From nobody Tue Jun 1 15:39:44 2021 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 003043A2A12; Tue, 1 Jun 2021 15:39:38 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Martin Duke via Datatracker To: "The IESG" Cc: draft-ietf-dots-rfc8782-bis@ietf.org, dots-chairs@ietf.org, dots@ietf.org, valery@smyslov.net, valery@smyslov.net X-Test-IDTracker: no X-IETF-IDTracker: 7.30.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Martin Duke Message-ID: <162258717896.27217.11487555052395475135@ietfa.amsl.com> Date: Tue, 01 Jun 2021 15:39:38 -0700 Archived-At: Subject: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 22:39:39 -0000 Martin Duke has entered the following ballot position for draft-ietf-dots-rfc8782-bis-07: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dots-rfc8782-bis/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for addressing Michael Tuexen's TSVART review. As I did not review RFC8782, I'm taking this opportunity to review the entire document, rather than just the bis. I found numerous clarity issues: (4.4.1.1) How do DOTS servers detect a CUID collision? I believe Sec. 7 explains this is based on client authentication, but mentioning it here would be helpful. In the "mid" definition: s/no attack is detected/no attack is underway In the "target_fqdn" definition. The text appears to assume a DNS resolution; is there a not a use case where the DOTS server would rely on e.g. SNI inspection and not defend an entire IP address that had multiple domains? "lifetime" definition: The text says the DOTS server MAY reject unlimited lifetime, which implies that it MUST accept any finite lifetime. I presume you mean to say that DOTS servers are free to set a policy limit on the maximum allowable lifetime? (4.4.1.2) "cdid" definition: The example in Fig. 9 does not have a cdid that matches the cuid. The text indicates that these might not match if a client-side gateway added the cdid, but then later says that "only the first on-path server-domain DOTS gateway can insert a 'cdid' value." After reading this a few times, I think what you are saying is (a) clients MUST NOT add cdid; (b) client-side gateways SHOULD add them; (c) the first server-side gateway MUST strip them and then add their own; and (d) subsequent server side gateways MUST NOT change the cdid. Is this correct? Either way, it could be expressed less confusingly. (4.4.1.3) Fig. 11: Where does the second cuid come from? Is this generated by the server on behalf of the client? If so, I recommend s/a new request with a new 'cuid'/a new request with a new, server-provided 'cuid' When extending the lifetime, does the new lifetime field measure from the initial trigger or from the moment of extension? If the former, a change in the lifetime value is mandatory, not "potential." If the latter, how does the server distinguish this from a duplicate request? (4.4.2) Fig. 14 uses a string to represent the status instead of one of the values in Table 3. (4.4.3) Same with Fig. 16 and Table 4. (4.4.2.1) If updates are non-confirmable, how does the client know if it's gotten out of sync on state updates? (4.5.1) What is the unit of probing rate? (8) s/should/SHOULD, s/must/MUST throughout. From nobody Wed Jun 2 02:49:55 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83D453A3CEE; Wed, 2 Jun 2021 02:49:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.799 X-Spam-Level: X-Spam-Status: No, score=-2.