From nobody Fri Jul 23 14:36:00 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BA173A1BCD for ; Fri, 23 Jul 2021 14:35:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=proofpoint.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aUZZvUQPzTM8 for ; Fri, 23 Jul 2021 14:35:53 -0700 (PDT) Received: from mx0a-00148503.pphosted.com (mx0a-00148503.pphosted.com [148.163.157.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 910D03A1BCC for ; Fri, 23 Jul 2021 14:35:53 -0700 (PDT) Received: from pps.filterd (m0162103.ppops.net [127.0.0.1]) by mx0a-00148503.pphosted.com (8.16.1.2/8.16.1.2) with ESMTP id 16NLMCbp013171 for ; Fri, 23 Jul 2021 14:35:52 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=proofpoint.com; h=from : to : subject : date : message-id : content-type : mime-version; s=corp-2019-08-07; bh=74xQ3fLrx/YoPHAepQ8p/m6QFTmz71Ly3d0XlxaZCvM=; b=vxQkR3jn8Inw/TZuKKCGbMAvnCxI3vWkfo/m+jPMwM+oHmnMI7hKPaL+c0VlaWAmB7o8 h7XlFKfsTRsWTlE2fmCh9q0OcvHaZd7RXzAcaPlF1L3IEugq8c/znTAILDkz43vyk4Wc xnp12/dDrZ1eLzN3+a3ZjeFqa39kjuZUbPpeHnjaagRy7sQ6LIJ22kKLb4lnMAAXVcpk K1ZXTJcA5Yd/K7O8FAZ3vwhXFxt6FSiRhDgaH4u9sbvi4lCU71Nn36T2v4c0HYQq42Ho R5lQRGkckRzgksynCGwkUqTxCrr3WfCTzXFpOsy8R6Rag0a+9tD+GGmkSXePMxMx2znG qw== Received: from lv-exch01.corp.proofpoint.com (spf-mailers.proofpoint.com [136.179.16.100]) by mx0a-00148503.pphosted.com (PPS) with ESMTPS id 39ykgt8e0h-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT) for ; Fri, 23 Jul 2021 14:35:52 -0700 Received: from lv-exch06.corp.proofpoint.com (10.19.10.26) by lv-exch01.corp.proofpoint.com (10.94.30.37) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.2176.2; Fri, 23 Jul 2021 14:35:51 -0700 Received: from lv-exch02.corp.proofpoint.com (10.94.30.38) by lv-exch06.corp.proofpoint.com (10.19.10.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.2176.2; Fri, 23 Jul 2021 14:35:50 -0700 Received: from NAM10-MW2-obe.outbound.protection.outlook.com (10.19.16.20) by lv-exch02.corp.proofpoint.com (10.94.30.38) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.2176.2 via Frontend Transport; Fri, 23 Jul 2021 14:35:50 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WqdzPaQY8q0bsLr2MnyQh9LBxy0dVgh9rXxxi4H+8TonHizuj6/roVihIZtg3GXRQlCB0N7M1BszBzpFrrxryFLC48ayzqZOpQVk6vz6wH+ShY2oeZOfyTXkHO+WpxgNtKAVlRIUCeAyhsFzMoBJRKkMlVpcj9oqfzI6TcDyvpHBLBx+eLsFExSQM3lwhb4woe31UVroSvWnUZxfUc34p+p1BE0InlpblkSonBsuVhHC6zC0muE/2fRhINmTLoh3TyrpiuJRciGUt/jsYLxQh5HrsC9BWdko7Rol7t66jkItl4AkeBZ9gFIK6T/KYxEPNwLz4vBRl2qg5LOl8NTczA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=74xQ3fLrx/YoPHAepQ8p/m6QFTmz71Ly3d0XlxaZCvM=; b=LVMecbaY3PwZ7vtx85BKYOIZew4GU6+uqi8UlzHcRGk1i8z36xwe0OBKRgK7JJU11hYvETzLnj7pyL4fnAAbGeadMlq2TEtJXwYL9wSGJ0LqQIzSHMz16U5IqLvQbU23Ov03crY0h88wDQKr5x+9cELusIeFH//RGw54+rEeVpL62qYPN6AvYkH/Yh9vhcKLeXn/ezEnLIloCUSDy4BGNzQ+IjAA/ePolnLEiQzF0SaDI5eMNRU5pQIF/rX5/4yngwOfNhAZVVHJmcCqX7ogQfqnnf4HYUjrpY/+MzH/Nvck00uye3ASgXhS8ERdHokXiNIQTAjZSVKv9FWyGFRweA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=proofpoint.com; dmarc=pass action=none header.from=proofpoint.com; dkim=pass header.d=proofpoint.com; arc=none Received: from CY4PR12MB1782.namprd12.prod.outlook.com (2603:10b6:903:123::21) by CY4PR1201MB2549.namprd12.prod.outlook.com (2603:10b6:903:da::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4331.29; Fri, 23 Jul 2021 21:35:49 +0000 Received: from CY4PR12MB1782.namprd12.prod.outlook.com ([fe80::e9ea:5eea:18b5:86f]) by CY4PR12MB1782.namprd12.prod.outlook.com ([fe80::e9ea:5eea:18b5:86f%5]) with mapi id 15.20.4331.034; Fri, 23 Jul 2021 21:35:49 +0000 From: Trent Adams To: "bimi@ietf.org" Thread-Topic: Independent BIMI-capable Email Client Thread-Index: AQHXgAq033cwP/0NfUCQ5FMqvSV4WQ== Date: Fri, 23 Jul 2021 21:35:49 +0000 Message-ID: <2C1CE07A-2FC9-4278-8F00-4613E4966F1F@proofpoint.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.51.21071101 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=proofpoint.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cabcef2a-07b0-46fc-438d-08d94e21d6ec x-ms-traffictypediagnostic: CY4PR1201MB2549: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CY4PR12MB1782.namprd12.prod.outlook.com; PTR:; CAT:NONE; SFS:(346002)(39850400004)(396003)(376002)(366004)(136003)(478600001)(122000001)(86362001)(66446008)(8936002)(83380400001)(6506007)(76116006)(2616005)(966005)(66946007)(6486002)(33656002)(66476007)(64756008)(2906002)(71200400001)(6916009)(5660300002)(6512007)(186003)(316002)(3480700007)(38100700002)(66556008)(8676002)(36756003)(45980500001)(38070700004); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?VnpCSHBBVUY0TlJIdU8wS0tUeGRsMGhCaU9Kb2ZPRUMvaUVjQmFYbkpEa3hp?= =?utf-8?B?WWxlZWFCS3k0d0l3VWExR3R4anczVE5BcmRaNm9lS0FFZ1V5OEVVdmIxQllt?= =?utf-8?B?QXI3NUlhazlOZjg5ckNienNGVVZ6OW9jTVB0U2lORUtzY0EvQXVsSll0MkZ6?= =?utf-8?B?Sitja3hZeE5tWDhRSG1VQVk2N0RxaUlSdENvRit5T0MwUW5rem5HYVFYY2RP?= =?utf-8?B?UnhiRktzblBqK2dYWkNrS0ZXRWJuTTZNRExZd2FHSVFSbHRmTFlGZ0tDTkJI?= =?utf-8?B?Mk9ObndVYXlvWjAydkplcXZ6TElRZ05iNjFwM2hYZWN5WU1maDRwbVJic3RK?= =?utf-8?B?UnRtVTAxZVdxdmxPOEExMTQxOXp4NHE5MENjSWFzUy9nbzVwQWRjeThhdHJ2?= =?utf-8?B?TUN4QktnY0VwUjMxdzFVM2sxaWZyUklNV3hqOHJEbmtua1k1TnE5aE9nYXFj?= =?utf-8?B?TlJFRC9WcXoyK09tQnFDbjkrNzgyaDBlWEk2eWh6aHI4bGJNY1dqUlc2azRY?= =?utf-8?B?ZjdSRUJwc1RSaUZOSks2Z3oxK3diOUtWWjFzU2pySnFlV2dHSkRVSDE1NXMx?= =?utf-8?B?THQwTXNGVTJnam95b0x4Rnl3WlZYSGFmSmJoZXBZVlVJak9yQTFUeVl5VTdJ?= =?utf-8?B?MTZYZWk3WHZoTXlmTXVmYWJCZlpScndxN0R4ZXFqTXlpUmhYbzZCYXJDTUkr?= =?utf-8?B?VDRSUHlFK1YwLzNsT0xtNDh3Mkp5dTlwRUcydEZoS0ZJVjNkWVJyZlFnNlds?= =?utf-8?B?UG5mUmdYUjdnK2dIc2dRRHlsMGJ3WTdESnlnMFl3WXVtdFE1TnJHcnlobHN5?= =?utf-8?B?d2o2dGtaYWZXdTFRcTlmMU1LQzIxZUo5M05ST0dwRENiZ3BhRnNVcFZNZzZW?= =?utf-8?B?Yjl6c1dBZk5OQmU2YnhkQkljS2JhVFAzS003RlZNc1ZLcUViL3lyV1NIUzBh?= =?utf-8?B?SG9JVFV3ei80MW9wRTVtTklEMm1aWE1aTnlZSG1pdVhqdjJpOHRuaVNtNTZ2?= =?utf-8?B?NCswbWE2VlJZL0JQQ3JrQ2FuNk0yUTk3OUxkWFk3cENiVXZMSkJCUFk2VUxF?= =?utf-8?B?ajh2aGplbkFXTW9lWVhKZkErU2pINWJrTlJlWkNBMTR5WWQrZmxNT25nVGFQ?= =?utf-8?B?d3hvOERNZVk0Q1BBTThtb0J5NTJscjgrN01Xa0F4TzhIZG9GQXR1eTNmZWtz?= =?utf-8?B?WmZZVWdpMkNQMlZoQm5PVlZDVWtrWllweDM1dDB0b3NGUU9nZFNNNkp5VnlY?= =?utf-8?B?T3IzZmxrZkpsV1RsNTZkMWlIQm56SkxFOGRLMlh1d0wya0NoS2ZOaHVZejdj?= =?utf-8?B?cGhsOTlXbUFWMlJWTmQrMGNkaGtKZTR1eGFlbmcvUUpZQkJicFhoK3k0M1Zq?= =?utf-8?B?U2ZpUno1REM3cktoL2VKMWhsV0FyOXFiUVFRckZjaUI0SHFGUS91azJyckpS?= =?utf-8?B?ZjNZMUVsVm9PajVZbTA3dThFaHEvTHpTQ3lCWUp0UDI5MTduejVTR0dRWTJH?= =?utf-8?B?cTlzOW05SklwWVIyWmNoc1d2RGplSHdhMmVROEU2d1Fyb1RTUmRSNEpkbUcw?= =?utf-8?B?em9qSTRBZmJhbDVZTlJGNDNHdXdOS1czcE82OTJIalh2VVpSS0hqUVlZenJt?= =?utf-8?B?MldlMkRQSEZuem1DNVdXTmdOY1NMSmQ3dUx0eWdYSzhkZHV1cDFsREpTWTFm?= =?utf-8?B?M0xrajQ5TitWV1BjUHJZNDdQOEhGSnV4YWhiZGJhUGE5RWdaejF3RXh3L2Vs?= =?utf-8?B?Nmp1Y2czTkJDY25vei9uVFJBVE5nRHZub1VZYWhKTGovRmFNTnplSjQ3azd0?= =?utf-8?B?ZDg1UENYUzFQcWlHSXE5TFJUd1hpbGwxS3k0VlMrdlRhb1B1VjBabXYxazFB?= =?utf-8?B?Y3RuM0g1UGcwd0FRbXJqczJSQ05CTWJONG9zamptckM5RFE9PQ==?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_2C1CE07A2FC942788F004613E4966F1Fproofpointcom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CY4PR12MB1782.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: cabcef2a-07b0-46fc-438d-08d94e21d6ec X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jul 2021 21:35:49.5091 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46785c73-1c32-414b-86bc-fae0377cab01 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: lqZQnh+ITjCTt2NM1T6uu8RL3xM1tJtkuyZOLwyaX2QU0+eM88toDjgpxVwUWAqH7nPf3WVjkYn+UvdPN62hUQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR1201MB2549 X-PassedThroughOnPremises: Yes X-OriginatorOrg: proofpoint.com X-Proofpoint-ORIG-GUID: LXLqGqL_PwZm1ShNHI-61uYz4zPd53Qn X-Proofpoint-GUID: LXLqGqL_PwZm1ShNHI-61uYz4zPd53Qn X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.182.1,Aquarius:18.0.790,Hydra:6.0.391,FMLib:17.0.607.475 definitions=2021-07-23_10,2021-07-23_01,2020-04-07_01 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 adultscore=0 spamscore=0 lowpriorityscore=0 phishscore=0 impostorscore=0 suspectscore=0 malwarescore=0 clxscore=1011 mlxlogscore=999 mlxscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2107140000 definitions=main-2107230130 Archived-At: Subject: [Bimi] Independent BIMI-capable Email Client X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Jul 2021 21:35:58 -0000 --_000_2C1CE07A2FC942788F004613E4966F1Fproofpointcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpTaW5jZSBHbWFpbCdzIGFubm91bmNlbWVudCwgbW9yZSBjb21wYW5pZXMgYXJlIHN0YXJ0aW5n IHRvIHBsYXkgYXJvdW5kIHdpdGggQklNSSAobm8gc3VycHJpc2UgdGhlcmUpLiAgQW5kLCBhcyBl eHBlY3RlZCwgdGhlIGluY3JlYXNlZCBhdHRlbnRpb24gaXMgaGVscGluZyB0byBwdXQgbW9yZSBl eWViYWxscyBvbiB0aGUgZXhwZXJpbWVudC4NCg0KQW5kIHdoaWxlIHNvbWUgb2YgdGhlIG1ham9y IG1haWxib3ggcHJvdmlkZXJzIGFyZSBhZGRpbmcgQklNSSBzdXBwb3J0IHRvIHRoZWlyIG93biBt b2JpbGUgY2xpZW50cywgSSByYW4gaW50byBhIEZPU1MgcHJvamVjdCBydW4gYnkgYSBkZXZlbG9w ZXIgaW4gdGhlIE5ldGhlcmxhbmRzIHdobyBoYXMgYWxyZWFkeSBhZGRlZCBCSU1JIHRvIHRoZWly IGluZGVwZW5kZW50IG1vYmlsZSBtYWlsIGNsaWVudC4NCg0KSWYgeW91IGdldCBhIGNoYW5jZSwg SSdkIHN1Z2dlc3QgdGFraW5nIGEgbG9vayBhdCB0aGVpciBGYWlyRW1haWwgaW1wbGVtZW50YXRp b24gYXMgdGhleSBtYWRlIHNvbWUgaW50ZXJlc3RpbmcgY2hvaWNlczoNCg0KaHR0cHM6Ly9lbWFp bC5mYWlyY29kZS5ldS8NCg0KVGhlIGN1cnJlbnQgQW5kcm9pZCBjbGllbnQgcGFja2FnZSBjYW4g YmUgZG93bmxvYWRlZCBmcm9tIHRoZWlyIEdpdEh1YiByZXBvc2l0b3J5Og0KDQpodHRwczovL2dp dGh1Yi5jb20vTTY2Qi9GYWlyRW1haWwvcmVsZWFzZXMNCg0KDQpTbyBmYXIsIHRoZXkndmUgYWxy ZWFkeSBmb3VuZCBzb21lIHVzZWZ1bCByZXN1bHRzIGZyb20gdGhlaXIgZXhwZXJpbWVudC4gIEFu ZCBub3cgd2UncmUgZmluYWxseSBhdCBhIHBvaW50IHdoZXJlIHdlIGNhbiB0ZXN0IHRoZSBhcmNo aXRlY3R1cmUgKGFuZCBwcmVzc3VyZS10ZXN0IHRoZSBzcGVjaWZpY2F0aW9ucykgYmV5b25kIHRo ZSBoYW5kZnVsIG9mIHVzdWFsIHN1c3BlY3RzLg0KDQpGb3IgZXhhbXBsZSwgaGVyZSdyZSBhIGZl dyBpc3N1ZXMgdGhpcyB3b3JrIGFzIGFscmVhZHkgc3VyZmFjZWQgd2hlbiBpbnRlcnByZXRpbmcg dGhlIHNwZWNpZmljYXRpb25zIFsxXSBbMl0gWzNdOg0KDQoNCiAgKiAgIFRoZXkgYXJlbid0IGVu dGlyZWx5IGNsZWFyIG9uIGhvdyAob3Igd2h5KSB0byBldmFsdWF0ZSBhIGxvZ28gcmVmZXJlbmNl ZCBieSB0aGUgQklNSSByZWNvcmQgYW5kIHRoZSBvbmUgcmV0cmlldmVkIGZyb20gYSBWTUMuDQog ICogICBJdCdzIGFsc28gbm90IGFsbCB0aGF0IGNsZWFyIHdoZXJlIHRvIHJldHJpZXZlIHRoZSBC SU1JIGxvZ28gd2hlbiB0aGUgZW1haWwgaXMgc2VudCBmcm9tIGEgc3ViZG9tYWluLCBhbmQgbWF0 Y2ggdGhhdCB1cCB3aXRoIHRoZSBETUFSQyByZXN1bHRzLg0KICAqICAgVGhlcmUncyBhbHNvIHRo ZSBxdWVzdGlvbiBhYm91dCB3aGV0aGVyIG9yIG5vdCBhbiBpbmRlcGVuZGVudCBjbGllbnQgY2Fu L3Nob3VsZCB0cnVzdCB0aGUgYXV0aGVudGljYXRpb24gcmVzdWx0cyBwZXJmb3JtZWQgYnkgdGhl IG1haWxib3ggcHJvdmlkZXIgd2hlbiBkZWNpZGluZyB0byBkaXNwbGF5IHRoZSBCSU1JIGxvZ28u DQogICogICBUaGVyZSBpcyBhIG5vbi16ZXJvIGFkZGl0aW9uIG9mIHByb2Nlc3NpbmcgcmVxdWly ZWQgYnkgdGhlIGNsaWVudCB0byBoYW5kbGUgQklNSSwgbGVhZGluZyB0byB0aGUgcXVlc3Rpb24g YWJvdXQgd2hhdCBpbXBhY3QgdGhpcyBtYXkgaGF2ZSBvbiBhIGNsaWVudC4uLiBhbmQgd2hhdCBl ZmZpY2llbmNpZXMgY2FuIGJlIGludHJvZHVjZWQgd2l0aCBsb2NhbCBjYWNoaW5nIChpZiBhbnkp Lg0KDQpXaGF0IEkgZm91bmQgbW9zdCBpbnRlcmVzdGluZyB3YXMgaG93IHRoZSBzcGVjaWZpY2F0 aW9ucyBhc3N1bWUgYSB0aWdodCBjb3VwbGluZyBiZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHRoZSBt YWlsYm94IHByb3ZpZGVyLiAgSXQgZGVmaW5pdGVseSBvcGVucyB0aGUgcXVlc3Rpb24gb2Ygd2hl dGhlciBpdCdzIHBvc3NpYmxlIChvciByZWNvbW1lbmRlZCkgZm9yIGFuIGluZGVwZW5kZW50IGNs aWVudCB0byBzdXBwb3J0IEJJTUkgZXZlbiBmb3IgZW1haWwgcmVjZWl2ZWQgYnkgbWFpbGJveCBw cm92aWRlcnMgdGhhdCBkb24ndCBzdXBwb3J0IGl0LiAgSXQncyByZWFsLXdvcmxkIGludGVyb3Ag dGVzdGluZyBsaWtlIHRoaXMgdGhhdCBJIGhvcGUgd2lsbCBoaWdobGlnaHQgaXNzdWVzIHRoYXQg bmVlZCB0byBiZSBkaXNjdXNzZWQgYXMgdGhlIGV4cGVyaW1lbnQgY29udGludWVzLg0KDQpBbHNv LCBpZiBhbnlvbmUgd291bGQgYmUgd2lsbGluZyB0byB0ZXN0IHRoZSBGYWlyRW1haWwgY2xpZW50 LCBJJ2QgYmUga2VlbiB0byBoZWFyIGlmIHlvdSB0aGluayB0aGF0IHRoZSB3YXkgaXQgbGV2ZXJh Z2VzIEJJTUkgbWF0Y2hlcyB5b3VyIGV4cGVjdGF0aW9ucy4gIEFsc28sIGFyZSB0aGVyZSBhbnkg b3RoZXJzIG91dCB0aGVyZSB0aGF0IG1pZ2h0IGNvbnRyaWJ1dGUgdGhlaXIgbGVhcm5pbmdzIHRv IHRoZSBjb252ZXJzYXRpb24/DQoNCkFueXdheSwgdGhhbmtzIGZvciBhbnkgZmVlZGJhY2sgeW91 IG1heSBoYXZlLiAgSXQnbGwgYmUgdXNlZnVsIHRvIGhhc2ggb3V0IGlkZWFzIGZvciBpbXByb3Zl bWVudHMgYW5kIG5leHQgc3RlcHMgb24gdGhlIGxpc3QuDQoNCkNoZWVycywNClRyZW50DQoNClsx XSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWJsYW5rLWlldGYt YmltaS0wMg0KWzJdIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQt ZmV0Y2gtdmFsaWRhdGlvbi12bWMtd2NodWFuZy0wMA0KWzNdIGh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtYnJvdG1hbi1pZXRmLWJpbWktZ3VpZGFuY2UtMDMNCg0K DQotLQ0KSi4gVHJlbnQgQWRhbXMNCkRpcmVjdG9yLCBFY29zeXN0ZW0gU2VjdXJpdHkNClByb29m cG9pbnQNCg0KdGFkYW1zQHByb29mcG9pbnQuY29tDQoNCg== --_000_2C1CE07A2FC942788F004613E4966F1Fproofpointcom_ Content-Type: text/html; charset="utf-8" Content-ID: <44E3F9F84A70384D8B42AFCCBD491821@namprd12.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp Zjt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0 UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCglt YXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47 DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXpl OjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlz dCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTc3NTkwMDUyMTsNCglt c28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTE3NTkyMDM1MzYg Njc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2 OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBs MDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5n czt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFt aWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglm b250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNw0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0K CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGww OmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyI7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZh bWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2lu LWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBs aW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3Jk Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlNpbmNl IEdtYWlsJ3MgYW5ub3VuY2VtZW50LCBtb3JlIGNvbXBhbmllcyBhcmUgc3RhcnRpbmcgdG8gcGxh eSBhcm91bmQgd2l0aCBCSU1JIChubyBzdXJwcmlzZSB0aGVyZSkuJm5ic3A7IEFuZCwgYXMgZXhw ZWN0ZWQsIHRoZSBpbmNyZWFzZWQgYXR0ZW50aW9uIGlzIGhlbHBpbmcgdG8gcHV0IG1vcmUgZXll YmFsbHMgb24gdGhlIGV4cGVyaW1lbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5BbmQgd2hpbGUgc29tZSBvZiB0aGUgbWFqb3IgbWFpbGJveCBwcm92aWRlcnMg YXJlIGFkZGluZyBCSU1JIHN1cHBvcnQgdG8gdGhlaXIgb3duIG1vYmlsZSBjbGllbnRzLCBJIHJh biBpbnRvIGEgRk9TUyBwcm9qZWN0IHJ1biBieSBhIGRldmVsb3BlciBpbiB0aGUgTmV0aGVybGFu ZHMgd2hvIGhhcyBhbHJlYWR5IGFkZGVkIEJJTUkgdG8gdGhlaXIgaW5kZXBlbmRlbnQNCiBtb2Jp bGUgbWFpbCBjbGllbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5JZiB5b3UgZ2V0IGEgY2hhbmNlLCBJJ2Qgc3VnZ2VzdCB0YWtpbmcgYSBsb29rIGF0IHRoZWly IEZhaXJFbWFpbCBpbXBsZW1lbnRhdGlvbiBhcyB0aGV5IG1hZGUgc29tZSBpbnRlcmVzdGluZyBj aG9pY2VzOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+aHR0cHM6 Ly9lbWFpbC5mYWlyY29kZS5ldS88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPlRoZSBjdXJyZW50IEFuZHJvaWQgY2xpZW50IHBhY2thZ2UgY2FuIGJlIGRvd25sb2Fk ZWQgZnJvbSB0aGVpciBHaXRIdWIgcmVwb3NpdG9yeTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPmh0dHBzOi8vZ2l0aHViLmNvbS9NNjZCL0ZhaXJFbWFpbC9yZWxl YXNlczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPlNvIGZhciwgdGhleSd2ZSBhbHJlYWR5IGZvdW5kIHNvbWUgdXNlZnVs IHJlc3VsdHMgZnJvbSB0aGVpciBleHBlcmltZW50LiZuYnNwOyBBbmQgbm93IHdlJ3JlIGZpbmFs bHkgYXQgYSBwb2ludCB3aGVyZSB3ZSBjYW4gdGVzdCB0aGUgYXJjaGl0ZWN0dXJlIChhbmQgcHJl c3N1cmUtdGVzdCB0aGUgc3BlY2lmaWNhdGlvbnMpIGJleW9uZCB0aGUgaGFuZGZ1bCBvZiB1c3Vh bA0KIHN1c3BlY3RzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ Rm9yIGV4YW1wbGUsIGhlcmUncmUgYSBmZXcgaXNzdWVzIHRoaXMgd29yayBhcyBhbHJlYWR5IHN1 cmZhY2VkIHdoZW4gaW50ZXJwcmV0aW5nIHRoZSBzcGVjaWZpY2F0aW9ucyBbMV0gWzJdIFszXTo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHVsIHN0eWxl PSJtYXJnaW4tdG9wOjBpbiIgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3Jh cGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGV5IGFyZW4ndCBlbnRpcmVseSBjbGVhciBvbiBo b3cgKG9yIHdoeSkgdG8gZXZhbHVhdGUgYSBsb2dvIHJlZmVyZW5jZWQgYnkgdGhlIEJJTUkgcmVj b3JkIGFuZCB0aGUgb25lIHJldHJpZXZlZCBmcm9tIGEgVk1DLjxvOnA+PC9vOnA+PC9zcGFuPjwv bGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21z by1saXN0OmwwIGxldmVsMSBsZm8xIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+SXQn cyBhbHNvIG5vdCBhbGwgdGhhdCBjbGVhciB3aGVyZSB0byByZXRyaWV2ZSB0aGUgQklNSSBsb2dv IHdoZW4gdGhlIGVtYWlsIGlzIHNlbnQgZnJvbSBhIHN1YmRvbWFpbiwgYW5kIG1hdGNoIHRoYXQg dXAgd2l0aCB0aGUgRE1BUkMgcmVzdWx0cy48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjxsaSBjbGFz cz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBs ZXZlbDEgbGZvMSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoZXJlJ3MgYWxzbyB0 aGUgcXVlc3Rpb24gYWJvdXQgd2hldGhlciBvciBub3QgYW4gaW5kZXBlbmRlbnQgY2xpZW50IGNh bi9zaG91bGQgdHJ1c3QgdGhlIGF1dGhlbnRpY2F0aW9uIHJlc3VsdHMgcGVyZm9ybWVkIGJ5IHRo ZSBtYWlsYm94IHByb3ZpZGVyIHdoZW4NCiBkZWNpZGluZyB0byBkaXNwbGF5IHRoZSBCSU1JIGxv Z28uPG86cD48L286cD48L3NwYW4+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0 eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij5UaGVyZSBpcyBhIG5vbi16ZXJvIGFkZGl0aW9uIG9mIHByb2Nl c3NpbmcgcmVxdWlyZWQgYnkgdGhlIGNsaWVudCB0byBoYW5kbGUgQklNSSwgbGVhZGluZyB0byB0 aGUgcXVlc3Rpb24gYWJvdXQgd2hhdCBpbXBhY3QgdGhpcyBtYXkgaGF2ZSBvbiBhIGNsaWVudC4u Lg0KIGFuZCB3aGF0IGVmZmljaWVuY2llcyBjYW4gYmUgaW50cm9kdWNlZCB3aXRoIGxvY2FsIGNh Y2hpbmcgKGlmIGFueSkuPG86cD48L286cD48L3NwYW4+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij5XaGF0IEkgZm91bmQgbW9zdCBpbnRlcmVzdGluZyB3YXMgaG93IHRoZSBzcGVjaWZp Y2F0aW9ucyBhc3N1bWUgYSB0aWdodCBjb3VwbGluZyBiZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHRo ZSBtYWlsYm94IHByb3ZpZGVyLiZuYnNwOyBJdCBkZWZpbml0ZWx5IG9wZW5zIHRoZSBxdWVzdGlv biBvZiB3aGV0aGVyIGl0J3MgcG9zc2libGUgKG9yIHJlY29tbWVuZGVkKSBmb3INCiBhbiBpbmRl cGVuZGVudCBjbGllbnQgdG8gc3VwcG9ydCBCSU1JIGV2ZW4gZm9yIGVtYWlsIHJlY2VpdmVkIGJ5 IG1haWxib3ggcHJvdmlkZXJzIHRoYXQgZG9uJ3Qgc3VwcG9ydCBpdC4mbmJzcDsgSXQncyByZWFs LXdvcmxkIGludGVyb3AgdGVzdGluZyBsaWtlIHRoaXMgdGhhdCBJIGhvcGUgd2lsbCBoaWdobGln aHQgaXNzdWVzIHRoYXQgbmVlZCB0byBiZSBkaXNjdXNzZWQgYXMgdGhlIGV4cGVyaW1lbnQgY29u dGludWVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+QWxzbywg aWYgYW55b25lIHdvdWxkIGJlIHdpbGxpbmcgdG8gdGVzdCB0aGUgRmFpckVtYWlsIGNsaWVudCwg SSdkIGJlIGtlZW4gdG8gaGVhciBpZiB5b3UgdGhpbmsgdGhhdCB0aGUgd2F5IGl0IGxldmVyYWdl cyBCSU1JIG1hdGNoZXMgeW91ciBleHBlY3RhdGlvbnMuJm5ic3A7IEFsc28sIGFyZSB0aGVyZSBh bnkgb3RoZXJzIG91dCB0aGVyZSB0aGF0IG1pZ2h0IGNvbnRyaWJ1dGUNCiB0aGVpciBsZWFybmlu Z3MgdG8gdGhlIGNvbnZlcnNhdGlvbj88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPkFueXdheSwgdGhhbmtzIGZvciBhbnkgZmVlZGJhY2sgeW91IG1heSBoYXZlLiZu YnNwOyBJdCdsbCBiZSB1c2VmdWwgdG8gaGFzaCBvdXQgaWRlYXMgZm9yIGltcHJvdmVtZW50cyBh bmQgbmV4dCBzdGVwcyBvbiB0aGUgbGlzdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VHJlbnQ8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlsxXSBodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9odG1sL2RyYWZ0LWJsYW5rLWlldGYtYmltaS0wMjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5bMl0gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1mZXRjaC12 YWxpZGF0aW9uLXZtYy13Y2h1YW5nLTAwPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlszXSBodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWJyb3RtYW4taWV0Zi1iaW1pLWd1aWRh bmNlLTAzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+LS0mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Si4gVHJlbnQg QWRhbXM8bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGk+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkRpcmVjdG9yLCBFY29zeXN0ZW0gU2VjdXJp dHk8bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Y29sb3I6IzUxNzg4RCI+UHJvb2Zwb2ludDxvOnA+ PC9vOnA+PC9zcGFuPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPnRhZGFtc0Bwcm9vZnBv aW50LmNvbTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_2C1CE07A2FC942788F004613E4966F1Fproofpointcom_-- From nobody Thu Jul 29 12:45:42 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68AC73A1A90; Thu, 29 Jul 2021 12:45:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=comcast.