh cmdldD0iX2JsYW5rIj5zaXBjb3JlQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0Ojwv Yj4gUmU6IFtzaXBjb3JlXSBBbGV4ZXkgTWVsbmlrb3YncyBObyBPYmplY3Rpb24gb24gZHJhZnQt aWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6ICh3aXRoIENPTU1FTlQpPC9zcGFuPg0KPG86 cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5BbGV4ZXksIENocmlzdGVyLCA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkhvdyBhYm91dCB0aGUgZm9sbG93aW5nOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MS4gQ2hhbmdlIHRoZSBBQk5GIHRvICZxdW90 O3JlcXVlc3QtZGlnZXN0ID0gTERRVU9UICpMSEVYIFJEUVVPVCZxdW90OzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Mi4gQ2hhbmdlIHRoZSB0ZXh0 IGJlbG93IGl0IHRvIHNheSAmcXVvdDtUaGUgbnVtYmVyIG9mIGhleCBkaWdpdHMgaXMgaW1wbGll ZCBieSB0aGUgbGVuZ3RoIG9mIHRoZSB2YWx1ZSBvZiB0aGUgYWxnb3JpdGhtIHVzZWQsIHdpdGgg dGhlIG1pbmltdW0gc2l6ZSBvZiAzMi4gQSBwYXJhbWV0ZXIgd2l0aCBhbiBlbXB0eSB2YWx1ZSAo ZW1wdHkgc3RyaW5nKSBpcyBhbGxvd2VkIHdoZW4gdGhlIGFsZ29yaXRobSBpcyBub3Qgc3BlY2lm aWVkLiZxdW90OyZxdW90OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5SZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7UmlmYWF0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEZyaSwgTm92IDEsIDIwMTkgYXQgNjoxMCBB TSBBbGV4ZXkgTWVsbmlrb3YgJmx0OzxhIGhyZWY9Im1haWx0bzphYW1lbG5pa292QGZhc3RtYWls LmZtIiB0YXJnZXQ9Il9ibGFuayI+YWFtZWxuaWtvdkBmYXN0bWFpbC5mbTwvYT4mZ3Q7IHdyb3Rl OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0 O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+T24gMSBOb3YgMjAxOSwgYXQgMDc6MDks IENocmlzdGVyIEhvbG1iZXJnICZsdDs8YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdA ZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayI+Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24u Y29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+ DQo8cD5IaSw8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7SSBkbyBub3QgaGF2ZSBh IHN0cm9uZyBvcGluaW9uIGhlcmUuIDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cD48 c3BhbiBsYW5nPSJFTi1VUyI+Jmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7QW55Ym9keSBoYXMgYW4gb3Bpbmlv biBvciB0aG91Z2h0cyBhYm91dCBhZGRpbmcgc3VjaCBhIHRleHQ/PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj5JbiBhZGRpdGlvbiB3ZeKAmWQg b2J2aW91c2x5IGFsc28gY2hhbmdlIHRoZSBBQk5GIGJhY2ssIHRvIGFsbG93IGVtcHR5IHZhbHVl cy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SWYgdGhlIEFCTkYgaXMgY2hh bmdlZCBiYWNrIGZvciB0aGlzLCBJIHRoaW5rIHNvbWUgZXh0cmEgdGV4dCB3b3VsZCBiZSB1c2Vm dWwuPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHA+PHNwYW4gbGFuZz0iRU4tVVMiPlJlZ2FyZHMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+ PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwPjxzcGFu IGxhbmc9IkVOLVVTIj5DaHJpc3Rlcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwPjxzcGFuIGxh bmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cD5PbiBU aHUsIE9jdCAzMSwgMjAxOSBhdCAxOjUwIFBNIENocmlzdGVyIEhvbG1iZXJnICZsdDs8YSBocmVm PSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9ibGFuayI+ Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpz b2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6 NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206NS4w cHQiPg0KPGRpdj4NCjxkaXY+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+U29tZXRoaW5nIGxpa2Ug dGhpczo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPuKAnEluIHNvbWUg Y2FzZXMgYSBVQUMgbmVlZHMgdG8gaW5jbHVkZSBhbiBBdXRob3JpemF0aW9uIGhlYWRlciBmaWVs ZCBpbiBhIHJlcXVlc3QgYmVmb3JlIGl0IGhhcyByZWNlaXZlZCBhIGNoYWxsZW5nZSwgaW4gb3Jk ZXIgdG8gcHJvdmlkZSB1c2VyIGluZm9ybWF0aW9uICh1c2luZyB0aGUg4oCYdXNlcmluZm/igJkg aGVhZGVyIGZpZWxkIHBhcmFtZXRlcikgdGhhdCBpcyBuZWVkZWQgaW4gb3JkZXIgdG8gY3JlYXRl IHRoZQ0KIGNoYWxsZW5nZS4gQW4gZXhhbXBsZSBvZiBzdWNoIGNhc2UgaXMgd2hlbiB0aGUgSFRU UCBEaWdlc3QgQXV0aGVudGljYXRpb24gVXNpbmcgQUtBIG1lY2hhbmlzbSAoUkZDMzMxMCkgKFJG QzQxNjkpIGlzIHVzZWQuIEluIHN1Y2ggY2FzZSB0aGUgQXV0aG9yaXphdGlvbiBoZWFkZXIgZmll bGQgd291bGQgdHlwaWNhbGx5IG5vdCBjb250YWluIGEg4oCYcmVzcG9uc2XigJkgaGVhZGVyIGZp ZWxkIHBhcmFtZXRlciBiZWZvcmUgYSBjaGFsbGVuZ2UgcmVzcG9uc2UNCiBpcyBwcm92aWRlZC4g SG93ZXZlciwgZm9yIHRoZSBJUCBNdWx0aW1lZGlhIFN1YnN5c3RlbSAoSU1TKSBpdCBoYXMgYmVl biBzcGVjaWZpZWQgdGhhdCB0aGUgQXV0aG9yaXphdGlvbiBoZWFkZXIgZmllbGQgaW4gc3VjaCBj YXNlIGRvZXMgY29udGFpbiBhICZuYnNwO+KAmHJlc3BvbnNl4oCZIGhlYWRlciBmaWVsZCBwYXJh bWV0ZXIsIHdpdGggYW4gZW1wdHkgdmFsdWUgKGVtcHR5IHN0cmluZykuIEZvciB0aGF0IHJlYXNv biB0aGUgbW9kaWZpZWQgcmVxdWVzdC1kaWdlc3QNCiBBQk5GIGFsbG93cyBzdWNoIGVtcHR5IHZh bHVlcy7igJ08L3NwYW4+PG86cD48L286cD48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPlJlZ2FyZHMs PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj5DaHJpc3Rlcjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEu MHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHA+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPlJpZmFhdCBTaGVraC1ZdXNlZiAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnJpZmFhdC5p ZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlRodXJzZGF5LCAzMSBPY3Rv YmVyIDIwMTkgYXQgMTkuMjI8YnI+DQo8Yj5UbzogPC9iPkNocmlzdGVyIEhvbG1iZXJnICZsdDs8 YSBocmVmPSJtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tIiB0YXJnZXQ9Il9i bGFuayI+Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPC9hPiZndDs8YnI+DQo8Yj5DYzog PC9iPkNocmlzdGVyIEhvbG1iZXJnICZsdDtjaHJpc3Rlci5ob2xtYmVyZz08YSBocmVmPSJtYWls dG86NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj40MGVyaWNz c29uLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86c2lw Y29yZS1jaGFpcnNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zaXBjb3JlLWNoYWlyc0BpZXRm Lm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmUtY2hhaXJzQGlldGYub3JnPC9hPiZndDssDQogJnF1 b3Q7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYu b3JnIiB0YXJnZXQ9Il9ibGFuayI+ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0 Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRp Z2VzdC1zY2hlbWVAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kcmFmdC1pZXRmLXNpcGNvcmUt ZGlnZXN0LXNjaGVtZUBpZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86aWVz Z0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmllc2dAaWV0Zi5vcmc8L2E+JnF1b3Q7DQogJmx0 OzxhIGhyZWY9Im1haWx0bzppZXNnQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+aWVzZ0BpZXRm Lm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86c2lwY29yZUBpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWls dG86c2lwY29yZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5vcmc8L2E+ Jmd0OywgQWxleGV5IE1lbG5pa292ICZsdDs8YSBocmVmPSJtYWlsdG86YWFtZWxuaWtvdkBmYXN0 bWFpbC5mbSIgdGFyZ2V0PSJfYmxhbmsiPmFhbWVsbmlrb3ZAZmFzdG1haWwuZm08L2E+Jmd0Ozxi cj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW3NpcGNvcmVdIEFsZXhleSBNZWxuaWtvdidzIE5vIE9i amVjdGlvbiBvbiBkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xMjogKHdpdGggQ09N TUVOVCk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPkNhbiB5b3UgcHJvcG9zZSBzb21lIHRleHQ/ IDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHA+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5i c3A7UmlmYWF0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8ZGl2Pg0KPHA+T24gVGh1LCBPY3QgMzEsIDIwMTkgYXQgMTE6NDQgQU0gQ2hyaXN0ZXIgSG9s bWJlcmcgJmx0OzxhIGhyZWY9Im1haWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20i IHRhcmdldD0iX2JsYW5rIj5jaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb208L2E+Jmd0OyB3 cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2 LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowY207 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwPkhpLDxvOnA+PC9vOnA+PC9w Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+UGVyaGFw cyB3ZSBjb3VsZCBhZGQgc29tZSB0ZXh0IGFib3V0IHRoZSBJTVMgdXNlLWNhc2UsIGluIG9yZGVy IHRvIGV4cGxhaW4gdGhlIGVtcHR5IHZhbHVlPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwPjxz cGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cD48c3BhbiBs YW5nPSJFTi1VUyI+UmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cD48c3BhbiBsYW5n PSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4t VVMiPkNocmlzdGVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4N CjxwPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8 L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5zaXBj b3JlICZsdDs8YSBocmVmPSJtYWlsdG86c2lwY29yZS1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9 Il9ibGFuayI+c2lwY29yZS1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsgb24gYmVoYWxmIG9mIENo cmlzdGVyIEhvbG1iZXJnICZsdDtjaHJpc3Rlci5ob2xtYmVyZz08YSBocmVmPSJtYWlsdG86NDBl cmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj40MGVyaWNzc29uLmNv bUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlRodXJzZGF5LCAzMSBP Y3RvYmVyIDIwMTkgYXQgMTUuNTI8YnI+DQo8Yj5UbzogPC9iPlJpZmFhdCBTaGVraC1ZdXNlZiAm bHQ7PGEgaHJlZj0ibWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsi PnJpZmFhdC5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVvdDs8YSBo cmVmPSJtYWlsdG86c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zaXBj b3JlLWNoYWlyc0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpzaXBjb3Jl LWNoYWlyc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmUtY2hhaXJzQGlldGYub3Jn PC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0 LXNjaGVtZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmRyYWZ0LWlldGYtc2lwY29yZS1kaWdl c3Qtc2NoZW1lQGlldGYub3JnPC9hPiZxdW90Ow0KICZsdDs8YSBocmVmPSJtYWlsdG86ZHJhZnQt aWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kcmFm dC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZzwvYT4mZ3Q7LCAmcXVvdDs8YSBo cmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmllc2dAaWV0Zi5vcmc8 L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPmllc2dAaWV0Zi5vcmc8L2E+Jmd0OywNCiAmcXVvdDs8YSBocmVmPSJtYWlsdG86c2lwY29y ZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZs dDs8YSBocmVmPSJtYWlsdG86c2lwY29yZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNv cmVAaWV0Zi5vcmc8L2E+Jmd0OywgQWxleGV5IE1lbG5pa292ICZsdDs8YSBocmVmPSJtYWlsdG86 YWFtZWxuaWtvdkBmYXN0bWFpbC5mbSIgdGFyZ2V0PSJfYmxhbmsiPmFhbWVsbmlrb3ZAZmFzdG1h aWwuZm08L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW3NpcGNvcmVdIEFsZXhleSBN ZWxuaWtvdidzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVt ZS0xMjogKHdpdGggQ09NTUVOVCk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHA+SGksPG86cD48L286cD48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7VGhpcyBJTVMgYmVoYXZpb3Igd291bGQg aGF2ZSBiZWVuIGluIHZpb2xhdGlvbiBvZiBSRkMzMjYxIHdoaWNoIHNwZWNpZmllZCBleGFjdGx5 IDMyIEhleCBjaGFyYWN0ZXJzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwPjxzcGFuIGxhbmc9IkVOLVVTIj4mZ3Q7U28sIHRoaXMgY2hhbmdlIHNob3VsZCBub3QgbWFr ZSBtdWNoIG9mJm5ic3A7YSBkaWZmZXJlbmNlIGluIHRoaXMgY2FzZS48L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPkluIHJlYWxpdHkgaXQgcHJv YmFibHkgZG9lc27igJl0IG1ha2UgYSBkaWZmZXJlbmNlLCBidXQgaXQgd291bGQgbWFrZSB0aGUg SU1TIHByb2NlZHVyZXMg4oCcYWxpZ25lZOKAnSB3aXRoIHRoZSBJRVRGIHNwZWMuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj5SZWdhcmRzLDwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+Q2hyaXN0ZXI8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cD48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHA+T24gVGh1LCBPY3QgMzEs IDIwMTkgYXQgOTozNyBBTSBDaHJpc3RlciBIb2xtYmVyZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNo cmlzdGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmNocmlzdGVyLmhv bG1iZXJnQGVyaWNzc29uLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0ND QyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+ DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyI+ SGksPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgcmVhc29uIGZv ciB0aGUgZW1wdHkgdmFsdWUgY29tZXMgZnJvbSBJTVMgYW5kIEFLQSwgd2hlcmUgeW91IG5lZWQg dG8gaW5jbHVkZSB0aGUgdXNlciBpZCBhbHJlYWR5IGluIHRoZSBpbml0aWFsIFJFR0lTVEVSIHJl cXVlc3QgKHRoaXMgc2VlbXMgdG8gYmUgbWlzc2luZyBmcm9tIFJGQyAzMzEwLCBidXQgdGhhdOKA mXMgYSBzZXBhcmF0ZSB0b3BpYykgaW4gb3JkZXIgZm9yIHRoZSBzZXJ2ZXIgdG8gY3JlYXRlDQog dGhlIGNoYWxsZW5nZSwmbmJzcDsgbWVhbmluZyB0aGF0IGluIHRoZSBpbml0aWFsIFJFR0lTVEVS IHJlcXVlc3QgeW91IGluY2x1ZGUgYW4gQXV0aG9yaXphdGlvbiBoZWFkZXIgZmllbGQgd2l0aCB0 aGUgdXNlcm5hbWUgcGFyYW1ldGVyIGNhcnJ5aW5nIHRoZSBJTVMgcHJpdmF0ZSB1c2VyIGlkZW50 aXR5LCB0aGUgcmVhbG0gcGFyYW1ldGVyIGFuZCB0aGUgdXJpIHBhcmFtZXRlci4gQXQgdGhpcyBw b2ludCB5b3Ugb2J2aW91c2x5IGRvbuKAmXQgeWV0IGhhdmUNCiB0aGUgcmVzcG9uc2UsIHNvIGlu IElNUyBpdCBpcyBzcGVjaWZpZWQgdGhhdCB0aGUgcmVzcG9uc2UgcGFyYW1ldGVyIGlzIGluc2Vy dGVkIHdpdGggYW4gZW1wdHkgdmFsdWUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwPjxzcGFuIGxhbmc9 IkVOLVVTIj5XSFkgaXQgd2FzIHNwZWNpZmllZCB0aGF0IHdheSAoaW5zdGVhZCBvZiBzaW1wbHkg bm90IGluY2x1ZGluZyB0aGUgcmVzcG9uc2UgcGFyYW1ldGVyKSBJIGRvbuKAmXQga25vdywgYnV0 IEkgZG8ga25vdyB0aGF0IGl0IGhhcyBiZWVuIGltcGxlbWVudGVkIGFuZCBkZXBsb3llZCB0aGF0 IHdheSBmb3IgbWFueSB5ZWFycy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cD48c3BhbiBsYW5n PSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4t VVMiPlJlZ2FyZHMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj5DaHJp c3Rlcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHA+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cD48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPjwv Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+c2lwY29yZSAmbHQ7 PGEgaHJlZj0ibWFpbHRvOnNpcGNvcmUtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsi PnNpcGNvcmUtYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IG9uIGJlaGFsZiBvZiBSaWZhYXQgU2hl a2gtWXVzZWYgJmx0OzxhIGhyZWY9Im1haWx0bzpyaWZhYXQuaWV0ZkBnbWFpbC5jb20iIHRhcmdl dD0iX2JsYW5rIj5yaWZhYXQuaWV0ZkBnbWFpbC5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwv Yj5UaHVyc2RheSwgMzEgT2N0b2JlciAyMDE5IGF0IDE1LjIwPGJyPg0KPGI+VG86IDwvYj5BbGV4 ZXkgTWVsbmlrb3YgJmx0OzxhIGhyZWY9Im1haWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtIiB0 YXJnZXQ9Il9ibGFuayI+YWFtZWxuaWtvdkBmYXN0bWFpbC5mbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6 IDwvYj4mcXVvdDs8YSBocmVmPSJtYWlsdG86c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmciIHRhcmdl dD0iX2JsYW5rIj5zaXBjb3JlLWNoYWlyc0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9 Im1haWx0bzpzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmUt Y2hhaXJzQGlldGYub3JnPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRm LXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmRyYWZ0LWll dGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnPC9hPiZxdW90Ow0KICZsdDs8YSBocmVm PSJtYWlsdG86ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmciIHRhcmdl dD0iX2JsYW5rIj5kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZzwvYT4m Z3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsi Pmllc2dAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86aWVzZ0BpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPmllc2dAaWV0Zi5vcmc8L2E+Jmd0OywNCiAmcXVvdDs8YSBocmVm PSJtYWlsdG86c2lwY29yZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5v cmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86c2lwY29yZUBpZXRmLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5S ZTogW3NpcGNvcmVdIEFsZXhleSBNZWxuaWtvdidzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRm LXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xMjogKHdpdGggQ09NTUVOVCk8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwPkRvbmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cD5PbiBUaHUsIE9jdCAzMSwgMjAxOSBhdCA5OjEzIEFN IEFsZXhleSBNZWxuaWtvdiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFhbWVsbmlrb3ZAZmFzdG1haWwu Zm0iIHRhcmdldD0iX2JsYW5rIj5hYW1lbG5pa292QGZhc3RtYWlsLmZtPC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7 bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdp bi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cD5PbiBUaHUsIE9jdCAzMSwgMjAxOSwg YXQgMToxMSBQTSwgUmlmYWF0IFNoZWtoLVl1c2VmIHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0IiBpZD0iZ21haWwtbV8tNDkzNTI1OTc0NzY2NzQyMTMzNHhfZ21haWwtbV8xOTkwMTMxODI3 MzUwODU4MTMxZ21haWwtbV8tMzU4NzIzNzg0OTAzOTE1MzA2MGdtYWlsLW1fLTg0Njc1Mjg3MDM2 MzYyNTA2NDBnbWFpbC1tXy02NTU0ODY5NTYxMzk3MTM0MTIyZ21haWwtbV8tODQwNTA3OTczODU0 OTQzODcwNnF0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHA+SGkgQWxleGV5LDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cD5JIGFtIGZpbmUgd2l0aCBQYXVsJ3Mgc3VnZ2VzdGlvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwPkFyZSB5b3Ugb2sgd2l0aCZuYnNwOzxzcGFuIHN0eWxlPSJjb2xvcjpibGFj ayI+JnF1b3Q7MzIqTEhFWCZxdW90Oz88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwPlllcyE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+VGhh bmsgeW91LDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+QWxleGV5PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdp bi1ib3R0b206NS4wcHQiIGlkPSJnbWFpbC1tXy00OTM1MjU5NzQ3NjY3NDIxMzM0eF9nbWFpbC1t XzE5OTAxMzE4MjczNTA4NTgxMzFnbWFpbC1tXy0zNTg3MjM3ODQ5MDM5MTUzMDYwZ21haWwtbV8t ODQ2NzUyODcwMzYzNjI1MDY0MGdtYWlsLW1fLTY1NTQ4Njk1NjEzOTcxMzQxMjJnbWFpbC1tXy04 NDA1MDc5NzM4NTQ5NDM4NzA2cXQiPg0KPGRpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPlJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cD4mbmJzcDtSZmFhdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwPk9uIFRodSwgT2N0IDMxLCAy MDE5IGF0IDc6MjIgQU0gQWxleGV5IE1lbG5pa292ICZsdDs8YSBocmVmPSJtYWlsdG86YWFtZWxu aWtvdkBmYXN0bWFpbC5mbSIgdGFyZ2V0PSJfYmxhbmsiPmFhbWVsbmlrb3ZAZmFzdG1haWwuZm08 L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20g MGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1y aWdodDowY207bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHA+SGkgUmlmYWF0LDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cD5PbiBXZWQsIE9jdCAzMCwgMjAxOSwgYXQgOTo1MCBQTSwgUmlmYWF0IFNoZWtoLVl1c2Vm IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0IiBpZD0iZ21haWwtbV8tNDkzNTI1OTc0NzY2 NzQyMTMzNHhfZ21haWwtbV8xOTkwMTMxODI3MzUwODU4MTMxZ21haWwtbV8tMzU4NzIzNzg0OTAz OTE1MzA2MGdtYWlsLW1fLTg0Njc1Mjg3MDM2MzYyNTA2NDBnbWFpbC1tXy02NTU0ODY5NTYxMzk3 MTM0MTIyZ21haWwtbV8tODQwNTA3OTczODU0OTQzODcwNnF0LWdtYWlsLW1fLTY2MzYwNDIzNTky MTA4NTI5MjVxdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cD5UaGFua3MgQWxleGV5ITxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cD5JIGFtIGZpbmUgd2l0aCB0aGUgZmlyc3QgdHdvIGNvbW1lbnRzLCBhbmQg d2lsbCBmaXggdGhlc2UgaW4gdGhlIGNvbWluZyB2ZXJzaW9uIG9mIHRoZSBkb2N1bWVudC48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8cD5JIGFtIG5vdCBzdXJlIEkgZm9sbG93IHRoZSAzcmQgb25l LiBXaHkgZG8geW91IHNlZSB0aGUgbmVlZCBmb3IgYSBtaW5pbXVtIG51bWJlciBvZiBoZXggZGln aXRzPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+ DQo8cD5Zb3UgZG8gc2F5IHRoYXQgdGhlIG51bWJlciBvZiBoZXggZGlnaXRzIG1hdGNoIHRoZSBo YXNoIGxlbmdodCwgc28gaXQgaXMgcHJvYmFibHkgT2suIEhvd2V2ZXIgZW1wdHkgdmFsdWUgaXMg bmV2ZXIgdmFsaWQgKGFuZCBJIGFtIHdvcnJpZWQgaXQgbWlnaHQgaGl0IHNvbWUgYm91bmRhcnkg Y29uZGl0aW9uIGJ1ZyBpbiBpbXBsZW1lbnRhdGlvbnMpLCBzbyBwcm9oaWJpdGluZyBpdCBpbiBB Qk5GIHdvdWxkIGJlIHRoZSBiZXN0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD5CZXN0IFJlZ2FyZHMsPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD5BbGV4ZXk8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCIgaWQ9ImdtYWlsLW1fLTQ5MzUyNTk3NDc2Njc0MjEzMzR4X2dtYWlsLW1fMTk5MDEzMTgy NzM1MDg1ODEzMWdtYWlsLW1fLTM1ODcyMzc4NDkwMzkxNTMwNjBnbWFpbC1tXy04NDY3NTI4NzAz NjM2MjUwNjQwZ21haWwtbV8tNjU1NDg2OTU2MTM5NzEzNDEyMmdtYWlsLW1fLTg0MDUwNzk3Mzg1 NDk0Mzg3MDZxdC1nbWFpbC1tXy02NjM2MDQyMzU5MjEwODUyOTI1cXQiPg0KPGRpdj4NCjxkaXY+ DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPlJlZ2FyZHMsPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDtSaWZhYXQ8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cD5PbiBXZWQsIE9jdCAzMCwgMjAxOSBhdCAxOjE2IFBNIEFsZXhleSBNZWxuaWtvdiB2aWEgRGF0 YXRyYWNrZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpub3JlcGx5QGlldGYub3JnIiB0YXJnZXQ9Il9i bGFuayI+bm9yZXBseUBpZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0ND Q0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxk aXY+DQo8cD5BbGV4ZXkgTWVsbmlrb3YgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3Qg cG9zaXRpb24gZm9yPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD5kcmFmdC1pZXRm LXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xMjogTm8gT2JqZWN0aW9uPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw PldoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5k IHJlcGx5IHRvIGFsbDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+ZW1haWwgYWRk cmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0 IHRoaXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPmludHJvZHVjdG9yeSBwYXJh Z3JhcGgsIGhvd2V2ZXIuKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwPlBsZWFzZSByZWZlciB0byA8YSBocmVmPSJodHRwczovL3d3dy5p ZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLWNyaXRlcmlhLmh0bWwiIHRhcmdldD0iX2Js YW5rIj4NCmh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVy aWEuaHRtbDwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPmZvciBtb3JlIGlu Zm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+VGhl IGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3Vu ZCBoZXJlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+PGEgaHJlZj0iaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hl bWUvIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUvPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHA+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHA+Q09NTUVOVDo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPi0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+SSBhbSBhZ3JlZWluZyB3aXRoIEFsaXNzYSdz IERJU0NVU1MuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPkFsc28sIEkgaGF2ZSBhIGZldyBjb21tZW50cyBv ZiBteSBvd246PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPjEpIExhc3QgcGFyYSBvZiBTZWN0aW9uIDIuMTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHA+Mi4xLiZuYnNwOyBIYXNoIEFsZ29yaXRobXM8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHA+Jm5ic3A7ICZuYnNwO0EgVUFTIHByaW9yaXRpemVzIHdoaWNoIGFsZ29yaXRobSB0byB1 c2UgYmFzZWQgb24gdGhlIG9yZGVyaW5nIG9mIHRoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHA+Jm5ic3A7ICZuYnNwO2NoYWxsZW5nZSBoZWFkZXIgZmllbGRzIGluIHRoZSByZXNw b25zZSBpdCBpcyBwcmVwYXJpbmcuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPlRoaXMgbG9va3MgZWl0aGVy IHdyb25nIG9yIGNvbmZ1c2luZyB0byBtZS4gSSB0aGluayB5b3UgYXJlIGp1c3Qgc2F5aW5nIGhl cmU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPnRoYXQgdGhlIG9yZGVyIGlzIGRl Y2lkZWQgYnkgdGhlIHNlcnZlciBhdCB0aGlzIHBvaW50LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJz cDsgJm5ic3A7VGhhdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7ICZu YnNwO3Byb2Nlc3MgaXMgc3BlY2lmaWVkIGluIHNlY3Rpb24gMi4zIGFuZCBwYXJhbGxlbHMgdGhl IHByb2Nlc3MgdXNlZCBpbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7 ICZuYnNwO0hUVFAgc3BlY2lmaWVkIGJ5IFtSRkM3NjE2XS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+U28g YmFzZWQgb24gdGhlIGFib3ZlLCBteSBzdWdnZXN0ZWQgcmVwbGFjZW1lbnQgZm9yIGJvdGggc2Vu dGVuY2VzOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDsgJm5ic3A7QSBVQVMgcHJpb3JpdGl6ZXMg d2hpY2ggYWxnb3JpdGhtIHRvIHVzZSBiYXNlZCBvbiBpdHMgcG9saWN5LDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7ICZuYnNwO3doaWNoIGlzIHNwZWNpZmllZCBpbiBz ZWN0aW9uIDIuMyBhbmQgcGFyYWxsZWxzIHRoZSBwcm9jZXNzIHVzZWQgaW48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOyAmbmJzcDtIVFRQIHNwZWNpZmllZCBieSBbUkZD NzYxNl0uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPjIpIExhc3QgcGFyYSBvZiBTZWN0aW9uIDIuNDo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7ICZuYnNwO0lmIHRoZSBVQUMgY2Fubm90IHJlc3BvbmQgdG8g YW55IG9mIHRoZSBjaGFsbGVuZ2VzIGluIHRoZSByZXNwb25zZSw8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOyAmbmJzcDt0aGVuIGl0IFNIT1VMRCBhYmFuZG9uIGF0dGVt cHRzIHRvIHNlbmQgdGhlIHJlcXVlc3QgdW5sZXNzIGEgbG9jYWw8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOyAmbmJzcDtwb2xpY3kgZGljdGF0ZXMgb3RoZXJ3aXNlLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cD5JcyB0cnlpbmcgb3RoZXIgbm9uIERpZ2VzdCBhbGdvcml0aG1zIGNv dmVyZWQgYnkgJnF1b3Q7U0hPVUxEIGFiYW5kb24mcXVvdDs/PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cD5JZiB5ZXMsIG1heWJlIHlvdSBzaG91bGQgbWFrZSB0aGlzIGNsZWFyZXIu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOyAmbmJzcDtGb3IgZXhhbXBsZSwgaWYgdGhlIFVBQyBk b2VzIG5vdCBoYXZlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDsgJm5i c3A7Y3JlZGVudGlhbHMgb3IgaGFzIHN0YWxlIGNyZWRlbnRpYWxzIGZvciBhbnkgb2YgdGhlIHJl YWxtcywgdGhlIFVBQzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+Jm5ic3A7ICZu YnNwO3dpbGwgYWJhbmRvbiB0aGUgcmVxdWVzdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+MykgSW4gU2Vj dGlvbiAyLjc6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOyAmbmJzcDsgJm5ic3A7IHJlcXVlc3Qt ZGlnZXN0ID0gTERRVU9UICpMSEVYIFJEUVVPVDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHA+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD5UaGlzIG5vdyBh bGxvd3MgZW1wdHkgdmFsdWUuIEkgc3VnZ2VzdCB5b3Ugc3BlY2lmeSBhIG1pbmltdW0gbnVtYmVy IG9mIGhleDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHA+ZGlnaXRzIGFsbG93ZWQg aW4gdGhlIEFCTkYuIE9yIGF0IGxlYXN0IGNoYW5nZSAmcXVvdDsqTEhFWCZxdW90OyB0byAmcXVv dDsyKkxIRVgmcXVvdDsuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cD4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4N CjxwPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_84CA4DD0387746A0877243F35BB788A3ericssoncom_-- From nobody Mon Nov 4 04:54:12 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FDE01200C3; Mon, 4 Nov 2019 04:54:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oJ-274H4xGlh; Mon, 4 Nov 2019 04:54:07 -0800 (PST) Received: from mail-io1-xd32.google.com (mail-io1-xd32.google.com [IPv6:2607:f8b0:4864:20::d32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 686DE1200B7; Mon, 4 Nov 2019 04:54:07 -0800 (PST) Received: by mail-io1-xd32.google.com with SMTP id q1so18288175ion.1; Mon, 04 Nov 2019 04:54:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=fgArjmSbySkzxvQvKcOLTWHHMwDZNDb9qrK2QuXX+Fc=; b=IJIUzb0+yqspEAp0RzboW6NCX4D0Ft7yQk+3DxV2UsxM7acig6Tr8Fo75O8ppC9COh NS0hgHGfBaiHZca3DCJ5eTt7AtTMG7NFsnBqH9aoek/nbigzooXVPok9LCZ0E/gGR38F VJGNQk1A8Tt12JBBqmYcky6vDFIAIbpuxDOpxwbhFoKW+fEQ5LhAFQpIKxQ69oqwdUuB myy5n31W6lVWW2k8kJbbzcTGqYJWI4ZuHzxDSjq1Rn23rOylqdiWP5i8t4dyxQ/XZS7R 3w1Q/ls1cA6TtoN2dn9II9/Tqk5g2Xjrc3HUsqAhKH3EFr6ApiSVgUn33UedGZUJmXDc GO9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=fgArjmSbySkzxvQvKcOLTWHHMwDZNDb9qrK2QuXX+Fc=; b=Cz6CmGj0Z3FkbmVK3CYqyqjYOtMXdxn2lvaYbBgmpOBsm7IZuiFmC3G2tQK61Yd9NC L3DK1VRJNY/tdCCQE+UrjhMnrVJQToNZDyDtgWi2SopDQc5yMNudePdAVTyZmSHzbUGg dP2ycGCVJLl08Nid5mZtCbMu4qbUl8P+KcnfT8JbZYGJw/drcnMP7Ea0MiM+geAhcXQu IrZQ13Fi/K95/Sayg1yz0j/rUk4iaB7L1Ad8KfVCDLuYlxWMuGrPCOtQArOnshPMu6HK RJXhHrcg7ceOoKBXGrOWe7KQocJgRxI3kap5fVtj8CsY0NyYPW5un1n+eSIXgn5o8khz 0pxQ== X-Gm-Message-State: APjAAAXKhfL1XxUATAi68hs+1i/ulja8/DAhxWa5xY7t2+N2E2K/0zbx soRn9JhgjWOGPmkDzjsVpAUD7C9da3XlDxXigmU= X-Google-Smtp-Source: APXvYqwwprnAQkXi9MBS93J9wNM5UJMh0pOgt3HnOON1a5SThrfMpQrVBku0wBJP7xj0wxsP/CG3qdzaQB0Vm/LCy3E= X-Received: by 2002:a02:1c41:: with SMTP id c62mr19800321jac.132.1572872046672; Mon, 04 Nov 2019 04:54:06 -0800 (PST) MIME-Version: 1.0 References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> <84CA4DD0-3877-46A0-8772-43F35BB788A3@ericsson.com> In-Reply-To: <84CA4DD0-3877-46A0-8772-43F35BB788A3@ericsson.com> From: Rifaat Shekh-Yusef Date: Mon, 4 Nov 2019 07:53:54 -0500 Message-ID: To: Christer Holmberg Cc: Alexey Melnikov , "sipcore-chairs@ietf.org" , "draft-ietf-sipcore-digest-scheme@ietf.org" , The IESG , SIPCORE Content-Type: multipart/alternative; boundary="0000000000009e7f2c059684cf86" Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 12:54:11 -0000 --0000000000009e7f2c059684cf86 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I see. I am fine with this. Regards, Rifaat On Mon, Nov 4, 2019 at 2:57 AM Christer Holmberg < christer.holmberg@ericsson.com> wrote: > Hi, > > > > >I am not sure I am following, What do you mean by "challenge response no= t > being provided"? > > > > The response to the challenge provided by the server. > > > > If you think it is unclear, maybe something like: > > > > =E2=80=9CA parameter with an empty value (empty string) is allowed when t= he UAC > has not yet received a challenge." > > > > Regards, > > > > Christer > > > > > > > > > > > > > > On Sun, Nov 3, 2019 at 1:53 PM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > Hi, > > > > I am fine with the suggestion, but instead of talking about an algorithm > not being provided I would like to talk about a *challenge response* not > being provided. > > > > Regards, > > > > Christer > > > > > ------------------------------ > > *From:* Rifaat Shekh-Yusef > *Sent:* Sunday, November 3, 2019 12:01 PM > *To:* Alexey Melnikov > *Cc:* Christer Holmberg ; > sipcore-chairs@ietf.org ; > draft-ietf-sipcore-digest-scheme@ietf.org < > draft-ietf-sipcore-digest-scheme@ietf.org>; The IESG ; > SIPCORE > *Subject:* Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Alexey, Christer, > > > > How about the following: > > 1. Change the ABNF to "request-digest =3D LDQUOT *LHEX RDQUOT" > > 2. Change the text below it to say "The number of hex digits is implied b= y > the length of the value of the algorithm used, with the minimum size of 3= 2. > A parameter with an empty value (empty string) is allowed when the > algorithm is not specified."" > > > > Regards, > > Rifaat > > > > On Fri, Nov 1, 2019 at 6:10 AM Alexey Melnikov > wrote: > > > > On 1 Nov 2019, at 07:09, Christer Holmberg > wrote: > > Hi, > > > > >I do not have a strong opinion here. > > > > > >Anybody has an opinion or thoughts about adding such a text? > > > > In addition we=E2=80=99d obviously also change the ABNF back, to allow em= pty > values. > > > > If the ABNF is changed back for this, I think some extra text would be > useful. > > > > Regards, > > > > Christer > > > > > > > > > > On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > Something like this: > > > > =E2=80=9CIn some cases a UAC needs to include an Authorization header fie= ld in a > request before it has received a challenge, in order to provide user > information (using the =E2=80=98userinfo=E2=80=99 header field parameter)= that is needed in > order to create the challenge. An example of such case is when the HTTP > Digest Authentication Using AKA mechanism (RFC3310) (RFC4169) is used. In > such case the Authorization header field would typically not contain a > =E2=80=98response=E2=80=99 header field parameter before a challenge resp= onse is provided. > However, for the IP Multimedia Subsystem (IMS) it has been specified that > the Authorization header field in such case does contain a =E2=80=98resp= onse=E2=80=99 > header field parameter, with an empty value (empty string). For that reas= on > the modified request-digest ABNF allows such empty values.=E2=80=9D > > > > Regards, > > > > Christer > > > > > > *From: *Rifaat Shekh-Yusef > *Date: *Thursday, 31 October 2019 at 19.22 > *To: *Christer Holmberg > *Cc: *Christer Holmberg , > "sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" , Alexey Melnikov < > aamelnikov@fastmail.fm> > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Can you propose some text? > > > > Thanks, > > Rifaat > > > > > > On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > Hi, > > > > Perhaps we could add some text about the IMS use-case, in order to explai= n > the empty value? > > > > Regards, > > > > Christer > > > > *From: *sipcore on behalf of Christer Holmberg > > *Date: *Thursday, 31 October 2019 at 15.52 > *To: *Rifaat Shekh-Yusef > *Cc: *"sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" , Alexey Melnikov < > aamelnikov@fastmail.fm> > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Hi, > > > > >This IMS behavior would have been in violation of RFC3261 which specifie= d > exactly 32 Hex characters. > > >So, this change should not make much of a difference in this case. > > > > In reality it probably doesn=E2=80=99t make a difference, but it would ma= ke the > IMS procedures =E2=80=9Caligned=E2=80=9D with the IETF spec. > > > > Regards, > > > > Christer > > > > > > > > > > On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg < > christer.holmberg@ericsson.com> wrote: > > > > Hi, > > > > The reason for the empty value comes from IMS and AKA, where you need to > include the user id already in the initial REGISTER request (this seems t= o > be missing from RFC 3310, but that=E2=80=99s a separate topic) in order f= or the > server to create the challenge, meaning that in the initial REGISTER > request you include an Authorization header field with the username > parameter carrying the IMS private user identity, the realm parameter and > the uri parameter. At this point you obviously don=E2=80=99t yet have the= response, > so in IMS it is specified that the response parameter is inserted with an > empty value. > > > > WHY it was specified that way (instead of simply not including the > response parameter) I don=E2=80=99t know, but I do know that it has been > implemented and deployed that way for many years. > > > > Regards, > > > > Christer > > > > > > *From: *sipcore on behalf of Rifaat > Shekh-Yusef > *Date: *Thursday, 31 October 2019 at 15.20 > *To: *Alexey Melnikov > *Cc: *"sipcore-chairs@ietf.org" , " > draft-ietf-sipcore-digest-scheme@ietf.org" < > draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" , > "sipcore@ietf.org" > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > > > Done. > > > > On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov > wrote: > > On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef wrote: > > Hi Alexey, > > > > I am fine with Paul's suggestion. > > Are you ok with "32*LHEX"? > > Yes! > > > > Thank you, > > Alexey > > > > Regards, > > Rfaat > > > > > > On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov > wrote: > > > > Hi Rifaat, > > > > On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef wrote: > > Thanks Alexey! > > > > I am fine with the first two comments, and will fix these in the coming > version of the document. > > > > I am not sure I follow the 3rd one. Why do you see the need for a minimum > number of hex digits? > > You do say that the number of hex digits match the hash lenght, so it is > probably Ok. However empty value is never valid (and I am worried it migh= t > hit some boundary condition bug in implementations), so prohibiting it in > ABNF would be the best. > > > > Best Regards, > > Alexey > > > > Regards, > > Rifaat > > > > > > > > On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via Datatracker < > noreply@ietf.org> wrote: > > Alexey Melnikov has entered the following ballot position for > > draft-ietf-sipcore-digest-scheme-12: No Objection > > > > When responding, please keep the subject line intact and reply to all > > email addresses included in the To and CC lines. (Feel free to cut this > > introductory paragraph, however.) > > > > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > I am agreeing with Alissa's DISCUSS. > > > > Also, I have a few comments of my own: > > > > 1) Last para of Section 2.1: > > > > 2.1. Hash Algorithms > > > > A UAS prioritizes which algorithm to use based on the ordering of the > > challenge header fields in the response it is preparing. > > > > This looks either wrong or confusing to me. I think you are just saying > here > > that the order is decided by the server at this point. > > > > That > > process is specified in section 2.3 and parallels the process used in > > HTTP specified by [RFC7616]. > > > > So based on the above, my suggested replacement for both sentences: > > > > A UAS prioritizes which algorithm to use based on its policy, > > which is specified in section 2.3 and parallels the process used in > > HTTP specified by [RFC7616]. > > > > 2) Last para of Section 2.4: > > > > If the UAC cannot respond to any of the challenges in the response, > > then it SHOULD abandon attempts to send the request unless a local > > policy dictates otherwise. > > > > Is trying other non Digest algorithms covered by "SHOULD abandon"? > > If yes, maybe you should make this clearer. > > > > For example, if the UAC does not have > > credentials or has stale credentials for any of the realms, the UAC > > will abandon the request. > > > > 3) In Section 2.7: > > > > request-digest =3D LDQUOT *LHEX RDQUOT > > > > This now allows empty value. I suggest you specify a minimum number of he= x > > digits allowed in the ABNF. Or at least change "*LHEX" to "2*LHEX". > > > > > > > > > > --0000000000009e7f2c059684cf86 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I see. I am fine with this.

