From nobody Sun Nov 3 23:45:18 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3BC11200B4; Sun, 3 Nov 2019 23:45:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 66nzbL_zeJLb; Sun, 3 Nov 2019 23:45:14 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB39412006D; Sun, 3 Nov 2019 23:45:14 -0800 (PST) Received: from lhreml703-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 314D0DC9F2FF2EA1D218; Mon, 4 Nov 2019 07:45:10 +0000 (GMT) Received: from lhreml704-chm.china.huawei.com (10.201.108.53) by lhreml703-cah.china.huawei.com (10.201.108.44) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 4 Nov 2019 07:45:08 +0000 Received: from lhreml704-chm.china.huawei.com (10.201.108.53) by lhreml704-chm.china.huawei.com (10.201.108.53) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Mon, 4 Nov 2019 07:45:09 +0000 Received: from DGGEMM422-HUB.china.huawei.com (10.1.198.39) by lhreml704-chm.china.huawei.com (10.201.108.53) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256) id 15.1.1713.5 via Frontend Transport; Mon, 4 Nov 2019 07:45:09 +0000 Received: from DGGEMM511-MBS.china.huawei.com ([169.254.2.19]) by dggemm422-hub.china.huawei.com ([10.1.198.39]) with mapi id 14.03.0439.000; Mon, 4 Nov 2019 15:45:05 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: "dots@ietf.org" CC: "dots-chairs@ietf.org" Thread-Topic: //fwd: Remote presentations at IETF106 - cutoff date November 16 Thread-Index: AdWS48OkyXU62tPNQT6doOqI+x+yrA== Date: Mon, 4 Nov 2019 07:45:04 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.33.46] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Dots] FYI://fwd: Remote presentations at IETF106 - cutoff date November 16 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 07:45:17 -0000 SGkgYWxsLA0KSWYgeW91IGNhbm5vdCBiZSBpbiBTaW5nYXBvcmUgZm9yIHlvdXIgcHJlc2VudGF0 aW9uIHRoZSBJRVRGIERPVFMgc2Vzc2lvbiBtZWV0aW5nLCB5b3UgbWF5IG5lZWQgdG8gdGVsbCB0 aGUgY2hhaXJzIHRvIHJlcXVlc3QgdGhlIHJlbW90ZSAicHJlc2VudGF0aW9uIiAobWVldGVjaG8g c3VwcG9ydCkgZm9yIHlvdS4NCg0KUGxlYXNlIGxldCB1cyBrbm93IGFzYXAgaWYgeW91IG5lZWQu DQpUaGFua3MhDQoNCkIuUi4NCkZyYW5rDQoNCi0tLS0t08q8/tStvP4tLS0tLQ0Kt6K8/sjLOiBX R0NoYWlycyBbbWFpbHRvOndnY2hhaXJzLWJvdW5jZXNAaWV0Zi5vcmddILT6se0gTWVldGVjaG8g SUVURiBzdXBwb3J0DQq3osvNyrG85DogMjAxOcTqMTDUwjI4yNUgMjM6MjkNCsrVvP7IyzogV29y a2luZyBHcm91cCBDaGFpcnMgPHdnY2hhaXJzQGlldGYub3JnPg0K1vfM4jogUmVtb3RlIHByZXNl bnRhdGlvbnMgYXQgSUVURjEwNiAtIGN1dG9mZiBkYXRlIE5vdmVtYmVyIDE2DQoNCkRlYXIgY2hh aXJzLA0KDQphcyB1c3VhbCwgcGxlYXNlIGJvb2sgeW91ciByZW1vdGUgKnByZXNlbnRhdGlvbiog c2xvdHMgYXQgSUVURjEwNiBieSBmaWxsaW5nIG91dCB0aGUgZm9sbG93aW5nIGZvcm06DQoNCiAg ICAgaHR0cHM6Ly9pZXRmMTA2LmNvbmYubWVldGVjaG8uY29tL2luZGV4LnBocC9SZW1vdGVfcHJl c2VudGF0aW9ucw0KDQoqVGhlIGN1dG9mZiBkYXRlIGlzIE5vdmVtYmVyIDE2LCAyMDE5LioNCg0K WW91IGNhbiBhbHNvIGNoZWNrIHNjaGVkdWxlZCByZW1vdGUgcHJlc2VudGF0aW9ucyBoZXJlOg0K DQogICAgIGh0dHBzOi8vaWV0ZjEwNi5jb25mLm1lZXRlY2hvLmNvbS9saXN0LnBocA0KDQpUaGFu a3MsDQp0aGUgTWVldGVjaG8gdGVhbQ0KDQo= From nobody Mon Nov 4 02:05:50 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D09812010C for ; Mon, 4 Nov 2019 02:05:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.588 X-Spam-Level: X-Spam-Status: No, score=-2.588 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id us8_ChmayrhT for ; Mon, 4 Nov 2019 02:05:45 -0800 (PST) Received: from cmccmta2.chinamobile.com (cmccmta2.chinamobile.com [221.176.66.80]) by ietfa.amsl.com (Postfix) with ESMTP id 4D84E120105 for ; Mon, 4 Nov 2019 02:05:45 -0800 (PST) Received: from spf.mail.chinamobile.com (unknown[172.16.121.9]) by rmmx-syy-dmz-app08-12008 (RichMail) with SMTP id 2ee85dbff7ecb78-25fb0; Mon, 04 Nov 2019 18:05:34 +0800 (CST) X-RM-TRANSID: 2ee85dbff7ecb78-25fb0 X-RM-TagInfo: emlType=0 X-RM-SPAM-FLAG: 00000000 Received: from cmcc-PC (unknown[10.2.51.54]) by rmsmtp-syy-appsvr05-12005 (RichMail) with SMTP id 2ee55dbff7ecb31-d3512; Mon, 04 Nov 2019 18:05:34 +0800 (CST) X-RM-TRANSID: 2ee55dbff7ecb31-d3512 Date: Mon, 4 Nov 2019 18:05:32 +0800 From: "Meiling Chen" To: dots X-Priority: 3 X-Has-Attach: no X-Mailer: Foxmail 7.2.9.115[cn] Mime-Version: 1.0 Message-ID: <201911041805324416155@chinamobile.com> Content-Type: multipart/alternative; boundary="----=_001_NextPart840123657703_=----" Archived-At: Subject: [Dots] Fw: New Version Notification for draft-chen-dots-server-hierarchical-deployment-01.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 10:05:49 -0000 This is a multi-part message in MIME format. ------=_001_NextPart840123657703_=---- Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 SGkgYWxsLA0KSSBoYXZlIHN1Ym1pdHRlZCBhIG5ldyB2ZXJzaW9uIGZvciAgZHJhZnQtY2hlbi1k b3RzLXNlcnZlci1oaWVyYXJjaGljYWwtZGVwbG95bWVudC0wMSwgDQpUaGlzIHZlcnNpb24gbWFk ZSBzb21lIGNoYW5nZXMgZm9yIHRoZSBzY2VuYXJpbyBpbnNpZGUgYW4gSVNQLCB0aGUgbWFpbiBw YXJ0IGlzIGFkZCBhIHJvbGUgb2Ygb2NoZXN0cmF0b3IgZm9yIHNjaGVkdWxsaW5nIG1pdGlnYXRv cnMuDQrCtyAgICAgICAgDQrCtyAgICAgICBVUkw6ICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRl cm5ldC1kcmFmdHMvZHJhZnQtY2hlbi1kb3RzLXNlcnZlci1oaWVyYXJjaGljYWwtZGVwbG95bWVu dC0wMS50eHQNClJlYWRpbmcgYW5kIENvbW1lbnRzIGFyZSBtb3JlIHRoYW4gd2VsY29tZS4NCiAN CkJlc3QgUmVnYXJkcywNCk1laWxpbmcgQ2hlbiANCkZyb206IGludGVybmV0LWRyYWZ0cw0KRGF0 ZTogMjAxOS0xMS0wNCAwOTo1Mw0KVG86IExpIFN1OyBjaGVubWVpbGluZzsgSmluIFBlbmc7IE1l aWxpbmcgQ2hlbg0KU3ViamVjdDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1j aGVuLWRvdHMtc2VydmVyLWhpZXJhcmNoaWNhbC1kZXBsb3ltZW50LTAxLnR4dA0KIA0KQSBuZXcg dmVyc2lvbiBvZiBJLUQsIGRyYWZ0LWNoZW4tZG90cy1zZXJ2ZXItaGllcmFyY2hpY2FsLWRlcGxv eW1lbnQtMDEudHh0DQpoYXMgYmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5IE1laWxpbmcg Q2hlbiBhbmQgcG9zdGVkIHRvIHRoZQ0KSUVURiByZXBvc2l0b3J5Lg0KIA0KTmFtZTogZHJhZnQt Y2hlbi1kb3RzLXNlcnZlci1oaWVyYXJjaGljYWwtZGVwbG95bWVudA0KUmV2aXNpb246IDAxDQpU aXRsZTogQSBtZXRob2QgZm9yIGRvdHMgc2VydmVyIGRlcGxveW1lbnQNCkRvY3VtZW50IGRhdGU6 IDIwMTktMTAtMzENCkdyb3VwOiBJbmRpdmlkdWFsIFN1Ym1pc3Npb24NClBhZ2VzOiA5DQpVUkw6 ICAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWNo ZW4tZG90cy1zZXJ2ZXItaGllcmFyY2hpY2FsLWRlcGxveW1lbnQtMDEudHh0DQpTdGF0dXM6ICAg ICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtY2hlbi1kb3RzLXNl cnZlci1oaWVyYXJjaGljYWwtZGVwbG95bWVudC8NCkh0bWxpemVkOiAgICAgICBodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtY2hlbi1kb3RzLXNlcnZlci1oaWVyYXJjaGljYWwtZGVw bG95bWVudC0wMQ0KSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2h0bWwvZHJhZnQtY2hlbi1kb3RzLXNlcnZlci1oaWVyYXJjaGljYWwtZGVwbG95bWVudA0K RGlmZjogICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1j aGVuLWRvdHMtc2VydmVyLWhpZXJhcmNoaWNhbC1kZXBsb3ltZW50LTAxDQogDQpBYnN0cmFjdDoN CiAgIEFzIERPVFMgaXMgdXNlZCBmb3IgRERvUyBNaXRpZ2F0aW9uIHNpZ25hbGluZywgaW4gcHJh Y3RpY2UsIHRoZXJlIGFyZQ0KICAgZGlmZmVyZW50IGRlcGxveW1lbnQgc2NlbmFyaW9zIGZvciBE T1RTIGFnZW50cyBkZXBsb3ltZW50IGRlcGVuZGluZw0KICAgb24gdGhlIG5ldHdvcmsgZGVwbG95 bWVudCBtb2RlLiAgVGhpcyBkb2N1bWVudCBtYWRlIGFuIGFjY29tbWFuZGF0aW9uDQogICBmb3Ig RE9UUyBTZXJ2ZXIgZGVwbG95bWVudCB3aGljaCBtYXkgYmUgU3VpdGFibGUgZm9yIElTUC4gIFRo ZSBnb2FsDQogICBpcyB0byBwcm92aWRlIHNvbWUgZ3VpZGFuY2UgZm9yIERPVFMgYWdlbnRzIGRl cGxveW1lbnQuDQogDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQogDQogDQpQbGVhc2Ugbm90 ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBz dWJtaXNzaW9uDQp1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxh YmxlIGF0IHRvb2xzLmlldGYub3JnLg0KIA0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCiANCiANCg== ------=_001_NextPart840123657703_=---- Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =0A
Hi all,
I have submitted a new version&nbs= p;for  draft-chen-dots-server-hierarchical-depl= oyment-01,=  
This version made some changes for the scenario inside an ISP, the = main part is add a role of ochestrator for schedulling mitigators.<= /div>

=C2=B7        

=C2=B7       URL:  https://www.ietf.org/internet-drafts/draft-chen-dots-server-hierarc= hical-deployment-01.txt

Reading and Comments are more than welcome.

<= span style=3D"font-size: 10.5pt; font-family: 'Microsoft YaHei', sans-seri= f;"> 

Best = Regards,

Meiling Chen 

<= /div>
Date: = ;2019-11-04 09:53
To: Li Su; c= henmeiling; Jin Peng; <= a href=3D"mailto:chenmeiling@chinamobile.com">Meiling Chen
<= b>Subject: New Version Notification for draft-chen-dots-server-hi= erarchical-deployment-01.txt
 
=0AA new version of I-D, draft-chen-dots-server-hierarchical-deployment-01.= txt
=0A
has been successfully submitted by Meiling Chen and poste= d to the
=0A
IETF repository.
=0A
 
=0A
Na= me: draft-chen-dots-server-hierarchical-deployment
=0A
Revision:= 01
=0A
Title: A method for dots server deployment
=0A
= Document date: 2019-10-31
=0A
Group: Individual Submission
= =0A
Pages: 9
=0A
URL:      &nb= sp;     https://www.ietf.org/internet-drafts/draft-che= n-dots-server-hierarchical-deployment-01.txt
=0A
Status: &nb= sp;       https://datatracker.ietf.org/doc/d= raft-chen-dots-server-hierarchical-deployment/
=0A
Htmlized: = ;      https://tools.ietf.org/html/draft-chen-dot= s-server-hierarchical-deployment-01
=0A
Htmlized:  &nbs= p;    https://datatracker.ietf.org/doc/html/draft-chen-dots= -server-hierarchical-deployment
=0A
Diff:    =        https://www.ietf.org/rfcdiff?url2=3Dd= raft-chen-dots-server-hierarchical-deployment-01
=0A
 
= =0A
Abstract:
=0A
   As DOTS is used for DDoS Mitig= ation signaling, in practice, there are
=0A
   differen= t deployment scenarios for DOTS agents deployment depending
=0A
&= nbsp;  on the network deployment mode.  This document made an ac= commandation
=0A
   for DOTS Server deployment which ma= y be Suitable for ISP.  The goal
=0A
   is to prov= ide some guidance for DOTS agents deployment.
=0A
 
=0A=
           &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;            &= nbsp;       
=0A
 
= =0A
 
=0A
Please note that it may take a couple of minut= es from the time of submission
=0A
until the htmlized version and= diff are available at tools.ietf.org.
=0A
 
=0A
Th= e IETF Secretariat
=0A
 
=0A
 
=0A
<= /blockquote> ------=_001_NextPart840123657703_=------ From nobody Wed Nov 6 06:59:04 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 555B91208B9; Wed, 6 Nov 2019 06:59:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3JbuTlvXc-e2; Wed, 6 Nov 2019 06:59:01 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2A43120120; Wed, 6 Nov 2019 06:59:00 -0800 (PST) Received: from mail2.jpshallow.com ([192.168.0.3] helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.92.3) (envelope-from ) id 1iSMlt-0000G8-2y; Wed, 06 Nov 2019 14:58:57 +0000 From: "Jon Shallow" To: "'Valery Smyslov'" , , References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> In-Reply-To: <011d01d58974$b70298b0$2507ca10$@smyslov.net> Date: Wed, 6 Nov 2019 14:58:52 -0000 Message-ID: <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCaex55Bg Content-Language: en-gb Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 14:59:03 -0000 Hi All, I have read through draft-ietf-dots-server-discovery-05 and think that it is a good document. However, in particular with DHCPv(4|6), it is only possible to use the first OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). If the server at the first address is down / unavailable for whatever reason, it is not possible to define a backup IP address as a secondary entry. Is it the intention to not allow backup IP addresses? With DNS, I know that A/AAAA records can be presented round-robin which gives the possibility of backup IP addresses, but am not sure whether this holds true for implementations for other Resource Records. If backup addresses are to be allowed, the draft is unclear whether only the first A/AAAA RR is allowed, or each can be tested until the first non-failure is found, or whether happy-eyeballs it to be invoked against all of the IP addresses and then the final IP preferentially chosen according to the RR returned order. Regards Jon > -----Original Message----- > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of Valery > Smyslov > Sent: 23 October 2019 08:37 > To: dots@ietf.org > Cc: dots-chairs@ietf.org > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > Hi, > > this message starts a Work Group Last Call (WGLC) for draft-ietf-dots-server- > discovery-05. > The version to be reviewed is here: https://www.ietf.org/id/draft-ietf-dots- > server-discovery-05.txt > > The WGLC will last for two weeks and will end on November the 7th. > Please send your comments to the list before this date. > > Regards, > Frank & Valery. > > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed Nov 6 07:51:50 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D49D12008D; Wed, 6 Nov 2019 07:51:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nhToawVafObw; Wed, 6 Nov 2019 07:51:46 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 43812120072; Wed, 6 Nov 2019 07:51:46 -0800 (PST) Received: from opfednr06.francetelecom.fr (unknown [xx.xx.xx.70]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id 477WHN6K47z1xvP; Wed, 6 Nov 2019 16:51:44 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.54]) by opfednr06.francetelecom.fr (ESMTP service) with ESMTP id 477WHN5SRjzDq75; Wed, 6 Nov 2019 16:51:44 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7D.corporate.adroot.infra.ftgroup ([fe80::bcfe:4850:e646:f223%21]) with mapi id 14.03.0468.000; Wed, 6 Nov 2019 16:51:44 +0100 From: To: Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCaex55BggAATZEA= Date: Wed, 6 Nov 2019 15:51:44 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> In-Reply-To: <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 15:51:49 -0000 Hi Jon,=20 Thank you for the comments.=20 Please see inline.=20 Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi All, >=20 > I have read through draft-ietf-dots-server-discovery-05 and think that it > is > a good document. >=20 > However, in particular with DHCPv(4|6), it is only possible to use the > first > OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). [Med] Yes If the server at the first address > is down / unavailable for whatever reason, it is not possible to define a > backup IP address as a secondary entry. Is it the intention to not allow > backup IP addresses? [Med] Hmm, that is possible given that an instance is designed to carry a l= ist of IP addresses. If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach the ^^^^^^^^^^ peer DOTS agent. In addition, these addresses can be used as identifiers for authentication. >=20 > With DNS, I know that A/AAAA records can be presented round-robin which > gives the possibility of backup IP addresses, but am not sure whether thi= s > holds true for implementations for other Resource Records. If backup > addresses are to be allowed, the draft is unclear whether only the first > A/AAAA RR is allowed, or each can be tested until the first non-failure i= s > found, or whether happy-eyeballs it to be invoked against all of the IP > addresses and then the final IP preferentially chosen according to the RR > returned order. [Med] Considerations related to address selection (including HE) are not de= tailed here on purpose because this is not part of discovery.=20 >=20 > Regards >=20 > Jon >=20 > > -----Original Message----- > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of Vale= ry > > Smyslov > > Sent: 23 October 2019 08:37 > > To: dots@ietf.org > > Cc: dots-chairs@ietf.org > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > Hi, > > > > this message starts a Work Group Last Call (WGLC) for > draft-ietf-dots-server- > > discovery-05. > > The version to be reviewed is here: > https://www.ietf.org/id/draft-ietf-dots- > > server-discovery-05.txt > > > > The WGLC will last for two weeks and will end on November the 7th. > > Please send your comments to the list before this date. > > > > Regards, > > Frank & Valery. > > > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed Nov 6 08:23:27 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 590B31207FD; Wed, 6 Nov 2019 08:22:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2a4pkFMHc59x; Wed, 6 Nov 2019 08:22:52 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A1D71208BC; Wed, 6 Nov 2019 08:22:51 -0800 (PST) Received: from mail2.jpshallow.com ([192.168.0.3] helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.92.3) (envelope-from ) id 1iSO52-0000K7-F3; Wed, 06 Nov 2019 16:22:48 +0000 From: "Jon Shallow" To: , "'Valery Smyslov'" , , References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Wed, 6 Nov 2019 16:22:44 -0000 Message-ID: <1bf401d594be$6b379700$41a6c500$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQHB1wXNATZXnJKnmjzCAA== Content-Language: en-gb Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 16:22:58 -0000 Hi Med, Sorry - not thinking straight - yes, you are correct in that a single OPTION_Vx_DOTS_ADDRESS can contain multiple IP addresses - must have = glazed over the specific definition before hitting the "it MUST only use the = first instance" in the next section (Client Behavior). Regards Jon > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of mohamed.boucadair@orange.com > Sent: 06 November 2019 15:52 > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi Jon, >=20 > Thank you for the comments. >=20 > Please see inline. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > Hi All, > > > > I have read through draft-ietf-dots-server-discovery-05 and think = that it > > is > > a good document. > > > > However, in particular with DHCPv(4|6), it is only possible to use = the > > first > > OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). >=20 > [Med] Yes >=20 > If the server at the first address > > is down / unavailable for whatever reason, it is not possible to = define a > > backup IP address as a secondary entry. Is it the intention to not allow > > backup IP addresses? >=20 > [Med] Hmm, that is possible given that an instance is designed to = carry a list > of IP addresses. >=20 > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach = the > ^^^^^^^^^^ > peer DOTS agent. In addition, these addresses can be used as > identifiers for authentication. >=20 > > > > With DNS, I know that A/AAAA records can be presented round-robin > which > > gives the possibility of backup IP addresses, but am not sure = whether this > > holds true for implementations for other Resource Records. If = backup > > addresses are to be allowed, the draft is unclear whether only the = first > > A/AAAA RR is allowed, or each can be tested until the first = non-failure is > > found, or whether happy-eyeballs it to be invoked against all of the = IP > > addresses and then the final IP preferentially chosen according to = the RR > > returned order. >=20 > [Med] Considerations related to address selection (including HE) are = not > detailed here on purpose because this is not part of discovery. >=20 > > > > Regards > > > > Jon > > > > > -----Original Message----- > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of > Valery > > > Smyslov > > > Sent: 23 October 2019 08:37 > > > To: dots@ietf.org > > > Cc: dots-chairs@ietf.org > > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > Hi, > > > > > > this message starts a Work Group Last Call (WGLC) for > > draft-ietf-dots-server- > > > discovery-05. > > > The version to be reviewed is here: > > https://www.ietf.org/id/draft-ietf-dots- > > > server-discovery-05.txt > > > > > > The WGLC will last for two weeks and will end on November the 7th. > > > Please send your comments to the list before this date. > > > > > > Regards, > > > Frank & Valery. > > > > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed Nov 6 09:13:10 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F0BE120869; Wed, 6 Nov 2019 09:12:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I9EEEePYgJRb; Wed, 6 Nov 2019 09:12:41 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77A6C120120; Wed, 6 Nov 2019 09:12:41 -0800 (PST) Received: from mail2.jpshallow.com ([192.168.0.3] helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.92.3) (envelope-from ) id 1iSOrG-0000Lq-G0; Wed, 06 Nov 2019 17:12:38 +0000 From: "Jon Shallow" To: "'Valery Smyslov'" , , References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> In-Reply-To: <011c01d58974$74529b00$5cf7d100$@smyslov.net> Date: Wed, 6 Nov 2019 17:12:34 -0000 Message-ID: <1bfc01d594c5$61631810$24294830$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQahZsvdw Content-Language: en-gb Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 17:12:44 -0000 Hi All, I have done a preliminary working implementation of DOTS Call-Home - there is still some little used functionality to finish off. *** Issue # 1 - TCP TLS sessions https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section-3.1 " If UDP transport is used, the Call Home DOTS server begins by initiating a DTLS connection to the Call Home DOTS client." This works as expected where the UDP + DTLS layer roles are switched. " If TCP is used, the Call Home DOTS server begins by initiating a TCP connection to the Call Home DOTS client. Using this TCP connection, the Call Home DOTS server initiates a TLS connection to the Call Home DOTS client." With the current libcoap implementation, I am unable to create a CoAP session using TLS on an existing TCP connection - so the DOTS Client is unable to accept an incoming TCP session and then initiate TLS integrated with the CoAP session. I agree that RFC8071 only switches the TCP layer roles. However all works if the TCP + TLS layer roles are switched - in the same way that UDP + DTLS work. Enhancing the libcoap code to support only the TCP layer being switched is doable - but have no idea as to whether other CoAP implementations can handle this specific requirement. *** Not (yet) Implemented #1 - Redirected Signalling https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section-3.2. 2 I do not see any issues here. *** Not (yet) implemented #2 - New Conflict Cause 4 I do not see any issues here. *** Not (yet) Implemented #3 - Address sharing considerations https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section-3.3. 2 I do not see any issues here - just need to interface with the translators to get the appropriate information. Regards Jon > -----Original Message----- > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of Valery > Smyslov > Sent: 23 October 2019 08:36 > To: dots@ietf.org > Cc: dots-chairs@ietf.org > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > Hi, > > this message starts a Work Group Last Call (WGLC) for draft-ietf-dots-signal- > call-home-06. > The version to be reviewed is here: https://www.ietf.org/id/draft-ietf-dots- > signal-call-home-06.txt > > The WGLC will last for two weeks and will end on November the 7th. > Please send your comments to the list before this date. > > Regards, > Frank & Valery. > > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed Nov 6 22:49:16 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABC2A12002E; Wed, 6 Nov 2019 22:49:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HFoTxAzAdOqG; Wed, 6 Nov 2019 22:49:12 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3674B12003E; Wed, 6 Nov 2019 22:49:12 -0800 (PST) Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr25.francetelecom.fr (ESMTP service) with ESMTP id 477vBt3lQJzCr6N; Thu, 7 Nov 2019 07:49:10 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.45]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id 477vBt2hbzzDq7h; Thu, 7 Nov 2019 07:49:10 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM42.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 07:49:10 +0100 From: To: Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQHB1wXNATZXnJKnmjzCAIAA7dzg Date: Thu, 7 Nov 2019 06:49:09 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> In-Reply-To: <1bf401d594be$6b379700$41a6c500$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 06:49:15 -0000 Hi Jon,=20 OK, thanks.=20 In order to further make things clear, I suggest to add this NEW text in th= e introduction of Section 5: The list of the IP addresses returned by DHCP servers is typically used to fed the DOTS server selection procedure detailed in Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide DOTS agents with primary and backup IP addresses of their peer DOTS agents. Would that be OK?=20 I'm not sure the text need to hint any priority order set by the server (ba= ckup case), though. The reason is that list will be ordered by the client f= ollowing HE.=20 Cheers, Med > -----Message d'origine----- > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; dots- > chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi Med, >=20 > Sorry - not thinking straight - yes, you are correct in that a single > OPTION_Vx_DOTS_ADDRESS can contain multiple IP addresses - must have glaz= ed > over the specific definition before hitting the "it MUST only use the fir= st > instance" in the next section (Client Behavior). >=20 > Regards >=20 > Jon >=20 > > -----Original Message----- > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > mohamed.boucadair@orange.com > > Sent: 06 November 2019 15:52 > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > Hi Jon, > > > > Thank you for the comments. > > > > Please see inline. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > Hi All, > > > > > > I have read through draft-ietf-dots-server-discovery-05 and think tha= t > it > > > is > > > a good document. > > > > > > However, in particular with DHCPv(4|6), it is only possible to use th= e > > > first > > > OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). > > > > [Med] Yes > > > > If the server at the first address > > > is down / unavailable for whatever reason, it is not possible to defi= ne > a > > > backup IP address as a secondary entry. Is it the intention to not > allow > > > backup IP addresses? > > > > [Med] Hmm, that is possible given that an instance is designed to carry= a > list > > of IP addresses. > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach the > > ^^^^^^^^^^ > > peer DOTS agent. In addition, these addresses can be used as > > identifiers for authentication. > > > > > > > > With DNS, I know that A/AAAA records can be presented round-robin > > which > > > gives the possibility of backup IP addresses, but am not sure whether > this > > > holds true for implementations for other Resource Records. If backup > > > addresses are to be allowed, the draft is unclear whether only the > first > > > A/AAAA RR is allowed, or each can be tested until the first non-failu= re > is > > > found, or whether happy-eyeballs it to be invoked against all of the = IP > > > addresses and then the final IP preferentially chosen according to th= e > RR > > > returned order. > > > > [Med] Considerations related to address selection (including HE) are no= t > > detailed here on purpose because this is not part of discovery. > > > > > > > > Regards > > > > > > Jon > > > > > > > -----Original Message----- > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of > > Valery > > > > Smyslov > > > > Sent: 23 October 2019 08:37 > > > > To: dots@ietf.org > > > > Cc: dots-chairs@ietf.org > > > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > Hi, > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > draft-ietf-dots-server- > > > > discovery-05. > > > > The version to be reviewed is here: > > > https://www.ietf.org/id/draft-ietf-dots- > > > > server-discovery-05.txt > > > > > > > > The WGLC will last for two weeks and will end on November the 7th. > > > > Please send your comments to the list before this date. > > > > > > > > Regards, > > > > Frank & Valery. > > > > > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots From nobody Wed Nov 6 23:12:01 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBE3E1200FA; Wed, 6 Nov 2019 23:11:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PMTd9V8gWzQM; Wed, 6 Nov 2019 23:11:57 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC62812002E; Wed, 6 Nov 2019 23:11:56 -0800 (PST) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar24.francetelecom.fr (ESMTP service) with ESMTP id 477vj72VY5z5vTJ; Thu, 7 Nov 2019 08:11:55 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.92]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 477vj71QGrzCql4; Thu, 7 Nov 2019 08:11:55 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM34.corporate.adroot.infra.ftgroup ([fe80::7873:1668:636f:52c%21]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 08:11:55 +0100 From: To: Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQahZsvdwgADvqfA= Date: Thu, 7 Nov 2019 07:11:54 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> In-Reply-To: <1bfc01d594c5$61631810$24294830$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 07:12:00 -0000 Hi Jon,=20 Thank you for sharing this cool news.=20 Please see inline.=20 Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > Envoy=E9=A0: mercredi 6 novembre 2019 18:13 > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Hi All, >=20 > I have done a preliminary working implementation of DOTS Call-Home - the= re > is still some little used functionality to finish off. >=20 > *** Issue # 1 - TCP TLS sessions >=20 > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section-3= .1 >=20 > " If UDP transport is used, the Call Home DOTS server begins by > initiating a DTLS connection to the Call Home DOTS client." >=20 > This works as expected where the UDP + DTLS layer roles are switched. >=20 > " If TCP is used, the Call Home DOTS server begins by initiating a > TCP connection to the Call Home DOTS client. Using this TCP > connection, the Call Home DOTS server initiates a TLS connection > to the Call Home DOTS client." >=20 > With the current libcoap implementation, I am unable to create a CoAP > session using TLS on an existing TCP connection - so the DOTS Client is > unable to accept an incoming TCP session and then initiate TLS integrated > with the CoAP session.=20 [Med] Why the client would initiate the TLS session? Do you want to test a = RFC8071-like approach? =20 I agree that RFC8071 only switches the TCP layer > roles. =20 [Med] Yes.=20 However all works if the TCP + TLS layer roles are switched - in > the > same way that UDP + DTLS work. [Med] Great. We went for this approach because we preserve the same role fo= r both DTLS and TLS: +-----------+ +-----------+ | Call Home | | Call Home | | DOTS | | DOTS | | server | | client | +-----+-----+ +-----+-----+ (D)TLS client (D)TLS server =20 >=20 > Enhancing the libcoap code to support only the TCP layer being switched i= s > doable - but have no idea as to whether other CoAP implementations can > handle this specific requirement. [Med] Do we really need to do that?=20 >=20 > *** Not (yet) Implemented #1 - Redirected Signalling >=20 > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section- > 3.2. > 2 >=20 > I do not see any issues here. >=20 > *** Not (yet) implemented #2 - New Conflict Cause 4 >=20 > I do not see any issues here. >=20 > *** Not (yet) Implemented #3 - Address sharing considerations >=20 > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section- > 3.3. > 2 >=20 > I do not see any issues here - just need to interface with the translator= s > to get the appropriate information. >=20 > Regards >=20 > Jon >=20 > > -----Original Message----- > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of Vale= ry > > Smyslov > > Sent: 23 October 2019 08:36 > > To: dots@ietf.org > > Cc: dots-chairs@ietf.org > > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Hi, > > > > this message starts a Work Group Last Call (WGLC) for > draft-ietf-dots-signal- > > call-home-06. > > The version to be reviewed is here: > https://www.ietf.org/id/draft-ietf-dots- > > signal-call-home-06.txt > > > > The WGLC will last for two weeks and will end on November the 7th. > > Please send your comments to the list before this date. > > > > Regards, > > Frank & Valery. > > > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 00:48:28 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D15012088C; Thu, 7 Nov 2019 00:48:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OPyniMUGMXQS; Thu, 7 Nov 2019 00:48:23 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0FA4D12087C; Thu, 7 Nov 2019 00:48:22 -0800 (PST) Received: from mail2.jpshallow.com ([192.168.0.3] helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.92.3) (envelope-from ) id 1iSdSl-0000x6-Ek; Thu, 07 Nov 2019 08:48:19 +0000 From: "Jon Shallow" To: , , , "'Valery Smyslov'" References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Thu, 7 Nov 2019 08:48:14 -0000 Message-ID: <1ca201d59548$17acc440$47064cc0$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQHB1wXNATZXnJIBTI+/hwF5oOeRp4UlO2A= Content-Language: en-gb Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 08:48:27 -0000 Hi Med, That suggestion works for me - thanks. No need to reference HE. Regards Jon > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of mohamed.boucadair@orange.com > Sent: 07 November 2019 06:49 > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi Jon, >=20 > OK, thanks. >=20 > In order to further make things clear, I suggest to add this NEW text = in the > introduction of Section 5: >=20 > The list of the IP addresses returned by DHCP servers is typically > used to fed the DOTS server selection procedure detailed in > Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide DOTS > agents with primary and backup IP addresses of their peer DOTS > agents. >=20 > Would that be OK? >=20 > I'm not sure the text need to hint any priority order set by the = server > (backup case), though. The reason is that list will be ordered by the client > following HE. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; = dots- > > chairs@ietf.org > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > Hi Med, > > > > Sorry - not thinking straight - yes, you are correct in that a = single > > OPTION_Vx_DOTS_ADDRESS can contain multiple IP addresses - must have > glazed > > over the specific definition before hitting the "it MUST only use = the first > > instance" in the next section (Client Behavior). > > > > Regards > > > > Jon > > > > > -----Original Message----- > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > mohamed.boucadair@orange.com > > > Sent: 06 November 2019 15:52 > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; = dots-chairs@ietf.org > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > Hi Jon, > > > > > > Thank you for the comments. > > > > > > Please see inline. > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon = Shallow > > > > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 > > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > Hi All, > > > > > > > > I have read through draft-ietf-dots-server-discovery-05 and = think that > > it > > > > is > > > > a good document. > > > > > > > > However, in particular with DHCPv(4|6), it is only possible to = use the > > > > first > > > > OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). > > > > > > [Med] Yes > > > > > > If the server at the first address > > > > is down / unavailable for whatever reason, it is not possible to define > > a > > > > backup IP address as a secondary entry. Is it the intention to = not > > allow > > > > backup IP addresses? > > > > > > [Med] Hmm, that is possible given that an instance is designed to carry a > > list > > > of IP addresses. > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to = reach > the > > > ^^^^^^^^^^ > > > peer DOTS agent. In addition, these addresses can be used as > > > identifiers for authentication. > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented = round-robin > > > which > > > > gives the possibility of backup IP addresses, but am not sure whether > > this > > > > holds true for implementations for other Resource Records. If backup > > > > addresses are to be allowed, the draft is unclear whether only = the > > first > > > > A/AAAA RR is allowed, or each can be tested until the first non-failure > > is > > > > found, or whether happy-eyeballs it to be invoked against all of = the IP > > > > addresses and then the final IP preferentially chosen according = to the > > RR > > > > returned order. > > > > > > [Med] Considerations related to address selection (including HE) = are not > > > detailed here on purpose because this is not part of discovery. > > > > > > > > > > > Regards > > > > > > > > Jon > > > > > > > > > -----Original Message----- > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On = Behalf Of > > > Valery > > > > > Smyslov > > > > > Sent: 23 October 2019 08:37 > > > > > To: dots@ietf.org > > > > > Cc: dots-chairs@ietf.org > > > > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > Hi, > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > draft-ietf-dots-server- > > > > > discovery-05. > > > > > The version to be reviewed is here: > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > server-discovery-05.txt > > > > > > > > > > The WGLC will last for two weeks and will end on November the = 7th. > > > > > Please send your comments to the list before this date. > > > > > > > > > > Regards, > > > > > Frank & Valery. > > > > > > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 00:55:51 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DA51120026 for ; Thu, 7 Nov 2019 00:55:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WyU3NZLmDs7g for ; Thu, 7 Nov 2019 00:55:46 -0800 (PST) Received: from us-smtp-delivery-140.mimecast.com (us-smtp-delivery-140.mimecast.com [63.128.21.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EF9A120872 for ; Thu, 7 Nov 2019 00:55:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=mimecast20190606; t=1573116945; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=f1R7d4ecqKWnorhmDyZxRTNG9JualIkf598p6qOOhmI=; b=NvmvDE/txgMsWKXej0y9IkBvWWAje0Z31xEEuaPdJ/VICiHBULqps7rE9VAZ7YdDLCNnL5 V+wHM9DTykwynamSDKNV0diOoS2mP+IIoCYLoGX3qT9TOLhdAlKEbOFLUA3If8vu4RnyeW WHAoN8BVBW+2xYw3UKAOw/Xec3Piqio= Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03lp2055.outbound.protection.outlook.com [104.47.40.55]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-266-NavUFN8ZNgS7TRRuP3sBcQ-1; Thu, 07 Nov 2019 03:55:43 -0500 Received: from MWHPR16MB1693.namprd16.prod.outlook.com (10.172.59.151) by MWHPR16MB1727.namprd16.prod.outlook.com (10.174.162.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.23; Thu, 7 Nov 2019 08:55:41 +0000 Received: from MWHPR16MB1693.namprd16.prod.outlook.com ([fe80::a8c3:180f:e08c:c557]) by MWHPR16MB1693.namprd16.prod.outlook.com ([fe80::a8c3:180f:e08c:c557%5]) with mapi id 15.20.2430.020; Thu, 7 Nov 2019 08:55:41 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AdWJdJriVah9Pj1IRlOgUXigYgrLiQLPhj4AAAHYqgAAARUqAAAeQl6AAAQnISA= Date: Thu, 7 Nov 2019 08:55:41 +0000 Message-ID: References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.4.0.45 dlp-reaction: no-action x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a2dce5ca-b2dd-4765-a7fc-08d763604494 x-ms-traffictypediagnostic: MWHPR16MB1727: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(376002)(396003)(39860400002)(136003)(366004)(199004)(189003)(32952001)(53754006)(13464003)(2201001)(6246003)(6506007)(476003)(53546011)(305945005)(110136005)(99286004)(7736002)(86362001)(74316002)(11346002)(102836004)(446003)(66476007)(478600001)(8676002)(64756008)(66446008)(33656002)(81166006)(81156014)(66946007)(55016002)(76116006)(66556008)(6306002)(9686003)(25786009)(5660300002)(5024004)(52536014)(14444005)(256004)(186003)(2501003)(966005)(71190400001)(71200400001)(6436002)(7696005)(66066001)(76176011)(3846002)(2906002)(486006)(229853002)(80792005)(316002)(14454004)(8936002)(6116002)(26005)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR16MB1727; H:MWHPR16MB1693.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: NebVqSJk3kXDZ6PLV6+u7OfiMqZd6vdPGVYv2gB6MhkLioNkVlwSmARgSz22WrLz96uKprF15QgyHnlzduWVRDo27MvLVqt7lKQeCke8Sgxg8/BQsNWH+ssVTgx9NTAV66QRIkJxD/mMRHrN7bC02/L0Az3BlT5fR+fH6g4HR6v8Xhi5VlEgwU0jWZTYJSwIFIEvPtXBKyrlhwQXipArR1bWWHE+0k6sFvhoBa3Z0BLX38vE99p7/2q1I4URpmnbodXVQ5Jizah8ufIV/dL2ikw6HFVWZOwhC9a6bADZvQKl5+5zP1vTgeX6Ec2EDVuTpMFbaIgAoD4m3008w+sXvOtGmSW/xj4dyKOjyXPnfAAqCK2xFvBK1ayErbMtcYbNFwrr0PFS1qgAkKHhTY6ANUFGcI/KxuHeWGQ59TOqHisjxAi3RwuWP7XDLc1GgzDL7zWGEbZLy3DAZByS7zMTJJvCvVxVoiJYlpQJfASlDwY= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: mcafee.com X-MS-Exchange-CrossTenant-Network-Message-Id: a2dce5ca-b2dd-4765-a7fc-08d763604494 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 08:55:41.3618 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6bBtmFs0RUd3R5NkFkVs1JSXk4ifMuDEJIrEtCvQoYTlvisOhTI249ZPM/ATZ3pJxaBSl2aSAMN4wUdz8Ok1bg9/XCs4cavE95p5RSClEmP6BTUqX5ldQqIdlyp9xGDo X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR16MB1727 X-MC-Unique: NavUFN8ZNgS7TRRuP3sBcQ-1 X-Mimecast-Spam-Score: 0 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 08:55:49 -0000 If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach the peer DOTS agent. In addition, these addresses can be used as identifiers for authentication. We may want to add the following line to support the above lines: [I-D.ietf-acme-ip] describes a new protocol that allows CA to issue certifi= cates for IP addresses. Cheers, -Tiru > -----Original Message----- > From: Dots On Behalf Of > mohamed.boucadair@orange.com > Sent: Thursday, November 7, 2019 12:19 PM > To: Jon Shallow ; 'Valery Smyslov' > ; dots@ietf.org; dots-chairs@ietf.org > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > CAUTION: External email. Do not click links or open attachments unless yo= u > recognize the sender and know the content is safe. >=20 > Hi Jon, >=20 > OK, thanks. >=20 > In order to further make things clear, I suggest to add this NEW text in = the > introduction of Section 5: >=20 > The list of the IP addresses returned by DHCP servers is typically > used to fed the DOTS server selection procedure detailed in > Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide DOTS > agents with primary and backup IP addresses of their peer DOTS > agents. >=20 > Would that be OK? >=20 > I'm not sure the text need to hint any priority order set by the server (= backup > case), though. The reason is that list will be ordered by the client foll= owing HE. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 =C0=A0: BOUCADAIR Mohamed > TGI/OLN; > > 'Valery Smyslov'; dots@ietf.org; dots- chairs@ietf.org Objet=A0: RE: > > [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > Hi Med, > > > > Sorry - not thinking straight - yes, you are correct in that a single > > OPTION_Vx_DOTS_ADDRESS can contain multiple IP addresses - must have > > glazed over the specific definition before hitting the "it MUST only > > use the first instance" in the next section (Client Behavior). > > > > Regards > > > > Jon > > > > > -----Original Message----- > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > mohamed.boucadair@orange.com > > > Sent: 06 November 2019 15:52 > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > dots-chairs@ietf.org > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > Hi Jon, > > > > > > Thank you for the comments. > > > > > > Please see inline. > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallo= w > > > > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 =C0=A0: 'Valery Smyslov= '; > > > > dots@ietf.org; dots-chairs@ietf.org Objet=A0: Re: [Dots] WGLC on > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > Hi All, > > > > > > > > I have read through draft-ietf-dots-server-discovery-05 and think > > > > that > > it > > > > is > > > > a good document. > > > > > > > > However, in particular with DHCPv(4|6), it is only possible to use > > > > the first OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). > > > > > > [Med] Yes > > > > > > If the server at the first address > > > > is down / unavailable for whatever reason, it is not possible to > > > > define > > a > > > > backup IP address as a secondary entry. Is it the intention to > > > > not > > allow > > > > backup IP addresses? > > > > > > [Med] Hmm, that is possible given that an instance is designed to > > > carry a > > list > > > of IP addresses. > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach > the > > > ^^^^^^^^^^ > > > peer DOTS agent. In addition, these addresses can be used as > > > identifiers for authentication. > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented round-robin > > > which > > > > gives the possibility of backup IP addresses, but am not sure > > > > whether > > this > > > > holds true for implementations for other Resource Records. If > > > > backup addresses are to be allowed, the draft is unclear whether > > > > only the > > first > > > > A/AAAA RR is allowed, or each can be tested until the first > > > > non-failure > > is > > > > found, or whether happy-eyeballs it to be invoked against all of > > > > the IP addresses and then the final IP preferentially chosen > > > > according to the > > RR > > > > returned order. > > > > > > [Med] Considerations related to address selection (including HE) are > > > not detailed here on purpose because this is not part of discovery. > > > > > > > > > > > Regards > > > > > > > > Jon > > > > > > > > > -----Original Message----- > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf > > > > > Of > > > Valery > > > > > Smyslov > > > > > Sent: 23 October 2019 08:37 > > > > > To: dots@ietf.org > > > > > Cc: dots-chairs@ietf.org > > > > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > Hi, > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > draft-ietf-dots-server- > > > > > discovery-05. > > > > > The version to be reviewed is here: > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > server-discovery-05.txt > > > > > > > > > > The WGLC will last for two weeks and will end on November the 7th= . > > > > > Please send your comments to the list before this date. > > > > > > > > > > Regards, > > > > > Frank & Valery. > > > > > > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 00:57:48 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A3AC120872; Thu, 7 Nov 2019 00:57:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gpjOjXohUeZP; Thu, 7 Nov 2019 00:57:45 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4DD3120026; Thu, 7 Nov 2019 00:57:45 -0800 (PST) Received: from mail2.jpshallow.com ([192.168.0.3] helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.92.3) (envelope-from ) id 1iSdbs-0000xd-3G; Thu, 07 Nov 2019 08:57:44 +0000 From: "Jon Shallow" To: , "'Valery Smyslov'" , , References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Thu, 7 Nov 2019 08:57:39 -0000 Message-ID: <1ca401d59549$6839d730$38ad8590$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQQIoyNJKAgLNmFOoOWNYsA== Content-Language: en-gb Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 08:57:47 -0000 Hi Med, See inline. Regards Jon > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of mohamed.boucadair@orange.com > Sent: 07 November 2019 07:12 > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Hi Jon, >=20 > Thank you for sharing this cool news. >=20 > Please see inline. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > Envoy=E9=A0: mercredi 6 novembre 2019 18:13 > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Hi All, > > > > I have done a preliminary working implementation of DOTS Call-Home = - > there > > is still some little used functionality to finish off. > > > > *** Issue # 1 - TCP TLS sessions > > > > = https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section- > 3..1 > > > > " If UDP transport is used, the Call Home DOTS server begins by > > initiating a DTLS connection to the Call Home DOTS client." > > > > This works as expected where the UDP + DTLS layer roles are = switched. > > > > " If TCP is used, the Call Home DOTS server begins by initiating a > > TCP connection to the Call Home DOTS client. Using this TCP > > connection, the Call Home DOTS server initiates a TLS connection > > to the Call Home DOTS client." > > > > With the current libcoap implementation, I am unable to create a = CoAP > > session using TLS on an existing TCP connection - so the DOTS Client = is > > unable to accept an incoming TCP session and then initiate TLS integrated > > with the CoAP session. >=20 > [Med] Why the client would initiate the TLS session? Do you want to = test a > RFC8071-like approach? Jon> Yesterday was one of those days - word blindness translated "the = Call Home DOTS server initiates a TLS connection to the Call Home DOTS = client." as a separate action to "the Call Home DOTS client initiates a TLS connection to the Call Home DOTS server.". The actual text is correct. >=20 > I agree that RFC8071 only switches the TCP layer > > roles. >=20 > [Med] Yes. >=20 > However all works if the TCP + TLS layer roles are switched - in > > the > > same way that UDP + DTLS work. >=20 > [Med] Great. We went for this approach because we preserve the same = role > for both DTLS and TLS: >=20 > +-----------+ +-----------+ > | Call Home | | Call Home | > | DOTS | | DOTS | > | server | | client | > +-----+-----+ +-----+-----+ > (D)TLS client (D)TLS server >=20 > > > > Enhancing the libcoap code to support only the TCP layer being = switched is > > doable - but have no idea as to whether other CoAP implementations = can > > handle this specific requirement. >=20 > [Med] Do we really need to do that? Jon> No. It was my mis-reading of the text that caused this confusion. >=20 > > > > *** Not (yet) Implemented #1 - Redirected Signalling > > > > = https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section- > > 3.2. > > 2 > > > > I do not see any issues here. > > > > *** Not (yet) implemented #2 - New Conflict Cause 4 > > > > I do not see any issues here. > > > > *** Not (yet) Implemented #3 - Address sharing considerations > > > > = https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section- > > 3.3. > > 2 > > > > I do not see any issues here - just need to interface with the translators > > to get the appropriate information. > > > > Regards > > > > Jon > > > > > -----Original Message----- > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of > Valery > > > Smyslov > > > Sent: 23 October 2019 08:36 > > > To: dots@ietf.org > > > Cc: dots-chairs@ietf.org > > > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > Hi, > > > > > > this message starts a Work Group Last Call (WGLC) for > > draft-ietf-dots-signal- > > > call-home-06. > > > The version to be reviewed is here: > > https://www.ietf.org/id/draft-ietf-dots- > > > signal-call-home-06.txt > > > > > > The WGLC will last for two weeks and will end on November the 7th. > > > Please send your comments to the list before this date. > > > > > > Regards, > > > Frank & Valery. > > > > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 01:02:43 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 658D8120958; Thu, 7 Nov 2019 01:02:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JrDQ04yGSjOC; Thu, 7 Nov 2019 01:02:35 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D743C12091E; Thu, 7 Nov 2019 01:02:34 -0800 (PST) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar24.francetelecom.fr (ESMTP service) with ESMTP id 477y8n2Hv9z5vmJ; Thu, 7 Nov 2019 10:02:33 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.76]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 477y8n18rWz1xpd; Thu, 7 Nov 2019 10:02:33 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7E.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 10:02:33 +0100 From: To: Jon Shallow , "dots-chairs@ietf.org" , "dots@ietf.org" , 'Valery Smyslov' Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQHB1wXNATZXnJIBTI+/hwF5oOeRp4UlO2CAAAMg4A== Date: Thu, 7 Nov 2019 09:02:32 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135B6FC@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca201d59548$17acc440$47064cc0$@jpshallow.com> In-Reply-To: <1ca201d59548$17acc440$47064cc0$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 09:02:42 -0000 Re-, Done in my local copy. Thanks.=20 Cheers, Med > -----Message d'origine----- > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Envoy=E9=A0: jeudi 7 novembre 2019 09:48 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; dots-chairs@ietf.org; dots@ietf.org; '= Valery > Smyslov' > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi Med, >=20 > That suggestion works for me - thanks. No need to reference HE. >=20 > Regards >=20 > Jon >=20 > > -----Original Message----- > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > mohamed.boucadair@orange.com > > Sent: 07 November 2019 06:49 > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > Hi Jon, > > > > OK, thanks. > > > > In order to further make things clear, I suggest to add this NEW text i= n > the > > introduction of Section 5: > > > > The list of the IP addresses returned by DHCP servers is typically > > used to fed the DOTS server selection procedure detailed in > > Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide DOTS > > agents with primary and backup IP addresses of their peer DOTS > > agents. > > > > Would that be OK? > > > > I'm not sure the text need to hint any priority order set by the server > > (backup case), though. The reason is that list will be ordered by the > client > > following HE. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; d= ots- > > > chairs@ietf.org > > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > Hi Med, > > > > > > Sorry - not thinking straight - yes, you are correct in that a single > > > OPTION_Vx_DOTS_ADDRESS can contain multiple IP addresses - must have > > glazed > > > over the specific definition before hitting the "it MUST only use the > first > > > instance" in the next section (Client Behavior). > > > > > > Regards > > > > > > Jon > > > > > > > -----Original Message----- > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > mohamed.boucadair@orange.com > > > > Sent: 06 November 2019 15:52 > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots- > chairs@ietf.org > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > Hi Jon, > > > > > > > > Thank you for the comments. > > > > > > > > Please see inline. > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shal= low > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 > > > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > > > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > Hi All, > > > > > > > > > > I have read through draft-ietf-dots-server-discovery-05 and think > that > > > it > > > > > is > > > > > a good document. > > > > > > > > > > However, in particular with DHCPv(4|6), it is only possible to us= e > the > > > > > first > > > > > OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). > > > > > > > > [Med] Yes > > > > > > > > If the server at the first address > > > > > is down / unavailable for whatever reason, it is not possible to > define > > > a > > > > > backup IP address as a secondary entry. Is it the intention to n= ot > > > allow > > > > > backup IP addresses? > > > > > > > > [Med] Hmm, that is possible given that an instance is designed to > carry a > > > list > > > > of IP addresses. > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach > > the > > > > ^^^^^^^^^^ > > > > peer DOTS agent. In addition, these addresses can be used as > > > > identifiers for authentication. > > > > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented round-robin > > > > which > > > > > gives the possibility of backup IP addresses, but am not sure > whether > > > this > > > > > holds true for implementations for other Resource Records. If > backup > > > > > addresses are to be allowed, the draft is unclear whether only th= e > > > first > > > > > A/AAAA RR is allowed, or each can be tested until the first > non-failure > > > is > > > > > found, or whether happy-eyeballs it to be invoked against all of > the > IP > > > > > addresses and then the final IP preferentially chosen according t= o > the > > > RR > > > > > returned order. > > > > > > > > [Med] Considerations related to address selection (including HE) ar= e > not > > > > detailed here on purpose because this is not part of discovery. > > > > > > > > > > > > > > Regards > > > > > > > > > > Jon > > > > > > > > > > > -----Original Message----- > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf > Of > > > > Valery > > > > > > Smyslov > > > > > > Sent: 23 October 2019 08:37 > > > > > > To: dots@ietf.org > > > > > > Cc: dots-chairs@ietf.org > > > > > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > Hi, > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > draft-ietf-dots-server- > > > > > > discovery-05. > > > > > > The version to be reviewed is here: > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > server-discovery-05.txt > > > > > > > > > > > > The WGLC will last for two weeks and will end on November the > 7th. > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > Regards, > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > Dots mailing list > > > > > > Dots@ietf.org > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 01:22:30 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAD3E12006F; Thu, 7 Nov 2019 01:22:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wvr-5Z_oof7b; Thu, 7 Nov 2019 01:22:27 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C374E12004E; Thu, 7 Nov 2019 01:22:26 -0800 (PST) Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id 477ybj0Njbzyq2; Thu, 7 Nov 2019 10:22:25 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.79]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id 477ybh5Fq7zDq8X; Thu, 7 Nov 2019 10:22:24 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6E.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 10:22:24 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Jon Shallow" , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AdWJdJriiJ1zeDaA3CAo0XFND0KMCQLPhj4AAAHYqgAAARUqAAAeQl6AAAQnISAAAIZWQA== Date: Thu, 7 Nov 2019 09:22:24 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135B723@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 09:22:29 -0000 Hi Tiru,=20 I'm not sure this reference is needed. We do already cite 6125 to mention t= hat CAs already issue certificates based on IP addresses.=20 Cheers, Med > -----Message d'origine----- > De=A0: Konda, Tirumaleswar Reddy [mailto:TirumaleswarReddy_Konda@McAfee.c= om] > Envoy=E9=A0: jeudi 7 novembre 2019 09:56 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; Jon Shallow; 'Valery Smyslov'; > dots@ietf.org; dots-chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach the > peer DOTS agent. In addition, these addresses can be used as > identifiers for authentication. >=20 > We may want to add the following line to support the above lines: > [I-D.ietf-acme-ip] describes a new protocol that allows CA to issue > certificates for IP addresses. >=20 > Cheers, > -Tiru >=20 > > -----Original Message----- > > From: Dots On Behalf Of > > mohamed.boucadair@orange.com > > Sent: Thursday, November 7, 2019 12:19 PM > > To: Jon Shallow ; 'Valery Smyslov' > > ; dots@ietf.org; dots-chairs@ietf.org > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > CAUTION: External email. Do not click links or open attachments unless > you > > recognize the sender and know the content is safe. > > > > Hi Jon, > > > > OK, thanks. > > > > In order to further make things clear, I suggest to add this NEW text i= n > the > > introduction of Section 5: > > > > The list of the IP addresses returned by DHCP servers is typically > > used to fed the DOTS server selection procedure detailed in > > Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide DOTS > > agents with primary and backup IP addresses of their peer DOTS > > agents. > > > > Would that be OK? > > > > I'm not sure the text need to hint any priority order set by the server > (backup > > case), though. The reason is that list will be ordered by the client > following HE. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 =C0=A0: BOUCADAIR Mohamed > > TGI/OLN; > > > 'Valery Smyslov'; dots@ietf.org; dots- chairs@ietf.org Objet=A0: RE: > > > [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > Hi Med, > > > > > > Sorry - not thinking straight - yes, you are correct in that a single > > > OPTION_Vx_DOTS_ADDRESS can contain multiple IP addresses - must have > > > glazed over the specific definition before hitting the "it MUST only > > > use the first instance" in the next section (Client Behavior). > > > > > > Regards > > > > > > Jon > > > > > > > -----Original Message----- > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > mohamed.boucadair@orange.com > > > > Sent: 06 November 2019 15:52 > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > dots-chairs@ietf.org > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > Hi Jon, > > > > > > > > Thank you for the comments. > > > > > > > > Please see inline. > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shal= low > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 =C0=A0: 'Valery Smysl= ov'; > > > > > dots@ietf.org; dots-chairs@ietf.org Objet=A0: Re: [Dots] WGLC on > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > Hi All, > > > > > > > > > > I have read through draft-ietf-dots-server-discovery-05 and think > > > > > that > > > it > > > > > is > > > > > a good document. > > > > > > > > > > However, in particular with DHCPv(4|6), it is only possible to us= e > > > > > the first OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). > > > > > > > > [Med] Yes > > > > > > > > If the server at the first address > > > > > is down / unavailable for whatever reason, it is not possible to > > > > > define > > > a > > > > > backup IP address as a secondary entry. Is it the intention to > > > > > not > > > allow > > > > > backup IP addresses? > > > > > > > > [Med] Hmm, that is possible given that an instance is designed to > > > > carry a > > > list > > > > of IP addresses. > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach > > the > > > > ^^^^^^^^^^ > > > > peer DOTS agent. In addition, these addresses can be used as > > > > identifiers for authentication. > > > > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented round-robin > > > > which > > > > > gives the possibility of backup IP addresses, but am not sure > > > > > whether > > > this > > > > > holds true for implementations for other Resource Records. If > > > > > backup addresses are to be allowed, the draft is unclear whether > > > > > only the > > > first > > > > > A/AAAA RR is allowed, or each can be tested until the first > > > > > non-failure > > > is > > > > > found, or whether happy-eyeballs it to be invoked against all of > > > > > the IP addresses and then the final IP preferentially chosen > > > > > according to the > > > RR > > > > > returned order. > > > > > > > > [Med] Considerations related to address selection (including HE) ar= e > > > > not detailed here on purpose because this is not part of discovery. > > > > > > > > > > > > > > Regards > > > > > > > > > > Jon > > > > > > > > > > > -----Original Message----- > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf > > > > > > Of > > > > Valery > > > > > > Smyslov > > > > > > Sent: 23 October 2019 08:37 > > > > > > To: dots@ietf.org > > > > > > Cc: dots-chairs@ietf.org > > > > > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > Hi, > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > draft-ietf-dots-server- > > > > > > discovery-05. > > > > > > The version to be reviewed is here: > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > server-discovery-05.txt > > > > > > > > > > > > The WGLC will last for two weeks and will end on November the > 7th. > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > Regards, > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > Dots mailing list > > > > > > Dots@ietf.org > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 01:31:56 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26CA81200C1 for ; Thu, 7 Nov 2019 01:31:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 519K7wdjBEWq for ; Thu, 7 Nov 2019 01:31:53 -0800 (PST) Received: from us-smtp-delivery-140.mimecast.com (us-smtp-delivery-140.mimecast.com [216.205.24.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C7A01200A3 for ; Thu, 7 Nov 2019 01:31:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=mimecast20190606; t=1573119111; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=fCq61hdkmb1w9jaPneV/faH7QDg+/Tr6irLNUC+y24g=; b=K3WKXzrFulh3JjDIvGQ6JVdSFU/7jk7j9Xf+ujpcruL4VpAqDmndyuWt9jDObRNYWSsoNC +ZTG6igFtJ4ZmKvFsARPsGY4T3nbWjpipAi4dG/FvfcQeiyDBQoy/mJw5u8nVFwAfcGB+V LUqaRLtzZVE65VyEDeFdcMIAvITUEXw= Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-bn3nam04lp2053.outbound.protection.outlook.com [104.47.46.53]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-367-4EW3PdIWPxecFj_5idAv6g-1; Thu, 07 Nov 2019 04:31:49 -0500 Received: from MWHPR16MB1693.namprd16.prod.outlook.com (10.172.59.151) by MWHPR16MB1471.namprd16.prod.outlook.com (10.175.4.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Thu, 7 Nov 2019 09:31:47 +0000 Received: from MWHPR16MB1693.namprd16.prod.outlook.com ([fe80::a8c3:180f:e08c:c557]) by MWHPR16MB1693.namprd16.prod.outlook.com ([fe80::a8c3:180f:e08c:c557%5]) with mapi id 15.20.2430.020; Thu, 7 Nov 2019 09:31:47 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AdWJdJriVah9Pj1IRlOgUXigYgrLiQLPhj4AAAHYqgAAARUqAAAeQl6AAAQnISAAATMJAAAASiCQ Date: Thu, 7 Nov 2019 09:31:47 +0000 Message-ID: References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B723@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135B723@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.4.0.45 dlp-reaction: no-action x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 4d1f8af1-b21a-4714-e52d-08d763654fa0 x-ms-traffictypediagnostic: MWHPR16MB1471: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(366004)(346002)(136003)(39850400004)(396003)(13464003)(53754006)(189003)(32952001)(199004)(316002)(66556008)(5660300002)(66946007)(64756008)(66446008)(110136005)(66476007)(76116006)(305945005)(81166006)(81156014)(74316002)(8936002)(6116002)(3846002)(7736002)(8676002)(33656002)(99286004)(2906002)(25786009)(476003)(6436002)(486006)(55016002)(446003)(11346002)(66066001)(9686003)(229853002)(6306002)(2501003)(6506007)(966005)(71190400001)(71200400001)(6246003)(80792005)(256004)(5024004)(14444005)(76176011)(7696005)(478600001)(52536014)(86362001)(2201001)(102836004)(186003)(26005)(14454004)(53546011)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR16MB1471; H:MWHPR16MB1693.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: j5h3y0wIHzms1NOkWBNAdYMLYDIAvphjgMuISZupncyiYKeTygUhi5SP6YB4OK/B8VfCFBAc8oDz+SV7Wm75HkeKUZBtjYxHDe7q2r+94DjBUVds5L8p7LoE37Y/olgZP7kZILg+s1Xpeo3K3r44X0HxvZ7l19EFCWVkZH8CeMzVGAGdpz+61LKCf/v15J5iHZ2iykNZyRj1b+stFJGfy+DDFcg9O9rExi9NtAUXXmM7s9q9/mworCe6A8A1Y4epJn063fwIyvuLWeupHnOGu2e1/948sJuckpd7bVsSjEz9vAKDGEWxV2FDiuY/JW91D0wYDVLy5OHO10aXpja8kzTfrH1TMVn8JApnpXG9wItqrICTgx49M87cFXgpFnuhH2oPuQfNizYc1457Tidvi0k4OOajjj+Qyo4WvCcat8eUM9sKhB5aml2FUSo37gyxLGMwnhhCha0V2yfGcewQ/XSeyiHxQgd5s7/DaWtImqk= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: mcafee.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4d1f8af1-b21a-4714-e52d-08d763654fa0 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 09:31:47.2936 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: tCB5mKsvZJB9McKejgqXCY0ONkhaaEn24U1+phBpOpU39Wh/y+sb2fTrIpY25qj8h30MhjMLsJBnq+PE3vVBt9ML8/j3d7aLrbFZahctWfaFmZLmpv8yDnrRgBBt3row X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR16MB1471 X-MC-Unique: 4EW3PdIWPxecFj_5idAv6g-1 X-Mimecast-Spam-Score: 0 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 09:31:55 -0000 > -----Original Message----- > From: mohamed.boucadair@orange.com > > Sent: Thursday, November 7, 2019 2:52 PM > To: Konda, Tirumaleswar Reddy > ; Jon Shallow ietf@jpshallow.com>; 'Valery Smyslov' ; dots@ietf.org= ; > dots-chairs@ietf.org > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > CAUTION: External email. Do not click links or open attachments unless yo= u > recognize the sender and know the content is safe. >=20 > Hi Tiru, >=20 > I'm not sure this reference is needed. We do already cite 6125 to mention > that CAs already issue certificates based on IP addresses. https://tools.ietf.org/html/rfc6125#section-1.7.2 says certificates based o= n IP addresses is out of scope. Cheers, -Tiru >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Konda, Tirumaleswar Reddy > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > Envoy=E9=A0: jeudi 7 novembre 2019 09:56 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; Jon Shallow; 'Valery Smyslov'; > > dots@ietf.org; dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > draft-ietf-dots-server-discovery-05 > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach > the > > peer DOTS agent. In addition, these addresses can be used as > > identifiers for authentication. > > > > We may want to add the following line to support the above lines: > > [I-D.ietf-acme-ip] describes a new protocol that allows CA to issue > > certificates for IP addresses. > > > > Cheers, > > -Tiru > > > > > -----Original Message----- > > > From: Dots On Behalf Of > > > mohamed.boucadair@orange.com > > > Sent: Thursday, November 7, 2019 12:19 PM > > > To: Jon Shallow ; 'Valery Smyslov' > > > ; dots@ietf.org; dots-chairs@ietf.org > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > CAUTION: External email. Do not click links or open attachments > > > unless > > you > > > recognize the sender and know the content is safe. > > > > > > Hi Jon, > > > > > > OK, thanks. > > > > > > In order to further make things clear, I suggest to add this NEW > > > text in > > the > > > introduction of Section 5: > > > > > > The list of the IP addresses returned by DHCP servers is typically > > > used to fed the DOTS server selection procedure detailed in > > > Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide DOTS > > > agents with primary and backup IP addresses of their peer DOTS > > > agents. > > > > > > Would that be OK? > > > > > > I'm not sure the text need to hint any priority order set by the > > > server > > (backup > > > case), though. The reason is that list will be ordered by the client > > following HE. > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 =C0=A0: BOUCADAIR Moham= ed > > > TGI/OLN; > > > > 'Valery Smyslov'; dots@ietf.org; dots- chairs@ietf.org Objet=A0: RE= : > > > > [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > Hi Med, > > > > > > > > Sorry - not thinking straight - yes, you are correct in that a > > > > single OPTION_Vx_DOTS_ADDRESS can contain multiple IP addresses - > > > > must have glazed over the specific definition before hitting the > > > > "it MUST only use the first instance" in the next section (Client > Behavior). > > > > > > > > Regards > > > > > > > > Jon > > > > > > > > > -----Original Message----- > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > mohamed.boucadair@orange.com > > > > > Sent: 06 November 2019 15:52 > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > > dots-chairs@ietf.org > > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > Hi Jon, > > > > > > > > > > Thank you for the comments. > > > > > > > > > > Please see inline. > > > > > > > > > > Cheers, > > > > > Med > > > > > > > > > > > -----Message d'origine----- > > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon > > > > > > Shallow Envoy=E9=A0: mercredi 6 novembre 2019 15:59 =C0=A0: 'Va= lery > > > > > > Smyslov'; dots@ietf.org; dots-chairs@ietf.org Objet=A0: Re: > > > > > > [Dots] WGLC on > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > Hi All, > > > > > > > > > > > > I have read through draft-ietf-dots-server-discovery-05 and > > > > > > think that > > > > it > > > > > > is > > > > > > a good document. > > > > > > > > > > > > However, in particular with DHCPv(4|6), it is only possible to > > > > > > use the first OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). > > > > > > > > > > [Med] Yes > > > > > > > > > > If the server at the first address > > > > > > is down / unavailable for whatever reason, it is not possible > > > > > > to define > > > > a > > > > > > backup IP address as a secondary entry. Is it the intention > > > > > > to not > > > > allow > > > > > > backup IP addresses? > > > > > > > > > > [Med] Hmm, that is possible given that an instance is designed > > > > > to carry a > > > > list > > > > > of IP addresses. > > > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to > > > > > reach > > > the > > > > > ^^^^^^^^^^ > > > > > peer DOTS agent. In addition, these addresses can be used as > > > > > identifiers for authentication. > > > > > > > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented > > > > > > round-robin > > > > > which > > > > > > gives the possibility of backup IP addresses, but am not sure > > > > > > whether > > > > this > > > > > > holds true for implementations for other Resource Records. If > > > > > > backup addresses are to be allowed, the draft is unclear > > > > > > whether only the > > > > first > > > > > > A/AAAA RR is allowed, or each can be tested until the first > > > > > > non-failure > > > > is > > > > > > found, or whether happy-eyeballs it to be invoked against all > > > > > > of the IP addresses and then the final IP preferentially > > > > > > chosen according to the > > > > RR > > > > > > returned order. > > > > > > > > > > [Med] Considerations related to address selection (including HE) > > > > > are not detailed here on purpose because this is not part of disc= overy. > > > > > > > > > > > > > > > > > Regards > > > > > > > > > > > > Jon > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On > > > > > > > Behalf Of > > > > > Valery > > > > > > > Smyslov > > > > > > > Sent: 23 October 2019 08:37 > > > > > > > To: dots@ietf.org > > > > > > > Cc: dots-chairs@ietf.org > > > > > > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > > draft-ietf-dots-server- > > > > > > > discovery-05. > > > > > > > The version to be reviewed is here: > > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > > server-discovery-05.txt > > > > > > > > > > > > > > The WGLC will last for two weeks and will end on November > > > > > > > the > > 7th. > > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > > > Regards, > > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Dots mailing list > > > > > > > Dots@ietf.org > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > _______________________________________________ > > > > > > Dots mailing list > > > > > > Dots@ietf.org > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 01:33:51 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71E011200F7; Thu, 7 Nov 2019 01:33:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BEL8HTd2tQo8; Thu, 7 Nov 2019 01:33:48 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65EC21200CE; Thu, 7 Nov 2019 01:33:48 -0800 (PST) Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 477yrp1h8Mz7tg7; Thu, 7 Nov 2019 10:33:46 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.82]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id 477yrp0KsBzBrLc; Thu, 7 Nov 2019 10:33:46 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5E.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 10:33:45 +0100 From: To: Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQQIoyNJKAgLNmFOoOWNYsIAAC5MQ Date: Thu, 7 Nov 2019 09:33:45 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca401d59549$6839d730$38ad8590$@jpshallow.com> In-Reply-To: <1ca401d59549$6839d730$38ad8590$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 09:33:50 -0000 Re-, Thank you, Jon.=20 BTW, I don't see any issue about HE and HBs for the call home. I assume tha= t no problem was encountered to implement it.=20 Cheers, Med > -----Message d'origine----- > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Envoy=E9=A0: jeudi 7 novembre 2019 09:58 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; dots- > chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Hi Med, >=20 > See inline. >=20 > Regards >=20 > Jon >=20 > > -----Original Message----- > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > mohamed.boucadair@orange.com > > Sent: 07 November 2019 07:12 > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Hi Jon, > > > > Thank you for sharing this cool news. > > > > Please see inline. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > > Envoy=E9=A0: mercredi 6 novembre 2019 18:13 > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > Hi All, > > > > > > I have done a preliminary working implementation of DOTS Call-Home - > > there > > > is still some little used functionality to finish off. > > > > > > *** Issue # 1 - TCP TLS sessions > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > 06#section- > > 3..1 > > > > > > " If UDP transport is used, the Call Home DOTS server begins by > > > initiating a DTLS connection to the Call Home DOTS client." > > > > > > This works as expected where the UDP + DTLS layer roles are switched. > > > > > > " If TCP is used, the Call Home DOTS server begins by initiating a > > > TCP connection to the Call Home DOTS client. Using this TCP > > > connection, the Call Home DOTS server initiates a TLS connection > > > to the Call Home DOTS client." > > > > > > With the current libcoap implementation, I am unable to create a CoAP > > > session using TLS on an existing TCP connection - so the DOTS Client = is > > > unable to accept an incoming TCP session and then initiate TLS > integrated > > > with the CoAP session. > > > > [Med] Why the client would initiate the TLS session? Do you want to tes= t > a > > RFC8071-like approach? >=20 > Jon> Yesterday was one of those days - word blindness translated "the Ca= ll > Home DOTS server initiates a TLS connection to the Call Home DOTS client.= " > as a separate action to "the Call Home DOTS client initiates a TLS > connection to the Call Home DOTS server.". The actual text is correct. >=20 > > > > I agree that RFC8071 only switches the TCP layer > > > roles. > > > > [Med] Yes. > > > > However all works if the TCP + TLS layer roles are switched - in > > > the > > > same way that UDP + DTLS work. > > > > [Med] Great. We went for this approach because we preserve the same rol= e > > for both DTLS and TLS: > > > > +-----------+ +-----------+ > > | Call Home | | Call Home | > > | DOTS | | DOTS | > > | server | | client | > > +-----+-----+ +-----+-----+ > > (D)TLS client (D)TLS server > > > > > > > > Enhancing the libcoap code to support only the TCP layer being switch= ed > is > > > doable - but have no idea as to whether other CoAP implementations ca= n > > > handle this specific requirement. > > > > [Med] Do we really need to do that? >=20 > Jon> No. It was my mis-reading of the text that caused this confusion. >=20 > > > > > > > > *** Not (yet) Implemented #1 - Redirected Signalling > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > 06#section- > > > 3.2. > > > 2 > > > > > > I do not see any issues here. > > > > > > *** Not (yet) implemented #2 - New Conflict Cause 4 > > > > > > I do not see any issues here. > > > > > > *** Not (yet) Implemented #3 - Address sharing considerations > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > 06#section- > > > 3.3. > > > 2 > > > > > > I do not see any issues here - just need to interface with the > translators > > > to get the appropriate information. > > > > > > Regards > > > > > > Jon > > > > > > > -----Original Message----- > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of > > Valery > > > > Smyslov > > > > Sent: 23 October 2019 08:36 > > > > To: dots@ietf.org > > > > Cc: dots-chairs@ietf.org > > > > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > Hi, > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > draft-ietf-dots-signal- > > > > call-home-06. > > > > The version to be reviewed is here: > > > https://www.ietf.org/id/draft-ietf-dots- > > > > signal-call-home-06.txt > > > > > > > > The WGLC will last for two weeks and will end on November the 7th. > > > > Please send your comments to the list before this date. > > > > > > > > Regards, > > > > Frank & Valery. > > > > > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 01:36:15 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FE6F120986; Thu, 7 Nov 2019 01:36:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nE8ZRg4FyKpM; Thu, 7 Nov 2019 01:36:06 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 697A012091E; Thu, 7 Nov 2019 01:36:06 -0800 (PST) Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 477yvT1ZfSz7tf0; Thu, 7 Nov 2019 10:36:05 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.107]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id 477yvT07Cdz3wc6; Thu, 7 Nov 2019 10:36:05 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM8F.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 10:36:04 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Jon Shallow" , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AdWJdJriiJ1zeDaA3CAo0XFND0KMCQLPhj4AAAHYqgAAARUqAAAeQl6AAAQnISAAATMJAAAASiCQAAAeqYA= Date: Thu, 7 Nov 2019 09:36:03 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135B770@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B723@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 09:36:13 -0000 Yes, but I was referring to this part:=20 few certification authorities issue server certificates based on ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ IP addresses, but preliminary evidence indicates that such ^^^^^^^^^^^^ certificates are a very small percentage (less than 1%) of issued certificates. Cheers, Med > -----Message d'origine----- > De=A0: Konda, Tirumaleswar Reddy [mailto:TirumaleswarReddy_Konda@McAfee.c= om] > Envoy=E9=A0: jeudi 7 novembre 2019 10:32 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; Jon Shallow; 'Valery Smyslov'; > dots@ietf.org; dots-chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > > -----Original Message----- > > From: mohamed.boucadair@orange.com > > > > Sent: Thursday, November 7, 2019 2:52 PM > > To: Konda, Tirumaleswar Reddy > > ; Jon Shallow > ietf@jpshallow.com>; 'Valery Smyslov' ; > dots@ietf.org; > > dots-chairs@ietf.org > > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > CAUTION: External email. Do not click links or open attachments unless > you > > recognize the sender and know the content is safe. > > > > Hi Tiru, > > > > I'm not sure this reference is needed. We do already cite 6125 to menti= on > > that CAs already issue certificates based on IP addresses. >=20 > https://tools.ietf.org/html/rfc6125#section-1.7.2 says certificates based > on IP addresses is out of scope. >=20 > Cheers, > -Tiru >=20 > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Konda, Tirumaleswar Reddy > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > Envoy=E9=A0: jeudi 7 novembre 2019 09:56 > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; Jon Shallow; 'Valery Smyslov'; > > > dots@ietf.org; dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > > draft-ietf-dots-server-discovery-05 > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to reach > > the > > > peer DOTS agent. In addition, these addresses can be used as > > > identifiers for authentication. > > > > > > We may want to add the following line to support the above lines: > > > [I-D.ietf-acme-ip] describes a new protocol that allows CA to issue > > > certificates for IP addresses. > > > > > > Cheers, > > > -Tiru > > > > > > > -----Original Message----- > > > > From: Dots On Behalf Of > > > > mohamed.boucadair@orange.com > > > > Sent: Thursday, November 7, 2019 12:19 PM > > > > To: Jon Shallow ; 'Valery Smyslov' > > > > ; dots@ietf.org; dots-chairs@ietf.org > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > CAUTION: External email. Do not click links or open attachments > > > > unless > > > you > > > > recognize the sender and know the content is safe. > > > > > > > > Hi Jon, > > > > > > > > OK, thanks. > > > > > > > > In order to further make things clear, I suggest to add this NEW > > > > text in > > > the > > > > introduction of Section 5: > > > > > > > > The list of the IP addresses returned by DHCP servers is typical= ly > > > > used to fed the DOTS server selection procedure detailed in > > > > Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide DOTS > > > > agents with primary and backup IP addresses of their peer DOTS > > > > agents. > > > > > > > > Would that be OK? > > > > > > > > I'm not sure the text need to hint any priority order set by the > > > > server > > > (backup > > > > case), though. The reason is that list will be ordered by the clien= t > > > following HE. > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 =C0=A0: BOUCADAIR Moh= amed > > > > TGI/OLN; > > > > > 'Valery Smyslov'; dots@ietf.org; dots- chairs@ietf.org Objet=A0: = RE: > > > > > [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > Hi Med, > > > > > > > > > > Sorry - not thinking straight - yes, you are correct in that a > > > > > single OPTION_Vx_DOTS_ADDRESS can contain multiple IP addresses - > > > > > must have glazed over the specific definition before hitting the > > > > > "it MUST only use the first instance" in the next section (Client > > Behavior). > > > > > > > > > > Regards > > > > > > > > > > Jon > > > > > > > > > > > -----Original Message----- > > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > > mohamed.boucadair@orange.com > > > > > > Sent: 06 November 2019 15:52 > > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > > > dots-chairs@ietf.org > > > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > Hi Jon, > > > > > > > > > > > > Thank you for the comments. > > > > > > > > > > > > Please see inline. > > > > > > > > > > > > Cheers, > > > > > > Med > > > > > > > > > > > > > -----Message d'origine----- > > > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon > > > > > > > Shallow Envoy=E9=A0: mercredi 6 novembre 2019 15:59 =C0=A0: '= Valery > > > > > > > Smyslov'; dots@ietf.org; dots-chairs@ietf.org Objet=A0: Re: > > > > > > > [Dots] WGLC on > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > Hi All, > > > > > > > > > > > > > > I have read through draft-ietf-dots-server-discovery-05 and > > > > > > > think that > > > > > it > > > > > > > is > > > > > > > a good document. > > > > > > > > > > > > > > However, in particular with DHCPv(4|6), it is only possible t= o > > > > > > > use the first OPTION_Vx_DOTS_ADDRESS (5.1.3, 5.2.3). > > > > > > > > > > > > [Med] Yes > > > > > > > > > > > > If the server at the first address > > > > > > > is down / unavailable for whatever reason, it is not possible > > > > > > > to define > > > > > a > > > > > > > backup IP address as a secondary entry. Is it the intention > > > > > > > to not > > > > > allow > > > > > > > backup IP addresses? > > > > > > > > > > > > [Med] Hmm, that is possible given that an instance is designed > > > > > > to carry a > > > > > list > > > > > > of IP addresses. > > > > > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to > > > > > > reach > > > > the > > > > > > ^^^^^^^^^^ > > > > > > peer DOTS agent. In addition, these addresses can be used a= s > > > > > > identifiers for authentication. > > > > > > > > > > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented > > > > > > > round-robin > > > > > > which > > > > > > > gives the possibility of backup IP addresses, but am not sure > > > > > > > whether > > > > > this > > > > > > > holds true for implementations for other Resource Records. I= f > > > > > > > backup addresses are to be allowed, the draft is unclear > > > > > > > whether only the > > > > > first > > > > > > > A/AAAA RR is allowed, or each can be tested until the first > > > > > > > non-failure > > > > > is > > > > > > > found, or whether happy-eyeballs it to be invoked against all > > > > > > > of the IP addresses and then the final IP preferentially > > > > > > > chosen according to the > > > > > RR > > > > > > > returned order. > > > > > > > > > > > > [Med] Considerations related to address selection (including HE= ) > > > > > > are not detailed here on purpose because this is not part of > discovery. > > > > > > > > > > > > > > > > > > > > Regards > > > > > > > > > > > > > > Jon > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On > > > > > > > > Behalf Of > > > > > > Valery > > > > > > > > Smyslov > > > > > > > > Sent: 23 October 2019 08:37 > > > > > > > > To: dots@ietf.org > > > > > > > > Cc: dots-chairs@ietf.org > > > > > > > > Subject: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > > > draft-ietf-dots-server- > > > > > > > > discovery-05. > > > > > > > > The version to be reviewed is here: > > > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > > > server-discovery-05.txt > > > > > > > > > > > > > > > > The WGLC will last for two weeks and will end on November > > > > > > > > the > > > 7th. > > > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > > > > > Regards, > > > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > Dots mailing list > > > > > > > > Dots@ietf.org > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Dots mailing list > > > > > > > Dots@ietf.org > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > _______________________________________________ > > > > > > Dots mailing list > > > > > > Dots@ietf.org > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 01:40:11 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECC481200CE for ; Thu, 7 Nov 2019 01:40:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ivgh-irMuVD3 for ; Thu, 7 Nov 2019 01:40:07 -0800 (PST) Received: from us-smtp-delivery-140.mimecast.com (us-smtp-delivery-140.mimecast.com [63.128.21.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24E261200C1 for ; Thu, 7 Nov 2019 01:40:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=mimecast20190606; t=1573119606; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=DJQZ3pNjSvI39PKG9Mr1qivjhvY3Mrc3PYMbfh+vBvc=; b=cHAlLjgVXrhRVNrRj3YdI38WaRVVRQEYP6JWsLamWWIoAF8R9TTasWau20C/GRKrBhNF16 QpDfZSNmzLliVAeFFS71MMBs4S5wqL2mXmjF2MmSeq93vOk9FyXNkIru+/oWUYty07m5WZ U+SJyHBsvHhJFdMFo0KHTFMD/gbUTnQ= Received: from NAM04-CO1-obe.outbound.protection.outlook.com (mail-co1nam04lp2058.outbound.protection.outlook.com [104.47.45.58]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-234-oLyLSehRNpWt01jFYenfrg-1; Thu, 07 Nov 2019 04:40:04 -0500 Received: from MWHPR16MB1693.namprd16.prod.outlook.com (10.172.59.151) by MWHPR16MB1744.namprd16.prod.outlook.com (10.172.59.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Thu, 7 Nov 2019 09:40:01 +0000 Received: from MWHPR16MB1693.namprd16.prod.outlook.com ([fe80::a8c3:180f:e08c:c557]) by MWHPR16MB1693.namprd16.prod.outlook.com ([fe80::a8c3:180f:e08c:c557%5]) with mapi id 15.20.2430.020; Thu, 7 Nov 2019 09:40:01 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AdWJdJriVah9Pj1IRlOgUXigYgrLiQLPhj4AAAHYqgAAARUqAAAeQl6AAAQnISAAATMJAAAASiCQAAAv6oAAAAW/wA== Date: Thu, 7 Nov 2019 09:40:01 +0000 Message-ID: References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B723@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B770@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135B770@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.4.0.45 dlp-reaction: no-action x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3fa2b190-be2c-4dd7-182d-08d763667608 x-ms-traffictypediagnostic: MWHPR16MB1744: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(4636009)(366004)(136003)(376002)(39860400002)(396003)(346002)(32952001)(53754006)(13464003)(199004)(189003)(66476007)(66446008)(64756008)(66556008)(446003)(256004)(14444005)(5024004)(6506007)(76176011)(53546011)(66066001)(76116006)(66946007)(476003)(71190400001)(71200400001)(99286004)(7696005)(6306002)(55016002)(6436002)(80792005)(2201001)(86362001)(229853002)(2501003)(11346002)(9686003)(6246003)(52536014)(2906002)(8936002)(5660300002)(966005)(14454004)(478600001)(30864003)(81166006)(8676002)(81156014)(3846002)(305945005)(74316002)(7736002)(102836004)(486006)(186003)(26005)(6116002)(25786009)(316002)(33656002)(110136005)(85282002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR16MB1744; H:MWHPR16MB1693.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 15TGdXKjX4chJKXWMnoKQCyEvEPN4A2CMyAtgsymySUzfLmn//X0bBEw4W8inIBVXijVU8pgKup1dR/gC4/EjseWdG/PTof2Pw1r7qEhiNizQRSNGR3+aM4g2j9iSIXcXSc4/vk9ayr//DKOEOAcBtcPWVooASWoaVtF7tWHQQtB0BCsgcyNB9q9utVaZJ/GE1xT2fyAjTDLV9A9IXWClfaBNub6ENUHr2tIQ9Vma+VQvwsX6wenNaGEUJYN9q4DMeeSGP4qXstR2AfZa1wTGfU+re33E6lttzb/HAjOGPRtlay42mOgo3L+aazrUXRFF2AuYk6fkAE/TCceEKtrQu4FQxiLnmEjlQigIoBS8WqrBnaO8NqwiV4RQ2x1ACuOfRgF8KIrv4SixruyVOahDdh2sjr9DSjyx4EsC2nu2689azfG64+yj4d18m5ZoiRPyie+26bY8JuE5fYtDMhTp9V04pS82cCocwYOwr9CQd0= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: mcafee.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3fa2b190-be2c-4dd7-182d-08d763667608 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 09:40:01.1931 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: S3TWiy3QP32srv06NXYCHJmU4/YfPwvB1LY4s34a2q3gLWV7jCboxrMwDGfuD5npd2+MoTrRDLyDI8nJuqUxB/O643MM5nGWAVeaKCRWLa0QgQfaUhlms86cv0ftO4vf X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR16MB1744 X-MC-Unique: oLyLSehRNpWt01jFYenfrg-1 X-Mimecast-Spam-Score: 0 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 09:40:10 -0000 > -----Original Message----- > From: mohamed.boucadair@orange.com > > Sent: Thursday, November 7, 2019 3:06 PM > To: Konda, Tirumaleswar Reddy > ; Jon Shallow ietf@jpshallow.com>; 'Valery Smyslov' ; dots@ietf.org= ; > dots-chairs@ietf.org > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > CAUTION: External email. Do not click links or open attachments unless yo= u > recognize the sender and know the content is safe. >=20 > Yes, but I was referring to this part: >=20 > few certification authorities issue server certificates based on >=20 > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ^^ > IP addresses, but preliminary evidence indicates that such > ^^^^^^^^^^^^ > certificates are a very small percentage (less than 1%) of issued > certificates. It is part of the out of scope section 1.2 but ACME will make it more commo= n. -Tiru >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Konda, Tirumaleswar Reddy > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > Envoy=E9=A0: jeudi 7 novembre 2019 10:32 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; Jon Shallow; 'Valery Smyslov'; > > dots@ietf.org; dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > draft-ietf-dots-server-discovery-05 > > > > > -----Original Message----- > > > From: mohamed.boucadair@orange.com > > > > > > Sent: Thursday, November 7, 2019 2:52 PM > > > To: Konda, Tirumaleswar Reddy > > > ; Jon Shallow > > ietf@jpshallow.com>; 'Valery Smyslov' ; > > dots@ietf.org; > > > dots-chairs@ietf.org > > > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > CAUTION: External email. Do not click links or open attachments > > > unless > > you > > > recognize the sender and know the content is safe. > > > > > > Hi Tiru, > > > > > > I'm not sure this reference is needed. We do already cite 6125 to > > > mention that CAs already issue certificates based on IP addresses. > > > > https://tools.ietf.org/html/rfc6125#section-1.7.2 says certificates > > based on IP addresses is out of scope. > > > > Cheers, > > -Tiru > > > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Konda, Tirumaleswar Reddy > > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > > Envoy=E9=A0: jeudi 7 novembre 2019 09:56 =C0=A0: BOUCADAIR Mohamed > > > > TGI/OLN; Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to > > > > reach > > > the > > > > peer DOTS agent. In addition, these addresses can be used as > > > > identifiers for authentication. > > > > > > > > We may want to add the following line to support the above lines: > > > > [I-D.ietf-acme-ip] describes a new protocol that allows CA to > > > > issue certificates for IP addresses. > > > > > > > > Cheers, > > > > -Tiru > > > > > > > > > -----Original Message----- > > > > > From: Dots On Behalf Of > > > > > mohamed.boucadair@orange.com > > > > > Sent: Thursday, November 7, 2019 12:19 PM > > > > > To: Jon Shallow ; 'Valery Smyslov' > > > > > ; dots@ietf.org; dots-chairs@ietf.org > > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > CAUTION: External email. Do not click links or open attachments > > > > > unless > > > > you > > > > > recognize the sender and know the content is safe. > > > > > > > > > > Hi Jon, > > > > > > > > > > OK, thanks. > > > > > > > > > > In order to further make things clear, I suggest to add this NEW > > > > > text in > > > > the > > > > > introduction of Section 5: > > > > > > > > > > The list of the IP addresses returned by DHCP servers is typic= ally > > > > > used to fed the DOTS server selection procedure detailed in > > > > > Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide DO= TS > > > > > agents with primary and backup IP addresses of their peer DOTS > > > > > agents. > > > > > > > > > > Would that be OK? > > > > > > > > > > I'm not sure the text need to hint any priority order set by the > > > > > server > > > > (backup > > > > > case), though. The reason is that list will be ordered by the > > > > > client > > > > following HE. > > > > > > > > > > Cheers, > > > > > Med > > > > > > > > > > > -----Message d'origine----- > > > > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 =C0=A0: BOUCADAIR > Mohamed > > > > > TGI/OLN; > > > > > > 'Valery Smyslov'; dots@ietf.org; dots- chairs@ietf.org Objet=A0= : RE: > > > > > > [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > Hi Med, > > > > > > > > > > > > Sorry - not thinking straight - yes, you are correct in that a > > > > > > single OPTION_Vx_DOTS_ADDRESS can contain multiple IP > > > > > > addresses - must have glazed over the specific definition > > > > > > before hitting the "it MUST only use the first instance" in > > > > > > the next section (Client > > > Behavior). > > > > > > > > > > > > Regards > > > > > > > > > > > > Jon > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > > > mohamed.boucadair@orange.com > > > > > > > Sent: 06 November 2019 15:52 > > > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > > > > dots-chairs@ietf.org > > > > > > > Subject: Re: [Dots] WGLC on > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > Hi Jon, > > > > > > > > > > > > > > Thank you for the comments. > > > > > > > > > > > > > > Please see inline. > > > > > > > > > > > > > > Cheers, > > > > > > > Med > > > > > > > > > > > > > > > -----Message d'origine----- De=A0: Dots > > > > > > > > [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > > > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 =C0=A0: 'Valery > > > > > > > > Smyslov'; dots@ietf.org; dots-chairs@ietf.org Objet=A0: Re: > > > > > > > > [Dots] WGLC on > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > Hi All, > > > > > > > > > > > > > > > > I have read through draft-ietf-dots-server-discovery-05 > > > > > > > > and think that > > > > > > it > > > > > > > > is > > > > > > > > a good document. > > > > > > > > > > > > > > > > However, in particular with DHCPv(4|6), it is only > > > > > > > > possible to use the first OPTION_Vx_DOTS_ADDRESS (5.1.3, > 5.2.3). > > > > > > > > > > > > > > [Med] Yes > > > > > > > > > > > > > > If the server at the first address > > > > > > > > is down / unavailable for whatever reason, it is not > > > > > > > > possible to define > > > > > > a > > > > > > > > backup IP address as a secondary entry. Is it the > > > > > > > > intention to not > > > > > > allow > > > > > > > > backup IP addresses? > > > > > > > > > > > > > > [Med] Hmm, that is possible given that an instance is > > > > > > > designed to carry a > > > > > > list > > > > > > > of IP addresses. > > > > > > > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, > the > > > > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used > > > > > > > to reach > > > > > the > > > > > > > ^^^^^^^^^^ > > > > > > > peer DOTS agent. In addition, these addresses can be used= as > > > > > > > identifiers for authentication. > > > > > > > > > > > > > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented > > > > > > > > round-robin > > > > > > > which > > > > > > > > gives the possibility of backup IP addresses, but am not > > > > > > > > sure whether > > > > > > this > > > > > > > > holds true for implementations for other Resource Records. > > > > > > > > If backup addresses are to be allowed, the draft is > > > > > > > > unclear whether only the > > > > > > first > > > > > > > > A/AAAA RR is allowed, or each can be tested until the > > > > > > > > first non-failure > > > > > > is > > > > > > > > found, or whether happy-eyeballs it to be invoked against > > > > > > > > all of the IP addresses and then the final IP > > > > > > > > preferentially chosen according to the > > > > > > RR > > > > > > > > returned order. > > > > > > > > > > > > > > [Med] Considerations related to address selection (including > > > > > > > HE) are not detailed here on purpose because this is not > > > > > > > part of > > discovery. > > > > > > > > > > > > > > > > > > > > > > > Regards > > > > > > > > > > > > > > > > Jon > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On > > > > > > > > > Behalf Of > > > > > > > Valery > > > > > > > > > Smyslov > > > > > > > > > Sent: 23 October 2019 08:37 > > > > > > > > > To: dots@ietf.org > > > > > > > > > Cc: dots-chairs@ietf.org > > > > > > > > > Subject: [Dots] WGLC on > > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > > > > draft-ietf-dots-server- > > > > > > > > > discovery-05. > > > > > > > > > The version to be reviewed is here: > > > > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > > > > server-discovery-05.txt > > > > > > > > > > > > > > > > > > The WGLC will last for two weeks and will end on > > > > > > > > > November the > > > > 7th. > > > > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > > > > > > > Regards, > > > > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > Dots mailing list > > > > > > > > > Dots@ietf.org > > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > Dots mailing list > > > > > > > > Dots@ietf.org > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Dots mailing list > > > > > > > Dots@ietf.org > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 01:50:43 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6766B120106; Thu, 7 Nov 2019 01:50:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B0uq8BqVxwYF; Thu, 7 Nov 2019 01:50:39 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D1701200CE; Thu, 7 Nov 2019 01:50:39 -0800 (PST) Received: from opfednr05.francetelecom.fr (unknown [xx.xx.xx.69]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 477zDF2QbWz4wT5; Thu, 7 Nov 2019 10:50:37 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.89]) by opfednr05.francetelecom.fr (ESMTP service) with ESMTP id 477zDF1C6jzyQs; Thu, 7 Nov 2019 10:50:37 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM44.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 10:50:37 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Jon Shallow" , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AdWJdJriiJ1zeDaA3CAo0XFND0KMCQLPhj4AAAHYqgAAARUqAAAeQl6AAAQnISAAATMJAAAASiCQAAAv6oAAAAW/wAAAXRXQ Date: Thu, 7 Nov 2019 09:50:36 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135B7A7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B723@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B770@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 09:50:41 -0000 Re-, Yeah.=20 My point is adding that citation/information does not change the behavior n= or the design in the draft. Cheers, Med > -----Message d'origine----- > De=A0: Konda, Tirumaleswar Reddy [mailto:TirumaleswarReddy_Konda@McAfee.c= om] > Envoy=E9=A0: jeudi 7 novembre 2019 10:40 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; Jon Shallow; 'Valery Smyslov'; > dots@ietf.org; dots-chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > > -----Original Message----- > > From: mohamed.boucadair@orange.com > > > > Sent: Thursday, November 7, 2019 3:06 PM > > To: Konda, Tirumaleswar Reddy > > ; Jon Shallow > ietf@jpshallow.com>; 'Valery Smyslov' ; > dots@ietf.org; > > dots-chairs@ietf.org > > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > CAUTION: External email. Do not click links or open attachments unless > you > > recognize the sender and know the content is safe. > > > > Yes, but I was referring to this part: > > > > few certification authorities issue server certificates based on > > > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > ^^ > > IP addresses, but preliminary evidence indicates that such > > ^^^^^^^^^^^^ > > certificates are a very small percentage (less than 1%) of issued > > certificates. >=20 > It is part of the out of scope section 1.2 but ACME will make it more > common. >=20 > -Tiru >=20 > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Konda, Tirumaleswar Reddy > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > Envoy=E9=A0: jeudi 7 novembre 2019 10:32 > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; Jon Shallow; 'Valery Smyslov'; > > > dots@ietf.org; dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > > draft-ietf-dots-server-discovery-05 > > > > > > > -----Original Message----- > > > > From: mohamed.boucadair@orange.com > > > > > > > > Sent: Thursday, November 7, 2019 2:52 PM > > > > To: Konda, Tirumaleswar Reddy > > > > ; Jon Shallow > > > ietf@jpshallow.com>; 'Valery Smyslov' ; > > > dots@ietf.org; > > > > dots-chairs@ietf.org > > > > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > CAUTION: External email. Do not click links or open attachments > > > > unless > > > you > > > > recognize the sender and know the content is safe. > > > > > > > > Hi Tiru, > > > > > > > > I'm not sure this reference is needed. We do already cite 6125 to > > > > mention that CAs already issue certificates based on IP addresses. > > > > > > https://tools.ietf.org/html/rfc6125#section-1.7.2 says certificates > > > based on IP addresses is out of scope. > > > > > > Cheers, > > > -Tiru > > > > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De=A0: Konda, Tirumaleswar Reddy > > > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > > > Envoy=E9=A0: jeudi 7 novembre 2019 09:56 =C0=A0: BOUCADAIR Mohame= d > > > > > TGI/OLN; Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > > dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to > > > > > reach > > > > the > > > > > peer DOTS agent. In addition, these addresses can be used as > > > > > identifiers for authentication. > > > > > > > > > > We may want to add the following line to support the above lines: > > > > > [I-D.ietf-acme-ip] describes a new protocol that allows CA to > > > > > issue certificates for IP addresses. > > > > > > > > > > Cheers, > > > > > -Tiru > > > > > > > > > > > -----Original Message----- > > > > > > From: Dots On Behalf Of > > > > > > mohamed.boucadair@orange.com > > > > > > Sent: Thursday, November 7, 2019 12:19 PM > > > > > > To: Jon Shallow ; 'Valery Smyslov' > > > > > > ; dots@ietf.org; dots-chairs@ietf.org > > > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > CAUTION: External email. Do not click links or open attachments > > > > > > unless > > > > > you > > > > > > recognize the sender and know the content is safe. > > > > > > > > > > > > Hi Jon, > > > > > > > > > > > > OK, thanks. > > > > > > > > > > > > In order to further make things clear, I suggest to add this NE= W > > > > > > text in > > > > > the > > > > > > introduction of Section 5: > > > > > > > > > > > > The list of the IP addresses returned by DHCP servers is > typically > > > > > > used to fed the DOTS server selection procedure detailed in > > > > > > Section 4.3 of [I-D.ietf-dots-signal-channel] or to provide > DOTS > > > > > > agents with primary and backup IP addresses of their peer DO= TS > > > > > > agents. > > > > > > > > > > > > Would that be OK? > > > > > > > > > > > > I'm not sure the text need to hint any priority order set by th= e > > > > > > server > > > > > (backup > > > > > > case), though. The reason is that list will be ordered by the > > > > > > client > > > > > following HE. > > > > > > > > > > > > Cheers, > > > > > > Med > > > > > > > > > > > > > -----Message d'origine----- > > > > > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 =C0=A0: BOUCADAIR > > Mohamed > > > > > > TGI/OLN; > > > > > > > 'Valery Smyslov'; dots@ietf.org; dots- chairs@ietf.org Objet= =A0: > RE: > > > > > > > [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > Hi Med, > > > > > > > > > > > > > > Sorry - not thinking straight - yes, you are correct in that = a > > > > > > > single OPTION_Vx_DOTS_ADDRESS can contain multiple IP > > > > > > > addresses - must have glazed over the specific definition > > > > > > > before hitting the "it MUST only use the first instance" in > > > > > > > the next section (Client > > > > Behavior). > > > > > > > > > > > > > > Regards > > > > > > > > > > > > > > Jon > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > > > > mohamed.boucadair@orange.com > > > > > > > > Sent: 06 November 2019 15:52 > > > > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > > > > > dots-chairs@ietf.org > > > > > > > > Subject: Re: [Dots] WGLC on > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > Hi Jon, > > > > > > > > > > > > > > > > Thank you for the comments. > > > > > > > > > > > > > > > > Please see inline. > > > > > > > > > > > > > > > > Cheers, > > > > > > > > Med > > > > > > > > > > > > > > > > > -----Message d'origine----- De=A0: Dots > > > > > > > > > [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > > > > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 15:59 =C0=A0: 'Vale= ry > > > > > > > > > Smyslov'; dots@ietf.org; dots-chairs@ietf.org Objet=A0: R= e: > > > > > > > > > [Dots] WGLC on > > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > > > Hi All, > > > > > > > > > > > > > > > > > > I have read through draft-ietf-dots-server-discovery-05 > > > > > > > > > and think that > > > > > > > it > > > > > > > > > is > > > > > > > > > a good document. > > > > > > > > > > > > > > > > > > However, in particular with DHCPv(4|6), it is only > > > > > > > > > possible to use the first OPTION_Vx_DOTS_ADDRESS (5.1.3, > > 5.2.3). > > > > > > > > > > > > > > > > [Med] Yes > > > > > > > > > > > > > > > > If the server at the first address > > > > > > > > > is down / unavailable for whatever reason, it is not > > > > > > > > > possible to define > > > > > > > a > > > > > > > > > backup IP address as a secondary entry. Is it the > > > > > > > > > intention to not > > > > > > > allow > > > > > > > > > backup IP addresses? > > > > > > > > > > > > > > > > [Med] Hmm, that is possible given that an instance is > > > > > > > > designed to carry a > > > > > > > list > > > > > > > > of IP addresses. > > > > > > > > > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, > > the > > > > > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used > > > > > > > > to reach > > > > > > the > > > > > > > > ^^^^^^^^^^ > > > > > > > > peer DOTS agent. In addition, these addresses can be us= ed > as > > > > > > > > identifiers for authentication. > > > > > > > > > > > > > > > > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented > > > > > > > > > round-robin > > > > > > > > which > > > > > > > > > gives the possibility of backup IP addresses, but am not > > > > > > > > > sure whether > > > > > > > this > > > > > > > > > holds true for implementations for other Resource Records= . > > > > > > > > > If backup addresses are to be allowed, the draft is > > > > > > > > > unclear whether only the > > > > > > > first > > > > > > > > > A/AAAA RR is allowed, or each can be tested until the > > > > > > > > > first non-failure > > > > > > > is > > > > > > > > > found, or whether happy-eyeballs it to be invoked against > > > > > > > > > all of the IP addresses and then the final IP > > > > > > > > > preferentially chosen according to the > > > > > > > RR > > > > > > > > > returned order. > > > > > > > > > > > > > > > > [Med] Considerations related to address selection (includin= g > > > > > > > > HE) are not detailed here on purpose because this is not > > > > > > > > part of > > > discovery. > > > > > > > > > > > > > > > > > > > > > > > > > > Regards > > > > > > > > > > > > > > > > > > Jon > > > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] O= n > > > > > > > > > > Behalf Of > > > > > > > > Valery > > > > > > > > > > Smyslov > > > > > > > > > > Sent: 23 October 2019 08:37 > > > > > > > > > > To: dots@ietf.org > > > > > > > > > > Cc: dots-chairs@ietf.org > > > > > > > > > > Subject: [Dots] WGLC on > > > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > > > > > draft-ietf-dots-server- > > > > > > > > > > discovery-05. > > > > > > > > > > The version to be reviewed is here: > > > > > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > > > > > server-discovery-05.txt > > > > > > > > > > > > > > > > > > > > The WGLC will last for two weeks and will end on > > > > > > > > > > November the > > > > > 7th. > > > > > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > > > > > > > > > Regards, > > > > > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > Dots mailing list > > > > > > > > > > Dots@ietf.org > > > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > Dots mailing list > > > > > > > > > Dots@ietf.org > > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > Dots mailing list > > > > > > > > Dots@ietf.org > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > _______________________________________________ > > > > > > Dots mailing list > > > > > > Dots@ietf.org > > > > > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 02:03:49 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCCC2120114 for ; Thu, 7 Nov 2019 02:03:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Uj9BjK773Bn for ; Thu, 7 Nov 2019 02:03:44 -0800 (PST) Received: from us-smtp-delivery-140.mimecast.com (us-smtp-delivery-140.mimecast.com [216.205.24.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEB8912010D for ; Thu, 7 Nov 2019 02:03:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=mimecast20190606; t=1573121023; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5bIM9LIMbnLjqUfLyPT4UTug3lt6PSUrDtECFbE9vvE=; b=hFod44OSfnZH9SGew8cCPSO9feVzDZcRdu8J8vO3oaTXxAwoEuBNb8xs1jP+TH+bEFWziG KULGW32mj4R7zAaIWOkOKbZCVPlsqIIC7o+07BW4AUjtHV1UjQICl3WH98DO8vOPDX9q6g 2smJ6EpfL9OUNfDDBSAvesXdbeA1qXc= Received: from NAM04-SN1-obe.outbound.protection.outlook.com (mail-sn1nam04lp2058.outbound.protection.outlook.com [104.47.44.58]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-339-fhxMqV38P_2q59xT2Ue7Yg-1; Thu, 07 Nov 2019 05:03:41 -0500 Received: from MWHPR16MB1693.namprd16.prod.outlook.com (10.172.59.151) by MWHPR16MB1807.namprd16.prod.outlook.com (10.172.60.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Thu, 7 Nov 2019 10:03:39 +0000 Received: from MWHPR16MB1693.namprd16.prod.outlook.com ([fe80::a8c3:180f:e08c:c557]) by MWHPR16MB1693.namprd16.prod.outlook.com ([fe80::a8c3:180f:e08c:c557%5]) with mapi id 15.20.2430.020; Thu, 7 Nov 2019 10:03:39 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AdWJdJriVah9Pj1IRlOgUXigYgrLiQLPhj4AAAHYqgAAARUqAAAeQl6AAAQnISAAATMJAAAASiCQAAAv6oAAAAW/wAAAfFcAAABxCIA= Date: Thu, 7 Nov 2019 10:03:39 +0000 Message-ID: References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <1bb901d594b2$b4502b20$1cf08160$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031350F27@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1bf401d594be$6b379700$41a6c500$@jpshallow.com> <787AE7BB302AE849A7480A190F8B933031358608@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B723@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B770@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135B7A7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135B7A7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.4.0.45 dlp-reaction: no-action x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 113a2b16-be97-4b29-cfdb-08d76369c35f x-ms-traffictypediagnostic: MWHPR16MB1807: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(39850400004)(366004)(376002)(346002)(396003)(53754006)(32952001)(13464003)(189003)(199004)(966005)(6116002)(25786009)(102836004)(33656002)(14454004)(2201001)(26005)(11346002)(229853002)(99286004)(7736002)(478600001)(186003)(52536014)(86362001)(3846002)(53546011)(305945005)(81156014)(81166006)(76176011)(8936002)(7696005)(5660300002)(74316002)(2501003)(30864003)(8676002)(14444005)(9686003)(71190400001)(66066001)(6436002)(476003)(6506007)(80792005)(71200400001)(486006)(6306002)(446003)(2906002)(316002)(76116006)(256004)(64756008)(66556008)(66476007)(66446008)(6246003)(110136005)(55016002)(66946007)(5024004)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR16MB1807; H:MWHPR16MB1693.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: iYiLwnslJU4BhD5yLEHuwiCFIDmghMPWfozpt/zpVqzGYGK/iafobf/0v5tcYmC8L5y6jlXmTOSSTLYqR5+rT4v8pibnk0FseRsYWC5nhH19SnrS3JM95G9Urp5e5hsxpUmQoZXG75g2zg8QzPYarthzIMajLAQzlUs5R9tW5GbDhp9rgxR5TsOf1G2RRNsQZTvvB5jOXikd5alECPJTPiMQX/vTMvJwjcmCK5L7dOv5naiIxeB9cdKHrIC/I/+OScw/6qZvE3IDxt+/bUx3PQILmOHF4SZS1VROyY13xaP6IJBvoJsFjvGrNnWloN8wCUE1NGIGt9X4u2INxI3neLXdnnkLd9h2AnZC/w7RPhf4CJx/ZO0kUNgslwaEB01eHywcrR+bsRL13PcdX4gzZRvsvmIWSX7yrIhn6hUMpZwIRsd+/25EfdiUVukkdL7y3qc0Sr73PZdf1SUQAAEYxYfoHmJpHSFD8d4PgGLTz+s= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: mcafee.com X-MS-Exchange-CrossTenant-Network-Message-Id: 113a2b16-be97-4b29-cfdb-08d76369c35f X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 10:03:39.5027 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: E3XKB2muNvS+DqmLwD5dHnd0SnAqj2USoAG2hDxiRX++gorpUwLpuqWSnE+IkTXspilmPI7PXQyDhuVpcUwRkoB9z5X4JxdubePm8eQ8oJiNuBzFIdPSvHT1hEA9IbPa X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR16MB1807 X-MC-Unique: fhxMqV38P_2q59xT2Ue7Yg-1 X-Mimecast-Spam-Score: 0 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 10:03:48 -0000 > -----Original Message----- > From: mohamed.boucadair@orange.com > > Sent: Thursday, November 7, 2019 3:21 PM > To: Konda, Tirumaleswar Redd > ; Jon Shallow ietf@jpshallow.com>; 'Valery Smyslov' ; dots@ietf.org= ; > dots-chairs@ietf.org > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > CAUTION: External email. Do not click links or open attachments unless yo= u > recognize the sender and know the content is safe. >=20 > Re-, >=20 > Yeah. >=20 > My point is adding that citation/information does not change the behavior > nor the design in the draft. Okay. -Tiru >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Konda, Tirumaleswar Reddy > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > Envoy=E9=A0: jeudi 7 novembre 2019 10:40 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; Jon Shallow; 'Valery Smyslov'; > > dots@ietf.org; dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > draft-ietf-dots-server-discovery-05 > > > > > -----Original Message----- > > > From: mohamed.boucadair@orange.com > > > > > > Sent: Thursday, November 7, 2019 3:06 PM > > > To: Konda, Tirumaleswar Reddy > > > ; Jon Shallow > > ietf@jpshallow.com>; 'Valery Smyslov' ; > > dots@ietf.org; > > > dots-chairs@ietf.org > > > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > CAUTION: External email. Do not click links or open attachments > > > unless > > you > > > recognize the sender and know the content is safe. > > > > > > Yes, but I was referring to this part: > > > > > > few certification authorities issue server certificates based > > > on > > > > > > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > > ^^ > > > IP addresses, but preliminary evidence indicates that such > > > ^^^^^^^^^^^^ > > > certificates are a very small percentage (less than 1%) of issu= ed > > > certificates. > > > > It is part of the out of scope section 1.2 but ACME will make it more > > common. > > > > -Tiru > > > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Konda, Tirumaleswar Reddy > > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > > Envoy=E9=A0: jeudi 7 novembre 2019 10:32 =C0=A0: BOUCADAIR Mohamed > > > > TGI/OLN; Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > -----Original Message----- > > > > > From: mohamed.boucadair@orange.com > > > > > > > > > > Sent: Thursday, November 7, 2019 2:52 PM > > > > > To: Konda, Tirumaleswar Reddy > > > > > ; Jon Shallow > > > > ietf@jpshallow.com>; 'Valery Smyslov' ; > > > > dots@ietf.org; > > > > > dots-chairs@ietf.org > > > > > Subject: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > CAUTION: External email. Do not click links or open attachments > > > > > unless > > > > you > > > > > recognize the sender and know the content is safe. > > > > > > > > > > Hi Tiru, > > > > > > > > > > I'm not sure this reference is needed. We do already cite 6125 > > > > > to mention that CAs already issue certificates based on IP addres= ses. > > > > > > > > https://tools.ietf.org/html/rfc6125#section-1.7.2 says > > > > certificates based on IP addresses is out of scope. > > > > > > > > Cheers, > > > > -Tiru > > > > > > > > > > > > > > Cheers, > > > > > Med > > > > > > > > > > > -----Message d'origine----- > > > > > > De=A0: Konda, Tirumaleswar Reddy > > > > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > > > > Envoy=E9=A0: jeudi 7 novembre 2019 09:56 =C0=A0: BOUCADAIR Moha= med > > > > > > TGI/OLN; Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > > > dots-chairs@ietf.org Objet=A0: RE: [Dots] WGLC on > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS only, the > > > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are used to > > > > > > reach > > > > > the > > > > > > peer DOTS agent. In addition, these addresses can be used a= s > > > > > > identifiers for authentication. > > > > > > > > > > > > We may want to add the following line to support the above line= s: > > > > > > [I-D.ietf-acme-ip] describes a new protocol that allows CA to > > > > > > issue certificates for IP addresses. > > > > > > > > > > > > Cheers, > > > > > > -Tiru > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Dots On Behalf Of > > > > > > > mohamed.boucadair@orange.com > > > > > > > Sent: Thursday, November 7, 2019 12:19 PM > > > > > > > To: Jon Shallow ; 'Valery Smyslov' > > > > > > > ; dots@ietf.org; dots-chairs@ietf.org > > > > > > > Subject: Re: [Dots] WGLC on > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > CAUTION: External email. Do not click links or open > > > > > > > attachments unless > > > > > > you > > > > > > > recognize the sender and know the content is safe. > > > > > > > > > > > > > > Hi Jon, > > > > > > > > > > > > > > OK, thanks. > > > > > > > > > > > > > > In order to further make things clear, I suggest to add this > > > > > > > NEW text in > > > > > > the > > > > > > > introduction of Section 5: > > > > > > > > > > > > > > The list of the IP addresses returned by DHCP servers is > > typically > > > > > > > used to fed the DOTS server selection procedure detailed i= n > > > > > > > Section 4.3 of [I-D.ietf-dots-signal-channel] or to > > > > > > > provide > > DOTS > > > > > > > agents with primary and backup IP addresses of their peer = DOTS > > > > > > > agents. > > > > > > > > > > > > > > Would that be OK? > > > > > > > > > > > > > > I'm not sure the text need to hint any priority order set by > > > > > > > the server > > > > > > (backup > > > > > > > case), though. The reason is that list will be ordered by > > > > > > > the client > > > > > > following HE. > > > > > > > > > > > > > > Cheers, > > > > > > > Med > > > > > > > > > > > > > > > -----Message d'origine----- De=A0: Jon Shallow > > > > > > > > [mailto:supjps-ietf@jpshallow.com] > > > > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 17:23 =C0=A0: BOUCADA= IR > > > Mohamed > > > > > > > TGI/OLN; > > > > > > > > 'Valery Smyslov'; dots@ietf.org; dots- chairs@ietf.org Obje= t=A0: > > RE: > > > > > > > > [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > Hi Med, > > > > > > > > > > > > > > > > Sorry - not thinking straight - yes, you are correct in > > > > > > > > that a single OPTION_Vx_DOTS_ADDRESS can contain multiple > > > > > > > > IP addresses - must have glazed over the specific > > > > > > > > definition before hitting the "it MUST only use the first > > > > > > > > instance" in the next section (Client > > > > > Behavior). > > > > > > > > > > > > > > > > Regards > > > > > > > > > > > > > > > > Jon > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > > > > > mohamed.boucadair@orange.com > > > > > > > > > Sent: 06 November 2019 15:52 > > > > > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; > > > > > > > > > dots-chairs@ietf.org > > > > > > > > > Subject: Re: [Dots] WGLC on > > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > > > Hi Jon, > > > > > > > > > > > > > > > > > > Thank you for the comments. > > > > > > > > > > > > > > > > > > Please see inline. > > > > > > > > > > > > > > > > > > Cheers, > > > > > > > > > Med > > > > > > > > > > > > > > > > > > > -----Message d'origine----- De=A0: Dots > > > > > > > > > > [mailto:dots-bounces@ietf.org] De la part de Jon > > > > > > > > > > Shallow Envoy=E9=A0: mercredi 6 novembre 2019 15:59 =C0= =A0: > > > > > > > > > > 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org O= bjet=A0: > Re: > > > > > > > > > > [Dots] WGLC on > > > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > > > > > Hi All, > > > > > > > > > > > > > > > > > > > > I have read through > > > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > and think that > > > > > > > > it > > > > > > > > > > is > > > > > > > > > > a good document. > > > > > > > > > > > > > > > > > > > > However, in particular with DHCPv(4|6), it is only > > > > > > > > > > possible to use the first OPTION_Vx_DOTS_ADDRESS > > > > > > > > > > (5.1.3, > > > 5.2.3). > > > > > > > > > > > > > > > > > > [Med] Yes > > > > > > > > > > > > > > > > > > If the server at the first address > > > > > > > > > > is down / unavailable for whatever reason, it is not > > > > > > > > > > possible to define > > > > > > > > a > > > > > > > > > > backup IP address as a secondary entry. Is it the > > > > > > > > > > intention to not > > > > > > > > allow > > > > > > > > > > backup IP addresses? > > > > > > > > > > > > > > > > > > [Med] Hmm, that is possible given that an instance is > > > > > > > > > designed to carry a > > > > > > > > list > > > > > > > > > of IP addresses. > > > > > > > > > > > > > > > > > > If the DHCP client receives OPTION_V6_DOTS_ADDRESS > > > > > > > > > only, > > > the > > > > > > > > > address(es) included in OPTION_V6_DOTS_ADDRESS are > > > > > > > > > used to reach > > > > > > > the > > > > > > > > > ^^^^^^^^^^ > > > > > > > > > peer DOTS agent. In addition, these addresses can be > > > > > > > > > used > > as > > > > > > > > > identifiers for authentication. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > With DNS, I know that A/AAAA records can be presented > > > > > > > > > > round-robin > > > > > > > > > which > > > > > > > > > > gives the possibility of backup IP addresses, but am > > > > > > > > > > not sure whether > > > > > > > > this > > > > > > > > > > holds true for implementations for other Resource Recor= ds. > > > > > > > > > > If backup addresses are to be allowed, the draft is > > > > > > > > > > unclear whether only the > > > > > > > > first > > > > > > > > > > A/AAAA RR is allowed, or each can be tested until the > > > > > > > > > > first non-failure > > > > > > > > is > > > > > > > > > > found, or whether happy-eyeballs it to be invoked > > > > > > > > > > against all of the IP addresses and then the final IP > > > > > > > > > > preferentially chosen according to the > > > > > > > > RR > > > > > > > > > > returned order. > > > > > > > > > > > > > > > > > > [Med] Considerations related to address selection > > > > > > > > > (including > > > > > > > > > HE) are not detailed here on purpose because this is not > > > > > > > > > part of > > > > discovery. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards > > > > > > > > > > > > > > > > > > > > Jon > > > > > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > > > > From: Dots > > > > > > > > > > > [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf > > > > > > > > > > > Of > > > > > > > > > Valery > > > > > > > > > > > Smyslov > > > > > > > > > > > Sent: 23 October 2019 08:37 > > > > > > > > > > > To: dots@ietf.org > > > > > > > > > > > Cc: dots-chairs@ietf.org > > > > > > > > > > > Subject: [Dots] WGLC on > > > > > > > > > > > draft-ietf-dots-server-discovery-05 > > > > > > > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) > > > > > > > > > > > for > > > > > > > > > > draft-ietf-dots-server- > > > > > > > > > > > discovery-05. > > > > > > > > > > > The version to be reviewed is here: > > > > > > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > > > > > > server-discovery-05.txt > > > > > > > > > > > > > > > > > > > > > > The WGLC will last for two weeks and will end on > > > > > > > > > > > November the > > > > > > 7th. > > > > > > > > > > > Please send your comments to the list before this dat= e. > > > > > > > > > > > > > > > > > > > > > > Regards, > > > > > > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > > Dots mailing list > > > > > > > > > > > Dots@ietf.org > > > > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > Dots mailing list > > > > > > > > > > Dots@ietf.org > > > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > Dots mailing list > > > > > > > > > Dots@ietf.org > > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Dots mailing list > > > > > > > Dots@ietf.org > > > > > > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 02:39:30 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAC1D120111; Thu, 7 Nov 2019 02:39:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D1oxsrauD1FN; Thu, 7 Nov 2019 02:39:26 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D6AC120103; Thu, 7 Nov 2019 02:39:26 -0800 (PST) Received: from mail2.jpshallow.com ([192.168.0.3] helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.92.3) (envelope-from ) id 1iSfCF-00012S-Uf; Thu, 07 Nov 2019 10:39:24 +0000 From: "Jon Shallow" To: , "'Valery Smyslov'" , , References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca401d59549$6839d730$38ad8590$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Thu, 7 Nov 2019 10:39:18 -0000 Message-ID: <1cbb01d59557$9bfb78e0$d3f26aa0$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQQIoyNJKAgLNmFMCZGGj2AN/UZNvqApiUYA= Content-Language: en-gb Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 10:39:29 -0000 Hi Med, Happy Eyeballs worked fine with me with the Call Home DOTS server = initiating the DTLS and TLS sessions. Heartbeats work, but I have not tested them under stress / loss = conditions. I will try to get that tested tomorrow. In terms of the text I mis-read, perhaps it could be partially = re-written OLD " If TCP is used, the Call Home DOTS server begins by initiating a TCP connection to the Call Home DOTS client. Using this TCP connection, the Call Home DOTS server initiates a TLS connection to the Call Home DOTS client." NEW " If TCP is used, the Call Home DOTS server begins by initiating a TCP connection to the Call Home DOTS client. Once connected, the Call = Home DOTS server continues to initiate a TLS connection to the Call Home DOTS client." Regards Jon > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of mohamed.boucadair@orange.com > Sent: 07 November 2019 09:34 > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Re-, >=20 > Thank you, Jon. >=20 > BTW, I don't see any issue about HE and HBs for the call home. I = assume that > no problem was encountered to implement it. >=20 > Cheers, > Med > > -----Message d'origine----- > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > Envoy=E9=A0: jeudi 7 novembre 2019 09:58 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; = dots- > > chairs@ietf.org > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Hi Med, > > > > See inline. > > > > Regards > > > > Jon > > > > > -----Original Message----- > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > mohamed.boucadair@orange.com > > > Sent: 07 November 2019 07:12 > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; = dots-chairs@ietf.org > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > Hi Jon, > > > > > > Thank you for sharing this cool news. > > > > > > Please see inline. > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon = Shallow > > > > Envoy=E9=A0: mercredi 6 novembre 2019 18:13 > > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > Hi All, > > > > > > > > I have done a preliminary working implementation of DOTS = Call-Home > - > > > there > > > > is still some little used functionality to finish off. > > > > > > > > *** Issue # 1 - TCP TLS sessions > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > 06#section- > > > 3..1 > > > > > > > > " If UDP transport is used, the Call Home DOTS server begins by > > > > initiating a DTLS connection to the Call Home DOTS client." > > > > > > > > This works as expected where the UDP + DTLS layer roles are switched. > > > > > > > > " If TCP is used, the Call Home DOTS server begins by initiating = a > > > > TCP connection to the Call Home DOTS client. Using this TCP > > > > connection, the Call Home DOTS server initiates a TLS connection > > > > to the Call Home DOTS client." > > > > > > > > With the current libcoap implementation, I am unable to create a CoAP > > > > session using TLS on an existing TCP connection - so the DOTS = Client is > > > > unable to accept an incoming TCP session and then initiate TLS > > integrated > > > > with the CoAP session. > > > > > > [Med] Why the client would initiate the TLS session? Do you want = to test > > a > > > RFC8071-like approach? > > > > Jon> Yesterday was one of those days - word blindness translated = "the > Call > > Home DOTS server initiates a TLS connection to the Call Home DOTS > client." > > as a separate action to "the Call Home DOTS client initiates a TLS > > connection to the Call Home DOTS server.". The actual text is = correct. > > > > > > > > I agree that RFC8071 only switches the TCP layer > > > > roles. > > > > > > [Med] Yes. > > > > > > However all works if the TCP + TLS layer roles are switched - in > > > > the > > > > same way that UDP + DTLS work. > > > > > > [Med] Great. We went for this approach because we preserve the = same > role > > > for both DTLS and TLS: > > > > > > +-----------+ +-----------+ > > > | Call Home | | Call Home | > > > | DOTS | | DOTS | > > > | server | | client | > > > +-----+-----+ +-----+-----+ > > > (D)TLS client (D)TLS server > > > > > > > > > > > Enhancing the libcoap code to support only the TCP layer being > switched > > is > > > > doable - but have no idea as to whether other CoAP = implementations > can > > > > handle this specific requirement. > > > > > > [Med] Do we really need to do that? > > > > Jon> No. It was my mis-reading of the text that caused this = confusion. > > > > > > > > > > > > > *** Not (yet) Implemented #1 - Redirected Signalling > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > 06#section- > > > > 3.2. > > > > 2 > > > > > > > > I do not see any issues here. > > > > > > > > *** Not (yet) implemented #2 - New Conflict Cause 4 > > > > > > > > I do not see any issues here. > > > > > > > > *** Not (yet) Implemented #3 - Address sharing considerations > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > 06#section- > > > > 3.3. > > > > 2 > > > > > > > > I do not see any issues here - just need to interface with the > > translators > > > > to get the appropriate information. > > > > > > > > Regards > > > > > > > > Jon > > > > > > > > > -----Original Message----- > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On = Behalf Of > > > Valery > > > > > Smyslov > > > > > Sent: 23 October 2019 08:36 > > > > > To: dots@ietf.org > > > > > Cc: dots-chairs@ietf.org > > > > > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > Hi, > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > draft-ietf-dots-signal- > > > > > call-home-06. > > > > > The version to be reviewed is here: > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > signal-call-home-06.txt > > > > > > > > > > The WGLC will last for two weeks and will end on November the = 7th. > > > > > Please send your comments to the list before this date. > > > > > > > > > > Regards, > > > > > Frank & Valery. > > > > > > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 04:15:57 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D665512006F; Thu, 7 Nov 2019 04:15:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RpO9az-URWak; Thu, 7 Nov 2019 04:15:52 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CF82120178; Thu, 7 Nov 2019 04:15:52 -0800 (PST) Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id 4782Rq1qTbzBrr6; Thu, 7 Nov 2019 13:15:51 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.104]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id 4782Rq0mkGzBrLd; Thu, 7 Nov 2019 13:15:51 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5F.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 13:15:50 +0100 From: To: Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQQIoyNJKAgLNmFMCZGGj2AN/UZNvqApiUYCAABzWwA== Date: Thu, 7 Nov 2019 12:15:49 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135B8A2@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca401d59549$6839d730$38ad8590$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1cbb01d59557$9bfb78e0$d3f26aa0$@jpshallow.com> In-Reply-To: <1cbb01d59557$9bfb78e0$d3f26aa0$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 12:15:56 -0000 Re-, The NEW wording works for me.=20 Thank you.=20 Cheers, Med > -----Message d'origine----- > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Envoy=E9=A0: jeudi 7 novembre 2019 11:39 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; dots- > chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Hi Med, >=20 > Happy Eyeballs worked fine with me with the Call Home DOTS server > initiating > the DTLS and TLS sessions. >=20 > Heartbeats work, but I have not tested them under stress / loss condition= s. > I will try to get that tested tomorrow. >=20 > In terms of the text I mis-read, perhaps it could be partially re-written >=20 > OLD >=20 > " If TCP is used, the Call Home DOTS server begins by initiating a > TCP connection to the Call Home DOTS client. Using this TCP > connection, the Call Home DOTS server initiates a TLS connection > to the Call Home DOTS client." >=20 > NEW >=20 > " If TCP is used, the Call Home DOTS server begins by initiating a > TCP connection to the Call Home DOTS client. Once connected, the Call > Home > DOTS server continues to initiate a TLS connection > to the Call Home DOTS client." >=20 > Regards >=20 > Jon >=20 > > -----Original Message----- > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > mohamed.boucadair@orange.com > > Sent: 07 November 2019 09:34 > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Re-, > > > > Thank you, Jon. > > > > BTW, I don't see any issue about HE and HBs for the call home. I assume > that > > no problem was encountered to implement it. > > > > Cheers, > > Med > > > -----Message d'origine----- > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > Envoy=E9=A0: jeudi 7 novembre 2019 09:58 > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; d= ots- > > > chairs@ietf.org > > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > Hi Med, > > > > > > See inline. > > > > > > Regards > > > > > > Jon > > > > > > > -----Original Message----- > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > mohamed.boucadair@orange.com > > > > Sent: 07 November 2019 07:12 > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots- > chairs@ietf.org > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > Hi Jon, > > > > > > > > Thank you for sharing this cool news. > > > > > > > > Please see inline. > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shal= low > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 18:13 > > > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > > > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > Hi All, > > > > > > > > > > I have done a preliminary working implementation of DOTS Call-Hom= e > > - > > > > there > > > > > is still some little used functionality to finish off. > > > > > > > > > > *** Issue # 1 - TCP TLS sessions > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > 06#section- > > > > 3..1 > > > > > > > > > > " If UDP transport is used, the Call Home DOTS server begins by > > > > > initiating a DTLS connection to the Call Home DOTS client." > > > > > > > > > > This works as expected where the UDP + DTLS layer roles are > switched. > > > > > > > > > > " If TCP is used, the Call Home DOTS server begins by initiating = a > > > > > TCP connection to the Call Home DOTS client. Using this TCP > > > > > connection, the Call Home DOTS server initiates a TLS connection > > > > > to the Call Home DOTS client." > > > > > > > > > > With the current libcoap implementation, I am unable to create a > CoAP > > > > > session using TLS on an existing TCP connection - so the DOTS > Client > is > > > > > unable to accept an incoming TCP session and then initiate TLS > > > integrated > > > > > with the CoAP session. > > > > > > > > [Med] Why the client would initiate the TLS session? Do you want to > test > > > a > > > > RFC8071-like approach? > > > > > > Jon> Yesterday was one of those days - word blindness translated "th= e > > Call > > > Home DOTS server initiates a TLS connection to the Call Home DOTS > > client." > > > as a separate action to "the Call Home DOTS client initiates a TLS > > > connection to the Call Home DOTS server.". The actual text is correc= t. > > > > > > > > > > > I agree that RFC8071 only switches the TCP layer > > > > > roles. > > > > > > > > [Med] Yes. > > > > > > > > However all works if the TCP + TLS layer roles are switched - in > > > > > the > > > > > same way that UDP + DTLS work. > > > > > > > > [Med] Great. We went for this approach because we preserve the same > > role > > > > for both DTLS and TLS: > > > > > > > > +-----------+ +-----------+ > > > > | Call Home | | Call Home | > > > > | DOTS | | DOTS | > > > > | server | | client | > > > > +-----+-----+ +-----+-----+ > > > > (D)TLS client (D)TLS server > > > > > > > > > > > > > > Enhancing the libcoap code to support only the TCP layer being > > switched > > > is > > > > > doable - but have no idea as to whether other CoAP implementation= s > > can > > > > > handle this specific requirement. > > > > > > > > [Med] Do we really need to do that? > > > > > > Jon> No. It was my mis-reading of the text that caused this confusio= n. > > > > > > > > > > > > > > > > > *** Not (yet) Implemented #1 - Redirected Signalling > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > 06#section- > > > > > 3.2. > > > > > 2 > > > > > > > > > > I do not see any issues here. > > > > > > > > > > *** Not (yet) implemented #2 - New Conflict Cause 4 > > > > > > > > > > I do not see any issues here. > > > > > > > > > > *** Not (yet) Implemented #3 - Address sharing considerations > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > 06#section- > > > > > 3.3. > > > > > 2 > > > > > > > > > > I do not see any issues here - just need to interface with the > > > translators > > > > > to get the appropriate information. > > > > > > > > > > Regards > > > > > > > > > > Jon > > > > > > > > > > > -----Original Message----- > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf > Of > > > > Valery > > > > > > Smyslov > > > > > > Sent: 23 October 2019 08:36 > > > > > > To: dots@ietf.org > > > > > > Cc: dots-chairs@ietf.org > > > > > > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > Hi, > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > draft-ietf-dots-signal- > > > > > > call-home-06. > > > > > > The version to be reviewed is here: > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > signal-call-home-06.txt > > > > > > > > > > > > The WGLC will last for two weeks and will end on November the > 7th. > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > Regards, > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > Dots mailing list > > > > > > Dots@ietf.org > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 04:37:35 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B57C120251; Thu, 7 Nov 2019 04:37:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UPC863pPUvSf; Thu, 7 Nov 2019 04:37:32 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79E37120152; Thu, 7 Nov 2019 04:37:32 -0800 (PST) Received: from opfedar05.francetelecom.fr (unknown [xx.xx.xx.7]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 4782wq28Txz2xjg; Thu, 7 Nov 2019 13:37:31 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.38]) by opfedar05.francetelecom.fr (ESMTP service) with ESMTP id 4782wq181pz2xCf; Thu, 7 Nov 2019 13:37:31 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5C.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 13:37:30 +0100 From: To: Valery Smyslov , "dots@ietf.org" CC: "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AdWJdJriiJ1zeDaA3CAo0XFND0KMCQL8ttqw Date: Thu, 7 Nov 2019 12:37:30 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135B8E6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> In-Reply-To: <011d01d58974$b70298b0$2507ca10$@smyslov.net> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 12:37:34 -0000 Hi Valery, all,=20 Is there any objection if we move I-D.ietf-dots-signal-call-home and I-D.ie= tf-dots-signal-channel to be informative references.=20 We have listed I-D.ietf-dots-signal-channel as normative because we have th= is text in Section 8: "DOTS agents must authenticate each other using (D)TLS before a DOTS session is considered valid according to the [I-D.ietf-dots-signal-channel]." But I'm afraid this is not appropriate given that the above is not a NEW re= quirement but a reminder of the behavior in I-D.ietf-dots-signal-channel. W= e may call out this better by using this text:=20 NEW: As a reminder, DOTS agents must authenticate each other using (D)TLS before a DOTS session is considered valid according to the [I-D.ietf-dots-signal-channel]. Any objections?=20 Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Valery Smyslov > Envoy=E9=A0: mercredi 23 octobre 2019 09:37 > =C0=A0: dots@ietf.org > Cc=A0: dots-chairs@ietf.org > Objet=A0: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi, >=20 > this message starts a Work Group Last Call (WGLC) for draft-ietf-dots- > server-discovery-05. > The version to be reviewed is here: https://www.ietf.org/id/draft-ietf- > dots-server-discovery-05.txt >=20 > The WGLC will last for two weeks and will end on November the 7th. > Please send your comments to the list before this date. >=20 > Regards, > Frank & Valery. >=20 >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 05:15:12 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A1A2120820; Thu, 7 Nov 2019 05:15:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.499 X-Spam-Level: X-Spam-Status: No, score=-0.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_SORBS_WEB=1.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=smyslov.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0tTKyJnnU-Ha; Thu, 7 Nov 2019 05:15:09 -0800 (PST) Received: from direct.host-care.com (direct.host-care.com [198.136.54.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC33C1200F9; Thu, 7 Nov 2019 05:15:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smyslov.net ; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :Date:Subject:In-Reply-To:References:Cc:To:From:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=FUfpX53q6g4vuz7b0Wj9gYox9Tmu3jWFhCgsUzgTA9Q=; b=Va8t5MWRRr2Wxg+16Q1+FJYfRr UL38LQonfs7AjvRv0SAxaVRmZKYig56Gy1GZ4a2X72Bh9r+PEjRp+LD3Tj2kMzUZazLDT0SkjOw6o w1CXUmZF+fasBi+SzfUodAw1EeFogHZoJO3a+HlTU55FfxJ+3iwH7FcMzvFSQKZuqR2JO/+TdXMbU 33/VGJNyINTDW7Q2eWjjNTPfzEGnZQruc1fKzMFSsbWyr5PquSAycFwbAcpl5snIO6qPcii52IX9K kVz6cZ5OpQnGAahEZzQkiBM0InaGoS08O+W0VojRz7aQFFF77jPbMGNdSs8LjePItEfJC1nEo8LPQ OWC3yGXw==; Received: from [82.138.51.4] (port=54724 helo=buildpc) by direct.host-care.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.92) (envelope-from ) id 1iShcw-0003le-Ag; Thu, 07 Nov 2019 08:15:06 -0500 From: "Valery Smyslov" To: , Cc: References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <787AE7BB302AE849A7480A190F8B93303135B8E6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135B8E6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Thu, 7 Nov 2019 16:15:08 +0300 Message-ID: <082d01d5956d$627f4720$277dd560$@smyslov.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQJctfwqp6B7TZA= Content-Language: ru X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - direct.host-care.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - smyslov.net X-Get-Message-Sender-Via: direct.host-care.com: authenticated_id: valery@smyslov.net X-Authenticated-Sender: direct.host-care.com: valery@smyslov.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 13:15:10 -0000 Hi Med, this makes sense for signal-call-home, but why signal-channel? You currently directly reference it: The DOTS client (or the Call Home DOTS server) will then use the address selection specified in Section 4.3 of [I-D.ietf-dots-signal-channel] to identify the IP address of the peer DOTS server (or Call Home Client). Regards, Valery. > Hi Valery, all, >=20 > Is there any objection if we move I-D.ietf-dots-signal-call-home and = I-D.ietf-dots-signal-channel to be > informative references. >=20 > We have listed I-D.ietf-dots-signal-channel as normative because we = have this text in Section 8: >=20 > "DOTS agents must > authenticate each other using (D)TLS before a DOTS session is > considered valid according to the [I-D.ietf-dots-signal-channel]." >=20 > But I'm afraid this is not appropriate given that the above is not a = NEW requirement but a reminder of the > behavior in I-D.ietf-dots-signal-channel. We may call out this better = by using this text: >=20 > NEW: > As a reminder, DOTS agents must > authenticate each other using (D)TLS before a DOTS session is > considered valid according to the [I-D.ietf-dots-signal-channel]. >=20 > Any objections? >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Valery = Smyslov > > Envoy=E9=A0: mercredi 23 octobre 2019 09:37 > > =C0=A0: dots@ietf.org > > Cc=A0: dots-chairs@ietf.org > > Objet=A0: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > Hi, > > > > this message starts a Work Group Last Call (WGLC) for = draft-ietf-dots- > > server-discovery-05. > > The version to be reviewed is here: = https://www.ietf.org/id/draft-ietf- > > dots-server-discovery-05.txt > > > > The WGLC will last for two weeks and will end on November the 7th. > > Please send your comments to the list before this date. > > > > Regards, > > Frank & Valery. > > > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 05:46:03 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 400B0120045; Thu, 7 Nov 2019 05:46:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0a8XomVbR2UR; Thu, 7 Nov 2019 05:46:00 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1F5712084A; Thu, 7 Nov 2019 05:45:59 -0800 (PST) Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id 4784Rp19GKzBrtN; Thu, 7 Nov 2019 14:45:58 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.42]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 4784Rp01HNz5vNB; Thu, 7 Nov 2019 14:45:58 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42%21]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 14:45:57 +0100 From: To: Valery Smyslov , "dots@ietf.org" CC: "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQJctfwqp6B7TZCAAAMy8A== Date: Thu, 7 Nov 2019 13:45:57 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135CA81@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <787AE7BB302AE849A7480A190F8B93303135B8E6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <082d01d5956d$627f4720$277dd560$@smyslov.net> In-Reply-To: <082d01d5956d$627f4720$277dd560$@smyslov.net> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 13:46:01 -0000 Re-, Thank you, Valery. As per the text you quoted, it should be put it its context: The design allows to terminate the base DOTS channels and DOTS Call Home on the same or distinct peer DOTS agents. If distinct peer DOTS agents are deployed, the DHCP option can return, for example, a list ^^^^^^^^^^^^^^=20 of IP addresses to a requesting DOTS agent. This list includes the IP address to be used for the base DOTS channels and the IP address for the DOTS Call Home. The DOTS client (or the Call Home DOTS server) will then use the address selection specified in Section 4.3 of [I-D.ietf-dots-signal-channel] to identify the IP address of the peer DOTS server (or Call Home Client). It does only exemplify what an agent may do. The text you quoted does not u= se any normative language. Cheers, Med > -----Message d'origine----- > De=A0: Valery Smyslov [mailto:valery@smyslov.net] > Envoy=E9=A0: jeudi 7 novembre 2019 14:15 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; dots@ietf.org > Cc=A0: dots-chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi Med, >=20 > this makes sense for signal-call-home, but why signal-channel? > You currently directly reference it: >=20 > The DOTS client (or the Call Home DOTS > server) will then use the address selection specified in Section 4.3 > of [I-D.ietf-dots-signal-channel] to identify the IP address of the > peer DOTS server (or Call Home Client). >=20 > Regards, > Valery. >=20 > > Hi Valery, all, > > > > Is there any objection if we move I-D.ietf-dots-signal-call-home and I- > D.ietf-dots-signal-channel to be > > informative references. > > > > We have listed I-D.ietf-dots-signal-channel as normative because we hav= e > this text in Section 8: > > > > "DOTS agents must > > authenticate each other using (D)TLS before a DOTS session is > > considered valid according to the [I-D.ietf-dots-signal-channel]." > > > > But I'm afraid this is not appropriate given that the above is not a NE= W > requirement but a reminder of the > > behavior in I-D.ietf-dots-signal-channel. We may call out this better b= y > using this text: > > > > NEW: > > As a reminder, DOTS agents must > > authenticate each other using (D)TLS before a DOTS session is > > considered valid according to the [I-D.ietf-dots-signal-channel]. > > > > Any objections? > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Valery Smysl= ov > > > Envoy=E9=A0: mercredi 23 octobre 2019 09:37 > > > =C0=A0: dots@ietf.org > > > Cc=A0: dots-chairs@ietf.org > > > Objet=A0: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > Hi, > > > > > > this message starts a Work Group Last Call (WGLC) for draft-ietf-dots= - > > > server-discovery-05. > > > The version to be reviewed is here: https://www.ietf.org/id/draft-iet= f- > > > dots-server-discovery-05.txt > > > > > > The WGLC will last for two weeks and will end on November the 7th. > > > Please send your comments to the list before this date. > > > > > > Regards, > > > Frank & Valery. > > > > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 06:26:38 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E8D7120821; Thu, 7 Nov 2019 06:26:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.499 X-Spam-Level: X-Spam-Status: No, score=-0.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_SORBS_WEB=1.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=smyslov.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2-avBl8f7wBq; Thu, 7 Nov 2019 06:26:35 -0800 (PST) Received: from direct.host-care.com (direct.host-care.com [198.136.54.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0AB13120232; Thu, 7 Nov 2019 06:26:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smyslov.net ; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :Date:Subject:In-Reply-To:References:Cc:To:From:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=2HpTVJSAZV/lvH+GdaL1R6/p2uUejBkjgUbyobv/awA=; b=Xl8VNs/5Vp++Gq3cJCOA+rjq3r OXPT98dJUE5AJj+oaqUPBOpmhp0fJyD1GyegvWORHFibtZvDmzfWbTnF84hmVHZe9mgNNHHGWTgkm w0C/i1xlyYlQOsVmdQ7B36BoYGbvfQugUyYMUdtTUboIw1zqUmvQ5qKgJmc3NM6sa5iG4fB/oCGUC 2kuOi/QP7DciMhx+LyL/50WdGx4scJmalOo6eB0tP3DvNbVh8cosWS7oUQ7T86DfRge1NNufoLn9z d37euqBrUtMNnBE/uUypeJNbZHSL6/S3n6TV84pkmsE9kG8V5WM58U5EJrDRxVrlz9PQtSOvpDvD/ zjJ7D8wQ==; Received: from [82.138.51.4] (port=3071 helo=buildpc) by direct.host-care.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.92) (envelope-from ) id 1iSik4-0007B8-6M; Thu, 07 Nov 2019 09:26:32 -0500 From: "Valery Smyslov" To: , Cc: References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <787AE7BB302AE849A7480A190F8B93303135B8E6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <082d01d5956d$627f4720$277dd560$@smyslov.net> <787AE7BB302AE849A7480A190F8B93303135CA81@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135CA81@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Thu, 7 Nov 2019 17:26:34 +0300 Message-ID: <083701d59577$5d0bd100$17237300$@smyslov.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQJctfwqAkbP+1QCkdMBS6d5y18Q Content-Language: ru X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - direct.host-care.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - smyslov.net X-Get-Message-Sender-Via: direct.host-care.com: authenticated_id: valery@smyslov.net X-Authenticated-Sender: direct.host-care.com: valery@smyslov.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 14:26:36 -0000 Hi Med, if you think that readers of this document are not required to read and = understand=20 signal-channel in order to implement this spec, then it's perfectly OK = to make it Informative. Regards, Valery. > Thank you, Valery. >=20 > As per the text you quoted, it should be put it its context: >=20 > The design allows to terminate the base DOTS channels and DOTS Call > Home on the same or distinct peer DOTS agents. If distinct peer = DOTS > agents are deployed, the DHCP option can return, for example, a = list > ^^^^^^^^^^^^^^ > of IP addresses to a requesting DOTS agent. This list includes the > IP address to be used for the base DOTS channels and the IP address > for the DOTS Call Home. The DOTS client (or the Call Home DOTS > server) will then use the address selection specified in Section = 4.3 > of [I-D.ietf-dots-signal-channel] to identify the IP address of the > peer DOTS server (or Call Home Client). >=20 > It does only exemplify what an agent may do. The text you quoted does = not use any normative language. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Valery Smyslov [mailto:valery@smyslov.net] > > Envoy=E9=A0: jeudi 7 novembre 2019 14:15 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; dots@ietf.org > > Cc=A0: dots-chairs@ietf.org > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > Hi Med, > > > > this makes sense for signal-call-home, but why signal-channel? > > You currently directly reference it: > > > > The DOTS client (or the Call Home DOTS > > server) will then use the address selection specified in Section = 4.3 > > of [I-D.ietf-dots-signal-channel] to identify the IP address of = the > > peer DOTS server (or Call Home Client). > > > > Regards, > > Valery. > > > > > Hi Valery, all, > > > > > > Is there any objection if we move I-D.ietf-dots-signal-call-home = and I- > > D.ietf-dots-signal-channel to be > > > informative references. > > > > > > We have listed I-D.ietf-dots-signal-channel as normative because = we have > > this text in Section 8: > > > > > > "DOTS agents must > > > authenticate each other using (D)TLS before a DOTS session is > > > considered valid according to the = [I-D.ietf-dots-signal-channel]." > > > > > > But I'm afraid this is not appropriate given that the above is not = a NEW > > requirement but a reminder of the > > > behavior in I-D.ietf-dots-signal-channel. We may call out this = better by > > using this text: > > > > > > NEW: > > > As a reminder, DOTS agents must > > > authenticate each other using (D)TLS before a DOTS session is > > > considered valid according to the = [I-D.ietf-dots-signal-channel]. > > > > > > Any objections? > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Valery = Smyslov > > > > Envoy=E9=A0: mercredi 23 octobre 2019 09:37 > > > > =C0=A0: dots@ietf.org > > > > Cc=A0: dots-chairs@ietf.org > > > > Objet=A0: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > Hi, > > > > > > > > this message starts a Work Group Last Call (WGLC) for = draft-ietf-dots- > > > > server-discovery-05. > > > > The version to be reviewed is here: = https://www.ietf.org/id/draft-ietf- > > > > dots-server-discovery-05.txt > > > > > > > > The WGLC will last for two weeks and will end on November the = 7th. > > > > Please send your comments to the list before this date. > > > > > > > > Regards, > > > > Frank & Valery. > > > > > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Nov 7 06:37:16 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5478120824; Thu, 7 Nov 2019 06:37:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YwhmUXIntAlx; Thu, 7 Nov 2019 06:37:12 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C250120232; Thu, 7 Nov 2019 06:37:12 -0800 (PST) Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr21.francetelecom.fr (ESMTP service) with ESMTP id 4785Zt4f56z5vqW; Thu, 7 Nov 2019 15:37:10 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.45]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id 4785Zt43VnzDq7x; Thu, 7 Nov 2019 15:37:10 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM42.corporate.adroot.infra.ftgroup ([fe80::1c8e:403e:fbea:5835%21]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 15:37:10 +0100 From: To: Valery Smyslov , "dots@ietf.org" CC: "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQJctfwqAkbP+1QCkdMBS6d5y18QgAADa+A= Date: Thu, 7 Nov 2019 14:37:09 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135DB8E@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <787AE7BB302AE849A7480A190F8B93303135B8E6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <082d01d5956d$627f4720$277dd560$@smyslov.net> <787AE7BB302AE849A7480A190F8B93303135CA81@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <083701d59577$5d0bd100$17237300$@smyslov.net> In-Reply-To: <083701d59577$5d0bd100$17237300$@smyslov.net> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 14:37:15 -0000 Re-, I confirm. Thank you for looking into this. I will proceed with the change unless there is objection.=20 Cheers, Med > -----Message d'origine----- > De=A0: Valery Smyslov [mailto:valery@smyslov.net] > Envoy=E9=A0: jeudi 7 novembre 2019 15:27 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; dots@ietf.org > Cc=A0: dots-chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi Med, >=20 > if you think that readers of this document are not required to read and > understand > signal-channel in order to implement this spec, then it's perfectly OK to > make it Informative. >=20 > Regards, > Valery. >=20 >=20 > > Thank you, Valery. > > > > As per the text you quoted, it should be put it its context: > > > > The design allows to terminate the base DOTS channels and DOTS Call > > Home on the same or distinct peer DOTS agents. If distinct peer DOT= S > > agents are deployed, the DHCP option can return, for example, a list > > ^^^^^^^^^^^^^^ > > of IP addresses to a requesting DOTS agent. This list includes the > > IP address to be used for the base DOTS channels and the IP address > > for the DOTS Call Home. The DOTS client (or the Call Home DOTS > > server) will then use the address selection specified in Section 4.3 > > of [I-D.ietf-dots-signal-channel] to identify the IP address of the > > peer DOTS server (or Call Home Client). > > > > It does only exemplify what an agent may do. The text you quoted does n= ot > use any normative language. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Valery Smyslov [mailto:valery@smyslov.net] > > > Envoy=E9=A0: jeudi 7 novembre 2019 14:15 > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; dots@ietf.org > > > Cc=A0: dots-chairs@ietf.org > > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > Hi Med, > > > > > > this makes sense for signal-call-home, but why signal-channel? > > > You currently directly reference it: > > > > > > The DOTS client (or the Call Home DOTS > > > server) will then use the address selection specified in Section 4= .3 > > > of [I-D.ietf-dots-signal-channel] to identify the IP address of th= e > > > peer DOTS server (or Call Home Client). > > > > > > Regards, > > > Valery. > > > > > > > Hi Valery, all, > > > > > > > > Is there any objection if we move I-D.ietf-dots-signal-call-home an= d > I- > > > D.ietf-dots-signal-channel to be > > > > informative references. > > > > > > > > We have listed I-D.ietf-dots-signal-channel as normative because we > have > > > this text in Section 8: > > > > > > > > "DOTS agents must > > > > authenticate each other using (D)TLS before a DOTS session is > > > > considered valid according to the [I-D.ietf-dots-signal-channel]= ." > > > > > > > > But I'm afraid this is not appropriate given that the above is not = a > NEW > > > requirement but a reminder of the > > > > behavior in I-D.ietf-dots-signal-channel. We may call out this bett= er > by > > > using this text: > > > > > > > > NEW: > > > > As a reminder, DOTS agents must > > > > authenticate each other using (D)TLS before a DOTS session is > > > > considered valid according to the [I-D.ietf-dots-signal-channel]= . > > > > > > > > Any objections? > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Valery > Smyslov > > > > > Envoy=E9=A0: mercredi 23 octobre 2019 09:37 > > > > > =C0=A0: dots@ietf.org > > > > > Cc=A0: dots-chairs@ietf.org > > > > > Objet=A0: [Dots] WGLC on draft-ietf-dots-server-discovery-05 > > > > > > > > > > Hi, > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for draft-ietf- > dots- > > > > > server-discovery-05. > > > > > The version to be reviewed is here: https://www.ietf.org/id/draft= - > ietf- > > > > > dots-server-discovery-05.txt > > > > > > > > > > The WGLC will last for two weeks and will end on November the 7th= . > > > > > Please send your comments to the list before this date. > > > > > > > > > > Regards, > > > > > Frank & Valery. > > > > > > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots >=20 From nobody Thu Nov 7 23:58:26 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B79F612009E for ; Thu, 7 Nov 2019 23:58:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FePeFY9hkrTk for ; Thu, 7 Nov 2019 23:58:23 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CBC912003E for ; Thu, 7 Nov 2019 23:58:23 -0800 (PST) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id 478XhF6TpqzBrw6; Fri, 8 Nov 2019 08:58:21 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.48]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 478XhF5bjXz1xpx; Fri, 8 Nov 2019 08:58:21 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM32.corporate.adroot.infra.ftgroup ([fe80::81c9:5f:b9c5:1241%21]) with mapi id 14.03.0468.000; Fri, 8 Nov 2019 08:58:21 +0100 From: To: kaname nishizuka , "dots@ietf.org" Thread-Topic: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt Thread-Index: AQHVhZcTqLIZd9IRTUy9z3OirX19/adgIwpAgAey1gCAAEbBIIAY6Qew Date: Fri, 8 Nov 2019 07:58:20 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135F2E7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <317486f6-fbd7-2811-a58c-c5a826fb9e5e@nttv6.jp> <787AE7BB302AE849A7480A190F8B9330313445B0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313445B0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 07:58:26 -0000 SGkgS2FuYW1lLCANCg0KQXBvbG9naWVzIGZvciB0aGUgZGVsYXkgdG8gaGF2ZSB0aGlzIGRvbmUu DQoNClRoZSBkcmFmdCBub3RlcyB0aGUgZm9sbG93aW5nOg0KDQogICAgICBOb3RlczogKDEpIENo ZWNrIG5hbWluZyBjb25mbGljdCB0byBlYXNlIENCT1IgbWFwcGluZyAoZS5nLCBsb3ctDQogICAg ICBwZXJjZW50aWxlIGlzIGRlZmluZWQgYXMgeWFuZzpnYXVnZTY0LCBsaXN0LCBvciBjb250YWlu ZXIpLg0KICAgICAgRGlzdGluY3QgbmFtZXMgbWF5IGJlIGNvbnNpZGVyZWQuDQoNCkFsdGhvdWdo IHRoaXMgaXMgbm90IGFuIGlzc3VlIGluIFlBTkcsIEkgdXBkYXRlZCBzb21lIFlBTkcgYXR0cmli dXRlIG5hbWVzIHRvIGF2b2lkIGNib3IgbmFtaW5nIGNvbmZsaWN0cy4gVGhlIHVwZGF0ZWQgWUFO RyBtb2R1bGUgaXMgYXZhaWxhYmxlIGF0OiBodHRwczovL2dpdGh1Yi5jb20vYm91Y2FkYWlyL2Ry YWZ0LWRvdHMtdGVsZW1ldHJ5L2Jsb2IvbWFzdGVyL2RyYWZ0LXJlZGR5LWRvdHMtdGVsZW1ldHJ5 LTA0LnR4dCAgDQoNClBsZWFzZSBmaW5kIGJlbG93IHRoZSBtYXBwaW5nIHRhYmxlLiBBbiBvbmxp bmUgdmVyc2lvbiBpcyBhbHNvIGF2YWlsYWJsZSBhdDogaHR0cHM6Ly9naXRodWIuY29tL2JvdWNh ZGFpci9kcmFmdC1kb3RzLXRlbGVtZXRyeS9ibG9iL21hc3Rlci9tYXBwaW5nLXRhYmxlLnR4dC4g ICANCg0KICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLSstLS0tLS0rLS0t LS0tLS0tLS0tLS0tKy0tLS0tLS0tKw0KICAgfCBQYXJhbWV0ZXIgTmFtZSAgICAgICB8IFlBTkcg ICAgICAgIHwgQ0JPUiB8IENCT1IgTWFqb3IgICAgfCBKU09OICAgfA0KICAgfCAgICAgICAgICAg ICAgICAgICAgICB8IFR5cGUgICAgICAgIHwgS2V5ICB8ICAgIFR5cGUgJiAgICAgfCBUeXBlICAg fA0KICAgfCAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgIHwgICAgICB8IEluZm9y bWF0aW9uICAgfCAgICAgICAgfA0KICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0t LS0tLSstLS0tLS0rLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tKw0KICAgfCBpZXRmLWRvdHMtc2ln bmFsLWNoYSB8ICAgICAgICAgICAgIHwgICAgICB8ICAgICAgICAgICAgICAgfCAgICAgICAgfA0K ICAgfCBubmVsOnRlbGVtZXRyeSAgICAgICB8IGNvbnRhaW5lciAgIHwweDgwMDh8IDUgbWFwICAg ICAgICAgfCBPYmplY3QgfA0KICAgfCB0Y2lkICAgICAgICAgICAgICAgICB8IHVpbnQzMiAgICAg IHwweDgwMDl8IDAgdW5zaWduZWQgICAgfCBOdW1iZXIgfA0KICAgfCB0ZWxlbWV0cnktY29uZmln ICAgICB8IGNvbnRhaW5lciAgIHwweDgwMEF8IDUgbWFwICAgICAgICAgfCBPYmplY3QgfA0KICAg fCBsb3ctcGVyY2VudGlsZSAgICAgICB8IGRlY2ltYWw2NCAgIHwweDgwMEJ8IDYgdGFnIDQgICAg ICAgfCAgICAgICAgfA0KICAgfCAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgIHwg ICAgICB8ICBbLTIsIGludGVnZXJdfCBTdHJpbmcgfA0KICAgfCBtaWQtcGVyY2VudGlsZSAgICAg ICB8IGRlY2ltYWw2NCAgIHwweDgwMEN8IDYgdGFnIDQgICAgICAgfCAgICAgICAgfA0KICAgfCAg ICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgIHwgICAgICB8ICBbLTIsIGludGVnZXJd fCBTdHJpbmcgfA0KICAgfCBoaWdoLXBlcmNlbnRpbGUgICAgICB8IGRlY2ltYWw2NCAgIHwweDgw MER8IDYgdGFnIDQgICAgICAgfCAgICAgICAgfA0KICAgfCAgICAgICAgICAgICAgICAgICAgICB8 ICAgICAgICAgICAgIHwgICAgICB8ICBbLTIsIGludGVnZXJdfCBTdHJpbmcgfA0KICAgfCB1bml0 LWNvbmZpZyAgICAgICAgICB8IGxpc3QgICAgICAgIHwweDgwMEV8IDQgYXJyYXkgICAgICAgfCBB cnJheSAgfA0KICAgfCB1bml0ICAgICAgICAgICAgICAgICB8IGVudW1lcmF0aW9uIHwweDgwMEZ8 IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBzdGF0dXMgICAgICAgICAgICAgICB8IGJv b2xlYW4gICAgIHwweDgwMTB8IDcgYml0cyAyMCAgICAgfCBGYWxzZSAgfA0KICAgfCAgICAgICAg ICAgICAgICAgICAgICB8ICAgICAgICAgICAgIHwgICAgICB8IDcgYml0cyAyMSAgICAgfCBUcnVl ICAgfA0KICAgfCB0b3RhbC1waXBlLWNhcGFiaWxpdHl8IGxpc3QgICAgICAgIHwweDgwMTF8IDQg YXJyYXkgICAgICAgfCBBcnJheSAgfA0KICAgfCBwaXBlICAgICAgICAgICAgICAgICB8IHVpbnQ2 NCAgICAgIHwweDgwMTJ8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBwcmUtbWl0aWdh dGlvbiAgICAgICB8IGxpc3QgICAgICAgIHwweDgwMTN8IDQgYXJyYXkgICAgICAgfCBBcnJheSAg fA0KICAgfCB0ZWxlbWV0cnktaWQgICAgICAgICB8IHVpbnQzMiAgICAgIHwweDgwMTR8IDAgdW5z aWduZWQgICAgfCBOdW1iZXIgfA0KICAgfCB0b3RhbC10cmFmZmljLSAgICAgICB8ICAgICAgICAg ICAgIHwgICAgICB8ICAgICAgICAgICAgICAgfCAgICAgICAgfA0KICAgfCAgICBub3JtYWwtYmFz ZWxpbmUgICB8IGxpc3QgICAgICAgIHwweDgwMTV8IDQgYXJyYXkgICAgICAgfCBBcnJheSAgfA0K ICAgfCBsb3ctcGVyY2VudGlsZS1nICAgICB8IHlhbmc6Z2F1Z2U2NHwweDgwMTZ8IDAgdW5zaWdu ZWQgICAgfCBTdHJpbmcgfA0KICAgfCBtaWQtcGVyY2VudGlsZS1nICAgICB8IHlhbmc6Z2F1Z2U2 NHwweDgwMTd8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBoaWdoLXBlcmNlbnRpbGUt ZyAgICB8IHlhbmc6Z2F1Z2U2NHwweDgwMTh8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAg fCBwZWFrLWcgICAgICAgICAgICAgICB8IHlhbmc6Z2F1Z2U2NHwweDgwMTl8IDAgdW5zaWduZWQg ICAgfCBTdHJpbmcgfA0KICAgfCB0b3RhbC1hdHRhY2stdHJhZmZpYyB8IGxpc3QgICAgICAgIHww eDgwMUF8IDQgYXJyYXkgICAgICAgfCBBcnJheSAgfA0KICAgfCB0b3RhbC10cmFmZmljICAgICAg ICB8IGxpc3QgICAgICAgIHwweDgwMUJ8IDQgYXJyYXkgICAgICAgfCBBcnJheSAgfA0KICAgfCB0 b3RhbC1jb25uZWN0aW9uLSAgICB8ICAgICAgICAgICAgIHwgICAgICB8ICAgICAgICAgICAgICAg fCAgICAgICAgfA0KICAgfCAgICAgICAgY2FwYWNpdHkgICAgICB8IGxpc3QgICAgICAgIHwweDgw MUN8IDQgYXJyYXkgICAgICAgfCBBcnJheSAgfA0KICAgfCBjb25uZWN0aW9uICAgICAgICAgICB8 IHVpbnQ2NCAgICAgIHwweDgwMUR8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBjb25u ZWN0aW9uLWNsaWVudCAgICB8IHVpbnQ2NCAgICAgIHwweDgwMUV8IDAgdW5zaWduZWQgICAgfCBT dHJpbmcgfA0KICAgfCBlbWJyeW9uaWMgICAgICAgICAgICB8IHVpbnQ2NCAgICAgIHwweDgwMUZ8 IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBlbWJyeW9uaWMtY2xpZW50ICAgICB8IHVp bnQ2NCAgICAgIHwweDgwMjB8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBjb25uZWN0 aW9uLXBzICAgICAgICB8IHVpbnQ2NCAgICAgIHwweDgwMjF8IDAgdW5zaWduZWQgICAgfCBTdHJp bmcgfA0KICAgfCBjb25uZWN0aW9uLWNsaWVudC1wcyB8IHVpbnQ2NCAgICAgIHwweDgwMjJ8IDAg dW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCByZXF1ZXN0LXBzICAgICAgICAgICB8IHVpbnQ2 NCAgICAgIHwweDgwMjN8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCByZXF1ZXN0LWNs aWVudC1wcyAgICB8IHVpbnQ2NCAgICAgIHwweDgwMjR8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcg fA0KICAgfCBwYXJ0aWFsLXJlcXVlc3QtcHMgICB8IHVpbnQ2NCAgICAgIHwweDgwMjV8IDAgdW5z aWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBtaXRpZ2F0aW9uLXN0YXJ0ICAgICB8IHVpbnQ2NCAg ICAgIHwweDgwMjZ8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBwYXJ0aWFsLXJlcXVl c3QtICAgICB8ICAgICAgICAgICAgIHwgICAgICB8ICAgICAgICAgICAgICAgfCAgICAgICAgfA0K ICAgfCAgICAgICAgY2xpZW50LXBzICAgICB8IHVpbnQ2NCAgICAgIHwweDgwMjd8IDAgdW5zaWdu ZWQgICAgfCBTdHJpbmcgfA0KICAgfCB0b3RhbC1hdHRhY2stICAgICAgICB8ICAgICAgICAgICAg IHwgICAgICB8ICAgICAgICAgICAgICAgfCAgICAgICAgfA0KICAgfCAgICAgICAgY29ubmVjdGlv biAgICB8IGNvbnRhaW5lciAgIHwweDgwMjh8IDUgbWFwICAgICAgICAgfCBPYmplY3QgfA0KICAg fCBsb3ctcGVyY2VudGlsZS1sICAgICB8IGxpc3QgICAgICAgIHwweDgwMjl8IDQgYXJyYXkgICAg ICAgfCBBcnJheSAgfA0KICAgfCBtaWQtcGVyY2VudGlsZS1sICAgICB8IGxpc3QgICAgICAgIHww eDgwMkF8IDQgYXJyYXkgICAgICAgfCBBcnJheSAgfA0KICAgfCBoaWdoLXBlcmNlbnRpbGUtbCAg ICB8IGxpc3QgICAgICAgIHwweDgwMkJ8IDQgYXJyYXkgICAgICAgfCBBcnJheSAgfA0KICAgfCBw ZWFrICAgICAgICAgICAgICAgICB8IGxpc3QgICAgICAgIHwweDgwMkN8IDQgYXJyYXkgICAgICAg fCBBcnJheSAgfA0KICAgfCBhdHRhY2stZGV0YWlsICAgICAgICB8IGNvbnRhaW5lciAgIHwweDgw MkR8IDUgbWFwICAgICAgICAgfCBPYmplY3QgfA0KICAgfCB2ZW5kb3ItaWQgICAgICAgICAgICB8 IHVpbnQzMiAgICAgIHwweDgwMkV8IDAgdW5zaWduZWQgICAgfCBOdW1iZXIgfA0KICAgfCBhdHRh Y2staWQgICAgICAgICAgICB8IHN0cmluZyAgICAgIHwweDgwMkZ8IDMgdGV4dCBzdHJpbmcgfCBT dHJpbmcgfA0KICAgfCBhdHRhY2stbmFtZSAgICAgICAgICB8IHN0cmluZyAgICAgIHwweDgwMzB8 IDMgdGV4dCBzdHJpbmcgfCBTdHJpbmcgfA0KICAgfCBhdHRhY2stc2V2ZXJpdHkgICAgICB8IGVu dW1lcmF0aW9uIHwweDgwMzF8IDAgdW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBzdGFydC10 aW1lICAgICAgICAgICB8IHVpbnQ2NCAgICAgIHwweDgwMzJ8IDAgdW5zaWduZWQgICAgfCBTdHJp bmcgfA0KICAgfCBlbmQtdGltZSAgICAgICAgICAgICB8IHVpbnQ2NCAgICAgIHwweDgwMzN8IDAg dW5zaWduZWQgICAgfCBTdHJpbmcgfA0KICAgfCBzb3VyY2UtY291bnQgICAgICAgICB8IGNvbnRh aW5lciAgIHwweDgwMzR8IDUgbWFwICAgICAgICAgfCBPYmplY3QgfA0KICAgfCB0b3AtdGFsa2Vy ICAgICAgICAgICB8IGNvbnRhaW5lciAgIHwweDgwMzV8IDUgbWFwICAgICAgICAgfCBPYmplY3Qg fA0KICAgfCBzcG9vZmVkLXN0YXR1cyAgICAgICB8IGJvb2xlYW4gICAgIHwweDgwMzZ8IDcgYml0 cyAyMCAgICAgfCBGYWxzZSAgfA0KICAgfCAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAg ICAgIHwgICAgICB8IDcgYml0cyAyMSAgICAgfCBUcnVlICAgfA0KICAgfCBsb3ctcGVyY2VudGls ZS1jICAgICB8IGNvbnRhaW5lciAgIHwweDgwMzd8IDUgbWFwICAgICAgICAgfCBPYmplY3QgfA0K ICAgfCBtaWQtcGVyY2VudGlsZS1jICAgICB8IGNvbnRhaW5lciAgIHwweDgwMzh8IDUgbWFwICAg ICAgICAgfCBPYmplY3QgfA0KICAgfCBoaWdoLXBlcmNlbnRpbGUtYyAgICB8IGNvbnRhaW5lciAg IHwweDgwMzl8IDUgbWFwICAgICAgICAgfCBPYmplY3QgfA0KICAgfCBwZWFrLWMgICAgICAgICAg ICAgICB8IGNvbnRhaW5lciAgIHwweDgwM0F8IDUgbWFwICAgICAgICAgfCBPYmplY3QgfA0KICAg Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLSstLS0tLS0rLS0tLS0tLS0tLS0t LS0tKy0tLS0tLS0tKw0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5l LS0tLS0NCj4gRGXCoDogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEg cGFydCBkZQ0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+IEVudm95w6nCoDogbWVy Y3JlZGkgMjMgb2N0b2JyZSAyMDE5IDEzOjI1DQo+IMOAwqA6IGthbmFtZSBuaXNoaXp1a2E7IGRv dHNAaWV0Zi5vcmcNCj4gT2JqZXTCoDogUmU6IFtEb3RzXSBUUjogTmV3IFZlcnNpb24gTm90aWZp Y2F0aW9uIGZvciBkcmFmdC1yZWRkeS1kb3RzLQ0KPiB0ZWxlbWV0cnktMDQudHh0DQo+IA0KPiBI aSBLYW5hbWUsDQo+IA0KPiBUaGFuayB5b3UgZm9yIHNoYXJpbmcgdGhlIGZlZWRiYWNrLg0KPiAN Cj4gV2Ugd2lsbCBwcmVwYXJlIGFuIGluaXRpYWwgdmVyc2lvbiBvZiB0aGUgbWFwcGluZyB0YWJs ZSB0aGF0IHdlIHdpbGwgcHV0IG9uDQo+IHRoZSBnaXRodWIuIFRoYXQgdGFibGUgd2lsbCBiZSBp bnRlZ3JhdGVkIGluIHRoZSBuZXh0IGl0ZXJhdGlvbiBvZiB0aGUNCj4gZHJhZnQuDQo+IA0KPiBD aGVlcnMsDQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBE ZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXQ0KPiA+IEVudm95 w6nCoDogbWVyY3JlZGkgMjMgb2N0b2JyZSAyMDE5IDExOjA3DQo+ID4gw4DCoDogQk9VQ0FEQUlS IE1vaGFtZWQgVEdJL09MTjsgZG90c0BpZXRmLm9yZw0KPiA+IE9iamV0wqA6IFJlOiBbRG90c10g VFI6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtcmVkZHktZG90cy0NCj4gPiB0 ZWxlbWV0cnktMDQudHh0DQo+ID4NCj4gPiBIaSBNZWQsIGFsbCwNCj4gPg0KPiA+IEknbSBwbGFu bmluZyB0byBpbXBsZW1lbnQgZG90cyB0ZWxlbWV0cnkgZmVhdHVyZXMgaW50byBnby1kb3RzLg0K PiA+IFRob3VnaCBpdCB3b3VsZCBldm9sdmUsIGlmYW4gaW5pdGlhbCB2ZXJzaW9uIG9mIHlhbmcv Y2JvciBtYXBwaW5nIHdhcw0KPiA+IGRlZmluZWQsIGl0IGhlbHBzIG1lIGEgbG90Lg0KPiA+DQo+ ID4gdGhhbmtzLA0KPiA+IEthbmFtZQ0KPiA+DQo+ID4NCj4gPiBPbiAyMDE5LzEwLzE4IDE4OjM4 LCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0KPiA+ID4gSGkgYWxsLA0KPiA+ ID4NCj4gPiA+IEFsdGhvdWdoIHdlIGFyZSB3YWl0aW5nIGZvciBhIGNhbGwgZm9yIGFkb3B0aW9u IGZvciB0aGlzIGRyYWZ0LCB3ZSBtYWRlDQo+ID4gc29tZSBjaGFuZ2VzIHdoaWNoIHlvdSBjYW4g dHJhY2sgd2l0aCB0aGUgZGlmZiBwcm92aWRlZCBiZWxvdy4NCj4gPiA+DQo+ID4gPiBDaGVlcnMs DQo+ID4gPiBNZWQNCj4gPiA+DQo+ID4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ ID4gPj4gRGXCoDogaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIFttYWlsdG86aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnXQ0KPiA+ID4+IEVudm95w6nCoDogdmVuZHJlZGkgMTggb2N0b2JyZSAyMDE5 IDExOjMzDQo+ID4gPj4gw4DCoDogY2hlbm1laWxpbmc7IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9P TE47IE1laWxpbmcgQ2hlbjsgVGlydW1hbGVzd2FyDQo+ID4gPj4gUmVkZHk7IEVodWQgRG9yb247 IFJlZGR5IEsNCj4gPiA+PiBPYmpldMKgOiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRy YWZ0LXJlZGR5LWRvdHMtdGVsZW1ldHJ5LTA0LnR4dA0KPiA+ID4+DQo+ID4gPj4NCj4gPiA+PiBB IG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQtcmVkZHktZG90cy10ZWxlbWV0cnktMDQudHh0DQo+ ID4gPj4gaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBNb2hhbWVkIEJvdWNhZGFp ciBhbmQgcG9zdGVkIHRvIHRoZQ0KPiA+ID4+IElFVEYgcmVwb3NpdG9yeS4NCj4gPiA+Pg0KPiA+ ID4+IE5hbWU6CQlkcmFmdC1yZWRkeS1kb3RzLXRlbGVtZXRyeQ0KPiA+ID4+IFJldmlzaW9uOgkw NA0KPiA+ID4+IFRpdGxlOgkJRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLVNlcnZpY2UgT3BlbiBUaHJl YXQgU2lnbmFsaW5nDQo+IChET1RTKQ0KPiA+ID4+IFRlbGVtZXRyeQ0KPiA+ID4+IERvY3VtZW50 IGRhdGU6CTIwMTktMTAtMTgNCj4gPiA+PiBHcm91cDoJCUluZGl2aWR1YWwgU3VibWlzc2lvbg0K PiA+ID4+IFBhZ2VzOgkJNDENCj4gPiA+PiBVUkw6ICAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LXJlZGR5LWRvdHMtDQo+ID4gPj4gdGVsZW1ldHJ5 LTA0LnR4dA0KPiA+ID4+IFN0YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1yZWRkeS1kb3RzLQ0KPiA+ID4+IHRlbGVtZXRyeS8NCj4gPiA+PiBIdG1s aXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXJlZGR5LWRvdHMt DQo+IHRlbGVtZXRyeS0NCj4gPiAwNA0KPiA+ID4+IEh0bWxpemVkOiAgICAgICBodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LXJlZGR5LQ0KPiBkb3RzLQ0KPiA+ID4+ IHRlbGVtZXRyeQ0KPiA+ID4+IERpZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9y ZmNkaWZmP3VybDI9ZHJhZnQtcmVkZHktZG90cy0NCj4gPiA+PiB0ZWxlbWV0cnktMDQNCj4gPiA+ Pg0KPiA+ID4+IEFic3RyYWN0Og0KPiA+ID4+ICAgICBUaGlzIGRvY3VtZW50IGFpbXMgdG8gZW5y aWNoIERPVFMgc2lnbmFsIGNoYW5uZWwgcHJvdG9jb2wgd2l0aA0KPiA+ID4+ICAgICB2YXJpb3Vz IHRlbGVtZXRyeSBhdHRyaWJ1dGVzIGFsbG93aW5nIG9wdGltYWwgRERvUyBhdHRhY2sNCj4gPiBt aXRpZ2F0aW9uLg0KPiA+ID4+ICAgICBUaGlzIGRvY3VtZW50IHNwZWNpZmllcyB0aGUgbm9ybWFs IHRyYWZmaWMgYmFzZWxpbmUgYW5kIGF0dGFjaw0KPiA+ID4+ICAgICB0cmFmZmljIHRlbGVtZXRy eSBhdHRyaWJ1dGVzIGEgRE9UUyBjbGllbnQgY2FuIGNvbnZleSB0byBpdHMgRE9UUw0KPiA+ID4+ ICAgICBzZXJ2ZXIgaW4gdGhlIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIG1pdGlnYXRpb24gc3Rh dHVzIHRlbGVtZXRyeQ0KPiA+ID4+ICAgICBhdHRyaWJ1dGVzIGEgRE9UUyBzZXJ2ZXIgY2FuIGNv bW11bmljYXRlIHRvIGEgRE9UUyBjbGllbnQsIGFuZCB0aGUNCj4gPiA+PiAgICAgbWl0aWdhdGlv biBlZmZpY2FjeSB0ZWxlbWV0cnkgYXR0cmlidXRlcyBhIERPVFMgY2xpZW50IGNhbg0KPiA+ID4+ ICAgICBjb21tdW5pY2F0ZSB0byBhIERPVFMgc2VydmVyLiAgVGhlIHRlbGVtZXRyeSBhdHRyaWJ1 dGVzIGNhbiBhc3Npc3QNCj4gPiA+PiAgICAgdGhlIG1pdGlnYXRvciB0byBjaG9vc2UgdGhlIERE b1MgbWl0aWdhdGlvbiB0ZWNobmlxdWVzIGFuZCBwZXJmb3JtDQo+ID4gPj4gICAgIG9wdGltYWwg RERvUyBhdHRhY2sgbWl0aWdhdGlvbi4NCj4gPiA+Pg0KPiA+ID4+DQo+ID4gPj4NCj4gPiA+Pg0K PiA+ID4+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBm cm9tIHRoZSB0aW1lIG9mDQo+ID4gPj4gc3VibWlzc2lvbg0KPiA+ID4+IHVudGlsIHRoZSBodG1s aXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQo+ ID4gPj4NCj4gPiA+PiBUaGUgSUVURiBTZWNyZXRhcmlhdA0KPiA+ID4gX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4gPiBEb3RzQGlldGYub3JnDQo+ID4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2RvdHMNCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+IERvdHMgbWFpbGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo= From nobody Fri Nov 8 03:16:36 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E35851200F7 for ; Fri, 8 Nov 2019 03:16:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nttv6.jp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uftLBBwKbmzl for ; Fri, 8 Nov 2019 03:16:32 -0800 (PST) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id 3A9851200B6 for ; Fri, 8 Nov 2019 03:16:32 -0800 (PST) Received: from z.nttv6.jp (z.nttv6.jp [IPv6:2402:c800:ff06:6::f]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 8786C25F6C3; Fri, 8 Nov 2019 20:16:30 +0900 (JST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nttv6.jp; s=20180820; t=1573211790; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Imf0ctUP+Ds3Qi6ljd7xUvoIqO9JItnWWTIosOcvf2E=; b=VsKhZTLsyDcnUlcfNWNbjyjugKeU8T6cNvYcbl9BppLhRE63kYOIsQFDhdRuENdwJBPKiO /8aIb5oX8d7t9Ia2xcLz5QOIcNNbYcqvrVKjEAi5iY2SAC9mapODE79XXVIke91J7Yuwgj Hurr066wKUUKV5WIrDaKlUVT14Dn0is= Received: from macbook-pro-17.lv4.nttv6.jp (fujiko.nttv6.jp [IPv6:2402:c800:ff06:136::141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 6F7E67634E4; Fri, 8 Nov 2019 20:16:30 +0900 (JST) To: mohamed.boucadair@orange.com, "dots@ietf.org" References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <317486f6-fbd7-2811-a58c-c5a826fb9e5e@nttv6.jp> <787AE7BB302AE849A7480A190F8B9330313445B0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135F2E7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: Date: Fri, 8 Nov 2019 20:16:27 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135F2E7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Authentication-Results: guri.nttv6.jp; spf=pass smtp.mailfrom=kaname@nttv6.jp Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 11:16:35 -0000 Hi Med, Thanks! I'll look into and use it. kaname On 2019/11/08 16:58, mohamed.boucadair@orange.com wrote: > Hi Kaname, > > Apologies for the delay to have this done. > > The draft notes the following: > > Notes: (1) Check naming conflict to ease CBOR mapping (e.g, low- > percentile is defined as yang:gauge64, list, or container). > Distinct names may be considered. > > Although this is not an issue in YANG, I updated some YANG attribute names to avoid cbor naming conflicts. The updated YANG module is available at: https://github.com/boucadair/draft-dots-telemetry/blob/master/draft-reddy-dots-telemetry-04.txt > > Please find below the mapping table. An online version is also available at: https://github.com/boucadair/draft-dots-telemetry/blob/master/mapping-table.txt. > > +----------------------+-------------+------+---------------+--------+ > | Parameter Name | YANG | CBOR | CBOR Major | JSON | > | | Type | Key | Type & | Type | > | | | | Information | | > +----------------------+-------------+------+---------------+--------+ > | ietf-dots-signal-cha | | | | | > | nnel:telemetry | container |0x8008| 5 map | Object | > | tcid | uint32 |0x8009| 0 unsigned | Number | > | telemetry-config | container |0x800A| 5 map | Object | > | low-percentile | decimal64 |0x800B| 6 tag 4 | | > | | | | [-2, integer]| String | > | mid-percentile | decimal64 |0x800C| 6 tag 4 | | > | | | | [-2, integer]| String | > | high-percentile | decimal64 |0x800D| 6 tag 4 | | > | | | | [-2, integer]| String | > | unit-config | list |0x800E| 4 array | Array | > | unit | enumeration |0x800F| 0 unsigned | String | > | status | boolean |0x8010| 7 bits 20 | False | > | | | | 7 bits 21 | True | > | total-pipe-capability| list |0x8011| 4 array | Array | > | pipe | uint64 |0x8012| 0 unsigned | String | > | pre-mitigation | list |0x8013| 4 array | Array | > | telemetry-id | uint32 |0x8014| 0 unsigned | Number | > | total-traffic- | | | | | > | normal-baseline | list |0x8015| 4 array | Array | > | low-percentile-g | yang:gauge64|0x8016| 0 unsigned | String | > | mid-percentile-g | yang:gauge64|0x8017| 0 unsigned | String | > | high-percentile-g | yang:gauge64|0x8018| 0 unsigned | String | > | peak-g | yang:gauge64|0x8019| 0 unsigned | String | > | total-attack-traffic | list |0x801A| 4 array | Array | > | total-traffic | list |0x801B| 4 array | Array | > | total-connection- | | | | | > | capacity | list |0x801C| 4 array | Array | > | connection | uint64 |0x801D| 0 unsigned | String | > | connection-client | uint64 |0x801E| 0 unsigned | String | > | embryonic | uint64 |0x801F| 0 unsigned | String | > | embryonic-client | uint64 |0x8020| 0 unsigned | String | > | connection-ps | uint64 |0x8021| 0 unsigned | String | > | connection-client-ps | uint64 |0x8022| 0 unsigned | String | > | request-ps | uint64 |0x8023| 0 unsigned | String | > | request-client-ps | uint64 |0x8024| 0 unsigned | String | > | partial-request-ps | uint64 |0x8025| 0 unsigned | String | > | mitigation-start | uint64 |0x8026| 0 unsigned | String | > | partial-request- | | | | | > | client-ps | uint64 |0x8027| 0 unsigned | String | > | total-attack- | | | | | > | connection | container |0x8028| 5 map | Object | > | low-percentile-l | list |0x8029| 4 array | Array | > | mid-percentile-l | list |0x802A| 4 array | Array | > | high-percentile-l | list |0x802B| 4 array | Array | > | peak | list |0x802C| 4 array | Array | > | attack-detail | container |0x802D| 5 map | Object | > | vendor-id | uint32 |0x802E| 0 unsigned | Number | > | attack-id | string |0x802F| 3 text string | String | > | attack-name | string |0x8030| 3 text string | String | > | attack-severity | enumeration |0x8031| 0 unsigned | String | > | start-time | uint64 |0x8032| 0 unsigned | String | > | end-time | uint64 |0x8033| 0 unsigned | String | > | source-count | container |0x8034| 5 map | Object | > | top-talker | container |0x8035| 5 map | Object | > | spoofed-status | boolean |0x8036| 7 bits 20 | False | > | | | | 7 bits 21 | True | > | low-percentile-c | container |0x8037| 5 map | Object | > | mid-percentile-c | container |0x8038| 5 map | Object | > | high-percentile-c | container |0x8039| 5 map | Object | > | peak-c | container |0x803A| 5 map | Object | > +----------------------+-------------+------+---------------+--------+ > > Cheers, > Med > >> -----Message d'origine----- >> De : Dots [mailto:dots-bounces@ietf.org] De la part de >> mohamed.boucadair@orange.com >> Envoyé : mercredi 23 octobre 2019 13:25 >> À : kaname nishizuka; dots@ietf.org >> Objet : Re: [Dots] TR: New Version Notification for draft-reddy-dots- >> telemetry-04.txt >> >> Hi Kaname, >> >> Thank you for sharing the feedback. >> >> We will prepare an initial version of the mapping table that we will put on >> the github. That table will be integrated in the next iteration of the >> draft. >> >> Cheers, >> Med >> >>> -----Message d'origine----- >>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>> Envoyé : mercredi 23 octobre 2019 11:07 >>> À : BOUCADAIR Mohamed TGI/OLN; dots@ietf.org >>> Objet : Re: [Dots] TR: New Version Notification for draft-reddy-dots- >>> telemetry-04.txt >>> >>> Hi Med, all, >>> >>> I'm planning to implement dots telemetry features into go-dots. >>> Though it would evolve, ifan initial version of yang/cbor mapping was >>> defined, it helps me a lot. >>> >>> thanks, >>> Kaname >>> >>> >>> On 2019/10/18 18:38, mohamed.boucadair@orange.com wrote: >>>> Hi all, >>>> >>>> Although we are waiting for a call for adoption for this draft, we made >>> some changes which you can track with the diff provided below. >>>> Cheers, >>>> Med >>>> >>>>> -----Message d'origine----- >>>>> De : internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] >>>>> Envoyé : vendredi 18 octobre 2019 11:33 >>>>> À : chenmeiling; BOUCADAIR Mohamed TGI/OLN; Meiling Chen; Tirumaleswar >>>>> Reddy; Ehud Doron; Reddy K >>>>> Objet : New Version Notification for draft-reddy-dots-telemetry-04.txt >>>>> >>>>> >>>>> A new version of I-D, draft-reddy-dots-telemetry-04.txt >>>>> has been successfully submitted by Mohamed Boucadair and posted to the >>>>> IETF repository. >>>>> >>>>> Name: draft-reddy-dots-telemetry >>>>> Revision: 04 >>>>> Title: Distributed Denial-of-Service Open Threat Signaling >> (DOTS) >>>>> Telemetry >>>>> Document date: 2019-10-18 >>>>> Group: Individual Submission >>>>> Pages: 41 >>>>> URL: https://www.ietf.org/internet-drafts/draft-reddy-dots- >>>>> telemetry-04.txt >>>>> Status: https://datatracker.ietf.org/doc/draft-reddy-dots- >>>>> telemetry/ >>>>> Htmlized: https://tools.ietf.org/html/draft-reddy-dots- >> telemetry- >>> 04 >>>>> Htmlized: https://datatracker.ietf.org/doc/html/draft-reddy- >> dots- >>>>> telemetry >>>>> Diff: https://www.ietf.org/rfcdiff?url2=draft-reddy-dots- >>>>> telemetry-04 >>>>> >>>>> Abstract: >>>>> This document aims to enrich DOTS signal channel protocol with >>>>> various telemetry attributes allowing optimal DDoS attack >>> mitigation. >>>>> This document specifies the normal traffic baseline and attack >>>>> traffic telemetry attributes a DOTS client can convey to its DOTS >>>>> server in the mitigation request, the mitigation status telemetry >>>>> attributes a DOTS server can communicate to a DOTS client, and the >>>>> mitigation efficacy telemetry attributes a DOTS client can >>>>> communicate to a DOTS server. The telemetry attributes can assist >>>>> the mitigator to choose the DDoS mitigation techniques and perform >>>>> optimal DDoS attack mitigation. >>>>> >>>>> >>>>> >>>>> >>>>> Please note that it may take a couple of minutes from the time of >>>>> submission >>>>> until the htmlized version and diff are available at tools.ietf.org. >>>>> >>>>> The IETF Secretariat >>>> _______________________________________________ >>>> Dots mailing list >>>> Dots@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dots >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots From nobody Fri Nov 8 04:29:32 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BAE2120086 for ; Fri, 8 Nov 2019 04:29:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mfewphe4DG92 for ; Fri, 8 Nov 2019 04:29:29 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1808712007C for ; Fri, 8 Nov 2019 04:29:29 -0800 (PST) Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 478fj30x3Zz4wY7; Fri, 8 Nov 2019 13:29:27 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.76]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id 478fj301BzzDq8P; Fri, 8 Nov 2019 13:29:27 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7E.corporate.adroot.infra.ftgroup ([fe80::54f9:a664:e400:452a%21]) with mapi id 14.03.0468.000; Fri, 8 Nov 2019 13:29:26 +0100 From: To: "Carsten Bormann (cabo@tzi.org)" CC: "dots@ietf.org" Thread-Topic: Role reversal in RFC7252 Thread-Index: AdWWMCYu7mRjeWKMSre161Y2+4DxBQ== Date: Fri, 8 Nov 2019 12:29:25 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135F7FE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93303135F7FEOPEXCAUBMA2corp_" MIME-Version: 1.0 Archived-At: Subject: [Dots] Role reversal in RFC7252 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 12:29:30 -0000 --_000_787AE7BB302AE849A7480A190F8B93303135F7FEOPEXCAUBMA2corp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Carsten, Can you please help indicate whether (and thus which part of) RFC7252 discu= sses client/server role reversal so that a CoAP server can send (non-Empty)= requests to a CoAP client? Thank you. Cheers, Med --_000_787AE7BB302AE849A7480A190F8B93303135F7FEOPEXCAUBMA2corp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

= Hi Carsten,

=  

Can you please help indicate whether (and thus wh=
ich part of) RFC7252 discusses client/server role reversal so that a CoAP s=
erver can send (non-Empty) requests to a CoAP client?

 


Thank you.



