<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hey here,</p>
    <p>thanks for creating an initial draft for discussion!</p>
    <p>From how I understand the current scheme, the carried requests in
      "evaluations" can be mixed with the main request.</p>
    <p>so the following request could be legal, or ?<br>
    </p>
    <pre>{
  "subject": {
                ...
  },
<b>  "context":{
    "time": "2024-05-31"
  }</b>,
  "action": {
                ...
  },
  "evaluations": {
    "eval-1": {
      "resource": {
      },
<b>      "context": {
        "time": "2024-06-01"
      },</b>
    },
        ....
    }
  ]
}
</pre>
    <p>The different context elements can contradict each other, which
      should be avoided?</p>
    <p>Similar case with other combinations, where parts of the tuple
      are part of the main request an others are only present in
      evaluations.</p>
    <p>I've the guts feeling that this could make implementations rather
      complex, since all the combinations need to be considered and
      canonized into [subject+action+resource] tuples for processing.</p>
    <p>how about just reusing the same scheme as in the current request
      in the "evaluations" element?</p>
    <p>So if a request should carry 1+n questions, the 1st goes into the
      main tuple, the others into "evaluations" and contain a full
      subject-action-resource(-context) tuple ? 🤷‍<br>
      <br>
    </p>
    <p><br>
    </p>
    <p>hope this makes sense<br>
    </p>
    <p><br>
    </p>
    <pre class="moz-signature" cols="72">Roland Baum
umbrella.associates GmbH
Dipl.Kfm.(FH), Dipl.Wirt.-Inf.(FH), CISA, CISSP, CIDPRO</pre>
    <div class="moz-cite-prefix">Am 09.06.24 um 23:36 schrieb Omri
      Gazitt via Openid-specs-authzen:<br>
    </div>
    <blockquote type="cite"
cite="mid:CALkJ7sW86DPaWutatVJWOa_eLO5knLU-o1qUDduJMtfsu0GgHA@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="auto">Steve, thanks for reviewing!</div>
      <div dir="auto"><br>
      </div>
      <div dir="auto">I agree that new PEPs and old PDPs would not
        interoperate without a capability negotiation mechanism (like
        context, or a different endpoint as you said). </div>
      <div dir="auto"><br>
      </div>
      <div dir="auto">And also that at this stage, we don’t need to
        worry about that kind of back-compat, since we haven’t yet a
        first implementers draft. <br clear="all">
        <br clear="all">
        <div dir="auto">
          <div dir="ltr" class="gmail_signature"
            data-smartmail="gmail_signature">
            <div dir="ltr">
              <table
style="font-family:tahoma,sans-serif;border:medium;border-collapse:collapse;color:rgb(34,34,34)">
                <tbody style="font-family:tahoma,sans-serif">
                  <tr style="height:0pt;font-family:tahoma,sans-serif">
                    <td
style="vertical-align:top;padding:5pt;overflow:hidden;font-family:tahoma,sans-serif">
                      <p dir="ltr"
style="line-height:1.2;margin-top:0pt;margin-bottom:0pt;font-family:tahoma,sans-serif"><a
                          href="http://www.aserto.com/" target="_blank"
                          style="font-family:tahoma,sans-serif"
                          moz-do-not-send="true"><img
src="https://raw.githubusercontent.com/aserto-dev/artwork/main/logo/horizontal/color/aserto-horizontal-color.png"
                            style="font-family: tahoma, sans-serif;"
                            moz-do-not-send="true" width="96"
                            height="35"></a></p>
                    </td>
                    <td
style="vertical-align:middle;padding:5pt;overflow:hidden;font-family:tahoma,sans-serif">
                      <p dir="ltr"
style="line-height:1.2;margin-top:0pt;margin-bottom:0pt;font-family:tahoma,sans-serif"><span
style="font-family:Roboto,sans-serif;font-weight:700;vertical-align:baseline;white-space:pre-wrap;background-color:transparent;color:rgb(0,0,0)"><span
style="font-size:10pt;font-family:Roboto,sans-serif">Omri Gazitt</span><span
style="font-weight:normal;font-family:Roboto,sans-serif"><span
style="font-family:Arial;vertical-align:baseline;background-color:transparent"><span
                        style="white-space:pre;font-family:Arial"> </span></span></span><span
style="font-size:10pt;font-family:Roboto,sans-serif">| </span></span><span
style="font-family:Roboto,sans-serif;font-size:10pt;white-space:pre-wrap;background-color:transparent;color:rgb(0,0,0)">CEO</span></p>
                      <p dir="ltr"
style="line-height:1.2;margin-top:0pt;margin-bottom:0pt;font-family:tahoma,sans-serif"><span
style="font-size:10pt;font-family:Roboto,sans-serif;vertical-align:baseline;white-space:pre-wrap;background-color:transparent;color:rgb(0,0,0)"><a