Regards,
=C2=A0Rifaat


On Mon, Nov 4, 2019 at 2:57 AM Chr= ister Holmberg <christ= er.holmberg@ericsson.com> wrote:

Hi,

=C2=A0

>I am not sure I am followin= g, What do you mean by "challenge response not being provided"?

=C2=A0

The response to the challenge p= rovided by the server.

=C2=A0

If you think it is unclear, may= be something like:

=C2=A0

=E2=80=9CA parameter with an em= pty value (empty string) is allowed when the UAC has not yet received a cha= llenge."

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

On Sun, Nov 3, 2019 at 1:53 PM = Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi,

= =C2=A0

I am fine= with the suggestion, but instead of talking about an algorithm not being p= rovided I would like to talk about a *challenge response* not being provide= d.

= =C2=A0

Regards,<= u>

= =C2=A0

Christer<= u>

= =C2=A0

= =C2=A0

From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Sent: Sunday, November 3, 2019 12:01 PM
To: Alexey Melnikov <aamelnikov@fastmail.fm>
Cc: Christer Holmberg <christer.holmberg@ericsson.com>; sipcore-chairs= @ietf.org <sipcore-chairs@ietf.org>; draft-ietf-sipcore-digest-scheme@ietf.org <draft-ietf-sipcor= e-digest-scheme@ietf.org>; The IESG <iesg@ietf.org>; SIPCORE <sipcore@= ietf.org>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Alexey, Christer,

=C2=A0

How about the following:

1. Change the ABNF to "request-digest =3D LDQUO= T *LHEX RDQUOT"

2. Change the text below it to say "The number = of hex digits is implied by the length of the value of the algorithm used, = with the minimum size of 32. A parameter with an empty value (empty string)= is allowed when the algorithm is not specified.""<= /p>

=C2=A0

Regards,

=C2=A0Rifaat

=C2=A0

On Fri, Nov 1, 2019 at 6:10 AM Alexey Melnikov <<= a href=3D"mailto:aamelnikov@fastmail.fm" target=3D"_blank">aamelnikov@fastm= ail.fm> wrote:

=C2=A0

On 1 Nov 2019, at 07:09= , Christer Holmberg <christer.holmberg@ericsson.com> wrote:

Hi,

=C2=A0

>I do not have a strong opinion here. =

>=C2=A0

>Anybody has an opinion or thoughts about adding= such a text?

=C2=A0

In addition we=E2=80=99d obviously also change the = ABNF back, to allow empty values.

=C2=A0

If the ABNF is changed back for this, I think some e= xtra text would be useful.

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg <christer.holmberg@ericsso= n.com> wrote:

Something like this:

=C2=A0

=E2=80=9CIn some cases a UAC needs to include an Au= thorization header field in a request before it has received a challenge, i= n order to provide user information (using the =E2=80=98userinfo=E2=80=99 h= eader field parameter) that is needed in order to create the challenge. An example of such case is when the HTTP Digest Authentication = Using AKA mechanism (RFC3310) (RFC4169) is used. In such case the Authoriza= tion header field would typically not contain a =E2=80=98response=E2=80=99 = header field parameter before a challenge response is provided. However, for the IP Multimedia Subsystem (IMS) it has been sp= ecified that the Authorization header field in such case does contain a =C2= =A0=E2=80=98response=E2=80=99 header field parameter, with an empty value (= empty string). For that reason the modified request-digest ABNF allows such empty values.=E2=80=9D

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

From: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Thursday, 31 October 2019 at 19.22
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.ietf.org<= /a>>, "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "draft-ietf-sipcore-digest-scheme@ietf.org" <dra= ft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org&g= t;, "sipcore@iet= f.org" <s= ipcore@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Can you propose some text?

=C2=A0

Thanks,

=C2=A0Rifaat

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg <christer.holmberg@ericss= on.com> wrote:

Hi,

=C2=A0

Perhaps we could add some text about the IMS use-ca= se, in order to explain the empty value?

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

From: sipcore <sipcore-bounces@ietf.org> on behalf= of Christer Holmberg <christer.holmberg=3D40ericsson.com@dmarc.ietf.org>=
Date: Thursday, 31 October 2019 at 15.52
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "dra= ft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.o= rg" <sipc= ore@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Hi,

=C2=A0

>This IMS behavior would have been in violation = of RFC3261 which specified exactly 32 Hex characters.<= /p>

>So, this change should not make much of=C2=A0a = difference in this case.

=C2=A0

In reality it probably doesn=E2=80=99t make a diffe= rence, but it would make the IMS procedures =E2=80=9Caligned=E2=80=9D with = the IETF spec.

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg <christer.holmberg@ericsso= n.com> wrote:

=C2=A0

Hi,

=C2=A0

The reason for the empty value comes from IMS and A= KA, where you need to include the user id already in the initial REGISTER r= equest (this seems to be missing from RFC 3310, but that=E2=80=99s a separa= te topic) in order for the server to create the challenge,=C2=A0 meaning that in the initial REGISTER request you incl= ude an Authorization header field with the username parameter carrying the = IMS private user identity, the realm parameter and the uri parameter. At th= is point you obviously don=E2=80=99t yet have the response, so in IMS it is specified that the response parameter is ins= erted with an empty value.

=C2=A0

WHY it was specified that way (instead of simply no= t including the response parameter) I don=E2=80=99t know, but I do know tha= t it has been implemented and deployed that way for many years.

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

=C2=A0

From: sipcore <sipcore-bounces@ietf.org> on behalf= of Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Thursday, 31 October 2019 at 15.20
To: Alexey Melnikov <aamelnikov@fastmail.fm>
Cc: "sipcore-chairs@ietf.org" <sipcore-chairs@ietf.org>, "dra= ft-ietf-sipcore-digest-scheme@ietf.org" <draft-ietf-sipcore-digest-scheme@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "sipcore@ietf.o= rg" <sipc= ore@ietf.org>
Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-i= etf-sipcore-digest-scheme-12: (with COMMENT)

=C2=A0

Done.

=C2=A0

On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov <aamelnikov@fastmail.fm> wrot= e:

On Thu, Oct 31, 2019, at 1:11 PM, Rifaat Shekh-Yusef wrote:

Hi Alexey,

=C2=A0

I am fine with Paul's suggestion.

Are you ok with=C2=A0"32*LHEX"?

Yes!

=C2=A0

Thank you,

Alexey

=C2=A0

Regards,

=C2=A0Rfaat

=C2=A0

=C2=A0

On Thu, Oct 31, 2019 at 7:22 AM Alexey Melnikov <aamelnikov@fastmail.fm> wrot= e:

=C2=A0

Hi Rifaat,

=C2=A0

On Wed, Oct 30, 2019, at 9:50 PM, Rifaat Shekh-Yusef wrote:

Thanks Alexey!

=C2=A0

I am fine with the first two comments, and will fix these in the coming = version of the document.

=C2=A0

I am not sure I follow the 3rd one. Why do you see the need for a minimu= m number of hex digits?

You do say that the number of hex digits match the hash lenght, so it is= probably Ok. However empty value is never valid (and I am worried it might= hit some boundary condition bug in implementations), so prohibiting it in = ABNF would be the best.

=C2=A0

Best Regards,

Alexey

=C2=A0

Regards,

=C2=A0Rifaat

=C2=A0

=C2=A0

=C2=A0

On Wed, Oct 30, 2019 at 1:16 PM Alexey Melnikov via Datatracker <noreply@ietf.org> = wrote:

Alexey Melnikov has entered the following ballot position for<= /u>

draft-ietf-sipcore-digest-scheme-12: No Objection

=C2=A0

When responding, please keep the subject line intact and reply to all=

email addresses included in the To and CC lines. (Feel free to cut this<= u>

introductory paragraph, however.)

=C2=A0

=C2=A0

for more information about IESG DISCUSS and COMMENT positions.=

=C2=A0

=C2=A0

The document, along with other ballot positions, can be found here:

=C2=A0

=C2=A0

=C2=A0

----------------------------------------------------------------------

COMMENT:

----------------------------------------------------------------------

=C2=A0

I am agreeing with Alissa's DISCUSS.

=C2=A0

Also, I have a few comments of my own:

=C2=A0

1) Last para of Section 2.1:

=C2=A0

2.1.=C2=A0 Hash Algorithms

=C2=A0

=C2=A0 =C2=A0A UAS prioritizes which algorithm to use based on the order= ing of the

=C2=A0 =C2=A0challenge header fields in the response it is preparing.=

=C2=A0

This looks either wrong or confusing to me. I think you are just saying = here

that the order is decided by the server at this point.

=C2=A0

=C2=A0 =C2=A0That

=C2=A0 =C2=A0process is specified in section 2.3 and parallels the proce= ss used in

=C2=A0 =C2=A0HTTP specified by [RFC7616].

=C2=A0

So based on the above, my suggested replacement for both sentences:

=C2=A0

=C2=A0 =C2=A0A UAS prioritizes which algorithm to use based on its polic= y,

=C2=A0 =C2=A0which is specified in section 2.3 and parallels the process= used in

=C2=A0 =C2=A0HTTP specified by [RFC7616].

=C2=A0

2) Last para of Section 2.4:

=C2=A0

=C2=A0 =C2=A0If the UAC cannot respond to any of the challenges in the r= esponse,

=C2=A0 =C2=A0then it SHOULD abandon attempts to send the request unless = a local

=C2=A0 =C2=A0policy dictates otherwise.

=C2=A0

Is trying other non Digest algorithms covered by "SHOULD abandon&qu= ot;?

If yes, maybe you should make this clearer.

=C2=A0

=C2=A0 =C2=A0For example, if the UAC does not have

=C2=A0 =C2=A0credentials or has stale credentials for any of the realms,= the UAC

=C2=A0 =C2=A0will abandon the request.

=C2=A0

3) In Section 2.7:

=C2=A0

=C2=A0 =C2=A0 =C2=A0 request-digest =3D LDQUOT *LHEX RDQUOT

=C2=A0

This now allows empty value. I suggest you specify a minimum number of h= ex

digits allowed in the ABNF. Or at least change "*LHEX" to &quo= t;2*LHEX".

=C2=A0

=C2=A0

=C2=A0

=C2=A0

--0000000000009e7f2c059684cf86-- From nobody Mon Nov 4 05:46:12 2019 Return-Path: X-Original-To: sipcore@ietf.org Delivered-To: sipcore@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B9911120099; Mon, 4 Nov 2019 05:46:05 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: sipcore@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: sipcore@ietf.org Message-ID: <157287516572.16512.9662924433212490031@ietfa.amsl.com> Date: Mon, 04 Nov 2019 05:46:05 -0800 Archived-At: Subject: [sipcore] I-D Action: draft-ietf-sipcore-digest-scheme-15.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 13:46:06 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Session Initiation Protocol Core WG of the IETF. Title : The Session Initiation Protocol (SIP) Digest Authentication Scheme Author : Rifaat Shekh-Yusef Filename : draft-ietf-sipcore-digest-scheme-15.txt Pages : 9 Date : 2019-11-04 Abstract: This document updates RFC 3261 by updating the Digest Access Authentication scheme used by the Session Initiation Protocol (SIP) to add support for more secure digest algorithms, e.g., SHA-256 and SHA-512-256, to replace the obsolete MD5 algorithm. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-sipcore-digest-scheme-15 https://datatracker.ietf.org/doc/html/draft-ietf-sipcore-digest-scheme-15 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sipcore-digest-scheme-15 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 4 05:48:35 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 824A51200FA for ; Mon, 4 Nov 2019 05:48:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EcJA3-MRqlqK for ; Mon, 4 Nov 2019 05:48:31 -0800 (PST) Received: from mail-wr1-x435.google.com (mail-wr1-x435.google.com [IPv6:2a00:1450:4864:20::435]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B4501200E7 for ; Mon, 4 Nov 2019 05:48:31 -0800 (PST) Received: by mail-wr1-x435.google.com with SMTP id a11so17136218wra.6 for ; Mon, 04 Nov 2019 05:48:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=8MO/hGpUf/Rvw+BomsWIfszkWRRNkIl58YyWKFcY8Vc=; b=TjlI4z/ro/CHgNMqOJ7gXyt3CZQLYIQayRRtAUv8rTilb22y/I4LyEw6kGJvInwZBY g/sZ6yxlwMOF9uyxhpOt+p8P3hplIIWbE9Ra22yGwIsIbGS0ZSIuASu4cwE/64bqRyWk Krd7fxou2uWM/Q+l7KaQpv7oBLqQFNtQUJ0tUdPPPQSF0QjHwdlqjXGYZbUURoDFi9tK SMwtT1A9JEq6friQeqh0AYxnrCHSG+bnnFJQmULFvI4ynPZMGaiXRdIPuMMcPeapzbjd bT/F4ZZCaY3at4tMEHMxqLXGaBb8G2q61RcXigbOOg5KwPv6CXm7nfqdvzmU0ZhMlVkj 4jiA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=8MO/hGpUf/Rvw+BomsWIfszkWRRNkIl58YyWKFcY8Vc=; b=ULt/jsrbCxzVDQituGiXapNqwQ7fEwwcGhD/ftJKYps8iqB0wnda5Mp5pWdBAUFPy7 QkO/F1FUBTXgHym1uQ3/cM5M4UqzvTCBS20cymB90FfweddoZV0ZQapkvpwA0FR9Yg/K YSGAC5lmIERdo4jybYsUcVjV6cOi6UpVtQ33D/YpyTrM2jvjwHP3hMiqGv+ZGp4eBH6e hWYS3m1/BFVpoU5rylh588KYQdekGH0pKEhRC7S6YDzW1LNP9qxEEVOd4uAHRZMwTpLr kg9elE6D2XZ3qlLJSC7PkXykV3Vt1k7z+o40v9FIAHotKKWt+AV332FbfIfwv1NyUlZq 2zXQ== X-Gm-Message-State: APjAAAUt9P/YnpRAjKoAbXBu168ZpY9jJCDeQvoEnYBuR0Gn+26J/eV7 pab5NHpAK7CeajMAWz5KdVOcKe9FpofZAm6a6rVuIyz/ X-Google-Smtp-Source: APXvYqw7WP3o1oHYmlfnUQYOCBETSGdFVRrXD9n0NiGI5Ly+zxTSva8Z85OOl2oV3i+py73owBMButmpxQ+W0Ib2gic= X-Received: by 2002:adf:f2d1:: with SMTP id d17mr22411727wrp.353.1572875309287; Mon, 04 Nov 2019 05:48:29 -0800 (PST) MIME-Version: 1.0 References: <157287516572.16512.9662924433212490031@ietfa.amsl.com> In-Reply-To: <157287516572.16512.9662924433212490031@ietfa.amsl.com> From: Rifaat Shekh-Yusef Date: Mon, 4 Nov 2019 08:48:18 -0500 Message-ID: To: SIPCORE Content-Type: multipart/alternative; boundary="000000000000160d2605968592f1" Archived-At: Subject: Re: [sipcore] I-D Action: draft-ietf-sipcore-digest-scheme-15.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 13:48:34 -0000 --000000000000160d2605968592f1 Content-Type: text/plain; charset="UTF-8" All, I think this version of the draft addresses all recent comments. Please, take a look and let me know if I missed anything. Regards, Rifaat On Mon, Nov 4, 2019 at 8:46 AM wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Session Initiation Protocol Core WG of > the IETF. > > Title : The Session Initiation Protocol (SIP) Digest > Authentication Scheme > Author : Rifaat Shekh-Yusef > Filename : draft-ietf-sipcore-digest-scheme-15.txt > Pages : 9 > Date : 2019-11-04 > > Abstract: > This document updates RFC 3261 by updating the Digest Access > Authentication scheme used by the Session Initiation Protocol (SIP) > to add support for more secure digest algorithms, e.g., SHA-256 and > SHA-512-256, to replace the obsolete MD5 algorithm. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-sipcore-digest-scheme-15 > https://datatracker.ietf.org/doc/html/draft-ietf-sipcore-digest-scheme-15 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-sipcore-digest-scheme-15 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > sipcore mailing list > sipcore@ietf.org > https://www.ietf.org/mailman/listinfo/sipcore > --000000000000160d2605968592f1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
All,

I think this version of the draft = addresses all recent comments.
Please, take a look and let me=C2= =A0know if I missed=C2=A0anything.

Regards,
<= div>=C2=A0Rifaat


<= div dir=3D"ltr" class=3D"gmail_attr">On Mon, Nov 4, 2019 at 8:46 AM <internet-drafts@ietf.org> w= rote:

A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
This draft is a work item of the Session Initiation Protocol Core WG of the= IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= The Session Initiation Protocol (SIP) Digest Authentication Scheme
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Author=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Rifa= at Shekh-Yusef
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-sipcore-digest-scheme-15.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 9
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2019-11-04

Abstract:
=C2=A0 =C2=A0This document updates RFC 3261 by updating the Digest Access =C2=A0 =C2=A0Authentication scheme used by the Session Initiation Protocol = (SIP)
=C2=A0 =C2=A0to add support for more secure digest algorithms, e.g., SHA-25= 6 and
=C2=A0 =C2=A0SHA-512-256, to replace the obsolete MD5 algorithm.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/d= raft-ietf-sipcore-digest-scheme/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-iet= f-sipcore-digest-scheme-15
https://datatracker.ietf.or= g/doc/html/draft-ietf-sipcore-digest-scheme-15

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?= url2=3Ddraft-ietf-sipcore-digest-scheme-15


