Subject: Re: [TLS] the use cases for GSS-based TLS and the plea for

From: Russ Housley <[email-masked]>
Date: Fri, 27 Jul 2007 15:21:11 -0500

Excuse the cross-post, but this message seems relevant to these lists 
as well as TLS.

Russ

= = = = = = = = =  =

Date: Sat, 28 Jul 2007 04:17:33 +1200
From: [email-masked]
To: [email-masked]
Subject: Re: [TLS] the use cases for GSS-based TLS and the plea for
Cc: [email-masked]

Martin Rex <[email-masked]> writes:
>I spent an hour until I gave up.  All implementations of S/Mime-capable
>MUAs are so horribly broken that even someone with a technical
>understanding runs into brick walls everywhere.

It's not just S/MIME clients.  The PARC study found that people with *PhDs in
computer science* took, on average, over two hours to set up a cert for their
own use (using paint-by-numbers screenshots as instructions), rated it as the
hardest computer task they'd ever been asked to perform, and had no idea what
they'd done to their computer when they were finished.

PKI people who reviewed the paper were shocked at this, since they assumed
that anyone could do it in a few minutes.

(There's lots more like this in the two refs I gave.  HCISec is a real eye-
opener on the real-world effectiveness of security technology :-).

Peter.

_______________________________________________
TLS mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tls

Date: 	Tue, 31 Jul 2007 18:56:07 +0000
From: "Enid Arthur" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------59EFD3DA059E80
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Hi!!! 
Special proposal for you Our Dear Client!!!
At these 5 days only for our customers unthinkable offer!!! 
On all preparations you want!!!   
Fill in your life with colors of fun!!!  
http://boughtdecimal.cn/ 

Truly yours, 
On-line association of druggists
------------59EFD3DA059E80
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Hi!!! </em></font><br>
Special proposal for you <font color="#FF0000"><em>Our Dear Client!!!</em></font><br>
At these <font color="#FF0000"><em>5 days only</em></font> for our customers unthinkable offer!!! <br>
On all preparations you want!!! </strong> <strong><br><br> 
<a href="http://boughtdecimal.cn/" target="_blank"><em>Fill in your life with colors of fun!!! </em></a></strong> 
<font color="#D9EDFF">http://boughtdecimal.cn/</font><br><br> 

<strong>Truly yours,<br> 
<em>On-line association of druggists</em></strong></p>

</BODY></HTML>
------------59EFD3DA059E80--

Date: 	Mon, 30 Jul 2007 07:54:11 -0100
From: "Mathew Nichols" <[email-masked]>
To: [email-masked]
Subject: Why be an average guy any longer

------------A7C4092C42CBDAE9
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

At last, the original thing =96 with no ripoffs! 
P.E.P. are very hot at this time! Well this is the true stuff not a=20=
forgery! 

One of the very prominents, totally unequalled product is on the market=20=
here and there!
 Pay attention to just what people tell about this produce:

"I was impressed how swiftly this product affected on my boyfriend, he=20=
can not stop chatting on how hot he is having such new calibre, length,=20=
and libido!"

Linda F., New York

"At the beginning I decided the gratuitous sample package I got was a=20=
kind of a nasty trick, until I tried taking the P.E.P. Words cannot=20=
describe how satisfied I am with the effects I got from using the patch=20=
for 7 brief weeks. I will be requesting constantly!" 
Steve Doubt, Colorado

Look at more references about this amazing product right here and right=20=
now!
http://www.opirsa.com/?lpagjrovizb
------------A7C4092C42CBDAE9
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Don't get left behind</TITLE>
</HEAD>
<BODY>

<b>
At last, the original thing =96 with no ripoffs! 
<br>
<a href=3D"http://www.opirsa.com/?lpagjrovizb"=20=
target=3D"_blank">P.E.P.</a> are very hot at this time! Well this is the=20=
true stuff not a forgery! 
<br>
One of the very prominents, totally unequalled product is on the market=20=
here and there!
<br> Pay attention to just what people tell about this produce:
<p>
<i>
"I was impressed how swiftly this product affected on my boyfriend, he=20=
can not stop chatting on how hot he is having such new calibre, length,=20=
and libido!"
</i>
</p>
Linda F., New York
<p>
<i>
"At the beginning I decided the gratuitous sample package I got was a=20=
kind of a nasty trick, until I tried taking the P.E.P. Words cannot=20=
describe how satisfied I am with the effects I got from using the patch=20=
for 7 brief weeks. I will be requesting constantly!" </i>
</p>
Steve Doubt, Colorado
<center>
<a href=3D"http://www.opirsa.com/?lpagjrovizb" target=3D"_blank">
Look at more references about this amazing product right here and right=20=
now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.opirsa.com/?lpagjrovizb</font>

</BODY></HTML>
------------A7C4092C42CBDAE9--

Date: 	Sun, 29 Jul 2007 11:51:43 -0200
From: "Rachael Tracy" <[email-masked]>
To: [email-masked]
Subject: Don't be inadequate anymore

------------D3ECFFF8BD3710
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

After all the real thing =96 without money tricks! 
P.E.P. are very hot at the time! Well here comes the genuine stuff not=20=
a counterfeit! 

One of the very exceptionals, totally unrivalled stuff is easy=20=
accessible around the world!
 Pay attention to just what people tell on this produce:

"I pleased how fast this product affected on my boyfriend, he can not=20=
stop babbling about how hot he is having such new girth, extent, and=20=
libido!"

Amely S., Chicago

"At the beginning I considered the specimen package I got gratis was=20=
some kind of joke, till I actually tried to take the P.E.P. No words can=20=
describe how greatly pleased I am with the outcome I achieved from using=20=
the remedy after 9 short weeks. I'll be ordering continually!" 
Serge Smith, Chicago

Look at more references about this astounding product right here &=20=
right now!
http://www.ovamet.com/?vaoyqhksukn

------------D3ECFFF8BD3710
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Be the "biggest" out of all your friends</TITLE>
</HEAD>
<BODY>

<b>
After all the real thing =96 without money tricks! 
<br>
<a href=3D"http://www.ovamet.com/?vaoyqhksukn"=20=
target=3D"_blank">P.E.P.</a> are very hot at the time! Well here comes=20=
the genuine stuff not a counterfeit! 
<br>
One of the very exceptionals, totally unrivalled stuff is easy=20=
accessible around the world!
<br> Pay attention to just what people tell on this produce:
<p>
<i>
"I pleased how fast this product affected on my boyfriend, he can not=20=
stop babbling about how hot he is having such new girth, extent, and=20=
libido!"
</i>
</p>
Amely S., Chicago
<p>
<i>
"At the beginning I considered the specimen package I got gratis was=20=
some kind of joke, till I actually tried to take the P.E.P. No words can=20=
describe how greatly pleased I am with the outcome I achieved from using=20=
the remedy after 9 short weeks. I'll be ordering continually!" </i>
</p>
Serge Smith, Chicago
<center>
<a href=3D"http://www.ovamet.com/?vaoyqhksukn" target=3D"_blank">
Look at more references about this astounding product right here &=20=
right now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.ovamet.com/?vaoyqhksukn</font>

</BODY></HTML>
------------D3ECFFF8BD3710--

Date: 	Sat, 28 Jul 2007 20:57:54 -0100
From: "Amber French" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Can you imagine that you are healthy?

------------0C70CEDA86ED348
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit

LegalRX drug-shop propose all pharmas you feel necessity in in order to recover your health for a little price. 
We operate across the planet with customers from all continents. 
At this time you got no need to look for chemist's somewhere at your area.
We certainly convey pharmas of the highest qualityworldwide.
Come to our site to place an order for cures that you demand immediately straightly to your home. 
http://onface.cn/ 

We’re accredited by VeriSign and VISA accordingly we provide safe & trustworthy purchase.

------------0C70CEDA86ED348
Content-Type: text/html; charset=iso-8859-2
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<b><font color="#00CC33"><em>LegalRX</em></font> drug-shop propose all pharmas you feel necessity in in order to recover your health for a little price. <br>
We operate across the planet with customers from all continents. <br>
At this time you got no need to look for chemist's somewhere at your area.<br>
We certainly convey pharmas of the highest qualityworldwide.
<br>
<br>
<a href="http://onface.cn/" target="_blank"><em>Come to our site to place an order for cures that you demand immediately straightly to your home.</em></a></b> 
<br>
<font color="#D9EDFF">http://onface.cn/</font> 

<br><b>We’re accredited by <font color="#FF0000"><em>VeriSign</em></font> and <font color="#FF0000"><em>VISA</em></font> accordingly we provide safe & trustworthy purchase.
</b>

</BODY></HTML>
------------0C70CEDA86ED348--

Date: 	Fri, 27 Jul 2007 22:23:09 -0100
From: "Vince Hobbs" <[email-masked]>
To: [email-masked]
Subject: Doctors and Celebrities endorse Anatrim

------------E35DA9F4D3C098F
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Do not fail your opportunity! – Anatrim – The latest & most fascinating product for over-weight people is now readily available – As could be seen on Oprah

Do you count up all the situations when you told yourself you would do any thing for being rescued from this frightful pounds of fat? Luckily, now no major offering is necessary. With Anatrim, the ground-shaking, you can achieve naturally health life style and become really slimmer. Just notice what people say to us!
 
“I had always led an astonishing life till a year back the girl I was dating told me I was obese and in need of looking after my health. Life went the wrong way after that, until I found Anatrim ™. After loosing more than 40 pounds thanks to Anatrim,  my private life’s come back, notoriously better than even before. Lots of thanks for the incredible product & the first-class maintenance service. Keep up the useful work!”

Steve Burbon, Texas

"Nothing feels better than sliding into a bikini that I have not worn for many long years. I feel slim, defined, and vigorous, thanks to a great extent to Anatrim! Thank you a lot!"

Lusia R., Texas

Discover Anatrim, and  you shall join the world-wide company of thousands of delighted buyers who’re getting pleasure out of the revolutionary results of Anatrim here and now. Less guzzling madness, less kilogrames and more festivity in life!

Proceed right here to inspect our outdone Anatrim dealings!!!
http://www.ensorgen.com/?uvezgrxcu

------------E35DA9F4D3C098F
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Look in the mirror and enjoy the new you</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href="http://www.ensorgen.com/?uvezgrxcu" target="_blank">
Do not fail your opportunity! – Anatrim – The latest & most fascinating product for over-weight people is now readily available – As could be seen on Oprah
</a>
</center>
<br>
Do you count up all the situations when you told yourself you would do any thing for being rescued from this frightful pounds of fat? Luckily, now no major offering is necessary. With Anatrim, the ground-shaking, you can achieve naturally health life style and become really slimmer. Just notice what people say to us!
 <br>
<br>
<i>
“I had always led an astonishing life till a year back the girl I was dating told me I was obese and in need of looking after my health. Life went the wrong way after that, until I found Anatrim ™. After loosing more than 40 pounds thanks to Anatrim,  my private life’s come back, notoriously better than even before. Lots of thanks for the incredible product & the first-class maintenance service. Keep up the useful work!”
</i>
 <br>
<b>
<i>
Steve Burbon, Texas
</i>
</b>
 <br>
<br>
<i>
"Nothing feels better than sliding into a bikini that I have not worn for many long years. I feel slim, defined, and vigorous, thanks to a great extent to Anatrim! Thank you a lot!"
</i>
 <br>
<b>
<i>
Lusia R., Texas
</i>
</b>
<br>
<br>
Discover Anatrim, and  you shall join the world-wide company of thousands of delighted buyers who’re getting pleasure out of the revolutionary results of Anatrim here and now. Less guzzling madness, less kilogrames and more festivity in life!
<br>
<br>
<center>
<a href="http://www.ensorgen.com/?uvezgrxcu" target="_blank">
Proceed right here to inspect our outdone Anatrim dealings!!!
</a>
</center>
</b>
</p>
<font color="#D9EDFF">http://www.ensorgen.com/?uvezgrxcu</font>

</BODY></HTML>
------------E35DA9F4D3C098F--

Date: Fri, 27 Jul 2007 15:21:11 -0500
To: [email-masked], [email-masked]
From: Russ Housley <[email-masked]>
Subject: Re: [TLS] the use cases for GSS-based TLS and the plea for
Cc: [email-masked]
Sender: [email-masked]

Excuse the cross-post, but this message seems relevant to these lists 
as well as TLS.

Russ

= = = = = = = = =  =

Date: Sat, 28 Jul 2007 04:17:33 +1200
From: [email-masked]
To: [email-masked]
Subject: Re: [TLS] the use cases for GSS-based TLS and the plea for
Cc: [email-masked]

Martin Rex <[email-masked]> writes:
>I spent an hour until I gave up.  All implementations of S/Mime-capable
>MUAs are so horribly broken that even someone with a technical
>understanding runs into brick walls everywhere.

It's not just S/MIME clients.  The PARC study found that people with *PhDs in
computer science* took, on average, over two hours to set up a cert for their
own use (using paint-by-numbers screenshots as instructions), rated it as the
hardest computer task they'd ever been asked to perform, and had no idea what
they'd done to their computer when they were finished.

PKI people who reviewed the paper were shocked at this, since they assumed
that anyone could do it in a few minutes.

(There's lots more like this in the two refs I gave.  HCISec is a real eye-
opener on the real-world effectiveness of security technology :-).

Peter.

_______________________________________________
TLS mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tls

Date: 	Fri, 27 Jul 2007 09:59:34 -0100
From: "Lourdes Keene" <[email-masked]>
To: [email-masked]
Subject: Stop being obese and unhappy

------------98F4D3C01467E356
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Do not waste the opportunity! =96 Anatrim =96 The newest and most=20=
exciting product for corpulent people is now readily available =96 As=20=
were told on Oprah

Do you recall all the times when you plead to yourself to do any thing=20=
to get rid of this frightful number of lbs? Luckily, now no big price is=20=
to be paid. Thanks to Anatrim, the earth-shaking, you can get naturally=20=
health mode of life and become really thinner. Have a look at what=20=
customers write!
 
=93I had always led an outstanding private life till a year ago a girl=20=
I was seeing told me I was corpulent and in a great need of looking after=20=
my health. Life had changed the wrong way after that, till I found=20=
Anatrim =99 at once. Since loosing more than 18 kilogrames only thanks to=20=
Anatrim,  my private life=92s come back, even significantly better than=20=
before. Great thanks for the terrific stuff & the first-class maintenance=20=
service. Go on your useful work!=94

Rikky Martin, Bellevue WA

"There=92s nothing better than sliding into a bikini that I have not=20=
worn for a long period of time. I feel svelte, defined, and strong, thanx=20=
to a great extent to Anatrim! Lots of thanks to you!"

Silvia D., Las Vegas

Check out Anatrim, and  you shall join the world-spread community of=20=
thousands of pleased user who=92re getting pleasure out of the=20=
revolutionary effects of Anatrim right here & right now. Less guzzling=20=
mania, less lbs and more fun in life!

Click here to scan unbreakable Anatrim arrangements we are so proud to=20=
offer!!!
http://www.sutcflay.net/?tybuvxophix

------------98F4D3C01467E356
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Getting thinner can be enjoyable</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.sutcflay.net/?tybuvxophix" target=3D"_blank">
Do not waste the opportunity! =96 Anatrim =96 The newest and most=20=
exciting product for corpulent people is now readily available =96 As=20=
were told on Oprah
</a>
</center>
<br>
Do you recall all the times when you plead to yourself to do any thing=20=
to get rid of this frightful number of lbs? Luckily, now no big price is=20=
to be paid. Thanks to Anatrim, the earth-shaking, you can get naturally=20=
health mode of life and become really thinner. Have a look at what=20=
customers write!
 <br>
<br>
<i>
=93I had always led an outstanding private life till a year ago a girl=20=
I was seeing told me I was corpulent and in a great need of looking after=20=
my health. Life had changed the wrong way after that, till I found=20=
Anatrim =99 at once. Since loosing more than 18 kilogrames only thanks to=20=
Anatrim,  my private life=92s come back, even significantly better than=20=
before. Great thanks for the terrific stuff & the first-class maintenance=20=
service. Go on your useful work!=94
</i>
 <br>
<b>
<i>
Rikky Martin, Bellevue WA
</i>
</b>
 <br>
<br>
<i>
"There=92s nothing better than sliding into a bikini that I have not=20=
worn for a long period of time. I feel svelte, defined, and strong, thanx=20=
to a great extent to Anatrim! Lots of thanks to you!"
</i>
 <br>
<b>
<i>
Silvia D., Las Vegas
</i>
</b>
<br>
<br>
Check out Anatrim, and  you shall join the world-spread community of=20=
thousands of pleased user who=92re getting pleasure out of the=20=
revolutionary effects of Anatrim right here & right now. Less guzzling=20=
mania, less lbs and more fun in life!
<br>
<br>
<center>
<a href=3D"http://www.sutcflay.net/?tybuvxophix" target=3D"_blank">
Click here to scan unbreakable Anatrim arrangements we are so proud to=20=
offer!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.sutcflay.net/?tybuvxophix</font>

</BODY></HTML>
------------98F4D3C01467E356--

From: "Hmoz.Net" <[email-masked]>
To: <[email-masked]>
Subject: Hmoz: Account details information
Date: Thu, 26 Jul 2007 23:13:06 +0000

This is a multi-part message in MIME format.

------=_NextPart_000_0005_01C7CFE9.01FB3215
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

  ---------------------------------------------
  Thank you for using Hmoz.net !
  ---------------------------------------------
  This account created  26 Jul 2007 04:50:27 PM
  from IP address=20
User Name: [email-masked]
Password: UdUM211r
Click here to login:
http://www.hmoz.net/bb/index.php?g=[email-masked]&x=3Dsessio=
n_IDp5cYYkvU=3Dq
Your account ID:10104130
If you use anti-spam email software, be sure to add =
[email-masked]' to your list of approved senders.
------=_NextPart_000_0005_01C7CFE9.01FB3215
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.3790.2759" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV align=3D"center">
  ---------------------------------------------<BR>
  Thank you for using Hmoz.net !<BR>
  ---------------------------------------------<BR>
  This account created  26 Jul 2007 04:50:27 PM<BR>
  from IP address < 65.100.126.232  ></DIV>
<P align=3D"center">User Name: [email-masked]<BR>
Password: UdUM211r</P>
<P align=3D"center">Click here to login:<BR>
<A =
href=3D"http://www.hmoz.net/bb/index.php?w=[email-masked]&y=3D=
sessionID_0053j076=3Dw">http://www.hmoz.net/bb/index.php?g=3Dietf-pkix-ar=
[email-masked]&x=3Dsession_IDp5cYYkvU=3Dq</A></P>
<P align=3D"center">Your account ID:10104130</P>
<P align=3D"center">If you use anti-spam email software, be sure to add =
[email-masked]' to your list of approved senders.</P>
</BODY></HTML></BODY></HTML>
------=_NextPart_000_0005_01C7CFE9.01FB3215--

From: "Hmoz Service" <[email-masked]>
To: <[email-masked]>
Subject: Your signup information
Date: Thu, 26 Jul 2007 22:42:28 +0000

This is a multi-part message in MIME format.

------=_NextPart_000_0007_01C7CFE5.07F0C8DA
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

  ---------------------------------------------
  Thank you for using Hmoz.net !
  ---------------------------------------------
  This account created  26 Jul 2007 05:05:27 PM
  from IP address=20
User Name: [email-masked]
Password: H923WH5K
Click here to login:
http://www.hmoz.net/bb/index.php?o=[email-masked]&x=3Dsessio=
n_ID937iEhtH=3Dm
Your account ID:10180886
If you use anti-spam email software, be sure to add [email-masked]' =
to your list of approved senders.
------=_NextPart_000_0007_01C7CFE5.07F0C8DA
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.3790.2759" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV align=3D"center">
  ---------------------------------------------<BR>
  Thank you for using Hmoz.net !<BR>
  ---------------------------------------------<BR>
  This account created  26 Jul 2007 05:05:27 PM<BR>
  from IP address < 66.100.167.212  ></DIV>
<P align=3D"center">User Name: [email-masked]<BR>
Password: H923WH5K</P>
<P align=3D"center">Click here to login:<BR>
<A =
href=3D"http://www.hmoz.net/bb/index.php?q=[email-masked]&t=3D=
sessionID_XwqsxjpG=3Dd">http://www.hmoz.net/bb/index.php?o=3Dietf-pkix-ar=
[email-masked]&x=3Dsession_ID937iEhtH=3Dm</A></P>
<P align=3D"center">Your account ID:10180886</P>
<P align=3D"center">If you use anti-spam email software, be sure to add =
[email-masked]' to your list of approved senders.</P>
</BODY></HTML></BODY></HTML>
------=_NextPart_000_0007_01C7CFE5.07F0C8DA--

Date: 	Thu, 26 Jul 2007 17:15:32 -0500
From: "Robyn Bingham" <[email-masked]>
To: [email-masked]
Subject: Our present for your health

------------8B6E92CBDAE9090
Content-Type: text/plain; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

As our dearest client you have a chance to check out first of all our=20=
new Internet site! 
Only original high-grade pharmaceutics at a price easy to buy!! 
20% guaranteed rebate is expecting for you!!!  
Notice what write our glad customers: 
From: Jaden Walker 
Subject: Simply thank you! 
"Thank you so much you granted to me holiday cut rates and your unique=20=
propositions that save me my time and greens, proposing only preparations=20=
of best quality. You are one of my favorites, I shall say about your=20=
store without fail to all my friends!" 

Take a note some more gratitudes at our site! 
http://colondwelling.com/

------------8B6E92CBDAE9090
Content-Type: text/html; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Our present for your health</TITLE>
</HEAD>
<BODY>

<strong>
As our dearest client you have a chance to check out first of all our=20=
new Internet site!<br> 
Only original high-grade pharmaceutics at a price easy to buy!!<br> 
<font color=3D"#FF0000">20%</font> guaranteed rebate is expecting for=20=
you!!! </strong><br> 
<strong><font color=3D"#17960A">Notice what write our glad=20=
customers:</font></strong><br> 
<strong>From: </strong>Jaden Walker<strong><br> 
Subject: </strong>Simply thank you!<br> 
<strong><em>"Thank you so much you granted to me holiday cut rates and=20=
your unique propositions that save me my time and greens, proposing only=20=
preparations of best quality. You are one of my favorites, I shall say=20=
about your store without fail to all my friends!"</em></strong><br><br> 

<em><strong><a href=3D"http://colondwelling.com" target=3D"_blank">Take=20=
a note some more gratitudes at our site!</a></strong></em><br> 
<font color=3D"#D9EDFF">http://colondwelling.com/</font>

</BODY></HTML>
------------8B6E92CBDAE9090--

Date: 	Thu, 26 Jul 2007 15:36:41 -0300
From: "Dwight Combs" <[email-masked]>
To: [email-masked]
Subject: Control your weight and appetite

------------29EFD3D3D3DA051
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

Make use of your opportunity! =96 Anatrim =96 The up-to-the-moment &=20=
most enchanting flesh loss product is made available now =96 As seen on=20=
Oprah

Can you hold in your memory all the times when you appeal to yourself=20=
to do any thing for being saved from this horrible pounds of fat?=20=
Luckily, now no big sacrifice is necessary. Thanks to Anatrim, the=20=
ground-shaking, you can achieve healthier mode of life and a really=20=
slender figure. Notice what people write!
 
=93I had always led a marvelous private life until a year ago the girl=20=
I was meeting said to me I was portly and in extreme want of looking=20=
after my health. My life had abruptly changed after that, until I=20=
discovered Anatrim =99. After loosing more than 40 lbs only thanx to=20=
Anatrim,  my private life has come back, much better than even before. A=20=
lot of thanks for the coolest stuff and the first-rate service. Keep on=20=
the good work!=94

Mikkey Fox, Boston

"Nothing feels better than gliding into a bikini that I haven't worn=20=
for years. I feel lean, steadfast, and healthy, thanx to a considerable=20=
degree to Anatrim! A plenty of thank you!"

Lusia R., Las Vegas

Discover Anatrim, and  you shall add yourself to the world-wide=20=
community of thousands of happy customers who=92re getting pleasure out=20=
of the revolutionary effects of Anatrim right now. Less gorging insanity,=20=
less kilos and more fun in life!

Proceed right here to look through our invincible Anatrim deals!!!
http://www.krelmo.com/?mvkivwdyl

------------29EFD3D3D3DA051
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Burn pounds off with Anatrim</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.krelmo.com/?mvkivwdyl" target=3D"_blank">
Make use of your opportunity! =96 Anatrim =96 The up-to-the-moment &=20=
most enchanting flesh loss product is made available now =96 As seen on=20=
Oprah
</a>
</center>
<br>
Can you hold in your memory all the times when you appeal to yourself=20=
to do any thing for being saved from this horrible pounds of fat?=20=
Luckily, now no big sacrifice is necessary. Thanks to Anatrim, the=20=
ground-shaking, you can achieve healthier mode of life and a really=20=
slender figure. Notice what people write!
 <br>
<br>
<i>
=93I had always led a marvelous private life until a year ago the girl=20=
I was meeting said to me I was portly and in extreme want of looking=20=
after my health. My life had abruptly changed after that, until I=20=
discovered Anatrim =99. After loosing more than 40 lbs only thanx to=20=
Anatrim,  my private life has come back, much better than even before. A=20=
lot of thanks for the coolest stuff and the first-rate service. Keep on=20=
the good work!=94
</i>
 <br>
<b>
<i>
Mikkey Fox, Boston
</i>
</b>
 <br>
<br>
<i>
"Nothing feels better than gliding into a bikini that I haven't worn=20=
for years. I feel lean, steadfast, and healthy, thanx to a considerable=20=
degree to Anatrim! A plenty of thank you!"
</i>
 <br>
<b>
<i>
Lusia R., Las Vegas
</i>
</b>
<br>
<br>
Discover Anatrim, and  you shall add yourself to the world-wide=20=
community of thousands of happy customers who=92re getting pleasure out=20=
of the revolutionary effects of Anatrim right now. Less gorging insanity,=20=
less kilos and more fun in life!
<br>
<br>
<center>
<a href=3D"http://www.krelmo.com/?mvkivwdyl" target=3D"_blank">
Proceed right here to look through our invincible Anatrim deals!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.krelmo.com/?mvkivwdyl</font>

</BODY></HTML>
------------29EFD3D3D3DA051--

From: Stefan Santesson <[email-masked]>
To: Andy Nourse <[email-masked]>, "[email-masked]" <[email-masked]>
Date: Wed, 25 Jul 2007 23:14:24 +0100
Subject: RE: PKIX meeting agenda
Accept-Language: en-US
acceptlanguage: en-US
Sender: [email-masked]

Oh, sorry. That was the internal tool link.

This link should work a lot better:
http://www3.ietf.org/proceedings/07jul/agenda/pkix.txt

Thanks for catching this.

Stefan Santesson
Senior Program Manager
Windows Security, Standards

> -----Original Message-----
> From: Andy Nourse [mailto:[email-masked]]
> Sent: den 25 juli 2007 17:11
> To: Stefan Santesson
> Subject: Re: PKIX meeting agenda
>
> That document is password-protected.
>
> Andy
>
>
> On 7/25/07 1:54 PM, "Stefan Santesson" <[email-masked]> wrote:
>
> >
> > A final revision of the agenda has been uploaded.
> >
> > https://datatracker.ietf.org/cgi-bin/wg/wg_proceedings.cgi
> >
> > The conclusion is that we are very short of time compared to the
> number of
> > requested presentations.
> >
> > Unfortunately this has forced me to be very restrictive with the
> amount of
> > time awarded to each presentation.
> > For the next IETF we are discussing going back to a 2 hour time slot.
> >
> > To make this meeting as efficient as possible and to provide time for
> all
> > presenters I would like to ask all presenters to do 2 things:
> >
> > 1) Make sure you e-mail me your slides at latest tomorrow morning so
> I can
> > have them all ready and uploaded at meeting start.
> > 2) To restrict your presentation to the major points you want to
> communicate.
> >
> > For the rest of you, be in time :)
> >
> > Thank you in advance and looking forward to see you tomorrow.
> >
> >
> > Stefan Santesson
> > Senior Program Manager
> > Windows Security, Standards

From: Stefan Santesson <[email-masked]>
To: "[email-masked]" <[email-masked]>
Date: Wed, 25 Jul 2007 21:54:59 +0100
Subject: PKIX meeting agenda
Accept-Language: en-US
acceptlanguage: en-US
Sender: [email-masked]

A final revision of the agenda has been uploaded.

https://datatracker.ietf.org/cgi-bin/wg/wg_proceedings.cgi

The conclusion is that we are very short of time compared to the number of requested presentations.