                        href="http://www.aserto.com/" target="_blank"
                        style="font-family:Roboto,sans-serif"
                        moz-do-not-send="true">Aserto</a> Inc.</span><span
style="font-family:Arial;vertical-align:baseline;background-color:transparent"><span
                          style="white-space:pre;font-family:Arial">       </span></span><span
style="font-family:Roboto,sans-serif;font-weight:700;white-space:pre-wrap;font-size:10pt;color:rgb(0,0,0)">| </span><span
style="font-family:Roboto,sans-serif;font-size:10pt;white-space:pre-wrap;background-color:transparent;color:rgb(0,0,0)">(425) 765-0079</span></p>
                    </td>
                  </tr>
                </tbody>
              </table>
            </div>
          </div>
        </div>
      </div>
      <div><br>
      </div>
      <div><br>
        <div class="gmail_quote">
          <div dir="ltr" class="gmail_attr">On Sun, Jun 9, 2024 at
            1:25 PM Steven Venema via Openid-specs-authzen <<a
              href="mailto:openid-specs-authzen@lists.openid.net"
              moz-do-not-send="true" class="moz-txt-link-freetext">openid-specs-authzen@lists.openid.net</a>>
            wrote:<br>
          </div>
          <blockquote class="gmail_quote"
style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)">
            <div link="blue" vlink="purple"
              style="overflow-wrap: break-word;" lang="EN-US">
              <div class="m_-2774160369938554618WordSection1">
                <p class="MsoNormal"><span style="font-size:12pt">Hi
                    all,</span></p>
                <p class="MsoNormal"><span style="font-size:12pt"> </span></p>
                <p class="MsoNormal"><span style="font-size:12pt">The
                    proposal does claim backwards compatibility, but I
                    wonder if there is a case where that might not be
                    the case.</span></p>
                <p class="MsoNormal"><span style="font-size:12pt"> </span></p>
                <p class="MsoNormal"><span style="font-size:12pt">Here
                    is an example; please let me know if I’m getting
                    something wrong here:</span></p>
                <p class="MsoNormal"><span style="font-size:12pt"> </span></p>
                <ol style="margin-top:0in" type="1" start="1">
                  <li class="m_-2774160369938554618MsoListParagraph"
                    style="margin-left:0in"><span style="font-size:12pt">Assume
                      we have a PEP which implements boxcarring but a
                      (legacy?) PDP which does not.</span></li>
                  <li class="m_-2774160369938554618MsoListParagraph"
                    style="margin-left:0in"><span style="font-size:12pt">When
                      the PDP receives a boxcarred request with an
                    </span><span
style="font-size:12pt;font-family:"Aptos Mono"">evaluations</span><span
                      style="font-size:12pt"> object, I presume it would
                      ignore that object as an unrecognized key,
                      correct?</span></li>
                  <li class="m_-2774160369938554618MsoListParagraph"
                    style="margin-left:0in"><span style="font-size:12pt">The
                      PDP would then interpret any remaining elements (</span><span
style="font-size:12pt;font-family:"Aptos Mono"">subject</span><span
                      style="font-size:12pt">,
                    </span><span
style="font-size:12pt;font-family:"Aptos Mono"">context</span><span
                      style="font-size:12pt">, etc.), as an actual
                      single-valued evaluation request instead of
                      defaults for boxcarred request, possibly returning
                      a result which doesn’t make sense to the PEP? This
                      would seem to be a break in backward
                      compatibility.</span></li>
                </ol>
                <p class="MsoNormal"><span style="font-size:12pt"> </span></p>
                <p class="MsoNormal"><span style="font-size:12pt">The
                    converse, where the PEP is legacy and the PDP
                    supports boxcarring should work just fine though.</span></p>
                <p class="MsoNormal"><span style="font-size:12pt"> </span></p>
                <p class="MsoNormal"><span style="font-size:12pt">Assuming
                    the above scenario is plausible, it does beg the
                    question of how important backward compatibility is
                    at this point in our spec development cycle. In the
                    past, we’ve assumed that we MUST maintain backward
