attachment-0001
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1349412035;
mso-list-type:hybrid;
mso-list-template-ids:-827029064 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.25in;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.75in;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:1.25in;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.75in;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.25in;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:2.75in;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.25in;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.75in;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:4.25in;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Sukert, Alan
<br>
<b>Sent:</b> Tuesday, January 08, 2013 1:17 PM<br>
<b>To:</b> 'Murdock, Joe'; pwg-announce@pwg.org<br>
<b>Subject:</b> RE: [Pwg-Announce] PWG Last call of HCD Assessment Attributes<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Joe –<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I reviewed the HCDE-Assessment-Attributes spec and have the following official Xerox comments (since I’m coming in new many of these may have already been discussed with the IDS WG; feel free to reject any of
these comments on that basis):<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">General comment: Some of the text has different type font from the rest of the text (e.g., Lines 301 and 308), Make sure to check all the type fonts in the document for uniformity.<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">The following RFCs are referenced in the body of the document but are not listed in either Sections 9 or 10: [XMLTYPES] (Section 2.3, pg. 9, Line 318), [RFC2579] (Section 2.3, pg. 9, Line 321), [RFC2578]
(Section 2.3, pg. 9, Line 321), [RFC3411] (Section 2.3, pg. 9, Line 321) and [RFC5646] (Section 4.1, pg. 14, description of AttributesNaturalLanguage).
<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">The following acronyms are used in the body of the document but are not defined in Section 2.4: RFC (Section 9, pg. 17, Line 525), URL (Section 4.1, pg. 14, description of TimeSource), I2C (Section
4.1, pg. 14, description of TimeSource), MFD (Section 9, pg. 17, Line 525), XML (Section 9, pg. 17, Line 526), SM (Section 6, pg. 16, Line 517)<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">4.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">The following acronyms listed in Section 2.4 are not used anywhere else in the document: TLS and URI.
<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">5.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">Section 3.2.2, page 11, Line 419: The sentence “To mitigate this breach, IT administrators decide corporate policy is that ALL devices must…” It is not clear why ‘ALL’ is capitalized here because ALL
is not one of the conformance technology terms discussed in Section 2.1. <o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">6.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">Section 4.1, page 13, definition of FirmwareStringVersion attribute: The second sentence uses the term “String Versions”. It is not clear what is meant by this term – did you mean Firmware String Versions
here?<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">7.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">Section 4.1, page 13, definition of FirewallSetting attribute: The Data Type is listed as being an OctetArray, but the description indicates that this is a variable length field. Given that the definition
of an OctetArray is a “variable number of octets containing binary data” a variable length field could be something other than octets. Please clarify the data type description of the FirewallSetting attribute.<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">8.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">Section 5.2.2.1, page 16, Line 495: ‘HCDUserApplicationVersion’ should be ‘UserApplicationVersion’.<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">9.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">Section 5.2.2.3, page 16, Line 507: Since the table has been removed indicate there are no attributes that MUST be supported if the condition described is present in the HCD.<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">10.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">Section 5.2.3, page 16, Line 512: ‘CertificationStat’ should be ‘CertificationStat<b>e</b>’. A side comment – the other lists in Section 5.2 are alphabetical; why isn’t the list in Section 5.2.3 alphabetical?<o:p></o:p></span></p>
<p class="MsoListParagraph" style="margin-left:.25in;text-indent:-.25in;mso-list:l0 level1 lfo2">
<![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">11.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">The following references listed in Section 10 are not referenced anywhere else in the document: [RFC3766] and [RFC4086].<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Let me know if you have any questions on my comments.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Alan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">Alan Sukert<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#00B050">Xerox Certified Green Belt<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#1F497D">Product Security Specialist
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#1F497D"><a href="mailto:Alan.Sukert@xerox.com%7C">Alan.Sukert@xerox.com|</a> tel 585.427.1413 or 8*707-1413<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#1F497D">MS 0111-03A | 800 Phillips Road | Webster, NY 14580</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:pwg-announce-bounces@pwg.org">pwg-announce-bounces@pwg.org</a> [<a href="mailto:pwg-announce-bounces@pwg.org">mailto:pwg-announce-bounces@pwg.org</a>]
<b>On Behalf Of </b>Murdock, Joe<br>
<b>Sent:</b> Monday, November 26, 2012 3:43 PM<br>
<b>To:</b> <a href="mailto:pwg-announce@pwg.org">pwg-announce@pwg.org</a><br>
<b>Subject:</b> [Pwg-Announce] PWG Last call of HCD Assessment Attributes<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">All,<br>
<br>
[This PWG Last Call starts today Monday November 26, 2012 and ends Friday January 18, 2013 at 10pm US PST.]<br>
<br>
This is the formal announcement of the PWG Last Call for the HCD-Assessment-Attributes specification, located at:<br>
<br>
<span class="apple-tab-span"> </span><a href="ftp://ftp.pwg.org/pub/pwg/ids/wd/wd-idsattributes10-20121113.pdf">ftp://ftp.pwg.org/pub/pwg/ids/wd/wd-idsattributes10-20121113.pdf</a><br>
<br>
A supporting binding document (HCD-NAP) has been prototyped and is in PWG last call. The IDS WG has completed extensive review of the various revisions of this document and an IDS WG last call.<br>
<br>
The PWG Process/3.0 requires that a quorum (30%) of PWG voting members must acknowledge a PWG Last Call (with or without comments), before any document can progress to PWG Formal Vote. This PWG Last Call is NOT a Formal Vote but it DOES require your review
acknowledgment.<br>
<br>
<br>
HOW TO RESPOND<br>
<br>
Send an email with *exactly* the following subject line format:<br>
Subject: <Company Name> has reviewed the HCD-Assessment-Attributes specification and has [no] comments<br>
<br>
<br>
WHERE TO SEND YOUR RESPONSE<br>
<br>
Please send your response to *all* of the following email addresses (replacing "dot" with '.' and "at" with '@'):<br>
<br>
“ids "at" pwg "dot" org (IDS WG mailing list - you must be subscribed!)<br>
jmurdock "at" sharplabs "dot" com (Joe Murdock, IDS Chair and current HCD-Assessment-Attributes Editor)<br>
alan.sukert "at" xerox "dot" com (Alan Sukert, IDS WG Secretary)<br>
<br>
Note that you must be subscribed to the IDS WG mailing list to send email there - otherwise your email will be silently discarded.<br>
<br>
Please do NOT simply reply to this note on the PWG-Announce list.<br>
<br>
Note: The PWG Definition of the Standards Development Process Version 3.0 is located at:<br>
<br>
<span class="apple-tab-span"> </span><a href="http://www.pwg.org/chair/membership_docs/pwg-process30.pdf">http://www.pwg.org/chair/membership_docs/pwg-process30.pdf</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt">---------------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Joe Murdock<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Principal Engineer and Researcher<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Chair IEEE/ISTO Printer Working Group Imaging Device Security<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Sharp Labs of America<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">5750 NW Pacific Rim Blvd<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Camas, WA 98607<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">(360) 817-7542<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt"><a href="mailto:jmurdock@sharplabs.com">jmurdock@sharplabs.com</a><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br>
believed to be clean. <o:p></o:p></span></p>
</div>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</body>
</html>