 


Cheers,


Med
--_000_787AE7BB302AE849A7480A190F8B93303135F7FEOPEXCAUBMA2corp_-- From nobody Fri Nov 8 05:53:15 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2347C1201E4; Fri, 8 Nov 2019 05:53:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ytp1uNCz-gt4; Fri, 8 Nov 2019 05:53:11 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8044012003F; Fri, 8 Nov 2019 05:53:11 -0800 (PST) Received: from mail2.jpshallow.com ([192.168.0.3] helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.92.3) (envelope-from ) id 1iT4hH-0002Fn-U9; Fri, 08 Nov 2019 13:53:08 +0000 From: "Jon Shallow" To: , "'Valery Smyslov'" , , References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca401d59549$6839d730$38ad8590$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1cbb01d59557$9bfb78e0$d3f26aa0$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B8A2@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135B8A2@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Fri, 8 Nov 2019 13:53:01 -0000 Message-ID: <1e6101d5963b$d63f7ee0$82be7ca0$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQQIoyNJKAgLNmFMCZGGj2AN/UZNvAfmPiTgBw9wAfKfuPesA Content-Language: en-gb Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 13:53:14 -0000 Hi Med et al, I have gone back over the heartbeat call home and have a couple of = comments In https://tools.ietf.org/html/draft-ietf-dots-signal-channel-38#section-4.5= .1=20 OLD Figure 18 shows how to obtain acceptable configuration parameters for the DOTS server. NEW Figure 18 shows how to obtain acceptable configuration parameters for the DOTS client. or NEW Figure 18 shows how to obtain acceptable configuration parameters = from the DOTS server. With Call Home, the GET Config will still tell the Call Home DOTS Client what are the acceptable values (which will cover keeping any NAT = bindings "warm"), and then the Call Home DOTS client can optionally do a PUT for tweaking within the allowed bounds. As the "saturated" direction will most likely continue to be from the = (Call Home) DOTS server to the (Call Home) DOTS client all the signal draft recovery / continuing mechanisms still stand which the call home draft = just re-emphasises. I have not had a chance to separately test this Call Home variant, but everything is using the same code logic at this point as per the signal draft. Regards Jon > -----Original Message----- > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of = ietf- > supjps-mohamed.boucadair@orange.com > Sent: 07 November 2019 12:16 > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Re-, >=20 > The NEW wording works for me. >=20 > Thank you. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > Envoy=E9=A0: jeudi 7 novembre 2019 11:39 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; = dots- > > chairs@ietf.org > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Hi Med, > > > > Happy Eyeballs worked fine with me with the Call Home DOTS server > > initiating > > the DTLS and TLS sessions. > > > > Heartbeats work, but I have not tested them under stress / loss conditions. > > I will try to get that tested tomorrow. > > > > In terms of the text I mis-read, perhaps it could be partially re-written > > > > OLD > > > > " If TCP is used, the Call Home DOTS server begins by initiating a > > TCP connection to the Call Home DOTS client. Using this TCP > > connection, the Call Home DOTS server initiates a TLS connection > > to the Call Home DOTS client." > > > > NEW > > > > " If TCP is used, the Call Home DOTS server begins by initiating a > > TCP connection to the Call Home DOTS client. Once connected, the = Call > > Home > > DOTS server continues to initiate a TLS connection > > to the Call Home DOTS client." > > > > Regards > > > > Jon > > > > > -----Original Message----- > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > mohamed.boucadair@orange.com > > > Sent: 07 November 2019 09:34 > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; = dots-chairs@ietf.org > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > Re-, > > > > > > Thank you, Jon. > > > > > > BTW, I don't see any issue about HE and HBs for the call home. I assume > > that > > > no problem was encountered to implement it. > > > > > > Cheers, > > > Med > > > > -----Message d'origine----- > > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > > Envoy=E9=A0: jeudi 7 novembre 2019 09:58 > > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; = dots@ietf.org; > dots- > > > > chairs@ietf.org > > > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > Hi Med, > > > > > > > > See inline. > > > > > > > > Regards > > > > > > > > Jon > > > > > > > > > -----Original Message----- > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > mohamed.boucadair@orange.com > > > > > Sent: 07 November 2019 07:12 > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots- > > chairs@ietf.org > > > > > Subject: Re: [Dots] WGLC on = draft-ietf-dots-signal-call-home-06 > > > > > > > > > > Hi Jon, > > > > > > > > > > Thank you for sharing this cool news. > > > > > > > > > > Please see inline. > > > > > > > > > > Cheers, > > > > > Med > > > > > > > > > > > -----Message d'origine----- > > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 18:13 > > > > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; = dots-chairs@ietf.org > > > > > > Objet=A0: Re: [Dots] WGLC on = draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > Hi All, > > > > > > > > > > > > I have done a preliminary working implementation of DOTS = Call- > Home > > > - > > > > > there > > > > > > is still some little used functionality to finish off. > > > > > > > > > > > > *** Issue # 1 - TCP TLS sessions > > > > > > > > > > > > = https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > 06#section- > > > > > 3..1 > > > > > > > > > > > > " If UDP transport is used, the Call Home DOTS server begins = by > > > > > > initiating a DTLS connection to the Call Home DOTS client." > > > > > > > > > > > > This works as expected where the UDP + DTLS layer roles are > > switched. > > > > > > > > > > > > " If TCP is used, the Call Home DOTS server begins by = initiating a > > > > > > TCP connection to the Call Home DOTS client. Using this TCP > > > > > > connection, the Call Home DOTS server initiates a TLS = connection > > > > > > to the Call Home DOTS client." > > > > > > > > > > > > With the current libcoap implementation, I am unable to = create a > > CoAP > > > > > > session using TLS on an existing TCP connection - so the = DOTS > > Client > > is > > > > > > unable to accept an incoming TCP session and then initiate = TLS > > > > integrated > > > > > > with the CoAP session. > > > > > > > > > > [Med] Why the client would initiate the TLS session? Do you = want to > > test > > > > a > > > > > RFC8071-like approach? > > > > > > > > Jon> Yesterday was one of those days - word blindness = translated "the > > > Call > > > > Home DOTS server initiates a TLS connection to the Call Home = DOTS > > > client." > > > > as a separate action to "the Call Home DOTS client initiates a = TLS > > > > connection to the Call Home DOTS server.". The actual text is correct. > > > > > > > > > > > > > > I agree that RFC8071 only switches the TCP layer > > > > > > roles. > > > > > > > > > > [Med] Yes. > > > > > > > > > > However all works if the TCP + TLS layer roles are switched - = in > > > > > > the > > > > > > same way that UDP + DTLS work. > > > > > > > > > > [Med] Great. We went for this approach because we preserve the > same > > > role > > > > > for both DTLS and TLS: > > > > > > > > > > +-----------+ = +-----------+ > > > > > | Call Home | | Call Home = | > > > > > | DOTS | | DOTS = | > > > > > | server | | client = | > > > > > +-----+-----+ = +-----+-----+ > > > > > (D)TLS client (D)TLS = server > > > > > > > > > > > > > > > > > Enhancing the libcoap code to support only the TCP layer = being > > > switched > > > > is > > > > > > doable - but have no idea as to whether other CoAP > implementations > > > can > > > > > > handle this specific requirement. > > > > > > > > > > [Med] Do we really need to do that? > > > > > > > > Jon> No. It was my mis-reading of the text that caused this confusion. > > > > > > > > > > > > > > > > > > > > > *** Not (yet) Implemented #1 - Redirected Signalling > > > > > > > > > > > > = https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > 06#section- > > > > > > 3.2. > > > > > > 2 > > > > > > > > > > > > I do not see any issues here. > > > > > > > > > > > > *** Not (yet) implemented #2 - New Conflict Cause 4 > > > > > > > > > > > > I do not see any issues here. > > > > > > > > > > > > *** Not (yet) Implemented #3 - Address sharing = considerations > > > > > > > > > > > > = https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > 06#section- > > > > > > 3.3. > > > > > > 2 > > > > > > > > > > > > I do not see any issues here - just need to interface with = the > > > > translators > > > > > > to get the appropriate information. > > > > > > > > > > > > Regards > > > > > > > > > > > > Jon > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf > > Of > > > > > Valery > > > > > > > Smyslov > > > > > > > Sent: 23 October 2019 08:36 > > > > > > > To: dots@ietf.org > > > > > > > Cc: dots-chairs@ietf.org > > > > > > > Subject: [Dots] WGLC on = draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > > draft-ietf-dots-signal- > > > > > > > call-home-06. > > > > > > > The version to be reviewed is here: > > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > > signal-call-home-06.txt > > > > > > > > > > > > > > The WGLC will last for two weeks and will end on November = the > > 7th. > > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > > > Regards, > > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Dots mailing list > > > > > > > Dots@ietf.org > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > _______________________________________________ > > > > > > Dots mailing list > > > > > > Dots@ietf.org > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Fri Nov 8 06:21:30 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68C3512002E; Fri, 8 Nov 2019 06:21:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5d_n04RkO8pz; Fri, 8 Nov 2019 06:21:27 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB8B1120024; Fri, 8 Nov 2019 06:21:26 -0800 (PST) Received: from opfedar00.francetelecom.fr (unknown [xx.xx.xx.11]) by opfedar20.francetelecom.fr (ESMTP service) with ESMTP id 478jBF10thz8t0l; Fri, 8 Nov 2019 15:21:25 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.67]) by opfedar00.francetelecom.fr (ESMTP service) with ESMTP id 478jBD718RzCqkh; Fri, 8 Nov 2019 15:21:24 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM43.corporate.adroot.infra.ftgroup ([fe80::b846:2467:1591:5d9d%21]) with mapi id 14.03.0468.000; Fri, 8 Nov 2019 15:21:24 +0100 From: To: Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQQIoyNJKAgLNmFMCZGGj2AN/UZNvAfmPiTgBw9wAfKfuPesAgAAIYOA= Date: Fri, 8 Nov 2019 14:21:24 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93303135FB38@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca401d59549$6839d730$38ad8590$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1cbb01d59557$9bfb78e0$d3f26aa0$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B8A2@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1e6101d5963b$d63f7ee0$82be7ca0$@jpshallow.com> In-Reply-To: <1e6101d5963b$d63f7ee0$82be7ca0$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 14:21:29 -0000 Hi Jon, Thank you for the feedback.=20 Please see inline. Cheers, Med > -----Message d'origine----- > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Envoy=E9=A0: vendredi 8 novembre 2019 14:53 > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; dots- > chairs@ietf.org > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Hi Med et al, >=20 > I have gone back over the heartbeat call home and have a couple of commen= ts >=20 > In > https://tools.ietf.org/html/draft-ietf-dots-signal-channel-38#section-4.5= .1 >=20 > OLD >=20 > Figure 18 shows how to obtain acceptable configuration parameters for > the DOTS server. > [Med] "for" is used in reference to "acceptable" from the perspective of th= e server. Sure, the information will be retrieved from the server. =20 =20 > NEW >=20 > Figure 18 shows how to obtain acceptable configuration parameters for > the DOTS client. >=20 > or NEW >=20 > Figure 18 shows how to obtain acceptable configuration parameters from > the DOTS server. >=20 > With Call Home, the GET Config will still tell the Call Home DOTS Client > what are the acceptable values (which will cover keeping any NAT bindings > "warm"), [Med] Yes, and especilay for twekaing heartbeat-interval. and then the Call Home DOTS client can optionally do a PUT for > tweaking within the allowed bounds. [Med] Not sure to follow you here. Which PUT are you referring to? >=20 > As the "saturated" direction will most likely continue to be from the (Ca= ll > Home) DOTS server to the (Call Home) DOTS client all the signal draft > recovery / continuing mechanisms still stand which the call home draft ju= st > re-emphasises. [Med] There are some diffs: e.g., the Call Home Clint can't initiate a new = (D)TLS session. >=20 > I have not had a chance to separately test this Call Home variant, but > everything is using the same code logic at this point as per the signal > draft. >=20 > Regards >=20 > Jon >=20 > > -----Original Message----- > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of ietf= - > > supjps-mohamed.boucadair@orange.com > > Sent: 07 November 2019 12:16 > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Re-, > > > > The NEW wording works for me. > > > > Thank you. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > Envoy=E9=A0: jeudi 7 novembre 2019 11:39 > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; d= ots- > > > chairs@ietf.org > > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > Hi Med, > > > > > > Happy Eyeballs worked fine with me with the Call Home DOTS server > > > initiating > > > the DTLS and TLS sessions. > > > > > > Heartbeats work, but I have not tested them under stress / loss > conditions. > > > I will try to get that tested tomorrow. > > > > > > In terms of the text I mis-read, perhaps it could be partially > re-written > > > > > > OLD > > > > > > " If TCP is used, the Call Home DOTS server begins by initiating a > > > TCP connection to the Call Home DOTS client. Using this TCP > > > connection, the Call Home DOTS server initiates a TLS connection > > > to the Call Home DOTS client." > > > > > > NEW > > > > > > " If TCP is used, the Call Home DOTS server begins by initiating a > > > TCP connection to the Call Home DOTS client. Once connected, the Ca= ll > > > Home > > > DOTS server continues to initiate a TLS connection > > > to the Call Home DOTS client." > > > > > > Regards > > > > > > Jon > > > > > > > -----Original Message----- > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > mohamed.boucadair@orange.com > > > > Sent: 07 November 2019 09:34 > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots- > chairs@ietf.org > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > Re-, > > > > > > > > Thank you, Jon. > > > > > > > > BTW, I don't see any issue about HE and HBs for the call home. I > assume > > > that > > > > no problem was encountered to implement it. > > > > > > > > Cheers, > > > > Med > > > > > -----Message d'origine----- > > > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > > > Envoy=E9=A0: jeudi 7 novembre 2019 09:58 > > > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.or= g; > > dots- > > > > > chairs@ietf.org > > > > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > Hi Med, > > > > > > > > > > See inline. > > > > > > > > > > Regards > > > > > > > > > > Jon > > > > > > > > > > > -----Original Message----- > > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > > mohamed.boucadair@orange.com > > > > > > Sent: 07 November 2019 07:12 > > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots- > > > chairs@ietf.org > > > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > Hi Jon, > > > > > > > > > > > > Thank you for sharing this cool news. > > > > > > > > > > > > Please see inline. > > > > > > > > > > > > Cheers, > > > > > > Med > > > > > > > > > > > > > -----Message d'origine----- > > > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Jon > Shallow > > > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 18:13 > > > > > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > > > > > > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home= -06 > > > > > > > > > > > > > > Hi All, > > > > > > > > > > > > > > I have done a preliminary working implementation of DOTS Call= - > > Home > > > > - > > > > > > there > > > > > > > is still some little used functionality to finish off. > > > > > > > > > > > > > > *** Issue # 1 - TCP TLS sessions > > > > > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > > 06#section- > > > > > > 3..1 > > > > > > > > > > > > > > " If UDP transport is used, the Call Home DOTS server begins = by > > > > > > > initiating a DTLS connection to the Call Home DOTS client." > > > > > > > > > > > > > > This works as expected where the UDP + DTLS layer roles are > > > switched. > > > > > > > > > > > > > > " If TCP is used, the Call Home DOTS server begins by > initiating > a > > > > > > > TCP connection to the Call Home DOTS client. Using this TCP > > > > > > > connection, the Call Home DOTS server initiates a TLS > connection > > > > > > > to the Call Home DOTS client." > > > > > > > > > > > > > > With the current libcoap implementation, I am unable to creat= e > a > > > CoAP > > > > > > > session using TLS on an existing TCP connection - so the DOTS > > > Client > > > is > > > > > > > unable to accept an incoming TCP session and then initiate TL= S > > > > > integrated > > > > > > > with the CoAP session. > > > > > > > > > > > > [Med] Why the client would initiate the TLS session? Do you wan= t > to > > > test > > > > > a > > > > > > RFC8071-like approach? > > > > > > > > > > Jon> Yesterday was one of those days - word blindness translated > "the > > > > Call > > > > > Home DOTS server initiates a TLS connection to the Call Home DOTS > > > > client." > > > > > as a separate action to "the Call Home DOTS client initiates a T= LS > > > > > connection to the Call Home DOTS server.". The actual text is > correct. > > > > > > > > > > > > > > > > > I agree that RFC8071 only switches the TCP layer > > > > > > > roles. > > > > > > > > > > > > [Med] Yes. > > > > > > > > > > > > However all works if the TCP + TLS layer roles are switched - i= n > > > > > > > the > > > > > > > same way that UDP + DTLS work. > > > > > > > > > > > > [Med] Great. We went for this approach because we preserve the > > same > > > > role > > > > > > for both DTLS and TLS: > > > > > > > > > > > > +-----------+ +-----------= + > > > > > > | Call Home | | Call Home = | > > > > > > | DOTS | | DOTS = | > > > > > > | server | | client = | > > > > > > +-----+-----+ +-----+-----= + > > > > > > (D)TLS client (D)TLS serve= r > > > > > > > > > > > > > > > > > > > > Enhancing the libcoap code to support only the TCP layer bein= g > > > > switched > > > > > is > > > > > > > doable - but have no idea as to whether other CoAP > > implementations > > > > can > > > > > > > handle this specific requirement. > > > > > > > > > > > > [Med] Do we really need to do that? > > > > > > > > > > Jon> No. It was my mis-reading of the text that caused this > confusion. > > > > > > > > > > > > > > > > > > > > > > > > > *** Not (yet) Implemented #1 - Redirected Signalling > > > > > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > > 06#section- > > > > > > > 3.2. > > > > > > > 2 > > > > > > > > > > > > > > I do not see any issues here. > > > > > > > > > > > > > > *** Not (yet) implemented #2 - New Conflict Cause 4 > > > > > > > > > > > > > > I do not see any issues here. > > > > > > > > > > > > > > *** Not (yet) Implemented #3 - Address sharing considerations > > > > > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > > 06#section- > > > > > > > 3.3. > > > > > > > 2 > > > > > > > > > > > > > > I do not see any issues here - just need to interface with th= e > > > > > translators > > > > > > > to get the appropriate information. > > > > > > > > > > > > > > Regards > > > > > > > > > > > > > > Jon > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On > Behalf > > > Of > > > > > > Valery > > > > > > > > Smyslov > > > > > > > > Sent: 23 October 2019 08:36 > > > > > > > > To: dots@ietf.org > > > > > > > > Cc: dots-chairs@ietf.org > > > > > > > > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > > > draft-ietf-dots-signal- > > > > > > > > call-home-06. > > > > > > > > The version to be reviewed is here: > > > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > > > signal-call-home-06.txt > > > > > > > > > > > > > > > > The WGLC will last for two weeks and will end on November t= he > > > 7th. > > > > > > > > Please send your comments to the list before this date. > > > > > > > > > > > > > > > > Regards, > > > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > Dots mailing list > > > > > > > > Dots@ietf.org > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Dots mailing list > > > > > > > Dots@ietf.org > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > _______________________________________________ > > > > > > Dots mailing list > > > > > > Dots@ietf.org > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots From nobody Fri Nov 8 07:43:47 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BA0B12021C; Fri, 8 Nov 2019 07:43:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hTCmkslsVsbZ; Fri, 8 Nov 2019 07:43:39 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2437C120143; Fri, 8 Nov 2019 07:43:38 -0800 (PST) Received: from mail2.jpshallow.com ([192.168.0.3] helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.92.3) (envelope-from ) id 1iT6QB-0002Jg-HT; Fri, 08 Nov 2019 15:43:35 +0000 From: "Jon Shallow" To: , "'Valery Smyslov'" , , References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca401d59549$6839d730$38ad8590$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1cbb01d59557$9bfb78e0$d3f26aa0$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B8A2@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1e6101d5963b$d63f7ee0$82be7ca0$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135FB38@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135FB38@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Fri, 8 Nov 2019 15:43:29 -0000 Message-ID: <1e7801d5964b$4491ff30$cdb5fd90$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQQIoyNJKAgLNmFMCZGGj2AN/UZNvAfmPiTgBw9wAfANCC62dAoCGvS2nwEXZwA== Content-Language: en-gb Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 15:43:42 -0000 Hi Med, See inline. Regards Jon > -----Original Message----- > From: Dots [mailto: -dots-bounces@ietf.org] On Behalf Of mohamed.boucadair@orange.com > Sent: 08 November 2019 14:21 > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Hi Jon, >=20 > Thank you for the feedback. >=20 > Please see inline. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > Envoy=E9=A0: vendredi 8 novembre 2019 14:53 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; = dots- > > chairs@ietf.org > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Hi Med et al, > > > > I have gone back over the heartbeat call home and have a couple of > comments > > > > In > > = https://tools.ietf.org/html/draft-ietf-dots-signal-channel-38#section- > 4.5..1 > > > > OLD > > > > Figure 18 shows how to obtain acceptable configuration parameters = for > > the DOTS server. > > >=20 > [Med] "for" is used in reference to "acceptable" from the perspective = of the > server. Sure, the information will be retrieved from the server. Jon> OK >=20 >=20 > > NEW > > > > Figure 18 shows how to obtain acceptable configuration parameters = for > > the DOTS client. > > > > or NEW > > > > Figure 18 shows how to obtain acceptable configuration parameters from > > the DOTS server. > > > > With Call Home, the GET Config will still tell the Call Home DOTS = Client > > what are the acceptable values (which will cover keeping any NAT > bindings > > "warm"), >=20 > [Med] Yes, and especilay for twekaing heartbeat-interval. >=20 > and then the Call Home DOTS client can optionally do a PUT for > > tweaking within the allowed bounds. >=20 > [Med] Not sure to follow you here. Which PUT are you referring to? Jon> PUT /config to change the current values. >=20 > > > > As the "saturated" direction will most likely continue to be from = the (Call > > Home) DOTS server to the (Call Home) DOTS client all the signal = draft > > recovery / continuing mechanisms still stand which the call home = draft > just > > re-emphasises. >=20 > [Med] There are some diffs: e.g., the Call Home Clint can't initiate a = new > (D)TLS session. Jon> Agreed. My DOTS client when configured to be in Call Home mode is = not allowed to initiate any new (D)TLS sessions, but continues to listen on = port 4647. Jon> That said, I have not (yet) implemented the Call Home DOTS server initiating a new connection if the heartbeats have expired. ~Jon >=20 > > > > I have not had a chance to separately test this Call Home variant, = but > > everything is using the same code logic at this point as per the = signal > > draft. > > > > Regards > > > > Jon > > > > > -----Original Message----- > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of > ietf- > > > supjps-mohamed.boucadair@orange.com > > > Sent: 07 November 2019 12:16 > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; = dots-chairs@ietf.org > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > Re-, > > > > > > The NEW wording works for me. > > > > > > Thank you. > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > > Envoy=E9=A0: jeudi 7 novembre 2019 11:39 > > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; = dots@ietf.org; > dots- > > > > chairs@ietf.org > > > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > Hi Med, > > > > > > > > Happy Eyeballs worked fine with me with the Call Home DOTS = server > > > > initiating > > > > the DTLS and TLS sessions. > > > > > > > > Heartbeats work, but I have not tested them under stress / loss > > conditions. > > > > I will try to get that tested tomorrow. > > > > > > > > In terms of the text I mis-read, perhaps it could be partially > > re-written > > > > > > > > OLD > > > > > > > > " If TCP is used, the Call Home DOTS server begins by initiating = a > > > > TCP connection to the Call Home DOTS client. Using this TCP > > > > connection, the Call Home DOTS server initiates a TLS connection > > > > to the Call Home DOTS client." > > > > > > > > NEW > > > > > > > > " If TCP is used, the Call Home DOTS server begins by initiating = a > > > > TCP connection to the Call Home DOTS client. Once connected, = the > Call > > > > Home > > > > DOTS server continues to initiate a TLS connection > > > > to the Call Home DOTS client." > > > > > > > > Regards > > > > > > > > Jon > > > > > > > > > -----Original Message----- > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > mohamed.boucadair@orange.com > > > > > Sent: 07 November 2019 09:34 > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots- > > chairs@ietf.org > > > > > Subject: Re: [Dots] WGLC on = draft-ietf-dots-signal-call-home-06 > > > > > > > > > > Re-, > > > > > > > > > > Thank you, Jon. > > > > > > > > > > BTW, I don't see any issue about HE and HBs for the call home. = I > > assume > > > > that > > > > > no problem was encountered to implement it. > > > > > > > > > > Cheers, > > > > > Med > > > > > > -----Message d'origine----- > > > > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > > > > Envoy=E9=A0: jeudi 7 novembre 2019 09:58 > > > > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; = dots@ietf.org; > > > dots- > > > > > > chairs@ietf.org > > > > > > Objet=A0: RE: [Dots] WGLC on = draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > Hi Med, > > > > > > > > > > > > See inline. > > > > > > > > > > > > Regards > > > > > > > > > > > > Jon > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > > > > > mohamed.boucadair@orange.com > > > > > > > Sent: 07 November 2019 07:12 > > > > > > > To: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots- > > > > chairs@ietf.org > > > > > > > Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > > > Hi Jon, > > > > > > > > > > > > > > Thank you for sharing this cool news. > > > > > > > > > > > > > > Please see inline. > > > > > > > > > > > > > > Cheers, > > > > > > > Med > > > > > > > > > > > > > > > -----Message d'origine----- > > > > > > > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de = Jon > > Shallow > > > > > > > > Envoy=E9=A0: mercredi 6 novembre 2019 18:13 > > > > > > > > =C0=A0: 'Valery Smyslov'; dots@ietf.org; = dots-chairs@ietf.org > > > > > > > > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > > > > > Hi All, > > > > > > > > > > > > > > > > I have done a preliminary working implementation of DOTS Call- > > > Home > > > > > - > > > > > > > there > > > > > > > > is still some little used functionality to finish off. > > > > > > > > > > > > > > > > *** Issue # 1 - TCP TLS sessions > > > > > > > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > > > 06#section- > > > > > > > 3..1 > > > > > > > > > > > > > > > > " If UDP transport is used, the Call Home DOTS server = begins by > > > > > > > > initiating a DTLS connection to the Call Home DOTS = client." > > > > > > > > > > > > > > > > This works as expected where the UDP + DTLS layer roles = are > > > > switched. > > > > > > > > > > > > > > > > " If TCP is used, the Call Home DOTS server begins by > > initiating > > a > > > > > > > > TCP connection to the Call Home DOTS client. Using this = TCP > > > > > > > > connection, the Call Home DOTS server initiates a TLS > > connection > > > > > > > > to the Call Home DOTS client." > > > > > > > > > > > > > > > > With the current libcoap implementation, I am unable to create > > a > > > > CoAP > > > > > > > > session using TLS on an existing TCP connection - so the DOTS > > > > Client > > > > is > > > > > > > > unable to accept an incoming TCP session and then = initiate TLS > > > > > > integrated > > > > > > > > with the CoAP session. > > > > > > > > > > > > > > [Med] Why the client would initiate the TLS session? Do = you want > > to > > > > test > > > > > > a > > > > > > > RFC8071-like approach? > > > > > > > > > > > > Jon> Yesterday was one of those days - word blindness translated > > "the > > > > > Call > > > > > > Home DOTS server initiates a TLS connection to the Call Home DOTS > > > > > client." > > > > > > as a separate action to "the Call Home DOTS client = initiates a TLS > > > > > > connection to the Call Home DOTS server.". The actual text = is > > correct. > > > > > > > > > > > > > > > > > > > > I agree that RFC8071 only switches the TCP layer > > > > > > > > roles. > > > > > > > > > > > > > > [Med] Yes. > > > > > > > > > > > > > > However all works if the TCP + TLS layer roles are = switched - in > > > > > > > > the > > > > > > > > same way that UDP + DTLS work. > > > > > > > > > > > > > > [Med] Great. We went for this approach because we preserve = the > > > same > > > > > role > > > > > > > for both DTLS and TLS: > > > > > > > > > > > > > > +-----------+ +-----------+ > > > > > > > | Call Home | | Call = Home | > > > > > > > | DOTS | | = DOTS | > > > > > > > | server | | = client | > > > > > > > +-----+-----+ +-----+-----+ > > > > > > > (D)TLS client (D)TLS server > > > > > > > > > > > > > > > > > > > > > > > Enhancing the libcoap code to support only the TCP layer being > > > > > switched > > > > > > is > > > > > > > > doable - but have no idea as to whether other CoAP > > > implementations > > > > > can > > > > > > > > handle this specific requirement. > > > > > > > > > > > > > > [Med] Do we really need to do that? > > > > > > > > > > > > Jon> No. It was my mis-reading of the text that caused this > > confusion. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > *** Not (yet) Implemented #1 - Redirected Signalling > > > > > > > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > > > 06#section- > > > > > > > > 3.2. > > > > > > > > 2 > > > > > > > > > > > > > > > > I do not see any issues here. > > > > > > > > > > > > > > > > *** Not (yet) implemented #2 - New Conflict Cause 4 > > > > > > > > > > > > > > > > I do not see any issues here. > > > > > > > > > > > > > > > > *** Not (yet) Implemented #3 - Address sharing considerations > > > > > > > > > > > > > > > > https://tools.ietf.org/html/draft-ietf-dots-signal-call-home- > > > > > > 06#section- > > > > > > > > 3.3. > > > > > > > > 2 > > > > > > > > > > > > > > > > I do not see any issues here - just need to interface = with the > > > > > > translators > > > > > > > > to get the appropriate information. > > > > > > > > > > > > > > > > Regards > > > > > > > > > > > > > > > > Jon > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] = On > > Behalf > > > > Of > > > > > > > Valery > > > > > > > > > Smyslov > > > > > > > > > Sent: 23 October 2019 08:36 > > > > > > > > > To: dots@ietf.org > > > > > > > > > Cc: dots-chairs@ietf.org > > > > > > > > > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > this message starts a Work Group Last Call (WGLC) for > > > > > > > > draft-ietf-dots-signal- > > > > > > > > > call-home-06. > > > > > > > > > The version to be reviewed is here: > > > > > > > > https://www.ietf.org/id/draft-ietf-dots- > > > > > > > > > signal-call-home-06.txt > > > > > > > > > > > > > > > > > > The WGLC will last for two weeks and will end on = November > the > > > > 7th. > > > > > > > > > Please send your comments to the list before this = date. > > > > > > > > > > > > > > > > > > Regards, > > > > > > > > > Frank & Valery. > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > Dots mailing list > > > > > > > > > Dots@ietf.org > > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > Dots mailing list > > > > > > > > Dots@ietf.org > > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Dots mailing list > > > > > > > Dots@ietf.org > > > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Fri Nov 8 09:10:12 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AED2A1208AB for ; Fri, 8 Nov 2019 09:10:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MK7oA8lRdmad for ; Fri, 8 Nov 2019 09:10:07 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 672D512083C for ; Fri, 8 Nov 2019 09:10:07 -0800 (PST) Received: from [192.168.217.102] (p548DC893.dip0.t-ipconnect.de [84.141.200.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 478mws50mSz108H; Fri, 8 Nov 2019 18:10:05 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135F7FE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Fri, 8 Nov 2019 18:10:05 +0100 Cc: "dots@ietf.org" X-Mao-Original-Outgoing-Id: 594925803.439213-958efc301215338605ec97b091768141 Content-Transfer-Encoding: quoted-printable Message-Id: <7A790E73-62A3-46CE-B821-25B315CBC269@tzi.org> References: <787AE7BB302AE849A7480A190F8B93303135F7FE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Dots] Role reversal in RFC7252 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 17:10:10 -0000 On Nov 8, 2019, at 13:29, = wrote: >=20 > Hi Carsten, > =20 > Can you please help indicate whether (and thus which part of) RFC7252 = discusses client/server role reversal so that a CoAP server can send = (non-Empty) requests to a CoAP client? 2. Constrained Application Protocol The interaction model of CoAP is similar to the client/server model of HTTP. However, machine-to-machine interactions typically result in a CoAP implementation acting in both client and server roles. =20 Obviously, the one sending a request is always a client. But it might = have been a server in the last interaction. Because we don=E2=80=99t = need a connection (or, with RFC 8323, the connection does not dictate = the direction), this is easy to do. Gr=C3=BC=C3=9Fe, Carsten From nobody Mon Nov 11 10:06:17 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B5991208FB; Mon, 11 Nov 2019 10:06:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mfWQy9jRSRtl; Mon, 11 Nov 2019 10:06:12 -0800 (PST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC19D12085B; Mon, 11 Nov 2019 10:06:11 -0800 (PST) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xABI66Mi017934 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 11 Nov 2019 13:06:08 -0500 Date: Mon, 11 Nov 2019 10:06:05 -0800 From: Benjamin Kaduk To: mohamed.boucadair@orange.com Cc: Jon Shallow , "'Valery Smyslov'" , "dots@ietf.org" , "dots-chairs@ietf.org" Message-ID: <20191111180605.GA32847@kduck.mit.edu> References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca401d59549$6839d730$38ad8590$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1cbb01d59557$9bfb78e0$d3f26aa0$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B8A2@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1e6101d5963b$d63f7ee0$82be7ca0$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135FB38@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <787AE7BB302AE849A7480A190F8B93303135FB38@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 18:06:15 -0000 On Fri, Nov 08, 2019 at 02:21:24PM +0000, mohamed.boucadair@orange.com wrote: > Hi Jon, > > Thank you for the feedback. > > Please see inline. > > Cheers, > Med > > > -----Message d'origine----- > > De : Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > Envoyé : vendredi 8 novembre 2019 14:53 > > À : BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; dots- > > chairs@ietf.org > > Objet : RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > Hi Med et al, > > > > I have gone back over the heartbeat call home and have a couple of comments > > > > In > > https://tools.ietf.org/html/draft-ietf-dots-signal-channel-38#section-4.5..1 > > > > OLD > > > > Figure 18 shows how to obtain acceptable configuration parameters for > > the DOTS server. > > > > [Med] "for" is used in reference to "acceptable" from the perspective of the server. Sure, the information will be retrieved from the server. perhaps "how to obtain configuration parameters that the DOTS server will find acceptable", then? -Ben > > > NEW > > > > Figure 18 shows how to obtain acceptable configuration parameters for > > the DOTS client. > > > > or NEW > > > > Figure 18 shows how to obtain acceptable configuration parameters from > > the DOTS server. > > From nobody Mon Nov 11 22:40:27 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D555F120128 for ; Mon, 11 Nov 2019 22:40:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cTo5WgTMaDdA for ; Mon, 11 Nov 2019 22:40:24 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B65C12011C for ; Mon, 11 Nov 2019 22:40:24 -0800 (PST) Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id 47BymQ6Qmyzywn; Tue, 12 Nov 2019 07:40:22 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.35]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id 47BymQ5pMvzFpX3; Tue, 12 Nov 2019 07:40:22 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6C.corporate.adroot.infra.ftgroup ([fe80::f58e:8e9d:ae18:b9e3%21]) with mapi id 14.03.0468.000; Tue, 12 Nov 2019 07:40:22 +0100 From: To: Carsten Bormann CC: "dots@ietf.org" Thread-Topic: Role reversal in RFC7252 Thread-Index: AdWWMCYu7mRjeWKMSre161Y2+4DxBQAHtVqAALUnIAA= Date: Tue, 12 Nov 2019 06:40:22 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313622C7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93303135F7FE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <7A790E73-62A3-46CE-B821-25B315CBC269@tzi.org> In-Reply-To: <7A790E73-62A3-46CE-B821-25B315CBC269@tzi.org> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Role reversal in RFC7252 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 06:40:26 -0000 SGkgQ2Fyc3RlbiwgDQoNCkZ1bGx5IGFncmVlIGlmIHdlIG1vZGVsIGFuIGVuZHBvaW50IGFzIGJv dGggYSBjbGllbnQgYW5kIHNlcnZlci4NCg0KVGhlIGNvbmNlcm4gSSBoYWQgaXMgd2hlbiB3ZSB3 YW50IHRvIG1vZGVsIGFuIGVuZHBvaW50IHNvbGVseSBhcyBhbiAiY2xpZW50IiAob3IgYXMgYSBz ZXJ2ZXIpLg0KDQpUaGFua3MuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdv cmlnaW5lLS0tLS0NCj4gRGXCoDogQ2Fyc3RlbiBCb3JtYW5uIFttYWlsdG86Y2Fib0B0emkub3Jn XQ0KPiBFbnZvecOpwqA6IHZlbmRyZWRpIDggbm92ZW1icmUgMjAxOSAxODoxMA0KPiDDgMKgOiBC T1VDQURBSVIgTW9oYW1lZCBUR0kvT0xODQo+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gT2JqZXTC oDogUmU6IFJvbGUgcmV2ZXJzYWwgaW4gUkZDNzI1Mg0KPiANCj4gT24gTm92IDgsIDIwMTksIGF0 IDEzOjI5LCA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4NCj4gPG1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb20+IHdyb3RlOg0KPiA+DQo+ID4gSGkgQ2Fyc3RlbiwNCj4gPg0KPiA+IENh biB5b3UgcGxlYXNlIGhlbHAgaW5kaWNhdGUgd2hldGhlciAoYW5kIHRodXMgd2hpY2ggcGFydCBv ZikgUkZDNzI1Mg0KPiBkaXNjdXNzZXMgY2xpZW50L3NlcnZlciByb2xlIHJldmVyc2FsIHNvIHRo YXQgYSBDb0FQIHNlcnZlciBjYW4gc2VuZCAobm9uLQ0KPiBFbXB0eSkgcmVxdWVzdHMgdG8gYSBD b0FQIGNsaWVudD8NCj4gDQo+IA0KPiAyLiAgQ29uc3RyYWluZWQgQXBwbGljYXRpb24gUHJvdG9j b2wNCj4gDQo+ICAgIFRoZSBpbnRlcmFjdGlvbiBtb2RlbCBvZiBDb0FQIGlzIHNpbWlsYXIgdG8g dGhlIGNsaWVudC9zZXJ2ZXIgbW9kZWwNCj4gICAgb2YgSFRUUC4gIEhvd2V2ZXIsIG1hY2hpbmUt dG8tbWFjaGluZSBpbnRlcmFjdGlvbnMgdHlwaWNhbGx5IHJlc3VsdA0KPiAgICBpbiBhIENvQVAg aW1wbGVtZW50YXRpb24gYWN0aW5nIGluIGJvdGggY2xpZW50IGFuZCBzZXJ2ZXIgcm9sZXMuDQo+ IA0KPiBPYnZpb3VzbHksIHRoZSBvbmUgc2VuZGluZyBhIHJlcXVlc3QgaXMgYWx3YXlzIGEgY2xp ZW50LiBCdXQgaXQgbWlnaHQgaGF2ZQ0KPiBiZWVuIGEgc2VydmVyIGluIHRoZSBsYXN0ICBpbnRl cmFjdGlvbi4gIEJlY2F1c2Ugd2UgZG9u4oCZdCBuZWVkIGEgY29ubmVjdGlvbg0KPiAob3IsIHdp dGggUkZDIDgzMjMsIHRoZSBjb25uZWN0aW9uIGRvZXMgbm90IGRpY3RhdGUgdGhlIGRpcmVjdGlv biksIHRoaXMgaXMNCj4gZWFzeSB0byBkby4NCj4gDQo+IEdyw7zDn2UsIENhcnN0ZW4NCg0K From nobody Mon Nov 11 22:42:26 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95AC8120131; Mon, 11 Nov 2019 22:42:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k2-3XdxkMmBQ; Mon, 11 Nov 2019 22:42:23 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0728612012A; Mon, 11 Nov 2019 22:42:23 -0800 (PST) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 47Bypj4k7Qz2xJk; Tue, 12 Nov 2019 07:42:21 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.60]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 47Bypj3WDrz1xpM; Tue, 12 Nov 2019 07:42:21 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5D.corporate.adroot.infra.ftgroup ([fe80::8899:bbc3:9726:cd5e%21]) with mapi id 14.03.0468.000; Tue, 12 Nov 2019 07:42:21 +0100 From: To: Benjamin Kaduk CC: Jon Shallow , 'Valery Smyslov' , "dots@ietf.org" , "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 Thread-Index: AQHVmLq2/R2bHrBOukGhFE7L46Ct6aeHFxrQ Date: Tue, 12 Nov 2019 06:42:20 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313622D9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1ca401d59549$6839d730$38ad8590$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B754@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1cbb01d59557$9bfb78e0$d3f26aa0$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135B8A2@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1e6101d5963b$d63f7ee0$82be7ca0$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93303135FB38@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20191111180605.GA32847@kduck.mit.edu> In-Reply-To: <20191111180605.GA32847@kduck.mit.edu> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 06:42:25 -0000 Hi Ben,=20 That's better. Thanks.=20 Cheers, Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: lundi 11 novembre 2019 19:06 > =C0=A0: BOUCADAIR Mohamed TGI/OLN > Cc=A0: Jon Shallow; 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > On Fri, Nov 08, 2019 at 02:21:24PM +0000, mohamed.boucadair@orange.com > wrote: > > Hi Jon, > > > > Thank you for the feedback. > > > > Please see inline. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > Envoy=E9=A0: vendredi 8 novembre 2019 14:53 > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN; 'Valery Smyslov'; dots@ietf.org; d= ots- > > > chairs@ietf.org > > > Objet=A0: RE: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 > > > > > > Hi Med et al, > > > > > > I have gone back over the heartbeat call home and have a couple of > comments > > > > > > In > > > https://tools.ietf.org/html/draft-ietf-dots-signal-channel-38#section= - > 4.5..1 > > > > > > OLD > > > > > > Figure 18 shows how to obtain acceptable configuration parameters > for > > > the DOTS server. > > > > > > > [Med] "for" is used in reference to "acceptable" from the perspective o= f > the server. Sure, the information will be retrieved from the server. >=20 > perhaps "how to obtain configuration parameters that the DOTS server will > find acceptable", then? >=20 > -Ben >=20 > > > > > NEW > > > > > > Figure 18 shows how to obtain acceptable configuration parameters > for > > > the DOTS client. > > > > > > or NEW > > > > > > Figure 18 shows how to obtain acceptable configuration parameters > from > > > the DOTS server. > > > From nobody Mon Nov 11 22:58:49 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2106120132 for ; Mon, 11 Nov 2019 22:58:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UOgyUtGbeakn for ; Mon, 11 Nov 2019 22:58:45 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 047691200A4 for ; Mon, 11 Nov 2019 22:58:45 -0800 (PST) Received: from [192.168.217.102] (p548DC893.dip0.t-ipconnect.de [84.141.200.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 47Bz9b11JjzyrG; Tue, 12 Nov 2019 07:58:43 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313622C7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Tue, 12 Nov 2019 07:58:42 +0100 Cc: "dots@ietf.org" X-Mao-Original-Outgoing-Id: 595234720.930106-2c87a742a733ef02be595ce7992e5c4f Content-Transfer-Encoding: quoted-printable Message-Id: References: <787AE7BB302AE849A7480A190F8B93303135F7FE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <7A790E73-62A3-46CE-B821-25B315CBC269@tzi.org> <787AE7BB302AE849A7480A190F8B9330313622C7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Dots] Role reversal in RFC7252 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 06:58:48 -0000 On Nov 12, 2019, at 07:40, = wrote: >=20 > Hi Carsten,=20 >=20 > Fully agree if we model an endpoint as both a client and server. >=20 > The concern I had is when we want to model an endpoint solely as an = =E2=80=9Cclient" (or as a server). The question is why you would want to do this. The main point about a server is that its transport address (IP address = + port number) needs to be known to talk to it. (The client implicitly = indicates its transport address in a request, and it only needs to be = stable up to a response =E2=80=94 which may include an observe = notification later.) So if your clients are hopping around on different addresses, role = reversal requires the server-now-client to know the current one. In a = keep alive situation, I=E2=80=99d expect that to be the case, so there = is very little against role reversal. (I=E2=80=99m assuming DOTS environments are NAT free.) Gr=C3=BC=C3=9Fe, Carsten From nobody Mon Nov 11 23:13:51 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7B1C12016E; Mon, 11 Nov 2019 23:13:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.1 X-Spam-Level: X-Spam-Status: No, score=-0.1 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=smyslov.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fr3zec5TiKXb; Mon, 11 Nov 2019 23:13:48 -0800 (PST) Received: from direct.host-care.com (direct.host-care.com [198.136.54.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05A251200A4; Mon, 11 Nov 2019 23:13:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smyslov.net ; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :Date:Subject:Cc:To:From:Sender:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=ErhsyMkChfCgH6B8wIgGA/veI9fYDxCSW1FJqSjJuao=; b=v5PAclwUbc/sBD5kgxGj45EvRw CC2C8L5/m/5GZkm+mWHjk6uskO2M9sO5rPoCK/k/hTiskCyeLYa3AO6SbQT7Kzkmaj2c0aYquD2qs sHVJoLuoRJXKw1Ob454kfnCHQR1etOOhtEGXnEgQAg8FmffTRtVOSiEisubiPlMzakWgPk/C3I8B8 6OMSRHaOUnq7F+2I3YB+6X39UeRPsu4L7w4YDpSMwA3RCjDVcGYS8IdVIXjfB3hp1BTloDKx2qBx+ VnctQRWteQ1wxD/weKxaNAouPv0V5ET6dJOPRJNhVQj0SKa76W4f0yifjwbL/5ZVls/WJuPrExUxM wKlEHAFg==; Received: from 95-27-147-103.broadband.corbina.ru ([95.27.147.103]:50745 helo=chichi) by direct.host-care.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.92) (envelope-from ) id 1iUQMx-0000Zl-Vv; Tue, 12 Nov 2019 02:13:44 -0500 From: "Valery Smyslov" To: Cc: Date: Tue, 12 Nov 2019 10:13:11 +0300 Message-ID: <000901d59928$a7e0b240$f7a216c0$@smyslov.net> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdWZJ/DEzXtIw/wSScyc/aBfasvPYA== Content-Language: ru X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - direct.host-care.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - smyslov.net X-Get-Message-Sender-Via: direct.host-care.com: authenticated_id: valery@smyslov.net X-Authenticated-Sender: direct.host-care.com: valery@smyslov.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [Dots] DOTS agenda for IETF106 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 07:13:50 -0000 Hi, DOTS agenda for IETF106 is published: https://datatracker.ietf.org/meeting/106/materials/agenda-106-dots-01 Presenters, please send your slides to the chairs. Please do it before Thursday, 21 November. We still have some spare time in agenda, so if you want to discuss something, please send you request to the chairs. Regards, Frank & Valery. From nobody Mon Nov 11 23:24:44 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4D5D1200A4; Mon, 11 Nov 2019 23:24:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=smyslov.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n039XfVBC8hV; Mon, 11 Nov 2019 23:24:40 -0800 (PST) Received: from direct.host-care.com (direct.host-care.com [198.136.54.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23D8E1200A1; Mon, 11 Nov 2019 23:24:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smyslov.net ; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :Date:Subject:In-Reply-To:References:Cc:To:From:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=mBXMpt7ag3NCaQ7YQ07+XYQqecGVafGOZE2q8J5c2lo=; b=ZEkaaez/m5DL+gLf4ve3lMicI6 PmvjzvVqCyudHFG5LadeVexz9UPbt0NCcuonOSWJfds9jZt//jJWity2EHZkltLZY0RgI4uM0NBO6 xoY3RvWXFoHbR/JdgOVHdBzpufa370Z1uyZHOIaZhXSNX3t4oCe+m8f5fIhCp2JHmgP4DjtosGdVY zj9C95ITgu/wbYtXJEeK28rdtgn912LDfpDo/pbmL8BEh7IbwcRldK2KKFCc5J4WmFAifQY7COyzB P04oLdeFLhJLFp4CR83aYtMGdtK9TekbhvoHUW+pJb0hJJjcRgZIX/Jz6dHjIbTUeiq/bDnIaWw0h 0/svrN2Q==; Received: from 95-27-147-103.broadband.corbina.ru ([95.27.147.103]:50778 helo=chichi) by direct.host-care.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.92) (envelope-from ) id 1iUQXU-0002TT-Ug; Tue, 12 Nov 2019 02:24:37 -0500 From: "Valery Smyslov" To: Cc: References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> In-Reply-To: <011d01d58974$b70298b0$2507ca10$@smyslov.net> Date: Tue, 12 Nov 2019 10:24:07 +0300 Message-ID: <000a01d5992a$2d08b840$871a28c0$@smyslov.net> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCae6249A Content-Language: ru X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - direct.host-care.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - smyslov.net X-Get-Message-Sender-Via: direct.host-care.com: authenticated_id: valery@smyslov.net X-Authenticated-Sender: direct.host-care.com: valery@smyslov.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 07:24:43 -0000 Hi, the WGLC period is over. We received no objection for publication of this document. There were few comments from WG participants suggesting text improvements, so a new version of the draft is needed. Once it is published (when the submission window opens), I'll start preparing shepherd write-up. Regards, Valery. > Hi, > > this message starts a Work Group Last Call (WGLC) for draft-ietf-dots- > server-discovery-05. > The version to be reviewed is here: https://www.ietf.org/id/draft-ietf-dots- > server-discovery-05.txt > > The WGLC will last for two weeks and will end on November the 7th. > Please send your comments to the list before this date. > > Regards, > Frank & Valery. From nobody Mon Nov 11 23:32:46 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE649120170; Mon, 11 Nov 2019 23:32:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=smyslov.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TvCJIezBnXRF; Mon, 11 Nov 2019 23:32:41 -0800 (PST) Received: from direct.host-care.com (direct.host-care.com [198.136.54.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57CB3120168; Mon, 11 Nov 2019 23:32:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smyslov.net ; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :Date:Subject:In-Reply-To:References:Cc:To:From:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=NvKH6jRqWMnHNDMR3r7FWonwx6J+BtkhFnEJEUwDYEo=; b=XumVKggxg/X4kKhIDMg46q8IXp J68oADnM4v4zkXL/gvn0M9aJvtb6TgD67Tax+E2vsuPrXB3yc+ZNGUncnyWzVek1Trv0ZI8CN6jt1 R50DQqQltij+bdA99FRdfi86GEpbShNwR8ML69yRAnEUiGw3bYJXhjXqF2c7iwYagbZt5kZptO/Bl itJ9jctR5daNfn3gIW0ckNIn9DTf0sywcJ1WBaxKYBus0bq+JF5ad5IAmPqQzGcKuiCGXDkOZEQ9A vRD00AfIHgDxlMekg80gJrSHRuE74n9/2TRFTfa64lJ2vs+vfY+9xi68VQJn2tSV3n2kD7J/U6BVn w5Odln/w==; Received: from 95-27-147-103.broadband.corbina.ru ([95.27.147.103]:50805 helo=chichi) by direct.host-care.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.92) (envelope-from ) id 1iUQfD-00041u-NJ; Tue, 12 Nov 2019 02:32:36 -0500 From: "Valery Smyslov" To: Cc: References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> In-Reply-To: <011c01d58974$74529b00$5cf7d100$@smyslov.net> Date: Tue, 12 Nov 2019 10:32:06 +0300 Message-ID: <000b01d5992b$4a67d5a0$df3780e0$@smyslov.net> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQahihX9w Content-Language: ru X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - direct.host-care.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - smyslov.net X-Get-Message-Sender-Via: direct.host-care.com: authenticated_id: valery@smyslov.net X-Authenticated-Sender: direct.host-care.com: valery@smyslov.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 07:32:43 -0000 Hi again, the WGLC period is over. We received no objections for publication of this document. There were few comments from WG participants suggesting minor clarifications, so a new version of the draft is needed. Once it is published (when the submission window opens), I'll start preparing shepherd write-up. Regards, Valery. > Hi, > > this message starts a Work Group Last Call (WGLC) for draft-ietf-dots-signal- > call-home-06. > The version to be reviewed is here: https://www.ietf.org/id/draft-ietf-dots- > signal-call-home-06.txt > > The WGLC will last for two weeks and will end on November the 7th. > Please send your comments to the list before this date. > > Regards, > Frank & Valery. From nobody Mon Nov 11 23:59:09 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16FB41200A1 for ; Mon, 11 Nov 2019 23:59:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x5t4L9T5sBlj for ; Mon, 11 Nov 2019 23:59:05 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE1FB120168 for ; Mon, 11 Nov 2019 23:58:58 -0800 (PST) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 47C0W51WyCzFq3v; Tue, 12 Nov 2019 08:58:57 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.95]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 47C0W50XrmzCql2; Tue, 12 Nov 2019 08:58:57 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM24.corporate.adroot.infra.ftgroup ([fe80::b43f:9973:861e:42af%21]) with mapi id 14.03.0468.000; Tue, 12 Nov 2019 08:58:57 +0100 From: To: Carsten Bormann CC: "dots@ietf.org" Thread-Topic: Role reversal in RFC7252 Thread-Index: AdWWMCYu7mRjeWKMSre161Y2+4DxBQC9nnY0AAFJ0gA= Date: Tue, 12 Nov 2019 07:58:55 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313623BA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93303135F7FE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <7A790E73-62A3-46CE-B821-25B315CBC269@tzi.org> <787AE7BB302AE849A7480A190F8B9330313622C7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Role reversal in RFC7252 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 07:59:07 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4gDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKgOiBDYXJzdGVuIEJvcm1hbm4gW21haWx0bzpjYWJv QHR6aS5vcmddDQo+IEVudm95w6nCoDogbWFyZGkgMTIgbm92ZW1icmUgMjAxOSAwNzo1OQ0KPiDD gMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xODQo+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4g T2JqZXTCoDogUmU6IFJvbGUgcmV2ZXJzYWwgaW4gUkZDNzI1Mg0KPiANCj4gT24gTm92IDEyLCAy MDE5LCBhdCAwNzo0MCwgPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+DQo+IDxtb2hhbWVk LmJvdWNhZGFpckBvcmFuZ2UuY29tPiB3cm90ZToNCj4gPg0KPiA+IEhpIENhcnN0ZW4sDQo+ID4N Cj4gPiBGdWxseSBhZ3JlZSBpZiB3ZSBtb2RlbCBhbiBlbmRwb2ludCBhcyBib3RoIGEgY2xpZW50 IGFuZCBzZXJ2ZXIuDQo+ID4NCj4gPiBUaGUgY29uY2VybiBJIGhhZCBpcyB3aGVuIHdlIHdhbnQg dG8gbW9kZWwgYW4gZW5kcG9pbnQgc29sZWx5IGFzIGFuDQo+IOKAnGNsaWVudCIgKG9yIGFzIGEg c2VydmVyKS4NCj4gDQo+IFRoZSBxdWVzdGlvbiBpcyB3aHkgeW91IHdvdWxkIHdhbnQgdG8gZG8g dGhpcy4NCg0KW01lZF0gT3VyIGluaXRpYWwgY29uY2VybnMgd2VyZTogKDEpIGF2b2lkIGR1cGxp Y2F0aW5nIGZ1bmN0aW9uYWxpdHkgKENvQVAga2VlcGFsaXZlIHZzIGFwcGxpY2F0aW9uIGtlZXBh bGl2ZSkgYW5kICgyKSBhdm9pZCBoYXZpbmcgZG9ybWFudCBjb2RlLiANCg0KRm9yIHRoZSBzZWNv bmQgb25lLCBJIGd1ZXNzIHRoaXMgY2FuIGJlIGNvbnRyb2xsZWQgYnkgbGltaXRpbmcgdGhlIGNv ZGUgdG8gdGhlIHJlcXVpcmVkIGZ1bmN0aW9uYWxpdHkuIEFzIHlvdSBjYW4gc2VlIGluIGh0dHBz Oi8vZ2l0aHViLmNvbS9ib3VjYWRhaXIvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsL2Js b2IvbWFzdGVyL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0zOS50eHQsIHdlIGFkZGVk IHRoaXMgbm90ZTogIA0KDQogICBET1RTIGNsaWVudHMgYW5kIHNlcnZlcnMgYmVoYXZlIGFzIENv QVAgZW5kcG9pbnRzLiAgQnkgZGVmYXVsdCwgYQ0KICAgRE9UUyBjbGllbnQgKG9yIHNlcnZlcikg YmVoYXZlcyBhcyBhIENvQVAgY2xpZW50IChvciBzZXJ2ZXIpLg0KICAgTmV2ZXJ0aGVsZXNzLCBh IERPVFMgY2xpZW50IChvciBzZXJ2ZXIpIGJlaGF2ZXMgYXMgYSBDb0FQIHNlcnZlciAob3INCiAg IGNsaWVudCkgZm9yIHNwZWNpZmljIG9wZXJhdGlvbnMgc3VjaCBhcyBET1RTIGhlYXJ0YmVhdCBv cGVyYXRpb25zDQogICAoU2VjdGlvbiA0LjcpLiAgDQoNCj4gDQo+IFRoZSBtYWluIHBvaW50IGFi b3V0IGEgc2VydmVyIGlzIHRoYXQgaXRzIHRyYW5zcG9ydCBhZGRyZXNzIChJUCBhZGRyZXNzICsN Cj4gcG9ydCBudW1iZXIpIG5lZWRzIHRvIGJlIGtub3duIHRvIHRhbGsgdG8gaXQuICAoVGhlIGNs aWVudCBpbXBsaWNpdGx5DQo+IGluZGljYXRlcyBpdHMgdHJhbnNwb3J0IGFkZHJlc3MgaW4gYSBy ZXF1ZXN0LCBhbmQgaXQgb25seSBuZWVkcyB0byBiZQ0KPiBzdGFibGUgdXAgdG8gYSByZXNwb25z ZSDigJQgd2hpY2ggbWF5IGluY2x1ZGUgYW4gb2JzZXJ2ZSBub3RpZmljYXRpb24gbGF0ZXIuKQ0K DQpbTWVkXSAuLi4gYXNzdW1pbmcgdGhlIHN0YXRlIGluIG9uLXBhdGggTkFUcy9GV3MgaXMgbWFp bnRhaW5lZC4NCg0KPiANCj4gU28gaWYgeW91ciBjbGllbnRzIGFyZSBob3BwaW5nIGFyb3VuZCBv biBkaWZmZXJlbnQgYWRkcmVzc2VzLCByb2xlIHJldmVyc2FsDQo+IHJlcXVpcmVzIHRoZSBzZXJ2 ZXItbm93LWNsaWVudCB0byBrbm93IHRoZSBjdXJyZW50IG9uZS4gIEluIGEga2VlcCBhbGl2ZQ0K PiBzaXR1YXRpb24sIEnigJlkIGV4cGVjdCB0aGF0IHRvIGJlIHRoZSBjYXNlLCBzbyB0aGVyZSBp cyB2ZXJ5IGxpdHRsZSBhZ2FpbnN0DQo+IHJvbGUgcmV2ZXJzYWwuDQoNCltNZWRdIE9LLCB0aGFu a3MuIA0KDQpJbiBvcmRlciB0byBwcm9ncmVzcywgd2UgdXBkYXRlZCB0aGUgc3BlYyB3aXRoIGEg RE9UUyBoZWFydGJlYXQgaW5zdGVhZCBvZiBDb0FQIHBpbmcgbWVzc2FnZXMuIEFuIGV4YW1wbGUg b2Ygc3VjaCBIQiByZXF1ZXN0IGlzIHNob3duIGJlbG93OiAgDQogDQogICAgIEhlYWRlcjogR0VU IChDb2RlPTAuMDEpDQogICAgIFVyaS1QYXRoOiAiLndlbGwta25vd24iDQogICAgIFVyaS1QYXRo OiAiZG90cyINCiAgICAgVXJpLVBhdGg6ICJoYiIgDQoNCkZXSVcsIHRoZSByZXF1aXJlZCBjaGFu Z2VzIHRvIHRoZSBzcGVjIGFyZSBzdHJhaWdodGZvcndhcmQ6IA0KDQpodHRwczovL2dpdGh1Yi5j b20vYm91Y2FkYWlyL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC9ibG9iL21hc3Rlci93 ZGlmZiUyMGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0zOC50eHQlMjBkcmFmdC1pZXRm LWRvdHMtc2lnbmFsLWNoYW5uZWwtMzkucGRmDQoNCj4gDQo+IChJ4oCZbSBhc3N1bWluZyBET1RT IGVudmlyb25tZW50cyBhcmUgTkFUIGZyZWUuKQ0KDQpbTWVkXSBXZSBuZWVkIHRvIGRlYWwgd2l0 aCBib3RoIE5BVHMgYW5kIEZXcy4gV2UgYXJlIGNvdmVyaW5nIHRob3NlIGRldGFpbHMgaW4gdGhl IHNwZWMuIFRoZXNlIGNvbnNpZGVyYXRpb25zIHdpbGwgYmUgdmFsaWQgd2l0aCBvciB3aXRob3V0 IHJvbGUgcmV2ZXJzYWwgKG9ic2VydmUgbm90aWZpY2F0aW9ucywgZm9yIGV4YW1wbGUpLiANCg0K From nobody Tue Nov 12 01:18:58 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 179F31201E3 for ; Tue, 12 Nov 2019 01:18:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8CrrOou7Zcfp for ; Tue, 12 Nov 2019 01:18:55 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E1D4120046 for ; Tue, 12 Nov 2019 01:18:55 -0800 (PST) Received: from opfednr05.francetelecom.fr (unknown [xx.xx.xx.69]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id 47C2HK4sdwz5vkv; Tue, 12 Nov 2019 10:18:53 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.67]) by opfednr05.francetelecom.fr (ESMTP service) with ESMTP id 47C2HK31RGzyQl; Tue, 12 Nov 2019 10:18:53 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM43.corporate.adroot.infra.ftgroup ([fe80::b846:2467:1591:5d9d%21]) with mapi id 14.03.0468.000; Tue, 12 Nov 2019 10:18:53 +0100 From: To: "Carsten Bormann (cabo@tzi.org)" CC: "dots@ietf.org" Thread-Topic: Improve controllability and predictability of keepalives Thread-Index: AdWZOjG0GmH8bbOEScaak/2iE6U5+Q== Date: Tue, 12 Nov 2019 09:18:53 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B9330313624A5OPEXCAUBMA2corp_" MIME-Version: 1.0 Archived-At: Subject: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 09:18:57 -0000 --_000_787AE7BB302AE849A7480A190F8B9330313624A5OPEXCAUBMA2corp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Carsten, You indicated the following in an offline message (I'm adding dots mailing = list as you were OK; see below): > I would have expected using requests sent in non-confirmable messages, > requiring more work on the application side (interpreting losses) but als= o > delivering a more regular, predictable, less noisy signal. > A little bit of specification text is then needed to ensure that those > requests/responses meet the requirements of RFC 8085 and the related > specifications in RFC 7252, and that both sides are in a good position to > interpret the signal they get. ... > If not, I would like to discuss the issue on the DOTS mailing list, and s= ee > whether a small set of changes to the keepalive mechanisms employed can > improve its controllability and predictability. Assuming that non-confirmable application HBs are used, which changes do yo= u think are needed to enhance the DOTS mechanism to meet 8085/7252 requirem= ents? As a reminder we do have the following for setting the hb parameters: =3D=3D=3D=3D=3D=3D Note: heartbeat-interval should be tweaked to also assist DOTS messages for NAT traversal (SIG-011 of [RFC8612]). According to [RFC8085], keepalive messages must not be sent more frequently than once every 15 seconds and should use longer intervals when possible. Furthermore, [RFC4787] recommends NATs to use a state timeout of 2 minutes or longer, but experience shows that sending packets every 15 to 30 seconds is necessary to prevent the majority of middleboxes from losing state for UDP flows. From that standpoint, the RECOMMENDED minimum heartbeat-interval is 15 seconds and the RECOMMENDED maximum heartbeat-interval is 240 seconds. The recommended value of 30 seconds is selected to anticipate the expiry of NAT state. A heartbeat-interval of 30 seconds may be considered as too chatty in some deployments. For such deployments, DOTS agents may negotiate longer heartbeat-interval values to prevent any network overload with too frequent keepalives. Different heartbeat intervals can be defined for 'mitigating- config' and 'idle-config' to reduce being too chatty during idle times. If there is an on-path translator between the DOTS client (standalone or part of a DOTS gateway) and the DOTS server, the 'mitigating-config' heartbeat-interval has to be smaller than the translator session timeout. It is recommended that the 'idle- config' heartbeat-interval is also smaller than the translator session timeout to prevent translator traversal issues, or disabled entirely. Means to discover the lifetime assigned by a translator are out of scope. =3D=3D=3D=3D=3D=3D=3D Thank you. Cheers, Med --_000_787AE7BB302AE849A7480A190F8B9330313624A5OPEXCAUBMA2corp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

= Hi Carsten,

=  

You indicated the following in an offline message (I’m= adding dots mailing list as you were OK; see below):

 

> I would have expected u= sing requests sent in non-confirmable messages,

> requiring more work on = the application side (interpreting losses) but also

> delivering a more regul= ar, predictable, less noisy signal.

> A little bit of specifi= cation text is then needed to ensure that those

> requests/responses meet= the requirements of RFC 8085 and the related

> specifications in RFC 7= 252, and that both sides are in a good position to

> interpret the signal th= ey get.

…

> If not, I would like to= discuss the issue on the DOTS mailing list, and see

> whether a small set of = changes to the keepalive mechanisms employed can

> improve its controllabi= lity and predictability.

 

Assuming that non-confirmable application HBs are used, whic= h changes do you think are needed to enhance the DOTS mechanism to meet 808= 5/7252 requirements?

 

As a reminder we do have the following for setting the hb pa= rameters:

 

=3D=3D=3D=3D=3D=3D

   &= nbsp;  Note: heartbeat-interval should be tweaked to also assist DOTS<= o:p>

   &= nbsp;  messages for NAT traversal (SIG-011 of [RFC8612]).  Accord= ing to

   &= nbsp;  [RFC8085], keepalive messages must not be sent more frequently<= o:p>

   &= nbsp;  than once every 15 seconds and should use longer intervals when=

   &= nbsp;  possible.  Furthermore, [RFC4787] recommends NATs to use a= state

   &= nbsp;  timeout of 2 minutes or longer, but experience shows that sendi= ng

   &= nbsp;  packets every 15 to 30 seconds is necessary to prevent the=

   &= nbsp;  majority of middleboxes from losing state for UDP flows.  = From

   &= nbsp;  that standpoint, the RECOMMENDED minimum heartbeat-interval is = 15

   &= nbsp;  seconds and the RECOMMENDED maximum heartbeat-interval is 240

   &= nbsp;  seconds.  The recommended value of 30 seconds is selected = to

   &= nbsp;  anticipate the expiry of NAT state.

 

   &= nbsp;  A heartbeat-interval of 30 seconds may be considered as too cha= tty

    =   in some deployments.  For such deployments, DOTS agents ma= y

   &= nbsp;  negotiate longer heartbeat-interval values to prevent any netwo= rk

   &= nbsp;  overload with too frequent keepalives.

 

   &= nbsp;  Different heartbeat intervals can be defined for 'mitigating-

   &= nbsp;  config' and 'idle-config' to reduce being too chatty during idl= e

   &= nbsp;  times.  If there is an on-path translator between the DOTS= client

   &= nbsp;  (standalone or part of a DOTS gateway) and the DOTS server, the=

   &= nbsp;  'mitigating-config' heartbeat-interval has to be smaller than t= he

   &= nbsp;  translator session timeout.  It is recommended that the 'i= dle-

   &= nbsp;  config' heartbeat-interval is also smaller than the translator<= o:p>

   &= nbsp;  session timeout to prevent translator traversal issues, or=

   &= nbsp;  disabled entirely.  Means to discover the lifetime assigne= d by a

   &= nbsp;  translator are out of scope.

=3D=3D=3D=3D=3D=3D=3D

 

Thank you.

 

