From nobody Thu Oct 1 00:58:46 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F1C41B2B94; Thu, 1 Oct 2015 00:58:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.91 X-Spam-Level: X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Su0wuXoyzAAr; Thu, 1 Oct 2015 00:58:43 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C044B1B2B4E; Thu, 1 Oct 2015 00:58:40 -0700 (PDT) Received: from fr712usmtp2.zeu.alcatel-lucent.com (unknown [135.239.2.42]) by Websense Email Security Gateway with ESMTPS id 7D2B48B7FB1D5; Thu, 1 Oct 2015 07:58:36 +0000 (GMT) Received: from FR712WXCHHUB03.zeu.alcatel-lucent.com (fr712wxchhub03.zeu.alcatel-lucent.com [135.239.2.74]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id t917wbP2011037 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 1 Oct 2015 09:58:37 +0200 Received: from FR711WXCHMBA02.zeu.alcatel-lucent.com ([169.254.2.107]) by FR712WXCHHUB03.zeu.alcatel-lucent.com ([135.239.2.74]) with mapi id 14.03.0195.001; Thu, 1 Oct 2015 09:58:38 +0200 From: "Murray, Rob (Rob)" To: "Francois Le Faucheur (flefauch)" , "draft-ietf-cdni-control-triggers@ietf.org" Thread-Topic: [CDNi] Update on cdni-control-triggers Thread-Index: AQHQ/B76HXOUj7Kty0K28YgpMZG11Q== Date: Thu, 1 Oct 2015 07:58:37 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.5.5.150821 x-originating-ip: [135.239.27.38] Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Update on cdni-control-triggers X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2015 07:58:45 -0000 Ahh - there it is! Thanks for the poke Francois. I'm not aware of any other open items, but will trawl emails and notes to double-check. I'll try to get it done soon... before the submission deadline anyway. On 01/10/2015 07:25, "CDNi on behalf of Francois Le Faucheur (flefauch)" wrote: >Rob and co-authors, >(I bet you saw this one coming) > >Do you have an estimated date for when you=B9ll publish a new rev of >cdni-control-triggers? > >My understanding is that the only remaining open item is: > * alignment to the single CDNI media-type approach of >draft-ietf-cdni-media-type. >Are you aware of any other open items? > >For memory, as agreed in Prague, the plan of record is to submit the next >version (addressing all the open items) to IESG review. > >Thank you > >Francois >_______________________________________________ >CDNi mailing list >CDNi@ietf.org >https://www.ietf.org/mailman/listinfo/cdni From nobody Thu Oct 1 05:58:05 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B90661B2C98; Thu, 1 Oct 2015 05:58:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YR9Sog2NdsJK; Thu, 1 Oct 2015 05:58:01 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BAAC41B2C95; Thu, 1 Oct 2015 05:58:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1209; q=dns/txt; s=iport; t=1443704281; x=1444913881; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=yUMuOlxei1GzWfbtff64t40q2PuoVGY34RGIjI0dfl0=; b=IpHKnD1dC7WLbJu0nnJMVQvxZfINCB2G8J03PgyYs20nsKYgTp6b6x+K ARii5ZOJBUxTIufunHjmPIfOt2W3fuJo8x+/Hi5lJfvDxWrixBtTAG8rl cgi6HyeLvGhmr5jQvTeRgISNw9FhhcrsfB6Xpz8q8D2LN1xpRD1/l/BLc U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DwAQBmLQ1W/5NdJa1egydUbga9ZgENgXEKhXkCgTE4FAEBAQEBAQGBCoQkAQEBAwEBAQFrCwULAgEIGC4nCyUCBA4FiCYIDctSAQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSGdIIPgm6EWjMHgxiBFAWNPIg9AY0TgVCRPohEAR8BAUKEAnGIcoEGAQEB X-IronPort-AV: E=Sophos;i="5.17,617,1437436800"; d="scan'208";a="33685297" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-6.cisco.com with ESMTP; 01 Oct 2015 12:58:00 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id t91Cw0ab010333 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 1 Oct 2015 12:58:00 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 1 Oct 2015 07:57:47 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Thu, 1 Oct 2015 07:57:47 -0500 From: "Francois Le Faucheur (flefauch)" To: "Murray, Rob (Rob)" Thread-Topic: [CDNi] Update on cdni-control-triggers Thread-Index: AQHQ/B76HXOUj7Kty0K28YgpMZG11Z5W7P0A Date: Thu, 1 Oct 2015 12:57:20 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.22] Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" , "draft-ietf-cdni-control-triggers@ietf.org" Subject: Re: [CDNi] Update on cdni-control-triggers X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2015 12:58:03 -0000 Great. Thanks. > On 1 Oct 2015, at 09:58, Murray, Rob (Rob) wrote: >=20 > Ahh - there it is! Thanks for the poke Francois. >=20 > I'm not aware of any other open items, but will trawl emails and notes to > double-check. >=20 > I'll try to get it done soon... before the submission deadline anyway. >=20 >=20 > On 01/10/2015 07:25, "CDNi on behalf of Francois Le Faucheur (flefauch)" > wrote: >=20 >> Rob and co-authors, >> (I bet you saw this one coming) >>=20 >> Do you have an estimated date for when you=B9ll publish a new rev of >> cdni-control-triggers? >>=20 >> My understanding is that the only remaining open item is: >> * alignment to the single CDNI media-type approach of >> draft-ietf-cdni-media-type. >> Are you aware of any other open items? >>=20 >> For memory, as agreed in Prague, the plan of record is to submit the nex= t >> version (addressing all the open items) to IESG review. >>=20 >> Thank you >>=20 >> Francois >> _______________________________________________ >> CDNi mailing list >> CDNi@ietf.org >> https://www.ietf.org/mailman/listinfo/cdni >=20 From nobody Fri Oct 2 03:44:27 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E85A41B29BA for ; Fri, 2 Oct 2015 03:44:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.115 X-Spam-Level: X-Spam-Status: No, score=-2.115 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VNhEEvcnaeQ4 for ; Fri, 2 Oct 2015 03:44:22 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A33411B29B7 for ; Fri, 2 Oct 2015 03:44:21 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.17,622,1437429600"; d="scan'208,217";a="8155730" Received: from exc-cashub01.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.220]) by mailhost1b.tno.nl with ESMTP; 02 Oct 2015 12:44:19 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB01.tsn.tno.nl ([fe80::b855:be6:1aa8:4d0f%13]) with mapi id 14.03.0248.002; Fri, 2 Oct 2015 12:44:18 +0200 From: "Brandenburg, R. (Ray) van" To: "Francois Le Faucheur (flefauch)" Thread-Topic: Update on draft-ietf-cdni-redirection-11.txt Thread-Index: AQHQ+3w4OQ1idP2yvUW2QEYqibM3+J5YB5sA Date: Fri, 2 Oct 2015 10:44:17 +0000 Message-ID: References: <20150720074520.10845.57328.idtracker@ietfa.amsl.com> <95FB9969-C61E-4520-A857-1A3858779B41@cisco.com> <2EED6D0C-D74C-40B9-8A35-A4F632AA249B@tno.nl> In-Reply-To: Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.150923 x-originating-ip: [134.221.225.191] Content-Type: multipart/alternative; boundary="_000_C43F4681C36947BCBE1560A8F13AB9E2tnonl_" MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Update on draft-ietf-cdni-redirection-11.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Oct 2015 10:44:26 -0000 --_000_C43F4681C36947BCBE1560A8F13AB9E2tnonl_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRnJhbmNvaXMsDQoNCkkgZG9u4oCZdCBzZWUgYW55IG90aGVyIGlzc3VlcyBiZXlvbmQgdGhv c2UgeW91IGFscmVhZHkgbWVudGlvbmVkLiBCZW4gYW5kIEkgYXJlIGN1cnJlbnRseSB3b3JraW5n IG9uIGEgbmV3IHZlcnNpb24uIEkgZXhwZWN0IHRvIGJlIGFibGUgdG8gdXBsb2FkIHRoYXQgd2l0 aGluIGEgY291cGxlIG9mIGRheXMgYXQgbW9zdC4NCg0KUmF5DQoNCkZyb206ICJmbGVmYXVjaEBj aXNjby5jb208bWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNvbT4iDQpEYXRlOiBXZWRuZXNkYXkgMzAg U2VwdGVtYmVyIDIwMTUgYXQgMTQ6MzMNClRvOiBSYXkgdmFuIEJyYW5kZW5idXJnDQpDYzogImNk bmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5vcmc+Ig0KU3ViamVjdDogVXBkYXRlIG9uIGRy YWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMS50eHQNCg0KSGVsbG8gUmF5IGFuZCBjby1hdXRo b3JzLA0KDQpEbyB5b3UgaGF2ZSBhbiBlc3RpbWF0ZWQgZGF0ZSBmb3Igd2hlbiB5b3XigJlsbCBw dWJsaXNoIGEgbmV3IHJldiBvZiBjZG5pLXJlZGlyZWN0aW9uPw0KDQpNeSB1bmRlcnN0YW5kaW5n IGlzIHRoYXQgdGhlIHJlbWFpbmluZyBvcGVuIGl0ZW1zIGFyZToNCiogYWxpZ25tZW50IG9mIHNl Y3VyaXR5L1RMUyB0ZXh0DQoqIHJlZmxlY3QgSm9u4oCZcyBjb21tZW50cyBvbiBETlMvSFRUUCBy ZWRpcmVjdGlvbg0KKiBhbGlnbm1lbnQgdG8gdGhlIHNpbmdsZSBDRE5JIG1lZGlhLXR5cGUgYXBw cm9hY2ggb2YgZHJhZnQtaWV0Zi1jZG5pLW1lZGlhLXR5cGUuDQpBcmUgeW91IGF3YXJlIG9mIGFu eSBvdGhlciBvcGVuIGl0ZW1zPw0KDQpGb3IgbWVtb3J5LCBhcyBhZ3JlZWQgaW4gUHJhZ3VlLCB0 aGUgcGxhbiBvZiByZWNvcmQgaXMgdG8gc3VibWl0IHRoZSBuZXh0IHZlcnNpb24gKGFkZHJlc3Np bmcgYWxsIHRoZSBvcGVuIGl0ZW1zKSB0byBJRVNHIHJldmlldy4NCg0KVGhhbmsgeW91DQoNCkZy YW5jb2lzDQoNCk9uIDIyIEp1bCAyMDE1LCBhdCAxNzozMiwgQnJhbmRlbmJ1cmcsIFIuIChSYXkp IHZhbiA8cmF5LnZhbmJyYW5kZW5idXJnQHRuby5ubDxtYWlsdG86cmF5LnZhbmJyYW5kZW5idXJn QHRuby5ubD4+IHdyb3RlOg0KDQpIaSBGcmFuY29pcywNCg0KVGhhbmtzIGZvciB0aGUgcmV2aWV3 LiBJIGp1c3QgYWRkZWQgeW91ciBwcm9wb3NlZCByZXZpc2lvbnMgdG8gbXkgd29ya2luZyBjb3B5 IG9mIHRoZSBkcmFmdC4gT25jZSBJIGhhdmUgZGVhbHQgd2l0aCB0aGUgRE5TL0hUVFBTIGNvbW1l bnQgdGhhdCBKb24gbWFkZSBkdXJpbmcgdGhlIG1lZXRpbmcsIEkgd2lsbCBwdWJsaXNoIGEgbmV3 IHZlcnNpb24uDQoNClJheQ0KDQpGcm9tOiAiZmxlZmF1Y2hAY2lzY28uY29tPG1haWx0bzpmbGVm YXVjaEBjaXNjby5jb20+Ig0KRGF0ZTogVHVlc2RheSAyMSBKdWx5IDIwMTUgMTY6MDANClRvOiBS YXkgdmFuIEJyYW5kZW5idXJnDQpDYzogImNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5v cmc+Ig0KU3ViamVjdDogQWxpZ25pbmcgc2VjdXJpdHkvVExTIHRleHQgaW4gRndkOiBbQ0ROaV0g SS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTExLnR4dA0KDQpIaSBSYXks DQoNCkFzIGFncmVlZCBZZXN0ZXJkYXkgSSByZXZpZXdlZCB0aGUgc2VjdXJpdHkgc2VjdGlvbiBp biBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24gdG8gZW5zdXJlIGFsaWdubWVudCB3aXRoIHRo ZSBmaW5hbCB0ZXh0IGFncmVlZCBpbiB0aGUgY29udGV4dCBvZiBjZG5pLWxvZ2dpbmcuDQoNCkhl cmUgYXJlIG15IGNvbW1lbnRzIGZvciBjb21wbGV0ZSBhbGlnbm1lbnQgd2l0aCBmaW5hbCB0ZXh0 Og0KDQpPTEQ6DQrigJwNClRoZSB1c2Ugb2YgVExTIGZvcg0KICAgdHJhbnNwb3J0IG9mIHRoZSBD RE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNzYWdlcyBhbGxvd3M6DQoNCiAgIG8gIFRoZSBk Q0ROIGFuZCB1Q0ROIHRvIGF1dGhlbnRpY2F0ZSBlYWNoIG90aGVyICh0byBlbnN1cmUgdGhleSBh cmUNCiAgICAgIHRyYW5zbWl0dGluZy9yZWNlaXZpbmcgQ0ROSSBSZWRpcmVjdGlvbiBtaW50ZXJm YWNlIG1lc3NhZ2VzIGZyb20NCiAgICAgIGFuIGF1dGhlbnRpY2F0ZWQgQ0ROKS4NCg0KICAgbyAg Q0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVzc2FnZXMgdG8gYmUgdHJhbnNtaXR0ZWQgd2l0 aA0KICAgICAgY29uZmlkZW50aWFsaXR5Lg0KDQogICBvICBUaGUgaW50ZWdyaXR5IG9mIHRoZSBD RE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNzYWdlcyB0byBiZQ0KICAgICAgcHJvdGVjdGVk IGR1cmluZyB0aGUgZXhjaGFuZ2UuDQrigJwNCk5FVzoNCuKAnA0KVGhlIHVzZSBvZiBUTFMgZm9y DQogICB0cmFuc3BvcnQgb2YgdGhlIENETkkgUmVkaXJlY3Rpb24gaW50ZXJmYWNlIG1lc3NhZ2Vz IGFsbG93czoNCg0KICAgbyAgVGhlIGRDRE4gYW5kIHVDRE4gdG8gYXV0aGVudGljYXRlIGVhY2gg b3RoZXINCg0KYW5kLCBvbmNlIHRoZXkgaGF2ZSBtdXR1YWxseSBhdXRoZW50aWNhdGVkIGVhY2gg b3RoZXIsIGl0IGFsbG93czoNCg0KICAgbyAgdGhlIGRDRE4gYW5kIHVDRE4gdG8gYXV0aG9yaXpl IGVhY2ggb3RoZXIgKHRvIGVuc3VyZSB0aGV5IGFyZQ0KICAgICAgdHJhbnNtaXR0aW5nL3JlY2Vp dmluZyBDRE5JIFJlZGlyZWN0aW9uIG1lc3NhZ2VzIHRvL2Zyb20gYW4gYXV0aG9yaXplZCBDRE4p DQoNCiAgIG8gIENETkkgUmVkaXJlY3Rpb24gaW50ZXJmYWNlIG1lc3NhZ2VzIHRvIGJlIHRyYW5z bWl0dGVkIHdpdGgNCiAgICAgIGNvbmZpZGVudGlhbGl0eS4NCg0KICAgbyAgVGhlIGludGVncml0 eSBvZiB0aGUgQ0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVzc2FnZXMgdG8gYmUNCiAgICAg IHByb3RlY3RlZCBkdXJpbmcgdGhlIGV4Y2hhbmdlLg0K4oCcDQoNCg0KDQpPTEQ6DQrigJwNCnRo ZSB1c2Ugb2YgYSBtdXR1YWxseSBhdXRoZW50aWNhdGVkIGVuY3J5cHRlZCB0cmFuc3BvcnQgTVVT VCBiZSB1c2VkDQrigJwNCk5FVzoNCuKAnA0KbXV0dWFsbHkgYXV0aGVudGljYXRlZCBlbmNyeXB0 ZWQgdHJhbnNwb3J0IE1VU1QgYmUgdXNlZA0K4oCcDQoNCg0KT0xEOg0K4oCcDQpUTFMgTVVTVCBi ZSB1c2VkDQrigJwNCk5FVzoNClRvIHRoYXQgZW5kLCBUTFMgTVVTVCBiZSB1c2VkDQrigJwNCg0K DQpPTEQ6DQrigJwNClRoZSBnZW5lcmFsIFRMUyB1c2FnZSBndWlkYW5jZSBpbiBbUkZDNzUyNV0g U0hPVUxEIGJlIGZvbGxvd2VkLg0K4oCcDQpORVc6DQrigJwNCldoZW4gVExTIGlzIHVzZWQsIHRo ZSBnZW5lcmFsIFRMUyB1c2FnZSBndWlkYW5jZSBpbiBbUkZDNzUyNV0gTVVTVCBiZSBmb2xsb3dl ZC4NCuKAnA0KDQoNClRoYW5rcw0KDQpGcmFuY29pcw0KDQpCZWdpbiBmb3J3YXJkZWQgbWVzc2Fn ZToNCg0KRnJvbTogPGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnPj4NClN1YmplY3Q6IFtDRE5pXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWNk bmktcmVkaXJlY3Rpb24tMTEudHh0DQpEYXRlOiAyMCBKdWx5IDIwMTUgMDk6NDU6MjAgQ0VTVA0K VG86IDxpLWQtYW5ub3VuY2VAaWV0Zi5vcmc8bWFpbHRvOmktZC1hbm5vdW5jZUBpZXRmLm9yZz4+ DQpDYzogPGNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5vcmc+Pg0KDQoNCkEgTmV3IElu dGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0 cyBkaXJlY3Rvcmllcy4NClRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIENvbnRlbnQg RGVsaXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0aW9uIFdvcmtpbmcgR3JvdXAgb2YgdGhlIElF VEYuDQoNCiAgICAgICBUaXRsZSAgICAgICAgICAgOiBSZXF1ZXN0IFJvdXRpbmcgUmVkaXJlY3Rp b24gSW50ZXJmYWNlIGZvciBDRE4gSW50ZXJjb25uZWN0aW9uDQogICAgICAgQXV0aG9ycyAgICAg ICAgIDogQmVuIE5pdmVuLUplbmtpbnMNCiAgICAgICAgICAgICAgICAgICAgICAgICBSYXkgdmFu IEJyYW5kZW5idXJnDQpGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rp b24tMTEudHh0DQpQYWdlcyAgICAgICAgICAgOiAzMg0KRGF0ZSAgICAgICAgICAgIDogMjAxNS0w Ny0yMA0KDQpBYnN0cmFjdDoNCiAgVGhlIFJlcXVlc3QgUm91dGluZyBJbnRlcmZhY2UgY29tcHJp c2VzIG9mICgxKSB0aGUgYXN5bmNocm9ub3VzDQogIGFkdmVydGlzZW1lbnQgb2YgZm9vdHByaW50 IGFuZCBjYXBhYmlsaXRpZXMgYnkgYSBkb3duc3RyZWFtIENvbnRlbnQNCiAgRGVsaXZlcnkgTmV0 d29yayAoQ0ROKSB0aGF0IGFsbG93cyBhbiB1cHN0cmVhbSBDRE4gdG8gZGVjaWRlIHdoZXRoZXIN CiAgdG8gcmVkaXJlY3QgcGFydGljdWxhciB1c2VyIHJlcXVlc3RzIHRvIHRoYXQgZG93bnN0cmVh bSBDRE47IGFuZCAoMikNCiAgdGhlIHN5bmNocm9ub3VzIG9wZXJhdGlvbiBvZiBhbiB1cHN0cmVh bSBDRE4gcmVxdWVzdGluZyB3aGV0aGVyIGENCiAgZG93bnN0cmVhbSBDRE4gaXMgcHJlcGFyZWQg dG8gYWNjZXB0IGEgdXNlciByZXF1ZXN0IGFuZCBvZiBhDQogIGRvd25zdHJlYW0gQ0ROIHJlc3Bv bmRpbmcgd2l0aCBob3cgdG8gYWN0dWFsbHkgcmVkaXJlY3QgdGhlIHVzZXINCiAgcmVxdWVzdC4g IFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGludGVyZmFjZSBmb3IgdGhlIGxhdHRlciBwYXJ0 LA0KICBpLmUuIHRoZSBDRE5JIFJlcXVlc3QgUm91dGluZyBSZWRpcmVjdGlvbiBpbnRlcmZhY2Uu DQoNCg0KVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6 DQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb24vDQoNClRoZXJlJ3MgYWxzbyBhIGh0bWxpemVkIHZlcnNpb24gYXZhaWxhYmxlIGF0Og0K aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0x MQ0KDQpBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQpo dHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0 aW9uLTExDQoNCg0KUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51 dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbg0KdW50aWwgdGhlIGh0bWxpemVkIHZlcnNp b24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZzxodHRwOi8vdG9vbHMu aWV0Zi5vcmc+Lg0KDQpJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255 bW91cyBGVFAgYXQ6DQpmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ0ROaSBtYWlsaW5n IGxpc3QNCkNETmlAaWV0Zi5vcmc8bWFpbHRvOkNETmlAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCg0KDQpUaGlzIG1lc3NhZ2UgbWF5IGNvbnRh aW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91IGFyZSBu b3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91IGJ5IG1p c3Rha2UsIHlvdSBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0aGUgc2VuZGVyIGFuZCBkZWxldGUg dGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5vIGxpYWJpbGl0eSBmb3IgdGhlIGNvbnRlbnQgb2Yg dGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2UgaXQgYW5kIGZvciBk YW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tzIGluaGVyZW50IHRvIHRo ZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4NCg0KDQo= --_000_C43F4681C36947BCBE1560A8F13AB9E2tnonl_ Content-Type: text/html; charset="utf-8" Content-ID: <0092532513F3084387320942ADE815CC@tno.nl> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj4NCjxkaXY+SGkg RnJhbmNvaXMsPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5JIGRvbuKAmXQgc2VlIGFu eSBvdGhlciBpc3N1ZXMgYmV5b25kIHRob3NlIHlvdSBhbHJlYWR5IG1lbnRpb25lZC4gQmVuIGFu ZCBJIGFyZSBjdXJyZW50bHkgd29ya2luZyBvbiBhIG5ldyB2ZXJzaW9uLiBJIGV4cGVjdCB0byBi ZSBhYmxlIHRvIHVwbG9hZCB0aGF0IHdpdGhpbiBhIGNvdXBsZSBvZiBkYXlzIGF0IG1vc3QuPC9k aXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5SYXk8L2Rpdj4NCjxkaXY+DQo8ZGl2IGlkPSJN QUNfT1VUTE9PS19TSUdOQVRVUkUiPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+PGJyPg0K PC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0KPGRpdiBzdHlsZT0iZm9u dC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEycHQ7IHRleHQtYWxpZ246bGVmdDsgY29sb3I6 YmxhY2s7IEJPUkRFUi1CT1RUT006IG1lZGl1bSBub25lOyBCT1JERVItTEVGVDogbWVkaXVtIG5v bmU7IFBBRERJTkctQk9UVE9NOiAwaW47IFBBRERJTkctTEVGVDogMGluOyBQQURESU5HLVJJR0hU OiAwaW47IEJPUkRFUi1UT1A6ICNiNWM0ZGYgMXB0IHNvbGlkOyBCT1JERVItUklHSFQ6IG1lZGl1 bSBub25lOyBQQURESU5HLVRPUDogM3B0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xk Ij5Gcm9tOiA8L3NwYW4+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNvbSI+ ZmxlZmF1Y2hAY2lzY28uY29tPC9hPiZxdW90Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdo dDpib2xkIj5EYXRlOiA8L3NwYW4+V2VkbmVzZGF5IDMwIFNlcHRlbWJlciAyMDE1IGF0IDE0OjMz PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlRvOiA8L3NwYW4+UmF5IHZhbiBC cmFuZGVuYnVyZzxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5DYzogPC9zcGFu PiZxdW90OzxhIGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIj5jZG5pQGlldGYub3JnPC9hPiZx dW90Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5TdWJqZWN0OiA8L3NwYW4+ VXBkYXRlIG9uIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMS50eHQ8YnI+DQo8L2Rpdj4N CjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBicmVhay13 b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXIt d2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+SGVsbG8gUmF5IGFuZCBjby1h dXRob3JzLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+RG8geW91IGhhdmUgYW4gZXN0aW1hdGVkIGRhdGUgZm9yIHdoZW4geW914oCZbGwg cHVibGlzaCBhIG5ldyByZXYgb2YgY2RuaS1yZWRpcmVjdGlvbj88L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk15IHVuZGVyc3RhbmRpbmcg aXMgdGhhdCB0aGUgcmVtYWluaW5nIG9wZW4gaXRlbXMgYXJlOjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij48c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNwYW4iIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPjwv c3Bhbj4qIGFsaWdubWVudCBvZiBzZWN1cml0eS9UTFMgdGV4dDwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij48c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNwYW4iIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPjwv c3Bhbj4qIHJlZmxlY3QgSm9u4oCZcyBjb21tZW50cyBvbiBETlMvSFRUUCByZWRpcmVjdGlvbjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNwYW4iIHN0eWxlPSJ3 aGl0ZS1zcGFjZTpwcmUiPjwvc3Bhbj4qIGFsaWdubWVudCB0byB0aGUgc2luZ2xlIENETkkgbWVk aWEtdHlwZSBhcHByb2FjaCBvZiBkcmFmdC1pZXRmLWNkbmktbWVkaWEtdHlwZS48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+QXJlIHlvdSBhd2FyZSBvZiBhbnkgb3RoZXIgb3BlbiBpdGVtcz88L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkZvciBt ZW1vcnksIGFzIGFncmVlZCBpbiBQcmFndWUsIHRoZSBwbGFuIG9mIHJlY29yZCBpcyB0byBzdWJt aXQgdGhlIG5leHQgdmVyc2lvbiAoYWRkcmVzc2luZyBhbGwgdGhlIG9wZW4gaXRlbXMpIHRvIElF U0cgcmV2aWV3LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+VGhhbmsgeW91PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5GcmFuY29pczwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRp dj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiAy MiBKdWwgMjAxNSwgYXQgMTc6MzIsIEJyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW4gJmx0OzxhIGhy ZWY9Im1haWx0bzpyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sIiBjbGFzcz0iIj5yYXkudmFuYnJh bmRlbmJ1cmdAdG5vLm5sPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWlu dGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9IndvcmQtd3Jh cDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJl YWs6IGFmdGVyLXdoaXRlLXNwYWNlOyBmb250LXNpemU6IDE0cHg7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+SGkgRnJhbmNvaXMsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGFua3MgZm9yIHRoZSByZXZpZXcuIEkg anVzdCBhZGRlZCB5b3VyIHByb3Bvc2VkIHJldmlzaW9ucyB0byBteSB3b3JraW5nIGNvcHkgb2Yg dGhlIGRyYWZ0LiBPbmNlIEkgaGF2ZSBkZWFsdCB3aXRoIHRoZSBETlMvSFRUUFMgY29tbWVudCB0 aGF0IEpvbiBtYWRlIGR1cmluZyB0aGUgbWVldGluZywgSSB3aWxsIHB1Ymxpc2ggYSBuZXcgdmVy c2lvbi4mbmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPlJheTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgaWQ9IiIgY2xhc3M9 IiI+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9OIiBjbGFzcz0iIj4N CjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBDYWxpYnJpOyBmb250LXNpemU6IDEycHQ7IHRleHQt YWxpZ246IGxlZnQ7IGJvcmRlci13aWR0aDogMXB0IG1lZGl1bSBtZWRpdW07IGJvcmRlci1zdHls ZTogc29saWQgbm9uZSBub25lOyBwYWRkaW5nOiAzcHQgMGluIDBpbjsgYm9yZGVyLXRvcC1jb2xv cjogcmdiKDE4MSwgMTk2LCAyMjMpOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWln aHQ6Ym9sZCIgY2xhc3M9IiI+RnJvbTogPC9zcGFuPiZxdW90OzxhIGhyZWY9Im1haWx0bzpmbGVm YXVjaEBjaXNjby5jb20iIGNsYXNzPSIiPmZsZWZhdWNoQGNpc2NvLmNvbTwvYT4mcXVvdDs8YnIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCIgY2xhc3M9IiI+RGF0ZTog PC9zcGFuPlR1ZXNkYXkgMjEgSnVseSAyMDE1IDE2OjAwPGJyIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtd2VpZ2h0OmJvbGQiIGNsYXNzPSIiPlRvOiA8L3NwYW4+UmF5IHZhbiBCcmFuZGVu YnVyZzxiciBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIiBjbGFzcz0i Ij5DYzogPC9zcGFuPiZxdW90OzxhIGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIiBjbGFzcz0i Ij5jZG5pQGlldGYub3JnPC9hPiZxdW90OzxiciBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250 LXdlaWdodDpib2xkIiBjbGFzcz0iIj5TdWJqZWN0OiA8L3NwYW4+QWxpZ25pbmcgc2VjdXJpdHkv VExTIHRleHQgaW4gRndkOiBbQ0ROaV0gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1jZG5pLXJlZGly ZWN0aW9uLTExLnR4dDxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdyYXA6IGJy ZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJyZWFrOiBh ZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgUmF5LA0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QXMgYWdyZWVkIFllc3RlcmRheSBJIHJl dmlld2VkIHRoZSBzZWN1cml0eSBzZWN0aW9uIGluIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlv biB0byBlbnN1cmUgYWxpZ25tZW50IHdpdGggdGhlIGZpbmFsIHRleHQgYWdyZWVkIGluIHRoZSBj b250ZXh0IG9mIGNkbmktbG9nZ2luZy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkhlcmUgYXJlIG15IGNvbW1lbnRzIGZvciBjb21wbGV0 ZSBhbGlnbm1lbnQgd2l0aCBmaW5hbCB0ZXh0OjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+T0xEOjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj7i gJw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhlIHVzZSBvZiBUTFMgZm9yPGJyIGNsYXNzPSIiPg0K Jm5ic3A7ICZuYnNwO3RyYW5zcG9ydCBvZiB0aGUgQ0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2Ug bWVzc2FnZXMgYWxsb3dzOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7byAmbmJzcDtUaGUgZENETiBhbmQgdUNETiB0byBhdXRo ZW50aWNhdGUgZWFjaCBvdGhlciAodG8gZW5zdXJlIHRoZXkgYXJlPGJyIGNsYXNzPSIiPg0KJm5i c3A7ICZuYnNwOyAmbmJzcDsgdHJhbnNtaXR0aW5nL3JlY2VpdmluZyBDRE5JIFJlZGlyZWN0aW9u IG1pbnRlcmZhY2UgbWVzc2FnZXMgZnJvbTxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5i c3A7IGFuIGF1dGhlbnRpY2F0ZWQgQ0ROKS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQom bmJzcDsgJm5ic3A7byAmbmJzcDtDRE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNzYWdlcyB0 byBiZSB0cmFuc21pdHRlZCB3aXRoPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsg Y29uZmlkZW50aWFsaXR5LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJz cDtvICZuYnNwO1RoZSBpbnRlZ3JpdHkgb2YgdGhlIENETkkgUmVkaXJlY3Rpb24gaW50ZXJmYWNl IG1lc3NhZ2VzIHRvIGJlPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgcHJvdGVj dGVkIGR1cmluZyB0aGUgZXhjaGFuZ2UuPGJyIGNsYXNzPSIiPg0K4oCcPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPk5FVzo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPuKAnDwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5UaGUgdXNlIG9mIFRMUyBmb3I8YnIgY2xhc3M9IiI+DQombmJzcDsg Jm5ic3A7dHJhbnNwb3J0IG9mIHRoZSBDRE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNzYWdl cyBhbGxvd3M6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPiZuYnNwOyAmbmJzcDtvICZuYnNwO1RoZSBkQ0ROIGFuZCB1Q0ROIHRvIGF1dGhlbnRpY2F0 ZSBlYWNoIG90aGVyPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5hbmQsIG9uY2UgdGhleSBoYXZlIG11dHVhbGx5IGF1dGhlbnRpY2F0ZWQg ZWFjaCBvdGhlciwgaXQgYWxsb3dzOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNw OyAmbmJzcDtvICZuYnNwO3RoZSBkQ0ROIGFuZCB1Q0ROIHRvIGF1dGhvcml6ZSBlYWNoIG90aGVy ICh0byBlbnN1cmUgdGhleSBhcmU8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyB0 cmFuc21pdHRpbmcvcmVjZWl2aW5nIENETkkgUmVkaXJlY3Rpb24gbWVzc2FnZXMgdG8vZnJvbSBh biBhdXRob3JpemVkJm5ic3A7Q0ROKTxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNw OyAmbmJzcDtvICZuYnNwO0NETkkgUmVkaXJlY3Rpb24gaW50ZXJmYWNlIG1lc3NhZ2VzIHRvIGJl IHRyYW5zbWl0dGVkIHdpdGg8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBjb25m aWRlbnRpYWxpdHkuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwO28g Jm5ic3A7VGhlIGludGVncml0eSBvZiB0aGUgQ0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVz c2FnZXMgdG8gYmU8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBwcm90ZWN0ZWQg ZHVyaW5nIHRoZSBleGNoYW5nZS48YnIgY2xhc3M9IiI+DQrigJw8L2Rpdj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj5PTEQ6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPuKAnDwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij50aGUgdXNlIG9mIGEmbmJzcDttdXR1YWxseSBhdXRoZW50aWNhdGVkIGVuY3J5cHRlZCB0cmFu c3BvcnQgTVVTVCBiZSB1c2VkPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPuKAnDwvZGl2Pg0KPGRpdiBj bGFzcz0iIj5ORVc6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj7igJw8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+bXV0dWFsbHkgYXV0aGVudGljYXRlZCBlbmNyeXB0ZWQgdHJhbnNw b3J0IE1VU1QgYmUgdXNlZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj7igJw8L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk9MRDo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ 4oCcPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRMUyBNVVNUIGJlIHVzZWQ8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+4oCcPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk5FVzo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ VG8gdGhhdCBlbmQsJm5ic3A7VExTIE1VU1QgYmUgdXNlZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj7i gJw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5PTEQ6PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPuKAnDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgZ2VuZXJhbCBUTFMgdXNhZ2Ug Z3VpZGFuY2UgaW4gW1JGQzc1MjVdIFNIT1VMRCBiZSBmb2xsb3dlZC48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+4oCcPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk5FVzo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ 4oCcPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5XaGVuIFRMUyBpcyB1c2Vk LCB0aGUgZ2VuZXJhbCBUTFMgdXNhZ2UgZ3VpZGFuY2UgaW4gW1JGQzc1MjVdIE1VU1QgYmUgZm9s bG93ZWQuPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+4oCcPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5GcmFuY29pczxiciBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPkJlZ2luIGZvcndhcmRlZCBtZXNzYWdlOjwvZGl2Pg0KPGJyIGNsYXNz PSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6IDBw eDsgbWFyZ2luLXJpZ2h0OiAwcHg7IG1hcmdpbi1ib3R0b206IDBweDsgbWFyZ2luLWxlZnQ6IDBw eDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1m b250LCAnSGVsdmV0aWNhIE5ldWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj48 YiBjbGFzcz0iIj5Gcm9tOg0KPC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13 ZWJraXQtc3lzdGVtLWZvbnQsICdIZWx2ZXRpY2EgTmV1ZScsIEhlbHZldGljYSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPiZsdDs8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3Jn IiBjbGFzcz0iIj5pbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8L2E+Jmd0OzxiciBjbGFzcz0iIj4N Cjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6IDBweDsgbWFyZ2luLXJpZ2h0 OiAwcHg7IG1hcmdpbi1ib3R0b206IDBweDsgbWFyZ2luLWxlZnQ6IDBweDsiIGNsYXNzPSIiPg0K PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCAnSGVsdmV0aWNh IE5ldWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj48YiBjbGFzcz0iIj5TdWJq ZWN0Og0KPC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13ZWJraXQtc3lzdGVt LWZvbnQsICdIZWx2ZXRpY2EgTmV1ZScsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIi PjxiIGNsYXNzPSIiPltDRE5pXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rp b24tMTEudHh0PC9iPjxiciBjbGFzcz0iIj4NCjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi10b3A6IDBweDsgbWFyZ2luLXJpZ2h0OiAwcHg7IG1hcmdpbi1ib3R0b206IDBweDsgbWFy Z2luLWxlZnQ6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Vi a2l0LXN5c3RlbS1mb250LCAnSGVsdmV0aWNhIE5ldWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7 IiBjbGFzcz0iIj48YiBjbGFzcz0iIj5EYXRlOg0KPC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6IC13ZWJraXQtc3lzdGVtLWZvbnQsICdIZWx2ZXRpY2EgTmV1ZScsIEhlbHZldGlj YSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPjIwIEp1bHkgMjAxNSAwOTo0NToyMCBDRVNUPGJyIGNs YXNzPSIiPg0KPC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLXRvcDogMHB4OyBtYXJn aW4tcmlnaHQ6IDBweDsgbWFyZ2luLWJvdHRvbTogMHB4OyBtYXJnaW4tbGVmdDogMHB4OyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13ZWJraXQtc3lzdGVtLWZvbnQsICdI ZWx2ZXRpY2EgTmV1ZScsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPjxiIGNsYXNz PSIiPlRvOg0KPC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13ZWJraXQtc3lz dGVtLWZvbnQsICdIZWx2ZXRpY2EgTmV1ZScsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPiZsdDs8YSBocmVmPSJtYWlsdG86aS1kLWFubm91bmNlQGlldGYub3JnIiBjbGFzcz0iIj5p LWQtYW5ub3VuY2VAaWV0Zi5vcmc8L2E+Jmd0OzxiciBjbGFzcz0iIj4NCjwvc3Bhbj48L2Rpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6IDBweDsgbWFyZ2luLXJpZ2h0OiAwcHg7IG1hcmdpbi1i b3R0b206IDBweDsgbWFyZ2luLWxlZnQ6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCAnSGVsdmV0aWNhIE5ldWUnLCBIZWx2ZXRp Y2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj48YiBjbGFzcz0iIj5DYzoNCjwvYj48L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCAnSGVsdmV0aWNhIE5l dWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4mbHQ7PGEgaHJlZj0ibWFpbHRv OmNkbmlAaWV0Zi5vcmciIGNsYXNzPSIiPmNkbmlAaWV0Zi5vcmc8L2E+Jmd0OzxiciBjbGFzcz0i Ij4NCjwvc3Bhbj48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUg SW50ZXJuZXQtRHJhZnRzIGRpcmVjdG9yaWVzLjxiciBjbGFzcz0iIj4NClRoaXMgZHJhZnQgaXMg YSB3b3JrIGl0ZW0gb2YgdGhlIENvbnRlbnQgRGVsaXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0 aW9uIFdvcmtpbmcgR3JvdXAgb2YgdGhlIElFVEYuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7VGl0bGUgJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBS ZXF1ZXN0IFJvdXRpbmcgUmVkaXJlY3Rpb24gSW50ZXJmYWNlIGZvciBDRE4gSW50ZXJjb25uZWN0 aW9uPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7QXV0aG9ycyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDs6IEJlbiBOaXZlbi1KZW5raW5zPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7UmF5IHZhbiBCcmFuZGVuYnVyZzxiciBjbGFzcz0iIj4NCjxzcGFuIGNs YXNzPSJBcHBsZS10YWItc3BhbiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+PC9zcGFuPkZpbGVu YW1lICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogZHJhZnQtaWV0 Zi1jZG5pLXJlZGlyZWN0aW9uLTExLnR4dDxiciBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSJBcHBs ZS10YWItc3BhbiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+PC9zcGFuPlBhZ2VzICZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogMzI8 YnIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNwYW4iIHN0eWxlPSJ3aGl0ZS1z cGFjZTpwcmUiPjwvc3Bhbj5EYXRlICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogMjAxNS0wNy0yMDxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCkFic3RyYWN0OjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO1RoZSBS ZXF1ZXN0IFJvdXRpbmcgSW50ZXJmYWNlIGNvbXByaXNlcyBvZiAoMSkgdGhlIGFzeW5jaHJvbm91 czxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO2FkdmVydGlzZW1lbnQgb2YgZm9vdHByaW50IGFu ZCBjYXBhYmlsaXRpZXMgYnkgYSBkb3duc3RyZWFtIENvbnRlbnQ8YnIgY2xhc3M9IiI+DQombmJz cDsmbmJzcDtEZWxpdmVyeSBOZXR3b3JrIChDRE4pIHRoYXQgYWxsb3dzIGFuIHVwc3RyZWFtIENE TiB0byBkZWNpZGUgd2hldGhlcjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO3RvIHJlZGlyZWN0 IHBhcnRpY3VsYXIgdXNlciByZXF1ZXN0cyB0byB0aGF0IGRvd25zdHJlYW0gQ0ROOyBhbmQgKDIp PGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7dGhlIHN5bmNocm9ub3VzIG9wZXJhdGlvbiBvZiBh biB1cHN0cmVhbSBDRE4gcmVxdWVzdGluZyB3aGV0aGVyIGE8YnIgY2xhc3M9IiI+DQombmJzcDsm bmJzcDtkb3duc3RyZWFtIENETiBpcyBwcmVwYXJlZCB0byBhY2NlcHQgYSB1c2VyIHJlcXVlc3Qg YW5kIG9mIGE8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDtkb3duc3RyZWFtIENETiByZXNwb25k aW5nIHdpdGggaG93IHRvIGFjdHVhbGx5IHJlZGlyZWN0IHRoZSB1c2VyPGJyIGNsYXNzPSIiPg0K Jm5ic3A7Jm5ic3A7cmVxdWVzdC4gJm5ic3A7VGhpcyBkb2N1bWVudCBkZXNjcmliZXMgYW4gaW50 ZXJmYWNlIGZvciB0aGUgbGF0dGVyIHBhcnQsPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7aS5l LiB0aGUgQ0ROSSBSZXF1ZXN0IFJvdXRpbmcgUmVkaXJlY3Rpb24gaW50ZXJmYWNlLjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZSBJRVRGIGRhdGF0cmFja2Vy IHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlv bi8iIGNsYXNzPSIiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYt Y2RuaS1yZWRpcmVjdGlvbi88L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhlcmUn cyBhbHNvIGEgaHRtbGl6ZWQgdmVyc2lvbiBhdmFpbGFibGUgYXQ6PGJyIGNsYXNzPSIiPg0KPGEg aHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY2RuaS1yZWRpcmVj dGlvbi0xMSIgY2xhc3M9IiI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYt Y2RuaS1yZWRpcmVjdGlvbi0xMTwvYT48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpBIGRp ZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6PGJyIGNsYXNzPSIi Pg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYt Y2RuaS1yZWRpcmVjdGlvbi0xMSIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlm Zj91cmwyPWRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMTwvYT48YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtl IGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uPGJyIGNsYXNz PSIiPg0KdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBh dCA8YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmciIGNsYXNzPSIiPg0KdG9vbHMuaWV0Zi5v cmc8L2E+LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkludGVybmV0LURyYWZ0cyBhcmUg YWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDo8YnIgY2xhc3M9IiI+DQo8YSBocmVm PSJmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLyIgY2xhc3M9IiI+ZnRwOi8vZnRw LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy88L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnIgY2xh c3M9IiI+DQpDRE5pIG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpD RE5pQGlldGYub3JnIiBjbGFzcz0iIj5DRE5pQGlldGYub3JnPC9hPjxiciBjbGFzcz0iIj4NCjxh IGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaSIgY2xhc3M9 IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pPC9hPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3NwYW4+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20g MHB0OyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBBcmlhbCwgc2Fucy1zZXJp ZjsgZm9udC1zaXplOiA4cHQ7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+PC9kaXY+DQo8Zm9udCBz dHlsZT0iRk9OVC1TSVpFOiAxMXB4IiBzaXplPSIzIiBjbGFzcz0iIj48L2ZvbnQ+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBjbSAwY20gMHB0OyIgY2xhc3M9IiI+PGZvbnQgc3R5bGU9IkZPTlQtU0la RTogMTFweCIgc2l6ZT0iMyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBBcmlh bCwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiA4cHQ7IiBjbGFzcz0iIj5UaGlzIG1lc3NhZ2UgbWF5 IGNvbnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91 IGFyZSBub3QgdGhlIGFkZHJlc3NlZQ0KIG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5 b3UgYnkgbWlzdGFrZSwgeW91IGFyZSByZXF1ZXN0ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5k IGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5PIGFjY2VwdHMgbm8gbGlhYmlsaXR5IGZvciB0aGUgY29u dGVudCBvZiB0aGlzIGUtbWFpbCwgZm9yIHRoZSBtYW5uZXIgaW4gd2hpY2ggeW91IHVzZSBpdCBh bmQgZm9yIGRhbWFnZSBvZiBhbnkga2luZCByZXN1bHRpbmcgZnJvbSB0aGUgcmlza3MgaW5oZXJl bnQNCiB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21pc3Npb24gb2YgbWVzc2FnZXMuPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9zcGFuPjwvZm9udD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L3NwYW4+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_C43F4681C36947BCBE1560A8F13AB9E2tnonl_-- From nobody Fri Oct 2 04:43:56 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5030E1B2AB2 for ; Fri, 2 Oct 2015 04:43:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tKEQopUCXlk7 for ; Fri, 2 Oct 2015 04:43:52 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 436FD1B2AAE for ; Fri, 2 Oct 2015 04:43:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=30230; q=dns/txt; s=iport; t=1443786232; x=1444995832; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=GP9g/T5A2g5cUs7749pyIDKfN774zs3WAvn8FauXgO8=; b=UaLiUFe2tfwDmtI2vBK06FJuCYegAalePNZIDAgO3+nbLHON9alHTXS/ RCg+VpEwAxHMwvHo2sl2ZXPoAbbA4uuARTW5L7Z5+KODS7hm+JvHWvEsS 7MdZPfUV91HDc2npErFOApltDwdp42tjNyfc9Xu2mOOAbFyyXlgdHwvle Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0ACAgBbbQ5W/5RdJa1eglpNVG4GvXkBDYFxAQmFeQIcgR04FAEBAQEBAQGBCoQkAQEBBAEBASBLCxACAQgRAwECIQcDAgICJQsUCQgCBA4FiC4NtxSURwEBAQEBAQEBAQEBAQEBAQEBAQEBAReGdIIPgm6EcgoNBAYBBgOCYC+BFAWVfAGFFmiHGAWBUUeDcY0PhFeDbgERDgEBQoQCcYhygQYBAQE X-IronPort-AV: E=Sophos;i="5.17,623,1437436800"; d="scan'208,217";a="192843644" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-2.cisco.com with ESMTP; 02 Oct 2015 11:43:51 +0000 Received: from XCH-ALN-016.cisco.com (xch-aln-016.cisco.com [173.36.7.26]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t92BhnVN029264 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 2 Oct 2015 11:43:51 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-016.cisco.com (173.36.7.26) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Fri, 2 Oct 2015 06:43:48 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Fri, 2 Oct 2015 06:43:48 -0500 From: "Francois Le Faucheur (flefauch)" To: "Brandenburg, R. (Ray) van" Thread-Topic: Update on draft-ietf-cdni-redirection-11.txt Thread-Index: AQHQ+3wxSbfEq7WS3UaluJzx/4loFZ5YW2uAgAAQoIA= Date: Fri, 2 Oct 2015 11:43:48 +0000 Message-ID: References: <20150720074520.10845.57328.idtracker@ietfa.amsl.com> <95FB9969-C61E-4520-A857-1A3858779B41@cisco.com> <2EED6D0C-D74C-40B9-8A35-A4F632AA249B@tno.nl> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.22] Content-Type: multipart/alternative; boundary="_000_E7626D71CEE44EAB9D7B8A6CD99ED6DFciscocom_" MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Update on draft-ietf-cdni-redirection-11.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Oct 2015 11:43:55 -0000 --_000_E7626D71CEE44EAB9D7B8A6CD99ED6DFciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 R3JlYXQuIFRoYW5rcy4NCg0KT24gMiBPY3QgMjAxNSwgYXQgMTI6NDQsIEJyYW5kZW5idXJnLCBS LiAoUmF5KSB2YW4gPHJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw8bWFpbHRvOnJheS52YW5icmFu ZGVuYnVyZ0B0bm8ubmw+PiB3cm90ZToNCg0KSGkgRnJhbmNvaXMsDQoNCkkgZG9u4oCZdCBzZWUg YW55IG90aGVyIGlzc3VlcyBiZXlvbmQgdGhvc2UgeW91IGFscmVhZHkgbWVudGlvbmVkLiBCZW4g YW5kIEkgYXJlIGN1cnJlbnRseSB3b3JraW5nIG9uIGEgbmV3IHZlcnNpb24uIEkgZXhwZWN0IHRv IGJlIGFibGUgdG8gdXBsb2FkIHRoYXQgd2l0aGluIGEgY291cGxlIG9mIGRheXMgYXQgbW9zdC4N Cg0KUmF5DQoNCkZyb206ICJmbGVmYXVjaEBjaXNjby5jb208bWFpbHRvOmZsZWZhdWNoQGNpc2Nv LmNvbT4iDQpEYXRlOiBXZWRuZXNkYXkgMzAgU2VwdGVtYmVyIDIwMTUgYXQgMTQ6MzMNClRvOiBS YXkgdmFuIEJyYW5kZW5idXJnDQpDYzogImNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5v cmc+Ig0KU3ViamVjdDogVXBkYXRlIG9uIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMS50 eHQNCg0KSGVsbG8gUmF5IGFuZCBjby1hdXRob3JzLA0KDQpEbyB5b3UgaGF2ZSBhbiBlc3RpbWF0 ZWQgZGF0ZSBmb3Igd2hlbiB5b3XigJlsbCBwdWJsaXNoIGEgbmV3IHJldiBvZiBjZG5pLXJlZGly ZWN0aW9uPw0KDQpNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgdGhlIHJlbWFpbmluZyBvcGVuIGl0 ZW1zIGFyZToNCiogYWxpZ25tZW50IG9mIHNlY3VyaXR5L1RMUyB0ZXh0DQoqIHJlZmxlY3QgSm9u 4oCZcyBjb21tZW50cyBvbiBETlMvSFRUUCByZWRpcmVjdGlvbg0KKiBhbGlnbm1lbnQgdG8gdGhl IHNpbmdsZSBDRE5JIG1lZGlhLXR5cGUgYXBwcm9hY2ggb2YgZHJhZnQtaWV0Zi1jZG5pLW1lZGlh LXR5cGUuDQpBcmUgeW91IGF3YXJlIG9mIGFueSBvdGhlciBvcGVuIGl0ZW1zPw0KDQpGb3IgbWVt b3J5LCBhcyBhZ3JlZWQgaW4gUHJhZ3VlLCB0aGUgcGxhbiBvZiByZWNvcmQgaXMgdG8gc3VibWl0 IHRoZSBuZXh0IHZlcnNpb24gKGFkZHJlc3NpbmcgYWxsIHRoZSBvcGVuIGl0ZW1zKSB0byBJRVNH IHJldmlldy4NCg0KVGhhbmsgeW91DQoNCkZyYW5jb2lzDQoNCk9uIDIyIEp1bCAyMDE1LCBhdCAx NzozMiwgQnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbiA8cmF5LnZhbmJyYW5kZW5idXJnQHRuby5u bDxtYWlsdG86cmF5LnZhbmJyYW5kZW5idXJnQHRuby5ubD4+IHdyb3RlOg0KDQpIaSBGcmFuY29p cywNCg0KVGhhbmtzIGZvciB0aGUgcmV2aWV3LiBJIGp1c3QgYWRkZWQgeW91ciBwcm9wb3NlZCBy ZXZpc2lvbnMgdG8gbXkgd29ya2luZyBjb3B5IG9mIHRoZSBkcmFmdC4gT25jZSBJIGhhdmUgZGVh bHQgd2l0aCB0aGUgRE5TL0hUVFBTIGNvbW1lbnQgdGhhdCBKb24gbWFkZSBkdXJpbmcgdGhlIG1l ZXRpbmcsIEkgd2lsbCBwdWJsaXNoIGEgbmV3IHZlcnNpb24uDQoNClJheQ0KDQpGcm9tOiAiZmxl ZmF1Y2hAY2lzY28uY29tPG1haWx0bzpmbGVmYXVjaEBjaXNjby5jb20+Ig0KRGF0ZTogVHVlc2Rh eSAyMSBKdWx5IDIwMTUgMTY6MDANClRvOiBSYXkgdmFuIEJyYW5kZW5idXJnDQpDYzogImNkbmlA aWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5vcmc+Ig0KU3ViamVjdDogQWxpZ25pbmcgc2VjdXJp dHkvVExTIHRleHQgaW4gRndkOiBbQ0ROaV0gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1jZG5pLXJl ZGlyZWN0aW9uLTExLnR4dA0KDQpIaSBSYXksDQoNCkFzIGFncmVlZCBZZXN0ZXJkYXkgSSByZXZp ZXdlZCB0aGUgc2VjdXJpdHkgc2VjdGlvbiBpbiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24g dG8gZW5zdXJlIGFsaWdubWVudCB3aXRoIHRoZSBmaW5hbCB0ZXh0IGFncmVlZCBpbiB0aGUgY29u dGV4dCBvZiBjZG5pLWxvZ2dpbmcuDQoNCkhlcmUgYXJlIG15IGNvbW1lbnRzIGZvciBjb21wbGV0 ZSBhbGlnbm1lbnQgd2l0aCBmaW5hbCB0ZXh0Og0KDQpPTEQ6DQrigJwNClRoZSB1c2Ugb2YgVExT IGZvcg0KICAgdHJhbnNwb3J0IG9mIHRoZSBDRE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNz YWdlcyBhbGxvd3M6DQoNCiAgIG8gIFRoZSBkQ0ROIGFuZCB1Q0ROIHRvIGF1dGhlbnRpY2F0ZSBl YWNoIG90aGVyICh0byBlbnN1cmUgdGhleSBhcmUNCiAgICAgIHRyYW5zbWl0dGluZy9yZWNlaXZp bmcgQ0ROSSBSZWRpcmVjdGlvbiBtaW50ZXJmYWNlIG1lc3NhZ2VzIGZyb20NCiAgICAgIGFuIGF1 dGhlbnRpY2F0ZWQgQ0ROKS4NCg0KICAgbyAgQ0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVz c2FnZXMgdG8gYmUgdHJhbnNtaXR0ZWQgd2l0aA0KICAgICAgY29uZmlkZW50aWFsaXR5Lg0KDQog ICBvICBUaGUgaW50ZWdyaXR5IG9mIHRoZSBDRE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNz YWdlcyB0byBiZQ0KICAgICAgcHJvdGVjdGVkIGR1cmluZyB0aGUgZXhjaGFuZ2UuDQrigJwNCk5F VzoNCuKAnA0KVGhlIHVzZSBvZiBUTFMgZm9yDQogICB0cmFuc3BvcnQgb2YgdGhlIENETkkgUmVk aXJlY3Rpb24gaW50ZXJmYWNlIG1lc3NhZ2VzIGFsbG93czoNCg0KICAgbyAgVGhlIGRDRE4gYW5k IHVDRE4gdG8gYXV0aGVudGljYXRlIGVhY2ggb3RoZXINCg0KYW5kLCBvbmNlIHRoZXkgaGF2ZSBt dXR1YWxseSBhdXRoZW50aWNhdGVkIGVhY2ggb3RoZXIsIGl0IGFsbG93czoNCg0KICAgbyAgdGhl IGRDRE4gYW5kIHVDRE4gdG8gYXV0aG9yaXplIGVhY2ggb3RoZXIgKHRvIGVuc3VyZSB0aGV5IGFy ZQ0KICAgICAgdHJhbnNtaXR0aW5nL3JlY2VpdmluZyBDRE5JIFJlZGlyZWN0aW9uIG1lc3NhZ2Vz IHRvL2Zyb20gYW4gYXV0aG9yaXplZCBDRE4pDQoNCiAgIG8gIENETkkgUmVkaXJlY3Rpb24gaW50 ZXJmYWNlIG1lc3NhZ2VzIHRvIGJlIHRyYW5zbWl0dGVkIHdpdGgNCiAgICAgIGNvbmZpZGVudGlh bGl0eS4NCg0KICAgbyAgVGhlIGludGVncml0eSBvZiB0aGUgQ0ROSSBSZWRpcmVjdGlvbiBpbnRl cmZhY2UgbWVzc2FnZXMgdG8gYmUNCiAgICAgIHByb3RlY3RlZCBkdXJpbmcgdGhlIGV4Y2hhbmdl Lg0K4oCcDQoNCg0KDQpPTEQ6DQrigJwNCnRoZSB1c2Ugb2YgYSBtdXR1YWxseSBhdXRoZW50aWNh dGVkIGVuY3J5cHRlZCB0cmFuc3BvcnQgTVVTVCBiZSB1c2VkDQrigJwNCk5FVzoNCuKAnA0KbXV0 dWFsbHkgYXV0aGVudGljYXRlZCBlbmNyeXB0ZWQgdHJhbnNwb3J0IE1VU1QgYmUgdXNlZA0K4oCc DQoNCg0KT0xEOg0K4oCcDQpUTFMgTVVTVCBiZSB1c2VkDQrigJwNCk5FVzoNClRvIHRoYXQgZW5k LCBUTFMgTVVTVCBiZSB1c2VkDQrigJwNCg0KDQpPTEQ6DQrigJwNClRoZSBnZW5lcmFsIFRMUyB1 c2FnZSBndWlkYW5jZSBpbiBbUkZDNzUyNV0gU0hPVUxEIGJlIGZvbGxvd2VkLg0K4oCcDQpORVc6 DQrigJwNCldoZW4gVExTIGlzIHVzZWQsIHRoZSBnZW5lcmFsIFRMUyB1c2FnZSBndWlkYW5jZSBp biBbUkZDNzUyNV0gTVVTVCBiZSBmb2xsb3dlZC4NCuKAnA0KDQoNClRoYW5rcw0KDQpGcmFuY29p cw0KDQpCZWdpbiBmb3J3YXJkZWQgbWVzc2FnZToNCg0KRnJvbTogPGludGVybmV0LWRyYWZ0c0Bp ZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPj4NClN1YmplY3Q6IFtDRE5p XSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTEudHh0DQpEYXRlOiAy MCBKdWx5IDIwMTUgMDk6NDU6MjAgQ0VTVA0KVG86IDxpLWQtYW5ub3VuY2VAaWV0Zi5vcmc8bWFp bHRvOmktZC1hbm5vdW5jZUBpZXRmLm9yZz4+DQpDYzogPGNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNk bmlAaWV0Zi5vcmc+Pg0KDQoNCkEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9t IHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0cyBkaXJlY3Rvcmllcy4NClRoaXMgZHJhZnQgaXMg YSB3b3JrIGl0ZW0gb2YgdGhlIENvbnRlbnQgRGVsaXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0 aW9uIFdvcmtpbmcgR3JvdXAgb2YgdGhlIElFVEYuDQoNCiAgICAgICBUaXRsZSAgICAgICAgICAg OiBSZXF1ZXN0IFJvdXRpbmcgUmVkaXJlY3Rpb24gSW50ZXJmYWNlIGZvciBDRE4gSW50ZXJjb25u ZWN0aW9uDQogICAgICAgQXV0aG9ycyAgICAgICAgIDogQmVuIE5pdmVuLUplbmtpbnMNCiAgICAg ICAgICAgICAgICAgICAgICAgICBSYXkgdmFuIEJyYW5kZW5idXJnDQpGaWxlbmFtZSAgICAgICAg OiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTEudHh0DQpQYWdlcyAgICAgICAgICAgOiAz Mg0KRGF0ZSAgICAgICAgICAgIDogMjAxNS0wNy0yMA0KDQpBYnN0cmFjdDoNCiAgVGhlIFJlcXVl c3QgUm91dGluZyBJbnRlcmZhY2UgY29tcHJpc2VzIG9mICgxKSB0aGUgYXN5bmNocm9ub3VzDQog IGFkdmVydGlzZW1lbnQgb2YgZm9vdHByaW50IGFuZCBjYXBhYmlsaXRpZXMgYnkgYSBkb3duc3Ry ZWFtIENvbnRlbnQNCiAgRGVsaXZlcnkgTmV0d29yayAoQ0ROKSB0aGF0IGFsbG93cyBhbiB1cHN0 cmVhbSBDRE4gdG8gZGVjaWRlIHdoZXRoZXINCiAgdG8gcmVkaXJlY3QgcGFydGljdWxhciB1c2Vy IHJlcXVlc3RzIHRvIHRoYXQgZG93bnN0cmVhbSBDRE47IGFuZCAoMikNCiAgdGhlIHN5bmNocm9u b3VzIG9wZXJhdGlvbiBvZiBhbiB1cHN0cmVhbSBDRE4gcmVxdWVzdGluZyB3aGV0aGVyIGENCiAg ZG93bnN0cmVhbSBDRE4gaXMgcHJlcGFyZWQgdG8gYWNjZXB0IGEgdXNlciByZXF1ZXN0IGFuZCBv ZiBhDQogIGRvd25zdHJlYW0gQ0ROIHJlc3BvbmRpbmcgd2l0aCBob3cgdG8gYWN0dWFsbHkgcmVk aXJlY3QgdGhlIHVzZXINCiAgcmVxdWVzdC4gIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGlu dGVyZmFjZSBmb3IgdGhlIGxhdHRlciBwYXJ0LA0KICBpLmUuIHRoZSBDRE5JIFJlcXVlc3QgUm91 dGluZyBSZWRpcmVjdGlvbiBpbnRlcmZhY2UuDQoNCg0KVGhlIElFVEYgZGF0YXRyYWNrZXIgc3Rh dHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6DQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RvYy9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24vDQoNClRoZXJlJ3MgYWxzbyBhIGh0bWxp emVkIHZlcnNpb24gYXZhaWxhYmxlIGF0Og0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMQ0KDQpBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMg dmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQpodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3Vy bDI9ZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTExDQoNCg0KUGxlYXNlIG5vdGUgdGhhdCBp dCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lv bg0KdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0 b29scy5pZXRmLm9yZzxodHRwOi8vdG9vbHMuaWV0Zi5vcmcvPi4NCg0KSW50ZXJuZXQtRHJhZnRz IGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Og0KZnRwOi8vZnRwLmlldGYu b3JnL2ludGVybmV0LWRyYWZ0cy8NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCkNETmkgbWFpbGluZyBsaXN0DQpDRE5pQGlldGYub3JnPG1haWx0bzpD RE5pQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5p DQoNCg0KVGhpcyBtZXNzYWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGlu dGVuZGVkIGZvciB5b3UuIElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBt ZXNzYWdlIHdhcyBzZW50IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0byBp bmZvcm0gdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBubyBs aWFiaWxpdHkgZm9yIHRoZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3IgdGhlIG1hbm5lciBp biB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJlc3VsdGluZyBm cm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21pc3Npb24gb2Yg bWVzc2FnZXMuDQoNCg0KDQo= --_000_E7626D71CEE44EAB9D7B8A6CD99ED6DFciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <2B6DF9F2C3967B4FB16BB14E49EACDB0@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KR3JlYXQuIFRoYW5rcy4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iIj4NCjxibG9ja3F1b3RlIHR5cGU9 ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiAyIE9jdCAyMDE1LCBhdCAxMjo0NCwg QnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJheS52YW5icmFu ZGVuYnVyZ0B0bm8ubmwiIGNsYXNzPSIiPnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw8L2E+Jmd0 OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0 LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7 IGZvbnQtc2l6ZTogMTRweDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPkhpIEZyYW5jb2lzLDwvZGl2Pg0K PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSBkb27i gJl0IHNlZSBhbnkgb3RoZXIgaXNzdWVzIGJleW9uZCB0aG9zZSB5b3UgYWxyZWFkeSBtZW50aW9u ZWQuIEJlbiBhbmQgSSBhcmUgY3VycmVudGx5IHdvcmtpbmcgb24gYSBuZXcgdmVyc2lvbi4gSSBl eHBlY3QgdG8gYmUgYWJsZSB0byB1cGxvYWQgdGhhdCB3aXRoaW4gYSBjb3VwbGUgb2YgZGF5cyBh dCBtb3N0LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+UmF5PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBpZD0iTUFDX09VVExPT0tf U0lHTkFUVVJFIiBjbGFzcz0iIj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9OIiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBDYWxpYnJpOyBmb250LXNpemU6IDEy cHQ7IHRleHQtYWxpZ246IGxlZnQ7IGJvcmRlci13aWR0aDogMXB0IG1lZGl1bSBtZWRpdW07IGJv cmRlci1zdHlsZTogc29saWQgbm9uZSBub25lOyBwYWRkaW5nOiAzcHQgMGluIDBpbjsgYm9yZGVy LXRvcC1jb2xvcjogcmdiKDE4MSwgMTk2LCAyMjMpOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0i Zm9udC13ZWlnaHQ6Ym9sZCIgY2xhc3M9IiI+RnJvbTogPC9zcGFuPiZxdW90OzxhIGhyZWY9Im1h aWx0bzpmbGVmYXVjaEBjaXNjby5jb20iIGNsYXNzPSIiPmZsZWZhdWNoQGNpc2NvLmNvbTwvYT4m cXVvdDs8YnIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCIgY2xhc3M9 IiI+RGF0ZTogPC9zcGFuPldlZG5lc2RheSAzMCBTZXB0ZW1iZXIgMjAxNSBhdCAxNDozMzxiciBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIiBjbGFzcz0iIj5UbzogPC9z cGFuPlJheSB2YW4gQnJhbmRlbmJ1cmc8YnIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC13 ZWlnaHQ6Ym9sZCIgY2xhc3M9IiI+Q2M6IDwvc3Bhbj4mcXVvdDs8YSBocmVmPSJtYWlsdG86Y2Ru aUBpZXRmLm9yZyIgY2xhc3M9IiI+Y2RuaUBpZXRmLm9yZzwvYT4mcXVvdDs8YnIgY2xhc3M9IiI+ DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCIgY2xhc3M9IiI+U3ViamVjdDogPC9zcGFu PlVwZGF0ZSBvbiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTEudHh0PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9IndvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1v ZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPkhlbGxvIFJheSBhbmQgY28tYXV0aG9ycyw8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkRvIHlvdSBoYXZl IGFuIGVzdGltYXRlZCBkYXRlIGZvciB3aGVuIHlvdeKAmWxsIHB1Ymxpc2ggYSBuZXcgcmV2IG9m IGNkbmktcmVkaXJlY3Rpb24/PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5NeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgdGhlIHJlbWFpbmlu ZyBvcGVuIGl0ZW1zIGFyZTo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IkFwcGxl LXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj48L3NwYW4+KiBhbGlnbm1lbnQgb2Yg c2VjdXJpdHkvVExTIHRleHQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IkFwcGxl LXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj48L3NwYW4+KiByZWZsZWN0IEpvbuKA mXMgY29tbWVudHMgb24gRE5TL0hUVFAgcmVkaXJlY3Rpb248L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PHNwYW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj48L3Nw YW4+KiBhbGlnbm1lbnQgdG8gdGhlIHNpbmdsZSBDRE5JIG1lZGlhLXR5cGUgYXBwcm9hY2ggb2Yg ZHJhZnQtaWV0Zi1jZG5pLW1lZGlhLXR5cGUuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFyZSB5b3Ug YXdhcmUgb2YgYW55IG90aGVyIG9wZW4gaXRlbXM/PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5Gb3IgbWVtb3J5LCBhcyBhZ3JlZWQgaW4g UHJhZ3VlLCB0aGUgcGxhbiBvZiByZWNvcmQgaXMgdG8gc3VibWl0IHRoZSBuZXh0IHZlcnNpb24g KGFkZHJlc3NpbmcgYWxsIHRoZSBvcGVuIGl0ZW1zKSB0byBJRVNHIHJldmlldy48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rIHlv dTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+RnJhbmNvaXM8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8YmxvY2tx dW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMjIgSnVsIDIwMTUs IGF0IDE3OjMyLCBCcmFuZGVuYnVyZywgUi4gKFJheSkgdmFuICZsdDs8YSBocmVmPSJtYWlsdG86 cmF5LnZhbmJyYW5kZW5idXJnQHRuby5ubCIgY2xhc3M9IiI+cmF5LnZhbmJyYW5kZW5idXJnQHRu by5ubDwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1u ZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdv cmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJyZWFrOiBhZnRlci13 aGl0ZS1zcGFjZTsgZm9udC1zaXplOiAxNHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPkhpIEZyYW5jb2lzLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzIGZvciB0aGUgcmV2aWV3LiBJIGp1c3QgYWRkZWQg eW91ciBwcm9wb3NlZCByZXZpc2lvbnMgdG8gbXkgd29ya2luZyBjb3B5IG9mIHRoZSBkcmFmdC4g T25jZSBJIGhhdmUgZGVhbHQgd2l0aCB0aGUgRE5TL0hUVFBTIGNvbW1lbnQgdGhhdCBKb24gbWFk ZSBkdXJpbmcgdGhlIG1lZXRpbmcsIEkgd2lsbCBwdWJsaXNoIGEgbmV3IHZlcnNpb24uJm5ic3A7 PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij5SYXk8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGlkPSIiIGNsYXNzPSIiPjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxzcGFuIGlkPSJPTEtfU1JDX0JPRFlfU0VDVElPTiIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJmb250LWZhbWlseTogQ2FsaWJyaTsgZm9udC1zaXplOiAxMnB0OyB0ZXh0LWFsaWduOiBsZWZ0 OyBib3JkZXItd2lkdGg6IDFwdCBtZWRpdW0gbWVkaXVtOyBib3JkZXItc3R5bGU6IHNvbGlkIG5v bmUgbm9uZTsgcGFkZGluZzogM3B0IDBpbiAwaW47IGJvcmRlci10b3AtY29sb3I6IHJnYigxODEs IDE5NiwgMjIzKTsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiIGNs YXNzPSIiPkZyb206IDwvc3Bhbj4mcXVvdDs8YSBocmVmPSJtYWlsdG86ZmxlZmF1Y2hAY2lzY28u Y29tIiBjbGFzcz0iIj5mbGVmYXVjaEBjaXNjby5jb208L2E+JnF1b3Q7PGJyIGNsYXNzPSIiPg0K PHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiIGNsYXNzPSIiPkRhdGU6IDwvc3Bhbj5UdWVz ZGF5IDIxIEp1bHkgMjAxNSAxNjowMDxiciBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXdl aWdodDpib2xkIiBjbGFzcz0iIj5UbzogPC9zcGFuPlJheSB2YW4gQnJhbmRlbmJ1cmc8YnIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCIgY2xhc3M9IiI+Q2M6IDwvc3Bh bj4mcXVvdDs8YSBocmVmPSJtYWlsdG86Y2RuaUBpZXRmLm9yZyIgY2xhc3M9IiI+Y2RuaUBpZXRm Lm9yZzwvYT4mcXVvdDs8YnIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9s ZCIgY2xhc3M9IiI+U3ViamVjdDogPC9zcGFuPkFsaWduaW5nIHNlY3VyaXR5L1RMUyB0ZXh0IGlu IEZ3ZDogW0NETmldIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMS50 eHQ8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3JkOyAt d2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUt c3BhY2U7IiBjbGFzcz0iIj4NCkhpIFJheSwNCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFzIGFncmVlZCBZZXN0ZXJkYXkgSSByZXZpZXdlZCB0aGUg c2VjdXJpdHkgc2VjdGlvbiBpbiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24gdG8gZW5zdXJl IGFsaWdubWVudCB3aXRoIHRoZSBmaW5hbCB0ZXh0IGFncmVlZCBpbiB0aGUgY29udGV4dCBvZiBj ZG5pLWxvZ2dpbmcuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5IZXJlIGFyZSBteSBjb21tZW50cyBmb3IgY29tcGxldGUgYWxpZ25tZW50 IHdpdGggZmluYWwgdGV4dDo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPk9MRDo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+4oCcPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPlRoZSB1c2Ugb2YgVExTIGZvcjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJz cDt0cmFuc3BvcnQgb2YgdGhlIENETkkgUmVkaXJlY3Rpb24gaW50ZXJmYWNlIG1lc3NhZ2VzIGFs bG93czo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ Jm5ic3A7ICZuYnNwO28gJm5ic3A7VGhlIGRDRE4gYW5kIHVDRE4gdG8gYXV0aGVudGljYXRlIGVh Y2ggb3RoZXIgKHRvIGVuc3VyZSB0aGV5IGFyZTxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsg Jm5ic3A7IHRyYW5zbWl0dGluZy9yZWNlaXZpbmcgQ0ROSSBSZWRpcmVjdGlvbiBtaW50ZXJmYWNl IG1lc3NhZ2VzIGZyb208YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBhbiBhdXRo ZW50aWNhdGVkIENETikuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNw O28gJm5ic3A7Q0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVzc2FnZXMgdG8gYmUgdHJhbnNt aXR0ZWQgd2l0aDxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7IGNvbmZpZGVudGlh bGl0eS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7byAmbmJzcDtU aGUgaW50ZWdyaXR5IG9mIHRoZSBDRE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNzYWdlcyB0 byBiZTxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7IHByb3RlY3RlZCBkdXJpbmcg dGhlIGV4Y2hhbmdlLjxiciBjbGFzcz0iIj4NCuKAnDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5ORVc6 PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj7igJw8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+VGhlIHVzZSBvZiBUTFMgZm9yPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwO3RyYW5z cG9ydCBvZiB0aGUgQ0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVzc2FnZXMgYWxsb3dzOjxi ciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDsg Jm5ic3A7byAmbmJzcDtUaGUgZENETiBhbmQgdUNETiB0byBhdXRoZW50aWNhdGUgZWFjaCBvdGhl cjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+YW5kLCBvbmNlIHRoZXkgaGF2ZSBtdXR1YWxseSBhdXRoZW50aWNhdGVkIGVhY2ggb3RoZXIs IGl0IGFsbG93czo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7byAm bmJzcDt0aGUgZENETiBhbmQgdUNETiB0byBhdXRob3JpemUgZWFjaCBvdGhlciAodG8gZW5zdXJl IHRoZXkgYXJlPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgdHJhbnNtaXR0aW5n L3JlY2VpdmluZyBDRE5JIFJlZGlyZWN0aW9uIG1lc3NhZ2VzIHRvL2Zyb20gYW4gYXV0aG9yaXpl ZCZuYnNwO0NETik8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7byAm bmJzcDtDRE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNzYWdlcyB0byBiZSB0cmFuc21pdHRl ZCB3aXRoPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgY29uZmlkZW50aWFsaXR5 LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDtvICZuYnNwO1RoZSBp bnRlZ3JpdHkgb2YgdGhlIENETkkgUmVkaXJlY3Rpb24gaW50ZXJmYWNlIG1lc3NhZ2VzIHRvIGJl PGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgcHJvdGVjdGVkIGR1cmluZyB0aGUg ZXhjaGFuZ2UuPGJyIGNsYXNzPSIiPg0K4oCcPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+T0xE OjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj7igJw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+dGhlIHVzZSBv ZiBhJm5ic3A7bXV0dWFsbHkgYXV0aGVudGljYXRlZCBlbmNyeXB0ZWQgdHJhbnNwb3J0IE1VU1Qg YmUgdXNlZDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj7igJw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+TkVX OjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+4oCcPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPm11dHVhbGx5IGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGVkIHRyYW5zcG9ydCBNVVNUIGJl IHVzZWQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+4oCcPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5PTEQ6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPuKAnDwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5UTFMgTVVTVCBiZSB1c2VkPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPuKAnDwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5ORVc6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRvIHRoYXQgZW5k LCZuYnNwO1RMUyBNVVNUIGJlIHVzZWQ8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+4oCcPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+T0xEOjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj7i gJw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhlIGdlbmVyYWwgVExTIHVzYWdlIGd1aWRhbmNlIGlu IFtSRkM3NTI1XSBTSE9VTEQgYmUgZm9sbG93ZWQuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPuKAnDwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5ORVc6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPuKAnDwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+V2hlbiBUTFMgaXMgdXNlZCwgdGhlIGdlbmVy YWwgVExTIHVzYWdlIGd1aWRhbmNlIGluIFtSRkM3NTI1XSBNVVNUIGJlIGZvbGxvd2VkLjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPuKAnDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPlRoYW5rczwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+RnJhbmNvaXM8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj5CZWdpbiBmb3J3YXJkZWQgbWVzc2FnZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50 ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOiAwcHg7IG1hcmdpbi1y aWdodDogMHB4OyBtYXJnaW4tYm90dG9tOiAwcHg7IG1hcmdpbi1sZWZ0OiAwcHg7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwgJ0hlbHZl dGljYSBOZXVlJywgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+PGIgY2xhc3M9IiI+ RnJvbToNCjwvYj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3Rl bS1mb250LCAnSGVsdmV0aWNhIE5ldWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4mbHQ7PGEgaHJlZj0ibWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgY2xhc3M9IiI+ aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPC9hPiZndDs8YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOiAwcHg7IG1hcmdpbi1yaWdodDogMHB4OyBtYXJn aW4tYm90dG9tOiAwcHg7IG1hcmdpbi1sZWZ0OiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwgJ0hlbHZldGljYSBOZXVlJywgSGVs dmV0aWNhLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+PGIgY2xhc3M9IiI+U3ViamVjdDoNCjwvYj48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCAnSGVs dmV0aWNhIE5ldWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj48YiBjbGFzcz0i Ij5bQ0ROaV0gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTExLnR4dDwv Yj48YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOiAw cHg7IG1hcmdpbi1yaWdodDogMHB4OyBtYXJnaW4tYm90dG9tOiAwcHg7IG1hcmdpbi1sZWZ0OiAw cHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0t Zm9udCwgJ0hlbHZldGljYSBOZXVlJywgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+ PGIgY2xhc3M9IiI+RGF0ZToNCjwvYj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAt d2Via2l0LXN5c3RlbS1mb250LCAnSGVsdmV0aWNhIE5ldWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4yMCBKdWx5IDIwMTUgMDk6NDU6MjAgQ0VTVDxiciBjbGFzcz0iIj4NCjwv c3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6IDBweDsgbWFyZ2luLXJpZ2h0OiAw cHg7IG1hcmdpbi1ib3R0b206IDBweDsgbWFyZ2luLWxlZnQ6IDBweDsiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCAnSGVsdmV0aWNhIE5l dWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj48YiBjbGFzcz0iIj5UbzoNCjwv Yj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCAn SGVsdmV0aWNhIE5ldWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4mbHQ7PGEg aHJlZj0ibWFpbHRvOmktZC1hbm5vdW5jZUBpZXRmLm9yZyIgY2xhc3M9IiI+aS1kLWFubm91bmNl QGlldGYub3JnPC9hPiZndDs8YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW4tdG9wOiAwcHg7IG1hcmdpbi1yaWdodDogMHB4OyBtYXJnaW4tYm90dG9tOiAwcHg7 IG1hcmdpbi1sZWZ0OiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTog LXdlYmtpdC1zeXN0ZW0tZm9udCwgJ0hlbHZldGljYSBOZXVlJywgSGVsdmV0aWNhLCBzYW5zLXNl cmlmOyIgY2xhc3M9IiI+PGIgY2xhc3M9IiI+Q2M6DQo8L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwgJ0hlbHZldGljYSBOZXVlJywgSGVsdmV0 aWNhLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+Jmx0OzxhIGhyZWY9Im1haWx0bzpjZG5pQGlldGYu b3JnIiBjbGFzcz0iIj5jZG5pQGlldGYub3JnPC9hPiZndDs8YnIgY2xhc3M9IiI+DQo8L3NwYW4+ PC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCkEgTmV3 IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURy YWZ0cyBkaXJlY3Rvcmllcy48YnIgY2xhc3M9IiI+DQpUaGlzIGRyYWZ0IGlzIGEgd29yayBpdGVt IG9mIHRoZSBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVyY29ubmVjdGlvbiBXb3JraW5n IEdyb3VwIG9mIHRoZSBJRVRGLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1RpdGxlICZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogUmVxdWVzdCBSb3V0 aW5nIFJlZGlyZWN0aW9uIEludGVyZmFjZSBmb3IgQ0ROIEludGVyY29ubmVjdGlvbjxiciBjbGFz cz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO0F1dGhvcnMg Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBCZW4gTml2 ZW4tSmVua2luczxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwO1JheSB2YW4gQnJhbmRlbmJ1cmc8YnIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iQXBwbGUt dGFiLXNwYW4iIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPjwvc3Bhbj5GaWxlbmFtZSAmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6IGRyYWZ0LWlldGYtY2RuaS1yZWRp cmVjdGlvbi0xMS50eHQ8YnIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNwYW4i IHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPjwvc3Bhbj5QYWdlcyAmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6IDMyPGJyIGNsYXNzPSIi Pg0KPHNwYW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj48 L3NwYW4+RGF0ZSAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDs6IDIwMTUtMDctMjA8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpBYnN0cmFjdDo8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDtUaGUgUmVxdWVzdCBSb3V0 aW5nIEludGVyZmFjZSBjb21wcmlzZXMgb2YgKDEpIHRoZSBhc3luY2hyb25vdXM8YnIgY2xhc3M9 IiI+DQombmJzcDsmbmJzcDthZHZlcnRpc2VtZW50IG9mIGZvb3RwcmludCBhbmQgY2FwYWJpbGl0 aWVzIGJ5IGEgZG93bnN0cmVhbSBDb250ZW50PGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7RGVs aXZlcnkgTmV0d29yayAoQ0ROKSB0aGF0IGFsbG93cyBhbiB1cHN0cmVhbSBDRE4gdG8gZGVjaWRl IHdoZXRoZXI8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDt0byByZWRpcmVjdCBwYXJ0aWN1bGFy IHVzZXIgcmVxdWVzdHMgdG8gdGhhdCBkb3duc3RyZWFtIENETjsgYW5kICgyKTxiciBjbGFzcz0i Ij4NCiZuYnNwOyZuYnNwO3RoZSBzeW5jaHJvbm91cyBvcGVyYXRpb24gb2YgYW4gdXBzdHJlYW0g Q0ROIHJlcXVlc3Rpbmcgd2hldGhlciBhPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7ZG93bnN0 cmVhbSBDRE4gaXMgcHJlcGFyZWQgdG8gYWNjZXB0IGEgdXNlciByZXF1ZXN0IGFuZCBvZiBhPGJy IGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7ZG93bnN0cmVhbSBDRE4gcmVzcG9uZGluZyB3aXRoIGhv dyB0byBhY3R1YWxseSByZWRpcmVjdCB0aGUgdXNlcjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNw O3JlcXVlc3QuICZuYnNwO1RoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGludGVyZmFjZSBmb3Ig dGhlIGxhdHRlciBwYXJ0LDxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO2kuZS4gdGhlIENETkkg UmVxdWVzdCBSb3V0aW5nIFJlZGlyZWN0aW9uIGludGVyZmFjZS48YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFn ZSBmb3IgdGhpcyBkcmFmdCBpczo8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24vIiBjbGFzcz0i Ij5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb24vPC9hPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZXJlJ3MgYWxzbyBhIGh0 bWxpemVkIHZlcnNpb24gYXZhaWxhYmxlIGF0OjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTEiIGNs YXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb24tMTE8L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KQSBkaWZmIGZyb20gdGhl IHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0OjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9 Imh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb24tMTEiIGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFm dC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTE8L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBv ZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbjxiciBjbGFzcz0iIj4NCnVudGls IHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgPGEgaHJlZj0i aHR0cDovL3Rvb2xzLmlldGYub3JnLyIgY2xhc3M9IiI+DQp0b29scy5pZXRmLm9yZzwvYT4uPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWls YWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0OjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9ImZ0cDovL2Z0 cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvIiBjbGFzcz0iIj5mdHA6Ly9mdHAuaWV0Zi5vcmcv aW50ZXJuZXQtZHJhZnRzLzwvYT48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4NCkNE TmkgbWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRvOkNETmlAaWV0Zi5v cmciIGNsYXNzPSIiPkNETmlAaWV0Zi5vcmc8L2E+PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pIiBjbGFzcz0iIj5odHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nkbmk8L2E+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvc3Bhbj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwcHQ7IiBjbGFz cz0iIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyBmb250LXNp emU6IDhwdDsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L2Rpdj4NCjxmb250IHN0eWxlPSJGT05U LVNJWkU6IDExcHgiIHNpemU9IjMiIGNsYXNzPSIiPjwvZm9udD4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGNtIDBjbSAwcHQ7IiBjbGFzcz0iIj48Zm9udCBzdHlsZT0iRk9OVC1TSVpFOiAxMXB4IiBz aXplPSIzIiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNl cmlmOyBmb250LXNpemU6IDhwdDsiIGNsYXNzPSIiPlRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBp bmZvcm1hdGlvbiB0aGF0IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0 aGUgYWRkcmVzc2VlDQogb3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBzZW50IHRvIHlvdSBieSBtaXN0 YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRo ZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBubyBsaWFiaWxpdHkgZm9yIHRoZSBjb250ZW50IG9mIHRo aXMgZS1tYWlsLCBmb3IgdGhlIG1hbm5lciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFt YWdlIG9mIGFueSBraW5kIHJlc3VsdGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudA0KIHRvIHRo ZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy48YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQo8L3NwYW4+PC9mb250PjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwvc3Bhbj48L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjwvYm9keT4NCjwvaHRtbD4NCg== --_000_E7626D71CEE44EAB9D7B8A6CD99ED6DFciscocom_-- From nobody Sun Oct 4 17:02:45 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1ED01B382E; Sun, 4 Oct 2015 17:02:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W7PYQWqlWYCb; Sun, 4 Oct 2015 17:02:41 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F6A31B3829; Sun, 4 Oct 2015 17:02:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.4.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151005000241.15929.99002.idtracker@ietfa.amsl.com> Date: Sun, 04 Oct 2015 17:02:41 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-media-type-04.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2015 00:02:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : CDNI Media Type Registration Author : Kevin J. Ma Filename : draft-ietf-cdni-media-type-04.txt Pages : 6 Date : 2015-10-04 Abstract: This document defines the standard media type used by the Content Delivery Network Interconnection (CDNI) protocol suite, including the registration procedure and recommended usage of the required payload- type parameter . The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-media-type-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-media-type-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Oct 4 17:05:25 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 982731B3869 for ; Sun, 4 Oct 2015 17:05:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5QQww6Uw56O3 for ; Sun, 4 Oct 2015 17:05:22 -0700 (PDT) Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D66E61B3868 for ; Sun, 4 Oct 2015 17:05:21 -0700 (PDT) X-AuditID: c6180641-f792c6d00000686a-15-561152e27811 Received: from EUSAAHC006.ericsson.se (Unknown_Domain [147.117.188.90]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id 59.1C.26730.2E251165; Sun, 4 Oct 2015 18:25:06 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC006.ericsson.se ([147.117.188.90]) with mapi id 14.03.0248.002; Sun, 4 Oct 2015 20:05:19 -0400 From: Kevin Ma J To: "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-media-type-04.txt Thread-Index: AQHQ/wE+19of4D0yG0eRsjLTYyrJSJ5cBL7w Date: Mon, 5 Oct 2015 00:05:19 +0000 Message-ID: References: <20151005000241.15929.99002.idtracker@ietfa.amsl.com> In-Reply-To: <20151005000241.15929.99002.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrJLMWRmVeSWpSXmKPExsUyuXRPlO6jIMEwg60XdS2ezv7D6sDosWTJ T6YAxigum5TUnMyy1CJ9uwSujPdfrjAW9PFVNGy9w9bAuIK7i5GTQ0LAROLG1ztsELaYxIV7 64FsLg4hgaOMEisnn2aEcJYxSkx42MQEUsUmoCXx+OtfIJuDQ0RAWeLnIUcQU1jAUWL2tRiQ ChEBJ4lNl64xQthGEn1rr4B1sgioSHyY8JAFxOYV8JWYtaKHFcQWAmpdt3gzWD0nUO+e++1g cUage76fWgPWyywgLnHryXwmiDsFJJbsOc8MYYtKvHz8jxXCVpKY8/oaM0S9jsSC3Z/YIGxt iWULXzND7BWUODnzCcsERtFZSMbOQtIyC0nLLCQtCxhZVjFylBanluWmGxluYgSG/TEJNscd jAs+WR5iFOBgVOLhXfBDIEyINbGsuDL3EKM0B4uSOO+8GfdDhQTSE0tSs1NTC1KL4otKc1KL DzEycXBKNTAmB4p9LPn2dgb7RZM9BrqCJSwL1SV7BGaGv8hIUbkX82tfpMJGg9XrPuWVHlhX IGc6/fg3fgtHRit7odntfx0+Fi689OR/x2qxWxOVGoP1pj3VS6sxaDz0g0u0UZybQeKVusXT BWlBR5quHvlQzbRuwek5rMKOsz/Zri/fUfk2+ytLxR7T9d1KLMUZiYZazEXFiQBzSSZOXAIA AA== Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-media-type-04.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2015 00:05:23 -0000 removed JSON qualifier to address Daryl's comment. > -----Original Message----- > From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Sunday, October 04, 2015 8:03 PM > To: i-d-announce@ietf.org > Cc: cdni@ietf.org > Subject: [CDNi] I-D Action: draft-ietf-cdni-media-type-04.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Content Delivery Networks > Interconnection Working Group of the IETF. >=20 > Title : CDNI Media Type Registration > Author : Kevin J. Ma > Filename : draft-ietf-cdni-media-type-04.txt > Pages : 6 > Date : 2015-10-04 >=20 > Abstract: > This document defines the standard media type used by the Content > Delivery Network Interconnection (CDNI) protocol suite, including the > registration procedure and recommended usage of the required payload- > type parameter . >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-media-type-04 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-media-type-04 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Tue Oct 6 01:49:48 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 969C61B3D73 for ; Tue, 6 Oct 2015 01:49:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZJVeAVZUeD6D for ; Tue, 6 Oct 2015 01:49:44 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA5B41B3D70 for ; Tue, 6 Oct 2015 01:49:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9367; q=dns/txt; s=iport; t=1444121386; x=1445330986; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=zwik3nE39z8q1S1mvVpJRer8gEif/CqttVhLWtGMOo0=; b=XM0ZLr2qiK6dcwK2mRDITso4V0iV538gAbmbhSO6dWx13V/HLd40p+5s 2+gYELJYs91/oBpUTd7/BFutOSJySUgmaK9tcjVzzis/qjQvoPw++0fv0 Ca4ehjXVkJgJfXE+GrLS61qhAb3Kg+apKbgWWegRSdRgEKJvNEY7/bMFD w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AGAgDNihNW/51dJa1egydUbga+GAENgVoXAQmFeQKBNDgUAQEBAQEBAX8LhCQBAQEEAQEBaxsCAQgRAwECKAcnCxQJCAIEE4guDb48AQEBAQEBAQEBAQEBAQEBAQEBAQEBF4Z0gg+CboR8DQoBBoMUgRQFlgIBhReHf4FXSINxlVwBHwEBQoQCcYc5gQYBAQE X-IronPort-AV: E=Sophos;i="5.17,643,1437436800"; d="scan'208,217";a="193842762" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-2.cisco.com with ESMTP; 06 Oct 2015 08:49:45 +0000 Received: from XCH-ALN-019.cisco.com (xch-aln-019.cisco.com [173.36.7.29]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t968nh7i000697 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Tue, 6 Oct 2015 08:49:43 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-019.cisco.com (173.36.7.29) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 6 Oct 2015 03:49:43 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Tue, 6 Oct 2015 03:49:43 -0500 From: "Francois Le Faucheur (flefauch)" To: "cdni@ietf.org" Thread-Topic: WG Last Call on draft-ietf-cdni-media-type-00.txt Thread-Index: AQHRABPxLhzKaa/H1kyznoQYqO7mfg== Date: Tue, 6 Oct 2015 08:49:43 +0000 Message-ID: References: <20150817212500.17568.48206.idtracker@ietfa.amsl.com> <33CEBD40-5EDD-4798-B582-9E0BE51EFFD3@cisco.com> In-Reply-To: <33CEBD40-5EDD-4798-B582-9E0BE51EFFD3@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.23] Content-Type: multipart/alternative; boundary="_000_D3702BFF0CF04BFCAE7C3EE7F0B91C0Eciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [CDNi] WG Last Call on draft-ietf-cdni-media-type-00.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 08:49:46 -0000 --_000_D3702BFF0CF04BFCAE7C3EE7F0B91C0Eciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, This closes the Working Group Last Call on draft-ietf-cdni-media-type. For information, this document is under IESG review. Cheers Francois On 28 Sep 2015, at 14:51, Francois Le Faucheur > wrote: Folks, As agreed in Prague, we want to expedite the registration of a single Media= Type for all CDNI interfaces. This starts a 1-week Working Group Last Call on draft-ietf-cdni-media-type-= 00.txt. It is a very short document. Please send any comment to the list by 5 October end of the day. Cheers Francois & Daryl Begin forwarded message: From: > Subject: [CDNi] I-D Action: draft-ietf-cdni-media-type-00.txt Date: 17 August 2015 23:25:00 CEST To: > Cc: > A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Content Delivery Networks Interconnection = Working Group of the IETF. Title : CDNI Media Type Registration Author : Kevin J. Ma Filename : draft-ietf-cdni-media-type-00.txt Pages : 6 Date : 2015-08-17 Abstract: This document defines the standard media type used by the Content Delivery Network Interconnection (CDNI) protocol suite, including the registration procedure and recommended usage of the required payload- type parameter . The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-media-type-00 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ CDNi mailing list CDNi@ietf.org https://www.ietf.org/mailman/listinfo/cdni --_000_D3702BFF0CF04BFCAE7C3EE7F0B91C0Eciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: <06AEBA1291B08948AD303F991D334963@emea.cisco.com> Content-Transfer-Encoding: quoted-printable Hello,

This closes the Working Group Last Call on draft-ietf-cdni-= media-type.

For information, this document is under IESG review.

Cheers

Francois

On 28 Sep 2015, at 14:51, Francois Le Faucheur <flefauch@cisco.com> wrote:=

Folks,

As agreed in Prague, we want to expedite the registration o= f a single Media Type for all CDNI interfaces.

This starts a 1-week Working Group Last Call on draft-= ietf-cdni-media-type-00.txt. It is a very short document.
Please send any comment to the list by 5 October end of the= day.

Cheers

Francois & Daryl


Begin forwarded message:

From: <internet-drafts@ietf.org>
Subject: [CDNi] I-D Action: draft-= ietf-cdni-media-type-00.txt
Date: 17 August 2015 23:25:00 CEST
To: <i-d-announce@ietf.org>
Cc: <cdni@ietf.org>


A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
This draft is a work item of the Content Delivery Networks Interconnection = Working Group of the IETF.

       Title     &nb= sp;     : CDNI Media Type Registration
       Author     &n= bsp;    : Kevin J. Ma
Filename &n= bsp;      : draft-ietf-cdni-media-type-00.txt=
Pages  = ;         : 6
Date  =           : 2015-08-17
Abstract:
  This document defines the standard media type used by the Conte= nt
  Delivery Network Interconnection (CDNI) protocol suite, includi= ng the
  registration procedure and recommended usage of the required pa= yload-
  type parameter .