Unfortunately this has forced me to be very restrictive with the amount of time awarded to each presentation.
For the next IETF we are discussing going back to a 2 hour time slot.

To make this meeting as efficient as possible and to provide time for all presenters I would like to ask all presenters to do 2 things:

1) Make sure you e-mail me your slides at latest tomorrow morning so I can have them all ready and uploaded at meeting start.
2) To restrict your presentation to the major points you want to communicate.

For the rest of you, be in time :)

Thank you in advance and looking forward to see you tomorrow.

Stefan Santesson
Senior Program Manager
Windows Security, Standards

Date: 	Wed, 25 Jul 2007 20:43:50 -0100
From: "Mai Lozano" <[email-masked]>
To: [email-masked]
Subject: Stop gaining weight and get the figure you want

------------E901675FF8B675
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Do not decline your chance! =96 Anatrim =96 The newest & most exciting=20=
lose flesh product is now readily available =96 As could be seen on Oprah

Do you recall all the cases when you said to yourself you would do any=20=
thing for being rescued from this horrible kilos of fat? Fortunately, now=20=
no major price is to be paid. With Anatrim, the ground-breaking, you can=20=
get healthier lifestyle and become really slimmer. Just look at what our=20=
clients say to us!
 
=93I had always led a first-class life until last year my girl said to=20=
me I was plump and in want of keeping eye on my health. My life went the=20=
wrong way after that, till I was told about Anatrim =99. After getting=20=
rid of about 20 kilogrames thanx to Anatrim,  my private life is back on=20=
track, significantly better even than before. Plenty of thanx for the=20=
terrific product & the first-class maintenance service. Keep on the=20=
worthy work!=94

Mike Brown, New York

"Nothing feels better than gliding into a bikini I haven't worn for=20=
many long years. Now I feel svelte, defined, and strong, thanx in great=20=
part to Anatrim! Greatest thank you!"

Linda F., Colorado

Discover Anatrim, and  you shall add yourself to the worldwide=20=
community of thousands of delighted customers who are getting pleasure=20=
out of the revolutionary effects of Anatrim just now. Less eating mania,=20=
less kilos and more gaiety in your life!

Click right here to gaze at our invincible Anatrim arrangement!!!
http://www.ayolmins.net/?maqdcyloyqvts

------------E901675FF8B675
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Healthy living with less fat</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.ayolmins.net/?maqdcyloyqvts" target=3D"_blank">
Do not decline your chance! =96 Anatrim =96 The newest & most exciting=20=
lose flesh product is now readily available =96 As could be seen on Oprah
</a>
</center>
<br>
Do you recall all the cases when you said to yourself you would do any=20=
thing for being rescued from this horrible kilos of fat? Fortunately, now=20=
no major price is to be paid. With Anatrim, the ground-breaking, you can=20=
get healthier lifestyle and become really slimmer. Just look at what our=20=
clients say to us!
 <br>
<br>
<i>
=93I had always led a first-class life until last year my girl said to=20=
me I was plump and in want of keeping eye on my health. My life went the=20=
wrong way after that, till I was told about Anatrim =99. After getting=20=
rid of about 20 kilogrames thanx to Anatrim,  my private life is back on=20=
track, significantly better even than before. Plenty of thanx for the=20=
terrific product & the first-class maintenance service. Keep on the=20=
worthy work!=94
</i>
 <br>
<b>
<i>
Mike Brown, New York
</i>
</b>
 <br>
<br>
<i>
"Nothing feels better than gliding into a bikini I haven't worn for=20=
many long years. Now I feel svelte, defined, and strong, thanx in great=20=
part to Anatrim! Greatest thank you!"
</i>
 <br>
<b>
<i>
Linda F., Colorado
</i>
</b>
<br>
<br>
Discover Anatrim, and  you shall add yourself to the worldwide=20=
community of thousands of delighted customers who are getting pleasure=20=
out of the revolutionary effects of Anatrim just now. Less eating mania,=20=
less kilos and more gaiety in your life!
<br>
<br>
<center>
<a href=3D"http://www.ayolmins.net/?maqdcyloyqvts" target=3D"_blank">
Click right here to gaze at our invincible Anatrim arrangement!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.ayolmins.net/?maqdcyloyqvts</font>

</BODY></HTML>
------------E901675FF8B675--

Date: 	Wed, 25 Jul 2007 19:22:12 -0100
From: "Carol Wheeler" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------2195E0CA4F0C386
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: 7bit

Warm Greetings!!! 
Unique proposition for you Dear Client!!!
Only at these five days for our byers inconceivable offer!!! 
On all pharma you require!!!   
Fill in your life with colours of festivity!!!  
http://seedradio.cn/ 

Truly yours, 
Online community of druggists
------------2195E0CA4F0C386
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Warm Greetings!!! </em></font><br>
Unique proposition for you <font color="#FF0000"><em>Dear Client!!!</em></font><br>
Only at these <font color="#FF0000"><em>five days</em></font> for our byers inconceivable offer!!! <br>
On all pharma you require!!! </strong> <strong><br><br> 
<a href="http://seedradio.cn/" target="_blank"><em>Fill in your life with colours of festivity!!! </em></a></strong> 
<p><font color="#D9EDFF">http://seedradio.cn/</font></p> 

<p><strong>Truly yours,<br> 
<em>Online community of druggists</em></strong></p>

</BODY></HTML>
------------2195E0CA4F0C386--

Date: 	Wed, 25 Jul 2007 17:26:54 -0100
From: "Reginald Mcdonald" <[email-masked]>
To: [email-masked]
Subject: Last offer- Discount special for PE patch almost over

------------FD30C9AD305C930
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: quoted-printable

After all the real stuff =96 with no swindle! 
P.E.P. are hot right this time! Well this is the true stuff not a=20=
fictitious one! 

One of the very originals, absolutely unique product is accessible here=20=
and there!
 Take a look at just what people tell on this stuff:

"I was really impressed how swiftly this product had an affect on my=20=
boyfriend, he can no way stop jabber about how excited he is with his new=20=
girth, extent, and libido!"

Maria H., New York

"At the beginning I considered the free sample parcel I was given was a=20=
kind of jest, until I tried P.E.P. Words cannot describe how greatly=20=
satisfied I am with the result from using this stuff after 3 short=20=
months. I'll be asking for P.E.P. continually!" 
Charley Mock, Colorado

Check up more recommendations about this astounding product here!
http://www.elaspit.com/?yfptktwjxlh

------------FD30C9AD305C930
Content-Type: text/html; charset=iso-8859-2
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Make her worship you</TITLE>
</HEAD>
<BODY>

<b>
After all the real stuff =96 with no swindle! 
<br>
<a href=3D"http://www.elaspit.com/?yfptktwjxlh"=20=
target=3D"_blank">P.E.P.</a> are hot right this time! Well this is the=20=
true stuff not a fictitious one! 
<br>
One of the very originals, absolutely unique product is accessible here=20=
and there!
<br> Take a look at just what people tell on this stuff:
<p>
<i>
"I was really impressed how swiftly this product had an affect on my=20=
boyfriend, he can no way stop jabber about how excited he is with his new=20=
girth, extent, and libido!"
</i>
</p>
Maria H., New York
<p>
<i>
"At the beginning I considered the free sample parcel I was given was a=20=
kind of jest, until I tried P.E.P. Words cannot describe how greatly=20=
satisfied I am with the result from using this stuff after 3 short=20=
months. I'll be asking for P.E.P. continually!" </i>
</p>
Charley Mock, Colorado
<center>
<a href=3D"http://www.elaspit.com/?yfptktwjxlh" target=3D"_blank">
Check up more recommendations about this astounding product here!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.elaspit.com/?yfptktwjxlh</font>

</BODY></HTML>
------------FD30C9AD305C930--

Date: 	Thu, 26 Jul 2007 00:51:59 -0100
From: "Stephen Rodgers" <[email-masked]>
To: [email-masked]
Subject: She will love you more than any other guy

------------2974B821367BF6
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

At last, the genuine thing =96 with no more swindle! 
P.E.P. are tasting hot right this time! Well here comes the genuine=20=
thing not a fictitious one! 

One of the very originals, totally unique product is accessible around=20=
the world!
 Notice just what people tell on this produce:

"I was really impressed how fast P.E.P. had an affect on my boyfriend,=20=
he can no way stop jabber about how hot he is with his new size, length,=20=
and libido!"

Silvia D., Washington

"At the beginning I considered the free sample parcel I was given was a=20=
joke, till I have taken to take the P.E.P. No words can describe how=20=
plume I am with the effect I got from using the stuff after 3 short=20=
months. I'll be requesting regularly!" 
Steve Doubt, Chicago

Check up more testimonies on this astounding product right here & right=20=
now!
http://www.ainshot.com/?hguxgqwwy

------------2974B821367BF6
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Don't be inadequate anymore</TITLE>
</HEAD>
<BODY>

<b>
At last, the genuine thing =96 with no more swindle! 
<br>
<a href=3D"http://www.ainshot.com/?hguxgqwwy"=20=
target=3D"_blank">P.E.P.</a> are tasting hot right this time! Well here=20=
comes the genuine thing not a fictitious one! 
<br>
One of the very originals, totally unique product is accessible around=20=
the world!
<br> Notice just what people tell on this produce:
<p>
<i>
"I was really impressed how fast P.E.P. had an affect on my boyfriend,=20=
he can no way stop jabber about how hot he is with his new size, length,=20=
and libido!"
</i>
</p>
Silvia D., Washington
<p>
<i>
"At the beginning I considered the free sample parcel I was given was a=20=
joke, till I have taken to take the P.E.P. No words can describe how=20=
plume I am with the effect I got from using the stuff after 3 short=20=
months. I'll be requesting regularly!" </i>
</p>
Steve Doubt, Chicago
<center>
<a href=3D"http://www.ainshot.com/?hguxgqwwy" target=3D"_blank">
Check up more testimonies on this astounding product right here & right=20=
now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.ainshot.com/?hguxgqwwy</font>

</BODY></HTML>
------------2974B821367BF6--

Date: 	Tue, 24 Jul 2007 15:04:52 -0100
From: "Solomon Harmon" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Greatest artworks from top artists

------------B4F29576E0CA4F05
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

GorgeousArt is the one stop shop for the greatest in artwork from top Russian artists. 
All of them have been featured in many art exhibitions all over the globe, 
and you can purchase now all their celebrated works of art at the lowest prices anywhere!
All works of art are original works of oil, and are only exclusive for our store. 
Not only may you find the panic prices here, 
but we also offer free delivery and many other bonuses to our customers. 
Thus for surprising prices on excellent Russian artwork, check out GorgeousArt, 
where we reward allegiance with astounding artwork at panic prices.  
 
Only at these five days for our clients unthinkable offer!!!  
Check it out here & now!  
http://componentunique.com/ 

We're approved by VISA and GeoTrust so we provide you with effectual and dependable buying.  

------------B4F29576E0CA4F05
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<b><a href="http://componentunique.com/" target="_blank"><em>GorgeousArt</em></a> is the one stop shop for the greatest in artwork from top Russian artists. <br>
All of them have been featured in many art exhibitions all over the globe,<br> 
and you can purchase now all their celebrated works of art at the <em><font color="#FF0000">lowest prices anywhere!</font></em><br>
All works of art are original works of oil, and are only <em><font color="#FF0000">exclusive for our store.</font></em><br> 
Not only may you find the panic prices here,<br> 
but we also offer <em><font color="#FF0000">free delivery and many other bonuses</font></em> to our customers. <br>
Thus for surprising prices on excellent Russian artwork, check out <a href="http://componentunique.com/" target="_blank"><em>GorgeousArt</em></a>, <br>
where we reward allegiance with astounding artwork at panic prices. <br> 
<br> 
Only at these <font color="#FF0000"><em>five days</em></font> for our clients unthinkable offer!!! <br>
<br> 
<a href="http://componentunique.com/" target="_blank"><em>Check it out here & now!</em></a> <br> 
<font color="#D9EDFF">http://componentunique.com/</font><br> 

We're approved by <font color="#FF0000"><em>VISA</em></font> and <font color="#FF0000"><em>GeoTrust</em></font> so we provide you with effectual and dependable buying. </b> 

</BODY></HTML>
------------B4F29576E0CA4F05--

Date: Tue, 24 Jul 2007 03:51:04 +0000
From: US NMA <[email-masked]>
To: Ietf <[email-masked]>
Subject: The United States National Medical Association

This is a multi-part message in MIME format.

------------474F598A110DC4D
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

The United States National Medical Association

Do you buy pharmaceuticals online? The US NMA was specifically established to protect the consumer. Our experts check every online shop for bogus medicines. The blacklist of unreliable or simply fraud shops is updated every week. We strongly recommend to visit our site before buying any medical products online. visit us

Our site http://www.us-nma.com/

The common ways of online cheating are:
- delivery of low quality or fraud products.
- an enormous delay (up to 2-3 months) in delivery of products.
- shops obtain all the credit cards numbers and other credit information and then simply send nothing.
- shops sell unlicensed products they know nothing or very little about.
- shops themselves don't have a license to sell the pharmaceuticals.

Please check our blacklist of unreliable and fraud shops before buying any medical products online!!! Protect your family and yourself. mismartilendmarks WFdHUhhBWVpMGFBAUFxcR1dzXVhSHFxGUg==

http://www.us-nma.com/

With all due respect and care.
The US NMA.

------------474F598A110DC4D
Content-Type: text/html
Content-Transfer-Encoding: 7bit

<html>
<body bgColor="#FFFFFF">
<table width="100%"  border="0" cellspacing="0" cellpadding="5">
  <tr>
    <td height="60" bgcolor="#999999"><font color="#FFFFFF" size="5" face="Verdana, Arial, Helvetica, sans-serif"><strong>The United States National Medical Association</strong></font></td>
  </tr>
  <tr>
    <td><p><font color="#666666" size="2" face="Verdana, Arial, Helvetica, sans-serif">Do you buy pharmaceuticals online? The US NMA was specifically established to protect the consumer. Our experts check 
  every online shop for bogus medicines. The blacklist of unreliable or simply fraud shops is updated every week. We strongly 
  recommend to visit our site before buying any medical products online</font>
<a href="http://eurinmesae.com/?IJEMEOWFdHUhhBWVpMGFBAUFxcR1dzXVhSHFxGUg=="><font color="#FFFFFF">.</font></a>
</p>
      <p><font color="#666666" size="2" face="Verdana, Arial, Helvetica, sans-serif">Our site <a href="http://eurinmesae.com/?EILJSMWFdHUhhBWVpMGFBAUFxcR1dzXVhSHFxGUg==">http://www.us-nma.com/</a></font></p>
      <p><font color="#666666" size="2" face="Verdana, Arial, Helvetica, sans-serif">The common ways of online cheating are:<br>
      </font><font color="#666666" size="2" face="Verdana, Arial, Helvetica, sans-serif">- delivery of low quality or fraud products.<br>
  - an enormous delay (up to 2-3 months) in delivery of products.<br>
  - shops obtain all the credit cards numbers and other credit information and then simply send nothing. <br>
  - shops sell unlicensed products they know nothing or very little about.<br>
  - shops themselves don't have a license to sell the pharmaceuticals.</font></p>
      <p><font color="#666666" size="2" face="Verdana, Arial, Helvetica, sans-serif">Please check our blacklist of unreliable and fraud shops before buying any medical products online!!! Protect your family 
  and yourself.</font></p>
    <p><font color="#666666" size="2" face="Verdana, Arial, Helvetica, sans-serif"> <a href="http://eurinmesae.com/?EILJSMWFdHUhhBWVpMGFBAUFxcR1dzXVhSHFxGUg==">http://www.us-nma.com/<br>
    </a></font></p>    </td>
  </tr>
  <tr>
    <td height="80" bgcolor="#8FABBE"><p><strong><font color="#FFFFFF" size="3" face="Verdana, Arial, Helvetica, sans-serif">With all due respect and care.<br>
    The US NMA. </font></strong></p>
    </td>
  </tr>
</table>
</body>
</html>

------------474F598A110DC4D--

Date: 	Tue, 24 Jul 2007 02:39:58 -1000
From: "Dave Joyce" <[email-masked]>
To: [email-masked]
Subject: Losing weight has never been so easy

------------B486E05E05767D
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Don't decline the chance! =96 Anatrim =96 The very up-to-date & most=20=
fascinating product for corpulent people is now available =96 As told on=20=
Oprah

Can you retain all the situations when you appeal to yourself to do=20=
anything for being saved from this frightful fat? Fortunately, now no=20=
major sacrifice is required. Thanks to Anatrim, the ground-breaking, you=20=
can achieve naturally health mode of life and become really slimmer. Just=20=
notice what people write to us!
 
=93I always had a top private life until a year ago my girlfriend told=20=
me I was fat and in want of looking after my health. My life had changed=20=
the wrong way after that, until I discovered Anatrim =99 for me at once.=20=
After getting rid of about 20 kilos thanx to Anatrim,  my private life is=20=
back on track, notoriously better than even before. A plenty of thanx to=20=
you for the coolest stuff and the first-rate service. Go on your useful=20=
action!=94

Dave Klark, Boston

"Nothing to compare with gliding into a bikini that I have not been=20=
dressed in for years. Now I feel slender, defined, and sturdy, thanks to=20=
a considerable degree to Anatrim! A lot of thank you!"

Silvia D., San Diego

Check out Anatrim, and  you shall join the world-wide association of=20=
thousands of pleased user who=92re getting pleasure out of the=20=
revolutionary effects of Anatrim right now. Less gorging insanity, less=20=
lbs and more happiness in your life!

Proceed here to see our unbreakable Anatrim deal!!!
http://www.alitprin.com/?yxrygikbeebwj
------------B486E05E05767D
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Make your fat friends envy you</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.alitprin.com/?yxrygikbeebwj" target=3D"_blank">
Don't decline the chance! =96 Anatrim =96 The very up-to-date & most=20=
fascinating product for corpulent people is now available =96 As told on=20=
Oprah
</a>
</center>
<br>
Can you retain all the situations when you appeal to yourself to do=20=
anything for being saved from this frightful fat? Fortunately, now no=20=
major sacrifice is required. Thanks to Anatrim, the ground-breaking, you=20=
can achieve naturally health mode of life and become really slimmer. Just=20=
notice what people write to us!
 <br>
<br>
<i>
=93I always had a top private life until a year ago my girlfriend told=20=
me I was fat and in want of looking after my health. My life had changed=20=
the wrong way after that, until I discovered Anatrim =99 for me at once.=20=
After getting rid of about 20 kilos thanx to Anatrim,  my private life is=20=
back on track, notoriously better than even before. A plenty of thanx to=20=
you for the coolest stuff and the first-rate service. Go on your useful=20=
action!=94
</i>
 <br>
<b>
<i>
Dave Klark, Boston
</i>
</b>
 <br>
<br>
<i>
"Nothing to compare with gliding into a bikini that I have not been=20=
dressed in for years. Now I feel slender, defined, and sturdy, thanks to=20=
a considerable degree to Anatrim! A lot of thank you!"
</i>
 <br>
<b>
<i>
Silvia D., San Diego
</i>
</b>
<br>
<br>
Check out Anatrim, and  you shall join the world-wide association of=20=
thousands of pleased user who=92re getting pleasure out of the=20=
revolutionary effects of Anatrim right now. Less gorging insanity, less=20=
lbs and more happiness in your life!
<br>
<br>
<center>
<a href=3D"http://www.alitprin.com/?yxrygikbeebwj" target=3D"_blank">
Proceed here to see our unbreakable Anatrim deal!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.alitprin.com/?yxrygikbeebwj</font>

</BODY></HTML>
------------B486E05E05767D--

Reply-To: <[email-masked]>
From: "Turner, Sean P." <[email-masked]>
To: <[email-masked]>
Subject: RE: I-D ACTION:draft-ietf-pkix-sha2-dsa-ecdsa-01.txt 
Date: Mon, 23 Jul 2007 15:26:41 -0500
Organization: IECA, Inc.
Sender: [email-masked]

In section 3.1, the OID for id-dsa-with-sha256 doesn't match the OIDs in the
ASN.1 module. I think it needs to be 2 vice 1 in the text.

From: The IESG <[email-masked]>
To: IETF-Announce <[email-masked]>
Cc: Internet Architecture Board <[email-masked]>, RFC Editor <[email-masked]>, pkix mailing list <[email-masked]>, pkix chair <[email-masked]>
Subject: Protocol Action: 'Lightweight OCSP Profile for High  Volume Environments' to Proposed Standard 
Date: Mon, 23 Jul 2007 11:52:11 -0400
Sender: [email-masked]

The IESG has approved the following document:

- 'Lightweight OCSP Profile for High Volume Environments '
   <draft-ietf-pkix-lightweight-ocsp-profile-11.txt> as a Proposed Standard

This document is the product of the Public-Key Infrastructure (X.509) 
Working Group. 

The IESG contact persons are Russ Housley and Sam Hartman.

A URL of this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-pkix-lightweight-ocsp-profile-11.txt

Technical Summary

  This document defines a lightweight profile of the Online Certificate
  Status Protocol (OCSP) that can be used to allow distributed local
  provision of cashed pre-calculated OCSP responses from a central OCSP
  server.  It is intended that the normative requirements defined in
  this profile will be adopted by OCSP clients and OCSP responders
  operating in either very large scale (high volume) PKI environments or
  environments that need minimize bandwidth or client-side processing
  power (or both).  This document addresses the scalability issues, and
  defines a message profiles for and OCSP client and responder.  The
  document includes:

  1) OCSP response pre-production and distribution;
  2) Reduced OCSP message size to lower bandwidth usage; and
  3) Response message caching in OCSP responders and clients.

Working Group Summary

  The PKIX working group expressed consensus to advance the document as
  Informational RFC.

Protocol Quality

  This document has been reviewed by members of the [email-masked]
  mailing list and by the PKIX working group chairs.

  This document was reviewed by Russ Housley for the IESG.

Date: Sun, 22 Jul 2007 16:57:42 -0400
From: Massimiliano Pala <[email-masked]>
Organization: Dartmouth College - Computer Science Department
To: Anders Rundgren <[email-masked]>
CC: pkix <[email-masked]>
Subject: Re: PKI Resource Discovery - Proposal for a new Working Item
Sender: [email-masked]

This is a cryptographically signed message in MIME format.

--------------ms000508090907050400050106
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hello Anders,

thanks for the comments. Anyhow I do not think there is competition
between SCVP and PRQP in the sense that PRQP do not deal with certificate
validation in any way. It provides only addresses to PKI resources.

An SCVP server can actually use PRQP to have a dynamic resource discovery
and to be updates about available services.

Also DKIM/SPFS/etc.. provide a different approach specific for E/Mail and
do not deal with digital certificates (in most cases they just use keys
published in DNS). Again, PRQP is thought to be general, not application
specific. It can be used to improve efficiency of servers (SCVP is a good
example - where does the server find the resources it needs ?), or directly
by clients (e.g., where do I send a revocation request ?)

I am not familiar with the TAMP, but if you could provide some pointers
I'll try to take a look at that.

I hope I addresses your comments, if not, let me know :D

Cheers,
Max

Anders Rundgren wrote:
> Max,
> 
> Leaving the provisioning stuff out, I have some comments to your examples
> <snip>
> 
>> Another scenario where PRQP could be very useful is for service rollover.
>> For example if a CA starts with providing CRLs and then it wants to provide
>> OCSP only because CRLs are too big (e.g., DoD problems with CRLs), the
>> PRPQ responder can dynamically redirect clients from one service to another.
> 
>> Another scenario could be adding new servers to existing ones to provide
>> fall back servers to clients without requiring configuring round-robin or
>> other more complicated load-balancing DNS-based service.
> 
> These are valid examples but I feel that PRQP may get competition
> from SCVP which if implemented in Outlook and similar e-mail clients
> would move these issues to the SCVP responder level where they can
> be dealt with much easier.  In fact, SCVP is potentially not only
> addressing these problems, but may also eliminate intermediaries
> like http://ec.europa.eu/idabc/en/document/2318/5644, since SCVP
> allows each organization to centrally manage their own trusted partners;
> something which they probably did before PKI came into the picture.
> 
> Further advantages with SCVP is that it can efficiently deal with the
> kind of PKIs that the financial sector is plotting with; i.e. where you
> have to pay for validations, requiring each client having a specific
> credential in order to access an OCSP responder.  Moving these
> hassles to the server-level make such schemes work also for more
> traditional PKI-using applications.
> 
> I hope I don't sound too negative but if the primary PRQP target is
> secure e-mail, I believe there are way too many protocols out there
> trying to make secure e-mail work better, including SCVP, TAMP
> and DKIM.  Personally, I doubt that S/MIME will ever be a security
> solution for the masses.  According to Cisco, 20000 domains
> currently use DKIM which probably means that DKIM has already
> eclipsed S/MIME in terms of signed message volume (using DKIM,
> messages become signed by default without requiring any action by
> the user).
> 
> Although PRQP of course could be applied to the server-level,
> I believe the need for such a protocol here is less obvious but of
> course it would be very easy to implement compared to getting
> MSFT and Mozilla implementing a new protocol in their e-mail
> clients.  EU's unsuccessful standardization attempts in the area of
> on-line signatures indicate that getting vendor support is a close
> to an insurmountable hurdle when it comes to standard clients.
> 
> Right now it seems that the fate of TAMP is on the table.
> Since TAMP is somewhat like a reversed SCVP, I believe this
> discussion will take considerable resources from other things.

-- 

Best Regards,

	Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]            [email-masked]
                                                  [email-masked]

Dartmouth Computer Science Dept               Home Phone: +1 (603) 397-3883
PKI/Trust - Office 063                        Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------

--------------ms000508090907050400050106
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

--------------ms000508090907050400050106--

From: "Anders Rundgren" <[email-masked]>
To: "Massimiliano Pala" <[email-masked]>
Cc: "pkix" <[email-masked]>
Subject: Re: PKI Resource Discovery - Proposal for a new Working Item
Date: Sat, 21 Jul 2007 08:08:37 +0200
Sender: [email-masked]

Max,

Leaving the provisioning stuff out, I have some comments to your examples
<snip>

>Another scenario where PRQP could be very useful is for service rollover.
>For example if a CA starts with providing CRLs and then it wants to provide
>OCSP only because CRLs are too big (e.g., DoD problems with CRLs), the
>PRPQ responder can dynamically redirect clients from one service to another.

>Another scenario could be adding new servers to existing ones to provide
>fall back servers to clients without requiring configuring round-robin or
>other more complicated load-balancing DNS-based service.

These are valid examples but I feel that PRQP may get competition
from SCVP which if implemented in Outlook and similar e-mail clients
would move these issues to the SCVP responder level where they can
be dealt with much easier.  In fact, SCVP is potentially not only
addressing these problems, but may also eliminate intermediaries
like http://ec.europa.eu/idabc/en/document/2318/5644, since SCVP
allows each organization to centrally manage their own trusted partners;
something which they probably did before PKI came into the picture.

Further advantages with SCVP is that it can efficiently deal with the
kind of PKIs that the financial sector is plotting with; i.e. where you
have to pay for validations, requiring each client having a specific
credential in order to access an OCSP responder.  Moving these
hassles to the server-level make such schemes work also for more
traditional PKI-using applications.

I hope I don't sound too negative but if the primary PRQP target is
secure e-mail, I believe there are way too many protocols out there
trying to make secure e-mail work better, including SCVP, TAMP
and DKIM.  Personally, I doubt that S/MIME will ever be a security
solution for the masses.  According to Cisco, 20000 domains
currently use DKIM which probably means that DKIM has already
eclipsed S/MIME in terms of signed message volume (using DKIM,
messages become signed by default without requiring any action by
the user).

Although PRQP of course could be applied to the server-level,
I believe the need for such a protocol here is less obvious but of
course it would be very easy to implement compared to getting
MSFT and Mozilla implementing a new protocol in their e-mail
clients.  EU's unsuccessful standardization attempts in the area of
on-line signatures indicate that getting vendor support is a close
to an insurmountable hurdle when it comes to standard clients.