Cheers,

Med

--_000_787AE7BB302AE849A7480A190F8B9330313624A5OPEXCAUBMA2corp_-- From nobody Tue Nov 12 05:11:29 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CB121200F3 for ; Tue, 12 Nov 2019 05:11:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g-rz4-MJOxPX for ; Tue, 12 Nov 2019 05:11:26 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 43E5F1200DB for ; Tue, 12 Nov 2019 05:11:26 -0800 (PST) Received: from [192.168.217.102] (p548DC893.dip0.t-ipconnect.de [84.141.200.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 47C7Rc5BWzzyW7; Tue, 12 Nov 2019 14:11:24 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Tue, 12 Nov 2019 14:11:35 +0100 Cc: "dots@ietf.org" X-Mao-Original-Outgoing-Id: 595257090.653393-fa04c6d9cd8330638e37944fcb9b4938 Content-Transfer-Encoding: quoted-printable Message-Id: <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 13:11:28 -0000 Hi Med, what the text below doesn=E2=80=99t say is what kind of information you = want to derive from the heartbeats. The way they currently (draft -39) = are defined, the client uses a GET (*). GET is not supposed to = influence application state, so the server will not learn anything from = that heartbeat. Is the intention that only the client needs to react to = heartbeat failures? RFC 7252 defines PROBING_RATE as 1 B/s. If you get a response within = the heartbeat interval to the non-confirmable requests, that is not = relevant. If you don=E2=80=99t, your heartbeat interval "MUST be chosen = in such a way that an endpoint does not exceed an average data rate of PROBING_RATE in sending to another endpoint that does not respond. If your interval is intended to be 15 s, that would mean your requests = must be =E2=89=A4 15 B, or you need to define PROBING_RATE differently = for your application. It seems right now you are not trying to be particularly frugal with the = heartbeat message, which is probably OK since most of your networks will = be Ethernet and that will expand the frame size to 64 B anyway. But = that means that you need to define PROBING_RATE to be ~ 5 B/s if you = don=E2=80=99t want to be slowed down in probing. Gr=C3=BC=C3=9Fe, Carsten (*) And expects a 2.03, which would mean that the server confirms the = ETag given in the request. But there is no ETag in that request, and I = really don=E2=80=99t see why a 2.05 with an empty payload wouldn=E2=80=99t= also work. But maybe you want to move to POST anyway (so there can be = application semantics, like taking note of the heartbeat, on the = server), and 2.04 would fit that very well (see RFC 7252 Section 5.8.2). > On Nov 12, 2019, at 10:18, = wrote: >=20 > Hi Carsten, > =20 > You indicated the following in an offline message (I=E2=80=99m adding = dots mailing list as you were OK; see below): > =20 > > I would have expected using requests sent in non-confirmable = messages, > > requiring more work on the application side (interpreting losses) = but also > > delivering a more regular, predictable, less noisy signal. > > A little bit of specification text is then needed to ensure that = those > > requests/responses meet the requirements of RFC 8085 and the related > > specifications in RFC 7252, and that both sides are in a good = position to > > interpret the signal they get. > =E2=80=A6 > > If not, I would like to discuss the issue on the DOTS mailing list, = and see > > whether a small set of changes to the keepalive mechanisms employed = can > > improve its controllability and predictability. > =20 > Assuming that non-confirmable application HBs are used, which changes = do you think are needed to enhance the DOTS mechanism to meet 8085/7252 = requirements? > =20 > As a reminder we do have the following for setting the hb parameters: > =20 > =3D=3D=3D=3D=3D=3D > Note: heartbeat-interval should be tweaked to also assist DOTS > messages for NAT traversal (SIG-011 of [RFC8612]). According to > [RFC8085], keepalive messages must not be sent more frequently > than once every 15 seconds and should use longer intervals when > possible. Furthermore, [RFC4787] recommends NATs to use a state > timeout of 2 minutes or longer, but experience shows that = sending > packets every 15 to 30 seconds is necessary to prevent the > majority of middleboxes from losing state for UDP flows. From > that standpoint, the RECOMMENDED minimum heartbeat-interval is = 15 > seconds and the RECOMMENDED maximum heartbeat-interval is 240 > seconds. The recommended value of 30 seconds is selected to > anticipate the expiry of NAT state. > =20 > A heartbeat-interval of 30 seconds may be considered as too = chatty > in some deployments. For such deployments, DOTS agents may > negotiate longer heartbeat-interval values to prevent any = network > overload with too frequent keepalives. > =20 > Different heartbeat intervals can be defined for 'mitigating- > config' and 'idle-config' to reduce being too chatty during idle > times. If there is an on-path translator between the DOTS = client > (standalone or part of a DOTS gateway) and the DOTS server, the > 'mitigating-config' heartbeat-interval has to be smaller than = the > translator session timeout. It is recommended that the 'idle- > config' heartbeat-interval is also smaller than the translator > session timeout to prevent translator traversal issues, or > disabled entirely. Means to discover the lifetime assigned by a > translator are out of scope. > =3D=3D=3D=3D=3D=3D=3D > =20 > Thank you. > =20 > Cheers, > Med From nobody Tue Nov 12 08:24:12 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BB4A12006E for ; Tue, 12 Nov 2019 08:24:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SHQYZP3RedGI for ; Tue, 12 Nov 2019 08:24:07 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3678812004A for ; Tue, 12 Nov 2019 08:24:07 -0800 (PST) Received: from opfedar05.francetelecom.fr (unknown [xx.xx.xx.7]) by opfedar27.francetelecom.fr (ESMTP service) with ESMTP id 47CCjx50ffz2xrW; Tue, 12 Nov 2019 17:24:05 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.104]) by opfedar05.francetelecom.fr (ESMTP service) with ESMTP id 47CCjx4BK0z2xCN; Tue, 12 Nov 2019 17:24:05 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5F.corporate.adroot.infra.ftgroup ([fe80::193b:bc32:1ad3:362d%21]) with mapi id 14.03.0468.000; Tue, 12 Nov 2019 17:24:05 +0100 From: To: Carsten Bormann CC: "dots@ietf.org" Thread-Topic: Improve controllability and predictability of keepalives Thread-Index: AdWZOjG0GmH8bbOEScaak/2iE6U5+QAGCIeAAAPLSJA= Date: Tue, 12 Nov 2019 16:24:04 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> In-Reply-To: <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 16:24:09 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4gDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKgOiBDYXJzdGVuIEJvcm1hbm4gW21haWx0bzpjYWJv QHR6aS5vcmddDQo+IEVudm95w6nCoDogbWFyZGkgMTIgbm92ZW1icmUgMjAxOSAxNDoxMg0KPiDD gMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xODQo+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4g T2JqZXTCoDogUmU6IEltcHJvdmUgY29udHJvbGxhYmlsaXR5IGFuZCBwcmVkaWN0YWJpbGl0eSBv ZiBrZWVwYWxpdmVzDQo+IA0KPiBIaSBNZWQsDQo+IA0KPiB3aGF0IHRoZSB0ZXh0IGJlbG93IGRv ZXNu4oCZdCBzYXkgaXMgd2hhdCBraW5kIG9mIGluZm9ybWF0aW9uIHlvdSB3YW50IHRvDQo+IGRl cml2ZSBmcm9tIHRoZSBoZWFydGJlYXRzLiANCg0KW01lZF0gSG93IHRvIGludGVycHJldCBIQnMg YnkgZW5kcG9pbnRzIGlzIGRpc2N1c3NlZCBpbiBTZWN0aW9uIDQuNy4gDQoNCiBUaGUgd2F5IHRo ZXkgY3VycmVudGx5IChkcmFmdCAtMzkpIGFyZQ0KPiBkZWZpbmVkLCB0aGUgY2xpZW50IHVzZXMg YSBHRVQgKCopLiAgR0VUIGlzIG5vdCBzdXBwb3NlZCB0byBpbmZsdWVuY2UNCj4gYXBwbGljYXRp b24gc3RhdGUsIHNvIHRoZSBzZXJ2ZXIgd2lsbCBub3QgbGVhcm4gYW55dGhpbmcgZnJvbSB0aGF0 DQo+IGhlYXJ0YmVhdC4gIElzIHRoZSBpbnRlbnRpb24gdGhhdCBvbmx5IHRoZSBjbGllbnQgbmVl ZHMgdG8gcmVhY3QgdG8NCj4gaGVhcnRiZWF0IGZhaWx1cmVzPw0KDQpbTWVkXSBObywgdGhlIHNl cnZlciBuZWVkcyB0byByZWFjdCB0byBoZWFydGJlYXQgZmFpbHVyZXMuIFRoZSBjYXNlcyB0aGF0 IGFyZSBkaXNjdXNzZWQgaW4gdGhlIHNwZWMgYXJlIGFzIGZvbGxvd3M6IA0KDQoqICBJZiB0aGUg RE9UUyBzZXJ2ZXIgcmVjZWl2ZXMgdHJhZmZpYyBmcm9tIHRoZSBwZWVyIERPVFMgY2xpZW50IGJ1 dCBtYXhpbXVtICdtaXNzaW5nLWhiLQ0KICAgYWxsb3dlZCcgdGhyZXNob2xkIGlzIHJlYWNoZWQs IHRoZSBET1RTIHNlcnZlciBNVVNUIE5PVCBjb25zaWRlciB0aGUNCiAgIERPVFMgc2lnbmFsIGNo YW5uZWwgc2Vzc2lvbiBkaXNjb25uZWN0ZWQuICBUaGUgRE9UUyBzZXJ2ZXIgTVVTVCBrZWVwDQog ICBvbiB1c2luZyB0aGUgY3VycmVudCBET1RTIHNpZ25hbCBjaGFubmVsIHNlc3Npb24gc28gdGhh dCB0aGUgRE9UUw0KICAgY2xpZW50IGNhbiBzZW5kIG1pdGlnYXRpb24gcmVxdWVzdHMgb3ZlciB0 aGUgY3VycmVudCBET1RTIHNpZ25hbA0KICAgY2hhbm5lbCBzZXNzaW9uLiAgSW4gdGhpcyBjYXNl LCB0aGUgRE9UUyBzZXJ2ZXIgY2FuIGlkZW50aWZ5IHRoZSBET1RTDQogICBjbGllbnQgaXMgdW5k ZXIgYXR0YWNrIGFuZCB0aGUgaW5ib3VuZCBsaW5rIHRvIHRoZSBET1RTIGNsaWVudA0KICAgKGRv bWFpbikgaXMgc2F0dXJhdGVkLg0KDQoqIElmIHRoZSBET1RTIHNlcnZlciBkb2VzIG5vdA0KICAg cmVjZWl2ZSBhIG1pdGlnYXRpb24gcmVxdWVzdCBmcm9tIHRoZSBET1RTIGNsaWVudCwgaXQgaW1w bGllcyB0aGUNCiAgIERPVFMgY2xpZW50IGhhcyBub3QgZGV0ZWN0ZWQgdGhlIGF0dGFjayBvciwg aWYgYW4gYXR0YWNrIG1pdGlnYXRpb24NCiAgIGlzIGluIHByb2dyZXNzLCBpdCBpbXBsaWVzIHRo ZSBhcHBsaWVkIEREb1MgbWl0aWdhdGlvbiBhY3Rpb25zIGFyZQ0KICAgbm90IHlldCBlZmZlY3Rp dmUgdG8gaGFuZGxlIHRoZSBERG9TIGF0dGFjayB2b2x1bWUNCg0KKiAgSWYgdGhlIERPVFMgc2Vy dmVyIGRvZXMgbm90IHJlY2VpdmUgYW55IHRyYWZmaWMgZnJvbSB0aGUgcGVlciBET1RTDQogICBj bGllbnQgZHVyaW5nIHRoZSB0aW1lIHNwYW4gcmVxdWlyZWQgdG8gZXhoYXVzdCB0aGUgbWF4aW11 bSAnbWlzc2luZy0NCiAgIGhiLWFsbG93ZWQnIHRocmVzaG9sZCwgdGhlIERPVFMgc2VydmVyIGNv bmNsdWRlcyB0aGUgc2Vzc2lvbiBpcw0KICAgZGlzY29ubmVjdGVkLiAgVGhlIERPVFMgc2VydmVy IGNhbiB0aGVuIHRyaWdnZXIgcHJlLWNvbmZpZ3VyZWQNCiAgIG1pdGlnYXRpb24gcmVxdWVzdHMg Zm9yIHRoaXMgRE9UUyBjbGllbnQgKGlmIGFueSkuDQoNCj4gDQo+IFJGQyA3MjUyIGRlZmluZXMg UFJPQklOR19SQVRFIGFzIDEgQi9zLiAgSWYgeW91IGdldCBhIHJlc3BvbnNlIHdpdGhpbiB0aGUN Cj4gaGVhcnRiZWF0IGludGVydmFsIHRvIHRoZSBub24tY29uZmlybWFibGUgcmVxdWVzdHMsIHRo YXQgaXMgbm90IHJlbGV2YW50Lg0KPiBJZiB5b3UgZG9u4oCZdCwgeW91ciBoZWFydGJlYXQgaW50 ZXJ2YWwgIk1VU1QgYmUgY2hvc2VuIGluDQo+ICAgIHN1Y2ggYSB3YXkgdGhhdCBhbiBlbmRwb2lu dCBkb2VzIG5vdCBleGNlZWQgYW4gYXZlcmFnZSBkYXRhIHJhdGUgb2YNCj4gICAgUFJPQklOR19S QVRFIGluIHNlbmRpbmcgdG8gYW5vdGhlciBlbmRwb2ludCB0aGF0IGRvZXMgbm90IHJlc3BvbmQu DQo+IElmIHlvdXIgaW50ZXJ2YWwgaXMgaW50ZW5kZWQgdG8gYmUgMTUgcywgdGhhdCB3b3VsZCBt ZWFuIHlvdXIgcmVxdWVzdHMgbXVzdA0KPiBiZSDiiaQgMTUgQiwgb3IgeW91IG5lZWQgdG8gZGVm aW5lIFBST0JJTkdfUkFURSBkaWZmZXJlbnRseSBmb3IgeW91cg0KPiBhcHBsaWNhdGlvbi4NCj4g SXQgc2VlbXMgcmlnaHQgbm93IHlvdSBhcmUgbm90IHRyeWluZyB0byBiZSBwYXJ0aWN1bGFybHkg ZnJ1Z2FsIHdpdGggdGhlDQo+IGhlYXJ0YmVhdCBtZXNzYWdlLCB3aGljaCBpcyBwcm9iYWJseSBP SyBzaW5jZSBtb3N0IG9mIHlvdXIgbmV0d29ya3Mgd2lsbCBiZQ0KPiBFdGhlcm5ldCBhbmQgdGhh dCB3aWxsIGV4cGFuZCB0aGUgZnJhbWUgc2l6ZSB0byA2NCBCIGFueXdheS4gIEJ1dCB0aGF0DQo+ IG1lYW5zIHRoYXQgeW91IG5lZWQgdG8gZGVmaW5lIFBST0JJTkdfUkFURSB0byBiZSB+IDUgQi9z IGlmIHlvdSBkb27igJl0IHdhbnQNCj4gdG8gYmUgc2xvd2VkIGRvd24gaW4gcHJvYmluZy4NCg0K W01lZF0gR29vZCBwb2ludC4gV2lsbCB1cGRhdGUgYWNjb3JkaW5nbHkuIA0KDQo+IA0KPiBHcsO8 w59lLCBDYXJzdGVuDQo+IA0KPiAoKikgQW5kIGV4cGVjdHMgYSAyLjAzLCB3aGljaCB3b3VsZCBt ZWFuIHRoYXQgdGhlIHNlcnZlciBjb25maXJtcyB0aGUgRVRhZw0KPiBnaXZlbiBpbiB0aGUgcmVx dWVzdC4gIEJ1dCB0aGVyZSBpcyBubyBFVGFnIGluIHRoYXQgcmVxdWVzdCwgYW5kIEkgcmVhbGx5 DQo+IGRvbuKAmXQgc2VlIHdoeSBhIDIuMDUgd2l0aCBhbiBlbXB0eSBwYXlsb2FkIHdvdWxkbuKA mXQgYWxzbyB3b3JrLiAgQnV0IG1heWJlDQo+IHlvdSB3YW50IHRvIG1vdmUgdG8gUE9TVCBhbnl3 YXkgKHNvIHRoZXJlIGNhbiBiZSBhcHBsaWNhdGlvbiBzZW1hbnRpY3MsDQo+IGxpa2UgdGFraW5n IG5vdGUgb2YgdGhlIGhlYXJ0YmVhdCwgb24gdGhlIHNlcnZlciksIGFuZCAyLjA0IHdvdWxkIGZp dCB0aGF0DQo+IHZlcnkgd2VsbCAoc2VlIFJGQyA3MjUyIFNlY3Rpb24gNS44LjIpLg0KDQpbTWVk XSBXaWxsIGNvbnNpZGVyIHRoZSB1c2Ugb2YgUE9TVCBpbnN0ZWFkIG9mIEdFVC4gDQoNCj4gDQo+ ID4gT24gTm92IDEyLCAyMDE5LCBhdCAxMDoxOCwgPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b20+DQo+IDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPiB3cm90ZToNCj4gPg0KPiA+IEhp IENhcnN0ZW4sDQo+ID4NCj4gPiBZb3UgaW5kaWNhdGVkIHRoZSBmb2xsb3dpbmcgaW4gYW4gb2Zm bGluZSBtZXNzYWdlIChJ4oCZbSBhZGRpbmcgZG90cw0KPiBtYWlsaW5nIGxpc3QgYXMgeW91IHdl cmUgT0s7IHNlZSBiZWxvdyk6DQo+ID4NCj4gPiA+IEkgd291bGQgaGF2ZSBleHBlY3RlZCB1c2lu ZyByZXF1ZXN0cyBzZW50IGluIG5vbi1jb25maXJtYWJsZSBtZXNzYWdlcywNCj4gPiA+IHJlcXVp cmluZyBtb3JlIHdvcmsgb24gdGhlIGFwcGxpY2F0aW9uIHNpZGUgKGludGVycHJldGluZyBsb3Nz ZXMpIGJ1dA0KPiBhbHNvDQo+ID4gPiBkZWxpdmVyaW5nIGEgbW9yZSByZWd1bGFyLCBwcmVkaWN0 YWJsZSwgbGVzcyBub2lzeSBzaWduYWwuDQo+ID4gPiBBIGxpdHRsZSBiaXQgb2Ygc3BlY2lmaWNh dGlvbiB0ZXh0IGlzIHRoZW4gbmVlZGVkIHRvIGVuc3VyZSB0aGF0IHRob3NlDQo+ID4gPiByZXF1 ZXN0cy9yZXNwb25zZXMgbWVldCB0aGUgcmVxdWlyZW1lbnRzIG9mIFJGQyA4MDg1IGFuZCB0aGUg cmVsYXRlZA0KPiA+ID4gc3BlY2lmaWNhdGlvbnMgaW4gUkZDIDcyNTIsIGFuZCB0aGF0IGJvdGgg c2lkZXMgYXJlIGluIGEgZ29vZCBwb3NpdGlvbg0KPiB0bw0KPiA+ID4gaW50ZXJwcmV0IHRoZSBz aWduYWwgdGhleSBnZXQuDQo+ID4g4oCmDQo+ID4gPiBJZiBub3QsIEkgd291bGQgbGlrZSB0byBk aXNjdXNzIHRoZSBpc3N1ZSBvbiB0aGUgRE9UUyBtYWlsaW5nIGxpc3QsIGFuZA0KPiBzZWUNCj4g PiA+IHdoZXRoZXIgYSBzbWFsbCBzZXQgb2YgY2hhbmdlcyB0byB0aGUga2VlcGFsaXZlIG1lY2hh bmlzbXMgZW1wbG95ZWQgY2FuDQo+ID4gPiBpbXByb3ZlIGl0cyBjb250cm9sbGFiaWxpdHkgYW5k IHByZWRpY3RhYmlsaXR5Lg0KPiA+DQo+ID4gQXNzdW1pbmcgdGhhdCBub24tY29uZmlybWFibGUg YXBwbGljYXRpb24gSEJzIGFyZSB1c2VkLCB3aGljaCBjaGFuZ2VzIGRvDQo+IHlvdSB0aGluayBh cmUgbmVlZGVkIHRvIGVuaGFuY2UgdGhlIERPVFMgbWVjaGFuaXNtIHRvIG1lZXQgODA4NS83MjUy DQo+IHJlcXVpcmVtZW50cz8NCj4gPg0KPiA+IEFzIGEgcmVtaW5kZXIgd2UgZG8gaGF2ZSB0aGUg Zm9sbG93aW5nIGZvciBzZXR0aW5nIHRoZSBoYiBwYXJhbWV0ZXJzOg0KPiA+DQo+ID4gPT09PT09 DQo+ID4gICAgICAgTm90ZTogaGVhcnRiZWF0LWludGVydmFsIHNob3VsZCBiZSB0d2Vha2VkIHRv IGFsc28gYXNzaXN0IERPVFMNCj4gPiAgICAgICBtZXNzYWdlcyBmb3IgTkFUIHRyYXZlcnNhbCAo U0lHLTAxMSBvZiBbUkZDODYxMl0pLiAgQWNjb3JkaW5nIHRvDQo+ID4gICAgICAgW1JGQzgwODVd LCBrZWVwYWxpdmUgbWVzc2FnZXMgbXVzdCBub3QgYmUgc2VudCBtb3JlIGZyZXF1ZW50bHkNCj4g PiAgICAgICB0aGFuIG9uY2UgZXZlcnkgMTUgc2Vjb25kcyBhbmQgc2hvdWxkIHVzZSBsb25nZXIg aW50ZXJ2YWxzIHdoZW4NCj4gPiAgICAgICBwb3NzaWJsZS4gIEZ1cnRoZXJtb3JlLCBbUkZDNDc4 N10gcmVjb21tZW5kcyBOQVRzIHRvIHVzZSBhIHN0YXRlDQo+ID4gICAgICAgdGltZW91dCBvZiAy IG1pbnV0ZXMgb3IgbG9uZ2VyLCBidXQgZXhwZXJpZW5jZSBzaG93cyB0aGF0IHNlbmRpbmcNCj4g PiAgICAgICBwYWNrZXRzIGV2ZXJ5IDE1IHRvIDMwIHNlY29uZHMgaXMgbmVjZXNzYXJ5IHRvIHBy ZXZlbnQgdGhlDQo+ID4gICAgICAgbWFqb3JpdHkgb2YgbWlkZGxlYm94ZXMgZnJvbSBsb3Npbmcg c3RhdGUgZm9yIFVEUCBmbG93cy4gIEZyb20NCj4gPiAgICAgICB0aGF0IHN0YW5kcG9pbnQsIHRo ZSBSRUNPTU1FTkRFRCBtaW5pbXVtIGhlYXJ0YmVhdC1pbnRlcnZhbCBpcyAxNQ0KPiA+ICAgICAg IHNlY29uZHMgYW5kIHRoZSBSRUNPTU1FTkRFRCBtYXhpbXVtIGhlYXJ0YmVhdC1pbnRlcnZhbCBp cyAyNDANCj4gPiAgICAgICBzZWNvbmRzLiAgVGhlIHJlY29tbWVuZGVkIHZhbHVlIG9mIDMwIHNl Y29uZHMgaXMgc2VsZWN0ZWQgdG8NCj4gPiAgICAgICBhbnRpY2lwYXRlIHRoZSBleHBpcnkgb2Yg TkFUIHN0YXRlLg0KPiA+DQo+ID4gICAgICAgQSBoZWFydGJlYXQtaW50ZXJ2YWwgb2YgMzAgc2Vj b25kcyBtYXkgYmUgY29uc2lkZXJlZCBhcyB0b28gY2hhdHR5DQo+ID4gICAgICAgaW4gc29tZSBk ZXBsb3ltZW50cy4gIEZvciBzdWNoIGRlcGxveW1lbnRzLCBET1RTIGFnZW50cyBtYXkNCj4gPiAg ICAgICBuZWdvdGlhdGUgbG9uZ2VyIGhlYXJ0YmVhdC1pbnRlcnZhbCB2YWx1ZXMgdG8gcHJldmVu dCBhbnkgbmV0d29yaw0KPiA+ICAgICAgIG92ZXJsb2FkIHdpdGggdG9vIGZyZXF1ZW50IGtlZXBh bGl2ZXMuDQo+ID4NCj4gPiAgICAgICBEaWZmZXJlbnQgaGVhcnRiZWF0IGludGVydmFscyBjYW4g YmUgZGVmaW5lZCBmb3IgJ21pdGlnYXRpbmctDQo+ID4gICAgICAgY29uZmlnJyBhbmQgJ2lkbGUt Y29uZmlnJyB0byByZWR1Y2UgYmVpbmcgdG9vIGNoYXR0eSBkdXJpbmcgaWRsZQ0KPiA+ICAgICAg IHRpbWVzLiAgSWYgdGhlcmUgaXMgYW4gb24tcGF0aCB0cmFuc2xhdG9yIGJldHdlZW4gdGhlIERP VFMgY2xpZW50DQo+ID4gICAgICAgKHN0YW5kYWxvbmUgb3IgcGFydCBvZiBhIERPVFMgZ2F0ZXdh eSkgYW5kIHRoZSBET1RTIHNlcnZlciwgdGhlDQo+ID4gICAgICAgJ21pdGlnYXRpbmctY29uZmln JyBoZWFydGJlYXQtaW50ZXJ2YWwgaGFzIHRvIGJlIHNtYWxsZXIgdGhhbiB0aGUNCj4gPiAgICAg ICB0cmFuc2xhdG9yIHNlc3Npb24gdGltZW91dC4gIEl0IGlzIHJlY29tbWVuZGVkIHRoYXQgdGhl ICdpZGxlLQ0KPiA+ICAgICAgIGNvbmZpZycgaGVhcnRiZWF0LWludGVydmFsIGlzIGFsc28gc21h bGxlciB0aGFuIHRoZSB0cmFuc2xhdG9yDQo+ID4gICAgICAgc2Vzc2lvbiB0aW1lb3V0IHRvIHBy ZXZlbnQgdHJhbnNsYXRvciB0cmF2ZXJzYWwgaXNzdWVzLCBvcg0KPiA+ICAgICAgIGRpc2FibGVk IGVudGlyZWx5LiAgTWVhbnMgdG8gZGlzY292ZXIgdGhlIGxpZmV0aW1lIGFzc2lnbmVkIGJ5IGEN Cj4gPiAgICAgICB0cmFuc2xhdG9yIGFyZSBvdXQgb2Ygc2NvcGUuDQo+ID4gPT09PT09PQ0KPiA+ DQo+ID4gVGhhbmsgeW91Lg0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0KDQo= From nobody Wed Nov 13 01:19:12 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C37B1200EF; Wed, 13 Nov 2019 01:19:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.988 X-Spam-Level: X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_FREEMAIL_DOC_PDF=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nCvG5jnoyS5r; Wed, 13 Nov 2019 01:19:08 -0800 (PST) Received: from mail-lf1-x12b.google.com (mail-lf1-x12b.google.com [IPv6:2a00:1450:4864:20::12b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F7BC1200FB; Wed, 13 Nov 2019 01:19:07 -0800 (PST) Received: by mail-lf1-x12b.google.com with SMTP id q28so1328359lfa.5; Wed, 13 Nov 2019 01:19:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xXanwIHXDT38cDijSwdinAKlY3dm7vmQpta41nmXj+8=; b=DYb+Xg3XrnNSyyTFwi6CbW2tyjqm/8xIwjWpRNjQ8TaHDygeWHOFn1Z+7lfdNPOiDB CtuYhodwfGBV9eGAUr+NDRSJBcRnPs0q5b+vhBHAubhXiPK6ud5LfXlWk2iDXuSi6+VY tFuIFfWVFzxS3UOqPlsg3rEyAv9TwNgg6w6bG7lXYgeYYRIGofRwidZDTMoTPMMfdREx NPbGjXnTI9nc0DdzwfNOTPCH3pIo8RWF0iOWbkRG1CFUOoIkcQcLtsDmoDgmPEWQld64 pXOBd66rHXiFDNL4KTAz61GQRlSAX/RFWkWWfJu3sbDNZY2lPUram56mzW8PkxMp6mzg ceqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xXanwIHXDT38cDijSwdinAKlY3dm7vmQpta41nmXj+8=; b=oCipd4P8cOZGcKxxw8WyDGM2FTSl/qlFz/417V4z+qI3lN5rTbsyF3RHZgUwAuVPhV DowJXsBDSCYB3zfsynGU0d1bUI8lX00+lOlppFMFIllfhkoT7IdIrBHkPA+HcoVoKO8x MQ7MpwFncp4UdVDjkKgIugqKVy3g9bwkvBAfjilzTB0XptOUQvwKEXXcantfssPYPa0J ZwhoTsQF6Rc1LpIyJ2AyOXvwp2T6XhqbsXyzqFIExDRLuD+wZcJwWkULxSbh9Izs1A7w DsGUxhiBmfoD1Tt78kEGxuMdCKR3aMAE4sU7S/gHp6hBhXTwew9xZEkYioJw80mtLOxd RcGA== X-Gm-Message-State: APjAAAUCqy8YqKaL9r3IXK2qRopm+bZTbB7tyAofZeRpLNaAQcxEgs0z NGyA98zIBfI8BnN32+QuhTVLMOgZzgG6PRJV/lzcUz3a X-Google-Smtp-Source: APXvYqz0z1OHOvk9o3eLtORvGB/QlLQVj0v94EGTGvwBzGik20KdN9imOv30ObRxdpS5Xy1tescojj4jI5nxXjJAno0= X-Received: by 2002:a19:41c8:: with SMTP id o191mr1913302lfa.101.1573636744590; Wed, 13 Nov 2019 01:19:04 -0800 (PST) MIME-Version: 1.0 References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: H Y Date: Wed, 13 Nov 2019 18:18:52 +0900 Message-ID: To: draft-reddy-dots-telemetry@ietf.org Cc: "dots@ietf.org" Content-Type: multipart/mixed; boundary="0000000000002ba237059736dbca" Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 09:19:11 -0000 --0000000000002ba237059736dbca Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi draft authors, Thank you for updating the draft. I have a question about YANG module of current DOTS telemetry, especially about top-talker. I think that top-talker has several meaning in general. Which top-talker can the YANG module explain? 1) Top-talker of victims. 2) Top-talker of each victim. # IMO, current YANG module can explain 1) , but can not 2) when target-prefix* has several elements. I attached a slide about the question. I'm glad if you answer the question. Thanks, Yuhei 2019=E5=B9=B410=E6=9C=8818=E6=97=A5(=E9=87=91) 18:38 : > > Hi all, > > Although we are waiting for a call for adoption for this draft, we made s= ome changes which you can track with the diff provided below. > > Cheers, > Med > > > -----Message d'origine----- > > De : internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > Envoy=C3=A9 : vendredi 18 octobre 2019 11:33 > > =C3=80 : chenmeiling; BOUCADAIR Mohamed TGI/OLN; Meiling Chen; Tirumale= swar > > Reddy; Ehud Doron; Reddy K > > Objet : New Version Notification for draft-reddy-dots-telemetry-04.txt > > > > > > A new version of I-D, draft-reddy-dots-telemetry-04.txt > > has been successfully submitted by Mohamed Boucadair and posted to the > > IETF repository. > > > > Name: draft-reddy-dots-telemetry > > Revision: 04 > > Title: Distributed Denial-of-Service Open Threat Signali= ng (DOTS) > > Telemetry > > Document date: 2019-10-18 > > Group: Individual Submission > > Pages: 41 > > URL: https://www.ietf.org/internet-drafts/draft-reddy-dots- > > telemetry-04.txt > > Status: https://datatracker.ietf.org/doc/draft-reddy-dots- > > telemetry/ > > Htmlized: https://tools.ietf.org/html/draft-reddy-dots-telemetry-= 04 > > Htmlized: https://datatracker.ietf.org/doc/html/draft-reddy-dots- > > telemetry > > Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-reddy-dots- > > telemetry-04 > > > > Abstract: > > This document aims to enrich DOTS signal channel protocol with > > various telemetry attributes allowing optimal DDoS attack mitigation= . > > This document specifies the normal traffic baseline and attack > > traffic telemetry attributes a DOTS client can convey to its DOTS > > server in the mitigation request, the mitigation status telemetry > > attributes a DOTS server can communicate to a DOTS client, and the > > mitigation efficacy telemetry attributes a DOTS client can > > communicate to a DOTS server. The telemetry attributes can assist > > the mitigator to choose the DDoS mitigation techniques and perform > > optimal DDoS attack mitigation. > > > > > > > > > > Please note that it may take a couple of minutes from the time of > > submission > > until the htmlized version and diff are available at tools.ietf.org. > > > > The IETF Secretariat > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots --=20 ---------------------------------- Yuuhei HAYASHI 08065300884 yuuhei.hayashi@gmail.com iehuuy_0220@docomo.ne.jp ---------------------------------- --0000000000002ba237059736dbca Content-Type: application/pdf; name="Question about draft-reddy-dots-telemetry-04.pdf" Content-Disposition: attachment; filename="Question about draft-reddy-dots-telemetry-04.pdf" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k2x2kbew0 JVBERi0xLjUNCiW1tbW1DQoxIDAgb2JqDQo8PC9UeXBlL0NhdGFsb2cvUGFnZXMgMiAwIFIvTGFu ZyhqYS1KUCkgL1N0cnVjdFRyZWVSb290IDE2IDAgUi9NYXJrSW5mbzw8L01hcmtlZCB0cnVlPj4+ Pg0KZW5kb2JqDQoyIDAgb2JqDQo8PC9UeXBlL1BhZ2VzL0NvdW50IDEvS2lkc1sgMyAwIFJdID4+ DQplbmRvYmoNCjMgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwv RXh0R1N0YXRlPDwvR1M1IDUgMCBSL0dTNiA2IDAgUi9HUzEwIDEwIDAgUj4+L1hPYmplY3Q8PC9N ZXRhNyA3IDAgUi9JbWFnZTggOCAwIFI+Pi9Gb250PDwvRjEgMTEgMCBSL0YyIDEzIDAgUj4+L1By b2NTZXRbL1BERi9UZXh0L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJveFsgMCAwIDk2 MCA1NDBdIC9Db250ZW50cyA0IDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kv Q1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVjdFBhcmVudHMgMD4+DQplbmRvYmoNCjQgMCBvYmoN Cjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMTk4OD4+DQpzdHJlYW0NCnic3VpbbxzFEn5f af9DP+4iud3V1dcIIdkJINCxBMTcFHgwxjFW7AQSi/P3qerL7MxepjfMgBRe1qmeru5vquvyVU/E 6Vfi449PL55+8UyoTz4R58+eij+WCyWUVEqB1sqL6JSwRom3N8vF9x+J18vF6efPrbh9t1yAuO0m KwcK7WD2y4+Wi6+XC/HpxVMhejtBb6eeKqs9LBd1hfv8z4wkIACP5PkRrMWtJxlaQoRWyxiEUSit 4yXRg6RZZQCDlUFgjH3BSKfFNU3NcojS0Z+sx2Ms5WWLxHPRyGC7x1pJcJ1qkTYL14G8bVatiAaA afJvnfH+ARspaYL4fzpGl45Ric+Xi/+G1Z7v9zhdPC67B62iaUnLKxsloxbgCH512R1t7EfG8ScA Vtu430sNvYehvTX/odXA0atgHQDvJb9z6AsoI79jEUOQ0YmihsEkKa9aJJ6rnfS2ewxaqtCpFqlb t8p506xZ8Qzg7rjnLCapTpl98T9goAOeaKon6uzmhtRAKtNwQfvPpUx0XiqKBzKVyWHvpa8yBse/ lsLPdoJjvCnqs6wlLV3VTA7ksmiWeC5p4eaxoUPaqFapW7gO5G2LagbUR/tvZcqSID90Qx1wSVd8 i9U1J2zD+HT6HfdK//cSIyoLYa/BdSSTU2A4lJhrkIKU//MAqpgC2ClpoZOsT6aoEkoTRdWziu1T l80STdY+Sr95TAWLQzurdpLPM7OUt6x6Gc4Q7ZS8eNgiQxf88O1zwAdD8aS0AHmtTeTgGB+M25nR WE8Qjrd9Thc9wrvxRkUBwSHEfIEW04QkVllry3XGgSTtIlhf8n+VjUQUVc0Cn2VdNEtcWIiI2G4A KFWkY0qqnVQXrgN526qaAfXR7s+M85lmyy0/dEMd8EqoPRHrc3xZzuOdVxLWg24JMDtpREi5nmCH RImMlhiKDLaEIchoO8kG5hdsjTpgmA5VTZsYTV03S4kVESfunhLt0Z1iEbpls1w2zWoZTh/rv0IY P2zjHPK/rm8h9eLecFxphtq0dM16u6+nZK+d8+Ik257Kku8JKhpStwo53AAYiAGbXpYMfnpx83jl xbM34uveBUGCNXVjFurGaJDD7tDGAwuYoy800DLxoUkicx+ARLBKDkm7fPFwdXsT6jY71u7x85Pd kn7ktmhyb3H8tm5zyKDKlQyv9/aW84XiGlpM9dANaEpiLgUSoNs7UFTuk2sCeVuaFHlSWgZzbYaq RRGzmZG1Xu5DW+ki0IsbT9v40t0l5kl8gRv6yCtwfJE/aDIIGfE+J78QSQX5YPIeHA3Gpn0pR/Ay zqXC0SFDk1/QUKvvx5BV+sEx6WIPGbC/9YABEW7mQB0wdIEPcQCMDcIMugO2a7JCpZrAYgcs8qtt DrMMbM6OWda+gcFhord5Uj3MXZOxUY84TK1O/3f1+lasbl6ffPt8vU3CyG6KmMMepz+/JLf+DAS3 09qIy5fVZ0FQG265SmOQPojLh14iUXxxM7ywerHSF7/8/m79s7j8crn49PLAzQ9MxjnACB5loPKA 1HjhHowFGqxP7Oril/WJWbUh6nkh6hAlUrGgKCPqMwYRV8dYEOeFhz6kXpbgxcPosIXKzIwqUDK2 LVTHmMvODCwaCQSMeik74nCmBcvNC8uoRGgaqI6xl58XmNc5iVAyATPmX0d6f5gEj7hEGOYPpbnU AZUNpQ/D++7u+vFufaJXD2IdV2ctkHFekIhkRE8gUy05EuR5AyROqxg7IMvlKVU5NeKBZ4+PV9ev 1ri6eSt+aCGcVit2zQgxfa54D4g/tiBOrhVDiJa/r1DnTbQGR/Ie/LQWl2/WVMxa+CYXiy183kgF TXwnLViTq8UWrEB0tA3r8Yqj4/7V2tLZMhcQLZyTi8cQp0Mj0TdxvnnZBDa5fGwBs5ZDowXszzvy OU4yuHp4Rz9ifeJXP63OmnAnF5UhXE9tgG6HydXrX7msNNFNqym76Hxso+NWlPWuX6zOKZpbEKdV lB2IQaH07YB5Is4oVh45bujcX61dFzegV63caPr/g4E/4fHtEJE6vsE0hr/wOOIK37AtXiD3d5qZ /M+ET/wqFs7y1Z5TPMZXmMFLFevA/Z4BDFpCTzYmNVq7A0aXAaty82jT1WFvBrVoAxWwerDJRi4o RgbSe2yJmw2yaPR+ceSzJeyxLVuUL+eQiNYhs/r04V6b2DXUJfDTwP2+AUr52vUHIvKt7ZYMkYwJ IzItE/vzqaMl3JsNegOUzclfQUUJsYdpMyO/xY7cbVHkDsK2PGJY/TcNiwDp7CJfxHEnj4o//pWB +30Dlvrqnmy0YT/cGYDoePuxAbbgQIUso81mk56sgtRMe40M2IPVm5FeZEfutihyh2FbHrHtzGQE gDBFQSG573aiXkocS5XMzJyEWwrwDXQtomRmJiDgqZ9ugXpvmmRmZiNaB/5+Po6yTZLMzKxDW8WN wzismyumHNe/iXUY0KUW1pk5CF8TU21zIEe6WooLbMfFzNQD+HK5hawVF3byded2sBou2+Og3jsu 7OTLzi0HBMfX8OMoKS7+vLtm2nb3QPzcETt/IuicS1tr+hSu1YHbmdvb4pUYpZvolXbuWpK9chxZ 0ytnLyHJK8dBvb9XzlxTileOo9zxynPxJIE9S90FHtVd/AVJK94jDQplbmRzdHJlYW0NCmVuZG9i ag0KNSAwIG9iag0KPDwvVHlwZS9FeHRHU3RhdGUvQk0vTm9ybWFsL2NhIDE+Pg0KZW5kb2JqDQo2 IDAgb2JqDQo8PC9UeXBlL0V4dEdTdGF0ZS9CTS9Ob3JtYWwvQ0EgMT4+DQplbmRvYmoNCjcgMCBv YmoNCjw8L1R5cGUvWE9iamVjdC9TdWJ0eXBlL0Zvcm0vQkJveFsgMCAwIDEyNi40OCAxMDMuNzJd IC9NYXRyaXhbIDAuNTY5MjQgMCAwIDAuNjk0MiAwIDBdIC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVu Z3RoIDM5ODI+Pg0Kc3RyZWFtDQp4nH1ay64duQ3cG/A/nHWANPR+fMb8xEwW9mLy/4tUsagWr50E GBjTPGqJIotkkX3//v7tb/vvD/svff76/i2n/bT9+Wd6Zukzf35ClNPT2hX9oCg/lZLRa16SlCdP inpa2RfVJ9l7dVT8j4t2pqjkuadE7Znrk540Sx5Doo6NISprT5eMp1Eyemm+03wKJbuV7hosHgfF 5nwFi4KVq57308enPKWtYoKCIzYEs/d9BLt96lNGlXIlP/ipYh+dWvj2pz2tNN+iPrV++tNX06Gl PWV+xrO2X7l0XO2znrzHeZ7lA1Xm2WLAljBown38GXaAPZtfHoK1PjTd3kew+wdW6qUEwZoPrBle Wet5L2Kb7vTkcQ/d+RnuK9cKHhs5qL3bc25u99pY1nq4+Z5P6jnYZi/4NgfjQTB3CebdGy6KDoBg reChnACZHV0IgbvMnZwyfBRwQMHYASoU7BXQlFN5ag+Io6CPgEoKVg/IzakGaOPpcesa+vlc/EgL EAqqNlQQBcF8YILwPB6siVs02OQ9sMBtxfQZfuCTqjRO9j62b7KC/Y7diQdYyX6FqzMuArOOYVbr T13DPDGawQG+LDABnNeWvQI9MqyzoZcZDbZqLdP9a8okT28CCKBPAVw5JtQDhvaskvRatoGsKgLh 3VYBOOBwyn/A30SgB6geyUXzeesCHuYdRBkM05vvvHCDZmHjeeTB4bjjM/OWFeH/vBF4tQmPiPMJ nAGwtXddehbYsz8r6U64bcJdGswkM3RAyRLCXluWzVQbRkhCLMKsdqaQnbI8Ac8tPNddTQsc37El ktDSofvJHYEPz3V5eyN0oSAukj2QDOxfch0cOj/Mo+UApK35NWcCWkAzMmtu3V+DlxECX/JvR/z/ kqUFxS+5HNlkrq8J3wAcJf/6/u3Pf5hrgCC8nIDPz7//OkvxT4Jhfmo3WHlyz6PEBnCQEYsHJFIN XH89Bc2h3ofZKxe/HZPKBvw9ImABOALpInlCk41gu+SZAlbcjNJn+inEZ46IwVrAlW8md82sjEKE e64hzBCGu0bfQZvp3t11xNTMXAfQMcMIUot4jLnaBTcA/BUItm7vmzJo0g7Hrk0AXL0QZ4BMUByC vnu4GmLzpBRdHoJeVzAPozflYMCNEOtfTIysV1t0QkXa3MFNSBLphRcduQm86GoIujtSYIBg9HmB hedZQ+a8z0qtYT1z77IdT65GsNkOdcyTvLNtkeYrYGaoCOsSCgAEJb2EA7G36ei3iABXm0hYR4Dt Q8GE4mbPUyOQSi31eXXEMxInXPbSHCtcEOSzgpSAXm77LW2oacDBusUPSSRUdQlC3dcegRng2BHz JPVeBvpDWLIVepg1u5sz2QwiCb59Dcq0ibgux+JIO+ut83KRB3jIBKSPUzxnkjEx+CdBXPms7Ddx f7gPz0UvTxIhLEDplaEWI5jPI53nDsUmyUVzweb5TKmKFyAC6IKg5+2CCWdAkFXgF3aDOycyobji QgZHiA/cRHl8NegF2rYsCCSYyPkDblTJXKgFqIgD9hTY1wDYIUD5EGWCoCP3j4ZAXi7YsOGAezzV I/1K9TptD9TbiktAsS6uh4o8gGsotpXq9zZGNvbhKon2CJqTBFDRu4D0NeyQUzN/vWfkZIToapET wE0LN/d4Mk4FJ43yCqDExM3KOgLAew4gox4B8DS57n0FbyCX5XnOgOPpXWfn0AJkaBFc6+jJskC+ vs9NgKLF+H6vhkxNby5fUchXFsXlGANpbtEE+5gLsIGgCv+bdrJXmoKKpAjBE1YAsihxRMSXBbi8 FIWAKRKA8MqyGZag+PC/rLFZ7Boj11G+zTpM8SqBZM0M7ZviBYSQ4gUVcikvTjRGp2ALw5skw3J8 LYY//tRmyPHYrRVb0UQSFnPQDmVhMatVKxwCy2IitDQ1ZNFFp7TQSSwmGyNw3p4sxrbdvuYjYHBh q7RqXAG+Nd89Cv3oTGURoZuur+uoUeHAxfaghxxTyXIs1Guy3rTRPsNibpsRmu6GMK1CQBM/vYHc kN5AnhAgDppGT1t2KCLDrRuBxSmtSQAzgVUgQrpKYWM2tDTWdKMGWC0GiDDUiEjpL7tCsLqhvap+ NNarFmzQSBmGGSm9AtC3i7vGIlhp6DzPHkXModbsp3RUKdYUhVBjRZsBVk3ggMM9cBv/z7iEd8mV XL0bRsT8K7ePOKvIeGsGFFVcW5sqn1RRBvKTZdap2TLgLX4QFGSxW/wqGCSDDl4SVCv1smqYmtg7 mkTG1Auzso0TGGKXC8gymLmLP7dqkb1LiQugnshZWUYJKFDxKTgfYAkryFfMTXtuF6RqgqmsX0ip LSk1eaXQs4uCrNguVSFEnqkV2C0b3JMsWmgfpFNccfgzroTkOYrUSipo87igJCs1yL9Of0uyQAYA 59kxVavDTekDgrFWKKNQYpQdiiTUtPboDQNOALYVyel7oLMeVmpqq24uljoIXM9tJIzFSVyiUnFt oaxfYZXCM1qNXUQj90fbhHLRFNfgQkgv9JhuTAEghA2TOmYIMvYgcNIXAW33i6AqT589ENfr63P3 TPAKhvDgatTTiLueAPgSPz2CbngOhw7cWIeCz+FOCKuieQQEBdCpcLZIMrJLRRQgNKungm7RieCd Am5jKl0UrHFSwYZdmWYUtZ4sIMg9JgsIqgcp3TuoeqvHFR2kDMGbRw1BCcGYJ+RYUCDYjnVUvsnL JqVB+D+zPUbfnA9kFozPhCB2WYzIX3t5LECQZB7AcKZCk2/lCgiAtsoeeAbgXiRwqoS7F86ZTrQQ KuPZJ7rYYEGVkQ7SWbEYl2+EJhQN6FJUbqSlqVL9Gg2m8Z2E/AKI4KRVD/Iz1IGgncSBAlayLZOl YGzGcTqRMYstSPVERtcbvoIC5P/CgrbDCo7EVDI8mDI7yOYCOoYtlLggoY56w9Zk+/MEHDgRG919 XoZ1o0s0rRYjaJwLiKkQDgA0ZweybmW30dljdMVAHUZu2GWJDALajaeyrgpITNXWJiellqbakWus S9rUG5dGdDYeu7xsqxxSU/V5XpR5N6X7xlEkrVE98rQ0syycMj4QLhw6jhNGjCvOKd8w6mBdAEJP sYAWymNvw34U8Kwc11XmJxYEwJTUQW96i8E6f56L4q8p2SDbsxW+Eer1gFEukIEtsLWAsaZqzWKT hsQAIIiHoEAMFFDYN+sC09q2D0r0UGEl4S6Wfkj0frwN2I3IaVMVprQlPY7gTZNXUGS3/yPwVPs/ BZwy/CIYq3wVtHEU4xiehb+dFmwjz5Rm044fhzYWTbr0TEcyTJ29qioXkpkZvHJjyFew1U5nD75s I69DVpm5b4iQTzBE7kgHP00bTy6ZlB36ilOhZaWVAZEPM2fXk8thN+ToZYaQ2SQYtmeVqznP6CVE yLZvDFRje58yjCFxGiD8QGD5YXAe8sOajKyISQKHuhBOJpQHN5u4SWN0wYl9C5JxZhk/7ShjvfCz QQsrbkx5t0STS01CNIcF3rDeRGc92qKg+gePxFihYPgEQn0eWdHpFekUOrr50Ec9beHniren5Skc bLuARPFjmXwfAa+Cf0c/AvRPyNTp7VCZDPh14t2i9QBZHjKNHiwfpiQbJDGJ1ldPZol52mTSewZf TW+zXmOJhbm2BF5B2W3iBhDMdixerEp3XWyT8y0KkvKgpyi2Wxxmw9vA7U/DLQcTHZVIdoagIy0P 3KeeoUeCLQYayXT6MgQc5xUqzmy9wSoGbDvjqAXNlDNXTWvGek4IM9lcxjgZGcb3piw06aYRhjez 2trJj3DKC/gJe78To0FS3MlsxXTYyAGLeO7y42CaN+rrE/bBMjPDtGJk65juir7p87tFJxL2PaN3 41WvDp0NTdCx0wwr3KKpX773dBp4LeEt5LFUIy6DHb0dvJZm4djRF97KXWc1spPgTTa6wdssI9De 8fD+jhLoB9jruNkQ5/H9cbXtPS4/9ZRPR4J+W9YCioWrrXUqMIcTILRNs4HDZMfjo0H8NPi9FJYX eps60Vv0erJh5q1xnaPKEfhyz/ZxASUtiy9TsHKIqrMCm7r/2OUO4/EyRucIpIb6dFbw61PctOxT nmmIyeyQ1ev0Yq0UiF7xxw278jNqdYiwlb35potBGbVsLmBzY+RzO8pEPrycAYXEF2moXA7fDVz5 8pXO3jyw0M7YmJeFDnaUI9DQwflY5KEeG5eHDs53Ig/lPDOtuAeDIx7C2UcLWnCSojLsak59hLkX mRxaxcrtQX5twXkvIupaixPiGczJiXK/5p4sj/P1BvteQPN6a3b7NHHdCQErw3U4BQBYoCyvwJu/ I7hMqVsHcXPxZOoxttX1dYINOXDNGYrrOWzsBHhvpz1MXyV0bk7hboj4wBtBVHzQDI2gM2Opn7TM lgixlGocsDGWnBlpnA2QJqeSGuMx3OcpBozzmw+8jGRO8YlM8BKqgLL706DJ8TzjW7Sy6ysFBF1f XQhNwAZKplQcm13JQfR8EBSd2UMeH2xvimUTVX0ImE05SWvnjQ2g3QTkK5ghZEzf417TD4Fg1qgF 7l3FHFxPCJYytd+E4dpPMeBdITgZSdaAYPhX4WZ9eFhBYjrjHiQwM57C4IhqKN0ERbMB816l87It XJYC2OGaw1dcg/ke16R+ymtzafG6xLUMPtM9gld10+t3RwkCmn9acAEyidERFjKgIz5YS0c4ChFb Vru6sFojIb+qeqzdu8xuMXVvO5moRrCHr7gW8z2uTf2Qa3XX4vpFal6/6RrXsX7P63q3xAXHIAGO 4BhE3Ah7DCIuHjLY05agxWDDHtQcw/44KOBcnCdEAruACA5fEaJJe4R4s0NuPEqJG6/S8nrM73Fd 6jf9DRxelXys9vNXgaKSY6O3PA82urZA03TGNchJPX/u4pmA04t5Cl0b1sR65zL0zZ4UwE2oj/Yv NffCx8FTOoIFbYKAJWWHN1hTWtySJWTFQ2Xjev6wiCZWwXC1zcK3oPDbIavD22n/LiBfNssksf/B lm2GPnpw2GNt81TzOZaNDW+XQj+xKbkCjt3DRI2fCjVK3fMsIMUOpTDZX2jdRocfD9cOV+cEV3O8 chakHOZ8vz5zRLzUxvg9ln3ArB0p61xsIJdDMNYXa4H3lRLNC6vmEh0Cav3Fg+/s9TgdOzl3cZjc FSop3FNf5vo2ZnoHKGTUvZpemrr1ZWMtai43d30Ku00dOTfsRoKq9oAlpbQwav1vAhQh2MvnFHgu 7D1f7tGHfZ3l/NwLhsrUO8zu+th4hzRkj0UzGQ1Duj4/Xr93fidaXwVzBfR1cpMet+DX+hkA+1to ew744/u3/wAIR+E6DQplbmRzdHJlYW0NCmVuZG9iag0KOCAwIG9iag0KPDwvVHlwZS9YT2JqZWN0 L1N1YnR5cGUvSW1hZ2UvV2lkdGggNTYvSGVpZ2h0IDg3L0NvbG9yU3BhY2UvRGV2aWNlUkdCL0Jp dHNQZXJDb21wb25lbnQgOC9GaWx0ZXIvRENURGVjb2RlL0ludGVycG9sYXRlIHRydWUvU01hc2sg OSAwIFIvTGVuZ3RoIDIxMjc+Pg0Kc3RyZWFtDQr/2P/gABBKRklGAAEBAQBgAGAAAP/hAFpFeGlm AABNTQAqAAAACAAFAwEABQAAAAEAAABKAwMAAQAAAAEAAAAAURAAAQAAAAEBAAAAUREABAAAAAEA AA7DURIABAAAAAEAAA7DAAAAAAABhqAAALGP/9sAQwAIBgYHBgUIBwcHCQkICgwUDQwLCwwZEhMP FB0aHx4dGhwcICQuJyAiLCMcHCg3KSwwMTQ0NB8nOT04MjwuMzQy/9sAQwEJCQkMCwwYDQ0YMiEc ITIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIy/8AAEQgA VwA4AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMC BAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYn KCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeY mZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5 +v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwAB AgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpD REVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ip qrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMR AD8A+f63/CXhebxTqhtw8lvaRqTPdLF5gjODsGMjJYjAGemT0U1gV9I+CNATw/4etbWeORZIolub lJFZD58qqxBUk7So2R9vuZwMmtaNP2k7GVWpyRuXfDvhWy8P2u7TYo9LQrte4zuuJRhc7pDzg7Qd owueQoq3NFoRfdLqUxl7yeac/niqWoXMtzIXkYnngdhWHc9DXt08OorTQ8qdVt3Z0Oq6fcalotxa R3v9t6VLtM1jNMcsFYMMMpBHIBwCOleD+NfD0Wl6lJe6ZbSRaPO4ESs5cwPjLRMSMjBDbc9VHUkN j0dbuexuFntpWikU8FTVzVYo/EdkwhSJDq6NZ3EbuyRrcDDRyErzjcFbv93nPNc+Jwi5bo2oYhqV uh4HRRRXjnqBX0toTxJoVpDCkkcLWdrJGsjh2CGBCoLAAEgEDOBnHQV8016x8MNeWfTn0iWVRcWm Xgj4DSQklmCgDko25jkklXJxhDXXg5xhV97qc+Jg5Q06HfXPesm46GtdsSjOeD3FRNZwuMMCfxr6 BI8hnLXNWfD8Mt1erbqPkaeMgns/Kj/0L9K0bjQ0lOY5mX1BGayPEuvWnhPQZEtZimozxslkq537 j8rTEggqFG7a39/GAdjYxxNSMKbbKo03OaSPG769uNS1C5v7uTzLm5laaZ9oG52JLHA4GST0oqvR XzR7oV33w98DS6zKus39zdWNhAS1vJbOEnlkXoY2IO1VYZL46jAyclaPw98JDxNrRluohJptoV+0 J5uwyMwby4xjnBKkkjGFVuQdufeJ4YhbpbQKixxKFXaoUcDGABwFGAABwAK6sNh/au72OevX9mrL cxNW1BRdyTWsaxbjkxqP3f4Csx/EjRLhrXLeoerWoWzoTuUj0Nc7dRE5r6KnFKNjyZau5ci8Vo1y BewuIN3SM8H/AHh1I+hrI+KGjyeIGTxVpk7XEKwLHNaqcrAiL96Idk6lk6qSW5BO2IafPdPtiiZv U44FdNoP/FPNh2aSOUjzgp6ehX3HXNYYzDRqxutzWhVdNng9Fd/8TvC1vpF7b6rpkCx2N58sixA+ WkvXKjGFV15VcnlZAAAoFFfOSi4uzPYjJSV0d98NdGTSPCsE7Q7Lq6QTSMSpJ3jKYI7eXsIBJIMj 9M4HW1HB5Hkn7LEkNuZHMccahVRd2FAA4AAAGPan17tCn7OCR49WfPJsa4BGCOKpS2dseTbxZ9Sg q61QS9K6EzMz5wFXAGAOgArGvOhrauOlYt70rWIifT9NtfF+jy+Hb6Xyg7COOcIHaJiS0bAH0YMp xglZCMjNFZuh3TWut7lOGKEqR2KkOP8A0GivMxeDc6nNE6qWIcY2O3s4zbwG1Y/Pbu0TfUMamrjP BHiY61oq3MjSSXNuEhv2KscOchJCxJ3bwpJJOd4bgArnsfNUqGByD0Iroo1FUgpIxqQcJcrBqgk6 VI0yd2qvLPFj76/nWyTIKlx0rFvO9adzdwD+PP0FYV7eB22xIzsenFaxEVdPieXWYljBLcgAe42/ zNFW11eHwPaQ6/f2v2yQ3ASC2Eoj8xxycHk7U6kgH5ig75BXn4nHclTlidFPCynHmPIdG1zUtAvj eaZcmCZo2ib5VdXRuqsrAqw6HBB5APUCvUtG+JGiXsR+1yPo9yqZZHV5reQjb9wqC6kkthWVgAPv 0UV49OtOm7xZ6U6cZr3kdzqVrqGl8X9r5eejK6kH8jWPJdRN/F+lFFe9hqsqkbyPHqrldkPs9Iud YuPKs0MrdSAwXA/4Ea5bXvFmkeGLu4sYojf6nA7RSxruSKKRSykO5AZsMoyqAAg8OKKK4cXi6qfK nY68LSjNXkeY6vrWo67eLd6lcmeZY1iT5Qqog6KqqAFHU4AHJJ6k0UUV5Z6J/9kNCmVuZHN0cmVh bQ0KZW5kb2JqDQo5IDAgb2JqDQo8PC9UeXBlL1hPYmplY3QvU3VidHlwZS9JbWFnZS9XaWR0aCA1 Ni9IZWlnaHQgODcvQ29sb3JTcGFjZS9EZXZpY2VHcmF5L01hdHRlWyAwIDAgMF0gL0JpdHNQZXJD b21wb25lbnQgOC9JbnRlcnBvbGF0ZSBmYWxzZS9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDE4 Mj4+DQpzdHJlYW0NCnic7dfRCoAgEERR//+nDSKIdFfHm24E7rOHfShmNCVjcjnWob6SnKEU6rE2 9BV3DdhkPuwwD3aZA6ETmAmhkxh2NYROZHjftIXB66K/Q7hb+4PWTIPQWUyB0NkM5yfOa14QsI9W 9Njf+0hgE3NeZCWU2RMOsAeEbojdcJBhl9+5YXZB6AA7IXIZO8bC3Z49e76b8JwIzUGY88E9Bnsa 3gvYBaa8L+FnDn8+9KSn2rQ4dwB65VxpDQplbmRzdHJlYW0NCmVuZG9iag0KMTAgMCBvYmoNCjw8 L1R5cGUvRXh0R1N0YXRlL0JNL05vcm1hbC9jYSAwLjU0OTAyPj4NCmVuZG9iag0KMTEgMCBvYmoN Cjw8L1R5cGUvRm9udC9TdWJ0eXBlL1RydWVUeXBlL05hbWUvRjEvQmFzZUZvbnQvQUJDREVFK1l1 R290aGljLVJlZ3VsYXIvRW5jb2RpbmcvV2luQW5zaUVuY29kaW5nL0ZvbnREZXNjcmlwdG9yIDEy IDAgUi9GaXJzdENoYXIgMzIvTGFzdENoYXIgMTE4L1dpZHRocyAxMDUgMCBSPj4NCmVuZG9iag0K MTIgMCBvYmoNCjw8L1R5cGUvRm9udERlc2NyaXB0b3IvRm9udE5hbWUvQUJDREVFK1l1R290aGlj LVJlZ3VsYXIvRmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9Bc2NlbnQgODgwL0Rlc2NlbnQgLTEyMC9D YXBIZWlnaHQgODgwL0F2Z1dpZHRoIDk2My9NYXhXaWR0aCAyMTYxL0ZvbnRXZWlnaHQgNDAwL1hI ZWlnaHQgMjUwL0xlYWRpbmcgMzE1L1N0ZW1WIDk2L0ZvbnRCQm94WyAtMTAwMCAtMTIwIDExNjEg ODgwXSAvRm9udEZpbGUyIDEwNiAwIFI+Pg0KZW5kb2JqDQoxMyAwIG9iag0KPDwvVHlwZS9Gb250 L1N1YnR5cGUvVHJ1ZVR5cGUvTmFtZS9GMi9CYXNlRm9udC9BQkNERUUrWXVHb3RoaWMtQm9sZC9F bmNvZGluZy9XaW5BbnNpRW5jb2RpbmcvRm9udERlc2NyaXB0b3IgMTQgMCBSL0ZpcnN0Q2hhciAz Mi9MYXN0Q2hhciAxMTYvV2lkdGhzIDEwNyAwIFI+Pg0KZW5kb2JqDQoxNCAwIG9iag0KPDwvVHlw ZS9Gb250RGVzY3JpcHRvci9Gb250TmFtZS9BQkNERUUrWXVHb3RoaWMtQm9sZC9GbGFncyAzMi9J dGFsaWNBbmdsZSAwL0FzY2VudCA4ODAvRGVzY2VudCAtMTIwL0NhcEhlaWdodCA4ODAvQXZnV2lk dGggOTY0L01heFdpZHRoIDIxOTEvRm9udFdlaWdodCA3MDAvWEhlaWdodCAyNTAvTGVhZGluZyAz MTUvU3RlbVYgOTYvRm9udEJCb3hbIC0xMDAwIC0xMjAgMTE5MSA4ODBdIC9Gb250RmlsZTIgMTA4 IDAgUj4+DQplbmRvYmoNCjE1IDAgb2JqDQo8PC9UaXRsZSj+/wBQAG8AdwBlAHIAUABvAGkAbgB0 ACAw1zDsMLww8zDGMPwwtzDnMPMpIC9BdXRob3Io/v9nl4jVXnMpIC9DcmVhdGlvbkRhdGUoRDoy MDE5MTExMzE4MTQ1NyswOScwMCcpIC9Nb2REYXRlKEQ6MjAxOTExMTMxODE0NTcrMDknMDAnKSAv UHJvZHVjZXIo/v8ATQBpAGMAcgBvAHMAbwBmAHQArgAgAFAAbwB3AGUAcgBQAG8AaQBuAHQArgAg ADIAMAAxADYpIC9DcmVhdG9yKP7/AE0AaQBjAHIAbwBzAG8AZgB0AK4AIABQAG8AdwBlAHIAUABv AGkAbgB0AK4AIAAyADAAMQA2KSA+Pg0KZW5kb2JqDQoyMiAwIG9iag0KPDwvVHlwZS9PYmpTdG0v TiA4OC9GaXJzdCA2OTEvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxNjEwPj4NCnN0cmVhbQ0K eJzNWVtv1DgUfkfiP/gRHtrE9xghpFJA24VW3bYsuyJolU7TNnQmGWUyQP/9fh572qlwUm9GQvsy Thyfz+d85+LLsJSkhHEiKWGC0FQTJglVnDBFGDWEoUNLwjLCOYYYwjNNeEqE4AQdwqCHESklvhNF GeGCKIVOSTQguCLGdmpAG4zJCGUQ44ZQrjQRKaEC8wqKNgMcI1RikIAOEuMFVLJomIxqKCYgr6GA AF6mMF4Raqi22lOjDZGwJZUcakH5FO8CrabQjzCGSfAJ0wsiGVoNuQxWQxmJ8dKOt+ZnsAfGKyih ME6DE0zFNPRTwM9gjLKMwHQFfKMVAV88BQ8KNKUGDIAjO68CAwwU4pFDgOgUNGGQJcjarQXaTBEN eaksZWCMUQLVMIwTDTwN5bTlHeRnkDepJJmlEIOgqkhhBIYKCl4zUMlS4Cq0GfBAGQRIZqmE0ZhK WDsthRLK4ZNQ8L6xVMIeAzwN5QzwMtgPU4TlF6rD05oYBYoxubGUg0yTgUorD+qYlZegGCA0BddA xIMNDuvWFDGmKPwI9aTCxDRNwTc0zgCSwXhq/WCHgk9mPQyeuY0Y8CW19SRazPzyZXJsB6fkJDlN TudFnZzdzsvktGuXk+7ttJwlx1eEr76/J+mrV0+fPBR5V10t2/InofefCf1C7mT/ixwbKcdHyomR cnKknBopp0fKZSPlzEg5mo4VHBsxNCpk9qbds/0Xef5xUbaLPL9pvlazIs/35vM3RYeHD82kmOb5 YTVpm0Vz2eX5p6q+aL5j7Fk5mzdt0d6Sg7or27rsyLtqWuLLfoOOuts9eCvz/OTg949/fKD7ANk3 acq5kVp9pl92v88un5Og5lFB+z/UPFbt666bv0iSyUW9YLuXbVnOq5vdSTNL7PPO/LrpmmQJs3YW t7PzZrpzPl2WO5NpNd8p2u4fgXVSpbtf51c99EXl7i/QY2wtoGOLAR1bDejYckCD9QCbioGlY2/S LYvpWfmje8YOz+cLsGcLfLBACO6RjoNFWtqvg6rbac6bH0Fp0SeNpTFOf7qhf7BOYfs0pH+2lf66 T1qmI/QPlkthhvTHpnAL/Z2WQf15pP7c6x4smNEoGyQESwe2dUMkrMLIboC34YL3chEbi8KbEKw6 0SgbXASrkBwMaJk5LsxWXPTGtaKxcbFhRrAmqnTIDMW20V/1ZoWKrYt/VpOumpE9b0KwOqvB0qi2 CkfVWxpVbCB5E157E4LrhBoMJrVVdVS9UaRjq+Ne1xWTm7IlfzkjeHCJUoMlUm9VInVvidSxxe3O iL+9EcF1Sg+WON0bDlFG9NY2rSKNoPlzctbMvQXBlSoaa8ejBNeMaJSumFpSPVZw2YjGai7XOMHa HY3zbZVyC5I/21sDBmt4NGBRX6yBglU0Gug1/OeBgrUsGugF+Smeg5VFy8F4XtUGe/ezalYxbG9+ Vg11DXMNd812CaAelR64iBh7cBZjD84imF/Z4HXQ5p5+M1dFMMuisXyuimB+RaM8yFURzLForLtc FcHUisYpi8k1cQnr8YIZlmVDcWxcyBoXssaFrHEha3pD1shIHe+9GEzaaJy1F4OZGo3ywIsymBXR WPDiN7/FIhslxa/zMpg5j7hCOdZdZTGuspj+fXAauwm5c4IM32dFA3kvyPDlUjTMQzeEr1qiwe79 8Jr8XNplOFUH/WDvxS319lrctdy3W5Vwl9c+wNYGBsHuVrJpdRG+yXZJy5xezJ0emQNmLoqYiyLm ooi5ubmT484+7szjDoU7FO5QuEPhDoU7FO5QhEMRDkU4FHfL4i8r/Jnfn3r9gc8fmPyhw2/c/dbX bx79mmv/CVk1bkjmlMh69vIb/Jy1ZXnSNF1y0kzLw2Ju/52wVB4XbVmvvtr/KWzP6t5pjXf39Qje e1/eEuqh3wGrbroyObI/b+uL+5e1o0/LSZf8VhYXZeuercz6+aCeVnV5el1YDW3HXg2Eoqua2r+3 XXVZ4GH19qlpb86b5iZ500yWM+i06llcl2VnleySw8JexN6/71/jd+P9TVVMm6uNDhdB92PdPBh2 1RYzv357W4+Ws8VnMML8acN2/5JIiw8xJyD8BYH79uDq5OHlgT+D+3OsPwv605Q/j4zdxoUj9PG1 dKjGP153nj75FxWLC4ENCmVuZHN0cmVhbQ0KZW5kb2JqDQoxMDUgMCBvYmoNClsgMjg1IDAgMCAw IDAgMCAwIDAgMzg2IDM4NiAwIDAgMCA0MzUgMCAwIDAgNTU2IDU1NiA1NTYgNTU2IDAgMCAwIDAg MCAyODQgMCAwIDAgMCAwIDAgNjQ5IDY3OSAwIDAgMCAwIDAgMCAwIDAgMCAwIDkxOSAwIDAgMCAw IDAgMCA2MjkgMCAwIDAgNjQ4IDY0OSAwIDAgMCAwIDAgMCAwIDU1OCA1ODAgNTE2IDU3OCA1NTgg MzQ1IDAgNTgwIDI2MiAwIDUzMCAyNjIgODYxIDU4MCA1NjEgNTgwIDAgMzY0IDUwOSAzNTIgMCA0 ODldIA0KZW5kb2JqDQoxMDYgMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMTc2 Njg0L0xlbmd0aDEgNTMwMzU2Pj4NCnN0cmVhbQ0KeJzsnQl4lNX59p/ZJwthqbiLRFRQi6gMm6gs EkDE7Mkkk5lJMpnJLJl9klkygxUt7giIIlq3ulTrQqm1imuxuOCC4r7XrYq2imitSyvw/wXi12AT in60YHvu67p9znnO8r7nPec8CxEiGhEZzH/0Uj51SlXJfhcM7SfmPdei/eOMaSXT5dDGCjHcQlWG zCgvq9q/ee006kNFc/DDM6pqpiYPn1YrxrXvi6bk1LKqUcfM2mveWyKal+jf1BJqjk7pZ50rmjTz xY9tSbYPdSyfcIdoNq4U0SZbo96Q+4iD1ormz4UiRad7mxNRMcl+oh/rY3yhN5hpnfD4SJ9oZbxo oit9nma38bMpzzK/nfaxPhSF1uYDqF9E/WBfqD297GX5grnpn1wSjLQ0z2t76kzRRb8Uuf/qUHM6 2nJR/xPpv4L+Q0Oe9uY797Hexnq7ntcabg557Gc/vFb0o5aKGJdHI4n2zWPFx/vM7OofjXuig/Od 60Tz1UI+2JFJnt/v2GYN7e1dz0/y/MLh9/ajvlQ0Ha3S9W0177WWjvj4vcb+x/1V+pu7vqOsWbHi gC750pra8Jey8eK8WfmVVI2scysYZ8rfNEEveYtpr86btWWmHmj4ukvTWCYL+Vpd0MoAGSXniugW FJ2+RaM33a5ZKAYx68V4BFOO3iqBU2djQIG+e643Rbv58Ec2bqa4Z1d9Vv3QoV2r/eRsU/7mfL2Y 3tK2DdXKVVsmHWnsesehYmYla755Gy1fR3ujrNdNlcXSC3R7yQY4extdVq7rWdcn5Gl4FkxBV2/z aKfLvb3pu2A4WqoNEVnXV/u3YbL13ddglqZt6qOYm/m3N58+JfP018kafTHyajmP+nnaVVvX3KXX 7iPLtpSP31JeY3yHvl3959D3uq3fUvsB9UHSoX1ayrvqug+kdEfX832hf1Vmd/Hf/ZydCe06SUB3 d3nRrn6f3Qmm6TLnm7J+CzVL++pLm4s+rm11W89ej/oymOrqB2v6mGdOb/ru8dPhkh19f/q2bqfN 3svcM//FfB3wSrgIBrrrr3e3Xc67X9Ndvpvyqq7nb9Vv6XdZ9/qmUZ4Ln+7uG9jR9SgoKCj8kGHu U6+b06Pcp5/5fs/Ujfxu/Q0us/QeNyrsXjCL9jw4Gh5oFs2rvffR3E37sB2fUzNhO22vfqt+L7yn +12ccAEMwTGwEl7T3Tafc/hNeRHlBxhnpzwHzu7SbW3TdY2LwTu6+9p29L0VFBQUFBQUFBQUFBQU FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU/rdhFhnVk7v6fXYUvOvtcC68u4fuGvPW 3zOsoKCg8B+DWXQP9a6X4i7+p99H4fuBffweY7b6oa2y63cNbv294ZQHUV7R3ed1+Hx3+fZvjb8N 9vl70r/ju9T23bYjv8NRJvbkzninnY1vv2PPd+2tvL1+Peu7bkU7B12/f3Pb+pYY6fbus9n1u1av 7tbbYAxmdsmL/o9iZ8fazNG2M95LQUFBQUFhR2DeQs0wsxj6aj+wi9vqdMO3rXeN30Jzl+x9nt71 Pcfv+Dtvf67vOjft+b1w2LfH91jnN6Tf5uU92rrGFfyrd9xZ+K7fbXeAWfQZGPimvKvfZ3cC9+qt f5S38MW++/7zn0Uw/tlt6zt0L1/u+xm7/F6ad+K9zPtX76igoKDwvwDDaJltGreVO2M+7Tqp3k7b IpiA7u31+2+Adia8TM7TjdYM6rV9k8ao3bT5tp46nVOu61nXR2QpPAxOh+W9zjOx7z8bNhRu/tDQ JOfs6DubpvbdV/+uRr/N3MM2f2bYQzNge/Pp68SpXyyt+j1knn6RzNXXyjztcrlyS9ti8Wn3Et+W 8qitZeO94tMvoL9PzqB9i3/Wvi4B3bsyUrtClnbViWyW7+h6vi/0t8iV+pu2vucPBdpX5Ta4orv8 xq5+n90JpkGacX21GQrlSpMZGnfOfvPt79hO237aVzd/CD+Hn+6M530faEUmw+PhGDhyO/3qepTn 9exLefH/K98kTbAUToBj+5zvJnH1KL8Ij+9RV2dWQWE3wXf9WfH2+n67bXf+ObTCvw9m0azpyb77 yTKY6v75dp/xrYLCd8G3f1bf82f2vZW3169nva/nfJf32tG2H9r/06ugoNA7vmVfjlT2SOE/Dfau Y3tSYfdD1970xp5tO9pve/vds31H32tH277r3Aq7L5QN+eFB2RCFXQ32LrI9qbD7oWtvemPPth3t t7397tm+o++1o23fdW6F3QfKZvzwoGyGwq4Cexb4Vv22HuU5PcpnbNtPc2Tv82mO/tZ8O+Xv+Coo KPQOvWi+17i+/j78P/fTzvnXvRQUFBQUFBQU/v9hFkMl+UPTP+qyVxe37aP1wq6/t/glXPEff0kF hf8i9Pz7wTtnPn2q7zaZ081Izz9r+G+EWXbqvx+R39f+qH8/YudD/fsR/13o+e9H/HPbTrd/fX77 3cX+7Yhd2dpP9+I/ytv+uxqM27CT51v3PZfznYFNXvqfepaCgoKCgoKCgoKCgoKCgoKCgoKCgoKC goKCgoKCgoKCgoKCgoKCgoKCgoKCwu4M807+HeAK2wffeEJP7ur3UVBQUFBQUFBQUFBQUFBQUFBQ UFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUNhZMIt0dHFXv4eC goKCwg8XZtHM6cnt9Mv0ZO995Ea44N/3tgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK CgoKCgoKCgo7H9qjd/UbKCgoKCgo7BB00AD3p6QRCaxA5ouEZkkRtZ/RMlA2fdP5Idmk2VrSzi3q KmkvEjn5/SIN5fIzRKr+XKTRinjHwkCRhrn9N8LbizT6rcMCuiINTwscAkcWaYzd2slFGlN3sbRI Y+4u2os0ed1FT5Emv7sYLtIUdBdTRZrC7uJpRZp+3cVzijRF3cUL+U+dyFHyvpQts8yU8nWWY6Ti FEuZVPyhrEYqH7WcLJV/tOwvVRWWaVJzxQHvSq3RMl5qfZa9pG6yZZbU2YZMk7obLaeI3W0ZLfbw lEfE+VhZhTR1jFkmTRdZBkizzzJImi+wjJHmTysrxVNmmSGety17S2t78TBpXWQ5XLx7lVWJb55l irTpLZXSdrflIAmlLAMlvO+QPSVykGVPiYUth0j8iONGSOLw4lZpP2jIWEk+VjxH0ossJZI5rnie ZE6wHCqZmZZ9JHOSZZhkyi0Vkqm1HC0Zh+UwyTiLz5SMp/gsycy39JfMBZbjJbOg+BzpnGwpls65 lkmSXWk5SnL3Fy+UU/NmrJRTp1imyk/iliPkJ/cVXyqnGSzDZe5HlhFy+t5j5srpmXEZ+anVMkHO HFRZJWfaLdVyzgDLYDlnieVgOffL4uVynsZSIOdNsBwg5z9rmS7zzZaxsuCO40bKwvHF98jCjcX3 y5IzLVWy5B3LZLmktni+XLLZsp8snTgkLEudllpZ+nHxRln6dfEmuXTEQSJX3H5QP9k8YOih2qnr xz2+5XDO+cxS3/Uqaea0cAQGVYuFE2YxaIS3FcuP4ZHQBwPwbMiuW34L74UPwEfgqyJjDoQnQIdG xrQgw/AXkCM65iH4CvwD/ExkLId07B5wFlwEl8BL4VMi45o1Mq4NdlCeD3nGuLfh+5Cx4zaKjOfl x4+C3ITxk6EdNsOfw1vh30Qm7AX3hRF4HVwhciz9juW9jk3AefBByJc49gWNHPsn5F9EJnK6JzJu 4v6QrzYxBFPwLI1M5H0mMtfEO+AquAZugIw7rj88FKI/7hmR4wfCIZCg9fhS6IaXwZXwCficyAl8 hxMmaeSEJmQr5DufwEU/4VzI3T+BbzbJCuOQ7zGJ95i0DP4aPgpfhK+JTJ4AuYmTF4tMwSxMYd4p M2EZZC+m3A5/B9+D6yHvOxWTMJW1TuW9pjJu6sPwBfi6yImcgROPgCdC+p/IGqdhN6ZhD6bxXafx babxbaZVwQaYhJ2QvZz2G3g/ZH0ljCnBcJRgkEqYq4Q+JVdA9qKEPiXvQr779P4amT4F6YHs4fRl GpnBs2ZwpmbwfjN47xns+8w9Id905jTIN53JOTxpOVwH2fNZ2MFZh0HO5skckpMnwlPh7+Fj8Jku eyoymzXMHgrpM5szMPtp+JbIKXyTU/jGpdjsUlOBlO6BHKKR0mJ0w5Dsb+mIfCkdo5fSidQnGaV0 BvJk9KdopbQCWcMYu05KXeh9MIYuQVsGeSrydOQ89GczdhHyIvr/zCSl19HGXSm9mTrfsJQzVnoX 86zkWQ/T9hh911B/jr6vm6WUdZT+GX7EPH+l/e9mKTPnS9lgrZTto5Gy/SF7WHakTspGF0gZ96Rs Krrp1E8eLGUtlP0wiD6MjjtR1sH4uQYpO7tQypYgr9BL2c3ob2XO25C/Rd6FvIf5VtPnRca/wtg3 TFK2nv5/pf4l7exF2ddGKdfrpDyvQMr3zJPyYr2UDzdJ+VE4s2M0Uj4Gcm7L2aPyyfQrMUj5bMql yBqtlNfTzn0tb0TyLcs96LBB5UHKUcrtzDeH+mnUz2A8tqmce1M+n2ctpe1K5rmJ+i20/4p3uZPy XYy7jzp3sPz3lLFd5Y9Sf4K+zzLHS+heQ75llvKPmOcr6rjnCtFLhVEnFQVwAPVBcI8CqeBcVAyD wzVScTjyx0jsUgV3vmK0VirGGaRiUpFUlKGvhDXorUgbkrVVsLYKF9KdLxWck4qEUSqy6DizFafB 03nuOTzzAuZZguTuVFyNvJ4+NyKxdRXLzVJxN/Je6r+n/2r6Ykcrnka+hHzVJBXv8i4fMOZD5Aae tVEjlWKWynwkNqByoEkqD0BypysPpozNrzxKJ5VjKGMMKmdQP0kvldiTymqkDX0L7ZyfSs5PJeen kjNemYLsSeVP0J+O7ix4PuVF9L+MtqsoX8v4X8JfUb89XypXoltlkEruZ+UTlJ9izHPUX+0vlR+i 25AnlX9HbjJIlUEnVfmwv1aqfkRANLhQqoZRHm6UqlF6qRqDbnyBVGF4qirRWxnjRNekkSrsYBVn qMqPDOZJVYr+c9Cfju4seAH6xdTxRVVLqfOtq65Cci+ruJdVN9F2K8++jWfdTfk+dCuZfzXyMeQz 8GX0r8M395Yq7kA1MVq1uUCq99VI9QF6qT4Y3aF5Us35qB5N23j0Ew1SPVUr1dNpn40OG1LNOal2 0sbZqMb+VbdS9tMvikzQL0v/n0DOffXZ+VJ9MfrL6XcV9etMUs19rf41vLOfVD9M/zW0cxaq30T3 LmXOQvWH9P2E+ufou971a4PU6GGhXmr20EoN/r/mcI3UHAmPps59reF9aybqpGYychryJORsWEY7 vqCmFmljPN+7BvtSg0+ryeZJzZnMewH1RYy5BF4Or6V+g0lqsCs12Loa/FMNvr5mFePxbTWP0/4k 8mn6YmdqXmGOt5n/A3Scixr8Us0n8HPaN2qlFp9Xa9JJbT+D1BJb1O5JeT8kdr52hEZqiWVqR9Fv tFFqJyInwRPRT4cn0YYNrz2FMVXU8Wm1nJvaJr3UsoZaH3MSR9TGaGtnXJoyvqyWO1r7U/qci24B 5YtovxRewTzXUL+etpsp/xregR6/VIvfq32A/sREtavzpPZZ5Iv5UvsOz8Ce135Evw30/xz5FcTv 1W42iNVkFCsxhnWgVqyDNWLdm/K+OrEeWCDWH+vFOhrdOIg9tR6PfiqyhL7EWNbZjK1HNkLiK6vb JNYQY7izVvydNUP/U9HPpX428jy4mPIltLEe6+Vmsd5An1uoE39Y8blWfJQVP27lHlixp1biHit+ ysq+WbE/Vu6D9TX4DvX3IPtm/QgSS1g/K5Q6rV7qzAapG0wSsQ9kr+q4I3XckbpDNVKHPa0bCUfp pM6CnIDueCT7VoctqitDX43OiuSu1LGuOu5KnZf2NiRxW10UEjvVETvVpWnPIU+lPzFWHfFf3VlG qVuAnntft4Rxl1MnZq37JWXWWccdqlvBs9izugeQj9APO1X3BPq1+VL3Gv3/iI611f0ZuZ76F5S/ 0ks9MVQ9Z7I+jzLxTf0g5N4GqSemqccX1g8vlHriiPrjtVLPOazHL9eXmqTeis5hlHpioXqvWerj 1Hn3eu58/Vz6nEv9QuoXUydmrieJrMdW1V8Fr0V3A2230Oc2JD6vnhiinvev527Vr0JHnFe/Gh2x a/1a+mGz6vF59Zy/+j8xfj31TyCxdv3n1LG99Zu1YtNpxEbCaCukzBm07UV9X+QQiA224QNt7JmN PbONooy9sB1HGVthm2YQG77dVg6xbTb8n437ZcOv27DJNvy6Db9u4yzaOpGcRdtPKZ8HF0LWa8Mu 2y7Vie1K+nO3bDdAzqONPbIRB9o4i7a7ec4D9CWms7FO22rKnEfbU5AY30Y8bSNetr1J+R0kttCG LbRhS2ycSxvxi+1vkDvXQL7eYIYFcE/IGW3gjDbgJxuKqRPTNrDeBnx+AzFNwzGQc9pATtJAXNlA LtTA2huIextK4MmUy7XSgP9ssBmkAf/ZQHzYwFltwH82EH81dFDHtjRgWxpyg6Vhcb40sK8N1zDm RtpuKZIGbEjD78zSgI1seAL9M8z5AvO9Dv9I+X36cRYb1jPnXyDxWAP2vQEbadfoxW4yi32gTuys yU6caGf/7AdBYlv7CKPYj6LM3tnH54m9BEkeYZ+FxDbasfF29s9eT5k7Z29mPu6bnb2zR5DYRnsG HbmSnVjMfj5cQF9yGTtn1H4Vbb8wif3X8G76ci7t2EE7cZid9djJxexrIXG6ndzG/jIkH7GzX3Zy APv7jPnIIPbPkOyTnX0i3RSHUSOOAmQ/5ACtOPYwiYN9chxInbU5sCcO8gIH8bAD3+tgnxzEng7s iWMSJC52TKffLEhe4SjXiYN1OrCZDuI0RyN1bIuDeMfBWh0RyH45yHscGcqcVwd308G6HfgCB2fW cSF17KeDO+rgjjpYv4P4x8HZdZBDOji/jpupY2cc2FMHOZrjTsbciw5b6uCbOPgmjsfRrYUvQPJs B/GF4808ceArHJxbxyd6cXyJjnvq2KQVp1YjTr6Hs4DyQCS+3Lm3Tpx8Dyffw8m5dY6AfAvnSPTE 4s4xyOOR5AhO4j0n8Z4Tn+jkzDr5Hs5yJOfW2YBk353N9CdXdQbQYWOd8f7iPAP9WZTPReLrnRdT Zv1O/IeT2MR5NWTtzusYcxPjyWGd+BDnb6nfxzPxiU7urJN4yvkY5SfN4nzZIM436Uue6ORcOznX zg3wL/Bzxn1tlkZjgTT+yCiN++mlsZj6EZQtlI81SeM0jTSSnzXiAxtna6WRdTTi3xtrddLYQL2J Pn76RhiTQpfLk0Z8QuMCdEvox941Xk6/qyF71nhDvjT+hvKdkHvYuAr5CHwcYksb2aPG1ygTZzX+ kfb3eTdsSiN3sPFvtG0W4ZHSlA/76aRpUIE0HYgk5m7CbjaROzRxPptGQ2LZpmMhuVHTdNqxHU3V lMmLmhzoG6m3QK9Rmrh7Tfi4JuxnE2exiRyuifyyaRH6ixlzGTrOXxPnr+kaszSRMzTdg568uOlB 5n4SPTlw07P0f4l34ns3rUPH+Wra0E+aRSfNnKnmPFhYIM37UB+il2ZsfvPhWmk+CmlBh49uPg45 BTktX5qxF83co+Y6+jjQu6CXtjYYpp3YsJkz08yZaZ6PXMicS+Dl1HnX5usgMWIzMWIzMWLzCubh uzdjN5pXMtfDzPE8ZfxX81u0vcvYDxnzMbpP4WfUsX3NxLYu/JeL+NCF/3INMIpr3zxxYRdch1E/ kjp220V86yJ+chE/uYjJXfhk18mwnPY69DZ0+C0X8a2L+NbFHXCF0JG7ubAHLuyBK2MSF7mP6xza 5xeK62fIK9ETV7jII1zceRdn38XZd5FPu+5ibvbB9SDyCcY+bxYX9s71J3TE6K5P0H+tkxZyiRZi wJYBGmkh92nZE+5NGZ/UQkzRMlwvLZyhFs5QC76oBRvego1rmYg8AU5h/HTqJ5mkpZJyHTruc4uH cW3UWUMLOXVLJ2XytxbyohbytxZseMsFlC9EXoRciu7KgdLCnrTcTr97kOTULeRxLQ/Sjs9t4e62 vEKZdbTgZ1s4Ty0fGKTlU7O4jSJuzpG7H5K4yD1IK+494f7Uh0DidTd5qPtgdCMg/tVNPOG2UOY+ uImX3MS2buJ1dyn6Cp242Ru3DcmdcJPnub2QPM9NDOhO0Id9cRNDubNI8lM38Z+b+M+NvXZz193Y Kjfrcl/B+J9TvpYy/tZN7O4mjnLfhe4e+hFbuB+E2Gb3owZxr6X/c9TJT9zEFm7W636HfsQUbs6h +2PGfwbxVe6NevHoNeIxa8VDHO/5EWX20MMeerBdHvyUBx/sOUwnHnIuz9HQUiAe7LFnBjyFOjbA U20QD3fJQ+zkIS/0cJc82GAPca6nnXIKEj94WKdnLvOyhx720EN+61nIeNbquQT5M0h+62GtnpuZ 8zYkds1zL/IB6uyjh9jJ8yQ6/LHnOYh98+CDPG+gY1893DcP6/RsoP4Z8iva8UGtWmjUS2uhTloH GqR1/8HSOpr6BOqTTNI6kzJ711oBrUXS6s2TVu5PawdtxOet+JJWcvLW8yjzzq1L0GMPWvEfrdjh Vu5S683wVnTkVq0rkPfA+43S+jD1J2jDprXyzq0vwJd53hvUiSFa8SOt+JFWbFsrMV/rp/T/Il+8 OhEv8brXpBUvsYS3H5KY3Uvc593PIF7OpPcQnXgPR4eN9o5Gx3n0ch69U5DEed4S2majJy/xEjt4 7cxLbOsNFog3i461eX+KxOZ5z4HkWd4L6H+xWbz4GC9r87I27y/hrxiLjfauNIp3NW1PIl80ifct xuBbvORUXvIOL7mwd32eePn23k0a8RHj+QaI+DhfPnJg3wFa8RGv+oYbxTfKID5snG9igfhmoscn +vCJviqkFeITfeSIPu6QjzvkIzb1hZmvnXnIEX34Fh9xju9M9GfD+ZTJnXzE5r6lzE1857ue59ya Jz7yDt8quBr9UzzvNfpxbnzvQHyL709m8f2VMrmSn1jbrxsgfmJSP77FX6wV/yGUiVP8xNh+/It/ NHre3Y999hO3+Ynb/NgBPzGq/yRInOJnHX4rksTLj432E2P7fUbxR6mnCsTPe/vno18EL4ZLqWOf /VfD6+nLmfLfSl9iMf+d6IhR/fejJx7zE6f6yf/8j8E1vDN5u5/74Cce878NsXH+deg/YswnzPEV dWIy/0ajBLp+KIfPDxRC7n5goF4CeyH30UrgAJMERugkcCR18ojAMXkSwF4HpqFnTQHufKAaYq8D DdTZnwC5boB4NMD9DwRgjHbyhgD3PsAZC3B/AmdCzliAHCrAmgMLIXF44JKuHzyaJXA98ibGLaP/ bzRdP5qUALY8QCwWIBYLEIsFsAEB7lJgLfJZ+r1ikMDb1Dl/AfYwgI8KcP4CG2gjxgkQ47QRf7YZ tNKWB/tTZ0/b8FFt5PZtwygTM7QdAfFTbfiptjFGaeMOtXF/2qajZy/bZkNyxbZK9LVI1t7G2tuI e9oazdLmZ94wbXFkinnn5EnbOdSJIdqId9qIt9vIE9uugTf2kzbsWts9BmlbxbMepz85U9sL8BXm fYO+b0HsWRt3qg3b0EYO3PYJ9b9A8vk29rKN2C1ITh/Ehgex4cF+Jgmyh0HsQ5D1BfHBQdYXPJS2 H1NmP4PYiOCx6E7QS5AcKkgOFaxEj30Ick6D9czhQhITBdnHIP4qSG4RxGcF8VnBNP3nUJ5rluD5 SPKK4IX5EiQnDP6c+k3MuxyuMEoQ3xTE/wYfRT4Bn2IMdi9I/BzkbAbX9ZMg5zHEXQvpkcShoXyt hIqok8+HWEuI8xgaQp14NIQPCh1tkBB3LjRRLyFsXIh4OmRF59RJqAUd+VAoiJ69CLUj8bGhHPI0 6vjXEL4ndD7lRWYJcc9CnLfQMiSxQ4jYIcS+hMh3Qr+DxEChB5mT2D/0JPJ5dC8xnrw2RF4bIvcL cdZC64skLCJh9iFs0kuYWCg8GPL+YfYizF6ED8iXMPle+AjaOWNh8r0w8V14PHXy8vBUnYRnmiRM 7BCu1Uq4AT3+NMw+hLF54TAyDtmDMDFDeA79Tkdyn8LsQ3gBXEwZuxdeSpl4NYx/CnOnwuR14Zso 38q8+KbwHZTvofw7o4QfMUuYODtMnB1+GWI7wvik8J95PvFq+DP4BXr2KUy+HtFoJMJekZ5IhDMX KaTeH/kjnUT2RrcvdeKlyEFI7GXkML1ERkFiv8h49MR+EWxJhL2LlMAyyJoj1gKJYD8irZAYNkJO G+HcRdjDCHYkgh2J5HjOacx1JhI/HCE2jyyhfBlt5BIRYofItQaJ3EQZGxIhno0Qz0aIlSLE6BFi 9AgxeuQh+hAjRV6izn2L/AEd9iOCH45w1yLrqXPPIuRJka/g11qJckaj2JAoNiRKnBjFZkYHwr3Q s+YouWyUXDY6DIk9iXLfosSIUfY6yl5Hx0FykehxSPY7eiLlGQaJYk+jFZD7F3VA8qcocWKUGCrK GY52ILlv0bno5iGJ4aPETVFi3+hFjMeuRLl7Ufx09GajRLGb0Tv1EiVnjeIXok8h2d8otjL6EnV8 XhT7EmW9Uc5uFJsSZY3RjSIxnVFiBRqJsbbYHnAfysTAMWLg2FDKxIIxcvTYSL3EOLsx9jPGemLs ZaxEK7GTdBLDd8fIsWI11MkLY3bK5CexJohdibkNEuN+xjLwNEjsESPmjZ1LmZgwtgCythhxfexS yBmOEWPFyFNit8BljL8LHT4wtgqJP4gRE8aepG0tfIb2l6m/Rpn4KvYuc3wIiQVjX8K/Q+LBuFEn cfYxTlwS577Gua9x7mucvYyzl3FsZ/xgeDj92Mc4+xhnH+OsO479iU80S7yENmL+eCnzVaKroW7L k7iXOnc2zp2NxyBnOJ5ClzVJ/KeUibXi3Ns4PjB+IeTOxtnH+NWQtcZvQHeLUeL4/Dg5ZpzzG+fs xlfqJf4wbY9SxgfGWXOcNceJhePP00YcHGfNcfxhHPsaJxaLEwvH/wK/MEkCX5HARiWws4l8JOtP DEISkyWI9xPEk4mDqQ/XSgJ/mMDeJrC3iQnU8YcJ4v4E/iKBv0hgoxLE/AniskSrURLEZAny/USK /qcx7gzq+L8EZzWBj0gsRn85Eh+YYI2J6+lzI+NvpUw+k/gt8k54F+OwvQlsb+Ih5Gre+xkkMXPi ZYh9SpDTJMhpEuQ0iY8gZzjB/ia+QEdO066D5HPt3M929radPW0vRpK/tY8oknbuYfskytzBdvx7 O3vYfgqsQFeDxA+24wfbXdRbDdIeMko7drf9VMja2snV2ufxDOKY9gU6ab8Esrb2K+lLrNm+jDbW 034X4+9D/g4SL7ezZ+1PMf5ZyHrasT/t5KTtf4Bvw/cYv56x2Nz2z6n/DeLjMQHSodNJR6FWOtiv DnLTjn3RcTc7hpikY7hBOrCxHWPzpYM1dUwvlI5q2lhHR32edLgZ66c9MkA65tI+j/HnoLuAsZdS x1d0XEOdWLNjOXPdSfk+5nqM+hOUn4EvMuZV5lqHjnPVge3oWG+UDmxHx9eUNxklaYLYjiTvmBwM ySOT+xVJciQ64sjkMTpJ4u+Skwslid1Lco6SNfQhlkpiJ5LEkUniyKQbkvwkg8zH3Uny7ZP4gGQn Y08zSxLbn+RMJfF3SWLm5KX9JYnNT96KnjuTvIN+fPck3z1J3JjkHCVXMxf3JEn+lXyBOmcp+SoS 2598xyDJP9GP/CtJ3pjk+yc/h9iLJPYiuUkkhf0nrJOU0SipIuQguAc6bEaK/CCF7U9xf1KcsdQI yiORFvoeh5yMnrwghY1MzUKegmTtKe5Qygad+ZIKIMmZU3FkhvE5vaSwFSnWmlqExB6m8HMp7k+K +5PC3qfw66lf0vcWg6TwdSl8XQpbkbqHseQHqUcgtiK1Bj5Nv+eRL8KXmZMzl3qbcdyh1IdIbESK eDnFetPYibQBmYfkzKUHUmataWKZNLYxPVQn6UPQ/xiyr2lsY9pCOz4uTf6ZJg9KYyvSM9DNpkxe nSavTtvRkQOlWyA+Ps2a09jIdJwy+5zGx6eJ1dLcszT+Lk2+kMYvpM/neYvpewl1vkH6Cso/R15L /QbabkH+Si9p7lz6boOkH0A+ZJI09jG91ihpfHyaPC+Nz0u/hyRHSHN+0x/DT6l/TvtXSGxHxqiR DDlRhj3ODNBKhr3NDEEekicZcr4M68xMNEiG/cxMQ38SJIbJ4MMzVejZz0wjffB1GfxABj+QIYbO sMZMCpKzZsiHMvi9zLm0X4BkfzOL0ZH7ZX6GjrVlfsFcxKWZX1PGp2dW0H4fugepP2KUDH49w55m nqM/diTzCnwdPf4u8wHr2EAb+5lhP/ms0kkO1EnO12kySSd2sZP97NxbL51DdNI5nDp+vXOkQTpZ X+c4s3ROpd9s2vHjnfW02dE3UvdQJg/v9KNnXZ2c2c52yhyaTuKUztOM0kke3nku5YXMw3ntvJY6 57QT/925jDpntfO31O+i7yrmfBT5NHrOZyf5Qecb8F3GfoyOu9jJXez8kvck/sxyNrPcwyz7lMWH ZbE3Wc5nlngli73JEmtn2a8scVj2kELJkqNnJ1AmR8+So2ex+9kSvWRPLpAsuVuWuCSLfcySN2SD ZsmyR1nuX/YnSO5fljOYxVdnsfXZ+QbJXtRPssTUWexNlvVkf8XY25nzbuRKJPlOdjXzsz9ZbE0W W5Mlrs6+SZmcIUvOkP2I8gb4Kc/DdmaxLznRS4415bhzuQLKA3WSw7bkuHM51pRjn3KsKXcI8nCt 5MhVc0fD0YwZS3/WlptEeSosgdiZHDlrrmyQ5Igpc+xZjrgyF6QveUQOX50jBsvxQXPctRw+Lcda c6w1x1pz5K05coocsVjuIiR3L0eMkruS8ddBfEXuVnTLeR/yiRx+O4ff/j+2zjM+yioN+1eeZNIT RGyoTBZ17Q155hlAsVfUgSQkEEpCEtIoCSQUgSSTTKZkJnUSkkmPBbFgwQoWRMUG7CKrWNFXUdeO bVUUV33/bvj2vh8u79PnOefc5br5yaGauF39AvJl2v/J2sSO6rfAe/TDS6rJZ6uJH9VfAeyvmhyj +kfGoavVh+njLP56lbzGSFAN/KRm1CjV4G9q4J41Z9PmQBK/ay5JVs2NsaqBa9agozU5NtXkI4sY u4g2ErKaZZQJnjXkrDUsWsOd1tQzBh5d0wiaKMM3a7C/GmJJTTdtvXGquR25Edw7WjXbmPs8a++K V80byPeY8yG/+zllvr/me8aRJ9TgP2qJEbXwq9r4aNXiO2rhlLXcYe1J8aolB68l96udgHQAOFUt nKoW7lx7lU215OK1N4MZ1IkNtTPpmw3mA2JibRESm6tdytpV9HN/teS2tRhDLXuq9SObE1WLD6nt i5EbnuqGn7un2OTGF7uvo3xTgtyzkXOp54HCeLmXRsm9DLCeG47qJq90e6j7kE2xcq+nnXNx43fd A/TfRvtGyndTJp90kze7iblueKp7K+PIs9zbaSf+uIm7bvIQNzzCDfdx76FODHaTe7nhqm58svtj 5L+pk3u58cnub5A/gF9HqS4RnGxTHTy8jvuvOxOQV9WdD4g7dRNjVDc5TnVwnrprqaPzdZxdXTZg n3VzQC5jyCvryCvriDl1+Ky6injVoft15NF1NYbq0P86L7/TxDrw1Tp0oQ5OXtcTq7rbaNsQrbp7 WOdB2h6izn7rtjJvB+3sr4791cGT6thb3T6+B45aB0etw97rDo5WPb633harevS5Hu5WfyIgp6on T64/lT78b/1ZAM5dfwF9Eymj5/XoeT38oR4dqYc71E8D8Kb6GTbVw+3qucP6ohjVE2Pq0Yv6Ksav RuKD6/HB9fjg+lbGsJ96eFI9ulGPbtSTZ9TfTvvdtD1AeTN4mHlbkU/Sto353F39K7Rhw/Xkj/Wv gzdof5/5H9P2Gf1f0v9tnOp/SZEnLkGeow15jkOOj5LnzBh5uCfPRfHykCN64ECeq2i7AQnf9sAJ PMRMTzaSPNFDfPEQNz1wbk8xWER5KZL8yQM38KyKlof78tSwRgNt5FAe8gsPOZQH+/V0IrkzTw/j BpHD9N0B7uLbttjkeYZ+9uTZSxkO5IEDef5Pojxf0oY/9mDLHvIIDzzIAx/wYM+e36PUoGQ1wAUa uLcGcqSG8chzRqnhEvrYU8OVNjXcQPnmJDWgbw0FlImJDdhoAzbVsJo6PrbBjfRQ90argRy+ge9u 6GC9nng1wOcaNsapgVjfAIdp2Eb7i0j4W8NOxmE7DXuYR97QQN7QQLxvII9vwH4ayPMaPqfvW0Cs bPgZ+Zsh6IW80VHyElO8iTZ5ifleciEvPsmLT/ISV7zonxfO6j2LMdiVl5jiJaZ40T0vOa6XPXqv YS581Qt/82bHyAtP9+bFy1sGSCS91bSTU3j5QS9xwwsv93ZEyxtB9gLyIu8QfXAaL37Di9/wkvN5 sSUvtuTFlrxbE+WF13hfSpIXPfOyRy85vJcc3ku+4YWvedmfl/15D4HDlP+Mkg+78rE/H3zNxx35 yOV9Ywz5jqcNG/PZkeNj5SOH97E330Ux8l1K+SrK+Avf9ZRdNvmywLx4+Uqp4x98FQAe4FvDGuib z0tfG2V0zBdBwtF8w5S5Nx+x0HcvwIZ87MVH7uF7mnWeo5/78+1k7D+pw218b1Pm3nzcmw/f4IML +NA9Hzrng+P4fmXcH4b8cBx/TLT88Bt/CjiK8nE2+fEZfmzLjz/04zP8+Aw/uZX/Atrw9/5JzOXO /Jcxnv35iSd+4ok/A5kVK//8OPnhAX54gH8xbezTvxysZB579RMj/QHGYU9+fIYfn+HHZ/jx/X5y RD936Idz++Gmfu7Q/yBzHmE8/t4Pj/OTa/h3g38yBm7qx8/7sTU/tuYn3/CTs/uJ/f6vqf9qEyas AHsNxMQpkAJOMBQgpw1wbwHsLPB3yuRSgfPBBGBSJ8cI4PMD3GHgGoA/CdwYrQC+JAAXCMxiHrwu gG8MFNKOzw/ABwLkGQF8SQBfEiCfDJBPBtZRhxMEPKxHnhVAdwPsO9AFuOcA3DUAFwiQZwU2xSiA fQbgrgFsNICfDGCnAfQ28BJ7IdcI7AXEgMAb9KG/AfQ38AHyI8bhKwP4mMD3rPlTrAJ/RAkKosZo gA43JhhqTElQI5y8kf03sv/GM5DngQspO5CTo9V4eawarwfptGWNUmMp7fj/xnLm4W8a0dtGYlsj vrKxxqZG4kAjdtkIn2uEyzV2M5d9NaK7jeSQjXeDe1mDONC4Gfko2EL5SfB0ohp3sca/WPtt2vcz F7/f+C3yEGv811AwKkpB+HiQPQQTkckxCpL/B8n/g9xn8GSAnwnCW4Nn08Zego5YBS+ljb0Eub8g PDVIDhUkdgeJa0FyqGAufcTsIHEgSGwLVgL2FlwbpyBcNei3KciegnDUYCflPubg84N3AnKNINw8 +CDyYfrYS/BpyvDT4D6+j1wpiB0G4R5B8qUgOhmEjwaxxSAxIIg9BrHHIPl/8Hfkn7EKxUUphJ8J pSYqBB8P2eMVwq+E8CshfGYILhIi9w0Rr0OXMxb9DJFnhLDB0AzGzmXsAgCPC2F/ocVI+GkI2wuR E4ZqkR6bQvDvELw01MbcLupD9N0Rp9B91B9mLbh26ClAPAs9z7iX6HuV9d8F5Lch+HXoK/ANZXLA 0H+YR44Rwq+wrJrwK02JYBR1cqam46LUNDZeTfCrJvhVE3lgEz6lCX7VBA9pwt6aiN9N3FfTFTY1 Xc/4m5ifDuBZTbNj1JRLWyFl7quJvTWxt6YK+rG1JuJ2UzX1OsY0IEOxaiLuNfVSH4hWsxPAg5vh OM3XxKnZRT2T+qwYNWPHzfnUWbe51KZmYmozfL4Z221ey5haJDG12Uc5SD/229xBuYcx/ayFfjff laDmh2l7nPr2ZDXDZ5rxTc3YaPM7zPmQ3/mUcZ8D4kwzHLSZWNP8I/2HwGGbCNVqiTbUEhejlpRo tcBzWji3lpMAuWMLe25ZjIRHt8DBWlYB/EoLcbGFuNiCDbaEAPra0k4d/9JCbGzBDlvIjVuIiy3Y Ycsm+oiLLdxzCz6mBTtseYJ1n0E+C8itWl6kvot5cOkWeFnLPurkly3vU/4AHADwsxbstOVLJLba 8l/Kf0qt7KM1xlBrfIxauf9W7r/1ODAuVq2nR6n1bMoXIidSJ59svZwxVyOvS1DrTNpzKM+lzH5b l1DnjltXAPS3tZ41ceitcLJW9tnablMrXKx1kHFw6FZ8aOs98WrFf7aS+7fiP1vZV+uzyB2M3cVY cuZW7qZ1P2AvrR8huZdWbLP1IGX0ufVQ3P/+xak2Yn+bDRkXrTbssm0U9aPpOylWbeTJbX9PVNvE eLVdmqA2+FkbOtuWHqO2WZTnUc6n3J+itvttanuUMj6ijdyljW9q45va4IptcPu2XUjiWRu8sQ2/ 0UYe3/YR8+FcbQeZ9yO/CU9sV6za46X2JOSYaLWfQPlE2sfFqP0M6ueCCfFqv5S2KymTj7XfkKL2 2dTnUp6PXICEP7bD6dvJ09srqa9gPThWuxsZsKm9lbnoTzvxqZ18vP1W6nfSj/603wsejFM7PL59 G23PIXcwjly8HQ7ZToxqJz61w0Xa36J9P79xgHGfAM65nXNuxwe2f0udvLz9R+bhN8L4jTB6E2Z/ YXKYMDwrfDQ4JlZh4nUYXhLGx4dPiVKYmB2Gm4ThJuHzYxQmZoct2sllwnCTMH4xfC3t3Ec4gzWz bQpzF2F4SbiMfvQqjK8Pr6aNvDaMbYfRqTBGGEanwhEknDI8BNCrMDYexn7C7D98b7LC7D38JPO3 Jyq8m++DM4ffZN77rIFthOEg4S9o+5q2n2j7lTb4cvhPQx34xo6EKHUkUz4qXh3Ero5TaYODdMCP O86nPjFOHfjDjkspX5mgjptj1JHN2AXUF9rUUc74lbSto0yc6vCBRvr4/g4OsqOL+XDHjg3gLrCJ frhUB3bfgd134Kc6tjMfO+/YzRqv0cZ9dXBfHcSsDrhjB/bd8Rn9XyO/o498ueMQY+HEndxVJ/G4 k7vq5K46sfPOY2gnFneefJQ64VKdF9nUOQWJbXdeF6POm5Ez6J9JmdjbmUsdXexcyBjupROu34lf 64Q3da4F1bHqxKd1hqLViTF2wis61zMXfezkXjrhiZ3wxM6N9G8CcOPOR1n3CYBOdu5IVOde+uH6 nW/S/x5ADzs/YQ3ib+dP4BBlYu/6qGitjzO0Hr+7fkyc1qfRNh4Qp9azl/UTbFo/iTL7WY/PWn8Z IJasv4o51yOngZsA+cv6LGQO6+QyB164Hm6xfilleNN6uMX6avrqkeSXXasNdRFfuuqAh7I/QV3h aHWRY3YRX7oGk9W1iXZymC54f9fj4IlYde1AEpO79lKG73e9h4Trd2Ff3ehTN/y9+zQksbYbf9uN XnWzj+4J0ep2xqob7t7NvXTfyJjptMOJumeCbOpzY9Sdb1M3fLZ7CSgH5JrdlcxbS3s9gFB2tzAW Dt/NnXT3UUffuuEQ3Q8wDv3qxr91v0D7Tsbjb7uJhd1v0/4Rc/Br3cS/bnLgbnJg0jhFjHhFUiiT Q0bGRClCzIiMtSkyPloROGqEfUQupEwOEiFvjFyMnIq8gjZsPUL+GOH8I1lxiqBbkQW0FTN/KW3o VWQV7W7G+CjDfyLw1QgxJAK3i3TRDleIYPMR4mUEPh7B3iPYe4R4GYG3Rh5ira304b8j8KIIOhbZ kaQIOhbB/iPYTmQ/3/IhZThS5CD17/nNw9SJiz1RceqBu/Ykx6vnuBj14NN68Gk9f4tSD/bfc45N PRchnYZ64Hc93E/PtfRNoz09UT347B54Xc8iUAHYUw/f1wOv7rmf9dCPnsdpfxJsp/x8rHp200ec 6/mAfjhozxeAGNfzHb8D9+yBW/cS43qJb72j49R7Yrx6yft6T6f9HNrPpzwhRr2TbeolTvfCNXvJ g3qx415idS9xpXcuyKXeTTu22TtIGb7RS7zo5ft676O+mflPUIcf9/JtvTsY+wpl4l0vOtGLXfaS g/d+yfrfMR5e1Asv7v0tRn1RAD/Tl2ioL9WmPvSi70TA2fURD/pOoR396MNW+8hj+uAWfXDKPke0 +uCTfZczhzjYx3f3oR99+J++OUh4X18eKAD4oL4y1uF7+4hvffDgvoeRjzL3qVj17aD/JerE6r49 SerjTPvINfs+ov8L+r9n/CH60OU+/Enfn3Hqj49Sf1K0+olj/cSxfr67/wSb+tNoJ4b1wx36Odt+ uG//ZOQVAF/SfyOSPLOf7+znO/vR5f58APftL6KOT+lfxDqV/IabegPjiF39LdS7qZNH9w/yuxtp 5+z7NwN0o38LEk7f/wx9L9G3B+yj/S3a9iPhdv3wof4DtMPr+r8E3/A7+Mn+Q8xhX/34/gF8/wC+ fyAWxNs0MCpOAyfEamB8ggY4/wFyrwEHmAywzwH85MBVjHFRz6SOjxmYQ539DBSBkhgNYKMD+JgB uMjAymgNrKWOvg6QMw2QZwwQfwZ+oI6/GCCWDqKzg7GGBpMop4LR1I9FHo88KUaDcLNBco1B/N/g 2Yy7gPaLkFNsGrwiToP468EZjINrDsLTBuEGg2XICsZVArj1INx/EN88iJ8e9IMgwOcNdiDJmQaJ P4PwgsF7mPcAbfjoQfj04Fb6toOXqO8E8M3B11mfXH0QnRkkHxxkb4PsbRAuNHiQ+ext8BcAx8P9 aCgO4CuGUqgfZWiIPHcIXzhEDBm6BQlPGwrQ1gQg3EPE/KGuaA1hf0PY39AGcDdAj4ceQW6N0xA6 PIQOD6HDQ7up76NOvj20n/XgZkPc+dDXrPsjdbjKED5rmHMeJi4OpyZoeCwyLVrDnOswZzpMTjo8 gX641zA6PDw5VsPc9fBVMRqeRrsLZNA2h7b5yGLal8RpmFx0mPg+XAPwv8NtrLkeoFjD8MzhO2lD X4efZs4LSL55GF55ODVKh4kNh4kNh4nPh4nPh0+lfIZhKEl//SGBoduRG8Bm8JOMqNmANmOMjOhz wHJQD36VETNNhi0BXAYeAm/KiB0NzgRfy4ibDl6RER8HpoAnZCSkgmrgBYMyEheC12UkjQPDYIuM lGsAv5tyQEYq/alLQZeMUXkyjo4CU0EWWAHWgbfAJ+B3GWNOAha4Grwg45ilUcax9B93HXhUxvGx 4EoZJ2yTMXaHjBNPlHFytoxx5wF+d1wBuAV0gAFwG+Cbxn0owz4xykizy0hbBQ7LGM9vn3KCjFNp O/V+GadzFqf/R8aZc8EmGWe1yTh7q4xzrgXTo4xzNso4l32ee5qM89jb+XzHBV/JmPA42BFlTOC8 J1aCf4C94LUoY+IbyHfBB4A9TvxDhjktyjDTkUWANsccsB6wX2uSYVjs1ZkMTgbcjbMwynB+hvwe /CljEr8/iTOc0iPjEjd4BrAutMyYyv1MvRxwJ1N/jTIuq5Vx+Y2gWwY0wbjiJcDYK7+RcdXTgO+8 9ixwp4zrWP96xk27WcaNnOmNFTJuOk7GzcfIcMUA1nY5wSLQJGP6DzJmoEMzuMv0U8A94J/g3zIy ONOMm2TMPB+0gndkZDE/6y4Z2XzzLPRwFuNncaez0YMc9p7DueXskzGH+57zcZQxh++Z+7CMeXz/ PPRoPneZy3q5fFsu95zL+eU+D94Gn8vIOxXMA6yRx33n/SZjAee44HiwAByUUcB3FvD9BcuAX0Yh 37jQkFHMORVjMyXcb+n74EsZZdxRGWdQ1gtoW8SeFqHXi5oBOrWIu1jC2S2pAkOAMeWcfTnfVcF9 VvxsGMt+lLE8BUyWUfVulFHF2a84CtwgY9UxUcaqCUhsaVWnjNWcz2r2sDpDxhof4GzW0rfuEcAd r3tZRvUlAJ2s4TdrbpVRy1puvqUuBJ6S4VkNPAA9buAuvOzfy/34FoNXogw/Z+tH94PodJBvCNIe DEQZwSejjBD7C7Gf0FWA+wmx7xBrhNhXCD1teg58K6OZegu/28KYFs64lfNtTQPYbWsQYBOtP8to uwj8IqOD7+zAv6xvl9H1qoxu7r/7OxmRsWCGjB50sg+7GeSeB/fLGDoWoN9DfN8Q+xpCN4b+av9C xvAewB5uxe5vvQCw11vxZbex9u3oyh3czQZ09E50ZyP3upFxG2m/51MZW9jzFu50SybA5ragK1u4 qy2roowt+LQtrLWF79+Cbm9BZ7dwh1vuAw8C/M2WnYDv3/IaQOe2sIet3O1W9r+V33kDn/URvuff ZTI+/fKvd7K+0ozT427QjBdjdyr9otTPlO5KvlLpM+2NSm9x5Sm9yx5S+oaj/Eq/z/Iqo9Kx6sjb WYcd34+8nZXpdvQq856Y95W5M/4MZe5PyVbmB0d9o5mljl81877RR2vm5wltytoc+82RN7YuGp2p 7CtjDij7psRtyn52dKlm7bHGaLYj+ciTWzmxV1+mOWelnqu5n1ldmhdrJWpeeuwhzVuQfN3IW1zz H774Ls0/FLdd83+3T1Jud+qNyt3pHK3cD1IeVe5vtluU13P0M8rbFnudFhTYqkfe7FowNOlV5ceP Shx5uKvgijHpKtjnnKjCKclHqXBqyiIVzkrar8LKuGwV7kgaq4UVY4a0cG3i9Vq4OTGihR8ln3rk qa+7UvYdee+r2OY58ujXY9fMH3n0qyQzIUkl2QnvqzTD+cbIG2Clkbi9KitIfkFlFQllKgvF56hs /ah3VPaPpE+1KCmlSYumJpUfeSvMlbR65MGwJZWxtVqyHTf8v6fDln4V8/zI+2Hlt8c8qvInk89W RblVrmXHpjyvZfbkB7Ts9KTHtGx28nNadktsnZZVJyRruStxWMszJt838uLY8prEW1V5pv02VToc /1HllNTDqrwpZZQqc2xlqjxw7J8j75FVOUfZRx4lWzk6PkUrjz1umlaeftzNWvn0cRVabTcv0Oo7 U9OOvFY2ZdrTWnNF3CituS523pEny/73Wtn/76GyzckHtOaTlPFae3xK5MhrZe7E27X2leMnal18 rFfrVh4/R+vuT7xD67amTNG6l1P/rnXvH1+l6ktHvaTq2tTvVO2Jixp52qz6Tcs/8mzYyNNmISjP /943c38Ve6rc38UmqX75CStU7066VJ7ZJ9wtT8cJW+TZGHOLPNscpWo4M2aLvHNtu+X9OjVH3m/s PvlGp/5Nvqmpx8p3T/xq+R5MqJXvUIJb/pljj7yN5v8lKU+B6LHLFMhK+EGNtrFNCmbbzlbwNccK hRIT7QqNI20LXZy0WaHyxE0KPZHiV+ig9fPIa2qhw3Grjzyplpr8rJrOTbln5HG1Jvf4R9S8JuWR kWfWmg8mu9S6z7VQbU8l/aC27Ullans+Zo/aXki9W22f2grUfnzimWofm5Km9lNiKtR+qnOM2i9J uUPtVyQ/pvZ5SXTkJ+4deaItfF6yXeEbE65U+D3b2+qMja9W58q4YnX2JX2u9Zmj4tXdG3fJkVfc lp/0gyJe2+uK9CTsUeT+1PP/n/fcfoypV68t9aB6k2M+Ve9R8WH1zop9Wr3PpTjUN/bkDPVNu/gd 9W+Kr1H/m/FrNXBBzBMayEi9VYMJJ7+gwQXx8SNvwUnv4JqEZxKOCbjATAAdTe8C0Pr0+4RHAjvB YeGOAOVMUqVM0qSZpGEzGTPzc+F9hPMBrJV9JbgJ/PU0yB7hdgBpZQ79c84SLkd4HMB68xaAcuFt AOnjfFKs3G7A7+TyG7m/CTcDtgn/AoaEdwGtwrcA0rfCKQDuUzgL8L2FO4RTAVDshXzXwo+EQwF3 AcrFxWAFIFUpOR5kgmzhR4APRIQTAaxRFgL8btlffxWKVGsRv7OY1G8x57X4SeE6AOn80tWAVKac tLz8dkBfBftaRkq2jDR9GWe9bDa4BVQLZwH4veWMqSRFq+SMKtlHJedWSUpWeUC4B+EYhDcATwtf AEgNbvnrf2Nk7Br2v+a6KBwAcj6SVHIN97eGPa/5RFg9uBy4ASnPOlKndfeDreBlQLpb7QHPgDeF aWPP7Mcd+suuAftxk3bWLwes4eH7PR1gI6C/ge/2zgVfg2+EKQPOx3cPeBBwn350yj8P/CJMGGQJ 2wWvCcsFFwPOIPQEOAgYF0LXyOowVnAumAz4/eY14HXAuFbuve0pwNm3PQ9Ik9o+FfYJxoJTorBL JL/dng/Qq/B54EbwnrBFwHl09glDFHYISEsjXoC+RTinHr6tJxd8CzibXhs4CqBnvc8JgwOk0f2b AOc3QDo4wJ0OJoAFfz26+NdDi/tlGo4GueLNXrlSXYvlGms9JdfpriVyXXjJyXJNtubJdbHjZ7mq rA65brP+JdcGs16uXY43Nd20btf06Y4/NH3BJXZNr3KVa/pK8wZNd5vNI09vTn/MGqfp280XNOM0 K18zbjALNWO69axmZLsqNKPIrNEMn/maZoTNdZqxK+1CzXjV3DDyYueMg65lmvFDxgNKP9F5gtKv Ne868opnqXW10he7lit9ielR+moHHdWOx5UetAeV3mG9rfRO83WlP2rmKn23/XKl7zf3jTz+mX7A 2q/0310rlBFtnaaMWHObMk6z7lDGJMcWZUxzfKCMm62rlLHQBdtZ7lqtjJX285TRQr6T8bL1izLe co5TxvtWnDI+ss498o6onP9Sps16UZlxf3tTmcemTVDmcY5CZU627lPmZa41yrzcpGOatUGZc6w+ ZRZl/KTM5Q6PMm9x5MOjYum4Z9y7ytzlaFfmHjOszLcch5T5YaahzO/tqcr8wWzRzFHmbs2c5Ahr 5uWudZp5vXWLZj7s+D/KOsryKWuivUVZk+3NyrrabirrWiteWZmO+5SVP+liZXldC5Q14KoZefE0 6560i5S1ycGMT+ytyrZlXqDsBJd75BXU7BXmM8q+xT5T2Xfa25X9QNpEZT9nvqPsPS6vsr9x+TQr xXxXs64z12rWImuVZr3p8mvWj2afZifZw5o9Ns3U7KmuwJEHVWfbp2t2jqvxyNOqA1aVZm8y9yvn pDSHcs6wZilnuiuonHTH/crJdL6unAVkcTkFrmblVFmxyvFaXyjnTitdOTvNVuW8a76nnK+tzcr5 0/GR5pzsPFNzLPN9zSm2HtWcfvsizXnG3qE5zzvP0px/jPtdc951tWjuHFer5la52jS32tWuuY+Y FZr7mJWguTuc52jua461mrv/bz9r7ufOqzUv0ZqueUnW3zUv1WrWvFFWkuadmWaNvAk7/yzrJc13 mR9ofsD8UPN3mgc0/x/mSs1/3fxI8w9YUZr/b8eLmv852XNurHWncsdZa5R7oblauVOt15R7latT uTOdFyi30HpauQvtXcqtsrYpt9bhV+5dLqbdb24aeXc2d/ekzcp9NQ2uuzfNqdwP7Scq92PnBOX+ bJYp95B5n3IPm7XKS7RgveeZHytvguMn5U1ydSvvGude5c24ZLzyClz5yitzvKO8xdYi5dU58pR3 myuivAese5X3mLVYef+0OpX3tvW68t6x9invfVePFvzd0aEFMxz9UOlxH2lBkbnxyEO4EXu3Fmy4 5BQteNh8TAtetI7RgrfNfys/wfpJ+aMcNyh/qvmp8q93FSj/JsdLyneZ5yu/wNWr/JJxh448otvu 5D8bzO3Kf9ixVfk/mBcr/xdXv/L/MD9TwVHWeSq42DqogsusN1RwuRWjguusqSq43v6CCm6wF6mg 1PxcBcsd16ngIetlFfzDaargVfMLFewd97EKXnN0qeA/aaeq4JAZUuFNZp4KS8wXVVjq+EaFZfaI CsvNYRU2WNeosNHxiwo7zIdUeJvjXRXe5XhFhS85LRX+6MjRwlh7jxaOMr/SwpOdDi080+nUwivN W7WwzHpHC38wv9bCn123qmic+aWK5psHVZTrukNFBWaVilZbj6mowd6nooDrThUFXRtV1Oq6W0Xt 5hYVDTi+VdHTjlwVvehMVNEHM59V0QHXJhWnWp+q2D7eruI88xsVl7juU3GZdZeKy133q3j15DEq rnfcPvLgcHG3tUDFEcf1Kn4ubYqK37Efq+L3rD9V/KPZoOKfnFNV/ItlU/FvzldV/F/nKSqR6yGV xDseVUmC9atKkqxXVJJiPaGSY63lKjnJelMl46ylKklzNKok13mpSvJdD6uk1oyoZKO9XyX3mN+q 5AXXIyrZZS9RyT6zUyWfmd+p5HurRKVR4y9UqeF6VKVj7GeoNM1VqNLxplelV5kPqHS++bJK11o/ qLTemaTSFuflKu23D6p00HmZSm+3n6TSV5x7VPqufYrKUsx+lV1o/qCyqa7HVJbrelxli83vVeYx 56vsLvM/KnvKeY3KnnMMqGy3Y6fK3rE+UNmXjuUq+yNrvBZdbf6oRVlZZ2hRniOoRVXON7Wo1azT onbzJy0acG3Vov2xP2nxuHHvaPF4xxdafNolp2lxt3WCFj9lVmpJfNrFWjLGPKQlk1xPa8mUyQu1 5F7nNC05YK/Sks+tUi291NyspWWOXVpabj2upbdYaVraaKVq6Seu7Vr6m1Wr8njXcyo/Ne0SlV/g 2K3ycvuwyitdJHW15r9UPmiPVvlux1cqf8P1gsr3u15U+ddpU1X+h3lYFaPNX0feja44ddQLqrjU /E0V6datqpjpeFgVc10vqWKh6xVVrHDtVEWP8wZVfGt3qOLXyREtO8l5k5adYeVo2bTJfVq2zLFE y+63crX8hlEvanmOY66WFzhvJjW0n6Xl6+1uLX9k8mYt3+ske/zT/O/IK9WVlvmUKi92ulR5qWu3 qk52zlCVZR0mU7TXqirgjFNVk+MOVe2yp6hqj/12Vf3b/F1VB81HtOIi8w+tyDP/1IqC8VVasdmx Tiu2uV7Vil3OdK14O+sXrXjPkaEVH8I3V3yb9V+tjLHfoZXJjiitTLFvIAe1x5KD2u/UypnWRq2c 79qrlS9aj2hVvOt1rTrdfoFWZdhrtGqha59Wlbne0KpKh/F/mfvyuKau7d91TgZmZUaN5CQmgBpx IGcQtBpFcUATlMEEpwAialGpKCiCxAEJcSA4K06trbXaa4PaXrS1dq6KWO1tr22tHa6d7HDb29vb elU4b+1zgrW+++77fT7vn5ec71l7WHvvtddee+29CZ9zoGIdvxIqtmoPQ8Vb7Fvy47Ur3stjoOI6 PxAqPuW/hoqf+e+g4he+DCoZXgeVgvUaVKaxR6BylfUDqNyUNxgqn8gbApXPstug8hZ3GJan8Bdg eRq/GpbP5LvD8lK2DpZXa5+G5e9xSlj+Df8xLP+Rmwwr+nMKWMGmpT34MG+L4PA/zDtbyPc/zLuQ MT3w9O4VT1s/hBXHhZmwosX6Eaw4w6mgKoSvgqqenBqqhmiPQJUzLQuqlrLVUFXFPSM/6rtqOxcA VTuZEVB1nF0BVS9br0PVW8P74YGa0cPKKXwxrNytPSo/EnzlBb4IVn5m/Riqo4UCPFUzg6B6JP8G VE/mh0J1llAE1XZhDlTPz3sWj9vaKqhuYF+Baq/2GFQf12Laz1wg1Cj5n6AmyPoJ1ITwf4eaMH4H 1PTitkKNhn0VakZzd6AmQyiGmhn6LVAzi8VTepEwF2rKuSCoadb+CWoOaJ+DmuPa41Bzwvop1LSx rVDzDvsE1NzggqHmGx5rucVVQ82P7Bz/E8w1/D5Y1UcogVUm/iKs4rgQ+anmq9KFR2HVQv4mrNoo lELtCOvnUJslLITaguH9oXYBuwFqF/GFUOvK+xhqH+dHQu1xLhRqX2WR+U3hMah9S1gCtZcEBdS+ y92F2ve0Pqj9TNsHaj/nwqD2FmOB2rv8R1B7j70ILtC6wKVg6+VnqLsirTfBFcNdAlcc/z24ePYC uPL4QeDK57qBazbXHVwF7CFwLWbfAVcZFwGux4abwFXOhYNrKfsMuCq4SHBVsnvBtYq9Aq56fj+4 GvgmcO3gkWX/8AHgeoY7A64z/G5w/dX6Jbg+4dtgtZrnYXUgex5WB1m/gtX9rF/D6mwuClbncO2w uoz7C6z2cNGw+nkuBla3c7H+p73DtAhYE2r9xv/cd431FqzpzW6HNQz3PKwZqG2BNans47DGYv0W 1oxj/yQ/Gn7NJu0JWNPCzYE1b3IYfVd7EtbcFKpgrUF7CtZO5S7D2mXa52HtWWEVrP0LVwxr37N+ D2s/5j6GtZ9qJ8Pan7k4WBfKX4J13a0/wDqdUAPr+jCj5IfOr5sxbRysq2JfgnXfWn+Edb8ItVAX p30B6tL5I1A3xfoPqMvlekDdzGlzoa7I+jPUreOboa5eWA1171j/CXXvcz2h7gu+HtZH6g/D+mRB Deut1l9gfRa3GdbP4o7A+kLrv2C9x/orrL/OOqG+F9cL6gVhHdQPE+qg3sGMhvo12laoPzTtWag/ K9RD/bva0+BWDFOBWyWsB3c3Jh3cPKcB92jrb+DO4O6BO3Pam+DO5kRwT2fngXsWlwvuIm4iuMv4 fuCutN4G936uN7g/4OLB/QunhYZg7Rn/o/V7C+3QYOIYaBjG6aBhlPXf0LCA00PDYq4PNKwWKGhY zyNzPb9Tfg5/w1F2HzQ8p30RGs4KG8ETKXwInnjOAB6G3QWeXL4FPJv4beDZzj4FnoP8EPA8yb0B nnP8YvC08SnguS5sAs8n2pfA83fuS9ig5N2woSf3ImzQcO/Ahni2ETaMEDbDhlHas7Ahz3oHNuQL mDbDeg82LrCKsLHZngobD/J/ho1Ps2dg4xFuLmw8xi6FjW9zX8PGi7wVNt5j3bBJxRnlVwRs6s4l wKYSGw2byvjxsKlc8MKmSs4Dm3YLTbDpI+3LsOkGtwM2/ZM9CpuDtOdgMytshc0ThW2weRP/D9jc xCXB5se5vrD5ErscGhU2JTRGaV+Bxn7sCWgcxG6BxqH8b9A4hquUX0jQ+BL3PjS+yfeFxreGZUPj Zc4HjVe5J6HxPf41aLylxdu32leh8Tt+LzT+wNdA44/Cdmj8iccD+6+2QGj8jf8GGu8IO6Gxg18K XuCzwUvxE8CrYJ8Dr5prBG83rj94u/Me8Ibzc8EbzbvA24tfBt54rRG8WmEXeBl+Mnh1fCZ4B/I5 4B3CdYA3hdeDlxN2y2848Kby+eAdpc0F72h2P3jHcUfBO5HvBG8mh01O5l8Hr5UrAW+WsAe8U7l+ 4M3mN4E3hxTLZYvBa9cii5ObAd4i7iXwzuerwbuQnwjeRdpw8C7jafBW8qPBu5wfBd4qbhJ4q7Vr wFvLPwPe1cJe8K4VZoF3HbcKvPXCDvA2sAXg9Qj7wHtIOw28h/l28B6xhYH3KOsF72/cAWgazJmg aRL3CzRNtnWDpjxuADTZuWRoKuYGQtMSbjA0lXODoKmSexeanuCGQNNRzgxNz3Ep0NTCPw5NpzgW ms5wHDS9qn0Tmt7WBkDTTb4Smu4NHwhbBLYWtkxnH4Utt2zdYStnC4etxcPcsHWDLQK2buSWw9Yd 3DXY+rhDDVuPs8Nh6w3BB9vSbJGwrZLjYfsWrha2Hxu2F7a/qH0Ltr8ktMD2dlsU7Ohvi4Ydk9kG /3sqPHwu7NjGLYMduzgBdhxiL8GOp22xsOOEcBJ2vMhj2pvsItjxNvcK7PiQvQY7PnI8Aju+4Wyw 41t+GOz4iX0Nduod6bDTqD0POx/hhsLOXP0d/8svHMIp2DmDN8NOp/YC7FyovQg7H9PqYOfS+H/B zr9wLtj5yfDBsPOfXKH/TRmh3DDYFcFWwK5I9hTsitLmwS6jtg12lXCvwq5ybjjsep17BHZ9yveE XX/jNsCu74QX5Ddq7Org34FdnXws7FYIf4bdQUIr7A4WaNgdGn8DdkdxC2C33tZLfvPG7rHCadid KbwIu6/w82HPYH4D7BnLjYA9s4WzsKdYeBn2/Cicg+YewivQnMyOgOaB2kvQzDkOQ/NkbiQ05/A3 oNnOWaB5p7Ydmo/YekPzcVs8NJ+2aaH5LW4UNF/n86D5c240NP+DS4fmn7WXYW+gjYG9RpsO9g6z 6WHveO0w2DtN6AZ7v7IZYF+AdgrsCxReh33juTGwr5S/AvvOOT6Dfa/YjLDvNVsC7HuHGwv7d7KX Yf8Bth32PyW8AfuPat+B/X9iMmD/i/wnsP8c/wXsvyS8Cfuva81wIJDLgAPD+GNwYKLwNhzIFGbA ASuXCAdKhAtwYJMQCAf2aq/AgX3aZ+BOhK4D7hj1Z2jujeEZNJ/G7aOHPmLrK72ghC4sE8rofZnc Lnr/I8Nt9OFewkUACIXsWsADMuAOGnBPjHvWGMB9F+DGCrEKcO0AdNKA0xzQAMgvcEvIn9/qIKuJ a4Gsi0IcTMkResKU7UIvmHKKuwFTPhkaCVOXWJdD9jOMFnLNggFyn2E/gNxj1lWQ+4VghLzjVhdM +4WPAXu+7htwTLF6yJ9EbkL+y+wnMP0kt5D8HSOL/PUiFGZdZKfDrJvW7TDrV86Ox3chBc/h3HPk HF6Gp2/rHjx986V4qmZfwPOmgEfIV63HyVlwCZTE6U3kQHgNj238Z+TYhgeuMD6OnL8ew5MTd4wc mr7FUxL7Kx6LrGeh9By7AI9FKePwWMTvwjMPexsWPTF1Cp5vrK/jWUYYR44sb5OfoH7GA4P1Mm7w uffInng67mu5k7hL5VNxH2q9QXaGn5Ed3zzc7AkLcMPGOXFLZv0bbsmEctyNCUrcAfFf4o6Ft8jv jVlzll2IGw6mP9Q9wr4uv8ym/l1mDK7bQgN4gvkkXBz52WT5+4oscHfJYtZKVq9vcPWyUbh6cVdw KbGpcAGxqXHFsAWg1+cbwNuHLfS/6mY0j64/l8sk/lWB/tUWhH5TOET85n7iMi+jt+R+QifGzURX o/8JHYwtBh2MEIYehZtPvAKLXoFLRa/AJODk5w7Crh9tSThZ2RIyO8/A7mnc42jkQne0YOEtYqhB xB73o/XQqC+cw9K7kLqjrVjL0UzYucQkVuPIW5twWLlF8uuJcDCH4RAK0Thc3BJUjPU7Im8wkfdJ Iu8BbN0Wh83ZNFidGqvTO7E6bgqpZDFhe4qwHSRsPZCDwkyQ3tWD+WUk/zDJf1ySC2NPk9gTXbEj GLOFSsUw9kxX4GhX4FhX4NmuwJ+6Asf9AVsIgJLegrEtuPNWQyT0gX6QDCykwWiYDDnggLkwH8pg KVTAQTgJp3UKXYRuuG6pbp2+j7HIWGncYHzc+KTxmPE5Y4vxz8bXjBeMl43vGz8wfmq8afzSeDux ImnFYDCvNzeYd5kPm1vMJ82vmd8wnzdfMr9n/uCusjOlkxdpMUiMFnuJfcRkkRVTxQxxgpgl5oh5 ooiy6aAvyjQEZRolyWSHApgHj+JMJzKdQJloXbgk02q93ug0LjW6jXuNh4yHjX9CmV6QZGo3XjFe M35k/Bxl+ldieVKFJJPbvMO81+x7SCZAmTiREgPFCJRJL8k0VBwljhczxalEJvHmf/kWiT+ItyTz iVEOVvYH+HfC3Zg7t+/Gdn0Vz/m/K7u+vUp7Trz97bsrv/v4e/JECfJvBEfveG/98v3w7wd8t+WO G1XwlO4I2sVeRaeiRPGb//uPri9529j/9VOG+pI/i/4H3A9+RkMG5D+UZpXuU/9LqVv0SnoXhDMr 4CumhMlnZsSfjD8V/zxzj8mLP81MYzoYO+NgOhknM9voRdnKjU3GLfQ6ZgJIk0/50/R7Uj3zgFgA oGXKb1jri+iHIG8uS/YjHDEEwSKiEWl+4MKANkN6AGBETPZjMCLHDwGkF5uhpQMMQxQg5iLG+Nue j8hEPApEh3LPiSaXInIRFX6Q8gf9IHKeQJxEHECc9gPnro6WAWgjOoUMeiXScBmoM9BFyCD90g2X MWgK0qUyjE8iXY1Yh2Gc5nq9DNQ16PvIgK8wz4koQjXUISXlKpGnASlalHEDhl1I9yLQwzAor/GQ XDeDshoPy3UzLyFFx2F8DsOvI22RwbyN9AXEn3FIipG+JqMvLsLGCzL6LkfajriM4WqkVxDvYxj1 abyG+ADDaEPGjxCfYhj1afwccRPDM5B+KaMv6ce/ELcBRuL4JJYjUOcjzwIkIU3Cfuuc8rASEH2a 18tgcPNgxv6aG2S9m3fIYEqQ7pTBoHWbd8lgsF0z6sSMq0E8jp/5gAwGrdF8UAaTh/RxGfGoK/MT MphpSA/JYDqQoi7NT2EY7ct8WAbTidQng0GZzS0ymNlIT8pgZiJ9TcZA1I/5DRnxrUjPy9ApkV6S waBezO/JYNB2zR/IGIj13wUZOMfgLvqJu7Rsv3fR7u5iHcYmQH8nQ4tj0skh8KimvQEgUjJotDOR loHzE0TcgIlBmI79E9FORZxziu5Ie8mg0TZFtEcR7VCBC5uYLEOBc1BkZShMSIciUjE8CCnOUzED wyiHOB6B7SgwT0RbEbMwjHNARF2IOGcV6UjzZCjGAfWPcATKkRSLtLcESOqD1CABkvohTUKg70hK RjoYgf6i/06kwyVA/0NI0yVA/6NISb0oR//jSLMQOP/6NSCdIQH6bUdaJAH67UVagkB/0e8g0jIE zoPk15FWS4Dkd5CulQDJf0Vaj0C7TEbbt0xscCQm1K+vW7d2zWpX7aqa6pVVK5ZXVixbWr7ksbLF ixaWPrpg/rySucVzigoLnLNnzZwxPd9tn5aXm5M9JctmnTwpc+KE8eMy+jLhwUEDqJaQ4HRDenFw 8gBoCQ7BYEjyAMqnTvcFSIk+m0nns0yx6zOn2seO0ej1Do1B77P4lAljCQrmeIq6MhxYBZbCslhF ZrYhc0q+XTfW45QyMSXnDzE5f+j9PH/IR6fn2H0ZJow9EB8nxe9Hxz+UPaEr26DzQZbHM6cFFAmY btG0UFJAlb7BgT1xGHyFJoPeYC9G3pZACNXnONMxFNoVonTjsEZdazgUIoqmGVopfyjf7tM55zrG IzfQCT7pym4FzrBcDjt9uiKdzqdOMBRm2T16H+U0aPzxqXbUGFWg8egNep3D0Sq+2ptwG/RYFw2j WwyUe0qLhXJn59tPExfuzrGfoCk63Tna0WLEPPtpXNAsUipNUkkiiehIBDIpHJkTdKDErzltAXBJ uUopQYoXYS+ktMCuNAqKWmk5LVxuKFFqyIJ7xaJWpZxj6eJWYlqgnOaS0qQP6gF1bwlWWQItQZZQ OoxGbZOkE5hyBv1AEAUnQ6kwStOCpaZKya2UqyXIopE5XMhhkSV05/7edG6+/WQoYDHpjg2NJp/k AWNbaKvJ8Ls9TrGj2se2UFaTU7JJRcJYHVqjz5JtJ5xODVrkmOQBxCJ0dkOxxuBoiY72lI3FGgwt BepEp8kjGwYxB0N4GhqTImFCkSHDSTjQuPGagElFeTqnr9BpwqAuPMOTQcaugHBDbAutSGihlAnU CBiBfVeH+oINxaN9IYbR93NGwkg5R01yAgyjfVSsrLmxhrG6HvM9RYZCtBNLlr1EM9dRgHX7LIYC n9IwWtOihNFo1T0o7MTYFrCasDeZaCk2U9Z0nEqk5zqPZ4yuxaJMLCgqIPExetSEx59lGDPG8UCJ sTqPz1JQ5ESOsQ6JGecLJo41FOjmoEqxu6irbAMG8/NJmZx8uyd0jmGOARVqsXgKsNsaXZFD43EU SQrG8igaJA9Q/e5D/C6EJjMzoWgu3lp1UOg0FMoJZA49nFbycMJc5HowzTCRNCdRSqKeiYaxc5CD oGCOT4HGpdfNccj2AVnS7P4/MlEPMOlwTKXKPeHDumKUP4YRvDy+kj9G592PZhA4UWsDZVvxKROJ rdn1vgUaX6nDdJ+lwOcq1Hl04YY0A7lJhccROH0qDLiKCogLURPbw4SJmKCzF6L1YoUZTk+XxWEx ZeL9lnyLTH+oEh0flYNN0wmkOz5Xls7p0DmdmIpTRa/R+VRIdXMLiHER55gl9ycLPTSSAk82lgUH NqrxBaCfnltQbNCjT8U0h0PWPpFRidJBtt0HGo/H4PFRKGJCBjJj9Yk+deIEQvAqMxkKinEQSXu6 gmKpbAaKK2mH1KYZa9A7kIVOkHSJikNvVEhuRR60Rt9MnG2qhAhPpEeX6rGfgZnoFpWJRXlOdN54 dsvQSUNdgJZMlDCBxBxYkcwYlEAYsbx0JfoWmlpmBiT8niJdi00yc6BUK0o21e7L6mIJkC4MPGby 0XFDMZN0npqKa4BSGiiiPFXCBFSvBa1KQ0rrfHSO3T88UvkJpKima8DkYpgiuU6yeOm75A2R5ZUb VUtXqHQFJfgCE3CgfUqUQc4OIN353QgwjELLZRSSuHIHMIxN6fw5Ukec/ogyoVjqk7xo6Yi3xOW8 wECgaRVfycJV02kgcDhI84FSQ6SEVLVHrpioS00y/5Mq/C3JVwi5JkhdeDA5WLoCJJlJntwl1R8V 79feafEVkDWn93+IzZBe1vtnpX/eFWt88xymOXIptd+D69CjoucumiLtCabjbDDoA9CPYfdxVul8 2SZcM6S+1ctanSh7B2KVVIYBMtCG/AGIBR8YxlPkBji1DON9NEbvhwwnaKACDUMJCTIMbaGpAPT2 xBmFh4Wio/cUOefIyylqGYZqhpMNjFoa6CBpbCuIa8qxqzRKh2Qyib5Kk9+K5XuF6X5+JZmTAV2a DCR5nvuZKqm6Stk2Ev33ClPgfyzlCfyfNRboH01fkJRHvFFi4H9vSiEP0ER5uCbScs0TZT+BqYlF Hg9xbS0zu5EZGpoYgemRKFoqCpnqlxJ1U42iZJGmA6UUKYrTLYCIIw9bQghmhCPvq7Jph2BmOErz qkbmwuu0KEKFqYtbVgLKHZwg27k/219ats5KkwNDGQROZMkg8M+kEP8sDX3I6/url8c06I+ZhvuV kYXecL9GEmuhQnGnqtSosMVEXTiqK03SZyKKinFPWgsVkOhnUBEGOiHN4wnp8v/E/ePZ0gLSFhAc nocTfDU4HjjWYf85J/Dh1DAp2T/KYfcpSfRPh+B0X0g62b+QtSmIGMBAHN+aN/0+R9pOPKAYKYlM xQdTexDdB3S5hMWmrrJdepsrTWl/2YdSc+w1mEo09SZZSXwUUlWinkBDVCe1Rmx8scm/Wa0ho7tG qm6NSaebj/usdAp3W7hQzidLlY5wByZKTs6DG575BQWSH5IOGz1wLzWV7HBxn24I11HDYbh8ZDH4 TwO4BigT7MM1qQ7c/beKt3o7ZFdF4yKPyPHodOERmOXRReJxwFcnqdefZ5DScBVXJ/q5SA/qcHLK fHQ6rj92yflpMnCL6vFkGHQZHqenoFV0FRIj8LSEhuLu1impCOtqFc9s0PgyNjp84c55VBrZ7Ywl 25Gpmb6oKdPt0pI8r0CenyMNeuxkBHFHLmwqy0eRcxX6SkO4T9frgsYT/gPZSXYd9PBsfpbSUOGQ AgzVl+pmidQwt8zf5H5DteV+bW7L/apNZM5SPZBBRIYYKtLSzcV8bv4s951LInMZM0cFU9GYOxBz o6hIyEUaidUMGM9cN3+U247VXMJqNG2mtultG9qa21SZbSsx8GLbd22qkLZhbdfbFK6XqQg8xtiw GorqjoXFXOaL8TdzB92kPjHfyP2Qupb7gfla7kXqfO4F8/nckPOa85nnp5/fcL75vLor0Hb++nl1 M97o2tRwZlVqD6YmbStTnSYyK9OOMVWpW5kVqSKzfKjIVArdmQpBZJYJ7cxSXmTK+a3MEs7FPMaJ TBkrMovZY8wis8gsHGRiSlOOMY+miMyCQSIzf7DIzBsiMiUDRWZusospThaZOcnHmKLkRKZwgMgU mNoZp0lkZpuOMbP6LWFm9hOZGf1FZnr/Eia/r8g4EksYe6LITEtsZ/IwnJvkYnKSRCY7qZ2ZmiAy U4wik2WYyNgMLssVxmoQmckGGzOpj8hk6ocwE/UiM0F/jBmvL2HG6ScyGbo8ZqzuGDNGJzLpzDFm NINDwbQzFq3IjIx3MSPiReaR+K3M8PixzLDeIpOWyjM8yzAca2NSBrmYIYOXMIMH8Uz/fu1MUiLL JBo1PWckaBjG2CuUMSh79ZzRp2cEo+8pMrqEHrEzmB5bGa0iLnZGfKzI9I7VMJqUnknTe/CxwvRe JBRHQjE9h8euzo+yROZGiOG5ke5wty7MMCQjrE9obqv4mSVIhRFVH2VuaCs19JTYEOpWtlKDLWFi g9KtC+k3JCOkb7DMGICRgL7q3G6tVBoydnMHt1I8BoLd6lYq5VRKg9oNrdQAUhTcuiCsNqhPoFxU gRFFHzoXj6cslgh0063UwJNiA+0e1Z0aCm5qMCINwSNSEAMQLGLg826FxaKiTlNeyDFltgaIOLsC s6b7KLcvIZvc8SzlU7t9kJs/3d5CUZsddZs2QfzoTJ83235CARjE7TWdPsXeolRsdoDp4S+5yAce uH6PyyESoB74Skn3A4RS/iJyoKukP3Y/+mAiPBR/mIt8ypcukynywLJyOUr5OSl/AUJ7AKjj8UtD vOoWaJTJ0BOSxZuIrxFfdp7pPKOmpb/ek7/Mr4V6WIrfWijGrxNjy2AhxmrhJSiBc5COeU7Igzpw QRkVBEupYCiDmZADldAOVnBgrB2SIR9KkW85ctVDI9YxD2spx1rqYAM8hvEVGN6GdeZjKySH1Dwd S8yDRdhCFazBNiqQZz2WXgCLYRm25ZA4q7DFHJiF4UqoATe2lgGZ0u9M85HvIlylYrH9aSjTXHgU +etgL/x/9lF9D1GwXLUHesAy1R7ViT/mKgHTTwLg+MCD985+4r+w7B4Iu3dc/tXq/+0TKBMX6rgM XpBGZgWsw3GbjvFzqLlFMAl1Wv0fipbLRJ2ACEaZfkapye8xCb+jk/RKBe2iOcCs/hwUoIYgCIXu EHpSCQEUDDIPShk8JEofoaf0FBVBUfogRbt67r/3qFrv3Kbr6Lc7ajpSVcqO2g6OrutYqf789tSA Mfe+vtekTsH7dkVcR6pCo4iHP/yepm6hp5gGDxlMfnX9OyRTp9GyFRAA0ZYgmlaoA5aVqhUwaJAp InXQ4CGUwqCIijFw1FFjccLZNjV9t11pvvPLhQuk9FZlMH3cXzr0pJoOUBCJzXIpPYIym6YaaI0p K0FNdwZStwlQlp/EfnSb+hZEQGBLUAS2hSXUAeqY8LjYuIDEpMSIcIEX6LaLU8fPzmnhbhVOr5zT pn7l7t+vdHR+9t2V66Zffr2Jq3Nqx/vvkZ5NwtqS/LXhcJHaomLjYiPCA9QBSbzAc+FJiUmrvyma Xll0iSN1Zp9Q3/r5t5udP3S+1fHeX03//vFqB6X77vINrOtJegh9jX4SexRySkEvLcUOoaqoGD1H X+top58sLyctXoVkxRFVJ45UvCU8KEgZGlBQGqqilCpnqTIURppSRpoiJeVF6LGkPkKSg95GRXdk UElrjsUd9ak67+xduFD5oWNUZeoyrLEea3wfNakFjaW7Vhuh7I1VqSK6OUsjSIX++qKwN+aUuNiY aOyaMoBUHkmRHrJJiYY+iq39XKX7X1pUNC79WOeny+j2eydqqeFHuOTscYvuscrai3NyHys+tHbR 3D0dHY8VU4Mp/b4Z1tlrxz/S2U7eWAGRii9QAjMMtPQym5U9esQoExMKShMTY5SDiDAxKFJMWJcw pgi8RfxvQsXEygGDTiFg0JziF87A3Q/2QbZtqZVz3a1LinMnrDyYPcG9rKXzbPVKLm9CWeOUcSUz nyovec4xKW/84tLJ43TKr7dMsJQVbmmaaYsPMy4qcF+qLKHiuFXmAc6ctU9mZy5zTKp1ZaSNSJ1L LLIQkpXBqnsQDJHAWCKUkYGzS6nIyGB1aHD32aXBKiI+Cm42pZDRMccYIgwReo6KimAFgzqAUgz5 8MNlHYfp+EeU0SPGd55W3bt7d0HnQco5Rxly9y5d/Midne6OtdjOSzhvGnCVIJYfZQlWB1TgpKEr JHuRLcbASdOmob29XZl89eq9q1evYrkclO8GajkA5zjK111pKe3ePYBWB4YEhFpKA2jJeMxEv1gH JU0iilIkJqFwCvon6ofG/R3tT9RTf6ds1elsFD9ipZq+Y6J+6IxSvX+vjqpre/X8a50rUCpctZSf YjtRaFFJYLTEBAfFMJbSmBiI0llKowJxspcCfX8wU1OJl9E9PIj6qAh917ChLesiSOBr6gYVWVk0 z77ljWL7nrpPO9V1lOHqo/kzpr3SeYYqpNa5lr2lphc4jjROt8aE9Fg4e/NfFs1Wzen4Nnd8pXeY 0LGiYxtl3p0zCW0OpVQvQSk1oLVE0JGBqqgwS6kmig6Ks5QGBRLpzEQdZKgMEVEGtYIyUEQXMVEY N1OxceZIgVIvWU3HaRd3+o53Pj9hXCylWHmTGpOVHlOuo8YT7Siepc7M7Tx1b5Li1JW/mQZ17r+X h8qyf/EuNc2hOI5SOFFXT0tjEmkJUgbSAer7IyFNfclElE93MvWdejW97M5BFXlbMSWN5XUsFw3d no8OpRXBKLGZSBtEEzHRnHDszFQczg+BUr7cmUDd3t+5rV+cxti5Zxf1c+eQZipjTLfYuEAiZ4f5 3m36kdGGQUM73lQo6asd9+ZFJySGkT0Hdd9qukHkn4OCFN1UtALbkuyEmAkKSBFtyA3d6LjT0Kne Sy2I6d89LjaYWqCm7x3uqKNXKvI7NvSZFJeUGE4vJnOlDqIVbyszUPuJMMTChBqtpaEh0b0nl+qi B0fTwdEaTXSwgg4MpntaS+kAaebEpQ4aNGgmGg2aSyTaQ0R0nAF7auiTlMiFJ/CCf4KriDOPlqa/ bwYlUI/2rAwLrv/uUN4EKr++3TK06uMRdOieA79aUp2X3YqRVEDns5072xuHrWifZaumYtPigoUt qSmX31BoU87M4Yd8QqRth2hlT3U87r/ioZ8lDmdFWFh3RTjVPVjR21aqCAiJtpWGhEgWPXLkfedE Rci+CdcCFDIArSjid6fUh5pUde5cWbF7yeHXyuOcteVHGrMnz5hc9YI6vqPs9AHvV523d646d1j1 070fOke8var87LUls3E0iN5ek/Smt0RSVI+wsPAeCmtpj4Dw/0XclcA1dWX9d997SSBhyQYBESFA CCGEkISwL2EVkISlCIqIgBvio8gmpRERHWuttZZqXVq1Vh3r2GVat3asFW2pndahnU7r51i1/Wzt vrdT21ry+t37XoCwCMQ6v++nQITw7r3nnPu/5/zP/z0FFkooGNhU7Pg8BvDsxpDhcsZSLGASJzpi +7YV51QWrvl37N1V9IV325asX35s26K5hFzx4aqmly63zP9ERV/at+ljwH14VckMaIUNcOwLQ1bw 9HQnCNxdCHC+u6SAcudx/AoozhhWCDbancQMLRI5zoq4YG165Uxz7Zr6A6fbqOcfKMydX9RxsJHr f0O4+/l9mz8FvM3WI/h9/V/3rVh28mJL9Wv2eXwLbeCNBWDhpikBwEJpA1IDcF4AL4Av9rNQYh6f Y6H4A9aIR2EDJyIfyxBe8HxmzwXiW5tvbdm6K1ltdfRbF1bcubHt8Lm7lnZ6lJvvuq80X4AHX2ip uqyhv9734DVAblu16/6LqYcrCpbOfZjJAzANvgPaxgv6RerOl4JCSgr9IgUCoaeFchFyMQZO1OrU Ib94sUcAPJ6MQrke3yGO0M8Olf/wQ+epU0AYyZXWukaGzbyyqH8R8ciiq8ATjgLzduIKHEUEz35P AISECLgK+YRbIYxBBrEYsw9FHrx6NBwK7dH8Z3rvK8juOvXs3k4YYaXvlJmtNi7+ykfnbVrOdyjG n4GnSh3ndeZUgVjE4xZRPIKL8+Fe71XbURAdKvmdu06Smn6YBIOdPT2YfVa/wFkJIJJ6kKSAz+cJ XICAS/D4CJSGQgFhE5qMQQSIi/RWsH4T/WxfZyf4gdTQHbY1uOo8/RTnu9++xwPYq4J8eFUC4x8h ADMPdhZwBig80KyZd3H9YSwEYcEmMQ/mqEFcH085X0z4FVKuyCgMiBuYcxcBKmMX2TDrcHmOL0D2 nhPL8tPddp5el5/Z+eLMWXkJnUdnlpqTO0jNqQuZCWXny8wdNhdoufS4OTYt/JoaO8+mJbEBS1yB sxHBTMoD+kfEHeEe1jteo7yT89QbGyzQO4f3dKJhBoY4z1yYjfjv4XXhuY15mdwwoYXCeC4+MLDY GIfXHAIaJrRlQ1uMwRs8ta+d2rD8yD/vqrtv+dHtRTkVhWvg9q8oJLP3dn9I39jatf/Bj9BOr13V eAru/a6m0xfR/5kHsY8+QfrCsdGuV5q84arc3QVCrqfHGNA3uOe9HJFPNBL5ctpfPgORr/GJnjs7 h4CP1Ox/yY57L9q+5DTTVxjgO/Xvliq7bfHdcB7umLeJD0PMBVqAiyIsdSDoeXYXGkTwMMJ386mK 0oiO9qRFJWR259zSTbaDJEZf35Gfgq7WCi36ALyaGtOafAFwI9x8w2WyIN8gaTjctuE8KTx3pOyy RPFMAIvjB4YZxC+ZbDDjVMYOLlCJEMUYDeElkGi2JpxuSY2JibIWn5qeVr/4OfrcPGvmhQcyo2MM G4qPZcQurHwceBEl6r8ZIrJKVQo/cUROWtvGYssv2lfS9HnzwpUBEtWM5KVdM6ajWRdiUnwnZyfM rIJNEkzk6upGimAsABHXjYcOUHvWAucp7LVXACIpnBeaoQgBjQh0Apymt6dnuJqKaPrZZzk76e5F tkXHPGsFAMOPLALFaBwLjOOdMMMUwFSNLyC4MC+BxzCfTRCZ5BAYYJljiImVEDvpg7vpg+tfFWaK Td6vsMhg22D84bMcnELaPYiMZDCDjL4wggymAP+pRZS/v1Dqy/UZFyhZMFPfDC8HAAnfL9boZyvk 33/f+frrEDfBc527XxoFnrSQQax1p06hmEZzIu1zCjXJfMFEM7nZJFB+NsYERg3PwBXAmok1eCN3 JzYVk5ncpuKebo2UJz6lkcKZzB35TDJUznCZGgvlVQO1S7vu/PKM+IiQBY9kgG4az31qwdQpKkXs 6mmct/pSjCVFibqiFS0lOQ9vLVGHxUUH+j+EfLmAaMXvgmMq4Eq9FPhUv0ZKPFUMB5eiwYMHBheh Y3L4FLzY2A4ajG2mkrLPpSXr+ba0uO3PFmYvO1VYabSawxWnstOeVofGLQ/lYjuTDIUPy130D9en xu5Q3alRJm4v7TYGTl2KZtQNrZDF3QErWF+Tu6sbLF0bYenKa6bcmJnohX1sfSSH8cpUr+Dp7XTF AW27R2cGd4ctqbgYr5BrSiP10JMd+JdcK5M/KzCFSTqFT4pEAcsokbsUJ3jcRkrhx8O0BoNapkeL 0+uZ6ojxH3IdqruIYEIZLGXh2B7UMKzxf/1Ud51DLyB9w0SPrN2e5EPiVS9sESq8XCQeblu4eIkt GX+lpP8L8NOlzfG2fpz8B+fOeC0tILxpfvSjgea4cHAdRhrY/vtVfCFX7cBx8MhWijec4yBgTOGz lYuDhX19XPVv7eS6G13noKVAze9qYtcIroLkcUUMVxHCchUKYhf985LSJuoLNX3eWrexA3C5L3x1 /Q2api9effdfum/oS8AHpPz03r+Q7eEV8cErApaviCVZwoKjDImNEQmVoTVqoLbW3d9B/6oG/Fp4 ae4L6DL0Z/SZ/1x6W/fNT68DHCg/PI8QCb9CPEvEM5wFRqD/MRftWAmM3EKiqn8PEV+BRoW5BVEM K+NRnMW8kZyFwYGzmHXD1g6EK7b7bnuS03/j0bo68nJ5SnPccoxhDDREq3OcBTaKs1gjb6zecqSq NDVxF/2fKnytDa8HgVuiwjISF/+viuzoW1DSMP+JrqXz99Dff9uwEOhBwKOVBZX3ZKfQfYwtMTGx Bs5Bg1gLjYb09paQQfJqKihIQqrRdCRTqijJeKyFkDMWZyGUD2MsrJr6eZ3PLSqn+7fmp91d+wT9 cnlHSJ6p/t6sePrluqqdlrSclLp/xJAfP5SXVl+1jf4kxV1x57z151vmA3/NSkNEddE6kNk8J79z TUbCFYR+M6Htnrh1ngL/qLe32fYxuJJCyozx9CXEU9TSu0HNAtL1t99wa8LXu1fY7oKx34F9hHdy 1EzWIjwmdBG6+CCGDAGNPWGR2hMWeFhKRvwb/B4fKg8P0SeFBoaHRLOvkxXwNUcNXyUo5eoQQ0Jo YP+JcIUOvkcVYoTvQavLhqt7kUEECVqdC2aiXFxgIuviQXiaKGI4y0HAgwwEEwo5Ac9sRHTA9cU0 doK6A2Dh2np6DVhQ4BbiKxIJQmRi3J8Wcs7fUIPvakFt3BPtRTFPo/+Nl8C2whEPwBFFENeVWKBJ IvE3URKJCKbRFIaLppkokctgEDBch2gk0zHobmLo5VYwC2wuzl7+aNH01dRf6Y1dJ7cUZuVkrH/7 8y15adVlG7k4/fDG2TOmCOTUvHvfaajk1No+LMm7e2Nqgq3N9sCcwvu3lllglC6Cs9sxwHNIXVxk rhw4IVccuJso4MhzKIIJXBksYWFQYhDHSgws8wHnipv/slYuDOA2XOxyk/sruRsuNHOn8T09XDXE D4C3hLb2B3PO9ysq6RsgVk1cuaEmPgBr0juXmtA+qYAz+PNEHAfxZ3rnWnoPF2+8sZOzoBH93oAn ZZjHMU8uLiEHOA6AUBswKQgiHiQGxFZBBwJ6qu+N9aCZPtR9hePrKfCfemUDvRc0PPSzm1CMv5YR bbtC4Pg7tIcgOkiWnA6+tGn7+3GlTKGCo+XA0V6Cowkx8fMCASEci+ewD4jSnpfojjV0d/cPAqGU dJOIXfq5eP8hWxfeRZTYjvqF692maCLFeA5zDxTEiZUw14TVKqYzTQ0IID083EifQDPl40O68Ul/ C0XyhGGD9Xvq2GAxMd+xM3xZ5Zpjhbm+rW68tg+2F2aA9LVHkwx1byaBjw61Xk2MLu1ZQSRvyEyo uOMJxHmo152rsHQAnwQvfvxDSYZ/9vKm6F6aHxd1Gc16N8yQ9wxV+wTB8fTEOABgfKbO5zE1/6hq PxZl346sh8Qh8efttlYdPrKo4u6FOw9XyHzn/PnuvMyynCWPLtRwvrO1HNu96Qv6x83Wv+0BAedW trz0blv131G2AOexCVrP948wHoHE+va4o+vyMmbmLj+R0FZOf91bX7WS+guQEgHyD7uae95rXfCJ gr6454FPgfvmDrT+OjguNbR+WPTAtQs84PoFUgsl4DHlz6j1K4ZzHQYR4Uh34D9VHT28uLJt/qPP z7Fa67Z25qSVZlP7UeHT/SVwe6j9b/iDN4QgAPz9jZVNPZdbq5jokRJb7GxHmEnG4/HFiPEIGJPq YONmElzHFlvFXHN7b3rrIvrz1xoXdNUfPElVd7gVZ1F3m7NccMV7LdXvqeiv92z6DPC3dOy873La kbkFdfO2on15Be6UCiZ7DjFJAfCQCvhs4uzq4W6huB4DiXOqQ8Hk5SVnNjrKm1FppCcqPGJSDwI+ fd168WJxTucMrniR4MiFBf0LiJ0LLj6Yk4pG2glHWsqMxPAdUo4XEEj5HI9CGH8j+I7Y0TU9kOXO KyleNT2140DhTHOqletvK1kSbyiZsdJG4q9dTY6rtKkZ7gPshbVlxcTcB57UsevEcO7jBJzhYYb7 UJgkiPgApJkCYDQBYneMIwXSTT8FWtfRvSesVnCO1NDttnV48FsMBfIT7ofyv1fgvExjcSC4qWOI A0EIvwtGSIidAwkOgZVVMF/M8S+gXDkjORCJF2sr+CFC1rJHxPCXF+UJUYat3OnWg+1ikVIfqfJu kwrDdJowrzZSc6AqWv3aa/Tn/TR+fnVkeHriXJsaf2etNiw9cY5NxTIhjOfgnLxYJkTqxWUcVzDo uAEmZCy/SfKqS4sYv1lK89OspOZEbbyeddvrV1Pi5jKD4IM1/B9gRYgzS+etqHvi5aXzrHV/uW96 SmF22705KUXZZPZjD3xG/2fzysce+ALuy45FXctOv9+8YHXTmctNDCvyCH0CVsjZKINiWRGxp6e7 mCvy4ExjwNHbARwdWJHYcXkRkb5kuvnwgjl3Ldx9vNRqrX60Iy+rOLNuH6nZW6lX79z4Ff3D5hUs N3KVjjnb2frSv1uqUZxkovwazkaAuBEXFw4X43G5nGHcSCAxwIwQxXz6m/b2tuzFc8nsdvqkbT+J 0b/syWB4kS5o08b/Pi9S2hb/DJVk0EfeWXgkK6W25s/0pYr21NdWp+sN2lXmp9OMVeWPAC5Rqjxi jMiYGR46RRyRm7F8wx3mX9Q9afqcOeFhQV6qGSnUqrzpbE9UTORzHoHRhngRCeJFJGILBSQT8yIo MhhmBJcBH/qzPWUp3DsK1mSnnjvHeYTevMBW+6LnIndzVhv+zAJQgsaqg7bexnAjECkEECUGqJFR zMg2+ug2+vjaM9M0XjHiU3ZmxFp76P0EvBPGEAHzY/KW82PiFvNjAlak5KQqUnKMipTQ4G+R7xDp Y/SoyXfociKd6VFzYJXJm7Bu5f0/1q34BkzD6R6rIh2vi07WApVNBpJXn/Y5/RwsSXfX15MXyjLa khvhFQ3wiicmrEjBsC46MbwiDSTwVM39LftfW740P+cF+s3VBN7fvhbMOhqnnZO/nP4xmex8Y2FJ 48J96+oXb/+Z/r1xIQgDqp1zzVVsIx3OIgATc16Hs9ChmlSnw318JDjbSZfg2ioK50imjl2TArF8 VB8dhpry5p10PKUFZP69fens/D89Ocvc3dFzsq3O1BlXWdD+yGxzw8LjLbWn5xXPNbf9MJ38GPg3 zN/SXVEwlemiv7l8UX7memNnNGqj77sjv7VsxurO7MSr8CS+BK348q3XpuSlTz9tt7XjOamktzmL 3j26h75vBeqhA3huczNusRdOlk66F44Hw3H8BnvhsDZkO+EStgdu74cP1YZgkn1wmEXcpkY4PD3i 4Rx7/3AnvPePdcKR57lBE1WJ3KCRnXBw0u7JSXXCuaG33gkHL8KRMifZCedmTrITjldiUs6ewU74 VD8/nM93wVErXCodbICz/fExqkMwuU44vv62tMJxfBOc7aXb3AknPG6hE47Xw5kcug2dcM5epzvh uBGO3XWbO+GcLqc74XgxnMfx210bco7feh8ch5UURw0tI7HXhmIBXwy9Ip5sbSiU6zlqsTHlEBDS 33VeugT8ElAz5elLQ21wOMpGOMquW+qDE24T9MEJuAKycuJakDSN7IPj3XBWJ53sg3N2TdAHJ87A +YxZA8IZDNaAoAJi01O3tQ9+/tb74HgHtMTGW+iD47+M2wfH82G8H/5DFR+J3WIfHO+mT3Cu3NY+ OOF2C31wwghtO1jrTdAHF3OK+Rvrl+o62pvJ7M7Sku1sDxwEQx81Qlvex1R6DH7CKm90iTcGfk5Y 23EabmvPGz8O55n6h3reJA6m0R/unVHoYp5D/6evb8yeN14O7Xpwcj1vzsEJet7a3+N5b3Mvweoi BEuClbSfK49DNlGA48ZroThuHDd3X10D5euuaKDcHbqvIoN6VO9TEigb0BNz5YHKAYFyDAc5mfUI 4wW7H0LJyo9tT12v3yjes4oHXK9d6brnnq4r1+if6Z8HXgPX6+/2tXd0tPe9e33wFWfpby/U1BCv ZsbWJc4Gy0b/DnutzOG/xb5yXHEgFocVYmrTFKGkmSKnNVPCQJIMFBJyTVYDpZHHN1BydsGMmk+t HlERDXa9FUNdb2ctgO+QL61Y93hVWapxy5b8DA0+y6ZZADw3RYRmJFS8G/qDE1YhY/cXZVWUrKmf ldfVNadwzqKKT7/qzEnOWxgXdR0/65yRhmykZu6kiDEF+YiaqMCAZgpXNVE+0kA1jqsDpT6ciLjC BiouIrOBinCwFbIWY66hOo0c3IcDADe8c+i85cqA2+6qkulJi4FLy/yH6WvVjWHTk2uWpcfT788v 7c5Jyoqf/ULSL85YcN0nswvaWvJSffjx1/dWFV/VLVQF5aUtvFGbnbhwvlH9NN7pZKyRg3bkw5w/ AsvEDKZppNQFbi+pkC9qpLhSPl/KJbyYYPPSNFBejhGnF41VO8Yw1SNwdq89e/x4A80HZ4wEDsTR qfQvINuZPVfb31dFfw5kFURsfx+4YCieE3JXKy0mDzhnEhw7iml4pRDLQzEzpjf5m0M5YbxIAgR4 TolJy+copInZBAfGmWtEFMHBtDJGDiEzCHtlemGvfoiYHDqOxySF5ZN7G1D4GcI1G4mEO0tCQ1pF QkV4aIhns8hTEaZUuLeS6Kda+FOqNDSkDf40DP60VeQRolIqPJpJzZ65+vCenuzMTTYMf+dPWnVa 0lybCn/7Xq0qPaUcEb+j3pBcMfwN0B5dmJiXz/SMkrBY09QoRaIwySfAj3AH7sBHKICoZAz3IZop ub8Pow7R6+0QDM0h7LXrREbUDEOJO8drQv6cCGgP3dGabExPWvJEUNuMn49VFjVUbfsFNOSt3eFp WXvU6i3Rxkepfdq9pZHx2nCfdtSGWtPYc6VpEWpDPb7hS+C2eaXvwTNnztCfooWu1YanJ1bbNOxC E2psGpRp4aj/wJvO5JyRcB/4RQo8Re5TPZXNlMSTT3p6knzChZAFaUiYJmihy1kRNdoCvazrYSpK 2FNR+SSWZaCvAG3XjU1WK2gFe2asYRfjJbUvRqKN1cKvMI2tt23GPU4waSyNiw/09PSw/QK0jqQq 1C9A64ArUrPr2As9tpbxGMxvTDKlux9gnKVA3goX+iNv6ZGz1Hr0wTgLTtowXs9vXP3z36xxpx40 Z5fnd/wj2lpNX3uzacGaxmeBP+nTEXuy25Jdbl7591hrFX3trab5a5Y992DNbCJAca2z6fSlVqYc 3P/Ax4C3dRV9EX6z8Yy9RkTfdIE1Yj6Go4ycV8ntgxl5MhZnmpasCCJ4AObjLTAf1+obKEJLaBUw R1ckNlAKhFAGg3ggC9CzYTi5RP0mijH483Fy+J3qTcWR4dN8cmuUgE9v13ZmCd1L830myO1x6f3h iqRkZWBsblxOyry5Mb7SkJxZKCt9FY8lUwh0F5nLcwBnGV8YVWRKezseCw5hAJP/Xs/7AOyHNYHn cczFnWxhUx/oQQ6uDJUHohumxLExiACT8J5hieD3PkRE8O/vAR+Q+p9Lb28G/CVlzdSXaqC6e8l9 HfRviBmWk428D7gHmetyPGB6Bc8FrYEh02Q4i+NErFjmLQ+MjeE9M5wPfgMAxAdzD6rpC/CKKwBX TV+vK22mYB2IkXs5GPf8ze8vI3bGJKtwzJCi5p639eEG9AHfjbDnA+h3hD2lWJEpEoAkd/ekAD+/ xKTS1BIzleqTM8NM5fgkcSEu8REQWRAQOfAWDCKhak3Yq4Z/DSivN4huwmU4hUsDwTI6VpxGLHwP E0JRBcMj6FaAjA2r+Oyk4VFFMOiGbInQLRcrMGmYqlogcnfnCXJ1082UziUxxUwlJnq6gEhYaDNI x4f4Z4H4Zy96ZQa23hxtSeewb5x9NklYxPdFOG66bVGsyXydhMubbEI28q7aI68KqzAZHSKvKrUS RV5ZqZkqK/ApyjdTRZMNwLNn/0tBOFxgOlxe6nw47tavLtCG11sTdAV/SrTICxe1RKqWTvEJyZJP EJJvMyE5D4bkW9DIaQnVTEgal4YGxy0Uk1MWm1Uhi4OyZpVmzwySijOGIXs2lmlSMmxLtiLTTCmI 5CQzlWwkYvVmKpa4CQUz0qbOofw4NhsH7rePNE6rhjVO0ESIf1M7kNgzmIi3wM6CxmPTMYtJ4+4u iI8XhIQwWpmEoCIqIYHVzGhMFkoDWOVMLGJMApF2hqUC1Q4KCdHA34mkNAqI7QSrE2UVUl5CAuew CbpiYGMyBSWRV3nm6JKq9oW7eiqt1ro9q/IyZuU0HiKDFn3xz0hTlm5xGvHkHfPnzDzQ/QD9iWtU aMy2Atp6ZblVF59vijerQzX7X9rz0JdA0G1X58hB7z86mnveb5nXQ79HEMCgCKgIDwOHwJJDc2ee oz+iv6N/fGxtRqxt2eafbdcW19yxct8Z9LhhIMakPCOTqylhlgOtBaFMqRSIxUOqkTBhERUWNkgb +kVaKD/gobBQHnZqyVFN4mCwYZwigNuRNY1wLNOIHUxzg34cdG6ge3o6OsB5on3x5+9oCvSGhSmH ihdUzDwIDfIxHxpkh4Vu/6DVqou1pCVAg9ilKoo++iDLUtqE9AWgj/Qu1yjBs6D6L5XQDJ/TXwyY Yct1QLy/uKak48CpQyjXewHi1DqY62mwQizRFAhAoUxWaNBqCwq5mfEF/BRCl2uhjBE6ntRvgIka BKSbgNBwVmqI7hvipSYDTLy6VtWjs42ROlVF1u7UhIpZW+kfC1r9psfnU3FqddiS7B3J0bOL7/n6 hmfR6sc871j9QruPly5Op/Fpl3npY3Vqv3aiVHksOjKzVBPiIw6fkbX8/iLLL+qFBlWGIXeuOizA S5NnWrwyf7rDefinKAbh4Xm4PnIwscexKzBWahkGNRnm9VMBEEkkIpWKZVK9EJWaRPBC1RYqVDDY oEt1CIfR3CrHCQ4PzNr/wpq8tI7Dj2/v4Da3Jf61IdkQrW2xHEtPWlx9gL48uy35XJcpKkq7yvJM unHenJ2AIDWnLw5gyEWbgcQuqJ83qDPLwhV+YnXuaH7Prt0gsPP0CV6rnVfNZeNBGBAgNBoH+FU5 goscgheL0EMvsMMG+kgdDhjjs61Ord9S++Lzi+daF+87XWa11u5ebc4uyb7zSc7+toS/LksyREe2 Wo5mQFM8gUyR8sZqU5QucpXlr2nGeeW7kCn2vrjrga/o77utz9u+ZcQ60Wc7W06911J9j/pvBnX2 rPBQP4kqJ/2u+4vN17VnTLq8alUYNEpeSv3q3GyIrKie3850jZGiOBPWsHIvf6ZvrEuOcjFJdRoT lYDpcFWsiVK5SKYNdpEHNsrAnTOje/oDYmOho9SYkc8OSH+hcQwSB+0vBwdeJ8rz81Nq1+emtdZs pS90dNyVlfzZpv2t6Ymz8hv7XzzSHSwNIBuvbRCIPHj+hu7/bSUD+CIPPhevr3j8/vK8Kfwgqvre txsrOUttV0rz7wKuthbb/RV33Le53GKTEz/8cteAgNhy9xIDqBkQEKetrjfBCDkM98JGiJtiTA5t kWIKFokylURwcEYmAJlcTBNHZPAD9IpkC6XiKHjuMotdesXaQmaHTIOBPVVGCFRDkUTVQeIAj9GJ gYL8tq1w876Z+YtnbbQkx02V+QWnGpLq4/Sm2Mqu4t/OzFi53c2y4lmrVBweg3ITb3GEAX1FMtfO Q7s3fEN/96BVH1mwFQTUx0Z0Nr5yuan6NeA9lPYhUEDJHpv2oQQQVckEdhJaYjO0RAhmwiwwH9YC EMLjhZhMwSFp6iIqTQU/0uzyv+jpFioaDIgAlSkWSjkIFWo7lKqHHSFgMsrAocNlonMX6IIS9YYt XEvH3lapSGnQhk2BX1VRkWrvNm5X7bVzuuhcw7wszpNF82ffsX/T/fRXLtrQ6IcL6K5LTfCsyU+L M4fDs+bgPKPm3DnGLufuiVKZ4ishWJ5bFxVmSqxAYGnzoC+CKLm8QqkCB8DSQ5WlffTH9Df0L/vX ZMb81rTj+18/Y86enieRBUvhzjpsvzvAFzOaAkixwKOJkvCbKIGvROIrIHheYs8mykcM84sWigdL VJZwsPPVbFHOihHQV/nAB/OZUNPnu+gL5Hm6E6TTp8BGG024gFZazMUbbjzCWdRAq6voZ6ropioS 66+pYXpaG+CM1jFKJCGmMHkPapE8hTWUp9swRdJYmiT0sIdhuiRiQ98wadJv+Ntvo3EMaBxGn4R6 hF6DCiV5UA0ld3PQKU1OqYTGnUit9Erf+IKl/j3ouRRIs8TMTAezohhTIKNairarlqJZ1VK0sYaK dnPQLv1h9RIz/8krmN7om6yIqT8f2ZtAehbGr0jJ5I2pTD6k2KUKaZm8BsVMXt41lJfd6KJxVE0c 5OORyiY1dPNvdD0SNy0mXWDZWJPy6z6rbW0/HJ7AEn9X8Hq538L8IRiLgqN7azRhElGUn2tYlLqa iuIowlRVVJg9rhDreVbPen3wUTi4nf3mIPJk2PNsFMPi7/CezPj8zI2G4zMyZuXvId+MPoZePBbN fNt2L/CyZQFl11OyQ89x3/7VduEG/eGPl9+bBvjX3wc8oL5x4fNp0+jr19+nf6XPo3+gt4BpP15y GXxGTdzyEetJx5Qmr/R0o0QU5udqDDPBhXCM+irKyJrSydUMj/NR94iNv77fVoetqt818NibFvwf /YdXgUT7Y28MTi2YXs8+I+dP9WM9I2e4BcqwOFNAWVlYUlI8Y4T4vNxqKi8vPuwOZIt4aJH4IYkf NAZrD9EtmWSST9WZyE6jHrpzqmPwoTsVB+wP3bmz3jw90DmrfT/5J/SQw2wYicVgapNMIor0cw0P i4mYRyliYiLD3SIN86hIB50ha77J7oxRe3eC/fHr8Gf+OLV27pjPBxq+ylQsD3WEInKiLFScyUyF wiwpJzIuNTQ0NS4yhyPyc5WIGF5TPNRk7J1klExOejZBYDx3U2Hao7tZYZpz8eAGuPRT9Pa+Tclt Qyq27nh936s4UrHFRr0/wkLRWBq0kJ9CodTpDNBrSj9XrYGvNBVQSp42roDS2itvFAe9vU7tI8X4 D4AZ1zD96Ywobn3jSFGcM9bQMAK6j5GU5JRdQHe2o/nU/zTNw0YgSioWZvLWRluoJKWF0uoUSUkK nZYcFR5MB3oysTFO62X8ddOvOsjxrNUOcjynVm77NuTqqsYh7d41wNuCtHtj+t5g0MHiD/pe5+eq CuXrYgsoHU+VWkCpHHx/1lnfjyf2m8AGW8eWAjrl+hvC3cf3PfQZ4D1kPYyvZ2SDL15srTo7EgcT sAxMY5qiirRQGQoLFZMKyyh1RkxMhlo1lv8nGwATiAwnMMBlm09t2br3kQTxzf9hJIhvtC/t9Jxt adtQOkPglCH6f7jQXHVJQ3+D9IrEcL3i8D0Qi0WZpsDdLxHFwE2g0essVLheEaPXxygIEYKB3sHu qVpkmPyhMIbGcYLlt4ujU4cUkPHOnQpLXJ5yVEsOX6MRCzGJFYpoicgIgU4TzVdGFUKgYwrD3gGA cw7dHB5jMz6iZT7zKpJe9iDppXMoNlKmOTyClYyGTegXGuqqlIjU4UUUrGvRmnpRiWAQwi+TdNXg Q47GP7QXoieMOHUqlTI60UfR00eG+0MLc1lxWJg2MlItEUVo/VzVWq5SzehFhb1OHziOJPC4S/gd c5SdOreW5JEaVWKEN7xNrn6uoRKlUoTISWR9JxKoiaIIGt+p6XrfEHG+HWn1PExn8vFLMebmuiok ojhlBjzmlXnwj0itQI2aXlZegMRCKHoMhsnGz0AjZ4y7Gh05lPFTonvrHytL0vOjzJl5VHKMtWt6 WqKiPWhacoYpKazdOV/Rh/+eFlNUExNVal5pE+BnP0KNLgPeu8aoSU2Yj2jaUfigNEn8NNHRyDAI G4xKo1Kk4CI/suIExiDO2WPyEBE4pP91cqE9F8rMK2wu+MsfvcuqkIdjhAGecnKTKCnCQoWgLCck KcThcGOWNsmTjTOBwniC8A1j9MdH32qvu2/5sR1FOXML1mwvhp+dWu4Xe7uv0je2rdrX/eGAVvkS 0ir3MFrl0TlOlMnPzxUmtyirjdMWUApdtDIuThmtU3BEhsGDDdkA+XeSzuWM/5CvCc6CMaXPThlh 8b6Tj236hP5568oTtq84TfT7dPLZlc0vIZn0SIyVmVxDIiNE6kGP90JkPTvJZTrIqSc4th8aEFs7 tY6vOmfO3MYIs38CwSP3YwHKy5PjLJQFpiTJiQqLRZGYfFvy8ombIBMsdlIyb+d2sUL9gkGdPVOl 8JOoc9KX23tGuhmV4WEBYtWMlKWrZkwfnbVpTb4aaAALFWaEW1thVBtDQoxqYqSRmLxNOFmvj/Xs tPF3dhIIoK8ilXl+BVKZO7VyklGkH/Wo5QMMP8wo0kfGcIhJpA61UBFqrVIN/4xAL6SFm2wMOCjZ J/Dxm/QTu+w691TZK8758nO7KP77T5EonmDuuOxm7qtBT10LN8k4HJzw9SmifHleBFfqjvN5wkKK x6aihlSIQwP3K7HS05EHCeJvZ3XiwUMnBv2T/YacETeOsPfnEExXDamJkEq2FpthimREskARWlu4 yEwVcsrnmqlyjjmUa5fN8lndrIXVzcKJMcJZRlDkIMySGW67gHYcRd8f0NbinjfT/P1xze1NNUnI 5lftNm/ESk3GAZs3FjYgm9cuNlO1VZwaaPqayZveQT7zXzT/eFKbP+IH93HEOLfBFTdV7LB6uqt2 PV0xVmOKc9DTFesKkZ4uN8dM5ea6pKV5umSkmKmMjMlI6+x9mNsmsRtPGDZJrd3jhpsb2Tm53TgK qBpMzHuczMYkWASmw+bA+I40GMoBKNdoyl1dy/39y6dPzyzXeVkonS6T0JYbLVS4uJzny8vMtVBB bplIy2BXtsDPozRQw4QuIiGrtAsUMWTKAMESEyvjDiWjhkCREjVoFYPnvGyoHTbWKa/n7VrmW7d7 d5v4TuU79DfF2f/H25eARXVk+9+6W0MDvUMDzda0Tdu0DULbILI1IItbC0aJCwoiomIjLiAhiIQY Y4xbXEKMo+gYYxgnMZqYxDEuMRP1OT7jM47JOMZxTDKTZYxjjJMYQ5f/qrq3odnUzJv/+/jQ9hOq TtVZ6pxTp87v8XPuTXCcbdCI0QPCpXPDhqfPWocboiwB0gW+zz0fAG/PUdWlRUfWJTclWMblVF+2 LNA055sMkRFZw2rjzAWOirNMeORncAwc8ZURXqK1QLumwX316sKytIS5xs1ZaVtX3gLa1Y+7O3JA Kfz1OeM7Nmve84MC453DF7Y6s+6ajqckjJ2SEKfTWkdlzXpqZBba5R1IamdyZ5D8aqkMKptKc0Rz kSEh6RnZWUWu7HAtk8HTAUGmRC5dOkgVnux06SXhEqrr+t9mU5y0CCUAvU8TIlS/wDjgq7hzDeBI Uu3UgQak26Zx6XU/14jWwEWsgTzGbET6rpBHm00xyBo4DwjH0oGzztxn3Sx9dk38wD9jVW0rSTQf OZKXsxbJHi6MdaR7lD0rg3TSAW345OKoyUjO2nkdpUPRdS41lZpHTXekTJ2al5yc98gjebrc3KK8 gGinKyAxjC9yhbHoO6woj5+VmOp0TUmUOItCpo1mYnOcLrpoAhPrJ1pTpY0oMSkDEA9bm7fQdV70 q9QqwdFnaAmPhU5tTFJ7qsho4FX8iQRN0lkBEIi9J2BjhA9aJIE4IapUkP6iAEuu2utnJSmlb7ar tY/oSwfwbc9vytVpl7WcpyNDYubkwNsv1CwIH5CREru6I3/67rLEQSsXPrubr/HLTnFkmq3jS4fR cO4luXFoanrRgjrn+K3PP9EyxRces8THRTTQjqSC/AQ7SIWXQIYyvjghEmxAhqMkKW4q/Cv8Fn7/ wspR6QA0LAV+gP1s2owpj8GXoRxenjBmJRj73ZmL8RmKYmN9xYzNL7989gZ9ruNskslWk7r6qadA CIgCym82d7yfkzMPnNZpV9TM27pnw3GK4tFJp5Ec48MRv8xUPjWdWkgtpR5z5E2fvjQ1dWl9/dKm pqWPPrpUl5//+NIwH8QtzLWwx5c2goKl/OLHpfIBTpcczB2S6XSVDpEUPhJS7mTichH7HpnExPVg Hy4JFDvl9mChNyNNuBGCh5WIkdizQPZEbSKMFMWbBsSSKBWdt38eZvZmJeJ4FzOZnswEjNpj99WS uWlrCvRhUjZblRLOLHDNnzZtiN1enJI/+I05I0YzjH9wbEzYNHdBdNLA1FXTx1c5dKGSEj99TsbQ +KwIWj95iywkVp9qK7dpAs2pC+ZMKR3GXA6OitAU09HRg+P1Rvf/vHfStbWiquoOSId/fnRkG5sy Ni4CbAfzQMlxeANefWHixAnwK0A11gMFUJ/PlKtmlCyGp91fvZ6TACyg+Prp+Pg5Q/IVpbFzvv7o +rkb9JmO88PNpgX2DWFhmfVAB4zA/6vWjvdyc6vAGV3Q0/Pnb9mz7vfMu3CRew0tPQD3cDc7pDSP 9bQB8b2JVCpFovMgDfF+lMMql0cBkBAVEORwBQQkRNnSHS6bLSFKwVA+UYkOVxSdkOFABy8X4XBx vmJxQx9VnqQg1svS9y6JBQ/ZWJKh4wtznUIfurdwH7pNzfmO8bnVO8FpMBlseoS0nGypfh2uaj6+ sTBvRM7Kizc2jMqaPnG1dVdZoqWfVnXcU7B19eTRoVK9q3Qlbkc5131lwqjGtY5h7jr3syVFa1of HYsrGz2v97TUACrSIR8QpY8KiwgJiQiL0nP+uP+RmIsgb3v6eZAHDLxEm5RM6hAMyEz2/eZu6Zpl +3WbKyGkt9zkL/f3pg62l6ass2d3lKxY0Y26JErnCIgxh+hsNl2IOaYbbf1Txmi9iwlwmYR3A2e+ P1qXtuvfL7XHJ8Y/Dn+sZ7TutnGw3Z7wWOW29qqp/ZPuLjdeT0kcP3ZEzvwvvmtc1Xpl3cTCyp2T RpUXd1tJFhXj0OhCjCEDFrsSBsWFZGSExA1K6LYgy0ny8PjBizIYAm1Roj8hUQmNaYz2B67vye1D XylLThydW19cDtS5wyYfHbazDAw9Pr8c3vy+bta21sop91nmq7Y9SQlFVUNtq79zpQ/ZlwQ75pe/ +HOGNPmzDRNGIheBvK0dRlYrIV02YxwqzsdkiAVGA9DrgcHI+mjwAzgxW4KDZVLIpVcnJdvoQKZf McMlXuiHkZDFw9Yv7QUKaXw/wvanKzCVpnccOEAXgLfLdt6j4hnp8ifRD93ptiCfL648uRzu7jjW CK+BSHxbPxd5N2tJRVoI0oh4yuII0RkdLp0uRML60KG4DY6PhA6JcbhCPL14Ejs7o4uVaPqH1fwv 4PIVcCUrBWVEz7cW5T+J9Hx588mNRVjPL9/eMCq7fOJqTxdW2Lp20qgHaTQwcOP4O6RDhQS/7eK5 OhfDU2I1k9Fu5JD7zt/xYHdxZcYK4+EzFM1RbAn6vXoPjhErqXOxDFXXhWOEfleJvvk7Hvgu7hPL OIP7b5ZCI375FclmSv6KvKLeL8oAvmaMEnMe+EWZVvJOx7fnPQheP35GELw+/iObeQbDfL2RhAG6 Ks6QMT9HYx4lY7IBtS5W6et5TeYRDlIFE4XkQ/LXW3c+g9e7AXmdu8Kv7Ib2RQHGxNqYLXxlz7dx zJZFi1gbbaNwf6kZ/G1+GOWPezrwoNbF81KGJe/YPIW85DDVk9n520Jt1MTs+pQ6th5epw/BS7jC ah9FxrKjXV1G+pDJFD6U0ie41uWjlNW6lGKXeSL63lVyNM7e2ljQWd5j5Or6L0b6kK/vwvoC+jq3 jXE2ww88WF+YBh/GhGjYSNlw9tLiU+vyD7AEIJ4ZAyysVhmFSNGSdnMedbT0IMjQedAZtbxXet1u 8860m7gruPhnxobnphaG+w+oKetR/DOybtLoJ4TiH74+pX7WClx/VNC4ndQfgewljydN8NQfLazs qj/CEs1Q/Hd8u9iFTAF4Di3Bj+d9GB8V2ky8jyScIBKuRyEBLoezAU6fqLXHmAD/3c8dYmWO9OcO uiKDVOYwly5dqqMnuz9PZzWZeaCAaE4LZ+CdouYArDl0p+YgreHItwDgxbWcPXsW/w5tRXv7Nulc pnrbR+4j5wGPbZvYNxAQpQEAF+PEmJDy3LWAG1DFXex4Giz/w/H/Og4bWB1UrWujbTtXQDXc15Rt VyVlNuKaRQNtQWMbxG5liHehaOG+0lD0pZYZal2yQDVinpoUxVrEN7ikJ46iJ+OUnF7pYRUSXgU5 Kfg7D25IxhugAd7w6mwG7i6HV4TOZiAPtsElT9SdJHJObSa06nC/PQbQtS4gV/gzKmWtS4UIxA3/ 0S4aEWc4e4wR2AHeDwOH/h0IcO8ELcBbg9uSVcGDQluyAUmetmRfngNlhczezS10kL4aFO4Fo8Se ZvBwUXZgfRg8iCmgZyAK9gh9FFkGGQvWwwqis8QyK5HpE5qV0TPAtRXgKqGdjic81FD+b1K0v1R8 WepLYyqRACH2BQIJrsRHRPbuSTYnkPQko0eDy9CnDbjM2jADmPUClIMPfwUP5ciDgnwRgWQeQVZk mELSrpHhkJvaSSFABAK8HeJUvTuU0VaaXwnuboWtgRaZVusLn8cWX8rkcKn8ctKzLMThp4uqpRQa aUytBI198tvExPgPvsUSzCK+66MldrQm4UoBZ50F5WXEQhCkz6zdU7KV9lg/JVv85BJ4Gj7fWSUG d4tVYu7bnioxTBX9nUTFp5OXJFqHvwTZPQlQyZEVl2OJTRQMqefOA5NkQsKh97q9k6jcCw56CqZe 5v7ZcQOmiwVT3NG+67HQLkuZAnE30Dkk00hqXRrPOWTq9IzQJJIBSrILgqFjg0h3scs9KpSYws76 p0+SG8uAubP+iey7Da2w2bNCeTgRe18tUlIBOoPYI7tN3G4ykV7fjQbVXeU277qgG/8t1gUxtj6L jsisOrS+ZtJlLNDhGwlqZRJtLUa7RLyOJ5xW9rVCQ2enDCa4vxocRkd/KTYbAwm9m41hGWYXSNTo RA7EXbV8AvzR4REgRV9yZP9Eqye29BA32yDYY3RW2LBXJJ3tG2ce3wXFwi5QWWwenC140yqcmVY0 Rzo69QMdfj6+yMQDhbzWpRAMXZfUoGFxHhL9JVH3LErhjnZ1FhO8oh38Mb5EtO0cjU912mPbsVUi tt3TP4w72rztMKFERSjxw+cOCxa40P+zElra9RhBuKwWjAWmJFAPOEOPkgwmAVTB+nWg8GxzM5SR FXJHybi4bysmhRb6tpKV4B5iaH5iU29waeinoqkohyoYiVVwsF6GNkKGQsta0rmH2H3BuglBTreN iTF5f+AMfT8tzRhKnpZyH3ieqz49enjzoeJHO5+rChwhlPTLEUNPjuDZHnUu6br24d7vuhoiUhxC pBj3DsPeZhiy1/6aWhF0Bo3YZRaIBEu6lIZYBy71Ppfu7Jl+2oohSbi3j/4OzdzdLqmAXNbNLhm8 7ZK+h13iDLu877pxSzDPXTf3fl836W8RnrMusocB2C55SRBWFZFFgXpk+bm0bvBYrKsLOYtYtyZE fStlwf5kUAylUIQjPsQgKxfj8SdPdrN0EklXmkLbuYjk5M7m1+wI8gpugtkYpupxzWuK8lzzMpsf Tz1Wh++XlxQdLXBUz9oP7F33y0VvDU+eWfpreB2v04+dx2/gD2GvxSEDMuSyqGQM+lL4KnpYCBIt RSOSMHF6bCL0/Abh6lU+x3P1yq2CENACRBag9+0j0liD/LTDSCt99uNgU/CzQCBHQi5OUGPSACyf rmZqwMRtYOLKD5Q56kzt+4Jf9SXSvmMiBpbFoRXtGCUNCJBSjDxMi2RCp8UGrfOt0f2Mmsd+EOPW N8wVO6vTzJ0+jcwcHNPcdoTYJYbvpMXkCOxBCSaE0GF5MBXYvelFATYmfcyN+MQ2sFskG/jNVBiW JBlPyfkgZBPl/oIedEUmnWFADIlLgrRdzw74E30DXfHrB3dCY8EaAEe8VqHD0FgtEWjeKna9ZD2/ W0DAUlK6SH6RKzJS5xe8yOXno/Otc+m6DJvi5EkvEgyedtseOSYRiIeWf4koVwmt1ZnJW8w1XShX fKuAjrW/MG/+scJp9iWjLcZjedmvWowpi2PITpyQPMc3eOK9RX3Ee4EG3AWOxHuS59ypHswrGzd1 M9glYGHhbpXXqHXIw1tL8K8GOUKCNaEhC1EUvcgVClgWhDK8n690ocsXe6Vdj9gShfCCcBIzEQct KM5OtkcLFlWUayTZ/B0R6Opr8MPl1mQMdHWWn5cSB6WMFkrtW6JGp8SCH9jkH6t+uAs8YFmpId3A siia+oTdLdFzizwZAglfhztBdmUIjEiuJHqxzTj7hqnSoDyLcaH1TLXkKtfeV4TfZ8+Y09AtNg+/ dxloQca/Lp9nqoGv0GUc9wZf0wTvkp4x1f92zxjcQ3zgNdIz5iJuNg4kFvgDbjaOIv0LzGQ2Hlki HOnTop3Az0XjS/hDHTuYMsHXOIhiy5L7xfqBXrH+d3e3VlWxlydlLESx/ht36RXw5pLNIa2vkpFa SZT9AH1ilR59onrH+YvA8m4YVwkgyoNx9SG/Ih2+/WZZsWPYNuA/3d1Iu6vhXwk81uy/DiRR/go0 fztlxZGiCUX5Uj+Tn56i9H4mNlAegcgI7DfKj2L6ivGjlN0ifO4ygbTaDL/M9I+p7gFplbNoyhgC acWvEwGyACsAZIGMToAskNEFkEVsXzna+7f+N3G9iHTlg+L6xpQb25e4G1jTiROLaB2MTmeD7MOA Ec1ziV3J67lVxNfwf5PV+Id5egd5dfAnzYd7/JvX99+8n/Ptp+O/YNULES9OkHetqrd9fXx9aI72 ygoY0WkF7Ea1Er/RxYkB5JSrvfCskn7zWFHSa4uc3MUFzfD53XDr8mqwBG4t9DeEKhX+hmAVPsWY CjRHnYhzhXgejGJeiU8w+lL6G9BOqpURQpapZ3ZA3zM30MlkY9dH/g7Bs9JJu/Csrk3ogWfF18F2 6Hokt17IXIJFLUc2jc0ryHn2/DcEFGutoGHzEZ27UDwW4ggIVCMfT83yPhKBwYlCXgDtxYBkOycY Oy6Q1XKBQqYAEYoGuAX4qv5ArVyZ7OE9AhrWn1v89WEmfvUni/hIX0WArzD7TDT73gdnBYQUKzMT VCwHomUQeKhFMqNQ8axHZrBxBsTZwIE6F4hTPDgrf6QboFVwRha43gloxfmHh/z0LFwDitf/hQtW SMPDrqwG0+CG9Xf8FCoylxPN9fsHZAY4ITOAjoEubCvJklCrVU0XME6wbBmo2XCLGeynVvl2YCn0 YdYgX/F5koMPd8j9fClNsG8sik41A8Sg2JIo+oudmeoH5wdsz+amYMSqzd0Rq9an2c6d4EMTjlQk D77M1xDsq6ICjH21GGNfwWNPv5lmqzqbDsN/u+ha6pAJx5aQKGAuiqCrPb44CZ0ZdAzUEuRCT44g sHuWgPMu8EWh1D/ddQfa1v4D3t7YeHA7iPjD0trDFxdPP8VX9wNvRbzoRrQzDcjneugcgYLVCNBU tQI01RoCTcW0NAx98xkMZFX/u2H1k4Hqg+rpzXP3wG+FvEwbWt0Oz+oClAoK+eok4OjKD3TPDgTq jd4JAmB46fD29d+AgPUNB+l1d5UgApw+vXThsct1ZWxgn+BVwrz1JEbAGQJ0FvlQkTIK7SwlQ8eb TDiLzhKuPyhPEHqpdvolM7xBcKc2euFOMfX0rqnOxzBgFdCKgFXVZU1+4/LmPj4m15dI9F7k11qF PAHvJ0XHj58P+gpA8U/vPIFBeKZJXFnhasvHC35qXYGD2YvxqeAPQCriUwkaugPNUYPmQFGp1A+d eECjFljpyRNoewfEEnVfuFPc7e7oVMSKs3v5Y9zsh8wZsOea2g4RqiYiqgpRdBLq8EfeDeidL+iZ LugONcU0gPFw1QqQdqixEdpJ5HhGouYK+s0WsGeEGB3Hl7uoAV3ZAoN/ADoHgCG61mXokS0gG4O+ 9XhrRH53/8gZuiFL4QqsHshSfIKIS7WkvUGtMCXGxXbhUon8QRTdhz+GvvjDGfrAl+LudAehIlLe RKzbv59B2L5GBJX6GilYU+UT849fwaBS7326cAbnI0BRoT8b5/zm2byMwlwCRZVLMggo/kzlF5C6 Amy1QrFJReeqeNr2WFt/OYSdU22xW9f8A363sVHIIlyD9hMERKqMu9sFPfXOBC/oKdFj5dK4U0i+ sBfOsdhf9uQRFMauLII3lhRz0A+oBJApYv22IPpX/idzCKNNb9gH5YyPNYWqLF3QUAkjMDSUxjw6 w9U8Ko854AUzNTxj9vSXgbGkIfPkk9loy55wvkpgplBAgCj0ZY7x6/hh6OzFOQQV8guDVAz60vhp +swhEK6KrBbyCOvgpgr37OkJA2WV/mNyFxO8KPY2/BKEJJpzH83gxxU+mZ955gzZz0WcAVnp+2cT Gmf/9uowuplZBEZtBiOXH4+I0yQrj+J7z9GUlZPykZSZsjqC5Xx4pL/S6Qr1582MFPmonNM1IIjn OysLFR8kor+F626lFwCf1gNorccPEjv/RR6wM41Q1nz0aGnRshGjlCmp5bY4cAso4opUgxKFsJ45 ReL9s5ucOfIq5dDECWdQ6O/bmQoQcb/5lQKVVAKV6tB7UZowuMiVwFv5QX2TLDa+/OV0e97vPZB+ +mbztsMPWARLdYI7EMRwfq64miGOMLmct3pWYwX9LoMswYO68UsW8TALeAD53E0BG4KmxjMt9Ep+ M4p6lCSrrPSZ7wJKpZQPkMrmu6TiKeHVfYQEPkAtwGPTssbGaXAXSLDQsoGqQ/xm9zXnnj0FtNF9 DYxeXhoF9xJM73sr6Fy67d/C9KbbvPIbGCUdjbWA3vEfR0kHF+6Dkn6vgX4Mzfl/iJJOs/dBSUdc Q7uwEu3of4RraIt7c42mVlFWuhx5GNjfCHL40TTP0LzE4eJ9xP4XpNutmpEYkuny25X7skwnTDxN Kjm+xm9ZaaBipSgqFEYIOIC75NJI/s8mCr+oR9/g6xWFmbR6VWEWT3vqOLDF5e+Zmd09MOIohsa3 xkgfsOVXq4zMbnjumVpL7JyUNcMS9mwBCfwh+AP8CHbAD39q3/le1P+c238B1AErUH6Dxrz3xj0z PU4cExduoDFRQKzCBbykbIP0qnIC2zO1VmHI9i3w7B7gB+IAAxJ/2vPr9/QfXtj3R/g0/Bje/BLL xS46gb5M7+qJdyfRJ9OXQ92fh9O7COIdtZmyMlMeBuEc6NHv6tVEB5hCeBPotO7xWqC6/eRB/sjb XMfdF2fPZj8pt9cNWYrHRfaGTfVClaPDcDukXqhyXe2PiEagKbr1aqKmg5n750yZMu6zj+pnZtMn gjqOqtpAy+c5SaMcFfCHbLYFtLimrf3Notlb1jfNaayeCYYDydaZRQ11jqHwlIDFrGGtiA4zxpUz m+mgICUdFVnmiopS0qZSTFJwKU4j368zk6QrEyXqikJvSLZFifXVwG8hcLw+a/Lckl/RaEOXfbB3 1pQhzVlf7Jz+KDxVra0A60dmVlx34j5Mc6eubp/5qNqnAMJPly0ck7PS9tm88heAdh7IXuxI+juS 7ELEj9uk+5KG4MhpMI6cRoNbLyl74cgxNokBS2syYHBPM9K3hbl55pz2D8Prh7sPqOg/r230Dw7y D1k6DBZwHT//WImLO8pY+c8/0tNT5s2wnx/vXo71qZiygmuslWhDoMOfoYtcDM9Lily81INPg1RJ jb7BNeN/Ga2m0ybWeuJEx4kTJ5CXdx3xeqqISYekqAuTrhOSrhORTm1g9MAA1EwMzqMxzFvtz9jc V2DHOkb7goXXaaaWf0gA6YTCjxawKxMMOfcuxBnYlch7CBYR6cwPg0jXyb5O3xkwXYh0Xh9fBW+f m93cOPMlumXk7L1rv3ffAhurgOHzmtnO/C3Q0QgWvlvV7Cw9ztPZhe3vzJog9wt2TGr99Im53Gz3 FyUT1y+yx+NMz7jprzTlFiOZQ5RKQhGlkQSXTuPjE6hwuCIDaX+dw+XfDZcOGAS+0RLcyZBBfzMG Ea0bY9NJQuGnLQfV4dE+IetHuu/uXsPbQ7L9DzQC/aWV/moNH3gRzSKA1E1fu9MM//xMRwHzhgms gU0ppB5kdPH69YmgzZ85gC0Xi3awuF+kOglmjD6ZK9ZBE7y1AsigWeeFan7vNvrtGhHVXCujGX8v vDqCQi8i1qlFJDmuxr0bFD/3E6fy89WlQNtOugUeX3fV3xgQE6EAL/C02+Km6DzpoHC1Id99lJHR p9x3wiYoBseoaUytAs3XgubzF1Dr/Hug1mELLcwFuBb3tKaVTfDQmq9MdPQwcImnO3ahQLGJmehe OZcxj6FrkIxPozTMSTaP0mO/zhGm19MKhT8dahjjCg2l/aV0JMarU5mdLlWfaOYec8DwgQbsPne1 DhKfuHHomxUuWZI/WQCS9hQXyPKiagD31KfPj80Fy+d9xfuf/XwsuDJg1Sp4/ejiR0cPZ7IB+0je Ymsh3LVzXaDKOvKdCSMaQGqCnNXnGvd//L564GdH0uzVWEMrkR1T/HL8OqZ7Ix/AMF5PnWlZ89Ov b58ybt+646dGDCsDZt3kgt2v1Lryhk3fz4e7m/fUu/bD999vO97O3ez4GiYf++32r3aMyUQSvhzt 5bn/Pbb5ucbAw7vL6h3prqvD6+fDj387tXzzs58CHRNu+Gr1S+4XJxTesMFr1TUfAPORVwV8DA27 pmsXKErOcawcSbZUjtYvl0jCnC5J711Q24DBwzCC4a32IolZ19wML9ZHPv6730wZt3fjqbf0k9Nf 2b+4Kj+tch/TSq+4q9j0Wt2cAyD5g5fdPDh/+PXtf9/izMLU4F34G9oFnDUc6ND6+SlCY8EYV2ys IjQGOdgShcR7MzpR7LrCws4XUEM6A0SNVyzJXHTH8+OGL2zKzxm4IHde2Zr3Z02UDdq0dM+b5ROa +REZc5eXTjLTpqEpuyfkJ9tr7Zsyhz45b9/UMbefmt84d1+BLjrkxTHZM0p24XOwDZ0reQSRXO/A uOdgrKtP7HNLpodjEuFwQQedQByTp7eFbzeZv1T9/UDz24dUvzOHTxyzbBivqvA7fqa8o5xpK//k VzmpaK7Z6Dyg0FwhAspdMBcCAoKlnGZsT/RzpqtfG5rJs3BkAmnVyvGVU4ufHJEZ3tDSFDg4Nu94 +6pmYEFSOXnm0MRRWZVjnnHvpSvn5o00RX/pThfiBTQvHcz9vl8EPDQHOcLeON1y5m+GQwYRBa/1 LVx1QKiOeEgUPIbYaQawEXAmYJf95efhzcDcfI4ezlphs7uFjr8K93E3f/6eDhdHplW9kPAAXia8 SFblQURHP8mbkUQNFNHwTAP5MKVJGsTox/aFhifxbr/u2UNBdLp9BHuMr7xZmzmU3XWsKTslvLG5 KaR10uTxOeuaG4NWPVJSPGpV02nWeuhCRnLZxfyMWaOeQ3tbUZ/ampM+151JV9Slt2ZnoE8CQjpG be9ANGoFjLwgLR8QJOVUPRHSJT15SzirBq+axs8umfREQYYOcVa99Xj7muazrPXw3KGJI7JmT1qC uTr50Y2IpwK+yjJRx+TIbv9y5DwRLb3lN6UlbU98vKNy9ubnPn55Rl12WvWUtKT4htQMNm/R/N/D 88fasJGJe3tvxdodsHVioT4yq/3er4twFQxlgIdYdRd+HscxyOwgsZJJdMjYSORqp0veEz/PiMVD 4mV7vc2uBEgrW4CsMWz5gbbJ415b88G7qQW7Xl04J29Y6Wvrzrq/5Ra9sG/x3P3w3WNbgfHInm3f bhub/bGI4E2774+WHs2gPbZhvaLdEbc3Lmg63Zg0rnwSm9cEt7tPsNQ96lfZaXgsK9rXdf8fUPSY dYstxxuzkuMGVuVvSEl4zPUa/HRKfdJH60ekWUxVeZuGJtRUvADkzHjzu8MSCkcY9XqtpSCzclOx 87btVHby5KKBA6K18dmpZcvGFQjxiYb+hGtF0oZR9AL9/GTojHW6QCAv8x0jdpf3QtEjHrHw2gtv O6IJGzA1bRjhDupYIW1w5GpTx1+Srdin3ZvFtcIXyt31g00N8nK/0/bhdF05wLjC1D4k4V8ibzgA W5GA3kjpjNiFALkezJfuS9sWtdglMo12aGw4SBEx9TaP+sJaNzGFrsAZJWR72b3E9uIqGpsjMjys yBUeLtOE8MH3NcW2zvcSfVpkj0HrxzKDZGznot819DTRYrENsXs0oa5dpC7GoQ0BD6KpP3Kw/9gf KS8Ihq4HIcTsAeoNZhmj57d25U3m98ybdO8sgKJE77wJsKSfq8lOGZLQ8ocC8LwCsv5l558yRMQY hjRZubPnMpLGlqanjFi8sHD0ruaxcaacIVHhm9GsB5k6RoVm7cyczPdkTvD0hvm9MiedREh6Z06S u17YRxecqMlIOk+3TR772OnU8vhFExOtr2TJss8N0Cc12Xhqa2pi4WtqdsDq+uGp202LEwcVrCx8 cUhkWA2i6SqzjN7IvyhmoyQoDJ/fOxuFZFyPZJrH9490y6ptClii2lHvrKx28S+6hzqd9LSEyGI9 rrIByfQ/JD7E4x9IGR2aCCmr0RgXuDSyUJqR8PNdAyMlBEcMF5170MMEnuIMCAkoeRKaCNfg2LYI wUmymnlecWvV3NW3FNzxreWVTILWzxyihh3N8TTPckFhvtNKt+yxMBzDBJbf4ulCdwp9qrDjG/B9 wEfaiUkm912aVU4ZGvtaIgxggqDKVJBpugBuip4KtxPJo5GKdQSrgqRSnygmPNrp4sKBQhOCLH+A MaQrV4m7K2CtFB0ob8HUi8Kp8iQqJcwJc/ik0U+l2L2E9B0YJUiqMQWkF2YbhuSeNBtZKxZPv05p JRJ7Aljks9V/PChotMSP0IjzqpkOo3lgkcts5nyt/KABtNTXv9AVGuYrc7q0viCa4linK1LJeRGd mEh6hXi0uxeh+j6WQyJw/PfF3vSCq30sjCk2vGsYj2wAc6Yb/d2XBu689RaswgZBsAUSVlxXoiPc DAb+gtU89EJwmPjQixhLLMd9l0CP82SM30b6809+i6dOhlX51ODO1VJeJpX3yj3iswLtqZg9IcnH a1WPyeqNJUbYrgAbMtKYAcoU6zV+i/vzgjfeyKMj3Z8Ds2zLlEx4Gsmp7t4KcK4zc/wQugqOeOsq 3eZOxro6OKpYPxzH19fvraCneGePe1lB9f2s4Mz+jSA4LxrBkXXdjSCa9Yd7DXShd/74QVZQ/VBW sOw+RnBpIs12GsHFuak7YryNIEXfu4V2wkIyyP8eF8P74iLa77646KCs4B0OPjj/2e0OwFEP9zYM LpNVDufg3fXl5ew3WUVzCqeh8dLReIe78p5yNhQNxMn9S11yr7yngEBAnj7SQod6tddjW0kmnxJX fDAibESjARhgi2lFXpAyVBNr0wYxbPOnJaPgiuXVZTvh3XtUeQkIBYO3lY2t2p0+OH8ExquzUxrw HqLAhDOeJhOtUgUgtpa6wsICaAPOeAYElboC+sh44if2SoXwFlPh1YVeqSA3A53dJNK17W8vGx1t OFVqtQRM89EFxlc0ptrrQjUDB6NggP0cRMKt8GqqxFBS0g5L8rLXx6+LjwEOUFAFBm1PHTTEXo80 1Yr26QLadymlJnlONc5zqtV95znF7tQGu1rEPGUY0DJuXDH8fSpDg+DEhRz8+dvJcCuoKGa1P39L 12TOqI6Df3EvxufJRPoaaGdsJBNOMQtIvQxaLNr1iaAQ7mNsGEWZWn7PAi70yOojNVN260kFLjwz NC4jpT7hpayU0dnr+JP/+Ok8/Al+fP2Tc8ik3b4ElCD51h8/I/41Gq/RMx4g46m7dbRSKkwx1oSX HMPQQAkrhsanp/AnDRB+fwn+E55Ggxiu37kAODDom0/Qbm2k7oK5nNpzgx+sWOwKpnwWk7WQ1Xhe OYvJhJ7/vjc4KmxApFn4Mx79GSF85tSGiIEJ0WHGSEtclK7j6IDIgYP1OkNkbJw+DK+iDEUcyb9Y O9pehMU7imZr6qpE7fiqKHPO8Co0nhON5/S6FRC0Qykr7XYroO6GrOylHwoif4UBozMXPp6Zao6Z 9UoKaIVU6qmpOvUyZ4zBl23+01Tn7LL9z86Z0eaGPyLtMINhG8uHVwD12JG/xitKQfHENESBBWuH xSLeB5R63QeE9n0fIPYSEV4re90HeGlIJ4WjBv+xyZGaGDv+1MT8xY1ZacFVauuA4TuOOvOmW4wr co0GGb4MmFny0q4JeeGSbHj8yrwpI3NWJ6xKNBM9eaRgPeCTkmoR55PQjtURPVERPVFhPcG2UIRi 6EtPhC7uGASHAXeamirhLhCeKQ2LjmnvqSdmoFmz2d2A9qWcvkbn96kl5eBvUCdqySf3LHT1g7SE rn49P62o4MUhZ8fmlRS9xb9//Yfz8Gf4p+sXzpsA+P4iCAJpNz76HI+X7q11/WlJuu1DNNC4t2yv 5aeNLeDfN8F731+E38APblz4zPTtv84jLbF8fRHt1VXqFjjDhferJeABWgIesSMFiI6zGSJM+kFD 8GfrkGj0mQs3RlmTjJEDDfG26PCO90wG6xBDeIzein6mR9dKC7K/pDu/Recbax/ocNntlphYnwRL osNlEXLtNgHU8Rc0l/1/pJ15fBPXtfjnzowWS5atfZe1WZZlWQgj72BbLDZglrAYA8aAMWEfEMaA AZNHCSUkIUAgYAwJhBIHCE3zIylZ2l+btIQknzSPJpTHS2lDs6dJm5KEpjTF0vBmRtuMNKPFlM8H 80fjOefcc849997vvQdQjTsBCNfhsCBNc4fQVvD7PftD3xzaCS6Dkd1Kh12umOjI7nHH3NghzA6w s3HX1tH49734ZvKtEOarq35oIsnvK2SFhpyKqtF+rKqqorDSjxXCFWMI5eMnMtJI496MFGZ5FiB+ XCOzhk/e0rxGuwFcAJc6pj/8i/bpj269gjt2gLzXF82cPe1n+LtgKujoWXk+O4Pgj+2bM0kj0a+a v/fqmoW8paEvWsb3PjqqOtQTOgCq+lsmJb1MX0L6QZUhx1tUKXRV+fxYQxXsHenHvPEzIOpx/gyt 4ox1tkKow6Jo2yufPN17iE/2irT5TpP632du2cZr+d3Xbox26CYUfJutRyB7wJWRp7bMCk5Dnt0G KnBPsJtwkPY7L4LqjcjZBP3dkNGfR8VBsbDIXRJz/2w0jjYsSqnddXzMTrw5O126bx/ndXYnSFxN zEq5CtkIQ87w6hGwc3j4gCsbx3WSaxvaWRggj6dSS/8HfCy4egQ/K1BLxapC/Nx+cBmfegR469Uu UJadUtSF6zFip1Hurg29Tl25/qHT1gTDSX11zP48j8epkLkMOc7hLthJHayFfTHjZ9SdJO9DqKhO r+OruHUX7ukDU5RFhFZTs9OKOsrbjLSH9tgmO6fCGLmvcemOXTCD/x1RlxRQ+xq5OTm5arbqRHqR 3Bl8M1qhRHr/ONDonFUYVs/Bn3M7tBlIt/brDv8Ul+NfrZrbs+aWC//fzSt29wI+L3j78ZUr0Q/a 6rurN/4u9E/qus6nVz50/zv4AdCC+lt/uhaVagMhVQFhYbtfMRwtKECLI92qaORDXCZ6nQMld/BJ khLdYe1adPDnHa0NI4/h33fAO0PwamChbrYs+8h1B0qUG73v0r0tjGsyI4A5ek3mErw0pSY7CE08 RBYr95saUI9HoVajVQqbdRFmsylQN6mTQh9raxXu1xOulRiqSXlsfXikVkYXHiRZ095hqxf86Pml bfjg4Unk3Rj8wtytkbsx+OurFj0+dcyEhhX/XfltksqfU1dvDuNf1EscaxKu3ozrnjeZunoD57Gr jlCaP0NoTtZbheQ9w0KRkZ+i6pK+GfWuhP45yTrxP3vjje7Q5+Av1H0b/M9vJ7vZ4GDkmk7O4CDc W/uP41tDm9B32WWFoefu2Pm+eBTkcUfBm6xRUIWGQ5rnLAxXWjAtCuA8Fygh5cJvu4CGFJQZBaQo +Jf4BUIUd+jm7wACnJ9eIfdgeiJSRaLAwhUFUZkUaaIgScqUQQAHmWJvDKQLAnZFYKgzokckBrxZ x4AiqxhI1rM3cj0MD4avh+EXYtfD8Avx62GIJHGgMo0Bds0RqDWieSwGlEOMgWSd4M8uXiRj4Ho9 qqmowf+M+IoJ4Vfu3orfLo56GXsQcPgbGnsvzEDIOgpqgWr9doNSZBPacrswpXEtBuu6MJsShpU2 xFE2MYCVOeoCmCO8qxW5V+q+GAG5yXdI6Z2hyhM7QxEDxvXoFi/yhmD01m/kaKwIfmPSt8AsX57L X/l879hqIGw/5S2eN+ABO/5rxfmT/YvOcTzMlXPrfy5tvu++zZf+51bsX8i1y/j3+Ie7dnrajjbX d17zSkWlAVfh8ccRrX330VPoNq6nyMYxf0/4X3TrkaebFdAUsrMkMEqU+UrxOgwxrsOUiFSKKJGC kjEBrKSgMoAVMCx3MXJXUxZ/aC25YZQiS4shgYX7D7ZOWTH7RwfnqVq65m5ZWVc9rqbtx7VZWIq3 AUf3bV370uWezv6d6KnQYfxUf8ecA6daJyC+7IyE0DzMB02ChvmNYmkXpiUWyWIJ0GqBRIwai/0B rNhYHsCMNPOEX7dn4i+MW5Nc79ZxGYZXt8bTF6ivbBq16CclK8ffOD1/xqr2fT0zJuKfZONEb5uf WzT7wOk5k563/23b2p9fXr94bB38THZWYfWcfAVigA28dZhEsQ4zSKRSiSG950TbTZWztJvKNtZ4 1tVzDh2aO23JzO19c6Y/sGJU5cRRC7bOzCbEeD2Dbb17t61/+fK6hQ+BW6HDT8xv3X96zsR+nmOo FiJvl1VB90A+v4Un6sLMoAuTG7ownsAsl5sFPNRSOi6AlVqqA5iF6T0UxsjmOPF+VNnGFq8t9NZk /5Kny1fM+uanHbNWz997YkFLd87YmjkrGqoF17NxI+ip2RPOFH6wLfDSuxsX9655rmbXuJH3NHUh u4YaXwpizTiWykBITp6kC+Pnyckgy5PL88SIkrKPsjQQuY8Z8SMZNf9EwixyESF8XcE3ImvvgaXm hvuuXOk6c+ajspez8Zn2dv7Oo20hH3yp7cSfweYss3DcAjLIBY0m91NAjhTJ7cakiEyGSBE5FT7y kgD1QhhNd1rqpXUYyDbdtu3qW1lf1b3ngY1dQJNVjg19c6qxblHoLOx89mToXXQALB1qjCDUC5hV 5CkUIoRLqWuAAiE13EJLIHzFPfLQRSRtUBdmsnV/tLZrR19zFjqi/OA1xAlqDh0CTwzVr8XEmnsk SXShouFCcS4i0A4PYNrcwkDkqJBq0Cgl+7rQnp3P2nm78M+BZ9sPh7q6QPffsonj2/g7eC44ewK/ hQ4EPwYD8MdD9l+EmiN1fgmCwtLiACZFjQEMDSsZG7ash6y7Jhun7BhsJxyxd8g6WKBqaBpU6TdZ EAHQ5pvliGEdloOYiT9WT2MA81hrAtSTUvG3AkbIfFQTuuFlsUZayW20hhac8LIN+2bWlOVu3Ley 1te1q8FfVRzYvq0zAPOzceITfafKPY1ErC4OPUfE6ojSptBl4udA6DLihEcO1a/D2WoYka1yZQiZ sNYRCYslW8UacNEsdDf5qn7X4VV1RL76cU8XKMvSDI31nZQJhqQ6LV/lR+Z0p1+jFXZhEFkRQloo aSqPdehKOGtI7L6Vbbij0FMLW7D2vU8vmEn83TWyYtzIzvDf2RjkhW1dL7y38d5tXeff27C4vaP1 wDNzJnW2Hjw9uxneebf1YJXfQq4kiNWDuItaSuQrEUSZz1kQSi8yHUQZbc+luau1xKp5h8NriQMz u7raelbW1zTVtD1Qn42Vgjse2xogVxL78XvRpq/xU0c65h4amD0B9gw1cnIgK1RD0tGQkC/iqYcF MLXIFqDQBipTXrxIwZzUVKCqzHoqkOX8cXHX6uVZxcY57HvchTivfAq7h6oVWb3NI6ktpaaEKNx0 mpISjQ4prZ4WwKqpuGAWLxxgKUe/j6yN4Fjl2T/XW+wqXDT6YPXwlul7b05ZXn56pa+4xIk1PFrh mT5l+18+yGaevGnf47BU+gv0ujzryPL2df761919wxzV480FWpllZNnsJaOqYdeQ551Y9ZsjEOR2 YaiMSClAJpBBkEzAUf3GO4NRey8x6pXq+pX1PAtdv37f2Erh6IlXT5zoymbGnYb/tQ1H94jahJdh aRuAwMDdVUpEDSiA12FiRED8yU0olmjv89D6gWXtHZPx23vx2717TFblcPmeP2cTKTuC7yMu3NGx 9//XgKvwnKHmSUFk/izzm2C+DCUWzYK8dRhfJhDI+FwV/4hw2DDPg/kCJOuxngp6t/Xg03p6QC8Q timNNqF8lKn99WxGfdtgF+jFd6L7QpOBo66zx3ClHb+GSrP0fx7N/8m3mxug2dBwf4FFsQ5Tmddh kHIdZlFBkMqCFJdPDmDl1EYLc/OOfteP4yF5q4X6R7Zmgok68lr75Knj1vZPGdOz/By+ZsOHT0wb 2zhm3w8gD9gXzT4IZ2Ox1pmNOwPj62RCZcvENadaJ6FefKW/qm21x42LcNdfe/w1CGcvgXSRo4PK oIlE9iiApaqcbkyt4skk6zCdTEX80RfVB7Ai/YgApk8sW93UyWbkYJk8VnbGj5UrFYpsSzO+OQCr 7eNuPPZ1YaMaXX7xi0a7QjP9C/xMNmYaM3gYfhm0bLgaaoBfW/4Z/mxoIroiNOOLNZMAAp8HR4ac YcMrzEK/EhbwuzFUgLIsMMlyjTRJ9OQ527xyDt/Ti+8HP8tGYffSwfdR11JwbsiaqSAP1EgSTYhI zt+AqXJF8txcuQhR22oDmI2qL5jThix8bxPQb22SB7lZjzjvBfwg2L4Xvym16lX4dzvBdvzo7psC Vb7IlXsLv5yNGVpCl0MnwCu6iuEWvBluh334ZrFdJxmjBjvAkPeU8qAiqJ6kSMW+PF4+YvAFMEO+ MxB5afBNaWTZFjvLDp9mZ2uEN/GuXnzzQ0DBU+YJiyRAiv86KwcIdeAy8A18AreKHNp8vxZcz9YZ 4hqLIBuhcZFfASEaX1VFYVFdXVFhRZWPL9aI461EvF4pVWSqYisSrik02kRFxSevt1KKE8mhqEIm tVrQ43MemVRsO7G4mF3dlids/fOLrE8txL++p6nrxXv5okNS/HX8BiI8d9TtqP+RTYP8L2f3FNTz hKd4tlcg933ZO66ub4Y3cAyMA0a63+dChcRao5iIaIlI53a6KnxFRb4Kl9PNl+gkTGWZ10gIpbkm AwWR/qpoKw4Bsm3q1vmV5U3VM9dP3s6u54Mne0yzThxZOGdF6wMHFyDw0dkz9zzd2niYZ+bs3vPK oGNH/wO9Fz7ZtPgAo+uNDyrw5xe6nL4yo7HM53QV8ukNb1K08AHxp+fUPovCSd8x5upvAy+zdrT0 /GJp27rFAyBvzGH7wVVVZQ1V8x+yc7e1CX79wLhRD256/cOeZUDgOt/RcmCgZeI5YlSGETq8Rx8V sQTRlZUTOhQVEfqUl3GMiowmKXdLG8bBgMqHnmhev6i2elzVjK1zOXSbdLLt8JG2mdjcnUfmHEdg /FeH58569ETLWKSBe1RwZM/2njc+vG/ZIz2x7jwfQELIQswcDr+CB3KqytZjw3xVRUVVvmFojion rpA7HFLWyLkvpyq0Z/PIhiyRgULfx9tyG6pbF1V63+NQ6P6exYfPr5y/afkzQDSrb9iR9Q2VSMem MbUTGpB8ztFS2q9vXrJ7y6sfbVp203Oq7Z77Gd7mJjOF3VxUYDUXuF16vctdYLYyPY5sJJTK68h9 d7vKF+43RO67c3ubddr4W2fPDly92l1dmqKz1VHRt4d6Q3b4eu/u+4TM3lsuYtWcZ9W7Cpw6nbPA pWd0g0ohJhnV5E65ivgRCes7xNf+Qn75L5QUn16/f+fO+69/uvGpp5Zt2XF6sn/xk/elkPGVQTtc f+zJ0EW4a+u42lP0rKSBDESlofdLCnQbMH2ByVSgR+JiulPYkqy8CFNydgabd+pU7quvpug4VRE8 gz57nmExO2Uxk0WvMxp1eospU4sB6kEnn6xK4QOcA/rMa/jZgYGdf3sJv5RCKh/ehSgHHUC3H2+F FQzpDJD0Rb1Or6OEirz5msI6qSyTYrAGBu2Mr1ZDpX5ViVU/otpZUDlcp68mG7lV61GaaWQ+yqNl vhQmQmhORQV93LvCuZhL3IePn5yzbsNPimvLfb0D4+s6jnXl11VN6VufwobXg2fh+id/Qvhb/ZTS IvJn4L/G1Z6dMazkLEeE6JxO3V1FCJf0M48P3HvfjlOT/ItP96aTmIoQSlJ6hOQTK70qyOAXQ1Kh cXjx8GKpMfbkfWRSSGS1uZwiYR8VhVZWehsq21dUkX9zFWE/X96+4d4nXlw2b+O96LQFMx89M2ti eBqDd3Oqc/Phzb/5YMuKh7f89k9bVnDVIE63q6LIR1RHLrfzLmsQGbMGuac3XIOsm8pRg/z4+Mnp fY8vmE2UIE+0oXlPtM3a+1Rr41FUzhkV9YNbwNk9P97y+kebOg8xfMgKaf1ik96o1Rr1JnpUpIhO m6Ai7EGcyaL8I+z4wIr3UrjMzb9dDZ4Fn33F9OjRZEU0zOUe3aDXN4x2u4ZlXhElbC+ScIramry5 yD1jTW668+SsxobqHzdttJteOjT8yGQgfWHu+LF1D09YYTV6Sxp3OVPoY74ytWHRmppyq9xkMVRt e6zqDy1j12C1PrtcazVU+0z63VDybFxsdBssDrvRoNUajHaHJavZWCAjp2JyJ7CK2gn0pegzWThw /Pjf5k4Remd0f/hhiux50HEH6g3d/Chni3AH+LaXkjhcF2kgB9lHSWcvNNvt5kLaLJe6CybVx9Ve 5CSfSeA0/ZaBHqlWI1ZWi3peAPlv8j/gNPNv8OaqBW3FN5zgleBZiFa3kSt+J2T156NCoCyyFVqt hTaE3lIxeihFNVRUa1I0VPQprAofehJ/bqrHovLLZ3DYtPt9fNuZbtC/5iX4MlAdO/i9H/4Pp2Ff HawBm/Fd9HMlEbUPXEesWCWQSClWWDylnlKlRRnPjhfDVSa9sSX1Tyvn9hYSuzzhrKDgbSvi+fyx 2rJp47ddev/xexrx729fYVdnPXjlj12LWifvuK+xHl+CfuUrmb3Y59k1trbzGu8Mp1p9gzXL2/q2 T2uS5yruaVoMvBEff4/y8XKyy6XPXeh1Em5jctrtTlMhc+JNM+sCKwKTzkO4D9nkEiHGTeEjx4+v ogoEYUwTWgtLpAm/8WqrRKuwWnNfwb9+DNWax1149x3vCC16LIXr7wjNwS8UNW7bWgqfGFwAPwtW LwmGJsCvnPjtrQ2hGYzYNZORUKA36nU6vTHTSLBSfTqtnDHwx2An6D4PelKIuPrRwbfRKmYeKYUs /vwSq85sdRrMZoPTmmjglMEpoAIT+Ki3yUjjctd/n/zqkwqH9PpbYCXe+2ucL8/NQV23f4dvTiFv H76zvc4E7gudCz0EnhObNRL+BHwGvBmK5ZVw1UrmFbPVaDYbrRnnFcAXOMm61SfjlPhfv7gDWSQe HH8T7D8XETOp1SlpVtxRr20B10M1OCEYkVM23NkmeITfR8z3UogIR78hR8BD12GAlytYj/FyebkS qTyASSWyQLjZR+zc2538hqhVRt5okqELPw89e2v1HvmJ7cEtAs0PX43j7+OtGnylsxN5Y1zVypFz gfuHr/hX/tPF30eXwEJUHMWQ26+XKroxtKAbk1pQ1CJFrIVFAazQ6ojhCZEd8oSbBrG3Rx20NzQi EsFHLVj7rhOLZjdUHDw0eawHnhvyLAbSfaVFY2vbrzpCSyNSolUD0xvbW3asntO8ffu8afOWtv/1 620T6pqXVA+/BW+PCR2X2Q15IR9U6bdpZeswi7kbg13rMK3S4oZht0Wp5ZV6ywKYt3Q485Qwur9f Gd/gR2Ovz0SLvgSOOqbJbCA+3tHSNGoZEK5f3Id/tqireMKozq7Rtfj1ztZHJ4xqrJn7cl1odVSj XV/MvadnfXODVlT975MdMz4uW+KyNY9ecnt508gliyvcP4Nr42OBxvQi32nUQkbI5y9AlULCHZRS kawL4ytFIiUfUWn1AUyr0gUwFeMYR8ZyXzPyfmPMN15+6aUALgK/rUBgIC9vwH8InY+6yPLgpQ78 K6BpR6qCl8D7vhltjk0bcDm6iE1CA+UtpQlcdBeDiy4uCWDFDtddcdExwyfyzvOfZvDOg29E1EA+ jsDMw+aSMPOfhknFbjrMPIJNG5IusBJVBxenbLUT3l9gGxKnHNUAmcvOHwejkvM6cfTRCFz8AHoq 1B+Bi2ePRyAW3yd3A+zs3LDZGsDMRku23HBEUF59wHNobR3FA7tWTfhHmAfeOKN5sDVqY1bW9940 lmXleNNZNhXHGxPYGeFzW35E53MHX4sZdrCtd8+29S+/173wIfCvUH8UvkW/j4kcl1hN2dXJzdXa iVRotxQOhauNSTwn9NaUhqVPly9v+TbGy64Tja2eu9xfLQi1RO3MBcOOYfEHBbXvwcW5aohsoVFq s+BcY7IKafzq4CtRmzLh1HK2GUVGvf6UzJ2qNETmkqsz5E6j4TMuzpOGTkal6Ah9e6qxrpNkRX92 MvR7dABUsnkhyYGKofwIByqJcKBiSQATC3O5OdBY1qzu2tEX/G00p8fhzdks40B+RxHmMmUUl5lP zN35udIELvMig8uMGXs+jbccfDLqB5+HYcon8X+hA8FPwFPw82z2DmsZ5iQFOQFMgAqTOMmYSrXd wediVqTgxkruqoCdW0wsDIbALUaze5RHfJTiEf1RHhHvjdo8FWsIbnF7XzJHmOh96TjCqP+N2tUf 5gM3dYXO0MRisH80UeLelx/JKIlUX2IiyZTqi40hF60XVETl40DxzrQ2w34WSaPZmpOy40jXmVF2 MVPOjtJz+1to9Fzwrag/wgw07u/40xE0DnzCEm85kIQY6yj1JsknCmVRHif1Fgu0CM0WHBc1VQxV A19wVppJFBprfZk1hRYTyrHScyBMl405WFXWMn3vP6csLz+zopyky/xhuuzDwf5oVsgEHQOfscVG bK5gpcJY54qUVFjMIwGN9gp+Hh3PJJRrIWfeZFJaCamTndKKWW8yfnsP/p/evUaryivfM3g0OrIn o2jVL2vBVcA25wsi2YKdmmKfr7ioqZgtojTURrAF5MxTGuxC+Shje6gqapUWNtQJoeUyHm28SIqJ 9EEOisntCWDu4tK7oJhiqfjRdHRScHdMg/ToUT/LSEcrwgJYrsvpxvQ6niJ/HWZS6Ig/SRkmFVVE 44qYrsB3BmD1ZPP3j93UWV1CNbz8za/V9iKxwlN3Y1BFsz/832DRndkhF3x14poHdfiToXJiNKqa 1vc69r0NvwPGsMVOuJJg8D5JhUQi7xP10P9HcTy4PSZChNFhq+fC73qy0Dc6QwDTqfVZ0DfRz1NU zR78O4qquUlSNUd23xQqpTkuyb8Gm2JCpSBmWC2SB8nJqtkvFStJGkauJCIlX5GOhokK9VaEcpHz VGHKZbAsLkmMYMkp0uY36MB1ugQwrfKREt/Pl+ZKcoUiHk8kzJWQD+rG9rdJ0yiIDwLCc4iPy8iN CvsG8jMoumfH84b+pTgOH/2W30f8cnRh9aMVY4Ltu3Yxv2CDDH6JXEWsA4hVgErO+P2R366Jb4eg AvJKPP0pPT71PRg9Y/ttR7l3hHcL/kMPogkdm4E/U1G2aemxZ1bMJ7+Pvub4e82Ilnsmjl372Xe9 uw9/sG/OtGUn507qnM2QxkNkSqWAJ+NJN2ImrZ5XUsLTa00MoQjLX0oSjNzYtURXqvLwDq6jIkFG 6ET16YXVIyY39rR2AnljbdurtT9ZCKovrO3Ev/l+49JjfcvmkaLycsrPVpZNX1nt230Tqys/V4EP ru08EqwTV356YFZz8+jEqFGTe7Q8oSJfDWT5QCIB+TJUKI5vm1N7iPGNc1gFqCED1G4meeTgxQ99 WTFBKgpSvoq2XcdHwvCJ8+fhCeCljpN3IC/8BjGASPDVXvxjYN5B/76I8FLyPXUlJEbyzHarVO5y yaVWu5kvzhOznKfFCSZAMyA7rTR7D0UrBadQxvOSdJLDFqWTFgtIOukCfgORnjvidtRtt2qRBwnh l0c5pBEkh3RohnftMTAWmBL3BK2RM0CpRqGykitQq0qh4Uuk6c4Aw6ZLZI5WTb2vPcIchUSUtLcY jBF840iYMepHbxCWhKI0Uc/i/QzvI3tQ5EtVCrNJKDSZFSopH2GenVFel4IcCsfelzRMSDK230Zh QpULHiykAmFCGAj6S88ywCeBoP1Pk0AQm33EEkRqshByyOWETBYTh33oRFDEPgn0zymK/mmsnLE1 qKEkvHKyrb8/CvvAN/Bf9Udgn3zSPDi8Z3vPxY+2klgPTS4hIZk9wvXYTesxvdkul9vNejQnl5vr oQTiYHiuxhiewdOkWDx4YxjZWXYWiFoOefs31FdFkB347R++Qrrs1zctebj313E4hzF6GvI8MF8s F0nEIo2Kz1dpRGIJcwTDu/nhUUwmccKj99OZjXHshkwHt0Tf9MUBG/oXVSQ9IOGrRAoeTyFS8Rl5 KpabE0mBcDL6eGAgTs70UV5ph+uOnwi9Aa/d2lhzKnkFrPdLRLwNGF+UkyPiIwidkYl+iORhqF+P XA/DL6TDHQieRn92nmmrfErynFw+j3waPTeHXfI400L9Up6GBrCQv3kzHVWRM78ggKQv8nkRk4RZ laiUMQmjejP/y0KSN1FL+AWFCpHNyOMXklNfIR9F2HmTRCOzsiXUJ8EtiiQ5SSdJ6imShBzmmtTM CMuo8xQKXpajfpVOg8S+yuQ+4utrBRFvYe5DYVQalVJFGu6DCrZUjEfwMmX6R84va99w7+NsSEcT IdPUhze/FoY3rvUu58zcCo3KKjeb5VaVRpFF5maSGqvu2doeITUimfsmg8zQPN42a9/J1sajCDEF 8k4O9oKze3duufBxz+I+xphISAYjhy9EUSE/h+4pkeGI8RbhGH/5Y+wYCVeQIzD1q6vBZ0iMglmH EDOBXqXxuPl8t0ej0rPPBNYMiYnwVy813YFIPqImzEf0eY9OifARu8eTfISr6QEnFVe9iSTE5Znj VmO15TYGCZGQ+ZRCjSBXli8UoETpni/L5cx8LNRDOCIHSMRhztQI4kDa5tsIzCDsDcMMjK/KyFNH Xr5UnJ8vltLyUbwqpZMLYRMEBzbKNBqxqorEFPLeoj5Si0+smj+v+B/F4BfBZxJqK0WERxDL86QS iTQPoRdWCTxCpKyisQdWpV8epFYlyC0SNVgH+gMvwWeA8jiJGnxAfPtmBCqgn1EpKC4syhRodFqd VqnJiCmgJEjmB3QJ/EConcpGt0leoLN18o6tTfX4vUxeYHFYtiQygF6rEFVngSbPIONJ8nJkEoks J4+ZIun5MUwBIDEGIEoBIJFszPsj/uWbkw1qeNFv8M/7YZ3KYs773ZV3RwzXwU9Rg3QzNBb/fKYA rIFfGqyBXwc9kzZvHhGqgC89cxF/KFTH9Axyt1Ys4gv5PB5fyOYZkZP88Kfbosf21HfCB/T036Yl z+fVEp5YohCIxQKFJFHNmLsln8WHv7Dk1x9XOGTX3wKr8N5f4QKZRIi6br+Dbw5/keuInTlfkr4u lgjFYqGE1dfjp+nhb/Ywjs7DH2IckhO/NXBns+AA/wkir1qgcrZTcovGHcA0FhtzL5X1lJza3g33 WifSDtV5m0elJ7LXoo/ySXImop2iw4/0NBP/67n9z/BP9J+DzrW1VTXVa9FrXTVVVTXM0/Wy5vFb bv9zy/hm4idPQvwcR/w/4//F2uoamkakPhNYTt3L3Q0BzF1eGcDKsz51z1DDhFP5UngO41Qe2ZRG 65Sn9bvSG4FmBTfUAM1McY7fUNkcwCobRgewhrs8x8/YNmzn/HWLusbU0M75RyH/lc5G8fP/mlus 5//+9IZCY3YiuYBiaBQHF1Bs9gUwM3XqngEXUEFxAZlGQ5wbQChsAHkzXUwk4QQLrBROsCwDz4hr THIG1dDkVJxBtXdsAPNW1waw6rvgDDJ1jDQcAng/jV3S8QnV2fgDeV5TBjVycQtlxaMIXygjvKJs CNxChhbh4hrgdJZIwTvws8oeBsgLjWUlIbxFhFcUUYc0WZEQGarOTkr0TG8Gy9N5AStBsXKIY89G VqQd+5RkRaYGYCcvwOW0Q89FZNzOKjuQrIYPGs/JavhK6gNYia8igPmyZzUytQHJcpBvnzFZjjE1 c1b4qwXI0nSewMV4TMgqBhSQExrJRX84C0YEsAKnK4A5M6Y/MtWeToeA36UbdyY1UptNpSSDHFBN Mk3iMA4PYEaHM4Ey46JJMk1qNNoEOZ9Oq2QKZVQ2kUzuAZE5jKRTDHBRmE4xyIsChDObApiBi07J dO6u7tpxCP5DukolTrXMz8rzxFQMUrxLiVBsRgRqogBRUwhaCt4lU/ei8zDg+XSxlMTJvJyNhyHU XQmSn9HAecRSIo86CE/gZzI1em03/Ju0fkNxNxn4SuJ6gZXHSVoyDIHHybQK4uB10D3pvCwlxxPM Ph8k8T1J+SAd35NpRqDxP8gvM1CTyQVloBotI+RH5rUEYihpOsuYGMrUa7mIItiRTuMUpFFTVrpH 6xouBomrsMmQQcp0uNkZJfhaupjmZJe+zCqr5lBWCFNNJp6yOIApTeYAZuKgmjJNp3KKeloGt6Yb zjgN9fUQVvKJnBT7+j17TipTNR0rPfvbhhW77IvGhF/ponNU+yo80ydv/xCcTTebZMRX/S2bnBWr 0ti4K/YqLTV3lWlc07ks+N/pfDiJ11oyhIqAQXKZE4oCDpIr0/GlSK/bW8Kk117w03TezCTAsltj CCIzDSsbxlF9crJhmY5XnB0Lv6RlFyhGGduRielGjp0py2Dy4dF8tIDy0ns4WLORI5oC2IiRdQFs 5JBZs0zLjBiLdngqx0tZx9JaJD2jdjwr746uutnotaS5KTt6LUOzpKDbgDMDD0lDvWWw8ERo0UGu XOg0XPLCJZGGyzTKw7QcWpFWpQhFl92KWQW5oDoWvs5lKQ9gFpc7gLky5esyVejn+GOJ/N0j3wlV +aJiyS0wO62aKbi8rMYsD7JBlRSv58nj2RCdJ4DpbIUBzJaS18tUySSeD4xNr1ky55eBRjAtZ1kg q19qMZqMWr1KpdcaTTyFSEE7aafyMYsKDCKQ/2DPRELCjbe/I39O7EEgOhz4RPP4zbe/29LU3Ny0 hZe/eXwz/tc4KkiXZQTJPdgcKo3Xq1E5bAmScMiRmh1MlAxAZ2wXFnJhhEmShk4yoMK+6/vmTFtK QoWtEEPyOqjYr9KorCrLRsxTXKKqrVWVFHsSFAhzhWxKKDLmDPkPbmym6xNkIQ47QBWDOEzW6u++ BP4wuLazn+QPPzkwq3niGCghTxVR/KHBbi4CVjMwmYDZihrkhhT8IavDxHnE4XjfX0keEZ5D16Z5 I9J6HR8Fw0/SycR3SH++uZn05828PMKf8c+Dr8U5xfgJTwFUS3GKBYjK6yuz2GpqbJYyn5dfoCpI zSmm8CoObvGRySS3CHcwpQdudoLxGxrBuDdpLCZx84z009syioqxiDROu6PMa7N5yxx2J9+isaSj YliHIgXfiJgStLrJRTp+nxTXnzK5x3h8eCELkWUcdq9Hq/V4yVc0mKHBFdwpSEhmJBC+8xkbFFk1 /8FClgBwsyKSLBYXWxCNZzghsc1GSD/cw2FxBiHJbnFOYhIuSVDkXS52UpVs8ASSMiq/kLwDHSYp jT7PeqzE67PZfN4S1KgwcpOUbIJzkpXzxA01rR2VXvBLZkZC8DhjmTOLYiyjz6LB7xKCxxUgfgZb 2IhL+qqPGAOzwaY3GfROh1rtcOoNpkTfibygwOo/yQxmeEaY2BOT99T0pjiOmTxXXUt8/SwunYNk 501qh95OfETvUCfke86ZM5Hci4sUNiW4Tn/0LFmkTxNATvo6mbyfZPTn6VUbMDX59oUaoQvl5haJ JDsTZxf4WhjyTA6gDSTy+SLDGmbKGjqjWqXVqtRGXabWiDOgiZ9HFTQcNFmGdiYcCjOsIH9JrVKr IiJEXjLj0JxNa3arM75RTtTA6iKTeli5XT+iVKUuJwuocjXKUJvxbhnbzJ+OKw0LF3fXm1yEaVhg cp6MCmxMzZuy+LGKqD7uyo+ZsoLLFIx6enLDvad7uQSkoakIbR/XTuQvkky1C/WlhaWFdr09DZnK JmEiqQpWVHobKuaTf1fCnyaM+oPczOrkJGcoSyRYWedqu9NRZvN6bWUOp/0u5mpOopU5VxMGv8HB tr6TpMBOknSNvDbWx/AGE6T35+rUWqVSq9YxvZnDEWLsa2IkIT+PvDGWHE1lX5Fvi336VWIdTdQJ JQ5n3Ui1emSd01GSaZ2QKSebVDW8nQaZLWl8wMmSexakB2iT5rFCrVNjtJq1GqVSozVbjVnMYyxE bVLWOsF4PyzZ4leS3g2Ly2cley2rzBbyeSILY8bgXv/R2dsks/6QgOEmi2PEm0ko92tX9JUw+orD TlG5BiC3FVhMJksBQl9uJFK57LNKAqULVyaY62b4abDDNF73k8TyBL8ao3fj6wxyNGvC9K5TrChw FbuKnQXOjOhdtgkgPc2LBJii34o8A3Y/C9a7gk2FBMg3oTIv9iuGOQvcVpWpQGc1may6gsQpLMX8 lYr75e9K2L/4A/5VFAH+4jADAT5JOEiS4GmAYLoWBtJ/9WotsWJTazPz3wghnFRztEZhYRaJYm97 xb9cDNn80iKTymCyawwGjd2UbDzOAEqmiZOkWcQFFrNIl+IlL3qVRka6waQ1GLSmDCM9Th4nydfN gJDZhEp4t2sl5BFM4sNElOdDpSSPKYT8mFAoQ/haBwILi1WIxI/ZdAgsM/sxmZBsa+vzuUeMaND4 ZGRLX0JGMuEQ1nNYyf4IsAAw+iQQy3SFwhfZLuYLwNgFvcB9Hpi3teFvA1tDUYF2mBptfWG/XWlG uz59RCzNFxjL93+4ATWLZHki2IRLeVdvu8G3y8HyP/8ev7Q+WI/c/GET3hu0864GHdM2YcNBJ3L9 thv5EOwYff9qP6nTC4ROUwmdcqn39Mr8xjyRH8vL0/0fb88CEFWV9j33NTAzDPNgGJTHDAwzwzAO r2F4DY/hKYjyChWREBAR4eoEjBAhS2ZFZmaWmqm5Zm65LLXYQ8vMMrUyl1wrK1PXzHV7bLmuVkvI XP9z7szAoFjtVj86cOd1zvc+3/ed7zsXM6qEXjHBGMQoMhTDJ+mszCQPjExujGSho7ZCovbI+/8o Zs+BwIPzyuwNf1jb07MKWoJCayOp3/MIh9c/VgskIl6wad05F140fnvjS++01DvqqGbH7+eW3b25 NGd4vSdmRXcsMl2PGY514/+kuzhuadA9rSfzSYlEeRsj8fHDCR7dwmgCeVg0xEYRh4LJOC5Z7SyG QinrRGfGXqf2c1YOuLarEhJl+HvfNX1PQeM1KUKy6Z6NqQEkXvPSOrFG7iUTCdfReLkjDT9YPvIV +O7UI8mOEZz8C7UkOZoVEP4sP36zakZSJPge9fmvwPx4L5F5UKojsEKsGLsFq7DGRUYWxsQUKpWF QiG/MEA1gwkI4BfSmfwcCx48g4mLwnm3FBcnTCsqI/l8sbaIEQsQTxTIU3dxBt1J2SBx3jva+R8y SeosgHDWwyJ/jTskbIKKWLkznoYPCSqXcJXFeVaNEHJIIPjYojt/b0K8uElIaZOicj/KS5lf3BoW nPWgFITOz17V1p6P5wTG6qPuIVKbH7aJfVSRWrXUljZFG+5rW9pGbl9KpAHvW0p2ses/byssbYxU A81Dc4sC5fzkLUnRH7zOC4g9cOw0fmZbdWzkgQPs5w4MP9YbG5mZVu0w4IN/5/6S2MhB9IMRIArz o0V0MJRnP+gPGK2TZDIJj0dLCD+A03yJopiR8LyVxYw3Ry4oxBkmF4mc+zOho5WR4gkqI2lRN3uq a8mB125bcGfzHw7ctnhgZXFBXUnHjhY6eFhMXRoWb92z/eEvAX/tHS/iD4x881536/6THbVvQykE sZiR3gshQyfqRFoV3gCowyNAOO0bAO0n348KLmYEFA/LgLyDbMzIQGCZuIKGxNG6nTFWjOcJl6zf GTEtI68s1sibuf1Id9Ck5Pszu4IUiXkppqAuamU3aeyrizdaEqoGORoevScm8iOHET9yX4zemlzt MJIYuIRQgPK4j93LyaPzPJgcLB/Lt0b6+Ij10MyrcsR0Ct9XlBZPBBUxBh3By1eFljLR2VMJFV/g V8QIXHJoiHOLYYYJYWJykthVniF2l2eMLzpGdW0/LXjcx4yWjrty08rzbmtPaGlJq5lu1ENEmnBV G5gZGKOPvnu8tBmQtBF7l5LG9c9uuv8K+81Dtz/j+IFqY8+xsYd77K+fsdc4pAcPEmk/LWaIlxi5 ncDoE1ztnvB5GucR0IBw3CK4TV8CbElI0+OYKd1An3AM4ib0gN87ha+k1cT9XIWP8HnSTxjk/p5H EIgIRF33nFbrw+MsWlVkuClFoxp5OZJ7pteYkrWhBH/0DX14bCq6jkfXGgwj8e5r56gVtGH0DKwg qw8fxwkhj1zK+PIETrgNcZJkN/SESa52/yUs2gVq8dGj+LCuXi05epQ2XO0ke4d7jtDTXBcYoMqu qXjb6e8wCea1y1uCcdENCTVODEWWF+48R1PD287+Z34ps/CrVPbEssUP9QCK3v3DN2+wLPvJJ++e zvqB/RTIQfLVU59gGMBqrqnwAfeIgBtRdsNd32vSgH7ZklW/Y7+H5gMNTe/O+MHxKfsNe+A/Z05m wcEBDrSfvAvHU1xr4n0NdsPxfHdjXj6k3XmYJkSYwnXaUBWUKp00MSFUpfCX8Z4Z/voge409efLY qayha2eBP0gePnVqA+DPL1vc8HU6iLiDWbOMdSA4FWQN72u6nxuXG9ULw6LjuLVQqvAPVUGzqsCd x4kSc4YgQATQnjx2OuMH9iwE8/DVU6fofhdZLOxHXYvXdAMKjosvxLyoP9N6uBIHWX2FvFrG21tI ApKqZUgfqFxx4kNOF4Lbtgp1NjaRt4PEkROgpPdI8GdP0/rhht5e8uLs3NUFrWhEPhzxDBwxBEbF IjKolgkJgWugqBaugXBA93ierUUkgQaXAvculIrAA+IfWfbnT5bby/IPsYfvIzQjxkdA7b60uOqi NvZyFrnmRHNlB9O/vmXBNsjW3g6QBGKeqC2tuWtaKnsIA2Do2kXqIoQBVbr6h6trmYDw6OjwAAKX Ta5lZLixlsE9KwogPNIbCwqgSugSR2Ni9bjuHnzSnWDumeUtVSUP7L615PHe9wZ7WrK3LABgY2VJ 66I9Hc2v18+sKWn7bgb5LTDbF27bWHOLkqdvrX/wZDdzS+GjyV/WzLzrydkl91TOuKs7P+0LpOcv Qbp9BWHmY1IsxCoW8X0hD6RetQyQSvk0pB2kHKrQubHBBrXXkN9+//0mRzXemEIK8w2sjdZfPb6C XQtsnWTy1eP4S5rjmwod0BOHKwF0TuT0fkyPxVgnh+sj7IxC70/gdoZHaPUighDptSQVRHl65GON PVAGzCZXeAZFwUkYiUklGXuGVmoz+epIA7Gp4S/rirN9m6VJcbPeOQd8vRu9o/TlZxrgW2vA5Z79 ++eVrigoFKdY6kxRrIi9ZCyTGkxztKGXL/fA1VWNLXfBacRisVRr2HhYg9zABlFUjGGKnYk2IJgR rKMbsf893AB+kIKcdsE/uK4o27dJkhQ386gL/oiZCH5onWGEC7a89toYJtOmTYiJQ9KzdR/irxrb NopPklV1c2wQMhwuhl+KyU9gQXGL8M/BAMJPdpDLeQ/Su6F8SmBEJAI01coIaJrwkrQ4TyMyuUBE fhoqGTMBKlRh1uo0vAcd54r6+vJxjeMcmH7PPBX7LDnS1VUNqthjBlwUId2LLFw3eZhYR3dCS+Rv 5dOgjaFpPkHy0aLhCmPgwKi/EmmlgljnsJSV4VWhxllRJurWjWDHU9Gdop5s50ibiA30RiwIwSmi MV/a387QvkK765wgVzZkTMu1yDvgQnG3g4AfGUw3l5daYkuX2cvz128oN0QkxauCH6bXxpxoz06e El6/KZu1AbbgmfrAyXpN4vIQOK+NXAvnfQp6/lqrHBJJSbcxSmWgIKCNEXgFei/lylTi3AX2b3qA oHYvwAqX92eGPPZzwzK8JdVUsj7UK3bD4ozETXqbUWfZOGutWRXUTG/I3dORmbRxV0neba+VVJuX TTdoXsvL6jdoktu1KBohl0Oa/i88g/T9SZ5BmSZ30kN0D7fi++7GMZpsZ2g4LoecxkxpdGYFPXR1 kDQNf7l/P7nz24aBTN1hHYZTGPEUPUQNcd+U7qYxGkoY7rHzAL8sgQ96iPUC3IMK7S2xOi6uKsmC lFYS9bxPaRJi5Wf19vLywUYXWinn+WGacJTfRItVgklFkTLeAPs9+x47wr77w87tr4X+9diu90E7 mAIk/yTqQex9dkPkouTVKbF9m9hjSIKU5Eu8T3kV7vFdw3MqyUU2GEWidQGyC/WAasKJ6UAAouGa GzfU98SB0GPvD7zP3sN+yF76nFfBDt5nNzqH37kJmDBA6MhoYhPdAHH32oUODUcQ6yQKYlNbGxkd iAcFIStNDND/ptugNoRaJTjGp2kAZRiizLMz6Lh9lxQ52w6BBH5dQnGKQf97eFNjI/lRndlu7ib2 Agl7QYH3K9iL3y5/ibf/RecKcAxy7RxcoSdZfTCRLx0Ah5aI7IyEUw+ndpCSMe2A+gEnIIFbP8Qa qgMsZ6of/GNb4+aHuhd1LV4AcgBvy4LSzqWZiezbNL+W3bxr0dy5ZZ+931Gf5bAoiEzpVrbnfHZC oXUB8M5CUPDxMxCKw9AewjhZEBTkY2eClBimDCLktBoCJB+zgIbrINLhoS5/1a0wKolZIRe71mrq FAhuvvWBP9ZXSL0K2GunV7TOyF5p+mxJ3aPA3way2q0J/6CxVvb1gYWVzVWbiWvYxhWHnmmcG9+T +ffttbNB8mJFPbtkWsaCr2dwMk5AmtJ7uY7YaGsgFHKeAPKCB0VCwBPwvDAx5IiXn33ckWwG8SDH GY1cZ0airAAaCtkXqFqA/vfVoQZ2G6ipIUVXh/Ca5CXzE46XO+4hAt951/9odkc2Xih16FZ3CQP8 BQHdqdAxQFBQekpNv8Dpi8zKx/B2ZlTbOOMINY1CD/XhwyOHDx+m9JojGqPubR36Lv4sPcRTchkk 6W4vXy9fGtAeukaZNRJgBpQmQYNUnx4aNoCLrJQ6MbIcPGkFpndfYduIWTt7TbgakA+NfPmogZ4s v7UWagpcpcFlyMXlXC2nHtk9uUoDJUnD1/Bl1GQ7Q8lUdkbmQRlnm/woJ2lX7CEBGol748njkh7K Knl6T+NMX0GAdc6G03c2U42Ov1dVrG0zRzs6HA+W1T7dnTuLqmanHWvs6VrwJL58WuOzD17BRezi JvbMeVtjUd5m8HoX++ArTT1F8w4g2b92iYNXiTQbx/04ffIb1WwKmJ18CtcBM6JHuE4Dw0SUquDJ SQVAtCH6ax/crmc/uW8kn3hOB1az3ckjsyCxps9auzYObBUSL4hB+F0vy4LDvCatnYbTT62mEwKy hC90sWdPrhTK/Gj5CZrl9BC8AGGhIV8CrAIK+gEUSZHIFLpYw7EVcUYCjWjL8BaqvgW8EAhOAlEv exl8NNk5xhbIWwWmgDGeSIisCRfjeeNm1KefCMXNDDj4EVYQfIcBRpt5fEOITD3VsZ8Q4W85hoJm imO0Mhz6M3gl27dmmJQKvQOTweB2Rw/IWPOpQCvUhojZRm62ldBqD0OrJHyeICjuHCEkQchcu2aB c4zscPTi3USFYyWD62fgNrAS3969shvkrf4iAoSlsEgm+UQOZYHxTCgWhSms/FAswu4fJg62Q+S/ iYuLdhwyeWi8Rqs2o3DBGaKqZGjTCq6R8TqCWx/VYdxGFpkIyFty26OK2R3b18ilU6btnlnQCSyx vqQqTzNw4iCQRXz2amr8YtrUwr7TN7NAlKeyAeru0+uLc9muJV/QwsHzxaw6hF51P5Dvb589PQfp HR8f5knpHVx+IsgqwqAzDjDClwdNJs93zEIhVfd3nQiAoNRBIdZ4bKXypI6evg5mgD1wYOuBndS/ Rr5iE1/709Yvfz8jgxzpuffPv59bNrDmwFsFKTXsR4GV+U89bWfyUmp3cXaSsEBK3YNNQhIrEvlh flBk/cbWOl2CR8UJL5zLQKtQ2oOUqr9Y9aTjsZklF03sucW2QyDi1X7C0uX/ylM1Hda0xX/L6bgN 6Ptvrdt4/2n2AodrN8R1pRtXKUWSlJQQ4AKIrICb0I0rJQdmNzeQI6qhPIAgV+G9w5JH+pcueh4k HfyDgwbH9/156z82z8gkunp6gKFDecfLf5xb9uwjb70QOjft6V3tTVNTGwY4mdBwmCqxSFSJIwwB fpGESuUXEmZnQvwIu/uU2GS0FTzoLCMaa+ngje1ZjkZwHr0dRFBy0h9mTk2Mt5sfyUi6a8lAVdGV u2/rah6YOjk0cOOMrPlVOwgzfpwuy2ntnpod0ZK7pGb1GwsrRFPW/a7v+bqZPXR+RtO9NRV6bm0+ zJPRizE5jNN8aG+7EAbO8J+A8xBMzkJs8Tdxbt7onGsAXKBcgHnVC954p26kjtha99HmbAtxWBUf tE2n/0J24YWe3a/IXtKHVMxYkcRpN8GHM22HvIf88IEvYD5EgDdccLwDrpO90ZgVzuRGGlounsxR uSAprjCzYfpKx7N4Q9PUgoiwzx1p1CVyaGV5w62z7irICO5c3i2Picw7sHNVD3uC8+ou0y/DWdFa I9mD06MLjdPbgDM4VxouBtrw4otUxZHlRy+EvaLmfIuvOYgF6LQmbxK0MDjJ55M4wYODjRbVuCwU Z1s1gFKzPY7lePRZdoC6dPUKHox/DTazIyvOjOT0sB/1HHPs42hBDnEje3pNAGGIghhyCBgQ8Ohz 2DkqFX4uAtNZ/ZVQVyRK5FBhQUoJpfOB67SPzjO24oysM/IfT0JOasZfUuq976cn1pyYmr6w8CFI zvqO1PXZac2ODLzenrE+Kx1ekRhVo3n6eXtGEvXka91ZycFdPd2TNlTMLc9e09OlWHVL1ezCVd1H nLwVQTh3QMs9xlt/jrf+43iru563HGchLPuak+IKMhsruxBj51Q8AtkKZ6/WlS+aO+fO/PRAyFbZ lgM7V/cMjupWL/QAQpH/QIbYGVIIiSF0+w9jtovTaZ5HFZvTiFGWttsOssf3b0WWJOrFZ+tXP+F4 dHZJaEjWTvaJ0hJy5R/nVW2988MnFjRufOjDP8xfmpW6eG5qQnSnJR3a0WsD+BCc/3O3bSEpiYQi CVyggKYFHy/LUCZ0HrbU04zqwBuOi1TbxoH25gH2lde2AM2rfVsubinOOkFjDcvZy13B9z6/tbLs mdWH9qbm7+hvXZSXMq9/jVN6hJDa26BcSnfzvHheFEZ5eEC6eA0kqRypEZXazf7ecZjErmGbs1JJ ofLKupbuI13m0ro5TmvcBfE4gxm4jjmxFsqXVusPFy5G7D/qlb85zizzeG4nRzwa38GlOdGdAhOT BRF7U2KLC7SqMP8p+ekLH5lV9K3prazEylJduNo/Ojul5u7SfKKrI/JAV1ZiVETz1IeTY29nngHh czsS3ltbkGrQNeWtS4611W9k/41gFJAmehWMHRTIivqJMYEM+qr+Mn+ZGBdDeMXOtQM5GG/GjXmp Wm4ZRRSHUCFrRdGr2I11jo4Ybaeojn8kPgdfWgemk59PYxUjvfxOa67CUn5S1DugeDbTKc9q6KFW Yj5IPwm3fmqQVyDnnA+nwXBsLLxgbK9IxusJNa57vG25mSfyUyRFBrNvcf4kXuWyrehMYqPVn88Z WIEQ4wmFPIzwCQhqV0xGJ9uZvolzN0wga3tTc+u2V8jsHjg6ZnZZsdt+3cQAs2+/vfydf6j3hnH+ N143Cpfe6jcKVQACKwAjffx9PDNmPwoRcumuh4bLxNwEjoVu20Z2El/yHqYrnJkNHxoT/ozMBozc PDMb9MFj6eaSeWnJBe2tJdN39BRH6bLjVcEbqbNpx2xZyfGxy9/JZ5vFYEQ477271SG6sPhuI5y5 iRjiraXLnLkNLDBA0MagjEZAYECghFa2wfjRKf3O4Mczt6G7MbehGM1t0N9tscSVPCMjwx9oz7Vs 03XETclfWfJYvDLIRn0+9bAtPeE4vrWy+PYjlrrotoo441NZoqxj4aEJ3SZEDbKD9xBtcMfI3jBG bp0gRn7TLeMSKNNanQm6Cg85EouK8OoY1azQHHLlqsfFYId0W0dRw2IG8po4h+HQy30fLljcGkLh bQwfC0HeUAjGp2gvn1bGi75hDXGyGCUtuDBPywUQaLeTWzpcIYSCoodKHMn4WyUjX4Jvhe8rKhJ1 jmGclFQlRT4bywoJBSuNyM/Qvg8uEUvFl1c1P3BZPJyxpa6BiFUI9JNkgOyJxmmS8g/yrp63qc9A UAQhr7vsjAQaOQnVYPHWyT5iu1KGyTR+dsVkhUgmVSikMhHJ8w9Ai7BpVEyhlKI+BM5XcTknnhIr cUkt6U4u6ig1ElbBqAPDye8hMMW3UfbBS0SeU2ATQ03Bo2IMzjplWZPMvlGcpY7PeUuv4bK7mAta lA9NtSqVYXapQCPB7ARNTEIpFSJco5pEkVMi2iO1OInimkOON8eabCDo4kMmDvIboJRMgAsXIMO/ 5AEO5sPAwMHsQselimDoxRfZJmQXKPM4sE25EGw2dAL8RvrUe9Xl0AFy5njpUaySrMHjcIpwIxUx iSZdGHlUsv3X+EAj8qO44GXIpvx8PAZcVgaHehUI9aqc24kwWCeJsFZGhMNljGxB97LBBe0M7iW1 e97LBjrjBtc6AsnsynZwqd+HHOfzn3suD1c6zgO9aNPcDPYIqW+6XdShqdKACjG7JD2VCJckG8+h vC1lIdbRl/57fSbWeegzVbRqqwTskG1rn7EQ6TPKBw8QG3jKX2I18bcmtpr0U2l/tWVCq3nn0Xy2 SQJGfOa9t0IdolVzVhOzkXvhzH6/ttXEh29qNem+/EO3Iav5eGVR59uWuij7bGQ1fTP/Cq3m70xc TvgssY436Ubutv7X3IV0v5G7F5s6fds1VeGgQsLa0ixEuDg56hyyT1Q5/S19FNX8WIV8kqDbGYIE 7a7bBnHIeyb46W+H19bVkV9lli4qqaaOdoCyzph5vg053EhF9BA9iIWM5fdbET9bruMnV0OI+BnO 5fdJaoyfWh219HRVIdt7L1Oznf3hWl0VmAxiHq8pbnoqLWZqQR99lJcUNeulkKCCLjV7BvRE3Jvn L5nsF4mEDXmB1DQIwQlMx3mBkkClIKCVIQWBUFC5VlTuuCOkyiSEQIUasqEz68pXIp86VMUl+EcL GamTQMluZs9a6PC5tz7NVuVmr41eE6MBVpDfBAzbLFPizR30oGLn7hXTw9RvzTMafKq9AuXR9V0W 89LJfhExkFxcjjCRvgJ9U1RxCeECNNXCiLh0v8w2mu4fy/dzO0kUhTY+FWaNhr5y9WIluwXUzyL9 r17Eben1i6PYM44OamVZ2Sz2oIXAQUAc2uElPqLqSD39HBeJ4S5PDxKY1JfRz7EDoATpXCiVyDsL Y3n3Pnjr6D44alFy7oOHO/fBFbxX/zl8nP2B/fDrD/+qBviVk0ACEq+8/xmVeF9SVHpyR+yTmcnT s9Zwo66Bo57hRqVErQyFcftDSDoVpOtmmuhARrQfzns1jL327cfsRfadK++fV3/9w3uAAlO++pg+ E/ukNQWOF9ubFJ2WDOl2idpK8+l2rlLCdzcZ5NfOcMUSHKV+qliCrw6JiA0LClcZolSBI6+GKyNi QgPVysio0CCaH6MKClfqx36HREajay4eeQ9qQx/UhgCrgMvtkzTJJ/ieub8J1OGL0oxFOU0Uswn8 aVvpQnl7kzO22QelcZ9TH8RemMQrAOqvRNTmSuh76oPbwmnGNELl0oePby1qrNl1/6L5Wx3sf6BC 6EHyurqceiArnvYEvVc43dp6R4ZFr124M4ltwjHLW1VBshVF2nAvpA9kP4TgOHf/ZzkmV2poO6PR KH2CYLTNVwqWcmcxjO58uRTDBYqa9kjmeyjHGGSnQPCCqh07yvNC6Cz2wJklc6dlPxC7yhTBqUdZ /lrAS0iw0/ujP+i2WuIiy9+qmNrelZka0CybEp6zbX9RXq1B05sbHi5y7lhtgDpygrN+Th1pc+mI tGViHeH2xOIoLjN+nYqoweQHH3V0UrLu7gZQxZ7P4AeFaXciDSEPQg3ZOZGG7GQDwQVOQ8itUJZN P09DXv7m++PsVfbjf35wXAfAlRPAH6RefP8zcuuzU1NL8zeaBktyq0pfHNW7QZeGtP24hrysZa9d OcF+xR66+N55HZwCkMDw5Ql60PRucV5V2YumZ6amFudDqn1OpdFSWv+/aYhUEzolQaOMUEebwoJH Xo8IM8arg7WhxvhwJfWiGSpMWJQJBhrcC+jNMHiN4dRGks87SvPdOx4ktK0kgdkZwp2x0Jg10EHV 8I66i54omzlNz6JCKFTp6Hl/+1SsHGMwqzXCmxc7ycZQ0JNxnujro7ExsZTQx0dIxZJpBbU2piBt po1JG3+Gn8RkuPF4X9lontGtU5wMcycieeZNXCZeq7vJXX+pm3yerBh0nD1b1yNfs4x3/uCrttZW 26sHz3/mvvrsgz27FjU3L9q154MTe55rbG5ufG7PBze5qbf38MfHl/X0LDv+8fDoFRU9oq6qIhqs MQ1xxUDJDXndNKbxo5/gZnz9ZjdGNo0f33nlwYcgLB6bjtVjyzCLVZuptzFC31YGn9zKBJttTKYw CA8OxoOEmdSMOS02Zs6MBTZmxvUn8I4v1HGdR+zRvP5bswTfbQGydRXFSbF3ny7FgxzNc7/r1qtS TKV7tB//BiwiA0FQ+bT2huLctn3ba8o/+MCWm5gzJ3bKGbzst2KXB78MWDY2F2vDVmF51qiSJBsT IGlhwkIhz/QtzJQcG1MS4BdmwKdMwQ1hfgElvKrGO21MY5XdxlSN45uTcwbPzi2efOzwpTGXjKuw +v/i5EvFVx6eU5SdVH25qer+a7Obwqzm2fUppoLs9orCobT4Gb9POv1bcLTuWEleU1NOir9X1PkN swqPRd+qVWamVNkt5prj5TERW3H5b8ZZepSzaO2LxLKwSqwVy7ZGJiptqNAMmkSpiO97GyMz2JhE WsqXyfhSOpHKLl5oY4qz59qY7Ov0katJMrjK0ZxFR65yNO74od/UOO7Ytm0xawZbjV7CguBvgfY3 sZCO4MqRkQr8giMY9Cfu2hbLppH4b8YfEku+lsZ7k96E+WF6LAVq33RrZAiITVTJ5Py4lLRMi0CY zk/JjInJTOGnCwUWL2MokC1lgoExsZ0xusKOMa1ztSGhkzxRcEW5vCyZTiPTEc6gMhS44s1QuS5R 7opGCMApqiyR0CQS3Enm6ARfSHyThHjMMbKhrt480ATMuY39UkNMEmDx7wFurq/bwD516RKYlR5p 8GOvXgZ48779i/obs9m3m/sjZlfor2HAvEbdxe+dVl31YHUlMKTXsIfT2BNh6rQoIz7MZlZWr5pX 1Xn6VJfRYA3TgFeAH9j/4h72RDr7xnwLMOTls3mONeCpjiZH5420qsRmWmOdtJrmlVthsTOIZEW5 dqZCIOSnFMXEFKXwhYIK3o+TzIAIhtoyfgWicS1KnLxy2yjqeI+CV5pnkv8iWi73Dg6aP0fqnxnh K3k02bJgQUaGWl1piB35JdRd32KKzc/xU6nzJgWn2fOyLCnV+dHxScH6VTfQuxqbY4130vuW0nam 3ILInWuF5L5FILTwU3JjYnJT+Bah4JYK75+QUifREdl/Oc0ptH6owyCxXaR2LTNmk5+rYECr/mUy bAwpt2StPXVrcnJGmTWz9sKjErFuWrCi+BfQ/bMsS90FU0JpYaSucV6a5V+WyYpynVgEV+LxNM/F CrAKq8lJdcvUDDuTPRWRPTNvKZMmmCp0mwbhVEHaT5kGN81/DUEHXOmgDA4nJ3imxF9G3+82Xvl8 R85JG0P8Aoqy0t7eHrCcXb4cpO2D1mLy6F1DKNc9fOWue9o773RqxpKxNCyTozDqiJoN/Z552Hxs IWbDOrGd1sVmnCic3LSkPsq4lFkQVROpX8rURnYyrUx5SPBSZmZIrkS8lMmSLLW1tzIFcr+lTJ58 8pKoyM4QiU0ut0lCOiOjlkz2JkI1ZZXVxfQkfxujCi8qnXMrPcnbJynVGksTmI2h+XHJaZnwMlrB tYdxvz0VhVtt49y1wAb3BWfkB2Eghk5qNsk1cC1GD9QxhV6RmdDLyIIDMxe9yIH7Ofq4WuPqrEIP YOIyDmoJesNMub6DPoeuZfCaQM9vOGywz9wFHuvrY//W1/eqGf7kdcFf4GwfG9/HPoZeoPtzuxIc WD8Y7EP/GxLQT5cjt7+fwBIc/+zrA+q+vn3wtZE3JryVLV0Dv49+2FDnZ4fF5i58b/+IEo2O+6GZ qNyELueH0IhwmuG9HBwE1t8/ctQJEAcieX6iowuhRPyvUtKF3YutwZ62LuHkxCUl93W1Mi5J6e69 XlIal40JStR9kd0hkka5vFES0h15X9SvJCjj5MT17P9XTH7mEY2/nvBcJX/qhsK/shz95IGPKOPU jYl4ZdQI6rDBIqz+3t5CHx9SKPdBzTZCCpDUPIYUolabDEOGR3ugaazf5vqTO+iKYUcnEC97LODR