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/
There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-cdni-media-type-00


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
CDNi mailing list
CDNi@ietf.org
https://www.ietf.org/mailman/listinfo/cdni


--_000_D3702BFF0CF04BFCAE7C3EE7F0B91C0Eciscocom_-- From nobody Wed Oct 7 01:52:25 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E7631A8AD9; Wed, 7 Oct 2015 01:52:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yroTIiiqieT4; Wed, 7 Oct 2015 01:52:22 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D8581A8AEA; Wed, 7 Oct 2015 01:52:16 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.4.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151007085216.27764.67262.idtracker@ietfa.amsl.com> Date: Wed, 07 Oct 2015 01:52:16 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-redirection-12.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 08:52:25 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : Request Routing Redirection Interface for CDN Interconnection Authors : Ben Niven-Jenkins Ray van Brandenburg Filename : draft-ietf-cdni-redirection-12.txt Pages : 30 Date : 2015-10-07 Abstract: The Request Routing Interface comprises of (1) the asynchronous advertisement of footprint and capabilities by a downstream Content Delivery Network (CDN) that allows an upstream CDN to decide whether to redirect particular user requests to that downstream CDN; and (2) the synchronous operation of an upstream CDN requesting whether a downstream CDN is prepared to accept a user request and of a downstream CDN responding with how to actually redirect the user request. This document describes an interface for the latter part, i.e. the CDNI Request Routing Redirection interface. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-redirection-12 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-redirection-12 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Oct 7 01:56:08 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B3761A8AF6 for ; Wed, 7 Oct 2015 01:56:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.116 X-Spam-Level: X-Spam-Status: No, score=-2.116 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BLAO5r8uNTfg for ; Wed, 7 Oct 2015 01:56:02 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14D101A9036 for ; Wed, 7 Oct 2015 01:56:01 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.17,648,1437429600"; d="scan'208";a="8188546" Received: from exc-cashub03.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.222]) by mailhost1b.tno.nl with ESMTP; 07 Oct 2015 10:55:59 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB03.tsn.tno.nl ([fe80::6d39:f277:173e:a926%13]) with mapi id 14.03.0248.002; Wed, 7 Oct 2015 10:55:59 +0200 From: "Brandenburg, R. (Ray) van" To: "cdni@ietf.org" Thread-Topic: Update of draft-ietf-cdni-redirection Thread-Index: AQHRAN38q2luPuQAo0m62xCEZvIS1g== Date: Wed, 7 Oct 2015 08:55:58 +0000 Message-ID: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.150923 x-originating-ip: [134.221.225.191] Content-Type: text/plain; charset="utf-8" Content-ID: <3C564867F0EF234F9C89572F7BEBFC2A@tno.nl> MIME-Version: 1.0 Content-Transfer-Encoding: base64 Archived-At: Subject: [CDNi] Update of draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 08:56:05 -0000 SGkgYWxsLA0KDQpXZSd2ZSB1cGRhdGVkIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi4gVGhp cyB1cGRhdGUgYWRkcmVzc2VzIGFsbCBvcGVuIGlzc3VlcywgaW5jbHVkaW5nOg0KDQotIFVwZGF0 ZWQgTUlNRSB0eXBlcyB0byBiZSBpbiBsaW5lIHdpdGggZHJhZnQtaWV0Zi1jZG5pLW1lZGlhLXR5 cGVzDQotIFVwZGF0ZWQgc2VjdXJpdHkgc2VjdGlvbiB0byBiZSBpbiBsaW5lIHdpdGggb3RoZXIg Q0ROSSBkb2NzDQotIEluY2x1ZGVkIHNob3J0IGRpc2N1c3Npb24gb24gcmVkaXJlY3Rpb24gYW5k IFRMUw0KDQpSYXkNCg0KDQoNCg0KT24gMDcvMTAvMTUgMTA6NTIsICJDRE5pIG9uIGJlaGFsZiBv ZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmciIDxjZG5pLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVo YWxmIG9mIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4gd3JvdGU6DQoNCj4NCj5BIE5ldyBJbnRl cm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5ldC1EcmFmdHMg ZGlyZWN0b3JpZXMuDQo+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIENvbnRlbnQg RGVsaXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0aW9uIFdvcmtpbmcgR3JvdXAgb2YgdGhlIElF VEYuDQo+DQo+ICAgICAgICBUaXRsZSAgICAgICAgICAgOiBSZXF1ZXN0IFJvdXRpbmcgUmVkaXJl Y3Rpb24gSW50ZXJmYWNlIGZvciBDRE4gSW50ZXJjb25uZWN0aW9uDQo+ICAgICAgICBBdXRob3Jz ICAgICAgICAgOiBCZW4gTml2ZW4tSmVua2lucw0KPiAgICAgICAgICAgICAgICAgICAgICAgICAg UmF5IHZhbiBCcmFuZGVuYnVyZw0KPglGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLWNkbmkt cmVkaXJlY3Rpb24tMTIudHh0DQo+CVBhZ2VzICAgICAgICAgICA6IDMwDQo+CURhdGUgICAgICAg ICAgICA6IDIwMTUtMTAtMDcNCj4NCj5BYnN0cmFjdDoNCj4gICBUaGUgUmVxdWVzdCBSb3V0aW5n IEludGVyZmFjZSBjb21wcmlzZXMgb2YgKDEpIHRoZSBhc3luY2hyb25vdXMNCj4gICBhZHZlcnRp c2VtZW50IG9mIGZvb3RwcmludCBhbmQgY2FwYWJpbGl0aWVzIGJ5IGEgZG93bnN0cmVhbSBDb250 ZW50DQo+ICAgRGVsaXZlcnkgTmV0d29yayAoQ0ROKSB0aGF0IGFsbG93cyBhbiB1cHN0cmVhbSBD RE4gdG8gZGVjaWRlIHdoZXRoZXINCj4gICB0byByZWRpcmVjdCBwYXJ0aWN1bGFyIHVzZXIgcmVx dWVzdHMgdG8gdGhhdCBkb3duc3RyZWFtIENETjsgYW5kICgyKQ0KPiAgIHRoZSBzeW5jaHJvbm91 cyBvcGVyYXRpb24gb2YgYW4gdXBzdHJlYW0gQ0ROIHJlcXVlc3Rpbmcgd2hldGhlciBhDQo+ICAg ZG93bnN0cmVhbSBDRE4gaXMgcHJlcGFyZWQgdG8gYWNjZXB0IGEgdXNlciByZXF1ZXN0IGFuZCBv ZiBhDQo+ICAgZG93bnN0cmVhbSBDRE4gcmVzcG9uZGluZyB3aXRoIGhvdyB0byBhY3R1YWxseSBy ZWRpcmVjdCB0aGUgdXNlcg0KPiAgIHJlcXVlc3QuICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBh biBpbnRlcmZhY2UgZm9yIHRoZSBsYXR0ZXIgcGFydCwNCj4gICBpLmUuIHRoZSBDRE5JIFJlcXVl c3QgUm91dGluZyBSZWRpcmVjdGlvbiBpbnRlcmZhY2UuDQo+DQo+DQo+VGhlIElFVEYgZGF0YXRy YWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6DQo+aHR0cHM6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLw0KPg0KPlRoZXJlJ3Mg YWxzbyBhIGh0bWxpemVkIHZlcnNpb24gYXZhaWxhYmxlIGF0Og0KPmh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTINCj4NCj5BIGRpZmYgZnJv bSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+aHR0cHM6Ly93d3cuaWV0 Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMg0KPg0KPg0K PlBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRo ZSB0aW1lIG9mIHN1Ym1pc3Npb24NCj51bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlm ZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KPg0KPkludGVybmV0LURyYWZ0cyBh cmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCj5mdHA6Ly9mdHAuaWV0Zi5v cmcvaW50ZXJuZXQtZHJhZnRzLw0KPg0KPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+Q0ROaSBtYWlsaW5nIGxpc3QNCj5DRE5pQGlldGYub3JnDQo+aHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pDQpUaGlzIG1lc3NhZ2UgbWF5 IGNvbnRhaW4gaW5mb3JtYXRpb24gdGhhdCBpcyBub3QgaW50ZW5kZWQgZm9yIHlvdS4gSWYgeW91 IGFyZSBub3QgdGhlIGFkZHJlc3NlZSBvciBpZiB0aGlzIG1lc3NhZ2Ugd2FzIHNlbnQgdG8geW91 IGJ5IG1pc3Rha2UsIHlvdSBhcmUgcmVxdWVzdGVkIHRvIGluZm9ybSB0aGUgc2VuZGVyIGFuZCBk ZWxldGUgdGhlIG1lc3NhZ2UuIFROTyBhY2NlcHRzIG5vIGxpYWJpbGl0eSBmb3IgdGhlIGNvbnRl bnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1c2UgaXQgYW5k IGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tzIGluaGVyZW50 IHRvIHRoZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy4K From nobody Wed Oct 7 05:04:25 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 096731A9133 for ; Wed, 7 Oct 2015 05:04:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OcYh0Bsja_8J for ; Wed, 7 Oct 2015 05:04:21 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F7DC1B2E88 for ; Wed, 7 Oct 2015 05:04:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=19448; q=dns/txt; s=iport; t=1444219461; x=1445429061; h=from:to:cc:subject:date:message-id:references: mime-version; bh=ObK+eFyrHsECgsM599pF3blXqrde8GILg4dF7oOj/7I=; b=l8JDudHNdHq6SdcXMb5RFdmKfZb5pOsHDJyLkZr7+MtLBqGF5yf6bzMK HG093fXSzR6cpWUUH4mekwD7AMicKpgEcMHwS0tanvIcIn5ifnO9h1438 a93/NRyGD3NDfneToPdNL9vWe+GXWSbz3nsE+RPARhMP1Q4zSQoh8mr3n A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0D4AQASCRVW/5JdJa1egydUbga+BAENgVoXAQmFeQIcgSc4FAEBAQEBAQGBCoQmAQEBBAEBASBLCxACARkDAQIoAwICAiULFAcCCAIEAQ0FiC4NrG6UMwEBAQEBAQEBAQEBAQEBAQEBAQEBAReGdIIPgm6CF4JbCg0EBgcDgmAxgRQFlgUBhRdohxeBV0iDcY0ehFqDbgEfAQFChAJxhmaBBgEBAQ X-IronPort-AV: E=Sophos; i="5.17,648,1437436800"; d="scan'208,217"; a="33357876" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-9.cisco.com with ESMTP; 07 Oct 2015 12:04:19 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id t97C4JtR012346 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 7 Oct 2015 12:04:19 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 7 Oct 2015 07:04:18 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Wed, 7 Oct 2015 07:04:18 -0500 From: "Francois Le Faucheur (flefauch)" To: "Peterson, Jon (jon.peterson@neustar.biz)" , Ma Kevin Thread-Topic: [CDNi] Update of draft-ietf-cdni-redirection Thread-Index: AQHRAN38q2luPuQAo0m62xCEZvIS1g== Date: Wed, 7 Oct 2015 12:04:18 +0000 Message-ID: <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.23] Content-Type: multipart/alternative; boundary="_000_102272CE9EF04959B9E28A2F10147BF7ciscocom_" MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" Subject: [CDNi] Fwd: Update of draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 12:04:24 -0000 --_000_102272CE9EF04959B9E28A2F10147BF7ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sm9uLA0KDQpDYW4geW91IGNvbmZpcm0gdGhpcyBuZXcgcmV2IGFkZHJlc3NlcyB5b3VyIGNvbW1l bnQgYXBwcm9wcmlhdGVseT8NCkkgYmVsaWV2ZSB0aGUgdGV4dCB0aGF0IHdhcyBhZGRlZCBmb3Ig dGhhdCBwdXJwb3NlIGlzOg0K4oCcDQozLjEuICBSZWRpcmVjdGlvbiBvZiBlbmNyeXB0ZWQgdHJh ZmZpYw0KICAgICBUaGUgUmVkaXJlY3Rpb24gSW50ZXJmYWNlIGRlZmluZWQgaW4gdGhpcyBkb2N1 bWVudCBtaWdodCBiZSB1c2VkIHRvDQogICAgIHJlZGlyZWN0IGEgcmVxdWVzdCB3aGVyZSB0aGUg VXNlciBBZ2VudCB3aWxsIHN1YnNlcXVlbnRseSBhdHRlbXB0IHRvDQogICAgIGVzdGFibGlzaCBh IFRMUyBzZXNzaW9uIHdpdGggdGhlIFJlZGlyZWN0aW9uIFRhcmdldC4gIEluIHN1Y2ggYSBjYXNl LA0KICAgICBhbnkgc3Vycm9nYXRlIG9yIHJlcXVlc3Qgcm91dGVyIHRvIHdoaWNoIHRoZSBVc2Vy IEFnZW50IGlzIHJlZGlyZWN0ZWQNCiAgICAgbmVlZHMgdG8gYmUgYWJsZSB0byBzdWNjZXNzZnVs bHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UgYW5kIHRvDQogICAgIHBlcmZvcm0gZW5jcnlw dGlvbiBvZiB0aGUgVExTIGNoYW5uZWwuICBNZWNoYW5pc21zIHRvIGRpc3RyaWJ1dGUgdGhlDQog ICAgIHJlcXVpcmVkIGluZm9ybWF0aW9uIGFuZC9vciBjb25maWd1cmF0aW9uLCBzdWNoIGFzIHBy aXZhdGUga2V5cywgdG8NCiAgICAgc3Vycm9nYXRlcyBhbmQgcmVxdWVzdCByb3V0ZXJzIGluIGRD RE5zIGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzDQogICAgIGRvY3VtZW50Lg0K4oCcDQoN Cg0KS2V2aW4sDQoNCkNhbiB5b3UgY29uZmlybSB0aGF0IHRoaXMgbmV3IHJldiBpcyBmdWxseSBp biBsaW5lIHdpdGggY2RtaS1tZWRpYS10eXBlPw0KDQoNCk9uY2Ugd2UgaGF2ZSBjb25maXJtYXRp b24gZm9yIHRoZXNlIHR3byBwb2ludHMgd2UgY2FuIHB1c2ggdGhlIGRvY3VtZW50IHRvIElFU0cg cmV2aWV3Lg0KDQpUaGFua3MNCg0KDQoNCkJlZ2luIGZvcndhcmRlZCBtZXNzYWdlOg0KDQpGcm9t OiAiQnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbiIgPHJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw8 bWFpbHRvOnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw+Pg0KU3ViamVjdDogW0NETmldIFVwZGF0 ZSBvZiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24NCkRhdGU6IDcgT2N0b2JlciAyMDE1IDEw OjU1OjU4IENFU1QNClRvOiAiY2RuaUBpZXRmLm9yZzxtYWlsdG86Y2RuaUBpZXRmLm9yZz4iIDxj ZG5pQGlldGYub3JnPG1haWx0bzpjZG5pQGlldGYub3JnPj4NCg0KSGkgYWxsLA0KDQpXZSd2ZSB1 cGRhdGVkIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi4gVGhpcyB1cGRhdGUgYWRkcmVzc2Vz IGFsbCBvcGVuIGlzc3VlcywgaW5jbHVkaW5nOg0KDQotIFVwZGF0ZWQgTUlNRSB0eXBlcyB0byBi ZSBpbiBsaW5lIHdpdGggZHJhZnQtaWV0Zi1jZG5pLW1lZGlhLXR5cGVzDQotIFVwZGF0ZWQgc2Vj dXJpdHkgc2VjdGlvbiB0byBiZSBpbiBsaW5lIHdpdGggb3RoZXIgQ0ROSSBkb2NzDQotIEluY2x1 ZGVkIHNob3J0IGRpc2N1c3Npb24gb24gcmVkaXJlY3Rpb24gYW5kIFRMUw0KDQpSYXkNCg0KDQoN Cg0KT24gMDcvMTAvMTUgMTA6NTIsICJDRE5pIG9uIGJlaGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNA aWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4iIDxjZG5pLWJvdW5jZXNA aWV0Zi5vcmc8bWFpbHRvOmNkbmktYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIGludGVy bmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPj4gd3Jv dGU6DQoNCg0KQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxp bmUgSW50ZXJuZXQtRHJhZnRzIGRpcmVjdG9yaWVzLg0KVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRl bSBvZiB0aGUgQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrcyBJbnRlcmNvbm5lY3Rpb24gV29ya2lu ZyBHcm91cCBvZiB0aGUgSUVURi4NCg0KICAgICAgVGl0bGUgICAgICAgICAgIDogUmVxdWVzdCBS b3V0aW5nIFJlZGlyZWN0aW9uIEludGVyZmFjZSBmb3IgQ0ROIEludGVyY29ubmVjdGlvbg0KICAg ICAgQXV0aG9ycyAgICAgICAgIDogQmVuIE5pdmVuLUplbmtpbnMNCiAgICAgICAgICAgICAgICAg ICAgICAgIFJheSB2YW4gQnJhbmRlbmJ1cmcNCkZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYt Y2RuaS1yZWRpcmVjdGlvbi0xMi50eHQNClBhZ2VzICAgICAgICAgICA6IDMwDQpEYXRlICAgICAg ICAgICAgOiAyMDE1LTEwLTA3DQoNCkFic3RyYWN0Og0KIFRoZSBSZXF1ZXN0IFJvdXRpbmcgSW50 ZXJmYWNlIGNvbXByaXNlcyBvZiAoMSkgdGhlIGFzeW5jaHJvbm91cw0KIGFkdmVydGlzZW1lbnQg b2YgZm9vdHByaW50IGFuZCBjYXBhYmlsaXRpZXMgYnkgYSBkb3duc3RyZWFtIENvbnRlbnQNCiBE ZWxpdmVyeSBOZXR3b3JrIChDRE4pIHRoYXQgYWxsb3dzIGFuIHVwc3RyZWFtIENETiB0byBkZWNp ZGUgd2hldGhlcg0KIHRvIHJlZGlyZWN0IHBhcnRpY3VsYXIgdXNlciByZXF1ZXN0cyB0byB0aGF0 IGRvd25zdHJlYW0gQ0ROOyBhbmQgKDIpDQogdGhlIHN5bmNocm9ub3VzIG9wZXJhdGlvbiBvZiBh biB1cHN0cmVhbSBDRE4gcmVxdWVzdGluZyB3aGV0aGVyIGENCiBkb3duc3RyZWFtIENETiBpcyBw cmVwYXJlZCB0byBhY2NlcHQgYSB1c2VyIHJlcXVlc3QgYW5kIG9mIGENCiBkb3duc3RyZWFtIENE TiByZXNwb25kaW5nIHdpdGggaG93IHRvIGFjdHVhbGx5IHJlZGlyZWN0IHRoZSB1c2VyDQogcmVx dWVzdC4gIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGludGVyZmFjZSBmb3IgdGhlIGxhdHRl ciBwYXJ0LA0KIGkuZS4gdGhlIENETkkgUmVxdWVzdCBSb3V0aW5nIFJlZGlyZWN0aW9uIGludGVy ZmFjZS4NCg0KDQpUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFm dCBpczoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY2RuaS1y ZWRpcmVjdGlvbi8NCg0KVGhlcmUncyBhbHNvIGEgaHRtbGl6ZWQgdmVyc2lvbiBhdmFpbGFibGUg YXQ6DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0 aW9uLTEyDQoNCkEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBh dDoNCmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmktcmVk aXJlY3Rpb24tMTINCg0KDQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9m IG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQp1bnRpbCB0aGUgaHRtbGl6ZWQg dmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KDQpJbnRl cm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQpmdHA6 Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KDQpfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KQ0ROaSBtYWlsaW5nIGxpc3QNCkNETmlAaWV0Zi5v cmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaQ0KVGhpcyBtZXNz YWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGludGVuZGVkIGZvciB5b3Uu IElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBzZW50 IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNlbmRl ciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBubyBsaWFiaWxpdHkgZm9yIHRo ZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3IgdGhlIG1hbm5lciBpbiB3aGljaCB5b3UgdXNl IGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJlc3VsdGluZyBmcm9tIHRoZSByaXNrcyBp bmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21pc3Npb24gb2YgbWVzc2FnZXMuDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ0ROaSBtYWlsaW5n IGxpc3QNCkNETmlAaWV0Zi5vcmc8bWFpbHRvOkNETmlAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCg0K --_000_102272CE9EF04959B9E28A2F10147BF7ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSm9uLA0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPkNhbiB5b3UgY29uZmlybSB0aGlzIG5ldyByZXYg YWRkcmVzc2VzIHlvdXIgY29tbWVudCBhcHByb3ByaWF0ZWx5PzwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij5JIGJlbGlldmUgdGhlIHRleHQgdGhhdCB3YXMgYWRkZWQgZm9yIHRoYXQgcHVycG9zZSBpczo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+4oCcPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjMuMS4gJm5ic3A7 UmVkaXJlY3Rpb24gb2YgZW5jcnlwdGVkIHRyYWZmaWM8c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNw YW4iIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPg0KPC9zcGFuPjxiciBjbGFzcz0iIj4NCiZuYnNw OzxzcGFuIGNsYXNzPSJBcHBsZS10YWItc3BhbiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwv c3Bhbj4mbmJzcDsgJm5ic3A7VGhlIFJlZGlyZWN0aW9uIEludGVyZmFjZSBkZWZpbmVkIGluIHRo aXMgZG9jdW1lbnQgbWlnaHQgYmUgdXNlZCB0bzxzcGFuIGNsYXNzPSJBcHBsZS10YWItc3BhbiIg c3R5bGU9IndoaXRlLXNwYWNlOnByZSI+DQo8L3NwYW4+PGJyIGNsYXNzPSIiPg0KJm5ic3A7PHNw YW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFu PiZuYnNwOyAmbmJzcDtyZWRpcmVjdCBhIHJlcXVlc3Qgd2hlcmUgdGhlIFVzZXIgQWdlbnQgd2ls bCBzdWJzZXF1ZW50bHkgYXR0ZW1wdCB0bzxzcGFuIGNsYXNzPSJBcHBsZS10YWItc3BhbiIgc3R5 bGU9IndoaXRlLXNwYWNlOnByZSI+DQo8L3NwYW4+PGJyIGNsYXNzPSIiPg0KJm5ic3A7PHNwYW4g Y2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPiZu YnNwOyAmbmJzcDtlc3RhYmxpc2ggYSBUTFMgc2Vzc2lvbiB3aXRoIHRoZSBSZWRpcmVjdGlvbiBU YXJnZXQuICZuYnNwO0luIHN1Y2ggYSBjYXNlLDxzcGFuIGNsYXNzPSJBcHBsZS10YWItc3BhbiIg c3R5bGU9IndoaXRlLXNwYWNlOnByZSI+DQo8L3NwYW4+PGJyIGNsYXNzPSIiPg0KJm5ic3A7PHNw YW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFu PiZuYnNwOyAmbmJzcDthbnkgc3Vycm9nYXRlIG9yIHJlcXVlc3Qgcm91dGVyIHRvIHdoaWNoIHRo ZSBVc2VyIEFnZW50IGlzIHJlZGlyZWN0ZWQ8c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNwYW4iIHN0 eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPg0KPC9zcGFuPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFu IGNsYXNzPSJBcHBsZS10YWItc3BhbiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj4m bmJzcDsgJm5ic3A7bmVlZHMgdG8gYmUgYWJsZSB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhl IFRMUyBoYW5kc2hha2UgYW5kIHRvPHNwYW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0i d2hpdGUtc3BhY2U6cHJlIj4NCjwvc3Bhbj48YnIgY2xhc3M9IiI+DQombmJzcDs8c3BhbiBjbGFz cz0iQXBwbGUtdGFiLXNwYW4iIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPiA8L3NwYW4+Jm5ic3A7 ICZuYnNwO3BlcmZvcm0gZW5jcnlwdGlvbiBvZiB0aGUgVExTIGNoYW5uZWwuICZuYnNwO01lY2hh bmlzbXMgdG8gZGlzdHJpYnV0ZSB0aGU8c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNwYW4iIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUiPg0KPC9zcGFuPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFuIGNs YXNzPSJBcHBsZS10YWItc3BhbiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj4mbmJz cDsgJm5ic3A7cmVxdWlyZWQgaW5mb3JtYXRpb24gYW5kL29yIGNvbmZpZ3VyYXRpb24sIHN1Y2gg YXMgcHJpdmF0ZSBrZXlzLCB0bzxzcGFuIGNsYXNzPSJBcHBsZS10YWItc3BhbiIgc3R5bGU9Indo aXRlLXNwYWNlOnByZSI+DQo8L3NwYW4+PGJyIGNsYXNzPSIiPg0KJm5ic3A7PHNwYW4gY2xhc3M9 IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4gPC9zcGFuPiZuYnNwOyAm bmJzcDtzdXJyb2dhdGVzIGFuZCByZXF1ZXN0IHJvdXRlcnMgaW4gZENETnMgYXJlIG91dHNpZGUg dGhlIHNjb3BlIG9mIHRoaXM8c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNwYW4iIHN0eWxlPSJ3aGl0 ZS1zcGFjZTpwcmUiPg0KPC9zcGFuPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFuIGNsYXNzPSJB cHBsZS10YWItc3BhbiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+IDwvc3Bhbj4mbmJzcDsgJm5i c3A7ZG9jdW1lbnQuPGJyIGNsYXNzPSIiPg0K4oCcPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+S2V2aW4sPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5DYW4geW91IGNvbmZpcm0gdGhhdCB0aGlzIG5ldyByZXYgaXMg ZnVsbHkgaW4gbGluZSB3aXRoIGNkbWktbWVkaWEtdHlwZT88L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5PbmNlIHdlIGhhdmUgY29uZmlybWF0aW9uIGZvciB0aGVzZSB0d28g cG9pbnRzIHdlIGNhbiBwdXNoIHRoZSBkb2N1bWVudCB0byBJRVNHIHJldmlldy48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rczwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+QmVnaW4gZm9yd2FyZGVkIG1lc3NhZ2U6PC9kaXY+ DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBzdHlsZT0ibWFy Z2luLXRvcDogMHB4OyBtYXJnaW4tcmlnaHQ6IDBweDsgbWFyZ2luLWJvdHRvbTogMHB4OyBtYXJn aW4tbGVmdDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13ZWJr aXQtc3lzdGVtLWZvbnQsIEhlbHZldGljYSBOZXVlLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNv bG9yOnJnYmEoMCwgMCwgMCwgMS4wKTsiIGNsYXNzPSIiPjxiIGNsYXNzPSIiPkZyb206DQo8L2I+ PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwgSGVs dmV0aWNhIE5ldWUsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPiZxdW90O0JyYW5k ZW5idXJnLCBSLiAoUmF5KSB2YW4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpyYXkudmFuYnJh bmRlbmJ1cmdAdG5vLm5sIiBjbGFzcz0iIj5yYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPC9hPiZn dDs8YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOiAw cHg7IG1hcmdpbi1yaWdodDogMHB4OyBtYXJnaW4tYm90dG9tOiAwcHg7IG1hcmdpbi1sZWZ0OiAw cHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0t Zm9udCwgSGVsdmV0aWNhIE5ldWUsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgY29sb3I6cmdiYSgw LCAwLCAwLCAxLjApOyIgY2xhc3M9IiI+PGIgY2xhc3M9IiI+U3ViamVjdDoNCjwvYj48L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCBIZWx2ZXRpY2Eg TmV1ZSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+PGIgY2xhc3M9IiI+W0NETmld IFVwZGF0ZSBvZiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb248L2I+PGJyIGNsYXNzPSIiPg0K PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLXRvcDogMHB4OyBtYXJnaW4tcmlnaHQ6 IDBweDsgbWFyZ2luLWJvdHRvbTogMHB4OyBtYXJnaW4tbGVmdDogMHB4OyIgY2xhc3M9IiI+DQo8 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13ZWJraXQtc3lzdGVtLWZvbnQsIEhlbHZldGljYSBO ZXVlLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOnJnYmEoMCwgMCwgMCwgMS4wKTsiIGNs YXNzPSIiPjxiIGNsYXNzPSIiPkRhdGU6DQo8L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwgSGVsdmV0aWNhIE5ldWUsIEhlbHZldGljYSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPjcgT2N0b2JlciAyMDE1IDEwOjU1OjU4IENFU1Q8YnIgY2xhc3M9 IiI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOiAwcHg7IG1hcmdpbi1y aWdodDogMHB4OyBtYXJnaW4tYm90dG9tOiAwcHg7IG1hcmdpbi1sZWZ0OiAwcHg7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwgSGVsdmV0 aWNhIE5ldWUsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgY29sb3I6cmdiYSgwLCAwLCAwLCAxLjAp OyIgY2xhc3M9IiI+PGIgY2xhc3M9IiI+VG86DQo8L2I+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwgSGVsdmV0aWNhIE5ldWUsIEhlbHZldGljYSwg c2Fucy1zZXJpZjsiIGNsYXNzPSIiPiZxdW90OzxhIGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3Jn IiBjbGFzcz0iIj5jZG5pQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNk bmlAaWV0Zi5vcmciIGNsYXNzPSIiPmNkbmlAaWV0Zi5vcmc8L2E+Jmd0OzxiciBjbGFzcz0iIj4N Cjwvc3Bhbj48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+SGkgYWxsLDxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCldlJ3ZlIHVwZGF0ZWQgZHJhZnQtaWV0Zi1jZG5pLXJl ZGlyZWN0aW9uLiBUaGlzIHVwZGF0ZSBhZGRyZXNzZXMgYWxsIG9wZW4gaXNzdWVzLCBpbmNsdWRp bmc6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KLSBVcGRhdGVkIE1JTUUgdHlwZXMgdG8g YmUgaW4gbGluZSB3aXRoIGRyYWZ0LWlldGYtY2RuaS1tZWRpYS10eXBlczxiciBjbGFzcz0iIj4N Ci0gVXBkYXRlZCBzZWN1cml0eSBzZWN0aW9uIHRvIGJlIGluIGxpbmUgd2l0aCBvdGhlciBDRE5J IGRvY3M8YnIgY2xhc3M9IiI+DQotIEluY2x1ZGVkIHNob3J0IGRpc2N1c3Npb24gb24gcmVkaXJl Y3Rpb24gYW5kIFRMUzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClJheTxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCk9uIDA3LzEwLzE1IDEwOjUyLCAmcXVvdDtDRE5pIG9uIGJlaGFsZiBvZiA8YSBocmVm PSJtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiBjbGFzcz0iIj4NCmludGVybmV0LWRy YWZ0c0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpjZG5pLWJvdW5jZXNA aWV0Zi5vcmciIGNsYXNzPSIiPmNkbmktYm91bmNlc0BpZXRmLm9yZzwvYT4gb24gYmVoYWxmIG9m DQo8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiBjbGFzcz0iIj5pbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQpB IE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5l dC1EcmFmdHMgZGlyZWN0b3JpZXMuPGJyIGNsYXNzPSIiPg0KVGhpcyBkcmFmdCBpcyBhIHdvcmsg aXRlbSBvZiB0aGUgQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrcyBJbnRlcmNvbm5lY3Rpb24gV29y a2luZyBHcm91cCBvZiB0aGUgSUVURi48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQombmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtUaXRsZSAmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6IFJlcXVlc3QgUm91dGlu ZyBSZWRpcmVjdGlvbiBJbnRlcmZhY2UgZm9yIENETiBJbnRlcmNvbm5lY3Rpb248YnIgY2xhc3M9 IiI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtBdXRob3JzICZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogQmVuIE5pdmVuLUplbmtp bnM8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtSYXkgdmFuIEJy YW5kZW5idXJnPGJyIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHls ZT0id2hpdGUtc3BhY2U6cHJlIj48L3NwYW4+RmlsZW5hbWUgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTIudHh0 PGJyIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUt c3BhY2U6cHJlIj48L3NwYW4+UGFnZXMgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiAzMDxiciBjbGFzcz0iIj4NCjxzcGFuIGNsYXNz PSJBcHBsZS10YWItc3BhbiIgc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+PC9zcGFuPkRhdGUgJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7OiAyMDE1LTEwLTA3PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KQWJzdHJhY3Q6 PGJyIGNsYXNzPSIiPg0KJm5ic3A7VGhlIFJlcXVlc3QgUm91dGluZyBJbnRlcmZhY2UgY29tcHJp c2VzIG9mICgxKSB0aGUgYXN5bmNocm9ub3VzPGJyIGNsYXNzPSIiPg0KJm5ic3A7YWR2ZXJ0aXNl bWVudCBvZiBmb290cHJpbnQgYW5kIGNhcGFiaWxpdGllcyBieSBhIGRvd25zdHJlYW0gQ29udGVu dDxiciBjbGFzcz0iIj4NCiZuYnNwO0RlbGl2ZXJ5IE5ldHdvcmsgKENETikgdGhhdCBhbGxvd3Mg YW4gdXBzdHJlYW0gQ0ROIHRvIGRlY2lkZSB3aGV0aGVyPGJyIGNsYXNzPSIiPg0KJm5ic3A7dG8g cmVkaXJlY3QgcGFydGljdWxhciB1c2VyIHJlcXVlc3RzIHRvIHRoYXQgZG93bnN0cmVhbSBDRE47 IGFuZCAoMik8YnIgY2xhc3M9IiI+DQombmJzcDt0aGUgc3luY2hyb25vdXMgb3BlcmF0aW9uIG9m IGFuIHVwc3RyZWFtIENETiByZXF1ZXN0aW5nIHdoZXRoZXIgYTxiciBjbGFzcz0iIj4NCiZuYnNw O2Rvd25zdHJlYW0gQ0ROIGlzIHByZXBhcmVkIHRvIGFjY2VwdCBhIHVzZXIgcmVxdWVzdCBhbmQg b2YgYTxiciBjbGFzcz0iIj4NCiZuYnNwO2Rvd25zdHJlYW0gQ0ROIHJlc3BvbmRpbmcgd2l0aCBo b3cgdG8gYWN0dWFsbHkgcmVkaXJlY3QgdGhlIHVzZXI8YnIgY2xhc3M9IiI+DQombmJzcDtyZXF1 ZXN0LiAmbmJzcDtUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBhbiBpbnRlcmZhY2UgZm9yIHRoZSBs YXR0ZXIgcGFydCw8YnIgY2xhc3M9IiI+DQombmJzcDtpLmUuIHRoZSBDRE5JIFJlcXVlc3QgUm91 dGluZyBSZWRpcmVjdGlvbiBpbnRlcmZhY2UuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMg ZHJhZnQgaXM6PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLyIgY2xhc3M9IiI+aHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLzwvYT48 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGVyZSdzIGFsc28gYSBodG1saXplZCB2ZXJz aW9uIGF2YWlsYWJsZSBhdDo8YnIgY2xhc3M9IiI+DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTEyPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Ojxi ciBjbGFzcz0iIj4NCmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRm LWNkbmktcmVkaXJlY3Rpb24tMTI8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMg ZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uPGJyIGNsYXNzPSIiPg0KdW50aWwgdGhlIGh0bWxp emVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy48YnIg Y2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxh YmxlIGJ5IGFub255bW91cyBGVFAgYXQ6PGJyIGNsYXNzPSIiPg0KZnRwOi8vZnRwLmlldGYub3Jn L2ludGVybmV0LWRyYWZ0cy88YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxiciBjbGFzcz0iIj4NCkNETmkg bWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KQ0ROaUBpZXRmLm9yZzxiciBjbGFzcz0iIj4NCmh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaTxiciBjbGFzcz0iIj4NCjwv YmxvY2txdW90ZT4NClRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZvcm1hdGlvbiB0aGF0IGlz IG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUgYWRkcmVzc2VlIG9yIGlm IHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwgeW91IGFyZSByZXF1ZXN0 ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5PIGFjY2Vw dHMgbm8gbGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlzIGUtbWFpbCwNCiBmb3IgdGhl IG1hbm5lciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJl c3VsdGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21p c3Npb24gb2YgbWVzc2FnZXMuPGJyIGNsYXNzPSIiPg0KX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX188YnIgY2xhc3M9IiI+DQpDRE5pIG1haWxpbmcgbGlzdDxi ciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpDRE5pQGlldGYub3JnIiBjbGFzcz0iIj5DRE5p QGlldGYub3JnPC9hPjxiciBjbGFzcz0iIj4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vY2RuaTxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_102272CE9EF04959B9E28A2F10147BF7ciscocom_-- From nobody Wed Oct 7 15:15:38 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B4F81B29DD for ; Wed, 7 Oct 2015 15:15:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.287 X-Spam-Level: X-Spam-Status: No, score=-6.287 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kk40u3XeL-Do for ; Wed, 7 Oct 2015 15:15:34 -0700 (PDT) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by ietfa.amsl.com (Postfix) with SMTP id BF5391B29D8 for ; Wed, 7 Oct 2015 15:15:34 -0700 (PDT) Received: (qmail 37869 invoked by uid 99); 7 Oct 2015 22:15:34 -0000 Received: from mail-relay.apache.org (HELO mail-relay.apache.org) (140.211.11.15) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Oct 2015 22:15:34 +0000 Received: from mail-io0-f170.google.com (mail-io0-f170.google.com [209.85.223.170]) by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with ESMTPSA id D01AB1A003F for ; Wed, 7 Oct 2015 22:15:33 +0000 (UTC) Received: by ioii196 with SMTP id i196so38395681ioi.3 for ; Wed, 07 Oct 2015 15:15:32 -0700 (PDT) X-Received: by 10.107.34.193 with SMTP id i184mr4783669ioi.92.1444256132788; Wed, 07 Oct 2015 15:15:32 -0700 (PDT) MIME-Version: 1.0 References: <20151007085216.27764.67262.idtracker@ietfa.amsl.com> In-Reply-To: <20151007085216.27764.67262.idtracker@ietfa.amsl.com> From: Phil Sorber Date: Wed, 07 Oct 2015 22:15:23 +0000 Message-ID: To: "cdni@ietf.org" Content-Type: multipart/alternative; boundary=001a1140e786c27de005218b15a1 Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-redirection-12.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 22:15:36 -0000 --001a1140e786c27de005218b15a1 Content-Type: text/plain; charset=UTF-8 There is a sentence in section 2 about HTTP redirection: > Examples of an application level redirection are HTTP 302 Redirection and RTMP 302 Redirection. and then various other references to 302 redirection throughout the document. My question is, what is the expectation for a multi-asset exchange like segmented video where a UA is sent to a manifest and then expected to download a series of video segments. Should the UA continually go back to the redirector, or should it "stick" to the host it was redirected to? Perhaps this is out of the scope of this document? On Wed, Oct 7, 2015 at 2:52 AM wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Content Delivery Networks > Interconnection Working Group of the IETF. > > Title : Request Routing Redirection Interface for CDN > Interconnection > Authors : Ben Niven-Jenkins > Ray van Brandenburg > Filename : draft-ietf-cdni-redirection-12.txt > Pages : 30 > Date : 2015-10-07 > > Abstract: > The Request Routing Interface comprises of (1) the asynchronous > advertisement of footprint and capabilities by a downstream Content > Delivery Network (CDN) that allows an upstream CDN to decide whether > to redirect particular user requests to that downstream CDN; and (2) > the synchronous operation of an upstream CDN requesting whether a > downstream CDN is prepared to accept a user request and of a > downstream CDN responding with how to actually redirect the user > request. This document describes an interface for the latter part, > i.e. the CDNI Request Routing Redirection interface. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-redirection-12 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-redirection-12 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni > --001a1140e786c27de005218b15a1 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
There is a sentence in section 2 about HTTP redirecti= on:

> Examples of an application level redirection are HTTP 302 R= edirection and RTMP 302 Redirection.

and then various other references to 302 redirecti= on throughout the document. My question is, what is the expectation for a m= ulti-asset exchange like segmented video where a UA is sent to a manifest a= nd then expected to download a series of video segments. Should the UA cont= inually go back to the redirector, or should it "stick" to the ho= st it was redirected to?

Perhaps this is out of th= e scope of this document?

On Wed, Oct 7, 2015 at 2:52 AM <internet-drafts@ietf.org> wrote:

A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
=C2=A0This draft is a work item of the Content Delivery Networks Interconne= ction Working Group of the IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= Request Routing Redirection Interface for CDN Interconnection
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Authors=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: Ben = Niven-Jenkins
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Ray van Brandenburg
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-cdni-redirection-12.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 30
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2015-10-07

Abstract:
=C2=A0 =C2=A0The Request Routing Interface comprises of (1) the asynchronou= s
=C2=A0 =C2=A0advertisement of footprint and capabilities by a downstream Co= ntent
=C2=A0 =C2=A0Delivery Network (CDN) that allows an upstream CDN to decide w= hether
=C2=A0 =C2=A0to redirect particular user requests to that downstream CDN; a= nd (2)
=C2=A0 =C2=A0the synchronous operation of an upstream CDN requesting whethe= r a
=C2=A0 =C2=A0downstream CDN is prepared to accept a user request and of a =C2=A0 =C2=A0downstream CDN responding with how to actually redirect the us= er
=C2=A0 =C2=A0request.=C2=A0 This document describes an interface for the la= tter part,
=C2=A0 =C2=A0i.e. the CDNI Request Routing Redirection interface.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-= ietf-cdni-redirection/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-cd= ni-redirection-12

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2= =3Ddraft-ietf-cdni-redirection-12


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
CDNi mailing list
CDNi@ietf.org
https://www.ietf.org/mailman/listinfo/cdni
--001a1140e786c27de005218b15a1-- From nobody Wed Oct 7 15:46:40 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D504B1B2A70 for ; Wed, 7 Oct 2015 15:46:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G4S63e45hN6U for ; Wed, 7 Oct 2015 15:46:35 -0700 (PDT) Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 592511B2A6E for ; Wed, 7 Oct 2015 15:46:35 -0700 (PDT) X-AuditID: c6180641-f792c6d00000686a-bd-561534c4119e Received: from EUSAAHC008.ericsson.se (Unknown_Domain [147.117.188.96]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id EA.7C.26730.4C435165; Wed, 7 Oct 2015 17:05:41 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC008.ericsson.se ([147.117.188.96]) with mapi id 14.03.0248.002; Wed, 7 Oct 2015 18:46:33 -0400 From: Kevin Ma J To: Phil Sorber Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-redirection-12.txt Thread-Index: AQHRAN2ArAq+czL7fkqUU7+9yoVUjp5g3KWA///FpgQ= Date: Wed, 7 Oct 2015 22:46:32 +0000 Message-ID: References: <20151007085216.27764.67262.idtracker@ietfa.amsl.com>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_FC908E2D254948768EF1482DD4848D95ericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrDLMWRmVeSWpSXmKPExsUyuXRPgu5RE9EwgyNnBSyezv7DarHg7H12 ByaPH38bWDyWLPnJFMAUxWWTkpqTWZZapG+XwJVx8t1UloJ3LhXvVzxjaWBssepi5OSQEDCR eNb+nBnCFpO4cG89WxcjF4eQwFFGiVO9X1hBEkICyxglXvVng9hsAloSj7/+ZQKxRQSUJTbN vgdWwwxkb2neywhiCws4Sbye1MsGUeMsce7LGRYI20pi8pLJ7CA2i4CKxLmT68DqeQXsJR72 vWKB2NXGKHHjUgyIzSkQKHHl1SWwOYxAx30/tYYJYpe4xK0n85kgjhaQWLLnPNQDohIvH/+D uidZovP/RFaI+YISJ2c+YZnAKDILSfssJGWzkJRBxHUkFuz+xAZha0ssW/iaGcY+c+AxE7L4 Akb2VYwcpcWpZbnpRoabGIHRc0yCzXEH44JPlocYBTgYlXh4H1wWDhNiTSwrrsw9xCjNwaIk zjtvxv1QIYH0xJLU7NTUgtSi+KLSnNTiQ4xMHJxSDYzRd75FuKbEBU+vOL3q3OnXtkfEtUsS Pfhay57ekJN1XxmtainCvmmZnuHtV8fW8Cd7z5u9+cXtGQt3M9TrLz9xe2n1X67Ljf0lxrpn lRz37A7dGCOT26d/2fV6x2SHFlX3DtYHwZ5uv28+tQ+VkhMTXGPR/tywLeuR2vOSiF2KDSLC 0xn9diqxFGckGmoxFxUnAgA+jM4jfwIAAA== Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-redirection-12.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2015 22:46:40 -0000 --_000_FC908E2D254948768EF1482DD4848D95ericssoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Phil, Ray and Ben may have additional thoughts, but I think it depends (relativ= e URL maybe reuse the redirect location vs. full URL reask the request rout= er); either way, I think it's probably beyond the scope of the CDNI RI? thanx! -- Kevin J. Ma Sent from my iPhone On Oct 7, 2015, at 6:15 PM, Phil Sorber > wrote: There is a sentence in section 2 about HTTP redirection: > Examples of an application level redirection are HTTP 302 Redirection and= RTMP 302 Redirection. and then various other references to 302 redirection throughout the documen= t. My question is, what is the expectation for a multi-asset exchange like = segmented video where a UA is sent to a manifest and then expected to downl= oad a series of video segments. Should the UA continually go back to the re= director, or should it "stick" to the host it was redirected to? Perhaps this is out of the scope of this document? On Wed, Oct 7, 2015 at 2:52 AM > wrote: A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Content Delivery Networks Interconnection= Working Group of the IETF. Title : Request Routing Redirection Interface for CDN Int= erconnection Authors : Ben Niven-Jenkins Ray van Brandenburg Filename : draft-ietf-cdni-redirection-12.txt Pages : 30 Date : 2015-10-07 Abstract: The Request Routing Interface comprises of (1) the asynchronous advertisement of footprint and capabilities by a downstream Content Delivery Network (CDN) that allows an upstream CDN to decide whether to redirect particular user requests to that downstream CDN; and (2) the synchronous operation of an upstream CDN requesting whether a downstream CDN is prepared to accept a user request and of a downstream CDN responding with how to actually redirect the user request. This document describes an interface for the latter part, i.e. the CDNI Request Routing Redirection interface. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-redirection-12 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection-12 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ CDNi mailing list CDNi@ietf.org https://www.ietf.org/mailman/listinfo/cdni _______________________________________________ CDNi mailing list CDNi@ietf.org https://www.ietf.org/mailman/listinfo/cdni --_000_FC908E2D254948768EF1482DD4848D95ericssoncom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hi Phil,

  Ray and Ben may have additional thoughts, but I think it depend= s (relative URL maybe reuse the redirect location vs. full URL reask the re= quest router); either way, I think it's probably beyond the scope of the CD= NI RI?

thanx!

--  Kevin J. Ma

Sent from my iPhone

On Oct 7, 2015, at 6:15 PM, Phil Sorber <sorber@apache.org> wrote:

There is a sentence in section 2 about HTTP redirection:

> Examples of an application level redirection are HTTP 302 Redirection = and RTMP 302 Redirection.

and then various other references to 302 redirection throughout the documen= t. My question is, what is the expectation for a multi-asset exchange like = segmented video where a UA is sent to a manifest and then expected to downl= oad a series of video segments. Should the UA continually go back to the redirector, or should it "st= ick" to the host it was redirected to?

Perhaps this is out of the scope of this document?

On Wed, Oct 7, 2015 at 2:52 AM <internet-drafts@ietf.org> wrote:

A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
 This draft is a work item of the Content Delivery Networks Interconne= ction Working Group of the IETF.

        Title           := Request Routing Redirection Interface for CDN Interconnection
        Authors         : Ben = Niven-Jenkins
                     = ;     Ray van Brandenburg
        Filename        : draft-iet= f-cdni-redirection-12.txt
        Pages           := 30
        Date            := 2015-10-07

Abstract:
   The Request Routing Interface comprises of (1) the asynchronou= s
   advertisement of footprint and capabilities by a downstream Co= ntent
   Delivery Network (CDN) that allows an upstream CDN to decide w= hether
   to redirect particular user requests to that downstream CDN; a= nd (2)
   the synchronous operation of an upstream CDN requesting whethe= r a
   downstream CDN is prepared to accept a user request and of a    downstream CDN responding with how to actually redirect the us= er
   request.  This document describes an interface for the la= tter part,
   i.e. the CDNI Request Routing Redirection interface.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-= ietf-cdni-redirection/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-cd= ni-redirection-12

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2= =3Ddraft-ietf-cdni-redirection-12


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
CDNi mailing list
CDNi@ietf.org
https://www.ietf.org/mailman/listinfo/cdni
_______________________________________________
CDNi mailing list
CDNi@ietf.org
https://www.ie= tf.org/mailman/listinfo/cdni
--_000_FC908E2D254948768EF1482DD4848D95ericssoncom_-- From nobody Wed Oct 7 20:09:12 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1EFA1A1BF1 for ; Wed, 7 Oct 2015 20:09:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08AFI1j7wGq3 for ; Wed, 7 Oct 2015 20:09:08 -0700 (PDT) Received: from usevmg20.ericsson.net (usevmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0EA371A1BEF for ; Wed, 7 Oct 2015 20:09:08 -0700 (PDT) X-AuditID: c618062d-f79ef6d000007f54-67-56157e6a06c3 Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usevmg20.ericsson.net (Symantec Mail Security) with SMTP id 70.A6.32596.B6E75165; Wed, 7 Oct 2015 22:19:55 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0248.002; Wed, 7 Oct 2015 23:09:06 -0400 From: Kevin Ma J To: "Francois Le Faucheur (flefauch)" , "Peterson, Jon (jon.peterson@neustar.biz)" Thread-Topic: [CDNi] Update of draft-ietf-cdni-redirection Thread-Index: AQHRAN38q2luPuQAo0m62xCEZvIS1p5g5usw Date: Thu, 8 Oct 2015 03:09:05 +0000 Message-ID: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> In-Reply-To: <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: multipart/alternative; boundary="_000_A419F67F880AB2468214E154CB8A556206B64050eusaamb103erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupikeLIzCtJLcpLzFFi42KZXLrHTze7TjTMYFeXuMXT2X9YLf4tOM1k cabB0uLb5uuMDiweU35vZPVYsuQnk8eOhufMHgfXXWAOYInisklJzcksSy3St0vgynj28RVj waSnjBW7V01ja2Dsuc/YxcjJISFgInHiwksmCFtM4sK99WxdjFwcQgJHGSW2//vGDOEsY5T4 d2QzC0gVm4CWxOOvf8E6RAQWMEq8WOwLYjMLxEn0bP7ECmILC1hKHJrxjhGixkri0++/QIM4 gGwjiflXwcawCKhIbG49wQZi8wr4Suw+uwosLiSQI/Hh5SOwOKeArcSEto9gYxiBjvt+ag0T xCpxiVtP5kMdLSCxZM95ZghbVOLl43+sELaixL7+6ewga5kF8iUOLUyAWCUocXLmE5YJjKKz kEyahVA1C0kVRFhTYv0ufYhqRYkp3Q/ZIWwNidY5c9mRxRcwsq9i5CgtTi3LTTcy2MQIjLxj Emy6Oxj3vLQ8xCjAwajEw/vgsnCYEGtiWXFl7iFGaQ4WJXHe/UvuhwoJpCeWpGanphakFsUX leakFh9iZOLglGpgrFmToxHz/6zxZL6tHBnK4tsyBZ273TS+q/u7FZUesnhxallT1Gn9d28O Fi769EWOmTvv/c07XwoEv7zNspdifTBn07Z9br4c968cNP3VPGvvw15j3s3rI7Zbbjtj+0p+ ydqP7Ld37o2Z951LUOzZyinqkbP3s9+wyNS7MPFJwArdm3f1pbY+TFBiKc5INNRiLipOBAAL ZYz5nQIAAA== Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Update of draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 03:09:11 -0000 --_000_A419F67F880AB2468214E154CB8A556206B64050eusaamb103erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRnJhbmNvaXMvUmF5LA0KDQogIEZvciBlYWNoIG9mIHRoZSBwYXlsb2FkIHR5cGUgcGFyYW1l dGVycywgdGhlIHNwZWMgaXMgc3VwcG9zZWQgdG8gZGVmaW5lIGEgcHVycG9zZSwgaW50ZXJmYWNl LCBhbmQgZW5jb2RpbmcuICBKdXN0IHRvIGJlIHRvdGFsbHkgZXhwbGljaXQsIEkndmUgYmVlbiBh ZGRpbmcgc21hbGwgYmx1cmJzIGZvciBlYWNoLCBlLmcuLCBzdWJzZWN0aW9uIHVuZGVyIDYuMToN Cg0KICAgICAgICA8c2VjdGlvbiB0aXRsZT0iQ0ROSSBSSSBSZWRpcmVjdGlvbiBSZXF1ZXN0IFBh eWxvYWQgVHlwZSI+DQogICAgICAgICAgPHQ+UHVycG9zZTogVGhlIHB1cnBvc2Ugb2YgdGhpcyBw YXlsb2FkIHR5cGUgaXMgdG8gZGlzdGluZ3Vpc2ggUkkgcmVxdWVzdCBtZXNzYWdlcy48L3Q+DQog ICAgICAgICAgPHQ+SW50ZXJmYWNlOiBSSTwvdD4NCiAgICAgICAgICA8dD5FbmNvZGluZzogc2Vl IDx4cmVmIHRhcmdldD0iYW5jaG9ycyBmb3IgU2VjdGlvbnMgNC40LjEgYW5kIDQuNS4xIi8+PC90 Pg0KICAgICAgICA8L3NlY3Rpb24+DQogICAgICAgIDxzZWN0aW9uIHRpdGxlPSJDRE5JIFJJIFJl ZGlyZWN0aW9uIFJlc3BvbnNlIFBheWxvYWQgVHlwZSI+DQogICAgICAgICAgPHQ+UHVycG9zZTog VGhlIHB1cnBvc2Ugb2YgdGhpcyBwYXlsb2FkIHR5cGUgaXMgdG8gZGlzdGluZ3Vpc2ggUkkgcmVz cG9uc2UgbWVzc2FnZXMuPC90Pg0KICAgICAgICAgIDx0PkludGVyZmFjZTogUkk8L3Q+DQogICAg ICAgICAgPHQ+RW5jb2Rpbmc6IHNlZSA8eHJlZiB0YXJnZXQ9ImFuY2hvcnMgZm9yIFNlY3Rpb25z IDQuNC4yIGFuZCA0LjUuMiIvPjwvdD4NCiAgICAgICAgPC9zZWN0aW9uPg0KDQogIE1pZ2h0IGFs c28gd2FudCB0byBhZGQgYSBub3RlIHRvIHRoZSBSRkMgRWRpdG9yIGluIHNlY3Rpb24gNi4xIHRv IGNoYW5nZSBSRkN0aGlzIHRvIHRoZSBwdWJsaXNoZWQgUkZDIG51bWJlci4NCg0KdGhhbnguDQoN Ci0tICBLZXZpbiBKLiBNYQ0KDQpGcm9tOiBGcmFuY29pcyBMZSBGYXVjaGV1ciAoZmxlZmF1Y2gp IFttYWlsdG86ZmxlZmF1Y2hAY2lzY28uY29tXQ0KU2VudDogV2VkbmVzZGF5LCBPY3RvYmVyIDA3 LCAyMDE1IDg6MDQgQU0NClRvOiBQZXRlcnNvbiwgSm9uIDxqb24ucGV0ZXJzb25AbmV1c3Rhci5i aXo+IChqb24ucGV0ZXJzb25AbmV1c3Rhci5iaXopOyBLZXZpbiBNYSBKDQpDYzogY2RuaUBpZXRm Lm9yZzsgQnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbg0KU3ViamVjdDogRndkOiBbQ0ROaV0gVXBk YXRlIG9mIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbg0KDQpKb24sDQoNCkNhbiB5b3UgY29u ZmlybSB0aGlzIG5ldyByZXYgYWRkcmVzc2VzIHlvdXIgY29tbWVudCBhcHByb3ByaWF0ZWx5Pw0K SSBiZWxpZXZlIHRoZSB0ZXh0IHRoYXQgd2FzIGFkZGVkIGZvciB0aGF0IHB1cnBvc2UgaXM6DQri gJwNCjMuMS4gIFJlZGlyZWN0aW9uIG9mIGVuY3J5cHRlZCB0cmFmZmljDQoNCiAgICAgVGhlIFJl ZGlyZWN0aW9uIEludGVyZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgbWlnaHQgYmUgdXNl ZCB0bw0KDQogICAgIHJlZGlyZWN0IGEgcmVxdWVzdCB3aGVyZSB0aGUgVXNlciBBZ2VudCB3aWxs IHN1YnNlcXVlbnRseSBhdHRlbXB0IHRvDQoNCiAgICAgZXN0YWJsaXNoIGEgVExTIHNlc3Npb24g d2l0aCB0aGUgUmVkaXJlY3Rpb24gVGFyZ2V0LiAgSW4gc3VjaCBhIGNhc2UsDQoNCiAgICAgYW55 IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2VudCBpcyBy ZWRpcmVjdGVkDQoNCiAgICAgbmVlZHMgdG8gYmUgYWJsZSB0byBzdWNjZXNzZnVsbHkgY29tcGxl dGUgdGhlIFRMUyBoYW5kc2hha2UgYW5kIHRvDQoNCiAgICAgcGVyZm9ybSBlbmNyeXB0aW9uIG9m IHRoZSBUTFMgY2hhbm5lbC4gIE1lY2hhbmlzbXMgdG8gZGlzdHJpYnV0ZSB0aGUNCg0KICAgICBy ZXF1aXJlZCBpbmZvcm1hdGlvbiBhbmQvb3IgY29uZmlndXJhdGlvbiwgc3VjaCBhcyBwcml2YXRl IGtleXMsIHRvDQoNCiAgICAgc3Vycm9nYXRlcyBhbmQgcmVxdWVzdCByb3V0ZXJzIGluIGRDRE5z IGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzDQoNCiAgICAgZG9jdW1lbnQuDQrigJwNCg0K DQpLZXZpbiwNCg0KQ2FuIHlvdSBjb25maXJtIHRoYXQgdGhpcyBuZXcgcmV2IGlzIGZ1bGx5IGlu IGxpbmUgd2l0aCBjZG1pLW1lZGlhLXR5cGU/DQoNCg0KT25jZSB3ZSBoYXZlIGNvbmZpcm1hdGlv biBmb3IgdGhlc2UgdHdvIHBvaW50cyB3ZSBjYW4gcHVzaCB0aGUgZG9jdW1lbnQgdG8gSUVTRyBy ZXZpZXcuDQoNClRoYW5rcw0KDQoNCg0KDQpCZWdpbiBmb3J3YXJkZWQgbWVzc2FnZToNCg0KRnJv bTogIkJyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW4iIDxyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5s PG1haWx0bzpyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPj4NClN1YmplY3Q6IFtDRE5pXSBVcGRh dGUgb2YgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uDQpEYXRlOiA3IE9jdG9iZXIgMjAxNSAx MDo1NTo1OCBDRVNUDQpUbzogImNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5vcmc+IiA8 Y2RuaUBpZXRmLm9yZzxtYWlsdG86Y2RuaUBpZXRmLm9yZz4+DQoNCkhpIGFsbCwNCg0KV2UndmUg dXBkYXRlZCBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24uIFRoaXMgdXBkYXRlIGFkZHJlc3Nl cyBhbGwgb3BlbiBpc3N1ZXMsIGluY2x1ZGluZzoNCg0KLSBVcGRhdGVkIE1JTUUgdHlwZXMgdG8g YmUgaW4gbGluZSB3aXRoIGRyYWZ0LWlldGYtY2RuaS1tZWRpYS10eXBlcw0KLSBVcGRhdGVkIHNl Y3VyaXR5IHNlY3Rpb24gdG8gYmUgaW4gbGluZSB3aXRoIG90aGVyIENETkkgZG9jcw0KLSBJbmNs dWRlZCBzaG9ydCBkaXNjdXNzaW9uIG9uIHJlZGlyZWN0aW9uIGFuZCBUTFMNCg0KUmF5DQoNCg0K DQoNCk9uIDA3LzEwLzE1IDEwOjUyLCAiQ0ROaSBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRz QGlldGYub3JnPG1haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+IiA8Y2RuaS1ib3VuY2Vz QGlldGYub3JnPG1haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBpbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4+IHdy b3RlOg0KDQoNCg0KQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9u LWxpbmUgSW50ZXJuZXQtRHJhZnRzIGRpcmVjdG9yaWVzLg0KVGhpcyBkcmFmdCBpcyBhIHdvcmsg aXRlbSBvZiB0aGUgQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrcyBJbnRlcmNvbm5lY3Rpb24gV29y a2luZyBHcm91cCBvZiB0aGUgSUVURi4NCg0KICAgICAgVGl0bGUgICAgICAgICAgIDogUmVxdWVz dCBSb3V0aW5nIFJlZGlyZWN0aW9uIEludGVyZmFjZSBmb3IgQ0ROIEludGVyY29ubmVjdGlvbg0K ICAgICAgQXV0aG9ycyAgICAgICAgIDogQmVuIE5pdmVuLUplbmtpbnMNCiAgICAgICAgICAgICAg ICAgICAgICAgIFJheSB2YW4gQnJhbmRlbmJ1cmcNCkZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWll dGYtY2RuaS1yZWRpcmVjdGlvbi0xMi50eHQNClBhZ2VzICAgICAgICAgICA6IDMwDQpEYXRlICAg ICAgICAgICAgOiAyMDE1LTEwLTA3DQoNCkFic3RyYWN0Og0KIFRoZSBSZXF1ZXN0IFJvdXRpbmcg SW50ZXJmYWNlIGNvbXByaXNlcyBvZiAoMSkgdGhlIGFzeW5jaHJvbm91cw0KIGFkdmVydGlzZW1l bnQgb2YgZm9vdHByaW50IGFuZCBjYXBhYmlsaXRpZXMgYnkgYSBkb3duc3RyZWFtIENvbnRlbnQN CiBEZWxpdmVyeSBOZXR3b3JrIChDRE4pIHRoYXQgYWxsb3dzIGFuIHVwc3RyZWFtIENETiB0byBk ZWNpZGUgd2hldGhlcg0KIHRvIHJlZGlyZWN0IHBhcnRpY3VsYXIgdXNlciByZXF1ZXN0cyB0byB0 aGF0IGRvd25zdHJlYW0gQ0ROOyBhbmQgKDIpDQogdGhlIHN5bmNocm9ub3VzIG9wZXJhdGlvbiBv ZiBhbiB1cHN0cmVhbSBDRE4gcmVxdWVzdGluZyB3aGV0aGVyIGENCiBkb3duc3RyZWFtIENETiBp cyBwcmVwYXJlZCB0byBhY2NlcHQgYSB1c2VyIHJlcXVlc3QgYW5kIG9mIGENCiBkb3duc3RyZWFt IENETiByZXNwb25kaW5nIHdpdGggaG93IHRvIGFjdHVhbGx5IHJlZGlyZWN0IHRoZSB1c2VyDQog cmVxdWVzdC4gIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGludGVyZmFjZSBmb3IgdGhlIGxh dHRlciBwYXJ0LA0KIGkuZS4gdGhlIENETkkgUmVxdWVzdCBSb3V0aW5nIFJlZGlyZWN0aW9uIGlu dGVyZmFjZS4NCg0KDQpUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBk cmFmdCBpczoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY2Ru aS1yZWRpcmVjdGlvbi8NCg0KVGhlcmUncyBhbHNvIGEgaHRtbGl6ZWQgdmVyc2lvbiBhdmFpbGFi bGUgYXQ6DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jZG5pLXJlZGly ZWN0aW9uLTEyDQoNCkEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJs ZSBhdDoNCmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmkt cmVkaXJlY3Rpb24tMTINCg0KDQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxl IG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQp1bnRpbCB0aGUgaHRtbGl6 ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KDQpJ bnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQpm dHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KDQpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ0ROaSBtYWlsaW5nIGxpc3QNCkNETmlAaWV0 Zi5vcmc8bWFpbHRvOkNETmlAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2NkbmkNClRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZvcm1hdGlvbiB0aGF0 IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUgYWRkcmVzc2VlIG9y IGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwgeW91IGFyZSByZXF1 ZXN0ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5PIGFj Y2VwdHMgbm8gbGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlzIGUtbWFpbCwgZm9yIHRo ZSBtYW5uZXIgaW4gd2hpY2ggeW91IHVzZSBpdCBhbmQgZm9yIGRhbWFnZSBvZiBhbnkga2luZCBy ZXN1bHRpbmcgZnJvbSB0aGUgcmlza3MgaW5oZXJlbnQgdG8gdGhlIGVsZWN0cm9uaWMgdHJhbnNt aXNzaW9uIG9mIG1lc3NhZ2VzLg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCkNETmkgbWFpbGluZyBsaXN0DQpDRE5pQGlldGYub3JnPG1haWx0bzpDRE5p QGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pDQoN Cg== --_000_A419F67F880AB2468214E154CB8A556206B64050eusaamb103erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5N c29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJU aW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24gVGV4dCBDaGFyIjsN CgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6OC4wcHQ7 DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnNwYW4uYXBwbGUtdGFiLXNw YW4NCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtdGFiLXNwYW47fQ0Kc3Bhbi5CYWxsb29uVGV4dENo YXINCgl7bXNvLXN0eWxlLW5hbWU6IkJhbGxvb24gVGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24gVGV4dCI7DQoJZm9udC1mYW1pbHk6 IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10 eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6 d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWlu IDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0 aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4N CjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlv dXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286 c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1V UyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkhpIEZyYW5jb2lzL1JheSw8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyBGb3IgZWFjaCBvZiB0aGUgcGF5bG9hZCB0eXBlIHBhcmFtZXRlcnMsIHRoZSBzcGVjIGlzIHN1 cHBvc2VkIHRvIGRlZmluZSBhIHB1cnBvc2UsIGludGVyZmFjZSwgYW5kIGVuY29kaW5nLiZuYnNw OyBKdXN0IHRvIGJlIHRvdGFsbHkgZXhwbGljaXQsIEkndmUgYmVlbiBhZGRpbmcgc21hbGwgYmx1 cmJzIGZvciBlYWNoLA0KIGUuZy4sIHN1YnNlY3Rpb24gdW5kZXIgNi4xOjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDtzZWN0aW9uIHRpdGxlPSZxdW90O0NE TkkgUkkgUmVkaXJlY3Rpb24gUmVxdWVzdCBQYXlsb2FkIFR5cGUmcXVvdDsmZ3Q7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7dCZndDtQdXJw b3NlOiBUaGUgcHVycG9zZSBvZiB0aGlzIHBheWxvYWQgdHlwZSBpcyB0byBkaXN0aW5ndWlzaCBS SSByZXF1ZXN0IG1lc3NhZ2VzLiZsdDsvdCZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDt0Jmd0O0ludGVyZmFjZTogUkkmbHQ7L3QmZ3Q7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7 dCZndDtFbmNvZGluZzogc2VlICZsdDt4cmVmIHRhcmdldD0mcXVvdDthbmNob3JzIGZvciBTZWN0 aW9ucyA0LjQuMSBhbmQgNC41LjEmcXVvdDsvJmd0OyZsdDsvdCZndDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDsvc2VjdGlvbiZndDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDtzZWN0aW9uIHRpdGxlPSZxdW90O0NETkkgUkkg UmVkaXJlY3Rpb24gUmVzcG9uc2UgUGF5bG9hZCBUeXBlJnF1b3Q7Jmd0OzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0O3QmZ3Q7UHVycG9zZTog VGhlIHB1cnBvc2Ugb2YgdGhpcyBwYXlsb2FkIHR5cGUgaXMgdG8gZGlzdGluZ3Vpc2ggUkkgcmVz cG9uc2UgbWVzc2FnZXMuJmx0Oy90Jmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0O3QmZ3Q7SW50ZXJmYWNlOiBSSSZsdDsvdCZndDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDt0Jmd0 O0VuY29kaW5nOiBzZWUgJmx0O3hyZWYgdGFyZ2V0PSZxdW90O2FuY2hvcnMgZm9yIFNlY3Rpb25z IDQuNC4yIGFuZCA0LjUuMiZxdW90Oy8mZ3Q7Jmx0Oy90Jmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0Oy9zZWN0aW9uJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7IE1pZ2h0IGFsc28g d2FudCB0byBhZGQgYSBub3RlIHRvIHRoZSBSRkMgRWRpdG9yIGluIHNlY3Rpb24gNi4xIHRvIGNo YW5nZSBSRkN0aGlzIHRvIHRoZSBwdWJsaXNoZWQgUkZDIG51bWJlci48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPnRoYW54LjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+LS0mbmJz cDsgS2V2aW4gSi4gTWE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGlu IDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlk ICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gRnJhbmNvaXMgTGUgRmF1Y2hldXIgKGZsZWZhdWNo KSBbbWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNvbV0NCjxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNk YXksIE9jdG9iZXIgMDcsIDIwMTUgODowNCBBTTxicj4NCjxiPlRvOjwvYj4gUGV0ZXJzb24sIEpv biAmbHQ7am9uLnBldGVyc29uQG5ldXN0YXIuYml6Jmd0OyAoam9uLnBldGVyc29uQG5ldXN0YXIu Yml6KTsgS2V2aW4gTWEgSjxicj4NCjxiPkNjOjwvYj4gY2RuaUBpZXRmLm9yZzsgQnJhbmRlbmJ1 cmcsIFIuIChSYXkpIHZhbjxicj4NCjxiPlN1YmplY3Q6PC9iPiBGd2Q6IFtDRE5pXSBVcGRhdGUg b2YgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Sm9uLCA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5DYW4geW91IGNvbmZpcm0gdGhpcyBuZXcgcmV2IGFkZHJlc3NlcyB5b3VyIGNvbW1l bnQgYXBwcm9wcmlhdGVseT88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkkgYmVsaWV2ZSB0aGUgdGV4dCB0aGF0IHdhcyBhZGRlZCBmb3IgdGhhdCBw dXJwb3NlIGlzOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+4oCcPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4zLjEuICZuYnNwO1JlZGlyZWN0aW9uIG9mIGVuY3J5cHRlZCB0cmFmZmljPHNwYW4gY2xh c3M9ImFwcGxlLXRhYi1zcGFuIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48YnI+DQombmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+ Jm5ic3A7ICZuYnNwO1RoZSBSZWRpcmVjdGlvbiBJbnRlcmZhY2UgZGVmaW5lZCBpbiB0aGlzIGRv Y3VtZW50IG1pZ2h0IGJlIHVzZWQgdG88c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCiZuYnNwOzxzcGFu IGNsYXNzPSJhcHBsZS10YWItc3BhbiI+IDwvc3Bhbj4mbmJzcDsgJm5ic3A7cmVkaXJlY3QgYSBy ZXF1ZXN0IHdoZXJlIHRoZSBVc2VyIEFnZW50IHdpbGwgc3Vic2VxdWVudGx5IGF0dGVtcHQgdG88 c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxicj4NCiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+ IDwvc3Bhbj4mbmJzcDsgJm5ic3A7ZXN0YWJsaXNoIGEgVExTIHNlc3Npb24gd2l0aCB0aGUgUmVk aXJlY3Rpb24gVGFyZ2V0LiAmbmJzcDtJbiBzdWNoIGEgY2FzZSw8c3BhbiBjbGFzcz0iYXBwbGUt dGFiLXNwYW4iPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi cj4NCiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+IDwvc3Bhbj4mbmJzcDsgJm5i c3A7YW55IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2Vu dCBpcyByZWRpcmVjdGVkPHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFuIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQombmJzcDs8c3BhbiBjbGFzcz0i YXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+Jm5ic3A7ICZuYnNwO25lZWRzIHRvIGJlIGFibGUgdG8g c3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0bzxzcGFuIGNsYXNz PSJhcHBsZS10YWItc3BhbiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGJyPg0KJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFuIj4gPC9zcGFuPiZu YnNwOyAmbmJzcDtwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsLiAmbmJzcDtN ZWNoYW5pc21zIHRvIGRpc3RyaWJ1dGUgdGhlPHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFuIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQombmJzcDs8 c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+Jm5ic3A7ICZuYnNwO3JlcXVpcmVk IGluZm9ybWF0aW9uIGFuZC9vciBjb25maWd1cmF0aW9uLCBzdWNoIGFzIHByaXZhdGUga2V5cywg dG88c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3Bh biI+IDwvc3Bhbj4mbmJzcDsgJm5ic3A7c3Vycm9nYXRlcyBhbmQgcmVxdWVzdCByb3V0ZXJzIGlu IGRDRE5zIGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzPHNwYW4gY2xhc3M9ImFwcGxlLXRh Yi1zcGFuIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+ DQombmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+Jm5ic3A7ICZuYnNw O2RvY3VtZW50Ljxicj4NCuKAnDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPktldmluLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DYW4geW91IGNvbmZpcm0gdGhhdCB0aGlzIG5ldyByZXYg aXMgZnVsbHkgaW4gbGluZSB3aXRoIGNkbWktbWVkaWEtdHlwZT88bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbmNlIHdlIGhhdmUgY29uZmly bWF0aW9uIGZvciB0aGVzZSB0d28gcG9pbnRzIHdlIGNhbiBwdXNoIHRoZSBkb2N1bWVudCB0byBJ RVNHIHJldmlldy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+VGhhbmtzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkJlZ2luIGZvcndhcmRlZCBtZXNzYWdlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206IDwvc3Bhbj4NCjwvYj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPiZxdW90O0JyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW4mcXVvdDsgJmx0OzxhIGhyZWY9 Im1haWx0bzpyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sIj5yYXkudmFuYnJhbmRlbmJ1cmdAdG5v Lm5sPC9hPiZndDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlN1YmplY3Q6IFtDRE5pXSBVcGRhdGUgb2Yg ZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uPC9zcGFuPjwvYj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RGF0ZTog PC9zcGFuPg0KPC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+NyBPY3RvYmVyIDIwMTUgMTA6NTU6NTggQ0VTVDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+VG86IDwvc3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiZxdW90Ozxh IGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIj5jZG5pQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciPmNkbmlAaWV0Zi5vcmc8L2E+Jmd0Ozwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgYWxsLDxicj4NCjxi cj4NCldlJ3ZlIHVwZGF0ZWQgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLiBUaGlzIHVwZGF0 ZSBhZGRyZXNzZXMgYWxsIG9wZW4gaXNzdWVzLCBpbmNsdWRpbmc6PGJyPg0KPGJyPg0KLSBVcGRh dGVkIE1JTUUgdHlwZXMgdG8gYmUgaW4gbGluZSB3aXRoIGRyYWZ0LWlldGYtY2RuaS1tZWRpYS10 eXBlczxicj4NCi0gVXBkYXRlZCBzZWN1cml0eSBzZWN0aW9uIHRvIGJlIGluIGxpbmUgd2l0aCBv dGhlciBDRE5JIGRvY3M8YnI+DQotIEluY2x1ZGVkIHNob3J0IGRpc2N1c3Npb24gb24gcmVkaXJl Y3Rpb24gYW5kIFRMUzxicj4NCjxicj4NClJheTxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4N Ck9uIDA3LzEwLzE1IDEwOjUyLCAmcXVvdDtDRE5pIG9uIGJlaGFsZiBvZiA8YSBocmVmPSJtYWls dG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIj5pbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8L2E+ JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86Y2RuaS1ib3VuY2VzQGlldGYub3JnIj5jZG5pLWJv dW5jZXNAaWV0Zi5vcmc8L2E+IG9uIGJlaGFsZiBvZg0KPGEgaHJlZj0ibWFpbHRvOmludGVybmV0 LWRyYWZ0c0BpZXRmLm9yZyI+aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPC9hPiZndDsgd3JvdGU6 PGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 YnI+DQpBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJ bnRlcm5ldC1EcmFmdHMgZGlyZWN0b3JpZXMuPGJyPg0KVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRl bSBvZiB0aGUgQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrcyBJbnRlcmNvbm5lY3Rpb24gV29ya2lu ZyBHcm91cCBvZiB0aGUgSUVURi48YnI+DQo8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDtUaXRsZSAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDs6IFJlcXVlc3QgUm91dGluZyBSZWRpcmVjdGlvbiBJbnRlcmZh Y2UgZm9yIENETiBJbnRlcmNvbm5lY3Rpb248YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDtBdXRob3JzICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOzogQmVuIE5pdmVuLUplbmtpbnM8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDtSYXkgdmFuIEJyYW5kZW5idXJnPGJyPg0KRmlsZW5hbWUgJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24t MTIudHh0PGJyPg0KUGFnZXMgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiAzMDxicj4NCkRhdGUgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiAyMDE1LTEwLTA3 PGJyPg0KPGJyPg0KQWJzdHJhY3Q6PGJyPg0KJm5ic3A7VGhlIFJlcXVlc3QgUm91dGluZyBJbnRl cmZhY2UgY29tcHJpc2VzIG9mICgxKSB0aGUgYXN5bmNocm9ub3VzPGJyPg0KJm5ic3A7YWR2ZXJ0 aXNlbWVudCBvZiBmb290cHJpbnQgYW5kIGNhcGFiaWxpdGllcyBieSBhIGRvd25zdHJlYW0gQ29u dGVudDxicj4NCiZuYnNwO0RlbGl2ZXJ5IE5ldHdvcmsgKENETikgdGhhdCBhbGxvd3MgYW4gdXBz dHJlYW0gQ0ROIHRvIGRlY2lkZSB3aGV0aGVyPGJyPg0KJm5ic3A7dG8gcmVkaXJlY3QgcGFydGlj dWxhciB1c2VyIHJlcXVlc3RzIHRvIHRoYXQgZG93bnN0cmVhbSBDRE47IGFuZCAoMik8YnI+DQom bmJzcDt0aGUgc3luY2hyb25vdXMgb3BlcmF0aW9uIG9mIGFuIHVwc3RyZWFtIENETiByZXF1ZXN0 aW5nIHdoZXRoZXIgYTxicj4NCiZuYnNwO2Rvd25zdHJlYW0gQ0ROIGlzIHByZXBhcmVkIHRvIGFj Y2VwdCBhIHVzZXIgcmVxdWVzdCBhbmQgb2YgYTxicj4NCiZuYnNwO2Rvd25zdHJlYW0gQ0ROIHJl c3BvbmRpbmcgd2l0aCBob3cgdG8gYWN0dWFsbHkgcmVkaXJlY3QgdGhlIHVzZXI8YnI+DQombmJz cDtyZXF1ZXN0LiAmbmJzcDtUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBhbiBpbnRlcmZhY2UgZm9y IHRoZSBsYXR0ZXIgcGFydCw8YnI+DQombmJzcDtpLmUuIHRoZSBDRE5JIFJlcXVlc3QgUm91dGlu ZyBSZWRpcmVjdGlvbiBpbnRlcmZhY2UuPGJyPg0KPGJyPg0KPGJyPg0KVGhlIElFVEYgZGF0YXRy YWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6PGJyPg0KPGEgaHJlZj0iaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLyI+ aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0 aW9uLzwvYT48YnI+DQo8YnI+DQpUaGVyZSdzIGFsc28gYSBodG1saXplZCB2ZXJzaW9uIGF2YWls YWJsZSBhdDo8YnI+DQo8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt aWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTEyIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTEyPC9hPjxicj4NCjxicj4NCkEgZGlmZiBmcm9tIHRo ZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBhdDo8YnI+DQo8YSBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTEy Ij5odHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1jZG5pLXJlZGly ZWN0aW9uLTEyPC9hPjxicj4NCjxicj4NCjxicj4NClBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRh a2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb248YnI+DQp1 bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xz LmlldGYub3JnLjxicj4NCjxicj4NCkludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUg YnkgYW5vbnltb3VzIEZUUCBhdDo8YnI+DQo8YSBocmVmPSJmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50 ZXJuZXQtZHJhZnRzLyI+ZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy88L2E+PGJy Pg0KPGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188 YnI+DQpDRE5pIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpDRE5pQGlldGYub3Jn Ij5DRE5pQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vY2RuaSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9jZG5pPC9hPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyBtZXNz YWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGludGVuZGVkIGZvciB5b3Uu IElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBzZW50 IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNlbmRl ciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBubyBsaWFiaWxpdHkgZm9yIHRo ZQ0KIGNvbnRlbnQgb2YgdGhpcyBlLW1haWwsIGZvciB0aGUgbWFubmVyIGluIHdoaWNoIHlvdSB1 c2UgaXQgYW5kIGZvciBkYW1hZ2Ugb2YgYW55IGtpbmQgcmVzdWx0aW5nIGZyb20gdGhlIHJpc2tz IGluaGVyZW50IHRvIHRoZSBlbGVjdHJvbmljIHRyYW5zbWlzc2lvbiBvZiBtZXNzYWdlcy48YnI+ DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCkNE TmkgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOkNETmlAaWV0Zi5vcmciPkNETmlA aWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9jZG5pIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nkbmk8 L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_A419F67F880AB2468214E154CB8A556206B64050eusaamb103erics_-- From nobody Thu Oct 8 00:22:13 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F2981A0143 for ; Thu, 8 Oct 2015 00:22:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pnH_aFrJHkOt for ; Thu, 8 Oct 2015 00:22:08 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.144]) by ietfa.amsl.com (Postfix) with ESMTP id A44E31A0122 for ; Thu, 8 Oct 2015 00:21:58 -0700 (PDT) Received: from cpc4-cmbg17-2-0-cust814.5-4.cable.virginm.net ([86.14.227.47] helo=[192.168.0.10]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1Zk5WW-0001s2-Lm; Thu, 08 Oct 2015 08:21:57 +0100 Content-Type: multipart/alternative; boundary="Apple-Mail=_D6A135C0-B492-463C-84BF-CAEE4AB86C22" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Thu, 8 Oct 2015 08:21:52 +0100 Message-Id: <694AFBDE-38FA-4350-AD76-9D6F60965EFB@niven-jenkins.co.uk> References: <20151007085216.27764.67262.idtracker@ietfa.amsl.com> To: Phil Sorber X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-redirection-12.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 07:22:11 -0000 --Apple-Mail=_D6A135C0-B492-463C-84BF-CAEE4AB86C22 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Phil, > On 7 Oct 2015, at 23:15, Phil Sorber wrote: >=20 > There is a sentence in section 2 about HTTP redirection: >=20 > > Examples of an application level redirection are HTTP 302 = Redirection and RTMP 302 Redirection. >=20 > and then various other references to 302 redirection throughout the = document. My question is, what is the expectation for a multi-asset = exchange like segmented video where a UA is sent to a manifest and then = expected to download a series of video segments. Should the UA = continually go back to the redirector, or should it "stick" to the host = it was redirected to? It depends on the type of reference. Sections 4 & 5 of RFC3986 cover = this. =20 > Perhaps this is out of the scope of this document? Yes it is IMO. Ben >=20 > On Wed, Oct 7, 2015 at 2:52 AM > wrote: >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Content Delivery Networks = Interconnection Working Group of the IETF. >=20 > Title : Request Routing Redirection Interface for = CDN Interconnection > Authors : Ben Niven-Jenkins > Ray van Brandenburg > Filename : draft-ietf-cdni-redirection-12.txt > Pages : 30 > Date : 2015-10-07 >=20 > Abstract: > The Request Routing Interface comprises of (1) the asynchronous > advertisement of footprint and capabilities by a downstream Content > Delivery Network (CDN) that allows an upstream CDN to decide = whether > to redirect particular user requests to that downstream CDN; and = (2) > the synchronous operation of an upstream CDN requesting whether a > downstream CDN is prepared to accept a user request and of a > downstream CDN responding with how to actually redirect the user > request. This document describes an interface for the latter part, > i.e. the CDNI Request Routing Redirection interface. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ = >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-redirection-12 = >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection-12 = >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org = . >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ = >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni = > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni --Apple-Mail=_D6A135C0-B492-463C-84BF-CAEE4AB86C22 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi Phil,

On 7 Oct 2015, at 23:15, Phil = Sorber <sorber@apache.org> wrote:

There is a sentence in section 2 about HTTP = redirection:

> Examples of an = application level redirection are HTTP 302 Redirection and RTMP 302 Redirection.

and then various other = references to 302 redirection throughout the document. My question is, = what is the expectation for a multi-asset exchange like segmented video = where a UA is sent to a manifest and then expected to download a series = of video segments. Should the UA continually go back to the redirector, = or should it "stick" to the host it was redirected = to?

It depends = on the type of reference. Sections 4 & 5 of RFC3986 cover this. =  

Perhaps this is = out of the scope of this document?

Yes = it is IMO.

Ben


On Wed, Oct 7, 2015 at = 2:52 AM <internet-drafts@ietf.org> wrote:

A New Internet-Draft is available from the on-line Internet-Drafts = directories.
 This draft is a work item of the Content Delivery Networks = Interconnection Working Group of the IETF.

        Title          =  : Request Routing Redirection Interface for CDN Interconnection
        Authors         : = Ben Niven-Jenkins
                    =       Ray van Brandenburg
        Filename        : = draft-ietf-cdni-redirection-12.txt
        Pages          =  : 30
        Date          =   : 2015-10-07

Abstract:
   The Request Routing Interface comprises of (1) the = asynchronous
   advertisement of footprint and capabilities by a downstream = Content
   Delivery Network (CDN) that allows an upstream CDN to = decide whether
   to redirect particular user requests to that downstream = CDN; and (2)
   the synchronous operation of an upstream CDN requesting = whether a
   downstream CDN is prepared to accept a user request and of = a
   downstream CDN responding with how to actually redirect the = user
   request.  This document describes an interface for the = latter part,
   i.e. the CDNI Request Routing Redirection interface.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-cdni-redirection-12<= br class=3D"">
A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection= -12


Please note that it may take a couple of minutes from the time of = submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
CDNi mailing list
CDNi@ietf.org
https://www.ietf.org/mailman/listinfo/cdni
_______________________________________________
CDNi = mailing list
CDNi@ietf.org
https://www.ietf.org/mailman/listinfo/cdni

