From nobody Mon Jan 4 10:56:33 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E5621A1A91; Mon, 4 Jan 2016 10:56:30 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.11.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160104185630.13379.42236.idtracker@ietfa.amsl.com> Date: Mon, 04 Jan 2016 10:56:30 -0800 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-redirection-14.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Jan 2016 18:56:30 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : Request Routing Redirection Interface for CDN Interconnection Authors : Ben Niven-Jenkins Ray van Brandenburg Filename : draft-ietf-cdni-redirection-14.txt Pages : 30 Date : 2016-01-04 Abstract: The Request Routing Interface comprises of (1) the asynchronous advertisement of footprint and capabilities by a downstream Content Delivery Network (CDN) that allows an upstream CDN to decide whether to redirect particular user requests to that downstream CDN; and (2) the synchronous operation of an upstream CDN requesting whether a downstream CDN is prepared to accept a user request and of a downstream CDN responding with how to actually redirect the user request. This document describes an interface for the latter part, i.e. the CDNI Request Routing Redirection interface. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-redirection-14 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-redirection-14 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jan 5 00:11:49 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC1931B2BCF for ; Mon, 4 Jan 2016 22:35:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.351 X-Spam-Level: ** X-Spam-Status: No, score=2.351 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, GB_I_LETTER=-2, HELO_EQ_JP=1.244, HELO_EQ_NE_JP=1.244, HOST_EQ_JP=1.265, HOST_EQ_NE_JP=2.599, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7FcgmOpmxfYj for ; Mon, 4 Jan 2016 22:35:19 -0800 (PST) Received: from m2mda.as.sphere.ne.jp (m2mda234.as.sphere.ne.jp [210.136.9.234]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1DF81B2BCC for ; Mon, 4 Jan 2016 22:35:19 -0800 (PST) Received: from m2gwa039.p.as.sphere.ne.jp (m2lb000.f.as.sphere.ne.jp [172.16.116.10]) by m2mda002.p.as.sphere.ne.jp with ESMTP id u056Yxvs029089; Tue, 5 Jan 2016 15:34:59 +0900 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=itscj.ipsj.or.jp; s=20140719; t=1451975699; bh=+st9e79CKyRMbJe4SkSfJbs1Hv0+CnyBG/7fJM0t42E=; h=Subject:To:References:Cc:From:Date:In-Reply-To; b=CI8X6jrHtHWVBzOD/dmortp3FmPoyl+Ox+00fkNuG3yi3EY7RzLOnN05JetVvDS4Y U64iSynqGYqNVaZ7m5ELh6FCGDSsbMg3+WF9XeCiD9bH2wbjtar1qByJYJYl8nVzbi vKtzhLM9aSiUhgIoCP89pBQ3loDJkfQvh6Q6Xpjs= Received: by m2gwa039.p.as.sphere.ne.jp (Postfix, from userid 0) id C85A580007; Tue, 5 Jan 2016 15:34:59 +0900 (JST) Received: from m2lb000.f.as.sphere.ne.jp [172.16.116.10] by m2gwa039.p.as.sphere.ne.jp with ESMTP id RAA16537; Tue, 5 Jan 2016 15:34:59 +0900 Received: from m2msa002-017.as.sphere.ne.jp (m2lb000.f.as.sphere.ne.jp [172.16.116.10]) by m2vom001.p.as.sphere.ne.jp with ESMTP id u056YxaC028324; Tue, 5 Jan 2016 15:34:59 +0900 Received: from [192.168.1.161] (unknown [218.45.229.2]) (Authenticated sender: watanabe@itscj.ipsj.or.jp) by m2msa002-017.as.sphere.ne.jp (Postfix) with ESMTPA id AEE802A05F6; Tue, 5 Jan 2016 15:34:58 +0900 (JST) To: Kevin Ma , Francois Le Faucheur References: <20151231063940.24976.55306.idtracker@ietfa.amsl.com> From: WATANABE Shinji Message-ID: <568B6411.6010501@itscj.ipsj.or.jp> Date: Tue, 5 Jan 2016 15:34:57 +0900 User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <20151231063940.24976.55306.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Archived-At: X-Mailman-Approved-At: Tue, 05 Jan 2016 00:11:47 -0800 Cc: Ben Campbell , Stephan Wenger , Liaison Statement Management Tool , Content Delivery Networks Interconnection Discussion List , watanabe@itscj.ipsj.or.jp, Barry Leiba Subject: Re: [CDNi] New Liaison Statement, "Response to request for information on URI Signing 2015-11-02" X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jan 2016 06:35:22 -0000 Dear Kevin J. Ma and Francois Le Faucheur, This is to ackowledge receipt of the Liaison Statement from IETF to SC 29/WG 11. Thank you for your cooperation. Shinji Watanabe Secretary, ISO/IEC JTC 1/SC 29 On 2015/12/31 15:39, Liaison Statement Management Tool wrote: > Title: Response to request for information on URI Signing 2015-11-02 > Submission Date: 2015-12-30 > URL of the IETF Web page: https://datatracker.ietf.org/liaison/1450/ > > From: "Kevin J. Ma" > To: Watanabe Shinji > Cc: Barry Leiba ,Ben Campbell ,Content Delivery Networks Interconnection Discussion List ,Alissa Cooper ,Francois Le Faucheur ,Kevin Ma ,Stephan Wenger , > Response Contacts: Kevin Ma ,Francois Le Fauch= eur > Technical Contacts: Ray van Brandenburg > Purpose: In response > > Referenced liaison: Liaison Statement to IETF on URI signing (https://d= atatracker.ietf.org/liaison/1434/) > > Body: The IETF CDNI working group would like to acknowledge our receipt= of the MPEG experts liaison letter and careful consideration during the = 94th IETF meeting. > > Having reviewed the Online Multimedia Authorization Protocol Version 1.= 0 (OMAPv1) specification [2012_09_28_OATC-OMAP_1-0], we understand the pr= oposed scope of usage for CDNI URI Signing to be the only as the Access T= oken, as returned by the authorization server in step (E) of sections 2.3= and 2.4 of the OMAPv1 specification, to be use solely for authorizing re= quests to the resource server (i.e., the CDN), as described in steps (F) = and (G) of sections 2.3 and 2.4 of the OMAPv1 specification. We agree th= at this is an exemplary use case for CDNI URI Signing with the Path Patte= rn Information Element. > =20 > At the 93rd IETF, the CDNI working group decided to remove text related= to signing of segmented content URIs from the CDNI URI Signing draft [dr= aft-ietf-cdni-uri-signing] in response to an IPR disclosure made after th= e 92nd IETF [minutes-93-cdni]. The removed sections are currently documen= ted in a separate draft [draft-brandenburg-cdni-uri-signing-for-has], as = an extension to the CDNI URI signing draft [draft-ietf-cdni-uri-signing].= It should be noted that at this point, that document is regarded as an i= ndividual submission and the CDNI working group has not made a decision r= egarding its future status. At the 94th IETF, it was agreed that the Path= Pattern Information element was not covered by the IPR disclosure and wo= uld be a useful feature for a number of URI Signing use cases, including = segmented content [minutes-94-cdni]. Path Pattern support will be reinsta= ted in a future revision of the CDNI URI signing draft [draft-ietf-cdni-u= ri-signing]. > =20 > With respect to long-lived tokens, as mentioned in the Security Conside= rations section (9) of the CDNI URI Signing draft, increasing the token v= alidity period increases the potential for replay attacks, including DoS = attacks; however, nothing in the protocol prevents the use of long-lived = tokens. > > With respect to CDNs refreshing tokens, the CDNI working group discusse= d mechanisms for signaling token refresh between CDNs and felt that the r= equired additional complexity of such a mechanism outweighed the cost of = regenerating the tokens. Note: Signaling between CDNs and clients is out-= of-scope for CDNI. As mentioned above, chained token support was removed = from the CDNI URI Signing draft [draft-ietf-cdni-uri-signing] and there i= s no plan to reinstate it in the CDNI URI signing draft [draft-ietf-cdni-= uri-signing] due to IPR issues. As such, the topic of token regeneration = is limited to the extension draft [draft-brandenburg-cdni-uri-signing-for= -has]. > > With respect to name collisions, the current version of the CDNI URI Si= gning draft [draft-ietf-cdni-uri-signing] only supports query-string-base= d conveyance of the token. The metadata element "package-attribute" was = introduced to allow content service providers (CSPs) to select any query = string parameter name they wanted, assuming that CSPs would be in the bes= t position to select a low-collision-probability name; URISigningPackage = is only the default name. > =20 > With respect to consecutive tokens, the CDNI URI Signing mechanism was = designed to be stateless, so that consecutive tokens can be retrieved fro= m different delivery nodes. As such, there is no relationship between con= secutive tokens and token invalidation is solely based on the Expiry Time= information element. > > The CDNI working group appreciates the MPEG experts' thoughtful input a= nd looks forward to continued collaboration with MPEG experts on URI Sign= ing. > =20 > Our next meeting: IETF 95, April 3-8 2016, Buenos Aires, Argentina > > [2012_09_28_OATC-OMAP_1-0] http://www.oatc.us/Portals/_default/Knowledg= ebase/1/2012_09_28_OATC-OMAP_1-0.pdf > [draft-ietf-cdni-uri-signing] https://datatracker.ietf.org/doc/draft-ie= tf-cdni-uri-signing/ > [draft-brandenburg-cdni-uri-signing-for-has] https://datatracker.ietf.o= rg/doc/draft-brandenburg-cdni-uri-signing-for-has/ > [minutes-93-cdni] https://www.ietf.org/proceedings/93/minutes/minutes-9= 3-cdni > [minutes-94-cdni] https://www.ietf.org/proceedings/94/minutes/minutes-9= 4-cdni > > > Attachments: > > No document has been attached > From nobody Tue Jan 5 00:18:58 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BC421AC42E; Tue, 5 Jan 2016 00:17:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Meeting Session Request Tool\"" To: X-Test-IDTracker: no X-IETF-IDTracker: 6.11.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160105081732.3182.23331.idtracker@ietfa.amsl.com> Date: Tue, 05 Jan 2016 00:17:32 -0800 Archived-At: X-Mailman-Approved-At: Tue, 05 Jan 2016 00:18:57 -0800 Cc: cdni@ietf.org, barryleiba@computer.org, cdni-chairs@ietf.org Subject: [CDNi] cdni - New Meeting Session Request for IETF 95 X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jan 2016 08:17:32 -0000 A new meeting session request has just been submitted by Francois Le Faucheur, a Chair of the cdni working group. --------------------------------------------------------- Working Group Name: Content Delivery Networks Interconnection Area Name: Applications and Real-Time Area Session Requester: Francois Le Faucheur Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 60 Conflicts to Avoid: First Priority: storm tsvwg tcpm ppsp nfsv4 mptcp ippm alto httpbis Second Priority: appsawg rmcat Special Requests: WebEx is not needed if Meetecho is provided --------------------------------------------------------- From nobody Tue Jan 5 02:14:30 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 931171B2A75 for ; Tue, 5 Jan 2016 02:14:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KYUCMVjle8_i for ; Tue, 5 Jan 2016 02:14:26 -0800 (PST) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.62]) by ietfa.amsl.com (Postfix) with ESMTP id 3B15A1B2A6D for ; Tue, 5 Jan 2016 02:14:25 -0800 (PST) Received: from host4.velocix.com ([81.134.152.4] helo=[172.18.0.212]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1aGOd9-0009xe-3o for cdni@ietf.org; Tue, 05 Jan 2016 10:14:24 +0000 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: <20160104185630.13379.42236.idtracker@ietfa.amsl.com> Date: Tue, 5 Jan 2016 10:14:19 +0000 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20160104185630.13379.42236.idtracker@ietfa.amsl.com> To: Content Delivery Networks Interconnection Discussion List X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-redirection-14.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jan 2016 10:14:28 -0000 Colleagues, This version uses Jon=E2=80=99s text covering DNSSEC etc and fixes a = typo Rob spotted. Ben > On 4 Jan 2016, at 18:56, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Content Delivery Networks = Interconnection Working Group of the IETF. >=20 > Title : Request Routing Redirection Interface for CDN = Interconnection > Authors : Ben Niven-Jenkins > Ray van Brandenburg > Filename : draft-ietf-cdni-redirection-14.txt > Pages : 30 > Date : 2016-01-04 >=20 > Abstract: > The Request Routing Interface comprises of (1) the asynchronous > advertisement of footprint and capabilities by a downstream Content > Delivery Network (CDN) that allows an upstream CDN to decide whether > to redirect particular user requests to that downstream CDN; and (2) > the synchronous operation of an upstream CDN requesting whether a > downstream CDN is prepared to accept a user request and of a > downstream CDN responding with how to actually redirect the user > request. This document describes an interface for the latter part, > i.e. the CDNI Request Routing Redirection interface. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-redirection-14 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection-14 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Wed Jan 6 01:08:11 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 000C91A8BC3; Tue, 5 Jan 2016 19:40:20 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "Ben Campbell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.11.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160106034020.10393.24093.idtracker@ietfa.amsl.com> Date: Tue, 05 Jan 2016 19:40:20 -0800 Archived-At: X-Mailman-Approved-At: Wed, 06 Jan 2016 01:08:09 -0800 Cc: cdni@ietf.org, draft-ietf-cdni-control-triggers@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-control-triggers-11: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2016 03:40:21 -0000 Ben Campbell has entered the following ballot position for draft-ietf-cdni-control-triggers-11: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-control-triggers/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- I've got two concerns that I think leave ambiguity around important normative requirements. Hopefully they will be easy to resolve: - 4.7, 2nd bullet under handling of offline surrogates: I assume I am missing something here. How does a surrogate know that the situation exists in the first place? How would a surrogate know about invalidate commands that happened while it was offline? - 8.1, 4th paragraph from the end: The language here is ambiguous about whether the use of TLS is _always_ required, or just when "such protection is required." From context, I assume the latter to be the case. But "To that end..." can be interpreted to mean "In that case, one MUST do X", or to mean "In order to make that possible when needed, one MUST _always_ do X" I propose the following: OLD: In an environment where any such protection is required, mutually authenticated encrypted transport MUST be used to ensure confidentiality of the CI/T information. To that end, TLS MUST be used by CI/T, including authentication of the remote end. NEW: In an environment where any such protection is required, mutually authenticated and encrypted TLS MUST be used to ensure confidentiality of the CI/T information. END. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - 3, paragraph 5: SHOULD should not be equated with "optional to implement". MAY means that. SHOULD is intended to be stronger. - 4.5, 2nd paragraph, 1st sentence: This is pretty convoluted. I suggest reformulating without the past tense "MUST". For example, "The dCNI MUST report the expiration times if..." -4.6: "If CDNs B and C delegate delivery of CDN A’s content to each other" Is this a reasonable configuration? It seems like they might already have a delegation loop before the trigger interface got involved. Also, the first sentence is a fragment. = 4.8, first paragraph: I suggest s/transform/"similarly transform" - 5.1.3, staleresourcetime, mandatory: Doesn't this effectively mean the value must be the same across all collections? - 5.2.1, content.ccid: Seems like the reference to [I-D.ietf-cdni-metadata] should be normative. - 6.2.5: it looks like the dCDN is sending the request to itself. Is that the intent? - 8.1, last paragraph: "In this case, the dCDN MUST allow each uCDN from which the content could have been acquired to act upon that content using CI/T Commands." This seems like a place where local policy might reasonably vary. Is a MUST really appropriate? From nobody Wed Jan 6 07:30:09 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 696B81A875C; Wed, 6 Jan 2016 07:30:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t25h1xGD4122; Wed, 6 Jan 2016 07:30:07 -0800 (PST) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02BA01A875E; Wed, 6 Jan 2016 07:30:06 -0800 (PST) Received: from [10.0.1.10] (cpe-70-119-203-4.tx.res.rr.com [70.119.203.4]) (authenticated bits=0) by nostrum.com (8.15.2/8.14.9) with ESMTPSA id u06FTugk024275 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Wed, 6 Jan 2016 09:29:57 -0600 (CST) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-70-119-203-4.tx.res.rr.com [70.119.203.4] claimed to be [10.0.1.10] From: "Ben Campbell" To: "Kathleen Moriarty" Date: Wed, 06 Jan 2016 09:29:56 -0600 Message-ID: <5A266A6A-A477-4A47-98E6-260FC6CC3F1B@nostrum.com> In-Reply-To: References: <20160106034020.10393.24093.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.3r5187) Archived-At: Cc: "cdni@ietf.org" , The IESG , draft-ietf-cdni-control-triggers@ietf.org, cdni-chairs@ietf.org Subject: Re: [CDNi] Ben Campbell's Discuss on draft-ietf-cdni-control-triggers-11: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2016 15:30:08 -0000 On 6 Jan 2016, at 9:14, Kathleen Moriarty wrote: > - 8.1, 4th paragraph from the end: >> The language here is ambiguous about whether the use of TLS is >> _always_ >> required, or just when "such protection is required." From context, I >> assume the latter to be the case. But "To that end..." can be >> interpreted >> to mean "In that case, one MUST do X", or to mean "In order to make >> that >> possible when needed, one MUST _always_ do X" >> >> I propose the following: >> OLD: >> In an environment where any such protection is required, mutually >> authenticated encrypted transport MUST be used to ensure >> confidentiality of the CI/T information. To that end, TLS MUST be >> used by CI/T, including authentication of the remote end. >> NEW: >> In an environment where any such protection is required, mutually >> authenticated and encrypted TLS MUST be used to ensure >> confidentiality of the CI/T information. >> END. >> >> > > > I'm interested to see the response on this discuss. From reading the > Security Considerations, I thought that TLS would be required for the > commercial confidentiality concerns cited in 8.3 and to provide the > security properties cited in 8.1. > > I agree with Ben that the language goes back and forth a bit as to > whether or not it is required (I'd prefer to see it required. > However, there is enough language to suggest that it is just required > when specific conditions are met. If there is a good argument to keep > it as-is, Ben's suggested language helps clear up any confusion, but > I'd like to make sure that there is a good reason to not have this be > a MUST use TLS. > > I'm going to just tack this onto Ben's discuss as I should be on > maternity leave soon and don't want to hold up the draft while I am > out if this isn't resolved quickly. For the record, my proposed text assumed the intent was for a conditional "MUST use TLS". If the answer turned out to be "always MUST", I would certainly not object. Ben. From nobody Wed Jan 6 11:26:23 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F0C81A0141; Wed, 6 Jan 2016 11:26:22 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Alissa Cooper" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.11.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160106192622.3241.46321.idtracker@ietfa.amsl.com> Date: Wed, 06 Jan 2016 11:26:22 -0800 Archived-At: Cc: cdni@ietf.org, draft-ietf-cdni-control-triggers@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Alissa Cooper's Discuss on draft-ietf-cdni-control-triggers-11: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2016 19:26:22 -0000 Alissa Cooper has entered the following ballot position for draft-ietf-cdni-control-triggers-11: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-control-triggers/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- = Section 5.1.8 = Name: staleresourcetime Description: The length of time for which the dCDN guarantees to keep a completed Trigger Status Resource. After this time, the dCDN SHOULD delete the Trigger Status Resource and all references to it from collections. I'm not clear on why this is a SHOULD rather than a MUST. If the dCDN tells the uCDN it's going to delete resources after a specified period of time, why shouldn't it follow through on that? For a uCDN that relies on resources not sticking around after a specified period of time (because of security or competitive concerns), doesn't this need to be a firm requirement so that the uCDN doesn't have to issue purge requests to be sure that its resources get deleted? = Section 8.1 = I had the same confusion as Ben and the secdir reviewer concerning whether TLS is always required to use or not. If there are cases in which TLS is not mandatory to use, then I think this should be phrased as a SHOULD with the exceptions clearly enumerated. For example, it's not clear to me whether the only exception is environments where equivalent protections are afforded by a different protocol, or if just being within a single administrative domain is considered protection enough (not sure I agree with the latter). ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- = General = I think the examples in the document should use https URIs. = Section 3 = "Trigger Status Resources belonging to a uCDN MUST NOT be visible to any other CDN. The dCDN could, for example, achieve this by offering different collection URLs to each uCDN, and/or by filtering the response based on the uCDN with which the HTTP client is associated." Using different URLs for different uCDNs is not sufficient for this, correct? I think the "and/or" needs to be just "and". = Section 4.1 = I don't understand the difference between when status is used in quotes and not in quotes, e.g., 'Once processing has started the "status" MUST be "active"' vs. 'once the CI/T Command is complete, the status MUST be set to "complete" or "failed"'. = Section 4.3 = s/requires no processing in the dCDN, its status MUST NOT be changed/requires no processing in the dCDN. Its status MUST NOT be changed/ = Section 5.1.1 = "Name: cdn-path Description: The CDN Provider Identifiers of CDNs that have already accepted the CI/T Command." I find the phrase "already accepted" somewhat confusing, since a uCDN is supposed to insert its own on ID here, and in that sense hasn't "accepted" anything, but is making the request itself. = Section 8.3 = s/parties other party than the authorised dCDN/parties other than the authorised dCDN/ From nobody Thu Jan 7 05:54:18 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 316F81A8A1B; Thu, 7 Jan 2016 05:54:18 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.11.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160107135418.28288.79368.idtracker@ietfa.amsl.com> Date: Thu, 07 Jan 2016 05:54:18 -0800 Archived-At: Cc: cdni@ietf.org, draft-ietf-cdni-control-triggers@ietf.org, cdni-chairs@ietf.org Subject: [CDNi] Stephen Farrell's No Objection on draft-ietf-cdni-control-triggers-11: (with COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2016 13:54:18 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-cdni-control-triggers-11: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cdni-control-triggers/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - I agree with the discuss points about use of TLS. - I think it'd be better if you clarified that by "mutually authenticated" you mean TLS client auth and TLS server auth and not e.g. HTTP BASIC plus TLS server auth. - I think a statement to the effect that the mechanisms for access control are dCDN-specific (for now at least) might be a good addition. I'm guessing that someone might want to use some form of OAuth later on (or is doing so now) so part(s) of that might be a thing to standardise later. From nobody Wed Jan 13 15:16:59 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D7831A8892 for ; Wed, 13 Jan 2016 15:16:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VtvLBZAAKLq2 for ; Wed, 13 Jan 2016 15:16:53 -0800 (PST) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 227011A889C for ; Wed, 13 Jan 2016 15:16:53 -0800 (PST) X-AuditID: c618062d-f79d16d000001b1c-86-5696d8bb821e Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 55.C2.06940.BB8D6965; Thu, 14 Jan 2016 00:07:40 +0100 (CET) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0248.002; Wed, 13 Jan 2016 18:16:51 -0500 From: Kevin Ma J To: Ben Niven-Jenkins , "Content Delivery Networks Interconnection Discussion List" Thread-Topic: Shepherd Review of draft-ietf-cdni-redirection-14.txt Thread-Index: AdFOWGINkZdovw7hQLSjneWiUZ2KZA== Date: Wed, 13 Jan 2016 23:16:51 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrCLMWRmVeSWpSXmKPExsUyuXSPn+6eG9PCDI5c47JYcG4Cm8XT2X9Y HZg8liz5yeTx8/okxgCmKC6blNSczLLUIn27BK6MufMuMRbci6m4vOUacwPjmqguRk4OCQET iTl9F5khbDGJC/fWs4HYQgJHGCUaX3pB2MsZJU4vkQax2QS0JB5//csEYosI1EnsWnsArFdY wE7ixNf5LBBxZ4n3P09B2XoSE3Z9BJvJIqAq8bdnEyOIzSvgK3H+2D+wOCPQ3u+n1oDNZBYQ l7j1ZD4TxD0CEkv2nIe6TVTi5eN/rBC2osS+/unsXYwcQPWaEut36UO0KkpM6X7IDjFeUOLk zCcsExiFZyGZOguhYxaSjllIOhYwsqxi5CgtLsjJTTcy2MQIDOtjEmy6OxjvT/c8xCjAwajE w7th79QwIdbEsuLK3EOMEhzMSiK8HJenhQnxpiRWVqUW5ccXleakFh9ilOZgURLnFZRuDBMS SE8sSc1OTS1ILYLJMnFwSjUwMs2I1rXsZnKf9kj0HFdSb8vUIreL+woOeiUe/8P3PqUvK7HB 6M29612zW2Ze2SRX8vvZxO1zfznui38c3qvl9mNlzf/dRrvXvvfbskHCo6DMJ8r7c/ANmUtT GzSK+CafXPXmhy/XzWeFq+y8Ts13OTL7z7cPT4/vLLlbqsNt9LycJ8/sXgj3VyWW4oxEQy3m ouJEAKlIF5BnAgAA Archived-At: Subject: [CDNi] Shepherd Review of draft-ietf-cdni-redirection-14.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2016 23:16:58 -0000 SGkgQmVuL1JheSwNCg0KICAoYXMgY2hhaXIpIEkndmUgY29tcGxldGVkIG15IHNoZXBoZXJkJ3Mg cmV2aWV3IG9mIHRoZSBkb2N1bWVudCBhbmQgaGF2ZSBlbmNsb3NlZCBzb21lIHF1ZXN0aW9ucyBj b21tZW50cyBiZWxvdy4gIE1vc3QgYXJlIG5pdHMsIGJ1dCB0aGUgSUFOQSBDb25zaWRlcmF0aW9u cyBhbmQgTm9ybWF0aXZlL0luZm9ybWF0aXZlIFJlZmVyZW5jZSBjb21tZW50cyBhdCB0aGUgZW5k IG5lZWQgdG8gYmUgYWRkcmVzc2VkLg0KDQp0aGFueCENCg0KLS0gIEtldmluIEouIE1hDQoNCg0K LSBnZW5lcmFsOiB0aGVyZSBpcyBpbmNvbnNpc3RlbmN5IGluIHRoZSB1c2Ugb2YgIlJlZGlyZWN0 aW9uIEludGVyZmFjZSIgYW5kICJSZWRpcmVjdGlvbiBpbnRlcmZhY2UiOyBpdCBzZWVtcyB0byBi ZSBhIHByb2JsZW0gaW4gYWxsIHRoZSBkb2NzLCBidXQgbG9nZ2luZyBtb3N0bHkgdXNlcyB0aGUg bG93ZXJjYXNlICJpIg0KDQotIGdlbmVyYWw6ICJlLmcuICIgLT4gImUuZy4sICIsICJpLmUuICIg LT4gImkuZS4sICIsIGFuZCAiRm9yIGV4YW1wbGUgIiAtPiAiRm9yIGV4YW1wbGUsICINCg0KLSBz ZWN0aW9uIDM6IFRoZSBidWxsZXRlZCBpdGVtcyBhcmUgbm90IGNvbXBsZXRlIHNlbnRlbmNlcywg cGVyaGFwczoNCg0KICAgICAiVGhlIGZpbmFsIFN1cnJvZ2F0ZSwgd2hpY2ggbWF5IGJlIGluIHRo ZSBkQ0ROIHRoYXQgcmV0dXJuZWQgdGhlIFJJDQogICAgICByZXNwb25zZSB0byB0aGUgdUNETiwg b3IgYW5vdGhlciBDRE4gKGlmIHRoZSBkQ0ROIGRlbGVnYXRlcyB0aGUNCiAgICAgIGRlbGl2ZXJ5 IHRvIGFub3RoZXIgQ0ROKS4iIC0+DQogICAgICJUaGUgZmluYWwgU3Vycm9nYXRlLCB3aGljaCBt YXkgYmUgaW4gdGhlIGRDRE4gdGhhdCByZXR1cm5lZCB0aGUgUkkNCiAgICAgIHJlc3BvbnNlIHRv IHRoZSB1Q0ROLCBvciBhbm90aGVyIENETiAoaWYgdGhlIGRDRE4gZGVsZWdhdGVzIHRoZQ0KICAg ICAgZGVsaXZlcnkgdG8gYW5vdGhlciBDRE4pOyBvciINCg0KLSBzZWN0aW9uIDM6IGNvbW1hIGFm dGVyICJUaGVyZWZvcmUiOg0KDQogICJUaGVyZWZvcmUgdGhlIHNjb3BlIG9mIHRoaXMgZG9jdW1l bnQgaXMgbGltaXRlZCB0byBSZWN1cnNpdmUNCiAgIFJlcXVlc3QgUmVkaXJlY3Rpb24uIiAtPg0K ICAiVGhlcmVmb3JlLCB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudCBpcyBsaW1pdGVkIHRvIFJl Y3Vyc2l2ZQ0KICAgUmVxdWVzdCBSZWRpcmVjdGlvbi4iDQoNCi0gc2VjdGlvbiAzOiB0aGUgY29s b24gc2hvdWxkIGJlIGEgc2VtaS1jb2xvbjoNCg0KICAiZG9tYWluIGluIHRoZSBVUkwgZGVyZWZl cmVuY2VkIHRvIHJlYWNoIHRoZSB1Q0ROOiB3aXRob3V0IG9wZXJhdGlvbmFsDQogICBwcmVjYXV0 aW9ucywgYW5kIGluIHRoZSBhYnNlbmNlIG9mIEROU1NFQywgdGhpcyBjYW4gbWFrZSBhIGxlZ2l0 aW1hdGUNCiAgIHJlZGlyZWN0aW9uIGxvb2sgbGlrZSBhIEROUy1iYXNlZCBhdHRhY2siIC0+DQog ICJkb21haW4gaW4gdGhlIFVSTCBkZXJlZmVyZW5jZWQgdG8gcmVhY2ggdGhlIHVDRE47IHdpdGhv dXQgb3BlcmF0aW9uYWwNCiAgIHByZWNhdXRpb25zLCBhbmQgaW4gdGhlIGFic2VuY2Ugb2YgRE5T U0VDLCB0aGlzIGNhbiBtYWtlIGEgbGVnaXRpbWF0ZQ0KICAgcmVkaXJlY3Rpb24gbG9vayBsaWtl IGEgRE5TLWJhc2VkIGF0dGFjayINCg0KLSBzZWN0aW9uIDQ6IFRob3VnaCBpdCBtZW50aW9ucyBi ZWluZyBleHRlbnNpYmxlLCB3ZSBkbyBub3QgZ2l2ZSBhbnkgZ3VpZGFuY2Ugb24gaG93IHRvIGV4 dGVuZCB0aGUgUkkuICBTaG91bGQgd2U/ICBPciBzaG91bGQgd2UganVzdCBsZWF2ZSBpdD8NCg0K ICAiRmluYWxseSwgdGhlIFJJIGlzIGVhc2lseSBleHRlbmRhYmxlIHRvIHN1cHBvcnQgb3RoZXIg VXNlciBBZ2VudA0KICAgcmVxdWVzdCByZWRpcmVjdGlvbiBtZXRob2RzIChlLmcuICBSVE1QIDMw MiByZWRpcmVjdGlvbikuIg0KDQogIE9uZSB0aG91Z2h0IGlzIHRoYXQgdGhlIHdheSB0byBleHRl bmQgdGhpcyB3b3VsZCBiZTogd3JpdGUgYSBuZXcgUkZDLCB3aXRoIG5ldyBSSSBKU09OIG9iamVj dHMsIGFuZCByZWdpc3RlcmluZyBhIG5ldyByZWRpcmVjdGlvbiBtb2RlIGNhcGFiaWxpdHk/DQoN Ci0gc2VjdGlvbiA0LjE6IHN1Z2dlc3RlZCBlZGl0Og0KDQogICAgICJUaGUgc2NvcGUgb2YgdGhl IHJlc3BvbnNlIChpZiBpdCBpcyBjYWNoZWFibGUpIHNpZ25hbGVkIHRoZSBIVFRQDQogICAgICBy ZXNwb25zZSBib2R5IG9mIHRoZSBSSSByZXNwb25zZS4gIEZvciBleGFtcGxlIHdoZXRoZXIgdGhl DQogICAgICByZXNwb25zZSBhcHBsaWVzIHRvIGEgd2lkZXIgcmFuZ2Ugb2YgSVAgYWRkcmVzc2Vz IHRoYW4gd2hhdCB3YXMNCiAgICAgIGluY2x1ZGVkIGluIHRoZSBSSSByZXF1ZXN0LiIgLT4NCiAg ICAgIlRoZSBzY29wZSBvZiBhIGNhY2hlYWJsZSByZXNwb25zZSBzaWduYWxlZCB2aWEgdGhlIEhU VFANCiAgICAgIHJlc3BvbnNlIGJvZHkgb2YgdGhlIFJJIHJlc3BvbnNlLCBmb3IgZXhhbXBsZSwg d2hldGhlciB0aGUNCiAgICAgIHJlc3BvbnNlIGFwcGxpZXMgdG8gYSB3aWRlciByYW5nZSBvZiBJ UCBhZGRyZXNzZXMgdGhhbiB3aGF0IHdhcw0KICAgICAgaW5jbHVkZWQgaW4gdGhlIFJJIHJlcXVl c3QuIg0KDQotIHNlY3Rpb24gNC4zOiB0aGUgcmVmZXJlbmNlIHRvIFJGQzczMzYgKEZyYW1ld29y aykgc2hvdWxkIGJlIHRvIFJGQzc3MzYgKE1lZGlhIFR5cGUpDQoNCi0gc2VjdGlvbiA0LjQuMjog U2hvdWxkIHRoaXMgYWxzbyBzdGF0ZSB0aGF0IHRoZSBkbnMgZGljdGlvbmFyeSBNVVNUIGNvbnRh aW4gdGhlIHJjb2RlIGFuZCBuYW1lIGtleXM/DQoNCiAgIklmIGEgZG5zIGRpY3Rpb25hcnkgaXMg aW5jbHVkZWQgaW4gdGhlIFJJDQogICByZXNwb25zZSwgaXQgTVVTVCBpbmNsdWRlIGF0IGxlYXN0 IG9uZSBvZiB0aGUgZm9sbG93aW5nIGtleXM6IGEsDQogICBhYWFhLCBjbmFtZS4iDQoNCi0gc2Vj dGlvbiA0LjUuMjogbWlzc2luZyAiYW5kIjoNCg0KICAiaXQgTVVTVCBpbmNsdWRlIGF0IGxlYXN0 IHRoZSBmb2xsb3dpbmcga2V5czogc2MtDQogICBzdGF0dXMsIHNjLXZlcnNpb24sIHNjLXJlYXNv biwgY3MtdXJpLCBzYy0obG9jYXRpb24pLiIgLT4NCiAgIml0IE1VU1QgaW5jbHVkZSBhdCBsZWFz dCB0aGUgZm9sbG93aW5nIGtleXM6IHNjLQ0KICAgc3RhdHVzLCBzYy12ZXJzaW9uLCBzYy1yZWFz b24sIGNzLXVyaSwgYW5kIHNjLShsb2NhdGlvbikuIg0KDQotIHNlY3Rpb24gNC44OiB0aGlzIGlt cGxpZXMgdGhhdCB0aGUgQ0ROIGtub3dzIHRoZSBkQ0ROJ3MgcHJvdmlkZXIgSUQ/ICBJcyB0aGF0 IHR5cGljYWxseSB0cnVlPyAgV291bGQgaXQgYmUgc2ltcGxlciB0byBoYXZlIENETnMgY2hlY2sg anVzdCB0aGVpciBvd24gcHJvdmlkZXIgSUQ/ICBJIHdvdWxkIHN1Z2dlc3QgcmVtb3ZpbmcgdGhp cyBzZW50ZW5jZT8NCg0KICAiVHJhbnNpdCBDRE5zIE1VU1QgY2hlY2sgdGhlIGNkbi0NCiAgIHBh dGggYW5kIG5vdCBjYXNjYWRlIHRoZSBSSSByZXF1ZXN0IHRvIGRDRE5zIHRoYXQgYXJlIGFscmVh ZHkgbGlzdGVkDQogICBpbiBjZG4tcGF0aC4iDQoNCi0gc2VjdGlvbiA0Ljg6IHN1Z2dlc3RlZCBl ZGl0Og0KDQogICJBcyB3ZWxsIGFzIGxvb3BzIHdpdGhpbiB0aGUgUkkgaXRzZWxmLCIgLT4NCiAg IkJlc2lkZSBsb29wcyB3aXRoaW4gdGhlIFJJIGl0c2VsZiwiDQoNCi0gc2VjdGlvbiA0Ljg6IG1p c3NpbmcgY29tbWFzOg0KDQogICJmb3IgZXhhbXBsZSBpZiB0aGUgSVANCiAgIGFkZHJlc3MoZXMp IG9yIFVSSShzKSByZXR1cm5lZCBpbiBSSSByZXNwb25zZXMgZG8gbm90IHJlc29sdmUNCiAgIGRp cmVjdGx5IHRvIGEgc3Vycm9nYXRlIGluIHRoZSBmaW5hbCBkQ0ROIHRoZXJlIGlzIHRoZSBwb3Nz aWJpbGl0eSIgLT4NCiAgImZvciBleGFtcGxlLCBpZiB0aGUgSVANCiAgIGFkZHJlc3MoZXMpIG9y IFVSSShzKSByZXR1cm5lZCBpbiBSSSByZXNwb25zZXMgZG8gbm90IHJlc29sdmUNCiAgIGRpcmVj dGx5IHRvIGEgc3Vycm9nYXRlIGluIHRoZSBmaW5hbCBkQ0ROLCB0aGVyZSBpcyB0aGUgcG9zc2li aWxpdHkiDQoNCi0gc2VjdGlvbiA0Ljg6IHR5cG86ICJjb250aW51b3NseSIgLT4gImNvbnRpbnVv dXNseSINCg0KLSBzZWN0aW9uIDUuMTogYnVsbGV0IHB1bmN0dWF0aW9uOg0KDQogICAgICJ0aGUg ZENETiBhbmQgdUNETiB0byBhdXRob3JpemUgZWFjaCBvdGhlciAodG8gZW5zdXJlIHRoZXkgYXJl DQogICAgICB0cmFuc21pdHRpbmcvcmVjZWl2aW5nIENETkkgUmVkaXJlY3Rpb24gbWVzc2FnZXMg dG8vZnJvbSBhbg0KICAgICAgYXV0aG9yaXplZCBDRE4pIiAtPg0KICAgICAidGhlIGRDRE4gYW5k IHVDRE4gdG8gYXV0aG9yaXplIGVhY2ggb3RoZXIgKHRvIGVuc3VyZSB0aGV5IGFyZQ0KICAgICAg dHJhbnNtaXR0aW5nL3JlY2VpdmluZyBDRE5JIFJlZGlyZWN0aW9uIG1lc3NhZ2VzIHRvL2Zyb20g YW4NCiAgICAgIGF1dGhvcml6ZWQgQ0ROKTsiDQoNCiAgICAgIkNETkkgUmVkaXJlY3Rpb24gaW50 ZXJmYWNlIG1lc3NhZ2VzIHRvIGJlIHRyYW5zbWl0dGVkIHdpdGgNCiAgICAgIGNvbmZpZGVudGlh bGl0eS4iIC0+DQogICAgICJDRE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNzYWdlcyB0byBi ZSB0cmFuc21pdHRlZCB3aXRoDQogICAgICBjb25maWRlbnRpYWxpdHk7IGFuZCINCg0KLSBzZWN0 aW9uIDUuMjogdGhlIHJlc3Qgb2YgdGhlIGRvYyB1c2VzICJhbiBSSSIsIGJ1dCB0aGlzIHNlY3Rp b24gdXNlcyAiYSBSSSI7IHNob3VsZCBtYWtlIGl0IGNvbnNpc3RlbnQuDQoNCi0gc2VjdGlvbiA1 LjI6IHRoZSBmaXJzdCAxMSB3b3JkcyBvZiBzZWN0aW9uIDUuMiBhcmUgaWRlbnRpY2FsIHRvIHRo ZSBmaXJzdCAxMSB3b3JkcyBvZiBzZWN0aW9uIDU7IG1heWJlIGp1c3QgcmVtb3ZlIHRoZW0gZnJv bSBzZWN0aW9uIDUuMj8NCg0KICAiSW5mb3JtYXRpb24gcGFzc2VkIG92ZXIgdGhlIFJJIGNvdWxk IGJlIGNvbnNpZGVyZWQgcGVyc29uYWwgb3INCiAgIHNlbnNpdGl2ZS4gIEluIHBhcnRpY3VsYXIs IHBhcnRzIiAtPg0KICAiUGFydHMiDQoNCi0gc2VjdGlvbiA1LjI6IHN1Z2dlc3RlZCBlZGl0Og0K DQogICJkbyBvYnRhaW4gaW5mb3JtYXRpb24gcmVnYXJkaW5nIEVuZCBVc2VyIElQIGFkZHJlc3Nl cw0KICAgYW5kIHJlcXVlc3RlZCBVUklzIHRoYXQgdGhleSB3b3VsZG4ndCBoYWQgdGhlIFJJIG5v dCBiZWVuIHVzZWQuIiAtPg0KICAiZG8gb2J0YWluIGluZm9ybWF0aW9uIHJlZ2FyZGluZyBFbmQg VXNlciBJUCBhZGRyZXNzZXMNCiAgIGFuZCByZXF1ZXN0ZWQgVVJJcyB0aGF0IHRoZXkgd291bGRu J3QgaGF2ZSwgaGFkIHRoZSBSSSBub3QgYmVlbiB1c2VkLiINCg0KLSBzZWN0aW9uIDYuMjogc2hv dWxkIHRoaXMgYmUgYSAic3VicmVnaXN0cnkgd2l0aGluIHRoZSAiQ29udGVudCBEZWxpdmVyeSBO ZXR3b3JrIEludGVyY29ubmVjdGlvbiAoQ0ROSSkgUGFyYW1ldGVycyIgcmVnaXN0cnkuIj8NCg0K LSBzZWN0aW9uIDYuMjogZG8gd2Ugd2FudCB0byBzcGVjaWZ5IHRoZSBSRkM1MjI2IHBvbGljeT8g IGlzIGl0IEV4cGVydA0KICBSZXZpZXc/ICBub3QgU3BlY2lmaWNhdGlvbiByZXF1aXJlZD8NCg0K ICAgICAiU3BlY2lmaWNhdGlvbjogQW4gb3B0aW9uYWwgcmVmZXJlbmNlIHRvIGEgc3BlY2lmaWNh dGlvbiB0aGF0DQogICAgICBkZWZpbmVzIGluIHRoZSBlcnJvciBjb2RlIGluIG1vcmUgZGV0YWls LiINCg0KLSBzZWN0aW9uIDg6IHRoZXJlJ3MgYW4gZXh0cmEgc3BhY2UgaW4gbXkgbmFtZTogIktl dmluIEouICBNYSIgLT4gIktldmluIEouIE1hIg0KDQotIHNlY3Rpb24gOS4xOiBUaGVyZSBpcyBh IG5vcm1hdGl2ZSByZWZlcmVuY2UgdG8gdGhlIGluZm9ybWF0aW9uYWwgRnJhbWV3b3JrIGRyYWZ0 LiAgRG9lcyB0aGlzIG5lZWQgdG8gYmUgbm9ybWF0aXZlPyAgSWYgc28sIHdoeT8gIE5vdGU6IEl0 IGlzIGluZm9ybWF0aXZlIGluIHRoZSBvdGhlciBpbnRlcmZhY2Ugc3BlY2lmaWNhdGlvbnMuDQoN Ci0gc2VjdGlvbiA5LjI6IHRoZSAobWlzc2luZykgcmVmZXJlbmNlIHRvIFJGQzc3MzYgc2hvdWxk IGJlIGluZm9ybWF0aXZlDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTog Q0ROaSBbbWFpbHRvOmNkbmktYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEJlbiBOaXZl bi1KZW5raW5zDQo+IFNlbnQ6IFR1ZXNkYXksIEphbnVhcnkgMDUsIDIwMTYgNToxNCBBTQ0KPiBU bzogQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrcyBJbnRlcmNvbm5lY3Rpb24gRGlzY3Vzc2lvbiBM aXN0DQo+IFN1YmplY3Q6IFJlOiBbQ0ROaV0gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1jZG5pLXJl ZGlyZWN0aW9uLTE0LnR4dA0KPiANCj4gQ29sbGVhZ3VlcywNCj4gDQo+IFRoaXMgdmVyc2lvbiB1 c2VzIEpvbuKAmXMgdGV4dCBjb3ZlcmluZyBETlNTRUMgZXRjIGFuZCBmaXhlcyBhIHR5cG8gUm9i DQo+IHNwb3R0ZWQuDQo+IA0KPiBCZW4NCj4gDQo+ID4gT24gNCBKYW4gMjAxNiwgYXQgMTg6NTYs IGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyB3cm90ZToNCj4gPg0KPiA+DQo+ID4gQSBOZXcgSW50 ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJhZnRz DQo+IGRpcmVjdG9yaWVzLg0KPiA+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIENv bnRlbnQgRGVsaXZlcnkgTmV0d29ya3MNCj4gSW50ZXJjb25uZWN0aW9uIFdvcmtpbmcgR3JvdXAg b2YgdGhlIElFVEYuDQo+ID4NCj4gPiAgICAgICAgVGl0bGUgICAgICAgICAgIDogUmVxdWVzdCBS b3V0aW5nIFJlZGlyZWN0aW9uIEludGVyZmFjZSBmb3IgQ0RODQo+IEludGVyY29ubmVjdGlvbg0K PiA+ICAgICAgICBBdXRob3JzICAgICAgICAgOiBCZW4gTml2ZW4tSmVua2lucw0KPiA+ICAgICAg ICAgICAgICAgICAgICAgICAgICBSYXkgdmFuIEJyYW5kZW5idXJnDQo+ID4gCUZpbGVuYW1lICAg ICAgICA6IGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xNC50eHQNCj4gPiAJUGFnZXMgICAg ICAgICAgIDogMzANCj4gPiAJRGF0ZSAgICAgICAgICAgIDogMjAxNi0wMS0wNA0KPiA+DQo+ID4g QWJzdHJhY3Q6DQo+ID4gICBUaGUgUmVxdWVzdCBSb3V0aW5nIEludGVyZmFjZSBjb21wcmlzZXMg b2YgKDEpIHRoZSBhc3luY2hyb25vdXMNCj4gPiAgIGFkdmVydGlzZW1lbnQgb2YgZm9vdHByaW50 IGFuZCBjYXBhYmlsaXRpZXMgYnkgYSBkb3duc3RyZWFtIENvbnRlbnQNCj4gPiAgIERlbGl2ZXJ5 IE5ldHdvcmsgKENETikgdGhhdCBhbGxvd3MgYW4gdXBzdHJlYW0gQ0ROIHRvIGRlY2lkZSB3aGV0 aGVyDQo+ID4gICB0byByZWRpcmVjdCBwYXJ0aWN1bGFyIHVzZXIgcmVxdWVzdHMgdG8gdGhhdCBk b3duc3RyZWFtIENETjsgYW5kICgyKQ0KPiA+ICAgdGhlIHN5bmNocm9ub3VzIG9wZXJhdGlvbiBv ZiBhbiB1cHN0cmVhbSBDRE4gcmVxdWVzdGluZyB3aGV0aGVyIGENCj4gPiAgIGRvd25zdHJlYW0g Q0ROIGlzIHByZXBhcmVkIHRvIGFjY2VwdCBhIHVzZXIgcmVxdWVzdCBhbmQgb2YgYQ0KPiA+ICAg ZG93bnN0cmVhbSBDRE4gcmVzcG9uZGluZyB3aXRoIGhvdyB0byBhY3R1YWxseSByZWRpcmVjdCB0 aGUgdXNlcg0KPiA+ICAgcmVxdWVzdC4gIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIGFuIGludGVy ZmFjZSBmb3IgdGhlIGxhdHRlciBwYXJ0LA0KPiA+ICAgaS5lLiB0aGUgQ0ROSSBSZXF1ZXN0IFJv dXRpbmcgUmVkaXJlY3Rpb24gaW50ZXJmYWNlLg0KPiA+DQo+ID4NCj4gPiBUaGUgSUVURiBkYXRh dHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCj4gPiBodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24vDQo+ID4NCj4g PiBUaGVyZSdzIGFsc28gYSBodG1saXplZCB2ZXJzaW9uIGF2YWlsYWJsZSBhdDoNCj4gPiBodHRw czovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTE0DQo+ ID4NCj4gPiBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6 DQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtY2RuaS1y ZWRpcmVjdGlvbi0xNA0KPiA+DQo+ID4NCj4gPiBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtl IGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZg0KPiBzdWJtaXNzaW9uDQo+ID4g dW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29s cy5pZXRmLm9yZy4NCj4gPg0KPiA+IEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUg YnkgYW5vbnltb3VzIEZUUCBhdDoNCj4gPiBmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJh ZnRzLw0KPiA+DQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCj4gPiBDRE5pIG1haWxpbmcgbGlzdA0KPiA+IENETmlAaWV0Zi5vcmcNCj4gPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCj4gDQo+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IENETmkgbWFpbGluZyBsaXN0 DQo+IENETmlAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9jZG5pDQo= From nobody Fri Jan 15 14:04:24 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DB831B330D for ; Fri, 15 Jan 2016 14:04:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OLliIMy8vP6W for ; Fri, 15 Jan 2016 14:04:20 -0800 (PST) Received: from owa.velocix.com (mail-out1.velocix.com [81.134.152.10]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 467DE1B330C for ; Fri, 15 Jan 2016 14:04:20 -0800 (PST) Received: from EXB04CAM.corp.velocix.com ([169.254.1.19]) by EXC00CAM.corp.velocix.com ([172.18.4.40]) with mapi id 14.02.0347.000; Fri, 15 Jan 2016 22:04:17 +0000 From: Rob Murray To: "cdni@ietf.org" Thread-Topic: Use of TLS in CDNI Thread-Index: AQHRT+Ctg3L0+YceR0yg+ZUYAx9Miw== Date: Fri, 15 Jan 2016 22:04:17 +0000 Message-ID: <03FA8BE8-F0CA-48AC-8264-F20DA16B611C@velocix.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.151217 x-originating-ip: [172.18.14.139] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [CDNi] Use of TLS in CDNI X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jan 2016 22:04:23 -0000 SGkgYWxsLA0KDQpTZXZlcmFsIGNvbW1lbnRzIGNhbWUgb3V0IG9mIHRoZSBzZWNkaXIgYW5kIElF U0cgcmV2aWV3cyBvZiB0aGUgQ0kvVCBkcmFmdCByZWdhcmRpbmcgdGhlICJTZWN1cml0eSBDb25z aWRlcmF0aW9ucyIgdGV4dC4gV2UndmUgdXNlZCBzaW1pbGFyIHRleHQgaW4gdGhlIExvZ2dpbmcs IFJlZGlyZWN0aW9uIGFuZCBNZXRhZGF0YSBkcmFmdHMuIEkndmUgY29sbGVjdGVkIHRoZSBjb21t ZW50cyB0b2dldGhlciBiZWxvdy4NCg0KVGhlIHBhcnRpY3VsYXJseS1jb250ZW50aW91cyBwYXJh Z3JhcGggaW4gQ0kvVCBpczoNCg0KICAgSW4gYW4gZW52aXJvbm1lbnQgd2hlcmUgYW55IHN1Y2gg cHJvdGVjdGlvbiBpcyByZXF1aXJlZCwgbXV0dWFsbHkNCiAgIGF1dGhlbnRpY2F0ZWQgZW5jcnlw dGVkIHRyYW5zcG9ydCBNVVNUIGJlIHVzZWQgdG8gZW5zdXJlDQogICBjb25maWRlbnRpYWxpdHkg b2YgdGhlIENJL1QgaW5mb3JtYXRpb24uICBUbyB0aGF0IGVuZCwgVExTIE1VU1QgYmUNCiAgIHVz ZWQgYnkgQ0kvVCwgaW5jbHVkaW5nIGF1dGhlbnRpY2F0aW9uIG9mIHRoZSByZW1vdGUgZW5kLg0K DQpMb29rcyBsaWtlIEkgcGlja2VkIGFuIG9sZGVyIHZlcnNpb24gb2YgdGhlIHRleHQgdGhhbiBM b2dnaW5nIC8gUmVkaXJlY3Rpb24gLyBNZXRhZGF0YSwgb3IgbWVzc2VkIGl0IHVwIHNvbWVob3cu IFRob3NlIGRyYWZ0cyBleHBhbmQgYSBsaXR0bGUgb24gYXV0aCBvZiB0aGUgcmVtb3RlIGVuZCwg Zm9yIGV4YW1wbGUsIExvZ2dpbmc6DQoNCiAgIEluIGFuIGVudmlyb25tZW50IHdoZXJlIGFueSBz dWNoIHByb3RlY3Rpb24gaXMgcmVxdWlyZWQsIG11dHVhbGx5DQogICBhdXRoZW50aWNhdGVkIGVu Y3J5cHRlZCB0cmFuc3BvcnQgTVVTVCBiZSB1c2VkIHRvIGVuc3VyZQ0KICAgY29uZmlkZW50aWFs aXR5IG9mIHRoZSBsb2dnaW5nIGluZm9ybWF0aW9uLiAgVG8gdGhhdCBlbmQsIFRMUyBNVVNUIGJl DQogICB1c2VkIChpbmNsdWRpbmcgYXV0aGVudGljYXRpb24gb2YgdGhlIHJlbW90ZSBlbmQpIGJ5 IHRoZSBzZXJ2ZXItc2lkZQ0KICAgYW5kIHRoZSBjbGllbnQtc2lkZSBvZiB0aGUgQ0ROSSBMb2dn aW5nIGZlZWQsIGFzIHdlbGwgYXMgdGhlIHNlcnZlci0NCiAgIHNpZGUgYW5kIHRoZSBjbGllbnQt c2lkZSBvZiB0aGUgQ0ROSSBMb2dnaW5nIEZpbGUgcHVsbCBtZWNoYW5pc20uDQoNCkJ1dCB0aGUg cHJvYmxlbSBpcyB3aXRoICJJbiBhbiBlbnZpcm9ubWVudCB3aGVyZSBhbnkgc3VjaCBwcm90ZWN0 aW9uIGlzIHJlcXVpcmVkLCBbLi4uXSIuDQoNCldlIG5lZWQgdG8gYmUgbW9yZSBjbGVhciBhYm91 dCB3aGVuIFRMUyBpcyBuZWVkZWQgLSBwZXJoYXBzIGJ5IG1ha2luZyBpdCBhIFNIT1VMRCBhbmQg bGlzdGluZyBleGNlcHRpb25zIGFzIEFsaXNzYSBzdWdnZXN0cywgb3IganVzdCBzYXlpbmcgTVVT VCB1c2UgVExTLg0KDQpBcyBmYXIgYXMgSSBjYW4gcmVtZW1iZXIsIHdlIHRob3VnaHQgd2UnZCBo YXZlIHRoZSBvcHRpb24gb2Ygbm90IHVzaW5nIFRMUyBmb3IgY2FzZXMgd2hlcmUgdGhlIEludGVy bmV0J3Mgbm90IGJlaW5nIHVzZWQgZm9yIHRoZXNlIGludGVyZmFjZXMgKGZvciBleGFtcGxlLCB3 aGVuIHRoZXJlJ3MgYSBwcml2YXRlIG5ldHdvcmsgLyBWUE4pLg0KDQpJbiBhbGwgb2YgdGhlc2Ug ZHJhZnRzIHdlIHNheSB0aGUgaW50ZXJmYWNlIE1VU1Qgc3VwcG9ydCBUTFMgKGFuZCB3ZSBkb24n dCBzYXkgaXQgTVVTVCBzdXBwb3J0IHBsYWluLXRleHQpLg0KDQpUaGUgb3ZlcmhlYWQgb2YgYWN0 dWFsbHkgdXNpbmcgVExTLCBwYXJ0aWN1bGFybHkgY29ubmVjdGlvbiBzZXR1cCBvdmVyaGVhZCwg cHJvYmFibHkgaXNuJ3QgYSBiaWcgY29uY2VybiBhcyB0aGUgY29ubmVjdGlvbnMgYXJlIGFsbCBs aWtlbHkgdG8gYmUgcGVyc2lzdGVudCg/KS4gU28sIGZvciB0aGUgYmVzdCBjaGFuY2Ugb2YgaW50 ZXJ3b3JraW5nLCBhbmQgdG8ga2VlcCB0aGluZ3Mgc2ltcGxlLCBJIHRoaW5rIG15IHByZWZlcmVu Y2UgaXMgdG8gcmVtb3ZlIHRoZSBhbWJpZ3VpdHkgYnkganVzdCBzYXlpbmcgTVVTVCB1c2UgVExT Lg0KDQpBbnkgdGhvdWdodHM/DQoNCk1hbnkgdGhhbmtzLA0KUm9iLg0KDQotLS0tDQoNClZpbmNl bnQgUm9jYSA8dmluY2VudC5yb2NhQGlucmlhLmZyPiAoc2VjZGlyIHJldmlldykNCg0KPj4NCj4+ VGhlcmUgYXJlIHNldmVyYWwgdG9waWNzIEnigJlkIGxpa2UgdG8gZGlzY3VzczoNCj4+MS0gQ29u Y2VybmluZyB0aGUgdXNlIG9mIFRMUyB0byBjYXJyeSBDSS9UIHRyYWZmaWMsIEkgc2VlIGl0IGlz IG1hbmRhdG9yeQ0KPj50byBpbXBsZW1lbnQsIGJ1dCBzdGlsbCBvcHRpb25hbCB0byB1c2UgKDFz dCBzZW50ZW5jZSBvZiBTZWN0aW9uIDguMSkuIElzDQo+Pml0IHN0aWxsIHJlYXNvbmFibGUgaW4g Y3VycmVudCBJbnRlcm5ldD8gQXQgYSBtaW5pbXVtIEkgd291bGQgZXhwZWN0IGENCj4+wqsgTVVT VCBzdXBwb3J0IMK7IC8gwqsgU0hPVUxEIHVzZSDCuy4NCj5TZWN0aW9uIDguMSBnb2VzIG9uIHRv IHNheSAuLi4NCj4gICBbIC4uLiBkZXNjcmlwdGlvbiBvZiBiZW5lZml0cyBvZiBIVFRQUyAuLi4g XQ0KPiAgIEluIGFuIGVudmlyb25tZW50IHdoZXJlIGFueSBzdWNoIHByb3RlY3Rpb24gaXMgcmVx dWlyZWQsIG11dHVhbGx5DQo+ICAgYXV0aGVudGljYXRlZCBlbmNyeXB0ZWQgdHJhbnNwb3J0IE1V U1QgYmUgdXNlZCB0byBlbnN1cmUNCj4gICBjb25maWRlbnRpYWxpdHkgb2YgdGhlIENJL1QgaW5m b3JtYXRpb24uIFRvIHRoYXQgZW5kLCBUTFMgTVVTVCBiZQ0KPiAgIHVzZWQgYnkgQ0kvVCwgaW5j bHVkaW5nIGF1dGhlbnRpY2F0aW9uIG9mIHRoZSByZW1vdGUgZW5kLg0KPi4uLiB0aGUgSW50ZXJu ZXQgaXMgY2xlYXJseSBhbiBlbnZpcm9ubWVudCB3aGVyZSBzdWNoIHByb3RlY3Rpb24gaXMNCj5y ZXF1aXJlZCwgYW5kIGl0J2xsIG9mdGVuIGJlIHVzZWQgZm9yIHRoZXNlIGludGVyZmFjZXMgLSB3 ZSBjb3VsZCBzdGF0ZQ0KPnRoYXQgZXhwbGljaXRseSwgd291bGQgdGhhdCBhZGRyZXNzIHRoZSBj b25jZXJuPw0KPkJ1dCwgQ0kvVCBjb3VsZCBhbHNvIGJlIGRlcGxveWVkIHRvIHJ1biBvdmVyIGEg VlBOIG9yIHByaXZhdGUgbmV0d29yaw0KPmJldHdlZW4gdHdvIGludGVyY29ubmVjdGVkIENETnMs IGluIHN1Y2ggYW4gZW52aXJvbm1lbnQgSFRUUFMgdHJhbnNwb3J0DQo+d291bGQgbm90IGhhdmUg dGhlIHNhbWUgYmVuZWZpdHMuDQoNClllcywgdGhhdOKAmXMgbXkgcG9pbnQuIFNheSBleHBsaWNp dGx5IHRoYXQgSW50ZXJuZXQgaXMgYW4gZXhhbXBsZSBvZiBlbnZpcm9ubWVudCB3aGVyZQ0Kc3Vj aCBhIHByb3RlY3Rpb24gaXMgbWFuZGF0b3J5Lg0KDQotLS0tDQoNCkJlbiBDYW1wYmVsbCA8YmVu QG5vc3RydW0uY29tPg0KDQotIDguMSwgIDR0aCBwYXJhZ3JhcGggZnJvbSB0aGUgZW5kOg0KVGhl IGxhbmd1YWdlIGhlcmUgaXMgYW1iaWd1b3VzIGFib3V0IHdoZXRoZXIgdGhlIHVzZSBvZiBUTFMg aXMgX2Fsd2F5c18NCnJlcXVpcmVkLCBvciBqdXN0IHdoZW4gInN1Y2ggcHJvdGVjdGlvbiBpcyBy ZXF1aXJlZC4iIEZyb20gY29udGV4dCwgSQ0KYXNzdW1lIHRoZSBsYXR0ZXIgdG8gYmUgdGhlIGNh c2UuIEJ1dCAiVG8gdGhhdCBlbmQuLi4iIGNhbiBiZSBpbnRlcnByZXRlZA0KdG8gbWVhbiAiSW4g dGhhdCBjYXNlLCBvbmUgTVVTVCBkbyBYIiwgb3IgdG8gbWVhbiAiSW4gb3JkZXIgdG8gbWFrZSB0 aGF0DQpwb3NzaWJsZSB3aGVuIG5lZWRlZCwgb25lIE1VU1QgX2Fsd2F5c18gZG8gWCINCg0KSSBw cm9wb3NlIHRoZSBmb2xsb3dpbmc6DQpPTEQ6DQogICBJbiBhbiBlbnZpcm9ubWVudCB3aGVyZSBh bnkgc3VjaCBwcm90ZWN0aW9uIGlzIHJlcXVpcmVkLCBtdXR1YWxseQ0KICAgYXV0aGVudGljYXRl ZCBlbmNyeXB0ZWQgdHJhbnNwb3J0IE1VU1QgYmUgdXNlZCB0byBlbnN1cmUNCiAgIGNvbmZpZGVu dGlhbGl0eSBvZiB0aGUgQ0kvVCBpbmZvcm1hdGlvbi4gIFRvIHRoYXQgZW5kLCBUTFMgTVVTVCBi ZQ0KICAgdXNlZCBieSBDSS9ULCBpbmNsdWRpbmcgYXV0aGVudGljYXRpb24gb2YgdGhlIHJlbW90 ZSBlbmQuDQpORVc6DQogICBJbiBhbiBlbnZpcm9ubWVudCB3aGVyZSBhbnkgc3VjaCBwcm90ZWN0 aW9uIGlzIHJlcXVpcmVkLCBtdXR1YWxseQ0KICAgYXV0aGVudGljYXRlZCBhbmQgZW5jcnlwdGVk IFRMUyBNVVNUIGJlIHVzZWQgdG8gZW5zdXJlDQogICBjb25maWRlbnRpYWxpdHkgb2YgdGhlIENJ L1QgaW5mb3JtYXRpb24uIA0KRU5ELg0KDQpbYW5kLi4uXQ0KDQpGb3IgdGhlIHJlY29yZCwgbXkg cHJvcG9zZWQgdGV4dCBhc3N1bWVkIHRoZSBpbnRlbnQgd2FzIGZvciBhIA0KY29uZGl0aW9uYWwg Ik1VU1QgdXNlIFRMUyIuIElmIHRoZSBhbnN3ZXIgdHVybmVkIG91dCB0byBiZSAiYWx3YXlzIA0K TVVTVCIsIEkgd291bGQgY2VydGFpbmx5IG5vdCBvYmplY3QuDQoNCi0tLS0NCg0KQWxpc3NhIENv b3BlciA8YWxpc3NhQGNvb3BlcncuaW4+DQoNCkkgaGFkIHRoZSBzYW1lIGNvbmZ1c2lvbiBhcyBC ZW4gYW5kIHRoZSBzZWNkaXIgcmV2aWV3ZXIgY29uY2VybmluZw0Kd2hldGhlciBUTFMgaXMgYWx3 YXlzIHJlcXVpcmVkIHRvIHVzZSBvciBub3QuIElmIHRoZXJlIGFyZSBjYXNlcyBpbiB3aGljaA0K VExTIGlzIG5vdCBtYW5kYXRvcnkgdG8gdXNlLCB0aGVuIEkgdGhpbmsgdGhpcyBzaG91bGQgYmUg cGhyYXNlZCBhcyBhDQpTSE9VTEQgd2l0aCB0aGUgZXhjZXB0aW9ucyBjbGVhcmx5IGVudW1lcmF0 ZWQuIEZvciBleGFtcGxlLCBpdCdzIG5vdA0KY2xlYXIgdG8gbWUgd2hldGhlciB0aGUgb25seSBl eGNlcHRpb24gaXMgZW52aXJvbm1lbnRzIHdoZXJlIGVxdWl2YWxlbnQNCnByb3RlY3Rpb25zIGFy ZSBhZmZvcmRlZCBieSBhIGRpZmZlcmVudCBwcm90b2NvbCwgb3IgaWYganVzdCBiZWluZyB3aXRo aW4NCmEgc2luZ2xlIGFkbWluaXN0cmF0aXZlIGRvbWFpbiBpcyBjb25zaWRlcmVkIHByb3RlY3Rp b24gZW5vdWdoIChub3Qgc3VyZQ0KSSBhZ3JlZSB3aXRoIHRoZSBsYXR0ZXIpLg0KDQotLS0tDQoN CkthdGhsZWVuIE1vcmlhcnR5IDxLYXRobGVlbi5Nb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4NCg0K SSdtIGEgbm8gb2JqZWN0aW9uLCBidXQgZG8gd2FudCB0byBzZWUgd2h5IFRMUyBpcyBub3QgYSBN VVNULiBJJ3ZlDQpyZXNwb25kZWQgdG8gQmVuJ3MgZGlzY3VzcyB0aGF0IHByb3Bvc2VzIGxhbmd1 YWdlIHRvIG1ha2UgaXQgY2xlYXINCndoZXRoZXIgb3Igbm90IFRMUyBpcyBhIE1VU1QuIFJpZ2h0 IG5vdywgSSB0aGluayBpdCBpcyBqdXN0IGEgTVVTVCB3aGVuDQpjZXJ0YWluIGNvbmRpdGlvbnMg YXJlIG1ldCAtIHRoZSBuZWVkIGZvciB0aGUgc2VjdXJpdHkgcHJvcGVydGllcyBjYWxsZWQNCm91 dCBpbiA4LjEgYW5kIGNvbW1lcmNpYWwgcHJpdmFjeSBjb25zaWRlcmF0aW9ucyBpbiA4LjMuDQoN Cg0KW2FuZCwgaW4gcmVwbHkgdG8gQmVuIENhbXBiZWxsJ3MgRElTQ1VTU10NCg0KSSdtIGludGVy ZXN0ZWQgdG8gc2VlIHRoZSByZXNwb25zZSBvbiB0aGlzIGRpc2N1c3MuICBGcm9tIHJlYWRpbmcg dGhlDQpTZWN1cml0eSBDb25zaWRlcmF0aW9ucywgSSB0aG91Z2h0IHRoYXQgVExTIHdvdWxkIGJl IHJlcXVpcmVkIGZvciB0aGUNCmNvbW1lcmNpYWwgY29uZmlkZW50aWFsaXR5IGNvbmNlcm5zIGNp dGVkIGluIDguMyBhbmQgdG8gcHJvdmlkZSB0aGUNCnNlY3VyaXR5IHByb3BlcnRpZXMgY2l0ZWQg aW4gOC4xLg0KDQpJIGFncmVlIHdpdGggQmVuIHRoYXQgdGhlIGxhbmd1YWdlIGdvZXMgYmFjayBh bmQgZm9ydGggYSBiaXQgYXMgdG8NCndoZXRoZXIgb3Igbm90IGl0IGlzIHJlcXVpcmVkIChJJ2Qg cHJlZmVyIHRvIHNlZSBpdCByZXF1aXJlZC4NCkhvd2V2ZXIsIHRoZXJlIGlzIGVub3VnaCBsYW5n dWFnZSB0byBzdWdnZXN0IHRoYXQgaXQgaXMganVzdCByZXF1aXJlZA0Kd2hlbiBzcGVjaWZpYyBj b25kaXRpb25zIGFyZSBtZXQuICBJZiB0aGVyZSBpcyBhIGdvb2QgYXJndW1lbnQgdG8ga2VlcA0K aXQgYXMtaXMsIEJlbidzIHN1Z2dlc3RlZCBsYW5ndWFnZSBoZWxwcyBjbGVhciB1cCBhbnkgY29u ZnVzaW9uLCBidXQNCkknZCBsaWtlIHRvIG1ha2Ugc3VyZSB0aGF0IHRoZXJlIGlzIGEgZ29vZCBy ZWFzb24gdG8gbm90IGhhdmUgdGhpcyBiZQ0KYSBNVVNUIHVzZSBUTFMuDQoNCkknbSBnb2luZyB0 byBqdXN0IHRhY2sgdGhpcyBvbnRvIEJlbidzIGRpc2N1c3MgYXMgSSBzaG91bGQgYmUgb24NCm1h dGVybml0eSBsZWF2ZSBzb29uIGFuZCBkb24ndCB3YW50IHRvIGhvbGQgdXAgdGhlIGRyYWZ0IHdo aWxlIEkgYW0NCm91dCBpZiB0aGlzIGlzbid0IHJlc29sdmVkIHF1aWNrbHkuDQoNCi0tLS0NCg0K U3RlcGhlbiBGYXJyZWxsIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPg0KDQotIEkgYWdyZWUg d2l0aCB0aGUgZGlzY3VzcyBwb2ludHMgYWJvdXQgdXNlIG9mIFRMUy4NCg0KLSBJIHRoaW5rIGl0 J2QgYmUgYmV0dGVyIGlmIHlvdSBjbGFyaWZpZWQgdGhhdCBieQ0KIm11dHVhbGx5IGF1dGhlbnRp Y2F0ZWQiIHlvdSBtZWFuIFRMUyBjbGllbnQgYXV0aCBhbmQNClRMUyBzZXJ2ZXIgYXV0aCBhbmQg bm90IGUuZy4gSFRUUCBCQVNJQyBwbHVzIFRMUyBzZXJ2ZXINCmF1dGguDQoNCi0tLS0NCg0K From nobody Fri Jan 15 14:14:13 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A029F1ACE76 for ; Fri, 15 Jan 2016 14:14:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F17-KKMAK0H1 for ; Fri, 15 Jan 2016 14:14:09 -0800 (PST) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B48D1ACE73 for ; Fri, 15 Jan 2016 14:14:09 -0800 (PST) X-AuditID: c618062d-f79d16d000001b1c-d0-56996cef37b4 Received: from EUSAAHC008.ericsson.se (Unknown_Domain [147.117.188.96]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 32.1F.06940.FEC69965; Fri, 15 Jan 2016 23:04:31 +0100 (CET) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC008.ericsson.se ([147.117.188.96]) with mapi id 14.03.0248.002; Fri, 15 Jan 2016 17:14:07 -0500 From: Kevin Ma J To: Rob Murray , "cdni@ietf.org" Thread-Topic: Use of TLS in CDNI Thread-Index: AQHRT+Ctg3L0+YceR0yg+ZUYAx9Mi579I7SQ Date: Fri, 15 Jan 2016 22:14:07 +0000 Message-ID: References: <03FA8BE8-F0CA-48AC-8264-F20DA16B611C@velocix.com> In-Reply-To: <03FA8BE8-F0CA-48AC-8264-F20DA16B611C@velocix.