                    compatibility. If so, then this would perhaps be an
                    argument for the alternate endpoint approach we’ve
                    discussed
                  </span><span
style="font-size:12pt;font-family:"Aptos Mono"">/access/v1/authorization<span
style="font-family:"Aptos Mono";color:red">s</span></span><span
                    style="font-size:12pt">  vs.
                  </span><span
style="font-size:12pt;font-family:"Aptos Mono"">/access/v1/authorization</span><span
                    style="font-size:12pt">).</span></p>
                <p class="MsoNormal"><span style="font-size:12pt"> </span></p>
                <p class="MsoNormal"><span style="font-size:12pt">Thoughts?</span></p>
                <p class="MsoNormal"><span style="font-size:12pt">-Steve</span></p>
                <div
id="m_-2774160369938554618mail-editor-reference-message-container">
                  <div>
                    <div
style="border-width:1pt medium medium;border-style:solid none none;padding:3pt 0in 0in;border-color:rgb(181,196,223) currentcolor currentcolor">
                      <p class="MsoNormal" style="margin-bottom:12pt"><b><span
                            style="font-size:12pt;color:black">From:
                          </span></b><span
                          style="font-size:12pt;color:black">Openid-specs-authzen
                          <<a
href="mailto:openid-specs-authzen-bounces@lists.openid.net"
                            target="_blank" moz-do-not-send="true"
                            class="moz-txt-link-freetext">openid-specs-authzen-bounces@lists.openid.net</a>>
                          on behalf of Omri Gazitt via
                          Openid-specs-authzen <<a
href="mailto:openid-specs-authzen@lists.openid.net" target="_blank"
                            moz-do-not-send="true"
                            class="moz-txt-link-freetext">openid-specs-authzen@lists.openid.net</a>><br>
                          <b>Date: </b>Wednesday, June 5, 2024 at 22:27<br>
                          <b>To: </b>AuthZEN Working Group List <<a
href="mailto:openid-specs-authzen@lists.openid.net" target="_blank"
                            moz-do-not-send="true"
                            class="moz-txt-link-freetext">openid-specs-authzen@lists.openid.net</a>><br>
                          <b>Cc: </b>Omri Gazitt <<a
                            href="mailto:omri@aserto.com"
                            target="_blank" moz-do-not-send="true"
                            class="moz-txt-link-freetext">omri@aserto.com</a>><br>
                          <b>Subject: </b>Re: [Openid-specs-authzen]
                          Boxcarring proposal</span></p>
                    </div>
                    <div>
                      <p class="MsoNormal"><span style="font-size:12pt">Thanks
                          Andy, Alex & Granville!</span></p>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt"> </span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt">I agree with the
                            feedback to use a keyed object instead of an
                            array. I made those changes in the
                            <a
href="https://hackmd.io/ri7odOQkQ6yztBQGlXnnKg?both" target="_blank"
                              moz-do-not-send="true">hackmd file</a>.  I
                            also added a brief section on errors.</span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt"> </span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt">Please feel free to
                            add comments to the hackmd file, or send
                            them on the mailing list. </span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt"> </span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt">We can discuss the
                            proposal at our next meeting on Tuesday.</span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt"> </span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt">Thanks,</span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt">Omri.</span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt"> </span></p>
                      </div>
                    </div>
                    <p class="MsoNormal"><span style="font-size:12pt"> </span></p>
                    <div>
                      <div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt">On Mon, Jun 3, 2024
                            at 5:48</span><span
style="font-size:12pt;font-family:Arial,sans-serif"> </span><span
                            style="font-size:12pt">AM Granville Schmidt
                            via Openid-specs-authzen <<a
