attachment
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Andale Mono";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.IEEEStdsParagraph, li.IEEEStdsParagraph, div.IEEEStdsParagraph
{mso-style-name:"IEEEStds Paragraph";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
text-align:justify;
font-size:12.0pt;
font-family:"Arial","sans-serif";}
p.IEEEStdsLevel1Header, li.IEEEStdsLevel1Header, div.IEEEStdsLevel1Header
{mso-style-name:"IEEEStds Level 1 Header";
margin-top:.25in;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level1 lfo2;
font-size:16.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
p.IEEEStdsLevel2Header, li.IEEEStdsLevel2Header, div.IEEEStdsLevel2Header
{mso-style-name:"IEEEStds Level 2 Header";
margin-top:.25in;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level2 lfo2;
font-size:14.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
p.IEEEStdsLevel3Header, li.IEEEStdsLevel3Header, div.IEEEStdsLevel3Header
{mso-style-name:"IEEEStds Level 3 Header";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level3 lfo2;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
p.IEEEStdsLevel4Header, li.IEEEStdsLevel4Header, div.IEEEStdsLevel4Header
{mso-style-name:"IEEEStds Level 4 Header";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level4 lfo2;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
p.IEEEStdsLevel5Header, li.IEEEStdsLevel5Header, div.IEEEStdsLevel5Header
{mso-style-name:"IEEEStds Level 5 Header";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level5 lfo2;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
p.IEEEStdsLevel6Header, li.IEEEStdsLevel6Header, div.IEEEStdsLevel6Header
{mso-style-name:"IEEEStds Level 6 Header";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level6 lfo2;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
p.IEEEStdsLevel7Header, li.IEEEStdsLevel7Header, div.IEEEStdsLevel7Header
{mso-style-name:"IEEEStds Level 7 Header";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level7 lfo2;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
p.IEEEStdsLevel8Header, li.IEEEStdsLevel8Header, div.IEEEStdsLevel8Header
{mso-style-name:"IEEEStds Level 8 Header";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level8 lfo2;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
p.IEEEStdsLevel9Header, li.IEEEStdsLevel9Header, div.IEEEStdsLevel9Header
{mso-style-name:"IEEEStds Level 9 Header";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
text-indent:0in;
line-height:115%;
page-break-after:avoid;
mso-list:l0 level9 lfo2;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
font-weight:bold;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EmailStyle29
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle30
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle31
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle32
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle33
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle34
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1872063521;
mso-list-template-ids:913756996;}
@list l0:level1
{mso-level-style-link:"IEEEStds Level 1 Header";
mso-level-suffix:space;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:16.0pt;
mso-bidi-font-size:16.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-bidi-font-weight:bold;
mso-ansi-font-style:normal;
mso-bidi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
@list l0:level2
{mso-level-style-link:"IEEEStds Level 2 Header";
mso-level-suffix:space;
mso-level-text:"%1\.%2";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:14.0pt;
mso-bidi-font-size:14.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-bidi-font-weight:bold;
mso-ansi-font-style:normal;
mso-bidi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
@list l0:level3
{mso-level-style-link:"IEEEStds Level 3 Header";
mso-level-suffix:space;
mso-level-text:"%1\.%2\.%3";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:12.0pt;
mso-bidi-font-size:12.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-bidi-font-weight:bold;
mso-ansi-font-style:normal;
mso-bidi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
@list l0:level4
{mso-level-style-link:"IEEEStds Level 4 Header";
mso-level-suffix:space;
mso-level-text:"%1\.%2\.%3\.%4";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:12.0pt;
mso-bidi-font-size:12.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-bidi-font-weight:bold;
mso-ansi-font-style:normal;
mso-bidi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
@list l0:level5
{mso-level-style-link:"IEEEStds Level 5 Header";
mso-level-suffix:space;
mso-level-text:"%1\.%2\.%3\.%4\.%5";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:10.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-ansi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
@list l0:level6
{mso-level-style-link:"IEEEStds Level 6 Header";
mso-level-suffix:space;
mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:10.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-ansi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
@list l0:level7
{mso-level-style-link:"IEEEStds Level 7 Header";
mso-level-suffix:space;
mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:10.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-ansi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
@list l0:level8
{mso-level-style-link:"IEEEStds Level 8 Header";
mso-level-suffix:space;
mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:10.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-ansi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
@list l0:level9
{mso-level-style-link:"IEEEStds Level 9 Header";
mso-level-suffix:space;
mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8\.%9";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;
mso-ansi-font-size:10.0pt;