= --Apple-Mail=_D6A135C0-B492-463C-84BF-CAEE4AB86C22-- From nobody Thu Oct 8 01:56:15 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9665A1A8AE4 for ; Thu, 8 Oct 2015 01:56:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JMcZTWHi-1yC for ; Thu, 8 Oct 2015 01:56:09 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 356761A8AE1 for ; Thu, 8 Oct 2015 01:56:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=33062; q=dns/txt; s=iport; t=1444294569; x=1445504169; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=ka228L7+ADW0YKi0fktE2N+7R1OEqBhZmxCe/+V7uYQ=; b=RPr3gbJbFlvK1EBTXbVYhh9n5VhAEgpb6CK2iNddGt74TKl1uMnKsefX c/O4v20EKnvFEU+mN6xXtvpouc3EvlqqDYpHZu7HMMXHLE1Oorf2TS9gE lOiRB9knHGRQ+yjZStPLAD7SuBPeFATpXa+lhs4deyGMspR3qbGiO6tbY 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DtAgBqLxZW/5RdJa1eglpNVG4GvT8BDYFaFwEJgnKCCn8CHIEmOBQBAQEBAQEBgQqEJgEBAQQBAQEgCkELEAIBCBEDAQEBIQcDAgICJQsUCQgCBA4FiC4NrheUMgEBAQEBAQEBAQEBAQEBAQEBAQEBAReGdIIPgm6EcgoNBAYBBgOCYDGBFAWST4M5AYUXaIcXgVdIg3GNIIRZg24BEQ4BAUKEAnEBhmWBBgEBAQ X-IronPort-AV: E=Sophos; i="5.17,654,1437436800"; d="scan'208,217"; a="33702008" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-7.cisco.com with ESMTP; 08 Oct 2015 08:56:07 +0000 Received: from XCH-ALN-016.cisco.com (xch-aln-016.cisco.com [173.36.7.26]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t988u7NF006152 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 8 Oct 2015 08:56:07 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-016.cisco.com (173.36.7.26) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 8 Oct 2015 03:56:06 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Thu, 8 Oct 2015 03:56:06 -0500 From: "Francois Le Faucheur (flefauch)" To: Ma Kevin , "Brandenburg, R. (Ray) van" Thread-Topic: [CDNi] Update of draft-ietf-cdni-redirection Thread-Index: AQHRAN38q2luPuQAo0m62xCEZvIS1p5g5uswgAC5f4A= Date: Thu, 8 Oct 2015 08:56:06 +0000 Message-ID: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.23] Content-Type: multipart/alternative; boundary="_000_B90EBF6723954918AAE26DA1E95175C9ciscocom_" MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Update of draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 08:56:13 -0000 --_000_B90EBF6723954918AAE26DA1E95175C9ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIEtldmluLg0KDQpSYXksIGNhbiB5b3UgcmVmbGVjdCB0aGF0ID8NCg0KT24gOCBPY3Qg MjAxNSwgYXQgMDU6MDksIEtldmluIE1hIEogPGtldmluLmoubWFAZXJpY3Nzb24uY29tPG1haWx0 bzprZXZpbi5qLm1hQGVyaWNzc29uLmNvbT4+IHdyb3RlOg0KDQpIaSBGcmFuY29pcy9SYXksDQoN CiAgRm9yIGVhY2ggb2YgdGhlIHBheWxvYWQgdHlwZSBwYXJhbWV0ZXJzLCB0aGUgc3BlYyBpcyBz dXBwb3NlZCB0byBkZWZpbmUgYSBwdXJwb3NlLCBpbnRlcmZhY2UsIGFuZCBlbmNvZGluZy4gIEp1 c3QgdG8gYmUgdG90YWxseSBleHBsaWNpdCwgSSd2ZSBiZWVuIGFkZGluZyBzbWFsbCBibHVyYnMg Zm9yIGVhY2gsIGUuZy4sIHN1YnNlY3Rpb24gdW5kZXIgNi4xOg0KDQogICAgICAgIDxzZWN0aW9u IHRpdGxlPSJDRE5JIFJJIFJlZGlyZWN0aW9uIFJlcXVlc3QgUGF5bG9hZCBUeXBlIj4NCiAgICAg ICAgICA8dD5QdXJwb3NlOiBUaGUgcHVycG9zZSBvZiB0aGlzIHBheWxvYWQgdHlwZSBpcyB0byBk aXN0aW5ndWlzaCBSSSByZXF1ZXN0IG1lc3NhZ2VzLjwvdD4NCiAgICAgICAgICA8dD5JbnRlcmZh Y2U6IFJJPC90Pg0KICAgICAgICAgIDx0PkVuY29kaW5nOiBzZWUgPHhyZWYgdGFyZ2V0PSJhbmNo b3JzIGZvciBTZWN0aW9ucyA0LjQuMSBhbmQgNC41LjEiLz48L3Q+DQogICAgICAgIDwvc2VjdGlv bj4NCiAgICAgICAgPHNlY3Rpb24gdGl0bGU9IkNETkkgUkkgUmVkaXJlY3Rpb24gUmVzcG9uc2Ug UGF5bG9hZCBUeXBlIj4NCiAgICAgICAgICA8dD5QdXJwb3NlOiBUaGUgcHVycG9zZSBvZiB0aGlz IHBheWxvYWQgdHlwZSBpcyB0byBkaXN0aW5ndWlzaCBSSSByZXNwb25zZSBtZXNzYWdlcy48L3Q+ DQogICAgICAgICAgPHQ+SW50ZXJmYWNlOiBSSTwvdD4NCiAgICAgICAgICA8dD5FbmNvZGluZzog c2VlIDx4cmVmIHRhcmdldD0iYW5jaG9ycyBmb3IgU2VjdGlvbnMgNC40LjIgYW5kIDQuNS4yIi8+ PC90Pg0KICAgICAgICA8L3NlY3Rpb24+DQoNCiAgTWlnaHQgYWxzbyB3YW50IHRvIGFkZCBhIG5v dGUgdG8gdGhlIFJGQyBFZGl0b3IgaW4gc2VjdGlvbiA2LjEgdG8gY2hhbmdlIFJGQ3RoaXMgdG8g dGhlIHB1Ymxpc2hlZCBSRkMgbnVtYmVyLg0KDQp0aGFueC4NCg0KLS0gIEtldmluIEouIE1hDQoN CkZyb206IEZyYW5jb2lzIExlIEZhdWNoZXVyIChmbGVmYXVjaCkgW21haWx0bzpmbGVmYXVjaEBj aXNjby5jb21dDQpTZW50OiBXZWRuZXNkYXksIE9jdG9iZXIgMDcsIDIwMTUgODowNCBBTQ0KVG86 IFBldGVyc29uLCBKb24gPGpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpejxtYWlsdG86am9uLnBldGVy c29uQG5ldXN0YXIuYml6Pj4gKGpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpejxtYWlsdG86am9uLnBl dGVyc29uQG5ldXN0YXIuYml6Pik7IEtldmluIE1hIEoNCkNjOiBjZG5pQGlldGYub3JnPG1haWx0 bzpjZG5pQGlldGYub3JnPjsgQnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbg0KU3ViamVjdDogRndk OiBbQ0ROaV0gVXBkYXRlIG9mIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbg0KDQpKb24sDQoN CkNhbiB5b3UgY29uZmlybSB0aGlzIG5ldyByZXYgYWRkcmVzc2VzIHlvdXIgY29tbWVudCBhcHBy b3ByaWF0ZWx5Pw0KSSBiZWxpZXZlIHRoZSB0ZXh0IHRoYXQgd2FzIGFkZGVkIGZvciB0aGF0IHB1 cnBvc2UgaXM6DQrigJwNCjMuMS4gIFJlZGlyZWN0aW9uIG9mIGVuY3J5cHRlZCB0cmFmZmljDQoN CiAgICAgVGhlIFJlZGlyZWN0aW9uIEludGVyZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQg bWlnaHQgYmUgdXNlZCB0bw0KDQogICAgIHJlZGlyZWN0IGEgcmVxdWVzdCB3aGVyZSB0aGUgVXNl ciBBZ2VudCB3aWxsIHN1YnNlcXVlbnRseSBhdHRlbXB0IHRvDQoNCiAgICAgZXN0YWJsaXNoIGEg VExTIHNlc3Npb24gd2l0aCB0aGUgUmVkaXJlY3Rpb24gVGFyZ2V0LiAgSW4gc3VjaCBhIGNhc2Us DQoNCiAgICAgYW55IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNl ciBBZ2VudCBpcyByZWRpcmVjdGVkDQoNCiAgICAgbmVlZHMgdG8gYmUgYWJsZSB0byBzdWNjZXNz ZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UgYW5kIHRvDQoNCiAgICAgcGVyZm9ybSBl bmNyeXB0aW9uIG9mIHRoZSBUTFMgY2hhbm5lbC4gIE1lY2hhbmlzbXMgdG8gZGlzdHJpYnV0ZSB0 aGUNCg0KICAgICByZXF1aXJlZCBpbmZvcm1hdGlvbiBhbmQvb3IgY29uZmlndXJhdGlvbiwgc3Vj aCBhcyBwcml2YXRlIGtleXMsIHRvDQoNCiAgICAgc3Vycm9nYXRlcyBhbmQgcmVxdWVzdCByb3V0 ZXJzIGluIGRDRE5zIGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzDQoNCiAgICAgZG9jdW1l bnQuDQrigJwNCg0KDQpLZXZpbiwNCg0KQ2FuIHlvdSBjb25maXJtIHRoYXQgdGhpcyBuZXcgcmV2 IGlzIGZ1bGx5IGluIGxpbmUgd2l0aCBjZG1pLW1lZGlhLXR5cGU/DQoNCg0KT25jZSB3ZSBoYXZl IGNvbmZpcm1hdGlvbiBmb3IgdGhlc2UgdHdvIHBvaW50cyB3ZSBjYW4gcHVzaCB0aGUgZG9jdW1l bnQgdG8gSUVTRyByZXZpZXcuDQoNClRoYW5rcw0KDQoNCg0KDQpCZWdpbiBmb3J3YXJkZWQgbWVz c2FnZToNCg0KRnJvbTogIkJyYW5kZW5idXJnLCBSLiAoUmF5KSB2YW4iIDxyYXkudmFuYnJhbmRl bmJ1cmdAdG5vLm5sPG1haWx0bzpyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPj4NClN1YmplY3Q6 IFtDRE5pXSBVcGRhdGUgb2YgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uDQpEYXRlOiA3IE9j dG9iZXIgMjAxNSAxMDo1NTo1OCBDRVNUDQpUbzogImNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlA aWV0Zi5vcmc+IiA8Y2RuaUBpZXRmLm9yZzxtYWlsdG86Y2RuaUBpZXRmLm9yZz4+DQoNCkhpIGFs bCwNCg0KV2UndmUgdXBkYXRlZCBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24uIFRoaXMgdXBk YXRlIGFkZHJlc3NlcyBhbGwgb3BlbiBpc3N1ZXMsIGluY2x1ZGluZzoNCg0KLSBVcGRhdGVkIE1J TUUgdHlwZXMgdG8gYmUgaW4gbGluZSB3aXRoIGRyYWZ0LWlldGYtY2RuaS1tZWRpYS10eXBlcw0K LSBVcGRhdGVkIHNlY3VyaXR5IHNlY3Rpb24gdG8gYmUgaW4gbGluZSB3aXRoIG90aGVyIENETkkg ZG9jcw0KLSBJbmNsdWRlZCBzaG9ydCBkaXNjdXNzaW9uIG9uIHJlZGlyZWN0aW9uIGFuZCBUTFMN Cg0KUmF5DQoNCg0KDQoNCk9uIDA3LzEwLzE1IDEwOjUyLCAiQ0ROaSBvbiBiZWhhbGYgb2YgaW50 ZXJuZXQtZHJhZnRzQGlldGYub3JnPG1haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+IiA8 Y2RuaS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJl aGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0Bp ZXRmLm9yZz4+IHdyb3RlOg0KDQoNCg0KQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxl IGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJhZnRzIGRpcmVjdG9yaWVzLg0KVGhpcyBkcmFm dCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrcyBJbnRlcmNv bm5lY3Rpb24gV29ya2luZyBHcm91cCBvZiB0aGUgSUVURi4NCg0KICAgICAgVGl0bGUgICAgICAg ICAgIDogUmVxdWVzdCBSb3V0aW5nIFJlZGlyZWN0aW9uIEludGVyZmFjZSBmb3IgQ0ROIEludGVy Y29ubmVjdGlvbg0KICAgICAgQXV0aG9ycyAgICAgICAgIDogQmVuIE5pdmVuLUplbmtpbnMNCiAg ICAgICAgICAgICAgICAgICAgICAgIFJheSB2YW4gQnJhbmRlbmJ1cmcNCkZpbGVuYW1lICAgICAg ICA6IGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMi50eHQNClBhZ2VzICAgICAgICAgICA6 IDMwDQpEYXRlICAgICAgICAgICAgOiAyMDE1LTEwLTA3DQoNCkFic3RyYWN0Og0KIFRoZSBSZXF1 ZXN0IFJvdXRpbmcgSW50ZXJmYWNlIGNvbXByaXNlcyBvZiAoMSkgdGhlIGFzeW5jaHJvbm91cw0K IGFkdmVydGlzZW1lbnQgb2YgZm9vdHByaW50IGFuZCBjYXBhYmlsaXRpZXMgYnkgYSBkb3duc3Ry ZWFtIENvbnRlbnQNCiBEZWxpdmVyeSBOZXR3b3JrIChDRE4pIHRoYXQgYWxsb3dzIGFuIHVwc3Ry ZWFtIENETiB0byBkZWNpZGUgd2hldGhlcg0KIHRvIHJlZGlyZWN0IHBhcnRpY3VsYXIgdXNlciBy ZXF1ZXN0cyB0byB0aGF0IGRvd25zdHJlYW0gQ0ROOyBhbmQgKDIpDQogdGhlIHN5bmNocm9ub3Vz IG9wZXJhdGlvbiBvZiBhbiB1cHN0cmVhbSBDRE4gcmVxdWVzdGluZyB3aGV0aGVyIGENCiBkb3du c3RyZWFtIENETiBpcyBwcmVwYXJlZCB0byBhY2NlcHQgYSB1c2VyIHJlcXVlc3QgYW5kIG9mIGEN CiBkb3duc3RyZWFtIENETiByZXNwb25kaW5nIHdpdGggaG93IHRvIGFjdHVhbGx5IHJlZGlyZWN0 IHRoZSB1c2VyDQogcmVxdWVzdC4gIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGludGVyZmFj ZSBmb3IgdGhlIGxhdHRlciBwYXJ0LA0KIGkuZS4gdGhlIENETkkgUmVxdWVzdCBSb3V0aW5nIFJl ZGlyZWN0aW9uIGludGVyZmFjZS4NCg0KDQpUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFn ZSBmb3IgdGhpcyBkcmFmdCBpczoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Ry YWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi8NCg0KVGhlcmUncyBhbHNvIGEgaHRtbGl6ZWQgdmVy c2lvbiBhdmFpbGFibGUgYXQ6DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0 Zi1jZG5pLXJlZGlyZWN0aW9uLTEyDQoNCkEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9u IGlzIGF2YWlsYWJsZSBhdDoNCmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFm dC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTINCg0KDQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0 YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQp1bnRp bCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmll dGYub3JnPGh0dHA6Ly90b29scy5pZXRmLm9yZz4uDQoNCkludGVybmV0LURyYWZ0cyBhcmUgYWxz byBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCmZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRl cm5ldC1kcmFmdHMvDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQpDRE5pIG1haWxpbmcgbGlzdA0KQ0ROaUBpZXRmLm9yZzxtYWlsdG86Q0ROaUBpZXRm Lm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaQ0KVGhpcyBt ZXNzYWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGludGVuZGVkIGZvciB5 b3UuIElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBz ZW50IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNl bmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBubyBsaWFiaWxpdHkgZm9y IHRoZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3IgdGhlIG1hbm5lciBpbiB3aGljaCB5b3Ug dXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJlc3VsdGluZyBmcm9tIHRoZSByaXNr cyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21pc3Npb24gb2YgbWVzc2FnZXMuDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ0ROaSBtYWls aW5nIGxpc3QNCkNETmlAaWV0Zi5vcmc8bWFpbHRvOkNETmlAaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCg0KDQo= --_000_B90EBF6723954918AAE26DA1E95175C9ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <8B4D5A474B9AC940B404CC76CC86CED8@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KVGhhbmtzIEtldmluLg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+UmF5LCBjYW4geW91 IHJlZmxlY3QgdGhhdCA/PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXY+ DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gOCBP Y3QgMjAxNSwgYXQgMDU6MDksIEtldmluIE1hIEogJmx0OzxhIGhyZWY9Im1haWx0bzprZXZpbi5q Lm1hQGVyaWNzc29uLmNvbSIgY2xhc3M9IiI+a2V2aW4uai5tYUBlcmljc3Nvbi5jb208L2E+Jmd0 OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8 ZGl2IGNsYXNzPSIiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQg V29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSIgY2xhc3M9IiI+DQo8c3R5bGUgY2xhc3M9IiI+PCEt LQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpIZWx2 ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIg MiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0x OjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05v cm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVz IE5ldyBSb21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1h cmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglm b250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5hcHBsZS10YWItc3Bhbg0K CXttc28tc3R5bGUtbmFtZTphcHBsZS10YWItc3Bhbjt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0K CXttc28tc3R5bGUtbmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFo b21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjp3aW5k b3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEu MGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24x DQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94 bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2 OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFw ZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjxkaXYgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUi IHZsaW5rPSJwdXJwbGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5IaSBGcmFuY29pcy9SYXksPG86 cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyIgY2xhc3M9IiI+Jm5ic3A7IEZvciBlYWNoIG9mIHRoZSBwYXlsb2FkIHR5cGUgcGFyYW1l dGVycywgdGhlIHNwZWMgaXMgc3VwcG9zZWQgdG8gZGVmaW5lIGEgcHVycG9zZSwgaW50ZXJmYWNl LCBhbmQgZW5jb2RpbmcuJm5ic3A7IEp1c3QgdG8gYmUgdG90YWxseSBleHBsaWNpdCwgSSd2ZSBi ZWVuIGFkZGluZyBzbWFsbCBibHVyYnMNCiBmb3IgZWFjaCwgZS5nLiwgc3Vic2VjdGlvbiB1bmRl ciA2LjE6PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICZsdDtzZWN0aW9uIHRpdGxlPSZxdW90O0NETkkgUkkgUmVkaXJlY3Rpb24gUmVx dWVzdCBQYXlsb2FkIFR5cGUmcXVvdDsmZ3Q7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7dCZndDtQdXJwb3Nl OiBUaGUgcHVycG9zZSBvZiB0aGlzIHBheWxvYWQgdHlwZSBpcyB0byBkaXN0aW5ndWlzaCBSSSBy ZXF1ZXN0IG1lc3NhZ2VzLiZsdDsvdCZndDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDt0Jmd0O0ludGVyZmFj ZTogUkkmbHQ7L3QmZ3Q7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7dCZndDtFbmNvZGluZzogc2VlICZsdDt4 cmVmIHRhcmdldD0mcXVvdDthbmNob3JzIGZvciBTZWN0aW9ucyA0LjQuMSBhbmQgNC41LjEmcXVv dDsvJmd0OyZsdDsvdCZndDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDsvc2VjdGlvbiZndDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDtzZWN0aW9uIHRpdGxlPSZx dW90O0NETkkgUkkgUmVkaXJlY3Rpb24gUmVzcG9uc2UgUGF5bG9hZCBUeXBlJnF1b3Q7Jmd0Ozxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJmx0O3QmZ3Q7UHVycG9zZTogVGhlIHB1cnBvc2Ugb2YgdGhpcyBwYXlsb2Fk IHR5cGUgaXMgdG8gZGlzdGluZ3Vpc2ggUkkgcmVzcG9uc2UgbWVzc2FnZXMuJmx0Oy90Jmd0Ozxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJmx0O3QmZ3Q7SW50ZXJmYWNlOiBSSSZsdDsvdCZndDs8bzpwIGNsYXNzPSIi PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9 IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICZsdDt0Jmd0O0VuY29kaW5nOiBzZWUgJmx0O3hyZWYgdGFyZ2V0PSZxdW90O2FuY2hvcnMgZm9y IFNlY3Rpb25zIDQuNC4yIGFuZCA0LjUuMiZxdW90Oy8mZ3Q7Jmx0Oy90Jmd0OzxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFz cz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0Oy9zZWN0 aW9uJmd0OzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyBNaWdodCBhbHNvIHdhbnQgdG8gYWRkIGEg bm90ZSB0byB0aGUgUkZDIEVkaXRvciBpbiBzZWN0aW9uIDYuMSB0byBjaGFuZ2UgUkZDdGhpcyB0 byB0aGUgcHVibGlzaGVkIFJGQyBudW1iZXIuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+dGhhbnguPG86cCBj bGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi IGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyIgY2xhc3M9IiI+LS0mbmJzcDsgS2V2aW4gSi4gTWE8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUg MS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iIGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiIGNsYXNzPSIiPkZyb206 PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyIgY2xhc3M9IiI+IEZyYW5jb2lz IExlIEZhdWNoZXVyIChmbGVmYXVjaCkgWzxhIGhyZWY9Im1haWx0bzpmbGVmYXVjaEBjaXNjby5j b20iIGNsYXNzPSIiPm1haWx0bzpmbGVmYXVjaEBjaXNjby5jb208L2E+XQ0KPGJyIGNsYXNzPSIi Pg0KPGIgY2xhc3M9IiI+U2VudDo8L2I+IFdlZG5lc2RheSwgT2N0b2JlciAwNywgMjAxNSA4OjA0 IEFNPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86PC9iPiBQZXRlcnNvbiwgSm9uICZsdDs8 YSBocmVmPSJtYWlsdG86am9uLnBldGVyc29uQG5ldXN0YXIuYml6IiBjbGFzcz0iIj5qb24ucGV0 ZXJzb25AbmV1c3Rhci5iaXo8L2E+Jmd0OyAoPGEgaHJlZj0ibWFpbHRvOmpvbi5wZXRlcnNvbkBu ZXVzdGFyLmJpeiIgY2xhc3M9IiI+am9uLnBldGVyc29uQG5ldXN0YXIuYml6PC9hPik7IEtldmlu IE1hIEo8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5DYzo8L2I+IDxhIGhyZWY9Im1haWx0bzpj ZG5pQGlldGYub3JnIiBjbGFzcz0iIj5jZG5pQGlldGYub3JnPC9hPjsgQnJhbmRlbmJ1cmcsIFIu IChSYXkpIHZhbjxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlN1YmplY3Q6PC9iPiBGd2Q6IFtD RE5pXSBVcGRhdGUgb2YgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uPG86cCBjbGFzcz0iIj48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Sm9uLCA8 bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgY2xhc3M9IiI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5DYW4geW91IGNvbmZpcm0gdGhpcyBuZXcgcmV2IGFkZHJlc3NlcyB5 b3VyIGNvbW1lbnQgYXBwcm9wcmlhdGVseT88bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYmVsaWV2ZSB0aGUgdGV4 dCB0aGF0IHdhcyBhZGRlZCBmb3IgdGhhdCBwdXJwb3NlIGlzOjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+4oCcPG86 cCBjbGFzcz0iIj48L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4zLjEuICZuYnNwO1JlZGlyZWN0aW9uIG9mIGVuY3J5cHRlZCB0cmFmZmljPHNw YW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFuIj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xhc3M9IiI+DQombmJzcDs8c3BhbiBjbGFzcz0i YXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+Jm5ic3A7ICZuYnNwO1RoZSBSZWRpcmVjdGlvbiBJbnRl cmZhY2UgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50IG1pZ2h0IGJlIHVzZWQgdG88c3BhbiBjbGFz cz0iYXBwbGUtdGFiLXNwYW4iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS10 YWItc3BhbiI+IDwvc3Bhbj4mbmJzcDsgJm5ic3A7cmVkaXJlY3QgYSByZXF1ZXN0IHdoZXJlIHRo ZSBVc2VyIEFnZW50IHdpbGwgc3Vic2VxdWVudGx5IGF0dGVtcHQgdG88c3BhbiBjbGFzcz0iYXBw bGUtdGFiLXNwYW4iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3Bh biI+IDwvc3Bhbj4mbmJzcDsgJm5ic3A7ZXN0YWJsaXNoIGEgVExTIHNlc3Npb24gd2l0aCB0aGUg UmVkaXJlY3Rpb24gVGFyZ2V0LiAmbmJzcDtJbiBzdWNoIGEgY2FzZSw8c3BhbiBjbGFzcz0iYXBw bGUtdGFiLXNwYW4iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3Bh biI+IDwvc3Bhbj4mbmJzcDsgJm5ic3A7YW55IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0 byB3aGljaCB0aGUgVXNlciBBZ2VudCBpcyByZWRpcmVjdGVkPHNwYW4gY2xhc3M9ImFwcGxlLXRh Yi1zcGFuIj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnIgY2xhc3M9IiI+DQombmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiA8 L3NwYW4+Jm5ic3A7ICZuYnNwO25lZWRzIHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBs ZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0bzxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+ PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJy IGNsYXNzPSIiPg0KJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFuIj4gPC9zcGFuPiZu YnNwOyAmbmJzcDtwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsLiAmbmJzcDtN ZWNoYW5pc21zIHRvIGRpc3RyaWJ1dGUgdGhlPHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFuIj48 bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIg Y2xhc3M9IiI+DQombmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+Jm5i c3A7ICZuYnNwO3JlcXVpcmVkIGluZm9ybWF0aW9uIGFuZC9vciBjb25maWd1cmF0aW9uLCBzdWNo IGFzIHByaXZhdGUga2V5cywgdG88c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPjxvOnAgY2xh c3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0i Ij4NCiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+IDwvc3Bhbj4mbmJzcDsgJm5i c3A7c3Vycm9nYXRlcyBhbmQgcmVxdWVzdCByb3V0ZXJzIGluIGRDRE5zIGFyZSBvdXRzaWRlIHRo ZSBzY29wZSBvZiB0aGlzPHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFuIj48bzpwIGNsYXNzPSIi PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xhc3M9IiI+DQom bmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+Jm5ic3A7ICZuYnNwO2Rv Y3VtZW50LjxiciBjbGFzcz0iIj4NCuKAnDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0iIj4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPktldmluLDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0iIj4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5DYW4geW91IGNvbmZpcm0gdGhhdCB0aGlzIG5ldyByZXYgaXMgZnVsbHkgaW4gbGluZSB3 aXRoIGNkbWktbWVkaWEtdHlwZT88bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5PbmNlIHdlIGhhdmUgY29uZmlybWF0aW9uIGZvciB0aGVzZSB0d28g cG9pbnRzIHdlIGNhbiBwdXNoIHRoZSBkb2N1bWVudCB0byBJRVNHIHJldmlldy48bzpwIGNsYXNz PSIiPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzPG86cCBjbGFzcz0iIj48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIi PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBjbGFzcz0iIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxvOnAgY2xh c3M9IiI+PC9vOnA+PC9wPg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJl Z2luIGZvcndhcmRlZCBtZXNzYWdlOjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYg Y2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YiBjbGFzcz0iIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsi IGNsYXNzPSIiPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyIgY2xhc3M9IiI+JnF1b3Q7 QnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJheS52 YW5icmFuZGVuYnVyZ0B0bm8ubmwiIGNsYXNzPSIiPnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw8 L2E+Jmd0Ozwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyIgY2xh c3M9IiI+U3ViamVjdDogW0NETmldIFVwZGF0ZSBvZiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rp b248L3NwYW4+PC9iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7IiBjbGFz cz0iIj5EYXRlOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiIGNsYXNzPSIiPjcgT2N0b2JlciAy MDE1IDEwOjU1OjU4IENFU1Q8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L3A+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YiBjbGFzcz0iIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiIGNsYXNzPSIiPlRvOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiIGNsYXNzPSIiPiZx dW90OzxhIGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIiBjbGFzcz0iIj5jZG5pQGlldGYub3Jn PC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciIGNsYXNzPSIiPmNk bmlAaWV0Zi5vcmc8L2E+Jmd0Ozwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3A+DQo8 ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgYWxsLDxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCldlJ3ZlIHVwZGF0ZWQgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9u LiBUaGlzIHVwZGF0ZSBhZGRyZXNzZXMgYWxsIG9wZW4gaXNzdWVzLCBpbmNsdWRpbmc6PGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KLSBVcGRhdGVkIE1JTUUgdHlwZXMgdG8gYmUgaW4gbGlu ZSB3aXRoIGRyYWZ0LWlldGYtY2RuaS1tZWRpYS10eXBlczxiciBjbGFzcz0iIj4NCi0gVXBkYXRl ZCBzZWN1cml0eSBzZWN0aW9uIHRvIGJlIGluIGxpbmUgd2l0aCBvdGhlciBDRE5JIGRvY3M8YnIg Y2xhc3M9IiI+DQotIEluY2x1ZGVkIHNob3J0IGRpc2N1c3Npb24gb24gcmVkaXJlY3Rpb24gYW5k IFRMUzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClJheTxiciBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCk9u IDA3LzEwLzE1IDEwOjUyLCAmcXVvdDtDRE5pIG9uIGJlaGFsZiBvZiA8YSBocmVmPSJtYWlsdG86 aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiBjbGFzcz0iIj4NCmludGVybmV0LWRyYWZ0c0BpZXRm Lm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmci IGNsYXNzPSIiPmNkbmktYm91bmNlc0BpZXRmLm9yZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVm PSJtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiBjbGFzcz0iIj5pbnRlcm5ldC1kcmFm dHNAaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiciBjbGFzcz0iIj4NCkEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9t IHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0cyBkaXJlY3Rvcmllcy48YnIgY2xhc3M9IiI+DQpU aGlzIGRyYWZ0IGlzIGEgd29yayBpdGVtIG9mIHRoZSBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtz IEludGVyY29ubmVjdGlvbiBXb3JraW5nIEdyb3VwIG9mIHRoZSBJRVRGLjxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1RpdGxl ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOzogUmVxdWVzdCBSb3V0aW5nIFJlZGlyZWN0aW9uIEludGVyZmFjZSBmb3IgQ0ROIEludGVy Y29ubmVjdGlvbjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwO0F1dGhvcnMgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7OiBCZW4gTml2ZW4tSmVua2luczxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO1JheSB2YW4gQnJhbmRlbmJ1cmc8YnIgY2xhc3M9IiI+DQpGaWxlbmFtZSAmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6IGRyYWZ0LWlldGYtY2RuaS1y ZWRpcmVjdGlvbi0xMi50eHQ8YnIgY2xhc3M9IiI+DQpQYWdlcyAmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6IDMwPGJyIGNsYXNzPSIi Pg0KRGF0ZSAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDs6IDIwMTUtMTAtMDc8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQpBYnN0cmFjdDo8YnIgY2xhc3M9IiI+DQombmJzcDtUaGUgUmVxdWVzdCBSb3V0aW5nIEludGVy ZmFjZSBjb21wcmlzZXMgb2YgKDEpIHRoZSBhc3luY2hyb25vdXM8YnIgY2xhc3M9IiI+DQombmJz cDthZHZlcnRpc2VtZW50IG9mIGZvb3RwcmludCBhbmQgY2FwYWJpbGl0aWVzIGJ5IGEgZG93bnN0 cmVhbSBDb250ZW50PGJyIGNsYXNzPSIiPg0KJm5ic3A7RGVsaXZlcnkgTmV0d29yayAoQ0ROKSB0 aGF0IGFsbG93cyBhbiB1cHN0cmVhbSBDRE4gdG8gZGVjaWRlIHdoZXRoZXI8YnIgY2xhc3M9IiI+ DQombmJzcDt0byByZWRpcmVjdCBwYXJ0aWN1bGFyIHVzZXIgcmVxdWVzdHMgdG8gdGhhdCBkb3du c3RyZWFtIENETjsgYW5kICgyKTxiciBjbGFzcz0iIj4NCiZuYnNwO3RoZSBzeW5jaHJvbm91cyBv cGVyYXRpb24gb2YgYW4gdXBzdHJlYW0gQ0ROIHJlcXVlc3Rpbmcgd2hldGhlciBhPGJyIGNsYXNz PSIiPg0KJm5ic3A7ZG93bnN0cmVhbSBDRE4gaXMgcHJlcGFyZWQgdG8gYWNjZXB0IGEgdXNlciBy ZXF1ZXN0IGFuZCBvZiBhPGJyIGNsYXNzPSIiPg0KJm5ic3A7ZG93bnN0cmVhbSBDRE4gcmVzcG9u ZGluZyB3aXRoIGhvdyB0byBhY3R1YWxseSByZWRpcmVjdCB0aGUgdXNlcjxiciBjbGFzcz0iIj4N CiZuYnNwO3JlcXVlc3QuICZuYnNwO1RoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGludGVyZmFj ZSBmb3IgdGhlIGxhdHRlciBwYXJ0LDxiciBjbGFzcz0iIj4NCiZuYnNwO2kuZS4gdGhlIENETkkg UmVxdWVzdCBSb3V0aW5nIFJlZGlyZWN0aW9uIGludGVyZmFjZS48YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFn ZSBmb3IgdGhpcyBkcmFmdCBpczo8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24vIiBjbGFzcz0i Ij5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb24vPC9hPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZXJlJ3MgYWxzbyBhIGh0 bWxpemVkIHZlcnNpb24gYXZhaWxhYmxlIGF0OjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTIiIGNs YXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb24tMTI8L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KQSBkaWZmIGZyb20gdGhl IHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0OjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9 Imh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb24tMTIiIGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFm dC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTI8L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBv ZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbjxiciBjbGFzcz0iIj4NCnVudGls IHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgPGEgaHJlZj0i aHR0cDovL3Rvb2xzLmlldGYub3JnIiBjbGFzcz0iIj4NCnRvb2xzLmlldGYub3JnPC9hPi48YnIg Y2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxh YmxlIGJ5IGFub255bW91cyBGVFAgYXQ6PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iZnRwOi8vZnRw LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy8iIGNsYXNzPSIiPmZ0cDovL2Z0cC5pZXRmLm9yZy9p bnRlcm5ldC1kcmFmdHMvPC9hPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0KQ0RO aSBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86Q0ROaUBpZXRmLm9y ZyIgY2xhc3M9IiI+Q0ROaUBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkiIGNsYXNzPSIiPmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaTwvYT48bzpwIGNsYXNzPSIiPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZv cm1hdGlvbiB0aGF0IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUg YWRkcmVzc2VlIG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwg eW91IGFyZSByZXF1ZXN0ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVz c2FnZS4gVE5PIGFjY2VwdHMgbm8gbGlhYmlsaXR5IGZvciB0aGUNCiBjb250ZW50IG9mIHRoaXMg ZS1tYWlsLCBmb3IgdGhlIG1hbm5lciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdl IG9mIGFueSBraW5kIHJlc3VsdGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxl Y3Ryb25pYyB0cmFuc21pc3Npb24gb2YgbWVzc2FnZXMuPGJyIGNsYXNzPSIiPg0KX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnIgY2xhc3M9IiI+DQpDRE5p IG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpDRE5pQGlldGYub3Jn IiBjbGFzcz0iIj5DRE5pQGlldGYub3JnPC9hPjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaSIgY2xhc3M9IiI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jZG5pPC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_B90EBF6723954918AAE26DA1E95175C9ciscocom_-- From nobody Thu Oct 8 10:52:44 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C21881B2CCE for ; Thu, 8 Oct 2015 10:52:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.287 X-Spam-Level: X-Spam-Status: No, score=-6.287 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BI-2Coh1gMjZ for ; Thu, 8 Oct 2015 10:52:40 -0700 (PDT) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by ietfa.amsl.com (Postfix) with SMTP id 5C2F41B2CD1 for ; Thu, 8 Oct 2015 10:52:40 -0700 (PDT) Received: (qmail 79474 invoked by uid 99); 8 Oct 2015 17:52:39 -0000 Received: from mail-relay.apache.org (HELO mail-relay.apache.org) (140.211.11.15) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Oct 2015 17:52:39 +0000 Received: from mail-ig0-f170.google.com (mail-ig0-f170.google.com [209.85.213.170]) by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with ESMTPSA id 3F5081A05E9 for ; Thu, 8 Oct 2015 17:52:38 +0000 (UTC) Received: by igbkq10 with SMTP id kq10so18506195igb.0 for ; Thu, 08 Oct 2015 10:52:38 -0700 (PDT) X-Received: by 10.50.134.73 with SMTP id pi9mr6036379igb.20.1444326758000; Thu, 08 Oct 2015 10:52:38 -0700 (PDT) MIME-Version: 1.0 References: <20151007085216.27764.67262.idtracker@ietfa.amsl.com> <694AFBDE-38FA-4350-AD76-9D6F60965EFB@niven-jenkins.co.uk> In-Reply-To: <694AFBDE-38FA-4350-AD76-9D6F60965EFB@niven-jenkins.co.uk> From: Phil Sorber Date: Thu, 08 Oct 2015 17:52:28 +0000 Message-ID: To: Ben Niven-Jenkins Content-Type: multipart/alternative; boundary=047d7b2e429259af7205219b8740 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-redirection-12.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 17:52:42 -0000 --047d7b2e429259af7205219b8740 Content-Type: text/plain; charset=UTF-8 Just for clarity, I found what I was looking for in https://tools.ietf.org/html/rfc6983#section-2.2.1 (which is an anagram of RFC3986). It's really defined as a player behavior, but as far as I can tell there is currently no way to signal the client player to act in a specific way so I guess there is no point in signaling this between the uCDN and dCDN. Thanks. On Thu, Oct 8, 2015 at 1:22 AM Ben Niven-Jenkins wrote: > Hi Phil, > > On 7 Oct 2015, at 23:15, Phil Sorber wrote: > > There is a sentence in section 2 about HTTP redirection: > > > Examples of an application level redirection are HTTP 302 Redirection > and RTMP 302 Redirection. > > and then various other references to 302 redirection throughout the > document. My question is, what is the expectation for a multi-asset > exchange like segmented video where a UA is sent to a manifest and then > expected to download a series of video segments. Should the UA continually > go back to the redirector, or should it "stick" to the host it was > redirected to? > > > It depends on the type of reference. Sections 4 & 5 of RFC3986 cover this. > > > Perhaps this is out of the scope of this document? > > > Yes it is IMO. > > Ben > > > On Wed, Oct 7, 2015 at 2:52 AM wrote: > >> >> A New Internet-Draft is available from the on-line Internet-Drafts >> directories. >> This draft is a work item of the Content Delivery Networks >> Interconnection Working Group of the IETF. >> >> Title : Request Routing Redirection Interface for CDN >> Interconnection >> Authors : Ben Niven-Jenkins >> Ray van Brandenburg >> Filename : draft-ietf-cdni-redirection-12.txt >> Pages : 30 >> Date : 2015-10-07 >> >> Abstract: >> The Request Routing Interface comprises of (1) the asynchronous >> advertisement of footprint and capabilities by a downstream Content >> Delivery Network (CDN) that allows an upstream CDN to decide whether >> to redirect particular user requests to that downstream CDN; and (2) >> the synchronous operation of an upstream CDN requesting whether a >> downstream CDN is prepared to accept a user request and of a >> downstream CDN responding with how to actually redirect the user >> request. This document describes an interface for the latter part, >> i.e. the CDNI Request Routing Redirection interface. >> >> >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ >> >> There's also a htmlized version available at: >> https://tools.ietf.org/html/draft-ietf-cdni-redirection-12 >> >> A diff from the previous version is available at: >> https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-redirection-12 >> >> >> Please note that it may take a couple of minutes from the time of >> submission >> until the htmlized version and diff are available at tools.ietf.org. >> >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >> >> _______________________________________________ >> CDNi mailing list >> CDNi@ietf.org >> https://www.ietf.org/mailman/listinfo/cdni >> > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni > > > --047d7b2e429259af7205219b8740 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Just for clarity, I found what I was looking for in=C2=A0<= a href=3D"https://tools.ietf.org/html/rfc6983#section-2.2.1">https://tools.= ietf.org/html/rfc6983#section-2.2.1=C2=A0(which is an anagram of RFC398= 6). It's really defined as a player behavior, but as far as I can tell = there is currently no way to signal the client player to act in a specific = way so I guess there is no point in signaling this between the uCDN and dCD= N.

Thanks.

On Thu= , Oct 8, 2015 at 1:22 AM Ben Niven-Jenkins <ben@niven-jenkins.co.uk> wrote:
Hi Phil,

On 7 Oct 2015, at 23:15, Phil Sorber <sorber@apache.org> wrote:=

There is a sentence in section 2 about= HTTP redirection:

> Examples of an application level redirection= are HTTP 302 Redirection and RTMP 302 Redirection.

and then various other references to 302 redirecti= on throughout the document. My question is, what is the expectation for a m= ulti-asset exchange like segmented video where a UA is sent to a manifest a= nd then expected to download a series of video segments. Should the UA cont= inually go back to the redirector, or should it "stick" to the ho= st it was redirected to?

It depends on th= e type of reference. Sections 4 & 5 of RFC3986 cover this. =C2=A0
=

Perhaps this is out of t= he scope of this document?

Yes it is = IMO.

Ben
=

On Wed, Oct 7, 2015 at 2:52 AM <internet-drafts@ietf.or= g> wrote:

A New Internet-Draft is available from the on-line Internet-Drafts director= ies.
=C2=A0This draft is a work item of the Content Delivery Networks Interconne= ction Working Group of the IETF.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= Request Routing Redirection Interface for CDN Interconnection
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Authors=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: Ben = Niven-Jenkins
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Ray van Brandenburg
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-iet= f-cdni-redirection-12.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 30
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2015-10-07

Abstract:
=C2=A0 =C2=A0The Request Routing Interface comprises of (1) the asynchronou= s
=C2=A0 =C2=A0advertisement of footprint and capabilities by a downstream Co= ntent
=C2=A0 =C2=A0Delivery Network (CDN) that allows an upstream CDN to decide w= hether
=C2=A0 =C2=A0to redirect particular user requests to that downstream CDN; a= nd (2)
=C2=A0 =C2=A0the synchronous operation of an upstream CDN requesting whethe= r a
=C2=A0 =C2=A0downstream CDN is prepared to accept a user request and of a =C2=A0 =C2=A0downstream CDN responding with how to actually redirect the us= er
=C2=A0 =C2=A0request.=C2=A0 This document describes an interface for the la= tter part,
=C2=A0 =C2=A0i.e. the CDNI Request Routing Redirection interface.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-= ietf-cdni-redirection/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-cd= ni-redirection-12

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2= =3Ddraft-ietf-cdni-redirection-12


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
CDNi mailing list
CDNi@ietf.org
https://www.ietf.org/mailman/listinfo/cdni
_______________________________________________
CDNi mailing list
CDNi@ietf.org
https://= www.ietf.org/mailman/listinfo/cdni

--047d7b2e429259af7205219b8740-- From nobody Fri Oct 9 04:36:31 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E4D41B37B2; Fri, 9 Oct 2015 04:36:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UjHFIRu7qtWi; Fri, 9 Oct 2015 04:36:29 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BC2AF1B37B1; Fri, 9 Oct 2015 04:32:32 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.4.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151009113232.816.65216.idtracker@ietfa.amsl.com> Date: Fri, 09 Oct 2015 04:32:32 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-redirection-13.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2015 11:36:30 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : Request Routing Redirection Interface for CDN Interconnection Authors : Ben Niven-Jenkins Ray van Brandenburg Filename : draft-ietf-cdni-redirection-13.txt Pages : 31 Date : 2015-10-09 Abstract: The Request Routing Interface comprises of (1) the asynchronous advertisement of footprint and capabilities by a downstream Content Delivery Network (CDN) that allows an upstream CDN to decide whether to redirect particular user requests to that downstream CDN; and (2) the synchronous operation of an upstream CDN requesting whether a downstream CDN is prepared to accept a user request and of a downstream CDN responding with how to actually redirect the user request. This document describes an interface for the latter part, i.e. the CDNI Request Routing Redirection interface. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-redirection-13 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-redirection-13 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Oct 9 04:37:19 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 314241B37B1 for ; Fri, 9 Oct 2015 04:37:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.115 X-Spam-Level: X-Spam-Status: No, score=-2.115 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aJ09n5ZOBhFf for ; Fri, 9 Oct 2015 04:37:14 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44C3D1B37C2 for ; Fri, 9 Oct 2015 04:32:46 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.17,657,1437429600"; d="scan'208,217";a="8213021" Received: from exc-cashub01.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.220]) by mailhost1b.tno.nl with ESMTP; 09 Oct 2015 13:32:44 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB01.tsn.tno.nl ([fe80::b855:be6:1aa8:4d0f%13]) with mapi id 14.03.0248.002; Fri, 9 Oct 2015 13:32:43 +0200 From: "Brandenburg, R. (Ray) van" To: "Francois Le Faucheur (flefauch)" , Ma Kevin Thread-Topic: [CDNi] Update of draft-ietf-cdni-redirection Thread-Index: AQHRAN38q2luPuQAo0m62xCEZvIS1p5g5uswgAC5f4CAAWpFAA== Date: Fri, 9 Oct 2015 11:32:42 +0000 Message-ID: <1B7F7CC9-93EB-4E83-A1CF-DE6C9123A7F3@tno.nl> References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> In-Reply-To: Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.150923 x-originating-ip: [134.221.225.191] Content-Type: multipart/alternative; boundary="_000_1B7F7CC993EB4E83A1CFDE6C9123A7F3tnonl_" MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Update of draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2015 11:37:18 -0000 --_000_1B7F7CC993EB4E83A1CFDE6C9123A7F3tnonl_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIEtldmluLCBmb3IgY2hlY2tpbmcgYXMgd2VsbCBhcyBwcm92aWRpbmcgdGhlIGltcHJv dmVkIHRleHQhDQoNCkkndmUganVzdCB1cGxvYWRlZCAtMTMgdGhhdCBpbmNsdWRlcyBLZXZpbidz IHByb3Bvc2VkIHRleHQuDQoNClJheQ0KDQpGcm9tOiAiZmxlZmF1Y2hAY2lzY28uY29tPG1haWx0 bzpmbGVmYXVjaEBjaXNjby5jb20+Ig0KRGF0ZTogVGh1cnNkYXkgOCBPY3RvYmVyIDIwMTUgYXQg MTA6NTYNClRvOiAia2V2aW4uai5tYUBlcmljc3Nvbi5jb208bWFpbHRvOmtldmluLmoubWFAZXJp Y3Nzb24uY29tPiIsIFJheSB2YW4gQnJhbmRlbmJ1cmcNCkNjOiAiY2RuaUBpZXRmLm9yZzxtYWls dG86Y2RuaUBpZXRmLm9yZz4iDQpTdWJqZWN0OiBSZTogW0NETmldIFVwZGF0ZSBvZiBkcmFmdC1p ZXRmLWNkbmktcmVkaXJlY3Rpb24NCg0KVGhhbmtzIEtldmluLg0KDQpSYXksIGNhbiB5b3UgcmVm bGVjdCB0aGF0ID8NCg0KT24gOCBPY3QgMjAxNSwgYXQgMDU6MDksIEtldmluIE1hIEogPGtldmlu LmoubWFAZXJpY3Nzb24uY29tPG1haWx0bzprZXZpbi5qLm1hQGVyaWNzc29uLmNvbT4+IHdyb3Rl Og0KDQpIaSBGcmFuY29pcy9SYXksDQoNCiAgRm9yIGVhY2ggb2YgdGhlIHBheWxvYWQgdHlwZSBw YXJhbWV0ZXJzLCB0aGUgc3BlYyBpcyBzdXBwb3NlZCB0byBkZWZpbmUgYSBwdXJwb3NlLCBpbnRl cmZhY2UsIGFuZCBlbmNvZGluZy4gIEp1c3QgdG8gYmUgdG90YWxseSBleHBsaWNpdCwgSSd2ZSBi ZWVuIGFkZGluZyBzbWFsbCBibHVyYnMgZm9yIGVhY2gsIGUuZy4sIHN1YnNlY3Rpb24gdW5kZXIg Ni4xOg0KDQogICAgICAgIDxzZWN0aW9uIHRpdGxlPSJDRE5JIFJJIFJlZGlyZWN0aW9uIFJlcXVl c3QgUGF5bG9hZCBUeXBlIj4NCiAgICAgICAgICA8dD5QdXJwb3NlOiBUaGUgcHVycG9zZSBvZiB0 aGlzIHBheWxvYWQgdHlwZSBpcyB0byBkaXN0aW5ndWlzaCBSSSByZXF1ZXN0IG1lc3NhZ2VzLjwv dD4NCiAgICAgICAgICA8dD5JbnRlcmZhY2U6IFJJPC90Pg0KICAgICAgICAgIDx0PkVuY29kaW5n OiBzZWUgPHhyZWYgdGFyZ2V0PSJhbmNob3JzIGZvciBTZWN0aW9ucyA0LjQuMSBhbmQgNC41LjEi Lz48L3Q+DQogICAgICAgIDwvc2VjdGlvbj4NCiAgICAgICAgPHNlY3Rpb24gdGl0bGU9IkNETkkg UkkgUmVkaXJlY3Rpb24gUmVzcG9uc2UgUGF5bG9hZCBUeXBlIj4NCiAgICAgICAgICA8dD5QdXJw b3NlOiBUaGUgcHVycG9zZSBvZiB0aGlzIHBheWxvYWQgdHlwZSBpcyB0byBkaXN0aW5ndWlzaCBS SSByZXNwb25zZSBtZXNzYWdlcy48L3Q+DQogICAgICAgICAgPHQ+SW50ZXJmYWNlOiBSSTwvdD4N CiAgICAgICAgICA8dD5FbmNvZGluZzogc2VlIDx4cmVmIHRhcmdldD0iYW5jaG9ycyBmb3IgU2Vj dGlvbnMgNC40LjIgYW5kIDQuNS4yIi8+PC90Pg0KICAgICAgICA8L3NlY3Rpb24+DQoNCiAgTWln aHQgYWxzbyB3YW50IHRvIGFkZCBhIG5vdGUgdG8gdGhlIFJGQyBFZGl0b3IgaW4gc2VjdGlvbiA2 LjEgdG8gY2hhbmdlIFJGQ3RoaXMgdG8gdGhlIHB1Ymxpc2hlZCBSRkMgbnVtYmVyLg0KDQp0aGFu eC4NCg0KLS0gIEtldmluIEouIE1hDQoNCkZyb206IEZyYW5jb2lzIExlIEZhdWNoZXVyIChmbGVm YXVjaCkgW21haWx0bzpmbGVmYXVjaEBjaXNjby5jb21dDQpTZW50OiBXZWRuZXNkYXksIE9jdG9i ZXIgMDcsIDIwMTUgODowNCBBTQ0KVG86IFBldGVyc29uLCBKb24gPGpvbi5wZXRlcnNvbkBuZXVz dGFyLmJpejxtYWlsdG86am9uLnBldGVyc29uQG5ldXN0YXIuYml6Pj4gKGpvbi5wZXRlcnNvbkBu ZXVzdGFyLmJpejxtYWlsdG86am9uLnBldGVyc29uQG5ldXN0YXIuYml6Pik7IEtldmluIE1hIEoN CkNjOiBjZG5pQGlldGYub3JnPG1haWx0bzpjZG5pQGlldGYub3JnPjsgQnJhbmRlbmJ1cmcsIFIu IChSYXkpIHZhbg0KU3ViamVjdDogRndkOiBbQ0ROaV0gVXBkYXRlIG9mIGRyYWZ0LWlldGYtY2Ru aS1yZWRpcmVjdGlvbg0KDQpKb24sDQoNCkNhbiB5b3UgY29uZmlybSB0aGlzIG5ldyByZXYgYWRk cmVzc2VzIHlvdXIgY29tbWVudCBhcHByb3ByaWF0ZWx5Pw0KSSBiZWxpZXZlIHRoZSB0ZXh0IHRo YXQgd2FzIGFkZGVkIGZvciB0aGF0IHB1cnBvc2UgaXM6DQrigJwNCjMuMS4gIFJlZGlyZWN0aW9u IG9mIGVuY3J5cHRlZCB0cmFmZmljDQoNCiAgICAgVGhlIFJlZGlyZWN0aW9uIEludGVyZmFjZSBk ZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgbWlnaHQgYmUgdXNlZCB0bw0KDQogICAgIHJlZGlyZWN0 IGEgcmVxdWVzdCB3aGVyZSB0aGUgVXNlciBBZ2VudCB3aWxsIHN1YnNlcXVlbnRseSBhdHRlbXB0 IHRvDQoNCiAgICAgZXN0YWJsaXNoIGEgVExTIHNlc3Npb24gd2l0aCB0aGUgUmVkaXJlY3Rpb24g VGFyZ2V0LiAgSW4gc3VjaCBhIGNhc2UsDQoNCiAgICAgYW55IHN1cnJvZ2F0ZSBvciByZXF1ZXN0 IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2VudCBpcyByZWRpcmVjdGVkDQoNCiAgICAgbmVl ZHMgdG8gYmUgYWJsZSB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2Ug YW5kIHRvDQoNCiAgICAgcGVyZm9ybSBlbmNyeXB0aW9uIG9mIHRoZSBUTFMgY2hhbm5lbC4gIE1l Y2hhbmlzbXMgdG8gZGlzdHJpYnV0ZSB0aGUNCg0KICAgICByZXF1aXJlZCBpbmZvcm1hdGlvbiBh bmQvb3IgY29uZmlndXJhdGlvbiwgc3VjaCBhcyBwcml2YXRlIGtleXMsIHRvDQoNCiAgICAgc3Vy cm9nYXRlcyBhbmQgcmVxdWVzdCByb3V0ZXJzIGluIGRDRE5zIGFyZSBvdXRzaWRlIHRoZSBzY29w ZSBvZiB0aGlzDQoNCiAgICAgZG9jdW1lbnQuDQrigJwNCg0KDQpLZXZpbiwNCg0KQ2FuIHlvdSBj b25maXJtIHRoYXQgdGhpcyBuZXcgcmV2IGlzIGZ1bGx5IGluIGxpbmUgd2l0aCBjZG1pLW1lZGlh LXR5cGU/DQoNCg0KT25jZSB3ZSBoYXZlIGNvbmZpcm1hdGlvbiBmb3IgdGhlc2UgdHdvIHBvaW50 cyB3ZSBjYW4gcHVzaCB0aGUgZG9jdW1lbnQgdG8gSUVTRyByZXZpZXcuDQoNClRoYW5rcw0KDQoN Cg0KDQpCZWdpbiBmb3J3YXJkZWQgbWVzc2FnZToNCg0KRnJvbTogIkJyYW5kZW5idXJnLCBSLiAo UmF5KSB2YW4iIDxyYXkudmFuYnJhbmRlbmJ1cmdAdG5vLm5sPG1haWx0bzpyYXkudmFuYnJhbmRl bmJ1cmdAdG5vLm5sPj4NClN1YmplY3Q6IFtDRE5pXSBVcGRhdGUgb2YgZHJhZnQtaWV0Zi1jZG5p LXJlZGlyZWN0aW9uDQpEYXRlOiA3IE9jdG9iZXIgMjAxNSAxMDo1NTo1OCBDRVNUDQpUbzogImNk bmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5vcmc+IiA8Y2RuaUBpZXRmLm9yZzxtYWlsdG86 Y2RuaUBpZXRmLm9yZz4+DQoNCkhpIGFsbCwNCg0KV2UndmUgdXBkYXRlZCBkcmFmdC1pZXRmLWNk bmktcmVkaXJlY3Rpb24uIFRoaXMgdXBkYXRlIGFkZHJlc3NlcyBhbGwgb3BlbiBpc3N1ZXMsIGlu Y2x1ZGluZzoNCg0KLSBVcGRhdGVkIE1JTUUgdHlwZXMgdG8gYmUgaW4gbGluZSB3aXRoIGRyYWZ0 LWlldGYtY2RuaS1tZWRpYS10eXBlcw0KLSBVcGRhdGVkIHNlY3VyaXR5IHNlY3Rpb24gdG8gYmUg aW4gbGluZSB3aXRoIG90aGVyIENETkkgZG9jcw0KLSBJbmNsdWRlZCBzaG9ydCBkaXNjdXNzaW9u IG9uIHJlZGlyZWN0aW9uIGFuZCBUTFMNCg0KUmF5DQoNCg0KDQoNCk9uIDA3LzEwLzE1IDEwOjUy LCAiQ0ROaSBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPG1haWx0bzppbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmc+IiA8Y2RuaS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpjZG5p LWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8 bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4+IHdyb3RlOg0KDQoNCg0KQSBOZXcgSW50 ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJhZnRz IGRpcmVjdG9yaWVzLg0KVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgQ29udGVudCBE ZWxpdmVyeSBOZXR3b3JrcyBJbnRlcmNvbm5lY3Rpb24gV29ya2luZyBHcm91cCBvZiB0aGUgSUVU Ri4NCg0KICAgICAgVGl0bGUgICAgICAgICAgIDogUmVxdWVzdCBSb3V0aW5nIFJlZGlyZWN0aW9u IEludGVyZmFjZSBmb3IgQ0ROIEludGVyY29ubmVjdGlvbg0KICAgICAgQXV0aG9ycyAgICAgICAg IDogQmVuIE5pdmVuLUplbmtpbnMNCiAgICAgICAgICAgICAgICAgICAgICAgIFJheSB2YW4gQnJh bmRlbmJ1cmcNCkZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0x Mi50eHQNClBhZ2VzICAgICAgICAgICA6IDMwDQpEYXRlICAgICAgICAgICAgOiAyMDE1LTEwLTA3 DQoNCkFic3RyYWN0Og0KIFRoZSBSZXF1ZXN0IFJvdXRpbmcgSW50ZXJmYWNlIGNvbXByaXNlcyBv ZiAoMSkgdGhlIGFzeW5jaHJvbm91cw0KIGFkdmVydGlzZW1lbnQgb2YgZm9vdHByaW50IGFuZCBj YXBhYmlsaXRpZXMgYnkgYSBkb3duc3RyZWFtIENvbnRlbnQNCiBEZWxpdmVyeSBOZXR3b3JrIChD RE4pIHRoYXQgYWxsb3dzIGFuIHVwc3RyZWFtIENETiB0byBkZWNpZGUgd2hldGhlcg0KIHRvIHJl ZGlyZWN0IHBhcnRpY3VsYXIgdXNlciByZXF1ZXN0cyB0byB0aGF0IGRvd25zdHJlYW0gQ0ROOyBh bmQgKDIpDQogdGhlIHN5bmNocm9ub3VzIG9wZXJhdGlvbiBvZiBhbiB1cHN0cmVhbSBDRE4gcmVx dWVzdGluZyB3aGV0aGVyIGENCiBkb3duc3RyZWFtIENETiBpcyBwcmVwYXJlZCB0byBhY2NlcHQg YSB1c2VyIHJlcXVlc3QgYW5kIG9mIGENCiBkb3duc3RyZWFtIENETiByZXNwb25kaW5nIHdpdGgg aG93IHRvIGFjdHVhbGx5IHJlZGlyZWN0IHRoZSB1c2VyDQogcmVxdWVzdC4gIFRoaXMgZG9jdW1l bnQgZGVzY3JpYmVzIGFuIGludGVyZmFjZSBmb3IgdGhlIGxhdHRlciBwYXJ0LA0KIGkuZS4gdGhl IENETkkgUmVxdWVzdCBSb3V0aW5nIFJlZGlyZWN0aW9uIGludGVyZmFjZS4NCg0KDQpUaGUgSUVU RiBkYXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCmh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi8NCg0KVGhl cmUncyBhbHNvIGEgaHRtbGl6ZWQgdmVyc2lvbiBhdmFpbGFibGUgYXQ6DQpodHRwczovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTEyDQoNCkEgZGlmZiBm cm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBhdDoNCmh0dHBzOi8vd3d3Lmll dGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTINCg0KDQpQ bGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUg dGltZSBvZiBzdWJtaXNzaW9uDQp1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBh cmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnPGh0dHA6Ly90b29scy5pZXRmLm9yZz4uDQoN CkludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoN CmZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvDQoNCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpDRE5pIG1haWxpbmcgbGlzdA0KQ0ROaUBp ZXRmLm9yZzxtYWlsdG86Q0ROaUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vY2RuaQ0KVGhpcyBtZXNzYWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRo YXQgaXMgbm90IGludGVuZGVkIGZvciB5b3UuIElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUg b3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBzZW50IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJl cXVlc3RlZCB0byBpbmZvcm0gdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8g YWNjZXB0cyBubyBsaWFiaWxpdHkgZm9yIHRoZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3Ig dGhlIG1hbm5lciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5k IHJlc3VsdGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFu c21pc3Npb24gb2YgbWVzc2FnZXMuDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KQ0ROaSBtYWlsaW5nIGxpc3QNCkNETmlAaWV0Zi5vcmc8bWFpbHRvOkNE TmlAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkN Cg0KDQo= --_000_1B7F7CC993EB4E83A1CFDE6C9123A7F3tnonl_ Content-Type: text/html; charset="utf-8" Content-ID: <497009BE07AC214686E5D4A7A8B94DDF@tno.nl> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj4NCjxkaXY+VGhh bmtzIEtldmluLCBmb3IgY2hlY2tpbmcgYXMgd2VsbCBhcyBwcm92aWRpbmcgdGhlIGltcHJvdmVk IHRleHQhPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5JJ3ZlIGp1c3QgdXBsb2FkZWQg LTEzIHRoYXQgaW5jbHVkZXMgS2V2aW4ncyBwcm9wb3NlZCB0ZXh0LjwvZGl2Pg0KPGRpdj48YnI+ DQo8L2Rpdj4NCjxkaXY+UmF5PC9kaXY+DQo8ZGl2Pg0KPGRpdiBpZD0iTUFDX09VVExPT0tfU0lH TkFUVVJFIj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPHNwYW4g aWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9OIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGli cmk7IGZvbnQtc2l6ZToxMnB0OyB0ZXh0LWFsaWduOmxlZnQ7IGNvbG9yOmJsYWNrOyBCT1JERVIt Qk9UVE9NOiBtZWRpdW0gbm9uZTsgQk9SREVSLUxFRlQ6IG1lZGl1bSBub25lOyBQQURESU5HLUJP VFRPTTogMGluOyBQQURESU5HLUxFRlQ6IDBpbjsgUEFERElORy1SSUdIVDogMGluOyBCT1JERVIt VE9QOiAjYjVjNGRmIDFwdCBzb2xpZDsgQk9SREVSLVJJR0hUOiBtZWRpdW0gbm9uZTsgUEFERElO Ry1UT1A6IDNwdCI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RnJvbTogPC9zcGFu PiZxdW90OzxhIGhyZWY9Im1haWx0bzpmbGVmYXVjaEBjaXNjby5jb20iPmZsZWZhdWNoQGNpc2Nv LmNvbTwvYT4mcXVvdDs8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RGF0ZTog PC9zcGFuPlRodXJzZGF5IDggT2N0b2JlciAyMDE1IGF0IDEwOjU2PGJyPg0KPHNwYW4gc3R5bGU9 ImZvbnQtd2VpZ2h0OmJvbGQiPlRvOiA8L3NwYW4+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmtldmlu LmoubWFAZXJpY3Nzb24uY29tIj5rZXZpbi5qLm1hQGVyaWNzc29uLmNvbTwvYT4mcXVvdDssIFJh eSB2YW4gQnJhbmRlbmJ1cmc8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+Q2M6 IDwvc3Bhbj4mcXVvdDs8YSBocmVmPSJtYWlsdG86Y2RuaUBpZXRmLm9yZyI+Y2RuaUBpZXRmLm9y ZzwvYT4mcXVvdDs8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+U3ViamVjdDog PC9zcGFuPlJlOiBbQ0ROaV0gVXBkYXRlIG9mIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbjxi cj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KVGhhbmtzIEtldmluLg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+UmF5LCBjYW4geW91 IHJlZmxlY3QgdGhhdCA/PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXY+ DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gOCBP Y3QgMjAxNSwgYXQgMDU6MDksIEtldmluIE1hIEogJmx0OzxhIGhyZWY9Im1haWx0bzprZXZpbi5q Lm1hQGVyaWNzc29uLmNvbSIgY2xhc3M9IiI+a2V2aW4uai5tYUBlcmljc3Nvbi5jb208L2E+Jmd0 OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8 ZGl2IGNsYXNzPSIiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQg V29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSIgY2xhc3M9IiI+DQo8c3R5bGUgY2xhc3M9IiI+PCEt LQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpIZWx2 ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIg MiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0x OjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05v cm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVz IE5ldyBSb21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1h cmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglm b250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5hcHBsZS10YWItc3Bhbg0K CXttc28tc3R5bGUtbmFtZTphcHBsZS10YWItc3Bhbjt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0K CXttc28tc3R5bGUtbmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFo b21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjp3aW5k b3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEu MGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24x DQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94 bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2 OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFw ZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjxkaXYgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUi IHZsaW5rPSJwdXJwbGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj5IaSBGcmFuY29pcy9SYXksPG86 cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyIgY2xhc3M9IiI+Jm5ic3A7IEZvciBlYWNoIG9mIHRoZSBwYXlsb2FkIHR5cGUgcGFyYW1l dGVycywgdGhlIHNwZWMgaXMgc3VwcG9zZWQgdG8gZGVmaW5lIGEgcHVycG9zZSwgaW50ZXJmYWNl LCBhbmQgZW5jb2RpbmcuJm5ic3A7IEp1c3QgdG8gYmUgdG90YWxseSBleHBsaWNpdCwgSSd2ZSBi ZWVuIGFkZGluZyBzbWFsbCBibHVyYnMNCiBmb3IgZWFjaCwgZS5nLiwgc3Vic2VjdGlvbiB1bmRl ciA2LjE6PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICZsdDtzZWN0aW9uIHRpdGxlPSZxdW90O0NETkkgUkkgUmVkaXJlY3Rpb24gUmVx dWVzdCBQYXlsb2FkIFR5cGUmcXVvdDsmZ3Q7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7dCZndDtQdXJwb3Nl OiBUaGUgcHVycG9zZSBvZiB0aGlzIHBheWxvYWQgdHlwZSBpcyB0byBkaXN0aW5ndWlzaCBSSSBy ZXF1ZXN0IG1lc3NhZ2VzLiZsdDsvdCZndDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDt0Jmd0O0ludGVyZmFj ZTogUkkmbHQ7L3QmZ3Q7PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7dCZndDtFbmNvZGluZzogc2VlICZsdDt4 cmVmIHRhcmdldD0mcXVvdDthbmNob3JzIGZvciBTZWN0aW9ucyA0LjQuMSBhbmQgNC41LjEmcXVv dDsvJmd0OyZsdDsvdCZndDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDsvc2VjdGlvbiZndDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDtzZWN0aW9uIHRpdGxlPSZx dW90O0NETkkgUkkgUmVkaXJlY3Rpb24gUmVzcG9uc2UgUGF5bG9hZCBUeXBlJnF1b3Q7Jmd0Ozxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJmx0O3QmZ3Q7UHVycG9zZTogVGhlIHB1cnBvc2Ugb2YgdGhpcyBwYXlsb2Fk IHR5cGUgaXMgdG8gZGlzdGluZ3Vpc2ggUkkgcmVzcG9uc2UgbWVzc2FnZXMuJmx0Oy90Jmd0Ozxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJmx0O3QmZ3Q7SW50ZXJmYWNlOiBSSSZsdDsvdCZndDs8bzpwIGNsYXNzPSIi PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9 IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICZsdDt0Jmd0O0VuY29kaW5nOiBzZWUgJmx0O3hyZWYgdGFyZ2V0PSZxdW90O2FuY2hvcnMgZm9y IFNlY3Rpb25zIDQuNC4yIGFuZCA0LjUuMiZxdW90Oy8mZ3Q7Jmx0Oy90Jmd0OzxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7IiBjbGFz cz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0Oy9zZWN0 aW9uJmd0OzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOyBNaWdodCBhbHNvIHdhbnQgdG8gYWRkIGEg bm90ZSB0byB0aGUgUkZDIEVkaXRvciBpbiBzZWN0aW9uIDYuMSB0byBjaGFuZ2UgUkZDdGhpcyB0 byB0aGUgcHVibGlzaGVkIFJGQyBudW1iZXIuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+dGhhbnguPG86cCBj bGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi IGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyIgY2xhc3M9IiI+LS0mbmJzcDsgS2V2aW4gSi4gTWE8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyIgY2xhc3M9IiI+Jm5ic3A7PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUg MS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iIGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6 IFRhaG9tYSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHls ZT0iZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+IEZyYW5jb2lzIExlIEZhdWNoZXVyIChmbGVmYXVjaCkgWzxhIGhyZWY9Im1haWx0bzpm bGVmYXVjaEBjaXNjby5jb20iIGNsYXNzPSIiPm1haWx0bzpmbGVmYXVjaEBjaXNjby5jb208L2E+ XQ0KPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+U2VudDo8L2I+IFdlZG5lc2RheSwgT2N0b2Jl ciAwNywgMjAxNSA4OjA0IEFNPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86PC9iPiBQZXRl cnNvbiwgSm9uICZsdDs8YSBocmVmPSJtYWlsdG86am9uLnBldGVyc29uQG5ldXN0YXIuYml6IiBj bGFzcz0iIj5qb24ucGV0ZXJzb25AbmV1c3Rhci5iaXo8L2E+Jmd0OyAoPGEgaHJlZj0ibWFpbHRv Ompvbi5wZXRlcnNvbkBuZXVzdGFyLmJpeiIgY2xhc3M9IiI+am9uLnBldGVyc29uQG5ldXN0YXIu Yml6PC9hPik7IEtldmluIE1hIEo8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5DYzo8L2I+IDxh IGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIiBjbGFzcz0iIj5jZG5pQGlldGYub3JnPC9hPjsg QnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbjxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlN1Ympl Y3Q6PC9iPiBGd2Q6IFtDRE5pXSBVcGRhdGUgb2YgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9u PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Sm9uLCA8bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjxkaXYgY2xhc3M9IiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYg Y2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DYW4geW91IGNvbmZpcm0gdGhpcyBuZXcg cmV2IGFkZHJlc3NlcyB5b3VyIGNvbW1lbnQgYXBwcm9wcmlhdGVseT88bzpwIGNsYXNzPSIiPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkg YmVsaWV2ZSB0aGUgdGV4dCB0aGF0IHdhcyBhZGRlZCBmb3IgdGhhdCBwdXJwb3NlIGlzOjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+4oCcPG86cCBjbGFzcz0iIj48L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4zLjEuICZuYnNwO1JlZGlyZWN0aW9uIG9mIGVuY3J5 cHRlZCB0cmFmZmljPHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFuIj48bzpwIGNsYXNzPSIiPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xhc3M9IiI+DQombmJz cDs8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+Jm5ic3A7ICZuYnNwO1RoZSBS ZWRpcmVjdGlvbiBJbnRlcmZhY2UgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50IG1pZ2h0IGJlIHVz ZWQgdG88c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFu IGNsYXNzPSJhcHBsZS10YWItc3BhbiI+IDwvc3Bhbj4mbmJzcDsgJm5ic3A7cmVkaXJlY3QgYSBy ZXF1ZXN0IHdoZXJlIHRoZSBVc2VyIEFnZW50IHdpbGwgc3Vic2VxdWVudGx5IGF0dGVtcHQgdG88 c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFuIGNsYXNz PSJhcHBsZS10YWItc3BhbiI+IDwvc3Bhbj4mbmJzcDsgJm5ic3A7ZXN0YWJsaXNoIGEgVExTIHNl c3Npb24gd2l0aCB0aGUgUmVkaXJlY3Rpb24gVGFyZ2V0LiAmbmJzcDtJbiBzdWNoIGEgY2FzZSw8 c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFuIGNsYXNz PSJhcHBsZS10YWItc3BhbiI+IDwvc3Bhbj4mbmJzcDsgJm5ic3A7YW55IHN1cnJvZ2F0ZSBvciBy ZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2VudCBpcyByZWRpcmVjdGVkPHNwYW4g Y2xhc3M9ImFwcGxlLXRhYi1zcGFuIj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xhc3M9IiI+DQombmJzcDs8c3BhbiBjbGFzcz0iYXBw bGUtdGFiLXNwYW4iPiA8L3NwYW4+Jm5ic3A7ICZuYnNwO25lZWRzIHRvIGJlIGFibGUgdG8gc3Vj Y2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0bzxzcGFuIGNsYXNzPSJh cHBsZS10YWItc3BhbiI+PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGJyIGNsYXNzPSIiPg0KJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1z cGFuIj4gPC9zcGFuPiZuYnNwOyAmbmJzcDtwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBj aGFubmVsLiAmbmJzcDtNZWNoYW5pc21zIHRvIGRpc3RyaWJ1dGUgdGhlPHNwYW4gY2xhc3M9ImFw cGxlLXRhYi1zcGFuIj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48YnIgY2xhc3M9IiI+DQombmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNw YW4iPiA8L3NwYW4+Jm5ic3A7ICZuYnNwO3JlcXVpcmVkIGluZm9ybWF0aW9uIGFuZC9vciBjb25m aWd1cmF0aW9uLCBzdWNoIGFzIHByaXZhdGUga2V5cywgdG88c3BhbiBjbGFzcz0iYXBwbGUtdGFi LXNwYW4iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiciBjbGFzcz0iIj4NCiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+IDwv c3Bhbj4mbmJzcDsgJm5ic3A7c3Vycm9nYXRlcyBhbmQgcmVxdWVzdCByb3V0ZXJzIGluIGRDRE5z IGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzPHNwYW4gY2xhc3M9ImFwcGxlLXRhYi1zcGFu Ij48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 YnIgY2xhc3M9IiI+DQombmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtdGFiLXNwYW4iPiA8L3NwYW4+ Jm5ic3A7ICZuYnNwO2RvY3VtZW50LjxiciBjbGFzcz0iIj4NCuKAnDxvOnAgY2xhc3M9IiI+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPktldmluLDxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5DYW4geW91IGNvbmZpcm0gdGhhdCB0aGlzIG5ldyByZXYgaXMg ZnVsbHkgaW4gbGluZSB3aXRoIGNkbWktbWVkaWEtdHlwZT88bzpwIGNsYXNzPSIiPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnAgY2xh c3M9IiI+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbmNlIHdlIGhhdmUgY29uZmlybWF0aW9u IGZvciB0aGVzZSB0d28gcG9pbnRzIHdlIGNhbiBwdXNoIHRoZSBkb2N1bWVudCB0byBJRVNHIHJl dmlldy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzPG86cCBjbGFzcz0i Ij48L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9wPg0KPGRp diBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wPg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkJlZ2luIGZvcndhcmRlZCBtZXNzYWdlOjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwv bzpwPjwvcD4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YiBjbGFzcz0i Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNh LCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+JnF1b3Q7QnJhbmRlbmJ1cmcsIFIuIChSYXkpIHZhbiZx dW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmwiIGNsYXNz PSIiPnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw8L2E+Jmd0Ozwvc3Bhbj48bzpwIGNsYXNzPSIi PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNl cmlmOyIgY2xhc3M9IiI+U3ViamVjdDogW0NETmldIFVwZGF0ZSBvZiBkcmFmdC1pZXRmLWNkbmkt cmVkaXJlY3Rpb248L3NwYW4+PC9iPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGIgY2xhc3M9IiI+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj5EYXRlOg0K PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPjcgT2N0b2JlciAyMDE1IDEwOjU1OjU4IENFU1Q8L3NwYW4+PG86cCBjbGFz cz0iIj48L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPlRvOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPiZxdW90OzxhIGhyZWY9Im1haWx0 bzpjZG5pQGlldGYub3JnIiBjbGFzcz0iIj5jZG5pQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEg aHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciIGNsYXNzPSIiPmNkbmlAaWV0Zi5vcmc8L2E+Jmd0 Ozwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3A+DQo8ZGl2IGNsYXNzPSIiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SGkgYWxsLDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCldl J3ZlIHVwZGF0ZWQgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLiBUaGlzIHVwZGF0ZSBhZGRy ZXNzZXMgYWxsIG9wZW4gaXNzdWVzLCBpbmNsdWRpbmc6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KLSBVcGRhdGVkIE1JTUUgdHlwZXMgdG8gYmUgaW4gbGluZSB3aXRoIGRyYWZ0LWlldGYt Y2RuaS1tZWRpYS10eXBlczxiciBjbGFzcz0iIj4NCi0gVXBkYXRlZCBzZWN1cml0eSBzZWN0aW9u IHRvIGJlIGluIGxpbmUgd2l0aCBvdGhlciBDRE5JIGRvY3M8YnIgY2xhc3M9IiI+DQotIEluY2x1 ZGVkIHNob3J0IGRpc2N1c3Npb24gb24gcmVkaXJlY3Rpb24gYW5kIFRMUzxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NClJheTxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCk9uIDA3LzEwLzE1IDEwOjUyLCAm cXVvdDtDRE5pIG9uIGJlaGFsZiBvZiA8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGll dGYub3JnIiBjbGFzcz0iIj4NCmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0 OzxhIGhyZWY9Im1haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmciIGNsYXNzPSIiPmNkbmktYm91 bmNlc0BpZXRmLm9yZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQt ZHJhZnRzQGlldGYub3JnIiBjbGFzcz0iIj5pbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8L2E+Jmd0 OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8bzpw IGNsYXNzPSIiPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiciBjbGFzcz0iIj4N CkEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVy bmV0LURyYWZ0cyBkaXJlY3Rvcmllcy48YnIgY2xhc3M9IiI+DQpUaGlzIGRyYWZ0IGlzIGEgd29y ayBpdGVtIG9mIHRoZSBDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVyY29ubmVjdGlvbiBX b3JraW5nIEdyb3VwIG9mIHRoZSBJRVRGLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1RpdGxlICZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzogUmVxdWVzdCBSb3V0 aW5nIFJlZGlyZWN0aW9uIEludGVyZmFjZSBmb3IgQ0ROIEludGVyY29ubmVjdGlvbjxiciBjbGFz cz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO0F1dGhvcnMgJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7OiBCZW4gTml2ZW4tSmVu a2luczxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1JheSB2YW4g QnJhbmRlbmJ1cmc8YnIgY2xhc3M9IiI+DQpGaWxlbmFtZSAmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDs6IGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xMi50eHQ8 YnIgY2xhc3M9IiI+DQpQYWdlcyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6IDMwPGJyIGNsYXNzPSIiPg0KRGF0ZSAmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs6 IDIwMTUtMTAtMDc8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpBYnN0cmFjdDo8YnIgY2xh c3M9IiI+DQombmJzcDtUaGUgUmVxdWVzdCBSb3V0aW5nIEludGVyZmFjZSBjb21wcmlzZXMgb2Yg KDEpIHRoZSBhc3luY2hyb25vdXM8YnIgY2xhc3M9IiI+DQombmJzcDthZHZlcnRpc2VtZW50IG9m IGZvb3RwcmludCBhbmQgY2FwYWJpbGl0aWVzIGJ5IGEgZG93bnN0cmVhbSBDb250ZW50PGJyIGNs YXNzPSIiPg0KJm5ic3A7RGVsaXZlcnkgTmV0d29yayAoQ0ROKSB0aGF0IGFsbG93cyBhbiB1cHN0 cmVhbSBDRE4gdG8gZGVjaWRlIHdoZXRoZXI8YnIgY2xhc3M9IiI+DQombmJzcDt0byByZWRpcmVj dCBwYXJ0aWN1bGFyIHVzZXIgcmVxdWVzdHMgdG8gdGhhdCBkb3duc3RyZWFtIENETjsgYW5kICgy KTxiciBjbGFzcz0iIj4NCiZuYnNwO3RoZSBzeW5jaHJvbm91cyBvcGVyYXRpb24gb2YgYW4gdXBz dHJlYW0gQ0ROIHJlcXVlc3Rpbmcgd2hldGhlciBhPGJyIGNsYXNzPSIiPg0KJm5ic3A7ZG93bnN0 cmVhbSBDRE4gaXMgcHJlcGFyZWQgdG8gYWNjZXB0IGEgdXNlciByZXF1ZXN0IGFuZCBvZiBhPGJy IGNsYXNzPSIiPg0KJm5ic3A7ZG93bnN0cmVhbSBDRE4gcmVzcG9uZGluZyB3aXRoIGhvdyB0byBh Y3R1YWxseSByZWRpcmVjdCB0aGUgdXNlcjxiciBjbGFzcz0iIj4NCiZuYnNwO3JlcXVlc3QuICZu YnNwO1RoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGludGVyZmFjZSBmb3IgdGhlIGxhdHRlciBw YXJ0LDxiciBjbGFzcz0iIj4NCiZuYnNwO2kuZS4gdGhlIENETkkgUmVxdWVzdCBSb3V0aW5nIFJl ZGlyZWN0aW9uIGludGVyZmFjZS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBp czo8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24vIiBjbGFzcz0iIj5odHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24vPC9hPjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZXJlJ3MgYWxzbyBhIGh0bWxpemVkIHZlcnNpb24gYXZh aWxhYmxlIGF0OjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv aHRtbC9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTIiIGNsYXNzPSIiPmh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTI8L2E+PGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24g aXMgYXZhaWxhYmxlIGF0OjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYu b3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTIiIGNsYXNzPSIi Pmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb24tMTI8L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K UGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhl IHRpbWUgb2Ygc3VibWlzc2lvbjxiciBjbGFzcz0iIj4NCnVudGlsIHRoZSBodG1saXplZCB2ZXJz aW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgPGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYu b3JnIiBjbGFzcz0iIj4NCnRvb2xzLmlldGYub3JnPC9hPi48YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBG VFAgYXQ6PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0 LWRyYWZ0cy8iIGNsYXNzPSIiPmZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvPC9h PjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0KQ0ROaSBtYWlsaW5nIGxpc3Q8YnIg Y2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86Q0ROaUBpZXRmLm9yZyIgY2xhc3M9IiI+Q0ROaUBp ZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2NkbmkiIGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vY2RuaTwvYT48bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPlRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBpbmZvcm1hdGlvbiB0aGF0IGlzIG5v dCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0aGUgYWRkcmVzc2VlIG9yIGlmIHRo aXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFrZSwgeW91IGFyZSByZXF1ZXN0ZWQg dG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUgbWVzc2FnZS4gVE5PIGFjY2VwdHMg bm8gbGlhYmlsaXR5IGZvciB0aGUNCiBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3IgdGhlIG1h bm5lciBpbiB3aGljaCB5b3UgdXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJlc3Vs dGluZyBmcm9tIHRoZSByaXNrcyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21pc3Np b24gb2YgbWVzc2FnZXMuPGJyIGNsYXNzPSIiPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX188YnIgY2xhc3M9IiI+DQpDRE5pIG1haWxpbmcgbGlzdDxiciBj bGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpDRE5pQGlldGYub3JnIiBjbGFzcz0iIj5DRE5pQGll dGYub3JnPC9hPjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vY2RuaSIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9jZG5pPC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3Nw YW4+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_1B7F7CC993EB4E83A1CFDE6C9123A7F3tnonl_-- From nobody Sat Oct 10 07:35:06 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C88C1B3C81; Sat, 10 Oct 2015 07:35:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FCA5RO-aP6nx; Sat, 10 Oct 2015 07:35:03 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EF6011B3C79; Sat, 10 Oct 2015 07:35:02 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.4.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151010143502.30664.14933.idtracker@ietfa.amsl.com> Date: Sat, 10 Oct 2015 07:35:02 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-media-type-05.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Oct 2015 14:35:04 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : CDNI Media Type Registration Author : Kevin J. Ma Filename : draft-ietf-cdni-media-type-05.txt Pages : 6 Date : 2015-10-10 Abstract: This document defines the standard media type used by the Content Delivery Network Interconnection (CDNI) protocol suite, including the registration procedure and recommended usage of the required payload- type parameter . The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-media-type-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-media-type-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sat Oct 10 07:37:08 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0AA81B3CB1 for ; Sat, 10 Oct 2015 07:37:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 56wx1RONZDw2 for ; Sat, 10 Oct 2015 07:37:05 -0700 (PDT) Received: from usevmg20.ericsson.net (usevmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A8F21B3CAE for ; Sat, 10 Oct 2015 07:37:05 -0700 (PDT) X-AuditID: c618062d-f79ef6d000007f54-e5-5618c2883895 Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usevmg20.ericsson.net (Symantec Mail Security) with SMTP id DE.2B.32596.882C8165; Sat, 10 Oct 2015 09:47:20 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0248.002; Sat, 10 Oct 2015 10:37:03 -0400 From: Kevin Ma J To: "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-media-type-05.txt Thread-Index: AQHRA2jeIWZO0sNzdEi0JTPsJeUueJ5ky1Wg Date: Sat, 10 Oct 2015 14:37:03 +0000 Message-ID: References: <20151010143502.30664.14933.idtracker@ietfa.amsl.com> In-Reply-To: <20151010143502.30664.14933.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrJLMWRmVeSWpSXmKPExsUyuXSPn27HIYkwg78nFCyezv7D6sDosWTJ T6YAxigum5TUnMyy1CJ9uwSujIk/nrMW9PJVbJ13mbGBcTl3FyMnh4SAiUT3k4/MELaYxIV7 69m6GLk4hASOMkp8v/UYylnOKPG79w9YFZuAlsTjr3+Zuhg5OEQElCV+HnIECQsLOErcXniB BcQWEXCSeLZ4GTuEbSSx4E4vI4jNIqAqsfjFJzCbV8BX4tkXiHohoN67ndcZQUZyAvWu+KYE EmYEuuf7qTVMIDazgLjErSfzmSDuFJBYsuc81M2iEi8f/2OFsJUk5ry+xgxRryOxYPcnNghb W2LZwtfMEGsFJU7OfMIygVF0FpKxs5C0zELSMgtJywJGllWMHKXFqWW56UYGmxiBYX9Mgk13 B+Oel5aHGAU4GJV4eBcwSIQJsSaWFVfmHmKU5mBREufdv+R+qJBAemJJanZqakFqUXxRaU5q 8SFGJg5OqQZG5gbnuDyT//+K1snxR7bxsHV+tN91LkZw0/I/b+aHNiWalD15mrbiepTphuDW 6N0VjeeXztx1r1H49NYj27a92ro0unT/LOZd818WL5ZM4D7T4TanKjqQ2T/znUfvQ4/QqKOS mYv6n7Rye5/k3LDl9zau/+/eG57d33FSa430vbyzjdNYl37kVWIpzkg01GIuKk4EAFRVqllc AgAA Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-media-type-05.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Oct 2015 14:37:07 -0000 updated to address genart and secdir comments. > -----Original Message----- > From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Saturday, October 10, 2015 10:35 AM > To: i-d-announce@ietf.org > Cc: cdni@ietf.org > Subject: [CDNi] I-D Action: draft-ietf-cdni-media-type-05.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Content Delivery Networks > Interconnection Working Group of the IETF. >=20 > Title : CDNI Media Type Registration > Author : Kevin J. Ma > Filename : draft-ietf-cdni-media-type-05.txt > Pages : 6 > Date : 2015-10-10 >=20 > Abstract: > This document defines the standard media type used by the Content > Delivery Network Interconnection (CDNI) protocol suite, including the > registration procedure and recommended usage of the required payload- > type parameter . >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-media-type-05 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-media-type-05 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Mon Oct 12 05:41:27 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C27961B2A0E for ; Mon, 12 Oct 2015 05:41:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id plS0n97QPTlQ for ; Mon, 12 Oct 2015 05:41:24 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C33441AD367 for ; Mon, 12 Oct 2015 05:41:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=181; q=dns/txt; s=iport; t=1444653684; x=1445863284; h=from:to:subject:date:message-id:references:content-id: content-transfer-encoding:mime-version; bh=bXhgcey/cmCg3rpTtzQtsybYl1N0JgB9RttepKWdJJs=; b=h1OSbZjqyNfIT+OQwW/Cj3Kgq3lWXd8ioV0P1QjgudeR5URSoz3UnOwD LEMuirbonlsUotKkhYQjSF5rhcacEcdLpvcJHusYo/SC7XBRYJ8qr2xXU fF6yRQMgsbOB7hHh2cbyr2mS/kYrNGicOyGHI9Zp5opaI8FsdD1WIKrST g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BXBQCAqRtW/4UNJK1dgyaBSLlbhgqDE4IKgjM7EQEBAQEBAQF/C4QnAQEDATpPAgE+EDIbCgIEiDkIvWcBAQEBAQEEAQEBAQEBAQEahnSCD4JuiC6BFAWHPIVRiQYBjRmPM4xPATcshAKHVYEGAQEB X-IronPort-AV: E=Sophos;i="5.17,672,1437436800"; d="scan'208";a="39876597" Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-2.cisco.com with ESMTP; 12 Oct 2015 12:41:24 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id t9CCfOW4019997 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 12 Oct 2015 12:41:24 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Mon, 12 Oct 2015 07:41:11 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Mon, 12 Oct 2015 07:41:11 -0500 From: "Francois Le Faucheur (flefauch)" To: "cdni@ietf.org" Thread-Topic: cdni - Requested session has been scheduled for IETF 94 Thread-Index: AQHRAvsU0wMUk75/HEW8Vjf0Lcr5Qw== Date: Mon, 12 Oct 2015 12:41:11 +0000 Message-ID: <2F6BB38E-4693-44DF-91EC-2056251CD613@cisco.com> References: <20151010012844.29540.68273.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.20] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [CDNi] Fwd: cdni - Requested session has been scheduled for IETF 94 X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2015 12:41:25 -0000 Just FYI >=20 > cdni Session=20 > Wednesday, Morning Session I 0900-1130 > Room Name: Rooms 411/412 size: 120 > --------------------------------------------- >=20 From nobody Tue Oct 13 07:31:34 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B09441B3269; Tue, 13 Oct 2015 07:31:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AvWaecH61jWK; Tue, 13 Oct 2015 07:31:30 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9677B1B325C; Tue, 13 Oct 2015 07:31:30 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.5.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151013143130.3382.2891.idtracker@ietfa.amsl.com> Date: Tue, 13 Oct 2015 07:31:30 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-media-type-06.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 14:31:31 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : CDNI Media Type Registration Author : Kevin J. Ma Filename : draft-ietf-cdni-media-type-06.txt Pages : 6 Date : 2015-10-13 Abstract: This document defines the standard media type used by the Content Delivery Network Interconnection (CDNI) protocol suite, including the registration procedure and recommended usage of the required payload- type parameter . The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-media-type-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-media-type-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Oct 13 07:33:01 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F304B1B4419 for ; Tue, 13 Oct 2015 07:32:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6iP6Iz569mty for ; Tue, 13 Oct 2015 07:32:58 -0700 (PDT) Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70D451B4422 for ; Tue, 13 Oct 2015 07:32:58 -0700 (PDT) X-AuditID: c6180641-f792c6d00000686a-d9-561ca9ca16bf Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id 33.6B.26730.AC9AC165; Tue, 13 Oct 2015 08:50:50 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0248.002; Tue, 13 Oct 2015 10:32:56 -0400 From: Kevin Ma J To: "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-media-type-06.txt Thread-Index: AQHRBcPytkKpXURa10yVGT6qayXlEJ5pfH5A Date: Tue, 13 Oct 2015 14:32:56 +0000 Message-ID: References: <20151013143130.3382.2891.idtracker@ietfa.amsl.com> In-Reply-To: <20151013143130.3382.2891.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrJLMWRmVeSWpSXmKPExsUyuXSPn+6plTJhBu0PJCyezv7D6sDosWTJ T6YAxigum5TUnMyy1CJ9uwSujAM7X7EXzOKr2LWxg72BcRN3FyMnh4SAicTii2fYIGwxiQv3 1gPZXBxCAkcZJc40rGOFcJYzSnztWM8KUsUmoCXx+Otfpi5GDg4RAWWJn4ccQcLCAo4Ss/tb 2CHCThIrviaDhEUEjCS+tq4Bm88ioCox8UY/E4jNK+ArsfrbabC4kIC9xI6/N8DinAIOEv3H 34PFGYHu+X5qDVicWUBc4taT+UwQdwpILNlznhnCFpV4+fgfK4StJDHn9TVmiHodiQW7P7FB 2NoSyxa+ZobYKyhxcuYTlgmMorOQjJ2FpGUWkpZZSFoWMLKsYuQoLU4ty003MtzECAz7YxJs jjsYF3yyPMQowMGoxMOr8FU6TIg1say4MvcQozQHi5I477wZ90OFBNITS1KzU1MLUovii0pz UosPMTJxcEo1MOYFbH1wOOh2xKwNPwNFrJ9khHtuf3mmVEM9IrJw8cYYOZHJu++el+ubWPnq nch2xbYPhR8/MC/ZvMTbqIOzLlmfc4lGe+vDOHn+yfs8Pm/e5iK4LTkkee97fZOO/ksSU8Q8 /LPfzTmy7/UnWSP3MN2FlgFt+n9vTHp3tFXsF7dde9WMD0FHspVYijMSDbWYi4oTASZfGelc AgAA Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-media-type-06.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 14:33:00 -0000 updates to address genart, opsdir, and iana review comments. > -----Original Message----- > From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Tuesday, October 13, 2015 10:32 AM > To: i-d-announce@ietf.org > Cc: cdni@ietf.org > Subject: [CDNi] I-D Action: draft-ietf-cdni-media-type-06.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Content Delivery Networks > Interconnection Working Group of the IETF. >=20 > Title : CDNI Media Type Registration > Author : Kevin J. Ma > Filename : draft-ietf-cdni-media-type-06.txt > Pages : 6 > Date : 2015-10-13 >=20 > Abstract: > This document defines the standard media type used by the Content > Delivery Network Interconnection (CDNI) protocol suite, including the > registration procedure and recommended usage of the required payload- > type parameter . >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-media-type-06 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-media-type-06 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Wed Oct 14 09:48:57 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 239B21ACDD5; Wed, 14 Oct 2015 09:48:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pTriNPOyyFLk; Wed, 14 Oct 2015 09:48:53 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0078C1A6F15; Wed, 14 Oct 2015 09:48:14 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Benoit Claise" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.5.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151014164813.10902.40169.idtracker@ietfa.amsl.com> Date: Wed, 14 Oct 2015 09:48:13 -0700 Archived-At: Cc: cdni-chairs@ietf.org, menachemdodge1@gmail.com, draft-ietf-cdni-media-type.shepherd@ietf.org, draft-ietf-cdni-media-type.ad@ietf.org, cdni@ietf.org, draft-ietf-cdni-media-type@ietf.org Subject: [CDNi] Benoit Claise's No Objection on draft-ietf-cdni-media-type-06: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 16:48:55 -0000 Benoit Claise has entered the following ballot position for draft-ietf-cdni-media-type-06: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Here is Menachem's OPS DIR review: "Introduction and Scope" section 4th sentence ------------------------------------------------------------------ OLD: To accomplish this aims, this document defines SUGGEST: To accomplish this aim, this document defines I found that the organization of the document caused me some difficulty because the definition of the media type and payload type parameter was handled within the request to IANA. Normally a separate IANA section is added at the end of the document which refers to the items in the main document body. From nobody Wed Oct 14 13:20:54 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 496F31A6FDD; Wed, 14 Oct 2015 13:20:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KizCGO1dJC0p; Wed, 14 Oct 2015 13:20:49 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EF9541A6FCD; Wed, 14 Oct 2015 13:20:48 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.5.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151014202048.29360.27149.idtracker@ietfa.amsl.com> Date: Wed, 14 Oct 2015 13:20:48 -0700 Archived-At: Cc: cdni-chairs@ietf.org, draft-ietf-cdni-media-type.shepherd@ietf.org, draft-ietf-cdni-media-type.ad@ietf.org, cdni@ietf.org, draft-ietf-cdni-media-type@ietf.org Subject: [CDNi] Stephen Farrell's No Objection on draft-ietf-cdni-media-type-06: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2015 20:20:50 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-cdni-media-type-06: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- The secdir review [1] suggests to check some ABNF. I'd say that would be a good plan as errors like that are more of a pain later. [1] https://www.ietf.org/mail-archive/web/secdir/current/msg06093.html From nobody Thu Oct 15 05:25:48 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACEB41B30DD for ; Thu, 15 Oct 2015 05:25:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hbHBXGO-lK5f for ; Thu, 15 Oct 2015 05:25:41 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5208D1B2F38 for ; Thu, 15 Oct 2015 05:25:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1520; q=dns/txt; s=iport; t=1444911941; x=1446121541; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=FXOmfrEQoXf/vNWgxTbS/wUwH6MMCvdCxjOwnmxHtbg=; b=f4338CQgGEteb4w3JFTQVnOECFpmkuDRAj/qUQXLVXuyLoXK0qS+xfi0 Oj0H3YnAHlOC2WEsNYrvOVdM+AkkcWWzhPqiKG+NN5bmW9shFabAjP20n K1f3fUUVzda5/V4LQjOviEPbxQdoC3c2mhZHzJbCfTWXWdkMweglhXtNP c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AQBQCCmh9W/4wNJK1egyaBQga9Q4FZhhwCHIEaORMBAQEBAQEBgQqEJgEBAQMBIxFFBQsCASACAiYCAgIwFRACBA4FiCYIr2aTMgEBAQEBAQEBAQEBAQEBAQEBAQEBAReBIoVVgg+FBYJ2B4JpMYEUBZYbAY0agViWSINuASMDPYQDcYRhgQYBAQE X-IronPort-AV: E=Sophos;i="5.17,685,1437436800"; d="scan'208";a="198133630" Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-5.cisco.com with ESMTP; 15 Oct 2015 12:25:41 +0000 Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id t9FCPewv001508 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 15 Oct 2015 12:25:40 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 15 Oct 2015 07:25:26 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Thu, 15 Oct 2015 07:25:25 -0500 From: "Francois Le Faucheur (flefauch)" To: "Peterson, Jon (jon.peterson@neustar.biz)" Thread-Topic: Jon's commet on draft-ietf-cdni-redirection Thread-Index: AQHRB0SRwVtjn4NjK0ScAgTRRnl0yQ== Date: Thu, 15 Oct 2015 12:25:25 +0000 Message-ID: <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> In-Reply-To: <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.20] Content-Type: text/plain; charset="utf-8" Content-ID: <13E9F29E30E8404D90F987ACBBE08BAC@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" Subject: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 12:25:46 -0000 SGkgSm9uLA0KDQpXZeKAmWxsIHdhaXQgYSBjb3VwbGUgbW9yZSBkYXlzIHRvIGhlYXIgYmFjayBm cm9tIHlvdSBvbiB0aGUgcG9pbnQgYmVsb3csIGFuZCB0aGVuIG1vdmUgdGhlIGRvY3VtZW50IGZv cndhcmQuDQoNClRoYW5rcw0KDQpGcmFuY29pcw0KDQo+IE9uIDcgT2N0IDIwMTUsIGF0IDE0OjA0 LCBGcmFuY29pcyBMZSBGYXVjaGV1ciAoZmxlZmF1Y2gpIDxmbGVmYXVjaEBjaXNjby5jb20+IHdy b3RlOg0KPiANCj4gSm9uLA0KPiANCj4gQ2FuIHlvdSBjb25maXJtIHRoaXMgbmV3IHJldiBhZGRy ZXNzZXMgeW91ciBjb21tZW50IGFwcHJvcHJpYXRlbHk/DQo+IEkgYmVsaWV2ZSB0aGUgdGV4dCB0 aGF0IHdhcyBhZGRlZCBmb3IgdGhhdCBwdXJwb3NlIGlzOg0KPiDigJwNCj4gMy4xLiAgUmVkaXJl Y3Rpb24gb2YgZW5jcnlwdGVkIHRyYWZmaWMNCj4gDQo+ICAgICAgVGhlIFJlZGlyZWN0aW9uIElu dGVyZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgbWlnaHQgYmUgdXNlZCB0bw0KPiANCj4g ICAgICByZWRpcmVjdCBhIHJlcXVlc3Qgd2hlcmUgdGhlIFVzZXIgQWdlbnQgd2lsbCBzdWJzZXF1 ZW50bHkgYXR0ZW1wdCB0bw0KPiANCj4gICAgICBlc3RhYmxpc2ggYSBUTFMgc2Vzc2lvbiB3aXRo IHRoZSBSZWRpcmVjdGlvbiBUYXJnZXQuICBJbiBzdWNoIGEgY2FzZSwNCj4gDQo+ICAgICAgYW55 IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2VudCBpcyBy ZWRpcmVjdGVkDQo+IA0KPiAgICAgIG5lZWRzIHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNv bXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0bw0KPiANCj4gICAgICBwZXJmb3JtIGVuY3J5 cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsLiAgTWVjaGFuaXNtcyB0byBkaXN0cmlidXRlIHRoZQ0K PiANCj4gICAgICByZXF1aXJlZCBpbmZvcm1hdGlvbiBhbmQvb3IgY29uZmlndXJhdGlvbiwgc3Vj aCBhcyBwcml2YXRlIGtleXMsIHRvDQo+IA0KPiAgICAgIHN1cnJvZ2F0ZXMgYW5kIHJlcXVlc3Qg cm91dGVycyBpbiBkQ0ROcyBhcmUgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcw0KPiANCj4gICAg ICBkb2N1bWVudC4NCj4g4oCcDQo+IA0KDQo= From nobody Thu Oct 15 16:52:11 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE13E1A8957 for ; Thu, 15 Oct 2015 16:52:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.267 X-Spam-Level: X-Spam-Status: No, score=-102.267 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QD7CQeTL98Kt for ; Thu, 15 Oct 2015 16:52:08 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C66E1A8954 for ; Thu, 15 Oct 2015 16:52:08 -0700 (PDT) Received: from pps.filterd (m0078668.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.15.0.59/8.15.0.59) with SMTP id t9FNhH3B012968; Thu, 15 Oct 2015 19:52:06 -0400 Received: from stntexhc11.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 1xjbnnh8e7-1 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Thu, 15 Oct 2015 19:52:06 -0400 Received: from STNTEXMB10.cis.neustar.com ([169.254.5.189]) by stntexhc11.cis.neustar.com ([::1]) with mapi id 14.03.0158.001; Thu, 15 Oct 2015 19:52:05 -0400 From: "Peterson, Jon" To: "Francois Le Faucheur (flefauch)" Thread-Topic: Jon's commet on draft-ietf-cdni-redirection Thread-Index: AQHRB0Sd6BAt8jKfVkKtIgZAGUcIrZ5tCBuA Date: Thu, 15 Oct 2015 23:52:05 +0000 Message-ID: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> In-Reply-To: <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.9.150325 x-originating-ip: [192.168.128.89] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <7058D5764B345E4F92C364D6D7297A93@neustar.biz> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33, 0.0.0000 definitions=2015-10-16_01:2015-10-15,2015-10-15,1970-01-01 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 kscore.is_bulkscore=0 kscore.compositescore=1 compositescore=0.9 suspectscore=0 phishscore=0 bulkscore=0 kscore.is_spamscore=0 rbsscore=0.9 spamscore=0 urlsuspectscore=0.9 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1508030000 definitions=main-1510150307 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2015 23:52:09 -0000 If I recall the substance of my comment was that the cdni-redirection mechanism works for HTTPS redirection a lot more securely than for DNS redirection, and that the particular problem with DNS redirection when using HTTPS (that you will end up seeing a surprising certificate on the other side of your TLS connection) should be noted since DNS redirection is in scope of cdni-redirection draft. I don't think the problem needs to be solved there, but it needs to be acknowledged. Because DNS responses are insecure (barring DNSSEC), then using DNS for redirection can introduce the problems discussed in draft-fieau-https-delivery-delegation. Dropping in a reference to that draft, or summarizing the problem, would suffice. I don't think the text below really captures that. If this is super confusing I can send text. Jon Peterson Neustar, Inc. On 10/15/15, 5:25 AM, "Francois Le Faucheur (flefauch)" wrote: >Hi Jon, > >We=B9ll wait a couple more days to hear back from you on the point below, >and then move the document forward. > >Thanks > >Francois > >> On 7 Oct 2015, at 14:04, Francois Le Faucheur (flefauch) >> wrote: >>=20 >> Jon, >>=20 >> Can you confirm this new rev addresses your comment appropriately? >> I believe the text that was added for that purpose is: >> =B3 >> 3.1. Redirection of encrypted traffic >>=20 >> The Redirection Interface defined in this document might be used to >>=20 >> redirect a request where the User Agent will subsequently attempt >>to >>=20 >> establish a TLS session with the Redirection Target. In such a >>case, >>=20 >> any surrogate or request router to which the User Agent is >>redirected >>=20 >> needs to be able to successfully complete the TLS handshake and to >>=20 >> perform encryption of the TLS channel. Mechanisms to distribute >>the >>=20 >> required information and/or configuration, such as private keys, to >>=20 >> surrogates and request routers in dCDNs are outside the scope of >>this >>=20 >> document. >> =B3 >>=20 > From nobody Thu Oct 15 19:01:57 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91FCF1B2A26 for ; Thu, 15 Oct 2015 19:01:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.112 X-Spam-Level: X-Spam-Status: No, score=-0.112 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8cJRczKFdEys for ; Thu, 15 Oct 2015 19:01:53 -0700 (PDT) Received: from cosmo.ogre.com (cosmo4.ogre.com [71.6.165.248]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6BDA81B2A24 for ; Thu, 15 Oct 2015 19:01:53 -0700 (PDT) Received: by cosmo.ogre.com (8.14.9/8.14.8) with ESMTP id t9G21oQa024335 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 15 Oct 2015 19:01:50 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ogre.com; s=03062012; t=1444960911; bh=81tTDQUacrKFzoUiOwXftRMx2GqxZUG619ql7E6HvUU=; h=From:Subject:Date:Cc:To; b=EcdqyWB+qeVMUgMjdTCv8s/IHLM9nxDTE59fXUB6x3UAjUdEUrWNCzupWkJxnSvBm cxRmVPJAvqtnOcaf45aEvqJwJxy6fBcAqjjOmj84qUId1o4oSOlwQJUiPRrs4wYFsQ 1+mMOYGo5zUgnLrad58AbUwBLqFjbk/DTX+n9eGw= From: Leif Hedstrom Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Thu, 15 Oct 2015 19:01:50 -0700 Message-Id: <6D3CDBC6-0001-4D07-B047-2FCB6B676800@ogre.com> To: cdni@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3094\)) X-Mailer: Apple Mail (2.3094) Archived-At: Subject: [CDNi] Review: draft-ietf-cdni-uri-signing-05 X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 02:01:55 -0000 Hi all, Overall, the RFC is very well written, and covers the topic in depth. I = have a number of suggestions below, many of which are very nitpicky. I will not = be offended if they are silently ignored :). That much said, I do feel that the draft is a bit verbose in some areas. = I've included some of that in the nitpicks below as well. Maybe this is an editorial issue though, but also see Question 2) below. Caveat 1: I'm not a crypto person, so I can't vouch for the strength of = the symmetric and asymmetric algorithms chosen. They seem fine to me though. Caveat 2: I have not read all the other CDNI RFCs / drafts thoroughly, = so I have not validated all the Interface sections in this draft for = correctness with those RFCs. Caveat 3: I did not thorough editorial editing / suggestions here, such = as grammar or spelling. And thanks for adding KID_NUM :). Cheers, -- Leif Questions --------- 1) On Signing Package Attributes: This is mostly an observation, but why is the "Signing Package = Attribute" needed? What problem does that solve? It sort of hides otherwise useful information when debugging, log analysis ("which KID_NUM's are being = used") etc. Could this step be optional, such that the URL is kept intact with = the ET / KID_NUM / MD query parameters if so desired? It'd also make it easier / cheaper to do some obvious and quick = evaluations which does not require cryptographic ("expensive") operations. Such as, = making sure the ET is not expired, that the KID_NUM is supported, and that the = request does have an MD at all. This is now slightly harder, since you have to un-base64 the string into at least a temp buffer on the stack (but be = aware of stack overflows :) before any other validations can be performed. In any implementation of this, I would definitely suggest that the = "cheap" validations be done first (time, KID_NUM validity, CIP etc.). One use = case of URI signatures is (as mentioned before) to make various DDoS attacks, or = screen scraping, harder. As such, it needs to be "cheap" on the edge nodes. 2) On CDNI interfaces vs URI signing in general I understand that the point of this RFC is for integration with CDNI. = And it mentions that the specifications are usable by non-CDNI implementations = and services. My gut tells me that this RFC could be easier to read and = implement, if this was split up into two RFCs. One just for the URI signing implementation, and one specifically for the CDNI integration portions. 3) URI Path selection We've discussed this in the past, and perhaps this is outside of the = scope of this revision, but I miss a component for URI path selection. With this = I mean, some way to say that only certain portions of the path of a URI = should be used for the signature. A couple of requirements I've dealt with = myself include: a) Specify the number (prefix) of path components that should be = use. So, e.g. "PS=3D3" indicating, use only the first three path components. b) Selectors, like "PS=3D1,3-5,9", using path component 1, 3, 4, 5 = and 9 in the signature, but nothing else. I know this could get arbitrarily complex, but curious to hear if anyone = else has had these requirements. If so, maybe this is worth revisiting? Things to consider ------------------ Page 7: It says "Note that the signed Redirection URI SHOULD maintain the same level = of security as the original Signed URI." What is the reason why this is only a SHOULD? Why not MUST? Or maybe = even the even stronger " ... MUST maintain the same, or higher, level of security ....". As I read the current text, it would be allowed to not even sign the Redirection URI? Page 9: It could be useful to allow expressing the client IP as a subnet, for = two reasons 1) Privacy 2) Flexibility (such as NAT or transparent proxy layers) Allowing for the signature to be verified for e.g. a /24 would therefore = be useful IMO. 1) is sort of touched on in Section 10, but just says it should be = removed from logging. I don't think this is strong enough, with pervasive = monitoring of networks. 2) is of course obvious when a UA sits behind a layer of 2 = or more intermediaries or middle-boxes, such that the source IP can be = different for the various requests. Page 12-13 (Section 2.5 primarily): The text says that the UA is allowed to append additional attributes = after the URI signature. Section 2.5 talks a little bit about the issues with = this, and a RECOMMEND to ignore query strings passed after the the Signing Package Attribute. This seems to weak to me, and potentially fragile. In addition, I can = think of many other ways where this could be abuse. For example, if a CDN allows = the additional query parameters, it could be very easy to perform cache = busting attacks. I think we should either 1) Simply not allow this - or - 2) Have an additional URI Signature Information Element, to declare intent. With 2), the URI would specify if additional parameters are allowed = after the signature or not. Page 15: Sometimes, it could be useful to allow a URI signature to not only skip = the scheme, but also the host portion. For example, people use domain = sharding still (at least until H2 is more used). As such, it might make sense to = allow the same signed URI to hit 2 or more different shards within the = sharding. If we added another URI Signature Information Element to indicate this, = we could easily change the algorithm such that the "base" string is from = the first "/" in the path and forward. Page 23: Section 5.2 looks odd, I think there were some editing / copy-paste = issues here? Needs editing I think. It also says "Advertise "MD" Information Element (i.e. EC-DSA) to = indicate support for symmetric key method". I'm not sure I follow this, we only = use HMAC for the symmetric keys. Maybe it should say "HMAC" instead of = "EC-DSA"? Page 24-25: In the documentation for the properties, there's always a section for "Mandatory-to-specify". However, as far as I can tell it is always "no", = so why bother listing this for every property? Can't we just say that = properties are never mandatory, and reduce the docs to document the default for = each one?=20 Nitpicks -------- Page 3: I think we should drop the HMAC terminology and just refer / link to = existing RFCs (just as you did referring to RFC 6707. Maybe a short sentence for = each reference? I'd just drop the first paragraph in section 1.2, it's verbose and superfluous. The title is sufficient IMO, or could be improved with e.g. Background and overview on URI Signing Page 5: It says "In addition, it checks whether the IP address of the HTTP request = matches that in the Signed URI and if the time window is still valid" However, the IP address is optional in the signature generation. Maybe = change "In addition" to "If applicable" ? Page 6-7: In the overview, maybe it'd be useful to show an example signed URL, = with a very brief explanation of the components (as a picture). This would help = the in-depth explanations of all the components further down the road. Page 7-8: Figure 2: and the text is slightly confusing to me. The text says that = in the case where the Downstream CDN does not have a trust relationship with = the CSP, it must use asymmetric encryption. This makes sense, but I'm not sure I = see or understand this in Picture 2? I guess I'm not sure what the picture is = trying to tell, since it looks the same for both HTTP and DNS :).=20 Page 10: It says "Note: The time, including time zone, on the entities that generate = and validate the signed URI need to be in sync (e.g. NTP is used)." Maybe it should be worded more strongly, such as MUST? And perhaps also clarify what it should be in sync with? One could read this is being in = sync with the CSP, whereas the intent of this Note is that all servers should = be in sync with a universal time source, using e.g. NTP. Page 15: Why do we retain the :// ? Is that just a convenience? Ease of = implementation? It obviously adds no value to the signature. Page 15: It also says "Get the current time in seconds since epoch (as an integer)." time_t can be either 32-bit or 64-bit, it might be worthwhile to say = that ET is a signed 64-bit integer type to cover all bases? Page 22 (Section 4.3) The first paragraph reads oddly. "Note the steps are to be skipped if = the ...". What steps? I believe it refers to the steps in Section 4.2? As discussed above in "Question" section, it might be worth pointing out = which elements are worthwhile to validate before doing cryptographic = operations (such as CIP and ET). Page 28 - 31: It's unfortunate that the pictures in Section 6.1 and Section 6.2 wraps = over multiple pages. Page 34-35: The security considerations are valid, but the vulnerability of replay = attacks seems like a stretch. If the service is vulnerable to a replay attack, = it really should use something stronger than URI signatures. This was = pointed out early on in the document as well, so I feel this section sort of murks = the water a little. From nobody Fri Oct 16 00:49:27 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 588521B302D for ; Fri, 16 Oct 2015 00:49:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.3 X-Spam-Level: X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_37=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QkzRlvIzHqqs for ; Fri, 16 Oct 2015 00:49:24 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.144]) by ietfa.amsl.com (Postfix) with ESMTP id 2EBFF1B302C for ; Fri, 16 Oct 2015 00:49:23 -0700 (PDT) Received: from aputeaux-554-1-37-65.w90-35.abo.wanadoo.fr ([90.35.60.65] helo=[192.168.1.131]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1ZmzlR-000Ab7-OV; Fri, 16 Oct 2015 08:49:22 +0100 Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Fri, 16 Oct 2015 08:49:19 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> To: "Peterson, Jon" X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 07:49:26 -0000 Hi Jon, > On 16 Oct 2015, at 00:52, Peterson, Jon = wrote: >=20 >=20 > If I recall the substance of my comment was that the cdni-redirection > mechanism works for HTTPS redirection a lot more securely than for DNS > redirection, and that the particular problem with DNS redirection when > using HTTPS (that you will end up seeing a surprising certificate on = the > other side of your TLS connection) should be noted since DNS = redirection > is in scope of cdni-redirection draft. I don't think the problem needs = to > be solved there, but it needs to be acknowledged. Because DNS = responses > are insecure (barring DNSSEC), then using DNS for redirection can > introduce the problems discussed in = draft-fieau-https-delivery-delegation. > Dropping in a reference to that draft, or summarizing the problem, = would > suffice. The challenge with writing a paragraph like that is that = draft-fieau-https-delivery-delegation misunderstands how DNS works and = the security issue it highlights doesn=92t exist in practice. =46rom the slides for draft-fieau-https-delivery-delegation from the = last IETF, Section 5 of draft-fieau-https-delivery-delegation states: =93=94=94 In this case, the DNS resolver, when it queries for the hostname associated with the uCDN URL, will be served a DNS response (such as CNAME) that will direct the client to the dCDN. However, in an HTTPS environment, this will result in the client containing a domain other than the one originally specified by the URL inputted by the end user. Consequently, this will almost certainly result in a security failure when the browser attempts to negotiate TLS with the web server it contacts, as the change in domain name will be indistinguishable from a malicious attacker. =93=94=94 How DNS redirection works is that the User Agent does a resolution for = foo.example and it gets a response for foo.example. The fact a CNAME is = present & resolved by the DNS resolver is invisible to the User Agent = (evidenced by the fact the URL bar in the browser doesn=92t change = domain name/hostname when DNS redirection is performed). Therefore as = long as the IP address(es) in the DNS response presents the correct = certificate for foo.example and has the correct credentials (e.g. = Private key for foo.example) to complete the TLS handshake & = encrypt/decrypt traffic on that TLS session the User Agent will not = complain. This is how DNS-based HTTPS redirection is done in CDNs today = where typically a CSP will provide their certificate & private key to = the CDN so the CDN can terminate TLS sessions successfully on the CSP=92s = behalf. which means if HTTPS redirection is insecure for CDNI then HTTPS = redirection used by CDNs in the wild today (without CDNI) is also = insecure (which it isn=92t). IMO I think the real problem is a different thing that = draft-slovetskiy-cdni-https-delegation-approaches hints at without = stating explicitly. That is how far will a CSP trust delegating its = credentials (e.g. Private key) given that the consequences of leakage of = those credentials are very bad. There are possible solutions to avoid = the CSP having to distribute their credentials (e.g. Keyless SSL) but = from the perspective of the redirection draft they=92re out of scope = IMO. HTH Ben >=20 > I don't think the text below really captures that. If this is super > confusing I can send text. >=20 > Jon Peterson > Neustar, Inc. >=20 > On 10/15/15, 5:25 AM, "Francois Le Faucheur (flefauch)" > wrote: >=20 >> Hi Jon, >>=20 >> We=B9ll wait a couple more days to hear back from you on the point = below, >> and then move the document forward. >>=20 >> Thanks >>=20 >> Francois >>=20 >>> On 7 Oct 2015, at 14:04, Francois Le Faucheur (flefauch) >>> wrote: >>>=20 >>> Jon, >>>=20 >>> Can you confirm this new rev addresses your comment appropriately? >>> I believe the text that was added for that purpose is: >>> =B3 >>> 3.1. Redirection of encrypted traffic >>>=20 >>> The Redirection Interface defined in this document might be used = to >>>=20 >>> redirect a request where the User Agent will subsequently = attempt >>> to >>>=20 >>> establish a TLS session with the Redirection Target. In such a >>> case, >>>=20 >>> any surrogate or request router to which the User Agent is >>> redirected >>>=20 >>> needs to be able to successfully complete the TLS handshake and = to >>>=20 >>> perform encryption of the TLS channel. Mechanisms to distribute >>> the >>>=20 >>> required information and/or configuration, such as private keys, = to >>>=20 >>> surrogates and request routers in dCDNs are outside the scope of >>> this >>>=20 >>> document. >>> =B3 >>>=20 >>=20 >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Fri Oct 16 08:20:34 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF9371B313C; Fri, 16 Oct 2015 08:20:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iECLfSVosdGI; Fri, 16 Oct 2015 08:20:26 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EA97B1B3147; Fri, 16 Oct 2015 08:20:10 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.6.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151016152010.14346.9523.idtracker@ietfa.amsl.com> Date: Fri, 16 Oct 2015 08:20:10 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-logging-20.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 15:20:30 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : CDNI Logging Interface Authors : Francois Le Faucheur Gilles Bertrand Iuniana Oprescu Roy Peterkofsky Filename : draft-ietf-cdni-logging-20.txt Pages : 57 Date : 2015-10-16 Abstract: This memo specifies the Logging interface between a downstream CDN (dCDN) and an upstream CDN (uCDN) that are interconnected as per the CDN Interconnection (CDNI) framework. First, it describes a reference model for CDNI logging. Then, it specifies the CDNI Logging File format and the actual protocol for exchange of CDNI Logging Files. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-logging/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-logging-20 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-logging-20 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Oct 16 09:06:34 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B82311B331F for ; Fri, 16 Oct 2015 09:06:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.667 X-Spam-Level: X-Spam-Status: No, score=-101.667 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_37=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hwW24Y-2Egx3 for ; Fri, 16 Oct 2015 09:06:31 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98B851B330A for ; Fri, 16 Oct 2015 09:06:31 -0700 (PDT) Received: from pps.filterd (m0078666.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.15.0.59/8.15.0.59) with SMTP id t9GG3bWb018126; Fri, 16 Oct 2015 12:06:29 -0400 Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 1xjss2ru7p-1 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Fri, 16 Oct 2015 12:06:29 -0400 Received: from STNTEXMB10.cis.neustar.com ([169.254.5.189]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0158.001; Fri, 16 Oct 2015 12:06:27 -0400 From: "Peterson, Jon" To: Ben Niven-Jenkins Thread-Topic: [CDNi] Jon's commet on draft-ietf-cdni-redirection Thread-Index: AQHRB0Sd6BAt8jKfVkKtIgZAGUcIrZ5tCBuAgAD6vYCAABV5AA== Date: Fri, 16 Oct 2015 16:06:27 +0000 Message-ID: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> In-Reply-To: <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.9.150325 x-originating-ip: [192.168.128.89] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <7432CD60B81FF3448CE9B9C1EE5B10E8@neustar.biz> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33, 0.0.0000 definitions=2015-10-16_11:2015-10-15,2015-10-16,1970-01-01 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 kscore.is_bulkscore=0 kscore.compositescore=1 compositescore=0.9 suspectscore=0 phishscore=0 bulkscore=0 kscore.is_spamscore=0 rbsscore=0.9 spamscore=0 urlsuspectscore=0.9 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1508030000 definitions=main-1510160284 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 16:06:33 -0000 >How DNS redirection works is that the User Agent does a resolution for >foo.example and it gets a response for foo.example. The fact a CNAME is >present & resolved by the DNS resolver is invisible to the User Agent >(evidenced by the fact the URL bar in the browser doesn=B9t change domain >name/hostname when DNS redirection is performed). It is certainly invisible to the browser when every dCDN holds the private key of every uCDN that might redirect to it, as you stipulate below. If that is an operational requirement of the DNS redirection mechanism in cdni-redirection, it needs to be made explicit. The proposed text just says that "any surrogate or request router to which the User Agent is redirected needs to be able to successfully complete the TLS handshake" etc., which could be read to imply that as a solution, but not if you don't understand what the problem is in the first place. I was asking that this acknowledge the problem, not specify a solution. Moreover, the substance of my comment was that the problem is different for DNS redirection than it is for HTTPS redirection. HTTPS redirection shouldn't require every dCDN to have every uCDNs private keying material. The proposed text treats this like the two methods have the same properties. > Therefore as long as the IP address(es) in the DNS response presents the >correct certificate for foo.example and has the correct credentials (e.g. >Private key for foo.example) to complete the TLS handshake & >encrypt/decrypt traffic on that TLS session the User Agent will not >complain. This is how DNS-based HTTPS redirection is done in CDNs today >where typically a CSP will provide their certificate & private key to the >CDN so the CDN can terminate TLS sessions successfully on the CSP=B9s >behalf. which means if HTTPS redirection is insecure for CDNI then HTTPS >redirection used by CDNs in the wild today (without CDNI) is also >insecure (which it isn=B9t). Identifying a known workaround does not mean there isn't a problem. That there is a workaround is proof there is a problem. >IMO I think the real problem is a different thing that >draft-slovetskiy-cdni-https-delegation-approaches hints at without >stating explicitly. That is how far will a CSP trust delegating its >credentials (e.g. Private key) given that the consequences of leakage of >those credentials are very bad. There are possible solutions to avoid the >CSP having to distribute their credentials (e.g. Keyless SSL) but from >the perspective of the redirection draft they=B9re out of scope IMO. The fact that there are two drafts trying to improve the workaround does not convince me that the problem isn't worth noting. Jon Peterson Neustar, Inc. From nobody Fri Oct 16 09:22:20 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D10A41A6EDE for ; Fri, 16 Oct 2015 09:22:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6dvDhs27BBeD for ; Fri, 16 Oct 2015 09:22:14 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED2EA1A701D for ; Fri, 16 Oct 2015 09:22:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3220; q=dns/txt; s=iport; t=1445012533; x=1446222133; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=20NszV3X9UqTDj7FYESkaFZkqLKPrWRYkl8KFmUH394=; b=RkoCOFslSemAeczWRkCiDl4rIFFgaaCN7nnEPE8FF+e4EkQivgnGGD/n B87Todcwl7V4xmRFul0DZNIKBzn8QqyTMykVZenrkmZfoyqEfwGFRc9Mh 3OgunFL63ridH3KrdM26UiKCHJWg7g9uORnfX9RU8q82DkaD99PthFkqV k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AXAgChIyFW/4sNJK1egyZUbga9ZwENgVkXCoV9AhyBGjgUAQEBAQEBAX8LhCYBAQEDAQEBASAROhALAgEIGAICJgICAiULFRACBBOIJggNsDWTHwEBAQEBAQEBAQEBAQEBAQEBAQEBAReBIoVVgg+CboRaOoJpMYEUBZYdAYUYiAKBWEiDcoczjkoBHwEBQoQDcYRhgQYBAQE X-IronPort-AV: E=Sophos;i="5.17,689,1437436800"; d="scan'208";a="198617009" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-5.cisco.com with ESMTP; 16 Oct 2015 16:22:12 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t9GGMCZJ014578 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Fri, 16 Oct 2015 16:22:12 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Fri, 16 Oct 2015 11:21:56 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Fri, 16 Oct 2015 11:21:56 -0500 From: "Francois Le Faucheur (flefauch)" To: "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-logging-20.txt Thread-Index: AQHRCCYtZN2FUjWu80SRxpX0BBm7lZ5uoSGA Date: Fri, 16 Oct 2015 16:21:56 +0000 Message-ID: References: <20151016152010.14346.9523.idtracker@ietfa.amsl.com> In-Reply-To: <20151016152010.14346.9523.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.20] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-logging-20.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 16:22:17 -0000 Rm9sa3MsDQoNCihhcyBhIGNvLWF1dGhvcikNCg0KVGhpcyBuZXcgdmVyc2lvbiBhZGRyZXNzZXMg Og0KCSogQUJORiBjb3JyZWN0aW9ucw0KCSogbG9nZ2luZyBwcml2YWN5IDoNCgkJbyBwcml2YWN5 IGNvbmNlcm5zIGFuZCBub24tY29uY2VybnMgaW4gc2VjdGlvbiA3LjMNCgkJbyBwcml2YWN5IHBy b3RlY3Rpb24gbWVjaGFuaXNtIGluIHRoZSBmb3JtIG9mIHRoZSAg4oCcYy1ncm91cGlk4oCdIGZp ZWxkIGluIHNlY3Rpb24gMy40LjEgKHJlcGxhY2luZyB0aGUgYy1pcCwgYy1pcC1hbm9ueW1pemlu ZywgYy1wb3J0LCBjLXBvcnQtYW5vbnltaXppbmcpLg0KDQpUaGFua3MgbXVjaCB0byB0aGUgTG9n Z2luZyBQcml2YWN5IERlc2lnbiB0ZWFtLCBpbiBwYXJ0aWN1bGFyIHRvIEJyaWFuIFRyYW1tZWwg YW5kIFJpY2ggU2Fsei4NCg0KUGxlYXNlIHJldmlldyB0aGUgZGlmZnMgZnJvbSAtMTkgYW5kIGxl dCB1cyBrbm93IGlmIHlvdSBoYXZlIGFueSBjb25jZXJucy4NCg0KT2J2aW91c2x5LCB0aGUgbWF0 ZXJpYWwgcmVsYXRlZCB0byBwcml2YWN5IHdpbGwgYWxzbyBiZSBwcmVzZW50ZWQgaW4gWW9rb2hh bWEuIA0KDQpDaGVlcnMNCg0KRnJhbmNvaXMNCg0KPiBPbiAxNiBPY3QgMjAxNSwgYXQgMTc6MjAs IGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyB3cm90ZToNCj4gDQo+IA0KPiBBIE5ldyBJbnRlcm5l dC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5ldC1EcmFmdHMgZGly ZWN0b3JpZXMuDQo+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIENvbnRlbnQgRGVs aXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0aW9uIFdvcmtpbmcgR3JvdXAgb2YgdGhlIElFVEYu DQo+IA0KPiAgICAgICAgVGl0bGUgICAgICAgICAgIDogQ0ROSSBMb2dnaW5nIEludGVyZmFjZQ0K PiAgICAgICAgQXV0aG9ycyAgICAgICAgIDogRnJhbmNvaXMgTGUgRmF1Y2hldXINCj4gICAgICAg ICAgICAgICAgICAgICAgICAgIEdpbGxlcyBCZXJ0cmFuZA0KPiAgICAgICAgICAgICAgICAgICAg ICAgICAgSXVuaWFuYSBPcHJlc2N1DQo+ICAgICAgICAgICAgICAgICAgICAgICAgICBSb3kgUGV0 ZXJrb2Zza3kNCj4gCUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtY2RuaS1sb2dnaW5nLTIw LnR4dA0KPiAJUGFnZXMgICAgICAgICAgIDogNTcNCj4gCURhdGUgICAgICAgICAgICA6IDIwMTUt MTAtMTYNCj4gDQo+IEFic3RyYWN0Og0KPiAgIFRoaXMgbWVtbyBzcGVjaWZpZXMgdGhlIExvZ2dp bmcgaW50ZXJmYWNlIGJldHdlZW4gYSBkb3duc3RyZWFtIENETg0KPiAgIChkQ0ROKSBhbmQgYW4g dXBzdHJlYW0gQ0ROICh1Q0ROKSB0aGF0IGFyZSBpbnRlcmNvbm5lY3RlZCBhcyBwZXIgdGhlDQo+ ICAgQ0ROIEludGVyY29ubmVjdGlvbiAoQ0ROSSkgZnJhbWV3b3JrLiAgRmlyc3QsIGl0IGRlc2Ny aWJlcyBhDQo+ICAgcmVmZXJlbmNlIG1vZGVsIGZvciBDRE5JIGxvZ2dpbmcuICBUaGVuLCBpdCBz cGVjaWZpZXMgdGhlIENETkkNCj4gICBMb2dnaW5nIEZpbGUgZm9ybWF0IGFuZCB0aGUgYWN0dWFs IHByb3RvY29sIGZvciBleGNoYW5nZSBvZiBDRE5JDQo+ICAgTG9nZ2luZyBGaWxlcy4NCj4gDQo+ IA0KPiBUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoN Cj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jZG5pLWxvZ2dp bmcvDQo+IA0KPiBUaGVyZSdzIGFsc28gYSBodG1saXplZCB2ZXJzaW9uIGF2YWlsYWJsZSBhdDoN Cj4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY2RuaS1sb2dnaW5nLTIw DQo+IA0KPiBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6 DQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWNkbmktbG9n Z2luZy0yMA0KPiANCj4gDQo+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUg b2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24NCj4gdW50aWwgdGhlIGh0bWxp emVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCj4g DQo+IEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBh dDoNCj4gZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy8NCj4gDQo+IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IENETmkgbWFpbGluZyBs aXN0DQo+IENETmlAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9jZG5pDQoNCg== From nobody Fri Oct 16 10:40:40 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10E301B3255 for ; Fri, 16 Oct 2015 10:40:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.299 X-Spam-Level: X-Spam-Status: No, score=-1.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DN_599g7OxPU for ; Fri, 16 Oct 2015 10:40:31 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.145]) by ietfa.amsl.com (Postfix) with ESMTP id D4B181B325E for ; Fri, 16 Oct 2015 10:40:26 -0700 (PDT) Received: from aputeaux-554-1-37-65.w90-35.abo.wanadoo.fr ([90.35.60.65] helo=[192.168.1.131]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1Zn8zQ-000BbW-IF; Fri, 16 Oct 2015 18:40:25 +0100 Content-Type: multipart/alternative; boundary="Apple-Mail=_12DB28E3-9E6F-43CC-8025-38149828C7A8" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Fri, 16 Oct 2015 18:40:22 +0100 Message-Id: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> To: "Peterson, Jon" X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 17:40:39 -0000 --Apple-Mail=_12DB28E3-9E6F-43CC-8025-38149828C7A8 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Hi Jon, > On 16 Oct 2015, at 17:06, Peterson, Jon = wrote: >=20 >=20 >> How DNS redirection works is that the User Agent does a resolution = for >> foo.example and it gets a response for foo.example. The fact a CNAME = is >> present & resolved by the DNS resolver is invisible to the User Agent >> (evidenced by the fact the URL bar in the browser doesn=B9t change = domain >> name/hostname when DNS redirection is performed). >=20 > It is certainly invisible to the browser when every dCDN holds the = private > key of every uCDN that might redirect to it, as you stipulate below. I explained how it is done in the majority of cases today. That isn=92t = the only solution, Keyless SSL is another for example. > If > that is an operational requirement of the DNS redirection mechanism in > cdni-redirection, it needs to be made explicit. It=92s not an operational requirement IMO, the operational requirement = is that the dCDN is able to successfully complete the TLS handshake and = to perform encryption (and decryption) of the TLS channel. > The proposed text just > says that "any surrogate or request router to which the User Agent is > redirected needs to be able to successfully complete the TLS = handshake" > etc., which could be read to imply that as a solution, but not if you > don't understand what the problem is in the first place. I was asking = that > this acknowledge the problem, not specify a solution. Good, that=92s what we were trying to do, maybe the text we used needs = some refinement to be better understandable to others but we worded it = the way it is to explicitly avoid suggesting a solution. > Moreover, the substance of my comment was that the problem is = different > for DNS redirection than it is for HTTPS redirection. > HTTPS redirection > shouldn't require every dCDN to have every uCDNs private keying = material. > The proposed text treats this like the two methods have the same > properties. I think it may depend what angle you view the problem from. =46rom my = angle of view the problem is that the dCDN needs to successfully = complete the TLS handshake and to perform encryption of the TLS channel. = What the dCDN needs in order to do that is the same in both cases: = private keys, or some other mechanism such as Keyless SSL that will = enable the dCDN to complete the handshake and encrypt/decrypt the = traffic. The fact that for a lot of HTTPS 302 redirection cases the dCDN will be = redirecting to a hostname under the dCDN=92s control (but that is not = guaranteed) may make being able to successfully complete the TLS = handshake and to perform encryption of the TLS channel easier for the = dCDN but it doesn=92t change the basic problem of what the dCDN needs in = order to do its job. And for (at least some) cases where the 302 = redirection is to a hostname not under control of the dCDN the = properties are the same for both DNS & HTTPS 302 redirection. >> Therefore as long as the IP address(es) in the DNS response presents = the >> correct certificate for foo.example and has the correct credentials = (e.g. >> Private key for foo.example) to complete the TLS handshake & >> encrypt/decrypt traffic on that TLS session the User Agent will not >> complain. This is how DNS-based HTTPS redirection is done in CDNs = today >> where typically a CSP will provide their certificate & private key to = the >> CDN so the CDN can terminate TLS sessions successfully on the CSP=B9s >> behalf. which means if HTTPS redirection is insecure for CDNI then = HTTPS >> redirection used by CDNs in the wild today (without CDNI) is also >> insecure (which it isn=B9t). >=20 > Identifying a known workaround does not mean there isn't a problem. = That > there is a workaround is proof there is a problem. I=92m not sure I=92d call the way that the majority of CDN delivered = HTTPS traffic is delivered a workaround myself (I only described the = most common mechanism, there are others mechanisms that don=92t rely on = sharing the private key and which are used in the wild, e.g. Keyless = SSL). But that=92s off-topic so let=92s move on. >=20 >> IMO I think the real problem is a different thing that >> draft-slovetskiy-cdni-https-delegation-approaches hints at without >> stating explicitly. That is how far will a CSP trust delegating its >> credentials (e.g. Private key) given that the consequences of leakage = of >> those credentials are very bad. There are possible solutions to avoid = the >> CSP having to distribute their credentials (e.g. Keyless SSL) but = from >> the perspective of the redirection draft they=B9re out of scope IMO. >=20 > The fact that there are two drafts trying to improve the workaround = does > not convince me that the problem isn't worth noting. The problem is worth noting, which is what we did, as noted above it = seems our text needs more work. It is also worth noting IMO that neither of the two drafts actually = describe or mention the problem we are discussing but merely hint at it = and then attribute the cause of it to the presence of a CNAME in the = call flow, rather than the true cause which is lack of ability of the = dCDN to successfully complete the TLS handshake. Anyway, does this proposal get us closer to some text you=92d be happy = with? =3D=3D=3DOLD=3D=3D=3D The Redirection Interface defined in this document might be used to = redirect a request where the User Agent will subsequently attempt to = establish a TLS session with the Redirection Target. In such a case, = any surrogate or request router to which the User Agent is redirected = needs to be able to successfully complete the TLS handshake and to = perform encryption of the TLS channel. Mechanisms to distribute the = required information and/or configuration, such as private keys, to = surrogates and request routers in dCDNs are outside the scope of this = document. =3D=3D=3DNEW=3D=3D=3D The Redirection Interface defined in this document might be used to = redirect a request where the User Agent will subsequently attempt to = establish a TLS session with the Redirection Target. In such a case, any = surrogate or request router to which the User Agent is redirected needs = to be able to successfully complete the TLS handshake and to perform = encryption of the TLS channel. The private key for the host in the RT is needed in order to = successfully establish a TLS session. The most widespread mechanism = currently used by (non-interconnected) CDNs is for the owner of the host = in the RT sharing their private key with their CDN(s) of choice. In = cases where the owner of the host is not willing to share their private = key, other mechanisms that allow the owner to not share their private = key are used, for example Keyless SSL [REF]. CDNI by definition implies that a Content Provider=92s content will be = delivered by CDNs other than the CDN with which the Content Provider has = a direct business relationship. Therefore, while CDNI does not introduce = any new technical requirements on dCDNs when establishing TLS sessions, = Content Providers may be less willing to have their private key shared = with dCDNs than they are with their chosen CDN(s) in a = non-interconnected scenario. Mechanisms to distribute the required information and/or configuration = to surrogates and request routers in dCDNs to enable a dCDN to = successfully complete TLS handshakes and to perform encryption of the = TLS channel for a particular host, such as private keys or the URI/IP = address of a key server, are outside the scope of this document. [REF] = https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-technical-details= / = =3D=3D=3DEND=3D=3D=3D Ben >=20 > Jon Peterson > Neustar, Inc. >=20 --Apple-Mail=_12DB28E3-9E6F-43CC-8025-38149828C7A8 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 Hi Jon,