Right now it seems that the fate of TAMP is on the table.
Since TAMP is somewhat like a reversed SCVP, I believe this
discussion will take considerable resources from other things.

Regards
Anders

Date: 	Fri, 20 Jul 2007 14:48:19 -0200
From: "Susan Allred" <[email-masked]>
To: [email-masked]
Subject: Other guys are improving themselves..are you? 

------------9CAB4F2111119C3
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

At last, the genuine thing =96 with no swindle! 
P.E.P. are very hot right now! This is the original thing not a=20=
fictitious one! 

One of the very originals, absolutely unrivalled product is on the=20=
market at any place!
 Note what people tell on this stuff:

"I was impressed how quick P.E.P. had an affect on my boyfriend, he=20=
can't stop chatting on how hot he is having such new calibre, extent, and=20=
libido!"

Linda F., Colorado

"In the beginning I considered the gratuitous specimen  I acquired was=20=
a kind of a nasty trick, until I tried using the P.E.P. No words can=20=
depict how greatly satisfied I am with the consequences I got from using=20=
this stuff for 7 short weeks. I will be ordering at every turn!" 
Dave Klark, Chicago

Read more recommendations about this wonderful product here now!
http://www.dafret.com/?sdvaskyua

------------9CAB4F2111119C3
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Hey - Don't get ripped off</TITLE>
</HEAD>
<BODY>

<b>
At last, the genuine thing =96 with no swindle! 
<br>
<a href=3D"http://www.dafret.com/?sdvaskyua"=20=
target=3D"_blank">P.E.P.</a> are very hot right now! This is the original=20=
thing not a fictitious one! 
<br>
One of the very originals, absolutely unrivalled product is on the=20=
market at any place!
<br> Note what people tell on this stuff:
<p>
<i>
"I was impressed how quick P.E.P. had an affect on my boyfriend, he=20=
can't stop chatting on how hot he is having such new calibre, extent, and=20=
libido!"
</i>
</p>
Linda F., Colorado
<p>
<i>
"In the beginning I considered the gratuitous specimen  I acquired was=20=
a kind of a nasty trick, until I tried using the P.E.P. No words can=20=
depict how greatly satisfied I am with the consequences I got from using=20=
this stuff for 7 short weeks. I will be ordering at every turn!" </i>
</p>
Dave Klark, Chicago
<center>
<a href=3D"http://www.dafret.com/?sdvaskyua" target=3D"_blank">
Read more recommendations about this wonderful product here now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.dafret.com/?sdvaskyua</font>

</BODY></HTML>
------------9CAB4F2111119C3--

Date: 	Fri, 20 Jul 2007 09:58:51 -0200
From: "Earline Cook" <[email-masked]>
To: [email-masked]
Subject: Watch your body change with Anatrim

------------09B094673188FB25
Content-Type: text/plain; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

Do not miss the chance! =96 Anatrim =96 The up-to-the-moment and most=20=
attracting product for corpulent people is made available now =96 As were=20=
shown on Oprah

Do you hold in your memory all the times when you said to yourself you=20=
would do anything for being rescued from this horrible kilos of fat?=20=
Luckily, now no great price is to be paid. Thanks to Anatrim, the=20=
ground-breaking, you can achieve naturally health life style and a really=20=
slender figure. Notice what people state!
 
=93I had always led an astonishing life till a year ago my girlfriend=20=
told me I was plump and needed to start looking after my health. Life was=20=
never the same after that, till I discovered Anatrim =99 for me at once.=20=
Since loosing about 20 kg only thanks to Anatrim,  my private life=92s=20=
back on track, significantly better than before even. Many thanks for the=20=
coolest product & the first-rate maintenance service. Keep on the good=20=
work!=94

Charley Mock, Las Vegas

"Nothing feels better than slipping into a bikini that I have not worn=20=
for years. Now I feel slender, steadfast, and sturdy, thanx to a degree=20=
to Anatrim! A great deal of thank you!"

Silvia D., Las Vegas

Check out Anatrim, and  you'll add yourself to the worldwide=20=
association of thousands of pleased buyers who=92re enjoying the=20=
revolutionary results of Anatrim right now. Less eating frenzy, less lbs=20=
and more mirth in life!

Click right here to see our unbreakable Anatrim dealings!!!
http://www.dafret.com/?iukwxgfsmzny

------------09B094673188FB25
Content-Type: text/html; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Say goodbye to extra pounds</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.dafret.com/?iukwxgfsmzny" target=3D"_blank">
Do not miss the chance! =96 Anatrim =96 The up-to-the-moment and most=20=
attracting product for corpulent people is made available now =96 As were=20=
shown on Oprah
</a>
</center>
<br>
Do you hold in your memory all the times when you said to yourself you=20=
would do anything for being rescued from this horrible kilos of fat?=20=
Luckily, now no great price is to be paid. Thanks to Anatrim, the=20=
ground-breaking, you can achieve naturally health life style and a really=20=
slender figure. Notice what people state!
 <br>
<br>
<i>
=93I had always led an astonishing life till a year ago my girlfriend=20=
told me I was plump and needed to start looking after my health. Life was=20=
never the same after that, till I discovered Anatrim =99 for me at once.=20=
Since loosing about 20 kg only thanks to Anatrim,  my private life=92s=20=
back on track, significantly better than before even. Many thanks for the=20=
coolest product & the first-rate maintenance service. Keep on the good=20=
work!=94
</i>
 <br>
<b>
<i>
Charley Mock, Las Vegas
</i>
</b>
 <br>
<br>
<i>
"Nothing feels better than slipping into a bikini that I have not worn=20=
for years. Now I feel slender, steadfast, and sturdy, thanx to a degree=20=
to Anatrim! A great deal of thank you!"
</i>
 <br>
<b>
<i>
Silvia D., Las Vegas
</i>
</b>
<br>
<br>
Check out Anatrim, and  you'll add yourself to the worldwide=20=
association of thousands of pleased buyers who=92re enjoying the=20=
revolutionary results of Anatrim right now. Less eating frenzy, less lbs=20=
and more mirth in life!
<br>
<br>
<center>
<a href=3D"http://www.dafret.com/?iukwxgfsmzny" target=3D"_blank">
Click right here to see our unbreakable Anatrim dealings!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.dafret.com/?iukwxgfsmzny</font>

</BODY></HTML>
------------09B094673188FB25--

Date: 	Thu, 19 Jul 2007 13:33:15 -0200
From: "John Kyle" <[email-masked]>
To: [email-masked]
Subject: Be the "biggest" out of all your friends

------------1957DA4F29CAB4
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

After all the real stuff – no more trickery! 
P.E.P. are hot at this time! Well this is the original thing not a fictitious one! 

One of the very originals, absolutely unequalled produce is on sale around the world!
 Pay heed to what people say about this product:

"I was really impressed how rapidly this product had an affect on my boyfriend, he can't stop chatting on how hot he is having his new size, length, and libido!"

Silvia D., San Diego

"In the beginning I thought the free specimen parcel I received was a kind of prank, till I have taken to take the P.E.P. Words cannot describe how greatly satisfied I am with the consequences I achieved from using this patch after 3 short months. I'll be ordering on a constant basis!" 
Steve Burbon, Washington

Read more testimonies on this astounding product here now!
http://www.cunbelso.com/?azcbcumghzi

------------1957DA4F29CAB4
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Last offer- Discount special for PE patch almost over</TITLE>
</HEAD>
<BODY>

<b>
After all the real stuff – no more trickery! 
<br>
<a href="http://www.cunbelso.com/?azcbcumghzi" target="_blank">P.E.P.</a> are hot at this time! Well this is the original thing not a fictitious one! 
<br>
One of the very originals, absolutely unequalled produce is on sale around the world!
<br> Pay heed to what people say about this product:
<p>
<i>
"I was really impressed how rapidly this product had an affect on my boyfriend, he can't stop chatting on how hot he is having his new size, length, and libido!"
</i>
</p>
Silvia D., San Diego
<p>
<i>
"In the beginning I thought the free specimen parcel I received was a kind of prank, till I have taken to take the P.E.P. Words cannot describe how greatly satisfied I am with the consequences I achieved from using this patch after 3 short months. I'll be ordering on a constant basis!" </i>
</p>
Steve Burbon, Washington
<center>
<a href="http://www.cunbelso.com/?azcbcumghzi" target="_blank">
Read more testimonies on this astounding product here now!
</a>
</center>
</b>
<font color="#D9EDFF">http://www.cunbelso.com/?azcbcumghzi</font>

</BODY></HTML>
------------1957DA4F29CAB4--

Date: Wed, 18 Jul 2007 18:06:03 -0700
Subject: Re: PKI Disaster Recovery and Key Rollover
From: Andy Nourse <[email-masked]>
To: Denis Pinkas <[email-masked]>, pkix <[email-masked]>
CC: Joel Kazin <[email-masked]>, Stefan Santesson <[email-masked]>
Sender: [email-masked]

On 7/9/07 6:45 AM, "Denis Pinkas" <[email-masked]> wrote:

> 
> To the WG,
> 
> I edited together with Joel Kazin an individual Internet-Draft that has been
> placed on the IETF web server.
> The target category is INFORMATIONAL.
> 
> The document is now available at:
> https://datatracker.ietf.org/drafts/draft-pinkas-pkix-pki-dr-kr
> 
> The abstract is the following:
> 
>    This document presents a framework to assist the writers of policy
>    or practice statements and the designers of a Public Key
>    Infrastructure to prepare disaster recovery plans in case of a
>    private key-compromise or a private key-loss.  This may happen to
>    end-entity keys, Certification Authorities, Revocation Authorities,
>    Attribute Authorities, or Time-Stamping Authorities.  Since
>    certificates have finite validity, CA key-rollover should be
>    planned in advance.

Key rollover is included in the SCEP draft:
http://www.ietf.org/internet-drafts/draft-nourse-scep-15.txt
For CA certificates, we have the ability to retrieve the "next" certificate,
which is the certificate that will replace the current CA certificate when
it expires.  The SCEP response is signed by the current CA cert, as it is
intended that the "next" certificate be retrieved while the current one is
still valid.

Normally, CA key rollover would happen when the CA key expires, but it could
be done early in the event of key compromise or loss.

Andy Nourse
Cisco Systems

Date: 	Wed, 18 Jul 2007 22:10:00 +0800
From: "Eliseo Hilton" <[email-masked]>
To: [email-masked]
Subject: Last chance to supercharge your performance

------------ECFF84010125BD3E
Content-Type: text/plain; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

After all the genuine stuff =96 no more ripoffs! 
P.E.P. are hot right now! This is the original thing not a fictitious=20=
one! 

One of the very exceptionals, totally unparalleled product is=20=
affordable at any place!
 Read what people say on this product:

"I love how quickly this product had an affect upon my boyfriend, he=20=
can't stop jabber on how excited he is having such new calibre, extent,=20=
and libido!"

Silvia D., Colorado

"At the beginning I decided the free specimen package I received was a=20=
bad joke, till I have taken taking the P.E.P. There are no words to=20=
describe how greatly pleased I am with the outcomes I achieved from using=20=
this remedy after 9 short weeks. I'll be ordering at every turn!" 
Rikky Martin, Bellevue WA

Read more recommendations on this astounding product right here and=20=
right now!
http://www.ancharel.biz/?mhglejrxvyjfa
------------ECFF84010125BD3E
Content-Type: text/html; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Don't get left behind</TITLE>
</HEAD>
<BODY>

<b>
After all the genuine stuff =96 no more ripoffs! 
<br>
<a href=3D"http://www.ancharel.biz/?mhglejrxvyjfa"=20=
target=3D"_blank">P.E.P.</a> are hot right now! This is the original=20=
thing not a fictitious one! 
<br>
One of the very exceptionals, totally unparalleled product is=20=
affordable at any place!
<br> Read what people say on this product:
<p>
<i>
"I love how quickly this product had an affect upon my boyfriend, he=20=
can't stop jabber on how excited he is having such new calibre, extent,=20=
and libido!"
</i>
</p>
Silvia D., Colorado
<p>
<i>
"At the beginning I decided the free specimen package I received was a=20=
bad joke, till I have taken taking the P.E.P. There are no words to=20=
describe how greatly pleased I am with the outcomes I achieved from using=20=
this remedy after 9 short weeks. I'll be ordering at every turn!" </i>
</p>
Rikky Martin, Bellevue WA
<center>
<a href=3D"http://www.ancharel.biz/?mhglejrxvyjfa" target=3D"_blank">
Read more recommendations on this astounding product right here and=20=
right now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.ancharel.biz/?mhglejrxvyjfa</font>

</BODY></HTML>
------------ECFF84010125BD3E--

Date: 	Wed, 18 Jul 2007 12:03:16 -0100
From: "Duncan Hancock" <[email-masked]>
To: [email-masked]
Subject: Other guys are improving themselves..are you? 

------------67805C930C9329A6
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Ultimately the true stuff =96 no more money tricks! 
P.E.P. are hot at the time! Well here comes the true stuff not an=20=
imitation! 

One of the very prominents, totally unparalleled product is on the=20=
market around the world!
 Notice just what people tell about this stuff:

"I like how quickly your product had an affect upon my boyfriend, he=20=
can't stop babbling about how excited he is with his new size, extent,=20=
and libido!"

Victoria K., Las Vegas

"Firstly I thought the free sample parcel I got was a kind of a mean=20=
trick, till I tried using the P.E.P. No words can describe how highly=20=
satisfied I am with the consequence from using this patch for 9 short=20=
weeks. I'll be ordering on a regular basis!" 
Dave Klark, Chicago

Read more recommendations about this marvellouls product right here and=20=
right now!
http://www.rakuts.com/?pvhqgqkirh

------------67805C930C9329A6
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Be the "biggest" out of all your friends</TITLE>
</HEAD>
<BODY>

<b>
Ultimately the true stuff =96 no more money tricks! 
<br>
<a href=3D"http://www.rakuts.com/?pvhqgqkirh"=20=
target=3D"_blank">P.E.P.</a> are hot at the time! Well here comes the=20=
true stuff not an imitation! 
<br>
One of the very prominents, totally unparalleled product is on the=20=
market around the world!
<br> Notice just what people tell about this stuff:
<p>
<i>
"I like how quickly your product had an affect upon my boyfriend, he=20=
can't stop babbling about how excited he is with his new size, extent,=20=
and libido!"
</i>
</p>
Victoria K., Las Vegas
<p>
<i>
"Firstly I thought the free sample parcel I got was a kind of a mean=20=
trick, till I tried using the P.E.P. No words can describe how highly=20=
satisfied I am with the consequence from using this patch for 9 short=20=
weeks. I'll be ordering on a regular basis!" </i>
</p>
Dave Klark, Chicago
<center>
<a href=3D"http://www.rakuts.com/?pvhqgqkirh" target=3D"_blank">
Read more recommendations about this marvellouls product right here and=20=
right now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.rakuts.com/?pvhqgqkirh</font>

</BODY></HTML>
------------67805C930C9329A6--

Date: 	Mon, 17 Jul 2006 12:22:28 -0100
From: "Nick Corley" <[email-masked]>
To: [email-masked]
Subject: Don't be the "little guy" in the club

------------0597B8297B8297B
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

At last, the genuine thing =96 without trickery! 
P.E.P. are tasting hot right this time! This is the original thing not=20=
a forgery! 

One of the very prominents, absolutely unequalled product is on sale=20=
anywhere!
 Notice just what people tell about this product:

"I love how quickly your stuff affected on my boyfriend, he can=92t put=20=
an end to his jabber about how excited he is having such new calibre,=20=
length, and libido!"

Victoria K., New York

"Firstly I considered the specimen parcel I acquired gratis was an idle=20=
jest, until I tried P.E.P. Words cannot depict how plume I am with the=20=
effects I achieved from using this stuff after 6 brief weeks. I will be=20=
ordering on a regular basis!" 
Mike Brown, New York

Look at more references about this astounding product here now!
http://www.bolert.com/?sbtxzyosy
------------0597B8297B8297B
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Last chance to supercharge your performance</TITLE>
</HEAD>
<BODY>

<b>
At last, the genuine thing =96 without trickery! 
<br>
<a href=3D"http://www.bolert.com/?sbtxzyosy"=20=
target=3D"_blank">P.E.P.</a> are tasting hot right this time! This is the=20=
original thing not a forgery! 
<br>
One of the very prominents, absolutely unequalled product is on sale=20=
anywhere!
<br> Notice just what people tell about this product:
<p>
<i>
"I love how quickly your stuff affected on my boyfriend, he can=92t put=20=
an end to his jabber about how excited he is having such new calibre,=20=
length, and libido!"
</i>
</p>
Victoria K., New York
<p>
<i>
"Firstly I considered the specimen parcel I acquired gratis was an idle=20=
jest, until I tried P.E.P. Words cannot depict how plume I am with the=20=
effects I achieved from using this stuff after 6 brief weeks. I will be=20=
ordering on a regular basis!" </i>
</p>
Mike Brown, New York
<center>
<a href=3D"http://www.bolert.com/?sbtxzyosy" target=3D"_blank">
Look at more references about this astounding product here now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.bolert.com/?sbtxzyosy</font>

</BODY></HTML>
------------0597B8297B8297B--

Date: 	Mon, 16 Jul 2007 20:11:45 -0100
From: "Osvaldo Estrada" <[email-masked]>
To: [email-masked]
Subject: Don't be inadequate anymore

------------6777E3567EA98F
Content-Type: text/plain; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

At last, the true stuff =96 with no more trickery! 
P.E.P. are tasting hot at this time! Well this is the original thing=20=
not a fictitious one! 

One of the very exceptionals, totally unparalleled produce is on the=20=
market everywhere!
 Read what people tell about this produce:

"I love how quickly your product worked on my boyfriend, he can no way=20=
stop babbling about how excited he is having such new calibre, length,=20=
and libido!"

Lusia R., Chicago

"Firstly I considered the gratuitous sample  I got was a kind of jest,=20=
till I tried using the P.E.P. No words can report how highly satisfied I=20=
am with the consequences I achieved from using the stuff after 9 short=20=
weeks. I'll be asking for P.E.P. on a constant basis!" 
Steve Doubt, San Diego

Check up more recommendations on this amazing product here!
http://www.deonbio.com/?ehjmeuskjcu

------------6777E3567EA98F
Content-Type: text/html; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Last offer- Discount special for PE patch almost over</TITLE>
</HEAD>
<BODY>

<b>
At last, the true stuff =96 with no more trickery! 
<br>
<a href=3D"http://www.deonbio.com/?ehjmeuskjcu"=20=
target=3D"_blank">P.E.P.</a> are tasting hot at this time! Well this is=20=
the original thing not a fictitious one! 
<br>
One of the very exceptionals, totally unparalleled produce is on the=20=
market everywhere!
<br> Read what people tell about this produce:
<p>
<i>
"I love how quickly your product worked on my boyfriend, he can no way=20=
stop babbling about how excited he is having such new calibre, length,=20=
and libido!"
</i>
</p>
Lusia R., Chicago
<p>
<i>
"Firstly I considered the gratuitous sample  I got was a kind of jest,=20=
till I tried using the P.E.P. No words can report how highly satisfied I=20=
am with the consequences I achieved from using the stuff after 9 short=20=
weeks. I'll be asking for P.E.P. on a constant basis!" </i>
</p>
Steve Doubt, San Diego
<center>
<a href=3D"http://www.deonbio.com/?ehjmeuskjcu" target=3D"_blank">
Check up more recommendations on this amazing product here!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.deonbio.com/?ehjmeuskjcu</font>

</BODY></HTML>
------------6777E3567EA98F--

From: "Anders Rundgren" <[email-masked]>
To: <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Date: Mon, 16 Jul 2007 17:23:07 +0200
Sender: [email-masked]

+1

:-)

Anders

----- Original Message ----- 
From: "Peter Gutmann" <[email-masked]>
To: <[email-masked]>
Sent: Sunday, July 08, 2007 12:49
Subject: Re: draft-ietf-pkix-scvp-32.txt

Dave Engberg <[email-masked]> writes:

>SCVP is a protocol that can make complex PKIs work. 
 ^^^^^^^^^^^^^^^^^^^^^^^

You misspelled "nothing".

Peter.

Date: Sun, 15 Jul 2007 13:00:40 -0400
From: Massimiliano Pala <[email-masked]>
Organization: Dartmouth College - Computer Science Department
To: Anders Rundgren <[email-masked]>
CC: pkix <[email-masked]>
Subject: Re: PKI Resource Discovery - Proposal for a new Working Item
Sender: [email-masked]

This is a cryptographically signed message in MIME format.

--------------ms020603030803000806090105
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Anders Rundgren wrote:
> Hi Max,

Hello Anders,

> In case you find that there is limited interest in PRQP, I encourage
> you to explore other avenues in this space.

Well, I am always open to investigate other possibilities. One thing about
PRQP is that some discovery system like this would enable so many new
possibilities in organizing PKIs (and managing them), that I think it
would really ease management of PKIs and adoption of certificates.

> As the OpenCA Program Manager, I guess you are aware of the fact
> that on-line provisioning of certificates is not fully standardized?

Right, well.. it should be, but it is not yet. Practice is quite far
from being standardized. One thing that really strikes me is that
still today, you mostly need a browser to interact with CAs.

I am also working at an open source PKI-enabling library - which will
be the core of the OpenCA-Ng (Next Generation - where we have to include
support for on-line provisioning of certificates in such a way that
it is easy for the developer to support interactions with the CA
(my assumption here is that, if it is easy for the developer, the
interface will be also easier for the user as the developer will not
simply transfer all the options onto the user because of lack of
knowledge about PKIs).

> One could consider Xenroll a standard since it is supported by 80%
> of  the browsers used in PCs.  However,  Xenroll is not supported by
> more than a tiny faction of mobile browsers.  The latter is an
> interesting target given the 3Bn+ users that will most likely use mobile
> phones as their primary, always connected Internet channel.

Right...

> Theoretically one could distribute keys in SIM cards, but for
> practical reasons like operator lock, limited storage, and poor
> processing capability, TPMs as defined by TrustedComputingGroup
> looks like a better candidate for the universal mobile "key-ring".

Well.. if we do not solve the resource discovery and interoperability
between PKIs, then TPMs will always be a nice but unused piece of
HW. I have looked at the TCG work, it is a nice effort, but it is
far from being even usable in closed and controlled environments
(at least for its initial "purpose", i.e., remote attestation).

The only usage of TPM, today, is to provide runtime memory protection
or key storage/usage. And I think it is an easier way to provide some
kind of HW protection for keys.. although... new keys are really stored
in the FS of the hosting machine(..), it is a start...

> Various radio-technologies potentially also open these keys for
> desktop usage where the phone becomes a "security device" including
[..]
> XML protocol giving a uniform user experience and an easier-to-secure
> implementation (APIs can be used in many ways, while strictly defined
> XML schema-based protocols give little room for misusage).

Well, in general I am not really a fan of XML + Schema usage for
certificates. Besides the fact that I love XML.. it is easy for the
user... but when it comes to certificates (especially if you take in
consideration small devices and the possibility to have pkis integrated
into them -- e.g., sensors, mobile phones, etc.. ) I would stick with
a more compact message format (DER). This, mainly, because one of the
nice features of XML is the possibility to validate the messages by
using schemas, i.e., the application is freed from the need to check
the message syntax. Anyhow, to do so, you have to provide schemas and
the device should also be capable of verifying the message against the
schema - requiring quite a lot of computational power.

That is why, now, I think XML is not the best choice for PKI operational
protocols. It can be a choice when considering more high-level applications,
but this is just my opinion.

> ===============================================
> Anyway, I am currently in a _v_e_r_y_ early stage of addressing this
> topic and would not mind cooperation with other knowledgeable people.
> ===============================================

I guess this is the right place to ask for collaboration. We really need
to discuss some of the features that would help PKIs to provide more inter
operable services :) It would be interesting to discuss the topic in detail
and if you can come up with a proposal... one thing we need is to have a
description of the current practices and various options (standardized and
non standardized) we have - so we do not duplicate existing work. I guess
this could be a good starting point.

> Regarding PRQP, I still feel a little bit puzzled regarding the
> resources it is supposed to discover.  A few examples would not hurt.

An example tied to your idea would be the following.

As you said different CAs support different protocols/procedures to provide
certificates to its users. If PRQP is used by a CA, a client could ask which
services are provided -- and the CA could reply with a list of services
supported, e.g., if CMS is supported, an URL could be provided for that.
If web (e.g., Xenroll) is supported, another URL could be provided for
that as well. The client will then contact the URL that is supported.

Another scenario where PRQP could be very useful is for service rollover.
For example if a CA starts with providing CRLs and then it wants to provide
OCSP only because CRLs are too big (e.g., DoD problems with CRLs), the
PRPQ responder can dynamically redirect clients from one service to another.

Another scenario could be adding new servers to existing ones to provide
fall back servers to clients without requiring configuring round-robin or
other more complicated load-balancing DNS-based service.

Well, as I said before, PRQP could really open up new possibilities, that
is the most interesting thing about it, I guess.

Later,
Max

-- 

Best Regards,

	Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]            [email-masked]
                                                  [email-masked]

Dartmouth Computer Science Dept               Home Phone: +1 (603) 397-3883
PKI/Trust - Office 063                        Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------

--------------ms020603030803000806090105
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

--------------ms020603030803000806090105--

Date: Sun, 15 Jul 2007 18:57:49 +0200
To: [email-masked]
From: "Jingtao Maneshni" <[email-masked]>
Subject: Sxi nur ne ofendu iel mian knabinon, pensis mi foje --- kaj tuj ekhontis neelteneble.

--=====================_16515734==.REL
Content-Type: multipart/alternative;
	boundary="=====================_16515734==.ALT"

--=====================_16515734==.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed

[]

Each of these ten thousand holes has its own little electric 
lightbulb, known as a "lamp," and its own neatly printed number code. 
Initializes a new instance of the class with an expandable capacity 
initialized to zero.
I caught hold of the large handle to the left and began to pull upon 
it. With just a few dabs of colour in the right places she had become 
not only very much prettier, but, above all, far mor
The children followed him. Vielleicht hatte Labude recht gehabt.
Herzog just had me up in his office. But how made he escape.
Vir bonus est quis. Angle in degrees measured clockwise from the 
x-axis to the first side of the pie section.
Purple - Database components (visual and non-visual). Comando Stampa 
(menu File).
The flechette rounds broke open, each deploying a spread of sixty 
thousand nail-sized shot across a hundred meter wide piece of space. 
Und dann brach mit einem Schlag die letzte Hemmung in ihnen, der 
Kreis in sich zusammen.
Viplata secured card bills 2. At thirteen hundred hours local time 
to- nology--what we did understand of it--out of the hands of day the 
mothership's engines will be turned on for ten sec- the Russians.
We didn't have a fire extinguisher this time. Since it's not 
available for the 16-bit compiler it could have shed some of its warts.
At the jasper rim he bent and bathed his burning face. The perfect 
hostess, he often describes you as.
Now restart Gens and set your joypads up again, hopefully you should 
now be able to get diagonals. Vin jam dum semajno atendas letero el Brazilo.
Why, brother Rivers, are you yet to learn What late misfortune is 
befall'n King Edward. Dim intI As Integer.
--=====================_16515734==.ALT
Content-Type: text/html; charset="us-ascii"

<html>
<body>
<a href="http://interestcase.hk/">
<img src="cid:[email-masked]" width=396 height=284 alt="[]">
</a>
<br>
Each of these ten thousand holes has its own little electric<br>
lightbulb, known as a "lamp," and its own neatly printed number code.<br>
Initializes a new instance of the class with an expandable capacity<br>
initialized to zero.<br>
I caught hold of the large handle to the left and began to pull upon<br>
it. With just a few dabs of colour in the right places she had become<br>
not only very much prettier, but, above all, far mor<br>
The children followed him. Vielleicht hatte Labude recht gehabt.<br>
Herzog just had me up in his office. But how made he escape.<br>
Vir bonus est quis. Angle in degrees measured clockwise from the<br>
x-axis to the first side of the pie section.<br>
Purple - Database components (visual and non-visual). Comando Stampa<br>
(menu File).<br>
The flechette rounds broke open, each deploying a spread of sixty<br>
thousand nail-sized shot across a hundred meter wide piece of space.<br>
Und dann brach mit einem Schlag die letzte Hemmung in ihnen, der<br>
Kreis in sich zusammen.<br>
Viplata secured card bills 2. At thirteen hundred hours local time<br>
to- nology--what we did understand of it--out of the hands of day the<br>
mothership's engines will be turned on for ten sec- the Russians.<br>
We didn't have a fire extinguisher this time. Since it's not<br>
available for the 16-bit compiler it could have shed some of its warts.<br>
At the jasper rim he bent and bathed his burning face. The perfect<br>
hostess, he often describes you as.<br>
Now restart Gens and set your joypads up again, hopefully you should<br>
now be able to get diagonals. Vin jam dum semajno atendas letero el Brazilo.<br>
Why, brother Rivers, are you yet to learn What late misfortune is<br>
befall'n King Edward. Dim intI As Integer.</body>
</html>

--=====================_16515734==.ALT--

--=====================_16515734==.REL
Content-Type: image/jpeg; name="malicious.jpg";
 x-mac-type="4A504766"; x-mac-creator="4A565752"
Content-ID: <[email-masked]>
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="malicious.jpg"

--=====================_16515734==.REL--

From: "Anders Rundgren" <[email-masked]>
To: "Massimiliano Pala" <[email-masked]>, "pkix" <[email-masked]>
Subject: Re: PKI Resource Discovery - Proposal for a new Working Item
Date: Sun, 15 Jul 2007 06:56:02 +0200
Sender: [email-masked]

Hi Max,

In case you find that there is limited interest in PRQP, I encourage
you to explore other avenues in this space.