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zYD9XJDBYdwV; Thu, 29 Jul 2021 12:45:26 -0700 (PDT) Received: from mx0b-00143702.pphosted.com (mx0b-00143702.pphosted.com [148.163.141.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C4113A198B; Thu, 29 Jul 2021 12:45:11 -0700 (PDT) Received: from pps.filterd (m0184890.ppops.net [127.0.0.1]) by mx0b-00143702.pphosted.com (8.16.0.43/8.16.0.43) with SMTP id 16TJaoCG011224; Thu, 29 Jul 2021 15:45:09 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=20190412; bh=WQ/G14M0LX55yk0dqyHCQ/c82trHev9wb4Lun+R0l+g=; b=GNnIIdDZ7E7b2sVDgmo8aURlxpTK3g3aVYS0on/8I8m7jW6kg5zLyhMzv0ZB41jMduo0 wWTUEIcUm8n75rX/rJNUenUHPjopuqHqGHI63Semd5tJkgXR63OnH2/VrxW/yzf2p+62 5NJleHPxTVM6tyOSXRd06PoRHlvr2HyOKIOSkiYFXFycnmIQFY86tvDcoyKqT2MD/zJz SuoxhRodV+RUR64yGjg2F1dnN+1GRd9IRNSPFuOraScqaMHdJpaQWb57gpUdJVcCCe1w XBebSQ6QUfqcBNfREhAiFBKL7PB0ZlY7Bf3OCkv3Df8RAvp55PyPo5mFtKVEHTEnIS9i 6A== Received: from copdcexop02.cable.comcast.com (dlppfpt-po-1p.slb.comcast.com [96.99.226.137]) by mx0b-00143702.pphosted.com with ESMTP id 3a3ry0d67a-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 29 Jul 2021 15:45:09 -0400 Received: from copdcexc33.cable.comcast.com (147.191.125.132) by COPDCEXOP02.cable.comcast.com (147.191.124.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.2.858.5; Thu, 29 Jul 2021 12:45:08 -0700 Received: from COPDCEXEDGE01.cable.comcast.com (96.114.158.213) by copdcexc33.cable.comcast.com (147.191.125.132) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2242.12 via Frontend Transport; Thu, 29 Jul 2021 13:45:07 -0600 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (104.47.58.173) by webmail.comcast.com (96.114.158.213) with Microsoft SMTP Server (TLS) id 15.0.1497.23; Thu, 29 Jul 2021 13:45:06 -0600 Received: from MN2PR11MB4351.namprd11.prod.outlook.com (2603:10b6:208:193::31) by MN2PR11MB4742.namprd11.prod.outlook.com (2603:10b6:208:26b::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.21; Thu, 29 Jul 2021 19:45:05 +0000 Received: from MN2PR11MB4351.namprd11.prod.outlook.com ([fe80::cddd:25b1:344d:8818]) by MN2PR11MB4351.namprd11.prod.outlook.com ([fe80::cddd:25b1:344d:8818%5]) with mapi id 15.20.4373.022; Thu, 29 Jul 2021 19:45:04 +0000 From: "Brotman, Alex" To: Trent Adams , "bimi@ietf.org" Thread-Topic: Independent BIMI-capable Email Client Thread-Index: AQHXgAq033cwP/0NfUCQ5FMqvSV4WataXbjQ Date: Thu, 29 Jul 2021 19:45:04 +0000 Message-ID: References: <2C1CE07A-2FC9-4278-8F00-4613E4966F1F@proofpoint.com> In-Reply-To: <2C1CE07A-2FC9-4278-8F00-4613E4966F1F@proofpoint.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none; dmarc.ietf.org; dmarc=none action=none header.from=comcast.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0a08e5b5-4695-44dd-3362-08d952c95ce1 x-ms-traffictypediagnostic: MN2PR11MB4742: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR11MB4351.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(376002)(346002)(136003)(39860400002)(396003)(66476007)(76116006)(66556008)(66446008)(966005)(66946007)(64756008)(110136005)(3480700007)(316002)(478600001)(186003)(52536014)(2906002)(33656002)(8936002)(86362001)(5660300002)(55016002)(71200400001)(6506007)(53546011)(166002)(8676002)(7696005)(122000001)(38070700005)(9686003)(38100700002)(83380400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?TzJMbTJVbTUvTmxoNTdOTFlYbTNmc09PeFdvODhWdFVpM3VKQXRDR2IvcUtC?= =?utf-8?B?VjRvelRRQXd5MnZLN3ZBRkR1Nmdwayt6Q2FZbzJaWXZNanZYQjd6N2hiRSs1?= =?utf-8?B?aFBNamhRNzBEMWNuNlA1RkV1b09iRlRFbngwOUE0NEI2YUp6U3ZHL2VOa0Fr?= =?utf-8?B?VkpXZklmR0I4d3N5NE5vWFdGeVdTc2ptUEVJSlZCNk40MnZ2UkhZRkVYbU84?= =?utf-8?B?UG04M0gxTW9vWWFwZmNSSVp5VUE5WEVWeGllZGg1Q01QQjlMYmNPSjJ0c1Bw?= =?utf-8?B?TmRMd3VuT3lKNldqSGl0Zmlnc3Zxd1Y0YzJHNFhNL0dEb0k3NTVTdktUTXNN?= =?utf-8?B?QXFVUXpYZ3I5NWY3TUpTWXgxbThIK0dLeVFFR2RnelkxM3RlMVlQcm9NdVdQ?= =?utf-8?B?MXRTSWtxTG4yOHpwZGplVlZqOHdqdllkWjJaMWZ3eDZtVWVlVWpkNEE1RTN5?= =?utf-8?B?dlhMdDBacmV2SjRCL0hXb0huQ1hld21xaE9DZEEvajlWV25Ld2VselZINHZ2?= =?utf-8?B?KzBUbWswWXRTMXJzQ1UxdU12ZzR5ZDQ3TkpjWUZqaWVzUS9DZFUxeDNZdWV4?= =?utf-8?B?MDBqMks4MVN3M2o0T29kSXBzaTJPeGhPVVRsb3Z6amtUVkRMOHBMdk9UOWpB?= =?utf-8?B?NXlVbUhZQk9QL1hvUy9iM0hKbURMTnpzMlBhZWRnUnF3N1ZPNzFRQWFsclN4?= =?utf-8?B?YjBUM3JMajcyOHdaM3o5UTRISkZ6R1Q2UVFoTWdGcThTRW02ZWJTTGNKVDBZ?= =?utf-8?B?RUZzcjEyRHdyQ1RvRDVoYk9mejE1RmRrZnJmNDNFWUZ3WHZmVDFLUXdJWWxW?= =?utf-8?B?SHJOOWpBWGhFU0tCWGYzVzRJMWtkaE9LVWp2Y1ltc0hXbUttUEFBMVlUSnBJ?= =?utf-8?B?bEdoYk1RK1NiTXN1ZTNDcWp4SFZpWGpscnVCZ2psQUZpMGJtUVJkMXpLYTlL?= =?utf-8?B?SjVjeGVqNU11MTFCWnlhN21EamI1ZkQ3YUZpTWFZZ3c4by95U3h1b2NiTm15?= =?utf-8?B?MWNxQUQxUUhodWlBSTdNYzRQTEtqY1hLL1FHRmx6SEU3MnNwNUJxR2ZScFVF?= =?utf-8?B?OXRJWEpkYnhUbTJzc25OQWNlRDh2Slp3OHhoam00UWNKTEI0dDg1NDBiejI2?= =?utf-8?B?bHpudnN0R0RGeHJQQ0R4VGdiVkZPa2Z0TkgxNjgveUYzODVXdFNaN1NqWCsv?= =?utf-8?B?WTQzekJFQjJXcnFmZkhEbE1uWHhiYm16Z0EvUHdmN1JSRGd4R3Btay9XNVhy?= =?utf-8?B?RHRyUDZkTGpURjFKaTFIMlB5YUZjYjQwdmVIQzZWeER2N202ck1tMmdwOXlT?= =?utf-8?B?WmVveEJsa1dKWDNJUmZkQW1ST0owTkZ5MWVNVk1vZHlwbWNhT1BpOVg5clBw?= =?utf-8?B?YmhKMjVwQW11K0lWbWFRTnVjVEpkckQzRDZBS2FLQTk0YWk0NkZ6Y3dQNnlq?= =?utf-8?B?RFRpb1NldUJyN00vTVZFUlpnYXVxU2VZNi81aGYzOEs0dmtIeTIwMDFZUmVi?= =?utf-8?B?dFBtRlRKakZHaFBDRXJZOWIxMEhBbjRUQTJMQTRFZ0R0bTc0dElPcDZpQXRJ?= =?utf-8?B?UHJrM2s1NDZod3I3VUJxNXJjM0VQdVh6MjBjNW5UeTNjUXIzKzd1UU54blpu?= =?utf-8?B?RFQ0akt6Zkhlb3Naem00bDZjRi8wSjlBaVhmR2ZnaXJhTlA2Vi9qRm1ZMTJJ?= =?utf-8?B?NHFPUHJNdnZQbVZ4YnUvdzVWMU4rNXRKaGlWN0JwZFNuOGhDWXNMclJzOXMv?= =?utf-8?B?UG5hQmRXVlJ2azRzbTlLWHViaFpUZ084dHR3emZvYnhuTXdmdUxzRWp6SCtk?= =?utf-8?Q?HfHLomC8kVwox87tZhtzCPndbeECcUCUWqp4U=3D?= x-ms-exchange-transport-forked: True arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZlM2yzNlZbbXaqo+6pP/uofkEM5gkdEm7OkKME66aylAmJUMf2KrLp3iUAFgA3NEc5WfsYeM+bs3EpfF/AUucCN4ZWJD75eAK5feRaVxz+xp3aWxkIgQBKZPfDH44P91xX+5QVOdc9T/fLRQy94W2ePoFc8SCmyJLFGewxr5CW26n6bYLOiZ0Z90FRDNj92PJif2VCY8AjfT5XJEGg2kxsxQ55Km76qDZCWwu5Fpnr1VOWoPP5NvLuzO26W8A1xWAVTcZ61i2M2pZRyEkyRmYLSfQLJ05xuoNhsEMRNHLsNxn7W7jeSR6bbLIAsamATyBoTEQfzht0XZ7pugs7s5Yw== arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LEhiwQ49TwCLG5pFM6xCnoWc7q/bauIWX85QwlT7XaY=; b=Ysko1ywkQPg8PirYwgNfEmOrhXEsaHSWFuoja/NGOs+3qYtw+fBQPFbtt4Hq2+OGwI0iis72JpPFd60TXfn3ZZ78rfbE+qKQI0ZqS0gT9xqFe1zMzqgYg7FEFvp/gNubMvYIaltlWDAC9xgLTvLIXNtgGiQfUe1QwQKM74lY5QOhziiMpCbAbTatpQ0jvTLdIkrnVBFlrgVITAkHSId4gLq73NrdK9fl/RuMk5FSRSapmhMscg0AjTAJ11kGoqlxxAzS0hGSBCUIRS38PHWFYm37w8VDofpUGlSfS4nNtPUpdBI+/yOa09xf4SoiURHqFW5nrvPZg5AJku5yGoJQ/g== arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=comcast.com; dmarc=pass action=none header.from=comcast.com; dkim=pass header.d=comcast.com; arc=none x-ms-exchange-crosstenant-authas: Internal x-ms-exchange-crosstenant-authsource: MN2PR11MB4351.namprd11.prod.outlook.com x-ms-exchange-crosstenant-network-message-id: 0a08e5b5-4695-44dd-3362-08d952c95ce1 x-ms-exchange-crosstenant-originalarrivaltime: 29 Jul 2021 19:45:04.7453 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 906aefe9-76a7-4f65-b82d-5ec20775d5aa x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: q8M4HMY8xV3AkNiFPEl1Ffno6f2o9ydAgmOoEFi/Y6MMEShHabGRPNa/aY7Is35MAgWNBn2m93XZ3xrl8fIPPOY8spcaR/U6MIgE3Zqha6U= x-ms-exchange-transport-crosstenantheadersstamped: MN2PR11MB4742 x-originatororg: comcast.com Content-Type: multipart/alternative; boundary="_000_MN2PR11MB43516C9DFBD27BEDCD6B1296F7EB9MN2PR11MB4351namp_" MIME-Version: 1.0 X-CFilter-Loop: Forward AAETWC X-Proofpoint-GUID: oxGpiR8SdYHB_GohfbRUaryPy2U54V6z X-Proofpoint-ORIG-GUID: oxGpiR8SdYHB_GohfbRUaryPy2U54V6z X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.790 definitions=2021-07-29_16:2021-07-29, 2021-07-29 signatures=0 X-Proofpoint-Spam-Reason: safe Archived-At: Subject: Re: [Bimi] Independent BIMI-capable Email Client X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Jul 2021 19:45:39 -0000 --_000_MN2PR11MB43516C9DFBD27BEDCD6B1296F7EB9MN2PR11MB4351namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBkbyBoYXZlIHRoYXQgYXBwLCBidXQgSSBoYXZlbuKAmXQgeWV0IHBvaW50ZWQgaXQgYXQgYSBw bGF0Zm9ybSB1dGlsaXppbmcgQklNSS4gIEnigJlsbCBtYWtlIGEgbm90ZSB0byBnaXZlIGl0IGEg dHJ5Lg0KDQpGcm9tIGJlbG93Og0KDQoNCiAgKiAgIFRoZXkgYXJlbid0IGVudGlyZWx5IGNsZWFy IG9uIGhvdyAob3Igd2h5KSB0byBldmFsdWF0ZSBhIGxvZ28gcmVmZXJlbmNlZCBieSB0aGUgQklN SSByZWNvcmQgYW5kIHRoZSBvbmUgcmV0cmlldmVkIGZyb20gYSBWTUMuDQoNCldoYXQgYWJvdXQg dGhlIEJJTUktTG9jYXRpb24gaGVhZGVyIGluc3RhbmNlLCBpZiBwcmVzZW50PyAoYXNzdW1pbmcg eW91IHdhbnQgdG8gdHJ1c3QgdGhhdCBoZWFkZXIsIGV0YykuICBBZnRlciB0aGF0LCBJ4oCZZCBw cm9iYWJseSB1c2UgdGhlIFZNQyBpZiBwcmVzZW50LiAgU2hvdWxkIHdlIGFkZCBhbiBldmFsdWF0 aW9uIHBhdGggdG8gdGhlIGNvcmUgZG9jdW1lbnQ/DQoNCg0KICAqICAgSXQncyBhbHNvIG5vdCBh bGwgdGhhdCBjbGVhciB3aGVyZSB0byByZXRyaWV2ZSB0aGUgQklNSSBsb2dvIHdoZW4gdGhlIGVt YWlsIGlzIHNlbnQgZnJvbSBhIHN1YmRvbWFpbiwgYW5kIG1hdGNoIHRoYXQgdXAgd2l0aCB0aGUg RE1BUkMgcmVzdWx0cy4NCg0KSeKAmW0gbm90IHN1cmUgSSBmb2xsb3cgdGhlIGlzc3VlIGhlcmUu ICBJcyB0aGVyZSBzb21lIGV4YW1wbGUgdGhhdCBzaG93cyB0aGUgcXVlc3Rpb25hYmxlIHBhdGg/ DQoNCg0KICAqICAgVGhlcmUncyBhbHNvIHRoZSBxdWVzdGlvbiBhYm91dCB3aGV0aGVyIG9yIG5v dCBhbiBpbmRlcGVuZGVudCBjbGllbnQgY2FuL3Nob3VsZCB0cnVzdCB0aGUgYXV0aGVudGljYXRp b24gcmVzdWx0cyBwZXJmb3JtZWQgYnkgdGhlIG1haWxib3ggcHJvdmlkZXIgd2hlbiBkZWNpZGlu ZyB0byBkaXNwbGF5IHRoZSBCSU1JIGxvZ28uDQoNCklmIHlvdSBnbyBiYWNrIHRvIC0wMCBvZiB0 aGUgY29yZSBzcGVjLCB0aGVyZSB3YXMgYW4gSU1BUCBmbGFnIHRoYXQgd2FzIG1lYW50IHRvIGJl IHNldCAoU2VjdGlvbiA4LjYpLiAgVGhhdCB3YXMgcmVtb3ZlZCBpbiAtMDEuICBJIGRvbuKAmXQg cmVjYWxsIHRoZSBqdXN0aWZpY2F0aW9uLCBidXQgbWF5IGhhdmUgaGFkIHRvIGRvIHdpdGggTVVB IHdvcmtsb2FkLiAgU2VlbXMgbGlrZSB0aGUgSU1BUCBmbGFnIGNvdWxkIGJlIHJlaW50cm9kdWNl ZCAoUE9QMyB3b3VsZCBiZSBhbiBpc3N1ZSB0aG91Z2gpLiAgT3IgcGVyaGFwcyBzb21ldGhpbmcg YWtpbiB0byBhIERLSU0gc2lnbmF0dXJlIHNpZ25lZCBieSB0aGUgaW5ib3VuZCBNVEEgdGhhdCBj b3VsZCBiZSB2ZXJpZmllZCBieSB0aGUgTVVBLiAgVGhlIGxhdHRlciBjb3VsZCBwb3RlbnRpYWxs eSBiZSByZXVzZWQgdGhvdWdoPw0KDQoNCiAgKiAgIFRoZXJlIGlzIGEgbm9uLXplcm8gYWRkaXRp b24gb2YgcHJvY2Vzc2luZyByZXF1aXJlZCBieSB0aGUgY2xpZW50IHRvIGhhbmRsZSBCSU1JLCBs ZWFkaW5nIHRvIHRoZSBxdWVzdGlvbiBhYm91dCB3aGF0IGltcGFjdCB0aGlzIG1heSBoYXZlIG9u IGEgY2xpZW50Li4uIGFuZCB3aGF0IGVmZmljaWVuY2llcyBjYW4gYmUgaW50cm9kdWNlZCB3aXRo IGxvY2FsIGNhY2hpbmcgKGlmIGFueSkuDQoNCknigJlkIHRoaW5rIGF0IGxlYXN0IGVxdWl2YWxl bnQgdG8gdGhlIFRUTCBvZiB0aGUgQklNSSBETlMgcmVjb3JkLCBwZXJoYXBzIGV2ZW4gdXAgdG8g dGhlIGV4cGlyYXRpb24gb2YgdGhlIFZNQyAodGhvdWdoIEkgY291bGQgdW5kZXJzdGFuZCB3aGVy ZSBhIGRvbWFpbiBob2xkZXIgY291bGQgcmVmcmVzaCB0aGVpciBWTUMgYW5kIGNoYW5nZSBsb2dv cywgZXRjKS4gIEnigJltIHN1cmUgdGhlcmXigJlzIGEgYmV0dGVyIGFuc3dlciBzb21ld2hlcmUg aW4gYmV0d2Vlbi4NCg0KDQotLQ0KQWxleCBCcm90bWFuDQpTci4gRW5naW5lZXIsIEFudGktQWJ1 c2UgJiBNZXNzYWdpbmcgUG9saWN5DQpDb21jYXN0DQoNCkZyb206IGJpbWkgPGJpbWktYm91bmNl c0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIFRyZW50IEFkYW1zDQpTZW50OiBGcmlkYXksIEp1bHkg MjMsIDIwMjEgNTozNiBQTQ0KVG86IGJpbWlAaWV0Zi5vcmcNClN1YmplY3Q6IFtCaW1pXSBJbmRl cGVuZGVudCBCSU1JLWNhcGFibGUgRW1haWwgQ2xpZW50DQoNCg0KU2luY2UgR21haWwncyBhbm5v dW5jZW1lbnQsIG1vcmUgY29tcGFuaWVzIGFyZSBzdGFydGluZyB0byBwbGF5IGFyb3VuZCB3aXRo IEJJTUkgKG5vIHN1cnByaXNlIHRoZXJlKS4gIEFuZCwgYXMgZXhwZWN0ZWQsIHRoZSBpbmNyZWFz ZWQgYXR0ZW50aW9uIGlzIGhlbHBpbmcgdG8gcHV0IG1vcmUgZXllYmFsbHMgb24gdGhlIGV4cGVy aW1lbnQuDQoNCkFuZCB3aGlsZSBzb21lIG9mIHRoZSBtYWpvciBtYWlsYm94IHByb3ZpZGVycyBh cmUgYWRkaW5nIEJJTUkgc3VwcG9ydCB0byB0aGVpciBvd24gbW9iaWxlIGNsaWVudHMsIEkgcmFu IGludG8gYSBGT1NTIHByb2plY3QgcnVuIGJ5IGEgZGV2ZWxvcGVyIGluIHRoZSBOZXRoZXJsYW5k cyB3aG8gaGFzIGFscmVhZHkgYWRkZWQgQklNSSB0byB0aGVpciBpbmRlcGVuZGVudCBtb2JpbGUg bWFpbCBjbGllbnQuDQoNCklmIHlvdSBnZXQgYSBjaGFuY2UsIEknZCBzdWdnZXN0IHRha2luZyBh IGxvb2sgYXQgdGhlaXIgRmFpckVtYWlsIGltcGxlbWVudGF0aW9uIGFzIHRoZXkgbWFkZSBzb21l IGludGVyZXN0aW5nIGNob2ljZXM6DQoNCmh0dHBzOi8vZW1haWwuZmFpcmNvZGUuZXUvPGh0dHBz Oi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovZW1haWwuZmFpcmNvZGUuZXUvX187ISFDUWwz bWNIWDJBIVVVeUpFTjNfQXkwYWMtVXg5dHhxVm9QRElmblNTbU9UNVMtT0NYampSVmVYSkVFcXJQ UmpHVWcyYV9vRkxKSGZkc0FEZUM0JD4NCg0KVGhlIGN1cnJlbnQgQW5kcm9pZCBjbGllbnQgcGFj a2FnZSBjYW4gYmUgZG93bmxvYWRlZCBmcm9tIHRoZWlyIEdpdEh1YiByZXBvc2l0b3J5Og0KDQpo dHRwczovL2dpdGh1Yi5jb20vTTY2Qi9GYWlyRW1haWwvcmVsZWFzZXM8aHR0cHM6Ly91cmxkZWZl bnNlLmNvbS92My9fX2h0dHBzOi9naXRodWIuY29tL002NkIvRmFpckVtYWlsL3JlbGVhc2VzX187 ISFDUWwzbWNIWDJBIVVVeUpFTjNfQXkwYWMtVXg5dHhxVm9QRElmblNTbU9UNVMtT0NYampSVmVY SkVFcXJQUmpHVWcyYV9vRkxKSGYyZ3duQWo0JD4NCg0KDQpTbyBmYXIsIHRoZXkndmUgYWxyZWFk eSBmb3VuZCBzb21lIHVzZWZ1bCByZXN1bHRzIGZyb20gdGhlaXIgZXhwZXJpbWVudC4gIEFuZCBu b3cgd2UncmUgZmluYWxseSBhdCBhIHBvaW50IHdoZXJlIHdlIGNhbiB0ZXN0IHRoZSBhcmNoaXRl Y3R1cmUgKGFuZCBwcmVzc3VyZS10ZXN0IHRoZSBzcGVjaWZpY2F0aW9ucykgYmV5b25kIHRoZSBo YW5kZnVsIG9mIHVzdWFsIHN1c3BlY3RzLg0KDQpGb3IgZXhhbXBsZSwgaGVyZSdyZSBhIGZldyBp c3N1ZXMgdGhpcyB3b3JrIGFzIGFscmVhZHkgc3VyZmFjZWQgd2hlbiBpbnRlcnByZXRpbmcgdGhl IHNwZWNpZmljYXRpb25zIFsxXSBbMl0gWzNdOg0KDQoNCiAgKiAgIFRoZXkgYXJlbid0IGVudGly ZWx5IGNsZWFyIG9uIGhvdyAob3Igd2h5KSB0byBldmFsdWF0ZSBhIGxvZ28gcmVmZXJlbmNlZCBi eSB0aGUgQklNSSByZWNvcmQgYW5kIHRoZSBvbmUgcmV0cmlldmVkIGZyb20gYSBWTUMuDQogICog ICBJdCdzIGFsc28gbm90IGFsbCB0aGF0IGNsZWFyIHdoZXJlIHRvIHJldHJpZXZlIHRoZSBCSU1J IGxvZ28gd2hlbiB0aGUgZW1haWwgaXMgc2VudCBmcm9tIGEgc3ViZG9tYWluLCBhbmQgbWF0Y2gg dGhhdCB1cCB3aXRoIHRoZSBETUFSQyByZXN1bHRzLg0KICAqICAgVGhlcmUncyBhbHNvIHRoZSBx dWVzdGlvbiBhYm91dCB3aGV0aGVyIG9yIG5vdCBhbiBpbmRlcGVuZGVudCBjbGllbnQgY2FuL3No b3VsZCB0cnVzdCB0aGUgYXV0aGVudGljYXRpb24gcmVzdWx0cyBwZXJmb3JtZWQgYnkgdGhlIG1h aWxib3ggcHJvdmlkZXIgd2hlbiBkZWNpZGluZyB0byBkaXNwbGF5IHRoZSBCSU1JIGxvZ28uDQog ICogICBUaGVyZSBpcyBhIG5vbi16ZXJvIGFkZGl0aW9uIG9mIHByb2Nlc3NpbmcgcmVxdWlyZWQg YnkgdGhlIGNsaWVudCB0byBoYW5kbGUgQklNSSwgbGVhZGluZyB0byB0aGUgcXVlc3Rpb24gYWJv dXQgd2hhdCBpbXBhY3QgdGhpcyBtYXkgaGF2ZSBvbiBhIGNsaWVudC4uLiBhbmQgd2hhdCBlZmZp Y2llbmNpZXMgY2FuIGJlIGludHJvZHVjZWQgd2l0aCBsb2NhbCBjYWNoaW5nIChpZiBhbnkpLg0K DQpXaGF0IEkgZm91bmQgbW9zdCBpbnRlcmVzdGluZyB3YXMgaG93IHRoZSBzcGVjaWZpY2F0aW9u cyBhc3N1bWUgYSB0aWdodCBjb3VwbGluZyBiZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHRoZSBtYWls Ym94IHByb3ZpZGVyLiAgSXQgZGVmaW5pdGVseSBvcGVucyB0aGUgcXVlc3Rpb24gb2Ygd2hldGhl ciBpdCdzIHBvc3NpYmxlIChvciByZWNvbW1lbmRlZCkgZm9yIGFuIGluZGVwZW5kZW50IGNsaWVu dCB0byBzdXBwb3J0IEJJTUkgZXZlbiBmb3IgZW1haWwgcmVjZWl2ZWQgYnkgbWFpbGJveCBwcm92 aWRlcnMgdGhhdCBkb24ndCBzdXBwb3J0IGl0LiAgSXQncyByZWFsLXdvcmxkIGludGVyb3AgdGVz dGluZyBsaWtlIHRoaXMgdGhhdCBJIGhvcGUgd2lsbCBoaWdobGlnaHQgaXNzdWVzIHRoYXQgbmVl ZCB0byBiZSBkaXNjdXNzZWQgYXMgdGhlIGV4cGVyaW1lbnQgY29udGludWVzLg0KDQpBbHNvLCBp ZiBhbnlvbmUgd291bGQgYmUgd2lsbGluZyB0byB0ZXN0IHRoZSBGYWlyRW1haWwgY2xpZW50LCBJ J2QgYmUga2VlbiB0byBoZWFyIGlmIHlvdSB0aGluayB0aGF0IHRoZSB3YXkgaXQgbGV2ZXJhZ2Vz IEJJTUkgbWF0Y2hlcyB5b3VyIGV4cGVjdGF0aW9ucy4gIEFsc28sIGFyZSB0aGVyZSBhbnkgb3Ro ZXJzIG91dCB0aGVyZSB0aGF0IG1pZ2h0IGNvbnRyaWJ1dGUgdGhlaXIgbGVhcm5pbmdzIHRvIHRo ZSBjb252ZXJzYXRpb24/DQoNCkFueXdheSwgdGhhbmtzIGZvciBhbnkgZmVlZGJhY2sgeW91IG1h eSBoYXZlLiAgSXQnbGwgYmUgdXNlZnVsIHRvIGhhc2ggb3V0IGlkZWFzIGZvciBpbXByb3ZlbWVu dHMgYW5kIG5leHQgc3RlcHMgb24gdGhlIGxpc3QuDQoNCkNoZWVycywNClRyZW50DQoNClsxXSBo dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWJsYW5rLWlldGYtYmlt aS0wMjxodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9odG1sL2RyYWZ0LWJsYW5rLWlldGYtYmltaS0wMl9fOyEhQ1FsM21jSFgyQSFVVXlK RU4zX0F5MGFjLVV4OXR4cVZvUERJZm5TU21PVDVTLU9DWGpqUlZlWEpFRXFyUFJqR1VnMmFfb0ZM SkhmVlV5QUJxNCQ+DQpbMl0gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9k cmFmdC1mZXRjaC12YWxpZGF0aW9uLXZtYy13Y2h1YW5nLTAwPGh0dHBzOi8vdXJsZGVmZW5zZS5j b20vdjMvX19odHRwczovZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtZmV0Y2gt dmFsaWRhdGlvbi12bWMtd2NodWFuZy0wMF9fOyEhQ1FsM21jSFgyQSFVVXlKRU4zX0F5MGFjLVV4 OXR4cVZvUERJZm5TU21PVDVTLU9DWGpqUlZlWEpFRXFyUFJqR1VnMmFfb0ZMSkhmSU1abjdaOCQ+ DQpbM10gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1icm90bWFu LWlldGYtYmltaS1ndWlkYW5jZS0wMzxodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6 L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWJyb3RtYW4taWV0Zi1iaW1pLWd1 aWRhbmNlLTAzX187ISFDUWwzbWNIWDJBIVVVeUpFTjNfQXkwYWMtVXg5dHhxVm9QRElmblNTbU9U NVMtT0NYampSVmVYSkVFcXJQUmpHVWcyYV9vRkxKSGZReW9kWGJrJD4NCg0KDQotLQ0KSi4gVHJl bnQgQWRhbXMNCkRpcmVjdG9yLCBFY29zeXN0ZW0gU2VjdXJpdHkNClByb29mcG9pbnQNCg0KdGFk YW1zQHByb29mcG9pbnQuY29tPG1haWx0bzp0YWRhbXNAcHJvb2Zwb2ludC5jb20+DQoNCg== --_000_MN2PR11MB43516C9DFBD27BEDCD6B1296F7EB9MN2PR11MB4351namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCWZvbnQtc2l6ZTox Mi4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNv TGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5 OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRv bTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm Ow0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6 ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7 c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9u cyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6OTA3Njg3OTA5Ow0KCW1zby1saXN0LXRlbXBs YXRlLWlkczo0NjczMjA3NTY7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w Oi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1m b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDMN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZl bDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDps ZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMQ0KCXttc28tbGlzdC1pZDoxNzc1 OTAwNTIxOw0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczot MTc1OTIwMzUzNiA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2 NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMTpsZXZlbDENCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTps ZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXci O30NCkBsaXN0IGwxOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1p bHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3Qg bDE6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6 IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1 bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48 eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwv eG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQg djpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hh cGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIg bGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiIHN0eWxlPSJ3b3JkLXdyYXA6YnJlYWstd29y ZCI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkkgZG8gaGF2ZSB0aGF0IGFwcCwgYnV0IEkgaGF2 ZW7igJl0IHlldCBwb2ludGVkIGl0IGF0IGEgcGxhdGZvcm0gdXRpbGl6aW5nIEJJTUkuJm5ic3A7 IEnigJlsbCBtYWtlIGEgbm90ZSB0byBnaXZlIGl0IGEgdHJ5LjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+RnJvbSBiZWxvdzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgdHlw ZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVm dDowaW47bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij5UaGV5IGFyZW4ndCBlbnRpcmVseSBjbGVhciBvbiBob3cgKG9yIHdoeSkgdG8gZXZhbHVh dGUgYSBsb2dvIHJlZmVyZW5jZWQgYnkgdGhlIEJJTUkgcmVjb3JkIGFuZCB0aGUgb25lIHJldHJp ZXZlZCBmcm9tIGEgVk1DLjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+V2hhdCBhYm91dCB0aGUgQklNSS1Mb2NhdGlvbiBoZWFkZXIgaW5zdGFuY2UsIGlm IHByZXNlbnQ/IChhc3N1bWluZyB5b3Ugd2FudCB0byB0cnVzdCB0aGF0IGhlYWRlciwgZXRjKS4m bmJzcDsgQWZ0ZXIgdGhhdCwgSeKAmWQgcHJvYmFibHkgdXNlIHRoZSBWTUMgaWYgcHJlc2VudC4m bmJzcDsgU2hvdWxkIHdlIGFkZCBhbiBldmFsdWF0aW9uIHBhdGggdG8gdGhlIGNvcmUgZG9jdW1l bnQ/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCBz dHlsZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFy YWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwxIGxldmVsMSBsZm8zIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+SXQncyBhbHNvIG5vdCBhbGwgdGhhdCBjbGVh ciB3aGVyZSB0byByZXRyaWV2ZSB0aGUgQklNSSBsb2dvIHdoZW4gdGhlIGVtYWlsIGlzIHNlbnQg ZnJvbSBhIHN1YmRvbWFpbiwgYW5kIG1hdGNoIHRoYXQgdXAgd2l0aCB0aGUgRE1BUkMgcmVzdWx0 cy48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPknigJlt IG5vdCBzdXJlIEkgZm9sbG93IHRoZSBpc3N1ZSBoZXJlLiZuYnNwOyBJcyB0aGVyZSBzb21lIGV4 YW1wbGUgdGhhdCBzaG93cyB0aGUgcXVlc3Rpb25hYmxlIHBhdGg/PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowaW4i IHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MGluO21zby1saXN0OmwxIGxldmVsMSBsZm8zIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+VGhlcmUncyBhbHNvIHRoZSBxdWVzdGlvbiBhYm91dCB3aGV0aGVyIG9yIG5vdCBh biBpbmRlcGVuZGVudCBjbGllbnQgY2FuL3Nob3VsZCB0cnVzdCB0aGUgYXV0aGVudGljYXRpb24g cmVzdWx0cyBwZXJmb3JtZWQgYnkgdGhlIG1haWxib3ggcHJvdmlkZXIgd2hlbg0KIGRlY2lkaW5n IHRvIGRpc3BsYXkgdGhlIEJJTUkgbG9nby48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPklmIHlvdSBnbyBiYWNrIHRvIC0wMCBvZiB0aGUgY29yZSBzcGVj LCB0aGVyZSB3YXMgYW4gSU1BUCBmbGFnIHRoYXQgd2FzIG1lYW50IHRvIGJlIHNldCAoU2VjdGlv biA4LjYpLiZuYnNwOyBUaGF0IHdhcyByZW1vdmVkIGluIC0wMS4mbmJzcDsgSSBkb27igJl0IHJl Y2FsbCB0aGUganVzdGlmaWNhdGlvbiwgYnV0IG1heSBoYXZlIGhhZCB0byBkbyB3aXRoIE1VQSB3 b3JrbG9hZC4mbmJzcDsNCiBTZWVtcyBsaWtlIHRoZSBJTUFQIGZsYWcgY291bGQgYmUgcmVpbnRy b2R1Y2VkIChQT1AzIHdvdWxkIGJlIGFuIGlzc3VlIHRob3VnaCkuJm5ic3A7IE9yIHBlcmhhcHMg c29tZXRoaW5nIGFraW4gdG8gYSBES0lNIHNpZ25hdHVyZSBzaWduZWQgYnkgdGhlIGluYm91bmQg TVRBIHRoYXQgY291bGQgYmUgdmVyaWZpZWQgYnkgdGhlIE1VQS4mbmJzcDsgVGhlIGxhdHRlciBj b3VsZCBwb3RlbnRpYWxseSBiZSByZXVzZWQgdGhvdWdoPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgc3R5bGU9Im1hcmdpbi10b3A6MGluIiB0eXBl PSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjBpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZvMyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQiPlRoZXJlIGlzIGEgbm9uLXplcm8gYWRkaXRpb24gb2YgcHJvY2Vzc2luZyByZXF1aXJlZCBi eSB0aGUgY2xpZW50IHRvIGhhbmRsZSBCSU1JLCBsZWFkaW5nIHRvIHRoZSBxdWVzdGlvbiBhYm91 dCB3aGF0IGltcGFjdCB0aGlzIG1heSBoYXZlIG9uIGEgY2xpZW50Li4uDQogYW5kIHdoYXQgZWZm aWNpZW5jaWVzIGNhbiBiZSBpbnRyb2R1Y2VkIHdpdGggbG9jYWwgY2FjaGluZyAoaWYgYW55KS48 bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPknigJlkIHRo aW5rIGF0IGxlYXN0IGVxdWl2YWxlbnQgdG8gdGhlIFRUTCBvZiB0aGUgQklNSSBETlMgcmVjb3Jk LCBwZXJoYXBzIGV2ZW4gdXAgdG8gdGhlIGV4cGlyYXRpb24gb2YgdGhlIFZNQyAodGhvdWdoIEkg Y291bGQgdW5kZXJzdGFuZCB3aGVyZSBhIGRvbWFpbiBob2xkZXIgY291bGQgcmVmcmVzaCB0aGVp ciBWTUMgYW5kIGNoYW5nZSBsb2dvcywgZXRjKS4mbmJzcDsNCiBJ4oCZbSBzdXJlIHRoZXJl4oCZ cyBhIGJldHRlciBhbnN3ZXIgc29tZXdoZXJlIGluIGJldHdlZW4uPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi Pi0tPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkFsZXggQnJvdG1hbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Tci4g RW5naW5lZXIsIEFudGktQWJ1c2UgJmFtcDsgTWVzc2FnaW5nIFBvbGljeTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij5Db21jYXN0PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1 ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij4gYmltaSAmbHQ7YmltaS1ib3VuY2VzQGlldGYub3JnJmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwv Yj5UcmVudCBBZGFtczxicj4NCjxiPlNlbnQ6PC9iPiBGcmlkYXksIEp1bHkgMjMsIDIwMjEgNToz NiBQTTxicj4NCjxiPlRvOjwvYj4gYmltaUBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBb QmltaV0gSW5kZXBlbmRlbnQgQklNSS1jYXBhYmxlIEVtYWlsIENsaWVudDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+U2luY2UgR21haWwncyBhbm5vdW5jZW1l bnQsIG1vcmUgY29tcGFuaWVzIGFyZSBzdGFydGluZyB0byBwbGF5IGFyb3VuZCB3aXRoIEJJTUkg KG5vIHN1cnByaXNlIHRoZXJlKS4mbmJzcDsgQW5kLCBhcyBleHBlY3RlZCwgdGhlIGluY3JlYXNl ZCBhdHRlbnRpb24gaXMgaGVscGluZyB0byBwdXQgbW9yZSBleWViYWxscyBvbiB0aGUgZXhwZXJp bWVudC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkFuZCB3aGls ZSBzb21lIG9mIHRoZSBtYWpvciBtYWlsYm94IHByb3ZpZGVycyBhcmUgYWRkaW5nIEJJTUkgc3Vw cG9ydCB0byB0aGVpciBvd24gbW9iaWxlIGNsaWVudHMsIEkgcmFuIGludG8gYSBGT1NTIHByb2pl Y3QgcnVuIGJ5IGEgZGV2ZWxvcGVyIGluIHRoZSBOZXRoZXJsYW5kcyB3aG8gaGFzIGFscmVhZHkg YWRkZWQgQklNSSB0byB0aGVpciBpbmRlcGVuZGVudA0KIG1vYmlsZSBtYWlsIGNsaWVudC48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPklmIHlvdSBnZXQgYSBjaGFu Y2UsIEknZCBzdWdnZXN0IHRha2luZyBhIGxvb2sgYXQgdGhlaXIgRmFpckVtYWlsIGltcGxlbWVu dGF0aW9uIGFzIHRoZXkgbWFkZSBzb21lIGludGVyZXN0aW5nIGNob2ljZXM6PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48YSBocmVmPSJodHRwczovL3VybGRlZmVu c2UuY29tL3YzL19faHR0cHM6L2VtYWlsLmZhaXJjb2RlLmV1L19fOyEhQ1FsM21jSFgyQSFVVXlK RU4zX0F5MGFjLVV4OXR4cVZvUERJZm5TU21PVDVTLU9DWGpqUlZlWEpFRXFyUFJqR1VnMmFfb0ZM SkhmZHNBRGVDNCQiPmh0dHBzOi8vZW1haWwuZmFpcmNvZGUuZXUvPC9hPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhlIGN1cnJlbnQgQW5kcm9pZCBjbGllbnQg cGFja2FnZSBjYW4gYmUgZG93bmxvYWRlZCBmcm9tIHRoZWlyIEdpdEh1YiByZXBvc2l0b3J5Ojxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PGEgaHJlZj0iaHR0cHM6 Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi9naXRodWIuY29tL002NkIvRmFpckVtYWlsL3Jl bGVhc2VzX187ISFDUWwzbWNIWDJBIVVVeUpFTjNfQXkwYWMtVXg5dHhxVm9QRElmblNTbU9UNVMt T0NYampSVmVYSkVFcXJQUmpHVWcyYV9vRkxKSGYyZ3duQWo0JCI+aHR0cHM6Ly9naXRodWIuY29t L002NkIvRmFpckVtYWlsL3JlbGVhc2VzPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlNvIGZhciwgdGhleSd2ZSBh bHJlYWR5IGZvdW5kIHNvbWUgdXNlZnVsIHJlc3VsdHMgZnJvbSB0aGVpciBleHBlcmltZW50LiZu YnNwOyBBbmQgbm93IHdlJ3JlIGZpbmFsbHkgYXQgYSBwb2ludCB3aGVyZSB3ZSBjYW4gdGVzdCB0 aGUgYXJjaGl0ZWN0dXJlIChhbmQgcHJlc3N1cmUtdGVzdCB0aGUgc3BlY2lmaWNhdGlvbnMpIGJl eW9uZCB0aGUgaGFuZGZ1bCBvZiB1c3VhbA0KIHN1c3BlY3RzLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+Rm9yIGV4YW1wbGUsIGhlcmUncmUgYSBmZXcgaXNzdWVz IHRoaXMgd29yayBhcyBhbHJlYWR5IHN1cmZhY2VkIHdoZW4gaW50ZXJwcmV0aW5nIHRoZSBzcGVj aWZpY2F0aW9ucyBbMV0gWzJdIFszXTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgdHlwZT0iZGlzYyI+DQo8 bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxp c3Q6bDEgbGV2ZWwxIGxmbzMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGV5IGFy ZW4ndCBlbnRpcmVseSBjbGVhciBvbiBob3cgKG9yIHdoeSkgdG8gZXZhbHVhdGUgYSBsb2dvIHJl ZmVyZW5jZWQgYnkgdGhlIEJJTUkgcmVjb3JkIGFuZCB0aGUgb25lIHJldHJpZXZlZCBmcm9tIGEg Vk1DLjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwxIGxldmVsMSBsZm8zIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+SXQncyBhbHNvIG5vdCBhbGwgdGhhdCBjbGVhciB3aGVyZSB0 byByZXRyaWV2ZSB0aGUgQklNSSBsb2dvIHdoZW4gdGhlIGVtYWlsIGlzIHNlbnQgZnJvbSBhIHN1 YmRvbWFpbiwgYW5kIG1hdGNoIHRoYXQgdXAgd2l0aCB0aGUgRE1BUkMgcmVzdWx0cy48bzpwPjwv bzpwPjwvc3Bhbj48L2xpPjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjBpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZvMyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPlRoZXJlJ3MgYWxzbyB0aGUgcXVlc3Rpb24gYWJvdXQgd2hldGhlciBvciBub3Qg YW4gaW5kZXBlbmRlbnQgY2xpZW50IGNhbi9zaG91bGQgdHJ1c3QgdGhlIGF1dGhlbnRpY2F0aW9u IHJlc3VsdHMgcGVyZm9ybWVkIGJ5IHRoZSBtYWlsYm94IHByb3ZpZGVyIHdoZW4NCiBkZWNpZGlu ZyB0byBkaXNwbGF5IHRoZSBCSU1JIGxvZ28uPG86cD48L286cD48L3NwYW4+PC9saT48bGkgY2xh c3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDEg bGV2ZWwxIGxmbzMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGVyZSBpcyBhIG5v bi16ZXJvIGFkZGl0aW9uIG9mIHByb2Nlc3NpbmcgcmVxdWlyZWQgYnkgdGhlIGNsaWVudCB0byBo YW5kbGUgQklNSSwgbGVhZGluZyB0byB0aGUgcXVlc3Rpb24gYWJvdXQgd2hhdCBpbXBhY3QgdGhp cyBtYXkgaGF2ZSBvbiBhIGNsaWVudC4uLg0KIGFuZCB3aGF0IGVmZmljaWVuY2llcyBjYW4gYmUg aW50cm9kdWNlZCB3aXRoIGxvY2FsIGNhY2hpbmcgKGlmIGFueSkuPG86cD48L286cD48L3NwYW4+ PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5XaGF0IEkgZm91bmQgbW9zdCBpbnRlcmVz dGluZyB3YXMgaG93IHRoZSBzcGVjaWZpY2F0aW9ucyBhc3N1bWUgYSB0aWdodCBjb3VwbGluZyBi ZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHRoZSBtYWlsYm94IHByb3ZpZGVyLiZuYnNwOyBJdCBkZWZp bml0ZWx5IG9wZW5zIHRoZSBxdWVzdGlvbiBvZiB3aGV0aGVyIGl0J3MgcG9zc2libGUgKG9yIHJl Y29tbWVuZGVkKSBmb3INCiBhbiBpbmRlcGVuZGVudCBjbGllbnQgdG8gc3VwcG9ydCBCSU1JIGV2 ZW4gZm9yIGVtYWlsIHJlY2VpdmVkIGJ5IG1haWxib3ggcHJvdmlkZXJzIHRoYXQgZG9uJ3Qgc3Vw cG9ydCBpdC4mbmJzcDsgSXQncyByZWFsLXdvcmxkIGludGVyb3AgdGVzdGluZyBsaWtlIHRoaXMg dGhhdCBJIGhvcGUgd2lsbCBoaWdobGlnaHQgaXNzdWVzIHRoYXQgbmVlZCB0byBiZSBkaXNjdXNz ZWQgYXMgdGhlIGV4cGVyaW1lbnQgY29udGludWVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+QWxzbywgaWYgYW55b25lIHdvdWxkIGJlIHdpbGxpbmcgdG8gdGVz dCB0aGUgRmFpckVtYWlsIGNsaWVudCwgSSdkIGJlIGtlZW4gdG8gaGVhciBpZiB5b3UgdGhpbmsg dGhhdCB0aGUgd2F5IGl0IGxldmVyYWdlcyBCSU1JIG1hdGNoZXMgeW91ciBleHBlY3RhdGlvbnMu Jm5ic3A7IEFsc28sIGFyZSB0aGVyZSBhbnkgb3RoZXJzIG91dCB0aGVyZSB0aGF0IG1pZ2h0IGNv bnRyaWJ1dGUNCiB0aGVpciBsZWFybmluZ3MgdG8gdGhlIGNvbnZlcnNhdGlvbj88bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkFueXdheSwgdGhhbmtzIGZvciBhbnkg ZmVlZGJhY2sgeW91IG1heSBoYXZlLiZuYnNwOyBJdCdsbCBiZSB1c2VmdWwgdG8gaGFzaCBvdXQg aWRlYXMgZm9yIGltcHJvdmVtZW50cyBhbmQgbmV4dCBzdGVwcyBvbiB0aGUgbGlzdC48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkNoZWVycyw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+VHJlbnQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlsx XSA8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWJsYW5rLWlldGYtYmltaS0wMl9fOyEhQ1FsM21jSFgy QSFVVXlKRU4zX0F5MGFjLVV4OXR4cVZvUERJZm5TU21PVDVTLU9DWGpqUlZlWEpFRXFyUFJqR1Vn MmFfb0ZMSkhmVlV5QUJxNCQiPg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRt bC9kcmFmdC1ibGFuay1pZXRmLWJpbWktMDI8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlsyXSA8YSBo cmVmPSJodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9odG1sL2RyYWZ0LWZldGNoLXZhbGlkYXRpb24tdm1jLXdjaHVhbmctMDBfXzshIUNR bDNtY0hYMkEhVVV5SkVOM19BeTBhYy1VeDl0eHFWb1BESWZuU1NtT1Q1Uy1PQ1hqalJWZVhKRUVx clBSakdVZzJhX29GTEpIZklNWm43WjgkIj4NCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2h0bWwvZHJhZnQtZmV0Y2gtdmFsaWRhdGlvbi12bWMtd2NodWFuZy0wMDwvYT48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+WzNdIDxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRw czovZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtYnJvdG1hbi1pZXRmLWJpbWkt Z3VpZGFuY2UtMDNfXzshIUNRbDNtY0hYMkEhVVV5SkVOM19BeTBhYy1VeDl0eHFWb1BESWZuU1Nt T1Q1Uy1PQ1hqalJWZVhKRUVxclBSakdVZzJhX29GTEpIZlF5b2RYYmskIj4NCmh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtYnJvdG1hbi1pZXRmLWJpbWktZ3VpZGFu Y2UtMDM8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+LS0mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Si4gVHJl bnQgQWRhbXM8bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkRpcmVjdG9yLCBFY29zeXN0ZW0gU2Vj dXJpdHk8bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Y29sb3I6IzUxNzg4RCI+UHJvb2Zwb2ludDxv OnA+PC9vOnA+PC9zcGFuPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxhIGhyZWY9Im1h aWx0bzp0YWRhbXNAcHJvb2Zwb2ludC5jb20iPnRhZGFtc0Bwcm9vZnBvaW50LmNvbTwvYT48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_MN2PR11MB43516C9DFBD27BEDCD6B1296F7EB9MN2PR11MB4351namp_-- From marcel@bokhorst.biz Fri Jul 30 00:57:59 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E2C33A20E7 for ; Fri, 30 Jul 2021 00:57:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=faircode.eu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tjYvNXycnz8i for ; Fri, 30 Jul 2021 00:57:54 -0700 (PDT) Received: from mail-lj1-x230.google.com (mail-lj1-x230.google.com [IPv6:2a00:1450:4864:20::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6B523A20E5 for ; Fri, 30 Jul 2021 00:57:53 -0700 (PDT) Received: by mail-lj1-x230.google.com with SMTP id l17so11188030ljn.2 for ; Fri, 30 Jul 2021 00:57:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=faircode.eu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=wIoryagWfGUaaGHvJF4r13XrAI0Voa40Eiuk6bTt0fA=; b=AYdQ66TUSS5I7VTapDU57U+OET3q8D6ZWKocJdY7vPVWop5GG2//XR8sdigkDgvXEf pjoqBZI7G4nEGhHZBZ0LMisEFEzYP4gKRUCbCusF323QJy7TgshkpAB0ikFoHgdrr+nD 21S1bKNcf8H3jysbAT6CLKwDAyjsa6xpdBnk5ZoUuZOPZXJT2dlGrNEtQHhmcisfvh46 PwKmazfwPDJxsucGKtPv1pm6clWR6mobhagGJunPxse9UJ6YvUf/6xF+Smhp/QyIGnUC yHxG7oxqwA+dTyE8J/tGBl0N5scR4LWV8akuqsdWJIHyCkBGPTRishFi6Zxxu5gtsF6H pOUQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=wIoryagWfGUaaGHvJF4r13XrAI0Voa40Eiuk6bTt0fA=; b=Y6TGfjMCjlebATcvDPC3DaN9lxcFAqLgBuMtClCj0BKXKuGIXPNWTDVNflXH341N8C VCQQtCDF2df6Msz1kyErkIC9nTimvYqwddVUGs34VBQiQgeIXmU7vDv+9WPyOlt52wFC mOOy/0ovuussC6LSpMW1Ype0SqDkAJkCZmmQ1Hr2gkjOOaStecqLt2CYPYCOHnhGAG38 UsjoU10EzAhqPpvfaLcqcuj5LFpJY/EIBiqalPeFYB1NzgrWLpLDpm9kPUps275BE4Vq FQC3YksJKLPvtpdB9Ff6YelQVsBGqLXtLj1WZSsfcGQLIJcCY4jn9YVUk/BX5ByW+HOq 6bcA== X-Gm-Message-State: AOAM53150YcSQS45ANPpj84HyTnW3fZXerTChM+A5vPPAHiT7gOL2x5h ARtR26ZiCxMv7riZdO7S+NpT21KnT7OynBth2Ee5JAksllI= X-Google-Smtp-Source: ABdhPJyVwWH1JcMLnQI2DXSu9Cho5Eg2SClwjNIybF0zF0GIQew433jOz8eqENwOmpdQ2io5hr4Vfh7WoHeaALnN1PM= X-Received: by 2002:a2e:92c6:: with SMTP id k6mr857448ljh.100.1627631870156; Fri, 30 Jul 2021 00:57:50 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Marcel Bokhorst Date: Fri, 30 Jul 2021 09:57:23 +0200 Message-ID: To: bimi@ietf.org Content-Type: multipart/alternative; boundary="00000000000072328305c8529352" Archived-At: Subject: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jul 2021 08:42:54 -0000 --00000000000072328305c8529352 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable FairEmail will not rely on the BIMI-Location header because this requires support from the email server. Instead, FairEmail will use the logo in the VMC and fallback to the DNS record logo location if needed (logo missing in the VMC, etc). The logo will always be shown, but the verified sender icon (a double check mark before the sender's name) will be shown only when everything checks out. I think it would be a good idea to summarize the steps to follow to fetch/decode/check BIMI because I think it will make it easier for developers to implement BIMI and to do this in the right way. The BIMI TXT record is always being fetched from the top level domain ( example.org). I hope this is correct. An IMAP flag would be nice, but I guess it will take quite some time until all email servers are supporting this. Something like a signed authentication results header would be nice, as long as it can be checked in a simple and efficient way. For example heavy cryptographic operations and looking up DNS records (for certificates, etc) would result in slow downs and increased battery usage when downloading many messages. Currently, the authentication header inserted by the email server is just being trusted, but this relies on either inserting the header by the receiving email server or removing previous headers of intermediate email servers. FairEmail will cache the logo for two weeks, which is the same as for favicons. IMHO this is a reasonable default, preventing logos from being fetched too often and still allowing to change the logo by the sender (which I guess won't happen too often). I hope this clarifies things, else feel free to reply. Marcel Bokhorst (author of FairEmail) ---------- Forwarded message ---------- From: "Brotman, Alex" To: Trent Adams , "bimi@ietf.org"= < bimi@ietf.org> Cc: Bcc: Date: Thu, 29 Jul 2021 19:45:04 +0000 Subject: Re: [Bimi] Independent BIMI-capable Email Client I do have that app, but I haven=E2=80=99t yet pointed it at a platform util= izing BIMI. I=E2=80=99ll make a note to give it a try. >From below: - They aren't entirely clear on how (or why) to evaluate a logo referenced by the BIMI record and the one retrieved from a VMC. What about the BIMI-Location header instance, if present? (assuming you want to trust that header, etc). After that, I=E2=80=99d probably use the = VMC if present. Should we add an evaluation path to the core document? - It's also not all that clear where to retrieve the BIMI logo when the email is sent from a subdomain, and match that up with the DMARC results= . I=E2=80=99m not sure I follow the issue here. Is there some example that s= hows the questionable path? - There's also the question about whether or not an independent client can/should trust the authentication results performed by the mailbox provider when deciding to display the BIMI logo. If you go back to -00 of the core spec, there was an IMAP flag that was meant to be set (Section 8.6). That was removed in -01. I don=E2=80=99t r= ecall the justification, but may have had to do with MUA workload. Seems like the IMAP flag could be reintroduced (POP3 would be an issue though). Or perhaps something akin to a DKIM signature signed by the inbound MTA that could be verified by the MUA. The latter could potentially be reused though? - There is a non-zero addition of processing required by the client to handle BIMI, leading to the question about what impact this may have on = a client... and what efficiencies can be introduced with local caching (if any). I=E2=80=99d think at least equivalent to the TTL of the BIMI DNS record, pe= rhaps even up to the expiration of the VMC (though I could understand where a domain holder could refresh their VMC and change logos, etc). I=E2=80=99m = sure there=E2=80=99s a better answer somewhere in between. -- Alex Brotman Sr. Engineer, Anti-Abuse & Messaging Policy Comcast *From:* bimi *On Behalf Of *Trent Adams *Sent:* Friday, July 23, 2021 5:36 PM *To:* bimi@ietf.org *Subject:* [Bimi] Independent BIMI-capable Email Client Since Gmail's announcement, more companies are starting to play around with BIMI (no surprise there). And, as expected, the increased attention is helping to put more eyeballs on the experiment. And while some of the major mailbox providers are adding BIMI support to their own mobile clients, I ran into a FOSS project run by a developer in the Netherlands who has already added BIMI to their independent mobile mail client. If you get a chance, I'd suggest taking a look at their FairEmail implementation as they made some interesting choices: https://email.faircode.eu/ The current Android client package can be downloaded from their GitHub repository: https://github.com/M66B/FairEmail/releases So far, they've already found some useful results from their experiment. And now we're finally at a point where we can test the architecture (and pressure-test the specifications) beyond the handful of usual suspects. For example, here're a few issues this work as already surfaced when interpreting the specifications [1] [2] [3]: - They aren't entirely clear on how (or why) to evaluate a logo referenced by the BIMI record and the one retrieved from a VMC. - It's also not all that clear where to retrieve the BIMI logo when the email is sent from a subdomain, and match that up with the DMARC results= . - There's also the question about whether or not an independent client can/should trust the authentication results performed by the mailbox provider when deciding to display the BIMI logo. - There is a non-zero addition of processing required by the client to handle BIMI, leading to the question about what impact this may have on = a client... and what efficiencies can be introduced with local caching (if any). What I found most interesting was how the specifications assume a tight coupling between the client and the mailbox provider. It definitely opens the question of whether it's possible (or recommended) for an independent client to support BIMI even for email received by mailbox providers that don't support it. It's real-world interop testing like this that I hope will highlight issues that need to be discussed as the experiment continues= . Also, if anyone would be willing to test the FairEmail client, I'd be keen to hear if you think that the way it leverages BIMI matches your expectations. Also, are there any others out there that might contribute their learnings to the conversation? Anyway, thanks for any feedback you may have. It'll be useful to hash out ideas for improvements and next steps on the list. Cheers, Trent [1] https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02 [2] https://datatracker.ietf.org/doc/html/draft-fetch-validation-vmc-wchuang-00 [3] https://datatracker.ietf.org/doc/html/draft-brotman-ietf-bimi-guidance-03 --=20 *J. Trent Adams* *Director, Ecosystem Security* *Proofpoint* tadams@proofpoint.com bimi mailing list bimi@ietf.org https://www.ietf.org/mailman/listinfo/bimi --00000000000072328305c8529352 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
FairEmail will= not rely on the BIMI-Location header because this requires support from th= e email server. Instead, FairEmail will use the logo in the VMC and fallbac= k to the DNS record logo location if needed (logo missing in the VMC, etc).= The logo will always be shown, but the verified sender icon (a double chec= k mark before the sender's name) will be shown only when everything che= cks out.