On = 16 Oct 2015, at 17:06, Peterson, Jon <jon.peterson@neustar.biz> wrote:


How DNS redirection = works is that the User Agent does a resolution for
foo.example and it gets a response for foo.example. The fact = a CNAME is
present & resolved by the DNS resolver is = invisible to the User Agent
(evidenced by the fact the URL = bar in the browser doesn=B9t change domain
name/hostname = when DNS redirection is performed).

It is certainly invisible to the browser when every dCDN = holds the private
key of every uCDN that might redirect to = it, as you stipulate below.

I = explained how it is done in the majority of cases today. That isn=92t = the only solution, Keyless SSL is another for example.

If
that is an operational requirement of the DNS redirection = mechanism in
cdni-redirection, it needs to be made = explicit.

It=92s not an = operational requirement IMO, the operational requirement is that the = dCDN is able to successfully complete the TLS handshake and to perform = encryption (and decryption) of the TLS channel.

The = proposed text just
says that "any surrogate or request = router to which the User Agent is
redirected needs to be = able to successfully complete the TLS handshake"
etc., = which could be read to imply that as a solution, but not if you
don't understand what the problem is in the first place. I = was asking that
this acknowledge the problem, not specify = a solution.

Good, that=92s what we were trying to do, maybe the = text we used needs some refinement to be better understandable to others = but we worded it the way it is to explicitly avoid suggesting a = solution.

Moreover, the substance of my comment was = that the problem is different
for DNS redirection than it = is for HTTPS redirection.
HTTPS redirection
shouldn't require every dCDN to have every uCDNs private = keying material.
The proposed text treats this like the = two methods have the same
properties.

I = think it may depend what angle you view the problem from. =46rom my = angle of view the problem is that the dCDN needs to successfully = complete the TLS handshake and to perform encryption of the TLS channel. = What the dCDN needs in order to do that is the same in both cases: = private keys, or some other mechanism such as Keyless SSL that will = enable the dCDN to complete the handshake and encrypt/decrypt the = traffic.

The fact that for a lot of = HTTPS 302 redirection cases the dCDN will be redirecting to a hostname = under the dCDN=92s control (but that is not guaranteed) may make being = able to successfully complete the TLS handshake and to perform = encryption of the TLS channel easier for the dCDN but it doesn=92t = change the basic problem of what the dCDN needs in order to do its job. = And for (at least some) cases where the 302 redirection is to a hostname = not under control of the dCDN the properties are the same for both DNS = & HTTPS 302 redirection.

Therefore as long as the IP address(es) in the DNS response = presents the
correct certificate for foo.example and has = the correct credentials (e.g.
Private key for foo.example) = to complete the TLS handshake &
encrypt/decrypt = traffic on that TLS session the User Agent will not
complain. This is how DNS-based HTTPS redirection is done in = CDNs today
where typically a CSP will provide their = certificate & private key to the
CDN so the CDN can = terminate TLS sessions successfully on the CSP=B9s
behalf. = which means if HTTPS redirection is insecure for CDNI then HTTPS
redirection used by CDNs in the wild today (without CDNI) is = also
insecure (which it isn=B9t).

Identifying a known workaround = does not mean there isn't a problem. That
there is a = workaround is proof there is a problem.

I=92m not sure = I=92d call the way that the majority of CDN delivered HTTPS traffic is = delivered a workaround myself (I only described the most common = mechanism, there are others mechanisms that don=92t rely on sharing the = private key and which are used in the wild, e.g. Keyless = SSL).

But that=92s off-topic so = let=92s move on.


IMO I think the real problem is a different = thing that
draft-slovetskiy-cdni-https-delegation-approaches= hints at without
stating explicitly. That is how far will = a CSP trust delegating its
credentials (e.g. Private key) = given that the consequences of leakage of
those = credentials are very bad. There are possible solutions to avoid the
CSP having to distribute their credentials (e.g. Keyless SSL) = but from
the perspective of the redirection draft they=B9re = out of scope IMO.

The fact = that there are two drafts trying to improve the workaround does
not convince me that the problem isn't worth noting.

The problem is = worth noting, which is what we did, as noted above it seems our text = needs more work.

It is also worth = noting IMO that neither of the two drafts actually describe or mention = the problem we are discussing but merely hint at it and then attribute = the cause of it to the presence of a CNAME in the call flow, rather than = the true cause which is lack of ability of the dCDN to successfully = complete the TLS handshake.

Anyway, = does this proposal get us closer to some text you=92d be happy = with?

=3D=3D=3DOLD=3D=3D=3D
=
The Redirection Interface defined in this document might = be used to redirect a request where the User Agent will subsequently = attempt to establish a TLS session with the Redirection Target.  In = such a case, any surrogate or request router to which the User Agent is = redirected needs to be able to successfully complete the TLS handshake = and to perform encryption of the TLS channel.  Mechanisms to = distribute the required information and/or configuration, such as = private keys, to surrogates and request routers in dCDNs are outside the = scope of this document.
=3D=3D=3DNEW=3D=3D=3D
The Redirection Interface defined in = this document might be used to redirect a request where the User Agent = will subsequently attempt to establish a TLS session with the = Redirection Target. In such a case, any surrogate or request router to = which the User Agent is redirected needs to be able to successfully = complete the TLS handshake and to perform encryption of the TLS = channel.

The private key for the = host in the RT is needed in order to successfully establish a TLS = session. The most widespread mechanism currently used by = (non-interconnected) CDNs is for the owner of the host in the RT sharing = their private key with their CDN(s) of choice. In cases where the owner = of the host is not willing to share their private key, other mechanisms = that allow the owner to not share their private key are used, for = example Keyless SSL [REF].

CDNI by = definition implies that a Content Provider=92s content will be delivered = by CDNs other than the CDN with which the Content Provider has a direct = business relationship. Therefore, while CDNI does not introduce any new = technical requirements on dCDNs when establishing TLS sessions, Content = Providers may be less willing to have their private key shared with = dCDNs than they are with their chosen CDN(s) in a non-interconnected = scenario.

Mechanisms to distribute = the required information and/or configuration to surrogates and request = routers in dCDNs to enable a dCDN to successfully complete TLS = handshakes and to perform encryption of the TLS channel for a particular = host, such as private keys or the URI/IP address of a key server, are = outside the scope of this document.

=3D=3D=3DEND=3D=3D=3D

Ben


Jon Peterson
Neustar, Inc.