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
sipcore mailing list
sipcore@ietf.org<= br> https://www.ietf.org/mailman/listinfo/sipcore
--000000000000160d2605968592f1-- From nobody Mon Nov 4 06:09:54 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 990AF1200E7 for ; Mon, 4 Nov 2019 06:09:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KobGFB_nPNv1 for ; Mon, 4 Nov 2019 06:09:48 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30069.outbound.protection.outlook.com [40.107.3.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E742D120099 for ; Mon, 4 Nov 2019 06:09:47 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JFNqyYDutbW6Lf8aCN4RuOxp9o5KCWDHMvTCS11EyJbm7CfAs/U/CGfwJSIEo8qqHF4LAO+g0Bf7muuBQW005qoLEXwba31eG7HRD67v816hGw9s0NxOHVZ82L2r2dj5mQ4cjOnIr+pA/eihN5h99lrhwSKfMQ/f4SC0ke6JgXxTUyvy0XX4zNTA1j25SJkDmDqUPRXqtpafFjyYvTgfxy2YTuNLgFKIwzKQoNSpB63Qal/27328ScMnAyYNCXFGmE/anDLj96C657EzE1lS+NpCbHC7AOWEV8DrUDElJWJJZ4mcmtZ4Td3HwIpFzFz5cBIhEXXi/DddggIn4SVH7g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QFBIHl4Vkw6GIlRw8ArvCrMIAoPbvL1X61ok4Nmkneo=; b=hblqkK3uN9Rj2aKE6rBscG7OA51vL2jKQdc8iEhs0jaCtY3KU8ovk63obuIzNkZ/5CH0EszRzM4gLNdTSEVlTOhwNcApjq5LcYoNEpes5AmgNhwurV4570XVL9dmtUalUbiq53jkHbxlrs3XWi6qi/Tx6LZbdCPvqAY0InXLRaT5L7nDGn7imNwWGv6zRlfhrBI6PtMN61OonNscm9iuivF3Etrak30PKlBj+5ZzBNvF9jcW/oZRLABviy/uuDh5c4DudKamUv65KJjrFlA0qmlnYtHsc75a6LCW1j/1yiRTVfjDDvmM8LECkXVD7Gz6+WDJziKhtnKoQohH3A6Oxg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QFBIHl4Vkw6GIlRw8ArvCrMIAoPbvL1X61ok4Nmkneo=; b=WELqfG2pWm453OBcJJvi+KR6UAmNFG5X0m4DZSI43S+A069IvTHzmjYPPXfxZJtrQhfHs3UUpwD0tZ/0jDF5KRpRMNFXuOpGI2t7zTl+vib0WW1RHeTSmxQNnVrkVl6fZGMAmBgsInj2nKweP1RyGej6QXZM6UHVWr3xPUR1/pU= Received: from VI1PR07MB3167.eurprd07.prod.outlook.com (10.175.243.17) by VI1PR07MB5613.eurprd07.prod.outlook.com (20.178.80.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.16; Mon, 4 Nov 2019 14:09:45 +0000 Received: from VI1PR07MB3167.eurprd07.prod.outlook.com ([fe80::41a:f6a0:9660:bc09]) by VI1PR07MB3167.eurprd07.prod.outlook.com ([fe80::41a:f6a0:9660:bc09%3]) with mapi id 15.20.2430.014; Mon, 4 Nov 2019 14:09:45 +0000 From: Christer Holmberg To: Rifaat Shekh-Yusef , SIPCORE Thread-Topic: [sipcore] I-D Action: draft-ietf-sipcore-digest-scheme-15.txt Thread-Index: AQHVkxZMPEu7sM0Gsk6HeZO7VtjUEKd7BtoAgAAnhYA= Date: Mon, 4 Nov 2019 14:09:45 +0000 Message-ID: References: <157287516572.16512.9662924433212490031@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [89.166.49.243] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d64a789f-75ce-460e-cd6a-08d76130a54b x-ms-traffictypediagnostic: VI1PR07MB5613: x-ms-exchange-purlcount: 6 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 0211965D06 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(396003)(39860400002)(376002)(136003)(346002)(189003)(18543002)(199004)(102836004)(229853002)(66446008)(64756008)(8676002)(66476007)(6246003)(6506007)(26005)(99286004)(71190400001)(236005)(71200400001)(86362001)(81166006)(81156014)(76176011)(14444005)(6436002)(6512007)(256004)(91956017)(6306002)(54896002)(8936002)(25786009)(76116006)(66946007)(6486002)(44832011)(66574012)(53546011)(66556008)(606006)(11346002)(446003)(6116002)(3846002)(2616005)(476003)(486006)(66066001)(33656002)(5660300002)(2906002)(7736002)(36756003)(58126008)(316002)(478600001)(14454004)(110136005)(186003)(966005); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB5613; H:VI1PR07MB3167.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: kG+oaCD8HOMR1XYKp0HGFVM2oBtNBQKoDarInxTMJHtxqNANoI1NwgiIv2vni09idvbTJJd2FpCvUfI8HOhrutG1NqtqRstjy325uH7iIVO4JfDVnAhTEH/eYi0l8T1bofd8vfko9voijTRxSTg6PUSqdW4LD8C8zh21ScvQKwQ/XJWF9NHFhzgx7H32ooutFEmf91GjmVc9gppZo3i7RNrtCVc5rim5EGIFYw43uWtDu9xvMAe/MBzNUle6J0ghwX20MvbfgdLLS/V3mcLp/bG1TC2gXO3K22+BMcFqxuM2hPdtquRh1ArVwxkQ35wuAxc6MzCxW8GgtoX03KO3A0tITtWcNba9HouV56xxK1SdDamfLQJFLuX/CgBj4ZLv+A2qnozKg8gXu6orQdNxCnaV4umrliYpVFFQtmIjd6yDawVuHAYFhVpuTWM0Jg09dgfJVaHu418WDmCQZruK8tLzLaWfZoNHsdRFHzoVn9M= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_FD117864202D40A08B073501BAEBFDE8ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: d64a789f-75ce-460e-cd6a-08d76130a54b X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2019 14:09:45.4278 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: yV9+852ajsp3VsDfaA9iXBP4yIIu35ZpUzaM+Sx7FGZ3sH0RAYlwsbryGIfOEx+comguS0jg8J6XBbNBfH6ihc3RdKcoiaXeFcGamhzmAZw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5613 Archived-At: Subject: Re: [sipcore] I-D Action: draft-ietf-sipcore-digest-scheme-15.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 14:09:52 -0000 --_000_FD117864202D40A08B073501BAEBFDE8ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCk9uZSBtaW5vciB0aGluZy4gVGhlIHRleHQgc2F5czoNCg0K4oCcYnkgdGhlIGxlbmd0 aCBvZiB0aGUgdmFsdWUgb2YgdGhlIGFsZ29yaXRobSB1c2VkLOKAnQ0KDQpJIGFtIG5vdCBzdXJl IHdoYXQg4oCcdmFsdWUgb2YgdGhlIGFsZ29yaXRobeKAnSBtZWFucy4gRG9u4oCZdCB5b3UgbWVh biDigJx2YWx1ZSBjcmVhdGVkIGJ5IHRoZSBhbGdvcml0aG3igJ0sIOKAnGFsZ29yaXRobSBvdXRw dXQgdmFsdWXigJ0sIG9yIHNvbWV0aGluZz8NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXINCg0KRnJv bTogc2lwY29yZSA8c2lwY29yZS1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgUmlmYWF0 IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb20+DQpEYXRlOiBNb25kYXksIDQgTm92 ZW1iZXIgMjAxOSBhdCAxNS40OA0KVG86ICJzaXBjb3JlQGlldGYub3JnIiA8c2lwY29yZUBpZXRm Lm9yZz4NClN1YmplY3Q6IFJlOiBbc2lwY29yZV0gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1zaXBj b3JlLWRpZ2VzdC1zY2hlbWUtMTUudHh0DQoNCkFsbCwNCg0KSSB0aGluayB0aGlzIHZlcnNpb24g b2YgdGhlIGRyYWZ0IGFkZHJlc3NlcyBhbGwgcmVjZW50IGNvbW1lbnRzLg0KUGxlYXNlLCB0YWtl IGEgbG9vayBhbmQgbGV0IG1lIGtub3cgaWYgSSBtaXNzZWQgYW55dGhpbmcuDQoNClJlZ2FyZHMs DQogUmlmYWF0DQoNCg0KT24gTW9uLCBOb3YgNCwgMjAxOSBhdCA4OjQ2IEFNIDxpbnRlcm5ldC1k cmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4+IHdyb3RlOg0K DQpBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRl cm5ldC1EcmFmdHMgZGlyZWN0b3JpZXMuDQpUaGlzIGRyYWZ0IGlzIGEgd29yayBpdGVtIG9mIHRo ZSBTZXNzaW9uIEluaXRpYXRpb24gUHJvdG9jb2wgQ29yZSBXRyBvZiB0aGUgSUVURi4NCg0KICAg ICAgICBUaXRsZSAgICAgICAgICAgOiBUaGUgU2Vzc2lvbiBJbml0aWF0aW9uIFByb3RvY29sIChT SVApIERpZ2VzdCBBdXRoZW50aWNhdGlvbiBTY2hlbWUNCiAgICAgICAgQXV0aG9yICAgICAgICAg IDogUmlmYWF0IFNoZWtoLVl1c2VmDQogICAgICAgIEZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWll dGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLTE1LnR4dA0KICAgICAgICBQYWdlcyAgICAgICAgICAg OiA5DQogICAgICAgIERhdGUgICAgICAgICAgICA6IDIwMTktMTEtMDQNCg0KQWJzdHJhY3Q6DQog ICBUaGlzIGRvY3VtZW50IHVwZGF0ZXMgUkZDIDMyNjEgYnkgdXBkYXRpbmcgdGhlIERpZ2VzdCBB Y2Nlc3MNCiAgIEF1dGhlbnRpY2F0aW9uIHNjaGVtZSB1c2VkIGJ5IHRoZSBTZXNzaW9uIEluaXRp YXRpb24gUHJvdG9jb2wgKFNJUCkNCiAgIHRvIGFkZCBzdXBwb3J0IGZvciBtb3JlIHNlY3VyZSBk aWdlc3QgYWxnb3JpdGhtcywgZS5nLiwgU0hBLTI1NiBhbmQNCiAgIFNIQS01MTItMjU2LCB0byBy ZXBsYWNlIHRoZSBvYnNvbGV0ZSBNRDUgYWxnb3JpdGhtLg0KDQoNClRoZSBJRVRGIGRhdGF0cmFj a2VyIHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5p ZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUvDQoNClRoZXJlIGFy ZSBhbHNvIGh0bWxpemVkIHZlcnNpb25zIGF2YWlsYWJsZSBhdDoNCmh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xNQ0KaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNj aGVtZS0xNQ0KDQpBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUg YXQ6DQpodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1zaXBjb3Jl LWRpZ2VzdC1zY2hlbWUtMTUNCg0KDQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291 cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQp1bnRpbCB0aGUgaHRt bGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnPGh0 dHA6Ly90b29scy5pZXRmLm9yZz4uDQoNCkludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFi bGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCmZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFm dHMvDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpz aXBjb3JlIG1haWxpbmcgbGlzdA0Kc2lwY29yZUBpZXRmLm9yZzxtYWlsdG86c2lwY29yZUBpZXRm Lm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2lwY29yZQ0K --_000_FD117864202D40A08B073501BAEBFDE8ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNv bm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6 bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowY207 DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGNtOw0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAu ODVwdCAyLjBjbSA3MC44NXB0IDIuMGNtO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkZJIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkhp LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+T25lIG1pbm9yIHRoaW5nLiBUaGUgdGV4dCBzYXlzOjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPuKAnGJ5IHRoZSBsZW5ndGggb2YgdGhlIHZhbHVl IG9mIHRoZSBhbGdvcml0aG0gdXNlZCzigJ08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVT Ij5JIGFtIG5vdCBzdXJlIHdoYXQg4oCcdmFsdWUgb2YgdGhlIGFsZ29yaXRobeKAnSBtZWFucy4g RG9u4oCZdCB5b3UgbWVhbiDigJx2YWx1ZSBjcmVhdGVkIGJ5IHRoZSBhbGdvcml0aG3igJ0sIOKA nGFsZ29yaXRobSBvdXRwdXQgdmFsdWXigJ0sIG9yIHNvbWV0aGluZz88bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLVVTIj5SZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PkNocmlzdGVyPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6Ymxh Y2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6 YmxhY2siPnNpcGNvcmUgJmx0O3NpcGNvcmUtYm91bmNlc0BpZXRmLm9yZyZndDsgb24gYmVoYWxm IG9mIFJpZmFhdCBTaGVraC1ZdXNlZiAmbHQ7cmlmYWF0LmlldGZAZ21haWwuY29tJmd0Ozxicj4N CjxiPkRhdGU6IDwvYj5Nb25kYXksIDQgTm92ZW1iZXIgMjAxOSBhdCAxNS40ODxicj4NCjxiPlRv OiA8L2I+JnF1b3Q7c2lwY29yZUBpZXRmLm9yZyZxdW90OyAmbHQ7c2lwY29yZUBpZXRmLm9yZyZn dDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtzaXBjb3JlXSBJLUQgQWN0aW9uOiBkcmFmdC1p ZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xNS50eHQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFsbCwgPG86cD48L286cD48L3A+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHRoaW5rIHRoaXMgdmVyc2lvbiBvZiB0 aGUgZHJhZnQgYWRkcmVzc2VzIGFsbCByZWNlbnQgY29tbWVudHMuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5QbGVhc2UsIHRha2UgYSBsb29rIGFu ZCBsZXQgbWUmbmJzcDtrbm93IGlmIEkgbWlzc2VkJm5ic3A7YW55dGhpbmcuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJlZ2FyZHMsPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDtSaWZh YXQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5PbiBNb24sIE5vdiA0LCAyMDE5IGF0IDg6NDYgQU0gJmx0OzxhIGhyZWY9Im1haWx0bzppbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmciPmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4mZ3Q7IHdy b3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5v bmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYu MHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGJyPg0KQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9u LWxpbmUgSW50ZXJuZXQtRHJhZnRzIGRpcmVjdG9yaWVzLjxicj4NClRoaXMgZHJhZnQgaXMgYSB3 b3JrIGl0ZW0gb2YgdGhlIFNlc3Npb24gSW5pdGlhdGlvbiBQcm90b2NvbCBDb3JlIFdHIG9mIHRo ZSBJRVRGLjxicj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBUaXRsZSZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7OiBUaGUgU2Vzc2lvbiBJbml0aWF0 aW9uIFByb3RvY29sIChTSVApIERpZ2VzdCBBdXRoZW50aWNhdGlvbiBTY2hlbWU8YnI+DQombmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgQXV0aG9yJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyA6IFJpZmFhdCBTaGVraC1ZdXNlZjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyBGaWxlbmFtZSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyA6IGRyYWZ0LWlldGYtc2lw Y29yZS1kaWdlc3Qtc2NoZW1lLTE1LnR4dDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyBQYWdlcyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7OiA5PGJyPg0K Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IERhdGUmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyA6IDIwMTktMTEtMDQ8YnI+DQo8YnI+DQpBYnN0cmFjdDo8YnI+DQom bmJzcDsgJm5ic3A7VGhpcyBkb2N1bWVudCB1cGRhdGVzIFJGQyAzMjYxIGJ5IHVwZGF0aW5nIHRo ZSBEaWdlc3QgQWNjZXNzPGJyPg0KJm5ic3A7ICZuYnNwO0F1dGhlbnRpY2F0aW9uIHNjaGVtZSB1 c2VkIGJ5IHRoZSBTZXNzaW9uIEluaXRpYXRpb24gUHJvdG9jb2wgKFNJUCk8YnI+DQombmJzcDsg Jm5ic3A7dG8gYWRkIHN1cHBvcnQgZm9yIG1vcmUgc2VjdXJlIGRpZ2VzdCBhbGdvcml0aG1zLCBl LmcuLCBTSEEtMjU2IGFuZDxicj4NCiZuYnNwOyAmbmJzcDtTSEEtNTEyLTI1NiwgdG8gcmVwbGFj ZSB0aGUgb2Jzb2xldGUgTUQ1IGFsZ29yaXRobS48YnI+DQo8YnI+DQo8YnI+DQpUaGUgSUVURiBk YXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczo8YnI+DQo8YSBocmVmPSJo dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0 LXNjaGVtZS8iIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS88L2E+PGJyPg0KPGJyPg0KVGhlcmUg YXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Ojxicj4NCjxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVt ZS0xNSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1p ZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xNTwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2No ZW1lLTE1IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv aHRtbC9kcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZS0xNTwvYT48YnI+DQo8YnI+DQpB IGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6PGJyPg0KPGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtc2lwY29y ZS1kaWdlc3Qtc2NoZW1lLTE1IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcv cmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLTE1PC9hPjxicj4N Cjxicj4NCjxicj4NClBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWlu dXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb248YnI+DQp1bnRpbCB0aGUgaHRtbGl6ZWQg dmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IDxhIGhyZWY9Imh0dHA6Ly90b29scy5p ZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPg0KdG9vbHMuaWV0Zi5vcmc8L2E+Ljxicj4NCjxicj4N CkludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDo8 YnI+DQo8YSBocmVmPSJmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLyIgdGFyZ2V0 PSJfYmxhbmsiPmZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvPC9hPjxicj4NCjxi cj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0K c2lwY29yZSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c2lwY29yZUBpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPnNpcGNvcmVAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zaXBjb3JlIiB0YXJnZXQ9Il9ibGFu ayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zaXBjb3JlPC9hPjxvOnA+ PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRt bD4NCg== --_000_FD117864202D40A08B073501BAEBFDE8ericssoncom_-- From nobody Mon Nov 4 06:15:24 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E8B21200E7 for ; Mon, 4 Nov 2019 06:15:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f1aXvXjJPZAK for ; Mon, 4 Nov 2019 06:15:20 -0800 (PST) Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5882F120099 for ; Mon, 4 Nov 2019 06:15:20 -0800 (PST) Received: by mail-wr1-x42d.google.com with SMTP id p4so17246061wrm.8 for ; Mon, 04 Nov 2019 06:15:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=JwWXa6+LHchtttVooynG9vRDcxFsG6sGdzuroCW5vxk=; b=CiyDcOHxGUeJ7hqYipXVV69L7znOsO+bQ9LkRa70v5GmkY2NB9Ci8XKatFHYq+pXxD T0mRXs2ASJNUyLmpGG8TGQIXOh7twCNT0TgOO7jt8jE3i5AIH+A5Ez0ibuHgNkS2AFUT 5cSFjjhAFeAxkkzD88vdFIHaaOr8fPY6DycwjKmi4bMETbMWikUQPPDh8Q4iO4C+/rEd TENLyp7Jo5yYHgoLP6/VyaAqUSovyOfs1S5WXc8MaVBg1lnMHQHRInhJhkO5efvgG/XP orMCKfrDBiGxr1PVXCskBjzZazGWmPrHtl6bn1F5HdsMQomQWUFb16fDIsQzWSIMj5JG /VAQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=JwWXa6+LHchtttVooynG9vRDcxFsG6sGdzuroCW5vxk=; b=OeoPctShll5syDHceDrTN9DAfaJcybfRe7P46o74i3wDM5IT1WlIPi5AHwzzZhTmCe 0REeG34S6dl0WCTJzinDVEoakJuZVSm/ENh9Yh7cowtv5dMJ2p/UqjgQylb0FvcYoDZd fyUDJTeZmpkjlNBG5mGuBtYm+6zFMOSwNZuUcMkZEW97tzvkxwEIzl1eJj9rWx33P6dA B4GJ/vFp6kGtRFsIncqqhsjQ5W4uL9kwPRqjMoI2BpVUmYQ4OfPCSSqpyAWhCdtWoPHS VlDfDS/OMPEjVWbXYZhqv7UEgPac17GKvqfyamVYrdekra1rojkjdXIWILNm7vnOsNgz 6hlQ== X-Gm-Message-State: APjAAAVGwVxGdc9lYegF9mBgpk+VxkvYmJuzkE7EWtpF3qAfMeT4wRgc EL8sb5qdMntulC1Nyq756jFcAMGQkqQUpzjkZH8= X-Google-Smtp-Source: APXvYqylFOgKesusCL/QrGYbwqVR+TButBIHh3CaY0zAMv3Uj7FkInm+6qdY22siUNt33h/ucpRrgeevxrqvFbrfpWc= X-Received: by 2002:adf:f2d1:: with SMTP id d17mr22527625wrp.353.1572876918777; Mon, 04 Nov 2019 06:15:18 -0800 (PST) MIME-Version: 1.0 References: <157287516572.16512.9662924433212490031@ietfa.amsl.com> In-Reply-To: From: Rifaat Shekh-Yusef Date: Mon, 4 Nov 2019 09:15:07 -0500 Message-ID: To: Christer Holmberg Cc: SIPCORE Content-Type: multipart/alternative; boundary="00000000000004eafc059685f23c" Archived-At: Subject: Re: [sipcore] I-D Action: draft-ietf-sipcore-digest-scheme-15.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 14:15:23 -0000 --00000000000004eafc059685f23c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I will fix that. Regards, Rifaat On Mon, Nov 4, 2019 at 9:09 AM Christer Holmberg < christer.holmberg@ericsson.com> wrote: > Hi, > > > > One minor thing. The text says: > > > > =E2=80=9Cby the length of the value of the algorithm used,=E2=80=9D > > > > I am not sure what =E2=80=9Cvalue of the algorithm=E2=80=9D means. Don=E2= =80=99t you mean =E2=80=9Cvalue > created by the algorithm=E2=80=9D, =E2=80=9Calgorithm output value=E2=80= =9D, or something? > > > > Regards, > > > > Christer > > > > *From: *sipcore on behalf of Rifaat > Shekh-Yusef > *Date: *Monday, 4 November 2019 at 15.48 > *To: *"sipcore@ietf.org" > *Subject: *Re: [sipcore] I-D Action: > draft-ietf-sipcore-digest-scheme-15.txt > > > > All, > > > > I think this version of the draft addresses all recent comments. > > Please, take a look and let me know if I missed anything. > > > > Regards, > > Rifaat > > > > > > On Mon, Nov 4, 2019 at 8:46 AM wrote: > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Session Initiation Protocol Core WG of > the IETF. > > Title : The Session Initiation Protocol (SIP) Digest > Authentication Scheme > Author : Rifaat Shekh-Yusef > Filename : draft-ietf-sipcore-digest-scheme-15.txt > Pages : 9 > Date : 2019-11-04 > > Abstract: > This document updates RFC 3261 by updating the Digest Access > Authentication scheme used by the Session Initiation Protocol (SIP) > to add support for more secure digest algorithms, e.g., SHA-256 and > SHA-512-256, to replace the obsolete MD5 algorithm. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-sipcore-digest-scheme-15 > https://datatracker.ietf.org/doc/html/draft-ietf-sipcore-digest-scheme-15 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-sipcore-digest-scheme-15 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > sipcore mailing list > sipcore@ietf.org > https://www.ietf.org/mailman/listinfo/sipcore > > --00000000000004eafc059685f23c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I will fix that.

Regards,
=C2= =A0Rifaat


On Mon, Nov 4, 2019 at 9:09 AM Christer Holmb= erg <christer.holmberg= @ericsson.com> wrote:

Hi,

=C2=A0

One minor thing. The text says:=

=C2=A0

=E2=80=9Cby the length of the v= alue of the algorithm used,=E2=80=9D

=C2=A0

I am not sure what =E2=80=9Cval= ue of the algorithm=E2=80=9D means. Don=E2=80=99t you mean =E2=80=9Cvalue c= reated by the algorithm=E2=80=9D, =E2=80=9Calgorithm output value=E2=80=9D,= or something?

=C2=A0

Regards,

=C2=A0

Christer

=C2=A0

From: = sipcore <sipcore-bounces@ietf= .org> on behalf of Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Date: Monday, 4 November 2019 at 15.48
To: "sipc= ore@ietf.org" <sipcore@ietf.org>
Subject: Re: [sipcore] I-D Action: draft-ietf-sipcore-digest-scheme-= 15.txt

=C2=A0

All,

=C2=A0

I think this version of the draft addresses all rece= nt comments.

Please, take a look and let me=C2=A0know if I missed= =C2=A0anything.

=C2=A0

Regards,

=C2=A0Rifaat

=C2=A0

=C2=A0

On Mon, Nov 4, 2019 at 8:46 AM <internet-drafts@ietf.org&g= t; wrote:


A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
This draft is a work item of the Session Initiation Protocol Core WG of the= IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= The Session Initiation Protocol (SIP) Digest Authentication Scheme
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Author=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Rifa= at Shekh-Yusef
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-sipcore-digest-scheme-15.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 9
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2019-11-04

Abstract:
=C2=A0 =C2=A0This document updates RFC 3261 by updating the Digest Access =C2=A0 =C2=A0Authentication scheme used by the Session Initiation Protocol = (SIP)
=C2=A0 =C2=A0to add support for more secure digest algorithms, e.g., SHA-25= 6 and
=C2=A0 =C2=A0SHA-512-256, to replace the obsolete MD5 algorithm.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-sipcore-d= igest-scheme/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-sipcore-digest-sc= heme-15
https://datatracker.ietf.org/doc/html/draft-ie= tf-sipcore-digest-scheme-15

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-s= ipcore-digest-scheme-15


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp= .ietf.org/internet-drafts/

_______________________________________________
sipcore mailing list
sipcore@ietf.org<= br> https://www.ietf.org/mailman/listinfo/sipcore