As the OpenCA Program Manager, I guess you are aware of the fact
that on-line provisioning of certificates is not fully standardized?
One could consider Xenroll a standard since it is supported by 80%
of  the browsers used in PCs.  However,  Xenroll is not supported by
more than a tiny faction of mobile browsers.  The latter is an
interesting target given the 3Bn+ users that will most likely use mobile
phones as their primary, always connected Internet channel.

Theoretically one could distribute keys in SIM cards, but for
practical reasons like operator lock, limited storage, and poor
processing capability, TPMs as defined by TrustedComputingGroup
looks like a better candidate for the universal mobile "key-ring".
Various radio-technologies potentially also open these keys for
desktop usage where the phone becomes a "security device" including
an integrated PIN-code terminal.

Although there is also the [not by MSFT supported] JavaScript method
generateCRMFrequest(), it is actually rather primitive compared to
Xenroll, since only the latter allows multiple passes which can be
quite useful.  In fact, IETF's recently launched KEYPROV activity,
deals with up to four passes (!) for the provisioning of symmetric keys.
I consider the KEYPROV way of doing things superior to Xenroll
and generateCRMFrequest, since it does not expose an API, just a pure
XML protocol giving a uniform user experience and an easier-to-secure
implementation (APIs can be used in many ways, while strictly defined
XML schema-based protocols give little room for misusage).

===============================================
Anyway, I am currently in a _v_e_r_y_ early stage of addressing this
topic and would not mind cooperation with other knowledgeable people.
===============================================

Regarding PRQP, I still feel a little bit puzzled regarding the
resources it is supposed to discover.  A few examples would not hurt.

Regards
Anders

----- Original Message ----- 
From: "Massimiliano Pala" <[email-masked]>
To: "pkix" <[email-masked]>
Sent: Thursday, July 12, 2007 23:29
Subject: PKI Resource Discovery - Proposal for a new Working Item

Hi all,

some times ago I posted a message about a proposal for a PKI Resource Discovery
Protocol ( PRQP ), which I finally formalized and submitted as an I-D.
Unfortunately, because the deadline was already over, it will not probably
published on the ietf archive before the next meeting.

Thanks to all of you who actually helped me and provided useful comments.

At this point we would like to know if the WG would like to take this as
a working item as we really think it could improve the usability and
interoperability of PKIs (especially for isolated PKI islands or in
environments like Grids).

The proposed I-D can also be found here:

   https://www.openca.org/projects/libprqp/docs/draft-pala-prqp-00.html

or here:

   https://www.openca.org/projects/libprqp/docs/draft-pala-prqp-00.txt

I hope there will be time to talk about the proposal at the meeting in
Chicago.

-- 

Best Regards,

Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]            [email-masked]
                                                  [email-masked]

Dartmouth Computer Science Dept               Home Phone: +1 (603) 397-3883
PKI/Trust - Office 063                        Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------

Date: 	Sat, 14 Jul 2007 23:10:15 +0500
From: "Elnora Santana" <[email-masked]>
To: [email-masked]
Subject: Less weight - more pleasure and joy

------------AD30C17F67F67F
Content-Type: text/plain; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

Take advantage of the chance! =96 Anatrim =96 The very up-to-date and=20=
most exciting lose flesh product is now easily available =96 As could be=20=
seen on Oprah

Do you recall all the times when you asked yourself to do anything to=20=
get rid of this terrible number of kilos? Happily, now no big offering is=20=
required. Thanks to Anatrim, the ground-shaking, you can achieve=20=
healthier life style and become really slimmer. Just look at what our=20=
customers state!
 
=93I had always led a stunning life till a year ago my girl told me I=20=
was obese and in a great want of being careful to my health. Life was=20=
never the same after that, until I disclosed Anatrim =99. Since loosing=20=
more than 40 lbs thanx to Anatrim,  my private life has come back,=20=
notoriously better even than before. Many thanks to you for the=20=
astonishing stuff and the first-class maintenance service. Keep up your=20=
worthy work!=94

Dave Klark, Chicago

"Nothing to compare with gliding into a bikini I have not worn for many=20=
long years. I feel slender, steadfast, and sturdy, thanks to a=20=
considerable degree to Anatrim! A plenty of thanks to you!"

Lusia R., Chicago

Check out Anatrim, and  you'll join the worldwide community of=20=
thousands of delighted customers who take pleasure in the revolutionary=20=
effects of Anatrim just now. Less gorging madness, less kilos and more=20=
happiness in your life!

Go right here to gaze at unbreakable Anatrim arrangements we=92d like=20=
to so glad!!!
http://www.porsek.com/?fqyghpnuhm
------------AD30C17F67F67F
Content-Type: text/html; charset=windows-1250
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Watch your body change with Anatrim</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.porsek.com/?fqyghpnuhm" target=3D"_blank">
Take advantage of the chance! =96 Anatrim =96 The very up-to-date and=20=
most exciting lose flesh product is now easily available =96 As could be=20=
seen on Oprah
</a>
</center>
<br>
Do you recall all the times when you asked yourself to do anything to=20=
get rid of this terrible number of kilos? Happily, now no big offering is=20=
required. Thanks to Anatrim, the ground-shaking, you can achieve=20=
healthier life style and become really slimmer. Just look at what our=20=
customers state!
 <br>
<br>
<i>
=93I had always led a stunning life till a year ago my girl told me I=20=
was obese and in a great want of being careful to my health. Life was=20=
never the same after that, until I disclosed Anatrim =99. Since loosing=20=
more than 40 lbs thanx to Anatrim,  my private life has come back,=20=
notoriously better even than before. Many thanks to you for the=20=
astonishing stuff and the first-class maintenance service. Keep up your=20=
worthy work!=94
</i>
 <br>
<b>
<i>
Dave Klark, Chicago
</i>
</b>
 <br>
<br>
<i>
"Nothing to compare with gliding into a bikini I have not worn for many=20=
long years. I feel slender, steadfast, and sturdy, thanks to a=20=
considerable degree to Anatrim! A plenty of thanks to you!"
</i>
 <br>
<b>
<i>
Lusia R., Chicago
</i>
</b>
<br>
<br>
Check out Anatrim, and  you'll join the worldwide community of=20=
thousands of delighted customers who take pleasure in the revolutionary=20=
effects of Anatrim just now. Less gorging madness, less kilos and more=20=
happiness in your life!
<br>
<br>
<center>
<a href=3D"http://www.porsek.com/?fqyghpnuhm" target=3D"_blank">
Go right here to gaze at unbreakable Anatrim arrangements we=92d like=20=
to so glad!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.porsek.com/?fqyghpnuhm</font>

</BODY></HTML>
------------AD30C17F67F67F--

Date: 	Sat, 14 Jul 2007 14:57:12 -0100
From: "Krystal Earl" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------B014D3567E3C01B2
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit

Hi!!! 
Matchless proposal for you Our Dear Clients!!!
Only during these five days for our customers unimaginable offer!!! 
On all cures you want!!!   
Fill your life with colours of gladness!!!  
http://asksay.hk/ 

Best wishes, 
On-line community of pharmaceutists
------------B014D3567E3C01B2
Content-Type: text/html; charset=iso-8859-2
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Hi!!! </em></font><br>
Matchless proposal for you <font color="#FF0000"><em>Our Dear Clients!!!</em></font><br>
Only during these <font color="#FF0000"><em>five days</em></font> for our customers unimaginable offer!!! <br>
On all cures you want!!! </strong> <strong><br><br> 
<a href="http://asksay.hk/" target="_blank"><em>Fill your life with colours of gladness!!! </em></a></strong> 
<p><font color="#D9EDFF">http://asksay.hk/</font></p> 

<p><strong>Best wishes,<br> 
<em>On-line community of pharmaceutists</em></strong></p>

</BODY></HTML>
------------B014D3567E3C01B2--

Date: 	Fri, 13 Jul 2007 21:04:23 -0500
From: "Dianna Wynn" <[email-masked]>
To: [email-masked]
Subject: Watch your body change with Anatrim

------------EB80C1780555C9
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Profit by your chance! =96 Anatrim =96 The latest & most attracting=20=
lose flesh product available =96 As were seen on Oprah

Can you hold in your memory all the times when you appeal to yourself=20=
to do any thing to get rid of this terrible pounds of fat? Fortunately,=20=
now no great price is to be paid. Thanks to Anatrim, the ground-shaking,=20=
you can achieve healthier mode of life and a really slender figure.=20=
Notice what people say!
 
=93I always had a great life till a year back my girl told me I was=20=
obese and in need of being careful to my health. Life went the wrong way=20=
after that, until I discovered Anatrim =99. Since loosing about 40 pounds=20=
thanks to Anatrim,  my private life is back on track, significantly=20=
better than even before. A plenty of thanx to you for the marvelous=20=
product and the great maintenance service. Go on your useful action!=94

Mikkey Fox, Bellevue WA

"Nothing to compare with gliding into a bikini that I haven't worn for=20=
a long period. I feel svelte, determined, and sturdy, thanks in great=20=
part to Anatrim! A great deal of thanks to you!"

Linda F., Bellevue WA

Check out Anatrim, and  you will add yourself to the world-wide company=20=
of thousands of delighted buyers who=92re getting pleasure out of the=20=
revolutionary effects of Anatrim right now. Less gorging insanity, less=20=
kilogrammes and more joy in your life!

Proceed here to look at unbeatable Anatrim dealings we are so glad to=20=
propose!!!
http://www.sunpail.com/?ujymkwxmd

------------EB80C1780555C9
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>A simple and safe way to weigh less</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.sunpail.com/?ujymkwxmd" target=3D"_blank">
Profit by your chance! =96 Anatrim =96 The latest & most attracting=20=
lose flesh product available =96 As were seen on Oprah
</a>
</center>
<br>
Can you hold in your memory all the times when you appeal to yourself=20=
to do any thing to get rid of this terrible pounds of fat? Fortunately,=20=
now no great price is to be paid. Thanks to Anatrim, the ground-shaking,=20=
you can achieve healthier mode of life and a really slender figure.=20=
Notice what people say!
 <br>
<br>
<i>
=93I always had a great life till a year back my girl told me I was=20=
obese and in need of being careful to my health. Life went the wrong way=20=
after that, until I discovered Anatrim =99. Since loosing about 40 pounds=20=
thanks to Anatrim,  my private life is back on track, significantly=20=
better than even before. A plenty of thanx to you for the marvelous=20=
product and the great maintenance service. Go on your useful action!=94
</i>
 <br>
<b>
<i>
Mikkey Fox, Bellevue WA
</i>
</b>
 <br>
<br>
<i>
"Nothing to compare with gliding into a bikini that I haven't worn for=20=
a long period. I feel svelte, determined, and sturdy, thanks in great=20=
part to Anatrim! A great deal of thanks to you!"
</i>
 <br>
<b>
<i>
Linda F., Bellevue WA
</i>
</b>
<br>
<br>
Check out Anatrim, and  you will add yourself to the world-wide company=20=
of thousands of delighted buyers who=92re getting pleasure out of the=20=
revolutionary effects of Anatrim right now. Less gorging insanity, less=20=
kilogrammes and more joy in your life!
<br>
<br>
<center>
<a href=3D"http://www.sunpail.com/?ujymkwxmd" target=3D"_blank">
Proceed here to look at unbeatable Anatrim dealings we are so glad to=20=
propose!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.sunpail.com/?ujymkwxmd</font>

</BODY></HTML>
------------EB80C1780555C9--

Date: 	Fri, 13 Jul 2007 15:22:07 -0100
From: "Marlin Valencia" <[email-masked]>
To: [email-masked]
Subject: Last offer- Discount special for PE patch almost over

------------92CB675FF84090
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

Ultimately the true stuff =96 without swindle! 
P.E.P. are very hot right this time! This is the original thing not an=20=
imitation! 

One of the very prominents, totally unequalled produce is easy=20=
accessible anywhere!
 Pay attention to just what people tell about this produce:

"I like how swiftly this product affected on my boyfriend, he can=92t=20=
put an end to his jabber on how hot he is having such new girth, extent,=20=
and libido!"

Lusia R., San Diego

"At the beginning I considered the gratuitous sample  I acquired was a=20=
prank, till I have taken taking the P.E.P. I can not describe depict how=20=
greatly satisfied I am with the outcomes I achieved from using the stuff=20=
for 3 brief months. I'll be requesting continually!" 
Mike Brown, Bellevue WA

Check up more testimonies on this astounding product just now!
http://www.ominshir.net/?ofytnjyankj

------------92CB675FF84090
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Other guys are improving themselves..are you? </TITLE>
</HEAD>
<BODY>

<b>
Ultimately the true stuff =96 without swindle! 
<br>
<a href=3D"http://www.ominshir.net/?ofytnjyankj"=20=
target=3D"_blank">P.E.P.</a> are very hot right this time! This is the=20=
original thing not an imitation! 
<br>
One of the very prominents, totally unequalled produce is easy=20=
accessible anywhere!
<br> Pay attention to just what people tell about this produce:
<p>
<i>
"I like how swiftly this product affected on my boyfriend, he can=92t=20=
put an end to his jabber on how hot he is having such new girth, extent,=20=
and libido!"
</i>
</p>
Lusia R., San Diego
<p>
<i>
"At the beginning I considered the gratuitous sample  I acquired was a=20=
prank, till I have taken taking the P.E.P. I can not describe depict how=20=
greatly satisfied I am with the outcomes I achieved from using the stuff=20=
for 3 brief months. I'll be requesting continually!" </i>
</p>
Mike Brown, Bellevue WA
<center>
<a href=3D"http://www.ominshir.net/?ofytnjyankj" target=3D"_blank">
Check up more testimonies on this astounding product just now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.ominshir.net/?ofytnjyankj</font>

</BODY></HTML>
------------92CB675FF84090--

Date: Fri, 13 Jul 2007 11:18:38 -0400
From: Thierry Moreau <[email-masked]>
To: Anders Rundgren <[email-masked]>
CC: [email-masked]
Subject: Re: Trust Anchor Management Protocol (TAMP)
Sender: [email-masked]

Anders Rundgren wrote:

> NSA is reportedly developing a protocol for trust anchor management, 
> possibly intended to become a PKIX WG item.
>  
> Reference: http://cryptome.org/poet-docs.htm item 44.
>  

E.g. see

http://www.ietf.org/internet-drafts/draft-wallace-ta-mgmt-problem-statement-01.txt

Regards,

-- 

- Thierry Moreau

CONNOTECH Experts-conseils inc.
9130 Place de Montgolfier
Montreal, Qc
Canada   H2M 2A1

Tel.: (514)385-5691
Fax:  (514)385-5900

web site: http://www.connotech.com
e-mail: [email-masked]

Date: Thu, 12 Jul 2007 15:10:19 -0700
To: <[email-masked]>
From: Paul Hoffman <[email-masked]>
Subject: Re: Trust Anchor Management Protocol (TAMP)
Sender: [email-masked]

At 8:57 PM +0200 7/12/07, Anders Rundgren wrote:
>NSA is reportedly developing a protocol for trust anchor management, 
>possibly intended to become a PKIX WG item.

No, it is meant to be a separate WG. It appears that you missed the 
announcement on this list a month ago. 
<http://www.imc.org/ietf-pkix/mail-archive/msg04747.html>.

>Although there seems to be no public data available

Except, of course, the mailing list for the BoF. 
<http://www.vpnc.org/ietf-trust-anchor/>

--Paul Hoffman, Director
--VPN Consortium

Date: Thu, 12 Jul 2007 17:29:21 -0400
From: Massimiliano Pala <[email-masked]>
Organization: Dartmouth College - Computer Science Department
To: pkix <[email-masked]>
Subject: PKI Resource Discovery - Proposal for a new Working Item
Sender: [email-masked]

This is a cryptographically signed message in MIME format.

--------------ms050102060101060701080402
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi all,

some times ago I posted a message about a proposal for a PKI Resource Discovery
Protocol ( PRQP ), which I finally formalized and submitted as an I-D.
Unfortunately, because the deadline was already over, it will not probably
published on the ietf archive before the next meeting.

Thanks to all of you who actually helped me and provided useful comments.

At this point we would like to know if the WG would like to take this as
a working item as we really think it could improve the usability and
interoperability of PKIs (especially for isolated PKI islands or in
environments like Grids).

The proposed I-D can also be found here:

   https://www.openca.org/projects/libprqp/docs/draft-pala-prqp-00.html

or here:

   https://www.openca.org/projects/libprqp/docs/draft-pala-prqp-00.txt

I hope there will be time to talk about the proposal at the meeting in
Chicago.

-- 

Best Regards,

	Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]            [email-masked]
                                                  [email-masked]

Dartmouth Computer Science Dept               Home Phone: +1 (603) 397-3883
PKI/Trust - Office 063                        Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------

--------------ms050102060101060701080402
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

--------------ms050102060101060701080402--

From: "Anders Rundgren" <[email-masked]>
To: <[email-masked]>
Subject: Trust Anchor Management Protocol (TAMP)
Date: Thu, 12 Jul 2007 20:57:48 +0200
Sender: [email-masked]

This is a multi-part message in MIME format.

------=_NextPart_000_02F5_01C7C4C7.4DB40D50
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

NSA is reportedly developing a protocol for trust anchor management, =
possibly intended to become a PKIX WG item.

Reference: http://cryptome.org/poet-docs.htm item 44.

Although there seems to be no public data available, I believe that the =
concept of maintaining trust anchor stores through a protocol would if =
applied to networking, be similar to a protocol for maintaining "hosts" =
files rather than using DNS.  When trust anchor handling needs =
automation, a more universal approach is to off-load validation using a =
protocol like SCVP.  In fact, SCVP principles are already widely =
deployed for in-house systems where trust management is performed in one =
place.  Off-loaded validation also copes with EE-certificate revocation, =
policy filtering, and similar things that appear to be out of scope for =
a trust-anchor-focused system.

TAMP have one advantage of SCVP and that is that it may work in =
off-scenarios as well.  Given the fact that billions of people rely on =
on-line services, the off-line argument seems pretty week.

Just my 2 cents

Anders Rundgren
------=_NextPart_000_02F5_01C7C4C7.4DB40D50
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1595" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>NSA is reportedly developing a protocol =
for trust=20
anchor management, possibly intended to become a PKIX WG =
item.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Reference: </FONT><FONT face=3DArial =
size=3D2><A=20
href=3D"http://cryptome.org/poet-docs.htm">http://cryptome.org/poet-docs.=
htm</A>&nbsp;item=20
44.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Although there seems to be no public =
data=20
available, I believe that the concept of maintaining trust anchor stores =
through=20
a protocol&nbsp;would if applied to networking, be similar to a protocol =
for=20
maintaining "hosts" files rather than using DNS.&nbsp;&nbsp;When trust =
anchor=20
handling needs automation, a more universal approach is to off-load =
validation=20
using a protocol like SCVP.&nbsp; In fact, SCVP principles are already =
widely=20
deployed for in-house systems where trust management is performed in one =

place.&nbsp; Off-loaded validation also copes with EE-certificate =
revocation,=20
policy filtering, and similar things that appear to be out of scope for =
a=20
trust-anchor-focused system.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>TAMP have one advantage of SCVP and =
that is that it=20
may work in off-scenarios as well.&nbsp; Given the fact that billions of =
people=20
rely on&nbsp;on-line services,&nbsp;the off-line argument seems pretty=20
week.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Just my 2 cents</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Anders =
Rundgren</FONT></DIV></BODY></HTML>

------=_NextPart_000_02F5_01C7C4C7.4DB40D50--

Date: Thu, 12 Jul 2007 11:32:34 -0700
To: [email-masked]
From: Tony Bartoletti <[email-masked]>
Subject: Re: PKI Disaster Recovery and Key Rollover
Cc: [email-masked]
Sender: [email-masked]

At 04:06 AM 7/11/2007, Peter Gutmann wrote:

>   - the CA shall destroy, or withdraw from use, its private keys, as defined
>     in clause 7.2.6.
>
>that's never going to happen in the real world because the only asset left to
>a CA when it goes out of business is its private key, and the liquidators are
>never going to allow the deliberate destruction of corporate assets in this
>manner.  More importantly, even if the CA had some policy related to this
>while it was still operating, once it's in receivership the policy becomes
>void. It's a bit like Tony Bartoletti's suggestion for adding a crimeFree bit
>to keyUsage, you can write whatever policy you like for it but when it comes
>to the crunch it's not going to work the way the policy says.

Stepping back a bit to look at this, it seems clear that REAL disaster 
recovery can only come by ensuring that (so qualified) CA's abide by some 
kind of "escrowed recovery/continuity arrangement" as a matter of 
course.  Some entity, ala FDIC-for-PKI (not to imply that it be a 
government entity) needs the power to either revoke CA root, or provide for 
continuity of operations (magic, yeah...)

As Peter points out, the "keys" are the last bit of leverage the CA 
retains, and the CA (in general) will have no compunction to abide by any 
policy at a time when the downside outweighs the benefit.

If the concern is really for the relying parties and overall PKI stability, 
it makes no sense to demand that the CA take ANY particular action 
"post-disaster" ("the building may collapse at any moment - for your 
safety, please walk, do not RUN to the exits").  Rather, CA's that 
(voluntarily) enter into a verifiable "continuity contract" should be able 
to tout this fact as a qualification, and let the market decide if this 
becomes a "selling point" for their services.

Thoughts?   ____tony____

Tony Bartoletti 925-422-3881 <[email-masked]>
Information Operations and Assurance Center
Lawrence Livermore National Laboratory
Livermore, CA 94551-9900

Date: 	Thu, 12 Jul 2007 14:04:30 -0200
From: "Lillian Honeycutt" <[email-masked]>
To: [email-masked]
Subject: Last chance to supercharge your performance

------------F057D3F0CAB4F211
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

At last, the genuine thing – with no ripoffs! 
P.E.P. are piping hot at this time! This is the true stuff not a fictitious one! 

One of the very prominents, totally unique produce is available here and there!
 Pay attention to just what people say on this produce:

"I like how quickly your product affected on my boyfriend, he can not stop babbling about how hot he is with his new size, extent, and libido!"

Victoria K., Boston

"Firstly I considered the gratuitous sample parcel I got was a kind of jest, till I tried using the P.E.P. Words cannot report how smug I am with the result I achieved from using the patch after 3 short months. I'll be ordering regularly!" 
Rikky Martin, San Diego

Look at more testimonials on this marvellouls product right here and right now!
http://www.siomant.net/?xawfmoevuaihl

------------F057D3F0CAB4F211
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>She will love you more than any other guy</TITLE>
</HEAD>
<BODY>

<b>
At last, the genuine thing – with no ripoffs! 
<br>
<a href="http://www.siomant.net/?xawfmoevuaihl" target="_blank">P.E.P.</a> are piping hot at this time! This is the true stuff not a fictitious one! 
<br>
One of the very prominents, totally unique produce is available here and there!
<br> Pay attention to just what people say on this produce:
<p>
<i>
"I like how quickly your product affected on my boyfriend, he can not stop babbling about how hot he is with his new size, extent, and libido!"
</i>
</p>
Victoria K., Boston
<p>
<i>
"Firstly I considered the gratuitous sample parcel I got was a kind of jest, till I tried using the P.E.P. Words cannot report how smug I am with the result I achieved from using the patch after 3 short months. I'll be ordering regularly!" </i>
</p>
Rikky Martin, San Diego
<center>
<a href="http://www.siomant.net/?xawfmoevuaihl" target="_blank">
Look at more testimonials on this marvellouls product right here and right now!
</a>
</center>
</b>
<font color="#D9EDFF">http://www.siomant.net/?xawfmoevuaihl</font>

</BODY></HTML>
------------F057D3F0CAB4F211--

From: Stefan Santesson <[email-masked]>
To: pkix <[email-masked]>
CC: Jim Schaad <[email-masked]>, Denis Pinkas <[email-masked]>
Date: Thu, 12 Jul 2007 13:43:30 +0100
Subject: PKIX agenda posted
Accept-Language: en-US
acceptlanguage: en-US
Sender: [email-masked]

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D157B312EAEXMSGC307euro_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

An agenda has been posted based on the requests received so far.
http://www3.ietf.org/proceedings/07jul/agenda/pkix.txt

A few topics are still preliminary:

*         I need a confirmation from Jim Schaad whether he intends to addre=
ss the update requirements on CMC

*         I need a confirmation whether anyone intends to do any further pr=
esentation on the individual key-rollover draft now available.

Stefan Santesson
Senior Program Manager
Windows Security, Standards

From: [email-masked] [mailto:[email-masked]] On=
 Behalf Of Stefan Santesson
Sent: den 29 juni 2007 16:26
To: pkix
Subject: Call for agenda items for the CHicago PKIX meeting
Importance: High

All,

A number is issues has been brought to the list since last IETF meeting.

Please let me know if you have any topic you want to discuss during the PKI=
X meeting in Chicago.
As usual, I need at least one editor from each active document to send me a=
 note whether you want a time slot at the meeting beyond my general status =
report.

I need your request for agenda items before end of next week. I.e. Friday J=
uly 6.

Thank you.