= --Apple-Mail=_12DB28E3-9E6F-43CC-8025-38149828C7A8-- From nobody Fri Oct 16 10:41:38 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40F7A1B325A for ; Fri, 16 Oct 2015 10:41:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.116 X-Spam-Level: X-Spam-Status: No, score=-2.116 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qz5wj3kK1r-v for ; Fri, 16 Oct 2015 10:41:33 -0700 (PDT) Received: from fromintoutb.tno.nl (fromintoutb.tno.nl [134.221.1.27]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A250D1B325E for ; Fri, 16 Oct 2015 10:41:32 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.17,689,1437429600"; d="scan'208";a="8272085" Received: from exc-cashub02.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.221]) by mailhost1b.tno.nl with ESMTP; 16 Oct 2015 19:41:31 +0200 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB02.tsn.tno.nl ([fe80::8c02:de2a:3094:171%14]) with mapi id 14.03.0248.002; Fri, 16 Oct 2015 19:41:30 +0200 From: "Brandenburg, R. (Ray) van" To: Leif Hedstrom , "cdni@ietf.org" Thread-Topic: Review: draft-ietf-cdni-uri-signing-05 Thread-Index: AQHRB7akPLGljb1UyUm0EVpGoleAhp5uY/YA Date: Fri, 16 Oct 2015 17:41:29 +0000 Message-ID: <53C26554-463B-4FC4-ADC1-60776F41B91F@tno.nl> References: <6D3CDBC6-0001-4D07-B047-2FCB6B676800@ogre.com> In-Reply-To: <6D3CDBC6-0001-4D07-B047-2FCB6B676800@ogre.com> Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.151008 x-originating-ip: [134.221.225.191] Content-Type: text/plain; charset="utf-8" Content-ID: MIME-Version: 1.0 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [CDNi] Review: draft-ietf-cdni-uri-signing-05 X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 17:41:37 -0000 SGkgTGVpZiwNCg0KTWFueSB0aGFua3MgZm9yIHlvdXIgdmVyeSB0aG9yb3VnaCByZXZpZXchIA0K DQpQbGVhc2UgZmluZCBteSByZXNwb25zZXMgaW5saW5lLg0KDQpSYXkNCg0KDQoNCg0KT24gMTYv MTAvMTUgMDQ6MDEsICJMZWlmIEhlZHN0cm9tIiA8bGVpZkBvZ3JlLmNvbT4gd3JvdGU6DQoNCj5I aSBhbGwsDQo+DQo+T3ZlcmFsbCwgdGhlIFJGQyBpcyB2ZXJ5IHdlbGwgd3JpdHRlbiwgYW5kIGNv dmVycyB0aGUgdG9waWMgaW4gZGVwdGguIEkgaGF2ZSBhDQo+bnVtYmVyIG9mIHN1Z2dlc3Rpb25z IGJlbG93LCBtYW55IG9mIHdoaWNoIGFyZSB2ZXJ5IG5pdHBpY2t5LiBJIHdpbGwgbm90IGJlDQo+ b2ZmZW5kZWQgaWYgdGhleSBhcmUgc2lsZW50bHkgaWdub3JlZCA6KS4NCj4NCj5UaGF0IG11Y2gg c2FpZCwgSSBkbyBmZWVsIHRoYXQgdGhlIGRyYWZ0IGlzIGEgYml0IHZlcmJvc2UgaW4gc29tZSBh cmVhcy4gSSd2ZQ0KPmluY2x1ZGVkIHNvbWUgb2YgdGhhdCBpbiB0aGUgbml0cGlja3MgYmVsb3cg YXMgd2VsbC4gTWF5YmUgdGhpcyBpcyBhbg0KPmVkaXRvcmlhbCBpc3N1ZSB0aG91Z2gsIGJ1dCBh bHNvIHNlZSBRdWVzdGlvbiAyKSBiZWxvdy4NCj4NCj5DYXZlYXQgMTogSSdtIG5vdCBhIGNyeXB0 byBwZXJzb24sIHNvIEkgY2FuJ3Qgdm91Y2ggZm9yIHRoZSBzdHJlbmd0aCBvZiB0aGUNCj5zeW1t ZXRyaWMgYW5kIGFzeW1tZXRyaWMgYWxnb3JpdGhtcyBjaG9zZW4uIFRoZXkgc2VlbSBmaW5lIHRv IG1lIHRob3VnaC4NCj4NCj5DYXZlYXQgMjogSSBoYXZlIG5vdCByZWFkIGFsbCB0aGUgb3RoZXIg Q0ROSSBSRkNzIC8gZHJhZnRzIHRob3JvdWdobHksIHNvIEkNCj5oYXZlIG5vdCB2YWxpZGF0ZWQg YWxsIHRoZSBJbnRlcmZhY2Ugc2VjdGlvbnMgaW4gdGhpcyBkcmFmdCBmb3IgY29ycmVjdG5lc3MN Cj53aXRoIHRob3NlIFJGQ3MuDQo+DQo+Q2F2ZWF0IDM6IEkgZGlkIG5vdCB0aG9yb3VnaCBlZGl0 b3JpYWwgZWRpdGluZyAvIHN1Z2dlc3Rpb25zIGhlcmUsIHN1Y2ggYXMNCj5ncmFtbWFyIG9yIHNw ZWxsaW5nLg0KPg0KPkFuZCB0aGFua3MgZm9yIGFkZGluZyBLSURfTlVNIDopLg0KPg0KPkNoZWVy cywNCj4NCj4tLSBMZWlmDQo+DQo+DQo+UXVlc3Rpb25zDQo+LS0tLS0tLS0tDQo+DQo+MSkgT24g U2lnbmluZyBQYWNrYWdlIEF0dHJpYnV0ZXM6DQo+DQo+VGhpcyBpcyBtb3N0bHkgYW4gb2JzZXJ2 YXRpb24sIGJ1dCB3aHkgaXMgdGhlICJTaWduaW5nIFBhY2thZ2UgQXR0cmlidXRlIg0KPm5lZWRl ZD8gV2hhdCBwcm9ibGVtIGRvZXMgdGhhdCBzb2x2ZT8gSXQgc29ydCBvZiBoaWRlcyBvdGhlcndp c2UgdXNlZnVsDQo+aW5mb3JtYXRpb24gd2hlbiBkZWJ1Z2dpbmcsIGxvZyBhbmFseXNpcyAoIndo aWNoIEtJRF9OVU0ncyBhcmUgYmVpbmcgdXNlZCIpDQo+ZXRjLiBDb3VsZCB0aGlzIHN0ZXAgYmUg b3B0aW9uYWwsIHN1Y2ggdGhhdCB0aGUgVVJMIGlzIGtlcHQgaW50YWN0IHdpdGggdGhlIEVUDQo+ LyBLSURfTlVNIC8gTUQgcXVlcnkgcGFyYW1ldGVycyBpZiBzbyBkZXNpcmVkPw0KDQpUaGUgbWFp biByZWFzb24gd2UgaW5jbHVkZWQgdGhlIFNpZ25pbmcgUGFja2FnZSBBdHRyaWJ1dGUgd2FzIHRv IHJlZHVjZSB0aGUgY2hhbmNlIG9mIGEgbmFtZXNwYWNlIGNvbGxpc2lvbiBpbiB0aGUgcXVlcnkg c3RyaW5nIHdpdGggYW55IGFwcGxpY2F0aW9uLSBvciBjZG4tc3BlY2lmaWMgcGFyYW1ldGVycy4g V2l0aG91dCB0aGUgYmFzZTY0IHBhY2thZ2UsIGFuIGltcGxlbWVudGF0aW9uIHdvdWxkIGhhdmUg dG8gbWFrZSBzdXJlIHRoZSBxdWVyeSBzdHJpbmcgZG9lc24ndCBjb250YWluIGFueSBvdGhlciBw YXJhbWV0ZXJzIHdpdGggbmFtZXMgc3VjaCBhcyBFVCwgS0lELCBldGMuIE9mIGNvdXJzZSB0aGUg Y2hhbmNlcyBvZiBjb2xsaXNpb24gY291bGQgYmUgcmVkdWNlZCBieSBsZW5ndGhlbmluZyB0aGUg aW5mb3JtYXRpb24gZWxlbWVudHMgKGUuZy4gSUVURi1DRE5JLUVUIGluc3RlYWQgb2YgRVQpLCBi dXQgdGhpcyB3b3VsZCBpbmNyZWFzZSB0aGUgbGVuZ3RoIG9mIHRoZSBVUkwgdW5uZWNlc3Nhcmls eS4gDQoNCj4NCj5JdCdkIGFsc28gbWFrZSBpdCBlYXNpZXIgLyBjaGVhcGVyIHRvIGRvIHNvbWUg b2J2aW91cyBhbmQgcXVpY2sgZXZhbHVhdGlvbnMNCj53aGljaCBkb2VzIG5vdCByZXF1aXJlIGNy eXB0b2dyYXBoaWMgKCJleHBlbnNpdmUiKSBvcGVyYXRpb25zLiBTdWNoIGFzLCBtYWtpbmcNCj5z dXJlIHRoZSBFVCBpcyBub3QgZXhwaXJlZCwgdGhhdCB0aGUgS0lEX05VTSBpcyBzdXBwb3J0ZWQs IGFuZCB0aGF0IHRoZSByZXF1ZXN0DQo+ZG9lcyBoYXZlIGFuIE1EIGF0IGFsbC4gVGhpcyBpcyBu b3cgc2xpZ2h0bHkgaGFyZGVyLCBzaW5jZSB5b3UgaGF2ZSB0bw0KPnVuLWJhc2U2NCB0aGUgc3Ry aW5nIGludG8gYXQgbGVhc3QgYSB0ZW1wIGJ1ZmZlciBvbiB0aGUgc3RhY2sgKGJ1dCBiZSBhd2Fy ZSBvZg0KPnN0YWNrIG92ZXJmbG93cyA6KSAgYmVmb3JlIGFueSBvdGhlciB2YWxpZGF0aW9ucyBj YW4gYmUgcGVyZm9ybWVkLg0KDQpHb29kIHBvaW50LiBXb3VsZCBJIGJlIGNvcnJlY3QgaW4gYXNz dW1pbmcgeW91IHdvdWxkIHByZWZlciBhIGxlbmd0aGllciBVUkwgYXMgb3Bwb3NlZCB0byB0aGUg YWRkaXRpb25hbCB1bi1iYXNlNjQgcHJvY2Vzc2luZyBzdGVwPw0KDQoNCj4NCj5JbiBhbnkgaW1w bGVtZW50YXRpb24gb2YgdGhpcywgSSB3b3VsZCBkZWZpbml0ZWx5IHN1Z2dlc3QgdGhhdCB0aGUg ImNoZWFwIg0KPnZhbGlkYXRpb25zIGJlIGRvbmUgZmlyc3QgKHRpbWUsIEtJRF9OVU0gdmFsaWRp dHksIENJUCBldGMuKS4gT25lIHVzZSBjYXNlIG9mIFVSSQ0KPnNpZ25hdHVyZXMgaXMgKGFzIG1l bnRpb25lZCBiZWZvcmUpIHRvIG1ha2UgdmFyaW91cyBERG9TIGF0dGFja3MsIG9yIHNjcmVlbg0K PnNjcmFwaW5nLCBoYXJkZXIuIEFzIHN1Y2gsIGl0IG5lZWRzIHRvIGJlICJjaGVhcCIgb24gdGhl IGVkZ2Ugbm9kZXMuDQoNCkkgd2lsbCBjaGVjayB0aGUgZG9jdW1lbnQgdG8gc2VlIHdoZXRoZXIg d2UgY2FuIHJlLW9yZGVyIHNvbWUgb2YgdGhlIHN0ZXBzLiBJZiB5b3UgaGF2ZSBhbnkgc3BlY2lm aWMgcHJvcG9zYWxzIGZvciB0aGlzLCBiZXlvbmQgcmVtb3ZpbmcgdGhlIGJhc2U2NCBzdGVwLCBw bGVhc2UgbGV0IG1lIGtub3cuDQoNCj4NCj4yKSBPbiBDRE5JIGludGVyZmFjZXMgdnMgVVJJIHNp Z25pbmcgaW4gZ2VuZXJhbA0KPg0KPkkgdW5kZXJzdGFuZCB0aGF0IHRoZSBwb2ludCBvZiB0aGlz IFJGQyBpcyBmb3IgaW50ZWdyYXRpb24gd2l0aCBDRE5JLiBBbmQgaXQNCj5tZW50aW9ucyB0aGF0 IHRoZSBzcGVjaWZpY2F0aW9ucyBhcmUgdXNhYmxlIGJ5IG5vbi1DRE5JIGltcGxlbWVudGF0aW9u cyBhbmQNCj5zZXJ2aWNlcy4gTXkgZ3V0IHRlbGxzIG1lIHRoYXQgdGhpcyBSRkMgY291bGQgYmUg ZWFzaWVyIHRvIHJlYWQgYW5kIGltcGxlbWVudCwNCj5pZiB0aGlzIHdhcyBzcGxpdCB1cCBpbnRv IHR3byBSRkNzLiBPbmUganVzdCBmb3IgdGhlIFVSSSBzaWduaW5nDQo+aW1wbGVtZW50YXRpb24s IGFuZCBvbmUgc3BlY2lmaWNhbGx5IGZvciB0aGUgQ0ROSSBpbnRlZ3JhdGlvbiBwb3J0aW9ucy4N Cg0KQWdyZWVkLiBIb3dldmVyLCBhIGRlZGljYXRlZCBub24tQ0ROSSBzcGVjIHdvdWxkIGJlIG91 dHNpZGUgdGhlIHNjb3BlIG9mIHRoZSBjaGFydGVyIG9mIG91ciBXRy4gVGhhdCBzYWlkLCBJJ20g b3BlbiB0byByZXN0cnVjdHVyaW5nIHRoZSBjdXJyZW50IGRyYWZ0IHRvIG1ha2UgaXQgZWFzaWVy IHRvIHJlYWQgZm9yIHRob3NlIHdobyB3b3VsZCB1c2UgaXQgb3V0c2lkZSB0aGUgQ05ESSBjb250 ZXh0LiBEbyB5b3UgaGF2ZSBhbnkgc3BlY2lmaWMgYXJlYXMgd2hlcmUgeW91IHRoaW5rIHRoaXMg Y291bGQgYmUgYmV0dGVyPw0KDQo+DQo+MykgVVJJIFBhdGggc2VsZWN0aW9uDQo+DQo+V2UndmUg ZGlzY3Vzc2VkIHRoaXMgaW4gdGhlIHBhc3QsIGFuZCBwZXJoYXBzIHRoaXMgaXMgb3V0c2lkZSBv ZiB0aGUgc2NvcGUgb2YNCj50aGlzIHJldmlzaW9uLCBidXQgSSBtaXNzIGEgY29tcG9uZW50IGZv ciBVUkkgcGF0aCBzZWxlY3Rpb24uIFdpdGggdGhpcyBJDQo+bWVhbiwgc29tZSB3YXkgdG8gc2F5 IHRoYXQgb25seSBjZXJ0YWluIHBvcnRpb25zIG9mIHRoZSBwYXRoIG9mIGEgVVJJIHNob3VsZA0K PmJlIHVzZWQgZm9yIHRoZSBzaWduYXR1cmUuIEEgY291cGxlIG9mIHJlcXVpcmVtZW50cyBJJ3Zl IGRlYWx0IHdpdGggbXlzZWxmDQo+aW5jbHVkZToNCj4NCj4gICBhKSBTcGVjaWZ5IHRoZSBudW1i ZXIgIChwcmVmaXgpIG9mIHBhdGggY29tcG9uZW50cyB0aGF0IHNob3VsZCBiZSB1c2UuIFNvLA0K PiAgIGUuZy4gIlBTPTMiIGluZGljYXRpbmcsIHVzZSBvbmx5IHRoZSBmaXJzdCB0aHJlZSBwYXRo IGNvbXBvbmVudHMuDQo+DQo+ICAgYikgU2VsZWN0b3JzLCBsaWtlICJQUz0xLDMtNSw5IiwgdXNp bmcgcGF0aCBjb21wb25lbnQgMSwgMywgNCwgNSBhbmQgOSBpbg0KPiAgIHRoZSBzaWduYXR1cmUs IGJ1dCBub3RoaW5nIGVsc2UuDQo+DQo+SSBrbm93IHRoaXMgY291bGQgZ2V0IGFyYml0cmFyaWx5 IGNvbXBsZXgsIGJ1dCBjdXJpb3VzIHRvIGhlYXIgaWYgYW55b25lIGVsc2UNCj5oYXMgaGFkIHRo ZXNlIHJlcXVpcmVtZW50cy4gSWYgc28sIG1heWJlIHRoaXMgaXMgd29ydGggcmV2aXNpdGluZz8N Cg0KSW4gZHJhZnQtYnJhbmRlbmJ1cmctY2RuaS11cmktc2lnbmluZy1mb3ItaGFzIEkndmUgaW5j bHVkZWQgYSBwcm9wb3NhbCBmb3IgYSBQYXRoIFBhdHRlcm4gZWxlbWVudCB0aGF0IEkgYmVsaWV2 ZSBtYXRjaGVzIHdpdGggd2hhdCB5b3UncmUgbG9va2luZyBmb3IuIEFyZSB5b3Ugc2F5aW5nIHlv dSBiZWxpZXZlIHRoaXMgZWxlbWVudCBtaWdodCBoYXZlIGEgdXNlIG91dHNpZGUgdGhlIGNvbnRl eHQgb2Ygc2VnbWVudGVkIGNvbnRlbnQgYXMgd2VsbD8NCg0KPg0KPg0KPlRoaW5ncyB0byBjb25z aWRlcg0KPi0tLS0tLS0tLS0tLS0tLS0tLQ0KPg0KPlBhZ2UgNzoNCj4NCj5JdCBzYXlzDQo+DQo+ ICAiTm90ZSB0aGF0IHRoZSBzaWduZWQgUmVkaXJlY3Rpb24gVVJJIFNIT1VMRCBtYWludGFpbiB0 aGUgc2FtZSBsZXZlbCBvZg0KPiAgc2VjdXJpdHkgYXMgdGhlIG9yaWdpbmFsIFNpZ25lZCBVUkku Ig0KPg0KPldoYXQgaXMgdGhlIHJlYXNvbiB3aHkgdGhpcyBpcyBvbmx5IGEgU0hPVUxEPyBXaHkg bm90IE1VU1Q/IE9yIG1heWJlIGV2ZW4NCj50aGUgZXZlbiBzdHJvbmdlcg0KPg0KPiAgIiAuLi4g TVVTVCBtYWludGFpbiB0aGUgc2FtZSwgb3IgaGlnaGVyLCBsZXZlbCBvZiBzZWN1cml0eSAuLi4u Ii4NCj4NCj5BcyBJIHJlYWQgdGhlIGN1cnJlbnQgdGV4dCwgaXQgd291bGQgYmUgYWxsb3dlZCB0 byBub3QgZXZlbiBzaWduIHRoZQ0KPlJlZGlyZWN0aW9uIFVSST8NCg0KVmFsaWQgcG9pbnQuIEkn bGwgY2hhbmdlIHRoaXMgdG8geW91ciBwcm9wb3NlZCB0ZXh0LiANCg0KPg0KPg0KPlBhZ2UgOToN Cj4NCj5JdCBjb3VsZCBiZSB1c2VmdWwgdG8gYWxsb3cgZXhwcmVzc2luZyB0aGUgY2xpZW50IElQ IGFzIGEgc3VibmV0LCBmb3IgdHdvDQo+cmVhc29ucw0KPg0KPgkxKSBQcml2YWN5DQo+CTIpIEZs ZXhpYmlsaXR5IChzdWNoIGFzIE5BVCBvciB0cmFuc3BhcmVudCBwcm94eSBsYXllcnMpDQo+DQo+ QWxsb3dpbmcgZm9yIHRoZSBzaWduYXR1cmUgdG8gYmUgdmVyaWZpZWQgZm9yIGUuZy4gYSAvMjQg d291bGQgdGhlcmVmb3JlIGJlDQo+dXNlZnVsIElNTy4NCj4NCj4xKSBpcyBzb3J0IG9mIHRvdWNo ZWQgb24gaW4gU2VjdGlvbiAxMCwgYnV0IGp1c3Qgc2F5cyBpdCBzaG91bGQgYmUgcmVtb3ZlZA0K PmZyb20gbG9nZ2luZy4gSSBkb24ndCB0aGluayB0aGlzIGlzIHN0cm9uZyBlbm91Z2gsIHdpdGgg cGVydmFzaXZlIG1vbml0b3JpbmcNCj5vZiBuZXR3b3Jrcy4gMikgaXMgb2YgY291cnNlIG9idmlv dXMgd2hlbiBhIFVBIHNpdHMgYmVoaW5kIGEgbGF5ZXIgb2YgMiBvcg0KPm1vcmUgaW50ZXJtZWRp YXJpZXMgb3IgbWlkZGxlLWJveGVzLCBzdWNoIHRoYXQgdGhlIHNvdXJjZSBJUCBjYW4gYmUgZGlm ZmVyZW50DQo+Zm9yIHRoZSB2YXJpb3VzIHJlcXVlc3RzLg0KDQpBZ3JlZSBvbiBib3RoIHBvaW50 cy4gSSdsbCBkcmFmdCBhIHNvbHV0aW9uIHRoYXQgYWxsb3dzIGEgQ1NQIHRvIGNvbnZleSBlaXRo ZXIgYSBmaXhlZCBJUCBvciBhIHN1Ym5ldC4gDQoNCj4NCj4NCj5QYWdlIDEyLTEzIChTZWN0aW9u IDIuNSBwcmltYXJpbHkpOg0KPg0KPlRoZSB0ZXh0IHNheXMgdGhhdCB0aGUgVUEgaXMgYWxsb3dl ZCB0byBhcHBlbmQgYWRkaXRpb25hbCBhdHRyaWJ1dGVzIGFmdGVyIHRoZQ0KPlVSSSBzaWduYXR1 cmUuIFNlY3Rpb24gMi41IHRhbGtzIGEgbGl0dGxlIGJpdCBhYm91dCB0aGUgaXNzdWVzIHdpdGgg dGhpcywgYW5kDQo+YSBSRUNPTU1FTkQgdG8gaWdub3JlIHF1ZXJ5IHN0cmluZ3MgcGFzc2VkIGFm dGVyIHRoZSB0aGUgU2lnbmluZyBQYWNrYWdlDQo+QXR0cmlidXRlLg0KPg0KPlRoaXMgc2VlbXMg dG8gd2VhayB0byBtZSwgYW5kIHBvdGVudGlhbGx5IGZyYWdpbGUuIEluIGFkZGl0aW9uLCBJIGNh biB0aGluayBvZg0KPm1hbnkgb3RoZXIgd2F5cyB3aGVyZSB0aGlzIGNvdWxkIGJlIGFidXNlLiBG b3IgZXhhbXBsZSwgaWYgYSBDRE4gYWxsb3dzIHRoZQ0KPmFkZGl0aW9uYWwgcXVlcnkgcGFyYW1l dGVycywgaXQgY291bGQgYmUgdmVyeSBlYXN5IHRvIHBlcmZvcm0gY2FjaGUgYnVzdGluZw0KPmF0 dGFja3MuIEkgdGhpbmsgd2Ugc2hvdWxkIGVpdGhlcg0KPg0KPgkgMSkgU2ltcGx5IG5vdCBhbGxv dyB0aGlzICAgLSBvciAtDQo+CSAyKSBIYXZlIGFuIGFkZGl0aW9uYWwgVVJJIFNpZ25hdHVyZSBJ bmZvcm1hdGlvbiBFbGVtZW50LCB0bw0KPgkgICAgZGVjbGFyZSBpbnRlbnQuDQo+DQo+V2l0aCAy KSwgdGhlIFVSSSB3b3VsZCBzcGVjaWZ5IGlmIGFkZGl0aW9uYWwgcGFyYW1ldGVycyBhcmUgYWxs b3dlZCBhZnRlciB0aGUNCj5zaWduYXR1cmUgb3Igbm90Lg0KDQpJIHNlZSB5b3VyIHBvaW50LCBo b3dldmVyIEknbSBub3Qgc3VyZSB3ZSBjYW4gZG8gYW55dGhpbmcgYWJvdXQgaXQgc2luY2UgdGhl cmUgaXMgbGl0dGxlIHdlIGNhbiBkbyB0byBwcmV2ZW50IGNsaWVudHMgZnJvbSBhcHBlbmRpbmcg YWRkaXRpb25hbCBxdWVyeSBwYXJhbWV0ZXJzIGdpdmVuIHRoYXQgdGhlIGNsaWVudCBpcyBvdXRz aWRlIHRoZSBzY29wZSBvZiBvdXIgc3BlY2lmaWNhdGlvbi4gU2ltcGx5IG5vdCBhbGxvd2luZyB0 aGlzIG1pZ2h0IGJyZWFrIGEgbG90IG9mIGN1cnJlbnQgaW1wbGVtZW50YXRpb25zLCBhbmQgd2l0 aCBpdCByZWR1Y2UgdGhlIGNoYW5jZXMgb2YgdGhpcyBVUkkgU2lnbmluZyBtZWNoYW5pc20gb2Yg YmVjb21pbmcgd2lkZWx5IGFkb3B0ZWQuIA0KDQpDb3VsZCB5b3UgZWxhYm9yYXRlIGEgYml0IG9u IGhvdyB5b3Ugd291bGQgbGlrZSAyKSB0byB3b3JrPyANCg0KPg0KPg0KPlBhZ2UgMTU6DQo+DQo+ U29tZXRpbWVzLCBpdCBjb3VsZCBiZSB1c2VmdWwgdG8gYWxsb3cgYSBVUkkgc2lnbmF0dXJlIHRv IG5vdCBvbmx5IHNraXAgdGhlDQo+c2NoZW1lLCBidXQgYWxzbyB0aGUgaG9zdCBwb3J0aW9uLiBG b3IgZXhhbXBsZSwgcGVvcGxlIHVzZSBkb21haW4gc2hhcmRpbmcNCj5zdGlsbCAoYXQgbGVhc3Qg dW50aWwgSDIgaXMgbW9yZSB1c2VkKS4gQXMgc3VjaCwgaXQgbWlnaHQgbWFrZSBzZW5zZSB0byBh bGxvdw0KPnRoZSBzYW1lIHNpZ25lZCBVUkkgdG8gaGl0IDIgb3IgbW9yZSBkaWZmZXJlbnQgc2hh cmRzIHdpdGhpbiB0aGUgc2hhcmRpbmcuDQo+DQo+SWYgd2UgYWRkZWQgYW5vdGhlciBVUkkgU2ln bmF0dXJlIEluZm9ybWF0aW9uIEVsZW1lbnQgdG8gaW5kaWNhdGUgdGhpcywgd2UNCj5jb3VsZCBl YXNpbHkgY2hhbmdlIHRoZSBhbGdvcml0aG0gc3VjaCB0aGF0IHRoZSAiYmFzZSIgc3RyaW5nIGlz IGZyb20gdGhlDQo+Zmlyc3QgIi8iIGluIHRoZSBwYXRoIGFuZCBmb3J3YXJkLg0KPg0KDQpDb3Vs ZCB3ZSB1c2UgdGhlIFBhdGggUGF0dGVybiBlbGVtZW50IChzZWUgMykgYWJvdmUpIHRvIGFjaGll dmUgdGhpcz8NCg0KPg0KPlBhZ2UgMjM6DQo+DQo+U2VjdGlvbiA1LjIgbG9va3Mgb2RkLCBJIHRo aW5rIHRoZXJlIHdlcmUgc29tZSBlZGl0aW5nIC8gY29weS1wYXN0ZSBpc3N1ZXMNCj5oZXJlPyBO ZWVkcyBlZGl0aW5nIEkgdGhpbmsuDQoNClRoYW5rcy4gSXQgc2VlbXMgdGhhdCBlcnJvciBoYXMg YmVlbiBpbiB0aGUgZG9jdW1lbnQgZm9yIHF1aXRlIHNvbWUgdGltZS4gSSdsbCBmaXggaXQgaW4g dGhlIG5leHQgaXRlcmF0aW9uLg0KDQo+DQo+SXQgYWxzbyBzYXlzICJBZHZlcnRpc2UgIk1EIiBJ bmZvcm1hdGlvbiBFbGVtZW50IChpLmUuICBFQy1EU0EpIHRvIGluZGljYXRlDQo+c3VwcG9ydCBm b3Igc3ltbWV0cmljIGtleSBtZXRob2QiLiBJJ20gbm90IHN1cmUgSSBmb2xsb3cgdGhpcywgd2Ug b25seSB1c2UNCj5ITUFDIGZvciB0aGUgc3ltbWV0cmljIGtleXMuIE1heWJlIGl0IHNob3VsZCBz YXkgIkhNQUMiIGluc3RlYWQgb2YgIkVDLURTQSI/DQo+DQoNCllvdSdyZSByaWdodC4gVGhhbmtz Lg0KDQo+DQo+UGFnZSAyNC0yNToNCj4NCj5JbiB0aGUgZG9jdW1lbnRhdGlvbiBmb3IgdGhlIHBy b3BlcnRpZXMsIHRoZXJlJ3MgYWx3YXlzIGEgc2VjdGlvbiBmb3INCj4iTWFuZGF0b3J5LXRvLXNw ZWNpZnkiLiBIb3dldmVyLCBhcyBmYXIgYXMgSSBjYW4gdGVsbCBpdCBpcyBhbHdheXMgIm5vIiwg c28NCj53aHkgYm90aGVyIGxpc3RpbmcgdGhpcyBmb3IgZXZlcnkgcHJvcGVydHk/IENhbid0IHdl IGp1c3Qgc2F5IHRoYXQgcHJvcGVydGllcw0KPmFyZSBuZXZlciBtYW5kYXRvcnksIGFuZCByZWR1 Y2UgdGhlIGRvY3MgdG8gZG9jdW1lbnQgdGhlIGRlZmF1bHQgZm9yIGVhY2ggb25lPyANCg0KSSdt IGFmcmFpZCB0aGlzIGhhcyB0byBkbyB3aXRoIHRoZSB3YXkgZHJhZnQtaWV0Zi1jZG5pLW1ldGFk YXRhIHNwZWNpZmllcyBpdCdzIHJlZ2lzdHJ5IGFuZCB0aGUgd2F5IG5ldyBvYmplY3RzIG5lZWQg dG8gYmUgZGVmaW5lZC4gDQoNCj4NCj4NCj4NCj5OaXRwaWNrcw0KPi0tLS0tLS0tDQo+DQo+UGFn ZSAzOg0KPg0KPkkgdGhpbmsgd2Ugc2hvdWxkIGRyb3AgdGhlIEhNQUMgdGVybWlub2xvZ3kgYW5k IGp1c3QgcmVmZXIgLyBsaW5rIHRvIGV4aXN0aW5nDQo+UkZDcyAoanVzdCBhcyB5b3UgZGlkIHJl ZmVycmluZyB0byBSRkMgNjcwNy4gTWF5YmUgYSBzaG9ydCBzZW50ZW5jZSBmb3IgZWFjaA0KPnJl ZmVyZW5jZT8NCj4NCj5JJ2QganVzdCBkcm9wIHRoZSBmaXJzdCBwYXJhZ3JhcGggaW4gc2VjdGlv biAxLjIsIGl0J3MgdmVyYm9zZSBhbmQNCj5zdXBlcmZsdW91cy4gVGhlIHRpdGxlIGlzIHN1ZmZp Y2llbnQgSU1PLCBvciBjb3VsZCBiZSBpbXByb3ZlZCB3aXRoIGUuZy4NCj4NCj4gICAgQmFja2dy b3VuZCBhbmQgb3ZlcnZpZXcgb24gVVJJIFNpZ25pbmcNCj4NCj4NCj5QYWdlIDU6DQo+DQo+SXQg c2F5cw0KPg0KPiAgIkluIGFkZGl0aW9uLCBpdCBjaGVja3Mgd2hldGhlciB0aGUgSVAgYWRkcmVz cyBvZiB0aGUgSFRUUCByZXF1ZXN0IG1hdGNoZXMNCj4gIHRoYXQgaW4gdGhlIFNpZ25lZCBVUkkg YW5kIGlmIHRoZSB0aW1lIHdpbmRvdyBpcyBzdGlsbCB2YWxpZCINCj4NCj4NCj5Ib3dldmVyLCB0 aGUgSVAgYWRkcmVzcyBpcyBvcHRpb25hbCBpbiB0aGUgc2lnbmF0dXJlIGdlbmVyYXRpb24uIE1h eWJlIGNoYW5nZQ0KPiJJbiBhZGRpdGlvbiIgdG8gIklmIGFwcGxpY2FibGUiID8NCg0KQWdyZWUg b24gYWxsIG9mIHRoZSBhYm92ZS4gDQoNCj4NCj4NCj5QYWdlIDYtNzoNCj4NCj5JbiB0aGUgb3Zl cnZpZXcsIG1heWJlIGl0J2QgYmUgdXNlZnVsIHRvIHNob3cgYW4gZXhhbXBsZSBzaWduZWQgVVJM LCB3aXRoIGENCj52ZXJ5IGJyaWVmIGV4cGxhbmF0aW9uIG9mIHRoZSBjb21wb25lbnRzIChhcyBh IHBpY3R1cmUpLiBUaGlzIHdvdWxkIGhlbHAgdGhlDQo+aW4tZGVwdGggZXhwbGFuYXRpb25zIG9m IGFsbCB0aGUgY29tcG9uZW50cyBmdXJ0aGVyIGRvd24gdGhlIHJvYWQuDQo+DQoNCkkgdGhpbmsg dGhhdCdzIGEgZ29vZCBzdWdnZXN0aW9uLiBJJ2xsIGFkZCBzb21ldGhpbmcgaW4gdGhlIG5leHQg dmVyc2lvbi4gDQoNCj4NCj5QYWdlIDctODoNCj4NCj5GaWd1cmUgMjogYW5kIHRoZSB0ZXh0IGlz IHNsaWdodGx5IGNvbmZ1c2luZyB0byBtZS4gVGhlIHRleHQgc2F5cyB0aGF0IGluIHRoZQ0KPmNh c2Ugd2hlcmUgdGhlIERvd25zdHJlYW0gQ0ROIGRvZXMgbm90IGhhdmUgYSB0cnVzdCByZWxhdGlv bnNoaXAgd2l0aCB0aGUgQ1NQLA0KPml0IG11c3QgdXNlIGFzeW1tZXRyaWMgZW5jcnlwdGlvbi4g VGhpcyBtYWtlcyBzZW5zZSwgYnV0IEknbSBub3Qgc3VyZSBJIHNlZSBvcg0KPnVuZGVyc3RhbmQg dGhpcyBpbiBQaWN0dXJlIDI/IEkgZ3Vlc3MgSSdtIG5vdCBzdXJlIHdoYXQgdGhlIHBpY3R1cmUg aXMgdHJ5aW5nDQo+dG8gdGVsbCwgc2luY2UgaXQgbG9va3MgdGhlIHNhbWUgZm9yIGJvdGggSFRU UCBhbmQgRE5TIDopLiANCj4NCg0KVGhlIHBpY3R1cmUgdXNlcyBhKSBhbmQgYikgdG8gZGVub3Rl IHRoZSBkaWZmZXJlbmNlcyBiZXR3ZWVuIEROUyBhbmQgSFRUUCwgYWx0aG91Z2ggdGhlIGFycm93 cyB0aGVtc2VsdmVzIGFyZSB0aGUgc2FtZS4gWW91J3JlIHJpZ2h0IHRoYXQgZnJvbSBsb29raW5n IGF0IHRoZSBwaWN0dXJlLCB5b3UgY2FuJ3Qgc2VlIHRoZSBkaWZmZXJlbmNlIGJldHdlZW4gc3lt bWV0cmljIGFuZCBhc3ltbWV0cmljIGtleXMuIA0KDQo+DQo+UGFnZSAxMDoNCj4NCj5JdCBzYXlz DQo+DQo+ICAiTm90ZTogVGhlIHRpbWUsIGluY2x1ZGluZyB0aW1lIHpvbmUsIG9uIHRoZSBlbnRp dGllcyB0aGF0IGdlbmVyYXRlIGFuZA0KPiAgIHZhbGlkYXRlIHRoZSBzaWduZWQgVVJJIG5lZWQg dG8gYmUgaW4gc3luYyAoZS5nLiAgTlRQIGlzIHVzZWQpLiINCj4NCj4NCj5NYXliZSBpdCBzaG91 bGQgYmUgd29yZGVkIG1vcmUgc3Ryb25nbHksIHN1Y2ggYXMgTVVTVD8gQW5kIHBlcmhhcHMgYWxz bw0KPmNsYXJpZnkgd2hhdCBpdCBzaG91bGQgYmUgaW4gc3luYyB3aXRoPyBPbmUgY291bGQgcmVh ZCB0aGlzIGlzIGJlaW5nIGluIHN5bmMNCj53aXRoIHRoZSBDU1AsIHdoZXJlYXMgdGhlIGludGVu dCBvZiB0aGlzIE5vdGUgaXMgdGhhdCBhbGwgc2VydmVycyBzaG91bGQgYmUgaW4NCj5zeW5jIHdp dGggYSB1bml2ZXJzYWwgdGltZSBzb3VyY2UsIHVzaW5nIGUuZy4gTlRQLg0KDQpUaGUgcmVhc29u IHdlIGRpZG4ndCBtYWtlIHRoZSB1c2Ugb2YgZS5nLiBOVFAgZXhwbGljaXQgaXMgdGhhdCB0aGVy ZSBhcmUgbWFueSB3YXlzIHRvIHN5bmNocm9uaXplIHRpbWUsIHdpdGggTlRQIGJlaW5nIGp1c3Qg b25lIG9mIHRoZW0gKGFsYmVpdCBhIHZlcnkgcG9wdWxhciBvbmUpLiBJbiBhZGRpdGlvbiwgZGVw ZW5kaW5nIG9uIHRoZSBsZW5ndGggb2YgdGhlIEVULCB0aW1lIHN5bmNocm9uaXNhdGlvbiBtaWdo dCBub3QgZXZlbiBiZSBuZWNlc3NhcnkuDQoNClRoYXQgc2FpZCwgSSBhZ3JlZSB0aGUgY3VycmVu dCB0ZXh0IG1pZ2h0IGJlIGEgbGl0dGxlIG1vcmUgdmVyYm9zZSBpbiB3aGF0IGl0IGlzIHRyeWlu ZyB0byBzYXkuIEknbGwgZHJhZnQgc29tZXRoaW5nIGluIHRoZSBuZXh0IGl0ZXJhdGlvbi4NCg0K Pg0KPg0KPlBhZ2UgMTU6DQo+DQo+V2h5IGRvIHdlIHJldGFpbiB0aGUgOi8vID8gSXMgdGhhdCBq dXN0IGEgY29udmVuaWVuY2U/IEVhc2Ugb2YgaW1wbGVtZW50YXRpb24/DQo+SXQgb2J2aW91c2x5 IGFkZHMgbm8gdmFsdWUgdG8gdGhlIHNpZ25hdHVyZS4NCg0KVG8gYmUgaG9uZXN0LCBJJ20gbm90 IHN1cmUgOikNCg0KSSdsbCBjaGVjayB3aXRoIG15IGNvLWF1dGhvcnMgdG8gc2VlIGlmIHRoZXkg aGFkIGFueSBzcGVjaWZpYyByZWFzb24gaW4gbWluZC4gVGhlIG9ubHkgdGhpbmcgSSBjYW4gdGhp bmsgb2YgaXMgdG8gbWFrZSBpdCBjbGVhciB0aGF0IG5vIHBhcnQgb2YgdGhlIGRvbWFpbiBjb21w b25lbnQgd2FzIGxlZnQgb2ZmLiANCg0KPg0KPg0KPlBhZ2UgMTU6DQo+DQo+SXQgYWxzbyBzYXlz DQo+DQo+ICAiR2V0IHRoZSBjdXJyZW50IHRpbWUgaW4gc2Vjb25kcyBzaW5jZSBlcG9jaCAoYXMg YW4gaW50ZWdlcikuIg0KPg0KPnRpbWVfdCBjYW4gYmUgZWl0aGVyIDMyLWJpdCBvciA2NC1iaXQs IGl0IG1pZ2h0IGJlIHdvcnRod2hpbGUgdG8gc2F5IHRoYXQgRVQNCj5pcyBhIHNpZ25lZCA2NC1i aXQgaW50ZWdlciB0eXBlIHRvIGNvdmVyIGFsbCBiYXNlcz8NCg0KR29vZCBwb2ludC4gQnV0IHdo eSB3b3VsZCBpdCBiZSBzaWduZWQ/IFdvdWxkbuKAmXQgdW5zaWduZWQgNjQtYml0IGludGVnZXIg bWFrZSBtb3JlIHNlbnNlPw0KDQo+DQo+DQo+UGFnZSAyMiAoU2VjdGlvbiA0LjMpDQo+DQo+VGhl IGZpcnN0IHBhcmFncmFwaCByZWFkcyBvZGRseS4gIk5vdGUgdGhlIHN0ZXBzIGFyZSB0byBiZSBz a2lwcGVkIGlmIHRoZQ0KPi4uLiIuIFdoYXQgc3RlcHM/IEkgYmVsaWV2ZSBpdCByZWZlcnMgdG8g dGhlIHN0ZXBzIGluIFNlY3Rpb24gNC4yPw0KPg0KPkFzIGRpc2N1c3NlZCBhYm92ZSBpbiAiUXVl c3Rpb24iIHNlY3Rpb24sIGl0IG1pZ2h0IGJlIHdvcnRoIHBvaW50aW5nIG91dCB3aGljaA0KPmVs ZW1lbnRzIGFyZSB3b3J0aHdoaWxlIHRvIHZhbGlkYXRlIGJlZm9yZSBkb2luZyBjcnlwdG9ncmFw aGljIG9wZXJhdGlvbnMNCj4oc3VjaCBhcyBDSVAgYW5kIEVUKS4NCg0KQWdyZWVkLg0KDQo+DQo+ DQo+UGFnZSAyOCAtIDMxOg0KPg0KPkl0J3MgdW5mb3J0dW5hdGUgdGhhdCB0aGUgcGljdHVyZXMg aW4gU2VjdGlvbiA2LjEgYW5kIFNlY3Rpb24gNi4yIHdyYXBzIG92ZXINCj5tdWx0aXBsZSBwYWdl cy4NCg0KWWVzLCBkZWZpbml0ZWx5LiBJJ2xsIGNoZWNrIGlmIGl0IGlzIGFuIGVycm9yIGluIHRo ZSBYTUwgb3IgaWYgdGhlIHBpY3R1cmUgaXMgc2ltcGx5IHRvIGxvbmcgdG8gZml0IG9uIG9uZSBw YWdlLiBJIGJlbGlldmUgeG1sMnJmYyBhdXRvbWF0aWNhbGx5IHRyaWVzIHRvIGZpdCBwaWN0dXJl cyBvbiBvbmUgcGFnZSBpZiBwb3NzaWJsZS4gDQoNCj4NCj5QYWdlIDM0LTM1Og0KPg0KPlRoZSBz ZWN1cml0eSBjb25zaWRlcmF0aW9ucyBhcmUgdmFsaWQsIGJ1dCB0aGUgdnVsbmVyYWJpbGl0eSBv ZiByZXBsYXkgYXR0YWNrcw0KPnNlZW1zIGxpa2UgYSBzdHJldGNoLiBJZiB0aGUgc2VydmljZSBp cyB2dWxuZXJhYmxlIHRvIGEgcmVwbGF5IGF0dGFjaywgaXQNCj5yZWFsbHkgc2hvdWxkIHVzZSBz b21ldGhpbmcgc3Ryb25nZXIgdGhhbiBVUkkgc2lnbmF0dXJlcy4gVGhpcyB3YXMgcG9pbnRlZCBv dXQNCj5lYXJseSBvbiBpbiB0aGUgZG9jdW1lbnQgYXMgd2VsbCwgc28gSSBmZWVsIHRoaXMgc2Vj dGlvbiBzb3J0IG9mIG11cmtzIHRoZQ0KPndhdGVyIGEgbGl0dGxlLg0KDQpBcmUgeW91IHNheWlu ZyB5b3Ugd291bGQgcHJlZmVyIHdlIGRpZG4ndCBub3RlIHRoaXMgdnVsbmVyYWJpbGl0eSBhdCBh bGwsIG9yIHNpbXBseSByZW1vdmUgdGhlIG1lbnRpb24gb2YgdGhlIHBvc3NpYmlsaXR5IG9mIHVz aW5nIG9uZS10aW1lIGlkcz8NCg0KVGhhbmtzIGFnYWluIQ0KDQpSYXkNCg0KPg0KVGhpcyBtZXNz YWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGludGVuZGVkIGZvciB5b3Uu IElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBzZW50 IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNlbmRl ciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBubyBsaWFiaWxpdHkgZm9yIHRo ZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3IgdGhlIG1hbm5lciBpbiB3aGljaCB5b3UgdXNl IGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJlc3VsdGluZyBmcm9tIHRoZSByaXNrcyBp bmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21pc3Npb24gb2YgbWVzc2FnZXMuCg== From nobody Fri Oct 16 13:54:51 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F54D1AD277 for ; Fri, 16 Oct 2015 13:54:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QKcFgk7HmUwd for ; Fri, 16 Oct 2015 13:54:48 -0700 (PDT) Received: from usevmg20.ericsson.net (usevmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B12D1AD367 for ; Fri, 16 Oct 2015 13:54:40 -0700 (PDT) X-AuditID: c618062d-f79ef6d000007f54-2d-562103b4ca57 Received: from EUSAAHC003.ericsson.se (Unknown_Domain [147.117.188.81]) by usevmg20.ericsson.net (Symantec Mail Security) with SMTP id 2C.E2.32596.4B301265; Fri, 16 Oct 2015 16:03:32 +0200 (CEST) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC003.ericsson.se ([147.117.188.81]) with mapi id 14.03.0248.002; Fri, 16 Oct 2015 16:54:36 -0400 From: Kevin Ma J To: "Francois Le Faucheur (flefauch)" , "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-logging-20.txt Thread-Index: AQHRCCY3lWk/UJNjKUaDYEiJLzjrAJ5ukE4AgAAIBmA= Date: Fri, 16 Oct 2015 20:54:35 +0000 Message-ID: References: <20151016152010.14346.9523.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrELMWRmVeSWpSXmKPExsUyuXRPoO4WZsUwg8/r9Cyezv7DavFvwWkm ByaPKb83snosWfKTKYApissmJTUnsyy1SN8ugStjV/s8loIHQRXdHRoNjBcCuhg5OSQETCRW /5jEDGGLSVy4t56ti5GLQ0jgKKPE7kN72SGc5YwSDxo7GUGq2AS0JB5//csEYosIxEr8X3YA LC4sYCcx+dk0doi4vcTErQsZIWwridaZG8DqWQRUJV7eW8IGYvMK+Eo8f9gHVi8kUCzx6cJG sCs4BWwllvw8AGYzAl30/dQasF5mAXGJW0/mM0FcKiCxZM95qKtFJV4+/scKYStK7OufDjST A6heU2L9Ln2IVkWJKd0P2SHWCkqcnPmEZQKj6CwkU2chdMxC0jELSccCRpZVjBylxalluelG BpsYgZFwTIJNdwfjnpeWhxgFOBiVeHgXvJQPE2JNLCuuzD3EKM3BoiTOu3/J/VAhgfTEktTs 1NSC1KL4otKc1OJDjEwcnFINjFuucvoUmQdc4z7VHPKk8FTr3w25ckbP+0w7FHjqLDzfVxTy Pz2h9F3y1b/C/FNlOvvMppVWLDoRYbxgiaGPSY+ahkjZr+LnXZYcEz9+3y7FJVi500GzZqmz cRv3Ut2J7G1HGndOTeS/PeX6emedCx9jo+MvzNPy170knZXn+YH72JSLQSvLlViKMxINtZiL ihMBrtiSd2UCAAA= Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-logging-20.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 20:54:50 -0000 SGkgRnJhbmNvaXMsDQoNCiAgQ29tbWVudHMgYW5kIG5pdHMgb24gdGhlIHVwZGF0ZWQgdGV4dCBi ZWxvdy4NCg0KdGhhbnguDQoNCi0tICBLZXZpbiBKLiBNYQ0KDQpnZW5lcmFsOg0KDQogIC0gVGhl cmVzIGFuIGluY29uc2lzdGVuY3kgaW4gdXNlIG9mICJlLmcuICIgdnMgImUuZy4sICIuICBTaG91 bGQgZG8gYSBmaW5kLWFuZC1yZXBsYWNlIHRvIHVzZSB0aGUgbGF0dGVyPw0KDQogIC0gVGhlcmVz IGFuIGluY29uc2lzdGVuY3kgaW4gdXNlIG9mICIsLi4uIiB2cyAiLCBldGMuIi4gIFNob3VsZCBk byBhIGZpbmQtYW5kLXJlcGxhY2UgdG8gdXNlIG9uZSBvciB0aGUgb3RoZXI/DQoNCiAgLSBUaGVy ZXMgYW4gaW5jb25zaXN0ZW5jeSBpbiB1c2Ugb2YgImEgdUNETiIgdnMgImFuIHVDRE4iLiAgU2hv dWxkIGRvIGEgZmluZC1hbmQtcmVwbGFjZSB0byB1c2Ugb25lIG9yIHRoZSBvdGhlcj8NCg0Kc2Vj dGlvbiAyLjIuNS4xOg0KDQogIC0gIlRoaXMgaXMgYWxsb3dlZA0KICAgICAsIGluIHRoZSBkZWZp bml0aW9uIG9mIHRoZSBjLWdyb3VwaWQgdW5kZXIgU2VjdGlvbiAzLjQuMSksIHdpdGggdmVyeSIg LT4NCiAgICAiVGhpcyBpcyBhbGxvd2VkIGluIHRoZSBkZWZpbml0aW9uIG9mIHRoZSBjLWdyb3Vw aWQgKHVuZGVyIFNlY3Rpb24gMy40LjEpLCB3aXRoIHZlcnkiDQoNCiAgLSAiaW4gdGhlIHJlcXVl c3QgaW4gcmVxdWVzdCBmaWVsZHMiIC0+ICJpbiByZXF1ZXN0IGZpZWxkcyINCg0KICAtICJjYXJl IFNIT1VMRCB0aGVuIGJlIiAtPiAiY2FyZSBTSE9VTEQgYmUiDQoNCiAgLSAiaXQgYWxsb3dzIGEg cmVsaWFibGUgaWRlbnRpZmljYXRpb24gb2YgdGhlIGNsaWVudCB3aGlsZSBJUCBhZGRyZXNzIGRv ZXMgbm90IGFsbG93IGFjY3VyYXRlIGlkZW50aWZpY2F0aW9uIG9mIGNsaWVudHMgaW4gbWFueSBz aXR1YXRpb25zIChlLmcuIGJlaGluZCBOQVQsIiAtPg0KICAgICJpdCBhbGxvd3MgYSByZWxpYWJs ZSBpZGVudGlmaWNhdGlvbiBvZiB0aGUgY2xpZW50IHdoaWxlIElQIGFkZHJlc3MgZG9lcyBub3Qg aW4gbWFueSBzaXR1YXRpb25zIChlLmcuIHdoZW4gYmVoaW5kIE5BVCwiDQoNCnNlY3Rpb24gMy40 LjE6DQoNCiAgLSAib3V0IG9mIGJhbmQiIC0+ICJvdXQtb2YtYmFuZCINCg0KICAtIGV4dHJhICIq Ij8NCg0KICAtICJ0aGUgZWxlbWVudCBpZGVudGlmeWluZyB0aGUgY2xpZW50IGlzIGFsZ29yaXRo bWljYWxseSBnZW5lcmF0ZWQiIC0+ICJ0aGUgZWxlbWVudCBpZGVudGlmeWluZyB0aGUgY2xpZW50 IFNIT1VMRCBiZSBhbGdvcml0aG1pY2FsbHkgZ2VuZXJhdGVkIg0KDQogIC0gIm9uZSBleGFtcGxl IHdheSB0byBhY2hpZXZlIHRoaXMgaXMgdG8gaGFzaCB0aGUgYWRkcmVzcyB3aXRoIGEgc2hhcmVk IHNlY3JldCB0aGF0IGlzIHByZS1zeW5jaHJvbmlzZWQgYW5kIHJvdGF0ZWQgYXQgYSBwcmVkZWZp bmVkIHRpbWUgaW50ZXJ2YWwiDQogICAgIlRoZSBlbmNyeXB0aW9uIGFsZ29yaXRobSBtdXN0IGFs c28gYmUgZGVmaW5lZCwiDQoNCiAgICBJIGZvdW5kIHRoaXMgdG8gYmUgYSBiaXQgY29uZnVzaW5n LiAgSSB0aGluayBvZiBhIGhhc2ggYXMgYmVpbmcgYSBvbmUtd2F5IGZ1bmN0aW9uLCBidXQgZW5j cnlwdGlvbiBhcyBiZWluZyByZXZlcnNpYmxlLiAgSSBiZWxpZXZlIHdlIGFncmVlZCB0aGF0IGVp dGhlciBhIGhhc2ggb3IgZW5jcnlwdGlvbiB3b3VsZCB3b3JrLCBidXQgdGhhdCBlbmNyeXB0aW9u IHByb3ZpZGVkIHRoZSBhYmlsaXR5IHRvIGdldCBiYWNrIHRoZSBJUCBhZGRyZXNzIGlmIG5lY2Vz c2FyeS4gIFdlIG1pZ2h0IHdhbnQgdG8gbWFrZSB0aGF0IG1vcmUgY2xlYXIuICBEbyB3ZSBvbmx5 IHdhbnQgdG8gc3VnZ2VzdCBlbmNyeXB0aW9uPw0KDQogICAgSSBmb3VuZCB0aGUgc3Vic2VxdWVu dCB0ZXh0IHRoYXQgbGlzdHMgaGFzaGluZyBhbmQgZW5jcnlwdGlvbiBhbGdvcml0aG1zIGNvbXBv dW5kZWQgbXkgY29uZnVzaW9uIHNpbmNlIHRoZSBoYXNoaW5nIGFsZ29yaXRobXMgYXJlIG9ubHkg aW50ZW5kZWQgdG8gYmUgdXNlZCBmb3IgZ2VuZXJhdGluZyBrZXkgbWF0ZXJpYWwsIGFzIG9wcG9z ZWQgdG8gYmVpbmcgdXNlZCB0byBnZW5lcmF0ZSB0aGUgaWQuDQoNCiAgICAidGhleSBhZ3JlZSBv biB0aGUgc2FsdCBhbmQgaW5wdXQga2V5IG1hdGVyaWFsLCBhcyBkZXNjcmliZWQgaW4gW1JGQzU4 NjldLCBTZWN0aW9uIDIuMiwgdGhlIGhhc2ggbWVjaGFuaXNtIHRvIHVzZSAoU0hBLTIgb3IgU0hB LTMgU0hPVUxEIGJlIHVzZWQpLCINCiAgICAiVGhlIGVuY3J5cHRpb24gYWxnb3JpdGhtIG11c3Qg YWxzbyBiZSBkZWZpbmVkLCBhbmQgU0hPVUxEIGJlIDEyOC1iaXQgQUVTLUdDTSBvciBiZXR0ZXIu Ig0KDQogICAgSSB0aGluayBpdCB3b3VsZCBiZSBoZWxwZnVsIHRvIHNlcGFyYXRlIGtleSBnZW5l cmF0aW9uIGZyb20gZ2VuZXJhdGluZyB0aGUgaWQuICBUaGUgZm9sbG93aW5nIGZlZWxzIGEgbGl0 dGxlIGNsZWFyZXIgYW5kIG1vcmUgY29uY2lzZSB0byBtZToNCg0KICAgICAgInRoZSBlbGVtZW50 IGlkZW50aWZ5aW5nIHRoZSBjbGllbnQgaXMgYWxnb3JpdGhtaWNhbGx5DQogICAgICAgZ2VuZXJh dGVkIChmcm9tIHRoZSBjbGllbnQgSVB2NCBvciBJUHY2IGFkZHJlc3MgaW4gdGhlDQogICAgICAg cmVxdWVzdCByZWNlaXZlZCBieSB0aGUgU3Vycm9nYXRlIGFuZC9vciBvdGhlciBuZXR3b3JrLWxl dmVsDQogICAgICAgaWRlbnRpZnlpbmcgaW5mb3JtYXRpb24pIGluIGEgd2F5IHRoYXQgU0hPVUxE IE5PVCBiZQ0KICAgICAgIGxpbmthYmxlIGJhY2sgdG8gdGhlIGdsb2JhbCBhZGRyZXNzaW5nIGNv bnRleHQgYW5kIHRoYXQNCiAgICAgICBTSE9VTEQgdmFyeSBvdmVyIHRpbWUgKHRvIG9mZmVyIHBy b3RlY3Rpb24gYWdhaW5zdCBsb25nIHRlcm0NCiAgICAgICBhdHRhY2tzKTsgb25lIHdheSB0byBh Y2hpZXZlIHRoaXMgaXMgdG8gZWl0aGVyIGhhc2ggb3IgZW5jcnlwdCB0aGUNCiAgICAgICBhZGRy ZXNzIHdpdGggYSBzaGFyZWQgc2VjcmV0IHRoYXQgaXMgcHJlLXN5bmNocm9uaXNlZCBhbmQNCiAg ICAgICByb3RhdGVkIGF0IGEgcHJlZGVmaW5lZCB0aW1lIGludGVydmFsLiAgSXQgaXMgUkVDT01N RU5ERUQNCiAgICAgICB0aGF0IHRoZSBtYXBwaW5nIHZhcmllcyBhdCBsZWFzdCBvbmNlIGV2ZXJ5 IDI0IGhvdXJzLiAgSWYNCiAgICAgICB0aGUgY2xpZW50IElQdjQgb3IgSVB2NiBhZGRyZXNzIG9y IG90aGVyIG5ldHdvcmstbGV2ZWwNCiAgICAgICBpZGVudGlmeWluZyBpbmZvcm1hdGlvbiBuZWVk cyB0byBiZSByZWNvdmVyYWJsZSwgZW5jcnlwdGlvbg0KICAgICAgIHNob3VsZCBiZSB1c2VkIHJh dGhlciB0aGFuIGEgb25lLXdheSBoYXNoaW5nIGFsZ29yaXRobS4NCiAgICAgICBUaGUgbWFwcGlu ZyBmcm9tIElQIGFkZHJlc3MgdG8gdGhlIGVsZW1lbnQgaWRlbnRpZnlpbmcgdGhlDQogICAgICAg Y2xpZW50IFNIT1VMRCBiZSBkb25lIHVzaW5nIGEgc3ltbWV0cmljIGtleSB0aGF0IGlzIGtub3du IG9ubHkNCiAgICAgICB0byBib3RoIHRoZSB1Q0ROIGFuZCBkQ0ROLiAgKE9uZSBtZXRob2Qgb2Yg c2VsZWN0aW5nIGEga2V5IGlzDQogICAgICAgdG8gdXNlIGFuIGFuYWxvZyBvZiBIS0RGIFtSRkM1 ODY5XSwgYXMgd2lsbCBiZSB1c2VkIGluIFRMUyAxLjMNCiAgICAgICBbSS1ELmlldGYtdGxzLXJm YzUyNDYtYmlzXSkuIA0KICAgICAgIFdoZW4gdGhlIHR3byBDRE5zIHNldCB1cCBhIHJlbGF0aW9u c2hpcCwgdGhleSBhZ3JlZQ0KICAgICAgIG91dC1vZi1iYW5kIG9uIGEgbWFwcGluZyBiZXR3ZWVu IElQdjQgYW5kIElQdjYgYWRkcmVzc2VzIGFuZA0KICAgICAgIGFnZ3JlZ2F0ZXMgYW5kIG9uIHRo ZSBhbGdvcml0aG1pYyBtYXBwaW5nIGZyb20gSVB2NC9JUHY2DQogICAgICAgYWRkcmVzc2VzIGFu ZCB0aGUgZWxlbWVudCBpZGVudGlmeWluZyB0aGUgY2xpZW50Lg0KICAgICAgIFRoZXkgYWdyZWUg b24gdGhlIHNhbHQgYW5kIGlucHV0IGtleSBtYXRlcmlhbCwgYW55DQogICAgICAgYWxnb3JpdGht cyB1c2VkIGluIGtleSBnZW5lcmF0aW9uIChlLmcuLCBTSEEtMjU2KSwgYW5kIHRoZSBrZXkNCiAg ICAgICBsaWZldGltZSB3aGljaCBTSE9VTEQgTk9UIGV4Y2VlZCAyNSBob3VycyAoc2hvcnRlciBs aWZldGltZXMNCiAgICAgICBNQVkgYmUgdXNlZCkuICBBdCB0aGUgZXhwaXJhdGlvbiBvZiB0aGUg YWdyZWVkLXVwb24gbGlmZXRpbWUsDQogICAgICAgYSBuZXcga2V5IGlzIHVzZWQuIg0KDQpzZWN0 aW9uIDcuMzoNCiAgLSAiaXQgZ2VuZXJhdGVzIGl0IiAtPiAiaXQgZ2VuZXJhdGVkIHRoZSBpbmZv cm1hdGlvbiINCg0KICAtICJwcm90ZWN0ZWQgYnkgdXN1YWwgSUVURiBwcml2YWN5LXByb3RlY3Rp b24gbWVjaGFuaXNtIChUTFMpIiAtPg0KICAgICJwcm90ZWN0ZWQgYnkgdXN1YWwgSUVURiBwcml2 YWN5LXByb3RlY3Rpb24gbWVjaGFuaXNtcyAoZS5nLiwgVExTKSINCg0KICAtICJ0aGF0IHZlcnkg bGFyZ2Ugdm9sdW1lcyIgLT4gInRoYXQgbGFyZ2Ugdm9sdW1lcyINCg0KICAtICIsIHdoaWNoIHRo ZW4gcmVwcmVzZW50IGEgaGlnaC12YWx1ZSB0YXJnZXQsIiAtPg0KICAgICIuICBUaGVzZSBmaWxl cyByZXByZXNlbnQgaGlnaC12YWx1ZSB0YXJnZXRzIg0KDQogIC0gImFuZCB0aHVzIGlzIGF0IHJp c2siIC0+ICJhbmQgYXQgcmlzayINCg0KICAtICJ2ZXJ5IGxhcmdlIHZvbHVtZXMgb2YiIC0+ICJs YXJnZSB2b2x1bWVzIG9mIg0KDQogIC0gInRoZXNlIGNvbmNlcm5lZCBhcmUiIC0+ICJ0aGVzZSBj b25jZXJucyBhcmUiDQoNCiAgLSAic2VjdGlvbiBTZWN0aW9uIDMuNC4xLiIgLT4gIlNlY3Rpb24g My40LjEuIg0KDQogIC0gImFueSBvdGhlciBwYXJ0eSB0aGFuIiAtPiAiYW55IHBhcnR5IG90aGVy IHRoYW4iDQoNCg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBDRE5pIFtt YWlsdG86Y2RuaS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgRnJhbmNvaXMgTGUNCj4g RmF1Y2hldXIgKGZsZWZhdWNoKQ0KPiBTZW50OiBGcmlkYXksIE9jdG9iZXIgMTYsIDIwMTUgMTI6 MjIgUE0NCj4gVG86IGNkbmlAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtDRE5pXSBJLUQgQWN0 aW9uOiBkcmFmdC1pZXRmLWNkbmktbG9nZ2luZy0yMC50eHQNCj4gDQo+IEZvbGtzLA0KPiANCj4g KGFzIGEgY28tYXV0aG9yKQ0KPiANCj4gVGhpcyBuZXcgdmVyc2lvbiBhZGRyZXNzZXMgOg0KPiAJ KiBBQk5GIGNvcnJlY3Rpb25zDQo+IAkqIGxvZ2dpbmcgcHJpdmFjeSA6DQo+IAkJbyBwcml2YWN5 IGNvbmNlcm5zIGFuZCBub24tY29uY2VybnMgaW4gc2VjdGlvbiA3LjMNCj4gCQlvIHByaXZhY3kg cHJvdGVjdGlvbiBtZWNoYW5pc20gaW4gdGhlIGZvcm0gb2YgdGhlICDigJxjLWdyb3VwaWTigJ0N Cj4gZmllbGQgaW4gc2VjdGlvbiAzLjQuMSAocmVwbGFjaW5nIHRoZSBjLWlwLCBjLWlwLWFub255 bWl6aW5nLCBjLXBvcnQsIGMtDQo+IHBvcnQtYW5vbnltaXppbmcpLg0KPiANCj4gVGhhbmtzIG11 Y2ggdG8gdGhlIExvZ2dpbmcgUHJpdmFjeSBEZXNpZ24gdGVhbSwgaW4gcGFydGljdWxhciB0byBC cmlhbg0KPiBUcmFtbWVsIGFuZCBSaWNoIFNhbHouDQo+IA0KPiBQbGVhc2UgcmV2aWV3IHRoZSBk aWZmcyBmcm9tIC0xOSBhbmQgbGV0IHVzIGtub3cgaWYgeW91IGhhdmUgYW55IGNvbmNlcm5zLg0K PiANCj4gT2J2aW91c2x5LCB0aGUgbWF0ZXJpYWwgcmVsYXRlZCB0byBwcml2YWN5IHdpbGwgYWxz byBiZSBwcmVzZW50ZWQgaW4NCj4gWW9rb2hhbWEuDQo+IA0KPiBDaGVlcnMNCj4gDQo+IEZyYW5j b2lzDQo+IA0KPiA+IE9uIDE2IE9jdCAyMDE1LCBhdCAxNzoyMCwgaW50ZXJuZXQtZHJhZnRzQGll dGYub3JnIHdyb3RlOg0KPiA+DQo+ID4NCj4gPiBBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFp bGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5ldC1EcmFmdHMNCj4gZGlyZWN0b3JpZXMuDQo+ ID4gVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgQ29udGVudCBEZWxpdmVyeSBOZXR3 b3Jrcw0KPiBJbnRlcmNvbm5lY3Rpb24gV29ya2luZyBHcm91cCBvZiB0aGUgSUVURi4NCj4gPg0K PiA+ICAgICAgICBUaXRsZSAgICAgICAgICAgOiBDRE5JIExvZ2dpbmcgSW50ZXJmYWNlDQo+ID4g ICAgICAgIEF1dGhvcnMgICAgICAgICA6IEZyYW5jb2lzIExlIEZhdWNoZXVyDQo+ID4gICAgICAg ICAgICAgICAgICAgICAgICAgIEdpbGxlcyBCZXJ0cmFuZA0KPiA+ICAgICAgICAgICAgICAgICAg ICAgICAgICBJdW5pYW5hIE9wcmVzY3UNCj4gPiAgICAgICAgICAgICAgICAgICAgICAgICAgUm95 IFBldGVya29mc2t5DQo+ID4gCUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtY2RuaS1sb2dn aW5nLTIwLnR4dA0KPiA+IAlQYWdlcyAgICAgICAgICAgOiA1Nw0KPiA+IAlEYXRlICAgICAgICAg ICAgOiAyMDE1LTEwLTE2DQo+ID4NCj4gPiBBYnN0cmFjdDoNCj4gPiAgIFRoaXMgbWVtbyBzcGVj aWZpZXMgdGhlIExvZ2dpbmcgaW50ZXJmYWNlIGJldHdlZW4gYSBkb3duc3RyZWFtIENETg0KPiA+ ICAgKGRDRE4pIGFuZCBhbiB1cHN0cmVhbSBDRE4gKHVDRE4pIHRoYXQgYXJlIGludGVyY29ubmVj dGVkIGFzIHBlciB0aGUNCj4gPiAgIENETiBJbnRlcmNvbm5lY3Rpb24gKENETkkpIGZyYW1ld29y ay4gIEZpcnN0LCBpdCBkZXNjcmliZXMgYQ0KPiA+ICAgcmVmZXJlbmNlIG1vZGVsIGZvciBDRE5J IGxvZ2dpbmcuICBUaGVuLCBpdCBzcGVjaWZpZXMgdGhlIENETkkNCj4gPiAgIExvZ2dpbmcgRmls ZSBmb3JtYXQgYW5kIHRoZSBhY3R1YWwgcHJvdG9jb2wgZm9yIGV4Y2hhbmdlIG9mIENETkkNCj4g PiAgIExvZ2dpbmcgRmlsZXMuDQo+ID4NCj4gPg0KPiA+IFRoZSBJRVRGIGRhdGF0cmFja2VyIHN0 YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KPiA+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY2RuaS1sb2dnaW5nLw0KPiA+DQo+ID4gVGhlcmUncyBhbHNv IGEgaHRtbGl6ZWQgdmVyc2lvbiBhdmFpbGFibGUgYXQ6DQo+ID4gaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWlldGYtY2RuaS1sb2dnaW5nLTIwDQo+ID4NCj4gPiBBIGRpZmYgZnJv bSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4gaHR0cHM6Ly93d3cu aWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtY2RuaS1sb2dnaW5nLTIwDQo+ID4NCj4g Pg0KPiA+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBm cm9tIHRoZSB0aW1lIG9mDQo+IHN1Ym1pc3Npb24NCj4gPiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVy c2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KPiA+DQo+ID4g SW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Og0K PiA+IGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvDQo+ID4NCj4gPiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IENETmkgbWFpbGlu ZyBsaXN0DQo+ID4gQ0ROaUBpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vY2RuaQ0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gQ0ROaSBtYWlsaW5nIGxpc3QNCj4gQ0ROaUBpZXRmLm9yZw0KPiBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCg== From nobody Fri Oct 16 16:12:45 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B835C1A702D for ; Fri, 16 Oct 2015 16:12:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.666 X-Spam-Level: X-Spam-Status: No, score=-101.666 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_37=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1t8uyL_-Hjm6 for ; Fri, 16 Oct 2015 16:12:40 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 324EF1A702A for ; Fri, 16 Oct 2015 16:12:40 -0700 (PDT) Received: from pps.filterd (m0049401.ppops.net [127.0.0.1]) by m0049401.ppops.net-0018ba01. (8.15.0.59/8.15.0.59) with SMTP id t9GN7CNs016043; Fri, 16 Oct 2015 19:12:38 -0400 Received: from stntexhc12.cis.neustar.com ([156.154.17.216]) by m0049401.ppops.net-0018ba01. with ESMTP id 1xk94x0334-1 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Fri, 16 Oct 2015 19:12:38 -0400 Received: from STNTEXMB10.cis.neustar.com ([169.254.5.189]) by stntexhc12.cis.neustar.com ([::1]) with mapi id 14.03.0158.001; Fri, 16 Oct 2015 19:12:37 -0400 From: "Peterson, Jon" To: Ben Niven-Jenkins Thread-Topic: [CDNi] Jon's commet on draft-ietf-cdni-redirection Thread-Index: AQHRB0Sd6BAt8jKfVkKtIgZAGUcIrZ5tCBuAgAD6vYCAABV5AIAAj6oA///nZQA= Date: Fri, 16 Oct 2015 23:12:36 +0000 Message-ID: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.9.150325 x-originating-ip: [192.168.128.87] Content-Type: multipart/alternative; boundary="_000_D246855416520Djonpetersonneustarbiz_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33, 0.0.0000 definitions=2015-10-16_16:2015-10-15,2015-10-16,1970-01-01 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 kscore.is_bulkscore=0 kscore.compositescore=1 compositescore=0.9 suspectscore=0 phishscore=0 bulkscore=0 kscore.is_spamscore=0 rbsscore=0.9 spamscore=0 urlsuspectscore=0.9 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1508030000 definitions=main-1510160413 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 23:12:43 -0000 --_000_D246855416520Djonpetersonneustarbiz_ Content-Type: text/plain; charset="euc-kr" Content-Transfer-Encoding: base64 DQpPZiBjb3Vyc2UgaXQgZGVwZW5kcyBvbiB3aGF0IGFuZ2xlIHlvdSBsb29rIGF0IHRoZSBwcm9i bGVtIGZyb20sIGJ1dCBpZiB0aGVyZSdzIG5vIHByb2JsZW0gd2l0aCBIVFRQUyByZWRpcmVjdGlv biAoMzAyIG92ZXIgVExTIGZyb20gdUNETiB0byBkQ0ROKSwgYW5kIG5vIHByb2JsZW0gd2l0aCBE TlMgcmVkaXJlY3Rpb24gd2l0aCBETlNTRUMsIGJ1dCB0aGVyZSBpcyBhIHByb2JsZW0gd2hlbiB5 b3UgZG8gRE5TIHJlZGlyZWN0aW9uIHdpdGhvdXQgRE5TU0VDLCBJIHdvdWxkIG9yZGluYXJpbHkg bG9jYXRlIHRoZSBwcm9ibGVtIHRoZXJlLg0KDQpUaGUgaW5zZWN1cml0eSBvZiByZWRpcmVjdGlu ZyB3aXRoIHRoZSBETlMgKGluIHRoZSBhYnNlbmNlIG9mIEROU1NFQykgaXMgbW9yZW92ZXIgYSBw cm9ibGVtIG11Y2ggYmlnZ2VyIHRoYW4gQ0ROcy4gVGhlcmUgd2FzIGEgZHJhZnQgYSBmZXcgeWVh cnMgYWdvIGNhbGxlZCB0aGUgIkhBUkQgcHJvYmxlbSIgZHJhZnQsIHdoZXJlICJIQVJEIiBzdG9v ZCBmb3IgImhpZ2ggYXNzdXJhbmNlIHJlLWRpcmVjdGlvbiIgdGhhdCBsb29rZWQgYXQgdGhpcyBh cyBhIGdlbmVyYWwgcHJvYmxlbSBpbnZvbHZpbmcgYXBwbGljYXRpb25zIGJleW9uZCBIVFRQIGxp a2UgWE1QUCwgYW5kIG5vdGluZyB0aGF0IGl0IGhhcHBlbmVkIGZvciByZXNvdXJjZSByZWNvcmRz IGxpa2UgU1JWIGJleW9uZCBDTkFNRS4gSXQgaGFzIGJlZW4gYSBrbm93biBpc3N1ZSBmb3IgYSB2 YXJpZXR5IG9mIHZpcnR1YWwgaG9zdGluZyBhcmNoaXRlY3R1cmVzLCB3aGljaCBoYXZlIHByb3Bl cnRpZXMgc2ltaWxhciB0byBDRE4gaW50ZXJjb25uZWN0aW9uLCBmb3Igc29tZSB0aW1lLiBJIGhh dmUgYSB0b3VnaCB0aW1lIHVuZGVyc3RhbmRpbmcgd2h5IHdlIHdvdWxkbid0IHdhbnQgdG8gYWNr bm93bGVkZ2UgaXQgYXMgdGhlIHByb2JsZW0gaGVyZS4gIFNheWluZyB0aGUgcHJvYmxlbSBpcyB0 aGUgZGlmZmljdWx0eSBpbiBnZXR0aW5nIGtleXMgdG8gZXN0YWJsaXNoIGEgVExTIGNvbm5lY3Rp b24gaXMgdG8gbWUgc29ydCBvZiBsaWtlIHNheWluZyB0aGUgcHJvYmxlbSB3aXRoIGJlaW5nIHRp ZWQgdG8gYSBzdG9uZSBhdCB0aGUgYm90dG9tIG9mIGEgbGFrZSBpcyB0aGF0IHlvdSBkb24ndCBo YXZlIGEgc2N1YmEgdGFuay4NCg0KQnV0IHJlYWxseSwgdGhpcyB3YXMgYW4gb2ZmaGFuZCByZW1h cmsgYXQgYSBtaWMuIElmIG5vIGVsc2UgY2FyZXMsIGRvIHdoYXQgeW91J2QgbGlrZSBvdmVyIG15 IG9iamVjdGlvbnMuIEkgdGhpbmsgdGhlIG5ldyBwcm9wb3NlZCB0ZXh0IGlzIG1vcmUgaGVscGZ1 bCB0byBpbXBsZW1lbnRlcnMsIGJ1dCBpdCBpcyBzb2x1dGlvbiB0ZXh0IHJhdGhlciB0aGFuIHBy b2JsZW0gdGV4dCwgYW5kIGRvZXMgbm90IGRpZmZlcmVudGlhdGUgdGhlIHNpdHVhdGlvbiBmb3Ig SFRUUFMgYW5kIGluc2VjdXJlIEROUywgc28gaXQgZG9lc24ndCBhZGRyZXNzIG15IGNvbmNlcm4u DQoNCkpvbiBQZXRlcnNvbg0KTmV1c3RhciwgSW5jLg0KDQpGcm9tOiBCZW4gTml2ZW4tSmVua2lu cyA8YmVuQG5pdmVuLWplbmtpbnMuY28udWs8bWFpbHRvOmJlbkBuaXZlbi1qZW5raW5zLmNvLnVr Pj4NCkRhdGU6IEZyaWRheSwgT2N0b2JlciAxNiwgMjAxNSBhdCAxMDo0MCBBTQ0KVG86IEpvbiBQ ZXRlcnNvbiA8am9uLnBldGVyc29uQG5ldXN0YXIuYml6PG1haWx0bzpqb24ucGV0ZXJzb25AbmV1 c3Rhci5iaXo+Pg0KQ2M6ICJGcmFuY29pcyBMZSBGYXVjaGV1ciAoZmxlZmF1Y2gpIiA8ZmxlZmF1 Y2hAY2lzY28uY29tPG1haWx0bzpmbGVmYXVjaEBjaXNjby5jb20+PiwgImNkbmlAaWV0Zi5vcmc8 bWFpbHRvOmNkbmlAaWV0Zi5vcmc+IiA8Y2RuaUBpZXRmLm9yZzxtYWlsdG86Y2RuaUBpZXRmLm9y Zz4+DQpTdWJqZWN0OiBSZTogW0NETmldIEpvbidzIGNvbW1ldCBvbiBkcmFmdC1pZXRmLWNkbmkt cmVkaXJlY3Rpb24NCg0KSGkgSm9uLA0KDQpPbiAxNiBPY3QgMjAxNSwgYXQgMTc6MDYsIFBldGVy c29uLCBKb24gPGpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpejxtYWlsdG86am9uLnBldGVyc29uQG5l dXN0YXIuYml6Pj4gd3JvdGU6DQoNCg0KSG93IEROUyByZWRpcmVjdGlvbiB3b3JrcyBpcyB0aGF0 IHRoZSBVc2VyIEFnZW50IGRvZXMgYSByZXNvbHV0aW9uIGZvcg0KZm9vLmV4YW1wbGUgYW5kIGl0 IGdldHMgYSByZXNwb25zZSBmb3IgZm9vLmV4YW1wbGUuIFRoZSBmYWN0IGEgQ05BTUUgaXMNCnBy ZXNlbnQgJiByZXNvbHZlZCBieSB0aGUgRE5TIHJlc29sdmVyIGlzIGludmlzaWJsZSB0byB0aGUg VXNlciBBZ2VudA0KKGV2aWRlbmNlZCBieSB0aGUgZmFjdCB0aGUgVVJMIGJhciBpbiB0aGUgYnJv d3NlciBkb2Vzbqn2dCBjaGFuZ2UgZG9tYWluDQpuYW1lL2hvc3RuYW1lIHdoZW4gRE5TIHJlZGly ZWN0aW9uIGlzIHBlcmZvcm1lZCkuDQoNCkl0IGlzIGNlcnRhaW5seSBpbnZpc2libGUgdG8gdGhl IGJyb3dzZXIgd2hlbiBldmVyeSBkQ0ROIGhvbGRzIHRoZSBwcml2YXRlDQprZXkgb2YgZXZlcnkg dUNETiB0aGF0IG1pZ2h0IHJlZGlyZWN0IHRvIGl0LCBhcyB5b3Ugc3RpcHVsYXRlIGJlbG93Lg0K DQpJIGV4cGxhaW5lZCBob3cgaXQgaXMgZG9uZSBpbiB0aGUgbWFqb3JpdHkgb2YgY2FzZXMgdG9k YXkuIFRoYXQgaXNuoa90IHRoZSBvbmx5IHNvbHV0aW9uLCBLZXlsZXNzIFNTTCBpcyBhbm90aGVy IGZvciBleGFtcGxlLg0KDQpJZg0KdGhhdCBpcyBhbiBvcGVyYXRpb25hbCByZXF1aXJlbWVudCBv ZiB0aGUgRE5TIHJlZGlyZWN0aW9uIG1lY2hhbmlzbSBpbg0KY2RuaS1yZWRpcmVjdGlvbiwgaXQg bmVlZHMgdG8gYmUgbWFkZSBleHBsaWNpdC4NCg0KSXShr3Mgbm90IGFuIG9wZXJhdGlvbmFsIHJl cXVpcmVtZW50IElNTywgdGhlIG9wZXJhdGlvbmFsIHJlcXVpcmVtZW50IGlzIHRoYXQgdGhlIGRD RE4gaXMgYWJsZSB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UgYW5k IHRvIHBlcmZvcm0gZW5jcnlwdGlvbiAoYW5kIGRlY3J5cHRpb24pIG9mIHRoZSBUTFMgY2hhbm5l bC4NCg0KVGhlIHByb3Bvc2VkIHRleHQganVzdA0Kc2F5cyB0aGF0ICJhbnkgc3Vycm9nYXRlIG9y IHJlcXVlc3Qgcm91dGVyIHRvIHdoaWNoIHRoZSBVc2VyIEFnZW50IGlzDQpyZWRpcmVjdGVkIG5l ZWRzIHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtl Ig0KZXRjLiwgd2hpY2ggY291bGQgYmUgcmVhZCB0byBpbXBseSB0aGF0IGFzIGEgc29sdXRpb24s IGJ1dCBub3QgaWYgeW91DQpkb24ndCB1bmRlcnN0YW5kIHdoYXQgdGhlIHByb2JsZW0gaXMgaW4g dGhlIGZpcnN0IHBsYWNlLiBJIHdhcyBhc2tpbmcgdGhhdA0KdGhpcyBhY2tub3dsZWRnZSB0aGUg cHJvYmxlbSwgbm90IHNwZWNpZnkgYSBzb2x1dGlvbi4NCg0KR29vZCwgdGhhdKGvcyB3aGF0IHdl IHdlcmUgdHJ5aW5nIHRvIGRvLCBtYXliZSB0aGUgdGV4dCB3ZSB1c2VkIG5lZWRzIHNvbWUgcmVm aW5lbWVudCB0byBiZSBiZXR0ZXIgdW5kZXJzdGFuZGFibGUgdG8gb3RoZXJzIGJ1dCB3ZSB3b3Jk ZWQgaXQgdGhlIHdheSBpdCBpcyB0byBleHBsaWNpdGx5IGF2b2lkIHN1Z2dlc3RpbmcgYSBzb2x1 dGlvbi4NCg0KTW9yZW92ZXIsIHRoZSBzdWJzdGFuY2Ugb2YgbXkgY29tbWVudCB3YXMgdGhhdCB0 aGUgcHJvYmxlbSBpcyBkaWZmZXJlbnQNCmZvciBETlMgcmVkaXJlY3Rpb24gdGhhbiBpdCBpcyBm b3IgSFRUUFMgcmVkaXJlY3Rpb24uDQpIVFRQUyByZWRpcmVjdGlvbg0Kc2hvdWxkbid0IHJlcXVp cmUgZXZlcnkgZENETiB0byBoYXZlIGV2ZXJ5IHVDRE5zIHByaXZhdGUga2V5aW5nIG1hdGVyaWFs Lg0KVGhlIHByb3Bvc2VkIHRleHQgdHJlYXRzIHRoaXMgbGlrZSB0aGUgdHdvIG1ldGhvZHMgaGF2 ZSB0aGUgc2FtZQ0KcHJvcGVydGllcy4NCg0KSSB0aGluayBpdCBtYXkgZGVwZW5kIHdoYXQgYW5n bGUgeW91IHZpZXcgdGhlIHByb2JsZW0gZnJvbS4gRnJvbSBteSBhbmdsZSBvZiB2aWV3IHRoZSBw cm9ibGVtIGlzIHRoYXQgdGhlIGRDRE4gbmVlZHMgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRo ZSBUTFMgaGFuZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBjaGFu bmVsLiBXaGF0IHRoZSBkQ0ROIG5lZWRzIGluIG9yZGVyIHRvIGRvIHRoYXQgaXMgdGhlIHNhbWUg aW4gYm90aCBjYXNlczogcHJpdmF0ZSBrZXlzLCBvciBzb21lIG90aGVyIG1lY2hhbmlzbSBzdWNo IGFzIEtleWxlc3MgU1NMIHRoYXQgd2lsbCBlbmFibGUgdGhlIGRDRE4gdG8gY29tcGxldGUgdGhl IGhhbmRzaGFrZSBhbmQgZW5jcnlwdC9kZWNyeXB0IHRoZSB0cmFmZmljLg0KDQpUaGUgZmFjdCB0 aGF0IGZvciBhIGxvdCBvZiBIVFRQUyAzMDIgcmVkaXJlY3Rpb24gY2FzZXMgdGhlIGRDRE4gd2ls bCBiZSByZWRpcmVjdGluZyB0byBhIGhvc3RuYW1lIHVuZGVyIHRoZSBkQ0ROoa9zIGNvbnRyb2wg KGJ1dCB0aGF0IGlzIG5vdCBndWFyYW50ZWVkKSBtYXkgbWFrZSBiZWluZyBhYmxlIHRvIHN1Y2Nl c3NmdWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFrZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0 aW9uIG9mIHRoZSBUTFMgY2hhbm5lbCBlYXNpZXIgZm9yIHRoZSBkQ0ROIGJ1dCBpdCBkb2VzbqGv dCBjaGFuZ2UgdGhlIGJhc2ljIHByb2JsZW0gb2Ygd2hhdCB0aGUgZENETiBuZWVkcyBpbiBvcmRl ciB0byBkbyBpdHMgam9iLiBBbmQgZm9yIChhdCBsZWFzdCBzb21lKSBjYXNlcyB3aGVyZSB0aGUg MzAyIHJlZGlyZWN0aW9uIGlzIHRvIGEgaG9zdG5hbWUgbm90IHVuZGVyIGNvbnRyb2wgb2YgdGhl IGRDRE4gdGhlIHByb3BlcnRpZXMgYXJlIHRoZSBzYW1lIGZvciBib3RoIEROUyAmIEhUVFBTIDMw MiByZWRpcmVjdGlvbi4NCg0KVGhlcmVmb3JlIGFzIGxvbmcgYXMgdGhlIElQIGFkZHJlc3MoZXMp IGluIHRoZSBETlMgcmVzcG9uc2UgcHJlc2VudHMgdGhlDQpjb3JyZWN0IGNlcnRpZmljYXRlIGZv ciBmb28uZXhhbXBsZSBhbmQgaGFzIHRoZSBjb3JyZWN0IGNyZWRlbnRpYWxzIChlLmcuDQpQcml2 YXRlIGtleSBmb3IgZm9vLmV4YW1wbGUpIHRvIGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlICYN CmVuY3J5cHQvZGVjcnlwdCB0cmFmZmljIG9uIHRoYXQgVExTIHNlc3Npb24gdGhlIFVzZXIgQWdl bnQgd2lsbCBub3QNCmNvbXBsYWluLiBUaGlzIGlzIGhvdyBETlMtYmFzZWQgSFRUUFMgcmVkaXJl Y3Rpb24gaXMgZG9uZSBpbiBDRE5zIHRvZGF5DQp3aGVyZSB0eXBpY2FsbHkgYSBDU1Agd2lsbCBw cm92aWRlIHRoZWlyIGNlcnRpZmljYXRlICYgcHJpdmF0ZSBrZXkgdG8gdGhlDQpDRE4gc28gdGhl IENETiBjYW4gdGVybWluYXRlIFRMUyBzZXNzaW9ucyBzdWNjZXNzZnVsbHkgb24gdGhlIENTUKn2 cw0KYmVoYWxmLiB3aGljaCBtZWFucyBpZiBIVFRQUyByZWRpcmVjdGlvbiBpcyBpbnNlY3VyZSBm b3IgQ0ROSSB0aGVuIEhUVFBTDQpyZWRpcmVjdGlvbiB1c2VkIGJ5IENETnMgaW4gdGhlIHdpbGQg dG9kYXkgKHdpdGhvdXQgQ0ROSSkgaXMgYWxzbw0KaW5zZWN1cmUgKHdoaWNoIGl0IGlzbqn2dCku DQoNCklkZW50aWZ5aW5nIGEga25vd24gd29ya2Fyb3VuZCBkb2VzIG5vdCBtZWFuIHRoZXJlIGlz bid0IGEgcHJvYmxlbS4gVGhhdA0KdGhlcmUgaXMgYSB3b3JrYXJvdW5kIGlzIHByb29mIHRoZXJl IGlzIGEgcHJvYmxlbS4NCg0KSaGvbSBub3Qgc3VyZSBJoa9kIGNhbGwgdGhlIHdheSB0aGF0IHRo ZSBtYWpvcml0eSBvZiBDRE4gZGVsaXZlcmVkIEhUVFBTIHRyYWZmaWMgaXMgZGVsaXZlcmVkIGEg d29ya2Fyb3VuZCBteXNlbGYgKEkgb25seSBkZXNjcmliZWQgdGhlIG1vc3QgY29tbW9uIG1lY2hh bmlzbSwgdGhlcmUgYXJlIG90aGVycyBtZWNoYW5pc21zIHRoYXQgZG9uoa90IHJlbHkgb24gc2hh cmluZyB0aGUgcHJpdmF0ZSBrZXkgYW5kIHdoaWNoIGFyZSB1c2VkIGluIHRoZSB3aWxkLCBlLmcu IEtleWxlc3MgU1NMKS4NCg0KQnV0IHRoYXShr3Mgb2ZmLXRvcGljIHNvIGxldKGvcyBtb3ZlIG9u Lg0KDQoNCklNTyBJIHRoaW5rIHRoZSByZWFsIHByb2JsZW0gaXMgYSBkaWZmZXJlbnQgdGhpbmcg dGhhdA0KZHJhZnQtc2xvdmV0c2tpeS1jZG5pLWh0dHBzLWRlbGVnYXRpb24tYXBwcm9hY2hlcyBo aW50cyBhdCB3aXRob3V0DQpzdGF0aW5nIGV4cGxpY2l0bHkuIFRoYXQgaXMgaG93IGZhciB3aWxs IGEgQ1NQIHRydXN0IGRlbGVnYXRpbmcgaXRzDQpjcmVkZW50aWFscyAoZS5nLiBQcml2YXRlIGtl eSkgZ2l2ZW4gdGhhdCB0aGUgY29uc2VxdWVuY2VzIG9mIGxlYWthZ2Ugb2YNCnRob3NlIGNyZWRl bnRpYWxzIGFyZSB2ZXJ5IGJhZC4gVGhlcmUgYXJlIHBvc3NpYmxlIHNvbHV0aW9ucyB0byBhdm9p ZCB0aGUNCkNTUCBoYXZpbmcgdG8gZGlzdHJpYnV0ZSB0aGVpciBjcmVkZW50aWFscyAoZS5nLiBL ZXlsZXNzIFNTTCkgYnV0IGZyb20NCnRoZSBwZXJzcGVjdGl2ZSBvZiB0aGUgcmVkaXJlY3Rpb24g ZHJhZnQgdGhlean2cmUgb3V0IG9mIHNjb3BlIElNTy4NCg0KVGhlIGZhY3QgdGhhdCB0aGVyZSBh cmUgdHdvIGRyYWZ0cyB0cnlpbmcgdG8gaW1wcm92ZSB0aGUgd29ya2Fyb3VuZCBkb2VzDQpub3Qg Y29udmluY2UgbWUgdGhhdCB0aGUgcHJvYmxlbSBpc24ndCB3b3J0aCBub3RpbmcuDQoNClRoZSBw cm9ibGVtIGlzIHdvcnRoIG5vdGluZywgd2hpY2ggaXMgd2hhdCB3ZSBkaWQsIGFzIG5vdGVkIGFi b3ZlIGl0IHNlZW1zIG91ciB0ZXh0IG5lZWRzIG1vcmUgd29yay4NCg0KSXQgaXMgYWxzbyB3b3J0 aCBub3RpbmcgSU1PIHRoYXQgbmVpdGhlciBvZiB0aGUgdHdvIGRyYWZ0cyBhY3R1YWxseSBkZXNj cmliZSBvciBtZW50aW9uIHRoZSBwcm9ibGVtIHdlIGFyZSBkaXNjdXNzaW5nIGJ1dCBtZXJlbHkg aGludCBhdCBpdCBhbmQgdGhlbiBhdHRyaWJ1dGUgdGhlIGNhdXNlIG9mIGl0IHRvIHRoZSBwcmVz ZW5jZSBvZiBhIENOQU1FIGluIHRoZSBjYWxsIGZsb3csIHJhdGhlciB0aGFuIHRoZSB0cnVlIGNh dXNlIHdoaWNoIGlzIGxhY2sgb2YgYWJpbGl0eSBvZiB0aGUgZENETiB0byBzdWNjZXNzZnVsbHkg Y29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UuDQoNCkFueXdheSwgZG9lcyB0aGlzIHByb3Bvc2Fs IGdldCB1cyBjbG9zZXIgdG8gc29tZSB0ZXh0IHlvdaGvZCBiZSBoYXBweSB3aXRoPw0KDQo9PT1P TEQ9PT0NClRoZSBSZWRpcmVjdGlvbiBJbnRlcmZhY2UgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50 IG1pZ2h0IGJlIHVzZWQgdG8gcmVkaXJlY3QgYSByZXF1ZXN0IHdoZXJlIHRoZSBVc2VyIEFnZW50 IHdpbGwgc3Vic2VxdWVudGx5IGF0dGVtcHQgdG8gZXN0YWJsaXNoIGEgVExTIHNlc3Npb24gd2l0 aCB0aGUgUmVkaXJlY3Rpb24gVGFyZ2V0LiAgSW4gc3VjaCBhIGNhc2UsIGFueSBzdXJyb2dhdGUg b3IgcmVxdWVzdCByb3V0ZXIgdG8gd2hpY2ggdGhlIFVzZXIgQWdlbnQgaXMgcmVkaXJlY3RlZCBu ZWVkcyB0byBiZSBhYmxlIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFr ZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0aW9uIG9mIHRoZSBUTFMgY2hhbm5lbC4gIE1lY2hhbmlz bXMgdG8gZGlzdHJpYnV0ZSB0aGUgcmVxdWlyZWQgaW5mb3JtYXRpb24gYW5kL29yIGNvbmZpZ3Vy YXRpb24sIHN1Y2ggYXMgcHJpdmF0ZSBrZXlzLCB0byBzdXJyb2dhdGVzIGFuZCByZXF1ZXN0IHJv dXRlcnMgaW4gZENETnMgYXJlIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgZG9jdW1lbnQuDQo9 PT1ORVc9PT0NClRoZSBSZWRpcmVjdGlvbiBJbnRlcmZhY2UgZGVmaW5lZCBpbiB0aGlzIGRvY3Vt ZW50IG1pZ2h0IGJlIHVzZWQgdG8gcmVkaXJlY3QgYSByZXF1ZXN0IHdoZXJlIHRoZSBVc2VyIEFn ZW50IHdpbGwgc3Vic2VxdWVudGx5IGF0dGVtcHQgdG8gZXN0YWJsaXNoIGEgVExTIHNlc3Npb24g d2l0aCB0aGUgUmVkaXJlY3Rpb24gVGFyZ2V0LiBJbiBzdWNoIGEgY2FzZSwgYW55IHN1cnJvZ2F0 ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2VudCBpcyByZWRpcmVjdGVk IG5lZWRzIHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNo YWtlIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsLg0KDQpUaGUg cHJpdmF0ZSBrZXkgZm9yIHRoZSBob3N0IGluIHRoZSBSVCBpcyBuZWVkZWQgaW4gb3JkZXIgdG8g c3VjY2Vzc2Z1bGx5IGVzdGFibGlzaCBhIFRMUyBzZXNzaW9uLiBUaGUgbW9zdCB3aWRlc3ByZWFk IG1lY2hhbmlzbSBjdXJyZW50bHkgdXNlZCBieSAobm9uLWludGVyY29ubmVjdGVkKSBDRE5zIGlz IGZvciB0aGUgb3duZXIgb2YgdGhlIGhvc3QgaW4gdGhlIFJUIHNoYXJpbmcgdGhlaXIgcHJpdmF0 ZSBrZXkgd2l0aCB0aGVpciBDRE4ocykgb2YgY2hvaWNlLiBJbiBjYXNlcyB3aGVyZSB0aGUgb3du ZXIgb2YgdGhlIGhvc3QgaXMgbm90IHdpbGxpbmcgdG8gc2hhcmUgdGhlaXIgcHJpdmF0ZSBrZXks IG90aGVyIG1lY2hhbmlzbXMgdGhhdCBhbGxvdyB0aGUgb3duZXIgdG8gbm90IHNoYXJlIHRoZWly IHByaXZhdGUga2V5IGFyZSB1c2VkLCBmb3IgZXhhbXBsZSBLZXlsZXNzIFNTTCBbUkVGXS4NCg0K Q0ROSSBieSBkZWZpbml0aW9uIGltcGxpZXMgdGhhdCBhIENvbnRlbnQgUHJvdmlkZXKhr3MgY29u dGVudCB3aWxsIGJlIGRlbGl2ZXJlZCBieSBDRE5zIG90aGVyIHRoYW4gdGhlIENETiB3aXRoIHdo aWNoIHRoZSBDb250ZW50IFByb3ZpZGVyIGhhcyBhIGRpcmVjdCBidXNpbmVzcyByZWxhdGlvbnNo aXAuIFRoZXJlZm9yZSwgd2hpbGUgQ0ROSSBkb2VzIG5vdCBpbnRyb2R1Y2UgYW55IG5ldyB0ZWNo bmljYWwgcmVxdWlyZW1lbnRzIG9uIGRDRE5zIHdoZW4gZXN0YWJsaXNoaW5nIFRMUyBzZXNzaW9u cywgQ29udGVudCBQcm92aWRlcnMgbWF5IGJlIGxlc3Mgd2lsbGluZyB0byBoYXZlIHRoZWlyIHBy aXZhdGUga2V5IHNoYXJlZCB3aXRoIGRDRE5zIHRoYW4gdGhleSBhcmUgd2l0aCB0aGVpciBjaG9z ZW4gQ0ROKHMpIGluIGEgbm9uLWludGVyY29ubmVjdGVkIHNjZW5hcmlvLg0KDQpNZWNoYW5pc21z IHRvIGRpc3RyaWJ1dGUgdGhlIHJlcXVpcmVkIGluZm9ybWF0aW9uIGFuZC9vciBjb25maWd1cmF0 aW9uIHRvIHN1cnJvZ2F0ZXMgYW5kIHJlcXVlc3Qgcm91dGVycyBpbiBkQ0ROcyB0byBlbmFibGUg YSBkQ0ROIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSBUTFMgaGFuZHNoYWtlcyBhbmQgdG8gcGVy Zm9ybSBlbmNyeXB0aW9uIG9mIHRoZSBUTFMgY2hhbm5lbCBmb3IgYSBwYXJ0aWN1bGFyIGhvc3Qs IHN1Y2ggYXMgcHJpdmF0ZSBrZXlzIG9yIHRoZSBVUkkvSVAgYWRkcmVzcyBvZiBhIGtleSBzZXJ2 ZXIsIGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50Lg0KDQpbUkVGXSBodHRw czovL2Jsb2cuY2xvdWRmbGFyZS5jb20va2V5bGVzcy1zc2wtdGhlLW5pdHR5LWdyaXR0eS10ZWNo bmljYWwtZGV0YWlscy8NCj09PUVORD09PQ0KDQpCZW4NCg0KDQpKb24gUGV0ZXJzb24NCk5ldXN0 YXIsIEluYy4NCg0KDQo= --_000_D246855416520Djonpetersonneustarbiz_ Content-Type: text/html; charset="euc-kr" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PWV1Yy1rciI+DQo8L2hlYWQ+DQo8Ym9keSBzdHlsZT0id29yZC13 cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1i cmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtc2l6ZTog MTRweDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxkaXY+PGJyPg0KPC9k aXY+DQo8ZGl2Pk9mIGNvdXJzZSBpdCBkZXBlbmRzIG9uIHdoYXQgYW5nbGUgeW91IGxvb2sgYXQg dGhlIHByb2JsZW0gZnJvbSwgYnV0IGlmIHRoZXJlJ3Mgbm8gcHJvYmxlbSB3aXRoIEhUVFBTIHJl ZGlyZWN0aW9uICgzMDIgb3ZlciBUTFMgZnJvbSB1Q0ROIHRvIGRDRE4pLCBhbmQgbm8gcHJvYmxl bSB3aXRoIEROUyByZWRpcmVjdGlvbiB3aXRoIEROU1NFQywgYnV0IHRoZXJlIGlzIGEgcHJvYmxl bSB3aGVuIHlvdSBkbyBETlMgcmVkaXJlY3Rpb24gd2l0aG91dA0KIEROU1NFQywgSSB3b3VsZCBv cmRpbmFyaWx5IGxvY2F0ZSB0aGUgcHJvYmxlbSB0aGVyZS48L2Rpdj4NCjxkaXY+PGJyPg0KPC9k aXY+DQo8ZGl2PlRoZSBpbnNlY3VyaXR5IG9mIHJlZGlyZWN0aW5nIHdpdGggdGhlIEROUyAoaW4g dGhlIGFic2VuY2Ugb2YgRE5TU0VDKSBpcyBtb3Jlb3ZlciBhIHByb2JsZW0gbXVjaCBiaWdnZXIg dGhhbiBDRE5zLiBUaGVyZSB3YXMgYSBkcmFmdCBhIGZldyB5ZWFycyBhZ28gY2FsbGVkIHRoZSAm cXVvdDtIQVJEIHByb2JsZW0mcXVvdDsgZHJhZnQsIHdoZXJlICZxdW90O0hBUkQmcXVvdDsgc3Rv b2QgZm9yICZxdW90O2hpZ2ggYXNzdXJhbmNlIHJlLWRpcmVjdGlvbiZxdW90OyB0aGF0IGxvb2tl ZCBhdCB0aGlzDQogYXMgYSBnZW5lcmFsIHByb2JsZW0gaW52b2x2aW5nIGFwcGxpY2F0aW9ucyBi ZXlvbmQgSFRUUCBsaWtlIFhNUFAsIGFuZCBub3RpbmcgdGhhdCBpdCBoYXBwZW5lZCBmb3IgcmVz b3VyY2UgcmVjb3JkcyBsaWtlIFNSViBiZXlvbmQgQ05BTUUuIEl0IGhhcyBiZWVuIGEga25vd24g aXNzdWUgZm9yIGEgdmFyaWV0eSBvZiB2aXJ0dWFsIGhvc3RpbmcgYXJjaGl0ZWN0dXJlcywgd2hp Y2ggaGF2ZSBwcm9wZXJ0aWVzIHNpbWlsYXIgdG8gQ0ROIGludGVyY29ubmVjdGlvbiwNCiBmb3Ig c29tZSB0aW1lLiBJIGhhdmUgYSB0b3VnaCB0aW1lIHVuZGVyc3RhbmRpbmcgd2h5IHdlIHdvdWxk bid0IHdhbnQgdG8gYWNrbm93bGVkZ2UgaXQgYXMgdGhlIHByb2JsZW0gaGVyZS4gJm5ic3A7U2F5 aW5nIHRoZSBwcm9ibGVtIGlzIHRoZSBkaWZmaWN1bHR5IGluIGdldHRpbmcga2V5cyB0byBlc3Rh Ymxpc2ggYSBUTFMgY29ubmVjdGlvbiBpcyB0byBtZSBzb3J0IG9mIGxpa2Ugc2F5aW5nIHRoZSBw cm9ibGVtIHdpdGggYmVpbmcgdGllZCB0byBhIHN0b25lDQogYXQgdGhlIGJvdHRvbSBvZiBhIGxh a2UgaXMgdGhhdCB5b3UgZG9uJ3QgaGF2ZSBhIHNjdWJhIHRhbmsuPC9kaXY+DQo8ZGl2Pjxicj4N CjwvZGl2Pg0KPGRpdj5CdXQgcmVhbGx5LCB0aGlzIHdhcyBhbiBvZmZoYW5kIHJlbWFyayBhdCBh IG1pYy4gSWYgbm8gZWxzZSBjYXJlcywgZG8gd2hhdCB5b3UnZCBsaWtlIG92ZXIgbXkgb2JqZWN0 aW9ucy4gSSB0aGluayB0aGUgbmV3IHByb3Bvc2VkIHRleHQgaXMgbW9yZSBoZWxwZnVsIHRvIGlt cGxlbWVudGVycywgYnV0IGl0IGlzIHNvbHV0aW9uIHRleHQgcmF0aGVyIHRoYW4gcHJvYmxlbSB0 ZXh0LCBhbmQgZG9lcyBub3QgZGlmZmVyZW50aWF0ZSB0aGUgc2l0dWF0aW9uDQogZm9yIEhUVFBT IGFuZCBpbnNlY3VyZSBETlMsIHNvIGl0IGRvZXNuJ3QgYWRkcmVzcyBteSBjb25jZXJuLjwvZGl2 Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+Sm9uIFBldGVyc29uPC9kaXY+DQo8ZGl2Pk5ldXN0 YXIsIEluYy48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZ X1NFQ1RJT04iPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjEx cHQ7IHRleHQtYWxpZ246bGVmdDsgY29sb3I6YmxhY2s7IEJPUkRFUi1CT1RUT006IG1lZGl1bSBu b25lOyBCT1JERVItTEVGVDogbWVkaXVtIG5vbmU7IFBBRERJTkctQk9UVE9NOiAwaW47IFBBRERJ TkctTEVGVDogMGluOyBQQURESU5HLVJJR0hUOiAwaW47IEJPUkRFUi1UT1A6ICNiNWM0ZGYgMXB0 IHNvbGlkOyBCT1JERVItUklHSFQ6IG1lZGl1bSBub25lOyBQQURESU5HLVRPUDogM3B0Ij4NCjxz cGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5Gcm9tOiA8L3NwYW4+QmVuIE5pdmVuLUplbmtp bnMgJmx0OzxhIGhyZWY9Im1haWx0bzpiZW5Abml2ZW4tamVua2lucy5jby51ayI+YmVuQG5pdmVu LWplbmtpbnMuY28udWs8L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xk Ij5EYXRlOiA8L3NwYW4+RnJpZGF5LCBPY3RvYmVyIDE2LCAyMDE1IGF0IDEwOjQwIEFNPGJyPg0K PHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlRvOiA8L3NwYW4+Sm9uIFBldGVyc29uICZs dDs8YSBocmVmPSJtYWlsdG86am9uLnBldGVyc29uQG5ldXN0YXIuYml6Ij5qb24ucGV0ZXJzb25A bmV1c3Rhci5iaXo8L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5D YzogPC9zcGFuPiZxdW90O0ZyYW5jb2lzIExlIEZhdWNoZXVyIChmbGVmYXVjaCkmcXVvdDsgJmx0 OzxhIGhyZWY9Im1haWx0bzpmbGVmYXVjaEBjaXNjby5jb20iPmZsZWZhdWNoQGNpc2NvLmNvbTwv YT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86Y2RuaUBpZXRmLm9yZyI+Y2RuaUBpZXRmLm9y ZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIj5jZG5pQGlldGYu b3JnPC9hPiZndDs8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+U3ViamVjdDog PC9zcGFuPlJlOiBbQ0ROaV0gSm9uJ3MgY29tbWV0IG9uIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVj dGlvbjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJ3 b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1s aW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgSm9uLA0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2Pg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIDE2IE9jdCAy MDE1LCBhdCAxNzowNiwgUGV0ZXJzb24sIEpvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpvbi5wZXRl cnNvbkBuZXVzdGFyLmJpeiIgY2xhc3M9IiI+am9uLnBldGVyc29uQG5ldXN0YXIuYml6PC9hPiZn dDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0K PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj5Ib3cgRE5TIHJlZGlyZWN0aW9uIHdvcmtzIGlzIHRoYXQgdGhlIFVzZXIgQWdlbnQgZG9l cyBhIHJlc29sdXRpb24gZm9yPGJyIGNsYXNzPSIiPg0KZm9vLmV4YW1wbGUgYW5kIGl0IGdldHMg YSByZXNwb25zZSBmb3IgZm9vLmV4YW1wbGUuIFRoZSBmYWN0IGEgQ05BTUUgaXM8YnIgY2xhc3M9 IiI+DQpwcmVzZW50ICZhbXA7IHJlc29sdmVkIGJ5IHRoZSBETlMgcmVzb2x2ZXIgaXMgaW52aXNp YmxlIHRvIHRoZSBVc2VyIEFnZW50PGJyIGNsYXNzPSIiPg0KKGV2aWRlbmNlZCBieSB0aGUgZmFj dCB0aGUgVVJMIGJhciBpbiB0aGUgYnJvd3NlciBkb2Vzbqn2dCBjaGFuZ2UgZG9tYWluPGJyIGNs YXNzPSIiPg0KbmFtZS9ob3N0bmFtZSB3aGVuIEROUyByZWRpcmVjdGlvbiBpcyBwZXJmb3JtZWQp LjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4NCkl0IGlzIGNlcnRh aW5seSBpbnZpc2libGUgdG8gdGhlIGJyb3dzZXIgd2hlbiBldmVyeSBkQ0ROIGhvbGRzIHRoZSBw cml2YXRlPGJyIGNsYXNzPSIiPg0Ka2V5IG9mIGV2ZXJ5IHVDRE4gdGhhdCBtaWdodCByZWRpcmVj dCB0byBpdCwgYXMgeW91IHN0aXB1bGF0ZSBiZWxvdy48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk aXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpJIGV4cGxhaW5lZCBob3cgaXQgaXMgZG9uZSBpbiB0 aGUgbWFqb3JpdHkgb2YgY2FzZXMgdG9kYXkuIFRoYXQgaXNuoa90IHRoZSBvbmx5IHNvbHV0aW9u LCBLZXlsZXNzIFNTTCBpcyBhbm90aGVyIGZvciBleGFtcGxlLjwvZGl2Pg0KPGRpdj48YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+ SWY8YnIgY2xhc3M9IiI+DQp0aGF0IGlzIGFuIG9wZXJhdGlvbmFsIHJlcXVpcmVtZW50IG9mIHRo ZSBETlMgcmVkaXJlY3Rpb24gbWVjaGFuaXNtIGluPGJyIGNsYXNzPSIiPg0KY2RuaS1yZWRpcmVj dGlvbiwgaXQgbmVlZHMgdG8gYmUgbWFkZSBleHBsaWNpdC48L2Rpdj4NCjwvYmxvY2txdW90ZT4N CjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpJdKGvcyBub3QgYW4gb3BlcmF0aW9uYWwgcmVx dWlyZW1lbnQgSU1PLCB0aGUgb3BlcmF0aW9uYWwgcmVxdWlyZW1lbnQgaXMgdGhhdCB0aGUgZENE TiBpcyBhYmxlIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFrZSBhbmQg dG8gcGVyZm9ybSBlbmNyeXB0aW9uIChhbmQgZGVjcnlwdGlvbikgb2YgdGhlIFRMUyBjaGFubmVs LjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+VGhlIHByb3Bvc2VkIHRleHQganVzdDxiciBjbGFzcz0iIj4N CnNheXMgdGhhdCAmcXVvdDthbnkgc3Vycm9nYXRlIG9yIHJlcXVlc3Qgcm91dGVyIHRvIHdoaWNo IHRoZSBVc2VyIEFnZW50IGlzPGJyIGNsYXNzPSIiPg0KcmVkaXJlY3RlZCBuZWVkcyB0byBiZSBh YmxlIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFrZSZxdW90OzxiciBj bGFzcz0iIj4NCmV0Yy4sIHdoaWNoIGNvdWxkIGJlIHJlYWQgdG8gaW1wbHkgdGhhdCBhcyBhIHNv bHV0aW9uLCBidXQgbm90IGlmIHlvdTxiciBjbGFzcz0iIj4NCmRvbid0IHVuZGVyc3RhbmQgd2hh dCB0aGUgcHJvYmxlbSBpcyBpbiB0aGUgZmlyc3QgcGxhY2UuIEkgd2FzIGFza2luZyB0aGF0PGJy IGNsYXNzPSIiPg0KdGhpcyBhY2tub3dsZWRnZSB0aGUgcHJvYmxlbSwgbm90IHNwZWNpZnkgYSBz b2x1dGlvbi48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQpHb29kLCB0aGF0oa9zIHdoYXQgd2Ugd2VyZSB0cnlpbmcgdG8gZG8s IG1heWJlIHRoZSB0ZXh0IHdlIHVzZWQgbmVlZHMgc29tZSByZWZpbmVtZW50IHRvIGJlIGJldHRl ciB1bmRlcnN0YW5kYWJsZSB0byBvdGhlcnMgYnV0IHdlIHdvcmRlZCBpdCB0aGUgd2F5IGl0IGlz IHRvIGV4cGxpY2l0bHkgYXZvaWQgc3VnZ2VzdGluZyBhIHNvbHV0aW9uLjwvZGl2Pg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+TW9yZW92ZXIsIHRoZSBzdWJzdGFuY2Ugb2YgbXkgY29tbWVudCB3YXMgdGhhdCB0aGUg cHJvYmxlbSBpcyBkaWZmZXJlbnQ8YnIgY2xhc3M9IiI+DQpmb3IgRE5TIHJlZGlyZWN0aW9uIHRo YW4gaXQgaXMgZm9yIEhUVFBTIHJlZGlyZWN0aW9uLjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiPkhUVFBTIHJlZGlyZWN0aW9uPGJyIGNsYXNzPSIiPg0Kc2hvdWxkbid0IHJlcXVpcmUgZXZl cnkgZENETiB0byBoYXZlIGV2ZXJ5IHVDRE5zIHByaXZhdGUga2V5aW5nIG1hdGVyaWFsLjxiciBj bGFzcz0iIj4NClRoZSBwcm9wb3NlZCB0ZXh0IHRyZWF0cyB0aGlzIGxpa2UgdGhlIHR3byBtZXRo b2RzIGhhdmUgdGhlIHNhbWU8YnIgY2xhc3M9IiI+DQpwcm9wZXJ0aWVzLjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCkkgdGhpbmsgaXQgbWF5IGRlcGVu ZCB3aGF0IGFuZ2xlIHlvdSB2aWV3IHRoZSBwcm9ibGVtIGZyb20uIEZyb20gbXkgYW5nbGUgb2Yg dmlldyB0aGUgcHJvYmxlbSBpcyB0aGF0IHRoZSBkQ0ROIG5lZWRzIHRvIHN1Y2Nlc3NmdWxseSBj b21wbGV0ZSB0aGUgVExTIGhhbmRzaGFrZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0aW9uIG9mIHRo ZSBUTFMgY2hhbm5lbC4gV2hhdCB0aGUgZENETiBuZWVkcyBpbiBvcmRlciB0byBkbyB0aGF0IGlz IHRoZSBzYW1lDQogaW4gYm90aCBjYXNlczogcHJpdmF0ZSBrZXlzLCBvciBzb21lIG90aGVyIG1l Y2hhbmlzbSBzdWNoIGFzIEtleWxlc3MgU1NMIHRoYXQgd2lsbCBlbmFibGUgdGhlIGRDRE4gdG8g Y29tcGxldGUgdGhlIGhhbmRzaGFrZSBhbmQgZW5jcnlwdC9kZWNyeXB0IHRoZSB0cmFmZmljLjwv ZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+VGhlIGZhY3QgdGhhdCBmb3Ig YSBsb3Qgb2YgSFRUUFMgMzAyIHJlZGlyZWN0aW9uIGNhc2VzIHRoZSBkQ0ROIHdpbGwgYmUgcmVk aXJlY3RpbmcgdG8gYSBob3N0bmFtZSB1bmRlciB0aGUgZENETqGvcyBjb250cm9sIChidXQgdGhh dCBpcyBub3QgZ3VhcmFudGVlZCkgbWF5IG1ha2UgYmVpbmcgYWJsZSB0byZuYnNwO3N1Y2Nlc3Nm dWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFrZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0aW9u IG9mIHRoZSBUTFMNCiBjaGFubmVsIGVhc2llciBmb3IgdGhlIGRDRE4gYnV0IGl0IGRvZXNuoa90 IGNoYW5nZSB0aGUgYmFzaWMgcHJvYmxlbSBvZiB3aGF0IHRoZSBkQ0ROIG5lZWRzIGluIG9yZGVy IHRvIGRvIGl0cyBqb2IuIEFuZCBmb3IgKGF0IGxlYXN0IHNvbWUpIGNhc2VzIHdoZXJlIHRoZSAz MDIgcmVkaXJlY3Rpb24gaXMgdG8gYSBob3N0bmFtZSBub3QgdW5kZXIgY29udHJvbCBvZiB0aGUg ZENETiB0aGUgcHJvcGVydGllcyBhcmUgdGhlIHNhbWUgZm9yIGJvdGggRE5TDQogJmFtcDsgSFRU UFMgMzAyIHJlZGlyZWN0aW9uLjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj5UaGVyZWZvcmUgYXMgbG9uZyBhcyB0aGUgSVAgYWRkcmVzcyhlcykg aW4gdGhlIEROUyByZXNwb25zZSBwcmVzZW50cyB0aGU8YnIgY2xhc3M9IiI+DQpjb3JyZWN0IGNl cnRpZmljYXRlIGZvciBmb28uZXhhbXBsZSBhbmQgaGFzIHRoZSBjb3JyZWN0IGNyZWRlbnRpYWxz IChlLmcuPGJyIGNsYXNzPSIiPg0KUHJpdmF0ZSBrZXkgZm9yIGZvby5leGFtcGxlKSB0byBjb21w bGV0ZSB0aGUgVExTIGhhbmRzaGFrZSAmYW1wOzxiciBjbGFzcz0iIj4NCmVuY3J5cHQvZGVjcnlw dCB0cmFmZmljIG9uIHRoYXQgVExTIHNlc3Npb24gdGhlIFVzZXIgQWdlbnQgd2lsbCBub3Q8YnIg Y2xhc3M9IiI+DQpjb21wbGFpbi4gVGhpcyBpcyBob3cgRE5TLWJhc2VkIEhUVFBTIHJlZGlyZWN0 aW9uIGlzIGRvbmUgaW4gQ0ROcyB0b2RheTxiciBjbGFzcz0iIj4NCndoZXJlIHR5cGljYWxseSBh IENTUCB3aWxsIHByb3ZpZGUgdGhlaXIgY2VydGlmaWNhdGUgJmFtcDsgcHJpdmF0ZSBrZXkgdG8g dGhlPGJyIGNsYXNzPSIiPg0KQ0ROIHNvIHRoZSBDRE4gY2FuIHRlcm1pbmF0ZSBUTFMgc2Vzc2lv bnMgc3VjY2Vzc2Z1bGx5IG9uIHRoZSBDU1Cp9nM8YnIgY2xhc3M9IiI+DQpiZWhhbGYuIHdoaWNo IG1lYW5zIGlmIEhUVFBTIHJlZGlyZWN0aW9uIGlzIGluc2VjdXJlIGZvciBDRE5JIHRoZW4gSFRU UFM8YnIgY2xhc3M9IiI+DQpyZWRpcmVjdGlvbiB1c2VkIGJ5IENETnMgaW4gdGhlIHdpbGQgdG9k YXkgKHdpdGhvdXQgQ0ROSSkgaXMgYWxzbzxiciBjbGFzcz0iIj4NCmluc2VjdXJlICh3aGljaCBp dCBpc26p9nQpLjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4NCklk ZW50aWZ5aW5nIGEga25vd24gd29ya2Fyb3VuZCBkb2VzIG5vdCBtZWFuIHRoZXJlIGlzbid0IGEg cHJvYmxlbS4gVGhhdDxiciBjbGFzcz0iIj4NCnRoZXJlIGlzIGEgd29ya2Fyb3VuZCBpcyBwcm9v ZiB0aGVyZSBpcyBhIHByb2JsZW0uPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+ DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KSaGvbSBub3Qgc3VyZSBJoa9kIGNhbGwgdGhl IHdheSB0aGF0IHRoZSBtYWpvcml0eSBvZiBDRE4gZGVsaXZlcmVkIEhUVFBTIHRyYWZmaWMgaXMg ZGVsaXZlcmVkIGEgd29ya2Fyb3VuZCBteXNlbGYgKEkgb25seSBkZXNjcmliZWQgdGhlIG1vc3Qg Y29tbW9uIG1lY2hhbmlzbSwgdGhlcmUgYXJlIG90aGVycyBtZWNoYW5pc21zIHRoYXQgZG9uoa90 IHJlbHkgb24gc2hhcmluZyB0aGUgcHJpdmF0ZSBrZXkgYW5kIHdoaWNoIGFyZSB1c2VkIGluIHRo ZSB3aWxkLA0KIGUuZy4gS2V5bGVzcyBTU0wpLjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXY+QnV0IHRoYXShr3Mgb2ZmLXRvcGljIHNvIGxldKGvcyBtb3ZlIG9uLjwvZGl2 Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJj aXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiI+SU1PIEkgdGhpbmsgdGhlIHJlYWwgcHJvYmxlbSBpcyBhIGRp ZmZlcmVudCB0aGluZyB0aGF0PGJyIGNsYXNzPSIiPg0KZHJhZnQtc2xvdmV0c2tpeS1jZG5pLWh0 dHBzLWRlbGVnYXRpb24tYXBwcm9hY2hlcyBoaW50cyBhdCB3aXRob3V0PGJyIGNsYXNzPSIiPg0K c3RhdGluZyBleHBsaWNpdGx5LiBUaGF0IGlzIGhvdyBmYXIgd2lsbCBhIENTUCB0cnVzdCBkZWxl Z2F0aW5nIGl0czxiciBjbGFzcz0iIj4NCmNyZWRlbnRpYWxzIChlLmcuIFByaXZhdGUga2V5KSBn aXZlbiB0aGF0IHRoZSBjb25zZXF1ZW5jZXMgb2YgbGVha2FnZSBvZjxiciBjbGFzcz0iIj4NCnRo b3NlIGNyZWRlbnRpYWxzIGFyZSB2ZXJ5IGJhZC4gVGhlcmUgYXJlIHBvc3NpYmxlIHNvbHV0aW9u cyB0byBhdm9pZCB0aGU8YnIgY2xhc3M9IiI+DQpDU1AgaGF2aW5nIHRvIGRpc3RyaWJ1dGUgdGhl aXIgY3JlZGVudGlhbHMgKGUuZy4gS2V5bGVzcyBTU0wpIGJ1dCBmcm9tPGJyIGNsYXNzPSIiPg0K dGhlIHBlcnNwZWN0aXZlIG9mIHRoZSByZWRpcmVjdGlvbiBkcmFmdCB0aGV5qfZyZSBvdXQgb2Yg c2NvcGUgSU1PLjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4NClRo ZSBmYWN0IHRoYXQgdGhlcmUgYXJlIHR3byBkcmFmdHMgdHJ5aW5nIHRvIGltcHJvdmUgdGhlIHdv cmthcm91bmQgZG9lczxiciBjbGFzcz0iIj4NCm5vdCBjb252aW5jZSBtZSB0aGF0IHRoZSBwcm9i bGVtIGlzbid0IHdvcnRoIG5vdGluZy48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpUaGUgcHJvYmxlbSBpcyB3b3J0aCBub3Rp bmcsIHdoaWNoIGlzIHdoYXQgd2UgZGlkLCBhcyBub3RlZCBhYm92ZSBpdCBzZWVtcyBvdXIgdGV4 dCBuZWVkcyBtb3JlIHdvcmsuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRp dj5JdCBpcyBhbHNvIHdvcnRoIG5vdGluZyBJTU8gdGhhdCBuZWl0aGVyIG9mIHRoZSB0d28gZHJh ZnRzIGFjdHVhbGx5IGRlc2NyaWJlIG9yIG1lbnRpb24gdGhlIHByb2JsZW0gd2UgYXJlIGRpc2N1 c3NpbmcgYnV0IG1lcmVseSBoaW50IGF0IGl0IGFuZCB0aGVuIGF0dHJpYnV0ZSB0aGUgY2F1c2Ug b2YgaXQgdG8gdGhlIHByZXNlbmNlIG9mIGEgQ05BTUUgaW4gdGhlIGNhbGwgZmxvdywgcmF0aGVy IHRoYW4gdGhlIHRydWUgY2F1c2Ugd2hpY2gNCiBpcyBsYWNrIG9mIGFiaWxpdHkgb2YgdGhlIGRD RE4gdG8gc3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlLjwvZGl2Pg0KPGRp dj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+QW55d2F5LCBkb2VzIHRoaXMgcHJvcG9zYWwg Z2V0IHVzIGNsb3NlciB0byBzb21lIHRleHQgeW91oa9kIGJlIGhhcHB5IHdpdGg/PC9kaXY+DQo8 ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj49PT1PTEQ9PT08L2Rpdj4NCjxkaXY+DQo8 ZGl2IGNsYXNzPSIiPlRoZSBSZWRpcmVjdGlvbiBJbnRlcmZhY2UgZGVmaW5lZCBpbiB0aGlzIGRv Y3VtZW50IG1pZ2h0IGJlIHVzZWQgdG8gcmVkaXJlY3QgYSByZXF1ZXN0IHdoZXJlIHRoZSBVc2Vy IEFnZW50IHdpbGwgc3Vic2VxdWVudGx5IGF0dGVtcHQgdG8gZXN0YWJsaXNoIGEgVExTIHNlc3Np b24gd2l0aCB0aGUgUmVkaXJlY3Rpb24gVGFyZ2V0LiAmbmJzcDtJbiBzdWNoIGEgY2FzZSwgYW55 IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaA0KIHRoZSBVc2VyIEFnZW50IGlz IHJlZGlyZWN0ZWQgbmVlZHMgdG8gYmUgYWJsZSB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhl IFRMUyBoYW5kc2hha2UgYW5kIHRvIHBlcmZvcm0gZW5jcnlwdGlvbiBvZiB0aGUgVExTIGNoYW5u ZWwuICZuYnNwO01lY2hhbmlzbXMgdG8gZGlzdHJpYnV0ZSB0aGUgcmVxdWlyZWQgaW5mb3JtYXRp b24gYW5kL29yIGNvbmZpZ3VyYXRpb24sIHN1Y2ggYXMgcHJpdmF0ZSBrZXlzLCB0byBzdXJyb2dh dGVzIGFuZCByZXF1ZXN0DQogcm91dGVycyBpbiBkQ0ROcyBhcmUgb3V0c2lkZSB0aGUgc2NvcGUg b2YgdGhpcyBkb2N1bWVudC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PT09TkVXPT09PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXY+VGhlIFJlZGlyZWN0aW9uIEludGVy ZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgbWlnaHQgYmUgdXNlZCB0byByZWRpcmVjdCBh IHJlcXVlc3Qgd2hlcmUgdGhlIFVzZXIgQWdlbnQgd2lsbCBzdWJzZXF1ZW50bHkgYXR0ZW1wdCB0 byBlc3RhYmxpc2ggYSBUTFMgc2Vzc2lvbiB3aXRoIHRoZSBSZWRpcmVjdGlvbiBUYXJnZXQuIElu IHN1Y2ggYSBjYXNlLCBhbnkgc3Vycm9nYXRlIG9yIHJlcXVlc3Qgcm91dGVyIHRvIHdoaWNoIHRo ZSBVc2VyDQogQWdlbnQgaXMgcmVkaXJlY3RlZCBuZWVkcyB0byBiZSBhYmxlIHRvIHN1Y2Nlc3Nm dWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFrZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0aW9u IG9mIHRoZSBUTFMgY2hhbm5lbC48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 ZGl2PlRoZSBwcml2YXRlIGtleSBmb3IgdGhlIGhvc3QgaW4gdGhlIFJUIGlzIG5lZWRlZCBpbiBv cmRlciB0byBzdWNjZXNzZnVsbHkgZXN0YWJsaXNoIGEgVExTIHNlc3Npb24uIFRoZSBtb3N0IHdp ZGVzcHJlYWQgbWVjaGFuaXNtIGN1cnJlbnRseSB1c2VkIGJ5IChub24taW50ZXJjb25uZWN0ZWQp IENETnMgaXMgZm9yIHRoZSBvd25lciBvZiB0aGUgaG9zdCBpbiB0aGUgUlQgc2hhcmluZyB0aGVp ciBwcml2YXRlIGtleSB3aXRoIHRoZWlyIENETihzKQ0KIG9mIGNob2ljZS4gSW4gY2FzZXMgd2hl cmUgdGhlIG93bmVyIG9mIHRoZSBob3N0IGlzIG5vdCB3aWxsaW5nIHRvIHNoYXJlIHRoZWlyIHBy aXZhdGUga2V5LCBvdGhlciBtZWNoYW5pc21zIHRoYXQgYWxsb3cgdGhlIG93bmVyIHRvIG5vdCBz aGFyZSB0aGVpciBwcml2YXRlIGtleSBhcmUgdXNlZCwgZm9yIGV4YW1wbGUgS2V5bGVzcyBTU0wg W1JFRl0uPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5DRE5JIGJ5IGRl ZmluaXRpb24gaW1wbGllcyB0aGF0IGEgQ29udGVudCBQcm92aWRlcqGvcyBjb250ZW50IHdpbGwg YmUgZGVsaXZlcmVkIGJ5IENETnMgb3RoZXIgdGhhbiB0aGUgQ0ROIHdpdGggd2hpY2ggdGhlIENv bnRlbnQgUHJvdmlkZXIgaGFzIGEgZGlyZWN0IGJ1c2luZXNzIHJlbGF0aW9uc2hpcC4gVGhlcmVm b3JlLCB3aGlsZSBDRE5JIGRvZXMgbm90IGludHJvZHVjZSBhbnkgbmV3IHRlY2huaWNhbCByZXF1 aXJlbWVudHMgb24gZENETnMNCiB3aGVuIGVzdGFibGlzaGluZyBUTFMgc2Vzc2lvbnMsIENvbnRl bnQgUHJvdmlkZXJzIG1heSBiZSBsZXNzIHdpbGxpbmcgdG8gaGF2ZSB0aGVpciBwcml2YXRlIGtl eSBzaGFyZWQgd2l0aCBkQ0ROcyB0aGFuIHRoZXkgYXJlIHdpdGggdGhlaXIgY2hvc2VuIENETihz KSBpbiBhIG5vbi1pbnRlcmNvbm5lY3RlZCBzY2VuYXJpby48L2Rpdj4NCjxkaXY+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2Pk1lY2hhbmlzbXMgdG8gZGlzdHJpYnV0ZSB0aGUgcmVxdWlyZWQg aW5mb3JtYXRpb24gYW5kL29yIGNvbmZpZ3VyYXRpb24gdG8gc3Vycm9nYXRlcyBhbmQgcmVxdWVz dCByb3V0ZXJzIGluIGRDRE5zIHRvIGVuYWJsZSBhIGRDRE4gdG8gc3VjY2Vzc2Z1bGx5IGNvbXBs ZXRlIFRMUyBoYW5kc2hha2VzIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBj aGFubmVsIGZvciBhIHBhcnRpY3VsYXIgaG9zdCwgc3VjaCBhcyBwcml2YXRlDQoga2V5cyBvciB0 aGUgVVJJL0lQIGFkZHJlc3Mgb2YgYSBrZXkgc2VydmVyLCBhcmUgb3V0c2lkZSB0aGUgc2NvcGUg b2YgdGhpcyBkb2N1bWVudC48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 PltSRUZdJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9ibG9nLmNsb3VkZmxhcmUuY29tL2tleWxlc3Mt c3NsLXRoZS1uaXR0eS1ncml0dHktdGVjaG5pY2FsLWRldGFpbHMvIiBjbGFzcz0iIj5odHRwczov L2Jsb2cuY2xvdWRmbGFyZS5jb20va2V5bGVzcy1zc2wtdGhlLW5pdHR5LWdyaXR0eS10ZWNobmlj YWwtZGV0YWlscy88L2E+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PT09RU5EPT09PC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+QmVu PC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQpKb24gUGV0ZXJzb248YnIgY2xhc3M9 IiI+DQpOZXVzdGFyLCBJbmMuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvc3Bhbj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D246855416520Djonpetersonneustarbiz_-- From nobody Sat Oct 17 04:44:34 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2AA91AD210 for ; Sat, 17 Oct 2015 04:44:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.299 X-Spam-Level: X-Spam-Status: No, score=-1.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kcjMJPLSXVDi for ; Sat, 17 Oct 2015 04:44:27 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.145]) by ietfa.amsl.com (Postfix) with ESMTP id 2EBFC1AD1DB for ; Sat, 17 Oct 2015 04:44:27 -0700 (PDT) Received: from aputeaux-554-1-37-65.w90-35.abo.wanadoo.fr ([90.35.60.65] helo=[192.168.1.131]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1ZnPuS-0000fW-E8; Sat, 17 Oct 2015 12:44:26 +0100 Content-Type: multipart/alternative; boundary="Apple-Mail=_A22E3252-FFF0-4A79-A2FC-08A27C39A87A" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Sat, 17 Oct 2015 12:44:21 +0100 Message-Id: <46A08C98-7B12-4F98-8826-8E9FE904B83C@niven-jenkins.co.uk> References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> To: "Peterson, Jon" X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Oct 2015 11:44:33 -0000 --Apple-Mail=_A22E3252-FFF0-4A79-A2FC-08A27C39A87A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Jon, > On 17 Oct 2015, at 00:12, Peterson, Jon = wrote: >=20 > Of course it depends on what angle you look at the problem from, but = if there's no problem with HTTPS redirection (302 over TLS from uCDN to = dCDN), and no problem with DNS redirection with DNSSEC, but there is a = problem when you do DNS redirection without DNSSEC, I would ordinarily = locate the problem there. Ah, OK, I think I=E2=80=99m starting to understand now. If I have = understood correctly, what you would like is for the redirection = interface to acknowledge that without DNSSEC a malicious DNS resolver = could return DNS responses (IP addresses/CNAMEs/whatever) that steer the = User Agent to a malicious server. DNSSEC would prevent that because = responses would need to be signed and a malicious DNS resolver would = therefore not be able to return malicious responses as it would not be = able to generate properly signed DNS responses. Do I have that correct? If that=E2=80=99s the concern we can definitely include some text in the = document about it. However, that concern applies to HTTP & HTTPS redirection as well. If a = CDN is performing HTTP redirection and the URI it is redirecting to = contains a host (instead of an IP address) then DNS responses to resolve = that host could also be hijacked by a malicious DNS resolver. In the case of encrypted traffic, regardless of whether DNS based or = HTTPS based redirects are used, if DNSSEC is not used then the DNS = response hijacking problem still exists, except that when a User Agent = tries to connect to the malicious server in the DNS response, the = malicious server will not be able to deliver content to the User Agent = as the malicious server will not be able to establish a TLS session with = the User Agent.=20 However as the malicious DNS resolver is still able to steer traffic to = a malicious server via a malicious DNS response, DNS response hijacking = could still be used to mount what is effectively a DoS attack against = the CDN/Content Provider. This is because the User Agent won=E2=80=99t = be able to receive the content that it wants because it is being told to = retrieve it from a server that it can=E2=80=99t establish a TLS session = to. Therefore, my suggestion would be that we include some text saying that = if DNSSEC is not used, then there is the possibility that domains used = for redirection (whether that is DNS redirection, HTTP redirection or = HTTPS redirection) could have their DNS responses hijacked and bad = things could result. The type of number of bad things a malicious actor = could do is much greater with HTTP traffic than with HTTPS traffic but = for HTTPS traffic the number of bad things a malicious actor could = achieve is not zero, but they are limited to DoS rather than injection = of their own content. If you agree with the above I can propose some text to describe the = problem. =20 > The insecurity of redirecting with the DNS (in the absence of DNSSEC) = is moreover a problem much bigger than CDNs. There was a draft a few = years ago called the "HARD problem" draft, where "HARD" stood for "high = assurance re-direction" that looked at this as a general problem = involving applications beyond HTTP like XMPP, and noting that it = happened for resource records like SRV beyond CNAME. It has been a known = issue for a variety of virtual hosting architectures, which have = properties similar to CDN interconnection, for some time. I have a tough = time understanding why we wouldn't want to acknowledge it as the problem = here. Saying the problem is the difficulty in getting keys to establish = a TLS connection is to me sort of like saying the problem with being = tied to a stone at the bottom of a lake is that you don't have a scuba = tank. >=20 > But really, this was an offhand remark at a mic. If no else cares, do = what you'd like over my objections. I think the new proposed text is = more helpful to implementers, but it is solution text rather than = problem text, and does not differentiate the situation for HTTPS and = insecure DNS, so it doesn't address my concern. I=E2=80=99d like to document the issues that affect CDNI redirection. = The challenge for me in doing this is that I do not know what all those = problems are and there has not been a clear description of the = problem(s) to work off so I=E2=80=99m having to infer what they are = (that comment is not aimed at you in particular, the two drafts on this = topic do not provide a clear problem description IMO). I also think there may be a mis-connect because I believe the problem = you are trying to highlight applies to all redirection methods (DNS, = HTTP & HTTPS), and you seem to think it only applies to DNS based = redirection. Once we have the problem agreed, I can propose text to describe it. Ben >=20 > Jon Peterson > Neustar, Inc. >=20 > From: Ben Niven-Jenkins > > Date: Friday, October 16, 2015 at 10:40 AM > To: Jon Peterson > > Cc: "Francois Le Faucheur (flefauch)" >, "cdni@ietf.org " = > > Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection >=20 > Hi Jon, >=20 >> On 16 Oct 2015, at 17:06, Peterson, Jon > wrote: >>=20 >>=20 >>> How DNS redirection works is that the User Agent does a resolution = for >>> foo.example and it gets a response for foo.example. The fact a CNAME = is >>> present & resolved by the DNS resolver is invisible to the User = Agent >>> (evidenced by the fact the URL bar in the browser doesn=C2=B9t = change domain >>> name/hostname when DNS redirection is performed). >>=20 >> It is certainly invisible to the browser when every dCDN holds the = private >> key of every uCDN that might redirect to it, as you stipulate below. >=20 > I explained how it is done in the majority of cases today. That = isn=E2=80=99t the only solution, Keyless SSL is another for example. >=20 >> If >> that is an operational requirement of the DNS redirection mechanism = in >> cdni-redirection, it needs to be made explicit. >=20 > It=E2=80=99s not an operational requirement IMO, the operational = requirement is that the dCDN is able to successfully complete the TLS = handshake and to perform encryption (and decryption) of the TLS channel. >=20 >> The proposed text just >> says that "any surrogate or request router to which the User Agent is >> redirected needs to be able to successfully complete the TLS = handshake" >> etc., which could be read to imply that as a solution, but not if you >> don't understand what the problem is in the first place. I was asking = that >> this acknowledge the problem, not specify a solution. >=20 > Good, that=E2=80=99s what we were trying to do, maybe the text we used = needs some refinement to be better understandable to others but we = worded it the way it is to explicitly avoid suggesting a solution. >=20 >> Moreover, the substance of my comment was that the problem is = different >> for DNS redirection than it is for HTTPS redirection. >=20 >> HTTPS redirection >> shouldn't require every dCDN to have every uCDNs private keying = material. >> The proposed text treats this like the two methods have the same >> properties. >=20 > I think it may depend what angle you view the problem from. =46rom my = angle of view the problem is that the dCDN needs to successfully = complete the TLS handshake and to perform encryption of the TLS channel. = What the dCDN needs in order to do that is the same in both cases: = private keys, or some other mechanism such as Keyless SSL that will = enable the dCDN to complete the handshake and encrypt/decrypt the = traffic. >=20 > The fact that for a lot of HTTPS 302 redirection cases the dCDN will = be redirecting to a hostname under the dCDN=E2=80=99s control (but that = is not guaranteed) may make being able to successfully complete the TLS = handshake and to perform encryption of the TLS channel easier for the = dCDN but it doesn=E2=80=99t change the basic problem of what the dCDN = needs in order to do its job. And for (at least some) cases where the = 302 redirection is to a hostname not under control of the dCDN the = properties are the same for both DNS & HTTPS 302 redirection. >=20 >>> Therefore as long as the IP address(es) in the DNS response presents = the >>> correct certificate for foo.example and has the correct credentials = (e.g. >>> Private key for foo.example) to complete the TLS handshake & >>> encrypt/decrypt traffic on that TLS session the User Agent will not >>> complain. This is how DNS-based HTTPS redirection is done in CDNs = today >>> where typically a CSP will provide their certificate & private key = to the >>> CDN so the CDN can terminate TLS sessions successfully on the CSP=C2=B9= s >>> behalf. which means if HTTPS redirection is insecure for CDNI then = HTTPS >>> redirection used by CDNs in the wild today (without CDNI) is also >>> insecure (which it isn=C2=B9t). >>=20 >> Identifying a known workaround does not mean there isn't a problem. = That >> there is a workaround is proof there is a problem. >=20 > I=E2=80=99m not sure I=E2=80=99d call the way that the majority of CDN = delivered HTTPS traffic is delivered a workaround myself (I only = described the most common mechanism, there are others mechanisms that = don=E2=80=99t rely on sharing the private key and which are used in the = wild, e.g. Keyless SSL). >=20 > But that=E2=80=99s off-topic so let=E2=80=99s move on. >=20 >>=20 >>> IMO I think the real problem is a different thing that >>> draft-slovetskiy-cdni-https-delegation-approaches hints at without >>> stating explicitly. That is how far will a CSP trust delegating its >>> credentials (e.g. Private key) given that the consequences of = leakage of >>> those credentials are very bad. There are possible solutions to = avoid the >>> CSP having to distribute their credentials (e.g. Keyless SSL) but = from >>> the perspective of the redirection draft they=C2=B9re out of scope = IMO. >>=20 >> The fact that there are two drafts trying to improve the workaround = does >> not convince me that the problem isn't worth noting. >=20 > The problem is worth noting, which is what we did, as noted above it = seems our text needs more work. >=20 > It is also worth noting IMO that neither of the two drafts actually = describe or mention the problem we are discussing but merely hint at it = and then attribute the cause of it to the presence of a CNAME in the = call flow, rather than the true cause which is lack of ability of the = dCDN to successfully complete the TLS handshake. >=20 > Anyway, does this proposal get us closer to some text you=E2=80=99d be = happy with? >=20 > =3D=3D=3DOLD=3D=3D=3D > The Redirection Interface defined in this document might be used to = redirect a request where the User Agent will subsequently attempt to = establish a TLS session with the Redirection Target. In such a case, = any surrogate or request router to which the User Agent is redirected = needs to be able to successfully complete the TLS handshake and to = perform encryption of the TLS channel. Mechanisms to distribute the = required information and/or configuration, such as private keys, to = surrogates and request routers in dCDNs are outside the scope of this = document. > =3D=3D=3DNEW=3D=3D=3D > The Redirection Interface defined in this document might be used to = redirect a request where the User Agent will subsequently attempt to = establish a TLS session with the Redirection Target. In such a case, any = surrogate or request router to which the User Agent is redirected needs = to be able to successfully complete the TLS handshake and to perform = encryption of the TLS channel. >=20 > The private key for the host in the RT is needed in order to = successfully establish a TLS session. The most widespread mechanism = currently used by (non-interconnected) CDNs is for the owner of the host = in the RT sharing their private key with their CDN(s) of choice. In = cases where the owner of the host is not willing to share their private = key, other mechanisms that allow the owner to not share their private = key are used, for example Keyless SSL [REF]. >=20 > CDNI by definition implies that a Content Provider=E2=80=99s content = will be delivered by CDNs other than the CDN with which the Content = Provider has a direct business relationship. Therefore, while CDNI does = not introduce any new technical requirements on dCDNs when establishing = TLS sessions, Content Providers may be less willing to have their = private key shared with dCDNs than they are with their chosen CDN(s) in = a non-interconnected scenario. >=20 > Mechanisms to distribute the required information and/or configuration = to surrogates and request routers in dCDNs to enable a dCDN to = successfully complete TLS handshakes and to perform encryption of the = TLS channel for a particular host, such as private keys or the URI/IP = address of a key server, are outside the scope of this document. >=20 > [REF] = https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-technical-details= / = > =3D=3D=3DEND=3D=3D=3D >=20 > Ben >=20 >>=20 >> Jon Peterson >> Neustar, Inc. >>=20 >=20 --Apple-Mail=_A22E3252-FFF0-4A79-A2FC-08A27C39A87A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Jon,

On 17 Oct 2015, at 00:12, = Peterson, Jon <jon.peterson@neustar.biz> wrote:

Of course it depends on what angle you look at the = problem from, but if there's no problem with HTTPS redirection (302 over = TLS from uCDN to dCDN), and no problem with DNS redirection with DNSSEC, = but there is a problem when you do DNS redirection without DNSSEC, I would ordinarily locate the problem = there.

Ah, OK, I = think I=E2=80=99m starting to understand now. If I have understood = correctly, what you would like is for the redirection interface to = acknowledge that without DNSSEC a malicious DNS resolver could return = DNS responses (IP addresses/CNAMEs/whatever) that steer the User Agent = to a malicious server. DNSSEC would prevent that because responses would = need to be signed and a malicious DNS resolver would therefore not be = able to return malicious responses as it would not be able to generate = properly signed DNS responses.

Do I = have that correct?

If that=E2=80=99s = the concern we can definitely include some text in the document about = it.

However, that concern applies to = HTTP & HTTPS redirection as well. If a CDN is performing HTTP = redirection and the URI it is redirecting to contains a host (instead of = an IP address) then DNS responses to resolve that host could also be = hijacked by a malicious DNS resolver.

In the case of encrypted traffic, regardless of = whether DNS based or HTTPS based redirects are used, if DNSSEC is not = used then the DNS response hijacking problem still exists, except that = when a User Agent tries to connect to the malicious server in the DNS = response, the malicious server will not be able to deliver content to = the User Agent as the malicious server will not be able to establish a = TLS session with the User Agent. 

However as the malicious DNS resolver is still = able to steer traffic to a malicious server via a malicious DNS = response, DNS response hijacking could still be used to mount what is = effectively a DoS attack against the CDN/Content Provider. This is = because the User Agent won=E2=80=99t be able to receive the content that = it wants because it is being told to retrieve it from a server that it = can=E2=80=99t establish a TLS session to.

Therefore, my suggestion would be that we include = some text saying that if DNSSEC is not used, then there is the = possibility that domains used for redirection (whether that is DNS = redirection, HTTP redirection or HTTPS redirection) could have their DNS = responses hijacked and bad things could result. The type of number of = bad things a malicious actor could do is much greater with HTTP traffic = than with HTTPS traffic but for HTTPS traffic the number of bad things a = malicious actor could achieve is not zero, but they are limited to DoS = rather than injection of their own content.

If you agree with the above I can propose some = text to describe the problem.
 
The insecurity of redirecting with the DNS (in the = absence of DNSSEC) is moreover a problem much bigger than CDNs. There = was a draft a few years ago called the "HARD problem" draft, where = "HARD" stood for "high assurance re-direction" that looked at this as a general problem involving applications beyond HTTP like XMPP, and = noting that it happened for resource records like SRV beyond CNAME. It = has been a known issue for a variety of virtual hosting architectures, = which have properties similar to CDN interconnection, for some time. I have a tough time understanding why we wouldn't want = to acknowledge it as the problem here.  Saying the problem is the = difficulty in getting keys to establish a TLS connection is to me sort = of like saying the problem with being tied to a stone at the bottom of a lake is that you don't have a scuba tank.

But really, this was an offhand remark at a mic. If no = else cares, do what you'd like over my objections. I think the new = proposed text is more helpful to implementers, but it is solution text = rather than problem text, and does not differentiate the situation for HTTPS and insecure DNS, so it doesn't address my = concern.

I=E2=80=99= d like to document the issues that affect CDNI redirection. The = challenge for me in doing this is that I do not know what all those = problems are and there has not been a clear description of the = problem(s) to work off so I=E2=80=99m having to infer what they are = (that comment is not aimed at you in particular, the two drafts on this = topic do not provide a clear problem description IMO).

I also think there may be a mis-connect because I = believe the problem you are trying to highlight applies to all = redirection methods (DNS, HTTP & HTTPS), and you seem to think it = only applies to DNS based redirection.

Once we have the problem agreed, I can propose = text to describe it.

Ben

Jon Peterson
Neustar, Inc.

From: Ben = Niven-Jenkins <ben@niven-jenkins.co.uk>
Date: Friday, October = 16, 2015 at 10:40 AM
To: Jon Peterson = <jon.peterson@neustar.biz>
Cc: "Francois Le = Faucheur (flefauch)" <flefauch@cisco.com>, "cdni@ietf.org" <cdni@ietf.org>
Subject: Re: [CDNi] = Jon's commet on draft-ietf-cdni-redirection

Hi Jon,

On 16 Oct 2015, at 17:06, Peterson, Jon <jon.peterson@neustar.biz> wrote:


How DNS redirection works is that = the User Agent does a resolution for
foo.example and it gets a response for foo.example. The fact a CNAME = is
present & resolved by the DNS resolver is invisible to the User = Agent
(evidenced by the fact the URL bar in the browser doesn=C2=B9t change = domain
name/hostname when DNS redirection is performed).

It is certainly invisible to the browser when every dCDN holds the = private
key of every uCDN that might redirect to it, as you stipulate = below.

I explained how it is done in the majority of cases today. That isn=E2=80=99= t the only solution, Keyless SSL is another for example.

If
that is an operational requirement of the DNS redirection mechanism = in
cdni-redirection, it needs to be made explicit.

It=E2=80=99s not an operational requirement IMO, the operational = requirement is that the dCDN is able to successfully complete the TLS = handshake and to perform encryption (and decryption) of the TLS = channel.

The proposed text just
says that "any surrogate or request router to which the User Agent is
redirected needs to be able to successfully complete the TLS = handshake"
etc., which could be read to imply that as a solution, but not if you
don't understand what the problem is in the first place. I was asking = that
this acknowledge the problem, not specify a solution.

Good, that=E2=80=99s what we were trying to do, maybe the text we used = needs some refinement to be better understandable to others but we = worded it the way it is to explicitly avoid suggesting a solution.

Moreover, the substance of my comment was that the = problem is different
for DNS redirection than it is for HTTPS redirection.
HTTPS redirection
shouldn't require every dCDN to have every uCDNs private keying = material.
The proposed text treats this like the two methods have the same
properties.

I think it may depend what angle you view the problem from. =46rom my = angle of view the problem is that the dCDN needs to successfully = complete the TLS handshake and to perform encryption of the TLS channel. = What the dCDN needs in order to do that is the same in both cases: private keys, or some other mechanism such as Keyless = SSL that will enable the dCDN to complete the handshake and = encrypt/decrypt the traffic.

The fact that for a lot of HTTPS 302 redirection cases = the dCDN will be redirecting to a hostname under the dCDN=E2=80=99s = control (but that is not guaranteed) may make being able = to successfully complete the TLS handshake and to perform = encryption of the TLS channel easier for the dCDN but it doesn=E2=80=99t change the basic = problem of what the dCDN needs in order to do its job. And for (at least = some) cases where the 302 redirection is to a hostname not under control = of the dCDN the properties are the same for both DNS & HTTPS 302 redirection.

Therefore as long as the IP = address(es) in the DNS response presents the
correct certificate for foo.example and has the correct credentials = (e.g.
Private key for foo.example) to complete the TLS handshake &
encrypt/decrypt traffic on that TLS session the User Agent will not
complain. This is how DNS-based HTTPS redirection is done in CDNs = today
where typically a CSP will provide their certificate & private key = to the
CDN so the CDN can terminate TLS sessions successfully on the CSP=C2=B9s behalf. which means if HTTPS redirection is insecure for CDNI then = HTTPS
redirection used by CDNs in the wild today (without CDNI) is also
insecure (which it isn=C2=B9t).

Identifying a known workaround does not mean there isn't a problem. = That
there is a workaround is proof there is a problem.

I=E2=80=99m not sure I=E2=80=99d call the way that the majority of CDN = delivered HTTPS traffic is delivered a workaround myself (I only = described the most common mechanism, there are others mechanisms that = don=E2=80=99t rely on sharing the private key and which are used in the = wild, e.g. Keyless SSL).

But that=E2=80=99s off-topic so let=E2=80=99s move = on.


IMO I think the real problem is a = different thing that
draft-slovetskiy-cdni-https-delegation-approaches hints at without
stating explicitly. That is how far will a CSP trust delegating its
credentials (e.g. Private key) given that the consequences of leakage = of
those credentials are very bad. There are possible solutions to avoid = the
CSP having to distribute their credentials (e.g. Keyless SSL) but = from
the perspective of the redirection draft they=C2=B9re out of scope = IMO.

The fact that there are two drafts trying to improve the workaround = does
not convince me that the problem isn't worth noting.

The problem is worth noting, which is what we did, as noted above it = seems our text needs more work.

It is also worth noting IMO that neither of the two = drafts actually describe or mention the problem we are discussing but = merely hint at it and then attribute the cause of it to the presence of = a CNAME in the call flow, rather than the true cause which is lack of ability of the dCDN to successfully complete the TLS = handshake.

Anyway, does this proposal get us closer to some text = you=E2=80=99d be happy with?

=3D=3D=3DOLD=3D=3D=3D
The Redirection Interface defined in this document might = be used to redirect a request where the User Agent will subsequently = attempt to establish a TLS session with the Redirection Target.  In = such a case, any surrogate or request router to which the User Agent is redirected needs to be able to successfully complete = the TLS handshake and to perform encryption of the TLS channel. =  Mechanisms to distribute the required information and/or = configuration, such as private keys, to surrogates and request routers in dCDNs are outside the scope of this document.
=3D=3D=3DNEW=3D=3D=3D
The Redirection Interface defined in this document might = be used to redirect a request where the User Agent will subsequently = attempt to establish a TLS session with the Redirection Target. In such = a case, any surrogate or request router to which the User Agent is redirected needs to be able to successfully complete the TLS = handshake and to perform encryption of the TLS channel.

The private key for the host in the RT is needed in = order to successfully establish a TLS session. The most widespread = mechanism currently used by (non-interconnected) CDNs is for the owner = of the host in the RT sharing their private key with their CDN(s) of choice. In cases where the owner of the host is not willing to share = their private key, other mechanisms that allow the owner to not share = their private key are used, for example Keyless SSL [REF].

CDNI by definition implies that a Content Provider=E2=80=99= s content will be delivered by CDNs other than the CDN with which the = Content Provider has a direct business relationship. Therefore, while = CDNI does not introduce any new technical requirements on dCDNs when establishing TLS sessions, Content Providers may be less willing = to have their private key shared with dCDNs than they are with their = chosen CDN(s) in a non-interconnected scenario.

Mechanisms to distribute the required information and/or = configuration to surrogates and request routers in dCDNs to enable a = dCDN to successfully complete TLS handshakes and to perform encryption = of the TLS channel for a particular host, such as private keys or the URI/IP address of a key server, are outside the scope of = this document.

[REF] https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-techni= cal-details/
=3D=3D=3DEND=3D=3D=3D

Ben


Jon Peterson
Neustar, Inc.