--00000000000004eafc059685f23c-- From nobody Mon Nov 4 06:29:28 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D07B120147 for ; Mon, 4 Nov 2019 06:29:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=alum.mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TrvCJj6Xjebd for ; Mon, 4 Nov 2019 06:29:22 -0800 (PST) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-eopbgr740071.outbound.protection.outlook.com [40.107.74.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D20F41200F4 for ; Mon, 4 Nov 2019 06:29:21 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VEMquWNRahQHPF/H+CpHHQVs/46wxHHHJrCbLjot3gNSHAFDAtagNJGfo0Ch4Bp/5btAzpFxNGH3Sqnj5gSKZXEdGbrrvw2u9EP9MDGeC5futuh4j8HxEk2naroisJFA7uSA6IkDykV5EG1U+B+BA8ntVTBDCOcp1eRLw59lYJn20Uro/sApEerx6L50XiAcBqw5ypl1Kt4IvY7E45Q1VbrHjKL5xmpfORlH/uLkt4NKKmzs+uMt0g2rzFwXIBW8vnnnkWG3Zt4KI/gPyMut70YonrlKUGhT0i+8zactezHzv9elbG4Xru3kvLW+mKPB++JA/utASWHN2HU3XQMP1g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EPIcxnIHHgzufK+yldYruvnLMqlLj58U1jY2CDCb6rs=; b=lgqqOYviP36QxfjqYndB7wvHVTn0oogmX62u2kXB8fz9OEUX07rP+FxUzKELmicohGYmEpH6XxQb7DScRwNFI2T7TPIQLgm1rpFqzqrwOaBOQb0cQWrEjZGgV8y0BHzGTYWm+NJNJWZk7Wzk+7eg71CXLJuzmxgYONZSCPQdFd2yBUYHQufh8gB39/mOuiDbx6O3lSf0xzQcUMnTo88SCqMQ4jxblUvrT5XGauTVgRXq/YgvB3H5wuQQaz4tTkJZNphVr81j5JIFMrow5PuWmQaO8Nivtl3sgT5pfBr3jzKric+zUyM2rjj9ro9TkbFmICcapbyEcROiSd6iIzSe5Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 18.7.68.33) smtp.rcpttodomain=ietf.org smtp.mailfrom=alum.mit.edu; dmarc=bestguesspass action=none header.from=alum.mit.edu; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alum.mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EPIcxnIHHgzufK+yldYruvnLMqlLj58U1jY2CDCb6rs=; b=c6C2jZJDSyY4LT3TKPT++PJkZ3qPofu6lnfj9DLSfDvpLK2tLyQcq0BtMEqihgxGWHBpRTb1hScY8/lgQlryMJh/ptXYBJ/1Ifo5Dnc25CMNr+WvLXF+gSgFQ6gafGKzTH8ryO3vi7exXlIuMAbyggcBEqWpuTEPnbv7OmAFa8M= Received: from CY4PR12CA0028.namprd12.prod.outlook.com (2603:10b6:903:129::14) by CY4PR12MB1688.namprd12.prod.outlook.com (2603:10b6:910:8::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Mon, 4 Nov 2019 14:29:14 +0000 Received: from SN1NAM02FT019.eop-nam02.prod.protection.outlook.com (2a01:111:f400:7e44::204) by CY4PR12CA0028.outlook.office365.com (2603:10b6:903:129::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2408.24 via Frontend Transport; Mon, 4 Nov 2019 14:29:13 +0000 Authentication-Results: spf=pass (sender IP is 18.7.68.33) smtp.mailfrom=alum.mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=alum.mit.edu; Received-SPF: Pass (protection.outlook.com: domain of alum.mit.edu designates 18.7.68.33 as permitted sender) receiver=protection.outlook.com; client-ip=18.7.68.33; helo=outgoing-alum.mit.edu; Received: from outgoing-alum.mit.edu (18.7.68.33) by SN1NAM02FT019.mail.protection.outlook.com (10.152.72.130) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20 via Frontend Transport; Mon, 4 Nov 2019 14:29:13 +0000 Received: from Kokiri.localdomain (c-24-62-227-142.hsd1.ma.comcast.net [24.62.227.142]) (authenticated bits=0) (User authenticated as pkyzivat@ALUM.MIT.EDU) by outgoing-alum.mit.edu (8.14.7/8.12.4) with ESMTP id xA4ET9Mi008449 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT) for ; Mon, 4 Nov 2019 09:29:10 -0500 To: sipcore@ietf.org References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> <84CA4DD0-3877-46A0-8772-43F35BB788A3@ericsson.com> From: Paul Kyzivat Message-ID: Date: Mon, 4 Nov 2019 09:29:09 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <84CA4DD0-3877-46A0-8772-43F35BB788A3@ericsson.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.7.68.33; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10009020)(376002)(346002)(136003)(396003)(39860400002)(189003)(199004)(18543002)(106002)(47776003)(229853002)(76130400001)(186003)(65806001)(2486003)(486006)(476003)(86362001)(966005)(478600001)(75432002)(6306002)(6246003)(8936002)(65956001)(30864003)(356004)(5660300002)(246002)(8676002)(2870700001)(88552002)(7596002)(50466002)(53546011)(26005)(126002)(316002)(2616005)(305945005)(14444005)(70586007)(26826003)(70206006)(2906002)(2351001)(31696002)(58126008)(31686004)(36906005)(786003)(446003)(11346002)(336012)(6916009)(956004)(76176011)(2361001)(23676004); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR12MB1688; H:outgoing-alum.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-alum.mit.edu; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 6203934e-044e-4fe7-3f43-08d761335d8e X-MS-TrafficTypeDiagnostic: CY4PR12MB1688: X-MS-Exchange-PUrlCount: 3 X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:10000; X-Forefront-PRVS: 0211965D06 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: mAl7TRFrW9pkY2iVCGc5CqEC3EJQVyteG/enWtixGmsb7gRmA9qhv0aIudfas2+fO9iK0vd1PjyAEoavZt8ITjSNuds1ZJtthLlboDC54Ll6uZdakDFU1kEakRDc+GlT9x5Y5WMX3lh9Sgj3t26WkEQHRQfgydk2+3MQkV5tyVvFRhYNIKualYCVTfRrCKbsdu/jHPAubNVl4qdKOVzz7KzZ0afTJyAZcfdZsGWFZ0y/h931n3q4FxE/FFD4EY19GhQbsy2ALcGYvifBnLNEqLvZCSTMT29WCIaJnx/xc+09BUljXv7O0vbmp0AbZYqBpOCrd3pFRxJnydjE/uhUAFYFj9baaO9r0DfUy/6Ke2leU6jjLywJ20M/cduVUMA//aINfZGVINqYbdlw4qS5iacNSWMelZSgi1iINR78QYlgxDlAs/MKN2Q2x4QbfoLRoz8QIGlw17XbUL2U+QJJBmtfK2yd9UI2Z2t4Nr4YPlo= X-OriginatorOrg: alum.mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Nov 2019 14:29:13.3371 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 6203934e-044e-4fe7-3f43-08d761335d8e X-MS-Exchange-CrossTenant-Id: 3326b102-c043-408b-a990-b89e477d582f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3326b102-c043-408b-a990-b89e477d582f; Ip=[18.7.68.33]; Helo=[outgoing-alum.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR12MB1688 Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 14:29:25 -0000 On 11/4/19 2:57 AM, Christer Holmberg wrote: > Hi, > >>I am not sure I am following, What do you mean by "challenge response not being provided"? > > The response to the challenge provided by the server. > > If you think it is unclear, maybe something like: > > “A parameter with an empty value (empty string) is allowed when the UAC > has not yet received a challenge." I'm confused. When is this behavior appropriate and what does it mean? Thanks, Paul > Regards, > > Christer > > On Sun, Nov 3, 2019 at 1:53 PM Christer Holmberg > > > wrote: > > Hi, > > I am fine with the suggestion, but instead of talking about an > algorithm not being provided I would like to talk about a *challenge > response* not being provided. > > Regards, > > Christer > > ------------------------------------------------------------------------ > > *From:*Rifaat Shekh-Yusef > > *Sent:* Sunday, November 3, 2019 12:01 PM > *To:* Alexey Melnikov > > *Cc:* Christer Holmberg >; sipcore-chairs@ietf.org > >; > draft-ietf-sipcore-digest-scheme@ietf.org > > >; The IESG > >; SIPCORE > > *Subject:* Re: [sipcore] Alexey Melnikov's No Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > Alexey, Christer, > > How about the following: > > 1. Change the ABNF to "request-digest = LDQUOT *LHEX RDQUOT" > > 2. Change the text below it to say "The number of hex digits is > implied by the length of the value of the algorithm used, with the > minimum size of 32. A parameter with an empty value (empty string) > is allowed when the algorithm is not specified."" > > Regards, > >  Rifaat > > On Fri, Nov 1, 2019 at 6:10 AM Alexey Melnikov > > wrote: > > On 1 Nov 2019, at 07:09, Christer Holmberg > > wrote: > > Hi, > > >I do not have a strong opinion here. > > > > > >Anybody has an opinion or thoughts about adding such a text? > > In addition we’d obviously also change the ABNF back, to > allow empty values. > > If the ABNF is changed back for this, I think some extra text > would be useful. > > Regards, > > Christer > > On Thu, Oct 31, 2019 at 1:50 PM Christer Holmberg > > wrote: > > Something like this: > > “In some cases a UAC needs to include an Authorization > header field in a request before it has received a > challenge, in order to provide user information (using > the ‘userinfo’ header field parameter) that is needed in > order to create the challenge. An example of such case > is when the HTTP Digest Authentication Using AKA > mechanism (RFC3310) (RFC4169) is used. In such case the > Authorization header field would typically not contain a > ‘response’ header field parameter before a challenge > response is provided. However, for the IP Multimedia > Subsystem (IMS) it has been specified that the > Authorization header field in such case does contain a >  ‘response’ header field parameter, with an empty value > (empty string). For that reason the modified > request-digest ABNF allows such empty values.” > > Regards, > > Christer > > *From: *Rifaat Shekh-Yusef > > *Date: *Thursday, 31 October 2019 at 19.22 > *To: *Christer Holmberg > > *Cc: *Christer Holmberg > >, > "sipcore-chairs@ietf.org > " > >, > "draft-ietf-sipcore-digest-scheme@ietf.org > " > >, > "iesg@ietf.org " >, "sipcore@ietf.org > " >, Alexey Melnikov > > > *Subject: *Re: [sipcore] Alexey Melnikov's No Objection > on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > Can you propose some text? > > Thanks, > >  Rifaat > > On Thu, Oct 31, 2019 at 11:44 AM Christer Holmberg > > wrote: > > Hi, > > Perhaps we could add some text about the IMS > use-case, in order to explain the empty value? > > Regards, > > Christer > > *From: *sipcore > on behalf of > Christer Holmberg > > > *Date: *Thursday, 31 October 2019 at 15.52 > *To: *Rifaat Shekh-Yusef > > *Cc: *"sipcore-chairs@ietf.org > " > >, > "draft-ietf-sipcore-digest-scheme@ietf.org > " > >, > "iesg@ietf.org " > >, > "sipcore@ietf.org " > >, Alexey > Melnikov > > *Subject: *Re: [sipcore] Alexey Melnikov's No > Objection on draft-ietf-sipcore-digest-scheme-12: > (with COMMENT) > > Hi, > > >This IMS behavior would have been in violation of RFC3261 which specified exactly 32 Hex characters. > > >So, this change should not make much of a difference in this case. > > In reality it probably doesn’t make a difference, > but it would make the IMS procedures “aligned” with > the IETF spec. > > Regards, > > Christer > > On Thu, Oct 31, 2019 at 9:37 AM Christer Holmberg > > wrote: > > Hi, > > The reason for the empty value comes from IMS > and AKA, where you need to include the user id > already in the initial REGISTER request (this > seems to be missing from RFC 3310, but that’s a > separate topic) in order for the server to > create the challenge,  meaning that in the > initial REGISTER request you include an > Authorization header field with the username > parameter carrying the IMS private user > identity, the realm parameter and the uri > parameter. At this point you obviously don’t yet > have the response, so in IMS it is specified > that the response parameter is inserted with an > empty value. > > WHY it was specified that way (instead of simply > not including the response parameter) I don’t > know, but I do know that it has been implemented > and deployed that way for many years. > > Regards, > > Christer > > *From: *sipcore > on behalf of > Rifaat Shekh-Yusef > > *Date: *Thursday, 31 October 2019 at 15.20 > *To: *Alexey Melnikov > > *Cc: *"sipcore-chairs@ietf.org > " > >, > "draft-ietf-sipcore-digest-scheme@ietf.org > " > >, > "iesg@ietf.org " > >, > "sipcore@ietf.org " > > > *Subject: *Re: [sipcore] Alexey Melnikov's No > Objection on > draft-ietf-sipcore-digest-scheme-12: (with COMMENT) > > Done. > > On Thu, Oct 31, 2019 at 9:13 AM Alexey Melnikov > > wrote: > > On Thu, Oct 31, 2019, at 1:11 PM, Rifaat > Shekh-Yusef wrote: > > Hi Alexey, > > I am fine with Paul's suggestion. > > Are you ok with "32*LHEX"? > > Yes! > > Thank you, > > Alexey > > Regards, > >  Rfaat > > On Thu, Oct 31, 2019 at 7:22 AM Alexey > Melnikov > wrote: > > Hi Rifaat, > > On Wed, Oct 30, 2019, at 9:50 PM, > Rifaat Shekh-Yusef wrote: > > Thanks Alexey! > > I am fine with the first two > comments, and will fix these in > the coming version of the document. > > I am not sure I follow the 3rd > one. Why do you see the need for > a minimum number of hex digits? > > You do say that the number of hex > digits match the hash lenght, so it > is probably Ok. However empty value > is never valid (and I am worried it > might hit some boundary condition > bug in implementations), so > prohibiting it in ABNF would be the > best. > > Best Regards, > > Alexey > > Regards, > >  Rifaat > > On Wed, Oct 30, 2019 at 1:16 PM > Alexey Melnikov via Datatracker > > wrote: > > Alexey Melnikov has entered > the following ballot > position for > > draft-ietf-sipcore-digest-scheme-12: > No Objection > > When responding, please keep > the subject line intact and > reply to all > > email addresses included in > the To and CC lines. (Feel > free to cut this > > introductory paragraph, > however.) > > Please refer to > https://www.ietf.org/iesg/statement/discuss-criteria.html > > for more information about > IESG DISCUSS and COMMENT > positions. > > The document, along with > other ballot positions, can > be found here: > > https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > I am agreeing with Alissa's > DISCUSS. > > Also, I have a few comments > of my own: > > 1) Last para of Section 2.1: > > 2.1.  Hash Algorithms > >    A UAS prioritizes which > algorithm to use based on > the ordering of the > >    challenge header fields > in the response it is preparing. > > This looks either wrong or > confusing to me. I think you > are just saying here > > that the order is decided by > the server at this point. > >    That > >    process is specified in > section 2.3 and parallels > the process used in > >    HTTP specified by [RFC7616]. > > So based on the above, my > suggested replacement for > both sentences: > >    A UAS prioritizes which > algorithm to use based on > its policy, > >    which is specified in > section 2.3 and parallels > the process used in > >    HTTP specified by [RFC7616]. > > 2) Last para of Section 2.4: > >    If the UAC cannot > respond to any of the > challenges in the response, > >    then it SHOULD abandon > attempts to send the request > unless a local > >    policy dictates otherwise. > > Is trying other non Digest > algorithms covered by > "SHOULD abandon"? > > If yes, maybe you should > make this clearer. > >    For example, if the UAC > does not have > >    credentials or has stale > credentials for any of the > realms, the UAC > >    will abandon the request. > > 3) In Section 2.7: > >       request-digest = > LDQUOT *LHEX RDQUOT > > This now allows empty value. > I suggest you specify a > minimum number of hex > > digits allowed in the ABNF. > Or at least change "*LHEX" > to "2*LHEX". > > > _______________________________________________ > sipcore mailing list > sipcore@ietf.org > https://www.ietf.org/mailman/listinfo/sipcore > From nobody Mon Nov 4 06:43:44 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E75FE120099 for ; Mon, 4 Nov 2019 06:43:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tzp8SEB9skAq for ; Mon, 4 Nov 2019 06:43:39 -0800 (PST) Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-eopbgr00053.outbound.protection.outlook.com [40.107.0.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31B44120119 for ; Mon, 4 Nov 2019 06:43:39 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LtGJqot5GmB51p7XAY+OesEPY4nUQqqmPOUkr9E8mQ8Z84oLUh85gVe5mBbgHSkzaz+E0iq8x+/6uzYzK8xofWAeiAhGPMASJP1RPd8G0XfH8nU+X6uzWpM0j6EY4ncONS/FV0N21qABSMT+R4cg5uDZTEPDJwsiQOvdnp27QuY6uVHdbCyd5egeLj9AP0LtzQ8PG6iha5p7XcbQPiU2Pcb7sZ92798YVwSTD9iCNZIhmBD+LPQ9qEddgflzmCmiygy2suRailJOyb/UwZy31eTMbXbMelU4DFCRTAnBDqag5DAov+1YJ2f69lDatj7bYSLEQWP2CzchcSRfWfndbA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Rz0ljNXdD/ZMFuFSv49L/3irX++IpgMdYUgXlG33amQ=; b=m/bYsBiPZ8hOlnnSFdWOcsZ2kqMm5BPg2mlGZO6qqAGbjdDlY/tMyLSW7QpgXtxnp1d66aZSbho81509tfVUSEQCMM7lofDf8QvjE65YgU8NwfPj+kVeuvjhpKNNYzsVad+l9W8/365bIlQS9w/wzhbKNFha4EhDN1l8vmY7s7n6PqRTJW2Z2H3iamGZIh8asNDIZU1cgj2JgsYean99xTroSypYWonmrqu7qAr0ohxUGoK7pjtqa7TzSq0N3+ii1SSDADf7/eb5ZRhKFyg7HGTEvkq6zFFVTEm1lItV+AH/lkaE40bT8VLyOAnyHUZeIrcEPXQ2LmTsH7OJcBd86g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Rz0ljNXdD/ZMFuFSv49L/3irX++IpgMdYUgXlG33amQ=; b=NZe4l1A1051DLXjeJD1wC4quz8l28+j8EBmx52ldVTg4EhLFDB1H0vhe9T8H1qMyIcn119XIrgFfiG62JKp0xHvJiIaRanUiqHGUG49/F7mnPrJIQx6+bjnKQGutBy5w8vg3Gujrpo944WtyIOyJanSs6OJ/Z5Y6j3UhKZKTsGA= Received: from VI1PR07MB3167.eurprd07.prod.outlook.com (10.175.243.17) by VI1PR07MB3184.eurprd07.prod.outlook.com (10.175.243.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.16; Mon, 4 Nov 2019 14:43:36 +0000 Received: from VI1PR07MB3167.eurprd07.prod.outlook.com ([fe80::41a:f6a0:9660:bc09]) by VI1PR07MB3167.eurprd07.prod.outlook.com ([fe80::41a:f6a0:9660:bc09%3]) with mapi id 15.20.2430.014; Mon, 4 Nov 2019 14:43:36 +0000 From: Christer Holmberg To: Paul Kyzivat , "sipcore@ietf.org" Thread-Topic: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) Thread-Index: AQHVj+3+/XQWOAP0gUmCkUmQAngGd6d04liA///hPYCAACLmgIAAH3GA///5uYCAAClCgIAAHA2AgADDMwCAABEIgIADIi+AgACUUBuAABsAgIAA4h8AgABLx4CAACWRAA== Date: Mon, 4 Nov 2019 14:43:36 +0000 Message-ID: References: <157245577700.32490.10990766778571550817.idtracker@ietfa.amsl.com> <6ec209ae-72e9-4dd1-8d68-3ee1704f3d92@www.fastmail.com> <7B4921E1-66A3-4D6D-A943-8EC0F44195CC@ericsson.com> <4C17F34D-7046-4706-AE5C-FB7ADC4B1427@ericsson.com> <4EEBC37C-3C1B-42A9-883B-571FAE867C31@ericsson.com> <2B1C666E-1718-49B2-AECA-B2759BEE6872@ericsson.com> <7D911FFD-814F-4DCF-A13E-C3E19A5D0EE5@ericsson.com> <064B1BB7-6D54-453B-B58B-527EC3B9D78D@fastmail.fm> <84CA4DD0-3877-46A0-8772-43F35BB788A3@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [89.166.49.243] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 839b3e8b-b8a4-4e76-ba77-08d761356000 x-ms-traffictypediagnostic: VI1PR07MB3184: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0211965D06 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(396003)(366004)(346002)(376002)(136003)(18543002)(189003)(199004)(6116002)(3846002)(91956017)(76116006)(66476007)(66556008)(66446008)(66946007)(256004)(2906002)(64756008)(99286004)(26005)(6506007)(53546011)(102836004)(305945005)(2616005)(2501003)(14444005)(316002)(76176011)(446003)(11346002)(110136005)(36756003)(71200400001)(71190400001)(58126008)(33656002)(86362001)(478600001)(14454004)(6306002)(6512007)(966005)(186003)(44832011)(229853002)(6486002)(7736002)(486006)(476003)(5660300002)(25786009)(2171002)(8676002)(8936002)(81156014)(81166006)(6436002)(66066001)(6246003)(579004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB3184; H:VI1PR07MB3167.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: F2fwtNyZ1Uzi1ilHqS20pyCATNKD9MQmWn16nQQluaF7SUHofuYx5XrrC+7AHltT4RdeTjengUOG8gCdCGk5fEkvJAnYkLDAYeQ58lQSgyaHX4nO9dQ8/Kbjrrh1FAi8RIYawxSTkDHItIdLXVX2A8voJulMw1ktipnR/cs2VgM4eFE0a1cOvw/2lHQRHpiEvs51fAGFZD2QKJlIdD4fqkI/pssuN0XKiL2fumGfeT+uaL0DxDzryvLSk0PjnLWSng4zRIfADfRjAzY8Z36RxoAl5ejNBSKBE1C7yFvVhslg2m+X6qhTsUNlFitteg1CAo94nBH4ppmvQQeaEgB3FC+vEcenDGU/sl1+8wVhfr8v15/fdfFqQo8rlTb9qSrCzj94C34lB7u7u0KKOCD5mMLET7bqlRnNKFSB9L4mVLBybHuwJ+Ue2GvB68B+YZMU1hfGRdY7J4yasFlO9+cM+0vNKu5wP76O4IWB9Ib9slI= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <44B280343155DE47A09449CABD8E5694@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 839b3e8b-b8a4-4e76-ba77-08d761356000 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2019 14:43:36.6286 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: B3agfbb9qYZcXv/Apq1CX4CXyZ6fLs9pSov2SM4xWM9fe2Ec/KBwavAlQtZk+y7xjRNA7lw0UibTgc1kt9dfE3fMh38ZDAJrDWmfLOVHeWY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB3184 Archived-At: Subject: Re: [sipcore] Alexey Melnikov's No Objection on draft-ietf-sipcore-digest-scheme-12: (with COMMENT) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 14:43:43 -0000 SGksDQoNCiAgICA+Pj5JIGFtIG5vdCBzdXJlIEkgYW0gZm9sbG93aW5nLCBXaGF0IGRvIHlvdSBt ZWFuIGJ5ICJjaGFsbGVuZ2UgcmVzcG9uc2Ugbm90IGJlaW5nIHByb3ZpZGVkIj8NCiAgICA+PiAN CiAgICA+PiBUaGUgcmVzcG9uc2UgdG8gdGhlIGNoYWxsZW5nZSBwcm92aWRlZCBieSB0aGUgc2Vy dmVyLg0KICAgID4+IA0KICAgID4+IElmIHlvdSB0aGluayBpdCBpcyB1bmNsZWFyLCBtYXliZSBz b21ldGhpbmcgbGlrZToNCiAgICA+PiANCiAgICA+PiDigJxBIHBhcmFtZXRlciB3aXRoIGFuIGVt cHR5IHZhbHVlIChlbXB0eSBzdHJpbmcpIGlzIGFsbG93ZWQgd2hlbiB0aGUgVUFDIA0KICAgID4+ IGhhcyBub3QgeWV0IHJlY2VpdmVkIGEgY2hhbGxlbmdlLiINCiAgICA+DQogICAgPiBJJ20gY29u ZnVzZWQuIFdoZW4gaXMgdGhpcyBiZWhhdmlvciBhcHByb3ByaWF0ZSBhbmQgd2hhdCBkb2VzIGl0 IG1lYW4/DQoNCkFzIEkgZXhwbGFpbmVkIGVhcmxpZXIsIHRoZXJlIGFyZSBjYXNlcyAoSU1TIEFL QSkgd2hlcmUgdGhlIEF1dGhvcml6YXRpb24gaGVhZGVyIGZpZWxkIGlzIHNlbnQgYmVmb3JlIGEg Y2hhbGxlbmdlIGhhcyBiZWVuIHJlY2VpdmVkLCBhbmQgM0dQUCBzcGVjaWZpZWQgdGhhdCBhbiBl bXB0eSByZXNwb25zZSBwYXJhbWV0ZXIgaXMgaW5jbHVkZWQgaW4gc3VjaCBjYXNlcy4NCg0KUmVn YXJkcywNCg0KQ2hyaXN0ZXINCg0KDQoNCiAgICA+IFJlZ2FyZHMsDQogICAgPiANCiAgICA+IENo cmlzdGVyDQogICAgPiANCiAgICA+IE9uIFN1biwgTm92IDMsIDIwMTkgYXQgMTo1MyBQTSBDaHJp c3RlciBIb2xtYmVyZyANCiAgICA+IDxjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20gPG1h aWx0bzpjaHJpc3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20+PiANCiAgICA+IHdyb3RlOg0KICAg ID4gDQogICAgPiAgICAgSGksDQogICAgPiANCiAgICA+ICAgICBJIGFtIGZpbmUgd2l0aCB0aGUg c3VnZ2VzdGlvbiwgYnV0IGluc3RlYWQgb2YgdGFsa2luZyBhYm91dCBhbg0KICAgID4gICAgIGFs Z29yaXRobSBub3QgYmVpbmcgcHJvdmlkZWQgSSB3b3VsZCBsaWtlIHRvIHRhbGsgYWJvdXQgYSAq Y2hhbGxlbmdlDQogICAgPiAgICAgcmVzcG9uc2UqIG5vdCBiZWluZyBwcm92aWRlZC4NCiAgICA+ IA0KICAgID4gICAgIFJlZ2FyZHMsDQogICAgPiANCiAgICA+ICAgICBDaHJpc3Rlcg0KICAgID4g DQogICAgPiAgICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICAgPiANCiAgICA+ICAgICAqRnJvbToqUmlm YWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb20NCiAgICA+ICAgICA8bWFpbHRv OnJpZmFhdC5pZXRmQGdtYWlsLmNvbT4+DQogICAgPiAgICAgKlNlbnQ6KiBTdW5kYXksIE5vdmVt YmVyIDMsIDIwMTkgMTI6MDEgUE0NCiAgICA+ICAgICAqVG86KiBBbGV4ZXkgTWVsbmlrb3YgPGFh bWVsbmlrb3ZAZmFzdG1haWwuZm0NCiAgICA+ICAgICA8bWFpbHRvOmFhbWVsbmlrb3ZAZmFzdG1h aWwuZm0+Pg0KICAgID4gICAgICpDYzoqIENocmlzdGVyIEhvbG1iZXJnIDxjaHJpc3Rlci5ob2xt YmVyZ0Blcmljc3Nvbi5jb20NCiAgICA+ICAgICA8bWFpbHRvOmNocmlzdGVyLmhvbG1iZXJnQGVy aWNzc29uLmNvbT4+OyBzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZw0KICAgID4gICAgIDxtYWlsdG86 c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmc+IDxzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZw0KICAgID4g ICAgIDxtYWlsdG86c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmc+PjsNCiAgICA+ICAgICBkcmFmdC1p ZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZw0KICAgID4gICAgIDxtYWlsdG86ZHJh ZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc+DQogICAgPiAgICAgPGRyYWZ0 LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnDQogICAgPiAgICAgPG1haWx0bzpk cmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZz4+OyBUaGUgSUVTRw0KICAg ID4gICAgIDxpZXNnQGlldGYub3JnIDxtYWlsdG86aWVzZ0BpZXRmLm9yZz4+OyBTSVBDT1JFIDxz aXBjb3JlQGlldGYub3JnDQogICAgPiAgICAgPG1haWx0bzpzaXBjb3JlQGlldGYub3JnPj4NCiAg ICA+ICAgICAqU3ViamVjdDoqIFJlOiBbc2lwY29yZV0gQWxleGV5IE1lbG5pa292J3MgTm8gT2Jq ZWN0aW9uIG9uDQogICAgPiAgICAgZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6 ICh3aXRoIENPTU1FTlQpDQogICAgPiANCiAgICA+ICAgICBBbGV4ZXksIENocmlzdGVyLA0KICAg ID4gDQogICAgPiAgICAgSG93IGFib3V0IHRoZSBmb2xsb3dpbmc6DQogICAgPiANCiAgICA+ICAg ICAxLiBDaGFuZ2UgdGhlIEFCTkYgdG8gInJlcXVlc3QtZGlnZXN0ID0gTERRVU9UICpMSEVYIFJE UVVPVCINCiAgICA+IA0KICAgID4gICAgIDIuIENoYW5nZSB0aGUgdGV4dCBiZWxvdyBpdCB0byBz YXkgIlRoZSBudW1iZXIgb2YgaGV4IGRpZ2l0cyBpcw0KICAgID4gICAgIGltcGxpZWQgYnkgdGhl IGxlbmd0aCBvZiB0aGUgdmFsdWUgb2YgdGhlIGFsZ29yaXRobSB1c2VkLCB3aXRoIHRoZQ0KICAg ID4gICAgIG1pbmltdW0gc2l6ZSBvZiAzMi4gQSBwYXJhbWV0ZXIgd2l0aCBhbiBlbXB0eSB2YWx1 ZSAoZW1wdHkgc3RyaW5nKQ0KICAgID4gICAgIGlzIGFsbG93ZWQgd2hlbiB0aGUgYWxnb3JpdGht IGlzIG5vdCBzcGVjaWZpZWQuIiINCiAgICA+IA0KICAgID4gICAgIFJlZ2FyZHMsDQogICAgPiAN CiAgICA+ICAgICAgIFJpZmFhdA0KICAgID4gDQogICAgPiAgICAgT24gRnJpLCBOb3YgMSwgMjAx OSBhdCA2OjEwIEFNIEFsZXhleSBNZWxuaWtvdg0KICAgID4gICAgIDxhYW1lbG5pa292QGZhc3Rt YWlsLmZtIDxtYWlsdG86YWFtZWxuaWtvdkBmYXN0bWFpbC5mbT4+IHdyb3RlOg0KICAgID4gDQog ICAgPiAgICAgICAgIE9uIDEgTm92IDIwMTksIGF0IDA3OjA5LCBDaHJpc3RlciBIb2xtYmVyZw0K ICAgID4gICAgICAgICA8Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tDQogICAgPiAgICAg ICAgIDxtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJpY3Nzb24uY29tPj4gd3JvdGU6DQogICAg PiANCiAgICA+ICAgICAgICAgICAgIEhpLA0KICAgID4gDQogICAgPiAgICAgICAgICAgICA+SSBk byBub3QgaGF2ZSBhIHN0cm9uZyBvcGluaW9uIGhlcmUuIA0KICAgID4gDQogICAgPiAgICAgICAg ICAgICA+IA0KICAgID4gDQogICAgPiAgICAgICAgICAgICA+QW55Ym9keSBoYXMgYW4gb3Bpbmlv biBvciB0aG91Z2h0cyBhYm91dCBhZGRpbmcgc3VjaCBhIHRleHQ/DQogICAgPiANCiAgICA+ICAg ICAgICAgICAgIEluIGFkZGl0aW9uIHdl4oCZZCBvYnZpb3VzbHkgYWxzbyBjaGFuZ2UgdGhlIEFC TkYgYmFjaywgdG8NCiAgICA+ICAgICAgICAgICAgIGFsbG93IGVtcHR5IHZhbHVlcy4NCiAgICA+ IA0KICAgID4gICAgICAgICBJZiB0aGUgQUJORiBpcyBjaGFuZ2VkIGJhY2sgZm9yIHRoaXMsIEkg dGhpbmsgc29tZSBleHRyYSB0ZXh0DQogICAgPiAgICAgICAgIHdvdWxkIGJlIHVzZWZ1bC4NCiAg ICA+IA0KICAgID4gICAgICAgICAgICAgUmVnYXJkcywNCiAgICA+IA0KICAgID4gICAgICAgICAg ICAgQ2hyaXN0ZXINCiAgICA+IA0KICAgID4gICAgICAgICAgICAgT24gVGh1LCBPY3QgMzEsIDIw MTkgYXQgMTo1MCBQTSBDaHJpc3RlciBIb2xtYmVyZw0KICAgID4gICAgICAgICAgICAgPGNocmlz dGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbQ0KICAgID4gICAgICAgICAgICAgPG1haWx0bzpjaHJp