P434pGhDI8NNFtSQRY0Mb25qIk9XprcltV+V6cNNqejlePimG5KlNI6FYFEoTxcSQiqVElLnQwbV MCQlEdUwEqGzU3EMDs8+HYw3vk8njLgeMnKFqrV23fM1szIsj7Pf1uD3OPDFQLUuJiLb0vhpxMhV D1jJ7sH6ctv8p5c3z9/G/vtftgUgFqg2VxdX35uXzg6O/Hkc8E7YV0DYjVAHk60qo5H09yejomRk WGgtExYmIxN8SANCQza5hpH5jKHh0ZXqgY6YGhVKFTEahIonuIWPJ3ZdUcy8OwcaKtmRDdMz72h8 mn2jsjt8mnXxfbnJ7MHmmi1Fmfnpi/6S4BB44nnh4WmZi2seZf+R7qNZMm/lCft8EGz8nWlKbWkv yGmbO71nRXbKmZHZ4/AlOHx3QqlBsVoYprf6y2SBfBilzXO2AwUK+b7zGD7F9UZLucYgidQtONe1 BlHXi8/5w4fbHBfA39JIf3MKe8phGidCV682sltBXT3pffUq3pXyzdZljtu/uI4bndf8XDKtx3RW ubc36eMjVJATiLT40I+KtHOviwMLeW7j5XvjJCjfWLZebZ4yz5um6UmksNtoVAVHhI4XdGNS7NQ7 Z+Zn0V7BXiTuXVNtVqumJIUFYy5InTJvQXXmISESpZLUS24QeQ84f57ITwg5uSK0pXb9c9fJ//po KP8LP9WPXJwIlxsVIQ4oxxThyM2Qc+Lm1IlpWII1xGiU+fvLoqLIJJlbKa7XCCnXM/CLFWJi3Lui FlffuQtqx9WJtaM4Mz8DascIOyEVfp6atNyMGgRHDbfGRDs1hh9Mj6mMh8Y4FYYjxI9qzMTSeb36 aCeW0In06N2bSiqN7WT38tbQwVyFXBSU1iLoXxRa9WnQDRcXGn18QsRKUCSmQ/gzfEWVKagjOlNN 8MriUCN0gQG1QrsPSeB+Z8D/EncztMn0k+3QzqOpRt/njXtXIx+Vk4m/LY5f0paWXJixoEXf1GSe lRWhMaoTq8mixcaW2zOSCjOWMAahKHI+fD1Wm1TpKAuMjYiypyUVpi+8DX4hfnaOVjNFnVRNGrfu 2bDqe/arNe17HP+i2tgzrPXdTvuhc/aqkWLqkqP9+Ufv/569sGrpnq34Bdb64f+x9y3wVVXH3vuc AA6IiFaLtT6w1CeigC8QX0iRUnnGGEMMaQjHGEI8pOFAjDGliDSmiIgpUgggIEWklCJFREopF5EP S1NKuUiRH6VoKVUu13LpZ/m8iN+aveefmX2Iir21D+7uv8v9Wo9Zs2bNzJq1TnCffjd2aP85+V0u e/o7fzn29hO22OhX3xydxxHNKY6zVfIbc+ZsntfvtisvvLmXW8u07XjaaffmXdW2Read97bqdHqb Gwfck8Gsvahn74yMU3zeXu6z1v+hvPOz+Ef8/H/mrGNsO/7HBj+WsRd/0lf8Aj30b0U0/vD+0KWF I6/vfHu3r9/75USi01evv+jCiy/oNDDe8tKCkTd0ca/zOrjXfbq1v/Di868aGG/d7rIOl1a0uHpo 3/YXFHXr/+VE61PPG/jlBLN1+mPvHfvD4xUBf/Yc6/aLqrEbf5dyvMOXFz84hC+pTXtHD+0/d2jX K3760z69Jh89Fm94840POsY3P37VFW/wb9P5f1193Oy4+aDBM96rgt8EiMVit8e+H9tp8H8t4pfH H24SPwthV4CMthk90vBUxo5mZzcb0uzZZq83e715s+YXOfRr/vXmC5v/ukXbFlkOVS1eP6WVQ+dP jYdOWfkZ4U/U3eHr/yT4keCXIfyl5YWCroJ7W85u+f9adTIoDmFeqz81hVO7hNBf8OipL4TRunXr Qa0fb/2r075w2gCHR057xuGXp+1t07HN0Db1bd5s8+bpp5xeePr3HH4aIcI/GEcYbdudIK74CNzV tuokxIK2+8/oc0aVwY/OjDWJr4RQIJh25roz132u3efyPjfzc78969Kzch0eO+v7Dr86662zrzg7 ++zvnv0bh6OfH/T5Rx0WR4gQIUKECBEiRIgQIUKECBEiRIgQIUKECBEiRIgQIUKECBEiRIgQIUKE CBEiRIgQIUKECBEiRIgQIcLxaNeh3YvnDDnnzc8CXyj5wp5ze/lY8sUOESL8lbjWoOCLj5+UWPRR OG/AefvOn3HB+Re8eMGLF3a/cPOFm9vf1v7n7X9+0WDB61+qOAGsC+HPHXp2WNLhgOLLd3353y8e e/Hbfztc8tAlH1z64KXvXzbuskOXHbr83stfvvzlK750RapjrOMDHd+5cqTDa51yOzV0arjq2s8c YwJcffXV73We02Vwl193+XXXxdcsvLbbvyhqrv2P64Zft+6TcP1FESJE+Ctx8/VDDWquf0GwXvDH G6644Ts3rDX4jUW3Ft3ymsTsEFYL/rP7uWm4r/u87q/feMaNg258xGHJjf/H4XCPFj3u7JHq8UKP gz0O3tT2pmE3PeWw/FPjyM3XfUb4xs2rHfb8c+CWroIBITx0y0LBKsHuW8+/deytiw3esrjt7NtG NIlFIbwq+O+el6ShouePe/7h9i/dnrj9aYeNt++9fW+vVr3O71XUa1qvX3/lDIeuX5nwlZcddkaI 8I9F7yt71/U+9Mm4o0MIfe+YcMcv7jj290afC/vcZFDUZ4rgWcGWr37uqyO/utDg1RCO9O3fJGaE sErwp6+dk4aKr6392vt39rxz+p0Ndzb0a9nvMoe7+5X0W9PvcP9r+1c6PNP/8IBODnd/aiwYsO+z wcD2A0scnvonwX9YDLpl0OLBrU4At4VQPPjZwQczO/yPcGfm45l77jorhEt9DLxrrI/lPt7I+mLW 6KznQljt4827W/roHeGkwJrsrzWJn1vc00Ew/Z5j/1uR0zdn6ZCOQ8aH8Ivczrk/vLdZhBPAs3nX 5a0bOnjovvwih7e+PthhY8FlBT8d1mPYpsJch1eHJ4b/YfgfEnmN+P19E5pC0dkhPBLg/tPvfyzC SY9jxfcXvzai64g5I94b8V5J35IpDr8d+YWRNSPfKL2t9HmHPz1w3wNrH1ibbNOI+5M7msKoXiHU Ct4p63ZSo9JhW9m2b9zq8ORJhb+UDy5fUP7B6CGj5zvsT53vkJt6NLV3zCVjqsZsH7N9LI0dNfZl h78AFX0qljaFB08Loafg6Qd3nPyoJIeBDosc/ngy4aHbH3rioV9XXVD1QNVCh10PZzhc+/Dgh+c9 /Hr1hdUjHeqq3/nmxQ7ZjZj6zd83hXFdQxgiqB+3+WTGt651eOlbL42/02HDyYRH7nrk9QmDJ2x7 NOfR1x59beL1E6c5vP/tft/eWnNrzU8fu81hVm3H2jm1c77TvBHVk05rEt8N4VCAx5OP7zh5Mfl8 h4cc/jj5j0/cdFJh8ZRWU4ZPeeXJS54c4/CzJ48+eXTq7VNTU3c+1eGpbz31u6d+V3dB3Xfq3qh7 47sXNaLsuzuawrQbQ6gQbHn6rJMW3xQcYEzv4WNvgO9dZTAhwIyzIvyLofPHYEQTmBkhQoQIfwVe mXGAMbPdzF6C0plL66n+pgj/5Hiy/sisnBPAYyH8cNbbs7vOLvy7Y9zsOQa/nP1BgDmnC26e8605 //5MO4PrQhj+zE+awtxYCB0EuXPHpWHbvLPm9Z1XO2/3/DMd+s8f6fC9+Uue9Z694dmKZ19y2LWg 04Jih0mfGju+f+5nhHu+P8+h4Z8DCy8LYdzCd57rfwKoDeHF5/5r0U2LHvwfYfai3z5/+fNDQxjl Y+bzr/r4kLH44sVFi3+y+D8tfuD56PiDbB9P/lVYFiFChAgRIkSIECFChAgRIkSIECFChAgRIvzj sST1w35Lu/+o5b8cnll2zwtnvLAyQoQIESJEiBAhQoQIESJEiBAhQoQIESJEiBAhQoQIESJEiBDh 74Hlr/34zxEiRPg4rOi+YvqLp7+YH8KPV160ctFLZPDiqoIIESJEiBAhQoQIESJEiBAhQoQIESJE iBAhQoQIEf43wvO8s2NxL8OLNWvp7otcCu5j3pnuKbiPe228h+Q+w2vvPSb3zbwvNeZp7p3jLZL7 FibPKe5undyTd26smdy3NPenetfHvir3rc39aRmPxb4p920a35/haMxr3kLuY16r5oVyr3Se4Wg7 t/H9KV7X5g/LPXltm18m9y39+17eKK/Mq/TKvRHe/V6xl3LUP+9SV6+z18Xr5u6+5vX1hnh3e3d6 A73bXWrv9XO5Et5V7q6nV+rQ3stsLD3af7rPXe9zdY51/+WcQ7wx7n0f11bK5RrhDZdc97v3pd4w l5Nz2O+d0r5n+/WNdt9GeUlXuourtbujMag5y/WgzOVg2kZ4hS4nl6l0zyN8iob5efhtwuV6wP86 0r0b5Ubw43tY7lPBtaR8Crg/XGvSLzfMtTrM3V/l9z3lnm70rnao8HGVV+JyVjoKO7nWRjm6Rrl3 w/3/lri8V3v9/b6WuzejfVqY+6Nd/jKHUvctaK3I73PKp2eIu+cecx+4f2N8TrcXvo02ufndKPff 4T7Vw3z6r3TPCT9fmc/XSv8N94DbKfOlICg7XGq5T56H+XWX+Tx4wOVK+d+4VKFPB7fPdJT6PeJS oCsoMdrndvlxb4oa+3Bl4zPqaoo7Zf5zwpUZ7p6v9PkVSFrQ7pWN7aT3IBizCpGv4o/gWYX0lHMP d70Z40tMoknec5lS/+4yl/9yd2XZKhS+NFV7QMNfy1utPeHXdL/IJ8tmud+rlMyPpnqA1o+nq4eR Ae5J0JeU316Zz81hfv1BXxPuTYXf81H+fPo42RsWkqr7/HEZJf8NehXcj/Hnzhi/JFOL0UQ9nLPU 5fg4GQ30UVJGRmvHDBkhXGb5Kfa1xAjh81WfrAXvb/n0oIHnVt5y7z3JbkP3Fd564rov2a3zis4v dX6l84/SdV6yW9GRgXd1frvzgs6vu/++0/lo51Hp7XROjq2q63r3HSVf6Hx/5yFOc/v/+/Aa115T /4s5K3CK1+rDD73T3b13SivvPc9rWXJ01X/f3HKM/938794Eed7l5HJpipEmL5n2fFGQ+D5eSF6L M8lrVuSurd37PMnX2pRp45Lkb7xy2d2SXPsZDcHVOxikxrYOprWd9pye8N179wTz3yDX7i4dc31f LrRtCMoedy2QOnsGCfTy949KsaTpa1ryLnUpM7jG+goteQEt3iDH13ODfJZv6Fv86iBfRm9NoKdZ heZvdnNwzTg1GKsWn5fn3sGYYSwa+TJDrrlB8na4fPIdV9Tvva189pN7jq+XvjFf1gWJaW5WFrzL QN49ruzOQL484ZFXFh6fD3ubNMWl2S61CsqHvs0+/tkvPzXt/dTgW3xx0+WPk5F+ygN/LO233OOf vQNSpok64jVNl/flyd1/eIPQ4a6el5a3RTAvmWcsq+nz0pdfmZdxVzbu5Kn5XsfrrW7MYoEsNc7F T5iXsT2SXH8zOgZXb8PfaF4ePMH83fXK48Lz0rvmbzwvyz5mXl4U8My/egHvm08SPu9399sdb/Jd HS7FN7rUy6Vb3bsJ7urmb3you3/QpfPc/Wvu6vLHWL+tconnRKtApjxu65cubQ54HG/rrm5OxJjv 81xy5WOl7t0yl95z98Uu9ZZ6drn8F7tnp3u9+qDfcZbhTi4tcvdc7oi7fsldD7l01L3n/HXu/nfu vZOpGOu7m2Uel7vk9HnsrUBnxZa49wNdygrGwFvr3v1c+uv4He/h3uW49DOXxrp0n0vPufS08O3b Ljm+eM+7dLdLfYM+eHe51FH68IGrk3Wgq9d7P+iH5+qPfcelFe5+XtBPX/Zdv5q7fmU4vmVMDMaF 04k+f9QV+T6r1NjexLT2J/592od+4/kDHXFc6h7w3b92D2j0ec66sotLLEfXBDYnzvPmNpfc/Ig7 3ZaRHYxlbK7IKY+h04Pednl29sDbFMiX9+NgPL2VgTx5W4I2+Dl22KWHg7zeUpGLw8H32LTgPsa2 8veuXbY/zUSGjko770u9P3HJ6T1fZ70sdHAe1iFOtj2n+30b6uTfe0Ps6BMil0zrAJdc/7yhQuuV Ll3l0qlC6xOBXPq0viD52baxjM8P6OMU+0Ewl3x7Xq02ydpx6K8PJ1Ng/zuE80Af+bZsttSR20T6 GF0amxhcM+Tq67LtgT5jG9HiRdFlovd9vvH1CvLnXLqN9PWh42V8psv/kuicpwI5YV0Rcz6L77+4 McnYIPK+KfjGyfdT8oKU4WxixniRze7m2pR8NvXeft9/vBzH1gU2kHUc69zYfrFp0wO75qeKIMUX uOvvAx3r18U82Cvpz+59OwpsbjsZvwN6H3tX5I/7damk6SadJ+mopAVBip0VJF/nse1eESQvJXLv dHX8zCDFVgWp8XltOGUMENvviT3n1Cq4ZlxDjXY+znLA47QySDye3He//66fXq6kS2UeLzJJxs1j W3a11HmO4QPfn61tNcpgO+Hf+3p/3DOFv9nvXkFa/iby+ml/wF97Dc0FltFK83xYEufrLgnPPQJ+ gKc+X++Q+56BrsjgOtycj98c6Bf2A1i/xLkN1r/s3zpb5q126RaRzR2in651eapF77Ae+7roJ/Zd WAY6S362m+wfvOPSQpfYLq8MdE6GG4cYy90zFNjsh6XuJ4M6YpfLXFwSyLwve3cF4xtj2/6gyOJB TXH2A+5xaUogP15Xl7i/a1z6UPrCedeJD+Dsf3yIu77urvnSPuvjXdLemuCdzyOmifX2bynQlc4f iL9Cvo8T5znLPhDrU6cvMsa5e+ejxotkDjJvZgTt+H3Y5tK3hDdDg7z+vOF2uQ9M90Pk+0Le4EC3 8nf2+3zeMo+ZB+IbxXkeDSNf77HP7rUP+uj7MXvF13rA3T/rrs7XiztbFMsQmb/Ovf8R+f4c+1S+ /egdrI9j/YP++ePAPpJbg8QvocCexSnwydzYxO8L5luGozFOge/IPhDLoZ+XZarEpX3Cs5GiN1z/ Y052Ys8F/WR+8bg0OT8+Yh6e6LfQXN0X8M+fJ3jOC+aQP/f+K5gr/r3MG//7vmBe+XNtX5CPk9df +tpf3qXTNalpXcDzKl0n2D40pTNQV/o98jeW2R+MceP8XyDvusjzfrm2k6vRF43fupv7O4L+oS5b b0jP7Jdx9kRGmHelojtKRM6TgZz7+rhcnotE/qso8MOSkjcl5Xh93ULes+9ZLPU62fJ1eqHUkR/k 9f2zUsnPfl6FlEnI/C2Tb+/KuzKpi/Ow3+XmsG//ioWmpNBbL3ohKXVyv3YKjaVS1ybp13yZ69nB 2Pv3XL5G6s9TujLWSFsT5FopbZQKbeWk/ukmoXGKfOd+TxZegd58+c50jTd8ypY6xH/zaSwQ/rE+ Yb3Oepr9RYkf+HUlpXzK9JfpWRF8933e9ZKSUobrHE6+T+ynCik/Rvr0oPRrotRZLf0vkbwjhfYi oYX7tVnKrpZ8y6S91cE88XlcZ9pfKOWTUm6W3FfK+wlm7AsNz0uljloK1orFMma8VpgqspgS3hUL X5m+I1IH17VR+DJV3hVLP/h+r7RZKnm3Cz0J6TvbgavlXYF8Z1pqgvyxC0jnSbmpv0jqOyLX9aYN yBf7GLtJZZbrYVk5Ks9T5Vuh8CZFKtvgDWS/TPpeLm0tlXskrveYjMtEKZuSugukHaZLfGyf/u2S ryrQIX6eEpMf7ZdLPZjzGDPu+06pF33IEdq4/29TIGsJ0rldLKlc6sbcTclzoaG7XsYR+TAGZUJ/ tXzn+c0y8w2hPSHP5aTzulTylpm+LRVeFktZ6CVODVIeerTMtD9Zym82fWG/w6132PY35uVv4ms0 ton3kH+MxTTD/3zTJsrWB+PKvkSjfOwmnXtVUi/mCfclk1SeCsVGoN0RpLKDMqAPssJ0zBUeYD5D 55YJjxMy5lmkcsH5Nsi4YO5yPl7Pr5NyfM9+0ArDE8gdP/cz/Dgs9e6WNhqkfp4X26TuzdLfYtNe A+mcRBslwm+WKZb/8ZKHv70r/aowZaCzcswz52f9MEna4u9TZazzSefuJFKZ4fe9pTxkpohURmGH Cg1N2aT21upMyH+peVcpdcH+cD+rpBzLa67Uu0CuJZL/MKlOPCT9sbJeL3Uy/dVSJ+xYobSFsU1K Hh6Xg8JHTqMokCPIyEZTD3QL5rGdr0wj29CU8Peg0Mk6fZl8rxb6KuW5QdrcRDp/YIdmkc5na6dX yJhMNuMDf4jpmE06Z/n9NuEhr6fOM7wqkn7ZeV5r6tsl9feSPq8hlRXMKcjbIGkD+gYytNe0Bzkp EH4sl7aY/2y3c0h9H9iZDaQ2ndM44dk6oT1H2ikn9feY9pXybYuUW21o2CZ0rJG8a01fMZaFcmU9 t1vahc6fJH2GrskWGqCDIEdMz3q5rzb9wlhinmwkndOPmH4Wyv0myTtexge2EnyFXEEG8Q0+Mb7z 8x5S+wcfAn0FzduE75hXBaT2kN9BTxeYPrHvsFXq3Cj93ib515Dq6EoZYx4XsZV+fO0tybOOVLcv lDZRb5Hc8/fN0if47qzftpv796lRt/u+AvyriWack9Ie/K1cUntaKd/E1sc+T8HcRptr5Vu5PENH cZ05whfY3O3SXrUZc/gZJaQ6iXkMOYW+3Cjrz0qhHfp2olzn6nj6+x0tSOco9DOnlWb8MHcr5LpR xuMtUj2A8uwfwO8D7w5Kne+Syih8acxB1F1o6O5FKv/Qc0lSOYGMsS82SfIul7Lsm00n1b0Lg3Hx +ZulY+3fM/8L5F3CjBnsBpdjGdwp99jHgj/AtDRIfa9Q4Kvukrq3k/pZ4JH1b9CnOVIXxzc4jjNI xorH6UzStQxkr5jUD7Y6HX5LFum85j7sI/VD7TzGmg7ynSv0TRH+riVdCxZIgl2HfGCMIIPcd9aD e+TKPKgx+WHTquQZayyMO/QS/AvoAsiZ9aPZL+V5Vk9hvxg8niR0FZPqfpRnXnN/3wriGb5PhnV9 icmHvr5LKiPs6+ww/LW+KcqUmoT12NvSd1c21kvoHyd58gJa/LmVMu3uJPVli0n1EWzPONFZc0nl Y2raGJfK9TBpHMWur7COWkuq1zHe4P1qUtlLmrL8bgKpT7qEGu2yH3PkfdvWFNiBcaT2KleumBPQ iSwXa4Q3S0j1JfrDcoL1BNZPCdMPzA3m4SpSm5MldNg4D9ZimJtlpH46ZGUXaUzoPdI5gJjJFFJ/ iuvaS6obdkqeWqGvmtQv4HKLJO9cU75a2iwwZeCTIKa0n1SmFpDacc5fJ7wzcu7rcx4TrLELSPUa 5OpVOl52oLcmSbvw2ZaR+vnQAdWSp4rUtkL28kjtFsYKcTnIF7eJ+FOFjMd4qRf6uoDUl6gn9dGh 9wsNP5LC91XCu6TQweOxVu5LTF7I8XzJY+dYLenc53eIDx2WNvPkHZeDvwZ55Gee0xJzaYzfDCD1 Z6tI9RbXj/1brnMzqZ0ArfNIY0kVUp6vByjsl6BfsIOwETYGgz4iPrBeaIKPO4hUR1eR2gvQUi/j tCngnz/H6kllCT4XxqdC6oReTElZ9D1BjXvGfv+T5hvWdVgPYW2RFH5i3buHVDbgJ2I8Cims40ul Hfjj9ZKgX7CuhgwfMnyFPmR7i7UyJ9Zbi8nXU378LVveNUg/mLfL5bqLVK8zbbvlG2JYe2VMCoP6 GudOrbQ1ntRfgQ7IJ507sInVFF4zog/5FF7XJUltEt/PIo3fbaLGOHqjnz1VrtBB8A+w3t1JKvdJ idNA5041/d6s9fh7ZKABa/YGUjsFPQmfAOupSjOmSeF9oSkHfxp+Hl/3ydikhA9IWEcVkMo3Yp/Q i2xn6k0+yBDbr4cpkDus75JmXBDPKpN80MHQg4OEn/BZJpLaA/j2PP4sF+xzst5kfbSCdL5D9vkZ azCm8wkKxw4hMzMMDRMo7ONhrFKm7nLJt0Pan0SNcVTfH0lKP2AncoRuLstzY4u8Q2woJbwBv/ZK 38eQxr5KDQ2IRUGHI24NPwh9Rz/Rj/Hm/WIZoxJTl11PVZuybFd47mebPKzT95Pq7nWkNg3zAO1W SH+xroMMpORdDqntgyxyP8cZHsIGQPaQF2Nh+Yf9G8gmxhxzkeuFXYSNfkXywW/G3gb6yvXx+m+r 8AG+PPf9AKk+rhL6Zknib/OFF7OlHOfD+ojn4PtmLI+a+jcJnTNI7Q1owjqSdeYo853r5PlxhNTf xBpnHGlcAWPL47ZD+gYbgv0+rJG4reky3jWk82SipKUUyPsk4ROXWUvqa/FcnSy8yifdvysRvkPX pe9TpMy7lNCGGF+V0PUgqe8xilTmUFbk1V/n1Ek/60h1K3xC9md2Ca+tT2f3vlLC7zrSmAhifehj qVyZPratW0l9Ta6D7epcUl2NOZUQvj5MGltAOb4upnDcGftt8HXg95fIuCGuXUfh2DLP5bekz/AJ rR/IY5Mp/cL+aJ4kpn22GRPIO3T8M6Q+w2QZay6zg8Lr2CnyvlTamUW65kA8AnoR+m2W6TvaryGN 8fAY3yBt5Uq/4efCf4IdKJd8zvbF2lIgE1OkHvja44Q22CrIyXoKx4zgLzMtb5PKL8aqgtT2iv3w 17/QgxiXIuE76IQdgvzBl8yTemaRxqHLhXb4bKatxrk/ncL7hdC/h6Us9BJ8j63yfa6pY7e0YfUP xo7rW0eqBxHTYDlskHoxrpB30FRM4b0ZrptlFD5lA+meE+fda/LK2DfKD2wa859lcDmp7d1qeLBD 6kN/EZ/hOhdKnrWk8yihbfjnk5m+8aRx/S2ke58sC8eC+vw99SrpA/xVzscxlW3CP8gl1qxWxvtR OA5bJnuFh6TdWhkT2EjII/w6pnt7kHz/E3pondbn02xjx4j3HTZ0lBn6kzIG4A1isw2keqxCxiwp /KgkXScirvZv8n6KXDG+s0l9OMyPbFO35dNGGTembaS0C790l+RdRLr+zjI8Yr9b9JR/zqBS8jJv lpOuyTeQyiy/h10Dz+Fj4JwC2/DpUh9/g15hur4vfa8WvkBfQJdvILWRvOaZSeq/I27DegL+ZYHw HTEa2CzIFPOnljSWwjL9OOl86WfoXiN9LyM9I5Qk9UUqqDFW6/MOvh2vOfeR7svC53by4f8moYv0 BbYGcfDdwo8tpGctKkjXbfzumPQB5bAnO1NobBA6d5KuhblsLunaDvEb0Mv12r2GeslTR7qHLD6p vw9YRRrTwX7TKlL9D7r43Pg80vU11q65pOt+6HmcLbKxuGIK73dgjY11wnZTB5dZQCp70L3Qi6uF R5Wke17YN+D8sKeIvSXkO8tKb1Lby22tkXpY7x2Q/JMklcs70IiY4ArSPea9pPM1W2ieQRrTQn8R Z4GM8bnKfxM+wt4gX5kpy+0hXoI4D+i36wasgbiuI6S2AP4B07aVwntN0NeIdUAXQ8ex/E0gtdGw 4ZiDKAubnCLVH1gzb5O6eY5AJ0A2EZ9C/zeQnrUAD+CDYu5YfxV6NSnjtZpU52NcsWarFjpkD9yf mxNI1xXg9VzhX53kHySJ58x00j1crrcPBfoBYzGBdD4hD3zPhMQt4E/Cd4LfOEjObWE9ANuJ8cgR uvIpfEYqofX7OqNK+HRUaIMv2o90L30Z6VzCOOwltSE87ptJfaYcM96YtzaesYt07mGsuG8s2zMo fJYN38ADlomDpOc1sCbFvirnY72+nNQOQ78jXsG2bAupTWSaDpPGZsrlG8sE1oeI9fBzL+FbtvQV PgdiB8sNj2fI/TLSdRq3w/qontT/tLG3KaRn4KaTxgaYbvbVMk17U4T3dv2D2DLW/wnSsytYM2JO 7yPV3ZDVcuFbtfCgXOjPIfXrCoR+lju2XStJ17cpCp8t4fyrSddYxcJDph3xAPgEkBWs1/jbUtL9 H+jcXFIdgj3oyaR6BPtI0BfjSX3clHkPnYS1DXwYrC/2kO6Z2HMQfJ0j+bgu6EPoK+hKfr/c0A// GT4Z5gni6VgnwqfCmO4QXsNXz5J6oNOhP6Bvy837pPBwNWlMmfUm63fIF9Y9+aR2FP2BDYKeRjyM bXBf0rUVeM/+9rflPo/C6wPYHuzbiG/kf8sz41JHYfnBuZ1i+TZZxgN2ztoQbg/nDDBvrR8Im8Dp kJx/4PF1czU+Ibj6cs9yzXZogtC1iVQ+pLx/Lt0l/7cRPUhjDAWSakn3C7CmQvvQX/Dnra3NN/fg mV0L4Rv0Ir+zcVbsSULWUKbMlE2k1VeU9j5BOhdhD5ImcZ5epOvxElM/ZLFQ+pJjvg+Q8jkmD2QN az+0i3kIuwc5Ab3Q2VwWum6n+NmsW+pJ1wz8DXEtHl+WDZYT1oHYq9xNqguc35bRhgI54/fvBXU3 nv1CHAD7L3uE59iXLZY1b66MP/drm9SzR+w7+61Yj0wXmhHjnER6vgE+I+IXiPnMJtUVU0nPw+Ua /uWSyjt8etgP7DnCZuF7Aam8wlfOJ41pok7ELJgfWJ/grN26YM3TuBZaQ7p3vJN0r+x9Un9Ezvn4 ez9bhF8b5b5B0gHS2A9sJs/NacEaxT9vcER4L+tA//wM/KDFpOcCsIZ9W/pxkDTmzleclTgs3+1e JH/PNONaLONcJm1g7XVQEuYW84r1wj7h9UTpH9YG+4SmffK8hzQ2w3offjn2YfOl7BLS9QviX1hD g95CGQfojkWk+5rQQ0wT5gHsTwPp+hzykEU6d/EdusDG6FAHp7mk+8Csr6xOhG/B47JSaONx2kxq m/NJ92vup0COJKbjj8GJJIwjzxeer2xLEIPkOYXzONNIz53BvsDnmirJ7ufD1tYIvTtJ1xTcxnTS WLCNMxcIX7gd7LlsIN1DwDvoWMRSCoRX4CfXt1XyT6GwroYNQRw7IXROlnFk+asltfN1pPKKPhSa trDGzRHaQQ/LHc6P2vgq1g3wAeCnpr+DLssn1U0pk2e7tF+b1q8UaSzAxrfhCyGVmfx4LiSN3+UJ rdyHt6Q9nHuDb4r18URS2dkgf8/Cni+1NrXAvIPesvyEDJWahLUo1gc1MrZHRJ9torBe5DgDzxWW ibVCH2LnkF+mfRmF9yww5oiNYX2A/VO7n1JCaq9w3g4yVke6nwn5tv4A0zqOdC+zROiD/wJ7NJ3C ugOJ52Vf8wx/YW3gw/m/04W/BN8aOgtzxvrm6QlrP67zmNS1iNR/yCI9K8q0IfaYKXmySOfAdfI+ U/LnyPe+cj1EOs+gx7NJ9zuZznelLtbtPK/ZDvD6ahvp3kNK2kjJO8x7xKeLSWMeWP+gj0m54vwQ ZA3f0hP2qhaT+n/2u9WBsJGYoyNJ/c8cUt+31NSD9uGboJ5UWjuQFehDLjOAdG8KNrZM+AkarFza uqBTIXOlad9RL2hh2vHbSsgNl91CKvM8xvw76hpS24Z5DpsCXiFeAvlbQ+p/w1bAfwNd8Dls3AHx VMT0MWfZz2QZW08aA4EcQA9ibNBP7CPjLAHWYVzHJtLYWnla+W0UnlNYa9v+llFYH6c/Iw6BNUFP of8auWIPo8KURd2IMWA9i2eb166L4esi7mVtQqHpWzFpvA4yk08aT7F0gG7ElvA+k3Sel5OucVAX 1pnjTX1Zch1GulaE750kjfPgPBL0QL6hA7TY9xhTrM1gJxHLwJgVmXZg/+B7w2blke5VY45hTV8k ZZk+e9YB5YrNs8xN/K0v3+/fSerjbRRaWMYOyPMa0rPlfMU+Vi7pXgm/30A6d1iXwj9fTxrX3yxj vZRUliDDsCHQPeOp8ZypvweJeQs7a/XUEtI9F8QsTiSVmrow//AN53usTihKK5tMy1+W9h7riYPm XSUdT0duE/VhvMpMXajf0lFm2k+Synx6fTZZn2KUqQ/yDHuAeYd4gdXt6C9sjNU9lhbri0L3l5q8 CVMH9F1RE/VCJ8O+gW+o514K+3zWd7XrI06wjYhDlJr8eId4NnRMsWkr3X6DL/B/cN/b0IK4CvRV Ok3WFmGtYdffVg6LTX0J0rid9WeLSH3qIpPA77xwvsbfyC8k9TPYXx1FeoYBun4ThX/LyXOfdQLr Hl43HpGxgS+bT/q7GvCgljS2D53LcR32edm2cNymjnS/tF76Pos0Ls7P7DNh//t5k4fjNlPlHrI6 W8ryeupZ+QY7DRqZBzUUludZpL/VQQwdvnSVfMe5j+9KmcmGjloZC6YPfg1iJdAr1kdPkZ5f5GeO Wc0klV3Mkdmka5fJpPHdEqGX+/E90hjtjLR2uL7HhK5CqY/XP5nyDTYP67EC01fMAYwLeFVgvs0i 9Z2sT4CxKyY9u1iSVob7Mk3GZxapfQVPUK6X8H2WfP+25J1Jqreg1wpIfY7npI0ppPuoZaZuzJ0f yDO3MYdUT2C9WEm6jwoZwHkGxOCwpsY5/SL5hjU29CDW4fA1sUaEvwK9Ap0CnmWRnn/Be86zt4ky iPXXkp6n4+sKCusXrKmtD4nxg17KJfW3wRPI7wTS2At+QwcdALnH/QRSvYeySGWkfpv18WAL0Dem eZLkxTfm4UHhP8+bfYY++C3gA8fj2Fd5V/rMOm6G3A+QcvtJfftiCv99CE687n+RVD9XC1/5fY3U ybrqfeHdEeED+1p7DM2QUb7yvOa1Fuvf50h1lF1jJ0j1BfQ01uOFpHtsCaGFY3/sS2HdnPsRKTMt j82bk5Yy075lptU1KO09X7PMN9tmpsn7KVOMeblOEnxm7G3hHjY9i8I2E+cGcd6IUz/SvytQL/dz SGO/mBssOyx72827lLQH/26clJlPavMR48WYw7fBb1jgh2B9tJl0fXAD6X44YpXV1Him1D9nxr52 jbTPMfj9pHMce4G7KByHhvymSM854hw06xT8HmufoQX6aSmp78Ft4rxXQvYcDpCe64ZtQ7wbNmmn qWMj6ZoZMf1a0pjKJFI9NpX0DAtsoLUBOBs3lTSOhbNR8Jv7kNpk+GngP3xLvrJcZJtrAelvnCEz 8KXLSXUZ6kU8ldtCPBzzOpvCZ3jgK+SZdwV0fMwTPjrmfYn5lp4KzH2JeZeg8PqzwOTF+1zTbr7J k0e6Bs5Le4+8SDlp9aPtPqRnwDkfYoKZTdAD2rGWL6SwX4/3sKlzSH35IvO+zJTJTyvHaTUd799A vi2vy0zd6D/4BJteYtpFHTaGgPrzSW15icmHb3a8EDvA+sHGwG1MDvf2t2Q2NgB5LU6rLz2PfUbf MaYlFP7Np91/B2/R96bq7pvWT/AXfVop4yF85nPG/j4k6yXeT2D7x/GHtRToDtZtrHNXSTmOFayR Z24HcQOcheG8NaR2KcvwKot0j4T1Dfue8PkKpC34w9Dx6ev54rRUSrpPxO3MIPUPs0ntPWSKr9so HJvFld9hL3i89JET68t1pH8LDv7pujSaagxf1pPqQcjFAKmriNSmrCL9Pfs40r/PhDFLkNrjVaR2 Av4qfmuZRRqLXEp6Bgd+wSpS3xNyB98L6xPY2OmkehJnlLNI9z0gU9AlLGeZpLrK6jLcF5pviM3C dsCnhP3Kp3CcA1fEBFHGxp4+LkEPlJl3VmcUp7VTmpYvXRdYnWLzwdZYmcX4IzZj4wzQFXYvBLYa coX6US9iL9a+lpv6QT9sZKnJU2Typeh43YF1dcrUg3ywC6WkMS2Uw9igD/ANikz78AHyKawjS027 dp6nz3XIkS1bbvIn057zTb6U+QbdDV+Dvx0mXVuVmHvoDpzLxfrN6nnk3Wj6ghhlytSzQRLOxKMu Wzd8Rsgbyleadiw93I+tpOtcnJvB91JzX2jGCLoFa6VCUrnCeGP8bSyyF6mfUJ6WoG9gq9aTxu35 yvq5hlS+oAPRTl8Ky7mVQ4xhgsKyy3TgvCHWcegr1uvQeXY+9DPjlzKpkMLzA/oRus6OfTqddt6n tLz/d8N5jNh2su3F/gz2oVgvY8+hXvgE2476oINZ/gdR+PzkDtK/k7JD6tsh7fB1Aum6qULGAn/7 COsr5tUA0t+ccl1s4/OFTtjN8aR7iSWkv5WyMsX2i2MBOPO7Q65LSX0PxHE4bSK1Z/l0/N/ULJY+ zTd84rpZFjnWmiX1Wh1VTvq3/viKMzz8fb0ZS+j7NUHf/L/ZhbUm+GttJmwv/FQ7f7nvPUllBvO1 jvS3VjZ+jNgQbHSWeQ87bv3DSsNTa7dxhS88Q8ZlkuTfQrpOxdmHjaTn4RsML4pJz2qUCc/Z75gm 9W4kjYtwmUzJN4k03mntzGapa6mMwTKhdZXkg1+A33jnyDfQAZ1v10i4h40op7C9sH6zfWefrQ22 fryVoZK0hDLQEQmTr8ykxcJn+I7QJdy/l0l/d/yy1PM8qR5eRRrfxhl7jMsEU2e+jMfL0iZ+85Ek PfvyMmlMcZXpK9aSgyQtIf1bxHNJ/9YH4hY853dKm1soLDfw9/G7rFLzDT4N1uwzSOM80I+IW8Bm TSM9v8ffZ5P6P4ifJKQ9JOs/IhYLnsEeIraH2BXmPfLCL0yY9jDP4XNWpZWpNFfYJdSFeQadg30b 6CXYWYxXinRdB3uTNG1YO4XzSUlTb8LkS5jrOPMdtgS6qYD0Nwc8Xssp0N1r5H4p6d+GXUb6ty3n y/1cufLzLLnONXkXmHwLpD5+Zjlhm8BysFB4gXMp/A5n8/C7/YnCM7YZkGOua7O8z5ZnnMVbRurH wXZivYJzS+D1cslj17brhQ9LJG0WnuD7XGlvhcmzSvi4RPhQTuGzXDxHFpHKVHqyfjWndaTnVZpK 1hZBN2HuFFBYx40zfdhKKgMLSH3HrfIO5xdQR4P0m3nL+oj1wC7S328WfESysa98c4XvYJ9tKmji G/pbKbTslnfLSc+tsO6CP4+4VJ2MJewJ9EeNjF+hjDPf55Keq1gmvCw1+XCFreX6F0repZL4fT+5 LqXwupNpYBs5Xa74uzi1Qs9E4W8d6d7pRFJbivmAxP2dLP3hebFd+sg8gD+RQ/r3K6zvAT8NZ2bx HjoDfjTui005jCnqgA8DHwU2qNDkySW1qZDpRFobVpbhayLBL4Ls5Eherpd9VpbtjRSOO8A/zSWN hSLlk+735ch1AGl8AmlQE2V5fLPlPkvKDJB2B5i6ck3buaTx3AGmrlwZgwGm/QJS/wo+ISf2s1LS Nmi3tgq2K59Uj4w398xjyBNSDum8mE36G0GcD36bdD5CRnDe3M71Ugr70/BlSimsD/DMfntv0r+/ DP9A9t6ifzfuU6ar/7bpE/9NGUn+vxG3RWQCPuQG+Q0+1rG/okCfcV7WU2yL2N91ttD/95v2kf47 a/2DZ1+ndgr+DcHQvwXTFL3nmlQhbbFOzZXz544/9t/X8v99nrWSmHcJUt+Z6V1Fet6A7ftSecac yCK1R9BbbFdtPJF9oaTUwXNlMYXjjNBR/K5B6sH+IfLBr8U6H/4tfMqNpHspmaRrDvh4do9jl4zR KvMOPij75Fh/o33EAvCuzNTJtLxEukcL+4s0Ut5zv+aT/pYEaz3Os1bGmOvbL/x6T9rYRPrbMtgK 1lPQZeg3/OFJUvcSqXsmqV+clLbsWh46GPYQ/OJ6OM6B/Wt+x35GrvCL11JmH9b35VbI/WRSP72A NM7OtPajcAyuQMr0M/2YRGHfwtrUKaTnVBOmHSuH8B25/zskH/tGe6QenGFBXATrT86HtRzWNfBt LG8gZ+BthdB2hDS2xzyDDPehcHzQxoBrSNfu1nYVm3w2vgebtZn07Kv1F2pJfX6+LiX1kbeRrglq pe7eph3oTz6v4uQr4/KAvgynVzJkDRxz8tBc7FlzWfs3F7vbvJk8e8G12VR5vib43uygPJ8TXGPO d+V/Gyx+Afn/Fqz/74S5eRt3/Yi5/saedGmyfHPzIeZojzk/L87fnI6KuXHkf2vW/3fDWKcdkfcs s3xmhn14PhvAfv0tFKw5wDN+x7/n4DnJuni/jNF95Nv+5pC35cG/KxeHH8Ep9/+z9/VBWl7Xffd5 P48VSilDFYVRFBNFkWQNlTVEZRSVqkTGlBgTTLaErtebzXa73m7X6816Y4LIDqHbnc2aMBtK8AYh rDWiGDGU7NA1xpQQignGohhjDWGYLSYqpZRggmS1imtL2p7fvef33vu+LDa25SYz3T/O3Ofjfpx7 zrnnnvtx7g1y5X1XnpNo25HvpDfnrjhexvuwRF3TYDwDbXcbz4cl3pUDPbbcZCSdq1kn0VbkvgfO UXYl8ZH+8QB52mRNUvE/zfYFqIxb9ps8zJY4VmX4ZgTfRz0h8e5B9kffSZ4Zf4vEMzX6bD4RcoF+ 8LTFQd13BZxwv6/3zT5k+bRYnvANflLCfXQ3Ag/u9F7oqj7xnYBHAz4p+PvOJvl2x3bGO43jj6HO PwzklY+5kRD658Fw1xlCDyo/qe1W++75jv6AY9/RCF4OH7OyEvmsnMVwB/WqtAHOrUFW0RdxXgU2 kuorf7eqtQ3cB+nvhISf9PxY14rsz5bKvedlrUPJBZ1YgG3sTFZ+EHu6P9zPXaHR/d8nze9L6Cdt rJSbpeVtN70I2tjeyeLFYJuWtO2XfkHf0X//K7llX09xs8EGgzGjzfU7k4EqO3mydvO6tdVcQkPV V9nJAJV5vp9XeEjCvZ7vmaQsjoc5p8j375oMHbc64fmQyRHPpQBAR6F/QF/xuO0DWWLpYE9BX+00 OCphH/sGw/thk49DQSd6e7BJ4roex+gco3L95bzEMeNJiXtBqes5zmRaQoPE8Xk6D88xb49U7wdA vwC+oU94xfIFjlelev6hM6Ed4sFmQv8E221Yop3EPfSdhjPGPfSvbjf5G5J4zhbzrZM4Z3Fe4p47 +tqzDi3Je7omkc7r0i7kXM14Eo9zZ2slriHT5u1KnvlOW7BL4v5I2nvAYbnEu0qAN/38WyXOqXOO GnXcn/CnSeJcO+3FdH6T68npPDvtza6ad36jbbxF4niNth3en5W4bwh1+T2Jc1JtRp9nJbYXzs/T tu2TuF/gfBKCxtxjDry/mpSR0pl0g7ydlbjO0GA8Py/RP+KkRDlGPscSHiMOdBbmeZZaHjsSmmFO hjYQ12l2JbQ9bPlzvaMpKYtjv6bkneMg2mvg5XW5dS8Jx36cD2S74DPXWqhHxw2fFRYPdTgqcY6P vEW74LxsKg//OeFP2h7GpHr9hmnIC8psup++PnmmLK2pKS9959ijXaKMcTx9LCm3V+LYnDLL9J0S /Z757XCSD9sJ6KL2QmVdZYdE2xr5n014xjZOGeZ8QqpD6pLneqme5zxndvHy3OLyXbnPuRv5hW5z 4XOuofC8W1tqd33Fo25jdtJtzt/tbioszX9Vv73kduVmuB35Z9xOH15ycwvdrk/hrMKAwmqFZoUN CsMW4ttAbpE7DEAehMJDrrN0TfN9zNUVO93VYo8bKv5vd7XwusJFff9qeM+tdFfz89zTxUH9fsJd Ldfrv+8qjOv/JRbiW8n1FMU1Fa+6y8iz3OUaio9q3vpcuOk68ndnMwubXJPWZ2XhLv2mNkNB7ZvC J11/4QV3uvBuDZ9XnD/pNuSOuaWFZteK77l73L5cvbu/sMA/ny5d1riI/zsaF6GmyV3TcKbryX3N LS/8e3cif80tKz3uliPM31T67XONWu5wfnq2ypfvspmkoQ/1e/FFNwJeFLrc/sJnXVfhV5W+P+uW aP4DhS1uIN+o8fa5jbl2D2sL44ojAPV4wa0H5Ga5nYVR15ef6/6jz7fRYJ+X65vvUt4q3fu0/HMK 0xXuUbhPYUzhLoUGhVUKyxTmFMLdTk5muDrFu0vpf7/Se620uCF97ylPc/2gicI0pUd7+QNKkytu Kfhbvs8Nej6fVPq0uYVefq66boWWwoua5qrbpLJGaPFyMBmoXHiZSEBlYiXkQmG+wlMqJ4sqMlEL L7kbXiZSQL4f0LzA+8ng3T7ckILWcaHV9WGFR7W+GytyUANa5ibIQQqQg8KwO43Qy6rJpeefyk55 keuFnGh7UfqXwYth/des8LSC8sU9pdAVvmXN9g/8X67vayz8XQ0XKHQr7FNYbfFU5lyvwoDCeoX2 8C9bp9Ab0lYAea5QWKSwxfJQmVG5dO6A4aDlZYc1bFPYo3BIodXKqFfYauE2CxssH+T9uOW9OMTP muxZaZEVQrvMIX2PwnaFTYYv3i8ajppvtkPDsVB2dszK32bxtoY02dNW37MKw5bPvFAW46PM7KzR CTrhYYUTCi6Ax3U45Jsd0fAxw2m11RdlDikss7KHjXegeZ3Vf7X9Qx7TYrzKt+m3fvPQYOUvDXyF XHg6PRrrkDUaPsBjUOGY4dVs6Xvs21rDqd5gxGTrEaN/ncF8hY0KT5ocPG40A71arJ7LAh+ylZbn YsvrUasr8jxvtFd6qi4LfAOdlhSCLC+0eAuNz8Bd6e4eVFD95OVth9VT9ZSbYTiBHmeMlw1Gs6ct /6cM/y7Dmfg/YP8XBjr6UNNkjxkOgNOFIMek+8MJ7nON9h8peNn3+J5S+LTlu8J4sN3orm1YdUh4 bzQcFhg99hsdQP8Bo9OCJM4Cq898e95vNFtv/FlgefL9vUazdVbmEuNJg+GSyIo7avAbCg9ZvEct TYN9W2q0qzf81hpvWgzX+Ybro7fBlbJLOXlvgiOg2+BSwC9rsdAZvhstvGzfZ9v7OuOBC5ApLln/ 93/3IZ+T/1XxfoD/tVAb/28dlCSMM+kbecmeDbKtt8LEpVuhMt9YA5UxAsf2yTlpBbWdCx0W8nmN Pa+J3yfmG9ylsOk2z8m3Stnnw1zFpM/Jt9zxW/FOv93R88Xw7uFi9XfQFyHmvmppU/U+J4BPp/Z6 6V6tv44FSvcE+/x7zu3eX4MLQO37/OkQ8uy+Slk3asqueb+FjzcmD28bf34McQZVeX+kmadHbdhk eS4OQHwrNJ0EsB5SqWsNuAdsXPVAwveGgAvmLQqzjU9zbq1j7tHwnF8UgfgUVsf4hadCmP+JwCuA f18UeEZeVOiyzcKGAJC/kv1nyPwxB0WcPFyNspXSxePUZfgyLtoj9151Wpquav5MLEpgs8JIaD9I X/Vv5NZ3n37z5Hnk9kye/hYZWRJpcEv7a7j1Hetv5GNtHrmBydN7fjaYbhgJoZ8/n0S2PVw0uBHB 86wGJq7dCt9T/3W9g/pv822ek28/qP7z8acleE+bXK/kue/mSZXXh6O+Kv18aFN+PfKNHzK/2Ul+ syw/0P+v9D/mRd6UyfcC/m0HzJUvM1gySZj+b5rke1NN/KaaeMuSb7XxJiunqeZ/7T/A0gCeT9Bj P5k8/317TvSmB1vjmYIpmIIpuCO458cD2fE7B6yTZJivPyJx3zT2kUEfYl4ca0nwsXr6B4iL/7BB +u8MsIaYoX/D3ptDEs+OWSVhfQFrq1jrQX/ybQn+94jH9fx3eG/nFEzBFEzBFEzBFPx/BD1TMAVT MAVTMAVTMAX/D6FzCqZgCqZgCqZgCqbgxwcVvzuRKj+83G8F8HsNmsT78vrwSggrvr7puvcTtpeC a+cN4Zv3mxyScN/LTQm+LvCn2ynhflesVcEP5b9L8OvAXiWs+/AuzgHL4xMS9oysk+ATjDz+kcKn Le5HFP6JBL8arEVhTQpnI1y2//BZ6rd4vy7el9HjBJ9G+BvB3+TfWX7wjfpTCfbYBkv75xL8kv9C 4f2W7z6rB3Dca89HJPgJYv/MMgn+gQ9K8DPiHcZjWva/lOjffNpwOhJolL1XwvrWaSsHuMFvBf41 37FykfZ1q9uWSXCBHw18Zdok+sWiLosk3qMDqDMa7DYcGiXcVYM6zjW432jKMxKR7xqJfqS/ZLyA b/rHQ/08zvusLNQZvvArjb+DRuPDFr7faEs8Qa9DEu84v2T0e8Li/wsJ64ID4T27T+HXJMjPNuP9 dsP3f4b/nsfI6x/a802Jd4K3W7mQrYNWFnBtknh+zyqJZ2Y1SvQLo99ao8T7HnlmSHPc1+P3l14N ZWebw74R1CffbWGd1Q8wpwbm3gbMf9/L2RtBJnxbRfh+a5PvN1lBm19tfH5ay/tdBchPfQyzFQH8 +ivAGe2PG99BF6z7Lg+QnVAYVl1xVIIP8cid16n23IfK+Q9z7J0yP9vwsDD/dgDv6wV40v5bmD8T AGcJZLMnSc//9wbgt5SuxV0KXVb+2wZou9gfBNmmH9oV2/8D/YbzC1qqoXL24AXzXTfdmDsdwOuX 7cHPOaf0r5yNdiKAp+l246nGzb0eoJLu9ZCfP39jr8kZ8noqhF7uUfcFBvQBX2zw5uSQqc7JnYph 5d+9twL2qOIMDIbeD3hrkIXcjhh6X77FScg9vseMznw/YzS6EPbQ5TvCHuAc9k6qfs4tDDKYR5+z w3ztcQ4H9iXs0RDnhDjDBXs/PyWh3f9jo+t5O68DsvMLVg501K9KaPvQgdC5N4zX77V0S6wN/KUE H1LoWOgglZM8+A29/LyG6Fd/x/L/g5CH9/9+O6RBe/G0RHloc7+i4W9L0N3JfktP018z2bpLgl87 6o52MWF1QlxteznwXfur3D8X309V6gedNm7lHQ7fPL2AU0HDb5gsv2E0fFa/f0Hro+099yXx52l4 ucU7dIy2/7zKc256OFcFPuA+vBx47vtI1Av9wO8aXqDZR4yP0012gRPqhzo9oyF00ofCnkj8z7qM 7qA/6PNaqENO+8fsN8T792fYm/fuUH9/BxdwwR7nj4nvvzJtAznos7zt14Oe/GPx+j5DPwFbYVGQ reyDoa6eR+iXtU/NYS8nzh6A//4Dpufw73rYh5nDvk3IP2j5pMWF7LUHO8nT718H2cnQllSuss+F etaeVUDZRnrItj/zBm2nNfAls3OxcP6NP3dg++1l25/jYLLt96D+iLLtz9v5G5Rt7G2HbOO8H8gX zvy5nWx7en0f2fb21RuB3zgzyJ/B1hdkG2cHQUaxtxny5MPbyLans8m2108/omz784r+BmUbZyVB tv15SWJnJt1Gtv1ZSnco2xnofdD0PNLOMjnmPnLlf7Yo0B6ylXss4OxmVUMRtoTqteJiiedP1MJ3 LHw7fkNbgkznQF+cKXO3ePswh/5rY6Cj56nKXG6J8QZ8L1tbGAttx+vBooQ9+GWL8y5rP38iwR7A 9z0W7g8y5W3dT1l8zTuvvMvOBTpl4E+3tTXIFsZDMw13+O+sN3nSch36u/eYXECH/5nhrWFO7dJM v2foA68a7UtWJvIaDrRHe8j9PfFnO/j6oF6ww/YFmng8zknlrOzc7ICHz+M/SRg/nTbc0EdDfpYH mmQDJiOQH+yZXmb6oj3EgT+EtxEeNn5YmG8P7RE60I9/joX03sbfn9DyvYG2uUfCN5wL4/5BiO/5 8hMS7JF/Y/+d0XiF5bHFwrOBprlt1m7KoQ34f9ut7SgeOaVf9j4J59w/aPQCnyHvkCE728HrpXLg D/pWz7+3jW/4jr7y72j49fDNj5VXm72iuif/YX3/S7NnwP/ZVobKuPdJAD3QB6BvVz2a7Q14Zc8E +cvGTY4aTA7WB73m0x+zsrRd5mbo88VwvpI/j+XXCy+4BaW73VButluY73YLi/Pc0vL8APDvzt3j HvB+2Z80f+3HXF1upVsC33D4l8NvnH7pCp0KHfYO//VWhTqFToUehQ6FRoUm+7eJfu63i+d9v6v9 2Z9UGFBYUPFbT/zVzS899UWfrdCucF/F7zz1N3/Bn03gAT76gMK7XWMFPukGCMWbbpBQmO7WE/yZ B+bf7s8xMCg8onWaNXEst0jrifMjtur/ednMQqdboLCs1OrGi591/dloNi33VlbKvTWxP/9V92bx JXcgN93NyDe6nRo+lW+bGNH4mxWGFR5WWKSwXKFNYVehM3tMww6FltyTbqXCg5rHeoUxhSuFh9z1 0ktuT3HaxPVik+Lf5Q4Ur2mdXtF6nND3r/v3Qa3HYP7eifFiv34fdYPlhfrvhsJXNZ8FFn5Q/111 TxeuZIXi19y54t3Z9NLNbFrxZydeL87KZhROOpd7S+nS6Xq1PgcLd8HXd6Kz4LJrhVVKz82utTBL abxJ46xU+Rp12wsLJl7X7225uxUWTawpPBqeS4e1fkMav8316f/79bkvd9G156+4ubmDSotNblv+ 6260NNPtzX994mr+5MTOfP/Ea1r+kbxkfVr+Pi13MDc9uyvflt2l4Qx8L653w8qL+YrjuMKswrSJ M4XZKh/DSsMtbn++IZuVf0HbRJPbqLCgsFdxfNH7J09XPM4oPKh8GSlsda/l57r/6nnVANByXvB6 eehdT2neD3n//BWKQ5/BLn2fpeHqcK6E2xv85+GDn6FNTi9fm7iZn+nOKf2fUHovkg+4MX2/Xrqi 7eFuT5fZSo955Z9Tmlxy25S/+8v3uUN2fsRruR5tBy+5Lblxt1/hoNZnjoaXSh9yxxUOKQx7OZhe A/imcuFlIgHIRAoqJx0VmaiFl9y3vUykoDIB2fG8nwwgCyurwepZgUK3ygrloAa0zO2QgxQgB5AX H6qsUi6VztfzV93c8sxsPuREeZ/Tdru0+NduRfZ/3HZtb7uK09x2VdjbyyXNd1Wguc8XuKE8pZOn g9YN9EG9laYHFbYr7FEYVTigAB5cUjigcEbhRm48e1TDEwonFe5VmJ0b1/zGJ95QeE3fReFBhXaF nIIDb27HjwrdE3oX6pWmt6FlhW4JrXLOPWWwQOFxhbkK8+0bwicUnszhDBznVhlsVOi3uH+o8IiF Q7kX3WKFJoVlCk8oPK6wyL4jfEphoUK9QrPBuMJ5hQUKlxTmKbyicFHhVOIHXzI/+Xn2viQ53+Fy jS/8PfZ+2ELzoc9Nq37PRgvBTmiXeH8K5sl+z2wrzvXxTKXn7H+PVN97t8zy6JV4NwfsVZw/hTEG 557R7zZLvOce+V+XeKfdOolnLqX/W8yWW23lbE3K6U6gx/73STx7jHOVqySepdQm8dxxlDNk9eoy PGAzwQ4ckHg2cIelHbZ8zxi0SDyvtMP+fUPi3SL1SZkob6XZRo2G7y6ja6/ZX50Sz8rqkngvfJvh hvBsQqdmiWdOrUt42C3xXCjYvpct7U2pviuizeKfk+ozg5sMz16Jc+gbEnp0Wv3XS/U9de1WL86v 84y+UfuH8cIfGx2HJN69UC/xXPlOy3e1xLuswIuj9u+4xHPB+i0uz9rak5TZYzjRR6ZV4p07TAta 7pV47h3i7bewWeL5hF32jL6Ksg9cMQZ+2eqwVuLdJEMGyy2vVySeCdhcwyPOsaOMRqNRi0R54plh nRa/w+hHmncndL9u+V2yeK9bmsvGyzNSfS8FzwNrlzinf1LiudZtVr9Biee6tUg8Y7vdyiNvePYa 41FfnLc8WQ7piLZscy0+H/B2m6U5k/DsmES5Ak12JnzrsvKR3wWLC96MJPgAGiTeQwHeoz0dkuqz E42vGLf7/C8Yjl+QeFbhOsubeKL98h6mtRLvMtpm8TGGHrK4bLNfkNjWG8NcRIXexJfyyDZXb3Wj fuiVKOOnJJ77qGNXP/fDvFoSXlBOWqT6HmjWjTKI+kAnvCJRLq5IPJOQbQO0GLdvHUlZ66Tq/is/ ZqS+Bn0gDyst3hcNL+p/6suNUjnbMeN81ymJZ76zHW2QqMvOG88oK73GZ8rg2xLbOunaLvEeoXaJ 5yd2JXxAHwW98R8k9G3IF/3EJom6AfGwnnbI8kM9Dkvsd6hTmiWuE7NdD9n3YQv7rL6M22FlgB+D lleXxLM2DyS877D/qMd+oxf6mQHDo1+iHm0O8f2c9i8n+LEtDEo8C5H0bpIoR8uN/vh2NHz3d8Jv l3j2do/NgWHu4rTEsyi/YHnvTOhAmT9lc4rs0wibEtyWSTxD/4ThxPXqpuTfFyXeA4W81yd1HJPY F1yWuA9xuwHP5vyCxLPjW2xedq1EmT5gvKeuPiHRHjkS0mBO0cvNFy3OOsNlm1Tf0QQ4JvEuoCOG O3i312hA/Qh6Dkm8owk8fi75NihRXthmOySeJ0qbjXbMWuNNp9V1zNLDlns5oRvqS3uM8kA7BHWF ftxt6fGd93OtsbjHpPr83RU2R3xJ4pmVXMNCvHqJ7azP6t0gUYdfsfhXJd4H125pv2j1bJF4Tzzy os5sS8rcJfFsUrTzPYYz+27qmnYrFzoMdcV+hcZQj0ofbfodc9f+vdH4c8bKJv3YL+D5vETbpcX4 T33UYThulXgfWavFfViiTYj3o2Fu3JfVaDzdLNXng3ZJPEv1DySe1cv23iPxPo51gYb+TPEDEvuq Nntn/47nIYm6sEvindi9EmWLdiNtNdoglCfq3EajMeOyfZhe8fU5bnLAttiZ5MN+k+V0SryLgjYk 8HpOolyQ3mwriA9ZW255rjTeH5Nb71RiX2r9uqflCol7P5ol2mzU4ZRTG7Ng3jmHtfhXLB74jHbQ LxVZxRonodKGqD9T3iRyWJHrHsMRNOM+A+r19VbeKYkyCX6ekNgXoK+HrmdfQ5ueNGqVeF/kCol3 NdD+Wp6883lVEq6QaPfAjqEOAX47E/ol9lNFRg/JrfehLU/qw7pT39FugN64JlFHnpB4Vjr6hbqE x8jjDyWMHWAjqZ7LZkhYaxuRKMffCHPnHn/kB3vmzbAG5PNdleDCts12z7aZjgfTkPzk+IA0aUne aRuTjyuk+g5SthPU7ekEF3zfInH8Dh6YXZ3NN3lAn9Ur8Y7ENonyXG+43DB+sU3BtjmZ0O2NsE7h 92n0Jfh22/t1iW2R+pzyyP7mkNF10NJclGgP05aibdoucW/SuSTvVVZv9K20W3stD8RDvwd5R7uA nPDMB+S5R+JYb5NU686NEm0J2sLk7WaJ7X5Uoj27Q6LuapGKTVU1HgDenENZndCM9OuUKBu0Z1qS PNqTuKP2/4DEMQHKxLhxvcQz1LcYfqjjVvtHWgGXfol6fyDhEfoF9M0XJPY1+M5xNfJcIdX39bF/ QhzI0jLDEXlcNrwvS+xjem3dCOn2SbRV+yXa+JRr6sqxmvfuSf7R1qE+pb4g3/id8x8tyXOX0Qcy kNoMvRL3aHL+iTYY5T4de7B/p91KfncajZgP54E4tqWuZRuvt7RLJPaj1DkI0VYh70csPtrooSTe AYnnkOP7qMT72BmnMwHahLRxiAvp3CxRrpmG/S3z6pXYh5P+K5L41H3tNWWzD25L0q2q4Vdn8t4g 1bZFbV7pfGRXAsS3VWJfe1Wq2+Kg8WmH4ftZiXpyl8Sz5qnf2G44f0l9USfxbirQ5VmJdxs8K9Vz lcBlu8Q7Djg2bbXv3RLHHB1GU/7Hd8jtC4ZTQ0KvOvsGW2a3xDkihsjb5ohzbKdnJfp1tRue7Neo 19dKbFP99q1bop7jnIrFx5qv10ds5+l4gXPStKm7kny6k7Aj+b4uhH4OhjRM7SrqS7Rj9PHoJzZa OthP6BfQV8Je45zVaalu82gz4xL7Z/KFvOEYtEPiWOOoxHlU0mOTVLe1gSQNxxLrLA3sU7ZD6qt6 ifdG1Bvv+Qy+rpJoq+IbbTLaZSsltql07Lff8ue8I8uD/j8p1fcxbDQbCLRWe8jbTM0S755D+u2G 5xqDnVY30PIzRouNEscrnOtEvM1G+4sS7+6gfUIdut5o2Stxf3wqT5ybrrW5WK8WiTqsPvnfK1Ef cx6rvuYb1yLaJNqBCNG+llrIvnGRxHFZrd6hPkptQ+oi6iPWh7qW+iydB2CdOpI82M9QFyEcrcm7 Lexx9PvjOCcOe2md8Rr4Qceh394vcb6c8kicwKczEvs+5HPY8qCOT23MdotLuqT0QNmDCT9IL9oT TM92zn6a+mkymrDs1JZmn0Zdko65aDeQ/syXvCE/6pNvpoO87A5L1FWU2YEkDtsB7QrqV/b/af/F +fK0fs0S765cl5TRmeTHsF6q20/ab3KtqFviuJZ9O3Ubx1mQi13Gt7MS5Qs6r87wRr1fTnj3huU3 bPWHDbKyJl/aQuQb6d6X8IXzdIclzlVQLzRKHP+210CXxDtZWw1Xjnc2G/057kA+0BmYizhj9aBu pvyssTikJ9oExybU8eck3hfD/pE6jvZ1t0Qflj7jHe1IygflZbXE9bP1Etf4Vku8G4j0YzrO+6yT OI+Yyh3bF8qHvTNyG7ggce3msERd0iRRTqFTYLMftZCywvbGNgxYnvC90/Ln2i1oDjlB33zK6DJi zxcMiAPHVk0S58O2Wp17jYeHkvjd9nw4oT3nSkAXjvOG7B/lpEGq11/Y9mmPpnYZn9MxPMtOdS7n JNhmACstrJPof9NgPIY9t8L+c85lhcVle19l4T6JbabJ6jVgIfuRdPzWnqSlHUB5Ph/i+LthmiSO R3Zb2jVhn63/dlbiOu0+qb7PuEdin8Q+kHoMdi/shD0S15VAG85ToR7QIWdsT3STVNvI7O8vShyn 4J22QNr3nI+08XcX1gD3V+f+mQQ/DcyTvi0uf0Kf54c+EpB/Wt//rYSzuYHPSNjf6OHxkK7yXm97 Go+FvYvMw+9lRKjfcF56ZS5wJID3yTHfkgrkAg14tzXP7s0/qOFrYf+p34PqAo4eT60HbUPsI87r 2DEH/yHlZbYgQO5N28sKOl8L+ebPhjr7vaxKA++ngr2m++37HttXr2Xdbh9/ZQ//j+qbslLufP8+ xhRvyuT796HnJkL4PffvvyXVvinYX/yn5j/y57bf+na+KY/L7ffvt1pa0ONuoxHm7Bbr9y9L8FXB XvXjia9KX7Wvyu328lf28U+XH80/ReubYd/ye2TyPfyQtZo9/H5v/X0S9/Bflzvfw/+aybXiVeWf 8swd+KcofW7Zw/9iqKenNfYyQh4Qso+EroOOAR36rc2ovOX+lwL4oDzJHwx7vXOvmh+R0gr7/HPY c789tNe88jenuOdRf9TjIYm+MBeCrxBw9iCBhjw7n6HnXYNU9hfVnunvz++fb2fvo9zj4W6B9L4G f2/AkSRtvcVfmJzbP9/ynB/f07Cq3LqavG9Ul1cFnUl5tbAwybO+Op2/72C8On9/t0Kn3HpPxEWp unfD3y+wMImX/K+FqvsACPeE9FV3fNSUVflXk3d6Z4PnTWcoo2i4lVnP3CRgdS+rjJd3W0jAuGuu PaveKTyioeqT8liAgtpwZW3z5WNJmuP2zvmB+tAXoI1MVpcK/WpgQvXixMmgo/DM0NN5ZsgXvpgA 3wddDuDng43GvBcj/3K1fFfk/Nzkcn6LjI9EXCvyd0wq90D4OHU/pFy3/gBy3XMbma6bPL9Min+U fbh41n20tDSrL9W5jxYvuFfLO9yXy6PuRPmC6ssm95XSmPu8/LQbK37T3Sx9271a2ujGyt9xY6X9 +v1nNGzS91GFL7mR8hX3UZmjdkWf+2h5j3teYaR8zX1Zlun7qewXZaXqs1natyzV9/P677zG+Zbq 8vfr95zqw6c0/KfuVXmf+x9a5oiHxxRWuLbipeyDpVeyZeUh11buze71cE7/FbTM+zWvVvf58qAv b6T8SFYqH9ByZ2p+omXtU5vnYU13TZ+/4g4QijuyVSXVscVzrlXrPSa/pHk9ovbeo1qfKyqTyzQc 0v57unu+tM73618p/aaWM+4+X9ql8UtKg5Wa1xUta47S7puKz8fct0r9isO39PkntS4/5f5C6xtw A91aNK9PaL6vall7tFylkSzQMptca+m3sg+XRxSnZo17ROM1aLzTmmZa1lH6psKT+v6s0fuw6y6P aL7XtF6nNLxqoeZbuph1lDfo+3nl5bc0/Lh7SZ/byguy5VrvtnK/xS8pzedreFHrMk3D3cr33e7L yuuvlB9xLykf2spns2XK5zat41j52+73y3sVny9nHyvvyD4kD7iD5YLKRn9WKq1ybaXHtD7NWuaz Gn+N+83yqqy+/FdK82uutbgvW1V8VWl9RuP0afkv6/dRrfOQ1vlNd7E8V+v8hH7flC0rPaE0fdYd KGn70brUl9q0vI8rXFP+H3YnVPa+XDqs+PyU0uQTmv6Awri+v0/D09mHS1/S+r6p+DQrrq36fUzL fNvgosJuLfuC0v+XNbzi1ihPxkoPu5dKD2TLS2v1uT37lcKfaZ0e13LmaRtxypN5+n1E28irbqT0 GZXFenei+EdKq+f0+09rW3lCZW2BwgzNV59Lu7JfLH7T+zqOBhsENrdfq33CYI/ZUT2hT/dnsEvw JcfZBbSfJ7O7vp994M//ePQOweYccEfTO2JXuB8N0M94/zu1jUqo481Amyo4HsDfkwQbC2PPrmBT 5XcG/LxtNtdo1Wr2Mvigtpn3B7vP7ErQd8Rs6pnB/sppPwY/U6yhe6gzu+GowVzLe47hPSDV6zOT wYDhCnhP6DtB/wLmjpuDbe/te5xnAB/Anwk6HftBvc8c9qX9XQWrH8Yv/jwL2JPwC3wj9HF+7Ga2 wQ8jO++IDPwwMvsO1NvzHe1KeeuwpjJmIWBp8lyycI6FD4fxYU7tldx/Mxn4itYFdUb/rnKT17xy ijv8GnOg08Ywjshp+VhzwrjV+4uWDIrB1s8Dr46AF/wRM+QBOwbyBhtYxxa5LUH+/L31oMOB0AYy jGuVht6vE3Vclt5RXLrXbdRwq+o03F+78zbwhgHfmf7lUp87o+ElhQsKewHa5+wr7XUNpcWuo/iM 26FxdhL0fy9A/3dpvPXFGW5D6SGNF/PEnbqDhSOuXnEbUnhZ358tDLinS+PuaYuzMYFQj0+6Bv/c 4lYVlrhG+EbCP6vyv91tKre49bhbGfcb4y5d7/tXc4dtcR7um8zuwz3M/g5bu3PZ32MLgJ+iyx7I fS7ch+zvNdUwP80t93fbumwZQn9fM3wgT9i9z3bHL+579vf4fje51xk+kFqGv2M5+G6Gu5rtjl7F aYO/t/mFeC+zxj0JfP19zDpO9GXYfdL+LmngDb9K5BHueZ7p/R2Bs6bzdzy3avrzCpfdrMIFd1rz XOrzs7Lszuc1qI//h7uBGyauFV6YOJ7bOHHU3/f7WeXfZaXdfI/bA/nXlA6vuSc1j5OoX/63/f3O J/0d0kirIfBUXOYVxhTgozld6bTZ+32O+rx6tMxxt0zzux93TGt4opLvvVqfaQEf5OvcW/uyA24U AH/N/H/x95nuzj/u6m6BE24OQNPUK0xX2K6wIUx7vHW3giZ967zCnNy9qpTdW3cpzHDuzcMKBy0e oEmhN3kHPOFltMe9Uvqa6yx0usH8625ZbrbS5UV3uvRzWr+vKyid8pfd4kKDfh/V500KbW5n9jXF e5GblzvhFuWOunnZfrdTebepuNm1yGIv917erR0dASBdYbvS9hnN9z63rPjX/u7itaUPuSPwAYUf Jnz+vA9eja+d908bNZ9Q8wstKDU9wH/uqGuDv6YH3OvdP/EaAH6k8KVDWu+Par6H8Ev1/oU3or+p 92vTfOH7WfHJg9+g+Q4Wn3TrvT8p8AO0Bz9RlYVtuYOqj5C/+bjCv9X7BCJPpKfv6aKJNcARdZLq ud10PYv9Bede0W80hb68sqbEdR/OK6+xb2ct7lmzG7h3Cnmelrj/juuqrRLXZVebnbHF7IsNUpk/ rqzdpeve7Oe5bsB1MX5D3DqJ+5B3Wt5cL+L8ckOSJ+eLua5sa/F+/hLjU8w1Y468PknPueTa/SSk Eeehue5DvLmnimsCXRZiju5AkvdJietax+zfEaPVaYl7xbi2k+5l4bop+Xm7fS/831LzjfWinHTV lHdK4tp8i33HHO92+79N4t6UEYn7zsHv54zH3UnenRLn4lfb/20Jrbn2wDWhDQnPuM6F/+n6HWm/ RaIsNkrci4JvByXuYWNb4B7crqQM8H1VEnKtmetMXB/BvCxkD/Mfw8a7s0Yr0pNlcM9+W4I/18jw nevfVyXuy+M6VJdEvz2uOaV7AcjPdP2Lzz0S1xwpk2xfXNembuC/cYn7ZTZKXJ/daXU8JNEXA+mG krxIR0JXUgbllTzpSv6vluiz1F6TD9cyuWbGPT9sO+k+s7YEOqV63a1JYhsgn5uMN1z7o57jOvJK ieu2bBegxWGJ8ojyMRc4LNX7ztJ9Qxtr6o+06T7Mydar2ySuyZPXLxsgz357bpO4bxDvZyTuPeN+ Bq5rc88B9UWvRN9W7s8cmQT2JSHWMcaM/2MSdUWzRL3M/QBdEtsP0o1aHmwH3D/WJ1GXpmurXC/t lOq1U/xL99402XObVO9vapQ437jMaLE3jH/8ugzmL79tdEE73mp1Yci9M/UWcv2c+zBWSPXem1Qv r0rwJg+JP9tDup7cKFHG0z0pqU5P+yLqSrZ9tpm0n+qqSc88bD01A00gO5gDvShRX120uIcTng9Z 2CVxTZV0wPNOiW2be/baJa7FpjroqNGb7R/hbgn9754wN+DTAR/uIQGvxixsl7jXhWtsyO9tK+e4 RL0yaHPP9Jmlnu60Z7SNqxL3JnJPU4PEfZLH7dsxw6lP4l62c0Yj0H1U4j459F2vJHXssHgtVv8u yw/Pp6Val5PGxyX6C5KesAvYH51L4IjRZJtEnYB8hiX6q24ywH/oHrQ/yDr9uSjD6+yf2Ub+eUPy vMXSdFt+LGObfd9nZW8x+qay3iRxzx71/hajM/ubHRL3WHEfo/Vp3vd0XGK7416EbouHPPsltocT Um3PdCd5p/0J7SjqRqbvldh2aWeukbiHIdV1qS1BvtMOZv0hE7sNL+o8hrTPWR7T8B9odtL+w/6C 3Owxmm+T2E93Sdx7DNoek2ij9UncD1nbL7NfJb1ajLfpfjfWi30T7VumpVw0SNz3RNupW+KeZNQB 7e6mRPuZsp7Skv0udRx1eotEnQ+afkfiXrg1ST47pNreSMcQ5DX1Qa3eba+Ju1ZiP1e7p6c9yYP9 AHA+npSf+tkzLvf4HEzy6pbYfnusPrQ3uK+S/RPjMi33iVE/sx60Vch3hOy/KNuHpdpHh2OmlH7p +Kxb4h6b7uT/6uSdbQE4Lk/+sy58Z1riw76sSWK/SXmiXUZaAh/uI6ffGPyN0Mb2SLSHD0lsA8jv mJW30d6hs8eM/ycTnGxuvNJOwKtTCQ6pXqm1WznW4Xg21bM9yXNtH03dQv7Rhkh1SpdUy1yaN/+l Y7+6JK/0X2p3UNZqbfD0mW2rSyYfFxNXjltSnco9kZSzliSPtB11Jv9r61hbN7x/tAa/1A5HSHts v8TxTS3u3TXvad9N3NL5FMaDTEA+XjF8IV+QKehC2M3YwwQbcqvEtsb0GOtDTv/Eykd86PadEn3N 4L9Bn9HnJLYnth3ERZvgWBz/PyVxn2/q08X01IsdVu4W+8e9qfjH8xC2JWXTPmA/m9rrzIvj7+cl +qZstPT00XjO0jyfpGFfR/n/TML3geQ//qFfarJ8OBfBNsG0vRL7tW0WH2GdfUO6RRLnhZD+0xJ9 HtdI9IvstfraPtuM806cw+hOcKQcdUv0B0vnVpgXZYy6ujOpC9vjkFS3dcCYRF1IHjYkZTKv1K+w Mwlba8qkrqZNS5p1S5zfSn3v1oa1Pm/vwlcGNvpp+0+fEeANmxxtgXrwukR91m95H5Nq2QEN91p6 /IdcQtZ3SfTl3SBRr0BGYdu/LtE+43gS679YN+L+7vMG9BfFGtopiecunJA4XqR+wHOjRL+atkm+ NUr1OLTJ3pdLnGdYLtVnCtTLrT6S6XwTx+P4ttLSXZXY3rok+kgAz0Gj/S6J+q/V/uMdNmevxPvH T0rlbI6Kz02H8Yx9454kH8oB0twwejLNm1ZOS/Kd44R1htfmBO/zVi7yO2PpwGPoiIPGm4sSfSg5 NgWfOedBG5bjFL4PSmw3fckz2xrp12t4bknya02Adnh78szvqyXO23HOYpVEu7lRoh3JuZueJB/O dXVI1Gnpv5US5Ynp03kCjqPwDD3EuRDOfyD9EvsHWCTVe67T8RD74tTmTufS2NcRT9Y3nYdI39N+ MsU77SNSOy8d83Qm35l3Zw09U7zak3fCmuSZeh4yaD4xfo/1DAnyhz4b42/I4JhBq0Tf2E1WBn1z IGsYZ0M/XZJqf1biRH0Omu63PIDDSYnzZrT92L+clOgLeNTiw1Y9LNH/pTUpg3O61N2tSb7kRZ99 w/jqmsR5LMQdD2vivj6HJM5rkv/NUs3TZuMBedcUaIT97LeMdzlmSe2wdKyZ2nFsg9Tl6Zi5dhxB GzW1pzmOoJ3TncRrlmo/UvYvlKfW5B9DjnlSOSXe6XiXckddQBzSOcBOiT6DaXtP53JSe59xu2p4 ndq/6dioXeJZGSy7R6rbCfVLo1S3Sc6TcHzI/p1the+kf7NEu61Xou7gGK4tya9Oqn1c2fdz7o12 yVqJcytc+yJ/d0kcLwG/vTV0ouykssa52tNSvdbHMAXSiTLdKXHugWOEtiQO68+y8A92O9eg0nEP ecQy2q0+XBc6Z3hfkNh2t0jUB4AjEuWE8k+ZfVmiPYl00F1bJc4lrDXcNie85HwY6YW5EtgS7INZ Ntcm2B/Qnj1quB+VaDueTPjLdY5TEvvstVaPzRLtsuMS5y04B8m1xR0Sx/qpXk3lnm0xHa8eM7zo a/5Fgy6JZ9EBz0OWL+P0Wr74flCiz9U6w2Wd0Rp1GbQ8NsutZy6S172WB2zIswZHJdoaqONoUi/Q j36anH89YHkftvwHJLYrjrfS+fR0bEEdxrEKx4Gcs+BYfG2SluMjQksSd1Ci/yDbPvvnQYnzP7Tb yHPiwDk7zg2Rz9QxpN16i881OJ67Qj0D4PgK7XJEqtelCCcl9rOnLCStB6V6XoRlr5JomwGnBom6 DXHQXx6xcvdZOCpxvr89ibvCwoakDJZTuwcDNBqW2B+xP4PMHJe4nsJxM+fR10k804P5H5WoT2gX 1obpGCXtyxmn0fAmNEn1mIbv1PkHDCe8HzLcOo2HhyWu/1BWBowf6yTq2Q6rW7vE+8o4Dzcq1fNU nKPjuJl9JO0s6hzgXidxbEW9XWtrpvP/5A35SBuW86Ush+2s1manLqidu2I7o32Rzo+yn19fU36j VPt4Uw/XS1xTbJDYDzZIHDM0SPSN/7/sfQt4VVeV8D6Pe7Nzc3OTwfQFxKQlQKFJLpRHi+QBeUEx A8hk8qfx/pHGa4xpCIEGIkJKESiNQCmCfdDQRoyImMkgpnyIGabFSIsQKwIiAlYGKtTSd6xI7z1n 1j53rex9L2jxH2e++f/57/32WeexH2uvvV77cfahdhV2p5zLd0lFEP1Q6oNSf7Wcy/27KrAsijub S1+6nEubWKbkRfaJbOEeLveUCWDbER9R25NeV/0spU2cOTuRJ8mjoMFybH/yOeZi/170D19TaFYn 84kaF2pUyiH+ID+Q+vz1SnriBXWchWSvHNP9K4/0mUV+J5Q8xPUppA/2gZw9M5/lA2MTDq7LsZ3o vqjvN7gc46L+HvkG5E+JcsjGUAjiOqblXO6vJHQh2SR1TKOSD6yPH9DXIo3gP9pPg/qyTVzuh0z6 jNYlXeXRPjD1aVYqdCG5ErzVrrTDeaTVq1yOR5H9F9c9XMqlyE/o3V4s4ySXvCHSiLElWh9xgss9 TEXdhX3fjfAZLv0tWrdDPtJqLscSGrA8QYcAl9+/Iz4gnUfjB8Tbqt5R9bs6Zkx2QbXldVzOL5FM B5FeK7kcUxa+8C6sD/FiDY/uczVy+W1RGsckX6CQSxtE/ED6v5zLtU2qn0X6qw7bncpT9VoDl/vJ NHHppwt7RfaHZK1BSUv9G1oPQviqeat9k4VKHHXtimpfyecjeqv9JqqHuo5I9XtJr5POp3PSFTTW SvqklUv/UG1voh/ZgWMKzXq4XKcg4j8b03YN17mmfku9cq32H+cqcZuvE6daSVvGZR+X1sw1Iz57 MZCfI/LdwuX+VBu45FuSY5GXOhdA+Iv23IppA1z28Uhmqf0FPs9wuVcoyQTRm+rVyuVeByRHTUrc 2H4Y0UvVmdRnJ74inhD3hH6q5HIP9/VYJo3J0HpVVYeqIcCvXT9Iz+bE3CP+EHmJ91hfRzyFnqZx XkE7oUuFj3UQ20f0d05h3BNczkmQXDRwORZ0QAk0pnOAS7+E1jzRelmRp+iLbOeSPwV/CBuyk8s1 UDSPLXQwjZ2r468buVwrRfJDdFPHLiu49Ffm8Gj/lKDqm1Zj+6tpC7m0m6QvSFaXcqlr1fGQWgWq YznqOCL5JJ38Wt1yEGnyIpf753VyqSurkHbkS5/lUufMR7qTn7dXoRPx5V4u+4g07k7xRD409rGd Sxncw+WcQR220VJsT9Ee07i03TRuRLxPekqVq7Vc2o1GLvvmJLtBJS35KOr4UxWPli/SwySXs5X8 qZ9H8xWkiwVNaNykWmmLSi77bFSGOt5IYyjk+wWV/JuQFqRjqrjsV/UoeRzj0hYf45IHNnDpZ1C5 ap9RyKSQmW5+7XpcdTyP1ppVI62XcrkXb5USv51H2xXS28RrfVyOCfdhHpu4HA8j+ySereHSVpK+ pLEsUSat6/s2j/DbPgWP2H7O9UItl/xHYzhU1lwu14eL8RfSIU1Kux7DMr/FZX/4BNK8Emm6BGlA +FFb1WJ8fM8xaj/3FVzKJ80F0PiHOq68gsu1fUu53BOT0tCatWYu/UayUbFjEzQ+ETtOsQbzaeVS V1VifXowCJ28lUs92YN1F+lJ1+zicl0y2chGLvmLAsks7d1Ick628RSX49PkJ4kyZyJePVzKNbXf AazHLi77DjRmswbpJXiqgsv5xiCX65QruNTZpIsoEH/StcAnwGV/lXSPiDcb24L6th1cygb1rTci vku41CdruVzTuF4pk8b/6rncU13I8mtYJvlAsX57EPMq43LOqQXvPyDxdd4h/g22rciT+h8k229F 8nPWs+7DdDRGrq6RonY/weUaVhonIP1Zgfdo3J1oSXaO7O0xLPu0Uhd1DIJsahWXvE++H9F0P5d7 kIs0V3h0P/tDHtFLB3n0nnZqfzqg3BM+zTke/Z4I+Q6NXI6d1SEtCdZjGx3mUibE/FcX4kL8SL6a oMFRfn3eIl+DbGYNl2s2SGeKMvZi3NM82geOHa8mnUhtR32thVx+r0Q8W8nl3qIruRzPUmVWHUcS 5dOcO419C3xmYzsKvU/jq+QTCXrQmCKtMaJ+G40tqXO9ZGuobFpHMJfLNbxkmxq49HsEHie59DlO YV0ovUij9k2RH5z9Rmh8UPidM7nkSdG+3+Ryz1jy++h9mV4uxwPF8208es78IpfvFP0iQgONxqjb udRzypw47e/hzKOK8M61e4UM7CEyVe4NQ3vjiD17nID71dD1wB4i91ybn7UVA/C6fbPce0Tss+ME ilvJB/bBEfvrRO2bczYaPyGXzr4nZZHAlL1RHLpc/Ji6TYupW1NkrxYnlCEOeH3DdbtVqVsAA8UN RMp08g389XVjR2IC6Sg6P6LkQeWOjcF3bHQcNoFHxrwgaLdE8hmIewveE3GGI5/9Pd6/iCGPO9+I dt7P7wdcmUzr4AD8KvbTFfuHiX3QxbeInX3Hzkbea3fkWbSBFaE/+xnA33LnW+LO/nxi7x3gd60U 34UvjMiQ+Ca29ike2YOt6S8E/8c8FyEU4RMnwLmzD8Q7ElJw6uVT6CPOlf3qouj8N4zn1CF2/OO/ KijzadfgeyPBG3Puvc79/4xwo+XGxrse/d/6/+G/U/ifxn//oXIpn2H/yfX9f6U9/pZ6W9hK0Uci 2xqKBOec0opz4QOKvSlF324vj/iC4voBDG1cvgsnfLmDqJMf5REbLsZH5vFIn3oBj+x7+SSma+dy Hbw4F75obmRf2IiPajKt0wQf3biZNUFo5D72musPbDIEv+sf2EVnj5MwBLFPymTWZeayPmd/lDfZ KLGfyMDeJz/DPUrE/h/l7BSEUa5WJ/0oJw+xJwrthxIT4hpZwNlPBfdEcfY0waDfynxOmZFvxu/H vUv2m99hB8X+IWKfEvd32Xo4b3BXs/KBvWYyWLPJ9CyoX7UxiO2A0AV1W+N6g9WKPSdcNZHvqbte h/LE/hi5rNb5xnk3wD+yXfpeNndg/4tf4F4VECLfeba76XvsTh5iXwzcEyM2ON9hF9+6pm9qi70t MOg32xvpu+r6rfYVsU+Gftb+UOx34Xw//RW7A+p2GOp2H9StEeq10fl+fMbAe460FqkW2/NNbGda u0L9LOqPVnM5R6KOJ4pzGusKKs9ozKtaiRvgcs6f5jsoXi3eE3nROF9tTF5BBc7lcuyhVokTm5bi XS+PRuW5SotqJU1QSaPOx9TyaBqo4380BtoYcy92zbAaR53voX7mGi77o6LfKvrooh9H43xVCMW8 Ma3nF2PhwrdtxXPRnk9h20Ffw9EHpYjLTi770jROSGN6S5W2qONy3reCy3lVmrciOlN9BH7nEIp+ qBjL7ePRc/T0TnATl3PFr/PImI/Qd2KsSvDjbi7HlWlcRfSfRZ+CxmpEP2QDl2sIRH6bsAzs6zv7 4+3nco0+jaXgWM7At2rruJyPOIC03Maj95Cg/v9+LvvuJ7mcU1qJdHpRaUsxDhHgcjxIwB080o+m NUSirEJ8fpRLfiD60BgU5XGCy3l+OqdA7yDTeArxMq0ho/dTRZmCtwQfPYU0beVybpnGx0X95nM5 7ncUcVmPZdF6ghYu+V/UncZ512MZq7mc/9yI+GzictyiC+PRNY1v7uHR71CTHJIc09gcjRWL+2Lt f6VCuybZ3gPvzdO4G81bE2+0cDlXJZ7PUeKSPNYq8Sh9C4+eO6nHeyQ71VyOpVP+Iq+DXOqleqVu qq6pVgKNK9Uo15SWzlX8qV40p3uQR6+VpHlK4jcRn9YDEK1oLJjybcI26eByHrucS71K9C3H9qT5 T5IlGpeu4HKcawOX3xcnejcobRtQaEFzybO5XBMm8BDraUj+z/FoG3aeyz1BdnE59tjIo8feya7g PUc/CHze4dHr2+quc63CSi7tI8URZZVxyct0f6eSdheXY88qz4vrB3n02oxaLu0E2T51DqSKS52l xqnkUr5F/l1crougeyqOpOsrFJxJf5MdId1GcwoqbdX36Sg0KOfEq6odbIwJlF99TN7En1Q3smWN Sr60bot4eklM3DolX6J7s/K8RklDcUif0Lt5tVzKaHNMGU08+r0nlXdIr9K7WmRHaEyWZEHQWvRn X+FSHsU7f6sR32NKXOIh4dsLeSedT+lb8FrQheaGSJeRjSHd2Iz1O4DlCltRifnM5FKu9/HoOeiG mHPSjyrfq4HkneitPquMyatRoXes3FE+5BtSe9XExKuPOQ9yKVNBfi3+FCgetU29kneQR+NIepny 7FTyrVHSEY+r9af8ab6qjks+O6/U76RSbguX70KJ+C9yyfcn8Z6Q4dg1seVcyrHIQ11nSXNKNO9B NpDevxblrYPwuEJHkuUn8Bm9+9jCo99tofkYEZfWqIu+J63124r5kp4Rz1ZjnuIZ2XvyYehda6rz cwre38T6bEU8Be8KXbUH47RxKb80X0h9BLVf/DyX+mk9l3Otqt8j0hzg0Xqa/GPyAdZzORddx+V+ v+RXkt0iHUI6Q7VXFOq51PVLlEA6n9qyQcm3gUfvn0Q6XvjMN/OIb92I4xIiDvUfOxAH8sFFWwn5 pPlK4lWBj5iHpPkvcW8/li3mfru49GH28gH5cdbvHsXyqb9DvP4Ol/4k+TkBLvcSpPm+E/z6+9iJ uOVcfh+QbDT1Vct49H5D9I7SK1yuFSDdQ+/BiDLP8ggvBbj072gtsYjbq+Cr2jbVx3uTy/4I7RVJ fFiJdW9S0jdw+e34VzCPPqRFLZb/Ktatl8tvSAkfqJNL34TkRfBfD5ffaRR2Q9gLepfhDS558RiX fRzShxu53FuH7m3ikvfoXdLVXK7JUu13I5fzwKQzxXmpUm9Ko66lo3Pym4PKfdIN6rO5Mekobex9 ulelnKt9/2olv2ou37moUkLsvBHJLukVsg+qTVNtKOFTwaN9vXolLrVhjZKuXsmf6Ej4q34j0Ybk qwbbfT/SuobL74A1crkGieRf+K3fiMmPcHiGS91D+o/6Y4J3aL3zi1yuza3H642Igzjfy+U3mMX5 PoSqzSQ7vk/Jj/oM1IZvctnPI/93bkyg/gLlTTg1cdm/pWvVx1moxKX2oHNqc6Iz9RupHa7nYzTF lB/rt5B/UxtTlhqP4hJfqWlU/lkSU0a9El+VwzoezZ+qHrtevVU/XeVV4geyRyofBmPKVPmK8CGd TvErlec0lkVrguhc3a9O4CR0Gu3XoNKa+kk0DkB2WMRfg89oHXsrl986pnquUdKLMumdzN1crnNR 17qQ79+l0Iz6SuQrVvLod2np/R8ar6Q1o8STRNeA0q71Sh6qf0p6qUq5T/qtWaEN4SrgTB6t04hv yN8TdBN+WC8Gej+Bwkwu/RahP57hcm+2Ti5tuKoTyc+ifoyAp7hc60XjLYeVOm7gch3UaS7HJGkN E9lP6uvRvmLC9+jh0naTHqV+F/nOAbwn/BsxHtHOpT+/Bss+h+kvIg4VXO7NQrKj+to0lrSQS3/w GJf7rZKe6eHR62BjA/WNKF/aN0/UfSuX79n0cbkOt5XLtbiVXPIS9QNrudxbkfSaoMUeDKRnq3j0 el811F7nnirnpCPr/8zzxph8XuARv78bz1/g0td4ikv7R7SoRHrvwtDOpQ0X9RV8Ru+OietXEb6C tAoo93sRhzmI12FMP5VLXUDyR3JC9SJ7Q2PXxINL8Zr0VQuX+9bS+lJai7tUeb5WSdOg5EX6iXTK EiUd+e60zreZR79/SWuESc+t5dH8QO/+NyvpSc8QHhSHdBTxNdWzicuxjiVK3sS3ZJvI9pJ80L7V VDbpoqASj/JRx3WalLxbMR8aD1LHHYku9P4E2RZVZ59AGnVxuc55O4YujHeAy3Xer3A55k39Ohpn IZmmPoFq5wXP7VaC8H0E71I/TB0bo0B9cLUMyluVH9W+km6huqnj20InHlboUMtlfz3Wh7qeX1XF 5fssor02Km24jcv3ZQWtRN9+H5f7Iu/FNtrL5bd1qR3pPYdTXK4Xbsb8urBsah/yO2hujcqnfhm9 E6m2P/Eg4UyyQ++AibY8yGV/TbRVBb92/2WSefJLVb0W4NKOk/4Uz8p59DtcNcr9OiVNnQJp3oN0 UrmCU4BHvxtNbRJQQhmX87WUTyWX841zlLxEmMnlOuFdXL432YDn6vgSjTepekK1f+R/LeRyrJ/4 q4rLvvlaLnX29Wiq+skU1HGSANJLWRc0MF+AQazJcPq+DUqcKv4X1xJFrQv9M4Geq9/1+3NxBq7f uTYtrQMlGlzvORsXCR+X//Vwizqv5despXK+kfoX1lpFfVfQjcGL617cCsTA0v7G4cpfF254DZQv Jp7vOvc9Cvy4IGi58b8gZHHZ/5nNI+tDhb5rlt8nFbxO5wNwFHfkf2B9Mpe859Sx4dpvXDrruiuj 44vgfOPyFS73JzmsXAvdETtW8t85TLiB4Mcg9FOLOYrN15PZNqOKbTPvYXPN7WyGq5IdMyezz7uq 2ALXIrZBBPNtlmtuY3XuYWxGXBdb4n6XHYubDXEPsy6zna0Va6ri/Gy4q5SNdZ2A+2KNVTubYR6C 0M8ums2RtVB6OZup38buEt9cMlsgnVgr1Qw2L5mVwb2lcK/O5WaLzEFskchDP8pmxy1gAbE+KhaK tMa7rFRfzfrigo7+ZdpoI11rZI3aEG2wkc6eYE/o7frdhs84ZDzPeuDuMG2kNlgbh0eIpV3WFuuj dUsfrX2S/RTujXOeSDgSr5xrdtBJNU4bMXB3HJTyIyhnoXHECGiXmKVdhHBJY5qhebRh7G44erR+ +F/SOPw/BPg5rV9n4q8l6dA7BcSfMB5iHexZNpOVsa+yp+D/Ifw/0Eq0DHZJGzJwpWs6s7U52hjl OZ1t1/+oDddGsj8Y8YBVv3FI26Gl6C8YAeN7cP2R9i+A7WT9UX01YPBNqC1QS7/CduideqfR7pS7 COp2CWh1yEiP/PVPsQdYh6iziKVtN5437jBuB3w+A/8ywLgM/p9x4HRWDME56sy431htFBojjftZ CetnczTRNuOYDfEGAfykXq1/Wv97vQCoOxLa7LD+v/Rcca1/2tXpWmrUMy/j+jSg+LPsrHGUDVb+ 49g5CAcgjNNOsnZ9jjZN2822anvYM9p7bBfbwzjbwTzsRfjvZilaPjMBPzfrhX8nkHw75P06xNkI cBtz6yFtO3NrE7QJkNJkO9lb7DW2Q6tir0IcXSuGlDrrYz443wHxD8M/GXLfxiyIe4Vt0w6zdm0n wD7IuZ2dZCEo/az2AdsK+Zxgm9gBfax2u3aefUPrZuv15VojYL0L/hFMtjlQ1yoB7mLAKYDLWCgZ nms3w71nIRxjuu7XBsGdwfBkJ2C5S2sHKq7X3NokNpnlsvcgJ7dWKFhKWws12wOxxPkk9iZQ6z3g +vNsm96izdUD2l2aCZi9yT7Upun5WhbUtQ7uVUPst7RTrBnyOQ0cLJjTC2GHVmmM0w7rE4DOV/SZ +mz9dmi7Fu1N3auP1Lk+WE/Wq0RrsZ+xTXoXYPI6q2JN7F/YaXaetbIVrJbVal6gRwOrZzWsHOg6 lS2A431sM9wJwr0gPDsLtXwPrmsB9rFqVgm5vAbPAmwNm8Oq9dNAidV6IVuqLWVv6B+yi2y5thGO b8H1W+xHxkIo6T22XM9gH0Dd9rJuuF4J7fEm+zlrYSs0P8TdpU+AEs6zOijhW+xBKKEY/rPh+gts IZRygH0JMF8EXFIL5c6F57WskDWyJdBKDYDTAsChFp6L82bISdSnDv71Th2CgPMCeF4F6e+DY4NT OxGvklXA1XmAAUj5OsTZx44CjrUg5c8Cx9TB02bIoxZwEjnWOme1gPdZuF/FTkH89fBkrpbK1jnP A07sZsgjxBYD7nWA4xfh7mko8TnAuJY9BLz/FeC/bVD2HKj7buCo3fCkASgv/nWQqgaug0CnINS6 Bv5PAXyTrYZy97JS55mgQhnkUg051kGMhXC3BsrtgjqugLwWOtQ4DS1VDnH6HMyFRqiDeDvZj504 jRBnOeS8BFJWgzwsdOqyAEIl0FvgUwV3F0CePZB6BWsDHO6HtqiGdOfheR/gsARSCa5aCDHqnfMV zlUjXDXAWR3g1AnxVsN1G8i9qF01cFIAZKmX/ZJNgn9T9F+7CZ5yLR7gR8AN39LA2sB/pt6g/Zu2 UPui/j39e8ZJ7Sa9m7U64bC+jX0NcP+ac3wKjk8552AVQNMK65AB2v8D7SJo+quaYdxn3Kfdjf/B EEayd6XNiPoPjrkeCfqqg73D3maZ7A/s92yklsTma8Mh76vanwDn4WAzakGHZ2uf0d4FaV4MJc7S 7nNSvAPa+k5WBnp8CJyNcuxTGfDAQwPWKnIGNozVAxylYDDYsWuDKc5AmiGOxbvErjoW63PaJThe hPAJCH9y7ok73LmXxCbCsdi5W4w27pLzvIRNBusF52C9IBXYRJ3dAfr1n7UlQL9RUDdha8FeGvOE PWOfZGHAXMiW+AkD4oVwMwRdXH3u03A08Unk6GHdeg1zF5WUlrERn1+ysJ7lfHHhFx5kc2ofaPgS q33wgYYH2MP1DzQ1gOYRKZltg3ZnELxsELsVSpR3NRbHEtkn2G0sTbkrXgrzsRSwQunKXYPFsyR2 ExvCblfumoBPMuA7lN2h3HWxBPZ37BaWyoaxjNoH6pvYr53jb53j75zjZef4vnO88uAXFjYwSxw1 0zl6nGOyc7zZOQ5thJjaHc7xTueY7RzHO8dPOccpiyE7rcQ5ljrHOc6xwjlWOcfg4gchtzrn2Ogc FzvHZc7xq87xscWQnfa4c9zsHLc4x3bnuN05dka1yl86mjdw1G7gqN/A0XUDR+Njjm5o/bvZY6wz eXryI9DqDO55gR+GRjBJfi4C/24wwolOHA5c8Ek2gmWziSwP/KGZ+PSJCBx0IQI/EYzAYXsRHkH4 qwgcXo2w4dqShz8ZgSNGI7xbxNE2GBlGpjHeyDGKjFKjDDzBoFFvNBnLjFXGOmOz0WZ0GJ1Gt9Fj 9IL3etw4Y1wwLhv9Rsg0Ta+ZYg41M8xMc7yZYxaZpWaZGTCDZr3ZZC4zV5nrzM1mm9lhdprdZo/Z ax4xj5tnzAvmZbPfDLlMl9eV4hrqynBlusa7clxFrlJXmSvgCrrqXU2uZa5VrnWuza42Vwf4e92u Hlev64jruOuM64LrsqvfFXKbbq87xT3UneHOdI9357iL3KXuMnfAHXTXu5vcy9yr3Ovcm91t7g53 p7vb3ePudR9xH3efcV9wX3b3u0NxZpw3LiVuaFxGXGbc+LicuKK40riyuEBcMK4+riluWdyquHVx m+Pa4jriOuO643rieuOOxB2POxN3Ie5yXH9ciJvcy1P4UJ7BM/l4nsOLeCkv4wEe5PW8iS/jq/g6 vpm38Q7eybt5D+/lR/hxfoZf4Jd5Pw/Fm/He+JT4ofEZ8Znx4+Nz4oviS+PL4gPxwfj6+Kb4ZfGr 4tfFb45vi++I74zvju+J740/En88/kz8hfjL8f3xIY/p8XpSPEM9GZ5Mz3hPjqfIU+op8wQ8QU+9 p8mzzLPKs86z2dPm6fB0ero9PZ5ezxHPcc8ZzwXPZU+/J5RgJngTUhKGJmQkZCaMT8hJKEooTShL CCQEE+oTmhKWJaxKWJewOaEtoSOhM6E7oSehN+FIwvGEMwkXEi4n9CeEvKbX603xDvVmeDO94705 3iJvqbfMG/AGvfXeJu8y7yrvOu9mb5u3w9vp7fb2eHu9R7zHvWe8F7yXvf3eUKKZ6E1MSRyamJGY mTg+MSexKLE0sSwxkBhMrE9sSlyWuCpxXeLmxLbEjsTOxO7EnsTexCOJxxPPJF5IvJzYnxjymT6v L8U31Jfhy/SN9+X4inylvjJfwBf01fuafMt8q3zrfJt9bb4OX6ev29fj6/Ud8R33nfFd8F329ftC SWaSNyklaWhSRlJm0viknKSipNKksqRAUjCpPqkpaVnSqqR1SZtRvrYh3IlwN8J9EZiB8ppRh7Lm QTgIIUr7cJS94XcjLEA4A2ElwscQPo1wB8JdCPcg3I/wIMIzCP8N4e8Rvo8yryO8FeGdCO9FiHpk xCWE70bgSKzHyGyEeQix3iO3I/wdwrcRWhF4pxsh6qI7MxHmICxFWIYQ9dyd9QibEC5DuA5hG8JO hD0IUS/eifW4E+sxCvEYdTPCEQixXqOwXqOwXqOqEDYgfBjh4whRm4/qQojtMepnCH+DEOky6kOE SJfRPoTIF6M/hRD5YjTyxeg5CFG/j16I8KsIv44Q+XQ08ufoAwh/gRD5YjTyw13ID3eNQTgF4WyE cxE2InwEIdqlu9oRIl/e9SLCnyP8LUKkfyba48xkhMiHmciHmciHmYhH5nSEFQhrEX4ZIcpJJspJ JspJJtrHTMQnE/HJRP7ORLwykT8yCb8rEZiFeGYhnlnpCJFOWYhnFuKXhfhlIb2yEM8sxDNrC0Js nyxsnyxsnyzEKxvlLBv1RfZ4hCgn2Sgn2QGEKCfZKCfZKCfZqxBiudlYbjbqr2wsPxvLz/4pQuST 7F8jRH7JRj2SjXzjR77xI77+OxAiH/tLEKJ8+FE/+FFO/Ki//JivH/Mdg/mOwXzHIB3GYL5jUG+O QTkZg3IyBuVkDNJ/DPLrGOTXMaEIHIv8Nhb5bSy241iU97HlCFHux6FeHYfyPO6XETgB40/A+BMw /gTUExNQT0x4FCHqiwlIjwndCJEvJyK9JmK+ExH/iYj/vRjvXuTbe5FvJ5kIvQhRv076CkLUD5NQ PiahvZqE7T4Z+XQy4jO5F+FxhCgXOYhXDtYzB+uZsxgh1jcH65uDejkH9XIO5peDfmxOfwTmIv65 iH8u6uFc1MO5WG4u0jm3BiGWn4vl5iJ/5aL+z0X9n4v2MPcyQiw3D8vNw3LzkG55GQhR7vKKEKJd ykN5y8N2yUM9mId6MA/1YB7qnTxstzxstzxstzzUM/kc4ScRYv3zJyJEvsjH+uejnOejnOejnOej PcxHuudjO+Yj3fOR/6dgfadgfaegHZ6C+mUK6pcpWN8pWN8pWN4ULG8K+kVTOhAi/0zBcqdguVOQ /lOQ/lMQj6mIx1SUx6koj1NRv05FuZyK7T8V+WwqtvdUlKepKE9TUa9MRfs7FeV1KtrfqeiPTEW7 W4B2vwDpXYD8VoD0LkB6FyC/FWD5BcjfBWhvC1CvFqA+LUC5KsByC9DuF6DdL0T/oxDLLcRyC7Ge hej/FWK5hVhuIZZbiH24QuT3QtSjhainClE/FWK5hVhuEZZbhH5PEda/CPmsCOtdhPUuwvKLsPwi LL8Iyy/C8ouw/CIsvwjtRRHq82LU58Woz4vRThSjHi9G/V2M/k0x+jfF6N8Uo/4qRnoXI72Lkd7F SO9itFvFWH4xll+C5Zdg+SVYfgmWX4J2pATtRwnSvwTxKEE8ShCPkq8hxPqXYP1LkO9K0G6WIB4l yG/TkP7T0N+bhvI+DdthGvLDNGyPaXlO/93FktmtLJ3dyYRc6M59B1Y+HoFf2huBzXoErvJdP93z EyPw+49G4A+7I/CgFYHHPXCsgHQpIfa3/UP+KXq7vk3v0LfrO/Sdeqfepe/Sd+vdqfv8/9v/Of8D /s/7v+Bf61+fPw1wuBVwMC1IpwbIw9Qf0VfoX9VXQZw8ZrIh/8fYDNGX6S36w/py/Zv6t/Rv69/R v6t/T/8n/Z/17+s/0F/Qf6If1F9O/ZG/yj/XX+0P+mv86/yP50+Hci8BbvfG4vbnwl/zD7dcvWrp H50Mhz5qD8+92hPu/GhGuArgGx+dCl/+aLd4Ht571RIwhPmHK67uDldDHIj3cflbiz56P5LHR+UQ noTQ71xTueVXt0O5Z6HcfKDQvURrfY3+mN6qf01/Wt96/TY00o3bjXuMTxmTjVyj0Cg2wuZNqc+k 7kubljY97bns+2NbeNbPZx2ddWrWr2ednvX6rN/Nujjr/VkfzOoH2pZAm6b9hzktbaBtV+uP/nXt m/9K/iGme4uYy0iy1oe91tFwl/VG+DVrRTjL2hneZ99m6fYpO81+zs63D9lPWzWhPnuCVUfBejt8 2p5hbVLvRYVm620731pht9vjbLfls66E37cOhTdYO8KzrVfDz9nddq11OPyk7bOCkNdZ+2V7vbUt XGSftXvsPnuLfY81H/KZb0+CMA6huPZaQ5xwmzXBCdOhjBo7RaS3n7bHWiHLb7fZk+xtdol1Mfxj e409aACnOVaHEx6yLkKedQI/qy+8RZRnXQ6fEHV0AtyzOsLTnXA2XObg/HS4xNoOcCdcnwqXA5zt XO9wQpnVCRDysG+xBkG4zS6wttie8NO2O7zCnmw9ZM+E67FWlvVhuM6ebbVD2cttHn7bgbeFLShn p3Uy3AlYr3VweSN8zIHHwpusJeEh1gbApS70EyiryFoL1yvDbmsj3FsfOmdDLYF20+H6dmjL6U6c 8tAeqz08wyoJrbfrrFNWUWi9NSO0yRoZmuPg8q59zl5q7YV0ldAGQMvwu/Zue7I939pnv26/ARQ5 b3fZx+yxcL/Kes0+aXfYK60rQOPd9hKg4dP2abvIaoFnnfZRu9a+Ci3XbdfZe+yl0C7N9gngnpft oP0q/FusvfYGeznw0ZN2yH4Jyj5mX7Hfh/PTTrgC//P2a1DuawDPMw4xFliv2v3225D2ItBkn73c Om3r4aNw/TrQ7BzwQw1w0CknbYc9Hdr1J/ZF+zDg0m7vtcuh9E7rsnULlFsNfLYI8lhiZ0Gb7wI8 hlulUPv9dqo1Fq5bAeMZ9nZ7H/B6LuT1E8h/v70A6nnI3gTx+iBGGdDiNODzGsRaDzWYZ6+ENG0Q 24LygrbXXg01n2m9D/x2FNKth+NVO9kK2jtswV/twLM+KH8nlLoSOHw5lLsacnvJLrWamdfuYyn2 VTYI6t0M9V4D/51Aq3n2SODjK3D+NqRpd8IhCPsdHHZCu68F6u6zU6wA1Lka6mral6Gl7gLavA31 mAztcA5onWxNghIn2EHrXbjXCliPhTxa7JHWbMilBuh2FOhzzhaccNpKFXQZ4GUT+Ne0uOBlwYsO 7wieFbws4ghevsXKcu7NsJ4UPA3y85zgZed5hbVb8DK05znglX3Oeb41ygatbu0Ob7daQ29Y+8MB 4NU6gEutfeGN1rvhoJ0SvmgtD6daL8P9tvAEOzkcsr3hHpDJ7daQUCXEmw1642V7mDUZyrwo9A3i 7B3AO2gddmRQ4H4WdIHAVQTAHVqTDdQF8RZy6+DdB/qP8J5hnQB6lgNPe4EOaUCD1x15bA0PA5xv sZaE1kL8DY5MQhB5WmWhHzt6QoTW0GnQQ82236p2roWMtocLHDkV8jwntFPIJUjPXkdG28PLob4F Di9usRfZQ6xxQLf9oH98EPcQ8PxRa2xoH7TyfODHiwC77Co72Wn3BSAr+0EWmq099jyQ2RW2brcC 3ffaJbbQLCfCu6wt4XHAeV7SMcBDWxwdONZydKajO9cAb58A3iddO92eCfoMON6aa3lCKY7OFTp6 C+h2kf6lcApg0sdKwousczf4Lwu1A/+VCDm2poOO8oNsvgx1mWzNE3SAMt4dKKPG6gM9le+cj4V4 ux2puOroPdCDcNXv2JpN1hqgUUdUqI25VgKkX213gV6ZYz0N8vIylA2UDu+Dth1u7QX+SbE80HZv WJvCy6EdANNQjcBJ1NOpa1u43aHdOOClcSBz4oxsjeAtCn12JGyBOrWCPYI2BJzzQadZUaEL7Fin XSHycuwtQUofez8WptlzWYE9F7hhDsA5IEdv27o1e8Cmf5zeF218Pd0P7S70v5Pf/2U2QPAu+TaO H3ODNsHRg3/OLog4ZBuAvv+T7IMjax12EdR2HjwrgVAE5c4AXrgdQpq9Efy+pVYISuZAtyzwPV62 11pXoT5VQIG50F7vQjtdBp7pGeBtYReEPyNkmeSnC/Cucnjsx9AGO2xxtgDCOeCwLsAuy2qxHgrf BXbgJTvNusc6DT7Uj8PVTnuUgU95BXzZ85bbqdsg0Pe5VhvAIRDvNAQh6zuADsMdvTHOYiiffSDT kxyZ5qDvhX9LMqz6tvdY85wQ6/PeCM5/A3yF7mYp1jZWCaWAlWUzAZsr4XO2sIbCb2wNM8eegt10 7CQGxyefae12bOMQsHXgc8L1S44tFzav1HrS6gZbLGzaArBh4ENCLbrgvx7u1wlf0/EhO8IzWKrV DxxaAH2ZLn2lvpIxfb2+kWn6Jn0zc+tP6k8yrrfpbSxe36P3Mo9+SP8Fu00/p59jw/Tf6X9kGfqf dItNNJjhYjlGnOFlBYbPSGPTjTuMYazSGG5ksYDhNyayLxj3GpPYPCPHyGHzjTyjgDUaRUYRW2SU GDPZYmO2UcaWG+VGOVtlVBgBttqoMj7PvmbUGrXsCaPOqGMbjXpjPvu6scBYzJ40vmx8hbUZLUYL e954xHiEtRsrjUfZN41Wo5V921hnPM62G08YT7DvGl83nmE7jWeNH7DdxgvGD9lh40fGAfZzo9fo Zb8yDhqX2Cnj98ZbLGS8Y7ynMeMDI6QZhmXYWqKpmSlaknmzeZc2zMwyx2qTzHFmrpZnFpiF2n1m sVmjfTquJK5Em8dP8VNag/eX3l9q830P+x7WGn2/9/1eW5CsJWvawmQj2dAeSubJXGtKXpu8VluU /Jvk32iLB/1g0A+05psu3XRJ+/Lgzw7+rLYk9d7Ue7WvpG5JfVZbmro1davWkrotdZv2cOoPU3+o LU/9aeph7ZHUvtRfaF9NuzVtsPZY2n1pM7S1aWVp/6itT7s/7X5tQ9pn0z6rPZHWkvaYtjHt+bQO bWva9rTvaN9Ku5J2Rft2+k3pN2nb029Nv1X7TvrQ9KHajvQR6SO076bPTp+t7UyvT5+nfS+9MX2h 9k/pD6c/rO1KfyH9Be37IyaMmKDtHvH1EVu1H2SXZ5dr/5pdkV2hvZgdyA5oL/kn+wu0A/5if4n2 U/90/3TtiH+Gf4bW5y/1l2o/83/GX6a96q/wB7Rj/k3+zdqv/E/5n9J+7f939r4EPIoqXbu6qkhC EpKQICDQ6UbSCQFJnRJJgPQSETEiUlVhCxAQGRd0RjEiIqIsakZcIOKC0CIitqgoLeMgRkUUG9yw ZRMbUNTGXVtUREVIuv73nK6clKPe+995Zu5zn/+/9PN21XnrrN/7na+2k2a58qDjPWWt8oTjkPK2 ssfxibJfed/xlfKhcshxWPlc+cJxRPlaSTiOKt8q3zp+Ur5Xvnf8rPyg/Ow4pvyitDhaFJMIokhE ki7KpD3JFTNJJ9JJ7Eg6k85iPulKuosFxElOEbuQIlIsOkkpKRXd5FRyqtiTKOQ08RQygAwQi8lA MlgsIV7iFfsQPzlL7EvOJheL/ck08hdxFLmCzBRrySwyS5xCZpP7xQvIA2SVeDNZTULiQvI4eVy8 fcDDAx4W7xjwzIBnxEXl3cq7i4vLTyk/RbyzfET5CHFJ+brydeJdFVqFJt49sPPAzuI9A7cO3Cre O/DjgR+LSwf9adCfxPsGbR60WVw2uHJwpbi8MrsyWwxWrqpcJd4fOCswTFwROCcwXFwZGBmoEVcF RgfGiI8ExgXqxEcD5wemiOsCVwTmik8F7gzcKb4cuCtwl7glsDxwv/hKYF3gOXFb4OPAJ+LuwGeB r8V3AocDpnhAi2o7xIS2W9snfqu9r30i/qR9pX0vmtqP2nEp3XjBeEHqYGwxtkg5iAt5gizIOP/R D30OLktFIE5zz2DraGXBWgoniNKfSRdBdGQL7YQzhAyhEyDT9WA449H1tkOENLbGLEdQhQrzU5wJ 40I+OCdaGA0MEjIBl1BpHhNKgXyhp5CDbV/kKEG+fig9wNyOcvuF7uZR5EwTMs0vhX7oFa172H93 e2iH2mcs8lcjX9o/pmGTM6QySZPGSOOkSdKF0kXSxdKl0pXSLGmOdL00V5onLZBulG6TGqUlUlDa IEWkbdKX0mHpiHuO+3rlmJIkDpJB8khHkk9OIj1IL1JCepM+pC/pR8pIOakkPjKMXEKuIdeSFeQh 8ghZQx4NjAqMDUwKTA4cCnwaSAS+4SrVCvRtr+i+gTyGVG+olCEEhFlCpbBEqBDq0eu636QdQoZ0 iXSLtFB6nhSQ/uR0cjnK6ihZ9K95zsqefxUV7ircXfhB4UeFhwo/Kfys8IvCrwoThYddXdwj3aPd Y9xj3ePctSXbS94qiZa8XbKjZGfJrpLdJXtK3inZq0xTLlP+olyhXKncGaBvzzJxjkrV6hDno6/T wHSVwfw7gda6Fh4s/LAwXvhx4aeFnxd+Wfh14Teuzm7NPco93j3BPdFd556kXKJcqvxZuVyZrjQG tlt9rTkxgPX1mJXudYKtARCfTaXb1ZyI0HTgrv/RdqdPwDMFmVrejtQT8MJY4QGFPiW/Enm6/bu1 sGnS7Q80Mdw1/5kujteaL2d2X2+ltzfPo2llAouImTjtpDXfQkHnlPi9a7iVL9zM3vVIQms+MCEK lm+L5LDyPdbM3rmWjeT5ljZvo6D5Au9U5YMvAp/uCDZH/wjIm164X9mh7FIOKO8rHymHeG1Lmg9S sNqigbc5P6JFoGB8rOqk1t60sDdOZRqd8UJGC1sHZsStoxe2VLCxP2GlR7aw98uBIGrtBEYyt7eM aAWOSK65yjnKuVZdbI2JccgqO6yFrXUIXG6lfS0LmL+fsPWwgYKdUaJqRWsbjpKWW1tB25B7yDXa j7yU0rKMgo3rYFV3zgfAB1K8uEiVWr3Q0b8l+N8B6oXS2VK1dI50Lq4iT5ar5XPk82RNNuRR8mh5 rDxerpMny+fLF8hT5T/JF7tWux51X6n9ZBvXCgo2rg/Y+29qtZIW9gZZGoZ8PcC0c1S2rPxHIEc7 XGcHpDOdf3fXt85Rh6dllR10jsonyS7ZLRfZWl1FQVuVL9S+43z3ltUUTJubyGfgq8DnIO/qfwao J0c6TTpdKpeqpKHyMPlceaQ8Rq51nV9Wo/i071E/YePt1xL6vwG1jtxB7ih3lwvli5wbnE2uSS6z bLRltWqWwxF4io8nsyVMwcbzrlpl5SttYXNTfI77nqtlSyuo74lHxB+UtbyWtJYdFKyWfeoQzust uyiY7y1WZc6XtuylYPkbyBdWq0Na9rNWl/B8PVs+pKD5Cn8ku6x8OS2fs3w7rbTY8iVLv2Kl81Np SWytR/ipJcGAepQjajde/8ktCQpWv6n2tamfoGD89yTM6/m05TsG2u+Yegbnj4I7muIDB6q6ck/L aPnODnY2+Fz8QvxaTFh9TWthK1vE51stLcSSAged5cPlSfIU3tJ3YL9jR0TpZvJ5m45JgYLyLod6 Xqp2YW+SRTXtOC9/LJnNQBV5UdzMy2cksynYiFvUbJ7/cNLJQEf2YZWT8zuSHgbK76rKtfWvlIHy O6tyOP90UmWg/d6hDuL8hmR/Bpr/3apOnP8c3OcWv6+qM++nnBxAwfi9VQU8fyI5iIGOX1DPtdVT yUDHlVRzLLt8mPQxq2/k+eJg4owVA0agxsq3P8nWORR+y/MdBHOQsaL4rfhdq9Lgqn8FqvQ34mHn LuduWx9HMNCyjWSt1cauJFtDoky00nusdJ2Vbk6yNT3Kw9wGfZOjKVg9d5IneP0rkrUM1MZvqwM5 vz05gYGO7f0q7v3wjgkMtJ4WMWnTto6B2qxZzWybRckpDJQ/SjZw/r3kVAbKn1AzbLafykA1kdU8 W/0XMtD+7KjqwPkkuGSKdw8nG239v5iB1tNO7dJ6XSBEwf0RcF2AO+qduJ9+D3fT8cCdNo+bxkBr E1WN86uSlzHQXu2p6mgbXT0DHd3P5AfOr0zOYKD1SOpYW29nMNBRnEtetKkzk4HWc1xN4/yW5BwG 2u7uqjYrbU7OY6D5fyLfc/61ZAMD5X8hzbYZtoiB8kfIelt/GhmoV7yvDuP8xuTdDFT9Tcp4zs9J rmSg/Xmv6mTOz0iuYqD8/qoulneGGeMIrOP5NiXXMNBY+x15mfP7we1P8YXHyI9W+buTbOWvuxuv j6WVIC8XTq5loP38UvzKNt6nGei4vlRHcX4buG0pvvAH8rSN38BA+e/IkzY7bGKg9XyljrbN9AgD 5b9XJ3K+KfkaA+XfUPtb/V6Z3M7s8DdbvdsZqL02Bqy7GWFpkp4lHXkNVnp1cg8r94yVviW5l6U3 WOm65EEWqZqs9PRUOi/PSs9LpZVa3u5qMKsZK0p/U7vb7HiQgfKfqPyqW3gyGWeg/HSym/frY1qv PMJW76cMyKcd0D7g/Fpwa1O8+JL4slV+UZKdowc9aKUXJNlKQtf1tvoSDLTdNSqNAuw6TpidPPYb 0Ou44XJXeYISUM6waryJ8Q7pLJtHHGOgNWqEX+Mg53EGei2XK5/Cz7Qzk80cONNWzKq4tmI2jp6K o+3R4+b/FA6hvVwgO12TXVPKJpZNUaoCU4znuTJsDZn4GT9H3ATGDpyblRXKg+zvz2iJepOtbi1v O/veDuZ2xorSW2p5m83NNAbKv6B6rPIXmmxVan6rb0wz2V1M+YVWekYqLUZ4PbPNHAY6V+/XfuCW WWDmccAy0hnSEHkcr6UTq6XZSs9MpeWneS9OZq1m2Vo5mYH29mt1DB+tk12bHOH1srRo3X8KtaaL zYQzeb0s7e1tpS8zS2i6YnrrzEilBy/n7S4x+zLQdmeT9zm/DNwyi39FPZXzU81+DJT/QK226p1s KrTezsu5jreY6q9A7x/OlnXtW+2YYN0PoLf9/ynQ+4HBrpWuB12rXA+5HnaFXI+41riO0afS7ivc 03mf2DOTARq3DUu7Wz1pisnuVwfTKNob6QzYv+I/BO5UtXe1mLZfe097Xzuofah9xNsaxPQs5Haq B1PPWFH6UD2H87Wmj4Hyz6o9ed/YtVY5sZUfykDzfauOT+UzN5mp65zDVrmxqbTReh102Dr+jZUO mGzNq+HnXjsaTCuo157k+mvxclvvahloq3tUH+eHmxMYKN9PKqM5wXcSdHD/SjiETq4F+hz9Zr1B v0W/TV9udDeKDI9RYvQxBhnjjHnGQuNW43ZjsfEA97TRKGcHPM0oNIYZ1QZ/CgN9JjDQ/ucV38P5 arOOgfIFxffZrFTHQZ9U3Kyv0R9rPdswzuG6zkpXmuzvBrQvcNW5E+mrMJLJ/4v/ByAK3fTL9csF wcg1EJmNHkYPIdtwGS6hg9HT6CXkGMVGsdDR6G2UCvlGX6NC6GQMNgYLPQ2f4RNOMQLGGUIv40xj qFBsnG2cLfQ2zjHGCKVGrVErlBsTjYlChTHJuEEYaMw35gvjjZuMm4QJRoNxizDRuM24TZhs3GEs Es43Go37hQuMlcZK4QrjIeMhYbrxsBESrrRiwmaTPStjf21E/XFAKq0jzjrobwL4MZYp/1/CIfjF HVKO1FHqJHWWukgDnRtd81w3uhpct7gWuq8qvqv43uJlxcHi+8sm6NP1K/V6/Sp9hn61PlO/Rp+l X6vP1q/X5+kL9Bv1m/S/6gv1W/Xb9Tv0RfpivVG/U1+i36Xfrd+j36sv1e/Tg/oD+oP6Kv0h/WE9 pD+qP6633rvGLX2+5PGCrb+XVR6FdDA6Y0XxreIVnJ8ObnqKl3aqg63yw0z2dyvO1muAkSb7ewZ3 MS83E8xMxorSNWQ/j2pDzGkcNKrNd92kX8Hj6AiwdtB3eLlSfvHdxUuRZzTyFOB8ctm/DA6hQL9O v0Gfry/T79dXGt0Mp+E2BhqVxlhjvDHXWGDcbKwwHjRWW+OsMNmz9gqBXwUHzOm/Aa6CDa8xxDjL uNFYZYvz0xmoRT5TdcyMO8FPxTlt+v/ifwAcwlTxDfFtqat0stRd6iE5JZfkpmtDpCLJI5VIpVJf SZGIpEo/Sj9JP0vHpF+k49IJqYWuv5AF2SGLsiy3k9PkdDlDbi9nylmyRy6WS+Tech/5VLlMJvJp cn95gFwuD5QHy5WyT/bLVfIZ8hD5LOdyuo7CucL5gHOl80HnKudDztXOF52bXRe4proudF3kmuWa 7e7lLnJf6r7M/Wf31e6ZxQ+UVZedU3Zu2Yiy87RPtS+1r4xNxkvGK9zfpmFM0yx/e0Z18Zlfz2Z+ Hp9zATB2YM7pc/UV+mr9EatMdaqMW+d1V5ozGFC3c1PZcDBDweci7s/8p+EQcvWN+rP6c/om/WV9 ix7RX9Xf0ffqMf2AfkT/Qf+Rj2AmG8EgHlN0MK2g15MVzmfK6vgMrTRn/Qb0PrWndGpgpPa5scWq V2e8Q86mz8ORrkGvZv8v/gUQoewT+jOCoDfpTUKW/rz+gpCtv6i/JOTor+ivCB31rfo2IV9/Td8j dNLf1d8Veur79P3CKfp7+pdCkf61/r3QXz+qHxUG6z/pPwuV+i9Ge8FnZBk5An0+MhBqZQtD0dJ/ BQ6B/rpKF9dEV53rYtclbtEtlemKV/Er/L2IcDnyXc7yitJu1cv5AeYcBvD6V0Ymn0tDwdmBueSa UDzAeNHYzOfIEPOGfxqYI+IuqZtUKBVLfaRmWZL7yafLFfKZ8lDXn7SPtU94D2uQu4aVEKV68g7n p4CbYvFXkb2W7/vM1DvjSn7PxtLiUT7n2LvPipP4nBtu3sRB59x+9wz1TNtVQwMDbeU5tRcYN/g0 1HPr78IhpEmDJK/kK6stG6/9zOsZi2Nj2XFRWqk6bPdStzJQfhY5wPls83YGyj+t9uC9v52N5nUe ExRz0W9AY0J/aYBbLhtbNo7XWGE2MtAaryR7OD8S3EiLv4N8a7XUz1zC7nVfsN21LmGg+T5SrXfv QhfzbtajOM/Xzwwy0HyPqbncYv3B/R5gMTEqpSlLlLuU3coerssAHGsF1eVQdlRtezZYDbbaamWX Wsn5TuYqBsqvUtM53xNcT4t/Qi2weu9hjEO8m+dzmqsZaL431dP51RJbYSDeY9NzNQPN91fSejXa 02RvO103tOYzj5iPUdB8gbqq9rx8X3B9U7z0klpqm4+PMVD+ZbUP50vMtQyUn0Be4PO0Apwd9Dpz ItkUGFMl2hR5koGWfV09zfZUJMxA+RvIR5wvNdcz0OfWe9V2tj6vZ6D531PbnoIq4BSLf1xte48x AtwIix9DWp83l5jsL3LFX2zlNzBQG9VWtbWXZ25koOW/Ucdxz+gCrhX0zfBxZbmy2mbBjQy01HXk oNWqy2R/7+8caLPoJgaab62ab7PWJgbKf6HW8FYD4FpBW/3ZGXXusGrvZbK/6k1ve/fiAeNhrCit Vttbd5fHzS0sOp3H8w0yIww031jyLJ8tPnPb7wKzRYtqb2s7tJ3aHm0v97MvzTcoWD1N6im8ngpw vwcap+bTtXDkY/IJ+ZT3p4u5nYHW85TalfMucC6LX6eexPmh4IZa/GSyhfOyGWWg/Hdq27OjTmw9 fooPqVmW/RTGODT+5tJMmrsoWL6tapmN30PB+APqUJvP7mGgd30/OfnaG0E19zLQ/DPIu5zPN2MM lN+oum39izFQ/u+q0zbOGAPlp5JttugZY6D8n8irls5HTbauINA2R7qzFY37mY9Pqsq09eM9Blr+ sNr2TqUnuJ4Wv4TQv3ulv4oqmgfN1PuUF9USnjcDXEaKD0ysyrBsms8YR8ZcK51msvcr4lbu0flg WkE9+mbFUEZxz8k2P/1dUM+5TXqVfKOSwPnsVyJo7XnsiEMZbbPkpwy0t/eSY5zvBa6XxY8jTbYz 3ucMlH9e5etihJPBnWzxYZW/lzc/hL8DjN+rBjifAJ+w+CdV/n7fPAz+sMV/rhq8frq+NNPi68hm 2/i//F3Q89VN0rVKDXkvsCywnFubrQBx7uT1+sD4rHrnEWstFlpib6WUMbYzToKB5ruPHOf93Y/e Aox/R/Vz/ifzOwrGr1fb3pZ2AdclxQdGVQncY46YR1jeC8lrtjEfYaD8BrXQptkRBsoHSQtv8zj7 m7HUe67XVLX17IOZeNwOdvYxXF3J31TRGq/IWIfIV41BhWYKVtcRtc7W/2YGyh9Uz+Y69AT3e4AO zudc41zjXc2uFhdfS2DG0BOA2WF8Vdtbb8QOBspPqEoXUr9ITO35E2uzkRxptZnQurr6YvJGm20s gHeNdbXN1FKchSlo/qtJrE1Xtu459cbsbsJXl5lHMVcBxl9PPuR8yvvZehhps9q7LRIIOQyUX0T4 ujDE3DwKyrtvUM9v83/4IsDyzyFtb027oPcUlJ9CIrZxpY5Q/n7SZsckZh3A+BXE5PnTrJFR/jIS bZu/4LIt/s+kLQLngMux+PMIf2tvNuF8AjB+m6q0+Tf4nyx+FPm7rf6eDJRfStquHujvpHa3+Fry nG1cvRgoP5Pss9nHQ8H47eoAnj8PKlJQfi7h17OIwX0pGL+QfM19fzPOWjZQ35dLZa8c0L5pi8zg M9gxUbqVJGxaqAyU/wvZwduyzs+M36TyZ5CofxAF03qOOonzqWuHFD9X5Wu2cJXho2D89epkzh8E fzDFB8ZWSZyP46oGYO1eQt60+dgQCsbfQr6ytTuUgvERtV/bWR+cbPGXkrds4xpGwfiLyOs221ZT MH4a2c75TbjTAFg/J1fx97qIhiMoWP4HVL7eF5FpBAXjLyBbOR/FuTnKfiFVlCaRl2w+PJKB8reT wza9ahgofznZafOZsRSMP5/wJ1OIbWMpGH8P+dk6+8eE1DPq+2z2nULBxjOuiq9KND/EPTnAyi8j J6zyTcIcdjV0tC2mCTdRsHzjyfO28TVSUF7bp/1ilX9SYPduUiX31V3CCjuYr/bVdmnvaJ/xutYL aylYH0dXWWumcSfCfi9J6s3rahSidrC68uVuZedr1tplc5lAr9sccg4vs1TYYwcr01Pu5XzWeM4q ExbirIxipRcIbDWHxrUx1whHKdhYD2lf83zsd6Jkay0bamdrIDRrtaM528HeSxsvt+Z3VLLx8LsM 0+UIUNB6RdP5luBwBNlvBb8ulUkrpKelndKBtLy0zmm9pZ1p/vSdGWUZVRnDM/6SuTHznayarKuz rsu6I2tp1qqstVlraZ6sDSjV9tnZ9smqyaiiJRjLjmRtzkpkZ2b3zi7LPr3D7g77OhzJLsvJy+2T W5s7OXda7o0dR3ScnE/yh+fX5l+Wf3X+3PyF+QtpnvzFWYm2DyvPP/kkl5UBX0YBZln+yvxQ/tr8 9fkb819m2/X5b+bvzD+Q/1H+Z8Cb+Ql8juQfy08WyAWZBXkFnQvcbJtX0KeAFAwuqCoYBvQpGIFP jbQirTdsACtg9FdnlNE0HQ0sMzwtD2NMdDiC/mME6Pnw3FqaRh9ZLzGyadm9O+zOnQxr9qb52QfW Raosc2NWTXYZSrM87AObIF3bcUQ+/X2i16FZEWJ3CeJ0H6EMkfU0ob9wujBAKEfUHCQMFioFL+Lb WcIoYbQwnv1fAI3CncJ9whrhUeEx4XH49xPCM8KzQpPwnPC88IKwBX53SPi4aFnRiqINRS8UbSr6 wZPuyfC092R6sj0dPB09+Z6TPJ09XTxdPSd7unl6eJyeQo/L4/b09pR7Kjxez9kew3OVZ4bnOs+t nts8t3vu8CzyLPY0epZ5gp77PSs8D3hWekKerZ5tnlc9+zzve456TnialWbiIDJJJzkkjzhJJTmT DCc6qSGTyZVkFplD5pG7yL0k6F3jXetd533K+4z3We9W7yHvV97vvSe8Lb4MX1efy9fLV+Ib7PP5 hvjm+G7wzfXN8833LfDd6FvkW+xr9N3tW+q7z7fct9a3zj/AX+6v8A/0D/IP9lf6z/QP9Z/lH+Y/ 23+Of4T/PL/mn+w/3z9Vu1C7RLtUq9eu0mZo12iztGu167T52gLtfm2ltkpboz2mPa6t1dZpYe0p 7W/as1oTzrxFiGwVpgtnogZhsBkSKpH2mp1wpokLa4BHgceAx4G1wBPAFhw/BHxsxouWARvMuG8O MN90+RZgeyOwGFhuurRLgflmSFuA/O1wzRMXTgcGIWKMR0xcgv10pBJom7abQN0J1J1AmTjK0HPu IByhvVok5CYbUEO90BHbItRQDLYPcJpV61D0fxj4s4Fq7A/HVjeDggHUID0K29HYjsF2LI6NQ/St xf54nA0nABMRu+uwnYTtnaiP9u5u5F8K3AesQZlHgceAx4G1wBPAk8j3LNAEPAc8D7wARFBmK7AN eBV4DXgdeANl3sR2O/AWEAX2oB/vYLsXeBeIAfuAA+DfA94HDgIfoH8fAZ+ijs/NpiL0r+heM1iE Phahj9AjXLSCaRIuQh+KNgEvg98CvAKgT0XoRxH6UfQGyr0JbAd2IL3TDPmuNoO+a4BZwLXAbOA6 YI4Z9t2E43/FdiFwqxn13WY2+e4AFiMNe/lgL99SIIj89yPvA+BXAg9ifxW2DwGrcexhIATuEWzX AI+iLviXD/7lewp51gN/BzaYQe1y4Aozqk2HP9QDVwEzgBvNsIb+aDdj2wCgX9rtyHsHsAhYbEa0 RvZkZhD8TOae1+p11BcTYII43h8sVTuIiJObrIF/1cC/IuyJwTDgbKAaGA5/0ZHTAGqQHoXtaGzH YDsW21rmLzH4Swz+EoO/ROAvEfhLBP4Sgb9E4C8R+EUMfhGDX8TgFzH4RQx+EYNfxOAXMfhFDH4R g1/E4Bdx+EUMfhGDX8TgFzH4RQx+EYdfxOEXcfhFHP4Qgy/E4Atx+EIMvhCDL0TgBxHoH4P+Megf g/4x6B+D/jHoH4f+cegfh/4x6B+D/nHoH4f+cegfh/5x6E/ndwT6x6B/DPrHoHkEOsehcww6x6Bz DDrHoHMMOsegcxw6x6FzDDrHoTPVNgZto9A2Bm3j0JbqGIOOMegYhY5R6BiFjnHoGIeOcVxnpyJU nMWBwVYs8P6H0QnnhN9EptaIFEdEilvRJQ6/OB1eMBpYAtxnxZsE/CGBK8k8xEXqM6PgIaPNUrDV iBHVzH/uQ/ouIdf0IdccoSO2TkSNQuD3IlM56ktFpxC8qcmKTkHhPBzTkd8AUhEqbEWoMItQtSxO JhCdEmg5juiUQHSK/ZujU+h3olP4D6JTGF4YhheG4YVhRKcEolNCiAOpCBWzIlT4n4xQYXhoGB4a tkWoMDw0DA8Nw0PD8NAwPDTMItRcM+GbB9gj1W3wtjuYx/5jlApbUSoE7w1ZUaoJ3tsE7w3De8NW lArDe8M8Qq1D/U+BX4/I9TTSqUgVhjeHfydKhawoFYR3B+HdQXh3GN4dhneHEaUSiFIJnAPzYM2U r0XgAU1QO2H5Gb3LptGr2OZP46xINgGos/nDH2n9AfJ8BC2o3S2bI4LHf2UPzCU6RkTbOBvHYszK RpSj86CT1bd69O1itBxC/4JW/+jamvEsxubiuyMwFXHyepM+W5iKXNcDdC+GPfp8JRdXGh0BEXU1 onwqX6pElqebWerpYTZ6MJs8LtPlCQHbTJd/kFnq18xSbRXwrNmkNWFuphf9YEY8XZCzh9ngqTBj Hq8Z9VyN9HVoKR1sHPUkUE8E9URQTwRlEyiL8wKOJth3k3BJ0ZFkI+oKFx1NNnpKUL4U6IMSfbHt Z4Y9/c2g53Qz5BmAdDn2K7AdiO0gtDcYqMS+F5wPZfxoNYD9KvRnNutLk2cN8CjwGPA4sBZ4AngS WAeEgaeA9cBGtIMRepqA54DngReAF9HGZuAl4GVgC7gI8Drax1nDswf7e8G/i23MbCoWAAcgAhKQ DmQA7c1gcSaQZQb9ZQAxQ34V29MAjNOPc6IfY/H7zag/AFQBZ5gx/xAAV1N+A8dGAfBS/xhgrBnx jwNqUQ88wz8BHLzDXwdMQtkLkb7IDPunYf9S+D/mlPYIojzGpmFs2guYB5uAFwHMfy2CPFsBqtar UIdqFBHSoE8IWidg+yhsHYTOCdg2yr2gHvmqcTSOo2EcrcfRuDAM2tZA1xpomoCmCWiagKYxaBqH pnFomoCmMZRMQNM4tIxDN1p3AvokoE8C+iSgTwL6JKBPHPokoE8C+iSgTwL6JKBPHPrEoU8c+sSh RRxaJKBFAjokoEMCOiSgQwI6JKBDHDrEoUMcOsShQxw6xKFDHDrEoUMc9o7D1gnYOgFbJ2DrBGyd gK3jsHUctk7A1nHYOg47J2DnmJ+e30IA+gb7JmDfGOwbg31jsG8c9o3DvnE21+jMacIciWKOhDBH QpgjIcy1Jsy1Jsy1JsyXKOZLiKkQF0Q2p+AdTA8X7NYfdisFUwe/r4HNSoWrio6YpThaX3QURwRo 4QDSoVgJdCoF+sDafbHtBw6jhhJhKBGGEhHUGEKNESgRwuyKQY0Qao9jZsWtmRXHzKIKRdBaxHMr 6rgNwLWfB9d+Hlz7eRYDuPbCjItgxkUw4yKYcRHMuAgUjUDRCBSNQNEIFI1A0TAUjUDRCBSNQNEI FI1A0RAUDUHREBQNYcbFMePimHExzLg4ZlwEKoegcgQqRzz70O5RzCzBjEDxCBSPQPEIFI9A8QgU D0HxEBQPQfEwFA9D8RAUD0HxEBQP+Qew2RfB7Ith9sUw8+KYeXH/UPA6jhs4hnMEPCICj4jAI2Lw iBg8IgyPCMMjIvCIEDwiBI+IwCOC/ktQfhrzjBA8IwzPiMAzIvCMIDwjCM8IwjPC8IwQPCOEmRfH zMPVEZtz5fAQGltpTD2dMSXw6lL4TErHKHSL8lnpw/EA4vdspDE7oUMCOiSgQwI6JKBDAjrQmRWF DlHoEIUOUegQhQZRaBCFBlFoEIUGUdi8ETZvhK0TsHMUdo7CvnRGRWHfKOwbhX2jsG8UdkvAPgnY Jwr7RGGfKLfPBBaJaNSJYuxRjDGEMTYyP+6EMdZjBI0YQQheFkbPGwXJOqOE2MhleHUMHh3znAXm fMwIEXv12Ktne1Hs4UyGXHOQaw7mSwU97/HcDjKSrpUnfvY9kq5JwX4D20c+7FfzvaCV18B1p0j3 2R5NV7PvMPuOsO8G9h0UHN4LaBnvp+z7Aspjv4Hto1b6jXQ126vDHi3RTOtnabpH09XsO8y+I+y7 gX0jt+M09lztHnGyuFDcLe6TRClbGitNkeZiT5QWSpslUdyN1Fx5BHAFPtey79Xyy+1EaWy7ge0m tHur3aG00WkT0m7GZ3HaVuyPxh79fhufm9n+1rR3rCPYT89Muzn91PSp6UfTj6aNTk+mJzMyMgoz pmQszXgy4/lUyfSjGa9nfNW+U/vJ7S9sv7j9svaH2icyM7G3OLNT5nBsJ2fSf/uA45nHs2T2XZY1 Imtx+0NZW7PLs0dkb87emn0Yn2MdyrC/GXv47jCww0DGbu5Q1sFvHaH7V2cf7rC0w1s5k3MmZ2/O mYbPVTkLc97MFXI75xalSubQv4O4RzmhNBOBOIhEZNKOpJMMkkU6sKdG9BdqCshJxEnc7DdqFPZb MaknSeeSkUQnBqkho0ktmUgmkcnkfHIBmUouIheTS8g0cin5M7mcXEGmkytJPbmKzCAzyTVkFrmW PXu6mTSQv5JbyELSmHoORVbQ318iD5MQecR7gfcR7xrv49613ie967xh71Pe9d6nvRvYM6om73Pe 572bvFu9r3nf9u7wvus94H3Pem51xHvC2+xt8Zo+ydfOl+7L8LX3ZfqyfB18Ob5cX56vo6/Ad5Kv s6+Lr6vvZF83X3ef01foc/nc7DnXqb5+vjKf4iO+CuuZ11DfWb5q37m+Eb7zhEySb4ZJAdAd6AE4 gUJAwWwgAK5QSCU8M185btYTGWgH5AEdgXzMkQKgK/ZPBroDPQAnUAgoZgNqaUAtDailjpxLV5Ky +ZcpzjXrxHlmnQJfJ6eiRVzvEURnUo50AKgGhtPrVeTPxGysZ30Iog9h9CGMPgTRhyD6EEQfguhD EH0Iog9B9CGIPgTRh+A/9CGIPqRmewOLBunoRwP6QfvQgD40oA+p9lvbrmPxoQParkab1WizGm3W o816tFmNNqvRZibazESbmWgzE+3Uo51qoRdqz0TtmcqPZlD5GfgFOAFgtist2Jq2EaVhPxPbLKAT cBLQDZwLWzdwKlrqB5QBdn3KcWwwtjgPoOf1ZAjSQ4GzkD4b22pgOOyX8Ss7KwDOhKghjFI0R5hH waCQyWzdauM/si21JbVgNcZYjdqDqD2I2lP9oG3m/aqe32pVh/rqUF8d6qv7VZ9aterwX6qhtVTG P/QmiN4EyTxgCXAXcvQQ5ybj4rxknGhmhNSAxfmdjIHyuLImuLIm44EpSF+N7TyzP5mPPAuAG4Fb wd0G3A4swbG7gLuxf8//Ye9MwKQozv9fu70Xs+zJci6w2O6geLA9M4Ac3b0zCrggcWQFRByDMYgY TeKqMd73mEMjJiaiowHEAe8RDeqCKOgAImESIsegwWO8j0EFEY0H/f9UzeyyIIK44cn/9zxuPW9X dXUdb73fb71VPTPdi9xKnRnEtyF3UnYW8Rz8ej6WimOp+O56OE3kNn1HPUK76RFBjwh6yBZDtBja px6Z9UvOQF+uHFcj1pb9X0V8NXIN8kfO/4TcqVhxPDljWeFKqFNDnRrqNCkdpV4ZnZqo20TdplY9 ZP93ynU6u5a6smtmScvcVz2PR05TGkR200DZh1ZiSouiVrzGK3vsYkVKxWW72RL7024ttRLUSmD/ iBrXicTj0S5j/wj2jxg/pvRk1WLI+Anx6ci5SBNyAdcvJ75C9dawiy12xaeBnhuy+EgNQll8ItJO 4BNR+Eh7hZW9ZarJGLujWXEnY7O23ClvzZXcaeHNNzkTpkaYGuFWXkhOzMrYLMu+jM1aLBvezWaZ 2rcqJsWUNhnutNVG40yWjXEWU2c7rxWZa9kJrUO4VzbfRrY4EesQZAgyVHocc6ETMxch7InNOLIM WY5soHQSYZ9vvi7XIjPqNJkPITHkCaQZWch+ahGyhPRS5FkkjixDliMbnDCthGklTCshc6tci9Re rXUtMudxbS09rkPWIy9z/jbyEbJFrgfs2pqo41I6RNAhhg4xdIigQwQdIugQQYcIOkTQIYIOEXSI oENkNx0i6JDZI4aVHq1rETqE0SGMDpn+W/qOqH1mCX030GcDfTbQZxN9NtFnA3020KeLPl306aJP F/000U+btciEZ+ZdyN3IXGQeI7inzWgeQR5FnkQWI89wbQXxc8haeliHrEfa4vIy11LEbyh0m8z3 OP8ASXP+IfFHyBbyP+F8W5YPO+28AUkiG5G3VclY63glM6StW2z8bbbd2nYt2o1tTbJvUb5LO9/E KkR7IdoL0V5oF51asCrZrxZaarWuNOYXTtxk1Td3OHFLOGGLu1WLu1WrJ3KI47MOZS70Qw5DPOR5 ER8yhGtDkWGkuUu12L1Y9cR+hDtU61ji0cjxSBCutK40u8yw1pVmH3qEdtMjgh4R9JAthWgp9J31 yNzJtK409Bmj/Sbaj9F+jPZjtNlEm03Uz2Aeo06blYY6TUrHjF5N1GuiXlOrLlKH4ZwHs3NE3lW5 sndPrSuN6lmo3iO79a5sQysxqQGttFlpqLGLBSklx9VmpdmvdltXGuwfkePC/hFqh7L2j1hFlOyA sAu02AVa3ZDuCHsuy03cV/XUsIsddsWngV4bsvjI3kNZfCLKRscSZ/CJoFEo63u+yqaazK/arjS7 cKd1pVHcaeHNTs6EKRmmZLiVF5ITx7bhQutKk7VZptauNsu0YCs2xZSlW1eaXbTROJPlY5zF1NnO a7kFG+Udc5HLNUf0FDXiv/LnpJ2Uk2o9S+2t7B5qpxz5/eH+95ra2evONpz0d6wdcWIIu3+nJqO/ 06zy90OTthrsz7jpL71nPTNXvssYWspJ3b9rv6peW6vJ8VvEMcdHO/0cC+mHPapULN8G3498XzZY u48420rMiVOqmWMzoYlazVlbNjvyv+FkQvob9oo6UaXDVGpPdS5F5H8OUrG63iD/h0Y2TP/GOL4X Z3Zpobldtb8jz76lduJ/V3v3WS9R2I++4+3p+n9au31W2721pv0q3S6u/pc1j7Sr9qX7WT7jCRKZ 0JLeVY+s51beQf1/g4j6vxjsL79zNzlihqgVh7T+gi/z672h6pd7w8VI0SBGiePECWKsaBTjxQQx UUwSodbf8t0ibt3Lr/niYplYLlaI58RK8bxYJf4uVouEWCvWifVig0iKjeIl8W+xSbwsXhGvZX77 J96qvbn2ltq/1N5aO6PN7wCX1j5T+2xtvPa52pW1z9euqv177T9r11gXWBdav7Yusi62LtntN3fX Wtdbv93tl3cR6w7rr9ZMa5Y1x7rbilpzrXny13jWw9Yj1t+sBdnf2/18D7+4uyZ4bfCG4I3BPwRv Ck4XuYy9llCN1eQ7pw4T8snA/gQNC9axS/AS8rHkQFGANQeJQix6lCjCqkNFByxrChfWtUQxFh4u OmLlkaIESzeIUqw9SpRj8eNEBVY/QVRi+bGiE9ZvFFUgMF50BoUJoot6n3lX0JgkuoFISHQHlSmi B9r9guN0Qh4I3YwmtxDKQOpWWpgHStXgJJ8AfAKU8sHpGfSJg1FHUHoeTVaBUik4raXfdaBUBU4v 09crhO4g9RrHlJC/9Xud4AK1NxjLW4QuoHezKAfBW0RHUPyL6AqSt4pS0JwhqkD0NlENqneKfJBd QBp0SS+tXUr5Z2rjlARjSj5f+3fqgrIoA+cLRCVYXyg6gfcloitoXyqqQfxykSdRF4XgfpUoktiL YtC/VnSEAdeLLrDgtxz/YP1BFMCGm6g13cIysOIWkQMzbhX5sGMGV2+3bqeFiBURnWHKHbQAW0QJ fJklSiVn6D1qRUUVzJlLmXnWPDS537pf5MKih9DhYethyj9iPSIqYNTf6HeBtUB0hVlTRA7sOlPk wbCzRBEs+7noBNPOF7kw7UKhSbZx9ZLgJaIAzl0lOsC7q4UL7l0jSuDftaIUDt5ArRuDN4rOcPEP tHxT8CbRLTgdVspnj84D5TIYU0GoFL1Eb/CTTC0WfUXfVqZKdmqKlyWKl3mKl/mKlwWKkVWKkaXi WEKZ4mW54mUXMZrQTfyI0F2xs4diZ7ViZ4ViZ0/Fzl7iJEKh4mhHxdEixdEO4lRCb3E6Qb5P6nxY dRnBpZiqKaZ2VkytUEwtFg+KB7NM1RRTCxRTqxRTSxVTyxVTqxVTKxRTOyqmdlBM7aCYWqKYWqA4 2ku8Q+itmNql9o+1f4Jnkq9Viq8dFV/LFV8rFF+LFV81xddixVdN8bVK8bVc8bVC8bWj4mtnxdce iq/Viq8dFV+LFVNLFFPzFEerFEd7KY72sn5n/Q4O/d76veht3WjdyFHytdi62fpjlqma4mie4mhP xdEqxdFSxdFya7Z1F7NFMrVaMbVCMbWnYmpH6x7rHtq/z7qP1naytkSxttSab80X3axHrUdFd8Xd Xoq7HRVf8xRfq4O/CP5CFAZ/GfwlbM5wVzI1XzG1QDG1VDG1PHhd8Hp4KflarfjaU/G1o+JrkeJr B+6oZss7qsKNrstgTe/9Wx2/ddUMq2M/9sByJx535DvN5Dl7N7U/lyulr3VvbsmrrXXjmTU1E3au sXIllrtzdbZzZ57eQ79hVuCw3HOzR2cNdqbLHbnjyqz9TiN1M7vyyM69Y6ad77dTUZol9m8f2lpX 6hff3z3NrndZ9J1U+xP5XzWnq6t7GUd27D5lp5rsrkXefzZjD4XDvvap7Rpval/67U9dJ76/O9Od vGKf9r1G0NpSO2q3506gXVrXfP822jXedtxttqvf9tRt131Gto39usvK1mkPN/4Ld1rf/KxiP+qG vyW/WYWQmnWhljmYvavau41yRMRdqJ49annyKPPUUS/1xNEh7n7uw91HuPu7PW6fe4B7oHuwe4h7 mNty16snkC7e6xNI89z3uO913+e+3/2A+0H3Q+6Y+2H3fPfj7ifcze6F7kXuJ91PuZ92L3EvdT/j jmefV1rpXuNe617v3uBO7nx2iY1dTt/cvlrfwr5FfTv0dfUttvvbhu2xvbbPHrDbk0ambdv1e3je 6AR7rH2iPc4eb0+0T7Yn2afYocwzSPYUe6o9zT4r+8xRdE9PHQUXBhcFlwSfDcaDy4LLgyvYYZ6L 3QpFNbbrIPKwn0vkY8MSUYAdK0QhtqwURdizs+iATbsJF3btLn/B6O4hcrBvL5GLjWuEhp37iI7Y +hBRgr37iVJsfrgow+5HiHJs319UYH+PqAQDn+gEDgNEFVgMFJ3BY7DoAiZDRFdwGSa6gY0luoNP vegBRuehw/nu89HhYvfFlP+dm7sDkOLuALRuQ+eIeyZXo+4omsxzP4AOD7ofRIeH3PPR4XH34/T1 hPtJ6j7lXkr7z7ifoeW4O85xmXsZI1ruXk7dFe4VjGKleyWarHGvQfO17rW0tt69nlob3BtoLelO 0s5G90Z02OTeRL/b3NtIg7HoILfvogSkNVEmkRadwbpYdAPr/qITeBuiCswHkDPQHiiqQX2QKJLI i2KwHyJyJP6iIwwwRYlkgegKD44RLrgwnPIj7BGUhxMiD1aMEvkwY4zoADt+RJmgHaSFE+wTRBeY MpYWYIsohS/jRZnkDL1PsieJzjDnFMqE7BCa/Nj+Ma1NtieLAph0OppMsadQa6o9VVTAqmnocJZ9 FvvEO4J3sIucGZzJ3nB2cDa7y2iQ+yzYNo+9573B+9ldPhTkDkuyjjKPBB/hzuiJ4BPsQJuDzdw9 LQwuZO+5KLhIlMHFJaISPj5LC/FgXHSBl8voZXlwuegeXAFDe8h7+NqttVtFp9pttdvgjXDngKVk bb5ibY7ia67iqKbYWanYmafYWaDYWah4Wa54WeQ+zH0YmEl2uhQ7O7uPdB8J3obbAGPJzu6KnT0U O4sVO6sVO3u6h7qHwg/J0QrF0RLF0VK33+0Xvdwj3CPgx3g39/zuye7JpCVrNcXaYsXafMXaHMVX TfG1UPG1XPG1SPHVpfjaQ/G1WPG1QvG1VPG1VPG1UvG1UDG1p3uVexW9S752dv/L/QK9S9aWK9ZW KNa6FGuLFWvzFWs1xdp8xVpNsbZcsdalWFusWFuhWNtdsbaHYm2FYm2+4mul4mueYmq5YmpP22/7 4W7APlr0UnzNV0zNURzVFDvzFDurFTvLFTuLFDtd9gT7JHgsOdpDcbRYcbRacbTCPtU+lZYlU3MU U3MVUysVU4vsM+wz4OiZ9pmwWfK1p+JrheJonuJoj+Dc4FzuayRTcxRTcxUvCxQvCxUvixQvXcEn g09xxy552UPxslrxskLxskTxslTkVk6U90SdJnZ+UxzC/fj/8E9+O/E/6vlb1vID2meN+vw0c1co 71K4b1T3ck3q+67v/nnq/vbboI4xdecYkzs/uSs5kD1m+83cb4W5T870HCMVV58gxw9035mes3Hs v7Hb/Q79RbKfj2dCJh3LjvcAjnhf+/ADNXp5l73X6yE57gPQr2sf18MHxtrOPr6RP1C8bvv50R6v HyBftmP7vvr933jvAzXeffI5TAgpDxbeOcfb3++OfdzHO64dKcfF6iE/0ZJrRlh5lXZbYV+6q3E2 yc/v/rvj3Zfm9BlWv1to8Z9ql5D5RLQ9/e6Yuo/r21mXG9S67FMjb8pqcEC82Hf7+7+4Q9qXn9xr 3XbskDL7nHb1/b12SPvyz/us/39sh9Se/UR7dkjf5/PG76jVXke0r3WhHf3udYe0r31OO/rd6w6p PfN3H/3uldftnUd76Xevvmxf+5z29Pv/4w7pAPJ5rzukfe1z2tHvXndIB/DOa687pAP3GcPed0j7 2ud8/7+97pByxBV1n9Z9ZghDM/Kzz622PLPazeiRfWr1CPXU6hDDb4wwjjOCxonGOOMk9cTqZOO0 b3liNfO86gXqidWLjIuNS9o8r/pnY1brc6qzzLvM+8wHzVj2+dSWZ1OXmM9kn05dq55Ofc18x0yb W80vzB2mY+WqZ1O/7cnUzHOpPdWTqX2sgyy9zXOppnVsy/Oolvwvr+cw/k9FTt1ndZ+JHOwgRAG2 0IS0R77IwyZFIh+7FJNTYpRwrDAqOFYalZTsZHTiamejM8duRjeRi8160E4fow852E4UYr0jyMeC pIcYQ0j7DT/HEcYISh5nHEcvQSMoirDriRzHGeNEB+x7EulTjFNEBXY+VVRi68miE/Y+jXxsLlxY /QyuYnlRLG0vOmL9syn5c+PnHH9h/IJ2fmn8klpNRhNHEBElYHIBLfzK+BVXLzQuJP8i4yLKg5Eo lSiJMnC6nqtgJcpB68+Un2XM4jjbmE3+3cbdHKNGlB7nGnNFGSjOElUgeRfH+8z7RHcQfVB0AdWY 6Aqy80U30H2UnAXmAo7NZjPHheZCSi4yF3F1sbmY4xJziegM8s/QznPmc+TAANEDDqwlHx6Qfs18 jfQ75jsc02aaklvNrfTyhfmFqIYdOzg6piN6wpJcUQ1T8kUtbCkUbhjTQfSVrBG94E0J+XBH9Jbs ETXwpxNlOludOXaxutBCV6sr5btb3TnCKdEHVvUU8pnnXlztbfUmv4/Vh/KwTBwkeSZ0mNafq7BN HAzfTMofax3LscFqIP846ziOY6wx9Pgj60eUD8JE+R9Z38y9IvdKuPhJ3TZRrniZV7e9brvoqNiZ V/d53eeiuO4/df8h/UXdFyK37su6L0l/VfeV6FD3dd3XpHfU7aC8U+fAKmY1zMiDx4VGgVEg5LsM i8DYBZtLjI6wudgoNcqEelIdRjLvwbgKNpcYXYyuXO1mdM9yOs+oNnrD+xqYXWIcZBzEVd3QqXuw cTA8qDVqyXEbbtJ94X2p0c84HCYdYfRnJtQZHmaLlzlQagw0BpI/yBgEh44yjiI92BhMLTk3yoyh xlD6GmYMQxPTMEkzaalVb9TDeDlzyoyAESDnaONoNDnGOIZ+hxvDScsZlWeMNEaSc6xxLDkNRgO9 jDJGUWu0MZoW5HzLNcYYPxLVatZVGScYJ4jeRqPRyEyQM7BKzcCexnhjPLNigjFBdFezscqYaEwU vYyTjZNJT2Jm9jJCzMzO8rl90VXNzEo1M7saU5iZPdXM7KZmZmfjZ8zMXsY5zMxu0j9y9VzmZFc1 J7upOVklfSX5v2Y2dlOzsYdxqXEZ6cuNKyh5pXEls/0q4xr0vJZZ2oNZ+ls0/51xg+hi3GjcRC/T jenk3GzcTDt/NP5E+VuMW9BfzuEq4y/GX2jtVuNW9JxhzCD/NuM28m83bqd8xIhQ9w7jDlq+07iT Xv5qzCQtZ36Vmvk9jbuMu+hljjGHuvhvysv539M8xQyJweap5o/FkcoXHGTONmeLfsojHGTOMeeI Q827zbtJR82oqDHnmnNJzzPnib7mPeY9pO8176U8KwElH8Jr1Mo3FojDzUfwGoeZf8NrHGo+Zj5O zhP4jhq5Sgi3+SRe4zDzKfNpri4xl5IvfcdB5rPmctHHXIEHOcxcaa7k6vPm89RdZa6il7+bfydn tbmadAL/cri5xnxBHIGXWS90c4O5URxsvoivOdzcZG4i/2XzZfR8xXyF9Kvmq9SSPugIM2Wm6Ot1 83U0ecN8g/Sb5pvUett8WxyiPNQR5rvmu+S8Z76HJu+b79PvB+YHpKXnOsjcbG4m50PzQ3I+Mj+i l4/Nj6m1xdxCC9Kv1ZifmNsoKb2bx/zS/FIMM782vxaG8nQe5emGyB8Nizorx8oRg5TX88i3N4ih VgFez2sV4e8GWB3xd0OUvxuo/J3XqsTfDbWq8HcD5brJ1W54ugHK0w1Uns4j11Dya/BxA5WPO8o6 2Kol7bb6UvIQ6xDR3zrUOkwY1uH4vqPwfYYYZnksn/BZA6xB9HKUdRQ5g63BtDPEGkr5YdYw9JSe 0WPxR2u2ZaN/vVVPvt/ykx+wApQ/2jqausdYx9DycGs4vYywRpKW/tSj/OkQa5Q1il5GW6Opy7pO eelVh1jHW8dTRvrWOpGTExJFbIbuy300dzGyQhugjdamaefl35sfy1+qTcvfUDitcEXhxsLXi/Jc x7vOcb1f3LG4sri2uH/x4OKji4+WZYrHUGtnmLYzuN4v3KhqTCg+rXiCuqauF/+s+Lbix4vXFb9U /FrJFSXXlcwsfqlkcemGsrwyV1lVWf/yzytcFZsqtlfmVXap7FN5WOWAygGyTOVQ6u0Msn5rqNhU puqQ/5KSlyqHVx5fOVwbkL8U/RkBenQsXCHPpQ6M6vX8ews3Ft9WMpNe6bdie8X2sjx5TsuqbfSp Kl5XckWZC0ssleVVwDKcrcAe76P3zEwZFRgJ53nov4k95H3aKu1d7X29RvfpA/RB+mB9iG7pth7Q j9aP0YfrI/SReoM+Sh+tH6eP0cfpp+s/1afp5+uX6zP1Wfo8/TH9cf0JvVlfqC/Sl+kr9Of0lfrz +ip9jf6xvkXf6hngafSM847zTvSe6/219yLvw964d5l3uXeFd6X3eW/C+w/vv7wveNd613nXezd4 N3pf9L7k/bd3k/dN71bvJ97PfZqvxNffV+cb5BvhG+k71tfgG+Ub7TvON843wXeSb6LvZN8k32m+ q3xX+67x/dl3m2++7wlfs/2f+q713f0z/bP9d/nn+O/2R/1z/fP9j/gf9T/uX+hf5F/sT/jXBCYG Tg5MCpwSCAVODfw4MDVwZmBa4KzAzwLnBH4ZODdwXuDqwDWB8Nh3x34wdvPYT8duH/vZ2C/Gfjn2 q7E7GvMa8xtrGvXG2sbDGo9oPLKxf6On0dvoaxzYOKzRlP+Rxmnq/aV8lw+pGKmwqNZ9Tkof6dTo DU5YH+VE9dGcH+dU6WOIH0MeR55AmpGFyCJkDde3IFudlHcccq6T8s9E7nZq/FHiucgjyGKnZuxm p6Yxz4k25sv3+Oo11D4GaXBi+jQnqc+W7/HlLE3fst80badpO02dFHXSIperKamV+IPee0eYFpr0 PsQ+WhjIlSFIINvqieg/nvwJyEmkTyae7ET005CfcH468U+JpxCfwbWpTkI/k/Q0J66fhfzMadbP Jj6HeBbtoZ0+h/JzkXnIY9R5HHkCaUYWIouQJym3AnkOWYk8j6xCXqDOWmQdsh7ZgCSRjdR5kfgl 5N/IJuR19HiD+E3kLeRt5B3kPfLfRz5A0shm9PsI2UYb251mb9CJesc6EW8jMeMHj5h3osIk5v01 8UXIZeRfjlyBXIlci1yHcLfqvR75DXID5zc6Uf8MJ+K/HeEu1n8HcifyV2SmE/NjA/99xA8gDzoJ /0NOs/9h5BHO/wbeCxA44n+K8k9Tdin5zyDPkuYu1b8MWc61Fchz5K0kfh5ZRVurqZdAXqDMWmQD knQiY7cgW53E2E+c1NhPke3IZ3CjwIk1FsKrIuIOiAspcyKN5UgFUunEGzvJ+1FdvoE3r5V5LayT XEyTE+G6j1yJdkRMgWON8KsRfsXhUxI+JeFTEj4l4VMCPqXgUwo+JeFTCj4l4VMKPiXhkuRLEr4k 4UsSvsThSxy+xOFLHL7E4UscXiThRRJeJOFFEl4k4UUSXiThRRJeJOFFEl4k4UUKXiThRRJeJOFF El4k4UUKXqTgRQpepOBDEi4k4UIKLiThQhIuxOFBHPyT4J8E/yT4J8E/Cf5J8E+Bfwr8U+CfBP8k +KfAPwX+KfBPgX8K/OX8joN/EvyT4J8E8zg4p8A5Cc5JcE6CcxKck+CcBOcUOKfAOQnOKXCW2CbB NgG2SbBNga3EMQmOSXBMgGMCHBPgmALHFDimRNesh0opPzAq4wvwFHvzTik8yO6eqcUjpfBIqax3 ScGLY2DBT5HZyLysv0nDh7QogiE1ijOnw5CfOv3IbcBHNCi/ME++x1fv7ViUulTvQ3wEXuNIZE+e aQRtZrxTFDY1Z71TRA9xbTLlT0MyHiqW9VAx5aHOVH4yjXdK03MK75TGOyUPsHeK7sE7xb7FO8Vg YQwWxmBhDO+Uxjul9Y+RjIdKZj1U7Ht6qBgMjcHQWBsPFYOhMRgag6ExGBqDoTHloe5y0v45SFtP 9RBse1gxdncvFct6qSjsjWa9VDPsbYa9Mdgby3qpGOyNtXooViiYHIXJEf96zjOeKgabY3vwUtGs l4rA7gjsjsDuGOyOwe4YXiqNl0qzBtZgzQzX4jCgGbTTWZ5xb6K818A2fJqa9WRnIWe34cO3Yb2Z Mh+BhbR71uZ48NQu9qCcHCPeNiXHgW5JdEuqeVCV1a0J3abScxT9Iln9puJjpykf25te+iBN+Mkb 5FsNSUVIRVQqSSpJqjc7jT7yXRe0NZ36mXLZGp4ip8HTQb5ziVSYVEwUezc4/bwbneneF1nv/u3U +E5DrnZqAiGnX+A8p19jLTLMaW405bt9vQ/j8dZScqMT9n7CmD93Ej7DafYNku/2JTdFO2naidNO nHbi1E1Tl7WCq2l1bBZnemM7ptNWzDuf+A3aewt5m7bfIYb33o9YNT+Gk1s430r6E+JtxJ86Ce92 5DPSn5P3H+p8Qa9fkv7KSfoGKl2afacjIO2bgpyBTEXORKYhZyHsRnxnI+xGfOc5Ud/5xBcgv0Iu RH6NXOxEfJcglyKXIZeTdyVyHWO+nr6mk/4j+X8ivgVZjDyFPI0sQeC7D777WJV9rMq+55xIgN1E gHkaGEc8HpmAnIRMdpoDP3ESgdORnyJTnGSAVS9wPtfQK4BOAXQKXIRc7MQDlyCX0g5zO4BegSso dyVyFXV/w/lvnVgAzAM3MicOZY70w/NboGgj9cwNPxJARnLtWMo0IKNAa7R8ty8YxUUB+ETBOo3t E9g6As5pbJtoZUET5Rq4muJqjKtNXE2JkWDbCK6NYJoG0zSYpsE0CaYpME2BaRpMk9RMg2kKLFPg JttOg08afNLgkwafNPikwScFPmnwSYNPGnzS4JMGnxT4pMAnBT4psEiBRRos0uCQBoc0OKTBIQ0O aXBIgUMKHFLgkAKHFDikwCEFDilwSGHvFLZOY+s0tk5j6zS2TmPrFLZOYes0tk5h6xR2TmPnJDZO YeMU9k1j3zT2TWLfJPZNYt8U9k1h35Saa3LmNDNHEsyRKHMkyhyJMteamWvNzLVm5kuC+RJVKKRE rppTn8t3+2L1Guzmw279yAnB+0Zs1k+c542R8zB4zCdezOzB+3rjzJA3wOkthH0NKMRBIeJlPwMS MZCIgUScFqO0GAeJKLMrCRpRWk8xs1LZmZViZkmE4vQW942ACSMRWOODNb5RyGgE38qMizPj4sy4 ODMuzoyLg2gcROMgGgfROIjGQTQGonEQjYNoHETjIBoH0SiIRkE0CqJRZlyKGZdixiWZcSlmXByU o6AcB+W478/0Ox9ZTPop5GlkCRJHliHLKbsCYaUB8RiIx0A8CuJREI+CeDQwUc2+OLMvyexLMvNS zLxUgHsX2BBl9sVhRBxGxGFEHEYkYUQSRsRgRAxGxGFEFEZEYUQcRkQCv6f+DYoZUZgRgxlxmBGH GRGYEYEZEZgRgxlRmBFl5qUa5V1YnppzW2EIvlX51AEq5w1myltwJoNjAtwSLbMSnKJgNB18EnJ2 gkMaHNLgkAaHNDikwUHOrAQ4JMAhAQ4JcEiAQQIMEmCQAIMEGCSw+XRsPh1bp7FzAjsnsK+cUQns m8C+CeybwL4J7JbGPmnsk8A+CeyTaLXP5coTSa+TYOwJxhhljNMVj6sYYxMjmM4IorAshubThZZd UaJq5HmwOgmjk74ccqrlu31JNZFqUqkEKdY0Sl1KqUuZL5/ItXBnaXuN02D/S5YmFSYVEzk5Depz pVm5vyf8WYV5uQtynyasJmwgvEbYSvgq9yvNpblkWsZaN61b7jxNR36rwq0qRGWghQXao9qbMqb2 grzeedNaQ+aduzL8Pm9d3kvIu3lbCevyBcFFqCL0JcivsOx8myvyjFT+mPwxeS/lT0AWq7BKhY0y 0Mq7+W8XdFPtvZtflfduQWPBnYR5KjQXPI2sLthAeJPwIeHzgs8LXYQqgl6oFzSrM1KFRqFR8HTh UGS2CjEVFstAG6sLVxV+pVpbTRurC1ghxCxtknaKdq12nRbWZmODh7SY9rA2X/ubtkB7THtce1Jb rD2lPa0t0ZZqz2pxbZm2XFuhPaet1FZpq7WE9g/tn9pabZ22XtugJbWN2qvaO/IzKW2z9rG2Rdva e33vL3p/1dup0WryjSeNxcbbxjvGu558T4Gn0OPyFHs6e7p4unq6ebp7enl6e2o8fTxuT1/PIZ5D Pf08h3kO9xzhOdLT31PnMTwej9czwDPIc5RnsGeIx/LYnnqP3xPwHO0Z5RkrP6nyTPCc5JnkOcUT ss+1r7avse+3H7AftP9h/9N+wV5rb7Jftl+xX7Vft9+w37Tfst+3P7DT9mb7Q/sj+2N7i73V/sTe Zn9qb7c/s/9jf2l/ZX9t76jPrdfq8+rz6wvqC+tL67vIz6bqq+t71tfU96k/qP5gkZs73Ylpp7NT yyMVJhXXrnVivdez8mraHAb+ofwUacd29XlSpPeX8FjmN5Avz1wqP0TKp1JhUiGRp83ZsV1jz0yp cGvtzOdSsnYoW9unzny7tBVRLXTX7keTB5EYMh95lFoLiLnX1ppJc4+tLSbG12px4uXEqxnBP5B/ Iv/i/AVknRPR1iPs3rWNyEvksS/UXmXMWquOLeNtymjMHrPlWlxd60j/YfoN02eY/nb2sw5ZT51/ IS844T7HI+Nou/QbNVajxc5aIWqF0CLyjZqV2qn0PJlS3Blq5xLj4zV8vHYFciXCnZLGzqpNDxF6 kK3HaD3WMmaRoz7/yzXud2LGcokxqTCpuPG2E/PkM65KYwnXniV3FfFa4leIX0VSCHeEBnd+Bnd+ np7s1HWkrxPxHIkMJm8IYpOul33JvbzQPEU7trOjr/HI/04j9/dNnEVkvuMi1eCR/1NL5vs4C6lU iBS6ZWoi7AkpFW5zn6C1lFe1W9rytbYVUn1091Q6cU8V0gXpjvTkSm/iPohOupa4L/GhxEcS1xEP YkyDkSHIMM65R2gZk4edqedoZDh5I5BRaoTYrVVHqUuN1DF7tvManNkd2TY2DNP/zn5tpF5yZp81 BinLt9QKUSuEVhFRaV/nxOzrWV9uIp5BPIf4bmQuMg+JIdzp2CmuvYN84ERs7mjsr8nb4cTqNSdS nyftaZ9Dzu8kIqTC9rlOnLO4Lf9jUI5cwYRmr9mxnXWspr6XxJi8Js4iMt9xkWogP6LyfZyFVCpE Sraoau7YXp9Pj70kxq2ro9ZSXtVuacvX2lZI9dHdfhFdmL/2y8irSIor7C9t9peMK2S/R/wB8Wbi rcTbiJkFjDPMOMP1wonX5yDZ8dYXoEkh0oE8F1KqRsioW3WUutRIHbNnO6/tAeM29g3T/85+NSRv Txh/o8aXCpWWWiFqhdAq887Aoh/eGSh+eGegED+8M7A9tX94Z+D3+PvhnYHfq68f3hm4r78cMUP3 6YNav/3PfPM/Sn3rf6I+Xj9Jn6hP0ifrp+k/0afoZ+hn6mfpZ7f+DmCOPncvvwR4QV+rr9PX6xv0 pL5Rf1F/Sf+3vkl/XX9Df1N/S39bf0d/T39f/0BP65v1jzK/G9C3ecd4g96x3kbviW1+PXCZ93Lv Fd4rvdd6r/OGvdd7f+O9wXujf4b/dn/Ef4f/Tv9fd/vOf57/Pv8Du33z/5T/af9S/zP+Z/3L/Sv8 z/lX+p+Xvwbwv+Bf59/gT2a/79+yh2/8CxoLG8sayxsrGisbO8n3DWAxn6jGaoNEDpYbInKxniU0 LGiLPKwYEPlYcrgowJojRCEWHSmKsOoo0QHLHidcWHeMKMbCJ4qOWHm8KMHSJ4lSrD1RlGPxSaIC q08WlVj+NNEJ6/9EVIHAFNEZFM4QXUDiTNEVNM4S3UDkbNEdVM4XPUDmco4z9ZloMkufhSZz9Dmi DKTm0sJj+iI0X6YvQ/MV+iqurtHXoM8LehJNNuob0eRFfROavK6/Tr9v6O9Q6z09TV+b9c308pH+ EceP9Y8Z1xZ9C3W36lsZyzZ9m+gCemNEOQgGRUdQHCu6gmSjKAXNE0UViI4T1aA6UeSD7LmkQZf0 Zd7LKH+590pKgjElw97fUBeURRk4zxCVYH276ATefxVdQXumqAbx2SJPoi4Kwf1uUSSxF8WgP090 hAH3iS6w4AGO8/3zRQFseIRaj/r/H3vnASZFse3xM9ubE5uAZXcnUNWS1JnuKkFArJ4BJaddgoDk HJa05IyISJIgiIiomBAVkSQiAiJJUHLOAipJQEQFBIR3+uw+Lnq514W3+Hzvgt/3796a6uruql+f U3N6PDUfj1rkXwQOJOMTCEE6luCnS/1LsYVl/mWQH0lZji0gLRCDvKyEWJsZPPsX/i8gCclZh3XW +9fjlWz0b4QgpGgLXsM2/zasv8O/A+KRqF143t3+3VAQyToBDqTrewhGws5AOFL2IyQiaRchCEm7 DJpNG356Lf0ahCJzwRCB3IVAJLIXCjHIXxjEIoP5IBE5jIP8yGI8FEQeEyA5IxGppJyBzMVcSIyH eVAfYA/i+NmkRrGSrOQNUm06NeIyhrgMJi5DiMtQIjKJiIxl9Vl95MbmMo64LMAasoZIW2PWGAmw 6UwhOlOJzniiM43odLK2rC3yYTMaTYyGE6MRLJNlgot1Z92Rm6fYMKRqDBuD+zapGpGan0iNJ1Kj 2Kfs0xxSNSI1lEhNIlJjidQ4IjWVSI0nUqOJ1AgiNYJIjSFSQ4lRJ7vALoCLSC0gaoiayJnNaxLx Gk28xhGv8cRrFPGqEa9RxKtGvCYRr3HEazzxGk285ideU4jXVOI1mniNIlJjiNRgYjSJGHUSo07/ bP9sZOgD/wfg8n/o/xDV5jXKv8C/MIdUjRgNJkbTiNEkYjSWGI3zr/KvxqfFJjWVSI0nUtOI1Gj/ l/4vsf0N/g3Y2j+ojSFqY/3b/dsh2b/TvxMKEbtOYjeaeA0mXlPTz6efh7D0n9J/QpqJXSI1hEgN JVJjidS4jPCMSOTS5jWVeE0jXqOJ13DiNTtnYPi9nIH3cgbeyxl4my3dyxmY+2Pv5QzM/TH3cgbe /M8B08Qq+sXyf/9eOfu3ynvpd8rfiO/EcXFCnBJnxA/inPhR/Cx+ERfFr+IK/W655L/93XJL2Uq2 lm1kW9lOtpcdZEfZSWbKLNlD9pS9ZG/ZR/aT/eUAOVAOkkNyfuU8XI6V4+VE+byc9I9fPMulcplc Lj+Tq+RquUaulV8E0gN1AnUD9QL1A0/84ZfOzQItAi1v8XvnHoGegd6BPoG+gQGBgYFBgcGBIdm/ gQ48GxgVGBMYm/Ob52K3+tVzxqMZKqNCRsWMShmVM6pkVLVzBmK/rcK5/RqxBoKx/9biDH+9WA+h 2I/2L0c2iU0Qjv25FSKwT3dAJPbrTvuXEWIXOLB/90IQ9vF+nGcdEAdwVvWN+AZisL+/w28Hx8Vx yIf9fgJnXqfEKZx5nRFnIAHH4AdIxHE4h/OyH8WPkB/Hw/4+8ov4Bed3F8VFSMax+RUKiSviCqTg GHkhHMfJBxE4ViUhP45XVUjFkaoGwThadSEER6wRftpcNgcNR6wdxOBYtYdYHK9MyIejlQVJOGJ9 8Nh+ciAk41jhNy8cryGoQ+VQiMJxewqPHSaHQTSO33AoiGM4FuJwHMdjaxPlRDzqefk8tjZJTsJ2 JsvJeA1T5VQ871w5F/dxjHF/qVyK9ZfJz7AmjjTWXCO/gGQc63RIxPHGOTuO+RNY0iDQAFJx1BtC uD3yEIVj3xgc9vhDNBLQDGJsCqAgctAWIpGFdli/faA91kcmIBipyIQQJKMrRCAd3bBOViALW+gR 6AEFkJSe2ALSArHIS1/IZzODZx8UGAT5kZzBWGdIYAheyVOBp7C1YYFhEIokPYNX8mzgWTxqVGAU xCNVY/AaxgbG4jzRneHGWSTLYDg31DN0cCBpxSAJaSsBwUicF2eXZoYJYTZ1WKdkRkn8ZvRIxiM4 Ay2XUQ40ZPBRnHuqDAX5kMUKkIA8VsQWKmVUggLIZWU8S5WMKlAooyoSSjkDxRwxB4mZK+aiLhXL kBub2hCi1kG8BhGjGtGZQHQGE52hRGcYcRlHXIaLY+IY0mzTGUl05hcnxUkk77Q4jeTZdBYiOlOI ziiiM5XoTBMXxAWk3GY0nhiNIUZjxVVxFZzSIR046vEyAQrIVJmK+za1GlEbRdSGELUO4lUjXsOI 1zjiNZx4jSReU4jXKOI1nniNJV5jidcE4jWMSE2TI+QIPLvNa375nByHZ7epjSNq44naSKI2iqgN IWo1ojaEqNWI2jiiNpKojSJq44naQkRtClEbT9SGEK8JxGswkRpHpKYFWgVaIbutA/i9kngNIVId xKhGdAYTnalEZxzRGU50Rgb6BfojxzajKcRoFDGaSozGB4YGhmLLNqkOIjWISE0gUsMDIwMjkdHR gdFIs81rGvEaT4wGE6MpGcUziuP3GptUB5EaRFyGEpdhxGU4cRmZYWUE8Bu7zWUKcZlKXMYTlzHE ZSwEGUPt70Tm6TINYCCIO/eHt/ePvgvkQaajf3uOZ+56HjzK7kJ7dzkPXfb3pruVcyI7qwLt3cUe s7Mo3Ni/W3dy13MfZr+P/KvOcZfH46+4j7ueofGvyMSCM/m7PB5/7CfKuHKXc5n+JeeYlvcM/DGv z3U3ZYfp/j/NE/a7Nv84Hjn3kZcE/DFfD2W46f6vv1vmyTmnZY95Xo7JP/UVxd3y9hz/NOaV6T97 1PPs+f9jfixs347Z3tV5yg2u8nI8/siVm+6jcV7exy36qjL1V+W7Z1OyMyLl8TP4x/ugZzBv7+GP +c9y+iono1YeneNWtqRxztuIvDrHrcc8b89xS1tiW628af/W57x5LpQ3WUH/qa+eyabq7uU6vDv3 8U/neCbHtudh27dkd9o/nsG7ch/Tspm629948trX/tM5ut8Ff/6n86i/ZF7/fyJGkIu++j8RI/jz fr4XI7iNc9yLEdzOOe7FCLJbuN3fRvwHxwhuN7fvncQIbns87iBGcLs5e/+uMYLb7qs7iBHc9pjf QYzgdnNk/11jBLfN1R3ECO6gr/6WMYLbvo87iBHcbg70O4kR3JEtuc0YwR2O+e2d445syd8vRnDb ffUfHCO4I3bvxQhyd447iBH8z9+l/OfECPKgr/4WMYK8WHnqXowg1+e4FyO4nXP8h8QI8vo+/z/H CPJ6fZ9bxQjyfDxuESPI63V7/rdiBHneV7eIEeT5mN8iRpDX62T9b8UI8pyrW8QI7kJf/a/ECPL8 Pm4RI8jrddBuFSO4K7bkDzGCuzTmvz/HXbElf32MIM/76v9xjOCusHsvRpC7c9wiRoDP5N2edwdB uaDngiYAaDW0GhCs1dJqQYiWrqVDqFZHqwNhWj2tM4RrXbXnoLA2XhsPfm2iNhEC2iRtKpTXpmmv QmVthjYDamhvaG9ATTszJtTSZmozobY2S1sB6dpKbT101L7SDkOWdlQ7CiO1b7VvYZR2TDsOo7WT 2kkYq32vfQ/PaWe08zDOddkdApPdye5kmGG8Z7wPrxsfGB/Am8aHxofwljHPmAdvGwuMBTDT+Mj4 CN4xPjaWwixjufEZzDE+N7bAXGObcQ5WGOeN8/C18bPxMxw2LhhX4IjxmxkMx81QsxD8YKaa0qGZ Jc10R5pZx6zjKGPWMxs7yqqOqrOjvOqpejoqqt6qt6OS6qv6Oiqr/qq/o4oaqCY7qqopaqGjlVqk FjmGqcVqseNptUR95hiuPldrHaPVJnXJMUFdtgo4PrWSrWTHHivF4o69EOSw+3ocFAsajz0eQz0e Sj0eRj0+4EaP18Py+toTuN9AawgRdtZNcGiNtSYQpDXVmkGk1lxrgeUttVY4Nq21NqBpbbV2EKW1 1zrgsR1xzCJwzLphC921LIjWemg98dNeWi+s31vrjSV9tD6431fri3X6af3wqP7aQCwfpA3B8qHa MCx/WnsGmRihjcTyUdooLB+tjcaaY7Qx2NpYbSzuP4dkhBMZIURGCJIxCUsma5PxGl7QXsD7mqJN wZIXkZgwJGYa6svay1gyXZuO+69or2DNV5GkUCIpnkhKIJISiaSiSNIsLHlXew+StPe12ZDfzj0K Bezso1BQm6fNh2Q7CykUsvOQQor2sbYYUrVPtCVQxM5KCml2XlJw2plJwWXnJsWS1doacNv5ScGj rdPW4XnXI6lFkdSv8FwbtA1YslHbjNxv0bZhO9u1ncC0Xdoe4NpebT/o2gHtANY8qB3CT7/Wvob7 tMNIeRGiPD9RXhQpP4bXdhxZv49YL0KsJyPrZ7DkrHYWa/6g/YA1z2nnsORH7Ue8/vP4JCS6Lrsu Q6zriusK5HNddV3F/d9c1yDOdd11HWLd9v9inc/tcAdBnFtza1gS7A7G/RB8fmLp+RlAz08pen58 9PwY9PwUp+fHoOfHh8/PYtz/xFgCws66CiXoWbofn6WVII1VxmosX2OsBdP4wlgHDxjrjS/hIeMr YwMeuxGfN4HP23ZsYYexE0oau4zd+OkeYw/W32vsxZJ9xj7c32/sxzoHjAN41EHjayw/bBzF8m+M 77D8mHECHjROGt9j+WnjNJafMc5gzbPGWWztB+MH3D+HT7VJT7WXnmovPtUXsOSicRGv4ZJxCe/r V+NXLLmMT7th/Gb8hnrNuIYl143rYJhgAgjTYTrAZwaZQVDc1NAipKNFCIWHzTAzDMqa4WY4lDYj zAh4xIw0I7E8yoyCcma0GQ1lzBgzBmqbsWYs7ucz82GdODMO9+PNBHjUTDSTQNlZasEyC5oF8dhk tDV+tDVpELBz1kJ5O2stVDALmwweM7mpQy07hy08bmexhYp2HluoZN5v3o/HPmA+iOVe0weV7Yy2 UMUUpsArlKbEayhplsSzlzJLYcnDZhmoapY1y2Frj5oWVDP9ZnmoblYwH4caZkWzItasZFbGT6uY VaCmWdWsivvVzGp4p9XN6njNNcwaeBc1zZrYci2zFu7XNmvjNaeb6Vgf7SPWr2fWw5L6Zn28tifM J7C8gdkAj21oNsSjGpmNsORJ80m8u8ZmYyiHlrQT9FeZqjM0s+0pNLDtKTS07Slk2PYU9weqgVg+ SA3G/SFqKDxp5+KFOuppNRzqqmfUCGisnlUjsXyUGg2N1Bg1Fuqp59Q4aKLGqwl47EQ1GT+dol7E Fqaql6CpmqZexk+nq+lY/xX1Cpa8ql7F/dfUa1hnhpqBR72u3sTyt9RMLH9HvYvl76nZUF99oD7E 8rlqLpbPU/Ow5nw1H1tboBbg/kK1EMvR7sMTtt1HXaKWYMmn6lO8hqVqKd7XMrUMS5arz7DNz9Xn qCvVSixZpVbh/mq1GmuuUWuwtbVqLdbfpDZBc7VZbYZWaovaAi3UVrUVWqttahuWb1fboY3aoXZA S7VT7YR+apfahfu71W6ss0fthbZqn9oP7eyMxdDezlkMHdRhdQQ62rmLoZOdvRgy1TF1HDqrE+ok 9LVzGUMXO5sxdLXzGUM3dU6dw3P9qM5j+U/qZ+huZzaGLHVRXcSruqQu4Xkvq8t4xivqCpZcVdeg h7puOaCvFWQFQ08rxAqDXla4FQm9rSgrClpb0VYMfhprxUIfK5+VD/fjrDhoYcVb8dDOSrASoKWV aCVCPyvJSsL9/FZ+6GgVsApgffSaWD/FSsGSVCsVmltpVhqWOy0nHuuyXHiU23JjicfyQKZV2CoM bSxmMWyHWxya47zmY/S1z0EcedawHM9aX6uP/uwJ9KzhWkP0rOFaE/SpmtYMfWqQ1gJ9arjWBr1p uNYOvamGfrQj1s/UMlG7oTcNQj/aA/dtPxpMvjNEG4BeU9MGo9fU0GsOxbMMR68Zqj2LXlMjTxlM PjIM/eJk1Be1F/Eo2wuGkM8L095DrxavzUavFq/NQa8Wr81FrxavzUevFqEtRK8Wry1CrxavLUav FqEtQa8Wry1FrxapLUevFq+tQn8Wqa1BfxaP/mwt3rXtvaLtfNs4z9iibcGSrejD4u3c2+i5d6MP y6ftQx8Wrx1C7xVH3itaO6WdQu+y1bUNHDm+5+oNXxLmqempCQ5PXU9dcJAXKUhepCD6j48hyViM XiTZWIJeJNn4DP1HorES/UeCsRr9R7KxDj1HsvEleo5E9Bkbsf5mYzPqdvQcCegzduG+7TOSyE/k Nw6hh0g0jqCHSEQP8Q2e5Th6iALGKfQQieQVksgfFEQfcBH1snEZj7Itfn6070FQEC27Bh6y7C6y 4y6y4C6y3S6y2i4zAa12YTMJrXZhswBa7cJktV1mIbTahc00tNqFTBda7cKmB6022my02oVMHa12 YbMIWu0Usxha7cJkr13mg2ivU0wf2uvCaK8NPLttndPsDOTgROtcFkseQRtd2M5GDql2NnJwm4+h jS5sVkbr7CHrnEZ22UUW2UW22GXWNevip7bldaFV7QgG2dCiZEOLovUcBLoajDa0mBqKNrSYGo7W k6sRaD2ZGonWs5gai3azmBqHdpOjxZyI9SepSagvot1kaDGn4b5tMXWykvepN9A+cvU22keO9vEd PMv7aB+LqDloHznZRJ2sYVG0gJ+iLlfL8Sjb3t2H1m0tlth2zUtWzEv2y0uWy6v2os0y1X60WaY6 iDbLVF+jzTLVEbRZxdU3aLNM9R3aLFMdR5tVXJ1Em2Wq79FmlVBn0GaZZK286jxaqxLqZ7RWJlqr X7BPbNv0gJ2HHR5U1xX6ewvQQpl2Tna4387JDj4rAi2UacWgbTLINj1AVslL9shLlshrFbIK4ae2 3fGiTeHgBTs3CECk43RUKIQ+VrF6XSjSql9WJnRrl9WmEyxp36JLB0dwpxZdWjhqZrbo2cUxFYLp +9t18OAmFKIhAZLBBTqUAANKQTkoD5WhJtSFRmir2kImZEFfGAzDYTRMgCkwHd6AWTAHFsKSm1py QBjEgJ35zQ33wf04mXkYHoUKUAVqQT14ElpAO+gMPaAfDIFnYAxMhBfhFXgT3oUP4SP49KaWgiAc YiEJUnC/CDwAAkqDgsegKtSG+tAYWkJ76AI9oT8MhREwFp6HqfAqvAXvwVxYBEtvakmDCMgH+SEV CkNReBAklAELHodqkA5PQBNoBR2gK/SCAfAUPAvPwSR4CV6Dt+F9mAcfw7KbWgqGSIiDApAGDIph nz8EZcEPFaE6ZEADaAqtoSN0g94wEIbBSBgHk2EazICZMBvmw2JYflNLIRAF8VAQnMChOPgA50kQ gEpQA+pAQ2gGbaATdIc+MAiehlEwHl6Al+F1eAc+gAXwCXwGK1q0yOwZPIx0JOk40smk00hntGib 1Sp4Juls0vmki0mXk65u1apzt+AvSbeR7iM9SnqK9HzrzA7tgi/bGgKkoaTRpAmkya27dO0c4iLV SUuQGqSlSMu16dutZ0h50sqkNUnrkjYibd42q0WrkLakmaRZpH1JB5MOb9unQ+uQ0aQTSKeQTid9 g3RW+05dWoTMIV1IuoR0Bela0g3tu3bsGrKNdA/pIdJvSU+Rnmtvt3aB9KqtoUGk4aSxpEkderbI DE0h9ZAWIX2AVJCW7tjt4dKhivQx0qqktUnrkzbu2K20DG1J2p60C2lP0v6kQzt2K2OEjiAdS/o8 6VTSV0nfwgFpEfoe6VzSRaRLSVeSruuChIRuIt1Buo/0MOkx0tNdMlt1Cj1Peon0mq1hwaSRpHFd enXOCitAmkbKSIuRekkf6oa9HVaW1E9akbQ6aQZpg27Yk2FNSVuTdiTtRtqbdGB3W4eRjiQdRzqZ dBrpjKxeLfuFzSSdTTqfdDHpctLVPTp0aRv2JekW0l2kB0iPkp7o0atlj7CzpD+TXrY1HEhDSaN7 9OrWIzyBNJnURaqTliA1ema1aB1eilSRViStSVqftGlPvPLwtqSZpFmkfUkHkw7v3SarZ/ho0gmk U0ink75BOqs39mT4HNKFpEtIV5CuJd3QO6unCN9Guof0EOm3pKdIz/Vvk9U1/ALpVVsjgkjDSWNJ k3L8zZ9r8J9qEFrD0NvYOtAK/7lG5EIL5ULDcqEpudDUXGhaLtSZC43Jhbpyoe5cqCcXGpULjc6F xuZCw3Oh+XKhcbnQwrlQlguNz4Um5kKT/lSDcPZS8Da2Dpw3/bkG5UKTc6FaLjThT5TjrLU2zsaa 4/ywG85Yh+JMbALODWfgbHUuzsJWwDrYAnvgMJyAc3DJAY5wR5wj2eFxFHMYjtIOv6Oyo7ajQfaT PaMq2HbM4YjL2dbO3oa7su1XakL2tvC4bMvE9mR/zo5mb/ninO3R7Hp6dPb24RLZd1N2bvbn9dKy tw3qZm8bQfa2SXD2tuWh7G0rf862cs72vext6+ic7bXsdttdy/67fWz2tsOi7PJOl7L/HjI4e/tU kezyp3L+nlQue/vihuzttE3Z2+k57U8/D0GvlYXCQZu0WC2fFqfFawlaopak5dcKaAVvpxTbKa21 t7/H43f2ur5KngxPumu7a4drp2uXa7drj2uva59rv+uAb7xvgruAu6DroOuQ62vXYdcR11HXN65v Xd+5jrmOu064TrpOub53nXadcZ11/eCp5anjaRL0XdC3QUeDvnGdc/3oOu/6yfWz6xfXBddF1yXX r67Lriuuq3aM2nXdDXZk2q25g90hzkec5ZxlnGWdltPvfNSpnBWcjzkDzvLOKs5qzqrO6s50Zx1n hrOu83FnJWdFZ2VnDWctZ01nbWcbZwdnO2dbZ3tnJ2dHZ6azs7O7s6uzi7Obs4czy9nT2cTZzNnc 2cLZ1NnS2crZ2lnP+YSzgbOhs76zkfNJZ2NnP2d/5wBnH2dvZ1/nIOcQ50DnYOfTzmHOoc6n3KHu MHe4O8Id6Y5yR7tj3LHufO44d7w7wZ3oTnLnt/vFF+WL9sV4qnqquWu5a7trumt4xnjGel7wTPFM 9rzqmeZ5xfOS5zXPDM8szzueNz0zPSPcZ91n3Kfdp9wn3Sc84z2JngRPnCfe4/G4PU6Py9Pf08/T 19PH86xnpC/WM8EzyTPO87xnqme65w3P296W3o+9i72feJd4P/Uu9S7zLvd+5l3h/dy70rvKu9q7 xrvW+4V3nXe990vvV94N3o3eTd7N3i3erd5t3u3eHd6d3l3e3d493r3efd793gPeg95D3q+9h71H vEe933i/9X7nPeY97j3hPek95f3ee9p7xnvW+4P3nPdH73nvT96fvb94L3gvei95f/Ve9l7xXvX+ 5r3mve4Dn8MX5NN8wb4QX6gvzBfui/BF+pJ9hXwpvlRfms/pc/ncPo+vna+9r4Ovo6+TL9PX2dfF 19XXzdfb18vX19fHN9g3yDfUN8Q3wveMb6TvWd9o6ltkzzfJN9n3vG+ib5bvXd87vpm+Bb75vkW+ j30f+Rb6PvEt9p3znbffYBizjQ+MOcaHxlxjnjHfWGAsND4yFtnvLey3FrRS3DL7nYWxwn5nYb+x sN9X2G8r7HcV9psKY6OxydhsbDG22u8q7DcV9nsKY4+x19hn7DcOGAftiJNx2I44Gd8Y3xrfZa89 Z5y0I07GaeOMcdb4wThn/GicN34yfjZ+seNOxiXjV/tdg3HV+M24Zlw3wY492e8UctasCzcjaN26 aDPGjDXzmXH2ewL7LcFNK9ml2G8HbqxnZ8eYuKn/23XtpPmQWfLG2nZl7ZjS71a4q2DHlMyKdsTf rGJWNauZ1c0aZk2zllmb1r6rY9Y169H6dw3Mhtlr4JlNzKZmM7O52cPsafYye5u7zT3mXnOfud88 YB40D5lfm4fNI+ZRUUaUFY+IcuJRoYQl/CIgyosK4jFR0Y7227F+1UV1Vd1Ud5Wleqieqpfqrfqo vqqf6q8GqIF2pN+O89OKe0+r4XaE347v29F9O7ZvR/btuL6aqJ5Xk9Rk9YId2bfj+nZUX01Xr6hX 1WtqhnrdjlCpt+wIlXpHzVLv5qzf94EdoVJz1Tw1Xy1QC9VHapH6WC1Wn9hxKrVULbMj82qF+lyt VKvUajtWpb5Q69R69aX6Sm1QG2kFwC1qK60CuEPtVLvUbjvObkfZb6wKeFgdubEy4DF13I6r/9sV Ai+pX9Xl/14lUF2341K/Wysw3I5LWVF2zNyKtfJZcVa8lWAlWklWflpFMNkqZKXQSoJOy5WzmiCz uKVb91lFrKJWMau4VcK633rAetDyWj7LsExLWNJ6yCpplbIetkpbZayy1iNWOetRS1mW5bcCVnnr K2uDtdHaZG22tlhbrW3WdmuHtdPaZe229lh7rX3WfuuAddA6ZB22jvjB7/AH+TV/sD/EH+oP84f7 I/yR/ih/tD/GH+vP54/zx/sT/In+JH9+fwF/QX+yv5A/xZ/qT/M7/Y/5H/dX9FfyV/ZX8Vf1V/NX 99fw1/TX8tf2p/sz/HX8df31/PXTt6ZvS9+eviN9Z/qu9N3pe9L3pu9L359+IP1g+qEnvU/6mtVA r1YqYgBLZEksPyvACrJkVoilsFSWxpzMxdzMwwozxjjT2X2sCCvKirHirAS7314XgXmZjxnMZIJJ 9hAryUqxh1lpVoaVZY+wcrQSisX8LMDKswo5K6JUYpVZFVaV1kWpwWqyWqw2S2cZrA6ry+qx+rRO SkPWiD3JGrMmrGnOiiktWStaNaUta8fasw6sI+vEMlln1oV1Zd1YFuvJerHerA/ry/qx/mwAG8gG scFsCBtqr43AhrNn2Aj2LBvJRrHRbAwby55j49h4NoFNZM+zSWwye4FNYS+yqewlNo1NZ6/Qmiwz 2OvsDfYme4u9zWayd9gs9i57j73PZrMP2Bz2IZvH5rMFbOHv1m35lC1ly9hy9hlbwT5nK9kqtpqt uWktl6/YBraRbWKb2Ra29V+s63KQHWJfs8PsyO9WeDlx0xovZ2+s8vIT+5n9wi6wi+wS+5VdZlfY VfYbu8auc+AOHsQ1HsxDeCgP4+E8gkfyKB7NY3gsz8fjeDxP4Ik8iefnBXhBnswL8RSeytO4k7u4 m3t4Yc445zq/jxfhRXkxXpyX4PfzB/iD3Mt93OAmF1zyh3hJXoo/zEvzMrwsf4SX449yxS3u5wFe nlfgj/HHeUVeiVfmVXhVXo1X5zV4TV6L1+bpPIPX4XV5PV6fD+ZD+FD+FB/Gn+bD+TN8BH+Wj+Sj +Gg+ho/lz/FxfDyfwCfy5/kkPpm/wKfwF/lU/hKfxl/m0/kr/FX+Gp/BX+dv8Df5W/xtPpO/w2fx d/l7/H0+m3/A5/AP+Vw+j8/nC/hC/hFfxD/mi/knfAn/lC/ly/gTfDn/jK/gn/OVfBVfzdfwtfwL vo6v51/yr/gGvpFv4pv5Fr6Vb+Pb+Q6+k+/iu/kevpfv4/v5AV3ppi50S/frAb28XkF/TH9cr6hX 0ivrVfSqejW9ul5Dr6nX0mvr6XqGXkevq9fT6+tP6A30hnoj/Um9sd5Eb6o305vrLfSWeiu9td5G b6u309vrHfSOeic9U++sd9G76t307nqW3kPvqffSe+t99L56P72/PkAfqA/SB+tD9KH6U/ow/Wl9 uP6MPkJ/Vh+pj9JH8wa8IW+kS/0hvaReSn9YL62X0cvqj+jl9Ef5QX6If80P8yP8KP+Gf8u/48f4 cX6Cn+Sn+Pf8ND/Dz/If+Dn+Iz/Pf+I/81/4BX6RX+K/8sv8Cr/Kf+PX+HUddIcepGt6sB6ih+ph ergeoUfqUXq0HqPH6vn0OD1eT9AT9SQ9v15AL6gn64X0FD1VT9Odukt36x69sM50ruv6fXoRvahe TC+ul9Dv1x/QH9S9uk83+JO8MW/Cm/JmvDlvwVvyVrw1b8Pb8na8Pe/AO/JOPJN35l14V96Nd+dZ vAfvyXvx3rwP76uP4f14fz7g7zNzZ3Pvzd1zM3fnA/kgUVlUEVVFNVHdXmNG1BK1b6xqVU/UF0+I BqKhaCSeFI1FE9FUNBPNRQvRUrQSrUUb0Va0E+1FB9FRdBKZorPoIrqKbqK7yBI9RE/RS/SmVbH6 if5iwI21sYaKp8Swm1bIGilGidH2ijTiOTFOjBcTxETxvJgkJosXxBTxopgqXhLTxMtiunhFvCpe EzPE6+IN8aZ4S7wtZop3xCzxrnhPvC9miw/EHPGhmCvmifligVgoPhKLxMdisfhELBGf2rmzxXLx mVghPhcrxSqxmnLmfyHWifXiS/GV2EDZ8zeLLWKr2Ca252TR3y32iL1iH+XSPygOia/FYXFEHBXf iG/Fd+IY5dY/KU6J78VpcUaczcmxf178RHn2L4iL4pL4VVwWV8RV8Zu4Jq5LkA4ZJDUZLENkqAyT 4TJCRsooGS1jZKzMJ+PsHNoyUSbJ/LKALCiTZSGZIlNlmnRKl3RLjywsmeRSl/fJIrKoLCaLyxLy fvmAfJAy+hvSlEJK+ZAsKUvJh2VpWUaWlY/IcvJRqaQl/TIgy8sK8rE/ZP6vLmvImrKWrC3TZYas I+vKejetBfCkbCybyKaymWwuW/yLdQE6yy6yq+wmu/9uhYC+N60RMPjGKgFPy+HyGTlCPitHylFy tBwjx9rZu+V4OeHG2gEvyCnyRTlVviSnyZfldPmKfFW+JmfI1+Ub8k35lnxbzpTvyFnyXfmefF/O lh/IOfJDOVfOk/PlArlQfiQX0doDn8gl8tMbKxCskJ/Llf9Yh0Cuk+vll/IruUFulJvkZrlFbpXb 5Ha5Q+6Uu+RuuUfulfvkfnlAHpSH5NfysDwij8r/Yu/Lw6MouvW7p2cmyWQymUwmyUxMMmOcSu8d ICEiAulG5FNEyIyIyCiiICAisonIvu8ERARUBET2JWxhh7AaFtkFREBUdgKEVQxbuKdqOkNQ7/f7 /XPv893n8Y/uOu/pU6dOVZ23eslSp7POZJ3NOpd1PutC1sWskqxLWZezrmSVZl3NuvZ/+Y0463rW jaybWbeyfs+6nfVHVlnWnay7Wfey7mc9yCrPephNZdPZhmwm25htyjZnR2RHZkf98w79zzt05Xdo 9TW1mfq62lwNqm/g92n1TbWF+pbaUn1bfUdtpbZW31XbqG3Vdup7anv1fbWD+oHaUf1Q7aR2Vruo XdVu6kdqd/VjtYf6idpT7aX2VvuofdV+an91gDpQHaQOVoeoQ9Vh6nB1hDpSHaWOVseo+epYdZz6 6T9v7v/Zb+7qePUzdYL6uTpRnaROfmxPzGl/2hVzjjpXnafOVxeoC9VFaoG6WN8jc7laqK5QV6qr 1NVkt8x1+n6ZG/UdM7eq2yrtmrlL/V7dre5R96r71P3qAfWg+oN6SD2Md9FUj6o/qcfU4+oJ9Wf1 pPqL+qv6m3pKPa2eUc+q59Tz6gX1olqiXlIvq1fUUvWqek29rt5Qb6q31N/V2+ofapl6R72r3lPv qw/UcvWhRmm0ZtAYzaiZNLMWoUVqUZpFi9asWoxm02I1uxanObR4zaklaIlakubS3Fqy9oSWoqVq aZpH82pPaunaU5pPQ1qGxmqcxmuCJmqSJmuKlqlV0apq1bQsLVurruVoT2s1tGe0mtqzWi2ttlZH y9VUTdPqas9p9bTntfrav7QXtBe1BtpLWkPtZa2R1ljL0/xa4N/suNOS7LnTCu9eUWnnnfe1DtoH Wkey/05nfQeej/Q9eD7Relbah6c/2YlnkDZYG6IN1YZpw7UR2ki8J89/2Pea0/4z/rP+c/7z/gv+ i/4S/yX/Zf8Vf6n/qv+a/7r/hv+m/5a+s2qZ/46+u+oDf7n/YYAK0AFDgAnvtBoZiApYAtEBayAm YHu072rAGUgIJAaSAq6AO5AceCKQEkgNpAU8AW/gyUB64KmAL4ACGQE2wAX4gBAQ9Z2KMgNV9N2K sgPVAzmBpwM1As8EaoZ3LsoNqAEtUDfwXKBe4PlHuxgFXgo0DLwcaBRoHMj7t9+iqgSrBqsFs4LZ werBnODTwRrBZ4I1g88GawVrB+sEc4NqUAvWDT4XrBd8Plg/+K/gC/jrVfDFYIPgS8GGwZeDjYKN g3lBfzAQfCXYJPhqsGnwtWCz4OvB5sFg8I3gm8EWwbeCLYNvB99Jd6QPSv8qvWt657depuhp2VQa VZdqRJXSProNPZ4+RF82ZBjqGJoZWjNGpibTm5nLlBgNxlrGJsaOxp6mZFOeabypyEyZXeaAuT1F U8aMVhRDOahEyga+BCoH/DWkmv75p3kZn1ImsHJS8VR8xmiQ4wlyZowD2UnkhIx+lDFkkzFIl5wZ Y3QpIaM1aSch491QexltSZmU8R4pXRkfkNKd8SEpkzM+IuUTGZ+QMgXasUKUaVQGpWQMDvtvo3tr r3vppNfuqdcyQ79cVDr0rBpVM6N/OMIhYQ/t9Dje1z101j10D7VPfgfNCZ58GUPDdTrotl10215/ 29qwsH1+eBQ66r3sqtf8WO9lb92DAXzYM4aHa3YL2em992LPGQPCvRgRthsbbqGH7rHPYx5Hhi37 PqYfGPY1qsIinBVl1P3/j6woo+5Sd6g7JCvuEHSXZMVdIt8jWUFsSFaEro/RpXskK8qgfDfUHsmK MuoByYoyqpxkRRn1kGRFGU2RrCijaZIVZbThL1kR8t9G99Ze99JJr91Tr/XXrAhFOCTsoZ0ex/u6 h866h+6h9v+UFaE6HXTbLrptr79tbVjYPj88Ch31XnbVa36s97K37uFRVoRqdgvZ/SUrQr0YEbYb G26hh+6xz2MeR4Yt+z6mHxj2NarCoiIrDF8wcf/vrACrWMbG2HBWMDaCYnFWMLFEtuOsCNngrNCv j9ElO84KkOw4K3B7OCugdOCsgDIeZwWUTpwVUCbgrIAyEWcFlEl/zgrdfxvdW3vdSye9dk+91l+y Qo9wSNhDOz2O93UPnXUP3UPtP54Vep0Oum0X3bbX37Y2LGyfHx6Fjnovu+o1P9Z72Vv3EM4KvWa3 kN2fs0LvxYiw3dhwCz10j30e8zgybNn3Mf3AsK9RFRYUPfkalURlU/WpPKo51ZrqCHkwkBpNTaSm U/OpQqqI2kEdoy5T5bSdTqez6Tr0C8Sb1bcfyud8++A8AOdW7iuUIXcnkZqEpVfDUtOw9FpYahaW Xg9LzcNSMCy9EZbeDEstwtJbRArFtJfEtIfEFNL8QDQHK2mOEM3hSpqfiOZoJc0JojleSXOKaH6r 6G3tm5Sh9nUi3QDpComkB4mE/H5InwYUPWl/6HdAKMOkbVQHqr3vW2oGNY2a7pvpm+Wb7Zvjm+ub 97+r/R+pb5i0BbL1b+3Ry+g0GoIGokHoDDqLzqHz6AK6CDXGkRrzfQt8C32LfAW+xb4lvqW+Zb7l UKMEXUKX0RVUiq6ia+g6uoFuwljmU+vo3nQ+PZ1eRm+jj9AX6LsGqyHNUMVQ19DE0MbQxdDbMNQw 3jDFUGQ4YShjLEwKozB5THN4hprBLGQ2Ge3GdKNirGHsYjxkvGBKNKWbapkamZqZ3jF1MHU39TeN NE0wTTXNNS0zbTMdMZ0yXTbdNhvMVrNibmhuZ+5pHm2eat5k3mW+HOGISImoEtE/YnzE1Ii5Eaci 60U2ixwaOT5yZuTKyB2RxyIvR5ZH2aPSo7Kj6kc1i2of1TtqeNT4qClRc6OWRR2KumGxWbyWapZ6 ljaWTpbxltWWLZYj0RnRNaLrRTeKHh5dEl1ulaw1rHWtDa1NrS2tk61LrMXWyzHpMXkxHWM2xfxq S7TVtwVsnWyjbYW2LbajtjO20lhrbGJsTqwa2zC2Wezg2OmxhbFH7E67z97c3sW+0L7LftJ+O65K XJO47nGj42bErYw75jA70hyCo54j4HjD0d7RwzHUMcFR4Fjv2OU46jjluOy4DY+KlnhXKP8z/VAa MwNwTg9p8mQog+S8XtcoRKNU0mQSTWYlTRWiqVJJU5VoqlbSVCOaapU0WUSTVUmTTTTZlTTViaZ6 JU0O0eQ80uR+gXuRO/lRLxS8mlXJS4NzDuZwXirwl6MyifwEaInk3wLSq1jy4ucXH/Uslj2tQIse /Y2DH7eS4GkN56y89+D8jOddOL8JNSLBwpVZk9TN8eJnEInK8W8mXkNXE/NSQMqgMj1vY6+pG+Cs hGL0vIM1efj8TEiTilsK+Dfi/oU0fmyf4C8imnBEykuARaUh7qPyMpyr571NvOA+bcI1Htnm4Vid eW2wNq8t/n3GvNZkVLAFfoL1phaFxsaDn91eoBp7u+G4lMbYO/ao5BF78ryk+MlTan0FZ0we9BA/ sfqg19lULfw3KUoT8BsHd5045RXd8lVSBrwGKOtRjT1NocyD8WxGysTU1eCpfmoh8Uf67DXi9j1w x6Aak/ZfA8ssqIvnpgy0fv0e7Q397YmXgTbrE9+v6b7Ldd+rwLqB5w3sKXUFaSFar1fl8b+iUd4k UeZ5KSgbUn7Pfd3TA93TGpIDr+Px8+CxfD51JfHdlvhejn174C4GvkLj1CLkz/MW0eE7vzP01zL+ NXDlFep5/1pS5ilvkblsSTy0JNa4nw/JXNQnWWSjnAoejQZKkFi1CLcT4m8J5i8dSXIbeEtrRFLC UmZYqhKWqoalamEpKyxlh6XqYSmHSI/4VoL5Bq2G+UYnYr7RKRV8o210QgXfQhLmG/1sBd9oC/1k Bd/o6D/x7R7mG+3GfKM9mG/0c5X5BnVTMN9oB52C+QZeK/GNttIJmG90NOYb7XzENzoa8432POIb XQPzraJnhG/3MN9A8xjf6DjMNzoR841+AvMNvFTw7d6f+HaX8O0e4dt9zDcYlcf4hscG841W6OqY b3Q05hudWME3OqUS38poCfONzvlv+PYHLVF/EL5hy1dJWQPzjRbo6phvUPMe5huU9zHfaAnzjc55 xDc6GvONrl7BN9pNCxV8o5/+K99oifh+TfddrvsGvtFVMN/o6phvoPt3fCujczDf6Gr005hvxNMD 3dMakgOYb/cx32gR8w18tyW+l2PfmG90rUp8A3+Yb6D7E9/oZ2gR8w3KHMw3mMuWxENLYq3zDeZC 0vMbMtswCGe5YbDOswDWYLZVaDDTDGvwmXnx0X0SNEolTSbRZFbSVCGaKpU0VYmmaiVNNaKpVkmT RTRZlTTZRJNdSVOdaKpX0uQQTc4jDWYp48MsZYQKlsLz1FMVLA1JmKXMcxUsZVxMZgVLGffjLGXs mKUMi1nKyJilzEuVWQp1BcxSxssImKXMc5VZyiQzT2GWMm7MUib9EUsZN2YpIz9iKaNillb0A7OU sWOWguYxljIezFLGh1nK8Jil4EVnKWN/nKVMLGYpY8csZeIwS2FUHmMpHhvMUiaHqY1ZyrgxSxlf BUvBPsxSeO/Kxixl6vw9Sw39mGxDP8xSYvkqKVXMUqYaUxuzlKkD49mMlHGYpUw2Zin4C7OUcWOW MrUrWMqwTLUKljK5f2Upk018v6b7Ltd9A0uZGpilTG3MUmjh37AUoqyDWcrUZHIxS4mnB7qnNSQH Xsfjh1nKZGGWgu+2xPdy7BuzlKn3iKXYH2Yp6P7EUkZjsjBLoayDWQpz2ZJ4aEmsdZbCXGST/uO5 bUUyF948GXLXzIV2mNZYypwE0ueV37g9XWA89hkmMsVKa5AuMj8w05R3QbrOHGWme/DXgInMRQVn eTGJ1q60gas74XqB5w60e53ZqPcC/7eBOcx1pR2UF5kVJKedVJryPmViVjGLwM925T2Y8YnMPMNE pT1YLWKWk8xKwV8+FPw/msAr2BYzl8DqpPIhiQOQEorjpNKRtLhK/3KRRmUoOP7zzGamOHURSJeY C+C7E1jNYC4onaHczByu4J7SFfAliLAb8XLCvxV6dZHkR0rF9yEP/t9Dl5hf8IhAvz8h6AL2z1z0 4J5cggjPQyQ9iXwFX1E+hpZP45ZTZ4LHS6Q9YIvSg4xoEUSE2b4Tyo/g+nwSfSLMr6T0AS8XmUIy Nn2JvBYiv+T/DvcFtDuUfrr0vV4L8lHpDZYQA8R0XekF11fhsfHgEQWtfxuUJcwMkg39ybitqhgB z0cEH1cGkDnakft8eF4dyiDwCrNJxnkgeJ0B83OxYhb9xZQJrvwItYr92+HqLGYxjM9gkC7gWSOr yQ48DjhfQhnhaRfKD88HpCwmEQ3RI8LycGj9vD5aLv9OqL0Ct6AMBf08ZRicV2C71LkgXQ+P6ggy 44tg/naR+S1OLSDziD2OBGk3kUaFrhF+dCf5sOXR9y5lDMnDEmhrNIlni/97YlOsjCWjF+qBI3UJ 6fUaHL2Sj0eamVfRO//uUAuerqT10DilKPir4XSSwxeVT0mOX1TGg8VSwjr8BQ3ehZTPwGoaydvt ygTwi+XtXtyzbwgXPycjDDOsTCKzSr69KBOh1mYYo1nQHu5LMuEN/l9Ui6C9faHoUueD1SJmA+Ht FySCYk8nMt9bQgz27wHvi0jvJ5PebyAc0L9AUtmezkS7UvkKaq1hNihTcfYy+5VpIfYpU6A/65Sv 4bwhzK1vQiuF50NSXle+JXMWWhlmkNaL/XvhzjtRX0WmkwzD4zqTeN0eHh+8KnUjubiCOQueZum5 eEmZTeboojKHjPweZS7xu6giR1NhjCEb95KezyN9BLan4kgu6NmTkjqbzDyenQVgMZ9waD5hJYnV O5LEv11ZGOqP3oMCgi4p0BbMrt4v/75Q5MpiqL89zJT9JPaFJDNxG2TtUJaQXH+UgUtJHIfgyjIy R6uUQigPwhqxHJfMdJ2VK4m3YmYJxInvSidJRnfUs7vSexBTA78HwX2hRcV9ITOWMsaOtfkt5C0j E+4Cli+JBHf8iH0Veg+sUpEnTV2jKHItjjJaR1l2R9wjyBFGZNYy48F2M7bNdFJG2+6KWl5YB6IH h1tKeAwlUkbz4gqUupMyxJYQaQfEEyS1h4DUhOi2U4bIA6TWc5TBTL49egdBtD3C8SVBu0JMh4i7 FD3kFFWT6knNpdZS26i91FHqFHWZuk1T8BbkpNNoDp6ga9H16Ty6Od2a7k4Pp7+kF9JF9A76IH2C Pkdfo+8ajAabwWVIN0iGHINqaGBoYmhh6GQYaJhgmG1Ybdhi2G04YrhguMtYmTSmClOX6cT0ZAZX vkP7gOPUi1RD33hSNvaNg5F6keoC54ZUV/Ku/rffjw35lCF3B5HGVUjMa2Hp9bAUDEtvhqW3wtLb YalVWHo3LLUNS++FpffD0gd/U6NLWOpGJBI70wvLTO9HX56ZvkTTr5JmANEMrKQZTDRDKmmGEc3w im/ZzI1wa/PD0sKwVBCWloSlZWGpMCytDEurw9LasLQ+LBWFpU1haWtY+i4sba/U870k4n2V+nCA aA5W0hwimsOVND8SzdFKmmNEc7yi597eFa15+4Slvo/a/V/6sl8pj9EBikESykQHSVkNQb5C+Sqc M1FTOFf7734O4O0V6sHA3fQ8phnTkmnN9GWmwHPMUea20WmsZswzdjAON35pXGjcYTxmvGwsN9lM XlMVk2rKM7U0dTINNI03zTAtM+02nTSVmsrNNnOaWTHXMTcytzB3NPc155unmgvMRea95pPmUnN5 hC0iLUKJqBPRKKJFRMeIvhH5EVMjCiKKIvZGnIwojbgRURZJRRoj0yJrRTaP7BE5MbIw8mDktShr FBdVM6phVLuonlGjo6ZGFURtitof9WvUNQtlsVvSLdUsdS0BSwdLX0u+ZaqlwFJk2Ws5aSm1lEfb otOileg60Y2iW0R3jO4bnR89Nboguih6b/TJ6NLocqvNmmZVrHWsjawtrB2tfa351snWKdaZ1rnW Amuhda/1cowlhoupH9M6ZmDM9Jj1MUdjSmLu21w2wVbL1sjWwtbJ1t82zjbdtsS2yXbQdsp2I9YQ mxKrxNaJbRTbIrZjbN/Y/NipsQWxRbF7Y0/GlsaW2232NLtir2NvZG9h72jva8+3T7UX2Ivse+0n 7aX28jhbXFqcElcnrlFci7iOcX3j8uOmxhXEFcXtjTsZVxpX7rA50hyKo46jkaO1o5tjsGOCY6aj 0LHNcchxxnEr3hjvjPfFZ8fXi28S3zq+W/zg+AnxM+ML47fFH4o/E3/LaXQ6nT5ntrOes4mztbOb c7BzgnOms9C5zXnIec5Z4rybYElIThASaiY0SGie0CGhd0L/hHEJ0xOWJGxK2J/wa8K1RCrRnuhN rJKoJgYS30nskjgwcXzijMRliVsSDyaeSryRZEhyJKUnVUuqmxRIaprUJqlDUqekbkk9knonjU4a lzQxaWrSzKT5SQVJy5JWJxUlbUk6mHQq6VxSSdLdpHKXweVwJbqSXWmudFeGS3AprhxXTVcdVz1X E1czVztXB1cXV3fXUNdI1zjXBNdk11TXQtcy10rXWleRa4ur2LXLdcx10nXKdc5V4ip13XDddt11 lbsNbrPb6ra7nW6XO8UtuWu567qbuFu727l7uHu7+7sHu4e7R7vHu2e4l7lXute6N7m3uQ+5j7lL 3KXuG+7b7rvu8mRDsjnZkmxLdiQnJicnpyWnJ2ckC8lKcrXknOSayXWS6ybXT26Q3Cg5kNw0uXly i+R3ktslw30+c2rm9MxvKDrza8rq6edN9yJ2PlvIRwk20SPJck3/LP9iypY6xNPfM8Lbkl3ArhDs 4pNSplwr9+3cDf7Z/iVwdahngGek9212IbtScIhPSVXlOrnv5Bb55/iXwtVhnoGeUd532EXsKsEp IilLVnNb5W70z/Uvg6vDPYM8o72t2AJ2tZAoslJ1uW5u69xN/nn+5XB1hGewZ4y3NbuYXSO4RF56 Wq6X+27uZv98fyFcHekZ4sn3vssuYdcKyaIoPSPXz22Tu8W/wL8Cro7yDPWM9bZhl7LrhBRRlp6V X8htm7vVv9C/kopJHe0Z5hnnbcsuY9cLaWKmVFtukNvOv8i/Cq6N8Qz3fOptxy5nNwhesaqUKzfM fc9f4F9NRbKJ3Lv8CGGSOFdaKW/NiwdNEteGHylMFudJq+RteU4qxtMH9WFdXFt+lPCFOF9aLX+X +ULmi3kJ1Jdg7eba8aOFL8UF0hq5OC8RNMnce/wY4StxobRW3p6XBJonuPZ8vjBFXCStk3fkuagI NoV7nx8rfC0WSOvlnWCRynXgxwlTxcXSBnlXXjJYpHEf8J8K08QlUpH8PWAP15EfL0wXl0ob5d2A vdyH/GfCN+IyaZO8B/CTXCd+gjBDXC5tlvcCTuc6858L34qF0hZ5H7TwFNeFnyjMFFdIW+X9eQ3B wsd15ScJs8SV0jb5AGDEdeMnC7PFVdJ38kHAGdxH/BfCHHG1VCz/ANnUF/VjWa47/6UwV1wjbZcP ZTbIfImaAr457mP+K2GeuFbaIR/2r4O6PNeDnyLMF9dJO+UjgAXuE/5rYYG4Xtol/whY5HryU4WF 4gbpe/koYInrxU8TFolF0m75J8Ay15ufLhSIG6U98jHACteH/0ZYLG6S9srHAWdyffkZwhJxs7RP PkFFeJZxL/EfCn3EfGmKPA/wcq4h30noK46VvpbnAy7kXuY7C/3EcdJUeQHgFVwjvovQX/xUmiYv BLySa8x3FQaI46Xp8iLAq7g8vpswUPxM+kYuALya8/MfCYPECdIMeTHgNVyA7y4MFj+XvpWXAF7L vcJ/LAwRJ0oz5aWA13FN+B7CUHGSNEteBng99yr/iTBMnCzNlpcD3sA15XsKw8UvpDlyIeAi7jW+ lzBC/FKaK68AvJFrxvcWRopfSfPklYA3ca/zfYRR4hRpvrwK8GauOd9XGC1+LS2QVwPewgX5fsIY caq0UF4DeCv3Bt9fyBenSYvktYC3cW/yA4Sx4nSpQIb58XzHteAHCuPEb6TF8nrAxdxb/CDhU3GG tETeAHg715IfLIwXv5WWykWAd3Bv80OEz8SZ0jJ5I+Cd3Dv8UGGCOEtaLm8CvItrxQ8TPhdnS4Xy ZsDfc6354cJEcY60Qt4CqxG8A2Z+lTntn/Xpn/Xpn/Xpn/XpP2x9MrKb2O/ZI+xlsi49WqMqVi2D p5en9z/r1T/r1T/r1T/r1X/AehXBVuH68d8KS8Ut0n75Z8BVuf78TGGZuFU6IJ8EXI0bwM8Slovb pIPyL4CzuIH8bKFQ/E76Qf4VcDY3iJ8jrBCLpUPyb4Crc4P5ucJKcbt0WD4FOIcbws8TVok7pCPy acBPc0P5+cJqcaf0o3wGcA1uGL9AWCPuko7KZwE/ww3nFwprxe+ln+RzgGtyI/hFwjpxt3RMPg/4 WW4kXyCsF/dIx+ULgGtxo/jFwgZxr3RCvgi4NjeaXyIUifukn+USwHW4MfxSYaO4XzopXwKcy+Xz y4RN4gHpF/kyYJUbyy8XNosHpV/lK5SF1dgi9le2jBvHFwpbxB+k3+RSsKrLfcqvELaKh6RT8lXA z3Hj+ZXCNvGwdFq+Brge9xm/SvhOPCKdka8Dfp6bwK8WisUfpbPyDcD1uc/5NcJ28ah0Tr4J+F/c RH6tsEP8STov3wL8AjeJXyfsFI9JF+TfAb/ITebXC7vE49JF+TbgBtwX/Abhe/GEVCL/Afgl7ku+ SNgt/ixdkssAN+S+4jcKe8ST0mX5DuCXuSn8JmGv+It0Rb4LuBH3Nb9Z2Cf+KpXK9wA35qbyW4T9 4m/SVfk+4DxuGr9VOCCekq7JDwD7uen8NuGgeFq6LpcDDnDf8N8JP4hnpBvyQ8CvcDP4YuGQeFa6 qVCAm3Df8tuFw+I56ZZCA36Vm8nvEI6I56XfFQPgptwsfqfwo3hBuq0wgF/jZvO7hKPiRekPxQi4 GTeH/174SSyRyhQT4Ne5ufxu4Zh4SbqjmAE35+bxe4Tj4mXprhIBOMjN5/cKJ8Qr0j0lEvAb3AJ+ n/CzWCrdV6IAv8kt5PcLJ8Wr0gPFArgFt4g/IPwiXpPKlWjAb3EF/EHhV/G69FCxAm7JLeZ/EH4T b8iUEgP4bW4Jf0g4Jd6UacUG+B1uKX9YOC3ekg1KLOBW3DL+iHBG/F1mFDvg1txy/kfhrHhbNipx gN/lCvmjwjnxD9mkOAC34VbwPwnnxTLZrMQDbsut5I8JF8Q7coTiBNyOW8UfFy6Kd+VIJQHW7ffY P7jV/AmhRLwnRymJFJ33JFi159bwPwuXxPuyRUkC/D63lj8pXBYfyNEKvnd14NbxvwhXxHLZqrgB f8Ct538VSsWHcoyC71wduQ38b8JViZJtyhOAP+SK+FPCNYmWY5UUwJ24jfxp4bpkkO1KKkTRmb3D beLPCDckRo5T0sCiC7eZPyvclIyyQ/FAVO1A15Xbwp8TbkkmOV7xAu7GbeXPC79LZtmp4Kg/4rbx F4TbUoScoKQD7s59x18U/pAi5UTlKcAfc8V8iVAmRclJig9wD247f0m4I1lkl4IAf8Lt4C8Ld6Vo 2a1kAO7J7eSvCPckq5yssIB7cbv4UuG+FCM/oXCAe3Pf81eFB5JNTlF4wH243fw1oVyKlVMVAXBf bg9/XXgo2eU0RYRe9uP28jdESoqTPYqUhyPsz+3jb4q05JC9igx4ALefvyUapHj5SUUBPJA7wP8u MpJTTlcyAQ/iDvK3RaOUID+lVAE8mPuB/0M0SYmyT6kKeAh3iC8TzVKSjJRqgIdyh/k7YoTkkjOU LMDDuCP8XTFScsuskg14OPcjf0+MkpJlTqkOeAR3lL8vWqQnZF7JATyS+4l/IEZLKbKgPA14FHeM LxetUqosKjUAj+aO8w/FGClNlpRnAI/hTgiUaJM8sqzUBJzP/SzQYqzklRXlWcBjuZOCQbRLT8qZ Si2K9sB9mx3HbmZ3sz+yp9gr3C+UwUt7zRSdupWi2Zkw73kgw93EG8VdEkxivOSTqym5oG8OT7g/ en6jmNRtntN5QUAHPWfhvMdznKK522DxBviK5e6Abq/nZ9DBaua1cqVCpJgosXJ1pS60PZndyR5i f2FL2N+581CnGdjBquiN5EoEo+iQnpKrKnVAdxNixc8kE9jv2P3scfYce507DfavwNGUor0DwaYM Ip4F0W4BXSOKYTeyv7F3KZo3QN2jEMVhD76rjGe3snvZn9gz7FXuN7B8HXSfsdvYfewx9ix7jTsF 1rvB+pDnHEg/wNWJ7Hb2IPsze4G9yZ2Fdh7A1QOeM1C3JVjAiOW585pQZvYLdhd7mL3E3uYuQM9t XDnYPoQDYhDdEGN/iG0j1GoM/bNwlwWz6JSQnKWoYHMf9H44AnC0gpgZKFuAfTHU6weyF2zuAd5E GdjZ3HVA18CKgisvQwnrpDeGuypEiUkSJ+coz0HUc3mTEC0+IQlyDeV5iPgITwMDPmW3sHvYo+xp tpT7Ne9NqBfBXRQYMU5Kl6sotcHfS1B3EruD/YE9yV5kb3EwCt4nob1b0AsXlDfA5i3wt88Dzwze aO6KECEmSBlytqJBzTm8UbCIyRIvP63Ug9E5BrUHUIbU7zwwrnmvgsU83ixYxRRJlJ9R6oOf/R78 bPE5W8weYE+w59kbHIwsGwFHJBxRcFjgiIbDCkcMHDY4YuGwU3QGzHnGHThgjDNgfDJgHDMewAFj nwFjz8IIsTQccXA44IiHwwlHAhyQFyyMM2uEwwSHmTLkFuduf/z8fgH9te+874Lvoq/Ed8l32XfF V+q76rvmu+674bvpu+X73Xfb94evzHfHd9d3z3ff98BX7nuIKEQjA2KQEZmQGUWgSBSFLCgaWVEM sqFYZEdxyIHikRMloESUhFzIjZLREygFpaI05EFe9CRKR08hH0IoA8FrAeKRgOBFD8HCgjJRFVQV VUNZKBtVRznoaVQDPYNqomdRLVQb1UG5SEUaqoueQ/VQffQCehE1QC+hhuhl1Ag1RnnIjwLoFdQE vYqaomboddQcBdEb6E3UAr2FWqK30TuoFWqN3kVtUFvUDr2H2qP3UQf0AeqIOqHOqAvqirqhj1B3 9DHqgT5BPVEv1Bv1QfBugvqjAeSvU4agoWgYGo5GoJFoFBqNxqB8NBaNQ5+i8egzNAF9jiaiSWgy +gJ9ib5CU9DXaCqahqajb9AM9C2aiWah2WgOmovmofloAVqIFqECtBgtQUvRMrQcFaIVaCVahVaj NWgtWofWow2oCG38L/bOBTqKYtv71d0wPe/p7sk76ZokZEYJkKmEIkDo7sGAARHSGCA85KEgEYOC IkaNiogaFRU9iCioURARI0ZERUVFRERFRARFRUSNiIjK8aAiRsT77zwOehf3u+e7565zv+8ul+tn SDKPqr3/e+/aRU0RXR99Oboh+kp0Y/TV6Kboa9HXo29EN0ffjF4X3RJ9K7o1+nZ0W/Sd6Pbojui7 0feiO6PvRz+IfhjdFf0oujv6cXRP9JPop9HPok3Rz3//6ZoTfX4m+kP0x+jh6E/RI9Gfo83RX6JH o79Gj0V/i5GYEBNjUqxDrGPMFZNj7pgn5o35rHyri9XV6mYVWHGLWYVWkdXd4lYPq9jqafWyelsl Vh/LsEzLshJWX+sUq9TqZ/W3TrXKrAHWQOs0a5B1ujXYGmKVW7Y11DrDqrCGWcOtEValNdIaZY22 xlhnWmOtcdZ4a4J1lnW2NdGaZJ1jTbaqrHOtKdZ59kL7Lvtue5G92L7Hvte+z66377cfsJfYS+0H 7WX2Q/Zy+2F7hf2I3WA/aq+0H7Mb7cftVfYT9mr7Sfsp+2l7jf2M/az9nL3Wft5+wX7RXme/ZK+3 X7Y32K/YG+1X7U32a/br9hv2ZvtNe0vevujI6PTogCjyztSV5H19R/bg9MH6u/p7kSx9p/6+/kFE twv13T2Gd/he36N/on+qfxaJ9Jhqx/W94SX6Pv1Lu7++Xz+gf61/o38bybaZ3Vk/qP81kqt/1+Mh /W/6If17/Qe7SD+s/2x314/qx+xi/TdKqGD3ph1oR9uy+1A39VIf9dslkbwe39IQValGwzSJL6Sp NI2m0yyqU2obNFIc61FCc2gnGqUxenIkFkGbT/NpF+/LtCstKB4Q6UwZLaRFtCftTY3icdSkFk3Q U2gp7UdPzR5i96VldAAdSE+jg4qvpqfTwbScDqUVdJh9SvE8OoqOpmPomXQsHUfH0wn0LLuUnk0n 0kmRrvQc/hytolPoeXSqTej59AK7H51OLyx+KdKNXmSfSmfQmfQSWpPUJVJAL6WX0cvtAfZAegW9 svgovYZeS6+zu9A6egO9uWeO3ZPe1jN2+gy64PQF2qN8b6S3nU8X2b3sbrZZ/o6dsLtGEnaPnGU9 a+wym9uD7NPsgh4lkVN7bpBjcrf0wT1K5L3eacqu5OXwWYNwrXm60WwcNY6ZxBRNw7TMvmaWcbbx i/Gr8ZspmJLZwXSZbtNr+s2gqZiamWSmmGlmhqmbETPH7GTmmVEzZqJJM7uYBWahyc2eZi+zt1li 9jFNM2GeYpaa/cz+5qlmmTnQHGyeZg4yB5jlpm0OMTuasukxfWbADJmqGTaTzVQz3cw0qZlt5pqd zXyzq9nNjJvMLDK7mz3MYuM7435jifGg8ZDxsPGZ8bnxhfGy8YCx1FhmLDdWGI8YjxqPGY8bTxhP Gk8bzxjPGc8bLxovGRuMjcYm43XjDWOz8aaxxXjL2GbsMHYaHxq7jY+NPcYnxqdGk7HX2Gd8aew3 vjIOGF8b3xp/Mw4afzW+MRqMlUajscpYbTxlrDGeNdYaLxjrjPXGK8arxmvGVuNt4x1ju/Gu8Z7x vvGBscv4yDjTGGuMM8YbE4yzYMv7McIlGOODGOVDGOfDLSNtwFhXYrSNGO8qjHg1xvwURr0G434W I1+Lsb+A0a/D+Ndjlhvwfhvxjpvwnr+fifP+21pGsKNlDDtbRvFhyziOz+4zzO9zzPCLP8zxG8zS meN3mGszfH4UXj8GvxN4XmzxfUd4X4b/PVCADxoIQAUh6ECFEsLQQjLUkAo9pEMRmWYWVEGhi2wo I/cP2nB82aXFmwUt/ixs8Sh3fPo7vRhQjAXN9P2DagZAN45qTod6hjjKMQ4Z3xs/mOeZ1eZU83zj PPMCc5oxxfjROGz8ZBwxfjaHmmeYFeYwc7g5wqw0R5qjzNHmGPNMc6w5zhxvTjDPMs82J5qTzHPM yWaVea45BbGwQjx4ZjPpQK4k6E6Jm3jG+oiP+EmABEmIKEQl1STs3DPQcl99GkknGSSTZBGdUHIh ySYXkVzSieSRKImRk8jJpDPBAp2gMSMFJE4YKSRFpDvhpAcpJj1JL9KblJA+xCAmsUiC9CVzSOlY L+lPTiVlZAAZSE4jg8jpZDAZQsqJTYaSM0gFGUaGkxGkkowko8hoMoacScaScWQ8mUzOInv/1ZFM +v1zsUyuIXVkGmx3EZlOriKL/v+IbdJAdpE3ydvkbvIGWUnWkB1kCjmPvEc+IueS2WQZeZ6sJ6+R t8g75APyMXmVbCHbyE6ym7xCNpONpIrsh8pCRBWGtCgnF4q7hvSDJeaQvaT0j5ljrAzdVZNJeNZk MmusF4qcBn06qrSgmPHwerv1gmQRqScvkA9JtjGRREiOMck4x5hsVJH78ubl3WacC43JLSN1Q98e qLoTOd+oNqYa5xsXGNOM6caFxkVGrXGFcaVxlTHLuNq43qgzbjBuNG4y5ho3G7cYtxrzjNuM242/ GPPJ1eQSUkMuO2E8/Fci4L+g+j+z6n93Vs27tUOa5bUils/yt2ZYMoF4SUdyD1lM7oWyH7SyyX5y RXvexc8n5d2StyRvKXko7768+rz78x4wLyL7oNps6A3PNO6xqHFvhzRjsbHAyrFyjfOMS62ocY3V yZhtzLHyjEXk8rbcfa1xn1E/1vXP5HBzBrnAqDGuM+40Fhp3GHcZdxszjIuNmcYl5nTzQmT45aTo RJ+c/0d/dqL+4ESPwzstg9X2i7XZseibsXvxfdd/1TtXb8A7/YP3D5zw3oET3Dpw4rsLqreS2lhB LB7rFusSY7HCWHYsJ5Yb6xTLi0VjsdhJsZNjnWNFse6xrjGO//7RR+bjUQxfne/z8fjClmd2PeFz /rHXLMTr8JZXPtFjnPfoildxXst5Hec5J35cV4D/MPMtwjVKUPs+a5n6mFqT/EVmXH2We1OzM19T hybdlP5k1ljuUy/l/qxm9e1wYU7vpE+Tfs56kwd4MPVkZbByDg+ljFGGqCu4Ei7iamoz13g4fVL4 ufCSpCPpP2sBbXJSvf4FT+LJqd2V15Sm7MNJX/CU5JlpSelHM3IzH8t8TruAp/K0pH3JMk9XJoTt 5B/T6sMrwqt4hlYWrk0hOS/xzCSJZ3Fd2Zk1Qnk15yFtrfYjp8mTUl9NPZq2J/2WjC1Zoax96f14 JC2kVClPqDOT1ictSUnh2alNma9mpWWNUyeFN2u3aXsyb0j5JH24egnPyQ0l353yeapfWZO0jedm 7lC+DqcnTU5/NOOypG95p9T1PE/PU2ZmfJm8SMtI76JRHoXZT8rspT4ffo2frL2QfF1KUuoXvHPa KGUhz6cpOXfyLjmrwm+p27ROvGvyjpwbUiMZCcWlPKY+pQlJdvKpvFvK2an5GUMye6hTM0Qtkxfw eE5dyuOZh9TLU5dmds0MZE0Nb096OGdU2tDMr/VO4UWpfTjT8sLlyQOTb0jzZlyYcU/mhNQAL+RF yrfqGt49fGX4ds6Tm1K3pzWlv5U1PPsr3iNtQXqCF/OeWve0juqjWedrUe3S5CvS7vLZ4UeTF9Bi tYT3Ck9Ju0m9THsk/GHK7ZnB8Pfp92bW5VTx3toiXsL7pA0Pb+EG7a8+w81MT+Y1Gbv1kDI2Z13K Z3o4qSJpV3Iv/0Up43JcKVrGaTyhdUv9hffNmJrx17A77dKkFO2OcDU/JeOi9Jt1KeWerJnhCbyU 90tv5P35qakdUQzu42V0Gh+QU8MH5twUvkDJ5afxQaml4fcyw/x0Pjg1T8tO/yBjJB+S1oeXK4Xp 3uQJ3E4J8aFaQ3r/jLL0nvwMxZOVn3ZfxsDwHUmNGVyJ5zytyLwivZkPC83mw5XLU5JzFqhP8BG8 UtmUGszcr3fmI/mocD8+mo9J/kRZz8/M6ZL0eOrlOS+muvnY0KHkJ4hQvZmILZ/2FLOu5RaRlGdS +mTsR3ysJe85N5a23LP6GHucPcGeZE//4W5V52bV/+xe1X/uVtVD7Ic/3Kd6/DZVudBT6CsMFIb+ cHOqc2/qf3Zr6j93Z+rgwvI/3Jb6+7tSO7KVrJGtYqvZU+wd9jf2PfuRHS10FboLvYX+wmBhl8LT C4cU2oWVhUphaqHI1rAX2+9XZesLM/r+E/cbwl/PCrn6jkjmH/dt9A8jVN+tf3x830Zv0vc6ezb6 fv2r43s2kZz2HZv2/Rpnt0Y/GumkH2vdq3F2aqiLytRNPa17NTQQyTu+U0OT23ZqMlr3amgkEj3R Pg3tSrvRAhr/+z5Nd8ppT9qL9qZ9qNG2W9O3fb/m+F6Ns1MTyafl1G7draEj2vdqIl2O79Yc36uh VfTclr2aajrV2atxdmqcfZr2XZr2PRpa6+zQ0Fn0ajq7dZcmEqfXO/s0EUZvpDdHCukt9NZIEb2N 3h7pTv8S4ZEedD69I1JMF0R6RnrRhZHe9C56N10UKaH30Psifej9ESNi0iV0KX2QPkxX0EciFm2I JOijdCV9jDbSxyN96RN0NX2SPh05JVIa6RfpT9fS5+kLdB1dTzfQV+hG+kbkVLqFvkW30rcjZXRb h+m+Q57zAnXausxD+scdL4MDLvWXBrPpLOWgOiVtRdbGlOmBJyM54fpIPHVMyqAMt97kmh2hsiAb 6cPSZspVqpb8m7zNfZX7JM/HKUOoK7W7X6EjAj0C73b8IFiQ9gytDTan35x+ITLCGukU142uW1y3 uxa47nbd63rAtcy1wrXStcr1lOtZ1wuu9a6NrtddW1zbXO+6PnDtdn3q2uva7/rG9Z3rB9cR11GZ yB1kt+yXFTlJTpOz5Gw5Tz5Z7iozmcu9ZEPuK/eXB8qD5aHycHmUPFY+Sz5HniKfL18oz5Qvk6+U Z8vXyTfKt8i3ywvku+V75QfkZfIKeaW8Sn5KflZ+QV4vb5Rfl7fI2+R35Q/k3fKn8l55v/yN/J38 g3xEPtryaQ+vO+jW3CnuDDd157pj7nx3gbvIXewucVvuUneZe5C73F3hrnSPcY93T3RXuavd09wz 3DXuWvcs9xx3nXuue557vnuhe7G73r3Uvdzd4G50r3avca91r3NvcG9yb3ZvdW9373Tvcu9xN7n3 uQ+4D7oPuQ+7m93HPKLH5fF6gh7Nk+LJ8FBPrifmyfcUeIo8xZ4Sj+Up9ZR5BnnKPRWeSs8Yz3jP RE+Vp9ozzTPDU+Op9czyzPHUeeZ65nnmexZ6FnvqPUs9yz0NnkbPas8az1rPOs8GzybPZs9Wz3bP Ts8uzx5Pk2ef54DnoOeQ57Cn2XPMK3pdXq836NW8Kd4ML/XmemPefG+Bt8hb7C3xWt5Sb5l3kLfc W+Gt9I7xjvdO9FZ5q73TvDO8Nd5a7yzvHG+dd653nne+d6F3sbfeu9S73NvgbfSu9q7xrvWu827w bvJu9m71bvfu9O7y7vE2efd5D3gPeg95D3ubvcd8os/l8/qCPs2X4svwUV+uL+bL9xX4inzFvhKf 5Sv1lfkG+cp9Fb5K3xjfeN9EX5Wv2jfNN8NX46v1zfLN8dX55vrm+eb7FvoW++p9S33LfQ2+Rt9q 3xrfWt863wbfJt9m31bfdt9O3y7fHl+Tb5/vgO+g75DvsK/Zd8wv+l1+rz/o1/wp/gw/9ef6Y/58 f4G/yF/sL/Fb/lJ/mX+Qv9xf4a/0j/GP90/0V/mr/dP8M/w1/lr/LP8cf51/rn+ef75/oX+xv96/ 1L/c3+Bv9K/2r/Gv9a/zb/Bv8m/2b/Vv9+/07/Lv8Tf59/kP+A/6D/kP+5v9xwJiwBXwBoIBLZAS yAjQQG4gFsgPFASKAsWBkoAVKA2UBQYFygMVgcrAmMD4wMRAVaA6MC0wI1ATqA3MCswJ1AXmBuYF 5gcWBhYH6gNLA8sDDYHGwOrAmsDawLrAhsCmwObA1sD2wM7ArsCeQFNgX+BA4GDgUOBwoDlwLCgG XUFvMBjUginBjCAN5gZjwfxgQbAoWBwsCVrB0mBZcFCwPFgRrAyOCY4PTgxWBauD04IzgjXB2uCs 4JxgXXBucF5wfnBhcHGwPrg0uDzYEGwMrg6uCa4NrgtuCG4Kbg5uDW4P7gzuCu4JNgX3BQ8EDwYP BQ8Hm4PHQmLIFfKGgiEtlBLKCNFQbigWyg8VhIpCxaGSkBUqDZWFBoXKQxWhytCY0PjQxFBVqDo0 LTQjVBOqDc0KzQnVheaG5oXmhxaGFofqQ0tDy0MNocbQ6tCa0NrQutCG0KbQ5tDW0PbQztCu0J5Q U2hf6EDoYOhQ6HCoOXRMEbH69CpBRVNSlAyFKrlKTMlXCpQipVgpUSylVClTBinlSoVSqYxRxisT sXauVqYpM5QapVaZpcxR6pS5yjxlvrJQWazUK0uV5UqD0qisVtYoa5V1ygZlk7JZ2apsV3Yqu5Q9 SpOyTzmgHFQOKYeVZuWYKqou1asGVU1NUTNUquaqMTVfLVCLVKxCVUstVcvUQWq5WqFWqmPU8epE tUqtVqepM9QatVadpc5R69S56jx1vrpQXazWq0vV5WqD2qiuVteoa9V16gZ1k7pZ3apuV3equ9Q9 apO6Tz2gHlQPqYfVZvWYJmouzasFNU3DUlWjWq4W0/K1Aq1IK9ZKNEsr1cq0QVq5VqFVamO08dpE rUqr1qZpM7QarVabpc3R6rS52jxtvrZQW6zVa0u15VqD1qit1tagA1mnbdA2aZu1rdp2bae2S9uj NWn7tAPaQe2Qdlhr1o6FxbAr7A0Hw1o4JZwRpuHccCycHy4IF4WLwyVhK1waLgsPCpeHK8KV4THh 8eGJ4apwdXhaeEa4JlwbnhWeE64LzyWCeAW4jgiR0/B1K9gM3gJv42cD8XUZeAhsA2vALHA3uBos IoIUBCGgABVoIAySQDJIAal47DVgDngRPA/WgWvBO/h9GkgHGSATZAEdUBAB2SAH5IJOIA9EQQyc BE4GnUE+6AK6gm6gAMQBA4V4rxXgEeDM+xZwI35eBLoDDnqAYtAT9AK9QQnoAwxgAgskQF9wCigF /UB/cCooAwMAbCfBptIgcDreqwH2xM/FR8E9YAkRxTfExfjTA+C+tp++CbaA7URIOL9bChrBSvAY fjYUr+YFPnw/G1/9RIg3tXolewy+PggeB/X4nQtfb2ib7c3gJnAXeAYjuQpgZBHHm6+CZ/E6mFXk F+CcG8DMxefA2tbnFth4/dhxtbS8z79TC2b0v08tb/w7xTzwP6QYx3/wmbgKoJ8Ur2zz/3fgfgDb S/CJBNtLD4PPwOfgC/AyHrsQX52xQ08SfCQtB5ifhLlJeH0J2pKgGwmvLT0JngbQiQQNSLC/BD9I L4ENYCPYBF4HsI8EDUjQrXMDiAQtSPC9tAPsBB+C3eBjsAd8Aj4F0Ky0F+wDX4L94CtwAHwNvgV/ w7ivB3VtkXoQ/BV8A74HP4BDAHaSEB/ObSgS7COtBk8B6E+CriVoWHoBQEPSevAKgOal1wA0LEG7 kqMrxJz0LngPvA8+ALvAR0TQ8Ro67KDDvzr8q8O/Ovyrw786/KvDvzr8q8O/Ovyrw786/KvDvzr8 q8OPOvyrw786/KvDv/pgMASUA8SX7pwqOwNUgGFgOBgBKsFIMAqMBohz/UwwFowDzpmoCeAscDaY CCaBc8BkUAXOBVPAeaAaTAXngwvANDAdoCvRLwIzwMVgJrgE1IBLwWXgclALkAd0aFCHJnXEuI74 1p2zXIhbHXGrI1b169ryz01teQyaEx8+nsta8pqTq+AvEZoT4TPx6db8JCEfSrCPBNtITs6DTSTY Q5oHbgfzAcYtwX4SbCfBbhJsJsFezu1LEmwlwU4SbCTBPhJsI8Euzn1MEuwhwRYS7CDBBhLmLmHe EuYsYb4S5ithvhLmK2G+EuYrYZ6SE2+YlwQ9SpiThJwgIS4l5AXpVnAb+Au4AywAdwIn7pBzJeRA CflccvIy8rx0L3DyIfwqwacS/CnBlxL8KMGHzl1SEnwnwW8SfCbBXxJ8JcFHEvwjwTcSfCDBBxLs L8H+EmwvwfYS7C4hbiTYXrrxeE2JYe7ix611xsnlTv536k8MOawD6oiImBYREzHoNQa9xqDXGPQa Q26LOblNaqsfTj5G7IvIAyJiSUQMi8g3cYw/DlvHMYc47B3HPOKweRxzieO945hPHLaPw2bxW1pX Fy2rDthOhF9F2E+Eb0XYUFzQmrNExK2IvCMibkUnj21ofe8E4irujAW5Q0TuEJE7ROQOEblDRH4Q kT9E5IsENJWAphLIBQnoKgHdxZ26ijwiIneKyB8icomIXCL+iN/Vt3xaSYgjpyZgh4Sj0cPgJ/Az QG0UUSPFo+BXcAz8BtsQIACx1U5SBzwXuTQODSag8QTyUgI6T0DnceTbOPQZRw6JI3ckoPGE3ab3 IW2at9t0f0ab9oe16b9d3yPbND66Tedntml9XJveJ7Rp/uw23U9q0/7kNv2f2xYD57XFwdS2WLig La6mt2ntoja9Xdymuf8oPtq1eNXv9Dj7d5q89ne6rDuuzRPG0by2WLq9LZ7m/x9ialFbXLXH1H2t MRbBGiGCNUIEa4QEbJeA7RKwXQK2Szi2c2qmUw+duunURKd2OnXRqZ9ObXRqaHt9dOqLUyOdGuPU SafOOLXSqTVOvXTqjVMznZrj1E2n7jg5zKk9Tv106o9TQ50a5NRRpw45tdSpRdB0S011apJTV526 5NRWpzb9R/W1vWY5dba9bjn1tr12OXW3vX459bethp2wDjvrBKcWO2sFpx4764X/qCY7ddepy+11 2Fl7oEa31OC2epyAJhPQZMLRPTSZgCYT0GQCmkxAkwloKwFtJaCtBLSVgLYS0FYC2kpAWwloKwFt JaCtBLSVgLYS0FYC2kpAWwlnnYvvs/F9Nr7PxvdxjCWOcSRg7wTsHUN9TkA3Ouymw0467BR36jRs mN0Rf8a44mNbPqEoxKGB+D1EHNdI3mOD2ZD49/EfWHn8x/jh+E/xI/Gf483xX+JH47/GjzHCBCYy iXVgHZnM3MzLfMzPAizIQkxhKtNYmCWxZJbCUlkaS2cZLJNlMZ1RFmHZLIflsk4sj0VZjJ3ETmad WT7rwrqybqyAxRljhayIdWec9WDFrCfrxXqzEtaHGcxkFkuwvuwUVsr6sf7sVFbGBrCB7DQ2iNls KDuDVbBhbDgbwSrZSDaKjWFnsrFsHBvPJrCz2UR2DpvMqti5bAo7j1Wzqex8dgGbxqazC9lFbAa7 mM1kl7Aadim7jF3OatkV7Ep2FZvFrmaz2TVsDruWXceuZ3XsBnYju4nNZTezW9itbB67jd3O/sLm szvYAnYnW8juYnezRWwxu4fdy+5j9ex+9gBbwpayB9ky9hAbzc5ip8d/Yy62nD3MVrBHmIdNSjQl Pk/sTXyR2Jf4MrE/8VXiQOLrxDeJbxMHE39NfJf4W+JQ4vvED4kfE4cTPyWOJH5ONCd+SRxN/Jo4 lvgN/lpJutH4iKPDe414fPTcXqt639V7VZ+HKxp7h3MuLt9RGSkpyZnf50ZuDbuq/Nbhu0fkjDhS WVi5cuSAUb1Hu2x1tGl3Gv1pxY/DxGHx4etHnFTJKnePVEdWjVw58tXR/UYj/sc1iD92/K7jDx2P dDzqIq4OLrfL71JcSa40V5Yr25XnOtnV1cVc3NXLZbj6uvq7BroGu4a6hrtGuca6znKd45riOt91 oWum6zLXla7Zruv+R3Z6Z8g1cq08S54j18lz5XnyfHmhvFiul5fKy+UGuVFeLa+R18rr5A3yJnmz vFXeLu+Ud8l75CZ5n3yg5U6fw3KzfMwtul1/7vT+udP7507vnzu9/zt3eolAnHtMsc6JO/9qAdY5 xLljDesc4qwt0PsQ5/Y1rHMI1jkE6xyCXoGgLyDoC8gRgN6g5V8/cu5vRG9A0BsQ9AYEvYGA3gD/ EwT0BmgUBAG9gYB1iOACMnADD/ACH0AvJgRAEISAAlSggTBIAskgBaQCrHUFrHUFrHWFTJAFdEBB BGSDHJALOoE8gP5POAmcDLAOd+5XF7qArqAbKABxwEAhKALdAQfoF4VigL5QgG0E2EzAmsu5S9+5 v1zAWktAXyMkQF9wCigF/UB/gN5NQG8lYn1HviNiLhyKn3Ru/Y3zUxEdioiuRUTXIsCywrE2i8Fa omO9Ia20eAErUwFWFtHRCD+1zQrdq3Ck9bHiuNavubCiiI5HxOpUxEpURHckovsR0f2IWHmKWHGK WJWK6IRErFZFrERFrBRFrFJFdEYiVowiVqsiOiQRXZXodNNYuYpY0YrOzis6KxGrWHF66/uLta2q EtDVCae1jfWntrG3q8DdqjoBHZFwQ9v4b2wd+9/n4XjI6RZz2hSH3zn2cuzUYsnOLVZssZNji3al ClCj8MvvvN2/1eoC1Cn82mZTR52DgLPbCJWKUKkIlYpSq8odu8Vzj9s+HgV4vbijomhrlLT7qSVa vmmNGCdKHEWLWMnHMY947P8iQv5VUfAvUrzoaNbRHnwtOn5z7II5iJiniHmIzk4+5iJiLiKeK2I+ Ip4vOrvgeA0R8xKd18HcRPhQxPxEJ04wR9GJIsxTdPSGuYrO39dgvqKzq4I5i84OD+YtOv6FDUXM X4QeRdhAhA5F2EEsB/CpCH+Kzg4//CVCcyJ0JdpgKICtxDNABYDNRHTUIjpqEbYT0VWL6KpF2FBE Zy1CqyJsKcKWImwpOjvpsKXo7DDBniJ8KsKmIvwqwq4i7CrCriLsKjp/6wC7irCjCNuKsKsIu4rO 32Q4dsZ4BMSvgDEJiDkBYxIQowLGJSA+BYxLQLwLiF/hNoA4F24HiHUBHaGAuBXmA2hWuAM4+WUB QCwLdwLEsLAQIP8IdwEnp9wNkDeERQD5QlgMME8BeUO4ByBfCPcC5AgBHaWA/CAgJwhOHkA+EZA/ BOQNoR7cD5AzBHSdwhKAfCEsBQ8C5CBhGXgIIPcI6EKEhwFiSEBuEpx4R04R0P0KsL2ADliA7QV0 wQLsL6ATFq4Gs8E1YA64FtwMrgM3gbkA/hauB/PALeBW8ChYCR4DjeBxsAo8AVaDJ8FT4GmwBjwD 0G0L6LaFteB58AJ4EawDL4H14GWA6iq8AjaCV8Em8Bp4HbwB0KUL6MyFLeAtsBWgaxfQtQvvgO1g B3gXvAd2gvfBB+BDsAt8BHaDj8Ee8An4FHwGmsDnYC/4AuwDX4L9wMnPTv51aghyl4B8JiCPCchh gpNTkUsFJ5c6+Qz5UEAOF5CDhUdAA2nJv87qwFk1/L2+1P7juc7Jr05Od1YCLfWhfZXRtqporxP/ 3a/n1CBnrHHEeRxxHkd8xxHXccRzHHEcR/zGEb9xxG8c8RtH/MadXDiqNff/mdP+zGn/r+c0xIJ4 xnbxNOdztpHMrGX6u3wSP4dPrjij9dSm/qG+S//IObXJp/DzeLW+h0/l5+ufZL3pnODkF/BpepP+ ub6XT+cX8nHpk8JL+Az9C+dMZ2p3fT+/WP8qeaZ+ICOXz+SX6F/zGn6p/g2/TP+WX+6c8dS/47V/ P+P5o35Y/0k/ov+sN2eF9F/4FfxK/Si/Sv+Vz2o998mv5rP5NXwOFajIr+XXUYlfz+v4DfzGlE/4 TXxu+6lQfjMf334ylE9wzobyW/itfB4N0lB6F34bVfjtzklR/hca5vNpEr+DL+B38oU0maa0nxvl d9FMmsXvdk6P8kV8Mb+H30sj/D6aTXNoLq/n99NONI8/0HKi9CR6Mu3Ml9D8jAuPnynlS/mDfNnv zpX2oMVtZ0tLWk+X8of4cueEKX+Y9uUr+CO8oe2kaX/ns8HqM/xRvpI/9sdTp3QILe8hUZs3JlUk 96JD+eP0jJYTqMPpCFpJR7aeQ834q/OpYb6KP0HH8dV0fPrNx8+j8if5U/Qc/jSdzJ/hz7Z8irjl bGqS2X46la+l0/jz/AX+Il/HX+Lr+ct8g3NilW90TqzyV+nFzqlVvonW8NciBUohf7399Cp/I71n ywnWq1rPsPLN9Br+Jp3Dt/C3+FbnPCt/2znPmno530Zv4O8EH+Hb6Y30Jr6DzqU383f5e/zf2DsP 8KbtrY3/h2V5O3vLMuAYCCAhIzEj24QRtgizGFpm2XuFvcvee+9ZZtkQWvZeKXtD2HsXymj5JGUQ esO9veV+t+X7+vR5aPtgEse85+g9v/+ro1P8aSXjyp+xjVRSrvxZ/pxtDH/e+Iq/wF9Usq628fxl /gqfwl+1TeCv8ddtE/kb/C3+Nn9HSb7yd/l7xBL+vm0K/8A2lX/IP7JNs03nH5vn22aYmttm8k/4 p/wz/jn/E/+Cf2lqY5vF/8y/0kL+Nf/GNpt/qyRl+V/4X/l3ArDNE6Btvm2BgGwLycemqrZFgkYg BK2SohVI4pTtW+slJUcr6AR9apZWMAhGwWRbJZgFi2AV/AR/IUAIFIKEYCEkLWW71rZOCLWt170U wqykEG7bQMzl6wkRZrtto22TEClECZRgs20WaMEuZBOy25KEHFo/2xbb94ZlgkOIFpy2H2xbhZxC Lts223bbDiG3EGPbyde37RLyCHmFfAIjsEJ+gRNcQgGBFwTbbqGgbY9QyLbXtk8obNtvOyAUIwvY Dgqxgii4bYcEj+C1HRaKC3GarrYjQgkij1BSKGU7KpS2JVdJ0Gwgmml7abfoxthyG+Ya5hnDzTUs 0YEJoR2iqtgOfDz7qx0QONO6J9Qnf3Y5lOwvdY6E1Juss7/EqX/M/prt4W3lvpQM+/ENUvsR35hv ktqBlP6j9B2147Tj2/MdlN6idBa+C9+V76b0Db4n3yu9WyidIr1PKF1C7g5qN+BH8aP5MfzY9Orn J/GT0yudn6FUOD+bn5NaxUql8otSazS1KvkV/EqlvvjVSj3x6/j1qdXEb/5t5fA7+V38bn4Pv5ff x+/nD/AHU6uBP8on8z/yx/jj6brnzyhq588rSucvpatc0bis8JupGlf0zd/nHyjK5h9/qGZFyYqO +bfpChaggAScqlqBVHSaqtCs9CmECmFCuBCRrsF0BQo5UnWnaE5RW9Y6EwoKhYTCQhGhqFAsVVuK shRdCSUURQmlNX01azWbNDs0RzQpRAzRgOhHHCSOa43aHNp4bR3tfO1+7UPtT9qXpJUsS9YgE8mt Op2uli5R103XQ2/Um/Rx+l763vpR+iP6p4ZchjKGSYZZhqWG7w3JRtroNtY1NjO2Nq4yrjOeN940 3jbZTDlMMaaSpnhTJdMK0zbTdtMuU4rZaqbN2cxFzc3Nw8yTzPPMS8xrzfLfkIW25LWUt9SyzLbc sjyw6qwG6y7rbutZv4H+VTVd3leBYfb7KrAsTq0DvoHxKd/kfSVYbVlVQkg5IQfRQ9uHb/yxFLzO rKTgTeveV4LlcVoKHiUcAbP/up+fJfhTPr/MdxNobn78c0z9FCN0yqeoufiHPsVDoKMzwhnpDHeG OqOclNPkNDstTqvTz+nvDHAGOoOcwU6bk3aGOUPkf37vK8PlVyj/HSK/llL/VFiWr/99X49Sv3dW v698/TD5KyhfR/kayuuzfp38ruSf9gDMxtXnGnANuRZcS64V19pVimvDteXace25RlxjrgnXjGvO fc0lcl24rlw3rjvXg+vJ9eJ6c324vlw/rj83gPuGG8gN4gZzQ7ih3DBuBDeSG8WN5sZwY7nx3ARu IjeJm8xN4aZy07jp3AxuJjeLm83N4eZy87j53AJuIbeIW8wt4b7llnLLuOXcCm4lt4r7jlvNreHW cuu49dwGbiO3idvMJXFbuO+5H7it3DZuO7eD28nt4nZze7i93D5uP3eAO8gd4g5zR7ijXDL3I3eM O86d4E5y17jr3A3uJneLu83d4e5y97j73APuEfeYe8I95Z5xz7kX3EvuZ+4V95p7w73lfuF+5d65 gAu6kAu7NC7CpXWRLp1L7zK4jC6Ty+yyuKwuP5e/K8AV6ApyBbtCXKGuMFe4K8IV6YpyUS6bi3bZ Xdlc2V05XA5XtMvpyunK5crtinHlceV15XMxLtaV38W5XK4CLt4luAq6CrkKcw+5n1zxrtJcB64j 14nrzJ3mznBnuXPcee4Sd5m7wqVwV11FXEVdxVyxLtHldRV3xblKuEq63C4Pd4obzo3jmnIXuIte t9fj9XqLe2muoTfOW91bwlvDa/Pavdm82b05vA5vtNfpzenN5c3tjfHm8eb15vMyXtab38t5Xd4C Xt4reAt6C3kLe4t4i3qLeWO9orekt5S3tDfeW8Zb1lvOW95bwVvRW8kreSt7E7xVvFW9ynOP5NE5 QXkGTDagzfLu/Pvy3P1anrnfyvP2r+CdMmRDVLtx7Q61O9buVLtz7cTaXWp3rd2tdvfaSvKlKeqB eqJeqDfqi75BA9EwNBxNRJPQZDQNTUcz0Ew0C81Gc9BcNA/NRwvQQrQILUZL0LdoKVqGlqMVaCVa hb5Dq9EatBatQ0loN9qD9qKr6Bq6jm7gCrgSroyr4Gq4NR6JR+OxeAqehefgeXgBXoS34xR8Dd/A 9/Ez/JwqQhWlilGxlEi5KQ/lpYpTcVQJqiRViipNxVNlqLJUOao8VYGqSFWiJKoylUBVoapS1ajq VA2qJvUFVYvyUbWpOtSX1FdUXaoeVZ9qQDWkGlFfU42pJlRTqhnVnGpBtaRaUa2pNlRbqh3VnupA daQ6U4lUF6or1Y3qTvWgelK9qN5UH6ov1Y/qT82j5lMLqIXUImoxtYT6llpKLaOWUyuoldQq6jtq NbWZSqL2Uvuo/XQ4HUFXpCvREl2Zbko3o5vTLeiWdCu6Nd2Gbku3o9vTHeiOdCe6M92Ffkw/oZ/S z+mf6Bf0K7uf3d8eYA+0U3abnbbb7Yn2Lvau9m72/vYB9m/sQ+xD7SPsY+yT7NPsc+zzmfpMQ6YR 8zXTmGnCNGWaMc2ZFkxLphXTmmnDtGXaMe2ZDkxHphPTmUlkujBdmW5Md6YH05PpxfRm+jB9mX5M f2YA8w0zkBnEDGaGMEOZYcxwZgQzkhnFjGbGMGOZccx4ZgIzkZnETGamMFOZacx0ZgYzk5nFzGbm MHOZecx8ZgGzkFnELGaWMN8yS5llzHJmBbOSWcV8x6xm1jBrmXXMetbK+rH+bAAbyAaxwWwIG8p+ yX7F1mXrsfXZBmxDthH7NduYbce2ZzuwHdmubDe2O9uD7cv2Y/uzA9gh7DB2ODuCHcmOYcey49jx 7EJ2EbuYXcKuZtewa9l17Hp2A7uR3cQ+Yp8oCZis8i/suw8SMFo1A6P/C6Rgyiu5nfyVskzD1Pog D1NPTcQ0/EtkYtKSMBnXrb7yVekb+Yo0RO2KC+RrxF75+pAsXwluyFeBO/IVQOm1pNyVc8sd2eUq 9Zu9SU1jm30mWz7UbRnvd1d8Tls//sCejbT9H8rmDk+8p4xH8lT2tPa08bT1tPO093TwdPR08nT2 JHq6eLp6unm6e3p4eno2e5I+JR31O66Ocd4SCTsTdiXsTtiTsDdhX8L+hAMJBxMOJRxOOJJwNCHZ d9R3om4FAPXdgQYQ6TuegOE3O54CPrrjiQZ2+ar6aTueioM4UOIP7niqC+qB+qAh+Bo0Bk3UTT7N QQvQErQCrUEbdQ9Qe9BB3cuTCLqArqAb6A56gJ6gF+gN+oC+oB/oDwaAb8BAMAgMBkPAUDAMjAAj wSgwGowBY8E4MB5MABPBJDAZTAFTwTQwHcwAM5XNH2AumAfmgwVgIVgEFoMl4FuwFCwDy8EKsBKs At+B1WANWAvWgfVgA9gINoHNIAlsAd+DH8BWsA1sBzvATrAL7AZ7wF6wD+wHB8BBcAgcBkfAUZAM fgTHwHFwApwEp8BpcAacBefAeXABXASXwGVwBaSAq+AauA5ugJvgFrgN7oC74J7sZB6Ah+AReAye gKfgGXgOfgIvwEvwc1YOB2KogQTUQhLqoB4aoBGaoBlaoBX6QX8YAANhEAyGITAUhsFwGAEjYRSk oA3S0A6zwewwB3TAaOiEOWEumBvGwDwwL8wHGcjC/JCDLlgA8lCABWEhWBgWgUVhMRgLReiGHuiF xWEcLAFLwlKwNIyHZWBZWA6WhxVgRVgJSrAyTIBVYFVYDVaHNWBN+AWsBX2wNqwDv4RfwbqwHqwP G8CGsBH8GjaGTWBT2Aw2hy1gS9gKtoZtYFvYDraHHWBH2Al2homwC+wKu8HusAfsCXvB3rAP7Av7 wf5wAPwGDoSD4GA4BA6Fw+BwOAKOhKPgaDgGjoXj4Hg4AU6Ek+BkOAVOhdPgdDgDzoSz4Gw4B86F 8+B8uAAuhIvgYrgEfguXwmVwOVwBV8JV8Du4Gq6Ba+E6uB5ugBvhJrgZJsEt8Hv4A9wKt8HtcAfc CXfB3XAP3Av3wf3wADwID8HD8Ag8CpPhj/AYPA5PwJPwFDwNz8Cz8Bw8Dy/Ai/ASvAyvwBR4FV6D 1+ENeBPegrfhHXgX3oP34QP4ED6Cj+ET+BQ+g8/hT/AFfAl/hq/ga/gGvoW/wF/hOwQQRAhhpEEE 0iIS6ZAeGZARmZAZWZAV+SF/FIACURAKRiEoFIWhcBSBIlEUopAN0ciOsqHsKAdyoGjkRDlRLpQb xaA8KC/KhxjEovyIQy5UAPFIQAVRIVQYFUFFUTEUi0TkRh7kRcVRHCqBSqJSqDSKR2VQWVQOlUcV UEVUCUmoMkpAVVBVVA1VRzVQTfQFqoV8qDaqg75EX6G6qB6qjxqghqgR+ho1Rk1QU9QMNUctUEvU CrVGbVBb1A61Rx1QR9QJdUaJqAvqirr9dXy7Juxv5/57nHt2v+z+juGOEcq2NsdoxxjHWMc4x3jH BMdExyTHZMcUx1THNMf09D1bytYtx7wPtjlltUtqrWOdY71jg2OjY5NjsyPJscXxveMHx1bHNsd2 xw7HTscux27HHsdexz7HfscBx0HHIcdhxxHHUUey40fHMcdxxwnHSccpx2nHGcdZxznHeccFx0XH JcdlxxVHiuOq45rjuuOG4+ZnvTW5VHTp6Ph/sTm55r+5O7nN796ePOAvtj/5T96e/LtJ2u/d5MV/ 1vNwNjY7m4N1sNGsk83J5mJzszFsHjYvm49lWJbNz3Ksiy3A8qzAFmQLsYXZIn9P0H9P0B9M0A3S t4DGNlGn6d/u+0zbjxjbOTYxtkts1w/2f/aJ7RvbL7Z/7IB/tgk0dlzseHXforJtcUrs1NhpsdOV TY5/z+1/7bld2YgpthPbix3EjmInsbOYKHYRu4rdxO5iD7Gn2EvsLfYR+4r9xP7iAPEbcaA4SBws DhGHisPE4eIIcaQ4ShwtjhHHiuPE8eIEcaI4SZwsThGnitPE6eIMcaY4S5wtzhHnivPE+eICcaG4 SFwsLhG/FZeKy8Tl4gpxpbhK/E5cLa4R14rrxPXiBnGjuEncLCaJW8TvxR/EreI2cbu4Q9wp7hJ3 i3vEveI+cb94QDwoHhIPi0fEo2Ky+KN4TDwunhBPiqfE0+IZ8ax4TjwvXhAvipfEy+IVMUW8Kl4T r4s3xJviLfG2eEe8K94T74sPxIfiI/Gx+ER8Kj4Tn4s/iS/El+LP4ivxtfhGfCv+Iv4qvnMDN3Qj N3Zr3IRb6ybdOrfebVB2o7rNbovb6vZz+7sD3IHuIHewO8Qd6g5zh7sj3JHuKDfltrlpt13ZeOrO 4Xa4o91Od053LnfuP/vpAH8tWiPVlepJ9aUGUkOpkfS11FhqIjWVmknNpRZSS6mV1FpqI7WV2knt pQ5SR6mT1FlKlLpIXaVuUneph9RT6iX1lvpIfaV+Un9pgPSNNFAaJA2WhkhDpWHScGmENFIaJY2W xkhjpXHSeGnCf/fJCP+URAX5gn0hvkhflI/y2Xy0z+7L5svuy+Fz+KJ9Tl9OXy5fbl+ML48vry+f j/GxvvwKu/Kd8p32nfGd9Z3znfdd8F30XfJd9l3xpfiu+q75rvtu+G76bvlu++747vru+e77Hvge +h7Vfl1HW4dU9kYr5AvYsmRbWdASbMFW7If9cQAOxEE4GIco+0vkPzUO18BfYB+ug7/CS/BSvByv xN/hTXgH3iPPDj/K88JpeU64IlfYE+XOVwDrVpJ/bfkRqpYlqUFTsvru9vgs55usp4uKWXnRLL0l laWT5JxjneOc450TnBOdk5yTnVOcU53Tsjp5lX+2kKx/tqzfmfz6JKDJ8rPInkEVU5miQhTf80SF JhYBJVVqqPDCSiorrApqgDngbpa8S5fBuFIJl8K33tMthW3RMEZlWAq94lVyVQTGov5oQFafPw7D 4TgCR2IK2zCNs+Hs2IGjsRPnxLlwDM6D82EX5rGAi+CiOBa7sQcXxyVxPTwQD8Hj8Gw8F8/HC/Fi WTXfyrpZJitnhaqdNXgdXi8r6Ae8C+/Ge/BevA8fwofxEXwU/4iP4eP4BD6FT+Mz+Cw+h8/jC/gi voyv4uv4Fr6N7+C7+IEmTLOUKEZsJE5oZ2vnkm901fRAn0+/0FjW4m85YnlrDbcq93UUBWXBODQC jcqk4Xq4AW6EG+OmuDluidvidrgD7oZ74j64v/zO52fSuPI+N8jvMwl/j7fKet8lv9fDOFl+f6fk d/YQP8KPM1dAdN70GoBLgOUj+v8vbUoHU8AW8PwjXPSPkNA/QD/RBDQFrUcb0CaU8k/1FZWmMLuq sRyZVJZb1VleWWkMZnF+zMmKK6BqriAuhAuryisma09U1eeV9ReHS8gaLIVL43hcBpfF5XB5XBFL OAFXxdU/qoI2qgo64c44EXfBXTPpYQgeiofh4XgEHoXHyKoejyfgiXgSnoyn4ml4Op6BZ36g9HTt rM5CPYrW9+H9+AA+qOo9XUmKvi/JCr+iavxmhsrv4QepKsNPNEs1qzVJmgOa25p7hJuoQnRUta/R 5tYyWq+2k3au9pj2gvYyWZj0kKXJtmQPcjw5jVxM7iefy9URoyus8+hK6Mrqqun66KbqZug267br zupu6F7LdRMmV05BfVl9TX0dfX/9MP1k/VH9O0M+Q21DA8NawwkjNGYzxhvLGocahxkXGpcbj5ly mQqYiptqmDqbZpgOm06ZbpnjzH3Ny8wXzY8sBsshy23LU8srq79chR2sy63HrdeoKdRUaho1nZpB zaRmUbOpOdRceiY9i55Nz6Hn0vPo+fQCeiG9yJ7D7rA3sze3t7C3tLeyt7a3sbf1bPHs8uxWE9x/ n+J81qc4mrA/m3Yqc6o8A/3jBPTh/KNMP6mzzx+dfD4y9/x3/e97LyhfC09rmmraaLqoKcUNaTnF 05qLmhTNTc1zwkrEEHmJBkQzogvRg+hHLFGyi8QZ4lxGfrGXuv9huna+dot2v/aK9lZamhGSVjKG jFUzjY3J5kqukUzWQZ1OZ9blTM836nrqxuhu6l6oOcdC+jh9s7Ss41b9fv0R/UX9U4PNkE1NPQ5X c49qDlFNP+4wJBuuGR4Yw420kc3IQSYae77PQhofGJ+a/NISkS5TMVNcWi6yo2m6aYVpnWlDej7S 9CQtIRltFsxFzSXNpc01zM3NAzPSkmuUvKT5hJqYtFuiLXktjJqb7G6ZbZljWWw5r+QnlcSimqG0 WaurOco91rPWFL+Bfg/9A/yr+jf1vxDABQwIWBbwQ2BC4MzAbcHvQsqFVAxpE1og1BfaIaxj2Niw xWEbwquGtw0fFqGLfBpVJWoX9TP1mo6ko4XDBQsWoguVV+4Q+a+fFX7SKeFnctI2Ao1Eo9BoNAaN RxNxBdkdVJL9QWXZIVSRPUI11SXUlH1CLdkp1Ja9wpeyW6gr+4X6smNoKHuGr2XX0ET2Dc1k59BC 9g6tcGvZPyg+sr3sITp+4CK64x6yk+iFe8tuoi/uJzuKAfgb2VUMwoMzOYuRsrcYLbuLsR/4iymZ HMYs2WPMkV3GPNlnLJCdxqJ/cNWr0jzHWtVbb8AbZeexWfYeW2T38YPsP7bh7bIH2ZnJcb/3IYrv Ts5w3if/wXunepMU2Z1ck/3JjQ8cyv33HgU/Vc7+6DDl9Mze3d7D3tPei52kkGRPKU9VTzVPdU8N T03PF55aHp+ntqeO50vPV566/5JLKJs3H37m5///7Tr+1PP+1BP19NN0zWdS2Z9yhp56gt5dPT/v g/qifspUjAahwWgIGqqepX/QN9Rz9SloKpqmnqxnPlf/7Zm6MgFtlGegzSgJbUHfox/QVrQNbUc7 0s7X96H96AA6iA6hw+gIOoqS0Y/oGLqFbqM76C66h+6jB+gheoQeo6foGXqOfkIv0Ev0Cr1Gb9Bb 9Av6Fb3DAEOMMMYarMUGbMSmP3Xe+run/od7qsakCaMOUAepo1Ryan+l4+kydFm6HN2T7kW/pt/Y CbvT7kvvukquwCk4CzkLO4s4SzvjnWWcZZ3NGCntdFE5NSzGiqyb9bBfsD62NltH7tNT2WnsdHYG O5Odxc5ml7JX0zp3aU8llR9/Qgf3jPFM9Sz3rPCs9KzyfOdZ7VnjWetZ51nv2eDZqGy6k2evT6CU WVG3rGie/H0I+fu8whbHC+dY+f+6qRPkv5oe7fJU1lW93vyra40WVpR75fsOktojlJ6QlOX7VlIT /yoxgaMrRteM9kXXiW7zu0/Ks/jZlb95T2VlGlDuQNY00XTQdNV010zQzNIs1azRrNOs1+zV3NY8 0LzQvNX8SmAikIgg7ER2IppwEjmJPEQ+ohgRS3iJEkQ1ojnRgUgkuhM9iQHEYGI8MYGYSyyWJ4Zl xCpiI7GJ2EzsJvYTh4hTxB3iLvGY+IV4p4Vag9aq9dOGaEO1Nm0+bRGtW+vVltBW0dbQ+rSDtSO1 o7RjtIu1K7RrtJu0Sdrt2gPac9qr2tukltSREWQkSavb4nKTeUmGdJEFSJ4UyKKkhyxDViQlsib5 BVmbrEPWJZuQTclmZCtyFbmd3E0+Ih+Tr3WETqvT60ro4nXldJV1LXSddV10/XQDdIN0I3SjdON1 a3TrdEm63br9uvO6+7rHupe617p3eqBHeqs+Wp9HX0TdyybpK+tr6mvpO+oT9V313fU99H30/fTj 9JP0K/Sr9Bv0G/W79Mf0J/Sn9Wf0F/SX9Jf1V/Qp+mv66/qb+sf61/pfDKRBZ4iS5xynIb+BNxQy FDHEGkRDeUMDQwtDS0N/w0DDIMNYwwTDNMNMwwLDMsNywyrDJsM+wzHDCcMZwwXDFcNVwy3DfcMT w0+GV4Z3RmhERmzUGAmjwRhgDDY6jfmNLqNgjDWWMVYyVjPWMH5hbGdsb+xo7GMcYBxoHGQcb5xi XJq2M22jcbtxt3GP8YjxnDHFeM/4yhRsijLlNxU1xZpEU2VTVZPP1NzU0tTG1NbU3jTNNNc0z7TI tMS0x3TQdNSUrO41+9WsNxvMoeYos91c0FzKHG8uZ65vbmFua25v7mPua55v3m7eZd5t3mPea75q fmZ+ZX5jMVusliBLDktOSx4LbylsibfUtnxp6W0ZYZlsWWJZZllhOWW5Y3lk+cWKrNhKWu3W3NYY ax5rXqtgLWItaa1mrWGtY61rbWjtZe1tHWAdbB1pnWpdZF1s/da60rrGutG62Zpk3WLdYd1rPWg9 aj1uPWk9bT2jbgS7Yb1lfWZV9lAg02BLPvnfJ9Ov7B9wwn/vavVp16rfRxb/vSvTp12XPsoh8VPb Sdtj2xPbU9sz23PbT7YXtpe2n22vbK9tb2xvbb/YfrW9owENaURjWkMTdJi9nL18xjTwmH36aZMA zK5p+g8M42wqxcjEMHqk3ntJnNOCTPziPb24lXEnZgxZlqxO1kjlFmnUopSulq5xGrcYohuTiVp0 SaMWM9K4xdOPMItkw/EPmEUpY4KxrrGJsZmxlbF1GrnYks4uMnELhVpUNFUy1csgF+nc4momcvGe WwwzT1S5xcJM93lGp93pqRCLDF6RRitird4MYrFfZRa1/Tr7DfQ76h/tz/qL/lX96/nX95/kP9l/ q//DgKCA3AFcwPCAEQGPAhMChwROCNwWBINigioHo2ApuHpwp+CUkIiQkiE3Q+nQ3KFMaMvQDqGT QueEHgg9FHo6rHDYd2Hrw7aG3Qz7OXxQ+Lzw+eGnwl9G5IkYHnE04lGkLjIq8n5UlagBUeOiFlBa iqRc9gr2ivxEfhN/XSgqVBNaFHQW/LJg74JbC74tlK2Qs1DnQjsq/SgBKbcUI+WR8kr5JNnQSPkl TnJJBSReEqSCUiGpsFREKioVk2IlUXJLHskrFZfipBJSSamUVFp5wrpUVlKeS1Ac4D+JJv8nWHID 0BA0UnmyQpMzk+SOH+HIqRR5IBj+ASGek0aHlWcIXwc3P/uc/eedsv9cM/afBx1QWEBTlKjM+R/k rjOfN1z/nflLeYL6hNTd34m7/2eJu7QM2W8SYpm9598k+n+dRCs045O8J8hXML5QlcJHiywrdjbW HhsdmzOWLT6++Ju4qnFfxjWK6xI3rkRAiUIlPSWblvqy1JbSu+Mj40eWqVY2suzissvKni/Xq9yE 8vryweWLlH9QwVxhaIXbFU0Vc1UsUrFEJVhJ2dX20/8RR5J6wv3ejySqTkTxIX0yuRDlpHqa7D2+ BcvAepAEtqWdM+/NdMacesJ8XD1dPpNxsnwd3EbdM+51es9qlXueMvPaDxntv3Pnk0Jsk1RSuxPt ypLPXkQp6ObfjPX/Urf40+5Y6/RP71kboNyVlkF7X9ud//n7ZZyNsryHZBg7XPY1TT4Tj/EZeQrl 2YeobFoao6umr2a8Zr5mScbuKIVmXFFTGS8IHWEirEQYkZuIIfKobKMl0YboQfQm+hFj08irwl13 q7TjFHGO+FkLtFBr1Ppp/bU2bQ6tU+vWxmsraOto+6v0Y7/2YDr90L4lrSRFOskYMh9ZgIwl3WQc WZYsRyaQVdKIyGhyFrmYXEFuJQ+Sh8mj5CnyLHmJTFGfnvyM/CWDl1TVVc9gJt1VajJZN003W0l8 6F7qsZ7QkypDyaMvpPfq4/QV9A30jfTN9F30XTOIymL9Ev1W/U6VqyTrb6U+ucJgUQkLZyhg8BrK GJoa+qusZbJKW5YYlhqWvacthieGZ0aQibjUNH6RRl2ap3GXfsYxKntJMm4xHjYeMZ5MYzD3lASJ 8ZXJaDKZwrLgMVVN9UzNTM1NbUwdTf1Mk1U2s9K0zrTelJRGaJLVbAk0G81Wc4CZNtszkZq65qbm 5uZEcxdzd/UZDunUZn46tzHvNO82nzbfN/9qAepTGnQWvcpyYlSWU9FSReU5o9IyKEssWzJyKG+s pMp2TGl0R7JWt35tnWCdZ11g3aSSnn0q6blkvWJNsb7y4/xq+nX26+PX32+A30C/8X5H/U75PUij P6VU/tPYv7P/JP+F/hv8L/nfUSkQF1Ar4KuAZgEtAvoGLAz4IeBRwNvAuMCagV+rTGhK4PTAOYGb A7cFJgeeCHwZFB0UE8QGxQaJQZWDqgTVCuoW1C9oQtCqoC3BKBgHF1bJUYfgjsGJwb2Ck4MvqgyJ CokOyR1SNKRkSHxI2ZByIZND5oZcDkkJuRnyONQ/NFLlS2xogdCWoV1VwrQ89PtUyhR6LvRBWL4w IaxgWPmwCmFSWEJYlbB2Yd3DBoaNTONPl8Nuhr0Ip8PzhOcLLxQeF14qvGF48/Ce4cPCR4bPD18a vjH8YPiP4afCL4RfDr8Tfjf8ZYQuIntEnohiEW0jEiO6RfSMGB4xKWJDRFLE0YgHEY8icaQmUhcZ FBkVmT3SERkdmTMyd2RMJBOZP5KLLBDJRxaMHBU5N3JH5JHIK5HXI+9HPo2yRFmj/KKiorJHVY8a EDU0akTUuKhpUfOi5kctiFoYdTDqZNR9SktRlIs6SUfRNG2ns9MO2knnpHPRuem8dD66CO2hS/3v UzHYT+5Jqd3oYkb/UbqP0nVS+80yucMonUXpKxXknnJQ7Rrl5I6R3iuUPpHeJZQeUTW1F8hdgJTr 35tR+4vlWk+rc7nKlfruL1d0ag0rdZqUWqFpNdnM1E+trgC1mt7X0s4s6iZGrphRcqVskatDkqsh tRb2yRXwSlZ//wzVi6rWF6bpPF3jisLfBgalKVxR92ZZ2YquY3+jZUXHioovZug3XlZuSppmWVWl qfrMSp0vZD3GyTpMV2Ca/mT1papOVpyqtaxVNkpWWLq6UpWl6EpR1UJVTxR1gjqZtiH4AnWZSqGu Kzt/qbvUPeo+9UDZ7Ju21fcF9Zb61QZs0EbYdMpGXpvpf9g77+cmzkbfU9RWq7rqbWVR1qbJsM8W STZYq2LJKit73emEllBCL6ETOphOqAFC7y0ECL3aJKH3ZkroNfRi6o0MKe9M3rnvnXPuL2fOf6DR jEb77Of7fD5x9y6q/mTaRVErakOrohiahNYst+fWRXGURp1oatyN+8mI+9GBG/ffsmj2R8ct2ght gjZFm6Et0FZom7jB9qO9Nm6qjXtq0e5oz3IrbdxHOwQdig5Hx6DjraZ/8xuwf/wVxN8S///+HVT4 7n/yt/cfvWP/r3+H3f9Dut7999Pgf0TXP7H1/16y3uk/fk7+t1T9949oKz+PDvrrbc6f58yjlU5V OlOp9PcT45V/PC/+7znuv/kcB69CT6EX0UvoZfTK/xupLH9bpP4XXnmlfAXzKPlx8pO06H9pAXMk 7WjasbTjaSfSTqadSjuddibtbNq5tPNpF9JK0y6mXUq7XKFSNQXCrzqgWoOqF9HSeq2T3QoZ8tS8 ULmKDFhO5h8jg/4hRMvsimSG5gbRioyo35BRXYLVbDkdeUGy4aCjv7rULLHNsJxVXPHmkZlWS8xG cnEzPJnNbuM94z1N2K2sQObZ+psbEzCZ73SQhYU3nfsICdmYbOpsrarnz7c51VfUZR/d8YRUMS5t CdmCkOmSyJaKiKIV+yU7MHsgISdbk20sv5JtEb/V6t0UnE+2U0S5n5RLkYOEotw0ryQ76F4b5jBn w81dz3LHaN8ZWprCgXoxHtkDaa2e46lmuUGoLTcJjeWWd4o0ieyjmK3Yr7jqy3E2ILo5C9U3CK2m O9mX7Ge5a3gbN9OTA0ybyUFxO71ZQ36d9EK5nxyOzCFHEQbL/VSWHE2OUTTTPLc8iNJ5gxwoWaS9 p/iVHEeO96nJCeREcpI1IVaXnKxb69wWVnIl5BTyG9VScirXWIFYfuN+C5uQdHImOUvVx2ZQTNBW iLzKexO6GcmzEJ5K5ALLI8JM9El6mYISFnIhucjymFxCLrU8IZeFp5PLLc/SG8TwjEX6GpYXbA+2 hSqRQC2vdMW6t5Yy/SXLa0OR8aBZTq7NLGBnE1ZFkaKN5S25Udk97sxnZ1mrWt6rdzl3aLVEgu4q uYXcSm6LUWa9siX3htyBVrCeI3e6hgRee9YSA8ld5G5yb2Y2O813hhhE7nNVJ75O9ap+yW5MFiOX yBJyP1pJ9ZAYGnOSB9DKaYuJYa7hcad25Cl5iDxMHkl6VaWyISdxETGa/WAsJo+Rx1F+FTl5gjxF ns5u6ZTGUpDG5DnyPCrUXrOeJUtT3cQYVEReKjymyCIvo5D6qGLgx/+3mMuppW+rDOrW5BVjprG3 +gFRlFlIjCWv59Tx+4mqul1IV+tB23tLNe5zRXf2M396Xr71RGgBYkTl+rnkb+RDIjHu+PecIR+j CPnM5CCfky98JvKlUqjcSr4iy6yXuSGoinxjDEenEpPId+R7YrJWrbuhL0j6QH6gKuTs/WgEj9RW lLI/URWjJYqpFI+oGe8D2L4halH8+L+vbS13FzVQogKFNkJBlBQ1UTKituYEJbeNoBTxdoAxjX0f 7wdQiGIVpVLOVP6AVKTUsVSNn6ijq2mMmkhle0pvrIRaKbNtRX4ZZdG3R0zhvpkxysrusg0nZmf4 KBtVXbvGVEv5FWpTDtXNp2qYapukquPqJSmpoanEXM1otKqtgHmpSc8xU3XYhUlvbWHKbptA1aNw tJqtjCIpmnLkLNKlUC4qlb2NVkeqIV+qWKp+vFugCaJJ8X9x3TH2TrxeYJxFMaZmMQvl00lTfkFr ZbcX7xHvzsCMU4l6hqAlgcCVG9lRBEDtOXNtNQhCczXc0nCIyqBC5hxiIUHqpxAUFaYiVBQBijOh EmsNtK5yBZUF14JrqjemHELreZsg1ZFemr4o7lhIZVM5VC4KLCVUgX8oSqhWaKbEKwkmH0pTjVCH Me9jK4FqTDh+f45oitaPzom4lb2RZapzVPPMBKpF2grtBOozk4xqSbWiWgeyqDaqp1Rb9pVpOPUF 4UxbFi8rRL+i2lEdqS+1MWJp+h39EGJ5oUl1EGWozv53VLfcCqiH6o56qR7sD/Hqgnc31ZPqxXbk WhTOo3r7bNRXcd97zE3Up/oQq6ITTRCaXvguXIAGqL5o0N+U6o9m6AXGUjRkkSsa1xCiYWYbGuGW oCw1yLaDKwsdtqiooQ4tNSy768dqg/q8xiHpIumsbUINjxyjRlAj9Teo0dQYhYEqQrPYr7SIMQOp E9pf3nTIo8YlGNF8asLHpzbdm/Arwk1NMguVF6nJ1JRguwwd2lgloqYik1XtiHXRfmgTakZMVv5k 15xfSs2iZsc8aAspI3VHrmpnmbvrUWd1diQ1n1pALbTWJtZTi3WZ8R4EtdSwmvARG4hN2cMJf9xk Ty1D24RKqeUeK7UCbUutpFalbKdWOza7GqLtTBvR9knPFOOpdbEK1Pp4MYJIR7+09aR+kB6WHsoh Y15qI7E18JB9SwQd0ow2xLakJ9Rm2yhqi6rj38z4IWo7tYNdb5oWeoZ2pnbqelG7VKesdajdVNyZ H0a7xPzZGUSEG6yrlnCX2kcVyzJkQaoE7UrtJ4qpn9Bu1C/UAbR71G3Mp45QR6kT1Cm0BxH1L9Ko PdOU+6hS6iLBoj2pX6mr8U4Fdd0gZmdomoXuO39RXaVuUbezvyFiulMpq6k71F3qHnUf7a2VU79R D63nY0HiZ2S5jqMeGXzGdOqxbSzal3qO9qNeUC8TBsvNchORRb3znqbeZ5yNkgrIXNMYVE1Wr0YH sr/RFY2EhfLOpivTfHSwbUPGVYWQFhAH/G39M+Ud5R20hdzPmnHpK2mxVqMWol/bptAybYKixHSQ OGypQRTQSpWXRsprGYXoMFpFNNRcdvRWr4l3M2hNvJyhExGN5U/lTxxN5Y3lNXhtbY0EMyWjFGaF