= --Apple-Mail=_A22E3252-FFF0-4A79-A2FC-08A27C39A87A-- From nobody Sat Oct 17 07:05:12 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B115B1A0021; Sat, 17 Oct 2015 07:05:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2iajD2oMG9Rd; Sat, 17 Oct 2015 07:05:09 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D9DE51A0024; Sat, 17 Oct 2015 07:05:08 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.6.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151017140508.20070.78344.idtracker@ietfa.amsl.com> Date: Sat, 17 Oct 2015 07:05:08 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-control-triggers-09.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Oct 2015 14:05:10 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : CDNI Control Interface / Triggers Authors : Rob Murray Ben Niven-Jenkins Filename : draft-ietf-cdni-control-triggers-09.txt Pages : 43 Date : 2015-10-17 Abstract: This document describes the part of the CDN Interconnection Control Interface that allows a CDN to trigger activity in an interconnected CDN that is configured to deliver content on its behalf. The upstream CDN can use this mechanism to request that the downstream CDN pre-positions metadata or content, or that it invalidates or purges metadata or content. The upstream CDN can monitor the status of activity that it has triggered in the downstream CDN. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-control-triggers/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-control-triggers-09 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-control-triggers-09 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sat Oct 17 07:11:36 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 746A21A0074 for ; Sat, 17 Oct 2015 07:11:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.911 X-Spam-Level: X-Spam-Status: No, score=-6.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NKtaCoJb-EpC for ; Sat, 17 Oct 2015 07:11:32 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpgre-esg-01.alcatel-lucent.com [135.245.210.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3FB71A0063 for ; Sat, 17 Oct 2015 07:11:32 -0700 (PDT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (unknown [135.239.2.122]) by Websense Email Security Gateway with ESMTPS id B2D42604F8C10 for ; Sat, 17 Oct 2015 14:11:13 +0000 (GMT) Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id t9HEBGBI022510 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Sat, 17 Oct 2015 16:11:16 +0200 Received: from FR711WXCHMBA02.zeu.alcatel-lucent.com ([169.254.2.107]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0195.001; Sat, 17 Oct 2015 16:11:16 +0200 From: "Murray, Rob (Rob)" To: "cdni@ietf.org" Thread-Topic: [CDNi] I-D Action: draft-ietf-cdni-control-triggers-09.txt Thread-Index: AQHRCOTbGBrf6sqn30KNO6lauRdR655vqNOA Date: Sat, 17 Oct 2015 14:11:15 +0000 Message-ID: <7C0ED196-BE74-4919-BE80-0806A3A4F663@alcatel-lucent.com> References: <20151017140508.20070.78344.idtracker@ietfa.amsl.com> In-Reply-To: <20151017140508.20070.78344.idtracker@ietfa.amsl.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.151008 x-originating-ip: [135.239.27.39] Content-Type: text/plain; charset="utf-8" Content-ID: <0FACE53511520F42B72796064C0B429B@exchange.lucent.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-control-triggers-09.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Oct 2015 14:11:34 -0000 SGkgYWxsLCBpbiB0aGlzIHZlcnNpb24gSSd2ZS4uLg0KDQogIC0gdXBkYXRlZCB0aGUgbWVkaWEg dHlwZXMgYW5kIG1hZGUgdGhlbSAiTVVTVCIgaW5zdGVhZCBvZiAiU0hPVUxEIg0KICAtIG1hZGUg YW4gZWRpdG9yaWFsIGNoYW5nZSBGcmFuY29pcyBzdWdnZXN0ZWQgaW4gdGhlIFRMUyBkZXNjcmlw dGlvbiBpbiBzZWN0aW9uIDguMQ0KICAtIHVwZGF0ZWQgcmVmcw0KDQpIb3BlZnVsbHkgaXQncyBn b29kIHRvIGdvIG5vdy4NCg0KQ2hlZXJzLA0KUm9iLg0KDQoNCg0KT24gMTcvMTAvMjAxNSwgMTU6 MDUsICJDRE5pIG9uIGJlaGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmciIDxjZG5pLWJv dW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4gd3Jv dGU6DQoNCj4NCj5BIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24t bGluZSBJbnRlcm5ldC1EcmFmdHMgZGlyZWN0b3JpZXMuDQo+IFRoaXMgZHJhZnQgaXMgYSB3b3Jr IGl0ZW0gb2YgdGhlIENvbnRlbnQgRGVsaXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0aW9uIFdv cmtpbmcgR3JvdXAgb2YgdGhlIElFVEYuDQo+DQo+ICAgICAgICBUaXRsZSAgICAgICAgICAgOiBD RE5JIENvbnRyb2wgSW50ZXJmYWNlIC8gVHJpZ2dlcnMNCj4gICAgICAgIEF1dGhvcnMgICAgICAg ICA6IFJvYiBNdXJyYXkNCj4gICAgICAgICAgICAgICAgICAgICAgICAgIEJlbiBOaXZlbi1KZW5r aW5zDQo+CUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtY2RuaS1jb250cm9sLXRyaWdnZXJz LTA5LnR4dA0KPglQYWdlcyAgICAgICAgICAgOiA0Mw0KPglEYXRlICAgICAgICAgICAgOiAyMDE1 LTEwLTE3DQo+DQo+QWJzdHJhY3Q6DQo+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHBh cnQgb2YgdGhlIENETiBJbnRlcmNvbm5lY3Rpb24gQ29udHJvbA0KPiAgIEludGVyZmFjZSB0aGF0 IGFsbG93cyBhIENETiB0byB0cmlnZ2VyIGFjdGl2aXR5IGluIGFuIGludGVyY29ubmVjdGVkDQo+ ICAgQ0ROIHRoYXQgaXMgY29uZmlndXJlZCB0byBkZWxpdmVyIGNvbnRlbnQgb24gaXRzIGJlaGFs Zi4gIFRoZQ0KPiAgIHVwc3RyZWFtIENETiBjYW4gdXNlIHRoaXMgbWVjaGFuaXNtIHRvIHJlcXVl c3QgdGhhdCB0aGUgZG93bnN0cmVhbQ0KPiAgIENETiBwcmUtcG9zaXRpb25zIG1ldGFkYXRhIG9y IGNvbnRlbnQsIG9yIHRoYXQgaXQgaW52YWxpZGF0ZXMgb3INCj4gICBwdXJnZXMgbWV0YWRhdGEg b3IgY29udGVudC4gIFRoZSB1cHN0cmVhbSBDRE4gY2FuIG1vbml0b3IgdGhlIHN0YXR1cw0KPiAg IG9mIGFjdGl2aXR5IHRoYXQgaXQgaGFzIHRyaWdnZXJlZCBpbiB0aGUgZG93bnN0cmVhbSBDRE4u DQo+DQo+DQo+DQo+VGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJh ZnQgaXM6DQo+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jZG5p LWNvbnRyb2wtdHJpZ2dlcnMvDQo+DQo+VGhlcmUncyBhbHNvIGEgaHRtbGl6ZWQgdmVyc2lvbiBh dmFpbGFibGUgYXQ6DQo+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY2Ru aS1jb250cm9sLXRyaWdnZXJzLTA5DQo+DQo+QSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNp b24gaXMgYXZhaWxhYmxlIGF0Og0KPmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1k cmFmdC1pZXRmLWNkbmktY29udHJvbC10cmlnZ2Vycy0wOQ0KPg0KPg0KPlBsZWFzZSBub3RlIHRo YXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1p c3Npb24NCj51bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxl IGF0IHRvb2xzLmlldGYub3JnLg0KPg0KPkludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFi bGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCj5mdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJh ZnRzLw0KPg0KPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQo+Q0ROaSBtYWlsaW5nIGxpc3QNCj5DRE5pQGlldGYub3JnDQo+aHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9jZG5pDQo= From nobody Sat Oct 17 11:09:30 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E51081B2BBB for ; Sat, 17 Oct 2015 11:09:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.666 X-Spam-Level: X-Spam-Status: No, score=-101.666 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_37=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iMu_BkdeYajM for ; Sat, 17 Oct 2015 11:09:23 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C849E1B2BB7 for ; Sat, 17 Oct 2015 11:09:22 -0700 (PDT) Received: from pps.filterd (m0078668.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.15.0.59/8.15.0.59) with SMTP id t9HI4N5D008803; Sat, 17 Oct 2015 14:09:21 -0400 Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 1xkgj90h5j-1 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Sat, 17 Oct 2015 14:09:20 -0400 Received: from STNTEXMB10.cis.neustar.com ([169.254.5.189]) by stntexhc10.cis.neustar.com ([169.254.4.214]) with mapi id 14.03.0158.001; Sat, 17 Oct 2015 14:09:19 -0400 From: "Peterson, Jon" To: Ben Niven-Jenkins Thread-Topic: [CDNi] Jon's commet on draft-ietf-cdni-redirection Thread-Index: AQHRB0Sd6BAt8jKfVkKtIgZAGUcIrZ5tCBuAgAD6vYCAABV5AIAAj6oA///nZQCAAUd4gP//9hmA Date: Sat, 17 Oct 2015 18:09:19 +0000 Message-ID: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> <46A08C98-7B12-4F98-8826-8E9FE904B83C@niven-jenkins.co.uk> In-Reply-To: <46A08C98-7B12-4F98-8826-8E9FE904B83C@niven-jenkins.co.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.9.150325 x-originating-ip: [192.168.128.87] Content-Type: multipart/alternative; boundary="_000_D247D7A3168019jonpetersonneustarbiz_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33, 0.0.0000 definitions=2015-10-17_13:2015-10-15,2015-10-17,1970-01-01 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 kscore.is_bulkscore=0 kscore.compositescore=1 compositescore=0.9 suspectscore=0 phishscore=0 bulkscore=0 kscore.is_spamscore=0 rbsscore=0.9 spamscore=0 urlsuspectscore=0.9 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1508030000 definitions=main-1510170332 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Oct 2015 18:09:28 -0000 --_000_D247D7A3168019jonpetersonneustarbiz_ Content-Type: text/plain; charset="euc-kr" Content-Transfer-Encoding: base64 DQpJIHdvdWxkbid0IHNheSB0aGUgcHJvYmxlbSBpcyB0aGF0IG1hbGljaW91cyBhdHRhY2ssIHNv IG11Y2ggYXMgaXQgaXMgYSByZXNvbHZlcidzIGluYWJpbGl0eSB0byBkaXN0aW5ndWlzaCBub3Jt YWwgcmVkaXJlY3Rpb24gZnJvbSBhbiBhdHRhY2suIEROU1NFQyBsZXRzIHlvdSBkaXN0aW5ndWlz aCB0aG9zZSB0aGluZ3MgLSBpZiB5b3UgZ2V0IHJlZGlyZWN0ZWQgdG8gYW5vdGhlciBkb21haW4s IHdpdGggRE5TU0VDIHlvdSBoYXZlIGEgY3J5cHRvZ3JhcGhpYyBhc3N1cmFuY2UgdGhhdCB0aGUg dGFyZ2V0IGRvbWFpbiBzZW50IHlvdSB0aGVyZSwgYW5kIHdpdGhvdXQgRE5TU0VDLCB5b3UgZG9u J3Qga25vdyBpZiB5b3UncmUgYmVpbmcgcmVkaXJlY3RlZCBieSB0aGUgdGFyZ2V0IGRvbWFpbiBv ciBhbiBhdHRhY2tlci4gQmVjYXVzZSBETlNTRUMgaXMgbm90IHdpZGVseSBhdmFpbGFibGUgaW4g dGhlIGVudmlyb25tZW50cyB1bmRlciBjb25zaWRlcmF0aW9uICh5ZXQpLCBpbiBwcmFjdGljZSB0 aGlzIG1lYW5zIHRoYXQgdG8gZ2V0IHNlY3VyaXR5IGZvciB0aGVzZSBhcHBsaWNhdGlvbnMgd2hl biB5b3UgZG8gRE5TIHJlZGlyZWN0aW9uIHlvdSBlbmQgdXAgZG9pbmcgdGhlIHNvcnRzIG9mIHdv cmthcm91bmRzIHRoYXQgeW91IGRldGFpbGVkIGluIHlvdXIgbGFzdCBtYWlsLCB0aGUgc29ydHMg b2Ygd29ya2Fyb3VuZHMgcGVvcGxlIGFyZSBub3cgdHJ5aW5nIHRvIGltcHJvdmUgYXMgSFRUUFMg YmVjb21lcyBtb3JlIHByZXZhbGVudCB0aHJvdWdoIG1lYXN1cmVzIGxpa2UgS2V5bGVzcyBTU0wu DQoNCkhUVFBTIHJlZGlyZWN0aW9uIGlzIGRpZmZlcmVudCBiZWNhdXNlIHRoZSBlbnRpdHkgc2Vu ZGluZyB5b3UgdGhlIHJlZGlyZWN0aW9uICh0aGUgMzAyKSBpcyBzZW5kaW5nIGl0IHRvIHlvdSBv dmVyIFRMUywgd2hlbiB5b3UndmUgYWxyZWFkeSBlc3RhYmxpc2hlZCBhIHNlY3VyaXR5IGFzc29j aWF0aW9uIGFuZCB5b3UgaGF2ZSBhIGNyeXB0b2dyYXBoaWMgYXNzdXJhbmNlIHRoYXQgdGhlIHJl ZGlyZWN0aW9uIGNhbWUgZnJvbSB0aGUgdGFyZ2V0IGRvbWFpbi4gQW4gYXR0YWNrZXIgd2hvIGZv cmdlcyBhIEROUyByZXNwb25zZSB0byB0aGUgb3JpZ2luYWwgZm9ybWF0aW9uIG9mIHRoYXQgc2Vj dXJpdHkgYXNzb2NpYXRpb24gKGFzIHlvdSB0cnkgdG8gZGVyZWZlcmVuY2UgaHR0cHM6Ly9leGFt cGxlLmNvbSkgd291bGQgc2ltcGx5IHJlc3VsdCBpbiB0aGF0IHNlY3VyaXR5IGFzc29jaWF0aW9u IG5ldmVyIGJlaW5nIGVzdGFibGlzaGVkLiBCdXQgaW4gdGhhdCBjYXNlLCB5b3Uga25vdyBpdCdz IGFuIGF0dGFjay4gVGhhdCdzIHdoYXQgZGlmZmVyZW50IC0gaW4gdGhlIEROUyB5b3UgZG9uJ3Qu IFNvIG5vLCBJIHRoaW5rIHRoZSBzaXR1YXRpb24gaXMgZGlmZmVyZW50IGZvciBIVFRQUyByZWRp cmVjdGlvbiB0aGFuIGZvciBETlMgcmVkaXJlY3Rpb246IGluIEhUVFBTIHJlZGlyZWN0aW9uLCBp dCBpcyBjbGVhciB3aGVuIHlvdSByZWNlaXZlIHRoZSByZWRpcmVjdGlvbiByZXNwb25zZSB3aGV0 aGVyIGl0IGNhbWUgZnJvbSBhbiBhdHRhY2tlciBvciB0aGUgdGFyZ2V0IGRvbWFpbiAtIHlvdSBh bHdheXMga25vdyBpdCB3YXMgdGhlIHRhcmdldCBkb21haW4gKHRvIHRoZSBkZWdyZWUgeW91IHRy dXN0IHlvdXIgY3J5cHRvIGFueXdheSkuDQoNClllcywgd2hlcmUgd2UgZGlzYWdyZWUgaXMgdGhh dCBJIHRoaW5rIHNwZWNpZnlpbmcgRE5TIGFzIGEgcmVkaXJlY3Rpb24gbWV0aG9kIGhhcyBkaWZm ZXJlbnQgc2VjdXJpdHkgcHJvcGVydGllcyB0aGFuIHNwZWNpZnlpbmcgSFRUUFMgYXMgYSByZWRp cmVjdGlvbiBtZXRob2QuIERvZXNuJ3QgbWVhbiB0aGVyZSBhcmVuJ3Qgd29ya2Fyb3VuZHMgdG8g YWRkcmVzcyBETlMncyBzaXR1YXRpb24sIGJ1dCBJIHRoaW5rIGVsaWRpbmcgb3Igc2tpbW1pbmcg b3ZlciB0aGVzZSBkaWZmZXJlbmNlcyBkb2VzIGltcGxlbWVudGVycyBhbmQgZnV0dXJlIHNwZWNp ZmljYXRpb25zIGEgZGlzc2VydmljZSAtIHdlIHNob3VsZCBleHBsYWluIHdoYXQgdGhleSBhcmUu IE5vdywgaXQncyBub3QgbXkgaW50ZW50aW9uIGhlcmUgdG8gYnVyZGVuIHRoZSBjZG5pLXJlZGly ZWN0aW9uIGRvY3VtZW50IHdpdGggZGV0YWlsaW5nIGEgc29sdXRpb24gZm9yIHNlY3VyZSBETlMg cmVkaXJlY3Rpb24gaW4gdGhlIGFic2VuY2Ugb2YgRE5TU0VDLiBNeSBtaWMgY29tbWVudCBtZXJl bHkgc3VnZ2VzdGVkIHRoYXQsIHNpbmNlIHBlb3BsZSB3ZXJlIHRhbGtpbmcgYWJvdXQgaG93IHRv IGltcHJvdmUgdGhlIHdvcmthcm91bmRzLCB0aGF0IGRlc2NyaWJpbmcgdGhlIHByb2JsZW0gaGVy ZSBzZWVtZWQgYXBwcm9wcmlhdGUuDQoNCkpvbiBQZXRlcnNvbg0KTmV1c3RhciwgSW5jLg0KDQpG cm9tOiBCZW4gTml2ZW4tSmVua2lucyA8YmVuQG5pdmVuLWplbmtpbnMuY28udWs8bWFpbHRvOmJl bkBuaXZlbi1qZW5raW5zLmNvLnVrPj4NCkRhdGU6IFNhdHVyZGF5LCBPY3RvYmVyIDE3LCAyMDE1 IGF0IDQ6NDQgQU0NClRvOiBKb24gUGV0ZXJzb24gPGpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpejxt YWlsdG86am9uLnBldGVyc29uQG5ldXN0YXIuYml6Pj4NCkNjOiAiRnJhbmNvaXMgTGUgRmF1Y2hl dXIgKGZsZWZhdWNoKSIgPGZsZWZhdWNoQGNpc2NvLmNvbTxtYWlsdG86ZmxlZmF1Y2hAY2lzY28u Y29tPj4sICJjZG5pQGlldGYub3JnPG1haWx0bzpjZG5pQGlldGYub3JnPiIgPGNkbmlAaWV0Zi5v cmc8bWFpbHRvOmNkbmlAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtDRE5pXSBKb24ncyBjb21t ZXQgb24gZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uDQoNCkpvbiwNCg0KT24gMTcgT2N0IDIw MTUsIGF0IDAwOjEyLCBQZXRlcnNvbiwgSm9uIDxqb24ucGV0ZXJzb25AbmV1c3Rhci5iaXo8bWFp bHRvOmpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpej4+IHdyb3RlOg0KDQpPZiBjb3Vyc2UgaXQgZGVw ZW5kcyBvbiB3aGF0IGFuZ2xlIHlvdSBsb29rIGF0IHRoZSBwcm9ibGVtIGZyb20sIGJ1dCBpZiB0 aGVyZSdzIG5vIHByb2JsZW0gd2l0aCBIVFRQUyByZWRpcmVjdGlvbiAoMzAyIG92ZXIgVExTIGZy b20gdUNETiB0byBkQ0ROKSwgYW5kIG5vIHByb2JsZW0gd2l0aCBETlMgcmVkaXJlY3Rpb24gd2l0 aCBETlNTRUMsIGJ1dCB0aGVyZSBpcyBhIHByb2JsZW0gd2hlbiB5b3UgZG8gRE5TIHJlZGlyZWN0 aW9uIHdpdGhvdXQgRE5TU0VDLCBJIHdvdWxkIG9yZGluYXJpbHkgbG9jYXRlIHRoZSBwcm9ibGVt IHRoZXJlLg0KDQpBaCwgT0ssIEkgdGhpbmsgSaGvbSBzdGFydGluZyB0byB1bmRlcnN0YW5kIG5v dy4gSWYgSSBoYXZlIHVuZGVyc3Rvb2QgY29ycmVjdGx5LCB3aGF0IHlvdSB3b3VsZCBsaWtlIGlz IGZvciB0aGUgcmVkaXJlY3Rpb24gaW50ZXJmYWNlIHRvIGFja25vd2xlZGdlIHRoYXQgd2l0aG91 dCBETlNTRUMgYSBtYWxpY2lvdXMgRE5TIHJlc29sdmVyIGNvdWxkIHJldHVybiBETlMgcmVzcG9u c2VzIChJUCBhZGRyZXNzZXMvQ05BTUVzL3doYXRldmVyKSB0aGF0IHN0ZWVyIHRoZSBVc2VyIEFn ZW50IHRvIGEgbWFsaWNpb3VzIHNlcnZlci4gRE5TU0VDIHdvdWxkIHByZXZlbnQgdGhhdCBiZWNh dXNlIHJlc3BvbnNlcyB3b3VsZCBuZWVkIHRvIGJlIHNpZ25lZCBhbmQgYSBtYWxpY2lvdXMgRE5T IHJlc29sdmVyIHdvdWxkIHRoZXJlZm9yZSBub3QgYmUgYWJsZSB0byByZXR1cm4gbWFsaWNpb3Vz IHJlc3BvbnNlcyBhcyBpdCB3b3VsZCBub3QgYmUgYWJsZSB0byBnZW5lcmF0ZSBwcm9wZXJseSBz aWduZWQgRE5TIHJlc3BvbnNlcy4NCg0KRG8gSSBoYXZlIHRoYXQgY29ycmVjdD8NCg0KSWYgdGhh dKGvcyB0aGUgY29uY2VybiB3ZSBjYW4gZGVmaW5pdGVseSBpbmNsdWRlIHNvbWUgdGV4dCBpbiB0 aGUgZG9jdW1lbnQgYWJvdXQgaXQuDQoNCkhvd2V2ZXIsIHRoYXQgY29uY2VybiBhcHBsaWVzIHRv IEhUVFAgJiBIVFRQUyByZWRpcmVjdGlvbiBhcyB3ZWxsLiBJZiBhIENETiBpcyBwZXJmb3JtaW5n IEhUVFAgcmVkaXJlY3Rpb24gYW5kIHRoZSBVUkkgaXQgaXMgcmVkaXJlY3RpbmcgdG8gY29udGFp bnMgYSBob3N0IChpbnN0ZWFkIG9mIGFuIElQIGFkZHJlc3MpIHRoZW4gRE5TIHJlc3BvbnNlcyB0 byByZXNvbHZlIHRoYXQgaG9zdCBjb3VsZCBhbHNvIGJlIGhpamFja2VkIGJ5IGEgbWFsaWNpb3Vz IEROUyByZXNvbHZlci4NCg0KSW4gdGhlIGNhc2Ugb2YgZW5jcnlwdGVkIHRyYWZmaWMsIHJlZ2Fy ZGxlc3Mgb2Ygd2hldGhlciBETlMgYmFzZWQgb3IgSFRUUFMgYmFzZWQgcmVkaXJlY3RzIGFyZSB1 c2VkLCBpZiBETlNTRUMgaXMgbm90IHVzZWQgdGhlbiB0aGUgRE5TIHJlc3BvbnNlIGhpamFja2lu ZyBwcm9ibGVtIHN0aWxsIGV4aXN0cywgZXhjZXB0IHRoYXQgd2hlbiBhIFVzZXIgQWdlbnQgdHJp ZXMgdG8gY29ubmVjdCB0byB0aGUgbWFsaWNpb3VzIHNlcnZlciBpbiB0aGUgRE5TIHJlc3BvbnNl LCB0aGUgbWFsaWNpb3VzIHNlcnZlciB3aWxsIG5vdCBiZSBhYmxlIHRvIGRlbGl2ZXIgY29udGVu dCB0byB0aGUgVXNlciBBZ2VudCBhcyB0aGUgbWFsaWNpb3VzIHNlcnZlciB3aWxsIG5vdCBiZSBh YmxlIHRvIGVzdGFibGlzaCBhIFRMUyBzZXNzaW9uIHdpdGggdGhlIFVzZXIgQWdlbnQuDQoNCkhv d2V2ZXIgYXMgdGhlIG1hbGljaW91cyBETlMgcmVzb2x2ZXIgaXMgc3RpbGwgYWJsZSB0byBzdGVl ciB0cmFmZmljIHRvIGEgbWFsaWNpb3VzIHNlcnZlciB2aWEgYSBtYWxpY2lvdXMgRE5TIHJlc3Bv bnNlLCBETlMgcmVzcG9uc2UgaGlqYWNraW5nIGNvdWxkIHN0aWxsIGJlIHVzZWQgdG8gbW91bnQg d2hhdCBpcyBlZmZlY3RpdmVseSBhIERvUyBhdHRhY2sgYWdhaW5zdCB0aGUgQ0ROL0NvbnRlbnQg UHJvdmlkZXIuIFRoaXMgaXMgYmVjYXVzZSB0aGUgVXNlciBBZ2VudCB3b26hr3QgYmUgYWJsZSB0 byByZWNlaXZlIHRoZSBjb250ZW50IHRoYXQgaXQgd2FudHMgYmVjYXVzZSBpdCBpcyBiZWluZyB0 b2xkIHRvIHJldHJpZXZlIGl0IGZyb20gYSBzZXJ2ZXIgdGhhdCBpdCBjYW6hr3QgZXN0YWJsaXNo IGEgVExTIHNlc3Npb24gdG8uDQoNClRoZXJlZm9yZSwgbXkgc3VnZ2VzdGlvbiB3b3VsZCBiZSB0 aGF0IHdlIGluY2x1ZGUgc29tZSB0ZXh0IHNheWluZyB0aGF0IGlmIEROU1NFQyBpcyBub3QgdXNl ZCwgdGhlbiB0aGVyZSBpcyB0aGUgcG9zc2liaWxpdHkgdGhhdCBkb21haW5zIHVzZWQgZm9yIHJl ZGlyZWN0aW9uICh3aGV0aGVyIHRoYXQgaXMgRE5TIHJlZGlyZWN0aW9uLCBIVFRQIHJlZGlyZWN0 aW9uIG9yIEhUVFBTIHJlZGlyZWN0aW9uKSBjb3VsZCBoYXZlIHRoZWlyIEROUyByZXNwb25zZXMg aGlqYWNrZWQgYW5kIGJhZCB0aGluZ3MgY291bGQgcmVzdWx0LiBUaGUgdHlwZSBvZiBudW1iZXIg b2YgYmFkIHRoaW5ncyBhIG1hbGljaW91cyBhY3RvciBjb3VsZCBkbyBpcyBtdWNoIGdyZWF0ZXIg d2l0aCBIVFRQIHRyYWZmaWMgdGhhbiB3aXRoIEhUVFBTIHRyYWZmaWMgYnV0IGZvciBIVFRQUyB0 cmFmZmljIHRoZSBudW1iZXIgb2YgYmFkIHRoaW5ncyBhIG1hbGljaW91cyBhY3RvciBjb3VsZCBh Y2hpZXZlIGlzIG5vdCB6ZXJvLCBidXQgdGhleSBhcmUgbGltaXRlZCB0byBEb1MgcmF0aGVyIHRo YW4gaW5qZWN0aW9uIG9mIHRoZWlyIG93biBjb250ZW50Lg0KDQpJZiB5b3UgYWdyZWUgd2l0aCB0 aGUgYWJvdmUgSSBjYW4gcHJvcG9zZSBzb21lIHRleHQgdG8gZGVzY3JpYmUgdGhlIHByb2JsZW0u DQoNClRoZSBpbnNlY3VyaXR5IG9mIHJlZGlyZWN0aW5nIHdpdGggdGhlIEROUyAoaW4gdGhlIGFi c2VuY2Ugb2YgRE5TU0VDKSBpcyBtb3Jlb3ZlciBhIHByb2JsZW0gbXVjaCBiaWdnZXIgdGhhbiBD RE5zLiBUaGVyZSB3YXMgYSBkcmFmdCBhIGZldyB5ZWFycyBhZ28gY2FsbGVkIHRoZSAiSEFSRCBw cm9ibGVtIiBkcmFmdCwgd2hlcmUgIkhBUkQiIHN0b29kIGZvciAiaGlnaCBhc3N1cmFuY2UgcmUt ZGlyZWN0aW9uIiB0aGF0IGxvb2tlZCBhdCB0aGlzIGFzIGEgZ2VuZXJhbCBwcm9ibGVtIGludm9s dmluZyBhcHBsaWNhdGlvbnMgYmV5b25kIEhUVFAgbGlrZSBYTVBQLCBhbmQgbm90aW5nIHRoYXQg aXQgaGFwcGVuZWQgZm9yIHJlc291cmNlIHJlY29yZHMgbGlrZSBTUlYgYmV5b25kIENOQU1FLiBJ dCBoYXMgYmVlbiBhIGtub3duIGlzc3VlIGZvciBhIHZhcmlldHkgb2YgdmlydHVhbCBob3N0aW5n IGFyY2hpdGVjdHVyZXMsIHdoaWNoIGhhdmUgcHJvcGVydGllcyBzaW1pbGFyIHRvIENETiBpbnRl cmNvbm5lY3Rpb24sIGZvciBzb21lIHRpbWUuIEkgaGF2ZSBhIHRvdWdoIHRpbWUgdW5kZXJzdGFu ZGluZyB3aHkgd2Ugd291bGRuJ3Qgd2FudCB0byBhY2tub3dsZWRnZSBpdCBhcyB0aGUgcHJvYmxl bSBoZXJlLiAgU2F5aW5nIHRoZSBwcm9ibGVtIGlzIHRoZSBkaWZmaWN1bHR5IGluIGdldHRpbmcg a2V5cyB0byBlc3RhYmxpc2ggYSBUTFMgY29ubmVjdGlvbiBpcyB0byBtZSBzb3J0IG9mIGxpa2Ug c2F5aW5nIHRoZSBwcm9ibGVtIHdpdGggYmVpbmcgdGllZCB0byBhIHN0b25lIGF0IHRoZSBib3R0 b20gb2YgYSBsYWtlIGlzIHRoYXQgeW91IGRvbid0IGhhdmUgYSBzY3ViYSB0YW5rLg0KDQpCdXQg cmVhbGx5LCB0aGlzIHdhcyBhbiBvZmZoYW5kIHJlbWFyayBhdCBhIG1pYy4gSWYgbm8gZWxzZSBj YXJlcywgZG8gd2hhdCB5b3UnZCBsaWtlIG92ZXIgbXkgb2JqZWN0aW9ucy4gSSB0aGluayB0aGUg bmV3IHByb3Bvc2VkIHRleHQgaXMgbW9yZSBoZWxwZnVsIHRvIGltcGxlbWVudGVycywgYnV0IGl0 IGlzIHNvbHV0aW9uIHRleHQgcmF0aGVyIHRoYW4gcHJvYmxlbSB0ZXh0LCBhbmQgZG9lcyBub3Qg ZGlmZmVyZW50aWF0ZSB0aGUgc2l0dWF0aW9uIGZvciBIVFRQUyBhbmQgaW5zZWN1cmUgRE5TLCBz byBpdCBkb2Vzbid0IGFkZHJlc3MgbXkgY29uY2Vybi4NCg0KSaGvZCBsaWtlIHRvIGRvY3VtZW50 IHRoZSBpc3N1ZXMgdGhhdCBhZmZlY3QgQ0ROSSByZWRpcmVjdGlvbi4gVGhlIGNoYWxsZW5nZSBm b3IgbWUgaW4gZG9pbmcgdGhpcyBpcyB0aGF0IEkgZG8gbm90IGtub3cgd2hhdCBhbGwgdGhvc2Ug cHJvYmxlbXMgYXJlIGFuZCB0aGVyZSBoYXMgbm90IGJlZW4gYSBjbGVhciBkZXNjcmlwdGlvbiBv ZiB0aGUgcHJvYmxlbShzKSB0byB3b3JrIG9mZiBzbyBJoa9tIGhhdmluZyB0byBpbmZlciB3aGF0 IHRoZXkgYXJlICh0aGF0IGNvbW1lbnQgaXMgbm90IGFpbWVkIGF0IHlvdSBpbiBwYXJ0aWN1bGFy LCB0aGUgdHdvIGRyYWZ0cyBvbiB0aGlzIHRvcGljIGRvIG5vdCBwcm92aWRlIGEgY2xlYXIgcHJv YmxlbSBkZXNjcmlwdGlvbiBJTU8pLg0KDQpJIGFsc28gdGhpbmsgdGhlcmUgbWF5IGJlIGEgbWlz LWNvbm5lY3QgYmVjYXVzZSBJIGJlbGlldmUgdGhlIHByb2JsZW0geW91IGFyZSB0cnlpbmcgdG8g aGlnaGxpZ2h0IGFwcGxpZXMgdG8gYWxsIHJlZGlyZWN0aW9uIG1ldGhvZHMgKEROUywgSFRUUCAm IEhUVFBTKSwgYW5kIHlvdSBzZWVtIHRvIHRoaW5rIGl0IG9ubHkgYXBwbGllcyB0byBETlMgYmFz ZWQgcmVkaXJlY3Rpb24uDQoNCk9uY2Ugd2UgaGF2ZSB0aGUgcHJvYmxlbSBhZ3JlZWQsIEkgY2Fu IHByb3Bvc2UgdGV4dCB0byBkZXNjcmliZSBpdC4NCg0KQmVuDQoNCg0KSm9uIFBldGVyc29uDQpO ZXVzdGFyLCBJbmMuDQoNCkZyb206IEJlbiBOaXZlbi1KZW5raW5zIDxiZW5Abml2ZW4tamVua2lu cy5jby51azxtYWlsdG86YmVuQG5pdmVuLWplbmtpbnMuY28udWs+Pg0KRGF0ZTogRnJpZGF5LCBP Y3RvYmVyIDE2LCAyMDE1IGF0IDEwOjQwIEFNDQpUbzogSm9uIFBldGVyc29uIDxqb24ucGV0ZXJz b25AbmV1c3Rhci5iaXo8bWFpbHRvOmpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpej4+DQpDYzogIkZy YW5jb2lzIExlIEZhdWNoZXVyIChmbGVmYXVjaCkiIDxmbGVmYXVjaEBjaXNjby5jb208bWFpbHRv OmZsZWZhdWNoQGNpc2NvLmNvbT4+LCAiY2RuaUBpZXRmLm9yZzxtYWlsdG86Y2RuaUBpZXRmLm9y Zz4iIDxjZG5pQGlldGYub3JnPG1haWx0bzpjZG5pQGlldGYub3JnPj4NClN1YmplY3Q6IFJlOiBb Q0ROaV0gSm9uJ3MgY29tbWV0IG9uIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbg0KDQpIaSBK b24sDQoNCk9uIDE2IE9jdCAyMDE1LCBhdCAxNzowNiwgUGV0ZXJzb24sIEpvbiA8am9uLnBldGVy c29uQG5ldXN0YXIuYml6PG1haWx0bzpqb24ucGV0ZXJzb25AbmV1c3Rhci5iaXo+PiB3cm90ZToN Cg0KDQpIb3cgRE5TIHJlZGlyZWN0aW9uIHdvcmtzIGlzIHRoYXQgdGhlIFVzZXIgQWdlbnQgZG9l cyBhIHJlc29sdXRpb24gZm9yDQpmb28uZXhhbXBsZSBhbmQgaXQgZ2V0cyBhIHJlc3BvbnNlIGZv ciBmb28uZXhhbXBsZS4gVGhlIGZhY3QgYSBDTkFNRSBpcw0KcHJlc2VudCAmIHJlc29sdmVkIGJ5 IHRoZSBETlMgcmVzb2x2ZXIgaXMgaW52aXNpYmxlIHRvIHRoZSBVc2VyIEFnZW50DQooZXZpZGVu Y2VkIGJ5IHRoZSBmYWN0IHRoZSBVUkwgYmFyIGluIHRoZSBicm93c2VyIGRvZXNuqfZ0IGNoYW5n ZSBkb21haW4NCm5hbWUvaG9zdG5hbWUgd2hlbiBETlMgcmVkaXJlY3Rpb24gaXMgcGVyZm9ybWVk KS4NCg0KSXQgaXMgY2VydGFpbmx5IGludmlzaWJsZSB0byB0aGUgYnJvd3NlciB3aGVuIGV2ZXJ5 IGRDRE4gaG9sZHMgdGhlIHByaXZhdGUNCmtleSBvZiBldmVyeSB1Q0ROIHRoYXQgbWlnaHQgcmVk aXJlY3QgdG8gaXQsIGFzIHlvdSBzdGlwdWxhdGUgYmVsb3cuDQoNCkkgZXhwbGFpbmVkIGhvdyBp dCBpcyBkb25lIGluIHRoZSBtYWpvcml0eSBvZiBjYXNlcyB0b2RheS4gVGhhdCBpc26hr3QgdGhl IG9ubHkgc29sdXRpb24sIEtleWxlc3MgU1NMIGlzIGFub3RoZXIgZm9yIGV4YW1wbGUuDQoNCklm DQp0aGF0IGlzIGFuIG9wZXJhdGlvbmFsIHJlcXVpcmVtZW50IG9mIHRoZSBETlMgcmVkaXJlY3Rp b24gbWVjaGFuaXNtIGluDQpjZG5pLXJlZGlyZWN0aW9uLCBpdCBuZWVkcyB0byBiZSBtYWRlIGV4 cGxpY2l0Lg0KDQpJdKGvcyBub3QgYW4gb3BlcmF0aW9uYWwgcmVxdWlyZW1lbnQgSU1PLCB0aGUg b3BlcmF0aW9uYWwgcmVxdWlyZW1lbnQgaXMgdGhhdCB0aGUgZENETiBpcyBhYmxlIHRvIHN1Y2Nl c3NmdWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFrZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0 aW9uIChhbmQgZGVjcnlwdGlvbikgb2YgdGhlIFRMUyBjaGFubmVsLg0KDQpUaGUgcHJvcG9zZWQg dGV4dCBqdXN0DQpzYXlzIHRoYXQgImFueSBzdXJyb2dhdGUgb3IgcmVxdWVzdCByb3V0ZXIgdG8g d2hpY2ggdGhlIFVzZXIgQWdlbnQgaXMNCnJlZGlyZWN0ZWQgbmVlZHMgdG8gYmUgYWJsZSB0byBz dWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UiDQpldGMuLCB3aGljaCBjb3Vs ZCBiZSByZWFkIHRvIGltcGx5IHRoYXQgYXMgYSBzb2x1dGlvbiwgYnV0IG5vdCBpZiB5b3UNCmRv bid0IHVuZGVyc3RhbmQgd2hhdCB0aGUgcHJvYmxlbSBpcyBpbiB0aGUgZmlyc3QgcGxhY2UuIEkg d2FzIGFza2luZyB0aGF0DQp0aGlzIGFja25vd2xlZGdlIHRoZSBwcm9ibGVtLCBub3Qgc3BlY2lm eSBhIHNvbHV0aW9uLg0KDQpHb29kLCB0aGF0oa9zIHdoYXQgd2Ugd2VyZSB0cnlpbmcgdG8gZG8s IG1heWJlIHRoZSB0ZXh0IHdlIHVzZWQgbmVlZHMgc29tZSByZWZpbmVtZW50IHRvIGJlIGJldHRl ciB1bmRlcnN0YW5kYWJsZSB0byBvdGhlcnMgYnV0IHdlIHdvcmRlZCBpdCB0aGUgd2F5IGl0IGlz IHRvIGV4cGxpY2l0bHkgYXZvaWQgc3VnZ2VzdGluZyBhIHNvbHV0aW9uLg0KDQpNb3Jlb3Zlciwg dGhlIHN1YnN0YW5jZSBvZiBteSBjb21tZW50IHdhcyB0aGF0IHRoZSBwcm9ibGVtIGlzIGRpZmZl cmVudA0KZm9yIEROUyByZWRpcmVjdGlvbiB0aGFuIGl0IGlzIGZvciBIVFRQUyByZWRpcmVjdGlv bi4NCkhUVFBTIHJlZGlyZWN0aW9uDQpzaG91bGRuJ3QgcmVxdWlyZSBldmVyeSBkQ0ROIHRvIGhh dmUgZXZlcnkgdUNETnMgcHJpdmF0ZSBrZXlpbmcgbWF0ZXJpYWwuDQpUaGUgcHJvcG9zZWQgdGV4 dCB0cmVhdHMgdGhpcyBsaWtlIHRoZSB0d28gbWV0aG9kcyBoYXZlIHRoZSBzYW1lDQpwcm9wZXJ0 aWVzLg0KDQpJIHRoaW5rIGl0IG1heSBkZXBlbmQgd2hhdCBhbmdsZSB5b3UgdmlldyB0aGUgcHJv YmxlbSBmcm9tLiBGcm9tIG15IGFuZ2xlIG9mIHZpZXcgdGhlIHByb2JsZW0gaXMgdGhhdCB0aGUg ZENETiBuZWVkcyB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UgYW5k IHRvIHBlcmZvcm0gZW5jcnlwdGlvbiBvZiB0aGUgVExTIGNoYW5uZWwuIFdoYXQgdGhlIGRDRE4g bmVlZHMgaW4gb3JkZXIgdG8gZG8gdGhhdCBpcyB0aGUgc2FtZSBpbiBib3RoIGNhc2VzOiBwcml2 YXRlIGtleXMsIG9yIHNvbWUgb3RoZXIgbWVjaGFuaXNtIHN1Y2ggYXMgS2V5bGVzcyBTU0wgdGhh dCB3aWxsIGVuYWJsZSB0aGUgZENETiB0byBjb21wbGV0ZSB0aGUgaGFuZHNoYWtlIGFuZCBlbmNy eXB0L2RlY3J5cHQgdGhlIHRyYWZmaWMuDQoNClRoZSBmYWN0IHRoYXQgZm9yIGEgbG90IG9mIEhU VFBTIDMwMiByZWRpcmVjdGlvbiBjYXNlcyB0aGUgZENETiB3aWxsIGJlIHJlZGlyZWN0aW5nIHRv IGEgaG9zdG5hbWUgdW5kZXIgdGhlIGRDRE6hr3MgY29udHJvbCAoYnV0IHRoYXQgaXMgbm90IGd1 YXJhbnRlZWQpIG1heSBtYWtlIGJlaW5nIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRo ZSBUTFMgaGFuZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBjaGFu bmVsIGVhc2llciBmb3IgdGhlIGRDRE4gYnV0IGl0IGRvZXNuoa90IGNoYW5nZSB0aGUgYmFzaWMg cHJvYmxlbSBvZiB3aGF0IHRoZSBkQ0ROIG5lZWRzIGluIG9yZGVyIHRvIGRvIGl0cyBqb2IuIEFu ZCBmb3IgKGF0IGxlYXN0IHNvbWUpIGNhc2VzIHdoZXJlIHRoZSAzMDIgcmVkaXJlY3Rpb24gaXMg dG8gYSBob3N0bmFtZSBub3QgdW5kZXIgY29udHJvbCBvZiB0aGUgZENETiB0aGUgcHJvcGVydGll cyBhcmUgdGhlIHNhbWUgZm9yIGJvdGggRE5TICYgSFRUUFMgMzAyIHJlZGlyZWN0aW9uLg0KDQpU aGVyZWZvcmUgYXMgbG9uZyBhcyB0aGUgSVAgYWRkcmVzcyhlcykgaW4gdGhlIEROUyByZXNwb25z ZSBwcmVzZW50cyB0aGUNCmNvcnJlY3QgY2VydGlmaWNhdGUgZm9yIGZvby5leGFtcGxlIGFuZCBo YXMgdGhlIGNvcnJlY3QgY3JlZGVudGlhbHMgKGUuZy4NClByaXZhdGUga2V5IGZvciBmb28uZXhh bXBsZSkgdG8gY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UgJg0KZW5jcnlwdC9kZWNyeXB0IHRy YWZmaWMgb24gdGhhdCBUTFMgc2Vzc2lvbiB0aGUgVXNlciBBZ2VudCB3aWxsIG5vdA0KY29tcGxh aW4uIFRoaXMgaXMgaG93IEROUy1iYXNlZCBIVFRQUyByZWRpcmVjdGlvbiBpcyBkb25lIGluIENE TnMgdG9kYXkNCndoZXJlIHR5cGljYWxseSBhIENTUCB3aWxsIHByb3ZpZGUgdGhlaXIgY2VydGlm aWNhdGUgJiBwcml2YXRlIGtleSB0byB0aGUNCkNETiBzbyB0aGUgQ0ROIGNhbiB0ZXJtaW5hdGUg VExTIHNlc3Npb25zIHN1Y2Nlc3NmdWxseSBvbiB0aGUgQ1NQqfZzDQpiZWhhbGYuIHdoaWNoIG1l YW5zIGlmIEhUVFBTIHJlZGlyZWN0aW9uIGlzIGluc2VjdXJlIGZvciBDRE5JIHRoZW4gSFRUUFMN CnJlZGlyZWN0aW9uIHVzZWQgYnkgQ0ROcyBpbiB0aGUgd2lsZCB0b2RheSAod2l0aG91dCBDRE5J KSBpcyBhbHNvDQppbnNlY3VyZSAod2hpY2ggaXQgaXNuqfZ0KS4NCg0KSWRlbnRpZnlpbmcgYSBr bm93biB3b3JrYXJvdW5kIGRvZXMgbm90IG1lYW4gdGhlcmUgaXNuJ3QgYSBwcm9ibGVtLiBUaGF0 DQp0aGVyZSBpcyBhIHdvcmthcm91bmQgaXMgcHJvb2YgdGhlcmUgaXMgYSBwcm9ibGVtLg0KDQpJ oa9tIG5vdCBzdXJlIEmhr2QgY2FsbCB0aGUgd2F5IHRoYXQgdGhlIG1ham9yaXR5IG9mIENETiBk ZWxpdmVyZWQgSFRUUFMgdHJhZmZpYyBpcyBkZWxpdmVyZWQgYSB3b3JrYXJvdW5kIG15c2VsZiAo SSBvbmx5IGRlc2NyaWJlZCB0aGUgbW9zdCBjb21tb24gbWVjaGFuaXNtLCB0aGVyZSBhcmUgb3Ro ZXJzIG1lY2hhbmlzbXMgdGhhdCBkb26hr3QgcmVseSBvbiBzaGFyaW5nIHRoZSBwcml2YXRlIGtl eSBhbmQgd2hpY2ggYXJlIHVzZWQgaW4gdGhlIHdpbGQsIGUuZy4gS2V5bGVzcyBTU0wpLg0KDQpC dXQgdGhhdKGvcyBvZmYtdG9waWMgc28gbGV0oa9zIG1vdmUgb24uDQoNCg0KSU1PIEkgdGhpbmsg dGhlIHJlYWwgcHJvYmxlbSBpcyBhIGRpZmZlcmVudCB0aGluZyB0aGF0DQpkcmFmdC1zbG92ZXRz a2l5LWNkbmktaHR0cHMtZGVsZWdhdGlvbi1hcHByb2FjaGVzIGhpbnRzIGF0IHdpdGhvdXQNCnN0 YXRpbmcgZXhwbGljaXRseS4gVGhhdCBpcyBob3cgZmFyIHdpbGwgYSBDU1AgdHJ1c3QgZGVsZWdh dGluZyBpdHMNCmNyZWRlbnRpYWxzIChlLmcuIFByaXZhdGUga2V5KSBnaXZlbiB0aGF0IHRoZSBj b25zZXF1ZW5jZXMgb2YgbGVha2FnZSBvZg0KdGhvc2UgY3JlZGVudGlhbHMgYXJlIHZlcnkgYmFk LiBUaGVyZSBhcmUgcG9zc2libGUgc29sdXRpb25zIHRvIGF2b2lkIHRoZQ0KQ1NQIGhhdmluZyB0 byBkaXN0cmlidXRlIHRoZWlyIGNyZWRlbnRpYWxzIChlLmcuIEtleWxlc3MgU1NMKSBidXQgZnJv bQ0KdGhlIHBlcnNwZWN0aXZlIG9mIHRoZSByZWRpcmVjdGlvbiBkcmFmdCB0aGV5qfZyZSBvdXQg b2Ygc2NvcGUgSU1PLg0KDQpUaGUgZmFjdCB0aGF0IHRoZXJlIGFyZSB0d28gZHJhZnRzIHRyeWlu ZyB0byBpbXByb3ZlIHRoZSB3b3JrYXJvdW5kIGRvZXMNCm5vdCBjb252aW5jZSBtZSB0aGF0IHRo ZSBwcm9ibGVtIGlzbid0IHdvcnRoIG5vdGluZy4NCg0KVGhlIHByb2JsZW0gaXMgd29ydGggbm90 aW5nLCB3aGljaCBpcyB3aGF0IHdlIGRpZCwgYXMgbm90ZWQgYWJvdmUgaXQgc2VlbXMgb3VyIHRl eHQgbmVlZHMgbW9yZSB3b3JrLg0KDQpJdCBpcyBhbHNvIHdvcnRoIG5vdGluZyBJTU8gdGhhdCBu ZWl0aGVyIG9mIHRoZSB0d28gZHJhZnRzIGFjdHVhbGx5IGRlc2NyaWJlIG9yIG1lbnRpb24gdGhl IHByb2JsZW0gd2UgYXJlIGRpc2N1c3NpbmcgYnV0IG1lcmVseSBoaW50IGF0IGl0IGFuZCB0aGVu IGF0dHJpYnV0ZSB0aGUgY2F1c2Ugb2YgaXQgdG8gdGhlIHByZXNlbmNlIG9mIGEgQ05BTUUgaW4g dGhlIGNhbGwgZmxvdywgcmF0aGVyIHRoYW4gdGhlIHRydWUgY2F1c2Ugd2hpY2ggaXMgbGFjayBv ZiBhYmlsaXR5IG9mIHRoZSBkQ0ROIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSB0aGUgVExTIGhh bmRzaGFrZS4NCg0KQW55d2F5LCBkb2VzIHRoaXMgcHJvcG9zYWwgZ2V0IHVzIGNsb3NlciB0byBz b21lIHRleHQgeW91oa9kIGJlIGhhcHB5IHdpdGg/DQoNCj09PU9MRD09PQ0KVGhlIFJlZGlyZWN0 aW9uIEludGVyZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgbWlnaHQgYmUgdXNlZCB0byBy ZWRpcmVjdCBhIHJlcXVlc3Qgd2hlcmUgdGhlIFVzZXIgQWdlbnQgd2lsbCBzdWJzZXF1ZW50bHkg YXR0ZW1wdCB0byBlc3RhYmxpc2ggYSBUTFMgc2Vzc2lvbiB3aXRoIHRoZSBSZWRpcmVjdGlvbiBU YXJnZXQuICBJbiBzdWNoIGEgY2FzZSwgYW55IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0 byB3aGljaCB0aGUgVXNlciBBZ2VudCBpcyByZWRpcmVjdGVkIG5lZWRzIHRvIGJlIGFibGUgdG8g c3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVu Y3J5cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsLiAgTWVjaGFuaXNtcyB0byBkaXN0cmlidXRlIHRo ZSByZXF1aXJlZCBpbmZvcm1hdGlvbiBhbmQvb3IgY29uZmlndXJhdGlvbiwgc3VjaCBhcyBwcml2 YXRlIGtleXMsIHRvIHN1cnJvZ2F0ZXMgYW5kIHJlcXVlc3Qgcm91dGVycyBpbiBkQ0ROcyBhcmUg b3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC4NCj09PU5FVz09PQ0KVGhlIFJlZGly ZWN0aW9uIEludGVyZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgbWlnaHQgYmUgdXNlZCB0 byByZWRpcmVjdCBhIHJlcXVlc3Qgd2hlcmUgdGhlIFVzZXIgQWdlbnQgd2lsbCBzdWJzZXF1ZW50 bHkgYXR0ZW1wdCB0byBlc3RhYmxpc2ggYSBUTFMgc2Vzc2lvbiB3aXRoIHRoZSBSZWRpcmVjdGlv biBUYXJnZXQuIEluIHN1Y2ggYSBjYXNlLCBhbnkgc3Vycm9nYXRlIG9yIHJlcXVlc3Qgcm91dGVy IHRvIHdoaWNoIHRoZSBVc2VyIEFnZW50IGlzIHJlZGlyZWN0ZWQgbmVlZHMgdG8gYmUgYWJsZSB0 byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UgYW5kIHRvIHBlcmZvcm0g ZW5jcnlwdGlvbiBvZiB0aGUgVExTIGNoYW5uZWwuDQoNClRoZSBwcml2YXRlIGtleSBmb3IgdGhl IGhvc3QgaW4gdGhlIFJUIGlzIG5lZWRlZCBpbiBvcmRlciB0byBzdWNjZXNzZnVsbHkgZXN0YWJs aXNoIGEgVExTIHNlc3Npb24uIFRoZSBtb3N0IHdpZGVzcHJlYWQgbWVjaGFuaXNtIGN1cnJlbnRs eSB1c2VkIGJ5IChub24taW50ZXJjb25uZWN0ZWQpIENETnMgaXMgZm9yIHRoZSBvd25lciBvZiB0 aGUgaG9zdCBpbiB0aGUgUlQgc2hhcmluZyB0aGVpciBwcml2YXRlIGtleSB3aXRoIHRoZWlyIENE TihzKSBvZiBjaG9pY2UuIEluIGNhc2VzIHdoZXJlIHRoZSBvd25lciBvZiB0aGUgaG9zdCBpcyBu b3Qgd2lsbGluZyB0byBzaGFyZSB0aGVpciBwcml2YXRlIGtleSwgb3RoZXIgbWVjaGFuaXNtcyB0 aGF0IGFsbG93IHRoZSBvd25lciB0byBub3Qgc2hhcmUgdGhlaXIgcHJpdmF0ZSBrZXkgYXJlIHVz ZWQsIGZvciBleGFtcGxlIEtleWxlc3MgU1NMIFtSRUZdLg0KDQpDRE5JIGJ5IGRlZmluaXRpb24g aW1wbGllcyB0aGF0IGEgQ29udGVudCBQcm92aWRlcqGvcyBjb250ZW50IHdpbGwgYmUgZGVsaXZl cmVkIGJ5IENETnMgb3RoZXIgdGhhbiB0aGUgQ0ROIHdpdGggd2hpY2ggdGhlIENvbnRlbnQgUHJv dmlkZXIgaGFzIGEgZGlyZWN0IGJ1c2luZXNzIHJlbGF0aW9uc2hpcC4gVGhlcmVmb3JlLCB3aGls ZSBDRE5JIGRvZXMgbm90IGludHJvZHVjZSBhbnkgbmV3IHRlY2huaWNhbCByZXF1aXJlbWVudHMg b24gZENETnMgd2hlbiBlc3RhYmxpc2hpbmcgVExTIHNlc3Npb25zLCBDb250ZW50IFByb3ZpZGVy cyBtYXkgYmUgbGVzcyB3aWxsaW5nIHRvIGhhdmUgdGhlaXIgcHJpdmF0ZSBrZXkgc2hhcmVkIHdp dGggZENETnMgdGhhbiB0aGV5IGFyZSB3aXRoIHRoZWlyIGNob3NlbiBDRE4ocykgaW4gYSBub24t aW50ZXJjb25uZWN0ZWQgc2NlbmFyaW8uDQoNCk1lY2hhbmlzbXMgdG8gZGlzdHJpYnV0ZSB0aGUg cmVxdWlyZWQgaW5mb3JtYXRpb24gYW5kL29yIGNvbmZpZ3VyYXRpb24gdG8gc3Vycm9nYXRlcyBh bmQgcmVxdWVzdCByb3V0ZXJzIGluIGRDRE5zIHRvIGVuYWJsZSBhIGRDRE4gdG8gc3VjY2Vzc2Z1 bGx5IGNvbXBsZXRlIFRMUyBoYW5kc2hha2VzIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2Yg dGhlIFRMUyBjaGFubmVsIGZvciBhIHBhcnRpY3VsYXIgaG9zdCwgc3VjaCBhcyBwcml2YXRlIGtl eXMgb3IgdGhlIFVSSS9JUCBhZGRyZXNzIG9mIGEga2V5IHNlcnZlciwgYXJlIG91dHNpZGUgdGhl IHNjb3BlIG9mIHRoaXMgZG9jdW1lbnQuDQoNCltSRUZdIGh0dHBzOi8vYmxvZy5jbG91ZGZsYXJl LmNvbS9rZXlsZXNzLXNzbC10aGUtbml0dHktZ3JpdHR5LXRlY2huaWNhbC1kZXRhaWxzLw0KPT09 RU5EPT09DQoNCkJlbg0KDQoNCkpvbiBQZXRlcnNvbg0KTmV1c3RhciwgSW5jLg0KDQoNCg0K --_000_D247D7A3168019jonpetersonneustarbiz_ Content-Type: text/html; charset="euc-kr" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PWV1Yy1rciI+DQo8L2hlYWQ+DQo8Ym9keSBzdHlsZT0id29yZC13 cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1i cmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtc2l6ZTog MTRweDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxkaXY+PGJyPg0KPC9k aXY+DQo8ZGl2Pkkgd291bGRuJ3Qgc2F5IHRoZSBwcm9ibGVtIGlzIHRoYXQgbWFsaWNpb3VzIGF0 dGFjaywgc28gbXVjaCBhcyBpdCBpcyBhIHJlc29sdmVyJ3MgaW5hYmlsaXR5IHRvIGRpc3Rpbmd1 aXNoIG5vcm1hbCByZWRpcmVjdGlvbiBmcm9tIGFuIGF0dGFjay4gRE5TU0VDIGxldHMgeW91IGRp c3Rpbmd1aXNoIHRob3NlIHRoaW5ncyAtIGlmIHlvdSBnZXQgcmVkaXJlY3RlZCB0byBhbm90aGVy IGRvbWFpbiwgd2l0aCBETlNTRUMgeW91IGhhdmUgYSBjcnlwdG9ncmFwaGljDQogYXNzdXJhbmNl IHRoYXQgdGhlIHRhcmdldCBkb21haW4gc2VudCB5b3UgdGhlcmUsIGFuZCB3aXRob3V0IEROU1NF QywgeW91IGRvbid0IGtub3cgaWYgeW91J3JlIGJlaW5nIHJlZGlyZWN0ZWQgYnkgdGhlIHRhcmdl dCBkb21haW4gb3IgYW4gYXR0YWNrZXIuIEJlY2F1c2UgRE5TU0VDIGlzIG5vdCB3aWRlbHkgYXZh aWxhYmxlIGluIHRoZSBlbnZpcm9ubWVudHMgdW5kZXIgY29uc2lkZXJhdGlvbiAoeWV0KSwgaW4g cHJhY3RpY2UgdGhpcyBtZWFucw0KIHRoYXQgdG8gZ2V0IHNlY3VyaXR5IGZvciB0aGVzZSBhcHBs aWNhdGlvbnMgd2hlbiB5b3UgZG8gRE5TIHJlZGlyZWN0aW9uIHlvdSBlbmQgdXAgZG9pbmcgdGhl IHNvcnRzIG9mIHdvcmthcm91bmRzIHRoYXQgeW91IGRldGFpbGVkIGluIHlvdXIgbGFzdCBtYWls LCB0aGUgc29ydHMgb2Ygd29ya2Fyb3VuZHMgcGVvcGxlIGFyZSBub3cgdHJ5aW5nIHRvIGltcHJv dmUgYXMgSFRUUFMgYmVjb21lcyBtb3JlIHByZXZhbGVudCB0aHJvdWdoIG1lYXN1cmVzDQogbGlr ZSBLZXlsZXNzIFNTTC48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkhUVFBTIHJlZGly ZWN0aW9uIGlzIGRpZmZlcmVudCBiZWNhdXNlIHRoZSBlbnRpdHkgc2VuZGluZyB5b3UgdGhlIHJl ZGlyZWN0aW9uICh0aGUgMzAyKSBpcyBzZW5kaW5nIGl0IHRvIHlvdSBvdmVyIFRMUywgd2hlbiB5 b3UndmUgYWxyZWFkeSBlc3RhYmxpc2hlZCBhIHNlY3VyaXR5IGFzc29jaWF0aW9uIGFuZCB5b3Ug aGF2ZSBhIGNyeXB0b2dyYXBoaWMgYXNzdXJhbmNlIHRoYXQgdGhlIHJlZGlyZWN0aW9uIGNhbWUg ZnJvbSB0aGUgdGFyZ2V0DQogZG9tYWluLiBBbiBhdHRhY2tlciB3aG8gZm9yZ2VzIGEgRE5TIHJl c3BvbnNlIHRvIHRoZSBvcmlnaW5hbCBmb3JtYXRpb24gb2YgdGhhdCBzZWN1cml0eSBhc3NvY2lh dGlvbiAoYXMgeW91IHRyeSB0byBkZXJlZmVyZW5jZQ0KPGEgaHJlZj0iaHR0cHM6Ly9leGFtcGxl LmNvbSI+aHR0cHM6Ly9leGFtcGxlLmNvbTwvYT4pIHdvdWxkIHNpbXBseSByZXN1bHQgaW4gdGhh dCBzZWN1cml0eSBhc3NvY2lhdGlvbiBuZXZlciBiZWluZyBlc3RhYmxpc2hlZC4gQnV0IGluIHRo YXQgY2FzZSwgeW91IGtub3cgaXQncyBhbiBhdHRhY2suIFRoYXQncyB3aGF0IGRpZmZlcmVudCAt IGluIHRoZSBETlMgeW91IGRvbid0LiBTbyBubywgSSB0aGluayB0aGUgc2l0dWF0aW9uIGlzIGRp ZmZlcmVudA0KIGZvciBIVFRQUyByZWRpcmVjdGlvbiB0aGFuIGZvciBETlMgcmVkaXJlY3Rpb246 IGluIEhUVFBTIHJlZGlyZWN0aW9uLCBpdCBpcyBjbGVhciB3aGVuIHlvdSByZWNlaXZlIHRoZSBy ZWRpcmVjdGlvbiByZXNwb25zZSB3aGV0aGVyIGl0IGNhbWUgZnJvbSBhbiBhdHRhY2tlciBvciB0 aGUgdGFyZ2V0IGRvbWFpbiAtIHlvdSBhbHdheXMga25vdyBpdCB3YXMgdGhlIHRhcmdldCBkb21h aW4gKHRvIHRoZSBkZWdyZWUgeW91IHRydXN0IHlvdXIgY3J5cHRvDQogYW55d2F5KS4mbmJzcDs8 L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Plllcywgd2hlcmUgd2UgZGlzYWdyZWUgaXMg dGhhdCBJIHRoaW5rIHNwZWNpZnlpbmcgRE5TIGFzIGEgcmVkaXJlY3Rpb24gbWV0aG9kIGhhcyBk aWZmZXJlbnQgc2VjdXJpdHkgcHJvcGVydGllcyB0aGFuIHNwZWNpZnlpbmcgSFRUUFMgYXMgYSBy ZWRpcmVjdGlvbiBtZXRob2QuIERvZXNuJ3QgbWVhbiB0aGVyZSBhcmVuJ3Qgd29ya2Fyb3VuZHMg dG8gYWRkcmVzcyBETlMncyBzaXR1YXRpb24sIGJ1dCBJIHRoaW5rIGVsaWRpbmcgb3Igc2tpbW1p bmcNCiBvdmVyIHRoZXNlIGRpZmZlcmVuY2VzIGRvZXMgaW1wbGVtZW50ZXJzIGFuZCBmdXR1cmUg c3BlY2lmaWNhdGlvbnMgYSBkaXNzZXJ2aWNlIC0gd2Ugc2hvdWxkIGV4cGxhaW4gd2hhdCB0aGV5 IGFyZS4gTm93LCBpdCdzIG5vdCBteSBpbnRlbnRpb24gaGVyZSB0byBidXJkZW4gdGhlIGNkbmkt cmVkaXJlY3Rpb24gZG9jdW1lbnQgd2l0aCBkZXRhaWxpbmcgYSBzb2x1dGlvbiBmb3Igc2VjdXJl IEROUyByZWRpcmVjdGlvbiBpbiB0aGUgYWJzZW5jZSBvZg0KIEROU1NFQy4gTXkgbWljIGNvbW1l bnQgbWVyZWx5IHN1Z2dlc3RlZCB0aGF0LCBzaW5jZSBwZW9wbGUgd2VyZSB0YWxraW5nIGFib3V0 IGhvdyB0byBpbXByb3ZlIHRoZSB3b3JrYXJvdW5kcywgdGhhdCBkZXNjcmliaW5nIHRoZSBwcm9i bGVtIGhlcmUgc2VlbWVkIGFwcHJvcHJpYXRlLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxk aXY+Sm9uIFBldGVyc29uPC9kaXY+DQo8ZGl2Pk5ldXN0YXIsIEluYy48L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0KPGRpdiBzdHlsZT0i Zm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjExcHQ7IHRleHQtYWxpZ246bGVmdDsgY29s b3I6YmxhY2s7IEJPUkRFUi1CT1RUT006IG1lZGl1bSBub25lOyBCT1JERVItTEVGVDogbWVkaXVt IG5vbmU7IFBBRERJTkctQk9UVE9NOiAwaW47IFBBRERJTkctTEVGVDogMGluOyBQQURESU5HLVJJ R0hUOiAwaW47IEJPUkRFUi1UT1A6ICNiNWM0ZGYgMXB0IHNvbGlkOyBCT1JERVItUklHSFQ6IG1l ZGl1bSBub25lOyBQQURESU5HLVRPUDogM3B0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpi b2xkIj5Gcm9tOiA8L3NwYW4+QmVuIE5pdmVuLUplbmtpbnMgJmx0OzxhIGhyZWY9Im1haWx0bzpi ZW5Abml2ZW4tamVua2lucy5jby51ayI+YmVuQG5pdmVuLWplbmtpbnMuY28udWs8L2E+Jmd0Ozxi cj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRlOiA8L3NwYW4+U2F0dXJkYXks IE9jdG9iZXIgMTcsIDIwMTUgYXQgNDo0NCBBTTxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdo dDpib2xkIj5UbzogPC9zcGFuPkpvbiBQZXRlcnNvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpvbi5w ZXRlcnNvbkBuZXVzdGFyLmJpeiI+am9uLnBldGVyc29uQG5ldXN0YXIuYml6PC9hPiZndDs8YnI+ DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+Q2M6IDwvc3Bhbj4mcXVvdDtGcmFuY29p cyBMZSBGYXVjaGV1ciAoZmxlZmF1Y2gpJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86ZmxlZmF1 Y2hAY2lzY28uY29tIj5mbGVmYXVjaEBjaXNjby5jb208L2E+Jmd0OywgJnF1b3Q7PGEgaHJlZj0i bWFpbHRvOmNkbmlAaWV0Zi5vcmciPmNkbmlAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVm PSJtYWlsdG86Y2RuaUBpZXRmLm9yZyI+Y2RuaUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPHNwYW4g c3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlN1YmplY3Q6IDwvc3Bhbj5SZTogW0NETmldIEpvbidz IGNvbW1ldCBvbiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb248YnI+DQo8L2Rpdj4NCjxkaXY+ PGJyPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3JkOyAt d2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUt c3BhY2U7IiBjbGFzcz0iIj4NCkpvbiwNCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRp dj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiAx NyBPY3QgMjAxNSwgYXQgMDA6MTIsIFBldGVyc29uLCBKb24gJmx0OzxhIGhyZWY9Im1haWx0bzpq b24ucGV0ZXJzb25AbmV1c3Rhci5iaXoiIGNsYXNzPSIiPmpvbi5wZXRlcnNvbkBuZXVzdGFyLmJp ejwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9IndvcmQt d3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUt YnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyBmb250LXNpemU6IDE0cHg7IGZvbnQtZmFtaWx5OiBD YWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5PZiBjb3Vyc2UgaXQgZGVwZW5kcyBvbiB3aGF0IGFu Z2xlIHlvdSBsb29rIGF0IHRoZSBwcm9ibGVtIGZyb20sIGJ1dCBpZiB0aGVyZSdzIG5vIHByb2Js ZW0gd2l0aCBIVFRQUyByZWRpcmVjdGlvbiAoMzAyIG92ZXIgVExTIGZyb20gdUNETiB0byBkQ0RO KSwgYW5kIG5vIHByb2JsZW0gd2l0aCBETlMgcmVkaXJlY3Rpb24gd2l0aCBETlNTRUMsIGJ1dCB0 aGVyZSBpcyBhIHByb2JsZW0gd2hlbiB5b3UgZG8gRE5TIHJlZGlyZWN0aW9uDQogd2l0aG91dCBE TlNTRUMsIEkgd291bGQgb3JkaW5hcmlseSBsb2NhdGUgdGhlIHByb2JsZW0gdGhlcmUuPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCkFoLCBPSywgSSB0aGluayBJoa9tIHN0YXJ0aW5nIHRvIHVuZGVyc3RhbmQgbm93LiBJZiBJ IGhhdmUgdW5kZXJzdG9vZCBjb3JyZWN0bHksIHdoYXQgeW91IHdvdWxkIGxpa2UgaXMgZm9yIHRo ZSByZWRpcmVjdGlvbiBpbnRlcmZhY2UgdG8gYWNrbm93bGVkZ2UgdGhhdCB3aXRob3V0IEROU1NF QyBhIG1hbGljaW91cyBETlMgcmVzb2x2ZXIgY291bGQgcmV0dXJuIEROUyByZXNwb25zZXMgKElQ IGFkZHJlc3Nlcy9DTkFNRXMvd2hhdGV2ZXIpIHRoYXQgc3RlZXINCiB0aGUgVXNlciBBZ2VudCB0 byBhIG1hbGljaW91cyBzZXJ2ZXIuIEROU1NFQyB3b3VsZCBwcmV2ZW50IHRoYXQgYmVjYXVzZSBy ZXNwb25zZXMgd291bGQgbmVlZCB0byBiZSBzaWduZWQgYW5kIGEgbWFsaWNpb3VzIEROUyByZXNv bHZlciB3b3VsZCB0aGVyZWZvcmUgbm90IGJlIGFibGUgdG8gcmV0dXJuIG1hbGljaW91cyByZXNw b25zZXMgYXMgaXQgd291bGQgbm90IGJlIGFibGUgdG8gZ2VuZXJhdGUgcHJvcGVybHkgc2lnbmVk IEROUyByZXNwb25zZXMuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5E byBJIGhhdmUgdGhhdCBjb3JyZWN0PzwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXY+SWYgdGhhdKGvcyB0aGUgY29uY2VybiB3ZSBjYW4gZGVmaW5pdGVseSBpbmNsdWRlIHNv bWUgdGV4dCBpbiB0aGUgZG9jdW1lbnQgYWJvdXQgaXQuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdj5Ib3dldmVyLCB0aGF0IGNvbmNlcm4gYXBwbGllcyB0byBIVFRQICZh bXA7IEhUVFBTIHJlZGlyZWN0aW9uIGFzIHdlbGwuIElmIGEgQ0ROIGlzIHBlcmZvcm1pbmcgSFRU UCByZWRpcmVjdGlvbiBhbmQgdGhlIFVSSSBpdCBpcyByZWRpcmVjdGluZyB0byBjb250YWlucyBh IGhvc3QgKGluc3RlYWQgb2YgYW4gSVAgYWRkcmVzcykgdGhlbiBETlMgcmVzcG9uc2VzIHRvIHJl c29sdmUgdGhhdCBob3N0IGNvdWxkIGFsc28gYmUgaGlqYWNrZWQgYnkgYSBtYWxpY2lvdXMNCiBE TlMgcmVzb2x2ZXIuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5JbiB0 aGUgY2FzZSBvZiBlbmNyeXB0ZWQgdHJhZmZpYywgcmVnYXJkbGVzcyBvZiB3aGV0aGVyIEROUyBi YXNlZCBvciBIVFRQUyBiYXNlZCByZWRpcmVjdHMgYXJlIHVzZWQsIGlmIEROU1NFQyBpcyBub3Qg dXNlZCB0aGVuIHRoZSBETlMgcmVzcG9uc2UgaGlqYWNraW5nIHByb2JsZW0gc3RpbGwgZXhpc3Rz LCBleGNlcHQgdGhhdCB3aGVuIGEgVXNlciBBZ2VudCB0cmllcyB0byBjb25uZWN0IHRvIHRoZSBt YWxpY2lvdXMgc2VydmVyIGluIHRoZQ0KIEROUyByZXNwb25zZSwgdGhlIG1hbGljaW91cyBzZXJ2 ZXIgd2lsbCBub3QgYmUgYWJsZSB0byBkZWxpdmVyIGNvbnRlbnQgdG8gdGhlIFVzZXIgQWdlbnQg YXMgdGhlIG1hbGljaW91cyBzZXJ2ZXIgd2lsbCBub3QgYmUgYWJsZSB0byBlc3RhYmxpc2ggYSBU TFMgc2Vzc2lvbiB3aXRoIHRoZSBVc2VyIEFnZW50LiZuYnNwOzwvZGl2Pg0KPGRpdj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXY+SG93ZXZlciBhcyB0aGUgbWFsaWNpb3VzIEROUyByZXNvbHZl ciBpcyBzdGlsbCBhYmxlIHRvIHN0ZWVyIHRyYWZmaWMgdG8gYSBtYWxpY2lvdXMgc2VydmVyIHZp YSBhIG1hbGljaW91cyBETlMgcmVzcG9uc2UsIEROUyByZXNwb25zZSBoaWphY2tpbmcgY291bGQg c3RpbGwgYmUgdXNlZCB0byBtb3VudCB3aGF0IGlzIGVmZmVjdGl2ZWx5IGEgRG9TIGF0dGFjayBh Z2FpbnN0IHRoZSBDRE4vQ29udGVudCBQcm92aWRlci4gVGhpcyBpcyBiZWNhdXNlDQogdGhlIFVz ZXIgQWdlbnQgd29uoa90IGJlIGFibGUgdG8gcmVjZWl2ZSB0aGUgY29udGVudCB0aGF0IGl0IHdh bnRzIGJlY2F1c2UgaXQgaXMgYmVpbmcgdG9sZCB0byByZXRyaWV2ZSBpdCBmcm9tIGEgc2VydmVy IHRoYXQgaXQgY2Fuoa90IGVzdGFibGlzaCBhIFRMUyBzZXNzaW9uIHRvLjwvZGl2Pg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+VGhlcmVmb3JlLCBteSBzdWdnZXN0aW9uIHdvdWxk IGJlIHRoYXQgd2UgaW5jbHVkZSBzb21lIHRleHQgc2F5aW5nIHRoYXQgaWYgRE5TU0VDIGlzIG5v dCB1c2VkLCB0aGVuIHRoZXJlIGlzIHRoZSBwb3NzaWJpbGl0eSB0aGF0IGRvbWFpbnMgdXNlZCBm b3IgcmVkaXJlY3Rpb24gKHdoZXRoZXIgdGhhdCBpcyBETlMgcmVkaXJlY3Rpb24sIEhUVFAgcmVk aXJlY3Rpb24gb3IgSFRUUFMgcmVkaXJlY3Rpb24pIGNvdWxkIGhhdmUgdGhlaXIgRE5TDQogcmVz cG9uc2VzIGhpamFja2VkIGFuZCBiYWQgdGhpbmdzIGNvdWxkIHJlc3VsdC4gVGhlIHR5cGUgb2Yg bnVtYmVyIG9mIGJhZCB0aGluZ3MgYSBtYWxpY2lvdXMgYWN0b3IgY291bGQgZG8gaXMgbXVjaCBn cmVhdGVyIHdpdGggSFRUUCB0cmFmZmljIHRoYW4gd2l0aCBIVFRQUyB0cmFmZmljIGJ1dCBmb3Ig SFRUUFMgdHJhZmZpYyB0aGUgbnVtYmVyIG9mIGJhZCB0aGluZ3MgYSBtYWxpY2lvdXMgYWN0b3Ig Y291bGQgYWNoaWV2ZSBpcyBub3QgemVybywNCiBidXQgdGhleSBhcmUgbGltaXRlZCB0byBEb1Mg cmF0aGVyIHRoYW4gaW5qZWN0aW9uIG9mIHRoZWlyIG93biBjb250ZW50LjwvZGl2Pg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+SWYgeW91IGFncmVlIHdpdGggdGhlIGFib3ZlIEkg Y2FuIHByb3Bvc2Ugc29tZSB0ZXh0IHRvIGRlc2NyaWJlIHRoZSBwcm9ibGVtLjwvZGl2Pg0KPGRp dj4mbmJzcDs8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJr aXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJyZWFrOiBhZnRlci13aGl0ZS1zcGFj ZTsgZm9udC1zaXplOiAxNHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5UaGUgaW5zZWN1cml0eSBvZiByZWRpcmVjdGluZyB3aXRo IHRoZSBETlMgKGluIHRoZSBhYnNlbmNlIG9mIEROU1NFQykgaXMgbW9yZW92ZXIgYSBwcm9ibGVt IG11Y2ggYmlnZ2VyIHRoYW4gQ0ROcy4gVGhlcmUgd2FzIGEgZHJhZnQgYSBmZXcgeWVhcnMgYWdv IGNhbGxlZCB0aGUgJnF1b3Q7SEFSRCBwcm9ibGVtJnF1b3Q7IGRyYWZ0LCB3aGVyZSAmcXVvdDtI QVJEJnF1b3Q7IHN0b29kIGZvciAmcXVvdDtoaWdoIGFzc3VyYW5jZSByZS1kaXJlY3Rpb24mcXVv dDsgdGhhdCBsb29rZWQNCiBhdCB0aGlzIGFzIGEgZ2VuZXJhbCBwcm9ibGVtIGludm9sdmluZyBh cHBsaWNhdGlvbnMgYmV5b25kIEhUVFAgbGlrZSBYTVBQLCBhbmQgbm90aW5nIHRoYXQgaXQgaGFw cGVuZWQgZm9yIHJlc291cmNlIHJlY29yZHMgbGlrZSBTUlYgYmV5b25kIENOQU1FLiBJdCBoYXMg YmVlbiBhIGtub3duIGlzc3VlIGZvciBhIHZhcmlldHkgb2YgdmlydHVhbCBob3N0aW5nIGFyY2hp dGVjdHVyZXMsIHdoaWNoIGhhdmUgcHJvcGVydGllcyBzaW1pbGFyIHRvIENETg0KIGludGVyY29u bmVjdGlvbiwgZm9yIHNvbWUgdGltZS4gSSBoYXZlIGEgdG91Z2ggdGltZSB1bmRlcnN0YW5kaW5n IHdoeSB3ZSB3b3VsZG4ndCB3YW50IHRvIGFja25vd2xlZGdlIGl0IGFzIHRoZSBwcm9ibGVtIGhl cmUuICZuYnNwO1NheWluZyB0aGUgcHJvYmxlbSBpcyB0aGUgZGlmZmljdWx0eSBpbiBnZXR0aW5n IGtleXMgdG8gZXN0YWJsaXNoIGEgVExTIGNvbm5lY3Rpb24gaXMgdG8gbWUgc29ydCBvZiBsaWtl IHNheWluZyB0aGUgcHJvYmxlbSB3aXRoDQogYmVpbmcgdGllZCB0byBhIHN0b25lIGF0IHRoZSBi b3R0b20gb2YgYSBsYWtlIGlzIHRoYXQgeW91IGRvbid0IGhhdmUgYSBzY3ViYSB0YW5rLjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QnV0 IHJlYWxseSwgdGhpcyB3YXMgYW4gb2ZmaGFuZCByZW1hcmsgYXQgYSBtaWMuIElmIG5vIGVsc2Ug Y2FyZXMsIGRvIHdoYXQgeW91J2QgbGlrZSBvdmVyIG15IG9iamVjdGlvbnMuIEkgdGhpbmsgdGhl IG5ldyBwcm9wb3NlZCB0ZXh0IGlzIG1vcmUgaGVscGZ1bCB0byBpbXBsZW1lbnRlcnMsIGJ1dCBp dCBpcyBzb2x1dGlvbiB0ZXh0IHJhdGhlciB0aGFuIHByb2JsZW0gdGV4dCwgYW5kIGRvZXMgbm90 IGRpZmZlcmVudGlhdGUNCiB0aGUgc2l0dWF0aW9uIGZvciBIVFRQUyBhbmQgaW5zZWN1cmUgRE5T LCBzbyBpdCBkb2Vzbid0IGFkZHJlc3MgbXkgY29uY2Vybi48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KSaGvZCBsaWtlIHRv IGRvY3VtZW50IHRoZSBpc3N1ZXMgdGhhdCBhZmZlY3QgQ0ROSSByZWRpcmVjdGlvbi4gVGhlIGNo YWxsZW5nZSBmb3IgbWUgaW4gZG9pbmcgdGhpcyBpcyB0aGF0IEkgZG8gbm90IGtub3cgd2hhdCBh bGwgdGhvc2UgcHJvYmxlbXMgYXJlIGFuZCB0aGVyZSBoYXMgbm90IGJlZW4gYSBjbGVhciBkZXNj cmlwdGlvbiBvZiB0aGUgcHJvYmxlbShzKSB0byB3b3JrIG9mZiBzbyBJoa9tIGhhdmluZyB0byBp bmZlciB3aGF0IHRoZXkgYXJlDQogKHRoYXQgY29tbWVudCBpcyBub3QgYWltZWQgYXQgeW91IGlu IHBhcnRpY3VsYXIsIHRoZSB0d28gZHJhZnRzIG9uIHRoaXMgdG9waWMgZG8gbm90IHByb3ZpZGUg YSBjbGVhciBwcm9ibGVtIGRlc2NyaXB0aW9uIElNTykuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdj5JIGFsc28gdGhpbmsgdGhlcmUgbWF5IGJlIGEgbWlzLWNvbm5lY3Qg YmVjYXVzZSBJIGJlbGlldmUgdGhlIHByb2JsZW0geW91IGFyZSB0cnlpbmcgdG8gaGlnaGxpZ2h0 IGFwcGxpZXMgdG8gYWxsIHJlZGlyZWN0aW9uIG1ldGhvZHMgKEROUywgSFRUUCAmYW1wOyBIVFRQ UyksIGFuZCB5b3Ugc2VlbSB0byB0aGluayBpdCBvbmx5IGFwcGxpZXMgdG8gRE5TIGJhc2VkIHJl ZGlyZWN0aW9uLjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+T25jZSB3 ZSBoYXZlIHRoZSBwcm9ibGVtIGFncmVlZCwgSSBjYW4gcHJvcG9zZSB0ZXh0IHRvIGRlc2NyaWJl IGl0LjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+QmVuPC9kaXY+DQo8 ZGl2PjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9IndvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1u YnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyBm b250LXNpemU6IDE0cHg7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5K b24gUGV0ZXJzb248L2Rpdj4NCjxkaXYgY2xhc3M9IiI+TmV1c3RhciwgSW5jLjwvZGl2Pg0KPGRp diBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxzcGFuIGlkPSJPTEtfU1JDX0JPRFlf U0VDVElPTiIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogQ2FsaWJyaTsgZm9u dC1zaXplOiAxMXB0OyB0ZXh0LWFsaWduOiBsZWZ0OyBib3JkZXItd2lkdGg6IDFwdCBtZWRpdW0g bWVkaXVtOyBib3JkZXItc3R5bGU6IHNvbGlkIG5vbmUgbm9uZTsgcGFkZGluZzogM3B0IDBpbiAw aW47IGJvcmRlci10b3AtY29sb3I6IHJnYigxODEsIDE5NiwgMjIzKTsiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiIGNsYXNzPSIiPkZyb206IDwvc3Bhbj5CZW4gTml2 ZW4tSmVua2lucyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJlbkBuaXZlbi1qZW5raW5zLmNvLnVrIiBj bGFzcz0iIj5iZW5Abml2ZW4tamVua2lucy5jby51azwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiIGNsYXNzPSIiPkRhdGU6IDwvc3Bhbj5GcmlkYXks IE9jdG9iZXIgMTYsIDIwMTUgYXQgMTA6NDAgQU08YnIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0i Zm9udC13ZWlnaHQ6Ym9sZCIgY2xhc3M9IiI+VG86IDwvc3Bhbj5Kb24gUGV0ZXJzb24gJmx0Ozxh IGhyZWY9Im1haWx0bzpqb24ucGV0ZXJzb25AbmV1c3Rhci5iaXoiIGNsYXNzPSIiPmpvbi5wZXRl cnNvbkBuZXVzdGFyLmJpejwvYT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQt d2VpZ2h0OmJvbGQiIGNsYXNzPSIiPkNjOiA8L3NwYW4+JnF1b3Q7RnJhbmNvaXMgTGUgRmF1Y2hl dXIgKGZsZWZhdWNoKSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNv bSIgY2xhc3M9IiI+ZmxlZmF1Y2hAY2lzY28uY29tPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1h aWx0bzpjZG5pQGlldGYub3JnIiBjbGFzcz0iIj5jZG5pQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciIGNsYXNzPSIiPmNkbmlAaWV0Zi5vcmc8L2E+ Jmd0OzxiciBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIiBjbGFzcz0i Ij5TdWJqZWN0OiA8L3NwYW4+UmU6IFtDRE5pXSBKb24ncyBjb21tZXQgb24gZHJhZnQtaWV0Zi1j ZG5pLXJlZGlyZWN0aW9uPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9IndvcmQtd3JhcDog YnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJlYWs6 IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQpIaSBKb24sDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8Ymxv Y2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMTYgT2N0IDIw MTUsIGF0IDE3OjA2LCBQZXRlcnNvbiwgSm9uICZsdDs8YSBocmVmPSJtYWlsdG86am9uLnBldGVy c29uQG5ldXN0YXIuYml6IiBjbGFzcz0iIj5qb24ucGV0ZXJzb25AbmV1c3Rhci5iaXo8L2E+Jmd0 OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSIiPkhvdyBETlMgcmVkaXJlY3Rpb24gd29ya3MgaXMgdGhhdCB0aGUgVXNlciBBZ2VudCBkb2Vz IGEgcmVzb2x1dGlvbiBmb3I8YnIgY2xhc3M9IiI+DQpmb28uZXhhbXBsZSBhbmQgaXQgZ2V0cyBh IHJlc3BvbnNlIGZvciBmb28uZXhhbXBsZS4gVGhlIGZhY3QgYSBDTkFNRSBpczxiciBjbGFzcz0i Ij4NCnByZXNlbnQgJmFtcDsgcmVzb2x2ZWQgYnkgdGhlIEROUyByZXNvbHZlciBpcyBpbnZpc2li bGUgdG8gdGhlIFVzZXIgQWdlbnQ8YnIgY2xhc3M9IiI+DQooZXZpZGVuY2VkIGJ5IHRoZSBmYWN0 IHRoZSBVUkwgYmFyIGluIHRoZSBicm93c2VyIGRvZXNuqfZ0IGNoYW5nZSBkb21haW48YnIgY2xh c3M9IiI+DQpuYW1lL2hvc3RuYW1lIHdoZW4gRE5TIHJlZGlyZWN0aW9uIGlzIHBlcmZvcm1lZCku PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KSXQgaXMgY2VydGFp bmx5IGludmlzaWJsZSB0byB0aGUgYnJvd3NlciB3aGVuIGV2ZXJ5IGRDRE4gaG9sZHMgdGhlIHBy aXZhdGU8YnIgY2xhc3M9IiI+DQprZXkgb2YgZXZlcnkgdUNETiB0aGF0IG1pZ2h0IHJlZGlyZWN0 IHRvIGl0LCBhcyB5b3Ugc3RpcHVsYXRlIGJlbG93LjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp diBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCkkgZXhwbGFpbmVkIGhvdyBpdCBpcyBk b25lIGluIHRoZSBtYWpvcml0eSBvZiBjYXNlcyB0b2RheS4gVGhhdCBpc26hr3QgdGhlIG9ubHkg c29sdXRpb24sIEtleWxlc3MgU1NMIGlzIGFub3RoZXIgZm9yIGV4YW1wbGUuPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi Pg0KPGRpdiBjbGFzcz0iIj5JZjxiciBjbGFzcz0iIj4NCnRoYXQgaXMgYW4gb3BlcmF0aW9uYWwg cmVxdWlyZW1lbnQgb2YgdGhlIEROUyByZWRpcmVjdGlvbiBtZWNoYW5pc20gaW48YnIgY2xhc3M9 IiI+DQpjZG5pLXJlZGlyZWN0aW9uLCBpdCBuZWVkcyB0byBiZSBtYWRlIGV4cGxpY2l0LjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCkl0 oa9zIG5vdCBhbiBvcGVyYXRpb25hbCByZXF1aXJlbWVudCBJTU8sIHRoZSBvcGVyYXRpb25hbCBy ZXF1aXJlbWVudCBpcyB0aGF0IHRoZSBkQ0ROIGlzIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBs ZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gKGFuZCBkZWNy eXB0aW9uKSBvZiB0aGUgVExTIGNoYW5uZWwuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5U aGUgcHJvcG9zZWQgdGV4dCBqdXN0PGJyIGNsYXNzPSIiPg0Kc2F5cyB0aGF0ICZxdW90O2FueSBz dXJyb2dhdGUgb3IgcmVxdWVzdCByb3V0ZXIgdG8gd2hpY2ggdGhlIFVzZXIgQWdlbnQgaXM8YnIg Y2xhc3M9IiI+DQpyZWRpcmVjdGVkIG5lZWRzIHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNv bXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlJnF1b3Q7PGJyIGNsYXNzPSIiPg0KZXRjLiwgd2hpY2gg Y291bGQgYmUgcmVhZCB0byBpbXBseSB0aGF0IGFzIGEgc29sdXRpb24sIGJ1dCBub3QgaWYgeW91 PGJyIGNsYXNzPSIiPg0KZG9uJ3QgdW5kZXJzdGFuZCB3aGF0IHRoZSBwcm9ibGVtIGlzIGluIHRo ZSBmaXJzdCBwbGFjZS4gSSB3YXMgYXNraW5nIHRoYXQ8YnIgY2xhc3M9IiI+DQp0aGlzIGFja25v d2xlZGdlIHRoZSBwcm9ibGVtLCBub3Qgc3BlY2lmeSBhIHNvbHV0aW9uLjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCkdvb2QsIHRoYXShr3Mgd2hhdCB3ZSB3ZXJlIHRyeWluZyB0byBkbywgbWF5YmUgdGhlIHRl eHQgd2UgdXNlZCBuZWVkcyBzb21lIHJlZmluZW1lbnQgdG8gYmUgYmV0dGVyIHVuZGVyc3RhbmRh YmxlIHRvIG90aGVycyBidXQgd2Ugd29yZGVkIGl0IHRoZSB3YXkgaXQgaXMgdG8gZXhwbGljaXRs eSBhdm9pZCBzdWdnZXN0aW5nIGEgc29sdXRpb24uPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij5Nb3Jlb3ZlciwgdGhlIHN1YnN0YW5jZSBvZiBteSBjb21tZW50IHdhcyB0aGF0IHRoZSBwcm9i bGVtIGlzIGRpZmZlcmVudDxiciBjbGFzcz0iIj4NCmZvciBETlMgcmVkaXJlY3Rpb24gdGhhbiBp dCBpcyBmb3IgSFRUUFMgcmVkaXJlY3Rpb24uPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+SFRUUFMgcmVkaXJlY3Rpb248YnIgY2xhc3M9IiI+DQpzaG91bGRuJ3QgcmVxdWly ZSBldmVyeSBkQ0ROIHRvIGhhdmUgZXZlcnkgdUNETnMgcHJpdmF0ZSBrZXlpbmcgbWF0ZXJpYWwu PGJyIGNsYXNzPSIiPg0KVGhlIHByb3Bvc2VkIHRleHQgdHJlYXRzIHRoaXMgbGlrZSB0aGUgdHdv IG1ldGhvZHMgaGF2ZSB0aGUgc2FtZTxiciBjbGFzcz0iIj4NCnByb3BlcnRpZXMuPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KSSB0aGlu ayBpdCBtYXkgZGVwZW5kIHdoYXQgYW5nbGUgeW91IHZpZXcgdGhlIHByb2JsZW0gZnJvbS4gRnJv bSBteSBhbmdsZSBvZiB2aWV3IHRoZSBwcm9ibGVtIGlzIHRoYXQgdGhlIGRDRE4gbmVlZHMgdG8g c3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVu Y3J5cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsLiBXaGF0IHRoZSBkQ0ROIG5lZWRzIGluIG9yZGVy IHRvIGRvIHRoYXQgaXMgdGhlIHNhbWUNCiBpbiBib3RoIGNhc2VzOiBwcml2YXRlIGtleXMsIG9y IHNvbWUgb3RoZXIgbWVjaGFuaXNtIHN1Y2ggYXMgS2V5bGVzcyBTU0wgdGhhdCB3aWxsIGVuYWJs ZSB0aGUgZENETiB0byBjb21wbGV0ZSB0aGUgaGFuZHNoYWtlIGFuZCBlbmNyeXB0L2RlY3J5cHQg dGhlIHRyYWZmaWMuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5UaGUgZmFjdCB0aGF0IGZvciBhIGxvdCBvZiBIVFRQUyAzMDIgcmVkaXJl Y3Rpb24gY2FzZXMgdGhlIGRDRE4gd2lsbCBiZSByZWRpcmVjdGluZyB0byBhIGhvc3RuYW1lIHVu ZGVyIHRoZSBkQ0ROoa9zIGNvbnRyb2wgKGJ1dCB0aGF0IGlzIG5vdCBndWFyYW50ZWVkKSBtYXkg bWFrZSBiZWluZyBhYmxlIHRvJm5ic3A7c3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFu ZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YNCiB0aGUgVExTIGNoYW5uZWwgZWFz aWVyIGZvciB0aGUgZENETiBidXQgaXQgZG9lc26hr3QgY2hhbmdlIHRoZSBiYXNpYyBwcm9ibGVt IG9mIHdoYXQgdGhlIGRDRE4gbmVlZHMgaW4gb3JkZXIgdG8gZG8gaXRzIGpvYi4gQW5kIGZvciAo YXQgbGVhc3Qgc29tZSkgY2FzZXMgd2hlcmUgdGhlIDMwMiByZWRpcmVjdGlvbiBpcyB0byBhIGhv c3RuYW1lIG5vdCB1bmRlciBjb250cm9sIG9mIHRoZSBkQ0ROIHRoZSBwcm9wZXJ0aWVzIGFyZSB0 aGUgc2FtZSBmb3INCiBib3RoIEROUyAmYW1wOyBIVFRQUyAzMDIgcmVkaXJlY3Rpb24uPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi PlRoZXJlZm9yZSBhcyBsb25nIGFzIHRoZSBJUCBhZGRyZXNzKGVzKSBpbiB0aGUgRE5TIHJlc3Bv bnNlIHByZXNlbnRzIHRoZTxiciBjbGFzcz0iIj4NCmNvcnJlY3QgY2VydGlmaWNhdGUgZm9yIGZv by5leGFtcGxlIGFuZCBoYXMgdGhlIGNvcnJlY3QgY3JlZGVudGlhbHMgKGUuZy48YnIgY2xhc3M9 IiI+DQpQcml2YXRlIGtleSBmb3IgZm9vLmV4YW1wbGUpIHRvIGNvbXBsZXRlIHRoZSBUTFMgaGFu ZHNoYWtlICZhbXA7PGJyIGNsYXNzPSIiPg0KZW5jcnlwdC9kZWNyeXB0IHRyYWZmaWMgb24gdGhh dCBUTFMgc2Vzc2lvbiB0aGUgVXNlciBBZ2VudCB3aWxsIG5vdDxiciBjbGFzcz0iIj4NCmNvbXBs YWluLiBUaGlzIGlzIGhvdyBETlMtYmFzZWQgSFRUUFMgcmVkaXJlY3Rpb24gaXMgZG9uZSBpbiBD RE5zIHRvZGF5PGJyIGNsYXNzPSIiPg0Kd2hlcmUgdHlwaWNhbGx5IGEgQ1NQIHdpbGwgcHJvdmlk ZSB0aGVpciBjZXJ0aWZpY2F0ZSAmYW1wOyBwcml2YXRlIGtleSB0byB0aGU8YnIgY2xhc3M9IiI+ DQpDRE4gc28gdGhlIENETiBjYW4gdGVybWluYXRlIFRMUyBzZXNzaW9ucyBzdWNjZXNzZnVsbHkg b24gdGhlIENTUKn2czxiciBjbGFzcz0iIj4NCmJlaGFsZi4gd2hpY2ggbWVhbnMgaWYgSFRUUFMg cmVkaXJlY3Rpb24gaXMgaW5zZWN1cmUgZm9yIENETkkgdGhlbiBIVFRQUzxiciBjbGFzcz0iIj4N CnJlZGlyZWN0aW9uIHVzZWQgYnkgQ0ROcyBpbiB0aGUgd2lsZCB0b2RheSAod2l0aG91dCBDRE5J KSBpcyBhbHNvPGJyIGNsYXNzPSIiPg0KaW5zZWN1cmUgKHdoaWNoIGl0IGlzbqn2dCkuPGJyIGNs YXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KSWRlbnRpZnlpbmcgYSBrbm93 biB3b3JrYXJvdW5kIGRvZXMgbm90IG1lYW4gdGhlcmUgaXNuJ3QgYSBwcm9ibGVtLiBUaGF0PGJy IGNsYXNzPSIiPg0KdGhlcmUgaXMgYSB3b3JrYXJvdW5kIGlzIHByb29mIHRoZXJlIGlzIGEgcHJv YmxlbS48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpJoa9tIG5vdCBzdXJlIEmhr2QgY2FsbCB0aGUgd2F5IHRo YXQgdGhlIG1ham9yaXR5IG9mIENETiBkZWxpdmVyZWQgSFRUUFMgdHJhZmZpYyBpcyBkZWxpdmVy ZWQgYSB3b3JrYXJvdW5kIG15c2VsZiAoSSBvbmx5IGRlc2NyaWJlZCB0aGUgbW9zdCBjb21tb24g bWVjaGFuaXNtLCB0aGVyZSBhcmUgb3RoZXJzIG1lY2hhbmlzbXMgdGhhdCBkb26hr3QgcmVseSBv biBzaGFyaW5nIHRoZSBwcml2YXRlIGtleSBhbmQgd2hpY2ggYXJlIHVzZWQgaW4gdGhlIHdpbGQs DQogZS5nLiBLZXlsZXNzIFNTTCkuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CdXQgdGhhdKGvcyBvZmYtdG9waWMgc28gbGV0oa9zIG1v dmUgb24uPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5JTU8gSSB0 aGluayB0aGUgcmVhbCBwcm9ibGVtIGlzIGEgZGlmZmVyZW50IHRoaW5nIHRoYXQ8YnIgY2xhc3M9 IiI+DQpkcmFmdC1zbG92ZXRza2l5LWNkbmktaHR0cHMtZGVsZWdhdGlvbi1hcHByb2FjaGVzIGhp bnRzIGF0IHdpdGhvdXQ8YnIgY2xhc3M9IiI+DQpzdGF0aW5nIGV4cGxpY2l0bHkuIFRoYXQgaXMg aG93IGZhciB3aWxsIGEgQ1NQIHRydXN0IGRlbGVnYXRpbmcgaXRzPGJyIGNsYXNzPSIiPg0KY3Jl ZGVudGlhbHMgKGUuZy4gUHJpdmF0ZSBrZXkpIGdpdmVuIHRoYXQgdGhlIGNvbnNlcXVlbmNlcyBv ZiBsZWFrYWdlIG9mPGJyIGNsYXNzPSIiPg0KdGhvc2UgY3JlZGVudGlhbHMgYXJlIHZlcnkgYmFk LiBUaGVyZSBhcmUgcG9zc2libGUgc29sdXRpb25zIHRvIGF2b2lkIHRoZTxiciBjbGFzcz0iIj4N CkNTUCBoYXZpbmcgdG8gZGlzdHJpYnV0ZSB0aGVpciBjcmVkZW50aWFscyAoZS5nLiBLZXlsZXNz IFNTTCkgYnV0IGZyb208YnIgY2xhc3M9IiI+DQp0aGUgcGVyc3BlY3RpdmUgb2YgdGhlIHJlZGly ZWN0aW9uIGRyYWZ0IHRoZXmp9nJlIG91dCBvZiBzY29wZSBJTU8uPGJyIGNsYXNzPSIiPg0KPC9i bG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KVGhlIGZhY3QgdGhhdCB0aGVyZSBhcmUgdHdvIGRy YWZ0cyB0cnlpbmcgdG8gaW1wcm92ZSB0aGUgd29ya2Fyb3VuZCBkb2VzPGJyIGNsYXNzPSIiPg0K bm90IGNvbnZpbmNlIG1lIHRoYXQgdGhlIHByb2JsZW0gaXNuJ3Qgd29ydGggbm90aW5nLjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NClRoZSBwcm9ibGVtIGlzIHdvcnRoIG5vdGluZywgd2hpY2ggaXMgd2hhdCB3 ZSBkaWQsIGFzIG5vdGVkIGFib3ZlIGl0IHNlZW1zIG91ciB0ZXh0IG5lZWRzIG1vcmUgd29yay48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pkl0IGlzIGFsc28gd29ydGggbm90aW5nIElNTyB0aGF0IG5laXRoZXIgb2YgdGhlIHR3byBkcmFm dHMgYWN0dWFsbHkgZGVzY3JpYmUgb3IgbWVudGlvbiB0aGUgcHJvYmxlbSB3ZSBhcmUgZGlzY3Vz c2luZyBidXQgbWVyZWx5IGhpbnQgYXQgaXQgYW5kIHRoZW4gYXR0cmlidXRlIHRoZSBjYXVzZSBv ZiBpdCB0byB0aGUgcHJlc2VuY2Ugb2YgYSBDTkFNRSBpbiB0aGUgY2FsbCBmbG93LCByYXRoZXIg dGhhbiB0aGUgdHJ1ZSBjYXVzZQ0KIHdoaWNoIGlzIGxhY2sgb2YgYWJpbGl0eSBvZiB0aGUgZENE TiB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UuPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5Bbnl3YXksIGRv ZXMgdGhpcyBwcm9wb3NhbCBnZXQgdXMgY2xvc2VyIHRvIHNvbWUgdGV4dCB5b3Whr2QgYmUgaGFw cHkgd2l0aD88L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPj09PU9MRD09PTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+ VGhlIFJlZGlyZWN0aW9uIEludGVyZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgbWlnaHQg YmUgdXNlZCB0byByZWRpcmVjdCBhIHJlcXVlc3Qgd2hlcmUgdGhlIFVzZXIgQWdlbnQgd2lsbCBz dWJzZXF1ZW50bHkgYXR0ZW1wdCB0byBlc3RhYmxpc2ggYSBUTFMgc2Vzc2lvbiB3aXRoIHRoZSBS ZWRpcmVjdGlvbiBUYXJnZXQuICZuYnNwO0luIHN1Y2ggYSBjYXNlLCBhbnkgc3Vycm9nYXRlIG9y IHJlcXVlc3Qgcm91dGVyIHRvIHdoaWNoDQogdGhlIFVzZXIgQWdlbnQgaXMgcmVkaXJlY3RlZCBu ZWVkcyB0byBiZSBhYmxlIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFr ZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0aW9uIG9mIHRoZSBUTFMgY2hhbm5lbC4gJm5ic3A7TWVj aGFuaXNtcyB0byBkaXN0cmlidXRlIHRoZSByZXF1aXJlZCBpbmZvcm1hdGlvbiBhbmQvb3IgY29u ZmlndXJhdGlvbiwgc3VjaCBhcyBwcml2YXRlIGtleXMsIHRvIHN1cnJvZ2F0ZXMgYW5kIHJlcXVl c3QNCiByb3V0ZXJzIGluIGRDRE5zIGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIGRvY3Vt ZW50LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj49PT1ORVc9PT08L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5UaGUgUmVkaXJlY3Rpb24gSW50ZXJmYWNl IGRlZmluZWQgaW4gdGhpcyBkb2N1bWVudCBtaWdodCBiZSB1c2VkIHRvIHJlZGlyZWN0IGEgcmVx dWVzdCB3aGVyZSB0aGUgVXNlciBBZ2VudCB3aWxsIHN1YnNlcXVlbnRseSBhdHRlbXB0IHRvIGVz dGFibGlzaCBhIFRMUyBzZXNzaW9uIHdpdGggdGhlIFJlZGlyZWN0aW9uIFRhcmdldC4gSW4gc3Vj aCBhIGNhc2UsIGFueSBzdXJyb2dhdGUgb3IgcmVxdWVzdCByb3V0ZXIgdG8gd2hpY2gNCiB0aGUg VXNlciBBZ2VudCBpcyByZWRpcmVjdGVkIG5lZWRzIHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5 IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2Yg dGhlIFRMUyBjaGFubmVsLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+VGhlIHByaXZhdGUga2V5IGZvciB0aGUgaG9zdCBpbiB0aGUgUlQg aXMgbmVlZGVkIGluIG9yZGVyIHRvIHN1Y2Nlc3NmdWxseSBlc3RhYmxpc2ggYSBUTFMgc2Vzc2lv bi4gVGhlIG1vc3Qgd2lkZXNwcmVhZCBtZWNoYW5pc20gY3VycmVudGx5IHVzZWQgYnkgKG5vbi1p bnRlcmNvbm5lY3RlZCkgQ0ROcyBpcyBmb3IgdGhlIG93bmVyIG9mIHRoZSBob3N0IGluIHRoZSBS VCBzaGFyaW5nIHRoZWlyIHByaXZhdGUga2V5IHdpdGgNCiB0aGVpciBDRE4ocykgb2YgY2hvaWNl LiBJbiBjYXNlcyB3aGVyZSB0aGUgb3duZXIgb2YgdGhlIGhvc3QgaXMgbm90IHdpbGxpbmcgdG8g c2hhcmUgdGhlaXIgcHJpdmF0ZSBrZXksIG90aGVyIG1lY2hhbmlzbXMgdGhhdCBhbGxvdyB0aGUg b3duZXIgdG8gbm90IHNoYXJlIHRoZWlyIHByaXZhdGUga2V5IGFyZSB1c2VkLCBmb3IgZXhhbXBs ZSBLZXlsZXNzIFNTTCBbUkVGXS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkNETkkgYnkgZGVmaW5pdGlvbiBpbXBsaWVzIHRoYXQgYSBD b250ZW50IFByb3ZpZGVyoa9zIGNvbnRlbnQgd2lsbCBiZSBkZWxpdmVyZWQgYnkgQ0ROcyBvdGhl ciB0aGFuIHRoZSBDRE4gd2l0aCB3aGljaCB0aGUgQ29udGVudCBQcm92aWRlciBoYXMgYSBkaXJl Y3QgYnVzaW5lc3MgcmVsYXRpb25zaGlwLiBUaGVyZWZvcmUsIHdoaWxlIENETkkgZG9lcyBub3Qg aW50cm9kdWNlIGFueSBuZXcgdGVjaG5pY2FsIHJlcXVpcmVtZW50cw0KIG9uIGRDRE5zIHdoZW4g ZXN0YWJsaXNoaW5nIFRMUyBzZXNzaW9ucywgQ29udGVudCBQcm92aWRlcnMgbWF5IGJlIGxlc3Mg d2lsbGluZyB0byBoYXZlIHRoZWlyIHByaXZhdGUga2V5IHNoYXJlZCB3aXRoIGRDRE5zIHRoYW4g dGhleSBhcmUgd2l0aCB0aGVpciBjaG9zZW4gQ0ROKHMpIGluIGEgbm9uLWludGVyY29ubmVjdGVk IHNjZW5hcmlvLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+TWVjaGFuaXNtcyB0byBkaXN0cmlidXRlIHRoZSByZXF1aXJlZCBpbmZvcm1h dGlvbiBhbmQvb3IgY29uZmlndXJhdGlvbiB0byBzdXJyb2dhdGVzIGFuZCByZXF1ZXN0IHJvdXRl cnMgaW4gZENETnMgdG8gZW5hYmxlIGEgZENETiB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgVExT IGhhbmRzaGFrZXMgYW5kIHRvIHBlcmZvcm0gZW5jcnlwdGlvbiBvZiB0aGUgVExTIGNoYW5uZWwg Zm9yIGEgcGFydGljdWxhciBob3N0LCBzdWNoDQogYXMgcHJpdmF0ZSBrZXlzIG9yIHRoZSBVUkkv SVAgYWRkcmVzcyBvZiBhIGtleSBzZXJ2ZXIsIGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlz IGRvY3VtZW50LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+W1JFRl0mbmJzcDs8YSBocmVmPSJodHRwczovL2Jsb2cuY2xvdWRmbGFyZS5j b20va2V5bGVzcy1zc2wtdGhlLW5pdHR5LWdyaXR0eS10ZWNobmljYWwtZGV0YWlscy8iIGNsYXNz PSIiPmh0dHBzOi8vYmxvZy5jbG91ZGZsYXJlLmNvbS9rZXlsZXNzLXNzbC10aGUtbml0dHktZ3Jp dHR5LXRlY2huaWNhbC1kZXRhaWxzLzwvYT48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj49 PT1FTkQ9PT08L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CZW48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCkpvbiBQZXRlcnNvbjxiciBjbGFzcz0iIj4NCk5ldXN0YXIsIEluYy48 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2 Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9zcGFuPjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvc3Bhbj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D247D7A3168019jonpetersonneustarbiz_-- From nobody Sun Oct 18 20:07:44 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCFCE1A0146; Sun, 18 Oct 2015 20:07:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yDartfKAtuAk; Sun, 18 Oct 2015 20:07:40 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 900021A016A; Sun, 18 Oct 2015 20:07:38 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.6.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151019030738.24257.66537.idtracker@ietfa.amsl.com> Date: Sun, 18 Oct 2015 20:07:38 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-footprint-capabilities-semantics-08.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 03:07:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : CDNI Request Routing: Footprint and Capabilities Semantics Authors : Jan Seedorf Jon Peterson Stefano Previdi Ray van Brandenburg Kevin J. Ma Filename : draft-ietf-cdni-footprint-capabilities-semantics-08.txt Pages : 21 Date : 2015-10-18 Abstract: This document captures the semantics of the "Footprint and Capabilities Advertisement" part of the CDNI Request Routing interface, i.e., the desired meaning of "Footprint" and "Capabilities" in the CDNI context, and what the "Footprint and Capabilities Advertisement Interface (FCI)" offers within CDNI. The document also provides guidelines for the CDNI FCI protocol. It further defines a Base Advertisement Object, the necessary registries for capabilities and footprints, and guidelines how these registries may be extended in the future. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-footprint-capabilities-semantics/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-footprint-capabilities-semantics-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-footprint-capabilities-semantics-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 19 11:16:28 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDC5F1B2B27 for ; Mon, 19 Oct 2015 11:16:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 88vWYfRbUGrv for ; Mon, 19 Oct 2015 11:16:23 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias244.francetelecom.com [80.12.204.244]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E6701B2B4B for ; Mon, 19 Oct 2015 11:16:07 -0700 (PDT) Received: from omfeda08.si.francetelecom.fr (unknown [xx.xx.xx.201]) by omfeda11.si.francetelecom.fr (ESMTP service) with ESMTP id EC9841B81D7 for ; Mon, 19 Oct 2015 20:16:05 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.58]) by omfeda08.si.francetelecom.fr (ESMTP service) with ESMTP id CFC8938404A for ; Mon, 19 Oct 2015 20:16:05 +0200 (CEST) Received: from OPEXCLILMA1.corporate.adroot.infra.ftgroup ([fe80::95e2:eb4b:3053:fabf]) by OPEXCLILM33.corporate.adroot.infra.ftgroup ([fe80::3881:fc15:b4b2:9017%19]) with mapi id 14.03.0248.002; Mon, 19 Oct 2015 20:16:05 +0200 From: To: "cdni@ietf.org" Thread-Topic: new version of draft-fieau-https-delivery-delegation Thread-Index: AdEKmhCLa7AhQ9bZRpKpo0vV//oKFA== Date: Mon, 19 Oct 2015 18:16:04 +0000 Message-ID: <23005_1445278565_56253365_23005_18168_1_1BD328329726EF4E91AE924BB1B4CB9E0FDEA09D@OPEXCLILMA1.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.3] Content-Type: multipart/alternative; boundary="_000_1BD328329726EF4E91AE924BB1B4CB9E0FDEA09DOPEXCLILMA1corp_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.10.19.165416 Archived-At: Subject: [CDNi] new version of draft-fieau-https-delivery-delegation X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 18:16:26 -0000 --_000_1BD328329726EF4E91AE924BB1B4CB9E0FDEA09DOPEXCLILMA1corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Dear all, A new version of the draft related to HTTPS delegation in CDNI (draft-fieau= -https-delivery-delegation-01) has been posted. Here are the major changes: - Merged the two drafts related to the HTTPS delegation in CDNI topic= : draft-fieau-https-delivery-delegation (Fieau, Oprescu), with draft-slovet= skiy-cdni-https-delegation-approaches (Slovetskiy) - Added a section on Keyless SSL - Clarified the HTTPS delegation issues in CDNI - Clarified the DNS redirection section Thanks for your review, Best regards, Frederic ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. --_000_1BD328329726EF4E91AE924BB1B4CB9E0FDEA09DOPEXCLILMA1corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Dear all,

 

A new version of the draft= related to HTTPS delegation in CDNI (draft-fieau-https-delivery-delegation= -01) has been posted.