c3Rlci5ob2xtYmVyZ0Blcmljc3Nvbi5jb20+PiB3cm90ZToNCiAgICA+IA0KICAgID4gICAgICAg ICAgICAgICAgIFNvbWV0aGluZyBsaWtlIHRoaXM6DQogICAgPiANCiAgICA+ICAgICAgICAgICAg ICAgICDigJxJbiBzb21lIGNhc2VzIGEgVUFDIG5lZWRzIHRvIGluY2x1ZGUgYW4gQXV0aG9yaXph dGlvbg0KICAgID4gICAgICAgICAgICAgICAgIGhlYWRlciBmaWVsZCBpbiBhIHJlcXVlc3QgYmVm b3JlIGl0IGhhcyByZWNlaXZlZCBhDQogICAgPiAgICAgICAgICAgICAgICAgY2hhbGxlbmdlLCBp biBvcmRlciB0byBwcm92aWRlIHVzZXIgaW5mb3JtYXRpb24gKHVzaW5nDQogICAgPiAgICAgICAg ICAgICAgICAgdGhlIOKAmHVzZXJpbmZv4oCZIGhlYWRlciBmaWVsZCBwYXJhbWV0ZXIpIHRoYXQg aXMgbmVlZGVkIGluDQogICAgPiAgICAgICAgICAgICAgICAgb3JkZXIgdG8gY3JlYXRlIHRoZSBj aGFsbGVuZ2UuIEFuIGV4YW1wbGUgb2Ygc3VjaCBjYXNlDQogICAgPiAgICAgICAgICAgICAgICAg aXMgd2hlbiB0aGUgSFRUUCBEaWdlc3QgQXV0aGVudGljYXRpb24gVXNpbmcgQUtBDQogICAgPiAg ICAgICAgICAgICAgICAgbWVjaGFuaXNtIChSRkMzMzEwKSAoUkZDNDE2OSkgaXMgdXNlZC4gSW4g c3VjaCBjYXNlIHRoZQ0KICAgID4gICAgICAgICAgICAgICAgIEF1dGhvcml6YXRpb24gaGVhZGVy IGZpZWxkIHdvdWxkIHR5cGljYWxseSBub3QgY29udGFpbiBhDQogICAgPiAgICAgICAgICAgICAg ICAg4oCYcmVzcG9uc2XigJkgaGVhZGVyIGZpZWxkIHBhcmFtZXRlciBiZWZvcmUgYSBjaGFsbGVu Z2UNCiAgICA+ICAgICAgICAgICAgICAgICByZXNwb25zZSBpcyBwcm92aWRlZC4gSG93ZXZlciwg Zm9yIHRoZSBJUCBNdWx0aW1lZGlhDQogICAgPiAgICAgICAgICAgICAgICAgU3Vic3lzdGVtIChJ TVMpIGl0IGhhcyBiZWVuIHNwZWNpZmllZCB0aGF0IHRoZQ0KICAgID4gICAgICAgICAgICAgICAg IEF1dGhvcml6YXRpb24gaGVhZGVyIGZpZWxkIGluIHN1Y2ggY2FzZSBkb2VzIGNvbnRhaW4gYQ0K ICAgID4gICAgICAgICAgICAgICAgICAg4oCYcmVzcG9uc2XigJkgaGVhZGVyIGZpZWxkIHBhcmFt ZXRlciwgd2l0aCBhbiBlbXB0eSB2YWx1ZQ0KICAgID4gICAgICAgICAgICAgICAgIChlbXB0eSBz dHJpbmcpLiBGb3IgdGhhdCByZWFzb24gdGhlIG1vZGlmaWVkDQogICAgPiAgICAgICAgICAgICAg ICAgcmVxdWVzdC1kaWdlc3QgQUJORiBhbGxvd3Mgc3VjaCBlbXB0eSB2YWx1ZXMu4oCdDQogICAg PiANCiAgICA+ICAgICAgICAgICAgICAgICBSZWdhcmRzLA0KICAgID4gDQogICAgPiAgICAgICAg ICAgICAgICAgQ2hyaXN0ZXINCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICpGcm9tOiAq UmlmYWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb20NCiAgICA+ICAgICAgICAg ICAgICAgICA8bWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNvbT4+DQogICAgPiAgICAgICAgICAg ICAgICAgKkRhdGU6ICpUaHVyc2RheSwgMzEgT2N0b2JlciAyMDE5IGF0IDE5LjIyDQogICAgPiAg ICAgICAgICAgICAgICAgKlRvOiAqQ2hyaXN0ZXIgSG9sbWJlcmcgPGNocmlzdGVyLmhvbG1iZXJn QGVyaWNzc29uLmNvbQ0KICAgID4gICAgICAgICAgICAgICAgIDxtYWlsdG86Y2hyaXN0ZXIuaG9s bWJlcmdAZXJpY3Nzb24uY29tPj4NCiAgICA+ICAgICAgICAgICAgICAgICAqQ2M6ICpDaHJpc3Rl ciBIb2xtYmVyZw0KICAgID4gICAgICAgICAgICAgICAgIDxjaHJpc3Rlci5ob2xtYmVyZz00MGVy aWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZw0KICAgID4gICAgICAgICAgICAgICAgIDxtYWlsdG86 NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc+PiwNCiAgICA+ICAgICAgICAgICAgICAgICAi c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmcNCiAgICA+ICAgICAgICAgICAgICAgICA8bWFpbHRvOnNp cGNvcmUtY2hhaXJzQGlldGYub3JnPiINCiAgICA+ICAgICAgICAgICAgICAgICA8c2lwY29yZS1j aGFpcnNAaWV0Zi5vcmcNCiAgICA+ICAgICAgICAgICAgICAgICA8bWFpbHRvOnNpcGNvcmUtY2hh aXJzQGlldGYub3JnPj4sDQogICAgPiAgICAgICAgICAgICAgICAgImRyYWZ0LWlldGYtc2lwY29y ZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnDQogICAgPiAgICAgICAgICAgICAgICAgPG1haWx0bzpk cmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZz4iDQogICAgPiAgICAgICAg ICAgICAgICAgPGRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnDQogICAg PiAgICAgICAgICAgICAgICAgPG1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVt ZUBpZXRmLm9yZz4+LA0KICAgID4gICAgICAgICAgICAgICAgICJpZXNnQGlldGYub3JnIDxtYWls dG86aWVzZ0BpZXRmLm9yZz4iIDxpZXNnQGlldGYub3JnDQogICAgPiAgICAgICAgICAgICAgICAg PG1haWx0bzppZXNnQGlldGYub3JnPj4sICJzaXBjb3JlQGlldGYub3JnDQogICAgPiAgICAgICAg ICAgICAgICAgPG1haWx0bzpzaXBjb3JlQGlldGYub3JnPiIgPHNpcGNvcmVAaWV0Zi5vcmcNCiAg ICA+ICAgICAgICAgICAgICAgICA8bWFpbHRvOnNpcGNvcmVAaWV0Zi5vcmc+PiwgQWxleGV5IE1l bG5pa292DQogICAgPiAgICAgICAgICAgICAgICAgPGFhbWVsbmlrb3ZAZmFzdG1haWwuZm0gPG1h aWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtPj4NCiAgICA+ICAgICAgICAgICAgICAgICAqU3Vi amVjdDogKlJlOiBbc2lwY29yZV0gQWxleGV5IE1lbG5pa292J3MgTm8gT2JqZWN0aW9uDQogICAg PiAgICAgICAgICAgICAgICAgb24gZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6 ICh3aXRoIENPTU1FTlQpDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICBDYW4geW91IHBy b3Bvc2Ugc29tZSB0ZXh0Pw0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgVGhhbmtzLA0K ICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICBSaWZhYXQNCiAgICA+IA0KICAgID4gICAg ICAgICAgICAgICAgIE9uIFRodSwgT2N0IDMxLCAyMDE5IGF0IDExOjQ0IEFNIENocmlzdGVyIEhv bG1iZXJnDQogICAgPiAgICAgICAgICAgICAgICAgPGNocmlzdGVyLmhvbG1iZXJnQGVyaWNzc29u LmNvbQ0KICAgID4gICAgICAgICAgICAgICAgIDxtYWlsdG86Y2hyaXN0ZXIuaG9sbWJlcmdAZXJp Y3Nzb24uY29tPj4gd3JvdGU6DQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgSGks DQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgUGVyaGFwcyB3ZSBjb3VsZCBhZGQg c29tZSB0ZXh0IGFib3V0IHRoZSBJTVMNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgdXNlLWNh c2UsIGluIG9yZGVyIHRvIGV4cGxhaW4gdGhlIGVtcHR5IHZhbHVlPw0KICAgID4gDQogICAgPiAg ICAgICAgICAgICAgICAgICAgIFJlZ2FyZHMsDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAg ICAgICAgQ2hyaXN0ZXINCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAqRnJvbTog KnNpcGNvcmUgPHNpcGNvcmUtYm91bmNlc0BpZXRmLm9yZw0KICAgID4gICAgICAgICAgICAgICAg ICAgICA8bWFpbHRvOnNpcGNvcmUtYm91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZg0KICAg ID4gICAgICAgICAgICAgICAgICAgICBDaHJpc3RlciBIb2xtYmVyZw0KICAgID4gICAgICAgICAg ICAgICAgICAgICA8Y2hyaXN0ZXIuaG9sbWJlcmc9NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5v cmcNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgPG1haWx0bzo0MGVyaWNzc29uLmNvbUBkbWFy Yy5pZXRmLm9yZz4+DQogICAgPiAgICAgICAgICAgICAgICAgICAgICpEYXRlOiAqVGh1cnNkYXks IDMxIE9jdG9iZXIgMjAxOSBhdCAxNS41Mg0KICAgID4gICAgICAgICAgICAgICAgICAgICAqVG86 ICpSaWZhYXQgU2hla2gtWXVzZWYgPHJpZmFhdC5pZXRmQGdtYWlsLmNvbQ0KICAgID4gICAgICAg ICAgICAgICAgICAgICA8bWFpbHRvOnJpZmFhdC5pZXRmQGdtYWlsLmNvbT4+DQogICAgPiAgICAg ICAgICAgICAgICAgICAgICpDYzogKiJzaXBjb3JlLWNoYWlyc0BpZXRmLm9yZw0KICAgID4gICAg ICAgICAgICAgICAgICAgICA8bWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYub3JnPiINCiAgICA+ ICAgICAgICAgICAgICAgICAgICAgPHNpcGNvcmUtY2hhaXJzQGlldGYub3JnDQogICAgPiAgICAg ICAgICAgICAgICAgICAgIDxtYWlsdG86c2lwY29yZS1jaGFpcnNAaWV0Zi5vcmc+PiwNCiAgICA+ ICAgICAgICAgICAgICAgICAgICAgImRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGll dGYub3JnDQogICAgPiAgICAgICAgICAgICAgICAgICAgIDxtYWlsdG86ZHJhZnQtaWV0Zi1zaXBj b3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmc+Ig0KICAgID4gICAgICAgICAgICAgICAgICAgICA8 ZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWVAaWV0Zi5vcmcNCiAgICA+ICAgICAgICAg ICAgICAgICAgICAgPG1haWx0bzpkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRm Lm9yZz4+LA0KICAgID4gICAgICAgICAgICAgICAgICAgICAiaWVzZ0BpZXRmLm9yZyA8bWFpbHRv Omllc2dAaWV0Zi5vcmc+Ig0KICAgID4gICAgICAgICAgICAgICAgICAgICA8aWVzZ0BpZXRmLm9y ZyA8bWFpbHRvOmllc2dAaWV0Zi5vcmc+PiwNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgInNp cGNvcmVAaWV0Zi5vcmcgPG1haWx0bzpzaXBjb3JlQGlldGYub3JnPiINCiAgICA+ICAgICAgICAg ICAgICAgICAgICAgPHNpcGNvcmVAaWV0Zi5vcmcgPG1haWx0bzpzaXBjb3JlQGlldGYub3JnPj4s IEFsZXhleQ0KICAgID4gICAgICAgICAgICAgICAgICAgICBNZWxuaWtvdiA8YWFtZWxuaWtvdkBm YXN0bWFpbC5mbQ0KICAgID4gICAgICAgICAgICAgICAgICAgICA8bWFpbHRvOmFhbWVsbmlrb3ZA ZmFzdG1haWwuZm0+Pg0KICAgID4gICAgICAgICAgICAgICAgICAgICAqU3ViamVjdDogKlJlOiBb c2lwY29yZV0gQWxleGV5IE1lbG5pa292J3MgTm8NCiAgICA+ICAgICAgICAgICAgICAgICAgICAg T2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLTEyOg0KICAgID4g ICAgICAgICAgICAgICAgICAgICAod2l0aCBDT01NRU5UKQ0KICAgID4gDQogICAgPiAgICAgICAg ICAgICAgICAgICAgIEhpLA0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAgID5UaGlz IElNUyBiZWhhdmlvciB3b3VsZCBoYXZlIGJlZW4gaW4gdmlvbGF0aW9uIG9mIFJGQzMyNjEgd2hp Y2ggc3BlY2lmaWVkIGV4YWN0bHkgMzIgSGV4IGNoYXJhY3RlcnMuDQogICAgPiANCiAgICA+ICAg ICAgICAgICAgICAgICAgICAgPlNvLCB0aGlzIGNoYW5nZSBzaG91bGQgbm90IG1ha2UgbXVjaCBv ZiBhIGRpZmZlcmVuY2UgaW4gdGhpcyBjYXNlLg0KICAgID4gDQogICAgPiAgICAgICAgICAgICAg ICAgICAgIEluIHJlYWxpdHkgaXQgcHJvYmFibHkgZG9lc27igJl0IG1ha2UgYSBkaWZmZXJlbmNl LA0KICAgID4gICAgICAgICAgICAgICAgICAgICBidXQgaXQgd291bGQgbWFrZSB0aGUgSU1TIHBy b2NlZHVyZXMg4oCcYWxpZ25lZOKAnSB3aXRoDQogICAgPiAgICAgICAgICAgICAgICAgICAgIHRo ZSBJRVRGIHNwZWMuDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgUmVnYXJkcywN CiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICBDaHJpc3Rlcg0KICAgID4gDQogICAg PiAgICAgICAgICAgICAgICAgICAgIE9uIFRodSwgT2N0IDMxLCAyMDE5IGF0IDk6MzcgQU0gQ2hy aXN0ZXIgSG9sbWJlcmcNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgPGNocmlzdGVyLmhvbG1i ZXJnQGVyaWNzc29uLmNvbQ0KICAgID4gICAgICAgICAgICAgICAgICAgICA8bWFpbHRvOmNocmlz dGVyLmhvbG1iZXJnQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KICAgID4gDQogICAgPiAgICAgICAg ICAgICAgICAgICAgICAgICBIaSwNCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAg ICAgVGhlIHJlYXNvbiBmb3IgdGhlIGVtcHR5IHZhbHVlIGNvbWVzIGZyb20gSU1TDQogICAgPiAg ICAgICAgICAgICAgICAgICAgICAgICBhbmQgQUtBLCB3aGVyZSB5b3UgbmVlZCB0byBpbmNsdWRl IHRoZSB1c2VyIGlkDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICBhbHJlYWR5IGluIHRo ZSBpbml0aWFsIFJFR0lTVEVSIHJlcXVlc3QgKHRoaXMNCiAgICA+ICAgICAgICAgICAgICAgICAg ICAgICAgIHNlZW1zIHRvIGJlIG1pc3NpbmcgZnJvbSBSRkMgMzMxMCwgYnV0IHRoYXTigJlzIGEN CiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgIHNlcGFyYXRlIHRvcGljKSBpbiBvcmRlciBm b3IgdGhlIHNlcnZlciB0bw0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgY3JlYXRlIHRo ZSBjaGFsbGVuZ2UsICBtZWFuaW5nIHRoYXQgaW4gdGhlDQogICAgPiAgICAgICAgICAgICAgICAg ICAgICAgICBpbml0aWFsIFJFR0lTVEVSIHJlcXVlc3QgeW91IGluY2x1ZGUgYW4NCiAgICA+ICAg ICAgICAgICAgICAgICAgICAgICAgIEF1dGhvcml6YXRpb24gaGVhZGVyIGZpZWxkIHdpdGggdGhl IHVzZXJuYW1lDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICBwYXJhbWV0ZXIgY2Fycnlp bmcgdGhlIElNUyBwcml2YXRlIHVzZXINCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgIGlk ZW50aXR5LCB0aGUgcmVhbG0gcGFyYW1ldGVyIGFuZCB0aGUgdXJpDQogICAgPiAgICAgICAgICAg ICAgICAgICAgICAgICBwYXJhbWV0ZXIuIEF0IHRoaXMgcG9pbnQgeW91IG9idmlvdXNseSBkb27i gJl0IHlldA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgaGF2ZSB0aGUgcmVzcG9uc2Us IHNvIGluIElNUyBpdCBpcyBzcGVjaWZpZWQNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAg IHRoYXQgdGhlIHJlc3BvbnNlIHBhcmFtZXRlciBpcyBpbnNlcnRlZCB3aXRoIGFuDQogICAgPiAg ICAgICAgICAgICAgICAgICAgICAgICBlbXB0eSB2YWx1ZS4NCiAgICA+IA0KICAgID4gICAgICAg ICAgICAgICAgICAgICAgICAgV0hZIGl0IHdhcyBzcGVjaWZpZWQgdGhhdCB3YXkgKGluc3RlYWQg b2Ygc2ltcGx5DQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICBub3QgaW5jbHVkaW5nIHRo ZSByZXNwb25zZSBwYXJhbWV0ZXIpIEkgZG9u4oCZdA0KICAgID4gICAgICAgICAgICAgICAgICAg ICAgICAga25vdywgYnV0IEkgZG8ga25vdyB0aGF0IGl0IGhhcyBiZWVuIGltcGxlbWVudGVkDQog ICAgPiAgICAgICAgICAgICAgICAgICAgICAgICBhbmQgZGVwbG95ZWQgdGhhdCB3YXkgZm9yIG1h bnkgeWVhcnMuDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgIFJlZ2FyZHMs DQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgIENocmlzdGVyDQogICAgPiAN CiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICpGcm9tOiAqc2lwY29yZSA8c2lwY29yZS1i b3VuY2VzQGlldGYub3JnDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICA8bWFpbHRvOnNp cGNvcmUtYm91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZg0KICAgID4gICAgICAgICAgICAg ICAgICAgICAgICAgUmlmYWF0IFNoZWtoLVl1c2VmIDxyaWZhYXQuaWV0ZkBnbWFpbC5jb20NCiAg ICA+ICAgICAgICAgICAgICAgICAgICAgICAgIDxtYWlsdG86cmlmYWF0LmlldGZAZ21haWwuY29t Pj4NCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICpEYXRlOiAqVGh1cnNkYXksIDMxIE9j dG9iZXIgMjAxOSBhdCAxNS4yMA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgKlRvOiAq QWxleGV5IE1lbG5pa292IDxhYW1lbG5pa292QGZhc3RtYWlsLmZtDQogICAgPiAgICAgICAgICAg ICAgICAgICAgICAgICA8bWFpbHRvOmFhbWVsbmlrb3ZAZmFzdG1haWwuZm0+Pg0KICAgID4gICAg ICAgICAgICAgICAgICAgICAgICAgKkNjOiAqInNpcGNvcmUtY2hhaXJzQGlldGYub3JnDQogICAg PiAgICAgICAgICAgICAgICAgICAgICAgICA8bWFpbHRvOnNpcGNvcmUtY2hhaXJzQGlldGYub3Jn PiINCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgIDxzaXBjb3JlLWNoYWlyc0BpZXRmLm9y Zw0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgPG1haWx0bzpzaXBjb3JlLWNoYWlyc0Bp ZXRmLm9yZz4+LA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgImRyYWZ0LWlldGYtc2lw Y29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAg ICA8bWFpbHRvOmRyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lQGlldGYub3JnPiINCiAg ICA+ICAgICAgICAgICAgICAgICAgICAgICAgIDxkcmFmdC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNj aGVtZUBpZXRmLm9yZw0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgPG1haWx0bzpkcmFm dC1pZXRmLXNpcGNvcmUtZGlnZXN0LXNjaGVtZUBpZXRmLm9yZz4+LA0KICAgID4gICAgICAgICAg ICAgICAgICAgICAgICAgImllc2dAaWV0Zi5vcmcgPG1haWx0bzppZXNnQGlldGYub3JnPiINCiAg ICA+ICAgICAgICAgICAgICAgICAgICAgICAgIDxpZXNnQGlldGYub3JnIDxtYWlsdG86aWVzZ0Bp ZXRmLm9yZz4+LA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgInNpcGNvcmVAaWV0Zi5v cmcgPG1haWx0bzpzaXBjb3JlQGlldGYub3JnPiINCiAgICA+ICAgICAgICAgICAgICAgICAgICAg ICAgIDxzaXBjb3JlQGlldGYub3JnIDxtYWlsdG86c2lwY29yZUBpZXRmLm9yZz4+DQogICAgPiAg ICAgICAgICAgICAgICAgICAgICAgICAqU3ViamVjdDogKlJlOiBbc2lwY29yZV0gQWxleGV5IE1l bG5pa292J3MgTm8NCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgIE9iamVjdGlvbiBvbg0K ICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1zaXBjb3JlLWRpZ2VzdC1z Y2hlbWUtMTI6ICh3aXRoIENPTU1FTlQpDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAg ICAgICAgIERvbmUuDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgIE9uIFRo dSwgT2N0IDMxLCAyMDE5IGF0IDk6MTMgQU0gQWxleGV5IE1lbG5pa292DQogICAgPiAgICAgICAg ICAgICAgICAgICAgICAgICA8YWFtZWxuaWtvdkBmYXN0bWFpbC5mbQ0KICAgID4gICAgICAgICAg ICAgICAgICAgICAgICAgPG1haWx0bzphYW1lbG5pa292QGZhc3RtYWlsLmZtPj4gd3JvdGU6DQog ICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBPbiBUaHUsIE9jdCAzMSwg MjAxOSwgYXQgMToxMSBQTSwgUmlmYWF0DQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgU2hla2gtWXVzZWYgd3JvdGU6DQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgSGkgQWxleGV5LA0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEkgYW0gZmluZSB3aXRoIFBhdWwncyBzdWdnZXN0aW9uLg0KICAgID4gDQog ICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFyZSB5b3Ugb2sgd2l0aCAiMzIq TEhFWCI/DQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBZZXMhDQog ICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGFuayB5b3UsDQogICAg PiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBbGV4ZXkNCiAgICA+IA0KICAg ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBSZWdhcmRzLA0KICAgID4gDQogICAg PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUmZhYXQNCiAgICA+IA0KICAgID4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBPbiBUaHUsIE9jdCAzMSwgMjAxOSBhdCA3 OjIyIEFNIEFsZXhleQ0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNZWxu aWtvdiA8YWFtZWxuaWtvdkBmYXN0bWFpbC5mbQ0KICAgID4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA8bWFpbHRvOmFhbWVsbmlrb3ZAZmFzdG1haWwuZm0+PiB3cm90ZToNCiAgICA+ IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSGkgUmlmYWF0LA0K ICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBPbiBXZWQs IE9jdCAzMCwgMjAxOSwgYXQgOTo1MCBQTSwNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFJpZmFhdCBTaGVraC1ZdXNlZiB3cm90ZToNCiAgICA+IA0KICAgID4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcyBBbGV4ZXkhDQogICAg PiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJIGFtIGZp bmUgd2l0aCB0aGUgZmlyc3QgdHdvDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgY29tbWVudHMsIGFuZCB3aWxsIGZpeCB0aGVzZSBpbg0KICAgID4gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHRoZSBjb21pbmcgdmVyc2lvbiBvZiB0 aGUgZG9jdW1lbnQuDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBJIGFtIG5vdCBzdXJlIEkgZm9sbG93IHRoZSAzcmQNCiAgICA+ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBvbmUuIFdoeSBkbyB5b3Ugc2VlIHRoZSBu ZWVkIGZvcg0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGEg bWluaW11bSBudW1iZXIgb2YgaGV4IGRpZ2l0cz8NCiAgICA+IA0KICAgID4gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgWW91IGRvIHNheSB0aGF0IHRoZSBudW1iZXIgb2YgaGV4 DQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBkaWdpdHMgbWF0Y2gg dGhlIGhhc2ggbGVuZ2h0LCBzbyBpdA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgaXMgcHJvYmFibHkgT2suIEhvd2V2ZXIgZW1wdHkgdmFsdWUNCiAgICA+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGlzIG5ldmVyIHZhbGlkIChhbmQgSSBhbSB3 b3JyaWVkIGl0DQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBtaWdo dCBoaXQgc29tZSBib3VuZGFyeSBjb25kaXRpb24NCiAgICA+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIGJ1ZyBpbiBpbXBsZW1lbnRhdGlvbnMpLCBzbw0KICAgID4gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcHJvaGliaXRpbmcgaXQgaW4gQUJORiB3b3Vs ZCBiZSB0aGUNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGJlc3Qu DQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEJlc3Qg UmVnYXJkcywNCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgQWxleGV5DQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBSZWdhcmRzLA0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBSaWZhYXQNCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIE9uIFdlZCwgT2N0IDMwLCAyMDE5IGF0IDE6MTYgUE0NCiAg ICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBbGV4ZXkgTWVsbmlr b3YgdmlhIERhdGF0cmFja2VyDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPG5vcmVwbHlAaWV0Zi5vcmcNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICA8bWFpbHRvOm5vcmVwbHlAaWV0Zi5vcmc+PiB3cm90ZToNCiAgICA+ IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBbGV4 ZXkgTWVsbmlrb3YgaGFzIGVudGVyZWQNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgdGhlIGZvbGxvd2luZyBiYWxsb3QNCiAgICA+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcG9zaXRpb24gZm9yDQogICAgPiANCiAg ICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0 Zi1zaXBjb3JlLWRpZ2VzdC1zY2hlbWUtMTI6DQogICAgPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIE5vIE9iamVjdGlvbg0KICAgID4gDQogICAgPiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFdoZW4gcmVzcG9uZGluZywgcGxl YXNlIGtlZXANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5kDQogICAgPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHJlcGx5IHRvIGFsbA0KICAgID4gDQogICAgPiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGVtYWlsIGFkZHJlc3NlcyBp bmNsdWRlZCBpbg0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICB0aGUgVG8gYW5kIENDIGxpbmVzLiAoRmVlbA0KICAgID4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBmcmVlIHRvIGN1dCB0aGlzDQogICAgPiANCiAgICA+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaW50cm9kdWN0b3J5 IHBhcmFncmFwaCwNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgaG93ZXZlci4pDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgUGxlYXNlIHJlZmVyIHRvDQogICAgPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3Rh dGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KICAgID4gDQogICAgPiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0 DQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIElFU0cg RElTQ1VTUyBhbmQgQ09NTUVOVA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBwb3NpdGlvbnMuDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoDQogICAg PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIG90aGVyIGJhbGxv dCBwb3NpdGlvbnMsIGNhbg0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBiZSBmb3VuZCBoZXJlOg0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LWlldGYtc2lwY29yZS1kaWdlc3Qtc2NoZW1lLw0KICAgID4gDQogICAgPiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAg ICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBD T01NRU5UOg0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBJIGFtIGFncmVlaW5nIHdpdGggQWxpc3NhJ3MNCiAg ICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRElTQ1VTUy4N CiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBBbHNvLCBJIGhhdmUgYSBmZXcgY29tbWVudHMNCiAgICA+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgb2YgbXkgb3duOg0KICAgID4gDQogICAgPiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDEpIExhc3QgcGFyYSBvZiBTZWN0 aW9uIDIuMToNCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAyLjEuICBIYXNoIEFsZ29yaXRobXMNCiAgICA+IA0KICAgID4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQSBVQVMgcHJpb3JpdGl6ZXMg d2hpY2gNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg YWxnb3JpdGhtIHRvIHVzZSBiYXNlZCBvbg0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB0aGUgb3JkZXJpbmcgb2YgdGhlDQogICAgPiANCiAgICA+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNoYWxsZW5nZSBo ZWFkZXIgZmllbGRzDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIGluIHRoZSByZXNwb25zZSBpdCBpcyBwcmVwYXJpbmcuDQogICAgPiANCiAgICA+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVGhpcyBsb29rcyBlaXRo ZXIgd3Jvbmcgb3INCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgY29uZnVzaW5nIHRvIG1lLiBJIHRoaW5rIHlvdQ0KICAgID4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBhcmUganVzdCBzYXlpbmcgaGVyZQ0KICAgID4g DQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHRoYXQg dGhlIG9yZGVyIGlzIGRlY2lkZWQgYnkNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgdGhlIHNlcnZlciBhdCB0aGlzIHBvaW50Lg0KICAgID4gDQogICAg PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGF0DQog ICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHByb2Nlc3MgaXMgc3BlY2lmaWVkIGluDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHNlY3Rpb24gMi4zIGFuZCBwYXJhbGxlbHMNCiAgICA+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgdGhlIHByb2Nlc3MgdXNl ZCBpbg0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBIVFRQIHNwZWNpZmllZCBieSBbUkZDNzYxNl0uDQogICAgPiANCiAgICA+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgU28gYmFzZWQgb24gdGhl IGFib3ZlLCBteQ0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBzdWdnZXN0ZWQgcmVwbGFjZW1lbnQgZm9yDQogICAgPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIGJvdGggc2VudGVuY2VzOg0KICAgID4gDQogICAgPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBIFVBUyBwcmlv cml0aXplcyB3aGljaA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBhbGdvcml0aG0gdG8gdXNlIGJhc2VkIG9uDQogICAgPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIGl0cyBwb2xpY3ksDQogICAgPiANCiAgICA+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHdoaWNoIGlzIHNw ZWNpZmllZCBpbg0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBzZWN0aW9uIDIuMyBhbmQgcGFyYWxsZWxzDQogICAgPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHRoZSBwcm9jZXNzIHVzZWQgaW4NCiAgICA+IA0KICAg ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSFRUUCBz cGVjaWZpZWQgYnkgW1JGQzc2MTZdLg0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIDIpIExhc3QgcGFyYSBvZiBTZWN0aW9uIDIuNDoNCiAg ICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgSWYgdGhlIFVBQyBjYW5ub3QNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgcmVzcG9uZCB0byBhbnkgb2YgdGhlDQogICAgPiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNoYWxsZW5nZXMgaW4gdGhlIHJlc3BvbnNl LA0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB0aGVuIGl0IFNIT1VMRCBhYmFuZG9uDQogICAgPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIGF0dGVtcHRzIHRvIHNlbmQgdGhlIHJlcXVlc3QNCiAg ICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgdW5sZXNzIGEg bG9jYWwNCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgcG9saWN5IGRpY3RhdGVzIG90aGVyd2lzZS4NCiAgICA+IA0KICAgID4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJcyB0cnlpbmcgb3RoZXIg bm9uIERpZ2VzdA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBhbGdvcml0aG1zIGNvdmVyZWQgYnkNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIlNIT1VMRCBhYmFuZG9uIj8NCiAgICA+IA0KICAgID4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBJZiB5ZXMsIG1heWJlIHlv dSBzaG91bGQNCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgbWFrZSB0aGlzIGNsZWFyZXIuDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIEZvciBleGFtcGxlLCBpZiB0aGUgVUFDDQogICAg PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGRvZXMgbm90IGhh dmUNCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgY3JlZGVudGlhbHMgb3IgaGFzIHN0YWxlDQogICAgPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNyZWRlbnRpYWxzIGZvciBhbnkgb2YgdGhlDQog ICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHJlYWxtcywg dGhlIFVBQw0KICAgID4gDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB3aWxsIGFiYW5kb24gdGhlIHJlcXVlc3QuDQogICAgPiANCiAgICA+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgMykgSW4gU2VjdGlvbiAy Ljc6DQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIHJlcXVlc3QtZGlnZXN0ID0NCiAgICA+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgTERRVU9UICpMSEVYIFJEUVVPVA0KICAgID4gDQogICAg PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoaXMgbm93IGFs bG93cyBlbXB0eSB2YWx1ZS4NCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgSSBzdWdnZXN0IHlvdSBzcGVjaWZ5IGENCiAgICA+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgbWluaW11bSBudW1iZXIgb2YgaGV4DQogICAg PiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZGln aXRzIGFsbG93ZWQgaW4gdGhlIEFCTkYuDQogICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIE9yIGF0IGxlYXN0IGNoYW5nZSAiKkxIRVgiDQogICAgPiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHRvICIyKkxIRVgiLg0KICAg ID4gDQogICAgPiANCiAgICA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQogICAgPiBzaXBjb3JlIG1haWxpbmcgbGlzdA0KICAgID4gc2lwY29yZUBpZXRm Lm9yZw0KICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zaXBjb3Jl DQogICAgPiANCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KICAgIHNpcGNvcmUgbWFpbGluZyBsaXN0DQogICAgc2lwY29yZUBpZXRmLm9y Zw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2lwY29yZQ0KICAg IA0KDQo= From nobody Tue Nov 5 08:19:09 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D96871200C3 for ; Tue, 5 Nov 2019 08:19:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RNoS205KVIpm for ; Tue, 5 Nov 2019 08:19:04 -0800 (PST) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10063.outbound.protection.outlook.com [40.107.1.63]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7D3712001A for ; Tue, 5 Nov 2019 08:19:03 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BEz/dy35izikpAVZFFq0T2hjh77dQJJ6FpaORZhCe45ugyqWmoprmpxcB6TpX3tW0UJtwyowGZCyjc2EzGM8OELA6h4FWS5aWE/0gzM9VtJgK/gtSb6+amlFd51Xq2FfaFDpnDNZXy6xBNibvGj5AAxEF5YCtvXvntmbRYJ33y3nXDqFaaGMLnNI7wIFp8MqR7k8yBR6edtLTVhZEGV4bchBNtiz3tN9ZC9ndtH9aRAnsmVyRVZajFxeLckGZ65ykSgZ+DJG2uvAoSRTocOqWIvz/FKyL7wSiwYwKzLUev7iE53CvHsXWPaYsa7j74X34J35J61Ys0cJZrTvm9ynaw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hMLTemjRVgPBeObyNp3r6KugpAPbfs9VPOoXfAOzlRI=; b=P1b9X04uKSkVRAA0QvFFE3XmkL/EsdMea2hTDbBB51Q0wXCmfaXmaNtZjFcCiavuMV5bJbf0fs9vPVbAIWCIxmjIRATYz4AIGvHzLJDq3aGWKZWbTXkO6MUMfej41MPAhX6iEOFLPOVj1aX9S7xCXik5FVXXMZDuWgp3OYckZUDxBndX4QVHTyOniNcO6LS81Km4w7PP0lkUYSbtS2n6hP6TsPMnIM3RzlOE2syLDaVf59xDeIhRrR/mZvG8P4KsZn7f92RLGLyny/nu4Be/V/zbddxs+K35FMjgdpHk2NA6o1cLyHvqkHjhSG77zo+vm9Ng/GHF/ulXYRemLDFnGA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hMLTemjRVgPBeObyNp3r6KugpAPbfs9VPOoXfAOzlRI=; b=iXCW6duOWBKmrJjPptbKCABLTPnZ+d6fju3peREnpsijMv2FT9hf5MRgT1xJGrWbO6txylwmdvqDY9Hp/5g0QQDxaSUyPnPpMk1Ns8YBTprenIEQLegM1g/EsDgxyZQM64PxptJnlbj64pS9YsNB0DbtiRz9J/uOe8Z9pJfTREQ= Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB3451.eurprd07.prod.outlook.com (10.170.245.