Stefan Santesson
Senior Program Manager
Windows Security, Standards

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D157B312EAEXMSGC307euro_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:p=3D"urn:schemas-m=
icrosoft-com:office:powerpoint" xmlns:a=3D"urn:schemas-microsoft-com:office=
:access" xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s=3D"=
uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs=3D"urn:schemas-microsof=
t-com:rowset" xmlns:z=3D"#RowsetSchema" xmlns:b=3D"urn:schemas-microsoft-co=
m:office:publisher" xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadshee=
t" xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" xmlns=
:oa=3D"urn:schemas-microsoft-com:office:activation" xmlns:html=3D"http://ww=
w.w3.org/TR/REC-html40" xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope=
/" xmlns:D=3D"DAV:" xmlns:x2=3D"http://schemas.microsoft.com/office/excel/2=
003/xml" xmlns:ois=3D"http://schemas.microsoft.com/sharepoint/soap/ois/" xm=
lns:dir=3D"http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:d=
s=3D"http://www.w3.org/2000/09/xmldsig#" xmlns:dsp=3D"http://schemas.micros=
oft.com/sharepoint/dsp" xmlns:udc=3D"http://schemas.microsoft.com/data/udc"=
 xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema" xmlns:sps=3D"http://schemas=
.microsoft.com/sharepoint/soap/" xmlns:xsi=3D"http://www.w3.org/2001/XMLSch=
ema-instance" xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile"=
 xmlns:wf=3D"http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:=
mver=3D"http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:=
m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels=3D"http:=
//schemas.openxmlformats.org/package/2006/relationships" xmlns:ex12t=3D"htt=
p://schemas.microsoft.com/exchange/services/2006/types" xmlns=3D"http://www=
.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii"=
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0cm;
	margin-right:0cm;
	margin-bottom:0cm;
	margin-left:36.0pt;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page Section1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
	{page:Section1;}
 /* List Definitions */
 @list l0
	{mso-list-id:1638685742;
	mso-list-type:hybrid;
	mso-list-template-ids:1028543436 69009409 69009411 69009413 69009409 69009=
411 69009413 69009409 69009411 69009413;}
@list l0:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Symbol;}
ol
	{margin-bottom:0cm;}
ul
	{margin-bottom:0cm;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DSV link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><a name=3D"_MailEndCompose"><span lang=3DEN-US style=
=3D'color:
#1F497D'>An agenda has been posted based on the requests received so far.<o=
:p></o:p></span></a></p>

<p class=3DMsoNormal><a
href=3D"http://www3.ietf.org/proceedings/07jul/agenda/pkix.txt"><span lang=
=3DEN-US>http://www3.ietf.org/proceedings/07jul/agenda/pkix.txt</span></a><=
span
lang=3DEN-US style=3D'color:#1F497D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'><o:p>&nbsp;=
</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'>A few topic=
s are
still preliminary:<o:p></o:p></span></p>

<p class=3DMsoListParagraph style=3D'text-indent:-18.0pt;mso-list:l0 level1=
 lfo1'><![if !supportLists]><span
lang=3DEN-US style=3D'font-family:Symbol;color:#1F497D'><span style=3D'mso-=
list:Ignore'>&middot;<span
style=3D'font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3DEN-US style=3D'color:#1F497D'>I=
 need a
confirmation from Jim Schaad whether he intends to address the update
requirements on CMC<o:p></o:p></span></p>

<p class=3DMsoListParagraph style=3D'text-indent:-18.0pt;mso-list:l0 level1=
 lfo1'><![if !supportLists]><span
lang=3DEN-US style=3D'font-family:Symbol;color:#1F497D'><span style=3D'mso-=
list:Ignore'>&middot;<span
style=3D'font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3DEN-US style=3D'color:#1F497D'>I=
 need a confirmation
whether anyone intends to do any further presentation on the individual key=
-rollover
draft now available.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'><o:p>&nbsp;=
</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'><o:p>&nbsp;=
</o:p></span></p>

<div>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:maroon'>Stefan Santesson</span></b><span lang=3D=
EN-GB
style=3D'font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F49=
7D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-GB style=3D'font-size:10.0pt;font-fami=
ly:"Arial","sans-serif";
color:#400040'>Senior Program Manager</span><span lang=3DEN-GB style=3D'fon=
t-size:
12.0pt;font-family:"Times New Roman","serif";color:navy'><o:p></o:p></span>=
</p>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:#400040'>Windows Security, Standards</span></b><=
span
lang=3DEN-US style=3D'color:#1F497D'><o:p></o:p></span></p>

</div>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'><o:p>&nbsp;=
</o:p></span></p>

<div style=3D'border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm =
4.0pt'>

<div>

<div style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm =
0cm 0cm'>

<p class=3DMsoNormal><b><span lang=3DEN-US style=3D'font-size:10.0pt;font-f=
amily:
"Tahoma","sans-serif"'>From:</span></b><span lang=3DEN-US style=3D'font-siz=
e:10.0pt;
font-family:"Tahoma","sans-serif"'> [email-masked]
[mailto:[email-masked]] <b>On Behalf Of </b>Stefan Santesson<=
br>
<b>Sent:</b> den 29 juni 2007 16:26<br>
<b>To:</b> pkix<br>
<b>Subject:</b> Call for agenda items for the CHicago PKIX meeting<br>
<b>Importance:</b> High<o:p></o:p></span></p>

</div>

</div>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

<p class=3DMsoNormal><span lang=3DEN-US>All,<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>A number is issues has been brought=
 to the
list since last IETF meeting.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>Please let me know if you have any =
topic
you want to discuss during the PKIX meeting in Chicago.<o:p></o:p></span></=
p>

<p class=3DMsoNormal><span lang=3DEN-US>As usual, I need at least one edito=
r from
each active document to send me a note whether you want a time slot at the
meeting beyond my general status report.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>I need your request for agenda item=
s before
end of next week. I.e. Friday July 6.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>Thank you.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:maroon'>Stefan Santesson</span></b><span lang=3D=
EN-GB
style=3D'font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F49=
7D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-GB style=3D'font-size:10.0pt;font-fami=
ly:"Arial","sans-serif";
color:#400040'>Senior Program Manager</span><span lang=3DEN-GB style=3D'fon=
t-size:
12.0pt;font-family:"Times New Roman","serif";color:navy'><o:p></o:p></span>=
</p>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:#400040'>Windows Security, Standards</span></b><=
span
lang=3DEN-US style=3D'color:#1F497D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

</div>

</div>

</body>

</html>

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D157B312EAEXMSGC307euro_--

From: Stefan Santesson <[email-masked]>
To: pkix <[email-masked]>
Date: Wed, 11 Jul 2007 23:39:18 +0100
Subject: Agenda for Chicago IEFT
Accept-Language: en-US
acceptlanguage: en-US
Sender: [email-masked]

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D157B219EAEXMSGC307euro_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I'm sorry for the delay of the Agenda. I'm currently on vacation.
I will go through all requests and post a preliminary agenda by tomorrow

It looks like we will be able to accommodate the requests received but wait=
 for the agenda tomorrow to be sure.

Thank you.

Stefan Santesson
Senior Program Manager
Windows Security, Standards

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D157B219EAEXMSGC307euro_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:p=3D"urn:schemas-m=
icrosoft-com:office:powerpoint" xmlns:a=3D"urn:schemas-microsoft-com:office=
:access" xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s=3D"=
uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs=3D"urn:schemas-microsof=
t-com:rowset" xmlns:z=3D"#RowsetSchema" xmlns:b=3D"urn:schemas-microsoft-co=
m:office:publisher" xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadshee=
t" xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" xmlns=
:oa=3D"urn:schemas-microsoft-com:office:activation" xmlns:html=3D"http://ww=
w.w3.org/TR/REC-html40" xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope=
/" xmlns:D=3D"DAV:" xmlns:x2=3D"http://schemas.microsoft.com/office/excel/2=
003/xml" xmlns:ois=3D"http://schemas.microsoft.com/sharepoint/soap/ois/" xm=
lns:dir=3D"http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:d=
s=3D"http://www.w3.org/2000/09/xmldsig#" xmlns:dsp=3D"http://schemas.micros=
oft.com/sharepoint/dsp" xmlns:udc=3D"http://schemas.microsoft.com/data/udc"=
 xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema" xmlns:sps=3D"http://schemas=
.microsoft.com/sharepoint/soap/" xmlns:xsi=3D"http://www.w3.org/2001/XMLSch=
ema-instance" xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile"=
 xmlns:wf=3D"http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:=
mver=3D"http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:=
m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels=3D"http:=
//schemas.openxmlformats.org/package/2006/relationships" xmlns:ex12t=3D"htt=
p://schemas.microsoft.com/exchange/services/2006/types" xmlns=3D"http://www=
.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii"=
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;}
@page Section1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
	{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DSV link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><span lang=3DEN-US>I&#8217;m sorry for the delay of th=
e
Agenda. I&#8217;m currently on vacation.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>I will go through all requests and =
post a
preliminary agenda by tomorrow<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>It looks like we will be able to ac=
commodate
the requests received but wait for the agenda tomorrow to be sure.<o:p></o:=
p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>Thank you.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:maroon'>Stefan Santesson</span></b><span lang=3D=
EN-GB
style=3D'font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F49=
7D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-GB style=3D'font-size:10.0pt;font-fami=
ly:"Arial","sans-serif";
color:#400040'>Senior Program Manager</span><span lang=3DEN-GB style=3D'fon=
t-size:
12.0pt;font-family:"Times New Roman","serif";color:navy'><o:p></o:p></span>=
</p>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:#400040'>Windows Security, Standards</span></b><=
span
lang=3DEN-US style=3D'color:#1F497D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

</div>

</body>

</html>

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D157B219EAEXMSGC307euro_--

Content-class: urn:content-classes:message
Subject: RE: PKI Disaster Recovery and Key Rollover
Date: Wed, 11 Jul 2007 15:20:13 +0200
From: "Ignacio Alamillo" <[email-masked]>
To: "Peter Gutmann" <[email-masked]>, <[email-masked]>
Cc: <[email-masked]>, <[email-masked]>
Sender: [email-masked]

This is a multi-part message in MIME format.

------_=_NextPart_001_01C7C3BE.37255066
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

Not want to disturb anyone with legal stuff, but in many cases the =
applicable law establishes some minimum actions to undertake in case a =
CA stops operations. I.e. article 21 of the Spanish Law 59/2003, on =
electronic signatures, says something like "a CA wanting to cease =
operations shall inform within two months its subscribers and will be =
allowed to transfer, with their express consent, the management of valid =
certificates to another CA or revoke them".=20

Up to this, no one has any effective protection against a CA going off =
business which doesn't inform of anything, therefore the third paragraph =
of this art. 21 says that the CA will transfer the Science and =
Technology Ministry (today the Industry, Commerce and Tourism Ministry) =
the revocation information.=20

With this information, the Ministry will maintain a public service =
informing of the revocation status of the certificates.=20

Not bad at all, but even in this case a CA could not transfer this =
information to the Ministry.

Therefore, the best "continuity" strategy to be able to validate =
signatures is, in my opinion, to implement a signature completion and =
maintenance process, getting all the relevant evidential material (such =
as CRLs or OCSP responses) and store it.

ETSI CAdES and XAdES specs provide full guidance on this, just as CEN =
CWA 14171 does.

Best,

Ignacio

-----Mensaje original-----
De: [email-masked] en nombre de Peter Gutmann
Enviado el: mi=E9 11/07/2007 13:06
Para: [email-masked]; [email-masked]
CC: [email-masked]; [email-masked]
Asunto: Re: PKI Disaster Recovery and Key Rollover
=20

"Denis Pinkas" <[email-masked]> writes:

>Here is an extract from ETSI TS 101 456:

Hmm, OK, what I was looking for was more of a list of issues from the
user/EE/relying-party point of view, things that they have to consider =
when
dealing with a CA.  To take one oft-quoted case:

  - the CA shall destroy, or withdraw from use, its private keys, as =
defined
    in clause 7.2.6.

that's never going to happen in the real world because the only asset =
left to
a CA when it goes out of business is its private key, and the =
liquidators are
never going to allow the deliberate destruction of corporate assets in =
this
manner.  More importantly, even if the CA had some policy related to =
this
while it was still operating, once it's in receivership the policy =
becomes
void. It's a bit like Tony Bartoletti's suggestion for adding a =
crimeFree bit
to keyUsage, you can write whatever policy you like for it but when it =
comes
to the crunch it's not going to work the way the policy says.

So what I was looking for, if the document is looking at PKI-related =
disaster
recovery, is advice to users on what to do when their CA vanishes, all =
support
and services stop overnight (with no continuity or responsibility), and =
the
liquidators sell the private key on eBay.

Peter.

------_=_NextPart_001_01C7C3BE.37255066
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.5.7652.24">
<TITLE>RE: PKI Disaster Recovery and Key Rollover</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->

<P><FONT SIZE=3D2>Hi,<BR>
<BR>
Not want to disturb anyone with legal stuff, but in many cases the =
applicable law establishes some minimum actions to undertake in case a =
CA stops operations. I.e. article 21 of the Spanish Law 59/2003, on =
electronic signatures, says something like &quot;a CA wanting to cease =
operations shall inform within two months its subscribers and will be =
allowed to transfer, with their express consent, the management of valid =
certificates to another CA or revoke them&quot;.<BR>
<BR>
Up to this, no one has any effective protection against a CA going off =
business which doesn't inform of anything, therefore the third paragraph =
of this art. 21 says that the CA will transfer the Science and =
Technology Ministry (today the Industry, Commerce and Tourism Ministry) =
the revocation information.<BR>
<BR>
With this information, the Ministry will maintain a public service =
informing of the revocation status of the certificates.<BR>
<BR>
Not bad at all, but even in this case a CA could not transfer this =
information to the Ministry.<BR>
<BR>
Therefore, the best &quot;continuity&quot; strategy to be able to =
validate signatures is, in my opinion, to implement a signature =
completion and maintenance process, getting all the relevant evidential =
material (such as CRLs or OCSP responses) and store it.<BR>
<BR>
ETSI CAdES and XAdES specs provide full guidance on this, just as CEN =
CWA 14171 does.<BR>
<BR>
<BR>
Best,<BR>
<BR>
Ignacio<BR>
<BR>
<BR>
-----Mensaje original-----<BR>
De: [email-masked] en nombre de Peter Gutmann<BR>
Enviado el: mi=E9 11/07/2007 13:06<BR>
Para: [email-masked]; [email-masked]<BR>
CC: [email-masked]; [email-masked]<BR>
Asunto: Re: PKI Disaster Recovery and Key Rollover<BR>
<BR>
<BR>
&quot;Denis Pinkas&quot; &lt;[email-masked]&gt; writes:<BR>
<BR>
&gt;Here is an extract from ETSI TS 101 456:<BR>
<BR>
Hmm, OK, what I was looking for was more of a list of issues from =
the<BR>
user/EE/relying-party point of view, things that they have to consider =
when<BR>
dealing with a CA.&nbsp; To take one oft-quoted case:<BR>
<BR>
&nbsp; - the CA shall destroy, or withdraw from use, its private keys, =
as defined<BR>
&nbsp;&nbsp;&nbsp; in clause 7.2.6.<BR>
<BR>
that's never going to happen in the real world because the only asset =
left to<BR>
a CA when it goes out of business is its private key, and the =
liquidators are<BR>
never going to allow the deliberate destruction of corporate assets in =
this<BR>
manner.&nbsp; More importantly, even if the CA had some policy related =
to this<BR>
while it was still operating, once it's in receivership the policy =
becomes<BR>
void. It's a bit like Tony Bartoletti's suggestion for adding a =
crimeFree bit<BR>
to keyUsage, you can write whatever policy you like for it but when it =
comes<BR>
to the crunch it's not going to work the way the policy says.<BR>
<BR>
So what I was looking for, if the document is looking at PKI-related =
disaster<BR>
recovery, is advice to users on what to do when their CA vanishes, all =
support<BR>
and services stop overnight (with no continuity or responsibility), and =
the<BR>
liquidators sell the private key on eBay.<BR>
<BR>
Peter.<BR>
<BR>
<BR>
<BR>
<BR>
</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C7C3BE.37255066--

From: [email-masked] (Peter Gutmann)
To: [email-masked], [email-masked]
Subject: Re: PKI Disaster Recovery and Key Rollover
Cc: [email-masked], [email-masked]
Date: Wed, 11 Jul 2007 23:06:51 +1200
Sender: [email-masked]

"Denis Pinkas" <[email-masked]> writes:

>Here is an extract from ETSI TS 101 456:

Hmm, OK, what I was looking for was more of a list of issues from the
user/EE/relying-party point of view, things that they have to consider when
dealing with a CA.  To take one oft-quoted case:

  - the CA shall destroy, or withdraw from use, its private keys, as defined
    in clause 7.2.6.

that's never going to happen in the real world because the only asset left to
a CA when it goes out of business is its private key, and the liquidators are
never going to allow the deliberate destruction of corporate assets in this
manner.  More importantly, even if the CA had some policy related to this
while it was still operating, once it's in receivership the policy becomes
void. It's a bit like Tony Bartoletti's suggestion for adding a crimeFree bit
to keyUsage, you can write whatever policy you like for it but when it comes
to the crunch it's not going to work the way the policy says.

So what I was looking for, if the document is looking at PKI-related disaster
recovery, is advice to users on what to do when their CA vanishes, all support
and services stop overnight (with no continuity or responsibility), and the
liquidators sell the private key on eBay.

Peter.

Content-class: urn:content-classes:message
Subject: RE: PKI Disaster Recovery and Key Rollover
Date: Wed, 11 Jul 2007 03:47:18 -0700
From: "Santosh Chokhani" <[email-masked]>
To: "pgut001" <[email-masked]>, <[email-masked]>, <[email-masked]>
Cc: <[email-masked]>, <[email-masked]>
Sender: [email-masked]

Peter,

Like rest of the Policy Framework, 3647 does not specify any policies
for this or other points.  3647 is a framework and not a policy or a
sample policy.

What I have seen in some of the certificate policies seem to adequately
address this.

-----Original Message-----
From: pgut001 [mailto:[email-masked]] 
Sent: Wednesday, July 11, 2007 5:37 AM
To: Santosh Chokhani; [email-masked]; [email-masked];
[email-masked]
Cc: [email-masked]; [email-masked]
Subject: RE: PKI Disaster Recovery and Key Rollover

"Santosh Chokhani" <[email-masked]> writes:

>The Policy Framework (Informational RFC 3647) has a section on CA and
RA
>Termination.

Do you mean section 4.5.8:

   This subcomponent describes requirements relating to procedures for
   termination and termination notification of a CA or RA, including the
   identity of the custodian of CA and RA archival records.

This seems to provide about as much utility as Cygnus' corporate drugs
policy
:-).

>I have seen a number of Certificate Policies drafted that describe
>requirements as to what a CA must do prior to termination of service.

Given the number of CAs whose users I've talked to for which the
termination
of service consisted of "404 Not Found", I think this is something that
needs
to be addressed in more detail.  In particular since this draft is
supposed to
cover "PKI Disaster Recovery" and having your CA suddenly vanish is the
single
biggest possible disaster than can hit a PKI, I think a fair amount of
the
document should be devoted to this.  Where do the CA keys go?  Who
issues
CRLs?  (A real-world example there, one national PKI that evaporated
suddenly
was left with the problem that while the hardware was still in place,
there
were no staff left who knew how to issue a CRL).  Who takes over the
defunct
CA's role? Who gets the CA's keys?  (Again, real-world example, they end
up on
eBay for sale to the highest bidder).  You could easily write a small
book on
all of this, it really is the single most drastic PKI disaster recovery
issue
that we have, and probably the most frequently-occurring (CA- rather
than EE-
related) one.

Peter.

Date: Wed, 11 Jul 2007 12:13:45 +0200
From: Peter Sylvester <[email-masked]>
To: "David A. Cooper" <[email-masked]>
Cc: pkix <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Sender: [email-masked]

This is a cryptographically signed message in MIME format.

--------------ms040103080301050904090400
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

David A. Cooper wrote:
> Peter Sylvester wrote:
>> If something hasn't changed since years, this doesn't mean that is 
>> correct.
> Peter,
>
> You said "Section 3.2.3  now has *reintroduced* the 'prospective' 
> certification path."  I was simply pointing out that this was not a 
> change.  Nothing was "reintroduced".
indeed, I was incorrect:

The text introduces the word 'prospective' in 3.2.3
in order to make it formally compatible withe 3.2.2.
As a resolution of what we discussed a year ago,
I would have expected something different, i.e. clarifying that

    id-stc-build-aa-path: Build a prospective certification path to a
      trust anchor for the AC issuer

is problematic if one takes the definition of 3280.  3.2.3
said before that the server returns a certificate path (and not just
a set of certs).

>
> Dave
>> David A. Cooper wrote:
>>> Peter Sylvester wrote:
>>>> Section 3.2.3  now has reintroduced the 'prospective' certification 
>>>> path.
>>>>
>>>> I think that we had understood that either this term borrowed from
>>>> 3280 only means an arbitrary sequence of n certificates and that is
>>>> not exactly what is desired here.
>>> Peter,
>>>
>>> The paragraph that you are referring to in section 3.2.3 is 
>>> discussing the use of the path building wantBacks 
>>> (id-stc-build-pkc-path and id-stc-build-aa-path), which are 
>>> described in section 3.2.2 as follows:
>>>
>>>    - id-stc-build-pkc-path: Build a prospective certification path to a
>>>       trust anchor (as defined in section 6.1 of [PKIX-1]);
>>>  
>>> - id-stc-build-aa-path: Build a prospective certification path to a
>>>       trust anchor for the AC issuer;
>>>
>>> The description of id-stc-build-pkc-path has been unchanged since 
>>> draft 18 and the description of id-stc-build-aa-path has been 
>>> unchanged since draft 24.
>>>
>>> Dave

--------------ms040103080301050904090400
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

--------------ms040103080301050904090400--

From: [email-masked] (Peter Gutmann)
To: [email-masked], [email-masked], [email-masked], [email-masked]
Subject: RE: PKI Disaster Recovery and Key Rollover
Cc: [email-masked], [email-masked]
Date: Wed, 11 Jul 2007 21:37:15 +1200
Sender: [email-masked]

"Santosh Chokhani" <[email-masked]> writes:

>The Policy Framework (Informational RFC 3647) has a section on CA and RA
>Termination.

Do you mean section 4.5.8:

   This subcomponent describes requirements relating to procedures for
   termination and termination notification of a CA or RA, including the
   identity of the custodian of CA and RA archival records.

This seems to provide about as much utility as Cygnus' corporate drugs policy
:-).

>I have seen a number of Certificate Policies drafted that describe
>requirements as to what a CA must do prior to termination of service.

Given the number of CAs whose users I've talked to for which the termination
of service consisted of "404 Not Found", I think this is something that needs
to be addressed in more detail.  In particular since this draft is supposed to
cover "PKI Disaster Recovery" and having your CA suddenly vanish is the single
biggest possible disaster than can hit a PKI, I think a fair amount of the
document should be devoted to this.  Where do the CA keys go?  Who issues
CRLs?  (A real-world example there, one national PKI that evaporated suddenly
was left with the problem that while the hardware was still in place, there
were no staff left who knew how to issue a CRL).  Who takes over the defunct
CA's role? Who gets the CA's keys?  (Again, real-world example, they end up on
eBay for sale to the highest bidder).  You could easily write a small book on
all of this, it really is the single most drastic PKI disaster recovery issue
that we have, and probably the most frequently-occurring (CA- rather than EE-
related) one.

Peter.

Content-class: urn:content-classes:message
Subject: RE: PKI Disaster Recovery and Key Rollover
Date: Wed, 11 Jul 2007 01:54:03 -0700
From: "Santosh Chokhani" <[email-masked]>
To: "Peter Gutmann" <[email-masked]>, <[email-masked]>, <[email-masked]>
Cc: <[email-masked]>, <[email-masked]>
Sender: [email-masked]

Peter,

The Policy Framework (Informational RFC 3647) has a section on CA and RA
Termination.  I have seen a number of Certificate Policies drafted that
describe requirements as to what a CA must do prior to termination of
service.

-----Original Message-----
From: [email-masked] [mailto:[email-masked]]
On Behalf Of Peter Gutmann
Sent: Wednesday, July 11, 2007 2:47 AM
To: [email-masked]; [email-masked]
Cc: [email-masked]; [email-masked]
Subject: Re: PKI Disaster Recovery and Key Rollover

"Denis Pinkas" <[email-masked]> writes:

>This document presents a framework to assist the writers of policy or
>practice statements and the designers of a Public Key Infrastructure to
>prepare disaster recovery plans in case of a private key-compromise or
a
>private key-loss. This may happen to end-entity keys, Certification
>Authorities, Revocation Authorities, Attribute Authorities, or
Time-Stamping
>Authorities.  Since certificates have finite validity, CA key-rollover
should
>be planned in advance.

Should it also cover the far more serious problem of the CA going out of
business?  I've talked to users of a number of CAs that have failed and
the
effect has been pretty chaotic on relying parties and users: one day the
CA
just isn't there any more, and everything stops working.  This seems to
be by
far the most serious real-world-impact CA issue that I've encountered,
but
it's not even considered in any PKI documentation that I know of.

Peter.

Date: Wed, 11 Jul 2007 09:05:44 +0200
From: "Denis Pinkas" <[email-masked]>
To: "pgut001" <[email-masked]>
Cc: "[email-masked]" <[email-masked]>, "[email-masked]" <[email-masked]>
Subject: Re: PKI Disaster Recovery and Key Rollover
Sender: [email-masked]

Peter,

The point you mention, seems to me in between technical matters and juridical matters.

It is addressed in different ETSI documents that may be downloaded free of charge from: 
http://www.etsi.org/services_products/freestandard/home.htm

In particular ETSI TS 101 456 and ETSI TS 102 042.

Here is an extract from ETSI TS 101 456:

7.4.9	CA termination

The CA shall ensure that potential disruptions to subscribers and relying parties are minimized 
as a result of the cessation of the CA's services, and ensure continued maintenance of records 
required to provide evidence of certification for the purposes of legal proceedings (see the 
Directive [1], annex II (i)). In particular:

a)	Before the CA terminates its services the following procedures shall be executed as a minimum:

-	the CA shall inform all subscribers, relying parties and other CAs with which it has agreements 
    or other form of established relations.

NOTE:	The CA is not required to have a prior relationship with the relying party.

-	the CA shall terminate all authorization of subcontractors to act on behalf of the CA
    in the performance of any functions related to the process of issuing certificates;
-	the CA shall perform necessary undertakings to transfer obligations for maintaining 
    registration information (see clause 7.3.1) and event log archives (see clause 7.4.11) 
    for their respective period of time as indicated to the subscriber and relying party (see clause 7.3.4);
-	the CA shall destroy, or withdraw from use, its private keys, as defined in clause 7.2.6.

b)	The CA shall have an arrangement to cover the costs to fulfil these minimum requirements 
      in case the CA becomes bankrupt or for other reasons is unable to cover the costs by itself.

c)	The CA shall state in its practices the provisions made for termination of service. 
    This shall include:
-	the notification of affected entities;
-	the transfer of its obligations to other parties;
-	the handling of the revocation status for unexpired certificates that have been issued.

Do you think that some parts of this text should be incorporated in the current draft ?

Denis

===============================================================

>"Denis Pinkas" <[email-masked]> writes:
>
>>This document presents a framework to assist the writers of policy or
>>practice statements and the designers of a Public Key Infrastructure to
>>prepare disaster recovery plans in case of a private key-compromise or a
>>private key-loss. This may happen to end-entity keys, Certification
>>Authorities, Revocation Authorities, Attribute Authorities, or Time-Stamping
>>Authorities.  Since certificates have finite validity, CA key-rollover should
>>be planned in advance.
>
>Should it also cover the far more serious problem of the CA going out of
>business?  I've talked to users of a number of CAs that have failed and the
>effect has been pretty chaotic on relying parties and users: one day the CA
>just isn't there any more, and everything stops working.  This seems to be by
>far the most serious real-world-impact CA issue that I've encountered, but
>it's not even considered in any PKI documentation that I know of.
>
>Peter.
>
>

Regards,

Denis Pinkas

From: [email-masked] (Peter Gutmann)
To: [email-masked], [email-masked]
Subject: Re: PKI Disaster Recovery and Key Rollover
Cc: [email-masked], [email-masked]
Date: Wed, 11 Jul 2007 18:46:45 +1200
Sender: [email-masked]

"Denis Pinkas" <[email-masked]> writes:

>This document presents a framework to assist the writers of policy or
>practice statements and the designers of a Public Key Infrastructure to
>prepare disaster recovery plans in case of a private key-compromise or a
>private key-loss. This may happen to end-entity keys, Certification
>Authorities, Revocation Authorities, Attribute Authorities, or Time-Stamping
>Authorities.  Since certificates have finite validity, CA key-rollover should
>be planned in advance.

Should it also cover the far more serious problem of the CA going out of
business?  I've talked to users of a number of CAs that have failed and the
effect has been pretty chaotic on relying parties and users: one day the CA
just isn't there any more, and everything stops working.  This seems to be by
far the most serious real-world-impact CA issue that I've encountered, but
it's not even considered in any PKI documentation that I know of.

Peter.

Date: Tue, 10 Jul 2007 17:01:23 -0400
From: "David A. Cooper" <[email-masked]>
To: Peter Sylvester <[email-masked]>
CC: pkix <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Sender: [email-masked]

This is a multi-part message in MIME format.
--------------080507070501000907080208
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Peter Sylvester wrote:
> If something hasn't changed since years, this doesn't mean that is 
> correct.
Peter,

You said "Section 3.2.3  now has *reintroduced* the 'prospective' 
certification path."  I was simply pointing out that this was not a 
change.  Nothing was "reintroduced".