I think it would be a good idea to summarize t= he steps to follow to fetch/decode/check BIMI because I think it will make = it easier for developers to implement BIMI and to do this in the right way.=

The BIMI TXT record is always being fetched from the top level doma= in (example.org). I ho= pe this is correct.

An IMAP flag would be nice, but I gu= ess it will take quite some time until all email servers are supporting thi= s. Something like a signed authentication results header would be nice, as = long as it can be checked in a simple and efficient way. For example heavy = cryptographic operations and looking up DNS records (for certificates, etc)= would result in slow downs and increased battery usage when downloading ma= ny messages.

Curr= ently, the authentication header inserted by the email server is just being= trusted, but this relies on either inserting the header by the receiving e= mail server or removing previous headers of intermediate email servers.

FairEmail wil= l cache the logo for two weeks, which is the same as for favicons. IMHO thi= s is a reasonable default, preventing logos from being fetched too often an= d still allowing to change the logo by the sender (which I guess won't = happen too often).

I hope this clarifies things, else feel free to reply.
<= div class=3D"gmail_quote">

<= div class=3D"gmail_attr">Marcel Bokhorst (author of FairEmail)


---------- Forwarded message -= ---------
From:=C2=A0"Brotman, Alex" <Alex_Brotman@comcast.com>To:=C2=A0Trent Adams <tadams=3D40proofpoint.com@dmarc.ietf.org>, &quo= t;bimi@ietf.org"= ; <bimi@ietf.org&= gt;
Cc:=C2=A0
Bcc:=C2=A0
Date:=C2=A0Thu, 29 Jul 2021 19:45:04 +000= 0
Subject:=C2=A0Re: [Bimi] Independent BIMI-capable Email Client

I do have that app,= but I haven=E2=80=99t yet pointed it at a platform utilizing BIMI.=C2=A0 I= =E2=80=99ll make a note to give it a try.

=C2=A0

From below:<= u>

=C2=A0

  • They aren= 9;t entirely clear on how (or why) to evaluate a logo referenced by the BIM= I record and the one retrieved from a VMC.

=C2=A0

What about the BIMI= -Location header instance, if present? (assuming you want to trust that hea= der, etc).=C2=A0 After that, I=E2=80=99d probably use the VMC if present.= =C2=A0 Should we add an evaluation path to the core document?=

=C2=A0

  • It's als= o not all that clear where to retrieve the BIMI logo when the email is sent= from a subdomain, and match that up with the DMARC results.<= /span>

=C2=A0

I=E2=80=99m not sur= e I follow the issue here.=C2=A0 Is there some example that shows the quest= ionable path?

=C2=A0

  • There's = also the question about whether or not an independent client can/should tru= st the authentication results performed by the mailbox provider when deciding to display the BIMI logo.

=C2=A0

If you go back to -= 00 of the core spec, there was an IMAP flag that was meant to be set (Secti= on 8.6).=C2=A0 That was removed in -01.=C2=A0 I don=E2=80=99t recall the ju= stification, but may have had to do with MUA workload.=C2=A0 Seems like the IMAP flag could be reintroduced (POP3 would be an issue tho= ugh).=C2=A0 Or perhaps something akin to a DKIM signature signed by the inb= ound MTA that could be verified by the MUA.=C2=A0 The latter could potentia= lly be reused though?

=C2=A0

  • There is a n= on-zero addition of processing required by the client to handle BIMI, leadi= ng to the question about what impact this may have on a client... and what efficiencies can be introduced with local caching (if any).

=C2=A0

I=E2=80=99d think a= t least equivalent to the TTL of the BIMI DNS record, perhaps even up to th= e expiration of the VMC (though I could understand where a domain holder co= uld refresh their VMC and change logos, etc).=C2=A0 I=E2=80=99m sure there=E2=80=99s a better answer somewhere in between.<= /u>

=C2=A0

=C2=A0

--

Alex Brotman=

Sr. Engineer, Anti-= Abuse & Messaging Policy

Comcast

=C2=A0

From:= bimi <bimi-bounces@ietf.org> On Behalf Of Trent Adams
Sent: Friday, July 23, 2021 5:36 PM
To: bimi@ietf.org=
Subject: [Bimi] Independent BIMI-capable Email Client<= /span>

=C2=A0

=C2=A0

Since Gmail's a= nnouncement, more companies are starting to play around with BIMI (no surpr= ise there).=C2=A0 And, as expected, the increased attention is helping to p= ut more eyeballs on the experiment.

=C2=A0

And while some of t= he major mailbox providers are adding BIMI support to their own mobile clie= nts, I ran into a FOSS project run by a developer in the Netherlands who ha= s already added BIMI to their independent mobile mail client.

=C2=A0

If you get a chance= , I'd suggest taking a look at their FairEmail implementation as they m= ade some interesting choices:

=C2=A0

https://email.faircode.eu/

=C2=A0

The current Android= client package can be downloaded from their GitHub repository:

=C2=A0

https://github.com/M66B/FairEmail/releases=

=C2=A0

=C2=A0

So far, they've= already found some useful results from their experiment.=C2=A0 And now we&= #39;re finally at a point where we can test the architecture (and pressure-= test the specifications) beyond the handful of usual suspects.

=C2=A0

For example, here&#= 39;re a few issues this work as already surfaced when interpreting the spec= ifications [1] [2] [3]:

=C2=A0

  • They aren= 9;t entirely clear on how (or why) to evaluate a logo referenced by the BIM= I record and the one retrieved from a VMC.
  • It's also not a= ll that clear where to retrieve the BIMI logo when the email is sent from a= subdomain, and match that up with the DMARC results.<= /li>
  • There= 9;s also the question about whether or not an independent client can/should= trust the authentication results performed by the mailbox provider when deciding to display the BIMI logo.
  • There is a non-zero additi= on of processing required by the client to handle BIMI, leading to the ques= tion about what impact this may have on a client... and what efficiencies can be introduced with local caching (if any).

=C2=A0

What I found most i= nteresting was how the specifications assume a tight coupling between the c= lient and the mailbox provider.=C2=A0 It definitely opens the question of w= hether it's possible (or recommended) for an independent client to support BIMI even for email received by mailbox p= roviders that don't support it.=C2=A0 It's real-world interop testi= ng like this that I hope will highlight issues that need to be discussed as= the experiment continues.

=C2=A0

Also, if anyone wou= ld be willing to test the FairEmail client, I'd be keen to hear if you = think that the way it leverages BIMI matches your expectations.=C2=A0 Also,= are there any others out there that might contribute their learnings to the conversation?

=C2=A0

Anyway, thanks for = any feedback you may have.=C2=A0 It'll be useful to hash out ideas for = improvements and next steps on the list.