 

Here are the major changes= :

- =       Merged the two dra= fts related to the HTTPS delegation in CDNI topic: draft-fieau-https-delive= ry-delegation (Fieau, Oprescu), with draft-slovetskiy-cdni-https-delegation= -approaches (Slovetskiy)

- =       Added a section on= Keyless SSL

- =       Clarified the HTTP= S delegation issues in CDNI

- =       Clarified the DNS = redirection section

 

Thanks for your review,

 

Best regards,

Frederic= 

______________________________________________________________________=
___________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.
--_000_1BD328329726EF4E91AE924BB1B4CB9E0FDEA09DOPEXCLILMA1corp_-- From nobody Mon Oct 19 11:50:48 2015 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CD981AD333; Mon, 19 Oct 2015 11:50:47 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.6.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151019185047.5345.5322.idtracker@ietfa.amsl.com> Date: Mon, 19 Oct 2015 11:50:47 -0700 Archived-At: Cc: cdni-chairs@ietf.org, The IESG , barryleiba@gmail.com, draft-ietf-cdni-media-type@ietf.org, cdni@ietf.org, rfc-editor@rfc-editor.org Subject: [CDNi] Document Action: 'CDNI Media Type Registration' to Informational RFC (draft-ietf-cdni-media-type-06.txt) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 18:50:47 -0000 The IESG has approved the following document: - 'CDNI Media Type Registration' (draft-ietf-cdni-media-type-06.txt) as Informational RFC This document is the product of the Content Delivery Networks Interconnection Working Group. The IESG contact persons are Ben Campbell, Barry Leiba and Alissa Cooper. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-media-type/ Technical Summary This document defines the standard media type used by the Content Delivery Network Interconnection (CDNI) protocol suite, including the registration procedure and recommended usage of the required payload- type parameter . Review and Consensus There is strong working group consensus in support of this document. The document is very brief as it only requests allocation of a single media type and creation of a corresponding payload-type parameter registry. It has been reviewed by multiple active members of the working group. It has also been reviewed by former AD Jon Peterson. Personnel Document Shepherd: Francois Le Faucheur Responsible Area Director: Barry Leiba From nobody Mon Oct 19 14:48:45 2015 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id ADF511AD0B7; Mon, 19 Oct 2015 14:48:43 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.6.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151019214843.29174.42238.idtracker@ietfa.amsl.com> Date: Mon, 19 Oct 2015 14:48:43 -0700 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-metadata-12.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 21:48:43 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : CDN Interconnection Metadata Authors : Ben Niven-Jenkins Rob Murray Matt Caulfield Kevin J. Ma Filename : draft-ietf-cdni-metadata-12.txt Pages : 62 Date : 2015-10-19 Abstract: The Content Delivery Networks Interconnection (CDNI) metadata interface enables interconnected Content Delivery Networks (CDNs) to exchange content distribution metadata in order to enable content acquisition and delivery. The CDNI metadata associated with a piece of content provides a downstream CDN with sufficient information for the downstream CDN to service content requests on behalf of an upstream CDN. This document describes both a base set of CDNI metadata and the protocol for exchanging that metadata. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-metadata/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-metadata-12 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-metadata-12 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 19 15:49:44 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91CEB1B2E1A for ; Mon, 19 Oct 2015 15:49:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TSJmU5C_-Yk5 for ; Mon, 19 Oct 2015 15:49:41 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBFAF1B2BEC for ; Mon, 19 Oct 2015 15:49:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4816; q=dns/txt; s=iport; t=1445294966; x=1446504566; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=o7DT2i3W6wW+vb5Fvv/maYjD0UOkpIf0zxWKrsEDlBI=; b=TiCvd/nyP7/OMP5dHvXeXcLCQcpDn8S5sgCdqd2vPiyTWO6XKwMMiwy7 7Ym5ZH/z8qkNiuyjQpGahAbkg+DSHUIGZ/d4oAr4w0rgF+rFZFeRRB7zM BJxUNIxuw/oyckVzhOLSHXFS4+1dH6i11AcnUAS6sucqoe/e6aViZ/X34 A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0A6BQC8ciVW/4sNJK1egzZUdb9yhh4CHIEhOxEBAQEBAQEBgQqELgEBBCMRPhcCAQgaAiYCAgIwFRACBAEaE4gVsW+TAgEBAQEBAQEBAQEBAQEBAQEBAQEagSKFVYR+hCB0gmmBRQWNEoUyg18BjRWKNpFoATcshAOFGTqBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,704,1437436800"; d="scan'208";a="198457863" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-2.cisco.com with ESMTP; 19 Oct 2015 22:49:26 +0000 Received: from XCH-RCD-007.cisco.com (xch-rcd-007.cisco.com [173.37.102.17]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t9JMnOVU001419 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 19 Oct 2015 22:49:24 GMT Received: from xch-rcd-006.cisco.com (173.37.102.16) by XCH-RCD-007.cisco.com (173.37.102.17) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Mon, 19 Oct 2015 17:49:06 -0500 Received: from xch-rcd-006.cisco.com ([173.37.102.16]) by XCH-RCD-006.cisco.com ([173.37.102.16]) with mapi id 15.00.1104.000; Mon, 19 Oct 2015 17:49:06 -0500 From: "Kent Leung (kleung)" To: "Brandenburg, R. (Ray) van" , Leif Hedstrom , "cdni@ietf.org" Thread-Topic: Review: draft-ietf-cdni-uri-signing-05 Thread-Index: AQHRB7akPLGljb1UyUm0EVpGoleAhp5uY/YAgATGgpA= Date: Mon, 19 Oct 2015 22:49:06 +0000 Message-ID: <1d34267debe94378bd8bb41bfb9bf083@XCH-RCD-006.cisco.com> References: <6D3CDBC6-0001-4D07-B047-2FCB6B676800@ogre.com> <53C26554-463B-4FC4-ADC1-60776F41B91F@tno.nl> In-Reply-To: <53C26554-463B-4FC4-ADC1-60776F41B91F@tno.nl> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.155.85.222] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [CDNi] Review: draft-ietf-cdni-uri-signing-05 X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 22:49:42 -0000 SGkgTGVpZi4gVGhhbmtzIGZvciB0aGUgY29tcHJlaGVuc2l2ZSByZXZpZXcuIEp1c3QgYWRkaW5n IGEgZmV3IG1vcmUgY29tbWVudHMgdG8gUmF5J3MuDQoNCj4NCj4NCj5QYWdlIDk6DQo+DQo+SXQg Y291bGQgYmUgdXNlZnVsIHRvIGFsbG93IGV4cHJlc3NpbmcgdGhlIGNsaWVudCBJUCBhcyBhIHN1 Ym5ldCwgZm9yIA0KPnR3byByZWFzb25zDQo+DQo+CTEpIFByaXZhY3kNCj4JMikgRmxleGliaWxp dHkgKHN1Y2ggYXMgTkFUIG9yIHRyYW5zcGFyZW50IHByb3h5IGxheWVycykNCj4NCj5BbGxvd2lu ZyBmb3IgdGhlIHNpZ25hdHVyZSB0byBiZSB2ZXJpZmllZCBmb3IgZS5nLiBhIC8yNCB3b3VsZCAN Cj50aGVyZWZvcmUgYmUgdXNlZnVsIElNTy4NCj4NCj4xKSBpcyBzb3J0IG9mIHRvdWNoZWQgb24g aW4gU2VjdGlvbiAxMCwgYnV0IGp1c3Qgc2F5cyBpdCBzaG91bGQgYmUgDQo+cmVtb3ZlZCBmcm9t IGxvZ2dpbmcuIEkgZG9uJ3QgdGhpbmsgdGhpcyBpcyBzdHJvbmcgZW5vdWdoLCB3aXRoIA0KPnBl cnZhc2l2ZSBtb25pdG9yaW5nIG9mIG5ldHdvcmtzLiAyKSBpcyBvZiBjb3Vyc2Ugb2J2aW91cyB3 aGVuIGEgVUEgDQo+c2l0cyBiZWhpbmQgYSBsYXllciBvZiAyIG9yIG1vcmUgaW50ZXJtZWRpYXJp ZXMgb3IgbWlkZGxlLWJveGVzLCBzdWNoIA0KPnRoYXQgdGhlIHNvdXJjZSBJUCBjYW4gYmUgZGlm ZmVyZW50IGZvciB0aGUgdmFyaW91cyByZXF1ZXN0cy4NCg0KQWdyZWUgb24gYm90aCBwb2ludHMu IEknbGwgZHJhZnQgYSBzb2x1dGlvbiB0aGF0IGFsbG93cyBhIENTUCB0byBjb252ZXkgZWl0aGVy IGEgZml4ZWQgSVAgb3IgYSBzdWJuZXQuIA0KDQpLTD4gSSdtIG5vdCBzdXJlIGhvdyBDU1Agd291 bGQga25vdyB0aGUgSVAgc3VibmV0IG9mIHRoZSBjbGllbnRzLiBUeXBpY2FsbHksIGEgY2xpZW50 IGlzIGF1dGhlbnRpY2F0ZWQgYW5kIGF1dGhvcml6ZWQgdG8gYWNjZXNzIHRoZSBjb250ZW50LiBU aGUgVVJJIHNpZ25hdHVyZSBpcyB0byBhdXRob3JpemUgdGhhdCBjbGllbnQgb25seS4gQWxzbywg SSB0aGluayBwcml2YWN5IGNvbnRyYWRpY3RzIHdpdGggc291cmNlLWJhc2VkIChpLmUuIGNsaWVu dCBJUCkgYXV0aG9yaXphdGlvbi4gV2hhdCBpcyB0aGUgdXNlIGNhc2UgZm9yIGEgY2xpZW50IHRv IGF1dGhlbnRpY2F0ZSB3aXRoIENTUCBhbmQgYXV0aG9yaXplIGFjY2VzcyBmcm9tIGEgc3VibmV0 PyBNYXliZSBmb3IgSVB2NiAoUkZDIDQ5NDEpIGNhc2Ugb25seSwgYnV0IG5vdCBzdXJlIGFib3V0 IElQdjQuIEZvciBJUHY2LCBpdCBkb2VzIG5vdCBjb250cmFkaWN0IHRoZSBzb3VyY2UtYmFzZWQg YXV0aG9yaXphdGlvbiBzaW5jZSB0aGUgY2xpZW50IElQIGlzIC82NC4NCg0KQXMgZm9yIE5BVCwg dGhpcyBpcyB0aGUgb3Bwb3NpdGUgcHJvYmxlbSB3aGVuIG11bHRpcGxlIGNsaWVudHMgc2hhcmUg YSBjb21tb24gSVAsIHdoaWNoIG1heSBoYXZlIGJlZW4gYXV0aG9yaXplZCBmb3IgYWNjZXNzLiBU aGlzIGlzIGNvdmVyZWQgaW4gU2VjdCA5LiBJJ20gbm90IHN1cmUgdGhhdCBoYXZlIGEgc3VibmV0 IGhlbHBzIHdpdGggTkFUIHVubGVzcyBkaWZmZXJlbnQgSVAgYWRkcmVzc2VzIGFyZSB1c2VkIGJ5 IHNhbWUgY2xpZW50IHdoZW4gYWNjZXNzaW5nIENTUCBhbmQgdGhlbiBDRE4uIEJ1dCB0aGF0IGJy aW5ncyB1cCB0aGUgaXNzdWUgb2YgaW52YWxpZCBhY2Nlc3MgdG8gY29udGVudC4NCg0KPg0KPlBh Z2UgNy04Og0KPg0KPkZpZ3VyZSAyOiBhbmQgdGhlIHRleHQgaXMgc2xpZ2h0bHkgY29uZnVzaW5n IHRvIG1lLiBUaGUgdGV4dCBzYXlzIHRoYXQgDQo+aW4gdGhlIGNhc2Ugd2hlcmUgdGhlIERvd25z dHJlYW0gQ0ROIGRvZXMgbm90IGhhdmUgYSB0cnVzdCByZWxhdGlvbnNoaXAgDQo+d2l0aCB0aGUg Q1NQLCBpdCBtdXN0IHVzZSBhc3ltbWV0cmljIGVuY3J5cHRpb24uIFRoaXMgbWFrZXMgc2Vuc2Us IGJ1dCANCj5JJ20gbm90IHN1cmUgSSBzZWUgb3IgdW5kZXJzdGFuZCB0aGlzIGluIFBpY3R1cmUg Mj8gSSBndWVzcyBJJ20gbm90IA0KPnN1cmUgd2hhdCB0aGUgcGljdHVyZSBpcyB0cnlpbmcgdG8g dGVsbCwgc2luY2UgaXQgbG9va3MgdGhlIHNhbWUgZm9yIGJvdGggSFRUUCBhbmQgRE5TIDopLg0K Pg0KDQpUaGUgcGljdHVyZSB1c2VzIGEpIGFuZCBiKSB0byBkZW5vdGUgdGhlIGRpZmZlcmVuY2Vz IGJldHdlZW4gRE5TIGFuZCBIVFRQLCBhbHRob3VnaCB0aGUgYXJyb3dzIHRoZW1zZWx2ZXMgYXJl IHRoZSBzYW1lLiBZb3UncmUgcmlnaHQgdGhhdCBmcm9tIGxvb2tpbmcgYXQgdGhlIHBpY3R1cmUs IHlvdSBjYW4ndCBzZWUgdGhlIGRpZmZlcmVuY2UgYmV0d2VlbiBzeW1tZXRyaWMgYW5kIGFzeW1t ZXRyaWMga2V5cy4gDQoNCktMPiBJbiBGaWcgMiwgdGhlICJUcnVzdCByZWxhdGlvbnNoaXAgKG9w dGlvbmFsKSIgYmV0d2VlbiBDU1AgYW5kIGRDRE4gZGVwaWN0cyB0aGF0IGNhc2Ugd2hlcmUgYXN5 bW1ldHJpYyBlbmNyeXB0aW9uIGlzIHVzZWQuDQoNCg0KPg0KPg0KPlBhZ2UgMTU6DQo+DQo+V2h5 IGRvIHdlIHJldGFpbiB0aGUgOi8vID8gSXMgdGhhdCBqdXN0IGEgY29udmVuaWVuY2U/IEVhc2Ug b2YgaW1wbGVtZW50YXRpb24/DQo+SXQgb2J2aW91c2x5IGFkZHMgbm8gdmFsdWUgdG8gdGhlIHNp Z25hdHVyZS4NCg0KVG8gYmUgaG9uZXN0LCBJJ20gbm90IHN1cmUgOikNCg0KSSdsbCBjaGVjayB3 aXRoIG15IGNvLWF1dGhvcnMgdG8gc2VlIGlmIHRoZXkgaGFkIGFueSBzcGVjaWZpYyByZWFzb24g aW4gbWluZC4gVGhlIG9ubHkgdGhpbmcgSSBjYW4gdGhpbmsgb2YgaXMgdG8gbWFrZSBpdCBjbGVh ciB0aGF0IG5vIHBhcnQgb2YgdGhlIGRvbWFpbiBjb21wb25lbnQgd2FzIGxlZnQgb2ZmLiANCg0K DQpLTD4gSXQgbWF5IGJlIGZvciBpbXBsZW1lbnRhdGlvbiBjb252ZW5pZW5jZS4gVGVjaG5pY2Fs bHksIHRoZSAic2NoZW1lIG5hbWUiIHBhcnQgb2YgVVJJIGlzIG5vdCBjb3ZlcmVkIGJ5IHRoZSBz aWduYXR1cmUuDQoNCg0KPg0KPg0KPlBhZ2UgMTU6DQo+DQo+SXQgYWxzbyBzYXlzDQo+DQo+ICAi R2V0IHRoZSBjdXJyZW50IHRpbWUgaW4gc2Vjb25kcyBzaW5jZSBlcG9jaCAoYXMgYW4gaW50ZWdl cikuIg0KPg0KPnRpbWVfdCBjYW4gYmUgZWl0aGVyIDMyLWJpdCBvciA2NC1iaXQsIGl0IG1pZ2h0 IGJlIHdvcnRod2hpbGUgdG8gc2F5IA0KPnRoYXQgRVQgaXMgYSBzaWduZWQgNjQtYml0IGludGVn ZXIgdHlwZSB0byBjb3ZlciBhbGwgYmFzZXM/DQoNCkdvb2QgcG9pbnQuIEJ1dCB3aHkgd291bGQg aXQgYmUgc2lnbmVkPyBXb3VsZG7igJl0IHVuc2lnbmVkIDY0LWJpdCBpbnRlZ2VyIG1ha2UgbW9y ZSBzZW5zZT8NCg0KS0w+IEZvciA2NCBiaXQsIGl0IHdvdWxkbid0IG1hdHRlciBpZiBzaWduZWQg b3IgdW5zaWduZWQuIFdyYXBhcm91bmQgdmFsdWUgaXMgYmV5b25kIHRoZSBleGlzdGVuY2Ugb2Yg b3VyIHNvbGFyIHN5c3RlbS4gOykgV2UgY2FuIGNob29zZSB3aGF0J3MgZWFzaWVyIGZvciBpbXBs ZW1lbnRhdGlvbi4gVGhpcyBtYXkgYmUgaW50ZWdlci4NCg0KS2VudA0K From nobody Thu Oct 22 00:57:00 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FA7C1B2EAC for ; Thu, 22 Oct 2015 00:56:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.299 X-Spam-Level: X-Spam-Status: No, score=-1.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A06QisAyFQOJ for ; Thu, 22 Oct 2015 00:56:52 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.142]) by ietfa.amsl.com (Postfix) with ESMTP id 353D81B2E39 for ; Thu, 22 Oct 2015 00:56:51 -0700 (PDT) Received: from cpc4-cmbg17-2-0-cust814.5-4.cable.virginm.net ([86.14.227.47] helo=[192.168.0.10]) by smtp03.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1ZpAjw-0002M0-Qg; Thu, 22 Oct 2015 08:56:50 +0100 Content-Type: multipart/alternative; boundary="Apple-Mail=_0FC5F2CE-95D4-486E-9029-E00A4B402678" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Thu, 22 Oct 2015 08:56:47 +0100 Message-Id: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> <46A08C98-7B12-4F98-8826-8E9FE904B83C@niven-jenkins.co.uk> To: "Peterson, Jon" X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2015 07:56:58 -0000 --Apple-Mail=_0FC5F2CE-95D4-486E-9029-E00A4B402678 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Jon, > On 17 Oct 2015, at 19:09, Peterson, Jon = wrote: >=20 > I wouldn't say the problem is that malicious attack, so much as it is = a resolver's inability to distinguish normal redirection from an attack. = DNSSEC lets you distinguish those things - if you get redirected to = another domain, with DNSSEC you have a cryptographic assurance that the = target domain sent you there, and without DNSSEC, you don't know if = you're being redirected by the target domain or an attacker. Because = DNSSEC is not widely available in the environments under consideration = (yet), in practice this means that to get security for these = applications when you do DNS redirection you end up doing the sorts of = workarounds that you detailed in your last mail, the sorts of = workarounds people are now trying to improve as HTTPS becomes more = prevalent through measures like Keyless SSL. Thanks for the great explanation. I understand why you see DNS as = different to HTTPS redirection now :-) > HTTPS redirection is different because the entity sending you the = redirection (the 302) is sending it to you over TLS, when you've already = established a security association and you have a cryptographic = assurance that the redirection came from the target domain. An attacker = who forges a DNS response to the original formation of that security = association (as you try to dereference https://example.com = ) would simply result in that security association = never being established. But in that case, you know it's an attack. = That's what different - in the DNS you don't. So no, I think the = situation is different for HTTPS redirection than for DNS redirection: = in HTTPS redirection, it is clear when you receive the redirection = response whether it came from an attacker or the target domain - you = always know it was the target domain (to the degree you trust your = crypto anyway).=20 >=20 > Yes, where we disagree is that I think specifying DNS as a redirection = method has different security properties than specifying HTTPS as a = redirection method. Doesn't mean there aren't workarounds to address = DNS's situation, but I think eliding or skimming over these differences = does implementers and future specifications a disservice - we should = explain what they are. I agree. I can have a go at some text for the case of DNS redirection of = HTTPS traffic you describe above. Should we also leave in the text we = already have (or the modified version I proposed)? And is it worth us = adding text on the attack I describe below or do you think as it applies = to all DNS resolutions in general it=E2=80=99s outside the scope of the = redirection draft? Thanks Ben > Now, it's not my intention here to burden the cdni-redirection = document with detailing a solution for secure DNS redirection in the = absence of DNSSEC. My mic comment merely suggested that, since people = were talking about how to improve the workarounds, that describing the = problem here seemed appropriate. >=20 > Jon Peterson > Neustar, Inc. >=20 > From: Ben Niven-Jenkins > > Date: Saturday, October 17, 2015 at 4:44 AM > To: Jon Peterson > > Cc: "Francois Le Faucheur (flefauch)" >, "cdni@ietf.org " = > > Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection >=20 > Jon, >=20 >> On 17 Oct 2015, at 00:12, Peterson, Jon > wrote: >>=20 >> Of course it depends on what angle you look at the problem from, but = if there's no problem with HTTPS redirection (302 over TLS from uCDN to = dCDN), and no problem with DNS redirection with DNSSEC, but there is a = problem when you do DNS redirection without DNSSEC, I would ordinarily = locate the problem there. >=20 > Ah, OK, I think I=E2=80=99m starting to understand now. If I have = understood correctly, what you would like is for the redirection = interface to acknowledge that without DNSSEC a malicious DNS resolver = could return DNS responses (IP addresses/CNAMEs/whatever) that steer the = User Agent to a malicious server. DNSSEC would prevent that because = responses would need to be signed and a malicious DNS resolver would = therefore not be able to return malicious responses as it would not be = able to generate properly signed DNS responses. >=20 > Do I have that correct? >=20 > If that=E2=80=99s the concern we can definitely include some text in = the document about it. >=20 > However, that concern applies to HTTP & HTTPS redirection as well. If = a CDN is performing HTTP redirection and the URI it is redirecting to = contains a host (instead of an IP address) then DNS responses to resolve = that host could also be hijacked by a malicious DNS resolver. >=20 > In the case of encrypted traffic, regardless of whether DNS based or = HTTPS based redirects are used, if DNSSEC is not used then the DNS = response hijacking problem still exists, except that when a User Agent = tries to connect to the malicious server in the DNS response, the = malicious server will not be able to deliver content to the User Agent = as the malicious server will not be able to establish a TLS session with = the User Agent.=20 >=20 > However as the malicious DNS resolver is still able to steer traffic = to a malicious server via a malicious DNS response, DNS response = hijacking could still be used to mount what is effectively a DoS attack = against the CDN/Content Provider. This is because the User Agent won=E2=80= =99t be able to receive the content that it wants because it is being = told to retrieve it from a server that it can=E2=80=99t establish a TLS = session to. >=20 > Therefore, my suggestion would be that we include some text saying = that if DNSSEC is not used, then there is the possibility that domains = used for redirection (whether that is DNS redirection, HTTP redirection = or HTTPS redirection) could have their DNS responses hijacked and bad = things could result. The type of number of bad things a malicious actor = could do is much greater with HTTP traffic than with HTTPS traffic but = for HTTPS traffic the number of bad things a malicious actor could = achieve is not zero, but they are limited to DoS rather than injection = of their own content. >=20 > If you agree with the above I can propose some text to describe the = problem. > =20 >> The insecurity of redirecting with the DNS (in the absence of DNSSEC) = is moreover a problem much bigger than CDNs. There was a draft a few = years ago called the "HARD problem" draft, where "HARD" stood for "high = assurance re-direction" that looked at this as a general problem = involving applications beyond HTTP like XMPP, and noting that it = happened for resource records like SRV beyond CNAME. It has been a known = issue for a variety of virtual hosting architectures, which have = properties similar to CDN interconnection, for some time. I have a tough = time understanding why we wouldn't want to acknowledge it as the problem = here. Saying the problem is the difficulty in getting keys to establish = a TLS connection is to me sort of like saying the problem with being = tied to a stone at the bottom of a lake is that you don't have a scuba = tank. >>=20 >> But really, this was an offhand remark at a mic. If no else cares, do = what you'd like over my objections. I think the new proposed text is = more helpful to implementers, but it is solution text rather than = problem text, and does not differentiate the situation for HTTPS and = insecure DNS, so it doesn't address my concern. >=20 > I=E2=80=99d like to document the issues that affect CDNI redirection. = The challenge for me in doing this is that I do not know what all those = problems are and there has not been a clear description of the = problem(s) to work off so I=E2=80=99m having to infer what they are = (that comment is not aimed at you in particular, the two drafts on this = topic do not provide a clear problem description IMO). >=20 > I also think there may be a mis-connect because I believe the problem = you are trying to highlight applies to all redirection methods (DNS, = HTTP & HTTPS), and you seem to think it only applies to DNS based = redirection. >=20 > Once we have the problem agreed, I can propose text to describe it. >=20 > Ben >=20 >>=20 >> Jon Peterson >> Neustar, Inc. >>=20 >> From: Ben Niven-Jenkins > >> Date: Friday, October 16, 2015 at 10:40 AM >> To: Jon Peterson > >> Cc: "Francois Le Faucheur (flefauch)" >, "cdni@ietf.org " = > >> Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection >>=20 >> Hi Jon, >>=20 >>> On 16 Oct 2015, at 17:06, Peterson, Jon > wrote: >>>=20 >>>=20 >>>> How DNS redirection works is that the User Agent does a resolution = for >>>> foo.example and it gets a response for foo.example. The fact a = CNAME is >>>> present & resolved by the DNS resolver is invisible to the User = Agent >>>> (evidenced by the fact the URL bar in the browser doesn=C2=B9t = change domain >>>> name/hostname when DNS redirection is performed). >>>=20 >>> It is certainly invisible to the browser when every dCDN holds the = private >>> key of every uCDN that might redirect to it, as you stipulate below. >>=20 >> I explained how it is done in the majority of cases today. That = isn=E2=80=99t the only solution, Keyless SSL is another for example. >>=20 >>> If >>> that is an operational requirement of the DNS redirection mechanism = in >>> cdni-redirection, it needs to be made explicit. >>=20 >> It=E2=80=99s not an operational requirement IMO, the operational = requirement is that the dCDN is able to successfully complete the TLS = handshake and to perform encryption (and decryption) of the TLS channel. >>=20 >>> The proposed text just >>> says that "any surrogate or request router to which the User Agent = is >>> redirected needs to be able to successfully complete the TLS = handshake" >>> etc., which could be read to imply that as a solution, but not if = you >>> don't understand what the problem is in the first place. I was = asking that >>> this acknowledge the problem, not specify a solution. >>=20 >> Good, that=E2=80=99s what we were trying to do, maybe the text we = used needs some refinement to be better understandable to others but we = worded it the way it is to explicitly avoid suggesting a solution. >>=20 >>> Moreover, the substance of my comment was that the problem is = different >>> for DNS redirection than it is for HTTPS redirection. >>=20 >>> HTTPS redirection >>> shouldn't require every dCDN to have every uCDNs private keying = material. >>> The proposed text treats this like the two methods have the same >>> properties. >>=20 >> I think it may depend what angle you view the problem from. =46rom my = angle of view the problem is that the dCDN needs to successfully = complete the TLS handshake and to perform encryption of the TLS channel. = What the dCDN needs in order to do that is the same in both cases: = private keys, or some other mechanism such as Keyless SSL that will = enable the dCDN to complete the handshake and encrypt/decrypt the = traffic. >>=20 >> The fact that for a lot of HTTPS 302 redirection cases the dCDN will = be redirecting to a hostname under the dCDN=E2=80=99s control (but that = is not guaranteed) may make being able to successfully complete the TLS = handshake and to perform encryption of the TLS channel easier for the = dCDN but it doesn=E2=80=99t change the basic problem of what the dCDN = needs in order to do its job. And for (at least some) cases where the = 302 redirection is to a hostname not under control of the dCDN the = properties are the same for both DNS & HTTPS 302 redirection. >>=20 >>>> Therefore as long as the IP address(es) in the DNS response = presents the >>>> correct certificate for foo.example and has the correct credentials = (e.g. >>>> Private key for foo.example) to complete the TLS handshake & >>>> encrypt/decrypt traffic on that TLS session the User Agent will not >>>> complain. This is how DNS-based HTTPS redirection is done in CDNs = today >>>> where typically a CSP will provide their certificate & private key = to the >>>> CDN so the CDN can terminate TLS sessions successfully on the = CSP=C2=B9s >>>> behalf. which means if HTTPS redirection is insecure for CDNI then = HTTPS >>>> redirection used by CDNs in the wild today (without CDNI) is also >>>> insecure (which it isn=C2=B9t). >>>=20 >>> Identifying a known workaround does not mean there isn't a problem. = That >>> there is a workaround is proof there is a problem. >>=20 >> I=E2=80=99m not sure I=E2=80=99d call the way that the majority of = CDN delivered HTTPS traffic is delivered a workaround myself (I only = described the most common mechanism, there are others mechanisms that = don=E2=80=99t rely on sharing the private key and which are used in the = wild, e.g. Keyless SSL). >>=20 >> But that=E2=80=99s off-topic so let=E2=80=99s move on. >>=20 >>>=20 >>>> IMO I think the real problem is a different thing that >>>> draft-slovetskiy-cdni-https-delegation-approaches hints at without >>>> stating explicitly. That is how far will a CSP trust delegating its >>>> credentials (e.g. Private key) given that the consequences of = leakage of >>>> those credentials are very bad. There are possible solutions to = avoid the >>>> CSP having to distribute their credentials (e.g. Keyless SSL) but = from >>>> the perspective of the redirection draft they=C2=B9re out of scope = IMO. >>>=20 >>> The fact that there are two drafts trying to improve the workaround = does >>> not convince me that the problem isn't worth noting. >>=20 >> The problem is worth noting, which is what we did, as noted above it = seems our text needs more work. >>=20 >> It is also worth noting IMO that neither of the two drafts actually = describe or mention the problem we are discussing but merely hint at it = and then attribute the cause of it to the presence of a CNAME in the = call flow, rather than the true cause which is lack of ability of the = dCDN to successfully complete the TLS handshake. >>=20 >> Anyway, does this proposal get us closer to some text you=E2=80=99d = be happy with? >>=20 >> =3D=3D=3DOLD=3D=3D=3D >> The Redirection Interface defined in this document might be used to = redirect a request where the User Agent will subsequently attempt to = establish a TLS session with the Redirection Target. In such a case, = any surrogate or request router to which the User Agent is redirected = needs to be able to successfully complete the TLS handshake and to = perform encryption of the TLS channel. Mechanisms to distribute the = required information and/or configuration, such as private keys, to = surrogates and request routers in dCDNs are outside the scope of this = document. >> =3D=3D=3DNEW=3D=3D=3D >> The Redirection Interface defined in this document might be used to = redirect a request where the User Agent will subsequently attempt to = establish a TLS session with the Redirection Target. In such a case, any = surrogate or request router to which the User Agent is redirected needs = to be able to successfully complete the TLS handshake and to perform = encryption of the TLS channel. >>=20 >> The private key for the host in the RT is needed in order to = successfully establish a TLS session. The most widespread mechanism = currently used by (non-interconnected) CDNs is for the owner of the host = in the RT sharing their private key with their CDN(s) of choice. In = cases where the owner of the host is not willing to share their private = key, other mechanisms that allow the owner to not share their private = key are used, for example Keyless SSL [REF]. >>=20 >> CDNI by definition implies that a Content Provider=E2=80=99s content = will be delivered by CDNs other than the CDN with which the Content = Provider has a direct business relationship. Therefore, while CDNI does = not introduce any new technical requirements on dCDNs when establishing = TLS sessions, Content Providers may be less willing to have their = private key shared with dCDNs than they are with their chosen CDN(s) in = a non-interconnected scenario. >>=20 >> Mechanisms to distribute the required information and/or = configuration to surrogates and request routers in dCDNs to enable a = dCDN to successfully complete TLS handshakes and to perform encryption = of the TLS channel for a particular host, such as private keys or the = URI/IP address of a key server, are outside the scope of this document. >>=20 >> [REF] = https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-technical-details= / = >> =3D=3D=3DEND=3D=3D=3D >>=20 >> Ben >>=20 >>>=20 >>> Jon Peterson >>> Neustar, Inc. >>>=20 >>=20 >=20 --Apple-Mail=_0FC5F2CE-95D4-486E-9029-E00A4B402678 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi Jon,

On 17 Oct 2015, at 19:09, = Peterson, Jon <jon.peterson@neustar.biz> wrote:

I wouldn't say the problem is that malicious attack, so = much as it is a resolver's inability to distinguish normal redirection = from an attack. DNSSEC lets you distinguish those things - if you get = redirected to another domain, with DNSSEC you have a cryptographic assurance that the target domain sent you there, and without DNSSEC, = you don't know if you're being redirected by the target domain or an = attacker. Because DNSSEC is not widely available in the environments = under consideration (yet), in practice this means that to get security for these applications when you do DNS redirection = you end up doing the sorts of workarounds that you detailed in your last = mail, the sorts of workarounds people are now trying to improve as HTTPS = becomes more prevalent through measures like Keyless SSL.

Thanks for the great explanation. I understand why you = see DNS as different to HTTPS redirection now :-)

HTTPS redirection is different because the entity = sending you the redirection (the 302) is sending it to you over TLS, = when you've already established a security association and you have a = cryptographic assurance that the redirection came from the target domain. An attacker who forges a DNS response to the original formation = of that security association (as you try to dereference https://example.com) = would simply result in that security association never being = established. But in that case, you know it's an attack. That's what = different - in the DNS you don't. So no, I think the situation is = different for HTTPS redirection than for DNS redirection: in HTTPS redirection, = it is clear when you receive the redirection response whether it came = from an attacker or the target domain - you always know it was the = target domain (to the degree you trust your crypto anyway). 

Yes, where we disagree is that I think specifying DNS as = a redirection method has different security properties than specifying = HTTPS as a redirection method. Doesn't mean there aren't workarounds to = address DNS's situation, but I think eliding or skimming over these differences does implementers and future specifications a = disservice - we should explain what they are. =

I agree. I can = have a go at some text for the case of DNS redirection of HTTPS traffic = you describe above. Should we also leave in the text we already have (or = the modified version I proposed)? And is it worth us adding text on the = attack I describe below or do you think as it applies to all DNS = resolutions in general it=E2=80=99s outside the scope of the redirection = draft?

Thanks
Ben

Now, it's not my = intention here to burden the cdni-redirection document with detailing a = solution for secure DNS redirection in the absence of DNSSEC. My mic comment merely suggested that, since people were talking = about how to improve the workarounds, that describing the problem here = seemed appropriate.

Jon Peterson
Neustar, Inc.

From: Ben = Niven-Jenkins <ben@niven-jenkins.co.uk>
Date: Saturday, = October 17, 2015 at 4:44 AM
To: Jon Peterson = <jon.peterson@neustar.biz>
Cc: "Francois Le = Faucheur (flefauch)" <flefauch@cisco.com>, "cdni@ietf.org" <cdni@ietf.org>
Subject: Re: [CDNi] = Jon's commet on draft-ietf-cdni-redirection

Jon,

On 17 Oct 2015, at 00:12, Peterson, Jon <jon.peterson@neustar.biz> wrote:

Of course it depends on what angle you look at the = problem from, but if there's no problem with HTTPS redirection (302 over = TLS from uCDN to dCDN), and no problem with DNS redirection with DNSSEC, = but there is a problem when you do DNS redirection without DNSSEC, I would ordinarily locate the problem there.

Ah, OK, I think I=E2=80=99m starting to understand now. If I have = understood correctly, what you would like is for the redirection = interface to acknowledge that without DNSSEC a malicious DNS resolver = could return DNS responses (IP addresses/CNAMEs/whatever) that steer the User Agent to a malicious server. DNSSEC would prevent that because = responses would need to be signed and a malicious DNS resolver would = therefore not be able to return malicious responses as it would not be = able to generate properly signed DNS responses.

Do I have that correct?

If that=E2=80=99s the concern we can definitely include = some text in the document about it.

However, that concern applies to HTTP & HTTPS = redirection as well. If a CDN is performing HTTP redirection and the URI = it is redirecting to contains a host (instead of an IP address) then DNS = responses to resolve that host could also be hijacked by a malicious DNS resolver.

In the case of encrypted traffic, regardless of whether = DNS based or HTTPS based redirects are used, if DNSSEC is not used then = the DNS response hijacking problem still exists, except that when a User = Agent tries to connect to the malicious server in the DNS response, the malicious server will not be able to deliver content = to the User Agent as the malicious server will not be able to establish = a TLS session with the User Agent. 

However as the malicious DNS resolver is still able to = steer traffic to a malicious server via a malicious DNS response, DNS = response hijacking could still be used to mount what is effectively a = DoS attack against the CDN/Content Provider. This is because the User Agent won=E2=80=99t be able to receive the content that it = wants because it is being told to retrieve it from a server that it = can=E2=80=99t establish a TLS session to.

Therefore, my suggestion would be that we include some = text saying that if DNSSEC is not used, then there is the possibility = that domains used for redirection (whether that is DNS redirection, HTTP = redirection or HTTPS redirection) could have their DNS responses hijacked and bad things could result. The type of number of = bad things a malicious actor could do is much greater with HTTP traffic = than with HTTPS traffic but for HTTPS traffic the number of bad things a = malicious actor could achieve is not zero, but they are limited to DoS rather than injection of their own = content.

If you agree with the above I can propose some text to = describe the problem.
 
The insecurity of redirecting with the DNS (in the = absence of DNSSEC) is moreover a problem much bigger than CDNs. There = was a draft a few years ago called the "HARD problem" draft, where = "HARD" stood for "high assurance re-direction" that looked at this as a general problem involving applications beyond HTTP like = XMPP, and noting that it happened for resource records like SRV beyond = CNAME. It has been a known issue for a variety of virtual hosting = architectures, which have properties similar to CDN interconnection, for some time. I have a tough time understanding why = we wouldn't want to acknowledge it as the problem here.  Saying the = problem is the difficulty in getting keys to establish a TLS connection = is to me sort of like saying the problem with being tied to a stone at the bottom of a lake is that you don't have a = scuba tank.

But really, this was an offhand remark at a mic. If no = else cares, do what you'd like over my objections. I think the new = proposed text is more helpful to implementers, but it is solution text = rather than problem text, and does not differentiate the situation for HTTPS and insecure DNS, so it doesn't address my = concern.

I=E2=80=99d like to document the issues that affect CDNI redirection. = The challenge for me in doing this is that I do not know what all those = problems are and there has not been a clear description of the = problem(s) to work off so I=E2=80=99m having to infer what they are (that comment is not aimed at you in particular, the two drafts on this = topic do not provide a clear problem description IMO).

I also think there may be a mis-connect because I = believe the problem you are trying to highlight applies to all = redirection methods (DNS, HTTP & HTTPS), and you seem to think it = only applies to DNS based redirection.

Once we have the problem agreed, I can propose text to = describe it.

Ben


Jon Peterson
Neustar, Inc.

From: Ben = Niven-Jenkins <ben@niven-jenkins.co.uk>
Date: Friday, October = 16, 2015 at 10:40 AM
To: Jon Peterson = <jon.peterson@neustar.biz>
Cc: "Francois Le = Faucheur (flefauch)" <flefauch@cisco.com>, "cdni@ietf.org" <cdni@ietf.org>
Subject: Re: [CDNi] = Jon's commet on draft-ietf-cdni-redirection

Hi Jon,

On 16 Oct 2015, at 17:06, Peterson, Jon <jon.peterson@neustar.biz> wrote:


How DNS redirection works is that = the User Agent does a resolution for
foo.example and it gets a response for foo.example. The fact a CNAME = is
present & resolved by the DNS resolver is invisible to the User = Agent
(evidenced by the fact the URL bar in the browser doesn=C2=B9t change = domain
name/hostname when DNS redirection is performed).

It is certainly invisible to the browser when every dCDN holds the = private
key of every uCDN that might redirect to it, as you stipulate = below.

I explained how it is done in the majority of cases today. That isn=E2=80=99= t the only solution, Keyless SSL is another for example.

If
that is an operational requirement of the DNS redirection mechanism = in
cdni-redirection, it needs to be made explicit.

It=E2=80=99s not an operational requirement IMO, the operational = requirement is that the dCDN is able to successfully complete the TLS = handshake and to perform encryption (and decryption) of the TLS = channel.

The proposed text just
says that "any surrogate or request router to which the User Agent is
redirected needs to be able to successfully complete the TLS = handshake"
etc., which could be read to imply that as a solution, but not if you
don't understand what the problem is in the first place. I was asking = that
this acknowledge the problem, not specify a solution.

Good, that=E2=80=99s what we were trying to do, maybe the text we used = needs some refinement to be better understandable to others but we = worded it the way it is to explicitly avoid suggesting a solution.

Moreover, the substance of my comment was that the = problem is different
for DNS redirection than it is for HTTPS redirection.
HTTPS redirection
shouldn't require every dCDN to have every uCDNs private keying = material.
The proposed text treats this like the two methods have the same
properties.

I think it may depend what angle you view the problem from. =46rom my = angle of view the problem is that the dCDN needs to successfully = complete the TLS handshake and to perform encryption of the TLS channel. = What the dCDN needs in order to do that is the same in both cases: private keys, or some other mechanism such as Keyless = SSL that will enable the dCDN to complete the handshake and = encrypt/decrypt the traffic.

The fact that for a lot of HTTPS 302 redirection cases = the dCDN will be redirecting to a hostname under the dCDN=E2=80=99s = control (but that is not guaranteed) may make being able = to successfully complete the TLS handshake and to perform = encryption of the TLS channel easier for the dCDN but it doesn=E2=80=99t change the = basic problem of what the dCDN needs in order to do its job. And for (at = least some) cases where the 302 redirection is to a hostname not under = control of the dCDN the properties are the same for both DNS & HTTPS 302 redirection.

Therefore as long as the IP = address(es) in the DNS response presents the
correct certificate for foo.example and has the correct credentials = (e.g.
Private key for foo.example) to complete the TLS handshake &
encrypt/decrypt traffic on that TLS session the User Agent will not
complain. This is how DNS-based HTTPS redirection is done in CDNs = today
where typically a CSP will provide their certificate & private key = to the
CDN so the CDN can terminate TLS sessions successfully on the CSP=C2=B9s behalf. which means if HTTPS redirection is insecure for CDNI then = HTTPS
redirection used by CDNs in the wild today (without CDNI) is also
insecure (which it isn=C2=B9t).

Identifying a known workaround does not mean there isn't a problem. = That
there is a workaround is proof there is a problem.

I=E2=80=99m not sure I=E2=80=99d call the way that the majority of CDN = delivered HTTPS traffic is delivered a workaround myself (I only = described the most common mechanism, there are others mechanisms that = don=E2=80=99t rely on sharing the private key and which are used in the = wild, e.g. Keyless SSL).

But that=E2=80=99s off-topic so let=E2=80=99s move = on.


IMO I think the real problem is a = different thing that
draft-slovetskiy-cdni-https-delegation-approaches hints at without
stating explicitly. That is how far will a CSP trust delegating its
credentials (e.g. Private key) given that the consequences of leakage = of
those credentials are very bad. There are possible solutions to avoid = the
CSP having to distribute their credentials (e.g. Keyless SSL) but = from
the perspective of the redirection draft they=C2=B9re out of scope = IMO.

The fact that there are two drafts trying to improve the workaround = does
not convince me that the problem isn't worth noting.

The problem is worth noting, which is what we did, as noted above it = seems our text needs more work.

It is also worth noting IMO that neither of the two = drafts actually describe or mention the problem we are discussing but = merely hint at it and then attribute the cause of it to the presence of = a CNAME in the call flow, rather than the true cause which is lack of ability of the dCDN to successfully complete the TLS = handshake.

Anyway, does this proposal get us closer to some text = you=E2=80=99d be happy with?

=3D=3D=3DOLD=3D=3D=3D
The Redirection Interface defined in this document might = be used to redirect a request where the User Agent will subsequently = attempt to establish a TLS session with the Redirection Target.  In = such a case, any surrogate or request router to which the User Agent is redirected needs to be able to successfully complete = the TLS handshake and to perform encryption of the TLS channel. =  Mechanisms to distribute the required information and/or = configuration, such as private keys, to surrogates and request routers in dCDNs are outside the scope of this document.
=3D=3D=3DNEW=3D=3D=3D
The Redirection Interface defined in this document might = be used to redirect a request where the User Agent will subsequently = attempt to establish a TLS session with the Redirection Target. In such = a case, any surrogate or request router to which the User Agent is redirected needs to be able to successfully complete = the TLS handshake and to perform encryption of the TLS channel.

The private key for the host in the RT is needed in = order to successfully establish a TLS session. The most widespread = mechanism currently used by (non-interconnected) CDNs is for the owner = of the host in the RT sharing their private key with their CDN(s) of choice. In cases where the owner of the host is not = willing to share their private key, other mechanisms that allow the = owner to not share their private key are used, for example Keyless SSL = [REF].

CDNI by definition implies that a Content Provider=E2=80=99= s content will be delivered by CDNs other than the CDN with which the = Content Provider has a direct business relationship. Therefore, while = CDNI does not introduce any new technical requirements on dCDNs when establishing TLS sessions, Content Providers may be less = willing to have their private key shared with dCDNs than they are with = their chosen CDN(s) in a non-interconnected scenario.

Mechanisms to distribute the required information and/or = configuration to surrogates and request routers in dCDNs to enable a = dCDN to successfully complete TLS handshakes and to perform encryption = of the TLS channel for a particular host, such as private keys or the URI/IP address of a key server, are outside the = scope of this document.

[REF] https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-techni= cal-details/
=3D=3D=3DEND=3D=3D=3D

Ben


Jon Peterson
Neustar, Inc.