Dave
> David A. Cooper wrote:
>> Peter Sylvester wrote:
>>> Section 3.2.3  now has reintroduced the 'prospective' certification 
>>> path.
>>>
>>> I think that we had understood that either this term borrowed from
>>> 3280 only means an arbitrary sequence of n certificates and that is
>>> not exactly what is desired here.
>> Peter,
>>
>> The paragraph that you are referring to in section 3.2.3 is 
>> discussing the use of the path building wantBacks 
>> (id-stc-build-pkc-path and id-stc-build-aa-path), which are described 
>> in section 3.2.2 as follows:
>>
>>    - id-stc-build-pkc-path: Build a prospective certification path to a
>>       trust anchor (as defined in section 6.1 of [PKIX-1]);
>>  
>> - id-stc-build-aa-path: Build a prospective certification path to a
>>       trust anchor for the AC issuer;
>>
>> The description of id-stc-build-pkc-path has been unchanged since 
>> draft 18 and the description of id-stc-build-aa-path has been 
>> unchanged since draft 24.
>>
>> Dave

--------------080507070501000907080208
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Peter Sylvester wrote:<br>
<blockquote cite="mid:[email-masked]" type="cite">If
something hasn't changed since years, this doesn't mean that is
correct.
  <br>
</blockquote>
Peter,<br>
<br>
You said "Section 3.2.3&nbsp; now has <b>reintroduced</b> the 'prospective'
certification path."&nbsp; I was simply pointing out that this was not a
change.&nbsp; Nothing was "reintroduced".<br>
<br>
Dave<br>
<blockquote cite="mid:[email-masked]" type="cite">David A.
Cooper wrote:
  <br>
  <blockquote type="cite">Peter Sylvester wrote:
    <br>
    <blockquote type="cite">Section 3.2.3&nbsp; now has reintroduced the
'prospective' certification path.
      <br>
      <br>
I think that we had understood that either this term borrowed from
      <br>
3280 only means an arbitrary sequence of n certificates and that is
      <br>
not exactly what is desired here.
      <br>
    </blockquote>
Peter,
    <br>
    <br>
The paragraph that you are referring to in section 3.2.3 is discussing
the use of the path building wantBacks (id-stc-build-pkc-path and
id-stc-build-aa-path), which are described in section 3.2.2 as follows:
    <br>
    <br>
&nbsp;&nbsp; - id-stc-build-pkc-path: Build a prospective certification path to a
    <br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; trust anchor (as defined in section 6.1 of [PKIX-1]);
    <br>
&nbsp;
    <br>
- id-stc-build-aa-path: Build a prospective certification path to a
    <br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; trust anchor for the AC issuer;
    <br>
    <br>
The description of id-stc-build-pkc-path has been unchanged since draft
18 and the description of id-stc-build-aa-path has been unchanged since
draft 24.
    <br>
    <br>
Dave<br>
  </blockquote>
</blockquote>
</body>
</html>

--------------080507070501000907080208--

Date: Tue, 10 Jul 2007 15:00:18 +0200
From: Peter Sylvester <[email-masked]>
To: "David A. Cooper" <[email-masked]>
Cc: pkix <[email-masked]>, "[email-masked]" <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Sender: [email-masked]

This is a cryptographically signed message in MIME format.

--------------ms070002070609040806030106
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

David,

If something hasn't changed since years, this doesn't mean that is correct.
You wrote the following in May 2006 where you indicate that your
understanding of 'prospective path' was not correct.
 
At the end you say 'certification path', but is is a totally arbitary 
sequence
of  certficates. What the protocol allows is that a MIM can create a DOS 
attack
by throwing all kinds of certificates and tell that it has more info in 
case
the client doesn't like.
what defense ha the client, how and when can it detect that something is 
wrong?
It can apply some heuristics, assuming that a server would at least return
certs where the names are chaining, and maybe the signature verify for 
example.
But that is not currently in the protocol.

If you take a directory implementation and a client that searches
in that to build a path, the directory does not return arbitrary certs,
or at least, if it does, the client stops immediately and detects a faulty
behaviour.

Your suggestion is useful but it has not found its way into the text
in any way. Furthermore, because you have misread 3820, I think that
the your citation of the definition of
     id-stc-build-aa-path
also means you had the same error in mind.

I think just encouraging is a little bit weak.
A server MUST return a "propective path" that least verifies some 
conditions.
(which doesn't mean that the client does not verify them).  Otherwise
the client has no means to decide whether to stop talking to the server.

David A. Cooper wrote:
> Peter,
>
> Your initial response to my message was correct.  I simply read RFC 
> 3280 too
> quickly when responding to Thomas's message and quoted the wrong text 
> for the
> definition of prospective certification path.  RFC 3280 does define a
> prospective certification path as a sequence of n certificates and 
> indicates
> that path validation involves (among other things) verifying the items 
> listed in
> a) - d).
>
> I agree that the description of id-stc-build-aa-path should be change 
> to be
> consistent with the description for id-stc-build-pkc-path.  By design, 
> it should
> be possible to operate a DPD server as an untrusted system, which 
> means that the
> client cannot necessarily rely on any of the information returned by 
> the server.
>  The client must perform all of the steps of path validation and 
> cannot assume
> that the path returned by the server satisfies certain conditions.  Of 
> course,
> it would be preferable from the client's point of view for the server 
> not to
> send it invalid certification paths, so I would encourage DPD servers 
> to perform
> at least some checks on the certification paths that they return to 
> clients,
> even if this is not a requirement of the protocol.
>
> Dave
>   

David A. Cooper wrote:
> Peter Sylvester wrote:
>> Section 3.2.3  now has reintroduced the 'prospective' certification 
>> path.
>>
>> I think that we had understood that either this term borrowed from
>> 3280 only means an arbitrary sequence of n certificates and that is
>> not exactly what is desired here.
> Peter,
>
> The paragraph that you are referring to in section 3.2.3 is discussing 
> the use of the path building wantBacks (id-stc-build-pkc-path and 
> id-stc-build-aa-path), which are described in section 3.2.2 as follows:
>
>    - id-stc-build-pkc-path: Build a prospective certification path to a
>       trust anchor (as defined in section 6.1 of [PKIX-1]);
>  
> - id-stc-build-aa-path: Build a prospective certification path to a
>       trust anchor for the AC issuer;
>
> The description of id-stc-build-pkc-path has been unchanged since 
> draft 18 and the description of id-stc-build-aa-path has been 
> unchanged since draft 24.
>
> Dave
>
>

--------------ms070002070609040806030106
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

--------------ms070002070609040806030106--

Date: 	Tue, 10 Jul 2007 12:24:00 -0900
From: "Effie Doss" <[email-masked]>
To: [email-masked]
Subject: Don't get left behind

------------67821E4BFDA67F6
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Finally the true stuff – with no trickery! 
P.E.P. are tasting hot right this time! This is the real stuff not an imitation! 

One of the very exceptionals, totally unrivalled stuff is easy accessible all over the world!
 Pay heed to what people say about this stuff:

"I like how quick your product had an affect upon my boyfriend, he can't stop chatting on how hot he is having his new calibre, extent, and libido!"

Amely S., San Diego

"Firstly I thought the gratuitous sample  I acquired was a jest, till I tried using the P.E.P. I can’t describe report how plume I am with the effects I achieved from using the remedy after 7 short weeks. I will be ordering continually!" 
Steve Doubt, San Diego

Look at more references about this amazing product right here and right now!
http://www.periast.net/?qyjrhfkjha

------------67821E4BFDA67F6
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>She will love you more than any other guy</TITLE>
</HEAD>
<BODY>

<b>
Finally the true stuff – with no trickery! 
<br>
<a href="http://www.periast.net/?qyjrhfkjha" target="_blank">P.E.P.</a> are tasting hot right this time! This is the real stuff not an imitation! 
<br>
One of the very exceptionals, totally unrivalled stuff is easy accessible all over the world!
<br> Pay heed to what people say about this stuff:
<p>
<i>
"I like how quick your product had an affect upon my boyfriend, he can't stop chatting on how hot he is having his new calibre, extent, and libido!"
</i>
</p>
Amely S., San Diego
<p>
<i>
"Firstly I thought the gratuitous sample  I acquired was a jest, till I tried using the P.E.P. I can’t describe report how plume I am with the effects I achieved from using the remedy after 7 short weeks. I will be ordering continually!" </i>
</p>
Steve Doubt, San Diego
<center>
<a href="http://www.periast.net/?qyjrhfkjha" target="_blank">
Look at more references about this amazing product right here and right now!
</a>
</center>
</b>
<font color="#D9EDFF">http://www.periast.net/?qyjrhfkjha</font>

</BODY></HTML>
------------67821E4BFDA67F6--

Date: Mon, 09 Jul 2007 14:28:26 -0500
From: "Vijay K. Gurbani" <[email-masked]>
Organization: Bell Labs Security Technology Research Group
To: [email-masked]
CC: Scott Lawrence <[email-masked]>, "Jeffrey, Alan S A (Alan)" <[email-masked]>
Subject: Updated draft-gurbani-sip-domain-certs-06
Sender: [email-masked]

On Fri, 2007-06-22 at 16:12 -0500, Vijay K. Gurbani wrote:
 > Folks: draft-gurbani-sip-domain-certs-05 has been submitted to
 > the IETF archives.  This version includes the guidance we
 > got from the pkix WG in Prague.  More specifically, this version
 > focuses strictly on:
 >
 > - How to use and interpret the SIP identities in a X.509 certificate.
 > - How to indicate that this particular certificate is for SIP
 >   usage.

We got some excellent late-breaking comments from Stephen Kent, and
reissued this as -06 just ahead of the deadline for Chicago.  Since such
a late submission may take some days to get through the pipeline, you
can get it here now:

http://svn.resiprocate.org/rep/ietf-drafts/gurbani/domain-certs/draft-gurbani-sip-domain-certs-06.txt
http://svn.resiprocate.org/rep/ietf-drafts/gurbani/domain-certs/draft-gurbani-sip-domain-certs-06.html

Most of Stephen's comments were incorporated in -06.  There were
a couple that we felt would benefit from a larger discussion in
the SIP WG; as such, we will be presenting this draft at the
Chicago SIP WG to get some consensus around these.

We would like to thank Stephen and the other pkix WG members who
have taken the time to give us better guidance on the draft.

- vijay
-- 
Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
2701 Lucent Lane, Rm. 9F-546, Lisle, Illinois 60532 (USA)
Email: vkg@{alcatel-lucent.com,bell-labs.com,acm.org}
WWW:   http://www.alcatel-lucent.com/bell-labs

Date: 	Mon, 9 Jul 2007 18:11:28 -0100
From: "Rod Caldwell" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------9ADADADAD30C1782
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Best greetings!!! 
Unique offer for you Dear Customer!!!
At these 5 days only for our customers incredible offer!!! 
On all meds you require!!!   
Fill your life with colours of merriment!!!  
http://eventmay.hk/ 

Truly yours, 
On-line community of druggists
------------9ADADADAD30C1782
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Best greetings!!! </em></font><br>
Unique offer for you <font color="#FF0000"><em>Dear Customer!!!</em></font><br>
At these <font color="#FF0000"><em>5 days only</em></font> for our customers incredible offer!!! <br>
On all meds you require!!! </strong> <strong><br><br> 
<a href="http://eventmay.hk/" target="_blank"><em>Fill your life with colours of merriment!!! </em></a></strong> 
<p><font color="#D9EDFF">http://eventmay.hk/</font></p> 

<p><strong>Truly yours,<br> 
<em>On-line community of druggists</em></strong></p>

</BODY></HTML>
------------9ADADADAD30C1782--

Date: Mon, 9 Jul 2007 10:30:02 -0400
To: "Anders Rundgren" <[email-masked]>
From: Stephen Kent <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Cc: "David A. Cooper" <[email-masked]>, "pkix" <[email-masked]>
Sender: [email-masked]

--============_-1028131091==_ma============
Content-Type: text/plain; charset="iso-8859-1" ; format="flowed"
Content-Transfer-Encoding: quoted-printable

At 4:36 PM +0200 7/7/07, Anders Rundgren wrote:
>Although probably not NIST's intentions with=20
>SCVP, I would not be surprised if SCVP long-term=20
>will put the final nail in the Bridge CA coffin.
>
>Off-loaded validation is a MUCH better concept=20
>since it is fully dynamic, allows arbitrary=20
>granularity down to individual EE certificates,=20
>and most of all does not rely on a centrally=20
>funded/trusted "=FCber-CA".  In fact, a successful=20
>rollout of SCVP will probably eliminate most=20
>other uses of cross-certification as well.
>
>Anders
>

David asked a question about HTTP use in SCVP, for which this is NOT an answ=
er.

Try to keep on topic.

Steve
--============_-1028131091==_ma============
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!doctype html public "-//W3C//DTD W3 HTML//EN">
<html><head><style type=3D"text/css"><!--
blockquote, dl, ul, ol, li { padding-top: 0 ; padding-bottom: 0 }
 --></style><title>Re:
draft-ietf-pkix-scvp-32.txt</title></head><body>
<div>At 4:36 PM +0200 7/7/07, Anders Rundgren wrote:</div>
<blockquote type=3D"cite" cite><font face=3D"Arial" size=3D"-1">Although
probably not NIST's intentions with SCVP, I would not be surprised if
SCVP long-term will put the final nail in the Bridge CA
coffin.</font></blockquote>
<blockquote type=3D"cite" cite><font face=3D"Arial" size=3D"-1"><br>
Off-loaded validation is a MUCH better concept since it is fully
dynamic, allows arbitrary granularity down to individual EE
certificates, and most of all does not rely on a centrally
funded/trusted &quot;=FCber-CA&quot;.&nbsp; In fact, a successful
rollout of SCVP will probably eliminate most other uses of
cross-certification&nbsp;as well.</font><br>
<font face=3D"Arial" size=3D"-1"></font></blockquote>
<blockquote type=3D"cite" cite><font face=3D"Arial"
size=3D"-1">Anders</font><br>
<font face=3D"Arial" size=3D"-1"></font></blockquote>
<div><font face=3D"Arial" size=3D"-1"><br></font></div>
<div>David asked a question about HTTP use in SCVP, for which this is
NOT an answer.</div>
<div><br></div>
<div>Try to keep on topic.</div>
<div><br></div>
<div>Steve</div>
</body>
</html>
--============_-1028131091==_ma============--

Date: Mon, 9 Jul 2007 15:45:18 +0200
From: "Denis Pinkas" <[email-masked]>
To: "pkix" <[email-masked]>
Cc: "Joel Kazin" <[email-masked]>, "Stefan Santesson " <[email-masked]>
Subject: PKI Disaster Recovery and Key Rollover
Sender: [email-masked]

To the WG,

I edited together with Joel Kazin an individual Internet-Draft that has been placed on the IETF web server.
The target category is INFORMATIONAL.

The document is now available at:
https://datatracker.ietf.org/drafts/draft-pinkas-pkix-pki-dr-kr

The abstract is the following:

   This document presents a framework to assist the writers of policy 
   or practice statements and the designers of a Public Key 
   Infrastructure to prepare disaster recovery plans in case of a
   private key-compromise or a private key-loss.  This may happen to 
   end-entity keys, Certification Authorities, Revocation Authorities, 
   Attribute Authorities, or Time-Stamping Authorities.  Since 
   certificates have finite validity, CA key-rollover should be 
   planned in advance. 

   In addition, denial of service attacks on Repositories holding 
   CRLs has also to be considered.
   This framework provides a comprehensive list of potential key-
   compromise or key-loss conditions that, in the opinion of the 
   authors, should be addressed so that it is possible to quickly 
   recover from exceptional situations.

I ask the WG to consider whether this document should be progressed 
as an individual contribution or as a PKIX WG document.

I will not be present at the next meeting, but I plan to prepare a few slides to present the draft.

To this respect, I ask whether it would be possible to get a time slot (5 minutes) 
at the next meeting. 

Denis

Content-class: urn:content-classes:message
Subject: RE: draft-ietf-pkix-scvp-32.txt
Date: Mon, 9 Jul 2007 09:25:35 -0400
From: "Guida, Richard [JJCUS]" <[email-masked]>
To: "Anders Rundgren" <[email-masked]>, "David A. Cooper" <[email-masked]>, "pkix" <[email-masked]>
Sender: [email-masked]

This is a multi-part message in MIME format.

------_=_NextPart_001_01C7C22C.A1B9F659
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Anders - a bridge CA is most certainly not a centrally trusted =
"Ueber-CA" - in fact to the contrary, a bridge optimally has no =
self-signed cert and appears in no-ones trust list as an anchor.  That =
is why it is called a "bridge" - between other CAs.  Bridge CAs and SCVP =
seem to me to fit together harmoniously and in a complementary fashion.
=20

-----Original Message-----
From: [email-masked] =
[mailto:[email-masked]]On Behalf Of Anders Rundgren
Sent: Saturday, July 07, 2007 10:37 AM
To: David A. Cooper; pkix
Subject: Re: draft-ietf-pkix-scvp-32.txt

Although probably not NIST's intentions with SCVP, I would not be =
surprised if SCVP long-term will put the final nail in the Bridge CA =
coffin.

Off-loaded validation is a MUCH better concept since it is fully =
dynamic, allows arbitrary granularity down to individual EE =
certificates, and most of all does not rely on a centrally =
funded/trusted "=FCber-CA".  In fact, a successful rollout of SCVP will =
probably eliminate most other uses of cross-certification as well.

Anders

----- Original Message -----=20
From: "David A. Cooper" <  <mailto:[email-masked]> =
[email-masked]>
To: "pkix" <  <mailto:[email-masked]> [email-masked]>
Sent: Friday, July 06, 2007 23:17
Subject: draft-ietf-pkix-scvp-32.txt

All,

I just submitted draft 32 of SCVP for posting.  This draft contains some
editorial changes to address comments raised as a result of IESG review,
but there are no changes to the protocol, either syntactic or semantic.
A diff file comparing drafts 31 and 32 is available at
 =
<http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-scvp-31_to=
_32.html> =
http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-scvp-31_to_=
32.html.

I should note that this draft does not address every issue raised during
the IESG review.  In particular, there are still outstanding comments
from Lisa Dusseault relating to the use of HTTP, which is mainly
specified in Appendix B of SCVP.  Lisa's comments may be found at
 =
<https://datatracker.ietf.org/idtracker/draft-ietf-pkix-scvp/comment/6532=
2> =
https://datatracker.ietf.org/idtracker/draft-ietf-pkix-scvp/comment/65322=
.
If there is someone who has a sufficient knowledge of HTTP to address
the issues that Lisa raises and who is willing to work with us to
resolve these issues, that would be appreciated.

Dave

------_=_NextPart_001_01C7C22C.A1B9F659
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">

<META content=3D"MSHTML 6.00.2800.1596" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><FONT face=3DArial color=3D#0000ff size=3D2><SPAN =
class=3D941422313-09072007>Anders=20
- a bridge CA is most certainly not a centrally trusted =
"Ueber-CA"&nbsp;- in=20
fact to the contrary, a bridge optimally has no self-signed cert and =
appears in=20
no-ones trust list as an anchor.&nbsp; That is why it is called a =
"bridge" -=20
between other CAs.&nbsp; Bridge CAs and SCVP seem to me to fit together=20
harmoniously and in a complementary fashion.</SPAN></FONT></DIV>
<DIV>&nbsp;</DIV><BR>
<BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
  <DIV class=3DOutlookMessageHeader dir=3Dltr align=3Dleft><FONT =
face=3DTahoma=20
  size=3D2>-----Original Message-----<BR><B>From:</B> =
[email-masked]=20
  [mailto:[email-masked]]<B>On Behalf Of </B>Anders=20
  Rundgren<BR><B>Sent:</B> Saturday, July 07, 2007 10:37 =
AM<BR><B>To:</B> David=20
  A. Cooper; pkix<BR><B>Subject:</B> Re:=20
  draft-ietf-pkix-scvp-32.txt<BR><BR></FONT></DIV>
  <DIV><FONT face=3DArial size=3D2>Although probably not NIST's =
intentions with=20
  SCVP, I would not be surprised if SCVP long-term will put the final =
nail in=20
  the Bridge CA coffin.</FONT></DIV><FONT face=3DArial size=3D2>
  <DIV><BR>Off-loaded validation is a MUCH better concept since it is =
fully=20
  dynamic, allows arbitrary granularity down to individual EE =
certificates, and=20
  most of all does not rely on a centrally funded/trusted =
"=FCber-CA".&nbsp; In=20
  fact, a successful rollout of SCVP will probably eliminate most other =
uses of=20
  cross-certification&nbsp;as well.<BR><BR>Anders<BR><BR>----- Original =
Message=20
  ----- <BR>From: "David A. Cooper" &lt;</FONT><A=20
  href=3D"mailto:[email-masked]"><FONT face=3DArial=20
  size=3D2>[email-masked]</FONT></A><FONT face=3DArial =
size=3D2>&gt;<BR>To:=20
  "pkix" &lt;</FONT><A href=3D"mailto:[email-masked]"><FONT =
face=3DArial=20
  size=3D2>[email-masked]</FONT></A><FONT face=3DArial =
size=3D2>&gt;<BR>Sent:=20
  Friday, July 06, 2007 23:17<BR>Subject:=20
  draft-ietf-pkix-scvp-32.txt<BR><BR><BR><BR>All,<BR><BR>I just =
submitted draft=20
  32 of SCVP for posting.&nbsp; This draft contains some<BR>editorial =
changes to=20
  address comments raised as a result of IESG review,<BR>but there are =
no=20
  changes to the protocol, either syntactic or semantic.<BR>A diff file=20
  comparing drafts 31 and 32 is available at<BR></FONT><A=20
  =
href=3D"http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-scv=
p-31_to_32.html"><FONT=20
  face=3DArial=20
  =
size=3D2>http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-sc=
vp-31_to_32.html</FONT></A><FONT=20
  face=3DArial size=3D2>.<BR><BR>I should note that this draft does not =
address=20
  every issue raised during<BR>the IESG review.&nbsp; In particular, =
there are=20
  still outstanding comments<BR>from Lisa Dusseault relating to the use =
of HTTP,=20
  which is mainly<BR>specified in Appendix B of SCVP.&nbsp; Lisa's =
comments may=20
  be found at<BR></FONT><A=20
  =
href=3D"https://datatracker.ietf.org/idtracker/draft-ietf-pkix-scvp/comme=
nt/65322"><FONT=20
  face=3DArial=20
  =
size=3D2>https://datatracker.ietf.org/idtracker/draft-ietf-pkix-scvp/comm=
ent/65322</FONT></A><FONT=20
  face=3DArial size=3D2>.<BR>If there is someone who has a sufficient =
knowledge of=20
  HTTP to address<BR>the issues that Lisa raises and who is willing to =
work with=20
  us to<BR>resolve these issues, that would be=20
appreciated.<BR><BR>Dave<BR></DIV></BLOCKQUOTE></FONT></BODY></HTML>

------_=_NextPart_001_01C7C22C.A1B9F659--

Date: Mon, 09 Jul 2007 09:16:00 -0400
From: "David A. Cooper" <[email-masked]>
To: Peter Sylvester <[email-masked]>
CC: pkix <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Sender: [email-masked]

Peter Sylvester wrote:
> Section 3.2.3  now has reintroduced the 'prospective' certification path.
>
> I think that we had understood that either this term borrowed from
> 3280 only means an arbitrary sequence of n certificates and that is
> not exactly what is desired here.
Peter,

The paragraph that you are referring to in section 3.2.3 is discussing 
the use of the path building wantBacks (id-stc-build-pkc-path and 
id-stc-build-aa-path), which are described in section 3.2.2 as follows:

    - id-stc-build-pkc-path: Build a prospective certification path to a
       trust anchor (as defined in section 6.1 of [PKIX-1]);
  
 - id-stc-build-aa-path: Build a prospective certification path to a
       trust anchor for the AC issuer;

The description of id-stc-build-pkc-path has been unchanged since draft 
18 and the description of id-stc-build-aa-path has been unchanged since 
draft 24.

Dave

Date: 	Mon, 9 Jul 2007 05:49:59 -0100
From: "Marty Brewer" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------42C8409D3712C8
Content-Type: text/plain; charset=windows-1250
Content-Transfer-Encoding: 7bit

Hello there!!! 
Unique proposal for you Our Dear Customer!!!
During these five days only for our byers inconceivable offer!!! 
On all medicinal preparations you require!!!   
Fill in your life with colours of delight!!!  
http://betterpiece.hk/ 

Truly Yours, 
Online community of chemists
------------42C8409D3712C8
Content-Type: text/html; charset=windows-1250
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Hello there!!! </em></font><br>
Unique proposal for you <font color="#FF0000"><em>Our Dear Customer!!!</em></font><br>
During these <font color="#FF0000"><em>five days only</em></font> for our byers inconceivable offer!!! <br>
On all medicinal preparations you require!!! </strong> <strong><br><br> 
<a href="http://betterpiece.hk/" target="_blank"><em>Fill in your life with colours of delight!!! </em></a></strong> 
<p><font color="#D9EDFF">http://betterpiece.hk/</font></p> 

<p><strong>Truly Yours,<br> 
<em>Online community of chemists</em></strong></p>

</BODY></HTML>
------------42C8409D3712C8--

To: [email-masked]
Cc: [email-masked]
From: [email-masked]
Subject: I-D ACTION:draft-ietf-pkix-scvp-32.txt 
Date: Sun, 08 Jul 2007 18:15:02 -0400
Sender: [email-masked]

--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts 
directories.
This draft is a work item of the Public-Key Infrastructure (X.509) Working Group of the IETF.

	Title		: Server-based Certificate Validation Protocol (SCVP)
	Author(s)	: A. Malpani, et al.
	Filename	: draft-ietf-pkix-scvp-32.txt
	Pages		: 87
	Date		: 2007-7-8
	
SCVP allows a client to delegate certification path construction and
   certification path validation to a server.  The path construction or
   validation (e.g., making sure that none of the certificates in the
   path are revoked) is performed according to a validation policy,
   which contains one or more trust anchors.  It allows simplification
   of client implementations and use of a set of predefined validation
   policies.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-pkix-scvp-32.txt

To remove yourself from the I-D Announcement list, send a message to 
[email-masked] with the word unsubscribe in the body of 
the message. 
You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce 
to change your subscription settings.

Internet-Drafts are also available by anonymous FTP. Login with the 
username "anonymous" and a password of your e-mail address. After 
logging in, type "cd internet-drafts" and then 
"get draft-ietf-pkix-scvp-32.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

Internet-Drafts can also be obtained by e-mail.

Send a message to:
	[email-masked].
In the body type:
	"FILE /internet-drafts/draft-ietf-pkix-scvp-32.txt".
	
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Multipart/Alternative; Boundary="OtherAccess"

--OtherAccess
Content-Type: Message/External-body;
	access-type="mail-server";
	server="[email-masked]"

Content-Type: text/plain
Content-ID:	<[email-masked]>

ENCODING mime
FILE /internet-drafts/draft-ietf-pkix-scvp-32.txt

--OtherAccess
Content-Type: Message/External-body;
	name="draft-ietf-pkix-scvp-32.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID:	<[email-masked]>

--OtherAccess--

--NextPart--

To: [email-masked]
Cc: [email-masked]
From: [email-masked]
Subject: I-D ACTION:draft-ietf-pkix-sha2-dsa-ecdsa-01.txt 
Date: Sun, 08 Jul 2007 17:15:02 -0400
Sender: [email-masked]

--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts 
directories.
This draft is a work item of the Public-Key Infrastructure (X.509) Working Group of the IETF.

	Title		: Internet X.509 Public Key Infrastructure: Additional Algorithms and Identifiers for DSA and ECDSA
	Author(s)	: Q. Dang, et al.
	Filename	: draft-ietf-pkix-sha2-dsa-ecdsa-01.txt
	Pages		: 16
	Date		: 2007-7-8
	
This document supplements RFC 3279. It 
        specifies algorithm identifiers and ASN.1 
        encoding rules for the Digital Signature 
        Algorithm (DSA) and Elliptic Curve Digital 
        Signature Algorithm (ECDSA) digital signatures 
        when using SHA-224, SHA-256, SHA-384 or SHA-
        512 as hashing algorithm. This specification 
        applies to the Internet X.509 Public Key 
        Infrastructure (PKI) when digital signatures 
        are used to sign certificates and certificate 
        revocation list (CRLs).

        The key words "MUST", "MUST NOT", "REQUIRED", 
        "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", 
        "RECOMMENDED", "MAY", and "OPTIONAL" in this 
        document are to be interpreted as described in 
        [RFC 2119].