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrDLMWRmVeSWpSXmKPExsUyuXRPgu77nJlhBi8emVk8nf2H1eLZguXM DkweS5b8ZPL43faZJYApissmJTUnsyy1SN8ugSvjwbpPTAXfQis6dqxnamC8E9zFyMkhIWAi 0fv0EiOELSZx4d56ti5GLg4hgSOMEiu+fmWCcJYzSiw+vZ4VpIpNQEvi8de/TCC2iICrxNcz d8DiwgLyEvuWz2CDiCtIrGo7xQhhG0nMfAAS5+BgEVCVeN/kDxLmFfCVONwxmxnEFhKwk/jR fB+shFPAXuLv71CQMCPQPd9PrQHbxCwgLnHryXwmiDsFJJbsOc8MYYtKvHz8jxXCVpKYtPQc K8gYZgFNifW79CFaFSWmdD9kh9gqKHFy5hOWCYyis5BMnYXQMQtJxywkHQsYWVYxcpQWF+Tk phsZbGIExsExCTbdHYz3p3seYhTgYFTi4d3gODNMiDWxrLgy9xCjBAezkghvWQpQiDclsbIq tSg/vqg0J7X4EKM0B4uSOK+gdGOYkEB6YklqdmpqQWoRTJaJg1OqgVHzuNeq9J/OM2r3h06Z ZNzNauOo0+6kxx0/Kf3Zlfubtea3LijJLV5bONe0dVJ03+vkt2dunFT895E78OvJJo1jjx6x bn/vNL9vx32rjh+LJp8/wXew0eahaLE917NFVZHPIqe68xs8FDNk2P2y8dH1l7Ex+mJSDEva Yx4KN5+3FDn3x9euw0WJpTgj0VCLuag4EQBNd/18fwIAAA== Archived-At: Subject: Re: [CDNi] Use of TLS in CDNI X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jan 2016 22:14:11 -0000 SGkgUm9iLA0KDQogIE1ldGFkYXRhIHVzZXMgc2xpZ2h0bHkgZGlmZmVyZW50IHRleHQgd2hpY2gg bGlzdHMgZXhjZXB0aW9uczoNCg0KICAgIEluIGFuIGVudmlyb25tZW50IHdoZXJlIGFueSBzdWNo IHByb3RlY3Rpb24gaXMgcmVxdWlyZWQsIFRMUyBNVVNUIGJlDQogICAgdXNlZCAoaW5jbHVkaW5n IGF1dGhlbnRpY2F0aW9uIG9mIHRoZSByZW1vdGUgZW5kKSBieSB0aGUgc2VydmVyLXNpZGUNCiAg ICAodUNETikgYW5kIHRoZSBjbGllbnQtc2lkZSAoZENETikgb2YgdGhlIENETkkgbWV0YWRhdGEg aW50ZXJmYWNlDQogICAgdW5sZXNzIGFsdGVybmF0ZSBtZXRob2RzIGFyZSB1c2VkIGZvciBlbnN1 cmluZyB0aGUgY29uZmlkZW50aWFsaXR5IG9mDQogICAgdGhlIGluZm9ybWF0aW9uIGluIHRoZSBD RE5JIG1ldGFkYXRhIGludGVyZmFjZSByZXF1ZXN0cyBhbmQgcmVzcG9uc2VzDQogICAgKHN1Y2gg YXMgc2V0dGluZyB1cCBhbiBJUHNlYyB0dW5uZWwgYmV0d2VlbiB0aGUgdHdvIENETnMgb3IgdXNp bmcgYQ0KICAgIHBoeXNpY2FsbHkgc2VjdXJlZCBpbnRlcm5hbCBuZXR3b3JrIGJldHdlZW4gdHdv IENETnMgdGhhdCBhcmUgb3duZWQNCiAgICBieSB0aGUgc2FtZSBjb3Jwb3JhdGUgZW50aXR5KS4N Cg0KICBJJ20gbm90IG5lY2Vzc2FyaWx5IGFkdm9jYXRpbmcgdGhpcyBvdmVyIGEgTVVTVCwgYnV0 IGp1c3QgcHV0dGluZyBpdCBvdXQgdGhlcmUuDQoNCnRoYW54Lg0KDQotLSAgS2V2aW4gSi4gTWEN Cg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBDRE5pIFttYWlsdG86Y2Ru aS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgUm9iIE11cnJheQ0KPiBTZW50OiBGcmlk YXksIEphbnVhcnkgMTUsIDIwMTYgNTowNCBQTQ0KPiBUbzogY2RuaUBpZXRmLm9yZw0KPiBTdWJq ZWN0OiBbQ0ROaV0gVXNlIG9mIFRMUyBpbiBDRE5JDQo+IA0KPiBIaSBhbGwsDQo+IA0KPiBTZXZl cmFsIGNvbW1lbnRzIGNhbWUgb3V0IG9mIHRoZSBzZWNkaXIgYW5kIElFU0cgcmV2aWV3cyBvZiB0 aGUgQ0kvVCBkcmFmdA0KPiByZWdhcmRpbmcgdGhlICJTZWN1cml0eSBDb25zaWRlcmF0aW9ucyIg dGV4dC4gV2UndmUgdXNlZCBzaW1pbGFyIHRleHQgaW4NCj4gdGhlIExvZ2dpbmcsIFJlZGlyZWN0 aW9uIGFuZCBNZXRhZGF0YSBkcmFmdHMuIEkndmUgY29sbGVjdGVkIHRoZSBjb21tZW50cw0KPiB0 b2dldGhlciBiZWxvdy4NCj4gDQo+IFRoZSBwYXJ0aWN1bGFybHktY29udGVudGlvdXMgcGFyYWdy YXBoIGluIENJL1QgaXM6DQo+IA0KPiAgICBJbiBhbiBlbnZpcm9ubWVudCB3aGVyZSBhbnkgc3Vj aCBwcm90ZWN0aW9uIGlzIHJlcXVpcmVkLCBtdXR1YWxseQ0KPiAgICBhdXRoZW50aWNhdGVkIGVu Y3J5cHRlZCB0cmFuc3BvcnQgTVVTVCBiZSB1c2VkIHRvIGVuc3VyZQ0KPiAgICBjb25maWRlbnRp YWxpdHkgb2YgdGhlIENJL1QgaW5mb3JtYXRpb24uICBUbyB0aGF0IGVuZCwgVExTIE1VU1QgYmUN Cj4gICAgdXNlZCBieSBDSS9ULCBpbmNsdWRpbmcgYXV0aGVudGljYXRpb24gb2YgdGhlIHJlbW90 ZSBlbmQuDQo+IA0KPiBMb29rcyBsaWtlIEkgcGlja2VkIGFuIG9sZGVyIHZlcnNpb24gb2YgdGhl IHRleHQgdGhhbiBMb2dnaW5nIC8NCj4gUmVkaXJlY3Rpb24gLyBNZXRhZGF0YSwgb3IgbWVzc2Vk IGl0IHVwIHNvbWVob3cuIFRob3NlIGRyYWZ0cyBleHBhbmQgYQ0KPiBsaXR0bGUgb24gYXV0aCBv ZiB0aGUgcmVtb3RlIGVuZCwgZm9yIGV4YW1wbGUsIExvZ2dpbmc6DQo+IA0KPiAgICBJbiBhbiBl bnZpcm9ubWVudCB3aGVyZSBhbnkgc3VjaCBwcm90ZWN0aW9uIGlzIHJlcXVpcmVkLCBtdXR1YWxs eQ0KPiAgICBhdXRoZW50aWNhdGVkIGVuY3J5cHRlZCB0cmFuc3BvcnQgTVVTVCBiZSB1c2VkIHRv IGVuc3VyZQ0KPiAgICBjb25maWRlbnRpYWxpdHkgb2YgdGhlIGxvZ2dpbmcgaW5mb3JtYXRpb24u ICBUbyB0aGF0IGVuZCwgVExTIE1VU1QgYmUNCj4gICAgdXNlZCAoaW5jbHVkaW5nIGF1dGhlbnRp Y2F0aW9uIG9mIHRoZSByZW1vdGUgZW5kKSBieSB0aGUgc2VydmVyLXNpZGUNCj4gICAgYW5kIHRo ZSBjbGllbnQtc2lkZSBvZiB0aGUgQ0ROSSBMb2dnaW5nIGZlZWQsIGFzIHdlbGwgYXMgdGhlIHNl cnZlci0NCj4gICAgc2lkZSBhbmQgdGhlIGNsaWVudC1zaWRlIG9mIHRoZSBDRE5JIExvZ2dpbmcg RmlsZSBwdWxsIG1lY2hhbmlzbS4NCj4gDQo+IEJ1dCB0aGUgcHJvYmxlbSBpcyB3aXRoICJJbiBh biBlbnZpcm9ubWVudCB3aGVyZSBhbnkgc3VjaCBwcm90ZWN0aW9uIGlzDQo+IHJlcXVpcmVkLCBb Li4uXSIuDQo+IA0KPiBXZSBuZWVkIHRvIGJlIG1vcmUgY2xlYXIgYWJvdXQgd2hlbiBUTFMgaXMg bmVlZGVkIC0gcGVyaGFwcyBieSBtYWtpbmcgaXQgYQ0KPiBTSE9VTEQgYW5kIGxpc3RpbmcgZXhj ZXB0aW9ucyBhcyBBbGlzc2Egc3VnZ2VzdHMsIG9yIGp1c3Qgc2F5aW5nIE1VU1QgdXNlDQo+IFRM Uy4NCj4gDQo+IEFzIGZhciBhcyBJIGNhbiByZW1lbWJlciwgd2UgdGhvdWdodCB3ZSdkIGhhdmUg dGhlIG9wdGlvbiBvZiBub3QgdXNpbmcgVExTDQo+IGZvciBjYXNlcyB3aGVyZSB0aGUgSW50ZXJu ZXQncyBub3QgYmVpbmcgdXNlZCBmb3IgdGhlc2UgaW50ZXJmYWNlcyAoZm9yDQo+IGV4YW1wbGUs IHdoZW4gdGhlcmUncyBhIHByaXZhdGUgbmV0d29yayAvIFZQTikuDQo+IA0KPiBJbiBhbGwgb2Yg dGhlc2UgZHJhZnRzIHdlIHNheSB0aGUgaW50ZXJmYWNlIE1VU1Qgc3VwcG9ydCBUTFMgKGFuZCB3 ZSBkb24ndA0KPiBzYXkgaXQgTVVTVCBzdXBwb3J0IHBsYWluLXRleHQpLg0KPiANCj4gVGhlIG92 ZXJoZWFkIG9mIGFjdHVhbGx5IHVzaW5nIFRMUywgcGFydGljdWxhcmx5IGNvbm5lY3Rpb24gc2V0 dXANCj4gb3ZlcmhlYWQsIHByb2JhYmx5IGlzbid0IGEgYmlnIGNvbmNlcm4gYXMgdGhlIGNvbm5l Y3Rpb25zIGFyZSBhbGwgbGlrZWx5DQo+IHRvIGJlIHBlcnNpc3RlbnQoPykuIFNvLCBmb3IgdGhl IGJlc3QgY2hhbmNlIG9mIGludGVyd29ya2luZywgYW5kIHRvIGtlZXANCj4gdGhpbmdzIHNpbXBs ZSwgSSB0aGluayBteSBwcmVmZXJlbmNlIGlzIHRvIHJlbW92ZSB0aGUgYW1iaWd1aXR5IGJ5IGp1 c3QNCj4gc2F5aW5nIE1VU1QgdXNlIFRMUy4NCj4gDQo+IEFueSB0aG91Z2h0cz8NCj4gDQo+IE1h bnkgdGhhbmtzLA0KPiBSb2IuDQo+IA0KPiAtLS0tDQo+IA0KPiBWaW5jZW50IFJvY2EgPHZpbmNl bnQucm9jYUBpbnJpYS5mcj4gKHNlY2RpciByZXZpZXcpDQo+IA0KPiA+Pg0KPiA+PlRoZXJlIGFy ZSBzZXZlcmFsIHRvcGljcyBJ4oCZZCBsaWtlIHRvIGRpc2N1c3M6DQo+ID4+MS0gQ29uY2Vybmlu ZyB0aGUgdXNlIG9mIFRMUyB0byBjYXJyeSBDSS9UIHRyYWZmaWMsIEkgc2VlIGl0IGlzDQo+IG1h bmRhdG9yeQ0KPiA+PnRvIGltcGxlbWVudCwgYnV0IHN0aWxsIG9wdGlvbmFsIHRvIHVzZSAoMXN0 IHNlbnRlbmNlIG9mIFNlY3Rpb24gOC4xKS4NCj4gSXMNCj4gPj5pdCBzdGlsbCByZWFzb25hYmxl IGluIGN1cnJlbnQgSW50ZXJuZXQ/IEF0IGEgbWluaW11bSBJIHdvdWxkIGV4cGVjdCBhDQo+ID4+ wqsgTVVTVCBzdXBwb3J0IMK7IC8gwqsgU0hPVUxEIHVzZSDCuy4NCj4gPlNlY3Rpb24gOC4xIGdv ZXMgb24gdG8gc2F5IC4uLg0KPiA+ICAgWyAuLi4gZGVzY3JpcHRpb24gb2YgYmVuZWZpdHMgb2Yg SFRUUFMgLi4uIF0NCj4gPiAgIEluIGFuIGVudmlyb25tZW50IHdoZXJlIGFueSBzdWNoIHByb3Rl Y3Rpb24gaXMgcmVxdWlyZWQsIG11dHVhbGx5DQo+ID4gICBhdXRoZW50aWNhdGVkIGVuY3J5cHRl ZCB0cmFuc3BvcnQgTVVTVCBiZSB1c2VkIHRvIGVuc3VyZQ0KPiA+ICAgY29uZmlkZW50aWFsaXR5 IG9mIHRoZSBDSS9UIGluZm9ybWF0aW9uLiBUbyB0aGF0IGVuZCwgVExTIE1VU1QgYmUNCj4gPiAg IHVzZWQgYnkgQ0kvVCwgaW5jbHVkaW5nIGF1dGhlbnRpY2F0aW9uIG9mIHRoZSByZW1vdGUgZW5k Lg0KPiA+Li4uIHRoZSBJbnRlcm5ldCBpcyBjbGVhcmx5IGFuIGVudmlyb25tZW50IHdoZXJlIHN1 Y2ggcHJvdGVjdGlvbiBpcw0KPiA+cmVxdWlyZWQsIGFuZCBpdCdsbCBvZnRlbiBiZSB1c2VkIGZv ciB0aGVzZSBpbnRlcmZhY2VzIC0gd2UgY291bGQgc3RhdGUNCj4gPnRoYXQgZXhwbGljaXRseSwg d291bGQgdGhhdCBhZGRyZXNzIHRoZSBjb25jZXJuPw0KPiA+QnV0LCBDSS9UIGNvdWxkIGFsc28g YmUgZGVwbG95ZWQgdG8gcnVuIG92ZXIgYSBWUE4gb3IgcHJpdmF0ZSBuZXR3b3JrDQo+ID5iZXR3 ZWVuIHR3byBpbnRlcmNvbm5lY3RlZCBDRE5zLCBpbiBzdWNoIGFuIGVudmlyb25tZW50IEhUVFBT IHRyYW5zcG9ydA0KPiA+d291bGQgbm90IGhhdmUgdGhlIHNhbWUgYmVuZWZpdHMuDQo+IA0KPiBZ ZXMsIHRoYXTigJlzIG15IHBvaW50LiBTYXkgZXhwbGljaXRseSB0aGF0IEludGVybmV0IGlzIGFu IGV4YW1wbGUgb2YNCj4gZW52aXJvbm1lbnQgd2hlcmUNCj4gc3VjaCBhIHByb3RlY3Rpb24gaXMg bWFuZGF0b3J5Lg0KPiANCj4gLS0tLQ0KPiANCj4gQmVuIENhbXBiZWxsIDxiZW5Abm9zdHJ1bS5j b20+DQo+IA0KPiAtIDguMSwgIDR0aCBwYXJhZ3JhcGggZnJvbSB0aGUgZW5kOg0KPiBUaGUgbGFu Z3VhZ2UgaGVyZSBpcyBhbWJpZ3VvdXMgYWJvdXQgd2hldGhlciB0aGUgdXNlIG9mIFRMUyBpcyBf YWx3YXlzXw0KPiByZXF1aXJlZCwgb3IganVzdCB3aGVuICJzdWNoIHByb3RlY3Rpb24gaXMgcmVx dWlyZWQuIiBGcm9tIGNvbnRleHQsIEkNCj4gYXNzdW1lIHRoZSBsYXR0ZXIgdG8gYmUgdGhlIGNh c2UuIEJ1dCAiVG8gdGhhdCBlbmQuLi4iIGNhbiBiZSBpbnRlcnByZXRlZA0KPiB0byBtZWFuICJJ biB0aGF0IGNhc2UsIG9uZSBNVVNUIGRvIFgiLCBvciB0byBtZWFuICJJbiBvcmRlciB0byBtYWtl IHRoYXQNCj4gcG9zc2libGUgd2hlbiBuZWVkZWQsIG9uZSBNVVNUIF9hbHdheXNfIGRvIFgiDQo+ IA0KPiBJIHByb3Bvc2UgdGhlIGZvbGxvd2luZzoNCj4gT0xEOg0KPiAgICBJbiBhbiBlbnZpcm9u bWVudCB3aGVyZSBhbnkgc3VjaCBwcm90ZWN0aW9uIGlzIHJlcXVpcmVkLCBtdXR1YWxseQ0KPiAg ICBhdXRoZW50aWNhdGVkIGVuY3J5cHRlZCB0cmFuc3BvcnQgTVVTVCBiZSB1c2VkIHRvIGVuc3Vy ZQ0KPiAgICBjb25maWRlbnRpYWxpdHkgb2YgdGhlIENJL1QgaW5mb3JtYXRpb24uICBUbyB0aGF0 IGVuZCwgVExTIE1VU1QgYmUNCj4gICAgdXNlZCBieSBDSS9ULCBpbmNsdWRpbmcgYXV0aGVudGlj YXRpb24gb2YgdGhlIHJlbW90ZSBlbmQuDQo+IE5FVzoNCj4gICAgSW4gYW4gZW52aXJvbm1lbnQg d2hlcmUgYW55IHN1Y2ggcHJvdGVjdGlvbiBpcyByZXF1aXJlZCwgbXV0dWFsbHkNCj4gICAgYXV0 aGVudGljYXRlZCBhbmQgZW5jcnlwdGVkIFRMUyBNVVNUIGJlIHVzZWQgdG8gZW5zdXJlDQo+ICAg IGNvbmZpZGVudGlhbGl0eSBvZiB0aGUgQ0kvVCBpbmZvcm1hdGlvbi4NCj4gRU5ELg0KPiANCj4g W2FuZC4uLl0NCj4gDQo+IEZvciB0aGUgcmVjb3JkLCBteSBwcm9wb3NlZCB0ZXh0IGFzc3VtZWQg dGhlIGludGVudCB3YXMgZm9yIGENCj4gY29uZGl0aW9uYWwgIk1VU1QgdXNlIFRMUyIuIElmIHRo ZSBhbnN3ZXIgdHVybmVkIG91dCB0byBiZSAiYWx3YXlzDQo+IE1VU1QiLCBJIHdvdWxkIGNlcnRh aW5seSBub3Qgb2JqZWN0Lg0KPiANCj4gLS0tLQ0KPiANCj4gQWxpc3NhIENvb3BlciA8YWxpc3Nh QGNvb3BlcncuaW4+DQo+IA0KPiBJIGhhZCB0aGUgc2FtZSBjb25mdXNpb24gYXMgQmVuIGFuZCB0 aGUgc2VjZGlyIHJldmlld2VyIGNvbmNlcm5pbmcNCj4gd2hldGhlciBUTFMgaXMgYWx3YXlzIHJl cXVpcmVkIHRvIHVzZSBvciBub3QuIElmIHRoZXJlIGFyZSBjYXNlcyBpbiB3aGljaA0KPiBUTFMg aXMgbm90IG1hbmRhdG9yeSB0byB1c2UsIHRoZW4gSSB0aGluayB0aGlzIHNob3VsZCBiZSBwaHJh c2VkIGFzIGENCj4gU0hPVUxEIHdpdGggdGhlIGV4Y2VwdGlvbnMgY2xlYXJseSBlbnVtZXJhdGVk LiBGb3IgZXhhbXBsZSwgaXQncyBub3QNCj4gY2xlYXIgdG8gbWUgd2hldGhlciB0aGUgb25seSBl eGNlcHRpb24gaXMgZW52aXJvbm1lbnRzIHdoZXJlIGVxdWl2YWxlbnQNCj4gcHJvdGVjdGlvbnMg YXJlIGFmZm9yZGVkIGJ5IGEgZGlmZmVyZW50IHByb3RvY29sLCBvciBpZiBqdXN0IGJlaW5nIHdp dGhpbg0KPiBhIHNpbmdsZSBhZG1pbmlzdHJhdGl2ZSBkb21haW4gaXMgY29uc2lkZXJlZCBwcm90 ZWN0aW9uIGVub3VnaCAobm90IHN1cmUNCj4gSSBhZ3JlZSB3aXRoIHRoZSBsYXR0ZXIpLg0KPiAN Cj4gLS0tLQ0KPiANCj4gS2F0aGxlZW4gTW9yaWFydHkgPEthdGhsZWVuLk1vcmlhcnR5LmlldGZA Z21haWwuY29tPg0KPiANCj4gSSdtIGEgbm8gb2JqZWN0aW9uLCBidXQgZG8gd2FudCB0byBzZWUg d2h5IFRMUyBpcyBub3QgYSBNVVNULiBJJ3ZlDQo+IHJlc3BvbmRlZCB0byBCZW4ncyBkaXNjdXNz IHRoYXQgcHJvcG9zZXMgbGFuZ3VhZ2UgdG8gbWFrZSBpdCBjbGVhcg0KPiB3aGV0aGVyIG9yIG5v dCBUTFMgaXMgYSBNVVNULiBSaWdodCBub3csIEkgdGhpbmsgaXQgaXMganVzdCBhIE1VU1Qgd2hl bg0KPiBjZXJ0YWluIGNvbmRpdGlvbnMgYXJlIG1ldCAtIHRoZSBuZWVkIGZvciB0aGUgc2VjdXJp dHkgcHJvcGVydGllcyBjYWxsZWQNCj4gb3V0IGluIDguMSBhbmQgY29tbWVyY2lhbCBwcml2YWN5 IGNvbnNpZGVyYXRpb25zIGluIDguMy4NCj4gDQo+IA0KPiBbYW5kLCBpbiByZXBseSB0byBCZW4g Q2FtcGJlbGwncyBESVNDVVNTXQ0KPiANCj4gSSdtIGludGVyZXN0ZWQgdG8gc2VlIHRoZSByZXNw b25zZSBvbiB0aGlzIGRpc2N1c3MuICBGcm9tIHJlYWRpbmcgdGhlDQo+IFNlY3VyaXR5IENvbnNp ZGVyYXRpb25zLCBJIHRob3VnaHQgdGhhdCBUTFMgd291bGQgYmUgcmVxdWlyZWQgZm9yIHRoZQ0K PiBjb21tZXJjaWFsIGNvbmZpZGVudGlhbGl0eSBjb25jZXJucyBjaXRlZCBpbiA4LjMgYW5kIHRv IHByb3ZpZGUgdGhlDQo+IHNlY3VyaXR5IHByb3BlcnRpZXMgY2l0ZWQgaW4gOC4xLg0KPiANCj4g SSBhZ3JlZSB3aXRoIEJlbiB0aGF0IHRoZSBsYW5ndWFnZSBnb2VzIGJhY2sgYW5kIGZvcnRoIGEg Yml0IGFzIHRvDQo+IHdoZXRoZXIgb3Igbm90IGl0IGlzIHJlcXVpcmVkIChJJ2QgcHJlZmVyIHRv IHNlZSBpdCByZXF1aXJlZC4NCj4gSG93ZXZlciwgdGhlcmUgaXMgZW5vdWdoIGxhbmd1YWdlIHRv IHN1Z2dlc3QgdGhhdCBpdCBpcyBqdXN0IHJlcXVpcmVkDQo+IHdoZW4gc3BlY2lmaWMgY29uZGl0 aW9ucyBhcmUgbWV0LiAgSWYgdGhlcmUgaXMgYSBnb29kIGFyZ3VtZW50IHRvIGtlZXANCj4gaXQg YXMtaXMsIEJlbidzIHN1Z2dlc3RlZCBsYW5ndWFnZSBoZWxwcyBjbGVhciB1cCBhbnkgY29uZnVz aW9uLCBidXQNCj4gSSdkIGxpa2UgdG8gbWFrZSBzdXJlIHRoYXQgdGhlcmUgaXMgYSBnb29kIHJl YXNvbiB0byBub3QgaGF2ZSB0aGlzIGJlDQo+IGEgTVVTVCB1c2UgVExTLg0KPiANCj4gSSdtIGdv aW5nIHRvIGp1c3QgdGFjayB0aGlzIG9udG8gQmVuJ3MgZGlzY3VzcyBhcyBJIHNob3VsZCBiZSBv bg0KPiBtYXRlcm5pdHkgbGVhdmUgc29vbiBhbmQgZG9uJ3Qgd2FudCB0byBob2xkIHVwIHRoZSBk cmFmdCB3aGlsZSBJIGFtDQo+IG91dCBpZiB0aGlzIGlzbid0IHJlc29sdmVkIHF1aWNrbHkuDQo+ IA0KPiAtLS0tDQo+IA0KPiBTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW4uZmFycmVsbEBjcy50Y2Qu aWU+DQo+IA0KPiAtIEkgYWdyZWUgd2l0aCB0aGUgZGlzY3VzcyBwb2ludHMgYWJvdXQgdXNlIG9m IFRMUy4NCj4gDQo+IC0gSSB0aGluayBpdCdkIGJlIGJldHRlciBpZiB5b3UgY2xhcmlmaWVkIHRo YXQgYnkNCj4gIm11dHVhbGx5IGF1dGhlbnRpY2F0ZWQiIHlvdSBtZWFuIFRMUyBjbGllbnQgYXV0 aCBhbmQNCj4gVExTIHNlcnZlciBhdXRoIGFuZCBub3QgZS5nLiBIVFRQIEJBU0lDIHBsdXMgVExT IHNlcnZlcg0KPiBhdXRoLg0KPiANCj4gLS0tLQ0KPiANCj4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gQ0ROaSBtYWlsaW5nIGxpc3QNCj4gQ0ROaUBp ZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NkbmkNCg== From nobody Mon Jan 18 01:13:09 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36E4F1B3315 for ; Mon, 18 Jan 2016 01:13:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rh0PLOxkOjTX for ; Mon, 18 Jan 2016 01:13:01 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB2D01B32DC for ; Mon, 18 Jan 2016 01:13:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=12850; q=dns/txt; s=iport; t=1453108380; x=1454317980; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=9rtj8lWpgMP+Rw8fJcFoc499TCiB9o51f7ybYHe/L1k=; b=j02DIo7n9w4eOqebo+HAGXDZ84ul53H1EkoZyEhdA02rcZ1eEax13oHC 9HMKJWln3x4HHVfEjQj5KAaU4nnPIQ9xpMa2RQC7lgQCoZqoAO8DJHqTN 6opXXW9NKv3E8wPMKRxsGZBroBwgOfleTR154u88o2jR+pVJB2p527evi w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D5AQAkrJxW/5pdJa1egzpSbQaIULM9A?= =?us-ascii?q?Q2BYxgKhF2BEAIcgQ44FAEBAQEBAQGBCoQ0AQEBAwEBAQEgEToLBQcEAgEIDgM?= =?us-ascii?q?EAQEBAgIjAwICAh8GCxQBCAgCBA4FiAYDCggOrkCMIA2DRwEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBARQEgQCFVoIOCIFkgQSCT4FvFwgyAoJjLoEbBZcaAYg7gyuBeI8?= =?us-ascii?q?Bhn+HXQEgAQFCghcXgV1yAYYWgQgBAQE?= X-IronPort-AV: E=Sophos;i="5.22,312,1449532800"; d="scan'208";a="68220835" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Jan 2016 09:12:59 +0000 Received: from XCH-ALN-017.cisco.com (xch-aln-017.cisco.com [173.36.7.27]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id u0I9CxWF002756 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 18 Jan 2016 09:12:59 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-017.cisco.com (173.36.7.27) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Mon, 18 Jan 2016 03:12:58 -0600 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.009; Mon, 18 Jan 2016 03:12:58 -0600 From: "Francois Le Faucheur (flefauch)" To: Rob Murray Thread-Topic: [CDNi] Use of TLS in CDNI Thread-Index: AQHRT+Ctg3L0+YceR0yg+ZUYAx9Mi579I7SQgARB+AA= Date: Mon, 18 Jan 2016 09:12:58 +0000 Message-ID: References: <03FA8BE8-F0CA-48AC-8264-F20DA16B611C@velocix.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.155.21] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "cdni@ietf.org" Subject: Re: [CDNi] Use of TLS in CDNI X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jan 2016 09:13:08 -0000 Um9iIGFuZCBmb2xrcywNCg0KV2UgaGF2ZSBiZWVuIGdvaW5nIHRocm91Z2ggYSBzaW1pbGFyIGxl bmd0aHkgZGlzY3Vzc2lvbiBpbiB0aGUgY29udGV4dCBvZiBjZG5pLWxvZ2dpbmcuIFNvbWUgYXJn dWluZyBwYXNzaW9uYXRlbHkgdGhhdCBpdCBvdWdodCB0byBiZSBhIOKAnE1VU1QiLCBzb21lIGFy Z3VpbmcgcGFzc2lvbmF0ZWx5IHRoYXQgaXQgb3VnaHQgdG8gYmUgYSDigJxTSE9VTETigJ0gYW5k IHNvbWUgYXJndWluZyBwYXNzaW9uYXRlbHkgdGhhdCBpdCBvdWdodCB0byBiZSBhIOKAnE1VU1Qg YmUgdXNlZCB3aGVuIHByb3RlY3Rpb24gaXMgcmVxdWlyZWTigJ0uDQoNClRoZSBmaW5hbCBjb25j bHVzaW9uIHdhcyBmb3IgYSDigJxNVVNUIGJlIHVzZWQgd2hlbiBzdWNoIHByb3RlY3Rpb24gaXMg cmVxdWlyZWTigJ0uIFNvIG15IHBlcnNvbmFsIHByZWZlcmVuY2Ugd291bGQgYmUgdG8gc3RpY2sg dG8gdGhlIHNhbWUgYXBwcm9hY2gsIGFuZCBhZGQgdGhlIGNsYXJpZmljYXRpb25zIHJlcXVlc3Rl ZCBieSB0aGUgQURzIGkuZS4gOg0KCSogYWRkIHRleHQgYWJvdXQgd2hlbiBzdWNoIHByb3RlY3Rp b24gaXMgbm90IGJlIHJlcXVpcmVkLiBUaGUgdGV4dCBmcm9tIGNkbmktbWV0YWRhdGEgcXVvdGVk IGJlbG93IGJ5IEtldmluIHNlZW1zIGZpbmUgdG8gbWUuDQoJKiBjbGFyaWZ5IHRoYXQgYnkgIm11 dHVhbGx5IGF1dGhlbnRpY2F0ZWQiIHdlIG1lYW4gVExTIGNsaWVudCBhdXRoIGFuZCBUTFMgc2Vy dmVyIGF1dGggYW5kIG5vdCBlLmcuIEhUVFAgQkFTSUMgcGx1cyBUTFMgc2VydmVyIGF1dGguIFRo ZSB0ZXh0IGluIHJlY2VudCB2ZXJzaW9ucyBvZiBjZG5pLWxvZ2dpbmcgcXVvdGVkIGJ5IFJvYiBi ZWxvdyBzZWVtcyBmaW5lIHRvIG1lLg0KCSogcG9zc2libHkgYSBmZXcgb3RoZXIgd29yZCBhZGp1 c3RtZW50cyBhcyBzdWdnZXN0ZWQgYnkgQURzDQoNCkNoZWVycw0KDQpGcmFuY29pcw0KDQoNCj4g T24gMTUgSmFuIDIwMTYsIGF0IDIzOjE0LCBNYSBLZXZpbiA8a2V2aW4uai5tYUBlcmljc3Nvbi5j b20+IHdyb3RlOg0KPiANCj4gSGkgUm9iLA0KPiANCj4gIE1ldGFkYXRhIHVzZXMgc2xpZ2h0bHkg ZGlmZmVyZW50IHRleHQgd2hpY2ggbGlzdHMgZXhjZXB0aW9uczoNCj4gDQo+ICAgIEluIGFuIGVu dmlyb25tZW50IHdoZXJlIGFueSBzdWNoIHByb3RlY3Rpb24gaXMgcmVxdWlyZWQsIFRMUyBNVVNU IGJlDQo+ICAgIHVzZWQgKGluY2x1ZGluZyBhdXRoZW50aWNhdGlvbiBvZiB0aGUgcmVtb3RlIGVu ZCkgYnkgdGhlIHNlcnZlci1zaWRlDQo+ICAgICh1Q0ROKSBhbmQgdGhlIGNsaWVudC1zaWRlIChk Q0ROKSBvZiB0aGUgQ0ROSSBtZXRhZGF0YSBpbnRlcmZhY2UNCj4gICAgdW5sZXNzIGFsdGVybmF0 ZSBtZXRob2RzIGFyZSB1c2VkIGZvciBlbnN1cmluZyB0aGUgY29uZmlkZW50aWFsaXR5IG9mDQo+ ICAgIHRoZSBpbmZvcm1hdGlvbiBpbiB0aGUgQ0ROSSBtZXRhZGF0YSBpbnRlcmZhY2UgcmVxdWVz dHMgYW5kIHJlc3BvbnNlcw0KPiAgICAoc3VjaCBhcyBzZXR0aW5nIHVwIGFuIElQc2VjIHR1bm5l bCBiZXR3ZWVuIHRoZSB0d28gQ0ROcyBvciB1c2luZyBhDQo+ICAgIHBoeXNpY2FsbHkgc2VjdXJl ZCBpbnRlcm5hbCBuZXR3b3JrIGJldHdlZW4gdHdvIENETnMgdGhhdCBhcmUgb3duZWQNCj4gICAg YnkgdGhlIHNhbWUgY29ycG9yYXRlIGVudGl0eSkuDQo+IA0KPiAgSSdtIG5vdCBuZWNlc3Nhcmls eSBhZHZvY2F0aW5nIHRoaXMgb3ZlciBhIE1VU1QsIGJ1dCBqdXN0IHB1dHRpbmcgaXQgb3V0IHRo ZXJlLg0KPiANCj4gdGhhbnguDQo+IA0KPiAtLSAgS2V2aW4gSi4gTWENCj4gDQo+PiAtLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4gRnJvbTogQ0ROaSBbbWFpbHRvOmNkbmktYm91bmNlc0Bp ZXRmLm9yZ10gT24gQmVoYWxmIE9mIFJvYiBNdXJyYXkNCj4+IFNlbnQ6IEZyaWRheSwgSmFudWFy eSAxNSwgMjAxNiA1OjA0IFBNDQo+PiBUbzogY2RuaUBpZXRmLm9yZw0KPj4gU3ViamVjdDogW0NE TmldIFVzZSBvZiBUTFMgaW4gQ0ROSQ0KPj4gDQo+PiBIaSBhbGwsDQo+PiANCj4+IFNldmVyYWwg Y29tbWVudHMgY2FtZSBvdXQgb2YgdGhlIHNlY2RpciBhbmQgSUVTRyByZXZpZXdzIG9mIHRoZSBD SS9UIGRyYWZ0DQo+PiByZWdhcmRpbmcgdGhlICJTZWN1cml0eSBDb25zaWRlcmF0aW9ucyIgdGV4 dC4gV2UndmUgdXNlZCBzaW1pbGFyIHRleHQgaW4NCj4+IHRoZSBMb2dnaW5nLCBSZWRpcmVjdGlv biBhbmQgTWV0YWRhdGEgZHJhZnRzLiBJJ3ZlIGNvbGxlY3RlZCB0aGUgY29tbWVudHMNCj4+IHRv Z2V0aGVyIGJlbG93Lg0KPj4gDQo+PiBUaGUgcGFydGljdWxhcmx5LWNvbnRlbnRpb3VzIHBhcmFn cmFwaCBpbiBDSS9UIGlzOg0KPj4gDQo+PiAgIEluIGFuIGVudmlyb25tZW50IHdoZXJlIGFueSBz dWNoIHByb3RlY3Rpb24gaXMgcmVxdWlyZWQsIG11dHVhbGx5DQo+PiAgIGF1dGhlbnRpY2F0ZWQg ZW5jcnlwdGVkIHRyYW5zcG9ydCBNVVNUIGJlIHVzZWQgdG8gZW5zdXJlDQo+PiAgIGNvbmZpZGVu dGlhbGl0eSBvZiB0aGUgQ0kvVCBpbmZvcm1hdGlvbi4gIFRvIHRoYXQgZW5kLCBUTFMgTVVTVCBi ZQ0KPj4gICB1c2VkIGJ5IENJL1QsIGluY2x1ZGluZyBhdXRoZW50aWNhdGlvbiBvZiB0aGUgcmVt b3RlIGVuZC4NCj4+IA0KPj4gTG9va3MgbGlrZSBJIHBpY2tlZCBhbiBvbGRlciB2ZXJzaW9uIG9m IHRoZSB0ZXh0IHRoYW4gTG9nZ2luZyAvDQo+PiBSZWRpcmVjdGlvbiAvIE1ldGFkYXRhLCBvciBt ZXNzZWQgaXQgdXAgc29tZWhvdy4gVGhvc2UgZHJhZnRzIGV4cGFuZCBhDQo+PiBsaXR0bGUgb24g YXV0aCBvZiB0aGUgcmVtb3RlIGVuZCwgZm9yIGV4YW1wbGUsIExvZ2dpbmc6DQo+PiANCj4+ICAg SW4gYW4gZW52aXJvbm1lbnQgd2hlcmUgYW55IHN1Y2ggcHJvdGVjdGlvbiBpcyByZXF1aXJlZCwg bXV0dWFsbHkNCj4+ICAgYXV0aGVudGljYXRlZCBlbmNyeXB0ZWQgdHJhbnNwb3J0IE1VU1QgYmUg dXNlZCB0byBlbnN1cmUNCj4+ICAgY29uZmlkZW50aWFsaXR5IG9mIHRoZSBsb2dnaW5nIGluZm9y bWF0aW9uLiAgVG8gdGhhdCBlbmQsIFRMUyBNVVNUIGJlDQo+PiAgIHVzZWQgKGluY2x1ZGluZyBh dXRoZW50aWNhdGlvbiBvZiB0aGUgcmVtb3RlIGVuZCkgYnkgdGhlIHNlcnZlci1zaWRlDQo+PiAg IGFuZCB0aGUgY2xpZW50LXNpZGUgb2YgdGhlIENETkkgTG9nZ2luZyBmZWVkLCBhcyB3ZWxsIGFz IHRoZSBzZXJ2ZXItDQo+PiAgIHNpZGUgYW5kIHRoZSBjbGllbnQtc2lkZSBvZiB0aGUgQ0ROSSBM b2dnaW5nIEZpbGUgcHVsbCBtZWNoYW5pc20uDQo+PiANCj4+IEJ1dCB0aGUgcHJvYmxlbSBpcyB3 aXRoICJJbiBhbiBlbnZpcm9ubWVudCB3aGVyZSBhbnkgc3VjaCBwcm90ZWN0aW9uIGlzDQo+PiBy ZXF1aXJlZCwgWy4uLl0iLg0KPj4gDQo+PiBXZSBuZWVkIHRvIGJlIG1vcmUgY2xlYXIgYWJvdXQg d2hlbiBUTFMgaXMgbmVlZGVkIC0gcGVyaGFwcyBieSBtYWtpbmcgaXQgYQ0KPj4gU0hPVUxEIGFu ZCBsaXN0aW5nIGV4Y2VwdGlvbnMgYXMgQWxpc3NhIHN1Z2dlc3RzLCBvciBqdXN0IHNheWluZyBN VVNUIHVzZQ0KPj4gVExTLg0KPj4gDQo+PiBBcyBmYXIgYXMgSSBjYW4gcmVtZW1iZXIsIHdlIHRo b3VnaHQgd2UnZCBoYXZlIHRoZSBvcHRpb24gb2Ygbm90IHVzaW5nIFRMUw0KPj4gZm9yIGNhc2Vz IHdoZXJlIHRoZSBJbnRlcm5ldCdzIG5vdCBiZWluZyB1c2VkIGZvciB0aGVzZSBpbnRlcmZhY2Vz IChmb3INCj4+IGV4YW1wbGUsIHdoZW4gdGhlcmUncyBhIHByaXZhdGUgbmV0d29yayAvIFZQTiku DQo+PiANCj4+IEluIGFsbCBvZiB0aGVzZSBkcmFmdHMgd2Ugc2F5IHRoZSBpbnRlcmZhY2UgTVVT VCBzdXBwb3J0IFRMUyAoYW5kIHdlIGRvbid0DQo+PiBzYXkgaXQgTVVTVCBzdXBwb3J0IHBsYWlu LXRleHQpLg0KPj4gDQo+PiBUaGUgb3ZlcmhlYWQgb2YgYWN0dWFsbHkgdXNpbmcgVExTLCBwYXJ0 aWN1bGFybHkgY29ubmVjdGlvbiBzZXR1cA0KPj4gb3ZlcmhlYWQsIHByb2JhYmx5IGlzbid0IGEg YmlnIGNvbmNlcm4gYXMgdGhlIGNvbm5lY3Rpb25zIGFyZSBhbGwgbGlrZWx5DQo+PiB0byBiZSBw ZXJzaXN0ZW50KD8pLiBTbywgZm9yIHRoZSBiZXN0IGNoYW5jZSBvZiBpbnRlcndvcmtpbmcsIGFu ZCB0byBrZWVwDQo+PiB0aGluZ3Mgc2ltcGxlLCBJIHRoaW5rIG15IHByZWZlcmVuY2UgaXMgdG8g cmVtb3ZlIHRoZSBhbWJpZ3VpdHkgYnkganVzdA0KPj4gc2F5aW5nIE1VU1QgdXNlIFRMUy4NCj4+ IA0KPj4gQW55IHRob3VnaHRzPw0KPj4gDQo+PiBNYW55IHRoYW5rcywNCj4+IFJvYi4NCj4+IA0K Pj4gLS0tLQ0KPj4gDQo+PiBWaW5jZW50IFJvY2EgPHZpbmNlbnQucm9jYUBpbnJpYS5mcj4gKHNl Y2RpciByZXZpZXcpDQo+PiANCj4+Pj4gDQo+Pj4+IFRoZXJlIGFyZSBzZXZlcmFsIHRvcGljcyBJ 4oCZZCBsaWtlIHRvIGRpc2N1c3M6DQo+Pj4+IDEtIENvbmNlcm5pbmcgdGhlIHVzZSBvZiBUTFMg dG8gY2FycnkgQ0kvVCB0cmFmZmljLCBJIHNlZSBpdCBpcw0KPj4gbWFuZGF0b3J5DQo+Pj4+IHRv IGltcGxlbWVudCwgYnV0IHN0aWxsIG9wdGlvbmFsIHRvIHVzZSAoMXN0IHNlbnRlbmNlIG9mIFNl Y3Rpb24gOC4xKS4NCj4+IElzDQo+Pj4+IGl0IHN0aWxsIHJlYXNvbmFibGUgaW4gY3VycmVudCBJ bnRlcm5ldD8gQXQgYSBtaW5pbXVtIEkgd291bGQgZXhwZWN0IGENCj4+Pj4gwqsgTVVTVCBzdXBw b3J0IMK7IC8gwqsgU0hPVUxEIHVzZSDCuy4NCj4+PiBTZWN0aW9uIDguMSBnb2VzIG9uIHRvIHNh eSAuLi4NCj4+PiAgWyAuLi4gZGVzY3JpcHRpb24gb2YgYmVuZWZpdHMgb2YgSFRUUFMgLi4uIF0N Cj4+PiAgSW4gYW4gZW52aXJvbm1lbnQgd2hlcmUgYW55IHN1Y2ggcHJvdGVjdGlvbiBpcyByZXF1 aXJlZCwgbXV0dWFsbHkNCj4+PiAgYXV0aGVudGljYXRlZCBlbmNyeXB0ZWQgdHJhbnNwb3J0IE1V U1QgYmUgdXNlZCB0byBlbnN1cmUNCj4+PiAgY29uZmlkZW50aWFsaXR5IG9mIHRoZSBDSS9UIGlu Zm9ybWF0aW9uLiBUbyB0aGF0IGVuZCwgVExTIE1VU1QgYmUNCj4+PiAgdXNlZCBieSBDSS9ULCBp bmNsdWRpbmcgYXV0aGVudGljYXRpb24gb2YgdGhlIHJlbW90ZSBlbmQuDQo+Pj4gLi4uIHRoZSBJ bnRlcm5ldCBpcyBjbGVhcmx5IGFuIGVudmlyb25tZW50IHdoZXJlIHN1Y2ggcHJvdGVjdGlvbiBp cw0KPj4+IHJlcXVpcmVkLCBhbmQgaXQnbGwgb2Z0ZW4gYmUgdXNlZCBmb3IgdGhlc2UgaW50ZXJm YWNlcyAtIHdlIGNvdWxkIHN0YXRlDQo+Pj4gdGhhdCBleHBsaWNpdGx5LCB3b3VsZCB0aGF0IGFk ZHJlc3MgdGhlIGNvbmNlcm4/DQo+Pj4gQnV0LCBDSS9UIGNvdWxkIGFsc28gYmUgZGVwbG95ZWQg dG8gcnVuIG92ZXIgYSBWUE4gb3IgcHJpdmF0ZSBuZXR3b3JrDQo+Pj4gYmV0d2VlbiB0d28gaW50 ZXJjb25uZWN0ZWQgQ0ROcywgaW4gc3VjaCBhbiBlbnZpcm9ubWVudCBIVFRQUyB0cmFuc3BvcnQN Cj4+PiB3b3VsZCBub3QgaGF2ZSB0aGUgc2FtZSBiZW5lZml0cy4NCj4+IA0KPj4gWWVzLCB0aGF0 4oCZcyBteSBwb2ludC4gU2F5IGV4cGxpY2l0bHkgdGhhdCBJbnRlcm5ldCBpcyBhbiBleGFtcGxl IG9mDQo+PiBlbnZpcm9ubWVudCB3aGVyZQ0KPj4gc3VjaCBhIHByb3RlY3Rpb24gaXMgbWFuZGF0 b3J5Lg0KPj4gDQo+PiAtLS0tDQo+PiANCj4+IEJlbiBDYW1wYmVsbCA8YmVuQG5vc3RydW0uY29t Pg0KPj4gDQo+PiAtIDguMSwgIDR0aCBwYXJhZ3JhcGggZnJvbSB0aGUgZW5kOg0KPj4gVGhlIGxh bmd1YWdlIGhlcmUgaXMgYW1iaWd1b3VzIGFib3V0IHdoZXRoZXIgdGhlIHVzZSBvZiBUTFMgaXMg X2Fsd2F5c18NCj4+IHJlcXVpcmVkLCBvciBqdXN0IHdoZW4gInN1Y2ggcHJvdGVjdGlvbiBpcyBy ZXF1aXJlZC4iIEZyb20gY29udGV4dCwgSQ0KPj4gYXNzdW1lIHRoZSBsYXR0ZXIgdG8gYmUgdGhl IGNhc2UuIEJ1dCAiVG8gdGhhdCBlbmQuLi4iIGNhbiBiZSBpbnRlcnByZXRlZA0KPj4gdG8gbWVh biAiSW4gdGhhdCBjYXNlLCBvbmUgTVVTVCBkbyBYIiwgb3IgdG8gbWVhbiAiSW4gb3JkZXIgdG8g bWFrZSB0aGF0DQo+PiBwb3NzaWJsZSB3aGVuIG5lZWRlZCwgb25lIE1VU1QgX2Fsd2F5c18gZG8g WCINCj4+IA0KPj4gSSBwcm9wb3NlIHRoZSBmb2xsb3dpbmc6DQo+PiBPTEQ6DQo+PiAgIEluIGFu IGVudmlyb25tZW50IHdoZXJlIGFueSBzdWNoIHByb3RlY3Rpb24gaXMgcmVxdWlyZWQsIG11dHVh bGx5DQo+PiAgIGF1dGhlbnRpY2F0ZWQgZW5jcnlwdGVkIHRyYW5zcG9ydCBNVVNUIGJlIHVzZWQg dG8gZW5zdXJlDQo+PiAgIGNvbmZpZGVudGlhbGl0eSBvZiB0aGUgQ0kvVCBpbmZvcm1hdGlvbi4g IFRvIHRoYXQgZW5kLCBUTFMgTVVTVCBiZQ0KPj4gICB1c2VkIGJ5IENJL1QsIGluY2x1ZGluZyBh dXRoZW50aWNhdGlvbiBvZiB0aGUgcmVtb3RlIGVuZC4NCj4+IE5FVzoNCj4+ICAgSW4gYW4gZW52 aXJvbm1lbnQgd2hlcmUgYW55IHN1Y2ggcHJvdGVjdGlvbiBpcyByZXF1aXJlZCwgbXV0dWFsbHkN Cj4+ICAgYXV0aGVudGljYXRlZCBhbmQgZW5jcnlwdGVkIFRMUyBNVVNUIGJlIHVzZWQgdG8gZW5z dXJlDQo+PiAgIGNvbmZpZGVudGlhbGl0eSBvZiB0aGUgQ0kvVCBpbmZvcm1hdGlvbi4NCj4+IEVO RC4NCj4+IA0KPj4gW2FuZC4uLl0NCj4+IA0KPj4gRm9yIHRoZSByZWNvcmQsIG15IHByb3Bvc2Vk IHRleHQgYXNzdW1lZCB0aGUgaW50ZW50IHdhcyBmb3IgYQ0KPj4gY29uZGl0aW9uYWwgIk1VU1Qg dXNlIFRMUyIuIElmIHRoZSBhbnN3ZXIgdHVybmVkIG91dCB0byBiZSAiYWx3YXlzDQo+PiBNVVNU IiwgSSB3b3VsZCBjZXJ0YWlubHkgbm90IG9iamVjdC4NCj4+IA0KPj4gLS0tLQ0KPj4gDQo+PiBB bGlzc2EgQ29vcGVyIDxhbGlzc2FAY29vcGVydy5pbj4NCj4+IA0KPj4gSSBoYWQgdGhlIHNhbWUg Y29uZnVzaW9uIGFzIEJlbiBhbmQgdGhlIHNlY2RpciByZXZpZXdlciBjb25jZXJuaW5nDQo+PiB3 aGV0aGVyIFRMUyBpcyBhbHdheXMgcmVxdWlyZWQgdG8gdXNlIG9yIG5vdC4gSWYgdGhlcmUgYXJl IGNhc2VzIGluIHdoaWNoDQo+PiBUTFMgaXMgbm90IG1hbmRhdG9yeSB0byB1c2UsIHRoZW4gSSB0 aGluayB0aGlzIHNob3VsZCBiZSBwaHJhc2VkIGFzIGENCj4+IFNIT1VMRCB3aXRoIHRoZSBleGNl cHRpb25zIGNsZWFybHkgZW51bWVyYXRlZC4gRm9yIGV4YW1wbGUsIGl0J3Mgbm90DQo+PiBjbGVh ciB0byBtZSB3aGV0aGVyIHRoZSBvbmx5IGV4Y2VwdGlvbiBpcyBlbnZpcm9ubWVudHMgd2hlcmUg ZXF1aXZhbGVudA0KPj4gcHJvdGVjdGlvbnMgYXJlIGFmZm9yZGVkIGJ5IGEgZGlmZmVyZW50IHBy b3RvY29sLCBvciBpZiBqdXN0IGJlaW5nIHdpdGhpbg0KPj4gYSBzaW5nbGUgYWRtaW5pc3RyYXRp dmUgZG9tYWluIGlzIGNvbnNpZGVyZWQgcHJvdGVjdGlvbiBlbm91Z2ggKG5vdCBzdXJlDQo+PiBJ IGFncmVlIHdpdGggdGhlIGxhdHRlcikuDQo+PiANCj4+IC0tLS0NCj4+IA0KPj4gS2F0aGxlZW4g TW9yaWFydHkgPEthdGhsZWVuLk1vcmlhcnR5LmlldGZAZ21haWwuY29tPg0KPj4gDQo+PiBJJ20g YSBubyBvYmplY3Rpb24sIGJ1dCBkbyB3YW50IHRvIHNlZSB3aHkgVExTIGlzIG5vdCBhIE1VU1Qu IEkndmUNCj4+IHJlc3BvbmRlZCB0byBCZW4ncyBkaXNjdXNzIHRoYXQgcHJvcG9zZXMgbGFuZ3Vh Z2UgdG8gbWFrZSBpdCBjbGVhcg0KPj4gd2hldGhlciBvciBub3QgVExTIGlzIGEgTVVTVC4gUmln aHQgbm93LCBJIHRoaW5rIGl0IGlzIGp1c3QgYSBNVVNUIHdoZW4NCj4+IGNlcnRhaW4gY29uZGl0 aW9ucyBhcmUgbWV0IC0gdGhlIG5lZWQgZm9yIHRoZSBzZWN1cml0eSBwcm9wZXJ0aWVzIGNhbGxl ZA0KPj4gb3V0IGluIDguMSBhbmQgY29tbWVyY2lhbCBwcml2YWN5IGNvbnNpZGVyYXRpb25zIGlu IDguMy4NCj4+IA0KPj4gDQo+PiBbYW5kLCBpbiByZXBseSB0byBCZW4gQ2FtcGJlbGwncyBESVND VVNTXQ0KPj4gDQo+PiBJJ20gaW50ZXJlc3RlZCB0byBzZWUgdGhlIHJlc3BvbnNlIG9uIHRoaXMg ZGlzY3Vzcy4gIEZyb20gcmVhZGluZyB0aGUNCj4+IFNlY3VyaXR5IENvbnNpZGVyYXRpb25zLCBJ IHRob3VnaHQgdGhhdCBUTFMgd291bGQgYmUgcmVxdWlyZWQgZm9yIHRoZQ0KPj4gY29tbWVyY2lh bCBjb25maWRlbnRpYWxpdHkgY29uY2VybnMgY2l0ZWQgaW4gOC4zIGFuZCB0byBwcm92aWRlIHRo ZQ0KPj4gc2VjdXJpdHkgcHJvcGVydGllcyBjaXRlZCBpbiA4LjEuDQo+PiANCj4+IEkgYWdyZWUg d2l0aCBCZW4gdGhhdCB0aGUgbGFuZ3VhZ2UgZ29lcyBiYWNrIGFuZCBmb3J0aCBhIGJpdCBhcyB0 bw0KPj4gd2hldGhlciBvciBub3QgaXQgaXMgcmVxdWlyZWQgKEknZCBwcmVmZXIgdG8gc2VlIGl0 IHJlcXVpcmVkLg0KPj4gSG93ZXZlciwgdGhlcmUgaXMgZW5vdWdoIGxhbmd1YWdlIHRvIHN1Z2dl c3QgdGhhdCBpdCBpcyBqdXN0IHJlcXVpcmVkDQo+PiB3aGVuIHNwZWNpZmljIGNvbmRpdGlvbnMg YXJlIG1ldC4gIElmIHRoZXJlIGlzIGEgZ29vZCBhcmd1bWVudCB0byBrZWVwDQo+PiBpdCBhcy1p cywgQmVuJ3Mgc3VnZ2VzdGVkIGxhbmd1YWdlIGhlbHBzIGNsZWFyIHVwIGFueSBjb25mdXNpb24s IGJ1dA0KPj4gSSdkIGxpa2UgdG8gbWFrZSBzdXJlIHRoYXQgdGhlcmUgaXMgYSBnb29kIHJlYXNv biB0byBub3QgaGF2ZSB0aGlzIGJlDQo+PiBhIE1VU1QgdXNlIFRMUy4NCj4+IA0KPj4gSSdtIGdv aW5nIHRvIGp1c3QgdGFjayB0aGlzIG9udG8gQmVuJ3MgZGlzY3VzcyBhcyBJIHNob3VsZCBiZSBv bg0KPj4gbWF0ZXJuaXR5IGxlYXZlIHNvb24gYW5kIGRvbid0IHdhbnQgdG8gaG9sZCB1cCB0aGUg ZHJhZnQgd2hpbGUgSSBhbQ0KPj4gb3V0IGlmIHRoaXMgaXNuJ3QgcmVzb2x2ZWQgcXVpY2tseS4N Cj4+IA0KPj4gLS0tLQ0KPj4gDQo+PiBTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW4uZmFycmVsbEBj cy50Y2QuaWU+DQo+PiANCj4+IC0gSSBhZ3JlZSB3aXRoIHRoZSBkaXNjdXNzIHBvaW50cyBhYm91 dCB1c2Ugb2YgVExTLg0KPj4gDQo+PiAtIEkgdGhpbmsgaXQnZCBiZSBiZXR0ZXIgaWYgeW91IGNs YXJpZmllZCB0aGF0IGJ5DQo+PiAibXV0dWFsbHkgYXV0aGVudGljYXRlZCIgeW91IG1lYW4gVExT IGNsaWVudCBhdXRoIGFuZA0KPj4gVExTIHNlcnZlciBhdXRoIGFuZCBub3QgZS5nLiBIVFRQIEJB U0lDIHBsdXMgVExTIHNlcnZlcg0KPj4gYXV0aC4NCj4+IA0KPj4gLS0tLQ0KPj4gDQo+PiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gQ0ROaSBtYWls aW5nIGxpc3QNCj4+IENETmlAaWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vY2RuaQ0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KPiBDRE5pIG1haWxpbmcgbGlzdA0KPiBDRE5pQGlldGYub3JnDQo+IGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY2RuaQ0KDQo= From nobody Mon Jan 25 19:00:50 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64CD21AD074; Mon, 25 Jan 2016 19:00:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.099 X-Spam-Level: X-Spam-Status: No, score=-0.099 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TUOj2mSsAlNJ; Mon, 25 Jan 2016 19:00:42 -0800 (PST) Received: from mail-yk0-x233.google.com (mail-yk0-x233.google.com [IPv6:2607:f8b0:4002:c07::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36EB51AD065; Mon, 25 Jan 2016 19:00:39 -0800 (PST) Received: by mail-yk0-x233.google.com with SMTP id a85so185500529ykb.1; Mon, 25 Jan 2016 19:00:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=aX69fRAsKAPZgDljKPbho3b2yQlag55lik+MSpKR9PU=; b=EDCbYd1H/kETesTpWzNqRlXy/wGbuPbBqSf0sGrtmDayiOM3yQTLTOwUrnMMFnzEgw mDnMKAUyXTH79hGjibxe6DDcnRaVIo9iSg5+MZVhzZB0K+UoTiQXiQI+SFx9QQTafZzp HxzqF0dBCA457Jug9N1i/j7Usc6bjlhJDLl+TVebAqPo0cIMLSuPh0fGpDKtnumcRCWL NgCmGi/n61xbtNQ27JdJQ6v9SH5oF19DFOO9mO8TlrxgGA6OwscBqh0v+Yc3Z8Sf6N1Y E8sqf13uPBYRaD7i9nrizg1fTlRtru9PLIyvtGH+zhQ5UEmoBG2ozr60xUrhgq9/zKT4 9c9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=aX69fRAsKAPZgDljKPbho3b2yQlag55lik+MSpKR9PU=; b=M428Bm62jKnIO48HOf0+IxxPgyWPXPsk5By19d/TKP+tSflsEDNG52GvNQtumouIqg BcvheTeX7LC45miu+tTGetfHKVBFFJXdeb70gDRXueMmqqcLaEwHbxRHqXF08BSnEOCA VNUGklwxRm3COZZ9gpv7jsyug6pgQGK86ThMs89CgV7XXXPPptPc2JEOfJVJbbC3Yce1 0z5EIJDSnvi4TiDucm6Zb9DTzX/6uoFWWiMVSn/HqErijXSYt3ZBWx2PgBKwSInLw87/ sKqYRk/H6R+VSx9q/1uJvAhTR+tEBHTzkKs49itMk6ixdr+20snBDwHGrXCSMKHwX10V CG4g== X-Gm-Message-State: AG10YOTncjFbVgSiyRqZNkwNaFVQ6ukn188fy9NJdLGmNVldeJdSfqIbk7GchZ2FHf+1ABizCaI13zEsFh0AwA== MIME-Version: 1.0 X-Received: by 10.129.88.215 with SMTP id m206mr11246898ywb.78.1453777238448; Mon, 25 Jan 2016 19:00:38 -0800 (PST) Received: by 10.37.99.65 with HTTP; Mon, 25 Jan 2016 19:00:38 -0800 (PST) In-Reply-To: <56520141.8010806@cs.tcd.ie> References: <20151109165118.779.25437.idtracker@ietfa.amsl.com> <50381CDF-6A40-4447-846F-217E31934D6A@cisco.com> <56520141.8010806@cs.tcd.ie> Date: Mon, 25 Jan 2016 21:00:38 -0600 Message-ID: From: Spencer Dawkins at IETF To: Stephen Farrell Content-Type: multipart/alternative; boundary=001a11492696e163b1052a33e321 Archived-At: Cc: "draft-ietf-cdni-logging@ietf.org" , "cdni-chairs@ietf.org" , The IESG , "cdni@ietf.org" Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-logging-21: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jan 2016 03:00:46 -0000 --001a11492696e163b1052a33e321 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, Francois, On Sun, Nov 22, 2015 at 11:54 AM, Stephen Farrell wrote: > > Hiya, > > Sure placing the text wherever makes sense if of course > fine, > > Cheers, > S > > On 22/11/15 16:57, Francois Le Faucheur (flefauch) wrote: > > Hello Stephen. > > > > Thanks for this update to your DISCUSS and COMMENTS. > > It all makes sense. Specific responses/resolution discussed below: > If I'm following this correctly, you and Stephen have closed on resolutions for his DISCUSS and COMMENTS. Could you let me know when I should expect a revised draft? I would love to finish this up. Thanks! Spencer > > (5) I'm not clear why you need to be able to send HTTP header > > values or session IDs via this i/f. Why is that needed? And > > it seems very dangerous, e.g. "cs(COOKIE)" could be a doosy. > > I would suggest adding new text in section 3.4 to cover all > > of the log content basically saying that you really need to > > know what you're doing or you can break security very easily. > > > > That makes sense. > > > > Some suggested text that could be added to the end of 3.4 > > just before the start of 3.4.1: > > > > Since the text below is specific to HTTP, I would lean for including it > under 3.4.1 ("HTTP Request Logging Record=E2=80=9D) rather than under 3.4= which is > meant to apply to any log (possibly of other protocols than HTTP). > > > > There is a discussion under 3.4.1 about which fields MUSt be included > and which one MAY. I think right after that would be an ideal place to ad= d > the text below. > > > > Let me know if that does not work. > > > > > > > > "Logging fields > > > > s/Logging fields/Logging some fields/ > > since some fields are not very dangerous. > > > > from HTTP requests and responses can be > > very dangerous. For example, cookies will often contain > > (months) long lived bearer token > > > > This is a bit beyond my expertise, but I wonder if =E2=80=9Cbearer=E2= =80=9D is needed > here: > > s/bearer token/token/ ? > > because I think the discussion here is meant to be generic while "beare= r > token" is a specific form of token. > > Or is =E2=80=9Cbearer token=E2=80=9D really the appropriate term in thi= s generic > sentence? > > > > values that can be used > > to login to a service as the relevant user. Similar values > > may be included in other header fields or within URLs or > > elsewhere in HTTP requests and responses. Centralising > > such values in a log > > > > s/log/CDNI Logging File/ > > > > can therefore represent a significant > > increase in risk both for the user and the web service > > provider, but also for the CDNs involved. Implementations > > ought therefore attempt to lower the probability of such > > bad outcomes e.g. by only allowing a configured set of > > headers to be added to logs > > > > s/logs/CDNI Logging Records/ > > > > , or by not supporting wildcard > > selection of HTTP request/response fields to add. Such > > mechanisms can reduce the probability that security (or > > privacy) sensitive values are centralised in logs.=E2=80=9D > > > > s/logs/CDNI Logging Files/ > > > > I suggest that , in addition to recommendations for implementations, we > also add recommendations for CDN operators: > > =E2=80=9CSimilarly, when agreeing on which HTTP request/response fields= are to > be provided in CDNI Logging Files, the uCDN and dCDN administrators ought > to consider these risks." > > > > > > > > I'm sure that can be improved on, and have no problem with > > any specific better words. > > > > (6) cleared > > > > (7) cleared > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > > > - in the description of c-groupid, "the address > > with a shared secret that is pre-synchronised > > and rotated at a predefined time interval" isn't > > very clear. I know what you mean but I don't > > think you state it very clearly. Could be that a > > bit of text earlier in the document that describes > > the basic idea would be better than doing it all > > inline as you have in -21. > > > > Right. > > We need to do some word tweaking on this anyways, so we=E2=80=99ll try = address > that. > > > > > > OLD COMMENTS Below, not updated for -21, I didn't > > check if you took 'em on board, feel free to chat about > > 'em if that's useful - I'm happy to do so anyway. > > > > Those have been addressed in earlier versions. > > > > Here is the message I sent about those back in July in case you want to > check the detailed resolution: > > > > > > From: Francois Le Faucheur >> > > Subject: Re: Stephen Farrell's Discuss on draft-ietf-cdni-logging-15: > (with DISCUSS and COMMENT) > > Date: 19 July 2015 18:39:38 CEST > > To: Stephen Farrell stephen.farrell@cs.tcd.ie>> > > Cc: Le Faucheur Francois = >, > The IESG >, cdni-chairs@ietf.org > , draft-ietf-cdni-logging@ietf.org draft-ietf-cdni-logging@ietf.org> > > > > Hi Stephen, > > > > Responses to the COMMENT part below: > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > > > - I support Richard's discuss. Isn't it ironic that the dCDN's > > privacy (that of a company) is better supported than that of > > the end user (a person) > > > > With anonymization now being a SHOULD, I thought Richard=E2=80=99s DISC= USS was > addressed (apart from the potential need to add port anonymization as > discussed separately for your own DISCUSS). > > > > > > - 2.2.1 - why is per-chunk always needed? > > > > Aggregated logs for segmented content is a tricky concept, for which > there is no standard today and many potential ways to do it, and which th= e > Working Group has elected to keep for a next version of the logging spec > (just so that we can come up with a base CDNI logging spec _relatively_ > quickly ). > > So the only sure way to support interoperabilty across CDNs for logs of > segmented content is to provide per-chunk log, hence the statement that > those always need to be generated. > > > > > > > > - 2.2.5.3: what's "track audience" mean? > > > > This terminology is likely inherited from the TV/Video era, meaning in > particular tracking how big a population watches which movie/video. > > Given the more general applicability here, how about we replace by > something like =E2=80=9Cdevelop statistics on content download=E2=80=9D? > > > > > > - 2.2.5.4: there are more security goals in the universe > > > > Certainly, but this is not a Security Considerations section: section > 2.2.5 discussing Log Consuming applications. And 2.2.5.4 is discussing on= e > such application which is to detect violation of content access policy. > > > > > > - 2.2.5.4: seems like the user is the enemy, that's odd > > > > With respect to Content Protection (the subject of 2.2.5.4) unauthorise= d > user is indeed the enemy, aiming at stealing some content from the CDNs. > > > > > > - 2.2.5.6.2: there is no "browser type header" that I know of, > > but there is the well-known UA string. Being specific about > > that is better. > > > > This is fixed in -19 which now says: > > "Terminal type (mobile, PC, STB, if this information can be > > acquired from the browser type inferred from the User Agent > > string, for example). > > " > > > > - 3.1: SS.S - does that imply a time granularity of 100ms? If > > so, please say so. > > > > As a result of another IESG review comment, we have replaced our own > definition of time by a reference to RFC3339. > > > > =E2=80=9C > > TIME =3D 2DIGIT ":" 2DIGIT ":" 2DIGIT ["." *DIGIT] > > ; Times are encoded as "partial-time" specified in [RFC3339]. > > " > > > > So that point should be fixed already. > > > > > > > > - 3.4.4: cs-uri: please not that these can be privacy > > sensitive, though presumably less so than e.g. logged URIs on > > a search engine. > > > > Is this just for our information or do you recommend that we add a > statement about the fact that cs-uri can be privacy sensitive? > > If IP/ports are anonymised, is cs-uri still privacy sensitive (is this > in case the uri itself contains some information that can be traced back = to > a given end-user? > > > > > > > > - 3.4.4: foo-uri: do these contain fragments or not? > > > > In a per-chunk log (which is specified in this document as the > interoperable mechanism to exchange logs for fragmented content), the uri > contains the URI of each specific fragment. > > In an aggregated log for a segmented content delivery (which is not > specified in this document), there are many potential options (URI of fir= st > segment, URI of the playlist, part of the URI common to all segments,=E2= =80=A6.). > This is one of the complexities of specifying aggregated logs for segment= ed > content. > > > > > > > > > > - I support Richard's discuss. Isn't it ironic that the dCDN's > > privacy (that of a company) is better supported than that of > > the end user (a person) > > > > - 2.2.1 - why is per-chunk always needed? > > > > - 2.2.5.3: what's "track audience" mean? > > > > - 2.2.5.4: there are more security goals in the universe > > > > - 2.2.5.4: seems like the user is the enemy, that's odd > > > > - 2.2.5.6.2: there is no "browser type header" that I know of, > > but there is the well-known UA string. Being specific about > > that is better. > > > > - 3.1: SS.S - does that imply a time granularity of 100ms? If > > so, please say so. > > > > - 3.4.4: cs-uri: please not that these can be privacy > > sensitive, though presumably less so than e.g. logged URIs on > > a search engine. > > > > - 3.4.4: foo-uri: do these contain fragments or not? > > > > > > > > --001a11492696e163b1052a33e321 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi, Francois,