href="mailto:openid-specs-authzen@lists.openid.net" target="_blank"
                              moz-do-not-send="true"
                              class="moz-txt-link-freetext">openid-specs-authzen@lists.openid.net</a>>
                            wrote:</span></p>
                      </div>
                      <blockquote
style="border-width:medium medium medium 1pt;border-style:none none none solid;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in;border-color:currentcolor currentcolor currentcolor rgb(204,204,204)">
                        <div>
                          <div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt">Thank you for
                                writing this first proposal, Omri!</span></p>
                          </div>
                          <div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt"> </span></p>
                          </div>
                          <div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt">I agree with Alex
                                on having the batched response keyed off
                                an identifier. I also have some
                                additional thoughts to share and get
                                feedback on.</span></p>
                          </div>
                          <div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt"> </span></p>
                          </div>
                          <div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt">Is it
                                the team's preference to have comments
                                added directly to the HackMD document or
                                continue via email?</span></p>
                          </div>
                          <div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt"> </span></p>
                          </div>
                          <div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt">Cheers,</span></p>
                          </div>
                          <p class="MsoNormal"><span
                              style="font-size:12pt"><br clear="all">
                            </span></p>
                          <div>
                            <div>
                              <div>
                                <div>
                                  <div>
                                    <p class="MsoNormal"><b><span
style="font-size:12pt;font-family:Arial,sans-serif;color:black">Granville
                                          Schmidt</span></b><span
                                        style="font-size:12pt"></span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
style="font-size:12pt;font-family:Arial,sans-serif;color:black">CISSP,
                                        CCSP, CSSLP, HCISPP, CIPT, GCPCA</span><span
                                        style="font-size:12pt"></span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
style="font-size:12pt;font-family:Arial,sans-serif;color:black"><a
href="https://www.linkedin.com/in/granvilleschmidt/" target="_blank"
style="font-family:Arial,sans-serif" moz-do-not-send="true"><span
style="font-family:Arial,sans-serif;color:rgb(17,85,204)">https://www.linkedin.com/in/granvilleschmidt/</span></a> <br>
                                        +1-740-701-3514</span><span
                                        style="font-size:12pt"></span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        style="font-size:12pt"> </span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
style="font-size:12pt;font-family:Arial,sans-serif;border:1pt solid windowtext;padding:0in;color:black"><img
style="width: 0.3333in; height: 0.3333in; font-family: Arial, sans-serif;"
id="m_-2774160369938554618_x0000_i1030" alt="Image removed by sender."
                                          moz-do-not-send="true"
                                          width="32" height="32"
                                          border="0"></span><span
style="font-size:12pt;font-family:Arial,sans-serif;color:black"> <span
style="border:1pt solid windowtext;padding:0in;font-family:Arial,sans-serif"><img
style="width: 0.3333in; height: 0.3333in; font-family: Arial, sans-serif;"
id="m_-2774160369938554618_x0000_i1029" alt="Image removed by sender."
                                            moz-do-not-send="true"
                                            width="32" height="32"
                                            border="0"></span> <span
style="border:1pt solid windowtext;padding:0in;font-family:Arial,sans-serif"><img
style="width: 0.3333in; height: 0.3333in; font-family: Arial, sans-serif;"
id="m_-2774160369938554618_x0000_i1028" alt="Image removed by sender."