=C2=A0

Cheers,

Trent=

=C2=A0

[1] https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02

[2] https://datatracker.ietf.org/doc/html/draft-fetch-validation-vmc-wchuang-00=

[3] https://datatracker.ietf.org/doc/html/draft-brotman-ietf-bimi-guidance-03

=C2=A0

=C2=A0

--=C2=A0<= /u>

J. Trent Adams

Director, Ecosys= tem Security

Pr= oofpoint

=C2=A0

tadams@proofpoint.com=

=C2=A0

bimi mailing list
bimi@ietf.org
https://www.ietf.org/mailman/listinfo/bimi
--00000000000072328305c8529352-- From nobody Fri Jul 30 06:19:17 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC50F3A29EF for ; Fri, 30 Jul 2021 06:19:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.496 X-Spam-Level: X-Spam-Status: No, score=-1.496 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URI_NOVOWEL=0.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=comcast.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s8DtAB_FyHNu for ; Fri, 30 Jul 2021 06:19:11 -0700 (PDT) Received: from mx0a-00143702.pphosted.com (mx0a-00143702.pphosted.com [148.163.145.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 017E63A29F0 for ; Fri, 30 Jul 2021 06:19:10 -0700 (PDT) Received: from pps.filterd (m0156893.ppops.net [127.0.0.1]) by mx0a-00143702.pphosted.com (8.16.0.43/8.16.0.43) with SMTP id 16UDCtqu019477; Fri, 30 Jul 2021 09:19:09 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=20190412; bh=j/yOxFeDvSIrwMQaOpXxWVAnx0fWpESgaVgjKHHCM88=; b=B7oC6CXMOBeWsqCcFYyrHCz91MbPrH/C4xduTPreUz2JLuJn0NjFG9niobRA357gA90M vE4XZm0ZBo05H8XygLvN9MmiFYiRKBSyxw3E5kHyJZ7kGg0SZ/NT8iXqK+YXsOaAQ3UD xT7gPMt2mnSGFZYF2LbEca3JuQ3+VqwlIttA34cWsQwhoZuxbOiPeoknvv2wKQMtawrO YugwlteEqdA7MKYKSpACra3TmH/HmwU8l76cvtgCjmXwDK8xe2yE2wKt299ppYP3vkmH yXSClf7FKVlS/xCswX+PPkuRJvc8Vywss1hBL2ZXN0t/zJj01RHdnlOEJvUaBhW/7Qvu pw== Received: from pacdcex56.cable.comcast.com (dlppfpt-wc-1p.slb.comcast.com [96.99.226.136]) by mx0a-00143702.pphosted.com with ESMTP id 3a3v1chf29-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 30 Jul 2021 09:19:08 -0400 Received: from PACDCEXOP03.cable.comcast.com (24.40.1.150) by PACDCEX56.cable.comcast.com (24.40.2.155) with Microsoft SMTP Server (TLS) id 15.0.1497.23; Fri, 30 Jul 2021 09:19:07 -0400 Received: from pacdcexedge02.cable.comcast.com (68.87.38.198) by PACDCEXOP03.cable.comcast.com (24.40.1.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.858.5 via Frontend Transport; Fri, 30 Jul 2021 09:19:07 -0400 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (104.47.58.173) by webmail.comcast.com (68.87.38.198) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.858.15; Fri, 30 Jul 2021 09:19:06 -0400 Received: from MN2PR11MB4351.namprd11.prod.outlook.com (2603:10b6:208:193::31) by BL0PR11MB3427.namprd11.prod.outlook.com (2603:10b6:208:7b::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.24; Fri, 30 Jul 2021 13:19:04 +0000 Received: from MN2PR11MB4351.namprd11.prod.outlook.com ([fe80::cddd:25b1:344d:8818]) by MN2PR11MB4351.namprd11.prod.outlook.com ([fe80::cddd:25b1:344d:8818%5]) with mapi id 15.20.4373.022; Fri, 30 Jul 2021 13:19:04 +0000 From: "Brotman, Alex" To: Marcel Bokhorst , "bimi@ietf.org" Thread-Topic: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 Thread-Index: AQHXhR7o//s7Kc4LTkyTzDhbcM2+U6tbfzTw Date: Fri, 30 Jul 2021 13:19:04 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: faircode.eu; dkim=none (message not signed) header.d=none;faircode.eu; dmarc=none action=none header.from=comcast.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 312099c2-9977-429b-89cf-08d9535c9aa0 x-ms-traffictypediagnostic: BL0PR11MB3427: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR11MB4351.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(346002)(396003)(376002)(136003)(366004)(966005)(86362001)(8936002)(9686003)(5660300002)(55016002)(83380400001)(38100700002)(110136005)(478600001)(33656002)(122000001)(76116006)(71200400001)(186003)(52536014)(316002)(166002)(8676002)(7696005)(66946007)(66476007)(2906002)(64756008)(66556008)(38070700005)(53546011)(66446008)(6506007); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?QlY3RTZGZjZKSUx2Q3ZXMFBXeGVNZWJRWEpKMFRKVXRYVysxRndBbWN6Nk4v?= =?utf-8?B?VGJob2t1cEhmZjhtT1U2R3Zua1FFanVaZk0wSDR3aFEvUTFEMUNWaWFIeTZH?= =?utf-8?B?YmUvYmowOGk0dG1NdTlxc3ZqeXJ3aER6SUp4MzVPYTZvWW51RUZhNzdOTSth?= =?utf-8?B?WTVNVTJ0Q2FhMXBrUnNhUlpNOGgxM0lXUkxxMTMvN1h4K3Z5UW9FMXJCUHAr?= =?utf-8?B?NTFDdkJYZ2xYa2k2NStBWWtSVXl6TnhOS0MvWGRld2RibkVqejdCWTNmcHpZ?= =?utf-8?B?UjM1aThKZnE5SisvOWJkSGJyNVJvcnduVFF3U1pwN28xRWUwZnJ5Sm5UcFVN?= =?utf-8?B?cGFVQjVlRGJJUkZLeVl3YmhhNFNXYlJUL2V5L2U2eVVwVmNKSXZ1R0dZZXJs?= =?utf-8?B?Mmhndk5aV1llZHFLVWU0UnAwS2VvY2NHSHVHQzYrSDBUTXFldkN2c3V4VmhY?= =?utf-8?B?WnZyR1NXY2FESzZGc04yUm9PSjFoazBTSEhIenkybTlpVVN0TjFudmRPSG00?= =?utf-8?B?R3hNeXgrV0JhcFRtajA5SmE5Y0hhaWM4bllMR1FxcFhFcytKSnU5b290NTEr?= =?utf-8?B?dW5ISWpFQ1VUK2xENjBKcFRhREt6ZU9qWlJqdnAxMlJKM09XVEk5ckFON2xX?= =?utf-8?B?djdHUmt4UytrVmhtWXJrNDUxeGNiVzlZcm94TUV1OVlMeVNHMFpvMkdicTVV?= =?utf-8?B?SThmNDkrN0xLN3JKSWRzZ3NhaDZRTzRGekJSdkJHQWlNb3ZsRDFzZlJ3Q2RV?= =?utf-8?B?d3FNRzgvZmJubSs4U1JhaG8vV3VLWEFQSjBLMEllVlZYLzRLd3JXa1lYOHR5?= =?utf-8?B?aGtubmh2SzBSbnJJYkozSHRBNFUvWG51d1g3eGVRajBTSURveXdoUVZQTmpJ?= =?utf-8?B?di9hVUgwQURTM0ltOUpiRWsyWGlCVURiSnhvTTM4bWl4UUVjT3Z3OGZ4ejJa?= =?utf-8?B?ekdSdWdwWFpGd09OTmVRRHN2L1U0T2UyY28ybjdITWtRVG1KU1BuRU94Qytu?= =?utf-8?B?TFoxQ1AwQnJjV2w4UVp1andGa0lqZStFVS9TVWtabUVmRndUaUgrYUkrYmcz?= =?utf-8?B?YjFmZFFrN1VXNDJRS0JUS0lqeGpjSTVnS3RYUFI0LzdvR1plaHJKZlhGb0dE?= =?utf-8?B?NVFNZ2NJVU9TNDJOTCtkUm9zR1o0VlJxZ3NENXdCaGhyU3pkUXc1bGxSWitH?= =?utf-8?B?TmdIR2RFSVZadHpoTklab0RPQ3VqYzdaZHFPbVpRb1JOWVpIaEl5YThoeTlU?= =?utf-8?B?SlBCeVd1N2k5RW9zTzdXc1ovTGZtUE5iOFA5M1VibFlnZVdsR1gyWmFaRDJm?= =?utf-8?B?TmVPaEJ1UHgxaHN1b1ZuVzArWk1TSEZJR1JYanV4WS90VG9uT1RBV1F0UXg5?= =?utf-8?B?eWlVQXNBY3d3a01Dd2x2bWIrdFZTMytya29Rc3UrZ1ZmTFpWUHNhWDM3LzF6?= =?utf-8?B?MHZMeHliaFNGeWxNUFp2MDFyVEdnVmNSRDN0ZTZWTURSVllOQnBMWXdQbkNr?= =?utf-8?B?bGs1UnhOTm1HbnpUbUNRODAyc21scVhmcGsvc1pub2dMOXJsMm9naWFJQTFV?= =?utf-8?B?QytDcTRXOVJtcG1WR0NrNmFuRGwxZk9DMTErQ3RtVXRZMnIxYmpZKzV5RVJ6?= =?utf-8?B?TkJGMFFidW4rYzJLZXkrR1FFdFVwU0NNMmg0TUZBOWdvK0lkMHVTdCtYVXlB?= =?utf-8?B?Z0lsT0pZQjUyUStGbzFIY1lxcG5QQU1CUDMwd3c3QUNnQnFWc3RxZHBHaU9Y?= =?utf-8?B?WEtaemRHQ1A5UFpsUmNqWi8rRHdsV3BXYlM1SXNuVk1LV2RxVFZyTWVJUkQ5?= =?utf-8?Q?pYs9Mx47ane07N3n4HxurV63GHdyu3EqfFcsA=3D?= x-ms-exchange-transport-forked: True arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iB7LLZ9DdtX2hdhhdUxbTTC4yIi8A//HPMMsGLMo9FYIi5cr+Tx679PhrR55IeyMG6pamkfo8KTPxkX9u/7jEDoVpu32JxH2gdNW3S39PLh2BatcTIc65dTPiGjIR+StqIu5NJ7cQ3TCsr0tSQRfkoNT+gm+QDW1H+obXVwDI4REPQHK5NcTKyRPo2YFEcwo/PHrSfuARgxGcYKP4NjrcCA+rQmWHlFMjm2vmaa7cLQGHDIcIiH8RRsRAqtZ/D+sADN5R/w54q1MD59xdU5e0J3pJBW3K5iIL2iGg41e1CA6bQmtbpKsMbRUX6jy2pl8ApLi0D/8qpQetBCgWKl8eA== arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=a2UHjXPa5gAqw2M6rrQOjT5PsJ9u20YnQjuAnrTev8A=; b=fk0ijjmSp8SjmZqM0Af0Eyy/RM1KXvdM1oE5W7N9GnrKNk2TbYj4tL2FbD4bnzOgff+OGzSbr6EQo1P9OLFNojoeKV+2eMsgvGAWmbM+EPwMw2BvOTy2nJJd6WXNcWos46h11IofxzskBTZXVoelQj30/HBRCQ1iuXodOQTaVokqRJ1RuRs3ukx5IhOz2q8Q3Tuv5VICJHM+y7/FniTWj9dWQ/n550Le9QqpPJDZvwfI9Fe2aqocxq4DQyvr6/yrlCjVTwwzNWEwAv62R+XDohXtAwAf63SeKerjtBDXPZwVziFRYOB4NjXHTcbCi+gdulOmDEezKLfoJTg9CiEmLw== arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=comcast.com; dmarc=pass action=none header.from=comcast.com; dkim=pass header.d=comcast.com; arc=none x-ms-exchange-crosstenant-authas: Internal x-ms-exchange-crosstenant-authsource: MN2PR11MB4351.namprd11.prod.outlook.com x-ms-exchange-crosstenant-network-message-id: 312099c2-9977-429b-89cf-08d9535c9aa0 x-ms-exchange-crosstenant-originalarrivaltime: 30 Jul 2021 13:19:04.4025 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 906aefe9-76a7-4f65-b82d-5ec20775d5aa x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: sYfo80Y4sKlleI6Lop3VmbXpQkrjPeLS4s+2wbOk0llZYJ4BpHRnJIH3AXOd33m83SgZgp6EV6GpGtTVWKP7VlgrOiSYZkCSM5M+YtIyyoE= x-ms-exchange-transport-crosstenantheadersstamped: BL0PR11MB3427 x-originatororg: comcast.com Content-Type: multipart/alternative; boundary="_000_MN2PR11MB435147F86056FB81D919657EF7EC9MN2PR11MB4351namp_" MIME-Version: 1.0 X-CFilter-Loop: Forward AAETWZ X-Proofpoint-ORIG-GUID: AUCRRhRFaWhqHMv1Ofh8Fu968FEZGL0Z X-Proofpoint-GUID: AUCRRhRFaWhqHMv1Ofh8Fu968FEZGL0Z X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.790 definitions=2021-07-30_05:2021-07-30, 2021-07-30 signatures=0 X-Proofpoint-Spam-Reason: safe Archived-At: Subject: Re: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jul 2021 13:19:16 -0000 --_000_MN2PR11MB435147F86056FB81D919657EF7EC9MN2PR11MB4351namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpDb25zaWRlciDigJxlbWFpbHMueGZpbml0eS5jb23igJ0uICBXZSBkaWRu4oCZdCB3YW50IEJJ TUkgb24g4oCceGZpbml0eS5jb23igJ0sIGJ1dCBqdXN0IHRoYXQgc3ViLWRvbWFpbiAoZm9yIG5v dykuICBUaGVyZSBpcyBubyBCSU1JIHJlY29yZCBhdCDigJx4ZmluaXR5LmNvbeKAnSwgdGhvdWdo IGl0IGRvZXMgZXhpc3QgYXQg4oCcZW1haWxzLnhmaW5pdHkuY29t4oCdLiAgSSBiZWxpZXZlIHRo aXMgaXMgY292ZXJlZCBpbiB0aGUgZHJhZnRzLg0KDQpUaGUgZmxhZyBjb3VsZCBiZSBuaWNlLCBi dXQgYWdhaW4sIHRoYXQgb25seSBjb3ZlcnMgSU1BUC4gIFdoYXQgYWJvdXQgUE9QIChvciBNQVBJ KSB1c2Vycz8gIFRoZSBjcnlwdG9ncmFwaGljIHNvbHV0aW9uIG1heSBiZSBtb3JlIGludGVuc2l2 ZSwgYnV0IHNlZW1zIGxpa2UgaXQgbWF5IG1ha2UgQklNSSBtb3JlIGF2YWlsYWJsZSAoYnV0IHll cywgYXQgdGhlIGV4cGVuc2Ugb2YgbW9iaWxlIENQVSkuDQoNCkNvdWxkIHlvdSBlbGFib3JhdGUg b24gdGhlIOKAnGV2ZXJ5dGhpbmcgY2hlY2tzIG91dOKAnSBmcm9tIHlvdXIgc2VjdGlvbiBhYm91 dCBldmFsdWF0aW9uPw0KDQotLQ0KQWxleCBCcm90bWFuDQpTci4gRW5naW5lZXIsIEFudGktQWJ1 c2UgJiBNZXNzYWdpbmcgUG9saWN5DQpDb21jYXN0DQoNCkZyb206IGJpbWkgPGJpbWktYm91bmNl c0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIE1hcmNlbCBCb2tob3JzdA0KU2VudDogRnJpZGF5LCBK dWx5IDMwLCAyMDIxIDM6NTcgQU0NClRvOiBiaW1pQGlldGYub3JnDQpTdWJqZWN0OiBbQmltaV0g RndkOiBiaW1pIERpZ2VzdCwgVm9sIDEwLCBJc3N1ZSAyDQoNCkZhaXJFbWFpbCB3aWxsIG5vdCBy ZWx5IG9uIHRoZSBCSU1JLUxvY2F0aW9uIGhlYWRlciBiZWNhdXNlIHRoaXMgcmVxdWlyZXMgc3Vw cG9ydCBmcm9tIHRoZSBlbWFpbCBzZXJ2ZXIuIEluc3RlYWQsIEZhaXJFbWFpbCB3aWxsIHVzZSB0 aGUgbG9nbyBpbiB0aGUgVk1DIGFuZCBmYWxsYmFjayB0byB0aGUgRE5TIHJlY29yZCBsb2dvIGxv Y2F0aW9uIGlmIG5lZWRlZCAobG9nbyBtaXNzaW5nIGluIHRoZSBWTUMsIGV0YykuIFRoZSBsb2dv IHdpbGwgYWx3YXlzIGJlIHNob3duLCBidXQgdGhlIHZlcmlmaWVkIHNlbmRlciBpY29uIChhIGRv dWJsZSBjaGVjayBtYXJrIGJlZm9yZSB0aGUgc2VuZGVyJ3MgbmFtZSkgd2lsbCBiZSBzaG93biBv bmx5IHdoZW4gZXZlcnl0aGluZyBjaGVja3Mgb3V0Lg0KDQpJIHRoaW5rIGl0IHdvdWxkIGJlIGEg Z29vZCBpZGVhIHRvIHN1bW1hcml6ZSB0aGUgc3RlcHMgdG8gZm9sbG93IHRvIGZldGNoL2RlY29k ZS9jaGVjayBCSU1JIGJlY2F1c2UgSSB0aGluayBpdCB3aWxsIG1ha2UgaXQgZWFzaWVyIGZvciBk ZXZlbG9wZXJzIHRvIGltcGxlbWVudCBCSU1JIGFuZCB0byBkbyB0aGlzIGluIHRoZSByaWdodCB3 YXkuDQoNClRoZSBCSU1JIFRYVCByZWNvcmQgaXMgYWx3YXlzIGJlaW5nIGZldGNoZWQgZnJvbSB0 aGUgdG9wIGxldmVsIGRvbWFpbiAoZXhhbXBsZS5vcmc8aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92 My9fX2h0dHA6L2V4YW1wbGUub3JnX187ISFDUWwzbWNIWDJBIVFPbGVESXNRT2tqTjNIWGxLckl0 cnE2MmdmNS1HM2hhazhsN2FEUjNSQVg2Z1FxV3FUVlhjTGZJd2NQQTNETVZIU1gyV0drJD4pLiBJ IGhvcGUgdGhpcyBpcyBjb3JyZWN0Lg0KDQpBbiBJTUFQIGZsYWcgd291bGQgYmUgbmljZSwgYnV0 IEkgZ3Vlc3MgaXQgd2lsbCB0YWtlIHF1aXRlIHNvbWUgdGltZSB1bnRpbCBhbGwgZW1haWwgc2Vy dmVycyBhcmUgc3VwcG9ydGluZyB0aGlzLiBTb21ldGhpbmcgbGlrZSBhIHNpZ25lZCBhdXRoZW50 aWNhdGlvbiByZXN1bHRzIGhlYWRlciB3b3VsZCBiZSBuaWNlLCBhcyBsb25nIGFzIGl0IGNhbiBi ZSBjaGVja2VkIGluIGEgc2ltcGxlIGFuZCBlZmZpY2llbnQgd2F5LiBGb3IgZXhhbXBsZSBoZWF2 eSBjcnlwdG9ncmFwaGljIG9wZXJhdGlvbnMgYW5kIGxvb2tpbmcgdXAgRE5TIHJlY29yZHMgKGZv ciBjZXJ0aWZpY2F0ZXMsIGV0Yykgd291bGQgcmVzdWx0IGluIHNsb3cgZG93bnMgYW5kIGluY3Jl YXNlZCBiYXR0ZXJ5IHVzYWdlIHdoZW4gZG93bmxvYWRpbmcgbWFueSBtZXNzYWdlcy4NCg0KQ3Vy cmVudGx5LCB0aGUgYXV0aGVudGljYXRpb24gaGVhZGVyIGluc2VydGVkIGJ5IHRoZSBlbWFpbCBz ZXJ2ZXIgaXMganVzdCBiZWluZyB0cnVzdGVkLCBidXQgdGhpcyByZWxpZXMgb24gZWl0aGVyIGlu c2VydGluZyB0aGUgaGVhZGVyIGJ5IHRoZSByZWNlaXZpbmcgZW1haWwgc2VydmVyIG9yIHJlbW92 aW5nIHByZXZpb3VzIGhlYWRlcnMgb2YgaW50ZXJtZWRpYXRlIGVtYWlsIHNlcnZlcnMuDQoNCkZh aXJFbWFpbCB3aWxsIGNhY2hlIHRoZSBsb2dvIGZvciB0d28gd2Vla3MsIHdoaWNoIGlzIHRoZSBz YW1lIGFzIGZvciBmYXZpY29ucy4gSU1ITyB0aGlzIGlzIGEgcmVhc29uYWJsZSBkZWZhdWx0LCBw cmV2ZW50aW5nIGxvZ29zIGZyb20gYmVpbmcgZmV0Y2hlZCB0b28gb2Z0ZW4gYW5kIHN0aWxsIGFs bG93aW5nIHRvIGNoYW5nZSB0aGUgbG9nbyBieSB0aGUgc2VuZGVyICh3aGljaCBJIGd1ZXNzIHdv bid0IGhhcHBlbiB0b28gb2Z0ZW4pLg0KDQpJIGhvcGUgdGhpcyBjbGFyaWZpZXMgdGhpbmdzLCBl bHNlIGZlZWwgZnJlZSB0byByZXBseS4NCg0KTWFyY2VsIEJva2hvcnN0IChhdXRob3Igb2YgRmFp ckVtYWlsKQ0KDQoNCi0tLS0tLS0tLS0gRm9yd2FyZGVkIG1lc3NhZ2UgLS0tLS0tLS0tLQ0KRnJv bTogIkJyb3RtYW4sIEFsZXgiIDxBbGV4X0Jyb3RtYW5AY29tY2FzdC5jb208bWFpbHRvOkFsZXhf QnJvdG1hbkBjb21jYXN0LmNvbT4+DQpUbzogVHJlbnQgQWRhbXMgPHRhZGFtcz00MHByb29mcG9p bnQuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0MHByb29mcG9pbnQuY29tQGRtYXJjLmlldGYu b3JnPj4sICJiaW1pQGlldGYub3JnPG1haWx0bzpiaW1pQGlldGYub3JnPiIgPGJpbWlAaWV0Zi5v cmc8bWFpbHRvOmJpbWlAaWV0Zi5vcmc+Pg0KQ2M6DQpCY2M6DQpEYXRlOiBUaHUsIDI5IEp1bCAy MDIxIDE5OjQ1OjA0ICswMDAwDQpTdWJqZWN0OiBSZTogW0JpbWldIEluZGVwZW5kZW50IEJJTUkt Y2FwYWJsZSBFbWFpbCBDbGllbnQNCkkgZG8gaGF2ZSB0aGF0IGFwcCwgYnV0IEkgaGF2ZW7igJl0 IHlldCBwb2ludGVkIGl0IGF0IGEgcGxhdGZvcm0gdXRpbGl6aW5nIEJJTUkuICBJ4oCZbGwgbWFr ZSBhIG5vdGUgdG8gZ2l2ZSBpdCBhIHRyeS4NCg0KRnJvbSBiZWxvdzoNCg0KDQogICogICBUaGV5 IGFyZW4ndCBlbnRpcmVseSBjbGVhciBvbiBob3cgKG9yIHdoeSkgdG8gZXZhbHVhdGUgYSBsb2dv IHJlZmVyZW5jZWQgYnkgdGhlIEJJTUkgcmVjb3JkIGFuZCB0aGUgb25lIHJldHJpZXZlZCBmcm9t IGEgVk1DLg0KDQpXaGF0IGFib3V0IHRoZSBCSU1JLUxvY2F0aW9uIGhlYWRlciBpbnN0YW5jZSwg aWYgcHJlc2VudD8gKGFzc3VtaW5nIHlvdSB3YW50IHRvIHRydXN0IHRoYXQgaGVhZGVyLCBldGMp LiAgQWZ0ZXIgdGhhdCwgSeKAmWQgcHJvYmFibHkgdXNlIHRoZSBWTUMgaWYgcHJlc2VudC4gIFNo b3VsZCB3ZSBhZGQgYW4gZXZhbHVhdGlvbiBwYXRoIHRvIHRoZSBjb3JlIGRvY3VtZW50Pw0KDQoN CiAgKiAgIEl0J3MgYWxzbyBub3QgYWxsIHRoYXQgY2xlYXIgd2hlcmUgdG8gcmV0cmlldmUgdGhl IEJJTUkgbG9nbyB3aGVuIHRoZSBlbWFpbCBpcyBzZW50IGZyb20gYSBzdWJkb21haW4sIGFuZCBt YXRjaCB0aGF0IHVwIHdpdGggdGhlIERNQVJDIHJlc3VsdHMuDQoNCknigJltIG5vdCBzdXJlIEkg Zm9sbG93IHRoZSBpc3N1ZSBoZXJlLiAgSXMgdGhlcmUgc29tZSBleGFtcGxlIHRoYXQgc2hvd3Mg dGhlIHF1ZXN0aW9uYWJsZSBwYXRoPw0KDQoNCiAgKiAgIFRoZXJlJ3MgYWxzbyB0aGUgcXVlc3Rp b24gYWJvdXQgd2hldGhlciBvciBub3QgYW4gaW5kZXBlbmRlbnQgY2xpZW50IGNhbi9zaG91bGQg dHJ1c3QgdGhlIGF1dGhlbnRpY2F0aW9uIHJlc3VsdHMgcGVyZm9ybWVkIGJ5IHRoZSBtYWlsYm94 IHByb3ZpZGVyIHdoZW4gZGVjaWRpbmcgdG8gZGlzcGxheSB0aGUgQklNSSBsb2dvLg0KDQpJZiB5 b3UgZ28gYmFjayB0byAtMDAgb2YgdGhlIGNvcmUgc3BlYywgdGhlcmUgd2FzIGFuIElNQVAgZmxh ZyB0aGF0IHdhcyBtZWFudCB0byBiZSBzZXQgKFNlY3Rpb24gOC42KS4gIFRoYXQgd2FzIHJlbW92 ZWQgaW4gLTAxLiAgSSBkb27igJl0IHJlY2FsbCB0aGUganVzdGlmaWNhdGlvbiwgYnV0IG1heSBo YXZlIGhhZCB0byBkbyB3aXRoIE1VQSB3b3JrbG9hZC4gIFNlZW1zIGxpa2UgdGhlIElNQVAgZmxh ZyBjb3VsZCBiZSByZWludHJvZHVjZWQgKFBPUDMgd291bGQgYmUgYW4gaXNzdWUgdGhvdWdoKS4g IE9yIHBlcmhhcHMgc29tZXRoaW5nIGFraW4gdG8gYSBES0lNIHNpZ25hdHVyZSBzaWduZWQgYnkg dGhlIGluYm91bmQgTVRBIHRoYXQgY291bGQgYmUgdmVyaWZpZWQgYnkgdGhlIE1VQS4gIFRoZSBs YXR0ZXIgY291bGQgcG90ZW50aWFsbHkgYmUgcmV1c2VkIHRob3VnaD8NCg0KDQogICogICBUaGVy ZSBpcyBhIG5vbi16ZXJvIGFkZGl0aW9uIG9mIHByb2Nlc3NpbmcgcmVxdWlyZWQgYnkgdGhlIGNs aWVudCB0byBoYW5kbGUgQklNSSwgbGVhZGluZyB0byB0aGUgcXVlc3Rpb24gYWJvdXQgd2hhdCBp bXBhY3QgdGhpcyBtYXkgaGF2ZSBvbiBhIGNsaWVudC4uLiBhbmQgd2hhdCBlZmZpY2llbmNpZXMg Y2FuIGJlIGludHJvZHVjZWQgd2l0aCBsb2NhbCBjYWNoaW5nIChpZiBhbnkpLg0KDQpJ4oCZZCB0 aGluayBhdCBsZWFzdCBlcXVpdmFsZW50IHRvIHRoZSBUVEwgb2YgdGhlIEJJTUkgRE5TIHJlY29y ZCwgcGVyaGFwcyBldmVuIHVwIHRvIHRoZSBleHBpcmF0aW9uIG9mIHRoZSBWTUMgKHRob3VnaCBJ IGNvdWxkIHVuZGVyc3RhbmQgd2hlcmUgYSBkb21haW4gaG9sZGVyIGNvdWxkIHJlZnJlc2ggdGhl aXIgVk1DIGFuZCBjaGFuZ2UgbG9nb3MsIGV0YykuICBJ4oCZbSBzdXJlIHRoZXJl4oCZcyBhIGJl dHRlciBhbnN3ZXIgc29tZXdoZXJlIGluIGJldHdlZW4uDQoNCg0KLS0NCkFsZXggQnJvdG1hbg0K U3IuIEVuZ2luZWVyLCBBbnRpLUFidXNlICYgTWVzc2FnaW5nIFBvbGljeQ0KQ29tY2FzdA0KDQpG cm9tOiBiaW1pIDxiaW1pLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmJpbWktYm91bmNlc0BpZXRm Lm9yZz4+IE9uIEJlaGFsZiBPZiBUcmVudCBBZGFtcw0KU2VudDogRnJpZGF5LCBKdWx5IDIzLCAy MDIxIDU6MzYgUE0NClRvOiBiaW1pQGlldGYub3JnPG1haWx0bzpiaW1pQGlldGYub3JnPg0KU3Vi amVjdDogW0JpbWldIEluZGVwZW5kZW50IEJJTUktY2FwYWJsZSBFbWFpbCBDbGllbnQNCg0KDQpT aW5jZSBHbWFpbCdzIGFubm91bmNlbWVudCwgbW9yZSBjb21wYW5pZXMgYXJlIHN0YXJ0aW5nIHRv IHBsYXkgYXJvdW5kIHdpdGggQklNSSAobm8gc3VycHJpc2UgdGhlcmUpLiAgQW5kLCBhcyBleHBl Y3RlZCwgdGhlIGluY3JlYXNlZCBhdHRlbnRpb24gaXMgaGVscGluZyB0byBwdXQgbW9yZSBleWVi YWxscyBvbiB0aGUgZXhwZXJpbWVudC4NCg0KQW5kIHdoaWxlIHNvbWUgb2YgdGhlIG1ham9yIG1h aWxib3ggcHJvdmlkZXJzIGFyZSBhZGRpbmcgQklNSSBzdXBwb3J0IHRvIHRoZWlyIG93biBtb2Jp bGUgY2xpZW50cywgSSByYW4gaW50byBhIEZPU1MgcHJvamVjdCBydW4gYnkgYSBkZXZlbG9wZXIg aW4gdGhlIE5ldGhlcmxhbmRzIHdobyBoYXMgYWxyZWFkeSBhZGRlZCBCSU1JIHRvIHRoZWlyIGlu ZGVwZW5kZW50IG1vYmlsZSBtYWlsIGNsaWVudC4NCg0KSWYgeW91IGdldCBhIGNoYW5jZSwgSSdk IHN1Z2dlc3QgdGFraW5nIGEgbG9vayBhdCB0aGVpciBGYWlyRW1haWwgaW1wbGVtZW50YXRpb24g YXMgdGhleSBtYWRlIHNvbWUgaW50ZXJlc3RpbmcgY2hvaWNlczoNCg0KaHR0cHM6Ly9lbWFpbC5m YWlyY29kZS5ldS88aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi9lbWFpbC5mYWly Y29kZS5ldS9fXzshIUNRbDNtY0hYMkEhVVV5SkVOM19BeTBhYy1VeDl0eHFWb1BESWZuU1NtT1Q1 Uy1PQ1hqalJWZVhKRUVxclBSakdVZzJhX29GTEpIZmRzQURlQzQkPg0KDQpUaGUgY3VycmVudCBB bmRyb2lkIGNsaWVudCBwYWNrYWdlIGNhbiBiZSBkb3dubG9hZGVkIGZyb20gdGhlaXIgR2l0SHVi IHJlcG9zaXRvcnk6DQoNCmh0dHBzOi8vZ2l0aHViLmNvbS9NNjZCL0ZhaXJFbWFpbC9yZWxlYXNl czxodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2dpdGh1Yi5jb20vTTY2Qi9GYWly RW1haWwvcmVsZWFzZXNfXzshIUNRbDNtY0hYMkEhVVV5SkVOM19BeTBhYy1VeDl0eHFWb1BESWZu U1NtT1Q1Uy1PQ1hqalJWZVhKRUVxclBSakdVZzJhX29GTEpIZjJnd25BajQkPg0KDQoNClNvIGZh ciwgdGhleSd2ZSBhbHJlYWR5IGZvdW5kIHNvbWUgdXNlZnVsIHJlc3VsdHMgZnJvbSB0aGVpciBl eHBlcmltZW50LiAgQW5kIG5vdyB3ZSdyZSBmaW5hbGx5IGF0IGEgcG9pbnQgd2hlcmUgd2UgY2Fu IHRlc3QgdGhlIGFyY2hpdGVjdHVyZSAoYW5kIHByZXNzdXJlLXRlc3QgdGhlIHNwZWNpZmljYXRp b25zKSBiZXlvbmQgdGhlIGhhbmRmdWwgb2YgdXN1YWwgc3VzcGVjdHMuDQoNCkZvciBleGFtcGxl LCBoZXJlJ3JlIGEgZmV3IGlzc3VlcyB0aGlzIHdvcmsgYXMgYWxyZWFkeSBzdXJmYWNlZCB3aGVu IGludGVycHJldGluZyB0aGUgc3BlY2lmaWNhdGlvbnMgWzFdIFsyXSBbM106DQoNCg0KICAqICAg VGhleSBhcmVuJ3QgZW50aXJlbHkgY2xlYXIgb24gaG93IChvciB3aHkpIHRvIGV2YWx1YXRlIGEg bG9nbyByZWZlcmVuY2VkIGJ5IHRoZSBCSU1JIHJlY29yZCBhbmQgdGhlIG9uZSByZXRyaWV2ZWQg ZnJvbSBhIFZNQy4NCiAgKiAgIEl0J3MgYWxzbyBub3QgYWxsIHRoYXQgY2xlYXIgd2hlcmUgdG8g cmV0cmlldmUgdGhlIEJJTUkgbG9nbyB3aGVuIHRoZSBlbWFpbCBpcyBzZW50IGZyb20gYSBzdWJk b21haW4sIGFuZCBtYXRjaCB0aGF0IHVwIHdpdGggdGhlIERNQVJDIHJlc3VsdHMuDQogICogICBU aGVyZSdzIGFsc28gdGhlIHF1ZXN0aW9uIGFib3V0IHdoZXRoZXIgb3Igbm90IGFuIGluZGVwZW5k ZW50IGNsaWVudCBjYW4vc2hvdWxkIHRydXN0IHRoZSBhdXRoZW50aWNhdGlvbiByZXN1bHRzIHBl cmZvcm1lZCBieSB0aGUgbWFpbGJveCBwcm92aWRlciB3aGVuIGRlY2lkaW5nIHRvIGRpc3BsYXkg dGhlIEJJTUkgbG9nby4NCiAgKiAgIFRoZXJlIGlzIGEgbm9uLXplcm8gYWRkaXRpb24gb2YgcHJv Y2Vzc2luZyByZXF1aXJlZCBieSB0aGUgY2xpZW50IHRvIGhhbmRsZSBCSU1JLCBsZWFkaW5nIHRv IHRoZSBxdWVzdGlvbiBhYm91dCB3aGF0IGltcGFjdCB0aGlzIG1heSBoYXZlIG9uIGEgY2xpZW50 Li4uIGFuZCB3aGF0IGVmZmljaWVuY2llcyBjYW4gYmUgaW50cm9kdWNlZCB3aXRoIGxvY2FsIGNh Y2hpbmcgKGlmIGFueSkuDQoNCldoYXQgSSBmb3VuZCBtb3N0IGludGVyZXN0aW5nIHdhcyBob3cg dGhlIHNwZWNpZmljYXRpb25zIGFzc3VtZSBhIHRpZ2h0IGNvdXBsaW5nIGJldHdlZW4gdGhlIGNs aWVudCBhbmQgdGhlIG1haWxib3ggcHJvdmlkZXIuICBJdCBkZWZpbml0ZWx5IG9wZW5zIHRoZSBx dWVzdGlvbiBvZiB3aGV0aGVyIGl0J3MgcG9zc2libGUgKG9yIHJlY29tbWVuZGVkKSBmb3IgYW4g aW5kZXBlbmRlbnQgY2xpZW50IHRvIHN1cHBvcnQgQklNSSBldmVuIGZvciBlbWFpbCByZWNlaXZl ZCBieSBtYWlsYm94IHByb3ZpZGVycyB0aGF0IGRvbid0IHN1cHBvcnQgaXQuICBJdCdzIHJlYWwt d29ybGQgaW50ZXJvcCB0ZXN0aW5nIGxpa2UgdGhpcyB0aGF0IEkgaG9wZSB3aWxsIGhpZ2hsaWdo dCBpc3N1ZXMgdGhhdCBuZWVkIHRvIGJlIGRpc2N1c3NlZCBhcyB0aGUgZXhwZXJpbWVudCBjb250 aW51ZXMuDQoNCkFsc28sIGlmIGFueW9uZSB3b3VsZCBiZSB3aWxsaW5nIHRvIHRlc3QgdGhlIEZh aXJFbWFpbCBjbGllbnQsIEknZCBiZSBrZWVuIHRvIGhlYXIgaWYgeW91IHRoaW5rIHRoYXQgdGhl IHdheSBpdCBsZXZlcmFnZXMgQklNSSBtYXRjaGVzIHlvdXIgZXhwZWN0YXRpb25zLiAgQWxzbywg YXJlIHRoZXJlIGFueSBvdGhlcnMgb3V0IHRoZXJlIHRoYXQgbWlnaHQgY29udHJpYnV0ZSB0aGVp ciBsZWFybmluZ3MgdG8gdGhlIGNvbnZlcnNhdGlvbj8NCg0KQW55d2F5LCB0aGFua3MgZm9yIGFu eSBmZWVkYmFjayB5b3UgbWF5IGhhdmUuICBJdCdsbCBiZSB1c2VmdWwgdG8gaGFzaCBvdXQgaWRl YXMgZm9yIGltcHJvdmVtZW50cyBhbmQgbmV4dCBzdGVwcyBvbiB0aGUgbGlzdC4NCg0KQ2hlZXJz LA0KVHJlbnQNCg0KWzFdIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJh ZnQtYmxhbmstaWV0Zi1iaW1pLTAyPGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczov ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtYmxhbmstaWV0Zi1iaW1pLTAyX187 ISFDUWwzbWNIWDJBIVVVeUpFTjNfQXkwYWMtVXg5dHhxVm9QRElmblNTbU9UNVMtT0NYampSVmVY SkVFcXJQUmpHVWcyYV9vRkxKSGZWVXlBQnE0JD4NClsyXSBodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9odG1sL2RyYWZ0LWZldGNoLXZhbGlkYXRpb24tdm1jLXdjaHVhbmctMDA8aHR0 cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv aHRtbC9kcmFmdC1mZXRjaC12YWxpZGF0aW9uLXZtYy13Y2h1YW5nLTAwX187ISFDUWwzbWNIWDJB IVVVeUpFTjNfQXkwYWMtVXg5dHhxVm9QRElmblNTbU9UNVMtT0NYampSVmVYSkVFcXJQUmpHVWcy YV9vRkxKSGZJTVpuN1o4JD4NClszXSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9o dG1sL2RyYWZ0LWJyb3RtYW4taWV0Zi1iaW1pLWd1aWRhbmNlLTAzPGh0dHBzOi8vdXJsZGVmZW5z ZS5jb20vdjMvX19odHRwczovZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtYnJv dG1hbi1pZXRmLWJpbWktZ3VpZGFuY2UtMDNfXzshIUNRbDNtY0hYMkEhVVV5SkVOM19BeTBhYy1V eDl0eHFWb1BESWZuU1NtT1Q1Uy1PQ1hqalJWZVhKRUVxclBSakdVZzJhX29GTEpIZlF5b2RYYmsk Pg0KDQoNCi0tDQpKLiBUcmVudCBBZGFtcw0KRGlyZWN0b3IsIEVjb3N5c3RlbSBTZWN1cml0eQ0K UHJvb2Zwb2ludA0KDQp0YWRhbXNAcHJvb2Zwb2ludC5jb208bWFpbHRvOnRhZGFtc0Bwcm9vZnBv aW50LmNvbT4NCg0KYmltaSBtYWlsaW5nIGxpc3QNCmJpbWlAaWV0Zi5vcmc8bWFpbHRvOmJpbWlA aWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2JpbWk8aHR0 cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9iaW1pX187ISFDUWwzbWNIWDJBIVFPbGVESXNRT2tqTjNIWGxLckl0cnE2MmdmNS1HM2hh azhsN2FEUjNSQVg2Z1FxV3FUVlhjTGZJd2NQQTNETVZCOGxDNk1VJD4NCg== --_000_MN2PR11MB435147F86056FB81D919657EF7EC9MN2PR11MB4351namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5k b3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0K CXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRp b25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDoyNjI0MjQ2NzY7DQoJbXNvLWxpc3QtdGVt cGxhdGUtaWRzOi05NjAwODE0NjY7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZl bDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDps ZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5 OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglt c28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBs MDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMQ0KCXttc28tbGlzdC1pZDo2 OTk2NzA3OTQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjE3MTgwMjA2MDg7fQ0KQGxpc3QgbDE6 bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDINCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5 OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglt c28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBs MTpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlz dCBsMTpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNp emU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDgNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41 aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpA bGlzdCBsMg0KCXttc28tbGlzdC1pZDo5NjQwMDA1MTc7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRz OjIwNjc4Mzk5NTY7fQ0KQGxpc3QgbDI6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlz dCBsMjpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNp emU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDMNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4w aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpA bGlzdCBsMjpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250 LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDYNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMjpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1m b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDkN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMw0KCXttc28tbGlzdC1pZDoxMTYzNjIwNjg2 Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMTI5MzA1MDc2O30NCkBsaXN0IGwzOmxldmVsMQ0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0K CW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDM6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2kt Zm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw0 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDM6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2 ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw4DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDM6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDQN Cgl7bXNvLWxpc3QtaWQ6MTc1MDg4ODkwMjsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6MjY5MjY1 MzQ7fQ0KQGxpc3QgbDQ6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsNDpsZXZl bDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsNDpsZXZlbDMNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsNDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsNDps ZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsNDpsZXZlbDYNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5 OlN5bWJvbDt9DQpAbGlzdCBsNDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglt c28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBs NDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsNDpsZXZlbDkNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OlN5bWJvbDt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90 dG9tOjBpbjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVk ZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0t PjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0K PG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+ PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxp bms9InB1cnBsZSIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9Ildv cmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNvbnNpZGVyIOKAnGVtYWlscy54ZmluaXR5LmNvbeKAnS4m bmJzcDsgV2UgZGlkbuKAmXQgd2FudCBCSU1JIG9uIOKAnHhmaW5pdHkuY29t4oCdLCBidXQganVz dCB0aGF0IHN1Yi1kb21haW4gKGZvciBub3cpLiZuYnNwOyBUaGVyZSBpcyBubyBCSU1JIHJlY29y ZCBhdCDigJx4ZmluaXR5LmNvbeKAnSwgdGhvdWdoIGl0IGRvZXMgZXhpc3QgYXQg4oCcZW1haWxz LnhmaW5pdHkuY29t4oCdLiZuYnNwOyBJIGJlbGlldmUgdGhpcyBpcyBjb3ZlcmVkIGluIHRoZSBk cmFmdHMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBmbGFnIGNvdWxkIGJlIG5pY2UsIGJ1 dCBhZ2FpbiwgdGhhdCBvbmx5IGNvdmVycyBJTUFQLiZuYnNwOyBXaGF0IGFib3V0IFBPUCAob3Ig TUFQSSkgdXNlcnM/Jm5ic3A7IFRoZSBjcnlwdG9ncmFwaGljIHNvbHV0aW9uIG1heSBiZSBtb3Jl IGludGVuc2l2ZSwgYnV0IHNlZW1zIGxpa2UgaXQgbWF5IG1ha2UgQklNSSBtb3JlIGF2YWlsYWJs ZSAoYnV0IHllcywgYXQgdGhlIGV4cGVuc2Ugb2YgbW9iaWxlIENQVSkuJm5ic3A7DQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Q291bGQgeW91IGVsYWJvcmF0ZSBvbiB0aGUg4oCcZXZlcnl0aGlu ZyBjaGVja3Mgb3V04oCdIGZyb20geW91ciBzZWN0aW9uIGFib3V0IGV2YWx1YXRpb24/PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPi0tPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5BbGV4IEJyb3RtYW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNyLiBF bmdpbmVlciwgQW50aS1BYnVzZSAmYW1wOyBNZXNzYWdpbmcgUG9saWN5PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Db21jYXN0PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUx IDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGI+RnJvbTo8L2I+IGJpbWkgJmx0O2JpbWktYm91bmNlc0BpZXRmLm9yZyZndDsgPGI+T24gQmVo YWxmIE9mIDwvYj4NCk1hcmNlbCBCb2tob3JzdDxicj4NCjxiPlNlbnQ6PC9iPiBGcmlkYXksIEp1 bHkgMzAsIDIwMjEgMzo1NyBBTTxicj4NCjxiPlRvOjwvYj4gYmltaUBpZXRmLm9yZzxicj4NCjxi PlN1YmplY3Q6PC9iPiBbQmltaV0gRndkOiBiaW1pIERpZ2VzdCwgVm9sIDEwLCBJc3N1ZSAyPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj5GYWlyRW1h aWwgd2lsbCBub3QgcmVseSBvbiB0aGUgQklNSS1Mb2NhdGlvbiBoZWFkZXIgYmVjYXVzZSB0aGlz IHJlcXVpcmVzIHN1cHBvcnQgZnJvbSB0aGUgZW1haWwgc2VydmVyLiBJbnN0ZWFkLCBGYWlyRW1h