On Sun, Nov 22, 2015 at 11:54 AM, Stephen Farrell <st= ephen.farrell@cs.tcd.ie> wrote:

Hiya,

Sure placing the text wherever makes sense if of course
fine,

Cheers,
S

On 22/11/15 16:57, Francois Le Faucheur (flefauch) wrote:
> Hello Stephen.
>
> Thanks for this update to your DISCUSS and COMMENTS.
> It all makes sense. Specific responses/resolution discussed below:
=

If I'm following this corr= ectly, you and Stephen have closed on resolutions for his DISCUSS and COMME= NTS.=C2=A0

Could you let me know when I should expect a revised draf= t?

I would love to finish this up.

<= /div>
Thanks!

Spencer
=C2=A0
> (5) I'm not clear why you need to be able to send HTTP header
> values or session IDs via this i/f. Why is that needed? And
> it seems very dangerous, e.g. "cs(COOKIE)" could be a doosy.=
> I would suggest adding new text in section 3.4 to cover all
> of the log content basically saying that you really need to
> know what you're doing or you can break security very easily.
>
> That makes sense.
>
> Some suggested text that could be added to the end of 3.4
> just before the start of 3.4.1:
>
> Since the text below is specific to HTTP, I would lean for including i= t under 3.4.1 ("HTTP Request Logging Record=E2=80=9D) rather than unde= r 3.4 which is meant to apply to any log (possibly of other protocols than = HTTP).
>
> There is a discussion under 3.4.1 about which fields MUSt be included = and which one MAY. I think right after that would be an ideal place to add = the text below.
>
> Let me know if that does not work.
>
>
>
> "Logging fields
>
> s/Logging fields/Logging some fields/
>=C2=A0 =C2=A0 =C2=A0 =C2=A0since some fields are not very dangerous. >
> from HTTP requests and responses can be
> very dangerous. For example, cookies will often contain
> (months) long lived bearer token
>
> This is a bit beyond my expertise, but I wonder if =E2=80=9Cbearer=E2= =80=9D is needed here:
> s/bearer token/token/=C2=A0 ?
> because I think the discussion here is meant to be generic while "= ;bearer token" is a specific form of token.
> Or is =E2=80=9Cbearer token=E2=80=9D really the appropriate term in th= is generic sentence?
>
> values that can be used
> to login to a service as the relevant user. Similar values
> may be included in other header fields or within URLs or
> elsewhere in HTTP requests and responses. Centralising
> such values in a log
>
> s/log/CDNI Logging File/
>
> can therefore represent a significant
> increase in risk both for the user and the web service
> provider, but also for the CDNs involved. Implementations
> ought therefore attempt to lower the probability of such
> bad outcomes e.g. by only allowing a configured set of
> headers to be added to logs
>
> s/logs/CDNI Logging Records/
>
> , or by not supporting wildcard
> selection of HTTP request/response fields to add. Such
> mechanisms can reduce the probability that security (or
> privacy) sensitive values are centralised in logs.=E2=80=9D
>
> s/logs/CDNI Logging Files/
>
> I suggest that , in addition to recommendations for implementations, w= e also add recommendations for CDN operators:
> =E2=80=9CSimilarly, when agreeing on which HTTP request/response field= s are to be provided in CDNI Logging Files, the uCDN and dCDN administrator= s ought to consider these risks."
>
>
>
> I'm sure that can be improved on, and have no problem with
> any specific better words.
>
> (6) cleared
>
> (7) cleared
>
>
> ----------------------------------------------------------------------=
> COMMENT:
> ----------------------------------------------------------------------=
>
>
> - in the description of c-groupid, "the address
> with a shared secret that is pre-synchronised
> and rotated at a predefined time interval" isn't
> very clear. I know what you mean but I don't
> think you state it very clearly. Could be that a
> bit of text earlier in the document that describes
> the basic idea would be better than doing it all
> inline as you have in -21.
>
> Right.
> We need to do some word tweaking on this anyways, so we=E2=80=99ll try= address that.
>
>
> OLD COMMENTS Below, not updated for -21, I didn't
> check if you took 'em on board, feel free to chat about
> 'em if that's useful=C2=A0 - I'm happy to do so anyway. >
> Those have been addressed in earlier versions.
>
> Here is the message I sent about those back in July in case you want t= o check the detailed resolution:
>
>
> From: Francois Le Faucheur <flefauch@cisco.com<mailto:flefauch@cisco.com>>
> Subject: Re: Stephen Farrell's Discuss on draft-i= etf-cdni-logging-15: (with DISCUSS and COMMENT)
> Date: 19 July 2015 18:39:38 CEST
> To: Stephen Farrell <stephen.farrell@cs.tcd.ie<mailto:stephen.farrell@cs.tcd.ie>>
> Cc: Le Faucheur Francois <fle= fauch@cisco.com<mailto:flefauc= h@cisco.com>>, The IESG <iesg= @ietf.org<mailto:iesg@ietf.org&= gt;>, cdni-chairs@ietf.org&l= t;mailto:cdni-chairs@ietf.org&g= t;, draft-ietf-cdni-log= ging@ietf.org<mailto:draft-ietf-cdni-logging@ietf.org>
>
> Hi Stephen,
>
> Responses to the COMMENT part below:
>
>
>
> ----------------------------------------------------------------------=
> COMMENT:
> ----------------------------------------------------------------------=
>
>
> - I support Richard's discuss. Isn't it ironic that the dCDN&#= 39;s
> privacy (that of a company) is better supported than that of
> the end user (a person)
>
> With anonymization now being a SHOULD, I thought Richard=E2=80=99s DIS= CUSS was addressed (apart from the potential need to add port anonymization= as discussed separately for your own DISCUSS).
>
>
> - 2.2.1 - why is per-chunk always needed?
>
> Aggregated logs for segmented content is a tricky concept, for which t= here is no standard today and many potential ways to do it, and which the W= orking Group has elected to keep for a next version of the logging spec (ju= st so that we can come up with a base CDNI logging spec _relatively_ quickl= y ).
> So the only sure way to support interoperabilty across CDNs for logs o= f segmented content is to provide per-chunk log, hence the statement that t= hose always need to be generated.
>
>
>
> - 2.2.= 5.3: what's "track audience" mean?
>
> This terminology is likely inherited from the TV/Video era, meaning in= particular tracking how big a population watches which movie/video.
> Given the more general applicability here, how about we replace by som= ething like =E2=80=9Cdevelop statistics on content download=E2=80=9D?
>
>
> - 2.2.= 5.4: there are more security goals in the universe
>
> Certainly, but this is not a Security Considerations section: section = 2.2.5 discussing Log Consuming applications. And 2.2.5.4 is discussing one = such application which is to detect violation of content access policy.
>
>
> - 2.2.= 5.4: seems like the user is the enemy, that's odd
>
> With respect to Content Protection (the subject of 2.2.5.4) unauthoris= ed user is indeed the enemy, aiming at stealing some content from the CDNs.=
>
>
> - 2.2.5.6.2: there is no "browser type header" that I know o= f,
> but there is the well-known UA string. Being specific about
> that is better.
>
> This is fixed in -19 which now says:
> "Terminal type (mobile, PC, STB, if this information can be
>=C2=A0 =C2=A0 =C2=A0 acquired from the browser type inferred from the U= ser Agent
>=C2=A0 =C2=A0 =C2=A0 string, for example).
> "
>
> - 3.1: SS.S - does that imply a time granularity of 100ms?=C2=A0 If > so, please say so.
>
> As a result of another IESG review comment, we have replaced=C2=A0 our= own definition of time by a reference to RFC3339.
>
> =E2=80=9C
> TIME =3D 2DIGIT ":" 2DIGIT ":" 2DIGIT [".&quo= t; *DIGIT]
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0; Times are encoded as "partial-= time" specified in [RFC3339].
> "
>
> So that point should be fixed already.
>
>
>
> - 3.4.4: cs-uri: please not that these can be privacy
> sensitive, though presumably less so than e.g.=C2=A0 logged URIs on > a search engine.
>
> Is this just for our information or do you recommend that we add a sta= tement about the fact that cs-uri can be privacy sensitive?
> If IP/ports are anonymised, is cs-uri still privacy sensitive (is this= in case the uri itself contains some information that can be traced back t= o a given end-user?
>
>
>
> - 3.4.4: foo-uri: do these contain fragments or not?
>
> In a per-chunk log (which is specified in this document as the interop= erable mechanism to exchange logs for fragmented content), the uri contains= the URI of each specific fragment.
> In an aggregated log for a segmented content delivery (which is not sp= ecified in this document), there are many potential options (URI of first s= egment, URI of the playlist, part of the URI common to all segments,=E2=80= =A6.). This is one of the complexities of specifying aggregated logs for se= gmented content.
>
>
>
>
> - I support Richard's discuss. Isn't it ironic that the dCDN&#= 39;s
> privacy (that of a company) is better supported than that of
> the end user (a person)
>
> - 2.2.1 - why is per-chunk always needed?
>
> - 2.2.= 5.3: what's "track audience" mean?
>
> - 2.2.= 5.4: there are more security goals in the universe
>
> - 2.2.= 5.4: seems like the user is the enemy, that's odd
>
> - 2.2.5.6.2: there is no "browser type header" that I know o= f,
> but there is the well-known UA string. Being specific about
> that is better.
>
> - 3.1: SS.S - does that imply a time granularity of 100ms?=C2=A0 If > so, please say so.
>
> - 3.4.4: cs-uri: please not that these can be privacy
> sensitive, though presumably less so than e.g.=C2=A0 logged URIs on > a search engine.
>
> - 3.4.4: foo-uri: do these contain fragments or not?
>
>
>