KXRItiyH0txSeBSMtyPfze8mas524uaFznp7E8cl9QUc3ysMent5u9J672TRzwkHuF3e6aJO2enE Cb1N6OYnS1cJ1mmSNW7aBHXn30KqQCdpi3wN/w6NprpgbfJ0qAOdgHThHRV05N/lXvn2IqOQMciE 35/vq3gyHDXZvryXULUY7ajvLUGLsus6vEqgxD2PwliqOltGVw87ClB0vOe+95HRp2ymbIpOEHYk zrFD2KHQTXaYMAYPFWOmH8Q180TKycpJ7HAfjE60EtBpn4u4wO8FY7y+Pq1eBZ1hNovPQtWV25Xb uPeyIjpRkIzMZYvYMcrTylPZc8JdJReJUjqJuBjuTdfw5fraK18pXyrfKd9CZ9lx7CTRI+i1Yol4 EoyHBzjGWSnJMnQKjDD7w935bQVLfXOQPCRX15m47FsiqsEc4W+Odxhou3iK4rJoo/dzmGQn08k5 O8NT6LqhpYobipuK2yltpZAgVXmQuMZOhYfL3iErkRWRLeYezHjvlxGWuO7gh+ez0/l9fHeFxZHM HJ/jEK8b8gp5SdywST13cjjJk/AK0VCVSWX0PROivlvh1fwqOc18j4lb8j2qkCoj9E78jdXptxB3 pGKakJYJVjue+/XoNHVdmpKT6HSaJu7FarJz/WLBODhH9YNqvR9ivyPu56xEZ9DO9AGqYtU+4Vr4 fGpQnIrOlFXN6AGPYJeH77DLwndVv6quyPayK3IOCA/CK3L2sSvpVFs1+QQ1rBanhj0Dw8/pBui3 qiLuDvHIP8Cji5dUaEY0Qt1W3SaYzW4gntAedmPE71HQfuKpc3NE4j/L38JuEtdXr1KvlDvlZ4ln cG3/dOI5u1mYr96r3qM+pD4oau/M95+XdODt5mP8d/5bqVmiKfxEOp23xv+UeOmpIhuR2zx0J1JF MVHSKV2vmOR/D10Ss+JZ7E50LrtHtjodZ/cJKjrbwqnEG3FA/pVzIpxHR9hfcmdoNmh+SO+Z3gb9 Dlqb8DK9tfxI7g50nvg+by7NKgg6pnmkeegJCRoaGxubxhyC9fQb42d0ZoY+fZyxteyOZD4Uk48T NnLeJN7JF2uraG3xlob2fu7z3LsWms7SOrUOsoJlY+57dAG6EJoUqw8flPeUdNU21zbTN2WPscdd PJcg0oXOpfPgKewpspLUz5TZEtDF3D7tUu0SsVm7Xvu9dpt2a0ARGcaedVULaCKTAghdkBcWBdAl gnbamoGa/Gl0ofwGe068Od7u0KE6C2+jzMFPhX7N/pEUiodLW8ve63J02XSzvImx2nlDde117dDl 3H0k35oms8kv5bcIDOK2Brq52kf26CbpJqIrxHVdPUiRYHjgBxISbaDbCJMC++LVGvFC2dl4uSav RNgMygzsor/gj5SUCGvoPujeu6ZK6MDawIHc15FmyvXSDMVoz3ShOO9Xugu6NnCDvUbKSAWJQIXa zwOP2BvsLehV5D2porvHSFIdraT/Wj8YPkpqony4sqiMvUv39OiDVcMBzzL0+1h6sB7dB12v36vf k5+Uty1Ie3bT/YS10R8kg+KFnGAbKxN0GSoaKshWohvZR+wTUp8fpgfRg4Nh0iCvhG6ivxYfihHC 14Zh0Xr5c/jzgxtjIXooPYw0ps8w5Fk9Qjv6Iz2CHmmYYZgeXM8fnb8wf5O0s2GrYQtpiUbEZTk3 IudIK1tGjyYTDNcMV+kxzorx3kn+rWCp5xq6VSCHHnmPZ0vz3woUBVjwHbqNHmusa0yW+4JPMkT0 OGgfPT7boSyUV5bXliyAGkDX2Heicb5x8OeyJpqXmndanrGVsaVWFu/2iMaT1WOV6InoDnqSuATd KV5FT8lIjlX2Do1OK2gVfU8mGrcYN5NJKSFRBSFuPGw8hO6KLjGeMB6XuAp6ZTTISI2u9nygp9Mz 6JnoXolZTMMzYlJ0318lFnF1MfFXjQW6DskdQ+GG/AUpfQuuOZdGS8VrYwrbg5RJGcvotTEE/t5U ZBqTsY6kTBNNE2Ra8yB6HVriMKbMjqno76PPlIOlSwW6aJnvaF4kps04Jt+I7s84Y3tRBY5XhFLW B+oW5ksumCGziPdTvCdEbxAkCj8nU+mN9CZ5zZgxpKC3htShJHqb1S/+ECIc53lv6e2hatIAsone VbjQ9C2Zlj8vXh6KmWPoX/Uherd5vfn7KgLzHvNufi3zYfMh0mc+Yz5tvmy+lPI2Vj2lgzWdLpak ShqKj4mKQ9/TP4U2yLek6jzzBbvk6dp6icJEUSKUCCdKEqWJskR5osIqtEqtauvVZDhZkizlDeZt 5h2O869PW9446Sr+l47Kt5/2u/H17kd2lSHMKu+pHBCeFon+Zb37AuKXL3f/4kzL/lzuJpXzpD9o Uny1e+3fsqP+/3atG9/qTi+nQX+xoL8vdT9udOOcZ4+0+FOFhfu0zr1VTm5S5bnyb8pJTfkiV1m9 nMJMQ+p9XNyqTqqT1ZmamOao5letT5uhna+9qeugm/ZpZUv+wTgMVoPfMO7Twnaa8Uj5wnZ+nELE F7aV5loWWpZb1vE28c7EWy/C3L93XpTTkRrx1kt8qWvmLMLkhQm6BE2C3p5nb5zwXcLShCXWfta+ 2CusDHuNvcHeYu+w99iHxAqJFa0XrBetl6xXrNetN6w3rbdqVLT+aj1kPWw9Yj1qPWMpth6zHree tJ5KECRUTHqfVGbNsXLWXMmPicpEBH6SqEpUJ2oSKyVWTuQl8n9/RJBZu1q7W7vRh1L604d5z7kF th8cIkUP+rhjXiEhc9Enwv00p33TbBUSXiPvBGu081Rl4ps5b/nV6dP0GXFjcVghj3g92dL9vDdi EbRJ+lTOFzd3LPZMdg2Uz4T68g45rfQ56Dk0iMtJKJbnSTIzlpvamE6K28Uai/YJX5h3Fe70OlNu mk6FxokgfCQ+Ch+Nj8GL8LH4OHw8PgGfiE/CJ+NT8G/wqfg0fDo+A5+Jz8K/xWfjc/C5+Dx8Pr4A X4gvwhfjS/Cl+DJ8Jb4K34Hvwnfje/C9+D68GC/B9+M/4T/jv+AH8IP4IfwwfgQ/ih/Dj+Mn8JP4 Kfw0fgY/i5/Dz+MX8FL8In4Jv4xfwX/Fr+LX8Ov4Dfwmfgu/jd/B7+L38Pv4A/w3/CH+CH+MP8Gf 4s/w5/gL/CX+Ci/DX+Nv8Lf4O/w9/gFUABVBJVAZ8AAfCIAQiIAYwEACpEAG5EABlAABaqABOmAA RmACZmABKLCCBGADVUBVUA1UBxhIBEmgBqgJaoM6wA6SQV1QD+AAAAKQgAI0cAAncIEUkArqgwYg DbgBAzzAC3zAD9JBAARBBgiBMIiAKGBBDGSCLMCBbJADckEeyAcFoBA0BI1AY9AENAXNQHPQAnwG WoJWoDVoA9qCz8EXoB1oDzqAjuBL0Al0Bl1AV9ANdAc9QE/QC/QGX4E+oC/oB/qDAWAgGAQGg6/B EDAUDAPDwQgwEowCo8EYUATGgnFgPJgAJoJJYDKYAr4BU8E0MB3MADPBLPAtmA3mgLngOzAPzAcL wEKwCCwGS8BSsAwsByvASrAKrAZrwFqwDnwP1oMfwAawEWwCP4LNYAvYCraB7WAH2Al2gd1gD9gL 9oFiUAL2Yy2xdlh7rAPWEfsS64R1xrpgXbFuWHfsK6wP1hfrh/XHBmADsUHYYOxrbAg2FBuGDcdG YCOxUdhobAxWhI3FxmHjsQnYRIzCUrBUrD7WAEvD3BiDeTAv5sP8WAgLYxEsirFYDMvEsjAOy8Zy sFwsD8vHCrBCrCHWCGuMNcGaYs2w5lgL7LOkx4mLE+QJMutpezN7c3uOPdva0NrWHrZH7J/ZW9g3 2Tfbt9q32bfbd9h32vfY99qL7SX2/faf7b/YD9gP2g/bj9iP2k/ZT9vP2M/az9sv2EvtF+2X7Ffs V+3X7Tftt+y37Xfsd+337A/sD+2P7I/tT+xP7c/sz+0v7C/tZfY39rf29/YPyRWTKyfzkgXJwmRR MpQstre0t/6buTVubf3obP3D2PrR1/qHp/UvS2uRfZx9wr/YWWf8g5l1UbmVNe5kXVXuY/3TxvrR /ZwwLNmYrOTZFBes4eT9ySX/0AQqrXfxH7tADfC0v7WB0nnv+arye3M5/L78oeU34j4IvPF7bUKr 0CVsLFoPVYJ6Qf2g1dDl8jtepeJbcCWYD3eFf5RoJAfKb1Dtk16VycvvSQ2UTZedlifIt5XfaroV 57TlLBYTHPhEX1f/SV4/UVeo8t94616xTOyGK5Rz1T+pqhT+xFP/RlP/xlLjJPWNvLV8s/xKnJwq 23ykpUjh30ipR9U6zkjVqX+y0cqaAX8S0el/Z6H6sD72JwH9g38e+JN8xrlnnHr+M++8Xk46/0Y5 ef15Y3izeMt563jbead4l3nXeK/4FfgwX8c38Z38NH4Tfgt+S35n/jD+Rv5NQSUBJEAEekEtASGo LwgLWEErQWdBF0FPQS9BH8EwQZFgrGCyYJlgpaBEcEFwRXBP8EDwUPBESAnDwubCz4SthT2FQ4QT hZOEM4ULhNuFJcKfhKeE14W3hHdFPJFQJBEhIo2ogcgtiogaiVqIRosWit6K3kMQJINUkAaqCmFQ bcgBMVAAagI1hTpDPaH+0ARoKjQTWgVtgLZDJ6BT0HnoHvQMeimuLEbERjEuzhE3E7cWtxV3FHcS 9xaPFI8WTxWvFv8ofiN+CwtgOayAE2EP7IV9cAhuA3eGe8F94JHwWHgqPAueDc+Bv4NXwuvhffDP 8C9wKXwdvgXfhV/B7yUCCSTRSjBJsiQmaSRpKukt6S8ZKBkiGSEZK9kk2SY5I7kkuSx5JlVK7VIg 5aTZ0hxpc2kn6UjpeOk30unSGdJZ0u+lG6UHpaelT6QvZEoZIkuQVZFhshqyNJlXFpJFZJmyXFme rLnsM1k7WQfZRNkk2QLZQtkK2RHZUdll2VXZNdkN2TPZc3lFOU8OyaVymdwmryr3yll5tvwz+RD5 Qvlu+V75L/LLig6KbxQ7FT8pLil+UzxUBpQlyqvKR0gHZAAyTNVeNVY1S7VH9UqNqpuph6gnq19r lmhuam5r+VpKO0ZbpD2rq6DL1e3T3dPX03fTL9Vv1180EAaHIWD4ytDHMNEwxXDJcN1Y2+g0eowj jBOM84yvjO9MFU09TPNM68wqc3UzZnaYs8xNzX3May2QBUtYnrAu4XzCfVuKLd22PNUsGqythOxO +Fl6Q9LEtEDQQvEilqc0plqVdcLZ2U3kr30Us8Enz14gP8nbaXKGOyFJzLGEq7DbNjE8NTVBOhd5 kuMIrzI3VPX3awy3c90iM/NGNNA2VxqOwHw+/4kz5GT859Qn+G/5Zk1PZxdnu1QiUkczMbV6LCcV 80dMBblrUpPUM9IHC0YJG0a78xHZdldSKqM1ePLTj2h7aftFRdqDwuXOQ57eeV9Gfo4VBBpJ53tG RHrqigLTdAvYS5GjtsnCUcKL3hp6XmrNwPnA3dRaqbVDaVED+yC/ueu+6x5/bP7oWEPByYw34gbR wQVh4za2VUG3mCgsjm5HJpnLUopMkYQVGTu9SEovU9dYI9MS2XlTWWpd6UzxVtheOLpwuqewith8 rfAw62cz2DwlY6lDX3akOdY6pznnODe6ZrlWudakbHR+pTgu4pynhGs8sOqYWiIIxpqo77nnupe4 l7tXuw+4z7rPuc+7L7hL3Rfdl9yX3Vfcv7qvuq+5r7tvuG+6b7lvu++477nvux+4H7ofuR+7n7if up+5n7tfuF+6X7nL3K/db9xv3e/c790fmApMRaYSU5nhMXxGwAgZEQMxYgZmJIyUkTFyRsEoGYRR MWpGx+gZA2NkTIyZsTAoY2USGBtThanKVGOqMxiTyCQxNZiaTC2mNlOPIZk0JsqwTIzJZLIYjslm cphcJo/JZwqYQqYh04hpzDRhmjLNmOZMC+YzpiXTimnNtGHaMp8zXzDtmPZMB6Yj8yXTienMdGG6 Mt2Y7kwPpifTi+nNfMX0Yfoy/Zj+zABmIDOIGcx8zQxhhjLDmOHMCGYkM4oZzYxhitI6pLUXnuHT 8BZ4fNr+tJL/e0nOnevOQ370LnZ8odzgYyTpCIG0csz0FfHHcF/4eeKo9junKswJilPT1RPVQf1K 6USNir83kqp4pHnmzcw9ZuvmfJtyhT3BnsyzRnoFartceavUOleTkMk2STZaX81SV79BWBT0RG36 c8EB7HNIYHic/xD5oMxVEsZ7GU1SRrom+XghaRUoNM/D8k7A9ZAeihCyWdFe0U6RZ1yZY1F05p9S 9JdHIkpmDr99eCz8TFnVKJZXUeZ7ayunOjoIuirXQDqJ0PG5cn52f2YL/4HyGTtW+dw3wjecOWnM SihDspBGiuum7cLZqprIeVWKCmPuqzaoFjs+qAaquPD5jKZ+tz9NtEp02LmEXy2nVGKXt2Vbqr28 IjhTvVn+uWxwwTr/Fv/mXJv6WyerPpMLImr1LfVb+JLGo3FqOgjeay5oftbsVO11bmUPasXBSbmH DQPTF+QeT58j75P7IPeV8z18RLtHe1x7SPvG0yn3pukdf3VkHjzXlasbpRsYWZ+3MlLi6hqSh6x6 kW6j7pZuv17K/ur6Vt8g8lsu7lohPa9vJRytX6Pfpj+rf+PZwN7P9xoaqAfkB3IQ9qH+peQ6+zg/ 6ClJn8zvaJhpaG+4H7wdvGUks+XGpGgnoyNDliHNUGYoJDe0UIEz2ltcbFxsvGa8IlZ6IX996e2M rhmdC5aozhT8JOSbutnumcalDDb9Yjoix+T5hXmsPMXlrROYaa5jdkUOeiYGZkcumpuZ/eZC17ZY ONQnVBjKD0ViVWJVq0jEaV6f6CIbRIYXrg2tDq2yVLcksvmRbqwH1ktWKapLchQ50rGCTZoqss0y lCtSRVOaCEYLFimdymB2sv573g5PRUeexMYvyoPELxwjlaVIivIh9CbhGZLo/REZ6lgleIyUqKSO c6ra/po5y1UXVJdzdqkNkp+dtdSzchO9c/3XNYlQe2dfttjjgYfYWqhHFBDIVuS2YIteyTbWjgjt cn3haa0tzqsbGRcZqz0c+S4yN+ANDMubjqzRjQ2Md0VDBtcAyVeGM6GqUm9eabYhcFN4lbdNsEHf Wd9fP9qlyle6Dno257cxNJInCprmr5Q1zC82HIzGomz+bxmVnTszzPAuqSSlgcQEpRlXwQONR403 C2akNC38AupqalooNH2fXWDaYvyBRVgJK854yvILF7P1WUeoOJUXWpQqLCxLRUJbIl8KDaKD/n4p EUkFvk/BCRHJDMVLfkDZVtlO+aXyG2lMfE55WHnI9zkiQPRIH2SJ8FvkJ9kqYY7QqVqo+lGcpypV nVddUz2XqeD76kHqoepF6h283zQhMU/DaTpG6kEdNcvTh2s7abt7mniaaidr9+tgV7/AUX2avrW+ nXiMeKl+cTDgOi1ngq0MCcFOhkTPKXiN4aK01MhC+4UfpOuNXxuX8Nen5Jm0UpWppWmIaampxFzL PFW83jyTdyHULzTA/EA1R9dQMEhY8Z+6sBJFvAhb3oN9begcCjhnOlJcmSn8lG9tr1NjnJEzcWbO wqGclUvgbFwVripXjavOYVwil8TV4GpytbjaXB3OziVzdbl6HM4BjuBIjuJozsE5OReXwqVy9bkG XBrn5hjOw3k5H+fn0rkAF+QyuBAX5iJclGO5GJeZmZNpyDqWdTzrZNaprNNZZ7POZZ3PupBVmnUx 61K55fmj4/lfDM+29YIZOWpJRa6HaD9zmWsro6G6oTJukSI7YR83SRLhtnDrdUMV/bQLBWP4PeW9 1DhUpOsoWKC4JuGEXZR7eDOMMqUv+DJyJ+xUYkavYrAMz+4SfSX83tFQpBPvyOYkzXxp/KC0n+yE 8pyju65WsDHXVMx5R4qWSI8pcMcR5DeVQOUSXxd/Hb6q2o4MDD+AWqieqW76mxiO2+rAN3Kr+rfl 8iLSwB3/JadIg/KnatY4V2qupH/jiaXPD9TRJqfv0NrTi/UyrVc5KtzC0yoyWnvJtFd0yhUWNNO1 1hVGNgXGefrqT+kuR27r7YKNUYn+SDAUzAn2NuCu87o+0STXW0Nj8xjDkqjTsCzq5Y0w3Ps/7Z1n dBN3uodtYvU2RRpJI2ksmU4AA5miYopVrD4CSbYkRO+E3nsLLYCB0FsCoQTTIZgSwPQeSiihhhZ6 S0IHU+/MWJube3f3nt2cPXfvh+tzLAsdjzj65Hne/+/5vcGE/aboBQqJpoBBtGKcDATjtbw6mzve NB5Ci20h9GqwxNvLtc47ThdNpCeg+P3gjfgbyVnjLe9DfUaiV3BfonuiS6J9YqLtQqKv7bI0Qz+U ru5bmSWwfRA254G0X2pM1krWTtZJfpLEk0SSTFJJc9KStCZtyZxk3WS9ZP1kg2Ru0p50JJ1JVzIv 6U56kjWT2Ulv0pf0JwPJYJJOhpINk42S4WQkGU3mJwuSsWQ8mUg2TiaTTZJNk82SzZMtki2TrbhW 7n++y/tP9HinpUO8dE/6snK8cgvKXcsw/d7ZMiRjRMZYhnwKGQKcw/DPgowlDAOtZShoE9eJUMLQ 0I6MnRm7Mw5lHMs4nnEi4zRDR+cyfmIIifUKbmT8mvE041nG84yXGa8y3nB9L2nMXaaEB/IghlhZ etLzsngVUt0vZeZBDV42j2Koim2Bqc/1wDh5bp6HYVuWsloxnNWe15HXideF4a1evL68fryBDPWy 09tRDH99zhvPm8Ar5E3kzeTN4i3iLeat4RUzVMZ2xezl2mKOMHR8mneGd4l3m3eH6435hfeE94q5 4y1rj2HpTcI1yIAMxakZjmPdhsoMzdXkZzNEl8MwnYPv5ns4sgvzG/Ob8Jvxm/NbMpT3Kb8LR3o9 U6zHNlmO5o/hj2P+2kzguG8SQ35z+HP5X/IX87/hL+MocA1/Lf9bfjF/I38TfzN/K38Xfz9DhocZ fj/CP8X/kX+Ro8Q7HCf+ypDiY/4T/kv+e0G6gCcQCxQCSKAVYAzpV+Jaa6oJqgtqpJprSIFZYBFY BQ0EHoGXocsQZ1xEuR6KmKBxqsemjDnbCToIugh6MOzZTzCY4c9xgvGCQob2yzh0nuBLwVcM+S8W rGDof61gnWA9Q6b7OTY9Ijgq+EFwgmHUs4JzgguCy9xk4HoZsQqeCV4IXgveCN4JPgjTOH4VCkUp hlUL9cLKwqocy7qEbqGXIdqwMCJMMFzbXNiCYdt2wk7Cbr83ew4TjuC6dMYLJ3FtOrOFc4XzGPot Yu6j2GadTcKtwn3C/cKDwsPCo8LjwjPCC8LLwkfCF8JSjpDLcYYInyFlKcPKCo6W1QwvVxBV5Ji5 hqiWiGLIuZ6ovqgBx88BrosnIWrCkXTL1ISjk6izqAvD1T1FvRm27sdN/dmWniHc7H+4qFA0meHt KaKpHHMvZ6ib7e3ZKNrMsDdrnuwTHeTOBk6LfmRI/CzX43NRdJlr8vlLj88D0SPRE4bQn4teiF6K Xolei96IPjC0niEWiuVikKN2vbiiuJK4iriauBZD8GzPD9vyU09cX9xA7BZ7xAwyiWlxmGH7AnFS 3IQh/BYc43cQf5ri/M/EYzjWnyAuFE8VTxfPYKifPaeYJ17AdYwsES/j3JfV4jXideJi8XfiLeJt 4u3iHeLd4j3i/eID4kPiY+KT4lPi8+IL4kviG8xfhdtcc9ALcSk7OxB/kKRx3UG81BQBkiASDddX UklSWVJN8rGkuqSmJFtSO9UnVE/SIDVncEncEp+koaQR1y/EnpM0ljSXtJO0l3RInZZ0l/Tk5hBD JMMkI1O9Q59LxksmSiZLpktmSuakZhMLJF9LVkpWSdZK1kuKJd8xpMJ6ObtS04qjkmOSHyQnJGck ZyUXJT9JLkmuSG5KbkluS+5I7kruSx5yzs4zbpqRJk2XZkj5UoFUxE22AKlKikg1Up1UL8WkRqlJ Wl5aSVpNWlOaLa0jpaRWqY3rOMqVOqV5Urc0IKWlIWlDaVgalTaWJqVNpc2kzVPOT1n/UQ9pT2l/ 6QBuSjKcm5OMk06UzpbO4VqRlktXp86ANku/k26TlqROgg5ID0uPSM9Jf5Je5uYpN6W3pI+lT6TP uNYkiUwqU8hAGZw6LarCzVrYXtoGslyZg2tT8sr8slBq/lIgay5rIWvL2UTduIYldm43WDacm919 LpsgmyibLJsimyGbyU1o5srmyRbIFsmWypbJlstWyVbL1suKZZs434jtZDooOyo7JjsuOyn7UXZW dk52UXZJdl12S3ZX9lD2m+yJ7Knshaz0D9NABTflgeWIHOPacU3yLHl5eUVu5lNN/jHXlVtHjssp uVlu5aZAHrlX7pP75QF5UN5QHubmQQl5Y3nT36dCg+TD5CPkY+Xj5YXchGi2/GtuSsRaTivlq+Sr 5WsYOtgu38tNjU7Lz8rPyy/+Pj26I7/HTpDkpfLX8jfyd/L3inSuMypDwVMIFSKFmJsqgQqdQq8w KkyKLEV5hmMqc31SZW1SOYpchUPhVOQpAtzcKV9RoIgpmihaKdoq2is6KDoruiiYuzXFAMVAxUjF JMUXihmKuYoliqWKtYpNii2KrYoSxW7FHsVe7gTvoOKw4nuuc+pHxXnOurrKeVds69QTxVPFa0AA iAA5oAAgQAvoAD1QEagN1AFwIBewAz4gAASBRkAYiABRoACIAU2A5kAboB3Dv52AzkB3oDfQBxgM DAGGASOAkcB4oBCYBEwGvgCmAFOBGcBM4CugCFgN7AQOAAeBQ8Ap4BzwE3AJuAJcBa4BPwPXgRvA zbI0DDtHAx4BL4CXYBooACEQBcuDFcFKYA2wDvgJiDMMlgs6QTfoAYNghCH0GJgAm4HNwRZga7Ad xx2dGPLoDfYHB4AjwFHgOHAqOA2cAc7k2oPmgovApeAycCW4GlwLFoMbwI3gJnAbWAJuB/eA+8AD 4EHwKHiMYZYz4FnwAngJvAxeAa+D98DfwEfgM/A5+BJ8Bb4F30HpHNGgkA7KgipAFaHKUBWoKlQD qg19AuGQDXJBeQzT50MFUAxKQEmoCdQGastNpztDXaEeUE+oD9SPIaKh0DBoFDQaGlOWhoKmQtOg +dACaClUBC2HVkAroVXQWmgz9B20hSHEHdBu6AB0CDoKXYSuQHehX6En0FPoJfQKegu9gz4w99lC WAZrYRTWwZXgynA1uDpcG7bCNtgOO2Av7IODMA03gsNwW/hTuBPcBR4ID4GHwePgQngiPA2eAc+D v4TnM2y2FF4Gr4SL4Q3wRvg7eCu8Hd4F74H3wvvg/fD38FH4JHwK/hE+A5+DLzAE9xPDcVfha/DP 8HWG5m7Dv8FPmTv85/AruFQpUIqVEqVUqVZqlZgyW1lLWUeZo3QoPZyH11zZVtlO2V45lKG/z5Qj GQIcq5yinKacoZyjnKf8UjmfIcIi5SrlauUa5VrlOuUm5RZliXKHcpdyj3Kv8qjymPKE8rTynPKi 8pLymvKW8o7ygfIXZanytfKN8q3qIxWsUqowVZaqsipbZVZZVA1UdpVLlafyqHyqEMOYzVWdVV1U vVV9VYNUQ1XjVZNUU1TTVUWqFaq1qg2qjaqdqsOqE6rTqrOqn1RXVddUP6uuq26pbqvuqO6qflM9 Uj1TPWczG6oPSBpSDslAeIgIESNyRIFAiBJRIQiiRQyIETEhWdzJQzWkJpKN1EZIxIxYECuSizi4 0/MAEkRCSAJpijRHWiAdWOJl56PIWG5S/AVDvrORecjXyEJkEbIEKUKWIWuR9Ugxsg0pQfYg+5GD yFHkGHIcOYWcR64gN5DbyAPkIfIGeadOUwvVErWMO+8wqDG1UV1BXUVdTf2xOlttUzdUh9URdVSd r06oGzMs9am6k7qzuou6u7qXup96gHqgeph6lHqculA9UT1FPVU9S71IvVi9Wr1OvUm9Xb1LvU+9 X32QO/M/qT7DeY9X1dfVt9R31A/Ur9Vv1G/V79UfNBkavkaokWnkGlADazCNSVNBU1VTU1NbQ2jq MSxfdv4S1zTTtGG5XtNJ013TQ8M2kg/SDNGM0HymGakZoxmvma5ZoFmqWaZZpVmrWa/ZqNmk2awp 0WzX7NTs0ezV/KA5ozmvuaC5rLmiuaq5xfqVmpeaV5o32jRtulaszdQatZW1NbR1uCl7Pa1d69S6 tG6tRxvRRrUF2qS2iba1tpO2Ozd/H6Idph2tHast1E7iZvGztXO0c7XztUXa5do12q3abdoj2qPa Y9pT2nPaS9rL2ivaq9rr2hvam9q7nK/5QPtQ+1j7UvsWLYeKUTkKoVloRbQK+jFaHc1Ga6E4SqBm 1ILWR+2oA3WieagH9aJ+NIjSaEO0EVqAxticGdoKbY22Qdty1md/dCD6GToWLUS/QGeis9B56EJ0 KVqErkJXo8XoBnQzugXdim5DS9D96FH0GHoc/QE9gZ5CT6OX0KvoNfQGeht9kDpFEOpEOplOrkN0 +j+cbH2sq/6H0y1CZ9ZZdE6dXxfQRXVxXTNdc11rXTtdT10vXR/dSN0Y3QRdoW6SbrLuC90U3Szd l7qFukW6xboi3TLdt7r1ug26Tbotuq267bq9ugO673VHdcd1P+h+1J3hHNRS3Tt9hl6gF+pFeiln o8J6lV6j13MnG9X0H+tr6M16q96lb6QP66P6hL6xvom+mb65vre+j36gfqh+uH68fgLnrc7Uz/2D u7pOv15frN+l363foz+iP6Y/rj+jP6s/p7+iv6q/of9FX2oQGEQGhQE2GA0VDBUNlQyVDVUNNQy1 DLiBNFCprSB/2AlSllIx7C87izX8aDhrOM86LIarhmuGn1m7xHDrv5h4vxoeGR4bnnAm3itDqeG1 4a3hHWfklcM+wniYABNiopSXp8AADMJg1hJI2Xk6TM/m/1OOXgWsIpu5T5l6NbFaWG2sDvYJhrOZ d4zCzGVpd6wu1iDl7blS5p4X86XsvRDWqCwXjsVSHl+TlMfXImXytcc+xTphXbCuKY+vF9Yb68O5 fKzJNwwbgX3G+XyjsTHYWKwQm4x9gU3BpmOzsNnYHGwu9iX2FbYA+xpbyKYbsaVYEbYCW8nmBLG1 2DpsPVaMbcA2Ypuwzdh32DasBNuB7cR2YXuxfdgB7CB2CDuGHccupVJX+kwDZwuW/y+mIJ5JcrZg bqY905WZl+nPDGdGM/PZbEBq8/GgzMF/a3vL78mfVOon82zmud8TQj9nXv9LSsiYbuQb5UaFUWVU GzVGlNv6Evzve1+Mo41fG4uMy4wrjCuN3xp3G/cZ9xsPG48YLxqvG28Z7xsfGp8ZXxpLja9NaSaZ SWsymiqYqppqmCzcuZzfFDclTS1NvUx9TUNMY0xjTeNME01fmKaYppqmmaabZpjmmBaYVphWmtaZ ik0bTBtNO0wPTL+YXphKTa9N77M+yuJnCbJEWeIsSZY0S/FP70n+6y3Jjyo8rlju/+D+47/efszu Pk7+Q3uP/3/r8Z/bevwvy/D863JFlZdWeVyltMr7qulcAihSM8rm/7hkUMuarf5dqZx/VwqpLI+a Lc8Gs9HsBtmzs5dkH8g++Oe39OISXIrLcDmuwAEcxJW4CkdwLa7HDTiGZ+JGvDxeGa+Gf4xXx2vg tfE6+Cc4jhM4iZtxC14Xb4A7cReeh3twH+7HA3gQp/EQ3giP4wm8Md4Eb423wXvhvfG++EB8KD4M H45/ho/CR7MGID4en4AX4hPxyfhUfFqZOYfPxr/CF+BL8CJ8Gb6CNajw1fga/Fu8GN/AOkasX4Rv xbfhJX+wgfbh+/HD+BH8OH4CP4Wfxi/gP+GX8Mv4Vda+wG/gN/Fb+B38Hv4Af4g/wp/gT/Fn+HP8 Jf4Gf8cm9Ik0ohyblScEhJAQEeKybDoBE0pCRagJDaElUMJAZBJGNuVNVCAqEpWJKv+ZoP7P9DRB EmbCRuQQ9YkGbDaZcBBOwk14CC8RIIIETTQkwkSEKCBiRIK1W4mWRGvWWiXaE58SnYk+xEDWLiWG EsOJz4gxxDjWICUKWWO0zBclprGOKDGTtUKJxaz1yTqfxHJiBbGO2FTmaRI7iJ1lTiaxj9jP+pfE kTLTknUry7xK1qckLhFXiKvENeImaz4Sj4lnrO1IvGQ9R+IN6zayRiOZTmaQPFLIeoqknFSQAAmR MKkkNaSeNJCZrGVIViVrkDVZb7DMGWR9QbIumUs6Wb+vzOojG5U5e2ScTJJNWCePbEG2JFuV+Xdk O7I92bHMtiO7k73I3mQf1qYj+5MDyIHkIHIIOZwcRY4mx7DWG+u8kYXkJPILcirrspEzyTmsr1bm ppFLyWXkcnIFuZI1z8g15LdkMbmB3ERuIbey1hi5k9zFemKsFUYeIA+Sh1gX7C8WGGt+sdYXeZO1 vP5id7FmF/mIfEw+Zy0u8h35nkpnHS2KT4kpOQVSEAVTKkpD6SgDhVFG1mmiKlKVqSpUVaomlU3V onCKpCjKQuVQ9ahcyk65qDwqQNFUiGpINWKNDypOJajmVDuqI9WD6k31pQZSg1lrgfqMdRNYH4Ea T02gJlKTqMnUFGoqNb0s1U+to76l1lMb2QQ9tY0qobZTu6jd1H7qEHWMOk6dok6zGWTqAnWVuku9 MfPMQrPMjJhRM2auZraZ65rrmx3mAnNjczNzB3NHc2dzb3N/8xDzKPPn5knmueaF5iXmpebV5nXm LeZj5h/MF8wXzc/NHyzpFqFFZoEtiCXTUtHyscVsqWfJtfgstCVmSVjaWtpbPrX0sAywDLJMscyy zLXMtxRZlllWWTZZtli2WUosOyw7Lfss31uOWc5YblveWt6z7osVtlawVrRWsVqtfmvQ2tCab21s bWrtaO1k7WntYx1sHWodZh1pHWOdap1pnWf90rqSzeZYS6xHrWetF60PrA+tz6xvbTwbZrPacmz1 bG6bzxawhWwFtqa2Zrb2ts62frZBtiG2EbbPbYW2qbYvbV/Z1tiKbZts223f247ZLtgu267Zbtve 2j7kZOQIcqAcZY46R5+TyfUqVsqpklONzR/l1MrBc6w5DXJycxw5eTmeHH8OnRPKaVR3cN1RdcfW nVB32T+0R7psi/S/cof0P7M/Wl4Pqqf/t2+B7lS/c/2l9YvqL6+/sv6B+gf/sW3NuZNz5+duzN2S uzW3JPdg7g+5J3N/zD2fezX3Ye7L3NLcN/Z0ezm7xA7Y1XaNPdOeZa9gt9u9dp+dtofsEXvMnmDT BPY29rb2bvb+9kH2Yfax9in2afZZ9tn2Rfbl9nX2jfYt9t32A/Yz9nP2G/ab9nv2h/ZH9g8OkQNy VHVUd9RwWBxOR0NHgaOpo4Oji6Oro6ejn6O/Y5Tjc8c0x3THbMdXjgWOpY7Nju8cux0HHKccZx2P nBlOiVPhVDoRp85pcpJOq7O+M9cZdeY7Ozg7Occ4xzoLnZOcs5zznUXOvc4TznPOO877zsfOZ64M l8gldqlcGpfBVc1V11Xf1cDlcuW5Aq6Yq6mrmau9a7BrqGuka5Rrtmuu6xvXOtcW11ZXieu864Lr ouuK66brjuup653rfZ4mr05evby2ee3y+uYNzRuRNyZvUt60vBl5c/Lm5y3KW5y3Km9H3v68H/Lu uQE35Fa5q7mru2u4a7lrux3uRu6ku5d7uHu0e5J7snuWe677K/c69wb3Lvc+9xH3CfdF9y33bfc9 9333b+5H7tee8p7aHspj9dg9bo/P4/dEPFFPE08bTzvPp55unv6eoZ6pnkWeYs8mzyXPHc9dzxPP S88770deoVfmlXsBL+hVezVenVfvreTN9uZ463md3qbeZt523u7ent5e3j7ecd5vvMu9K7zfend6 T3rPec97r3sfep963/hkPoUP8Cl9Wp/Ol+kr76vgq+LDffV9bl/AF/MlfAPZ7Idvkm+mb6Fvse8b 3zLfSt9q3xrfet9G31bfLt9+3wHfQd8x33Hfed8l323fPd9D3zNfqe+dX+wH/Tp/Jb/Zb/G7/R5/ 2B/xx/0t/C39rf3d/D39vf39/YP8g/1D/RP90/0z/bP9i/wr/av9a/wX/df99/z3/b/4n/tfBSQB aUAWAAPKQFageqBGoHYgJ9Ag4Ai4AsEAHWgYKAg0D3QN9Aj0CvQN9AuMDowPTAxMCkwNLAh8HVgY KA5sDmwN7AkcCBwOHA2cCJwMXAhcDlwP3A3cC/waeBp4EXgVeB8sF+QFhUFpUBs0BasEaweJIBW0 BBsEHcFAkA6Ggolgt2DvYP/ggODg4IjglODM4Kzg/GBRcE2wJLg9uC94IHgpeCP4LPgqWBp8T/No MS2lFTREV6fNdF3aTrtoD+2l/XQBHaOb0C3pVnRrug3dhe5Kd6P70APoQfQw1tGlR9Nj6M/pcfQE upCeyJq09DR6Jj2Lnk3PoefRX9EL6K/pJfRyegW9kl5FF9Mb6I30JnozvYUuoXfSu+g99D56P32I /p4+ypqSbJqPPkOfpy/QV+if6RusQ0jfpe/R9+mH9C/0r/Rv9CP6Mf2Efk6/okvpt/Q7+j39IZQW Khf6KJQREoZkIXkICEEhOISE0JA+ZAhhIRObDwtVDFULVQ/VCtX5m81CDbhOIbZRyBPyhfyhaKgg FA81DiVDTUJN/3f3ujfUNoz+vdTP30sJhaPhJuFm4Zbh9uEO4Y7hPuER4ZHhwvDU8MLw4vA34aJw cXhreFt4V3hf+ED4UPhw+F74fvhh+Nfwq3Bp+E34fSQ9IovII4qINpIdqRUxR/Ii3kg4Eo80iTSN tI50ivSI9IwMiQyLjInMiMyPLI58F4Wiyqg+aojWiBJRMmqOOqPhaPPogug30RXRVdGd0V3RvdF9 0SPRS9Fb0bf5afkZ+ab88vmV8+vkf5LfIL9F/oT8Oflr83fkH88/mX8q/3b+/fxf8p/nv8p/nf++ QFggKsgsqFXgLwgUxAq6FgwvGFUwpWB2waqC1QUlBQcKLhX8XPAmBsaqxBwxd8wT88daxFrG2sXG x+bHFsaWxFbFNsf2x07G7sR+jf0WK429jQNxLF4pXiuOx8m4Je6Ph+JN423iveL94nPiRfFv44fi N+L3428S6QlBAkroEniiIBFLtE90THRJdE/0SvRNjE9MTMxOLEwsSSxNrEvsTBxPnEzcTpQm3v2J fA6b6vkTGR0uRfTPZ4/+RO4ojf1KTyv7qsJ8l2vTuWv71HOkV9nzeuy/fd1bdq1u9PTs1Jt57Niz ZXWjv2XXln/71erGQMvezOvunm07VTc6BvTsnPpfhGnOtIw0JC2jY+t2rZjv3h3btO3Ws1uXrml8 Z14gmtaqNfu7Hdoz16V16NCya8e0Vp2Y90tr1Zl5v7QO/+O1dbhrzdy1Zu7aOty1dbhrzWka7jNi 3GMF7rEa91iOeddaaTjzGzlcU3YF5rNXZ15hX2efVWCes6/r04zMe1RIS//QIy2dv4T5KeY+U3pa u7R0wVzm54v/ABVYUVwNCmVuZHN0cmVhbQ0KZW5kb2JqDQoxMDcgMCBvYmoNClsgMjg1IDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCA2ODYgNzA5IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNjg2IDAgNjg0 IDY4NiAwIDAgMCAwIDAgMCAwIDU4MiAwIDU1MiAwIDU4OCAwIDAgMCAyODYgMCA1NzAgMCA5MTEg MCAwIDAgMCAzOTIgMCAzODBdIA0KZW5kb2JqDQoxMDggMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURl Y29kZS9MZW5ndGggMTQ0Mzk4L0xlbmd0aDEgNDI2MTMyPj4NCnN0cmVhbQ0KeJzsnAeYlNXZ9+/p s7uwlIhd4trAisqgIAiCLCDg9jpt28zO7uy0ndmdsjNbMGJDQRQRey+xYImJXTEYQWPvNbHEaBIl aIhRo/L+Fpbr4v2+D4Pv9+UiyXf/vf7c59ynPM95zjl3uUYQg4iM4Q+zlM2aWVm8z9L9h4u1/060 v5s7u3iOHNJQKeY9jqA+dm5ZaWXBI7tPob5QDAdE5lZWz0odVXycWKY8JIbic0orJxy7oOPs6SKG 1+nf2BJuik2s8kwXQ/plkeialmTX/nd+tXiMGI3jRSwXtMYC4YsPbr9eDB+vEBl1aaApEROb7COm ujrGDwuEMq3Diz5/QIy2h0SWTG7zN/lsux16N/O7aT+uDcWwFU3F1BkvB7WFu9LvpK76TsQ4WQzJ S0PRlqZ3Ml8y/oJNIo9cH25Kx/zdo130v4/++4f9XU337lV7N+udR7010hT2x7Krh4mpfJWI9cpY NNG1+Thp430mD/aPxf2xBwOXzBfD10eL2L5M8vwRw+wB2n2Dz0/yfMOor6+jftbg82Tw2xp+39ow 9q1Qw4hpf5URdhnEM5de3TcoX3+m+s0v5duf5J2Zn6BvnhhlKxhny/9uilnyNtBelHfmlpm2g+ub QU1DuZzP1xqEUUbKBDmXrxoadekWjdl2r/EhsYjdLNbDmXLiVgm8JicDCmxDc70rxs2Hrft2M8Xd B+vz6/ffX/jvs7Ns+ZvzzWL72Ojb3yhXbZm00XrM4JcQOyt5ZtvbGPl6xvfkBdOZkpBdBEuvTLDc Jo/sbH/blf+47+CcW2SGuYfKO4L5ZmncIoPSbP4DvEeat283zpct+2JeJjduef78rXJ7mA7cqjPl y8SdXIZCsUOYt9DQuIvf4VCY+gH9K3aiz+FDctzg/P+gb92QbIM10Pvf2w39Q+3Lh+TC/30Owz5D bbft7DoUCoXiPwH2nepj8v7jXgrFzsEuhk64buf7y8admDO63dzhrWXjfkPyYHQfIa3/fYwpMdR+ 4tBYo/wvoO2jIdmxs++rUCgUCoVCoVAoFAqFQqFQKBQKhUKhUCgUCoVCoVAoFAqFQqFQKBQKhUKh UCgUCoVCoVAoFAqFQqFQKBQKhUKhUCgUCoVCoVAoFAqFQqFQKBQKhUKhUCgUCoVC8e8Mu8gSGIar ttNld+U7KRQKheLfF3YxvvXPf4Ys+2c/4z8ZfL+p2+Q27qh9e/l9ff5/BGtv3dXvoFAoFAqF4t8D 9q383C7mV3bhO3w+yB/Sf2f77MzctL82JF/Zxh3NtaPnb9f22s6uQ6HYEYbu5epd/A7/KvfytW3c 0Vw7ev52bbvMvikUCoXiPx/GeXCdJExh+XpXvYNl6uaHLIulbGf725r/cV/LQtm4RTZufswyTzZ9 X1/zIpm0RS6UOvNauETqtm83Th1q798qbbJVbg+TdavO+Iks2rlVKBQKhUKh+J/i//Qb7D/qv7N9 fujcCoVC8X8LbM6EbXIbd9S+vfy+Pjt6zve172jOH/LuOzu3QqH414TaI4VC8UPBfeveJrdxR+3b y+/rs6PnfF/7jub8Ie++s3MrFIr/d1AbolAofii4b9Ftcht31L69/L4+O3rO97XvaM4f8u47O7dC ofifQ22GYleBPZuyk/0W/rPfRaFQ/HCYRf6pf3/fPvh/IioUCoVCoVAoFAqFYqcw9PfU9d+PEP33 IxQKxb8O7GLx7+p3UCgUCoVCoVAoFAqFQqFQKBQKhUKhUCgUCoVCoVAoFAqFQqFQKBQKhUKhUCgU CoVCoVAoFAqFQqFQKBQKhUKhUCgUCoVCoVAoFAqFQqFQKBQKhUKhUCgUCoVCoVAoFAqF4j8FdpHu Qe7q9/h3BN8tuqvfQaFQKBQKhUKhUCgUCoVCoVAoFAqFQqFQKBQKhUKhUCgUCoVCoVAoFLsexom7 +g0UCoVCodhpmKAF7kvJIBJ8CJkvEuqSQmpX0zJKvtvW+VfynWFrybiocLBkXCGy4ONCA+Wyn4hU /qnQYBQJHAeDhQbmbr8d3l9oMG8dFrQXGnha8DB4bKHBOqQtLjTYhoqVhQb7ULGp0JA3VGSy/KFi otBQMFTMFRqGDRUXFxqGDxWXFhoKh4oX80edyNHysZSudsyTso8cx0r5qY5SKf9NabVUPOlYIBW/ c+wrleWO2VJ9xX4fSo3VMVlq2hx7SN1JjvlS5xw7W+pudpwqbp9jorgjM9eJ96nScmnsnrRaGlc4 RkpTm2O0NC11TJKmzysqxF/qmCv+9x17SmtX0YHSutxxmAT2KK2UtsWOmdJhdlRIxwOOAySccoyS yN5jd5foAY7dpTPiOFjih08bL4nDilql64Cxx0nyqaJeSS93FEtmWtFiyUx3HCKZeY69JHOK40DJ lDnKJVPjOEYyHsehkvEWnSEZf9GZkjnPMUIySx0nSmZZ0dnSc5KjSHoWOWZIdo3jaMk9UnS+9OXN XSN9Mx2zpD/uOFz6Hy66RAYsjnGy6FPHeDltz0mL5LTM8Rk5vdYxRc4YXVEpZ7gdVXL2SMcYOXul 4yA558uiO2WJwVEgS6Y49pNzX3LMkfPsjuNk2S+mHSnnTy56UM7/tugRWXmGo1JWfuA4SS6uKTpP Lt7s2EdWTR0bkVVeR42s+nPRt7Lqm6Lv5JLxB4hccc8Bw2XzyP0PMc7acPyvtxzO3k2O+sFXSTOn gyMwukocnDCHxSC8rTiOgEfBNhiEZ8EL4M/hQ/AxuA6+JTLpx3A69BhkUgsyAm+EN8NfwTfhb+Am keM4pMftBufD5XAlvAQ+J3J8k0GO74DdlM+DPOP49+HHkLHHfysymZefPAFyEyafBN2wCV4DuRKT vxaZsgfcG0bh9fA+kRPodwLvdUICLoaPQ77ECa8a5IQ/Iv8iMpXTPZVxU/eFfLWpYZiCZxpkKu8z lbmm/gKuhc/AjZBx00bAQyD6aS+KnDgKjoXHwBLog5fCNfBp+LLIdL7D9BkGmd6IbIV85+lc9Onn QO7+dL7ZjFoYh3yPGbzHjNXwLvgkfA2+LXLSFMhNPOlCkZmYhZnMO3MeLIXsxcx74KPw93AD5H1n YRJmsdZZvNcsxs16Ar4K3xE5mTNw8uHwZEj/k1njbOzGbOzBbL7rbL7NbL7N7ErogknYA9nL2T+D j0DWV8yYYgxH8cGQuYrpU3wFZC+K6VP8IeS7zxlhkDkzkX7IHs5ZbZC5PGsuZ2ou7zeX957Lvs/b HfJN582GfNN5nMNT7oQfQfZ8PnZw/qGQs7mAQ7JgKuyDv4RPwRcH7anIQtawcH9In4WcgYUvwPdE TuWbnMo3LsFml9gKpGQ35FiDlBShOxDJ/paMz5eSSWYpmUp9hlVK5iIXoD/VKCXlyGrGuE1S0oy+ DXaiS9CWQfYhT0MuRn8WY5cjV9D/MpuUXE8bd6XkVup8wxLOWMn9zLOGZz1B21P0fYb6y/R9xy4l rKPkT/BT5vkr7X+3S6k9X0rHGKV0L4OU7gvZw9KjTFI6sUBKuSels9DNob5gjJS2UG6HIfQRdNyJ 0m7GL7JI6VnDpHQl8gqzlN6K/nbmvBv5c+T9yAeZbz19XmP8m4z9rU1KN9D/r9S/pJ29KP3GKmVm k5TlFUjZ7nlSVmSWsnE2KTsaZ3asQcomQc5tGXtUdhL9ii1StpByCbLaKGX1tHNfyxqQfMsyPzps UFmIcoxyF/P1Uh+g/hPGY5vKuDdl5/GsVbRdyTy3UL+N9jt4l3sp38+4h6lzB8t+SRnbVfYk9afp +xJzvI7ubeR7din7lHm+oo57LhezlFtNUl4AR1IfDXcrkHLORfmBcJxBynG65UcgsUvl3PnyiUYp P94i5TMKpbwUfQWsRl+LdCJZWzlrK29G+vKlnHNSnrBKeRYdZ7Z8AJ7Gc8/mmUuZZyWSu1N+NfIG +tyMxNaV32mX8geQD1H/Jf3X0xc7Wv4C8nXkWzYp/5B3+QNjPkFu5FnfGqRC7FKRj8QGVIyyScV+ SO50xUGUsfkVR5ukYhJljEHFXOqnmKUCe1JRhXSib6Gd81PB+ang/FRwxitSkD2p6Ed/Groz4bmU l9P/Utquonwd438K76B+T75UrEG31iIV3M+Kpyk/x5iXqb81Qio+QbcxTyr+jvzOIpUWk1TmwxFG qfwRAdGYYVJ5IOVxVqmcYJbKSegmF0glhqeyAn0tY7zoGg1SiR2s5AxVtiNDeVKZon8v+tPQnQmX or+QOr6ochV1vnXlVUjuZSX3svIW2m7n2XfzrAcoP4xuDfOvRz6FfBG+gf4d+O6eUskdqCJGq7IX SNXeBqnazyxVB6E7JE+qOB9VE2mbjH6qRapmGaVqDu0L0WFDqjgnVV7aOBtV2L+qVsrt9IshE/TL 0r8fcu6rzsqXqovQX06/q6hfb5Mq7mvVXfDe4VL1BP2foZ2zUPUuug8pcxaqPqHvZ9S/QD/4rt9Y pNoMh5mlejejVOP/qw8zSPVR8Bjq3Ndq3rd6qkmqT0LORp6CXAhLaccXVNcgnYzne1djX6rxadXZ PKk+g3mXUl/OmIvh5fA66jfZpBq7Uo2tq8Y/VePrq9cyHt9W/Wvan0W+QF/sTPWbzPE+8/8BHeei Gr9U/Rn8gvZvjVKDz6uxmaRmuEVqiC1qdqe8DxI7XzPeIDXEMjUT6DfRKjVTkTPgyejnwFNow4bX nMqYSur4tBrOTU2jWWpYQ00bcxJH1HTS1sW4NGV8WQ13tOZ0+pyDbhnlFbRfAq9gnmup30DbrZTv gr9Aj1+qwe/VPEZ/YqKa9XlS8xLytXyp+YBnYM9rPqXfRvp/gfwK4vdqNluk1maVWmKM2lFGqR1j kNo9Ke9tktofF0jtEWapnYjueIg9rT0R/SxkMX2JsWoXMrYe2QCJr2p9NqkNM4Y7W4u/q83Qvw/9 IupnIZfACykT4deyntrL7VJ7E31uo078UYvPrcVH1eLHa7kHtdjTWuKeWvxULftWi/2p5T7Uvg0/ oP57yL7VfgqJJWo3DZM6o1nq7BapG0MSsRdkr+q4I3XckbpDDFKHPa07Ek4wSZ0DOQXdiUj2rQ5b VFeKvgpdLZK7Use66rgrdQHaO5DEbXUxSOxUR+xUl6Y9h+yjPzFWHfFf3ZlWqVuGnntft5Jxl1Mn Zq37KWXWWccdqruPZ7FndY8h19EPO1X3NPrn86Xubfr/Dh1rq/sTcgP1v1H+yiz1xFD1nMn6PMrE N/WjkXtapJ6Yph5fWD9umNQTR9SfaJR6zmE9frm+xCb1teg8VqknFqoP2KU+Tp13r+fO1y+izznU L6B+EXVi5vrLILaq/ip4HbqbaLuNPncj8Xn1xBD1vH89d6t+LTrivPr16Ihd65+nHzarHp9Xz/mr /yPjN1D/DBJr139BHdtbv9koTpNBnCSMzmGUOYPOPajvjRwLscFOfKCTPXOyZ84JlLEXzmmUsRXO 2RZx4tudZRDb5sT/OblfTvy6E5vsxK878etOzqKzB8lZdJ5OeQk8H7JeJ3bZeYlJnFfSn7vlvAly Hp3skZM40MlZdD7Acx6jLzGdk3U611PmPDqfg8T4TuJpJ/Gy813KHyCxhU5soRNb4uRcOolfnF9D 7pyLfN1lhwVwd8gZdXFGXfhJVxF1YloX63Xh813ENK5jIefURU7iIq50kQu5WLuLuNdVDBdQLjOK C//pclrEhf90ER+6OKsu/KeL+MvVTR3b4sK2uHJjxHVhvrjYV9e1jLmZttsKxYUNcT1qFxc20vU0 +heZ81Xmewf+jvLH9OMsujYw518g8ZgL++7CRroNZnHb7OIeZRI3a3ITJ7rZP/cBkNjWPd4q7qMp s3fuyXniLkaSR7jnI7GNbmy8m/1z11PmzrmbmI/75mbv3FEkttGdQUeu5CYWc58Ll9GXXMbNGXVf RduNNnHfBR+gL+fSjR10E4e5WY+bXMz9PCROd5PbuN+A5CNu9stNDuD+mDGfWsS9Cck+udkn0k3x WA3iKUAOR440imc3m3jYJ8+PqbM2D/bEQ17gIR724Hs97JOH2NODPfHMgMTFnjn0mw/JKzxlJvGw Tg8200Oc5mmgjm3xEO94WKsnCtkvD3mPJ0OZ8+rhbnpYtwdf4OHMei6gjv30cEc93FEP6/cQ/3g4 ux5ySA/n13MrdeyMB3vqIUfz3MuYh9BhSz18Ew/fxPNrdM/DVyF5tof4wvNunnjwFR7Oreczs3i+ RMc99XxnFK/RIF6+h7eA8igkvty7p0m8fA8v38PLufWOh3wL75HoicW9k5AnIskRvMR7XuI9Lz7R y5n18j28ZUjOrdeFZN+9TfQnV/UG0WFjvfER4v0J+jMpn4PE13svosz6vfgPL7GJ92rI2r3XM+YW xpPDevEh3p9Tf5hn4hO93Fkv8ZT3KcrP2sX7hkW879KXPNHLufZyrr0b4V/gF4z7xi4N1gJp+JFV GvYxS0MR9cMpOyifYJOG2QZpID9rwAc2LDRKA+towL831JikwUW9kT7t9I0yJoUulycN+ISGZehW 0o+9a7icfldD9qzhpnxp+BnleyH3sGEtch38NcSWNrBHDW9TJs5q+B3tH/Nu2JQG7mDD17RtFuGR 0pgPh5ukcXSBNP4YSczdiN1sJHdo5Hw2ToTEso0nQHKjxjm0YzsaqyiTFzV60DdQb4EBqzRy9xrx cY3Yz0bOYiM5XCP5ZeNy9Bcx5lJ0nL9Gzl/jtXZpJGdofBA9eXHj48z9LHpy4MaX6P8678T3bvwI HeerceNwaRKTNHGmmvLgsAJp2ov6WLM0YfObDjNK09FIBzp8dNM05Ezk7Hxpwl40cY+a6ujjQd8M A7R1wAjtxIZNnJkmzkzTecjzmXMlvJw679p0PSRGbCJGbCJGbLqPefjuTdiNpjXM9QRzvEIZ/9X0 Hm0fMvYTxvwZ3edwE3VsXxOxbTP+q5n4sBn/1TzSKs1750kzdqH5UOpHUcduNxPfNhM/NRM/NROT N+OTmxfAMtrr0DvR4beaiW+biW+buQPNYXTkbs3Yg2bsQXPGJs3kPs1n037eMGm+DHkleuKKZvKI Zu58M2e/mbPfTD7dfD9zsw/NjyOfZuwrdmnG3jX/ER0xevNn6L8xSQu5RAsxYMtIg7SQ+7TsDvek jE9qIaZoGWeWFs5QC2eoBV/Ugg1vwca1TEVOhzMZP4f6KTZpqaBch4773OJnXAd11tBCTt3SQ5n8 rYW8qIX8rQUb3rKU8gXIFchV6K4cJS3sScs99HsQSU7dQh7X8jjt+NwW7m7Lm5RZRwt+toXz1PIH i7R8bhefVcTHOfINRxIX+UYbxbc73Jf6WEi87iMP9R2EbjzEv/qIJ3wOytwHH/GSj9jWR7zuK0Ff bhIfe+NzIrkTPvI8XwCS5/mIAX0J+rAvPmIoXxZJfuoj/vMR//mw1z7uug9b5WNdvisYfw3l6yjj b33E7j7iKN/96B6kH7GF73GIbfY9aRHf8/R/mTr5iY/Ywsd6fR/Qj5jCxzn0/ZnxmyC+yvetWfxm g/jtRvETx/t/RJk99LOHfmyXHz/lxwf7DzWJn5zLfwx0FIgfe+yfC0+ljg3wV1nEz13yEzv5yQv9 3CU/NthPnOvvopyCxA9+1ulfxLzsoZ899JPf+s9nPGv1X4y8DJLf+lmr/1bmvBuJXfM/hHyMOvvo J3byP4sOf+x/GWLf/Pgg/2/Rsa9+7pufdfo3Ut+E/Ip2fFCrEVrN0jrMJK2jLNK67xhpnUh9CvUZ NmmdR5m9ay2HtYXSGsiTVu5PazdtxOet+JJWcvLWJZR559aV6LEHrfiPVuxwK3ep9VZ4Ozpyq9b7 kA/CR6zS+gT1p2nDprXyzq2vwjd43m+pE0O04kda8SOt2LZWYr7Wz+n/t3wJmEQCxOsBm1ECxBKB 4Uhi9gBxX2AfiwQ4k4GDTRI4DB02OjARHecxwHkMzEQS5wWKaVuInrwkQOwQcDMvsW0gVCCBLDrW Fjgdic0LnA3JswJL6X+RXQL4mABrC7C2wE/hHYzFRgfWWCWwnrZnka/ZJPAeY/AtAXKqAHlHgFw4 sCFPAnz7wHcGaSPGaxsp0sb5aiMHbtvPKG3Eq23jrNI2wSJt2Li2qQXSNg89PrENn9hWiayF+MQ2 csQ27lAbd6iN2LQtwnxdzEOO2IZvaSPOaTsD/VnwPMrkTm3E5m2rmJv4ru0GnnN7nrSRd7SthevR P8fz3qYf56btA4hvafujXdr+SplcqZ1Yu900UtqJSdvxLe1FRmk/mDJxSjsxdjv+pX0iet69Hfvc TtzWTtzWjh1oJ0ZtPwUSp7SzjvZaJIlXOza6nRi7vc0q7THqqQJp573bz0O/HF4EV1HHPrdfDW+g 762DP6nRl1is/V50xKjtj6AnHmsnTm0n/2t/Cj7DO5O3t3Mf2onH2t+H2Lj2j9B/ypjPmOMr6sRk 7d9aJTj4oxw+PzgMcveDo8wS3AO5l1GC+9kkON4kwaOoHz34w12eBLHXwdnoWVOQOx+sgtjroIt6 w+Bvd5SJR4Pc/2AQdtJO3hDk3gc5Y0HuT/AMyBkLkkMFWXPwfLhi6692wcvsErwBeQvjVtP/Z7SR PwWx5UFisSCxWJBYLIgNCHKXgs8jX6LfmxYJvk+d8xdkD4P4qCDnL7iRNmKcIDFOB/Fnh8UoHXlw BHX2tAMf1UFu33EgZWKGjsMhfqoDP9UxySod3KEO7k/HHPTsZcdCSK7YUYG+BsnaO1h7B3FPR4Nd OtqZN0JbHJli3t486TibOjFEB/FOB/F2B3lix7Xw5uHSgV3reNAiHWt51q/pT87U8Sp8k3l/S9/3 IPasgzvVgW3oIAfu+Iz6XyD5fAd72UHsFiKnD2HDQ9jw0HCbhNjDEPYhxPpC+OAQ6wsdQtsRlNnP EDYidAK66WYJkUOFyKFCFeixDyHOaaieOZqRxEQh9jGEvwqRW4TwWSF8VihN/17Ki+wSOhdJXhG6 IF9C5ISha6jfwrx3wvusEsI3hfC/oSeRT8PnGIPdCxE/hziboY+GS4jzGOauhc1I4tBwvlHChdTJ 58OsJcx5DI+lTjwaxgeFj7FImDsXnmqWMDYuTDwdrkXnNUm4BR35UDiEnr0IdyHxseEccoA6/jWM 7wmfS3m5XcLcszDnLbwaSewQJnYIsy9h8p3wo5AYKPw4cxL7h59FvoLudcaT14bJa8PkfmHOWnhD oUREJMI+RGxmiRALRcZA3j/CXkTYi8h++RIh34scTjtnLEK+FyG+i0ymTl4emWWSyDybRIgdIjVG ibjQ408j7EMEmxeJIOOQPYgQM0R66XcakvsUYR8iy+CFlLF7kVWUiVcj+KcIdypCXhe5hfLtzItv ivyC8oOUH7VKZJ1dIsTZEeLsyBsQ2xHBJ0X+xPOJVyOb4N/Qs08R8vWowSBR9or0RKKcuegw6iOQ PzJJdE90e1MnXooegMReRg81S3QCJPaLTkZP7BfFlkTZu2gxLIWsOVpbIFHsR7QVEsNGyWmjnLso exjFjkSxI9EczxlgrjOQ+OEosXl0JeVLaSOXiBI7RK+zSPQWytiQKPFslHg2SqwUJUaPEqNHidGj v6IPMVL0derct+hv0GE/ovjhKHctuoE69yxKnhT9Cn5jlBhnNIYNiWFDYsSJMWxmbBTcAz1rjpHL xshlYwcisScx7luMGDHGXsfY69jxkFwkNg3JfsdOpjzXIjHsaawccv9iHkj+FCNOjBFDxTjDsW4k 9y22CN1iJDF8jLgpRuwbW8F47EqMuxfDT8dutUoMuxm71ywxctYYfiH2HJL9jWErY69Tx+fFsC8x 1hvj7MawKTHWGPtWpNNklc4Cg3Syts7d4F6UiYE7iYE796dMLNhJjt55pFk6Obud7Gcn6+lkLzuL jdJ5ikk68d2d5Fid1dTJCzvdlMlPOhshdqXTZ5FO7mdnBg5AYo9OYt7OcygTE3Yug6ytk7i+8xLI Ge4kxuokT+m8Da5m/P3o8IGda5H4g05iws5naXsevkj7G9Tfpkx81fkhc3wCiQU7v4R/h8SDcatJ 4uxjnLgkzn2Nc1/j3Nc4exlnL+PYzvhB8DD6sY9x9jHOPsZZdxz7E59ql3gxbcT88RLmq0BXTd2Z J/EAde5snDsb74Sc4XgKXdYm8dMpE2vFubdxfGD8AsidjbOP8asha43fhO42q8Tx+XFyzDjnN87Z ja8xS/wJ2p6kjA+Ms+Y4a44TC8dfoY04OM6a4/jDOPY1TiwWJxaO/wX+zSYJfEUCG5XAzibykaw/ MRpJTJYg3k8QTyYOoj7OKAn8YQJ7m8DeJqZQxx8miPsT+IsE/iKBjUoQ8yeIyxKtVkkQkyXI9xMp +g8w7ifU8X8JzmoCH5G4EP3lSHxggjUmbqDPzYy/nTL5TOLnyHvh/YzD9iawvYlfIdfz3i8iiZkT b0DsU4KcJkFOkyCnSXwKOcMJ9jfxN3TkNF0mSD7Xxf3sYm+72NOuIiT5W9f4QuniHnbNoMwd7MK/ d7GHXafCcnTVSPxgF36wq5l6q0W6wlbpwu529UHW1kWu1rWYZxDHdC0zSdfFkLV1XUlfYs2u1bSx nq77Gf8w8lFIvNzFnnU9x/iXIOvpwv50kZN2/Qa+D3/P+A2MxeZ2fUH9a4iPxwRIt8kk3cOM0s1+ dZObdu+NjrvZPdYm3eMs0o2N7T4uX7pZU/ecYdJdRRvr6K7Pk24fY9tpj46U7kW0L2b82eiWMvYS 6viK7mupE2t238lc91J+mLmeov405Rfha4x5i7k+Qse56sZ2dG+wSje2o/sbyt9ZJWmD2I4k75gc A8kjk/sUSvJIdMSRyWNNksTfJU8aJknsXpJzlKymD7FUEjuRJI5MEkcmfZDkJxliPu5Okm+fxAck exg7YJcktj/JmUri75LEzMlLRkgSm5+8HT13JvkL+vHdk3z3JHFjknOUXM9c3JMk+VfyVeqcpeRb SGx/8gOLJP9IP/KvJHljku+f/AJiL5LYi+R3IinsP2GdpKxWSRUiR8Pd0GEzUuQHKWx/ivuT4oyl xlM+Eumg7zTkSejJC1LYyNR85KlI1p7iDqWc0JsvqSCSnDkVR2YYnzNLCluRYq2p5UjsYQo/l+L+ pLg/Kex9Cr+e+il9b7NICl+XwtelsBWpBxlLfpBaB7EVqWfgC/R7BfkafIM5OXOp9xnHHUp9gsRG pIiXU6w3jZ1IW5B5SM5cehRl1pomlkljG9P7myR9MPojIPuaxjamHbTj49Lkn2nyoDS2Ij0X3ULK 5NVp8uq0Gx05ULoF4uPTrDmNjUzHKbPPaXx8mlgtzT1L4+/S5Atp/EL6XJ53IX0vps43SF9B+Rrk ddRvou025B1mSXPn0g9YJP0Y8lc2SWMf089bJY2PT5PnpfF56d8jyRHSnN/0n+Hn1L+g/SsktiNj NUiGnCjDHmdGGiXD3mbGIg/Okww5X4Z1ZqZaJMN+ZmajPwUSw2Tw4ZlK9OxnpoE++LoMfiCDH8gQ Q2dYYyYFyVkz5EMZ/F7mHNqXItnfzIXoyP0yl6FjbZkbmYu4NHMXZXx65j7aH0b3OPV1Vsng1zPs aeZl+mNHMm/Cd9Dj7zJ/YB0baWM/M+wnn1V6yIF6yPl6bDbpwS72sJ89e5qlZ6xJesZRx6/3HGmR HtbXc7xdembRbyHt+PGeetrc6Buo+ymTh/e0o2ddPZzZni7KHJoe4pSeAav0kIf3nEP5fObhvPZc R51z2oP/7llNnbPa83Pq99N3LXM+iXwBPeezh/yg57fwQ8b+GR13sYe72PMl70n8meVsZrmHWfYp iw/LYm+ynM8s8UoWe5Ml1s6yX1nisOzBwyRLjp6dQpkcPUuOnsXuZ4vNkl1QIFlytyxxSRb7mCVv yIbskmWPsty/bD+S+5flDGbx1VlsffY8i2RXDJcsMXUWe5NlPdk7GHsPcz6AXIMk38muZ372J4ut yWJrssTV2XcpkzNkyRmyn1LeCD/nedjOLPYlJ2bJsaYcdy5XQHmUSXLYlhx3LseacuxTjjXlDkYe ZpQcuWruGDiRMcfRn7XlZlCeBYshdiZHzporHS05Ysoce5YjrsyF6EsekcNX54jBcnzQHHcth0/L sdYca82x1hx5a46cIkcslluB5O7liFFyVzL+eoivyN2O7k7eh3wih9/O4bdz+O3c48h16J9hbnxH 7jX4Nu3EJTny2Rz+I/cnyP3LkWPkNtGPs5r7mja+RS/ntdeYJ73EJ70jRkgv9qaX2LP3MHSTkPjv 3mnDpHeBVXqJNXs5o731FultQvrpG0RHQtYbo4zz7CVn7WXSXva0dxF9iKN7z4JLKBNv9nL/evEl vSvRXWKT3muRN8JbRknvw4z9JXM/ZZfeV5BvM+ZdnvsxZd6/9zP6kSf0Yj/68BF9xFd9dpP0YTv6 iCn72MO+fezSRw7eR+7XdwxyEiSm6iOm6iN27jvZIn3k4n2nwjLq+Ia+KtrqoAfiE/v8SO5cX5i5 E7Szf33ktn1chj7W1HcG8tx86cOG9F1qln7i1H7i8/4TLNKPLe6fS3lhnvTXIV3UG2CLXfrDBumP QebrJ0btJ6/sP436YuQSq/SvQM936cfu9l9O+zXob6R8M2XyyX7y5n58bj9xav999CPP6n8UPf6n H7/bTx7STxzRT+zT/yx1fHA/uVc/sWo/Nrn/A+SH1Mm9+rHJ/RuQn8OvRshAPtzXIgPE4QPs/8B4 SF41cBTE7wxMNMvAFJsMEPMMzKHOmR/g2w3UQNY54IRe+pBXDpBXDuBzBrBZA1G7DHD2B8ijB3qN MsD5Hzid5yxhHuLVAc7CADH5wCqrDFyD7nqTDPyUee5Adxd11jtwH+PWomd9A6xvgDhpgLUNvMz7 EKMOEKMOcN8HPh0li7C9iyxW+S82zju8qipt+3d2ekUHGyongzr2hu6zDyAgdkXdpJBAgCSkkEJJ IAECIYHJySk5J/UkJCc9jgVUEBksYO+MyIw6io6Ivorj2LEwKoqjvj8n/PFe1/f9cfOsfvZa6yn3 wwWrAX1ugLs1nArIqRrIkxvOpA//23AegHM3XELf5ZTR8wb0vAH+0ICONMAdGmYCeFNDWrQa4HYN 3GHDoig1EGMa0IuGasbXIPHBDfjgBnxwQxtj2E8DPKkB3WhANxrIMxpup/1u2rZR3g52MG8X8lHa nmA+d9fwIm3YcAP5Y8Pr4A3a32X+P2n7mP7P6P8qVg0/JMsdGy/37wy5T0JOiJD73Ci5uSf3ZXFy kyO64UDua2i7CQnfdsMJ3MRMdzaSPNFNfHETN91wbncJWEx5GZL8yQ03cK+OlJv7ctezRiNt5FBu 8gs3OZQb+3V3Ibkzdy/jhpAj9N0BNvNtO6PlfpJ+9uR+lTIcyA0Hcv9Pgtyf0YY/dmPLbvIINzzI DR9wY8/unyPUqCQ1wgUaubdGcqTGCcgLxqhxKn3sqfHqaDXeRPnWRDWib42FlImJjdhoIzbVWEMd H9u4Aemm7olUIzl8I9/d2Ml6vXFqhM81bopVI7G+EQ7T+ATtLyDhb417GIftNL7MPPKGRvKGRuJ9 I3l8I/bTSJ7X+Al9XwFiZeP3yJ8MQS/kiYyQh5jiSYiWh5jvIRfy4JM8+CQPccWD/nngrJ7zGINd eYgpHmKKB93zkON62KPnOubCVz3wN092lDzwdE9+nDzlgETSU0c7OYWHH/QQNzzwck9npDxhZB8g L/IM0wen8eA3PPgNDzmfB1vyYEsebMmzK0EeeI1nd6I86JmHPXrI4T3k8B7yDQ98zcP+POzPcwQc pfxrhLzYlZf9eeFrXu7ISy7vHWvIezJt2JjXgZwQIy85vJe9eS+Lknc65Wso4y+8N1K2o+XNAgvi 5C2jjn/wVgJ4gHcta6BvXg997ZTRMW8YCUfzjlDm3rzEQu+9ABvyshcvuYf3cdZ5hn7uz7uHsX+j DrfxvkWZe/Nyb158gxcu4EX3vOicF47j/ZFxvxjywXF8UZHywW98yeA4yidFy4fP8GFbPvyhD5/h w2f4yK18l9CGv/dNYi535ruS8ezPRzzxEU98GcisGPlyY+WDB/jgAb4ltLFP3wqwinns1UeM9PkZ hz358Bk+fIYPn+HD9/vIEX3coQ/O7YOb+rhD3/3MeYDx+HsfPM5HruHbC/7GGLipDz/vw9Z82JqP fMNHzu4j9vu+oP5jtDBh+dmrPypW/mRwiiE/Oa2fe/NjZ/4/UCaX8l8MJgKTOjmGH5/v5w791wH8 if/mSPnxJX64gH8O8+B1fnyjv4h2fL4fPuAnz/DjS/z4Ej/5pJ980r+OOpzA72Y98iw/uutn3/5u wD374a5+uICfPMu/JUp+7NMPd/Vjo378pB879aO3/t3shVzD/yogBvjfoA/99aO//veQHzAOX+nH x/i/Yc3vYuT/JUJQEDVFAnS4Kd5QU3K8muDkTey/if03nYO8CFxK2YmcHKmmGTFquhGk05Y1Rk1l tOP/myqYh79pQm+biG1N+Mqm+mg1EQeasMsm+FwTXK6ph7nsqwndbSKHbLob3MsaxIGm7cgHwU7K j4LHE9T0Emv8nbXfov0Ac/H7TV8hj7DGfwwFIiIUgI8H2EMgAZkUpQD5f4D8P8B9Bk4H+JkAvDVw Pm3sJeCMUWA6bewlwP0F4KkBcqgAsTtAXAuQQwXy6CNmB4gDAWJboAqwt0BtrAJw1YAvWgH2FICj Broo9zMHnx+4C5BrBODmgfuRO+hjL4HHKcNPA/v4PnKlAHYYgHsEyJcC6GQAPhrAFgPEgAD2GMAe A+T/gZ+Rv8YoGBuhIH4mmJKgIHw86IhTEL8SxK8E8ZlBuEiQ3DdIvA7OYCz6GSTPCGKDwTTGzmfs QgCPC2J/wSVI+GkQ2wuSEwbXI93RCsK/g/DSYDtzu6kP03dHrIJbqe9gLbh28DFAPAs+y7jd9L3C +m8D8tsg/Dr4OfiSMjlg8N/MI8cI4ldYVs34leYEMIY6OVPzSRFqHhenZvhVM/yqmTywGZ/SDL9q hoc0Y2/NxO9m7qv5qmg138j4W5ifDuBZzXOj1JxHWxFl7quZvTWzt+ZK+rG1ZuJ2cx31PzKmERmM UTNxr7mP+mCkWlwAHtwCx2m5LlYtNvVM6nOi1IIdtxRQZ92Wsmi1EFNb4PMt2G5LLWPWI4mpLV7K Afqx35ZOyr2MGWAt9Ltlc7xadtD2MPWnktQCn2nBN7Vgoy37mfM+v/MR4z4BxJkWOGgLsablW/qP gKPRIlSrNdJQa2yUWpMj1QrPaeXcWk8D5I6t7Ll1CRIe3QoHa10N8CutxMVW4mIrNtgaBOhrawd1 /EsrsbEVO2wlN24lLrZih61b6CMutnLPrfiYVuyw9RHWfRL5NCC3an2B+kvMg0u3wsta91Env2x9 l/J74CCAn7Vip62fIbHV1v9Q/lVqYx9tUYba4qLUxv23cf9tJ4HxMWo7O0Jt51O+FHk5dfLJthmM uRZ5Q7zaZtOeQ3k+ZfbbtpQ6d9y2EqC/bQ2siUNvg5O1sc+2jmi1wcXahhgHh27Dh7bdE6c2/Gcb uX8b/rONfbU9jXyOsS8xlpy5jbtpOwDYS9sHSO6lDdtsO0QZfW47EitSNrUT+9ujkbGRascu28dQ /x19p8WonTy5/Q8Jar88Tu3T49UOP2tHZ9vTo9Q+h/ICygWUB5LVfl+02h+kjI9oJ3dp55va+aZ2 uGI73L79JSTxrB3e2I7faCePb/+A+XCu9kPM+5bfhCd2KEYdcVJHInJspDpOoXwq7eOj1HEO9QvB xDh1TKftasrkYx03JatjLvX5lHORC5Hwxw44fQd5ekcV9ZWsB8fq2ID0R6ujjbnoTwfxqYN8vOM2 6nfRj/503Avuj1UHPL7jCdqeQT7HOHLxDjhkBzGqg/jUARfp+AftB/iNg4z7EHDOHZxzBz6w4yvq 5OUd3zIPvxHCb4TQmxD7C5HDhOBZod+BE2IUIl6H4CUhfHzojAiFiNkhuEkIbhK6OEohYnbIop1c JgQ3CeEXQ9fTzn2EMlgzO1oh7iIELwmV049ehfD1oRrayGtD2HYInQphhCF0KhRGwilDwwC9CmHj IewnxP5D9yYpxN5DjzL/qQSF9vJ9cObQm8x7lzWwjRAcJPQpbV/Q9h1tP9IGXw79aqgT39gZH6HO JMrHxamT2NV5Jm1wkE74cefF1C+PVSf+sHM65avj1XlrlDqzGbuQenG0OisYv4q2dZSJU51e0EQf 39/JQXZ2Mx/u2Hkn2Ay20A+X6sTuO7H7TvxU51PMx84797LGa7RxX53cVycxqxPu2Il9d35M/xfI r+kjX+48wlg4cRd31UU87uKuurirLuy86wTaicVdpx+nLrhU12XR6pqCxLa7bohS163INPpnUyb2 duVRRxe7ihnDvXTB9bvwa13wpq5aUBejLnxaVzBSXRhjF7yiayNz0ccu7qULntgFT+zaRP8WADfu epB1HwHoZNdzCep6lX64fteb9L8D0MOuD1mD+Nv1HThCmdi7MSJSG2MNbcTvbhwbq42ptE0AxKmN 7GXjxGhtnESZ/WzEZ228EhBLNl7DnBuRM8EtgPxlYxYyh3XymAMv3Ai32LiMMrxpI9xiYx19DUjy y+4aQ93El+4/AjdlX7y6Q5HqJsfsJr50DyWpewvt5DDd8P7uh8EjMep+DklM7n6VMny/+x0kXL8b ++pBn3rg7z1nIYm1PfjbHvSqh330TIxUjytGPXD3Hu6l52bGzKIdTtQzG2RTnx+lnoJo9cBne5aC CkCu2VPFvFraGwCEsqeVsXD4Hu6kp586+tYDh+jZxjj0qwf/1vM87XsYj7/tIRb2vEX7B8zBr/UQ /3rIgXvIgX/7D/VhI07hZMrkkOGxEQoTM8LjohWeEKkwHDXMPsKXUiYHCZM3hq9ATkNeRRu2HiZ/ DHP+4axYhdGt8ELaSpi/jDb0Krya9g2M8VKG/4Thq2FiSBhuF+6mHa4QxubDxMswfDyMvYex9zDx MgxvDf+ZtXbRh/8Ow4vC6Fj4uUSF0bEw9h/GdsIH+Jb3KcORwoeof8NvHqVOXOyNiFUv3LU3KU69 J0WpF5/Wi0/r/X2EerH/3gui1XsZ0mWoF37Xy/30Xk/fTNrTE9SLz+6F1/UuBpWAPfXyfb3w6t77 WA/96H2Y9kfBU5SfjVHvXvqIc73v0Q8H7f0UEON6v+Z34J69cOs+Ylwf8a3v+Fj1nRqnPvK+vrNp v4D2iylPjFLf5Gj1Eaf74Jp95EF92HEfsbqPuNI3H+RR76Ed2+wbogzf6CNe9PF9fVupb2f+I9Th x318W99zjH2RMvGuD53owy77yMH7PmP9rxkPL+qDF/f9FKX+CICf6U8w1J8SrX70ov9UwNn1Ew/6 z6Ad/ejHVvvJY/rhFv1wyn5npPrhk/0zmEMc7Oe7+9GPfvxP/zwkvK8/HxQCfFB/Oevwvf3Et354 cP8O5IPMfSxG/c/Rv5s6sbr/5UT1c6b95Jr9H9D/Kf3fMP4IfehyP/6k/9dYDcRFaCAxUgPEsQHi 2ADfPXBKtAZSaSeGDcAdBjjbAbjvwGTkVQBfMnAzkjxzgO8c4DsH0OWBAgD3HVhEHZ8ysJh1qviN DdQbGUfsGmil3kOdPHpgiN/dRDtnP7AdoBsDO5Fw+oEn6dtN38tgH+3/oO0AEm43AB8aOEg7vG7g M/Alv4OfHDjCHPY1gO8fxPcP4vsHY0BctAbHxGrwlBgNTojXIOc/SO416ASTAfY5iJ8cvIYxNvVM 6viYwXnU2c/gIlAapUFsdBAfMwgXGVwVqcFa6ujrIDnTIHnGIPFn8DB1/MUgsXQInR2KMTSUSDkF HE/9ROTJyNOiNAQ3GyLXGML/DZ3PuEtovww5JVpDV8VqCH89lMY4uOYQPG0IbjBUjqxkXBWAWw/B /YfwzUP46SEfCAB83lAnkpxpiPgzBC8Yuod522jDRw/Bp4d20fcU2E19D4BvDr3O+uTqQ+jMEPng EHsbYm9DcKGhQ8xnb0M/ADge7kfDsQBfMZxM/ThDw+S5w/jCYWLI8BokPG3YT1szgHAPE/OHuyM1 jP0NY3/Dd4K7AXo8/AByV6yG0eFhdHgYHR7eS30fdfLt4QOsBzcb5s6Hv2Ddb6nDVYbxWSOc8whx cSQlXiPjkKmRGuFcRzjTEXLSkYn0w71G0OGRyTEa4a5HronSyEzabZBB2zzacpEltC+N1Qi56Ajx faQe4H9H2llzI0CxRuCZI3fRhr6OPM6c55F88wi88mhKhI4SG44SG44Sn48Sn4+eSfkcw1CifvtL AkO3I+8E28F3MiLmAtqMsTIiLwArQAP4UUbUTBnR8eBK8GfwpoyY48G54AsZsbPAizLiYsEU8IiM +BRQBzxgSEZCMXhdRuJ4MAJ2yki+DvC7yQdlpNCfsgx0yxiTL+N3EWAayAIrwTrwD/Ah+FnG2NOA Ba4Fz8s4YVmEcSL9J90AHpRxcgy4WsYpT8gY95yMU0+VcXq2jPEXAX53fCFYAzrBIPgT4JvGvy/D cXmEkeqQkboaHJUxgd8+4xQZZ9J25n0yzuYszv63jHPngy0yzmuXcf4uGRdcD2ZFGBdsknEh+7zw LBkXsbeL+Y5LPpcx8WHwXIQxkfO+vAr8FbwKXoswLn8D+TZ4D7DHy3+RYc6MMMx05CJAm3Me2AjY rzXJMCz26koCpwPuxlUUYbg+Rn4DfpUxid+fxBlO6ZUxdQN4ErAutMyYxv1MmwG4k2k/RhhXrpcx 42bQIwOaYFy1GzD26i9lXPM44DuvPw/cJeMG1r+RcTNvlXEzZ3pzpYxbTpJx6wky7CjA2rYLLAbN MmYdlpGGDqVxl+lngHvA38C/ZGRwphm3yJh9MWgD+2VkMT9rs4xsvnkOejiH8XO407noQQ57z+Hc cvbJmMd9z/tnhDGP75m/Q8YCvn8BepTLXeaxXh7flsc953F+ec+Ct8AnMvLPBAsAa+Rz3/k/yVjI OS48GSwEh2QU8p2FfH/hcuCTUcQ3FhsySjinEmymlPstexd8JqOcOyrnDMr7AG2L2dNi9HpxC0Cn FnMXSzm7pdVgGDCmgrOv4Lsquc/K7w1j+bcyViSDyTKq344wqjn7lceBm2SsPiHCWD0RiS2t7pJR w/nUsIeaDBlrvYCzqaVv3QOAO173Fxl1UwE6Wc9v1t8mYz1rbeBb/hgEj8lw1wA3QI8buQsP+/dw P94l4MUIw8fZ+tD9ADod4BsCtAf8EUbg0QgjyP6C7Cd4DeB+guw7yBpB9hVET5ufAV/JaKHeyu+2 MqaVM27jfNtSAXbbFgDYRNv3MtovAz/I6OQ7O/EvGztkdL8io4f77/laRngcSJPRi072YzdD3PPQ ARnDJwL0e5jvG2Zfw+jG8G/tn8oYeRmwh9uw+9suAez1NnzZn1j7dnTlDu7mTnT0LnRnE/e6iXGb aL/nIxk72fNO7nRnJsDmdqIrO7mrnasjjJ34tJ2stZPv34lu70Rnd3KHO7eC+wH+ZucewPfvfA2g czvZwy7udhf738XvvIHP+gDf869yGR999ts7WZ8r7ezYm5T2QswepV+W8rHS7aSrlT7b0aT0Vjtf 6d2OoNLvPM6n9K2WRxlVztXH3s466vxm9O2szA3OPmXeE/WuMvfEnaPMA8nZynzvuC81u8z5o2Zv Pf53mv1JfLuytsd8eeyNrcuOz1T21VEHlX1LwhPKfvr4Ms152Rqruc6kY09u5cRce6XmnZdyoeZ/ bHVrQYyVoAXpMUe0YGHSDaNvceXuuGKzco/EPqXcnx2TlNeTcrPy9riOV957yQ8q76foNcrv/d2T yn8i5gYtLIyuG32za+HwpFdUEDcmYfThrsKrxqarcJ/rchVNSTpORdOSF6toTuIBFVXFZqvoucRx Kq4cO6zi2oQbVbw9IaziD5LOPPbU1+bkfcfe+yqJdh979Ouh63JHH/0qzYxPVGl2/Lsqy3C9MfoG WFk49lWVFyY9r/LK+HKVB+NyVL5xzH6V/zXxIy1OTG7W4mmJFcfeCrMTa0YfDFtaFbNeS5/CDf/3 6bBln0c9O/p+WMXtUQ+q4tGk81VZYVVo+YnJz2q5I2mblp+d+JCWz016RsvXxPxRy+vik7TCThjR iozJW0dfHFtRn3Cbqs51/ElVTue/VTUl5aiqbkkeo6qc6HJVHTzx19H3yKpdYxyjj5KtOj4uWatO PGmmVp190q1a9fhJlapxmJeo5q6U1GOvlU2Z+bjWXhU7RmtviFlw7Mmy/75W9v97qGx70kGt/TB5 gmpPTg4fe61sQ8Ltqn3x5Mu1Li7Go3WrTp6ndfcl3KF1u5KnaN1fUv6gde+eXK266WN2q259yteq c8dGjD5tVvem5Rt9Nmz0abMglOe/75tt+DzmTG34OiZRDStOWamGDYnT5Z57yt1yd56yU+5NUWvk fsJZpsZzo3bKMz96rzxfpOTI86XDK+/xKb+Xd1rKifLeE1cj7/3x6+U9Er9Bvtnjjr2N5vshMV/+ yHHL5c+KP6ym6HHNCmRHn6/Aa86VCiYkOBQcT9oWvCJxu4IVCVsUfCTZp+Ah6/vR19SCR2Nrjj2p lpL0tJovTL5n9HG15g0THlDL2uQHRp9ZazmUZKttn12s9scSD6v9qcRytT8b9bLan0+5W+0fRReq 4+SEc9UxLjlVHWdEVarjTNdYdUxNvkMdVyU9pI4FiXQUJLw6+kRb6KIkh0I3x1+t0DvRb6krJq5O XatiS9TVn/iJNmaOiVNPX+zUY6+4rTjtsMKe6NcV7o1/WeH7Ui7+f95z+zaqQX3RKYfUlxT1kfqO iwupb07M4+p7Jtmp/nGnZ6h/5hX7NbAlrl4Db8bVavCSqEc0mJFym4biT39eQwvj4kbfgpP245qE ZxKOCdhgNoCOpncDaH36VuGRwB5wVLgjQDmTVCmTNGk2adhsxsz+RHgf4XwAa2VfDW4Bvz0N8rJw O4C0Mof+eecJlyM8DmC9BQtBhfA2gPQxlxQrrwfwO3n8Rt5Pws2AJ4R/AcPCu4A24VsA6VvRFAD3 KZoD+N6i54RTAVDsYr6r+APhUMBmQLmkBKwEpCqlJ4NMkC38CPCCsHAigDXKg4DfLf/tv0KRai3m d5aQ+i3hvJY8KlwHIJ1fVgNIZSpIyytuB/RVsq/lpGTLSdOXc9bL54I1oE44C8DvrWBMFSlaFWdU xT6qOLcqUrKqg8I9CMcgvAF4XPgCQGqw5rd/xsjYtex/7Q0ROABkLpJUci33t5Y9r/1QWD2YATYA Up51pE7r7gO7wF8A6W6dGzwJ3hSmjT2znw3B3+wasJ8NpJ0NKwBruPl+dyfYBOhv5Ls988EX4Eth yoDz8d4D7gfcpw+d8i0APwgTBlnCdsFrwnLBFYAzCD4CDgHGBdE1sjqMFVwIJgN+v2UteB0wro17 b38McPbtzwLSpPaPhH2CceCMCOwSyW93FAD0KnQRuBm8I2wRcB5d/cIQhR0C0tKwB6BvYc6pl2/r zQNfAc6mLxocB9CzvmeEwQHS6IEtgPMbJB0c5E6H4sHC3x5d/O2hxQMyDWej7DizT3aKvUT2OOsx 2WfbS2VfOvV02ZOtBbKvcH4vu9rqlP0n6++y7zQbZL/kfFOzTOt2zZrl/EWzFk51aFa1XaFZq8yb NGuD2TL69Oash6zxmvWU+bzSzrIKlHaTWaS0WdbTSsu2K5W2yKxXmtd8TWkhc53SXkq9VGmvmHeO vtiZdsherrTDGduUfqrrFKVfb24+9opnmXWt0pfYK5S+1HQrvcZJR53zYaUHHAGld1pvKb3LfF3p D5p5St/rmKH0A+a+0cc/0w9aB5T+s71SGZHWWcqIMZ9QxlnWHcqY5NypjJnO95Rxq3WNMopt2M4K u0YZqxwXKaOVfCfjL9YPyviHa7wy3rVilfGBdeGxd0Tl+rsyo60XlBn7+zeVeWLqRGWe5CxS5mRr qzKvtNcqc4ZJx0zrTmXOs/qVuSjjO2WucLqVucZZAI+KoeOe8W8r8yVnhzJfNkPK/IfziDLfzzSU +Y0jRZmHzVbNHmPu1exJzpBmz7DXafaN1hrN3uH8H2UdZ3mVdbmjVVmTHS3KutZhKut6K05Zmc6t yiqYdIWyPPZCZQ3a9aMvnmbdk3qZsrY4mfGho03Z0ZmXKDve3jD6Cmr2SvNJZa9xzFb2XY4OZW9L vVzZz5j7lf2y7VH2l7ZXc5LNtzXnBrNWcxZbqzXnTdunOd+a/Zqb6Ahp7rhUU3On2f5jD6rOdczS 3By76djTqoNWteZuMQ8o57RUp3LOseYoZ5YdUE668z7lZLpeV85CsricQrtFOdVWjHI81qfKuctK V84es005b5vvKOcLa7tyfnV+oHmnu87VPMt8V/NKrAc1b8CxWPOedHRq3rOu8zTvr+N/1ry37VbN n2e3aX613a75dXaH5j9gVmr+Q1a85j/nukDzX3PWav6B33+v+Z+4rtWCBGuWFiRaf9CCFKtFC8ZY iVpwbqo1+iZs7nnWbuXa5nvK9ZvvK3ePeVC5fzVXKfd18wPlHrQilPsv5wvK/YTsOS/Gukt54621 yrvUrFHeNOs15V1jdylvtusS5RVZjyuv2NGtvGrrCeWtd/qUt9lm2n3mltF3Z/P2TtquvFdS4bqv prqU977jVOX90zVRed+b5co7Ym5V3lFzvfITLFjvReY/lT/R+Z3yJ9k9yr/O9ary06ZOUH6hXaD8 cud+5S+xFiv/j8585f/JDit/m3Wv8h+ylij/b1aX8t+yXlf+fmuf8t+1e7XwD85OLUxzDkClx3+g hYvMTccewg07erTwzqlnaOEO8yEtfME6QQvfMv+lgnjrOxWMcd6kgmnmRyq40S5UwS3O3SqwzYtV UGj3qaB0/JFjj+h2uPjjTvMpFexw7lLBYfMKFfxgD6jgF/NjFR5nXaTCK6xDKrzSekOFM6woFd5g TVPhjY7nVXiTY5EKy8xPVLjCeYMK/2z9RYV/dZkqfMX8VIWvjv+nCl9zdqvw36lnqvCIGVTRLWa+ ikrNF1RU5vxSReWOsIoqzBEVNVrXqajJ+YOKOs0/q+hPzrdVtNn5oop2uywVfevMUXGMo1fFY8zP VXy6y6nic10uFV9t3qbicmu/ig+bX6j4e/s2LRpvfqZFueYhLcqz79CiQrNai2qsh7So0dGvRX77 Li0K2Ju0qM2+W4s6zJ1aNOj8Sosed+Zp0QuuBC16b/bTWnTQ3qKSFOsjlTgmOFSSb36pklJ7q0rK rc0qqbDvU0nN5LEqaXDePvrgcEmPtVAlYeeNKnkmdYpK9jtOVMk71q8q+dZsVMl3rmkq+cGKVslP rldU8h/XGSqV/WeVxjkfVGm89aNKE60XVZpsPaLSE60VKj3NelOl461lKk11Nqk0zzVdpQX2DpWu N8Mq3eQYUOk95lcqfd5+QKUvOUpVus/sUunH5tcq/cYqVVnEhEtVZtgPqmys4xyVpdpFKptgelR2 jblNZbnmX1RWax1WWYMrUWWtrhkqG3AMqWzIdaXKbnecprIXXS+r7G3HFJUnmwMqv9Q8rPJp9kMq z7MfVvkS8xuVu81clW82/63yx1zXqfwZ56DK9zr3qHy/9Z7KP3OuUPkvWRO0+FrzWy3OyjpHi/Od AS2udr2pxW3mH7W4w/xOiwftXVp8IOY7LRk/fr+WTHB+qiVnTT1LS3qsU7TkMbNKS+NSr9DSseYR LZ1kP66lUyYXa+m9rplaetBRraWfWGVaNt3crmXlzpe0rMJ6WMvWWKla1mSlaNmH9lNa9pO1XhVx 9jOqODN1qiouce5VRYVjRBVVNkndevPvqhhyRKpir/NzVbxhP6+KA/YLqvgidZoqfjGPqvJ488fR d6MrzxzzvCqnmz+pMt26TZWznTtUOd/ercpi+0VVrrT3qLLXdZMqv3I4Vfnj5LCWn+a6RcvPsXK0 fObkfi1f7lyq5fdZeVpx05gXtCLHOV8rCl23kho6ztOKjY4NWvHA5O1a8aqL7PFX8z+jr1RXWeZj qrrCZatqur1X1ae70lRtWUfJFB3rVe13xaq62XmHql9yJKv6Zcftqv6X+bOqD5kPaOVl5i9amW/+ qpWFE6q1crtznVY+Yb+ilS+50rXyrawftPIdZ4ZWvg/fXPlV1n+0Kspxh1YlOSO0KtlxJzmoI4Yc 1HGXVs22NmlVrv2qVr1gPaDVcfbrWn224xKtznDUa3WxvU+ry+03tLrKaWi1x1qn1V2OTVq929w9 +rz26n3ZqVp9wLpYq9+zPtbqw9bnWv2ttVw1qdbvVeOy/6GaKebdqllvv6Wa1uxLVXN79kTVbDU3 quZT5yatuczaozVTrAatybXGaM1S06s1dY7NWrPPGaU1n1jvaM1Xzlu19nxnpNaaU6b838e8Z7hy jj3mnemad+wx78LUC/7P691rN9v7tXabK1dr/2y/rbWPOqNVm2jVqnacM0a1Ex13q3bhlDTVrjTr VFvrvGf0qe/abmesasOp01W7zVyr2iftA6rdPfU8EurUCVqXbi3Suj7HvaNPgq/bYxVp3fv2O6o7 wVVAVp16iequtJ5X3a3WJNWluYpUN9dVrLry7K2k245a1QXMp1XX4diium0O2g4741QfZX2t+nj7 f1SfaH2p+mSrR/WnOrtUf5r5jOqvdh5V/fWuRapfMKFT9XkmWXqRq0T11c541Q847lP9iON+1W9z bFP9Dvs91e81d6n+FfN21b/rTFD9JxarfOqsU/1XZvGxF8xPs4a0/gxXqdZfYL2k9U5n4uir5uuv cS3R+mXWP7W+xbVUG6bbB7UhzbVMGwqmnq8Ni/+XvC+BbqraGt7nJk3SeYIWCM1NetNSDKW0zb2X QoXQNmWoJC0dSMpgOjE5gIDi3DCUtinQ1Mo8OvEEnpBW1IKiooI+teL0hs8J/Xj6BPU5Pgdsc/99 7k2h8PR7//rX+tf61/pv7r77DPucvc8+++yzTyi51jZovFmohUZv1QfQ+IAwGRoP81HQeNKKxKfE W6DxtLgcGl8XVdD4Nv8rNL5rCEDjx4ZUaPyEj4bG86wNGn8V3oPGPuur4AWDF7wqa7PyG+reBMc5 8A7lXwdvsvAleAXrn8BbJWSBt5qPAe/1fCx4a6wPgXep9Qx4l/Hx4L0l3wLeFXwceFdaD4D3Nj4B vKusu8B7r/VN8DYLe8DbKnSAd4uAJHvyx4D3AH8cvMeF7eD9i+NT8H4kvAarNYIAq3XWV2B1uOMz WD3a8Q9YXc4nwuoKvhdWL+PfgdU+fgisfoIfCqt7+aTQr73D7HhYE+X4PPS773rHeVgz0roZ1rD8 E7BmrKEL1uRZH4A1NscFWDPV+pjy0/BrNhq6YU0XXw9rTvGYfdvwOKw5J94JaznDUVg7i38D1t5q eALWnhDvhbXv8A2w9l3Hl7D2A/4DWHvWMBPWfscnw7oo4XVYF+v4CtYZxXtgXSo7RfnR+XVzZ0+F dXdan4F1Fxxfw7ofxEZoSjY8CU2FwqPQVOb4Fpoq+WHQNG/2Amiqc3wHTeuEndDULK6GpjOO76Hp z/xwaPq70AzrE0z7YX2mqIH1DscPsL6U3wTr5/OPwvpax79gvc/xI6x/3+qB5hH8CGgWxXXQPFFs gmY3WwDNaww90PzQ7D9C8wmxGZrfNhyDFtXEMGgJE9dDSwxbCC0Cr4eWAsdP0FLM90FLyexT0FLO S9Ayx7oIWubzldBSx8+AlmXCaGhZ5fgZWvbwI6Hlb3wKtPzAG6A1wnA89NP6I8VeaLXwLLRO5I3Q OsXxC7Qu4U3QupRPhdbVIoHW9QISNwtbld/hbz1o3Q2tRwxPQ+sJcQP4EsT/Al8Kz4GPtW4DX6XQ Bb6Nwv3g22x9BHz7hGzwPcy/BL7nhKXge03IAd/74kbwfWR4Bnz/5D+FNrXQAm3D+aehTc+fgbYU azu0TRI3QdsUwwloq3JchLZqEcvmOvpgwxKHBBt2uvJgwz7hKdjwB+tx2PAovwA2HLKuhA0v8/+A Da8KDtjQZ22BjWG8WXlFwMZYPg02LnQysHGZMA02rhD9sHEV74ON28UO2Pie4VnY+CG/BTZ+bz0I m8INz8Emq9gJm2aI98OmjcK3sKmDHwWbHuAzYNPr1tuhXeVUQ3ui4XloH23thvYs633QPl74CdqL +FXKCwnan+H/DO2nhAxoPz2xHNrf4APQ/hb/MLS/K7wA7ecN+LhgOAntXwi7oP0r4R5o/1rcDO3f CHhg/9Gpg/afhM+h/aK4Fdr7hZXgB6Ec/ESYDn6V9Qj4NXw7+GP4a8AfK/jAHycsAP8QwQv+EcKt 4E8xmMFvELeBnxVmgt8olIB/rFAB/my+H/w5ggn8vLhdecOBP0+oBv8UQyX4C6x7wD+VPwj+GUIQ /CU8spwpvAh+B78Q/KXiDvDP4keDv1zYCP4K2qzS2gB+lwFJPPxc8Nfxz4B/sXA3+G8SZoD/ZkMc +G8VGPCvEgrAf7swBfx38teB/27DGvA3CgfAv1rcBf614nzwr+PvBX+zuAX8rdYa8PvE3eB/yDAb /PuFXvA/6owG/0GrH/w/8XuhYxxvgY7r+B+gY6YzBjqq+DHQ4eIzoaOBHwsdy/lx0LGCz4KOVfzb 0PEgnw0dB/lc6DjC50BHl/AAdBzlrdBxnOeh46ThFHS8bNBCxzlhFXT05Y+F+0RrI9w3x3oD3Hfe GQudvDMOOhsmtkBnmzMeOjfwt0PnFv6v0PmAWwOdh6350PmhGID7JzgT4P5VvACb7+MbYfOhibtg 89OG07D5GbELNvc6E2HLNc4hsGWmtTX0ngqfUAlb7udvhS3beBG2PGR9Hbb8wZkEW7rFx2HL0wKW nbLeDFte5p+HLf9l/Stsec99LWz5nHfClgvCRNjyjfUF2GpyF8JWs+EV2HotPx62Vpouhl5+4RaP wta5Qi5s9Rj+BFtvMrwKW28xGGHrypR/wdZ3eC9s/Sh/HGz9nq8NvSkjip8I2+Ktt8G2BOtR2JZo qIJtZsNrsG0hfxK2reDzYduL/LWw7awwHLb9N98G274Qn1TeqLGtXzgD24JCEmxXiU/B9nCxB7ZH iAxsj0r5ELYn8ktgu8k5Qnnzxna7eAy2l4hPw/Y3hcWwY5zQBjvs/CTYcb14AnY0iM/Cjq/F52Dn MPF52JlpnQQ7xxpeh528ez/snMlPhp0Vwoew08XbYOdWQy/sfNQ5EnYedqbAzmNOA+w8zU+Bne8L VbDzE74Adn7LF8LO7wxvwC6dk4VdZqcRdk10mmDXNMNE2DVbjIFdnzk52K01lMFunfgi7J7GF8Hu G4U3Yfdz7o9h9/NOM+x+wZkGu8/wdtiz1foG7Nlr7YU9j4gvwZ6DhjOw5zG2GPY8LXwEe54T/g57 XhdPwZ73DbmwV8cXw96JwiHYO0N8GfaWiHNhr4NPh70LxT/B3o2iDvbuMrwJe3cbDsDFeGM/XDSb jjP8S/nFjDCB382Mv9aZIb+ghKldJi5jdpfw25g91+Y7mf0jxFcBIArKGwEPyIARNGA4DBipAsZd gIEVwr2AewegkwZc5oAGQP8FbgX9+q0JSjv4Lih9VUyGsgpxOJRtFkdA2VH+Qyj7aHwCzFruuB3K D7AGqMwVOag8YP0bVB5y3AuVfxfNUHXY4YXZPwhDwVVt/BzcZQ4f/UrkHFQ/a/0I5jzO30S/xyil 315EwfxXrXNg/jnHZpj/I+/C47uYg+dw/gg9hy/D07djB56+hRvxVG19Es+bIh4hTzoO07PgcliY bLLQA+Ff8dgmfEyPbXjgihaS6fnrFjw58YfooekCnpKsP+KxyHECbnzOugSPRTlT8VgkbMMzj/Vn uPnBWWV4vnG8iGcZcSo9srxM/wnqO3qI+BVPDY43MMrn36WB8RwMbvnHMVQV8jAYdXxIw8OPadi3 CCM+cQlGbbwH4zLHf2NcJq7AkExUYxgkfIphi2BTXh6z5oT1Jow62Gug6Vrri8obbZrfZotw8xZb wRchjMIdUrie7oGf0V3uV7qj9dAt7HPcwpwEtzD+TdxPnGG4izg1uG04tej6hVbwp1prQ++7KRDQ /1fyJdTJqtDJOsPReYoPUee5h/rNN9Bl8t+gJ+Pnob8xfYNexjkUvYwYjW6FX0xdgxVdA5+HroFN Qw/A74NtXztH4Yq1LqRL9Dhsn80/gJYuxqIZi6eptYZTo9yDJsSgvnAhyy9EikWDcaxAW7EuoHax Gqff0YFzy9+svKMIZ3QizqM4BOeMX46KcXxB5Y2g8j5M5d2L3J3JyM6px+402J3Jg93xZbSTpZTs EUq2j5INQwqClSC/sAfrl9H6/bT+AVkuzP2B5h4cyD2KOWeU3AxzBwYSBwcShwYSfxxIPDaQOBxK OCNBTXowswhsEAYZkAoFMBOqwA010ACL4Qa4CZbDSthnVBnzzbvM+8wPm/ebHzU/Zj5ifsr8gvk1 8xvmN83vmv9mfs/8gfkT87lxkLs+d0/uC7kv5b4iMVKqlCkJUp40RbJL06USaaY0S6qQJORohCky JxdyqruCEyNz2jOI05Myp17k9PZVnHaFOBHJJHMaj5wKB3OSzv3Opw7nd+ivSYM/qiOhz12DP2/f 9cUHF5Iv+s//8GU+Ts1Poc+3gz/0nV+/ezn+h7rfuwy/W3OeuYtZx04H2UJV183pk0vtskYB5095 Fxm6RJxJADPCzBCMQ6gKQR7Ir/TCeQaYiFATgiIE1AzOPUAxwuIQXIdwQwjoeG4KQSnC8hBUIqwM wWyEfSFAeYyMAnAesUoB5i7E+QpklaGouxRguxHjUjRjW/Yo4ocVYI8j3q8A+wziRxVgn0X8mALs i4iPKMCeQvwkwlMAGTge8wsKZOBWYX5NgYw7EfcivIHpuxG/qUBGCeK3Ed7FNOrO/DcFMsoRv6dA Bo7X/IECGThe8ycKZMxFfE6BjPmK2inQ8eauV4DFbS0Xx5qL40x5HPELCoydhfglBVJwXea+ooBR DSARBZh1iBkF0A5AMiHgvKvQg0iZCqhw3iVBARUtG4+Ac67KQjxFAVUO4kIEtB2VFfF0BVQTEJco oMK5kWYqoMJtV5qlgIq2q1BAZQfybRwC+s1RSYhHygCjUhGnyQCjLIhHIWRgOhPxOIRsgGu2Is6X Aa55CLFdBrjmj4inIkzD9GHEpQhoI6NbEc+VAUZvRtwgA4zeg3ghwiJM70O8DAHnOfNFxHfLAJln EDfJAJl/Q9yM0ILp92x1bXOq3YUFU/In5OXmjLOkp5lG6kcMTxqamBAbEx3la21pXt+0bu2a1d7G e++5+64777h91W23rlyx/JZlS2++6cYblixetHBBQ31dbY3n+vnz5rpmV1VWlJeVOh0zryuZMX3a 1OIMNi4ifAzpiowo5AobIjLHQFdEJCYjM8eQgKYwoJULA06LMWArc5lKZrnsRXqTya3nTAFbQJ1m p1BT76sbqHBjF9gK22IXJeVcSVm1y2j3eeRKLKm4IqfUj79UF0oFmMIKV6DYgrlB+aly/lJ22lXV 0weqOWMASn2++i5QpWG5Td9F5ERYYZsbR+LmArUWzsS5GpC2SwdRpgpPIaaiBlLEOBV7NPbEQS1C 3Wyuh4RS1a6A0bPAPQ2pgUkLyHd5D/Dc7UraEzDWGY0BTRpXW+rymQLEw+lD+Vku1Bip0ftMnMno dvdIJ0dSas6EfTFQ0MWRlrIuG2kpr3Ydi8NV1VLh6mYIU+gpcHeZsc51DH2oTS5laCktpBkjzUAJ wZnpZnQyvf6YDcAr16rlAjlfh6OQy3QDZQTqehilLE5hlC4zsuEeXtejVmpsA9RqLNMpZV65TL5Q D6h7W0SYTWcLt0Ux0QxqmxZ1Y8lxdAnhBB6PItFE34WtZsnFPcTbFW7TKxRepLApErZUXmZdWe16 PAqwmfxERgX0yhxj72IcFu6yPZa5UO32LuKweGSbVKXZjWiNAVu5i1J69GiRRZljqEUYXVyDnnN3 DRniW2bHHriuGk26x+JTDIOaAxc3AY1JlTa9jiv2UAo0brynY1FdldETqPVYMGmMK/YV07mrodSQ 1MWo0rqIOo1Mgkk4dk1UIIJrKAhEcgWXaibDZKVGQ2u0XEGAJCmas3N247DFvjquFu3EVupaqF/g rsG+AzauJqDmCvRdaihAqx5G0K7tRp+dqzHW49BRLBxTOYfJ6uoum9NSUe3yRdVz9RwO3Gbz1aB4 emOdW+9z18mKQCVgF5A5JuzyWg8tdYauoLS6BfjoMUKth6tVCqitX1228OqCBUg1uIybQdnJmMjY N4Oz1yMFhZr6gAqNwGSsdyvzCKXyKvxdIjKIyIi6lzv3xU0cyJFQDjN4+wILr8wuupQtpuBBrY1V 5jSgTqc24TIFlugDN7otl0hqAt5ao88Yx03g6ENuPJWCJxCGCW9dDV3qGmojWDADC4yuWrQy7LDY 4xuwDGymTr/EKXCz5You0UGRCmTNpNHhBLylRo/b6PFgKZq0SW8MhCE2LqihRkCdWKkynlL0pIhq fOXYFtzIVB/Qoj9dUNPAmdD3YZnbrWifyqhG6aDcFQC9z8f5AgRFTCtGYuw+PaBJn04R3sssXE0D TiLlZ6xpkNsWo7iydmhvejtnciMJkybrEhWHXqOWPup8aI2BebgqwtLifQk+Y57PdRzmoftSp9dV edDJGuOMxUZ5qmtwdVIlTKc5N3akEIanUUJsL9/pgZssXfO0aZdL5HupRSHWyb2iZLNcgdIBEq18 Y+IWS4BJHo+VdPBkFvpqtTxRVHlhadNRvTa0Kj1tbQwwFa7Q9Mjtp9Om+oEJU5phiezi6CZjGpA3 UpFXYaqR7yj5Dk8L6NJwogNqlEGp1tLhXDYCTKPQShuVLK4yAEwjK2OoRh6IJ5RRpzXIY1I2FyP1 arjt1nAU9D3S86W4u3k4Cm43Za+TGdEWctc+pWOqLg2t/C1VhDgpdyS9p8tDGFwcId9aWWZapwwp 7ErFh7R3THoeFM2ZQhe1GTrK5tCqDK27Bn1gkdtSr7TShDytET0feti6MnnvnoOrgTNp0Y/h8HFV GQPlFvTt8tiaFa3OULwDtUpSzEEx2lAoAUkQAG4aoQ/ApcVNCzCYvZTiuhkgOm48ReHc+C6GaNEr U2cUh3FVHeer89Qr2x5qGcbr82mgoZEnOlye29uoa6pwhenVbtlk0gOrLCErVp63WS7Vr6JrUjug SR2t812qDJO7W6XYRnroeZtF95utfLr/PWa60GwGwuU66o3Sdf8zK5UyQTOU6ZrBKD3PUPwElqbX +XzUtXXNi6ErNCo9HssTULQ8FDIvJCXq5m4UpZSy1sklchaXm5aKo0xbWiRWxCHtScW0I7EyDqU5 qVeo8D6GJ/HbLAPUihJQ7og0xc5D1aHWinWusrgxVUzBgyTFFEIrKTK0SqOu8vqh7pU5Db+ykrvU Gd2QuUs90lwXicKIUq0PQ47pxjhU1wRZn+koKuZ9E7qINj1EEEYJmLQJPl/kgP+n7v8YhnMgh2rg 9l1dELgH5wPnOvq3a3RXl0bLxaFZjr6EaWFoOUQUBiILaZxB96ZwagBjcX7vORXyOXI4MUgxchFd ioNLh1HdawdcwlLLQNsBvS2Ql3So7VWlFa57sJRq6hTdSQIEcVi6iYKeqk7mRm18qSUUVN5DZ3eN 3N0ai9G4GOOhQoJREW6Ui+lWZaTUunTZyfkw4FlcUyP7IflQMAyPE7NoJIrxNBdnJPmQrxwtuFDU jnuAOs2Vr89zY5TeI50f6VZcFYObPEKFz2iMi8cqnzEBw/ZAk6zeUB0nl+EurkkPUdERNOHilOmM 9i5wWDDgKimjkVnpHDzy0EjF6PMVGbts6vSauhqaLzLhnugLVXFFRe5BLTDUQydf50EKuxwGYXeB BGrwdgpLArY2GnZxRYrUiZdrcFvYMLgKsNlAKlFJUedqX1QRGFmCIQUNmSl4FlGNcEXyQ0+n3r6I ikXrFnnwyVEBryyvX9RAYyp6zqFBNkanSIop+5ICen4cVugaEKves4Q2WFJDmdiXGH1tDTKjDXLH NOixLymi4KbnL3sAKrF1tcu+iLMvxrFiM28ttqLxhirt6rYY+gy30IY+n70eA8ma+gJl08F7uEUW Qx2y54DeQlCewoCtQkZQIWsAOdpqityhohCBHEHQGk+Rspvh/JSGjrmZY4rxjODzFXPGYp/HV9Mj eWvp6vZ1RUXh8cIj2z4aSY90vE0fKN7gDsR5FpEJ1DhomDmrJJBYNsclh1qLahS/O5kzofHGy5Eu VLrogVPWsfyokUM5Ro9iBlTuNPvi8oGDuGlAxRg3Z5RdPoUPKykPDXs61cllLSoLoGZDIAqV54sL RP2IGvTFcwnGvCw6w4mFLpWeCaUYvcr9W+f4wb0r4k+vX/TbLOiy55BLKECIT+Aoo9dlk9QX4jok HpzvMjlhtBsX0cFjPFpkko/z+sHFPdLHniJqtigKJaEhMCWisXDoa4DBXykMfD8wvYdMoAY6mODS WC59ieDF6tIAoUQYeHBxAeOIP+l9cV/ROjd1x3GfUqcyYAAAJ5gEci/owCI9T7zden3eMfIT+Vd3 mMXWw4R1j74m7wRpRAIGLOReJqabsRh7yAfdkZFI9zX5FvO2HvJVd2Q00n1FvoQw2hHSDdfnTTEw DJFoCblATss9nArh0+SkXP4cOQEaxM+G8KvkJbn+RfIS9nxoShx5FQg5gdRmYMlLiFFQ8gJijSzw N92paXkYrJEvu6OjUaJfyM/dKirRv7pHjkSJfiQ/gEqWaCQV8RiTRA5ix+N6yKajUVGawvDnyMfI 4H1ykLLFfiS5H0yc7x6VISd6ug2GvCkJ5AnyJIZRFvIkxmIRiA9gG5o/iHnK4mOyqXvY8LwpMWQT lhCs6UZMKbpC+SMk0K22nJ8yA/O/EPo/ihfLNaPok8wi5RBDKvAZS6rIbEy78BlLHMSJ6VJ8xpIZ pATT1+EzFpaRKvgYgYE4Ugo2hGUI+xDUZCLJJ9dCFOGJQETEOSSXWBFnkXEkGzEeoslYxLNIDoxE xeaQrO5hbOwUJ8mCyQhnEVSwl4zB1BjkEEsKkaoQshBUmLNhzoY5G6jIVOxrOkSTIuRRjHgK8i5E PAl52SAaqabi6FyQj7LmkwqEWQilCA6E6xBmIExFKEKYgjAJYSICj5CDkIUwBvKZV7rteWwP87KC TivolIJeUtCLCnpBQScV9LyCnlPQswo6oaBnbBLiJ66T2KPX2dnHSzrZ7hKJ7Zo2nw1Mk9gj07zs YUw/Ns3O/nH6IfbQdIk9OL2XPTDVwD46VWL/UCyx++0S+4i9k30Y+3moYBj7YJHEPlAwg91X2Mvu LZTYPQUSu9smsbtsNnbn5IXsjskSu32Snd02SWK3Tqpit1y7kN18rcTeP1FiOycsZ+8T7WyHKLF+ sZdtHy+xm8bPZzeKZnaDOIxtEyTWx0tsq3U+22KV2GbrQnZ9rsQ25fay63Lns2tzJHZNTie7OjuZ 9Y6T2MYsL3tvlsTeM7aKvXvsIfausRJ7Z6bE3pHZyd6e6WRXjZFYm3TbmEPsrRaJXWnxsissFnb5 NRJ7SwbLLsuYwS7NOMTenCGxN42W2BtHe9kbMlLYJaMkdnF6J7soXWIXpjvZBenZbEO6ga1Pk9g6 cx5ba17I1pgl1mPuZK9P9bLzU3vZeakSO5eT2DlcJ1ttcrJuk8S6TIfY2ab5bJUpi600SmwFK7Hl bC87ixXYMoPElo6UWOfIKtaRIrEzU6rY62YY2ZIZvez0acPZYrudtU+JZosKstnCgl62YEonOzl/ CDspP5O9Nn85m5/XyU6cMJ+dkBfDjheXs7nZvWxOtp3Nykxjx2Z62cx0/fC5YywzWIvatgyT14yI YUdnLGczRkjsqHQrmz5cYtOSRgyfa061sVzqQjaVG5Y01zTMyxrZTpZNPsQakq5lU0Za2ZFJEqsf OzzKNywnaYhvBE0l09TQ4ROTslsTrQmV8VJcZUJLXIsxmssujk6NqsQNwBYehpmwVHVlVA9Tf1Rq i2pR9zBzbfFSm7olVoqpNEZifWRqhEKsxYw2VVMZ08MsQOKYlogephYTES2aHmY+JjQt0MO4bNFS G7SEW3WVKitTqethPFila2F6mOrHpTamZUosUw8tzFyEBQi1CPMRXAgehOonWlRebxg5RvxQYSnp 0Uq4w+tK5wRISyCtnD5tZdUBTQtuYtVzXF2EbHI3bdwIKQUlgZxyV7fK40kpcJcE6mnaZpPTXpqO i8N0F8MUlrm61KpNbrBc/aG3JYQHcpbBSZnIQgZ9LKESpXQgo+QxRy71oFzkyuzli1gsv1f1e7Vk UPq3m119BRLRZ5eUU0WVBfRcwb8RrJAfeA3kQ4ljuCPMsveQKntND3HZPUXIfcXKW/+97YAsKyz/ fgWGBSbLzHWh+RzBFQzTOPCTDSmaZNCrPaAHkM4hfEoheIskYR1e0lkAoiND4D14jwA8DU+TIQRI GrwL78PbcBG+JBHwDmFIEjwD3UQHz0Mv/B2+QNolIMH3RAunyR2wAz6Fj+EY3Ax3QDfsh9PwGTHD QvDgZwW2fI0Mg+UwDY7DE8jpB5AoT+RyEs7An+EDpHgZ+30HzmI/X8KPyLefqEkk0oyUS7+EHwiV Mwm2wUHoQvqT8Ap8iPI8Ck/Bc3Lrv2A/5+ACfAs/UVqU7y1s9z30ofRamcNbsqTH4XXkeRY+gy/g J2hAifdDAEtPY+ln8I0sVzXKTf/1fiW0wSF4Ek7QEeCmVYhjcOC4boSlsApWw1E6NhzR/0dX2JeQ hM8dMGzgqc6FBNir1KqBlqBdfS61Xn4CBEdL/5LpIXhcoWR6pa/CHoBoZpr0hcqNgQRIX2DtgqAD U1/9O9/g4YGULgRqJdsdKu6ADTJuRNiAc7r898dAkonu/2DoF+GfcCCU/id8juvjIzn9FaZfB98l ul60yLfhYVwPXfh8ES3rmFy+Arb/JxYklcQg+hoj5vx/q3wEP4A2+xk8BHOxt4aw98PexxVwI1po HRyBg4Nov5afPyA0oaU2w5Yrero3hDeE8KnLVUz0f5Lx/86lSUOIQBv5DmeW/kVF2mUIdv+Hxv/v XPegHW6BfThTB3FGjuLMP4sW8Ap8QhKxNgx6pVxtruYTDLM1EA5RGOiPtSXpYiFSGxUeE62N0Whi tNHqiAhVGEBWTlZufHJeFl7xubnxuXG9OeOyE03xJmIiJJ4QU7iqV7Pglx1hPRd/ZpqYl/vv6c8L U/c39vNMU/9dmk9+nqUt6vtHX4cmB5+bVcn9eSq9KgWu+FsbTRdTZhmXPY7+SdRbUh8Th/uCCrSQ 8BTDqLQanYqByZNzE/KyxmUTFaci8aZ4Jm7ymWxiCX6oyf61WX3HxbPBL3EDwfYrVB+rhobaRx/V MFraOJcKTZuaaPNbJ96fyzw4vlPUZPcfYcoo0JZZUl8Y3a20qI/htkh1lDY2VqNlGI0OO5iM3BPy crEXYsJecOyqdBWn0apU9eRC8GxzcFhr8CL5B7l+XsJ1CblZVZrsX14j7wQzNXzfDaSgiBSe3R98 hv4VzbPIxY5cEsEAoymfcJYdOtSYqBuCIkzOmZybl4UjpSo2JicNHaLVaIcmKQnOROJzc0SBt45K 51AHA8lnGZHkrF1SU97yzPWzHun8tf+PJOa7gxXFM6duC/5IRu0vK1o0d4cm+7brn7zv+lnJMeyy mvZzqxaHLQgWTJ3YcGtuVv+K/h+dhbetKcqns4Lyac7SPRtSbNHJyYkRTIJOExOTkkjViPOPD2Ui cBKsiRzq10Q1kRAfz8WbEhOScwVREBM1Z4M/q1NmCn8NnngrcWWK5gdy8pWirJT4rNThr1HVqLge ckdw/4t9f1JlTiM4ecGzfZ+grv4c/La/8MzmGvonLuTSjESiJWi1TKSKYXSXLQEN0JSYlJibICaG OYIjgo8GWTL6jG5jSlnBW5SHhu8fmtL/Fqn8mvl+oLcZ2BvGIraoIUNidLqo5BhGFSVPL+0znnYb zphI+qj0URotNXATQeUnCyIJyw6OIt8FXwj+l25obORQY/CvwbPkn8FckkcgMjkhSjORqNGcwvpO k2B0xsh486Qgo8pSaYKTEq9JHRJ5I3l20HiicDzh4aqoMEY1eDyoUZkhZefo/zl4Pgh43s2PTB8x nORosvvm9i9lOlQP93cNmSmOYWZSm/VIn6hHqu/C2UqHMbbh5qhIw5DYFDYlK0UVMSQlZUiEitFF DGe0sgXLq3genUI0rwSTMT5+SDKHI+VSR6XzcWmCKJtTKppcmEarGToEja1pNrmTHE34KlJ3x/k/ XF9BlrYc48d6XBP4OLJj9eqeow/XquxECLYFCx46MLni8ILqTWTM1BEa27KsjDyr6xOVYUznwWM4 8lrprDpTfQcMp7onJCk8PEaVpNXGRF6he6JF9vFxyDcZBeCMo9Lj40QhNyc5ST3qovmhvr7utG/G NK04IEHLbbua33/hjsWqhLy/B5cFb/6y4Pjc0sAOGjXua1syFzVDORZqHBCHuuFs8bGx0SoVEx1H mIjEaK0+TGE8eXL8Jd7xHC9rIsQyPl5WxdAhyUkoj7rw55veeHXVTZuWH351sWPnsimTy2wN95Vp HL8c3nXs8AMkjGTsbnyc8fXtPbm4oevMwrJnICRDFY46CWUYbUsmKaCN0zKNKe0pjDZFmxIxPEEb FjGgApyceTg5KIkpSeaZzJgGaSB+FCNPjbqqX8eUTvc+Mf7CkqA/+P2Gu/a1/vmfvnv7Es/dVTQh nPwYmF/5l6Lg8cPbMOQ0P7jhsd3BvlvJqOqZXirRDqmPdIW8Y8wT6L40TARa4Es5yoKWYX8wSKKD 59WeX3ep68lbwZ8xTiGwX+pTL0V9RsIwnMEItUobqdERlTaCik9tS1k6WnQDufFEXR1sJRuCnwYv 7MDeNqs9wbn9tv/F2pfARV2t/f/Ob50ZZmBWtgGGYRiGVZZhQEBgEJBVQlRcckFFc0c0NOWikaXh kplmppZmXt8u+ZqZktfS6hqvmde8ZubrJSP/ejPL0nyNTJnD/5zf/GYBwRgrP8Q045zzbOd5vs9z vjORyma4ma3oNIEfCPuKbDOyThgRZpVz6KyFsf4+eolSqxVTnDPZ4MSLjaLhreDH/1uDcw9vDbSb 8wHY9vzndaXZmvVnXxxeAuG2IfkZRri6oCArEtJVrV/npU/4qnrMi53nyMtHBiU/YtOh3xnJ5TYd XS1IQ95G0ogJX6tEJGJYlpEAZCWUkrPt55MLo3jllORtxfnp8NYcevEteNn2Al2Nak8cXsPcdYm8 ypwmNISfVUIrlYBQsZyUd/DHWB1sZLPGoMAni7MfOxR1yFwXOjtXlwyUjHz8zZLcN95gTsP179te 2ik7JKsoep7c/D6wIN+Bqq5D5Ha2kvedogVVRhpVHyI73lUYcVkmt6eeTpMCA6qMlfcy6WN3F8Lr 2PNRXZ3UeaG6IekIkYiUUSRLOrOfmV8DJSADZTSbUEonOTChsh3kgSiQc7sS3rppCg8PMIaA/4Xh rAVVt6+OXvoMBMIzB5FEi9Dqh9HqCiIQYSW0vlalUigJMkjBr5+k4NdHNU3RvaKphIpmoFylbRF4 HLxdOnje2pK8Z+uOwEWX6xZmWv69fOPcgUklOVPZRFi3bsKwUNY4p3rtN0tmMLUwsTBr+iXbPNuV 8oL6p4qysScqkDx7kDxGXMVQrtcCmUjPcf7ePaoYY6BwsjdggfgChtO9OUWFLIkiC1UyVOIRBqjt KGNFLGsCLLMbZGXTjFSi5/yyQM4hhkYWk3EcTe0v2dBYYn1v5cjOelTI3kua2Dp1LBhPFaFit3bC 9s3p8nN15XhEiyQ715+aRp2DH8Jz8CPANhkMOpP/SntN6zz5Bfw3qNpMpWI9TWi1C46aJpWyCLYq WFJDd69pAB10AwB27fj6bMYwJgJ0KDX7O0Al2kT0stjbhxHJZaIdt+AhMBre2htAlmUOgiYqjhLB 8f4D4uSqlCgN2G4jO0+Ai0Pw7o6YkiNdvLwoec96hs6k257UebitA+4Bkt1ePnJOqlByu1BRm2Wr IndR66FWZ7b4haUMVIN2FK2juy5RL6O6piOiiQirUqeTentLQ/39aakomOYi5UL6xmGrEJRUpaQK yaH3qmavaXxmbQxaNPWlM6PLlF9ImTGfbR5eDAonvhllLNuqA5WrcncOMOU8PZLK3zEsf+qYd3Fl G1LUPKlyA0gbpJQMeSIh6vgliV/s1lHx0XiwPh1JuhdJqrVXtkCZTEkFcl7KXiqbc3++ujlKTSj1 X21BL0wbmJiV8ugmw/noeRO3ttdUr5h3FBRSyqhvGubsOzV30vfmT0cV7n4R+IDkrY3IPpVo17Uo G6sJPaG3yhUKGQBoY0LkL+NCXcVN2J2xuG+I0yhKY5R7gSNbIosyCw9OGPX4uM3DczOD29sHPz7O nJCZOGwxvWuSOWbXZuALBr60OCWxglzz214wFuzdP3vaO2ceG4FzywQkzW5kA1/kL3TeOE4JdDqJ 1r268X7CtU3tqG1h7rUtQgAe1G7by9aB4zeazj4KT35dO/WZmkOfzZpyRZSSUDYqNZ4lyYNTHz2X Bg/t3gSkwLL1qTc2w1t1m8sLqioaUIZchnJ4A+vHZ0i1VcyyFDqXfIpz5HAUkir0Q86/dhsKBe7d Lr4XAcR6FM2f8hUu0CpF3Q/nJaK80BL8WeKBghnXOAMl1DjqEPwQVNy+sfjiRVCKKlyFrRjATXyF MwM80iJK0YotyC7hQoUzhKMKZxAhYCZmeqtwvDWEIEbph7eJ84G9xskCk+MSXxKnN1SaolrFkkCr 4SOpRKvVBvi00lWHpmUknTtXWPJq537yxuxw416bhLwx0xRuHlBiE6EyB4AWSTSTbkA6ClWO4FCh 4w2k6F7lkDDUTPUvk/5zMW3yCLrhJmy3PY8q3U9/K8hGmu3paqfGMKdQF6O3+hAKsViqoOVyoEDl Tsx73IwLZVq8/OMeNQ+BTlzxyAII1xZkScY8Bs+2tDCn4IZDtg27fVp8QDy55RDAX4tKTeg6RL/S o94p7qt39Cu91jtQi9DF8x53c/Ruj7o5cBztUtaPbg70u5sDx/+8dg4QN7s6OcUf7uY4xZ/QzYEa ZKvn+lP52Od+v5vj/bvmYbs5dsEf7+bAHEGC3+/m2DX96ubI4K5LzAWhm0NVLzhYJJGIQtRqew8X Lu2l6oH+9XHk4D+lkSMAaexqZ27+gU6O+d7DTg5cRTt+8qd1cswnD9HJkSyS4a7QyQkVLrhH/+as cA/q3pi7f6B7oxagHmzVg7s3ellv3RuZiWKV7Xf3xvz8u90bIFFmYf/M7u3OH+jeyKtdncwSJI3X 73ZvKKExS+Q/bIG3xtSMc+vg9gzJQOvMQidw/O90cHqN/r4Ojh4A/OF3L+ZVei2Zur8st7XVvYcr XO/o4YjVyGqL0AkPI/KJQdbgcBDNAfRHnx/G5mUkIQOKrKkIHsRGCgAB72k28w8cQwKFXYzfQQs4 f//+XwGZfgkxSWuo1DljjOEtXl4Bg4L3ScT+uQEt9AK/+Gj7KxFG/EoW/0oOeqXqwJQ08/HjhYWv YZgxLyqyxcaSN+ZHmtBvulp4sWhHby8iC8zpusTVIgv4EelEijVIFyADAQFARqWlswmmNFGsxaIP 5lBG8VLagYQrkvjxFa/7/WA6VCHXhzK/rzBVdsa3bkRsREJMSZ3hU/2k4WthPXgGxIAZQWmJqX9j s1ZPio45KZUaSo3HvaW60rCTPAaftf/0bITBT1YWksVkufbQY+kYZ9l1XBQecRjjrAVRxkM8yiKJ zcjLi/nTNgDpqKVRopKgP9wANjQqSqPAZ4+KC9faoSX2bLZdSzf/uuHMfviRmgVvA/XVI2MRFBWR CqTLwDfE6c9NRLp4yQylYSdk0tChYSfRQS61lYOfm/iDbAEXD01NTzp7trAIA8YfF4dHHLHJyB8X mrBC+FyRRH1XO7ebz/aJRJxVowXA34g6HP9gikrw5wxeXtG8m+wuskM+s73X791JuN9xvCLv8Tx1 7pr81WmWARnJY7cH/CeibvJf4eBn5n8KJtPk98ptjyXHfbI96HJk3aSdMGsFerqKkkd9Uz/z4Oez JvLdEVkMUjc3wpfQkzNaYLXbcyh/t9FzGSPbbs+cBxhA42lsfJLC7LoWoI4Orcgji8sq8th22zqy Fv8QNLEO+XKPc7KRT5isCmtmUqwyQp5MBKm0WgWhVKCl+AKQhH2HUF0SP8Xrz6wDd+Hd5g8IctmH Dyp+8kCfB1lgSV5a1V8GD1oy/XW473TlWEv8/skLKpMG5KVVdF6Ev4zjZBKRHjB0MygcaqT1MWWg 6LBET/tIODwrea6qPJQzzpny3Nf1M5g6GF9grf7WNtd2saK4vrHEagumdhS9sXRoxuHGkZ01PGSb nQPOUnEI1DWD/Za3aociG2R0GbmP2Zs8LhlIFBM6q2xwcWS4VBpJBgQkRCYg/R2OR6r1G5SAVCWq jHL0lAlFuEJuijCilxRyVCg40l47U8mcHsBlbpMLuDz1JAYuoDG5pShvTMn25J2D00py737J/1pn bilGT+6gSWDBsGZnc/bItwRYw2ULsIbUYVhDH9PB//sZmRJ+fvfMdd1vHV8ACkT+9GXbb7+ehZ3w AnqkA7KbF4EXiP/t8+v4FsdhkQAihsjE9rBkajlvb60vRRm0hvvs0ScaUvXDBMw1O2KKuBH79IJm J2KaueJBalNn0+1wKuc9dzhFTvBMVZfvMfqKJ3Kwrmk5Oi3D6GQqlUlnuk/XB6Kv/ricOdwrQgMb HqTvA/AbM+dhdfYVdEZnHunMSCS6YAB0yoCAHno7dX8g9uuX7r/ZxGBY0bKWgddmCPjw2S9/WtVw T/3/6vMyRFTBg2xAtrijR8PrbuiRqn1YG+CMiaMc+d2giBEzCloMFISYz3kK5x8XADX2Q0sepErh NbLtgSfXDcLueOgT6sX70M8qNmniZaRGJNO4JO8GevvjHja2GzAGgx8sfw/YTHroBDctwohkYgjW Iit2SLg0lgqPddfCDV4r3DG1++CoP7n2+Wnbp6XHi6fuuHmzMjE+OuC6rzp2QFx00HX69QcpyuiP fJGbMupf8C0Mzz9Ot1TYAsnLNbFRA5NH2gLpqWDfn+M9WkN09547qO/X6XrdAfyB6YEKpeO2YD09 Ff7w30MywEueie+SXkOYiDTCaJUnpvlxUqmfCigBTev8dELywGq48mZvfUW/TlMlCIBXN+VWSv4y 5Z2hea2t5C8PzJQm3Jlsft2tM7nioX8YYhrChVuE+bOZGEQUEBar1j6FzrRYzPwoOjmM9JdxWWZR KOOA8s5Bav8n0/3DUeQ/I4ZmDzk0cdTC8VuH5WcHX7iQ98SE5MSspGFPgffBarCnNKdmTXHuisff g5Mur16QmXxuS/OsgUnFOVPonVXJMX99GY+3Nz2RkjSMfO63vWA02PvenOl//3LGSGYTrFs3cZiO h1DtS2Yw82BSQfZjl2y1tivlhUsai7MRSr5F3+VMbBqfK6Xv0CxF4CjFTjVajECv0HMmF0mFvpt9 OhGeAwaEr+lzVAd652b+naK3KRq9z/4uBfrhTLa9ZAX+YTZlbEi2TUjdmIp3A++j97Txk03vAyLg wwL7oeCnTuidKJcZU4yWCBNawW1umWOfWx6hdkNfoF8JvmsCLAyAO8cpS5XJ8XjOegu0opVLhWmm ssWoC/RWE952pMyDWhyK2F0mA+sIU9Sf2Gt7igWp6njImfoxoGRLbSfgZ26zTnIEvCXMOoEEXrDP OvEk/RYRw0sWjKykJHgrGZFdkxhLuAlpjLSl9XqLXsHQfKD4MVhz97FkFrgGf4DfCGPJG/fsY8kY IOLnmiD3jGJREHsbZp/IjQ+WJ4QFnOR3FSzthX1j3xVznhQMy2ho+x54LBlk+xeo/JG8jSLtWxQ6 l+B5YW5pX+Mjfg01IT/oLSVIKUm4ejwFwPPVCBMmUikA5+sHkM/pzuM9p44LuHngKLgALkAfkAlM 9qEliAJ6qAL/hMe7iGwmE3a6SSxFEjMOiTFZSwFY+/LOueM+1dCUWLIMvE+KgB9JwFPwYzybhJ/h vu88+RNTyzbziF9+kA7hwuScPchwFNCo29aHcRYkuiUZt24qXz/HUTRR/F0Oigl6kBN5OweKTuRt Hyiyz4yCK2CpE93DF5zoHk6zo3tsw3PkRaaGfQPhEOk7hEQpIYQ5gAntqA9FW3ERuMlITXFM2WlR r8NE8rJr9ji/GThnj1jjc+RxLg/tgXGu9B2Fn9h5hvUWM6+msLhen+JoZfDOeRh3vrXDjjv3k02d Oz60484j5PE7s0/fj2P5vQ7w+mB8iU6wX7C3fTO+DNivKblwhZs++tRw3rbk9T4RHnmAvOOYLIIa 4N1jsojzBjMWxUat0AMTNMnSzrzB8/kUeqbSBbmYakDC28APRxW5Fdmmmj8HHMlHFY5dEzpxGtR5 VvbEOfvAIvg40AJfhJLgTPv5rUIaVyMcI3pbL7PHpcF+ISJkdXSYeRXRms4HTCUe/I1vmzK218Ef M9dtZAhI95Ehvyfty+8pdjsLpmQjLzTN1LhxN2hfO6EDv+s8bWBb2fOodkvfIcVKsSPW9BqDRY/D 2mSPeRQVGj3b6qqlAlODSbRzOSoX8FwOZPe99EyulGkWqgNDd6sODILMXKnj4oqeOfCzdCm8iIoD 8hdlRv66JOR5MSMiGae/jBZ0oi1GlSYVpb5wE3kKGnlORtvRS6cRGvi8hdlT2Q6PwPPw6O1K4H3D ZAgPiAjGyOoWVY5W3SDMM5Qteq2/VInyhXuO13fP8IyQ4S1GV6rnTPfXxcIsoS4W1KO6yG6Aa+Aj Th4HaBJ4HBtqeB4H7yFqIpLlEJJD/a6Yk2oDZdJAB77DdBGLEadHHiLwyZ3lcQCDbIaCBGV5C56d 3KL2F29oLM05LDAvDidWfTx1JJhEFfPMi1dfTld8UVdOb/nFReGAx6wUKxXrOf9M+AGmcISSMo6z S4Q0Y9sfnPFdFAzKAqwgBmTDu00GQ0ik/0r7GolojcuEH/K2Uk2rHRGE6rEFALsWfI3S4HKdQuU5 WRbj/OMGyNWWKA3YIbAsGLVS884vsBlY4Z0tIh+BofEzKIBvAO+3/Pnd7FEi75bxLXr3jVDWd9Es kpMFmgVlBtUdYATssPMxlAoO/09Iz1O1KPPv55kX8oOiUK9wtZcr8ztBWO/Zn4pwJkZ60I5yO39i Z7OLP+GV786feJtt6snEgIcmvhkdXrZVB5sdTAz+VFLjkFQ7CS2uAN6+3u4VwJWLI0yuRC2nRU7y RPKJUYW7NwFvTJ6gJrcFu7MtJmyzsy3gIb7uUQ0o0x3gca33AY0qSKxynDmV2X15nLlQHjG6F4Nb 3ZkSw8jVLqbEvx4bQY/ok2PB71yNNNzDcyhwTdC514QwR01Idq8JKULFJe84WBEvAlkPVgRVTT4m ECqAxU6oODXbRaggePS6lpMxq3uvCygJ84nYRZWgN1+7bc+vlBXZCt+5IJ+QHCn4RExajK7K0J0U QVWgQN7LUybgAfsaI5DWR4lw3OP5+Pv5eQNDGPau2T5Q5csEr68Qdxbhotz5QCgUAvWheLtAfXjL 5uVOfWBsTt5EZKTAm/DysvMm7HK8xixgbvLnvmetQPszC27Cb2zrBP4D9ZqDF4GxCfU2e4ydgDAz rhfyXusFQkt8tTjWk+ZAH3PQIEBcSwtmr3d1kieFGz4/qwTT3zmW4kkL2c77TWBQqSi9ijwJr368 K94Cr1oEEvxZ/raPJO5S31DH+uLAq/TohzTvWTuYXLnnucHdOPBd73d10vsF1oTWKqV9fDi0uZdU yuEVFC6moMrOm1BRPFGQopU7YIcJxn0HOyj1Dl/GWz4+5yWeNXEeRqGMORUUPgIGw87VsAVJVd7V iSpzIqqxoUQM1lPv56fxJcgwjTtbEOAczx80luOExKPXA8o1PKdcrInl4OadhpUjMkuyq8gt+YOb 9sIPbQdI9dg774+pSE1fBxtmAN2+KWMHFbzAJo4Yt3dXVb4+yNs7bMzw+s//8ioqXinlJXWjExNx +aosb5yfUYijAsnJLXCwJwICNFJSLRLJ5cGanuwJoFelqFJSMWVST5EmA0lhJqVKqTErUwG3AJ7q IrbTaSFq3ZFwhIg/MvqD0AGpW68DM2gJlgQ/MRHM4GkUcSoQtHkWNJd3HqVSyWAveBP+u/M8Mt8J +MOvIK6NyiDsnA7mW55H4X3Qi0IHz055EMgsKqXKrFQB5tvOq7B5JZDHa1jtgpfAZAeHAn4Kv0JZ Ip9nUXR9hNb6Cq3li72tUHgxjNjXi6TE97EoKAeFwsnnA8xXtq2gHH7XGmP2g3XwPLkWfgB8D4rl cpaKCVCBMjax807nWZKYXqSDBDWI/A2m+0VGezMZBn/wD6zJbbT792h3bzuDwrsHgwIpw+9n3+17 W8Uy+HMjbAXyj9RenCxQATB/cKytltxCbbXtzDRI1VEBJOZ+W7ou0b50PcrhsZhHoddj9mBYYCAp FelILtpxs9iNPagUoo1iNYYIx1QCX1yY+VlDGMe4ptj7p4P6T6pHSsrizpL55SVzN40qBW88+5aM e/mTJDBly2MXEiIHHZpCFYPER4c+Y02Es36cGD92nNEwoaIRTEuSFyYp1py6pIl5vzA6/Ai2w+iu dtpML0ZxZucQ+vhgDqFMkNPFqbAP9px3ajyHjm97MEPefOv1phEpIQEZCcNOxH87B67/ZEZT81YA DtZOorzNPy2vWDpjypbCtI5SuHva8q9B1hcfzZ/MMy3b6VsudgVB+DAM7QMoWuTrwwVx4vvYFSoz MKQK1sEzG0rlKPpy9B8NDXfgxzcC5xz626Sxf3/53GFLpWZgfNbaKeP2baU+JZ/+bW/T7sZFx8GY z/d23gAHKqINuzZ/A6EgRzZvgwh82sRifxAR4R3uz3He4p4Mi548SlyVBfKn2oEIKDoK9Qi5KSMu pLXlNy5subBwqnbQ1jXHTyyYdo3NspR8ORl0Juo3lmVfHLuzaPCaxf9YVNvxZN2Khe+PHxgdPSMn FZ4k+EjqJOcKmVRgFJLdGYUomQJOn0pK2u62gQlmeMvsnFvzVRKtQO/l74JDrN4SiRdN388rFA6Z gcI0XTMF6L0wG8jutJ7O7QAZHR+C/9BVcIitklS+D5tRIY0Hl4WV2ZeRxaIFBkZUNBuiihL5Gwxe vbALOeES2WEntJXKHthsj4ckYRgy9ZGy78ILp5aPXFGaZ1pyd7m6PrtoSMzGjmf8FhUUFcSt7Wij qw7PTYs9V5saV144v7TV9iq5viq90Zo5wRZPrp8T15idMckWjzmHWE6qwJ2b0RvnEO1rxiJSBZnn NizqaPs+qWTyCHrxT/CkbTcquzusqWilxq5LlIk5TQTwrEM/mUzuR/v6Aj/WS34/6xDhYgPliBR8 64aiRGVINavI5cU/GX9axgb5W9IGm4aOgj8o6l81vpqJKRv7bWtDtHmBfj57ZbczCsnK/cDidhei IAyoXpkxVtEiR0VGioHYcQ/EY5X+zKB5xqEBMw5xi0WxQx94jRcCWuGtBphZ3wmOgfzhFr0qIbyC PePRwPYD5xBwBsj/7K0fn4fv4Rmuu1YWwkoU4XsupNdgiwWk5uSA8JQUN/263XP1Q0+/Pue26HRS CvQqfvBg7V8mfcCPo0qXNFcWb1pxxXb+7tUXS7Lzs56BIACox5c/66kdYB2eSPqEzJu07tITM5nZ ML1w0NQlyfGo6l8H3k/nZ7rN7rFNCrCns+MKjCCOMMZ1u3lwfDzAzpjE7bJa5brC51mT/Znds9Mv ovYzsEy6CV7YpNYGyQIZ6hSoX50SqJWF+ivWgwkPHOWjmk6eWvCfrwqhOR9POWfvO1Qohu9+UGNL 5eecp04P/fCFiVS8h9dnVLfY4O9fjOJwoBUb+HhwWaF/8S4QO1WqB3ubPgeHwYOwAvgfiB8VmFb8 rudhjgCO+gh8AnAghbztfo+k5pkLSI+EkIG+ZAjhG9LzFhBzRB0Qx6+/3stG0rbCM/DXMC9GIRUj vHYDfATHgfjvEhPJmyD0wc6zEZ0nSUmRysuoVdg6qESKhnHV02lw8uFvO53+inh4fzmIq6ngd/z1 NTTADmgAOhBOR8WDYE/95RxFN4vGTSZH4w/Tx3elcWfYNh4FZBGVCAlIS8Kl0mwyIMBsyjY7iDYK oTdM6cEzSe6VZ0KhjlnQm8UX84KmKYwTTdmHWkI/GUFuHAwiQIX3YTEzcf/yIisIqF8aaSjOi42U gNTqqtWrlxQ3AfGVi40rVjRevAJ/hb86HgNxxxenFjc0LD71RYfzEdXeAdvgzr88nZq5etiQmmvp CtZcGRYSHZm3n/LVzVu+ml52/zr29fO6r2R/hP3tsBPmZRVhK2Vx3t5JvhQVEZgU0dNK3dknAl7C KAB4aBimtlXb8OGHa/yPGKaNffp/Zox7YkbzSxMq4JueWONozF54Cp46YF5fbG164pOrDXNGFpGv emgBV6Rg3GohhmIbDNYyTIpMpYoOSYnuaQMHK0VQvTsrxdMAYUa3Vr7y6qMj54xeuW14xqLRCQMG JZTPzVrrgRmYbffUi557tuGz7xZPbgIdtgnry0qbXivL2shIPTOFyxK+giWMVvlgRiJJCQYgRRkQ 0NMaDou4uCpuEaERzo7KU4usRd32oIGTnos6NAJe+WLOxIZZ/3Vo9pST0r3jk2NFRzwwDHl5ZUHO 68kQrlx08sqTc579y8kJ3+SlT6ZqHzpCMHbXEamYwcKo6VCgJkJj1aJQ9f0MFoNCpTFYPNWdrj55 5vwcD1Sk5Z0vUHPBrDNnQNVDn3wvlOkzcKYn/UXhCf7ScP/uFc31MSVPXfkBvATiLp5ddOIEMF/w RK1g2GK7CLY0wqv09zYJWEwefWjtwoh0ogKf6QKxUplBabXxhoz4nme6O6nc0Bup3NPMv2L25hED 45VTt8zLSj0+Ozkhyr91ckpSjPYYafHEEse37EmJLWx+ZEidrYm0rhsQmWVrRb/jIrNtrVQNqf7j Xqf9ifu9jhop3umYMOyx283Svy88eSx3ZMFpTzS98I82GETVXFiZGkeSnqnl0kpDxBH5hMHqk85J pQPsLJkw3wFhDocLPJmkPj4/7fmJjWlrW5CbIp5VsCrDvG3bNk/y9iJ4eRM0NUhe9MpJm08Sm26C 9Q+dmTiE16KIHEL9boqCpkOU0SFOJjE/5rU3iqYI+22cx0mZXg4Wtc+Ay6edBHVAmSP3D5SqtAmD d3mi7s57MWAa3EKfs1nuDJwyLWHh3+/StGcKM059VUQQYSKyiVG4RpWGqFRWTXCwlVCrkyOtyb3W KMcEuHsXKfSQrnbS02NeCw7fnDqsNGfa88XWJ2tbYfyZox3pqfPPXF2abRmWv9DHo4AYV7xuXkm2 ShJQWTrv7XHD6Hi4Z99okxGysDYzefTU5DhPDeZ2MkKIFKKMGG6VaCVMIALqcq/Av3ehf6wSIGEW 00wII9Han9AA4omY3Jm61JkxuhA/jZdkhhcoHxZD+MfHx+Av74mPiYlREGb8oxA5qh3PMaeEz8Ar HZ+A5z997qFJ2cxjrK9Cp5e+cvsln7BApT+9H5SvDRvgX+i98WdPzFl9r5ycDTaWLl2ZZFtO1g3a uKAQdqyybaT32Tav/xWUppMzwaKHtqcPH38of4IgIjI5SB4Z1C1/or7HLHwFAO7gPcbHd+FqeAuu vborwBAu89eEGxS7oScllCm/F4OO2p5H171oLnuhKZccC1Y/tK5+qBPkJxhkOJEwKNw/IbwnQrB/ MhLnGLMw1vdc5atwI2jouMipvDk//28ugXq47ZePOJWPRO9/HN716CDZ9tiWgdVSg78sOhrWkfXk WLhTGhkiz4wCY0H1n4GUequZ/NcUmFUPpfyvsOY8XHDjlkmkvwaveORoWwwkSJI8Cy1lPjngxEP5 OZ3XT0SEElasn1mTLaY0hLg7R1aDCiWG932daMo5E9awHO0geKSiM4Cqq1wfSi/LfWL58kd1vWs3 74xXkinlEX3wxmp4eWRR7ZjS3EhWdEYOd8IvyY5Xly+bqfej/sO/60433UT4sY02l5lCjWGFFk5u +fnpouyYiKxC85z1YDaI4b+RyxHJiYT3gXBpkIOngtTqQxvgYiDY9cCTAdz8+tFE7xqQT4fOGP/M yTmT6me98/LkypDTgU+2tDweyLb15ZDOyxseyX+u4bPr9TNHlT5lbgFmEL/HLd7kRKQ93lKDoxRM sEwR3H1y2KMJ78svwKDorovGTDcGxkfGDU9MyByQa46Lmd6HQrMuRRRkZG8fN2reo03bHmkj78K2 QlPYI2WrXipNM0VQr/WlGDwBpUMidI31Z24+NeP5evczxKJKZME6xarCOULFcKpuOun5EOpTEzeO hq85VGUf1pjoFrhFZIkv/et/96HHzqdnv/4/86ufrPkAhI/6p+mZWZZYQNXMGmgmN/XpGzrqxlMz 1z356Y3FM4AkZefwvNpuGVGLOkH5wZCAACkfSsJFc98eMKsMyOx9RA5YcuUKff26ECl3YMflr/EL X18GEiG80zuX0rfbu0WyAUVysFTbj0jWA76Bw1/W0mfsft1FwIvt7TNPdcATfUesrRRuIq/eo4Gh Dk4n7ScrXZAnBckTKE34fXkonmhvTtLY+fb2B3bH4p++RJx++nzOxAnnggdExVZ9VZRZtWVazO71 NU6b3Z8SbnU2kjnPr7YdJnPyIw34d+Oq4qw9e/YS99lRJ/Xvhx1x8rbYhe/TjsV1j5QMvHBp/pG+ jQhFmelLLnY2gqvnuksShyQJ65cknAZFk0CRxleoFoXZYugzuqztW7YUZDVOGyGOKa+5cOEBku2K v7kLss+mJUl2iReD07vcqwOefZjwyQ1Th4oINS1Sdz+5SDCzr1+fRxcDIr3KTC+D1wZpo1XB0bl9 SLsRfgufaZ8O5ky/TbbdfOwfK/5KKYW/dMf5l0SCwKfvBYBquM3eC6Vz/+IzDO6FMvCUJiYkWikP 4ZRMCKEMuW9KgwJPbUB2FFoDg6GvtohyfqmGyYJLtlxPlR1v++nAscYhmXlZM9ve7qaJU8j1oO3q wqkVhUsX5mbAUvrktuYDaUkjJ5rjmdV9xSzcfS9g9rhtT5YP8ZP4lg+ZBLJdEfIVipCBfPXqT4To KZIzYFhG6fEHIcwYlakwucSMAYiizwCmhsEdz6cHymUhwaIm+EorrZZr/aSbAb1LnK8EgD7LfoUT E3pLh1N4CRDjhAXX25bB/5ucu+LpCLLhXia5DUzLrZ+bbJtANptAYlTZK+W2yd0yhrHf2hgo3F8Y IihKD/R9iu5zbbckLkip1g15vYsAC4Gh7+QAl9majC21BfVAR867F0B0kyveI7nsRsbIF2MdbOU+ syzFwFalXqLw4Y7An0ANbLzbFuQjknmzbcAbLnuAtLvgbl2OMkwnA2NtWxC2XWkJ8AnUSuBisqmb 5JFI8ggPLCrIjiKkT5F971yRSL3wdxeIr8IOsO7Wg4wKB6sDA7xkQX5y8KFNb7tD4u8RI+q6lnFr 2E38XUw0MQBP42LDpdIYMiAg2hRz34S9f3cxmGWuwt/fujYfRIJK7/fFzMSWp4tyQPC81VGGkvzY KAnIeGzi2rX1Jfeuc353ruWx66ird+AF+OpS/gKlYN4P6UrOXGnQxUbmHaB8dfOfWUun3LnGnv2t ll2HM59D7gAkuR5LreO8vUN8KSo4MCS4/3cjgqBM3XHt0mPH1gYcDZv+6IpPZo5fMvPNl6uG39M6 hPswZh8CTidazBuKclYt/vTa0rkji8lKp0AuO8p5efA30kkNWoYJk6lU+pAwvUc3FU6pJh0f+dr2 8ZU1Y57dPnzQ4tGJ8VkJw+Zl3bskSMWsvSde/Pyqpae/r5+8Cty1jdlQPnTV62VZG+n2XiTzFSQz WuUGRiIJCwYgTBkQ0FO6ft0cOCV8wbYXZA6csi7qvRGw/cu5VUvnvHF4bvUp2b4JlljOZhYEJS83 FeTuMsPOpkWnvn2ypqnh1IQrQzKmULEuj7rkxJN8L9TD40m+hJYCCSGVeYmkXn1N8h2y0I+dPtfW eVnYklZ2rqIWgpqzZ4Gmt7jBO6j4ftFbJFf4SOU+fUzWnaq+Di+CxPZzi0+eBKn3Dju2kcADtv8F ryyH39K/2EjQQK75/+x9CVxU19n+OffOsIvsOwoiAoICIqDigiuKCLIvsioKqOwiKhqXxD3GqHGJ MWZpYltrE5MYkzRpdrPbNJ9NTP7WpCa1aWJtreZrrML1e8577wwDjILN9/v+TX83T2bmLueed3/P Oe/gGWvUBlF0wSfC7d3cwmR//yEhYT2+wetDpdsUV+sWPZA3Ktqt+oHGCaPerRsZG+F3ojJxRJT/ CeWoibH3DzyREJV6JCNlaced0rTtw8PHdbyMz2Hh4ztellv5+2Y2rejE4Mx66sSy7mxWSrzTi0tP npicn3L9MRPhs2+eVXzk1jObE4fxF6xQ8aSYDUnu72/r5OSn1oF9vfx8+1oHNts76uzZlskJ9rVT 7x478sCBDjdTVKxSzu1Tglc57HWcOKZZstl3mU+z5meiLit48XjO29Vg8HTz8rxlXdZMdj1ffq5G WV39Pm/l3lP6+/r2cxs4bEqHv5n89YF8obLHcK4j+lri/Mq4Db9ol781M2A001frpJEY0RCRwwa4 u0d5BgZGMQ+PyPCoyB9QJzU7SQF/5e8LsmdNrN6ROnFt09tK5KnXriYlLjn1zZoJ8ZnTWtvbzByX zNzelJbs7uBbkNbwTEmWYbRy+GhRWKgiKbXjRxYsiB8uv2LNqwNYkPo33XwgCx4UFBgc1P2vZ0Tt 0VR59FK3G1N3/zIxaZPztsEnMfzQ9YftI/w8fKXjvGi313jfGe77r7daKFTayB+7/GhHjbR98LEl s7cq5zvaoN/VRcobfFKmtJ77WvGzfmRfwZ0Lc3N3dXZztVIFdNdqgCZ/VpTNyl+Vrd8+5lDpKyUO 8D50Pc2CDdA8FKY0Onzami+VWxC1oKquPkVe8WMBgf4+Af59qceZyP9F2cFXX/3C1r2fnbfPuT/y Vcr+q6/bevS3D/Z953qtmZOOQx3L+XathtYorZXKlYNO4QNcx0fw0lvrQrKuC3N1zJKZdqX2jNL4 9+/CHJycjReu53WSD+lol2ykM0rsbHefAfb8pFWadpjphAuagY5h9rIjs3e0WrGif5WmVqcsa1Od lam105auX1/UTuQl51OOcRHx2++fp5zLm9F0vNTG7pSLclD5L6n94TtX1wZ5y/uvfmOojkuPCN4Z b+sWf2V96oTt0+Nqd/EGPgyzsc4xRvybPBdJ/B29Nhuj3e5vWldqEdSNjkGLSjecrJ+7avGz+yvz B3zkt+7551v8bPaA5sTdGVO33/HbiysX56fdFXecx/O4Jyz9wpm50Z659sGu7v1lV8f+rt3qRd2n JdYqQxtHVefExo4bPjVueGS7nWDJ8I8/hqckTXikpKCxeOsDWZ9L55XTOzIytt4/KyliiNwAs3gr dtOGDFzX9rvLdy7c3mbBkQ1zwHwAHPnYu9gye6OtvZVqD3Fyk8rOC8pu+5Exs356/S1STsT62sff aZ6/tvFVHp7/YdjGRQlRklxfO2aklHb1G7k84sq6RTvWfnCpbSF3Sngsd2qTpXbUMd/lWQejUSKT mLYSJj1QfYYsICtff224dIk0vre91ci/ZF2sSv+GTrLtZlWLGotqx0mKonz25Ze1v7mqvE197VJ2 SX+79j0PbVUqpdiufQ5CnzZSQLc+b10nITKS90efTawo/SwgOiJq7uep4yoOVEf+7L46QdCY1b5c mr59a8cxafoUUf84Jm3cOnP8E08c7SmPo2ToRtui1kGEDB8tm5026sxXjW9Q31Xjx6z8on05v3C6 S1++6Mu5R19WqxWqrt/48sCB6clrq3LtIjMaz5wRfdvYRF8+pLBNY+IcDtm38VOHLGwoLEizB2cH JzvmYLBzsFaDUP8RqlZvWKv8aZzPcLfgsPZYksNXOaes/aqGN1ZflZ6+XPzh7n3SdyBqf92R1yh7 LcZuG8pnYWKO6O3h5ebiYetm9GBuPf/ao0cdQf130j1qBgnvnr10/MS6aeOnjl90tmOC4Iaf5l98 27oge8YdrZOTlOmGDw8ePj4mLq9sZLQxVWWqtvTg2tkp3o6emdPn8kk9vaantrWVf7d1f6K27led 86/Kjv05kkts8A5l20mDh2ugb7+D3OVwQIIHlvi/JyvYdyxQNtv/ZZ+057qj9BxvSVndlNgxWTqx 5MrQzMdyOlJ6+FBPTrDGlEMkscAMVsnu++shpyLPLI/HlHbexsM0Ouuilb08M11qve7YVT5/yp89 5bO65lYp3H2Dve0e5OjiYvOKcoE3KquUs4HO9v2cjWe5u9KmElQeGTDJPRhr6bKOXR3L+N3aWnqJ dG8X6h6g7mZNpi7rZpXswfY/0SK5n4P9N8plvusfGqVxHn4+Tv0CfPrzEx0+HVckR/hX/Y3ltjtt DtBqeAxLF7PUURFjp2JBPBYL4tgxY2O7TNrVfy7ZxzWxums1/bNKMZUVqd4YLLIqRR95pMggfVgz c6U1Ff+1XruifhquXA9rGJM4elSD4bPG0YmJo3tfS49NTVlx7cqKlFR8Gvvhcwqe7uylYZTY58Kk DV82jE0UuogMiB6FZXY0ltmDh0UPtqKLm6+0+yg+VuJ+q00r8fXvipX4kX3l2XxYbyJbXaEX9y6m hdXF2j1W/RuV6KC4sVi+x2H5Hh4bF25F0luv4PsqbZcV/rJCbYXPr/Qi7c1X/udvS2IvTeLIZHch sdHBIS4Qkevm69tdagvJb10Z6KvkOzuekMZ2qRz8/AVROXiyLD7KVp7aiwJuVlEY0bv4ndKLWYe/ uv7ydQg0uhoCuSsLHOLmH+jWdSAxWVytN/RRQqpHSP/diyAWdQr/24lJR6wy4kRFIdA5WPK0Cx7q NTDYy5LrblWMvprFssrBP+iN+R7Vj523I8MglsBSRbSNDB010d7NbZTs7z8sYdQwK9HWh9pIX/Pr TWsnhtd7E7eXmspHfYg96xY0eDKrFuxSc+mrCbWaTN50frw3gSxrNa/cFveeLIKNYxHJbmE+kSNt nZwi1UJOUERkUPdCjhY9Vms5fY2lrrUeeXBv+bFnDSjtdjKDqA2FstHMP9kxxCMsxtVgCAgNC7DY ATTOaomor9Js4MvOVSura7qUkCbLUb1KZaW0dKl3uYxmudSaUxLLEBl/9NBx0wa4u4/zDAwcxzw8 RiSNG3GzjN/HylNfQ7CXypS0rVdF9F6xOnE7mSiAxbApIhaHDxzBh7ARSWExI8K6x+It61l9FP3m 9S6+uQ/W760ONvC2Yrgf1v/x9N2JSwj3ZiFRPsEhPt2l7lon62sOUpQtykWtjiYnDPA+xEv7IF7X +lofhOmUxZtFsglClgi/YVIwG5YwKHLYICvjobXqW1+Fourc938Q1TkvX4vqnEOQ77v8jl7lu2XV 7l+3nHRTy6lVPSHlbQhpqvrZ9XO0jbjAq3sXy1wN7O/v45zFT96mLHaIPvpXe8PcEu1lN2bvZr1O aEWAPtQNpZql4HtG67W/t87AwVLueMoxLjz+XrWC2PicqYL4kbmC+HBqyvJrf18O7qetMPbHZ8fM m9YTO/Oq+PuQIHsfZm/+dtcavzetL9psEmymLjWxabC1Xmo8QMytmNbJ3GBrhcdO7TpjlkV/0xXr E9Jf9nHs73OruqM1nq3UITeNqs4ZEaPWISU/E+eqouXLX4WnJCU/XFrQWLLlQNbZrhXJpeC7k398 Kte61ydNnNswP6xNwHm4S5AtczHaulirT1rj+Jb1yvRD/LNuug69aeUyq7u62ydbrWN2+oGo/7s8 6+fpaU+uoP3tmXW9Ul2z0/Kq/qRrX39t+NvfYOlumupYoRY8Lb1O7CLka+/di9dZ1D+7+tmMVsN4 y1JoT5pLuxZGLWmPAG0v+6heaN+6TmqzUUsvl1W2uLtFyfTsjPHlWsm0h9sr8TctoHbXj7+9Ry88 WtRTu8ehfFIrrb5uhYfUzkJrF6oRoDqgV6pWK6/d7SO98uUDD1gWYQ+I3HpZ48IZuVX5prMka7dC lGQt/FGsb0NEDA1wDbBjrgY7V6s1WetO061GK03pmkllz57V2mvCgS5rmd9ZhPdfrjvxamWfxdza hubW9C/1wvyHuLn427oZ/Zmbfx9qt1b4dO+llitndeX6lFbUXb2se1F3tjXea0sPrslM8XbwzEoR Jd7u/t+7lW9d8bXZpJrZnIq+VXbuz+WuwwerxV+3AD+ng9xVK/6eUQO0K48dC5RNtp8/Lu257oTZ ZMv0VUviRSm46buhmT/J7ZjOesRD7zxb1IZVf7Rg8L6/HupX6JnpaSoTW+PoznjlQZ6aI7Ved+pC PZLGyN41ZrWG3IOTTbcuJ1thTHl04CR38YdapR27MBXbmuDj7O/voLRI27tqabD4W8++aKlLtbkH g/u1wrOTo6nwbI2ncR6+vp1l6O8kBxG/o2+02zbYxLIgFo6VCeZ5YaEhPl7OThHBwbRjnLo0GzFC /F2A0bQ1hcWvS2BF0vnzEqYf/AzTfvDTxk+5XGwnfk/CxnCEp84ONQSH2M3mM19Sf0/i2mdpJ3kg d+EuZ1O+fHugT7D30P4Gaz8gsTrH8hcklEHmXww9/ywfrtxdj3Vn2o1zticNbVRpG8rSWD5LTQ7L HWdvK8+a2t8+SZ6aZm+fNlVOMg6NCPK2kRLtUqNth9oEhIa69jNtbjNB+2Ec9Zdh1F111V83FqOa kLIPv5LDu/5spPkXKxLNlXrvzi2X5M0bDe9v7JjqHT00dpM8cnHO4JCjjo6+Sb5HHOy9Jvkebd/g NCe16cDEcc6PyHa28qRtdWMSL2VXBPgkNhrPTR7V6O8RWRLPPZQ/i18L4j5y2tGKxNgTJ6aniF+S udg4NPz5DjvpYnNEGP2SjHL+4awpZQUvK5N++rhnQnjA4aLcB3h8srdx2uphoW+fs/WKfLgmfCB9 L3jGUCf38vsm3Orvm0hJN543vqn9yp74K58Byf36O0hOBgmwdRQ/MBv3lulnabQfUadvVLRPuS7u /Xg7PlA5J681HXX+EJ/NQfNP8ol9BidY7HVtY9qrMt5oDHU1ajtk0w52hgnc98Rj0fHcN0HdIzsF z7loz0nmPbKNrnh17pFtOH1k28SOZUfuEbn4slRgG2abbnWPbKO6R7YxlLZOVffINu1Sl5LBJyvt dyvPSVcf5g5h/NSfuUP7hYfEhnbFk/bS/qn8ALj5lXnvOvsw4yDPAKO3p7Hr7NlD2yh7SFiYaYtz Vx7auVV2qMVW2X3akM64UXH958qNOeNSJ1RI+6dN3PwET5Zmdvyl6OqLtMUdv7Na+fLovKKk6Ttp R8Mb+4hPsWO2h6prI3c1ehm9vCE1dw0dnBg/OFTsI2s0hHgaxNbQYgc6L+67b6HYge4VOVHyd1L+ brkDXeRZOamax3H2MG1m93IIb+HJod48eFjigQvKSSU10CGwtRxDOu1EDc3a+HXbSRWWNhg9DUZu 2jtb245uivQdD5V9eN5G5VK0p41f817lQbWXaNgxlXmhF3tm2nk41LRltnmLU7GxtcVec0nSNWW0 d1hkP2n8IF/+Oo+WKpWnuM+JyBE+fCuP6Gjik5Rvjjn0dzVKUb7uytNEKRj8emFVZLGPKtglIiYS YrO5++UDHY+OH6RuNseDpSdWc+e1PEm59JqHg10/XzelmPbP/s7YaPMx7UDn8qzdIJshXjadu6ga NO8IHRISn2DaVlTso+pJ2+yODJM7lymG5JvuIue21byLnE1BtbK+25Z0SoG2JZ3yoGlLOtpL+7Sx 3uZp8gsv006X6o7L5n1UaZ/RuCBvL8GnwXCTzeOk05Y7zp1fzOvfXrj58APKjWNNFeqO2r62U0DJ hf6ixk3yc5Q6Y9CTx3trYos5XKhR+0d1IUGeHobXpDstN4q7xI9lahvFydtWfc+TLvnXPddjf7n9 Ks33NemGiBlFwBC3ADNN89dwpn1i6XsDdQI5KFGNxZGh0uXoEPOucMveaG34XtsVLiqcdoWTzklf yjfdVi7tkwrKdCJHfNwzY/EwV2/zHtuKkZ25dkZ5NI47x5GvS8XQ18fqLtsmX48PFbsGe4aKvVS7 bgEH53tNuUKbxCkn/vGq4q/us90I+T/GiOr0jGv/iP7mfXK1TVRN4qJTo+pqQ7odGvMs9nVLfVvb 123C+G77uhkd+rJJHO2s+gZx1G1nVVDyFEwZ6y22eJPfsNj8jXb9/crmhM1m5sscnnbzIu8RevQM iw812VIM1bCjMR4JWOzGbd7A7Ukn0wZuho2d+71NHDIrn3u6rngw9MHx8BfjfPm87Sc20Tf5/YVP TOOkMQ1jZ8dxjJ3Mr8tfiap/0xfCwtgwFsvi2Wg2jk1kKWwmy2DZmNPMYRVsPqthtayRtbDl7ERy +dKhrYamoc2pCwxVqUWGgtQ8Q07q+KHJhjFDx6YON8SkhhoGpwYbglIr583zxzzOPzEhwX/xokX+ DfX1/uEV5eX+rgaD/8zUVB//gIED/TPS0/2zs7L8Pd3c/KdMnhzpH9l9wzbzxm1divdWW/QNVr/f 8AyJj/MMjfMMES9Z7KIiXnHisvg6h4v9b/HipnPRPCRU7JGrvbj4Eki8xI14o/aMaCeO3XEs43Wz P7GdHd/G7z98WPn88OFfx+O/aW14418cVkYeVu4XF2yOTG1L6GBH+MnD4v8FCeK/to6pR47ILKHj wuHDPOTw4Zdwzeo3KcfQn3hACVYbXnOJb5N+daR9oOha8hBkjFPj21ZSr6I70Lj2K2JCZkeOtL+v ckP8wWO6/p1vp+dMtvCcEgvPaWVtbDW7k21kW9l29lHygruTtwVuct8cuNJ9VYNHXfniwIUeOcl5 gbPdswKnuE9L8hhTnhiY4LFi+fLYGdOnx85KS4tdt3Zt7Ib162PHty5dGjvA3T3WMzAwlnl4xMKj hseOiI+PnV9ZGVtTXR0bGR4eW1RYODF2Yl88qU8eZcWJuvpTX79F+j/ysl7/Pvro/6K79f591eb/ Te8zWHzHLr7ZKqD9ouKmDR4TMo2NcZ6WkTRlWpKVv3EIDen2S4Wd2ySY1pNiTdD5hZB7H79WkEPf Gmuws7ERP2G4nrM4g4ONrY+tnZ0B86QdNoHOTvLaj85+dKzALdDb6ODmlDerl68dDkhfx66qmBi9 d+HkjrGI4trhmyqTpzbXx0q7rw+U3ueL39nEr9EXSm1bFSW24Je50sY+fS/BEJ8C6awOcfhD8DJ3 toqcHmgDXuLnu0IaDTRJx6QOFbIfMBnYYsYR4IyOPuDaD4MhwtBoFS/3wHnDeeNgY2Y3HALO2YTb LNawFTgGdJhgGwxk69Dxb4MmHX3C47b/bQ12ST0wF/iJ3Qd2H9gPAPLt77f/vYZ/2v/TYRBQY8Y2 4Nc6dOjQoUOHDh06dOjQoUOHDh06dOjQoUOHDh06dOjQoUOHDh06dOjQoUOHDh06dOjQoUOHDh06 dOjQ8X8Px/GOR508Cct16NBxC+y5XfTz+TfHI/0ecfZyvre/m4Ym4OP+H7tkmnHU5ahr8P9X/EyH Dh06rOKE6xc/BG5OboVWcV8PHAcuurt2QwGwxf1V9+sqPHyA0UCzGfcAz+noA079QCieU6xiWw88 CfzJy7kbCoFtXu9522oIAaYCm804BJzUoUPHbeLSD5yqJvvcZxVfdIevEZji29AN7/i+42fjl+q3 W8Nx4Cu/r/wTzSgG9unQoePHhgA54B5rCHTtgRbgmwGzdOj4l3BuwLmBcwd+HdSs4fOgz4NnAZ+Z MGgK8KolQkaFfGQNg5f3wN8G/y20OfQrHf/pGJID/CLMM2yZhhfCXgjnQIkZjwKXLRExLeIZaxjq 1wMLgDci3XX8KFEPPBdliCrQsBV4Per1YZ5mTAfu7oIPhg+zipU98Nzw56Kl6LE6fsTYArwR4xST paEFeAg4a0KsDIzsgoWxv7KKG90xYihQM2K/jh8j4oKB3SOdR27TcGHkhfhZwAcmJEQC+y2RaJO4 0xpG9euBZuDb0bN1/AjxNHBjTPGY4xoujrmYFAmsMuN5QLHE2Oljf2EN44w9MAXYN+7z/1SMn2QF 3+j4z8EEm9tEkg4dOnTo0PFvivwJjT8IBydctobkET2QC2xJfqoblGRlYtzE2olHNbwPXJx4cVKC GTnAeh06esVDOnTo0KFDhw4dOnTo0KFDhw4dOnTo0KFDhw4dOnTo0KFDhw4dOnTo0KFDhw4dOnTo 0KFDhw4dOnTo0KFDh44fAya/OuXGvy+mHtChQ4cOHTp06NChQ4cOHTp06NChQ4cOHTp06NChQ4cO Hf/+YIx5conJjBvscbwAL/WYMzecqccSs2MrtGOZ+bF12rGBBZjbGJkPO6Ad21i0sWWb2DHt2A7X r2rH9hbHjiyBj9WOnSyO+8mbeJN27Gy+7goeiw3XtGPOHIx52nEnn67gzcN83ZaNMC7Uju2YizFA O7an48msnjWw5ayJ1bAqVs2WsCD2c7xGsBgWy0bhKJXNYIUsl81kGWwSXkEsDa0q2XAcTWSLgSCW ZX66mc7m43M++lyKd9GykLXgegpoLUGrGjYPZ5Nwthh3xT3LO8PMd/Koj2ZcrWd1eCIWPY0GX2pv OeC6AS0EPzVsLlpW4LUc5zXERQW1EVcr0aqW7i7CtXpY7dZSNaF9FfWyhDgQMohe6+i5ClCtwPFw kncJzsawaKCVMJwtRMvl4HAYqNWDr3pcm0fvC9E2ms0iKZtwpZl4ERpvRvsGYDHuqdQWkMxLiJ9C HAuJhQxCvhbSbpCmsWaL1uJaPd7nEdcVxH8Uziupnehf9BBF2qkjOg1kefXZeVov87XzCuq7gXRQ i1ZL6J54ai7xIegLPhaTROIpE1/qE82k7aYeVxaYZYgyn5v6sqadBjqvxDPzcB5F+lK9S6UbZabT XQLVZq2aZ1XfRGetmqSi9TxI00IeU2lV9+KZxXQUjvYR+BS+NVfTi7XeVR7+Vd129l5JPVVp/il8 s4mkWqLFhzUJTNR78pVk4QNCElWWJUSvgbRZQf2rslbiSitJXk/xdCvfq+jiVfPJLvXauyqVetxC sdNCTwpuTdY09SNaLkaLW/momoPqNMt09m6KkBpNy8J/qilL1Gh6Ht575quy3zM7w2/5+Dn5daNK zs+d0Pd8Vzcq5ljMczFvxDzZmefqRi24mpEd803MYzGf4P3bmPaY+u4UYuqWtu0akTttoW9MVUwh jUb034040LL2H0fWt2UON26w/jhmtg7sHwxJ/kb9jQa7e+l+l9Z2DFZW/zsvnWbn2WB2mp3GkQNz kDL5fdIn8gNyEzRwml3EXfH+R7xfFq34b/hwvlN25Ttx9g7untfeTZ+ntTP13E/77Lx6HrTxkrbI v5Pn8mfYO9rrNPsVtRpIVF4DnmHtrF18cnv+CugK2PHfoM+pzE/eIH3CRuA1VU7V6J7GaB0sBUmf SBUC4or8O2g+CLIESf/EdYEKnIk7c+V58jNyhXyvvEMeJ/fDuT+u/A4a2YTe3mbvSJv40/wkeHkK nLwnv8nelY5JTtJ13irNkbK5nVRKNElrgDsbBAv8UTsbZP48z9xvXBfA7MCNn7nRLoDWDrjzKeEi 5gAvspNab9+rWuI27D12Tbv2F/Y9f9F8fyBkSr5xTdAAv6elQrT/BLZ8SvotjgaRLd9lXsyLX5b8 pHfkN+VcNs6qLR/jXpotH7sNW35qYctI8ZJr5d9J70FL72qv0+zXRCOKqLwKCFtehxWFLV+1sKUX bOkFKZj0GWZL66Q/yHHsC34PT+GJ0jiexTOlJH6Kb5Y3sG/ZNraWv8wOsucwx9rA7uTb2b3s//Gh 4OAKW8YeZ+fYW2wt24tev2Ol7I/8D9yGu0iM/ZxvhHwfso94DNvNX+fj2KtsD5/AA/hc9i2PlVPk ErmWreeb+XZexSewOaCwBNG8jr2PecYWRO2vWTobDwpijrCWD+GjoYc/sJXsbr6b/4TdxR4C/x9L H8un5fUiqOgzmsXQZx7L4xdA9RYvqzFtGbCi3etaeyufvT0P+2yVPhQeYUYzslQkLAfNsyY+mv+a B/OxvIwn88nAFdbKg1k5W8V+xg5BvjXsLt6PbcRxAzvK7oRmGnkNvPYZ5LTfstfYKu6JlifZk5I7 PpezB6Cbp2j2cxf0V8VWs704a4NWf8p+AcuNZDsxwq9hY5ElZ6LXKMyJRK81OL7KHsa9TLzq2ZPs SX6En4DeK9gQipXziIoPb5xjnogN4fXi2lOw7nnmjbn3VXYVcYN3ra0aX5/y9exTeY6IEekP0mfS 63KmHMcf5q547inZRw6FfqAh4cXw43R+kl/id/H/gk9dgJ13yHW4/ktE0DjZhxWzYrlIni29J70r fYh4M+kTuuyiX/iyScf8PvlN3srP8BcRafP4TmAOnyOt4+/yMewl5KXfop8TlIVFxL0k3vlLoDyJ sJcQACAbst9reJNdRjY6xjazzfDBC8Aa4Ft83gPs5LukY4ibU4iMy4j3K3IE9HZGKuYxvI23seHS XaD/Hua9uchDL8FmP4NlxrIJ0HS0tUzxr+T5fyW382S2iX/ApyKq6/hEtp3PY0+z42wfuw/+cDew hyVzf/jTfkT4C8A6Fo++50MPG9kuYD1bwK/zVfDMy8DraH8HO8O+QKSGIsdWwqc/Y0XwxRcFJHe+ FG2fR8TnoqdDbCv62gIeNvBUdi/PYA/Cj7cj7jfB/8fDl5/C2Tp2HPnyCk9nB3kK2yHFIQLLweVb 8NunMdffDV/ew6r43cgiD8Oj/8S2Ie/cy/6b/YR1sGngczb59Xr2JUtG9GSi9Vp2GNb4BzzmosT5 LF6EeDrJ/sz9MKtaINnzlXwNclArW8qXg5svkPUSBE0pBnF7ik9lb7DH+XQewhvB2SW2n29jX/Mo VoHzGRa52tKG1s4EPoVl3GAb8RnEriObI1uz9ylXB8Far8Jqz4iMjrvtuPKK+ckiGnvUPh3MntA5 qnxqbmV6F9ffIT95i+y/BEff4/MZ0DqPz9foqjgTNOEfzIVa/cb8Lu6K+y+yZ1kj4jUPK718WHM+ jgqg2U3IGy2sDGf58Ox85KVseEAxsthSHKXjWh7OV+C9FK8ytMjBLDIHLbYg/+dSfyvRXykrwYwz D0cLYQVBYR2u52CtmAZfygONFZhTViFfVoNiIWjnsVx5E84qYUFBXfSQhfe14HMltcnEvUxwUYgM WAyfqAP9IrTcC653oHUuuHsK583opQQen4q7eejtTlxbjKs58KINkCML7XLRTx18rwiSF4G7EnBT zO7HZwn1WQxKWYigVvSTBw7EarQAPD+E5ytJN83ouZRybh6eyabPQmhoDj1fTdw34LlG8P4gWqaD Zin6PU6abkGuWEDXhORr8GQp+rgXUs3B0/nsY5xlIHYW4YlcjOAl4D4br0yc1SNiMjEy5KLdTNy5 A88LTdchdvbhqlj/Z0I3pXhlidEU7YTOZ6DFJthDxG45rHMfZJuLVhWk1WL0NBXRVoj+hCXvBbU8 cJiHs3JgDtoIyTLx3Ap8zsZROqQrgeXL8HQhtZxP1JZA53XkT3V4qgGWWAHO8tG2AD3NhdbS8Uwu 3jNxnk+yCV0UER+NeCKD7JmLHlvxvox0ko+jheh/BVoVgO9aaLCAPO7n5I15JHc+aa4APpNO+hJU 64inKvYIuM5GPkmF9YTvluE8l00H7zk42oV7C8EPPBFnWSRJHh3Vkp/kUZ1jkUYhHXfycW817mWS BpdBu7XgV6zAC3A3HferoFFht90434TzOyDbGlh/FvxoEZ4uwqsNo57wR6H1NOh5K15C8/cQj2nE RTHuFlOLUvKlAmhxBT4rKRIL0LKQYlO0WEneUI676VSpySQ9zqZ2gmIN2TEfZ8JvVa3PQ9ta2GgB XdmAPrIwdszB80JLdfDnXLQpxXkqeJ8FWutxpQ7y3IX7FaA4j/hchl4LKacIGvNwlKNx1IAZTA5k ryI7CWnKQSEP3lNMfpEP+uVoUUhRtBhPFZP9ZuBeNjSURXFzF3jIxziQTzaaRxxm0ns6fLwUo7+I rTySIhufdbCoyD71FGlrKCbKSLtLYKkyWG8lKGQjywhv2wzfy6UYXAbtzgFNQXUWZCnAnQzYLANc 5lKMZOJ5cXUVeV0uxcMiJmavy0FHUKoB/2WUJUsgWSHeRSYUNbhsyiAZeKINHArORAbNIA/Lp0gu onyQg89i8rJKivYloLIb19fjShpxl0l2bQRnD6F1BY7n4n4Z8oKILpHbNoDD2eBpCWTNxnse+BK+ sgxPF2Js3IK764jKQnC4FneKILuIuQryuypoKB/8P0vetINsW072ygXVItCaTlYTebcV52cwk5hD +WklRUYBjQppJMlS8CIivIZ8KYv8Mgt0VsHexWixhn0OSSvIonOhhRZBh/sif87Hc/PJc9ooPkvJ kkVUOdxAV4RHN6KfQvhwITxrEY1IIq5na5FQhj4EnSm4Oof8Ix9SFuK4jGozOfCSTGSuEvLkhehn HUW5yBIZ8IJitKzAPVUfueSLc4gfYZ02nG1C/yvRv/D3ZuqlBM+uId4W0/i0E5q4C1TuB7VGHFXj XVTt8ohGFqgLjWaQjZdTDU3YuAjSCD6Fniugk3qKnzxoPp0iLZf8R9C7A71thaZaiMMcytsCItNW kDfnkAyZlHOzKUYLwcNm2CSXYlbkHpERMsnDyoWFuCNy5nXIlQZ9ZZNFhV23kn1ToCVBKQuZIZes maOd52EMEeP3SYxfIrIzYJUWorEIY3YxWbyYZpgFsNVesnYu+UUGjdxlmA/m0lhToMXLSvK6TMoq OdBoCY3cxSR7FVlmJY0wj2Pk3IZ2Iv/Mx6sSVwso21TCq/aRzebiiqh71VOkZWhSZaHHZuijEvZO wUiXq/GSRkeFlFMW0DpPWGA7rFZIeiuB3MXkd1Ww5h3opZFkKaeXqBYuphG0kLgoJnla0a4Y3ptP 9WYx9hTiVQZOUnC3Hn2n0aoujTJQHmxUCIlm4bqQfi75fyV5vPAMkb/zIe16PLOQ6vPp2twkD3dE HMykXvJpdlNANiqkWcp8yl1iJjaHckAuzfeacLcId1rJA3NpHBWzmWLSgBgVUnC3BM8tgkwimkSe KaLZlMgR95InzYUkIj9sJjsJr1iBLLAets4nKfKJ1wqyazlGPHU8z6AMnkbj32wtunNwLw2aXEHZ aQa8Tcwu6qFv0c+j0Mz96H0PnhH6FhGfRfPHFOI8H6P7LPSQTmPnchpZyijzlpLVF6GNGDuWUcyL 0aMZXGWDehtFTC7NXmdDR9XEWyZ5eTritZY4y6SYWow7NfD4EqyzcsBPK9pugG1XwFNyKa7WwmLZ 6Ose5IpMygyZFNtCy8vJ/lk0M51DeiykOUY+zZjmkO0KKH7EaJoHTlpoPLmTOMyGbfJoNlAE2+2l 7JqPVW82zSsX43w3jWX7aSzKBJ+ridZMbTzO1ObzAk+RhLNJS1k0Dq4mWQopVkWlJ53m/Rk06xPz wirQbSHrr8G9NrqeSxyUaTPQEuJNzFhng4s88t4SalED79gEGfNprieyoJCzGbQzaHYoRtql+Kyk rFNOo3Ex5bYCyu7qeFyHa7Pw7F48NYP6zUCfhbi+CncWgraIUyH7GsqvqRQBeZSz1L4zaEaRT71m 0ZyugtYI6XhfSrrIpNl4Os0mRFRtgQRluFODXCg03ERjRAb1W0T8FOJqCc1bi9hkWK0KvQtpRNyV aXPaEkRgPklRQVopxJMVpPU80mMx9FkEfqdCT+r4pc4YGmjueDfiS+TQTPjYPPL+MvoOcBfO0oiu mHXmwuM24plF8IU0WqPt0nRaTl4+CxYQfryH1g3HaQ6RS/O5ItJLATx3Fa2BVlI2LaaInwcNiJFU fJ8ovn+bRfwJCcX4vRnUhVYrSd+bSWNC58L6oj5VBcn3U86qot7m4NlSbeZYTD7zLFqtIQ0X0Si9 TdPzPLJmNulnI82v7oCHFoIPoUuRf+4A55mk0XzKwNmYh6vjRis9WU2rLyGRSk+NlnoaKUW0iVVU M+6k0ywgn+JMna8U4u4+cFwBGaromSxaE1eQrzbQ7LcM1pqNqM+kOBNrVZE51ZleMWW4MuhGxHke jUy55DlizfkCLFpAmsyllpn0Lr7jPAJuKzFjKKRv9Bq1USQLFhCeU0myNcAbxBx/J2UH4YWpeP+A 8mwe8ZlFmbSM/K2A5gCLIHMlXosp9xfQGJVLbcV8txaxlE/58DgkrEebOtwT/ivyXhVyz2KKulIc i294VuHpKlqp5FE+y6bZSRZZJZt0mE8rCxFnq2hEyoaFRf8NZOX5sJzwi1LwVYXzVdB/Dq01hIeX kq1qYZUmtWIA2vN4EXy6HO3LYakSUK1jv0DLn8B+wmdzoL09+Kwhu+fQzLGQ8rXqbQXsl3i+BXpP 1qoec2iGLNZza9nT0NUc8hIxfm0l664HhR20oiqgaM0HrVn0mYFe1HVKOlGaQyt7MZffSPPVUpox NWur/ArybKGhHPrmUVAQq70FlNOF52RQpUL43GrwkMbeRd/18KsWeqaVZi4NJIOY0c6g2Vw+omQx xUAz+aPwrLnwhnzwKMZfMUpX0IokjcZ9MUuZTt6zHN6yRZNdeFg5SbcGV8SqMY3mwSuoHlJCY10R 2uRTtlv3P+x9CZidRZV2nfp+NKBDCEMCkyCbRARFFGQbCCQhCUkvd9/v7e7beyed9JZOJ521s++B sJMgAWRfBZFFZAlGMSABBSMRxBEFRFxBZ2Tt/z1v1e0kEJH/mflHZx66nu/2t9RXy6mqs9U55yMn uQy97EPeceRabsBcrvPjnwPketFeJwMXvLTdyTmoupJW1LcA91RzVE4+PUd6V6DOJYY5ofxdE9dI OSGbg0ygParHWTn59gzzV7DOaq7+MDBuijBUTVMZKYlKsZModSe5XpcRK6icqJxcD3nACLFZhhy0 001MpswdIVYsAloZynuqDejGXFZdRh1KXM75sxzlKJ7XsVcpSt+bwTFMksYWqEVbDkisJL8UIRWO e/koT7wbJWaLcY0pv7CO3Eac4zKXtfRR45DjrMqSr9V1U++l52pCroFaimripArOKeUz1nDE88R7 bcQtPYCfzrOZpH9Flh9hC5qQbybhs9pLGbOp82mi7k21L8od1wPfzKaENB5tXkcNmmKe6yhnF4g/ 0l4TEzW3cmSrMeoqSVSa61lT/QAvcQ/GU7U5KsGWkXpqny4C5lPtiN7v5WxOk/LM5ygvAKfucOl0 1hIj7xzG+nV6IeWmLqJEmyP/52DXjnb3kkorHktyRbXjaiHhlCDOn4UZorz9Rs4knY3KqWVI+yLU XillDns+opP4TPfSWwkvndvNhKebS4pl17B9tXh/KepoQSlFajfque5CHM+SxivL2buGmoIcx2EO afIUtFPpVI70pxncbyd1B1HPdSXJG+iYTqSUlKbuYArL0fnVznX3DUKiEme3kNOK43wtqUPIcyIF Uk8tr4WQVPxZDljHuJIznJWNzBnxsoVqcusBTR2LyZx/63nfaZnCrFE5tg2UlPNoX4Q4tdHzV1li ItUQrMGIRjE+F+N/LUc8Qu3fFOYMcSW343wh5ZAMYdeKOam6xT5iY21DC1d6ErVN5Iis4ZsqY5VT s501V5NHraeu4HZgrQL5vxRxe4bz9DxzH3K32AmA9LW4crrY9eTQlDe/0txvbrIPoHbl2pqJsS7g SCSIJ+KUpBNeGxHzUniKZ5UcM+3zBM9fzCV37Shw1Ot4onwWYVlOGivjnSyxxARCxMnzLl8MvY2S t09QDor4Z+V8O0YeW+ssI+eXYBu0tlXmTlL4LNu+Fn1fAhhswHiqDn0VV2yX/QvWhHLsKvvcgvdu Rn7lK9uBJRQzX4jS16KE5ZiXC0AF1A5NMeU06rUKpBsFtl05IsUkukaauWtQzZXitOjKyxXJW+VQ RjW5hAjXx2Q+LfBpFan4Jah1HmbLdKTv479yFcoNf5c6jOXkGFVa3gT8tBQjtBwrqRe4ZwIhU8Ca akJfbsedS4ApCuYKcmpz2EbVaZ7PfqWpV12GMs9BzZs43pp6QAGr8W4O605nzzkovw4l9lHHOYUa NZUV1iLvEsDhXJSt1NZpkhTnryafEyKEe4mtVdPaSW6kmXNfscN0tCjEkZxFKlrjqVM7pdQYaWCW /HCaVnGKdyegvjjXe577q6ol6PG65lbcKUcLVW/Ss4cU5W+r55IXYhVVI+cc8olNpE916GmeUmqB 2oMisH6GsuFStLsS7axC36cSC6kd2vn4rabmO0QMq7Zqq/g8gjXTgWcRyrbTPZVJki+toC5R6VYb sUkNuWKXMwt63kw8pji1ntBRXcp0Yq8oV7JyQI7TjpGzmE7OZg45SuWnlX8uUFeTIWTq/I5HmtRN ZfJJXKX67vmUSPIsoYoYS+dfr23mjoeWX+dl5ig5Y+VDCrSWDGM+hyiDKuZuQbnnAYv0gaLMQtId tpnkANqQo4Vt76KOfjop2GTqurLsew15lzR5nR62awapcdRLjHHKYA3U3jVwx8fpkvvIRThNRD3w ZoY4WbUz3wJ/r9zTbEpAYT5x+w0ZyqNhwjVMveVSQKNIvkYxUxXxSogUqkh5I0rKE2E5FxN+Shsm IXWirOvIL67EjG8HdqigBJcgfzmd3FzSJD1+zA5gppyXIhJ8Gue9GnJBCZPyqZ77hik+TRi3w1XG EXJ5nPY47POW3kp4HfokjwFXs+QU11VsIFeKmsSMLynu9VMt6LfTS4dJWVQPoLsjrh2qoVcNuh4T /TtzWYfCabIv1+kDU14yc7QpZcZStxNmq12fqwkV/d9EDXk1ebEFaFfGc9R54D+nU6nh/CgSU9bw N0ec4HYhtG+q6RqNt6YStmnmzxPH1HBuu1bn/NjXErMk+H6CehzHpRdJI1UP48rOe+1Illi8jNqr IjmDKFdSnLS1SA4tidzjyEen2U8n41eyN45Pj3NuVXNmRQiFHNpdw/4VvEYyR94yxZrzngeLk8tx Ul6cug2VTcNsx6WQGnpJJ+bjSAOjr6L96BxKmnO529FLPcI8lj8TGK6A307gPqV280i/kux3nny6 ciN1kDebuAebIeVUuNaQM0kPpNTAWa1J7XZdSsmBfDGeJXwe1eS6HYTcQN5Kzhgnnbgj6t8plZQl zUj7upzmsFRH2OdLe2inPH9RKj26W7scbxsdWA1OIkry7bhJ+LIczgn7WtMY/RS5neRA/W4vNe7z lySCGq6zBNdhcqDFCVPSyCTB3cd5J8w5HvetinseyWH49MDdNHHuJA+DDo5/wtdRSX1BkmWt5L53 gphfZ/sCQLkO+Z2mXXdharG+1uHtydTLV5MGVnNtl1HWOYf2vtOpI1T6lcF/vaMrQbWhXThrp05F tf9VmEOtSFN4rpqQOtIP3a9rwGrvoK1ynvg+Sz1Umtby3XyrnrbzWbY3wXnt9IVFvBsidlLrZYWE Wk80cj/YzVG1omgmB+EkkTjxQhtnbi16kmdet8/f7Pfk2j0GDnlJIsRrleqaqKHpIfbSea+ao3q2 38m3SerFxnLdlxNnNVDXkuCqUKmiiT4Hbv8tB6rn7DCakWsaZ1SGJbqd0wbKqSpxrkQZjRzrlYRK nnhR96wnEe9UU+8RJ9fkrBQS5Olr0cbFnMNVhFg1NfkqbS5iaxOk0UmPS3KcryHKrDWUh6pJ20PE txnS9Dx3J6v4Zo6Yr9o4W5Use5z1O4sp7g4XCLXlwDaVmGFJcuvzqZ+dj+fnKt8AiPRyP30NdasJ 2j/E0O7pHPE8ORmdA0swLhdhxM5FOetRWo3Xb0QAi4WgW1PIJxeo645yL2cuR6MK+Vaz9SuQlrN1 leT646TfYbY9zJmVpx4l5zX0YVrrhLguk5SrstyLClOi0TVQxjLKyRno/lI530hTqimTf8fYddGi oEAoO5zWSmyd4ohsxHO1rVH5T/GnzvblpFJr0Ir1nOeN7EGacGxjfWWUm5ykOJ872nHSlU7KbWd5 aa+Dknmd2QpKqvqhTeDb+5gzAqyvc2gBuQrH4av8PI9c/UJKTLp+Vnh+airxxyrMpCKxg1unaY5X nFxolnLJIuKzLCWNPFdV3jhdmdN9hnEvSs7EwX6i5+rzXm5PEGOWgWOPEKotWEn6pJra1ipaZhWN k6wnsw1OakqDI4uzpKJxliiKC5VrVM2z0yLrvRlc09qC6Z4XClMT5qx0Ul7i1J0R3RsJ80gzX5H6 FLcnFObsibLnjq6G/DGJmDHkMXyY+Uv0SPVYTgpNG7c/7OzLsszRxZpDLDvMMkJciRHOt0rWGqJc G/F348wTZi0hSsaaQ+eo2zMNsadhSrhhrw3SMargW67FWXIKzj5A36rwJbrrEOd3iC1Q7r3c1xHm nRBXn747EWfz2NNOzLNJnCmrMNOWc09iMdbAQqx1lXPaKZ0WuAfdhXbPIM6exH2mBP63ABPUop4m 8hhL6THSaJKkMElPwxwEaziTqrjvVe6thbQ/c8mfxZmS5D8a6d1RjxmumnDdJVxKqCtmme91xDHy cCHyc8qhabsztEHu4RhVUD7polZRKUY9eZIs+j+NND9Mmz6n5632evmicbvfUY8Rz6a+OOe5yhy1 sU6rleGcjVJjXaRsr9h2NuWrSr9DqHzVQt5xWpkEdUtKcXo9RBqYp5bPY16/6ywbE9SAunWUIex6 Secc5zqDmrIq4gGnbcl73q6Gq8fttubZ8qhxdkthltPG8jPcedG1FWU5zdyxyXj9aZYULcU1HuGT MLFrnLM7Tk4kRu63kW87zJnwOzUx7nEnvTxVT/oX9xJqhjqgck/Z0oRiI6+1lgvpg1QgddJd5EWo oYfzJe93IeazZznuNaiubw7maB3hmKVVRRP1eDHKE1UsI0/dh1KnPvanihxLk0my3Dh6HvEURfvV wT2OJHXIVZ6P62J/41zz1ZjvYTybQWw7CeNdb5wFhuMjTiPcHE5KEppO+otRRk15yTDM3esK7mgq XzbRy38Z43TFCePs98Z725S0x3ElOTHO0rehtZ3EgQXM+SpyRknuyjubxCpCUrVlGb6tFgg1OFop Lc8m/zGTNdZw1Kt4XkUa0kkdpmridGzjXJ+zOaIh2vqrnnc2nqolQw/qidMuJEZ8NM1rLNQuqZWz fhag2IZ2tHMWlXGeneXngOrFVQ+qGqi1+L2eK6TAVR0ibW/gSDdwfofMKK4A3aetw+g7/qyctDUM eE0kjouh9Cra0VahdWWeWrpydE+qQKuyNZxRutM6i/tciwknhYzKu6qr7sV6neP3viq4BqPEIwr9 2cg/g/y1nmc51/Mot4o2MTP4VtbrLbO7SDROFg95qSQ8cCcyoBOIeCkptdt1nJJ8jPLyNKwD/W3H nJ5PKM8HnppNj7e55N47qKdxGjbd+Z6NHC0c+2Zy8/NwFHA9BXfrcU+56/mURhvxTKXI+eib7rn1 cazn0BuyhvqoLPes3V6X2hL30g4tRwyQo4ZUNdxLiEfT1C7pmq0lZ6NYsJ1XddQYFVCC9q/N7ztk qVnt4Ayoog40R9k/zVXeQt1Ymvp0hWsLvQKnEDZ1LLuJ1CLClZ/xfGHc49RGL8k5DWSOVNBpspPU pam03M69lHba8k6nZLRrUl3Ze++pn6jyYc0oWVdMF3tSJBeTInenFi7d5AemegycJU3KkaN18qhy vmGOZSfrbmU9nSxf5bQ2WvC2ow8LyAXFOd/meZ1NymtZ4l4L1eZxRQlfxPhfKfEK9HkaKbfqQxxl d/ZGc2g1XoYjTi67hz6lzVgZqzCW9Z5Xiewhjd/tKuxzjSXGzgOm64mfdDY0ciWmSBUUG1VRc5bn 6urhHlaUFFvxdTtXUh0pRJLW+J3kPnR/rYu4Uq1C26htd5QvRet1HdlyUu5yHM3cf23mDG8jn+Hw odvvcXtTBfIHceN0GM5CNWt2WgGlOT7O8lvPnfSbosSeIp1uoj4t6dfo2Xw/Tmv/MJ6WeX1FH+oP m7Sf5UmzU5PhLMYTXhMQIVZMeVpaQRxR4TUQGb/vEiLOjJLXjXttccRzgqr5mmQSlGpSxI0hUuki 5bxyUscMcWOaew2Knc5m2QWulzwltRRl+nJK5mV+lbgUJax3Xp+F2ibwWq2R7v1H9Y2jz/6HSe/1 lNF0sbkD47caa+c28zL3+DZifdyCVXOBudpsoN+jenQNwf9V5pC9VpsdfG9nqcOZGoh9k3jyBfO6 +muZ7erHRStlt9cwBzBfjRXRQ3m+knsSbi9ptnH2r8pzLeYeYZzcfYgyzSxKgjXG2d2m/apWStyI tZMlVuohhUsTEygu0B2OJs6kMO0/s153UsbRT3s6NYe6xcnE7M4Ks4eygLOynYL3ZplxkEHVdivN HRk3j0PG2UarrqyJtF/3mdvYwiytKJzvhbNpS9J+Zh55b10ro9H3edxjC6OVLb5FUVrpRfF2OVdv lj0pUpuTN84bpYL4ZQr1HM6ToJ76znqunKWU25ZhJFdzHqe9jXIPdQdF6gpKmsQItTtK188ld5Hg XuJEcmRuhzREDFxNfFJNbitnnKVxlpL4XMY3aCUGSqA0tSXT9Tydq1Ex5CT1VOT83GrmBAeZBcFx wbPmNonYHyL9CGkH0k1IVyJ12en2QaTrkW63t8t5Mloek6NlrNTLWzgvk7CcgbshOdueILWyVIr2 i/IU7qiH2EZzt3kAoxTCLL7G6E7gs8DtXzMPEUfdqLWZNmmUClJq5YgupY5sDGXK0p6lo1xqq9rC +XkJ7eCWoq9TOBoq9atffz256jpq5sPkrDJmvH0E6U7q+dWj8Va5lVLiV4CBhmG8V/H4HmCh3sVv 43hrF+8y3MXM0LGbgrWja+8WtH2DuQiQ/o6531yHPBHzoowyp0mr2Wo/uUcPx+EfMg1gAvVSGzjb E8b4sCV++Jr/agpGBEfgGBEMDz6NY7gcCMy4y4FWdnMUVJpfBfgpDtpK/7sknryvLo4ARoL2p9dh bA8xB8li4PPD7Kftp80XkUo4cbj61QZ9gbF91kifGIzFe/2PF6EVD8tmxcd4e/e/dcARoL92GGcY ODf7sH1TDglGBgfZJ4OofRTpSZ+2Ij1pVKP9hQ/Gz+o9aL5pnuZVRB6VR7kzohLbI+hx6R2levXe uvoWrP+bjdpB3WZuwrrvpo3JNXh2pnlIPgv8/i3kUS74DqyVbvOgeR745jrzhtmCt9YAP0wgF5sh hrmGkqvua6/w+wExr7mPUb5zfJfzyst5bl65RLW+y2DVrCGH7HBIEhBVfmk+MEaCGgXHpVyFVapv NBGP1pN3nURZbB7l1IuIj+LUUvR4LaDToqX9zuQa6oZjyK28c6uJD/CHTk6tI/ZyVoEZ7rsp5l5F uT/JHdUErdhLfGTG7L4/5KSbpOdmKvmboOZK9whqiKFbgcfrCKNar3VQfj3Mt4rkZqaR3izirtZS WlukSekqqUWso4yhnhkt3EEumiup157PXqikprrlWuN8DwqY04p57iIlWAtMNo00pBvULOmtlhLU jVd6vXCEIxTyPh55UqY0YVlHqCnWn8nezSZHpp6cM03a82Uh9qyFewwryBE6b5J2Soy11ITmKEHE yc/nqG3oItVSiaTJOL+2NLX3TdQrqLS3hq102qMYRzTJ/c4o6VKncVY2ak0xjxLfZM42tX8LeY48 4+dANWdTNTkG53EYMYuAi0dh3RbtbbJVXpZBMjqYZ3+LlJf1wTT7IxyH2H+2ITvC/pP024PsMDvS ftwOU096Wa/J7mOelQ75lnTLXPBif5LpclXQbTfLRdaY38vlkpbv47hNviFfkWukwyxHjg55IBDZ HIg9yZrgVHuE3c8Ot4Ptx+w18it7TNAdDLMjggXmXXuMDfBsMGjg8fZaXO1tnrJ7I8U13gVoyS+0 hWjNFrkavRghO2S7vGGtPRi5pwG3fEYelC3W2L3sXsg51L6B32v1mfl2f7vdB3Vvt3+xvwpW2t8G o4CJtgRHWOC5/n+3D8tlUtn/BiB0U7DA3in/Bnp1g6wHZdpoPwnMtd4+bR+T39m35VNyiOyFPu1M 3fTURwo+HxxrH7Mvy7GERCn9BJBwqUO+j97vTMMBA6bgVLTt1/ZNtFxh4JMswJVLewMuewOqgCX6 d7zZZuPyG45ln/2inWS/ZL8UJIlNT7BnB3EcSZxl7Epba2O2zBZtlW2xlbY6SOpTpjH2X+3RttpG bdYutD02bYvBEvsUxr8HEK9HqVU4onYiUsF+zh5qj0L+RvuM/SyOzRjLpK2xDcjVgOdX2FPtjGBh MMTWB6ttObgXvd+AnHX2BpR4OkbpLKT59iaM5U14+1hA62do/9F4WghOQz+qUFs93qzBTKmyPejd aLRzEkqvwfGm3uPZrwfOauxpgGPInmCM/bF9AOnJ4AT0tgW1LkBZE1Fj3t5oI+jtcSgtb4+1hyP/ yUhHoi1H4foInI3G9Un2C/i9DefHYf4diLYcZNfhjaFYB1+209DO0/HkYDxbivqXYaX02MWA33jM pYL9POC91k5Gz0+2+yPX/pg3n7cHYIw/Yf8JK2pf+y8oaYRdZQfhThQt+hxKHIr0Sawqg9rzaPNj qOdMW2GnYkQKqG+iPQdjexjaONlutBPQ4sngCj+LFh9nT7Rj0a6T0ZojAaXPYHzGsFcHot0nId9I 1D8a7TnWjsMMmGHPR50jUOKJyDsOZyH061B7Cp5/CW91o61D2NKRODvIjue8OxLXg9H2YSj1aFyv QnoaSfnT6UhX2a8qb2rnoAdIKv8hH+VAm7Ip/n8V6WGkv/W/lPR68y7X5j+Z9gI/9AzjcTDWjowA Dz1cE/jcceYkHCf6KDxMmPtFrAj9jTNVa2SgXe/5KEAHuN/+NxkJ6G3zMfMMY2L8htzrmz4+Bq7l TkYs0bq/vodfjWUyyEVDIJczCJLlNrMzitP23aI4PRdcGfT+l0RxGvH+6B7vieK09QMjfbzjI31s 3kMUp+fM8ThKUZy2M4rTYZjHz70vilMvozg9x1SLK+QN6pG+EdQG5wcXYG3tG9QFn9pDFKdtfyWK U+J9UZwOMCPNPv0v+auRA/9fxOiVojgNHYjiNGy3KE5vm/vME760tzwfuvduUZzekvvMDqZ3AKEh 5qz+N7UOtPcZmzUvoUe7z79PyedAQw6Wg8FbTjCn4Dj5b86/xIeafzvQYp1/L3H+6flPwN/+Dmev ske/5e9r2jONihOcbP+sckHQZkbJ/TLuA/L9jPnqkO9rcmwwBj2KcF8y6ncno543iZqd9sCluzv/ x3yeXfPtPC+l48zp5gT+nsL/x+H3BJzrtf6O8fdP8f9P4Nlx/t5xu+Ubw3N3Ncactud1gxF68b9c rvso/e9IB334JP8i35RRcrjpl4PEgMLsByn9Xdsa3GRvtnNsElzJmTYHylxpT5Fh4OZOAB4YLgfI /0E6xLwpX5RA7pFDZS/zGiTuN0AT9jGvm1dx9zY5RgYDww6CxPobseYF8wruHCFDMIM/UIfwUfoo fZTel96vafrf3p7uj9JH6aP035Rm/JXr997/x04zBn7bPkofpY/Sf3Nq/7u34D+XXhyIEPqizdqs +Z6JydfdwX3fH9OO4i38qtyvsUc3mUvNw+Yacy39eWeaZ80sc7k5z+TNBuAh/V7EPFOH++fLwbRE UDubJbQRUL/Ttdzv62Y8+KVmofmuKZoHzDoz31xvLjNfw7PLzBX0w91k6s0N5qu4Wmk2Isd6tOc+ k0SeU8xNZjTuflOOR9vOxR2N3Xi3edXcab5u7sIbM+Qksx213o+Wamy+K5FrFcqsZoS+y83FaJna tU3B/2ZznVlmakwl7QfPNCeaf+V3LDajTrXUK5ppRiPcNeP9+9DH1eYClKcWcNebqejDfDPBXAVo 3Iv37sbzq8wfUO8EswhlXA5YXGB+IEPRql60ZyVqusc8jT5ebzLmVvM42r+ZnjorUc582jDVck/L RQqLetveKL0i6P2nuh7TivfulQshgz6CdI/cwzjI+yMNM8NopVBKj9hHUNqDRqOEPwrZ9C3Z2zxm NP7VdWZMELWfdEnGy3jusxUZ1flSpIs18rLMlHq7RVYh7ammku2DpoeQltll5hMu2RqXzFCX7DSX Bp63uWRM8PCuLTbvIqFmcyNGbjnm5bOSlZgc6xLuLZCRsl0tFuzj9nFaLTxlv2C+6ZJcjvSK6bav 29f1GX6LwbPm5uA0Y+yZxsihxrB0/VObzLd3JvmFfUwPXn0K6WD9lbNtlx6AxyWyyV4ll9urTKM5 m8dwM1z2kr0Y830w0nVI/Ugax3oPEZWlcdeYylLBqMrX/f3jKps2jb4dtO0pvrJ07hphWSYxxnL/ P0KU5ZJVwQC0HwO0jwa0x/5PgLbZ+j5o1/6PgPa7skUeNs/LfnKjbERKy2JbkO+irgVmP5c0Qrva j5gfmOeR9Pen+P0Njh/IOEDjMfmyfMl0ouerZSrG4XaMVSf6dQbow1qM3iRzHFZqI2AwFrC4A6Pw WeCwJkYiX4+00ETQjlmAtK6+zRi/PvMcSl8lR2I8yoA9dwBrNnOM77WfkcWA4D1GY6etAH5erW/I KLNQyjFOMUbYWwustxQtG4URugPjtBhj2Snj5FH5opwtU6URMHlXzpBy4KJRcpH5E0Zug0w06+wE eUIagMu/jfZsAFatAC2Mm/WYbxNlA8Z8I2p9wUwFRerGuK0y/WYMqMBo0LCbZB3w2xnmKWCSdaB2 V8uz5k3QlD/YT8gk1D3UbDF3yUFq3WAPkjnSjd4kTVZWYvSfN8+hNQVzjR0tW+VZtOT75iqpkKNk hlyCuXs+2viynGAmyUUSlol2vDTILDxfJwW88axcEqzFSNfLrZIKRthWmaDRjewRwSB7jP2YDaTD /kyukVcxuiMkkI/LPnKoDLHb7MPcwX7Gfg+/2+zbuue+6z3pcPvs9rFgvP0x99a5r26P8Pvovw5G ATfr3jl3zTGXkBQWdjgTc4nVxJ3XocFw7rfvzTTENgflwORP2Y2yWZ6RsdIX1Ns1SGofcYZ9PMjK lfInm5C75Un5kzwuL9jB8nP5dfBx+xtvH3EAZvxSzO46OVVaMbI1crD9GdbfwfKOaZcDpUqm4KiX LrkMo70U6+415D/VVshFtoL2EfUo80W7v3wdlLNN+uQV+wvbJN+2L5ptOB8kD4KKzLT72lsAh0PN u3K7XCzv2PZgi+20PwzOCA7BsUVuBuz2l5tQ25Pykj3YzrHj7V/sf8g5aKMBFroWffmTfQO9moM0 ztzW/x17QHAU2voH+2rQa38ejAr2s3cEJ9mfGdO/1N4OeNj+R+wd5tZgqL1Atpnz5AVZD6pfso/Y aG+Wq+3bMgYrfiT61IpjHubVUsCi1SWU3mnX2llyCiFRSj8BJFxaKivtYGtxuLR/iYMIhtgbwW3c JT9QGJSSLChZXgAGD+LoIiyN3Rd0/R3M1eWyn/0Pewaw02lmFMr7LmD2Sby30C5Dba2o+0z5kpyI NFo+Z++396GWu0D577D34uod7ZO/t03vYdxcP+rsnXYB2852o2TXzmsxT+9ky5w9yMjg+OCo4LDg 0ODTSJ8JDsdvRZBAasX/iqAtGI6j1T4diH0B8+4JvP+U/Yn9IX77g48j1QSfRaqz24I6nI+xHUiD 7Vn2QNtlR9HeQXfg9dBzcEi6Qx8MCw7k/3X2WeC5WbTIbGXU0BgtxVtooek8arK0FFPf1EpGhs7S P6CC9mEaQamDXlcu+mYIOUKM2hdnNJIc79fTPkkteivpkag2+ZWMaxEhx5lj7Jgy0KgGvqHW6s2k dJfSpjRES7Q1tMetodd0JX2iw8bFXkkzpouzfE/Tsq2HXjcuNkWBviExxiyoQL5zgf+SwIQuSlWU ni0xH4txHv00pnrv6zS9G+fS1irNCCRqeR1m5NV2fmHNxVBJM86tWgEWaD09mXFLnEetekNpHLcu WmarldVU3ncxM6oZMyVJe321p9P4ThNpr3cJ/Udc7JopJkOvogb0WiMsLfLeks5DMUsvyjxjeCdN KfrCOMamdP40SVof14CuZBmtRGNNL/CeNJW0dVOrxfmMgJKm5VyU3pHO67YalCNDz4EI7X41dv0k Pp/NLyCoxV2tj0vWRz+yXp7HaJ2oM2sW+rCEFuX1bG3SR0Io8kk9PeqToBXv0hZbPdIitFqbarrp jdNF3/9ptJnWb29V0RND/e2qae1+Lu38KujhUIqi0EGvyRjjOKoHaBfg08URyPloCHn6OKQZOVg9 AdXmfglhGzHfQNsuZRuaQZtXecvNAq2fU5BL2+i1qetlIaPGpXzEErV5TsvLKGcO42k7v3qdEasY caiKHra1mFP38mkN/T+a6D9VioyhEZva6YET4xsuEv0a9KKWftwJ2mGGvQ+zi8rdivxhzoG890hd Qy+mFFoSYZy1ecZFCJyH9vaxJ5NRu3ozhmzYzhiYO3W0Y40xjp76oI8FzCNYZUn5I1cRZq+8Co5u Jn125tNfN0n7yzZzqTxFi313nfYYQX2Wwoy6oJaGc9GCMDirJO03m+mrNhXX+o2IFu/TNR9w7ESN jzIepn7FbTlXYDu9J88zUaselxp3qpl9jzFiUooRXNUv6hyu2gZa1XYxikkP/uvXDyejHeejhJhx kUl0dk0mXprCqI7ap1pG2lR71VaOT5TjV2HC9lb6HqQZOdp5rCfoVz/ObKOfv0qwc2lJWkM/BO1p D+OZuriKWXpEzTUap7GBuKyPcepcjL0qYoUNtNrVvK2Mn6Pxv9ejfRNobQuYyg20ga0GlC6iR0IT LfAX07cgTF9oZ4NbS5+upEn7eGStZoZUMvbWV4nLXVzFIj1gXRxVF8lRZ0kWsu5c4lmN/LGS+KsJ bb3a6FcFivT/TNIuOE+LUmfJW2DpEzmGeVr1J+iH0ktPwrS3WI16y9avEhouWkaViXkfY429WEkP J/3eRq/3KtLIC4205U3Q1jZEf3qH+9Rzu8wk5A1wUOswjr0YF9ZnN2miNXYVV6Hzo1Vcpl7Buu47 gGHGE5fWA5az6JnRzohp7Yw0MY/zYhljuDWyRy4mkYvcX+N/6/zh4ix0sh9VxsX3S7CX6guao/+V WjgvIYQyjGynq1s1WYrXZzGqxHJgtgIh1AEMs9jcbDYBw80h5r3SPAaO/lqMxWXg6t2XP1xE4JT3 GXPRD6LEV1Hj4ki5mHxhkzCluFRltBJ20UPKGaHBxeFbgXb38fsyT1Kvn6WHdAXnSIpUqcm4qKNL kGsF2nU/ZIxp3hdkOu7kGC09R1vsNtydzggvVdR89ZAeLfSeNgn0RLGwjqTzElKKP5crZhpmxwp6 Ga1gzJd6RqZXj6BqxmWMMmprPT37FtFiXD3Lw/QoqiM2z9GnLUM/0wTXQIePxZfhEaN3Xpb24DPp tzcLs7vVR7LJ0WfFRUUr+shSGWKSKyDRL+a4pagX0zhUzsY/bVwM6rEoQ+VIjcJRZDTBR3DeRcv6 HOmii0IUYU92pj5SEef3Gx64W+Rvg4n5r6QUabuf4jzMcjbX+GhqeeLcEOFUJK1I0Ks6yjyVjH8R 8bb4Oc6AIvm7CL/S1s1YK72cQV2khRrHrbibXX+Jvmb9dYzrqRTnKWpcfOmdVv9xk/TXzs+snDMw ypkY9vg3TA+qUsSoUhymcpP29ChM7JYGTq9iBEb94ofi9A7asXf4vmepIcgTRi5yWg2t7LuNfmHH RQNLk2dz9vPqneg4yTT97TUScJF+mynGI1I+bwLgEaEfpUZEqDFx+5DRCOIFenA1ktqnWF4zKa7z Ma5ie0Dn7cn0MShFl3LfNUkZ5wmc8LMwRQjn6WVQiluTpeffXX6+zkIpa+gJEsWK01mn33tZRs/i qHFxR12s2gIxSBNmn4sOlPJ+rUnG46hlRKXZvKphbXGOfRnxp/Okdt+G0Bg4UeKsBHf22lFqNee8 es1daNSfZhl5ow30NlEatZA9a+HI5ujZPIVR4pWmqUZZI0kqT7iEnG6TcV6vaeO+KFNlXNSYokkP 2AJqtEPnqVpLOMWMixMaMS4Wlra6iR539eSERmEc6/DeWFOK1OUiZVXu5o0c8nFY3LWLoFKK0xLy fHgl6UKY36+otUfIm8BFSfS/lt+8acDZZBPhVwucdeICYCXnizmb3xLOcBQLxBHV9NpQ6tjA7/w4 79scV6Rq7dRvWXcrwlyLefasmjKEmzmTiL1qGQfG8aCKzevo4aH9m0CJQb/mpHGFMn5sHTZOExeH 6K1Zw3mQZ3x3FxkpQW/kCD1LsqYUnSJFGSDkYei8i8NsTblx8bMijBqh3Mts4yKylbHeXmLBuxgz TKOOjfdjWmDfa+mdX8eVOpt+PIvAETvvSEe1XFIsq9/i6DJt9BDSyEhT+O3jWfTBqiUucF9WSxJT zScXUs2okNWM75Hmms8Ta9YxdwNhU/KxDnEdliSlqZ5KpsiTFchvV3HdJIz7oshUlOYObU+Gnuca ueNMzh737WWNOrCQcHOY+2wfy34JS5mJ0jrIrzYh7zKkBR4bu5Qnf7yYvLlihrl4o0Ae3/l8pdjb DPPlOP5hzoXxxnlsOU/0GPtf4NqJso8V9AsrN+77eC4e1mQfoSjLmaRy41jKVnFKn9MYZb3cxxOL eShpv/S7VyoTbCC3nOY3avL2n/HelZRSV7KNzispzFgaKba9lbElJnMmKEd+F1bO9ZzTLmpjkvHo C4BYzvMnOju0NQN/u3yb83tBm9SXvqNpvmP6zfL3fQXzc0gTkPKSlR1ygX4Vk9/EfM285ndxHkf6 Ja7f/23MrdoCOctusQfYy80fzR/tcTJL96/MM8EJe9pTed9XKodjjlz6/0W/v+LD6vfpUXkOILrG nGwW/J2/Wvn8/9NXK68yGgdwqrkRtY4xC+UMjM09MlpW2mr5qlxra6Qge8kMqZUy2Sa3yK8H9gWu k360+s/mxxirffy3KG8wbYyLIkGtebH/rf4XaQ9/uHkuGOG+BQ25bbV5MaiTjzmL+f63+98y4s/f 4vXr3KHehzvRP3VfrvQeET82Rwbn8g2+1/827hyKnPSBMG/Lg7IZ/4fgN2qG6HeQcW8QfTcG4epQ lPo2PSJKdv3f81/GHIKUMy/yq8kubcb5g3JnKa80Szd6OSQo2lvsLUEiaEZPdvODDU4P6oJ9mL5u /w2/tfaRYH2wLOgLVgd5JH1SQDoxOByz6zWzHbUMcl/WVN+SgfSwjLNdqP8lnKn3cJJ7scdKTGK2 xeyPtgzSlUE/CgfzW/j9+E4TEOLOo+JIzAJt+ROQz9Q3wsO3/03k2jOsn8GqcLB+CVcvYV2MpBfG +yG9Y1fsYLYSI+xhN+4f72uyf3Od1v4Df112T+v0bjlTVmCdXi3X+HXag3VajtG5RV7ZdZ3KOSj7 daw93cu/Hu+rTuhizKOTg6eBry/YCZP31oM1tCfLVd1pj38IXPGBf+rHgrofw2x+2n99+RJIhFfb w8wJlBbuDjZIgwTmKbQqCoitxaxeDwg+BH5gseTMNjvUbsJ8UzrjaRAxktobJD1XuzOlzOnmNP0K tTmOeooO2/G3oWgvtBf+deh8CAh88LsfWLdslBuxRk5Dv48G9V4J3mIUSvsKRuV0k5OQrAVtDMlX bKfcJd+0c6Td/E7WoPacPC8PATuPNqdiRZ2CZ8MkjCc7c9/L3L/HvZ5SbuQa6nbM0Pa15suk7KX0 CpL+16ffxRs/wK9+X/sw87AcIL/01hoNSPti/j4qI5lTd2aekDjO1srr5tv477xz8cz8Ar9X2H0l ZXmNkp4wvzfvyuUD/rXHyHj7K2vkG/RcfgDpP4Ij7N32eLsdR8zGwTPE5TbpQJ5upB9hfV1OL9/b 5Br080F7RHCa22OUs+V+lhnYp/B7bbAS+afLVbYZZV9jh8uv5Ef2hyj1GPOu/bz9pa2T1+0Oe4Us Rnt22OPlCVthX7Mo3WbkHTsYuU6WH3LH6xhJ2x67nyxGWYtE7FZZZD8GSL5pj0BvXsCq32K0Ts07 Qv6M0o6RxcEWpHK0bMsuljAttiUYZbcHc4LZ9hX7F/t88C30/2X7W/sLez7a/Yp9JYgHcf2Ps8Pl damQ/e0IK8FCq95rj9iT0b8v2JF2ub0jSMpDdqO9INiE3lWbfQn3Y4GTKu0ddi87WH4q+9mEnALK sU0OxOiWdu0Wy43SBdhcJqfKqXawPcruizRU3kGqByZ6R+q4e3gq3jqQ+6blchkgN9jOt/vr7qD5 M8bhBUD053ac7ACHV6c7rrIdpZbb/bl7GsK4v0p9mPsmnovZkPTS4xKT9HHhVVdSzcg7IX6jYSql +pnUzcfJJaf5lYVN6EUZdzSm8WuwMeoEurkLptFvGqlJmQZu28Xcm+oj1cQYd6rAmt03ZBvMZdQJ OnklRp1uKRJchFrvBDn4IiUgFylUdw3m8EvJeVCKHNvUhVr6cLeMcuGu0RlSXvpK+F2ZjJcEk9Sz pk3S68mSxn29KcSaVJpRW62pjDkQoVQ5jdHcXRyoHHfDNGpZnlJQmNHlatmrAjXeKhe4b+7Vec8/ Fy1HYylfaNw30fLUVcQpJeaolYj4qLZTGbPxHEYnnsu4WgnCq5l5l3Ifqvv/svf14VFVSd7n3u50 Op2kQYbFDySIaBACYRgUB0ISSEIIIel8dKfT+ep8QEIgEIiB8CVBREBE8WM0ii8i62jGcdmMw2LW YXh4dFTUccR1WWEYVtR1QJlxGF7HyTpA3/tW/U51go6zy+y+7/P+s8997j3dt2/fU+ecqjp1qupU ISZSPSwHWlcWUjquntY8FGK9XwENiM4fELUcFUMnWoHaeE1zB8rF0E81Qe9egdzIS6E10fn36sWi wBqBetglA2Jd0lGHA5LHogg9oCHR9qR8pXPy+PF/XqHlKh2xthqYERSNYb6KRvUoRS9x790BPb4f uNCBfm9CjDSto87vX1Xzu1uhw12EVTTbqtah7/2EFeuUzkUVwr+iFqqAaOXyvrL+1ccSeC9qLCxT Ol+z1se3IzsH91SjRBAvhb6jHHWWKh0HsexrOsMirFO5tjlsbzBYqnkYWWw2EiZzXJB6rOI5r+h2 WZPmYY0ajboe1ceWKh1lX0fZ1LEw/EpHftdPlsCqUSqzcOCSQ2txdVz4UoMtLNuRbWoBMjCtQvbF xbB1a/3ZfOg66mADqkY0jypoMzge7UbQMUes2UBSWxMy+nD+L86j+ShWui30pp30+UlEttNxPl6h WTWEKHk69vJd0OGsAUxsleRYV2tVOXRHZcj7x9jeQffW0yq8Dv3bhtibZYhCuAbxpcKw4a/BCDEd LAOvuR1HKywTpcCdVsTN2gE7yHbEHdRxsxpEd+WHfb4RtL4MceVaQYuch6YcUQ3bFOfVWgRPVrag sEWZoxiy5mM1yQqzmdKNmxBpWEcV1dHK2RNyCbVioWpV0cizyxDXT9uG68GRGqB3qBMtVBU4RgiW lqCqlqxF7CtwL715C7SNVdCx+kUvoUeXbbxB5NRrhKZ3LknKFchr3IwYhIyP90ikv2JV06+bakcs F80NS6Hf0/jGXKZC6Vx4RYgcUwdb0wOIRxOETrVc6Yzg0XitIehIKmlF8D2l836XI+J5NDpjEP4U QRqFaH6PqB0gCO7rV9HcS2VK2/kYKp1BuhEYXw/bUAh57rTVYT70ZDrzaB0s/LWiM68Ta43ONKkz h9QiRjJDvRpaWR2/uFpF45OGoFOvgK6yTGzUIWjfZqOlddD7+aHZ0dGDdR6ZUom/rHkSx/StAya8 ANsta6pWwBvEjxiRbPF7BLqpNeAhK5BDopIwZW2/VeLSa5mUfuDIQC4IbZ0pl3kvmrUhOhMOcP7o fBdUA5EYdVaIgbwWOn8Kf5uuyvvrKEHk2Wj2xGiGCR/4p7+/plKpfaDu2QJ1NAsG+123YmYqEX1Y CWw2pfhNZwLRsR4LlI5A9IjimMkLCQvnEz75oC2tg/WY43Z3YKZthCcF2022IWqU1sYyxRfSvUXg PmyB1rllWT65TTB/GebQOmBZFeZ7nbMgDLlDZ77QGQhqEft0gdJZOXlmaYdFowLcqgG11kFK4d/n wYOnGRroEHis1lhzDj/ONtGEXIfzQFE6gztDWwGLa5vKM56BR0gYXNIHzbaORFcP/KgCT6jDmysh p5VI3Ezd1yuUzsATQD9WQFdZr3SW8VqlY2rX4l4NaEbbukpgz8iHhe3fsOtgC/VxFeiuHnY+HfO/ AhrvIsggDfCH2AI+20lPtQOL10PGqiIJZjtmlBXgjzsRl7STeNN6cLhO+nUV/VYMHlyJowj8ohj8 R+eICgh+1UqEyFJIDD5o/otgSS+CBKsjwhcRtyuBnwJnd2khzrwbsiLLnx3oq0pgLceIvENkwY2Q OBZBJuPZaAGtelugj96GTE+NsILzjLAZs+E6RIQOIWIXewQwRW+GNbaT3nQHIm9riTWEHtORcXWc XG5TIbgq+2sVwvuDuewStFJn9ymGXNWidJ6wO6m/8oSCiqWlHIkxX+n85CWwUBRA6girYonuVYJS f56LDPQc9Sxf6LkUGBG1Uusc3zpv28ARjaTv64+sNWBNKsaKoaT/u76nI/YXYlSi33SWKv6d+SbH 8vSbs4z/TVLBk9iRsR7ZXPIh9dahl+ppbBZRD7cITuqsaBWwl3A+thWIih7C852g2tshs65DL2t7 bJX4FJXAwhnAWC6lcea41wzV3cYR2L9DwLhKPM19qmOHMfSV5vPSOxxrme0lC2F7aEYtAWCplrW0 pa9A6XyZpRh7HSM7jNWL9tcrlDWOlo3nipzeCG5Yg1XZPLS1UdZp88AZqwF7k0Rv09boAMatWOks hZoeSsAftD1a++DNozo6lI7jzvx1HmwrLFEugsW3XrLDt2DmrwR0lcC8MtBZMeS9MkgX+dISne2v EjJKEShqPtYwi4HlXHszVhz5SlvDa5XOZHM7eFeNquyfb4LIzsB9V6h0ji4fIJ8rs28JbNra5qNl wxD+24SRWIsVYAit1HF7V2HdEY3Uvxb9U4WsJZVqFkG0AnbyAthcWYrcDW+zcok0F8YYcrR1ztK2 Fm14BPLVFnC5clibNxEGlMO7o1I4fA3skCGZ/weinQcl48oymq8Wy4pkMeQxvjYTVLcjEi3nsuJ4 5CuwBlgHTxTe97RO6dza9Upn0l0H/eEqWFJ5nc0+QeuxolkKrw/t31GvqqUlpaCKMqVzWNUAUxdj ZdIqshhnYdM5hZcgomsr1t062rmO9ByGN+JyWNoa4JO3CPPcAhmHFkiUQfCxCkhS8zC21dAbDBw8 ArdRny5TOldckRrIyqWpoRDYVkj8geVjjhXIFkftvROExDS7f5U3T5XKemue4AZ7tK2CLF6EUeIs Re3iwcQ9epdY1LXVm+2JGf28LBq/u0ANRPrOBw0vRl9shkTI2NMO2ucZdC3kyQr0RwA+CtovqEjk oWrMlYXiyeVDnPSAYH2dyOl++NnouIVVoPGgSNB69g4pv3yvxe+lSq+W54isVgUMqFA6i0MRpPEq UMZAHq8gsLgMlBaV7wvxbubGc3C/VLwHuKfn0qrcp8qFjooh/3D2uDn4RwdRQQts8vnwjPXLClRr fZnLPIh/BqE/qZdsEk/QOuNe5RepsFT4pV/8t/TdaDxHHUEpQCPkB0ScL2EdvLG1T0gZYXw+PMp+ Ac/XxcD+ZnhQcR5Gtv/zfKezslRjHm/HUaQeou+b6NpB1y7F8Sg5ynKn6sZ80wlcWQ76YNjXgebu V2XIpsy9XAcs2EHPcNRLzmPJbWF/xzXCqbnnlyudKWwzsqzswFztRwa7DmSL7UB8+0VU+ypkG2jG mLFH3irIZA8jOmgNtEpLkf+ZNWycN3wu9DEB8BudqaUGlFcis01I9AIswyxCBrMlmKcYC5aCF/LK ZSM0RDxu2ZDUuRU+eDv4ZD6Kat7uAWcPiITA47oAn7dBvihQ0TUcrxSWgtZ0nthaVStewrWglnql c8nofKnVoBof1k5B5FWrVjpXYhhQhIWeA5BX9FyqM8nzemkuJNdyREvVXk8d4GN+WWtoXU1UkikX bUhQvLMW4M1lqlxm7BzcZWm9EDlM2yFdlIL/zEMOnTLIgoWQkAOyEmjBeoLxdiFmnRJkltRxussw Kjp3y1yBpxL4o/07faitHtyiSOlMNj7McPlY9ZcgJi1rEtYAf6sw1zAO6SydRYjpq7MdaS/2MDDv HuTA6KInVmMeuIv6pZVohX3ytZTE3qGc54VnkEfon43wOQ2qpwgL54nmagHVznk1NsCzqQnzGdNP LWZ5nXPVD32XpvwmtH0hrkWCP6Xw+GC5UMt9BdhTq9eCc5XON1gkcmI0e5T20dX5pEqp/tn4FiTI nqb616oH0NMsfdyJmWalrGk2gHOugAxQi+cD8NIv7/dNrUEk2gBymRZgLbISWtVspTP3VEGiDIin H0vhOnfXXKXzBmm/k0LIYIxleaDZdowf40OB0rsidM7T2cA4jePtkA20n5tPRdfnbVjfFsiKIxPc Lh/32/DPtaLXLsbb12K2DwCbKqAFXQQc0rlHG7EuvFPprOt3IhNxMXyUyiFT1mF+ryEeVAdd2w6M s17t3am09iCEFU4DJK4GwqBVWLnpVaTWvQ5oVhnjZymdMYillYWSjaUF/krrqGcXYrZdB0/aVait jfqLM1YEkXN5DbLkcMae+yFlL8HaJYBY9EvANbQWcw5opVY0SIzvX5Um9NEIjlANXnQbepBptgRP c+bkFoJhsdI6/miumTKlvVI7lM7KyDi9WQ3kRZtJmLEG/HshVoes4/QDc3Tut+WqTFbbDGmWSHlB zBosn9RAi62zahQpbVupwiedd5XpuBGZgpl6dCYVnfV8tkDEvbCJ3tYC/QS/sQheU0XYb7QFch3P oqcQFWC9ahWf2MfojU/Aa7QW8rvWE7P/UgXRj/ZQK4bsoL25dTRC3g3Cuti7wWkbxD5TA80ayxq3 QXPYQnjPNPcYemGx6sV8NlsN6JPmisyyCe9eJFJHs8iKQXgar8I+Ac7aqzNp12B1WUB46UNetVLM ssWymiwDRbVhTVeKyAGVsprzEUx+8MQyzHdVBJ/OSrsW+O/DvWrU7AdHaKP618Gnug5PLVE6rx3b chZBj69lj5mYKbRdSMtIFTgLlY5mXgiZYA1+3wj+XSTYEAbl71A6h1sxZJ8mUJQfnLwCmTh9mG1X YsbzEc9mWeVOVWvwGvcRpfdY0HzlmOmYaQ43h6tf9fvgeDnmKPxi2K9kiBplX7B/oK5Qo5Rhv6A8 9gt80OeLErmTvU3+nY6RdMyIPoPV9hlEL31DnVDX8T565UJt15rX/sXahqobUBuVynFJbY6v1HaB Dq4tO/oMavvt12ujOUof1xMu87VLvaReVnF0fknny1K+pK6jd2rPmOvhU8OweewI9fUVBBV7C7kM l5rBMVd1RFZjufqJ8Uv1ifrU+IXaZsxC9Po9hlOtNe4xhhINdBhJ6vfGdPWmWmxUq5+qL74W4+fP I4P1qr9TO+X6Ezr5+KaomZd7b+J/K4bIWhz8xmPfeETr++CSZwZ8uKLXy//vB3Jl+H+Nz29/43GC jrdxRq/ffO9y/3u5x3/9v/+/+u8//u+luHN5xy+/8dCRa3+rTuKq70Xjz/yy/3q5//2mdizDbs5l 4OjLcC6D51/Us++UrWnyIeKuW9SjxL07wQVvp1n1+8bN0M5vII64grhxN7zuHyU+2KO+T9e71S1q ulLmLYbtWGjebe4zf6oCxgT1O+NnpjJ2GU+YzBtfMjab3Yg3386HY7ljlNFldOOJH/VHmX9GbTGW wRPlUz4c19M/f+PgWPLHDZsj6hse40b1Ljxh9jryzNvN+8wd9u+N76oPjGlGxJhl7DT2Ga+YLcZP zK3wv6jlw3zNfJL3sdNxJTwx5FC7jU3siwEv3TvMHfTPDnO/ccaca/xWWcajVFtytDasMLSl+1Xk aGZdzSbR4tUonb2yVGmf5FIVzWamowQvVtqm7JM5sBRrXm2V1/m/+XORSFP69IvMrFd3PkgiAcgu ZZf84hcNnF6n50My0ruqAmIx0isrv+gdAyKN6N0USyGjVNJoLiBplZ9spZHfRuO/Ebk9VkCuasQe wNnImVsDLVAjZKMGpfPiNmH3VAV29rC1qRYSxjp64zrqqXb4pPCxE5CyvuchdR/hzmrs4AtDTxFC Rtbt9PYnYHPh7HiLEB+pXT1Dvz8rFj1ehT6i9E6fdvgDLBYLjbYlswzSid0OLM+tge5tuuJ91lqb +oDsK+CdZXch/1iZ7HdhiZq1i3djpxcfayAH+5CrYitWDeXwfanHTsxm2CB5tfJDyM68a4z97R/E /sgQ/DyKIY/Ng92G/UmasCKYj1p4Fydr73KpFfOxg5RX9Buwe5ut2YXIy5KjSiGXh7FOqIfMFYYu qwFr97DSmTZ0DvCArHubZLXTif0GNWJr0fmj2HqvLaEroCMLiXVC4wVrVtrxnnzIVXXIaNKCrMx3 IptlE8adcaoFu2uaIW+Vw9LGfiitwLZ80ZsVwHOiGJJ/SNbcQbRgtugg/fBi0TlT8iFZanvsdvCc DYL/2yAfN1yy/8yPVrMkv4dw4Af99wP9eg7tARLuXxPVCu0EYVkKIH9mEHrU+f3at0bQSbPSeUyL VTTDZYPSueTKgQ1LVVB2LwRFlzYHOuwqsV/rXXw18PvRu/TC4vtSKfvhqsTfJIx1cjX0L+WQM8Ow C9WIl0AdrNwboPGuhf5I7+AJYV1RA+1xSGz8NdAkV8BK6Ud+sErQJMv0NaIx0Ps350m9IbFFsYze Rf3BbdqDNc094EaNkOEfp+8riQLXgqpYu8cjytkQl2F9ugAWxTpo51bQuLL2+9H+HtVnNThh+VeO StEuaAjK+z8HRTsUtU/rPVM646AP1+i+EZ0dRtdUJtrXItFoRt9dgLEoxvpQ22K0tkp7QASg22Le ey+N+gNYa90DDsyrOfYjWY0xfgR9noc1I19570iTWGGrsYObe6IVMROWET4tBocOQde8FHqsKlBK JTRGpbDb8O7ixdBdVSB3D/sVtAG2EtgXKrBjdAFW7/OV3hdfDt+XIFZKhaLD5AgQ88AzSlB7ECNe Ach4D3wrLAud6PElWCX6oCcOKW2RKlLRPUhRTwU/7Dthwb8Q9BVhYFwlNDjaQy5EnPk5etszqKMc mtQtgLhMvKG0b9B6UM8yuv8QogHUIwJGgDDuPlqhbkddJTQfrMFua8YU9glYT1i1E7qgKrFL+qFj 9GFO4P10PkD0FPXZI4hjwFalLsU+Y6y7yEMvbIIWbSXorUpWiDyTsifNQ9Tz88FdfcS1dfZsbuVa WOA41kEtzYO8c5wlnvnIQluMHmSK7cC4ddATYdjatSei3i8cAl3WAQPq0O91mAPqxH8yql/QPo4F 0MfWCn1rrsmr01bR68wVDhbA/kfOjKtngGL4xsxR2pOxUKzHHA+jUc2SvYO1/XRVAiqKWlCi+U99 aiC/+6X2lUJ540A+1aL+Tzo/exkiQ7HNYxF4sw/6/XsgJ0X91vzYnc1+C5XA+Tswm6wHnDXICrYB O+hYllhNx0rMFBXQ3qyB1i4XNjkfcZ8F2Ivlh42gFNaV+bAKhvBtntL7jysgTdRI9JIA6Ezjq/YI XIWerRW6KQeeRHcBlyJKRiGoQe/6r1ba23Ap9EdFyi86Iv51ntJ71P0q6sFXBrqpBkR+cJU8/M4z KevOQzIOOgt0IbQnAVB7Ofq2WrTdOs9kA6y07Au1FNEhNkDmqYE2pRp8vQo63xr4UDF2b8FMoH1U 6yAJ6P3HVcjCrvN2VcH+uQTRIhiKVswUzBPXAqu1LFvZz3dLZcYsV9H91NyLheCQhZIZPOr1ld0/ MxejxWxrWw67dQ3mhAJgYy28SQLwB10jddTIOxoJigDktlLEWgki02gZ9KorMFfpvXlBWIPXIpuo lgNYfzwH+LmO7ufSm3juakGcyQCyDBZCEmiGjktniK4GXBXUs+wPGKZzFXyW5iMvGku1zB0WQgvY CY0Q42mn4ggr85Tew1qpohY1lhnqISevoCOaIWTAh0uvDAY8m3WMg4Fd9T4VFO1XB6J9rKH6VyOH KUeFaQF/XwsP6oXgKctAQQHEJNGxS8oRlyIASZZzZs9SleI1pC0KQfRPM3xWKrELvVG0pH7MDAFI P0vArRYqv0gZlehHhnIJ7Cs6iyhr7WqU3vuv/bPKIRVpi/w87PVmOWIpPbEE3K4e1NYqMlMxqLJB ZC+dI9gvlqVq9Ew+5CU/eHwQ8qb2m9KeGEwn9dLzBZgjtOfyHZhD2/q9gqvpM2NdJ2QwnSuPJbs2 +FeExBfmNjpaiIe3IbbRQOQDbTMrBgSFKAcOtiTcIXLMevirhPA5qAb8cJiq88XSUgS/Ms43yp6o G1UVsufyemI5VgStsGWGobPmXchF0LwvVyWALqx0nKgq9LXed9so3hUh5MpmrbXOnbgccqeOYDIX nKcKWl6WdOqVtudrj8oS8D3tO6fz5obBgbn3s5X2ydFr04BIXqWCtXrGCMq+Z61t9QFnfKDbNvBC vW89D3aYOZB8uY+awQ24n7KV9iXMFQ02W6nzxVatrdS6rmJwNMbeY+ZROiT/pjFDvaFugK5kVH8+ KNaycAbUWvp8HR2nRCf0Bt1/k84LuHcd7ulPxySb1BXqmPESxlY/ybv2bqZj4PlTX/nMNV2n3rT/ BXsj38RbWNtyBa4/Jyh+jHfovEQf4qo1NEnfcLAuduCq7zzPe+fo+jyuP5JvP6K3vkQHv/slnHwc kuuh/s9/6Vj71x7me1jvp2NHWxnvg7T/kfdU2hz/2EPjxvsk37N/oJ60X7C/6N9xeT12r45Ej3jU 65ccj/0/ivo+6c8O6keC/hnTg3yKVxuvGQdMl7ESO6EeMY6rz4iOf6WqjRrjZ8YTaowRMq4wnjD+ wbjb+C1rocwPzYhRjriP19t9RqHxofGC+R3jCbObZtsj0ZN+jXMoolpljHVcZyxTS40RxjWO62g9 8YD5sHm9w+V4zrFaHTCGG6ONMXSdbCQb19B1OF1/Z7Sb8eYxM8FIUj+ne5Px+0A5Rr7huzok9wfu TqZafkr1VDtedVQbnyqr/3QYHmOwGklXj/EFHZ/yLl/j36msMb7QGeaMQaai/9Pp4JXdY0R7ubCw tKnfqz7VR3AOUceNK6Pf1AXEoPwOa+b7f49++nvzjHGDMUb90eEkqP7geM541hhmvuCodtxL3y8Y jxK008xN5iaC4AfGCO4t80P1pLnH3EO9w5GuwtS2T6mvnnOM0odpqplqHbeZnzJ6HKv4LtVeiPy2 6xB/qgDlNOTJmqZmqJmmojrbHZMdox0sM/apMoOaSTD8kZ7zUJlkftcsMAvNLOMmOsY6XjXLzav4 u1kQsyhmtWOyciu3OcaYSWP5nmMbxzHuP1LUcToP8B5R45DaZmYbtxDmbDV2qw3GR+p/0UrCVPer a7Bfd7cyjWtUgtqmrqJ19R61g377nhqq3lYvErZcQ88NNt+nfw81Rhmj6L9DaCVznCj0UWOSOkh1 mUYKhqlXeam2ZWo/3d1PnHAo/fMMrbHfUvcbe6neHeo+4wC9eRv99wy94w3jY3riDfUqUW+3ea0x xHiXnuhRW8xmY75xhFZtz9Fbd6tr6Vk3Q2X46Dvfs+jzaIL4WTWEqNck7DYZEnOYoegXpxpMUv9Q tcfYRk9tpVHn3GWjwAWG0B0nPVNH7+mmg+A2CtQJgvEjw2u8rXaYDUaxmUb98Qdq40fqd0ammWQk qKeNavo9nZ5+n7jvfBqfQ8YxtPoqOtcZ6Y4k43kanUnGx+Yk8xYzwcymtxwzPjGdRp/pNiwzm0eL WrHYXE6wPg8f4w2qR+2FnMgrnPeozXrNUECQpdE80q2mQk8TUNMRy2QPtfhFSDV7qV9Ya1VAvc6y 8SL+bN7He1LMm1SzMVv1mr00Cg1GAz27n77vUX/ruJVkjXfUYuMs9frPeHcufV9G0sQhkj8biJ6+ pLdvNS4S99xDUO2Ct0EhwcCH3meVS+Ppw8p8E+bf2XQnoG6F7MN5eDmeSqvos2bLaiIIWShEkh7r k+fAzzqPMGsGrY559p+D3wvgP7cH820xlT7Ck0dp7c3+crcRpKXQZRTjTXNwLYAOpYGeZf3Jc7AS s+fy+1ghldB7SiExbKX+DisdLSiP/vOs8sMrNYRWtFAvt9K/Zql9hEecvZuf2w3s0/FCdAyZIqV3 J62k73vhe7+VxihI/8uh2jPorcVK7zAIia/rFmpjHaQI1hw+S3CytPWUrJHzIPFuoxaGlY54E1Zh kefWYB2fBy3OHKx0dtDdFjz/KN7dTrRdCD+wMMHNY+UXf07t8cdvnI2IIdWAPwTow9jPNx/a00cA h49aX0Az/lPqh9hP/vW5iuWIA7DuvAlb9zFq7yx1hZlu9BhVRClPmruRN3Kf2orzLfMp+r0QT7GG dBbOWeoanguI107G7PKp+sL4hHj9l4aDuGCRI494tT6G0zlG/WZg3vjKMfyr34ld3kUjeF79SY0n nnBKfcsYRLPaNYrf/Ccj3hhNT7QSH081ymkGc6oVVOckYzz+cV7dRXyrkN45nD7dhDkql3CmrX/G auufz4qpvOkSCPTcODL6TP9/huOXT9UfMWvNMnjHM59xdP4J9/ibG9dBago/o5+Uee5T/JKseB5i 29J3+F8GW8GvMmapHxvrqAfHUtt4ZqU50xGmueIPagpxPT98fmn6oDOBzmEc+IW/1RbS1Sm/6KtH 7TOblCsntyCgkuetvm2xmr7gtsYWVdpc37pQNbfUt9arzsX1y1uJK/A/lW0rFxUuevMQ4ndJl9w1 VKxKVN9SV5MENXDXJE7nJQ58DWHPwF2HilOD1N+o4cSLB+46CZ7BBO+16vpL7saoeJLHrlQj1Gh1 Q3P94uXqV7h+iOtpXD/D9XNcv2xpvK1VWXw1nLh6cB2M6zBcr11GTxrX43oTrqm43ozrNFxndNDr jFxcC3AtxTWEaxjX+R0t9LZFuC7DtQPX23G9E9e7O+h1xnZcH8b1cVx349qN656vjMp/dHVextW4 jKt5GdeYy7g6/pOri0b/O8Rf1gz6cvC3adQV3UsgfLhWQzLYJ+XPpTz9589cka/LIZt1+S3Xnz8z Ok/Kf5Xy1/yMca8jyZHsSHVMcWQ4ch0+R9ARdjQ5Wh0djk7HZsd2R5djl6Pb0ePodRx0HHIcdhx1 nHScdpx19Dksp8vpdQ5zJjmTnanOKc4MZ67T5ww6w84mZ6uzw9np3Ozc7uxy7nJ2O3ucvc6DzkPO w86jzpPO086zzj6nFeOK8cYMi0mKSY5JjZkSkxGTG+OLCcaEY5piWmM6YjpjNsdsj+mK2RXTHdMT 0xtzMOZQzOGYozEnY07HnI3pi7FcLpfXNcyV5Ep2pbqmuDJcuS6fK+gKu5pcra4OV6drs2u7q8u1 y9Xt6nH1ug66DrkOu466TrpOu866+lxWrCvWGzssNik2OTY1dkpsRmxurC82GBuObYptje2I7Yzd HLs9tit2V2x3bE9sb+zB2EOxh2OPxp6MPR17NrYv1nK73F73MHeSO9md6p7iznDnun3uoDvsbnK3 ujvcne7N7u3uLvcud7e7x93rPug+5D7sPuo+6T7tPuvuc1txrjhv3LC4pLjkuNS4KXEZcblxvrhg XDiuKa41riOuM25z3Pa4rrhdcd1xPXG9cQfjDsUdjjsadzLudNzZuL44y+PyeD3DPEmeZE+qZ4on w5Pr8XmCnrCnydPq6fB0ejZ7tnu6PLs83Z4eT6/noOeQ57DnqOek57TnrKfPY8W74r3xw+KT4pPj U+OnxGfE58b74oPx4fim+Nb4jvjO+M3x2+O74nfFd8f3xPfGH4w/FH84/mj8yfjT8Wfj++KtBFeC N2FYQlJCckJqwpSEjITcBF9CMCGc0JTQmtCR0JmwOWF7QlfCroTuhJ6E3oSDCYcSDiccTTiZcDrh bEJfgpXoSvQmDktMSkxOTE2ckpiRmJvoSwwmhhObElsTOxI7Ezcnbk/sStyV2J3Yk9ibeDDxUOLh xKOJJxNPJ55N7Eu0vC6v1zvMm+RN9qZ6p3gzvLlenzfoDXubvK3eDm+nd7N3u7fLu8vb7e3x9noP eg95D3uPek96T3vPevu81iDXIO+gYYOSBiUPSh00ZVDGoNxBvkHBQeFBTYNaB3VoKhlVKWWDlIuk vE2X17ukvF7Kn0kp1Hr9P0v5b1L+RsrPpTwv1OiRcoiU8r7RxVKGpGyWslXKu6S8V8qHpdwp5VNS 7pVyv5QC32iBb7TAN1rgGy1w3SBw3fCclIekFC5yw6+l/EKXN0r9N0r9N+6R8oCUv5BS6rtR+iHZ lFLanyztTx4n5XekzJJS+iO5Tkrpl+RlUt4h5QNSChzJ+6QUeJIFnmRpT/JnUl7U5ZgEKYWLjhkv 5XQpC6SslnKxlLdL+ZCUMg5jpB/HyDiMEXwZI+Mx5ldS9unyJsGvm4ZJmSzlFClzpQxK2SSl4O9N MiPc1CVlt5Q9Uh6U8rCUJ6U8K6Wly7FeKaXdY6XdY6XdY6XdY6XdYwUfxwoejJX+Hyv9Plb6faz0 +1jp97HS7+OcUg6V8gYpb5YyR8qAlALHOIFj3HIpBZ5xAs84gWecwDNO4Bkn8Iz7FykFrnEC1zjB 73ECX4rAlyL4kSL4kSL4kSJwpkh/pQi8KdJvKQJvynwpBd4UgTdF6DrlcSkFb1KEjlMEf1IE3hSh wxSBN0XgTRF4xwuc46U/xwu8478rpdDReKGj8UJH4wV/xwsc4wWPxws84wWe8QLPeMHj8R9KeU6X EwSPJwgeTUiSUvB5guDzBMHnCYLPEwSfJwi/myB4PUHwesJ2KQW/J+ySUvB8guD5BMHzCcK/Jgi+ TxB+N0H4Xarwu1ThQ6nCh1LlvanyvlR5X+ppXU6U+eHbwqe+LXzq2zJfTBY+NPkxKZ+VUvDsZqn3 5mukFL538zQp5X03l0rZq8tbZdxulXGbKvVPleenimQ4VeaxqdJ/U4Uepgo9TBV6mCr8ceqnUsr4 TZP5btqdUgpeTBN8mCb4ME3wYZrwtWkyv0yT/k2TdqZJO9Okf9OkvWkCf5q0O03gTxP404Q+0gT+ NIE/TeBPE/jT/klKwcM0acd0ke+nu6W8Skqh1+lCp9OlX6cLHUyX+qZLfdOlvulS3/RXpRR6nC70 OF3oMF34RbrQX7rQX7rQX7pI5+ky36dL/ekyXumC7+mC7+mCj+mCj+mCj+mC1+nCxzOE7jJk/sgQ estIlTJDSlllZISllPoyhK4yhJ4ypL4MqS9D8D9D5qsMmS8yhc4zhc4zpb5MqS9T6suU+jKFvjOl vZlSf6bUnyn1ZwreZwpeZcp8mSnyRKbIE5kCxwyBY4bAMUPgmCFwzBB+M0PqnyH1z+iUUvp7hvT3 DGn/DGn/DOnvGdLfM2TenCH1z5T6Z0r9M6X+mcLvZkr9M4XfzZT+mCnwzBQ4Zgr/nSl0NlP47Uzh tzOPSinjMVPGI0vGP0voLEvoK0v4Q5bwkyzhX1lC51lC51lC51lC51lC31lC31kyDlnS/1nS/9ki z2ULH82WdmdLv2fL+GdLe7OlvdnS3mzp92zp92zp92zp92zp92zp92zh49lSf47UnyP150j7c6T9 OdL+HGl/jvCXHOmHHIEjR+DIETzMEXhyBJ4c4TM5v5RS+GaO8JtZ0v+zBA9mCR3OSsIKPUYNVlep 69RN6tsKOgX8TmXoKl0uyNLl8tO63ND3zf97IkmXP7pOl//o0+Wrn+vyn1llFqL/Db2o/u8e9P6h 5m7zKfNps9t81nzO3GP2mM+be819I/ZPrJlYO7F+4ryJjRO3TbwvczYsADHKadH/Lj3pHU7zDnOD ead5Fz2ToZxq+H8ZmuHm7eY6s9Ncb/6t+X3zGfMH5g/NvzP/3vyR+WPzH8wXzNfMQ+brI346MTyx bmLDxPkTmybeO3F7Zh7V+0uC7eavw/aXzr/miOy6cKt144X3I6vPn428fGF1ZO35z63hF87w/cg7 F6ZyeVHeG8k7/2Dk/IUv8Sw995++e+eFyfSOnXTuxfv4+9LzxyMrz5+hupZSj9wc7Vtzi3m3udW8 x3zMfOKbx8xxneNWxzRHmiPdMcsRcf7NiB0j9o+cPTJv5JyRu1Irvj6eRe8WHS/6VdGpotNFnxf9 oegL6sNcGruR/22MGtk/hpvMzX/dOGa+kfmmMhMfVjGOedaBSJv1dqTLOhc5YG2IDLGei+y1fVa+ /b4dsh+08+3n7Wqr6eLb9iSrIXpaZyLv2jnWlkvvfeVcbZ2zb7EW2TvtMbaKWPZwayK9/31rX6TJ +iLymX3M3mO9E3ncTrP2WVbkItW133oxssQ+bu+137Yfp/8225PpvJXOSVLyd9Ny4hxh3Yoz11pp N9kj6H899K/J1lnLaz9nZ9q77XSrL3LC3mIP7ocpZPXgbLM+sCfSd4KP2v046vNaI7iNOOme1RtZ hPNYJM/aH2m3eiJLCb5265XISutzOvleL50HcK60Xo608zvsfKuY3ttgL7XetUdFjthXRl60G6yX 6fsJy3vRbQetajsh8pQapbLsdutj+u0VO8uaiDLHSrPOR84Q3J/YzdY79mB633n7HL33ansIwXcm 8rrVFSmwDka2WfdHvATnfQRXiMYrn+DqIpgm2X32WYzl3kgDfd9mvUXPDL7osVZc/MR6ne63X/zY ftYuttoufmytpjPr4gbq2wb7hN1Lo/y4/bn9ifV45EbbbXlsF/Xfs/aNdH83Z/GkZ87ZfcpLsG2x 2+3v2UMiB6nHP6ARW2F/okbZYerbrfSekLXWvs9+2VbWaHrPFnrn+zbH1x6hhqiJqo7waaj9ov0B jdlTuO6y0+lsIhxZab9HmPG5Gm1325Pt/fY+grTBbiM83EPXI/ZK+zPqkVP0zGf0ziNU15dqkn1e 3Ur3uI6hRFspBOXnVI4kWN30eeAgSNXVKl+NVg32Imu/8tBbPqH/fWK/Y1daL1L/P0fvGGEHrJ3U j+esE5EDhCsfEY6+Tbg2lj6foN+dBEs6jfNTyk19coQw7ThBu9suJaie5lEmnGuwPiO82mjtt51W ut1lz7evtG4hPOuyU6ws+zV7G2Gczz5A9e6yb6E+PkB9+gn16CsEzU77rP2RvdQeQt/fIdjeonak 0BMbcO6hvj5Arf2YavyS7q+1R1EvHqHxcNM4nLIPUh+9Tv8aTLT3ItHECYLxNRqVd9Vg63jkTdtl VVKvtVPfttlvEhzn6P0N1lblsr9QCfRGj7qacHSDHab2bKJnltjDabw+pnefo3a+dsl5gGB9jc4D 9J4DNM6TaLSaCSoP9fMBezTh+Slqz1iq7wP7detU5Jw93/qSxvM9eyj1QZ8abq+zFfXDVMuybiQ+ k0XtPkbj30OU+ya10k0wm9bn1pX0jrR+2mJ6SrNWMG0xPTBdgXaYrohe+umKn+H7TdZbTF/Wl5HP QFdERzQ+CaCpndT3DdZr9HmsvY7anGVtsd6NnCMedQvRyjbro8gx6wPiiacslz028grhdaX1WuRB urebaZ7wJUTQJxCdXbTSLu4mXrGL8GSSvcI6Tm2YT2NVDLgzCf4o7CutM+ALfA63xgBWPhn+E/ZI wB9tk8DO/IRht74EbmnYm6zzdp61lWg3jdraRnxvEnjD88Rf90eKra0XuwmebvAHOu2NNPL3RUaA t/G5L5JiOyP7Cc711hF6jvnFW5HHwDOYt6y4eIb5A1HsjeAVb0ZeobbfTxi5k/D4ALV7CfWZRTyw 2NoYGULjSBw14iSKepxoh6lzP+HORBrTE1w3/afO3kQ8cYtt2vcTv36MyrcJv16n1r+D/lwN/GGe x+3rsz8Hb063fMzLwdM3UnmEcDk6B+TR94nEawZbKZgHmI/THED//cJ6P5JG+PemmhTJscde3kFt /tgutXbTOL8NPtlmvU6Yf4S+v8N9QO3J6q+jiZ7ZGZmKzysJX9+hljDvJV5sv6+G2OcIv88SfT5O GO2zdtl7rZetgouPWcVyltI5X8o8OnPpLJDvVBKX+4Ko60rCpXfp80XiG5MI7y5iHjoQaSaYVhIu Z9J4v019tJHmrSaGjdvLJ83jxei/yURjk60mwBmdB0utp/tPbg+fD9IcxXPlIqqP+3sDjc+lZy+N WS9xK3oXZIFoGf3/1+9/rSRpYKi6kSj/uGURRlk05r3WZ9bQfnnjcucgHu+/NA8xHshcxO//n/nI fpppJCrbQY67zPkJfPcvzVHMj2We4jH8n7lKz1V/RvfdJDufpU/P0zywzw4QBE3Uw6OpP6fa37Mu Ukuvpn4bSaN0C43le9RCN9r7IsHWTjwzzdpDOHygn85oriL+8DSf/bTcR+Pfbv8f9r4EOooqbfvW QhJCCKENO51qJJ2ISKoKyALpTmcQMSJSVRiRJSIigzgzisg4qAiIGndFRAFjQMQWEbF1lKVZRLFx QWyRtUAULBBBbDdklMGk63vuTaXSznG+/5z/n/nO958z9nm66j793lv3vu9z31sbcTb0vxb7pWhz NUa0GvFajba34/hrsV0Bb/Vk/k1LjkjOa5yDXG9i3IPszGQx5qBkS2hrTHIp1r8lSQu5VUZM5OQU zMvl8EEf8NuQdx6Bzl7D+XrS7pEcgmOSpnyIXDi/0Y81oi7Z0HgGNvPd/JJ6TdB8Lv+P1wr/N2P4 V/QfazPxJndg9u1I1jZI8HsXMhLrlB9rbhxrF84LsE4Op+cBjTsaerPzfKzxzWDr+zTkRbqu0zWa nrtnN6SB60TXc7Ze0zWc4DyCrsdN6+pxKOcYuN10DWbn4Dsa64ls12Au4JqM3MLfzd9NCP8IP49w /Hz+CZLGL+AXkAy+nq8nrfm1/FaSyW/jd5EuvMVbpCf/Jf8zyef/zidJiUCEViQgpAtZZJCQLUik SughlJAxQpkwgNwkBIQAuVmoEAaTacIQoYHcLiTFXE4VO4q9uSqxjxjkxomDxAu5KeJF4iRuavqQ 9CHc/IwDGQe4J7L2Ze3jnsyelT2LW5B9MvsktzCHy+G4RTlCjsA9lZORk8HV5TyU8xD3dM6hnENc ved1z+vc4g4nOpzglnQd23Us94y3zFvGLfXWeZ/mnvUu9i7mnvMu8y7jwt713vXc894PvNu55d64 dxe3QuosdeUi0lBpKPdXqVq6gntNGi2N5lZLY6Wx3BpppnQ/t1Z6Rgpzb0vLpRe496Uz0hnuA18H Xwduu6+zrzP3oa+7rzsX9xX4CriPfLpP53b4/uS7gfvYN9V3M7fLN8M3i9vjW+Nbw+0vKC4o5g4U PF6wmPukaGTRSO7LolFFo7jjRTVFNdwJuVwexH0lXyQP4X6Qq+Qq7kd5qDyUOy0Pk4dxf5MNuZr7 SR4l13Bn5fnyE5wtL5QX8pz8lPwMz8sr5Zf41vJH8m6+jXxA/pRvLx+Wj/Ad5OPyCb6L/LWc4LvJ 38nf8V75B/kHPk/+UXmRl4qfK36O31e8pngNb5Z0LenG7y85t+Rc/pOSYSXD+IMlL5e8zH9aqpVq /GdlHcs68ofKtpZt5Q+XHS07yn8+4NoB1/LWgM0DNvNHBpYPLOePlmeVZ/FflC8tX8ofC10UGsJ/ GbokNJQ/ERoeGs+fDN0YmsU3hh4LPSZkhx4PPS60Cz0VelrICb0cWi+cEzoSsgWfFtc+Fiq0Xdp+ YZB2UPtCuEQ7rh0XLtdOaj8I1dpP2lmhxthobBSuMbYYW4QJULCOlSj/X3PfjN3nyM/bmbcr71De 53lH8r7I+zLvRN7JvETet1In33Bfte8K30jflb5RhdsLPyyMF35UuKPw48KdhbsKdxfuKdwrT5b/ IP9JvlG+SX4sRJ9eZmLuNLXK8Xeir5PBdBbB/DuBo3XO+yzvcJ6VdzTvWN7xvK/yvs77Ruro03yX +0b7xvjG+mp8V8nXydfLf5RvkKfIc0Pbnb7OOGuxvp5xylW/sGdl/LqmcqsZv0yl5dDj/6v9Tu9o ZhKRej4VTXc088y8T2R61/Mm2HT9d8ciJSZd/0lMDN+I/1NcuAMN7FlU6FWnfLiB3auXx2AcOWB4 3tswhoLeWeZ/kIY6drGGGaxe3Cm/55Q/cspbGmbSskCa2+E2N8yhYO1sETjXjjJc0XDX7tWGVRTU LrSn0gM+H3w6V9cQ/2eAbXreAXmHvFP+RP5U/lw+4ra+m7Wuua1PaDhLwVo3Kztgm0EyGtlzOsOC VS6sBPtgY7dm4BdBmiVfIl/qtDmecVyozinf0FjIPPaSUx7XKLPfb3DaZs8cjCMtPWj8AwXtgRBX S51agxuZ/vlfXDu9sZaC+esRVXDsRjGGC73i2hU23kdB7cQR2t8cu8LGB6id2N21K258gIKN/LPK bin151Gw/tytfNmsX65f46L/CVD9ChcLVcIlwqVYv7uIVeIl4mWiJhri5WK1OFIcLdaI48SrxWvE CeK14iRpmfSC7ybtp+a5yJU31qeCzkWcGYSEC31Tm+OJ8S1pBo2n2EGURJ/jqXLGcd7XXY/4G5dS MI8MEfNdj/RpDP9PgHmkr9BfKBEqhcFiW7G92E3ME4eIl4rDxSvEUeJE8ffe1d6odJV0tWQXjSiq loPa99oPznj6NLKnp/x6dzyexhUUbDz71MoURaygoHze35SdLt+rcRUFU8qhyu6uF3s2rm0G9SJ/ iv9RXunW6tkYpaC1JE69zOWHgR/WxOf9oERcvnfjZgrGN6pZKb19h4Ly8im1qzMqT+M2Nqq3nXLP prLAu/WGNu6kYPPlUVV0e92p0WwG6/Vx/gSfcFrJbTzAWv3aKWc3HmXlj51yVuMxVt7gHiWj8XsK 5pvDlV6Xl8BLTXyerfZuVic50Hj2V4A6xaHiVeJ47axzDH+SPb2Un3PKclOZn9fcNrGSaQw0fvvV QS5/LJnBQPvySWVnl/8qmclA7WuVEy7/UzKbgXroDX6zy5vJHAZqb6q/c/njyVwG2v7OynYtPkh2 oWD83spzXPt4shsDbece5bjLH8X1CQVVBq+6uZhsS/ZgoO3sq8xN6WcPBmpP1EtT+D4M1MdJNbs5 wvBBPxc0wmtDRmiEWysBNsF+4UMfszcE6F/PO5osZl7+PmW0xQzUbn9lR8fucJJmaC7vO7ceK/Pf ud5IS5ZTMK/OVVa6kbeSoV+BniN8w3/r3endlRLZQQx0RL+oGS5/GtzpJl4S1RyXP5MczADeN1RZ 6/JLkkMYqOd3qANcflOyioG2f1ZNc/kt4LY08ZKgjnT5A+AONPHyWLnG5RvANTjtnFZWpyhnOANt p5XayeV3J6sZqH2Dmpni42oGyv+s/Oj4dEOSvQ/h65qipJEMdJyXKm+4/NrkOAYao92V7V1+O7jt Dv9ppdsOl5McR8Fi85jykmt/MDmegfbj70qDy89JTmCgfvxILWs+90BfJv1T4NwD10Yf48roIK6L rNBjbms78OsOZsHzjbiqbebfSU5moL3dUdk2hZ/CQPldlS1R35C8hYH29iflhxQvzWSg0fpeecvl P0vOYaD2Z5S/ufzh5AMMdHSfqkNcfnlyHgO1P6W86vI7we1s4oVtar+U6M5noPbfK6tSorOAgY53 kzza5WPgYk288JV6uRP1lUn2lot0h2tXm6xnoOM/WNklpf4yBlr/C9U9U0TElzHQfvyovOby7yXD DNR+udri373g9jr8FGWX049VSbZehl527W5JrmSg/ThQ2cmxizCGk53zPrIiyd4K4790660Gs5qx vPBX1T3DQs0IA/XLV/xJl9+c3MxA7U+q1Sn+fY+B8prinumRaHIHA+3X2pBz5YSesnNcPuqU724q y6NS2tvNQNv7QR3r2C1Kmmzcf3XrfcbKq53yfU3lnFqnHHZ+X+O2uyBpMdB2v1avcPn65PcM4LVP tENO/foke1tHHOaUJybZ23I5OU65tqk84Bm3P2fYCn9RSrtnGKgf3+Tfcuz+kGRvG4YuTPH3WQba r42q37GbmWRvx/IxpzzbKTe468i0ZNIF1pHS6aW3lt6Wos4kA231O3V0Uyv2QZtdg8vfNq/mTvkb dx2YafO/AlZ3uV5+hrhXRuQ2O5OBtvyhWtLcX8Zw8tPN/mgqS7c75Sk2e8tXblmvl4JZylheuE35 1LGbZLO3kUomNvvLKWe5PZwCJhX0DHqo2FkcI4dgQ/8ubBqZbnt+ExxJE9uJXvFcaVzReGOD6xV2 RSWfdI45rqnsoTmtO8qtyC1g/hEcaSWeI40vGitXhsY7/sxxWvqqWe12JxY15/qVjLclNpo2rldY 2ae7o/Uz1bVkhxvsQgaqzlPaj270p4NrBqIv/E4YJF7p1pps92Kgvl2n9nBrPWD3dkGvLHTtO+2M 63l6rsINfCqllX4MtJXD6iWOXbXNzkUC57l2M8HMZCwvfKwOdPkxdikD5Q+pVS7/CLhHHP5t9YKU 4w1goPyXarNPRtr0bIUr1pxyTVO5dIpbbxKYSYzlhd1q0LULsvE0Z8AxNj2r4To+1TyjmsrixU55 lM3euyvJc8q6zd63NSrc48ywhzLQ4/xFOeAeh703X6I0Z4qmspHnKnaMPfxXoIrtIN1b8JTRcs5S C76W/cYLu9SAy0+zdQbKT1c+cY4Rstm/LdDPuHbDwAxjLC/0EYoIfaMuE1GvBvevBEdypTn6DP0e vVa/T39Qf8roZuQbfqPQON8YYFxpzDbuNx4wHjIeNRa7fRuPeuOdvuUUPOHyQ+2RDJQ/p2ChO3vH gPstYPZK9+jL9RXGEKPKGOOOUbdH/UuBMQrtBI90p3R3wfyCBfqN+u36TP1OfZH+tL7E6Gp4DZ9R ZpQbIw161rCI0P+ze7U95n8VeJJpTDNmEmLcadxJ2hh3G3eTLKPWuI+0NR40HiQ5xsPGI6S9Mdd4 mpxjLDGWEJ/xrPEs6WE8Z4TJuW6MQnYNA71fo2on3BgNA/dbQIyMWcYc4x6j3njGWIa17zzY348+ 1fwH/8E/BU968zv4HYQI2QLWdKG9gOslIVfIxdrWUehERGm2NBvz/y7pLpIu1Uq1JEO6T7qftC54 vOBx0qbgyYInSVbBooJFpG1BXcHTJFu/Qb+B5OhT9NtIe/0O/Q7SXZ+tzyZefY5+N8nT79XvJT30 +/UHyLn6Q/pCkq/X6XVE1Rfri0lf/Rn9WdJPf04PkxL9Bf0FUqa/qK8kA4x2RhdSbnQ3upMhhmRI 5GKjh9GTVBkFRgG51DjP6EWGGb2NUjLcGGgMJGONoBEkNUbI+B25yrjQGEzGGxcbF5MJxiXGFeRa Y5QxitxkjDXGkqnGVQb9u1vNKx77F1j8h+4sHGGPY6BXmAUF9WDorMrAqjfuvwVHMoTP1aGaqR3Q Dmqfap9ph92rRN0e/0+Bq0R9ll6vL9OfNwLGIKPlrHYifp3ILHhtn/Z5yvozgQG8cZexNGVtnsBA c/waVXLXL/Zvy+RlLVcxYG5hLC+sV3uCqSL07wmE7Mn/T+BIjne7vlZfp6/XN+lv6Vv0mP6uvkff q5v6J/op/UcdV5zchzjWVPR/8n/w/zk4MpXfxn8kdBa6CN2E7oJXkASfcK7QU8gX/EKh0EvoLciC IqjCQOFvwk/Cz8IZ4e/CWeEXoVFICrZIRE7kRVFsJaaJ6WKG2FrMFNuIfrFALBTPE88XLxCLREXs K/YTi8USsUwcKJaLQbFCrBR/Jw4SL/I+RZ+0e+u9i71LvM94l3qf9S7zvuHdLF0jTZAmSr+Xpku3 SUukZ6Sl0rPSc1JYel5aLp3xEV9PX77vet8ffH+kT8x9N/qm+P7su6VgcVFV0SVFlxYNK7pMO6Z9 pZ00NhlvGm+7s4g+teG8m6Bg+kR1FJgp/8G/ETxpL+aIOYSIA0RcpxQNLRpK+NDw0HAi6C/pa4io R/Uoaadv0Ddi7XlDf5N49Lf1t0kHfav+Dumov6fvJp31ffo+4tf36wdIgX5Q/4Gcp5/WT5OQ/pP+ M6nU/25kk0EpmX8KA82LU5U97jXYFHbt4j6HwFXIFAZqd7Oy1732CNlTfwV67dFDuEA7bmxxrwpH gG8GvZYs9a4parkyqbKnMdAzwE5yS8+GgxvexAsH1Audng2xb2GZPeCuUUPs6f8tsEbxp8VcaaxU I02SrvPxcoV7BTadXR1Po+NDuQMZbN/2LwdHOvA7ha7sb42cLzSIgthH7C+WiheKg6Ux0rU+oaC4 SNeOal8YbxgtTyGC9kwGejdvr9rK5QeDG9zEC0fUYSn2sxko/5J6jjPCQYzh+Pedsmyz58ulLXdb ZLuWgdb7QO3v8io41eGXqunueXkQ3G8B5+XCACEgBItGFY3WfnbbGWTfx0Db2amWu3y5/QAD5Veo 7Zz+SfZDrL+WU1abykVXOuXipnJpB6dc3lSWW9rtYT/CQNv9Rm25Y+EH53f4m5Td7p0XGdw/giOt hH5CsU8sGmlsTLlSmctAW3hf7evyI8GNdPh7la9SZsxcBso/rDQ/Mcm057EeX+bOoFIwqaBPRuJC mndt0ZiUqM9joG0tUTmXnwJuisPPVNyzJfsnez4F419TuzvHzmUMF7ooJcoLGKjdm2ovt0/F4FJB Z3WZ8JbvZvX8lPEtYKB1xylb3Lr97LpfAXXlefLj8i55d4ov6xlo3duVz9y61eBSQY87QbhWeUd5 163rtZcw0Lrfqy0+KgZX7PAvqu2dMftt+uSak2amjHkZA7VbprZ2+SHghjj8SGWdy/ezVzBQ/oTq PkmzD9srKSgfqqlsaWcouKFNvDBN2efyOjjd4a9Q1jj9622z++ZZcdcHA8CkgvrgTuEu5ahyLCU3 rmKgbc1RvnDa6mGzf6HKz3ft+tirGWgfR1W2cjPyEHDNoM8If/bGvTvcWj3ttQy09VfUzu5cZP/+ mG+5vyLZUQZq97rqPv21z9obKBgfVc9Nsd/AQO9Yn5Vb7gP2ANfDsf9WbblTXwiu0OFXqh43B/nt Tb8JmoPGCGOVjcqm0BWVfEo7mxhoOy+rHVL6s5mBeueqykw3B21hZz1lKbljCwOtX6NsTml3CwPl r1SiLt/NjjFQPqy2cfstgfst0H6/K7ynKqoaurqyZc3tYr/DQNvZqhaltP8OA+VvVQ46/c6x32Px +btrV2pvY6B285TTbj/Kwf0W0A8trn2k7dA+1nZre912cu04A23nQeUb53jdGMOltzyP7AOmj2O3 UDmboocdFIw/qF6UMr4dDNT/l1e6a5J9xt5Jwew/UQe79lngshx+repL8cdOBqqre2TD5XuB6+Xw P3k/cmcceyKkuc+d7WP2Xgp29TtTvTol0+xloMd7Umm5FyqBkxy+Tml02zltmxSMP64a7ozOBZcK muHvlkeEFoWa7xV3YiwnNz8N7OKUq1N8coCCtb1KpW8HZOHchwfLuNDYypbn5ZngMh3bN9RCl+8E rpPDT1Tec3nePshA+Q1qvstngMtw+EnKNncVOcj6doWrJ9m2fhPQk3e9dKU0WmqQGqWkuwI2vVWy 1SlnN5UzZqXE+RgDPe5qNc/lc8DlOHxE7ZiSP44xUP7PipmS6Y8xUH6+8pPry1P2cQrGv6q6T1bt JPikw89VTqW0f5wBvDRScvOTvdv+ioLZ71VDKfMlwUD5z9SLXb43uN4OP16Jpawk31Iwfo/afHaa xRjO+3GK7r5loHZPKy1P0NPs7xmoDsZUpjv1M2z2hJF3n3jjKKcpWP1TassZeLH9EwPlRynrU3R7 5legK9EfhD8qceWjlGOfZaB16xU7ZQ05y0D5R5SW90o8dgMD5WcrR5iOqQJ3Ns3T0OhK970M1BYp mO3lyustbYDzOPxlSsuT6lxoMZc0vRm0QPl78zgw4oxUsHEYUmflr6q7RiAqmRSs7gzlUMucRhwA xm9Xi11+J3QLsJwxQ73K5U3wpsPPUse3xBjKBVg7dyiHW3IgRkJB+VuU/S3+w0goKP8nxV2bnYzJ 3jYS3lFll7fAWw6/WT0v5bjdKBh/n3LSbT8bXLbDP6AkXPttUPo2wt428t2hjnP57YgmwOzvV75O 8QPLsozfpBakxK43BeMXq8SNxRasECmgsRB7iQExpH2TMpY+FKzuVcqbLn8U/FGHn6xsTxlLHwbK P6R869ofwOwHmK7GVbZx+e/Bf+/wV1aKLVom/RhoO9cr7t1RzLhiCsZfrbzdkjdJMQPlb1DceYr1 pZSC8TG1T8s6g1UWYPwsxUrxYZCC9WdkpdCc28EwTnhC+Zk4T5IJe4YoL0yJ12AKZvd75f2UeA2h YPx1ygcpfRhCwfhrlK0pY9QpGL9I+SVFP5MoGD9a2ZCi8ykUrM/VlZzTv+WEvT2qnXbKMcL+dorW MhffI6+lgsW/t7ZT26O5b47gmmE7BW1b7CH2dNpaRXawtvY75QWErsCc0KL1EcSkYOu97aXxY9d4 uDo9/I8g9BqvXPSIXYuu1pyrTVz5sfcbxWy3xYfIcQraonedsd6xm07YuxLat6T5Dek6LrMZhD73 lrUj2tfNrXI5zDrRXJtjf5dFdN48sWs59rxbaOWUp3Ls7+IYbxGOq2d/s3Wb0FdYKqwV9giH0sS0 zLTuwp60vulbM87N6J9RkTE+c2Xm1jbvtjnR5tsskpWZlZuVl3Ve1nnUKisT9Vo+e1o+bd7N6E/r MJb9ktU3a3zWrKz6rGVZK7KWZZdk69k3Zv+5XWZWfbuydoPa1eScbZ/V/lD7M540T2fPuZ4LPCUe ZuOpRL2WD+qjnvNpf6hdGa2TNT77RgpYD/XonpGeGs8Ez2TPzWw7wXOH5y7Pw57HPYuAOzxL8Al7 Vnpe9az1bPK87Xnfs4tt3/Z86jniSXhOec4An3qSnuQ5orA0rTu8AD9g/CcyzqVlOhr4piJNzOiP o+roP0bQ/gz6UU/L+Ga9xMgG0b12ZfBnd2rPPvAvSudmrmzzLqz0Jhv6YT5BbXiCvsWzDRrJJ35S iOx3PikiMumL3NEf+aAEc38AGYiZHsAMvsj9f6hPJDeSueQxspAsJy+QFeRFspK8RNaQdSRK1pMN ZCPZQixyhBzNX5Rfn786f2P+pvwf/en+DH9rf6Y/y9/W397v8Xfwd/R38nf2d/F39Xf3e/15fsnv 85/nL/GX+gP+i/2G/2b/NP/t/gf8D/of8j/sf8T/qH+uf5G/zv+0v96/2L/EH/Zv9b/jf9e/3/+p /7T/F3+D3KBwiqikK9lKjuJVypULlaGKroxQxik3KdOVGcps5XHlSaUusDywMvBy4JXAmsC6wNbA kcDJwA+BXwKNwYxg56AU7BksDA4MBoODgjOCM4OzgrODdwbnBO8KPhJ8NDg3OD+4ILgw+FRwZfDl iuKKkorSirKKARUDK8orLqwYXHFRxZCKiysuqRhWcVmFVjGu4uqKCdpE7Trtem2qdrM2TfuLNl27 Vbtdu1Oboz2tLdGWasu1FdqL2krtZS2ivaL9VVunRbGe5SMrldq5uHKuJQPtCDKuSQIoB7FdDrwA rABeBFYCLwFb8PsR4Kht5i8CVttmcAZwp50bnIPtXcCjwFN2rnY9cKcd0ebAvhXWdJP0x1o1wA6T 0bjymYf9dJQsHNvCcS20jYjaFupYqENz/gDUKcfeA6RdshYtTCLtsc1HXwtwBnI+0BfoDwxGq0PA XwxUAUNR1pEZDWAEypdjW43tFdiOxHYUtqORc8cAY3FdXoPtVdg+hrbmAfNRfwHsFgLLgReAFcCL wErgJWAV7NYBUWA9sAHYCMRQdyvwDvAu8B7wPrANdT4AtgMfAnFgN/qxB9u9wD7ABPYDn4A/CHwK fAYcQv8+B47ht+N2NB/9y3/SrstHH/PRR8Qikl9vJxCPSD76kL8JeAs2W1B+G4gB7wHvA9tQ7wMA K0f+Dth8bIeDf7brgn8BpgO3ArcBtwMz7Ejwbvx+L7b3Aw/a0eDDwKPYh6+C8FVwAVAH26dhtxj8 EuAZYCnwLLAMvz0HhLH/PLbLgRdRZyXwCrhXUe91bFfbddoNwBQ7oU0FbgamAXdBQ3cD99hhrRa4 F3gIdg8DjwCP2jFtLrs3MAC6El2lNauMas9iKhkA743GrzTCE6GpKuipCnqKQj8m9GNCPyb0Y0I/ JvRjQT8W9GNCPxb0Y0I/FvRjQT8WNGJCIyY0QudLFBqJQiNRaCQKjUShkSi0YEILJrRgQgsmtGBC Cya0YEILJrRgQgsmtGBCCxa0YEILJrRgQgsmtGBCCxa0YEELFrRgQQMW4m8i/hbibyL+dC5GEfso Ym4i5iZibiLmJmJuIuYmYm4h5hZibiHmJmJuIuYWYm4h5hZibiHmFmJuIeZRxNxEzC3E3EKso4iv hfiaiK+J+JqIr4n4moivifhaiK+F+JqIr4X4WoiribiaiKuFuFqIq4U4moijiTiaiKOJOJqIo4U4 WoijRTohEhYyUoLNe5oVyllmoN614F0L3rXgXQveteBdmjFMZAw6egujpz23kIkS6LGFDJRABko4 2cSELqgCqp35vdBOsPySgB4s9ncDctnvl9v9YNMLbBB5ocqx7UUeJ+3A5CBTtsfWi8jmAfmY1QVo +3ygL9OYRUpYNopATWGoKQo1haGmOnIZeB1lAxgB7nJsq7G9AtuRwChgNGzGAGOBGuAqtPsY2pzH 1BaB2sLoTRj+CMMfYfgjDH+E4Y8w/BFGRjKRkSxkJAsZyUJGspCRLKgwAhVGoMIIVBiBCiNQYQQq DEOFYagwDBWGocIwVBiFCsNQYRgqDEOFYagwDBVGocIoVBiFCqPISAlkpASxgGMoH0cc0EeoMgpV hqHKMOISRlaisQkjK1nIShYUGoFCw1BoGAoNQ6FhKDQMhUah0CgUGoVCI1BoBAqNQqFRKDQKhUah 0CgUGkWcw8FZiPNsAJkBSo1CqVFkJxPZia5AYWQnE9nJRHayoN4o1BuBesNQbxjqDUO9Uag3CvVG od4o1BuGeqNQbxTZyUR2MoMvswwVhpLrgq9h/3X8hlkGNUeRpUxkKRNZykSWMqHuMNQdhrrroO46 qLsO6o5C3VGoO4oslUCWSuCqKQeep0q5HPmpGnmLRnchtpUscxWg1JdlMJqREtBQAhpKQDNN6r3S yWxjgBrgMZbPaCZqUvUq/L4O5SiwHtgAbGQZJ4FYJxDrBGKdQKwTiHMCcU4gzgnEOYE4JxDXOOIa RwwTiGEC8TMROxOxo5klgbglELcE4pZA3BLBB+BfaBS+tuBrmiES8HECPk7Axwn4OAHfJoKYv/Ar zQwJ7UbMySksIyTgswR8E4dv4u48pPl2BkY7CSONYjZE2AgX2vTaajTL8e1Qbg9MgN/usOn9oQmw vMOOsr1mrh2br7WMS4Cjc76areox0sbf1c71d7dr/V474pewHwbesXMrBgAazl2WAuuw7kTRp/T8 H+2ovxPQ3a7xl9qmP4Ba0Kf/dvQiHWwc7ZhoJ4p2omgnirom6kYJh19N9h0h1+afStairUj+6WSt vxCWvYDz7Zi/N7Z97LC/n13n7w8Uo1yCbSm2ZdgOgE05tgGUg0AFjhZCHypx5NtYP6J+aNePVciP VciPVciPVciPVci/CngZiACvAK8Ca9HWOmzRQ/96YAOwEXgD/GbgTeAtAGcQfuQP//s4/gc4FvKD fy/4fdiadrSAABzAAwKQDmQAre26AlzlFbSx6yqKAAVQgb4AxliBMVZgLBUVdqwiBPzOjlcMAnDW VoEcWYH8WFENID9WjMTvVwI4a6sYDYwBNxbbGmAi9n9vhysm4/frMefCAMajYTzaRszHTcAbwNvg Y8BWgEaH5sE0RKIOUU3AyzF4di4imoAnY7+K9yT8aqXE22KxjBI/YhlEHIOIm4m4mYibiZiZiJeJ WJnwsQl/mvCnCX+a8KcJ35nwjQnfmPCNCd+Y8I0J35jwjQnfmPCNCT+YGK+J8ZoYq4mxmhiniTGa GKOJsZkYm4mxmRibibGZGj3ToLqmvY5Cj3HosQ56rIMe66DrKHQdha6pNuPQZh3hYUnHFmW+yEXv +2G0vcBUQWFVGG0vcl3+Kbsffp2Rfxq/EviBAwrRei8Aax+0G4cP6vwK2uqH3/oDxeBKsC3Ftgzb AcwnEbRsQb8WWk9Avxb0a0G/cRwpDv3God849BuHfuPQbxz6jUO/ceg3Dv3God849BuHbyPQbxz6 jUO/ceg3Dv3G4e8I/B2BvyPwdwT6taBfC/o1oV8L+o0jBhHoNw79xqHfOPQbh37j0G8c+o1Dv3HE KIIYRRCjCGIUQYwiiFEEMYogRhHEKAL9xqFfE/o1oV8L+rUQtwj0G4d+49BvHPqNQ78m9EvjGUE8 I9BvHDGNIKYR6DeOuNZVXIe6k1l8I4hvBBqOQ8NxxLkOca5DnOsQ5wjiHEGcI9CwBQ1bRKTZBJ6O MZVSdfZnqi7EeHuBPR/j7I1tMbNoUnkQv4ewvQ1lqB1+N+F3E3434XcTfjfhdxN+j8HvMfg9Br/H 4PcYfB6Dz2PweQw+j8HnMfh4Lnw8F7414dcY/BqDX034NQa/xuDXGPwag19j8JkJ/5jwTwz+icE/ MfgnDv/E4ZcY/BHD2GMYewxjrMMY57ranIER1LGZWMFmYh0RnLnZlIdFKNWESk3/RcikV+Oshcfe XOzNZXsx7GFdgBXV8gxwpbC7na4Lbg1OGU7f+VQq2Pdw+r4G9mvZPuYL9qvcvTrH1sBZI0/32R4t V7HvCPuOse9a9l1HuMA1tE7gGPu+hvLYr2X7aJV+o1zF9mqwR2s00PZZme7RchX7jrDvGPuuZd+w 5vqyO2FP8OP4+/ld/H6BF7KEkcJ4YRb2eOF+YbPA87tQmiUOA27E51b2vUx8qxUvjGxV1mpMqw9b HUmrThuTdg8+j6ZtxX419uj3R/jcw/a3pu1xfsF+embaPekXpE9IP51+Oq06PZmezMjIyMsYn7Eg Y1XGhqaa6acz3s842Tq39bjWE1s/2npR6yOtE5mZ2Hs0MzdzKLbjMul/+4GzmWfbiOy7qM2wNo+2 PtJma1ZJ1rCszVlbs77F50zbIuxvxh6+25a1LWPs5rZFbSucX+j+n7O+bbug7YfZ47LHZW3OnozP zdn3Z3/QjrTr2C6/qWY2fTP3CfkXuUEhCqcIiqi0UtKVDKWN0pbd42mveJRzlA6KV/Ephcp5iqz0 U/o7930uVYYrumIoI5RqZZQyVrlKGadcrVyjTFB+r0xSrlMmK9crf1RuUG5Upig3KVOVm5Vpyi3K X5Tpyq3sTtE9Sq1yr3Kfcr8yt+mukVKvLFaWKs8pYeX5wDWB5wPLAy8GVgZWBV4ORAKvBF4NvBZY ze4oRQPrAxsCmwJbA+8FPgrsCOwLfBI46NxlOhX4JdAQaAzYQSHYKpgezAi2DmYG2wTbBrOD7YI5 wfbBc4Idgh2DnYKdg12CXYPdgt5gXlAK+thdqQuCfYJFQTmoBEudO1SDgxcFq4KXBocFLyOZiseO KOcA3QCc0Sg4e1LygP9i70zApCjO/19s78XswQIL7MLC4riDosj2zAgCdvfuKsiAxpEVFHU84oFH TOJGf0Yl3hl/XhGPRE1rBHHAaLRFJTjghY4oEiYxcjTxHsV7vBDxQvr/qZrZZUEFgfD4/z2P28+3 q7q6qt633vdbb1fPTvc0Mhu4xutc43XivOjR+JXXpheCIlAFuoMezJGeoIZ8LegH6kB/MAA0enF6 idNLnF5i+oHye3Bq/vkKLvBiBRd6sUa4rg9B4l6AyKwP57gJRMB4udqjvo/Z2KZ0sNHBQQcHHWx0 sNHBRgcbHWx0sNHBRgcbHWx0sDfTwUaH3GyPq2hQgh5x9JA6xNEhjg45+e2yYyo+VCA7gswIMiPI bENmGzIjyIwg04dMHzJ9yPQhpw05EbErvfvo3df4mWc3fg6+BF8DZnvjN6RepxEVk+capXON0qtB L9CXsnrSgWAIkvYCQ0Fn/3Bd1keRGqAJyftxzD2rPobjsaQRMB77lW5i50bAVZAeHFrJGk5HFLSF T9m63cbfZ1tpS2nBCGOM0LtN7za95/SQMqs26efbvorRX4z+YvQX20Sndl9VbFMP7a1KN9PGRhtb vxBcB66nRl3BBRsyBRduyOhRL6W3Uso1TJ+E51mf6qxP9SPAcRyfRXqhF9Yvos7F4BJwBWVXgqvA dZy7HtxA/o/gRtpwT6LfDG6l7nTSmcT1IixlF1z4bT28NkrbfqAesc30sNHDRg/ZY4weY1vVI3f9 kjMwXCDH1Yq1pfyLSC8Gl4DrOL4e3KpYcTAlE7jCVdCmnjb1tGlTOkq9cjq10baNtm0dekj5t8KB 9mupL3/NrGif+0ryJHCc0sDeTANlH3pxlBalHf6apOyR6mxFaqVkv/ka29JvA63StEpjf1uN61DS SWiXs7+N/W39GGofq3qM6T8nPR6cAdrAWZw/n/QCJS2yiS029U8EyZG8f6QGsbx/bGkn/GMr/0h7 xZW9Za5Nn7AhqbiTs1ln7lR1lErutPPm25yJ0yJOi3gHLyQnpudslmdfzmbtlo1vZrNc6xsVkxyl TY47nbXROJJ1HY4cdbTxXKmxjJXQcsDdpvEW+MSzzd3ASDBKRhxjvucYCwDrYoN1scG62FgEVlLb BavA6/JaZCS8NuNe4ICHQBLMZz21ADxOfiF4EqTAU2ARWOnF6SVOL3F6iRlr5LVIrdU6rkXGbM4t Q+JywF2F8TLHb4GPwCfyesCqrY02PqWDjQ4OOjjoYKODjQ42OtjoYKODjQ42OtjoYKODvZkONjrk 1ohxpUfHtQgd4ugQR4ec/HbZtlpnViA7gswIMiPIbENmGzIjyIwg04dMHzJ9yPQhpw05na5FBjwz