aWwgd2lsbCB1c2UgdGhlIGxvZ28gaW4gdGhlIFZNQyBhbmQgZmFsbGJhY2sgdG8gdGhlIEROUyBy ZWNvcmQgbG9nbyBsb2NhdGlvbg0KIGlmIG5lZWRlZCAobG9nbyBtaXNzaW5nIGluIHRoZSBWTUMs IGV0YykuIFRoZSBsb2dvIHdpbGwgYWx3YXlzIGJlIHNob3duLCBidXQgdGhlIHZlcmlmaWVkIHNl bmRlciBpY29uIChhIGRvdWJsZSBjaGVjayBtYXJrIGJlZm9yZSB0aGUgc2VuZGVyJ3MgbmFtZSkg d2lsbCBiZSBzaG93biBvbmx5IHdoZW4gZXZlcnl0aGluZyBjaGVja3Mgb3V0Ljwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KSSB0aGluayBp dCB3b3VsZCBiZSBhIGdvb2QgaWRlYSB0byBzdW1tYXJpemUgdGhlIHN0ZXBzIHRvIGZvbGxvdyB0 byBmZXRjaC9kZWNvZGUvY2hlY2sgQklNSSBiZWNhdXNlIEkgdGhpbmsgaXQgd2lsbCBtYWtlIGl0 IGVhc2llciBmb3IgZGV2ZWxvcGVycyB0byBpbXBsZW1lbnQgQklNSSBhbmQgdG8gZG8gdGhpcyBp biB0aGUgcmlnaHQgd2F5Ljxicj4NCjxicj4NClRoZSBCSU1JIFRYVCByZWNvcmQgaXMgYWx3YXlz IGJlaW5nIGZldGNoZWQgZnJvbSB0aGUgdG9wIGxldmVsIGRvbWFpbiAoPGEgaHJlZj0iaHR0cHM6 Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHA6L2V4YW1wbGUub3JnX187ISFDUWwzbWNIWDJBIVFP bGVESXNRT2tqTjNIWGxLckl0cnE2MmdmNS1HM2hhazhsN2FEUjNSQVg2Z1FxV3FUVlhjTGZJd2NQ QTNETVZIU1gyV0drJCIgdGFyZ2V0PSJfYmxhbmsiPmV4YW1wbGUub3JnPC9hPikuIEkgaG9wZSB0 aGlzDQogaXMgY29ycmVjdC48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkFuIElNQVAgZmxhZyB3b3VsZCBiZSBuaWNlLCBidXQgSSBndWVzcyBpdCB3aWxsIHRh a2UgcXVpdGUgc29tZSB0aW1lIHVudGlsIGFsbCBlbWFpbCBzZXJ2ZXJzIGFyZSBzdXBwb3J0aW5n IHRoaXMuIFNvbWV0aGluZyBsaWtlIGEgc2lnbmVkIGF1dGhlbnRpY2F0aW9uIHJlc3VsdHMgaGVh ZGVyIHdvdWxkIGJlIG5pY2UsIGFzIGxvbmcgYXMgaXQgY2FuIGJlIGNoZWNrZWQgaW4gYSBzaW1w bGUgYW5kIGVmZmljaWVudA0KIHdheS4gRm9yIGV4YW1wbGUgaGVhdnkgY3J5cHRvZ3JhcGhpYyBv cGVyYXRpb25zIGFuZCBsb29raW5nIHVwIEROUyByZWNvcmRzIChmb3IgY2VydGlmaWNhdGVzLCBl dGMpIHdvdWxkIHJlc3VsdCBpbiBzbG93IGRvd25zIGFuZCBpbmNyZWFzZWQgYmF0dGVyeSB1c2Fn ZSB3aGVuIGRvd25sb2FkaW5nIG1hbnkgbWVzc2FnZXMuPGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPkN1cnJlbnRseSwgdGhl IGF1dGhlbnRpY2F0aW9uIGhlYWRlciBpbnNlcnRlZCBieSB0aGUgZW1haWwgc2VydmVyIGlzIGp1 c3QgYmVpbmcgdHJ1c3RlZCwgYnV0IHRoaXMgcmVsaWVzIG9uIGVpdGhlciBpbnNlcnRpbmcgdGhl IGhlYWRlciBieSB0aGUgcmVjZWl2aW5nIGVtYWlsIHNlcnZlciBvciByZW1vdmluZyBwcmV2aW91 cyBoZWFkZXJzIG9mIGludGVybWVkaWF0ZSBlbWFpbA0KIHNlcnZlcnMuPC9zcGFuPjxicj4NCjxi cj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm Ij5GYWlyRW1haWwgd2lsbCBjYWNoZSB0aGUgbG9nbyBmb3IgdHdvIHdlZWtzLCB3aGljaCBpcyB0 aGUgc2FtZSBhcyBmb3IgZmF2aWNvbnMuIElNSE8gdGhpcyBpcyBhIHJlYXNvbmFibGUgZGVmYXVs dCwgcHJldmVudGluZyBsb2dvcyBmcm9tIGJlaW5nIGZldGNoZWQgdG9vIG9mdGVuIGFuZCBzdGls bCBhbGxvd2luZyB0byBjaGFuZ2UgdGhlIGxvZ28gYnkgdGhlIHNlbmRlcg0KICh3aGljaCBJIGd1 ZXNzIHdvbid0IGhhcHBlbiB0b28gb2Z0ZW4pLjwvc3Bhbj48YnI+DQo8YnI+DQo8c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+SSBob3BlIHRoaXMg Y2xhcmlmaWVzIHRoaW5ncywgZWxzZSBmZWVsIGZyZWUgdG8gcmVwbHkuPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1hcmNlbCBCb2to b3JzdCAoYXV0aG9yIG9mIEZhaXJFbWFpbCk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48YnI+DQotLS0tLS0tLS0tIEZvcndhcmRlZCBtZXNzYWdlIC0tLS0t LS0tLS08YnI+DQpGcm9tOiZuYnNwOyZxdW90O0Jyb3RtYW4sIEFsZXgmcXVvdDsgJmx0OzxhIGhy ZWY9Im1haWx0bzpBbGV4X0Jyb3RtYW5AY29tY2FzdC5jb20iIHRhcmdldD0iX2JsYW5rIj5BbGV4 X0Jyb3RtYW5AY29tY2FzdC5jb208L2E+Jmd0Ozxicj4NClRvOiZuYnNwO1RyZW50IEFkYW1zICZs dDt0YWRhbXM9PGEgaHJlZj0ibWFpbHRvOjQwcHJvb2Zwb2ludC5jb21AZG1hcmMuaWV0Zi5vcmci IHRhcmdldD0iX2JsYW5rIj40MHByb29mcG9pbnQuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDss ICZxdW90OzxhIGhyZWY9Im1haWx0bzpiaW1pQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+Ymlt aUBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpiaW1pQGlldGYub3JnIiB0 YXJnZXQ9Il9ibGFuayI+YmltaUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KQ2M6Jm5ic3A7PGJyPg0K QmNjOiZuYnNwOzxicj4NCkRhdGU6Jm5ic3A7VGh1LCAyOSBKdWwgMjAyMSAxOTo0NTowNCAmIzQz OzAwMDA8YnI+DQpTdWJqZWN0OiZuYnNwO1JlOiBbQmltaV0gSW5kZXBlbmRlbnQgQklNSS1jYXBh YmxlIEVtYWlsIENsaWVudDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPkkgZG8gaGF2ZSB0aGF0IGFwcCwgYnV0IEkgaGF2ZW7igJl0IHlldCBwb2lu dGVkIGl0IGF0IGEgcGxhdGZvcm0gdXRpbGl6aW5nIEJJTUkuJm5ic3A7IEnigJlsbCBtYWtlIGEg bm90ZSB0byBnaXZlIGl0IGEgdHJ5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+RnJvbSBi ZWxvdzo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1s aXN0OmwzIGxldmVsMSBsZm8xIj4NClRoZXkgYXJlbid0IGVudGlyZWx5IGNsZWFyIG9uIGhvdyAo b3Igd2h5KSB0byBldmFsdWF0ZSBhIGxvZ28gcmVmZXJlbmNlZCBieSB0aGUgQklNSSByZWNvcmQg YW5kIHRoZSBvbmUgcmV0cmlldmVkIGZyb20gYSBWTUMuPG86cD48L286cD48L2xpPjwvdWw+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj5XaGF0IGFib3V0IHRoZSBCSU1JLUxvY2F0aW9uIGhlYWRlciBpbnN0YW5jZSwg aWYgcHJlc2VudD8gKGFzc3VtaW5nIHlvdSB3YW50IHRvIHRydXN0IHRoYXQgaGVhZGVyLCBldGMp LiZuYnNwOyBBZnRlciB0aGF0LCBJ4oCZZCBwcm9iYWJseSB1c2UgdGhlIFZNQyBpZiBwcmVzZW50 LiZuYnNwOyBTaG91bGQgd2UgYWRkIGFuIGV2YWx1YXRpb24NCiBwYXRoIHRvIHRoZSBjb3JlIGRv Y3VtZW50PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNv LWxpc3Q6bDQgbGV2ZWwxIGxmbzIiPg0KSXQncyBhbHNvIG5vdCBhbGwgdGhhdCBjbGVhciB3aGVy ZSB0byByZXRyaWV2ZSB0aGUgQklNSSBsb2dvIHdoZW4gdGhlIGVtYWlsIGlzIHNlbnQgZnJvbSBh IHN1YmRvbWFpbiwgYW5kIG1hdGNoIHRoYXQgdXAgd2l0aCB0aGUgRE1BUkMgcmVzdWx0cy48bzpw PjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPknigJltIG5vdCBzdXJlIEkgZm9sbG93IHRo ZSBpc3N1ZSBoZXJlLiZuYnNwOyBJcyB0aGVyZSBzb21lIGV4YW1wbGUgdGhhdCBzaG93cyB0aGUg cXVlc3Rpb25hYmxlIHBhdGg/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzttc28tbGlzdDpsMiBsZXZlbDEgbGZvMyI+DQpUaGVyZSdzIGFsc28gdGhlIHF1ZXN0 aW9uIGFib3V0IHdoZXRoZXIgb3Igbm90IGFuIGluZGVwZW5kZW50IGNsaWVudCBjYW4vc2hvdWxk IHRydXN0IHRoZSBhdXRoZW50aWNhdGlvbiByZXN1bHRzIHBlcmZvcm1lZCBieSB0aGUgbWFpbGJv eCBwcm92aWRlciB3aGVuIGRlY2lkaW5nIHRvIGRpc3BsYXkgdGhlIEJJTUkgbG9nby48bzpwPjwv bzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPklmIHlvdSBnbyBiYWNrIHRvIC0wMCBvZiB0aGUg Y29yZSBzcGVjLCB0aGVyZSB3YXMgYW4gSU1BUCBmbGFnIHRoYXQgd2FzIG1lYW50IHRvIGJlIHNl dCAoU2VjdGlvbiA4LjYpLiZuYnNwOyBUaGF0IHdhcyByZW1vdmVkIGluIC0wMS4mbmJzcDsgSSBk b27igJl0IHJlY2FsbCB0aGUganVzdGlmaWNhdGlvbiwgYnV0IG1heSBoYXZlDQogaGFkIHRvIGRv IHdpdGggTVVBIHdvcmtsb2FkLiZuYnNwOyBTZWVtcyBsaWtlIHRoZSBJTUFQIGZsYWcgY291bGQg YmUgcmVpbnRyb2R1Y2VkIChQT1AzIHdvdWxkIGJlIGFuIGlzc3VlIHRob3VnaCkuJm5ic3A7IE9y IHBlcmhhcHMgc29tZXRoaW5nIGFraW4gdG8gYSBES0lNIHNpZ25hdHVyZSBzaWduZWQgYnkgdGhl IGluYm91bmQgTVRBIHRoYXQgY291bGQgYmUgdmVyaWZpZWQgYnkgdGhlIE1VQS4mbmJzcDsgVGhl IGxhdHRlciBjb3VsZCBwb3RlbnRpYWxseSBiZSByZXVzZWQNCiB0aG91Z2g/PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHVsIHR5 cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMSBsZXZlbDEgbGZv NCI+DQpUaGVyZSBpcyBhIG5vbi16ZXJvIGFkZGl0aW9uIG9mIHByb2Nlc3NpbmcgcmVxdWlyZWQg YnkgdGhlIGNsaWVudCB0byBoYW5kbGUgQklNSSwgbGVhZGluZyB0byB0aGUgcXVlc3Rpb24gYWJv dXQgd2hhdCBpbXBhY3QgdGhpcyBtYXkgaGF2ZSBvbiBhIGNsaWVudC4uLiBhbmQgd2hhdCBlZmZp Y2llbmNpZXMgY2FuIGJlIGludHJvZHVjZWQgd2l0aCBsb2NhbCBjYWNoaW5nIChpZiBhbnkpLjxv OnA+PC9vOnA+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SeKAmWQgdGhpbmsgYXQgbGVhc3QgZXF1 aXZhbGVudCB0byB0aGUgVFRMIG9mIHRoZSBCSU1JIEROUyByZWNvcmQsIHBlcmhhcHMgZXZlbiB1 cCB0byB0aGUgZXhwaXJhdGlvbiBvZiB0aGUgVk1DICh0aG91Z2ggSSBjb3VsZCB1bmRlcnN0YW5k IHdoZXJlIGEgZG9tYWluIGhvbGRlciBjb3VsZCByZWZyZXNoIHRoZWlyDQogVk1DIGFuZCBjaGFu Z2UgbG9nb3MsIGV0YykuJm5ic3A7IEnigJltIHN1cmUgdGhlcmXigJlzIGEgYmV0dGVyIGFuc3dl ciBzb21ld2hlcmUgaW4gYmV0d2Vlbi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+LS08bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+QWxleCBCcm90bWFuPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlNyLiBFbmdpbmVlciwgQW50aS1BYnVzZSAmYW1w OyBNZXNzYWdpbmcgUG9saWN5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PkNvbWNhc3Q8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0 OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj5Gcm9tOjwv Yj4gYmltaSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJpbWktYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPmJpbWktYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7DQo8Yj5PbiBCZWhhbGYgT2Yg PC9iPlRyZW50IEFkYW1zPGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwgSnVseSAyMywgMjAyMSA1 OjM2IFBNPGJyPg0KPGI+VG86PC9iPiA8YSBocmVmPSJtYWlsdG86YmltaUBpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPmJpbWlAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFtCaW1p XSBJbmRlcGVuZGVudCBCSU1JLWNhcGFibGUgRW1haWwgQ2xpZW50PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPlNpbmNlIEdtYWlsJ3MgYW5ub3VuY2VtZW50LCBtb3JlIGNvbXBhbmll cyBhcmUgc3RhcnRpbmcgdG8gcGxheSBhcm91bmQgd2l0aCBCSU1JIChubyBzdXJwcmlzZSB0aGVy ZSkuJm5ic3A7IEFuZCwgYXMgZXhwZWN0ZWQsIHRoZSBpbmNyZWFzZWQgYXR0ZW50aW9uIGlzIGhl bHBpbmcgdG8gcHV0IG1vcmUgZXllYmFsbHMNCiBvbiB0aGUgZXhwZXJpbWVudC48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPkFuZCB3aGlsZSBzb21lIG9mIHRoZSBtYWpvciBtYWlsYm94IHBy b3ZpZGVycyBhcmUgYWRkaW5nIEJJTUkgc3VwcG9ydCB0byB0aGVpciBvd24gbW9iaWxlIGNsaWVu dHMsIEkgcmFuIGludG8gYSBGT1NTIHByb2plY3QgcnVuIGJ5IGEgZGV2ZWxvcGVyIGluIHRoZSBO ZXRoZXJsYW5kcyB3aG8gaGFzIGFscmVhZHkNCiBhZGRlZCBCSU1JIHRvIHRoZWlyIGluZGVwZW5k ZW50IG1vYmlsZSBtYWlsIGNsaWVudC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPklmIHlv dSBnZXQgYSBjaGFuY2UsIEknZCBzdWdnZXN0IHRha2luZyBhIGxvb2sgYXQgdGhlaXIgRmFpckVt YWlsIGltcGxlbWVudGF0aW9uIGFzIHRoZXkgbWFkZSBzb21lIGludGVyZXN0aW5nIGNob2ljZXM6 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48YSBocmVmPSJodHRwczovL3VybGRlZmVuc2Uu Y29tL3YzL19faHR0cHM6L2VtYWlsLmZhaXJjb2RlLmV1L19fOyEhQ1FsM21jSFgyQSFVVXlKRU4z X0F5MGFjLVV4OXR4cVZvUERJZm5TU21PVDVTLU9DWGpqUlZlWEpFRXFyUFJqR1VnMmFfb0ZMSkhm ZHNBRGVDNCQiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2VtYWlsLmZhaXJjb2RlLmV1LzwvYT48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlRoZSBjdXJyZW50IEFuZHJvaWQgY2xpZW50IHBh Y2thZ2UgY2FuIGJlIGRvd25sb2FkZWQgZnJvbSB0aGVpciBHaXRIdWIgcmVwb3NpdG9yeTo8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20v djMvX19odHRwczovZ2l0aHViLmNvbS9NNjZCL0ZhaXJFbWFpbC9yZWxlYXNlc19fOyEhQ1FsM21j SFgyQSFVVXlKRU4zX0F5MGFjLVV4OXR4cVZvUERJZm5TU21PVDVTLU9DWGpqUlZlWEpFRXFyUFJq R1VnMmFfb0ZMSkhmMmd3bkFqNCQiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2dpdGh1Yi5jb20v TTY2Qi9GYWlyRW1haWwvcmVsZWFzZXM8L2E+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+U28gZmFyLCB0aGV5 J3ZlIGFscmVhZHkgZm91bmQgc29tZSB1c2VmdWwgcmVzdWx0cyBmcm9tIHRoZWlyIGV4cGVyaW1l bnQuJm5ic3A7IEFuZCBub3cgd2UncmUgZmluYWxseSBhdCBhIHBvaW50IHdoZXJlIHdlIGNhbiB0 ZXN0IHRoZSBhcmNoaXRlY3R1cmUgKGFuZCBwcmVzc3VyZS10ZXN0IHRoZSBzcGVjaWZpY2F0aW9u cykNCiBiZXlvbmQgdGhlIGhhbmRmdWwgb2YgdXN1YWwgc3VzcGVjdHMuPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj5Gb3IgZXhhbXBsZSwgaGVyZSdyZSBhIGZldyBpc3N1ZXMgdGhpcyB3b3Jr IGFzIGFscmVhZHkgc3VyZmFjZWQgd2hlbiBpbnRlcnByZXRpbmcgdGhlIHNwZWNpZmljYXRpb25z IFsxXSBbMl0gWzNdOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzUiPg0KVGhleSBhcmVuJ3QgZW50aXJlbHkgY2xlYXIg b24gaG93IChvciB3aHkpIHRvIGV2YWx1YXRlIGEgbG9nbyByZWZlcmVuY2VkIGJ5IHRoZSBCSU1J IHJlY29yZCBhbmQgdGhlIG9uZSByZXRyaWV2ZWQgZnJvbSBhIFZNQy48bzpwPjwvbzpwPjwvbGk+ PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMCBsZXZlbDEgbGZvNSI+DQpJdCdzIGFs c28gbm90IGFsbCB0aGF0IGNsZWFyIHdoZXJlIHRvIHJldHJpZXZlIHRoZSBCSU1JIGxvZ28gd2hl biB0aGUgZW1haWwgaXMgc2VudCBmcm9tIGEgc3ViZG9tYWluLCBhbmQgbWF0Y2ggdGhhdCB1cCB3 aXRoIHRoZSBETUFSQyByZXN1bHRzLjxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvO21zby1saXN0OmwwIGxldmVsMSBsZm81Ij4NClRoZXJlJ3MgYWxzbyB0aGUgcXVlc3Rpb24g YWJvdXQgd2hldGhlciBvciBub3QgYW4gaW5kZXBlbmRlbnQgY2xpZW50IGNhbi9zaG91bGQgdHJ1 c3QgdGhlIGF1dGhlbnRpY2F0aW9uIHJlc3VsdHMgcGVyZm9ybWVkIGJ5IHRoZSBtYWlsYm94IHBy b3ZpZGVyIHdoZW4gZGVjaWRpbmcgdG8gZGlzcGxheSB0aGUgQklNSSBsb2dvLjxvOnA+PC9vOnA+ PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwwIGxldmVsMSBsZm81Ij4NClRo ZXJlIGlzIGEgbm9uLXplcm8gYWRkaXRpb24gb2YgcHJvY2Vzc2luZyByZXF1aXJlZCBieSB0aGUg Y2xpZW50IHRvIGhhbmRsZSBCSU1JLCBsZWFkaW5nIHRvIHRoZSBxdWVzdGlvbiBhYm91dCB3aGF0 IGltcGFjdCB0aGlzIG1heSBoYXZlIG9uIGEgY2xpZW50Li4uIGFuZCB3aGF0IGVmZmljaWVuY2ll cyBjYW4gYmUgaW50cm9kdWNlZCB3aXRoIGxvY2FsIGNhY2hpbmcgKGlmIGFueSkuPG86cD48L286 cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5XaGF0IEkgZm91bmQgbW9zdCBpbnRlcmVzdGluZyB3 YXMgaG93IHRoZSBzcGVjaWZpY2F0aW9ucyBhc3N1bWUgYSB0aWdodCBjb3VwbGluZyBiZXR3ZWVu IHRoZSBjbGllbnQgYW5kIHRoZSBtYWlsYm94IHByb3ZpZGVyLiZuYnNwOyBJdCBkZWZpbml0ZWx5 IG9wZW5zIHRoZSBxdWVzdGlvbiBvZiB3aGV0aGVyIGl0J3MgcG9zc2libGUNCiAob3IgcmVjb21t ZW5kZWQpIGZvciBhbiBpbmRlcGVuZGVudCBjbGllbnQgdG8gc3VwcG9ydCBCSU1JIGV2ZW4gZm9y IGVtYWlsIHJlY2VpdmVkIGJ5IG1haWxib3ggcHJvdmlkZXJzIHRoYXQgZG9uJ3Qgc3VwcG9ydCBp dC4mbmJzcDsgSXQncyByZWFsLXdvcmxkIGludGVyb3AgdGVzdGluZyBsaWtlIHRoaXMgdGhhdCBJ IGhvcGUgd2lsbCBoaWdobGlnaHQgaXNzdWVzIHRoYXQgbmVlZCB0byBiZSBkaXNjdXNzZWQgYXMg dGhlIGV4cGVyaW1lbnQgY29udGludWVzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+QWxz bywgaWYgYW55b25lIHdvdWxkIGJlIHdpbGxpbmcgdG8gdGVzdCB0aGUgRmFpckVtYWlsIGNsaWVu dCwgSSdkIGJlIGtlZW4gdG8gaGVhciBpZiB5b3UgdGhpbmsgdGhhdCB0aGUgd2F5IGl0IGxldmVy YWdlcyBCSU1JIG1hdGNoZXMgeW91ciBleHBlY3RhdGlvbnMuJm5ic3A7IEFsc28sIGFyZSB0aGVy ZSBhbnkgb3RoZXJzDQogb3V0IHRoZXJlIHRoYXQgbWlnaHQgY29udHJpYnV0ZSB0aGVpciBsZWFy bmluZ3MgdG8gdGhlIGNvbnZlcnNhdGlvbj88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkFu eXdheSwgdGhhbmtzIGZvciBhbnkgZmVlZGJhY2sgeW91IG1heSBoYXZlLiZuYnNwOyBJdCdsbCBi ZSB1c2VmdWwgdG8gaGFzaCBvdXQgaWRlYXMgZm9yIGltcHJvdmVtZW50cyBhbmQgbmV4dCBzdGVw cyBvbiB0aGUgbGlzdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkNoZWVycyw8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+VHJlbnQ8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPlsxXQ0KPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBz Oi9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1ibGFuay1pZXRmLWJpbWktMDJf XzshIUNRbDNtY0hYMkEhVVV5SkVOM19BeTBhYy1VeDl0eHFWb1BESWZuU1NtT1Q1Uy1PQ1hqalJW ZVhKRUVxclBSakdVZzJhX29GTEpIZlZVeUFCcTQkIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWJsYW5rLWlldGYtYmltaS0wMjwv YT48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+WzJdDQo8YSBocmVmPSJo dHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9odG1sL2RyYWZ0LWZldGNoLXZhbGlkYXRpb24tdm1jLXdjaHVhbmctMDBfXzshIUNRbDNtY0hY MkEhVVV5SkVOM19BeTBhYy1VeDl0eHFWb1BESWZuU1NtT1Q1Uy1PQ1hqalJWZVhKRUVxclBSakdV ZzJhX29GTEpIZklNWm43WjgkIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWZldGNoLXZhbGlkYXRpb24tdm1jLXdjaHVhbmctMDA8 L2E+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPlszXQ0KPGEgaHJlZj0i aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi9kYXRhdHJhY2tlci5pZXRmLm9yZy9k b2MvaHRtbC9kcmFmdC1icm90bWFuLWlldGYtYmltaS1ndWlkYW5jZS0wM19fOyEhQ1FsM21jSFgy QSFVVXlKRU4zX0F5MGFjLVV4OXR4cVZvUERJZm5TU21PVDVTLU9DWGpqUlZlWEpFRXFyUFJqR1Vn MmFfb0ZMSkhmUXlvZFhiayQiIHRhcmdldD0iX2JsYW5rIj4NCmh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtYnJvdG1hbi1pZXRmLWJpbWktZ3VpZGFuY2UtMDM8L2E+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+LS0mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkouIFRyZW50IEFkYW1z PC9zcGFuPjwvYj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGk+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkRpcmVjdG9yLCBFY29zeXN0ZW0gU2VjdXJpdHk8 L3NwYW4+PC9pPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtjb2xvcjojNTE3ODhEIj5Qcm9vZnBvaW50PC9zcGFu PjwvYj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxhIGhyZWY9Im1h aWx0bzp0YWRhbXNAcHJvb2Zwb2ludC5jb20iIHRhcmdldD0iX2JsYW5rIj50YWRhbXNAcHJvb2Zw b2ludC5jb208L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPmJpbWkgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOmJpbWlA aWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5iaW1pQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9 Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vYmltaV9fOyEhQ1FsM21jSFgyQSFRT2xlRElzUU9rak4zSFhsS3JJdHJxNjJnZjUt RzNoYWs4bDdhRFIzUkFYNmdRcVdxVFZYY0xmSXdjUEEzRE1WQjhsQzZNVSQiIHRhcmdldD0iX2Js YW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2JpbWk8L2E+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5 Pg0KPC9odG1sPg0K --_000_MN2PR11MB435147F86056FB81D919657EF7EC9MN2PR11MB4351namp_-- From nobody Fri Jul 30 07:46:03 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C82203A2C67 for ; Fri, 30 Jul 2021 07:46:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.397 X-Spam-Level: X-Spam-Status: No, score=-1.397 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URI_NOVOWEL=0.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=faircode.eu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wY-1i_dI_QZW for ; Fri, 30 Jul 2021 07:45:56 -0700 (PDT) Received: from mail-lf1-x12e.google.com (mail-lf1-x12e.google.com [IPv6:2a00:1450:4864:20::12e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49EFF3A2C65 for ; Fri, 30 Jul 2021 07:45:55 -0700 (PDT) Received: by mail-lf1-x12e.google.com with SMTP id g13so18321595lfj.12 for ; Fri, 30 Jul 2021 07:45:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=faircode.eu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=wxOMMh1wyMoQrfw2dADwGr9sh7V4pZne//WkJc96ay4=; b=aNRpDPku49AZetcZQ9umLrors68F8EpUY8lO0v6PxOlSxsSq2wj85wDxw5Q5h7mvMw lkyQmfDmKBQAR/3WbWWbKaoX9xxXV2hmiX9hrkzn+UZ0Z3makjAFcf8s9TacWy3l4A63 JUv+hnVy0yAoYjmCrZDbstEPlEseHHanE31iaLh20FGRvVHtGY3phQC+2QldxwdHlYZj qooxRIAiPqu8tZEACSqyTVRsRcbuF9pYcrrBh0aVFuTnJZa3lyiiT+XhnWqAfGXjRzb+ J8aLKrp9NZxRMRc/GestfQPIWKdhj9NqLg8biD0JcNPICOMohrJrnM6NyXqMivXWwMUy Boxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=wxOMMh1wyMoQrfw2dADwGr9sh7V4pZne//WkJc96ay4=; b=RoOCcb/iJnQ7zCtA/KxKL1qps6QNNvqa7/5sAksxJxfM0dkayRNMUR2nFR48tNO5QK 6ZGBU1x7+H3lSxFSYCafOAY2ZE3RFXEkLe0oDr2XuldEEDJcjRv8VTKc+3Pm0BL+CYQf xvuK9Ri+1W8w1BuHw7rgDvEIUnwSfQEHbHTkbXMdY2ds3mSZAXeYqQOnPzjBCYnvtDPp S8g5fg2xZpokBvisY/HCTwBQ3xhve7W4/PmUfD5syIvbYE7XmBSRHrXaNHrxePV2Tjfk ceRYTDat6M6GnMYckjUKc/EJGzLz40bZkd/JijH4PkjoII9WzNukV9iFgKip8osfZSgC ZPcg== X-Gm-Message-State: AOAM532yj0xDcI71m7woTJ/b90zSaiQJmxeL94h+WZ/AEFlhHzcu6k2N +aIRM5JbWEIquHsLHayzvFzhHuyHMhGWHVqhj6uKvzjAPgU= X-Google-Smtp-Source: ABdhPJwZu3yAKHoC1QxR6Y1EsPd2coYlARtl9mGjqB7HHH9aGdGr9X40OS+fNiIMd+0y/CYHzRtiQz5CUrA/6uHYWiI= X-Received: by 2002:a05:6512:2205:: with SMTP id h5mr2235317lfu.257.1627656353270; Fri, 30 Jul 2021 07:45:53 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Marcel Bokhorst Date: Fri, 30 Jul 2021 16:45:25 +0200 Message-ID: To: "Brotman, Alex" Cc: "bimi@ietf.org" Content-Type: multipart/alternative; boundary="000000000000c0e4e005c8584611" Archived-At: Subject: Re: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jul 2021 14:46:02 -0000 --000000000000c0e4e005c8584611 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I understood that always "xfinity.com" should be checked and never subdomains like "emails.xfinity.com". Am I wrong? "*Everything checks out*" means: - The VMC could be downloaded from location referenced in the BIMI TXT record - The certificate chain up to a known CA certificate is valid - The certificate is of the right type (BIMI) - The DNS name of the certificate matches the domain name of the sender and of the BIMI DNS record - A logo is present and could be extracted from the certificate - The *Authentication-Results* header says "pass" for DKIM, SPF and DMAR= C - The DMARC DNS record policy is "reject" or "quarantine" Op vr 30 jul. 2021 om 15:19 schreef Brotman, Alex : > > > Consider =E2=80=9Cemails.xfinity.com=E2=80=9D. We didn=E2=80=99t want BI= MI on =E2=80=9Cxfinity.com=E2=80=9D, but > just that sub-domain (for now). There is no BIMI record at =E2=80=9Cxfin= ity.com=E2=80=9D, > though it does exist at =E2=80=9Cemails.xfinity.com=E2=80=9D. I believe = this is covered > in the drafts. > > > > The flag could be nice, but again, that only covers IMAP. What about POP > (or MAPI) users? The cryptographic solution may be more intensive, but > seems like it may make BIMI more available (but yes, at the expense of > mobile CPU). > > > > Could you elaborate on the =E2=80=9Ceverything checks out=E2=80=9D from y= our section about > evaluation? > > > > -- > > Alex Brotman > > Sr. Engineer, Anti-Abuse & Messaging Policy > > Comcast > > > > *From:* bimi *On Behalf Of * Marcel Bokhorst > *Sent:* Friday, July 30, 2021 3:57 AM > *To:* bimi@ietf.org > *Subject:* [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 > > > > FairEmail will not rely on the BIMI-Location header because this requires > support from the email server. Instead, FairEmail will use the logo in th= e > VMC and fallback to the DNS record logo location if needed (logo missing = in > the VMC, etc). The logo will always be shown, but the verified sender ico= n > (a double check mark before the sender's name) will be shown only when > everything checks out. > > > I think it would be a good idea to summarize the steps to follow to > fetch/decode/check BIMI because I think it will make it easier for > developers to implement BIMI and to do this in the right way. > > The BIMI TXT record is always being fetched from the top level domain ( > example.org > ). > I hope this is correct. > > > > An IMAP flag would be nice, but I guess it will take quite some time unti= l > all email servers are supporting this. Something like a signed > authentication results header would be nice, as long as it can be checked > in a simple and efficient way. For example heavy cryptographic operations > and looking up DNS records (for certificates, etc) would result in slow > downs and increased battery usage when downloading many messages. > > Currently, the authentication header inserted by the email server is just > being trusted, but this relies on either inserting the header by the > receiving email server or removing previous headers of intermediate email > servers. > > FairEmail will cache the logo for two weeks, which is the same as for > favicons. IMHO this is a reasonable default, preventing logos from being > fetched too often and still allowing to change the logo by the sender > (which I guess won't happen too often). > > I hope this clarifies things, else feel free to reply. > > > > Marcel Bokhorst (author of FairEmail) > > > > > ---------- Forwarded message ---------- > From: "Brotman, Alex" > To: Trent Adams , "bimi@ietf.or= g" > > Cc: > Bcc: > Date: Thu, 29 Jul 2021 19:45:04 +0000 > Subject: Re: [Bimi] Independent BIMI-capable Email Client > > I do have that app, but I haven=E2=80=99t yet pointed it at a platform ut= ilizing > BIMI. I=E2=80=99ll make a note to give it a try. > > > > From below: > > > > - They aren't entirely clear on how (or why) to evaluate a logo > referenced by the BIMI record and the one retrieved from a VMC. > > > > What about the BIMI-Location header instance, if present? (assuming you > want to trust that header, etc). After that, I=E2=80=99d probably use th= e VMC if > present. Should we add an evaluation path to the core document? > > > > - It's also not all that clear where to retrieve the BIMI logo when > the email is sent from a subdomain, and match that up with the DMARC > results. > > > > I=E2=80=99m not sure I follow the issue here. Is there some example that= shows > the questionable path? > > > > - There's also the question about whether or not an independent client > can/should trust the authentication results performed by the mailbox > provider when deciding to display the BIMI logo. > > > > If you go back to -00 of the core spec, there was an IMAP flag that was > meant to be set (Section 8.6). That was removed in -01. I don=E2=80=99t= recall > the justification, but may have had to do with MUA workload. Seems like > the IMAP flag could be reintroduced (POP3 would be an issue though). Or > perhaps something akin to a DKIM signature signed by the inbound MTA that > could be verified by the MUA. The latter could potentially be reused > though? > > > > - There is a non-zero addition of processing required by the client to > handle BIMI, leading to the question about what impact this may have o= n a > client... and what efficiencies can be introduced with local caching (= if > any). > > > > I=E2=80=99d think at least equivalent to the TTL of the BIMI DNS record, = perhaps > even up to the expiration of the VMC (though I could understand where a > domain holder could refresh their VMC and change logos, etc). I=E2=80=99= m sure > there=E2=80=99s a better answer somewhere in between. > > > > > > -- > > Alex Brotman > > Sr. Engineer, Anti-Abuse & Messaging Policy > > Comcast > > > > *From:* bimi *On Behalf Of *Trent Adams > *Sent:* Friday, July 23, 2021 5:36 PM > *To:* bimi@ietf.org > *Subject:* [Bimi] Independent BIMI-capable Email Client > > > > > > Since Gmail's announcement, more companies are starting to play around > with BIMI (no surprise there). And, as expected, the increased attention > is helping to put more eyeballs on the experiment. > > > > And while some of the major mailbox providers are adding BIMI support to > their own mobile clients, I ran into a FOSS project run by a developer in > the Netherlands who has already added BIMI to their independent mobile ma= il > client. > > > > If you get a chance, I'd suggest taking a look at their FairEmail > implementation as they made some interesting choices: > > > > https://email.faircode.eu/ > > > > > The current Android client package can be downloaded from their GitHub > repository: > > > > https://github.com/M66B/FairEmail/releases > > > > > > > So far, they've already found some useful results from their experiment. > And now we're finally at a point where we can test the architecture (and > pressure-test the specifications) beyond the handful of usual suspects. > > > > For example, here're a few issues this work as already surfaced when > interpreting the specifications [1] [2] [3]: > > > > - They aren't entirely clear on how (or why) to evaluate a logo > referenced by the BIMI record and the one retrieved from a VMC. > - It's also not all that clear where to retrieve the BIMI logo when > the email is sent from a subdomain, and match that up with the DMARC > results. > - There's also the question about whether or not an independent client > can/should trust the authentication results performed by the mailbox > provider when deciding to display the BIMI logo. > - There is a non-zero addition of processing required by the client to > handle BIMI, leading to the question about what impact this may have o= n a > client... and what efficiencies can be introduced with local caching (= if > any). > > > > What I found most interesting was how the specifications assume a tight > coupling between the client and the mailbox provider. It definitely open= s > the question of whether it's possible (or recommended) for an independent > client to support BIMI even for email received by mailbox providers that > don't support it. It's real-world interop testing like this that I hope > will highlight issues that need to be discussed as the experiment continu= es. > > > > Also, if anyone would be willing to test the FairEmail client, I'd be kee= n > to hear if you think that the way it leverages BIMI matches your > expectations. Also, are there any others out there that might contribute > their learnings to the conversation? > > > > Anyway, thanks for any feedback you may have. It'll be useful to hash ou= t > ideas for improvements and next steps on the list. > > > > Cheers, > > Trent > > > > [1] https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02 > > > [2] > https://datatracker.ietf.org/doc/html/draft-fetch-validation-vmc-wchuang-= 00 > > > [3] > https://datatracker.ietf.org/doc/html/draft-brotman-ietf-bimi-guidance-03 > > > > > > > -- > > *J. Trent Adams* > > *Director, Ecosystem Security* > > *Proofpoint* > > > > tadams@proofpoint.com > > > > bimi mailing list > bimi@ietf.org > https://www.ietf.org/mailman/listinfo/bimi > > --000000000000c0e4e005c8584611 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