--001a11492696e163b1052a33e321-- From nobody Wed Jan 27 08:53:50 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4111E1A9031; Wed, 27 Jan 2016 08:53:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yQDZRJYCRsRJ; Wed, 27 Jan 2016 08:53:40 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD46C1A9034; Wed, 27 Jan 2016 08:53:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=36822; q=dns/txt; s=iport; t=1453913619; x=1455123219; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=xI8sRH5DPn3gPN7Tuvmkl22f568iov6NaqsS/+GWQqw=; b=nHZrL6tTldr8esRojtUOK0aXoSYN750L0nUlJ3ENq68W1bOvOoxqPMz5 HU4JgNZMWMPLu33Ho0SqXLM7VcXTZt67tRPBFmJOYyredRWfVG03b9BxX o/BSvd4+zo5ujI6UgIGx2dXhTLqljlK4vh57E4QkCiDGoT7+fBH5iLc7b s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CdAgDS9KhW/40NJK1egzpSbQaIUaFSj?= =?us-ascii?q?VaCEwENgWEahXUCHCmBCzgUAQEBAQEBAYEKQQ6DcgEBAQMBIygBHw4FCwIBCBE?= =?us-ascii?q?CAQECARYBCQcDAgICHwQNFAkIAgQOBYgGAwoIrn2FRAGFPQ2EGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBARWGDIFsCIJBgjeCEQoeCgGCNyuBDwWHUosZhAMBiwhQgXO?= =?us-ascii?q?BW4RCiFSFboEPg2+DUAEPDwEBQoF9OYE0agGDU4M5BxcdfAEBAQ?= X-IronPort-AV: E=Sophos; i="5.22,355,1449532800"; d="scan'208,217"; a="71269134" Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 27 Jan 2016 16:53:37 +0000 Received: from XCH-ALN-019.cisco.com (xch-aln-019.cisco.com [173.36.7.29]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id u0RGrbLs002145 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 27 Jan 2016 16:53:37 GMT Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-ALN-019.cisco.com (173.36.7.29) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 27 Jan 2016 10:53:36 -0600 Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.009; Wed, 27 Jan 2016 10:53:36 -0600 From: "Francois Le Faucheur (flefauch)" To: Spencer Dawkins at IETF Thread-Topic: Stephen Farrell's Discuss on draft-ietf-cdni-logging-21: (with DISCUSS and COMMENT) Thread-Index: AQHRJUbZeJWqpqxRv0yLpSI55ZdXx58NgQzEgALdtIA= Date: Wed, 27 Jan 2016 16:53:36 +0000 Message-ID: References: <20151109165118.779.25437.idtracker@ietfa.amsl.com> <50381CDF-6A40-4447-846F-217E31934D6A@cisco.com> <56520141.8010806@cs.tcd.ie> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.91.92] Content-Type: multipart/alternative; boundary="_000_C3E454864BA24879A2FDDB92EF380E02ciscocom_" MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-cdni-logging@ietf.org" , "cdni-chairs@ietf.org" , The IESG , "cdni@ietf.org" , Stephen Farrell Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-logging-21: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jan 2016 16:53:44 -0000 --_000_C3E454864BA24879A2FDDB92EF380E02ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8gU3BlbmNlciwNCg0KSSBzaG91bGQgYmUgYWJsZSB0byB3b3JrIG9uIHRoaXMgbmV4dCB3 ZWVrLg0KVGhhbmtzIGZvciB0aGUgcmVtaW5kZXIuDQoNCkZyYW5jb2lzDQoNCg0KT24gMjYgSmFu IDIwMTYsIGF0IDA0OjAwLCBTcGVuY2VyIERhd2tpbnMgYXQgSUVURiA8c3BlbmNlcmRhd2tpbnMu aWV0ZkBnbWFpbC5jb208bWFpbHRvOnNwZW5jZXJkYXdraW5zLmlldGZAZ21haWwuY29tPj4gd3Jv dGU6DQoNCkhpLCBGcmFuY29pcywNCg0KT24gU3VuLCBOb3YgMjIsIDIwMTUgYXQgMTE6NTQgQU0s IFN0ZXBoZW4gRmFycmVsbCA8c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZTxtYWlsdG86c3RlcGhl bi5mYXJyZWxsQGNzLnRjZC5pZT4+IHdyb3RlOg0KDQpIaXlhLA0KDQpTdXJlIHBsYWNpbmcgdGhl IHRleHQgd2hlcmV2ZXIgbWFrZXMgc2Vuc2UgaWYgb2YgY291cnNlDQpmaW5lLA0KDQpDaGVlcnMs DQpTDQoNCk9uIDIyLzExLzE1IDE2OjU3LCBGcmFuY29pcyBMZSBGYXVjaGV1ciAoZmxlZmF1Y2gp IHdyb3RlOg0KPiBIZWxsbyBTdGVwaGVuLg0KPg0KPiBUaGFua3MgZm9yIHRoaXMgdXBkYXRlIHRv IHlvdXIgRElTQ1VTUyBhbmQgQ09NTUVOVFMuDQo+IEl0IGFsbCBtYWtlcyBzZW5zZS4gU3BlY2lm aWMgcmVzcG9uc2VzL3Jlc29sdXRpb24gZGlzY3Vzc2VkIGJlbG93Og0KDQpJZiBJJ20gZm9sbG93 aW5nIHRoaXMgY29ycmVjdGx5LCB5b3UgYW5kIFN0ZXBoZW4gaGF2ZSBjbG9zZWQgb24gcmVzb2x1 dGlvbnMgZm9yIGhpcyBESVNDVVNTIGFuZCBDT01NRU5UUy4NCg0KQ291bGQgeW91IGxldCBtZSBr bm93IHdoZW4gSSBzaG91bGQgZXhwZWN0IGEgcmV2aXNlZCBkcmFmdD8NCg0KSSB3b3VsZCBsb3Zl IHRvIGZpbmlzaCB0aGlzIHVwLg0KDQpUaGFua3MhDQoNClNwZW5jZXINCg0KPiAoNSkgSSdtIG5v dCBjbGVhciB3aHkgeW91IG5lZWQgdG8gYmUgYWJsZSB0byBzZW5kIEhUVFAgaGVhZGVyDQo+IHZh bHVlcyBvciBzZXNzaW9uIElEcyB2aWEgdGhpcyBpL2YuIFdoeSBpcyB0aGF0IG5lZWRlZD8gQW5k DQo+IGl0IHNlZW1zIHZlcnkgZGFuZ2Vyb3VzLCBlLmcuICJjcyhDT09LSUUpIiBjb3VsZCBiZSBh IGRvb3N5Lg0KPiBJIHdvdWxkIHN1Z2dlc3QgYWRkaW5nIG5ldyB0ZXh0IGluIHNlY3Rpb24gMy40 IHRvIGNvdmVyIGFsbA0KPiBvZiB0aGUgbG9nIGNvbnRlbnQgYmFzaWNhbGx5IHNheWluZyB0aGF0 IHlvdSByZWFsbHkgbmVlZCB0bw0KPiBrbm93IHdoYXQgeW91J3JlIGRvaW5nIG9yIHlvdSBjYW4g YnJlYWsgc2VjdXJpdHkgdmVyeSBlYXNpbHkuDQo+DQo+IFRoYXQgbWFrZXMgc2Vuc2UuDQo+DQo+ IFNvbWUgc3VnZ2VzdGVkIHRleHQgdGhhdCBjb3VsZCBiZSBhZGRlZCB0byB0aGUgZW5kIG9mIDMu NA0KPiBqdXN0IGJlZm9yZSB0aGUgc3RhcnQgb2YgMy40LjE6DQo+DQo+IFNpbmNlIHRoZSB0ZXh0 IGJlbG93IGlzIHNwZWNpZmljIHRvIEhUVFAsIEkgd291bGQgbGVhbiBmb3IgaW5jbHVkaW5nIGl0 IHVuZGVyIDMuNC4xICgiSFRUUCBSZXF1ZXN0IExvZ2dpbmcgUmVjb3Jk4oCdKSByYXRoZXIgdGhh biB1bmRlciAzLjQgd2hpY2ggaXMgbWVhbnQgdG8gYXBwbHkgdG8gYW55IGxvZyAocG9zc2libHkg b2Ygb3RoZXIgcHJvdG9jb2xzIHRoYW4gSFRUUCkuDQo+DQo+IFRoZXJlIGlzIGEgZGlzY3Vzc2lv biB1bmRlciAzLjQuMSBhYm91dCB3aGljaCBmaWVsZHMgTVVTdCBiZSBpbmNsdWRlZCBhbmQgd2hp Y2ggb25lIE1BWS4gSSB0aGluayByaWdodCBhZnRlciB0aGF0IHdvdWxkIGJlIGFuIGlkZWFsIHBs YWNlIHRvIGFkZCB0aGUgdGV4dCBiZWxvdy4NCj4NCj4gTGV0IG1lIGtub3cgaWYgdGhhdCBkb2Vz IG5vdCB3b3JrLg0KPg0KPg0KPg0KPiAiTG9nZ2luZyBmaWVsZHMNCj4NCj4gcy9Mb2dnaW5nIGZp ZWxkcy9Mb2dnaW5nIHNvbWUgZmllbGRzLw0KPiAgICAgICBzaW5jZSBzb21lIGZpZWxkcyBhcmUg bm90IHZlcnkgZGFuZ2Vyb3VzLg0KPg0KPiBmcm9tIEhUVFAgcmVxdWVzdHMgYW5kIHJlc3BvbnNl cyBjYW4gYmUNCj4gdmVyeSBkYW5nZXJvdXMuIEZvciBleGFtcGxlLCBjb29raWVzIHdpbGwgb2Z0 ZW4gY29udGFpbg0KPiAobW9udGhzKSBsb25nIGxpdmVkIGJlYXJlciB0b2tlbg0KPg0KPiBUaGlz IGlzIGEgYml0IGJleW9uZCBteSBleHBlcnRpc2UsIGJ1dCBJIHdvbmRlciBpZiDigJxiZWFyZXLi gJ0gaXMgbmVlZGVkIGhlcmU6DQo+IHMvYmVhcmVyIHRva2VuL3Rva2VuLyAgPw0KPiBiZWNhdXNl IEkgdGhpbmsgdGhlIGRpc2N1c3Npb24gaGVyZSBpcyBtZWFudCB0byBiZSBnZW5lcmljIHdoaWxl ICJiZWFyZXIgdG9rZW4iIGlzIGEgc3BlY2lmaWMgZm9ybSBvZiB0b2tlbi4NCj4gT3IgaXMg4oCc YmVhcmVyIHRva2Vu4oCdIHJlYWxseSB0aGUgYXBwcm9wcmlhdGUgdGVybSBpbiB0aGlzIGdlbmVy aWMgc2VudGVuY2U/DQo+DQo+IHZhbHVlcyB0aGF0IGNhbiBiZSB1c2VkDQo+IHRvIGxvZ2luIHRv IGEgc2VydmljZSBhcyB0aGUgcmVsZXZhbnQgdXNlci4gU2ltaWxhciB2YWx1ZXMNCj4gbWF5IGJl IGluY2x1ZGVkIGluIG90aGVyIGhlYWRlciBmaWVsZHMgb3Igd2l0aGluIFVSTHMgb3INCj4gZWxz ZXdoZXJlIGluIEhUVFAgcmVxdWVzdHMgYW5kIHJlc3BvbnNlcy4gQ2VudHJhbGlzaW5nDQo+IHN1 Y2ggdmFsdWVzIGluIGEgbG9nDQo+DQo+IHMvbG9nL0NETkkgTG9nZ2luZyBGaWxlLw0KPg0KPiBj YW4gdGhlcmVmb3JlIHJlcHJlc2VudCBhIHNpZ25pZmljYW50DQo+IGluY3JlYXNlIGluIHJpc2sg Ym90aCBmb3IgdGhlIHVzZXIgYW5kIHRoZSB3ZWIgc2VydmljZQ0KPiBwcm92aWRlciwgYnV0IGFs c28gZm9yIHRoZSBDRE5zIGludm9sdmVkLiBJbXBsZW1lbnRhdGlvbnMNCj4gb3VnaHQgdGhlcmVm b3JlIGF0dGVtcHQgdG8gbG93ZXIgdGhlIHByb2JhYmlsaXR5IG9mIHN1Y2gNCj4gYmFkIG91dGNv bWVzIGUuZy4gYnkgb25seSBhbGxvd2luZyBhIGNvbmZpZ3VyZWQgc2V0IG9mDQo+IGhlYWRlcnMg dG8gYmUgYWRkZWQgdG8gbG9ncw0KPg0KPiBzL2xvZ3MvQ0ROSSBMb2dnaW5nIFJlY29yZHMvDQo+ DQo+ICwgb3IgYnkgbm90IHN1cHBvcnRpbmcgd2lsZGNhcmQNCj4gc2VsZWN0aW9uIG9mIEhUVFAg cmVxdWVzdC9yZXNwb25zZSBmaWVsZHMgdG8gYWRkLiBTdWNoDQo+IG1lY2hhbmlzbXMgY2FuIHJl ZHVjZSB0aGUgcHJvYmFiaWxpdHkgdGhhdCBzZWN1cml0eSAob3INCj4gcHJpdmFjeSkgc2Vuc2l0 aXZlIHZhbHVlcyBhcmUgY2VudHJhbGlzZWQgaW4gbG9ncy7igJ0NCj4NCj4gcy9sb2dzL0NETkkg TG9nZ2luZyBGaWxlcy8NCj4NCj4gSSBzdWdnZXN0IHRoYXQgLCBpbiBhZGRpdGlvbiB0byByZWNv bW1lbmRhdGlvbnMgZm9yIGltcGxlbWVudGF0aW9ucywgd2UgYWxzbyBhZGQgcmVjb21tZW5kYXRp b25zIGZvciBDRE4gb3BlcmF0b3JzOg0KPiDigJxTaW1pbGFybHksIHdoZW4gYWdyZWVpbmcgb24g d2hpY2ggSFRUUCByZXF1ZXN0L3Jlc3BvbnNlIGZpZWxkcyBhcmUgdG8gYmUgcHJvdmlkZWQgaW4g Q0ROSSBMb2dnaW5nIEZpbGVzLCB0aGUgdUNETiBhbmQgZENETiBhZG1pbmlzdHJhdG9ycyBvdWdo dCB0byBjb25zaWRlciB0aGVzZSByaXNrcy4iDQo+DQo+DQo+DQo+IEknbSBzdXJlIHRoYXQgY2Fu IGJlIGltcHJvdmVkIG9uLCBhbmQgaGF2ZSBubyBwcm9ibGVtIHdpdGgNCj4gYW55IHNwZWNpZmlj IGJldHRlciB3b3Jkcy4NCj4NCj4gKDYpIGNsZWFyZWQNCj4NCj4gKDcpIGNsZWFyZWQNCj4NCj4N Cj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQ0KPiBDT01NRU5UOg0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+DQo+DQo+IC0g aW4gdGhlIGRlc2NyaXB0aW9uIG9mIGMtZ3JvdXBpZCwgInRoZSBhZGRyZXNzDQo+IHdpdGggYSBz aGFyZWQgc2VjcmV0IHRoYXQgaXMgcHJlLXN5bmNocm9uaXNlZA0KPiBhbmQgcm90YXRlZCBhdCBh IHByZWRlZmluZWQgdGltZSBpbnRlcnZhbCIgaXNuJ3QNCj4gdmVyeSBjbGVhci4gSSBrbm93IHdo YXQgeW91IG1lYW4gYnV0IEkgZG9uJ3QNCj4gdGhpbmsgeW91IHN0YXRlIGl0IHZlcnkgY2xlYXJs eS4gQ291bGQgYmUgdGhhdCBhDQo+IGJpdCBvZiB0ZXh0IGVhcmxpZXIgaW4gdGhlIGRvY3VtZW50 IHRoYXQgZGVzY3JpYmVzDQo+IHRoZSBiYXNpYyBpZGVhIHdvdWxkIGJlIGJldHRlciB0aGFuIGRv aW5nIGl0IGFsbA0KPiBpbmxpbmUgYXMgeW91IGhhdmUgaW4gLTIxLg0KPg0KPiBSaWdodC4NCj4g V2UgbmVlZCB0byBkbyBzb21lIHdvcmQgdHdlYWtpbmcgb24gdGhpcyBhbnl3YXlzLCBzbyB3ZeKA mWxsIHRyeSBhZGRyZXNzIHRoYXQuDQo+DQo+DQo+IE9MRCBDT01NRU5UUyBCZWxvdywgbm90IHVw ZGF0ZWQgZm9yIC0yMSwgSSBkaWRuJ3QNCj4gY2hlY2sgaWYgeW91IHRvb2sgJ2VtIG9uIGJvYXJk LCBmZWVsIGZyZWUgdG8gY2hhdCBhYm91dA0KPiAnZW0gaWYgdGhhdCdzIHVzZWZ1bCAgLSBJJ20g aGFwcHkgdG8gZG8gc28gYW55d2F5Lg0KPg0KPiBUaG9zZSBoYXZlIGJlZW4gYWRkcmVzc2VkIGlu IGVhcmxpZXIgdmVyc2lvbnMuDQo+DQo+IEhlcmUgaXMgdGhlIG1lc3NhZ2UgSSBzZW50IGFib3V0 IHRob3NlIGJhY2sgaW4gSnVseSBpbiBjYXNlIHlvdSB3YW50IHRvIGNoZWNrIHRoZSBkZXRhaWxl ZCByZXNvbHV0aW9uOg0KPg0KPg0KPiBGcm9tOiBGcmFuY29pcyBMZSBGYXVjaGV1ciA8ZmxlZmF1 Y2hAY2lzY28uY29tPG1haWx0bzpmbGVmYXVjaEBjaXNjby5jb20+PG1haWx0bzpmbGVmYXVjaEBj aXNjby5jb208bWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNvbT4+Pg0KPiBTdWJqZWN0OiBSZTogU3Rl cGhlbiBGYXJyZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWNkbmktbG9nZ2luZy0xNTogKHdp dGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCj4gRGF0ZTogMTkgSnVseSAyMDE1IDE4OjM5OjM4IENF U1QNCj4gVG86IFN0ZXBoZW4gRmFycmVsbCA8c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZTxtYWls dG86c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZT48bWFpbHRvOnN0ZXBoZW4uZmFycmVsbEBjcy50 Y2QuaWU8bWFpbHRvOnN0ZXBoZW4uZmFycmVsbEBjcy50Y2QuaWU+Pj4NCj4gQ2M6IExlIEZhdWNo ZXVyIEZyYW5jb2lzIDxmbGVmYXVjaEBjaXNjby5jb208bWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNv bT48bWFpbHRvOmZsZWZhdWNoQGNpc2NvLmNvbTxtYWlsdG86ZmxlZmF1Y2hAY2lzY28uY29tPj4+ LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZzxtYWlsdG86aWVzZ0BpZXRmLm9yZz48bWFpbHRvOmll c2dAaWV0Zi5vcmc8bWFpbHRvOmllc2dAaWV0Zi5vcmc+Pj4sIGNkbmktY2hhaXJzQGlldGYub3Jn PG1haWx0bzpjZG5pLWNoYWlyc0BpZXRmLm9yZz48bWFpbHRvOmNkbmktY2hhaXJzQGlldGYub3Jn PG1haWx0bzpjZG5pLWNoYWlyc0BpZXRmLm9yZz4+LCBkcmFmdC1pZXRmLWNkbmktbG9nZ2luZ0Bp ZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1jZG5pLWxvZ2dpbmdAaWV0Zi5vcmc+PG1haWx0bzpk cmFmdC1pZXRmLWNkbmktbG9nZ2luZ0BpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1jZG5pLWxv Z2dpbmdAaWV0Zi5vcmc+Pg0KPg0KPiBIaSBTdGVwaGVuLA0KPg0KPiBSZXNwb25zZXMgdG8gdGhl IENPTU1FTlQgcGFydCBiZWxvdzoNCj4NCj4NCj4NCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBDT01NRU5U Og0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQo+DQo+DQo+IC0gSSBzdXBwb3J0IFJpY2hhcmQncyBkaXNjdXNz LiBJc24ndCBpdCBpcm9uaWMgdGhhdCB0aGUgZENETidzDQo+IHByaXZhY3kgKHRoYXQgb2YgYSBj b21wYW55KSBpcyBiZXR0ZXIgc3VwcG9ydGVkIHRoYW4gdGhhdCBvZg0KPiB0aGUgZW5kIHVzZXIg KGEgcGVyc29uKQ0KPg0KPiBXaXRoIGFub255bWl6YXRpb24gbm93IGJlaW5nIGEgU0hPVUxELCBJ IHRob3VnaHQgUmljaGFyZOKAmXMgRElTQ1VTUyB3YXMgYWRkcmVzc2VkIChhcGFydCBmcm9tIHRo ZSBwb3RlbnRpYWwgbmVlZCB0byBhZGQgcG9ydCBhbm9ueW1pemF0aW9uIGFzIGRpc2N1c3NlZCBz ZXBhcmF0ZWx5IGZvciB5b3VyIG93biBESVNDVVNTKS4NCj4NCj4NCj4gLSAyLjIuMSAtIHdoeSBp cyBwZXItY2h1bmsgYWx3YXlzIG5lZWRlZD8NCj4NCj4gQWdncmVnYXRlZCBsb2dzIGZvciBzZWdt ZW50ZWQgY29udGVudCBpcyBhIHRyaWNreSBjb25jZXB0LCBmb3Igd2hpY2ggdGhlcmUgaXMgbm8g c3RhbmRhcmQgdG9kYXkgYW5kIG1hbnkgcG90ZW50aWFsIHdheXMgdG8gZG8gaXQsIGFuZCB3aGlj aCB0aGUgV29ya2luZyBHcm91cCBoYXMgZWxlY3RlZCB0byBrZWVwIGZvciBhIG5leHQgdmVyc2lv biBvZiB0aGUgbG9nZ2luZyBzcGVjIChqdXN0IHNvIHRoYXQgd2UgY2FuIGNvbWUgdXAgd2l0aCBh IGJhc2UgQ0ROSSBsb2dnaW5nIHNwZWMgX3JlbGF0aXZlbHlfIHF1aWNrbHkgKS4NCj4gU28gdGhl IG9ubHkgc3VyZSB3YXkgdG8gc3VwcG9ydCBpbnRlcm9wZXJhYmlsdHkgYWNyb3NzIENETnMgZm9y IGxvZ3Mgb2Ygc2VnbWVudGVkIGNvbnRlbnQgaXMgdG8gcHJvdmlkZSBwZXItY2h1bmsgbG9nLCBo ZW5jZSB0aGUgc3RhdGVtZW50IHRoYXQgdGhvc2UgYWx3YXlzIG5lZWQgdG8gYmUgZ2VuZXJhdGVk Lg0KPg0KPg0KPg0KPiAtIDIuMi41LjM8aHR0cDovLzIuMi41LjMvPjogd2hhdCdzICJ0cmFjayBh dWRpZW5jZSIgbWVhbj8NCj4NCj4gVGhpcyB0ZXJtaW5vbG9neSBpcyBsaWtlbHkgaW5oZXJpdGVk IGZyb20gdGhlIFRWL1ZpZGVvIGVyYSwgbWVhbmluZyBpbiBwYXJ0aWN1bGFyIHRyYWNraW5nIGhv dyBiaWcgYSBwb3B1bGF0aW9uIHdhdGNoZXMgd2hpY2ggbW92aWUvdmlkZW8uDQo+IEdpdmVuIHRo ZSBtb3JlIGdlbmVyYWwgYXBwbGljYWJpbGl0eSBoZXJlLCBob3cgYWJvdXQgd2UgcmVwbGFjZSBi eSBzb21ldGhpbmcgbGlrZSDigJxkZXZlbG9wIHN0YXRpc3RpY3Mgb24gY29udGVudCBkb3dubG9h ZOKAnT8NCj4NCj4NCj4gLSAyLjIuNS40PGh0dHA6Ly8yLjIuNS40Lz46IHRoZXJlIGFyZSBtb3Jl IHNlY3VyaXR5IGdvYWxzIGluIHRoZSB1bml2ZXJzZQ0KPg0KPiBDZXJ0YWlubHksIGJ1dCB0aGlz IGlzIG5vdCBhIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rpb246IHNlY3Rpb24gMi4yLjUg ZGlzY3Vzc2luZyBMb2cgQ29uc3VtaW5nIGFwcGxpY2F0aW9ucy4gQW5kIDIuMi41LjQgaXMgZGlz Y3Vzc2luZyBvbmUgc3VjaCBhcHBsaWNhdGlvbiB3aGljaCBpcyB0byBkZXRlY3QgdmlvbGF0aW9u IG9mIGNvbnRlbnQgYWNjZXNzIHBvbGljeS4NCj4NCj4NCj4gLSAyLjIuNS40PGh0dHA6Ly8yLjIu NS40Lz46IHNlZW1zIGxpa2UgdGhlIHVzZXIgaXMgdGhlIGVuZW15LCB0aGF0J3Mgb2RkDQo+DQo+ IFdpdGggcmVzcGVjdCB0byBDb250ZW50IFByb3RlY3Rpb24gKHRoZSBzdWJqZWN0IG9mIDIuMi41 LjQpIHVuYXV0aG9yaXNlZCB1c2VyIGlzIGluZGVlZCB0aGUgZW5lbXksIGFpbWluZyBhdCBzdGVh bGluZyBzb21lIGNvbnRlbnQgZnJvbSB0aGUgQ0ROcy4NCj4NCj4NCj4gLSAyLjIuNS42LjI6IHRo ZXJlIGlzIG5vICJicm93c2VyIHR5cGUgaGVhZGVyIiB0aGF0IEkga25vdyBvZiwNCj4gYnV0IHRo ZXJlIGlzIHRoZSB3ZWxsLWtub3duIFVBIHN0cmluZy4gQmVpbmcgc3BlY2lmaWMgYWJvdXQNCj4g dGhhdCBpcyBiZXR0ZXIuDQo+DQo+IFRoaXMgaXMgZml4ZWQgaW4gLTE5IHdoaWNoIG5vdyBzYXlz Og0KPiAiVGVybWluYWwgdHlwZSAobW9iaWxlLCBQQywgU1RCLCBpZiB0aGlzIGluZm9ybWF0aW9u IGNhbiBiZQ0KPiAgICAgIGFjcXVpcmVkIGZyb20gdGhlIGJyb3dzZXIgdHlwZSBpbmZlcnJlZCBm cm9tIHRoZSBVc2VyIEFnZW50DQo+ICAgICAgc3RyaW5nLCBmb3IgZXhhbXBsZSkuDQo+ICINCj4N Cj4gLSAzLjE6IFNTLlMgLSBkb2VzIHRoYXQgaW1wbHkgYSB0aW1lIGdyYW51bGFyaXR5IG9mIDEw MG1zPyAgSWYNCj4gc28sIHBsZWFzZSBzYXkgc28uDQo+DQo+IEFzIGEgcmVzdWx0IG9mIGFub3Ro ZXIgSUVTRyByZXZpZXcgY29tbWVudCwgd2UgaGF2ZSByZXBsYWNlZCAgb3VyIG93biBkZWZpbml0 aW9uIG9mIHRpbWUgYnkgYSByZWZlcmVuY2UgdG8gUkZDMzMzOS4NCj4NCj4g4oCcDQo+IFRJTUUg PSAyRElHSVQgIjoiIDJESUdJVCAiOiIgMkRJR0lUIFsiLiIgKkRJR0lUXQ0KPiAgICAgICAgIDsg VGltZXMgYXJlIGVuY29kZWQgYXMgInBhcnRpYWwtdGltZSIgc3BlY2lmaWVkIGluIFtSRkMzMzM5 XS4NCj4gIg0KPg0KPiBTbyB0aGF0IHBvaW50IHNob3VsZCBiZSBmaXhlZCBhbHJlYWR5Lg0KPg0K Pg0KPg0KPiAtIDMuNC40OiBjcy11cmk6IHBsZWFzZSBub3QgdGhhdCB0aGVzZSBjYW4gYmUgcHJp dmFjeQ0KPiBzZW5zaXRpdmUsIHRob3VnaCBwcmVzdW1hYmx5IGxlc3Mgc28gdGhhbiBlLmcuICBs b2dnZWQgVVJJcyBvbg0KPiBhIHNlYXJjaCBlbmdpbmUuDQo+DQo+IElzIHRoaXMganVzdCBmb3Ig b3VyIGluZm9ybWF0aW9uIG9yIGRvIHlvdSByZWNvbW1lbmQgdGhhdCB3ZSBhZGQgYSBzdGF0ZW1l bnQgYWJvdXQgdGhlIGZhY3QgdGhhdCBjcy11cmkgY2FuIGJlIHByaXZhY3kgc2Vuc2l0aXZlPw0K PiBJZiBJUC9wb3J0cyBhcmUgYW5vbnltaXNlZCwgaXMgY3MtdXJpIHN0aWxsIHByaXZhY3kgc2Vu c2l0aXZlIChpcyB0aGlzIGluIGNhc2UgdGhlIHVyaSBpdHNlbGYgY29udGFpbnMgc29tZSBpbmZv cm1hdGlvbiB0aGF0IGNhbiBiZSB0cmFjZWQgYmFjayB0byBhIGdpdmVuIGVuZC11c2VyPw0KPg0K Pg0KPg0KPiAtIDMuNC40OiBmb28tdXJpOiBkbyB0aGVzZSBjb250YWluIGZyYWdtZW50cyBvciBu b3Q/DQo+DQo+IEluIGEgcGVyLWNodW5rIGxvZyAod2hpY2ggaXMgc3BlY2lmaWVkIGluIHRoaXMg ZG9jdW1lbnQgYXMgdGhlIGludGVyb3BlcmFibGUgbWVjaGFuaXNtIHRvIGV4Y2hhbmdlIGxvZ3Mg Zm9yIGZyYWdtZW50ZWQgY29udGVudCksIHRoZSB1cmkgY29udGFpbnMgdGhlIFVSSSBvZiBlYWNo IHNwZWNpZmljIGZyYWdtZW50Lg0KPiBJbiBhbiBhZ2dyZWdhdGVkIGxvZyBmb3IgYSBzZWdtZW50 ZWQgY29udGVudCBkZWxpdmVyeSAod2hpY2ggaXMgbm90IHNwZWNpZmllZCBpbiB0aGlzIGRvY3Vt ZW50KSwgdGhlcmUgYXJlIG1hbnkgcG90ZW50aWFsIG9wdGlvbnMgKFVSSSBvZiBmaXJzdCBzZWdt ZW50LCBVUkkgb2YgdGhlIHBsYXlsaXN0LCBwYXJ0IG9mIHRoZSBVUkkgY29tbW9uIHRvIGFsbCBz ZWdtZW50cyzigKYuKS4gVGhpcyBpcyBvbmUgb2YgdGhlIGNvbXBsZXhpdGllcyBvZiBzcGVjaWZ5 aW5nIGFnZ3JlZ2F0ZWQgbG9ncyBmb3Igc2VnbWVudGVkIGNvbnRlbnQuDQo+DQo+DQo+DQo+DQo+ IC0gSSBzdXBwb3J0IFJpY2hhcmQncyBkaXNjdXNzLiBJc24ndCBpdCBpcm9uaWMgdGhhdCB0aGUg ZENETidzDQo+IHByaXZhY3kgKHRoYXQgb2YgYSBjb21wYW55KSBpcyBiZXR0ZXIgc3VwcG9ydGVk IHRoYW4gdGhhdCBvZg0KPiB0aGUgZW5kIHVzZXIgKGEgcGVyc29uKQ0KPg0KPiAtIDIuMi4xIC0g d2h5IGlzIHBlci1jaHVuayBhbHdheXMgbmVlZGVkPw0KPg0KPiAtIDIuMi41LjM8aHR0cDovLzIu Mi41LjMvPjogd2hhdCdzICJ0cmFjayBhdWRpZW5jZSIgbWVhbj8NCj4NCj4gLSAyLjIuNS40PGh0 dHA6Ly8yLjIuNS40Lz46IHRoZXJlIGFyZSBtb3JlIHNlY3VyaXR5IGdvYWxzIGluIHRoZSB1bml2 ZXJzZQ0KPg0KPiAtIDIuMi41LjQ8aHR0cDovLzIuMi41LjQvPjogc2VlbXMgbGlrZSB0aGUgdXNl ciBpcyB0aGUgZW5lbXksIHRoYXQncyBvZGQNCj4NCj4gLSAyLjIuNS42LjI6IHRoZXJlIGlzIG5v ICJicm93c2VyIHR5cGUgaGVhZGVyIiB0aGF0IEkga25vdyBvZiwNCj4gYnV0IHRoZXJlIGlzIHRo ZSB3ZWxsLWtub3duIFVBIHN0cmluZy4gQmVpbmcgc3BlY2lmaWMgYWJvdXQNCj4gdGhhdCBpcyBi ZXR0ZXIuDQo+DQo+IC0gMy4xOiBTUy5TIC0gZG9lcyB0aGF0IGltcGx5IGEgdGltZSBncmFudWxh cml0eSBvZiAxMDBtcz8gIElmDQo+IHNvLCBwbGVhc2Ugc2F5IHNvLg0KPg0KPiAtIDMuNC40OiBj cy11cmk6IHBsZWFzZSBub3QgdGhhdCB0aGVzZSBjYW4gYmUgcHJpdmFjeQ0KPiBzZW5zaXRpdmUs IHRob3VnaCBwcmVzdW1hYmx5IGxlc3Mgc28gdGhhbiBlLmcuICBsb2dnZWQgVVJJcyBvbg0KPiBh IHNlYXJjaCBlbmdpbmUuDQo+DQo+IC0gMy40LjQ6IGZvby11cmk6IGRvIHRoZXNlIGNvbnRhaW4g ZnJhZ21lbnRzIG9yIG5vdD8NCj4NCj4NCj4NCg0KDQoNCg== --_000_C3E454864BA24879A2FDDB92EF380E02ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGVsbG8gU3BlbmNlciwNCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgc2hvdWxkIGJl IGFibGUgdG8gd29yayBvbiB0aGlzIG5leHQgd2Vlay48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhh bmtzIGZvciB0aGUgcmVtaW5kZXIuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5GcmFuY29pczwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRpdj4NCjxi bG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiAyNiBKYW4g MjAxNiwgYXQgMDQ6MDAsIFNwZW5jZXIgRGF3a2lucyBhdCBJRVRGICZsdDs8YSBocmVmPSJtYWls dG86c3BlbmNlcmRhd2tpbnMuaWV0ZkBnbWFpbC5jb20iIGNsYXNzPSIiPnNwZW5jZXJkYXdraW5z LmlldGZAZ21haWwuY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWlu dGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgZGlyPSJsdHIiIGNsYXNz PSIiPkhpLCBGcmFuY29pcywNCjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj48YnIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+T24gU3VuLCBOb3YgMjIsIDIwMTUgYXQgMTE6NTQg QU0sIFN0ZXBoZW4gRmFycmVsbCA8c3BhbiBkaXI9Imx0ciIgY2xhc3M9IiI+DQombHQ7PGEgaHJl Zj0ibWFpbHRvOnN0ZXBoZW4uZmFycmVsbEBjcy50Y2QuaWUiIHRhcmdldD0iX2JsYW5rIiBjbGFz cz0iIj5zdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPC9hPiZndDs8L3NwYW4+IHdyb3RlOjxiciBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdpbjow IDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiPg0K PGJyIGNsYXNzPSIiPg0KSGl5YSw8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpTdXJlIHBs YWNpbmcgdGhlIHRleHQgd2hlcmV2ZXIgbWFrZXMgc2Vuc2UgaWYgb2YgY291cnNlPGJyIGNsYXNz PSIiPg0KZmluZSw8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpDaGVlcnMsPGJyIGNsYXNz PSIiPg0KUzxiciBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJoNSI+PGJy IGNsYXNzPSIiPg0KT24gMjIvMTEvMTUgMTY6NTcsIEZyYW5jb2lzIExlIEZhdWNoZXVyIChmbGVm YXVjaCkgd3JvdGU6PGJyIGNsYXNzPSIiPg0KJmd0OyBIZWxsbyBTdGVwaGVuLjxiciBjbGFzcz0i Ij4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IFRoYW5rcyBmb3IgdGhpcyB1cGRhdGUgdG8geW91 ciBESVNDVVNTIGFuZCBDT01NRU5UUy48YnIgY2xhc3M9IiI+DQomZ3Q7IEl0IGFsbCBtYWtlcyBz ZW5zZS4gU3BlY2lmaWMgcmVzcG9uc2VzL3Jlc29sdXRpb24gZGlzY3Vzc2VkIGJlbG93OjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JZiBJJ20gZm9sbG93aW5nIHRoaXMg Y29ycmVjdGx5LCB5b3UgYW5kIFN0ZXBoZW4gaGF2ZSBjbG9zZWQgb24gcmVzb2x1dGlvbnMgZm9y IGhpcyBESVNDVVNTIGFuZCBDT01NRU5UUy4mbmJzcDs8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpDb3VsZCB5b3UgbGV0IG1lIGtub3cgd2hlbiBJIHNob3VsZCBleHBlY3QgYSByZXZpc2Vk IGRyYWZ0PzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+SSB3b3VsZCBsb3ZlIHRvIGZpbmlzaCB0aGlzIHVwLjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzITwvZGl2Pg0K PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+U3BlbmNl cjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4mbmJzcDs8L2Rpdj4NCjxibG9ja3F1b3RlIGNsYXNzPSJn bWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdpbjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2Nj IHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9Img1 Ij4mZ3Q7ICg1KSBJJ20gbm90IGNsZWFyIHdoeSB5b3UgbmVlZCB0byBiZSBhYmxlIHRvIHNlbmQg SFRUUCBoZWFkZXI8YnIgY2xhc3M9IiI+DQomZ3Q7IHZhbHVlcyBvciBzZXNzaW9uIElEcyB2aWEg dGhpcyBpL2YuIFdoeSBpcyB0aGF0IG5lZWRlZD8gQW5kPGJyIGNsYXNzPSIiPg0KJmd0OyBpdCBz ZWVtcyB2ZXJ5IGRhbmdlcm91cywgZS5nLiAmcXVvdDtjcyhDT09LSUUpJnF1b3Q7IGNvdWxkIGJl IGEgZG9vc3kuPGJyIGNsYXNzPSIiPg0KJmd0OyBJIHdvdWxkIHN1Z2dlc3QgYWRkaW5nIG5ldyB0 ZXh0IGluIHNlY3Rpb24gMy40IHRvIGNvdmVyIGFsbDxiciBjbGFzcz0iIj4NCiZndDsgb2YgdGhl IGxvZyBjb250ZW50IGJhc2ljYWxseSBzYXlpbmcgdGhhdCB5b3UgcmVhbGx5IG5lZWQgdG88YnIg Y2xhc3M9IiI+DQomZ3Q7IGtub3cgd2hhdCB5b3UncmUgZG9pbmcgb3IgeW91IGNhbiBicmVhayBz ZWN1cml0eSB2ZXJ5IGVhc2lseS48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0 OyBUaGF0IG1ha2VzIHNlbnNlLjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7 IFNvbWUgc3VnZ2VzdGVkIHRleHQgdGhhdCBjb3VsZCBiZSBhZGRlZCB0byB0aGUgZW5kIG9mIDMu NDxiciBjbGFzcz0iIj4NCiZndDsganVzdCBiZWZvcmUgdGhlIHN0YXJ0IG9mIDMuNC4xOjxiciBj bGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IFNpbmNlIHRoZSB0ZXh0IGJlbG93IGlz IHNwZWNpZmljIHRvIEhUVFAsIEkgd291bGQgbGVhbiBmb3IgaW5jbHVkaW5nIGl0IHVuZGVyIDMu NC4xICgmcXVvdDtIVFRQIFJlcXVlc3QgTG9nZ2luZyBSZWNvcmTigJ0pIHJhdGhlciB0aGFuIHVu ZGVyIDMuNCB3aGljaCBpcyBtZWFudCB0byBhcHBseSB0byBhbnkgbG9nIChwb3NzaWJseSBvZiBv dGhlciBwcm90b2NvbHMgdGhhbiBIVFRQKS48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIi Pg0KJmd0OyBUaGVyZSBpcyBhIGRpc2N1c3Npb24gdW5kZXIgMy40LjEgYWJvdXQgd2hpY2ggZmll bGRzIE1VU3QgYmUgaW5jbHVkZWQgYW5kIHdoaWNoIG9uZSBNQVkuIEkgdGhpbmsgcmlnaHQgYWZ0 ZXIgdGhhdCB3b3VsZCBiZSBhbiBpZGVhbCBwbGFjZSB0byBhZGQgdGhlIHRleHQgYmVsb3cuPGJy IGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgTGV0IG1lIGtub3cgaWYgdGhhdCBk b2VzIG5vdCB3b3JrLjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNs YXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgJnF1b3Q7TG9nZ2luZyBmaWVsZHM8YnIg Y2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBzL0xvZ2dpbmcgZmllbGRzL0xvZ2dp bmcgc29tZSBmaWVsZHMvPGJyIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO3NpbmNlIHNvbWUgZmllbGRzIGFyZSBub3QgdmVyeSBkYW5nZXJvdXMuPGJyIGNsYXNzPSIi Pg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgZnJvbSBIVFRQIHJlcXVlc3RzIGFuZCByZXNwb25z ZXMgY2FuIGJlPGJyIGNsYXNzPSIiPg0KJmd0OyB2ZXJ5IGRhbmdlcm91cy4gRm9yIGV4YW1wbGUs IGNvb2tpZXMgd2lsbCBvZnRlbiBjb250YWluPGJyIGNsYXNzPSIiPg0KJmd0OyAobW9udGhzKSBs b25nIGxpdmVkIGJlYXJlciB0b2tlbjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQom Z3Q7IFRoaXMgaXMgYSBiaXQgYmV5b25kIG15IGV4cGVydGlzZSwgYnV0IEkgd29uZGVyIGlmIOKA nGJlYXJlcuKAnSBpcyBuZWVkZWQgaGVyZTo8YnIgY2xhc3M9IiI+DQomZ3Q7IHMvYmVhcmVyIHRv a2VuL3Rva2VuLyZuYnNwOyA/PGJyIGNsYXNzPSIiPg0KJmd0OyBiZWNhdXNlIEkgdGhpbmsgdGhl IGRpc2N1c3Npb24gaGVyZSBpcyBtZWFudCB0byBiZSBnZW5lcmljIHdoaWxlICZxdW90O2JlYXJl ciB0b2tlbiZxdW90OyBpcyBhIHNwZWNpZmljIGZvcm0gb2YgdG9rZW4uPGJyIGNsYXNzPSIiPg0K Jmd0OyBPciBpcyDigJxiZWFyZXIgdG9rZW7igJ0gcmVhbGx5IHRoZSBhcHByb3ByaWF0ZSB0ZXJt IGluIHRoaXMgZ2VuZXJpYyBzZW50ZW5jZT88YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIi Pg0KJmd0OyB2YWx1ZXMgdGhhdCBjYW4gYmUgdXNlZDxiciBjbGFzcz0iIj4NCiZndDsgdG8gbG9n aW4gdG8gYSBzZXJ2aWNlIGFzIHRoZSByZWxldmFudCB1c2VyLiBTaW1pbGFyIHZhbHVlczxiciBj bGFzcz0iIj4NCiZndDsgbWF5IGJlIGluY2x1ZGVkIGluIG90aGVyIGhlYWRlciBmaWVsZHMgb3Ig d2l0aGluIFVSTHMgb3I8YnIgY2xhc3M9IiI+DQomZ3Q7IGVsc2V3aGVyZSBpbiBIVFRQIHJlcXVl c3RzIGFuZCByZXNwb25zZXMuIENlbnRyYWxpc2luZzxiciBjbGFzcz0iIj4NCiZndDsgc3VjaCB2 YWx1ZXMgaW4gYSBsb2c8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBzL2xv Zy9DRE5JIExvZ2dpbmcgRmlsZS88YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0 OyBjYW4gdGhlcmVmb3JlIHJlcHJlc2VudCBhIHNpZ25pZmljYW50PGJyIGNsYXNzPSIiPg0KJmd0 OyBpbmNyZWFzZSBpbiByaXNrIGJvdGggZm9yIHRoZSB1c2VyIGFuZCB0aGUgd2ViIHNlcnZpY2U8 YnIgY2xhc3M9IiI+DQomZ3Q7IHByb3ZpZGVyLCBidXQgYWxzbyBmb3IgdGhlIENETnMgaW52b2x2 ZWQuIEltcGxlbWVudGF0aW9uczxiciBjbGFzcz0iIj4NCiZndDsgb3VnaHQgdGhlcmVmb3JlIGF0 dGVtcHQgdG8gbG93ZXIgdGhlIHByb2JhYmlsaXR5IG9mIHN1Y2g8YnIgY2xhc3M9IiI+DQomZ3Q7 IGJhZCBvdXRjb21lcyBlLmcuIGJ5IG9ubHkgYWxsb3dpbmcgYSBjb25maWd1cmVkIHNldCBvZjxi ciBjbGFzcz0iIj4NCiZndDsgaGVhZGVycyB0byBiZSBhZGRlZCB0byBsb2dzPGJyIGNsYXNzPSIi Pg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgcy9sb2dzL0NETkkgTG9nZ2luZyBSZWNvcmRzLzxi ciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7ICwgb3IgYnkgbm90IHN1cHBvcnRp bmcgd2lsZGNhcmQ8YnIgY2xhc3M9IiI+DQomZ3Q7IHNlbGVjdGlvbiBvZiBIVFRQIHJlcXVlc3Qv cmVzcG9uc2UgZmllbGRzIHRvIGFkZC4gU3VjaDxiciBjbGFzcz0iIj4NCiZndDsgbWVjaGFuaXNt cyBjYW4gcmVkdWNlIHRoZSBwcm9iYWJpbGl0eSB0aGF0IHNlY3VyaXR5IChvcjxiciBjbGFzcz0i Ij4NCiZndDsgcHJpdmFjeSkgc2Vuc2l0aXZlIHZhbHVlcyBhcmUgY2VudHJhbGlzZWQgaW4gbG9n cy7igJ08YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBzL2xvZ3MvQ0ROSSBM b2dnaW5nIEZpbGVzLzxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IEkgc3Vn Z2VzdCB0aGF0ICwgaW4gYWRkaXRpb24gdG8gcmVjb21tZW5kYXRpb25zIGZvciBpbXBsZW1lbnRh dGlvbnMsIHdlIGFsc28gYWRkIHJlY29tbWVuZGF0aW9ucyBmb3IgQ0ROIG9wZXJhdG9yczo8YnIg Y2xhc3M9IiI+DQomZ3Q7IOKAnFNpbWlsYXJseSwgd2hlbiBhZ3JlZWluZyBvbiB3aGljaCBIVFRQ IHJlcXVlc3QvcmVzcG9uc2UgZmllbGRzIGFyZSB0byBiZSBwcm92aWRlZCBpbiBDRE5JIExvZ2dp bmcgRmlsZXMsIHRoZSB1Q0ROIGFuZCBkQ0ROIGFkbWluaXN0cmF0b3JzIG91Z2h0IHRvIGNvbnNp ZGVyIHRoZXNlIHJpc2tzLiZxdW90OzxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQom Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgSSdtIHN1cmUgdGhhdCBj YW4gYmUgaW1wcm92ZWQgb24sIGFuZCBoYXZlIG5vIHByb2JsZW0gd2l0aDxiciBjbGFzcz0iIj4N CiZndDsgYW55IHNwZWNpZmljIGJldHRlciB3b3Jkcy48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNs YXNzPSIiPg0KJmd0OyAoNikgY2xlYXJlZDxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+ DQomZ3Q7ICg3KSBjbGVhcmVkPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDs8 YnIgY2xhc3M9IiI+DQomZ3Q7IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08YnIgY2xhc3M9IiI+DQomZ3Q7IENPTU1F TlQ6PGJyIGNsYXNzPSIiPg0KJmd0OyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyIGNsYXNzPSIiPg0KJmd0Ozxi ciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IC0gaW4gdGhlIGRlc2NyaXB0aW9u IG9mIGMtZ3JvdXBpZCwgJnF1b3Q7dGhlIGFkZHJlc3M8YnIgY2xhc3M9IiI+DQomZ3Q7IHdpdGgg YSBzaGFyZWQgc2VjcmV0IHRoYXQgaXMgcHJlLXN5bmNocm9uaXNlZDxiciBjbGFzcz0iIj4NCiZn dDsgYW5kIHJvdGF0ZWQgYXQgYSBwcmVkZWZpbmVkIHRpbWUgaW50ZXJ2YWwmcXVvdDsgaXNuJ3Q8 YnIgY2xhc3M9IiI+DQomZ3Q7IHZlcnkgY2xlYXIuIEkga25vdyB3aGF0IHlvdSBtZWFuIGJ1dCBJ IGRvbid0PGJyIGNsYXNzPSIiPg0KJmd0OyB0aGluayB5b3Ugc3RhdGUgaXQgdmVyeSBjbGVhcmx5 LiBDb3VsZCBiZSB0aGF0IGE8YnIgY2xhc3M9IiI+DQomZ3Q7IGJpdCBvZiB0ZXh0IGVhcmxpZXIg aW4gdGhlIGRvY3VtZW50IHRoYXQgZGVzY3JpYmVzPGJyIGNsYXNzPSIiPg0KJmd0OyB0aGUgYmFz aWMgaWRlYSB3b3VsZCBiZSBiZXR0ZXIgdGhhbiBkb2luZyBpdCBhbGw8YnIgY2xhc3M9IiI+DQom Z3Q7IGlubGluZSBhcyB5b3UgaGF2ZSBpbiAtMjEuPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFz cz0iIj4NCiZndDsgUmlnaHQuPGJyIGNsYXNzPSIiPg0KJmd0OyBXZSBuZWVkIHRvIGRvIHNvbWUg d29yZCB0d2Vha2luZyBvbiB0aGlzIGFueXdheXMsIHNvIHdl4oCZbGwgdHJ5IGFkZHJlc3MgdGhh dC48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZn dDsgT0xEIENPTU1FTlRTIEJlbG93LCBub3QgdXBkYXRlZCBmb3IgLTIxLCBJIGRpZG4ndDxiciBj bGFzcz0iIj4NCiZndDsgY2hlY2sgaWYgeW91IHRvb2sgJ2VtIG9uIGJvYXJkLCBmZWVsIGZyZWUg dG8gY2hhdCBhYm91dDxiciBjbGFzcz0iIj4NCiZndDsgJ2VtIGlmIHRoYXQncyB1c2VmdWwmbmJz cDsgLSBJJ20gaGFwcHkgdG8gZG8gc28gYW55d2F5LjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xh c3M9IiI+DQomZ3Q7IFRob3NlIGhhdmUgYmVlbiBhZGRyZXNzZWQgaW4gZWFybGllciB2ZXJzaW9u cy48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBIZXJlIGlzIHRoZSBtZXNz YWdlIEkgc2VudCBhYm91dCB0aG9zZSBiYWNrIGluIEp1bHkgaW4gY2FzZSB5b3Ugd2FudCB0byBj aGVjayB0aGUgZGV0YWlsZWQgcmVzb2x1dGlvbjo8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNz PSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQomZ3Q7IEZyb206IEZyYW5j b2lzIExlIEZhdWNoZXVyICZsdDs8YSBocmVmPSJtYWlsdG86ZmxlZmF1Y2hAY2lzY28uY29tIiBj bGFzcz0iIj5mbGVmYXVjaEBjaXNjby5jb208L2E+Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86 ZmxlZmF1Y2hAY2lzY28uY29tIiBjbGFzcz0iIj5mbGVmYXVjaEBjaXNjby5jb208L2E+Jmd0OyZn dDs8YnIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iIj4mZ3Q7IFN1YmplY3Q6IFJlOiBTdGVwaGVu IEZhcnJlbGwncyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYtY2RuaS1sb2dnaW5nLTE1OiAod2l0aCBE SVNDVVNTIGFuZCBDT01NRU5UKTxiciBjbGFzcz0iIj4NCiZndDsgRGF0ZTogMTkgSnVseSAyMDE1 IDE4OjM5OjM4IENFU1Q8YnIgY2xhc3M9IiI+DQo8L3NwYW4+Jmd0OyBUbzogU3RlcGhlbiBGYXJy ZWxsICZsdDs8YSBocmVmPSJtYWlsdG86c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZSIgY2xhc3M9 IiI+c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZTwvYT4mbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0 bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllIiBjbGFzcz0iIj5zdGVwaGVuLmZhcnJlbGxAY3Mu dGNkLmllPC9hPiZndDsmZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBDYzogTGUgRmF1Y2hldXIgRnJh bmNvaXMgJmx0OzxhIGhyZWY9Im1haWx0bzpmbGVmYXVjaEBjaXNjby5jb20iIGNsYXNzPSIiPmZs ZWZhdWNoQGNpc2NvLmNvbTwvYT4mbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpmbGVmYXVjaEBj aXNjby5jb20iIGNsYXNzPSIiPmZsZWZhdWNoQGNpc2NvLmNvbTwvYT4mZ3Q7Jmd0OywgVGhlIElF U0cgJmx0OzxhIGhyZWY9Im1haWx0bzppZXNnQGlldGYub3JnIiBjbGFzcz0iIj5pZXNnQGlldGYu b3JnPC9hPiZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmllc2dAaWV0Zi5vcmciIGNsYXNzPSIi Pmllc2dAaWV0Zi5vcmc8L2E+Jmd0OyZndDssDQo8YSBocmVmPSJtYWlsdG86Y2RuaS1jaGFpcnNA aWV0Zi5vcmciIGNsYXNzPSIiPmNkbmktY2hhaXJzQGlldGYub3JnPC9hPiZsdDttYWlsdG86PGEg aHJlZj0ibWFpbHRvOmNkbmktY2hhaXJzQGlldGYub3JnIiBjbGFzcz0iIj5jZG5pLWNoYWlyc0Bp ZXRmLm9yZzwvYT4mZ3Q7LA0KPGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtY2RuaS1sb2dnaW5n QGlldGYub3JnIiBjbGFzcz0iIj5kcmFmdC1pZXRmLWNkbmktbG9nZ2luZ0BpZXRmLm9yZzwvYT4m bHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLWNkbmktbG9nZ2luZ0BpZXRmLm9y ZyIgY2xhc3M9IiI+ZHJhZnQtaWV0Zi1jZG5pLWxvZ2dpbmdAaWV0Zi5vcmc8L2E+Jmd0OzxiciBj bGFzcz0iIj4NCjxkaXYgY2xhc3M9IkhPRW5aYiI+DQo8ZGl2IGNsYXNzPSJoNSI+Jmd0OzxiciBj bGFzcz0iIj4NCiZndDsgSGkgU3RlcGhlbiw8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIi Pg0KJmd0OyBSZXNwb25zZXMgdG8gdGhlIENPTU1FTlQgcGFydCBiZWxvdzo8YnIgY2xhc3M9IiI+ DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+ DQomZ3Q7IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS08YnIgY2xhc3M9IiI+DQomZ3Q7IENPTU1FTlQ6PGJyIGNsYXNz PSIiPg0KJmd0OyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4N CiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IC0gSSBzdXBwb3J0IFJpY2hhcmQncyBkaXNjdXNzLiBJ c24ndCBpdCBpcm9uaWMgdGhhdCB0aGUgZENETidzPGJyIGNsYXNzPSIiPg0KJmd0OyBwcml2YWN5 ICh0aGF0IG9mIGEgY29tcGFueSkgaXMgYmV0dGVyIHN1cHBvcnRlZCB0aGFuIHRoYXQgb2Y8YnIg Y2xhc3M9IiI+DQomZ3Q7IHRoZSBlbmQgdXNlciAoYSBwZXJzb24pPGJyIGNsYXNzPSIiPg0KJmd0 OzxiciBjbGFzcz0iIj4NCiZndDsgV2l0aCBhbm9ueW1pemF0aW9uIG5vdyBiZWluZyBhIFNIT1VM RCwgSSB0aG91Z2h0IFJpY2hhcmTigJlzIERJU0NVU1Mgd2FzIGFkZHJlc3NlZCAoYXBhcnQgZnJv bSB0aGUgcG90ZW50aWFsIG5lZWQgdG8gYWRkIHBvcnQgYW5vbnltaXphdGlvbiBhcyBkaXNjdXNz ZWQgc2VwYXJhdGVseSBmb3IgeW91ciBvd24gRElTQ1VTUykuPGJyIGNsYXNzPSIiPg0KJmd0Ozxi ciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IC0gMi4yLjEgLSB3aHkgaXMgcGVy LWNodW5rIGFsd2F5cyBuZWVkZWQ/PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZn dDsgQWdncmVnYXRlZCBsb2dzIGZvciBzZWdtZW50ZWQgY29udGVudCBpcyBhIHRyaWNreSBjb25j ZXB0LCBmb3Igd2hpY2ggdGhlcmUgaXMgbm8gc3RhbmRhcmQgdG9kYXkgYW5kIG1hbnkgcG90ZW50 aWFsIHdheXMgdG8gZG8gaXQsIGFuZCB3aGljaCB0aGUgV29ya2luZyBHcm91cCBoYXMgZWxlY3Rl ZCB0byBrZWVwIGZvciBhIG5leHQgdmVyc2lvbiBvZiB0aGUgbG9nZ2luZyBzcGVjIChqdXN0IHNv IHRoYXQgd2UgY2FuIGNvbWUgdXAgd2l0aCBhIGJhc2UNCiBDRE5JIGxvZ2dpbmcgc3BlYyBfcmVs YXRpdmVseV8gcXVpY2tseSApLjxiciBjbGFzcz0iIj4NCiZndDsgU28gdGhlIG9ubHkgc3VyZSB3 YXkgdG8gc3VwcG9ydCBpbnRlcm9wZXJhYmlsdHkgYWNyb3NzIENETnMgZm9yIGxvZ3Mgb2Ygc2Vn bWVudGVkIGNvbnRlbnQgaXMgdG8gcHJvdmlkZSBwZXItY2h1bmsgbG9nLCBoZW5jZSB0aGUgc3Rh dGVtZW50IHRoYXQgdGhvc2UgYWx3YXlzIG5lZWQgdG8gYmUgZ2VuZXJhdGVkLjxiciBjbGFzcz0i Ij4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0i Ij4NCiZndDsgLSA8YSBocmVmPSJodHRwOi8vMi4yLjUuMy8iIHJlbD0ibm9yZWZlcnJlciIgdGFy Z2V0PSJfYmxhbmsiIGNsYXNzPSIiPjIuMi41LjM8L2E+OiB3aGF0J3MgJnF1b3Q7dHJhY2sgYXVk aWVuY2UmcXVvdDsgbWVhbj88YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBU aGlzIHRlcm1pbm9sb2d5IGlzIGxpa2VseSBpbmhlcml0ZWQgZnJvbSB0aGUgVFYvVmlkZW8gZXJh LCBtZWFuaW5nIGluIHBhcnRpY3VsYXIgdHJhY2tpbmcgaG93IGJpZyBhIHBvcHVsYXRpb24gd2F0 Y2hlcyB3aGljaCBtb3ZpZS92aWRlby48YnIgY2xhc3M9IiI+DQomZ3Q7IEdpdmVuIHRoZSBtb3Jl IGdlbmVyYWwgYXBwbGljYWJpbGl0eSBoZXJlLCBob3cgYWJvdXQgd2UgcmVwbGFjZSBieSBzb21l dGhpbmcgbGlrZSDigJxkZXZlbG9wIHN0YXRpc3RpY3Mgb24gY29udGVudCBkb3dubG9hZOKAnT88 YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsg LSA8YSBocmVmPSJodHRwOi8vMi4yLjUuNC8iIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxh bmsiIGNsYXNzPSIiPjIuMi41LjQ8L2E+OiB0aGVyZSBhcmUgbW9yZSBzZWN1cml0eSBnb2FscyBp biB0aGUgdW5pdmVyc2U8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBDZXJ0 YWlubHksIGJ1dCB0aGlzIGlzIG5vdCBhIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rpb246 IHNlY3Rpb24gMi4yLjUgZGlzY3Vzc2luZyBMb2cgQ29uc3VtaW5nIGFwcGxpY2F0aW9ucy4gQW5k IDIuMi41LjQgaXMgZGlzY3Vzc2luZyBvbmUgc3VjaCBhcHBsaWNhdGlvbiB3aGljaCBpcyB0byBk ZXRlY3QgdmlvbGF0aW9uIG9mIGNvbnRlbnQgYWNjZXNzIHBvbGljeS48YnIgY2xhc3M9IiI+DQom Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgLSA8YSBocmVmPSJodHRw Oi8vMi4yLjUuNC8iIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPjIu Mi41LjQ8L2E+OiBzZWVtcyBsaWtlIHRoZSB1c2VyIGlzIHRoZSBlbmVteSwgdGhhdCdzIG9kZDxi ciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IFdpdGggcmVzcGVjdCB0byBDb250 ZW50IFByb3RlY3Rpb24gKHRoZSBzdWJqZWN0IG9mIDIuMi41LjQpIHVuYXV0aG9yaXNlZCB1c2Vy IGlzIGluZGVlZCB0aGUgZW5lbXksIGFpbWluZyBhdCBzdGVhbGluZyBzb21lIGNvbnRlbnQgZnJv bSB0aGUgQ0ROcy48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFz cz0iIj4NCiZndDsgLSAyLjIuNS42LjI6IHRoZXJlIGlzIG5vICZxdW90O2Jyb3dzZXIgdHlwZSBo ZWFkZXImcXVvdDsgdGhhdCBJIGtub3cgb2YsPGJyIGNsYXNzPSIiPg0KJmd0OyBidXQgdGhlcmUg aXMgdGhlIHdlbGwta25vd24gVUEgc3RyaW5nLiBCZWluZyBzcGVjaWZpYyBhYm91dDxiciBjbGFz cz0iIj4NCiZndDsgdGhhdCBpcyBiZXR0ZXIuPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0i Ij4NCiZndDsgVGhpcyBpcyBmaXhlZCBpbiAtMTkgd2hpY2ggbm93IHNheXM6PGJyIGNsYXNzPSIi Pg0KJmd0OyAmcXVvdDtUZXJtaW5hbCB0eXBlIChtb2JpbGUsIFBDLCBTVEIsIGlmIHRoaXMgaW5m b3JtYXRpb24gY2FuIGJlPGJyIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7IGFj cXVpcmVkIGZyb20gdGhlIGJyb3dzZXIgdHlwZSBpbmZlcnJlZCBmcm9tIHRoZSBVc2VyIEFnZW50 PGJyIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7IHN0cmluZywgZm9yIGV4YW1w bGUpLjxiciBjbGFzcz0iIj4NCiZndDsgJnF1b3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFz cz0iIj4NCiZndDsgLSAzLjE6IFNTLlMgLSBkb2VzIHRoYXQgaW1wbHkgYSB0aW1lIGdyYW51bGFy aXR5IG9mIDEwMG1zPyZuYnNwOyBJZjxiciBjbGFzcz0iIj4NCiZndDsgc28sIHBsZWFzZSBzYXkg c28uPGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgQXMgYSByZXN1bHQgb2Yg YW5vdGhlciBJRVNHIHJldmlldyBjb21tZW50LCB3ZSBoYXZlIHJlcGxhY2VkJm5ic3A7IG91ciBv d24gZGVmaW5pdGlvbiBvZiB0aW1lIGJ5IGEgcmVmZXJlbmNlIHRvIFJGQzMzMzkuPGJyIGNsYXNz PSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsg4oCcPGJyIGNsYXNzPSIiPg0KJmd0OyBUSU1F ID0gMkRJR0lUICZxdW90OzomcXVvdDsgMkRJR0lUICZxdW90OzomcXVvdDsgMkRJR0lUIFsmcXVv dDsuJnF1b3Q7ICpESUdJVF08YnIgY2xhc3M9IiI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOzsgVGltZXMgYXJlIGVuY29kZWQgYXMgJnF1b3Q7cGFydGlhbC10aW1lJnF1 b3Q7IHNwZWNpZmllZCBpbiBbUkZDMzMzOV0uPGJyIGNsYXNzPSIiPg0KJmd0OyAmcXVvdDs8YnIg Y2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBTbyB0aGF0IHBvaW50IHNob3VsZCBi ZSBmaXhlZCBhbHJlYWR5LjxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7PGJy IGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgLSAzLjQuNDogY3MtdXJpOiBwbGVh c2Ugbm90IHRoYXQgdGhlc2UgY2FuIGJlIHByaXZhY3k8YnIgY2xhc3M9IiI+DQomZ3Q7IHNlbnNp dGl2ZSwgdGhvdWdoIHByZXN1bWFibHkgbGVzcyBzbyB0aGFuIGUuZy4mbmJzcDsgbG9nZ2VkIFVS SXMgb248YnIgY2xhc3M9IiI+DQomZ3Q7IGEgc2VhcmNoIGVuZ2luZS48YnIgY2xhc3M9IiI+DQom Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyBJcyB0aGlzIGp1c3QgZm9yIG91ciBpbmZvcm1hdGlvbiBv ciBkbyB5b3UgcmVjb21tZW5kIHRoYXQgd2UgYWRkIGEgc3RhdGVtZW50IGFib3V0IHRoZSBmYWN0 IHRoYXQgY3MtdXJpIGNhbiBiZSBwcml2YWN5IHNlbnNpdGl2ZT88YnIgY2xhc3M9IiI+DQomZ3Q7 IElmIElQL3BvcnRzIGFyZSBhbm9ueW1pc2VkLCBpcyBjcy11cmkgc3RpbGwgcHJpdmFjeSBzZW5z aXRpdmUgKGlzIHRoaXMgaW4gY2FzZSB0aGUgdXJpIGl0c2VsZiBjb250YWlucyBzb21lIGluZm9y bWF0aW9uIHRoYXQgY2FuIGJlIHRyYWNlZCBiYWNrIHRvIGEgZ2l2ZW4gZW5kLXVzZXI/PGJyIGNs YXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNs YXNzPSIiPg0KJmd0OyAtIDMuNC40OiBmb28tdXJpOiBkbyB0aGVzZSBjb250YWluIGZyYWdtZW50 cyBvciBub3Q/PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgSW4gYSBwZXIt Y2h1bmsgbG9nICh3aGljaCBpcyBzcGVjaWZpZWQgaW4gdGhpcyBkb2N1bWVudCBhcyB0aGUgaW50 ZXJvcGVyYWJsZSBtZWNoYW5pc20gdG8gZXhjaGFuZ2UgbG9ncyBmb3IgZnJhZ21lbnRlZCBjb250 ZW50KSwgdGhlIHVyaSBjb250YWlucyB0aGUgVVJJIG9mIGVhY2ggc3BlY2lmaWMgZnJhZ21lbnQu PGJyIGNsYXNzPSIiPg0KJmd0OyBJbiBhbiBhZ2dyZWdhdGVkIGxvZyBmb3IgYSBzZWdtZW50ZWQg Y29udGVudCBkZWxpdmVyeSAod2hpY2ggaXMgbm90IHNwZWNpZmllZCBpbiB0aGlzIGRvY3VtZW50 KSwgdGhlcmUgYXJlIG1hbnkgcG90ZW50aWFsIG9wdGlvbnMgKFVSSSBvZiBmaXJzdCBzZWdtZW50 LCBVUkkgb2YgdGhlIHBsYXlsaXN0LCBwYXJ0IG9mIHRoZSBVUkkgY29tbW9uIHRvIGFsbCBzZWdt ZW50cyzigKYuKS4gVGhpcyBpcyBvbmUgb2YgdGhlIGNvbXBsZXhpdGllcyBvZiBzcGVjaWZ5aW5n DQogYWdncmVnYXRlZCBsb2dzIGZvciBzZWdtZW50ZWQgY29udGVudC48YnIgY2xhc3M9IiI+DQom Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQom Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyAtIEkgc3VwcG9ydCBSaWNoYXJkJ3MgZGlzY3Vzcy4gSXNu J3QgaXQgaXJvbmljIHRoYXQgdGhlIGRDRE4nczxiciBjbGFzcz0iIj4NCiZndDsgcHJpdmFjeSAo dGhhdCBvZiBhIGNvbXBhbnkpIGlzIGJldHRlciBzdXBwb3J0ZWQgdGhhbiB0aGF0IG9mPGJyIGNs YXNzPSIiPg0KJmd0OyB0aGUgZW5kIHVzZXIgKGEgcGVyc29uKTxiciBjbGFzcz0iIj4NCiZndDs8 YnIgY2xhc3M9IiI+DQomZ3Q7IC0gMi4yLjEgLSB3aHkgaXMgcGVyLWNodW5rIGFsd2F5cyBuZWVk ZWQ/PGJyIGNsYXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDsgLSA8YSBocmVmPSJodHRw Oi8vMi4yLjUuMy8iIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiIGNsYXNzPSIiPjIu Mi41LjM8L2E+OiB3aGF0J3MgJnF1b3Q7dHJhY2sgYXVkaWVuY2UmcXVvdDsgbWVhbj88YnIgY2xh c3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyAtIDxhIGhyZWY9Imh0dHA6Ly8yLjIuNS40 LyIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9IiI+Mi4yLjUuNDwvYT46 IHRoZXJlIGFyZSBtb3JlIHNlY3VyaXR5IGdvYWxzIGluIHRoZSB1bml2ZXJzZTxiciBjbGFzcz0i Ij4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IC0gPGEgaHJlZj0iaHR0cDovLzIuMi41LjQvIiBy ZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIiBjbGFzcz0iIj4yLjIuNS40PC9hPjogc2Vl bXMgbGlrZSB0aGUgdXNlciBpcyB0aGUgZW5lbXksIHRoYXQncyBvZGQ8YnIgY2xhc3M9IiI+DQom Z3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyAtIDIuMi41LjYuMjogdGhlcmUgaXMgbm8gJnF1b3Q7YnJv d3NlciB0eXBlIGhlYWRlciZxdW90OyB0aGF0IEkga25vdyBvZiw8YnIgY2xhc3M9IiI+DQomZ3Q7 IGJ1dCB0aGVyZSBpcyB0aGUgd2VsbC1rbm93biBVQSBzdHJpbmcuIEJlaW5nIHNwZWNpZmljIGFi b3V0PGJyIGNsYXNzPSIiPg0KJmd0OyB0aGF0IGlzIGJldHRlci48YnIgY2xhc3M9IiI+DQomZ3Q7 PGJyIGNsYXNzPSIiPg0KJmd0OyAtIDMuMTogU1MuUyAtIGRvZXMgdGhhdCBpbXBseSBhIHRpbWUg Z3JhbnVsYXJpdHkgb2YgMTAwbXM/Jm5ic3A7IElmPGJyIGNsYXNzPSIiPg0KJmd0OyBzbywgcGxl YXNlIHNheSBzby48YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNsYXNzPSIiPg0KJmd0OyAtIDMuNC40 OiBjcy11cmk6IHBsZWFzZSBub3QgdGhhdCB0aGVzZSBjYW4gYmUgcHJpdmFjeTxiciBjbGFzcz0i Ij4NCiZndDsgc2Vuc2l0aXZlLCB0aG91Z2ggcHJlc3VtYWJseSBsZXNzIHNvIHRoYW4gZS5nLiZu YnNwOyBsb2dnZWQgVVJJcyBvbjxiciBjbGFzcz0iIj4NCiZndDsgYSBzZWFyY2ggZW5naW5lLjxi ciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQomZ3Q7IC0gMy40LjQ6IGZvby11cmk6IGRv IHRoZXNlIGNvbnRhaW4gZnJhZ21lbnRzIG9yIG5vdD88YnIgY2xhc3M9IiI+DQomZ3Q7PGJyIGNs YXNzPSIiPg0KJmd0OzxiciBjbGFzcz0iIj4NCiZndDs8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_C3E454864BA24879A2FDDB92EF380E02ciscocom_-- From nobody Wed Jan 27 11:41:07 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 602071B3043; Wed, 27 Jan 2016 11:41:04 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160127194104.5266.89797.idtracker@ietfa.amsl.com> Date: Wed, 27 Jan 2016 11:41:04 -0800 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-redirection-15.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jan 2016 19:41:04 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : Request Routing Redirection interface for CDN Interconnection Authors : Ben Niven-Jenkins Ray van Brandenburg Filename : draft-ietf-cdni-redirection-15.txt Pages : 32 Date : 2016-01-27 Abstract: The Request Routing Interface comprises of (1) the asynchronous advertisement of footprint and capabilities by a downstream Content Delivery Network (CDN) that allows an upstream CDN to decide whether to redirect particular user requests to that downstream CDN; and (2) the synchronous operation of an upstream CDN requesting whether a downstream CDN is prepared to accept a user request and of a downstream CDN responding with how to actually redirect the user request. This document describes an interface for the latter part, i.e., the CDNI Request Routing Redirection interface. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-redirection-15 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-redirection-15 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jan 27 11:43:32 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75C3C1B3052 for ; Wed, 27 Jan 2016 11:43:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2lkc2_q1NKu7 for ; Wed, 27 Jan 2016 11:43:26 -0800 (PST) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.62]) by ietfa.amsl.com (Postfix) with ESMTP id A1F081B304E for ; Wed, 27 Jan 2016 11:43:25 -0800 (PST) Received: from [217.155.121.38] (helo=[172.16.19.105]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1aOVzv-0009Lz-9D for cdni@ietf.org; Wed, 27 Jan 2016 19:43:24 +0000 From: Ben Niven-Jenkins Content-Type: multipart/alternative; boundary="Apple-Mail=_780906F7-192A-4992-9DA8-004B5979DAF1" Message-Id: Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) Date: Wed, 27 Jan 2016 19:43:21 +0000 References: To: Content Delivery Networks Interconnection Discussion List In-Reply-To: X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Subject: Re: [CDNi] Shepherd Review of draft-ietf-cdni-redirection-14.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jan 2016 19:43:30 -0000 --Apple-Mail=_780906F7-192A-4992-9DA8-004B5979DAF1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Kevin, I=E2=80=99ve made most of the changes you suggested, comments/what = I=E2=80=99ve done are below. I=E2=80=99ve pushed -15 with the changes, diff to -14 is here: https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection-15 = Let me know if there are any other changes you want to the document. > On 13 Jan 2016, at 23:16, Kevin Ma J wrote: >=20 > Hi Ben/Ray, >=20 > (as chair) I've completed my shepherd's review of the document and = have enclosed some questions comments below. Most are nits, but the = IANA Considerations and Normative/Informative Reference comments at the = end need to be addressed. >=20 > thanx! >=20 > -- Kevin J. Ma >=20 >=20 > - general: there is inconsistency in the use of "Redirection = Interface" and "Redirection interface"; it seems to be a problem in all = the docs, but logging mostly uses the lowercase =E2=80=9Ci" Changed to using =E2=80=98Redirection interface=E2=80=99 throughout. > - general: "e.g. " -> "e.g., ", "i.e. " -> "i.e., ", and "For example = " -> "For example, =E2=80=9C Done. > - section 3: The bulleted items are not complete sentences, perhaps: >=20 > "The final Surrogate, which may be in the dCDN that returned the = RI > response to the uCDN, or another CDN (if the dCDN delegates the > delivery to another CDN)." -> > "The final Surrogate, which may be in the dCDN that returned the = RI > response to the uCDN, or another CDN (if the dCDN delegates the > delivery to another CDN); or=E2=80=9D Done. > - section 3: comma after "Therefore": >=20 > "Therefore the scope of this document is limited to Recursive > Request Redirection." -> > "Therefore, the scope of this document is limited to Recursive > Request Redirection.=E2=80=9D Done > - section 3: the colon should be a semi-colon: >=20 > "domain in the URL dereferenced to reach the uCDN: without = operational > precautions, and in the absence of DNSSEC, this can make a = legitimate > redirection look like a DNS-based attack" -> > "domain in the URL dereferenced to reach the uCDN; without = operational > precautions, and in the absence of DNSSEC, this can make a = legitimate > redirection look like a DNS-based attack=E2=80=9D Done. > - section 4: Though it mentions being extensible, we do not give any = guidance on how to extend the RI. Should we? Or should we just leave = it? >=20 > "Finally, the RI is easily extendable to support other User Agent > request redirection methods (e.g. RTMP 302 redirection)." >=20 > One thought is that the way to extend this would be: write a new RFC, = with new RI JSON objects, and registering a new redirection mode = capability? I changed the sentence to: Finally, the RI is easily extendable to support other User Agent request = redirection methods (e.g., RTMP 302 redirection) by defining additional = protocol specific keys for RI requests and responses along with a = specification how to process them. to try and expand a bit on how extensions could be done. I don=E2=80=99t = think it=E2=80=99s the role of this document to specify exactly what is = required, e.g. mandating an RFC. If you think it needs more explanation = on how to extend it I can look at crafting some more detailed text? > - section 4.1: suggested edit: >=20 > "The scope of the response (if it is cacheable) signaled the HTTP > response body of the RI response. For example whether the > response applies to a wider range of IP addresses than what was > included in the RI request." -> > "The scope of a cacheable response signaled via the HTTP > response body of the RI response, for example, whether the > response applies to a wider range of IP addresses than what was > included in the RI request.=E2=80=9D Done. > - section 4.3: the reference to RFC7336 (Framework) should be to = RFC7736 (Media Type) Good catch. Done. > - section 4.4.2: Should this also state that the dns dictionary MUST = contain the rcode and name keys? >=20 > "If a dns dictionary is included in the RI > response, it MUST include at least one of the following keys: a, > aaaa, cname.=E2=80=9D Done. I integrated it into the existing sentence about including one of = a, aaaa, came so it now reads: If a dns dictionary is included in the RI response, it MUST include the = rcode and name keys and it MUST include at least one of the following = keys: a, aaaa, came. > - section 4.5.2: missing "and": >=20 > "it MUST include at least the following keys: sc- > status, sc-version, sc-reason, cs-uri, sc-(location)." -> > "it MUST include at least the following keys: sc- > status, sc-version, sc-reason, cs-uri, and sc-(location).=E2=80=9D Done. > - section 4.8: this implies that the CDN knows the dCDN's provider ID? = Is that typically true? Would it be simpler to have CDNs check just = their own provider ID? I would suggest removing this sentence? >=20 > "Transit CDNs MUST check the cdn- > path and not cascade the RI request to dCDNs that are already listed > in cdn-path.=E2=80=9D Done. > - section 4.8: suggested edit: >=20 > "As well as loops within the RI itself," -> > "Beside loops within the RI itself,=E2=80=9D Done. > - section 4.8: missing commas: >=20 > "for example if the IP > address(es) or URI(s) returned in RI responses do not resolve > directly to a surrogate in the final dCDN there is the possibility" = -> > "for example, if the IP > address(es) or URI(s) returned in RI responses do not resolve > directly to a surrogate in the final dCDN, there is the = possibility=E2=80=9D Done. > - section 4.8: typo: "continuosly" -> =E2=80=9Ccontinuously" Done. > - section 5.1: bullet punctuation: >=20 > "the dCDN and uCDN to authorize each other (to ensure they are > transmitting/receiving CDNI Redirection messages to/from an > authorized CDN)" -> > "the dCDN and uCDN to authorize each other (to ensure they are > transmitting/receiving CDNI Redirection messages to/from an > authorized CDN);" >=20 > "CDNI Redirection interface messages to be transmitted with > confidentiality." -> > "CDNI Redirection interface messages to be transmitted with > confidentiality; and=E2=80=9D Done. > - section 5.2: the rest of the doc uses "an RI", but this section uses = "a RI"; should make it consistent. Done. > - section 5.2: the first 11 words of section 5.2 are identical to the = first 11 words of section 5; maybe just remove them from section 5.2? >=20 > "Information passed over the RI could be considered personal or > sensitive. In particular, parts" -> > =E2=80=9CParts" I think the repetition is OK and provides a refresh of the context. As = privacy is likely to be a topic folks nit pick at during IETF LC/IESG = review I=E2=80=99d rather be cautious and repeat myself and leave it to = the RFC editor to tweak for readability. > - section 5.2: suggested edit: >=20 > "do obtain information regarding End User IP addresses > and requested URIs that they wouldn't had the RI not been used." -> > "do obtain information regarding End User IP addresses > and requested URIs that they wouldn't have, had the RI not been = used.=E2=80=9D Done. > - section 6.2: should this be a "subregistry within the "Content = Delivery Network Interconnection (CDNI) Parameters" registry.=E2=80=9D? I don=E2=80=99t think so. What we=E2=80=99re defining a registry for is = a set of numeric response codes & their meanings for returning in a RI = (error) response. It is not obvious to me how that registry is related = to the CDNI parameters registry (assuming by CDNI Parameters registry = you mean the Media Type parameter registry). > - section 6.2: do we want to specify the RFC5226 policy? is it Expert > Review? not Specification required? >=20 > "Specification: An optional reference to a specification that > defines in the error code in more detail.=E2=80=9D I made it Specification Required, added a normative reference to RFC5226 = and tweaked the existing wording to be inline with RFC7736. it now = reads: =E2=80=9C=E2=80=9D" This document establishes a new IANA registry for CDNI RI Error response = codes. Additions to the "RI Error response registry=E2=80=9D will be = made via "Specification Required" as defined in [RFC5226]. The Designated Expert will verify that new error code registrations do = not duplicate existing error code definitions (in name or = functionality), ensure that the new error code is in accordance with the = error classes defined in section Section 4.7 of this document, prevent = gratuitous additions to the namespace, and prevent any additions to the = namespace that would impair the interoperability of CDNI = implementations. =E2=80=9C=E2=80=9D=E2=80=9D > - section 8: there's an extra space in my name: "Kevin J. Ma" -> = "Kevin J. Ma=E2=80=9D Wow you have eagle eyes :-) It seems xml2rfc mistakes the =E2=80=9C.=E2=80= =9D for a full stop (period) and automatically starts every sentence = with 2 spaces. I=E2=80=99ve changed it to =E2=80=9CKevin J Ma=E2=80=9D = to avoid the double space but can change it back it you prefer it with = the full stop (period). > - section 9.1: There is a normative reference to the informational = Framework draft. Does this need to be normative? If so, why? Note: It = is informative in the other interface specifications. Changed to informative. > - section 9.2: the (missing) reference to RFC7736 should be = informative Added. Ben --Apple-Mail=_780906F7-192A-4992-9DA8-004B5979DAF1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Kevin,

I=E2=80=99ve made most of the changes you suggested, = comments/what I=E2=80=99ve done are below.