bgd3gFlgNiO4s9No7gcPgIfBI+AJznF/bTwDliFhOVgBOvvlZc5lSN9Q3m0z3uX4fZDl+EPSj8An lHMvY6zN82GjnVcCF6wCb6maTsd4JTOkrdtt/H22XdP5WrQZ29qkbFG1ST/f9lWM/mL0F6O/2CY6 tfuqYpt6aG/VcaUxvvJSBld9Y4OXMoUXN7mjMrmjMuvAbl7Y3J25MBjsAYKUhUAYjOTcKLAveQOw ejGbSJvBaOqOJR0PDgZRuNJxpdlkhnVcabaiR2wzPWz0sNFD9hSjp9gP1iN3J9NxpUGmQ/9t9O/Q v0P/Dn220WebOTrvc4c2na40tGlTOub0aqNdG+3aOnSROozmOJqfI/Kuype/e+q40ijJQkm3N5Ou bEMvjtSAXjpdaWiR6mxBaslxdbrSbFO/HVca7G/LcWF/m9axvP1ts5SaXQGrQJNVoFkDagFrLjNA OkhJimxih039E0FqJO8fKT2W94+tbDSWNOcfG41i+dizPp9rM9Z3vtJswp2OK43iTjtvNnImTs04 NeMdvJCcGNuJCx1XmrzNcq02tVmuB0uxyVGW7rjSbKKNxpGs75jyP93aJucKSnrLO+bSVt960V/U i//Kn5f1Mp7bcZTZxta09dLbITUjt3yeHnJ9eNkf2DqrNvkmaseTv1Ai/xu9rRps57hzsr9Xpx80 gvaaG22w7bIZs+mZpI4X9gZ7EfVm/GpPvplc5rIqzXAut0VUi2/J8+R75VP5LU4+K3PqTIp8Or9l VWu3k73k/wtk66leG9sUNh/5jDxS5yPkp+Y3+1vjSG8PZzbpIblDrbeR5Zu1Tv14rTfra9o21v+B 8+t7Wu+YzX/M1v9Nm8e2sf4OMf3HZMtmraducwsnN9PbI8rGeb8xWuciSu5qQCRjDZq7GniJHyym i7hVNIjdOr6vl/uu3ij1Pb3R4gAREePEeHGgOERMEK1ikjhMTBZHiljHN/duEDdu4bt7KfGUWCSe Fs+IxeJZsUT8QywVabFMLBcrxErhilXiBfGieEm8LF4Rr+W+6SfebLi24YaGPzXc2HBTp2/9LWx4 ouHJhlTDMw2LG55tWNLwj4Z/NTxnnmWebf7WPMc81zxvs2/YXWpeZl6+2ffsbPMW8y/mbeZ0c6Z5 h5kwZ5mz5XfvzPvMOeb95oPm3Pz36375Hd+wuyR6afT30Xj0suhV0aujf4heE50mCkQbtmsQddhP vhNqDyGfBRzKpmHLRlYbIbYibDpMFGPX4aIE2+4jSrHvKNEVGxvCp77TXIatR4ty7H2AqMDmEVGJ 3ceJKmw/XnTH/geKHvjgENETP0wQ1fiiVfTCH5NEb3xymOiDXyaLGnxzpKjFPzHRFx+dKPrhp1+x n8ZWiL+uRZ8b2LrhtxvpYTY+q8Nr8um7h/BZEV57Aq1SeKwcnz2LPkvwWSVeW4bc5fisF157GVmv sPXFb6+xzwj5Pb/X2Xz48A1G9CZbH3x5rajCnzeIcnz6J1GDX28Ulfj2JtEL/94s6vDxraIIP88l j6/JL2xYSP0nGlLUxOPUfLbhH7TF56IbXj9L9MTzZ4tqvH+eqMH3U0Ud/j9fFEoOiBJYcJEolUwQ ZXDhUlEOHy4TfeDE5ez/YP5BFMONa2g1zcQycOQG0QWe3CiK4MpNnP2z+Wd6sE1b9IY3t9AD3BEV sGe6qJQMQnrCTIhe8GgWdWabs9HkbvNuUQCn7kWH+8z7qD/HnCO6w6/7RQ849iDS55pzRQ1cO1F0 gW8ni0I4d6oohXe/FNVw70xRAPfOFprkH2fPi54nimHhRaIrTLxY+GDjJaICRl4qKmHlZaI7rLyK tldHrxa9Yecf6P+a6DWiNjoNnvaFlb/B491gUm7rLwbAJ8ndMjFIDOrgruSrppjaUzG1UDG1SDG1 WHG0Os/RsWyViqndFFN7K6bWiJ+x1Sqm9lVM7aeYWqWYWqeY2l8czlai+Fqu+Fqq+NpVHM02QBzP 5kPfM+H079h8irWaYm0vxdoqxdoycY+4J89aTbG2WLG2uhNruynW9lOsrVKsLVes7apY21Wxtqdi bbHia3/xNtsAxdreDdc1XA+DJXerFXfLFXe7Ke5WKe6WKe5qirtlirua4m614m43xd0qxd1yxd1e irt9FXf7Ke6WK+6WKdb2VKwtVHytVnztr/ja37zCvAI+XWleKQaYV5tXs5fcLTOvNa/Ls1ZTfC1U fK1TfK3uxNdu5gzz9jxr+ynWVinW1inWlpt3mnfS/13mXfS2kcE9OzG4xnzAfEDUKgb3VwwuV6wt VKztF/1V9FeiJPrr6K/hdI7Bkq9Fiq/FnfjaTfG1RvG1n+JrneJrueJrqeJrV1FQPFPeq5W87rsZ n/Tf1mvnd1xNM3Jtvl0tk+r3pravZWrb15id7lEyHfcW8heOpm55PSPvKdhMaoY71gQZdE96037I qmsHxinvBbfPtnK0m6zwNq52flD7wR33bllSeZcWVndxbarncKc7OPM7dM52vqNj9FM7VlopZbn8 vdtmLRPql9FsaSt5B80+Lu/e8mdbaRlXW+Lbd9XqHlLdB+buALf3bxvWd5u33O4V8fbLVK23a/W8 A+Pc5k80/gsyd8xC23hnlG+1/f7csfvw7b4b2vY7IdXqB997t3+S9N0tNn4Gkz/ORc0p6hfkcp+F yU3GXCf3Wcz3/HURtwVK1FNI7c8g5Z4/6q+ePdotMDiwZ2BIYGggHNg7MCwwIjAysG/ADDQFmjue Rzp3i88jzQ7cGfhr4K7A3YG/Be4J3BtwAvcF5gTmBR4KJAPzAwsCDwceDTwWeDywMPBEIJV/emlx YEngucCywIrAyoC78VkmFnhdBhUM0gaVDCod1HWQb1CZNdTSraAVssLW3ps9eWRYltVktVj7fccz SIdYE6xDrYnWJGuydYR1pHWUFcs9l2SdaE2xTrFOzT+HlPiuJ5Gi86MLok9GU9Gnooui8t0lZ2K/ ElGHDbuKLtjRJwqwZYXQsGd3UYhNe4gi7NpLFGPbGlGCfWtFKTbuK7pi5/7Ch63rRRn2HijKsflu ogK7DxaV2H5P0Q37DxFV+GCo6I4fwqIHvthb9MQfw0Q1PhkheuGXkaI3vtlX9ME/pqjBR02iFj81 i774aqzoh79Yx+Kz36DPmYEz0efcwLn0cEWA+wc8Nw39bw7cjP524DbOJgIJtJod+Bv63BO4B33u DcxBn3mBeUh/KPAwbR8NLETiE4EnkJUKpNg/FXiK0S0KLKLt04GnGdHiwGJ0WxJYgibPBZ5jLMsC y+hzRWAFbVcGVtKnG3DpbVVgFZq8FHgJ6WsDa8njd1Esl/aiAu9ropv0vqjG/2WiD/4fKnrAAV30 hAd7UzLMGibqYMJwUSTZIErhw0jRVXJClMMKQ1RIZojekhuiL+zYX5TAkNG0GmONoRVMEV3gyjhR AF8OEsVw5mfUiVpR+jnEOkT0gj8T6AcOiUpYNEl0k0xChyOtI0U1fDqKOjErhj7HWMfQ27HWsUKD X8ejz4nWibSaYk0R3eHaKWhyqnWq6APnbmG1eVv0NlabM6IzuEdKRBOiJxyczVr0r9G7uY+6N3ov K1W4SJ37o/ezUn0o+hD3UcloUpTBzPncRy2ILmB1+mT0SdqmoinRC6Y+Rf+LootYrz4NZ+V7EU5r WNOwRnRvWNuwFlaJQBdYJXncM89jyeACxVpNMbVQMbVIMbVYcbREcbQ0sEdgD3gsmepTTK0O7BXY C3/rAR3vSr7WKL7WKr6WKb72VXztFxgVGAU/JGurFGsrFGsrFWvrAmMCY2DGpMBh8PvYwLHkJWs1 xdoyxdqeedZKvmqKr8WKryWKr6WKrz7F11rF1zLF1yrF10rF10rF1GLF0X6Ko3WKo9WBfweeR65k aoliapViqk8xtUwxtadiqqaY2lMxVVNMLVFM9SmmlimmVimm1iim1iqmVimm9lTsLFS8LFG87Gc1 W80wVbKzTvGyZ56RkouaYmGhYmFfxcISxcJSxUKfdZh1OByVXKxVXCxTXOyruFhlHW0dTc8bGVmg uFhqnWSdBAtPtk6Gr5KR/RQjqxQLCxULa6OzorO4t9nIxQLFvCLFvGLFvFLFPF/04eij3LtL/tUq /vVV/KtS/KtQ/KsUBT0my/uinpN7rRa7cU/+I/5xffwvfrq6TZLjP4LMevXfsty9hPyfTYwSW/0a q527C9hJciNq7yBJypH3HG3t9x078y+3GkVqJC/ZISfXRLbc71zZOcn51Nm+e9JtlpcbY/7OLp93 8uPdiSPe4hpT6bWT5Ia3cj62bXfiP1iubyvn4zvH2t5W/t+/s3i9tbu6nRXLNqzbmtwfJ3rvrPFu lc/yE5mYimDxjXN8x+Vu2Mo9v+fbkPF8XCviIMYWV1Flh62wNd3VONsYr/3fHe/WNEemHGGqI36q VULuU8wdkbthylbOr5Pf0lDX5bAaeVteg50SxX7Y3//FFdLW4uQW2+7ACim3ztkh2du1Qtq+T906 tf8/tkLakfXEjqyQtrbO2QGttjiirV0XdkDuFldIW1vn7IDcLa6QdmT+bkXuFnm9o/NoC3K3GMu2 ts7ZEbn/P66QdiKft7hC2to6ZwfkbnGFtBPvvLa4Qtp5nzFseYW0tXXO9v9tcYXURVzQ+Fnj57rQ Nb0o/1Rs+xOxNXrf/DOxQ9QzsSP1Zn2MfqAe1Q/VJ+qHq+dhj9WP+57nYXNPw56lnoc9Rz9XP6/T 07B/1Kd3PAU73bjduMu4x3DyT7+2P/n6uPFE/tnXZerZ19eMt42sscb4ythgeGaBevL1+557zT31 Wqeeex1o7mL6Oz31aphj2592NeUvDp/O+D8TXRo/b/xcdMEOQhRjC01IexSJQmxSKoqwSxklFXoF ++56d/Y99B7U7Kn35GwvvRf7Gr1GFGCzvvQzUB9ICbYTJVhvCOVYkPxIfST5Zr2Z/Rh9DDUP1A9E SlSPilLseij7ifpE0RX7Hk7+KP0o0R07Hy16YOtjRU/sfRzl2Fz4sPpJnMXyokzaXpRj/V9Q85f6 L9n/Sv8V/fxa/zWt2vQ29nhEVOCTs+jhf/T/4ezZ+tmUn6OfQ318JCqll0Q3/HQZZ/GVqMJbf6T+ dH06+xn6DMrv0O9gn9ATSJylzxLd8OJ0UY0nb2d/l3GXqMWj94jeeNURffDsHFGDdx+gZK4xl33S SLKfb8yn5gJjAWcfMR5h/7jxuOiF55+gn2eMZyiBAaIvHFhGOTwg/5rxGvm3jbfZZ40sNdcYa5Dy lfGV6Ac7NrD3DE/UwZIC0Q+mFIkG2FIiAjCmqxgkWSP6w5sKyuGOGCDZI+rhT0/q9DJ7se9t9qaH PmYf6teatezhlBgIq+qEfKK6P2cHmAMoH2gOpD4sE7tIngk/TBvKWdgmdoVvBvXHmmPZR8wI5Qea B7I/yDwIiT8zf0b9KEyUvwq7uuCCggvh4qeNa0WV4mVh47rGdaJcsbOw8YvGL0RZ45eNX5L/qvEr UdD4dePX5Nc3rhddG79p/Ib8hsYN1PcaPVjFrIYZhfC4RC/Wi4V8r2EpPvbB5gq9HDaX6ZV6N6Ge g4eRzHt8XA2bK/Teeh/O1ui1eU4X6v30AfC+HmZX6Lvou3DWr/tpu6u+Kzxo0BsoCegB8oPgfaU+ WN8TJg3RhzITGvUgsyXEHKjUh+nDKB+uD4dD++j7kB+hj6CVnBvd9FH6KGTtq++LJoZukGfS0qpJ b4LxcuZ001v0Fkr20/dDk/31/ZE7Wh9NXs6oQv0A/QBKxupjKYnoEaSM08fRarw+nh7kfCvQD9J/ JvqpWVetH6IfIgborXorM0HOwGo1A+v0SfokZsVh+mGiVs3Gan2yPln014/QjyB/JDOzvx5jZvaS bwUQfdTM7KFmZh/9RGZmnZqZNWpm9tJPY2b2109nZtbI+MjZM5iTfdScrFFzslrGSsp/y2ysUbOx rz5V/x358/ULqHmhfiGz/SL9EvS8lFnal1l6OZpfoV8leutX69cgZZo+jZJr9Wvp5zr9eurfoN+A /nIOV+t/0v9EbzfqN6LnTfpNlN+s30z5n/U/U9/Wbdreot9Cz7fqtyLlL/pt5OXMr1Yzv06/Xb8d KTP1mbQlflNfzv864ygjJkYYRxvHiL1ULNjFmGHMEINVRNjFmGnMFLsbdxh3kE8YCVFvzDJmkZ9t zBaDjDuNO8n/1fgr9bkSUPNeokaDfB+C2NO4n6ixh/EgUWN34+/GPEoeInbUy6uECBgPEzX2MB41 HuPs48ZCymXs2MV40lgkBhpPE0H2MBYbizn7rPEsbZcYS5DyD+MflCw1lpJPE1/2NJ4znhdDiDIr hN9YaawSuxr/IdbsabxkvET5y8bL6PmK8Qr5V41XaSVj0BAjY2SQ9brxOpq8YbxBfrWxmlZvGW+J 3VSEGmK8Y7xDybvGu2jynvEect833icvI9cuxgfGB5R8aHxIyUfGR0j52PiYVp8Yn9CDjGv1xqfG WmrK6BY0vja+Fvsa3xjfCF1FuqCKdCPlV4lFo9nF7CKGq6gXlO+GEKPMYqJeyCwl3u1tlhPvRqp4 N0zFu5DZg3g3yqwm3g2T103O1hDp9laRbpiKdEF5DaW8nhg3TMW4fcxdzQbyAXMQNXczdxNDzd3N PYRu7kns24fYp4t9zaAZFmFzb3M4UvYx96FkhDmCfkaao6i/r7kvesrIGDT5ozfLtNC/yWyivNls przFbKH+fuZ+tN3f3J+eR5ujkTLGPIC8jKdBFU9HmuPMcUgZb46nLdd16suoOtI82DyYOjK2Noou XY4RpSyG7i6YV7AQLNFGaAdrp2tnF91aNLNornZ60ZKSWMmCkqUlK0u+8O3ni5UdU3ZR2WVlN5fN LLunbF7ZwrKFslbZTNpt3E7fuJUdU7JUtVlStrxsiTqnzpe9Ul5evkd5pPzg8onlB1e8XrG+sm/l wMp55ZHK1ZUfdiutml2V7H5l90T3B7o/1f2f3Vd1f727qtM9W975j/a0y2/dr6xcLduUl1f2laBk XQ/RfZ02omguI2AM6HFRyQJ5LHVgXCuLbi1ZWl5Oz6ulXOQl6JNj9qpv9PlQ5VZji7myvtqwDUcL fPuVHYP263N15CZHIltXze5+JavIu7Ul2jvae/56f9i/t3+4f4R/pN/0W/4W/37+/f2j/WP8B/gj /nH+8f4D/Qf5J/qP95/gP8V/mv9M//n+2/zT/bP9f/fP8z/kT/rn+xf4n/I/7X/Gv9j/rH+J/zn/ x/5P/GuCewdbgxNDE0OTQ2eEfhs6J3RfKBV6KrQo9HRocejZUDr0z9C/Q8+HloWWh1aEVoZWhf4T eiH0Yuil0OrQmtCnoS/CWrgiPDTcGB4eHhM+IDw2HAmPC48PHxieGD4sfHh4cviI8JHh48IXhS8O XxL+Y/jm8JzwQ+Gk9WVTn6ba5tuaZzTf3jyz+Y7mRPOs5jnN9zc/0DyveX7zguZHmtPNz7VMbjmi 5ciWo1piLUe3HNMypeXkllNaTm05reX0ll+3nNHym5aLWy5piU94Z8L7Ez6Y8NmEdRM+n/DVhK8n rJ+wobWwtai1vtXf2tC6R+uQ1r1ah7YGW0Ot4dZhrfu2GvJXeby2AV/LtwWRc8jFRT9/2HP9B3jV /ogX94/zHP94jg/k+CDSv4N54CGQBPPBAvAc5z8Bazw3NBGc4bnNt4E7vOrmBOkscD94xKue8IFX 3VroOa1F8r2+/npa7+9lkJbwn+Kl/TPke305yiA7g9wMfWfoO0ObDG0yooCzLlplxBX+ARvi9DDF P5A0jK7DvKx/JGgB+4ND6XUS5YeBw8ERHB/r2f7jwM85Pp70BNITSU8iPZn0FC/lPxWc5iX9vyA9 nXQ6fc0AM2k/i3qzwd/BPPAQSIL5YAF4mHpPg2fAYvAsWAKep+0ysBysACuBC1bR5j/gBfAieAm8 jh5vkK4Gb4K3wNvgXcrfA++DLPgA/T4Cazm3zkuGol4iNMGzQ62eEzoUTASTvSz+cEK/JT0H/I46 53N8AbgQXAp+D7hbDV0G/hdcRZ2rvUTzTZ7d/GfAXWzzLeBW8Bdwm+c0z+b8XaR/A/d6yeb7wP3k H/SyzXPBfPAodR+j3kLKnwBPAu5Qm58Cizj3NHiG/GLSZ8FS2qTB85Rhq+aVpK5nT/gEfOplJ3wG 1oHPvWxrMRwqAaVeorUr8IFunt1aBbqDHl6qtae8B4UvaVHYwbR2lknuZRRLIljvFM7OkO/1hVMR +BSBT0n448IfF/648MeFPy78ycCfDPxx4U8G/rjwJwN/MvAnA0dcOOLCETlfknAkCUeScIToAxaA 5zm3DCwHK8BK4IJV4D/gBfAieAm8Tp9vkK4Gb4K3wNvgXcrfA++DLFjrZfC/i/8z+N/F/3IuJvF9 Ep+7+NzF5y4+d/G5i89dfJ7B5xl8nsHnLj538XkGn2fweQafZ/B5Bp9n8HkSn7v4PIPPM/g6iX8z +NfFvy7+dfGvi39d/Ovi3wz+zeBfF/9m8G8Gv7r41cWvGfyamSDndbHn4kcXP7r40cWPLn7M4McM fsyIPngiQ0TKqnkvo8J4FRmkdTNYN4N1M1g3g3UzWFdGDJeIIUefYfRS8wyRKIvGGSJQlgiUzUcT F15IBpyQn9+z5bvckJOFDxlRCkOq1fnjvTB1BlNqEhci+bqDxfX+AZTUEykHkg7Bs3uBMLN6GDqM BC2KYxn/GBWNHNiUgE1J2JSATbY/RvmxHB8Hfk7Z8aQnkJ5IehI4GZxCnVPBaeAX4HT6nU6fMxTb HNiWQJsE9khgjwT2SGCPBPZIYI8EEcklImWISBkiUoaIlCEiZWChAwsdWOjAQgcWOrDQgYUJWJiA hQlYmICFCViYhIUJWJiAhQlYmICFCViYhIVJWJiEhUkiUpaIlPV/DNZyvA4/RIkuE2BhK1GFiIxf EkQl6ZsEUSlDVMrAUAeGJmBoAoYmYGgChiZgaBKGJmFoEoY6MNSBoUkYmoShSRiahKFJGJrEz4nm 2/HzTECEhqlJmJokOrlEJ3kFShCdXKKTS3TKwN4k7HVgbwL2JmBvAvYmYW8S9iZhbxL2JmBvEvYm iU4u0cltfk5FqARMtptXkF/JOddLwuYkUcolSrlEKZco5cLuBOxOwG4bdtuw24bdSdidhN1JolSW KJUVxbDIUUw5nvh0AjFdene2fK+vilzDOGpREUxGpCwcysKhLJzJsXdKPrKdCn4Bpqt4JiORYjUc yMABFw64cMCFAy4ckBEni6+z+DqLr7P4Ooufs/g5i5+z+DmLn7P4NY1f0/gwiw+z+M/Fdy6+k5El i9+y+C2L37L4Ldt8D/Z9EMwF81WEyGLjLDbOYuMsNs5i22wzPMSuMjJkJ6whInyqIkIWm2WxTRrb pDvmoYy3UxntFEaaZDY4aoSz5Xt95diZywM4HgjasN9V8s1G5JLkkirXXjZAzde4KstSJuf8Ceqq ztlgqRcJdpVvkSIXJ+eIstBKrzq0youHuE6HXvSqw8eBi73qlhj4DeuZBrAv1yL5+wclIa6EoWVg lRcLwYfQF54T1r1keLh81y+lafpx6SdJP0n6SdLWbZVvUe0Skm9sl3tHnBByNsTpywnNIX2D/t4E b3mp0Nuk7zI3PuJK/TGAd6E1pJ+SriX9jDqfk37B8ZfgK6R9TT/rvXR4mNIjGSbOhE8AxJkwcSY8 BRBrwlg2fCpg9RP+BWD1E/6NZ4fPJD0L/A84G/wWnEv5eWAq+B1gVRFmRRH+vZcKX4asadS5jvLr SW8AjwDmXPgx8DhgroWZa2FWAmFWAuFnPLuF1UvLoWAimAQOA4cDYmTLz71Uy/HgRC/dchI4k3J0 akGfFvRpOQecy/nzADq1oFPL+ZRdQHohIIa0XO4lWmBBy9XMw92BifUt0MQcbQYt4ADKx4IIGMc5 +aa6Yjxh49UsVk5h2Wl4NIslU5v4ewpnM538nVG+TIoAvjTxo4nfXPzm4jc3JFfLawFxAhu72NPF ni72dLGni+1cbONiGxfbuNjGxTYutnGxjYttXGzjYgeX8bqM12WsLmN1GafLGF3G6DI2l7G5jM1l bC5jc1vlrxRIXkutk/AxDR9t+GjDRxteJ+F1El5Lbqbhpi0KqCnHllS2qEb7MKMdTEkEhkUY7WBx csih9D5vamgO6SNw7lHwBr2/CVi5wN00NrBDrFiwg4MdHPibpjeH3tLYw4G/0iYOPWfgb4bes/A3 A38z8DeNpDT8TcPfNPxNw980/E3D3zT8TcPfNPxNw980/E1jWwf+puFvGv6m4W8a/qaxt4O9Hezt YG8H/mbgbwb+uvA3A3/T+MCBv2n4m4a/afibhr9p+JuGv2n4m8ZHDj5y8JGDjxx85OAjBx85+MjB Rw78TcNfF/668DcDfzP4zYG/afibhr9p+JuGvy78lf508KcDf9P41MGnDvxN41e75UraXqX86+Bf Bw6n4XAaP9v42cbPNn528LODnx04nGmV90uFKpqsgb+wVLFzb8VqVpf4J4V/0vgnhT9S7SzH/ja2 n4bdU5Lt2N3F7i52d7G7i91d7O5i9xR2T2H3FHZPYfcUNk9h8xQ2T2HzFDZPYeNp2HgatnWxawq7 prCri11T2DWFXVPYNYVdU9jMxT4u9klhnxT2SWGfNPZJY5cU9kgx9hRjTzFGmzFO6+DmVEYgI6AD e+RMtIWWn5u5OFwIU11Y6oa7eIlwP/muX3LTyE1TuVRY/q5oAbUkl6eS+5R68tcZCja2sJ7zIta/ 5bWCXJycI7p0iahPgqYXXMn2R7XNLphb8BjbUraVbK+xrWFbX7Be82k+mZepVqPVFMzW/OBytd2o toTc6GGu9oC2Wqa0nls4oPCUji33Dl65XVm4vPAF8E7hGrblRYLNx1bNNohN/tPJKrI4I4/IFR1U dFDhC0WHgUfUtkRtq+RGL+8UvVVco/p7p6i68J3i1uJb2WarLVn8GFhavJJtNduHbF8Uf1HiY6tm 85f4i5PqiFyJXqIXP1YyCsxQm6O2R+RGH0tLlpSsV70tpY+lxfKXbqfLX5jVLtV+r8W1GdjgXs3R 7tPmaA9qc7W/a/O0h7VHtEe1x7THtYXak1pKe0pbJH/bVVusLdGWamntn9q/tGXacm2FtlJztVXa q9rb8jMk7QPtY+0Tbc2AFQO+GrB+gFev1RfJ37HV39Lf1t8JFgWLgyVBX7As2CvYO9gnWBOsDfYP DgjWBwcGA8FBwd2CuwcHB/cI7hkcEtwrODTYKH9LNhgK7h0cHtwnOCI4MmgGrWBTsDnYEtwvOC44 QX6uFDwseHjwyOBRwZh1hnWxdYl1t/U36x7rn9a/rOetZdZL1svWK9ar1uvWG9Zq603rPet9K2t9 YH1ofWR9bH1irbE+tdZan1nrrM+tL62vrfXWN9aGpoImramwqaipuKmkqbKpt/wkqalfU11TfdPA pl2adhUFBdM8RzuedU4huTi5lMa9/oAV8FrTZjLwD+VnPhvWqU9/7AFfw2NZHqFcHvlUeYxcWOXi 5GKiUJu5YZ3GnQK14h2tc58iydaxfOuwOgpv0peteqjV7kaTe4AD5oAHaDWXdB5Ikl9A+ggp8UBL kS4iXcoI/gn+Bf7N8fNguWdrKwD3LBorJu0Fyl4E8nfntA4d28fbltPYq+84l1LnypEfR24cmXHk bZSzHKygzb/B81584MFgIn1XfqvFUrTY2CpGqxha2N9q2UM7GsnHUutk0jNIifMacV4jxmvEeO1/ weVgowQbCbJ3h96d9jGLLurTugL9bs/RF0kfk4uTS+lveU6wiHH10B/n3JOULiFdRvoK6asgA14H 74H3qV3HOtcPBnl2cC8wgrKRwCLfJGXJlbDQgqUb1rEerg9Olm/Oo6yNI1uWez5ykaD8VSxZHuYo pnIxcuiWawma6XWy1Ltjla2111et2/sKd/QVUzJqgz28VLAa9Aa1oI4zA0gHAj/5BtJBpLuT7kXa SDqcMY0AI8G+HBsgP6ZgC5rsB0ZTNgaMUyPEbh06Sl3qpY75o43n4Mzmnu1kwzjyN8q1QJPkzFZb DFeWb28Vo1UMrWzRw/q951iXcX25hvQmUu75rTvALMB9ruUAruxWhnNvg/c92+J+wPqGsg2e06R5 dlOhtKd1OiVXSI+Qi1tneCmOUpb8RbIu8gomNOu5Deu4jtU39Zc+pqyNI1uWez5yEcptVR7mKKZy MXKyR9Vyw7qmIiT2lz7uuDpq7fVV6/a+wh19xZSMWus/6ML8tV4Gr4IMZ94gZW3CuGLWu6Tvk35A uoZ0LSmzgHHGGWe8SXipJq7c7eNtKkaTEtCVMh+oVCNk1B06Sl3qpY75o43nvsPHnewbR/5GuRoo /C4ff6vF18or7a1itIqhVe4dgqU/vUNQ/PQOQSF+eofgjrT+6R2C2yPtp3cIim3/rvFP7xDc+e8Q 9If9wzv+15/7P/849T/+Q/2T/If7J/uP8B/pP9b//9g7D/gqiu2Pn5tJT0gH0m5hZkVE3bu7V1AQ Z/ei0ltCRxBCLwFCCL2KdBBEUBQBERVREWkiIiDSbID0LiIoTZAiAgLC/+xJHg95/J+Bl/je//+Q z+e3m7mzs7tzvnvO3LPXmRY8g7fmbXg73oF3uv7WfyZ/65+899/Ct/JtfDvfwXfyXXw338P38n38 ID/Ef+A/8sP8CD/Gj/Of+Al+kp/K/ZUAP2fUMGobaUa6UfeG3wr0NwYYA41BxrPGUGOYMdwYYYwx xlqTrVesKdar1lRr2k1v+GdZ71jv3fSef7m1wlppfWatstZa66zPrS+sL+13/9YWa6u1zdph7cx7 v3/mFm/4g9ND0kPTw9LD06PTY9Jj0+PS4+05BLHvfJCK/VcWHNiH5SAA+/ExYNiXEgKxP/0QhH36 BARjvz4JIdi3lSAU+7cqhGEfV4dw7OcaEIF9XRcisb/rQxHs84YQhf3eCGKw7xtDLPZ/E4hDGzSH eLRDC0hAW2RAUbRHayiGNmkDxdEu7SARbdMBktA+nSAZbdQdUtBOA1Cn8+l4Pa/x1/B6ZvKZEI12 ewtb+JAvxetfw9fg9a/jX+Gnm/gmvKotfCdezy6+C69nN9+H13OQH8TzHuJH8Khj/ASe6yQ/iWc5 xU+hnuan8e7O8DN47Fl+Fu/oHD8HxdGWNSAG7VkbItGmaZCIdk2HKLRtXSiK9q0HqWjjRhCEds7C fbQ17vc3+mP9AcYgrIkWx5rDjBF4LNocotHqkyEeLf8KJKD1p0Ei2n46pKL9Z0CgzQCEIAVvQKhN AkQgC7MgEnl4B4ojE++hzrPmQTCyMR+PWmAtwKMWW4vBgZx8DEHIylL8dJm1DFtYbi2HYsjNCmwB 2YEiSM8qiLIJwrN/bn0ORZGjL7DOl9aXeCUbrA0QgExtwmvYYm3B+lutrRCLfG2DOGRsB559p7UT EpG1o+BA3n6CQGTuJIQid2cgAdm7AAHI3iVgNn/46dW0qxCMFAZCGJIYBOFIYzAUQSJDIAqpDIdY pDIaEpDMGCiGdMZCIhIaB0np8cgpzSHIXdyFJHm4B/UB/iDyZLMbwcvwMtfZtXllRGo8kRpIpAYR qcHEaEIeow14A2TCJjWaSC1GpCbyprwp8meTmkykphCpMURqKpHq5G15W2TF5jWSeA0lXsN4Js8E F+/GuyFDz/AhyPQYPgb3bWoZUVuUqI0haiP4J/yTPGoZURtM1CbcQG00UZtC1MYQtZFEbRhRG0bU xhO1wcSrk5/n58FF1BYzahq1kGCb3QRiN5LYjSZ2Y4jdCGKXEbsRxC4jdhOI3WhiN4bYjSR2ixK7 ycRuCrEbSexGELXxRG0g8ZpAvDqJV6c1x5qDPL1vvQ8u6wPrA1Sb3QhrobUoj1pGvAYSr6nEa8IN vEZbq601edSmELUxRG0qURtpfWV9he2vt9Zja38nOP4GghOt7dZ2SCKCnURwJFEbSNSmpJ1NOwsh ab+k/YJME8HEaxDxGnwDr9HEayLxmkK8phKvkcRrKPGaO4dg6N05BO/OIfgnx9+dQ/B2j7w7h2Dh nfPuHIL5OfL/zRyCxmr67fLffrmc+6vl3fSL5UPGj8YR46hx3DhlnDbOGOeMX40Lxm/GZePK9V8x l/mnv2Ju6Wvla+1r42vra+dr7+vg6+jr5Mv0Zfu6+3J8PXw9fb18fXx9ff18/X0DfIPyfvM81Dfc N9Y33jfB94Jv4t9/Ae1b5lvuW+H71Lfat8a31rfO97k/zV/XX89f39/A3/CmXz4392f4W/pb+9vc 4jfQ3f05/p7+Xv7e/n7+/v4B/oH+Qbm/i/aP8I/yj/GPzfsddKlb/RI6/bF0mV4pvXJ6lfSq6dXs OQSx/1bjiH+tsRYc2I/rIAD78kscQW0wNkAg9ulG/Caw2dgMwdi32yAE+3c7hGIf74Aw7OfdEI59 vRfHXfuMfTi+OmQcgiLY7z/id4YjxhEcfR01juLo67hxHGLRDqcgDm2B4z20B46z0Sbn8HvFr8av ONK7YFzAkd5vxm/4HeOycRmSjCvGFUhGWzFIQXsVQVV9KgSh3bwQjLYrAwlov2qQiparDg60Xj0I QAs2wU9b+FpABFqwHRRB27WHKLRfJkSj9bIhHi3YC4/t4+sPxdF2AyAJ7TcIdbBvMISiHZ/BY4f4 hkAk2nMoFEObDscrGesbCzFo2/HY5gTfBDz2Bd8L2OZE30RsbZJvEl7Jy76X8ezzfPNwH+2O+8t8 y7D+ct+nWBOtjzXX+j6H4mj/NIhDBupCPHLQEEsa+RtBKpLQGIJsGiAUeWgKYTYTEIlUNIciNhlQ zGYDkpEOHMMjIe3wqPb+9ngUkgIOZCUTApCXrhCMzGRhnWx/NrbT3d8diiI/OdgOMgRRSFFviLZJ wmsY4B8ACcjTQKwzyD8Ir+cZ/zPY2hD/EGDI1zC8nhH+EXjUKP8oiEXWxuCVjPWPheLInBtHmzyd 42hTSVfwO1Kp9FIQjwyWBgdyqAJDDnUItFnEOmXSy0AIEvkofo+qkF4BIpDMx/B7lEyXODqtlF4J j62cXhmKIqlVsP2q6VVxvFoNmaU5BI25xlzkaZ4xD3WZsRypsjmOz+PYJjiAqGVEaiCRGkSkBhOj IcRoqHHYOIwc26SGE6kJxjHjGLJ4wjiBLNq8JhKvScRrBPGaTLymGOeN80i8TW0MUVuEqI0ialN9 Dp8D7R3ri4OivhRfCu7b1DKiNoKojc+j1uaVEa/BxGsI8RpKvIYTr0nEawTxGkO8RhGvUURqMDGa QoymEqMJvud84/C8NqkhRGoMkRpOpEYQqfFEKiNS44lURqSGEKnhRGoEkRpDpCYSqUlEagyRGk90 BhKXIcRlir+VvxWSatOZSlzG5xFps8iIwkCiMJkoDCEKQ4nCcH8ff19k1GYxiViMIBaTicUY/2D/ YGz570QGEIuh/pH+kUjhaP9o5NUmMoWIjCEKA4nCpPT70u/D7zZ/ZzGAyAsi8oKJvFAiLzzdTPfj d3ebvyTiL5n4iyH+ihB/URCgDba/F+knyjWC/mDkNyb+q//RKLcAZj76p+cYVujz4tFsL7RXyPPS 2TMTFGz2+Q+tD/vbbAeF2WO533Dy9gvrTgp9LkS6j7/sHIVsj7/iPgp9xsa/YmaWa00L2x4391Pu d/7COttfeI4pBc/AzfP8XHPTbDHd/tV5w/7Q5s32uJ6hKcBz3DR/D814060w55uh+yCbF6RN/qGv uuX+7qAgz/EPNq9C/2yrF9jzf/N8Wdi+nekr1HHKda4K0h43c+Wm+2hakPdxi76qQv1VpfB8Su4M SQX8DN58H/QMFuw93JyJy+urvBm2Cugct/Il9K/g+ut/sXnBnuOWvsT2WgXT/q3PeeNYqGBmCf2H vhqWS1XhzX1YOPfxD+cYlufbC/KXMLdid8rfn8FCuY8puUwV9jeego61/3COboUQz/90HPWXjOv/ T+QI8tFX/ydyBH/ez3dzBLdxjrs5gts5x90cQW4Lt9kP/805gtud6/dOcgS3bY87yBHc7hy+/6k5 gtvuqzvIEdy2ze8gR3C7c2b/p+YIbpurO8gR3EFf/UfmCG77Pu4gR3Db/5/CHeQI7siX3GaO4A5t fnvnuCNf8p+XI7jtvvovzhHcEbt3cwT5O8cd5Aj+9Xcp/z05ggLoq/+IHEFBrER1N0eQ73PczRHc zjn+S3IEBX2f/59zBAW93s+tcgQFbo9b5AgKeh2ff1eOoMD76hY5ggK3+S1yBAW9bta/K0dQ4Fzd IkdQCH31b8kRFPh93CJHUNDrot0qR1AovuSmHEEh2fyP5ygUX/LX5wgKvK/+H+cICoXduzmC/J3j FjkCfCYLe9wdABUCngt4HoDVZDUhkNVmtSGIpbE0CGZ1WV0IYfVZZwhlXdlzUIKNZ+PBYhPYBPCz iexlqMimsOlQhc1gM6Amm8lmQi173k2ozWaxWVCHzWYrIY2tYl9CR/Y1OwDZ7CA7CCPZD+wHGMUO syMwmh1jx2As+4n9BM+xk+wsjHNdcgfBJHeiOxFmaO9q78Hr2vva+/CG9oH2Abypzdfmw1vaQm0h zNI+1D6Et7WPtGUwW1uhfQpztc+0TTBP26KdhpXaWe0sfKed087BAe28dhm+137XA+GIHqwnwSk9 Rfc5mF5GT3Ok6nX1uo5yen29qaO87Cg7OyrKHJnjqCR7yp6OyrK37O2oIvvKvo6qsr+c5KgmX5KL HK3kYrnYMUQukUscz8ql8lPHUPmZXOcYLTfKi47n5SWzmOMTM9FMdOwyk03h2A0BDruvx0GpgPHY 40Wox4Opx0Oox/td7/H6WN6ANcT9RqwxhNlzeoKDNWXNIIA9zZpDOGvBMrC8JWuFtmnN2gBjbVk7 iGDtWQc8tiPaLAxtloUtdGPZEMm6sxz8tAfrgfV7sp5Y0ov1wv3erDfW6cP64FF9WX8sH8AGYflg NgTLn2XDkInhbCSWj2KjsHw0G401x7Ax2NpYNhb3n0MyQomMICIjCMmYiCWT2CS8hhfZi3hfL7GX sGQyEhOCxExBfZW9iiVT2VTcn8amYc3pSFIwkRRLJMURSfFE0r1I0mwseYe9CwnsPTYHitozm0Ix e25TKM7mswWQaM9xCkn2LKeQzD5iSyCFfcyWQkl7zlNItWc9Bac97ym47JlPsWQNWwtue/ZT8LAv 2Bd43i+R1HuR1K/xXOvZeizZwL5B7jexLdjOVrYdONvBdoFgu9leUNg+tg9rfsv246ffse/gHnYA KS9JlBclyu9Fyg/jtR1B1u8h1ksS64nI+kks+Zn9jDVPsVNY8zQ7jSVn2Bm8/rP4JMS7LrkuQZTr susyRLuuuK7g/u+uqxDjuua6BlFue8q7aLfDHQAxbuZmWBLoDsT9IHx+ouj56UfPT1l6frz0/Gj0 /NxHz49Gz48Xn58luP+xthQMe05XKE3P0v34LK0Cn7ZaW4Pla7V1oGufa1/AA9qX2lfwkPa1th6P 3YDPm4HP21ZsYZu2HcpoO7Sd+OkubRfW363txpI92h7c36vtxTr7tH141Lfad1h+QDuI5Ye0H7H8 sHYUHtSOaT9h+QntBJaf1E5izZ+1n7G1U9op3D+NT7VOT7VKT7WKT/V5LLmgXcBruKhdxPv6TfsN Sy7h065pv2u/o17VrmLJNe0aaDroAIbu0B3g1QP0ALhPZ+gR0tAjBMPDeogeAuX1UD0UHtHD9DB4 VA/Xw7E8Qo+ACnqkHgnl9CJ6EaijR+lRuB+tR2OdGD0G92P1OHhMj9cTQNpz4IKpF9eL47GJ6Gss 9DWp4LdnxIWK9py48LheQufwhC50BWrbM+TCk/YcuVDJniUXKuv36/fjsQ/oD2K5qnuhij1fLlTV Dd3AK/TpPryGMnoZPHtZvSyWPKyXg2p6eb0CtvaYbkJ13dIrQg39cf1JqKlX0ithzcp6Ffy0ql4V aunV9Gq4X12vjndaQ6+B11xTr4l3UUuvhS3X1mvjfh29Dl5zmp6G9dE/Yv36en0saaA3wGtrqDfE 8kZ6Izy2sd4Yj2qiN8GSp/Sn8O6a6k2hAnrSTtBXZsrO0Nz2p9DI9qfQ2PankG77U9zvL/tj+QA5 EPcHycHwlD3TL9SVz8qhUE8Ok8OhqRwhR2L5KDkamsgxcizUl8/JcdBMjpfP47ET5CT89CU5GVt4 Wb4CT8sp8lX8dKqcivWnyWlYMl1Ox/3X5GtYZ4acgUe9Lt/A8jflLCx/W76D5e/KOdBAvi8/wPJ5 ch6Wz5fzseYCuQBbWygX4v4iuQjL0e9DQ9vvoy6VS7HkE/kJXsMyuQzva7lcjiUr5KfY5mfyM9RV chWWrJarcX+NXIM118q12No6uQ7rb5QboYX8Rn4DreQmuQky5Ga5GVrLLXILlm+VW6GN3Ca3QUu5 XW6HPnKH3IH7O+VOrLNL7oa2co/cC+3s+ZChvT0jMnSQB+T30NGeGRk62XMjQ6Y8LI9AZ3lUHoPe 9kzJ0MWeKxm62rMlQ5Y8LU/juc7Is1j+izwH3ex5kyFbXpAX8Kouyot43kvyEp7xsryMJVfkVegu r5kO6G0GmIGQYwaZIdDDDDXDoacZYUZAazPSLIKfRplR0MuMNqNxP8aMgQwz1oyFdmacGQctzXgz HvqYCWYC7hc1i0JHs5hZDOtj1MT6yWYylqSYKdDCTDVTsdxpOvFYl+nCo9ymG0s8pgcyzRJmCWhj cpNjO8IU0ALHNR9hrH0OYiiyhuRF1gasAcazhhhZQ1ljjKyhrBnGVMaaY0wNYBkYU0NZG4ymoawd RlOGcbQj1s9kmahZGE0DMI52x307jgZS7Axi/TBqMjYQoybDqDkYzzIUo2YwG4FRk1GkDKQYGYJx cRLqZDYZj7KjYBDFvBD2Lka1WDYHo1osm4tRLZbNw6gWyxZgVAtjizCqxbLFGNVi2RKMamFsKUa1 WLYMo1o4W4FRLZatxngWztZiPIvFeLYO79qOXpH2bN44ztjENmHJZoxhsfbM3hi5d2IMi2Z7MIbF sv0YvWIoekWy4+w4RpfNri3gyIs9V67HkhBPLU8tcHjqeeqBg6JIcYoixTF+fAQJ2hKMIonaUowi idqnGD/itVUYP+K0NRg/ErUvMHIkal9h5IjHmLEB63+jfYO6FSNHHMaMHbhvx4wEihNFtf0YIeK1 7zFCxGOEOIRnOYIRoph2HCNEPEWFBIoHxTEGXEC9pF3Co2yPXxT9ewAUR8/OwEOe3UV+3EUe3EW+ 20Ve26XHodcuoSeg1y6hF0OvXYK8tktPQq9dQk9Fr52ku9Brl9A96LXRZ6PXTtIV9Nol9JLotZP1 Uui1S5C/dukPor9O1r3or0ugv9bw7LZ3TrXnNwcneufyWPIo+ugS9lznkGLPdQ5u/Qn00SX0Kuid PeSdU8kvu8gju8gXu/R6ej381Pa8LvSqHUEjH3ov+dB70XsOAEUORB9aSg5GH1pKDkXvKeRw9J5c jkTvWUqORb9ZSo5DvynQY07A+hPlRNTJ6Dc5eswpuG97TIW85D1yJvpHId9C/yjQP76NZ3kP/WNJ ORf9oyCfqJA3vBc94CeoK+QKPMr2d/egd1uHJbZfU8mLqeS/VPJcqtyNPkuXe9Fn6fJb9Fm6/A59 li6/R591nzyEPkuXP6LP0uUR9Fn3yWPos3T5E/qs0vIk+iydvJUqz6K3Ki3PobfS0Vv9in1i+6YH 7Fne4UF5TWK8NwE9lG7P+A732zO+g9cMQw+lm0XQN2nkmx4gr6SSP1LJE6lmkpmEn9p+R0WfIkAF e3YQgHDHiYg4CH6iUo16ULJVn+xMyGqX3aYTLG2f0aWDI7BTRpcMR63MjJwujpchkL6/XQMPboIh EuIgEVygQGnQoCxUgIpQBWpBPWiCvqotZEI29IaBMBRGw/PwEkyFmTAb5sIiWHpDSw4IgSIQD0k4 8LsH7sfBzMPwGDwOVaE21IenIAPaQWfoDn1gEAyDMTABJsM0eAPegQ/gQ/jkhpYCIBSiIAGScb8k PAAGPAISnoBqUAcaQFNoCe2hC+RAXxgMw2EsvAAvw3R4E96FebAYlt3QEoMwiIaikAIl4F54EHxQ Dkx4EqpDGjSEZtAKOkBX6AH94BkYAc/BRHgFXoO34D2YDx/B8htaCoRwiIFikAocSmGfPwTlwYJK UAPSoRE8Da2hI2RBT+gPQ2AkjINJMAVmwCyYAwtgCay4oaUgiIBYKA5OEHAfeAHHSeCHylAT6kJj aA5toBN0g14wAJ6FUTAeXoRX4XV4G96HhfAxfAorMzIycwKHkI4kHUc6iXQK6YyMttmtAmeRziFd QLqEdAXpmlatOmcFfkW6hXQP6UHS46RnW2d2aBd4ydYgIA0mjSSNI01s3aVr5yAXqUJamlQjLUta oU3vrJygiqRVSGuR1iNtQtqibXZGq6C2pJmk2aS9SQeSDm3bq0ProNGkz5O+RDqVdCbp7PadumQE zSVdRLqUdCXpOtL17bt27Bq0hXQX6X7SH0iPk55ub7d2nvSKrcEBpKGkUaQJHXIyMoOTST2kJUkf IDVIH+mY9fAjwZL0CdJqpHVIG5A27Zj1iC+4JWl70i6kOaR9SQd3zCqnBQ8nHUv6AunLpNNJ30SD ZAS/SzqPdDHpMtJVpF90QUKCN5JuI91DeoD0MOmJLpmtOgWfJb1IetXWkEDScNKYLj06Z4cUI00l 5aSlSFXSh7Kwt0PKk1qklUhrkKaTNsrCngx5mrQ1aUfSLNKepP272TqEdCTpONJJpFNIZ2T3aNkn ZBbpHNIFpEtIV5Cu6d6hS9uQr0g3ke4g3Ud6kPRo9x4tu4f8THqO9JKtoUAaTBrZvUdW99A40kRS F6lCWppUy8nOaB1allSSViKtRdqA9OkcvPLQtqRdSHuSDiQdTjquZ5vsnNCXSKeSziSdTTqXdFFP 7MnQpaQrSdeRrifdQrqrZ3aOEbqf9AfS46SnSc+TXunbJrtrWABpKGkUaQJpMqknL978uQb+qQag Nwy+ja0DvfCfa1g+NCkfGpIPTc6HpuRDU/OhznxokXyoKx/qzod68qER+dDIfGhUPjQ0HxqdD43J h5bIh/J8aGw+ND4fmvCnGoCjl+K3tS16W1sH7v25JuZDWT407k9U4Ai2Do7MWuBYMQtHr4NxVPY8 jhNn4Mh1Ho7IVsIXsAl2wQE4CqfhogMcoY4YR6LD4yjl0ByPOCxHFUcdR6Pcp3xGNbB9msMRk7et k7sNdeX6spS43G2Jcbleiu/K/ZwfzN2KJXnbg7n1lMjc7cOlc++m/Lzcz+un5m4b1cvdNoHcbbPA 3G3L/bnbVlbetkre9t3cbevIvO3V3HbbXc39u31U7rbD4tzyThdz/x40MHf7TMnc8mfy/p5YIXc7 eX3udsrG3O3UvPannoWA18pDiYCNLIpFsxgWy+JYPEtgRVkxVvx2SrGdR1h7+zs9fn+v563sSfek uba6trm2u3a4drp2uXa79rj2uvZ5x3ufdxdzF3d969rv+s51wPW966DrkOsH14+uw64jrqOuY67j rp9cJ1wnXT+7Tnlqe+p6mgX8GPBDwMGAQ67TrjOus65fXOdcv7rOuy64Lrp+c11yXXZdsfPVrmtu sLPUbuYOdAc5H3VWcJZzlneaTsv5mFM6H3c+4fQ7KzqrOqs7qzlrONOcdZ3pznrOJ52VnZWcVZw1 nbWdtZx1nG2cHZztnG2d7Z2dnB2dmc7Ozm7Ors4uzixnd2e2M8fZzNnc2cKZ4Xza2dLZytnaWd/Z 0NnI2djZwNnE+ZSzqbOPs6+zn7OXs6ezt3OAc5Czv3Og81nnEOdg5zPuYHeIO9Qd5g53R7gj3UXc Ue5od4w71h3njncnuIva/eKN8EZ6i3iqeaq7a7vruGu5a3rGeMZ6XvS85Jnkme6Z4pnmecXzmmeG Z7bnbc8bnlme4e6f3SfdJ9zH3cfcRz3jPfGeOE+MJ9bj8bg9To/L09fTx9Pb08szwjPSG+V53jPR M87zgudlz1TPTM9bakv1I3WJ+rG6VP1EXaYuV1eon6or1c/UVepqdY26Vl2nfq5+oX6pfqV+ra5X N6gb1W/UTepmdYu6Vd2mbld3qDvVXepudY+6V92nfqvuV79TD6jfqwfVQ+oP6o/qYfWIelQ9ph5X f1JPqCfVn9VT6mn1jHpW/UU9p/6qnlcvqBfV39RL6mX1ivq7elW95gWvwxvgZd5Ab5A32BviDfWG ecO9id4kb7I3xZvqdXpdXrfX423nbe/t4O3o7eTN9Hb2dvF29WZ5e3p7eHt7e3kHegd4B3sHeYd7 h3lHekd4R1PfInveid5J3he8E7yzve943/bO8i70LvAu9n7k/dC7yPuxd4n3tPes/TZDm6O9r83V PtDmafO1BdpCbZH2obbYfodhv8GgNemW2+8vtJX2+wv77YX97sJ+c2G/t7DfWmgbtI3aN9ombbP9 3sJ+a2G/s9B2abu1PdpebZ/2rZ190g7Y2SftkPaD9mPuKnfaMTv7pJ3QTmo/a6e009oZ7az2i3ZO +9XOQWkXtd/s9w7aFe137ap2TQc7D2W/X8hbHS9UD6MV8iL1InqUHq3H2O8M7DcGN6yZl2y/Kbi+ cp6dbxK68k9X0PPpD+llrq+iV97OL/1hLb3H7fySXsnO/utV9Wp6db2GXlOvpdfW69Aqe3X1enp9 Wmmvkd44d7U9vZn+tN5cb6F313P0HnpPfae+S9+t79H36vv0b/X9+nf6Af17/aBRzihvPGpUMB4z pGEaluE3KhqPG08YlezMv533l11kV5klu8ls2V3myB6yp+wle8s+sq/sJ/vbWX87509r+z0rh9rZ fjvXb2f67Ty/neW3c/xygnxBTpST5It2lt/O8dsZfjlVTpPT5WtyhnzdzlbJN+1slXxbzpbv5K0U +L6drZLz5Hy5QC6Ui+SHcrH8SC6RH9s5K7lMLrez9HKl/EyukqvlGjtvJT+XX8gv5Vfya7lebqC1 BjfJzbTe4Da5Xe6QO+2cu51xv77+4AH5/fU1CA/LI3aO/Z+uRXhR/iYv/W09QnnNzlH9YVXCUDtH ZUbY+XMzyow2Y8xYM86MNxPMorReYaKZZCbTmoVO05W3biE3hamY95glzXvNUuZ9ZmnzfvMB80FT Nb2mZuqmYfrMh8wyZlnzYfMRs5xZ3nzUrGA+ZkrTNC3Tb1Y0vzbXmxvMjeY35iZzs7nF3GpuM7eb O8yd5i5zt7nH3GvuM78195sHzO8tsBxWgMWsQCvICrZCrFArzAq3IqxIq4gVZUVbMVasFWfFWwlW UauYVdxKtJKsZCvFSrWc1hPWk1Ylq7JVxapqVbOqWzWsmlYtq7ZVx0qz0q26Vj2rvtUgbXPalrSt advStqftSNuZtittd9qetL1p+9K+Tdv/lPqUt3ltjGplw/rxeJ7Ai/JivDhP5Ek8mafwVO7kLu7m Hl6Ccy64wu/hJfm9vBS/j5fm99vrJHCVe7nGdW5wH3+Il+Fl+cP8EV6Ol+eP8gq0aorJLe7nFfnj eaunVOZVeFVejdZQqclr8dq8Dk/j6bwur8fr8wbX11R5ijflzfjTeWurtOStaH2Vtrwdb8878I68 E8/knXkX3pVn8Wyew3vwnrwX78378L68H+/PB/CBfBAfbK+VwIfyYXw4H8FH8lF8NB/Dx/Ln+Dg+ nj/PJ/AX+EQ+ib/IX+KT+cv8FT6FT+XTaPWWGfx1PpO/wd/kb/FZ/G0+m7/D3+Xv8Tn8fT6Xf8Dn 8wV8IV/0hxVePuHL+HK+gn/KV/LP+Cq+mq/ha29Y9eVrvp5v4Bv5N3wT3/y/rADzLd/Pv+MH+Pd/ WAvm6A2rwfx8fT2YX/g5/is/zy/wi/w3folf5lf47/wqvyZAOESAYCJQBIlgESJCRZgIFxEiUhQR USJaxIhYESfiRYIoKoqJ4iJRJIlkkSJShVO4hFt4RAnBhRCKuEeUFPeKUuI+UVrcLx4QDwpVeIUm dGEIn3hIlBFlxcPiEVFOlBePigriMSGFKSzhFxXF4+IJ8aSoJCqLKqKqqCaqixqipqglaos6Ik2k i7qinqgvGoiBYpAYLJ4RQ8SzYqgYJoaLEWKkGCVGizFirHhOjBPjxfNignhBTBSTxIviJTFZvCxe EVPEq2KqmCami9fEDPG6mCneEG+Kt8Qs8baYLd4R74r3xBzxvpgrPhDzxHyxQCwUi8SHYrH4SCwR H4ul4hOxTCwXDcUK8alYKT4Tq8RqsUasFevE5+IL8aX4Snwt1osNYqP4RmwSm8UWsVVsE9vFDrFT 7BK7xR6xV+xTpKIrhmIqluJXKiqPK08oTyqVlMpKFaWqUk2prtRQaiq1lNpKHSVNSVfqKvWU+koD paHSSGmsNFGeUpoqzZSnleZKCyVDaam0UlorbZS2SjulvdJB6ah0UjKVzkoXpauSpXRTspXuSo7S Q+mp9FJ6K32Uvko/pb8yQBmoDFIGK88oQ5RnlaHKMGW4MkIZqYxSRotGorFooviUh5QySlnlYeUR pZxSXnlUqaA8Jr4V+8V34oD4XhwUh8QP4kdxWBwRR8UxcVz8JE6Ik+JncUqcFmfEWfGLOCd+FefF BXFR/CYuicviivhdXBXXFFAcSoDClEAlSAlWQpRQJUwJVyKUSKWIEqVEKzFKrBKnxCsJSlGlmFJc SVSSlGQlRUlVnIpLcSsepYTCFaEoyj1KSeVepZRyn1JauV95QHlQURWvoomnRFPRTDwtmosWIkO0 FK1Ea9FGtBXtRHvRQXQUnUSm6Cy6iK4iS3QT2aK7yBE9RE/RS/RWxog+oq/o958zcufz7o7d8zN2 F/3FAKOKUdWoZlQ3athrzhi1jTrX17+qbzQwGhqNjMZGE+Mpo6nRzHjaaG60MDKMlkYro7XRxmhr tDPaGx2MjkYnI9PobHQxuhpZRjcj2+hu5Bg9jJ60flYfo6/R7/oqWoONZ4whN6ylNdIYZYy2V6gx njPGGeON540JxgvGRGOS8aLxkjHZeNl4xZhivGpMNaYZ043XjBnG68ZM4w3jTeMtY5bxtjHbeMd4 13jPmGO8b8w1PjDmGfONBcZCY5HxobHY+MhYYnxsLDU+sefLNlYYn/4Pe98dH0XV/T2zs7tpm81m 03Zjkl1jkukT2BsiIpAZRB4LQnZFRVYRFREVkSYi0nsTEBFQERDpJbTQIVRD71XASC8BIk0MLfzO vTsZAvo87/vP+/s87+fjHzP3fM+ce+65957vnULY61vrW+db79vg20h+QX+Tb7Nvi2+rb5tvO/kt /V2+3b49vr2+ffpv6h/yHfb94jtCfln/V1+J7zffcd8J30nfKd9p3xnfWfJL+xd8pb6Lvku+y74y /Tf3r/muk9/dv+n701fuu+W7jX9933fPV+G7jyhEIxNikBlZkBWFoXAUgSJRFLKhaGRHMciBfz0b xaF4lIASURJyITdKRo+hFJSK0pAHedHjKB09gTJQJspCLOIQjwQkIgnJ5Lf9q6HqyIcQykE1UC56 EtVET6Fa6GlUG9VBdVEeUpGG6qFnUP1H9gBoiF5CjVBjlI/8KIBeRk3QK1V2BQiiN9CbqDl6C7VA b/+bHQI+Rm3RJ6gdav/QXgFdquwW0MPYL6Av6of6owFoIBqEBqMhaCgahn+9G41AI409BL5BY9BY NA59i75D36Px6Ac0AU1Ek9CPaDL6CU1BU9E0NB3NQDPRLDQbzUFzUQGah+ajBWghWoQK0WK0hOxB sBytQCuNnQjWonVo/YP9CNBmtAVtRdvQdrQD7US70G60B+1F+9B+dAAdRIfQYfQLOoKOomPoV1SC fkPH0Ql0Ep1Cp9EZdBadQ+fRBVSKLqJL6DIqQ7+jK/8/vxGjq+gauo5uoD/QTfQnKke30G10B91F 91AFup9D5dA5phwmx5xjybHmhOWE50T88w79zzt01Xdo9TW1qfq62kwNqm/g92n1TbW5+pbaQn1b fUd9V22pvqe2Ut9XW6sfqB+qH6lt1I/Vtuonaju1vdpB7ah2Uj9VO6ufqV3Uz9Wu6hdqN7W72kPt qfZSe6t91L5qP7W/OkAdqA5SB6tD1KHqMPVLdbg6Qh2pfvXPm/t/95u7Okr9Wh2tfqOOUceq4x7a PXPiI/tnTldnqDPVWepsdY46Vy1Q5+m7aS5SC9XF6hJ1qbqM7Ku5Ut9Zc42+t+YGdWOV/TW3qtvU 7eoOdae6S92t7tH32jyAd9tUD6u/qEfUo+ox9Ve1RP1NPa6eUE+qp9TT6hn1rHpOPa9eUEvVi+ol 9bJapv6uXlGvqtfU6+oN9Q/1pvqnWq7eUm+rd9S76j21Qr2vURqtmTRGM2sWzaqFaeFahBapRWk2 LVqzazGaQ4vVnFqcFq8laIlakubS3Fqy9piWoqVqaZpH82qPa+naE1qGlqllaazGabwmaKImabKm aNlaNa265tOQlqPV0HK1J7Wa2lNaLe1prbZWR6ur5Wmqpmn1tGe0+tqzWgPtX9pz2vPaC9qLWkPt Ja2R1ljL1/xa4D/svNOC7L3z7iO773yktdE+1tqSPXja67vwfKrvw/O51rXKXjy9yG48fbV+Wn9t gDZQG6QN1obgfXn+y77XnPKf9p/xn/Wf85/3X/CX+i/6L/kv+8v8v/uv+K/6r/mv+2/oO7CW+2/p u7De81f47weoAB0wBZhHdmSNCtgC0QH7g51ZA/GBhEBiICngCrgDyYHHAimB1EBawBPwBh4PpAee CGQEMgNZATbABfiAEBD13YqyA9X0HYtyAjUCuYEnAzUDTwVqGbsX5QXUgBaoF3gmUD/w7IO9jAIv BhoGXgo0CjQO5P/Hb1HVgtWDviAK5gRrBHODTwZrBp8K1go+HawdrBOsG8wLqkEtWC/4TLB+8Nlg g+C/gs/hr1fB54MvBF8MNgy+FGwUbBzMD/qDgeDLwSbBV4KvBl8LNg2+HmwWDAbfCL4ZbB58K9gi +HbwnXRnet/079M7prd/qzFFT8yh0qh6VCOqjM6gW9Gj6P30JVOWqa6pqaklY2ZqMd2YGUyp2WSu bW5ibmvuakm25FtGWYqslNVlDVg/pGjKnPUuxVBOKpGygy+BygV/DalXH/3XvKyvKAtYxVNxVFzW MJDjCIrPGglyPJETsnpS5pBNVl9dis/6UpcSslqSdhKy3gu1l/U+KZOyPiClK+tjUrqzPiFlctan pHws63NSpkA7NogyjcqilKx+hv9WurcPdS/t9Npd9VpW6JeLSoee+ahaWb2MCPsbHlrrcXyke2iv e+gcap/8PVo8eMrIGmDUaaPbdtBtv/jb1gYa9sONUWir97KjXvMzvZfddA8m8OHIGmTU7BSy03vv xZ6zehu9GGzYjTBa6KJ77P6QxyGGZY+H9H0MX0MrLYysKKfu/l9kRTl1m7pF3SJZcYug2yQrbhP5 DskKYkOyInT9S126Q7KiHMr3Qu2RrCin7pGsKKcqSFaUU/dJVpTTFMmKcpomWVFOm/6SFSH/rXRv H+pe2um1u+q1/poVoQj7Gx5a63F8pHtor3voHGr/kawI1Wmj23bQbb/429YGGvbDjVFoq/eyo17z M72X3XQPD7IiVLNTyO4vWRHqxWDDboTRQhfdY/eHPA4xLHs8pO9j+BpaaVGZFaZvmdj/c1aAVQxj Z+w4Kxg7QTE4K5gYIjtwVoRscFbo17/UJQfOCpAcOCtwezgroHTirIAyDmcFlPE4K6BMwFkBZSLO CiiTHs0K3X8r3duHupd2eu2ueq2/ZIUeYX/DQ2s9jo90D+11D51D7T+cFXqdNrptB932i79tbaBh P9wYhbZ6LzvqNT/Te9lN92BkhV6zU8ju0azQezHYsBthtNBF99j9IY9DDMseD+n7GL6GVlpQ9Lgr VBKVQzWg8qlmVEuqLeRBH2oYNYaaRM2iCqkiajN1hLpEVdAOOp3OoevSzxFvtozdUD6TsQvOvXFu 5b1MmfK2EKmJIb1iSK8a0muG1NSQXjekZoYUNKQ3DOlNQ2puSG8RKRTTThLTDhJTSLOPaPZW0Rwk mgNVNL8QzeEqmmNEc7SK5iTRnKjsbZ3rlKnOVSJdA+kyiaQLiYT8fUj3Fyh67O7Q34BQprEbqTbU hxk/UZOpidSkjCkZUzOmZUzPmJEx839X+/+kvmnsesjWv7XPfCnzVGb/zD6ZfTNPZ57JPJt5LvN8 5gWoMZLUmJUxO2NOxtyMgox5GfMzFmQszFgENUozL2ZeyrycWZb5e+aVzKuZ1zKvw1gOp1bS3ejh 9CR6Ib2RPkifp2+bbKY0UzVTPVMTUytTB1M30wDTKNN4U5HpmKmciWRSGIXJZ5rBM9RkZg6z1uww p5sVc01zB/N+83lLoiXdUtvSyNLU8o6ljaWzpZdliGW0ZYJlhmWhZaPloOWk5ZLlptVktVkVa0Nr a2tX6zDrBOta61brpTBnWEpYtbBeYaPCJoTNCDsZXj+8afiA8FHhU8KXhG8OPxJ+KbwiwhGRHpET 0SCiacSHEd0iBkWMihgfMSNiYcT+iGuR9khvpC+yfmSryHaRoyKXRa6PPBiVFVUzqn5Uo6hBUaVR FTbJVtNWz9bQ9qqthW2cbb6t2HYpOj06P7pt9Nro4/ZEewN7wN7OPsxeaF9vP2w/bS+LscUkxuTG qDENY5rG9IuZFFMYc9AR78hwNHN0cMxxbHWUOG7GVottEts5dljs5NglsUecVmeaU3DWdwacbzg/ dHZxDnCOdhY4Vzm3Og87TzovOW/Co2JknCuU/9l+KM3ZATinhzT5MpRBcl6laxSiUaposokmu4qm GtFUq6KpTjTVq2h8ROOrokFEg6pocogmp4qmBtHUqKLJJZrcB5q8b3Ev8sY96IWCV7Nq+WlwzsUc zk8F/nJUNpEfAy2R/OtBegVLXvz8kkE9jWXPu6DNfPD/Hfy4lQRPSzij/A/g/JTnPTi/CTXCwcKV XYvUzfXiZxCJyvWvI15DVxPzU0DKorI9b2OvqavhrIRi9LyDNfn4/FRIk4pbCvjX4P6FNH5sn+Av IhojIuVFwKLSEPdReQnONfLfJl5wn9aSv0c0bPNxrPH5rbA2/338t435LcmoYAv8BOtNLQqNjQc/ uz1HNfZ2wnEpjbF37FHJJ/bkeUnxk6fUBgrOmHzoIX5izYBe51C18f9PUZqA31i468QqL+uWr5Ay 4DVBWZ9q7HkVynwYz6akTExdBp4apBYSf6TPXjNu3wN3DKoxaf81sERQF89NOWj9+j3aG/p/KF4G 2mxAfL+m+67QfS8F6xc8b2BPqYtJC1F6vWoP/48a5U0SZb6XgrIh5ffc1T3d0z0tJznwOh4/Dx7L Z1OXEN/vE9+LsG8P3MXAV2icmof8ed4iOnznjw/9zxn/crjyMvWsfwUp85W3yFy2IB5aEGvcz/tk LhqQLLJT8QoejReUILFqbrQT4m8p5i8dTnIbeEtrRFIMKduQqhlSdUPyGRIypBxDqmFIuUR6wLdS zDdo1eAbnYj5RqdU8o220wmVfAtJmG/005V8oyPpxyv5Rkc9wrc7mG+0G/ON9mC+0c9U5RvUTcF8 o510CuYbeK3CN9pGJ2C+0VGYb3T8A77RUZhvtOcB3+iamG+VPSN8u4P5BpqH+EbHYr7RiZhv9GOY b+Clkm93HuHbbcK3O4RvdzHfYFQe4hseG8w3WqFrYL7RUZhvdGIl3+iUKnwrpyXMNzr33/DtT1qi /iR8w5avkLIm5hst0DUw36DmHcw3KO9ivtES5hud+4BvdBTmG12jkm+0mxYq+UY/+Ve+0RLx/Zru u0L3DXyjq2G+0TUw30D3n/hWTudivtE++knMN+Lpnu5pOckBzLe7mG+0iPkGvt8nvhdh35hvdO0q fAN/mG+ge4Rv9FO0iPkGZS7mG8xlC+KhBbHW+QZzIen5DZlt6ouz3NRP51kAazDbKjWYaabl+Mw8 /+A+CRqliiabaLKraKoRTbUqmupEU72Kxkc0vioaRDSoiiaHaHKqaGoQTY0qmlyiyX2gwSxlMjBL GaGSpfA89UQlS0MSZinzTCVLGReTXclSxv0wSxkHZinDYpYyMmYp82JVlkJdAbOU8TICZinzTFWW MsnME5iljBuzlEl/wFLGjVnKyA9YyqiYpZX9wCxlHJiloHmIpYwHs5TJwCxleMxS8KKzlHE8zFIm BrOUcWCWMrGYpTAqD7EUjw1mKZPL1MEsZdyYpUxGJUvB3mApvHflYJYydf+epaaeTI6pJ2YpsXyF lCpmKeNj6mCWMnVhPJuSMhazlMnBLAV/BksZN2YpU6eSpQzL+CpZyuT9laVMDvH9mu67QvcNLGVq YpYydTBLoYX/wFKIsi5mKVOLycMsJZ7u6Z6Wkxx4HY8fZimDMEvB9/vE9yLsG7OUqf+ApdgfZino HmEpozEIsxTKupilMJctiIcWxFpnKcxFDuk/ntt3SebCmydD7pp50A7TEkvZY0H6puobt6cDjMcu 0ximWGkJ0gVmHzNReQ+kq8xhZpIHfw0Yw1xQcJYXk2gdSiu4ugWuF3huQbtXmTV6L/AvD0xnriqt obzALCY5HU+lKR9RFmYpMxf8bFI+gBkfw8w0jVE+BKu5zCKSWSn4y4eCf68JvIJtMXMRrEqUT0gc gJRQHCVKW9LiUv3LRRqVpeD4zzHrmOLUuSBdZM6D73ZgNZk5r7SHch1zoJJ7SkfAFyHCTsTLMf8G 6NUFkh8pld+HPPh3iC4yv+ERgX5/TtB57J+54ME9uQgRnoNIuhL5Mr6ifAYtn8Itp04BjxdJe8AW pQsZ0SKICLN9C5SfwvVZJPpEmF9J6Q5eLjCFZGx6EHkFRH7R/zPuC2g3Kz11aZteC/JR6QaWEAPE dFX5Aq4vxWPjwSMKWv9GKEuZySQbepFxW1o5Ap5PCT6q9CZztDnvWWNenUpf8AqzSca5D3idDPNz oXIW/cWUBa4cglrF/k1wdSozD8anH0jn8ayR1WQzHgecL6GM8LQO5YfnY1IWk4j66xFheRC0fk4f LZd/C9RejFtQBoB+pjIQzouxXeoMkK4aozqYzPhcmL+tZH6LUwvIPGKPQ0DaTqShoWuEH51JPqx/ 8L1L+ZLkYSm0NYzEs96/jdgUKyPI6IV64EydT3q9HEevDMcjzcys7J1/e6gFT0fSemicUhT81XAS yeELylckxy8oo8BiAWEd/oIG70LK12A1keTtJmU0+MXyJi/u2Y+Ei9+QEYYZVsaSWSXfXpQxUGsd jNFUaA/3JZnwBv8u1Vxob1coutRZYDWXWU14+y2JoNjTjsz3+hCD/TvA+1zS+3Gk96sJB/QvkFSO pz3RLlG+h1rLmdXKBJy9zG5lYoh9ynjoz0rlBzivNrj1Y2il8HxCyqvKT2TOQivDZNJ6sX8n3HnH 6KvIJJJheFynEK+bjPHBq1InkouLmTPgaaqeixeVaWSOLijTycjvUGYQv3MrczQVxhiycSfp+UzS R2B7Ko7kvJ49KanTyMzj2ZkNFrMIh2YRVpJYvUNI/JuUOaH+6D0oIOiiAm3B7Or98u8KRa7Mg/qb DKbsJrHPIZmJ2yBrhzKf5PqDDFxA4tgPVxaSOVqqFEK5F9aIRbhkJumsXEK8FTPzIU58VyohGd1W z+4q70FMTfweBPeF5pX3hewYyhwzwu6PJG8Z2XAXiPyOSHDHD9tVqffAKhVeYukYQZFrsZTZNjRy e9gdgpwGIrOWHQe267Btdjxltm+vrOWFdSCqn9FSwkMokTJb51Wi1C2UKaaUSJshniCp3R+kJkS3 iTKF7yG1nqFMVvLt0dsXou1ixJcE7QrRbcJuU3T/k1Qtqis1g1pBbaR2Uoepk9Ql6iZNwVtQPJ1G c/AEXZtuQOfTzeiWdGd6EP0dPYcuojfTe+lj9Fn6Cn3bZDbZTS5Tukky5ZpU0wumJqbmpnamPqbR pmmmZab1pu2mg6bzptuMjUljqjH1mHZMV6Zf1Tt0BnCcep5qmDGKlI0zRsJIPU91gHNDqiN5V//b 78em4ZQpbzORRlZKzGuG9LohBQ3pTUN6y5DeNqR3Dek9Q3rfkD4wpI8M6eO/qdHBkDoRicTOfIFl ptuDL89MD6LpWUXTm2j6VNH0I5r+VTQDiWZQ5bds5prR2ixDmmNIBYY035AWGlKhIS0xpGWGtMKQ VhlSkSGtNaQNhvSzIW2q0vOdJOJdVfqwh2j2VtHsJ5oDVTSHiOZwFc0Rojla2XNvt8rWvN0NqceD dv+XvuxXyePMPRSTKWVmZ+4lpS8T8hXKV+CcnfkqnH3/7t8BvF+EetBnOz2Tacq0YFoyPZjx8Bxz mLlpjjf7zPnmNuZB5u/Mc8ybzUfMl8wVFrvFa6lmUS35lhaWdpY+llGWyZaFlu2WEkuZpcJqt6ZZ FWtdayNrc2tbaw/rcOsEa4G1yLrTWmIts1aE2cPSwpSwumGNwpqHtQ3rETY8bEJYQVhR2M6wkrCy sGth5eFUuDk8Lbx2eLPwLuFjwgvD94ZfibBFcBG1IhpGtI7oGjEsYkJEQcTaiN0RxyOuRFKRjsj0 SF9kvchAZJvIHpHDIydEFkQWRe6MLIksi6yIskelRSlRdaMaRTWPahvVI2p41ISogqiiqJ1RJVFl URU2uy3Nptjq2hrZmtva2nrYhtvG2cbbpthm2ApshbadtkvRkdFcdIPoltF9oidFr4o+HF0afdfu sgv22vZG9ub2dvZe9pH2Sfb59rX2vfaT9msxppiUGCWmbkyjmOYxbWN6xAyPmRBTEFMUszOmJKYs psJhd6Q5FEddRyNHc0dbRw/HcMcER4GjyLHTUeIoc1TE2mPTYpXYurGNYpvHto3tETs8dkJsQWxR 7M7Yktiy2Aqn3ZnmVJx1nY2cLZ2dnP2co51TnIXOjc79ztPOG3HmuPi4jLicuPpxTeJaxnWK6xc3 Om5KXGHcxrj9cafjbsSb4+PjM+Jz4uvHN4lvGd8pvl/86Pgp8YXxG+P3x5+NL42/nRCZkJwgJNRK eCGhWUKbhG4JvRJGJkxKmJ+wNmF3wvGEK4lUoiPRm1gtUU0MJL6T2CGxT+KoxMmJCxPXJ+5NPJl4 LcmU5ExKT/Il1UsKJL2a1CqpTVK7pE5JXZK6JQ1LGpk0JmlC0pSkWUkFSQuTliUVJa1P2pt0Muls UmnS7aQKl8nldCW6kl1prnRXlktwKa5cVy1XXVd9VxNXU1drVxtXB1dn1wDXENdI12jXONcE1xzX QtcS1wpXkWu9q9i11XXEVeI66TrrKnWVua65brpuuyrcJrfVbXM73PFulzvFLblru+u5m7hbulu7 u7i7uXu5+7kHuYe5R7knuxe6l7hXuNe6N7r3u4+4S91l7mvum+7b7opkU7I1OTLZnuxMTkxOTk5L Tk/OShaSlWRfcm5yreS6yfWSGyS/kNwoOZD8anKz5ObJ7yS3Tob7fPaE7EnZP1J09g+UzdPTm+7N ZGexhXyEYBc9kizX8k/1z6Psqf09vTyDvS3Y2exiwSE+LmXLtfPezlvtn+afD1cHeHp7hnjfZuew SwSn+IRUXa6b905ekX+6fwFcHejp4xnqfYedyy4V4sVMCclq3rt5a/wz/Avh6iBPX88w77tsAbtM SBRZqYZcL69l3lr/TP8iuDrY08/zpbclO49dLrhEXnpSrp/3Xt46/yx/IVwd4unvGe59j53PrhCS RVF6Sm6Q1ypvvX+2fzFcHeoZ4BnhbcUuYFcKKaIsPS0/l/d+3gb/HP8SKjp1mGegZ6T3fXYhu0pI E7OlOvILea39c/1L4dqXnkGer7yt2UXsasErVpfy5IZ5H/gL/MuocDaRe48fLIwVZ0hL5A35caBJ 4lrxQ4Rx4kxpqbwxP56K9nTP7M66uPf5ocK34ixpmfxz9nPZz+cnUN+BtZtrzQ8TvhNnS8vl4vxE 0CRzH/BfCt+Lc6QV8qb8JNA8xn3IDxfGi3OllfLmfBcVxqZwH/EjhB/EAmmVvAUsUrk2/EhhgjhP Wi1vzU8GizTuY/4rYaI4XyqStwH2cG35UcIkcYG0Rt4O2Mt9wn8t/CgulNbKOwA/zrXjRwuTxUXS Onkn4HSuPf+N8JNYKK2Xd0ELT3Ad+DHCFHGxtEHend8QLDK4jvxYYaq4RNoo7wGcyXXixwnTxKXS z/JewFncp/y3wnRxmVQs74Ns6pHZk2W5zvx3wgxxubRJ3p/9QvaL1HjwzXGf8d8LM8UV0mb5gH8l 1OW5Lvx4YZa4UtoiHwQscJ/zPwizxVXSVvkQYJHryk8Q5oirpW3yYcAS9wU/UZgrFknb5V8Ay1w3 fpJQIK6RdshHACtcd/5HYZ64VtopHwWczfXgJwvzxXXSLvkYFeZZyL3IfyJ0F4dL4+WZgBdxDfl2 Qg9xhPSDPAtwIfcS317oKY6UJsizAS/mGvEdhF7iV9JEeQ7gJVxjvqPQWxwlTZLnAl7K5fOdhD7i 19KPcgHgZZyf/1ToK46WJsvzAC/nAnxnoZ/4jfSTPB/wCu5l/jOhvzhGmiIvALySa8J3EQaIY6Wp 8kLAq7hX+M+FgeI4aZq8CPBq7lW+qzBI/FaaLhcCLuJe478QBovfSTPkxYDXcE35bsIQ8XtpprwE 8Frudb67MFQcL82SlwJexzXjewjDxB+k2fIywOu5IN9T+FKcIM2RlwPewL3B9xKGixOlufIKwBu5 N/newghxklQgw/x4fuaa832EkeKP0jx5FeBi7i2+r/CVOFmaL68GvIlrwfcTRok/SQvkIsCbubf5 /sLX4hRpobwG8BbuHX6AMFqcKi2S1wLeyr3LDxS+EadJhfI6wNu4lvwgYYw4XVosr4fVCN4Bs7/P nvjP+vTP+vTP+vTP+vRftj6Z2bXsNvYge4msSw/WqMpVy+T5wtPtn/Xqn/Xqn/Xqn/Xqv2C9CmOr cT35n4QF4nppt/wr4OpcL36KsFDcIO2RSwD7uN78VGGRuFHaK/8GGHF9+GlCofiztE8+DjiH68tP FxaLxdJ++QTgGlw/foawRNwkHZBPAs7l+vMzhaXiZumgfArwk9wAfpawTNwiHZJPA67JDeRnC8vF rdJh+Qzgp7hB/BxhhbhN+kU+C7gWN5ifK6wUt0tH5HOAn+aG8AXCKnGHdFQ+D7g2N5SfJ6wWd0rH 5AuA63DD+PlCkbhL+lUuBVyX+5JfIKwRd0sl8kXAedxwfqGwVtwj/SZfAqxyI/hFwjpxr3RcvkxF shpbxB5ny7mRfKGwXtwnnZDLwKoe9xW/WNgg7pdOyr8DfoYbxS8RNooHpFPyFcD1ua/5pcLP4kHp tHwV8LPcaH6ZUCweks7I1wA34L7hlwubxMPSWfk64H9xY/gVwmbxF+mcfAPwc9xYfqWwRTwinZf/ APw8N45fJWwVj0oX5JuAX+C+5VcL28RjUqn8J+AXue/4ImG7+Kt0US4H3JD7nl8j7BBLpEvyLcAv ceP5tcJO8TfpsnwbcCPuB36dsEs8LpXJdwA35ibw64Xd4gnpd/ku4HxuIr9B2COelK7I9wD7uUn8 RmGveEq6KlcADnA/8j8L+8TT0jX5PuCXucl8sbBfPCNdVyjATbif+E3CAfGsdEOhAb/CTeE3CwfF c9Ifignwq9xUfotwSDwv3VQYwK9x0/itwmHxgvSnYgbclJvObxN+EUulcsUC+HVuBr9dOCJelG4p VsDNuJn8DuGoeEm6rYQBDnKz+J3CMfGydEcJB/wGN5vfJfwqlkl3lQjAb3Jz+N1Cifi7dE+JBNyc m8vvEX4Tr0gVShTgt7gCfq9wXLwq3VdsgFtw8/h9wgnxmkwp0YDf5ubz+4WT4nWZVuyA3+EW8AeE U+IN2aTEAH6XW8gfFE6Lf8iM4gDcklvEHxLOiDdlsxIL+D2ukD8snBX/lC2KE3ArbjH/i3BOLJet Shzg97kl/BHhvHhLDlPiAbfmlvJHhQvibTlcSYB1+wP2T24Zf0woFe/IEUoiRec/DlYfcsv5X4WL 4l05UkkC/BG3gi8RLon35CgF37vacCv534TLYoVsU9yAP+ZW8ceFMvG+HK3gO1dbbjV/QvhdomS7 8hjgT7gi/qRwRaLlGCUFcDtuDX9KuCqZZIeSClG0Z29xa/nTwjWJkWOVNLDowK3jzwjXJbPsVDwQ VWvQdeTW82eFG5JFjlO8gDtxG/hzwh+SVY5XcNSfchv588JNKUxOUNIBd+Z+5i8If0rhcqLyBODP uGK+VCiXIuQkJQNwF24Tf1G4JUXKLiUT8OfcZv6ScFuKkt1KFuCu3Bb+snBHssnJCgv4C24rXybc laLlxxQOcDduG/+7cE+yyykKD7g7t52/IlRIMXKqIgDuwe3grwr3JYecpojQy57cTv6aSEmxskeR 8nGEvbhd/HWRlpyyV5EB9+Z28zdEkxQnP64ogPtwe/g/REaKl9OVbMB9ub38TdEsJchPKNUA9+P2 8X+KFilRzlCqA+7P7efLRauUJGcqPsADuAP8LTFMcslZCgI8kDvI3xbDJbfMKjmAB3GH+DtihJQs c0oNwIO5w/xdMVJ6TOaVXMBDuF/4e2KUlCILypOAh3JH+ArRJqXKolIT8DDuKH9fjJbSZEl5CvCX 3DGBEu2SR5aVWoCHc78KtBgjeWVFeRrwCK5EMIkO6XE5W6lN0R64b7Mj2XXsdvYQe5K9zP1Gmby0 10rRqRsomp0C854PMtxNvBHcRcEixkkZsk/JA30zeMI95DlBMakbPafyg4D2es7AeYfnKEVzN8Hi DfAVw90C3U7Pr6CD1cxr48qEcDFRYuUaSj1oexy7hd3P/saWsn9w56BOU7CDVdEbzpUKZtEpPSFX V+qC7jrEip9JRrM/s7vZo+xZ9ip3CuxfhuNVivb2AZtyiHgqRLsedI0ohl3DnmBvUzRvgrqHIYoD HnxXGcVuYHeyv7Cn2d+5E2D5Oui+Zjeyu9gj7Bn2CncSrLeD9X7PWZD2wdUx7CZ2L/sre569zp2B du7B1T2e01C3BVjAiOW785tQVvZbdit7gL3I3uTOQ8/tXAXY3ocDYhDdEGMviG0N1GoM/YvkLglW MV7KlJGigs1d0PvhCMDxLsTMQNkc7IuhXk+QvWBzB/BaysRO464CugJWFFx5CUpYJ73R3O9ChJgk cXKu8gxEPYO3CFHiY5Ig11SehYgP8jQw4Ct2PbuDPcyeYsu44/lvQr0w7oLAiLFSulxNqQP+XoS6 Y9nN7D62hL3A3uBgFLyPQ3s3oBcuKK+BzVvgb5cHnhm8UdxlIUxMkLLkHEWDmtN5sxApJku8/KRS H0bnCNTuTZlSf/bAuOa/AhYzeatgE1MkUX5KaQB+dnvws8U3bDG7hz3GnmOvcTCybBgc4XBEwBEJ RxQcNjii4bDDEQOHg6KzYM6zbsEBY5wF45MF45h1Dw4Y+ywYexZGiKXhiIXDCUccHPFwJMABecHC OLNmOCxwWClT3v+wdz5gVk1t/1977zr7/D977zP/Z/Y6M9NZh6aas2baTTXtvU+mTP9nZ6rpj/5Q GjURkjBIQgjxJFE0lCTJSAghCSEJISQhSUIIIcn73TPTE+/V+3uf3/u81/P+fu/l6vp0OmfO2Wet +/7e973uNeesNqZe+vPfkxqFRfHP43vjX8T3xb+MfxX/Or4//k382/h38QPx7+M/xH+MH4z/FP85 /kv8UPzX+OH4b/Ej8d8ZYQITmcRasdbMw2TmZT7mZwEWZCEWZhGmMJVpLMrSWDrLYJksi2WzHJbL 8pjOKIuxfFbAClkbFmeMJRjaAtaWFTE0egyJhSUZZyWslHVkBuvEylhn1oV1ZeWsGzOZxWyWYt3Z SayC9WA9WSXrzfqwvqwf688GsCrmsIHsFFbNBrHBbAirYcPYcDaCncpGslFsNBvDTmOns7FsHDuD jWe17Ew2gU1kdWwSO4udzSazc9l5bAo7n01lF7Bp7EJ2EbuY1bNL2KXsMobehM1gVzR9O+VqNotd w65l17HZ7Hp2A7uRzWE3sZvZ39hcdgubx25l89lt7Ha2gC1kd7A72SLWwO5id7PFbAm7hy1l97Jl 7D62nN3PVrAH2Er2IGtkD7FV7GG2mj3CHmWPsTXscfYEe5KtZU+xp9kzbB17lq1nz7EN7Hn2AnuR bWQvsZfZK2wTe5VdxTaz19gW9jp7g73JtrK32NvsHbaNvcveY++z7ewDtoN9yHayj9jH7BO2i336 x2/XHO/7M+wH9iM7yH5iP7Nf2CH2KzvMfmNH2O8JkhASYkJKtEq0TngScsKb8CX8iYBdZLez29sd 7GI7aXO7xC61O9qG3ckuszvbXeyudrndzTZty7btlN3dPsmusHvYPe2T7Uq7l93b7mP3tfvZ/e0B dpXt2APtU+xqe5A92B5i19hD7WH2cHuEfao90h5lj7bH2KfZp9tj7XH2GfZ4u9Y+055gT3TmO7c5 tzsLnIXOHc6dziKnwbnLudtZ7Cxx7nGWOvc6y5z7nOXO/c4K5wFnpfOg0+g85KxyHnZWO484jzqP OWucx50nnCedtc5TztPOM84651lnvfOcs8F53nnBedHZ6LzkvOy84mxyXnU2x/ewoewc1osh70xa Sd7V38rvn91ff1t/J5anb9Pf1d+L6U6JvqPT4Fbf6zv1j/SP9U9isU6TnKS+O7pY36N/7vTU9+r7 9C/1r/SvY/kOd9rq+/VvYoX6t53u1b/TD+jf6z84pfpB/Reno35YP+KU6b9TQgWnK21FWzu20416 qZ8GaNApj8U7fU0jVKUajdI0Yz7NpFk0m+ZRnVLHpLGyRKdyWkDbUEYT9MRYIoY2nxbRdv7naHta XNYr1pZyWkJLaWfalZplo6hFbZqiJ9EK2oOenD/A6U4raS/am/ahfcsup/1of1pFB9JqOsg5qWwO HUaH0xH0VDqSjqKj6Rh6mlNBT6dj6bhYe3qG8SStpRPoRDrJIfQserbTg55Dzy17NtaBnuecTKfQ qfQCOi2tXayYXkgvohc7vZze9BJ6adlhegW9kl7ltKOz6DX0+s4FTmd6U+dEvyl0Xr952gPG7lhX p4gucLo4HRyr6k0n5bSPpZxOBUs7T3MqHcPp6/RxijuVx07uvEFOyB2y+3cql3f7Jyvb05fBZyuE K61+5iHzsHnEIpZomZZtdbfyzNPNX83fzN8twZKsVpbH8lp+K2iFLcXSrDQrw8qycizdilkFVhsr bjErYaFJs9pZxVaJZVidrS5WV6vc6mZZVso6yaqwelg9rZOtSqu31d/qY/W1ellVlmMNsFpbsuWz AlbIiliqFbXSrUwr28q1qJVvFVptrSKrvdXBSlrcKrU6Wp2sMvNb8y5zsXmPea95n/mJ+an5mfmc ebe5xFxqLjOXm/ebD5gPmg+ZD5uPmI+Zj5tPmk+Zz5jPmhvMF8yN5svmK+Ym81Vzs/ma+Yb5lrnN fN/cYX5o7jQ/Mj82d5m7zT3m5+Ze8wtzn/ml+bX5nbnf/Mb8ylxhrjQbzVXmavNRc435hLnWfNpc Z643nzdfNF8yt5ivm2+aW823zXfMd833zO3mB+ap5khzlDnaHGOeBlvehREuxhjvwSjvxTjvaxrp Cox1JUbbiPGuwohXY8yPYtRrMO4nMPK1GPvTGP06jH89ZrkB7/cC3nEj3vOPM3Hf/42mEbzVNIZt TaN4v2kcx2b3Ceb3KWb42Z/m+BVm6c7xW8z1EHx+GF4/Ar8TeF5s8n1reF+G/31QQAAaCEEFEehA hRKi0EI61JAJPWRDEblWHlRBoYt8KKPwT9pwfdmuyZvFTf4safKo4fr0D3oxoRgbmun+J9X0gm5c 1fSDega4yjEPmN+bP1gTrTprknWWOdE625psTjB/NA+aP5k/m79YA61TrGprkDXYGmLVWEOtYdZw a4R1qjXSGmWNtsZYp1mnW2OtcdYZ1nir1jrTmoBYWC7uP/UQaUUuJehOiZf4RgZIgARJiIRJhChE JXUk6p4z0HR2fRbJJjkkl+QRnVByLskn55FC0obECSMJcgI5kbQlWKATNGakmCQJJyWklHQkBulE ykhn0oV0JeWkGzGJRWySIt3JTFIx0k96kpNJJelFepM+pC/pR/qTAaSKOGQgOYVUk0FkMBlCashQ MowMJyPIqWQkGUVGk/HkNLL7Xx3JpMc/F8vkCjKLTIbtziPnkMvIgv8/YpusINvJq+R1cjt5hawk a8hbZAKZSN4hH5AzyQyylDxF1pOXyGvkTfIe+ZC8SDaTN8g2soM8TzaRF0gt2QuVRYgqDGhSTiEU dwXpAUvMJLtJxZ8zx0gZuqsj4/Cq8WT6SD8UORn6dFVpQzGj4fWj1guTBaSBPE3eJ/nmWBIjBeY4 8wxzvFlLFsXnxG8yz4TG5KaReqFvH1Tdhpxl1pmTzLPMs83J5jnmueZ5Zr15iXmpeZk53bzcvNqc ZV5jXmteZ842rzdvMG8055g3mTebfzPnksvJBWQauei48fBfiYD/gur/yqr/3Vk1fmOrLNtvx+yA HWzOsGQM8ZPW5A6ykNwJZd9j55O95JKjeRePj4vfEF8cX0LujS+KN8Tvit9tnUf2QLX50Btead5h U/POVlnmQnOeXWAXmhPNC21mXmG3MWeYM+24uYBc3JK7rzQXmQ0jPf9MDremkLPNaeZV5q3mfPMW 8zbzdnOKeb451bzAOsc6Fxl+GSk93jfn/9HHjtcfHO95eKelsNpesT4/wV5N3In77f9V71y3Ae/0 D54/cNxzB45z6sDxzy6o20LqE8WJZKJDol2CJ0oS+YmCRGGiTSKeYIlE4oTEiYm2idJEx0T7hIE/ /+gzi/Asjlv3fhGeX9L0yvbHfc0/ds0SXMdouvLxnuO+R3tcxb2Wex33Ncd/XnuAP5j5ZuEKJax9 n7dUfVCdlv5ZblJ9wvBn5ue+pA5Muy77kbyRRkC90AjmHVJfj5YUdE37OO2XvFeNkBHOPFHpr5xh RDJGKAPU5YYSLTXUzEOGZkSzx0WfjC5O+zn7Fy2kjU9r0D8z0oz0zI7KS8qu/INpnxkZ6VOz0rIP 5xTmPpj7pHa2kWlkpe1Jl41sZUzUSf8xqyG6PLrKyNEqo/UZpOBZIzdNMvIMXdmWN0R5seBeba32 o0HTx2W+mHk4a2f2DTmb8yJ5e7J7GLGsiFKrPKxOTVuftjgjw8jP3JX7Yl5W3ih1XHSTdpO2M/ea jI+yB6sXGAWFkfTbMz7NDCpr0t4wCnPfUr6MZqeNz34g56K0r402meuNuB5XpuZ8nr5Ay8lup1GD wewn5HZRn4q+ZJyoPZ1+VUZa5mdG26xhynyjiGYU3Gq0K1gVfU19Q2tjtE9/q+CazFhOSvEoD6qP akKak36y0SHj9MyinAG5ndRJOaKWaxQbyYJZGQ/lHlAvzlyS2z43lDcpujXtvoJhWQNzv9TbRBdk djO4Fo9WpfdOvybLn3Nuzh25YzJDRolRqnytrjE6Ri+N3mwY6bsyt2btyn4tb3D+F0anrHnZKaPM 6Kx1zGqtPpB3lsa0C9Mvybot4EQfSJ9Hy9Ryo0t0QtZ16kXa/dH3M27ODUe/z74zd1ZBrdFVW2CU G92yBkc3GybtqT5uWLm+3CtydugRZWTBuoxP9Ghaddr29C7B8zJGFXgytJw+RkrrkPmr0T1nUs43 UW/WhWkZ2i3ROuOknPOyr9eljDvypkbHGBVGj+xGo6dxcmZrFINFRiWdbPQqmGb0LrguerZSaPQx +mZWRN/JjRr9jP6ZcS0/+72cocaArG5GlVKS7U8fYzgZEWOgtiK7Z05ldmfjFMWXV5S1KKd39Ja0 xhxDSRY8pshGdfYhY1BkhjFYuTgjvWCe+rAxxKhRNmaGc/fqbY2hxrBoD2O4MSL9I2W9cWpBu7SH Mi8ueCbTa4yMHEh/mAh1m4jY9G1PMe9KwyaS8nhGt5y9iI+15B33xNKmc1Yf5A/xh/kj/LE/na3q nqz6n52r+s+dqnqA//Cn81SPnaYql/hKAiWhksifTk51z039z05N/efOTO1fUvWn01L/eFZqa76S N/JVfDV/lL/Jv+Pf8x/54RJPibfEXxIsCZe0K+lXMqDEKakpUUoyS0S+hj9z9HxVvr4kp/s/cb4h /PWEUKi/Fcv9876N/n6M6jv0D4/t2+i79N3uno2+V//i2J5NrODojs3R/Rp3t0Y/HGujH2neq3F3 aqiHytRLfc17NTQUix/bqaHpLTs1Oc17NTQWY8fbp6HtaQdaTJN/36fpSA3amXahXWk3arbs1nQ/ ul9zbK/G3amJFdEq6jTv1tAhR/dqYu2O7dYc26uhtfTMpr2aOjrJ3atxd2rcfZqjuzRH92hovbtD Q6fTy+mM5l2aWJJe7e7TxDi9ll4fK6E30BtjpfQmenOsI/1bzIh1onPpLbEyOi/WOdaFzo91pbfR 2+mCWDm9gy6KdaN3xcyYRRfTJfQeeh9dTu+P2XRFLEUfoCvpg7SRPhTrTh+mq+kj9LHYSbGKWI9Y T7qWPkWfpuvoerqBPk9foK/ETqab6Wt0C309VknfaHVO4IBvYmiWti73gP5h64vggAuDFeF8Ol3Z r07IWp73QsY5oUdiBdGGWDJzREbfHK++yzMjRmVBNrMHZU2Va1Ut/Xf5De9l3hN8H2YMoJ7MjkGF Dgl1Cr3d+r1wcdbjtD58KPv67HOREdZIJ3mu9dzgudkzz3O7507P3Z6lnuWelZ5Vnkc9T3ie9qz3 vOB52bPZ84bnbc97nh2ejz27PXs9X3m+9fzg+dlzWCZyK9krB2VFTpOz5Dw5X47LJ8rtZS4bchfZ lLvLPeXecn95oDxYHiaPlE+Tz5AnyGfJ58pT5YvkS+UZ8lXytfIN8s3yPPl2+U75bnmpvFxeKa+S H5WfkJ+W18svyC/Lm+U35Lfl9+Qd8sfybnmv/JX8rfyD/LN8uOnbHn5v2Kt5M7w5Xuot9Ca8Rd5i b6m3zFvutb0V3kpvX2+Vt9pb4x3hHe0d66311nkne6d4p3nrvdO9M72zvLO9c7xzvfO9C70N3iXe Zd4V3kbvau8a71rvOu8G70bvJu8W71bvNu92707vLu8e7z7vfu8B70HvIe8Rn+jz+Py+sE/zZfhy fNRX6Ev4inzFvlJfma/cZ/sqfJW+vr4qX7WvxjfCN9o31lfrq/NN9k3xTfPV+6b7Zvpm+Wb75vjm +ub7FvoafEt8y3wrfI2+1b41vrW+db4Nvo2+Tb4tvq2+bb7tvp2+Xb49vn2+/b4DvoO+Q74jftHv 8fv9Yb/mz/Dn+Km/0J/wF/mL/aX+Mn+53/ZX+Cv9ff1V/mp/jX+Ef7R/rL/WX+ef7J/in+av90/3 z/TP8s/2z/HP9c/3L/Q3+Jf4l/lX+Bv9q/1r/Gv96/wb/Bv9m/xb/Fv92/zb/Tv9u/x7/Pv8+/0H /Af9h/xHAmLAE/AHwgEtkBHICdBAYSARKAoUB0oDZYHygB2oCFQG+gaqAtWBmsCIwOjA2EBtoC4w OTAlMC1QH5gemBmYFZgdmBOYG5gfWBhoCCwJLAusCDQGVgfWBNYG1gU2BDYGNgW2BLYGtgW2B3YG dgX2BPYF9gcOBA4GDgWOBMWgJ+gPhoNaMCOYE6TBwmAiWBQsDpYGy4LlQTtYEawM9g1WBauDNcER wdHBscHaYF1wcnBKcFqwPjg9ODM4Kzg7OCc4Nzg/uDDYEFwSXBZcEWwMrg6uCa4NrgtuCG4Mbgpu CW4NbgtuD+4M7gruCe4L7g8eCB4MHgoeCYkhT8gfCoe0UEYoJ0RDhaFEqChUHCoNlYXKQ3aoIlQZ 6huqClWHakIjQqNDY0O1obrQ5NCU0LRQfWh6aGZoVmh2aE5obmh+aGGoIbQktCy0ItQYWh1aE1ob WhfaENoY2hTaEtoa2hbaHtoZ2hXaE9oX2h86EDoYOhQ6EhbDnrA/HA5r4YxwTpiGC8OJcFG4OFwa LguXh+1wRbgy3DdcFa4O14RHhEeHx4Zrw3XhyeEp4Wnh+vD08MzwrPDs8Jzw3PD88MJwQ3hJeFl4 RbgxvDq8Jrw2vC68IbwxvCm8Jbw1vC28PbwzvCu8J7wvvD98IHwwfCh8JCJGPBF/JBzRIhmRnAiN FEYSkaJIcaQ0UhYpj9iRikhlpG+kKlIdqYmMiIyOjI3URuoikyNTItMi9ZHpkZmRWZHZkTmRuZH5 kYWRhsiSyLLIikhjZHVkTWRtZF1kQ2RjZFNkS2RrZFtke2RnZFdkT2RfZH/kQORg5FDkiCJi9elX woqmZCg5ClUKlYRSpBQrpUqZUq7YSoVSqfRVqpRqpUYZoYxWxmLtXKdMVqYo05R6ZboyU5mlzFbm KHOV+cpCpUFZoixTViiNympljbJWWadsUDYqm5QtylZlm7Jd2ansUvYo+5T9ygHloHJIOaKKqkf1 q2FVUzPUHJWqhWpCLVKL1VIVq1DVVivUSrWvWqVWqzXqCHW0OlatVevUyeoUdZpar05XZ6qz1Nnq HHWuOl9dqDaoS9Rl6gq1UV2trlHXquvUDepGdZO6Rd2qblO3qzvVXeoedZ+6Xz2gHlQPqUc0UfNo fi2saRqWqhrVCrWEVqQVa6VamVau2VqFVqn11aq0aq1GG6GN1sZqtVqdNlmbok3T6rXp2kxtljZb m6PN1eZrC7UGbYm2TFuhNWqrtTXoQNZpG7SN2iZti7ZV26Zt13Zqu7Q92j5tv3ZAO6gd0o5Exagn 6o+Go1o0I5oTpdHCaCJaFC2OlkbLouVRO1oRrYz2jVZFq6M10RHR0dGx0dpoXXRydEp0WrQ+Oj06 MzorOpsI4iXgKiLE+uB2C9gEXgOv47HeuF0K7gVvgDVgOrgdXA4WEEEKgwhQgAo0EAVpIB1kgEw8 9wowEzwDngLrwJXgTfw8C2SDHJAL8oAOKIiBfFAACkEbEAcMJMAJ4ETQFhSBdqA96ACKQRJwUIL3 Wg7uB+68bwDX4vFS0BEYoBMoA51BF9AVlINuwAQWsEEKdAcngQrQA/QEJ4NK0AvAdhJsKvUF/fBe K2BPPC4+AO4Ai4koviIuxL/uBotaHn0VbAZbiZByf7YENIKV4EE8NhBX84MA7s/AbZAIyV3NXskf gdt7wEOgAT/z4PaaltleD64Dt4HHMZLLAEYWc735IngC18GsYr8C93MDmLn4JFjb/NpiB9dPHFNL 0/v8O7VgRv/71PLKv1PM3f9DinH9B5+JqwD6SfHSFv9/C+4CsL0En0iwvXQf+AR8Cj4Dz+G583Hr jh16kuAjaRnA/CTMTcL1JWhLgm4kXFt6BDwGoBMJGpBgfwl+kJ4FG8ALYCN4GcA+EjQgQbfuCSAS tCDB99JbYBt4H+wAH4Kd4CPwMYBmpd1gD/gc7AVfgH3gS/A1+A7jvhrMaonU/eAb8BX4HvwADgDY SUJ8uKehSLCPtBo8CqA/CbqWoGHpaQANSevB8wCal14C0LAE7UqurhBz0tvgHfAueA9sBx8QQcc1 dNhBh391+FeHf3X4V4d/dfhXh391+FeHf3X4V4d/dfhXh391+FeHH3X4V4d/dfhXh3/1/mAAqAKI L939VNkpoBoMAoPBEFADhoJhYDhAnOungpFgFHA/EzUGnAZOB2PBOHAGGA9qwZlgApgI6sAkcBY4 G0wG5wB0Jfp5YAo4H0wFF4Bp4EJwEbgY1APkAR0a1KFJHTGuI75197NciFsdcasjVvWrWvLPdS15 DJoT7zuWy5rympur4C8RmhPhM/Gx5vwkIR9KsI8E20huzoNNJNhDmgNuBnMBxi3BfhJsJ8FuEmwm wV7u6UsSbCXBThJsJME+EmwjwS7ueUwS7CHBFhLsIMEGEuYuYd4S5ixhvhLmK2G+EuYrYb4S5ith npIbb5iXBD1KmJOEnCAhLiXkBelGcBP4G7gFzAO3AjfukHMl5EAJ+Vxy8zLyvHQncPMh/CrBpxL8 KcGXEvwowYfuWVISfCfBbxJ8JsFfEnwlwUcS/CPBNxJ8IMEHEuwvwf4SbC/B9hLsLiFuJNheuvZY TUlg7uKHzXXGzeVu/nfrTwI5rBXqiIiYFhETCeg1Ab0moNcE9JpAbku4uU1qqR9uPkbsi8gDImJJ RAyLyDdJjD8JWycxhyTsncQ8krB5EnNJ4r2TmE8Stk/CZskbmlcXTasO2E6EX0XYT4RvRdhQnNec s0TErYi8IyJuRTePbWh+7xTiKumOBblDRO4QkTtE5A4RuUNEfhCRP0TkixQ0lYKmUsgFKegqBd0l 3bqKPCIid4rIHyJyiYhcIv6InzU0fVtJSCKnpmCHlKvRg+An8AtAbRRRI8XD4DdwBPwO2xAgALHZ TlIrvBa5NAkNpqDxFPJSCjpPQedJ5Nsk9JlEDkkid6Sg8ZTTovcBLZp3WnR/Sov2B7Xo/6i+h7Zo fHiLzk9t0fqoFr2PadH86S26H9ei/fEt+j+zJQYmtsTBpJZYOLslrs5p0dp5LXo7v0Vz/1F8HNXi ZX/Q44w/aPLKP+hy1jFtHjeO5rTE0s0t8TT3/xBTC1ri6mhMLWqOsRjWCDGsEWJYI6RguxRsl4Lt UrBdyrWdWzPdeujWTbcmurXTrYtu/XRro1tDj9ZHt764NdKtMW6ddOuMWyvdWuPWS7feuDXTrTlu 3XTrjpvD3Nrj1k+3/rg11K1Bbh1165BbS91aBE031VS3Jrl11a1Lbm11a9N/VF+P1iy3zh6tW269 PVq73Lp7tH659belhh23DrvrBLcWu2sFtx6764X/qCa7ddety0frsLv2QI1uqsEt9TgFTaagyZSr e2gyBU2moMkUNJmCJlPQVgraSkFbKWgrBW2loK0UtJWCtlLQVgraSkFbKWgrBW2loK0UtJWCtlLu Ohf383E/H/fzcT+JsSQxjhTsnYK9E6jPKehGh9102EmHnZJunYYN81vj3xhXcmTTNxSFJDSQvIOI oxrJO7w/H5D8PvkDr0r+mDyY/Cn5c/KX5KHkr8nDyd+SRzjhAhe5xFvx1lzmXu7nAR7kIR7mEa5w lWs8ytN4Os/gmTyLZ/McnsvzuM4pj/F8XsALeRse54wn+An8RN6WF/F2vD3vwIt5knNewkt5R27w TryMd+ZdeFdezrtxk1vc5inenZ/EK3gP3pOfzCt5L96b9+F9ucMH8lN4NR/EB/MhvIYP5cP4CH4q H8lH8dF8DD+dj+Vn8PG8lp/JJ/CJvI5P4mfxs/lkfg4/l5/Hp/Dz+VR+AZ/GL+QX8Yt5Pb+EX8ov 49P55XwGv4LP5Ffyq/jVfBa/hl/Lr+Oz+fX8Bn4jn8Nv4jfzv/G5/BY+j9/K5/Pb+O18AV/I7+B3 8kW8gd/F7+aL+RJ+D1/K7+XD+Wm8X/J37uHL+H18Ob+f+/i41K7Up6ndqc9Se1Kfp/amvkjtS32Z +ir1dWp/6pvUt6nvUgdS36d+SP2YOpj6KfVz6pfUodSvqcOp31JHUr/DXytJB5occnhwlyEPDZ/d ZVXX27qu6nZfdWPXaMH5VW/VxMrLC+Z2u9awB11WdePgHUMKhvxcU1KzcmivYV2Hexx1uOW0Gf5x 9Y+DxEHJweuHnFDDa3YMVYfWDl059MXhPYYj/ketEH9s/W3rH1r/3Pqwh3haebyeoEfxpHmyPHme fE/cc6KnvYd7DE8Xj+np7unp6e3p7xnoGewZ5hnpOc1zhmeC5yzPuZ6pnos8l3pmeK76H9npnSJP k+vl6fJMeZY8W54jz5XnywvlBnmJvExeITfKq+U18lp5nbxB3ihvkrfIW+Vt8nZ5p7xL3iPvazrT 56B8SD7iFb2ev3Z6/9rp/Wun96+d3v+dO71EIO45pljnJN3/tQDrHOKesYZ1DnHXFuh9iHv6GtY5 BOscgnUOQa9A0BcQ9AXkZ4DeoOl/P3LPb0RvQNAbEPQGBL2BgN4AfwkCegM0CoKA3kDAOkTwABl4 gQ/4QQCgFxNCIAwiQAEq0EAUpIF0kAEyAda6Ata6Ata6Qi7IAzqgIAbyQQEoBG1AHKD/E04AJwKs w93z1YV2oD3oAIpBEnBQAkpBR2AA9ItCGUBfKMA2AmwmYM3lnqXvnl8uYK0loK8RUqA7OAlUgB6g J0DvJqC3ErG+I98SsRAOxSNtm3/iPiqiQxHRtYjoWgRYVjjSYjFYS3StN6CZJi9gZSrAyiI6GuGn llmhexV+bn6uOKr5thBWFNHxiFidiliJiuiORHQ/IrofEStPEStOEatSEZ2QiNWqiJWoiJWiiFWq iM5IxIpRxGpVRIckoqsS3W4aK1cRK1rR3XlFZyViFSue0/z+Yn2zqgR0dUKflrH+1DL2oyrwNqtO QEckXNMy/mubx/73ebgecrvFghbF4WeuvVw7NVmybZMVm+zk2uKoUgWoUfj1D97u2Wx1AeoUfmux qavOvsDdbYRKRahUhEpFqVnlrt2Shcdsn2QA10u6KmLNUXLUT03R8lVzxLhR4ipaxEo+iXkkE/8X EfKvioJ/keJFV7Ou9uBr0fWbaxfMQcQ8RcxDdHfyMRcRcxHxWhHzEfF60d0FxzVEzEt0r4O5ifCh iPmJbpxgjqIbRZin6OoNcxXd39dgvqK7q4I5i+4OD+Ytuv6FDUXMX4QeRdhAhA5F2EGsAvCpCH+K 7g4//CVCcyJ0JTpgIICtxFNANYDNRHTUIjpqEbYT0VWL6KpF2FBEZy1CqyJsKcKWImwpujvpsKXo 7jDBniJ8KsKmIvwqwq4i7CrCriLsKrq/dYBdRdhRhG1F2FWEXUX3NxmunTEeAfErYEwCYk7AmATE qIBxCYhPAeMSEO8C4le4CSDOhZsBYl1ARyggboW5AJoVbgFufpkHEMvCrQAxLMwHyD/CbcDNKbcD 5A1hAUC+EBYCzFNA3hDuAMgXwp0AOUJARykgPwjICYKbB5BPBOQPAXlDaAB3AeQMAV2nsBggXwhL wD0AOUhYCu4FyD0CuhDhPoAYEpCbBDfekVMEdL8CbC+gAxZgewFdsAD7C+iEhcvBDHAFmAmuBNeD q8B1YDaAv4WrwRxwA7gRPABWggdBI3gIrAIPg9XgEfAoeAysAY8DdNsCum1hLXgKPA2eAevAs2A9 eA6gugrPgxfAi2AjeAm8DF4B6NIFdObCZvAa2ALQtQvo2oU3wVbwFngbvAO2gXfBe+B9sB18AHaA D8FO8BH4GHwCdoFPwW7wGdgDPgd7gZuf3fzr1hDkLgH5TEAeE5DDBDenIpcKbi518xnyoYAcLiAH C/eDFaQp/7qrA3fV8Pf6Uv+P5zo3v7o53V0JNNWHo6uMllXF0Trx3309twa5Y00izpOI8yTiO4m4 TiKek4jjJOI3ifhNIn6TiN8k4jfp5sJhzbn/r5z2V077fz2nIRbEU7aKfdzv2cZy85bqbxvjjDOM 8dWnNH9qU39f365/4H5q05hgTDTq9J3GJOMs/aO8V91PcP4be+cB3cSxr/EpWq263AuwKwGyAAO7 rJileiXRO4upQUDovWPANr2F3nvvvYfeQu/VAUKH0EvoPZSEtyvbYHLNvbnhvpvwXg7nUA6ytF5/ M/P9f/PNf0lr0oa5ylxjrpO2pB2pE9kweBbpwNxQM53heZnbJI65E9qR+SlDFtKRdGLuks4knrlH Epj7JFHNeDKPSJf3Gc/nzAvmJfMz84p5ncnKvCFdSTfmLenO/EJ6JOc+SU/Si/QmfVjIItKX9GMx +Yb0JwPIwLAfySAyODUVSoaQr1OToaSumg0lQ8kwMpy1sNbInGQEG0BGqklRMooNJqPZEDKGjCXj yHg2lA1LzY2SCWxGNhOZqKZHySQymUwhU1kbmcba2cxsFjKdzGCzsg4y058ozcZmZ3OQWWx0hnYf MqVkNplD5qbJlYpsvpRsaaHkdCmZR+arCVOygPWShWQRWZySNC2ung0OXE+WkKVk2cepU7YCW1HE rEyWh1QOLcBWIivYWH8CtSpbja3O1kjOoWZ4qJ4aJivJt2wdsor9OnLIhzwqWU3WsI3IWrYxWU82 +E8R+7OpIVJqOpVsYtuQzWQL+Y5sJdvIdrKD7FQTq2S3mlgle9g4NbVK9rKdyT4bFyCQ/anpVXIg Mr8/wdo9OcNKDrK9ySG2DzlMjpCjap6VHFPzrOGJJIkdQL63LCLH2YHsIHKCHcwOISfJD+QUOa1m XMkZdriaciVnyTl2FDlvfEUukItq1pUdS34kl8kVcpUdR66R6+x4coPcIrfJHTX5Sn4id6lF5B47 idxnJ5MH5CE7hZ1KHpnnstNMLdjp5DF5Qp6SZ+Q5eUFemtqyM8jP5JUWktfkDTuTvFWTsuQX8it5 JwJ2jgjZuew8EbHz6UemKuwCUSNSolZN0Yo0dYpdbL2k5mhFnahPztKKBtEomtiVolm0iFYxQAwU g8RgMUQMFcNSUrZr2LViOLtO91KMsNJiJLuemk3qiRnMdnYDu1HMKGYSGZFlN4k20S5mFrOwm8Ws 2gB2C/udYanoEKNEJ7uV3SZmE7Oz29kd7E4xhxjN7iL12d1iTjGXmFvkRF7MIwqiS8wrElFk94j5 2L1ifnYfu18swB5gD4qF6bzsITFGlEQ3e1j0iF72iFhELKpJZI+KxaicYnGxBHtMLMkmVY7VrKea a3tot+hGsTkMsw1zjJHm6pao4NjwuEyV2YOfzv5q+wVPt+4N9yn3Lqua/WXO0ZB5k372lzr1j9lf sz2ynTIvJcE+pEHyfESakKbJM5A6/6jzjn/GaU86kDh1blFnFpJAEkkXdd4g3UmP1NlCnSlS5wl1 llBmB/9sQEaQkWQUGZ06+skEMjF1pJNp6ggnM8ms5FGsjlSyIHmMJo9KspysUMcXWaWOJ7KWrEse TWTTb0cO2UV2kz1kL9lH9pMD5CA5lDwayDGSRL4nx8mJVN2TM6rayXlV6eRSqspVjSsKv5mscVXf 5B65ryqbPPpYzaqSVR2Tt6kKFqGIRJysWpFWdZqs0PT0KYaLEWKkmCFVg6kKFLMm607VnKq29HUm 5hPziwXEgmIhsXCytlRlqboSi6mKEktqemvWaDZqdmqOaq5Q0VQDqg91iDqhNWqzaktpa2vnag9o H2ifa1/SVroMXZ2Op7fpdLqaunhdF103vVFv0hfV99D31I/QH9U/MWQ3lDZMMMwwLDF8Z0gy2oxu Y11jc2Mb40rjWuN5403jbRNrymqKNhU3lTJVNC03bTftMO02XTFbzTZzZnMhcwvzEPME8xzzIvMa s/ITstgsuSzlLDUtMy23LPetOqvButu6x3o2oH9gFU3Ch1FgmPlhFFgWJo8D0sD4hDT9MBKsbHoj IaysmJXqpu1FmnwqBa8zqyl409oPI8HyKCUFj2KPgpl/3ftnCf2c+5f2NIHm5qfvY/JdzKBT76Lm 4h+6i4dBR2cGZ0ZnpDPcmcnJOE1Os9PitDoDnIHOIGewM8QZ6mSdNmeEM0z59XtfGam8Qv17mPJa xv9VEem+/ve9H+P/7PT+X33/COUd1PdR30N9ffqvU65K+W4PwsxCfaGB0FBoKbQSWgttXCWEtkI7 ob3QQWgkNBGaCs2FFkJjIV5IEBKFLkJXoZvQXegh9BR6Cb2FPkJfoZ/wjdBfGCAMFAYJg4UhwjBh uDBCGCmMEkYLY4VxwnhhgjBRmCRMFqYIU4VpwnRhhjBTmCXMFuYIc4V5wnxhgbBQWCQsFpYIS4Vl wnJhhbBS+FZYJawW1ghrhXXCemGDsFHYJGwWtgjfCVuFbcJ2YYewU9gl7Bb2CHuFfcJ+4YBwUDgk HBaOCEeFY0KS8L1wXDghnBR+EK4J14Ubwk3hlnBbuCP8JNwV7gn3hYfCI+Gx8ER4KjwTXggvhZ+F V8Jr4Y3wVvhF+FV45wIu6EIu7NK4KJfWRbt0Lr3L4DK6TC6zy+KyugJcga4gV7ArxBXqCnOFuyJc ka4MroyuTC7GxbpsLrsrsyuLK6vL4YpyOV3ZXNldOVzRrpyuXK7cLs7Fu/K4BJfLlddFXKIrnyu/ q4DwQHjuKuUqKcQJHYVOQmfhtHBGOCucE84Ll4QfhcvCFeGqq6CrkKuwK8YlubyuIq6irmKu4i63 yyOcEoYKY4RmwgXhotft9Xi93iJem9DQW9RbzVvMW93Leu3ezN4s3qxehzfK6/Rm82b35vBGe3N6 c3lzezkv783jFbwub14v8YrefN783gLegt5C3sLeGK/kLe4t4S3pLeUt7S3jLest5y3vreCt6JW9 lbyx3sreKl71uUdK6RyrPgMmM9Cmezr/nlJ3v1Zq7rdKvf0reKcW2RDValIrrlbHWp1qda4VXyuh VmKtLrW61lKTL81QN9Qd9UA9UW/0DeqPhqChaDyagCaiKWgqmoamoxloJpqFZqM5aC6ah+ajBWgh WoQWoyVoKVqGlqMVaCX6Fq1Cq9EatBZtRnvQXrQPXUXX0HV0A5fHFXElXBlXxW3wcDwSj8aT8Aw8 C8/B8/ACvANfwdfwDXwPP8XPmIJMIaYwE8NIjJvxMF6mCFOUKcYUZ0owJZlSTGmmDFOWKceUZyow FRmZqcTEMpWZKkxVphpTnanBfMXUZHxMLaY2U4f5mqnL1GPqMw2YhkwjpjHThGnKNGOaMy2Ylkwr pjXThmnLtGPaMx2YOKYj05mJZxKYRKYL05XpxnRnejA9mV5Mb6YP05eZw8xl5jHzmQXMQmYRs5hZ wixlljHLmRXMSuZbZhWzidnM7GP2MwdskbYMtgq2ijbZVsnWzNbc1sLW0tbK1trWxtbW1s7W3tbB FmfraOtk62xLsD2yPbY9sT2zPbe9sL2yB9gD7UH2YDtjZ+02u90eb0+wJ9q72Pva+9m/sQ+yD7YP s4+yT7BPsc+yz+Xqcw25RlxjrgnXlGvGNedacC25Vlxrrg3XlmvHtec6cHFcR64T15mL5xK4RK4L 15XrxnXnenA9uV5cb64P15frx33D9ecGcAO5Qdxgbgg3lBvGDedGcCO5Udxobgw3lhvHjecmcBO5 Sdxkbgo3lZvGTedmcDO5Wdxsbg43l5vHzecWcAu5Rdxibgm3lFvGLedWcCu5b7lV3GpuDbeWW8db +QA+kA/ig/kQPpQP48P5OvzXfF2+Hl+fb8A35BvxjfkmfHu+Ax/Hd+QT+S58V74b35vvw/fl+/GD +CH8UH4YP5wfxY/mx/Bj+fn8An4hv4hfxa/m1/Br+XX8en4Dv5F/yD9WEzDp5V/4dx8lYLT+DIz+ L5CCKafmdvJUTDcNU/OjPEw9fyKm4V8iE5OShHm/bvVWVqVvlBVpkH9WnKesEfuU9SFJWQluKKvA HWUFUOdaWpmVcygzsstV4jd9k5rFNP9Cunz4u2V86F3xJXX9+AN9NlL6f6idOzylPKU9sqeSp42n raedp72ngyfO09HTydPZE+9J8CR6uni6erp5uns2eTZ/Tjrqd6yORb3FYnfF7o7dE7s3dl/s/tgD sQdjD8Uejj0SezT2WGyS75jvZN2KAOq7Ag2gUns8AcNvejwFfbLHkw3YlVX183o8FQFFQbE/2OOp LqgH6oOGoDFoApr6O/m0AC1BK9AatAFt/X2AOoA4f1+eeJAAEkEX0BV0A91BD9AT9AK9QR/QF/QD 34D+YAAYCAaBwWAIGAaGgxFgJBgFRoMxYCwYB8aDCWAimAQmgylgKpgGpqudP8BsMAfMBfPAfLAA LASLwGKwBCwFy8BysAKsBN+CVWA1WAPWgnVgPdgANoJNYDPYAr4DW8E2sB3sADvBLrAb7AF7wT6w HxwAB8EhcBgcAUfBMZAEvgfHwQlwEvwAToHT4Aw4C86B8+ACuAgugR/BZXAFXAXXwHVwA9wEt8Bt cAf8BO4qTuY+eAAegkfgMXgCnoJn4Dl4AV6Cn9NzOBBDDaSgFtJQB/XQAI3QBM3QAq0wAAbCIBgM Q2AoDIPhMAJGwgwwI8wEGchCG7TDzDALzAodMAo6YTaYHeaA0TAnzAVzQw7yMA8UoAvmhQSKMB/M DwvAgrAQLAxjoATd0AO9sAgsCovB4rAELAlLwdKwDCwLy8HysAKsCGVYCcbCyrAKrAqrweqwBvwK 1oQ+WAvWhnXg17AurAfrwwawIWwEG8MmsClsBpvDFrAlbAVbwzawLWwH28MOMA52hJ1gZxgPE2Ai 7AK7wm6wO+wBe8JesDfsA/vCfvAb2B8OgAPhIDgYDoFD4TA4HI6AI+EoOBqOgWPhODgeToAT4SQ4 GU6BU+E0OB3OgDPhLDgbzoFz4Tw4Hy6AC+EiuBgugUvhMrgcroAr4bdwFVwN18C1cB1cDzfAjXAT 3Ay3wO/gVrgNboc74E64C+6Ge+BeuA/uhwfgQXgIHoZH4FF4DCbB7+FxeAKehD/AU/A0PAPPwnPw PLwAL8JL8Ed4GV6BV+E1eB3egDfhLXgb3oE/wbvwHrwPH8CH8BF8DJ/Ap/AZfA5fwJfwZ/gKvoZv 4Fv4C/wVvkMAQYQQRhpEIS2ikQ7pkQEZkQmZkQVZUQAKREEoGIWgUBSGwlEEikQZUEaUCTGIRTZk R5lRFpQVOVAUcqJsKDvKgaJRTpQL5UYc4lEeJCAXyosIElE+lB8VQAVRIVQYxSAJuZEHeVERVBQV Q8VRCVQSlUKlURlUFpVD5VEFVBHJqBKKRZVRFVQVVUPVUQ30FaqJfKgWqo3qoK9RXVQP1UcNUEPU CDVGTVBT1Aw1Ry1QS9QKtUZtUFvUDrVHHVAc6og6oc4oHiWgRNTlr+PbNRF/O/ff49yzBGQJdAx1 DFO7tTlGOkY5RjvGOMY6xjnGOyY4JjomOSY7pjimpvbZUrtuOeZ81M0pvV5SaxxrHesc6x0bHBsd mxybHVsc3zm2OrY5tjt2OHY6djl2O/Y49jr2OfY7DjgOOg45DjuOOI46jjmSHN87jjtOOE46fnCc cpx2nHGcdZxznHdccFx0XHL86LjsuOK46rjmuO644bj5RXdNLhFVMqrUv+icXOPf7J3c9nd3T+73 F+uf/Cd3T/7dJO33dvIiX3Q9nJnPwmflHXwU7+Sz8dn5HHw0n5PPxefmOZ7n8/AC7+Lz8oQX+Xx8 fr4AX/DvCvrvCvqjCrpBahfQmKb+avq3/T5T+iPGdI6Jj0mISfyo/2evmN4xfWL6xvT7Z51AY8bE jPX3W1S7LU6KmRwzJWaq2snx77r9r123qx0xpfZSBylO6ih1kjpL8VKClCh1kbpK3aTuUg+pp9RL 6i31kfpK/aRvpP7SAGmgNEgaLA2RhkrDpOHSCGmkNEoaLY2RxkrjpPHSBGmiNEmaLE2RpkrTpOnS DGmmNEuaLc2R5krzpPnSAmmhtEhaLC2RlkrLpOXSCmml9K20SlotrZHWSuuk9dIGaaO0SdosbZG+ k7ZK26Tt0g5pp7RL2i3tkfZK+6T90gHpoHRIOiwdkY5Kx6Qk6XvpuHRCOin9IJ2STktnpLPSOem8 dEG6KF2SfpQuS1ekq9I16bp0Q7op3ZJuS3ekn6S70j3pvvRAeig9kh5LT6Sn0jPpufRCein9LL2S XktvpLfSL9Kv0js3cEM3cmO3xk25tW7arXPr3Qa1N6rb7La4re4Ad6A7yB3sDnGHusPc4e4Id6Q7 gzujO5ObcbNum9uudjx1Z3U73FFupzubO7s7x5/9dIC/Fq2R68r15PpyA7mh3EhuLDeRm8rN5OZy C7ml3EpuLbeR28rt5PZyBzlO7ih3kjvL8XKCnCh3kbvK3eTucg+5p9xL7i33kfvK/eRv5P7yAHmg PEgeLA+Rh8rD5OHyCHmkPEoeLY+Rx8rj/rtPRvinJCrEF+oL82X0ZfIxPtZn89l9mX1ZfFl9Dl+U z+nL5svuy+GL9uX05fLl9nE+3pdHZVe+U77TvjO+s75zvvO+C76Lvku+H32XfVd8V33XfNd9N3w3 fbd8t313fD/57vru+e77Hvge1npdW1ubVvtGq+QLsOmyrXRoCbZgKw7AgTgIB+MQHIrD1P4lyleN wdXxV9iHa+Ov8SK8BC/DK/C3eCPeifcqtcP3Sr1wWqkTLisj7LF68hXAupWU31t9gqqlS2rQpPQ+ 3V4q3fom/eqiQnpeNF1vyaTrJAXnaOcY51jnOOd45wTnROck52TnlPR2XpXvLSz97y39K1Nevxlo 0r0XWd5TxWSmqBLFDzxRpYkFQXE/NVR5YUU/K6wCqoNZ4Kd0eZfuPeNKJlwq3/pAt1S2ZYPRfoal 0iviJ1cFYQzqi/qld/9xBI7EGXBGzGAW23BmnAU7cBR24mw4O47GOXFu7MIEi7ggLoRjsBt7cBFc HNfD/fEgPAbPxLPxXDwfL1RUs1jRzVJFOcv92lmN1+J1ioK24t14D96L9+H9+DA+go/iY/h7fByf wCfxKXwan8Fn8Tl8Hl/AF/GP+Cq+jm/h2/gO/gnf10RollCFqQ3USe1M7Wz6ja6qHuhz6+cby1gC LUctb62RVvVcRyFQBoxBw9CINBquhxvgRrgJboZb4Fa4HW6P43AX3B33wn2VK5+bRuPqda5XrnMz /g5vU/S+W7nWIzhJub5TypU9wA/xo7QjICpX6hiAi4DlE/r/L3VKB5PAFvDsE1z0j5DQP0A/0Tg0 Ca1D69FGdOWf6itTisLsfo1lTaOyHH6d5VKUxmEe58GCori8fs3lw/lxAb/yCivak/zq8yr6K4qL KRosgUviUrg0LoPL4nK4ApZxLK6Cq31SBW39KuiEO+N4nIAT0+hhEB6Mh+CheBgegUcpqh6Lx+Hx eAKeiCfjKXgqnoanf6T0VO2sSkc9qtb34wP4ID7k13uqklR9X1IUftmv8ZvvVX4X309WGX6sWaJZ pdmsOai5rblLuanKVEe/9jXaHFpO69V20s7WHtde0P5IF6A9dEm6Hd2NHktPoRfSB+hnyuiI1hXQ eXTFdGV0VXW9dJN103SbdDt0Z3U3dK+VcROhjJx8+jL6Gvra+r76IfqJ+mP6d4bchlqGBoY1hpNG aMxsLGUsYxxsHGKcb1xmPG7KbsprKmKqbupsmmY6YjplumUuau5tXmq+aH5oMVgOW25bnlheWQOV URhnXWY9Yb3GTGImM1OYqcw0Zjozg5nJzGJm26bbZthm2mbZZtvm2Oba5tnm2xbYs9od9ub2FvaW 9lb21vY29rb2dp4tnt2ePf4E99+7OF/0Lo4m4s+mnWqdqtRA/1gBfVz/qNVPcu3zRyufT9Q9/13/ +8ELKmvhaU0zTVtNgj+luD4lp3hac1FzRXNT84yyUtFULqoB1ZxKoLpRfahFanaROkOde59f7OHv /zBVO1e7RXtAe1l7KyXNCGkrHU3H+DONTegWaq6RTtJBnU5n1mVLzTfquutG6W7qXvhzjvn1RfXN U7KO2/QH9Ef1F/VPDKwhsz/1ONSfe/TnEP3px52GJMM1w31jpNFm5N/nIOON3T9kIY33jU9MASmJ SJepsKloSi6yo2mqablprWl9aj7S9DglIRllFs2FzMXNJc3VzS3M/d+nJVereUnzSX9i0m6JsuSy cP7cZFfLTMssy0LLeTU/qSYW/RlK1lrNn6Pcaz1rvRLQP+BBYFBglcBmgReChKB+QUuDtgbHBk8P 3h76LqxsWIWwtuF5w33hcREdI0ZHLIxYH1klsl3kkAy6jE8yVc60m/mZeW3LaIsSj+TLl9+Wv5x6 QuS/vlf4WbuEX8hO2zA0HI1AI9EoNBaNx+UVd1BR8QeVFIdQWfEIVf0uoYbiE2oqTqGW4hXqKG6h ruIX6iuOoaHiGRorrqGp4huaK86hpeIdWuM2in9QfWQHxUN0/MhFdMXdFCfRA/dU3ERv3EdxFP3w N4qrGIAHpnEWwxVvMVJxF6M/8heT0jiMGYrHmKW4jDmKz5inOI0F/+CqV6Z4jjV+b70eb1CcxybF e2xR3MdWxX9sxzsUD7IrjeP+4ENU35303nn/8A/eO9mbXFHcyTXFn9z4yKHc++BR8BN1788Woe6e 2bvau9m723vwE1SS7CnhqeKp6qnmqe6p4fnKU9Pj89Ty1PbU8XztqfsvuYTaefPBF77//98ex5+7 35+8o566m675Qkb25+yhJ++gd/Xvn/dCvVEftSpGA9BANAgN9u+lfzRv+PfVJ6HJaIp/Zz3tvvpv 99TVCmiDUgNtQpvRFvQd2oq2oe1oB9qZsr++Hx1AB9EhdBgdQUfRMZSEvkfH0S10G91BP6G76B66 jx6gh+gReoKeomfoOXqBXqJX6DV6g96iX9Cv6B0GGGKEMdZgLTZgIzb9qfXW33Pqf3hO1Zg0EcxB 5hBzjElKnl9tpWylbWVsZW3dbT1sr21v7JTdafelzrpqrsApOvM7CzgLOks6SzlLO8s4m3Nyyu6i umtYmJd4N+/hv+J9fC2+tjJPT+an8FP5afx0fgY/k1/CX02ZuUt6Kvr58WfM4J5RnsmeZZ7lnhWe lZ5vPas8qz1rPGs96zzrPRvUTndK7fUZlDI96pYezVM+h1I+5xW2OF44Ryv/6uKvIP9V9WhXqrJE /3rzr9YaLaygzJUfZpDkOUKdEzane91qauJfJSZwVIWoGlG+qNpRbX/3Tnk637v6k/dUUqsB9QSy pqkmTpOo6aoZp5mhWaJZrVmrWafZp7mtua95oXmr+ZXCVDCVgbJTWagoykllo3JSuanCVAzlpYpR VakWVBwVT3WlulP9qIHUWGocNZtaqFQMS6mV1AZqI7WJ2kMdoA5Tp6g71E/UI+oX6p0Wag1aqzZA G6YN17La3NqCWrfWqy2mraytrvVpB2qHa0doR2kXapdrV2s3ajdrd2gPas9pr2pv01paR2egM9I2 f7e4HHQumqNddF6a0CJdiPbQpekKtEzXoL+ia9G16bp0U7oZ3ZxuTa+kd9B76If0I/q1jtJpdXpd MV0pXVldJV1LXWddgq6Prp9ugG6YboRurG61bq1us26P7oDuvO6e7pHupe617p0e6JHeqo/S59QX 9Pdlk/WV9DX0NfUd9fH6RH1XfTd9L30f/Rj9BP1y/Ur9ev0G/W79cf1J/Wn9Gf0F/SX9j/rL+iv6 a/rr+pv6R/rX+l8MtEFnyKTUOU5DHgMx5DcUNMQYJEM5QwNDS0MrQ19Df8MAw2jDOMMUw3TDPMNS wzLDSsNGw37DccNJwxnDBcNlw1XDLcM9w2PDc8MrwzsjNCIjNmqMlNFgDDKGGp3GPEaXUTTGGEsb KxqrGqsbvzK2N3YwdjT2MvYz9jcOMI41TjIuSemZtsG4w7jHuNd41HjOeMV41/jKFGrKZMpjKmSK MUmmSqYqJp+phamVqa2pnamDaYpptmmOaYFpkWmv6ZDpmCnJ39fsV7PebDCHmzOZ7eZ85hLmUuay 5vrmluZ25g7mXube5rnmHebd5j3mveZ95qvmp+ZX5jcWs8VqCbFktWSz5LQQSwFLKUstSx1LT8sw y0TLIstSy3LLKcsdy0PLL1ZkxVbaarfmsEZbc1pzWUVrQWtxa1VrdWtta11rQ2sPa09rP+tA63Dr ZOsC60LrYusK62rrBusm62brFutO6z7rIesx6wnrD9bT1jP+jmA3rLesT61qHwpkGmjJrfz5Q+rK /hEn/PdWq89bq34fWfz3VqbPW5c+ySHxE/YH9hH7mH3CPmWfsc/ZF+xL9mf2FfuafcO+ZX9hf2Xf 2YAN2pAN2zQ2yhZhL2sv974aeMQ/+bxKAGbRNPsHhnE2mWKkYRjdks9eUue0IA2/+EAvbr0/iRlN l6Gr0dWTuUUKtSihq6lrksItBulGpaEWCSnUYloKt3jyCWaRZDjxEbMoYYw11jU2NTY3tja2SSEX W1LZRRpuoVKLCqaKpnrvyUUqt7iahlx84BZDzOP93GJ+mnOeUSknPVVi8Z5XpNCKGKv3PbE44GcW tQI6B/QPOBYYFcgHSoFVAusF1g+cEDgxcFvgg6CQoBxBQtDQoGFBD4NjgwcFjwveHgJDokMqhaJQ ObRaaKfQK2EZwoqH3Qy3hecI58JbhceFTwifFX4w/HD46YgCEd9GrIvYFnEz4ufIAZFzIudGnop8 mSFnhqEZjmV4mFGXMVPGe5kqZ+qXaUymeYyWoRmXvby9AhlPNpLrYiGxqtgynzNfnXw9823L9zZ/ 5vzO/J3z76z4vQzkHHK0nFPOJeeWFUMj55EF2SXnlYksyvnk/HIBuaBcSC4sx8iS7JY9slcuIheV i8nF5RJySfUJ63IZWX0uQRGA/ySa/J9gyQ1AQ9DIz5NVmpyWJHf8BEdOpsj9wdCPCPGsFDqsPkP4 Orj5xefsv+yU/Zeasf8y6IDKApqheLXO/yh3nXa/4frvzF8qFdRnpO7+Ttz9P0vcpWTIfpMQS+s9 /ybR/+skWqUZn+U9Qe58pfJXLnCs4NLCZ2PsMVEx2WL4ImOLvClapWidoo2KJhQdUyyoWP7inuLN StQpsaXknlIZSw0vXbVMxjILyywtc75sj7LjyunLhZYrWO5+eXP5weVvVzBVyF6hYIViFWFFtVfb 8/8jjiR5h/uDH4n3OxHVh/RK40LUneopivdYDJaCdWAz2J6yz7wvzR5z8g7zCf/u8pn3O8vXwW3U 9f1Zpw+sVj3zlJbXfsxo/52TTyqx3ewntbvQ7nT57EV0Bd38m7H+X5ot/rQTa53+6Zm1fuqptPe0 97Xd+Z8/L+NslO4ZkiH8UMXXNP1CPMYX5CnUZx+iMilpjERNb81YzVzNove9o1SacdmfynhB6SgT ZaUiqBxUNJXTzzZaUW2pblRPqg81OoW8qtx1j592nKLOUT9rgRZqjdoAbaCW1WbVOrVubSlteW1t bV8//TigPZRKP7RvaSvN0E46ms5N56VjaDddlC5Dl6Vj6copRGQkPYNeSC+nt9GH6CP0MfoUfZa+ RF/xPz35Kf3Le15SRVftPTPp6qcmE3VTdDPVxIfupR7rKT3tZyg59fn1Xn1RfXl9A30jfXN9gj7x PVFZqF+k36bf5ecqSfpbyU+uMFj8hEUw5DV4DaUNzQx9/axlop+2LDIsMSz9QFsMjw1PjSANcalh /CqFurRI4S59jKP87GWzcYvxiPGo8YcUBnNXTZAYX5mMJpMpIh0eU8VUz9Tc1MLU1tTR1Mc00c9m VpjWmtaZNqcQmiR/tgSajWarOchsM9vTkJq65mbmFuZ4c4K5q/8ZDqnUZm4qtzHvMu8xnzbfM/9q Af6nNOgsej/LifaznAqWyn6eMyIlg7LIsuV9DuWNlfazHVMK3ZGt1ayNreOsc6zzrBv9pGe/n/Rc sl62XrG+ChACagR0DugV0DegX0D/gLEBxwJOBdxPoT8l/PynSWDnwAmB8wPXB14KvOOnQEJQzaCv g5oHtQzqHTQ/aGvQw6C3wUWDawQ39jOhScFTg2cFbwreHpwUfDL4ZUhUSHQIHxITIoVUCqkcUjOk S0ifkHEhK0O2hKJQHFrAT47iQjuGxof2CE0KvehnSExYVFiOsEJh/8PeeX83cfXdnqI2GtVR10gj y8DYNBnmTJFkgzWSZVnFI3A3ndASeui9d4ypoQYIvbfQQu+GhN6b6b2FXkwx17IJ4bkrz7rPXe/7 /nLX/Q+8vPb+as75fM/eSVqf1q8NaKdr52uvaW9o72qf6ZQ6tPR+KU4HdO11vUtvmFbpdpTdMuku 6Z7oa+opPa0P6kP6sL6+Pk3/o76vfoQ+/8v90zX9Xf0bg8VQ3VDTwBjcBq+hhaGtob9hrCHfsNCw wvCb4bDhpOGcodBwzfDA8NDw1igyRhurG+ONnY09jX2M/Y15xmnGzcZtxuPGJ8anaEWUh4pQNWpC o9HKaBU0Bq2KVkNtaC20NgpQEqXR8eh8dC96DL2O3kYfoy9MMpPcpDCZTNGmTNMw0xjTONNk0yzT AtNC0yLTYtNh01nTY7PAbDYT5rMWk8ViibJEWypbcEuMJdZS1VLDUtPisCRavP/zt2Llh5TMpLJp dOXr/IlMn8jUKZs3K0smTGSyROZKqGSmHC6dGoGSifHXrIjMib+mRGRGpJfNgpIpICzxv+ur95eW eP2Lz0tcHvH30BJHl3k44tNtZQ794skfJENK3YWUuulvL+37B99UK3HM+BKnbC9xR7jEDWVeOFTi gKIS9Q/9qvo6pVpf/EXnf2k8ovCPKvUXhUfUvbVE2RFdJ/xvWo7oOKLiK1/16ytR7o0vmo0rVWmZ Pv9JnW9K9Ogu0eFfCvyivxL1lamuRHGlWvtnlY0vUdhf6ipTVkRXEVUtLtWT2XzGfPZLQnCh+Zr5 hvl2JPPX/ND8yPzY/CSS7Psl1feN+aO5GCuHlcf4mCiSyItJItm7mPpL0i6GWTArVgnDsVisWml6 bi2MwBjMgSVEsnG/JOKWZeBG8m85LL0s4xZriDXGmmBNseZYS6x1JMG2LL02klQbyanFumE9SlNp I3m0Q7Fh2AhsLDbegv4bD9jKXBC5Jf6f9kG5X/5f/u/9R3fs//X/Ybf/kK53KzkN/kd0/Qtb/+8l 653+4+/kf0vVS/5Ea+l5dNDftzlfz5knKpytcL5CYcmJ8fo/nhf//znuv/kcB6/CzmJXsKvYNez6 /x2pLL0tUv8Lr7xeugXzLO553IvE1P/SBszxxBOJJxNPJZ5OPJN4NvFc4vnEC4kXEy8lXk4sTLyS eDXxWrkKlRUIv9KAynUrXcEKa7eKcylkyEvTQuUqymc+k32SSvEOJVukl6f8mjtkSyqk/kCl6qIs JvO50BuKC6bY+6sLTRLrDPMFxXVPFlXPYg5bqbRIMjyVzm3nveK9jNqjLEdlWfubGpEwle2wU7m5 dx37SQnViGriaKWq7c22OtTX1UVl2fGkVJGfuIRqTsp0sVQLRUjRkuvIDUwfSMqpVlRr8w2qDeK1 WDybU+ZTbRWpaYeUS5EjpKI0aV5Jtde9N8xhLwSbOV9ljtV+MrRAg77aYR7VHWmlnuOubL5Dqs13 SY35nmeKNJbqo5itOKi4mZThqEt2deSq75BaTTeqL9XP/NDwMZJMTw1At1CDIun0Jg01JPaN8iA1 AplDjSYN5scJHDWGGqtoqnltfpLKZA2yY1Se9pHiBpVPjU9SUxOoidQkS1S4FjVZt9axPahMK6Cm UD+pllJT0xopEPOfaX8GUSSZmknNUvWxGhQTtOVC77I+BO6GssykuwK1wPyMNJF9Yt/GY6SZWkgt Mj+nllBLzS+oZcHp1HLzq+S6YcK/SF/V/IbrzjVXxZCY+Z3ugO6juUh/1fzekGc8YpJTa+vlcLNJ iyJP0dr8kdqk7BbJzOdmWSqZi9W7HTu1WjJKd5PaSm2jtodpk17ZIu0DtRMrZ7lI7XIO9b13ryUH UrupPdS+eunctKTz5CBqv7MKOSTBo/ojvRF1ALlKFVAHsQqqp+SwsIM6jFVMXEwOd46IZGqHXlJH qWPU8dh30RUNGTGLyDHcZ+MB6iR1CuNHy6nT1FnqXHoLhzQcjzSiLlKXMKH2luUCVZjgIsdiIupq 7klFfeoaBqlPKAaW/b6FnQ4tc19lULeirhvrGXupn5B59XLJcdTtjJpeL1lJtxvpYjliLTZXTvte 0Y37zpuclW05HViAGDG5fi71J/WUjIlk/LvPU88xhHqF2qnX1JsklHqrFCq3Ue+oIsu1tKGYivpg DKZOJSdRn6hicrJWrbujz4n9TH2my2XsK0sED9VQFHKH6PKpBYqpNI+sFukHsP5EVqf5kV9f69q0 h5iBFuUotCEaoqUYSsvIGprTtNw6klZEugOMiVxxpD+ARhSraJVypnIDUp5WhxM0XrKmrpoxFaWU 7Wi9sQJmoU3WFdlFtFnfDkGDfeuFaQu32zqCnO1Poq10Fe0atLqyN2ZVDtPNp6uiNVCp6pR6SXxC YCo5VzMGq2TNYd9qkjNMdE1uYexHa5C2WSfQtWkCq2wtoimaoe0Zi3TxtJNO4O5jVZDKSEcVR9eJ 9BZoUrDYyK+47iT3INJeYJxFs2jTsJlO0knj/8Cqp7cT7xXv8ePGqWRtQ4o5iiSUm7jRJMBsGXOt VUlSczPYwnCU9tMBUwa5kKT0U0iaDtIhOhUBivOBAktVrJZyBV0frg5XU2+KP4rV9jRGqiA9NX0x wr6QTqcz6EwMmAvoHO8wjFSt0EyJtCSgSRhDN8TsxqyyrgS6EWkv+Y5ogtVJnRNyKXshy1QX6Wb1 oujmiSu0E+jvUBndgm5Jt/LVp1urXtJtuHfoCPoH0pG4LNKskNqbbkt3oDtqw+TS5Af6oeTyXFR1 BGPpzt5PdNfMcpib7oZ56O7chkjrgmcP3YPuyXVIa547j+6VZKV7R/Lewy6yDt2HXJU6EYWw5NxP wRzMR/fFUrxN6P6YXy8wFmIBs1zRqKoQC7LbsVDaEoyjB1l3phUFjplV9DC7lh6e3qWstUF9SWOX /CjprG1MjwidpEfSo/R36DH0WIWBzsPqc721iNGP1AwcLO10yKLzo4xYNj2h7KtN9yH4jnTRk0xC 5RV6Mj0lpa1fhzVSieipyGRVW3Jdaj+sMT0jLCv9smvGL6Rn0bPDbqy5lJW6Qje1s0zd9JijCjeK nk8voBdaapDr6cW6epE+CHqpYTWZRG4kN6ePIL2RJHt6GdY6UEgvd1voFVgbeiW9Kn4Hvdq+xdkA a4tuwtrFvlKMp9eFy9HrI40RZDLW0dqD3iA9Jj2aQYU99CZym+8p95FMsUv9rcntsS/oLdbR9FZV h2+S8QP0Dnontx6dFniFdaZ36XrSu1VnLTXpPXQkMz+I/Rj2pvvJUNpgXeWoh/R++oDML0uhC7Au 9EHyAH0I60r/QR/GuqW6jNn0cfoEfZo+i3UnU72LNGr3NOV+upC+QnJYD/oGfTPSU0HfNoi5GZqm gceOP1Q36Xv0/fSfyLDubPxq+gH9kH5EP8Z6aeX0n/RTy6VwCvk7slyXRj8zJBmT6efWcVhf+jXW j35Dv40aLDfJUbI+/clzji72X0ilFJCpmjFFNVm9GhvI/cmUN5Jm2jObqcjwscHWjf6bCiEjIA97 23hnyjvI22tz037X5CevZMRajVqIDbFOYWTaKEUBeoQ8Zq5K5jBKlYdBStsycrHhjIpsoLlm76Ve E+nNYDSR5gydiGwkfyl/YW8ibySvymtjbSiYKRmtMCnQwFHZsgxac0/hVrCeDnwXv6uoGdcpbV7g gqcXeUpSR5DG9whTPD09XRi9Z7Lo96jDabs900Wd0pPJ03qr0MWPk64SrNPEaVwMCnXj30OioTOM Wb6G/4DBEpywNm461J6JQn7knRB04D9Me5e0DxmNjEUmlHzfR7v99mpcX95bqHKYsdfxFGB56bXs HiVQEu5nQTxBnS5jqgTtORg23v3Y88yYpGyqbIJNEHYgL3JDuWHQXW64MAwPE+PoBnG1LJFysnIS NyIJxiZaSOhckpO8zO8J47y+SVq9CjrPbhFfgKoodyi3pxXL8pgYQRwyl8vjxirPKc+mzwl2kVwh C5lY8kqwF1M1KTOpnfKd8q3yk/IjdIHL5yaJnkHvFUvEk2AiOMCeb6Ely7ApMMIeDHbjtxEsTZqD ZCGZus7ktaQloqrscf6WSA8DYxNPUVwTbfJ8D1PcZCYuY1dwClMrsFRxR3FXcT++jRQSJCiPkLe4 qfAI2SdkJbIitNXUnR3v6RjiyNt2fnA+N53fJ+mh8ECoXkaS/SivK/IOeUvesUrdDzLSJC+CK0TD VKjKmPRKiCXdC67mR2c0TXpO3pPvVQVU/sAn8U8Wh9dMPpCKGVJaJFhtf+3VY9PUtRhaTmHTGYZ8 FK7GzfWKBflwhmqDar0X4n4hH2esxGYwjuQBqgOq/cK18KWEFHECNlNWyd8dHsktDz7glgUfqm6o rsv2cSsyDguPwCsy9nMrmQRrZfkENawWJwTdA4OvmbrYz6q8tAfkM+8Aty7SpMKwopHqNurWKenc RvIF4+Y2hbxuBeMlXzq2hCTeC/yt3GZxHfUq9Uq5Q36BfAXX8E4nX3NbhNnqfeq96qPqI6J2jmzv JUl73h4+zv/kvZdQXzSFH8Mk89Z4X5Jv3dGykZnNAg9C0YqJkk7JesUkbzF0VcyJZ3G7sLncXtnq ZILbLyjvaAMnkB/EPnlvx0Q4iwlxf2TO0GzUbEjukdwa+wVaG/U2uZX8eOZObJ74MW8uwylIJqx5 pnnqDggaGBsZm4TtgvXMB+N3TD2/Pjnf2Er2QDIfCsvzhQ0dd8lP8sXaaK010qWhfZz5OvOhmWHq ax1aO1XOvCmzGFuALYQmhevAR+Q9JF20zbRN9U24k9wpJ88pCP3IZDJZ8BTuLFVB6mWLrFHY4rT9 2qXaJWKTdr32V+127TafIjScu+Cs7NOEJvkQJicrKPJhSwRttdV81fjTmFz5He6ieEuku0OH6cy8 TTI7PwG6kf4bJRSPkLaSFesydOlM06yJ4RpZw3TtdG2x5WmPkWxLoswqv5rd3DcobZuvq7NdaK9u km4itkJcy9mdEglG+DZQkGgj01oY69sfaa0RL5RdiDTXZBUIm0L1fLuZH/ijJAXCqrrPumLnVAnj W+s7nPk+1FS5XupXjHFPF4qzbjA/Ymt9d7hblIxSUAiUq/3e94y7w92D3oWKKRXTLUxR6tQK+iH6 wfAJSpPKhyuKiriHTA+3PqVS0Odehv0aTk6pzfTB1uv36fdmx2ZtT2Hce5h+whrYBsmgSENOSmsL m+I0lDeUk63ENnHPuBeUPjvIDGIGpwQpg7wCtpkZIj4aJoXvDcNTa2fP4c9P2RQOMMOY4ZQxeYYh y+IW2rDfmJHMKMMMw/SU9fwx2QuzN0s7G7YZtlLm1JC4KONO6CJl4YqYMVSU4ZbhJjPWUT7Sd5J9 L6XQfQvbJpBDzzyn0qXZHwWKHDzlE7adGWesZYyTJ6W88IuYfGg/Mz7drsyVV5TXkCyA6kK3uE+i /KR8+HtZY81bzSctz9jS2EIri/T2iMZTVcIVmInYTmaSuADbJV7FTPHHhSt6hqVOy2mZWkzFGLca t1Cx8QFROSFhPGY8iu1OXWI8bTwlceb09Nf1J6Sudn9mpjMzmJnYPolJzMAzwlJs/99NLOIqYvLv NhboNiS3D4Mb8BfE98255ViaWiheG1ZYn8RP8i9j1oYR+Fc0Dx3rX0fR6ER0gkxrGsSswwrsxvjZ YRXza+or5WDpUoEutSjpRFYorPWflG/CDvrPW99Ew5EWofj1vlq52ZLLJsgk4h2K9AkxGwUxwu+p BGYTs1leLWwMKJhtAXUgltlu8Yo/B0j7Jd5HZkegstSHbGZ25y5Ef6YSs+dFmofCpjD2d/sQs8e0 3vRrtMC017SHX910zHSUSjKdN50zXTNdjf8YrhLf3pLMHJAkSBqIT4oOBH5lDgU2yrcm6NzzBbvl ydraMcIYUQwUA8dIYqQxshh5jMIitEgtasvNODhOEiflDeZt4R2L8K8vu7wR0nXgX3pUfv6yvxvZ 3i1jV35h/dI+lcPCcyLRv2zvvoH4pZu7f3OmZV83d2NLedJfNCmytXvr37Kj/v92Wzeyqzu9lAb9 zYK+3dQt29GNcJ690gNfWljSvmzn3islNwnyTPlPpaSmdCNXWaWUwkxDapdt3KrOqOPU9TRhzQnN DW2S1q+dr72ra6+b9mXLlvqLcRgsBq8h/8uG7TTj8dIN2/kRChHZsK0w17zQvNy8jreZdz7S9SLM /LbnRTkdqRrpeols6prSzMK4hVG6KE2U3pZlaxT1S9TSqCWWfpa++Du8CH+Pf8A/4p/wYvxzTLmY 8pbLliuWq5brltuWO5a7lntVy1tuWI5ajlmOW05YzpsPWE5aTlnOWM5GCaLKxxbHFlkyLGmWTMlv McoYBH4Ro4pRx2hiKsRUjOHF8Es+EWSWLpZulq7M0fj+zDHe67QF1g12kaI7c8o+L5eUOZnTwX6a c0nTrOWi3iOfBGu081RF4rsZH/lVmHPMeXEjcVAhD3nc6dKDvA9iEbRZ+lLOFzezL3ZPdg6Uz4T6 8o46LMxF6DU0KC0j6oA8S1LPvxxtjZ4Rtw03Eu0XvjHtzt3lccTfRc8G8kUQMYoYTYwhxhJ5xDgi nxhPTCAmEpOIycQU4idiKjGNmE7MIGYSs4ifidnEHGIuMY+YTywgFhKLiMXEEmIpsYxYSawidhK7 iT3EXmIfsZ84QBQQB4lDxO/EH8Rh4ghxlDhGHCdOECeJU8Rp4gxxljhHnCcuEBeJS8RlopC4Qlwl rhHXiRvETeIWcZu4Q9wl7hH3iQfEQ+IR8Zh4QvxJPCWeEc+JF8RL4hXxmnhDvCXeEUXEe+ID8ZH4 RBQTn0E5UB5UABUBD/CBAAiBCIgBDCRACmRADhRACRCgBhqgAwZgBCgwATPAgAVEASuIBpVAZVAF 4CAGxIKqoBqoAWoCG4gDtUBtQAAASEABGjDADhzACeJBAqgD6oJE4AIscAMPSAJekAx8IAX4QQAE QQikAg6EQT1QH6SBdJABMkEWyAY5IBc0AA1BI9AYNAFNQTPQHHwHWoCWoBVoDdqA78EPoC1oB9qD DqAj6AQ6gx9BF9AVdAPdQQ/QE/QCvUEf0Bf0A/3BADAQDAKDwRAwFAwDw8EIMBKMAqPBGDAW5IFx IB+MBxPARDAJTAZTwE9gKpgGpoMZYCaYBX4Gs8EcMBf8AuaB+WABWAgWgcVgCVgKloHlYAVYCVaB 1WANWAvWgV/BerABbASbwGbwG9gCtoJtYDvYAXaCXWA32AP2gn1gPzgACsBBvAXeFm+Ht8c74B3x Tnhn/Ee8C94V74b3xvvgffF+eH98AD4QH4QPxofgQ/Fh+HB8BD4SH4WPxsfgY/E8fByej4/HJ+AT cRqPxxPwOnhdPBF34Szuxj14Eu7FA3gQD+GpOIeH8Xp4fTwNT8cz8Ew8C8/Gc/BcvAHeEG+EN8ab 4E3xZnhz/LvY5zGLo+RRMss5W1NbM1uGLd3SwNLGFrSFbN/Zmts227bYttm223bYdtp22fba9tkO 2ApsB22/2/6wHbYdsR2zHbedsJ21nbOdt12wXbJdthXartiu2q7bbtpu2+7a7tnu2x7YHtoe2Z7Y ntqe2Z7bXthe2l7ZXtve2N7aimwfbB9txbbPceXjKsbx4gRxwjhRHBQntrWwtfomuTWS2lqW2fpX YmtZXutfOa1/p7Tm2fJtE/4lnXXGPySzLipNZY1ksq4qzWP9msZalv0cNTzOGKfkWRWXLcG4g3EF /9AJVFj7yj/2AtUlEr/pBkrmFfNVpe/mMvh9+cNKX8R9Fngi79qEFqFT2Ei0HqoA9YT6Qauha6Vv vArF9+AKMB/uAv8m0UgOl76g2i+9KZOXvpMaKJsuOyePkm8vfdV0L8JpS1ksLjj8hb6u/kpev1BX qOI3vHWfWCZ2weVKuepXqiqFv/DUb2jqNyw1QlI/yFvJt8ivR8ipsnUZLUVyvyGlblWrCCNVJ3xl oxU1A74S0enfslB9UB/+SkD/4p+Hv5LPCPeMUM9/5p23S0nnN5ST1583ljeLt5y3jreDd5Z3jXeL 945fjg/zdXyU7+An8hvzm/Nb8Dvzh/M38e8KKgggASLQC6oLSEEdQVDACVoKOgt+FPQQ9BT0EQwX 5AnGCSYLlglWCgoElwXXBY8ETwRPBS+EtDAobCb8TthK2EM4VDhROEk4U7hAuENYIDwkPCu8Lbwn fCjiiYQiiQgRaUR1RS5RSNRQ1Fw0RrRQ9FFUDEGQDFJBGqgShEM1IDvEQj6oMdQE6gz1gPpDE6Cp 0ExoFbQR2gGdhs5Cl6BH0CvorbiiGBEbxYQ4Q9xU3ErcRtxB3EncSzxKPEY8Vbxa/Jv4g/gjLIDl sAKOgd2wB06CA3BruDPcE+4Dj4LHwVPhWfBseA78C7wSXg/vh3+H/4AL4dvwPfgh/A4ulggkkEQr wSVxkrCkoaSJpJekv2SgZKhkpGScZLNku+S85KrkmuSVVCm1SYE0TZouzZA2k3aSjpKOl/4knS6d IZ0l/VW6SXpEek76QvpGppQhsihZtAyXVZUlyjyygCwkqyfLlGXJmsm+k7WVtZdNlE2SLZAtlK2Q HZedkF2T3ZTdkt2RvZK9lpeX8+SQXCqXya3ySnKPnJOny7+TD5UvlO+R75P/Ib+maK/4SbFLcUhx VfGn4qnSpyxQ3lQ+Q9ojA5DhqnaqcapZqr2qd2pM3VQ9VD1Z/V6zRHNXc1/L19Lasdo87QVdOV2m br/ukb62vqt+qX6H/oqBNNgNPkNvQx/DRMMUw1XDbWMNo8PoNo40TjDOM74zfkLLo93Reeg6k8pU xYSb7Kb6piamPqa1ZsiMRy2PWhd1KeqxNd6abF2eYBIN1lZA9kT9Lr0jaYwuEDRXvAlnKY0JFmXN YHp6Y/n7JJrdmCRPXyA/w9uFOoKdkFj2ZNRN2GWdGJyaECWdi7zIsAdXmRqo+ns1hvuZLpGJ/SAa aJ0rDYZgPp//whFwsN6L6tP8j3yTpofjR0fbBDJUUzMxoUo4IwH3htCczDUJseoZyYMFo4UNUrvx EdkOZ2wCqzW4s5OPa3tq+6WKtEeEyx1H3b2yOoZ+D+f4Gkrnu0eGeujyfNN0C7iroRPWycLRwiue qnpeQjXfJd/DhOoJNQKJqQbuSXYz52PnI/647DHhBoIz/g/iuqmDc4LG7VzLnK5hUVCcugOZZCqK z0NDUSv8uzxIfE+0S7ghukR2CS1KqCWdKd4G23LH5E5350aLTbdyj3Fezs9lKVlzTeaaPdG+1jHN McexyTnLucq5Jn6To7filCjNcVa4xg2rTqolgpRwY/Uj11zXEtdy12rXYdcF10XXJddlV6Hriuuq 65rruuuG66brluu2647rruue677rgeuR67Hrieup65nrueuF66Xrleu1643rreudq8j13vXB9dH1 yVXs+syWY8uzFdiKLI/lswJWyIpYiBWzMCthpayMlbMKVskirIpVszpWzxpYI4uyJtbMYqyFjWKt bDRbia3MVmFxNoaNZauy1djqbA22NkuxiWwqy7Fhth5bn01j09kMNpPNYrPZHDaXbcA2ZBuxjdkm bFO2Gduc/Y5twbZkW7Gt2Tbs9+wPbFu2Hdue7cB2ZDuxndkf2S5sV7Yb253twfZke7G92T5sX7Yf 258dwA5kB7GD2SHsUHYYO5wdwY5kR7Gj2THsWDYvsX1iO+F5PgNvhccnHkws+D83ybkyXVnIb57F 9h+UG5NYSTJCIi3tM5Py+GPTfvDyxKnaXxyqYJrgQEKyeqI6Rb9SOlGj4u8LJSieaV556mWetHZ1 fIy/zp3mzmRZQj19NZzOrFVqnbNxALVOko3RVzbX0m8U5qW4U636iykDuNeQwPA8+ynyWZmpJI2P /I3jRzknJfEC0mgoMM/N8U7DtZHuigCyRdFO0VaRZVyZYVZ05p9V9JeHQkp2Dr9dcBz8SlnJKJZH K7M9NZRT7e0FXZRrIJ1EaP9eOT+9P7uV/0T5ihunfJ00MmkEe8ZYP6oIqY80VNxGdwhnq6ohl1Tx Kpx9rNqoWmz/rBqoSgte8jfxuryJolWiY44l/MoZhRKbvA3XQu3h5cH11Fvk38sG56zzbvVuybSq f3Zw6vOZIKRW31N/hK9q3BqHpr2gWHNZ87tml2qfYxt3RCtOmZR5zDAweUHmqeQ58j6ZTzLfOYrh 49q92lPao9oP7k6Zd9FP/NWhefBcZ6ZutG5gaH3WylCBs0tAHrDoRbpNunu6g3opd8P5s75u6M9M wrlCeknfUjhGv0a/XX9B/8G9kXuc7THUVQ/I9mUg3FP9W8lt7nl2irsgeTK/g2GmoZ3hccr9lHtG Kl1ujE3tZLT7ZX6pX+lXSO5ooRxHai/xAeNi4y3jdbHSA3nrSO/7u/g75yxRnc85JOSjXa2P0Pz4 wegf6HE5Ls/OzeLk8U5PTd9MU02TM3TEPdE3O3TF1NTkNeU6t4eDgT6B3EB2IBSODleKlogTPUmi K1wKMiJ3bWB1YJW5ijmGyw515dywXrJKUUWSociQjhNs1kTLtsiwtDxVanxjwRjBIqVDmZIep/+V t9Nd3p4lsfLzsiDxG/soZSESr3wKfYh6hcR4fkOG2VcJniMFKqn9oqqGt1rGctVl1bWM3WqD5HdH dfWszBjPXO9tTQzUztGXO+B2w0OtzdUjc0hkG3JfsFWv5BppRwZ2O39wt9IeyKoVyg+N0x4L/RKa 6/P4hmdNR9boxvnGO1MDBucASW/D+UAlqSerMN3guyu8ydsu2KjvrO+vH+NUZSudR9xbslsbGspj BE2yV8oaZB8wHEkNp3LZf/orOnb5TfBuqSS+rgSFEo2r4IHGE8a7OTPim+T+AHVBm+QK0V/Tc9Ct xg0cwkk4sf8lx89dzNXh7IEDCbzAogRhblECEtga6ig0iI54+8WHJOX4SYo0ISKZoXjL9ynbKNsq Oyp/kobFF5XHlEeTvkcEiB7pgywR/owckq0SZggdqoWq38RZqkLVJdUt1WuZCn6sHqQepl6k3sn7 UxMQ8zRpmg6h2lAHzfLkEdpO2m7uxu4m2snagzrY2c93Qp+ob6VvKx4rXqpfnOJznpOzKS0NUSmd DDHus/AawxVpoZGDDgo/S9cbhxiX8NfHZ6FaqQptgQ5Fl6IFpuqmqeL1ppm8y4F+gQGmJ6o5ugaC QcLy/9QLK1FEGmFL+2DfGzoHfI6Z9nhnvXh+/M/W9wnhtP/V3nlGN3Gu7domVm9TpJE0ksYSvRuc KSqmWL2O8EguQoAxnVBCh9BJKAEMBAg9gVCC6RBMCWBK6AkdQg0t9JYECM3UMzP2zpd9vv2dtXfW XmefH8drWRZaHrH0y3M9733dD8oYGCNjYjAmnTEzFqYqU42pztRgajK1mNpMHaYuU4+pzzRgGjIZ TCOmMZPJvM/gDMGQDMVYGRtjZxxMFtOEaco0Y5oz2YyTcTFuxsN4GR/jZwJMkAkxYSbC0EyUadEi 3kKfcyLnZM6POadzzuScyzmfcyHnp5yLOZdyLvMtzxUdz3/X8GwpFc6Jq+WpTH/xgewrTGclJWkU LGe+BmLmvcw0eZjZypRqRwNDkSXCiYIBqoHqTEmxtodwMXBdzoh6g7vT5qBK0O1/Hr4bsoE1URcw SpkZ6x15IVpvbSnWSnfEGHmhu5nArxiqPAWet/bT1vO3YtpIGden4hLFCSDTegz6FRbCdukN6ceh a/B2aEToF0kR/AS+5WmtP2lpILuZW81TlpsWVvjuei7bxBpMMFOz1rZKc9U7wxn1LvI1QDK8O5CG 3n06JeICx4eKnB3CE5DLhj3i0/aQsFDbUZsIb/ZNdg7RndZeCd/RNRRuish1x/xBf9w/SJ9pv6Ad HKltf61vZZyoL4nY9MsjrrRx+vuRhPOG5BkKSaaCEbRGARmOFDQKGBy+gtYFUbTUEUWvRMoCfT3r AuMN8URqAiq4F7le8Ep2xnwz8MCYlugb2ZvoleiR6JyY5DifGOC4JE8zDqfrB1dWFTneiQsFIB2S m5ONko2Tmcn3k3iSSJJJKmlN2pL2pCOZlWySbJpslmyezE46k66kO+lJepO+pD/ZMJmRDCSDyVAy nIwk6WQ02SKZk2SSsWQ8mZvMS+YnC5KJZMtkMtkq2TrZJlmYbJssSrbjW7n/9S7vv9DjnZIKCVL9 qcuqCKosqHI1zfJHZ8uwtFFp41jyKWYJcA7LPwvSlrAMtJaloE18J0IZS0M70namfZd2MO1I2tG0 42mnWDo6m/YTS0icV3A97de039OepD1Ne572Iu0V3/eSwt5lygSgAGKJlaMno6CqoHpl90uFedBA kCGgWKriWmCa8T0wboFP4GfZlqOsdixndRZ0FXQT9GB5q69ggGCgYDBLvdz0djTLX58KJggmCooF kwQzBbMEiwSLBWsEpSyVcV0xe/i2mEMsHZ8SnBZcFNwS3OZ7Y34RPBa8YO94K9pjOHqT8Q0yIEtx WpbjOLehFktzDYUZLNFlsUznEvqEfp7sGGFLYSthG2GhsIilvA+EPXjS61PJelyT5RjhWOF49q/N RJ77JrPkN0c4V/iFcLHwa+EyngLXCNcKvxGWCjcKNwk3C7cKdwn3sWT4Pcvvh4QnhT8KL/CUeJvn xF9ZUnwkfCx8LnwrShUJRFKRSgSJ9CKMJf2afGtNXVF9UYPK5hpSZBXZRHZRc5FfFGDpMsobF3G+ hyJf1LKyx6aCOTuJuoh6iHqz7DlQNJTlz/GiCaJilvYrOHSe6AvRlyz5LxatYOl/rWidaD1Lpvt4 Nj0kOiw6JjrOMuoZ0VnRedElfjJwrYJYRU9Ez0QvRa9Eb0TvxCk8v4rFkkqG1YqN4lriOjzLesQ+ cYAlWkYcEydYri0Ut2XZtpO4m/jDP5o9R4hH8V06E8ST+Tad2eK54nks/Zaw91Fcs84m8VbxXvE+ 8QHx9+LD4qPi0+Lz4kvih+Jn4nKekKvwhoiQJWU5y8oqnpa1LC9Xl9TgmbmBpJGEYsm5qaSZpDnP z2G+iychacWTdFHlhKObpLukB8vVfST9WLYeyE/9uZaeYfzsf6SkWDKF5e2pkmk8cy9nqZvr7dko 2cyyN2ee7JUc4M8GTkl+ZEn8DN/jc0FyiW/y+VuPz33JQ8ljltCfSp5JnkteSF5KXknesbSeJhVL lVKQp3ajtIa0prS2tK60EUvwXM8P1/LTVNpM2lzqk/qlLDJJaSnDsn2eNCltxRJ+W57xu0g/qOT8 j6VjedafKC2WTpN+Lp3BUj93TjFPuoDvGFkiXca7L6ula6TrpKXSb6VbpNuk26U7pN9Jd0v3SfdL D0qPSE9IT0rPSc9LL0qvs38VbvHNQc+k5dzsQPpOlsJ3BwkqpwiQDJHp+L6SmrJasrqyerL6soay DFnjyj6hprLmlXMGj8wnC8payHL4fiHunKSlrFDWSdZZ1qXytKSXrA8/hxgmGyH7pLJ36FPZBNkk 2RTZ57KZsjmVs4kFsq9kK2WrZGtl62Wlsm9ZUuG8nF2V04rDsiOyY7LjstOyM7ILsp9kF2WXZTdk N2W3ZLdld2T3ZA94Z+cJP81IkafK0+RCuUgu4SdbgFwjR+Q6uUFulGNys9wiryavKa8rbyjPkGfK Kbld7uA7jrLlbrlX7pOH5bQ8Km8hZ+RxeUt5Ut5a3kZeWOn8VPQf9Zb3kQ+Sf8RPSUbyc5Lx8kny 2fI5fCvScvnqyjOgzfJv5dvkZZUnQfvl38sPyc/Kf5Jf4ucpN+Q35Y/kj+VP+NYkmUKuUClABVx5 WlSbn7VwvbTNFdkKF9+mFFCEFNHK+UueolDRVtGRt4k+5BuWuLndUMVIfnb3qWKiYpJiimKqYoZi Jj+hmauYp1igWKRYqlimWK5YpVitWK8oVWzifSOuk+mA4rDiiOKo4oTiR8UZxVnFBcVFxTXFTcUd xQPFb4rHit8VzxTlf5oGqvgpD6xElBjfjmtRVlVWU9bgZz51lfX4rtxMJa6klFalnZ8C+ZUBZVAZ UoaVEWULJcPPgxLKlsrWf0yFhihHKEcpxyknKIv5CdFs5Vf8lIiznFYqVylXK9ewdLBduYefGp1S nlGeU174Y3p0W3mXmyApy5Uvla+Ub5RvVal8Z1SaSqASqyQqKT9VAlUGlVFlVllUVVXVWI6pxfdJ VbRJZamyVS6VW+VVhfm5U64qT5WvaqVqp+qo6qzqouqu6qFi79ZUH6kGqz5RTVZ9ppqhmqtaolqq WqvapNqi2qoqU32n2q3aw5/gHVB9r/qB75z6UXWOt66u8N4V1zr1WPW76iUgAiSAElABEKAHDIAR qAE0BjIBHMgGnEAQCAMRIAdggBgQB/KAfKAVUAh0ADqx/NsN6A70AvoB/YGhwDBgBDAK+ASYABQD k4EpwGfAVGAaMAOYCXwJlACrgZ3AfuAAcBA4CZwFfgIuApeBK8BV4GfgGnAduFGRhuHmaMBD4Bnw HEwBRSAEomA1sAZYE2wAZoLvgzjLYNmgG/SBfjACxlhCzwcTYBuwEGwLtgc78dzRjSWPfuAg8CNw FDgaHA9OA6eDM8CZfHvQXHARuBRcBq4EV4NrwVJwA7gR3ARuA8vA7eBucC+4HzwAHgaPsMxyGjwD ngcvgpfAy+A18C74G/gQfAI+BZ+DL8DX4BsolScaFDJAVaHqUA2oFlQbqgM1gBpD70M45IA8kJdl +lwoD8qHElASagV1gDry0+nuUE+oN9QH6g8NZIloODQCGg2NgcZWpKGgadB0aD60AFoKlUDLoRXQ SmgVtBbaDH0LbWEJcQf0HbQfOggdhi5Al6E70K/QY+h36Dn0AnoNvYHesffZYlgB62EUNsA14Vpw Xbg+3Bi2ww7YCbvgAByEIzAN58AM3BH+AO4G94AHw8PgEfB4uBieBE+HZ8Dz4C/g+SybLYWXwSvh UngDvBH+Ft4Kb4d3wbvhPfBeeB/8A3wYPgGfhH+ET8Nn4fMswf3EctwV+Cr8M3yNpblb8G/w7+wd /lP4BVyuFqmlaplartaq9WpMnaFupM5UZ6ldaj/v4RWqO6o7qTurh7P097H6E5YAx6mnqqerZ6jn qOepv1DPZ4mwRL1KvVq9Rr1WvU69Sb1FXabeod6l3q3eoz6sPqI+rj6lPqu+oL6ovqq+qb6tvq/+ RV2ufql+pX6teU8Da9QaTFNVU0uTobFqbJrmGqfGo/Fq/JqgJsoyZqGmu6aHpp9mgGaIZrhmgmay Zqrmc02JZoVmrWaDZqNmp+Z7zXHNKc0ZzU+aK5qrmp811zQ3Nbc0tzV3NL9pHmqeaJ5ymQ3NOyQF qYKkIQJEgkgRJaJCIESNaBAE0SMmxIxYkKr8yUNdpCGSgTRGSMSK2BA7ko24+NPzMBJBokgCaY0U Im2RLhzxcvNRZBw/Kf6MJd/ZyDzkK2QhsghZgpQgy5C1yHqkFNmGlCG7kX3IAeQwcgQ5ipxEziGX kevILeQ+8gB5hbzRpmjFWplWwZ93mLSY1qytrq2trautp83QOrQttIw2po1rc7UJbUuWpT7QdtN2 1/bQ9tL21Q7UfqQdrB2hHa0dry3WTtJO1U7TztIu0i7Wrtau027Sbtfu0u7V7tMe4M/8T2hP897j Fe017U3tbe197UvtK+1r7VvtO12aTqgT6xQ6pQ7UwTpMZ9FV19XRNdQ11hG6pizLV5y/FOja6Dpw XK/rpuul663jGsmH6IbpRuk+1n2iG6uboPtct0C3VLdMt0q3Vrdet1G3SbdZV6bbrtup263bozum O607pzuvu6S7rLuiu8n5lbrnuhe6V/oUfapeqk/Xm/W19A30mfyUvaneqXfrPXqf3q+P6eP6PH1S 30rfXt9N34ufvw/Tj9CP0Y/TF+sn87P42fo5+rn6+foS/XL9Gv1W/Tb9If1h/RH9Sf1Z/UX9Jf1l /RX9Nf11/Q39Hd7XvK9/oH+kf65/jVZBpagShdCqaA20NloPrY9moI1QHCVQK2pDm6FO1IW6US/q RwNoCI2gNNoCzUHz0HwuZ4a2Q9ujHdCOvPU5CB2MfoyOQ4vRz9CZ6Cx0HroQXYqWoKvQ1WgpugHd jG5Bt6Lb0DJ0H3oYPYIeRY+hx9GT6Cn0InoFvYpeR2+h9ytPEcQGiUFhUBoQg/FPJ1v1DPX/dLpF GKwGm8FtCBnChrihwNDGUGhob+hk6GPoa+hv+MQw1jDRUGyYbJhi+Mww1TDL8IVhoWGRYbGhxLDM 8I1hvWGDYZNhi2GrYbthj2G/4QfDYcNRwzHDj4bTvINabnhjTDOKjGKjxCjnbVTYqDHqjEb+ZKOu sZ6xgdFqtBs9xhwjY4wbE8aWxlbGNsZCYz9jf+Ng43DjSOME40TeW51pnPsnd3Wdcb2x1LjL+J1x t/GQ8YjxqPG08YzxrPGy8YrxuvEXY7lJZJKYVCbYZDZVN9Uw1TTVMtUxNTA1MuEm0kRVbgX5006Q ipSKaV/FWazpR9MZ0znOYTFdMV01/czZJaabf2fi/Wp6aHpkesybeC9M5aaXptemN7yRVwV7DxNg IkyMSSq9PBUGYBAGc5ZApZ1nwIxc/r/S0auO1eAy95WmXkOsEdYYy8Tex3Au845RmLUi7Y41wZpX enueSnMvgAUr7b0ollORC8fyKz2+VpUeX9tKk68z9gHWDeuB9az0+Ppi/bD+vMvHmXwjsFHYx7zP NwYbi43DirEp2GfYVOxzbBY2G5uDzcW+wL7EFmBfYQu5dCO2FCvBVmAruZwgthZbh63HSrEN2EZs E7YZ+xbbhpVhO7Cd2C5sD7YX248dwA5iR7Cj2MXK1JUx3cTbgtX+zhTE00neFsxOd6Z70r3poXQm PZ6ey2UDKjcfD0kf+o+2t/yR/KlM/aSfST/7R0Lo5/Rrf0sJmVPNQrPSrDJrzFqzzozyW18i//ve F/MY81fmEvMy8wrzSvM35u/Me837zN+bD5kvmK+Zb5rvmR+Yn5ifm8vNLy0pFoVFbzFbqlvqWBpY bPy5XMhSYElaiix9LQMswyxjLeMs4y2TLJ9ZplqmWaZbPrfMsMyxLLCssKy0rLOUWjZYNlp2WO5b frE8s5RbXlreVn2vqrCqqKqkqrSqrKq8qupf3pP837ckP6z+qEaV/wf3H//37cfc7uPkP7X3+P9v Pf5rW4//bRmef1+uqNbS2o9ql9d+WyeVTwDFGsa5/B+fDCpq2O4/lcr5T6WQKvKoGcoMMAPNaJ4x O2NJxv6MA399Sy8uw+W4AlfiKhzAQVyNa3AE1+NG3IRjeDpuxqvhtfC6eD28Pt4Ab4xn4u/jOE7g JG7FbXgTvDnuxj24F/fjQTyEh/EITuNRPAcvwBN4S7wV3h7vgPfF++ED8MH4cHwEPhL/GB+Nj+EM QHwCPhEvxifhU/Bp+PQKcw6fjX+JL8CX4CX4MnwFZ1Dhq/E1+Dd4Kb6Bc4w4vwjfim/Dy/5kA+3F 9+Hf44fwo/hx/CR+Cj+P/4RfxC/hVzj7Ar+O38Bv4rfxu/h9/AH+EH+M/44/wZ/iz/FX+BsuoU+k EFW4rDwhIsSEhJBWZNMJmFATGkJL6Ag9gRImIp0wcylvojpRg6hF1P6vBPV/pacJkrASDiKLaEY0 57LJhItwEz7CTwSIMBEhaKIFwRAxIo/IJxKc3UoUEe05a5XoTHxAdCf6E4M5u5QYTowkPibGEuM5 g5Qo5ozRCl+UmM45osRMzgolFnPWJ+d8EsuJFcQ6YlOFp0nsIHZWOJnEXmIf518ShypMS86trPAq OZ+SuEhcJq4QV4kbnPlIPCKecLYj8ZzzHIlXnNvIGY1kKplGCkgx5ymSSlJFAiREwqSa1JFG0kSm c5YhWYdsQDbkvMEKZ5DzBckmZDbp5vy+CquPzKlw9sgCMkm24pw8si1ZRLar8O/ITmRnsmuFbUf2 IvuS/cj+nE1HDiI/IgeTQ8hh5EhyNDmGHMtZb5zzRhaTk8nPyGmcy0bOJOdwvlqFm0YuJZeRy8kV 5ErOPCPXkN+QpeQGchO5hdzKWWPkTnIX54lxVhi5nzxAHuRcsL9ZYJz5xVlf5A3O8vqb3cWZXeRD 8hH5lLO4yDfkWyqVc7QoISWllBRIQRRMaSgdZaBMFEaZOaeJqkHVompTdaiGVAbViMIpkqIoG5VF NaWyKSflobxUmKKpKNWCyuGMD6qASlCFVCeqK9Wb6kcNoAZTQzlrgfqYcxM4H4GaQE2kJlGTqSnU VGoa9XlFqp9aR31Drac2cgl6ahtVRm2ndlHfUfuog9QR6ih1kjrFZZCp89QV6g71yiqwiq0KK2JF rZi1rtVhbWJtZnVZ86wtrW2sXaxdrd2t/ayDrMOso62fWidb51oXWpdYl1pXW9dZt1iPWI9Zz1sv WJ9a39lSbWKbwgbbEFu6rYatns1qa2rLtgVttC3flrB1tHW2fWDrbfvINsQ21TbLNtc231ZiW2Zb Zdtk22LbZiuz7bDttO21/WA7Yjttu2V7bXvLuS922F7dXsNe2263h+wRewt7rr2lvbW9q72bvY+9 v32ofbh9hP0T+1j7NPtM+zz7F/aVXDbHXmY/bD9jv2C/b39gf2J/7RA4MIfdkeVo6vA5go6wI+rI c7R2tHF0dnR3DHQMcQxzjHJ86ih2THN84fjSscZR6tjk2O74wXHEcd5xyXHVccvx2vEuKy1LlAVl qbO0WcasdL5XsWZW7ay6XP4oq1EWnmXPap6VneXK8mb5s0JZdFY0K6fJ0Cajm4xrMrHJsn9qj3TF Ful/5w7pf2V/tLIp1NT4H98C3a1Z92ZLm5U0W95sZbP9zQ78c9uas6dkz8/emL0le2t2WfaB7GPZ J7J/zD6XfSX7Qfbz7PLsV85UZxWnzAk4tU6dM91Z1Vnd6XQGnEEn7Yw6Y858Z4JLEzg7ODs6P3QO cg5xjnCOc051TnfOcs52LnIud65zbnRucX7n3O887TzrvO684bzrfOB86HznkrggVx1XfVcDl83l drVw5blau7q4erh6uvq4BroGuUa7PnVNd33umu360rXAtdS12fWt6zvXftdJ1xnXQ3eaW+ZWudVu xG1wW9yk2+5u5s52x9257i7ubu6x7nHuYvdk9yz3fHeJe4/7uPus+7b7nvuR+4knzSPxSD0aj85j 8tT1NPE08zT3eDxeT9iT72ntaePp7BnqGe75xDPaM9sz1/O1Z51ni2erp8xzznPec8Fz2XPDc9vz u+eN561X5830NvV29HbyDvAO947yjvVO9k73zvDO8c73LvIu9q7y7vDu8x7z3vUBPsin8dX11fc1 8DXyNfa5fDm+pK+vb6RvjG+yb4pvlm+u70vfOt8G3y7fXt8h33HfBd9N3y3fXd8932++h76X/mr+ xn7Kb/c7/T5/0B/yx/xxfyt/B38n/wf+D/2D/MP90/yL/KX+Tf6L/tv+O/7H/uf+N4H3AuKAIqAM AAEwoA3oAoaAMVAzkBHICjQNuAOtA20CnQK9An0CfQP9A+MDXweWB1YEvgnsDJwInA2cC1wLPAj8 HngVVARVQSCoDuqDhmB6sFqwerB2EA82C/qC4WB+MBEczGU/gpODM4MLg4uDXweXBVcGVwfXBNcH Nwa3BncF9wX3Bw8EjwSPBs8FLwZvBe8GHwSfBMuDb0LSEBgyhGqGrCFbyBfyh5hQLFQQahsqCrUP fRjqE+oXGhQaEhoaGh6aFPo8NDM0O7QotDK0OrQmdCF0LXQ3dC/0S+hp6EVYFpaHFWEwrA5XDdcP Nwg3DmeFm4ddYU84EqbDLcJ54cJwz3DvcN/wgPDA8JjwhPCk8OTwtPCC8FfhheHS8Obw1vDu8P7w 9+HD4ePhE+Hz4Uvha+E74bvhX8O/h5+FX4TfRqpEBBFxRB7RRyyR2pHGESJCRWyR5hFXJByhI9FI IvJhpF9kUOSjyNDIqMjUyMzIrMj8SElkTaQssj2yN7I/cjFyPfIk8iJSHnlLC2gpLadVNETXp610 E9pJe2g/HaBDdB6dT7eii+h2dHu6A92D7kl/SPenP6KH0CM4R5ceQ4+lP6XH0xPpYnoSZ9LS0+mZ 9Cx6Nj2Hnkd/SS+gv6KX0MvpFfRKehVdSm+gN9Kb6M30FrqM3knvonfTe+l99EH6B/owZ0pyaT76 NH2OPk9fpn+mr3MOIX2Hvkvfox/Qv9C/0r/RD+lH9GP6Kf2CLqdf02/ot/S7aEq0SvS9aFpUHFVE lVEgCkXhKBJFo8aoKYpFLVw+LFojWjdaP9oomvkPm4Wa851CXKOQPxqMhqLxaF60INoymoy2irb+ v7vXvYW+Rfx/Sv38TykhJs60YtowRUxnpgvTlenPjGI+YYqZacxCZjHzNVPClDJbmW3MLmYvs585 yHzP3GXuMQ+YX5kXTDnzinkbS40pYsqYKqaPZcQaxawxbywQY2IFsVax1rH2sW6x3rE+sWGxEbGx sRmx+bHFsW/jUFwdN8ZN8QZxIk7GrXF3nIkXxhfEv46viK+K74zviu+J740fil+M34y/zk3JTcu1 5FbLrZWbmft+bvPctrkTc+fkrs3dkXs090Tuydxbufdyf8l9mvsi92Xu2zxxniQvPa9RXigvnJef 1zNvZN7ovKl5s/NW5a3OK8vbn3cx7+e8V/lgfu18V74v358fym+bX5TfKX9C/vz8hflL8lflb87f l38i/3b+r/m/5Zfnvy4ACrCCmgWNCvACssBWECqIFrQu6FDQt2BgwZyCkoJvCg4WXC+4V/AqkZoQ JaCEIYEn8hL5ic6JrokeiV6JvokBiQmJSYnZiYWJJYmliXWJnYmjiROJW4nyxJu/kM/hUj1/IaPD p4j+9ezRX8gdpXBfqSkVX7XZ7yoduvfsXPkc6VvxvCn372Cvop71zf4+3fqxj137FNU3h4p6Fv3j V+ubw0X92Nd9fTp2q292fdSne+X/Ik5xp6SlIClpXdt3asd+9+vaoeOHfT7s0TNF6PaG4ynt2nO/ 26Uze11Kly5FPbumtOvGvl9Ku+7s+6V0+T9em8lfa+WvtfLXZvLXZvLXWlN0/GfE+Mfq/GNd/rEK +66NUnD2N7L4puzq7Gevz77Cvc49q84+5143ppjZ96iekvqud0qqcAn7U8p/ptSUTimpornsz2f/ CzKk7BcNCmVuZHN0cmVhbQ0KZW5kb2JqDQoxMDkgMCBvYmoNCjw8L1R5cGUvWFJlZi9TaXplIDEw OS9XWyAxIDQgMl0gL1Jvb3QgMSAwIFIvSW5mbyAxNSAwIFIvSURbPDk1QTI4N0M2RDFEOEE5NDlB NUY1QzU2NDRGRTlDQTBGPjw5NUEyODdDNkQxRDhBOTQ5QTVGNUM1NjQ0RkU5Q0EwRj5dIC9GaWx0 ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDI1Mj4+DQpzdHJlYW0NCnicNdLJMgNxEMfxnrEkGeuIDIbY xmSRILFvkViTILFz9A7u3sVdOXoKBy/BQ6hSFX/9pQ/9qa7q7tNPxFSrZZnuivzyCK+K9aU4USjB g+I/KcGzEgZwr6TiStqHNyXzLmKb155cww3cwhX8rdyZg+z3/2SBDW3QDh3QCRGIQgwc6IJu6IFe 6IN+cGEA4jAIQ+BBAnwYgWFIwhiMwhRMwjhMQAgzMA0BZCANKcjBLGRhHuYgD0UowAIswxIswg6U YAVWYQ3WYQM2YQu2oQwV2IVLqMIe7MMBHMIRnEIN6nAMJ3ABDWjCGZybEBVeNHxFDbT9UVY+kyI/ gskmIQ0KZW5kc3RyZWFtDQplbmRvYmoNCnhyZWYNCjAgMTEwDQowMDAwMDAwMDE2IDY1NTM1IGYN CjAwMDAwMDAwMTcgMDAwMDAgbg0KMDAwMDAwMDEyNSAwMDAwMCBuDQowMDAwMDAwMTgxIDAwMDAw IG4NCjAwMDAwMDA1MDUgMDAwMDAgbg0KMDAwMDAwMjU2OCAwMDAwMCBuDQowMDAwMDAyNjIxIDAw MDAwIG4NCjAwMDAwMDI2NzQgMDAwMDAgbg0KMDAwMDAwNjgxNiAwMDAwMCBuDQowMDAwMDA5MTMx IDAwMDAwIG4NCjAwMDAwMDk1MDcgMDAwMDAgbg0KMDAwMDAwOTU2NyAwMDAwMCBuDQowMDAwMDA5 NzQ3IDAwMDAwIG4NCjAwMDAwMTAwMTAgMDAwMDAgbg0KMDAwMDAxMDE4NyAwMDAwMCBuDQowMDAw MDEwNDQ3IDAwMDAwIG4NCjAwMDAwMDAwMTcgNjU1MzUgZg0KMDAwMDAwMDAxOCA2NTUzNSBmDQow MDAwMDAwMDE5IDY1NTM1IGYNCjAwMDAwMDAwMjAgNjU1MzUgZg0KMDAwMDAwMDAyMSA2NTUzNSBm DQowMDAwMDAwMDIyIDY1NTM1IGYNCjAwMDAwMDAwMjMgNjU1MzUgZg0KMDAwMDAwMDAyNCA2NTUz NSBmDQowMDAwMDAwMDI1IDY1NTM1IGYNCjAwMDAwMDAwMjYgNjU1MzUgZg0KMDAwMDAwMDAyNyA2 NTUzNSBmDQowMDAwMDAwMDI4IDY1NTM1IGYNCjAwMDAwMDAwMjkgNjU1MzUgZg0KMDAwMDAwMDAz MCA2NTUzNSBmDQowMDAwMDAwMDMxIDY1NTM1IGYNCjAwMDAwMDAwMzIgNjU1MzUgZg0KMDAwMDAw MDAzMyA2NTUzNSBmDQowMDAwMDAwMDM0IDY1NTM1IGYNCjAwMDAwMDAwMzUgNjU1MzUgZg0KMDAw MDAwMDAzNiA2NTUzNSBmDQowMDAwMDAwMDM3IDY1NTM1IGYNCjAwMDAwMDAwMzggNjU1MzUgZg0K MDAwMDAwMDAzOSA2NTUzNSBmDQowMDAwMDAwMDQwIDY1NTM1IGYNCjAwMDAwMDAwNDEgNjU1MzUg Zg0KMDAwMDAwMDA0MiA2NTUzNSBmDQowMDAwMDAwMDQzIDY1NTM1IGYNCjAwMDAwMDAwNDQgNjU1 MzUgZg0KMDAwMDAwMDA0NSA2NTUzNSBmDQowMDAwMDAwMDQ2IDY1NTM1IGYNCjAwMDAwMDAwNDcg NjU1MzUgZg0KMDAwMDAwMDA0OCA2NTUzNSBmDQowMDAwMDAwMDQ5IDY1NTM1IGYNCjAwMDAwMDAw NTAgNjU1MzUgZg0KMDAwMDAwMDA1MSA2NTUzNSBmDQowMDAwMDAwMDUyIDY1NTM1IGYNCjAwMDAw MDAwNTMgNjU1MzUgZg0KMDAwMDAwMDA1NCA2NTUzNSBmDQowMDAwMDAwMDU1IDY1NTM1IGYNCjAw MDAwMDAwNTYgNjU1MzUgZg0KMDAwMDAwMDA1NyA2NTUzNSBmDQowMDAwMDAwMDU4IDY1NTM1IGYN CjAwMDAwMDAwNTkgNjU1MzUgZg0KMDAwMDAwMDA2MCA2NTUzNSBmDQowMDAwMDAwMDYxIDY1NTM1 IGYNCjAwMDAwMDAwNjIgNjU1MzUgZg0KMDAwMDAwMDA2MyA2NTUzNSBmDQowMDAwMDAwMDY0IDY1 NTM1IGYNCjAwMDAwMDAwNjUgNjU1MzUgZg0KMDAwMDAwMDA2NiA2NTUzNSBmDQowMDAwMDAwMDY3 IDY1NTM1IGYNCjAwMDAwMDAwNjggNjU1MzUgZg0KMDAwMDAwMDA2OSA2NTUzNSBmDQowMDAwMDAw MDcwIDY1NTM1IGYNCjAwMDAwMDAwNzEgNjU1MzUgZg0KMDAwMDAwMDA3MiA2NTUzNSBmDQowMDAw MDAwMDczIDY1NTM1IGYNCjAwMDAwMDAwNzQgNjU1MzUgZg0KMDAwMDAwMDA3NSA2NTUzNSBmDQow MDAwMDAwMDc2IDY1NTM1IGYNCjAwMDAwMDAwNzcgNjU1MzUgZg0KMDAwMDAwMDA3OCA2NTUzNSBm DQowMDAwMDAwMDc5IDY1NTM1IGYNCjAwMDAwMDAwODAgNjU1MzUgZg0KMDAwMDAwMDA4MSA2NTUz NSBmDQowMDAwMDAwMDgyIDY1NTM1IGYNCjAwMDAwMDAwODMgNjU1MzUgZg0KMDAwMDAwMDA4NCA2 NTUzNSBmDQowMDAwMDAwMDg1IDY1NTM1IGYNCjAwMDAwMDAwODYgNjU1MzUgZg0KMDAwMDAwMDA4 NyA2NTUzNSBmDQowMDAwMDAwMDg4IDY1NTM1IGYNCjAwMDAwMDAwODkgNjU1MzUgZg0KMDAwMDAw MDA5MCA2NTUzNSBmDQowMDAwMDAwMDkxIDY1NTM1IGYNCjAwMDAwMDAwOTIgNjU1MzUgZg0KMDAw MDAwMDA5MyA2NTUzNSBmDQowMDAwMDAwMDk0IDY1NTM1IGYNCjAwMDAwMDAwOTUgNjU1MzUgZg0K MDAwMDAwMDA5NiA2NTUzNSBmDQowMDAwMDAwMDk3IDY1NTM1IGYNCjAwMDAwMDAwOTggNjU1MzUg Zg0KMDAwMDAwMDA5OSA2NTUzNSBmDQowMDAwMDAwMTAwIDY1NTM1IGYNCjAwMDAwMDAxMDEgNjU1 MzUgZg0KMDAwMDAwMDEwMiA2NTUzNSBmDQowMDAwMDAwMTAzIDY1NTM1IGYNCjAwMDAwMDAxMDQg NjU1MzUgZg0KMDAwMDAwMDAwMCA2NTUzNSBmDQowMDAwMDEyNDYxIDAwMDAwIG4NCjAwMDAwMTI3 MjUgMDAwMDAgbg0KMDAwMDE4OTUwMyAwMDAwMCBuDQowMDAwMTg5NzI1IDAwMDAwIG4NCjAwMDAz MzQyMTcgMDAwMDAgbg0KdHJhaWxlcg0KPDwvU2l6ZSAxMTAvUm9vdCAxIDAgUi9JbmZvIDE1IDAg Ui9JRFs8OTVBMjg3QzZEMUQ4QTk0OUE1RjVDNTY0NEZFOUNBMEY+PDk1QTI4N0M2RDFEOEE5NDlB NUY1QzU2NDRGRTlDQTBGPl0gPj4NCnN0YXJ0eHJlZg0KMzM0NjcyDQolJUVPRg0KeHJlZg0KMCAw DQp0cmFpbGVyDQo8PC9TaXplIDExMC9Sb290IDEgMCBSL0luZm8gMTUgMCBSL0lEWzw5NUEyODdD NkQxRDhBOTQ5QTVGNUM1NjQ0RkU5Q0EwRj48OTVBMjg3QzZEMUQ4QTk0OUE1RjVDNTY0NEZFOUNB MEY+XSAvUHJldiAzMzQ2NzIvWFJlZlN0bSAzMzQyMTc+Pg0Kc3RhcnR4cmVmDQozMzcwMzINCiUl RU9G --0000000000002ba237059736dbca-- From nobody Wed Nov 13 01:40:15 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 324871201AA; Wed, 13 Nov 2019 01:40:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HPqGJS2g_meo; Wed, 13 Nov 2019 01:40:11 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0966D12018D; Wed, 13 Nov 2019 01:40:11 -0800 (PST) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 47CfjP236pzFpx2; Wed, 13 Nov 2019 10:40:09 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.95]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 47CfjP0Q1gz1xpN; Wed, 13 Nov 2019 10:40:09 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM24.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Wed, 13 Nov 2019 10:40:08 +0100 From: To: H Y , "draft-reddy-dots-telemetry@ietf.org" CC: "dots@ietf.org" Thread-Topic: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt Thread-Index: AQHVhZcTqLIZd9IRTUy9z3OirX19/adgIwpAgCjHvwCAABRS8A== Date: Wed, 13 Nov 2019 09:40:08 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313CD681@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 09:40:13 -0000 SGkgWXVoZWksIA0KDQpBIHZpY3RpbSAodGFyZ2V0KSBjYW4gYmUgaWRlbnRpZmllZCBieSBvbmUg b3IgKyB0YXJnZXQtcHJlZml4ZXMuIA0KDQpUaGUgWUFORyBtb2R1bGUgYWxsb3dzIHRvIHJldHVy biBtYW55IHByZS1taXRpZ2F0aW9uczsgZWFjaCB3aXRoIGEgdGFyZ2V0IGNsYXVzZToNCg0KICAg ICAgICAgICAgICstLXJ3IHByZS1taXRpZ2F0aW9uKiBbdGVsZW1ldHJ5LWlkXQ0KICAgICAgICAg ICAgICAgICstLXJ3IHRlbGVtZXRyeS1pZCAgICAgICAgICAgICAgICAgICAgIHVpbnQzMg0KICAg ICAgICAgICAgICAgICstLXJ3IHRhcmdldA0KICAgICAgICAgICAgICAgIC4uLg0KICAgICAgICAg ICAgICAgICstLXJvIGF0dGFjay1kZXRhaWwNCiAgICAgICAgICAgICAgICAgICAuLi4NCiAgICAg ICAgICAgICAgICAgICB8IA0KICAgICAgICAgICAgICAgICAgICstLXJvIHRvcC10YWxrZXINCg0K QSBzZXJ2ZXIgY2FuIGFnZ3JlZ2F0ZSB0b3AtdGFsa2VycyBmb3IgYWxsIHRhcmdldHMgb2YgYSBk b21haW4sIG9yIHdoZW4ganVzdGlmaWVkLCBzZW5kIHNwZWNpZmljIGluZm9ybWF0aW9uIChpbmNs dWRpbmcgdG9wLXRhbGtlcnMpIHBlciBpbmRpdmlkdWFsIHRhcmdldHMuDQoNCkNoZWVycywNCk1l ZA0KDQo+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKgOiBIIFkgW21haWx0bzp5 dXVoZWkuaGF5YXNoaUBnbWFpbC5jb21dDQo+IEVudm95w6nCoDogbWVyY3JlZGkgMTMgbm92ZW1i cmUgMjAxOSAxMDoxOQ0KPiDDgMKgOiBkcmFmdC1yZWRkeS1kb3RzLXRlbGVtZXRyeUBpZXRmLm9y Zw0KPiBDY8KgOiBkb3RzQGlldGYub3JnDQo+IE9iamV0wqA6IFJlOiBbRG90c10gVFI6IE5ldyBW ZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtcmVkZHktZG90cy0NCj4gdGVsZW1ldHJ5LTA0 LnR4dA0KPiANCj4gSGkgZHJhZnQgYXV0aG9ycywNCj4gDQo+IFRoYW5rIHlvdSBmb3IgdXBkYXRp bmcgdGhlIGRyYWZ0LiBJIGhhdmUgYSBxdWVzdGlvbiBhYm91dCBZQU5HIG1vZHVsZQ0KPiBvZiBj dXJyZW50IERPVFMgdGVsZW1ldHJ5LCBlc3BlY2lhbGx5IGFib3V0IHRvcC10YWxrZXIuDQo+IA0K PiBJIHRoaW5rIHRoYXQgdG9wLXRhbGtlciBoYXMgc2V2ZXJhbCBtZWFuaW5nIGluIGdlbmVyYWwu IFdoaWNoDQo+IHRvcC10YWxrZXIgY2FuIHRoZSBZQU5HIG1vZHVsZSBleHBsYWluPw0KPiAgMSkg VG9wLXRhbGtlciBvZiB2aWN0aW1zLg0KPiAgMikgVG9wLXRhbGtlciBvZiBlYWNoIHZpY3RpbS4N Cj4gIyBJTU8sIGN1cnJlbnQgWUFORyBtb2R1bGUgY2FuIGV4cGxhaW4gMSkgLCBidXQgY2FuIG5v dCAyKSB3aGVuDQo+IHRhcmdldC1wcmVmaXgqIGhhcyBzZXZlcmFsIGVsZW1lbnRzLg0KPiANCj4g SSBhdHRhY2hlZCBhIHNsaWRlIGFib3V0IHRoZSBxdWVzdGlvbi4gSSdtIGdsYWQgaWYgeW91IGFu c3dlciB0aGUgcXVlc3Rpb24uDQo+IA0KPiBUaGFua3MsDQo+IFl1aGVpDQo+IA0KPiAyMDE55bm0 MTDmnIgxOOaXpSjph5EpIDE4OjM4IDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPjoNCj4g Pg0KPiA+IEhpIGFsbCwNCj4gPg0KPiA+IEFsdGhvdWdoIHdlIGFyZSB3YWl0aW5nIGZvciBhIGNh bGwgZm9yIGFkb3B0aW9uIGZvciB0aGlzIGRyYWZ0LCB3ZSBtYWRlDQo+IHNvbWUgY2hhbmdlcyB3 aGljaCB5b3UgY2FuIHRyYWNrIHdpdGggdGhlIGRpZmYgcHJvdmlkZWQgYmVsb3cuDQo+ID4NCj4g PiBDaGVlcnMsDQo+ID4gTWVkDQo+ID4NCj4gPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0t LQ0KPiA+ID4gRGUgOiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmcgW21haWx0bzppbnRlcm5ldC1k cmFmdHNAaWV0Zi5vcmddDQo+ID4gPiBFbnZvecOpIDogdmVuZHJlZGkgMTggb2N0b2JyZSAyMDE5 IDExOjMzDQo+ID4gPiDDgCA6IGNoZW5tZWlsaW5nOyBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xO OyBNZWlsaW5nIENoZW47IFRpcnVtYWxlc3dhcg0KPiA+ID4gUmVkZHk7IEVodWQgRG9yb247IFJl ZGR5IEsNCj4gPiA+IE9iamV0IDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1y ZWRkeS1kb3RzLXRlbGVtZXRyeS0wNC50eHQNCj4gPiA+DQo+ID4gPg0KPiA+ID4gQSBuZXcgdmVy c2lvbiBvZiBJLUQsIGRyYWZ0LXJlZGR5LWRvdHMtdGVsZW1ldHJ5LTA0LnR4dA0KPiA+ID4gaGFz IGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBNb2hhbWVkIEJvdWNhZGFpciBhbmQgcG9z dGVkIHRvIHRoZQ0KPiA+ID4gSUVURiByZXBvc2l0b3J5Lg0KPiA+ID4NCj4gPiA+IE5hbWU6ICAg ICAgICAgZHJhZnQtcmVkZHktZG90cy10ZWxlbWV0cnkNCj4gPiA+IFJldmlzaW9uOiAgICAgMDQN Cj4gPiA+IFRpdGxlOiAgICAgICAgICAgICAgICBEaXN0cmlidXRlZCBEZW5pYWwtb2YtU2Vydmlj ZSBPcGVuIFRocmVhdA0KPiBTaWduYWxpbmcgKERPVFMpDQo+ID4gPiBUZWxlbWV0cnkNCj4gPiA+ IERvY3VtZW50IGRhdGU6ICAgICAgICAyMDE5LTEwLTE4DQo+ID4gPiBHcm91cDogICAgICAgICAg ICAgICAgSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQo+ID4gPiBQYWdlczogICAgICAgICAgICAgICAg NDENCj4gPiA+IFVSTDogICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1k cmFmdHMvZHJhZnQtcmVkZHktZG90cy0NCj4gPiA+IHRlbGVtZXRyeS0wNC50eHQNCj4gPiA+IFN0 YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1yZWRk eS1kb3RzLQ0KPiA+ID4gdGVsZW1ldHJ5Lw0KPiA+ID4gSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1yZWRkeS1kb3RzLXRlbGVtZXRyeS0NCj4gMDQNCj4g PiA+IEh0bWxpemVkOiAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1s L2RyYWZ0LXJlZGR5LWRvdHMtDQo+ID4gPiB0ZWxlbWV0cnkNCj4gPiA+IERpZmY6ICAgICAgICAg ICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtcmVkZHktZG90cy0NCj4g PiA+IHRlbGVtZXRyeS0wNA0KPiA+ID4NCj4gPiA+IEFic3RyYWN0Og0KPiA+ID4gICAgVGhpcyBk b2N1bWVudCBhaW1zIHRvIGVucmljaCBET1RTIHNpZ25hbCBjaGFubmVsIHByb3RvY29sIHdpdGgN Cj4gPiA+ICAgIHZhcmlvdXMgdGVsZW1ldHJ5IGF0dHJpYnV0ZXMgYWxsb3dpbmcgb3B0aW1hbCBE RG9TIGF0dGFjayBtaXRpZ2F0aW9uDQo= From nobody Wed Nov 13 01:45:59 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0E42120169 for ; Wed, 13 Nov 2019 01:45:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a4wCVb745dNG for ; Wed, 13 Nov 2019 01:45:56 -0800 (PST) Received: from us-smtp-delivery-140.mimecast.com (us-smtp-delivery-140.mimecast.com [63.128.21.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B50681201B7 for ; Wed, 13 Nov 2019 01:45:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=mimecast20190606; t=1573638355; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=biMQT5xS+BfvW43HL5SO750zRr8alIYj0Zry6I3XiUc=; b=dWQnPk2JRO7Bgevt+YaCnndqiRDWS9FnHp/Z5KYFR1xTWmcZ/cS1Rcp4Opu6BlPoqvQVS7 pW0J+bpy8yZ2BmTlKAsW+WEhtPICMWtaYcXD4S6h2c3Q+/3lN1uDd96STHYTru+iuhbMUl 2vWJ5SXX07b7vnqDDDNoZUjHMws/ikY= Received: from NAM04-CO1-obe.outbound.protection.outlook.com (mail-co1nam04lp2051.outbound.protection.outlook.com [104.47.45.51]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-126-r960sriPPeSREgTOIgipXg-1; Wed, 13 Nov 2019 04:45:53 -0500 Received: from CY4PR1601MB1254.namprd16.prod.outlook.com (10.172.118.12) by CY4PR1601MB1270.namprd16.prod.outlook.com (10.172.116.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Wed, 13 Nov 2019 09:45:51 +0000 Received: from CY4PR1601MB1254.namprd16.prod.outlook.com ([fe80::d1:dc14:c61a:e81c]) by CY4PR1601MB1254.namprd16.prod.outlook.com ([fe80::d1:dc14:c61a:e81c%8]) with mapi id 15.20.2451.023; Wed, 13 Nov 2019 09:45:51 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , H Y , "draft-reddy-dots-telemetry@ietf.org" CC: "dots@ietf.org" Thread-Topic: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt Thread-Index: AQHVhZcTqLIZd9IRTUy9z3OirX19/adgIwpAgCjYggCAAAXxAIAAAQvg Date: Wed, 13 Nov 2019 09:45:51 +0000 Message-ID: References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313CD681@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313CD681@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.4.0.45 dlp-reaction: no-action x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cd02468e-317e-493c-7d6b-08d7681e4535 x-ms-traffictypediagnostic: CY4PR1601MB1270: x-ms-exchange-purlcount: 6 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(366004)(136003)(376002)(39860400002)(346002)(51444003)(199004)(189003)(32952001)(53754006)(13464003)(11346002)(2906002)(74316002)(446003)(99286004)(4001150100001)(66066001)(229853002)(966005)(7736002)(6306002)(15650500001)(476003)(9686003)(6436002)(55016002)(305945005)(256004)(2501003)(33656002)(110136005)(5024004)(316002)(14444005)(14454004)(6116002)(86362001)(3846002)(486006)(71200400001)(71190400001)(81166006)(6506007)(8676002)(4326008)(76116006)(53546011)(66946007)(76176011)(26005)(186003)(7696005)(81156014)(6246003)(102836004)(64756008)(66556008)(52536014)(478600001)(66476007)(66446008)(8936002)(66574012)(25786009)(5660300002)(80792005)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR1601MB1270; H:CY4PR1601MB1254.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: mcafee.com X-MS-Exchange-CrossTenant-Network-Message-Id: cd02468e-317e-493c-7d6b-08d7681e4535 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 09:45:51.4086 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fr6Q5+T+WP91HaQFsK0/eRDLg84mKPAX9u0TyqJuPXKhYPxyONsxQS2suUL0KSgr+u0nnPE6XnD6MwbjlDvWNt7bkDXLRDLzihOrIFcblz71s6mvXH/sIoIXfAL2NJio X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR1601MB1270 X-MC-Unique: r960sriPPeSREgTOIgipXg-1 X-Mimecast-Spam-Score: 0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 09:45:58 -0000 SW4gYWRkaXRpb24sIHRoZSBhdHRhY2sgZGV0YWlscyBjYW4gYmUgc2VudCBieSB0aGUgRE9UUyBj bGllbnQgb3IgdGhlIERPVFMgc2VydmVyLiBUaGUgY2xpZW50IGNhbiBhbHNvIGNob29zZSB0byBz ZW5kIHRoZSBhdHRhY2sgZGV0YWlscyBwZXIgdGFyZ2V0IG9yIGFnZ3JlZ2F0ZSB0b3AgdGFsa2Vy cyBmb3IgYWxsIHRhbGtlcnMgb2YgYSBkb21haW4uIA0KDQotVGlydQ0KDQo+IC0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4gT24g QmVoYWxmIE9mDQo+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gU2VudDogV2VkbmVz ZGF5LCBOb3ZlbWJlciAxMywgMjAxOSAzOjEwIFBNDQo+IFRvOiBIIFkgPHl1dWhlaS5oYXlhc2hp QGdtYWlsLmNvbT47IGRyYWZ0LXJlZGR5LWRvdHMtdGVsZW1ldHJ5QGlldGYub3JnDQo+IENjOiBk b3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBbRG90c10gVFI6IE5ldyBWZXJzaW9uIE5vdGlm aWNhdGlvbiBmb3IgZHJhZnQtcmVkZHktZG90cy0NCj4gdGVsZW1ldHJ5LTA0LnR4dA0KPiANCj4g Q0FVVElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFj aG1lbnRzIHVubGVzcyB5b3UNCj4gcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNv bnRlbnQgaXMgc2FmZS4NCj4gDQo+IEhpIFl1aGVpLA0KPiANCj4gQSB2aWN0aW0gKHRhcmdldCkg Y2FuIGJlIGlkZW50aWZpZWQgYnkgb25lIG9yICsgdGFyZ2V0LXByZWZpeGVzLg0KPiANCj4gVGhl IFlBTkcgbW9kdWxlIGFsbG93cyB0byByZXR1cm4gbWFueSBwcmUtbWl0aWdhdGlvbnM7IGVhY2gg d2l0aCBhIHRhcmdldA0KPiBjbGF1c2U6DQo+IA0KPiAgICAgICAgICAgICAgKy0tcncgcHJlLW1p dGlnYXRpb24qIFt0ZWxlbWV0cnktaWRdDQo+ICAgICAgICAgICAgICAgICArLS1ydyB0ZWxlbWV0 cnktaWQgICAgICAgICAgICAgICAgICAgICB1aW50MzINCj4gICAgICAgICAgICAgICAgICstLXJ3 IHRhcmdldA0KPiAgICAgICAgICAgICAgICAgLi4uDQo+ICAgICAgICAgICAgICAgICArLS1ybyBh dHRhY2stZGV0YWlsDQo+ICAgICAgICAgICAgICAgICAgICAuLi4NCj4gICAgICAgICAgICAgICAg ICAgIHwNCj4gICAgICAgICAgICAgICAgICAgICstLXJvIHRvcC10YWxrZXINCj4gDQo+IEEgc2Vy dmVyIGNhbiBhZ2dyZWdhdGUgdG9wLXRhbGtlcnMgZm9yIGFsbCB0YXJnZXRzIG9mIGEgZG9tYWlu LCBvciB3aGVuDQo+IGp1c3RpZmllZCwgc2VuZCBzcGVjaWZpYyBpbmZvcm1hdGlvbiAoaW5jbHVk aW5nIHRvcC10YWxrZXJzKSBwZXIgaW5kaXZpZHVhbA0KPiB0YXJnZXRzLg0KPiANCj4gQ2hlZXJz LA0KPiBNZWQNCj4gDQo+ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gRGXCoDog SCBZIFttYWlsdG86eXV1aGVpLmhheWFzaGlAZ21haWwuY29tXSBFbnZvecOpwqA6IG1lcmNyZWRp IDEzDQo+ID4gbm92ZW1icmUgMjAxOSAxMDoxOSDDgMKgOiBkcmFmdC1yZWRkeS1kb3RzLXRlbGVt ZXRyeUBpZXRmLm9yZw0KPiA+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gPiBPYmpldMKgOiBSZTog W0RvdHNdIFRSOiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LXJlZGR5LWRvdHMt DQo+ID4gdGVsZW1ldHJ5LTA0LnR4dA0KPiA+DQo+ID4gSGkgZHJhZnQgYXV0aG9ycywNCj4gPg0K PiA+IFRoYW5rIHlvdSBmb3IgdXBkYXRpbmcgdGhlIGRyYWZ0LiBJIGhhdmUgYSBxdWVzdGlvbiBh Ym91dCBZQU5HIG1vZHVsZQ0KPiA+IG9mIGN1cnJlbnQgRE9UUyB0ZWxlbWV0cnksIGVzcGVjaWFs bHkgYWJvdXQgdG9wLXRhbGtlci4NCj4gPg0KPiA+IEkgdGhpbmsgdGhhdCB0b3AtdGFsa2VyIGhh cyBzZXZlcmFsIG1lYW5pbmcgaW4gZ2VuZXJhbC4gV2hpY2gNCj4gPiB0b3AtdGFsa2VyIGNhbiB0 aGUgWUFORyBtb2R1bGUgZXhwbGFpbj8NCj4gPiAgMSkgVG9wLXRhbGtlciBvZiB2aWN0aW1zLg0K PiA+ICAyKSBUb3AtdGFsa2VyIG9mIGVhY2ggdmljdGltLg0KPiA+ICMgSU1PLCBjdXJyZW50IFlB TkcgbW9kdWxlIGNhbiBleHBsYWluIDEpICwgYnV0IGNhbiBub3QgMikgd2hlbg0KPiA+IHRhcmdl dC1wcmVmaXgqIGhhcyBzZXZlcmFsIGVsZW1lbnRzLg0KPiA+DQo+ID4gSSBhdHRhY2hlZCBhIHNs aWRlIGFib3V0IHRoZSBxdWVzdGlvbi4gSSdtIGdsYWQgaWYgeW91IGFuc3dlciB0aGUgcXVlc3Rp b24uDQo+ID4NCj4gPiBUaGFua3MsDQo+ID4gWXVoZWkNCj4gPg0KPiA+IDIwMTnlubQxMOaciDE4 5pelKOmHkSkgMTg6MzggPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+Og0KPiA+ID4NCj4g PiA+IEhpIGFsbCwNCj4gPiA+DQo+ID4gPiBBbHRob3VnaCB3ZSBhcmUgd2FpdGluZyBmb3IgYSBj YWxsIGZvciBhZG9wdGlvbiBmb3IgdGhpcyBkcmFmdCwgd2UNCj4gPiA+IG1hZGUNCj4gPiBzb21l IGNoYW5nZXMgd2hpY2ggeW91IGNhbiB0cmFjayB3aXRoIHRoZSBkaWZmIHByb3ZpZGVkIGJlbG93 Lg0KPiA+ID4NCj4gPiA+IENoZWVycywNCj4gPiA+IE1lZA0KPiA+ID4NCj4gPiA+ID4gLS0tLS1N ZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPiA+IERlIDogaW50ZXJuZXQtZHJhZnRzQGlldGYu b3JnIFttYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnXQ0KPiA+ID4gPiBFbnZvecOpIDog dmVuZHJlZGkgMTggb2N0b2JyZSAyMDE5IDExOjMzIMOAIDogY2hlbm1laWxpbmc7IEJPVUNBREFJ Ug0KPiA+ID4gPiBNb2hhbWVkIFRHSS9PTE47IE1laWxpbmcgQ2hlbjsgVGlydW1hbGVzd2FyIFJl ZGR5OyBFaHVkIERvcm9uOw0KPiA+ID4gPiBSZWRkeSBLIE9iamV0IDogTmV3IFZlcnNpb24gTm90 aWZpY2F0aW9uIGZvcg0KPiA+ID4gPiBkcmFmdC1yZWRkeS1kb3RzLXRlbGVtZXRyeS0wNC50eHQN Cj4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LXJl ZGR5LWRvdHMtdGVsZW1ldHJ5LTA0LnR4dCBoYXMgYmVlbg0KPiA+ID4gPiBzdWNjZXNzZnVsbHkg c3VibWl0dGVkIGJ5IE1vaGFtZWQgQm91Y2FkYWlyIGFuZCBwb3N0ZWQgdG8gdGhlIElFVEYNCj4g PiA+ID4gcmVwb3NpdG9yeS4NCj4gPiA+ID4NCj4gPiA+ID4gTmFtZTogICAgICAgICBkcmFmdC1y ZWRkeS1kb3RzLXRlbGVtZXRyeQ0KPiA+ID4gPiBSZXZpc2lvbjogICAgIDA0DQo+ID4gPiA+IFRp dGxlOiAgICAgICAgICAgICAgICBEaXN0cmlidXRlZCBEZW5pYWwtb2YtU2VydmljZSBPcGVuIFRo cmVhdA0KPiA+IFNpZ25hbGluZyAoRE9UUykNCj4gPiA+ID4gVGVsZW1ldHJ5DQo+ID4gPiA+IERv Y3VtZW50IGRhdGU6ICAgICAgICAyMDE5LTEwLTE4DQo+ID4gPiA+IEdyb3VwOiAgICAgICAgICAg ICAgICBJbmRpdmlkdWFsIFN1Ym1pc3Npb24NCj4gPiA+ID4gUGFnZXM6ICAgICAgICAgICAgICAg IDQxDQo+ID4gPiA+IFVSTDogICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5l dC1kcmFmdHMvZHJhZnQtcmVkZHktZG90cy0NCj4gPiA+ID4gdGVsZW1ldHJ5LTA0LnR4dA0KPiA+ ID4gPiBTdGF0dXM6ICAgICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtcmVkZHktZG90cy0NCj4gPiA+ID4gdGVsZW1ldHJ5Lw0KPiA+ID4gPiBIdG1saXplZDogICAg ICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXJlZGR5LWRvdHMtdGVsZW1ldHJ5 LQ0KPiA+IDA0DQo+ID4gPiA+IEh0bWxpemVkOiAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9odG1sL2RyYWZ0LXJlZGR5LWRvdHMtDQo+ID4gPiA+IHRlbGVtZXRyeQ0KPiA+ ID4gPiBEaWZmOiAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRy YWZ0LXJlZGR5LWRvdHMtDQo+ID4gPiA+IHRlbGVtZXRyeS0wNA0KPiA+ID4gPg0KPiA+ID4gPiBB YnN0cmFjdDoNCj4gPiA+ID4gICAgVGhpcyBkb2N1bWVudCBhaW1zIHRvIGVucmljaCBET1RTIHNp Z25hbCBjaGFubmVsIHByb3RvY29sIHdpdGgNCj4gPiA+ID4gICAgdmFyaW91cyB0ZWxlbWV0cnkg YXR0cmlidXRlcyBhbGxvd2luZyBvcHRpbWFsIEREb1MgYXR0YWNrDQo+ID4gPiA+IG1pdGlnYXRp b24NCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4g RG90cyBtYWlsaW5nIGxpc3QNCj4gRG90c0BpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCg0K From nobody Wed Nov 13 14:54:02 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 979D612022E; Wed, 13 Nov 2019 14:54:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QLv0oGzetCaM; Wed, 13 Nov 2019 14:53:58 -0800 (PST) Received: from mail-lj1-x236.google.com (mail-lj1-x236.google.com [IPv6:2a00:1450:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38E0F120127; Wed, 13 Nov 2019 14:53:58 -0800 (PST) Received: by mail-lj1-x236.google.com with SMTP id v8so4458410ljh.5; Wed, 13 Nov 2019 14:53:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=/D+iArAFJgQcBiEhShTHJmcpg97Tj9vMl0nWm5wh4aU=; b=dGoOwWnZGVwLPLyaKWytw2vJnwV35MJSCd9/I7fcSXW8s1ZvW7kX+TI33HOAMOonTb +m0AH9bEkc2ucQdnmVVdK3GO8G5/QFOAZ6Ix7Dey5nlB2ENaLqumSLhOPjsnZnn8UoMI yizy8NuGZRFwu0+H/1WHJeeDFLA8NSRsO+1s551IvUM5PTZ3rdrQPNNHcS2yhxHONxC2 6HZODvJ/analeownbjHT0d/ZThwx3h6PyWHM+PnUGu5KLLBsfTefLDcuH1TqPnIAjFR/ EI9xOuPj2aQqakG8/HrIEjNgu1GCNGD/t09bl9QLxc5FwzMneu1xYpxZ8kI5B1SAjz5H Dl6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=/D+iArAFJgQcBiEhShTHJmcpg97Tj9vMl0nWm5wh4aU=; b=KsHV+2PzXTMm4jPVEOBAh/meaPwNEhWrFTFmmINL3WgqscNS+lNETp+snfKG2a40Mf y8CMDSJzn87gMoJPyKRCPTB6e6iLAikTOss7BTro8ue8rIhRngW+bNp84twcGxmcVBcD 4dr/QpSUN9Dzek6xJFGXykSsNwQ/qQMsaZLNZSGXgYwNfHG8KoMtDjV9bQgTdQ6w4kG7 2r/dmwF0BIIRBgnJrxyA25od6+lv4gtPUgNDdbE8pUvbKf05C0g6mHWGfc1c6pRwxrMy Qb0dkp6XKMtONjLm9/6MlscJILn4PC+r0UYBKQ3l+R8h7t4rLtkDIR/L1/QucAgre9nw Ei1A== X-Gm-Message-State: APjAAAXcuWhk8nOYnMLG1gONPK8cDnxg7e0c8Pew2XqlYGk28TsmDAkX mcjYl1VZXygZAGiYg5EuLE6bgVFrGftofz79jh4= X-Google-Smtp-Source: APXvYqzdJIdNoe088Z87995zD2ozDRIbO5PGb3mqtINE21A+6GRTKTxj2ViWpkJGL0BHHTRovZayhpnDsieQZlstsJw= X-Received: by 2002:a2e:888a:: with SMTP id k10mr4254261lji.195.1573685636347; Wed, 13 Nov 2019 14:53:56 -0800 (PST) MIME-Version: 1.0 References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313CD681@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: From: H Y Date: Thu, 14 Nov 2019 07:53:45 +0900 Message-ID: To: "Konda, Tirumaleswar Reddy" , "mohamed.boucadair@orange.com" Cc: "draft-reddy-dots-telemetry@ietf.org" , "dots@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 22:54:01 -0000 Hi Med, Tiru Thank you for the quick response. :-) That question of mine has been almost solved. > > The YANG module allows to return many pre-mitigations; each with a targ= et > > clause: I missed it. I understand it as below now. > > > 1) Top-talker of victims. > > > 2) Top-talker of each victim. To send 1), several target victim (target) addresses should be included in the target-prefix*. To send 2), each target victim (target) address should be included in the list of target-prefix* in each pre-mitigation, and several pre-mitigations should be included in the pre-mitigation*. Thanks, Yuhei 2019=E5=B9=B411=E6=9C=8813=E6=97=A5(=E6=B0=B4) 18:45 Konda, Tirumaleswar Re= ddy : > > In addition, the attack details can be sent by the DOTS client or the DOT= S server. The client can also choose to send the attack details per target = or aggregate top talkers for all talkers of a domain. > > -Tiru > > > -----Original Message----- > > From: Dots On Behalf Of > > mohamed.boucadair@orange.com > > Sent: Wednesday, November 13, 2019 3:10 PM > > To: H Y ; draft-reddy-dots-telemetry@ietf.org > > Cc: dots@ietf.org > > Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots- > > telemetry-04.txt > > > > CAUTION: External email. Do not click links or open attachments unless = you > > recognize the sender and know the content is safe. > > > > Hi Yuhei, > > > > A victim (target) can be identified by one or + target-prefixes. > > > > The YANG module allows to return many pre-mitigations; each with a targ= et > > clause: > > > > +--rw pre-mitigation* [telemetry-id] > > +--rw telemetry-id uint32 > > +--rw target > > ... > > +--ro attack-detail > > ... > > | > > +--ro top-talker > > > > A server can aggregate top-talkers for all targets of a domain, or when > > justified, send specific information (including top-talkers) per indivi= dual > > targets. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De : H Y [mailto:yuuhei.hayashi@gmail.com] Envoy=C3=A9 : mercredi 13 > > > novembre 2019 10:19 =C3=80 : draft-reddy-dots-telemetry@ietf.org > > > Cc : dots@ietf.org > > > Objet : Re: [Dots] TR: New Version Notification for draft-reddy-dots- > > > telemetry-04.txt > > > > > > Hi draft authors, > > > > > > Thank you for updating the draft. I have a question about YANG module > > > of current DOTS telemetry, especially about top-talker. > > > > > > I think that top-talker has several meaning in general. Which > > > top-talker can the YANG module explain? > > > 1) Top-talker of victims. > > > 2) Top-talker of each victim. > > > # IMO, current YANG module can explain 1) , but can not 2) when > > > target-prefix* has several elements. > > > > > > I attached a slide about the question. I'm glad if you answer the que= stion. > > > > > > Thanks, > > > Yuhei > > > > > > 2019=E5=B9=B410=E6=9C=8818=E6=97=A5(=E9=87=91) 18:38 : > > > > > > > > Hi all, > > > > > > > > Although we are waiting for a call for adoption for this draft, we > > > > made > > > some changes which you can track with the diff provided below. > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De : internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > > > > Envoy=C3=A9 : vendredi 18 octobre 2019 11:33 =C3=80 : chenmeiling= ; BOUCADAIR > > > > > Mohamed TGI/OLN; Meiling Chen; Tirumaleswar Reddy; Ehud Doron; > > > > > Reddy K Objet : New Version Notification for > > > > > draft-reddy-dots-telemetry-04.txt > > > > > > > > > > > > > > > A new version of I-D, draft-reddy-dots-telemetry-04.txt has been > > > > > successfully submitted by Mohamed Boucadair and posted to the IET= F > > > > > repository. > > > > > > > > > > Name: draft-reddy-dots-telemetry > > > > > Revision: 04 > > > > > Title: Distributed Denial-of-Service Open Threat > > > Signaling (DOTS) > > > > > Telemetry > > > > > Document date: 2019-10-18 > > > > > Group: Individual Submission > > > > > Pages: 41 > > > > > URL: https://www.ietf.org/internet-drafts/draft-reddy-= dots- > > > > > telemetry-04.txt > > > > > Status: https://datatracker.ietf.org/doc/draft-reddy-dots= - > > > > > telemetry/ > > > > > Htmlized: https://tools.ietf.org/html/draft-reddy-dots-tele= metry- > > > 04 > > > > > Htmlized: https://datatracker.ietf.org/doc/html/draft-reddy= -dots- > > > > > telemetry > > > > > Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-reddy-d= ots- > > > > > telemetry-04 > > > > > > > > > > Abstract: > > > > > This document aims to enrich DOTS signal channel protocol with > > > > > various telemetry attributes allowing optimal DDoS attack > > > > > mitigation > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > --=20 ---------------------------------- Yuuhei HAYASHI 08065300884 yuuhei.hayashi@gmail.com iehuuy_0220@docomo.ne.jp ---------------------------------- From nobody Thu Nov 14 02:17:26 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0486E120110 for ; Thu, 14 Nov 2019 02:17:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TgQcO8HHaeAb for ; Thu, 14 Nov 2019 02:17:22 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B98A120058 for ; Thu, 14 Nov 2019 02:17:22 -0800 (PST) Received: from opfednr05.francetelecom.fr (unknown [xx.xx.xx.69]) by opfednr24.francetelecom.fr (ESMTP service) with ESMTP id 47DHTr6MCGz1y4l; Thu, 14 Nov 2019 11:17:20 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.45]) by opfednr05.francetelecom.fr (ESMTP service) with ESMTP id 47DHTr5kNxzyQC; Thu, 14 Nov 2019 11:17:20 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM42.corporate.adroot.infra.ftgroup ([fe80::1c8e:403e:fbea:5835%21]) with mapi id 14.03.0468.000; Thu, 14 Nov 2019 11:17:20 +0100 From: To: Carsten Bormann CC: "dots@ietf.org" Thread-Topic: Improve controllability and predictability of keepalives Thread-Index: AdWZOjG0GmH8bbOEScaak/2iE6U5+QAGCIeAAAPLSJAAXGGyAA== Date: Thu, 14 Nov 2019 10:17:19 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 10:17:25 -0000 SGkgQ2Fyc3RlbiwgYWxsLCANCg0KQXMgcHJvbWlzZWQsIHdlIHVwZGF0ZWQgdGhlIGRyYWZ0IHRv IHRha2UgaW50byBhY2NvdW50IHlvdXIgaW5wdXRzLiBUaGUgY2FuZGlkYXRlIHZlcnNpb24gaXMg YXZhaWxhYmxlIGF0IChzZWUgc2VjdGlvbiA0LjcgaW4gcGFydGljdWxhcik6IA0KDQpodHRwczov L2dpdGh1Yi5jb20vYm91Y2FkYWlyL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC9ibG9i L21hc3Rlci9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMzkudHh0DQoNClRoZSBtYWlu IGNoYW5nZXMgYXJlOg0KKiBVc2UgUFVUIHRvIHNlbmQgaGVhcnRiZWF0IHJlcXVlc3RzDQoqIFVz ZSAyLjA0IGluc3RlYWQgb2YgMi4wMw0KKiBET1RTIGFnZW50cyBjYW4gbmVnb3RpYXRlIGEgcHJv YmluZy1yYXRlDQoqIFByb3ZpZGUgc29tZSBndWlkZWxpbmUgZm9yIHNldHRpbmcgdGhlIHByb2Jp bmctcmF0ZS4gDQoNCkRvIHlvdSBoYXZlIGFueSBmdXJ0aGVyIGNvbW1lbnQgb24gdGhlIG5ldyBo ZWFydGJlYXQgbWVjaGFuaXNtPyBUaGFuayB5b3UuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0t LU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNl c0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29t DQo+IEVudm95w6nCoDogbWFyZGkgMTIgbm92ZW1icmUgMjAxOSAxNzoyNA0KPiDDgMKgOiBDYXJz dGVuIEJvcm1hbm4NCj4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiBPYmpldMKgOiBSZTogW0RvdHNd IEltcHJvdmUgY29udHJvbGxhYmlsaXR5IGFuZCBwcmVkaWN0YWJpbGl0eSBvZiBrZWVwYWxpdmVz DQo+IA0KPiBSZS0sDQo+IA0KPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gDQo+IENoZWVycywNCj4g TWVkDQo+IA0KPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+IERlwqA6IENhcnN0 ZW4gQm9ybWFubiBbbWFpbHRvOmNhYm9AdHppLm9yZ10NCj4gPiBFbnZvecOpwqA6IG1hcmRpIDEy IG5vdmVtYnJlIDIwMTkgMTQ6MTINCj4gPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xO DQo+ID4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiA+IE9iamV0wqA6IFJlOiBJbXByb3ZlIGNvbnRy b2xsYWJpbGl0eSBhbmQgcHJlZGljdGFiaWxpdHkgb2Yga2VlcGFsaXZlcw0KPiA+DQo+ID4gSGkg TWVkLA0KPiA+DQo+ID4gd2hhdCB0aGUgdGV4dCBiZWxvdyBkb2VzbuKAmXQgc2F5IGlzIHdoYXQg a2luZCBvZiBpbmZvcm1hdGlvbiB5b3Ugd2FudCB0bw0KPiA+IGRlcml2ZSBmcm9tIHRoZSBoZWFy dGJlYXRzLg0KPiANCj4gW01lZF0gSG93IHRvIGludGVycHJldCBIQnMgYnkgZW5kcG9pbnRzIGlz IGRpc2N1c3NlZCBpbiBTZWN0aW9uIDQuNy4NCj4gDQo+ICBUaGUgd2F5IHRoZXkgY3VycmVudGx5 IChkcmFmdCAtMzkpIGFyZQ0KPiA+IGRlZmluZWQsIHRoZSBjbGllbnQgdXNlcyBhIEdFVCAoKiku ICBHRVQgaXMgbm90IHN1cHBvc2VkIHRvIGluZmx1ZW5jZQ0KPiA+IGFwcGxpY2F0aW9uIHN0YXRl LCBzbyB0aGUgc2VydmVyIHdpbGwgbm90IGxlYXJuIGFueXRoaW5nIGZyb20gdGhhdA0KPiA+IGhl YXJ0YmVhdC4gIElzIHRoZSBpbnRlbnRpb24gdGhhdCBvbmx5IHRoZSBjbGllbnQgbmVlZHMgdG8g cmVhY3QgdG8NCj4gPiBoZWFydGJlYXQgZmFpbHVyZXM/DQo+IA0KPiBbTWVkXSBObywgdGhlIHNl cnZlciBuZWVkcyB0byByZWFjdCB0byBoZWFydGJlYXQgZmFpbHVyZXMuIFRoZSBjYXNlcyB0aGF0 DQo+IGFyZSBkaXNjdXNzZWQgaW4gdGhlIHNwZWMgYXJlIGFzIGZvbGxvd3M6DQo+IA0KPiAqICBJ ZiB0aGUgRE9UUyBzZXJ2ZXIgcmVjZWl2ZXMgdHJhZmZpYyBmcm9tIHRoZSBwZWVyIERPVFMgY2xp ZW50IGJ1dA0KPiBtYXhpbXVtICdtaXNzaW5nLWhiLQ0KPiAgICBhbGxvd2VkJyB0aHJlc2hvbGQg aXMgcmVhY2hlZCwgdGhlIERPVFMgc2VydmVyIE1VU1QgTk9UIGNvbnNpZGVyIHRoZQ0KPiAgICBE T1RTIHNpZ25hbCBjaGFubmVsIHNlc3Npb24gZGlzY29ubmVjdGVkLiAgVGhlIERPVFMgc2VydmVy IE1VU1Qga2VlcA0KPiAgICBvbiB1c2luZyB0aGUgY3VycmVudCBET1RTIHNpZ25hbCBjaGFubmVs IHNlc3Npb24gc28gdGhhdCB0aGUgRE9UUw0KPiAgICBjbGllbnQgY2FuIHNlbmQgbWl0aWdhdGlv biByZXF1ZXN0cyBvdmVyIHRoZSBjdXJyZW50IERPVFMgc2lnbmFsDQo+ICAgIGNoYW5uZWwgc2Vz c2lvbi4gIEluIHRoaXMgY2FzZSwgdGhlIERPVFMgc2VydmVyIGNhbiBpZGVudGlmeSB0aGUgRE9U Uw0KPiAgICBjbGllbnQgaXMgdW5kZXIgYXR0YWNrIGFuZCB0aGUgaW5ib3VuZCBsaW5rIHRvIHRo ZSBET1RTIGNsaWVudA0KPiAgICAoZG9tYWluKSBpcyBzYXR1cmF0ZWQuDQo+IA0KPiAqIElmIHRo ZSBET1RTIHNlcnZlciBkb2VzIG5vdA0KPiAgICByZWNlaXZlIGEgbWl0aWdhdGlvbiByZXF1ZXN0 IGZyb20gdGhlIERPVFMgY2xpZW50LCBpdCBpbXBsaWVzIHRoZQ0KPiAgICBET1RTIGNsaWVudCBo YXMgbm90IGRldGVjdGVkIHRoZSBhdHRhY2sgb3IsIGlmIGFuIGF0dGFjayBtaXRpZ2F0aW9uDQo+ ICAgIGlzIGluIHByb2dyZXNzLCBpdCBpbXBsaWVzIHRoZSBhcHBsaWVkIEREb1MgbWl0aWdhdGlv biBhY3Rpb25zIGFyZQ0KPiAgICBub3QgeWV0IGVmZmVjdGl2ZSB0byBoYW5kbGUgdGhlIEREb1Mg YXR0YWNrIHZvbHVtZQ0KPiANCj4gKiAgSWYgdGhlIERPVFMgc2VydmVyIGRvZXMgbm90IHJlY2Vp dmUgYW55IHRyYWZmaWMgZnJvbSB0aGUgcGVlciBET1RTDQo+ICAgIGNsaWVudCBkdXJpbmcgdGhl IHRpbWUgc3BhbiByZXF1aXJlZCB0byBleGhhdXN0IHRoZSBtYXhpbXVtICdtaXNzaW5nLQ0KPiAg ICBoYi1hbGxvd2VkJyB0aHJlc2hvbGQsIHRoZSBET1RTIHNlcnZlciBjb25jbHVkZXMgdGhlIHNl c3Npb24gaXMNCj4gICAgZGlzY29ubmVjdGVkLiAgVGhlIERPVFMgc2VydmVyIGNhbiB0aGVuIHRy aWdnZXIgcHJlLWNvbmZpZ3VyZWQNCj4gICAgbWl0aWdhdGlvbiByZXF1ZXN0cyBmb3IgdGhpcyBE T1RTIGNsaWVudCAoaWYgYW55KS4NCj4gDQo+ID4NCj4gPiBSRkMgNzI1MiBkZWZpbmVzIFBST0JJ TkdfUkFURSBhcyAxIEIvcy4gIElmIHlvdSBnZXQgYSByZXNwb25zZSB3aXRoaW4gdGhlDQo+ID4g aGVhcnRiZWF0IGludGVydmFsIHRvIHRoZSBub24tY29uZmlybWFibGUgcmVxdWVzdHMsIHRoYXQg aXMgbm90IHJlbGV2YW50Lg0KPiA+IElmIHlvdSBkb27igJl0LCB5b3VyIGhlYXJ0YmVhdCBpbnRl cnZhbCAiTVVTVCBiZSBjaG9zZW4gaW4NCj4gPiAgICBzdWNoIGEgd2F5IHRoYXQgYW4gZW5kcG9p bnQgZG9lcyBub3QgZXhjZWVkIGFuIGF2ZXJhZ2UgZGF0YSByYXRlIG9mDQo+ID4gICAgUFJPQklO R19SQVRFIGluIHNlbmRpbmcgdG8gYW5vdGhlciBlbmRwb2ludCB0aGF0IGRvZXMgbm90IHJlc3Bv bmQuDQo+ID4gSWYgeW91ciBpbnRlcnZhbCBpcyBpbnRlbmRlZCB0byBiZSAxNSBzLCB0aGF0IHdv dWxkIG1lYW4geW91ciByZXF1ZXN0cw0KPiBtdXN0DQo+ID4gYmUg4omkIDE1IEIsIG9yIHlvdSBu ZWVkIHRvIGRlZmluZSBQUk9CSU5HX1JBVEUgZGlmZmVyZW50bHkgZm9yIHlvdXINCj4gPiBhcHBs aWNhdGlvbi4NCj4gPiBJdCBzZWVtcyByaWdodCBub3cgeW91IGFyZSBub3QgdHJ5aW5nIHRvIGJl IHBhcnRpY3VsYXJseSBmcnVnYWwgd2l0aCB0aGUNCj4gPiBoZWFydGJlYXQgbWVzc2FnZSwgd2hp Y2ggaXMgcHJvYmFibHkgT0sgc2luY2UgbW9zdCBvZiB5b3VyIG5ldHdvcmtzIHdpbGwNCj4gYmUN Cj4gPiBFdGhlcm5ldCBhbmQgdGhhdCB3aWxsIGV4cGFuZCB0aGUgZnJhbWUgc2l6ZSB0byA2NCBC IGFueXdheS4gIEJ1dCB0aGF0DQo+ID4gbWVhbnMgdGhhdCB5b3UgbmVlZCB0byBkZWZpbmUgUFJP QklOR19SQVRFIHRvIGJlIH4gNSBCL3MgaWYgeW91IGRvbuKAmXQNCj4gd2FudA0KPiA+IHRvIGJl IHNsb3dlZCBkb3duIGluIHByb2JpbmcuDQo+IA0KPiBbTWVkXSBHb29kIHBvaW50LiBXaWxsIHVw ZGF0ZSBhY2NvcmRpbmdseS4NCj4gDQo+ID4NCj4gPiBHcsO8w59lLCBDYXJzdGVuDQo+ID4NCj4g PiAoKikgQW5kIGV4cGVjdHMgYSAyLjAzLCB3aGljaCB3b3VsZCBtZWFuIHRoYXQgdGhlIHNlcnZl ciBjb25maXJtcyB0aGUNCj4gRVRhZw0KPiA+IGdpdmVuIGluIHRoZSByZXF1ZXN0LiAgQnV0IHRo ZXJlIGlzIG5vIEVUYWcgaW4gdGhhdCByZXF1ZXN0LCBhbmQgSSByZWFsbHkNCj4gPiBkb27igJl0 IHNlZSB3aHkgYSAyLjA1IHdpdGggYW4gZW1wdHkgcGF5bG9hZCB3b3VsZG7igJl0IGFsc28gd29y ay4gIEJ1dCBtYXliZQ0KPiA+IHlvdSB3YW50IHRvIG1vdmUgdG8gUE9TVCBhbnl3YXkgKHNvIHRo ZXJlIGNhbiBiZSBhcHBsaWNhdGlvbiBzZW1hbnRpY3MsDQo+ID4gbGlrZSB0YWtpbmcgbm90ZSBv ZiB0aGUgaGVhcnRiZWF0LCBvbiB0aGUgc2VydmVyKSwgYW5kIDIuMDQgd291bGQgZml0DQo+IHRo YXQNCj4gPiB2ZXJ5IHdlbGwgKHNlZSBSRkMgNzI1MiBTZWN0aW9uIDUuOC4yKS4NCj4gDQo+IFtN ZWRdIFdpbGwgY29uc2lkZXIgdGhlIHVzZSBvZiBQT1NUIGluc3RlYWQgb2YgR0VULg0KPiANCj4g Pg0KPiA+ID4gT24gTm92IDEyLCAyMDE5LCBhdCAxMDoxOCwgPG1vaGFtZWQuYm91Y2FkYWlyQG9y YW5nZS5jb20+DQo+ID4gPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+IHdyb3RlOg0KPiA+ ID4NCj4gPiA+IEhpIENhcnN0ZW4sDQo+ID4gPg0KPiA+ID4gWW91IGluZGljYXRlZCB0aGUgZm9s bG93aW5nIGluIGFuIG9mZmxpbmUgbWVzc2FnZSAoSeKAmW0gYWRkaW5nIGRvdHMNCj4gPiBtYWls aW5nIGxpc3QgYXMgeW91IHdlcmUgT0s7IHNlZSBiZWxvdyk6DQo+ID4gPg0KPiA+ID4gPiBJIHdv dWxkIGhhdmUgZXhwZWN0ZWQgdXNpbmcgcmVxdWVzdHMgc2VudCBpbiBub24tY29uZmlybWFibGUN Cj4gbWVzc2FnZXMsDQo+ID4gPiA+IHJlcXVpcmluZyBtb3JlIHdvcmsgb24gdGhlIGFwcGxpY2F0 aW9uIHNpZGUgKGludGVycHJldGluZyBsb3NzZXMpIGJ1dA0KPiA+IGFsc28NCj4gPiA+ID4gZGVs aXZlcmluZyBhIG1vcmUgcmVndWxhciwgcHJlZGljdGFibGUsIGxlc3Mgbm9pc3kgc2lnbmFsLg0K PiA+ID4gPiBBIGxpdHRsZSBiaXQgb2Ygc3BlY2lmaWNhdGlvbiB0ZXh0IGlzIHRoZW4gbmVlZGVk IHRvIGVuc3VyZSB0aGF0DQo+IHRob3NlDQo+ID4gPiA+IHJlcXVlc3RzL3Jlc3BvbnNlcyBtZWV0 IHRoZSByZXF1aXJlbWVudHMgb2YgUkZDIDgwODUgYW5kIHRoZSByZWxhdGVkDQo+ID4gPiA+IHNw ZWNpZmljYXRpb25zIGluIFJGQyA3MjUyLCBhbmQgdGhhdCBib3RoIHNpZGVzIGFyZSBpbiBhIGdv b2QNCj4gcG9zaXRpb24NCj4gPiB0bw0KPiA+ID4gPiBpbnRlcnByZXQgdGhlIHNpZ25hbCB0aGV5 IGdldC4NCj4gPiA+IOKApg0KPiA+ID4gPiBJZiBub3QsIEkgd291bGQgbGlrZSB0byBkaXNjdXNz IHRoZSBpc3N1ZSBvbiB0aGUgRE9UUyBtYWlsaW5nIGxpc3QsDQo+IGFuZA0KPiA+IHNlZQ0KPiA+ ID4gPiB3aGV0aGVyIGEgc21hbGwgc2V0IG9mIGNoYW5nZXMgdG8gdGhlIGtlZXBhbGl2ZSBtZWNo YW5pc21zIGVtcGxveWVkDQo+IGNhbg0KPiA+ID4gPiBpbXByb3ZlIGl0cyBjb250cm9sbGFiaWxp dHkgYW5kIHByZWRpY3RhYmlsaXR5Lg0KPiA+ID4NCj4gPiA+IEFzc3VtaW5nIHRoYXQgbm9uLWNv bmZpcm1hYmxlIGFwcGxpY2F0aW9uIEhCcyBhcmUgdXNlZCwgd2hpY2ggY2hhbmdlcw0KPiBkbw0K PiA+IHlvdSB0aGluayBhcmUgbmVlZGVkIHRvIGVuaGFuY2UgdGhlIERPVFMgbWVjaGFuaXNtIHRv IG1lZXQgODA4NS83MjUyDQo+ID4gcmVxdWlyZW1lbnRzPw0KPiA+ID4NCj4gPiA+IEFzIGEgcmVt aW5kZXIgd2UgZG8gaGF2ZSB0aGUgZm9sbG93aW5nIGZvciBzZXR0aW5nIHRoZSBoYiBwYXJhbWV0 ZXJzOg0KPiA+ID4NCj4gPiA+ID09PT09PQ0KPiA+ID4gICAgICAgTm90ZTogaGVhcnRiZWF0LWlu dGVydmFsIHNob3VsZCBiZSB0d2Vha2VkIHRvIGFsc28gYXNzaXN0IERPVFMNCj4gPiA+ICAgICAg IG1lc3NhZ2VzIGZvciBOQVQgdHJhdmVyc2FsIChTSUctMDExIG9mIFtSRkM4NjEyXSkuICBBY2Nv cmRpbmcgdG8NCj4gPiA+ICAgICAgIFtSRkM4MDg1XSwga2VlcGFsaXZlIG1lc3NhZ2VzIG11c3Qg bm90IGJlIHNlbnQgbW9yZSBmcmVxdWVudGx5DQo+ID4gPiAgICAgICB0aGFuIG9uY2UgZXZlcnkg MTUgc2Vjb25kcyBhbmQgc2hvdWxkIHVzZSBsb25nZXIgaW50ZXJ2YWxzIHdoZW4NCj4gPiA+ICAg ICAgIHBvc3NpYmxlLiAgRnVydGhlcm1vcmUsIFtSRkM0Nzg3XSByZWNvbW1lbmRzIE5BVHMgdG8g dXNlIGEgc3RhdGUNCj4gPiA+ICAgICAgIHRpbWVvdXQgb2YgMiBtaW51dGVzIG9yIGxvbmdlciwg YnV0IGV4cGVyaWVuY2Ugc2hvd3MgdGhhdCBzZW5kaW5nDQo+ID4gPiAgICAgICBwYWNrZXRzIGV2 ZXJ5IDE1IHRvIDMwIHNlY29uZHMgaXMgbmVjZXNzYXJ5IHRvIHByZXZlbnQgdGhlDQo+ID4gPiAg ICAgICBtYWpvcml0eSBvZiBtaWRkbGVib3hlcyBmcm9tIGxvc2luZyBzdGF0ZSBmb3IgVURQIGZs b3dzLiAgRnJvbQ0KPiA+ID4gICAgICAgdGhhdCBzdGFuZHBvaW50LCB0aGUgUkVDT01NRU5ERUQg bWluaW11bSBoZWFydGJlYXQtaW50ZXJ2YWwgaXMgMTUNCj4gPiA+ICAgICAgIHNlY29uZHMgYW5k IHRoZSBSRUNPTU1FTkRFRCBtYXhpbXVtIGhlYXJ0YmVhdC1pbnRlcnZhbCBpcyAyNDANCj4gPiA+ ICAgICAgIHNlY29uZHMuICBUaGUgcmVjb21tZW5kZWQgdmFsdWUgb2YgMzAgc2Vjb25kcyBpcyBz ZWxlY3RlZCB0bw0KPiA+ID4gICAgICAgYW50aWNpcGF0ZSB0aGUgZXhwaXJ5IG9mIE5BVCBzdGF0 ZS4NCj4gPiA+DQo+ID4gPiAgICAgICBBIGhlYXJ0YmVhdC1pbnRlcnZhbCBvZiAzMCBzZWNvbmRz IG1heSBiZSBjb25zaWRlcmVkIGFzIHRvbw0KPiBjaGF0dHkNCj4gPiA+ICAgICAgIGluIHNvbWUg ZGVwbG95bWVudHMuICBGb3Igc3VjaCBkZXBsb3ltZW50cywgRE9UUyBhZ2VudHMgbWF5DQo+ID4g PiAgICAgICBuZWdvdGlhdGUgbG9uZ2VyIGhlYXJ0YmVhdC1pbnRlcnZhbCB2YWx1ZXMgdG8gcHJl dmVudCBhbnkgbmV0d29yaw0KPiA+ID4gICAgICAgb3ZlcmxvYWQgd2l0aCB0b28gZnJlcXVlbnQg a2VlcGFsaXZlcy4NCj4gPiA+DQo+ID4gPiAgICAgICBEaWZmZXJlbnQgaGVhcnRiZWF0IGludGVy dmFscyBjYW4gYmUgZGVmaW5lZCBmb3IgJ21pdGlnYXRpbmctDQo+ID4gPiAgICAgICBjb25maWcn IGFuZCAnaWRsZS1jb25maWcnIHRvIHJlZHVjZSBiZWluZyB0b28gY2hhdHR5IGR1cmluZyBpZGxl DQo+ID4gPiAgICAgICB0aW1lcy4gIElmIHRoZXJlIGlzIGFuIG9uLXBhdGggdHJhbnNsYXRvciBi ZXR3ZWVuIHRoZSBET1RTIGNsaWVudA0KPiA+ID4gICAgICAgKHN0YW5kYWxvbmUgb3IgcGFydCBv ZiBhIERPVFMgZ2F0ZXdheSkgYW5kIHRoZSBET1RTIHNlcnZlciwgdGhlDQo+ID4gPiAgICAgICAn bWl0aWdhdGluZy1jb25maWcnIGhlYXJ0YmVhdC1pbnRlcnZhbCBoYXMgdG8gYmUgc21hbGxlciB0 aGFuIHRoZQ0KPiA+ID4gICAgICAgdHJhbnNsYXRvciBzZXNzaW9uIHRpbWVvdXQuICBJdCBpcyBy ZWNvbW1lbmRlZCB0aGF0IHRoZSAnaWRsZS0NCj4gPiA+ICAgICAgIGNvbmZpZycgaGVhcnRiZWF0 LWludGVydmFsIGlzIGFsc28gc21hbGxlciB0aGFuIHRoZSB0cmFuc2xhdG9yDQo+ID4gPiAgICAg ICBzZXNzaW9uIHRpbWVvdXQgdG8gcHJldmVudCB0cmFuc2xhdG9yIHRyYXZlcnNhbCBpc3N1ZXMs IG9yDQo+ID4gPiAgICAgICBkaXNhYmxlZCBlbnRpcmVseS4gIE1lYW5zIHRvIGRpc2NvdmVyIHRo ZSBsaWZldGltZSBhc3NpZ25lZCBieSBhDQo+ID4gPiAgICAgICB0cmFuc2xhdG9yIGFyZSBvdXQg b2Ygc2NvcGUuDQo+ID4gPiA9PT09PT09DQo+ID4gPg0KPiA+ID4gVGhhbmsgeW91Lg0KPiA+ID4N Cj4gPiA+IENoZWVycywNCj4gPiA+IE1lZA0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gRG90c0BpZXRm Lm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCg== From nobody Thu Nov 14 02:34:36 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07CD7120110 for ; Thu, 14 Nov 2019 02:34:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rPpSGytSpQrJ for ; Thu, 14 Nov 2019 02:34:32 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 447FE120801 for ; Thu, 14 Nov 2019 02:34:32 -0800 (PST) Received: from [10.12.17.217] (unknown [209.58.167.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 47DHsd0f05z1080; Thu, 14 Nov 2019 11:34:28 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Thu, 14 Nov 2019 18:34:25 +0800 Cc: "dots@ietf.org" X-Mao-Original-Outgoing-Id: 595420463.077805-88d303e1ea574f54b79ea089c8b41c7f Content-Transfer-Encoding: quoted-printable Message-Id: <175B5898-3A88-4237-8263-DF85D227F5C9@tzi.org> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 10:34:35 -0000 Hi Med, I have arrived in Singapore but will be quite busy till Saturday = morning. The bullet list below looks good; I=E2=80=99ll look at the details in = the updated draft then. Gr=C3=BC=C3=9Fe, Carsten > On Nov 14, 2019, at 18:17, = wrote: >=20 > Hi Carsten, all,=20 >=20 > As promised, we updated the draft to take into account your inputs. = The candidate version is available at (see section 4.7 in particular):=20= >=20 > = https://github.com/boucadair/draft-ietf-dots-signal-channel/blob/master/dr= aft-ietf-dots-signal-channel-39.txt >=20 > The main changes are: > * Use PUT to send heartbeat requests > * Use 2.04 instead of 2.03 > * DOTS agents can negotiate a probing-rate > * Provide some guideline for setting the probing-rate.=20 >=20 > Do you have any further comment on the new heartbeat mechanism? Thank = you.=20 >=20 > Cheers, > Med >=20 >> -----Message d'origine----- >> De : Dots [mailto:dots-bounces@ietf.org] De la part de >> mohamed.boucadair@orange.com >> Envoy=C3=A9 : mardi 12 novembre 2019 17:24 >> =C3=80 : Carsten Bormann >> Cc : dots@ietf.org >> Objet : Re: [Dots] Improve controllability and predictability of = keepalives >>=20 >> Re-, >>=20 >> Please see inline. >>=20 >> Cheers, >> Med >>=20 >>> -----Message d'origine----- >>> De : Carsten Bormann [mailto:cabo@tzi.org] >>> Envoy=C3=A9 : mardi 12 novembre 2019 14:12 >>> =C3=80 : BOUCADAIR Mohamed TGI/OLN >>> Cc : dots@ietf.org >>> Objet : Re: Improve controllability and predictability of keepalives >>>=20 >>> Hi Med, >>>=20 >>> what the text below doesn=E2=80=99t say is what kind of information = you want to >>> derive from the heartbeats. >>=20 >> [Med] How to interpret HBs by endpoints is discussed in Section 4.7. >>=20 >> The way they currently (draft -39) are >>> defined, the client uses a GET (*). GET is not supposed to = influence >>> application state, so the server will not learn anything from that >>> heartbeat. Is the intention that only the client needs to react to >>> heartbeat failures? >>=20 >> [Med] No, the server needs to react to heartbeat failures. The cases = that >> are discussed in the spec are as follows: >>=20 >> * If the DOTS server receives traffic from the peer DOTS client but >> maximum 'missing-hb- >> allowed' threshold is reached, the DOTS server MUST NOT consider = the >> DOTS signal channel session disconnected. The DOTS server MUST = keep >> on using the current DOTS signal channel session so that the DOTS >> client can send mitigation requests over the current DOTS signal >> channel session. In this case, the DOTS server can identify the = DOTS >> client is under attack and the inbound link to the DOTS client >> (domain) is saturated. >>=20 >> * If the DOTS server does not >> receive a mitigation request from the DOTS client, it implies the >> DOTS client has not detected the attack or, if an attack mitigation >> is in progress, it implies the applied DDoS mitigation actions are >> not yet effective to handle the DDoS attack volume >>=20 >> * If the DOTS server does not receive any traffic from the peer DOTS >> client during the time span required to exhaust the maximum = 'missing- >> hb-allowed' threshold, the DOTS server concludes the session is >> disconnected. The DOTS server can then trigger pre-configured >> mitigation requests for this DOTS client (if any). >>=20 >>>=20 >>> RFC 7252 defines PROBING_RATE as 1 B/s. If you get a response = within the >>> heartbeat interval to the non-confirmable requests, that is not = relevant. >>> If you don=E2=80=99t, your heartbeat interval "MUST be chosen in >>> such a way that an endpoint does not exceed an average data rate = of >>> PROBING_RATE in sending to another endpoint that does not respond. >>> If your interval is intended to be 15 s, that would mean your = requests >> must >>> be =E2=89=A4 15 B, or you need to define PROBING_RATE differently = for your >>> application. >>> It seems right now you are not trying to be particularly frugal with = the >>> heartbeat message, which is probably OK since most of your networks = will >> be >>> Ethernet and that will expand the frame size to 64 B anyway. But = that >>> means that you need to define PROBING_RATE to be ~ 5 B/s if you = don=E2=80=99t >> want >>> to be slowed down in probing. >>=20 >> [Med] Good point. Will update accordingly. >>=20 >>>=20 >>> Gr=C3=BC=C3=9Fe, Carsten >>>=20 >>> (*) And expects a 2.03, which would mean that the server confirms = the >> ETag >>> given in the request. But there is no ETag in that request, and I = really >>> don=E2=80=99t see why a 2.05 with an empty payload wouldn=E2=80=99t = also work. But maybe >>> you want to move to POST anyway (so there can be application = semantics, >>> like taking note of the heartbeat, on the server), and 2.04 would = fit >> that >>> very well (see RFC 7252 Section 5.8.2). >>=20 >> [Med] Will consider the use of POST instead of GET. >>=20 >>>=20 >>>> On Nov 12, 2019, at 10:18, >>> wrote: >>>>=20 >>>> Hi Carsten, >>>>=20 >>>> You indicated the following in an offline message (I=E2=80=99m = adding dots >>> mailing list as you were OK; see below): >>>>=20 >>>>> I would have expected using requests sent in non-confirmable >> messages, >>>>> requiring more work on the application side (interpreting losses) = but >>> also >>>>> delivering a more regular, predictable, less noisy signal. >>>>> A little bit of specification text is then needed to ensure that >> those >>>>> requests/responses meet the requirements of RFC 8085 and the = related >>>>> specifications in RFC 7252, and that both sides are in a good >> position >>> to >>>>> interpret the signal they get. >>>> =E2=80=A6 >>>>> If not, I would like to discuss the issue on the DOTS mailing = list, >> and >>> see >>>>> whether a small set of changes to the keepalive mechanisms = employed >> can >>>>> improve its controllability and predictability. >>>>=20 >>>> Assuming that non-confirmable application HBs are used, which = changes >> do >>> you think are needed to enhance the DOTS mechanism to meet 8085/7252 >>> requirements? >>>>=20 >>>> As a reminder we do have the following for setting the hb = parameters: >>>>=20 >>>> =3D=3D=3D=3D=3D=3D >>>> Note: heartbeat-interval should be tweaked to also assist DOTS >>>> messages for NAT traversal (SIG-011 of [RFC8612]). According = to >>>> [RFC8085], keepalive messages must not be sent more frequently >>>> than once every 15 seconds and should use longer intervals = when >>>> possible. Furthermore, [RFC4787] recommends NATs to use a = state >>>> timeout of 2 minutes or longer, but experience shows that = sending >>>> packets every 15 to 30 seconds is necessary to prevent the >>>> majority of middleboxes from losing state for UDP flows. From >>>> that standpoint, the RECOMMENDED minimum heartbeat-interval is = 15 >>>> seconds and the RECOMMENDED maximum heartbeat-interval is 240 >>>> seconds. The recommended value of 30 seconds is selected to >>>> anticipate the expiry of NAT state. >>>>=20 >>>> A heartbeat-interval of 30 seconds may be considered as too >> chatty >>>> in some deployments. For such deployments, DOTS agents may >>>> negotiate longer heartbeat-interval values to prevent any = network >>>> overload with too frequent keepalives. >>>>=20 >>>> Different heartbeat intervals can be defined for 'mitigating- >>>> config' and 'idle-config' to reduce being too chatty during = idle >>>> times. If there is an on-path translator between the DOTS = client >>>> (standalone or part of a DOTS gateway) and the DOTS server, = the >>>> 'mitigating-config' heartbeat-interval has to be smaller than = the >>>> translator session timeout. It is recommended that the 'idle- >>>> config' heartbeat-interval is also smaller than the translator >>>> session timeout to prevent translator traversal issues, or >>>> disabled entirely. Means to discover the lifetime assigned by = a >>>> translator are out of scope. >>>> =3D=3D=3D=3D=3D=3D=3D >>>>=20 >>>> Thank you. >>>>=20 >>>> Cheers, >>>> Med >>=20 >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots From nobody Fri Nov 15 18:21:37 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CED27120096 for ; Fri, 15 Nov 2019 18:21:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nttv6.jp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pxQ5dZ3cd5x6 for ; Fri, 15 Nov 2019 18:21:32 -0800 (PST) Received: from guri.nttv6.jp (guri.nttv6.jp [115.69.228.140]) by ietfa.amsl.com (Postfix) with ESMTP id B1EAA120046 for ; Fri, 15 Nov 2019 18:21:32 -0800 (PST) Received: from z.nttv6.jp (z.nttv6.jp [IPv6:2402:c800:ff06:6::f]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id C170925F6B8; Sat, 16 Nov 2019 11:21:28 +0900 (JST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nttv6.jp; s=20180820; t=1573870889; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=7J+vY/zKEA04NMB5KGKU+7lAUrv04QylpT2NJ08dkVI=; b=J5jtcGYr2KqWq08qZ+1IoRi7NZQrUIv/buYITpE6iKv0a3/FVUn2goD6wjtUlgPVw5m27+ AI2ZEjENpa6eRbI67Rc3X97PvdqlPBYbWnAy038j5xj4tktmKB8GfgNlKcIAIuPyj1HRey 9arsXQA5oq8jHVPV6LFoECnE4APHdTI= Received: from dhcp-868e.meeting.ietf.org (fujiko.nttv6.jp [IPv6:2402:c800:ff06:136::141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 49AC8759062; Sat, 16 Nov 2019 11:21:28 +0900 (JST) To: mohamed.boucadair@orange.com, "dots@ietf.org" References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: <1726faa7-f319-58a4-2940-1703587c2c3b@nttv6.jp> Date: Sat, 16 Nov 2019 11:21:27 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Authentication-Results: guri.nttv6.jp; spf=pass smtp.mailfrom=kaname@nttv6.jp Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 02:21:36 -0000 Hi Med, One quick suggestion. It would be worth to refer to [draft-ietf-dots-signal-filter-control] after this sentence https://github.com/boucadair/draft-dots-telemetry/blob/7b8d2bce108ae45d677e97143fcb985b9a9aa74b/draft-reddy-dots-telemetry-04.txt#L414-L418 like: The rate-limit action can be controlled by signal-channel [draft-ietf-dots-signal-filter-control] with more possibility than data-channel even when the pipe is overwhelmed thanks, Kaname On 2019/10/18 18:38, mohamed.boucadair@orange.com wrote: > Hi all, > > Although we are waiting for a call for adoption for this draft, we made some changes which you can track with the diff provided below. > > Cheers, > Med > >> -----Message d'origine----- >> De : internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] >> Envoyé : vendredi 18 octobre 2019 11:33 >> À : chenmeiling; BOUCADAIR Mohamed TGI/OLN; Meiling Chen; Tirumaleswar >> Reddy; Ehud Doron; Reddy K >> Objet : New Version Notification for draft-reddy-dots-telemetry-04.txt >> >> >> A new version of I-D, draft-reddy-dots-telemetry-04.txt >> has been successfully submitted by Mohamed Boucadair and posted to the >> IETF repository. >> >> Name: draft-reddy-dots-telemetry >> Revision: 04 >> Title: Distributed Denial-of-Service Open Threat Signaling (DOTS) >> Telemetry >> Document date: 2019-10-18 >> Group: Individual Submission >> Pages: 41 >> URL: https://www.ietf.org/internet-drafts/draft-reddy-dots- >> telemetry-04.txt >> Status: https://datatracker.ietf.org/doc/draft-reddy-dots- >> telemetry/ >> Htmlized: https://tools.ietf.org/html/draft-reddy-dots-telemetry-04 >> Htmlized: https://datatracker.ietf.org/doc/html/draft-reddy-dots- >> telemetry >> Diff: https://www.ietf.org/rfcdiff?url2=draft-reddy-dots- >> telemetry-04 >> >> Abstract: >> This document aims to enrich DOTS signal channel protocol with >> various telemetry attributes allowing optimal DDoS attack mitigation. >> This document specifies the normal traffic baseline and attack >> traffic telemetry attributes a DOTS client can convey to its DOTS >> server in the mitigation request, the mitigation status telemetry >> attributes a DOTS server can communicate to a DOTS client, and the >> mitigation efficacy telemetry attributes a DOTS client can >> communicate to a DOTS server. The telemetry attributes can assist >> the mitigator to choose the DDoS mitigation techniques and perform >> optimal DDoS attack mitigation. >> >> >> >> >> Please note that it may take a couple of minutes from the time of >> submission >> until the htmlized version and diff are available at tools.ietf.org. >> >> The IETF Secretariat > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Fri Nov 15 19:28:54 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 817511200A4 for ; Fri, 15 Nov 2019 19:28:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nttv6.jp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tYKOA6q_Yt49 for ; Fri, 15 Nov 2019 19:28:48 -0800 (PST) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id 164121200B1 for ; Fri, 15 Nov 2019 19:28:47 -0800 (PST) Received: from z.nttv6.jp (z.nttv6.jp [IPv6:2402:c800:ff06:6::f]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 2407C25F6B8; Sat, 16 Nov 2019 12:28:45 +0900 (JST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nttv6.jp; s=20180820; t=1573874925; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=GQXD+1OENa8lvi8gN2N6meAbETElbtaDsq9H3hNlIxE=; b=qfZgxKj3tGy2jUKCkfUSxrD2KvYun5DamhFXF/g5iqM4HSXtVNPA91Hl4zHpfOD0GMReTt L785b461Kp9VGub33UyW36Zxtc7LVfNP8YhbnTJyS4BvGKJewtH0crQq/TBR65RR9JAVAi h7yQbFSreNG9RdJDg850Bi2nDQVPupA= Received: from dhcp-868e.meeting.ietf.org (fujiko.nttv6.jp [IPv6:2402:c800:ff06:136::141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 9F6F5759062; Sat, 16 Nov 2019 12:28:44 +0900 (JST) From: kaname nishizuka To: mohamed.boucadair@orange.com, "dots@ietf.org" References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <317486f6-fbd7-2811-a58c-c5a826fb9e5e@nttv6.jp> <787AE7BB302AE849A7480A190F8B9330313445B0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135F2E7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Message-ID: <11b795d5-bb12-9f3e-b01b-9c95d36e4275@nttv6.jp> Date: Sat, 16 Nov 2019 12:28:42 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Authentication-Results: guri.nttv6.jp; spf=pass smtp.mailfrom=kaname@nttv6.jp Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 03:28:52 -0000 Hi Med, all, I've just arrived at the hackathon venue. To start with, I'd like to suggest one change to the current pre-migation spec. From yang module on page 19, in "telemetry" tree (with URI-path "telemetry"): here is the configuration part.           +--rw telemetry* [cuid tcid]              +--rw cuid                     string              +--rw cdid?                    string              +--rw tcid                     uint32              +--rw telemetry-config              |  +--rw low-percentile?    percentile              |  +--rw mid-percentile?    percentile              |  +--rw high-percentile?   percentile              |  +--rw unit-config* [unit]              |     +--rw unit      unit              |     +--rw status?   boolean Capacity things will be also a part of configuration. (it would work with tcid) However, attack-detail is *NOT* a configuration. How about separating these resources like this, URI-path "telemetry-config":     telemetry-config and capacity things URI-path "telemetry":     periodical traffic/connection metric and attack-detail (if exist) regards, Kaname On 2019/11/08 20:16, kaname nishizuka wrote: > Hi Med, > > Thanks! I'll look into and use it. > > kaname > > On 2019/11/08 16:58, mohamed.boucadair@orange.com wrote: >> Hi Kaname, >> >> Apologies for the delay to have this done. >> >> The draft notes the following: >> >>        Notes: (1) Check naming conflict to ease CBOR mapping (e.g, low- >>        percentile is defined as yang:gauge64, list, or container). >>        Distinct names may be considered. >> >> Although this is not an issue in YANG, I updated some YANG attribute names to avoid cbor naming conflicts. The updated YANG module is available at: https://github.com/boucadair/draft-dots-telemetry/blob/master/draft-reddy-dots-telemetry-04.txt >> >> Please find below the mapping table. An online version is also available at: https://github.com/boucadair/draft-dots-telemetry/blob/master/mapping-table.txt. >> >> +----------------------+-------------+------+---------------+--------+ >>     | Parameter Name       | YANG        | CBOR | CBOR Major | JSON   | >>     |                      | Type        | Key  |    Type &     | Type   | >>     |                      |             |      | Information |        | >> +----------------------+-------------+------+---------------+--------+ >>     | ietf-dots-signal-cha |             |      | |        | >>     | nnel:telemetry       | container   |0x8008| 5 map | Object | >>     | tcid                 | uint32      |0x8009| 0 unsigned | Number | >>     | telemetry-config     | container   |0x800A| 5 map | Object | >>     | low-percentile       | decimal64   |0x800B| 6 tag 4 |        | >>     |                      |             |      |  [-2, integer]| String | >>     | mid-percentile       | decimal64   |0x800C| 6 tag 4 |        | >>     |                      |             |      |  [-2, integer]| String | >>     | high-percentile      | decimal64   |0x800D| 6 tag 4 |        | >>     |                      |             |      |  [-2, integer]| String | >>     | unit-config          | list        |0x800E| 4 array | Array  | >>     | unit                 | enumeration |0x800F| 0 unsigned | String | >>     | status               | boolean     |0x8010| 7 bits 20 | False  | >>     |                      |             |      | 7 bits 21 | True   | >>     | total-pipe-capability| list        |0x8011| 4 array | Array  | >>     | pipe                 | uint64      |0x8012| 0 unsigned | String | >>     | pre-mitigation       | list        |0x8013| 4 array | Array  | >>     | telemetry-id         | uint32      |0x8014| 0 unsigned | Number | >>     | total-traffic-       |             |      | |        | >>     |    normal-baseline   | list        |0x8015| 4 array | Array  | >>     | low-percentile-g     | yang:gauge64|0x8016| 0 unsigned | String | >>     | mid-percentile-g     | yang:gauge64|0x8017| 0 unsigned | String | >>     | high-percentile-g    | yang:gauge64|0x8018| 0 unsigned | String | >>     | peak-g               | yang:gauge64|0x8019| 0 unsigned | String | >>     | total-attack-traffic | list        |0x801A| 4 array | Array  | >>     | total-traffic        | list        |0x801B| 4 array | Array  | >>     | total-connection-    |             |      | |        | >>     |        capacity      | list        |0x801C| 4 array | Array  | >>     | connection           | uint64      |0x801D| 0 unsigned | String | >>     | connection-client    | uint64      |0x801E| 0 unsigned | String | >>     | embryonic            | uint64      |0x801F| 0 unsigned | String | >>     | embryonic-client     | uint64      |0x8020| 0 unsigned | String | >>     | connection-ps        | uint64      |0x8021| 0 unsigned | String | >>     | connection-client-ps | uint64      |0x8022| 0 unsigned | String | >>     | request-ps           | uint64      |0x8023| 0 unsigned | String | >>     | request-client-ps    | uint64      |0x8024| 0 unsigned | String | >>     | partial-request-ps   | uint64      |0x8025| 0 unsigned | String | >>     | mitigation-start     | uint64      |0x8026| 0 unsigned | String | >>     | partial-request-     |             |      | |        | >>     |        client-ps     | uint64      |0x8027| 0 unsigned | String | >>     | total-attack-        |             |      | |        | >>     |        connection    | container   |0x8028| 5 map | Object | >>     | low-percentile-l     | list        |0x8029| 4 array | Array  | >>     | mid-percentile-l     | list        |0x802A| 4 array | Array  | >>     | high-percentile-l    | list        |0x802B| 4 array | Array  | >>     | peak                 | list        |0x802C| 4 array | Array  | >>     | attack-detail        | container   |0x802D| 5 map | Object | >>     | vendor-id            | uint32      |0x802E| 0 unsigned | Number | >>     | attack-id            | string      |0x802F| 3 text string | String | >>     | attack-name          | string      |0x8030| 3 text string | String | >>     | attack-severity      | enumeration |0x8031| 0 unsigned | String | >>     | start-time           | uint64      |0x8032| 0 unsigned | String | >>     | end-time             | uint64      |0x8033| 0 unsigned | String | >>     | source-count         | container   |0x8034| 5 map | Object | >>     | top-talker           | container   |0x8035| 5 map | Object | >>     | spoofed-status       | boolean     |0x8036| 7 bits 20 | False  | >>     |                      |             |      | 7 bits 21 | True   | >>     | low-percentile-c     | container   |0x8037| 5 map | Object | >>     | mid-percentile-c     | container   |0x8038| 5 map | Object | >>     | high-percentile-c    | container   |0x8039| 5 map | Object | >>     | peak-c               | container   |0x803A| 5 map | Object | >> +----------------------+-------------+------+---------------+--------+ >> >> Cheers, >> Med >> >>> -----Message d'origine----- >>> De : Dots [mailto:dots-bounces@ietf.org] De la part de >>> mohamed.boucadair@orange.com >>> Envoyé : mercredi 23 octobre 2019 13:25 >>> À : kaname nishizuka; dots@ietf.org >>> Objet : Re: [Dots] TR: New Version Notification for draft-reddy-dots- >>> telemetry-04.txt >>> >>> Hi Kaname, >>> >>> Thank you for sharing the feedback. >>> >>> We will prepare an initial version of the mapping table that we will put on >>> the github. That table will be integrated in the next iteration of the >>> draft. >>> >>> Cheers, >>> Med >>> >>>> -----Message d'origine----- >>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>> Envoyé : mercredi 23 octobre 2019 11:07 >>>> À : BOUCADAIR Mohamed TGI/OLN; dots@ietf.org >>>> Objet : Re: [Dots] TR: New Version Notification for draft-reddy-dots- >>>> telemetry-04.txt >>>> >>>> Hi Med, all, >>>> >>>> I'm planning to implement dots telemetry features into go-dots. >>>> Though it would evolve, ifan initial version of yang/cbor mapping was >>>> defined, it helps me a lot. >>>> >>>> thanks, >>>> Kaname >>>> >>>> >>>> On 2019/10/18 18:38, mohamed.boucadair@orange.com wrote: >>>>> Hi all, >>>>> >>>>> Although we are waiting for a call for adoption for this draft, we made >>>> some changes which you can track with the diff provided below. >>>>> Cheers, >>>>> Med >>>>> >>>>>> -----Message d'origine----- >>>>>> De : internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] >>>>>> Envoyé : vendredi 18 octobre 2019 11:33 >>>>>> À : chenmeiling; BOUCADAIR Mohamed TGI/OLN; Meiling Chen; Tirumaleswar >>>>>> Reddy; Ehud Doron; Reddy K >>>>>> Objet : New Version Notification for draft-reddy-dots-telemetry-04.txt >>>>>> >>>>>> >>>>>> A new version of I-D, draft-reddy-dots-telemetry-04.txt >>>>>> has been successfully submitted by Mohamed Boucadair and posted to the >>>>>> IETF repository. >>>>>> >>>>>> Name:        draft-reddy-dots-telemetry >>>>>> Revision:    04 >>>>>> Title:        Distributed Denial-of-Service Open Threat Signaling >>> (DOTS) >>>>>> Telemetry >>>>>> Document date:    2019-10-18 >>>>>> Group:        Individual Submission >>>>>> Pages:        41 >>>>>> URL: https://www.ietf.org/internet-drafts/draft-reddy-dots- >>>>>> telemetry-04.txt >>>>>> Status: https://datatracker.ietf.org/doc/draft-reddy-dots- >>>>>> telemetry/ >>>>>> Htmlized: https://tools.ietf.org/html/draft-reddy-dots- >>> telemetry- >>>> 04 >>>>>> Htmlized: https://datatracker.ietf.org/doc/html/draft-reddy- >>> dots- >>>>>> telemetry >>>>>> Diff: https://www.ietf.org/rfcdiff?url2=draft-reddy-dots- >>>>>> telemetry-04 >>>>>> >>>>>> Abstract: >>>>>>      This document aims to enrich DOTS signal channel protocol with >>>>>>      various telemetry attributes allowing optimal DDoS attack >>>> mitigation. >>>>>>      This document specifies the normal traffic baseline and attack >>>>>>      traffic telemetry attributes a DOTS client can convey to its DOTS >>>>>>      server in the mitigation request, the mitigation status telemetry >>>>>>      attributes a DOTS server can communicate to a DOTS client, and the >>>>>>      mitigation efficacy telemetry attributes a DOTS client can >>>>>>      communicate to a DOTS server.  The telemetry attributes can assist >>>>>>      the mitigator to choose the DDoS mitigation techniques and perform >>>>>>      optimal DDoS attack mitigation. >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> Please note that it may take a couple of minutes from the time of >>>>>> submission >>>>>> until the htmlized version and diff are available at tools.ietf.org. >>>>>> >>>>>> The IETF Secretariat >>>>> _______________________________________________ >>>>> Dots mailing list >>>>> Dots@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>> Dots mailing list >>> Dots@ietf.org >>> https://www.ietf.org/mailman/listinfo/dots > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Sat Nov 16 06:36:25 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 281F61201C6 for ; Sat, 16 Nov 2019 06:36:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.865 X-Spam-Level: X-Spam-Status: No, score=-0.865 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jpvXs4UKd9kq for ; Sat, 16 Nov 2019 06:34:50 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05D97120170 for ; Sat, 16 Nov 2019 06:34:34 -0800 (PST) Received: from [172.16.152.174] (unknown [101.100.166.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 47Fd5g5vZNz1013; Sat, 16 Nov 2019 15:34:31 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Sat, 16 Nov 2019 22:34:29 +0800 Cc: "dots@ietf.org" X-Mao-Original-Outgoing-Id: 595607667.376168-fc42474b70c95a2e263c1275a2a87399 Content-Transfer-Encoding: quoted-printable Message-Id: <8E353427-9380-44CF-B151-63DB0106BFCA@tzi.org> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 14:36:23 -0000 Thank you. I still have a few questions, but I think this looks very good. 4.4 says: Mitigation requests MUST NOT be delayed=09 because of other congestion control checks.=20 What might those be? (You don=E2=80=99t want to be in a situation where you send a ton of = mitigation requests that are mostly dropped at the tail of a queue.) Before Figure 27, it says: The PUT request used for DOTS heartbeat MUST NOT have a=09 'cuid', 'cdid,' or 'mid' Uri-Path. Such PUT requests MUST = NOT be=09 relayed by DOTS gateways. Why? (And what should the DOTS gateways do instead?) Gr=C3=BC=C3=9Fe, Carsten > On Nov 14, 2019, at 18:17, mohamed.boucadair@orange.com wrote: >=20 > Hi Carsten, all,=20 >=20 > As promised, we updated the draft to take into account your inputs. = The candidate version is available at (see section 4.7 in particular):=20= >=20 > = https://github.com/boucadair/draft-ietf-dots-signal-channel/blob/master/dr= aft-ietf-dots-signal-channel-39.txt >=20 > The main changes are: > * Use PUT to send heartbeat requests > * Use 2.04 instead of 2.03 > * DOTS agents can negotiate a probing-rate > * Provide some guideline for setting the probing-rate.=20 >=20 > Do you have any further comment on the new heartbeat mechanism? Thank = you.=20 >=20 > Cheers, > Med >=20 >> -----Message d'origine----- >> De : Dots [mailto:dots-bounces@ietf.org] De la part de >> mohamed.boucadair@orange.com >> Envoy=C3=A9 : mardi 12 novembre 2019 17:24 >> =C3=80 : Carsten Bormann >> Cc : dots@ietf.org >> Objet : Re: [Dots] Improve controllability and predictability of = keepalives >>=20 >> Re-, >>=20 >> Please see inline. >>=20 >> Cheers, >> Med >>=20 >>> -----Message d'origine----- >>> De : Carsten Bormann [mailto:cabo@tzi.org] >>> Envoy=C3=A9 : mardi 12 novembre 2019 14:12 >>> =C3=80 : BOUCADAIR Mohamed TGI/OLN >>> Cc : dots@ietf.org >>> Objet : Re: Improve controllability and predictability of keepalives >>>=20 >>> Hi Med, >>>=20 >>> what the text below doesn=E2=80=99t say is what kind of information = you want to >>> derive from the heartbeats. >>=20 >> [Med] How to interpret HBs by endpoints is discussed in Section 4.7. >>=20 >> The way they currently (draft -39) are >>> defined, the client uses a GET (*). GET is not supposed to = influence >>> application state, so the server will not learn anything from that >>> heartbeat. Is the intention that only the client needs to react to >>> heartbeat failures? >>=20 >> [Med] No, the server needs to react to heartbeat failures. The cases = that >> are discussed in the spec are as follows: >>=20 >> * If the DOTS server receives traffic from the peer DOTS client but >> maximum 'missing-hb- >> allowed' threshold is reached, the DOTS server MUST NOT consider = the >> DOTS signal channel session disconnected. The DOTS server MUST = keep >> on using the current DOTS signal channel session so that the DOTS >> client can send mitigation requests over the current DOTS signal >> channel session. In this case, the DOTS server can identify the = DOTS >> client is under attack and the inbound link to the DOTS client >> (domain) is saturated. >>=20 >> * If the DOTS server does not >> receive a mitigation request from the DOTS client, it implies the >> DOTS client has not detected the attack or, if an attack mitigation >> is in progress, it implies the applied DDoS mitigation actions are >> not yet effective to handle the DDoS attack volume >>=20 >> * If the DOTS server does not receive any traffic from the peer DOTS >> client during the time span required to exhaust the maximum = 'missing- >> hb-allowed' threshold, the DOTS server concludes the session is >> disconnected. The DOTS server can then trigger pre-configured >> mitigation requests for this DOTS client (if any). >>=20 >>>=20 >>> RFC 7252 defines PROBING_RATE as 1 B/s. If you get a response = within the >>> heartbeat interval to the non-confirmable requests, that is not = relevant. >>> If you don=E2=80=99t, your heartbeat interval "MUST be chosen in >>> such a way that an endpoint does not exceed an average data rate = of >>> PROBING_RATE in sending to another endpoint that does not respond. >>> If your interval is intended to be 15 s, that would mean your = requests >> must >>> be =E2=89=A4 15 B, or you need to define PROBING_RATE differently = for your >>> application. >>> It seems right now you are not trying to be particularly frugal with = the >>> heartbeat message, which is probably OK since most of your networks = will >> be >>> Ethernet and that will expand the frame size to 64 B anyway. But = that >>> means that you need to define PROBING_RATE to be ~ 5 B/s if you = don=E2=80=99t >> want >>> to be slowed down in probing. >>=20 >> [Med] Good point. Will update accordingly. >>=20 >>>=20 >>> Gr=C3=BC=C3=9Fe, Carsten >>>=20 >>> (*) And expects a 2.03, which would mean that the server confirms = the >> ETag >>> given in the request. But there is no ETag in that request, and I = really >>> don=E2=80=99t see why a 2.05 with an empty payload wouldn=E2=80=99t = also work. But maybe >>> you want to move to POST anyway (so there can be application = semantics, >>> like taking note of the heartbeat, on the server), and 2.04 would = fit >> that >>> very well (see RFC 7252 Section 5.8.2). >>=20 >> [Med] Will consider the use of POST instead of GET. >>=20 >>>=20 >>>> On Nov 12, 2019, at 10:18, >>> wrote: >>>>=20 >>>> Hi Carsten, >>>>=20 >>>> You indicated the following in an offline message (I=E2=80=99m = adding dots >>> mailing list as you were OK; see below): >>>>=20 >>>>> I would have expected using requests sent in non-confirmable >> messages, >>>>> requiring more work on the application side (interpreting losses) = but >>> also >>>>> delivering a more regular, predictable, less noisy signal. >>>>> A little bit of specification text is then needed to ensure that >> those >>>>> requests/responses meet the requirements of RFC 8085 and the = related >>>>> specifications in RFC 7252, and that both sides are in a good >> position >>> to >>>>> interpret the signal they get. >>>> =E2=80=A6 >>>>> If not, I would like to discuss the issue on the DOTS mailing = list, >> and >>> see >>>>> whether a small set of changes to the keepalive mechanisms = employed >> can >>>>> improve its controllability and predictability. >>>>=20 >>>> Assuming that non-confirmable application HBs are used, which = changes >> do >>> you think are needed to enhance the DOTS mechanism to meet 8085/7252 >>> requirements? >>>>=20 >>>> As a reminder we do have the following for setting the hb = parameters: >>>>=20 >>>> =3D=3D=3D=3D=3D=3D >>>> Note: heartbeat-interval should be tweaked to also assist DOTS >>>> messages for NAT traversal (SIG-011 of [RFC8612]). According = to >>>> [RFC8085], keepalive messages must not be sent more frequently >>>> than once every 15 seconds and should use longer intervals = when >>>> possible. Furthermore, [RFC4787] recommends NATs to use a = state >>>> timeout of 2 minutes or longer, but experience shows that = sending >>>> packets every 15 to 30 seconds is necessary to prevent the >>>> majority of middleboxes from losing state for UDP flows. From >>>> that standpoint, the RECOMMENDED minimum heartbeat-interval is = 15 >>>> seconds and the RECOMMENDED maximum heartbeat-interval is 240 >>>> seconds. The recommended value of 30 seconds is selected to >>>> anticipate the expiry of NAT state. >>>>=20 >>>> A heartbeat-interval of 30 seconds may be considered as too >> chatty >>>> in some deployments. For such deployments, DOTS agents may >>>> negotiate longer heartbeat-interval values to prevent any = network >>>> overload with too frequent keepalives. >>>>=20 >>>> Different heartbeat intervals can be defined for 'mitigating- >>>> config' and 'idle-config' to reduce being too chatty during = idle >>>> times. If there is an on-path translator between the DOTS = client >>>> (standalone or part of a DOTS gateway) and the DOTS server, = the >>>> 'mitigating-config' heartbeat-interval has to be smaller than = the >>>> translator session timeout. It is recommended that the 'idle- >>>> config' heartbeat-interval is also smaller than the translator >>>> session timeout to prevent translator traversal issues, or >>>> disabled entirely. Means to discover the lifetime assigned by = a >>>> translator are out of scope. >>>> =3D=3D=3D=3D=3D=3D=3D >>>>=20 >>>> Thank you. >>>>=20 >>>> Cheers, >>>> Med >>=20 >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots From nobody Sun Nov 17 22:36:07 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83DEB12089E for ; Sun, 17 Nov 2019 22:36:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ETdQEd1w5DjO for ; Sun, 17 Nov 2019 22:36:04 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D44631200B3 for ; Sun, 17 Nov 2019 22:36:03 -0800 (PST) Received: from opfedar00.francetelecom.fr (unknown [xx.xx.xx.11]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 47GfNf3b0fz7trt; Mon, 18 Nov 2019 07:36:02 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.54]) by opfedar00.francetelecom.fr (ESMTP service) with ESMTP id 47GfNf2jLHzCqjj; Mon, 18 Nov 2019 07:36:02 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7D.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Mon, 18 Nov 2019 07:36:02 +0100 From: To: Carsten Bormann CC: "dots@ietf.org" Thread-Topic: Improve controllability and predictability of keepalives Thread-Index: AdWZOjG0GmH8bbOEScaak/2iE6U5+QDUNU61AFL7o9A= Date: Mon, 18 Nov 2019 06:36:01 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313D89A8@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <8E353427-9380-44CF-B151-63DB0106BFCA@tzi.org> In-Reply-To: <8E353427-9380-44CF-B151-63DB0106BFCA@tzi.org> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 06:36:06 -0000 SGkgQ2Fyc3RlbiwNCg0KUGxlYXNlIHNlZSBpbmxpbmUuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAt LS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDogQ2Fyc3RlbiBCb3JtYW5uIFttYWls dG86Y2Fib0B0emkub3JnXQ0KPiBFbnZvecOpwqA6IHNhbWVkaSAxNiBub3ZlbWJyZSAyMDE5IDE1 OjM0DQo+IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE4NCj4gQ2PCoDogZG90c0BpZXRm Lm9yZw0KPiBPYmpldMKgOiBSZTogSW1wcm92ZSBjb250cm9sbGFiaWxpdHkgYW5kIHByZWRpY3Rh YmlsaXR5IG9mIGtlZXBhbGl2ZXMNCj4gDQo+IFRoYW5rIHlvdS4NCj4gSSBzdGlsbCBoYXZlIGEg ZmV3IHF1ZXN0aW9ucywgYnV0IEkgdGhpbmsgdGhpcyBsb29rcyB2ZXJ5IGdvb2QuDQo+IA0KPiA0 LjQgc2F5czoNCj4gICAgICAgICAgICBNaXRpZ2F0aW9uIHJlcXVlc3RzIE1VU1QgTk9UIGJlIGRl bGF5ZWQNCj4gIAkgICBiZWNhdXNlIG9mIG90aGVyIGNvbmdlc3Rpb24gY29udHJvbCBjaGVja3Mu DQo+IFdoYXQgbWlnaHQgdGhvc2UgYmU/DQoNCltNZWRdIEEgdG9vIGxvdyBwcm9iaW5nIHJhdGUg Zm9yIGV4YW1wbGUgYXMgaW5kaWNhdGVkIGluIHRoZSBzZW50ZW5jZSByaWdodCBhZnRlciB0aGF0 IGV4Y2VycHQuIFRoZXJlIGlzIGEgcmlzayB0aGF0IG1pdGlnYXRpb24gcmVxdWVzdHMgYXJlIGRl bGF5ZWQgKG9yIHRoYXQgaGVhcnRiZWF0cyBhcmUgbm90IHNlbnQgd2hpY2ggbWF5IGxlYWQgdG8g c2Vzc2lvbiBsaXZlbmVzcyBjaGVja3MpLiAgIA0KDQoNCj4gKFlvdSBkb27igJl0IHdhbnQgdG8g YmUgaW4gYSBzaXR1YXRpb24gd2hlcmUgeW91IHNlbmQgYSB0b24gb2YgbWl0aWdhdGlvbg0KPiBy ZXF1ZXN0cyB0aGF0IGFyZSBtb3N0bHkgZHJvcHBlZCBhdCB0aGUgdGFpbCBvZiBhIHF1ZXVlLikN Cj4gDQoNCltNZWRdIFllcywgd2UgZG9uJ3QgdGhhdC4gVGhlIGF1dGhvcml0YXRpdmUgcnVsZSBp cyBhcyBmb2xsb3dzOiANCg0KICAgUmVxdWVzdHMgbWFya2VkIGJ5IHRoZSBET1RTIGNsaWVudCBh cyBOb24tY29uZmlybWFibGUgbWVzc2FnZXMgYXJlDQogICBzZW50IGF0IHJlZ3VsYXIgaW50ZXJ2 YWxzIHVudGlsIGEgcmVzcG9uc2UgaXMgcmVjZWl2ZWQgZnJvbSB0aGUgRE9UUw0KICAgc2VydmVy LiAgSWYgdGhlIERPVFMgY2xpZW50IGNhbm5vdCBtYWludGFpbiBhbiBSVFQgZXN0aW1hdGUsIGl0 IE1VU1QNCiAgIE5PVCBzZW5kIG1vcmUgdGhhbiBvbmUgTm9uLWNvbmZpcm1hYmxlIHJlcXVlc3Qg ZXZlcnkgMyBzZWNvbmRzLCBhbmQNCiAgIFNIT1VMRCB1c2UgYW4gZXZlbiBsZXNzIGFnZ3Jlc3Np dmUgcmF0ZSB3aGVuZXZlciBwb3NzaWJsZSAoY2FzZSAyIGluDQogICBTZWN0aW9uIDMuMS4zIG9m IFtSRkM4MDg1XSkuICANCg0KDQo+IEJlZm9yZSBGaWd1cmUgMjcsIGl0IHNheXM6DQo+IA0KPiAg ICAgICAgICAgIFRoZSBQVVQgcmVxdWVzdCB1c2VkIGZvciBET1RTIGhlYXJ0YmVhdCBNVVNUIE5P VCBoYXZlIGENCj4gIAkgICAnY3VpZCcsICdjZGlkLCcgb3IgJ21pZCcgVXJpLVBhdGguICBTdWNo IFBVVCByZXF1ZXN0cyBNVVNUIE5PVCBiZQ0KPiANCj4gIAkgICByZWxheWVkIGJ5IERPVFMgZ2F0 ZXdheXMuDQo+IA0KPiBXaHk/ICAoQW5kIHdoYXQgc2hvdWxkIHRoZSBET1RTIGdhdGV3YXlzIGRv IGluc3RlYWQ/KQ0KDQpbTWVkXSBTZXNzaW9uIGxvc3MgZGV0ZWN0IGFuZCByZWNvdmVyeSBpcyBs b2NhbCB0byBhbiBhZ2VudCBhbmQgaXRzIGltbWVkaWF0ZSBwZWVyLiBIZWFydGJlYXRzIGFyZSB0 aHVzIG5vdCByZWxheWVkLiANCg0KV2UgY2FuIHVwZGF0ZSBhcyBmb2xsb3dzOiANCg0KIlRoaXMg cHJvY2VkdXJlIG9jY3VycyBiZXR3ZWVuIGEgRE9UUyBhZ2VudCBhbmQgaXRzIGltbWVkaWF0ZSBw ZWVyIERPVFMgYWdlbnQuIEFzIHN1Y2gsIHRoaXMgR0VUIHJlcXVlc3QgTVVTVCBOT1QgYmUgcmVs YXllZCBieSBhIERPVFMgZ2F0ZXdheS4gVGhlIFBVVCByZXF1ZXN0IHVzZWQgZm9yIERPVFMgaGVh cnRiZWF0IE1VU1QgTk9UIGhhdmUgYSAnY3VpZCcsICdjZGlkLCcgb3IgJ21pZCcgVXJpLVBhdGgu Ig0KDQo+IA0KPiBHcsO8w59lLCBDYXJzdGVuDQo+IA0KPiANCj4gPiBPbiBOb3YgMTQsIDIwMTks IGF0IDE4OjE3LCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0KPiA+DQo+ID4g SGkgQ2Fyc3RlbiwgYWxsLA0KPiA+DQo+ID4gQXMgcHJvbWlzZWQsIHdlIHVwZGF0ZWQgdGhlIGRy YWZ0IHRvIHRha2UgaW50byBhY2NvdW50IHlvdXIgaW5wdXRzLiBUaGUNCj4gY2FuZGlkYXRlIHZl cnNpb24gaXMgYXZhaWxhYmxlIGF0IChzZWUgc2VjdGlvbiA0LjcgaW4gcGFydGljdWxhcik6DQo+ ID4NCj4gPiBodHRwczovL2dpdGh1Yi5jb20vYm91Y2FkYWlyL2RyYWZ0LWlldGYtZG90cy1zaWdu YWwtDQo+IGNoYW5uZWwvYmxvYi9tYXN0ZXIvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVs LTM5LnR4dA0KPiA+DQo+ID4gVGhlIG1haW4gY2hhbmdlcyBhcmU6DQo+ID4gKiBVc2UgUFVUIHRv IHNlbmQgaGVhcnRiZWF0IHJlcXVlc3RzDQo+ID4gKiBVc2UgMi4wNCBpbnN0ZWFkIG9mIDIuMDMN Cj4gPiAqIERPVFMgYWdlbnRzIGNhbiBuZWdvdGlhdGUgYSBwcm9iaW5nLXJhdGUNCj4gPiAqIFBy b3ZpZGUgc29tZSBndWlkZWxpbmUgZm9yIHNldHRpbmcgdGhlIHByb2JpbmctcmF0ZS4NCj4gPg0K PiA+IERvIHlvdSBoYXZlIGFueSBmdXJ0aGVyIGNvbW1lbnQgb24gdGhlIG5ldyBoZWFydGJlYXQg bWVjaGFuaXNtPyBUaGFuaw0KPiB5b3UuDQo+ID4NCj4gPiBDaGVlcnMsDQo+ID4gTWVkDQo+ID4N Cj4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4+IERlIDogRG90cyBbbWFpbHRv OmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0KPiA+PiBtb2hhbWVkLmJvdWNh ZGFpckBvcmFuZ2UuY29tDQo+ID4+IEVudm95w6kgOiBtYXJkaSAxMiBub3ZlbWJyZSAyMDE5IDE3 OjI0DQo+ID4+IMOAIDogQ2Fyc3RlbiBCb3JtYW5uDQo+ID4+IENjIDogZG90c0BpZXRmLm9yZw0K PiA+PiBPYmpldCA6IFJlOiBbRG90c10gSW1wcm92ZSBjb250cm9sbGFiaWxpdHkgYW5kIHByZWRp Y3RhYmlsaXR5IG9mDQo+IGtlZXBhbGl2ZXMNCj4gPj4NCj4gPj4gUmUtLA0KPiA+Pg0KPiA+PiBQ bGVhc2Ugc2VlIGlubGluZS4NCj4gPj4NCj4gPj4gQ2hlZXJzLA0KPiA+PiBNZWQNCj4gPj4NCj4g Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4gRGUgOiBDYXJzdGVuIEJvcm1h bm4gW21haWx0bzpjYWJvQHR6aS5vcmddDQo+ID4+PiBFbnZvecOpIDogbWFyZGkgMTIgbm92ZW1i cmUgMjAxOSAxNDoxMg0KPiA+Pj4gw4AgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xODQo+ID4+ PiBDYyA6IGRvdHNAaWV0Zi5vcmcNCj4gPj4+IE9iamV0IDogUmU6IEltcHJvdmUgY29udHJvbGxh YmlsaXR5IGFuZCBwcmVkaWN0YWJpbGl0eSBvZiBrZWVwYWxpdmVzDQo+ID4+Pg0KPiA+Pj4gSGkg TWVkLA0KPiA+Pj4NCj4gPj4+IHdoYXQgdGhlIHRleHQgYmVsb3cgZG9lc27igJl0IHNheSBpcyB3 aGF0IGtpbmQgb2YgaW5mb3JtYXRpb24geW91IHdhbnQgdG8NCj4gPj4+IGRlcml2ZSBmcm9tIHRo ZSBoZWFydGJlYXRzLg0KPiA+Pg0KPiA+PiBbTWVkXSBIb3cgdG8gaW50ZXJwcmV0IEhCcyBieSBl bmRwb2ludHMgaXMgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNC43Lg0KPiA+Pg0KPiA+PiBUaGUgd2F5 IHRoZXkgY3VycmVudGx5IChkcmFmdCAtMzkpIGFyZQ0KPiA+Pj4gZGVmaW5lZCwgdGhlIGNsaWVu dCB1c2VzIGEgR0VUICgqKS4gIEdFVCBpcyBub3Qgc3VwcG9zZWQgdG8gaW5mbHVlbmNlDQo+ID4+ PiBhcHBsaWNhdGlvbiBzdGF0ZSwgc28gdGhlIHNlcnZlciB3aWxsIG5vdCBsZWFybiBhbnl0aGlu ZyBmcm9tIHRoYXQNCj4gPj4+IGhlYXJ0YmVhdC4gIElzIHRoZSBpbnRlbnRpb24gdGhhdCBvbmx5 IHRoZSBjbGllbnQgbmVlZHMgdG8gcmVhY3QgdG8NCj4gPj4+IGhlYXJ0YmVhdCBmYWlsdXJlcz8N Cj4gPj4NCj4gPj4gW01lZF0gTm8sIHRoZSBzZXJ2ZXIgbmVlZHMgdG8gcmVhY3QgdG8gaGVhcnRi ZWF0IGZhaWx1cmVzLiBUaGUgY2FzZXMNCj4gdGhhdA0KPiA+PiBhcmUgZGlzY3Vzc2VkIGluIHRo ZSBzcGVjIGFyZSBhcyBmb2xsb3dzOg0KPiA+Pg0KPiA+PiAqICBJZiB0aGUgRE9UUyBzZXJ2ZXIg cmVjZWl2ZXMgdHJhZmZpYyBmcm9tIHRoZSBwZWVyIERPVFMgY2xpZW50IGJ1dA0KPiA+PiBtYXhp bXVtICdtaXNzaW5nLWhiLQ0KPiA+PiAgIGFsbG93ZWQnIHRocmVzaG9sZCBpcyByZWFjaGVkLCB0 aGUgRE9UUyBzZXJ2ZXIgTVVTVCBOT1QgY29uc2lkZXIgdGhlDQo+ID4+ICAgRE9UUyBzaWduYWwg Y2hhbm5lbCBzZXNzaW9uIGRpc2Nvbm5lY3RlZC4gIFRoZSBET1RTIHNlcnZlciBNVVNUIGtlZXAN Cj4gPj4gICBvbiB1c2luZyB0aGUgY3VycmVudCBET1RTIHNpZ25hbCBjaGFubmVsIHNlc3Npb24g c28gdGhhdCB0aGUgRE9UUw0KPiA+PiAgIGNsaWVudCBjYW4gc2VuZCBtaXRpZ2F0aW9uIHJlcXVl c3RzIG92ZXIgdGhlIGN1cnJlbnQgRE9UUyBzaWduYWwNCj4gPj4gICBjaGFubmVsIHNlc3Npb24u ICBJbiB0aGlzIGNhc2UsIHRoZSBET1RTIHNlcnZlciBjYW4gaWRlbnRpZnkgdGhlIERPVFMNCj4g Pj4gICBjbGllbnQgaXMgdW5kZXIgYXR0YWNrIGFuZCB0aGUgaW5ib3VuZCBsaW5rIHRvIHRoZSBE T1RTIGNsaWVudA0KPiA+PiAgIChkb21haW4pIGlzIHNhdHVyYXRlZC4NCj4gPj4NCj4gPj4gKiBJ ZiB0aGUgRE9UUyBzZXJ2ZXIgZG9lcyBub3QNCj4gPj4gICByZWNlaXZlIGEgbWl0aWdhdGlvbiBy ZXF1ZXN0IGZyb20gdGhlIERPVFMgY2xpZW50LCBpdCBpbXBsaWVzIHRoZQ0KPiA+PiAgIERPVFMg Y2xpZW50IGhhcyBub3QgZGV0ZWN0ZWQgdGhlIGF0dGFjayBvciwgaWYgYW4gYXR0YWNrIG1pdGln YXRpb24NCj4gPj4gICBpcyBpbiBwcm9ncmVzcywgaXQgaW1wbGllcyB0aGUgYXBwbGllZCBERG9T IG1pdGlnYXRpb24gYWN0aW9ucyBhcmUNCj4gPj4gICBub3QgeWV0IGVmZmVjdGl2ZSB0byBoYW5k bGUgdGhlIEREb1MgYXR0YWNrIHZvbHVtZQ0KPiA+Pg0KPiA+PiAqICBJZiB0aGUgRE9UUyBzZXJ2 ZXIgZG9lcyBub3QgcmVjZWl2ZSBhbnkgdHJhZmZpYyBmcm9tIHRoZSBwZWVyIERPVFMNCj4gPj4g ICBjbGllbnQgZHVyaW5nIHRoZSB0aW1lIHNwYW4gcmVxdWlyZWQgdG8gZXhoYXVzdCB0aGUgbWF4 aW11bSAnbWlzc2luZy0NCj4gPj4gICBoYi1hbGxvd2VkJyB0aHJlc2hvbGQsIHRoZSBET1RTIHNl cnZlciBjb25jbHVkZXMgdGhlIHNlc3Npb24gaXMNCj4gPj4gICBkaXNjb25uZWN0ZWQuICBUaGUg RE9UUyBzZXJ2ZXIgY2FuIHRoZW4gdHJpZ2dlciBwcmUtY29uZmlndXJlZA0KPiA+PiAgIG1pdGln YXRpb24gcmVxdWVzdHMgZm9yIHRoaXMgRE9UUyBjbGllbnQgKGlmIGFueSkuDQo+ID4+DQo+ID4+ Pg0KPiA+Pj4gUkZDIDcyNTIgZGVmaW5lcyBQUk9CSU5HX1JBVEUgYXMgMSBCL3MuICBJZiB5b3Ug Z2V0IGEgcmVzcG9uc2Ugd2l0aGluDQo+IHRoZQ0KPiA+Pj4gaGVhcnRiZWF0IGludGVydmFsIHRv IHRoZSBub24tY29uZmlybWFibGUgcmVxdWVzdHMsIHRoYXQgaXMgbm90DQo+IHJlbGV2YW50Lg0K PiA+Pj4gSWYgeW91IGRvbuKAmXQsIHlvdXIgaGVhcnRiZWF0IGludGVydmFsICJNVVNUIGJlIGNo b3NlbiBpbg0KPiA+Pj4gICBzdWNoIGEgd2F5IHRoYXQgYW4gZW5kcG9pbnQgZG9lcyBub3QgZXhj ZWVkIGFuIGF2ZXJhZ2UgZGF0YSByYXRlIG9mDQo+ID4+PiAgIFBST0JJTkdfUkFURSBpbiBzZW5k aW5nIHRvIGFub3RoZXIgZW5kcG9pbnQgdGhhdCBkb2VzIG5vdCByZXNwb25kLg0KPiA+Pj4gSWYg eW91ciBpbnRlcnZhbCBpcyBpbnRlbmRlZCB0byBiZSAxNSBzLCB0aGF0IHdvdWxkIG1lYW4geW91 ciByZXF1ZXN0cw0KPiA+PiBtdXN0DQo+ID4+PiBiZSDiiaQgMTUgQiwgb3IgeW91IG5lZWQgdG8g ZGVmaW5lIFBST0JJTkdfUkFURSBkaWZmZXJlbnRseSBmb3IgeW91cg0KPiA+Pj4gYXBwbGljYXRp b24uDQo+ID4+PiBJdCBzZWVtcyByaWdodCBub3cgeW91IGFyZSBub3QgdHJ5aW5nIHRvIGJlIHBh cnRpY3VsYXJseSBmcnVnYWwgd2l0aA0KPiB0aGUNCj4gPj4+IGhlYXJ0YmVhdCBtZXNzYWdlLCB3 aGljaCBpcyBwcm9iYWJseSBPSyBzaW5jZSBtb3N0IG9mIHlvdXIgbmV0d29ya3MNCj4gd2lsbA0K PiA+PiBiZQ0KPiA+Pj4gRXRoZXJuZXQgYW5kIHRoYXQgd2lsbCBleHBhbmQgdGhlIGZyYW1lIHNp emUgdG8gNjQgQiBhbnl3YXkuICBCdXQgdGhhdA0KPiA+Pj4gbWVhbnMgdGhhdCB5b3UgbmVlZCB0 byBkZWZpbmUgUFJPQklOR19SQVRFIHRvIGJlIH4gNSBCL3MgaWYgeW91IGRvbuKAmXQNCj4gPj4g d2FudA0KPiA+Pj4gdG8gYmUgc2xvd2VkIGRvd24gaW4gcHJvYmluZy4NCj4gPj4NCj4gPj4gW01l ZF0gR29vZCBwb2ludC4gV2lsbCB1cGRhdGUgYWNjb3JkaW5nbHkuDQo+ID4+DQo+ID4+Pg0KPiA+ Pj4gR3LDvMOfZSwgQ2Fyc3Rlbg0KPiA+Pj4NCj4gPj4+ICgqKSBBbmQgZXhwZWN0cyBhIDIuMDMs IHdoaWNoIHdvdWxkIG1lYW4gdGhhdCB0aGUgc2VydmVyIGNvbmZpcm1zIHRoZQ0KPiA+PiBFVGFn DQo+ID4+PiBnaXZlbiBpbiB0aGUgcmVxdWVzdC4gIEJ1dCB0aGVyZSBpcyBubyBFVGFnIGluIHRo YXQgcmVxdWVzdCwgYW5kIEkNCj4gcmVhbGx5DQo+ID4+PiBkb27igJl0IHNlZSB3aHkgYSAyLjA1 IHdpdGggYW4gZW1wdHkgcGF5bG9hZCB3b3VsZG7igJl0IGFsc28gd29yay4gIEJ1dA0KPiBtYXli ZQ0KPiA+Pj4geW91IHdhbnQgdG8gbW92ZSB0byBQT1NUIGFueXdheSAoc28gdGhlcmUgY2FuIGJl IGFwcGxpY2F0aW9uIHNlbWFudGljcywNCj4gPj4+IGxpa2UgdGFraW5nIG5vdGUgb2YgdGhlIGhl YXJ0YmVhdCwgb24gdGhlIHNlcnZlciksIGFuZCAyLjA0IHdvdWxkIGZpdA0KPiA+PiB0aGF0DQo+ ID4+PiB2ZXJ5IHdlbGwgKHNlZSBSRkMgNzI1MiBTZWN0aW9uIDUuOC4yKS4NCj4gPj4NCj4gPj4g W01lZF0gV2lsbCBjb25zaWRlciB0aGUgdXNlIG9mIFBPU1QgaW5zdGVhZCBvZiBHRVQuDQo+ID4+ DQo+ID4+Pg0KPiA+Pj4+IE9uIE5vdiAxMiwgMjAxOSwgYXQgMTA6MTgsIDxtb2hhbWVkLmJvdWNh ZGFpckBvcmFuZ2UuY29tPg0KPiA+Pj4gPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+IHdy b3RlOg0KPiA+Pj4+DQo+ID4+Pj4gSGkgQ2Fyc3RlbiwNCj4gPj4+Pg0KPiA+Pj4+IFlvdSBpbmRp Y2F0ZWQgdGhlIGZvbGxvd2luZyBpbiBhbiBvZmZsaW5lIG1lc3NhZ2UgKEnigJltIGFkZGluZyBk b3RzDQo+ID4+PiBtYWlsaW5nIGxpc3QgYXMgeW91IHdlcmUgT0s7IHNlZSBiZWxvdyk6DQo+ID4+ Pj4NCj4gPj4+Pj4gSSB3b3VsZCBoYXZlIGV4cGVjdGVkIHVzaW5nIHJlcXVlc3RzIHNlbnQgaW4g bm9uLWNvbmZpcm1hYmxlDQo+ID4+IG1lc3NhZ2VzLA0KPiA+Pj4+PiByZXF1aXJpbmcgbW9yZSB3 b3JrIG9uIHRoZSBhcHBsaWNhdGlvbiBzaWRlIChpbnRlcnByZXRpbmcgbG9zc2VzKSBidXQNCj4g Pj4+IGFsc28NCj4gPj4+Pj4gZGVsaXZlcmluZyBhIG1vcmUgcmVndWxhciwgcHJlZGljdGFibGUs IGxlc3Mgbm9pc3kgc2lnbmFsLg0KPiA+Pj4+PiBBIGxpdHRsZSBiaXQgb2Ygc3BlY2lmaWNhdGlv biB0ZXh0IGlzIHRoZW4gbmVlZGVkIHRvIGVuc3VyZSB0aGF0DQo+ID4+IHRob3NlDQo+ID4+Pj4+ IHJlcXVlc3RzL3Jlc3BvbnNlcyBtZWV0IHRoZSByZXF1aXJlbWVudHMgb2YgUkZDIDgwODUgYW5k IHRoZSByZWxhdGVkDQo+ID4+Pj4+IHNwZWNpZmljYXRpb25zIGluIFJGQyA3MjUyLCBhbmQgdGhh dCBib3RoIHNpZGVzIGFyZSBpbiBhIGdvb2QNCj4gPj4gcG9zaXRpb24NCj4gPj4+IHRvDQo+ID4+ Pj4+IGludGVycHJldCB0aGUgc2lnbmFsIHRoZXkgZ2V0Lg0KPiA+Pj4+IOKApg0KPiA+Pj4+PiBJ ZiBub3QsIEkgd291bGQgbGlrZSB0byBkaXNjdXNzIHRoZSBpc3N1ZSBvbiB0aGUgRE9UUyBtYWls aW5nIGxpc3QsDQo+ID4+IGFuZA0KPiA+Pj4gc2VlDQo+ID4+Pj4+IHdoZXRoZXIgYSBzbWFsbCBz ZXQgb2YgY2hhbmdlcyB0byB0aGUga2VlcGFsaXZlIG1lY2hhbmlzbXMgZW1wbG95ZWQNCj4gPj4g Y2FuDQo+ID4+Pj4+IGltcHJvdmUgaXRzIGNvbnRyb2xsYWJpbGl0eSBhbmQgcHJlZGljdGFiaWxp dHkuDQo+ID4+Pj4NCj4gPj4+PiBBc3N1bWluZyB0aGF0IG5vbi1jb25maXJtYWJsZSBhcHBsaWNh dGlvbiBIQnMgYXJlIHVzZWQsIHdoaWNoIGNoYW5nZXMNCj4gPj4gZG8NCj4gPj4+IHlvdSB0aGlu ayBhcmUgbmVlZGVkIHRvIGVuaGFuY2UgdGhlIERPVFMgbWVjaGFuaXNtIHRvIG1lZXQgODA4NS83 MjUyDQo+ID4+PiByZXF1aXJlbWVudHM/DQo+ID4+Pj4NCj4gPj4+PiBBcyBhIHJlbWluZGVyIHdl IGRvIGhhdmUgdGhlIGZvbGxvd2luZyBmb3Igc2V0dGluZyB0aGUgaGIgcGFyYW1ldGVyczoNCj4g Pj4+Pg0KPiA+Pj4+ID09PT09PQ0KPiA+Pj4+ICAgICAgTm90ZTogaGVhcnRiZWF0LWludGVydmFs IHNob3VsZCBiZSB0d2Vha2VkIHRvIGFsc28gYXNzaXN0IERPVFMNCj4gPj4+PiAgICAgIG1lc3Nh Z2VzIGZvciBOQVQgdHJhdmVyc2FsIChTSUctMDExIG9mIFtSRkM4NjEyXSkuICBBY2NvcmRpbmcg dG8NCj4gPj4+PiAgICAgIFtSRkM4MDg1XSwga2VlcGFsaXZlIG1lc3NhZ2VzIG11c3Qgbm90IGJl IHNlbnQgbW9yZSBmcmVxdWVudGx5DQo+ID4+Pj4gICAgICB0aGFuIG9uY2UgZXZlcnkgMTUgc2Vj b25kcyBhbmQgc2hvdWxkIHVzZSBsb25nZXIgaW50ZXJ2YWxzIHdoZW4NCj4gPj4+PiAgICAgIHBv c3NpYmxlLiAgRnVydGhlcm1vcmUsIFtSRkM0Nzg3XSByZWNvbW1lbmRzIE5BVHMgdG8gdXNlIGEg c3RhdGUNCj4gPj4+PiAgICAgIHRpbWVvdXQgb2YgMiBtaW51dGVzIG9yIGxvbmdlciwgYnV0IGV4 cGVyaWVuY2Ugc2hvd3MgdGhhdCBzZW5kaW5nDQo+ID4+Pj4gICAgICBwYWNrZXRzIGV2ZXJ5IDE1 IHRvIDMwIHNlY29uZHMgaXMgbmVjZXNzYXJ5IHRvIHByZXZlbnQgdGhlDQo+ID4+Pj4gICAgICBt YWpvcml0eSBvZiBtaWRkbGVib3hlcyBmcm9tIGxvc2luZyBzdGF0ZSBmb3IgVURQIGZsb3dzLiAg RnJvbQ0KPiA+Pj4+ICAgICAgdGhhdCBzdGFuZHBvaW50LCB0aGUgUkVDT01NRU5ERUQgbWluaW11 bSBoZWFydGJlYXQtaW50ZXJ2YWwgaXMgMTUNCj4gPj4+PiAgICAgIHNlY29uZHMgYW5kIHRoZSBS RUNPTU1FTkRFRCBtYXhpbXVtIGhlYXJ0YmVhdC1pbnRlcnZhbCBpcyAyNDANCj4gPj4+PiAgICAg IHNlY29uZHMuICBUaGUgcmVjb21tZW5kZWQgdmFsdWUgb2YgMzAgc2Vjb25kcyBpcyBzZWxlY3Rl ZCB0bw0KPiA+Pj4+ICAgICAgYW50aWNpcGF0ZSB0aGUgZXhwaXJ5IG9mIE5BVCBzdGF0ZS4NCj4g Pj4+Pg0KPiA+Pj4+ICAgICAgQSBoZWFydGJlYXQtaW50ZXJ2YWwgb2YgMzAgc2Vjb25kcyBtYXkg YmUgY29uc2lkZXJlZCBhcyB0b28NCj4gPj4gY2hhdHR5DQo+ID4+Pj4gICAgICBpbiBzb21lIGRl cGxveW1lbnRzLiAgRm9yIHN1Y2ggZGVwbG95bWVudHMsIERPVFMgYWdlbnRzIG1heQ0KPiA+Pj4+ ICAgICAgbmVnb3RpYXRlIGxvbmdlciBoZWFydGJlYXQtaW50ZXJ2YWwgdmFsdWVzIHRvIHByZXZl bnQgYW55IG5ldHdvcmsNCj4gPj4+PiAgICAgIG92ZXJsb2FkIHdpdGggdG9vIGZyZXF1ZW50IGtl ZXBhbGl2ZXMuDQo+ID4+Pj4NCj4gPj4+PiAgICAgIERpZmZlcmVudCBoZWFydGJlYXQgaW50ZXJ2 YWxzIGNhbiBiZSBkZWZpbmVkIGZvciAnbWl0aWdhdGluZy0NCj4gPj4+PiAgICAgIGNvbmZpZycg YW5kICdpZGxlLWNvbmZpZycgdG8gcmVkdWNlIGJlaW5nIHRvbyBjaGF0dHkgZHVyaW5nIGlkbGUN Cj4gPj4+PiAgICAgIHRpbWVzLiAgSWYgdGhlcmUgaXMgYW4gb24tcGF0aCB0cmFuc2xhdG9yIGJl dHdlZW4gdGhlIERPVFMgY2xpZW50DQo+ID4+Pj4gICAgICAoc3RhbmRhbG9uZSBvciBwYXJ0IG9m IGEgRE9UUyBnYXRld2F5KSBhbmQgdGhlIERPVFMgc2VydmVyLCB0aGUNCj4gPj4+PiAgICAgICdt aXRpZ2F0aW5nLWNvbmZpZycgaGVhcnRiZWF0LWludGVydmFsIGhhcyB0byBiZSBzbWFsbGVyIHRo YW4gdGhlDQo+ID4+Pj4gICAgICB0cmFuc2xhdG9yIHNlc3Npb24gdGltZW91dC4gIEl0IGlzIHJl Y29tbWVuZGVkIHRoYXQgdGhlICdpZGxlLQ0KPiA+Pj4+ICAgICAgY29uZmlnJyBoZWFydGJlYXQt aW50ZXJ2YWwgaXMgYWxzbyBzbWFsbGVyIHRoYW4gdGhlIHRyYW5zbGF0b3INCj4gPj4+PiAgICAg IHNlc3Npb24gdGltZW91dCB0byBwcmV2ZW50IHRyYW5zbGF0b3IgdHJhdmVyc2FsIGlzc3Vlcywg b3INCj4gPj4+PiAgICAgIGRpc2FibGVkIGVudGlyZWx5LiAgTWVhbnMgdG8gZGlzY292ZXIgdGhl IGxpZmV0aW1lIGFzc2lnbmVkIGJ5IGENCj4gPj4+PiAgICAgIHRyYW5zbGF0b3IgYXJlIG91dCBv ZiBzY29wZS4NCj4gPj4+PiA9PT09PT09DQo+ID4+Pj4NCj4gPj4+PiBUaGFuayB5b3UuDQo+ID4+ Pj4NCj4gPj4+PiBDaGVlcnMsDQo+ID4+Pj4gTWVkDQo+ID4+DQo+ID4+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4+IERvdHNAaWV0Zi5vcmcNCj4gPj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9kb3RzDQoNCg== From nobody Sun Nov 17 22:49:04 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9527712089E for ; Sun, 17 Nov 2019 22:49:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YB5Lr6GYfBmV for ; Sun, 17 Nov 2019 22:49:01 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B555A1200B3 for ; Sun, 17 Nov 2019 22:49:00 -0800 (PST) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 47Gfgb1g4Lz7tLP; Mon, 18 Nov 2019 07:48:59 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.26]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 47Gfgb0qwGzCqkN; Mon, 18 Nov 2019 07:48:59 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM31.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Mon, 18 Nov 2019 07:48:59 +0100 From: To: kaname nishizuka , "dots@ietf.org" Thread-Topic: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt Thread-Index: AQHVhZcTqLIZd9IRTUy9z3OirX19/adgIwpAgC0KHYCAA390IA== Date: Mon, 18 Nov 2019 06:48:58 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313D89E1@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1726faa7-f319-58a4-2940-1703587c2c3b@nttv6.jp> In-Reply-To: <1726faa7-f319-58a4-2940-1703587c2c3b@nttv6.jp> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 06:49:02 -0000 SGkgS2FuYW1lLCANCg0KWWVzLiBJZiB3ZSBhc3N1bWUgdGhhdCBhIGZpbHRlciBleGlzdHMsIGl0 IGNhbiBiZSBjb250cm9sbGVkIHZpYSB0aGUgc2lnbmFsIGNoYW5uZWwuIA0KDQpXaWxsIHVwZGF0 ZSBhY2NvcmRpbmdseS4gVGhhbmsgeW91Lg0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3Nh Z2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFt ZUBudHR2Ni5qcF0NCj4gRW52b3nDqcKgOiBzYW1lZGkgMTYgbm92ZW1icmUgMjAxOSAwMzoyMQ0K PiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xOOyBkb3RzQGlldGYub3JnDQo+IE9iamV0 wqA6IFJlOiBbRG90c10gVFI6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtcmVk ZHktZG90cy0NCj4gdGVsZW1ldHJ5LTA0LnR4dA0KPiANCj4gSGkgTWVkLA0KPiANCj4gT25lIHF1 aWNrIHN1Z2dlc3Rpb24uDQo+IA0KPiBJdCB3b3VsZCBiZSB3b3J0aCB0byByZWZlciB0byBbZHJh ZnQtaWV0Zi1kb3RzLXNpZ25hbC1maWx0ZXItY29udHJvbF0gYWZ0ZXINCj4gdGhpcyBzZW50ZW5j ZQ0KPiBodHRwczovL2dpdGh1Yi5jb20vYm91Y2FkYWlyL2RyYWZ0LWRvdHMtDQo+IHRlbGVtZXRy eS9ibG9iLzdiOGQyYmNlMTA4YWU0NWQ2NzdlOTcxNDNmY2I5ODViOWE5YWE3NGIvZHJhZnQtcmVk ZHktZG90cy0NCj4gdGVsZW1ldHJ5LTA0LnR4dCNMNDE0LUw0MTgNCj4gDQo+IGxpa2U6DQo+IFRo ZSByYXRlLWxpbWl0IGFjdGlvbiBjYW4gYmUgY29udHJvbGxlZCBieSBzaWduYWwtY2hhbm5lbCBb ZHJhZnQtaWV0Zi1kb3RzLQ0KPiBzaWduYWwtZmlsdGVyLWNvbnRyb2xdIHdpdGggbW9yZSBwb3Nz aWJpbGl0eSB0aGFuIGRhdGEtY2hhbm5lbCBldmVuIHdoZW4NCj4gdGhlIHBpcGUgaXMgb3Zlcndo ZWxtZWQNCj4gDQo+IHRoYW5rcywNCj4gS2FuYW1lDQo+IA0KPiBPbiAyMDE5LzEwLzE4IDE4OjM4 LCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0KPiA+IEhpIGFsbCwNCj4gPg0K PiA+IEFsdGhvdWdoIHdlIGFyZSB3YWl0aW5nIGZvciBhIGNhbGwgZm9yIGFkb3B0aW9uIGZvciB0 aGlzIGRyYWZ0LCB3ZSBtYWRlDQo+IHNvbWUgY2hhbmdlcyB3aGljaCB5b3UgY2FuIHRyYWNrIHdp dGggdGhlIGRpZmYgcHJvdmlkZWQgYmVsb3cuDQo+ID4NCj4gPiBDaGVlcnMsDQo+ID4gTWVkDQo+ ID4NCj4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4+IERlwqA6IGludGVybmV0 LWRyYWZ0c0BpZXRmLm9yZyBbbWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZ10NCj4gPj4g RW52b3nDqcKgOiB2ZW5kcmVkaSAxOCBvY3RvYnJlIDIwMTkgMTE6MzMNCj4gPj4gw4DCoDogY2hl bm1laWxpbmc7IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE47IE1laWxpbmcgQ2hlbjsgVGlydW1h bGVzd2FyDQo+ID4+IFJlZGR5OyBFaHVkIERvcm9uOyBSZWRkeSBLDQo+ID4+IE9iamV0wqA6IE5l dyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtcmVkZHktZG90cy10ZWxlbWV0cnktMDQu dHh0DQo+ID4+DQo+ID4+DQo+ID4+IEEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1yZWRkeS1k b3RzLXRlbGVtZXRyeS0wNC50eHQNCj4gPj4gaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRl ZCBieSBNb2hhbWVkIEJvdWNhZGFpciBhbmQgcG9zdGVkIHRvIHRoZQ0KPiA+PiBJRVRGIHJlcG9z aXRvcnkuDQo+ID4+DQo+ID4+IE5hbWU6CQlkcmFmdC1yZWRkeS1kb3RzLXRlbGVtZXRyeQ0KPiA+ PiBSZXZpc2lvbjoJMDQNCj4gPj4gVGl0bGU6CQlEaXN0cmlidXRlZCBEZW5pYWwtb2YtU2Vydmlj ZSBPcGVuIFRocmVhdCBTaWduYWxpbmcgKERPVFMpDQo+ID4+IFRlbGVtZXRyeQ0KPiA+PiBEb2N1 bWVudCBkYXRlOgkyMDE5LTEwLTE4DQo+ID4+IEdyb3VwOgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9u DQo+ID4+IFBhZ2VzOgkJNDENCj4gPj4gVVJMOiAgICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYu b3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1yZWRkeS1kb3RzLQ0KPiA+PiB0ZWxlbWV0cnktMDQu dHh0DQo+ID4+IFN0YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1yZWRkeS1kb3RzLQ0KPiA+PiB0ZWxlbWV0cnkvDQo+ID4+IEh0bWxpemVkOiAgICAg ICBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtcmVkZHktZG90cy10ZWxlbWV0cnkt DQo+IDA0DQo+ID4+IEh0bWxpemVkOiAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RvYy9odG1sL2RyYWZ0LXJlZGR5LWRvdHMtDQo+ID4+IHRlbGVtZXRyeQ0KPiA+PiBEaWZmOiAg ICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LXJlZGR5LWRv dHMtDQo+ID4+IHRlbGVtZXRyeS0wNA0KPiA+Pg0KPiA+PiBBYnN0cmFjdDoNCj4gPj4gICAgIFRo aXMgZG9jdW1lbnQgYWltcyB0byBlbnJpY2ggRE9UUyBzaWduYWwgY2hhbm5lbCBwcm90b2NvbCB3 aXRoDQo+ID4+ICAgICB2YXJpb3VzIHRlbGVtZXRyeSBhdHRyaWJ1dGVzIGFsbG93aW5nIG9wdGlt YWwgRERvUyBhdHRhY2sNCj4gbWl0aWdhdGlvbi4NCj4gPj4gICAgIFRoaXMgZG9jdW1lbnQgc3Bl Y2lmaWVzIHRoZSBub3JtYWwgdHJhZmZpYyBiYXNlbGluZSBhbmQgYXR0YWNrDQo+ID4+ICAgICB0 cmFmZmljIHRlbGVtZXRyeSBhdHRyaWJ1dGVzIGEgRE9UUyBjbGllbnQgY2FuIGNvbnZleSB0byBp dHMgRE9UUw0KPiA+PiAgICAgc2VydmVyIGluIHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBt aXRpZ2F0aW9uIHN0YXR1cyB0ZWxlbWV0cnkNCj4gPj4gICAgIGF0dHJpYnV0ZXMgYSBET1RTIHNl cnZlciBjYW4gY29tbXVuaWNhdGUgdG8gYSBET1RTIGNsaWVudCwgYW5kIHRoZQ0KPiA+PiAgICAg bWl0aWdhdGlvbiBlZmZpY2FjeSB0ZWxlbWV0cnkgYXR0cmlidXRlcyBhIERPVFMgY2xpZW50IGNh bg0KPiA+PiAgICAgY29tbXVuaWNhdGUgdG8gYSBET1RTIHNlcnZlci4gIFRoZSB0ZWxlbWV0cnkg YXR0cmlidXRlcyBjYW4gYXNzaXN0DQo+ID4+ICAgICB0aGUgbWl0aWdhdG9yIHRvIGNob29zZSB0 aGUgRERvUyBtaXRpZ2F0aW9uIHRlY2huaXF1ZXMgYW5kIHBlcmZvcm0NCj4gPj4gICAgIG9wdGlt YWwgRERvUyBhdHRhY2sgbWl0aWdhdGlvbi4NCj4gPj4NCj4gPj4NCj4gPj4NCj4gPj4NCj4gPj4g UGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhl IHRpbWUgb2YNCj4gPj4gc3VibWlzc2lvbg0KPiA+PiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lv biBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KPiA+Pg0KPiA+PiBU aGUgSUVURiBTZWNyZXRhcmlhdA0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiBEb3RzQGlldGYub3Jn DQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQoNCg== From nobody Mon Nov 18 00:47:40 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D8DF120844; Mon, 18 Nov 2019 00:47:35 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.110.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <157406685498.14168.16986193488409043294@ietfa.amsl.com> Date: Mon, 18 Nov 2019 00:47:35 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-server-discovery-06.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 08:47:35 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed-Denial-of-Service Open Threat Signaling (DOTS) Agent Discovery Authors : Mohamed Boucadair Tirumaleswar Reddy Filename : draft-ietf-dots-server-discovery-06.txt Pages : 23 Date : 2019-11-18 Abstract: It may not be possible for a network to determine the cause for an attack, but instead just realize that some resources seem to be under attack. To fill that gap, Distributed-Denial-of-Service Open Threat Signaling (DOTS) allows a network to inform a DOTS server that it is under a potential attack so that appropriate mitigation actions are undertaken. This document specifies mechanisms to configure DOTS clients with their DOTS servers. The discovery procedure also covers the DOTS Signal Channel Call Home. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-server-discovery/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-server-discovery-06 https://datatracker.ietf.org/doc/html/draft-ietf-dots-server-discovery-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-server-discovery-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 18 00:49:29 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79C481200CE; Mon, 18 Nov 2019 00:49:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lc3kkZ8_17Di; Mon, 18 Nov 2019 00:49:27 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E97FE120844; Mon, 18 Nov 2019 00:49:26 -0800 (PST) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 47GjLY4rBVzFqQ3; Mon, 18 Nov 2019 09:49:25 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.32]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 47GjLY3v65zCqlV; Mon, 18 Nov 2019 09:49:25 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7C.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Mon, 18 Nov 2019 09:49:25 +0100 From: To: Valery Smyslov , "dots@ietf.org" CC: "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-server-discovery-05 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCae6249AgAmG0SA= Date: Mon, 18 Nov 2019 08:49:25 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313D8C30@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <000a01d5992a$2d08b840$871a28c0$@smyslov.net> In-Reply-To: <000a01d5992a$2d08b840$871a28c0$@smyslov.net> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 08:49:28 -0000 Hi Valery,=20 The new version integrating the WGLC comments is now available online.=20 Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Valery Smyslov > Envoy=E9=A0: mardi 12 novembre 2019 08:24 > =C0=A0: dots@ietf.org > Cc=A0: dots-chairs@ietf.org > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 >=20 > Hi, >=20 > the WGLC period is over. We received no objection for publication of this > document. > There were few comments from WG participants suggesting text improvements= , > so a new version of the draft is needed. Once it is published (when the > submission > window opens), I'll start preparing shepherd write-up. >=20 > Regards, > Valery. >=20 > > Hi, > > > > this message starts a Work Group Last Call (WGLC) for draft-ietf-dots- > > server-discovery-05. > > The version to be reviewed is here: > https://www.ietf.org/id/draft-ietf-dots- > > server-discovery-05.txt > > > > The WGLC will last for two weeks and will end on November the 7th. > > Please send your comments to the list before this date. > > > > Regards, > > Frank & Valery. >=20 >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Mon Nov 18 00:57:41 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCFD6120104; Mon, 18 Nov 2019 00:57:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=smyslov.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BNeKlLjSYnZk; Mon, 18 Nov 2019 00:57:38 -0800 (PST) Received: from direct.host-care.com (direct.host-care.com [198.136.54.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20CBF120047; Mon, 18 Nov 2019 00:57:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smyslov.net ; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :Date:Subject:In-Reply-To:References:Cc:To:From:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=U8NzBdqfiNqIIXQCmsryHphc93UsGJTEmhmE3oMNu44=; b=tMi6G5gD7otUXgix0+W54PwYYP AVzo16z453UH8nMzrkTY0nodGv5RTKcn2FnZI+8byAxOkv3ZprM++ZUpN718/kMsNuR7lnQXJ/MiE wtWgiIlm80yem4gjPBxTGCYCBU03HDWInaPGzbcF/zWariQIWZ0SsJTZnF1A9rxG1cohHpduN7jUT gFr2vjXYB9lpsCsNdOzv7Z2xHlhyM+yw4oa5n9mJAsRbE7NMopuRfZql5YQXn7gdgJCWyxcg7EoaC P61UpNNnBUQUE4SNONJC81b4d4w7Kc+yZxagd1AlYL07Hty1C0qe9Xj39XhQgOBGZOSfMYjePVO/H cfkcowKw==; Received: from dhcp-89e8.meeting.ietf.org ([31.133.137.232]:62057 helo=svannotebook) by direct.host-care.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.92) (envelope-from ) id 1iWcql-0001I3-Ci; Mon, 18 Nov 2019 03:57:35 -0500 From: "Valery Smyslov" To: , Cc: References: <011d01d58974$b70298b0$2507ca10$@smyslov.net> <000a01d5992a$2d08b840$871a28c0$@smyslov.net> <787AE7BB302AE849A7480A190F8B9330313D8C30@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313D8C30@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Mon, 18 Nov 2019 11:57:30 +0300 Message-ID: <027101d59dee$37f81480$a7e83d80$@smyslov.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQG7u70viJ1zeDaA3CAo0XFND0KMCQHJfY0OAZl0efGnqUz3kA== Content-Language: ru X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - direct.host-care.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - smyslov.net X-Get-Message-Sender-Via: direct.host-care.com: authenticated_id: valery@smyslov.net X-Authenticated-Sender: direct.host-care.com: valery@smyslov.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-server-discovery-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 08:57:40 -0000 Hi Med, thank you. I'll start preparing the write-up soon. Regards, Valery. > Hi Valery, >=20 > The new version integrating the WGLC comments is now available online. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Valery = Smyslov > > Envoy=E9=A0: mardi 12 novembre 2019 08:24 =C0=A0: dots@ietf.org = Cc=A0: > > dots-chairs@ietf.org Objet=A0: Re: [Dots] WGLC on > > draft-ietf-dots-server-discovery-05 > > > > Hi, > > > > the WGLC period is over. We received no objection for publication of > > this document. > > There were few comments from WG participants suggesting text > > improvements, so a new version of the draft is needed. Once it is > > published (when the submission window opens), I'll start preparing > > shepherd write-up. > > > > Regards, > > Valery. > > > > > Hi, > > > > > > this message starts a Work Group Last Call (WGLC) for > > > draft-ietf-dots- server-discovery-05. > > > The version to be reviewed is here: > > https://www.ietf.org/id/draft-ietf-dots- > > > server-discovery-05.txt > > > > > > The WGLC will last for two weeks and will end on November the 7th. > > > Please send your comments to the list before this date. > > > > > > Regards, > > > Frank & Valery. > > > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots From nobody Mon Nov 18 01:15:39 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 62FE012086D for ; Mon, 18 Nov 2019 01:15:38 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 6.110.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <157406853840.14130.17339973342872086066.idtracker@ietfa.amsl.com> Date: Mon, 18 Nov 2019 01:15:38 -0800 From: IETF Secretariat Archived-At: Subject: [Dots] Milestones changed for dots WG X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 09:15:38 -0000 Changed milestone "Requirements document to WGLC", resolved as "Done". Changed milestone "Use case document to WGLC", resolved as "Done". Changed milestone "Signal channel document as proposed standard to WGLC", resolved as "Done". Changed milestone "Data channel document as proposed standard to WGLC", resolved as "Done". Changed milestone "Architecture document to WGLC", resolved as "Done". URL: https://datatracker.ietf.org/wg/dots/about/ From nobody Mon Nov 18 01:19:20 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8040F120889; Mon, 18 Nov 2019 01:19:15 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.110.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <157406875548.14012.12228002613429378106@ietfa.amsl.com> Date: Mon, 18 Nov 2019 01:19:15 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-signal-call-home-07.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 09:19:15 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Call Home Authors : Tirumaleswar Reddy Mohamed Boucadair Jon Shallow Filename : draft-ietf-dots-signal-call-home-07.txt Pages : 35 Date : 2019-11-18 Abstract: This document specifies the DOTS signal channel Call Home, which enables a DOTS server to initiate a secure connection to a DOTS client, and to receive the attack traffic information from the DOTS client. The DOTS server in turn uses the attack traffic information to identify the compromised devices launching the outgoing DDoS attack and takes appropriate mitigation action(s). The DOTS signal channel Call Home is not specific to the home networks; the solution targets any deployment which requires to block DDoS attack traffic closer to the source(s) of a DDoS attack. Editorial Note (To be removed by RFC Editor) Please update these statements within the document with the RFC number to be assigned to this document: o "This version of this YANG module is part of RFC XXXX;" o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Call Home"; o "| [RFCXXXX] |" o reference: RFC XXXX Please update this statement with the RFC number to be assigned to the following documents: o "RFC YYYY: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification (used to be I-D.ietf-dots- signal-channel) Please update TBD statements with the assignment made by IANA to DOTS Signal Channel Call Home. Also, please update the "revision" date of the YANG module. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-signal-call-home/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-07 https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-call-home-07 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-call-home-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 18 01:22:18 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D3EA1201DB; Mon, 18 Nov 2019 01:22:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gEmP37O-OIj0; Mon, 18 Nov 2019 01:22:16 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE1C112004F; Mon, 18 Nov 2019 01:22:15 -0800 (PST) Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr24.francetelecom.fr (ESMTP service) with ESMTP id 47Gk4Q30W5z1xy4; Mon, 18 Nov 2019 10:22:14 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.86]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id 47Gk4Q1qcqzFpYW; Mon, 18 Nov 2019 10:22:14 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBMA4.corporate.adroot.infra.ftgroup ([fe80::4538:d7b0:3c64:8ed3%22]) with mapi id 14.03.0468.000; Mon, 18 Nov 2019 10:22:11 +0100 From: To: Valery Smyslov , "dots@ietf.org" CC: "dots-chairs@ietf.org" Thread-Topic: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQahihX9wgAmNBTA= Date: Mon, 18 Nov 2019 09:22:11 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313D8CFA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <000b01d5992b$4a67d5a0$df3780e0$@smyslov.net> In-Reply-To: <000b01d5992b$4a67d5a0$df3780e0$@smyslov.net> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 09:22:17 -0000 Re-, The version that integrates the comments received during the WGLC is availa= ble at: https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-07.=20 Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Valery Smyslov > Envoy=E9=A0: mardi 12 novembre 2019 08:32 > =C0=A0: dots@ietf.org > Cc=A0: dots-chairs@ietf.org > Objet=A0: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06 >=20 > Hi again, >=20 > the WGLC period is over. We received no objections for publication of thi= s > document. > There were few comments from WG participants suggesting minor > clarifications, > so a new version of the draft is needed. Once it is published (when the > submission > window opens), I'll start preparing shepherd write-up. >=20 > Regards, > Valery. >=20 > > Hi, > > > > this message starts a Work Group Last Call (WGLC) for > draft-ietf-dots-signal- > > call-home-06. > > The version to be reviewed is here: > https://www.ietf.org/id/draft-ietf-dots- > > signal-call-home-06.txt > > > > The WGLC will last for two weeks and will end on November the 7th. > > Please send your comments to the list before this date. > > > > Regards, > > Frank & Valery. >=20 >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Mon Nov 18 05:00:00 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59011120898 for ; Mon, 18 Nov 2019 04:59:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UHGQjjfMpSMM for ; Mon, 18 Nov 2019 04:59:55 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E81B1200B1 for ; Mon, 18 Nov 2019 04:59:55 -0800 (PST) Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar25.francetelecom.fr (ESMTP service) with ESMTP id 47GpvY3v8Mz8tT6; Mon, 18 Nov 2019 13:59:53 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.57]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id 47GpvY39DqzCqlL; Mon, 18 Nov 2019 13:59:53 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6D.corporate.adroot.infra.ftgroup ([fe80::4c24:f1ba:2b1:e490%21]) with mapi id 14.03.0468.000; Mon, 18 Nov 2019 13:59:53 +0100 From: To: kaname nishizuka , "dots@ietf.org" Thread-Topic: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt Thread-Index: AQHVhZcTqLIZd9IRTUy9z3OirX19/adgIwpAgC0tv2uAA8HscA== Date: Mon, 18 Nov 2019 12:59:52 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313D91B6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <317486f6-fbd7-2811-a58c-c5a826fb9e5e@nttv6.jp> <787AE7BB302AE849A7480A190F8B9330313445B0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135F2E7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <11b795d5-bb12-9f3e-b01b-9c95d36e4275@nttv6.jp> In-Reply-To: <11b795d5-bb12-9f3e-b01b-9c95d36e4275@nttv6.jp> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 12:59:59 -0000 SGkgS2FuYW1lLA0KDQpUaGFuayB5b3UgZm9yIHRoZSBmZWVkYmFjay4gSSBhZGRlZCBhbiBpc3N1 ZSBmb3IgdGhpczogaHR0cHM6Ly9naXRodWIuY29tL2JvdWNhZGFpci9kcmFmdC1kb3RzLXRlbGVt ZXRyeS9pc3N1ZXMvMSANCg0KQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggd291bGQgYmUgdG8gZGVm aW5lIGEgZGlzdGluY3QgY29udGFpbiBmb3IgY29uZmlndXJhdGlvbi1yZWxhdGVkIGRhdGEgdW5k ZXIgdGhlIHRlbGVtZXRyeS4NCg0KTG9va2luZyBmb3J3YXJkIHJlYWRpbmcgeW91ciBIYWNrYXRo b24gcmVwb3J0LiAgDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUt LS0tLQ0KPiBEZcKgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBw YXJ0IGRlIGthbmFtZSBuaXNoaXp1a2ENCj4gRW52b3nDqcKgOiBzYW1lZGkgMTYgbm92ZW1icmUg MjAxOSAwNDoyOQ0KPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xOOyBkb3RzQGlldGYu b3JnDQo+IE9iamV0wqA6IFJlOiBbRG90c10gVFI6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBm b3IgZHJhZnQtcmVkZHktZG90cy0NCj4gdGVsZW1ldHJ5LTA0LnR4dA0KPiANCj4gSGkgTWVkLCBh bGwsDQo+IA0KPiBJJ3ZlIGp1c3QgYXJyaXZlZCBhdCB0aGUgaGFja2F0aG9uIHZlbnVlLg0KPiAN Cj4gVG8gc3RhcnQgd2l0aCwgSSdkIGxpa2UgdG8gc3VnZ2VzdCBvbmUgY2hhbmdlIHRvIHRoZSBj dXJyZW50IHByZS1taWdhdGlvbg0KPiBzcGVjLg0KPiANCj4gIEZyb20geWFuZyBtb2R1bGUgb24g cGFnZSAxOSwgaW4gInRlbGVtZXRyeSIgdHJlZSAod2l0aCBVUkktcGF0aA0KPiAidGVsZW1ldHJ5 Iik6DQo+IGhlcmUgaXMgdGhlIGNvbmZpZ3VyYXRpb24gcGFydC4NCj4gIMKgwqDCoMKgwqDCoMKg wqDCoCArLS1ydyB0ZWxlbWV0cnkqIFtjdWlkIHRjaWRdDQo+ICDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqAgKy0tcncgY3VpZMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAg c3RyaW5nDQo+ICDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgKy0tcncgY2RpZD/CoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBzdHJpbmcNCj4gIMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoCArLS1ydyB0Y2lkwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oCB1aW50MzINCj4gIMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCArLS1ydyB0ZWxlbWV0cnktY29u ZmlnDQo+ICDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgfMKgICstLXJ3IGxvdy1wZXJjZW50aWxl P8KgwqDCoCBwZXJjZW50aWxlDQo+ICDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgfMKgICstLXJ3 IG1pZC1wZXJjZW50aWxlP8KgwqDCoCBwZXJjZW50aWxlDQo+ICDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqAgfMKgICstLXJ3IGhpZ2gtcGVyY2VudGlsZT/CoMKgIHBlcmNlbnRpbGUNCj4gIMKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoCB8wqAgKy0tcncgdW5pdC1jb25maWcqIFt1bml0XQ0KPiAgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgIHzCoMKgwqDCoCArLS1ydyB1bml0wqDCoMKgwqDCoCB1bml0 DQo+ICDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgfMKgwqDCoMKgICstLXJ3IHN0YXR1cz/CoMKg IGJvb2xlYW4NCj4gQ2FwYWNpdHkgdGhpbmdzIHdpbGwgYmUgYWxzbyBhIHBhcnQgb2YgY29uZmln dXJhdGlvbi4gKGl0IHdvdWxkIHdvcmsgd2l0aA0KPiB0Y2lkKQ0KPiBIb3dldmVyLCBhdHRhY2st ZGV0YWlsIGlzICpOT1QqIGEgY29uZmlndXJhdGlvbi4NCj4gDQo+IEhvdyBhYm91dCBzZXBhcmF0 aW5nIHRoZXNlIHJlc291cmNlcyBsaWtlIHRoaXMsDQo+IFVSSS1wYXRoICJ0ZWxlbWV0cnktY29u ZmlnIjoNCj4gIMKgwqDCoCB0ZWxlbWV0cnktY29uZmlnIGFuZCBjYXBhY2l0eSB0aGluZ3MNCj4g VVJJLXBhdGggInRlbGVtZXRyeSI6DQo+ICDCoMKgwqAgcGVyaW9kaWNhbCB0cmFmZmljL2Nvbm5l Y3Rpb24gbWV0cmljIGFuZCBhdHRhY2stZGV0YWlsIChpZiBleGlzdCkNCj4gDQo+IA0KPiByZWdh cmRzLA0KPiBLYW5hbWUNCj4gDQo+IA0KPiBPbiAyMDE5LzExLzA4IDIwOjE2LCBrYW5hbWUgbmlz aGl6dWthIHdyb3RlOg0KPiA+IEhpIE1lZCwNCj4gPg0KPiA+IFRoYW5rcyEgSSdsbCBsb29rIGlu dG8gYW5kIHVzZSBpdC4NCj4gPg0KPiA+IGthbmFtZQ0KPiA+DQo+ID4gT24gMjAxOS8xMS8wOCAx Njo1OCwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPj4gSGkgS2FuYW1l LA0KPiA+Pg0KPiA+PiBBcG9sb2dpZXMgZm9yIHRoZSBkZWxheSB0byBoYXZlIHRoaXMgZG9uZS4N Cj4gPj4NCj4gPj4gVGhlIGRyYWZ0IG5vdGVzIHRoZSBmb2xsb3dpbmc6DQo+ID4+DQo+ID4+IMKg wqDCoMKgwqDCoCBOb3RlczogKDEpIENoZWNrIG5hbWluZyBjb25mbGljdCB0byBlYXNlIENCT1Ig bWFwcGluZyAoZS5nLCBsb3ctDQo+ID4+IMKgwqDCoMKgwqDCoCBwZXJjZW50aWxlIGlzIGRlZmlu ZWQgYXMgeWFuZzpnYXVnZTY0LCBsaXN0LCBvciBjb250YWluZXIpLg0KPiA+PiDCoMKgwqDCoMKg wqAgRGlzdGluY3QgbmFtZXMgbWF5IGJlIGNvbnNpZGVyZWQuDQo+ID4+DQo+ID4+IEFsdGhvdWdo IHRoaXMgaXMgbm90IGFuIGlzc3VlIGluIFlBTkcsIEkgdXBkYXRlZCBzb21lIFlBTkcgYXR0cmli dXRlDQo+IG5hbWVzIHRvIGF2b2lkIGNib3IgbmFtaW5nIGNvbmZsaWN0cy4gVGhlIHVwZGF0ZWQg WUFORyBtb2R1bGUgaXMgYXZhaWxhYmxlDQo+IGF0OiBodHRwczovL2dpdGh1Yi5jb20vYm91Y2Fk YWlyL2RyYWZ0LWRvdHMtdGVsZW1ldHJ5L2Jsb2IvbWFzdGVyL2RyYWZ0LQ0KPiByZWRkeS1kb3Rz LXRlbGVtZXRyeS0wNC50eHQNCj4gPj4NCj4gPj4gUGxlYXNlIGZpbmQgYmVsb3cgdGhlIG1hcHBp bmcgdGFibGUuIEFuIG9ubGluZSB2ZXJzaW9uIGlzIGFsc28gYXZhaWxhYmxlDQo+IGF0OiBodHRw czovL2dpdGh1Yi5jb20vYm91Y2FkYWlyL2RyYWZ0LWRvdHMtdGVsZW1ldHJ5L2Jsb2IvbWFzdGVy L21hcHBpbmctDQo+IHRhYmxlLnR4dC4NCj4gPj4NCj4gPj4gKy0tLS0tLS0tLS0tLS0tLS0tLS0t LS0rLS0tLS0tLS0tLS0tLSstLS0tLS0rLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tKw0KPiA+PiDC oMKgwqAgfCBQYXJhbWV0ZXIgTmFtZcKgwqDCoMKgwqDCoCB8IFlBTkfCoMKgwqDCoMKgwqDCoCB8 IENCT1IgfCBDQk9SIE1ham9yIHwgSlNPTsKgwqAgfA0KPiA+PiDCoMKgwqAgfMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8IFR5cGXCoMKgwqDCoMKgwqDCoCB8IEtl ecKgIHzCoMKgwqAgVHlwZSAmwqDCoMKgwqAgfA0KPiBUeXBlwqDCoCB8DQo+ID4+IMKgwqDCoCB8 wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIHzCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqAgfMKgwqDCoMKgwqAgfCBJbmZvcm1hdGlvbiB8wqDCoMKgwqDCoMKgwqAgfA0K PiA+PiArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tKy0tLS0tLSstLS0tLS0t LS0tLS0tLS0rLS0tLS0tLS0rDQo+ID4+IMKgwqDCoCB8IGlldGYtZG90cy1zaWduYWwtY2hhIHzC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgfMKgwqDCoMKgwqAgfCB8wqDCoMKgwqDCoMKgwqAgfA0K PiA+PiDCoMKgwqAgfCBubmVsOnRlbGVtZXRyecKgwqDCoMKgwqDCoCB8IGNvbnRhaW5lcsKgwqAg fDB4ODAwOHwgNSBtYXAgfCBPYmplY3QgfA0KPiA+PiDCoMKgwqAgfCB0Y2lkwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqAgfCB1aW50MzLCoMKgwqDCoMKgIHwweDgwMDl8IDAgdW5zaWdu ZWQgfCBOdW1iZXIgfA0KPiA+PiDCoMKgwqAgfCB0ZWxlbWV0cnktY29uZmlnwqDCoMKgwqAgfCBj b250YWluZXLCoMKgIHwweDgwMEF8IDUgbWFwIHwgT2JqZWN0IHwNCj4gPj4gwqDCoMKgIHwgbG93 LXBlcmNlbnRpbGXCoMKgwqDCoMKgwqAgfCBkZWNpbWFsNjTCoMKgIHwweDgwMEJ8IDYgdGFnIDQg fMKgwqDCoMKgwqDCoMKgIHwNCj4gPj4gwqDCoMKgIHzCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgwqAgfMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8wqDCoMKgwqDCoCB8 wqAgWy0yLCBpbnRlZ2VyXXwgU3RyaW5nDQo+IHwNCj4gPj4gwqDCoMKgIHwgbWlkLXBlcmNlbnRp bGXCoMKgwqDCoMKgwqAgfCBkZWNpbWFsNjTCoMKgIHwweDgwMEN8IDYgdGFnIDQgfMKgwqDCoMKg wqDCoMKgIHwNCj4gPj4gwqDCoMKgIHzCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqAgfMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8wqDCoMKgwqDCoCB8wqAgWy0yLCBp bnRlZ2VyXXwgU3RyaW5nDQo+IHwNCj4gPj4gwqDCoMKgIHwgaGlnaC1wZXJjZW50aWxlwqDCoMKg wqDCoCB8IGRlY2ltYWw2NMKgwqAgfDB4ODAwRHwgNiB0YWcgNCB8wqDCoMKgwqDCoMKgwqAgfA0K PiA+PiDCoMKgwqAgfMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8 wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIHzCoMKgwqDCoMKgIHzCoCBbLTIsIGludGVnZXJdfCBT dHJpbmcNCj4gfA0KPiA+PiDCoMKgwqAgfCB1bml0LWNvbmZpZ8KgwqDCoMKgwqDCoMKgwqDCoCB8 IGxpc3TCoMKgwqDCoMKgwqDCoCB8MHg4MDBFfCA0IGFycmF5IHwgQXJyYXnCoCB8DQo+ID4+IMKg wqDCoCB8IHVuaXTCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8IGVudW1lcmF0aW9u IHwweDgwMEZ8IDAgdW5zaWduZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCBzdGF0dXPCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIHwgYm9vbGVhbsKgwqDCoMKgIHwweDgwMTB8IDcgYml0 cyAyMCB8IEZhbHNlwqAgfA0KPiA+PiDCoMKgwqAgfMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoCB8wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIHzCoMKgwqDCoMKgIHwg NyBiaXRzIDIxIHwgVHJ1ZcKgwqAgfA0KPiA+PiDCoMKgwqAgfCB0b3RhbC1waXBlLWNhcGFiaWxp dHl8IGxpc3TCoMKgwqDCoMKgwqDCoCB8MHg4MDExfCA0IGFycmF5IHwgQXJyYXnCoCB8DQo+ID4+ IMKgwqDCoCB8IHBpcGXCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8IHVpbnQ2NMKg wqDCoMKgwqAgfDB4ODAxMnwgMCB1bnNpZ25lZCB8IFN0cmluZyB8DQo+ID4+IMKgwqDCoCB8IHBy ZS1taXRpZ2F0aW9uwqDCoMKgwqDCoMKgIHwgbGlzdMKgwqDCoMKgwqDCoMKgIHwweDgwMTN8IDQg YXJyYXkgfCBBcnJhecKgIHwNCj4gPj4gwqDCoMKgIHwgdGVsZW1ldHJ5LWlkwqDCoMKgwqDCoMKg wqDCoCB8IHVpbnQzMsKgwqDCoMKgwqAgfDB4ODAxNHwgMCB1bnNpZ25lZCB8IE51bWJlciB8DQo+ ID4+IMKgwqDCoCB8IHRvdGFsLXRyYWZmaWMtwqDCoMKgwqDCoMKgIHzCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqAgfMKgwqDCoMKgwqAgfCB8wqDCoMKgwqDCoMKgwqAgfA0KPiA+PiDCoMKgwqAgfMKg wqDCoCBub3JtYWwtYmFzZWxpbmXCoMKgIHwgbGlzdMKgwqDCoMKgwqDCoMKgIHwweDgwMTV8IDQg YXJyYXkgfCBBcnJhecKgIHwNCj4gPj4gwqDCoMKgIHwgbG93LXBlcmNlbnRpbGUtZ8KgwqDCoMKg IHwgeWFuZzpnYXVnZTY0fDB4ODAxNnwgMCB1bnNpZ25lZCB8IFN0cmluZyB8DQo+ID4+IMKgwqDC oCB8IG1pZC1wZXJjZW50aWxlLWfCoMKgwqDCoCB8IHlhbmc6Z2F1Z2U2NHwweDgwMTd8IDAgdW5z aWduZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCBoaWdoLXBlcmNlbnRpbGUtZ8KgwqDCoCB8 IHlhbmc6Z2F1Z2U2NHwweDgwMTh8IDAgdW5zaWduZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAg fCBwZWFrLWfCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIHwgeWFuZzpnYXVnZTY0fDB4ODAx OXwgMCB1bnNpZ25lZCB8IFN0cmluZyB8DQo+ID4+IMKgwqDCoCB8IHRvdGFsLWF0dGFjay10cmFm ZmljIHwgbGlzdMKgwqDCoMKgwqDCoMKgIHwweDgwMUF8IDQgYXJyYXkgfCBBcnJhecKgIHwNCj4g Pj4gwqDCoMKgIHwgdG90YWwtdHJhZmZpY8KgwqDCoMKgwqDCoMKgIHwgbGlzdMKgwqDCoMKgwqDC oMKgIHwweDgwMUJ8IDQgYXJyYXkgfCBBcnJhecKgIHwNCj4gPj4gwqDCoMKgIHwgdG90YWwtY29u bmVjdGlvbi3CoMKgwqAgfMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8wqDCoMKgwqDCoCB8IHzC oMKgwqDCoMKgwqDCoCB8DQo+ID4+IMKgwqDCoCB8wqDCoMKgwqDCoMKgwqAgY2FwYWNpdHnCoMKg wqDCoMKgIHwgbGlzdMKgwqDCoMKgwqDCoMKgIHwweDgwMUN8IDQgYXJyYXkgfCBBcnJhecKgIHwN Cj4gPj4gwqDCoMKgIHwgY29ubmVjdGlvbsKgwqDCoMKgwqDCoMKgwqDCoMKgIHwgdWludDY0wqDC oMKgwqDCoCB8MHg4MDFEfCAwIHVuc2lnbmVkIHwgU3RyaW5nIHwNCj4gPj4gwqDCoMKgIHwgY29u bmVjdGlvbi1jbGllbnTCoMKgwqAgfCB1aW50NjTCoMKgwqDCoMKgIHwweDgwMUV8IDAgdW5zaWdu ZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCBlbWJyeW9uaWPCoMKgwqDCoMKgwqDCoMKgwqDC oMKgIHwgdWludDY0wqDCoMKgwqDCoCB8MHg4MDFGfCAwIHVuc2lnbmVkIHwgU3RyaW5nIHwNCj4g Pj4gwqDCoMKgIHwgZW1icnlvbmljLWNsaWVudMKgwqDCoMKgIHwgdWludDY0wqDCoMKgwqDCoCB8 MHg4MDIwfCAwIHVuc2lnbmVkIHwgU3RyaW5nIHwNCj4gPj4gwqDCoMKgIHwgY29ubmVjdGlvbi1w c8KgwqDCoMKgwqDCoMKgIHwgdWludDY0wqDCoMKgwqDCoCB8MHg4MDIxfCAwIHVuc2lnbmVkIHwg U3RyaW5nIHwNCj4gPj4gwqDCoMKgIHwgY29ubmVjdGlvbi1jbGllbnQtcHMgfCB1aW50NjTCoMKg wqDCoMKgIHwweDgwMjJ8IDAgdW5zaWduZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCByZXF1 ZXN0LXBzwqDCoMKgwqDCoMKgwqDCoMKgwqAgfCB1aW50NjTCoMKgwqDCoMKgIHwweDgwMjN8IDAg dW5zaWduZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCByZXF1ZXN0LWNsaWVudC1wc8KgwqDC oCB8IHVpbnQ2NMKgwqDCoMKgwqAgfDB4ODAyNHwgMCB1bnNpZ25lZCB8IFN0cmluZyB8DQo+ID4+ IMKgwqDCoCB8IHBhcnRpYWwtcmVxdWVzdC1wc8KgwqAgfCB1aW50NjTCoMKgwqDCoMKgIHwweDgw MjV8IDAgdW5zaWduZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCBtaXRpZ2F0aW9uLXN0YXJ0 wqDCoMKgwqAgfCB1aW50NjTCoMKgwqDCoMKgIHwweDgwMjZ8IDAgdW5zaWduZWQgfCBTdHJpbmcg fA0KPiA+PiDCoMKgwqAgfCBwYXJ0aWFsLXJlcXVlc3QtwqDCoMKgwqAgfMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoCB8wqDCoMKgwqDCoCB8IHzCoMKgwqDCoMKgwqDCoCB8DQo+ID4+IMKgwqDCoCB8 wqDCoMKgwqDCoMKgwqAgY2xpZW50LXBzwqDCoMKgwqAgfCB1aW50NjTCoMKgwqDCoMKgIHwweDgw Mjd8IDAgdW5zaWduZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCB0b3RhbC1hdHRhY2stwqDC oMKgwqDCoMKgwqAgfMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8wqDCoMKgwqDCoCB8IHzCoMKg wqDCoMKgwqDCoCB8DQo+ID4+IMKgwqDCoCB8wqDCoMKgwqDCoMKgwqAgY29ubmVjdGlvbsKgwqDC oCB8IGNvbnRhaW5lcsKgwqAgfDB4ODAyOHwgNSBtYXAgfCBPYmplY3QgfA0KPiA+PiDCoMKgwqAg fCBsb3ctcGVyY2VudGlsZS1swqDCoMKgwqAgfCBsaXN0wqDCoMKgwqDCoMKgwqAgfDB4ODAyOXwg NCBhcnJheSB8IEFycmF5wqAgfA0KPiA+PiDCoMKgwqAgfCBtaWQtcGVyY2VudGlsZS1swqDCoMKg wqAgfCBsaXN0wqDCoMKgwqDCoMKgwqAgfDB4ODAyQXwgNCBhcnJheSB8IEFycmF5wqAgfA0KPiA+ PiDCoMKgwqAgfCBoaWdoLXBlcmNlbnRpbGUtbMKgwqDCoCB8IGxpc3TCoMKgwqDCoMKgwqDCoCB8 MHg4MDJCfCA0IGFycmF5IHwgQXJyYXnCoCB8DQo+ID4+IMKgwqDCoCB8IHBlYWvCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8IGxpc3TCoMKgwqDCoMKgwqDCoCB8MHg4MDJDfCA0IGFy cmF5IHwgQXJyYXnCoCB8DQo+ID4+IMKgwqDCoCB8IGF0dGFjay1kZXRhaWzCoMKgwqDCoMKgwqDC oCB8IGNvbnRhaW5lcsKgwqAgfDB4ODAyRHwgNSBtYXAgfCBPYmplY3QgfA0KPiA+PiDCoMKgwqAg fCB2ZW5kb3ItaWTCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIHwgdWludDMywqDCoMKgwqDCoCB8MHg4 MDJFfCAwIHVuc2lnbmVkIHwgTnVtYmVyIHwNCj4gPj4gwqDCoMKgIHwgYXR0YWNrLWlkwqDCoMKg wqDCoMKgwqDCoMKgwqDCoCB8IHN0cmluZ8KgwqDCoMKgwqAgfDB4ODAyRnwgMyB0ZXh0IHN0cmlu ZyB8IFN0cmluZw0KPiB8DQo+ID4+IMKgwqDCoCB8IGF0dGFjay1uYW1lwqDCoMKgwqDCoMKgwqDC oMKgIHwgc3RyaW5nwqDCoMKgwqDCoCB8MHg4MDMwfCAzIHRleHQgc3RyaW5nIHwgU3RyaW5nDQo+ IHwNCj4gPj4gwqDCoMKgIHwgYXR0YWNrLXNldmVyaXR5wqDCoMKgwqDCoCB8IGVudW1lcmF0aW9u IHwweDgwMzF8IDAgdW5zaWduZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCBzdGFydC10aW1l wqDCoMKgwqDCoMKgwqDCoMKgwqAgfCB1aW50NjTCoMKgwqDCoMKgIHwweDgwMzJ8IDAgdW5zaWdu ZWQgfCBTdHJpbmcgfA0KPiA+PiDCoMKgwqAgfCBlbmQtdGltZcKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoCB8IHVpbnQ2NMKgwqDCoMKgwqAgfDB4ODAzM3wgMCB1bnNpZ25lZCB8IFN0cmluZyB8DQo+ ID4+IMKgwqDCoCB8IHNvdXJjZS1jb3VudMKgwqDCoMKgwqDCoMKgwqAgfCBjb250YWluZXLCoMKg IHwweDgwMzR8IDUgbWFwIHwgT2JqZWN0IHwNCj4gPj4gwqDCoMKgIHwgdG9wLXRhbGtlcsKgwqDC oMKgwqDCoMKgwqDCoMKgIHwgY29udGFpbmVywqDCoCB8MHg4MDM1fCA1IG1hcCB8IE9iamVjdCB8 DQo+ID4+IMKgwqDCoCB8IHNwb29mZWQtc3RhdHVzwqDCoMKgwqDCoMKgIHwgYm9vbGVhbsKgwqDC oMKgIHwweDgwMzZ8IDcgYml0cyAyMCB8IEZhbHNlwqAgfA0KPiA+PiDCoMKgwqAgfMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCB8wqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgIHzCoMKgwqDCoMKgIHwgNyBiaXRzIDIxIHwgVHJ1ZcKgwqAgfA0KPiA+PiDCoMKgwqAgfCBs b3ctcGVyY2VudGlsZS1jwqDCoMKgwqAgfCBjb250YWluZXLCoMKgIHwweDgwMzd8IDUgbWFwIHwg T2JqZWN0IHwNCj4gPj4gwqDCoMKgIHwgbWlkLXBlcmNlbnRpbGUtY8KgwqDCoMKgIHwgY29udGFp bmVywqDCoCB8MHg4MDM4fCA1IG1hcCB8IE9iamVjdCB8DQo+ID4+IMKgwqDCoCB8IGhpZ2gtcGVy Y2VudGlsZS1jwqDCoMKgIHwgY29udGFpbmVywqDCoCB8MHg4MDM5fCA1IG1hcCB8IE9iamVjdCB8 DQo+ID4+IMKgwqDCoCB8IHBlYWstY8KgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgfCBjb250 YWluZXLCoMKgIHwweDgwM0F8IDUgbWFwIHwgT2JqZWN0IHwNCj4gPj4gKy0tLS0tLS0tLS0tLS0t LS0tLS0tLS0rLS0tLS0tLS0tLS0tLSstLS0tLS0rLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tKw0K PiA+Pg0KPiA+PiBDaGVlcnMsDQo+ID4+IE1lZA0KPiA+Pg0KPiA+Pj4gLS0tLS1NZXNzYWdlIGQn b3JpZ2luZS0tLS0tDQo+ID4+PiBEZcKgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYu b3JnXSBEZSBsYSBwYXJ0IGRlDQo+ID4+PiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ ID4+PiBFbnZvecOpwqA6IG1lcmNyZWRpIDIzIG9jdG9icmUgMjAxOSAxMzoyNQ0KPiA+Pj4gw4DC oDoga2FuYW1lIG5pc2hpenVrYTsgZG90c0BpZXRmLm9yZw0KPiA+Pj4gT2JqZXTCoDogUmU6IFtE b3RzXSBUUjogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1yZWRkeS1kb3RzLQ0K PiA+Pj4gdGVsZW1ldHJ5LTA0LnR4dA0KPiA+Pj4NCj4gPj4+IEhpIEthbmFtZSwNCj4gPj4+DQo+ ID4+PiBUaGFuayB5b3UgZm9yIHNoYXJpbmcgdGhlIGZlZWRiYWNrLg0KPiA+Pj4NCj4gPj4+IFdl IHdpbGwgcHJlcGFyZSBhbiBpbml0aWFsIHZlcnNpb24gb2YgdGhlIG1hcHBpbmcgdGFibGUgdGhh dCB3ZSB3aWxsDQo+IHB1dCBvbg0KPiA+Pj4gdGhlIGdpdGh1Yi4gVGhhdCB0YWJsZSB3aWxsIGJl IGludGVncmF0ZWQgaW4gdGhlIG5leHQgaXRlcmF0aW9uIG9mIHRoZQ0KPiA+Pj4gZHJhZnQuDQo+ ID4+Pg0KPiA+Pj4gQ2hlZXJzLA0KPiA+Pj4gTWVkDQo+ID4+Pg0KPiA+Pj4+IC0tLS0tTWVzc2Fn ZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+IERlwqA6IGthbmFtZSBuaXNoaXp1a2EgW21haWx0bzpr YW5hbWVAbnR0djYuanBdDQo+ID4+Pj4gRW52b3nDqcKgOiBtZXJjcmVkaSAyMyBvY3RvYnJlIDIw MTkgMTE6MDcNCj4gPj4+PiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xOOyBkb3RzQGll dGYub3JnDQo+ID4+Pj4gT2JqZXTCoDogUmU6IFtEb3RzXSBUUjogTmV3IFZlcnNpb24gTm90aWZp Y2F0aW9uIGZvciBkcmFmdC1yZWRkeS1kb3RzLQ0KPiA+Pj4+IHRlbGVtZXRyeS0wNC50eHQNCj4g Pj4+Pg0KPiA+Pj4+IEhpIE1lZCwgYWxsLA0KPiA+Pj4+DQo+ID4+Pj4gSSdtIHBsYW5uaW5nIHRv IGltcGxlbWVudCBkb3RzIHRlbGVtZXRyeSBmZWF0dXJlcyBpbnRvIGdvLWRvdHMuDQo+ID4+Pj4g VGhvdWdoIGl0IHdvdWxkIGV2b2x2ZSwgaWZhbiBpbml0aWFsIHZlcnNpb24gb2YgeWFuZy9jYm9y IG1hcHBpbmcgd2FzDQo+ID4+Pj4gZGVmaW5lZCwgaXQgaGVscHMgbWUgYSBsb3QuDQo+ID4+Pj4N Cj4gPj4+PiB0aGFua3MsDQo+ID4+Pj4gS2FuYW1lDQo+ID4+Pj4NCj4gPj4+Pg0KPiA+Pj4+IE9u IDIwMTkvMTAvMTggMTg6MzgsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ ID4+Pj4+IEhpIGFsbCwNCj4gPj4+Pj4NCj4gPj4+Pj4gQWx0aG91Z2ggd2UgYXJlIHdhaXRpbmcg Zm9yIGEgY2FsbCBmb3IgYWRvcHRpb24gZm9yIHRoaXMgZHJhZnQsIHdlDQo+IG1hZGUNCj4gPj4+ PiBzb21lIGNoYW5nZXMgd2hpY2ggeW91IGNhbiB0cmFjayB3aXRoIHRoZSBkaWZmIHByb3ZpZGVk IGJlbG93Lg0KPiA+Pj4+PiBDaGVlcnMsDQo+ID4+Pj4+IE1lZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4g LS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4+Pj4+PiBEZcKgOiBpbnRlcm5ldC1kcmFm dHNAaWV0Zi5vcmcgW21haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmddDQo+ID4+Pj4+PiBF bnZvecOpwqA6IHZlbmRyZWRpIDE4IG9jdG9icmUgMjAxOSAxMTozMw0KPiA+Pj4+Pj4gw4DCoDog Y2hlbm1laWxpbmc7IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE47IE1laWxpbmcgQ2hlbjsNCj4g VGlydW1hbGVzd2FyDQo+ID4+Pj4+PiBSZWRkeTsgRWh1ZCBEb3JvbjsgUmVkZHkgSw0KPiA+Pj4+ Pj4gT2JqZXTCoDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1yZWRkeS1kb3Rz LXRlbGVtZXRyeS0NCj4gMDQudHh0DQo+ID4+Pj4+Pg0KPiA+Pj4+Pj4NCj4gPj4+Pj4+IEEgbmV3 IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1yZWRkeS1kb3RzLXRlbGVtZXRyeS0wNC50eHQNCj4gPj4+ Pj4+IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgTW9oYW1lZCBCb3VjYWRhaXIg YW5kIHBvc3RlZCB0bw0KPiB0aGUNCj4gPj4+Pj4+IElFVEYgcmVwb3NpdG9yeS4NCj4gPj4+Pj4+ DQo+ID4+Pj4+PiBOYW1lOsKgwqDCoMKgwqDCoMKgIGRyYWZ0LXJlZGR5LWRvdHMtdGVsZW1ldHJ5 DQo+ID4+Pj4+PiBSZXZpc2lvbjrCoMKgwqAgMDQNCj4gPj4+Pj4+IFRpdGxlOsKgwqDCoMKgwqDC oMKgIERpc3RyaWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4gVGhyZWF0IFNpZ25hbGluZw0K PiA+Pj4gKERPVFMpDQo+ID4+Pj4+PiBUZWxlbWV0cnkNCj4gPj4+Pj4+IERvY3VtZW50IGRhdGU6 wqDCoMKgIDIwMTktMTAtMTgNCj4gPj4+Pj4+IEdyb3VwOsKgwqDCoMKgwqDCoMKgIEluZGl2aWR1 YWwgU3VibWlzc2lvbg0KPiA+Pj4+Pj4gUGFnZXM6wqDCoMKgwqDCoMKgwqAgNDENCj4gPj4+Pj4+ IFVSTDogaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LXJlZGR5LWRv dHMtDQo+ID4+Pj4+PiB0ZWxlbWV0cnktMDQudHh0DQo+ID4+Pj4+PiBTdGF0dXM6IGh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXJlZGR5LWRvdHMtDQo+ID4+Pj4+PiB0ZWxl bWV0cnkvDQo+ID4+Pj4+PiBIdG1saXplZDogaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LXJlZGR5LWRvdHMtDQo+ID4+PiB0ZWxlbWV0cnktDQo+ID4+Pj4gMDQNCj4gPj4+Pj4+IEh0 bWxpemVkOiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LXJlZGR5 LQ0KPiA+Pj4gZG90cy0NCj4gPj4+Pj4+IHRlbGVtZXRyeQ0KPiA+Pj4+Pj4gRGlmZjogaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LXJlZGR5LWRvdHMtDQo+ID4+Pj4+PiB0 ZWxlbWV0cnktMDQNCj4gPj4+Pj4+DQo+ID4+Pj4+PiBBYnN0cmFjdDoNCj4gPj4+Pj4+IMKgwqDC oMKgIFRoaXMgZG9jdW1lbnQgYWltcyB0byBlbnJpY2ggRE9UUyBzaWduYWwgY2hhbm5lbCBwcm90 b2NvbCB3aXRoDQo+ID4+Pj4+PiDCoMKgwqDCoCB2YXJpb3VzIHRlbGVtZXRyeSBhdHRyaWJ1dGVz IGFsbG93aW5nIG9wdGltYWwgRERvUyBhdHRhY2sNCj4gPj4+PiBtaXRpZ2F0aW9uLg0KPiA+Pj4+ Pj4gwqDCoMKgwqAgVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgdGhlIG5vcm1hbCB0cmFmZmljIGJh c2VsaW5lIGFuZCBhdHRhY2sNCj4gPj4+Pj4+IMKgwqDCoMKgIHRyYWZmaWMgdGVsZW1ldHJ5IGF0 dHJpYnV0ZXMgYSBET1RTIGNsaWVudCBjYW4gY29udmV5IHRvIGl0cw0KPiBET1RTDQo+ID4+Pj4+ PiDCoMKgwqDCoCBzZXJ2ZXIgaW4gdGhlIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIG1pdGlnYXRp b24gc3RhdHVzDQo+IHRlbGVtZXRyeQ0KPiA+Pj4+Pj4gwqDCoMKgwqAgYXR0cmlidXRlcyBhIERP VFMgc2VydmVyIGNhbiBjb21tdW5pY2F0ZSB0byBhIERPVFMgY2xpZW50LCBhbmQNCj4gdGhlDQo+ ID4+Pj4+PiDCoMKgwqDCoCBtaXRpZ2F0aW9uIGVmZmljYWN5IHRlbGVtZXRyeSBhdHRyaWJ1dGVz IGEgRE9UUyBjbGllbnQgY2FuDQo+ID4+Pj4+PiDCoMKgwqDCoCBjb21tdW5pY2F0ZSB0byBhIERP VFMgc2VydmVyLsKgIFRoZSB0ZWxlbWV0cnkgYXR0cmlidXRlcyBjYW4NCj4gYXNzaXN0DQo+ID4+ Pj4+PiDCoMKgwqDCoCB0aGUgbWl0aWdhdG9yIHRvIGNob29zZSB0aGUgRERvUyBtaXRpZ2F0aW9u IHRlY2huaXF1ZXMgYW5kDQo+IHBlcmZvcm0NCj4gPj4+Pj4+IMKgwqDCoMKgIG9wdGltYWwgRERv UyBhdHRhY2sgbWl0aWdhdGlvbi4NCj4gPj4+Pj4+DQo+ID4+Pj4+Pg0KPiA+Pj4+Pj4NCj4gPj4+ Pj4+DQo+ID4+Pj4+PiBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1p bnV0ZXMgZnJvbSB0aGUgdGltZSBvZg0KPiA+Pj4+Pj4gc3VibWlzc2lvbg0KPiA+Pj4+Pj4gdW50 aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5p ZXRmLm9yZy4NCj4gPj4+Pj4+DQo+ID4+Pj4+PiBUaGUgSUVURiBTZWNyZXRhcmlhdA0KPiA+Pj4+ PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4+ PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4+Pj4+IGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+Pj4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+IERvdHMgbWFpbGluZyBs aXN0DQo+ID4+PiBEb3RzQGlldGYub3JnDQo+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2RvdHMNCj4gPg0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiBEb3RzQGlldGYu b3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+IA0K PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBEb3Rz IG1haWxpbmcgbGlzdA0KPiBEb3RzQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZG90cw0K From nobody Mon Nov 18 22:10:37 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9CA3120B3D for ; Mon, 18 Nov 2019 22:10:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nttv6.jp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zb40jdDTQXtX for ; Mon, 18 Nov 2019 22:10:21 -0800 (PST) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id 7E111120829 for ; Mon, 18 Nov 2019 22:10:21 -0800 (PST) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id BC05525F6B8; Tue, 19 Nov 2019 15:10:19 +0900 (JST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nttv6.jp; s=20180820; t=1574143819; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=lTOc/a1B63jKs1sp58IRUeHfGvTcToEGQpKYuAJoBTg=; b=NaPD68rsNi0p/Hb8ebeLCuNTXjeE+3mYW1Sf9WAKWDSpDQomId6IfCLnU4Y13b9JG6KfG6 sUQCvjK74GkS+5Ev1FhSiiZKPrT20guumZIxe7jNOfrYCnTMIF6yeWs5LJTgAc2289Z5ZZ S6LIukkJXt+48ichBLAp+CcfP1pv6FY= Received: from [IPv6:::1] (fujiko.nttv6.jp [IPv6:2402:c800:ff06:136::141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 1CAB775907D; Tue, 19 Nov 2019 15:10:19 +0900 (JST) To: mohamed.boucadair@orange.com, "dots@ietf.org" References: <157139119677.3853.16590465405127507911.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313410DA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <317486f6-fbd7-2811-a58c-c5a826fb9e5e@nttv6.jp> <787AE7BB302AE849A7480A190F8B9330313445B0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93303135F2E7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <11b795d5-bb12-9f3e-b01b-9c95d36e4275@nttv6.jp> <787AE7BB302AE849A7480A190F8B9330313D91B6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: <3834b8c1-a991-073b-ea69-b5b382870372@nttv6.jp> Date: Tue, 19 Nov 2019 15:10:17 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313D91B6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] TR: New Version Notification for draft-reddy-dots-telemetry-04.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 06:10:29 -0000 Hi Med, thanks. The presentation slide is now on the site of meeting materials. It might be better for the discussion at the Friday meeting if you could look at it beforehand. regards, Kaname On 2019/11/18 21:59, mohamed.boucadair@orange.com wrote: > Hi Kaname, > > Thank you for the feedback. I added an issue for this: https://github.com/boucadair/draft-dots-telemetry/issues/1 > > An alternative approach would be to define a distinct contain for configuration-related data under the telemetry. > > Looking forward reading your Hackathon report. > > Cheers, > Med > >> -----Message d'origine----- >> De : Dots [mailto:dots-bounces@ietf.org] De la part de kaname nishizuka >> Envoyé : samedi 16 novembre 2019 04:29 >> À : BOUCADAIR Mohamed TGI/OLN; dots@ietf.org >> Objet : Re: [Dots] TR: New Version Notification for draft-reddy-dots- >> telemetry-04.txt >> >> Hi Med, all, >> >> I've just arrived at the hackathon venue. >> >> To start with, I'd like to suggest one change to the current pre-migation >> spec. >> >> From yang module on page 19, in "telemetry" tree (with URI-path >> "telemetry"): >> here is the configuration part. >>           +--rw telemetry* [cuid tcid] >>              +--rw cuid                     string >>              +--rw cdid?                    string >>              +--rw tcid                     uint32 >>              +--rw telemetry-config >>              |  +--rw low-percentile?    percentile >>              |  +--rw mid-percentile?    percentile >>              |  +--rw high-percentile?   percentile >>              |  +--rw unit-config* [unit] >>              |     +--rw unit      unit >>              |     +--rw status?   boolean >> Capacity things will be also a part of configuration. (it would work with >> tcid) >> However, attack-detail is *NOT* a configuration. >> >> How about separating these resources like this, >> URI-path "telemetry-config": >>     telemetry-config and capacity things >> URI-path "telemetry": >>     periodical traffic/connection metric and attack-detail (if exist) >> >> >> regards, >> Kaname >> >> >> On 2019/11/08 20:16, kaname nishizuka wrote: >>> Hi Med, >>> >>> Thanks! I'll look into and use it. >>> >>> kaname >>> >>> On 2019/11/08 16:58, mohamed.boucadair@orange.com wrote: >>>> Hi Kaname, >>>> >>>> Apologies for the delay to have this done. >>>> >>>> The draft notes the following: >>>> >>>>        Notes: (1) Check naming conflict to ease CBOR mapping (e.g, low- >>>>        percentile is defined as yang:gauge64, list, or container). >>>>        Distinct names may be considered. >>>> >>>> Although this is not an issue in YANG, I updated some YANG attribute >> names to avoid cbor naming conflicts. The updated YANG module is available >> at: https://github.com/boucadair/draft-dots-telemetry/blob/master/draft- >> reddy-dots-telemetry-04.txt >>>> Please find below the mapping table. An online version is also available >> at: https://github.com/boucadair/draft-dots-telemetry/blob/master/mapping- >> table.txt. >>>> +----------------------+-------------+------+---------------+--------+ >>>>     | Parameter Name       | YANG        | CBOR | CBOR Major | JSON   | >>>>     |                      | Type        | Key  |    Type &     | >> Type   | >>>>     |                      |             |      | Information |        | >>>> +----------------------+-------------+------+---------------+--------+ >>>>     | ietf-dots-signal-cha |             |      | |        | >>>>     | nnel:telemetry       | container   |0x8008| 5 map | Object | >>>>     | tcid                 | uint32      |0x8009| 0 unsigned | Number | >>>>     | telemetry-config     | container   |0x800A| 5 map | Object | >>>>     | low-percentile       | decimal64   |0x800B| 6 tag 4 |        | >>>>     |                      |             |      |  [-2, integer]| String >> | >>>>     | mid-percentile       | decimal64   |0x800C| 6 tag 4 |        | >>>>     |                      |             |      |  [-2, integer]| String >> | >>>>     | high-percentile      | decimal64   |0x800D| 6 tag 4 |        | >>>>     |                      |             |      |  [-2, integer]| String >> | >>>>     | unit-config          | list        |0x800E| 4 array | Array  | >>>>     | unit                 | enumeration |0x800F| 0 unsigned | String | >>>>     | status               | boolean     |0x8010| 7 bits 20 | False  | >>>>     |                      |             |      | 7 bits 21 | True   | >>>>     | total-pipe-capability| list        |0x8011| 4 array | Array  | >>>>     | pipe                 | uint64      |0x8012| 0 unsigned | String | >>>>     | pre-mitigation       | list        |0x8013| 4 array | Array  | >>>>     | telemetry-id         | uint32      |0x8014| 0 unsigned | Number | >>>>     | total-traffic-       |             |      | |        | >>>>     |    normal-baseline   | list        |0x8015| 4 array | Array  | >>>>     | low-percentile-g     | yang:gauge64|0x8016| 0 unsigned | String | >>>>     | mid-percentile-g     | yang:gauge64|0x8017| 0 unsigned | String | >>>>     | high-percentile-g    | yang:gauge64|0x8018| 0 unsigned | String | >>>>     | peak-g               | yang:gauge64|0x8019| 0 unsigned | String | >>>>     | total-attack-traffic | list        |0x801A| 4 array | Array  | >>>>     | total-traffic        | list        |0x801B| 4 array | Array  | >>>>     | total-connection-    |             |      | |        | >>>>     |        capacity      | list        |0x801C| 4 array | Array  | >>>>     | connection           | uint64      |0x801D| 0 unsigned | String | >>>>     | connection-client    | uint64      |0x801E| 0 unsigned | String | >>>>     | embryonic            | uint64      |0x801F| 0 unsigned | String | >>>>     | embryonic-client     | uint64      |0x8020| 0 unsigned | String | >>>>     | connection-ps        | uint64      |0x8021| 0 unsigned | String | >>>>     | connection-client-ps | uint64      |0x8022| 0 unsigned | String | >>>>     | request-ps           | uint64      |0x8023| 0 unsigned | String | >>>>     | request-client-ps    | uint64      |0x8024| 0 unsigned | String | >>>>     | partial-request-ps   | uint64      |0x8025| 0 unsigned | String | >>>>     | mitigation-start     | uint64      |0x8026| 0 unsigned | String | >>>>     | partial-request-     |             |      | |        | >>>>     |        client-ps     | uint64      |0x8027| 0 unsigned | String | >>>>     | total-attack-        |             |      | |        | >>>>     |        connection    | container   |0x8028| 5 map | Object | >>>>     | low-percentile-l     | list        |0x8029| 4 array | Array  | >>>>     | mid-percentile-l     | list        |0x802A| 4 array | Array  | >>>>     | high-percentile-l    | list        |0x802B| 4 array | Array  | >>>>     | peak                 | list        |0x802C| 4 array | Array  | >>>>     | attack-detail        | container   |0x802D| 5 map | Object | >>>>     | vendor-id            | uint32      |0x802E| 0 unsigned | Number | >>>>     | attack-id            | string      |0x802F| 3 text string | String >> | >>>>     | attack-name          | string      |0x8030| 3 text string | String >> | >>>>     | attack-severity      | enumeration |0x8031| 0 unsigned | String | >>>>     | start-time           | uint64      |0x8032| 0 unsigned | String | >>>>     | end-time             | uint64      |0x8033| 0 unsigned | String | >>>>     | source-count         | container   |0x8034| 5 map | Object | >>>>     | top-talker           | container   |0x8035| 5 map | Object | >>>>     | spoofed-status       | boolean     |0x8036| 7 bits 20 | False  | >>>>     |                      |             |      | 7 bits 21 | True   | >>>>     | low-percentile-c     | container   |0x8037| 5 map | Object | >>>>     | mid-percentile-c     | container   |0x8038| 5 map | Object | >>>>     | high-percentile-c    | container   |0x8039| 5 map | Object | >>>>     | peak-c               | container   |0x803A| 5 map | Object | >>>> +----------------------+-------------+------+---------------+--------+ >>>> >>>> Cheers, >>>> Med >>>> >>>>> -----Message d'origine----- >>>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de >>>>> mohamed.boucadair@orange.com >>>>> Envoyé : mercredi 23 octobre 2019 13:25 >>>>> À : kaname nishizuka; dots@ietf.org >>>>> Objet : Re: [Dots] TR: New Version Notification for draft-reddy-dots- >>>>> telemetry-04.txt >>>>> >>>>> Hi Kaname, >>>>> >>>>> Thank you for sharing the feedback. >>>>> >>>>> We will prepare an initial version of the mapping table that we will >> put on >>>>> the github. That table will be integrated in the next iteration of the >>>>> draft. >>>>> >>>>> Cheers, >>>>> Med >>>>> >>>>>> -----Message d'origine----- >>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>>> Envoyé : mercredi 23 octobre 2019 11:07 >>>>>> À : BOUCADAIR Mohamed TGI/OLN; dots@ietf.org >>>>>> Objet : Re: [Dots] TR: New Version Notification for draft-reddy-dots- >>>>>> telemetry-04.txt >>>>>> >>>>>> Hi Med, all, >>>>>> >>>>>> I'm planning to implement dots telemetry features into go-dots. >>>>>> Though it would evolve, ifan initial version of yang/cbor mapping was >>>>>> defined, it helps me a lot. >>>>>> >>>>>> thanks, >>>>>> Kaname >>>>>> >>>>>> >>>>>> On 2019/10/18 18:38, mohamed.boucadair@orange.com wrote: >>>>>>> Hi all, >>>>>>> >>>>>>> Although we are waiting for a call for adoption for this draft, we >> made >>>>>> some changes which you can track with the diff provided below. >>>>>>> Cheers, >>>>>>> Med >>>>>>> >>>>>>>> -----Message d'origine----- >>>>>>>> De : internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] >>>>>>>> Envoyé : vendredi 18 octobre 2019 11:33 >>>>>>>> À : chenmeiling; BOUCADAIR Mohamed TGI/OLN; Meiling Chen; >> Tirumaleswar >>>>>>>> Reddy; Ehud Doron; Reddy K >>>>>>>> Objet : New Version Notification for draft-reddy-dots-telemetry- >> 04.txt >>>>>>>> >>>>>>>> A new version of I-D, draft-reddy-dots-telemetry-04.txt >>>>>>>> has been successfully submitted by Mohamed Boucadair and posted to >> the >>>>>>>> IETF repository. >>>>>>>> >>>>>>>> Name:        draft-reddy-dots-telemetry >>>>>>>> Revision:    04 >>>>>>>> Title:        Distributed Denial-of-Service Open Threat Signaling >>>>> (DOTS) >>>>>>>> Telemetry >>>>>>>> Document date:    2019-10-18 >>>>>>>> Group:        Individual Submission >>>>>>>> Pages:        41 >>>>>>>> URL: https://www.ietf.org/internet-drafts/draft-reddy-dots- >>>>>>>> telemetry-04.txt >>>>>>>> Status: https://datatracker.ietf.org/doc/draft-reddy-dots- >>>>>>>> telemetry/ >>>>>>>> Htmlized: https://tools.ietf.org/html/draft-reddy-dots- >>>>> telemetry- >>>>>> 04 >>>>>>>> Htmlized: https://datatracker.ietf.org/doc/html/draft-reddy- >>>>> dots- >>>>>>>> telemetry >>>>>>>> Diff: https://www.ietf.org/rfcdiff?url2=draft-reddy-dots- >>>>>>>> telemetry-04 >>>>>>>> >>>>>>>> Abstract: >>>>>>>>      This document aims to enrich DOTS signal channel protocol with >>>>>>>>      various telemetry attributes allowing optimal DDoS attack >>>>>> mitigation. >>>>>>>>      This document specifies the normal traffic baseline and attack >>>>>>>>      traffic telemetry attributes a DOTS client can convey to its >> DOTS >>>>>>>>      server in the mitigation request, the mitigation status >> telemetry >>>>>>>>      attributes a DOTS server can communicate to a DOTS client, and >> the >>>>>>>>      mitigation efficacy telemetry attributes a DOTS client can >>>>>>>>      communicate to a DOTS server.  The telemetry attributes can >> assist >>>>>>>>      the mitigator to choose the DDoS mitigation techniques and >> perform >>>>>>>>      optimal DDoS attack mitigation. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Please note that it may take a couple of minutes from the time of >>>>>>>> submission >>>>>>>> until the htmlized version and diff are available at tools.ietf.org. >>>>>>>> >>>>>>>> The IETF Secretariat >>>>>>> _______________________________________________ >>>>>>> Dots mailing list >>>>>>> Dots@ietf.org >>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>> _______________________________________________ >>>>> Dots mailing list >>>>> Dots@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>> Dots mailing list >>> Dots@ietf.org >>> https://www.ietf.org/mailman/listinfo/dots >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots From nobody Tue Nov 19 22:19:43 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AC1712092A for ; Tue, 19 Nov 2019 22:19:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zk_yxT3_a277 for ; Tue, 19 Nov 2019 22:19:36 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5C6D120AAF for ; Tue, 19 Nov 2019 22:19:36 -0800 (PST) Received: from dhcp-9c88.meeting.ietf.org (dhcp-9c88.meeting.ietf.org [31.133.156.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 47Hswk2RlRzyZs; Wed, 20 Nov 2019 07:19:34 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313D89A8@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Wed, 20 Nov 2019 14:19:32 +0800 Cc: "dots@ietf.org" X-Mao-Original-Outgoing-Id: 595923570.158006-024023931089e163c2280f2a1fef940f Content-Transfer-Encoding: quoted-printable Message-Id: References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <8E353427-9380-44CF-B151-63DB0106BFCA@tzi.org> <787AE7BB302AE849A7480A190F8B9330313D89A8@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 06:19:42 -0000 >> Thank you. >> I still have a few questions, but I think this looks very good. >>=20 >> 4.4 says: >> Mitigation requests MUST NOT be delayed >> because of other congestion control checks. >> What might those be? >=20 > [Med] A too low probing rate for example as indicated in the sentence = right after that excerpt. There is a risk that mitigation requests are = delayed (or that heartbeats are not sent which may lead to session = liveness checks). =20 >=20 >=20 >> (You don=E2=80=99t want to be in a situation where you send a ton of = mitigation >> requests that are mostly dropped at the tail of a queue.) >>=20 >=20 > [Med] Yes, we don't that. The authoritative rule is as follows:=20 >=20 > Requests marked by the DOTS client as Non-confirmable messages are > sent at regular intervals until a response is received from the DOTS > server. If the DOTS client cannot maintain an RTT estimate, it MUST > NOT send more than one Non-confirmable request every 3 seconds, and > SHOULD use an even less aggressive rate whenever possible (case 2 in > Section 3.1.3 of [RFC8085]). =20 And if it can? >=20 >=20 >> Before Figure 27, it says: >>=20 >> The PUT request used for DOTS heartbeat MUST NOT have a >> 'cuid', 'cdid,' or 'mid' Uri-Path. Such PUT requests MUST = NOT be >>=20 >> relayed by DOTS gateways. >>=20 >> Why? (And what should the DOTS gateways do instead?) >=20 > [Med] Session loss detect and recovery is local to an agent and its = immediate peer. Heartbeats are thus not relayed.=20 Ah, I was confused. Where is =E2=80=9CDOTS gateway=E2=80=9D defined? I=E2=80=99m assuming this is not like a CoAP Proxy? It would need to expose the equivalent to /hb. > We can update as follows:=20 >=20 > "This procedure occurs between a DOTS agent and its immediate peer = DOTS agent. As such, this GET request MUST NOT be relayed by a DOTS = gateway. The PUT request used for DOTS heartbeat MUST NOT have a = =E2=80=98cuid', 'cdid,' or 'mid' Uri-Path." This doesn=E2=80=99t quite address the above, though. Gr=C3=BC=C3=9Fe, Carsten From nobody Tue Nov 19 22:50:13 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAA2B120255 for ; Tue, 19 Nov 2019 22:50:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6MtTmbthOYj3 for ; Tue, 19 Nov 2019 22:50:08 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15448120801 for ; Tue, 19 Nov 2019 22:50:08 -0800 (PST) Received: from opfedar00.francetelecom.fr (unknown [xx.xx.xx.11]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 47Htby1rzrz7vBH; Wed, 20 Nov 2019 07:50:06 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.101]) by opfedar00.francetelecom.fr (ESMTP service) with ESMTP id 47Htby186dzCqjh; Wed, 20 Nov 2019 07:50:06 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6F.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Wed, 20 Nov 2019 07:50:06 +0100 From: To: Carsten Bormann CC: "dots@ietf.org" Thread-Topic: Improve controllability and predictability of keepalives Thread-Index: AdWZOjG0GmH8bbOEScaak/2iE6U5+QGMEoNWAABNNcA= Date: Wed, 20 Nov 2019 06:50:05 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313DAD87@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <8E353427-9380-44CF-B151-63DB0106BFCA@tzi.org> <787AE7BB302AE849A7480A190F8B9330313D89A8@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 06:50:12 -0000 SGkgQ2Fyc3RlbiwgDQoNClBsZWFzZSBzZWUgaW5saW5lLg0KDQpDaGVlcnMsDQpNZWQNCg0KPiAt LS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDogQ2Fyc3RlbiBCb3JtYW5uIFttYWls dG86Y2Fib0B0emkub3JnXQ0KPiBFbnZvecOpwqA6IG1lcmNyZWRpIDIwIG5vdmVtYnJlIDIwMTkg MDc6MjANCj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgVEdJL09MTg0KPiBDY8KgOiBkb3RzQGll dGYub3JnDQo+IE9iamV0wqA6IFJlOiBJbXByb3ZlIGNvbnRyb2xsYWJpbGl0eSBhbmQgcHJlZGlj dGFiaWxpdHkgb2Yga2VlcGFsaXZlcw0KPiANCj4gPj4gVGhhbmsgeW91Lg0KPiA+PiBJIHN0aWxs IGhhdmUgYSBmZXcgcXVlc3Rpb25zLCBidXQgSSB0aGluayB0aGlzIGxvb2tzIHZlcnkgZ29vZC4N Cj4gPj4NCj4gPj4gNC40IHNheXM6DQo+ID4+ICAgICAgICAgICBNaXRpZ2F0aW9uIHJlcXVlc3Rz IE1VU1QgTk9UIGJlIGRlbGF5ZWQNCj4gPj4gCSAgIGJlY2F1c2Ugb2Ygb3RoZXIgY29uZ2VzdGlv biBjb250cm9sIGNoZWNrcy4NCj4gPj4gV2hhdCBtaWdodCB0aG9zZSBiZT8NCj4gPg0KPiA+IFtN ZWRdIEEgdG9vIGxvdyBwcm9iaW5nIHJhdGUgZm9yIGV4YW1wbGUgYXMgaW5kaWNhdGVkIGluIHRo ZSBzZW50ZW5jZQ0KPiByaWdodCBhZnRlciB0aGF0IGV4Y2VycHQuIFRoZXJlIGlzIGEgcmlzayB0 aGF0IG1pdGlnYXRpb24gcmVxdWVzdHMgYXJlDQo+IGRlbGF5ZWQgKG9yIHRoYXQgaGVhcnRiZWF0 cyBhcmUgbm90IHNlbnQgd2hpY2ggbWF5IGxlYWQgdG8gc2Vzc2lvbiBsaXZlbmVzcw0KPiBjaGVj a3MpLg0KPiA+DQo+ID4NCj4gPj4gKFlvdSBkb27igJl0IHdhbnQgdG8gYmUgaW4gYSBzaXR1YXRp b24gd2hlcmUgeW91IHNlbmQgYSB0b24gb2YgbWl0aWdhdGlvbg0KPiA+PiByZXF1ZXN0cyB0aGF0 IGFyZSBtb3N0bHkgZHJvcHBlZCBhdCB0aGUgdGFpbCBvZiBhIHF1ZXVlLikNCj4gPj4NCj4gPg0K PiA+IFtNZWRdIFllcywgd2UgZG9uJ3QgdGhhdC4gVGhlIGF1dGhvcml0YXRpdmUgcnVsZSBpcyBh cyBmb2xsb3dzOg0KPiA+DQo+ID4gICBSZXF1ZXN0cyBtYXJrZWQgYnkgdGhlIERPVFMgY2xpZW50 IGFzIE5vbi1jb25maXJtYWJsZSBtZXNzYWdlcyBhcmUNCj4gPiAgIHNlbnQgYXQgcmVndWxhciBp bnRlcnZhbHMgdW50aWwgYSByZXNwb25zZSBpcyByZWNlaXZlZCBmcm9tIHRoZSBET1RTDQo+ID4g ICBzZXJ2ZXIuICBJZiB0aGUgRE9UUyBjbGllbnQgY2Fubm90IG1haW50YWluIGFuIFJUVCBlc3Rp bWF0ZSwgaXQgTVVTVA0KPiA+ICAgTk9UIHNlbmQgbW9yZSB0aGFuIG9uZSBOb24tY29uZmlybWFi bGUgcmVxdWVzdCBldmVyeSAzIHNlY29uZHMsIGFuZA0KPiA+ICAgU0hPVUxEIHVzZSBhbiBldmVu IGxlc3MgYWdncmVzc2l2ZSByYXRlIHdoZW5ldmVyIHBvc3NpYmxlIChjYXNlIDIgaW4NCj4gPiAg IFNlY3Rpb24gMy4xLjMgb2YgW1JGQzgwODVdKS4NCj4gDQo+IEFuZCBpZiBpdCBjYW4/DQoNCltN ZWRdIEl0IGRvZXMgdGhlIGZvbGxvd2luZzogDQoNCiAgIERPVFMgYWdlbnRzIE1VU1QgTk9UIHNl bmQgbW9yZSB0aGFuIG9uZSBVRFAgZGF0YWdyYW0gcGVyIHJvdW5kLXRyaXANCiAgIHRpbWUgKFJU VCkgdG8gdGhlIHBlZXIgRE9UUyBhZ2VudCBvbiBhdmVyYWdlIC4uLg0KDQo+IA0KPiA+DQo+ID4N Cj4gPj4gQmVmb3JlIEZpZ3VyZSAyNywgaXQgc2F5czoNCj4gPj4NCj4gPj4gICAgICAgICAgIFRo ZSBQVVQgcmVxdWVzdCB1c2VkIGZvciBET1RTIGhlYXJ0YmVhdCBNVVNUIE5PVCBoYXZlIGENCj4g Pj4gCSAgICdjdWlkJywgJ2NkaWQsJyBvciAnbWlkJyBVcmktUGF0aC4gIFN1Y2ggUFVUIHJlcXVl c3RzIE1VU1QgTk9UIGJlDQo+ID4+DQo+ID4+IAkgICByZWxheWVkIGJ5IERPVFMgZ2F0ZXdheXMu DQo+ID4+DQo+ID4+IFdoeT8gIChBbmQgd2hhdCBzaG91bGQgdGhlIERPVFMgZ2F0ZXdheXMgZG8g aW5zdGVhZD8pDQo+ID4NCj4gPiBbTWVkXSBTZXNzaW9uIGxvc3MgZGV0ZWN0IGFuZCByZWNvdmVy eSBpcyBsb2NhbCB0byBhbiBhZ2VudCBhbmQgaXRzDQo+IGltbWVkaWF0ZSBwZWVyLiBIZWFydGJl YXRzIGFyZSB0aHVzIG5vdCByZWxheWVkLg0KPiANCj4gQWgsIEkgd2FzIGNvbmZ1c2VkLg0KPiBX aGVyZSBpcyDigJxET1RTIGdhdGV3YXnigJ0gZGVmaW5lZD8NCg0KW01lZF0gSXQgaXMgZGVmaW5l ZCBpbiBkcmFmdC1pZXRmLWRvdHMtYXJjaGl0ZWN0dXJlLTE0I3NlY3Rpb24tMi4yLjM6IA0KDQo9 PT09PQ0KICAgVHJhZGl0aW9uYWwgY2xpZW50L3NlcnZlciByZWxhdGlvbnNoaXBzIG1heSBiZSBl eHBhbmRlZCBieSBjaGFpbmluZw0KICAgRE9UUyBzZXNzaW9ucy4gIFRoaXMgY2hhaW5pbmcgaXMg ZW5hYmxlZCB0aHJvdWdoICJsb2dpY2FsDQogICBjb25jYXRlbmF0aW9uIiBvZiBhIERPVFMgc2Vy dmVyIGFuZCBhIERPVFMgY2xpZW50Lg0KDQogICBBIERPVFMgZ2F0ZXdheSBtYXkgYmUgZGVwbG95 ZWQgY2xpZW50LXNpZGUsIHNlcnZlci1zaWRlIG9yIGJvdGguICBUaGUNCiAgIGdhdGV3YXkgbWF5 IHRlcm1pbmF0ZSBtdWx0aXBsZSBkaXNjcmV0ZSBjbGllbnQgY29ubmVjdGlvbnMgYW5kIG1heQ0K ICAgYWdncmVnYXRlIHRoZXNlIGludG8gYSBzaW5nbGUgb3IgbXVsdGlwbGUgRE9UUyBzZXNzaW9u cy4NCg0KICAgVGhlIERPVFMgZ2F0ZXdheSB3aWxsIGFwcGVhciBhcyBhIHNlcnZlciB0byBpdHMg ZG93bnN0cmVhbSBhZ2VudHMgYW5kDQogICBhcyBhIGNsaWVudCB0byBpdHMgdXBzdHJlYW0gYWdl bnRzLCBhIGZ1bmN0aW9uYWwgY29uY2F0ZW5hdGlvbiBvZiB0aGUNCiAgIERPVFMgY2xpZW50IGFu ZCBzZXJ2ZXIgcm9sZXMsIGFzIGRlcGljdGVkIGluIEZpZ3VyZSA0Og0KDQogICAgICAgICAgICAg ICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0rDQogICAgICAgICAgICAgICAgICAgICAgICAgfCAg ICB8IEQgfCAgICB8DQogICAgICAgICArLS0tLSsgICAgICAgICAgfCAgICB8IE8gfCAgICB8ICAg ICAgICAgKy0tLS0rDQogICAgICAgICB8IGMxIHwtLS0tLS0tLS0tfCBzMSB8IFQgfCBjMiB8LS0t LS0tLS0tfCBzMiB8DQogICAgICAgICArLS0tLSsgICAgICAgICAgfCAgICB8IFMgfCAgICB8ICAg ICAgICAgKy0tLS0rDQogICAgICAgICAgICAgICAgICAgICAgICAgfCAgICB8IEcgfCAgICB8DQog ICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0rDQo9PT09PT0NCg0KPiBJ4oCZ bSBhc3N1bWluZyB0aGlzIGlzIG5vdCBsaWtlIGEgQ29BUCBQcm94eT8NCj4gSXQgd291bGQgbmVl ZCB0byBleHBvc2UgdGhlIGVxdWl2YWxlbnQgdG8gL2hiLg0KDQpbTWVkXSBZZXMsIG5ldmVydGhl bGVzcyB0aGUgY2xpZW50IGRvZXMgbm90IG5lZWQgdG8gYXNzZXNzIHRoZSBlbmQtdG8tZW5kIGNv bm5lY3Rpb24sIGJ1dCBvbmx5IHRoZSBvbmUgaXQgdXNlcyB0byBwbGFjZSBpdHMgbWl0aWdhdGlv biByZXF1ZXN0cyAoaXQgaXMgbm90IGV2ZW4gYXdhcmUgYWJvdXQgdGhlIGV4aXN0ZW5jZSBvZiB0 aGUgdWx0aW1hdGUgc2VydmVyKS4gTGlrZXdpc2UsIHRoZSBzZXJ2ZXIgZG9tYWluIChpbmNsdWRl cyBib3RoIGd3IGFuZCBzZXJ2ZXIpIGRvZXMgb25seSBuZWVkIHRvIGFzc2VzcyBpZiBpdCBjYW4g cmVhY2ggb3V0IGEgY2xpZW50IHRvIHRyaWdnZXIuIA0KDQo+IA0KPiA+IFdlIGNhbiB1cGRhdGUg YXMgZm9sbG93czoNCj4gPg0KPiA+ICJUaGlzIHByb2NlZHVyZSBvY2N1cnMgYmV0d2VlbiBhIERP VFMgYWdlbnQgYW5kIGl0cyBpbW1lZGlhdGUgcGVlciBET1RTDQo+IGFnZW50LiBBcyBzdWNoLCB0 aGlzIEdFVCByZXF1ZXN0IE1VU1QgTk9UIGJlIHJlbGF5ZWQgYnkgYSBET1RTIGdhdGV3YXkuIFRo ZQ0KPiBQVVQgcmVxdWVzdCB1c2VkIGZvciBET1RTIGhlYXJ0YmVhdCBNVVNUIE5PVCBoYXZlIGEg 4oCYY3VpZCcsICdjZGlkLCcgb3INCj4gJ21pZCcgVXJpLVBhdGguIg0KPiANCj4gVGhpcyBkb2Vz buKAmXQgcXVpdGUgYWRkcmVzcyB0aGUgYWJvdmUsIHRob3VnaC4NCj4gDQo+IEdyw7zDn2UsIENh cnN0ZW4NCg0K From nobody Tue Nov 19 22:51:36 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F4D7120801 for ; Tue, 19 Nov 2019 22:51:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hdp2V0HgENEN for ; Tue, 19 Nov 2019 22:51:32 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B631120255 for ; Tue, 19 Nov 2019 22:51:32 -0800 (PST) Received: from dhcp-9c88.meeting.ietf.org (dhcp-9c88.meeting.ietf.org [31.133.156.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 47HtdZ3mb4z107g; Wed, 20 Nov 2019 07:51:30 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313DAD87@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Date: Wed, 20 Nov 2019 14:51:28 +0800 Cc: "dots@ietf.org" X-Mao-Original-Outgoing-Id: 595925486.434535-decb5dad1a1c1321795bf880c6d8f30a Content-Transfer-Encoding: quoted-printable Message-Id: <0BA3CB18-4B5D-4EC8-8FD1-29EB3AF4D556@tzi.org> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <8E353427-9380-44CF-B151-63DB0106BFCA@tzi.org> <787AE7BB302AE849A7480A190F8B9330313D89A8@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313DAD87@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 06:51:35 -0000 Thank you. I think my concerns are addressed. Gr=C3=BC=C3=9Fe, Carsten > On Nov 20, 2019, at 14:50, = wrote: >=20 > Hi Carsten,=20 >=20 > Please see inline. >=20 > Cheers, > Med >=20 >> -----Message d'origine----- >> De : Carsten Bormann [mailto:cabo@tzi.org] >> Envoy=C3=A9 : mercredi 20 novembre 2019 07:20 >> =C3=80 : BOUCADAIR Mohamed TGI/OLN >> Cc : dots@ietf.org >> Objet : Re: Improve controllability and predictability of keepalives >>=20 >>>> Thank you. >>>> I still have a few questions, but I think this looks very good. >>>>=20 >>>> 4.4 says: >>>> Mitigation requests MUST NOT be delayed >>>> because of other congestion control checks. >>>> What might those be? >>>=20 >>> [Med] A too low probing rate for example as indicated in the = sentence >> right after that excerpt. There is a risk that mitigation requests = are >> delayed (or that heartbeats are not sent which may lead to session = liveness >> checks). >>>=20 >>>=20 >>>> (You don=E2=80=99t want to be in a situation where you send a ton = of mitigation >>>> requests that are mostly dropped at the tail of a queue.) >>>>=20 >>>=20 >>> [Med] Yes, we don't that. The authoritative rule is as follows: >>>=20 >>> Requests marked by the DOTS client as Non-confirmable messages are >>> sent at regular intervals until a response is received from the = DOTS >>> server. If the DOTS client cannot maintain an RTT estimate, it = MUST >>> NOT send more than one Non-confirmable request every 3 seconds, and >>> SHOULD use an even less aggressive rate whenever possible (case 2 = in >>> Section 3.1.3 of [RFC8085]). >>=20 >> And if it can? >=20 > [Med] It does the following:=20 >=20 > DOTS agents MUST NOT send more than one UDP datagram per round-trip > time (RTT) to the peer DOTS agent on average ... >=20 >>=20 >>>=20 >>>=20 >>>> Before Figure 27, it says: >>>>=20 >>>> The PUT request used for DOTS heartbeat MUST NOT have a >>>> 'cuid', 'cdid,' or 'mid' Uri-Path. Such PUT requests MUST = NOT be >>>>=20 >>>> relayed by DOTS gateways. >>>>=20 >>>> Why? (And what should the DOTS gateways do instead?) >>>=20 >>> [Med] Session loss detect and recovery is local to an agent and its >> immediate peer. Heartbeats are thus not relayed. >>=20 >> Ah, I was confused. >> Where is =E2=80=9CDOTS gateway=E2=80=9D defined? >=20 > [Med] It is defined in draft-ietf-dots-architecture-14#section-2.2.3:=20= >=20 > =3D=3D=3D=3D=3D > Traditional client/server relationships may be expanded by chaining > DOTS sessions. This chaining is enabled through "logical > concatenation" of a DOTS server and a DOTS client. >=20 > A DOTS gateway may be deployed client-side, server-side or both. = The > gateway may terminate multiple discrete client connections and may > aggregate these into a single or multiple DOTS sessions. >=20 > The DOTS gateway will appear as a server to its downstream agents = and > as a client to its upstream agents, a functional concatenation of = the > DOTS client and server roles, as depicted in Figure 4: >=20 > +-------------+ > | | D | | > +----+ | | O | | +----+ > | c1 |----------| s1 | T | c2 |---------| s2 | > +----+ | | S | | +----+ > | | G | | > +-------------+ > =3D=3D=3D=3D=3D=3D >=20 >> I=E2=80=99m assuming this is not like a CoAP Proxy? >> It would need to expose the equivalent to /hb. >=20 > [Med] Yes, nevertheless the client does not need to assess the = end-to-end connection, but only the one it uses to place its mitigation = requests (it is not even aware about the existence of the ultimate = server). Likewise, the server domain (includes both gw and server) does = only need to assess if it can reach out a client to trigger.=20 >=20 >>=20 >>> We can update as follows: >>>=20 >>> "This procedure occurs between a DOTS agent and its immediate peer = DOTS >> agent. As such, this GET request MUST NOT be relayed by a DOTS = gateway. The >> PUT request used for DOTS heartbeat MUST NOT have a =E2=80=98cuid', = 'cdid,' or >> 'mid' Uri-Path." >>=20 >> This doesn=E2=80=99t quite address the above, though. >>=20 >> Gr=C3=BC=C3=9Fe, Carsten From nobody Tue Nov 19 23:01:16 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EFC412080F for ; Tue, 19 Nov 2019 23:00:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id itB9Ba7HKjSQ for ; Tue, 19 Nov 2019 23:00:49 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1053120818 for ; Tue, 19 Nov 2019 23:00:48 -0800 (PST) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 47HtrH1D3dzFqTK; Wed, 20 Nov 2019 08:00:47 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.32]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 47HtrH0HVszCqkT; Wed, 20 Nov 2019 08:00:47 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7C.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Wed, 20 Nov 2019 08:00:46 +0100 From: To: Carsten Bormann CC: "dots@ietf.org" Thread-Topic: Improve controllability and predictability of keepalives Thread-Index: AdWZOjG0GmH8bbOEScaak/2iE6U5+QGNMAI+AAA8O7A= Date: Wed, 20 Nov 2019 07:00:46 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313DADAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <8E353427-9380-44CF-B151-63DB0106BFCA@tzi.org> <787AE7BB302AE849A7480A190F8B9330313D89A8@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313DAD87@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <0BA3CB18-4B5D-4EC8-8FD1-29EB3AF4D556@tzi.org> In-Reply-To: <0BA3CB18-4B5D-4EC8-8FD1-29EB3AF4D556@tzi.org> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 07:00:54 -0000 UmUtLA0KDQpUaGFuayB5b3UsIENhcnN0ZW4uDQoNCkkgd2lsbCBzdWJtaXQgdGhlIG5ldyB2ZXJz aW9uIHNvb24uDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0t LQ0KPiBEZcKgOiBDYXJzdGVuIEJvcm1hbm4gW21haWx0bzpjYWJvQHR6aS5vcmddDQo+IEVudm95 w6nCoDogbWVyY3JlZGkgMjAgbm92ZW1icmUgMjAxOSAwNzo1MQ0KPiDDgMKgOiBCT1VDQURBSVIg TW9oYW1lZCBUR0kvT0xODQo+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gT2JqZXTCoDogUmU6IElt cHJvdmUgY29udHJvbGxhYmlsaXR5IGFuZCBwcmVkaWN0YWJpbGl0eSBvZiBrZWVwYWxpdmVzDQo+ IA0KPiBUaGFuayB5b3UuDQo+IA0KPiBJIHRoaW5rIG15IGNvbmNlcm5zIGFyZSBhZGRyZXNzZWQu DQo+IA0KPiBHcsO8w59lLCBDYXJzdGVuDQo+IA0KPiANCj4gPiBPbiBOb3YgMjAsIDIwMTksIGF0 IDE0OjUwLCA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4NCj4gPG1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb20+IHdyb3RlOg0KPiA+DQo+ID4gSGkgQ2Fyc3RlbiwNCj4gPg0KPiA+IFBs ZWFzZSBzZWUgaW5saW5lLg0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0KPiA+DQo+ID4+IC0t LS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+PiBEZSA6IENhcnN0ZW4gQm9ybWFubiBbbWFp bHRvOmNhYm9AdHppLm9yZ10NCj4gPj4gRW52b3nDqSA6IG1lcmNyZWRpIDIwIG5vdmVtYnJlIDIw MTkgMDc6MjANCj4gPj4gw4AgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xODQo+ID4+IENjIDog ZG90c0BpZXRmLm9yZw0KPiA+PiBPYmpldCA6IFJlOiBJbXByb3ZlIGNvbnRyb2xsYWJpbGl0eSBh bmQgcHJlZGljdGFiaWxpdHkgb2Yga2VlcGFsaXZlcw0KPiA+Pg0KPiA+Pj4+IFRoYW5rIHlvdS4N Cj4gPj4+PiBJIHN0aWxsIGhhdmUgYSBmZXcgcXVlc3Rpb25zLCBidXQgSSB0aGluayB0aGlzIGxv b2tzIHZlcnkgZ29vZC4NCj4gPj4+Pg0KPiA+Pj4+IDQuNCBzYXlzOg0KPiA+Pj4+ICAgICAgICAg IE1pdGlnYXRpb24gcmVxdWVzdHMgTVVTVCBOT1QgYmUgZGVsYXllZA0KPiA+Pj4+IAkgICBiZWNh dXNlIG9mIG90aGVyIGNvbmdlc3Rpb24gY29udHJvbCBjaGVja3MuDQo+ID4+Pj4gV2hhdCBtaWdo dCB0aG9zZSBiZT8NCj4gPj4+DQo+ID4+PiBbTWVkXSBBIHRvbyBsb3cgcHJvYmluZyByYXRlIGZv ciBleGFtcGxlIGFzIGluZGljYXRlZCBpbiB0aGUgc2VudGVuY2UNCj4gPj4gcmlnaHQgYWZ0ZXIg dGhhdCBleGNlcnB0LiBUaGVyZSBpcyBhIHJpc2sgdGhhdCBtaXRpZ2F0aW9uIHJlcXVlc3RzIGFy ZQ0KPiA+PiBkZWxheWVkIChvciB0aGF0IGhlYXJ0YmVhdHMgYXJlIG5vdCBzZW50IHdoaWNoIG1h eSBsZWFkIHRvIHNlc3Npb24NCj4gbGl2ZW5lc3MNCj4gPj4gY2hlY2tzKS4NCj4gPj4+DQo+ID4+ Pg0KPiA+Pj4+IChZb3UgZG9u4oCZdCB3YW50IHRvIGJlIGluIGEgc2l0dWF0aW9uIHdoZXJlIHlv dSBzZW5kIGEgdG9uIG9mDQo+IG1pdGlnYXRpb24NCj4gPj4+PiByZXF1ZXN0cyB0aGF0IGFyZSBt b3N0bHkgZHJvcHBlZCBhdCB0aGUgdGFpbCBvZiBhIHF1ZXVlLikNCj4gPj4+Pg0KPiA+Pj4NCj4g Pj4+IFtNZWRdIFllcywgd2UgZG9uJ3QgdGhhdC4gVGhlIGF1dGhvcml0YXRpdmUgcnVsZSBpcyBh cyBmb2xsb3dzOg0KPiA+Pj4NCj4gPj4+ICBSZXF1ZXN0cyBtYXJrZWQgYnkgdGhlIERPVFMgY2xp ZW50IGFzIE5vbi1jb25maXJtYWJsZSBtZXNzYWdlcyBhcmUNCj4gPj4+ICBzZW50IGF0IHJlZ3Vs YXIgaW50ZXJ2YWxzIHVudGlsIGEgcmVzcG9uc2UgaXMgcmVjZWl2ZWQgZnJvbSB0aGUgRE9UUw0K PiA+Pj4gIHNlcnZlci4gIElmIHRoZSBET1RTIGNsaWVudCBjYW5ub3QgbWFpbnRhaW4gYW4gUlRU IGVzdGltYXRlLCBpdCBNVVNUDQo+ID4+PiAgTk9UIHNlbmQgbW9yZSB0aGFuIG9uZSBOb24tY29u ZmlybWFibGUgcmVxdWVzdCBldmVyeSAzIHNlY29uZHMsIGFuZA0KPiA+Pj4gIFNIT1VMRCB1c2Ug YW4gZXZlbiBsZXNzIGFnZ3Jlc3NpdmUgcmF0ZSB3aGVuZXZlciBwb3NzaWJsZSAoY2FzZSAyIGlu DQo+ID4+PiAgU2VjdGlvbiAzLjEuMyBvZiBbUkZDODA4NV0pLg0KPiA+Pg0KPiA+PiBBbmQgaWYg aXQgY2FuPw0KPiA+DQo+ID4gW01lZF0gSXQgZG9lcyB0aGUgZm9sbG93aW5nOg0KPiA+DQo+ID4g ICBET1RTIGFnZW50cyBNVVNUIE5PVCBzZW5kIG1vcmUgdGhhbiBvbmUgVURQIGRhdGFncmFtIHBl ciByb3VuZC10cmlwDQo+ID4gICB0aW1lIChSVFQpIHRvIHRoZSBwZWVyIERPVFMgYWdlbnQgb24g YXZlcmFnZSAuLi4NCj4gPg0KPiA+Pg0KPiA+Pj4NCj4gPj4+DQo+ID4+Pj4gQmVmb3JlIEZpZ3Vy ZSAyNywgaXQgc2F5czoNCj4gPj4+Pg0KPiA+Pj4+ICAgICAgICAgIFRoZSBQVVQgcmVxdWVzdCB1 c2VkIGZvciBET1RTIGhlYXJ0YmVhdCBNVVNUIE5PVCBoYXZlIGENCj4gPj4+PiAJICAgJ2N1aWQn LCAnY2RpZCwnIG9yICdtaWQnIFVyaS1QYXRoLiAgU3VjaCBQVVQgcmVxdWVzdHMgTVVTVCBOT1Qg YmUNCj4gPj4+Pg0KPiA+Pj4+IAkgICByZWxheWVkIGJ5IERPVFMgZ2F0ZXdheXMuDQo+ID4+Pj4N Cj4gPj4+PiBXaHk/ICAoQW5kIHdoYXQgc2hvdWxkIHRoZSBET1RTIGdhdGV3YXlzIGRvIGluc3Rl YWQ/KQ0KPiA+Pj4NCj4gPj4+IFtNZWRdIFNlc3Npb24gbG9zcyBkZXRlY3QgYW5kIHJlY292ZXJ5 IGlzIGxvY2FsIHRvIGFuIGFnZW50IGFuZCBpdHMNCj4gPj4gaW1tZWRpYXRlIHBlZXIuIEhlYXJ0 YmVhdHMgYXJlIHRodXMgbm90IHJlbGF5ZWQuDQo+ID4+DQo+ID4+IEFoLCBJIHdhcyBjb25mdXNl ZC4NCj4gPj4gV2hlcmUgaXMg4oCcRE9UUyBnYXRld2F54oCdIGRlZmluZWQ/DQo+ID4NCj4gPiBb TWVkXSBJdCBpcyBkZWZpbmVkIGluIGRyYWZ0LWlldGYtZG90cy1hcmNoaXRlY3R1cmUtMTQjc2Vj dGlvbi0yLjIuMzoNCj4gPg0KPiA+ID09PT09DQo+ID4gICBUcmFkaXRpb25hbCBjbGllbnQvc2Vy dmVyIHJlbGF0aW9uc2hpcHMgbWF5IGJlIGV4cGFuZGVkIGJ5IGNoYWluaW5nDQo+ID4gICBET1RT IHNlc3Npb25zLiAgVGhpcyBjaGFpbmluZyBpcyBlbmFibGVkIHRocm91Z2ggImxvZ2ljYWwNCj4g PiAgIGNvbmNhdGVuYXRpb24iIG9mIGEgRE9UUyBzZXJ2ZXIgYW5kIGEgRE9UUyBjbGllbnQuDQo+ ID4NCj4gPiAgIEEgRE9UUyBnYXRld2F5IG1heSBiZSBkZXBsb3llZCBjbGllbnQtc2lkZSwgc2Vy dmVyLXNpZGUgb3IgYm90aC4gIFRoZQ0KPiA+ICAgZ2F0ZXdheSBtYXkgdGVybWluYXRlIG11bHRp cGxlIGRpc2NyZXRlIGNsaWVudCBjb25uZWN0aW9ucyBhbmQgbWF5DQo+ID4gICBhZ2dyZWdhdGUg dGhlc2UgaW50byBhIHNpbmdsZSBvciBtdWx0aXBsZSBET1RTIHNlc3Npb25zLg0KPiA+DQo+ID4g ICBUaGUgRE9UUyBnYXRld2F5IHdpbGwgYXBwZWFyIGFzIGEgc2VydmVyIHRvIGl0cyBkb3duc3Ry ZWFtIGFnZW50cyBhbmQNCj4gPiAgIGFzIGEgY2xpZW50IHRvIGl0cyB1cHN0cmVhbSBhZ2VudHMs IGEgZnVuY3Rpb25hbCBjb25jYXRlbmF0aW9uIG9mIHRoZQ0KPiA+ICAgRE9UUyBjbGllbnQgYW5k IHNlcnZlciByb2xlcywgYXMgZGVwaWN0ZWQgaW4gRmlndXJlIDQ6DQo+ID4NCj4gPiAgICAgICAg ICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLSsNCj4gPiAgICAgICAgICAgICAgICAgICAg ICAgICB8ICAgIHwgRCB8ICAgIHwNCj4gPiAgICAgICAgICstLS0tKyAgICAgICAgICB8ICAgIHwg TyB8ICAgIHwgICAgICAgICArLS0tLSsNCj4gPiAgICAgICAgIHwgYzEgfC0tLS0tLS0tLS18IHMx IHwgVCB8IGMyIHwtLS0tLS0tLS18IHMyIHwNCj4gPiAgICAgICAgICstLS0tKyAgICAgICAgICB8 ICAgIHwgUyB8ICAgIHwgICAgICAgICArLS0tLSsNCj4gPiAgICAgICAgICAgICAgICAgICAgICAg ICB8ICAgIHwgRyB8ICAgIHwNCj4gPiAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0t LS0tLSsNCj4gPiA9PT09PT0NCj4gPg0KPiA+PiBJ4oCZbSBhc3N1bWluZyB0aGlzIGlzIG5vdCBs aWtlIGEgQ29BUCBQcm94eT8NCj4gPj4gSXQgd291bGQgbmVlZCB0byBleHBvc2UgdGhlIGVxdWl2 YWxlbnQgdG8gL2hiLg0KPiA+DQo+ID4gW01lZF0gWWVzLCBuZXZlcnRoZWxlc3MgdGhlIGNsaWVu dCBkb2VzIG5vdCBuZWVkIHRvIGFzc2VzcyB0aGUgZW5kLXRvLWVuZA0KPiBjb25uZWN0aW9uLCBi dXQgb25seSB0aGUgb25lIGl0IHVzZXMgdG8gcGxhY2UgaXRzIG1pdGlnYXRpb24gcmVxdWVzdHMg KGl0DQo+IGlzIG5vdCBldmVuIGF3YXJlIGFib3V0IHRoZSBleGlzdGVuY2Ugb2YgdGhlIHVsdGlt YXRlIHNlcnZlcikuIExpa2V3aXNlLA0KPiB0aGUgc2VydmVyIGRvbWFpbiAoaW5jbHVkZXMgYm90 aCBndyBhbmQgc2VydmVyKSBkb2VzIG9ubHkgbmVlZCB0byBhc3Nlc3MgaWYNCj4gaXQgY2FuIHJl YWNoIG91dCBhIGNsaWVudCB0byB0cmlnZ2VyLg0KPiA+DQo+ID4+DQo+ID4+PiBXZSBjYW4gdXBk YXRlIGFzIGZvbGxvd3M6DQo+ID4+Pg0KPiA+Pj4gIlRoaXMgcHJvY2VkdXJlIG9jY3VycyBiZXR3 ZWVuIGEgRE9UUyBhZ2VudCBhbmQgaXRzIGltbWVkaWF0ZSBwZWVyIERPVFMNCj4gPj4gYWdlbnQu IEFzIHN1Y2gsIHRoaXMgR0VUIHJlcXVlc3QgTVVTVCBOT1QgYmUgcmVsYXllZCBieSBhIERPVFMg Z2F0ZXdheS4NCj4gVGhlDQo+ID4+IFBVVCByZXF1ZXN0IHVzZWQgZm9yIERPVFMgaGVhcnRiZWF0 IE1VU1QgTk9UIGhhdmUgYSDigJhjdWlkJywgJ2NkaWQsJyBvcg0KPiA+PiAnbWlkJyBVcmktUGF0 aC4iDQo+ID4+DQo+ID4+IFRoaXMgZG9lc27igJl0IHF1aXRlIGFkZHJlc3MgdGhlIGFib3ZlLCB0 aG91Z2guDQo+ID4+DQo+ID4+IEdyw7zDn2UsIENhcnN0ZW4NCg0K From nobody Tue Nov 19 23:14:30 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07551120843 for ; Tue, 19 Nov 2019 23:14:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VICuHpRa-HLg for ; Tue, 19 Nov 2019 23:14:27 -0800 (PST) Received: from mail-pj1-x102f.google.com (mail-pj1-x102f.google.com [IPv6:2607:f8b0:4864:20::102f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFE3012083B for ; Tue, 19 Nov 2019 23:14:27 -0800 (PST) Received: by mail-pj1-x102f.google.com with SMTP id w8so3745392pjh.11 for ; Tue, 19 Nov 2019 23:14:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:content-transfer-encoding:thread-index :content-language; bh=Vm1VVXXSla3Dk/xLDFEjZ1uIgnypctHkNphnvXmoaUE=; b=SOB3ccHsTIGBNZpCWfgCiAHCQf92CdckHyeD3coGoV6eSETBZdblBYRbsm5NDeR1hc YNxaZkI/ggf76gZVWOERq0cgxuKHkOXrZJlFje/ybzLVx8wwkiC/D/MyMDaZZR31oy3z jWNBO+iAYqfx/3ytvJuUiT7JIbLxOTEIyXRDP/KW0KMc6Manyqes+DbKxzvbAjeHLyhK xMSsqMBTnCVJZc2I/O9NIAkX/QUezXO1ngh5KRoSM5BWpMqF9Jn+nvz1bD6SIFPmN23B Li+VhIydIyxnqmm1Wf+4rH1Mdf+ToSSPo6UQP7mZimymqMI5B1cNGJlpSQIjSXqdAd+d 3uGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:content-transfer-encoding:thread-index :content-language; bh=Vm1VVXXSla3Dk/xLDFEjZ1uIgnypctHkNphnvXmoaUE=; b=btBNtSGkw5+B50lKhbc1bOnhNnNnXDp8QbiZdWu6rAYWHfeIDbjU7+4ixvJ+eGiqCo qHUSjCytRaE5sR+gNMyAl4XZOVxftcf0nlxXEUghb8BsBmvzWo8p9QWReWai6F2Ry4Ib b+/xsbvTjbZY4lHjROphjKutsYYwONh/zwgIKAehBgpq54CE2EAiVsMmEwvacnV4HMM9 OyTJ6EMOwUBou7jdvuGw783kk381U+IWjVSHFn9UparVCYkIhTYgPrgMh5Y0lDFbfkk4 S6PE9xC8ei7yenHLdwpW2UMbjIaOFozequlkHO4JGnYJs+c8IOrguN+aUsml9l/HgZ7w OHwA== X-Gm-Message-State: APjAAAWJT01+3tYDRcY4QT2ORzz+r2colz/7bsn92yDYIbyQjbj4irAr He0RUFPVRYcSl0UMQss4rpk= X-Google-Smtp-Source: APXvYqwrAny/YK1mrvHFCWPnXg6NBIxhKtl2XxAkgpGXC8nD8vsKBRZbdKNFXR1r36RvYm2rAwlXIQ== X-Received: by 2002:a17:90a:4d8f:: with SMTP id m15mr2262889pjh.71.1574234067137; Tue, 19 Nov 2019 23:14:27 -0800 (PST) Received: from svannotebook ([2001:67c:370:128:4178:fd98:6553:ab5c]) by smtp.gmail.com with ESMTPSA id h22sm124207pgn.78.2019.11.19.23.14.25 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 19 Nov 2019 23:14:26 -0800 (PST) From: "Valery Smyslov" To: "'Carsten Bormann'" , Cc: References: <787AE7BB302AE849A7480A190F8B9330313624A5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <18CFEB6A-81B8-44A4-B749-DB1689E0B442@tzi.org> <787AE7BB302AE849A7480A190F8B933031362BF5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313D3421@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <8E353427-9380-44CF-B151-63DB0106BFCA@tzi.org> <787AE7BB302AE849A7480A190F8B9330313D89A8@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B9330313DAD87@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <0BA3CB18-4B5D-4EC8-8FD1-29EB3AF4D556@tzi.org> In-Reply-To: <0BA3CB18-4B5D-4EC8-8FD1-29EB3AF4D556@tzi.org> Date: Wed, 20 Nov 2019 10:14:24 +0300 Message-ID: <04cd01d59f72$247dccd0$6d796670$@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQIXJOzvn3dYVWTeGBcCCuWDuiWx2wLj5trtAjzT8xUDJvXgVgJoQV/BAd5++hoB8NKz5AKuALAoAZH4iNKmeqA/YA== Content-Language: ru Archived-At: Subject: Re: [Dots] Improve controllability and predictability of keepalives X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 07:14:30 -0000 Thank you, Carsten! Regards, Valery. > Thank you. >=20 > I think my concerns are addressed. >=20 > Gr=C3=BC=C3=9Fe, Carsten >=20 >=20 > > On Nov 20, 2019, at 14:50, > wrote: > > > > Hi Carsten, > > > > Please see inline. > > > > Cheers, > > Med > > > >> -----Message d'origine----- > >> De : Carsten Bormann [mailto:cabo@tzi.org] Envoy=C3=A9 : mercredi = 20 > >> novembre 2019 07:20 =C3=80 : BOUCADAIR Mohamed TGI/OLN Cc : > dots@ietf.org > >> Objet : Re: Improve controllability and predictability of = keepalives > >> > >>>> Thank you. > >>>> I still have a few questions, but I think this looks very good. > >>>> > >>>> 4.4 says: > >>>> Mitigation requests MUST NOT be delayed > >>>> because of other congestion control checks. > >>>> What might those be? > >>> > >>> [Med] A too low probing rate for example as indicated in the > >>> sentence > >> right after that excerpt. There is a risk that mitigation requests > >> are delayed (or that heartbeats are not sent which may lead to > >> session liveness checks). > >>> > >>> > >>>> (You don=E2=80=99t want to be in a situation where you send a ton = of > >>>> mitigation requests that are mostly dropped at the tail of a > >>>> queue.) > >>>> > >>> > >>> [Med] Yes, we don't that. The authoritative rule is as follows: > >>> > >>> Requests marked by the DOTS client as Non-confirmable messages = are > >>> sent at regular intervals until a response is received from the = DOTS > >>> server. If the DOTS client cannot maintain an RTT estimate, it = MUST > >>> NOT send more than one Non-confirmable request every 3 seconds, = and > >>> SHOULD use an even less aggressive rate whenever possible (case 2 = in > >>> Section 3.1.3 of [RFC8085]). > >> > >> And if it can? > > > > [Med] It does the following: > > > > DOTS agents MUST NOT send more than one UDP datagram per = round-trip > > time (RTT) to the peer DOTS agent on average ... > > > >> > >>> > >>> > >>>> Before Figure 27, it says: > >>>> > >>>> The PUT request used for DOTS heartbeat MUST NOT have a > >>>> 'cuid', 'cdid,' or 'mid' Uri-Path. Such PUT requests MUST = NOT > >>>> be > >>>> > >>>> relayed by DOTS gateways. > >>>> > >>>> Why? (And what should the DOTS gateways do instead?) > >>> > >>> [Med] Session loss detect and recovery is local to an agent and = its > >> immediate peer. Heartbeats are thus not relayed. > >> > >> Ah, I was confused. > >> Where is =E2=80=9CDOTS gateway=E2=80=9D defined? > > > > [Med] It is defined in = draft-ietf-dots-architecture-14#section-2.2.3: > > > > =3D=3D=3D=3D=3D > > Traditional client/server relationships may be expanded by = chaining > > DOTS sessions. This chaining is enabled through "logical > > concatenation" of a DOTS server and a DOTS client. > > > > A DOTS gateway may be deployed client-side, server-side or both. = The > > gateway may terminate multiple discrete client connections and may > > aggregate these into a single or multiple DOTS sessions. > > > > The DOTS gateway will appear as a server to its downstream agents = and > > as a client to its upstream agents, a functional concatenation of = the > > DOTS client and server roles, as depicted in Figure 4: > > > > +-------------+ > > | | D | | > > +----+ | | O | | +----+ > > | c1 |----------| s1 | T | c2 |---------| s2 | > > +----+ | | S | | +----+ > > | | G | | > > +-------------+ =3D=3D=3D=3D=3D=3D > > > >> I=E2=80=99m assuming this is not like a CoAP Proxy? > >> It would need to expose the equivalent to /hb. > > > > [Med] Yes, nevertheless the client does not need to assess the = end-to-end > connection, but only the one it uses to place its mitigation requests = (it is not > even aware about the existence of the ultimate server). Likewise, the = server > domain (includes both gw and server) does only need to assess if it = can reach > out a client to trigger. > > > >> > >>> We can update as follows: > >>> > >>> "This procedure occurs between a DOTS agent and its immediate peer > >>> DOTS > >> agent. As such, this GET request MUST NOT be relayed by a DOTS > >> gateway. The PUT request used for DOTS heartbeat MUST NOT have a > >> =E2=80=98cuid', 'cdid,' or 'mid' Uri-Path." > >> > >> This doesn=E2=80=99t quite address the above, though. > >> > >> Gr=C3=BC=C3=9Fe, Carsten >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed Nov 20 18:11:19 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B8DC120840; Wed, 20 Nov 2019 18:11:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IlIhQ_lNfCc7; Wed, 20 Nov 2019 18:11:16 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CECC3120144; Wed, 20 Nov 2019 18:11:15 -0800 (PST) Received: from LHREML710-CAH.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 879566EDD92B17C363D5; Thu, 21 Nov 2019 02:11:13 +0000 (GMT) Received: from lhreml718-chm.china.huawei.com (10.201.108.69) by LHREML710-CAH.china.huawei.com (10.201.108.33) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 21 Nov 2019 02:11:12 +0000 Received: from lhreml718-chm.china.huawei.com (10.201.108.69) by lhreml718-chm.china.huawei.com (10.201.108.69) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Thu, 21 Nov 2019 02:11:13 +0000 Received: from DGGEMM404-HUB.china.huawei.com (10.3.20.212) by lhreml718-chm.china.huawei.com (10.201.108.69) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.1713.5 via Frontend Transport; Thu, 21 Nov 2019 02:11:12 +0000 Received: from DGGEMM511-MBX.china.huawei.com ([169.254.1.140]) by DGGEMM404-HUB.china.huawei.com ([10.3.20.212]) with mapi id 14.03.0439.000; Thu, 21 Nov 2019 10:11:05 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: IETF SAAG CC: "dots@ietf.org" Thread-Topic: DOTS WG report for IETF 106: Thread-Index: AdWgD1wa61NCe9H9QAqeDNWajQdKJg== Date: Thu, 21 Nov 2019 02:11:05 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.44.23] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F13EA62360dggemm511mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Dots] DOTS WG report for IETF 106: X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 02:11:17 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F13EA62360dggemm511mbxchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, DOTS session will be held in VIP A at 12:20-13:50 (Friday Morning session I= I). Here is the summary of the latest progress we have in the past months: Submit to IESG for publish: draft-ietf-dots-use-cases, draft-ietf-dots-sign= al-filter-control Finish WGLC and Wait for Write-Up: draft-ietf-dots-signal-call-home, draft-= ietf-dots-server-discovery Be near for RFC publish: draft-ietf-dots-data-channel, draft-ietf-dots-sign= al-channel Be still in progress: draft-ietf-dots-architecture, draft-ietf-dots-multiho= ming and some individual drafts We will progress them in Friday session, hope to see guys then. B.R. Valery & Frank --_000_C02846B1344F344EB4FAA6FA7AF481F13EA62360dggemm511mbxchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