= --Apple-Mail=_0FC5F2CE-95D4-486E-9029-E00A4B402678-- From nobody Fri Oct 23 00:02:44 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 883D01B2D8B for ; Fri, 23 Oct 2015 00:02:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nGJVkrM6kOm9 for ; Fri, 23 Oct 2015 00:02:40 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CEA11B2D6B for ; Fri, 23 Oct 2015 00:02:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=142; q=dns/txt; s=iport; t=1445583761; x=1446793361; h=from:to:cc:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=cijV7OVRbjneiO4wn+BXazHhdr+ioFvIlzsOtECZX3M=; b=LDxCz0kxiem2wJGI3gbYui6uItxmLVVtSDDVi7S2oaTQ2lApJlYl45TK IgNDWgUWywyBsEZkVEq6GEeQDWgiVVf8UgNxKOV2bTBLL6D1/DrkVKdK6 S5Cv48c4HnVxjNpP4sS3QHsEo7OHowVQZPneM2fvbyxttCAm/uC4vSeoo o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0D4AQA+2ilW/5tdJa1egzaBSbl+hCEBDYFZhh2BRjgUAQEBAQEBAX8LhDUEOj8SAT5CJwQOiDXFTwEBAQEBAQEBAQEBAQEBAQEBAQEBARiGeIIPh3uDIYEUBY0UiRcBjR2BWIQ/kh+DbwEfAQFChAOGL4EGAQEB X-IronPort-AV: E=Sophos;i="5.20,185,1444694400"; d="scan'208";a="199732650" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by alln-iport-2.cisco.com with ESMTP; 23 Oct 2015 07:02:40 +0000 Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by rcdn-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id t9N72dTK021034 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 23 Oct 2015 07:02:40 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Fri, 23 Oct 2015 02:02:19 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Fri, 23 Oct 2015 02:02:19 -0500 From: "Francois Le Faucheur (flefauch)" To: "cdni@ietf.org" Thread-Topic: IETF 94 CDNI WG Meeting - Slot Requests Thread-Index: AQHRDWDBxMTk54qSfU6ebLxdNxX+aw== Date: Fri, 23 Oct 2015 07:02:19 +0000 Message-ID: <1C59DAAA-D6A7-4C24-B678-F661CED6AC3A@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.21] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [CDNi] IETF 94 CDNI WG Meeting - Slot Requests X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2015 07:02:42 -0000 Hello, Please unicast to Daryl and I your slot requests with draft name, duration = requested and presenter name. Cheers Francois= From nobody Mon Oct 26 06:26:29 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CD6B1B3E1A for ; Mon, 26 Oct 2015 06:26:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.702 X-Spam-Level: X-Spam-Status: No, score=0.702 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aJjEPTc60UAs for ; Mon, 26 Oct 2015 06:26:21 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias92.francetelecom.com [193.251.215.92]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EC0F1B3E19 for ; Mon, 26 Oct 2015 06:26:20 -0700 (PDT) Received: from omfedm06.si.francetelecom.fr (unknown [xx.xx.xx.2]) by omfedm14.si.francetelecom.fr (ESMTP service) with ESMTP id BEC8D22C35F; Mon, 26 Oct 2015 14:26:18 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.24]) by omfedm06.si.francetelecom.fr (ESMTP service) with ESMTP id 967EA27C059; Mon, 26 Oct 2015 14:26:18 +0100 (CET) Received: from OPEXCLILMA1.corporate.adroot.infra.ftgroup ([fe80::95e2:eb4b:3053:fabf]) by OPEXCLILM7D.corporate.adroot.infra.ftgroup ([fe80::9044:c5ee:4dd2:4f16%19]) with mapi id 14.03.0248.002; Mon, 26 Oct 2015 14:26:18 +0100 From: To: Ben Niven-Jenkins , "Peterson, Jon" Thread-Topic: [CDNi] Jon's commet on draft-ietf-cdni-redirection Thread-Index: AQHRB0SkQWD6ZqD7tU+PsrVmbPj8NZ5tGOyAgACFV4CAAIrlgIAAGj4AgABc0wCAANIJgIAAa4+AgAcwhYCAAHsXcA== Date: Mon, 26 Oct 2015 13:26:17 +0000 Message-ID: <24807_1445865978_562E29FA_24807_2801_5_1BD328329726EF4E91AE924BB1B4CB9E0FDEDE4D@OPEXCLILMA1.corporate.adroot.infra.ftgroup> References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> <46A08C98-7B12-4F98-8826-8E9FE904B83C@niven-jenkins.co.uk> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.5] Content-Type: multipart/alternative; boundary="_000_1BD328329726EF4E91AE924BB1B4CB9E0FDEDE4DOPEXCLILMA1corp_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.10.26.124518 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2015 13:26:28 -0000 --_000_1BD328329726EF4E91AE924BB1B4CB9E0FDEDE4DOPEXCLILMA1corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBCZW4sIEpvbiwNCg0KQXMgZmFyIGFzIEhUVFBTIGRlbGVnYXRpb24gaW4gQ0ROSSBkcmFm dCBpcyBjb25jZXJuZWQsIEnigJl2ZSB1cGRhdGVkIHNvbWUgcGFydHMgb2YgdGhlIGRyYWZ0IHRv IGJldHRlciBjbGFyaWZ5IHRoZSBpc3N1ZXMgeW91IG1lbnRpb25lZC4NClRvIG1lLCB0aGUgZm9s bG93aW5nIHNlY3VyaXR5IHJlcXVpcmVtZW50cyBzaG91bGQgYmUgcG9pbnRlZCBvdXQgd2hlbiBk ZWFsaW5nIHdpdGggSFRUUFMgZGVsZWdhdGlvbjoNCi0gZW5zdXJlIHRoZSBsZWdpdGltYWN5IG9m IGRlbGVnYXRpb246IGEgdUNETiBoYXMgd2lsbGZ1bGx5IGRlc2lnbmF0ZWQgdGhlIHVDRE4sDQot IGVuc3VyZSBhIOKAnHNlYW1sZXNz4oCdIHNlY3VyaXR5IHdoZW4gcmVkaXJlY3RpbmcgdXNlcnMg ZnJvbSBvbmUgQ0ROIHRvIGFub3RoZXI6IGUuZy4gbm8gc2VjdXJpdHkgd2FybmluZyBvbiB1c2Vy 4oCZIHNpZGUNCi0gZ3VhcmFudGVlIHRoZSBjb25maWRlbnRpYWxpdHkgb2YgQ0ROcyBjb25maWd1 cmF0aW9uIGFuZCB0b3BvbG9neSBpbmZvcm1hdGlvbi4NCg0KRm9yIGluZm9ybWF0aW9uLCBoZXJl IGlzIHRoZSBsaW5rIHRvIHRoZSBzZWNvbmQgdmVyc2lvbiBvZiB0aGUgZHJhZnQ6DQoNCmh0dHBz Oi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1maWVhdS1odHRwcy1kZWxpdmVy eS1kZWxlZ2F0aW9uLTAxLnR4dA0KT2YgY291cnNlIGEgcmV2aWV3IHdvdWxkIGJlIG5lY2Vzc2Fy eSB0byBnbyBmdXJ0aGVyLg0KDQoNClRoYW5rIHlvdSwNCg0KQmVzdCByZWdhcmRzLA0KRnJlZGVy aWMNCg0KDQpEZSA6IENETmkgW21haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBh cnQgZGUgQmVuIE5pdmVuLUplbmtpbnMNCkVudm95w6kgOiBqZXVkaSAyMiBvY3RvYnJlIDIwMTUg MDk6NTcNCsOAIDogUGV0ZXJzb24sIEpvbg0KQ2MgOiBjZG5pQGlldGYub3JnPG1haWx0bzpjZG5p QGlldGYub3JnPg0KT2JqZXQgOiBSZTogW0NETmldIEpvbidzIGNvbW1ldCBvbiBkcmFmdC1pZXRm LWNkbmktcmVkaXJlY3Rpb24NCg0KSGkgSm9uLA0KDQpPbiAxNyBPY3QgMjAxNSwgYXQgMTk6MDks IFBldGVyc29uLCBKb24gPGpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpejxtYWlsdG86am9uLnBldGVy c29uQG5ldXN0YXIuYml6Pj4gd3JvdGU6DQoNCkkgd291bGRuJ3Qgc2F5IHRoZSBwcm9ibGVtIGlz IHRoYXQgbWFsaWNpb3VzIGF0dGFjaywgc28gbXVjaCBhcyBpdCBpcyBhIHJlc29sdmVyJ3MgaW5h YmlsaXR5IHRvIGRpc3Rpbmd1aXNoIG5vcm1hbCByZWRpcmVjdGlvbiBmcm9tIGFuIGF0dGFjay4g RE5TU0VDIGxldHMgeW91IGRpc3Rpbmd1aXNoIHRob3NlIHRoaW5ncyAtIGlmIHlvdSBnZXQgcmVk aXJlY3RlZCB0byBhbm90aGVyIGRvbWFpbiwgd2l0aCBETlNTRUMgeW91IGhhdmUgYSBjcnlwdG9n cmFwaGljIGFzc3VyYW5jZSB0aGF0IHRoZSB0YXJnZXQgZG9tYWluIHNlbnQgeW91IHRoZXJlLCBh bmQgd2l0aG91dCBETlNTRUMsIHlvdSBkb24ndCBrbm93IGlmIHlvdSdyZSBiZWluZyByZWRpcmVj dGVkIGJ5IHRoZSB0YXJnZXQgZG9tYWluIG9yIGFuIGF0dGFja2VyLiBCZWNhdXNlIEROU1NFQyBp cyBub3Qgd2lkZWx5IGF2YWlsYWJsZSBpbiB0aGUgZW52aXJvbm1lbnRzIHVuZGVyIGNvbnNpZGVy YXRpb24gKHlldCksIGluIHByYWN0aWNlIHRoaXMgbWVhbnMgdGhhdCB0byBnZXQgc2VjdXJpdHkg Zm9yIHRoZXNlIGFwcGxpY2F0aW9ucyB3aGVuIHlvdSBkbyBETlMgcmVkaXJlY3Rpb24geW91IGVu ZCB1cCBkb2luZyB0aGUgc29ydHMgb2Ygd29ya2Fyb3VuZHMgdGhhdCB5b3UgZGV0YWlsZWQgaW4g eW91ciBsYXN0IG1haWwsIHRoZSBzb3J0cyBvZiB3b3JrYXJvdW5kcyBwZW9wbGUgYXJlIG5vdyB0 cnlpbmcgdG8gaW1wcm92ZSBhcyBIVFRQUyBiZWNvbWVzIG1vcmUgcHJldmFsZW50IHRocm91Z2gg bWVhc3VyZXMgbGlrZSBLZXlsZXNzIFNTTC4NCg0KVGhhbmtzIGZvciB0aGUgZ3JlYXQgZXhwbGFu YXRpb24uIEkgdW5kZXJzdGFuZCB3aHkgeW91IHNlZSBETlMgYXMgZGlmZmVyZW50IHRvIEhUVFBT IHJlZGlyZWN0aW9uIG5vdyA6LSkNCg0KDQpIVFRQUyByZWRpcmVjdGlvbiBpcyBkaWZmZXJlbnQg YmVjYXVzZSB0aGUgZW50aXR5IHNlbmRpbmcgeW91IHRoZSByZWRpcmVjdGlvbiAodGhlIDMwMikg aXMgc2VuZGluZyBpdCB0byB5b3Ugb3ZlciBUTFMsIHdoZW4geW91J3ZlIGFscmVhZHkgZXN0YWJs aXNoZWQgYSBzZWN1cml0eSBhc3NvY2lhdGlvbiBhbmQgeW91IGhhdmUgYSBjcnlwdG9ncmFwaGlj IGFzc3VyYW5jZSB0aGF0IHRoZSByZWRpcmVjdGlvbiBjYW1lIGZyb20gdGhlIHRhcmdldCBkb21h aW4uIEFuIGF0dGFja2VyIHdobyBmb3JnZXMgYSBETlMgcmVzcG9uc2UgdG8gdGhlIG9yaWdpbmFs IGZvcm1hdGlvbiBvZiB0aGF0IHNlY3VyaXR5IGFzc29jaWF0aW9uIChhcyB5b3UgdHJ5IHRvIGRl cmVmZXJlbmNlIGh0dHBzOi8vZXhhbXBsZS5jb208aHR0cHM6Ly9leGFtcGxlLmNvbS8+KSB3b3Vs ZCBzaW1wbHkgcmVzdWx0IGluIHRoYXQgc2VjdXJpdHkgYXNzb2NpYXRpb24gbmV2ZXIgYmVpbmcg ZXN0YWJsaXNoZWQuIEJ1dCBpbiB0aGF0IGNhc2UsIHlvdSBrbm93IGl0J3MgYW4gYXR0YWNrLiBU aGF0J3Mgd2hhdCBkaWZmZXJlbnQgLSBpbiB0aGUgRE5TIHlvdSBkb24ndC4gU28gbm8sIEkgdGhp bmsgdGhlIHNpdHVhdGlvbiBpcyBkaWZmZXJlbnQgZm9yIEhUVFBTIHJlZGlyZWN0aW9uIHRoYW4g Zm9yIEROUyByZWRpcmVjdGlvbjogaW4gSFRUUFMgcmVkaXJlY3Rpb24sIGl0IGlzIGNsZWFyIHdo ZW4geW91IHJlY2VpdmUgdGhlIHJlZGlyZWN0aW9uIHJlc3BvbnNlIHdoZXRoZXIgaXQgY2FtZSBm cm9tIGFuIGF0dGFja2VyIG9yIHRoZSB0YXJnZXQgZG9tYWluIC0geW91IGFsd2F5cyBrbm93IGl0 IHdhcyB0aGUgdGFyZ2V0IGRvbWFpbiAodG8gdGhlIGRlZ3JlZSB5b3UgdHJ1c3QgeW91ciBjcnlw dG8gYW55d2F5KS4NCg0KWWVzLCB3aGVyZSB3ZSBkaXNhZ3JlZSBpcyB0aGF0IEkgdGhpbmsgc3Bl Y2lmeWluZyBETlMgYXMgYSByZWRpcmVjdGlvbiBtZXRob2QgaGFzIGRpZmZlcmVudCBzZWN1cml0 eSBwcm9wZXJ0aWVzIHRoYW4gc3BlY2lmeWluZyBIVFRQUyBhcyBhIHJlZGlyZWN0aW9uIG1ldGhv ZC4gRG9lc24ndCBtZWFuIHRoZXJlIGFyZW4ndCB3b3JrYXJvdW5kcyB0byBhZGRyZXNzIEROUydz IHNpdHVhdGlvbiwgYnV0IEkgdGhpbmsgZWxpZGluZyBvciBza2ltbWluZyBvdmVyIHRoZXNlIGRp ZmZlcmVuY2VzIGRvZXMgaW1wbGVtZW50ZXJzIGFuZCBmdXR1cmUgc3BlY2lmaWNhdGlvbnMgYSBk aXNzZXJ2aWNlIC0gd2Ugc2hvdWxkIGV4cGxhaW4gd2hhdCB0aGV5IGFyZS4NCg0KSSBhZ3JlZS4g SSBjYW4gaGF2ZSBhIGdvIGF0IHNvbWUgdGV4dCBmb3IgdGhlIGNhc2Ugb2YgRE5TIHJlZGlyZWN0 aW9uIG9mIEhUVFBTIHRyYWZmaWMgeW91IGRlc2NyaWJlIGFib3ZlLiBTaG91bGQgd2UgYWxzbyBs ZWF2ZSBpbiB0aGUgdGV4dCB3ZSBhbHJlYWR5IGhhdmUgKG9yIHRoZSBtb2RpZmllZCB2ZXJzaW9u IEkgcHJvcG9zZWQpPyBBbmQgaXMgaXQgd29ydGggdXMgYWRkaW5nIHRleHQgb24gdGhlIGF0dGFj ayBJIGRlc2NyaWJlIGJlbG93IG9yIGRvIHlvdSB0aGluayBhcyBpdCBhcHBsaWVzIHRvIGFsbCBE TlMgcmVzb2x1dGlvbnMgaW4gZ2VuZXJhbCBpdOKAmXMgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhl IHJlZGlyZWN0aW9uIGRyYWZ0Pw0KDQpUaGFua3MNCkJlbg0KDQoNCk5vdywgaXQncyBub3QgbXkg aW50ZW50aW9uIGhlcmUgdG8gYnVyZGVuIHRoZSBjZG5pLXJlZGlyZWN0aW9uIGRvY3VtZW50IHdp dGggZGV0YWlsaW5nIGEgc29sdXRpb24gZm9yIHNlY3VyZSBETlMgcmVkaXJlY3Rpb24gaW4gdGhl IGFic2VuY2Ugb2YgRE5TU0VDLiBNeSBtaWMgY29tbWVudCBtZXJlbHkgc3VnZ2VzdGVkIHRoYXQs IHNpbmNlIHBlb3BsZSB3ZXJlIHRhbGtpbmcgYWJvdXQgaG93IHRvIGltcHJvdmUgdGhlIHdvcmth cm91bmRzLCB0aGF0IGRlc2NyaWJpbmcgdGhlIHByb2JsZW0gaGVyZSBzZWVtZWQgYXBwcm9wcmlh dGUuDQoNCkpvbiBQZXRlcnNvbg0KTmV1c3RhciwgSW5jLg0KDQpGcm9tOiBCZW4gTml2ZW4tSmVu a2lucyA8YmVuQG5pdmVuLWplbmtpbnMuY28udWs8bWFpbHRvOmJlbkBuaXZlbi1qZW5raW5zLmNv LnVrPj4NCkRhdGU6IFNhdHVyZGF5LCBPY3RvYmVyIDE3LCAyMDE1IGF0IDQ6NDQgQU0NClRvOiBK b24gUGV0ZXJzb24gPGpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpejxtYWlsdG86am9uLnBldGVyc29u QG5ldXN0YXIuYml6Pj4NCkNjOiAiRnJhbmNvaXMgTGUgRmF1Y2hldXIgKGZsZWZhdWNoKSIgPGZs ZWZhdWNoQGNpc2NvLmNvbTxtYWlsdG86ZmxlZmF1Y2hAY2lzY28uY29tPj4sICJjZG5pQGlldGYu b3JnPG1haWx0bzpjZG5pQGlldGYub3JnPiIgPGNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0 Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtDRE5pXSBKb24ncyBjb21tZXQgb24gZHJhZnQtaWV0Zi1j ZG5pLXJlZGlyZWN0aW9uDQoNCkpvbiwNCg0KT24gMTcgT2N0IDIwMTUsIGF0IDAwOjEyLCBQZXRl cnNvbiwgSm9uIDxqb24ucGV0ZXJzb25AbmV1c3Rhci5iaXo8bWFpbHRvOmpvbi5wZXRlcnNvbkBu ZXVzdGFyLmJpej4+IHdyb3RlOg0KDQpPZiBjb3Vyc2UgaXQgZGVwZW5kcyBvbiB3aGF0IGFuZ2xl IHlvdSBsb29rIGF0IHRoZSBwcm9ibGVtIGZyb20sIGJ1dCBpZiB0aGVyZSdzIG5vIHByb2JsZW0g d2l0aCBIVFRQUyByZWRpcmVjdGlvbiAoMzAyIG92ZXIgVExTIGZyb20gdUNETiB0byBkQ0ROKSwg YW5kIG5vIHByb2JsZW0gd2l0aCBETlMgcmVkaXJlY3Rpb24gd2l0aCBETlNTRUMsIGJ1dCB0aGVy ZSBpcyBhIHByb2JsZW0gd2hlbiB5b3UgZG8gRE5TIHJlZGlyZWN0aW9uIHdpdGhvdXQgRE5TU0VD LCBJIHdvdWxkIG9yZGluYXJpbHkgbG9jYXRlIHRoZSBwcm9ibGVtIHRoZXJlLg0KDQpBaCwgT0ss IEkgdGhpbmsgSeKAmW0gc3RhcnRpbmcgdG8gdW5kZXJzdGFuZCBub3cuIElmIEkgaGF2ZSB1bmRl cnN0b29kIGNvcnJlY3RseSwgd2hhdCB5b3Ugd291bGQgbGlrZSBpcyBmb3IgdGhlIHJlZGlyZWN0 aW9uIGludGVyZmFjZSB0byBhY2tub3dsZWRnZSB0aGF0IHdpdGhvdXQgRE5TU0VDIGEgbWFsaWNp b3VzIEROUyByZXNvbHZlciBjb3VsZCByZXR1cm4gRE5TIHJlc3BvbnNlcyAoSVAgYWRkcmVzc2Vz L0NOQU1Fcy93aGF0ZXZlcikgdGhhdCBzdGVlciB0aGUgVXNlciBBZ2VudCB0byBhIG1hbGljaW91 cyBzZXJ2ZXIuIEROU1NFQyB3b3VsZCBwcmV2ZW50IHRoYXQgYmVjYXVzZSByZXNwb25zZXMgd291 bGQgbmVlZCB0byBiZSBzaWduZWQgYW5kIGEgbWFsaWNpb3VzIEROUyByZXNvbHZlciB3b3VsZCB0 aGVyZWZvcmUgbm90IGJlIGFibGUgdG8gcmV0dXJuIG1hbGljaW91cyByZXNwb25zZXMgYXMgaXQg d291bGQgbm90IGJlIGFibGUgdG8gZ2VuZXJhdGUgcHJvcGVybHkgc2lnbmVkIEROUyByZXNwb25z ZXMuDQoNCkRvIEkgaGF2ZSB0aGF0IGNvcnJlY3Q/DQoNCklmIHRoYXTigJlzIHRoZSBjb25jZXJu IHdlIGNhbiBkZWZpbml0ZWx5IGluY2x1ZGUgc29tZSB0ZXh0IGluIHRoZSBkb2N1bWVudCBhYm91 dCBpdC4NCg0KSG93ZXZlciwgdGhhdCBjb25jZXJuIGFwcGxpZXMgdG8gSFRUUCAmIEhUVFBTIHJl ZGlyZWN0aW9uIGFzIHdlbGwuIElmIGEgQ0ROIGlzIHBlcmZvcm1pbmcgSFRUUCByZWRpcmVjdGlv biBhbmQgdGhlIFVSSSBpdCBpcyByZWRpcmVjdGluZyB0byBjb250YWlucyBhIGhvc3QgKGluc3Rl YWQgb2YgYW4gSVAgYWRkcmVzcykgdGhlbiBETlMgcmVzcG9uc2VzIHRvIHJlc29sdmUgdGhhdCBo b3N0IGNvdWxkIGFsc28gYmUgaGlqYWNrZWQgYnkgYSBtYWxpY2lvdXMgRE5TIHJlc29sdmVyLg0K DQpJbiB0aGUgY2FzZSBvZiBlbmNyeXB0ZWQgdHJhZmZpYywgcmVnYXJkbGVzcyBvZiB3aGV0aGVy IEROUyBiYXNlZCBvciBIVFRQUyBiYXNlZCByZWRpcmVjdHMgYXJlIHVzZWQsIGlmIEROU1NFQyBp cyBub3QgdXNlZCB0aGVuIHRoZSBETlMgcmVzcG9uc2UgaGlqYWNraW5nIHByb2JsZW0gc3RpbGwg ZXhpc3RzLCBleGNlcHQgdGhhdCB3aGVuIGEgVXNlciBBZ2VudCB0cmllcyB0byBjb25uZWN0IHRv IHRoZSBtYWxpY2lvdXMgc2VydmVyIGluIHRoZSBETlMgcmVzcG9uc2UsIHRoZSBtYWxpY2lvdXMg c2VydmVyIHdpbGwgbm90IGJlIGFibGUgdG8gZGVsaXZlciBjb250ZW50IHRvIHRoZSBVc2VyIEFn ZW50IGFzIHRoZSBtYWxpY2lvdXMgc2VydmVyIHdpbGwgbm90IGJlIGFibGUgdG8gZXN0YWJsaXNo IGEgVExTIHNlc3Npb24gd2l0aCB0aGUgVXNlciBBZ2VudC4NCg0KSG93ZXZlciBhcyB0aGUgbWFs aWNpb3VzIEROUyByZXNvbHZlciBpcyBzdGlsbCBhYmxlIHRvIHN0ZWVyIHRyYWZmaWMgdG8gYSBt YWxpY2lvdXMgc2VydmVyIHZpYSBhIG1hbGljaW91cyBETlMgcmVzcG9uc2UsIEROUyByZXNwb25z ZSBoaWphY2tpbmcgY291bGQgc3RpbGwgYmUgdXNlZCB0byBtb3VudCB3aGF0IGlzIGVmZmVjdGl2 ZWx5IGEgRG9TIGF0dGFjayBhZ2FpbnN0IHRoZSBDRE4vQ29udGVudCBQcm92aWRlci4gVGhpcyBp cyBiZWNhdXNlIHRoZSBVc2VyIEFnZW50IHdvbuKAmXQgYmUgYWJsZSB0byByZWNlaXZlIHRoZSBj b250ZW50IHRoYXQgaXQgd2FudHMgYmVjYXVzZSBpdCBpcyBiZWluZyB0b2xkIHRvIHJldHJpZXZl IGl0IGZyb20gYSBzZXJ2ZXIgdGhhdCBpdCBjYW7igJl0IGVzdGFibGlzaCBhIFRMUyBzZXNzaW9u IHRvLg0KDQpUaGVyZWZvcmUsIG15IHN1Z2dlc3Rpb24gd291bGQgYmUgdGhhdCB3ZSBpbmNsdWRl IHNvbWUgdGV4dCBzYXlpbmcgdGhhdCBpZiBETlNTRUMgaXMgbm90IHVzZWQsIHRoZW4gdGhlcmUg aXMgdGhlIHBvc3NpYmlsaXR5IHRoYXQgZG9tYWlucyB1c2VkIGZvciByZWRpcmVjdGlvbiAod2hl dGhlciB0aGF0IGlzIEROUyByZWRpcmVjdGlvbiwgSFRUUCByZWRpcmVjdGlvbiBvciBIVFRQUyBy ZWRpcmVjdGlvbikgY291bGQgaGF2ZSB0aGVpciBETlMgcmVzcG9uc2VzIGhpamFja2VkIGFuZCBi YWQgdGhpbmdzIGNvdWxkIHJlc3VsdC4gVGhlIHR5cGUgb2YgbnVtYmVyIG9mIGJhZCB0aGluZ3Mg YSBtYWxpY2lvdXMgYWN0b3IgY291bGQgZG8gaXMgbXVjaCBncmVhdGVyIHdpdGggSFRUUCB0cmFm ZmljIHRoYW4gd2l0aCBIVFRQUyB0cmFmZmljIGJ1dCBmb3IgSFRUUFMgdHJhZmZpYyB0aGUgbnVt YmVyIG9mIGJhZCB0aGluZ3MgYSBtYWxpY2lvdXMgYWN0b3IgY291bGQgYWNoaWV2ZSBpcyBub3Qg emVybywgYnV0IHRoZXkgYXJlIGxpbWl0ZWQgdG8gRG9TIHJhdGhlciB0aGFuIGluamVjdGlvbiBv ZiB0aGVpciBvd24gY29udGVudC4NCg0KSWYgeW91IGFncmVlIHdpdGggdGhlIGFib3ZlIEkgY2Fu IHByb3Bvc2Ugc29tZSB0ZXh0IHRvIGRlc2NyaWJlIHRoZSBwcm9ibGVtLg0KDQoNClRoZSBpbnNl Y3VyaXR5IG9mIHJlZGlyZWN0aW5nIHdpdGggdGhlIEROUyAoaW4gdGhlIGFic2VuY2Ugb2YgRE5T U0VDKSBpcyBtb3Jlb3ZlciBhIHByb2JsZW0gbXVjaCBiaWdnZXIgdGhhbiBDRE5zLiBUaGVyZSB3 YXMgYSBkcmFmdCBhIGZldyB5ZWFycyBhZ28gY2FsbGVkIHRoZSAiSEFSRCBwcm9ibGVtIiBkcmFm dCwgd2hlcmUgIkhBUkQiIHN0b29kIGZvciAiaGlnaCBhc3N1cmFuY2UgcmUtZGlyZWN0aW9uIiB0 aGF0IGxvb2tlZCBhdCB0aGlzIGFzIGEgZ2VuZXJhbCBwcm9ibGVtIGludm9sdmluZyBhcHBsaWNh dGlvbnMgYmV5b25kIEhUVFAgbGlrZSBYTVBQLCBhbmQgbm90aW5nIHRoYXQgaXQgaGFwcGVuZWQg Zm9yIHJlc291cmNlIHJlY29yZHMgbGlrZSBTUlYgYmV5b25kIENOQU1FLiBJdCBoYXMgYmVlbiBh IGtub3duIGlzc3VlIGZvciBhIHZhcmlldHkgb2YgdmlydHVhbCBob3N0aW5nIGFyY2hpdGVjdHVy ZXMsIHdoaWNoIGhhdmUgcHJvcGVydGllcyBzaW1pbGFyIHRvIENETiBpbnRlcmNvbm5lY3Rpb24s IGZvciBzb21lIHRpbWUuIEkgaGF2ZSBhIHRvdWdoIHRpbWUgdW5kZXJzdGFuZGluZyB3aHkgd2Ug d291bGRuJ3Qgd2FudCB0byBhY2tub3dsZWRnZSBpdCBhcyB0aGUgcHJvYmxlbSBoZXJlLiAgU2F5 aW5nIHRoZSBwcm9ibGVtIGlzIHRoZSBkaWZmaWN1bHR5IGluIGdldHRpbmcga2V5cyB0byBlc3Rh Ymxpc2ggYSBUTFMgY29ubmVjdGlvbiBpcyB0byBtZSBzb3J0IG9mIGxpa2Ugc2F5aW5nIHRoZSBw cm9ibGVtIHdpdGggYmVpbmcgdGllZCB0byBhIHN0b25lIGF0IHRoZSBib3R0b20gb2YgYSBsYWtl IGlzIHRoYXQgeW91IGRvbid0IGhhdmUgYSBzY3ViYSB0YW5rLg0KDQpCdXQgcmVhbGx5LCB0aGlz IHdhcyBhbiBvZmZoYW5kIHJlbWFyayBhdCBhIG1pYy4gSWYgbm8gZWxzZSBjYXJlcywgZG8gd2hh dCB5b3UnZCBsaWtlIG92ZXIgbXkgb2JqZWN0aW9ucy4gSSB0aGluayB0aGUgbmV3IHByb3Bvc2Vk IHRleHQgaXMgbW9yZSBoZWxwZnVsIHRvIGltcGxlbWVudGVycywgYnV0IGl0IGlzIHNvbHV0aW9u IHRleHQgcmF0aGVyIHRoYW4gcHJvYmxlbSB0ZXh0LCBhbmQgZG9lcyBub3QgZGlmZmVyZW50aWF0 ZSB0aGUgc2l0dWF0aW9uIGZvciBIVFRQUyBhbmQgaW5zZWN1cmUgRE5TLCBzbyBpdCBkb2Vzbid0 IGFkZHJlc3MgbXkgY29uY2Vybi4NCg0KSeKAmWQgbGlrZSB0byBkb2N1bWVudCB0aGUgaXNzdWVz IHRoYXQgYWZmZWN0IENETkkgcmVkaXJlY3Rpb24uIFRoZSBjaGFsbGVuZ2UgZm9yIG1lIGluIGRv aW5nIHRoaXMgaXMgdGhhdCBJIGRvIG5vdCBrbm93IHdoYXQgYWxsIHRob3NlIHByb2JsZW1zIGFy ZSBhbmQgdGhlcmUgaGFzIG5vdCBiZWVuIGEgY2xlYXIgZGVzY3JpcHRpb24gb2YgdGhlIHByb2Js ZW0ocykgdG8gd29yayBvZmYgc28gSeKAmW0gaGF2aW5nIHRvIGluZmVyIHdoYXQgdGhleSBhcmUg KHRoYXQgY29tbWVudCBpcyBub3QgYWltZWQgYXQgeW91IGluIHBhcnRpY3VsYXIsIHRoZSB0d28g ZHJhZnRzIG9uIHRoaXMgdG9waWMgZG8gbm90IHByb3ZpZGUgYSBjbGVhciBwcm9ibGVtIGRlc2Ny aXB0aW9uIElNTykuDQoNCkkgYWxzbyB0aGluayB0aGVyZSBtYXkgYmUgYSBtaXMtY29ubmVjdCBi ZWNhdXNlIEkgYmVsaWV2ZSB0aGUgcHJvYmxlbSB5b3UgYXJlIHRyeWluZyB0byBoaWdobGlnaHQg YXBwbGllcyB0byBhbGwgcmVkaXJlY3Rpb24gbWV0aG9kcyAoRE5TLCBIVFRQICYgSFRUUFMpLCBh bmQgeW91IHNlZW0gdG8gdGhpbmsgaXQgb25seSBhcHBsaWVzIHRvIEROUyBiYXNlZCByZWRpcmVj dGlvbi4NCg0KT25jZSB3ZSBoYXZlIHRoZSBwcm9ibGVtIGFncmVlZCwgSSBjYW4gcHJvcG9zZSB0 ZXh0IHRvIGRlc2NyaWJlIGl0Lg0KDQpCZW4NCg0KDQoNCkpvbiBQZXRlcnNvbg0KTmV1c3Rhciwg SW5jLg0KDQpGcm9tOiBCZW4gTml2ZW4tSmVua2lucyA8YmVuQG5pdmVuLWplbmtpbnMuY28udWs8 bWFpbHRvOmJlbkBuaXZlbi1qZW5raW5zLmNvLnVrPj4NCkRhdGU6IEZyaWRheSwgT2N0b2JlciAx NiwgMjAxNSBhdCAxMDo0MCBBTQ0KVG86IEpvbiBQZXRlcnNvbiA8am9uLnBldGVyc29uQG5ldXN0 YXIuYml6PG1haWx0bzpqb24ucGV0ZXJzb25AbmV1c3Rhci5iaXo+Pg0KQ2M6ICJGcmFuY29pcyBM ZSBGYXVjaGV1ciAoZmxlZmF1Y2gpIiA8ZmxlZmF1Y2hAY2lzY28uY29tPG1haWx0bzpmbGVmYXVj aEBjaXNjby5jb20+PiwgImNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlAaWV0Zi5vcmc+IiA8Y2Ru aUBpZXRmLm9yZzxtYWlsdG86Y2RuaUBpZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW0NETmldIEpv bidzIGNvbW1ldCBvbiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24NCg0KSGkgSm9uLA0KDQpP biAxNiBPY3QgMjAxNSwgYXQgMTc6MDYsIFBldGVyc29uLCBKb24gPGpvbi5wZXRlcnNvbkBuZXVz dGFyLmJpejxtYWlsdG86am9uLnBldGVyc29uQG5ldXN0YXIuYml6Pj4gd3JvdGU6DQoNCg0KDQpI b3cgRE5TIHJlZGlyZWN0aW9uIHdvcmtzIGlzIHRoYXQgdGhlIFVzZXIgQWdlbnQgZG9lcyBhIHJl c29sdXRpb24gZm9yDQpmb28uZXhhbXBsZSBhbmQgaXQgZ2V0cyBhIHJlc3BvbnNlIGZvciBmb28u ZXhhbXBsZS4gVGhlIGZhY3QgYSBDTkFNRSBpcw0KcHJlc2VudCAmIHJlc29sdmVkIGJ5IHRoZSBE TlMgcmVzb2x2ZXIgaXMgaW52aXNpYmxlIHRvIHRoZSBVc2VyIEFnZW50DQooZXZpZGVuY2VkIGJ5 IHRoZSBmYWN0IHRoZSBVUkwgYmFyIGluIHRoZSBicm93c2VyIGRvZXNuwrl0IGNoYW5nZSBkb21h aW4NCm5hbWUvaG9zdG5hbWUgd2hlbiBETlMgcmVkaXJlY3Rpb24gaXMgcGVyZm9ybWVkKS4NCg0K SXQgaXMgY2VydGFpbmx5IGludmlzaWJsZSB0byB0aGUgYnJvd3NlciB3aGVuIGV2ZXJ5IGRDRE4g aG9sZHMgdGhlIHByaXZhdGUNCmtleSBvZiBldmVyeSB1Q0ROIHRoYXQgbWlnaHQgcmVkaXJlY3Qg dG8gaXQsIGFzIHlvdSBzdGlwdWxhdGUgYmVsb3cuDQoNCkkgZXhwbGFpbmVkIGhvdyBpdCBpcyBk b25lIGluIHRoZSBtYWpvcml0eSBvZiBjYXNlcyB0b2RheS4gVGhhdCBpc27igJl0IHRoZSBvbmx5 IHNvbHV0aW9uLCBLZXlsZXNzIFNTTCBpcyBhbm90aGVyIGZvciBleGFtcGxlLg0KDQoNCklmDQp0 aGF0IGlzIGFuIG9wZXJhdGlvbmFsIHJlcXVpcmVtZW50IG9mIHRoZSBETlMgcmVkaXJlY3Rpb24g bWVjaGFuaXNtIGluDQpjZG5pLXJlZGlyZWN0aW9uLCBpdCBuZWVkcyB0byBiZSBtYWRlIGV4cGxp Y2l0Lg0KDQpJdOKAmXMgbm90IGFuIG9wZXJhdGlvbmFsIHJlcXVpcmVtZW50IElNTywgdGhlIG9w ZXJhdGlvbmFsIHJlcXVpcmVtZW50IGlzIHRoYXQgdGhlIGRDRE4gaXMgYWJsZSB0byBzdWNjZXNz ZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UgYW5kIHRvIHBlcmZvcm0gZW5jcnlwdGlv biAoYW5kIGRlY3J5cHRpb24pIG9mIHRoZSBUTFMgY2hhbm5lbC4NCg0KDQpUaGUgcHJvcG9zZWQg dGV4dCBqdXN0DQpzYXlzIHRoYXQgImFueSBzdXJyb2dhdGUgb3IgcmVxdWVzdCByb3V0ZXIgdG8g d2hpY2ggdGhlIFVzZXIgQWdlbnQgaXMNCnJlZGlyZWN0ZWQgbmVlZHMgdG8gYmUgYWJsZSB0byBz dWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UiDQpldGMuLCB3aGljaCBjb3Vs ZCBiZSByZWFkIHRvIGltcGx5IHRoYXQgYXMgYSBzb2x1dGlvbiwgYnV0IG5vdCBpZiB5b3UNCmRv bid0IHVuZGVyc3RhbmQgd2hhdCB0aGUgcHJvYmxlbSBpcyBpbiB0aGUgZmlyc3QgcGxhY2UuIEkg d2FzIGFza2luZyB0aGF0DQp0aGlzIGFja25vd2xlZGdlIHRoZSBwcm9ibGVtLCBub3Qgc3BlY2lm eSBhIHNvbHV0aW9uLg0KDQpHb29kLCB0aGF04oCZcyB3aGF0IHdlIHdlcmUgdHJ5aW5nIHRvIGRv LCBtYXliZSB0aGUgdGV4dCB3ZSB1c2VkIG5lZWRzIHNvbWUgcmVmaW5lbWVudCB0byBiZSBiZXR0 ZXIgdW5kZXJzdGFuZGFibGUgdG8gb3RoZXJzIGJ1dCB3ZSB3b3JkZWQgaXQgdGhlIHdheSBpdCBp cyB0byBleHBsaWNpdGx5IGF2b2lkIHN1Z2dlc3RpbmcgYSBzb2x1dGlvbi4NCg0KDQpNb3Jlb3Zl ciwgdGhlIHN1YnN0YW5jZSBvZiBteSBjb21tZW50IHdhcyB0aGF0IHRoZSBwcm9ibGVtIGlzIGRp ZmZlcmVudA0KZm9yIEROUyByZWRpcmVjdGlvbiB0aGFuIGl0IGlzIGZvciBIVFRQUyByZWRpcmVj dGlvbi4NCkhUVFBTIHJlZGlyZWN0aW9uDQpzaG91bGRuJ3QgcmVxdWlyZSBldmVyeSBkQ0ROIHRv IGhhdmUgZXZlcnkgdUNETnMgcHJpdmF0ZSBrZXlpbmcgbWF0ZXJpYWwuDQpUaGUgcHJvcG9zZWQg dGV4dCB0cmVhdHMgdGhpcyBsaWtlIHRoZSB0d28gbWV0aG9kcyBoYXZlIHRoZSBzYW1lDQpwcm9w ZXJ0aWVzLg0KDQpJIHRoaW5rIGl0IG1heSBkZXBlbmQgd2hhdCBhbmdsZSB5b3UgdmlldyB0aGUg cHJvYmxlbSBmcm9tLiBGcm9tIG15IGFuZ2xlIG9mIHZpZXcgdGhlIHByb2JsZW0gaXMgdGhhdCB0 aGUgZENETiBuZWVkcyB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2Ug YW5kIHRvIHBlcmZvcm0gZW5jcnlwdGlvbiBvZiB0aGUgVExTIGNoYW5uZWwuIFdoYXQgdGhlIGRD RE4gbmVlZHMgaW4gb3JkZXIgdG8gZG8gdGhhdCBpcyB0aGUgc2FtZSBpbiBib3RoIGNhc2VzOiBw cml2YXRlIGtleXMsIG9yIHNvbWUgb3RoZXIgbWVjaGFuaXNtIHN1Y2ggYXMgS2V5bGVzcyBTU0wg dGhhdCB3aWxsIGVuYWJsZSB0aGUgZENETiB0byBjb21wbGV0ZSB0aGUgaGFuZHNoYWtlIGFuZCBl bmNyeXB0L2RlY3J5cHQgdGhlIHRyYWZmaWMuDQoNClRoZSBmYWN0IHRoYXQgZm9yIGEgbG90IG9m IEhUVFBTIDMwMiByZWRpcmVjdGlvbiBjYXNlcyB0aGUgZENETiB3aWxsIGJlIHJlZGlyZWN0aW5n IHRvIGEgaG9zdG5hbWUgdW5kZXIgdGhlIGRDRE7igJlzIGNvbnRyb2wgKGJ1dCB0aGF0IGlzIG5v dCBndWFyYW50ZWVkKSBtYXkgbWFrZSBiZWluZyBhYmxlIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0 ZSB0aGUgVExTIGhhbmRzaGFrZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0aW9uIG9mIHRoZSBUTFMg Y2hhbm5lbCBlYXNpZXIgZm9yIHRoZSBkQ0ROIGJ1dCBpdCBkb2VzbuKAmXQgY2hhbmdlIHRoZSBi YXNpYyBwcm9ibGVtIG9mIHdoYXQgdGhlIGRDRE4gbmVlZHMgaW4gb3JkZXIgdG8gZG8gaXRzIGpv Yi4gQW5kIGZvciAoYXQgbGVhc3Qgc29tZSkgY2FzZXMgd2hlcmUgdGhlIDMwMiByZWRpcmVjdGlv biBpcyB0byBhIGhvc3RuYW1lIG5vdCB1bmRlciBjb250cm9sIG9mIHRoZSBkQ0ROIHRoZSBwcm9w ZXJ0aWVzIGFyZSB0aGUgc2FtZSBmb3IgYm90aCBETlMgJiBIVFRQUyAzMDIgcmVkaXJlY3Rpb24u DQoNCg0KVGhlcmVmb3JlIGFzIGxvbmcgYXMgdGhlIElQIGFkZHJlc3MoZXMpIGluIHRoZSBETlMg cmVzcG9uc2UgcHJlc2VudHMgdGhlDQpjb3JyZWN0IGNlcnRpZmljYXRlIGZvciBmb28uZXhhbXBs ZSBhbmQgaGFzIHRoZSBjb3JyZWN0IGNyZWRlbnRpYWxzIChlLmcuDQpQcml2YXRlIGtleSBmb3Ig Zm9vLmV4YW1wbGUpIHRvIGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlICYNCmVuY3J5cHQvZGVj cnlwdCB0cmFmZmljIG9uIHRoYXQgVExTIHNlc3Npb24gdGhlIFVzZXIgQWdlbnQgd2lsbCBub3QN CmNvbXBsYWluLiBUaGlzIGlzIGhvdyBETlMtYmFzZWQgSFRUUFMgcmVkaXJlY3Rpb24gaXMgZG9u ZSBpbiBDRE5zIHRvZGF5DQp3aGVyZSB0eXBpY2FsbHkgYSBDU1Agd2lsbCBwcm92aWRlIHRoZWly IGNlcnRpZmljYXRlICYgcHJpdmF0ZSBrZXkgdG8gdGhlDQpDRE4gc28gdGhlIENETiBjYW4gdGVy bWluYXRlIFRMUyBzZXNzaW9ucyBzdWNjZXNzZnVsbHkgb24gdGhlIENTUMK5cw0KYmVoYWxmLiB3 aGljaCBtZWFucyBpZiBIVFRQUyByZWRpcmVjdGlvbiBpcyBpbnNlY3VyZSBmb3IgQ0ROSSB0aGVu IEhUVFBTDQpyZWRpcmVjdGlvbiB1c2VkIGJ5IENETnMgaW4gdGhlIHdpbGQgdG9kYXkgKHdpdGhv dXQgQ0ROSSkgaXMgYWxzbw0KaW5zZWN1cmUgKHdoaWNoIGl0IGlzbsK5dCkuDQoNCklkZW50aWZ5 aW5nIGEga25vd24gd29ya2Fyb3VuZCBkb2VzIG5vdCBtZWFuIHRoZXJlIGlzbid0IGEgcHJvYmxl bS4gVGhhdA0KdGhlcmUgaXMgYSB3b3JrYXJvdW5kIGlzIHByb29mIHRoZXJlIGlzIGEgcHJvYmxl bS4NCg0KSeKAmW0gbm90IHN1cmUgSeKAmWQgY2FsbCB0aGUgd2F5IHRoYXQgdGhlIG1ham9yaXR5 IG9mIENETiBkZWxpdmVyZWQgSFRUUFMgdHJhZmZpYyBpcyBkZWxpdmVyZWQgYSB3b3JrYXJvdW5k IG15c2VsZiAoSSBvbmx5IGRlc2NyaWJlZCB0aGUgbW9zdCBjb21tb24gbWVjaGFuaXNtLCB0aGVy ZSBhcmUgb3RoZXJzIG1lY2hhbmlzbXMgdGhhdCBkb27igJl0IHJlbHkgb24gc2hhcmluZyB0aGUg cHJpdmF0ZSBrZXkgYW5kIHdoaWNoIGFyZSB1c2VkIGluIHRoZSB3aWxkLCBlLmcuIEtleWxlc3Mg U1NMKS4NCg0KQnV0IHRoYXTigJlzIG9mZi10b3BpYyBzbyBsZXTigJlzIG1vdmUgb24uDQoNCg0K DQpJTU8gSSB0aGluayB0aGUgcmVhbCBwcm9ibGVtIGlzIGEgZGlmZmVyZW50IHRoaW5nIHRoYXQN CmRyYWZ0LXNsb3ZldHNraXktY2RuaS1odHRwcy1kZWxlZ2F0aW9uLWFwcHJvYWNoZXMgaGludHMg YXQgd2l0aG91dA0Kc3RhdGluZyBleHBsaWNpdGx5LiBUaGF0IGlzIGhvdyBmYXIgd2lsbCBhIENT UCB0cnVzdCBkZWxlZ2F0aW5nIGl0cw0KY3JlZGVudGlhbHMgKGUuZy4gUHJpdmF0ZSBrZXkpIGdp dmVuIHRoYXQgdGhlIGNvbnNlcXVlbmNlcyBvZiBsZWFrYWdlIG9mDQp0aG9zZSBjcmVkZW50aWFs cyBhcmUgdmVyeSBiYWQuIFRoZXJlIGFyZSBwb3NzaWJsZSBzb2x1dGlvbnMgdG8gYXZvaWQgdGhl DQpDU1AgaGF2aW5nIHRvIGRpc3RyaWJ1dGUgdGhlaXIgY3JlZGVudGlhbHMgKGUuZy4gS2V5bGVz cyBTU0wpIGJ1dCBmcm9tDQp0aGUgcGVyc3BlY3RpdmUgb2YgdGhlIHJlZGlyZWN0aW9uIGRyYWZ0 IHRoZXnCuXJlIG91dCBvZiBzY29wZSBJTU8uDQoNClRoZSBmYWN0IHRoYXQgdGhlcmUgYXJlIHR3 byBkcmFmdHMgdHJ5aW5nIHRvIGltcHJvdmUgdGhlIHdvcmthcm91bmQgZG9lcw0Kbm90IGNvbnZp bmNlIG1lIHRoYXQgdGhlIHByb2JsZW0gaXNuJ3Qgd29ydGggbm90aW5nLg0KDQpUaGUgcHJvYmxl bSBpcyB3b3J0aCBub3RpbmcsIHdoaWNoIGlzIHdoYXQgd2UgZGlkLCBhcyBub3RlZCBhYm92ZSBp dCBzZWVtcyBvdXIgdGV4dCBuZWVkcyBtb3JlIHdvcmsuDQoNCkl0IGlzIGFsc28gd29ydGggbm90 aW5nIElNTyB0aGF0IG5laXRoZXIgb2YgdGhlIHR3byBkcmFmdHMgYWN0dWFsbHkgZGVzY3JpYmUg b3IgbWVudGlvbiB0aGUgcHJvYmxlbSB3ZSBhcmUgZGlzY3Vzc2luZyBidXQgbWVyZWx5IGhpbnQg YXQgaXQgYW5kIHRoZW4gYXR0cmlidXRlIHRoZSBjYXVzZSBvZiBpdCB0byB0aGUgcHJlc2VuY2Ug b2YgYSBDTkFNRSBpbiB0aGUgY2FsbCBmbG93LCByYXRoZXIgdGhhbiB0aGUgdHJ1ZSBjYXVzZSB3 aGljaCBpcyBsYWNrIG9mIGFiaWxpdHkgb2YgdGhlIGRDRE4gdG8gc3VjY2Vzc2Z1bGx5IGNvbXBs ZXRlIHRoZSBUTFMgaGFuZHNoYWtlLg0KDQpBbnl3YXksIGRvZXMgdGhpcyBwcm9wb3NhbCBnZXQg dXMgY2xvc2VyIHRvIHNvbWUgdGV4dCB5b3XigJlkIGJlIGhhcHB5IHdpdGg/DQoNCj09PU9MRD09 PQ0KVGhlIFJlZGlyZWN0aW9uIEludGVyZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgbWln aHQgYmUgdXNlZCB0byByZWRpcmVjdCBhIHJlcXVlc3Qgd2hlcmUgdGhlIFVzZXIgQWdlbnQgd2ls bCBzdWJzZXF1ZW50bHkgYXR0ZW1wdCB0byBlc3RhYmxpc2ggYSBUTFMgc2Vzc2lvbiB3aXRoIHRo ZSBSZWRpcmVjdGlvbiBUYXJnZXQuICBJbiBzdWNoIGEgY2FzZSwgYW55IHN1cnJvZ2F0ZSBvciBy ZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2VudCBpcyByZWRpcmVjdGVkIG5lZWRz IHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBsZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFu ZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsLiAgTWVjaGFuaXNtcyB0 byBkaXN0cmlidXRlIHRoZSByZXF1aXJlZCBpbmZvcm1hdGlvbiBhbmQvb3IgY29uZmlndXJhdGlv biwgc3VjaCBhcyBwcml2YXRlIGtleXMsIHRvIHN1cnJvZ2F0ZXMgYW5kIHJlcXVlc3Qgcm91dGVy cyBpbiBkQ0ROcyBhcmUgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC4NCj09PU5F Vz09PQ0KVGhlIFJlZGlyZWN0aW9uIEludGVyZmFjZSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQg bWlnaHQgYmUgdXNlZCB0byByZWRpcmVjdCBhIHJlcXVlc3Qgd2hlcmUgdGhlIFVzZXIgQWdlbnQg d2lsbCBzdWJzZXF1ZW50bHkgYXR0ZW1wdCB0byBlc3RhYmxpc2ggYSBUTFMgc2Vzc2lvbiB3aXRo IHRoZSBSZWRpcmVjdGlvbiBUYXJnZXQuIEluIHN1Y2ggYSBjYXNlLCBhbnkgc3Vycm9nYXRlIG9y IHJlcXVlc3Qgcm91dGVyIHRvIHdoaWNoIHRoZSBVc2VyIEFnZW50IGlzIHJlZGlyZWN0ZWQgbmVl ZHMgdG8gYmUgYWJsZSB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2Ug YW5kIHRvIHBlcmZvcm0gZW5jcnlwdGlvbiBvZiB0aGUgVExTIGNoYW5uZWwuDQoNClRoZSBwcml2 YXRlIGtleSBmb3IgdGhlIGhvc3QgaW4gdGhlIFJUIGlzIG5lZWRlZCBpbiBvcmRlciB0byBzdWNj ZXNzZnVsbHkgZXN0YWJsaXNoIGEgVExTIHNlc3Npb24uIFRoZSBtb3N0IHdpZGVzcHJlYWQgbWVj aGFuaXNtIGN1cnJlbnRseSB1c2VkIGJ5IChub24taW50ZXJjb25uZWN0ZWQpIENETnMgaXMgZm9y IHRoZSBvd25lciBvZiB0aGUgaG9zdCBpbiB0aGUgUlQgc2hhcmluZyB0aGVpciBwcml2YXRlIGtl eSB3aXRoIHRoZWlyIENETihzKSBvZiBjaG9pY2UuIEluIGNhc2VzIHdoZXJlIHRoZSBvd25lciBv ZiB0aGUgaG9zdCBpcyBub3Qgd2lsbGluZyB0byBzaGFyZSB0aGVpciBwcml2YXRlIGtleSwgb3Ro ZXIgbWVjaGFuaXNtcyB0aGF0IGFsbG93IHRoZSBvd25lciB0byBub3Qgc2hhcmUgdGhlaXIgcHJp dmF0ZSBrZXkgYXJlIHVzZWQsIGZvciBleGFtcGxlIEtleWxlc3MgU1NMIFtSRUZdLg0KDQpDRE5J IGJ5IGRlZmluaXRpb24gaW1wbGllcyB0aGF0IGEgQ29udGVudCBQcm92aWRlcuKAmXMgY29udGVu dCB3aWxsIGJlIGRlbGl2ZXJlZCBieSBDRE5zIG90aGVyIHRoYW4gdGhlIENETiB3aXRoIHdoaWNo IHRoZSBDb250ZW50IFByb3ZpZGVyIGhhcyBhIGRpcmVjdCBidXNpbmVzcyByZWxhdGlvbnNoaXAu IFRoZXJlZm9yZSwgd2hpbGUgQ0ROSSBkb2VzIG5vdCBpbnRyb2R1Y2UgYW55IG5ldyB0ZWNobmlj YWwgcmVxdWlyZW1lbnRzIG9uIGRDRE5zIHdoZW4gZXN0YWJsaXNoaW5nIFRMUyBzZXNzaW9ucywg Q29udGVudCBQcm92aWRlcnMgbWF5IGJlIGxlc3Mgd2lsbGluZyB0byBoYXZlIHRoZWlyIHByaXZh dGUga2V5IHNoYXJlZCB3aXRoIGRDRE5zIHRoYW4gdGhleSBhcmUgd2l0aCB0aGVpciBjaG9zZW4g Q0ROKHMpIGluIGEgbm9uLWludGVyY29ubmVjdGVkIHNjZW5hcmlvLg0KDQpNZWNoYW5pc21zIHRv IGRpc3RyaWJ1dGUgdGhlIHJlcXVpcmVkIGluZm9ybWF0aW9uIGFuZC9vciBjb25maWd1cmF0aW9u IHRvIHN1cnJvZ2F0ZXMgYW5kIHJlcXVlc3Qgcm91dGVycyBpbiBkQ0ROcyB0byBlbmFibGUgYSBk Q0ROIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSBUTFMgaGFuZHNoYWtlcyBhbmQgdG8gcGVyZm9y bSBlbmNyeXB0aW9uIG9mIHRoZSBUTFMgY2hhbm5lbCBmb3IgYSBwYXJ0aWN1bGFyIGhvc3QsIHN1 Y2ggYXMgcHJpdmF0ZSBrZXlzIG9yIHRoZSBVUkkvSVAgYWRkcmVzcyBvZiBhIGtleSBzZXJ2ZXIs IGFyZSBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50Lg0KDQpbUkVGXSBodHRwczov L2Jsb2cuY2xvdWRmbGFyZS5jb20va2V5bGVzcy1zc2wtdGhlLW5pdHR5LWdyaXR0eS10ZWNobmlj YWwtZGV0YWlscy8NCj09PUVORD09PQ0KDQpCZW4NCg0KDQoNCkpvbiBQZXRlcnNvbg0KTmV1c3Rh ciwgSW5jLg0KDQoNCg0KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18KCkNlIG1lc3NhZ2UgZXQgc2VzIHBpZWNlcyBqb2ludGVz IHBldXZlbnQgY29udGVuaXIgZGVzIGluZm9ybWF0aW9ucyBjb25maWRlbnRpZWxsZXMgb3UgcHJp dmlsZWdpZWVzIGV0IG5lIGRvaXZlbnQgZG9uYwpwYXMgZXRyZSBkaWZmdXNlcywgZXhwbG9pdGVz IG91IGNvcGllcyBzYW5zIGF1dG9yaXNhdGlvbi4gU2kgdm91cyBhdmV6IHJlY3UgY2UgbWVzc2Fn ZSBwYXIgZXJyZXVyLCB2ZXVpbGxleiBsZSBzaWduYWxlcgphIGwnZXhwZWRpdGV1ciBldCBsZSBk ZXRydWlyZSBhaW5zaSBxdWUgbGVzIHBpZWNlcyBqb2ludGVzLiBMZXMgbWVzc2FnZXMgZWxlY3Ry b25pcXVlcyBldGFudCBzdXNjZXB0aWJsZXMgZCdhbHRlcmF0aW9uLApPcmFuZ2UgZGVjbGluZSB0 b3V0ZSByZXNwb25zYWJpbGl0ZSBzaSBjZSBtZXNzYWdlIGEgZXRlIGFsdGVyZSwgZGVmb3JtZSBv dSBmYWxzaWZpZS4gTWVyY2kuCgpUaGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cyBtYXkg Y29udGFpbiBjb25maWRlbnRpYWwgb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbiB0aGF0IG1heSBi ZSBwcm90ZWN0ZWQgYnkgbGF3Owp0aGV5IHNob3VsZCBub3QgYmUgZGlzdHJpYnV0ZWQsIHVzZWQg b3IgY29waWVkIHdpdGhvdXQgYXV0aG9yaXNhdGlvbi4KSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhp cyBlbWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhp cyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMuCkFzIGVtYWlscyBtYXkgYmUgYWx0ZXJlZCwg T3JhbmdlIGlzIG5vdCBsaWFibGUgZm9yIG1lc3NhZ2VzIHRoYXQgaGF2ZSBiZWVuIG1vZGlmaWVk LCBjaGFuZ2VkIG9yIGZhbHNpZmllZC4KVGhhbmsgeW91LgoK --_000_1BD328329726EF4E91AE924BB1B4CB9E0FDEDE4DOPEXCLILMA1corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1zb1Bs YWluVGV4dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNv LXN0eWxlLWxpbms6IlRleHRlIGJydXQgQ2FyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJBcmlhbCIsInNh bnMtc2VyaWYiOw0KCWNvbG9yOmJsYWNrOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30N CnAuTXNvQWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2Lk1zb0FjZXRhdGUNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJUZXh0ZSBkZSBidWxsZXMgQ2FyIjsNCglt YXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6OC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnNwYW4uVGV4dGVicnV0Q2FyDQoJ e21zby1zdHlsZS1uYW1lOiJUZXh0ZSBicnV0IENhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCW1zby1zdHlsZS1saW5rOiJUZXh0ZSBicnV0IjsNCglmb250LWZhbWlseToiQXJpYWwiLCJz YW5zLXNlcmlmIjsNCgljb2xvcjpibGFjazsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9 DQpzcGFuLlRleHRlZGVidWxsZXNDYXINCgl7bXNvLXN0eWxlLW5hbWU6IlRleHRlIGRlIGJ1bGxl cyBDYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiVGV4dGUg ZGUgYnVsbGVzIjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5F bWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkFyaWFsIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6YmxhY2s7DQoJZm9udC13ZWlnaHQ6bm9y bWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24x DQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgNzAuODVw dCA3MC44NXB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+ PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9 ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBt c28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0 PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0K PC9oZWFkPg0KPGJvZHkgbGFuZz0iRlIiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRp diBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj5EZWFyIEJlbiwgSm9uLDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+QXMgZmFyIGFzIEhUVFBTIGRlbGVnYXRpb24gaW4g Q0ROSSBkcmFmdCBpcyBjb25jZXJuZWQsIEnigJl2ZSB1cGRhdGVkIHNvbWUgcGFydHMgb2YgdGhl IGRyYWZ0IHRvIGJldHRlciBjbGFyaWZ5IHRoZSBpc3N1ZXMgeW91IG1lbnRpb25lZC48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+VG8gbWUsIHRoZSBmb2xsb3dpbmcgc2Vj dXJpdHkgcmVxdWlyZW1lbnRzIHNob3VsZCBiZSBwb2ludGVkIG91dCB3aGVuIGRlYWxpbmcgd2l0 aCBIVFRQUyBkZWxlZ2F0aW9uOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNr Ij4tIGVuc3VyZSB0aGUgbGVnaXRpbWFjeSBvZiBkZWxlZ2F0aW9uOiBhIHVDRE4gaGFzIHdpbGxm dWxseSBkZXNpZ25hdGVkIHRoZSB1Q0ROLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OmJsYWNrIj4tIGVuc3VyZSBhIOKAnHNlYW1sZXNz4oCdIHNlY3VyaXR5IHdoZW4gcmVkaXJlY3Rp bmcgdXNlcnMgZnJvbSBvbmUgQ0ROIHRvIGFub3RoZXI6IGUuZy4gbm8gc2VjdXJpdHkgd2Fybmlu ZyBvbiB1c2Vy4oCZIHNpZGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+ LSBndWFyYW50ZWUgdGhlIGNvbmZpZGVudGlhbGl0eSBvZiBDRE5zIGNvbmZpZ3VyYXRpb24gYW5k IHRvcG9sb2d5IGluZm9ybWF0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+Rm9yIGlu Zm9ybWF0aW9uLCBoZXJlIGlzIHRoZSBsaW5rIHRvIHRoZSBzZWNvbmQgdmVyc2lvbiBvZiB0aGUg ZHJhZnQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWZpZWF1LWh0 dHBzLWRlbGl2ZXJ5LWRlbGVnYXRpb24tMDEudHh0Ij48c3BhbiBsYW5nPSJFTi1VUyI+aHR0cHM6 Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWZpZWF1LWh0dHBzLWRlbGl2ZXJ5 LWRlbGVnYXRpb24tMDEudHh0PC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJs YWNrIj5PZiBjb3Vyc2UgYSByZXZpZXcgd291bGQgYmUgbmVjZXNzYXJ5IHRvIGdvIGZ1cnRoZXIu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6YmxhY2siPlRoYW5rIHlvdSw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj5C ZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpibGFjayI+RnJlZGVyaWM8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkRlJm5i c3A7Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBDRE5pIFs8YSBocmVm PSJtYWlsdG86Y2RuaS1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86Y2RuaS1ib3VuY2VzQGlldGYu b3JnPC9hPl0NCjxiPkRlIGxhIHBhcnQgZGU8L2I+IEJlbiBOaXZlbi1KZW5raW5zPGJyPg0KPGI+ RW52b3nDqSZuYnNwOzo8L2I+IGpldWRpIDIyIG9jdG9icmUgMjAxNSAwOTo1Nzxicj4NCjxiPsOA Jm5ic3A7OjwvYj4gUGV0ZXJzb24sIEpvbjxicj4NCjxiPkNjJm5ic3A7OjwvYj4gPGEgaHJlZj0i bWFpbHRvOmNkbmlAaWV0Zi5vcmciPmNkbmlAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+T2JqZXQmbmJz cDs6PC9iPiBSZTogW0NETmldIEpvbidzIGNvbW1ldCBvbiBkcmFmdC1pZXRmLWNkbmktcmVkaXJl Y3Rpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyI+SGkgSm9uLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdp bi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIj5PbiAxNyBPY3QgMjAxNSwgYXQgMTk6MDksIFBldGVyc29uLCBKb24gJmx0Ozwvc3Bh bj48YSBocmVmPSJtYWlsdG86am9uLnBldGVyc29uQG5ldXN0YXIuYml6Ij48c3BhbiBsYW5nPSJF Ti1VUyI+am9uLnBldGVyc29uQG5ldXN0YXIuYml6PC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1V UyI+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDsiPkkgd291bGRuJ3Qgc2F5IHRoZSBwcm9ibGVtIGlzIHRoYXQgbWFsaWNpb3VzIGF0 dGFjaywgc28gbXVjaCBhcyBpdCBpcyBhIHJlc29sdmVyJ3MgaW5hYmlsaXR5IHRvIGRpc3Rpbmd1 aXNoIG5vcm1hbCByZWRpcmVjdGlvbiBmcm9tIGFuIGF0dGFjay4gRE5TU0VDIGxldHMgeW91DQog ZGlzdGluZ3Vpc2ggdGhvc2UgdGhpbmdzIC0gaWYgeW91IGdldCByZWRpcmVjdGVkIHRvIGFub3Ro ZXIgZG9tYWluLCB3aXRoIEROU1NFQyB5b3UgaGF2ZSBhIGNyeXB0b2dyYXBoaWMgYXNzdXJhbmNl IHRoYXQgdGhlIHRhcmdldCBkb21haW4gc2VudCB5b3UgdGhlcmUsIGFuZCB3aXRob3V0IEROU1NF QywgeW91IGRvbid0IGtub3cgaWYgeW91J3JlIGJlaW5nIHJlZGlyZWN0ZWQgYnkgdGhlIHRhcmdl dCBkb21haW4gb3IgYW4gYXR0YWNrZXIuIEJlY2F1c2UNCiBETlNTRUMgaXMgbm90IHdpZGVseSBh dmFpbGFibGUgaW4gdGhlIGVudmlyb25tZW50cyB1bmRlciBjb25zaWRlcmF0aW9uICh5ZXQpLCBp biBwcmFjdGljZSB0aGlzIG1lYW5zIHRoYXQgdG8gZ2V0IHNlY3VyaXR5IGZvciB0aGVzZSBhcHBs aWNhdGlvbnMgd2hlbiB5b3UgZG8gRE5TIHJlZGlyZWN0aW9uIHlvdSBlbmQgdXAgZG9pbmcgdGhl IHNvcnRzIG9mIHdvcmthcm91bmRzIHRoYXQgeW91IGRldGFpbGVkIGluIHlvdXIgbGFzdCBtYWls LCB0aGUNCiBzb3J0cyBvZiB3b3JrYXJvdW5kcyBwZW9wbGUgYXJlIG5vdyB0cnlpbmcgdG8gaW1w cm92ZSBhcyBIVFRQUyBiZWNvbWVzIG1vcmUgcHJldmFsZW50IHRocm91Z2ggbWVhc3VyZXMgbGlr ZSBLZXlsZXNzIFNTTC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPlRoYW5rcyBmb3IgdGhlIGdyZWF0IGV4cGxh bmF0aW9uLiBJIHVuZGVyc3RhbmQgd2h5IHlvdSBzZWUgRE5TIGFzIGRpZmZlcmVudCB0byBIVFRQ UyByZWRpcmVjdGlvbiBub3cgOi0pPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxicj4NCjxicj4NCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkhUVFBTIHJl ZGlyZWN0aW9uIGlzIGRpZmZlcmVudCBiZWNhdXNlIHRoZSBlbnRpdHkgc2VuZGluZyB5b3UgdGhl IHJlZGlyZWN0aW9uICh0aGUgMzAyKSBpcyBzZW5kaW5nIGl0IHRvIHlvdSBvdmVyIFRMUywgd2hl biB5b3UndmUgYWxyZWFkeSBlc3RhYmxpc2hlZCBhIHNlY3VyaXR5DQogYXNzb2NpYXRpb24gYW5k IHlvdSBoYXZlIGEgY3J5cHRvZ3JhcGhpYyBhc3N1cmFuY2UgdGhhdCB0aGUgcmVkaXJlY3Rpb24g Y2FtZSBmcm9tIHRoZSB0YXJnZXQgZG9tYWluLiBBbiBhdHRhY2tlciB3aG8gZm9yZ2VzIGEgRE5T IHJlc3BvbnNlIHRvIHRoZSBvcmlnaW5hbCBmb3JtYXRpb24gb2YgdGhhdCBzZWN1cml0eSBhc3Nv Y2lhdGlvbiAoYXMgeW91IHRyeSB0byBkZXJlZmVyZW5jZQ0KPC9zcGFuPjxhIGhyZWY9Imh0dHBz Oi8vZXhhbXBsZS5jb20vIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij5odHRwczovL2V4YW1wbGUuY29tPC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ij4pIHdvdWxkIHNpbXBseSByZXN1bHQgaW4gdGhhdCBzZWN1cml0eQ0K IGFzc29jaWF0aW9uIG5ldmVyIGJlaW5nIGVzdGFibGlzaGVkLiBCdXQgaW4gdGhhdCBjYXNlLCB5 b3Uga25vdyBpdCdzIGFuIGF0dGFjay4gVGhhdCdzIHdoYXQgZGlmZmVyZW50IC0gaW4gdGhlIERO UyB5b3UgZG9uJ3QuIFNvIG5vLCBJIHRoaW5rIHRoZSBzaXR1YXRpb24gaXMgZGlmZmVyZW50IGZv ciBIVFRQUyByZWRpcmVjdGlvbiB0aGFuIGZvciBETlMgcmVkaXJlY3Rpb246IGluIEhUVFBTIHJl ZGlyZWN0aW9uLCBpdCBpcyBjbGVhciB3aGVuIHlvdQ0KIHJlY2VpdmUgdGhlIHJlZGlyZWN0aW9u IHJlc3BvbnNlIHdoZXRoZXIgaXQgY2FtZSBmcm9tIGFuIGF0dGFja2VyIG9yIHRoZSB0YXJnZXQg ZG9tYWluIC0geW91IGFsd2F5cyBrbm93IGl0IHdhcyB0aGUgdGFyZ2V0IGRvbWFpbiAodG8gdGhl IGRlZ3JlZSB5b3UgdHJ1c3QgeW91ciBjcnlwdG8gYW55d2F5KS4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5ZZXMsIHdoZXJlIHdlIGRpc2FncmVlIGlzIHRoYXQg SSB0aGluayBzcGVjaWZ5aW5nIEROUyBhcyBhIHJlZGlyZWN0aW9uIG1ldGhvZCBoYXMgZGlmZmVy ZW50IHNlY3VyaXR5IHByb3BlcnRpZXMgdGhhbiBzcGVjaWZ5aW5nIEhUVFBTIGFzIGEgcmVkaXJl Y3Rpb24gbWV0aG9kLg0KIERvZXNuJ3QgbWVhbiB0aGVyZSBhcmVuJ3Qgd29ya2Fyb3VuZHMgdG8g YWRkcmVzcyBETlMncyBzaXR1YXRpb24sIGJ1dCBJIHRoaW5rIGVsaWRpbmcgb3Igc2tpbW1pbmcg b3ZlciB0aGVzZSBkaWZmZXJlbmNlcyBkb2VzIGltcGxlbWVudGVycyBhbmQgZnV0dXJlIHNwZWNp ZmljYXRpb25zIGEgZGlzc2VydmljZSAtIHdlIHNob3VsZCBleHBsYWluIHdoYXQgdGhleSBhcmUu DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPkkgYWdyZWUuIEkgY2FuIGhhdmUgYSBnbyBhdCBzb21lIHRleHQgZm9yIHRoZSBjYXNlIG9m IEROUyByZWRpcmVjdGlvbiBvZiBIVFRQUyB0cmFmZmljIHlvdSBkZXNjcmliZSBhYm92ZS4gU2hv dWxkIHdlIGFsc28gbGVhdmUgaW4gdGhlIHRleHQgd2UgYWxyZWFkeSBoYXZlIChvciB0aGUgbW9k aWZpZWQgdmVyc2lvbiBJIHByb3Bvc2VkKT8gQW5kIGlzIGl0IHdvcnRoIHVzIGFkZGluZw0KIHRl eHQgb24gdGhlIGF0dGFjayBJIGRlc2NyaWJlIGJlbG93IG9yIGRvIHlvdSB0aGluayBhcyBpdCBh cHBsaWVzIHRvIGFsbCBETlMgcmVzb2x1dGlvbnMgaW4gZ2VuZXJhbCBpdOKAmXMgb3V0c2lkZSB0 aGUgc2NvcGUgb2YgdGhlIHJlZGlyZWN0aW9uIGRyYWZ0PzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhhbmtzPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkJl bjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Ob3csIGl0J3Mgbm90IG15IGludGVudGlvbiBo ZXJlIHRvIGJ1cmRlbiB0aGUgY2RuaS1yZWRpcmVjdGlvbiBkb2N1bWVudCB3aXRoIGRldGFpbGlu ZyBhIHNvbHV0aW9uIGZvciBzZWN1cmUgRE5TIHJlZGlyZWN0aW9uIGluIHRoZSBhYnNlbmNlIG9m IEROU1NFQy4gTXkgbWljDQogY29tbWVudCBtZXJlbHkgc3VnZ2VzdGVkIHRoYXQsIHNpbmNlIHBl b3BsZSB3ZXJlIHRhbGtpbmcgYWJvdXQgaG93IHRvIGltcHJvdmUgdGhlIHdvcmthcm91bmRzLCB0 aGF0IGRlc2NyaWJpbmcgdGhlIHByb2JsZW0gaGVyZSBzZWVtZWQgYXBwcm9wcmlhdGUuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Sm9uIFBldGVyc29uPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+TmV1c3RhciwgSW5jLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAj QjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbToN Cjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+QmVu IE5pdmVuLUplbmtpbnMgJmx0Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86YmVuQG5pdmVuLWplbmtp bnMuY28udWsiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPmJlbkBu aXZlbi1qZW5raW5zLmNvLnVrPC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7Ij4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlNhdHVyZGF5LCBPY3RvYmVyIDE3 LCAyMDE1IGF0IDQ6NDQgQU08YnI+DQo8Yj5UbzogPC9iPkpvbiBQZXRlcnNvbiAmbHQ7PC9zcGFu PjxhIGhyZWY9Im1haWx0bzpqb24ucGV0ZXJzb25AbmV1c3Rhci5iaXoiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPmpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpejwvc3Bh bj48L2E+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Jmd0Ozxicj4N CjxiPkNjOiA8L2I+JnF1b3Q7RnJhbmNvaXMgTGUgRmF1Y2hldXIgKGZsZWZhdWNoKSZxdW90OyAm bHQ7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpmbGVmYXVjaEBjaXNjby5jb20iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPmZsZWZhdWNoQGNpc2NvLmNvbTwvc3Bhbj48 L2E+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Jmd0OywNCiAmcXVv dDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPmNkbmlAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiZxdW90OyAmbHQ7PC9zcGFuPjxhIGhy ZWY9Im1haWx0bzpjZG5pQGlldGYub3JnIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij5jZG5pQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij4mZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbQ0ROaV0g Sm9uJ3MgY29tbWV0IG9uIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Kb24sDQo8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxi bG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDsiPk9uIDE3IE9jdCAyMDE1LCBhdCAwMDoxMiwgUGV0ZXJzb24sIEpvbiAmbHQ7 PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpqb24ucGV0ZXJzb25AbmV1c3Rhci5iaXoiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPmpvbi5wZXRlcnNvbkBuZXVzdGFyLmJp ejwvc3Bhbj48L2E+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Jmd0 Ow0KIHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+T2YgY291cnNlIGl0IGRlcGVuZHMgb24gd2hhdCBhbmdsZSB5b3UgbG9vayBhdCB0aGUg cHJvYmxlbSBmcm9tLCBidXQgaWYgdGhlcmUncyBubyBwcm9ibGVtIHdpdGggSFRUUFMgcmVkaXJl Y3Rpb24gKDMwMiBvdmVyIFRMUyBmcm9tIHVDRE4gdG8gZENETiksIGFuZCBubyBwcm9ibGVtDQog d2l0aCBETlMgcmVkaXJlY3Rpb24gd2l0aCBETlNTRUMsIGJ1dCB0aGVyZSBpcyBhIHByb2JsZW0g d2hlbiB5b3UgZG8gRE5TIHJlZGlyZWN0aW9uIHdpdGhvdXQgRE5TU0VDLCBJIHdvdWxkIG9yZGlu YXJpbHkgbG9jYXRlIHRoZSBwcm9ibGVtIHRoZXJlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkFoLCBPSywgSSB0aGluayBJ4oCZ bSBzdGFydGluZyB0byB1bmRlcnN0YW5kIG5vdy4gSWYgSSBoYXZlIHVuZGVyc3Rvb2QgY29ycmVj dGx5LCB3aGF0IHlvdSB3b3VsZCBsaWtlIGlzIGZvciB0aGUgcmVkaXJlY3Rpb24gaW50ZXJmYWNl IHRvIGFja25vd2xlZGdlIHRoYXQgd2l0aG91dA0KIEROU1NFQyBhIG1hbGljaW91cyBETlMgcmVz b2x2ZXIgY291bGQgcmV0dXJuIEROUyByZXNwb25zZXMgKElQIGFkZHJlc3Nlcy9DTkFNRXMvd2hh dGV2ZXIpIHRoYXQgc3RlZXIgdGhlIFVzZXIgQWdlbnQgdG8gYSBtYWxpY2lvdXMgc2VydmVyLiBE TlNTRUMgd291bGQgcHJldmVudCB0aGF0IGJlY2F1c2UgcmVzcG9uc2VzIHdvdWxkIG5lZWQgdG8g YmUgc2lnbmVkIGFuZCBhIG1hbGljaW91cyBETlMgcmVzb2x2ZXIgd291bGQgdGhlcmVmb3JlIG5v dA0KIGJlIGFibGUgdG8gcmV0dXJuIG1hbGljaW91cyByZXNwb25zZXMgYXMgaXQgd291bGQgbm90 IGJlIGFibGUgdG8gZ2VuZXJhdGUgcHJvcGVybHkgc2lnbmVkIEROUyByZXNwb25zZXMuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RG8gSSBoYXZlIHRoYXQgY29ycmVjdD88 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5JZiB0aGF04oCZcyB0aGUgY29u Y2VybiB3ZSBjYW4gZGVmaW5pdGVseSBpbmNsdWRlIHNvbWUgdGV4dCBpbiB0aGUgZG9jdW1lbnQg YWJvdXQgaXQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+SG93ZXZlciwg dGhhdCBjb25jZXJuIGFwcGxpZXMgdG8gSFRUUCAmYW1wOyBIVFRQUyByZWRpcmVjdGlvbiBhcyB3 ZWxsLiBJZiBhIENETiBpcyBwZXJmb3JtaW5nIEhUVFAgcmVkaXJlY3Rpb24gYW5kIHRoZSBVUkkg aXQgaXMgcmVkaXJlY3RpbmcgdG8gY29udGFpbnMgYSBob3N0IChpbnN0ZWFkDQogb2YgYW4gSVAg YWRkcmVzcykgdGhlbiBETlMgcmVzcG9uc2VzIHRvIHJlc29sdmUgdGhhdCBob3N0IGNvdWxkIGFs c28gYmUgaGlqYWNrZWQgYnkgYSBtYWxpY2lvdXMgRE5TIHJlc29sdmVyLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkluIHRoZSBjYXNlIG9mIGVuY3J5cHRlZCB0cmFmZmlj LCByZWdhcmRsZXNzIG9mIHdoZXRoZXIgRE5TIGJhc2VkIG9yIEhUVFBTIGJhc2VkIHJlZGlyZWN0 cyBhcmUgdXNlZCwgaWYgRE5TU0VDIGlzIG5vdCB1c2VkIHRoZW4gdGhlIEROUyByZXNwb25zZSBo aWphY2tpbmcgcHJvYmxlbQ0KIHN0aWxsIGV4aXN0cywgZXhjZXB0IHRoYXQgd2hlbiBhIFVzZXIg QWdlbnQgdHJpZXMgdG8gY29ubmVjdCB0byB0aGUgbWFsaWNpb3VzIHNlcnZlciBpbiB0aGUgRE5T IHJlc3BvbnNlLCB0aGUgbWFsaWNpb3VzIHNlcnZlciB3aWxsIG5vdCBiZSBhYmxlIHRvIGRlbGl2 ZXIgY29udGVudCB0byB0aGUgVXNlciBBZ2VudCBhcyB0aGUgbWFsaWNpb3VzIHNlcnZlciB3aWxs IG5vdCBiZSBhYmxlIHRvIGVzdGFibGlzaCBhIFRMUyBzZXNzaW9uIHdpdGggdGhlDQogVXNlciBB Z2VudC4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Ib3dldmVy IGFzIHRoZSBtYWxpY2lvdXMgRE5TIHJlc29sdmVyIGlzIHN0aWxsIGFibGUgdG8gc3RlZXIgdHJh ZmZpYyB0byBhIG1hbGljaW91cyBzZXJ2ZXIgdmlhIGEgbWFsaWNpb3VzIEROUyByZXNwb25zZSwg RE5TIHJlc3BvbnNlIGhpamFja2luZyBjb3VsZCBzdGlsbCBiZQ0KIHVzZWQgdG8gbW91bnQgd2hh dCBpcyBlZmZlY3RpdmVseSBhIERvUyBhdHRhY2sgYWdhaW5zdCB0aGUgQ0ROL0NvbnRlbnQgUHJv dmlkZXIuIFRoaXMgaXMgYmVjYXVzZSB0aGUgVXNlciBBZ2VudCB3b27igJl0IGJlIGFibGUgdG8g cmVjZWl2ZSB0aGUgY29udGVudCB0aGF0IGl0IHdhbnRzIGJlY2F1c2UgaXQgaXMgYmVpbmcgdG9s ZCB0byByZXRyaWV2ZSBpdCBmcm9tIGEgc2VydmVyIHRoYXQgaXQgY2Fu4oCZdCBlc3RhYmxpc2gg YSBUTFMgc2Vzc2lvbiB0by48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5U aGVyZWZvcmUsIG15IHN1Z2dlc3Rpb24gd291bGQgYmUgdGhhdCB3ZSBpbmNsdWRlIHNvbWUgdGV4 dCBzYXlpbmcgdGhhdCBpZiBETlNTRUMgaXMgbm90IHVzZWQsIHRoZW4gdGhlcmUgaXMgdGhlIHBv c3NpYmlsaXR5IHRoYXQgZG9tYWlucyB1c2VkIGZvciByZWRpcmVjdGlvbg0KICh3aGV0aGVyIHRo YXQgaXMgRE5TIHJlZGlyZWN0aW9uLCBIVFRQIHJlZGlyZWN0aW9uIG9yIEhUVFBTIHJlZGlyZWN0 aW9uKSBjb3VsZCBoYXZlIHRoZWlyIEROUyByZXNwb25zZXMgaGlqYWNrZWQgYW5kIGJhZCB0aGlu Z3MgY291bGQgcmVzdWx0LiBUaGUgdHlwZSBvZiBudW1iZXIgb2YgYmFkIHRoaW5ncyBhIG1hbGlj aW91cyBhY3RvciBjb3VsZCBkbyBpcyBtdWNoIGdyZWF0ZXIgd2l0aCBIVFRQIHRyYWZmaWMgdGhh biB3aXRoIEhUVFBTIHRyYWZmaWMNCiBidXQgZm9yIEhUVFBTIHRyYWZmaWMgdGhlIG51bWJlciBv ZiBiYWQgdGhpbmdzIGEgbWFsaWNpb3VzIGFjdG9yIGNvdWxkIGFjaGlldmUgaXMgbm90IHplcm8s IGJ1dCB0aGV5IGFyZSBsaW1pdGVkIHRvIERvUyByYXRoZXIgdGhhbiBpbmplY3Rpb24gb2YgdGhl aXIgb3duIGNvbnRlbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+SWYg eW91IGFncmVlIHdpdGggdGhlIGFib3ZlIEkgY2FuIHByb3Bvc2Ugc29tZSB0ZXh0IHRvIGRlc2Ny aWJlIHRoZSBwcm9ibGVtLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDsiPiZuYnNwOzxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPlRoZSBpbnNlY3VyaXR5IG9mIHJlZGlyZWN0aW5nIHdpdGggdGhlIERO UyAoaW4gdGhlIGFic2VuY2Ugb2YgRE5TU0VDKSBpcyBtb3Jlb3ZlciBhIHByb2JsZW0gbXVjaCBi aWdnZXIgdGhhbiBDRE5zLiBUaGVyZSB3YXMgYSBkcmFmdCBhIGZldyB5ZWFycyBhZ28gY2FsbGVk IHRoZQ0KICZxdW90O0hBUkQgcHJvYmxlbSZxdW90OyBkcmFmdCwgd2hlcmUgJnF1b3Q7SEFSRCZx dW90OyBzdG9vZCBmb3IgJnF1b3Q7aGlnaCBhc3N1cmFuY2UgcmUtZGlyZWN0aW9uJnF1b3Q7IHRo YXQgbG9va2VkIGF0IHRoaXMgYXMgYSBnZW5lcmFsIHByb2JsZW0gaW52b2x2aW5nIGFwcGxpY2F0 aW9ucyBiZXlvbmQgSFRUUCBsaWtlIFhNUFAsIGFuZCBub3RpbmcgdGhhdCBpdCBoYXBwZW5lZCBm b3IgcmVzb3VyY2UgcmVjb3JkcyBsaWtlIFNSViBiZXlvbmQgQ05BTUUuIEl0IGhhcyBiZWVuIGEg a25vd24gaXNzdWUNCiBmb3IgYSB2YXJpZXR5IG9mIHZpcnR1YWwgaG9zdGluZyBhcmNoaXRlY3R1 cmVzLCB3aGljaCBoYXZlIHByb3BlcnRpZXMgc2ltaWxhciB0byBDRE4gaW50ZXJjb25uZWN0aW9u LCBmb3Igc29tZSB0aW1lLiBJIGhhdmUgYSB0b3VnaCB0aW1lIHVuZGVyc3RhbmRpbmcgd2h5IHdl IHdvdWxkbid0IHdhbnQgdG8gYWNrbm93bGVkZ2UgaXQgYXMgdGhlIHByb2JsZW0gaGVyZS4gJm5i c3A7U2F5aW5nIHRoZSBwcm9ibGVtIGlzIHRoZSBkaWZmaWN1bHR5IGluIGdldHRpbmcNCiBrZXlz IHRvIGVzdGFibGlzaCBhIFRMUyBjb25uZWN0aW9uIGlzIHRvIG1lIHNvcnQgb2YgbGlrZSBzYXlp bmcgdGhlIHByb2JsZW0gd2l0aCBiZWluZyB0aWVkIHRvIGEgc3RvbmUgYXQgdGhlIGJvdHRvbSBv ZiBhIGxha2UgaXMgdGhhdCB5b3UgZG9uJ3QgaGF2ZSBhIHNjdWJhIHRhbmsuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+QnV0IHJlYWxseSwgdGhpcyB3YXMgYW4gb2ZmaGFu ZCByZW1hcmsgYXQgYSBtaWMuIElmIG5vIGVsc2UgY2FyZXMsIGRvIHdoYXQgeW91J2QgbGlrZSBv dmVyIG15IG9iamVjdGlvbnMuIEkgdGhpbmsgdGhlIG5ldyBwcm9wb3NlZCB0ZXh0IGlzIG1vcmUg aGVscGZ1bCB0byBpbXBsZW1lbnRlcnMsDQogYnV0IGl0IGlzIHNvbHV0aW9uIHRleHQgcmF0aGVy IHRoYW4gcHJvYmxlbSB0ZXh0LCBhbmQgZG9lcyBub3QgZGlmZmVyZW50aWF0ZSB0aGUgc2l0dWF0 aW9uIGZvciBIVFRQUyBhbmQgaW5zZWN1cmUgRE5TLCBzbyBpdCBkb2Vzbid0IGFkZHJlc3MgbXkg Y29uY2Vybi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5J 4oCZZCBsaWtlIHRvIGRvY3VtZW50IHRoZSBpc3N1ZXMgdGhhdCBhZmZlY3QgQ0ROSSByZWRpcmVj dGlvbi4gVGhlIGNoYWxsZW5nZSBmb3IgbWUgaW4gZG9pbmcgdGhpcyBpcyB0aGF0IEkgZG8gbm90 IGtub3cgd2hhdCBhbGwgdGhvc2UgcHJvYmxlbXMgYXJlIGFuZCB0aGVyZQ0KIGhhcyBub3QgYmVl biBhIGNsZWFyIGRlc2NyaXB0aW9uIG9mIHRoZSBwcm9ibGVtKHMpIHRvIHdvcmsgb2ZmIHNvIEni gJltIGhhdmluZyB0byBpbmZlciB3aGF0IHRoZXkgYXJlICh0aGF0IGNvbW1lbnQgaXMgbm90IGFp bWVkIGF0IHlvdSBpbiBwYXJ0aWN1bGFyLCB0aGUgdHdvIGRyYWZ0cyBvbiB0aGlzIHRvcGljIGRv IG5vdCBwcm92aWRlIGEgY2xlYXIgcHJvYmxlbSBkZXNjcmlwdGlvbiBJTU8pLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkkgYWxzbyB0aGluayB0aGVyZSBtYXkgYmUgYSBt aXMtY29ubmVjdCBiZWNhdXNlIEkgYmVsaWV2ZSB0aGUgcHJvYmxlbSB5b3UgYXJlIHRyeWluZyB0 byBoaWdobGlnaHQgYXBwbGllcyB0byBhbGwgcmVkaXJlY3Rpb24gbWV0aG9kcyAoRE5TLCBIVFRQ ICZhbXA7IEhUVFBTKSwgYW5kDQogeW91IHNlZW0gdG8gdGhpbmsgaXQgb25seSBhcHBsaWVzIHRv IEROUyBiYXNlZCByZWRpcmVjdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij5PbmNlIHdlIGhhdmUgdGhlIHByb2JsZW0gYWdyZWVkLCBJIGNhbiBwcm9wb3NlIHRleHQg dG8gZGVzY3JpYmUgaXQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+QmVu PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PGJyPg0KPGJyPg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Sm9uIFBldGVyc29u PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+TmV1c3RhciwgSW5j LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+RnJvbToNCjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90OyI+QmVuIE5pdmVuLUplbmtpbnMgJmx0Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86YmVu QG5pdmVuLWplbmtpbnMuY28udWsiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPmJlbkBuaXZlbi1qZW5raW5zLmNvLnVrPC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPkZyaWRheSwg T2N0b2JlciAxNiwgMjAxNSBhdCAxMDo0MCBBTTxicj4NCjxiPlRvOiA8L2I+Sm9uIFBldGVyc29u ICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmpvbi5wZXRlcnNvbkBuZXVzdGFyLmJpeiI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+am9uLnBldGVyc29uQG5ldXN0 YXIuYml6PC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij4mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVvdDtGcmFuY29pcyBMZSBGYXVjaGV1ciAoZmxlZmF1 Y2gpJnF1b3Q7ICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNvbSI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ZmxlZmF1Y2hAY2lzY28u Y29tPC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4m Z3Q7LA0KICZxdW90Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86Y2RuaUBpZXRmLm9yZyI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+Y2RuaUBpZXRmLm9yZzwvc3Bhbj48 L2E+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+JnF1b3Q7ICZsdDs8 L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPmNkbmlAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+ UmU6IFtDRE5pXSBKb24ncyBjb21tZXQgb24gZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkhpIEpvbiwNCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+T24gMTYgT2N0IDIwMTUs IGF0IDE3OjA2LCBQZXRlcnNvbiwgSm9uICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmpvbi5w ZXRlcnNvbkBuZXVzdGFyLmJpeiI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+am9uLnBldGVyc29uQG5ldXN0YXIuYml6PC9zcGFuPjwvYT48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4mZ3Q7DQogd3JvdGU6PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+SG93IEROUyBy ZWRpcmVjdGlvbiB3b3JrcyBpcyB0aGF0IHRoZSBVc2VyIEFnZW50IGRvZXMgYSByZXNvbHV0aW9u IGZvcjxicj4NCmZvby5leGFtcGxlIGFuZCBpdCBnZXRzIGEgcmVzcG9uc2UgZm9yIGZvby5leGFt cGxlLiBUaGUgZmFjdCBhIENOQU1FIGlzPGJyPg0KcHJlc2VudCAmYW1wOyByZXNvbHZlZCBieSB0 aGUgRE5TIHJlc29sdmVyIGlzIGludmlzaWJsZSB0byB0aGUgVXNlciBBZ2VudDxicj4NCihldmlk ZW5jZWQgYnkgdGhlIGZhY3QgdGhlIFVSTCBiYXIgaW4gdGhlIGJyb3dzZXIgZG9lc27CuXQgY2hh bmdlIGRvbWFpbjxicj4NCm5hbWUvaG9zdG5hbWUgd2hlbiBETlMgcmVkaXJlY3Rpb24gaXMgcGVy Zm9ybWVkKS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48YnI+DQpJdCBpcyBjZXJ0YWlu bHkgaW52aXNpYmxlIHRvIHRoZSBicm93c2VyIHdoZW4gZXZlcnkgZENETiBob2xkcyB0aGUgcHJp dmF0ZTxicj4NCmtleSBvZiBldmVyeSB1Q0ROIHRoYXQgbWlnaHQgcmVkaXJlY3QgdG8gaXQsIGFz IHlvdSBzdGlwdWxhdGUgYmVsb3cuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij5JIGV4cGxhaW5lZCBob3cgaXQgaXMgZG9uZSBpbiB0aGUgbWFqb3JpdHkgb2Yg Y2FzZXMgdG9kYXkuIFRoYXQgaXNu4oCZdCB0aGUgb25seSBzb2x1dGlvbiwgS2V5bGVzcyBTU0wg aXMgYW5vdGhlciBmb3IgZXhhbXBsZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 OyI+SWY8YnI+DQp0aGF0IGlzIGFuIG9wZXJhdGlvbmFsIHJlcXVpcmVtZW50IG9mIHRoZSBETlMg cmVkaXJlY3Rpb24gbWVjaGFuaXNtIGluPGJyPg0KY2RuaS1yZWRpcmVjdGlvbiwgaXQgbmVlZHMg dG8gYmUgbWFkZSBleHBsaWNpdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkl04oCZ cyBub3QgYW4gb3BlcmF0aW9uYWwgcmVxdWlyZW1lbnQgSU1PLCB0aGUgb3BlcmF0aW9uYWwgcmVx dWlyZW1lbnQgaXMgdGhhdCB0aGUgZENETiBpcyBhYmxlIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0 ZSB0aGUgVExTIGhhbmRzaGFrZSBhbmQgdG8gcGVyZm9ybSBlbmNyeXB0aW9uDQogKGFuZCBkZWNy eXB0aW9uKSBvZiB0aGUgVExTIGNoYW5uZWwuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OyI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPlRoZSBwcm9wb3NlZCB0ZXh0IGp1c3Q8YnI+DQpzYXlzIHRoYXQgJnF1b3Q7YW55IHN1 cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2VudCBpczxicj4N CnJlZGlyZWN0ZWQgbmVlZHMgdG8gYmUgYWJsZSB0byBzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhl IFRMUyBoYW5kc2hha2UmcXVvdDs8YnI+DQpldGMuLCB3aGljaCBjb3VsZCBiZSByZWFkIHRvIGlt cGx5IHRoYXQgYXMgYSBzb2x1dGlvbiwgYnV0IG5vdCBpZiB5b3U8YnI+DQpkb24ndCB1bmRlcnN0 YW5kIHdoYXQgdGhlIHByb2JsZW0gaXMgaW4gdGhlIGZpcnN0IHBsYWNlLiBJIHdhcyBhc2tpbmcg dGhhdDxicj4NCnRoaXMgYWNrbm93bGVkZ2UgdGhlIHByb2JsZW0sIG5vdCBzcGVjaWZ5IGEgc29s dXRpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Hb29kLCB0aGF04oCZcyB3aGF0 IHdlIHdlcmUgdHJ5aW5nIHRvIGRvLCBtYXliZSB0aGUgdGV4dCB3ZSB1c2VkIG5lZWRzIHNvbWUg cmVmaW5lbWVudCB0byBiZSBiZXR0ZXIgdW5kZXJzdGFuZGFibGUgdG8gb3RoZXJzIGJ1dCB3ZSB3 b3JkZWQgaXQgdGhlIHdheSBpdCBpcyB0bw0KIGV4cGxpY2l0bHkgYXZvaWQgc3VnZ2VzdGluZyBh IHNvbHV0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Nb3Jlb3Zlciwg dGhlIHN1YnN0YW5jZSBvZiBteSBjb21tZW50IHdhcyB0aGF0IHRoZSBwcm9ibGVtIGlzIGRpZmZl cmVudDxicj4NCmZvciBETlMgcmVkaXJlY3Rpb24gdGhhbiBpdCBpcyBmb3IgSFRUUFMgcmVkaXJl Y3Rpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8Ymxv Y2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij5IVFRQUyByZWRpcmVjdGlvbjxicj4NCnNob3VsZG4ndCByZXF1aXJlIGV2ZXJ5 IGRDRE4gdG8gaGF2ZSBldmVyeSB1Q0ROcyBwcml2YXRlIGtleWluZyBtYXRlcmlhbC48YnI+DQpU aGUgcHJvcG9zZWQgdGV4dCB0cmVhdHMgdGhpcyBsaWtlIHRoZSB0d28gbWV0aG9kcyBoYXZlIHRo ZSBzYW1lPGJyPg0KcHJvcGVydGllcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDsiPkkgdGhpbmsgaXQgbWF5IGRlcGVuZCB3aGF0IGFuZ2xlIHlvdSB2aWV3IHRo ZSBwcm9ibGVtIGZyb20uIEZyb20gbXkgYW5nbGUgb2YgdmlldyB0aGUgcHJvYmxlbSBpcyB0aGF0 IHRoZSBkQ0ROIG5lZWRzIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSB0aGUgVExTIGhhbmRzaGFr ZQ0KIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsLiBXaGF0IHRo ZSBkQ0ROIG5lZWRzIGluIG9yZGVyIHRvIGRvIHRoYXQgaXMgdGhlIHNhbWUgaW4gYm90aCBjYXNl czogcHJpdmF0ZSBrZXlzLCBvciBzb21lIG90aGVyIG1lY2hhbmlzbSBzdWNoIGFzIEtleWxlc3Mg U1NMIHRoYXQgd2lsbCBlbmFibGUgdGhlIGRDRE4gdG8gY29tcGxldGUgdGhlIGhhbmRzaGFrZSBh bmQgZW5jcnlwdC9kZWNyeXB0IHRoZSB0cmFmZmljLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDsiPlRoZSBmYWN0IHRoYXQgZm9yIGEgbG90IG9mIEhUVFBTIDMwMiByZWRpcmVj dGlvbiBjYXNlcyB0aGUgZENETiB3aWxsIGJlIHJlZGlyZWN0aW5nIHRvIGEgaG9zdG5hbWUgdW5k ZXIgdGhlIGRDRE7igJlzIGNvbnRyb2wgKGJ1dCB0aGF0IGlzIG5vdCBndWFyYW50ZWVkKSBtYXkg bWFrZQ0KIGJlaW5nIGFibGUgdG8mbmJzcDtzdWNjZXNzZnVsbHkgY29tcGxldGUgdGhlIFRMUyBo YW5kc2hha2UgYW5kIHRvIHBlcmZvcm0gZW5jcnlwdGlvbiBvZiB0aGUgVExTIGNoYW5uZWwgZWFz aWVyIGZvciB0aGUgZENETiBidXQgaXQgZG9lc27igJl0IGNoYW5nZSB0aGUgYmFzaWMgcHJvYmxl bSBvZiB3aGF0IHRoZSBkQ0ROIG5lZWRzIGluIG9yZGVyIHRvIGRvIGl0cyBqb2IuIEFuZCBmb3Ig KGF0IGxlYXN0IHNvbWUpIGNhc2VzIHdoZXJlIHRoZSAzMDIgcmVkaXJlY3Rpb24NCiBpcyB0byBh IGhvc3RuYW1lIG5vdCB1bmRlciBjb250cm9sIG9mIHRoZSBkQ0ROIHRoZSBwcm9wZXJ0aWVzIGFy ZSB0aGUgc2FtZSBmb3IgYm90aCBETlMgJmFtcDsgSFRUUFMgMzAyIHJlZGlyZWN0aW9uLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxicj4NCjxicj4NCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlRoZXJlZm9yZSBhcyBsb25nIGFzIHRo ZSBJUCBhZGRyZXNzKGVzKSBpbiB0aGUgRE5TIHJlc3BvbnNlIHByZXNlbnRzIHRoZTxicj4NCmNv cnJlY3QgY2VydGlmaWNhdGUgZm9yIGZvby5leGFtcGxlIGFuZCBoYXMgdGhlIGNvcnJlY3QgY3Jl ZGVudGlhbHMgKGUuZy48YnI+DQpQcml2YXRlIGtleSBmb3IgZm9vLmV4YW1wbGUpIHRvIGNvbXBs ZXRlIHRoZSBUTFMgaGFuZHNoYWtlICZhbXA7PGJyPg0KZW5jcnlwdC9kZWNyeXB0IHRyYWZmaWMg b24gdGhhdCBUTFMgc2Vzc2lvbiB0aGUgVXNlciBBZ2VudCB3aWxsIG5vdDxicj4NCmNvbXBsYWlu LiBUaGlzIGlzIGhvdyBETlMtYmFzZWQgSFRUUFMgcmVkaXJlY3Rpb24gaXMgZG9uZSBpbiBDRE5z IHRvZGF5PGJyPg0Kd2hlcmUgdHlwaWNhbGx5IGEgQ1NQIHdpbGwgcHJvdmlkZSB0aGVpciBjZXJ0 aWZpY2F0ZSAmYW1wOyBwcml2YXRlIGtleSB0byB0aGU8YnI+DQpDRE4gc28gdGhlIENETiBjYW4g dGVybWluYXRlIFRMUyBzZXNzaW9ucyBzdWNjZXNzZnVsbHkgb24gdGhlIENTUMK5czxicj4NCmJl aGFsZi4gd2hpY2ggbWVhbnMgaWYgSFRUUFMgcmVkaXJlY3Rpb24gaXMgaW5zZWN1cmUgZm9yIENE TkkgdGhlbiBIVFRQUzxicj4NCnJlZGlyZWN0aW9uIHVzZWQgYnkgQ0ROcyBpbiB0aGUgd2lsZCB0 b2RheSAod2l0aG91dCBDRE5JKSBpcyBhbHNvPGJyPg0KaW5zZWN1cmUgKHdoaWNoIGl0IGlzbsK5 dCkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PGJyPg0KSWRl bnRpZnlpbmcgYSBrbm93biB3b3JrYXJvdW5kIGRvZXMgbm90IG1lYW4gdGhlcmUgaXNuJ3QgYSBw cm9ibGVtLiBUaGF0PGJyPg0KdGhlcmUgaXMgYSB3b3JrYXJvdW5kIGlzIHByb29mIHRoZXJlIGlz IGEgcHJvYmxlbS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPknigJltIG5vdCBzdXJl IEnigJlkIGNhbGwgdGhlIHdheSB0aGF0IHRoZSBtYWpvcml0eSBvZiBDRE4gZGVsaXZlcmVkIEhU VFBTIHRyYWZmaWMgaXMgZGVsaXZlcmVkIGEgd29ya2Fyb3VuZCBteXNlbGYgKEkgb25seSBkZXNj cmliZWQgdGhlIG1vc3QgY29tbW9uIG1lY2hhbmlzbSwNCiB0aGVyZSBhcmUgb3RoZXJzIG1lY2hh bmlzbXMgdGhhdCBkb27igJl0IHJlbHkgb24gc2hhcmluZyB0aGUgcHJpdmF0ZSBrZXkgYW5kIHdo aWNoIGFyZSB1c2VkIGluIHRoZSB3aWxkLCBlLmcuIEtleWxlc3MgU1NMKS48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5CdXQgdGhhdOKAmXMgb2ZmLXRvcGljIHNvIGxldOKA mXMgbW92ZSBvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5JTU8gSSB0aGluayB0 aGUgcmVhbCBwcm9ibGVtIGlzIGEgZGlmZmVyZW50IHRoaW5nIHRoYXQ8YnI+DQpkcmFmdC1zbG92 ZXRza2l5LWNkbmktaHR0cHMtZGVsZWdhdGlvbi1hcHByb2FjaGVzIGhpbnRzIGF0IHdpdGhvdXQ8 YnI+DQpzdGF0aW5nIGV4cGxpY2l0bHkuIFRoYXQgaXMgaG93IGZhciB3aWxsIGEgQ1NQIHRydXN0 IGRlbGVnYXRpbmcgaXRzPGJyPg0KY3JlZGVudGlhbHMgKGUuZy4gUHJpdmF0ZSBrZXkpIGdpdmVu IHRoYXQgdGhlIGNvbnNlcXVlbmNlcyBvZiBsZWFrYWdlIG9mPGJyPg0KdGhvc2UgY3JlZGVudGlh bHMgYXJlIHZlcnkgYmFkLiBUaGVyZSBhcmUgcG9zc2libGUgc29sdXRpb25zIHRvIGF2b2lkIHRo ZTxicj4NCkNTUCBoYXZpbmcgdG8gZGlzdHJpYnV0ZSB0aGVpciBjcmVkZW50aWFscyAoZS5nLiBL ZXlsZXNzIFNTTCkgYnV0IGZyb208YnI+DQp0aGUgcGVyc3BlY3RpdmUgb2YgdGhlIHJlZGlyZWN0 aW9uIGRyYWZ0IHRoZXnCuXJlIG91dCBvZiBzY29wZSBJTU8uPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90OyI+PGJyPg0KVGhlIGZhY3QgdGhhdCB0aGVyZSBhcmUgdHdvIGRyYWZ0cyB0cnlpbmcg dG8gaW1wcm92ZSB0aGUgd29ya2Fyb3VuZCBkb2VzPGJyPg0Kbm90IGNvbnZpbmNlIG1lIHRoYXQg dGhlIHByb2JsZW0gaXNuJ3Qgd29ydGggbm90aW5nLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+VGhlIHByb2JsZW0gaXMgd29ydGggbm90aW5nLCB3aGljaCBp cyB3aGF0IHdlIGRpZCwgYXMgbm90ZWQgYWJvdmUgaXQgc2VlbXMgb3VyIHRleHQgbmVlZHMgbW9y ZSB3b3JrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkl0IGlzIGFsc28g d29ydGggbm90aW5nIElNTyB0aGF0IG5laXRoZXIgb2YgdGhlIHR3byBkcmFmdHMgYWN0dWFsbHkg ZGVzY3JpYmUgb3IgbWVudGlvbiB0aGUgcHJvYmxlbSB3ZSBhcmUgZGlzY3Vzc2luZyBidXQgbWVy ZWx5IGhpbnQgYXQgaXQgYW5kIHRoZW4gYXR0cmlidXRlDQogdGhlIGNhdXNlIG9mIGl0IHRvIHRo ZSBwcmVzZW5jZSBvZiBhIENOQU1FIGluIHRoZSBjYWxsIGZsb3csIHJhdGhlciB0aGFuIHRoZSB0 cnVlIGNhdXNlIHdoaWNoIGlzIGxhY2sgb2YgYWJpbGl0eSBvZiB0aGUgZENETiB0byBzdWNjZXNz ZnVsbHkgY29tcGxldGUgdGhlIFRMUyBoYW5kc2hha2UuPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OyI+QW55d2F5LCBkb2VzIHRoaXMgcHJvcG9zYWwgZ2V0IHVzIGNsb3NlciB0 byBzb21lIHRleHQgeW914oCZZCBiZSBoYXBweSB3aXRoPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDsiPj09PU9MRD09PTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij5UaGUgUmVkaXJlY3Rpb24gSW50ZXJmYWNlIGRlZmluZWQgaW4g dGhpcyBkb2N1bWVudCBtaWdodCBiZSB1c2VkIHRvIHJlZGlyZWN0IGEgcmVxdWVzdCB3aGVyZSB0 aGUgVXNlciBBZ2VudCB3aWxsIHN1YnNlcXVlbnRseSBhdHRlbXB0IHRvIGVzdGFibGlzaCBhIFRM UyBzZXNzaW9uDQogd2l0aCB0aGUgUmVkaXJlY3Rpb24gVGFyZ2V0LiAmbmJzcDtJbiBzdWNoIGEg Y2FzZSwgYW55IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBB Z2VudCBpcyByZWRpcmVjdGVkIG5lZWRzIHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBs ZXRlIHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRM UyBjaGFubmVsLiAmbmJzcDtNZWNoYW5pc21zIHRvIGRpc3RyaWJ1dGUgdGhlIHJlcXVpcmVkDQog aW5mb3JtYXRpb24gYW5kL29yIGNvbmZpZ3VyYXRpb24sIHN1Y2ggYXMgcHJpdmF0ZSBrZXlzLCB0 byBzdXJyb2dhdGVzIGFuZCByZXF1ZXN0IHJvdXRlcnMgaW4gZENETnMgYXJlIG91dHNpZGUgdGhl IHNjb3BlIG9mIHRoaXMgZG9jdW1lbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+PT09TkVXPT09PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5UaGUgUmVkaXJlY3Rpb24gSW50ZXJmYWNlIGRlZmluZWQg aW4gdGhpcyBkb2N1bWVudCBtaWdodCBiZSB1c2VkIHRvIHJlZGlyZWN0IGEgcmVxdWVzdCB3aGVy ZSB0aGUgVXNlciBBZ2VudCB3aWxsIHN1YnNlcXVlbnRseSBhdHRlbXB0IHRvIGVzdGFibGlzaCBh IFRMUyBzZXNzaW9uDQogd2l0aCB0aGUgUmVkaXJlY3Rpb24gVGFyZ2V0LiBJbiBzdWNoIGEgY2Fz ZSwgYW55IHN1cnJvZ2F0ZSBvciByZXF1ZXN0IHJvdXRlciB0byB3aGljaCB0aGUgVXNlciBBZ2Vu dCBpcyByZWRpcmVjdGVkIG5lZWRzIHRvIGJlIGFibGUgdG8gc3VjY2Vzc2Z1bGx5IGNvbXBsZXRl IHRoZSBUTFMgaGFuZHNoYWtlIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBj aGFubmVsLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlRoZSBwcml2YXRl IGtleSBmb3IgdGhlIGhvc3QgaW4gdGhlIFJUIGlzIG5lZWRlZCBpbiBvcmRlciB0byBzdWNjZXNz ZnVsbHkgZXN0YWJsaXNoIGEgVExTIHNlc3Npb24uIFRoZSBtb3N0IHdpZGVzcHJlYWQgbWVjaGFu aXNtIGN1cnJlbnRseSB1c2VkIGJ5IChub24taW50ZXJjb25uZWN0ZWQpDQogQ0ROcyBpcyBmb3Ig dGhlIG93bmVyIG9mIHRoZSBob3N0IGluIHRoZSBSVCBzaGFyaW5nIHRoZWlyIHByaXZhdGUga2V5 IHdpdGggdGhlaXIgQ0ROKHMpIG9mIGNob2ljZS4gSW4gY2FzZXMgd2hlcmUgdGhlIG93bmVyIG9m IHRoZSBob3N0IGlzIG5vdCB3aWxsaW5nIHRvIHNoYXJlIHRoZWlyIHByaXZhdGUga2V5LCBvdGhl ciBtZWNoYW5pc21zIHRoYXQgYWxsb3cgdGhlIG93bmVyIHRvIG5vdCBzaGFyZSB0aGVpciBwcml2 YXRlIGtleSBhcmUgdXNlZCwNCiBmb3IgZXhhbXBsZSBLZXlsZXNzIFNTTCBbUkVGXS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5DRE5JIGJ5IGRlZmluaXRpb24gaW1wbGll cyB0aGF0IGEgQ29udGVudCBQcm92aWRlcuKAmXMgY29udGVudCB3aWxsIGJlIGRlbGl2ZXJlZCBi eSBDRE5zIG90aGVyIHRoYW4gdGhlIENETiB3aXRoIHdoaWNoIHRoZSBDb250ZW50IFByb3ZpZGVy IGhhcyBhIGRpcmVjdCBidXNpbmVzcw0KIHJlbGF0aW9uc2hpcC4gVGhlcmVmb3JlLCB3aGlsZSBD RE5JIGRvZXMgbm90IGludHJvZHVjZSBhbnkgbmV3IHRlY2huaWNhbCByZXF1aXJlbWVudHMgb24g ZENETnMgd2hlbiBlc3RhYmxpc2hpbmcgVExTIHNlc3Npb25zLCBDb250ZW50IFByb3ZpZGVycyBt YXkgYmUgbGVzcyB3aWxsaW5nIHRvIGhhdmUgdGhlaXIgcHJpdmF0ZSBrZXkgc2hhcmVkIHdpdGgg ZENETnMgdGhhbiB0aGV5IGFyZSB3aXRoIHRoZWlyIGNob3NlbiBDRE4ocykgaW4gYSBub24taW50 ZXJjb25uZWN0ZWQNCiBzY2VuYXJpby48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij5NZWNoYW5pc21zIHRvIGRpc3RyaWJ1dGUgdGhlIHJlcXVpcmVkIGluZm9ybWF0aW9uIGFu ZC9vciBjb25maWd1cmF0aW9uIHRvIHN1cnJvZ2F0ZXMgYW5kIHJlcXVlc3Qgcm91dGVycyBpbiBk Q0ROcyB0byBlbmFibGUgYSBkQ0ROIHRvIHN1Y2Nlc3NmdWxseSBjb21wbGV0ZSBUTFMNCiBoYW5k c2hha2VzIGFuZCB0byBwZXJmb3JtIGVuY3J5cHRpb24gb2YgdGhlIFRMUyBjaGFubmVsIGZvciBh IHBhcnRpY3VsYXIgaG9zdCwgc3VjaCBhcyBwcml2YXRlIGtleXMgb3IgdGhlIFVSSS9JUCBhZGRy ZXNzIG9mIGEga2V5IHNlcnZlciwgYXJlIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgZG9jdW1l bnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+W1JFRl0mbmJzcDs8L3Nw YW4+PGEgaHJlZj0iaHR0cHM6Ly9ibG9nLmNsb3VkZmxhcmUuY29tL2tleWxlc3Mtc3NsLXRoZS1u aXR0eS1ncml0dHktdGVjaG5pY2FsLWRldGFpbHMvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ij5odHRwczovL2Jsb2cuY2xvdWRmbGFyZS5jb20va2V5bGVzcy1zc2wt dGhlLW5pdHR5LWdyaXR0eS10ZWNobmljYWwtZGV0YWlscy88L3NwYW4+PC9hPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PT09RU5EPT09PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkJlbjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4w cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxicj4NCkpvbiBQ ZXRlcnNvbjxicj4NCk5ldXN0YXIsIEluYy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8UFJFPl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KCkNlIG1lc3Nh Z2UgZXQgc2VzIHBpZWNlcyBqb2ludGVzIHBldXZlbnQgY29udGVuaXIgZGVzIGluZm9ybWF0aW9u cyBjb25maWRlbnRpZWxsZXMgb3UgcHJpdmlsZWdpZWVzIGV0IG5lIGRvaXZlbnQgZG9uYwpwYXMg ZXRyZSBkaWZmdXNlcywgZXhwbG9pdGVzIG91IGNvcGllcyBzYW5zIGF1dG9yaXNhdGlvbi4gU2kg dm91cyBhdmV6IHJlY3UgY2UgbWVzc2FnZSBwYXIgZXJyZXVyLCB2ZXVpbGxleiBsZSBzaWduYWxl cgphIGwnZXhwZWRpdGV1ciBldCBsZSBkZXRydWlyZSBhaW5zaSBxdWUgbGVzIHBpZWNlcyBqb2lu dGVzLiBMZXMgbWVzc2FnZXMgZWxlY3Ryb25pcXVlcyBldGFudCBzdXNjZXB0aWJsZXMgZCdhbHRl cmF0aW9uLApPcmFuZ2UgZGVjbGluZSB0b3V0ZSByZXNwb25zYWJpbGl0ZSBzaSBjZSBtZXNzYWdl IGEgZXRlIGFsdGVyZSwgZGVmb3JtZSBvdSBmYWxzaWZpZS4gTWVyY2kuCgpUaGlzIG1lc3NhZ2Ug YW5kIGl0cyBhdHRhY2htZW50cyBtYXkgY29udGFpbiBjb25maWRlbnRpYWwgb3IgcHJpdmlsZWdl ZCBpbmZvcm1hdGlvbiB0aGF0IG1heSBiZSBwcm90ZWN0ZWQgYnkgbGF3Owp0aGV5IHNob3VsZCBu b3QgYmUgZGlzdHJpYnV0ZWQsIHVzZWQgb3IgY29waWVkIHdpdGhvdXQgYXV0aG9yaXNhdGlvbi4K SWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0 aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMuCkFz IGVtYWlscyBtYXkgYmUgYWx0ZXJlZCwgT3JhbmdlIGlzIG5vdCBsaWFibGUgZm9yIG1lc3NhZ2Vz IHRoYXQgaGF2ZSBiZWVuIG1vZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNpZmllZC4KVGhhbmsgeW91 Lgo8L1BSRT48L2JvZHk+DQo8L2h0bWw+DQo= --_000_1BD328329726EF4E91AE924BB1B4CB9E0FDEDE4DOPEXCLILMA1corp_-- From nobody Mon Oct 26 08:37:21 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 372981B4B81 for ; Mon, 26 Oct 2015 08:37:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.115 X-Spam-Level: X-Spam-Status: No, score=-2.115 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r8Xs7Pmgh4Hc for ; Mon, 26 Oct 2015 08:37:16 -0700 (PDT) Received: from fromintouta.tno.nl (fromintouta.tno.nl [134.221.1.26]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7187E1B4B78 for ; Mon, 26 Oct 2015 08:37:15 -0700 (PDT) X-IronPort-AV: E=Sophos; i="5.20,201,1444687200"; d="scan'208,217"; a="50966224" Received: from exc-cashub03.tsn.tno.nl (HELO mail.tno.nl) ([134.221.225.222]) by mailhost1a.tno.nl with ESMTP; 26 Oct 2015 16:37:12 +0100 Received: from EXC-MBX03.tsn.tno.nl ([fe80::e969:1300:fb9f:7e12]) by EXC-CASHUB03.tsn.tno.nl ([fe80::6d39:f277:173e:a926%13]) with mapi id 14.03.0248.002; Mon, 26 Oct 2015 16:37:12 +0100 From: "Brandenburg, R. (Ray) van" To: "Francois Le Faucheur (flefauch)" , "cdni@ietf.org" Thread-Topic: [CDNi] Fwd: IPR Disclosure Juniper Networks, Inc.'s Statement about IPR related to draft-ietf-cdni-redirection Thread-Index: AQHREAQusg+avI3r5UyPsTgejVU4Rg== Date: Mon, 26 Oct 2015 15:37:11 +0000 Message-ID: Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.151008 x-originating-ip: [134.221.225.191] Content-Type: multipart/alternative; boundary="_000_FDCCC0894E59454AB073EBA5B2333245tnonl_" MIME-Version: 1.0 Archived-At: Subject: Re: [CDNi] Fwd: IPR Disclosure Juniper Networks, Inc.'s Statement about IPR related to draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2015 15:37:20 -0000 --_000_FDCCC0894E59454AB073EBA5B2333245tnonl_ Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 SGkgRnJhbmNvaXMsDQoNCkkgd29uJ3QgYmUgaW4gWW9rb2hhbWEsIHNvIEknbGwgc3RhdGUgbXkg b3BpbmlvbiBoZXJlIGluc3RlYWQ6DQoNCkdpdmVuIHRoYXQgdGhlIElQUiBkaXNjbG9zdXJlIGF0 IGhhbmQgc2VlbXMgdG8gYmUgcmVhc29uYWJsZSwgYXMgb25lIG9mIHRoZSBlZGl0b3JzIG9mIGRy YWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbiBJIGRvbuKAmXQgc2VlIGEgcmVhc29uIHRvIGNoYW5n ZSBjb3Vyc2UgZm9yIHRoZSBkb2N1bWVudC4NCg0KQmVzdCByZWdhcmRzLA0KDQpSYXkNCg0KRnJv bTogQ0ROaSA8Y2RuaS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5v cmc+PiBvbiBiZWhhbGYgb2YgImZsZWZhdWNoQGNpc2NvLmNvbTxtYWlsdG86ZmxlZmF1Y2hAY2lz Y28uY29tPiIgPGZsZWZhdWNoQGNpc2NvLmNvbTxtYWlsdG86ZmxlZmF1Y2hAY2lzY28uY29tPj4N CkRhdGU6IFdlZG5lc2RheSAzMCBTZXB0ZW1iZXIgMjAxNSBhdCAxMjoxMg0KVG86ICJjZG5pQGll dGYub3JnPG1haWx0bzpjZG5pQGlldGYub3JnPiIgPGNkbmlAaWV0Zi5vcmc8bWFpbHRvOmNkbmlA aWV0Zi5vcmc+Pg0KU3ViamVjdDogW0NETmldIEZ3ZDogSVBSIERpc2Nsb3N1cmUgSnVuaXBlciBO ZXR3b3JrcywgSW5jLidzIFN0YXRlbWVudCBhYm91dCBJUFIgcmVsYXRlZCB0byBkcmFmdC1pZXRm LWNkbmktcmVkaXJlY3Rpb24NCg0KSGVsbG8sDQoNClBsZWFzZSBub3RlIHRoYXQgdGhlIHdvcmtp bmcgZ3JvdXAgY2hhaXJzIHBsYW4gdG8gcHV0IHRoaXMgSVBSIGRpc2Nsb3N1cmUgb24gdGhlIElF VEYtOTQgd29ya2luZyBncm91cCBtZWV0aW5nIGFnZW5kYSwgc28gcGxlYXNlIGNvbnNpZGVyIGl0 IGFuZCBmZWVsIGZyZWUgdG8gYnJpbmcgdXAgY29tbWVudHMvY29uY2VybnMgb24gdGhlIG1haWxp bmcgbGlzdCBiZWZvcmVoYW5kLg0KDQpDaGVlcnMNCg0KRnJhbmNvaXMNCkNETkkgd29ya2luZyBn cm91cCBjby1jaGFpcg0KDQpCZWdpbiBmb3J3YXJkZWQgbWVzc2FnZToNCg0KRnJvbTogSUVURiBT ZWNyZXRhcmlhdCA8aWV0Zi1pcHJAaWV0Zi5vcmc8bWFpbHRvOmlldGYtaXByQGlldGYub3JnPj4N ClN1YmplY3Q6IElQUiBEaXNjbG9zdXJlIEp1bmlwZXIgTmV0d29ya3MsIEluYy4ncyBTdGF0ZW1l bnQgYWJvdXQgSVBSIHJlbGF0ZWQgdG8gZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uDQpEYXRl OiAyMSBBdWd1c3QgMjAxNSAyMTowOTowNCBDRVNUDQpUbzogPHJheS52YW5icmFuZGVuYnVyZ0B0 bm8ubmw8bWFpbHRvOnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw+PiwgPGJlbi5uaXZlbi1qZW5r aW5zQGFsY2F0ZWwtbHVjZW50LmNvbTxtYWlsdG86YmVuLm5pdmVuLWplbmtpbnNAYWxjYXRlbC1s dWNlbnQuY29tPj4NCkNjOiA8YmFycnlsZWliYUBjb21wdXRlci5vcmc8bWFpbHRvOmJhcnJ5bGVp YmFAY29tcHV0ZXIub3JnPj4sIDxiZW5Abm9zdHJ1bS5jb208bWFpbHRvOmJlbkBub3N0cnVtLmNv bT4+LCA8YWxpc3NhQGNvb3BlcncuaW48bWFpbHRvOmFsaXNzYUBjb29wZXJ3LmluPj4sIDxkLm1h bGFzQGNhYmxlbGFicy5jb208bWFpbHRvOmQubWFsYXNAY2FibGVsYWJzLmNvbT4+LCA8ZmxlZmF1 Y2hAY2lzY28uY29tPG1haWx0bzpmbGVmYXVjaEBjaXNjby5jb20+PiwgPGNkbmlAaWV0Zi5vcmc8 bWFpbHRvOmNkbmlAaWV0Zi5vcmc+PiwgPGlwci1hbm5vdW5jZUBpZXRmLm9yZzxtYWlsdG86aXBy LWFubm91bmNlQGlldGYub3JnPj4NCg0KRGVhciBSYXkgdmFuIEJyYW5kZW5idXJnLCBCZW4gTml2 ZW4tSmVua2luczoNCg0KDQpBbiBJUFIgZGlzY2xvc3VyZSB0aGF0IHBlcnRhaW5zIHRvIHlvdXIg SW50ZXJuZXQtRHJhZnQgZW50aXRsZWQgIlJlcXVlc3QNClJvdXRpbmcgUmVkaXJlY3Rpb24gSW50 ZXJmYWNlIGZvciBDRE4gSW50ZXJjb25uZWN0aW9uIg0KKGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVj dGlvbikgd2FzIHN1Ym1pdHRlZCB0byB0aGUgSUVURiBTZWNyZXRhcmlhdCBvbiAgYW5kIGhhcw0K YmVlbiBwb3N0ZWQgb24gdGhlICJJRVRGIFBhZ2Ugb2YgSW50ZWxsZWN0dWFsIFByb3BlcnR5IFJp Z2h0cyBEaXNjbG9zdXJlcyINCihodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2lwci8yNjU3 LykuIFRoZSB0aXRsZSBvZiB0aGUgSVBSIGRpc2Nsb3N1cmUgaXMNCiJKdW5pcGVyIE5ldHdvcmtz LCBJbmMuJ3MgU3RhdGVtZW50IGFib3V0IElQUiByZWxhdGVkIHRvDQpkcmFmdC1pZXRmLWNkbmkt cmVkaXJlY3Rpb24iDQoNCg0KVGhhbmsgeW91DQoNCklFVEYgU2VjcmV0YXJpYXQNCg0KVGhpcyBt ZXNzYWdlIG1heSBjb250YWluIGluZm9ybWF0aW9uIHRoYXQgaXMgbm90IGludGVuZGVkIGZvciB5 b3UuIElmIHlvdSBhcmUgbm90IHRoZSBhZGRyZXNzZWUgb3IgaWYgdGhpcyBtZXNzYWdlIHdhcyBz ZW50IHRvIHlvdSBieSBtaXN0YWtlLCB5b3UgYXJlIHJlcXVlc3RlZCB0byBpbmZvcm0gdGhlIHNl bmRlciBhbmQgZGVsZXRlIHRoZSBtZXNzYWdlLiBUTk8gYWNjZXB0cyBubyBsaWFiaWxpdHkgZm9y IHRoZSBjb250ZW50IG9mIHRoaXMgZS1tYWlsLCBmb3IgdGhlIG1hbm5lciBpbiB3aGljaCB5b3Ug dXNlIGl0IGFuZCBmb3IgZGFtYWdlIG9mIGFueSBraW5kIHJlc3VsdGluZyBmcm9tIHRoZSByaXNr cyBpbmhlcmVudCB0byB0aGUgZWxlY3Ryb25pYyB0cmFuc21pc3Npb24gb2YgbWVzc2FnZXMuCg== --_000_FDCCC0894E59454AB073EBA5B2333245tnonl_ Content-Type: text/html; charset="utf-8" Content-ID: <0E6AEF475E5C234DB763968CCC48237B@tno.nl> MIME-Version: 1.0 Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj4NCjxkaXY+DQo8 ZGl2PkhpIEZyYW5jb2lzLDwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SSB3b24ndCBi ZSBpbiBZb2tvaGFtYSwgc28gSSdsbCBzdGF0ZSBteSBvcGluaW9uIGhlcmUgaW5zdGVhZDo8L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkdpdmVuIHRoYXQgdGhlIElQUiBkaXNjbG9zdXJl IGF0IGhhbmQgc2VlbXMgdG8gYmUgcmVhc29uYWJsZSwgYXMgb25lIG9mIHRoZSBlZGl0b3JzIG9m IGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbiBJIGRvbuKAmXQgc2VlIGEgcmVhc29uIHRvIGNo YW5nZSBjb3Vyc2UgZm9yIHRoZSBkb2N1bWVudC48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8 ZGl2PkJlc3QgcmVnYXJkcyw8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PlJheTwvZGl2 Pg0KPGRpdj4NCjxkaXYgaWQ9Ik1BQ19PVVRMT09LX1NJR05BVFVSRSI+PC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9E WV9TRUNUSU9OIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZTox MnB0OyB0ZXh0LWFsaWduOmxlZnQ7IGNvbG9yOmJsYWNrOyBCT1JERVItQk9UVE9NOiBtZWRpdW0g bm9uZTsgQk9SREVSLUxFRlQ6IG1lZGl1bSBub25lOyBQQURESU5HLUJPVFRPTTogMGluOyBQQURE SU5HLUxFRlQ6IDBpbjsgUEFERElORy1SSUdIVDogMGluOyBCT1JERVItVE9QOiAjYjVjNGRmIDFw dCBzb2xpZDsgQk9SREVSLVJJR0hUOiBtZWRpdW0gbm9uZTsgUEFERElORy1UT1A6IDNwdCI+DQo8 c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RnJvbTogPC9zcGFuPkNETmkgJmx0OzxhIGhy ZWY9Im1haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmciPmNkbmktYm91bmNlc0BpZXRmLm9yZzwv YT4mZ3Q7IG9uIGJlaGFsZiBvZiAmcXVvdDs8YSBocmVmPSJtYWlsdG86ZmxlZmF1Y2hAY2lzY28u Y29tIj5mbGVmYXVjaEBjaXNjby5jb208L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86Zmxl ZmF1Y2hAY2lzY28uY29tIj5mbGVmYXVjaEBjaXNjby5jb208L2E+Jmd0Ozxicj4NCjxzcGFuIHN0 eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRlOiA8L3NwYW4+V2VkbmVzZGF5IDMwIFNlcHRlbWJl ciAyMDE1IGF0IDEyOjEyPGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlRvOiA8 L3NwYW4+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmNkbmlAaWV0Zi5vcmciPmNkbmlAaWV0Zi5vcmc8 L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86Y2RuaUBpZXRmLm9yZyI+Y2RuaUBpZXRmLm9y ZzwvYT4mZ3Q7PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlN1YmplY3Q6IDwv c3Bhbj5bQ0ROaV0gRndkOiBJUFIgRGlzY2xvc3VyZSBKdW5pcGVyIE5ldHdvcmtzLCBJbmMuJ3Mg U3RhdGVtZW50IGFib3V0IElQUiByZWxhdGVkIHRvIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlv bjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJ3b3Jk LXdyYXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5l LWJyZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGVsbG8sDQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5QbGVhc2Ugbm90ZSB0aGF0 IHRoZSB3b3JraW5nIGdyb3VwIGNoYWlycyBwbGFuIHRvIHB1dCB0aGlzIElQUiBkaXNjbG9zdXJl IG9uIHRoZSBJRVRGLTk0IHdvcmtpbmcgZ3JvdXAgbWVldGluZyBhZ2VuZGEsIHNvIHBsZWFzZSBj b25zaWRlciBpdCBhbmQgZmVlbCBmcmVlIHRvIGJyaW5nIHVwIGNvbW1lbnRzL2NvbmNlcm5zIG9u IHRoZSBtYWlsaW5nIGxpc3QgYmVmb3JlaGFuZC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkNoZWVyczwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+RnJhbmNvaXM8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+Q0ROSSB3b3JraW5nIGdyb3VwIGNvLWNoYWlyPC9kaXY+DQo8ZGl2IHN0eWxl PSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj5CZWdpbiBmb3J3YXJkZWQgbWVzc2FnZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBw bGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOiAwcHg7IG1h cmdpbi1yaWdodDogMHB4OyBtYXJnaW4tYm90dG9tOiAwcHg7IG1hcmdpbi1sZWZ0OiAwcHg7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwg SGVsdmV0aWNhIE5ldWUsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgY29sb3I6cmdiYSgwLCAwLCAw LCAxLjApOyIgY2xhc3M9IiI+PGIgY2xhc3M9IiI+RnJvbToNCjwvYj48L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCBIZWx2ZXRpY2EgTmV1ZSwgSGVs dmV0aWNhLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+SUVURiBTZWNyZXRhcmlhdCAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmlldGYtaXByQGlldGYub3JnIiBjbGFzcz0iIj5pZXRmLWlwckBpZXRmLm9yZzwv YT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLXRv cDogMHB4OyBtYXJnaW4tcmlnaHQ6IDBweDsgbWFyZ2luLWJvdHRvbTogMHB4OyBtYXJnaW4tbGVm dDogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13ZWJraXQtc3lz dGVtLWZvbnQsIEhlbHZldGljYSBOZXVlLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOnJn YmEoMCwgMCwgMCwgMS4wKTsiIGNsYXNzPSIiPjxiIGNsYXNzPSIiPlN1YmplY3Q6DQo8L2I+PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogLXdlYmtpdC1zeXN0ZW0tZm9udCwgSGVsdmV0 aWNhIE5ldWUsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPjxiIGNsYXNzPSIiPklQ UiBEaXNjbG9zdXJlIEp1bmlwZXIgTmV0d29ya3MsIEluYy4ncyBTdGF0ZW1lbnQgYWJvdXQgSVBS IHJlbGF0ZWQgdG8gZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uPC9iPjxiciBjbGFzcz0iIj4N Cjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6IDBweDsgbWFyZ2luLXJpZ2h0 OiAwcHg7IG1hcmdpbi1ib3R0b206IDBweDsgbWFyZ2luLWxlZnQ6IDBweDsiIGNsYXNzPSIiPg0K PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAtd2Via2l0LXN5c3RlbS1mb250LCBIZWx2ZXRpY2Eg TmV1ZSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjpyZ2JhKDAsIDAsIDAsIDEuMCk7IiBj bGFzcz0iIj48YiBjbGFzcz0iIj5EYXRlOg0KPC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6IC13ZWJraXQtc3lzdGVtLWZvbnQsIEhlbHZldGljYSBOZXVlLCBIZWx2ZXRpY2EsIHNh bnMtc2VyaWY7IiBjbGFzcz0iIj4yMSBBdWd1c3QgMjAxNSAyMTowOTowNCBDRVNUPGJyIGNsYXNz PSIiPg0KPC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLXRvcDogMHB4OyBtYXJnaW4t cmlnaHQ6IDBweDsgbWFyZ2luLWJvdHRvbTogMHB4OyBtYXJnaW4tbGVmdDogMHB4OyIgY2xhc3M9 IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13ZWJraXQtc3lzdGVtLWZvbnQsIEhlbHZl dGljYSBOZXVlLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOnJnYmEoMCwgMCwgMCwgMS4w KTsiIGNsYXNzPSIiPjxiIGNsYXNzPSIiPlRvOg0KPC9iPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6IC13ZWJraXQtc3lzdGVtLWZvbnQsIEhlbHZldGljYSBOZXVlLCBIZWx2ZXRpY2Es IHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4mbHQ7PGEgaHJlZj0ibWFpbHRvOnJheS52YW5icmFuZGVu YnVyZ0B0bm8ubmwiIGNsYXNzPSIiPnJheS52YW5icmFuZGVuYnVyZ0B0bm8ubmw8L2E+Jmd0Oywg Jmx0OzxhIGhyZWY9Im1haWx0bzpiZW4ubml2ZW4tamVua2luc0BhbGNhdGVsLWx1Y2VudC5jb20i IGNsYXNzPSIiPmJlbi5uaXZlbi1qZW5raW5zQGFsY2F0ZWwtbHVjZW50LmNvbTwvYT4mZ3Q7PGJy IGNsYXNzPSIiPg0KPC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLXRvcDogMHB4OyBt YXJnaW4tcmlnaHQ6IDBweDsgbWFyZ2luLWJvdHRvbTogMHB4OyBtYXJnaW4tbGVmdDogMHB4OyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IC13ZWJraXQtc3lzdGVtLWZvbnQs IEhlbHZldGljYSBOZXVlLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOnJnYmEoMCwgMCwg MCwgMS4wKTsiIGNsYXNzPSIiPjxiIGNsYXNzPSIiPkNjOg0KPC9iPjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6IC13ZWJraXQtc3lzdGVtLWZvbnQsIEhlbHZldGljYSBOZXVlLCBIZWx2 ZXRpY2EsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4mbHQ7PGEgaHJlZj0ibWFpbHRvOmJhcnJ5bGVp YmFAY29tcHV0ZXIub3JnIiBjbGFzcz0iIj5iYXJyeWxlaWJhQGNvbXB1dGVyLm9yZzwvYT4mZ3Q7 LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJlbkBub3N0cnVtLmNvbSIgY2xhc3M9IiI+YmVuQG5vc3Ry dW0uY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86YWxpc3NhQGNvb3BlcncuaW4iIGNs YXNzPSIiPmFsaXNzYUBjb29wZXJ3LmluPC9hPiZndDssDQogJmx0OzxhIGhyZWY9Im1haWx0bzpk Lm1hbGFzQGNhYmxlbGFicy5jb20iIGNsYXNzPSIiPmQubWFsYXNAY2FibGVsYWJzLmNvbTwvYT4m Z3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNvbSIgY2xhc3M9IiI+Zmxl ZmF1Y2hAY2lzY28uY29tPC9hPiZndDssICZsdDs8YSBocmVmPSJtYWlsdG86Y2RuaUBpZXRmLm9y ZyIgY2xhc3M9IiI+Y2RuaUBpZXRmLm9yZzwvYT4mZ3Q7LCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlw ci1hbm5vdW5jZUBpZXRmLm9yZyIgY2xhc3M9IiI+aXByLWFubm91bmNlQGlldGYub3JnPC9hPiZn dDs8YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiPkRlYXIgUmF5IHZhbiBCcmFuZGVuYnVyZywgQmVuIE5pdmVuLUplbmtpbnM6PGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KQW4gSVBSIGRpc2Nsb3N1cmUgdGhh dCBwZXJ0YWlucyB0byB5b3VyIEludGVybmV0LURyYWZ0IGVudGl0bGVkICZxdW90O1JlcXVlc3Q8 YnIgY2xhc3M9IiI+DQpSb3V0aW5nIFJlZGlyZWN0aW9uIEludGVyZmFjZSBmb3IgQ0ROIEludGVy Y29ubmVjdGlvbiZxdW90OzxiciBjbGFzcz0iIj4NCihkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rp b24pIHdhcyBzdWJtaXR0ZWQgdG8gdGhlIElFVEYgU2VjcmV0YXJpYXQgb24gJm5ic3A7YW5kIGhh czxiciBjbGFzcz0iIj4NCmJlZW4gcG9zdGVkIG9uIHRoZSAmcXVvdDtJRVRGIFBhZ2Ugb2YgSW50 ZWxsZWN0dWFsIFByb3BlcnR5IFJpZ2h0cyBEaXNjbG9zdXJlcyZxdW90OzxiciBjbGFzcz0iIj4N Cig8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2lwci8yNjU3LyIgY2xhc3M9 IiI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9pcHIvMjY1Ny88L2E+KS4gVGhlIHRpdGxl IG9mIHRoZSBJUFIgZGlzY2xvc3VyZSBpczxiciBjbGFzcz0iIj4NCiZxdW90O0p1bmlwZXIgTmV0 d29ya3MsIEluYy4ncyBTdGF0ZW1lbnQgYWJvdXQgSVBSIHJlbGF0ZWQgdG88YnIgY2xhc3M9IiI+ DQpkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24mcXVvdDs8YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGFuayB5b3U8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpJRVRGIFNlY3JldGFyaWF0PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+ DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3NwYW4+DQo8cCBzdHls ZT0iTUFSR0lOOiAwY20gMGNtIDBwdCIgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9IkZP TlQtRkFNSUxZOiAnQXJpYWwnLCdzYW5zLXNlcmlmJzsgRk9OVC1TSVpFOiA4cHQ7IG1zby1iaWRp LWZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJzsgbXNvLWJpZGktZm9udC1zaXplOiAxMS4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48Zm9udCBzdHlsZT0iRk9OVC1TSVpFOiAx MXB4IiBzaXplPSIzIj4NCjwvZm9udD48cCBzdHlsZT0iTUFSR0lOOiAwY20gMGNtIDBwdCIgY2xh c3M9Ik1zb05vcm1hbCI+PGZvbnQgc3R5bGU9IkZPTlQtU0laRTogMTFweCIgc2l6ZT0iMyI+PHNw YW4gc3R5bGU9IkZPTlQtRkFNSUxZOiAnQXJpYWwnLCdzYW5zLXNlcmlmJzsgRk9OVC1TSVpFOiA4 cHQ7IG1zby1iaWRpLWZvbnQtc2l6ZTogOC41cHQiPlRoaXMgbWVzc2FnZSBtYXkgY29udGFpbiBp bmZvcm1hdGlvbiB0aGF0IGlzIG5vdCBpbnRlbmRlZCBmb3IgeW91LiBJZiB5b3UgYXJlIG5vdCB0 aGUgYWRkcmVzc2VlIG9yIGlmIHRoaXMgbWVzc2FnZSB3YXMgc2VudCB0byB5b3UgYnkgbWlzdGFr ZSwgeW91IGFyZSByZXF1ZXN0ZWQgdG8gaW5mb3JtIHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGUg bWVzc2FnZS4gVE5PIGFjY2VwdHMgbm8gbGlhYmlsaXR5IGZvciB0aGUgY29udGVudCBvZiB0aGlz IGUtbWFpbCwgZm9yIHRoZSBtYW5uZXIgaW4gd2hpY2ggeW91IHVzZSBpdCBhbmQgZm9yIGRhbWFn ZSBvZiBhbnkga2luZCByZXN1bHRpbmcgZnJvbSB0aGUgcmlza3MgaW5oZXJlbnQgdG8gdGhlIGVs ZWN0cm9uaWMgdHJhbnNtaXNzaW9uIG9mIG1lc3NhZ2VzLjxicj48YnI+PC9zcGFuPjwvZm9udD48 L3A+PC9ib2R5Pg0KPC9odG1sPg0K --_000_FDCCC0894E59454AB073EBA5B2333245tnonl_-- From nobody Mon Oct 26 11:17:46 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E79FA1B48FF for ; Mon, 26 Oct 2015 11:17:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VIQVdipec2Bt for ; Mon, 26 Oct 2015 11:17:43 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F45E1B489E for ; Mon, 26 Oct 2015 11:17:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1214; q=dns/txt; s=iport; t=1445883463; x=1447093063; h=from:to:cc:subject:date:message-id:mime-version; bh=lGp2HDu4v6uV0coKy1wJUPQt/03WlJru5AS5TSk3Qbo=; b=mkCsNJoXfiF0bJdW0elcrvfB4GnbzuNKIeUvmCB0JyMMdZn4MDl1cEUz HAu03FUCS3cVByms7KcEkJSlD+eWdI1/XomLhhG2EOjaooiAd5BIxknd4 gFzp4uV/k0LxfiJjkGe/vEYIXO/bIfzNfhIzMy1xxUR/LL2jGIngwwvJM Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0ACAgDqbS5W/4oNJK1egzZUdboehCEBDYFaIYV8gTg4FAEBAQEBAQF/C4Q1BHkSAQsBdCcEDog1DcU1AQEBAQEBAQEBAQEBAQEBAQEBAQEBFASGeIIPh3cEgyGBFAWWNgF6jCeBWYQ/hzSOYgEfAQFChAOHBIEGAQEB X-IronPort-AV: E=Sophos; i="5.20,201,1444694400"; d="scan'208,217"; a="39150880" Received: from alln-core-5.cisco.com ([173.36.13.138]) by rcdn-iport-7.cisco.com with ESMTP; 26 Oct 2015 18:17:42 +0000 Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t9QIHgQS000570 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 26 Oct 2015 18:17:42 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Mon, 26 Oct 2015 13:17:19 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Mon, 26 Oct 2015 13:17:19 -0500 From: "Francois Le Faucheur (flefauch)" To: "cdni@ietf.org" Thread-Topic: Draft agenda for Yokohama CDNI WG Meeting uploaded Thread-Index: AQHREBqMFhweBVb2U0Wp2ob3loB3aw== Date: Mon, 26 Oct 2015 18:17:19 +0000 Message-ID: <24DCEB00-1788-431E-9D43-BA2A29D71798@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.23] Content-Type: multipart/alternative; boundary="_000_24DCEB001788431E9D43BA2A29D71798ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [CDNi] Draft agenda for Yokohama CDNI WG Meeting uploaded X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2015 18:17:45 -0000 --_000_24DCEB001788431E9D43BA2A29D71798ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Folks, Please review the draft agenda: https://www.ietf.org/proceedings/94/agenda/agenda-94-cdni Thanks Francois --_000_24DCEB001788431E9D43BA2A29D71798ciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: <15ED00CBDB88714DAAFCE881090DB9A9@emea.cisco.com> Content-Transfer-Encoding: quoted-printable
Folks,

Please review the draft agenda:
https://www.ietf.org/proceedings/94/agenda/agenda-94-= cdni

Thanks

Francois
--_000_24DCEB001788431E9D43BA2A29D71798ciscocom_-- From nobody Mon Oct 26 11:19:53 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C4731B4553 for ; Mon, 26 Oct 2015 11:19:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kVNYMT6FhtXj for ; Mon, 26 Oct 2015 11:19:47 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8FCE81B2F8F for ; Mon, 26 Oct 2015 11:19:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2405; q=dns/txt; s=iport; t=1445883587; x=1447093187; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=L2p8OSQGI7HxFQsvfO1LVZjea1Bq296bw4pmJTnmOuA=; b=WEVKT3QweeffNvAuWpLGeWFfPG00+mijoutYZKOYfqhePv0b4eGsJGii MyWxPFq2ud2vbJ2pzxj5kXXqxpnHF3BalS2BFbs6A7ZlJazbfMXPpoasg et1RGQS90iCt7+g+uD3aNImOHq5HiwBxsfNou9Z1GuvFiHKT98EIkRtIX g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0ADAgDqbS5W/4sNJK1egzZUbwa+PwENgVohhXwCgTY4FAEBAQEBAQF/C4QzAQEEeRACAQwBOgcyFBECBA4FiDANxTUBAQEBAQEBAQEBAQEBAQEBAQEBAQEUBIZ4gg+HdwQHgxqBFAWWNgGNIYFZhD+HNIpzg28BHwEBQoQDcoYSgQYBAQE X-IronPort-AV: E=Sophos;i="5.20,201,1444694400"; d="scan'208,217";a="201432733" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 26 Oct 2015 18:19:46 +0000 Received: from XCH-RCD-018.cisco.com (xch-rcd-018.cisco.com [173.37.102.28]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t9QIJkhg008618 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 26 Oct 2015 18:19:46 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-RCD-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Mon, 26 Oct 2015 13:19:23 -0500 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Mon, 26 Oct 2015 13:19:23 -0500 From: "Francois Le Faucheur (flefauch)" To: "cdni@ietf.org" Thread-Topic: Presentation Material for Yokohama Thread-Index: AQHREBrWFzxecs74JUa87XUZk/XUdQ== Date: Mon, 26 Oct 2015 18:19:23 +0000 Message-ID: <0593BC0E-AE78-4C21-9F4B-54DA1DAD8117@cisco.com> References: <24DCEB00-1788-431E-9D43-BA2A29D71798@cisco.com> In-Reply-To: <24DCEB00-1788-431E-9D43-BA2A29D71798@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.23] Content-Type: multipart/alternative; boundary="_000_0593BC0EAE784C219F4B54DA1DAD8117ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [CDNi] Presentation Material for Yokohama X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2015 18:19:52 -0000 --_000_0593BC0EAE784C219F4B54DA1DAD8117ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable To all presenters, Please unicast to Daryl and I your draft presentations before the end of th= e week, in any case by Sunday 1st November latest. Thanks Francois On 26 Oct 2015, at 19:17, Francois Le Faucheur (flefauch) > wrote: Folks, Please review the draft agenda: https://www.ietf.org/proceedings/94/agenda/agenda-94-cdni Thanks Francois --_000_0593BC0EAE784C219F4B54DA1DAD8117ciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: <4E2F37DFC007004B87B5C790F8F117F9@emea.cisco.com> Content-Transfer-Encoding: quoted-printable
To all presenters,

Please unicast to Daryl and I your draft presentations befo= re the end of the week, in any case by Sunday 1st November latest.

Thanks

Francois


On 26 Oct 2015, at 19:17, Francois Le Faucheur (flefauch) &= lt;flefauch@cisco.com&= gt; wrote:

Folks,

Please review the draft agenda:
https://www.ietf.org/proceedings/94/agenda/agenda-94-= cdni

Thanks

Francois

--_000_0593BC0EAE784C219F4B54DA1DAD8117ciscocom_-- From nobody Tue Oct 27 06:14:32 2015 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89FB91A88E6 for ; Tue, 27 Oct 2015 06:14:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, HTML_MESSAGE=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ScUgoxmiSrBI for ; Tue, 27 Oct 2015 06:14:27 -0700 (PDT) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.145]) by ietfa.amsl.com (Postfix) with ESMTP id 47FD81A88F3 for ; Tue, 27 Oct 2015 06:14:26 -0700 (PDT) Received: from host4.velocix.com ([81.134.152.4] helo=bnjenkins-mbp.corp.velocix.com) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1Zr452-0003pT-Mh; Tue, 27 Oct 2015 13:14:25 +0000 Content-Type: multipart/alternative; boundary="Apple-Mail=_C19417AA-46B0-4079-A5BF-157FF1BB79A1" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Tue, 27 Oct 2015 13:14:19 +0000 Message-Id: References: <73F3A4F6-FC5D-4BC8-BEEC-82F27BA3641F@tno.nl> <102272CE-9EF0-4959-B9E2-8A2F10147BF7@cisco.com> <853CC284-D147-4A1F-8C47-213775F47768@cisco.com> <437C224B-1C0E-4705-8D52-98E139DDD75E@niven-jenkins.co.uk> <46A08C98-7B12-4F98-8826-8E9FE904B83C@niven-jenkins.co.uk> To: "Peterson, Jon" X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Jon's commet on draft-ietf-cdni-redirection X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2015 13:14:30 -0000 --Apple-Mail=_C19417AA-46B0-4079-A5BF-157FF1BB79A1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Jon, Would the following text address your comments, feel free to wordsmith = it to your liking. =3D=3D=3D The redirection interface defined in this document enables a uCDN to = return a DNS response on behalf of a dCDN. If DNSSEC is deployed User = Agents can authenticate the DNS responses they receive, enabling them to = distinguish between genuine responses (redirections) and malicious = responses (redirections). Without DNSSEC a User Agent is unable to = detect a malicious DNS redirect. HTTPS redirection provides an = additional layer of authentication via TLS because in order for the TLS = handshake to complete, the server the User Agent connects to must = authenticate itself to the User Agent. =3D=3D=3D Thanks Ben > On 22 Oct 2015, at 08:56, Ben Niven-Jenkins = wrote: >=20 >>> The Redirection Interface defined in this document might be used to = redirect a request where the User Agent will subsequently attempt to = establish a TLS session with the Redirection Target. In such a case, any = surrogate or request router to which the User Agent is redirected needs = to be able to successfully complete the TLS handshake and to perform = encryption of the TLS channel. >>>=20 >>> The private key for the host in the RT is needed in order to = successfully establish a TLS session. The most widespread mechanism = currently used by (non-interconnected) CDNs is for the owner of the host = in the RT sharing their private key with their CDN(s) of choice. In = cases where the owner of the host is not willing to share their private = key, other mechanisms that allow the owner to not share their private = key are used, for example Keyless SSL [REF]. >>>=20 >>> CDNI by definition implies that a Content Provider=E2=80=99s content = will be delivered by CDNs other than the CDN with which the Content = Provider has a direct business relationship. Therefore, while CDNI does = not introduce any new technical requirements on dCDNs when establishing = TLS sessions, Content Providers may be less willing to have their = private key shared with dCDNs than they are with their chosen CDN(s) in = a non-interconnected scenario. >>>=20 >>> Mechanisms to distribute the required information and/or = configuration to surrogates and request routers in dCDNs to enable a = dCDN to successfully complete TLS handshakes and to perform encryption = of the TLS channel for a particular host, such as private keys or the = URI/IP address of a key server, are outside the scope of this document. >>>=20 >>> [REF] = https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-technical-details= / = --Apple-Mail=_C19417AA-46B0-4079-A5BF-157FF1BB79A1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi Jon,

Would the following text address your comments, feel free to = wordsmith it to your liking.

=3D=3D=3D
The = redirection interface defined in this document enables a uCDN to return = a DNS response on behalf of a dCDN. If DNSSEC is deployed User = Agents can authenticate the DNS responses they receive, enabling them to = distinguish between genuine responses (redirections) and malicious = responses (redirections). Without DNSSEC a User Agent is unable to = detect a malicious DNS redirect.  HTTPS redirection provides = an additional layer of authentication via TLS because in order for the = TLS handshake to complete, the server the User Agent connects to = must authenticate itself to the User Agent.
=3D=3D=3D

Thanks
Ben





On 22 Oct 2015, at 08:56, Ben = Niven-Jenkins <ben@niven-jenkins.co.uk> wrote:

The Redirection Interface defined in this document might be = used to redirect a request where the User Agent will subsequently = attempt to establish a TLS session with the Redirection Target. In such = a case, any surrogate or request router to which the User Agent is = redirected needs to be able to successfully complete the TLS handshake = and to perform encryption of the TLS channel.

The private key for the host in the RT = is needed in order to successfully establish a TLS session. The most = widespread mechanism currently used by (non-interconnected) CDNs is for = the owner of the host in the RT sharing their private key with their = CDN(s) of choice. In cases where the owner of the host is not willing to = share their private key, other mechanisms that allow the owner to not = share their private key are used, for example Keyless SSL = [REF].

CDNI by = definition implies that a Content Provider=E2=80=99s content will be = delivered by CDNs other than the CDN with which the Content Provider has = a direct business relationship. Therefore, while CDNI does not introduce = any new technical requirements on dCDNs when establishing TLS sessions, = Content Providers may be less willing to have their private key shared = with dCDNs than they are with their chosen CDN(s) in a = non-interconnected scenario.

Mechanisms to distribute the required = information and/or configuration to surrogates and request routers in = dCDNs to enable a dCDN to successfully complete TLS handshakes and to = perform encryption of the TLS channel for a particular host, such as = private keys or the URI/IP address of a key server, are outside the = scope of this document.

[REF] https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-techni= cal-details/

= --Apple-Mail=_C19417AA-46B0-4079-A5BF-157FF1BB79A1--