I=E2=80=99ve pushed -15 with the = changes, diff to -14 is here:

https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection= -15

Let me = know if there are any other changes you want to the document.


On = 13 Jan 2016, at 23:16, Kevin Ma J <kevin.j.ma@ericsson.com> wrote:

Hi Ben/Ray,

 (as chair) I've completed my shepherd's = review of the document and have enclosed some questions comments below. =  Most are nits, but the IANA Considerations and = Normative/Informative Reference comments at the end need to be = addressed.

thanx!

--  Kevin J. Ma


- general: there is inconsistency in the use of "Redirection = Interface" and "Redirection interface"; it seems to be a problem in all = the docs, but logging mostly uses the lowercase =E2=80=9Ci"

Changed to using = =E2=80=98Redirection interface=E2=80=99 throughout.

- = general: "e.g. " -> "e.g., ", "i.e. " -> "i.e., ", and "For = example " -> "For example, =E2=80=9C

Done.

- section 3: The bulleted items = are not complete sentences, perhaps:

=     "The final Surrogate, which may be in the dCDN = that returned the RI
=      response to the uCDN, or another CDN (if = the dCDN delegates the
=      delivery to another CDN)." ->
    "The final Surrogate, which may be = in the dCDN that returned the RI
=      response to the uCDN, or another CDN (if = the dCDN delegates the
=      delivery to another CDN); = or=E2=80=9D

Done.

- section 3: comma after "Therefore":

 "Therefore the scope of this document = is limited to Recursive
  Request Redirection." = ->
 "Therefore, the scope of this document is = limited to Recursive
  Request = Redirection.=E2=80=9D

Done

- section 3: the colon should be a = semi-colon:

 "domain in the URL = dereferenced to reach the uCDN: without operational
=   precautions, and in the absence of DNSSEC, this can make a = legitimate
  redirection look like a DNS-based = attack" ->
 "domain in the URL dereferenced to = reach the uCDN; without operational
=   precautions, and in the absence of DNSSEC, this can make a = legitimate
  redirection look like a DNS-based = attack=E2=80=9D

Done.

- section 4: Though it mentions being = extensible, we do not give any guidance on how to extend the RI. =  Should we?  Or should we just leave it?

 "Finally, the RI is easily extendable to support other = User Agent
  request redirection methods (e.g. =  RTMP 302 redirection)."

 One = thought is that the way to extend this would be: write a new RFC, with = new RI JSON objects, and registering a new redirection mode = capability?

I = changed the sentence to:

Finally, = the RI is easily extendable to support other User Agent request = redirection methods (e.g., RTMP 302 redirection) by defining additional = protocol specific keys for RI requests and responses along with a = specification how to process them.

to = try and expand a bit on how extensions could be done. I don=E2=80=99t = think it=E2=80=99s the role of this document to specify exactly what is = required, e.g. mandating an RFC. If you think it needs more explanation = on how to extend it I can look at crafting some more detailed = text?

- section 4.1: suggested edit:

=     "The scope of the response (if it is cacheable) = signaled the HTTP
     response = body of the RI response.  For example whether the
=      response applies to a wider range of IP = addresses than what was
=      included in the RI request." ->
    "The scope of a cacheable response = signaled via the HTTP
=      response body of the RI response, for = example, whether the
=      response applies to a wider range of IP = addresses than what was
=      included in the RI = request.=E2=80=9D

Done.

- section 4.3: the reference to RFC7336 = (Framework) should be to RFC7736 (Media Type)

Good catch. = Done.

- section 4.4.2: Should this also state that the dns = dictionary MUST contain the rcode and name keys?

 "If a dns dictionary is included in the RI
  response, it MUST include at least one of the = following keys: a,
  aaaa, = cname.=E2=80=9D

Done. I = integrated it into the existing sentence about including one of a, aaaa, = came so it now reads:

If a dns = dictionary is included in the RI response, it MUST include the rcode and = name keys and it MUST include at least one of the following keys: a, = aaaa, came.

- section 4.5.2: missing "and":

 "it MUST include at least the following = keys: sc-
  status, sc-version, sc-reason, = cs-uri, sc-(location)." ->
 "it MUST include at = least the following keys: sc-
  status, = sc-version, sc-reason, cs-uri, and = sc-(location).=E2=80=9D

Done.

- section 4.8: this implies that the CDN = knows the dCDN's provider ID?  Is that typically true?  Would = it be simpler to have CDNs check just their own provider ID?  I = would suggest removing this sentence?

=  "Transit CDNs MUST check the cdn-
  path = and not cascade the RI request to dCDNs that are already listed
  in cdn-path.=E2=80=9D

Done.

- section 4.8: suggested edit:

 "As well as loops within the RI = itself," ->
 "Beside loops within the RI = itself,=E2=80=9D

Done.

- section 4.8: missing commas:

 "for example if the IP
=   address(es) or URI(s) returned in RI responses do not = resolve
  directly to a surrogate in the final = dCDN there is the possibility" ->
 "for example, = if the IP
  address(es) or URI(s) returned in = RI responses do not resolve
  directly to a = surrogate in the final dCDN, there is the = possibility=E2=80=9D

Done.

- section 4.8: typo: "continuosly" -> = =E2=80=9Ccontinuously"

Done.

- section 5.1: bullet punctuation:

    "the dCDN and uCDN to = authorize each other (to ensure they are
=      transmitting/receiving CDNI Redirection = messages to/from an
=      authorized CDN)" ->
=     "the dCDN and uCDN to authorize each other (to = ensure they are
=      transmitting/receiving CDNI Redirection = messages to/from an
=      authorized CDN);"

    "CDNI Redirection interface messages = to be transmitted with
=      confidentiality." ->
=     "CDNI Redirection interface messages to be = transmitted with
=      confidentiality; = and=E2=80=9D

Done.

- section 5.2: the rest of the doc uses "an = RI", but this section uses "a RI"; should make it consistent.

Done.

- section 5.2: the first 11 words of section = 5.2 are identical to the first 11 words of section 5; maybe just remove = them from section 5.2?

 "Information passed = over the RI could be considered personal or
=   sensitive.  In particular, parts" ->
=  =E2=80=9CParts"

I think the repetition is OK and provides a refresh of = the context. As privacy is likely to be a topic folks nit pick at during = IETF LC/IESG review I=E2=80=99d rather be cautious and repeat myself and = leave it to the RFC editor to tweak for readability.

- = section 5.2: suggested edit:

 "do = obtain information regarding End User IP addresses
=   and requested URIs that they wouldn't had the RI not been = used." ->
 "do obtain information regarding End = User IP addresses
  and requested URIs that = they wouldn't have, had the RI not been = used.=E2=80=9D

Done.

- section 6.2: should this be a "subregistry = within the "Content Delivery Network Interconnection (CDNI) Parameters" = registry.=E2=80=9D?

I don=E2=80=99t think so. What we=E2=80=99re defining a = registry for is a set of numeric response codes & their meanings for = returning in a RI (error) response. It is not obvious to me how that = registry is related to the CDNI parameters registry (assuming by CDNI = Parameters registry you mean the Media Type parameter = registry).

- section 6.2: do we want to specify the = RFC5226 policy?  is it Expert
 Review? =  not Specification required?

=     "Specification: An optional reference to a = specification that
     defines = in the error code in more detail.=E2=80=9D

I made it Specification Required, added a normative = reference to RFC5226 and tweaked the existing wording to be inline with = RFC7736. it now reads:

=E2=80=9C=E2=80=9D"
This = document establishes a new IANA registry for CDNI RI Error response = codes.  Additions to the "RI Error response registry=E2=80=9D will = be made via "Specification Required" as defined in [RFC5226].

The Designated Expert = will verify that new error code registrations do not duplicate existing = error code definitions (in name or functionality), ensure that the new = error code is in accordance with the error classes defined in section = Section 4.7 of this document, prevent gratuitous additions to the = namespace, and prevent any additions to the namespace that would impair = the interoperability of CDNI = implementations.
=E2=80=9C=E2=80=9D=E2=80=9D
- = section 8: there's an extra space in my name: "Kevin J.  Ma" -> = "Kevin J. Ma=E2=80=9D

Wow = you have eagle eyes :-) It seems xml2rfc mistakes the =E2=80=9C.=E2=80=9D = for a full stop (period) and automatically starts every sentence with 2 = spaces. I=E2=80=99ve changed it to =E2=80=9CKevin J Ma=E2=80=9D to avoid = the double space but can change it back it you prefer it with the full = stop (period).

- section 9.1: There is a normative reference = to the informational Framework draft.  Does this need to be = normative?  If so, why?  Note: It is informative in the other = interface specifications.

Changed to informative.

- = section 9.2: the (missing) reference to RFC7736 should be informative

Added.


Ben

= --Apple-Mail=_780906F7-192A-4992-9DA8-004B5979DAF1-- From nobody Wed Jan 27 11:44:24 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D94771B304B for ; Wed, 27 Jan 2016 11:44:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s5QPEzJI8wIR for ; Wed, 27 Jan 2016 11:44:20 -0800 (PST) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.62]) by ietfa.amsl.com (Postfix) with ESMTP id 40FFE1B3058 for ; Wed, 27 Jan 2016 11:44:20 -0800 (PST) Received: from [217.155.121.38] (helo=[172.16.19.105]) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1aOW0p-0009Lz-Gs for cdni@ietf.org; Wed, 27 Jan 2016 19:44:19 +0000 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: <20160127194104.5266.89797.idtracker@ietfa.amsl.com> Date: Wed, 27 Jan 2016 19:44:18 +0000 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20160127194104.5266.89797.idtracker@ietfa.amsl.com> To: Content Delivery Networks Interconnection Discussion List X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-redirection-15.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jan 2016 19:44:22 -0000 Colleagues, This version addresses the comments raised by Kevin during his document = shepherd review. Ben > On 27 Jan 2016, at 19:41, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Content Delivery Networks = Interconnection Working Group of the IETF. >=20 > Title : Request Routing Redirection interface for CDN = Interconnection > Authors : Ben Niven-Jenkins > Ray van Brandenburg > Filename : draft-ietf-cdni-redirection-15.txt > Pages : 32 > Date : 2016-01-27 >=20 > Abstract: > The Request Routing Interface comprises of (1) the asynchronous > advertisement of footprint and capabilities by a downstream Content > Delivery Network (CDN) that allows an upstream CDN to decide whether > to redirect particular user requests to that downstream CDN; and (2) > the synchronous operation of an upstream CDN requesting whether a > downstream CDN is prepared to accept a user request and of a > downstream CDN responding with how to actually redirect the user > request. This document describes an interface for the latter part, > i.e., the CDNI Request Routing Redirection interface. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cdni-redirection-15 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection-15 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > CDNi mailing list > CDNi@ietf.org > https://www.ietf.org/mailman/listinfo/cdni From nobody Wed Jan 27 11:49:07 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 394361B304B; Wed, 27 Jan 2016 11:49:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WAeWLzOWf218; Wed, 27 Jan 2016 11:48:58 -0800 (PST) Received: from mail-yk0-x22c.google.com (mail-yk0-x22c.google.com [IPv6:2607:f8b0:4002:c07::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95D261B304A; Wed, 27 Jan 2016 11:48:58 -0800 (PST) Received: by mail-yk0-x22c.google.com with SMTP id v14so4306120ykd.3; Wed, 27 Jan 2016 11:48:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=mRWyqXN7oJKmmCUkvRFaZA+KSb9EhRFllGyTwV0NhjA=; b=T3GLHCWa+kylq7hZl42zPPeSL6i47+kEAD8Iy2sp/rWMsUueLJMuZ5C+36JqVvgl2k PR530E1oYbi41vKcd3PfO/OlChQr52rryw6dfE0uVRWZdpBWWZa0FKU/u2KEgBQYn36s 4Wx1rkLi8ZM+lAm1yOHOpc8x+oBXEfdaqCkDOU+ci/q6tCenr92wPl1qfAFLOCjB9Aos DsL4Pwo0Jon+CnMiHHtgRTwxu30OSM0lEwPPPnituCKZCrrcGQVBO+krzb5CwAmcGqYi wMZfMZva0/V4PCk7OZB/uNJ4me8AkyaCx/dwji5juP6JpflwWha3Abl9rlZTD+oUG+1m kGnQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=mRWyqXN7oJKmmCUkvRFaZA+KSb9EhRFllGyTwV0NhjA=; b=NS8RRLDDvCQAGYdyN/MohRFfATEeUlu3+u9Ptg8q28Tf/1B4rlrw1upOmmF/Dx3VwC BrS0UP3hwlrMwzD0DQjzqq18Y7UKPwy8njMs15XwcC6QSPPos8yzJxCTiL/U4xwQOm61 jJpnvPE7ooLzkFBz22qSyijLTPNy3QxZzU1/HG7gvuvkkX9jg3jsgHodan5BQj7XY1Uu BytwRB95KFOJvf9SLqItN8T/aUFBgFkzjiD2KE5PHRenIKvtDcsMPq63l+omPHtibuSU jxKcerYHBmJvqBYDGNP7GfCrkthCmQ1NC8LBtmPuvz24JX/oQkp336s8sfsIOwFHAyIW 8Quw== X-Gm-Message-State: AG10YORSv/v1Q4f9HZyRvE2BTMSw3oFZDsO7jWGG+RIuLEZXOPIqGD81AGTFpZZQxtKLuFsULffMUjPr4rVHlQ== MIME-Version: 1.0 X-Received: by 10.129.155.151 with SMTP id s145mr4434741ywg.24.1453924137918; Wed, 27 Jan 2016 11:48:57 -0800 (PST) Received: by 10.37.99.65 with HTTP; Wed, 27 Jan 2016 11:48:57 -0800 (PST) Received: by 10.37.99.65 with HTTP; Wed, 27 Jan 2016 11:48:57 -0800 (PST) In-Reply-To: References: <20151109165118.779.25437.idtracker@ietfa.amsl.com> <50381CDF-6A40-4447-846F-217E31934D6A@cisco.com> <56520141.8010806@cs.tcd.ie> Date: Wed, 27 Jan 2016 13:48:57 -0600 Message-ID: From: Spencer Dawkins at IETF To: "Francois Le Faucheur (flefauch)" Content-Type: multipart/alternative; boundary=94eb2c0b8da8c56d55052a5617e6 Archived-At: Cc: "draft-ietf-cdni-logging@ietf.org" , "cdni-chairs@ietf.org" , iesg@ietf.org, "cdni@ietf.org" , Stephen Farrell Subject: Re: [CDNi] Stephen Farrell's Discuss on draft-ietf-cdni-logging-21: (with DISCUSS and COMMENT) X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jan 2016 19:49:03 -0000 --94eb2c0b8da8c56d55052a5617e6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, Francois, On Jan 27, 2016 10:53, "Francois Le Faucheur (flefauch)" wrote: > > Hello Spencer, > > I should be able to work on this next week. > Thanks for the reminder. That works for me. Spencer > Francois > > >> On 26 Jan 2016, at 04:00, Spencer Dawkins at IETF < spencerdawkins.ietf@gmail.com> wrote: >> >> Hi, Francois, >> >> On Sun, Nov 22, 2015 at 11:54 AM, Stephen Farrell < stephen.farrell@cs.tcd.ie> wrote: >>> >>> >>> Hiya, >>> >>> Sure placing the text wherever makes sense if of course >>> fine, >>> >>> Cheers, >>> S >>> >>> On 22/11/15 16:57, Francois Le Faucheur (flefauch) wrote: >>> > Hello Stephen. >>> > >>> > Thanks for this update to your DISCUSS and COMMENTS. >>> > It all makes sense. Specific responses/resolution discussed below: >> >> >> If I'm following this correctly, you and Stephen have closed on resolutions for his DISCUSS and COMMENTS. >> >> Could you let me know when I should expect a revised draft? >> >> I would love to finish this up. >> >> Thanks! >> >> Spencer >> >>> >>> > (5) I'm not clear why you need to be able to send HTTP header >>> > values or session IDs via this i/f. Why is that needed? And >>> > it seems very dangerous, e.g. "cs(COOKIE)" could be a doosy. >>> > I would suggest adding new text in section 3.4 to cover all >>> > of the log content basically saying that you really need to >>> > know what you're doing or you can break security very easily. >>> > >>> > That makes sense. >>> > >>> > Some suggested text that could be added to the end of 3.4 >>> > just before the start of 3.4.1: >>> > >>> > Since the text below is specific to HTTP, I would lean for including it under 3.4.1 ("HTTP Request Logging Record=E2=80=9D) rather than under 3.= 4 which is meant to apply to any log (possibly of other protocols than HTTP). >>> > >>> > There is a discussion under 3.4.1 about which fields MUSt be included and which one MAY. I think right after that would be an ideal place to add the text below. >>> > >>> > Let me know if that does not work. >>> > >>> > >>> > >>> > "Logging fields >>> > >>> > s/Logging fields/Logging some fields/ >>> > since some fields are not very dangerous. >>> > >>> > from HTTP requests and responses can be >>> > very dangerous. For example, cookies will often contain >>> > (months) long lived bearer token >>> > >>> > This is a bit beyond my expertise, but I wonder if =E2=80=9Cbearer=E2= =80=9D is needed here: >>> > s/bearer token/token/ ? >>> > because I think the discussion here is meant to be generic while "bearer token" is a specific form of token. >>> > Or is =E2=80=9Cbearer token=E2=80=9D really the appropriate term in t= his generic sentence? >>> > >>> > values that can be used >>> > to login to a service as the relevant user. Similar values >>> > may be included in other header fields or within URLs or >>> > elsewhere in HTTP requests and responses. Centralising >>> > such values in a log >>> > >>> > s/log/CDNI Logging File/ >>> > >>> > can therefore represent a significant >>> > increase in risk both for the user and the web service >>> > provider, but also for the CDNs involved. Implementations >>> > ought therefore attempt to lower the probability of such >>> > bad outcomes e.g. by only allowing a configured set of >>> > headers to be added to logs >>> > >>> > s/logs/CDNI Logging Records/ >>> > >>> > , or by not supporting wildcard >>> > selection of HTTP request/response fields to add. Such >>> > mechanisms can reduce the probability that security (or >>> > privacy) sensitive values are centralised in logs.=E2=80=9D >>> > >>> > s/logs/CDNI Logging Files/ >>> > >>> > I suggest that , in addition to recommendations for implementations, we also add recommendations for CDN operators: >>> > =E2=80=9CSimilarly, when agreeing on which HTTP request/response fiel= ds are to be provided in CDNI Logging Files, the uCDN and dCDN administrators ought to consider these risks." >>> > >>> > >>> > >>> > I'm sure that can be improved on, and have no problem with >>> > any specific better words. >>> > >>> > (6) cleared >>> > >>> > (7) cleared >>> > >>> > >>> > ---------------------------------------------------------------------= - >>> > COMMENT: >>> > ---------------------------------------------------------------------= - >>> > >>> > >>> > - in the description of c-groupid, "the address >>> > with a shared secret that is pre-synchronised >>> > and rotated at a predefined time interval" isn't >>> > very clear. I know what you mean but I don't >>> > think you state it very clearly. Could be that a >>> > bit of text earlier in the document that describes >>> > the basic idea would be better than doing it all >>> > inline as you have in -21. >>> > >>> > Right. >>> > We need to do some word tweaking on this anyways, so we=E2=80=99ll tr= y address that. >>> > >>> > >>> > OLD COMMENTS Below, not updated for -21, I didn't >>> > check if you took 'em on board, feel free to chat about >>> > 'em if that's useful - I'm happy to do so anyway. >>> > >>> > Those have been addressed in earlier versions. >>> > >>> > Here is the message I sent about those back in July in case you want to check the detailed resolution: >>> > >>> > >>> > From: Francois Le Faucheur > >>> > Subject: Re: Stephen Farrell's Discuss on draft-ietf-cdni-logging-15: (with DISCUSS and COMMENT) >>> > Date: 19 July 2015 18:39:38 CEST >>> > To: Stephen Farrell > >>> > Cc: Le Faucheur Francois >, The IESG >, cdni-chairs@ietf.org, draft-ietf-cdni-logging@ietf.org >>> > >>> > Hi Stephen, >>> > >>> > Responses to the COMMENT part below: >>> > >>> > >>> > >>> > ---------------------------------------------------------------------= - >>> > COMMENT: >>> > ---------------------------------------------------------------------= - >>> > >>> > >>> > - I support Richard's discuss. Isn't it ironic that the dCDN's >>> > privacy (that of a company) is better supported than that of >>> > the end user (a person) >>> > >>> > With anonymization now being a SHOULD, I thought Richard=E2=80=99s DI= SCUSS was addressed (apart from the potential need to add port anonymization as discussed separately for your own DISCUSS). >>> > >>> > >>> > - 2.2.1 - why is per-chunk always needed? >>> > >>> > Aggregated logs for segmented content is a tricky concept, for which there is no standard today and many potential ways to do it, and which the Working Group has elected to keep for a next version of the logging spec (just so that we can come up with a base CDNI logging spec _relatively_ quickly ). >>> > So the only sure way to support interoperabilty across CDNs for logs of segmented content is to provide per-chunk log, hence the statement that those always need to be generated. >>> > >>> > >>> > >>> > - 2.2.5.3: what's "track audience" mean? >>> > >>> > This terminology is likely inherited from the TV/Video era, meaning in particular tracking how big a population watches which movie/video. >>> > Given the more general applicability here, how about we replace by something like =E2=80=9Cdevelop statistics on content download=E2=80=9D? >>> > >>> > >>> > - 2.2.5.4: there are more security goals in the universe >>> > >>> > Certainly, but this is not a Security Considerations section: section 2.2.5 discussing Log Consuming applications. And 2.2.5.4 is discussing one such application which is to detect violation of content access policy. >>> > >>> > >>> > - 2.2.5.4: seems like the user is the enemy, that's odd >>> > >>> > With respect to Content Protection (the subject of 2.2.5.4) unauthorised user is indeed the enemy, aiming at stealing some content from the CDNs. >>> > >>> > >>> > - 2.2.5.6.2: there is no "browser type header" that I know of, >>> > but there is the well-known UA string. Being specific about >>> > that is better. >>> > >>> > This is fixed in -19 which now says: >>> > "Terminal type (mobile, PC, STB, if this information can be >>> > acquired from the browser type inferred from the User Agent >>> > string, for example). >>> > " >>> > >>> > - 3.1: SS.S - does that imply a time granularity of 100ms? If >>> > so, please say so. >>> > >>> > As a result of another IESG review comment, we have replaced our own definition of time by a reference to RFC3339. >>> > >>> > =E2=80=9C >>> > TIME =3D 2DIGIT ":" 2DIGIT ":" 2DIGIT ["." *DIGIT] >>> > ; Times are encoded as "partial-time" specified in [RFC3339]. >>> > " >>> > >>> > So that point should be fixed already. >>> > >>> > >>> > >>> > - 3.4.4: cs-uri: please not that these can be privacy >>> > sensitive, though presumably less so than e.g. logged URIs on >>> > a search engine. >>> > >>> > Is this just for our information or do you recommend that we add a statement about the fact that cs-uri can be privacy sensitive? >>> > If IP/ports are anonymised, is cs-uri still privacy sensitive (is this in case the uri itself contains some information that can be traced back to a given end-user? >>> > >>> > >>> > >>> > - 3.4.4: foo-uri: do these contain fragments or not? >>> > >>> > In a per-chunk log (which is specified in this document as the interoperable mechanism to exchange logs for fragmented content), the uri contains the URI of each specific fragment. >>> > In an aggregated log for a segmented content delivery (which is not specified in this document), there are many potential options (URI of first segment, URI of the playlist, part of the URI common to all segments,=E2=80= =A6.). This is one of the complexities of specifying aggregated logs for segmented content. >>> > >>> > >>> > >>> > >>> > - I support Richard's discuss. Isn't it ironic that the dCDN's >>> > privacy (that of a company) is better supported than that of >>> > the end user (a person) >>> > >>> > - 2.2.1 - why is per-chunk always needed? >>> > >>> > - 2.2.5.3: what's "track audience" mean? >>> > >>> > - 2.2.5.4: there are more security goals in the universe >>> > >>> > - 2.2.5.4: seems like the user is the enemy, that's odd >>> > >>> > - 2.2.5.6.2: there is no "browser type header" that I know of, >>> > but there is the well-known UA string. Being specific about >>> > that is better. >>> > >>> > - 3.1: SS.S - does that imply a time granularity of 100ms? If >>> > so, please say so. >>> > >>> > - 3.4.4: cs-uri: please not that these can be privacy >>> > sensitive, though presumably less so than e.g. logged URIs on >>> > a search engine. >>> > >>> > - 3.4.4: foo-uri: do these contain fragments or not? >>> > >>> > >>> > >>> >> > --94eb2c0b8da8c56d55052a5617e6 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hi, Francois,

On Jan 27, 2016 10:53, "Francois Le Faucheur (flefauch)= " <flefauch@cisco.com>= wrote:
>
> Hello Spencer,
>
> I should be able to work on this next week.
> Thanks for the reminder.

That works for me.

Spencer

> Francois
>
>
>> On 26 Jan 2016, at 04:00, Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com> = wrote:
>>
>> Hi, Francois,
>>
>> On Sun, Nov 22, 2015 at 11:54 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote: >>>
>>>
>>> Hiya,
>>>
>>> Sure placing the text wherever makes sense if of course
>>> fine,
>>>
>>> Cheers,
>>> S
>>>
>>> On 22/11/15 16:57, Francois Le Faucheur (flefauch) wrote:
>>> > Hello Stephen.
>>> >
>>> > Thanks for this update to your DISCUSS and COMMENTS.
>>> > It all makes sense. Specific responses/resolution discuss= ed below:
>>
>>
>> If I'm following this correctly, you and Stephen have closed o= n resolutions for his DISCUSS and COMMENTS.=C2=A0
>>
>> Could you let me know when I should expect a revised draft?
>>
>> I would love to finish this up.
>>
>> Thanks!
>>
>> Spencer
>> =C2=A0
>>>
>>> > (5) I'm not clear why you need to be able to send HTT= P header
>>> > values or session IDs via this i/f. Why is that needed? A= nd
>>> > it seems very dangerous, e.g. "cs(COOKIE)" coul= d be a doosy.
>>> > I would suggest adding new text in section 3.4 to cover a= ll
>>> > of the log content basically saying that you really need = to
>>> > know what you're doing or you can break security very= easily.
>>> >
>>> > That makes sense.
>>> >
>>> > Some suggested text that could be added to the end of 3.4=
>>> > just before the start of 3.4.1:
>>> >
>>> > Since the text below is specific to HTTP, I would lean fo= r including it under 3.4.1 ("HTTP Request Logging Record=E2=80=9D) rat= her than under 3.4 which is meant to apply to any log (possibly of other pr= otocols than HTTP).
>>> >
>>> > There is a discussion under 3.4.1 about which fields MUSt= be included and which one MAY. I think right after that would be an ideal = place to add the text below.
>>> >
>>> > Let me know if that does not work.
>>> >
>>> >
>>> >
>>> > "Logging fields
>>> >
>>> > s/Logging fields/Logging some fields/
>>> >=C2=A0 =C2=A0 =C2=A0 =C2=A0since some fields are not very = dangerous.
>>> >
>>> > from HTTP requests and responses can be
>>> > very dangerous. For example, cookies will often contain >>> > (months) long lived bearer token
>>> >
>>> > This is a bit beyond my expertise, but I wonder if =E2=80= =9Cbearer=E2=80=9D is needed here:
>>> > s/bearer token/token/=C2=A0 ?
>>> > because I think the discussion here is meant to be generi= c while "bearer token" is a specific form of token.
>>> > Or is =E2=80=9Cbearer token=E2=80=9D really the appropria= te term in this generic sentence?
>>> >
>>> > values that can be used
>>> > to login to a service as the relevant user. Similar value= s
>>> > may be included in other header fields or within URLs or<= br> >>> > elsewhere in HTTP requests and responses. Centralising >>> > such values in a log
>>> >
>>> > s/log/CDNI Logging File/
>>> >
>>> > can therefore represent a significant
>>> > increase in risk both for the user and the web service >>> > provider, but also for the CDNs involved. Implementations=
>>> > ought therefore attempt to lower the probability of such<= br> >>> > bad outcomes e.g. by only allowing a configured set of >>> > headers to be added to logs
>>> >
>>> > s/logs/CDNI Logging Records/
>>> >
>>> > , or by not supporting wildcard
>>> > selection of HTTP request/response fields to add. Such >>> > mechanisms can reduce the probability that security (or >>> > privacy) sensitive values are centralised in logs.=E2=80= =9D
>>> >
>>> > s/logs/CDNI Logging Files/
>>> >
>>> > I suggest that , in addition to recommendations for imple= mentations, we also add recommendations for CDN operators:
>>> > =E2=80=9CSimilarly, when agreeing on which HTTP request/r= esponse fields are to be provided in CDNI Logging Files, the uCDN and dCDN = administrators ought to consider these risks."
>>> >
>>> >
>>> >
>>> > I'm sure that can be improved on, and have no problem= with
>>> > any specific better words.
>>> >
>>> > (6) cleared
>>> >
>>> > (7) cleared
>>> >
>>> >
>>> > ---------------------------------------------------------= -------------
>>> > COMMENT:
>>> > ---------------------------------------------------------= -------------
>>> >
>>> >
>>> > - in the description of c-groupid, "the address
>>> > with a shared secret that is pre-synchronised
>>> > and rotated at a predefined time interval" isn't=
>>> > very clear. I know what you mean but I don't
>>> > think you state it very clearly. Could be that a
>>> > bit of text earlier in the document that describes
>>> > the basic idea would be better than doing it all
>>> > inline as you have in -21.
>>> >
>>> > Right.
>>> > We need to do some word tweaking on this anyways, so we= =E2=80=99ll try address that.
>>> >
>>> >
>>> > OLD COMMENTS Below, not updated for -21, I didn't
>>> > check if you took 'em on board, feel free to chat abo= ut
>>> > 'em if that's useful=C2=A0 - I'm happy to do = so anyway.
>>> >
>>> > Those have been addressed in earlier versions.
>>> >
>>> > Here is the message I sent about those back in July in ca= se you want to check the detailed resolution:
>>> >
>>> >
>>> > From: Francois Le Faucheur <flefauch@cisco.com<mailto:flefauch@cisco.com>>
>>> > Subject: Re: Stephen Farrell's Discuss on draft-ietf-= cdni-logging-15: (with DISCUSS and COMMENT)
>>> > Date: 19 July 2015 18:39:38 CEST
>>> > To: Stephen Farrell <stephen.farrell@cs.tcd.ie<mailto:stephen.farrell@cs.tcd.ie>>
>>> > Cc: Le Faucheur Francois <flefauch@cisco.com<mailto:flefauch@cisco.com>>, The IESG <iesg@ietf.org<mailto:iesg@= ietf.org>>, cdni-chairs@i= etf.org<mailto:cdni-chairs@i= etf.org>, draft-= ietf-cdni-logging@ietf.org<mailto:draft-ietf-cdni-logging@ietf.org>
>>> >
>>> > Hi Stephen,
>>> >
>>> > Responses to the COMMENT part below:
>>> >
>>> >
>>> >
>>> > ---------------------------------------------------------= -------------
>>> > COMMENT:
>>> > ---------------------------------------------------------= -------------
>>> >
>>> >
>>> > - I support Richard's discuss. Isn't it ironic th= at the dCDN's
>>> > privacy (that of a company) is better supported than that= of
>>> > the end user (a person)
>>> >
>>> > With anonymization now being a SHOULD, I thought Richard= =E2=80=99s DISCUSS was addressed (apart from the potential need to add port= anonymization as discussed separately for your own DISCUSS).
>>> >
>>> >
>>> > - 2.2.1 - why is per-chunk always needed?
>>> >
>>> > Aggregated logs for segmented content is a tricky concept= , for which there is no standard today and many potential ways to do it, an= d which the Working Group has elected to keep for a next version of the log= ging spec (just so that we can come up with a base CDNI logging spec _relat= ively_ quickly ).
>>> > So the only sure way to support interoperabilty across CD= Ns for logs of segmented content is to provide per-chunk log, hence the sta= tement that those always need to be generated.
>>> >
>>> >
>>> >
>>> > - 2.2.5.3: what's &quo= t;track audience" mean?
>>> >
>>> > This terminology is likely inherited from the TV/Video er= a, meaning in particular tracking how big a population watches which movie/= video.
>>> > Given the more general applicability here, how about we r= eplace by something like =E2=80=9Cdevelop statistics on content download=E2= =80=9D?
>>> >
>>> >
>>> > - 2.2.5.4: there are more = security goals in the universe
>>> >
>>> > Certainly, but this is not a Security Considerations sect= ion: section 2.2.5 discussing Log Consuming applications. And 2.2.5.4 is di= scussing one such application which is to detect violation of content acces= s policy.
>>> >
>>> >
>>> > - 2.2.5.4: seems like the = user is the enemy, that's odd
>>> >
>>> > With respect to Content Protection (the subject of 2.2.5.= 4) unauthorised user is indeed the enemy, aiming at stealing some content f= rom the CDNs.
>>> >
>>> >
>>> > - 2.2.5.6.2: there is no "browser type header" = that I know of,
>>> > but there is the well-known UA string. Being specific abo= ut
>>> > that is better.
>>> >
>>> > This is fixed in -19 which now says:
>>> > "Terminal type (mobile, PC, STB, if this information= can be
>>> >=C2=A0 =C2=A0 =C2=A0 acquired from the browser type inferr= ed from the User Agent
>>> >=C2=A0 =C2=A0 =C2=A0 string, for example).
>>> > "
>>> >
>>> > - 3.1: SS.S - does that imply a time granularity of 100ms= ?=C2=A0 If
>>> > so, please say so.
>>> >
>>> > As a result of another IESG review comment, we have repla= ced=C2=A0 our own definition of time by a reference to RFC3339.
>>> >
>>> > =E2=80=9C
>>> > TIME =3D 2DIGIT ":" 2DIGIT ":" 2DIGIT= ["." *DIGIT]
>>> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0; Times are encoded as &= quot;partial-time" specified in [RFC3339].
>>> > "
>>> >
>>> > So that point should be fixed already.
>>> >
>>> >
>>> >
>>> > - 3.4.4: cs-uri: please not that these can be privacy
>>> > sensitive, though presumably less so than e.g.=C2=A0 logg= ed URIs on
>>> > a search engine.
>>> >
>>> > Is this just for our information or do you recommend that= we add a statement about the fact that cs-uri can be privacy sensitive? >>> > If IP/ports are anonymised, is cs-uri still privacy sensi= tive (is this in case the uri itself contains some information that can be = traced back to a given end-user?
>>> >
>>> >
>>> >
>>> > - 3.4.4: foo-uri: do these contain fragments or not?
>>> >
>>> > In a per-chunk log (which is specified in this document a= s the interoperable mechanism to exchange logs for fragmented content), the= uri contains the URI of each specific fragment.
>>> > In an aggregated log for a segmented content delivery (wh= ich is not specified in this document), there are many potential options (U= RI of first segment, URI of the playlist, part of the URI common to all seg= ments,=E2=80=A6.). This is one of the complexities of specifying aggregated= logs for segmented content.
>>> >
>>> >
>>> >
>>> >
>>> > - I support Richard's discuss. Isn't it ironic th= at the dCDN's
>>> > privacy (that of a company) is better supported than that= of
>>> > the end user (a person)
>>> >
>>> > - 2.2.1 - why is per-chunk always needed?
>>> >
>>> > - 2.2.5.3: what's &quo= t;track audience" mean?
>>> >
>>> > - 2.2.5.4: there are more = security goals in the universe
>>> >
>>> > - 2.2.5.4: seems like the = user is the enemy, that's odd
>>> >
>>> > - 2.2.5.6.2: there is no "browser type header" = that I know of,
>>> > but there is the well-known UA string. Being specific abo= ut
>>> > that is better.
>>> >
>>> > - 3.1: SS.S - does that imply a time granularity of 100ms= ?=C2=A0 If
>>> > so, please say so.
>>> >
>>> > - 3.4.4: cs-uri: please not that these can be privacy
>>> > sensitive, though presumably less so than e.g.=C2=A0 logg= ed URIs on
>>> > a search engine.
>>> >
>>> > - 3.4.4: foo-uri: do these contain fragments or not?
>>> >
>>> >
>>> >
>>>
>>
>