font-family:"Arial","sans-serif";
mso-bidi-font-family:"Times New Roman";
color:black;
mso-text-animation:none;
mso-hide:none;
text-transform:none;
mso-ansi-font-weight:bold;
mso-ansi-font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;
vertical-align:baseline;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Mike/Pete,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Thank you very much for your response.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I wanted to follow-up on that as it appeared ‘authentication for destination’ wasn’t addressed for FaxOut/Scan2 destinations while those IPP/http destinations may require authentication. So, wanted to understand what all of you think about that.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I am certainly not a fan of passing down credentials unless the client sends OTP over a secure connection. Of course, there is always a risk of a fake service.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>It helps to know that dealing with authentication for destination was consciously left ‘undefined’. And thanks for letting me know that the current HTTP URI scheme “forbids” the use of embedding credentials in the URI. So, it appears that MFDs do not have to necessarily add support for credentials in the ‘http’ destination-uri after all as the standards do not allow that technical possibility.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Thanks and Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Somasundaram.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Michael Sweet [mailto:msweet@apple.com] <br><b>Sent:</b> Wednesday, April 09, 2014 8:19 PM<br><b>To:</b> Soma Meiyappan<br><b>Cc:</b> Peter Zehler; IPP@pwg.org<br><b>Subject:</b> Re: [IPP] Are these attributes what were agreed to for IPP Scan?<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Soma,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><div><p class=MsoNormal>On Apr 9, 2014, at 12:13 AM, Soma Meiyappan <<a href="mailto:Soma.Meiyappan@conexant.com">Soma.Meiyappan@conexant.com</a>> wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span style='color:#1F497D'>Mike/Pete,</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>May I know how PWG solves supporting IPP destinations (and other HTTP destinations) that need authentication when used as a destination in FaxOut/Scan2 defined workflows?</span><o:p></o:p></p></div></blockquote><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>It is currently undefined at the protocol level (meaning that it is up to each implementation to do something about it), just as how to deal with authentication of document URIs is at present.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>This is pending work in the IDS workgroup. CUPS has the "auth-info" and "auth-info-required" attributes, as well as a job-state-reasons keyword and IPP operation as extensions to IPP for dealing with authentication for a printer's output device (usually another computer/server that is sharing a print queue), but there are practical limitations to the approach.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span style='color:#1F497D'>Are authentication information for URIs under destination-uri-ready (implicitly) managed by the MFD as it appears that the specification does not provide any destination specific attributes in the destination-uri collection to provide authentication credentials? Or should authentication information be provided in the URI as it is done for some http URI allows like </span><a href="http://user:passwd@mystoragedrive.com/folder">http://user:passwd@mystoragedrive.com/folder</a><span style='color:#1F497D'>? If so, I would wonder about IPP destinations and ipp/ipps URIs.</span><o:p></o:p></p><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div></div></blockquote><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Embedding user credentials in HTTP and IPP URIs is not recommended, and in fact the current HTTP and IPP URI scheme definitions forbid it.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>(FWIW, CUPS also supports this kind of authentication for the output device URI, but we've had to go through a lot of hoops over the years to hide the information from prying eyes. Definitely not recommended!)<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><div><div><p class=MsoNormal><span class=apple-style-span><span style='font-size:12.0pt;font-family:"Andale Mono","serif";color:black'>_________________________________________________________</span></span><span class=apple-style-span><span style='font-size:12.0pt;font-family:"Andale Mono","serif";color:black'><br></span></span><span class=apple-style-span><span style='font-size:12.0pt;font-family:"Andale Mono","serif";color:black'>Michael Sweet, Senior Printing System Engineer, PWG Chair</span></span><span class=apple-style-span><span style='font-family:"Andale Mono","serif";color:black'><o:p></o:p></span></span></p></div></div><p class=MsoNormal><span style='font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div></div>
<P>Conexant E-mail Firewall (Conexant.Com) made the following annotations<br/>---------------------------------------------------------------------<br/>********************** Legal Disclaimer **************************** <br/><br/>"This email may contain confidential and privileged material for the sole use of the intended recipient. Any unauthorized review, use or distribution by others is strictly prohibited. If you have received the message in error, please advise the sender by reply email and delete the message. Thank you." <br/><br/>********************************************************************** <br/><br/>---------------------------------------------------------------------<br/>
</P></body></html>