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.16; Tue, 5 Nov 2019 16:19:00 +0000 Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::2ca9:414:cc01:9706]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::2ca9:414:cc01:9706%4]) with mapi id 15.20.2430.014; Tue, 5 Nov 2019 16:19:00 +0000 From: Christer Holmberg To: Paul Kyzivat , "sipcore@ietf.org" Thread-Topic: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-05.txt Thread-Index: AQHVis5uf+6u3SYhJ0+veNzfHpxaXadqh9YAgAjl5ICAABzfoYAJascA Date: Tue, 5 Nov 2019 16:19:00 +0000 Message-ID: References: <157196467780.11350.16529563058309019910@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [89.166.49.243] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0bc97c56-4067-4afc-b947-08d7620bde23 x-ms-traffictypediagnostic: HE1PR07MB3451: x-ms-exchange-purlcount: 6 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 0212BDE3BE x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(376002)(346002)(366004)(39860400002)(136003)(189003)(199004)(6436002)(4001150100001)(66574012)(81156014)(26005)(229853002)(81166006)(102836004)(186003)(6116002)(3846002)(8676002)(2906002)(76176011)(2501003)(8936002)(6506007)(6486002)(14444005)(256004)(36756003)(478600001)(14454004)(25786009)(966005)(7736002)(606006)(71190400001)(71200400001)(5660300002)(66946007)(66476007)(66556008)(64756008)(66446008)(76116006)(58126008)(110136005)(316002)(99286004)(86362001)(44832011)(6512007)(486006)(66066001)(6246003)(33656002)(2616005)(54896002)(6306002)(236005)(446003)(2171002)(11346002)(476003); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3451; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: qkNj8Jgccoax0CwrQS4zJWa9foo0JKJkXYPgv++jKjw3eNK7xd/qHQb3lWLMwwkibFBy1R8pgEv3qkLL7mQtqauuPX8enaQHZIZlbMP+hocUKelkXq8yBSNuqX9fQ48Nj1pVlrDUoVyNcTBAJsU/KP+p3umnMaqAGRjFYBbQUcLXB7LpmyzomaZS+nwZU80YwqakyRHdQpwsNyEfgF55GngAtc1CJ5FZ+Zq0678W59qB+ayLfiPQx/Lmo1NyrL4j0oXf1H2Z3BMXZcF/3aqA32vBZT5tAahTp0l5D9lqwwV/FZxqwjAo1smFQi12ZsOEAnNbCA9JUfkjNwTZJMoArsxAu8kT9lAt3pjm2yuQcde3quc6LSCkDEVa3Yyu6r3NxdLQ/1DabG233zCh6FaOXFcVXm0jC81C1Qg0XSuPV1C7cmFuQtY+NXC24xSfU1NePY9jQCkKT/JzDXDpfuwyZpYTRHYRiPljJmqBDNKFk2g= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_F37CF6338E704526865FE6DEE4B9BCBEericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0bc97c56-4067-4afc-b947-08d7620bde23 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Nov 2019 16:19:00.6400 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: eqgDdIPTQTQZv4sBiyxG5AB6fulnXTrZY6Gt2NSd4il86eyWVIojJKE3EuWKrsRovDmtaMlsihF9KnxILu2ncpeIlNlJtUwibRUKpwbaC7E= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3451 Archived-At: Subject: Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-05.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 16:19:08 -0000 --_000_F37CF6338E704526865FE6DEE4B9BCBEericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UGF1bCwNCg0KQXJlIHlvdSBvayB3aXRoIHRoZSBjbGFyaWZpY2F0aW9ucyBiZWxvdz8NCg0KV2Ug YXJlIHRyeWluZyB0byBtb3ZlIHRoZSBkcmFmdCB0byBXR0xDLCBzbyB3ZSB3b3VsZCBhcHByZWNp YXRlIGlmIHlvdSBjb3VsZCByZXBseS4NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXINCg0KDQpGcm9t OiBzaXBjb3JlIDxzaXBjb3JlLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBDaHJpc3Rl ciBIb2xtYmVyZyA8Y2hyaXN0ZXIuaG9sbWJlcmc9NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5v cmc+DQpEYXRlOiBXZWRuZXNkYXksIDMwIE9jdG9iZXIgMjAxOSBhdCAyMS4xMw0KVG86ICJwa3l6 aXZhdEBhbHVtLm1pdC5lZHUiIDxwa3l6aXZhdEBhbHVtLm1pdC5lZHU+LCAic2lwY29yZUBpZXRm Lm9yZyIgPHNpcGNvcmVAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW3NpcGNvcmVdIEktRCBBY3Rp b246IGRyYWZ0LWlldGYtc2lwY29yZS1zaXAtdG9rZW4tYXV0aG56LTA1LnR4dA0KDQpIaSwNCg0K PkknbSBzdGlsbCBzdHJ1Z2dsaW5nIHRvIHVuZGVyc3RhbmQgd2hhdCB0aGUgZXhwZWN0YXRpb25z IGFyZSBvZiB0aGUgVUENCj5pbiB0aGlzIHByb2Nlc3MuDQo+DQo+SUlVQywgd2hlbiB0aGUgcmVn aXN0cmFyL3NlcnZlci9wcm94eSBnZW5lcmF0ZXMgYSAiQmVhcmVyIiBjaGFsbGVuZ2UNCj5zcGVj aWZ5aW5nIGEgcGFydGljdWxhciBBUywgdGhhdCBpbXBsaWVzIHRoYXQgaXQgaGFzIGtub3dsZWRn ZSBvZiB0aGF0DQo+QVMgYW5kIGhvdyB0byBkZWFsIHdpdGggaXQuIEFuZCBpdCBtYXkgd2VsbCBo YXZlIHJlbGF0aW9uc2hpcHMgd2l0aA0KPm11bHRpcGxlIEFTcywgYW5kIGNoYWxsZW5nZSB1c2lu ZyB0aGVtIGFsbC4gQW5kIHRoZXJlIGlzIGFuIGFzc3VtcHRpb24NCj50aGF0IGVpdGhlciBVQSBv ciB0aGUgKnVzZXIqIG9mIHRoZSBVQSBtdXN0IGhhdmUgYSByZWxhdGlvbnNoaXAgd2l0aCBhdA0K PmxlYXN0IG9uIG9mIHRoZSBBU3MgdG8gdXNlIGZvciBhdXRoZW50aWNhdGlvbi4NCkNvcnJlY3Qu DQoNCj5NeSB0aG91Z2h0IGlzIHRoYXQgY29tbW9ubHkgdGhlIFVBIGl0c2VsZiAqd29uJ3QqIGhh dmUgYSByZWxhdGlvbnNoaXANCj53aXRoIHRoZSBBUy4gUmF0aGVyIGl0IHdpbGwgZXhwZWN0IHRo ZSB1c2VyIHRvIGJlIHRoZSBvbmUgdG8gaGF2ZSB0aGF0Lg0KPkluIHRoaXMgY2FzZSwgY2FuIHRo ZSBVQSBoYXZlIGdlbmVyaWMgY29kZSB0aGF0IGRlYWxzIHdpdGggYW55IHBvc3NpYmxlIEFTPw0K WWVzLiBUaGUgaW50ZXJmYWNlIGJldHdlZW4gdGhlIFVBIGFuZCB0aGUgQVMgaXMgc3RhbmRhcmRp emVkLg0KDQo+V2l0aCB3ZWIgYXV0aGVudGljYXRpb24gSSBjb21tb25seSBleHBlcmllbmNlIGFu IGF1dGhlbnRpY2F0aW9uIHBvcHVwDQo+dGhhdCBvZmZlcnMgYWx0ZXJuYXRpdmVzLiAoRS5nLiwg ZmFjZWJvb2sgb3IgZ29vZ2xlIG9yIHByaXZhdGUgbG9jYWwNCj5pZC9wdyBhdXRoZW50aWNhdGlv bi4pIFRoZSB1c2VyIHRoZW4gZ2V0cyB0byBwaWNrIG9uZSwgYW5kIHRoZW4NCj5hdXRoZW50aWNh dGUgd2l0aCBhIGNvcnJlc3BvbmRpbmcgQVMuIEkgYW0gdGhpbmtpbmcgdGhlIFNJUCBwcm9jZXNz DQo+Y291bGQgYmUgdGhlIHNhbWUuIFRoZSBhbHRlcm5hdGl2ZXMgb2ZmZXJlZCB0byB0aGUgdXNl ciB3b3VsZCBjb3JyZXNwb25kDQo+dG8gYWxsIHRoZSBjaGFsbGVuZ2VzIChib3RoIEJlYXJlciBh bmQgZGlnZXN0KSBmb3IgYSBzaW5nbGUgcmVhbG0uDQo+DQo+SXMgdGhpcyBhIHVzZSBjYXNlIHlv dSBoYXZlIGluIG1pbmQgYXMgYmVpbmcgY292ZXJlZD8NCkkgYXNzdW1lIHRoYXQgdGhlIHJlZ2lz dHJhciBjb3VsZCBvZmZlciBtdWx0aXBsZSBBUyhzKSwgYW5kIHRoZW4gdGhlIHVzZXIgY2hvb3Nl cyBvbmUgdGhhdCBpdCBoYXMgYSByZWxhdGlvbnNoaXAgd2l0aC4gRXNwZWNpYWxseSBpZiB0aGUg b3BlcmF0b3IgaXMgdXNpbmcgM3JkIHBhcnR5IEFTKHMpLCBsaWtlIEZhY2Vib29rLCBHb29nbGUg ZXRjLg0KDQpIb3dldmVyLCB0aGUgb3BlcmF0b3IgbWlnaHQgYWxzbyB1c2UgaXRzIG93biBBUyAo b3IgaGF2ZSBhIHJlbGF0aW9uc2hpcCB3aXRoIGEgc3BlY2lmaWMgM3JkIHBhcnR5IEFTKSwgd2hl cmUgdGhlIHVzZXIgcmVsYXRpb25zaGlwIHdpdGggdGhlIEFTIGlzIHBhcnQgb2YgdGhlIHVzZXIg c3Vic2NyaXB0aW9uLCBhbmQgaW4gdGhhdCBjYXNlIHRoZSByZWdpc3RyYXIgbW9zdCBsaWtlbHkg d2lsbCBvbmx5IHJldHVybiB0aGF0IEFTIChiZWNhdXNlIGl0IGtub3dzIHRoZSB1c2VyIGhhcyBh IHJlbGF0aW9uc2hpcCB3aXRoIGl0KS4NCg0KPihPZiBjb3Vyc2UsIGl0IG1heSBiZSB0aGF0IGEg VUEgaXMgYnVpbGQgdG8gbm90IGRlcGVuZCBvbiB0aGUgdXNlciBmb3INCj5hdXRoZW50aWNhdGlv bi4gSW4gdGhhdCBjYXNlIGl0IG11c3QgYmUgcHJlY29uZmlndXJlZCB3aXRoIGNyZWRlbnRpYWxz Lg0KPkJ1dCB0aGF0IGlzbid0IHJlYWxseSBubyBkaWZmZXJlbnQgZnJvbSBwcmVsb2FkaW5nIHRo ZSBjcmVkZW50aWFsIGNhY2hlLi4NCj5BbmQgSSBndWVzcyBpdCBtaWdodCBiZSBjb25maWd1cmVk IHRvIG9ubHkgd29yayB3aXRoIGEgc2luZ2xlIEFTLikNCj4NCj5CYXNlZCBvbiB5b3VyIHVwZGF0 ZXMsIEkgdGhpbmsgSSBnZXQgaXQgdGhhdCB0aGUgcmVzdWx0IGZyb20gdGhlIEFTIHRvDQo+dGhl IFVBIGFjY2VzcywgcmVmcmVzaCBhbmQgcG9zc2libGUgaWQgdG9rZW5zLCB0aGF0IG9ubHkgdGhl IGFjY2Vzcw0KPnRva2VuIGlzIGRlc3RpbmVkIHRvIGJlIGluY2x1ZGVkIGluIGJlYXJlciBjcmVk ZW50aWFscy4gVGhlIFVBIG11c3Qga25vdw0KPnRvIHVzZSB0aGUgcmVmcmVzaCB0b2tlbiB0byBy ZWZyZXNoIGl0cyBhY2Nlc3MgdG9rZW4uIEFuZCB0aGUgVUEgbWF5DQo+a25vdyB0byB1c2UgdGhl IElEIHRva2VuIGZvciBzb21ldGhpbmcgKHdoYXQ/KS4gIElzIGFueSBvZiB0aGlzDQo+a25vd2xl ZGdlIEFTLXNwZWNpZmljLCBvciBpcyBpdCBhbGwgZ2VuZXJpYz8NCkl0IGlzIHBhcnQgb2YgdGhl IHN0YW5kYXJkaXplZCBPQXV0aCBwcm9jZWR1cmVzLg0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0K DQoNCg0KPiBSZWdhcmRzLA0KPiAgIFJpZmFhdA0KPg0KPg0KPiBPbiBUaHUsIE9jdCAyNCwgMjAx OSBhdCA4OjUyIFBNIDxpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmcNCj4gPG1haWx0bzppbnRlcm5l dC1kcmFmdHNAaWV0Zi5vcmc+PiB3cm90ZToNCj4NCj4NCj4gICAgIEEgTmV3IEludGVybmV0LURy YWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0cw0KPiAgICAg ZGlyZWN0b3JpZXMuDQo+ICAgICBUaGlzIGRyYWZ0IGlzIGEgd29yayBpdGVtIG9mIHRoZSBTZXNz aW9uIEluaXRpYXRpb24gUHJvdG9jb2wgQ29yZSBXRw0KPiAgICAgb2YgdGhlIElFVEYuDQo+DQo+ ICAgICAgICAgICAgICBUaXRsZSAgICAgICAgICAgOiBUaGlyZC1QYXJ0eSBUb2tlbi1iYXNlZCBB dXRoZW50aWNhdGlvbg0KPiAgICAgYW5kIEF1dGhvcml6YXRpb24gZm9yIFNlc3Npb24gSW5pdGlh dGlvbiBQcm90b2NvbCAoU0lQKQ0KPiAgICAgICAgICAgICAgQXV0aG9ycyAgICAgICAgIDogUmlm YWF0IFNoZWtoLVl1c2VmDQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaHJpc3Rl ciBIb2xtYmVyZw0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVmljdG9yIFBhc2N1 YWwNCj4gICAgICAgICAgICAgIEZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtc2lwY29yZS1z aXAtdG9rZW4tYXV0aG56LTA1LnR4dA0KPiAgICAgICAgICAgICAgUGFnZXMgICAgICAgICAgIDog MTQNCj4gICAgICAgICAgICAgIERhdGUgICAgICAgICAgICA6IDIwMTktMTAtMjQNCj4NCj4gICAg IEFic3RyYWN0Og0KPiAgICAgICAgIFRoaXMgZG9jdW1lbnQgdXBkYXRlcyBSRkMgMzI2MSBhbmQg ZGVmaW5lcyBhIG1lY2hhbmlzbSBmb3IgU0lQLCB0aGF0DQo+ICAgICAgICAgaXMgYmFzZWQgb24g dGhlIE9BdXRoIDIuMCBhbmQgT3BlbklEIENvbm5lY3QgQ29yZSAxLjANCj4gICAgIHNwZWNpZmlj YXRpb25zLA0KPiAgICAgICAgIHRvIGVuYWJsZSB0aGUgZGVsZWdhdGlvbiBvZiB0aGUgdXNlciBh dXRoZW50aWNhdGlvbiBhbmQgU0lQDQo+ICAgICAgICAgcmVnaXN0cmF0aW9uIGF1dGhvcml6YXRp b24gdG8gYSBkZWRpY2F0ZWQgdGhpcmQtcGFydHkgZW50aXR5IHRoYXQgaXMNCj4gICAgICAgICBz ZXBhcmF0ZSBmcm9tIHRoZSBTSVAgbmV0d29yayBlbGVtZW50cyB0aGF0IHByb3ZpZGUgdGhlIFNJ UCBzZXJ2aWNlLg0KPg0KPg0KPiAgICAgVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2Ug Zm9yIHRoaXMgZHJhZnQgaXM6DQo+ICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1pZXRmLXNpcGNvcmUtc2lwLXRva2VuLWF1dGhuei8NCj4NCj4gICAgIFRoZXJlIGFy ZSBhbHNvIGh0bWxpemVkIHZlcnNpb25zIGF2YWlsYWJsZSBhdDoNCj4gICAgIGh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNpcGNvcmUtc2lwLXRva2VuLWF1dGhuei0wNQ0K PiAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1z aXBjb3JlLXNpcC10b2tlbi1hdXRobnotMDUNCj4gICAgIDxodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtc2lwY29yZS1zaXAtdG9rZW4tYXV0aG56LTA1Pg0K Pg0KPiAgICAgQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0 Og0KPiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtc2lw Y29yZS1zaXAtdG9rZW4tYXV0aG56LTA1DQo+DQo+DQo+ICAgICBQbGVhc2Ugbm90ZSB0aGF0IGl0 IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZg0KPiAgICAgc3Vi bWlzc2lvbg0KPiAgICAgdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2 YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZw0KPiAgICAgPGh0dHA6Ly90b29scy5pZXRmLm9yZz4u DQo+DQo+ICAgICBJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255bW91 cyBGVFAgYXQ6DQo+ICAgICBmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KPg0K PiAgICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4g ICAgIHNpcGNvcmUgbWFpbGluZyBsaXN0DQo+ICAgICBzaXBjb3JlQGlldGYub3JnIDxtYWlsdG86 c2lwY29yZUBpZXRmLm9yZz4NCj4gICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vc2lwY29yZQ0KPg0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KPiBzaXBjb3JlIG1haWxpbmcgbGlzdA0KPiBzaXBjb3JlQGlldGYub3Jn DQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2lwY29yZQ0KPg0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc2lwY29yZSBt YWlsaW5nIGxpc3QNCnNpcGNvcmVAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vc2lwY29yZQ0K --_000_F37CF6338E704526865FE6DEE4B9BCBEericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <6BC501D7660F6F42B19F36ECA4214C86@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNv bm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6 bXNvbm9ybWFsOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAu ODVwdCAyLjBjbSA3MC44NXB0IDIuMGNtO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkZJIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlBh dWwsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5BcmUgeW91IG9rIHdpdGggdGhlIGNsYXJpZmljYXRpb25z IGJlbG93Pw0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+V2UgYXJlIHRyeWluZyB0 byBtb3ZlIHRoZSBkcmFmdCB0byBXR0xDLCBzbyB3ZSB3b3VsZCBhcHByZWNpYXRlIGlmIHlvdSBj b3VsZCByZXBseS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5SZWdhcmRzLDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkNocmlzdGVyPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5n dWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNt IDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPnNpcGNvcmUgJmx0O3NpcGNvcmUtYm91bmNlc0BpZXRm Lm9yZyZndDsgb24gYmVoYWxmIG9mIENocmlzdGVyIEhvbG1iZXJnICZsdDtjaHJpc3Rlci5ob2xt YmVyZz00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZyZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+ V2VkbmVzZGF5LCAzMCBPY3RvYmVyIDIwMTkgYXQgMjEuMTM8YnI+DQo8Yj5UbzogPC9iPiZxdW90 O3BreXppdmF0QGFsdW0ubWl0LmVkdSZxdW90OyAmbHQ7cGt5eml2YXRAYWx1bS5taXQuZWR1Jmd0 OywgJnF1b3Q7c2lwY29yZUBpZXRmLm9yZyZxdW90OyAmbHQ7c2lwY29yZUBpZXRmLm9yZyZndDs8 YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtzaXBjb3JlXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRm LXNpcGNvcmUtc2lwLXRva2VuLWF1dGhuei0wNS50eHQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2NvbG9yOmJsYWNrIj5IaSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRv bToxMi4wcHQiPiZndDtJJ20gc3RpbGwgc3RydWdnbGluZyB0byB1bmRlcnN0YW5kIHdoYXQgdGhl IGV4cGVjdGF0aW9ucyBhcmUgb2YgdGhlIFVBDQo8YnI+DQomZ3Q7aW4gdGhpcyBwcm9jZXNzLjxi cj4NCiZndDs8YnI+DQomZ3Q7SUlVQywgd2hlbiB0aGUgcmVnaXN0cmFyL3NlcnZlci9wcm94eSBn ZW5lcmF0ZXMgYSAmcXVvdDtCZWFyZXImcXVvdDsgY2hhbGxlbmdlIDxicj4NCiZndDtzcGVjaWZ5 aW5nIGEgcGFydGljdWxhciBBUywgdGhhdCBpbXBsaWVzIHRoYXQgaXQgaGFzIGtub3dsZWRnZSBv ZiB0aGF0IDxicj4NCiZndDtBUyBhbmQgaG93IHRvIGRlYWwgd2l0aCBpdC4gQW5kIGl0IG1heSB3 ZWxsIGhhdmUgcmVsYXRpb25zaGlwcyB3aXRoIDxicj4NCiZndDttdWx0aXBsZSBBU3MsIGFuZCBj aGFsbGVuZ2UgdXNpbmcgdGhlbSBhbGwuIEFuZCB0aGVyZSBpcyBhbiBhc3N1bXB0aW9uIDxicj4N CiZndDt0aGF0IGVpdGhlciBVQSBvciB0aGUgKnVzZXIqIG9mIHRoZSBVQSBtdXN0IGhhdmUgYSBy ZWxhdGlvbnNoaXAgd2l0aCBhdCA8YnI+DQomZ3Q7bGVhc3Qgb24gb2YgdGhlIEFTcyB0byB1c2Ug Zm9yIGF1dGhlbnRpY2F0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Q29ycmVjdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KJmd0 O015IHRob3VnaHQgaXMgdGhhdCBjb21tb25seSB0aGUgVUEgaXRzZWxmICp3b24ndCogaGF2ZSBh IHJlbGF0aW9uc2hpcCA8YnI+DQomZ3Q7d2l0aCB0aGUgQVMuIFJhdGhlciBpdCB3aWxsIGV4cGVj dCB0aGUgdXNlciB0byBiZSB0aGUgb25lIHRvIGhhdmUgdGhhdC4gPGJyPg0KJmd0O0luIHRoaXMg Y2FzZSwgY2FuIHRoZSBVQSBoYXZlIGdlbmVyaWMgY29kZSB0aGF0IGRlYWxzIHdpdGggYW55IHBv c3NpYmxlIEFTPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+WWVzLiBUaGUgaW50ZXJmYWNlIGJldHdlZW4gdGhlIFVBIGFuZCB0aGUgQVMgaXMgc3Rh bmRhcmRpemVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPiZndDtXaXRoIHdlYiBhdXRoZW50 aWNhdGlvbiBJIGNvbW1vbmx5IGV4cGVyaWVuY2UgYW4gYXV0aGVudGljYXRpb24gcG9wdXANCjxi cj4NCiZndDt0aGF0IG9mZmVycyBhbHRlcm5hdGl2ZXMuIChFLmcuLCBmYWNlYm9vayBvciBnb29n bGUgb3IgcHJpdmF0ZSBsb2NhbCA8YnI+DQomZ3Q7aWQvcHcgYXV0aGVudGljYXRpb24uKSBUaGUg dXNlciB0aGVuIGdldHMgdG8gcGljayBvbmUsIGFuZCB0aGVuIDxicj4NCiZndDthdXRoZW50aWNh dGUgd2l0aCBhIGNvcnJlc3BvbmRpbmcgQVMuIEkgYW0gdGhpbmtpbmcgdGhlIFNJUCBwcm9jZXNz IDxicj4NCiZndDtjb3VsZCBiZSB0aGUgc2FtZS4gVGhlIGFsdGVybmF0aXZlcyBvZmZlcmVkIHRv IHRoZSB1c2VyIHdvdWxkIGNvcnJlc3BvbmQgPGJyPg0KJmd0O3RvIGFsbCB0aGUgY2hhbGxlbmdl cyAoYm90aCBCZWFyZXIgYW5kIGRpZ2VzdCkgZm9yIGEgc2luZ2xlIHJlYWxtLjxicj4NCiZndDs8 YnI+DQomZ3Q7SXMgdGhpcyBhIHVzZSBjYXNlIHlvdSBoYXZlIGluIG1pbmQgYXMgYmVpbmcgY292 ZXJlZD88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkkgYXNzdW1lIHRoYXQgdGhlIHJlZ2lzdHJhciBjb3VsZCBvZmZlciBtdWx0aXBsZSBBUyhzKSwg YW5kIHRoZW4gdGhlIHVzZXIgY2hvb3NlcyBvbmUgdGhhdCBpdCBoYXMgYSByZWxhdGlvbnNoaXAg d2l0aC4gRXNwZWNpYWxseSBpZiB0aGUgb3BlcmF0b3IgaXMgdXNpbmcgM3JkIHBhcnR5IEFTKHMp LCBsaWtlIEZhY2Vib29rLCBHb29nbGUgZXRjLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ib3dldmVyLCB0aGUgb3BlcmF0b3IgbWlnaHQgYWxz byB1c2UgaXRzIG93biBBUyAob3IgaGF2ZSBhIHJlbGF0aW9uc2hpcCB3aXRoIGEgc3BlY2lmaWMg M3JkIHBhcnR5IEFTKSwgd2hlcmUgdGhlIHVzZXIgcmVsYXRpb25zaGlwIHdpdGggdGhlIEFTIGlz IHBhcnQgb2YgdGhlIHVzZXIgc3Vic2NyaXB0aW9uLCBhbmQgaW4gdGhhdCBjYXNlIHRoZSByZWdp c3RyYXIgbW9zdCBsaWtlbHkgd2lsbCBvbmx5IHJldHVybg0KIHRoYXQgQVMgKGJlY2F1c2UgaXQg a25vd3MgdGhlIHVzZXIgaGFzIGEgcmVsYXRpb25zaGlwIHdpdGggaXQpLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJv dHRvbToxMi4wcHQiPiZndDsoT2YgY291cnNlLCBpdCBtYXkgYmUgdGhhdCBhIFVBIGlzIGJ1aWxk IHRvIG5vdCBkZXBlbmQgb24gdGhlIHVzZXIgZm9yDQo8YnI+DQomZ3Q7YXV0aGVudGljYXRpb24u IEluIHRoYXQgY2FzZSBpdCBtdXN0IGJlIHByZWNvbmZpZ3VyZWQgd2l0aCBjcmVkZW50aWFscy4g PGJyPg0KJmd0O0J1dCB0aGF0IGlzbid0IHJlYWxseSBubyBkaWZmZXJlbnQgZnJvbSBwcmVsb2Fk aW5nIHRoZSBjcmVkZW50aWFsIGNhY2hlLi4gPGJyPg0KJmd0O0FuZCBJIGd1ZXNzIGl0IG1pZ2h0 IGJlIGNvbmZpZ3VyZWQgdG8gb25seSB3b3JrIHdpdGggYSBzaW5nbGUgQVMuKTxicj4NCiZndDs8 YnI+DQomZ3Q7QmFzZWQgb24geW91ciB1cGRhdGVzLCBJIHRoaW5rIEkgZ2V0IGl0IHRoYXQgdGhl IHJlc3VsdCBmcm9tIHRoZSBBUyB0byA8YnI+DQomZ3Q7dGhlIFVBIGFjY2VzcywgcmVmcmVzaCBh bmQgcG9zc2libGUgaWQgdG9rZW5zLCB0aGF0IG9ubHkgdGhlIGFjY2VzcyA8YnI+DQomZ3Q7dG9r ZW4gaXMgZGVzdGluZWQgdG8gYmUgaW5jbHVkZWQgaW4gYmVhcmVyIGNyZWRlbnRpYWxzLiBUaGUg VUEgbXVzdCBrbm93IDxicj4NCiZndDt0byB1c2UgdGhlIHJlZnJlc2ggdG9rZW4gdG8gcmVmcmVz aCBpdHMgYWNjZXNzIHRva2VuLiBBbmQgdGhlIFVBIG1heSA8YnI+DQomZ3Q7a25vdyB0byB1c2Ug dGhlIElEIHRva2VuIGZvciBzb21ldGhpbmcgKHdoYXQ/KS4mbmJzcDsgSXMgYW55IG9mIHRoaXMg PGJyPg0KJmd0O2tub3dsZWRnZSBBUy1zcGVjaWZpYywgb3IgaXMgaXQgYWxsIGdlbmVyaWM/PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JdCBpcyBw YXJ0IG9mIHRoZSBzdGFuZGFyZGl6ZWQgT0F1dGggcHJvY2VkdXJlcy48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Q2hyaXN0ZXI8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+ DQomZ3Q7IFJlZ2FyZHMsPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDtSaWZhYXQ8YnI+DQomZ3Q7IDxi cj4NCiZndDsgPGJyPg0KJmd0OyBPbiBUaHUsIE9jdCAyNCwgMjAxOSBhdCA4OjUyIFBNICZsdDtp bnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmcgPGJyPg0KJmd0OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlu dGVybmV0LWRyYWZ0c0BpZXRmLm9yZyI+bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwv YT4mZ3Q7Jmd0OyB3cm90ZTo8YnI+DQomZ3Q7IDxicj4NCiZndDsgPGJyPg0KJmd0OyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0 aGUgb24tbGluZSBJbnRlcm5ldC1EcmFmdHM8YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IGRpcmVjdG9yaWVzLjxicj4NCiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVGhpcyBk cmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgU2Vzc2lvbiBJbml0aWF0aW9uIFByb3RvY29sIENv cmUgV0c8YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IG9mIHRoZSBJRVRGLjxicj4N CiZndDsgPGJyPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgVGl0bGUmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOzogVGhpcmQtUGFydHkgVG9rZW4tYmFzZWQgQXV0aGVudGljYXRpb248YnI+DQomZ3Q7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGFuZCBBdXRob3JpemF0aW9uIGZvciBTZXNzaW9uIElu aXRpYXRpb24gUHJvdG9jb2wgKFNJUCk8YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBBdXRob3JzJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOzogUmlmYWF0IFNoZWtoLVl1c2VmPGJyPg0KJmd0OyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Q2hyaXN0ZXIgSG9sbWJlcmc8YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBWaWN0b3IgUGFzY3VhbDxicj4NCiZn dDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7IEZpbGVuYW1lJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDogZHJhZnQtaWV0Zi1zaXBj b3JlLXNpcC10b2tlbi1hdXRobnotMDUudHh0PGJyPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgUGFnZXMmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzogMTQ8YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBEYXRlJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgOiAyMDE5LTEwLTI0PGJyPg0KJmd0OyA8 YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEFic3RyYWN0Ojxicj4NCiZndDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7ICZuYnNwO1RoaXMgZG9jdW1lbnQgdXBk YXRlcyBSRkMgMzI2MSBhbmQgZGVmaW5lcyBhIG1lY2hhbmlzbSBmb3IgU0lQLCB0aGF0PGJyPg0K Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsgJm5ic3A7aXMgYmFzZWQg b24gdGhlIE9BdXRoIDIuMCBhbmQgT3BlbklEIENvbm5lY3QgQ29yZSAxLjA8YnI+DQomZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHNwZWNpZmljYXRpb25zLDxicj4NCiZndDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7ICZuYnNwO3RvIGVuYWJsZSB0aGUgZGVsZWdhdGlv biBvZiB0aGUgdXNlciBhdXRoZW50aWNhdGlvbiBhbmQgU0lQPGJyPg0KJmd0OyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsgJm5ic3A7cmVnaXN0cmF0aW9uIGF1dGhvcml6YXRp b24gdG8gYSBkZWRpY2F0ZWQgdGhpcmQtcGFydHkgZW50aXR5IHRoYXQgaXM8YnI+DQomZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyAmbmJzcDtzZXBhcmF0ZSBmcm9tIHRo ZSBTSVAgbmV0d29yayBlbGVtZW50cyB0aGF0IHByb3ZpZGUgdGhlIFNJUCBzZXJ2aWNlLjxicj4N CiZndDsgPGJyPg0KJmd0OyA8YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFRoZSBJ RVRGIGRhdGF0cmFja2VyIHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOjxicj4NCiZndDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtaWV0Zi1zaXBjb3JlLXNpcC10b2tlbi1hdXRobnovIj4NCmh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2lwY29yZS1zaXAtdG9rZW4tYXV0 aG56LzwvYT48YnI+DQomZ3Q7IDxicj4NCiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVGhl cmUgYXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Ojxicj4NCiZndDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtc2lwY29yZS1zaXAtdG9rZW4tYXV0aG56LTA1Ij4NCmh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXNpcGNvcmUtc2lwLXRva2VuLWF1dGhuei0wNTwvYT48 YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi4ub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtc2lwY29yZS1zaXAtdG9rZW4tYXV0 aG56LTA1Ij4NCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi4ub3JnL2RvYy9odG1sL2RyYWZ0LWll dGYtc2lwY29yZS1zaXAtdG9rZW4tYXV0aG56LTA1PC9hPjxicj4NCiZndDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJmx0OzxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9j L2h0bWwvZHJhZnQtaWV0Zi1zaXBjb3JlLXNpcC10b2tlbi1hdXRobnotMDUiPmh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1zaXBjb3JlLXNpcC10b2tlbi1h dXRobnotMDU8L2E+Jmd0Ozxicj4NCiZndDsgPGJyPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6PGJy Pg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8YSBocmVmPSJodHRwczovL3d3dy5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1zaXBjb3JlLXNpcC10b2tlbi1hdXRobnotMDUi Pg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtc2lwY29yZS1z aXAtdG9rZW4tYXV0aG56LTA1PC9hPjxicj4NCiZndDsgPGJyPg0KJmd0OyA8YnI+DQomZ3Q7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3Vw bGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mPGJyPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBzdWJtaXNzaW9uPGJyPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB1bnRp bCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmll dGYub3JnPGJyPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7PGEgaHJlZj0iaHR0 cDovL3Rvb2xzLmlldGYub3JnIj5odHRwOi8vdG9vbHMuaWV0Zi5vcmc8L2E+Jmd0Oy48YnI+DQom Z3Q7IDxicj4NCiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgSW50ZXJuZXQtRHJhZnRzIGFy ZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Ojxicj4NCiZndDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0iZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0 cy8iPmZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvPC9hPjxicj4NCiZndDsgPGJy Pg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXzxicj4NCiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg c2lwY29yZSBtYWlsaW5nIGxpc3Q8YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHNp cGNvcmVAaWV0Zi5vcmcgJmx0OzxhIGhyZWY9Im1haWx0bzpzaXBjb3JlQGlldGYub3JnIj5tYWls dG86c2lwY29yZUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyA8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NpcGNv cmUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2lwY29yZTwvYT48YnI+ DQomZ3Q7IDxicj4NCiZndDsgPGJyPg0KJmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXzxicj4NCiZndDsgc2lwY29yZSBtYWlsaW5nIGxpc3Q8YnI+DQom Z3Q7IHNpcGNvcmVAaWV0Zi5vcmc8YnI+DQomZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vc2lwY29yZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9zaXBjb3JlPC9hPjxicj4NCiZndDsgPGJyPg0KPGJyPg0KX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzaXBjb3JlIG1haWxpbmcg bGlzdDxicj4NCnNpcGNvcmVAaWV0Zi5vcmc8YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NpcGNvcmUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vc2lwY29yZTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_F37CF6338E704526865FE6DEE4B9BCBEericssoncom_-- From nobody Thu Nov 14 17:56:35 2019 Return-Path: X-Original-To: sipcore@ietf.org Delivered-To: sipcore@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B190212001E; Thu, 14 Nov 2019 17:56:27 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.110.1 Auto-Submitted: auto-generated Precedence: bulk Cc: The IESG , Jean Mahoney , adam@nostrum.com, sipcore-chairs@ietf.org, sipcore@ietf.org, mahoney@nostrum.com, draft-ietf-sipcore-digest-scheme@ietf.org, rfc-editor@rfc-editor.org Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Message-ID: <157378298772.11542.14599529102850407275.idtracker@ietfa.amsl.com> Date: Thu, 14 Nov 2019 17:56:27 -0800 Archived-At: Subject: [sipcore] Protocol Action: 'The Session Initiation Protocol (SIP) Digest Authentication Scheme' to Proposed Standard (draft-ietf-sipcore-digest-scheme-15.txt) X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 01:56:28 -0000 The IESG has approved the following document: - 'The Session Initiation Protocol (SIP) Digest Authentication Scheme' (draft-ietf-sipcore-digest-scheme-15.txt) as Proposed Standard This document is the product of the Session Initiation Protocol Core Working Group. The IESG contact persons are Adam Roach, Alexey Melnikov and Barry Leiba. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-sipcore-digest-scheme/ Technical Summary The authentication framework for the Session Initiation Protocol (SIP, RFC 3261) closely parallels that of the Hypertext Transfer Protocol (HTTP) Digest Access Authentication (RFC 2617). RFC 2617 was obsoleted by RFC 7616, which introduces more secure digest algorithms (e.g., SHA-256 and SHA-512-256). This document updates the authentication scheme used by SIP to add support for these more secure algorithms that are listed in the "Hash Algorithms for HTTP Digest Authentication" registry created by RFC 7616. Although the MD5 algorithm is considered cryptographically broken, it is still supported for backward compatibility. Working Group Summary Work on this topic (initially as draft-yusef-sipcore-digest-scheme) started in January 2014, somewhat in parallel with the HTTP Digest Access Authentication work [RFC7616]. The SIPCORE participants who voiced an opinion thought it was a good idea, and provided careful reviews. The draft went through multiple iterations as feedback was incorporated. There was no pushback against the concept on-list; however, at the London IETF 89 SIPCORE WG session, it was discussed that SIP authentication in general needed an overhaul, not just the digest scheme. While some work went into that effort, both the new work and draft-yusef-sipcore-digest-scheme expired about six months later. In 2017 the author resurrected the draft, and again the draft received support and feedback, but then the draft expired later in the year. It was resurrected again in spring 2019, and adopted as a WG item. Document Quality The content of this document has been implemented and deployed in mobile IMS networks. Several reviewers provided substantial feedback and they have been thanked in the Acknowledgments section. The content of the document does not require expert review. Personnel Document Shepherd: Jean Mahoney Responsible Area Director: Adam Roach From nobody Sun Nov 17 04:23:12 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9829A1200F5 for ; Sun, 17 Nov 2019 04:23:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TNUW2LG5PGHO for ; Sun, 17 Nov 2019 04:23:09 -0800 (PST) Received: from mail-pg1-x52f.google.com (mail-pg1-x52f.google.com [IPv6:2607:f8b0:4864:20::52f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B7A0120105 for ; Sun, 17 Nov 2019 04:23:07 -0800 (PST) Received: by mail-pg1-x52f.google.com with SMTP id e17so857767pgd.7 for ; Sun, 17 Nov 2019 04:23:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=rlhY5H7oVuHmMSJQT4FOeVQCwPthDK7tDkwH8PX7bVs=; b=i7KXXUuYiLwyFR/QyxVWauACuKVQUJg1yrLoglPg38RYpRRQfJH6Q9VTLryBz0ZsNk 0Lc2014I0ptqbIMpIHdrcWZO3p5g2OF9xJJHmvb1ULdCNBAgcDA4gOK1YoXPqCka7YhX xqQ2tDucaAKAIebfVT4raMhWnKFlazw8DuWSM29vXaFtOJsJlzZ2pszH3mJHOh8eE0rY xqpsfzYRDdMydjDPTJLL8A0AS4s7s/dkSuOPAcnFVAuorBaRck0YKGdI132cCqsqKk5+ 4t2MGFI1ENyxNiUw3/J1ChqlTXtjFP66MgtKWvz3K1P+8wZpkRoTdPPw1PZCofoLHS9p FKMA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=rlhY5H7oVuHmMSJQT4FOeVQCwPthDK7tDkwH8PX7bVs=; b=Fte2c0PWl5DjPwE0ewMdfTT7Z6vlNEmYfD2wCbk1Cf1wj3pr/BCNF88QW0BTK9+74d OaGMgCpyfuhYQiMVjYMyHq/hQRxAqUa6HmsSoag6oboOLDTegsMUFD6RhbYFoaC+Athw Q8F55nDNcv87J8PWiUSo+TWsARKA3/3bj9NtJ6vw6pvCUjg6uvnstoZo+/IhKGaBsNoJ w0qqxWYbTl8GebK/rAKhN2Pu/f8iEcq/umooZ0O7vWD9C6GLEWgLoonZ4BZNM7D2a4xq RbRbcBYlEVRJeDeAsB8yTXvhrpJbhJLpvHNtgckNE0qWUqL/2ggGvj6UWSCpaNE6W28p 3ByQ== X-Gm-Message-State: APjAAAVibmuA8It5abZOz/5M3JilOiUgqbo9/lHLE0Yo2JEcDePiP+24 yGLJD+ouW0HjazeYXTlZAmwvBDFLa/k= X-Google-Smtp-Source: APXvYqxCcGLiz1hJFCx7hAPoMRvGfytQYscoZEYE4u7CqhD0/NFybhQFF0D4vY4ZgMqTbPntpPCxcA== X-Received: by 2002:a63:ca05:: with SMTP id n5mr7913735pgi.187.1573993386360; Sun, 17 Nov 2019 04:23:06 -0800 (PST) Received: from [172.20.6.138] ([203.116.192.194]) by smtp.gmail.com with ESMTPSA id 31sm16597244pgy.63.2019.11.17.04.23.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 17 Nov 2019 04:23:05 -0800 (PST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) From: Chris Wendt In-Reply-To: <157290835855.13964.5264316371267230763.idtracker@ietfa.amsl.com> Date: Sun, 17 Nov 2019 20:23:03 +0800 Content-Transfer-Encoding: quoted-printable Message-Id: References: <157290835855.13964.5264316371267230763.idtracker@ietfa.amsl.com> To: sipcore@ietf.org, IETF STIR Mail List X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [sipcore] New Version Notification for draft-wendt-sipcore-callinfo-rcd-00.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Nov 2019 12:23:10 -0000 Hi All, I=E2=80=99m cross posting this to both STIR and Sipcore mail lists. For = tomorrow=E2=80=99s STIR session we will be discussing the new = draft-ietf-stir-passport-rcd draft. As discussed in the last STIR = virtual interim meeting, we have proposed a new Call-Info parameter = specific to including =E2=80=9Cjcard=E2=80=9D to support a more standard = way of incorporating signed Rich Call Data, supporting compact form and = other uses. The link to this draft is included below. Please have a look. On the Sipcore side, we will want to discuss the = adoption of this draft, but i think there is an overlap in audiences in = both working groups, so hopefully we can start that discussion tomorrow. Thanks! -Chris > On Nov 5, 2019, at 6:59 AM, internet-drafts@ietf.org wrote: >=20 >=20 > A new version of I-D, draft-wendt-sipcore-callinfo-rcd-00.txt > has been successfully submitted by Chris Wendt and posted to the > IETF repository. >=20 > Name: draft-wendt-sipcore-callinfo-rcd > Revision: 00 > Title: SIP Call-Info Parameters for Rich Call Data > Document date: 2019-11-04 > Group: Individual Submission > Pages: 12 > URL: = https://www.ietf.org/internet-drafts/draft-wendt-sipcore-callinfo-rcd-00.t= xt > Status: = https://datatracker.ietf.org/doc/draft-wendt-sipcore-callinfo-rcd/ > Htmlized: = https://tools.ietf.org/html/draft-wendt-sipcore-callinfo-rcd-00 > Htmlized: = https://datatracker.ietf.org/doc/html/draft-wendt-sipcore-callinfo-rcd >=20 >=20 > Abstract: > This document describes a SIP Call-Info parameter defined to include > rich data associated with the identity of the calling party that can > be rendered to called party for providing more useful information > about the caller or the specific reason for the call. This includes > extended comprehensive information about the caller such as what a > jCard object can represent for describing the calling party. The > element defined for this purpose is intended to be extensible to > accommodate related information about calls that helps people decide > whether to pick up the phone and additionally with the use of jCard > be compatible with the STIR/PASSporT Rich Call Data framework. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 From nobody Sun Nov 17 08:07:40 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FC66120123; Sun, 17 Nov 2019 08:07:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 77Z_ZOur87aw; Sun, 17 Nov 2019 08:07:35 -0800 (PST) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40081.outbound.protection.outlook.com [40.107.4.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 848AD12006D; Sun, 17 Nov 2019 08:07:35 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NbiSmEOLPTDx6PITrBU0QC+QZC6XLuiCyMpmqM0IMHEWhi9qFtA/R87OFijbUGqhYXCGK4nIJUrViD5jAKPem03SkofTd4XTH/KZGmYqtyGYsXyUdcSWO2gVlni0g1oFOn41nbWvNjt1Z8aaojNJTBb7flY+WdtIMj7N9S0mPgBn6EckhKpMOMLsTI60xqXVbX4XuLOwL4yN1UZIRhl7rsNaSpL1Gogxw8e0s6dV802pqinaldtLfk/q5rns/6aL7fHnTn0DsT6XgqWnrYzF51dwyFrNxvXHvowCAsp1stU2uPqyvDZlKOBMgwPmOCHwibXYiNxw3VOhNWTSywSQ5A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I1HrKc0bXmTF0q7bj4/roZw1+ZdVaxo57m9cO/akIQY=; b=UuAm319KZ9+PdS+vp82E5cdaSQZdOI3Pw44Nr1QKN48fSto/d1cA+g7CdzhCdngZfcBMHwXbfw2N+4rAH77jts3iI0fNYocOj5rL77rLXN6u3N8qhPVvkEUdnAwqLXbudjBgUncl2obxSC2BRvWvc8RVFFKsH9jMcdalgTF+L/KMj8ljYvDTdpRNzuJItE0V+/vbY7rCnUeR0ywVZCDIoUqS2m0WB1NXkmEz/sPvO+aCP+bfdLXjONeWsz2N7OM7ys14NEsd7fd+GlV21UdXD2HGRl6+cf73eL7wamEIe2T4ojZQIS3+pU3ZrbsACb6HLhlMogtMwH8lHO6uxCtrBw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I1HrKc0bXmTF0q7bj4/roZw1+ZdVaxo57m9cO/akIQY=; b=b5jz7q4pvpkIZFa7c1rEnM0NxvJzges0l82CQ+naGuMXcxDsanj4dvZlGT0WrFNpvkb9ksN83Nzk6B8TiwHmCOrPcjIhVWnzNsbzNqsNh4GcL5ts0+HykzYCqqk6T73T+6o9Iuk8JnWZIp9FBcyi9nb4Ob2C+WS3G1xfWTRqlT8= Received: from VI1PR07MB3167.eurprd07.prod.outlook.com (10.175.243.17) by VI1PR07MB5887.eurprd07.prod.outlook.com (20.177.200.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.9; Sun, 17 Nov 2019 16:07:33 +0000 Received: from VI1PR07MB3167.eurprd07.prod.outlook.com ([fe80::41a:f6a0:9660:bc09]) by VI1PR07MB3167.eurprd07.prod.outlook.com ([fe80::41a:f6a0:9660:bc09%3]) with mapi id 15.20.2474.012; Sun, 17 Nov 2019 16:07:32 +0000 From: Christer Holmberg To: Chris Wendt , "sipcore@ietf.org" , IETF STIR Mail List Thread-Topic: [sipcore] New Version Notification for draft-wendt-sipcore-callinfo-rcd-00.txt Thread-Index: AQHVnUHO+wVgBOn0NkuoP4QV/vy346eQDc0A Date: Sun, 17 Nov 2019 16:07:32 +0000 Message-ID: <22ADF671-CFD7-4483-B3FF-1144E9A879FC@ericsson.com> References: <157290835855.13964.5264316371267230763.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [129.192.75.5] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9407742f-5334-464a-b10e-08d76b78412b x-ms-traffictypediagnostic: VI1PR07MB5887: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 02243C58C6 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(376002)(366004)(346002)(396003)(39860400002)(53754006)(199004)(189003)(6506007)(305945005)(53546011)(7736002)(76176011)(478600001)(102836004)(99286004)(36756003)(6512007)(6246003)(58126008)(316002)(26005)(110136005)(14454004)(8936002)(186003)(66574012)(66946007)(66476007)(66446008)(64756008)(66556008)(966005)(81166006)(2501003)(81156014)(8676002)(446003)(66066001)(11346002)(86362001)(6486002)(256004)(91956017)(76116006)(5660300002)(6436002)(33656002)(486006)(229853002)(71200400001)(6116002)(71190400001)(6306002)(3846002)(25786009)(44832011)(2906002)(2616005)(476003); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB5887; H:VI1PR07MB3167.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 28c/aXvrc7c7ahnHdS0+YgiYpHJAe5i47fr4hemYoNP4caJraUKIB4j5BMMq28Ua5vbinfhD3Mb8VOzjFZ861M0lVXkHYGGQvy9f8EaisFPdxNdlNXqgKAkPwnilOozUuW3jKipeL2PgVZuaA2AGzhuI0rN65fxeqVOMnIH2eUzjtjc+9+VBEcoIpU34Gudq6Aa1r4pDgyatsLwJ+vkpcwtUa+01VgOHKnmi9wNr7F5xxlmq6t5QbyJirCHxdoII+t6kGQHLcuBptgSqgjfeVwhgNHNSx003zSxXKe8KXbyTAx14piPEUAYL1tGNE8OzAplrfGS9rVRNuUcaHA4H0SJ/zOFBwFhMq/87zmjANEQFg1wBjuD2iiNM2Rl1Wq1Ela4e5ONTQuPNNwrt/AqGK/bGd84vLPkf4D6Hs63IFQytquo+NNq/vTOIDsaDGIO/ x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <51D2B5392F2AFA429890C4C64B149114@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9407742f-5334-464a-b10e-08d76b78412b X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Nov 2019 16:07:32.8415 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: o46LM0Qrh1GnIjMAdLzxsMxT9eI3z5Sg5n1pxivxSnbwsrQh30O/wH4DZUVUImgkqoXF3t9iRB8dq1fcWZnBiI+R5kN1fRzZa09zswOe6Es= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5887 Archived-At: Subject: Re: [sipcore] New Version Notification for draft-wendt-sipcore-callinfo-rcd-00.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Nov 2019 16:07:38 -0000 SGksDQoNCkEgZmV3IGVkaXRvcmlhbCBjb21tZW50cy9xdWVzdGlvbnM6DQoNCg0KUTE6IA0KDQpJ biB0aGUgQWJzdHJhY3QgeW91IHNheToNCg0KIlRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGEgU0lQ IENhbGwtSW5mbyBwYXJhbWV0ZXIgZGVmaW5lZCB0byBpbmNsdWRlIHJpY2ggZGF0YSBhc3NvY2lh dGVkIHdpdGggdGhlIGlkZW50aXR5IG9mIHRoZSBjYWxsaW5nIHBhcnR5Li4uIg0KDQpXaGVuIHJl YWRpbmcgdGhlIGRyYWZ0LCBpdCBpcyB1bmNsZWFyIHdoZXRoZXIgeW91IGFyZSBkZWZpbmluZyBh IG5ldyBwYXJhbWV0ZXIsIG9yIGEgbmV3IHBhcmFtZXRlciB2YWx1ZS90b2tlbiAgZm9yIHRoZSBl eGlzdGluZyBwdXJwb3NlIHBhcmFtZXRlci4NCg0KDQpRMjogDQoNCkluIFNlY3Rpb24gNCB5b3Ug IGRlZmluZSB0aGUgdG9rZW4sIGJ1dCBpdCBpcyBub3QgaW5jbHVkZWQgaW4gdGhlIGV4YW1wbGUu DQoNCg0KUTM6DQoNCkluIFNlY3Rpb24gNSwgd2hlcmUgeW91IGRlc2NyaWJlIHRoZSBwcm9wZXJ0 aWVzLCB5b3Ugc2F5ICJTSE9VTEQgYmUgc3VwcG9ydGVkIiBhbmQgIk1VU1QgYmUgc3VwcG9ydGVk Ii4gV2hhdCBkb2VzIHN1cHBvcnRlZCBhY3R1YWxseSBtZWFuIGluIHRoaXMgY2FzZT8gRG9lcyBp dCBtZWFuIHRoYXQgdGhlIHByb3BlcnR5IFNIT1VMRC9NVVNUIGJlIGluY2x1ZGVkIGluIHRoZSBK U09OLCBhbmQvb3IgZG9lcyBpdCBtZWFuIHRoYXQgdGhlIHJlY2VpdmVyIFNIT1VMRC9NVVNUIGJl IGFibGUgdG8gcmVuZGVyIGl0IHRvIHRoZSBjYWxsZWQgaWYgaW5jbHVkZWQgaW4gdGhlIEpTT04/ DQoNCg0KUTQ6IA0KDQpUaGUgQ2FsbC1JbmZvIGhlYWRlciBmaWVsZCBjYW4gYmUgaW5jbHVkZWQg aW4gYm90aCByZXF1ZXN0cyBhbmQgcmVzcG9uc2VzLiBJZiB0aGUgcHVycG9zZSBvZiBqY2FyZCBp cyB0byBwcm92aWRlIGluZm9ybWF0aW9uIGFib3V0IHRoZSBjYWxsaW5nIHBhcnR5IHRoZW4gSSBh c3N1bWUgaXQgc2hhbGwgbm90IGJlIHVzZWQgaW4gcmVzcG9uc2U/IElmIHNvLCBJIHRoaW5rIGl0 IHNob3VsZCBiZSBleHBsaWNpdGx5IHN0YXRlZC4NCg0KDQpSZWdhcmRzLA0KDQpDaHJpc3Rlcg0K DQoNCg0KT24gMTcvMTEvMjAxOSwgMjAuMjMsICJzaXBjb3JlIG9uIGJlaGFsZiBvZiBDaHJpcyBX ZW5kdCIgPHNpcGNvcmUtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgY2hyaXMtaWV0ZkBj aHJpc3dlbmR0Lm5ldD4gd3JvdGU6DQoNCiAgICBIaSBBbGwsDQogICAgDQogICAgSeKAmW0gY3Jv c3MgcG9zdGluZyB0aGlzIHRvIGJvdGggU1RJUiBhbmQgU2lwY29yZSBtYWlsIGxpc3RzLiAgRm9y IHRvbW9ycm934oCZcyBTVElSIHNlc3Npb24gd2Ugd2lsbCBiZSBkaXNjdXNzaW5nIHRoZSBuZXcg ZHJhZnQtaWV0Zi1zdGlyLXBhc3Nwb3J0LXJjZCBkcmFmdC4gIEFzIGRpc2N1c3NlZCBpbiB0aGUg bGFzdCBTVElSIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nLCB3ZSBoYXZlIHByb3Bvc2VkIGEgbmV3 IENhbGwtSW5mbyBwYXJhbWV0ZXIgc3BlY2lmaWMgdG8gaW5jbHVkaW5nIOKAnGpjYXJk4oCdIHRv IHN1cHBvcnQgYSBtb3JlIHN0YW5kYXJkIHdheSBvZiBpbmNvcnBvcmF0aW5nIHNpZ25lZCBSaWNo IENhbGwgRGF0YSwgc3VwcG9ydGluZyBjb21wYWN0IGZvcm0gYW5kIG90aGVyIHVzZXMuICBUaGUg bGluayB0byB0aGlzIGRyYWZ0IGlzIGluY2x1ZGVkIGJlbG93Lg0KICAgIA0KICAgIFBsZWFzZSBo YXZlIGEgbG9vay4gIE9uIHRoZSBTaXBjb3JlIHNpZGUsIHdlIHdpbGwgd2FudCB0byBkaXNjdXNz IHRoZSBhZG9wdGlvbiBvZiB0aGlzIGRyYWZ0LCBidXQgaSB0aGluayB0aGVyZSBpcyBhbiBvdmVy bGFwIGluIGF1ZGllbmNlcyBpbiBib3RoIHdvcmtpbmcgZ3JvdXBzLCBzbyBob3BlZnVsbHkgd2Ug Y2FuIHN0YXJ0IHRoYXQgZGlzY3Vzc2lvbiB0b21vcnJvdy4NCiAgICANCiAgICBUaGFua3MhDQog ICAgDQogICAgLUNocmlzDQogICAgDQogICAgPiBPbiBOb3YgNSwgMjAxOSwgYXQgNjo1OSBBTSwg aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIHdyb3RlOg0KICAgID4gDQogICAgPiANCiAgICA+IEEg bmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC13ZW5kdC1zaXBjb3JlLWNhbGxpbmZvLXJjZC0wMC50 eHQNCiAgICA+IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgQ2hyaXMgV2VuZHQg YW5kIHBvc3RlZCB0byB0aGUNCiAgICA+IElFVEYgcmVwb3NpdG9yeS4NCiAgICA+IA0KICAgID4g TmFtZToJCWRyYWZ0LXdlbmR0LXNpcGNvcmUtY2FsbGluZm8tcmNkDQogICAgPiBSZXZpc2lvbjoJ MDANCiAgICA+IFRpdGxlOgkJU0lQIENhbGwtSW5mbyBQYXJhbWV0ZXJzIGZvciBSaWNoIENhbGwg RGF0YQ0KICAgID4gRG9jdW1lbnQgZGF0ZToJMjAxOS0xMS0wNA0KICAgID4gR3JvdXA6CQlJbmRp dmlkdWFsIFN1Ym1pc3Npb24NCiAgICA+IFBhZ2VzOgkJMTINCiAgICA+IFVSTDogICAgICAgICAg ICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQtd2VuZHQtc2lwY29y ZS1jYWxsaW5mby1yY2QtMDAudHh0DQogICAgPiBTdGF0dXM6ICAgICAgICAgaHR0cHM6Ly9kYXRh dHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtd2VuZHQtc2lwY29yZS1jYWxsaW5mby1yY2QvDQog ICAgPiBIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXdl bmR0LXNpcGNvcmUtY2FsbGluZm8tcmNkLTAwDQogICAgPiBIdG1saXplZDogICAgICAgaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC13ZW5kdC1zaXBjb3JlLWNhbGxp bmZvLXJjZA0KICAgID4gDQogICAgPiANCiAgICA+IEFic3RyYWN0Og0KICAgID4gICBUaGlzIGRv Y3VtZW50IGRlc2NyaWJlcyBhIFNJUCBDYWxsLUluZm8gcGFyYW1ldGVyIGRlZmluZWQgdG8gaW5j bHVkZQ0KICAgID4gICByaWNoIGRhdGEgYXNzb2NpYXRlZCB3aXRoIHRoZSBpZGVudGl0eSBvZiB0 aGUgY2FsbGluZyBwYXJ0eSB0aGF0IGNhbg0KICAgID4gICBiZSByZW5kZXJlZCB0byBjYWxsZWQg cGFydHkgZm9yIHByb3ZpZGluZyBtb3JlIHVzZWZ1bCBpbmZvcm1hdGlvbg0KICAgID4gICBhYm91 dCB0aGUgY2FsbGVyIG9yIHRoZSBzcGVjaWZpYyByZWFzb24gZm9yIHRoZSBjYWxsLiAgVGhpcyBp bmNsdWRlcw0KICAgID4gICBleHRlbmRlZCBjb21wcmVoZW5zaXZlIGluZm9ybWF0aW9uIGFib3V0 IHRoZSBjYWxsZXIgc3VjaCBhcyB3aGF0IGENCiAgICA+ICAgakNhcmQgb2JqZWN0IGNhbiByZXBy ZXNlbnQgZm9yIGRlc2NyaWJpbmcgdGhlIGNhbGxpbmcgcGFydHkuICBUaGUNCiAgICA+ICAgZWxl bWVudCBkZWZpbmVkIGZvciB0aGlzIHB1cnBvc2UgaXMgaW50ZW5kZWQgdG8gYmUgZXh0ZW5zaWJs ZSB0bw0KICAgID4gICBhY2NvbW1vZGF0ZSByZWxhdGVkIGluZm9ybWF0aW9uIGFib3V0IGNhbGxz IHRoYXQgaGVscHMgcGVvcGxlIGRlY2lkZQ0KICAgID4gICB3aGV0aGVyIHRvIHBpY2sgdXAgdGhl IHBob25lIGFuZCBhZGRpdGlvbmFsbHkgd2l0aCB0aGUgdXNlIG9mIGpDYXJkDQogICAgPiAgIGJl IGNvbXBhdGlibGUgd2l0aCB0aGUgU1RJUi9QQVNTcG9yVCBSaWNoIENhbGwgRGF0YSBmcmFtZXdv cmsuDQogICAgPiANCiAgICA+IA0KICAgID4gDQogICAgPiANCiAgICA+IFBsZWFzZSBub3RlIHRo YXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1p c3Npb24NCiAgICA+IHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFp bGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQogICAgPiANCiAgICA+IFRoZSBJRVRGIFNlY3JldGFy aWF0DQogICAgPiANCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KICAgIHNpcGNvcmUgbWFpbGluZyBsaXN0DQogICAgc2lwY29yZUBpZXRm Lm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2lwY29yZQ0K ICAgIA0KDQo= From nobody Mon Nov 18 19:39:50 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20490120255 for ; Mon, 18 Nov 2019 19:39:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N1jyZM05ilQV for ; Mon, 18 Nov 2019 19:39:37 -0800 (PST) Received: from mail-pf1-x442.google.com (mail-pf1-x442.google.com [IPv6:2607:f8b0:4864:20::442]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B769E1207FD for ; Mon, 18 Nov 2019 19:39:37 -0800 (PST) Received: by mail-pf1-x442.google.com with SMTP id 193so11407353pfc.13 for ; Mon, 18 Nov 2019 19:39:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=9I/CMc4anw1PwYh+h9b0cm6IyUNxeYDOzdU6eRNS0rc=; b=NlZM6demZdCcevoUP46lOpNLQwgbLn0z8voG+KqgvzBQPK+fsl+kpbYtSB6cUtmepd lUd6rl4f3Zm7nEkf+I5ACgd8UxQSX9hN5IZI6VdqcJB4qBrL/Qj+9JchjfIFX/fMk5uA nY8u5iNKEu0taeyID03NBpPi8x4CPafxJzogzat98kBx8bS4hVh19Yr37sfO+ZRtenIg H08kkEVn4MoSua8d82YhStgdcnM2AXQDWbeapshoGlIwTlrYyaMDvE8YHYPV5Z3iZunx Y9thcPMmnM6xrcGy5AOrFRyYXGrTvvo1qnNUJ3PEC3tuvpyYKE3pAj+3LNL2UBfTSnL5 bEWQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=9I/CMc4anw1PwYh+h9b0cm6IyUNxeYDOzdU6eRNS0rc=; b=YEx8fRVPDjuFn/zs+xX9A0yo5VxUvi8Xr/XHBH02zxw6H1CGKe6CLruYXY/EWQ9xMg qB9nNtG19LsMhNJ5ztOVx+tIeKPWkWFPTaiDgSNkQc/3XVXOvEZYt1ibbOJIeIME8oOJ nkpRSYGAMEHMZBHf6bn7mnj4dfskwyH7I6wy6gJRmJSFJRAvy/H5z2l0EcyipN9LDhU9 h7wrf2pNZMHN8meLQ/mPd4wz2mgaJS3o+Ohlc1A4O6tYXbPWWcwIXCmWd6Tvm2RoVGVU TFQLgpawzvW/wBXw6sheVyFhvzhF/THVIFM5dv/r+eJjqk6uUT+pK77zLzSsrT+5hP1O bpAA== X-Gm-Message-State: APjAAAWQjiufsvXR2VURv41wPPOvRjlP0UyJ3iwZcUSAgqYHrQLK9XpS mJFeqvjdHTl0pbrvrlcyidL/Rg== X-Google-Smtp-Source: APXvYqyozxl/UP3yR9Gq1cjKsD+Ecw1l/fJLWToq4LzM5lBTbhFjOqYJm0bc0ROi51CKblBdRb4y6A== X-Received: by 2002:a63:5851:: with SMTP id i17mr2990634pgm.181.1574134777104; Mon, 18 Nov 2019 19:39:37 -0800 (PST) Received: from dhcp-81d3.meeting.ietf.org (dhcp-81d3.meeting.ietf.org. [31.133.129.211]) by smtp.gmail.com with ESMTPSA id a145sm23807693pfa.7.2019.11.18.19.39.34 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 18 Nov 2019 19:39:36 -0800 (PST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) From: Chris Wendt In-Reply-To: <22ADF671-CFD7-4483-B3FF-1144E9A879FC@ericsson.com> Date: Tue, 19 Nov 2019 11:39:30 +0800 Cc: "sipcore@ietf.org" , IETF STIR Mail List Content-Transfer-Encoding: quoted-printable Message-Id: References: <157290835855.13964.5264316371267230763.idtracker@ietfa.amsl.com> <22ADF671-CFD7-4483-B3FF-1144E9A879FC@ericsson.com> To: Christer Holmberg X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: Re: [sipcore] New Version Notification for draft-wendt-sipcore-callinfo-rcd-00.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 03:39:43 -0000 Hi Christer, Responses inline > On Nov 18, 2019, at 12:07 AM, Christer Holmberg = wrote: >=20 > Hi, >=20 > A few editorial comments/questions: >=20 >=20 > Q1:=20 >=20 > In the Abstract you say: >=20 > "This document describes a SIP Call-Info parameter defined to include = rich data associated with the identity of the calling party..." >=20 > When reading the draft, it is unclear whether you are defining a new = parameter, or a new parameter value/token for the existing purpose = parameter. >=20 The intent was to define a new =E2=80=9Cpurpose=E2=80=9D parameter which = is defined as =E2=80=9Cjcard=E2=80=9D and defines the content of the URI = to be specifically a jcard object intended for RCD. >=20 > Q2:=20 >=20 > In Section 4 you define the token, but it is not included in the = example. Sure i will expand examples, but we had a discussion about how to = include content so i was a little vague there for first draft. >=20 >=20 > Q3: >=20 > In Section 5, where you describe the properties, you say "SHOULD be = supported" and "MUST be supported". What does supported actually mean in = this case? Does it mean that the property SHOULD/MUST be included in the = JSON, and/or does it mean that the receiver SHOULD/MUST be able to = render it to the called if included in the JSON? We talked about this at the STIR session. I actually plan to take that = section out and bring those definitions back to RCD and/or remove = completely. The intent here was to do some better definition of what UA = could expect to receive and need to be able to render, but I think the = consensus is that this is not the document to do it. >=20 >=20 > Q4:=20 >=20 > The Call-Info header field can be included in both requests and = responses. If the purpose of jcard is to provide information about the = calling party then I assume it shall not be used in response? If so, I = think it should be explicitly stated. Yes thanks, it is only intended for requests. Will clarify that. >=20 >=20 > Regards, >=20 > Christer >=20 >=20 >=20 > On 17/11/2019, 20.23, "sipcore on behalf of Chris Wendt" = wrote: >=20 > Hi All, >=20 > I=E2=80=99m cross posting this to both STIR and Sipcore mail lists. = For tomorrow=E2=80=99s STIR session we will be discussing the new = draft-ietf-stir-passport-rcd draft. As discussed in the last STIR = virtual interim meeting, we have proposed a new Call-Info parameter = specific to including =E2=80=9Cjcard=E2=80=9D to support a more standard = way of incorporating signed Rich Call Data, supporting compact form and = other uses. The link to this draft is included below. >=20 > Please have a look. On the Sipcore side, we will want to discuss = the adoption of this draft, but i think there is an overlap in audiences = in both working groups, so hopefully we can start that discussion = tomorrow. >=20 > Thanks! >=20 > -Chris >=20 >> On Nov 5, 2019, at 6:59 AM, internet-drafts@ietf.org wrote: >>=20 >>=20 >> A new version of I-D, draft-wendt-sipcore-callinfo-rcd-00.txt >> has been successfully submitted by Chris Wendt and posted to the >> IETF repository. >>=20 >> Name: draft-wendt-sipcore-callinfo-rcd >> Revision: 00 >> Title: SIP Call-Info Parameters for Rich Call Data >> Document date: 2019-11-04 >> Group: Individual Submission >> Pages: 12 >> URL: = https://www.ietf.org/internet-drafts/draft-wendt-sipcore-callinfo-rcd-00.t= xt >> Status: = https://datatracker.ietf.org/doc/draft-wendt-sipcore-callinfo-rcd/ >> Htmlized: = https://tools.ietf.org/html/draft-wendt-sipcore-callinfo-rcd-00 >> Htmlized: = https://datatracker.ietf.org/doc/html/draft-wendt-sipcore-callinfo-rcd >>=20 >>=20 >> Abstract: >> This document describes a SIP Call-Info parameter defined to include >> rich data associated with the identity of the calling party that can >> be rendered to called party for providing more useful information >> about the caller or the specific reason for the call. This includes >> extended comprehensive information about the caller such as what a >> jCard object can represent for describing the calling party. The >> element defined for this purpose is intended to be extensible to >> accommodate related information about calls that helps people decide >> whether to pick up the phone and additionally with the use of jCard >> be compatible with the STIR/PASSporT Rich Call Data framework. >>=20 >>=20 >>=20 >>=20 >> Please note that it may take a couple of minutes from the time of = submission >> until the htmlized version and diff are available at tools.ietf.org. >>=20 >> The IETF Secretariat >>=20 >=20 > _______________________________________________ > sipcore mailing list > sipcore@ietf.org > https://www.ietf.org/mailman/listinfo/sipcore >=20 >=20 From nobody Mon Nov 18 20:47:20 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0A5112011F; Mon, 18 Nov 2019 20:47:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VBwVRmBqFG4H; Mon, 18 Nov 2019 20:47:11 -0800 (PST) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70088.outbound.protection.outlook.com [40.107.7.