                                            moz-do-not-send="true"
                                            width="32" height="32"
                                            border="0"></span> <span
style="border:1pt solid windowtext;padding:0in;font-family:Arial,sans-serif"><img
style="width: 0.3333in; height: 0.3333in; font-family: Arial, sans-serif;"
id="m_-2774160369938554618_x0000_i1027" alt="Image removed by sender."
                                            moz-do-not-send="true"
                                            width="32" height="32"
                                            border="0"></span></span><span
                                        style="font-size:12pt"></span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
style="font-size:12pt;border:1pt solid windowtext;padding:0in"><img
style="width: 1in; height: 1in;" id="m_-2774160369938554618_x0000_i1026"
alt="Image removed by sender. Certified Information Privacy Technologist (CIPT) | Intellectual Point"
                                          moz-do-not-send="true"
                                          width="96" height="96"
                                          border="0"></span><span
                                        style="font-size:12pt"></span></p>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                          <p class="MsoNormal"><span
                              style="font-size:12pt"> </span></p>
                        </div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt"> </span></p>
                        <div>
                          <div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt">On Mon, Jun 3,
                                2024 at 3:38</span><span
style="font-size:12pt;font-family:Arial,sans-serif"> </span><span
                                style="font-size:12pt">AM Alex Olivier
                                via Openid-specs-authzen <<a
href="mailto:openid-specs-authzen@lists.openid.net" target="_blank"
                                  moz-do-not-send="true"
                                  class="moz-txt-link-freetext">openid-specs-authzen@lists.openid.net</a>>
                                wrote:</span></p>
                          </div>
                          <blockquote
style="border-width:medium medium medium 1pt;border-style:none none none solid;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in;border-color:currentcolor currentcolor currentcolor rgb(204,204,204)">
                            <div>
                              <p class="MsoNormal"><span
                                  style="font-size:12pt">This is
                                  looking good to me.</span></p>
                              <div>
                                <p class="MsoNormal"><span
                                    style="font-size:12pt"> </span></p>
                              </div>
                              <div>
                                <p class="MsoNormal"><span
                                    style="font-size:12pt">The one area
                                    I have run into with the type-array
                                    response approach is around
                                    ordering. I am assuming that the
                                    response array is required to be the
                                    same length and order as the input
                                    values. This is implicitly putting
                                    the responsibility of the PDP to fit
                                    that contract and so would be called
                                    out in the spec explicitly.</span></p>
                              </div>
                              <div>
                                <p class="MsoNormal"><span
                                    style="font-size:12pt"> </span></p>
                              </div>
                              <div>
                                <p class="MsoNormal"><span
                                    style="font-size:12pt">From my own
                                    experience, having this batch
                                    response being keyed off
                                    some identifier (resource
                                    ID/action?) passed in the input
                                    makes it easier to handle on the
                                    client side as you can just 'pluck'
                                    the value from the response rather
                                    than have to iterate through the
                                    array to find the matching entity
                                    (though the SDK layer can do this).</span></p>
                              </div>
                              <div>
                                <p class="MsoNormal"><span
                                    style="font-size:12pt"> </span></p>
                              </div>
                              <div>
                                <p class="MsoNormal"><span
                                    style="font-size:12pt"> </span></p>
                              </div>
                            </div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt"> </span></p>
                            <div>
                              <div>
                                <p class="MsoNormal"><span
                                    style="font-size:12pt">On Sat, 1 Jun
                                    2024 at 02:21, Omri Gazitt via
                                    Openid-specs-authzen <<a
href="mailto:openid-specs-authzen@lists.openid.net" target="_blank"
                                      moz-do-not-send="true"
                                      class="moz-txt-link-freetext">openid-specs-authzen@lists.openid.net</a>>
                                    wrote:</span></p>
                              </div>
                              <blockquote
style="border-width:medium medium medium 1pt;border-style:none none none solid;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in;border-color:currentcolor currentcolor currentcolor rgb(204,204,204)">
                                <div>
                                  <p class="MsoNormal"><span
                                      style="font-size:12pt">Hi folks!</span></p>
                                  <div>
                                    <p class="MsoNormal"><span
                                        style="font-size:12pt"> </span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        style="font-size:12pt">I had a
                                        chance to write up the
                                        boxcarring proposal that we
                                        batted around during
                                        Identiverse. It's in
                                        <a
href="https://hackmd.io/ri7odOQkQ6yztBQGlXnnKg" target="_blank"
                                          moz-do-not-send="true">HackMD</a>.