--94eb2c0b8da8c56d55052a5617e6-- From nobody Wed Jan 27 12:22:03 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 625EB1A90C0 for ; Wed, 27 Jan 2016 12:22:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 99P8dyvd7nig for ; Wed, 27 Jan 2016 12:21:56 -0800 (PST) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D6F01A90BD for ; Wed, 27 Jan 2016 12:21:56 -0800 (PST) X-AuditID: c618062d-f79d16d000001b1c-1a-56a9240f09e7 Received: from EUSAAHC003.ericsson.se (Unknown_Domain [147.117.188.81]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 1F.13.06940.F0429A65; Wed, 27 Jan 2016 21:09:51 +0100 (CET) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC003.ericsson.se ([147.117.188.81]) with mapi id 14.03.0248.002; Wed, 27 Jan 2016 15:21:55 -0500 From: Kevin Ma J To: Ben Niven-Jenkins , "Content Delivery Networks Interconnection Discussion List" Thread-Topic: [CDNi] Shepherd Review of draft-ietf-cdni-redirection-14.txt Thread-Index: AdFOWGINkZdovw7hQLSjneWiUZ2KZALDIDqAAAmOt1A= Date: Wed, 27 Jan 2016 20:21:53 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: multipart/alternative; boundary="_000_A419F67F880AB2468214E154CB8A556206C82A9Eeusaamb103erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupgkeLIzCtJLcpLzFFi42KZXLonUJdfZWWYwYq3+hYLzk1gs3g6+w+r A5PHkiU/mTx+Xp/EGMAUxWWTkpqTWZZapG+XwJWx9mILY8GsD0wV9xY/ZWtgPPOMqYuRg0NC wETi3kPpLkZOIFNM4sK99WxdjFwcQgJHGCUe/ljODuEsZ5T49fo8I0gVm4CWxOOvf5lAbBGB Ooldaw8wg9jCAp4S+z8cZIaIe0lMaD/ECmFbSTw5eYwNxGYRUJVYcPgMO4jNK+ArsfTuMSaI BV2MEofXvWEEuYhTwF1iySITkBpGoIu+n1oDtotZQFzi1pP5TBCXCkgs2XOeGcIWlXj5+B8r hK0kMWnpOVaI+nyJ/TfnQ+0SlDg58wnLBEaRWUhGzUJSNgtJ2SygK5gFNCXW79KHKFGUmNL9 kB3C1pBonTOXHVl8ASP7KkaO0uKCnNx0I4NNjMD4OSbBpruD8f50z0OMAhyMSjy8BoeWhwmx JpYVV+YeYpTgYFYS4ZWTXRkmxJuSWFmVWpQfX1Sak1p8iFGag0VJnNeGd1GYkEB6Yklqdmpq QWoRTJaJg1OqgZEpNsxj/QzPnKanE4Pzw//xlD759vszb2RXwcfrt1qPTK03v64yKW57oNTi PbMvdv+6KbXtwd8se4PPh8LyL6Tf3f7n4+b5h5sb1notfnB1enNR9Dtx70VOJp2VR+3uVWiJ 9t77nnlqyXoBtyMVMUtzZ3m7NKZfn1t2dO6iOfsPrM+cfd7MLD5XiaU4I9FQi7moOBEAYyMg nZsCAAA= Archived-At: Subject: Re: [CDNi] Shepherd Review of draft-ietf-cdni-redirection-14.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jan 2016 20:22:01 -0000 --_000_A419F67F880AB2468214E154CB8A556206C82A9Eeusaamb103erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQmVuLA0KICBMb29rcyBnb29kLiAgdGhhbnghDQoNCiAgd3J0IHRoZSByZWdpc3RyeToNCg0K ICA+IC0gc2VjdGlvbiA2LjI6IHNob3VsZCB0aGlzIGJlIGEgInN1YnJlZ2lzdHJ5IHdpdGhpbiB0 aGUgIkNvbnRlbnQgRGVsaXZlcnkgTmV0d29yayBJbnRlcmNvbm5lY3Rpb24gKENETkkpIFBhcmFt ZXRlcnMiIHJlZ2lzdHJ5LuKAnT8NCiAgPg0KICA+IEkgZG9u4oCZdCB0aGluayBzby4gV2hhdCB3 ZeKAmXJlIGRlZmluaW5nIGEgcmVnaXN0cnkgZm9yIGlzIGEgc2V0IG9mIG51bWVyaWMgcmVzcG9u c2UgY29kZXMgJiB0aGVpciBtZWFuaW5ncyBmb3IgcmV0dXJuaW5nIGluIGEgUkkgKGVycm9yKSBy ZXNwb25zZS4gSXQgaXMgbm90IG9idmlvdXMgdG8gbWUgaG93IHRoYXQgcmVnaXN0cnkgaXMgcmVs YXRlZCB0byB0aGUgQ0ROSSBwYXJhbWV0ZXJzIHJlZ2lzdHJ5IChhc3N1bWluZyBieSBDRE5JIFBh cmFtZXRlcnMgcmVnaXN0cnkgeW91IG1lYW4gdGhlIE1lZGlhIFR5cGUgcGFyYW1ldGVyIHJlZ2lz dHJ5KS4NCg0KICBJIHRoaW5rIHRoZSBDRE5JIFBhcmFtZXRlcnMgInJlZ2lzdHJ5IiBpcyBqdXN0 IHRoZSBncm91cGluZyBmb3IgYWxsIENETkkgcmVsYXRlZCByZWdpc3RyaWVzLCBhbmQgdGhlIENE TkkgUGF5bG9hZCBUeXBlcyAodGhlIG1lZGlhIHR5cGUgcGFyYW1ldGVyIHJlZ2lzdHJ5KSBpcyB1 bmRlcm5lYXRoIHRoYXQgKHNlZSB0aGUgIkNvbnRlbnQgRGVsaXZlcnkgTmV0d29yayBJbnRlcmNv bm5lY3Rpb24gKENETkkpIFBhcmFtZXRlcnMiIGhlYWRpbmcgYXQgaHR0cHM6Ly93d3cuaWFuYS5v cmcvcHJvdG9jb2xzKS4gIEkgZGlkbid0IGhhdmUgYW55dGhpbmcgb3JpZ2luYWxseSBpbiB0aGUg bWVkaWEgdHlwZSBkcmFmdCwgYW5kIHRoZW4gd2FzIGFza2VkIHRvIGFkZCB0ZXh0IGluIHdoaWNo IEkgcmVmZXJyZWQgdG8gaXQgYXMgYSAiY2F0ZWdvcnkiLCBidXQgdGhlIGVkaXRvcnMgY2hhbmdl ZCBpdCB0byB0aGUgInN1YnJlZ2lzdHJ5IiB0ZXh0IGFib3ZlLiAgSSBhc3N1bWUgd2UgbmVlZCB0 aGF0IHRleHQsIHNvIHRoYXQgYWxsIHRoZSBDRE5JIHJlZ2lzdHJpZXMgYXJlIGluIG9uZSBwbGFj ZTsgZWxzZSB3ZSdsbCBsaWtlbHkgZ2V0IGFza2VkIGFib3V0IGl0IGluIElFU0cgcmV2aWV3Lg0K DQogIE90aGVyIHRoYW4gdGhhdCwgSSB0aGluayB3ZSdyZSByZWFkeSB0byBnby4NCg0KdGhhbngh DQoNCi0tICBLZXZpbiBKLiBNYQ0KDQpGcm9tOiBDRE5pIFttYWlsdG86Y2RuaS1ib3VuY2VzQGll dGYub3JnXSBPbiBCZWhhbGYgT2YgQmVuIE5pdmVuLUplbmtpbnMNClNlbnQ6IFdlZG5lc2RheSwg SmFudWFyeSAyNywgMjAxNiAyOjQzIFBNDQpUbzogQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrcyBJ bnRlcmNvbm5lY3Rpb24gRGlzY3Vzc2lvbiBMaXN0DQpTdWJqZWN0OiBSZTogW0NETmldIFNoZXBo ZXJkIFJldmlldyBvZiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTQudHh0DQoNCktldmlu LA0KDQpJ4oCZdmUgbWFkZSBtb3N0IG9mIHRoZSBjaGFuZ2VzIHlvdSBzdWdnZXN0ZWQsIGNvbW1l bnRzL3doYXQgSeKAmXZlIGRvbmUgYXJlIGJlbG93Lg0KDQpJ4oCZdmUgcHVzaGVkIC0xNSB3aXRo IHRoZSBjaGFuZ2VzLCBkaWZmIHRvIC0xNCBpcyBoZXJlOg0KDQpodHRwczovL3d3dy5pZXRmLm9y Zy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTE1DQoNCkxldCBtZSBr bm93IGlmIHRoZXJlIGFyZSBhbnkgb3RoZXIgY2hhbmdlcyB5b3Ugd2FudCB0byB0aGUgZG9jdW1l bnQuDQoNCg0KT24gMTMgSmFuIDIwMTYsIGF0IDIzOjE2LCBLZXZpbiBNYSBKIDxrZXZpbi5qLm1h QGVyaWNzc29uLmNvbTxtYWlsdG86a2V2aW4uai5tYUBlcmljc3Nvbi5jb20+PiB3cm90ZToNCg0K SGkgQmVuL1JheSwNCg0KIChhcyBjaGFpcikgSSd2ZSBjb21wbGV0ZWQgbXkgc2hlcGhlcmQncyBy ZXZpZXcgb2YgdGhlIGRvY3VtZW50IGFuZCBoYXZlIGVuY2xvc2VkIHNvbWUgcXVlc3Rpb25zIGNv bW1lbnRzIGJlbG93LiAgTW9zdCBhcmUgbml0cywgYnV0IHRoZSBJQU5BIENvbnNpZGVyYXRpb25z IGFuZCBOb3JtYXRpdmUvSW5mb3JtYXRpdmUgUmVmZXJlbmNlIGNvbW1lbnRzIGF0IHRoZSBlbmQg bmVlZCB0byBiZSBhZGRyZXNzZWQuDQoNCnRoYW54IQ0KDQotLSAgS2V2aW4gSi4gTWENCg0KDQot IGdlbmVyYWw6IHRoZXJlIGlzIGluY29uc2lzdGVuY3kgaW4gdGhlIHVzZSBvZiAiUmVkaXJlY3Rp b24gSW50ZXJmYWNlIiBhbmQgIlJlZGlyZWN0aW9uIGludGVyZmFjZSI7IGl0IHNlZW1zIHRvIGJl IGEgcHJvYmxlbSBpbiBhbGwgdGhlIGRvY3MsIGJ1dCBsb2dnaW5nIG1vc3RseSB1c2VzIHRoZSBs b3dlcmNhc2Ug4oCcaSINCg0KQ2hhbmdlZCB0byB1c2luZyDigJhSZWRpcmVjdGlvbiBpbnRlcmZh Y2XigJkgdGhyb3VnaG91dC4NCg0KDQotIGdlbmVyYWw6ICJlLmcuICIgLT4gImUuZy4sICIsICJp LmUuICIgLT4gImkuZS4sICIsIGFuZCAiRm9yIGV4YW1wbGUgIiAtPiAiRm9yIGV4YW1wbGUsIOKA nA0KDQpEb25lLg0KDQotIHNlY3Rpb24gMzogVGhlIGJ1bGxldGVkIGl0ZW1zIGFyZSBub3QgY29t cGxldGUgc2VudGVuY2VzLCBwZXJoYXBzOg0KDQogICAgIlRoZSBmaW5hbCBTdXJyb2dhdGUsIHdo aWNoIG1heSBiZSBpbiB0aGUgZENETiB0aGF0IHJldHVybmVkIHRoZSBSSQ0KICAgICByZXNwb25z ZSB0byB0aGUgdUNETiwgb3IgYW5vdGhlciBDRE4gKGlmIHRoZSBkQ0ROIGRlbGVnYXRlcyB0aGUN CiAgICAgZGVsaXZlcnkgdG8gYW5vdGhlciBDRE4pLiIgLT4NCiAgICAiVGhlIGZpbmFsIFN1cnJv Z2F0ZSwgd2hpY2ggbWF5IGJlIGluIHRoZSBkQ0ROIHRoYXQgcmV0dXJuZWQgdGhlIFJJDQogICAg IHJlc3BvbnNlIHRvIHRoZSB1Q0ROLCBvciBhbm90aGVyIENETiAoaWYgdGhlIGRDRE4gZGVsZWdh dGVzIHRoZQ0KICAgICBkZWxpdmVyeSB0byBhbm90aGVyIENETik7IG9y4oCdDQoNCkRvbmUuDQoN Cg0KLSBzZWN0aW9uIDM6IGNvbW1hIGFmdGVyICJUaGVyZWZvcmUiOg0KDQogIlRoZXJlZm9yZSB0 aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudCBpcyBsaW1pdGVkIHRvIFJlY3Vyc2l2ZQ0KICBSZXF1 ZXN0IFJlZGlyZWN0aW9uLiIgLT4NCiAiVGhlcmVmb3JlLCB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1 bWVudCBpcyBsaW1pdGVkIHRvIFJlY3Vyc2l2ZQ0KICBSZXF1ZXN0IFJlZGlyZWN0aW9uLuKAnQ0K DQpEb25lDQoNCg0KLSBzZWN0aW9uIDM6IHRoZSBjb2xvbiBzaG91bGQgYmUgYSBzZW1pLWNvbG9u Og0KDQogImRvbWFpbiBpbiB0aGUgVVJMIGRlcmVmZXJlbmNlZCB0byByZWFjaCB0aGUgdUNETjog d2l0aG91dCBvcGVyYXRpb25hbA0KICBwcmVjYXV0aW9ucywgYW5kIGluIHRoZSBhYnNlbmNlIG9m IEROU1NFQywgdGhpcyBjYW4gbWFrZSBhIGxlZ2l0aW1hdGUNCiAgcmVkaXJlY3Rpb24gbG9vayBs aWtlIGEgRE5TLWJhc2VkIGF0dGFjayIgLT4NCiAiZG9tYWluIGluIHRoZSBVUkwgZGVyZWZlcmVu Y2VkIHRvIHJlYWNoIHRoZSB1Q0ROOyB3aXRob3V0IG9wZXJhdGlvbmFsDQogIHByZWNhdXRpb25z LCBhbmQgaW4gdGhlIGFic2VuY2Ugb2YgRE5TU0VDLCB0aGlzIGNhbiBtYWtlIGEgbGVnaXRpbWF0 ZQ0KICByZWRpcmVjdGlvbiBsb29rIGxpa2UgYSBETlMtYmFzZWQgYXR0YWNr4oCdDQoNCkRvbmUu DQoNCg0KLSBzZWN0aW9uIDQ6IFRob3VnaCBpdCBtZW50aW9ucyBiZWluZyBleHRlbnNpYmxlLCB3 ZSBkbyBub3QgZ2l2ZSBhbnkgZ3VpZGFuY2Ugb24gaG93IHRvIGV4dGVuZCB0aGUgUkkuICBTaG91 bGQgd2U/ICBPciBzaG91bGQgd2UganVzdCBsZWF2ZSBpdD8NCg0KICJGaW5hbGx5LCB0aGUgUkkg aXMgZWFzaWx5IGV4dGVuZGFibGUgdG8gc3VwcG9ydCBvdGhlciBVc2VyIEFnZW50DQogIHJlcXVl c3QgcmVkaXJlY3Rpb24gbWV0aG9kcyAoZS5nLiAgUlRNUCAzMDIgcmVkaXJlY3Rpb24pLiINCg0K IE9uZSB0aG91Z2h0IGlzIHRoYXQgdGhlIHdheSB0byBleHRlbmQgdGhpcyB3b3VsZCBiZTogd3Jp dGUgYSBuZXcgUkZDLCB3aXRoIG5ldyBSSSBKU09OIG9iamVjdHMsIGFuZCByZWdpc3RlcmluZyBh IG5ldyByZWRpcmVjdGlvbiBtb2RlIGNhcGFiaWxpdHk/DQoNCkkgY2hhbmdlZCB0aGUgc2VudGVu Y2UgdG86DQoNCkZpbmFsbHksIHRoZSBSSSBpcyBlYXNpbHkgZXh0ZW5kYWJsZSB0byBzdXBwb3J0 IG90aGVyIFVzZXIgQWdlbnQgcmVxdWVzdCByZWRpcmVjdGlvbiBtZXRob2RzIChlLmcuLCBSVE1Q IDMwMiByZWRpcmVjdGlvbikgYnkgZGVmaW5pbmcgYWRkaXRpb25hbCBwcm90b2NvbCBzcGVjaWZp YyBrZXlzIGZvciBSSSByZXF1ZXN0cyBhbmQgcmVzcG9uc2VzIGFsb25nIHdpdGggYSBzcGVjaWZp Y2F0aW9uIGhvdyB0byBwcm9jZXNzIHRoZW0uDQoNCnRvIHRyeSBhbmQgZXhwYW5kIGEgYml0IG9u IGhvdyBleHRlbnNpb25zIGNvdWxkIGJlIGRvbmUuIEkgZG9u4oCZdCB0aGluayBpdOKAmXMgdGhl IHJvbGUgb2YgdGhpcyBkb2N1bWVudCB0byBzcGVjaWZ5IGV4YWN0bHkgd2hhdCBpcyByZXF1aXJl ZCwgZS5nLiBtYW5kYXRpbmcgYW4gUkZDLiBJZiB5b3UgdGhpbmsgaXQgbmVlZHMgbW9yZSBleHBs YW5hdGlvbiBvbiBob3cgdG8gZXh0ZW5kIGl0IEkgY2FuIGxvb2sgYXQgY3JhZnRpbmcgc29tZSBt b3JlIGRldGFpbGVkIHRleHQ/DQoNCg0KLSBzZWN0aW9uIDQuMTogc3VnZ2VzdGVkIGVkaXQ6DQoN CiAgICAiVGhlIHNjb3BlIG9mIHRoZSByZXNwb25zZSAoaWYgaXQgaXMgY2FjaGVhYmxlKSBzaWdu YWxlZCB0aGUgSFRUUA0KICAgICByZXNwb25zZSBib2R5IG9mIHRoZSBSSSByZXNwb25zZS4gIEZv ciBleGFtcGxlIHdoZXRoZXIgdGhlDQogICAgIHJlc3BvbnNlIGFwcGxpZXMgdG8gYSB3aWRlciBy YW5nZSBvZiBJUCBhZGRyZXNzZXMgdGhhbiB3aGF0IHdhcw0KICAgICBpbmNsdWRlZCBpbiB0aGUg UkkgcmVxdWVzdC4iIC0+DQogICAgIlRoZSBzY29wZSBvZiBhIGNhY2hlYWJsZSByZXNwb25zZSBz aWduYWxlZCB2aWEgdGhlIEhUVFANCiAgICAgcmVzcG9uc2UgYm9keSBvZiB0aGUgUkkgcmVzcG9u c2UsIGZvciBleGFtcGxlLCB3aGV0aGVyIHRoZQ0KICAgICByZXNwb25zZSBhcHBsaWVzIHRvIGEg d2lkZXIgcmFuZ2Ugb2YgSVAgYWRkcmVzc2VzIHRoYW4gd2hhdCB3YXMNCiAgICAgaW5jbHVkZWQg aW4gdGhlIFJJIHJlcXVlc3Qu4oCdDQoNCkRvbmUuDQoNCg0KLSBzZWN0aW9uIDQuMzogdGhlIHJl ZmVyZW5jZSB0byBSRkM3MzM2IChGcmFtZXdvcmspIHNob3VsZCBiZSB0byBSRkM3NzM2IChNZWRp YSBUeXBlKQ0KDQpHb29kIGNhdGNoLiBEb25lLg0KDQoNCi0gc2VjdGlvbiA0LjQuMjogU2hvdWxk IHRoaXMgYWxzbyBzdGF0ZSB0aGF0IHRoZSBkbnMgZGljdGlvbmFyeSBNVVNUIGNvbnRhaW4gdGhl IHJjb2RlIGFuZCBuYW1lIGtleXM/DQoNCiAiSWYgYSBkbnMgZGljdGlvbmFyeSBpcyBpbmNsdWRl ZCBpbiB0aGUgUkkNCiAgcmVzcG9uc2UsIGl0IE1VU1QgaW5jbHVkZSBhdCBsZWFzdCBvbmUgb2Yg dGhlIGZvbGxvd2luZyBrZXlzOiBhLA0KICBhYWFhLCBjbmFtZS7igJ0NCg0KRG9uZS4gSSBpbnRl Z3JhdGVkIGl0IGludG8gdGhlIGV4aXN0aW5nIHNlbnRlbmNlIGFib3V0IGluY2x1ZGluZyBvbmUg b2YgYSwgYWFhYSwgY2FtZSBzbyBpdCBub3cgcmVhZHM6DQoNCklmIGEgZG5zIGRpY3Rpb25hcnkg aXMgaW5jbHVkZWQgaW4gdGhlIFJJIHJlc3BvbnNlLCBpdCBNVVNUIGluY2x1ZGUgdGhlIHJjb2Rl IGFuZCBuYW1lIGtleXMgYW5kIGl0IE1VU1QgaW5jbHVkZSBhdCBsZWFzdCBvbmUgb2YgdGhlIGZv bGxvd2luZyBrZXlzOiBhLCBhYWFhLCBjYW1lLg0KDQotIHNlY3Rpb24gNC41LjI6IG1pc3Npbmcg ImFuZCI6DQoNCiAiaXQgTVVTVCBpbmNsdWRlIGF0IGxlYXN0IHRoZSBmb2xsb3dpbmcga2V5czog c2MtDQogIHN0YXR1cywgc2MtdmVyc2lvbiwgc2MtcmVhc29uLCBjcy11cmksIHNjLShsb2NhdGlv bikuIiAtPg0KICJpdCBNVVNUIGluY2x1ZGUgYXQgbGVhc3QgdGhlIGZvbGxvd2luZyBrZXlzOiBz Yy0NCiAgc3RhdHVzLCBzYy12ZXJzaW9uLCBzYy1yZWFzb24sIGNzLXVyaSwgYW5kIHNjLShsb2Nh dGlvbiku4oCdDQoNCkRvbmUuDQoNCg0KLSBzZWN0aW9uIDQuODogdGhpcyBpbXBsaWVzIHRoYXQg dGhlIENETiBrbm93cyB0aGUgZENETidzIHByb3ZpZGVyIElEPyAgSXMgdGhhdCB0eXBpY2FsbHkg dHJ1ZT8gIFdvdWxkIGl0IGJlIHNpbXBsZXIgdG8gaGF2ZSBDRE5zIGNoZWNrIGp1c3QgdGhlaXIg b3duIHByb3ZpZGVyIElEPyAgSSB3b3VsZCBzdWdnZXN0IHJlbW92aW5nIHRoaXMgc2VudGVuY2U/ DQoNCiAiVHJhbnNpdCBDRE5zIE1VU1QgY2hlY2sgdGhlIGNkbi0NCiAgcGF0aCBhbmQgbm90IGNh c2NhZGUgdGhlIFJJIHJlcXVlc3QgdG8gZENETnMgdGhhdCBhcmUgYWxyZWFkeSBsaXN0ZWQNCiAg aW4gY2RuLXBhdGgu4oCdDQoNCkRvbmUuDQoNCg0KLSBzZWN0aW9uIDQuODogc3VnZ2VzdGVkIGVk aXQ6DQoNCiAiQXMgd2VsbCBhcyBsb29wcyB3aXRoaW4gdGhlIFJJIGl0c2VsZiwiIC0+DQogIkJl c2lkZSBsb29wcyB3aXRoaW4gdGhlIFJJIGl0c2VsZizigJ0NCg0KRG9uZS4NCg0KDQotIHNlY3Rp b24gNC44OiBtaXNzaW5nIGNvbW1hczoNCg0KICJmb3IgZXhhbXBsZSBpZiB0aGUgSVANCiAgYWRk cmVzcyhlcykgb3IgVVJJKHMpIHJldHVybmVkIGluIFJJIHJlc3BvbnNlcyBkbyBub3QgcmVzb2x2 ZQ0KICBkaXJlY3RseSB0byBhIHN1cnJvZ2F0ZSBpbiB0aGUgZmluYWwgZENETiB0aGVyZSBpcyB0 aGUgcG9zc2liaWxpdHkiIC0+DQogImZvciBleGFtcGxlLCBpZiB0aGUgSVANCiAgYWRkcmVzcyhl cykgb3IgVVJJKHMpIHJldHVybmVkIGluIFJJIHJlc3BvbnNlcyBkbyBub3QgcmVzb2x2ZQ0KICBk aXJlY3RseSB0byBhIHN1cnJvZ2F0ZSBpbiB0aGUgZmluYWwgZENETiwgdGhlcmUgaXMgdGhlIHBv c3NpYmlsaXR54oCdDQoNCkRvbmUuDQoNCg0KLSBzZWN0aW9uIDQuODogdHlwbzogImNvbnRpbnVv c2x5IiAtPiDigJxjb250aW51b3VzbHkiDQoNCkRvbmUuDQoNCg0KLSBzZWN0aW9uIDUuMTogYnVs bGV0IHB1bmN0dWF0aW9uOg0KDQogICAgInRoZSBkQ0ROIGFuZCB1Q0ROIHRvIGF1dGhvcml6ZSBl YWNoIG90aGVyICh0byBlbnN1cmUgdGhleSBhcmUNCiAgICAgdHJhbnNtaXR0aW5nL3JlY2Vpdmlu ZyBDRE5JIFJlZGlyZWN0aW9uIG1lc3NhZ2VzIHRvL2Zyb20gYW4NCiAgICAgYXV0aG9yaXplZCBD RE4pIiAtPg0KICAgICJ0aGUgZENETiBhbmQgdUNETiB0byBhdXRob3JpemUgZWFjaCBvdGhlciAo dG8gZW5zdXJlIHRoZXkgYXJlDQogICAgIHRyYW5zbWl0dGluZy9yZWNlaXZpbmcgQ0ROSSBSZWRp cmVjdGlvbiBtZXNzYWdlcyB0by9mcm9tIGFuDQogICAgIGF1dGhvcml6ZWQgQ0ROKTsiDQoNCiAg ICAiQ0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVzc2FnZXMgdG8gYmUgdHJhbnNtaXR0ZWQg d2l0aA0KICAgICBjb25maWRlbnRpYWxpdHkuIiAtPg0KICAgICJDRE5JIFJlZGlyZWN0aW9uIGlu dGVyZmFjZSBtZXNzYWdlcyB0byBiZSB0cmFuc21pdHRlZCB3aXRoDQogICAgIGNvbmZpZGVudGlh bGl0eTsgYW5k4oCdDQoNCkRvbmUuDQoNCg0KLSBzZWN0aW9uIDUuMjogdGhlIHJlc3Qgb2YgdGhl IGRvYyB1c2VzICJhbiBSSSIsIGJ1dCB0aGlzIHNlY3Rpb24gdXNlcyAiYSBSSSI7IHNob3VsZCBt YWtlIGl0IGNvbnNpc3RlbnQuDQoNCkRvbmUuDQoNCg0KLSBzZWN0aW9uIDUuMjogdGhlIGZpcnN0 IDExIHdvcmRzIG9mIHNlY3Rpb24gNS4yIGFyZSBpZGVudGljYWwgdG8gdGhlIGZpcnN0IDExIHdv cmRzIG9mIHNlY3Rpb24gNTsgbWF5YmUganVzdCByZW1vdmUgdGhlbSBmcm9tIHNlY3Rpb24gNS4y Pw0KDQogIkluZm9ybWF0aW9uIHBhc3NlZCBvdmVyIHRoZSBSSSBjb3VsZCBiZSBjb25zaWRlcmVk IHBlcnNvbmFsIG9yDQogIHNlbnNpdGl2ZS4gIEluIHBhcnRpY3VsYXIsIHBhcnRzIiAtPg0KIOKA nFBhcnRzIg0KDQpJIHRoaW5rIHRoZSByZXBldGl0aW9uIGlzIE9LIGFuZCBwcm92aWRlcyBhIHJl ZnJlc2ggb2YgdGhlIGNvbnRleHQuIEFzIHByaXZhY3kgaXMgbGlrZWx5IHRvIGJlIGEgdG9waWMg Zm9sa3Mgbml0IHBpY2sgYXQgZHVyaW5nIElFVEYgTEMvSUVTRyByZXZpZXcgSeKAmWQgcmF0aGVy IGJlIGNhdXRpb3VzIGFuZCByZXBlYXQgbXlzZWxmIGFuZCBsZWF2ZSBpdCB0byB0aGUgUkZDIGVk aXRvciB0byB0d2VhayBmb3IgcmVhZGFiaWxpdHkuDQoNCg0KLSBzZWN0aW9uIDUuMjogc3VnZ2Vz dGVkIGVkaXQ6DQoNCiAiZG8gb2J0YWluIGluZm9ybWF0aW9uIHJlZ2FyZGluZyBFbmQgVXNlciBJ UCBhZGRyZXNzZXMNCiAgYW5kIHJlcXVlc3RlZCBVUklzIHRoYXQgdGhleSB3b3VsZG4ndCBoYWQg dGhlIFJJIG5vdCBiZWVuIHVzZWQuIiAtPg0KICJkbyBvYnRhaW4gaW5mb3JtYXRpb24gcmVnYXJk aW5nIEVuZCBVc2VyIElQIGFkZHJlc3Nlcw0KICBhbmQgcmVxdWVzdGVkIFVSSXMgdGhhdCB0aGV5 IHdvdWxkbid0IGhhdmUsIGhhZCB0aGUgUkkgbm90IGJlZW4gdXNlZC7igJ0NCg0KRG9uZS4NCg0K DQotIHNlY3Rpb24gNi4yOiBzaG91bGQgdGhpcyBiZSBhICJzdWJyZWdpc3RyeSB3aXRoaW4gdGhl ICJDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmsgSW50ZXJjb25uZWN0aW9uIChDRE5JKSBQYXJhbWV0 ZXJzIiByZWdpc3RyeS7igJ0/DQoNCkkgZG9u4oCZdCB0aGluayBzby4gV2hhdCB3ZeKAmXJlIGRl ZmluaW5nIGEgcmVnaXN0cnkgZm9yIGlzIGEgc2V0IG9mIG51bWVyaWMgcmVzcG9uc2UgY29kZXMg JiB0aGVpciBtZWFuaW5ncyBmb3IgcmV0dXJuaW5nIGluIGEgUkkgKGVycm9yKSByZXNwb25zZS4g SXQgaXMgbm90IG9idmlvdXMgdG8gbWUgaG93IHRoYXQgcmVnaXN0cnkgaXMgcmVsYXRlZCB0byB0 aGUgQ0ROSSBwYXJhbWV0ZXJzIHJlZ2lzdHJ5IChhc3N1bWluZyBieSBDRE5JIFBhcmFtZXRlcnMg cmVnaXN0cnkgeW91IG1lYW4gdGhlIE1lZGlhIFR5cGUgcGFyYW1ldGVyIHJlZ2lzdHJ5KS4NCg0K DQotIHNlY3Rpb24gNi4yOiBkbyB3ZSB3YW50IHRvIHNwZWNpZnkgdGhlIFJGQzUyMjYgcG9saWN5 PyAgaXMgaXQgRXhwZXJ0DQogUmV2aWV3PyAgbm90IFNwZWNpZmljYXRpb24gcmVxdWlyZWQ/DQoN CiAgICAiU3BlY2lmaWNhdGlvbjogQW4gb3B0aW9uYWwgcmVmZXJlbmNlIHRvIGEgc3BlY2lmaWNh dGlvbiB0aGF0DQogICAgIGRlZmluZXMgaW4gdGhlIGVycm9yIGNvZGUgaW4gbW9yZSBkZXRhaWwu 4oCdDQoNCkkgbWFkZSBpdCBTcGVjaWZpY2F0aW9uIFJlcXVpcmVkLCBhZGRlZCBhIG5vcm1hdGl2 ZSByZWZlcmVuY2UgdG8gUkZDNTIyNiBhbmQgdHdlYWtlZCB0aGUgZXhpc3Rpbmcgd29yZGluZyB0 byBiZSBpbmxpbmUgd2l0aCBSRkM3NzM2LiBpdCBub3cgcmVhZHM6DQoNCuKAnOKAnSINClRoaXMg ZG9jdW1lbnQgZXN0YWJsaXNoZXMgYSBuZXcgSUFOQSByZWdpc3RyeSBmb3IgQ0ROSSBSSSBFcnJv ciByZXNwb25zZSBjb2Rlcy4gIEFkZGl0aW9ucyB0byB0aGUgIlJJIEVycm9yIHJlc3BvbnNlIHJl Z2lzdHJ54oCdIHdpbGwgYmUgbWFkZSB2aWEgIlNwZWNpZmljYXRpb24gUmVxdWlyZWQiIGFzIGRl ZmluZWQgaW4gW1JGQzUyMjZdLg0KDQpUaGUgRGVzaWduYXRlZCBFeHBlcnQgd2lsbCB2ZXJpZnkg dGhhdCBuZXcgZXJyb3IgY29kZSByZWdpc3RyYXRpb25zIGRvIG5vdCBkdXBsaWNhdGUgZXhpc3Rp bmcgZXJyb3IgY29kZSBkZWZpbml0aW9ucyAoaW4gbmFtZSBvciBmdW5jdGlvbmFsaXR5KSwgZW5z dXJlIHRoYXQgdGhlIG5ldyBlcnJvciBjb2RlIGlzIGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgZXJy b3IgY2xhc3NlcyBkZWZpbmVkIGluIHNlY3Rpb24gU2VjdGlvbiA0Ljcgb2YgdGhpcyBkb2N1bWVu dCwgcHJldmVudCBncmF0dWl0b3VzIGFkZGl0aW9ucyB0byB0aGUgbmFtZXNwYWNlLCBhbmQgcHJl dmVudCBhbnkgYWRkaXRpb25zIHRvIHRoZSBuYW1lc3BhY2UgdGhhdCB3b3VsZCBpbXBhaXIgdGhl IGludGVyb3BlcmFiaWxpdHkgb2YgQ0ROSSBpbXBsZW1lbnRhdGlvbnMuDQrigJzigJ3igJ0NCg0K DQotIHNlY3Rpb24gODogdGhlcmUncyBhbiBleHRyYSBzcGFjZSBpbiBteSBuYW1lOiAiS2V2aW4g Si4gIE1hIiAtPiAiS2V2aW4gSi4gTWHigJ0NCg0KV293IHlvdSBoYXZlIGVhZ2xlIGV5ZXMgOi0p IEl0IHNlZW1zIHhtbDJyZmMgbWlzdGFrZXMgdGhlIOKAnC7igJ0gZm9yIGEgZnVsbCBzdG9wIChw ZXJpb2QpIGFuZCBhdXRvbWF0aWNhbGx5IHN0YXJ0cyBldmVyeSBzZW50ZW5jZSB3aXRoIDIgc3Bh Y2VzLiBJ4oCZdmUgY2hhbmdlZCBpdCB0byDigJxLZXZpbiBKIE1h4oCdIHRvIGF2b2lkIHRoZSBk b3VibGUgc3BhY2UgYnV0IGNhbiBjaGFuZ2UgaXQgYmFjayBpdCB5b3UgcHJlZmVyIGl0IHdpdGgg dGhlIGZ1bGwgc3RvcCAocGVyaW9kKS4NCg0KDQotIHNlY3Rpb24gOS4xOiBUaGVyZSBpcyBhIG5v cm1hdGl2ZSByZWZlcmVuY2UgdG8gdGhlIGluZm9ybWF0aW9uYWwgRnJhbWV3b3JrIGRyYWZ0LiAg RG9lcyB0aGlzIG5lZWQgdG8gYmUgbm9ybWF0aXZlPyAgSWYgc28sIHdoeT8gIE5vdGU6IEl0IGlz IGluZm9ybWF0aXZlIGluIHRoZSBvdGhlciBpbnRlcmZhY2Ugc3BlY2lmaWNhdGlvbnMuDQoNCkNo YW5nZWQgdG8gaW5mb3JtYXRpdmUuDQoNCg0KLSBzZWN0aW9uIDkuMjogdGhlIChtaXNzaW5nKSBy ZWZlcmVuY2UgdG8gUkZDNzczNiBzaG91bGQgYmUgaW5mb3JtYXRpdmUNCg0KQWRkZWQuDQoNCg0K QmVuDQoNCg== --_000_A419F67F880AB2468214E154CB8A556206C82A9Eeusaamb103erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsN Cgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4 cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3Np emU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIx MDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIg Lz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxh bmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRT ZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SGkgQmVuLDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 TG9va3MgZ29vZC4mbmJzcDsgdGhhbnghPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgd3J0IHRoZSByZWdpc3RyeTo8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyAmZ3Q7DQo8L3NwYW4+LSBzZWN0aW9uIDYuMjogc2hvdWxkIHRoaXMgYmUgYSAmcXVvdDtzdWJy ZWdpc3RyeSB3aXRoaW4gdGhlICZxdW90O0NvbnRlbnQgRGVsaXZlcnkgTmV0d29yayBJbnRlcmNv bm5lY3Rpb24gKENETkkpIFBhcmFtZXRlcnMmcXVvdDsgcmVnaXN0cnku4oCdPzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmZ3Q7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyAmZ3Q7 DQo8L3NwYW4+SSBkb27igJl0IHRoaW5rIHNvLiBXaGF0IHdl4oCZcmUgZGVmaW5pbmcgYSByZWdp c3RyeSBmb3IgaXMgYSBzZXQgb2YgbnVtZXJpYyByZXNwb25zZSBjb2RlcyAmYW1wOyB0aGVpciBt ZWFuaW5ncyBmb3IgcmV0dXJuaW5nIGluIGEgUkkgKGVycm9yKSByZXNwb25zZS4gSXQgaXMgbm90 IG9idmlvdXMgdG8gbWUgaG93IHRoYXQgcmVnaXN0cnkgaXMgcmVsYXRlZCB0byB0aGUgQ0ROSSBw YXJhbWV0ZXJzIHJlZ2lzdHJ5IChhc3N1bWluZyBieSBDRE5JIFBhcmFtZXRlcnMNCiByZWdpc3Ry eSB5b3UgbWVhbiB0aGUgTWVkaWEgVHlwZSBwYXJhbWV0ZXIgcmVnaXN0cnkpLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgSSB0aGluayB0 aGUgQ0ROSSBQYXJhbWV0ZXJzICZxdW90O3JlZ2lzdHJ5JnF1b3Q7IGlzIGp1c3QgdGhlIGdyb3Vw aW5nIGZvciBhbGwgQ0ROSSByZWxhdGVkIHJlZ2lzdHJpZXMsIGFuZCB0aGUgQ0ROSSBQYXlsb2Fk IFR5cGVzICh0aGUgbWVkaWEgdHlwZSBwYXJhbWV0ZXIgcmVnaXN0cnkpIGlzIHVuZGVybmVhdGgg dGhhdCAoc2VlDQogdGhlICZxdW90Ozwvc3Bhbj5Db250ZW50IERlbGl2ZXJ5IE5ldHdvcmsgSW50 ZXJjb25uZWN0aW9uIChDRE5JKSBQYXJhbWV0ZXJzPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZxdW90OyBoZWFkaW5nIGF0 DQo8YSBocmVmPSJodHRwczovL3d3dy5pYW5hLm9yZy9wcm90b2NvbHMiPmh0dHBzOi8vd3d3Lmlh bmEub3JnL3Byb3RvY29sczwvYT4pLiZuYnNwOyBJIGRpZG4ndCBoYXZlIGFueXRoaW5nIG9yaWdp bmFsbHkgaW4gdGhlIG1lZGlhIHR5cGUgZHJhZnQsIGFuZCB0aGVuIHdhcyBhc2tlZCB0byBhZGQg dGV4dCBpbiB3aGljaCBJIHJlZmVycmVkIHRvIGl0IGFzIGEgJnF1b3Q7Y2F0ZWdvcnkmcXVvdDss IGJ1dCB0aGUgZWRpdG9ycyBjaGFuZ2VkIGl0IHRvIHRoZSAmcXVvdDtzdWJyZWdpc3RyeSZxdW90 Ow0KIHRleHQgYWJvdmUuJm5ic3A7IEkgYXNzdW1lIHdlIG5lZWQgdGhhdCB0ZXh0LCBzbyB0aGF0 IGFsbCB0aGUgQ0ROSSByZWdpc3RyaWVzIGFyZSBpbiBvbmUgcGxhY2U7IGVsc2Ugd2UnbGwgbGlr ZWx5IGdldCBhc2tlZCBhYm91dCBpdCBpbiBJRVNHIHJldmlldy48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyBPdGhlciB0aGFu IHRoYXQsIEkgdGhpbmsgd2UncmUgcmVhZHkgdG8gZ28uPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij50aGFueCE8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPi0tJm5ic3A7IEtldmlu IEouIE1hPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERG IDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21h JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+IENETmkgW21haWx0bzpjZG5pLWJvdW5jZXNAaWV0Zi5vcmddDQo8 Yj5PbiBCZWhhbGYgT2YgPC9iPkJlbiBOaXZlbi1KZW5raW5zPGJyPg0KPGI+U2VudDo8L2I+IFdl ZG5lc2RheSwgSmFudWFyeSAyNywgMjAxNiAyOjQzIFBNPGJyPg0KPGI+VG86PC9iPiBDb250ZW50 IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVyY29ubmVjdGlvbiBEaXNjdXNzaW9uIExpc3Q8YnI+DQo8 Yj5TdWJqZWN0OjwvYj4gUmU6IFtDRE5pXSBTaGVwaGVyZCBSZXZpZXcgb2YgZHJhZnQtaWV0Zi1j ZG5pLXJlZGlyZWN0aW9uLTE0LnR4dDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPktldmluLDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SeKAmXZlIG1hZGUgbW9zdCBvZiB0aGUgY2hhbmdlcyB5b3Ugc3VnZ2VzdGVkLCBj b21tZW50cy93aGF0IEnigJl2ZSBkb25lIGFyZSBiZWxvdy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SeKAmXZlIHB1c2hlZCAtMTUgd2l0aCB0 aGUgY2hhbmdlcywgZGlmZiB0byAtMTQgaXMgaGVyZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5v cmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xNSI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xNTwv YT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ TGV0IG1lIGtub3cgaWYgdGhlcmUgYXJlIGFueSBvdGhlciBjaGFuZ2VzIHlvdSB3YW50IHRvIHRo ZSBkb2N1bWVudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9 Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+T24gMTMgSmFuIDIwMTYsIGF0IDIzOjE2LCBLZXZpbiBNYSBKICZsdDs8YSBo cmVmPSJtYWlsdG86a2V2aW4uai5tYUBlcmljc3Nvbi5jb20iPmtldmluLmoubWFAZXJpY3Nzb24u Y29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkhpIEJlbi9SYXksPGJyPg0KPGJyPg0KJm5ic3A7KGFzIGNoYWlyKSBJJ3ZlIGNvbXBsZXRlZCBt eSBzaGVwaGVyZCdzIHJldmlldyBvZiB0aGUgZG9jdW1lbnQgYW5kIGhhdmUgZW5jbG9zZWQgc29t ZSBxdWVzdGlvbnMgY29tbWVudHMgYmVsb3cuICZuYnNwO01vc3QgYXJlIG5pdHMsIGJ1dCB0aGUg SUFOQSBDb25zaWRlcmF0aW9ucyBhbmQgTm9ybWF0aXZlL0luZm9ybWF0aXZlIFJlZmVyZW5jZSBj b21tZW50cyBhdCB0aGUgZW5kIG5lZWQgdG8gYmUgYWRkcmVzc2VkLjxicj4NCjxicj4NCnRoYW54 ITxicj4NCjxicj4NCi0tICZuYnNwO0tldmluIEouIE1hPGJyPg0KPGJyPg0KPGJyPg0KLSBnZW5l cmFsOiB0aGVyZSBpcyBpbmNvbnNpc3RlbmN5IGluIHRoZSB1c2Ugb2YgJnF1b3Q7UmVkaXJlY3Rp b24gSW50ZXJmYWNlJnF1b3Q7IGFuZCAmcXVvdDtSZWRpcmVjdGlvbiBpbnRlcmZhY2UmcXVvdDs7 IGl0IHNlZW1zIHRvIGJlIGEgcHJvYmxlbSBpbiBhbGwgdGhlIGRvY3MsIGJ1dCBsb2dnaW5nIG1v c3RseSB1c2VzIHRoZSBsb3dlcmNhc2Ug4oCcaSZxdW90OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNoYW5nZWQgdG8gdXNpbmcg 4oCYUmVkaXJlY3Rpb24gaW50ZXJmYWNl4oCZIHRocm91Z2hvdXQuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIGdlbmVyYWw6ICZxdW90O2UuZy4g JnF1b3Q7IC0mZ3Q7ICZxdW90O2UuZy4sICZxdW90OywgJnF1b3Q7aS5lLiAmcXVvdDsgLSZndDsg JnF1b3Q7aS5lLiwgJnF1b3Q7LCBhbmQgJnF1b3Q7Rm9yIGV4YW1wbGUgJnF1b3Q7IC0mZ3Q7ICZx dW90O0ZvciBleGFtcGxlLCDigJw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+RG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2tx dW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24gMzogVGhlIGJ1bGxldGVkIGl0ZW1zIGFy ZSBub3QgY29tcGxldGUgc2VudGVuY2VzLCBwZXJoYXBzOjxicj4NCjxicj4NCiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZxdW90O1RoZSBmaW5hbCBTdXJyb2dhdGUsIHdoaWNoIG1heSBiZSBpbiB0 aGUgZENETiB0aGF0IHJldHVybmVkIHRoZSBSSTxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwO3Jlc3BvbnNlIHRvIHRoZSB1Q0ROLCBvciBhbm90aGVyIENETiAoaWYgdGhlIGRDRE4g ZGVsZWdhdGVzIHRoZTxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO2RlbGl2ZXJ5 IHRvIGFub3RoZXIgQ0ROKS4mcXVvdDsgLSZndDs8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmcXVvdDtUaGUgZmluYWwgU3Vycm9nYXRlLCB3aGljaCBtYXkgYmUgaW4gdGhlIGRDRE4gdGhh dCByZXR1cm5lZCB0aGUgUkk8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtyZXNw b25zZSB0byB0aGUgdUNETiwgb3IgYW5vdGhlciBDRE4gKGlmIHRoZSBkQ0ROIGRlbGVnYXRlcyB0 aGU8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtkZWxpdmVyeSB0byBhbm90aGVy IENETik7IG9y4oCdPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+RG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiAzOiBjb21tYSBhZnRlciAmcXVvdDtUaGVyZWZv cmUmcXVvdDs6PGJyPg0KPGJyPg0KJm5ic3A7JnF1b3Q7VGhlcmVmb3JlIHRoZSBzY29wZSBvZiB0 aGlzIGRvY3VtZW50IGlzIGxpbWl0ZWQgdG8gUmVjdXJzaXZlPGJyPg0KJm5ic3A7Jm5ic3A7UmVx dWVzdCBSZWRpcmVjdGlvbi4mcXVvdDsgLSZndDs8YnI+DQombmJzcDsmcXVvdDtUaGVyZWZvcmUs IHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50IGlzIGxpbWl0ZWQgdG8gUmVjdXJzaXZlPGJyPg0K Jm5ic3A7Jm5ic3A7UmVxdWVzdCBSZWRpcmVjdGlvbi7igJ08bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Eb25lPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24gMzogdGhlIGNvbG9uIHNob3VsZCBi ZSBhIHNlbWktY29sb246PGJyPg0KPGJyPg0KJm5ic3A7JnF1b3Q7ZG9tYWluIGluIHRoZSBVUkwg ZGVyZWZlcmVuY2VkIHRvIHJlYWNoIHRoZSB1Q0ROOiB3aXRob3V0IG9wZXJhdGlvbmFsPGJyPg0K Jm5ic3A7Jm5ic3A7cHJlY2F1dGlvbnMsIGFuZCBpbiB0aGUgYWJzZW5jZSBvZiBETlNTRUMsIHRo aXMgY2FuIG1ha2UgYSBsZWdpdGltYXRlPGJyPg0KJm5ic3A7Jm5ic3A7cmVkaXJlY3Rpb24gbG9v ayBsaWtlIGEgRE5TLWJhc2VkIGF0dGFjayZxdW90OyAtJmd0Ozxicj4NCiZuYnNwOyZxdW90O2Rv bWFpbiBpbiB0aGUgVVJMIGRlcmVmZXJlbmNlZCB0byByZWFjaCB0aGUgdUNETjsgd2l0aG91dCBv cGVyYXRpb25hbDxicj4NCiZuYnNwOyZuYnNwO3ByZWNhdXRpb25zLCBhbmQgaW4gdGhlIGFic2Vu Y2Ugb2YgRE5TU0VDLCB0aGlzIGNhbiBtYWtlIGEgbGVnaXRpbWF0ZTxicj4NCiZuYnNwOyZuYnNw O3JlZGlyZWN0aW9uIGxvb2sgbGlrZSBhIEROUy1iYXNlZCBhdHRhY2vigJ08bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Eb25lLjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBzZWN0aW9uIDQ6IFRob3VnaCBp dCBtZW50aW9ucyBiZWluZyBleHRlbnNpYmxlLCB3ZSBkbyBub3QgZ2l2ZSBhbnkgZ3VpZGFuY2Ug b24gaG93IHRvIGV4dGVuZCB0aGUgUkkuICZuYnNwO1Nob3VsZCB3ZT8gJm5ic3A7T3Igc2hvdWxk IHdlIGp1c3QgbGVhdmUgaXQ/PGJyPg0KPGJyPg0KJm5ic3A7JnF1b3Q7RmluYWxseSwgdGhlIFJJ IGlzIGVhc2lseSBleHRlbmRhYmxlIHRvIHN1cHBvcnQgb3RoZXIgVXNlciBBZ2VudDxicj4NCiZu YnNwOyZuYnNwO3JlcXVlc3QgcmVkaXJlY3Rpb24gbWV0aG9kcyAoZS5nLiAmbmJzcDtSVE1QIDMw MiByZWRpcmVjdGlvbikuJnF1b3Q7PGJyPg0KPGJyPg0KJm5ic3A7T25lIHRob3VnaHQgaXMgdGhh dCB0aGUgd2F5IHRvIGV4dGVuZCB0aGlzIHdvdWxkIGJlOiB3cml0ZSBhIG5ldyBSRkMsIHdpdGgg bmV3IFJJIEpTT04gb2JqZWN0cywgYW5kIHJlZ2lzdGVyaW5nIGEgbmV3IHJlZGlyZWN0aW9uIG1v ZGUgY2FwYWJpbGl0eT88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5JIGNoYW5nZWQgdGhlIHNlbnRlbmNlIHRvOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5GaW5hbGx5LCB0aGUgUkkgaXMgZWFzaWx5IGV4 dGVuZGFibGUgdG8gc3VwcG9ydCBvdGhlciBVc2VyIEFnZW50IHJlcXVlc3QgcmVkaXJlY3Rpb24g bWV0aG9kcyAoZS5nLiwgUlRNUCAzMDIgcmVkaXJlY3Rpb24pIGJ5IGRlZmluaW5nIGFkZGl0aW9u YWwgcHJvdG9jb2wgc3BlY2lmaWMga2V5cyBmb3IgUkkgcmVxdWVzdHMgYW5kIHJlc3BvbnNlcyBh bG9uZyB3aXRoIGEgc3BlY2lmaWNhdGlvbiBob3cgdG8gcHJvY2Vzcw0KIHRoZW0uPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnRvIHRyeSBhbmQg ZXhwYW5kIGEgYml0IG9uIGhvdyBleHRlbnNpb25zIGNvdWxkIGJlIGRvbmUuIEkgZG9u4oCZdCB0 aGluayBpdOKAmXMgdGhlIHJvbGUgb2YgdGhpcyBkb2N1bWVudCB0byBzcGVjaWZ5IGV4YWN0bHkg d2hhdCBpcyByZXF1aXJlZCwgZS5nLiBtYW5kYXRpbmcgYW4gUkZDLiBJZiB5b3UgdGhpbmsgaXQg bmVlZHMgbW9yZSBleHBsYW5hdGlvbiBvbiBob3cgdG8gZXh0ZW5kIGl0IEkgY2FuIGxvb2sgYXQg Y3JhZnRpbmcNCiBzb21lIG1vcmUgZGV0YWlsZWQgdGV4dD88bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiA0LjE6IHN1Z2dlc3RlZCBl ZGl0Ojxicj4NCjxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZxdW90O1RoZSBzY29wZSBv ZiB0aGUgcmVzcG9uc2UgKGlmIGl0IGlzIGNhY2hlYWJsZSkgc2lnbmFsZWQgdGhlIEhUVFA8YnI+ DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtyZXNwb25zZSBib2R5IG9mIHRoZSBSSSBy ZXNwb25zZS4gJm5ic3A7Rm9yIGV4YW1wbGUgd2hldGhlciB0aGU8YnI+DQombmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDtyZXNwb25zZSBhcHBsaWVzIHRvIGEgd2lkZXIgcmFuZ2Ugb2YgSVAg YWRkcmVzc2VzIHRoYW4gd2hhdCB3YXM8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDtpbmNsdWRlZCBpbiB0aGUgUkkgcmVxdWVzdC4mcXVvdDsgLSZndDs8YnI+DQombmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmcXVvdDtUaGUgc2NvcGUgb2YgYSBjYWNoZWFibGUgcmVzcG9uc2Ugc2ln bmFsZWQgdmlhIHRoZSBIVFRQPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7cmVz cG9uc2UgYm9keSBvZiB0aGUgUkkgcmVzcG9uc2UsIGZvciBleGFtcGxlLCB3aGV0aGVyIHRoZTxi cj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3Jlc3BvbnNlIGFwcGxpZXMgdG8gYSB3 aWRlciByYW5nZSBvZiBJUCBhZGRyZXNzZXMgdGhhbiB3aGF0IHdhczxicj4NCiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwO2luY2x1ZGVkIGluIHRoZSBSSSByZXF1ZXN0LuKAnTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRvbmUuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24gNC4zOiB0 aGUgcmVmZXJlbmNlIHRvIFJGQzczMzYgKEZyYW1ld29yaykgc2hvdWxkIGJlIHRvIFJGQzc3MzYg KE1lZGlhIFR5cGUpPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+R29vZCBjYXRjaC4gRG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiA0LjQuMjogU2hvdWxkIHRoaXMgYWxzbyBzdGF0ZSB0 aGF0IHRoZSBkbnMgZGljdGlvbmFyeSBNVVNUIGNvbnRhaW4gdGhlIHJjb2RlIGFuZCBuYW1lIGtl eXM/PGJyPg0KPGJyPg0KJm5ic3A7JnF1b3Q7SWYgYSBkbnMgZGljdGlvbmFyeSBpcyBpbmNsdWRl ZCBpbiB0aGUgUkk8YnI+DQombmJzcDsmbmJzcDtyZXNwb25zZSwgaXQgTVVTVCBpbmNsdWRlIGF0 IGxlYXN0IG9uZSBvZiB0aGUgZm9sbG93aW5nIGtleXM6IGEsPGJyPg0KJm5ic3A7Jm5ic3A7YWFh YSwgY25hbWUu4oCdPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+RG9uZS4gSSBpbnRlZ3JhdGVkIGl0IGludG8gdGhlIGV4aXN0aW5nIHNlbnRlbmNlIGFib3V0 IGluY2x1ZGluZyBvbmUgb2YgYSwgYWFhYSwgY2FtZSBzbyBpdCBub3cgcmVhZHM6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklmIGEgZG5zIGRp Y3Rpb25hcnkgaXMgaW5jbHVkZWQgaW4gdGhlIFJJIHJlc3BvbnNlLCBpdCBNVVNUIGluY2x1ZGUg dGhlIHJjb2RlIGFuZCBuYW1lIGtleXMgYW5kIGl0IE1VU1QgaW5jbHVkZSBhdCBsZWFzdCBvbmUg b2YgdGhlIGZvbGxvd2luZyBrZXlzOiBhLCBhYWFhLCBjYW1lLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t Ym90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24gNC41 LjI6IG1pc3NpbmcgJnF1b3Q7YW5kJnF1b3Q7Ojxicj4NCjxicj4NCiZuYnNwOyZxdW90O2l0IE1V U1QgaW5jbHVkZSBhdCBsZWFzdCB0aGUgZm9sbG93aW5nIGtleXM6IHNjLTxicj4NCiZuYnNwOyZu YnNwO3N0YXR1cywgc2MtdmVyc2lvbiwgc2MtcmVhc29uLCBjcy11cmksIHNjLShsb2NhdGlvbiku JnF1b3Q7IC0mZ3Q7PGJyPg0KJm5ic3A7JnF1b3Q7aXQgTVVTVCBpbmNsdWRlIGF0IGxlYXN0IHRo ZSBmb2xsb3dpbmcga2V5czogc2MtPGJyPg0KJm5ic3A7Jm5ic3A7c3RhdHVzLCBzYy12ZXJzaW9u LCBzYy1yZWFzb24sIGNzLXVyaSwgYW5kIHNjLShsb2NhdGlvbiku4oCdPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RG9uZS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxi cj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlv biA0Ljg6IHRoaXMgaW1wbGllcyB0aGF0IHRoZSBDRE4ga25vd3MgdGhlIGRDRE4ncyBwcm92aWRl ciBJRD8gJm5ic3A7SXMgdGhhdCB0eXBpY2FsbHkgdHJ1ZT8gJm5ic3A7V291bGQgaXQgYmUgc2lt cGxlciB0byBoYXZlIENETnMgY2hlY2sganVzdCB0aGVpciBvd24gcHJvdmlkZXIgSUQ/ICZuYnNw O0kgd291bGQgc3VnZ2VzdCByZW1vdmluZyB0aGlzIHNlbnRlbmNlPzxicj4NCjxicj4NCiZuYnNw OyZxdW90O1RyYW5zaXQgQ0ROcyBNVVNUIGNoZWNrIHRoZSBjZG4tPGJyPg0KJm5ic3A7Jm5ic3A7 cGF0aCBhbmQgbm90IGNhc2NhZGUgdGhlIFJJIHJlcXVlc3QgdG8gZENETnMgdGhhdCBhcmUgYWxy ZWFkeSBsaXN0ZWQ8YnI+DQombmJzcDsmbmJzcDtpbiBjZG4tcGF0aC7igJ08bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Eb25lLjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBzZWN0aW9uIDQuODogc3VnZ2Vz dGVkIGVkaXQ6PGJyPg0KPGJyPg0KJm5ic3A7JnF1b3Q7QXMgd2VsbCBhcyBsb29wcyB3aXRoaW4g dGhlIFJJIGl0c2VsZiwmcXVvdDsgLSZndDs8YnI+DQombmJzcDsmcXVvdDtCZXNpZGUgbG9vcHMg d2l0aGluIHRoZSBSSSBpdHNlbGYs4oCdPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+RG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiA0Ljg6IG1pc3NpbmcgY29tbWFzOjxicj4NCjxicj4N CiZuYnNwOyZxdW90O2ZvciBleGFtcGxlIGlmIHRoZSBJUDxicj4NCiZuYnNwOyZuYnNwO2FkZHJl c3MoZXMpIG9yIFVSSShzKSByZXR1cm5lZCBpbiBSSSByZXNwb25zZXMgZG8gbm90IHJlc29sdmU8 YnI+DQombmJzcDsmbmJzcDtkaXJlY3RseSB0byBhIHN1cnJvZ2F0ZSBpbiB0aGUgZmluYWwgZENE TiB0aGVyZSBpcyB0aGUgcG9zc2liaWxpdHkmcXVvdDsgLSZndDs8YnI+DQombmJzcDsmcXVvdDtm b3IgZXhhbXBsZSwgaWYgdGhlIElQPGJyPg0KJm5ic3A7Jm5ic3A7YWRkcmVzcyhlcykgb3IgVVJJ KHMpIHJldHVybmVkIGluIFJJIHJlc3BvbnNlcyBkbyBub3QgcmVzb2x2ZTxicj4NCiZuYnNwOyZu YnNwO2RpcmVjdGx5IHRvIGEgc3Vycm9nYXRlIGluIHRoZSBmaW5hbCBkQ0ROLCB0aGVyZSBpcyB0 aGUgcG9zc2liaWxpdHnigJ08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5Eb25lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+LSBzZWN0aW9uIDQuODogdHlwbzogJnF1b3Q7Y29udGludW9zbHkmcXVvdDsgLSZn dDsg4oCcY29udGludW91c2x5JnF1b3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+RG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiA1LjE6IGJ1bGxldCBwdW5jdHVhdGlvbjo8YnI+DQo8 YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmcXVvdDt0aGUgZENETiBhbmQgdUNETiB0byBh dXRob3JpemUgZWFjaCBvdGhlciAodG8gZW5zdXJlIHRoZXkgYXJlPGJyPg0KJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7dHJhbnNtaXR0aW5nL3JlY2VpdmluZyBDRE5JIFJlZGlyZWN0aW9u IG1lc3NhZ2VzIHRvL2Zyb20gYW48YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDth dXRob3JpemVkIENETikmcXVvdDsgLSZndDs8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm cXVvdDt0aGUgZENETiBhbmQgdUNETiB0byBhdXRob3JpemUgZWFjaCBvdGhlciAodG8gZW5zdXJl IHRoZXkgYXJlPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7dHJhbnNtaXR0aW5n L3JlY2VpdmluZyBDRE5JIFJlZGlyZWN0aW9uIG1lc3NhZ2VzIHRvL2Zyb20gYW48YnI+DQombmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDthdXRob3JpemVkIENETik7JnF1b3Q7PGJyPg0KPGJy Pg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7Q0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZh Y2UgbWVzc2FnZXMgdG8gYmUgdHJhbnNtaXR0ZWQgd2l0aDxicj4NCiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwO2NvbmZpZGVudGlhbGl0eS4mcXVvdDsgLSZndDs8YnI+DQombmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmcXVvdDtDRE5JIFJlZGlyZWN0aW9uIGludGVyZmFjZSBtZXNzYWdlcyB0 byBiZSB0cmFuc21pdHRlZCB3aXRoPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Y29uZmlkZW50aWFsaXR5OyBhbmTigJ08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5Eb25lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+LSBzZWN0aW9uIDUuMjogdGhlIHJlc3Qgb2YgdGhlIGRvYyB1c2VzICZx dW90O2FuIFJJJnF1b3Q7LCBidXQgdGhpcyBzZWN0aW9uIHVzZXMgJnF1b3Q7YSBSSSZxdW90Ozsg c2hvdWxkIG1ha2UgaXQgY29uc2lzdGVudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5Eb25lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+LSBzZWN0aW9uIDUuMjogdGhlIGZpcnN0IDExIHdvcmRzIG9mIHNl Y3Rpb24gNS4yIGFyZSBpZGVudGljYWwgdG8gdGhlIGZpcnN0IDExIHdvcmRzIG9mIHNlY3Rpb24g NTsgbWF5YmUganVzdCByZW1vdmUgdGhlbSBmcm9tIHNlY3Rpb24gNS4yPzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQombmJzcDsmcXVv dDtJbmZvcm1hdGlvbiBwYXNzZWQgb3ZlciB0aGUgUkkgY291bGQgYmUgY29uc2lkZXJlZCBwZXJz b25hbCBvcjxicj4NCiZuYnNwOyZuYnNwO3NlbnNpdGl2ZS4gJm5ic3A7SW4gcGFydGljdWxhciwg cGFydHMmcXVvdDsgLSZndDs8YnI+DQombmJzcDvigJxQYXJ0cyZxdW90OzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgdGhpbmsg dGhlIHJlcGV0aXRpb24gaXMgT0sgYW5kIHByb3ZpZGVzIGEgcmVmcmVzaCBvZiB0aGUgY29udGV4 dC4gQXMgcHJpdmFjeSBpcyBsaWtlbHkgdG8gYmUgYSB0b3BpYyBmb2xrcyBuaXQgcGljayBhdCBk dXJpbmcgSUVURiBMQy9JRVNHIHJldmlldyBJ4oCZZCByYXRoZXIgYmUgY2F1dGlvdXMgYW5kIHJl cGVhdCBteXNlbGYgYW5kIGxlYXZlIGl0IHRvIHRoZSBSRkMgZWRpdG9yIHRvIHR3ZWFrIGZvciBy ZWFkYWJpbGl0eS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPi0gc2VjdGlvbiA1LjI6IHN1Z2dlc3RlZCBlZGl0Ojxicj4NCjxicj4NCiZuYnNwOyZx dW90O2RvIG9idGFpbiBpbmZvcm1hdGlvbiByZWdhcmRpbmcgRW5kIFVzZXIgSVAgYWRkcmVzc2Vz PGJyPg0KJm5ic3A7Jm5ic3A7YW5kIHJlcXVlc3RlZCBVUklzIHRoYXQgdGhleSB3b3VsZG4ndCBo YWQgdGhlIFJJIG5vdCBiZWVuIHVzZWQuJnF1b3Q7IC0mZ3Q7PGJyPg0KJm5ic3A7JnF1b3Q7ZG8g b2J0YWluIGluZm9ybWF0aW9uIHJlZ2FyZGluZyBFbmQgVXNlciBJUCBhZGRyZXNzZXM8YnI+DQom bmJzcDsmbmJzcDthbmQgcmVxdWVzdGVkIFVSSXMgdGhhdCB0aGV5IHdvdWxkbid0IGhhdmUsIGhh ZCB0aGUgUkkgbm90IGJlZW4gdXNlZC7igJ08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5Eb25lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+LSBzZWN0aW9uIDYuMjogc2hvdWxkIHRoaXMgYmUgYSAmcXVvdDtz dWJyZWdpc3RyeSB3aXRoaW4gdGhlICZxdW90O0NvbnRlbnQgRGVsaXZlcnkgTmV0d29yayBJbnRl cmNvbm5lY3Rpb24gKENETkkpIFBhcmFtZXRlcnMmcXVvdDsgcmVnaXN0cnku4oCdPzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgZG9u4oCZdCB0aGluayBz by4gV2hhdCB3ZeKAmXJlIGRlZmluaW5nIGEgcmVnaXN0cnkgZm9yIGlzIGEgc2V0IG9mIG51bWVy aWMgcmVzcG9uc2UgY29kZXMgJmFtcDsgdGhlaXIgbWVhbmluZ3MgZm9yIHJldHVybmluZyBpbiBh IFJJIChlcnJvcikgcmVzcG9uc2UuIEl0IGlzIG5vdCBvYnZpb3VzIHRvIG1lIGhvdyB0aGF0IHJl Z2lzdHJ5IGlzIHJlbGF0ZWQgdG8gdGhlIENETkkgcGFyYW1ldGVycyByZWdpc3RyeSAoYXNzdW1p bmcNCiBieSBDRE5JIFBhcmFtZXRlcnMgcmVnaXN0cnkgeW91IG1lYW4gdGhlIE1lZGlhIFR5cGUg cGFyYW1ldGVyIHJlZ2lzdHJ5KS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiA2LjI6IGRvIHdlIHdhbnQgdG8gc3BlY2lmeSB0aGUg UkZDNTIyNiBwb2xpY3k/ICZuYnNwO2lzIGl0IEV4cGVydDxicj4NCiZuYnNwO1Jldmlldz8gJm5i c3A7bm90IFNwZWNpZmljYXRpb24gcmVxdWlyZWQ/PGJyPg0KPGJyPg0KJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7JnF1b3Q7U3BlY2lmaWNhdGlvbjogQW4gb3B0aW9uYWwgcmVmZXJlbmNlIHRvIGEg c3BlY2lmaWNhdGlvbiB0aGF0PGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ZGVm aW5lcyBpbiB0aGUgZXJyb3IgY29kZSBpbiBtb3JlIGRldGFpbC7igJ08bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIG1hZGUgaXQgU3BlY2lmaWNhdGlvbiBS ZXF1aXJlZCwgYWRkZWQgYSBub3JtYXRpdmUgcmVmZXJlbmNlIHRvIFJGQzUyMjYgYW5kIHR3ZWFr ZWQgdGhlIGV4aXN0aW5nIHdvcmRpbmcgdG8gYmUgaW5saW5lIHdpdGggUkZDNzczNi4gaXQgbm93 IHJlYWRzOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj7igJzigJ0mcXVvdDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlzIGRvY3VtZW50IGVzdGFibGlzaGVzIGEgbmV3IElBTkEg cmVnaXN0cnkgZm9yIENETkkgUkkgRXJyb3IgcmVzcG9uc2UgY29kZXMuICZuYnNwO0FkZGl0aW9u cyB0byB0aGUgJnF1b3Q7UkkgRXJyb3IgcmVzcG9uc2UgcmVnaXN0cnnigJ0gd2lsbCBiZSBtYWRl IHZpYSAmcXVvdDtTcGVjaWZpY2F0aW9uIFJlcXVpcmVkJnF1b3Q7IGFzIGRlZmluZWQgaW4gW1JG QzUyMjZdLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5UaGUgRGVzaWduYXRlZCBFeHBlcnQgd2lsbCB2ZXJpZnkgdGhhdCBuZXcgZXJyb3IgY29k ZSByZWdpc3RyYXRpb25zIGRvIG5vdCBkdXBsaWNhdGUgZXhpc3RpbmcgZXJyb3IgY29kZSBkZWZp bml0aW9ucyAoaW4gbmFtZSBvciBmdW5jdGlvbmFsaXR5KSwgZW5zdXJlIHRoYXQgdGhlIG5ldyBl cnJvciBjb2RlIGlzIGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgZXJyb3IgY2xhc3NlcyBkZWZpbmVk IGluIHNlY3Rpb24gU2VjdGlvbg0KIDQuNyBvZiB0aGlzIGRvY3VtZW50LCBwcmV2ZW50IGdyYXR1 aXRvdXMgYWRkaXRpb25zIHRvIHRoZSBuYW1lc3BhY2UsIGFuZCBwcmV2ZW50IGFueSBhZGRpdGlv bnMgdG8gdGhlIG5hbWVzcGFjZSB0aGF0IHdvdWxkIGltcGFpciB0aGUgaW50ZXJvcGVyYWJpbGl0 eSBvZiBDRE5JIGltcGxlbWVudGF0aW9ucy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+4oCc4oCd4oCdPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24gODogdGhlcmUncyBh biBleHRyYSBzcGFjZSBpbiBteSBuYW1lOiAmcXVvdDtLZXZpbiBKLiAmbmJzcDtNYSZxdW90OyAt Jmd0OyAmcXVvdDtLZXZpbiBKLiBNYeKAnTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPldvdyB5b3UgaGF2ZSBlYWdsZSBleWVzIDotKSBJdCBzZWVtcyB4bWwy cmZjIG1pc3Rha2VzIHRoZSDigJwu4oCdIGZvciBhIGZ1bGwgc3RvcCAocGVyaW9kKSBhbmQgYXV0 b21hdGljYWxseSBzdGFydHMgZXZlcnkgc2VudGVuY2Ugd2l0aCAyIHNwYWNlcy4gSeKAmXZlIGNo YW5nZWQgaXQgdG8g4oCcS2V2aW4gSiBNYeKAnSB0byBhdm9pZCB0aGUgZG91YmxlIHNwYWNlIGJ1 dCBjYW4gY2hhbmdlIGl0IGJhY2sgaXQgeW91IHByZWZlcg0KIGl0IHdpdGggdGhlIGZ1bGwgc3Rv cCAocGVyaW9kKS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPi0gc2VjdGlvbiA5LjE6IFRoZXJlIGlzIGEgbm9ybWF0aXZlIHJlZmVyZW5jZSB0byB0 aGUgaW5mb3JtYXRpb25hbCBGcmFtZXdvcmsgZHJhZnQuICZuYnNwO0RvZXMgdGhpcyBuZWVkIHRv IGJlIG5vcm1hdGl2ZT8gJm5ic3A7SWYgc28sIHdoeT8gJm5ic3A7Tm90ZTogSXQgaXMgaW5mb3Jt YXRpdmUgaW4gdGhlIG90aGVyIGludGVyZmFjZSBzcGVjaWZpY2F0aW9ucy48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DaGFuZ2VkIHRvIGluZm9ybWF0aXZl LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJy Pg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBz ZWN0aW9uIDkuMjogdGhlIChtaXNzaW5nKSByZWZlcmVuY2UgdG8gUkZDNzczNiBzaG91bGQgYmUg aW5mb3JtYXRpdmU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5BZGRlZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5CZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_A419F67F880AB2468214E154CB8A556206C82A9Eeusaamb103erics_-- From nobody Thu Jan 28 04:04:37 2016 Return-Path: X-Original-To: cdni@ietf.org Delivered-To: cdni@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FFF11B3C7A; Thu, 28 Jan 2016 04:04:34 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160128120434.14364.6984.idtracker@ietfa.amsl.com> Date: Thu, 28 Jan 2016 04:04:34 -0800 Archived-At: Cc: cdni@ietf.org Subject: [CDNi] I-D Action: draft-ietf-cdni-redirection-16.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jan 2016 12:04:34 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Content Delivery Networks Interconnection Working Group of the IETF. Title : Request Routing Redirection interface for CDN Interconnection Authors : Ben Niven-Jenkins Ray van Brandenburg Filename : draft-ietf-cdni-redirection-16.txt Pages : 32 Date : 2016-01-28 Abstract: The Request Routing Interface comprises of (1) the asynchronous advertisement of footprint and capabilities by a downstream Content Delivery Network (CDN) that allows an upstream CDN to decide whether to redirect particular user requests to that downstream CDN; and (2) the synchronous operation of an upstream CDN requesting whether a downstream CDN is prepared to accept a user request and of a downstream CDN responding with how to actually redirect the user request. This document describes an interface for the latter part, i.e., the CDNI Request Routing Redirection interface. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cdni-redirection/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cdni-redirection-16 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-redirection-16 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Jan 28 04:06:43 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B7501B3C87 for ; Thu, 28 Jan 2016 04:06:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NtxhQV0w2doZ for ; Thu, 28 Jan 2016 04:06:36 -0800 (PST) Received: from mailex.mailcore.me (mailex.mailcore.me [94.136.40.144]) by ietfa.amsl.com (Postfix) with ESMTP id 2A9551B3C8A for ; Thu, 28 Jan 2016 04:06:36 -0800 (PST) Received: from host4.velocix.com ([81.134.152.4] helo=bnjenkins-mbp.corp.velocix.com) by smtp04.mailcore.me with esmtpa (Exim 4.80.1) (envelope-from ) id 1aOlLN-0001Yr-3Z; Thu, 28 Jan 2016 12:06:34 +0000 Content-Type: multipart/alternative; boundary="Apple-Mail=_5629906A-A05B-4599-95A7-C4130D9F69C5" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Ben Niven-Jenkins In-Reply-To: Date: Thu, 28 Jan 2016 12:06:31 +0000 Message-Id: <1E5AE3C2-1057-431A-80EE-5FFA700353B4@niven-jenkins.co.uk> References: To: Kevin Ma J X-Mailer: Apple Mail (2.2098) X-Mailcore-Auth: 9600544 X-Mailcore-Domain: 172912 Archived-At: Cc: Content Delivery Networks Interconnection Discussion List Subject: Re: [CDNi] Shepherd Review of draft-ietf-cdni-redirection-14.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jan 2016 12:06:42 -0000 --Apple-Mail=_5629906A-A05B-4599-95A7-C4130D9F69C5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Kevin, OK. I just pushed -16 which uses similar text to RFC7736, the complete = section on RI error response registry now reads: 6.2. RI Error response registry IANA is requested to create a new "CDNI RI Error response code" subregistry within the "Content Delivery Network Interconnection (CDNI) Parameters" registry. The "CDNI RI Error response code" namespace defines the valid values for the error-code key in RI error responses. The CDNI RI Error response code MUST be a three digit integer. Additions to the "RI Error response registry" will be made via "Specification Required" as defined in [RFC5226]. The Designated Expert will verify that new error code registrations do not duplicate existing error code definitions (in name or functionality), ensure that the new error code is in accordance with the error classes defined in section Section 4.7 of this document, prevent gratuitous additions to the namespace, and prevent any additions to the namespace that would impair the interoperability of CDNI implementations. New registrations are required to provide the following information: Code: A three-digit numeric error-code, in accordance with the error classes defined in section Section 4.7 of this document. Reason: A string that provides further information related to the error that will be included in the JSON error dictionary with the 'reason'-key. Depending on the error-code semantics, the value of this field may be determined dynamically. In that case, the registration should set this value to '' and define its semantics in the description field. Description: A brief description of the error code semantics. Specification: An optional reference to a specification that defines in the error code in more detail. The entries in Table 1 are registered by this document. Regards Ben > On 27 Jan 2016, at 20:21, Kevin Ma J wrote: >=20 > Hi Ben, > Looks good. thanx! > =20 > wrt the registry: > =20 > > - section 6.2: should this be a "subregistry within the "Content = Delivery Network Interconnection (CDNI) Parameters" registry.=E2=80=9D? > > > > I don=E2=80=99t think so. What we=E2=80=99re defining a registry = for is a set of numeric response codes & their meanings for returning in = a RI (error) response. It is not obvious to me how that registry is = related to the CDNI parameters registry (assuming by CDNI Parameters = registry you mean the Media Type parameter registry). > =20 > I think the CDNI Parameters "registry" is just the grouping for all = CDNI related registries, and the CDNI Payload Types (the media type = parameter registry) is underneath that (see the "Content Delivery = Network Interconnection (CDNI) Parameters" heading = athttps://www.iana.org/protocols ). I = didn't have anything originally in the media type draft, and then was = asked to add text in which I referred to it as a "category", but the = editors changed it to the "subregistry" text above. I assume we need = that text, so that all the CDNI registries are in one place; else we'll = likely get asked about it in IESG review. > =20 > Other than that, I think we're ready to go. > =20 > thanx! > =20 > -- Kevin J. Ma > =20 > From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf Of Ben = Niven-Jenkins > Sent: Wednesday, January 27, 2016 2:43 PM > To: Content Delivery Networks Interconnection Discussion List > Subject: Re: [CDNi] Shepherd Review of = draft-ietf-cdni-redirection-14.txt > =20 > Kevin, > =20 > I=E2=80=99ve made most of the changes you suggested, comments/what = I=E2=80=99ve done are below. > =20 > I=E2=80=99ve pushed -15 with the changes, diff to -14 is here: > =20 > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection-15 = > =20 > Let me know if there are any other changes you want to the document. > =20 > =20 > On 13 Jan 2016, at 23:16, Kevin Ma J > wrote: > =20 > Hi Ben/Ray, >=20 > (as chair) I've completed my shepherd's review of the document and = have enclosed some questions comments below. Most are nits, but the = IANA Considerations and Normative/Informative Reference comments at the = end need to be addressed. >=20 > thanx! >=20 > -- Kevin J. Ma >=20 >=20 > - general: there is inconsistency in the use of "Redirection = Interface" and "Redirection interface"; it seems to be a problem in all = the docs, but logging mostly uses the lowercase =E2=80=9Ci" > =20 > Changed to using =E2=80=98Redirection interface=E2=80=99 throughout. >=20 >=20 > - general: "e.g. " -> "e.g., ", "i.e. " -> "i.e., ", and "For example = " -> "For example, =E2=80=9C > =20 > Done. > =20 > - section 3: The bulleted items are not complete sentences, perhaps: >=20 > "The final Surrogate, which may be in the dCDN that returned the = RI > response to the uCDN, or another CDN (if the dCDN delegates the > delivery to another CDN)." -> > "The final Surrogate, which may be in the dCDN that returned the = RI > response to the uCDN, or another CDN (if the dCDN delegates the > delivery to another CDN); or=E2=80=9D > =20 > Done. >=20 >=20 > - section 3: comma after "Therefore": >=20 > "Therefore the scope of this document is limited to Recursive > Request Redirection." -> > "Therefore, the scope of this document is limited to Recursive > Request Redirection.=E2=80=9D > =20 > Done >=20 >=20 > - section 3: the colon should be a semi-colon: >=20 > "domain in the URL dereferenced to reach the uCDN: without = operational > precautions, and in the absence of DNSSEC, this can make a = legitimate > redirection look like a DNS-based attack" -> > "domain in the URL dereferenced to reach the uCDN; without = operational > precautions, and in the absence of DNSSEC, this can make a = legitimate > redirection look like a DNS-based attack=E2=80=9D > =20 > Done. >=20 >=20 > - section 4: Though it mentions being extensible, we do not give any = guidance on how to extend the RI. Should we? Or should we just leave = it? >=20 > "Finally, the RI is easily extendable to support other User Agent > request redirection methods (e.g. RTMP 302 redirection)." >=20 > One thought is that the way to extend this would be: write a new RFC, = with new RI JSON objects, and registering a new redirection mode = capability? > =20 > I changed the sentence to: > =20 > Finally, the RI is easily extendable to support other User Agent = request redirection methods (e.g., RTMP 302 redirection) by defining = additional protocol specific keys for RI requests and responses along = with a specification how to process them. > =20 > to try and expand a bit on how extensions could be done. I don=E2=80=99t= think it=E2=80=99s the role of this document to specify exactly what is = required, e.g. mandating an RFC. If you think it needs more explanation = on how to extend it I can look at crafting some more detailed text? >=20 >=20 > - section 4.1: suggested edit: >=20 > "The scope of the response (if it is cacheable) signaled the HTTP > response body of the RI response. For example whether the > response applies to a wider range of IP addresses than what was > included in the RI request." -> > "The scope of a cacheable response signaled via the HTTP > response body of the RI response, for example, whether the > response applies to a wider range of IP addresses than what was > included in the RI request.=E2=80=9D > =20 > Done. >=20 >=20 > - section 4.3: the reference to RFC7336 (Framework) should be to = RFC7736 (Media Type) > =20 > Good catch. Done. >=20 >=20 > - section 4.4.2: Should this also state that the dns dictionary MUST = contain the rcode and name keys? >=20 > "If a dns dictionary is included in the RI > response, it MUST include at least one of the following keys: a, > aaaa, cname.=E2=80=9D > =20 > Done. I integrated it into the existing sentence about including one = of a, aaaa, came so it now reads: > =20 > If a dns dictionary is included in the RI response, it MUST include = the rcode and name keys and it MUST include at least one of the = following keys: a, aaaa, came. > =20 > - section 4.5.2: missing "and": >=20 > "it MUST include at least the following keys: sc- > status, sc-version, sc-reason, cs-uri, sc-(location)." -> > "it MUST include at least the following keys: sc- > status, sc-version, sc-reason, cs-uri, and sc-(location).=E2=80=9D > =20 > Done. >=20 >=20 > - section 4.8: this implies that the CDN knows the dCDN's provider ID? = Is that typically true? Would it be simpler to have CDNs check just = their own provider ID? I would suggest removing this sentence? >=20 > "Transit CDNs MUST check the cdn- > path and not cascade the RI request to dCDNs that are already listed > in cdn-path.=E2=80=9D > =20 > Done. >=20 >=20 > - section 4.8: suggested edit: >=20 > "As well as loops within the RI itself," -> > "Beside loops within the RI itself,=E2=80=9D > =20 > Done. >=20 >=20 > - section 4.8: missing commas: >=20 > "for example if the IP > address(es) or URI(s) returned in RI responses do not resolve > directly to a surrogate in the final dCDN there is the possibility" = -> > "for example, if the IP > address(es) or URI(s) returned in RI responses do not resolve > directly to a surrogate in the final dCDN, there is the = possibility=E2=80=9D > =20 > Done. >=20 >=20 > - section 4.8: typo: "continuosly" -> =E2=80=9Ccontinuously" > =20 > Done. >=20 >=20 > - section 5.1: bullet punctuation: >=20 > "the dCDN and uCDN to authorize each other (to ensure they are > transmitting/receiving CDNI Redirection messages to/from an > authorized CDN)" -> > "the dCDN and uCDN to authorize each other (to ensure they are > transmitting/receiving CDNI Redirection messages to/from an > authorized CDN);" >=20 > "CDNI Redirection interface messages to be transmitted with > confidentiality." -> > "CDNI Redirection interface messages to be transmitted with > confidentiality; and=E2=80=9D > =20 > Done. >=20 >=20 > - section 5.2: the rest of the doc uses "an RI", but this section uses = "a RI"; should make it consistent. > =20 > Done. >=20 >=20 > - section 5.2: the first 11 words of section 5.2 are identical to the = first 11 words of section 5; maybe just remove them from section 5.2? >=20 > "Information passed over the RI could be considered personal or > sensitive. In particular, parts" -> > =E2=80=9CParts" > =20 > I think the repetition is OK and provides a refresh of the context. As = privacy is likely to be a topic folks nit pick at during IETF LC/IESG = review I=E2=80=99d rather be cautious and repeat myself and leave it to = the RFC editor to tweak for readability. >=20 >=20 > - section 5.2: suggested edit: >=20 > "do obtain information regarding End User IP addresses > and requested URIs that they wouldn't had the RI not been used." -> > "do obtain information regarding End User IP addresses > and requested URIs that they wouldn't have, had the RI not been = used.=E2=80=9D > =20 > Done. >=20 >=20 > - section 6.2: should this be a "subregistry within the "Content = Delivery Network Interconnection (CDNI) Parameters" registry.=E2=80=9D? > =20 > I don=E2=80=99t think so. What we=E2=80=99re defining a registry for = is a set of numeric response codes & their meanings for returning in a = RI (error) response. It is not obvious to me how that registry is = related to the CDNI parameters registry (assuming by CDNI Parameters = registry you mean the Media Type parameter registry). >=20 >=20 > - section 6.2: do we want to specify the RFC5226 policy? is it Expert > Review? not Specification required? >=20 > "Specification: An optional reference to a specification that > defines in the error code in more detail.=E2=80=9D > =20 > I made it Specification Required, added a normative reference to = RFC5226 and tweaked the existing wording to be inline with RFC7736. it = now reads: > =20 > =E2=80=9C=E2=80=9D" > This document establishes a new IANA registry for CDNI RI Error = response codes. Additions to the "RI Error response registry=E2=80=9D = will be made via "Specification Required" as defined in [RFC5226]. > =20 > The Designated Expert will verify that new error code registrations do = not duplicate existing error code definitions (in name or = functionality), ensure that the new error code is in accordance with the = error classes defined in section Section 4.7 of this document, prevent = gratuitous additions to the namespace, and prevent any additions to the = namespace that would impair the interoperability of CDNI = implementations. > =E2=80=9C=E2=80=9D=E2=80=9D >=20 >=20 > - section 8: there's an extra space in my name: "Kevin J. Ma" -> = "Kevin J. Ma=E2=80=9D > =20 > Wow you have eagle eyes :-) It seems xml2rfc mistakes the =E2=80=9C.=E2=80= =9D for a full stop (period) and automatically starts every sentence = with 2 spaces. I=E2=80=99ve changed it to =E2=80=9CKevin J Ma=E2=80=9D = to avoid the double space but can change it back it you prefer it with = the full stop (period). >=20 >=20 > - section 9.1: There is a normative reference to the informational = Framework draft. Does this need to be normative? If so, why? Note: It = is informative in the other interface specifications. > =20 > Changed to informative. >=20 >=20 > - section 9.2: the (missing) reference to RFC7736 should be = informative > =20 > Added. > =20 > =20 > Ben --Apple-Mail=_5629906A-A05B-4599-95A7-C4130D9F69C5 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi Kevin,