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F5D01200F1; Mon, 18 Nov 2019 20:47:11 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cMdG6VWKppE0d9HEIC1V7SVffMcgJYzu3/Hdzk/2MpzyfqnHcmzA0X7BP9MRyW32jmGtmo0YRIFZLFjtukcQKAXZGGYxST+gE1YUbDRPl2Kdc+s992WK3kGvuSvv2J9BPfV3RIRcN89hrCS2o21VcSMLgb5ETjDrfH+7i21+OZsfbTEq/AuC1Rk6Es5tGsdMCukMHWzKJ6wKWK3O0dR1H0Ma5FdjSe0WVIEH4zoYisG2jtl5hw/6GUNf3bvYMh9yxR5IKTVO2Jx7QvtnrCpvhZj/LgFEmzvM7Yu8s6WD+jIVWwBkIzEn3jEnBJBLQye/TGJOfW7DC5PHHSN9MFnYzQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fYUotb16tQub3sDs4Ur5YKIC1ZqeiB4XIAI4eRFXjhQ=; b=MA/d87nha86FMygvzbTpLQZG/NZSC6vaVI+gq3ZmoKMpx35+G4PCSkC3+s5dc+PRm6RGjg4taWle35OQEMeCItq9h9xj/Fv1SVsGCe55Q2PncCakVNNjHLMwbPo86noPpw2/XeRApY/oPXMJSa16OYK+q3VzHdVQDhJYxyeMCEhHXyTvWPDQ/05KqUhHsp2FTWVevXkG/dRCpo6XwaM37E7dA9J+7wQFSXyQofDddLmz6YmJqZL10Hf8mVLvXTc1S3q3Xk6dOuJbpdIq84qkWVEaZoNx+qgbFQ+Q9rx2MWkIGt33P+1f1roQ+Zi21ncpZhGJMIA/75Jj9nsYgJ+9BQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fYUotb16tQub3sDs4Ur5YKIC1ZqeiB4XIAI4eRFXjhQ=; b=CmGzNQDcdAm+ZRGBRRreaNuRo/AItv7w1eSERhntRSFxBR/CWyR3b9VwMO6CLX2mDNhGYkuSoH3++zNro7Wk/QauePRlocNdtZUga3CLvdND/ju+1OtGTCDy2WaUvm9zLn72tVq+ZaSpz8opK7XQvOTmnZIiP4tzBURX4VTISig= Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB4428.eurprd07.prod.outlook.com (20.176.165.33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.10; Tue, 19 Nov 2019 04:47:07 +0000 Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::2ca9:414:cc01:9706]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::2ca9:414:cc01:9706%4]) with mapi id 15.20.2474.015; Tue, 19 Nov 2019 04:47:07 +0000 From: Christer Holmberg To: Chris Wendt CC: "sipcore@ietf.org" , IETF STIR Mail List Thread-Topic: [sipcore] New Version Notification for draft-wendt-sipcore-callinfo-rcd-00.txt Thread-Index: AQHVnUHO+wVgBOn0NkuoP4QV/vy346eQDc0AgAHNlQCAAMtKAA== Date: Tue, 19 Nov 2019 04:47:07 +0000 Message-ID: References: <157290835855.13964.5264316371267230763.idtracker@ietfa.amsl.com> <22ADF671-CFD7-4483-B3FF-1144E9A879FC@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [129.192.75.4] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cb722379-0260-4bb6-ba22-08d76cab880f x-ms-traffictypediagnostic: HE1PR07MB4428: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 022649CC2C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(39860400002)(346002)(136003)(376002)(366004)(189003)(199004)(6916009)(25786009)(58126008)(81166006)(8676002)(316002)(6116002)(81156014)(6512007)(229853002)(26005)(54906003)(3846002)(6506007)(6486002)(6436002)(102836004)(66066001)(6246003)(186003)(5660300002)(4744005)(99286004)(91956017)(478600001)(486006)(76116006)(66556008)(446003)(66446008)(64756008)(66946007)(66476007)(11346002)(476003)(33656002)(2616005)(305945005)(7736002)(44832011)(4326008)(86362001)(71190400001)(71200400001)(256004)(76176011)(8936002)(36756003)(14454004)(2906002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB4428; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: y9HIjP20k1SiIpaxJ55cRLQRJfDkQaxzb2AvhLnZqFyInLeMvGBzvrq/xLiKxjt0YEoT+uWysB31OXAIhprB0i2Q6jTtH0YWUpivJxu2SNpysZrrak/KoeNGNRO5EbBn1pC9rMf4X4Yd1GxDJutV+XNhomDNOJlylDC9vPo4kbWbZ6QGJfzS56tgCSemnnu2+Aodbk3AwkhXWkBKUeE2uBakFWAMR92tHhTDC83HzYaPVuFWZgSLunV9zlITjSQ0DOe5/aA2wCBYJpZ5YNY/ntIeeHp3d+U//ni/wo+tTRvMK6ffYCm3mV2Sfssi3AjeIZAgxbQdrR3d13a0yrDg0zBQEpq0H30F7MxPfa4tCE2KtoH5xWpZU/OcQL8hjji66RPERJrrV6XPyMSRT/B6z+B81iD780nih1kO9nERNaRwT/+aHxnMkz58OnEpNCzV x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <426645D8AB74C543AA2E0BF0669AD9FD@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: cb722379-0260-4bb6-ba22-08d76cab880f X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2019 04:47:07.2894 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: soOC4Zk3t6NRAaptuV8T0jnjAYiy7A2XfrEAmvchsM4DyrAYUGM0ioIinxrRzlkADHmwtcSxBvXhdFpoXRsgYf7aF2fpDYx2Xg0fB/aTRns= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB4428 Archived-At: Subject: Re: [sipcore] New Version Notification for draft-wendt-sipcore-callinfo-rcd-00.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 04:47:14 -0000 SGkgQ2hyaXMsDQoNClExOiANCiAgICAgDQogICAgPj4gSW4gdGhlIEFic3RyYWN0IHlvdSBzYXk6 DQogICAgPj4gDQogICAgPj4gIlRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGEgU0lQIENhbGwtSW5m byBwYXJhbWV0ZXIgZGVmaW5lZCB0byBpbmNsdWRlIHJpY2ggZGF0YSBhc3NvY2lhdGVkIHdpdGgg dGhlIGlkZW50aXR5IG9mIHRoZSBjYWxsaW5nIHBhcnR5Li4uIg0KICAgID4+IA0KICAgID4+IFdo ZW4gcmVhZGluZyB0aGUgZHJhZnQsIGl0IGlzIHVuY2xlYXIgd2hldGhlciB5b3UgYXJlIGRlZmlu aW5nIGEgbmV3IHBhcmFtZXRlciwgb3IgYSBuZXcgcGFyYW1ldGVyIHZhbHVlL3Rva2VuICBmb3Ig dGhlIGV4aXN0aW5nIHB1cnBvc2UgcGFyYW1ldGVyLg0KICAgID4+IA0KICAgID4NCiAgICA+IFRo ZSBpbnRlbnQgd2FzIHRvIGRlZmluZSBhIG5ldyDigJxwdXJwb3Nl4oCdIHBhcmFtZXRlciB3aGlj aCBpcyBkZWZpbmVkIGFzIOKAnGpjYXJk4oCdIGFuZCBkZWZpbmVzIHRoZSBjb250ZW50IG9mIHRo ZSBVUkkgdG8gYmUgc3BlY2lmaWNhbGx5IGEgamNhcmQgb2JqZWN0IGludGVuZGVkIGZvciBSQ0Qu DQoNCiAgICBQbGVhc2UgbWFrZSBzdXJlIHRoZSBkb2N1bWVudCBzYXlzIHRoYXQsIGFuZCBpcyBj b25zaXN0ZW50IDopDQoNCiAgICBQZXJzb25hbGx5IEkgd291bGQgYWxzbyBzdWdnZXN0IHRvIG5v dCB1c2UgInRva2VuIiB0ZXJtaW5vbG9neS4gWWVzLCBpdCBpcyBtZW50aW9uZWQgb25jZSBpbiBS RkMgMzI2MSwgYnV0IGluIFNJUCB3ZSBnZW5lcmFsbHkgZG9uJ3QgcmVmZXIgcGFyYW1ldGVyIHZh bHVlcyBhcyAidG9rZW5zIi4NCg0KICAgIFJlZ2FyZHMsDQoNCiAgICBDaHJpc3RlciAgICANCiAg ICANCg0K From nobody Tue Nov 19 05:54:01 2019 Return-Path: X-Original-To: sipcore@ietf.org Delivered-To: sipcore@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CD802120887; Tue, 19 Nov 2019 05:53:59 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: sipcore@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.110.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: sipcore@ietf.org Message-ID: <157417163975.21488.13628990684067281899@ietfa.amsl.com> Date: Tue, 19 Nov 2019 05:53:59 -0800 Archived-At: Subject: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-06.txt X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 13:54:00 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Session Initiation Protocol Core WG of the IETF. Title : Third-Party Token-based Authentication and Authorization for Session Initiation Protocol (SIP) Authors : Rifaat Shekh-Yusef Christer Holmberg Victor Pascual Filename : draft-ietf-sipcore-sip-token-authnz-06.txt Pages : 14 Date : 2019-11-19 Abstract: This document updates RFC 3261 and defines a mechanism for SIP, that is based on the OAuth 2.0 and OpenID Connect Core 1.0 specifications, to enable the delegation of the user authentication and SIP registration authorization to a dedicated third-party entity that is separate from the SIP network elements that provide the SIP service. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sipcore-sip-token-authnz/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-sipcore-sip-token-authnz-06 https://datatracker.ietf.org/doc/html/draft-ietf-sipcore-sip-token-authnz-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sipcore-sip-token-authnz-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Nov 19 05:55:30 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EAB512090D; Tue, 19 Nov 2019 05:55:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DY9Y9rtU8xXH; Tue, 19 Nov 2019 05:55:26 -0800 (PST) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80050.outbound.protection.outlook.com [40.107.8.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC66A120887; Tue, 19 Nov 2019 05:55:25 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Wk831rVVlcn+o9Rli79+nS+QAReoOZPoeM4RYWReW2/0S0nxNAhWD7FAiLhejajUIxzjdNr+XRrjfp+93v+IUOsKtpLLHILvIswWP7okeZQg5qam+GFBe45FEVkzFN7FfE+NRaqbzoyZf8jcCZvWEbcdbLLems8SilaXg2ALGkN0foJeE33lfTkvrrcG2tGaOm78IFaiL+H7WhlTMY/kcG29418Ir2nO5JvqCS0Th0/XA89xyGBuX5puetyO5i049vqj8KJpB3CNYhMUdS5i8LhPEsNXIXXPR+g2GTNuhi0rM/yrF7u9CfBrjg9xBuTC9FtXEiyscoUo57T1O27tEw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ADhuVJ0YXJBlJjHo/gLpZo9zl9/dtAlOzX/hlePq/yc=; b=HZfZVQbvungeTS7qO9ck3onWclray7mvezSwmuT2/seAc8wsHw3on4ns18JeIy9eTIZJ/tZ3SGFqD7YRLAYit7rHlesiKorBEdTHVZbbqCqiwltnehu1S+urM0FD0UgrHz0g9An7hpwDNxEeGn1NLolSmP0Hf/fzB3j4NNXCj3EWX5uel7eCbDP1Biw17JFRkEsYR80UB/r7Bfg0wknWqOwGy+kpy7Sl6Xk2uCXzzKqaWN1fdlpSBLOLZQ45PWCS6bdcvtB5M20CKHhCYu8p6c67VbqAHLb6/3OVp9RrADyqdMQpM0cUC1OOpA5i8iXspkJxJETrcB34456IjNAiIA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ADhuVJ0YXJBlJjHo/gLpZo9zl9/dtAlOzX/hlePq/yc=; b=IFYx9qHGAc16aX50oElxz14nggFUIfXlcu39WC9r3oL+F48KajATMHyO50a/wcIPuWywjg2qr9GwX6aARo0blV13O0pErspZaxtKqDpKEAq2HTGpujJWVFlUFMf8gX/nRgBwQmv+qh8G6oFoLfxWP7LAOS0pUwWQmFD9KCUbNwc= Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB3292.eurprd07.prod.outlook.com (10.170.246.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.9; Tue, 19 Nov 2019 13:55:23 +0000 Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::2ca9:414:cc01:9706]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::2ca9:414:cc01:9706%4]) with mapi id 15.20.2474.015; Tue, 19 Nov 2019 13:55:23 +0000 From: Christer Holmberg To: "sipcore@ietf.org" CC: "sipcore-chairs@ietf.org" Thread-Topic: Draft new version: draft-ietf-sipcore-sip-token-authnz-06 Thread-Index: AQHVnuD8OZ/G/ULu3EyC2P8FryT98Q== Date: Tue, 19 Nov 2019 13:55:23 +0000 Message-ID: <0BC75CC8-80F7-473E-A9C8-9340E2F9FFF9@ericsson.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [129.192.75.5] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 2ef6141f-765f-466c-403e-08d76cf81f88 x-ms-traffictypediagnostic: HE1PR07MB3292: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6108; x-forefront-prvs: 022649CC2C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(136003)(376002)(366004)(396003)(346002)(189003)(199004)(86362001)(66446008)(8936002)(81166006)(81156014)(256004)(66066001)(5660300002)(71190400001)(71200400001)(44832011)(6916009)(36756003)(58126008)(4326008)(5640700003)(8676002)(1730700003)(25786009)(2501003)(7736002)(6512007)(14454004)(6486002)(54896002)(6306002)(478600001)(33656002)(6436002)(6116002)(2906002)(6506007)(186003)(26005)(102836004)(450100002)(99286004)(66556008)(316002)(2616005)(66476007)(486006)(91956017)(76116006)(476003)(66946007)(3846002)(558084003)(2351001)(64756008); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3292; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 2MRme5TRKjMkrQWTNok+43xHncrGXxEDgZI2Tg59i2tJrV24i+QrrMYvlsP2bAAaN3ch5wUm9diks52Gs0SKOWdF+Qc2+sIPAtpM8lXWgeoLQYfKSEWDj3pwiMfNF7VBoRV/PGlCwZ+1n1fgigs22SnnUhemwZjDv66EC4CPM+VwQC5xPCRcHVOPUaicy46FQn3CXQE+R7xmbCVxkQVbncAoOx26Zml5GLYfIGc4ePmPVq/1hCfAI28mpNbD7qYFhC6MzFK5NfrxoW1/EdIJTULe4MgJ97y4wmECo7i9krb+RizkBxKemvInLI7n+BoXxtlbmKg0cZ3xAh52/WiJq+KDYbreqaI5YCPe82pqcGuuUdgWWBsOtAVnWKPNc8oi4JqGtZaUou+/avG/9J0RYn7+nCONY6ulbjfiEZ5VjRHctqfXPCOoNnNbRfptVXB5 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_0BC75CC880F7473EA9C89340E2F9FFF9ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2ef6141f-765f-466c-403e-08d76cf81f88 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2019 13:55:23.1667 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8k29wMuurF2AQ0LCKLEgN0Va6Ug6YH+r+GnUYUPBeaeNIougqAstQ8nVr8YnHojhYEgSAiaHbicca4L3YMFQS+3L5WBY5ldd6kkZY6LJtCY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3292 Archived-At: Subject: [sipcore] Draft new version: draft-ietf-sipcore-sip-token-authnz-06 X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 13:55:28 -0000 --_000_0BC75CC880F7473EA9C89340E2F9FFF9ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCldlIGhhdmUgc3VibWl0dGVkIGEgbmV3IHZlcnNpb24gKC0wNikgb2YgZHJhZnQtaWV0 Zi1zaXBjb3JlLXNpcC10b2tlbi1hdXRobnotMDYuDQoNCkluIHRoZSBuZXcgdmVyc2lvbiB0aGUg c2lwLnRva2VuIG1lZGlhIGZlYXR1cmUgdGFnIGhhcyBiZWVuIHJlbmFtZWQgdG8gc2lwLm9hdXRo MiwgYXMgcmVxdWVzdGVkIGJ5IFBhdWwuDQoNClJlZ2FyZHMsDQoNCkNocmlzdGVyDQo= --_000_0BC75CC880F7473EA9C89340E2F9FFF9ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <24630D4967BCA04DB7B0A9D8DF4D1104@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCmE6bGluaywgc3Bh bi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7 DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJs aW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJbXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEy LjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44NXB0IDIuMGNtIDcwLjg1cHQgMi4wY207fQ0KZGl2 LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFk Pg0KPGJvZHkgbGFuZz0iRkkiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYg Y2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+SGksPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+V2UgaGF2ZSBzdWJtaXR0ZWQgYSBuZXcgdmVyc2lvbiAoLTA2 KSBvZiBkcmFmdC1pZXRmLXNpcGNvcmUtc2lwLXRva2VuLWF1dGhuei0wNi48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ SW4gdGhlIG5ldyB2ZXJzaW9uIHRoZSBzaXAudG9rZW4gbWVkaWEgZmVhdHVyZSB0YWcgaGFzIGJl ZW4gcmVuYW1lZCB0byBzaXAub2F1dGgyLCBhcyByZXF1ZXN0ZWQgYnkgUGF1bC48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+Q2hyaXN0ZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_0BC75CC880F7473EA9C89340E2F9FFF9ericssoncom_-- From nobody Fri Nov 22 10:37:38 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A00F31208AC for ; Fri, 22 Nov 2019 10:37:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=alum.mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 251vkd8e7yMT for ; Fri, 22 Nov 2019 10:37:34 -0800 (PST) Received: from NAM05-CO1-obe.outbound.protection.outlook.com (mail-eopbgr720042.outbound.protection.outlook.com [40.107.72.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 034B81208A7 for ; Fri, 22 Nov 2019 10:37:33 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AEloE7rUz3CDwy7Dc3Hl/iHLh0E2uGMeirZhZBMomCDg4128dj+dzcmwdg97otNyR+FlEgXouc02I1aBv3jjrrql/TLpt50etC/SgFCKCN9l3Eue4eD8F9m1LclcW7soRefzdLvM+C7yJ2NLBAAT4rF3nu4/ccjTLyra4FusP1swI+LVxOiN1FayiDlwu6bwdIbOVJ6r5L7ckGUBVQIFtN7HSBI1g9oK+elGPi2Or+AHLbPgu0IOi4JCiRuK7tLcvxOx18GBMGutmC5wZbAYpG2SIlPHUuE7saK0m0K3nwzIJ2euDN071I72SOEZQsMomqY/a1TF3KY5Z+K14ffTKQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vhFgJGKK0VbCbJpBS50LUzPOWi/JlhpeCGkTFEVhGMk=; b=IxzEl7Qb/tRnbF+8h7kPZazNoMvkfiltFi9BmZHDO13+ygEJr7zq7bDmybIatsiRUb3mVvCeZ/amr3vNr9EZwO8gmrppIKtM62qU0NZgy6pQJwTtVutiAPU41aeFNWAjt5JUUt6yjAb1NwEMej2ir6N7CY7W/qTY/ou2QY3fKmrcyeiseWl7IalXXEP4i54eXPEfEoOVM63DAnEa1pUFHdZ1v+LhEy3CycSlh4m/GI1N9i5QeO4/sje6PNDV6EaFFb9or6GXYKraA1TaFJ5hkYBijkUJ46UWGWZTbgb5hhHTGiMGabxGgFFwv+a2Z6lqvXcAqcBwhjXr1abYA0qKCQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 18.7.68.33) smtp.rcpttodomain=ietf.org smtp.mailfrom=alum.mit.edu; dmarc=bestguesspass action=none header.from=alum.mit.edu; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alum.mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vhFgJGKK0VbCbJpBS50LUzPOWi/JlhpeCGkTFEVhGMk=; b=GKwGDEzSmP/UDPZ/FS4x1eTprmRBoGtPqMPTe1URgCjfBn2JybVOaIXFd4n5g8duQEg9b2flwFUlH2fy4Bk6mmMhzYA08nqfFvTKCtQaXmr4i/ADRZK8mYeO1Tt4bJDLfcRPyTOo9K02ZiIutAMYdYxeE8aMJLgcY6VmkFs9E9Y= Received: from BN4PR12CA0009.namprd12.prod.outlook.com (2603:10b6:403:2::19) by DM5PR12MB1163.namprd12.prod.outlook.com (2603:10b6:3:7a::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.23; Fri, 22 Nov 2019 18:37:32 +0000 Received: from CY1NAM02FT006.eop-nam02.prod.protection.outlook.com (2a01:111:f400:7e45::203) by BN4PR12CA0009.outlook.office365.com (2603:10b6:403:2::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Fri, 22 Nov 2019 18:37:32 +0000 Authentication-Results: spf=pass (sender IP is 18.7.68.33) smtp.mailfrom=alum.mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=alum.mit.edu; Received-SPF: Pass (protection.outlook.com: domain of alum.mit.edu designates 18.7.68.33 as permitted sender) receiver=protection.outlook.com; client-ip=18.7.68.33; helo=outgoing-alum.mit.edu; Received: from outgoing-alum.mit.edu (18.7.68.33) by CY1NAM02FT006.mail.protection.outlook.com (10.152.74.104) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Fri, 22 Nov 2019 18:37:31 +0000 Received: from Kokiri.localdomain (c-24-62-227-142.hsd1.ma.comcast.net [24.62.227.142]) (authenticated bits=0) (User authenticated as pkyzivat@ALUM.MIT.EDU) by outgoing-alum.mit.edu (8.14.7/8.12.4) with ESMTP id xAMIbTAs007137 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT) for ; Fri, 22 Nov 2019 13:37:30 -0500 To: sipcore@ietf.org References: <0BC75CC8-80F7-473E-A9C8-9340E2F9FFF9@ericsson.com> From: Paul Kyzivat Message-ID: Date: Fri, 22 Nov 2019 13:37:29 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: <0BC75CC8-80F7-473E-A9C8-9340E2F9FFF9@ericsson.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.7.68.33; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10009020)(39860400002)(136003)(346002)(396003)(376002)(199004)(189003)(26005)(106002)(5660300002)(58126008)(4744005)(31696002)(75432002)(7596002)(70206006)(246002)(14444005)(956004)(316002)(70586007)(6916009)(26826003)(31686004)(478600001)(786003)(305945005)(36906005)(356004)(76130400001)(230700001)(2616005)(86362001)(966005)(47776003)(6246003)(65956001)(65806001)(8936002)(76176011)(186003)(2906002)(8676002)(6306002)(229853002)(336012)(50466002)(2361001)(446003)(11346002)(53546011)(2486003)(88552002)(23676004)(2351001); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR12MB1163; H:outgoing-alum.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-alum.mit.edu; A:1; MX:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: d18c423b-8ec0-4ff5-3070-08d76f7b08f8 X-MS-TrafficTypeDiagnostic: DM5PR12MB1163: X-MS-Exchange-PUrlCount: 1 X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:5516; X-Forefront-PRVS: 02296943FF X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: wOPPHfZNNpn71yoPNasJ/5OFWqtEnHkVX0YAcpGqrng5UaId1bQ0IHWnBH8BlAHGNx4KN9kkjXlFqYqEGqLUUOjqAOM11BBt/1B7MlLP33qMdW6eWUnAZPDY1pq7956SzYZBuB9lgrKxr1swP995lXR46qG29ewmyaI6mv393gSmO4vt0TXfQ9jW+KdX8fyymZ8TtQI1thltPoQRHrgKfGSNQp7m2Fj5irzvqL0H+59vvcM3elxGw6IwuaZR9jnhPkCH1jLy9h9MiuULXyVbsfSCJhHCPDzl3shragDqaGnAQ37RIWi8+1ZYlGATBidxms/rgIT+hmamEbp4seuY9qGroSgVooW1OEUlnuRcyY35dDmVcoOfvPR1Hv/A8LSt+XIP1RzP/0MJCCT10zBeFNZlQHcLOAHyT4cPp7CvZryhfVw8arfWelaqhQoc8zWsSbZkXFUxcQ/PWlAB5NnFfUqfoNgj/mwPgymPZ7IvUmE= X-OriginatorOrg: alum.mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Nov 2019 18:37:31.6486 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: d18c423b-8ec0-4ff5-3070-08d76f7b08f8 X-MS-Exchange-CrossTenant-Id: 3326b102-c043-408b-a990-b89e477d582f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3326b102-c043-408b-a990-b89e477d582f; Ip=[18.7.68.33]; Helo=[outgoing-alum.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR12MB1163 Archived-At: Subject: Re: [sipcore] Draft new version: draft-ietf-sipcore-sip-token-authnz-06 X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 18:37:37 -0000 On 11/19/19 8:55 AM, Christer Holmberg wrote: > Hi, > > We have submitted a new version (-06) of > draft-ietf-sipcore-sip-token-authnz-06. > > In the new version the sip.token media feature tag has been renamed to > sip.oauth2, as requested by Paul. Me? While I don't mind the change, AFAIK I didn't request it. I just checked my emails, and the closest I could find is: https://mailarchive.ietf.org/arch/msg/sipcore/DU53gjRCTNTOhxxUt0NPdhxCtho Thanks, Paul From nobody Sat Nov 23 04:16:12 2019 Return-Path: X-Original-To: sipcore@ietfa.amsl.com Delivered-To: sipcore@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7C3F1200C5 for ; Sat, 23 Nov 2019 04:16:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yEunu6c2qJTZ for ; Sat, 23 Nov 2019 04:16:09 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20080.outbound.protection.outlook.com [40.107.2.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EAC612008A for ; Sat, 23 Nov 2019 04:16:08 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VB4ShoSmwUlexAgorFjakcCjhvNI0UB81Mng1PJmaJaxGLOfPIfGgIUD/GWlb+F9GgS2Qq/rNx8QbkMIrSF07zldHT0TPnmmiPMd0GTnwTvVFtnIyGwYh/HoglOPv7JHu1K7BRMbWfRi0gRLMh2x3CDZTB2kfQGM/hhKBzt5hXqeLpNBvHzvmacgsYcpSTfhu7dJLtjAFdWVrfsgN1r+xleQWxzryr7wFvhfc1CmwAzI9F6J8hV+0evtYKeWCh6N/nT+8fzsiXM7Fw8fu4hgmS+knO2JLXKqh7PUjIzmP4suizneajd8Tqo9j3KHKUAk3ubPVJ6jN5FCyJPBotPiqg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QvK+A3xy4XywXORb76i59kBtPYugVRxZ6UfR5wTSzHk=; b=ZeBKZi4r+WUhSa7WX9FWXon8ccu6+owz6SWyaRu6t6Px3BH2Ui9eqp5gTqB3nZ7U+OpdFSg+IWRRGHC9jqyrEwmZnuP8fAGBUGQYX6pyUcWkzzos0uyoobt4LTYcCvCE+iNBQYf+IgVbDvwOfzZxXx5OQQaGMn7soDmHgeYtwOWTSPpw4jXAxznYKGo2nRZcgkDJaXQZ7zfRgg+SCCvm0c9N0ageZddlkZG8Gl8RuuRH8QcVBjAb4pW5C6/aCXihrY8fg4+v8FJ3+N4kpKhz0a/yeS7e8Xs4g+0PuGl+YfEDY/rLUh25jLJEblh4C0f40yVqjeAO+wTgbDOTiPqFVA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QvK+A3xy4XywXORb76i59kBtPYugVRxZ6UfR5wTSzHk=; b=iObJ4VuM6KMHFK+Qxz+wY+31rhIluthwvM/fVOwmK2B0QeoXlO/6cXV1lVZ5CtpxhzMRpyKQR1uWsWcPv+Pyfk+HAIQpTtL8gnYqXyECRcBbrN726gBaFf2AHzZxXV5So4CFeGa3qS79mMnZEUePvIb3BaXLADJoFhMSYTlos5k= Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB4345.eurprd07.prod.outlook.com (20.176.164.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.10; Sat, 23 Nov 2019 12:16:05 +0000 Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::2ca9:414:cc01:9706]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::2ca9:414:cc01:9706%4]) with mapi id 15.20.2495.013; Sat, 23 Nov 2019 12:16:05 +0000 From: Christer Holmberg To: Paul Kyzivat , "sipcore@ietf.org" Thread-Topic: [sipcore] Draft new version: draft-ietf-sipcore-sip-token-authnz-06 Thread-Index: AQHVnuD8OZ/G/ULu3EyC2P8FryT98aeXigeAgAHgLIA= Date: Sat, 23 Nov 2019 12:16:05 +0000 Message-ID: References: <0BC75CC8-80F7-473E-A9C8-9340E2F9FFF9@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com; x-originating-ip: [129.192.75.4] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 7ea02709-26e8-44b0-53d1-08d7700eea3c x-ms-traffictypediagnostic: HE1PR07MB4345: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 0230B09AC4 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(39860400002)(376002)(136003)(396003)(366004)(189003)(199004)(6486002)(11346002)(2171002)(44832011)(76176011)(446003)(36756003)(4744005)(25786009)(66066001)(33656002)(58126008)(6506007)(91956017)(478600001)(14454004)(2616005)(110136005)(966005)(102836004)(6246003)(186003)(2906002)(53546011)(99286004)(3846002)(6116002)(256004)(229853002)(14444005)(2501003)(66556008)(86362001)(6436002)(66476007)(7736002)(6512007)(76116006)(66946007)(64756008)(305945005)(66446008)(71190400001)(5660300002)(26005)(81166006)(8676002)(81156014)(8936002)(71200400001)(316002)(6306002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB4345; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 3+1qv7zIKJt9q6nWQ8iRVTwbsgWwUjA4WJrkah4M2jLwbwXETkbU4m6zx4Ygd1UGXdexrJIDF3i+vJORgYAdconO3K66d3IfrEbdo5AbT1Eh3K0PdvNa30J08gU7Ag5I8kUmD1auLKIcL69rabTSj2EGI9qTa7yQPUWJ7U1Bl4hX6XJysdOXqiFhDIII5D5DsxYf7L0d7FWPC2EAX8fMeVGPjvjYH3NmAlg9lelM8IeycEvfNdguZk6bRJYP/dlZk2yswtbwa5prUQ6xZ30HpXiZOmM0pSi2sdPbz28gw/xPzCTCiwIXpglvfIgEj1Q6ecPZzOYRFcSlp41j0XZM5hInJKWR1cMnyVcMJZCTku11ru4jjG9N/jshr+5b/lQ17OLrlPlWNQiOXZtNk3dw+RoJLH0FE5WfGdUMnBoWMFmyRrdjPV1Clf/ENe2xUqiprTH7oXdgb9agCsVMgsvXWC6BYPim5PfRZPlC+b57Bzo= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <86DE8ADA2DA82F43854390C79487B551@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7ea02709-26e8-44b0-53d1-08d7700eea3c X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Nov 2019 12:16:05.6490 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: d1Yr18J0oZGzwZH33YZB9cKwUDX6/NHbxKNbpMAFXmGooi6Lj58Nt5XsLDQdgxRAHt7AzLhFBVsTbaWeGc0yLHraMHIhNZuTX/Cc4bCGwvs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB4345 Archived-At: Subject: Re: [sipcore] Draft new version: draft-ietf-sipcore-sip-token-authnz-06 X-BeenThere: sipcore@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SIP Core Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 12:16:11 -0000 SGksDQoNClNvcnJ5LCBJIHRoaW5rIGl0IHdhcyBPbGxlIHdobyByZXF1ZXN0ZWQgdGhlIGNoYW5n ZS4NCg0KUmVnYXJkcywNCg0KQ2hyaXN0ZXINCg0K77u/T24gMjMvMTEvMjAxOSwgNS4zNywgInNp cGNvcmUgb24gYmVoYWxmIG9mIFBhdWwgS3l6aXZhdCIgPHNpcGNvcmUtYm91bmNlc0BpZXRmLm9y ZyBvbiBiZWhhbGYgb2YgcGt5eml2YXRAYWx1bS5taXQuZWR1PiB3cm90ZToNCg0KICAgIE9uIDEx LzE5LzE5IDg6NTUgQU0sIENocmlzdGVyIEhvbG1iZXJnIHdyb3RlOg0KICAgID4gSGksDQogICAg PiANCiAgICA+IFdlIGhhdmUgc3VibWl0dGVkIGEgbmV3IHZlcnNpb24gKC0wNikgb2YgDQogICAg PiBkcmFmdC1pZXRmLXNpcGNvcmUtc2lwLXRva2VuLWF1dGhuei0wNi4NCiAgICA+IA0KICAgID4g SW4gdGhlIG5ldyB2ZXJzaW9uIHRoZSBzaXAudG9rZW4gbWVkaWEgZmVhdHVyZSB0YWcgaGFzIGJl ZW4gcmVuYW1lZCB0byANCiAgICA+IHNpcC5vYXV0aDIsIGFzIHJlcXVlc3RlZCBieSBQYXVsLg0K ICAgIA0KICAgIE1lPw0KICAgIA0KICAgIFdoaWxlIEkgZG9uJ3QgbWluZCB0aGUgY2hhbmdlLCBB RkFJSyBJIGRpZG4ndCByZXF1ZXN0IGl0LiBJIGp1c3QgY2hlY2tlZCANCiAgICBteSBlbWFpbHMs IGFuZCB0aGUgY2xvc2VzdCBJIGNvdWxkIGZpbmQgaXM6DQogICAgDQogICAgaHR0cHM6Ly9tYWls YXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9zaXBjb3JlL0RVNTNnalJDVE5UT2h4eFV0ME5QZGh4 Q3Robw0KICAgIA0KICAgIAlUaGFua3MsDQogICAgCVBhdWwNCiAgICANCiAgICBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIHNpcGNvcmUgbWFpbGlu ZyBsaXN0DQogICAgc2lwY29yZUBpZXRmLm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vc2lwY29yZQ0KICAgIA0KDQo=