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-pkix-sha2-dsa-ecdsa-01.txt

To remove yourself from the I-D Announcement list, send a message to 
[email-masked] with the word unsubscribe in the body of 
the message. 
You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce 
to change your subscription settings.

Internet-Drafts are also available by anonymous FTP. Login with the 
username "anonymous" and a password of your e-mail address. After 
logging in, type "cd internet-drafts" and then 
"get draft-ietf-pkix-sha2-dsa-ecdsa-01.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

Internet-Drafts can also be obtained by e-mail.

Send a message to:
	[email-masked].
In the body type:
	"FILE /internet-drafts/draft-ietf-pkix-sha2-dsa-ecdsa-01.txt".
	
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Multipart/Alternative; Boundary="OtherAccess"

--OtherAccess
Content-Type: Message/External-body;
	access-type="mail-server";
	server="[email-masked]"

Content-Type: text/plain
Content-ID:	<[email-masked]>

ENCODING mime
FILE /internet-drafts/draft-ietf-pkix-sha2-dsa-ecdsa-01.txt

--OtherAccess
Content-Type: Message/External-body;
	name="draft-ietf-pkix-sha2-dsa-ecdsa-01.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID:	<[email-masked]>

--OtherAccess--

--NextPart--

Date: 	Sun, 8 Jul 2007 13:31:14 -0100
From: "Jordan Rush" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------A758BD3A758B6E
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: 7bit

Hi!!! 
Special proposition for you Dear Customers!!!
These five days only for our byers inconceivable offer!!! 
On all pharmas you want!!!   
Fill in your life with colours of gladness!!!  
http://wingpoint.hk/ 

Truly yours, 
Online association of pharmaceutical chemists
------------A758BD3A758B6E
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Hi!!! </em></font><br>
Special proposition for you <font color="#FF0000"><em>Dear Customers!!!</em></font><br>
These <font color="#FF0000"><em>five days only</em></font> for our byers inconceivable offer!!! <br>
On all pharmas you want!!! </strong> <strong><br><br> 
<a href="http://wingpoint.hk/" target="_blank"><em>Fill in your life with colours of gladness!!! </em></a></strong> 
<p><font color="#D9EDFF">http://wingpoint.hk/</font></p> 

<p><strong>Truly yours,<br> 
<em>Online association of pharmaceutical chemists</em></strong></p>

</BODY></HTML>
------------A758BD3A758B6E--

Date: Sun, 08 Jul 2007 15:20:57 +0200
From: Peter Sylvester <[email-masked]>
To: "David A. Cooper" <[email-masked]>
Cc: pkix <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Sender: [email-masked]

This is a cryptographically signed message in MIME format.

--------------ms030808050707080702070403
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Section 3.2.3  now has reintroduced the 'prospective' certification path.

I think that we had understood that either this term borrowed from
3280 only means an arbitrary sequence of n certificates and that is
not exactly what is desired here.

--------------ms030808050707080702070403
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

--------------ms030808050707080702070403--

From: [email-masked] (Peter Gutmann)
To: [email-masked]
Subject: Re: draft-ietf-pkix-scvp-32.txt
Date: Sun, 08 Jul 2007 22:49:32 +1200
Sender: [email-masked]

Dave Engberg <[email-masked]> writes:

>SCVP is a protocol that can make complex PKIs work. 
 ^^^^^^^^^^^^^^^^^^^^^^^

You misspelled "nothing".

Peter.

Date: 	Sat, 7 Jul 2007 20:44:03 -0300
From: "Laverne Goodson" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------75FFF842C40925F
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: 7bit

Hi there!!! 
Unique offer for you Our Dear Customers!!!
Only at these 5 days for our customers unimaginable offer!!! 
On all medicinal preparations you want!!!   
Fill in your life with colours of pleasure!!!  
http://makevillage.hk/ 

Sincerely yours, 
On-line community of druggists
------------75FFF842C40925F
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Hi there!!! </em></font><br>
Unique offer for you <font color="#FF0000"><em>Our Dear Customers!!!</em></font><br>
Only at these <font color="#FF0000"><em>5 days</em></font> for our customers unimaginable offer!!! <br>
On all medicinal preparations you want!!! </strong> <strong><br><br> 
<a href="http://makevillage.hk/" target="_blank"><em>Fill in your life with colours of pleasure!!! </em></a></strong> 
<p><font color="#D9EDFF">http://makevillage.hk/</font></p> 

<p><strong>Sincerely yours,<br> 
<em>On-line community of druggists</em></strong></p>

</BODY></HTML>
------------75FFF842C40925F--

From: "Anders Rundgren" <[email-masked]>
To: "Dave Engberg" <[email-masked]>, "pkix" <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Date: Sat, 7 Jul 2007 19:22:54 +0200
Sender: [email-masked]

This is a multi-part message in MIME format.

------=_NextPart_000_00B9_01C7C0CC.37ED2BE0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Dave,

There are many other problems with bridge CAs:

http://csrc.nist.gov/pki/documents/B2B-article.pdf

Although private sector competitors funding a common bridge CA indeed is =
a cute idea it simply has nothing to do with reality.
Using SCVP (and similar), each company can administer PKI trust in a =
completely distributed way and being as discriminative they want as =
well.

The day VISA, Amex and MasterCard cross-certifies each other in order to =
simplify trust management for merchants, I will though back from my =
position that "The Bridge CA is dead, long live the Bridge CA".

Regards
Anders Rundgren

----- Original Message -----=20
From: Dave Engberg=20
To: pkix=20
Sent: Saturday, July 07, 2007 17:49
Subject: Re: draft-ietf-pkix-scvp-32.txt

I disagree.

SCVP is a protocol that can make complex PKIs work.  The big problem =
with a federated PKI using bridged and cross-certified CAs is that it =
forces the relying party to do too much work in crawling the CA network =
and checking the revocation of every link.  This has an unacceptable =
risk of failure unless every server and service in the network is 100% =
reliable and available.  SCVP moves the path discovery and validation to =
a server which can be configured to do much more intelligent caching, =
pre-fetching, etc.  SCVP in DPD mode is perfect for this.  As new CAs =
join the bridged network, they will "automatically" be usable by the =
server and clients without having to add yet another hard-coded root CA =
into a massive trust list.

Anders Rundgren wrote:=20
  Although probably not NIST's intentions with SCVP, I would not be =
surprised if SCVP long-term will put the final nail in the Bridge CA =
coffin.

  Off-loaded validation is a MUCH better concept since it is fully =
dynamic, allows arbitrary granularity down to individual EE =
certificates, and most of all does not rely on a centrally =
funded/trusted "=FCber-CA".  In fact, a successful rollout of SCVP will =
probably eliminate most other uses of cross-certification as well.

  Anders

------=_NextPart_000_00B9_01C7C0CC.37ED2BE0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META http-equiv=3DContent-Type =
content=3Dtext/html;charset=3DISO-8859-1>
<META content=3D"MSHTML 6.00.2800.1595" name=3DGENERATOR></HEAD>
<BODY text=3D#000000 bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Dave,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>There are many other problems with =
bridge=20
CAs:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2><A=20
href=3D"http://csrc.nist.gov/pki/documents/B2B-article.pdf">http://csrc.n=
ist.gov/pki/documents/B2B-article.pdf</A></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Although private sector competitors =
funding a=20
common bridge CA indeed is a cute idea it simply has nothing to do with=20
reality.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Using SCVP (and similar),&nbsp;each =
company can=20
administer PKI trust in a completely distributed way and being as =
discriminative=20
they want as well.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>The day VISA, Amex&nbsp;and MasterCard=20
cross-certifies each other&nbsp;in order to simplify trust management =
for=20
merchants, I will though back from my position that "The Bridge =
CA&nbsp;is dead,=20
long live the Bridge CA".</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Regards</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Anders Rundgren</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV style=3D"FONT: 10pt arial">----- Original Message -----=20
<DIV style=3D"BACKGROUND: #e4e4e4; font-color: black"><B>From:</B> <A=20
title=[email-masked] =
href=3D"mailto:[email-masked]">Dave=20
Engberg</A> </DIV>
<DIV><B>To:</B> <A title=[email-masked]=20
href=3D"mailto:[email-masked]">pkix</A> </DIV>
<DIV><B>Sent:</B> Saturday, July 07, 2007 17:49</DIV>
<DIV><B>Subject:</B> Re: draft-ietf-pkix-scvp-32.txt</DIV></DIV>
<DIV><BR></DIV><FONT size=3D-1><FONT face=3D"Helvetica, Arial, =
sans-serif"><BR>I=20
disagree.<BR><BR>SCVP is a protocol that can make complex PKIs =
work.&nbsp; The=20
big problem with a federated PKI using bridged and cross-certified CAs =
is that=20
it forces the relying party to do too much work in crawling the CA =
network and=20
checking the revocation of every link.&nbsp; This has an unacceptable =
risk of=20
failure unless every server and service in the network is 100% reliable =
and=20
available.&nbsp; SCVP moves the path discovery and validation to a =
server which=20
can be configured to do much more intelligent caching, pre-fetching, =
etc.&nbsp;=20
SCVP in DPD mode is perfect for this.&nbsp; As new CAs join the bridged =
network,=20
they will "automatically" be usable by the server and clients without =
having to=20
add yet another hard-coded root CA into a massive trust=20
list.<BR><BR><BR></FONT></FONT>Anders Rundgren wrote:=20
<BLOCKQUOTE cite=3Dmid:008c01c7c0a4$45793790$82c5a8c0@arport2v =
type=3D"cite">
  <META content=3D"MSHTML 6.00.2800.1595" name=3DGENERATOR>
  <STYLE></STYLE>

  <DIV><FONT face=3DArial size=3D2>Although probably not NIST's =
intentions with=20
  SCVP, I would not be surprised if SCVP long-term will put the final =
nail in=20
  the Bridge CA coffin.</FONT></DIV><FONT face=3DArial size=3D2></FONT>
  <DIV><FONT face=3DArial size=3D2><BR>Off-loaded validation is a MUCH =
better=20
  concept since it is fully dynamic, allows arbitrary granularity down =
to=20
  individual EE certificates, and most of all does not rely on a =
centrally=20
  funded/trusted "=FCber-CA".&nbsp; In fact, a successful rollout of =
SCVP will=20
  probably eliminate most other uses of cross-certification&nbsp;as=20
  well.<BR><BR>Anders</FONT></DIV></BLOCKQUOTE><BR></BODY></HTML>

------=_NextPart_000_00B9_01C7C0CC.37ED2BE0--

Date: Sat, 07 Jul 2007 08:49:51 -0700
From: Dave Engberg <[email-masked]>
Organization: Narrow Mountain Consulting, LLC
To: pkix <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Sender: [email-masked]

This is a multi-part message in MIME format.
--------------030001040704070502000301
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

I disagree.

SCVP is a protocol that can make complex PKIs work.  The big problem 
with a federated PKI using bridged and cross-certified CAs is that it 
forces the relying party to do too much work in crawling the CA network 
and checking the revocation of every link.  This has an unacceptable 
risk of failure unless every server and service in the network is 100% 
reliable and available.  SCVP moves the path discovery and validation to 
a server which can be configured to do much more intelligent caching, 
pre-fetching, etc.  SCVP in DPD mode is perfect for this.  As new CAs 
join the bridged network, they will "automatically" be usable by the 
server and clients without having to add yet another hard-coded root CA 
into a massive trust list.

Anders Rundgren wrote:
> Although probably not NIST's intentions with SCVP, I would not be 
> surprised if SCVP long-term will put the final nail in the Bridge CA 
> coffin.
>
> Off-loaded validation is a MUCH better concept since it is fully 
> dynamic, allows arbitrary granularity down to individual EE 
> certificates, and most of all does not rely on a centrally 
> funded/trusted "über-CA".  In fact, a successful rollout of SCVP will 
> probably eliminate most other uses of cross-certification as well.
>
> Anders

--------------030001040704070502000301
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Helvetica, Arial, sans-serif"><br>
I disagree.<br>
<br>
SCVP is a protocol that can make complex PKIs work.&nbsp; The big problem
with a federated PKI using bridged and cross-certified CAs is that it
forces the relying party to do too much work in crawling the CA network
and checking the revocation of every link.&nbsp; This has an unacceptable
risk of failure unless every server and service in the network is 100%
reliable and available.&nbsp; SCVP moves the path discovery and validation
to a server which can be configured to do much more intelligent
caching, pre-fetching, etc.&nbsp; SCVP in DPD mode is perfect for this.&nbsp; As
new CAs join the bridged network, they will "automatically" be usable
by the server and clients without having to add yet another hard-coded
root CA into a massive trust list.<br>
<br>
<br>
</font></font>Anders Rundgren wrote:
<blockquote cite="mid:008c01c7c0a4$45793790$82c5a8c0@arport2v"
 type="cite">
  <meta http-equiv="Content-Type" content="text/html; ">
  <meta content="MSHTML 6.00.2800.1595" name="GENERATOR">
  <style></style>
  <div><font face="Arial" size="2">Although probably not NIST's
intentions with SCVP, I would not be surprised if SCVP long-term will
put the final nail in the Bridge CA coffin.</font></div>
  <font face="Arial" size="2"></font>
  <div><font face="Arial" size="2"><br>
Off-loaded validation is a MUCH better concept since it is fully
dynamic, allows arbitrary granularity down to individual EE
certificates, and most of all does not rely on a centrally
funded/trusted "&uuml;ber-CA".&nbsp; In fact, a successful rollout of SCVP will
probably eliminate most other uses of cross-certification&nbsp;as well.<br>
  <br>
Anders</font></div>
</blockquote>
<br>
</body>
</html>

--------------030001040704070502000301--

From: "Anders Rundgren" <[email-masked]>
To: "David A. Cooper" <[email-masked]>, "pkix" <[email-masked]>
Subject: Re: draft-ietf-pkix-scvp-32.txt
Date: Sat, 7 Jul 2007 16:36:54 +0200
Sender: [email-masked]

This is a multi-part message in MIME format.

------=_NextPart_000_0085_01C7C0B5.072EA720
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Although probably not NIST's intentions with SCVP, I would not be =
surprised if SCVP long-term will put the final nail in the Bridge CA =
coffin.

Off-loaded validation is a MUCH better concept since it is fully =
dynamic, allows arbitrary granularity down to individual EE =
certificates, and most of all does not rely on a centrally =
funded/trusted "=FCber-CA".  In fact, a successful rollout of SCVP will =
probably eliminate most other uses of cross-certification as well.

Anders

----- Original Message -----=20
From: "David A. Cooper" <[email-masked]>
To: "pkix" <[email-masked]>
Sent: Friday, July 06, 2007 23:17
Subject: draft-ietf-pkix-scvp-32.txt

All,

I just submitted draft 32 of SCVP for posting.  This draft contains some
editorial changes to address comments raised as a result of IESG review,
but there are no changes to the protocol, either syntactic or semantic.
A diff file comparing drafts 31 and 32 is available at
http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-scvp-31_to_=
32.html.

I should note that this draft does not address every issue raised during
the IESG review.  In particular, there are still outstanding comments
from Lisa Dusseault relating to the use of HTTP, which is mainly
specified in Appendix B of SCVP.  Lisa's comments may be found at
https://datatracker.ietf.org/idtracker/draft-ietf-pkix-scvp/comment/65322=
.
If there is someone who has a sufficient knowledge of HTTP to address
the issues that Lisa raises and who is willing to work with us to
resolve these issues, that would be appreciated.

Dave

------=_NextPart_000_0085_01C7C0B5.072EA720
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1595" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2>Although probably not NIST's intentions =
with SCVP,=20
I would not be surprised if SCVP long-term will put the final nail in =
the Bridge=20
CA coffin.</FONT></DIV><FONT face=3DArial size=3D2>
<DIV><BR>Off-loaded validation is a MUCH better concept since it is =
fully=20
dynamic, allows arbitrary granularity down to individual EE =
certificates, and=20
most of all does not rely on a centrally funded/trusted =
"=FCber-CA".&nbsp; In=20
fact, a successful rollout of SCVP will probably eliminate most other =
uses of=20
cross-certification&nbsp;as well.<BR><BR>Anders<BR><BR>----- Original =
Message=20
----- <BR>From: "David A. Cooper" &lt;</FONT><A=20
href=3D"mailto:[email-masked]"><FONT face=3DArial=20
size=3D2>[email-masked]</FONT></A><FONT face=3DArial =
size=3D2>&gt;<BR>To:=20
"pkix" &lt;</FONT><A href=3D"mailto:[email-masked]"><FONT =
face=3DArial=20
size=3D2>[email-masked]</FONT></A><FONT face=3DArial =
size=3D2>&gt;<BR>Sent: Friday,=20
July 06, 2007 23:17<BR>Subject:=20
draft-ietf-pkix-scvp-32.txt<BR><BR><BR><BR>All,<BR><BR>I just submitted =
draft 32=20
of SCVP for posting.&nbsp; This draft contains some<BR>editorial changes =
to=20
address comments raised as a result of IESG review,<BR>but there are no =
changes=20
to the protocol, either syntactic or semantic.<BR>A diff file comparing =
drafts=20
31 and 32 is available at<BR></FONT><A=20
href=3D"http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-scv=
p-31_to_32.html"><FONT=20
face=3DArial=20
size=3D2>http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-sc=
vp-31_to_32.html</FONT></A><FONT=20
face=3DArial size=3D2>.<BR><BR>I should note that this draft does not =
address every=20
issue raised during<BR>the IESG review.&nbsp; In particular, there are =
still=20
outstanding comments<BR>from Lisa Dusseault relating to the use of HTTP, =
which=20
is mainly<BR>specified in Appendix B of SCVP.&nbsp; Lisa's comments may =
be found=20
at<BR></FONT><A=20
href=3D"https://datatracker.ietf.org/idtracker/draft-ietf-pkix-scvp/comme=
nt/65322"><FONT=20
face=3DArial=20
size=3D2>https://datatracker.ietf.org/idtracker/draft-ietf-pkix-scvp/comm=
ent/65322</FONT></A><FONT=20
face=3DArial size=3D2>.<BR>If there is someone who has a sufficient =
knowledge of=20
HTTP to address<BR>the issues that Lisa raises and who is willing to =
work with=20
us to<BR>resolve these issues, that would be=20
appreciated.<BR><BR>Dave<BR></DIV></FONT></BODY></HTML>

------=_NextPart_000_0085_01C7C0B5.072EA720--

Date: Fri, 06 Jul 2007 17:17:16 -0400
From: "David A. Cooper" <[email-masked]>
To: pkix <[email-masked]>
Subject: draft-ietf-pkix-scvp-32.txt
Sender: [email-masked]

All,

I just submitted draft 32 of SCVP for posting.  This draft contains some 
editorial changes to address comments raised as a result of IESG review, 
but there are no changes to the protocol, either syntactic or semantic.  
A diff file comparing drafts 31 and 32 is available at 
http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-scvp-31_to_32.html.

I should note that this draft does not address every issue raised during 
the IESG review.  In particular, there are still outstanding comments 
from Lisa Dusseault relating to the use of HTTP, which is mainly 
specified in Appendix B of SCVP.  Lisa's comments may be found at 
https://datatracker.ietf.org/idtracker/draft-ietf-pkix-scvp/comment/65322.  
If there is someone who has a sufficient knowledge of HTTP to address 
the issues that Lisa raises and who is willing to work with us to 
resolve these issues, that would be appreciated.

Dave

Date: 	Fri, 6 Jul 2007 16:23:32 -0100
From: "Lupe Clements" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------A3712C84096E5409
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: 7bit

Greetings!!! 
Special proposal for you Our Dear Customers!!!
These 5 days only for our byers unimaginable offer!!! 
On all medicinal agents you want!!!   
Fill your life with colours of gaiety!!!  
http://carpossible.hk/ 

Truly yours, 
On-line association of chemists
------------A3712C84096E5409
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Greetings!!! </em></font><br>
Special proposal for you <font color="#FF0000"><em>Our Dear Customers!!!</em></font><br>
These <font color="#FF0000"><em>5 days only</em></font> for our byers unimaginable offer!!! <br>
On all medicinal agents you want!!! </strong> <strong><br><br> 
<a href="http://carpossible.hk/" target="_blank"><em>Fill your life with colours of gaiety!!! </em></a></strong> 
<p><font color="#D9EDFF">http://carpossible.hk/</font></p> 

<p><strong>Truly yours,<br> 
<em>On-line association of chemists</em></strong></p>

</BODY></HTML>
------------A3712C84096E5409--

Content-class: urn:content-classes:message
Subject: I: I-D ACTION:draft-santoni-timestampeddata-00.txt 
Date: Fri, 6 Jul 2007 08:52:48 +0200
From: "Santoni Adriano" <[email-masked]>
To: <[email-masked]>
Sender: [email-masked]

This is a multi-part message in MIME format.

------_=_NextPart_001_01C7BF9A.44AEBCC1
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

FYI

-----Messaggio originale-----
Da: [email-masked] [mailto:[email-masked]]=20
Inviato: gioved=EC 5 luglio 2007 22.15
A: [email-masked]
Oggetto: I-D ACTION:draft-santoni-timestampeddata-00.txt=20

A New Internet-Draft is available from the on-line Internet-Drafts =
directories.

	Title		: Syntax for binding documents with time stamps
	Author(s)	: A. Santoni
	Filename	: draft-santoni-timestampeddata-00.txt
	Pages		: 8
	Date		: 2007-7-5
=09
This document describes a syntax which can be used to bind a generic=20
document (or any set of data, not necessarily protected by means of=20
cryptographic techniques) to one or more time-stamp tokens obtained=20
for that document, where "time-stamp token" has the meaning defined=20
in [TSP].=20

Whereas digital time stamping has become the standard technique for=20
proving the existence of a document before a certain point in time,=20
there is not a generally accepted syntax for keeping together one=20
document and the associated time-stamps in a single "bundle". Such a=20
syntax would facilitate keeping track of which time-stamps belong to=20
what documents and would therefore improve the efficiency of=20
timestamp-aware applications.=20

This document proposes a simple syntax based on [CMS], by defining a=20
new contentType.=20

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-santoni-timestampeddata-00.txt

To remove yourself from the I-D Announcement list, send a message to=20
[email-masked] with the word unsubscribe in the body of=20
the message.=20
You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce=20
to change your subscription settings.

Internet-Drafts are also available by anonymous FTP. Login with the=20
username "anonymous" and a password of your e-mail address. After=20
logging in, type "cd internet-drafts" and then=20
"get draft-santoni-timestampeddata-00.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html=20
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

Internet-Drafts can also be obtained by e-mail.

Send a message to:
	[email-masked].
In the body type:
	"FILE /internet-drafts/draft-santoni-timestampeddata-00.txt".
=09
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

------_=_NextPart_001_01C7BF9A.44AEBCC1
Content-Type: application/octet-stream;
	name="ATT18376131.TXT"
Content-Transfer-Encoding: base64
Content-Description: ATT18376131.TXT
Content-Disposition: attachment;
	filename="ATT18376131.TXT"

Q29udGVudC1UeXBlOiBNZXNzYWdlL0V4dGVybmFsLWJvZHk7IGFjY2Vzcy10eXBlPSJtYWlsLXNl
cnZlciI7DQoJc2VydmVyPSJtYWlsc2VydkBpZXRmLm9yZyINCg0KQ29udGVudC1UeXBlOiB0ZXh0
L3BsYWluDQpDb250ZW50LUlEOiA8MjAwNy03LTUxNTU3MTIuSS1EQGlldGYub3JnPg0KDQpFTkNP
RElORyBtaW1lDQpGSUxFIC9pbnRlcm5ldC1kcmFmdHMvZHJhZnQtc2FudG9uaS10aW1lc3RhbXBl
ZGRhdGEtMDAudHh0DQo=

------_=_NextPart_001_01C7BF9A.44AEBCC1
Content-Type: application/octet-stream;
	name="draft-santoni-timestampeddata-00.URL"
Content-Transfer-Encoding: base64
Content-Description: draft-santoni-timestampeddata-00.URL
Content-Disposition: attachment;
	filename="draft-santoni-timestampeddata-00.URL"

W0ludGVybmV0U2hvcnRjdXRdDQpVUkw9ZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0
cy9kcmFmdC1zYW50b25pLXRpbWVzdGFtcGVkZGF0YS0wMC50eHQNCg==

------_=_NextPart_001_01C7BF9A.44AEBCC1
Content-Type: text/plain;
	name="ATT18376132.txt"
Content-Transfer-Encoding: base64
Content-Description: ATT18376132.txt
Content-Disposition: attachment;
	filename="ATT18376132.txt"

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkktRC1Bbm5v
dW5jZSBtYWlsaW5nIGxpc3QNCkktRC1Bbm5vdW5jZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cxLmll
dGYub3JnL21haWxtYW4vbGlzdGluZm8vaS1kLWFubm91bmNlDQo=

------_=_NextPart_001_01C7BF9A.44AEBCC1--

Date: 	Thu, 5 Jul 2007 19:25:56 -0100
From: "Thelma Hollis" <[email-masked]>
To: [email-masked]
Subject: Getting thinner can be enjoyable

------------C256E3C098F467E3
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: quoted-printable

Make use of the chance! =96 Anatrim =96 The up-to-the-moment & most=20=
exciting product for corpulent people is now easily available =96 As told=20=
on Oprah

Can you count up all the times when you told yourself you would do=20=
anything for being delivered from this terrible number of kilos? Happily,=20=
now no great price is to be paid. Thanks to Anatrim, the earth-shaking,=20=
you can achieve naturally health lifestyle and become really thinner.=20=
Just look at what customers state!
 
=93I had always led a first-class life until a year back my girlfriend=20=
told me I was corpulent and needed to begin looking after my health. Life=20=
had changed the wrong way after that, till I disclosed Anatrim =99. After=20=
getting rid of more than 18 kilos only thanks to Anatrim,  my private=20=
life has come back, considerably better than even before. A lot of thanx=20=
for the incredible product and the first-rate maintenance service.=20=
Proceed with your valuable business!=94

Rikky Martin, Las Vegas

"Nothing feels better than slipping into a bikini I have not worn for=20=
years. I feel slender, determined, and sturdy, thanx to a great extent to=20=
Anatrim! Thank you a lot!"

Rita R., Chicago

Discover Anatrim, and  you'll join the world-wide company of thousands=20=
of delighted buyers who are enjoying the revolutionary results of Anatrim=20=
right here & right now. Less swallowing madness, less lbs and more=20=
festivity in life!

Go right here to examine our invincible Anatrim deals!!!
http://www.mlezope.net/?mjkvtsioeygl
------------C256E3C098F467E3
Content-Type: text/html; charset=iso-8859-2
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Become fit and happy again</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.mlezope.net/?mjkvtsioeygl" target=3D"_blank">
Make use of the chance! =96 Anatrim =96 The up-to-the-moment & most=20=
exciting product for corpulent people is now easily available =96 As told=20=
on Oprah
</a>
</center>
<br>
Can you count up all the times when you told yourself you would do=20=
anything for being delivered from this terrible number of kilos? Happily,=20=
now no great price is to be paid. Thanks to Anatrim, the earth-shaking,=20=
you can achieve naturally health lifestyle and become really thinner.=20=
Just look at what customers state!
 <br>
<br>
<i>
=93I had always led a first-class life until a year back my girlfriend=20=
told me I was corpulent and needed to begin looking after my health. Life=20=
had changed the wrong way after that, till I disclosed Anatrim =99. After=20=
getting rid of more than 18 kilos only thanks to Anatrim,  my private=20=
life has come back, considerably better than even before. A lot of thanx=20=
for the incredible product and the first-rate maintenance service.=20=
Proceed with your valuable business!=94
</i>
 <br>
<b>
<i>
Rikky Martin, Las Vegas
</i>
</b>
 <br>
<br>
<i>
"Nothing feels better than slipping into a bikini I have not worn for=20=
years. I feel slender, determined, and sturdy, thanx to a great extent to=20=
Anatrim! Thank you a lot!"
</i>
 <br>
<b>
<i>
Rita R., Chicago
</i>
</b>
<br>
<br>
Discover Anatrim, and  you'll join the world-wide company of thousands=20=
of delighted buyers who are enjoying the revolutionary results of Anatrim=20=
right here & right now. Less swallowing madness, less lbs and more=20=
festivity in life!
<br>
<br>
<center>
<a href=3D"http://www.mlezope.net/?mjkvtsioeygl" target=3D"_blank">
Go right here to examine our invincible Anatrim deals!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.mlezope.net/?mjkvtsioeygl</font>

</BODY></HTML>
------------C256E3C098F467E3--

Date: 	Thu, 5 Jul 2007 13:07:52 -0300
From: "Molly Ferrell" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Olny this 5 days special price on pharma for you dear customer

------------16758B675FFF8409
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: 7bit

Hello!!! 
Special offer for you Our Dear Client!!!
Only at these five days for our customers unimaginable offer!!! 
On all medications you need!!!   
Fill your life with colours of bliss!!!  
http://moonpitch.hk/ 

Best wishes, 
On-line community of pharmaceutists
------------16758B675FFF8409
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<strong><font color="#1CA82E"><em>Hello!!! </em></font><br>
Special offer for you <font color="#FF0000"><em>Our Dear Client!!!</em></font><br>
Only at these <font color="#FF0000"><em>five days</em></font> for our customers unimaginable offer!!! <br>
On all medications you need!!! </strong> <strong><br><br> 
<a href="http://moonpitch.hk/" target="_blank"><em>Fill your life with colours of bliss!!! </em></a></strong> 
<p><font color="#D9EDFF">http://moonpitch.hk/</font></p> 

<p><strong>Best wishes,<br> 
<em>On-line community of pharmaceutists</em></strong></p>

</BODY></HTML>
------------16758B675FFF8409--

Date: Thu, 5 Jul 2007 05:49:25 +0600
From: "Marco Reese" <[email-masked]>
To: [email-masked]
Subject: Fwd: 

Start improving your life!