I understood that always &= quot;xfinity.com"= should be checked and never subdomains like "emails.xfinity.com". Am I wrong?

"Everything checks out" means:
  • The VMC could be downloaded from location referenced in the = BIMI TXT record
  • The certificate chain up to a known CA certificate = is valid
  • The certificate is of the right type (BIMI)
  • The DN= S name of the certificate matches the domain name of the sender and of the = BIMI DNS record
  • A logo is present and could be extracted from the c= ertificate
  • The Authentication-Results header says "pass= " for DKIM, SPF and DMARC
  • The DMARC DNS record policy is "= ;reject" or "quarantine"

= =C2=A0



Op vr 30 jul. 2021 om 15:19= schreef Brotman, Alex <Alex_Brotman@comcast.com>:

=C2=A0

Consider =E2=80=9Cemails.xfinity.com=E2=80=9D.=C2=A0 We didn=E2=80= =99t want BIMI on =E2=80=9Cxfinity.com=E2=80=9D, but just that sub-domain (for now).=C2=A0 There = is no BIMI record at =E2=80=9Cxfinity.com=E2=80=9D, though it does exist at =E2=80=9Cemails.xfinity.com=E2=80=9D= .=C2=A0 I believe this is covered in the drafts.

=C2=A0

The flag could be nice, but again, that only covers = IMAP.=C2=A0 What about POP (or MAPI) users?=C2=A0 The cryptographic solutio= n may be more intensive, but seems like it may make BIMI more available (bu= t yes, at the expense of mobile CPU).=C2=A0

=C2=A0

Could you elaborate on the =E2=80=9Ceverything check= s out=E2=80=9D from your section about evaluation?

=C2=A0

--

Alex Brotman

Sr. Engineer, Anti-Abuse & Messaging Policy

Comcast

=C2=A0

From: bimi <bimi-bounces@ietf.org> On Behalf Of = Marcel Bokhorst
Sent: Friday, July 30, 2021 3:57 AM
To: bimi@ietf.org=
Subject: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2

=C2=A0

FairEma= il will not rely on the BIMI-Location header because this requires support = from the email server. Instead, FairEmail will use the logo in the VMC and = fallback to the DNS record logo location if needed (logo missing in the VMC, etc). The logo will always be shown, b= ut the verified sender icon (a double check mark before the sender's na= me) will be shown only when everything checks out.


I think it would be a good idea to summarize the steps to follow to fetch/d= ecode/check BIMI because I think it will make it easier for developers to i= mplement BIMI and to do this in the right way.

The BIMI TXT record is always being fetched from the top level domain (example.org). I hope this is correct.

=C2=A0

An IMAP flag would be nice, but I guess it will take= quite some time until all email servers are supporting this. Something lik= e a signed authentication results header would be nice, as long as it can b= e checked in a simple and efficient way. For example heavy cryptographic operations and looking up DNS records= (for certificates, etc) would result in slow downs and increased battery u= sage when downloading many messages.

Currently, the authentication = header inserted by the email server is just being trusted, but this relies = on either inserting the header by the receiving email server or removing pr= evious headers of intermediate email servers.

FairEmail will cache the logo = for two weeks, which is the same as for favicons. IMHO this is a reasonable= default, preventing logos from being fetched too often and still allowing = to change the logo by the sender (which I guess won't happen too often).

I hope this clarifies things, = else feel free to reply.

=C2=A0

Marcel Bokhorst (author of FairEmail)<= /p>

=C2=A0


---------- Forwarded message ----------
From:=C2=A0"Brotman, Alex" <Alex_Brotman@comcast.com>
To:=C2=A0Trent Adams <tadams=3D40proofpoint.com@dmarc.ietf.org>, "= bimi@ietf.org" = <bimi@ietf.org>= ;
Cc:=C2=A0
Bcc:=C2=A0
Date:=C2=A0Thu, 29 Jul 2021 19:45:04 +0000
Subject:=C2=A0Re: [Bimi] Independent BIMI-capable Email Client

I do have that app, but I haven=E2=80=99t yet pointe= d it at a platform utilizing BIMI.=C2=A0 I=E2=80=99ll make a note to give i= t a try.

=C2=A0

From below:

=C2=A0

  • They aren't entirely clear on how (or why) to evaluate a logo reference= d by the BIMI record and the one retrieved from a VMC.

    • =C2=A0

    What about the BIMI-Location header instance, if pre= sent? (assuming you want to trust that header, etc).=C2=A0 After that, I=E2= =80=99d probably use the VMC if present.=C2=A0 Should we add an evaluation path to the core document?

    =C2=A0

    • It's also not all that clear where to retrieve the BIMI logo when the e= mail is sent from a subdomain, and match that up with the DMARC results.=

    =C2=A0

    I=E2=80=99m not sure I follow the issue here.=C2=A0 = Is there some example that shows the questionable path?

    =C2=A0

    • There's also the question about whether or not an independent client ca= n/should trust the authentication results performed by the mailbox provider= when deciding to display the BIMI logo.

    =C2=A0

    If you go back to -00 of the core spec, there was an= IMAP flag that was meant to be set (Section 8.6).=C2=A0 That was removed i= n -01.=C2=A0 I don=E2=80=99t recall the justification, but may have had to do with MUA workload.=C2=A0 Seems like the IMAP flag could be reint= roduced (POP3 would be an issue though).=C2=A0 Or perhaps something akin to= a DKIM signature signed by the inbound MTA that could be verified by the M= UA.=C2=A0 The latter could potentially be reused though?

    =C2=A0

    • There is a non-zero addition of processing required by the client to handle= BIMI, leading to the question about what impact this may have on a client.= .. and what efficiencies can be introduced with local caching (if any).<= /u>

    =C2=A0

    I=E2=80=99d think at least equivalent to the TTL of = the BIMI DNS record, perhaps even up to the expiration of the VMC (though I= could understand where a domain holder could refresh their VMC and change logos, etc).=C2=A0 I=E2=80=99m sure there=E2=80=99s a bette= r answer somewhere in between.

    =C2=A0

    =C2=A0

    --

    Alex Brotman

    Sr. Engineer, Anti-Abuse & Messaging Policy

    Comcast

    =C2=A0

    From: bimi <bimi-bounces@ietf.org> On Behalf Of Trent Adams
    Sent: Friday, July 23, 2021 5:36 PM
    To: bimi@ietf.org=
    Subject: [Bimi] Independent BIMI-capable Email Client<= /p>

    =C2=A0

    =C2=A0

    Since Gmail's announcement, more companies are s= tarting to play around with BIMI (no surprise there).=C2=A0 And, as expecte= d, the increased attention is helping to put more eyeballs on the experiment.

    =C2=A0

    And while some of the major mailbox providers are ad= ding BIMI support to their own mobile clients, I ran into a FOSS project ru= n by a developer in the Netherlands who has already added BIMI to their independent mobile mail client.

    =C2=A0

    If you get a chance, I'd suggest taking a look a= t their FairEmail implementation as they made some interesting choices:<= /u>

    =C2=A0

    https://email.faircode.eu/=

    =C2=A0

    The current Android client package can be downloaded= from their GitHub repository:

    =C2=A0

    https://github= .com/M66B/FairEmail/releases

    =C2=A0

    =C2=A0

    So far, they've already found some useful result= s from their experiment.=C2=A0 And now we're finally at a point where w= e can test the architecture (and pressure-test the specifications) beyond the handful of usual suspects.

    =C2=A0

    For example, here're a few issues this work as a= lready surfaced when interpreting the specifications [1] [2] [3]:=

    =C2=A0

    • They aren't entirely clear on how (or why) to evaluate a logo reference= d by the BIMI record and the one retrieved from a VMC.
      • It's also not all that clear where to retrieve the BIMI logo when the e= mail is sent from a subdomain, and match that up with the DMARC results.=
    • There's also the question about whether or not an independent client ca= n/should trust the authentication results performed by the mailbox provider= when deciding to display the BIMI logo.
    • There is a non-zero addition of processing required by the client to handle= BIMI, leading to the question about what impact this may have on a client.= .. and what efficiencies can be introduced with local caching (if any).<= /u>

    =C2=A0

    What I found most interesting was how the specificat= ions assume a tight coupling between the client and the mailbox provider.= =C2=A0 It definitely opens the question of whether it's possible (or recommended) for an independent client to support BIMI even for email = received by mailbox providers that don't support it.=C2=A0 It's rea= l-world interop testing like this that I hope will highlight issues that ne= ed to be discussed as the experiment continues.

    =C2=A0

    Also, if anyone would be willing to test the FairEma= il client, I'd be keen to hear if you think that the way it leverages B= IMI matches your expectations.=C2=A0 Also, are there any others out there that might contribute their learnings to the conversation?

    =C2=A0

    Anyway, thanks for any feedback you may have.=C2=A0 = It'll be useful to hash out ideas for improvements and next steps on th= e list.

    =C2=A0

    Cheers,

    Trent

    =C2=A0

    [1] https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02

    [2] https://datatracker.ietf.org/doc/html/draft-fetch-validation-vmc-wchuang-00=

    [3] https://datatracker.ietf.org/doc/html/draft-brotman-ietf-bimi-guidance-03

    =C2=A0

    =C2=A0

    --=C2=A0

    J. Trent Adams

    Director, Ecosyste= m Security

    Proofpoint

    =C2=A0<= u>

    tadams@proofpoint.com

    =C2=A0

bimi mailing list
bimi@ietf.org
https://www.ietf.org/mailman/listinfo= /bimi

--000000000000c0e4e005c8584611-- From nobody Fri Jul 30 08:03:35 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 973BE3A2D05 for ; Fri, 30 Jul 2021 08:03:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_IMAGE_ONLY_32=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=valimail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4SctdRWs-V8D for ; Fri, 30 Jul 2021 08:03:28 -0700 (PDT) Received: from mail-qv1-xf30.google.com (mail-qv1-xf30.google.com [IPv6:2607:f8b0:4864:20::f30]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DF9D3A2D02 for ; Fri, 30 Jul 2021 08:03:28 -0700 (PDT) Received: by mail-qv1-xf30.google.com with SMTP id cg4so282173qvb.5 for ; Fri, 30 Jul 2021 08:03:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=valimail.com; s=google2048; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=9zlI9XK7duUKQXSeRaib7dq8tZxb3X8GozKWX6VU79k=; b=J0qhQwcfUs4tet8pInoho9ePiwlM483g/TUx3I6Gf8lwwIOSrzXVoKzxlDQcQ4OO0S Yxe1hl2h5iKsxzp7BEzF+z7WNywlb/AgVaPEUjQLx+reQcURtToQY9qof1jHbMN0rT0U zr7lkdljatVA6YtKx2l2w5DvJO84GfaCYrcxEcbSeAjzFGSM8gyKBx0DXc/8g0/cRXDt sjk+nhoo2h2eiATTAWgXIgwt3Wwt27xop5ZXfuiwxtg1jssCvItsb1cmMnoW3NI7pGDv eWki4guF+0tURGs4N/jBMgy4Xsk77KriQHUWmB4keIGMIPYrxV4spY4MwNi0wr7iYTQv EqwQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=9zlI9XK7duUKQXSeRaib7dq8tZxb3X8GozKWX6VU79k=; b=Pfss+vEnMJeyOesweGO8IDEB2h3pxZCulYppo6FPA+oEck4Z4EwTz4Nmby1PRxVmrQ Dlfrk2lBTxjmpXknX4wUZKuwcf4eoVfwFwXmTnomRrNSeUmktpSQ/03+36rme0h+2KrG yjSjFMISBAapHdUkAl2VmE2mb+0qqnhVcbkv+N98HLg78kfgZ40Sxnozn1RbDJzRbQ3A 8NI4fNRFo4uEOtI3cM+A1rryp+zmm3jxNvlMcVrX90PsJFHz/QEDJ2lDnwiRr/O2HZuM jgrvpgNDG0MiIP53XupY9JcPkAsLdbeYCuFqPWCprivmrzq7CQ54oJuUTlvP8eDu6FN4 kYaA== X-Gm-Message-State: AOAM530B430XtX5drbZjhSMVY00v9Q9qV1md76knh26MPJ/z4vv0n/Ys A+MecIeVdjO6HHfNFj3WcCCFCbd8dJHTn0n4ug9Z7crp/PU4XA== X-Google-Smtp-Source: ABdhPJwVCeOh12/WV8cA0iWsi1pfeqDV1jBlN4FCdsjzD5GbVAMt7O9GEbTVHT5Ju8W0OC6fqYQZ4F63NPbVoQAihN0= X-Received: by 2002:a0c:ab1c:: with SMTP id h28mr3258904qvb.39.1627657406392; Fri, 30 Jul 2021 08:03:26 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Todd Herr Date: Fri, 30 Jul 2021 11:03:10 -0400 Message-ID: To: Marcel Bokhorst Cc: "bimi@ietf.org" Content-Type: multipart/alternative; boundary="000000000000863b8b05c85885d1" Archived-At: Subject: Re: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jul 2021 15:03:34 -0000 --000000000000863b8b05c85885d1 Content-Type: text/plain; charset="UTF-8" On Fri, Jul 30, 2021 at 10:46 AM Marcel Bokhorst wrote: > > I understood that always "xfinity.com" should be checked and never > subdomains like "emails.xfinity.com". Am I wrong? > Current rev of the spec says to start with the author domain, then look at the org domain if there's no BIMI record at the author domain. It's analogous to DMARC in that way. https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02#section-7.2 -- *Todd Herr* | Technical Director, Standards and Ecosystem *e:* todd.herr@valimail.com *m:* 703.220.4153 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use of individual(s) authorized to receive it. If you are not an intended and authorized recipient you are hereby notified of any use, disclosure, copying or distribution of the information included in this transmission is prohibited and may be unlawful. Please immediately notify the sender by replying to this email and then delete it from your system. --000000000000863b8b05c85885d1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Fri, Jul 30, 2021 at 10:46 AM Marcel Bokhorst <marcel@faircode.eu> wrote:
<= /div>

Current rev of the spec says to star= t with the author domain, then look at the org domain if there's no BIM= I record at the author domain. It's analogous to DMARC in that way.

=
= https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02#= section-7.2

--

Todd Herr | Technical Director, Stand= ards and Ecosystem
m: 703.220.4153

This email and a= ll data transmitted with it contains confidential and/or proprietary inform= ation intended solely for the use of individual(s) authorized to receive it= . If you are not an intended and authorized recipient you are hereby notifi= ed of any use, disclosure, copying or distribution of the information inclu= ded in this transmission is prohibited and may be unlawful. Please immediat= ely notify the sender by replying to this email and then delete it from you= r system.

