attachment
<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Rick,<div class=""><br class=""></div><div class="">Thanks for this. We should review this proposal in detail, probably at the August F2F.</div><div class=""><br class=""></div><div class="">Some initial impressions:</div><div class=""><br class=""></div><div class="">1. One of the items in the original feedback at the last F2F was:</div><div class=""><br class=""></div><div class=""> Shouldn‘t authenticated user determine which job-account-id values are allowed?<br class=""> ⁃ i.e. user ‘JohnDoe’ is allowed to use three accounts: "project1", "project2", and "project3"<br class=""> ⁃ Printer can reject jobs when the authenticated user is not allowed to use the job-account-id specified</div><div class=""><br class=""></div><div class=""> It still isn't clear why authenticating the user at the HTTP level is insufficient - perhaps a use case in the slide deck will better explain this?</div><div class=""><br class=""></div><div class="">2. A client-supplied "salt" does not prevent replay attacks, and in fact would require the server to have the original plain text password so that it can generate a hash of the password+salt. *If* the intent is to reproduce something like HTTP Digest authentication, I highly recommend reading and using RFC 7616 (the current published HTTP Digest spec) in the design of this extension proposal. HTTP Digest uses client and server supplied nonces to protect against replay attacks and provide a (small) level of assurance as to the authenticity of each party.</div><div class=""><br class=""></div><div class="">3. We need to document how a client would discover that the printer requires job-account-password - both passively (Get-Printer-Attributes) and actively (Create-Job returns something to tell the client to authenticate outside of HTTP).</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div><blockquote type="cite" class=""><div class="">On Jun 30, 2016, at 6:15 PM, Yardumian, Rick <<a href="mailto:RYardumian@ciis.canon.com" class="">RYardumian@ciis.canon.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Hi,<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">At the last face to face meeting, Canon’s proposal to add a job-account-password was rejected due to its use of a clear text password and other issues. Canon has updated their proposal in the attached PowerPoint slides to correct the issues brought up in the face to face meeting. Please review the attached proposal and reply with your comments.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Thank you,<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Rick Yardumian<o:p class=""></o:p></div></div><span id="cid:FC830C88-2A09-43E6-A1E0-78FED704A530@eastlink.ca"><[Canon-OIP] PWG proposal(job account password)-20160630.pptx></span><span style="font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">ipp mailing list</span><br style="font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:ipp@pwg.org" style="color: purple; text-decoration: underline; font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">ipp@pwg.org</a><br style="font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="https://www.pwg.org/mailman/listinfo/ipp" style="color: purple; text-decoration: underline; font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">https://www.pwg.org/mailman/listinfo/ipp</a></div></blockquote></div><br class=""><div class="">
<span class="Apple-style-span" style="border-collapse: separate; font-family: 'Andale Mono'; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; border-spacing: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: 'Andale Mono'; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">_________________________________________________________<br class="">Michael Sweet, Senior Printing System Engineer</div></span></div></span>
</div>
<br class=""></div></body></html>