                                        Comments welcome!</span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        style="font-size:12pt"> </span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        style="font-size:12pt">The
                                        proposal is meant to be
                                        backwards-compatible with the
                                        current single-decision
                                        evaluation API, but could also
                                        be bound to the
                                        /access/v1/evaluations (note
                                        plural) endpoint.</span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        style="font-size:12pt"> </span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        style="font-size:12pt">Thanks,</span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        style="font-size:12pt">Omri.<br
                                          clear="all">
                                      </span></p>
                                    <div>
                                      <p class="MsoNormal"><span
                                          style="font-size:12pt"> </span></p>
                                    </div>
                                    <p class="MsoNormal"><span
class="m_-2774160369938554618gmailsignatureprefix"><span
                                          style="font-size:12pt">--
                                        </span></span><span
                                        style="font-size:12pt"></span></p>
                                    <div>
                                      <div>
                                        <table
style="border-collapse:collapse" cellspacing="0" cellpadding="0"
                                          border="0">
                                          <tbody>
                                            <tr>
                                              <td
style="padding:5pt;overflow:hidden" valign="top">
                                                <p style="margin:0in"><span
style="font-family:Tahoma,sans-serif;color:rgb(34,34,34)"><a
href="http://www.aserto.com/" target="_blank"
style="font-family:Tahoma,sans-serif" moz-do-not-send="true"><span
style="text-decoration:none;font-family:Tahoma,sans-serif;color:rgb(34,34,34)"><span
style="border:1pt solid windowtext;padding:0in;font-family:Tahoma,sans-serif;color:blue"><img
style="width: 1in; height: 0.3645in; font-family: Tahoma, sans-serif;"
id="m_-2774160369938554618_x0000_i1025" alt="Image removed by sender."
moz-do-not-send="true" width="96" height="35" border="0"></span></span></a></span></p>
                                              </td>
                                              <td
style="padding:5pt;overflow:hidden">
                                                <p style="margin:0in"><b><span
style="font-size:10pt;font-family:Roboto;color:black">Omri Gazitt</span></b><span
style="font-family:Arial,sans-serif;color:black">
                                                  </span><b><span
style="font-size:10pt;font-family:Roboto;color:black">| </span>
                                                  </b><span
style="font-size:10pt;font-family:Roboto;color:black">CEO</span><span
style="font-family:Tahoma,sans-serif;color:rgb(34,34,34)"></span></p>
                                                <p style="margin:0in"><span
style="font-size:10pt;font-family:Roboto;color:black"><a
href="http://www.aserto.com/" target="_blank" style="font-family:Roboto"
moz-do-not-send="true">Aserto</a> Inc.</span><span
style="font-family:Arial,sans-serif;color:rgb(34,34,34)">
                                                  </span><b><span
style="font-size:10pt;font-family:Roboto;color:black">| </span>
                                                  </b><span
style="font-size:10pt;font-family:Roboto;color:black">(425) 765-0079</span><span
style="font-family:Tahoma,sans-serif;color:rgb(34,34,34)"></span></p>
                                              </td>
                                            </tr>
                                          </tbody>
                                        </table>
                                      </div>
                                    </div>
                                  </div>
                                </div>
                              </blockquote>
                            </div>
                          </blockquote>
                        </div>
                      </blockquote>
                    </div>
                  </div>
                </div>
              </div>
            </div>
            <div link="blue" vlink="purple"
              style="overflow-wrap: break-word;" lang="EN-US">
              <div class="m_-2774160369938554618WordSection1">
                <div
id="m_-2774160369938554618mail-editor-reference-message-container">