--000000000000863b8b05c85885d1-- From nobody Fri Jul 30 08:33:39 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DD2F3A2DB2 for ; Fri, 30 Jul 2021 08:33:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=faircode.eu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iaLFAHVTA_AR for ; Fri, 30 Jul 2021 08:33:32 -0700 (PDT) Received: from mail-lf1-x136.google.com (mail-lf1-x136.google.com [IPv6:2a00:1450:4864:20::136]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24F703A2DB0 for ; Fri, 30 Jul 2021 08:33:31 -0700 (PDT) Received: by mail-lf1-x136.google.com with SMTP id h2so18692785lfu.4 for ; Fri, 30 Jul 2021 08:33:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=faircode.eu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=39bAB2k/DdnM8fRu36V9ERJKRhLQY8mFnXYjZ65oI3c=; b=Fydd4QkOHLxdA+ptzQPOVv5Fadpgd5HZXVIFJtFeCmfDtvoAH9xa2a7cbSoIHLHPvm LLR8Mzbq1pWLhOMjlKewQ0fNBJVqESUS67np59YUpK4q5sq7yEi/kvife76W1lBUbI28 B6CS3E2vcvdgrOghhcNTIaHzPLqBV9iN1ghwgkKeQut9AZ78+anOevMhygmGk/XjcDc+ LBX+TRhQvFEffMsc/qe56L2YONRI3m2RItL9RPX9o5tPrHXzFhI1ifByD0JOmkYHIHrW yOe6HX+2JUqPycaAAHQwto5yiPudJgKdrO7JKbRgoxofSZ9NbXVZo5fB+7ZPt+Q2ZnDw Di1w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=39bAB2k/DdnM8fRu36V9ERJKRhLQY8mFnXYjZ65oI3c=; b=hj77Jel4cBXPeOTWJy5ORlqGSTAXpPf7YqzoCo98f5cJ/x5d27qQqfEMkMIjgOKFeq KEhnxBjw4e75MXYSGONKCEc4C/HEhmfbxGrPXLHohdvgNMGj/r+rRtH/k/Lr4JrBUQL3 k646Sqv+oCMb+rPmQOUHrGF/LHJdywIkUJxFksPHiNo+hCFJygHLEoteYU8dsWpryT+N 8nabc+NyMYezb19n5jAgTMdNFRL4QV85jCcNh3mX2iYOBzZE5R4kPmPg+AtX8raQ3FIF u2RO1+7ZFLy3QbGRXDjJVw1tKi+w4bNz6mASaY1Fo/Y359vcN9DDyaDLBaBIfrgpdYh1 8q/Q== X-Gm-Message-State: AOAM531YLn0QD2/C+mhbPKVm/83sm5qHMoM/c7J1V8AeFxKfWuqWOmss SafIlIznclkpSmnLAilwnM91BEvK6czYs0Ll8unp+et6zMEGjQ== X-Google-Smtp-Source: ABdhPJyyYiD/JdxqLEIWg5tqt2Sub+IIiNUf1ERHydxPX2WgfjG1WMfW5m3O2UPpf3j539+BpEya5nMoHgaG8jkFHf8= X-Received: by 2002:ac2:50ce:: with SMTP id h14mr2414909lfm.323.1627659209789; Fri, 30 Jul 2021 08:33:29 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Marcel Bokhorst Date: Fri, 30 Jul 2021 17:33:03 +0200 Message-ID: To: Todd Herr Cc: "bimi@ietf.org" Content-Type: multipart/alternative; boundary="00000000000003e00a05c858f1fb" Archived-At: Subject: Re: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jul 2021 15:33:38 -0000 --00000000000003e00a05c858f1fb Content-Type: text/plain; charset="UTF-8" I see, but I am not happy with a second DNS record lookup. This might cause extra delays in showing logos, etc. Nevertheless, I have changed this as described now: https://github.com/M66B/FairEmail/commit/b4a193473cbe8477584c4328b98af967fd059048 Op vr 30 jul. 2021 om 17:03 schreef Todd Herr : > On Fri, Jul 30, 2021 at 10:46 AM Marcel Bokhorst > wrote: > >> >> I understood that always "xfinity.com" should be checked and never >> subdomains like "emails.xfinity.com". Am I wrong? >> > > Current rev of the spec says to start with the author domain, then look at > the org domain if there's no BIMI record at the author domain. It's > analogous to DMARC in that way. > > https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02#section-7.2 > > -- > > *Todd Herr* | Technical Director, Standards and Ecosystem > *e:* todd.herr@valimail.com > *m:* 703.220.4153 > > This email and all data transmitted with it contains confidential and/or > proprietary information intended solely for the use of individual(s) > authorized to receive it. If you are not an intended and authorized > recipient you are hereby notified of any use, disclosure, copying or > distribution of the information included in this transmission is prohibited > and may be unlawful. Please immediately notify the sender by replying to > this email and then delete it from your system. > --00000000000003e00a05c858f1fb Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

I see, but I am not happy = with a second DNS record lookup. This might cause extra delays in showing l= ogos, etc. Nevertheless, I have changed this as described now:


Op vr 30 jul. 2021 om 17:03 schreef Todd Herr <todd.herr@valimail.com>:
On Fri, Jul 30, 2021 at 10:46 AM Marcel Bokhor= st <marcel@fairc= ode.eu> wrote:

I understood that always "xfinity.com" should be checked and never = subdomains like "emails.xfinity.com". Am I wrong?
<= br>
Current rev of the sp= ec says to start with the author domain, then look at the org domain if the= re's no BIMI record at the author domain. It's analogous to DMARC i= n that way.

htt= ps://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02#section-7.2=

--

Todd Herr | Technical Director, Standards and Ecosystem
m: 703.220.4153

This email and all data transmitted with it contains confide= ntial and/or proprietary information intended solely for the use of individ= ual(s) authorized to receive it. If you are not an intended and authorized = recipient you are hereby notified of any use, disclosure, copying or distri= bution of the information included in this transmission is prohibited and m= ay be unlawful. Please immediately notify the sender by replying to this em= ail and then delete it from your system.

--00000000000003e00a05c858f1fb-- From nobody Fri Jul 30 09:25:03 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C9D43A3073 for ; Fri, 30 Jul 2021 09:25:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.588 X-Spam-Level: X-Spam-Status: No, score=-1.588 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001, URI_NOVOWEL=0.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mailkit.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BPeQ3T0kF_BD for ; Fri, 30 Jul 2021 09:24:55 -0700 (PDT) Received: from mail.mailkit.eu (mail.mailkit.eu [185.136.200.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4719B3A3072 for ; Fri, 30 Jul 2021 09:24:54 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.mailkit.eu (Postfix) with ESMTP id CBCE820447 for ; Fri, 30 Jul 2021 18:24:50 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mailkit.eu Received: from mail.mailkit.eu ([127.0.0.1]) by localhost (mail.mailkit.eu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jZwPnVkSIliX for ; Fri, 30 Jul 2021 18:24:46 +0200 (CEST) To: bimi@ietf.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mailkit.com; s=mk-2; t=1627662286; bh=+2pB8f4frIhEUFNt0HfswdkxN6iucpCO174ZbrnqNmY=; h=To:References:From:Subject:Date:In-Reply-To; b=lyMp4YfmHXIwZYOAc6E9BJLZVKcBRIXdDMQyoiQX64BRKMThqe7aQy8f17H/KZRPm 5dEm0c9HyZP/uAZ8SL9lzTI+zJqR0xc+wOpQcsjgwpeJ2kv5C/cdhq3fM47Nlpt6+2 BSMhOZF+llbIO5mbtsltn21IeD/xNRFo+i5eF9Pil3Une2CsB+aWS554S0zQb2G5YH Hlvn9wuq+T3nydh4+warQISepFsl8qTdO0qTb3LDMkLyBNZcq85vVlUnbXwkWM3TyA LeJBhdjwPmR3Wg6ANuiGfc5lU9cL009XOsvLbYJZX81jlyxgjl6h9Bg27Oa8Z3phIM Nd/Zxbr+4Alqg== References: From: Jakub Olexa Organization: Mailkit Message-ID: Date: Fri, 30 Jul 2021 18:24:46 +0200 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------AB4AD04E6D6D3A9386CF1402" Content-Language: en-US Archived-At: Subject: Re: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jul 2021 16:25:01 -0000 This is a multi-part message in MIME format. --------------AB4AD04E6D6D3A9386CF1402 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Hi Marcel, i'm missing the check for the SVG logo. Do you intend to fully rely on=20 VMC itself? I believe I have raised this topic before but if not - not=20 checking that the SVG stored in VMC matches the logo in l=3D brings=20 potential risks and most imporantly allows for misaligned logos across=20 services. Allowing brands to create BIMI records that would return=20 different logos in l=3D and a=3D could result in bad user experience and = even VMC abuse. fetching the l=3D logo should not be an option but=20 mandatory and the draft is clear on the fact that it's required. At=20 least that's how I read the assertion discovery part and I believe that=20 it makes no sense to permit different logo in l=3D and a=3D and not check= ing=20 for the alignment of the 2 logos could lead to abuse. If the retrieved Assertion Record does not include a valid bimi- location in the l=3D tag, then Indicator Discovery has failed, an= d the Indicator MUST NOT be displayed. The bimi-location entry MUST be a URI with a HTTPS transport. Jakub Olexa Founder & CEO E-mail: jakub@mailkit.com Tel: +420 777 744 440 Mailkit - Closing the circle between Deliverability and Engagement=20 On 30.07.2021 16:45, Marcel Bokhorst wrote: > > I understood that always "xfinity.com " should be=20 > checked and never subdomains like "emails.xfinity.com=20 > ". Am I wrong? > > "/Everything checks out/" means: > > * The VMC could be downloaded from location referenced in the BIMI > TXT record > * The certificate chain up to a known CA certificate is valid > * The certificate is of the right type (BIMI) > * The DNS name of the certificate matches the domain name of the > sender and of the BIMI DNS record > * A logo is present and could be extracted from the certificate > * The /Authentication-Results/ header says "pass" for DKIM, SPF and > DMARC > * The DMARC DNS record policy is "reject" or "quarantine" > > > > > > Op vr 30 jul. 2021 om 15:19 schreef Brotman, Alex=20 > >: > > Consider =E2=80=9Cemails.xfinity.com =E2= =80=9D.=C2=A0 We > didn=E2=80=99t want BIMI on =E2=80=9Cxfinity.com =E2=80=9D, but just > that sub-domain (for now).=C2=A0 There is no BIMI record at > =E2=80=9Cxfinity.com =E2=80=9D, though it does = exist at > =E2=80=9Cemails.xfinity.com =E2=80=9D.=C2= =A0 I believe this > is covered in the drafts. > > The flag could be nice, but again, that only covers IMAP.=C2=A0 Wha= t > about POP (or MAPI) users?=C2=A0 The cryptographic solution may be = more > intensive, but seems like it may make BIMI more available (but > yes, at the expense of mobile CPU). > > Could you elaborate on the =E2=80=9Ceverything checks out=E2=80=9D = from your > section about evaluation? > > -- > > Alex Brotman > > Sr. Engineer, Anti-Abuse & Messaging Policy > > Comcast > > *From:* bimi > *On Behalf Of * Marcel Bokhorst > *Sent:* Friday, July 30, 2021 3:57 AM > *To:* bimi@ietf.org > *Subject:* [Bimi] Fwd: bimi Digest, Vol 10, Issue 2 > > FairEmail will not rely on the BIMI-Location header because this > requires support from the email server. Instead, FairEmail will > use the logo in the VMC and fallback to the DNS record logo > location if needed (logo missing in the VMC, etc). The logo will > always be shown, but the verified sender icon (a double check mark > before the sender's name) will be shown only when everything > checks out. > > > I think it would be a good idea to summarize the steps to follow > to fetch/decode/check BIMI because I think it will make it easier > for developers to implement BIMI and to do this in the right way. > > The BIMI TXT record is always being fetched from the top level > domain (example.org > ). > I hope this is correct. > > An IMAP flag would be nice, but I guess it will take quite some > time until all email servers are supporting this. Something like a > signed authentication results header would be nice, as long as it > can be checked in a simple and efficient way. For example heavy > cryptographic operations and looking up DNS records (for > certificates, etc) would result in slow downs and increased > battery usage when downloading many messages. > > Currently, the authentication header inserted by the email server > is just being trusted, but this relies on either inserting the > header by the receiving email server or removing previous headers > of intermediate email servers. > > FairEmail will cache the logo for two weeks, which is the same as > for favicons. IMHO this is a reasonable default, preventing logos > from being fetched too often and still allowing to change the logo > by the sender (which I guess won't happen too often). > > I hope this clarifies things, else feel free to reply. > > Marcel Bokhorst (author of FairEmail) > > > ---------- Forwarded message ---------- > From:=C2=A0"Brotman, Alex" > > To:=C2=A0Trent Adams >, "bimi@ietf.org > " > > Cc: > Bcc: > Date:=C2=A0Thu, 29 Jul 2021 19:45:04 +0000 > Subject:=C2=A0Re: [Bimi] Independent BIMI-capable Email Client > > I do have that app, but I haven=E2=80=99t yet pointed it at a platf= orm > utilizing BIMI.=C2=A0 I=E2=80=99ll make a note to give it a try. > > From below: > > * They aren't entirely clear on how (or why) to evaluate a logo > referenced by the BIMI record and the one retrieved from a VMC.= > > What about the BIMI-Location header instance, if present? > (assuming you want to trust that header, etc).=C2=A0 After that, I=E2= =80=99d > probably use the VMC if present.=C2=A0 Should we add an evaluation = path > to the core document? > > * It's also not all that clear where to retrieve the BIMI logo > when the email is sent from a subdomain, and match that up > with the DMARC results. > > I=E2=80=99m not sure I follow the issue here.=C2=A0 Is there some e= xample that > shows the questionable path? > > * There's also the question about whether or not an independent > client can/should trust the authentication results performed > by the mailbox provider when deciding to display the BIMI logo.= > > If you go back to -00 of the core spec, there was an IMAP flag > that was meant to be set (Section 8.6). That was removed in -01.=C2= =A0 > I don=E2=80=99t recall the justification, but may have had to do wi= th MUA > workload.=C2=A0 Seems like the IMAP flag could be reintroduced (POP= 3 > would be an issue though).=C2=A0 Or perhaps something akin to a DKI= M > signature signed by the inbound MTA that could be verified by the > MUA.=C2=A0 The latter could potentially be reused though? > > * There is a non-zero addition of processing required by the > client to handle BIMI, leading to the question about what > impact this may have on a client... and what efficiencies can > be introduced with local caching (if any). > > I=E2=80=99d think at least equivalent to the TTL of the BIMI DNS re= cord, > perhaps even up to the expiration of the VMC (though I could > understand where a domain holder could refresh their VMC and > change logos, etc).=C2=A0 I=E2=80=99m sure there=E2=80=99s a better= answer somewhere in > between. > > -- > > Alex Brotman > > Sr. Engineer, Anti-Abuse & Messaging Policy > > Comcast > > *From:* bimi > *On Behalf Of *Trent Adams > *Sent:* Friday, July 23, 2021 5:36 PM > *To:* bimi@ietf.org > *Subject:* [Bimi] Independent BIMI-capable Email Client > > Since Gmail's announcement, more companies are starting to play > around with BIMI (no surprise there).=C2=A0 And, as expected, the > increased attention is helping to put more eyeballs on the experime= nt. > > And while some of the major mailbox providers are adding BIMI > support to their own mobile clients, I ran into a FOSS project run > by a developer in the Netherlands who has already added BIMI to > their independent mobile mail client. > > If you get a chance, I'd suggest taking a look at their FairEmail > implementation as they made some interesting choices: > > https://email.faircode.eu/ > > > The current Android client package can be downloaded from their > GitHub repository: > > https://github.com/M66B/FairEmail/releases > > > So far, they've already found some useful results from their > experiment.=C2=A0 And now we're finally at a point where we can tes= t > the architecture (and pressure-test the specifications) beyond the > handful of usual suspects. > > For example, here're a few issues this work as already surfaced > when interpreting the specifications [1] [2] [3]: > > * They aren't entirely clear on how (or why) to evaluate a logo > referenced by the BIMI record and the one retrieved from a VMC.= > * It's also not all that clear where to retrieve the BIMI logo > when the email is sent from a subdomain, and match that up > with the DMARC results. > * There's also the question about whether or not an independent > client can/should trust the authentication results performed > by the mailbox provider when deciding to display the BIMI logo.= > * There is a non-zero addition of processing required by the > client to handle BIMI, leading to the question about what > impact this may have on a client... and what efficiencies can > be introduced with local caching (if any). > > What I found most interesting was how the specifications assume a > tight coupling between the client and the mailbox provider.=C2=A0 I= t > definitely opens the question of whether it's possible (or > recommended) for an independent client to support BIMI even for > email received by mailbox providers that don't support it.=C2=A0 It= 's > real-world interop testing like this that I hope will highlight > issues that need to be discussed as the experiment continues. > > Also, if anyone would be willing to test the FairEmail client, I'd > be keen to hear if you think that the way it leverages BIMI > matches your expectations.=C2=A0 Also, are there any others out the= re > that might contribute their learnings to the conversation? > > Anyway, thanks for any feedback you may have.=C2=A0 It'll be useful= to > hash out ideas for improvements and next steps on the list. > > Cheers, > > Trent > > [1] https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02 > > > [2] > https://datatracker.ietf.org/doc/html/draft-fetch-validation-vmc-wc= huang-00 > > > [3] > https://datatracker.ietf.org/doc/html/draft-brotman-ietf-bimi-guida= nce-03 > > > --=20 > > *J. Trent Adams* > > /Director, Ecosystem Security/ > > *Proofpoint* > > tadams@proofpoint.com > > bimi mailing list > bimi@ietf.org > https://www.ietf.org/mailman/listinfo/bimi > > > --------------AB4AD04E6D6D3A9386CF1402 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Hi Marcel,

i'm missing the check for the SVG logo. Do you intend to fully rely on VMC itself? I believe I have raised this topic before but if not - not checking that the SVG stored in VMC matches the logo in l=3D brings potential risks and most imporantly allows for misaligned logos across services. Allowing brands to create BIMI records that would return different logos in l=3D and a=3D could result in bad user experience and even VMC abuse. fetching the l=3D= logo should not be an option but mandatory and the draft is clear on the fact that it's required. At least that's how I read the assertion discovery part and I believe that it makes no sense to permit different logo in l=3D and a=3D and not checking for the alignment of the 2 logos could lead to abuse.

If the retrieved Ass=
ertion Record does not include a valid bimi-
       location in the l=3D tag, then Indicator Discovery has failed, and=

       the Indicator MUST NOT be displayed.  The bimi-location entry
       MUST be a URI with a HTTPS transport.

Jakub Olexa
= Founder & CEO
= E-mail: jakub= @mailkit.com
= Tel: +420 777 744 440

Mailkit - Closing the circle between Deliverability and Engagement

On 30.07.2021 16:45, Marcel Bokhorst wrote:

I understood that always "xfinity.com" should be checked and never subdomains like "emails.xfinity.com". Am I wrong?=

"Everything checks out" means:
  • The VMC could be downloaded from location referenced in the BIMI TXT record
  • The certificate chain up to a known CA certificate is valid
  • The certificate is of the right type (BIMI)
  • The DNS name of the certificate matches the domain name of the sender and of the BIMI DNS record
  • A logo is present and could be extracted from the certificate
  • The Authentication-Results header says "pass" for DKIM, SPF and DMARC
  • The DMARC DNS record policy is "reject" or "quarantine"

=C2=A0



Op vr 30 jul. 2021 om 15:= 19 schreef Brotman, Alex <Alex_Brotman@comcast.com>:<= br>

=C2=A0

Consider =E2=80=9Cemails.xfinity.com=E2=80= =9D.=C2=A0 We didn=E2=80=99t want BIMI on =E2=80=9Cxfinity.co= m=E2=80=9D, but just that sub-domain (for now).=C2=A0 There is no B= IMI record at =E2=80=9Cxfinity.co= m=E2=80=9D, though it does exist at =E2=80=9Cemails.xfinity.com=E2=80= =9D.=C2=A0 I believe this is covered in the drafts.

=C2=A0

The flag could be nice, but again,= that only covers IMAP.=C2=A0 What about POP (or MAPI) users?=C2=A0 The cryptographic solution may be more intensive, but seems like it may make BIMI more available (but yes, at the expense of mobile CPU).=C2=A0=

=C2=A0

Could you elaborate on the =E2=80=9Ceverything checks out=E2=80=9D from your secti= on about evaluation?

=C2=A0

--

Alex Brotman

Sr. Engineer, Anti-Abuse & Messaging Policy

Comcast

=C2=A0

From: bimi <bimi= -bounces@ietf.org> On Behalf Of Marcel Bokhorst
Sent: Friday, July 30, 2021 3:57 AM
To: bimi= @ietf.org
Subject: [Bimi] Fwd: bimi Digest, Vol 10, Issue 2

=C2=A0

FairEmai= l will not rely on the BIMI-Location header because this requires support from the email server. Instead, FairEmail will use the logo in the VMC and fallback to the DNS record logo location if needed (logo missing in the VMC, etc). The logo will always be shown, but the verified sender icon (a double check mark before the sender's name) will be shown only when everything checks out.


I think it would be a good idea to summarize the steps to follow to fetch/decode/check BIMI because I think it will make it easier for developers to implement BIMI and to do this in the right way.
=
The BIMI TXT record is always being fetched from the top level domain (exampl= e.org). I hope this is correct.

=C2=A0

An IMAP flag would be nice, but I guess it will take quite some time until all email servers are supporting this. Something like a signed authentication results header would be nice, as long as it can be checked in a simple and efficient way. For example heavy cryptographic operations and looking up DNS records (for certificates, etc) would result in slow downs and increased battery usage when downloading many messages.

Curr= ently, the authentication header inserted by the email server is just being trusted, but this relies on either inserting the header by the receiving email server or removing previous headers of intermediate email servers.
Fair= Email will cache the logo for two weeks, which is the same as for favicons. IMHO this is a reasonable default, preventing logos from being fetched too often and still allowing to change the logo by the sender (which I guess won't happen too often).

I hope this clarifies things, else feel free to reply.

=C2=A0

Marcel Bokhorst (author of FairEmail)

=C2=A0


---------- Forwarded message ----------
From:=C2=A0"Brotman, Alex" <Al= ex_Brotman@comcast.com>
To:=C2=A0Trent Adams <tadams=3D40= proofpoint.com@dmarc.ietf.org>, "bi= mi@ietf.org" <bi= mi@ietf.org>
Cc:=C2=A0
Bcc:=C2=A0
Date:=C2=A0Thu, 29 Jul 2021 19:45:04 +0000
Subject:=C2=A0Re: [Bimi] Independent BIMI-capab= le Email Client

I do have that app, bu= t I haven=E2=80=99t yet pointed it at a platf= orm utilizing BIMI.=C2=A0 I=E2=80=99ll make a n= ote to give it a try.

=C2=A0

From below:

=C2=A0

  • They aren't entirely clear on how (or why) to evaluate a logo referenced by the BIMI record and the one retrieved from a VMC.

=C2=A0

What about the BIMI-Location header instance, if present? (assuming you want to trust that header, etc).=C2=A0 After that, I=E2=80=99d probabl= y use the VMC if present.=C2=A0 Should we add an evaluation path to the core document?

=C2=A0

  • It's also not all that clear where to retrieve the BIMI logo when the email is sent from a subdomain, and match that up with the DMARC results.

=C2=A0

I=E2=80=99m not sure I= follow the issue here.=C2=A0 Is there some example= that shows the questionable path?

=C2=A0

  • There's also the question about whether or not an independent client can/should trust the authentication results performed by the mailbox provider when deciding to display the BIMI logo.

=C2=A0

If you go back to -00 of the core spec, there was an IMAP flag that was meant to be set (Section 8.6).=C2=A0= That was removed in -01.=C2=A0 I don=E2=80=99= t recall the justification, but may have had to do with MUA workload.=C2=A0 Seems like the IMA= P flag could be reintroduced (POP3 would be an issue though).=C2=A0 Or perhaps somethin= g akin to a DKIM signature signed by the inbound MTA that could be verified by the MUA.=C2=A0 The latter could potentially be reused though?

=C2=A0

  • There is a non-zero addition of processing required by the client to handle BIMI, leading to the question about what impact this may have on a client... and what efficiencies can be introduced with local caching (if any).

=C2=A0

I=E2=80=99d think at l= east equivalent to the TTL of the BIMI DNS record, perhaps even up to the expiration of the VMC (though I could understand where a domain holder could refresh their VMC and change logos, etc).=C2=A0 I=E2=80=99= m sure there=E2=80=99s a better answer somewhere i= n between.

=C2=A0

=C2=A0

--

Alex Brotman

Sr. Engineer, Anti-Abuse & Messaging Policy

Comcast

=C2=A0

From: bim= i <bimi-bounc= es@ietf.org> On Behalf Of Trent Adams
Sent: Friday, July 23, 2021 5:36 PM
To: bimi@ietf.= org
Subject: [Bimi] Independent BIMI-capable Email Client

=C2=A0

=C2=A0

Since Gmail's announcement, more companies are starting to play around with BIMI (no surprise there).=C2=A0 And, as expected, = the increased attention is helping to put more eyeballs on the experiment.

=C2=A0

And while some of th= e major mailbox providers are adding BIMI support to their own mobile clients, I ran into a FOSS project run by a developer in the Netherlands who has already added BIMI to their independent mobile mail client.

=C2=A0

If you get a chance,= I'd suggest taking a look at their FairEmail implementation as they made some interesting choices:

=C2=A0

https://email.faircode.eu/

=C2=A0

The current Android client package can be downloaded from their GitHub repository:

=C2=A0

https://github.com/M66B/FairEmail/releases

=C2=A0

=C2=A0

So far, they've already found some useful results from their experiment.=C2=A0 And now we're fin= ally at a point where we can test the architecture (and pressure-test the specifications) beyond the handful of usual suspects.

=C2=A0

For example, here're= a few issues this work as already surfaced when interpreting the specifications [1] [2] [3]:

=C2=A0

  • They aren't entirely clear on how (or why) to evaluate a logo referenced by the BIMI record and the one retrieved from a VMC.
  • It's also not all that clear where to retrieve the BIMI logo when the email is sent from a subdomain, and match that up with the DMARC results.
  • There's also the question about whether or not an independent client can/should trust the authentication results performed by the mailbox provider when deciding to display the BIMI logo.
  • There is a non-zero addition of processing required by the client to handle BIMI, leading to the question about what impact this may have on a client... and what efficiencies can be introduced with local caching (if any).

=C2=A0

What I found most interesting was how the specifications assume a tight coupling between the client and the mailbox provider.=C2=A0 It= definitely opens the question of whether it's possible (or recommended) for an independent client to support BIMI even for email received by mailbox providers that don't support it.=C2=A0 It's real-wo= rld interop testing like this that I hope will highlight issues that need to be discussed as the experiment continues.

=C2=A0

Also, if anyone woul= d be willing to test the FairEmail client, I'd be keen to hear if you think that the way it leverages BIMI matches your expectations.=C2=A0 Also, are there any others out there that might contribute their learnings to the conversation?

=C2=A0

Anyway, thanks for any feedback you may have.=C2=A0 It'll be= useful to hash out ideas for improvements and next steps on the list.<= /p>

=C2=A0

Cheers,

Trent

=C2=A0

[1] https://datatracker.ietf.org/doc/html/draft-blank-ietf-bimi-02

[2] https://datatracker.ietf.org/doc/html/draft-fetch-validation-vmc-wchuang-= 00

[3] https://datatracker.ietf.org/doc/html/draft-brotman-ietf-bimi-guidance-03=

=C2=A0

=C2=A0

--=C2=A0

J. Trent Adams

Director, Ecosystem Security

Proofpoint

=C2=A0<= /p>

tadams@proof= point.com

=C2=A0

bimi mailing list
bimi@ietf.org ht= tps://www.ietf.org/mailman/listinfo/bimi


--------------AB4AD04E6D6D3A9386CF1402--