DOTS session will be held in VI= P A at 12:20-13:50 (Friday Morning session II).

Here is the summary of the late= st progress we have in the past months:

 

Submit to IESG for publish: dra= ft-ietf-dots-use-cases, draft-ietf-dots-signal-filter-control

 

Finish WGLC and Wait for Write-Up: draft-ietf-dots-signal-call-home, draft-ietf-dots-server-disc= overy

 

Be near for RFC publish: draft-= ietf-dots-data-channel, draft-ietf-dots-signal-channel

 

Be still in progress: draft-iet= f-dots-architecture, draft-ietf-dots-multihoming and some individual drafts=

 

We will progress them in Friday= session, hope to see guys then.

 

B.R.

Valery & Frank

--_000_C02846B1344F344EB4FAA6FA7AF481F13EA62360dggemm511mbxchi_-- From nobody Wed Nov 20 23:40:37 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DF37C120048; Wed, 20 Nov 2019 23:40:34 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.110.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <157432203487.730.14158754397872644986@ietfa.amsl.com> Date: Wed, 20 Nov 2019 23:40:34 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-signal-channel-39.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 07:40:35 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification Authors : Tirumaleswar Reddy Mohamed Boucadair Prashanth Patil Andrew Mortensen Nik Teague Filename : draft-ietf-dots-signal-channel-39.txt Pages : 107 Date : 2019-11-20 Abstract: This document specifies the DOTS signal channel, a protocol for signaling the need for protection against Distributed Denial-of- Service (DDoS) attacks to a server capable of enabling network traffic mitigation on behalf of the requesting client. A companion document defines the DOTS data channel, a separate reliable communication layer for DOTS management and configuration purposes. Editorial Note (To be removed by RFC Editor) Please update these statements within the document with the RFC number to be assigned to this document: o "This version of this YANG module is part of RFC XXXX;" o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification"; o "| [RFCXXXX] |" o reference: RFC XXXX Please update this statement with the RFC number to be assigned to the following documents: o "RFC YYYY: Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification (used to be I-D.ietf-dots-data- channel) Please update TBD/TBD1/TBD2 statements with the assignments made by IANA to DOTS Signal Channel Protocol. Also, please update the "revision" date of the YANG modules. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-signal-channel-39 https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-39 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-39 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Nov 20 23:56:32 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B20A120147 for ; Wed, 20 Nov 2019 23:56:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ae3GlkdblPlN for ; Wed, 20 Nov 2019 23:56:29 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B4FB120048 for ; Wed, 20 Nov 2019 23:56:29 -0800 (PST) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 47JX2346vJz7tV5 for ; Thu, 21 Nov 2019 08:56:27 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.98]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 47JX233SF0z1xnn for ; Thu, 21 Nov 2019 08:56:27 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7F.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Thu, 21 Nov 2019 08:56:27 +0100 From: To: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-39.txt Thread-Index: AQHVoD76qa+dmdNh1U6l99oazccytaeVQK6Q Date: Thu, 21 Nov 2019 07:56:26 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313DBE80@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <157432203487.730.14158754397872644986@ietfa.amsl.com> In-Reply-To: <157432203487.730.14158754397872644986@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-39.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 07:56:31 -0000 Hi all, The main change in this version is to define DOTS-specific HB messages as n= on-confirmable. We don't use pings anymore.=20 Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de internet- > drafts@ietf.org > Envoy=E9=A0: jeudi 21 novembre 2019 08:41 > =C0=A0: i-d-announce@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: [Dots] I-D Action: draft-ietf-dots-signal-channel-39.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the DDoS Open Threat Signaling WG of the IET= F. >=20 > Title : Distributed Denial-of-Service > Open Threat Signaling (DOTS) Signal Channel Specification > Authors : Tirumaleswar Reddy > Mohamed Boucadair > Prashanth Patil > Andrew Mortensen > Nik Teague > Filename : draft-ietf-dots-signal-channel-39.txt > Pages : 107 > Date : 2019-11-20 >=20 > Abstract: > This document specifies the DOTS signal channel, a protocol for > signaling the need for protection against Distributed Denial-of- > Service (DDoS) attacks to a server capable of enabling network > traffic mitigation on behalf of the requesting client. >=20 > A companion document defines the DOTS data channel, a separate > reliable communication layer for DOTS management and configuration > purposes. >=20 > Editorial Note (To be removed by RFC Editor) >=20 > Please update these statements within the document with the RFC > number to be assigned to this document: >=20 > o "This version of this YANG module is part of RFC XXXX;" >=20 > o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Signal Channel Specification"; >=20 > o "| [RFCXXXX] |" >=20 > o reference: RFC XXXX >=20 > Please update this statement with the RFC number to be assigned to > the following documents: >=20 > o "RFC YYYY: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Data Channel Specification (used to be I-D.ietf-dots-data- > channel) >=20 > Please update TBD/TBD1/TBD2 statements with the assignments made by > IANA to DOTS Signal Channel Protocol. >=20 > Also, please update the "revision" date of the YANG modules. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dots-signal-channel-39 > https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-39 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dots-signal-channel-39 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Tue Nov 26 22:15:20 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 584E512022C for ; Tue, 26 Nov 2019 22:15:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.399 X-Spam-Level: * X-Spam-Status: No, score=1.399 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_SORBS_WEB=1.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=smyslov.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kyBvCLFYqFpt for ; Tue, 26 Nov 2019 22:15:17 -0800 (PST) Received: from direct.host-care.com (direct.host-care.com [198.136.54.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DEE1120043 for ; Tue, 26 Nov 2019 22:15:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smyslov.net ; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID :Date:Subject:Cc:To:From:Sender:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=Cq7UncnZuRXagoo+3mxPHxXbd3yVrdG1fLeQ4QiruUU=; b=J8PZunpXnfmy7fRH0FBwNt46Gs M2BheCWLLADeCWjo/Of09L6NjZwCp7KWFAgfQPD5lFHr8PhuihhAHjv3supRU0CK0BtJXb+QHYHxB n5X/6MNN7pr4r8BmOcS1HDfdKTdrTsHhxcAmFbamSP26mXmx6BCz0R5m/VufGpl+E+6kVJMfGnb6Z hqu8zgTMcyUMBNA8XQEeCixK15y8xwCdECFqFgJcoNhf68N++i8loI9U9F7lk+mIwyquAu9kSxeNk Pg728IiqSkkMCuXze176IzD5KBpzV5Bcl86SBAVNFsa1C6PCIkh6jfpxSSBr62MI1IHd1Gqo1tsOQ gW+iXPyA==; Received: from [82.138.51.4] (port=60139 helo=buildpc) by direct.host-care.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.92) (envelope-from ) id 1iZqba-0000Q6-B7; Wed, 27 Nov 2019 01:15:14 -0500 From: "Valery Smyslov" To: Cc: "Xialiang \(Frank, Network Standard & Patent Dept\)" Date: Wed, 27 Nov 2019 09:15:13 +0300 Message-ID: <023901d5a4ea$08b1a4e0$1a14eea0$@smyslov.net> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdWk6XiZC5PrJBh1SoiwWEaiX88Tog== Content-Language: ru X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - direct.host-care.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - smyslov.net X-Get-Message-Sender-Via: direct.host-care.com: authenticated_id: valery@smyslov.net X-Authenticated-Sender: direct.host-care.com: valery@smyslov.net X-Source: X-Source-Args: X-Source-Dir: Archived-At: Subject: [Dots] IETF106 DOTS minutes X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 06:15:18 -0000 Hi, the minutes for the DOTS meeting at IETF106 are posted: https://datatracker.ietf.org/meeting/106/materials/minutes-106-dots-00 Thanks Wei Pan for the excellent work! Please let the chairs know if you have any corrections. Regards, Frank & Valery. From nobody Tue Nov 26 22:25:12 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F35421200E5 for ; Tue, 26 Nov 2019 22:25:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xsTXcUgBTh7Q for ; Tue, 26 Nov 2019 22:25:09 -0800 (PST) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66F0F12092C for ; Tue, 26 Nov 2019 22:25:09 -0800 (PST) Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr21.francetelecom.fr (ESMTP service) with ESMTP id 47N9jv5Zz8z5vyv for ; Wed, 27 Nov 2019 07:25:07 +0100 (CET) Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.29]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id 47N9jv4vLVzFpWx for ; Wed, 27 Nov 2019 07:25:07 +0100 (CET) Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM21.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Wed, 27 Nov 2019 07:25:07 +0100 From: To: "dots@ietf.org" Thread-Topic: Protocol Action: 'Constrained Application Protocol (CoAP) Hop-Limit Option' to Proposed Standard (draft-ietf-core-hop-limit-07.txt) Thread-Index: AQHVpHZVJF5BHJEdkE2EuELpqtII5aeejXdA Date: Wed, 27 Nov 2019 06:25:06 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B9330313DEE7C@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <157478562021.13759.18003509362167004084.idtracker@ietfa.amsl.com> In-Reply-To: <157478562021.13759.18003509362167004084.idtracker@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Dots] TR: Protocol Action: 'Constrained Application Protocol (CoAP) Hop-Limit Option' to Proposed Standard (draft-ietf-core-hop-limit-07.txt) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 06:25:11 -0000 SGkgYWxsLCANCg0KRllJLiBUaGlzIGRyYWZ0IGlzIGEgbm9ybWF0aXZlIHJlZmVyZW5jZSBmb3Ig RE9UUyBzaWduYWwgY2hhbm5lbC4gIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2Ug ZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDogVGhlIElFU0cgW21haWx0bzppZXNnLXNlY3JldGFyeUBp ZXRmLm9yZ10NCj4gRW52b3nDqcKgOiBtYXJkaSAyNiBub3ZlbWJyZSAyMDE5IDE3OjI3DQo+IMOA wqA6IElFVEYtQW5ub3VuY2UNCj4gQ2PCoDogVGhlIElFU0c7IGRyYWZ0LWlldGYtY29yZS1ob3At bGltaXRAaWV0Zi5vcmc7IEphaW1lIEppbWVuZXo7DQo+IGphaW1lQGlraS5maTsgY29yZUBpZXRm Lm9yZzsgYWxleGV5Lm1lbG5pa292QGlzb2RlLmNvbTsgY29yZS0NCj4gY2hhaXJzQGlldGYub3Jn OyByZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnDQo+IE9iamV0wqA6IFByb3RvY29sIEFjdGlvbjog J0NvbnN0cmFpbmVkIEFwcGxpY2F0aW9uIFByb3RvY29sIChDb0FQKSBIb3AtTGltaXQNCj4gT3B0 aW9uJyB0byBQcm9wb3NlZCBTdGFuZGFyZCAoZHJhZnQtaWV0Zi1jb3JlLWhvcC1saW1pdC0wNy50 eHQpDQo+IA0KPiBUaGUgSUVTRyBoYXMgYXBwcm92ZWQgdGhlIGZvbGxvd2luZyBkb2N1bWVudDoN Cj4gLSAnQ29uc3RyYWluZWQgQXBwbGljYXRpb24gUHJvdG9jb2wgKENvQVApIEhvcC1MaW1pdCBP cHRpb24nDQo+ICAgKGRyYWZ0LWlldGYtY29yZS1ob3AtbGltaXQtMDcudHh0KSBhcyBQcm9wb3Nl ZCBTdGFuZGFyZA0KPiANCj4gVGhpcyBkb2N1bWVudCBpcyB0aGUgcHJvZHVjdCBvZiB0aGUgQ29u c3RyYWluZWQgUkVTVGZ1bCBFbnZpcm9ubWVudHMNCj4gV29ya2luZw0KPiBHcm91cC4NCj4gDQo+ IFRoZSBJRVNHIGNvbnRhY3QgcGVyc29ucyBhcmUgQWRhbSBSb2FjaCwgQWxleGV5IE1lbG5pa292 IGFuZCBCYXJyeSBMZWliYS4NCj4gDQo+IEEgVVJMIG9mIHRoaXMgSW50ZXJuZXQgRHJhZnQgaXM6 DQo+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY29yZS1ob3At bGltaXQvDQo+IA0KPiANCj4gDQo+IA0KPiBUZWNobmljYWwgU3VtbWFyeQ0KPiANCj4gICAgVGhl IHByZXNlbmNlIG9mIENvbnN0cmFpbmVkIEFwcGxpY2F0aW9uIFByb3RvY29sIChDb0FQKSBwcm94 aWVzDQo+ICAgIG1heSBsZWFkIHRvIGluZmluaXRlIGZvcndhcmRpbmcgbG9vcHMsIHdoaWNoIGlz IHVuZGVzaXJhYmxlLg0KPiAgICBUbyBwcmV2ZW50IGFuZCBkZXRlY3Qgc3VjaCBsb29wcywgdGhp cyBkb2N1bWVudCBzcGVjaWZpZXMNCj4gICAgdGhlIEhvcC1MaW1pdCBDb0FQIG9wdGlvbi4NCj4g DQo+IFdvcmtpbmcgR3JvdXAgU3VtbWFyeQ0KPiANCj4gICAgVGhlIGRvY3VtZW50IGhhcyBnb25l IHRocm91Z2ggbXVsdGlwbGUgZXhwZXJ0IHJldmlld3MNCj4gICAgYW5kIGhhcyBiZWVuIGRpc2N1 c3NlZCBhdCBtdWx0aXBsZSBmYWNlLXRvLWZhY2UgSUVURiBtZWV0aW5ncy4NCj4gICAgTm90aGlu ZyBwYXJ0aWN1bGFybHkgY29udHJvdmVyc2lhbCBhYm91dCB0aGlzIGRvY3VtZW50Lg0KPiANCj4g RG9jdW1lbnQgUXVhbGl0eQ0KPiANCj4gICAgVGhpcyBkcmFmdCBpcyB0aGUgc29sdXRpb24gdG8g YSBwcm9ibGVtIHJhaXNlZCBieSB0aGUgRE9UcyBXRw0KPiAgICAoaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0zNykuDQo+ICAgIEl0IGlz IHJlZmVycmVkIGFzIGEgbm9ybWF0aXZlIHJlZmVyZW5jZSB0aGVyZS4NCj4gDQo+ICAgIFRoZSBv cHRpb24gaGFzIGFscmVhZHkgYmVlbiBpbXBsZW1lbnRlZCBpbiB0aGUgcHJvcHJpZXRhcnkNCj4g ICAgTkNDIEdyb3VwIERPVFMuDQo+IA0KPiBQZXJzb25uZWwNCj4gDQo+ICAgIEphaW1lIEppbcOp bmV6IGlzIHRoZSBkb2N1bWVudCBzaGVwaGVyZC4NCj4gICAgQWxleGV5IE1lbG5pa292IGlzIHRo ZSByZXNwb25zaWJsZSBBcmVhIERpcmVjdG9yLg0K From nobody Tue Nov 26 23:21:12 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2772120090 for ; Tue, 26 Nov 2019 23:21:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 93pShqCVq0xY for ; Tue, 26 Nov 2019 23:21:09 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D573C120077 for ; Tue, 26 Nov 2019 23:21:08 -0800 (PST) Received: from lhreml708-cah.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id 49C4691FF030FC09CD70 for ; Wed, 27 Nov 2019 07:21:06 +0000 (GMT) Received: from lhreml730-chm.china.huawei.com (10.201.108.81) by lhreml708-cah.china.huawei.com (10.201.108.49) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 27 Nov 2019 07:21:05 +0000 Received: from lhreml730-chm.china.huawei.com (10.201.108.81) by lhreml730-chm.china.huawei.com (10.201.108.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Wed, 27 Nov 2019 07:21:05 +0000 Received: from DGGEMM423-HUB.china.huawei.com (10.1.198.40) by lhreml730-chm.china.huawei.com (10.201.108.81) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.1713.5 via Frontend Transport; Wed, 27 Nov 2019 07:21:05 +0000 Received: from DGGEMM511-MBX.china.huawei.com ([169.254.1.4]) by dggemm423-hub.china.huawei.com ([10.1.198.40]) with mapi id 14.03.0439.000; Wed, 27 Nov 2019 15:20:48 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: "mohamed.boucadair@orange.com" CC: "dots@ietf.org" Thread-Topic: Protocol Action: 'Constrained Application Protocol (CoAP) Hop-Limit Option' to Proposed Standard (draft-ietf-core-hop-limit-07.txt) Thread-Index: AQHVpHZtZqK3gP4e90ybRpBFawCm+6eeB8gAgACVkMA= Date: Wed, 27 Nov 2019 07:20:48 +0000 Message-ID: References: <157478562021.13759.18003509362167004084.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B9330313DEE7C@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313DEE7C@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.33.46] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Dots] =?utf-8?b?562U5aSNOiBQcm90b2NvbCBBY3Rpb246ICdDb25zdHJh?= =?utf-8?q?ined_Application_Protocol_=28CoAP=29_Hop-Limit_Option=27_to_Pro?= =?utf-8?q?posed_Standard_=28draft-ietf-core-hop-limit-07=2Etxt=29?= X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 07:21:11 -0000 SGkgTWVkLA0KVGhhbmsgeW91IGZvciB0aGUgRllJLg0KDQpCLlIuDQpGcmFuaw0KDQotLS0tLemC ruS7tuWOn+S7ti0tLS0tDQrlj5Hku7bkuro6IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0 Zi5vcmddIOS7o+ihqCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQrlj5HpgIHml7bpl7Q6 IDIwMTnlubQxMeaciDI35pelIDE0OjI1DQrmlLbku7bkuro6IGRvdHNAaWV0Zi5vcmcNCuS4u+mi mDogW0RvdHNdIFRSOiBQcm90b2NvbCBBY3Rpb246ICdDb25zdHJhaW5lZCBBcHBsaWNhdGlvbiBQ cm90b2NvbCAoQ29BUCkgSG9wLUxpbWl0IE9wdGlvbicgdG8gUHJvcG9zZWQgU3RhbmRhcmQgKGRy YWZ0LWlldGYtY29yZS1ob3AtbGltaXQtMDcudHh0KQ0KDQpIaSBhbGwsIA0KDQpGWUkuIFRoaXMg ZHJhZnQgaXMgYSBub3JtYXRpdmUgcmVmZXJlbmNlIGZvciBET1RTIHNpZ25hbCBjaGFubmVsLiAg DQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKg OiBUaGUgSUVTRyBbbWFpbHRvOmllc2ctc2VjcmV0YXJ5QGlldGYub3JnXSBFbnZvecOpwqA6IG1h cmRpIDI2IA0KPiBub3ZlbWJyZSAyMDE5IDE3OjI3IMOAwqA6IElFVEYtQW5ub3VuY2UgQ2PCoDog VGhlIElFU0c7IA0KPiBkcmFmdC1pZXRmLWNvcmUtaG9wLWxpbWl0QGlldGYub3JnOyBKYWltZSBK aW1lbmV6OyBqYWltZUBpa2kuZmk7IA0KPiBjb3JlQGlldGYub3JnOyBhbGV4ZXkubWVsbmlrb3ZA aXNvZGUuY29tOyBjb3JlLSBjaGFpcnNAaWV0Zi5vcmc7IA0KPiByZmMtZWRpdG9yQHJmYy1lZGl0 b3Iub3JnIE9iamV0wqA6IFByb3RvY29sIEFjdGlvbjogJ0NvbnN0cmFpbmVkIA0KPiBBcHBsaWNh dGlvbiBQcm90b2NvbCAoQ29BUCkgSG9wLUxpbWl0IE9wdGlvbicgdG8gUHJvcG9zZWQgU3RhbmRh cmQgDQo+IChkcmFmdC1pZXRmLWNvcmUtaG9wLWxpbWl0LTA3LnR4dCkNCj4gDQo+IFRoZSBJRVNH IGhhcyBhcHByb3ZlZCB0aGUgZm9sbG93aW5nIGRvY3VtZW50Og0KPiAtICdDb25zdHJhaW5lZCBB cHBsaWNhdGlvbiBQcm90b2NvbCAoQ29BUCkgSG9wLUxpbWl0IE9wdGlvbicNCj4gICAoZHJhZnQt aWV0Zi1jb3JlLWhvcC1saW1pdC0wNy50eHQpIGFzIFByb3Bvc2VkIFN0YW5kYXJkDQo+IA0KPiBU aGlzIGRvY3VtZW50IGlzIHRoZSBwcm9kdWN0IG9mIHRoZSBDb25zdHJhaW5lZCBSRVNUZnVsIEVu dmlyb25tZW50cyANCj4gV29ya2luZyBHcm91cC4NCj4gDQo+IFRoZSBJRVNHIGNvbnRhY3QgcGVy c29ucyBhcmUgQWRhbSBSb2FjaCwgQWxleGV5IE1lbG5pa292IGFuZCBCYXJyeSBMZWliYS4NCj4g DQo+IEEgVVJMIG9mIHRoaXMgSW50ZXJuZXQgRHJhZnQgaXM6DQo+IGh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY29yZS1ob3AtbGltaXQvDQo+IA0KPiANCj4gDQo+ IA0KPiBUZWNobmljYWwgU3VtbWFyeQ0KPiANCj4gICAgVGhlIHByZXNlbmNlIG9mIENvbnN0cmFp bmVkIEFwcGxpY2F0aW9uIFByb3RvY29sIChDb0FQKSBwcm94aWVzDQo+ICAgIG1heSBsZWFkIHRv IGluZmluaXRlIGZvcndhcmRpbmcgbG9vcHMsIHdoaWNoIGlzIHVuZGVzaXJhYmxlLg0KPiAgICBU byBwcmV2ZW50IGFuZCBkZXRlY3Qgc3VjaCBsb29wcywgdGhpcyBkb2N1bWVudCBzcGVjaWZpZXMN Cj4gICAgdGhlIEhvcC1MaW1pdCBDb0FQIG9wdGlvbi4NCj4gDQo+IFdvcmtpbmcgR3JvdXAgU3Vt bWFyeQ0KPiANCj4gICAgVGhlIGRvY3VtZW50IGhhcyBnb25lIHRocm91Z2ggbXVsdGlwbGUgZXhw ZXJ0IHJldmlld3MNCj4gICAgYW5kIGhhcyBiZWVuIGRpc2N1c3NlZCBhdCBtdWx0aXBsZSBmYWNl LXRvLWZhY2UgSUVURiBtZWV0aW5ncy4NCj4gICAgTm90aGluZyBwYXJ0aWN1bGFybHkgY29udHJv dmVyc2lhbCBhYm91dCB0aGlzIGRvY3VtZW50Lg0KPiANCj4gRG9jdW1lbnQgUXVhbGl0eQ0KPiAN Cj4gICAgVGhpcyBkcmFmdCBpcyB0aGUgc29sdXRpb24gdG8gYSBwcm9ibGVtIHJhaXNlZCBieSB0 aGUgRE9UcyBXRw0KPiAgICAoaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYt ZG90cy1zaWduYWwtY2hhbm5lbC0zNykuDQo+ICAgIEl0IGlzIHJlZmVycmVkIGFzIGEgbm9ybWF0 aXZlIHJlZmVyZW5jZSB0aGVyZS4NCj4gDQo+ICAgIFRoZSBvcHRpb24gaGFzIGFscmVhZHkgYmVl biBpbXBsZW1lbnRlZCBpbiB0aGUgcHJvcHJpZXRhcnkNCj4gICAgTkNDIEdyb3VwIERPVFMuDQo+ IA0KPiBQZXJzb25uZWwNCj4gDQo+ICAgIEphaW1lIEppbcOpbmV6IGlzIHRoZSBkb2N1bWVudCBz aGVwaGVyZC4NCj4gICAgQWxleGV5IE1lbG5pa292IGlzIHRoZSByZXNwb25zaWJsZSBBcmVhIERp cmVjdG9yLg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N CkRvdHMgbWFpbGluZyBsaXN0DQpEb3RzQGlldGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2RvdHMNCg==