                  <div>
                    <div>
                      <blockquote
style="border-width:medium medium medium 1pt;border-style:none none none solid;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in;border-color:currentcolor currentcolor currentcolor rgb(204,204,204)">
                        <div>
                          <blockquote
style="border-width:medium medium medium 1pt;border-style:none none none solid;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in;border-color:currentcolor currentcolor currentcolor rgb(204,204,204)">
                            <div>
                              <blockquote
style="border-width:medium medium medium 1pt;border-style:none none none solid;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in;border-color:currentcolor currentcolor currentcolor rgb(204,204,204)">
                                <div>
                                  <div>
                                    <div>
                                      <div>
                                        <table
style="border-collapse:collapse" cellspacing="0" cellpadding="0"
                                          border="0">
                                          <tbody>
                                            <tr>
                                            </tr>
                                          </tbody>
                                        </table>
                                      </div>
                                    </div>
                                  </div>
                                </div>
                                <p class="MsoNormal"><span
                                    style="font-size:12pt">-- <br>
                                    Openid-specs-authzen mailing list<br>
                                    <a
href="mailto:Openid-specs-authzen@lists.openid.net" target="_blank"
                                      moz-do-not-send="true"
                                      class="moz-txt-link-freetext">Openid-specs-authzen@lists.openid.net</a><br>
                                    <a
href="https://lists.openid.net/mailman/listinfo/openid-specs-authzen"
                                      target="_blank"
                                      moz-do-not-send="true"
                                      class="moz-txt-link-freetext">https://lists.openid.net/mailman/listinfo/openid-specs-authzen</a></span></p>
                              </blockquote>
                            </div>
                            <p class="MsoNormal"><span
                                style="font-size:12pt">-- <br>
                                Openid-specs-authzen mailing list<br>
                                <a
href="mailto:Openid-specs-authzen@lists.openid.net" target="_blank"
                                  moz-do-not-send="true"
                                  class="moz-txt-link-freetext">Openid-specs-authzen@lists.openid.net</a><br>
                                <a
href="https://lists.openid.net/mailman/listinfo/openid-specs-authzen"
                                  target="_blank" moz-do-not-send="true"
                                  class="moz-txt-link-freetext">https://lists.openid.net/mailman/listinfo/openid-specs-authzen</a></span></p>
                          </blockquote>
                        </div>
                        <p class="MsoNormal"><span
                            style="font-size:12pt">-- <br>
                            Openid-specs-authzen mailing list<br>
                            <a
href="mailto:Openid-specs-authzen@lists.openid.net" target="_blank"
                              moz-do-not-send="true"
                              class="moz-txt-link-freetext">Openid-specs-authzen@lists.openid.net</a><br>
                            <a
href="https://lists.openid.net/mailman/listinfo/openid-specs-authzen"
                              target="_blank" moz-do-not-send="true"
                              class="moz-txt-link-freetext">https://lists.openid.net/mailman/listinfo/openid-specs-authzen</a></span></p>
                      </blockquote>
                    </div>
                  </div>
                </div>
              </div>
            </div>
            -- <br>
            Openid-specs-authzen mailing list<br>
            <a href="mailto:Openid-specs-authzen@lists.openid.net"
              target="_blank" moz-do-not-send="true"
              class="moz-txt-link-freetext">Openid-specs-authzen@lists.openid.net</a><br>
            <a
href="https://lists.openid.net/mailman/listinfo/openid-specs-authzen"
              rel="noreferrer" target="_blank" moz-do-not-send="true"
              class="moz-txt-link-freetext">https://lists.openid.net/mailman/listinfo/openid-specs-authzen</a><br>
          </blockquote>
        </div>
      </div>
      <br>
      <fieldset class="moz-mime-attachment-header"></fieldset>
    </blockquote>
  </body>
</html>