OK. I just pushed -16 which uses similar text to RFC7736, the = complete section on RI error response registry now reads:

6.2. =  RI Error response registry

   IANA is requested to = create a new "CDNI RI Error response code"
  =  subregistry within the "Content Delivery Network = Interconnection
   (CDNI) Parameters" = registry.  The "CDNI RI Error response code"
   namespace defines the valid values for the = error-code key in RI error
   responses. =  The CDNI RI Error response code MUST be a three digit
   integer.

   Additions to the "RI Error = response registry" will be made via
  =  "Specification Required" as defined in [RFC5226].

   The = Designated Expert will verify that new error code = registrations
   do not duplicate = existing error code definitions (in name or
  =  functionality), ensure that the new error code is in accordance = with
   the error classes defined in = section Section 4.7 of this document,
  =  prevent gratuitous additions to the namespace, and prevent = any
   additions to the namespace that = would impair the interoperability of
  =  CDNI implementations.

   New registrations are required to provide the = following information:

      Code: A three-digit numeric error-code, = in accordance with the
      error = classes defined in section Section 4.7 of this document.

      = Reason: A string that provides further information related to = the
      error that will be = included in the JSON error dictionary with the
 =     'reason'-key.  Depending on the error-code = semantics, the value of
      this = field may be determined dynamically.  In that case, the
      registration should set this value to = '<reason>' and define its
    =   semantics in the description field.

      Description: A = brief description of the error code semantics.

      Specification: An = optional reference to a specification that
  =     defines in the error code in more detail.

   The entries = in Table 1 are registered by this document.

Regards
Ben

On 27 Jan 2016, at 20:21, Kevin = Ma J <kevin.j.ma@ericsson.com> wrote:

Hi = Ben,
  Looks good.  thanx!
 
  = wrt the registry:
 
  > - section 6.2: = should this be a "subregistry within the "Content Delivery Network = Interconnection (CDNI) Parameters" registry.=E2=80=9D?
  = >
  > I don=E2=80=99t = think so. What we=E2=80=99re defining a registry for is a set of numeric = response codes & their meanings for returning in a RI (error) = response. It is not obvious to me how that registry is related to the = CDNI parameters registry (assuming by CDNI Parameters registry you mean = the Media Type parameter registry).
 
  I think the CDNI = Parameters "registry" is just the grouping for all CDNI related = registries, and the CDNI Payload Types (the media type parameter = registry) is underneath that (see the "Content Delivery Network = Interconnection (CDNI) Parameters" heading athttps://www.iana.org/protocols).  I didn't have = anything originally in the media type draft, and then was asked to add = text in which I referred to it as a "category", but the editors changed = it to the "subregistry" text above.  I assume we need that text, so = that all the CDNI registries are in one place; else we'll likely get = asked about it in IESG review.
 
  Other than that, I think = we're ready to go.
 
thanx!
 
--  Kevin J. Ma
 
From: CDNi [mailto:cdni-bounces@ietf.org] On Behalf = Of Ben = Niven-Jenkins
Sent: Wednesday, January 27, 2016 = 2:43 PM
To: Content Delivery Networks = Interconnection Discussion List
Subject: Re: [CDNi] Shepherd Review = of draft-ietf-cdni-redirection-14.txt
 
Kevin,
 
I=E2=80=99ve made most of the changes you suggested, = comments/what I=E2=80=99ve done are below.
 
I=E2=80=99ve pushed -15 with the changes, = diff to -14 is here:
 
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cdni-redirection= -15
 
Let me know if there are any other changes you want = to the document.
 
 
On = 13 Jan 2016, at 23:16, Kevin Ma J <kevin.j.ma@ericsson.com> = wrote:
 
Hi Ben/Ray,

 (as chair) I've completed my shepherd's review of the = document and have enclosed some questions comments below.  Most are = nits, but the IANA Considerations and Normative/Informative Reference = comments at the end need to be addressed.

thanx!

--  Kevin J. Ma


- general: there is = inconsistency in the use of "Redirection Interface" and "Redirection = interface"; it seems to be a problem in all the docs, but logging mostly = uses the lowercase =E2=80=9Ci"
 
Changed to using =E2=80=98Redirection interface=E2=80=99 = throughout.


- general: "e.g. " -> "e.g., ", "i.e. " -> "i.e., ", = and "For example " -> "For example, =E2=80=9C
 
Done.
 
- section 3: The bulleted items are not complete = sentences, perhaps:

    "The final Surrogate, which may be in = the dCDN that returned the RI
     response to the uCDN, or = another CDN (if the dCDN delegates the
     delivery to another CDN)." = ->
    "The final Surrogate, which = may be in the dCDN that returned the RI
     response to the uCDN, or = another CDN (if the dCDN delegates the
     delivery to another CDN); = or=E2=80=9D
 
Done.


- section 3: comma after "Therefore":

 "Therefore the scope of this document is limited to = Recursive
  Request Redirection." ->
 "Therefore, the scope of this document is limited to = Recursive
  Request Redirection.=E2=80=9D
 
Done


- section 3: the colon should be a = semi-colon:

 "domain in the URL = dereferenced to reach the uCDN: without operational
  precautions, and in the absence of DNSSEC, this = can make a legitimate
  redirection look like a = DNS-based attack" ->
 "domain in the URL = dereferenced to reach the uCDN; without operational
  precautions, and in the absence of DNSSEC, this = can make a legitimate
  redirection look like a = DNS-based attack=E2=80=9D
 
Done.


- section 4: Though it mentions being extensible, we do not = give any guidance on how to extend the RI.  Should we?  Or = should we just leave it?

 "Finally, = the RI is easily extendable to support other User Agent
  request redirection methods (e.g.  RTMP 302 = redirection)."

 One thought is that = the way to extend this would be: write a new RFC, with new RI JSON = objects, and registering a new redirection mode capability?
 
I changed the sentence to:
 
Finally, the RI is easily extendable to = support other User Agent request redirection methods (e.g., RTMP 302 = redirection) by defining additional protocol specific keys for RI = requests and responses along with a specification how to process = them.
 
to try and expand a bit on how extensions could be = done. I don=E2=80=99t think it=E2=80=99s the role of this document to = specify exactly what is required, e.g. mandating an RFC. If you think it = needs more explanation on how to extend it I can look at crafting some = more detailed text?


- section 4.1: suggested edit:

    "The scope of the response (if it is = cacheable) signaled the HTTP
     response body of the RI = response.  For example whether the
     response applies to a wider = range of IP addresses than what was
     included in the RI request." = ->
    "The scope of a cacheable = response signaled via the HTTP
     response body of the RI = response, for example, whether the
     response applies to a wider = range of IP addresses than what was
     included in the RI = request.=E2=80=9D
 
Done.


- section 4.3: the reference to RFC7336 (Framework) should be = to RFC7736 (Media Type)
 
Good catch. Done.


- section 4.4.2: Should this also state = that the dns dictionary MUST contain the rcode and name keys?

 "If a dns dictionary is included in the = RI
  response, it MUST include at least one of = the following keys: a,
  aaaa, cname.=E2=80=9D
 
Done. I integrated it into the existing sentence = about including one of a, aaaa, came so it now reads:
 
If a dns dictionary is included in the RI = response, it MUST include the rcode and name keys and it MUST include at = least one of the following keys: a, aaaa, came.
 
- = section 4.5.2: missing "and":

 "it = MUST include at least the following keys: sc-
  status, sc-version, sc-reason, cs-uri, = sc-(location)." ->
 "it MUST include at least the = following keys: sc-
  status, sc-version, = sc-reason, cs-uri, and sc-(location).=E2=80=9D
 
Done.


- section 4.8: this implies that the CDN knows the dCDN's = provider ID?  Is that typically true?  Would it be simpler to = have CDNs check just their own provider ID?  I would suggest = removing this sentence?

 "Transit CDNs = MUST check the cdn-
  path and not cascade the = RI request to dCDNs that are already listed
  in = cdn-path.=E2=80=9D
 
Done.


- section 4.8: suggested edit:

 "As well as loops within the RI itself," ->
 "Beside loops within the RI itself,=E2=80=9D
 
Done.


- section 4.8: missing commas:

 "for example if the IP
  address(es) or URI(s) returned in RI responses do = not resolve
  directly to a surrogate in the = final dCDN there is the possibility" ->
 "for = example, if the IP
  address(es) or URI(s) = returned in RI responses do not resolve
  directly= to a surrogate in the final dCDN, there is the possibility=E2=80=9D
 
Done.


- section 4.8: typo: "continuosly" -> = =E2=80=9Ccontinuously"
 
Done.


- section 5.1: bullet punctuation:

    "the dCDN and uCDN to authorize each = other (to ensure they are
     transmitting/receiving CDNI = Redirection messages to/from an
     authorized CDN)" ->
    "the dCDN and uCDN to authorize each = other (to ensure they are
     transmitting/receiving CDNI = Redirection messages to/from an
     authorized CDN);"

    "CDNI Redirection = interface messages to be transmitted with
     confidentiality." ->
    "CDNI Redirection interface messages = to be transmitted with
     confidentiality; and=E2=80=9D
 
Done.


- section 5.2: the rest of the doc uses = "an RI", but this section uses "a RI"; should make it consistent.
 
Done.


- section 5.2: the first 11 words of = section 5.2 are identical to the first 11 words of section 5; maybe just = remove them from section 5.2?

 "Information passed over the RI could be considered = personal or
  sensitive.  In particular, = parts" ->
 =E2=80=9CParts"
 
I think the repetition is OK and provides a refresh of the = context. As privacy is likely to be a topic folks nit pick at during = IETF LC/IESG review I=E2=80=99d rather be cautious and repeat myself and = leave it to the RFC editor to tweak for readability.


- section 5.2: = suggested edit:

 "do obtain = information regarding End User IP addresses
  and = requested URIs that they wouldn't had the RI not been used." ->
 "do obtain information regarding End User IP = addresses
  and requested URIs that they = wouldn't have, had the RI not been used.=E2=80=9D
 
Done.


- section 6.2: should this be a = "subregistry within the "Content Delivery Network Interconnection (CDNI) = Parameters" registry.=E2=80=9D?
 
I don=E2=80=99t think so. What we=E2=80=99re defining a = registry for is a set of numeric response codes & their meanings for = returning in a RI (error) response. It is not obvious to me how that = registry is related to the CDNI parameters registry (assuming by CDNI = Parameters registry you mean the Media Type parameter registry).


- section 6.2: do we = want to specify the RFC5226 policy?  is it Expert
 Review?  not Specification required?

    "Specification: An = optional reference to a specification that
     defines in the error code in = more detail.=E2=80=9D
 
I made it Specification Required, added a normative reference = to RFC5226 and tweaked the existing wording to be inline with RFC7736. = it now reads:
 
=E2=80=9C=E2=80=9D"
This document establishes a new IANA = registry for CDNI RI Error response codes.  Additions to the "RI = Error response registry=E2=80=9D will be made via "Specification = Required" as defined in [RFC5226].
 
The Designated Expert will verify that new error code = registrations do not duplicate existing error code definitions (in name = or functionality), ensure that the new error code is in accordance with = the error classes defined in section Section 4.7 of this document, = prevent gratuitous additions to the namespace, and prevent any additions = to the namespace that would impair the interoperability of CDNI = implementations.
=E2=80=9C=E2=80=9D=E2=80= =9D


- section 8: there's an extra space in my name: "Kevin J. =  Ma" -> "Kevin J. Ma=E2=80=9D
 
Wow you have eagle eyes :-) It seems xml2rfc mistakes = the =E2=80=9C.=E2=80=9D for a full stop (period) and automatically = starts every sentence with 2 spaces. I=E2=80=99ve changed it to =E2=80=9CK= evin J Ma=E2=80=9D to avoid the double space but can change it back it = you prefer it with the full stop (period).


- section 9.1: There = is a normative reference to the informational Framework draft. =  Does this need to be normative?  If so, why?  Note: It = is informative in the other interface specifications.
 
Changed to informative.


- section 9.2: the = (missing) reference to RFC7736 should be informative
 
Added.
 