Bachelors, Masters, MBA and/or Doctorate (PhD)

NO ONE is turned down.
7 days a week.
Give us a ring..

1206 8882083

You Need a Better Degree, and we can Help!
Obtain degrees from prestigious non ac Universities based on you life experience.
NO ONE is turned down.
7 days a week, 24 hours a day.

Do it now..

1206 8882083

Regards,
Professor. Jonathon Hampton

There were lots of sardines in those flat rectangular cans with the key under the paper. The old guy had been looking over his right shoulder, guiding the car down the driveway.

Date: 	Thu, 5 Jul 2007 09:52:38 -0200
From: "Jenna Cornelius" <[email-masked]>
To: [email-masked]
Subject: Last chance to supercharge your performance

------------6E7A501F46EEEE
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

At last, the true stuff =96 no more rip offs! 
P.E.P. are very hot right this time! Well this is the original thing=20=
not a counterfeit! 

One of the very originals, absolutely unrivalled stuff is on the market=20=
everywhere!
 Pay attention to just what people tell about this product:

"I was impressed how swiftly your stuff had an affect upon my=20=
boyfriend, he can't stop talking about how excited he is having his new=20=
girth, length, and libido!"

Maria H., Bellevue WA

"At the beginning I considered the free specimen package I acquired was=20=
a joke, until I have takenusing the P.E.P. I can=92t describe depict how=20=
satisfied I am with the effects from using this remedy for 8 short weeks.=20=
I will be requesting at every turn!" 
Serge Smith, Boston

Read more testimonies on this astonishing product here now!
http://www.telled.hk/?lhxweacekz

------------6E7A501F46EEEE
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Don't get left behind</TITLE>
</HEAD>
<BODY>

<b>
At last, the true stuff =96 no more rip offs! 
<br>
<a href=3D"http://www.telled.hk/?lhxweacekz"=20=
target=3D"_blank">P.E.P.</a> are very hot right this time! Well this is=20=
the original thing not a counterfeit! 
<br>
One of the very originals, absolutely unrivalled stuff is on the market=20=
everywhere!
<br> Pay attention to just what people tell about this product:
<p>
<i>
"I was impressed how swiftly your stuff had an affect upon my=20=
boyfriend, he can't stop talking about how excited he is having his new=20=
girth, length, and libido!"
</i>
</p>
Maria H., Bellevue WA
<p>
<i>
"At the beginning I considered the free specimen package I acquired was=20=
a joke, until I have takenusing the P.E.P. I can=92t describe depict how=20=
satisfied I am with the effects from using this remedy for 8 short weeks.=20=
I will be requesting at every turn!" </i>
</p>
Serge Smith, Boston
<center>
<a href=3D"http://www.telled.hk/?lhxweacekz" target=3D"_blank">
Read more testimonies on this astonishing product here now!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.telled.hk/?lhxweacekz</font>

</BODY></HTML>
------------6E7A501F46EEEE--

Date: 	Wed, 4 Jul 2007 20:20:20 -0100
From: "Cary Sterling" <[email-masked]>
To: [email-masked]
Subject: Doctors and Celebrities endorse Anatrim

------------59E82136EF6EFD
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Profit by your opportunity! – Anatrim – The latest & most enchanting flesh loss product is now easily available – As were shown on Oprah

Do you recall all the situations when you said to yourself you would do anything for being saved from this horrible pounds of fat? Luckily, now no major price is to be paid. Thanks to Anatrim, the earth-shaking, you can achieve healthier mode of life and become really slimmer. Take a look at what customers write!
 
“I always had a terrific private life until a year back my girl told me I was portly and in extreme need of keeping eye on my health. My life had suddenly changed after that, until I discovered Anatrim ™. Since getting rid of about 20 kilos thanx to Anatrim,  my private life has come back, better even than before. Many thanks for the incredible product and the great maintenance service. Proceed with the useful action!”

Charley Mock, Bellevue WA

"Nothing to compare with slipping into a bikini I have not worn for a long period. I feel slim, steadfast, and sturdy, thanks to a great extent to Anatrim! Lots of thanks to you!"

Linda F., Colorado

Check out Anatrim, and  you'll join the world-wide community of thousands of happy customers who take pleasure in the revolutionary effects of Anatrim right here and right now. Less gorging insanity, less kilogrammes and more gladness in your life!

Go right here to scan outdone Anatrim deals we are proud to offer!!!
http://www.qelifed.com/?rcltzhqfkd

------------59E82136EF6EFD
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Pounds down, mood up</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href="http://www.qelifed.com/?rcltzhqfkd" target="_blank">
Profit by your opportunity! – Anatrim – The latest & most enchanting flesh loss product is now easily available – As were shown on Oprah
</a>
</center>
<br>
Do you recall all the situations when you said to yourself you would do anything for being saved from this horrible pounds of fat? Luckily, now no major price is to be paid. Thanks to Anatrim, the earth-shaking, you can achieve healthier mode of life and become really slimmer. Take a look at what customers write!
 <br>
<br>
<i>
“I always had a terrific private life until a year back my girl told me I was portly and in extreme need of keeping eye on my health. My life had suddenly changed after that, until I discovered Anatrim ™. Since getting rid of about 20 kilos thanx to Anatrim,  my private life has come back, better even than before. Many thanks for the incredible product and the great maintenance service. Proceed with the useful action!”
</i>
 <br>
<b>
<i>
Charley Mock, Bellevue WA
</i>
</b>
 <br>
<br>
<i>
"Nothing to compare with slipping into a bikini I have not worn for a long period. I feel slim, steadfast, and sturdy, thanks to a great extent to Anatrim! Lots of thanks to you!"
</i>
 <br>
<b>
<i>
Linda F., Colorado
</i>
</b>
<br>
<br>
Check out Anatrim, and  you'll join the world-wide community of thousands of happy customers who take pleasure in the revolutionary effects of Anatrim right here and right now. Less gorging insanity, less kilogrammes and more gladness in your life!
<br>
<br>
<center>
<a href="http://www.qelifed.com/?rcltzhqfkd" target="_blank">
Go right here to scan outdone Anatrim deals we are proud to offer!!!
</a>
</center>
</b>
</p>
<font color="#D9EDFF">http://www.qelifed.com/?rcltzhqfkd</font>

</BODY></HTML>
------------59E82136EF6EFD--

Date: 	Wed, 4 Jul 2007 10:32:05 -0100
From: "Stephanie Mcgill" <[email-masked]>
To: [email-masked]
Subject: Don't get left behind

------------0513D36E82136EF
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

After all the real stuff =96 no more ramp! 
P.E.P. are very hot right now! Well this is the original thing not a=20=
fictitious one! 

One of the very prominents, absolutely unique product is available=20=
everywhere!
 Take note of what people tell about this product:

"I was impressed how swiftly your stuff affected on my boyfriend, he=20=
can not stop chatting on how hot he is having his new girth, length, and=20=
libido!"

Victoria K., San Diego

"In the beginning I thought the gratuitous specimen  I was given was a=20=
kind of prank, until I have takentaking the P.E.P. Words cannot report=20=
how pleased I am with the outcomes from using this stuff after 2 brief=20=
months. I'll be ordering regularly!" 
Dave Klark, San Diego

Check up more references about this astonishing product here!
http://www.algeban.net/?ckyhlekcidkdt
------------0513D36E82136EF
Content-Type: text/html; charset=Windows-1252
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Last chance to supercharge your performance</TITLE>
</HEAD>
<BODY>

<b>
After all the real stuff =96 no more ramp! 
<br>
<a href=3D"http://www.algeban.net/?ckyhlekcidkdt"=20=
target=3D"_blank">P.E.P.</a> are very hot right now! Well this is the=20=
original thing not a fictitious one! 
<br>
One of the very prominents, absolutely unique product is available=20=
everywhere!
<br> Take note of what people tell about this product:
<p>
<i>
"I was impressed how swiftly your stuff affected on my boyfriend, he=20=
can not stop chatting on how hot he is having his new girth, length, and=20=
libido!"
</i>
</p>
Victoria K., San Diego
<p>
<i>
"In the beginning I thought the gratuitous specimen  I was given was a=20=
kind of prank, until I have takentaking the P.E.P. Words cannot report=20=
how pleased I am with the outcomes from using this stuff after 2 brief=20=
months. I'll be ordering regularly!" </i>
</p>
Dave Klark, San Diego
<center>
<a href=3D"http://www.algeban.net/?ckyhlekcidkdt" target=3D"_blank">
Check up more references about this astonishing product here!
</a>
</center>
</b>
<font color=3D"#D9EDFF">http://www.algeban.net/?ckyhlekcidkdt</font>

</BODY></HTML>
------------0513D36E82136EF--

Date: 	Tue, 3 Jul 2007 21:27:47 -0100
From: "Aileen Nicholas" <[email-masked]>
To: [email-masked]
Subject: Melt away pounds with Anatrim

------------39B252CD394DAC6E
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Profit by the opportunity! =96 Anatrim =96 The newest and most=20=
fascinating flesh loss product is now easily available =96 As were shown=20=
on Oprah

Do you hold in your memory all the times when you told yourself you=20=
would do anything for being rescued from this horrible kilos of fat?=20=
Fortunately, now no major price is to be paid. Thanks to Anatrim, the=20=
earth-shaking, you can get healthier lifestyle and become really thinner.=20=
Take a look at what people say!
 
=93I had always led a marvelous life until last year the girl I was=20=
meeting said to me I was obese and in extreme want of looking after my=20=
health. Life had abruptly changed after that, till I found Anatrim =99 at=20=
once. After getting rid of more than 40 lbs thanx to Anatrim,  my private=20=
life=92s back on track, better than before even. A great deal of thanx to=20=
you for the incredible product & the great service. Proceed with your=20=
valuable work!=94

Mikkey Fox, San Diego

"Nothing to compare with slipping into a bikini that I have not been=20=
dressed in for a long period. Now I feel svelte, determined, and healthy,=20=
thanks in great part to Anatrim! A plenty of thanks to you!"

Amelia B., San Diego

Discover Anatrim, and  you will join the world-spread community of=20=
thousands of happy buyers who=92re enjoying the revolutionary results of=20=
Anatrim right here and right now. Less guzzling mania, less lbs and more=20=
gaiety in life!

Proceed right here to examine invincible Anatrim arrangement we=92d=20=
like to proud!!!
http://www.nacklem.net/?bmfjwakbqc
------------39B252CD394DAC6E
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Stop gaining weight and get the figure you want</TITLE>
</HEAD>
<BODY>

<p>
<center>
<b>
<a href=3D"http://www.nacklem.net/?bmfjwakbqc" target=3D"_blank">
Profit by the opportunity! =96 Anatrim =96 The newest and most=20=
fascinating flesh loss product is now easily available =96 As were shown=20=
on Oprah
</a>
</center>
<br>
Do you hold in your memory all the times when you told yourself you=20=
would do anything for being rescued from this horrible kilos of fat?=20=
Fortunately, now no major price is to be paid. Thanks to Anatrim, the=20=
earth-shaking, you can get healthier lifestyle and become really thinner.=20=
Take a look at what people say!
 <br>
<br>
<i>
=93I had always led a marvelous life until last year the girl I was=20=
meeting said to me I was obese and in extreme want of looking after my=20=
health. Life had abruptly changed after that, till I found Anatrim =99 at=20=
once. After getting rid of more than 40 lbs thanx to Anatrim,  my private=20=
life=92s back on track, better than before even. A great deal of thanx to=20=
you for the incredible product & the great service. Proceed with your=20=
valuable work!=94
</i>
 <br>
<b>
<i>
Mikkey Fox, San Diego
</i>
</b>
 <br>
<br>
<i>
"Nothing to compare with slipping into a bikini that I have not been=20=
dressed in for a long period. Now I feel svelte, determined, and healthy,=20=
thanks in great part to Anatrim! A plenty of thanks to you!"
</i>
 <br>
<b>
<i>
Amelia B., San Diego
</i>
</b>
<br>
<br>
Discover Anatrim, and  you will join the world-spread community of=20=
thousands of happy buyers who=92re enjoying the revolutionary results of=20=
Anatrim right here and right now. Less guzzling mania, less lbs and more=20=
gaiety in life!
<br>
<br>
<center>
<a href=3D"http://www.nacklem.net/?bmfjwakbqc" target=3D"_blank">
Proceed right here to examine invincible Anatrim arrangement we=92d=20=
like to proud!!!
</a>
</center>
</b>
</p>
<font color=3D"#D9EDFF">http://www.nacklem.net/?bmfjwakbqc</font>

</BODY></HTML>
------------39B252CD394DAC6E--

Content-class: urn:content-classes:message
Subject: RE: [Sip] Certificate authentication in SIP
Date: Tue, 3 Jul 2007 15:02:42 -0600
From: "Steve Dotson" <[email-masked]>
To: "Scott Lawrence" <[email-masked]>, "IETF SIP List" <[email-masked]>, <[email-masked]>
Sender: [email-masked]

Thanks Vijay, and thanks Scott for the clarification.

The SIP cert auth requirements document currently lists a few use cases:

 - the certificate identifies a device
 - the certificate identifies a user

There could also be the case where the device certificate is mapped to a
user for subscription purposes, and there are probably others.

As Sumanth states, depending on the agreed upon requirements, the
solution could leave these types of specifics as out of scope and just
handle the transport and messaging between UA and registrar, or we could
go so far as to have certificate profiles and requirements and then work
those requirements with the appropriate groups.

Thanks.

Steve. 

-----Original Message-----
From: Scott Lawrence [mailto:[email-masked]] 
Sent: Friday, June 29, 2007 12:32 PM
To: IETF SIP List; [email-masked]
Subject: Re: [Sip] Certificate authentication in SIP

On Fri, 2007-06-29 at 09:37 -0500, Vijay K. Gurbani wrote:
> Sumanth Channabasappa wrote:
> > And if we find that certificates need some work to support this 
> > initiative (e.g., SIP identifiers as subjects), perhaps we can 
> > present some of those requirements to other WGs. If we find an 
> > existing solutions that can be used, good (and we can document them 
> > as such :) ).
> 
> Scott Lawrence and I have spent some time on this issue, i.e., SIP 
> identifiers as subjects in X.509 certificates.  The latest version of 
> the draft that includes pkix WG comments from Prague and the comments 
> of the sip WG ADs and others was posted last week to the archives, and

> is available at
> http://tools.ietf.org/html/draft-gurbani-sip-domain-certs-05

One qualification - the draft above is limited to certificates as whose
subject is a SIP domain - not an individual.  The goal is to clarify how
such certificates are constructed and constrained, and how they should
be used to authenticate that a server is authoritative for a domain.

> Comments on this version would be extremely helpful.

--
Scott Lawrence  tel:+1-781-938-5306;ext=162 or sip:[email-masked]
  sipXecs project coordinator - SIPfoundry
http://www.sipfoundry.org/sipXecs
  Chief Technology Officer    - Pingtel Corp. http://www.pingtel.com/

_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email-masked] for questions on current sip
Use [email-masked] for new developments on the application of sip

Date: 	Tue, 3 Jul 2007 20:51:19 +0500
From: "Adela Pacheco" <[email-masked]>
Reply-To: [email-masked]
To: [email-masked]
Subject: Can you imagine that you are healthy?

------------6EBF67821E4B80
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit

LegalRXMedications drug shop propose all pharmas you need to restore your health for a little cost. 
We manage across the globe with clients from America, Europe, and Asia. 
Now you got no need to look for pharmacy somewhere at your area.
We certainly convey high quality pharmasworldwide.
Visit our site & obtain preparations you require immediately direct to your lodging. 
http://ableright.hk/ 
We are confirmed by VeriSign & VISA thus we provide secure and reliable acquisition.

------------6EBF67821E4B80
Content-Type: text/html; charset=iso-8859-2
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<b><font color="#00CC33"><em>LegalRXMedications</em></font> drug shop propose all pharmas you need to restore your health for a little cost. <br>
We manage across the globe with clients from America, Europe, and Asia. <br>
Now you got no need to look for pharmacy somewhere at your area.<br>
We certainly convey high quality pharmasworldwide.
<br>
<br>
<a href="http://ableright.hk/" target="_blank"><em>Visit our site & obtain preparations you require immediately direct to your lodging.</em></a></b> 
<br>
<font color="#D9EDFF">http://ableright.hk/</font> 
<br><b>We are confirmed by <font color="#FF0000"><em>VeriSign</em></font> & <font color="#FF0000"><em>VISA</em></font> thus we provide secure and reliable acquisition.
</b>

</BODY></HTML>
------------6EBF67821E4B80--

From: Stefan Santesson <[email-masked]>
To: pkix <[email-masked]>
Date: Mon, 2 Jul 2007 23:12:39 +0100
Subject: RE: Call for agenda items for the CHicago PKIX meeting
Accept-Language: en-US
acceptlanguage: en-US
Sender: [email-masked]

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D148873DEAEXMSGC307euro_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Thank you for the inputs so far.

Just keep posting agenda suggestions if you still have a request but not po=
sted it to me.
I will be away until Sunday. When I get back I will collect the requests an=
d post a preliminary agenda early next week.

Stefan Santesson
Senior Program Manager
Windows Security, Standards

From: [email-masked] [mailto:[email-masked]] On=
 Behalf Of Stefan Santesson
Sent: den 29 juni 2007 16:26
To: pkix
Subject: Call for agenda items for the CHicago PKIX meeting
Importance: High

All,

A number is issues has been brought to the list since last IETF meeting.

Please let me know if you have any topic you want to discuss during the PKI=
X meeting in Chicago.
As usual, I need at least one editor from each active document to send me a=
 note whether you want a time slot at the meeting beyond my general status =
report.

I need your request for agenda items before end of next week. I.e. Friday J=
uly 6.

Thank you.

Stefan Santesson
Senior Program Manager
Windows Security, Standards

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D148873DEAEXMSGC307euro_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:p=3D"urn:schemas-m=
icrosoft-com:office:powerpoint" xmlns:a=3D"urn:schemas-microsoft-com:office=
:access" xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s=3D"=
uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs=3D"urn:schemas-microsof=
t-com:rowset" xmlns:z=3D"#RowsetSchema" xmlns:b=3D"urn:schemas-microsoft-co=
m:office:publisher" xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadshee=
t" xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" xmlns=
:oa=3D"urn:schemas-microsoft-com:office:activation" xmlns:html=3D"http://ww=
w.w3.org/TR/REC-html40" xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope=
/" xmlns:D=3D"DAV:" xmlns:x2=3D"http://schemas.microsoft.com/office/excel/2=
003/xml" xmlns:ois=3D"http://schemas.microsoft.com/sharepoint/soap/ois/" xm=
lns:dir=3D"http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:d=
s=3D"http://www.w3.org/2000/09/xmldsig#" xmlns:dsp=3D"http://schemas.micros=
oft.com/sharepoint/dsp" xmlns:udc=3D"http://schemas.microsoft.com/data/udc"=
 xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema" xmlns:sps=3D"http://schemas=
.microsoft.com/sharepoint/soap/" xmlns:xsi=3D"http://www.w3.org/2001/XMLSch=
ema-instance" xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile"=
 xmlns:wf=3D"http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:=
mver=3D"http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:=
m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels=3D"http:=
//schemas.openxmlformats.org/package/2006/relationships" xmlns:ex12t=3D"htt=
p://schemas.microsoft.com/exchange/services/2006/types" xmlns=3D"http://www=
.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii"=
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page Section1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
	{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DSV link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><a name=3D"_MailEndCompose"><span lang=3DEN-US style=
=3D'color:
#1F497D'>Thank you for the inputs so far.<o:p></o:p></span></a></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'><o:p>&nbsp;=
</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'>Just keep p=
osting agenda
suggestions if you still have a request but not posted it to me.<o:p></o:p>=
</span></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'>I will be a=
way until
Sunday. When I get back I will collect the requests and post a preliminary
agenda early next week.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'><o:p>&nbsp;=
</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'><o:p>&nbsp;=
</o:p></span></p>

<div>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:maroon'>Stefan Santesson</span></b><span lang=3D=
EN-GB
style=3D'font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F49=
7D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-GB style=3D'font-size:10.0pt;font-fami=
ly:"Arial","sans-serif";
color:#400040'>Senior Program Manager</span><span lang=3DEN-GB style=3D'fon=
t-size:
12.0pt;font-family:"Times New Roman","serif";color:navy'><o:p></o:p></span>=
</p>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:#400040'>Windows Security, Standards</span></b><=
span
lang=3DEN-US style=3D'color:#1F497D'><o:p></o:p></span></p>

</div>

<p class=3DMsoNormal><span lang=3DEN-US style=3D'color:#1F497D'><o:p>&nbsp;=
</o:p></span></p>

<div style=3D'border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm =
4.0pt'>

<div>

<div style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm =
0cm 0cm'>

<p class=3DMsoNormal><b><span lang=3DEN-US style=3D'font-size:10.0pt;font-f=
amily:
"Tahoma","sans-serif"'>From:</span></b><span lang=3DEN-US style=3D'font-siz=
e:10.0pt;
font-family:"Tahoma","sans-serif"'> [email-masked]
[mailto:[email-masked]] <b>On Behalf Of </b>Stefan Santesson<=
br>
<b>Sent:</b> den 29 juni 2007 16:26<br>
<b>To:</b> pkix<br>
<b>Subject:</b> Call for agenda items for the CHicago PKIX meeting<br>
<b>Importance:</b> High<o:p></o:p></span></p>

</div>

</div>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

<p class=3DMsoNormal><span lang=3DEN-US>All,<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>A number is issues has been brought=
 to the
list since last IETF meeting.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>Please let me know if you have any =
topic
you want to discuss during the PKIX meeting in Chicago.<o:p></o:p></span></=
p>

<p class=3DMsoNormal><span lang=3DEN-US>As usual, I need at least one edito=
r from
each active document to send me a note whether you want a time slot at the
meeting beyond my general status report.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>I need your request for agenda item=
s before
end of next week. I.e. Friday July 6.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US>Thank you.<o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:maroon'>Stefan Santesson</span></b><span lang=3D=
EN-GB
style=3D'font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F49=
7D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-GB style=3D'font-size:10.0pt;font-fami=
ly:"Arial","sans-serif";
color:#400040'>Senior Program Manager</span><span lang=3DEN-GB style=3D'fon=
t-size:
12.0pt;font-family:"Times New Roman","serif";color:navy'><o:p></o:p></span>=
</p>

<p class=3DMsoNormal><b><span lang=3DEN-GB style=3D'font-size:10.0pt;font-f=
amily:
"Arial","sans-serif";color:#400040'>Windows Security, Standards</span></b><=
span
lang=3DEN-US style=3D'color:#1F497D'><o:p></o:p></span></p>

<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p>

</div>

</div>

</body>

</html>

--_000_A15AC0FBACD3464E95961F7C0BCD1FF0D148873DEAEXMSGC307euro_--

Subject: Re: Domain certificates in SIP (complete)
From: Scott Lawrence <[email-masked]>
To: [email-masked]
Cc: Vijay Gurbani <[email-masked]>
Organization: Pingtel Corp.
Date: Mon, 02 Jul 2007 09:40:36 -0400
Sender: [email-masked]

[the last copy escaped early :-) ]

On Sat, 2007-06-23 at 16:46 -0400, Scott Lawrence wrote:
> draft-gurbani-sip-domain-certs-05 has been submitted to
> the IETF archives.  We've tried to incorporate some of the advice we got
> around the Prague meeting.
> 
> This version focuses fairly narrowly on:
> 
> - How to use and interpret the SIP identities in a X.509 certificate.
> - How to indicate that this particular certificate is for SIP
>   usage.
> 
> What goes in the subjectAltName, and a new EKU value, with the detailed
> steps to interpret and validate them are provided from the viewpoint of
> user agents, proxies, and registrars.
> 
> Until the -05 version appears in the archives, you can get it from:
> 
> http://svn.resiprocate.org/rep/ietf-drafts/gurbani/domain-certs/draft-gurbani-sip-domain-certs-05.txt
> http://svn.resiprocate.org/rep/ietf-drafts/gurbani/domain-certs/draft-gurbani-sip-domain-certs-05.html
> 
> Comments, questions and other feedback is much appreciated.

The authors would particularly appreciate some expert PKIX review on
whether or not the usage of the suggested Extended Key Usage reasonable
and (at least potentially) effective?  

This is described in sections 5 and 8.1:
        http://svn.resiprocate.org/rep/ietf-drafts/gurbani/domain-certs/draft-gurbani-sip-domain-certs-05.html#sipusage
        http://svn.resiprocate.org/rep/ietf-drafts/gurbani/domain-certs/draft-gurbani-sip-domain-certs-05.html#cert-subject
                
-- 
Scott Lawrence  tel:+1-781-938-5306;ext=162 or sip:[email-masked]
  sipXecs project coordinator - SIPfoundry http://www.sipfoundry.org/sipXecs
  Chief Technology Officer    - Pingtel Corp. http://www.pingtel.com/

Subject: Re: Domain certificates in SIP
From: Scott Lawrence <[email-masked]>
To: [email-masked]
Cc: Vijay Gurbani <[email-masked]>
Organization: Pingtel Corp.
Date: Mon, 02 Jul 2007 09:34:26 -0400
Sender: [email-masked]

On Sat, 2007-06-23 at 16:46 -0400, Scott Lawrence wrote:
> draft-gurbani-sip-domain-certs-05 has been submitted to
> the IETF archives.  We've tried to incorporate some of the advice we got
> around the Prague meeting.
> 
> This version focuses fairly narrowly on:
> 
> - How to use and interpret the SIP identities in a X.509 certificate.
> - How to indicate that this particular certificate is for SIP
>   usage.
> 
> What goes in the subjectAltName, and a new EKU value, with the detailed
> steps to interpret and validate them are provided from the viewpoint of
> user agents, proxies, and registrars.
> 
> Until the -05 version appears in the archives, you can get it from:
> 
> http://svn.resiprocate.org/rep/ietf-drafts/gurbani/domain-certs/draft-gurbani-sip-domain-certs-05.txt
> http://svn.resiprocate.org/rep/ietf-drafts/gurbani/domain-certs/draft-gurbani-sip-domain-certs-05.html
> 
> Comments, questions and other feedback is much appreciated.

There are two areas in this draft that we would particularly getting
appreciate some expert PKIX review:

      * Is the usage of the suggested Extended Key Usage reasonable and
        (at least potentially) effective?  This is described in 
-- 
Scott Lawrence  tel:+1-781-938-5306;ext=162 or sip:[email-masked]
  sipXecs project coordinator - SIPfoundry http://www.sipfoundry.org/sipXecs
  Chief Technology Officer    - Pingtel Corp. http://www.pingtel.com/