 
Ben

= --Apple-Mail=_5629906A-A05B-4599-95A7-C4130D9F69C5-- From nobody Thu Jan 28 07:00:17 2016 Return-Path: X-Original-To: cdni@ietfa.amsl.com Delivered-To: cdni@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 750941A8893 for ; Thu, 28 Jan 2016 07:00:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mt8F4bdpI_73 for ; Thu, 28 Jan 2016 07:00:10 -0800 (PST) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3474F1A888E for ; Thu, 28 Jan 2016 07:00:10 -0800 (PST) X-AuditID: c618062d-f79d16d000001b1c-87-56aa2a1bd920 Received: from EUSAAHC002.ericsson.se (Unknown_Domain [147.117.188.78]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id C3.22.06940.B1A2AA65; Thu, 28 Jan 2016 15:47:55 +0100 (CET) Received: from EUSAAMB103.ericsson.se ([147.117.188.120]) by EUSAAHC002.ericsson.se ([147.117.188.78]) with mapi id 14.03.0248.002; Thu, 28 Jan 2016 10:00:08 -0500 From: Kevin Ma J To: Ben Niven-Jenkins Thread-Topic: [CDNi] Shepherd Review of draft-ietf-cdni-redirection-14.txt Thread-Index: AdFOWGINkZdovw7hQLSjneWiUZ2KZALDIDqAAAmOt1AAGMd7gAAEc37w Date: Thu, 28 Jan 2016 15:00:07 +0000 Message-ID: References: <1E5AE3C2-1057-431A-80EE-5FFA700353B4@niven-jenkins.co.uk> In-Reply-To: <1E5AE3C2-1057-431A-80EE-5FFA700353B4@niven-jenkins.co.uk> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: multipart/alternative; boundary="_000_A419F67F880AB2468214E154CB8A556206C84768eusaamb103erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprCIsWRmVeSWpSXmKPExsUyuXSPn6601qowgz+T9SwWnJvAZvF09h9W ByaPJUt+Mnn8vD6JMYApissmJTUnsyy1SN8ugSvj4qMfbAX/vjNXfGvfw9rA+OUVcxcjJ4eE gInEputnoGwxiQv31rN1MXJxCAkcYZQ4f+MBO4SznFGi4W4/G0gVm4CWxOOvf5m6GDk4RAT0 JTqOFYOEmQV8JZb2vmMBsYUFPCX2fzgINlREwEtiQvshVgjbTWLBxt0sIK0sAqoS53sVQcK8 QK2fP51ihFjVzSSxeOMWsFWcAu4Sp2+eB5vJCHTc91NrmCB2iUvcejKfCeJoAYkle85DPSAq 8fLxP1YIW0li0tJzrBD1+RIr2k+xQiwTlDg58wnLBEbRWUhGzUJSNgtJ2SygU5kFNCXW79KH KFGUmNL9kB3C1pBonTOXHVl8ASP7KkaO0uKCnNx0I4NNjMC4OibBpruD8f50z0OMAhyMSjy8 Bi0rw4RYE8uKK3MPMUpwMCuJ8JpprgoT4k1JrKxKLcqPLyrNSS0+xCjNwaIkzmvDuyhMSCA9 sSQ1OzW1ILUIJsvEwSnVwKhcY/XNNFDk7gYZfvWoIxb/TZU3PnQ/sL1o67elK+fXnWCsm73t 5asTIbwfTSLbfhSIxOmx7drorj7p6rv0xH5Jhbi5FYKf3cPPfPfRfpD4eNvftAM/GvmO2q5R kXd63hPj/6hUJkmOb/fKFQ+sttjcyd5y3Wqa7OPK0Asb6hXVVoU7X9g3Q0SJpTgj0VCLuag4 EQC7keu/pwIAAA== Archived-At: Cc: Content Delivery Networks Interconnection Discussion List Subject: Re: [CDNi] Shepherd Review of draft-ietf-cdni-redirection-14.txt X-BeenThere: cdni@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jan 2016 15:00:15 -0000 --_000_A419F67F880AB2468214E154CB8A556206C84768eusaamb103erics_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQmVuLA0KDQogIExvb2tzIGdvb2QuICB0aGFueCENCg0KICBJJ3ZlIHN1Ym1pdHRlZCB0aGUg c2hlcGhlcmQgd3JpdGV1cC4gIFRoYW5rcyB0byBhbGwgd2hvJ3ZlIGNvbnRyaWJ1dGVkIG92ZXIg dGhlIHllYXJzLiAgQ29uZ3JhdHMhDQoNCi0tICBLZXZpbiBKLiBNYQ0KDQpGcm9tOiBCZW4gTml2 ZW4tSmVua2lucyBbbWFpbHRvOmJlbkBuaXZlbi1qZW5raW5zLmNvLnVrXQ0KU2VudDogVGh1cnNk YXksIEphbnVhcnkgMjgsIDIwMTYgNzowNyBBTQ0KVG86IEtldmluIE1hIEoNCkNjOiBDb250ZW50 IERlbGl2ZXJ5IE5ldHdvcmtzIEludGVyY29ubmVjdGlvbiBEaXNjdXNzaW9uIExpc3QNClN1Ympl Y3Q6IFJlOiBbQ0ROaV0gU2hlcGhlcmQgUmV2aWV3IG9mIGRyYWZ0LWlldGYtY2RuaS1yZWRpcmVj dGlvbi0xNC50eHQNCg0KSGkgS2V2aW4sDQoNCk9LLiBJIGp1c3QgcHVzaGVkIC0xNiB3aGljaCB1 c2VzIHNpbWlsYXIgdGV4dCB0byBSRkM3NzM2LCB0aGUgY29tcGxldGUgc2VjdGlvbiBvbiBSSSBl cnJvciByZXNwb25zZSByZWdpc3RyeSBub3cgcmVhZHM6DQoNCjYuMi4gIFJJIEVycm9yIHJlc3Bv bnNlIHJlZ2lzdHJ5DQoNCiAgIElBTkEgaXMgcmVxdWVzdGVkIHRvIGNyZWF0ZSBhIG5ldyAiQ0RO SSBSSSBFcnJvciByZXNwb25zZSBjb2RlIg0KICAgc3VicmVnaXN0cnkgd2l0aGluIHRoZSAiQ29u dGVudCBEZWxpdmVyeSBOZXR3b3JrIEludGVyY29ubmVjdGlvbg0KICAgKENETkkpIFBhcmFtZXRl cnMiIHJlZ2lzdHJ5LiAgVGhlICJDRE5JIFJJIEVycm9yIHJlc3BvbnNlIGNvZGUiDQogICBuYW1l c3BhY2UgZGVmaW5lcyB0aGUgdmFsaWQgdmFsdWVzIGZvciB0aGUgZXJyb3ItY29kZSBrZXkgaW4g UkkgZXJyb3INCiAgIHJlc3BvbnNlcy4gIFRoZSBDRE5JIFJJIEVycm9yIHJlc3BvbnNlIGNvZGUg TVVTVCBiZSBhIHRocmVlIGRpZ2l0DQogICBpbnRlZ2VyLg0KDQogICBBZGRpdGlvbnMgdG8gdGhl ICJSSSBFcnJvciByZXNwb25zZSByZWdpc3RyeSIgd2lsbCBiZSBtYWRlIHZpYQ0KICAgIlNwZWNp ZmljYXRpb24gUmVxdWlyZWQiIGFzIGRlZmluZWQgaW4gW1JGQzUyMjZdLg0KDQogICBUaGUgRGVz aWduYXRlZCBFeHBlcnQgd2lsbCB2ZXJpZnkgdGhhdCBuZXcgZXJyb3IgY29kZSByZWdpc3RyYXRp b25zDQogICBkbyBub3QgZHVwbGljYXRlIGV4aXN0aW5nIGVycm9yIGNvZGUgZGVmaW5pdGlvbnMg KGluIG5hbWUgb3INCiAgIGZ1bmN0aW9uYWxpdHkpLCBlbnN1cmUgdGhhdCB0aGUgbmV3IGVycm9y IGNvZGUgaXMgaW4gYWNjb3JkYW5jZSB3aXRoDQogICB0aGUgZXJyb3IgY2xhc3NlcyBkZWZpbmVk IGluIHNlY3Rpb24gU2VjdGlvbiA0Ljcgb2YgdGhpcyBkb2N1bWVudCwNCiAgIHByZXZlbnQgZ3Jh dHVpdG91cyBhZGRpdGlvbnMgdG8gdGhlIG5hbWVzcGFjZSwgYW5kIHByZXZlbnQgYW55DQogICBh ZGRpdGlvbnMgdG8gdGhlIG5hbWVzcGFjZSB0aGF0IHdvdWxkIGltcGFpciB0aGUgaW50ZXJvcGVy YWJpbGl0eSBvZg0KICAgQ0ROSSBpbXBsZW1lbnRhdGlvbnMuDQoNCiAgIE5ldyByZWdpc3RyYXRp b25zIGFyZSByZXF1aXJlZCB0byBwcm92aWRlIHRoZSBmb2xsb3dpbmcgaW5mb3JtYXRpb246DQoN CiAgICAgIENvZGU6IEEgdGhyZWUtZGlnaXQgbnVtZXJpYyBlcnJvci1jb2RlLCBpbiBhY2NvcmRh bmNlIHdpdGggdGhlDQogICAgICBlcnJvciBjbGFzc2VzIGRlZmluZWQgaW4gc2VjdGlvbiBTZWN0 aW9uIDQuNyBvZiB0aGlzIGRvY3VtZW50Lg0KDQogICAgICBSZWFzb246IEEgc3RyaW5nIHRoYXQg cHJvdmlkZXMgZnVydGhlciBpbmZvcm1hdGlvbiByZWxhdGVkIHRvIHRoZQ0KICAgICAgZXJyb3Ig dGhhdCB3aWxsIGJlIGluY2x1ZGVkIGluIHRoZSBKU09OIGVycm9yIGRpY3Rpb25hcnkgd2l0aCB0 aGUNCiAgICAgICdyZWFzb24nLWtleS4gIERlcGVuZGluZyBvbiB0aGUgZXJyb3ItY29kZSBzZW1h bnRpY3MsIHRoZSB2YWx1ZSBvZg0KICAgICAgdGhpcyBmaWVsZCBtYXkgYmUgZGV0ZXJtaW5lZCBk eW5hbWljYWxseS4gIEluIHRoYXQgY2FzZSwgdGhlDQogICAgICByZWdpc3RyYXRpb24gc2hvdWxk IHNldCB0aGlzIHZhbHVlIHRvICc8cmVhc29uPicgYW5kIGRlZmluZSBpdHMNCiAgICAgIHNlbWFu dGljcyBpbiB0aGUgZGVzY3JpcHRpb24gZmllbGQuDQoNCiAgICAgIERlc2NyaXB0aW9uOiBBIGJy aWVmIGRlc2NyaXB0aW9uIG9mIHRoZSBlcnJvciBjb2RlIHNlbWFudGljcy4NCg0KICAgICAgU3Bl Y2lmaWNhdGlvbjogQW4gb3B0aW9uYWwgcmVmZXJlbmNlIHRvIGEgc3BlY2lmaWNhdGlvbiB0aGF0 DQogICAgICBkZWZpbmVzIGluIHRoZSBlcnJvciBjb2RlIGluIG1vcmUgZGV0YWlsLg0KDQogICBU aGUgZW50cmllcyBpbiBUYWJsZSAxIGFyZSByZWdpc3RlcmVkIGJ5IHRoaXMgZG9jdW1lbnQuDQoN ClJlZ2FyZHMNCkJlbg0KDQpPbiAyNyBKYW4gMjAxNiwgYXQgMjA6MjEsIEtldmluIE1hIEogPGtl dmluLmoubWFAZXJpY3Nzb24uY29tPG1haWx0bzprZXZpbi5qLm1hQGVyaWNzc29uLmNvbT4+IHdy b3RlOg0KDQpIaSBCZW4sDQogIExvb2tzIGdvb2QuICB0aGFueCENCg0KICB3cnQgdGhlIHJlZ2lz dHJ5Og0KDQogID4gLSBzZWN0aW9uIDYuMjogc2hvdWxkIHRoaXMgYmUgYSAic3VicmVnaXN0cnkg d2l0aGluIHRoZSAiQ29udGVudCBEZWxpdmVyeSBOZXR3b3JrIEludGVyY29ubmVjdGlvbiAoQ0RO SSkgUGFyYW1ldGVycyIgcmVnaXN0cnku4oCdPw0KICA+DQogID4gSSBkb27igJl0IHRoaW5rIHNv LiBXaGF0IHdl4oCZcmUgZGVmaW5pbmcgYSByZWdpc3RyeSBmb3IgaXMgYSBzZXQgb2YgbnVtZXJp YyByZXNwb25zZSBjb2RlcyAmIHRoZWlyIG1lYW5pbmdzIGZvciByZXR1cm5pbmcgaW4gYSBSSSAo ZXJyb3IpIHJlc3BvbnNlLiBJdCBpcyBub3Qgb2J2aW91cyB0byBtZSBob3cgdGhhdCByZWdpc3Ry eSBpcyByZWxhdGVkIHRvIHRoZSBDRE5JIHBhcmFtZXRlcnMgcmVnaXN0cnkgKGFzc3VtaW5nIGJ5 IENETkkgUGFyYW1ldGVycyByZWdpc3RyeSB5b3UgbWVhbiB0aGUgTWVkaWEgVHlwZSBwYXJhbWV0 ZXIgcmVnaXN0cnkpLg0KDQogIEkgdGhpbmsgdGhlIENETkkgUGFyYW1ldGVycyAicmVnaXN0cnki IGlzIGp1c3QgdGhlIGdyb3VwaW5nIGZvciBhbGwgQ0ROSSByZWxhdGVkIHJlZ2lzdHJpZXMsIGFu ZCB0aGUgQ0ROSSBQYXlsb2FkIFR5cGVzICh0aGUgbWVkaWEgdHlwZSBwYXJhbWV0ZXIgcmVnaXN0 cnkpIGlzIHVuZGVybmVhdGggdGhhdCAoc2VlIHRoZSAiQ29udGVudCBEZWxpdmVyeSBOZXR3b3Jr IEludGVyY29ubmVjdGlvbiAoQ0ROSSkgUGFyYW1ldGVycyIgaGVhZGluZyBhdGh0dHBzOi8vd3d3 LmlhbmEub3JnL3Byb3RvY29scykuICBJIGRpZG4ndCBoYXZlIGFueXRoaW5nIG9yaWdpbmFsbHkg aW4gdGhlIG1lZGlhIHR5cGUgZHJhZnQsIGFuZCB0aGVuIHdhcyBhc2tlZCB0byBhZGQgdGV4dCBp biB3aGljaCBJIHJlZmVycmVkIHRvIGl0IGFzIGEgImNhdGVnb3J5IiwgYnV0IHRoZSBlZGl0b3Jz IGNoYW5nZWQgaXQgdG8gdGhlICJzdWJyZWdpc3RyeSIgdGV4dCBhYm92ZS4gIEkgYXNzdW1lIHdl IG5lZWQgdGhhdCB0ZXh0LCBzbyB0aGF0IGFsbCB0aGUgQ0ROSSByZWdpc3RyaWVzIGFyZSBpbiBv bmUgcGxhY2U7IGVsc2Ugd2UnbGwgbGlrZWx5IGdldCBhc2tlZCBhYm91dCBpdCBpbiBJRVNHIHJl dmlldy4NCg0KICBPdGhlciB0aGFuIHRoYXQsIEkgdGhpbmsgd2UncmUgcmVhZHkgdG8gZ28uDQoN CnRoYW54IQ0KDQotLSAgS2V2aW4gSi4gTWENCg0KRnJvbTogQ0ROaSBbbWFpbHRvOmNkbmktYm91 bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEJlbiBOaXZlbi1KZW5raW5zDQpTZW50OiBXZWRu ZXNkYXksIEphbnVhcnkgMjcsIDIwMTYgMjo0MyBQTQ0KVG86IENvbnRlbnQgRGVsaXZlcnkgTmV0 d29ya3MgSW50ZXJjb25uZWN0aW9uIERpc2N1c3Npb24gTGlzdA0KU3ViamVjdDogUmU6IFtDRE5p XSBTaGVwaGVyZCBSZXZpZXcgb2YgZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTE0LnR4dA0K DQpLZXZpbiwNCg0KSeKAmXZlIG1hZGUgbW9zdCBvZiB0aGUgY2hhbmdlcyB5b3Ugc3VnZ2VzdGVk LCBjb21tZW50cy93aGF0IEnigJl2ZSBkb25lIGFyZSBiZWxvdy4NCg0KSeKAmXZlIHB1c2hlZCAt MTUgd2l0aCB0aGUgY2hhbmdlcywgZGlmZiB0byAtMTQgaXMgaGVyZToNCg0KaHR0cHM6Ly93d3cu aWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtY2RuaS1yZWRpcmVjdGlvbi0xNQ0KDQpM ZXQgbWUga25vdyBpZiB0aGVyZSBhcmUgYW55IG90aGVyIGNoYW5nZXMgeW91IHdhbnQgdG8gdGhl IGRvY3VtZW50Lg0KDQoNCk9uIDEzIEphbiAyMDE2LCBhdCAyMzoxNiwgS2V2aW4gTWEgSiA8a2V2 aW4uai5tYUBlcmljc3Nvbi5jb208bWFpbHRvOmtldmluLmoubWFAZXJpY3Nzb24uY29tPj4gd3Jv dGU6DQoNCkhpIEJlbi9SYXksDQoNCiAoYXMgY2hhaXIpIEkndmUgY29tcGxldGVkIG15IHNoZXBo ZXJkJ3MgcmV2aWV3IG9mIHRoZSBkb2N1bWVudCBhbmQgaGF2ZSBlbmNsb3NlZCBzb21lIHF1ZXN0 aW9ucyBjb21tZW50cyBiZWxvdy4gIE1vc3QgYXJlIG5pdHMsIGJ1dCB0aGUgSUFOQSBDb25zaWRl cmF0aW9ucyBhbmQgTm9ybWF0aXZlL0luZm9ybWF0aXZlIFJlZmVyZW5jZSBjb21tZW50cyBhdCB0 aGUgZW5kIG5lZWQgdG8gYmUgYWRkcmVzc2VkLg0KDQp0aGFueCENCg0KLS0gIEtldmluIEouIE1h DQoNCg0KLSBnZW5lcmFsOiB0aGVyZSBpcyBpbmNvbnNpc3RlbmN5IGluIHRoZSB1c2Ugb2YgIlJl ZGlyZWN0aW9uIEludGVyZmFjZSIgYW5kICJSZWRpcmVjdGlvbiBpbnRlcmZhY2UiOyBpdCBzZWVt cyB0byBiZSBhIHByb2JsZW0gaW4gYWxsIHRoZSBkb2NzLCBidXQgbG9nZ2luZyBtb3N0bHkgdXNl cyB0aGUgbG93ZXJjYXNlIOKAnGkiDQoNCkNoYW5nZWQgdG8gdXNpbmcg4oCYUmVkaXJlY3Rpb24g aW50ZXJmYWNl4oCZIHRocm91Z2hvdXQuDQoNCg0KDQotIGdlbmVyYWw6ICJlLmcuICIgLT4gImUu Zy4sICIsICJpLmUuICIgLT4gImkuZS4sICIsIGFuZCAiRm9yIGV4YW1wbGUgIiAtPiAiRm9yIGV4 YW1wbGUsIOKAnA0KDQpEb25lLg0KDQotIHNlY3Rpb24gMzogVGhlIGJ1bGxldGVkIGl0ZW1zIGFy ZSBub3QgY29tcGxldGUgc2VudGVuY2VzLCBwZXJoYXBzOg0KDQogICAgIlRoZSBmaW5hbCBTdXJy b2dhdGUsIHdoaWNoIG1heSBiZSBpbiB0aGUgZENETiB0aGF0IHJldHVybmVkIHRoZSBSSQ0KICAg ICByZXNwb25zZSB0byB0aGUgdUNETiwgb3IgYW5vdGhlciBDRE4gKGlmIHRoZSBkQ0ROIGRlbGVn YXRlcyB0aGUNCiAgICAgZGVsaXZlcnkgdG8gYW5vdGhlciBDRE4pLiIgLT4NCiAgICAiVGhlIGZp bmFsIFN1cnJvZ2F0ZSwgd2hpY2ggbWF5IGJlIGluIHRoZSBkQ0ROIHRoYXQgcmV0dXJuZWQgdGhl IFJJDQogICAgIHJlc3BvbnNlIHRvIHRoZSB1Q0ROLCBvciBhbm90aGVyIENETiAoaWYgdGhlIGRD RE4gZGVsZWdhdGVzIHRoZQ0KICAgICBkZWxpdmVyeSB0byBhbm90aGVyIENETik7IG9y4oCdDQoN CkRvbmUuDQoNCg0KDQotIHNlY3Rpb24gMzogY29tbWEgYWZ0ZXIgIlRoZXJlZm9yZSI6DQoNCiAi VGhlcmVmb3JlIHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50IGlzIGxpbWl0ZWQgdG8gUmVjdXJz aXZlDQogIFJlcXVlc3QgUmVkaXJlY3Rpb24uIiAtPg0KICJUaGVyZWZvcmUsIHRoZSBzY29wZSBv ZiB0aGlzIGRvY3VtZW50IGlzIGxpbWl0ZWQgdG8gUmVjdXJzaXZlDQogIFJlcXVlc3QgUmVkaXJl Y3Rpb24u4oCdDQoNCkRvbmUNCg0KDQoNCi0gc2VjdGlvbiAzOiB0aGUgY29sb24gc2hvdWxkIGJl IGEgc2VtaS1jb2xvbjoNCg0KICJkb21haW4gaW4gdGhlIFVSTCBkZXJlZmVyZW5jZWQgdG8gcmVh Y2ggdGhlIHVDRE46IHdpdGhvdXQgb3BlcmF0aW9uYWwNCiAgcHJlY2F1dGlvbnMsIGFuZCBpbiB0 aGUgYWJzZW5jZSBvZiBETlNTRUMsIHRoaXMgY2FuIG1ha2UgYSBsZWdpdGltYXRlDQogIHJlZGly ZWN0aW9uIGxvb2sgbGlrZSBhIEROUy1iYXNlZCBhdHRhY2siIC0+DQogImRvbWFpbiBpbiB0aGUg VVJMIGRlcmVmZXJlbmNlZCB0byByZWFjaCB0aGUgdUNETjsgd2l0aG91dCBvcGVyYXRpb25hbA0K ICBwcmVjYXV0aW9ucywgYW5kIGluIHRoZSBhYnNlbmNlIG9mIEROU1NFQywgdGhpcyBjYW4gbWFr ZSBhIGxlZ2l0aW1hdGUNCiAgcmVkaXJlY3Rpb24gbG9vayBsaWtlIGEgRE5TLWJhc2VkIGF0dGFj a+KAnQ0KDQpEb25lLg0KDQoNCg0KLSBzZWN0aW9uIDQ6IFRob3VnaCBpdCBtZW50aW9ucyBiZWlu ZyBleHRlbnNpYmxlLCB3ZSBkbyBub3QgZ2l2ZSBhbnkgZ3VpZGFuY2Ugb24gaG93IHRvIGV4dGVu ZCB0aGUgUkkuICBTaG91bGQgd2U/ICBPciBzaG91bGQgd2UganVzdCBsZWF2ZSBpdD8NCg0KICJG aW5hbGx5LCB0aGUgUkkgaXMgZWFzaWx5IGV4dGVuZGFibGUgdG8gc3VwcG9ydCBvdGhlciBVc2Vy IEFnZW50DQogIHJlcXVlc3QgcmVkaXJlY3Rpb24gbWV0aG9kcyAoZS5nLiAgUlRNUCAzMDIgcmVk aXJlY3Rpb24pLiINCg0KIE9uZSB0aG91Z2h0IGlzIHRoYXQgdGhlIHdheSB0byBleHRlbmQgdGhp cyB3b3VsZCBiZTogd3JpdGUgYSBuZXcgUkZDLCB3aXRoIG5ldyBSSSBKU09OIG9iamVjdHMsIGFu ZCByZWdpc3RlcmluZyBhIG5ldyByZWRpcmVjdGlvbiBtb2RlIGNhcGFiaWxpdHk/DQoNCkkgY2hh bmdlZCB0aGUgc2VudGVuY2UgdG86DQoNCkZpbmFsbHksIHRoZSBSSSBpcyBlYXNpbHkgZXh0ZW5k YWJsZSB0byBzdXBwb3J0IG90aGVyIFVzZXIgQWdlbnQgcmVxdWVzdCByZWRpcmVjdGlvbiBtZXRo b2RzIChlLmcuLCBSVE1QIDMwMiByZWRpcmVjdGlvbikgYnkgZGVmaW5pbmcgYWRkaXRpb25hbCBw cm90b2NvbCBzcGVjaWZpYyBrZXlzIGZvciBSSSByZXF1ZXN0cyBhbmQgcmVzcG9uc2VzIGFsb25n IHdpdGggYSBzcGVjaWZpY2F0aW9uIGhvdyB0byBwcm9jZXNzIHRoZW0uDQoNCnRvIHRyeSBhbmQg ZXhwYW5kIGEgYml0IG9uIGhvdyBleHRlbnNpb25zIGNvdWxkIGJlIGRvbmUuIEkgZG9u4oCZdCB0 aGluayBpdOKAmXMgdGhlIHJvbGUgb2YgdGhpcyBkb2N1bWVudCB0byBzcGVjaWZ5IGV4YWN0bHkg d2hhdCBpcyByZXF1aXJlZCwgZS5nLiBtYW5kYXRpbmcgYW4gUkZDLiBJZiB5b3UgdGhpbmsgaXQg bmVlZHMgbW9yZSBleHBsYW5hdGlvbiBvbiBob3cgdG8gZXh0ZW5kIGl0IEkgY2FuIGxvb2sgYXQg Y3JhZnRpbmcgc29tZSBtb3JlIGRldGFpbGVkIHRleHQ/DQoNCg0KDQotIHNlY3Rpb24gNC4xOiBz dWdnZXN0ZWQgZWRpdDoNCg0KICAgICJUaGUgc2NvcGUgb2YgdGhlIHJlc3BvbnNlIChpZiBpdCBp cyBjYWNoZWFibGUpIHNpZ25hbGVkIHRoZSBIVFRQDQogICAgIHJlc3BvbnNlIGJvZHkgb2YgdGhl IFJJIHJlc3BvbnNlLiAgRm9yIGV4YW1wbGUgd2hldGhlciB0aGUNCiAgICAgcmVzcG9uc2UgYXBw bGllcyB0byBhIHdpZGVyIHJhbmdlIG9mIElQIGFkZHJlc3NlcyB0aGFuIHdoYXQgd2FzDQogICAg IGluY2x1ZGVkIGluIHRoZSBSSSByZXF1ZXN0LiIgLT4NCiAgICAiVGhlIHNjb3BlIG9mIGEgY2Fj aGVhYmxlIHJlc3BvbnNlIHNpZ25hbGVkIHZpYSB0aGUgSFRUUA0KICAgICByZXNwb25zZSBib2R5 IG9mIHRoZSBSSSByZXNwb25zZSwgZm9yIGV4YW1wbGUsIHdoZXRoZXIgdGhlDQogICAgIHJlc3Bv bnNlIGFwcGxpZXMgdG8gYSB3aWRlciByYW5nZSBvZiBJUCBhZGRyZXNzZXMgdGhhbiB3aGF0IHdh cw0KICAgICBpbmNsdWRlZCBpbiB0aGUgUkkgcmVxdWVzdC7igJ0NCg0KRG9uZS4NCg0KDQoNCi0g c2VjdGlvbiA0LjM6IHRoZSByZWZlcmVuY2UgdG8gUkZDNzMzNiAoRnJhbWV3b3JrKSBzaG91bGQg YmUgdG8gUkZDNzczNiAoTWVkaWEgVHlwZSkNCg0KR29vZCBjYXRjaC4gRG9uZS4NCg0KDQoNCi0g c2VjdGlvbiA0LjQuMjogU2hvdWxkIHRoaXMgYWxzbyBzdGF0ZSB0aGF0IHRoZSBkbnMgZGljdGlv bmFyeSBNVVNUIGNvbnRhaW4gdGhlIHJjb2RlIGFuZCBuYW1lIGtleXM/DQoNCiAiSWYgYSBkbnMg ZGljdGlvbmFyeSBpcyBpbmNsdWRlZCBpbiB0aGUgUkkNCiAgcmVzcG9uc2UsIGl0IE1VU1QgaW5j bHVkZSBhdCBsZWFzdCBvbmUgb2YgdGhlIGZvbGxvd2luZyBrZXlzOiBhLA0KICBhYWFhLCBjbmFt ZS7igJ0NCg0KRG9uZS4gSSBpbnRlZ3JhdGVkIGl0IGludG8gdGhlIGV4aXN0aW5nIHNlbnRlbmNl IGFib3V0IGluY2x1ZGluZyBvbmUgb2YgYSwgYWFhYSwgY2FtZSBzbyBpdCBub3cgcmVhZHM6DQoN CklmIGEgZG5zIGRpY3Rpb25hcnkgaXMgaW5jbHVkZWQgaW4gdGhlIFJJIHJlc3BvbnNlLCBpdCBN VVNUIGluY2x1ZGUgdGhlIHJjb2RlIGFuZCBuYW1lIGtleXMgYW5kIGl0IE1VU1QgaW5jbHVkZSBh dCBsZWFzdCBvbmUgb2YgdGhlIGZvbGxvd2luZyBrZXlzOiBhLCBhYWFhLCBjYW1lLg0KDQotIHNl Y3Rpb24gNC41LjI6IG1pc3NpbmcgImFuZCI6DQoNCiAiaXQgTVVTVCBpbmNsdWRlIGF0IGxlYXN0 IHRoZSBmb2xsb3dpbmcga2V5czogc2MtDQogIHN0YXR1cywgc2MtdmVyc2lvbiwgc2MtcmVhc29u LCBjcy11cmksIHNjLShsb2NhdGlvbikuIiAtPg0KICJpdCBNVVNUIGluY2x1ZGUgYXQgbGVhc3Qg dGhlIGZvbGxvd2luZyBrZXlzOiBzYy0NCiAgc3RhdHVzLCBzYy12ZXJzaW9uLCBzYy1yZWFzb24s IGNzLXVyaSwgYW5kIHNjLShsb2NhdGlvbiku4oCdDQoNCkRvbmUuDQoNCg0KDQotIHNlY3Rpb24g NC44OiB0aGlzIGltcGxpZXMgdGhhdCB0aGUgQ0ROIGtub3dzIHRoZSBkQ0ROJ3MgcHJvdmlkZXIg SUQ/ICBJcyB0aGF0IHR5cGljYWxseSB0cnVlPyAgV291bGQgaXQgYmUgc2ltcGxlciB0byBoYXZl IENETnMgY2hlY2sganVzdCB0aGVpciBvd24gcHJvdmlkZXIgSUQ/ICBJIHdvdWxkIHN1Z2dlc3Qg cmVtb3ZpbmcgdGhpcyBzZW50ZW5jZT8NCg0KICJUcmFuc2l0IENETnMgTVVTVCBjaGVjayB0aGUg Y2RuLQ0KICBwYXRoIGFuZCBub3QgY2FzY2FkZSB0aGUgUkkgcmVxdWVzdCB0byBkQ0ROcyB0aGF0 IGFyZSBhbHJlYWR5IGxpc3RlZA0KICBpbiBjZG4tcGF0aC7igJ0NCg0KRG9uZS4NCg0KDQoNCi0g c2VjdGlvbiA0Ljg6IHN1Z2dlc3RlZCBlZGl0Og0KDQogIkFzIHdlbGwgYXMgbG9vcHMgd2l0aGlu IHRoZSBSSSBpdHNlbGYsIiAtPg0KICJCZXNpZGUgbG9vcHMgd2l0aGluIHRoZSBSSSBpdHNlbGYs 4oCdDQoNCkRvbmUuDQoNCg0KDQotIHNlY3Rpb24gNC44OiBtaXNzaW5nIGNvbW1hczoNCg0KICJm b3IgZXhhbXBsZSBpZiB0aGUgSVANCiAgYWRkcmVzcyhlcykgb3IgVVJJKHMpIHJldHVybmVkIGlu IFJJIHJlc3BvbnNlcyBkbyBub3QgcmVzb2x2ZQ0KICBkaXJlY3RseSB0byBhIHN1cnJvZ2F0ZSBp biB0aGUgZmluYWwgZENETiB0aGVyZSBpcyB0aGUgcG9zc2liaWxpdHkiIC0+DQogImZvciBleGFt cGxlLCBpZiB0aGUgSVANCiAgYWRkcmVzcyhlcykgb3IgVVJJKHMpIHJldHVybmVkIGluIFJJIHJl c3BvbnNlcyBkbyBub3QgcmVzb2x2ZQ0KICBkaXJlY3RseSB0byBhIHN1cnJvZ2F0ZSBpbiB0aGUg ZmluYWwgZENETiwgdGhlcmUgaXMgdGhlIHBvc3NpYmlsaXR54oCdDQoNCkRvbmUuDQoNCg0KDQot IHNlY3Rpb24gNC44OiB0eXBvOiAiY29udGludW9zbHkiIC0+IOKAnGNvbnRpbnVvdXNseSINCg0K RG9uZS4NCg0KDQoNCi0gc2VjdGlvbiA1LjE6IGJ1bGxldCBwdW5jdHVhdGlvbjoNCg0KICAgICJ0 aGUgZENETiBhbmQgdUNETiB0byBhdXRob3JpemUgZWFjaCBvdGhlciAodG8gZW5zdXJlIHRoZXkg YXJlDQogICAgIHRyYW5zbWl0dGluZy9yZWNlaXZpbmcgQ0ROSSBSZWRpcmVjdGlvbiBtZXNzYWdl cyB0by9mcm9tIGFuDQogICAgIGF1dGhvcml6ZWQgQ0ROKSIgLT4NCiAgICAidGhlIGRDRE4gYW5k IHVDRE4gdG8gYXV0aG9yaXplIGVhY2ggb3RoZXIgKHRvIGVuc3VyZSB0aGV5IGFyZQ0KICAgICB0 cmFuc21pdHRpbmcvcmVjZWl2aW5nIENETkkgUmVkaXJlY3Rpb24gbWVzc2FnZXMgdG8vZnJvbSBh bg0KICAgICBhdXRob3JpemVkIENETik7Ig0KDQogICAgIkNETkkgUmVkaXJlY3Rpb24gaW50ZXJm YWNlIG1lc3NhZ2VzIHRvIGJlIHRyYW5zbWl0dGVkIHdpdGgNCiAgICAgY29uZmlkZW50aWFsaXR5 LiIgLT4NCiAgICAiQ0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVzc2FnZXMgdG8gYmUgdHJh bnNtaXR0ZWQgd2l0aA0KICAgICBjb25maWRlbnRpYWxpdHk7IGFuZOKAnQ0KDQpEb25lLg0KDQoN Cg0KLSBzZWN0aW9uIDUuMjogdGhlIHJlc3Qgb2YgdGhlIGRvYyB1c2VzICJhbiBSSSIsIGJ1dCB0 aGlzIHNlY3Rpb24gdXNlcyAiYSBSSSI7IHNob3VsZCBtYWtlIGl0IGNvbnNpc3RlbnQuDQoNCkRv bmUuDQoNCg0KDQotIHNlY3Rpb24gNS4yOiB0aGUgZmlyc3QgMTEgd29yZHMgb2Ygc2VjdGlvbiA1 LjIgYXJlIGlkZW50aWNhbCB0byB0aGUgZmlyc3QgMTEgd29yZHMgb2Ygc2VjdGlvbiA1OyBtYXli ZSBqdXN0IHJlbW92ZSB0aGVtIGZyb20gc2VjdGlvbiA1LjI/DQoNCiAiSW5mb3JtYXRpb24gcGFz c2VkIG92ZXIgdGhlIFJJIGNvdWxkIGJlIGNvbnNpZGVyZWQgcGVyc29uYWwgb3INCiAgc2Vuc2l0 aXZlLiAgSW4gcGFydGljdWxhciwgcGFydHMiIC0+DQog4oCcUGFydHMiDQoNCkkgdGhpbmsgdGhl IHJlcGV0aXRpb24gaXMgT0sgYW5kIHByb3ZpZGVzIGEgcmVmcmVzaCBvZiB0aGUgY29udGV4dC4g QXMgcHJpdmFjeSBpcyBsaWtlbHkgdG8gYmUgYSB0b3BpYyBmb2xrcyBuaXQgcGljayBhdCBkdXJp bmcgSUVURiBMQy9JRVNHIHJldmlldyBJ4oCZZCByYXRoZXIgYmUgY2F1dGlvdXMgYW5kIHJlcGVh dCBteXNlbGYgYW5kIGxlYXZlIGl0IHRvIHRoZSBSRkMgZWRpdG9yIHRvIHR3ZWFrIGZvciByZWFk YWJpbGl0eS4NCg0KDQoNCi0gc2VjdGlvbiA1LjI6IHN1Z2dlc3RlZCBlZGl0Og0KDQogImRvIG9i dGFpbiBpbmZvcm1hdGlvbiByZWdhcmRpbmcgRW5kIFVzZXIgSVAgYWRkcmVzc2VzDQogIGFuZCBy ZXF1ZXN0ZWQgVVJJcyB0aGF0IHRoZXkgd291bGRuJ3QgaGFkIHRoZSBSSSBub3QgYmVlbiB1c2Vk LiIgLT4NCiAiZG8gb2J0YWluIGluZm9ybWF0aW9uIHJlZ2FyZGluZyBFbmQgVXNlciBJUCBhZGRy ZXNzZXMNCiAgYW5kIHJlcXVlc3RlZCBVUklzIHRoYXQgdGhleSB3b3VsZG4ndCBoYXZlLCBoYWQg dGhlIFJJIG5vdCBiZWVuIHVzZWQu4oCdDQoNCkRvbmUuDQoNCg0KDQotIHNlY3Rpb24gNi4yOiBz aG91bGQgdGhpcyBiZSBhICJzdWJyZWdpc3RyeSB3aXRoaW4gdGhlICJDb250ZW50IERlbGl2ZXJ5 IE5ldHdvcmsgSW50ZXJjb25uZWN0aW9uIChDRE5JKSBQYXJhbWV0ZXJzIiByZWdpc3RyeS7igJ0/ DQoNCkkgZG9u4oCZdCB0aGluayBzby4gV2hhdCB3ZeKAmXJlIGRlZmluaW5nIGEgcmVnaXN0cnkg Zm9yIGlzIGEgc2V0IG9mIG51bWVyaWMgcmVzcG9uc2UgY29kZXMgJiB0aGVpciBtZWFuaW5ncyBm b3IgcmV0dXJuaW5nIGluIGEgUkkgKGVycm9yKSByZXNwb25zZS4gSXQgaXMgbm90IG9idmlvdXMg dG8gbWUgaG93IHRoYXQgcmVnaXN0cnkgaXMgcmVsYXRlZCB0byB0aGUgQ0ROSSBwYXJhbWV0ZXJz IHJlZ2lzdHJ5IChhc3N1bWluZyBieSBDRE5JIFBhcmFtZXRlcnMgcmVnaXN0cnkgeW91IG1lYW4g dGhlIE1lZGlhIFR5cGUgcGFyYW1ldGVyIHJlZ2lzdHJ5KS4NCg0KDQoNCi0gc2VjdGlvbiA2LjI6 IGRvIHdlIHdhbnQgdG8gc3BlY2lmeSB0aGUgUkZDNTIyNiBwb2xpY3k/ICBpcyBpdCBFeHBlcnQN CiBSZXZpZXc/ICBub3QgU3BlY2lmaWNhdGlvbiByZXF1aXJlZD8NCg0KICAgICJTcGVjaWZpY2F0 aW9uOiBBbiBvcHRpb25hbCByZWZlcmVuY2UgdG8gYSBzcGVjaWZpY2F0aW9uIHRoYXQNCiAgICAg ZGVmaW5lcyBpbiB0aGUgZXJyb3IgY29kZSBpbiBtb3JlIGRldGFpbC7igJ0NCg0KSSBtYWRlIGl0 IFNwZWNpZmljYXRpb24gUmVxdWlyZWQsIGFkZGVkIGEgbm9ybWF0aXZlIHJlZmVyZW5jZSB0byBS RkM1MjI2IGFuZCB0d2Vha2VkIHRoZSBleGlzdGluZyB3b3JkaW5nIHRvIGJlIGlubGluZSB3aXRo IFJGQzc3MzYuIGl0IG5vdyByZWFkczoNCg0K4oCc4oCdIg0KVGhpcyBkb2N1bWVudCBlc3RhYmxp c2hlcyBhIG5ldyBJQU5BIHJlZ2lzdHJ5IGZvciBDRE5JIFJJIEVycm9yIHJlc3BvbnNlIGNvZGVz LiAgQWRkaXRpb25zIHRvIHRoZSAiUkkgRXJyb3IgcmVzcG9uc2UgcmVnaXN0cnnigJ0gd2lsbCBi ZSBtYWRlIHZpYSAiU3BlY2lmaWNhdGlvbiBSZXF1aXJlZCIgYXMgZGVmaW5lZCBpbiBbUkZDNTIy Nl0uDQoNClRoZSBEZXNpZ25hdGVkIEV4cGVydCB3aWxsIHZlcmlmeSB0aGF0IG5ldyBlcnJvciBj b2RlIHJlZ2lzdHJhdGlvbnMgZG8gbm90IGR1cGxpY2F0ZSBleGlzdGluZyBlcnJvciBjb2RlIGRl ZmluaXRpb25zIChpbiBuYW1lIG9yIGZ1bmN0aW9uYWxpdHkpLCBlbnN1cmUgdGhhdCB0aGUgbmV3 IGVycm9yIGNvZGUgaXMgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBlcnJvciBjbGFzc2VzIGRlZmlu ZWQgaW4gc2VjdGlvbiBTZWN0aW9uIDQuNyBvZiB0aGlzIGRvY3VtZW50LCBwcmV2ZW50IGdyYXR1 aXRvdXMgYWRkaXRpb25zIHRvIHRoZSBuYW1lc3BhY2UsIGFuZCBwcmV2ZW50IGFueSBhZGRpdGlv bnMgdG8gdGhlIG5hbWVzcGFjZSB0aGF0IHdvdWxkIGltcGFpciB0aGUgaW50ZXJvcGVyYWJpbGl0 eSBvZiBDRE5JIGltcGxlbWVudGF0aW9ucy4NCuKAnOKAneKAnQ0KDQoNCg0KLSBzZWN0aW9uIDg6 IHRoZXJlJ3MgYW4gZXh0cmEgc3BhY2UgaW4gbXkgbmFtZTogIktldmluIEouICBNYSIgLT4gIktl dmluIEouIE1h4oCdDQoNCldvdyB5b3UgaGF2ZSBlYWdsZSBleWVzIDotKSBJdCBzZWVtcyB4bWwy cmZjIG1pc3Rha2VzIHRoZSDigJwu4oCdIGZvciBhIGZ1bGwgc3RvcCAocGVyaW9kKSBhbmQgYXV0 b21hdGljYWxseSBzdGFydHMgZXZlcnkgc2VudGVuY2Ugd2l0aCAyIHNwYWNlcy4gSeKAmXZlIGNo YW5nZWQgaXQgdG8g4oCcS2V2aW4gSiBNYeKAnSB0byBhdm9pZCB0aGUgZG91YmxlIHNwYWNlIGJ1 dCBjYW4gY2hhbmdlIGl0IGJhY2sgaXQgeW91IHByZWZlciBpdCB3aXRoIHRoZSBmdWxsIHN0b3Ag KHBlcmlvZCkuDQoNCg0KDQotIHNlY3Rpb24gOS4xOiBUaGVyZSBpcyBhIG5vcm1hdGl2ZSByZWZl cmVuY2UgdG8gdGhlIGluZm9ybWF0aW9uYWwgRnJhbWV3b3JrIGRyYWZ0LiAgRG9lcyB0aGlzIG5l ZWQgdG8gYmUgbm9ybWF0aXZlPyAgSWYgc28sIHdoeT8gIE5vdGU6IEl0IGlzIGluZm9ybWF0aXZl IGluIHRoZSBvdGhlciBpbnRlcmZhY2Ugc3BlY2lmaWNhdGlvbnMuDQoNCkNoYW5nZWQgdG8gaW5m b3JtYXRpdmUuDQoNCg0KDQotIHNlY3Rpb24gOS4yOiB0aGUgKG1pc3NpbmcpIHJlZmVyZW5jZSB0 byBSRkM3NzM2IHNob3VsZCBiZSBpbmZvcm1hdGl2ZQ0KDQpBZGRlZC4NCg0KDQpCZW4NCg0K --_000_A419F67F880AB2468214E154CB8A556206C84768eusaamb103erics_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0 YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IkJhbGxvb24gVGV4dCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCglmb250LXNpemU6OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMt c2VyaWYiO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFw cGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOndp bmRvd3RleHQ7fQ0Kc3Bhbi5CYWxsb29uVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkJhbGxv b24gVGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6 IkJhbGxvb24gVGV4dCI7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCi5N c29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZTox MC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdp bjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29y ZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZd LS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+ DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3ht bD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2 bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+SGkgQmVuLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7IExvb2tzIGdvb2QuJm5ic3A7IHRoYW54 ITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7IEkndmUgc3VibWl0dGVkIHRoZSBzaGVwaGVyZCB3cml0ZXVwLiZuYnNwOyBUaGFu a3MgdG8gYWxsIHdobyd2ZSBjb250cmlidXRlZCBvdmVyIHRoZSB5ZWFycy4mbmJzcDsgQ29uZ3Jh dHMhPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4tLSZuYnNwOyBLZXZpbiBKLiBNYTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6 MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwv c3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBCZW4gTml2ZW4tSmVua2lucyBb bWFpbHRvOmJlbkBuaXZlbi1qZW5raW5zLmNvLnVrXQ0KPGJyPg0KPGI+U2VudDo8L2I+IFRodXJz ZGF5LCBKYW51YXJ5IDI4LCAyMDE2IDc6MDcgQU08YnI+DQo8Yj5Ubzo8L2I+IEtldmluIE1hIEo8 YnI+DQo8Yj5DYzo8L2I+IENvbnRlbnQgRGVsaXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0aW9u IERpc2N1c3Npb24gTGlzdDxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0NETmldIFNoZXBoZXJk IFJldmlldyBvZiBkcmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTQudHh0PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgS2V2aW4sPG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PSy4gSSBqdXN0IHB1c2hlZCAtMTYg d2hpY2ggdXNlcyBzaW1pbGFyIHRleHQgdG8gUkZDNzczNiwgdGhlIGNvbXBsZXRlIHNlY3Rpb24g b24gUkkgZXJyb3IgcmVzcG9uc2UgcmVnaXN0cnkgbm93IHJlYWRzOjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Ni4yLiAmbmJzcDtS SSBFcnJvciByZXNwb25zZSByZWdpc3RyeTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7SUFOQSBpcyByZXF1ZXN0ZWQgdG8g Y3JlYXRlIGEgbmV3ICZxdW90O0NETkkgUkkgRXJyb3IgcmVzcG9uc2UgY29kZSZxdW90OzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZu YnNwO3N1YnJlZ2lzdHJ5IHdpdGhpbiB0aGUgJnF1b3Q7Q29udGVudCBEZWxpdmVyeSBOZXR3b3Jr IEludGVyY29ubmVjdGlvbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwOyhDRE5JKSBQYXJhbWV0ZXJzJnF1b3Q7IHJlZ2lzdHJ5 LiAmbmJzcDtUaGUgJnF1b3Q7Q0ROSSBSSSBFcnJvciByZXNwb25zZSBjb2RlJnF1b3Q7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5i c3A7bmFtZXNwYWNlIGRlZmluZXMgdGhlIHZhbGlkIHZhbHVlcyBmb3IgdGhlIGVycm9yLWNvZGUg a2V5IGluIFJJIGVycm9yPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7cmVzcG9uc2VzLiAmbmJzcDtUaGUgQ0ROSSBSSSBFcnJv ciByZXNwb25zZSBjb2RlIE1VU1QgYmUgYSB0aHJlZSBkaWdpdDxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwO2ludGVnZXIuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OyAmbmJzcDtBZGRpdGlvbnMgdG8gdGhlICZxdW90O1JJIEVycm9yIHJlc3BvbnNlIHJlZ2lzdHJ5 JnF1b3Q7IHdpbGwgYmUgbWFkZSB2aWE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsmcXVvdDtTcGVjaWZpY2F0aW9uIFJlcXVp cmVkJnF1b3Q7IGFzIGRlZmluZWQgaW4gW1JGQzUyMjZdLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7VGhlIERlc2lnbmF0 ZWQgRXhwZXJ0IHdpbGwgdmVyaWZ5IHRoYXQgbmV3IGVycm9yIGNvZGUgcmVnaXN0cmF0aW9uczxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 ICZuYnNwO2RvIG5vdCBkdXBsaWNhdGUgZXhpc3RpbmcgZXJyb3IgY29kZSBkZWZpbml0aW9ucyAo aW4gbmFtZSBvcjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7ICZuYnNwO2Z1bmN0aW9uYWxpdHkpLCBlbnN1cmUgdGhhdCB0aGUgbmV3IGVy cm9yIGNvZGUgaXMgaW4gYWNjb3JkYW5jZSB3aXRoPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7dGhlIGVycm9yIGNsYXNzZXMg ZGVmaW5lZCBpbiBzZWN0aW9uIFNlY3Rpb24gNC43IG9mIHRoaXMgZG9jdW1lbnQsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7 cHJldmVudCBncmF0dWl0b3VzIGFkZGl0aW9ucyB0byB0aGUgbmFtZXNwYWNlLCBhbmQgcHJldmVu dCBhbnk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOyAmbmJzcDthZGRpdGlvbnMgdG8gdGhlIG5hbWVzcGFjZSB0aGF0IHdvdWxkIGltcGFp ciB0aGUgaW50ZXJvcGVyYWJpbGl0eSBvZjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwO0NETkkgaW1wbGVtZW50YXRpb25zLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDsgJm5ic3A7TmV3IHJlZ2lzdHJhdGlvbnMgYXJlIHJlcXVpcmVkIHRvIHByb3ZpZGUgdGhlIGZv bGxvd2luZyBpbmZvcm1hdGlvbjo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgQ29kZTogQSB0aHJlZS1kaWdp dCBudW1lcmljIGVycm9yLWNvZGUsIGluIGFjY29yZGFuY2Ugd2l0aCB0aGU8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5i c3A7IGVycm9yIGNsYXNzZXMgZGVmaW5lZCBpbiBzZWN0aW9uIFNlY3Rpb24gNC43IG9mIHRoaXMg ZG9jdW1lbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IFJlYXNvbjogQSBzdHJpbmcgdGhhdCBwcm92aWRl cyBmdXJ0aGVyIGluZm9ybWF0aW9uIHJlbGF0ZWQgdG8gdGhlPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyBlcnJv ciB0aGF0IHdpbGwgYmUgaW5jbHVkZWQgaW4gdGhlIEpTT04gZXJyb3IgZGljdGlvbmFyeSB3aXRo IHRoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJ3JlYXNvbicta2V5LiAmbmJzcDtEZXBlbmRpbmcgb24gdGhl IGVycm9yLWNvZGUgc2VtYW50aWNzLCB0aGUgdmFsdWUgb2Y8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IHRoaXMg ZmllbGQgbWF5IGJlIGRldGVybWluZWQgZHluYW1pY2FsbHkuICZuYnNwO0luIHRoYXQgY2FzZSwg dGhlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDsgJm5ic3A7ICZuYnNwOyByZWdpc3RyYXRpb24gc2hvdWxkIHNldCB0aGlzIHZhbHVlIHRv ICcmbHQ7cmVhc29uJmd0OycgYW5kIGRlZmluZSBpdHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IHNlbWFudGlj cyBpbiB0aGUgZGVzY3JpcHRpb24gZmllbGQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IERlc2NyaXB0aW9u OiBBIGJyaWVmIGRlc2NyaXB0aW9uIG9mIHRoZSBlcnJvciBjb2RlIHNlbWFudGljcy48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZu YnNwOyAmbmJzcDsgU3BlY2lmaWNhdGlvbjogQW4gb3B0aW9uYWwgcmVmZXJlbmNlIHRvIGEgc3Bl Y2lmaWNhdGlvbiB0aGF0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyBkZWZpbmVzIGluIHRoZSBlcnJvciBjb2Rl IGluIG1vcmUgZGV0YWlsLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7VGhlIGVudHJpZXMgaW4gVGFibGUgMSBhcmUgcmVn aXN0ZXJlZCBieSB0aGlzIGRvY3VtZW50LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SZWdhcmRzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gMjcgSmFuIDIwMTYsIGF0IDIw OjIxLCBLZXZpbiBNYSBKICZsdDs8YSBocmVmPSJtYWlsdG86a2V2aW4uai5tYUBlcmljc3Nvbi5j b20iPmtldmluLmoubWFAZXJpY3Nzb24uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+SGkgQmVuLDwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4mbmJzcDsmbmJzcDtMb29rcyBnb29kLiZuYnNwOyB0aGFueCE8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyB3cnQgdGhlIHJlZ2lzdHJ5Ojwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+Jm5ic3A7ICZndDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPi0gc2VjdGlvbiA2LjI6IHNob3VsZCB0aGlzIGJlIGEg JnF1b3Q7c3VicmVnaXN0cnkgd2l0aGluIHRoZSAmcXVvdDtDb250ZW50IERlbGl2ZXJ5IE5ldHdv cmsgSW50ZXJjb25uZWN0aW9uIChDRE5JKSBQYXJhbWV0ZXJzJnF1b3Q7IHJlZ2lzdHJ5LuKAnT88 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4mbmJzcDsgJmd0Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgJmd0OzxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+SSBkb27igJl0IHRoaW5rIHNv LiBXaGF0IHdl4oCZcmUgZGVmaW5pbmcgYSByZWdpc3RyeSBmb3IgaXMgYSBzZXQgb2YgbnVtZXJp YyByZXNwb25zZSBjb2RlcyAmYW1wOyB0aGVpciBtZWFuaW5ncyBmb3IgcmV0dXJuaW5nIGluIGEg UkkNCiAoZXJyb3IpIHJlc3BvbnNlLiBJdCBpcyBub3Qgb2J2aW91cyB0byBtZSBob3cgdGhhdCBy ZWdpc3RyeSBpcyByZWxhdGVkIHRvIHRoZSBDRE5JIHBhcmFtZXRlcnMgcmVnaXN0cnkgKGFzc3Vt aW5nIGJ5IENETkkgUGFyYW1ldGVycyByZWdpc3RyeSB5b3UgbWVhbiB0aGUgTWVkaWEgVHlwZSBw YXJhbWV0ZXIgcmVnaXN0cnkpLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsgSSB0aGlu ayB0aGUgQ0ROSSBQYXJhbWV0ZXJzICZxdW90O3JlZ2lzdHJ5JnF1b3Q7IGlzIGp1c3QgdGhlIGdy b3VwaW5nIGZvciBhbGwgQ0ROSSByZWxhdGVkIHJlZ2lzdHJpZXMsIGFuZCB0aGUgQ0ROSSBQYXls b2FkIFR5cGVzICh0aGUgbWVkaWEgdHlwZSBwYXJhbWV0ZXIgcmVnaXN0cnkpIGlzIHVuZGVybmVh dGggdGhhdCAoc2VlDQogdGhlICZxdW90Ozwvc3Bhbj5Db250ZW50IERlbGl2ZXJ5IE5ldHdvcmsg SW50ZXJjb25uZWN0aW9uIChDRE5JKSBQYXJhbWV0ZXJzPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZxdW90OyBoZWFkaW5n IGF0PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWFuYS5vcmcvcHJvdG9jb2xzIj48c3BhbiBzdHlsZT0i Y29sb3I6cHVycGxlIj5odHRwczovL3d3dy5pYW5hLm9yZy9wcm90b2NvbHM8L3NwYW4+PC9hPiku Jm5ic3A7IEkgZGlkbid0DQogaGF2ZSBhbnl0aGluZyBvcmlnaW5hbGx5IGluIHRoZSBtZWRpYSB0 eXBlIGRyYWZ0LCBhbmQgdGhlbiB3YXMgYXNrZWQgdG8gYWRkIHRleHQgaW4gd2hpY2ggSSByZWZl cnJlZCB0byBpdCBhcyBhICZxdW90O2NhdGVnb3J5JnF1b3Q7LCBidXQgdGhlIGVkaXRvcnMgY2hh bmdlZCBpdCB0byB0aGUgJnF1b3Q7c3VicmVnaXN0cnkmcXVvdDsgdGV4dCBhYm92ZS4mbmJzcDsg SSBhc3N1bWUgd2UgbmVlZCB0aGF0IHRleHQsIHNvIHRoYXQgYWxsIHRoZSBDRE5JIHJlZ2lzdHJp ZXMgYXJlIGluIG9uZQ0KIHBsYWNlOyBlbHNlIHdlJ2xsIGxpa2VseSBnZXQgYXNrZWQgYWJvdXQg aXQgaW4gSUVTRyByZXZpZXcuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsg T3RoZXIgdGhhbiB0aGF0LCBJIHRoaW5rIHdlJ3JlIHJlYWR5IHRvIGdvLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+dGhhbnghPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4t LSZuYnNwOyBLZXZpbiBKLiBNYTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJs dWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQg MGluIDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiZuYnNwOzwvc3Bhbj48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21h JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkNETmkNCiBbPGEgaHJlZj0ibWFpbHRvOmNk bmktYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOmNkbmktYm91bmNlc0BpZXRmLm9yZzwvYT5dPHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiPk9uIEJlaGFs ZiBPZjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+ QmVuIE5pdmVuLUplbmtpbnM8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+V2VkbmVzZGF5LCBKYW51YXJ5IDI3LCAyMDE2IDI6 NDMgUE08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPkNvbnRlbnQgRGVsaXZlcnkgTmV0d29ya3MgSW50ZXJjb25uZWN0aW9uIERp c2N1c3Npb24gTGlzdDxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW0NETmldIFNoZXBoZXJkIFJldmlldyBvZiBk cmFmdC1pZXRmLWNkbmktcmVkaXJlY3Rpb24tMTQudHh0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+S2V2 aW4sPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J4oCZdmUgbWFkZSBtb3N0IG9mIHRoZSBjaGFuZ2VzIHlv dSBzdWdnZXN0ZWQsIGNvbW1lbnRzL3doYXQgSeKAmXZlIGRvbmUgYXJlIGJlbG93LjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5J4oCZdmUgcHVzaGVkIC0xNSB3aXRoIHRoZSBjaGFuZ2VzLCBk aWZmIHRvIC0xNCBpcyBoZXJlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBocmVmPSJo dHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0 aW9uLTE1Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5odHRwczovL3d3dy5pZXRmLm9yZy9y ZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1jZG5pLXJlZGlyZWN0aW9uLTE1PC9zcGFuPjwvYT48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TGV0IG1lIGtub3cgaWYgdGhlcmUgYXJlIGFueSBvdGhl ciBjaGFuZ2VzIHlvdSB3YW50IHRvIHRoZSBkb2N1bWVudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gMTMgSmFuIDIwMTYsIGF0IDIzOjE2LCBLZXZpbiBN YSBKICZsdDs8YSBocmVmPSJtYWlsdG86a2V2aW4uai5tYUBlcmljc3Nvbi5jb20iPjxzcGFuIHN0 eWxlPSJjb2xvcjpwdXJwbGUiPmtldmluLmoubWFAZXJpY3Nzb24uY29tPC9zcGFuPjwvYT4mZ3Q7 IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBCZW4vUmF5LDxicj4NCjxicj4NCiZuYnNwOyhhcyBjaGFp cikgSSd2ZSBjb21wbGV0ZWQgbXkgc2hlcGhlcmQncyByZXZpZXcgb2YgdGhlIGRvY3VtZW50IGFu ZCBoYXZlIGVuY2xvc2VkIHNvbWUgcXVlc3Rpb25zIGNvbW1lbnRzIGJlbG93LiAmbmJzcDtNb3N0 IGFyZSBuaXRzLCBidXQgdGhlIElBTkEgQ29uc2lkZXJhdGlvbnMgYW5kIE5vcm1hdGl2ZS9JbmZv cm1hdGl2ZSBSZWZlcmVuY2UgY29tbWVudHMgYXQgdGhlIGVuZCBuZWVkIHRvIGJlIGFkZHJlc3Nl ZC48YnI+DQo8YnI+DQp0aGFueCE8YnI+DQo8YnI+DQotLSAmbmJzcDtLZXZpbiBKLiBNYTxicj4N Cjxicj4NCjxicj4NCi0gZ2VuZXJhbDogdGhlcmUgaXMgaW5jb25zaXN0ZW5jeSBpbiB0aGUgdXNl IG9mICZxdW90O1JlZGlyZWN0aW9uIEludGVyZmFjZSZxdW90OyBhbmQgJnF1b3Q7UmVkaXJlY3Rp b24gaW50ZXJmYWNlJnF1b3Q7OyBpdCBzZWVtcyB0byBiZSBhIHByb2JsZW0gaW4gYWxsIHRoZSBk b2NzLCBidXQgbG9nZ2luZyBtb3N0bHkgdXNlcyB0aGUgbG93ZXJjYXNlIOKAnGkmcXVvdDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DaGFuZ2VkIHRvIHVzaW5nIOKAmFJlZGly ZWN0aW9uIGludGVyZmFjZeKAmSB0aHJvdWdob3V0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPGJy Pg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+LSBnZW5lcmFsOiAmcXVvdDtlLmcuICZxdW90OyAtJmd0OyAmcXVvdDtlLmcuLCAmcXVv dDssICZxdW90O2kuZS4gJnF1b3Q7IC0mZ3Q7ICZxdW90O2kuZS4sICZxdW90OywgYW5kICZxdW90 O0ZvciBleGFtcGxlICZxdW90OyAtJmd0OyAmcXVvdDtGb3IgZXhhbXBsZSwg4oCcPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkRvbmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJn aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBz ZWN0aW9uIDM6IFRoZSBidWxsZXRlZCBpdGVtcyBhcmUgbm90IGNvbXBsZXRlIHNlbnRlbmNlcywg cGVyaGFwczo8YnI+DQo8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmcXVvdDtUaGUgZmlu YWwgU3Vycm9nYXRlLCB3aGljaCBtYXkgYmUgaW4gdGhlIGRDRE4gdGhhdCByZXR1cm5lZCB0aGUg Ukk8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtyZXNwb25zZSB0byB0aGUgdUNE Tiwgb3IgYW5vdGhlciBDRE4gKGlmIHRoZSBkQ0ROIGRlbGVnYXRlcyB0aGU8YnI+DQombmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtkZWxpdmVyeSB0byBhbm90aGVyIENETikuJnF1b3Q7IC0m Z3Q7PGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7VGhlIGZpbmFsIFN1cnJvZ2F0 ZSwgd2hpY2ggbWF5IGJlIGluIHRoZSBkQ0ROIHRoYXQgcmV0dXJuZWQgdGhlIFJJPGJyPg0KJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7cmVzcG9uc2UgdG8gdGhlIHVDRE4sIG9yIGFub3Ro ZXIgQ0ROIChpZiB0aGUgZENETiBkZWxlZ2F0ZXMgdGhlPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7ZGVsaXZlcnkgdG8gYW5vdGhlciBDRE4pOyBvcuKAnTxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRvbmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4tIHNlY3Rpb24gMzogY29tbWEgYWZ0ZXIgJnF1b3Q7VGhlcmVmb3JlJnF1b3Q7Ojxicj4NCjxi cj4NCiZuYnNwOyZxdW90O1RoZXJlZm9yZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudCBpcyBs aW1pdGVkIHRvIFJlY3Vyc2l2ZTxicj4NCiZuYnNwOyZuYnNwO1JlcXVlc3QgUmVkaXJlY3Rpb24u JnF1b3Q7IC0mZ3Q7PGJyPg0KJm5ic3A7JnF1b3Q7VGhlcmVmb3JlLCB0aGUgc2NvcGUgb2YgdGhp cyBkb2N1bWVudCBpcyBsaW1pdGVkIHRvIFJlY3Vyc2l2ZTxicj4NCiZuYnNwOyZuYnNwO1JlcXVl c3QgUmVkaXJlY3Rpb24u4oCdPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RG9uZTxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJy Pg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+LSBzZWN0aW9uIDM6IHRoZSBjb2xvbiBzaG91bGQgYmUgYSBzZW1p LWNvbG9uOjxicj4NCjxicj4NCiZuYnNwOyZxdW90O2RvbWFpbiBpbiB0aGUgVVJMIGRlcmVmZXJl bmNlZCB0byByZWFjaCB0aGUgdUNETjogd2l0aG91dCBvcGVyYXRpb25hbDxicj4NCiZuYnNwOyZu YnNwO3ByZWNhdXRpb25zLCBhbmQgaW4gdGhlIGFic2VuY2Ugb2YgRE5TU0VDLCB0aGlzIGNhbiBt YWtlIGEgbGVnaXRpbWF0ZTxicj4NCiZuYnNwOyZuYnNwO3JlZGlyZWN0aW9uIGxvb2sgbGlrZSBh IEROUy1iYXNlZCBhdHRhY2smcXVvdDsgLSZndDs8YnI+DQombmJzcDsmcXVvdDtkb21haW4gaW4g dGhlIFVSTCBkZXJlZmVyZW5jZWQgdG8gcmVhY2ggdGhlIHVDRE47IHdpdGhvdXQgb3BlcmF0aW9u YWw8YnI+DQombmJzcDsmbmJzcDtwcmVjYXV0aW9ucywgYW5kIGluIHRoZSBhYnNlbmNlIG9mIERO U1NFQywgdGhpcyBjYW4gbWFrZSBhIGxlZ2l0aW1hdGU8YnI+DQombmJzcDsmbmJzcDtyZWRpcmVj dGlvbiBsb29rIGxpa2UgYSBETlMtYmFzZWQgYXR0YWNr4oCdPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ RG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiA0OiBUaG91Z2gg aXQgbWVudGlvbnMgYmVpbmcgZXh0ZW5zaWJsZSwgd2UgZG8gbm90IGdpdmUgYW55IGd1aWRhbmNl IG9uIGhvdyB0byBleHRlbmQgdGhlIFJJLiAmbmJzcDtTaG91bGQgd2U/ICZuYnNwO09yIHNob3Vs ZCB3ZSBqdXN0IGxlYXZlIGl0Pzxicj4NCjxicj4NCiZuYnNwOyZxdW90O0ZpbmFsbHksIHRoZSBS SSBpcyBlYXNpbHkgZXh0ZW5kYWJsZSB0byBzdXBwb3J0IG90aGVyIFVzZXIgQWdlbnQ8YnI+DQom bmJzcDsmbmJzcDtyZXF1ZXN0IHJlZGlyZWN0aW9uIG1ldGhvZHMgKGUuZy4gJm5ic3A7UlRNUCAz MDIgcmVkaXJlY3Rpb24pLiZxdW90Ozxicj4NCjxicj4NCiZuYnNwO09uZSB0aG91Z2h0IGlzIHRo YXQgdGhlIHdheSB0byBleHRlbmQgdGhpcyB3b3VsZCBiZTogd3JpdGUgYSBuZXcgUkZDLCB3aXRo IG5ldyBSSSBKU09OIG9iamVjdHMsIGFuZCByZWdpc3RlcmluZyBhIG5ldyByZWRpcmVjdGlvbiBt b2RlIGNhcGFiaWxpdHk/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBjaGFuZ2VkIHRoZSBzZW50ZW5j ZSB0bzo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RmluYWxseSwgdGhlIFJJIGlzIGVhc2ls eSBleHRlbmRhYmxlIHRvIHN1cHBvcnQgb3RoZXIgVXNlciBBZ2VudCByZXF1ZXN0IHJlZGlyZWN0 aW9uIG1ldGhvZHMgKGUuZy4sIFJUTVAgMzAyIHJlZGlyZWN0aW9uKSBieSBkZWZpbmluZyBhZGRp dGlvbmFsIHByb3RvY29sIHNwZWNpZmljIGtleXMgZm9yIFJJIHJlcXVlc3RzIGFuZCByZXNwb25z ZXMgYWxvbmcgd2l0aCBhIHNwZWNpZmljYXRpb24gaG93IHRvIHByb2Nlc3MNCiB0aGVtLjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj50byB0cnkgYW5kIGV4cGFuZCBhIGJpdCBvbiBob3cgZXh0 ZW5zaW9ucyBjb3VsZCBiZSBkb25lLiBJIGRvbuKAmXQgdGhpbmsgaXTigJlzIHRoZSByb2xlIG9m IHRoaXMgZG9jdW1lbnQgdG8gc3BlY2lmeSBleGFjdGx5IHdoYXQgaXMgcmVxdWlyZWQsIGUuZy4g bWFuZGF0aW5nIGFuIFJGQy4gSWYgeW91IHRoaW5rIGl0IG5lZWRzIG1vcmUgZXhwbGFuYXRpb24g b24gaG93IHRvIGV4dGVuZCBpdCBJIGNhbiBsb29rIGF0IGNyYWZ0aW5nDQogc29tZSBtb3JlIGRl dGFpbGVkIHRleHQ/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24gNC4x OiBzdWdnZXN0ZWQgZWRpdDo8YnI+DQo8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmcXVv dDtUaGUgc2NvcGUgb2YgdGhlIHJlc3BvbnNlIChpZiBpdCBpcyBjYWNoZWFibGUpIHNpZ25hbGVk IHRoZSBIVFRQPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7cmVzcG9uc2UgYm9k eSBvZiB0aGUgUkkgcmVzcG9uc2UuICZuYnNwO0ZvciBleGFtcGxlIHdoZXRoZXIgdGhlPGJyPg0K Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7cmVzcG9uc2UgYXBwbGllcyB0byBhIHdpZGVy IHJhbmdlIG9mIElQIGFkZHJlc3NlcyB0aGFuIHdoYXQgd2FzPGJyPg0KJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7aW5jbHVkZWQgaW4gdGhlIFJJIHJlcXVlc3QuJnF1b3Q7IC0mZ3Q7PGJy Pg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7VGhlIHNjb3BlIG9mIGEgY2FjaGVhYmxl IHJlc3BvbnNlIHNpZ25hbGVkIHZpYSB0aGUgSFRUUDxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO3Jlc3BvbnNlIGJvZHkgb2YgdGhlIFJJIHJlc3BvbnNlLCBmb3IgZXhhbXBsZSwg d2hldGhlciB0aGU8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtyZXNwb25zZSBh cHBsaWVzIHRvIGEgd2lkZXIgcmFuZ2Ugb2YgSVAgYWRkcmVzc2VzIHRoYW4gd2hhdCB3YXM8YnI+ DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpbmNsdWRlZCBpbiB0aGUgUkkgcmVxdWVz dC7igJ08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Eb25lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPGJy Pg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+LSBzZWN0aW9uIDQuMzogdGhlIHJlZmVyZW5jZSB0byBSRkM3MzM2IChGcmFtZXdvcmsp IHNob3VsZCBiZSB0byBSRkM3NzM2IChNZWRpYSBUeXBlKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkdv b2QgY2F0Y2guIERvbmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24g NC40LjI6IFNob3VsZCB0aGlzIGFsc28gc3RhdGUgdGhhdCB0aGUgZG5zIGRpY3Rpb25hcnkgTVVT VCBjb250YWluIHRoZSByY29kZSBhbmQgbmFtZSBrZXlzPzxicj4NCjxicj4NCiZuYnNwOyZxdW90 O0lmIGEgZG5zIGRpY3Rpb25hcnkgaXMgaW5jbHVkZWQgaW4gdGhlIFJJPGJyPg0KJm5ic3A7Jm5i c3A7cmVzcG9uc2UsIGl0IE1VU1QgaW5jbHVkZSBhdCBsZWFzdCBvbmUgb2YgdGhlIGZvbGxvd2lu ZyBrZXlzOiBhLDxicj4NCiZuYnNwOyZuYnNwO2FhYWEsIGNuYW1lLuKAnTxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkRvbmUuIEkgaW50ZWdyYXRlZCBpdCBpbnRvIHRoZSBleGlzdGluZyBzZW50ZW5jZSBh Ym91dCBpbmNsdWRpbmcgb25lIG9mIGEsIGFhYWEsIGNhbWUgc28gaXQgbm93IHJlYWRzOjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JZiBhIGRucyBkaWN0aW9uYXJ5IGlzIGluY2x1ZGVkIGlu IHRoZSBSSSByZXNwb25zZSwgaXQgTVVTVCBpbmNsdWRlIHRoZSByY29kZSBhbmQgbmFtZSBrZXlz IGFuZCBpdCBNVVNUIGluY2x1ZGUgYXQgbGVhc3Qgb25lIG9mIHRoZSBmb2xsb3dpbmcga2V5czog YSwgYWFhYSwgY2FtZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t Ym90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBzZWN0 aW9uIDQuNS4yOiBtaXNzaW5nICZxdW90O2FuZCZxdW90Ozo8YnI+DQo8YnI+DQombmJzcDsmcXVv dDtpdCBNVVNUIGluY2x1ZGUgYXQgbGVhc3QgdGhlIGZvbGxvd2luZyBrZXlzOiBzYy08YnI+DQom bmJzcDsmbmJzcDtzdGF0dXMsIHNjLXZlcnNpb24sIHNjLXJlYXNvbiwgY3MtdXJpLCBzYy0obG9j YXRpb24pLiZxdW90OyAtJmd0Ozxicj4NCiZuYnNwOyZxdW90O2l0IE1VU1QgaW5jbHVkZSBhdCBs ZWFzdCB0aGUgZm9sbG93aW5nIGtleXM6IHNjLTxicj4NCiZuYnNwOyZuYnNwO3N0YXR1cywgc2Mt dmVyc2lvbiwgc2MtcmVhc29uLCBjcy11cmksIGFuZCBzYy0obG9jYXRpb24pLuKAnTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRvbmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8 YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4tIHNlY3Rpb24gNC44OiB0aGlzIGltcGxpZXMgdGhhdCB0aGUgQ0ROIGtub3dzIHRo ZSBkQ0ROJ3MgcHJvdmlkZXIgSUQ/ICZuYnNwO0lzIHRoYXQgdHlwaWNhbGx5IHRydWU/ICZuYnNw O1dvdWxkIGl0IGJlIHNpbXBsZXIgdG8gaGF2ZSBDRE5zIGNoZWNrIGp1c3QgdGhlaXIgb3duIHBy b3ZpZGVyIElEPyAmbmJzcDtJIHdvdWxkIHN1Z2dlc3QgcmVtb3ZpbmcgdGhpcyBzZW50ZW5jZT88 YnI+DQo8YnI+DQombmJzcDsmcXVvdDtUcmFuc2l0IENETnMgTVVTVCBjaGVjayB0aGUgY2RuLTxi cj4NCiZuYnNwOyZuYnNwO3BhdGggYW5kIG5vdCBjYXNjYWRlIHRoZSBSSSByZXF1ZXN0IHRvIGRD RE5zIHRoYXQgYXJlIGFscmVhZHkgbGlzdGVkPGJyPg0KJm5ic3A7Jm5ic3A7aW4gY2RuLXBhdGgu 4oCdPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4N CjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPi0gc2VjdGlvbiA0Ljg6IHN1Z2dlc3RlZCBlZGl0Ojxicj4NCjxicj4NCiZuYnNwOyZxdW90 O0FzIHdlbGwgYXMgbG9vcHMgd2l0aGluIHRoZSBSSSBpdHNlbGYsJnF1b3Q7IC0mZ3Q7PGJyPg0K Jm5ic3A7JnF1b3Q7QmVzaWRlIGxvb3BzIHdpdGhpbiB0aGUgUkkgaXRzZWxmLOKAnTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkRvbmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rp b24gNC44OiBtaXNzaW5nIGNvbW1hczo8YnI+DQo8YnI+DQombmJzcDsmcXVvdDtmb3IgZXhhbXBs ZSBpZiB0aGUgSVA8YnI+DQombmJzcDsmbmJzcDthZGRyZXNzKGVzKSBvciBVUkkocykgcmV0dXJu ZWQgaW4gUkkgcmVzcG9uc2VzIGRvIG5vdCByZXNvbHZlPGJyPg0KJm5ic3A7Jm5ic3A7ZGlyZWN0 bHkgdG8gYSBzdXJyb2dhdGUgaW4gdGhlIGZpbmFsIGRDRE4gdGhlcmUgaXMgdGhlIHBvc3NpYmls aXR5JnF1b3Q7IC0mZ3Q7PGJyPg0KJm5ic3A7JnF1b3Q7Zm9yIGV4YW1wbGUsIGlmIHRoZSBJUDxi cj4NCiZuYnNwOyZuYnNwO2FkZHJlc3MoZXMpIG9yIFVSSShzKSByZXR1cm5lZCBpbiBSSSByZXNw b25zZXMgZG8gbm90IHJlc29sdmU8YnI+DQombmJzcDsmbmJzcDtkaXJlY3RseSB0byBhIHN1cnJv Z2F0ZSBpbiB0aGUgZmluYWwgZENETiwgdGhlcmUgaXMgdGhlIHBvc3NpYmlsaXR54oCdPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+RG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gc2Vj dGlvbiA0Ljg6IHR5cG86ICZxdW90O2NvbnRpbnVvc2x5JnF1b3Q7IC0mZ3Q7IOKAnGNvbnRpbnVv dXNseSZxdW90OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRvbmUuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+ DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4tIHNlY3Rpb24gNS4xOiBidWxsZXQgcHVuY3R1YXRpb246PGJyPg0KPGJyPg0K Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7dGhlIGRDRE4gYW5kIHVDRE4gdG8gYXV0aG9y aXplIGVhY2ggb3RoZXIgKHRvIGVuc3VyZSB0aGV5IGFyZTxicj4NCiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwO3RyYW5zbWl0dGluZy9yZWNlaXZpbmcgQ0ROSSBSZWRpcmVjdGlvbiBtZXNz YWdlcyB0by9mcm9tIGFuPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7YXV0aG9y aXplZCBDRE4pJnF1b3Q7IC0mZ3Q7PGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7 dGhlIGRDRE4gYW5kIHVDRE4gdG8gYXV0aG9yaXplIGVhY2ggb3RoZXIgKHRvIGVuc3VyZSB0aGV5 IGFyZTxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3RyYW5zbWl0dGluZy9yZWNl aXZpbmcgQ0ROSSBSZWRpcmVjdGlvbiBtZXNzYWdlcyB0by9mcm9tIGFuPGJyPg0KJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7YXV0aG9yaXplZCBDRE4pOyZxdW90Ozxicj4NCjxicj4NCiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZxdW90O0NETkkgUmVkaXJlY3Rpb24gaW50ZXJmYWNlIG1l c3NhZ2VzIHRvIGJlIHRyYW5zbWl0dGVkIHdpdGg8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDtjb25maWRlbnRpYWxpdHkuJnF1b3Q7IC0mZ3Q7PGJyPg0KJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7JnF1b3Q7Q0ROSSBSZWRpcmVjdGlvbiBpbnRlcmZhY2UgbWVzc2FnZXMgdG8gYmUg dHJhbnNtaXR0ZWQgd2l0aDxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO2NvbmZp ZGVudGlhbGl0eTsgYW5k4oCdPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RG9uZS48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi cj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiA1LjI6IHRoZSByZXN0IG9mIHRoZSBkb2MgdXNl cyAmcXVvdDthbiBSSSZxdW90OywgYnV0IHRoaXMgc2VjdGlvbiB1c2VzICZxdW90O2EgUkkmcXVv dDs7IHNob3VsZCBtYWtlIGl0IGNvbnNpc3RlbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RG9uZS48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gc2VjdGlvbiA1LjI6IHRoZSBmaXJzdCAx MSB3b3JkcyBvZiBzZWN0aW9uIDUuMiBhcmUgaWRlbnRpY2FsIHRvIHRoZSBmaXJzdCAxMSB3b3Jk cyBvZiBzZWN0aW9uIDU7IG1heWJlIGp1c3QgcmVtb3ZlIHRoZW0gZnJvbSBzZWN0aW9uIDUuMj88 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGJyPg0KJm5ic3A7JnF1b3Q7SW5mb3JtYXRpb24gcGFzc2VkIG92ZXIgdGhl IFJJIGNvdWxkIGJlIGNvbnNpZGVyZWQgcGVyc29uYWwgb3I8YnI+DQombmJzcDsmbmJzcDtzZW5z aXRpdmUuICZuYnNwO0luIHBhcnRpY3VsYXIsIHBhcnRzJnF1b3Q7IC0mZ3Q7PGJyPg0KJm5ic3A7 4oCcUGFydHMmcXVvdDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHRoaW5r IHRoZSByZXBldGl0aW9uIGlzIE9LIGFuZCBwcm92aWRlcyBhIHJlZnJlc2ggb2YgdGhlIGNvbnRl eHQuIEFzIHByaXZhY3kgaXMgbGlrZWx5IHRvIGJlIGEgdG9waWMgZm9sa3Mgbml0IHBpY2sgYXQg ZHVyaW5nIElFVEYgTEMvSUVTRyByZXZpZXcgSeKAmWQgcmF0aGVyIGJlIGNhdXRpb3VzIGFuZCBy ZXBlYXQgbXlzZWxmIGFuZCBsZWF2ZSBpdCB0byB0aGUgUkZDIGVkaXRvciB0byB0d2VhayBmb3Ig cmVhZGFiaWxpdHkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24gNS4y OiBzdWdnZXN0ZWQgZWRpdDo8YnI+DQo8YnI+DQombmJzcDsmcXVvdDtkbyBvYnRhaW4gaW5mb3Jt YXRpb24gcmVnYXJkaW5nIEVuZCBVc2VyIElQIGFkZHJlc3Nlczxicj4NCiZuYnNwOyZuYnNwO2Fu ZCByZXF1ZXN0ZWQgVVJJcyB0aGF0IHRoZXkgd291bGRuJ3QgaGFkIHRoZSBSSSBub3QgYmVlbiB1 c2VkLiZxdW90OyAtJmd0Ozxicj4NCiZuYnNwOyZxdW90O2RvIG9idGFpbiBpbmZvcm1hdGlvbiBy ZWdhcmRpbmcgRW5kIFVzZXIgSVAgYWRkcmVzc2VzPGJyPg0KJm5ic3A7Jm5ic3A7YW5kIHJlcXVl c3RlZCBVUklzIHRoYXQgdGhleSB3b3VsZG4ndCBoYXZlLCBoYWQgdGhlIFJJIG5vdCBiZWVuIHVz ZWQu4oCdPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxi cj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPi0gc2VjdGlvbiA2LjI6IHNob3VsZCB0aGlzIGJlIGEgJnF1b3Q7c3VicmVnaXN0cnkg d2l0aGluIHRoZSAmcXVvdDtDb250ZW50IERlbGl2ZXJ5IE5ldHdvcmsgSW50ZXJjb25uZWN0aW9u IChDRE5JKSBQYXJhbWV0ZXJzJnF1b3Q7IHJlZ2lzdHJ5LuKAnT88bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5JIGRvbuKAmXQgdGhpbmsgc28uIFdoYXQgd2XigJlyZSBkZWZpbmluZyBhIHJlZ2lzdHJ5IGZv ciBpcyBhIHNldCBvZiBudW1lcmljIHJlc3BvbnNlIGNvZGVzICZhbXA7IHRoZWlyIG1lYW5pbmdz IGZvciByZXR1cm5pbmcgaW4gYSBSSSAoZXJyb3IpIHJlc3BvbnNlLiBJdCBpcyBub3Qgb2J2aW91 cyB0byBtZSBob3cgdGhhdCByZWdpc3RyeSBpcyByZWxhdGVkIHRvIHRoZSBDRE5JIHBhcmFtZXRl cnMgcmVnaXN0cnkgKGFzc3VtaW5nDQogYnkgQ0ROSSBQYXJhbWV0ZXJzIHJlZ2lzdHJ5IHlvdSBt ZWFuIHRoZSBNZWRpYSBUeXBlIHBhcmFtZXRlciByZWdpc3RyeSkuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8 YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4tIHNlY3Rpb24gNi4yOiBkbyB3ZSB3YW50IHRvIHNwZWNpZnkgdGhlIFJG QzUyMjYgcG9saWN5PyAmbmJzcDtpcyBpdCBFeHBlcnQ8YnI+DQombmJzcDtSZXZpZXc/ICZuYnNw O25vdCBTcGVjaWZpY2F0aW9uIHJlcXVpcmVkPzxicj4NCjxicj4NCiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZxdW90O1NwZWNpZmljYXRpb246IEFuIG9wdGlvbmFsIHJlZmVyZW5jZSB0byBhIHNw ZWNpZmljYXRpb24gdGhhdDxicj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO2RlZmlu ZXMgaW4gdGhlIGVycm9yIGNvZGUgaW4gbW9yZSBkZXRhaWwu4oCdPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+SSBtYWRlIGl0IFNwZWNpZmljYXRpb24gUmVxdWlyZWQsIGFkZGVkIGEgbm9ybWF0aXZlIHJl ZmVyZW5jZSB0byBSRkM1MjI2IGFuZCB0d2Vha2VkIHRoZSBleGlzdGluZyB3b3JkaW5nIHRvIGJl IGlubGluZSB3aXRoIFJGQzc3MzYuIGl0IG5vdyByZWFkczo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+4oCc4oCdJnF1b3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyBkb2N1bWVudCBlc3RhYmxp c2hlcyBhIG5ldyBJQU5BIHJlZ2lzdHJ5IGZvciBDRE5JIFJJIEVycm9yIHJlc3BvbnNlIGNvZGVz LiAmbmJzcDtBZGRpdGlvbnMgdG8gdGhlICZxdW90O1JJIEVycm9yIHJlc3BvbnNlIHJlZ2lzdHJ5 4oCdIHdpbGwgYmUgbWFkZSB2aWEgJnF1b3Q7U3BlY2lmaWNhdGlvbiBSZXF1aXJlZCZxdW90OyBh cyBkZWZpbmVkIGluIFtSRkM1MjI2XS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIERl c2lnbmF0ZWQgRXhwZXJ0IHdpbGwgdmVyaWZ5IHRoYXQgbmV3IGVycm9yIGNvZGUgcmVnaXN0cmF0 aW9ucyBkbyBub3QgZHVwbGljYXRlIGV4aXN0aW5nIGVycm9yIGNvZGUgZGVmaW5pdGlvbnMgKGlu IG5hbWUgb3IgZnVuY3Rpb25hbGl0eSksIGVuc3VyZSB0aGF0IHRoZSBuZXcgZXJyb3IgY29kZSBp cyBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIGVycm9yIGNsYXNzZXMgZGVmaW5lZCBpbiBzZWN0aW9u IFNlY3Rpb24NCiA0Ljcgb2YgdGhpcyBkb2N1bWVudCwgcHJldmVudCBncmF0dWl0b3VzIGFkZGl0 aW9ucyB0byB0aGUgbmFtZXNwYWNlLCBhbmQgcHJldmVudCBhbnkgYWRkaXRpb25zIHRvIHRoZSBu YW1lc3BhY2UgdGhhdCB3b3VsZCBpbXBhaXIgdGhlIGludGVyb3BlcmFiaWxpdHkgb2YgQ0ROSSBp bXBsZW1lbnRhdGlvbnMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPuKAnOKAneKAnTxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJy Pg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+LSBzZWN0aW9uIDg6IHRoZXJlJ3MgYW4gZXh0cmEgc3BhY2UgaW4g bXkgbmFtZTogJnF1b3Q7S2V2aW4gSi4gJm5ic3A7TWEmcXVvdDsgLSZndDsgJnF1b3Q7S2V2aW4g Si4gTWHigJ08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Xb3cgeW91IGhhdmUgZWFnbGUgZXllcyA6LSkg SXQgc2VlbXMgeG1sMnJmYyBtaXN0YWtlcyB0aGUg4oCcLuKAnSBmb3IgYSBmdWxsIHN0b3AgKHBl cmlvZCkgYW5kIGF1dG9tYXRpY2FsbHkgc3RhcnRzIGV2ZXJ5IHNlbnRlbmNlIHdpdGggMiBzcGFj ZXMuIEnigJl2ZSBjaGFuZ2VkIGl0IHRvIOKAnEtldmluIEogTWHigJ0gdG8gYXZvaWQgdGhlIGRv dWJsZSBzcGFjZSBidXQgY2FuIGNoYW5nZSBpdCBiYWNrIGl0IHlvdSBwcmVmZXINCiBpdCB3aXRo IHRoZSBmdWxsIHN0b3AgKHBlcmlvZCkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4t IHNlY3Rpb24gOS4xOiBUaGVyZSBpcyBhIG5vcm1hdGl2ZSByZWZlcmVuY2UgdG8gdGhlIGluZm9y bWF0aW9uYWwgRnJhbWV3b3JrIGRyYWZ0LiAmbmJzcDtEb2VzIHRoaXMgbmVlZCB0byBiZSBub3Jt YXRpdmU/ICZuYnNwO0lmIHNvLCB3aHk/ICZuYnNwO05vdGU6IEl0IGlzIGluZm9ybWF0aXZlIGlu IHRoZSBvdGhlciBpbnRlcmZhY2Ugc3BlY2lmaWNhdGlvbnMuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Q2hhbmdlZCB0byBpbmZvcm1hdGl2ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0g c2VjdGlvbiA5LjI6IHRoZSAobWlzc2luZykgcmVmZXJlbmNlIHRvIFJGQzc3MzYgc2hvdWxkIGJl IGluZm9ybWF0aXZlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWRkZWQuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_A419F67F880AB2468214E154CB8A556206C84768eusaamb103erics_--