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EYYavjWu3hOu; Wed, 2 Jun 2021 02:49:48 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BD423A3CEC; Wed, 2 Jun 2021 02:49:47 -0700 (PDT) Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr22.francetelecom.fr (ESMTP service) with ESMTP id 4Fw44n6xdyz14rL; Wed, 2 Jun 2021 11:49:45 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1622627386; bh=Mi6a3ix7P9K2Nqy1ho2PJHJN3MZok0Ned8nb7RrU0/Q=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=Zd0RNqN5vn6aRdF6JLvT16ozwWjJya3x22DMZBIlKNK/tCqyABwK8up55VFrprcf4 6tGOWSL3r8n+L2qiP81mbLzeNtTq7cfGg3eil7i3c14u4Etjlh+D1pJ50BSJjdCiT0 j80eW63WOcYAQNkBUzIqVhDjEFfsoWQDKEiWTDg1wCvgAfo3Q9qeVOyX+GpdAGO2Nt booL1g0FZSbcGi/xkakIgqABY7oxC4ZgZKk70XH8liT3Vxoooi2p3hwNF2yc7TmkN1 UU9u/Uj98aD1MNbHLkU/81CtooaGBS7fTeq5T9eV2+SmBTrWYBtx1BIfe2w6aIYtij ++kZtnvosTz2w== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.79]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 4Fw44n631rz8sYx; Wed, 2 Jun 2021 11:49:45 +0200 (CEST) From: To: Martin Duke , The IESG CC: "draft-ietf-dots-rfc8782-bis@ietf.org" , "dots-chairs@ietf.org" , "dots@ietf.org" , "valery@smyslov.net" Thread-Topic: Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) Thread-Index: AQHXVzcDQ3dGgY6jZkSDN8/3GmEUTKsAOcbg Date: Wed, 2 Jun 2021 09:49:45 +0000 Message-ID: <26196_1622627385_60B75439_26196_97_8_787AE7BB302AE849A7480A190F8B933035396207@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162258717896.27217.11487555052395475135@ietfa.amsl.com> In-Reply-To: <162258717896.27217.11487555052395475135@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 09:49:54 -0000 SGkgTWFydGluLA0KDQpUaGFuayB5b3UgZm9yIHRoZSByZXZpZXcuIA0KDQpQbGVhc2Ugc2VlIGlu bGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ IERlwqA6IE1hcnRpbiBEdWtlIHZpYSBEYXRhdHJhY2tlciBbbWFpbHRvOm5vcmVwbHlAaWV0Zi5v cmddDQo+IEVudm95w6nCoDogbWVyY3JlZGkgMiBqdWluIDIwMjEgMDA6NDANCj4gw4DCoDogVGhl IElFU0cgPGllc2dAaWV0Zi5vcmc+DQo+IENjwqA6IGRyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJp c0BpZXRmLm9yZzsgZG90cy1jaGFpcnNAaWV0Zi5vcmc7DQo+IGRvdHNAaWV0Zi5vcmc7IHZhbGVy eUBzbXlzbG92Lm5ldDsgdmFsZXJ5QHNteXNsb3YubmV0DQo+IE9iamV0wqA6IE1hcnRpbiBEdWtl J3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy0NCj4gMDc6ICh3 aXRoIENPTU1FTlQpDQo+IA0KPiBNYXJ0aW4gRHVrZSBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5n IGJhbGxvdCBwb3NpdGlvbiBmb3INCj4gZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODItYmlzLTA3OiBO byBPYmplY3Rpb24NCj4gDQo+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1Ympl Y3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvDQo+IGFsbCBlbWFpbCBhZGRyZXNzZXMgaW5jbHVk ZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0bw0KPiBjdXQgdGhpcyBpbnRy b2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikNCj4gDQo+IA0KPiBQbGVhc2UgcmVmZXIgdG8g aHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy0NCj4gY3JpdGVyaWEu aHRtbA0KPiBmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBESVNDVVNTIGFuZCBDT01NRU5UIHBv c2l0aW9ucy4NCj4gDQo+IA0KPiBUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFsbG90 IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQo+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZG9jL2RyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy8NCj4gDQo+IA0KPiANCj4gLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCj4gLS0NCj4gQ09NTUVOVDoNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gLS0NCj4gDQo+IFRo YW5rIHlvdSBmb3IgYWRkcmVzc2luZyBNaWNoYWVsIFR1ZXhlbidzIFRTVkFSVCByZXZpZXcuDQo+ IA0KPiBBcyBJIGRpZCBub3QgcmV2aWV3IFJGQzg3ODIsIEknbSB0YWtpbmcgdGhpcyBvcHBvcnR1 bml0eSB0byByZXZpZXcNCj4gdGhlIGVudGlyZSBkb2N1bWVudCwgcmF0aGVyIHRoYW4ganVzdCB0 aGUgYmlzLiBJIGZvdW5kIG51bWVyb3VzDQo+IGNsYXJpdHkgaXNzdWVzOg0KDQpbTWVkXSBJdCBp cyBhbHdheXMgdmFsdWFibGUgdG8gaGF2ZSBmcmVzaCBleWVzIHRvIHJldmlldy4gU28sIHRoYW5r cyEgDQoNCj4gDQo+ICg0LjQuMS4xKSBIb3cgZG8gRE9UUyBzZXJ2ZXJzIGRldGVjdCBhIENVSUQg Y29sbGlzaW9uPyBJIGJlbGlldmUNCj4gU2VjLiA3IGV4cGxhaW5zIHRoaXMgaXMgYmFzZWQgb24g Y2xpZW50IGF1dGhlbnRpY2F0aW9uLCBidXQNCj4gbWVudGlvbmluZyBpdCBoZXJlIHdvdWxkIGJl IGhlbHBmdWwuDQoNCltNZWRdIFdlIGRvIGFscmVhZHkgaGF2ZSB0aGUgZm9sbG93aW5nIGF0IHRo ZSBlbmQgb2YgNC40LjEuMToNCg0KICAgSW4gYm90aCBET1RTIHNpZ25hbCBhbmQgZGF0YSBjaGFu bmVsIHNlc3Npb25zLCB0aGUgRE9UUyBjbGllbnQgTVVTVA0KICAgYXV0aGVudGljYXRlIGl0c2Vs ZiB0byB0aGUgRE9UUyBzZXJ2ZXIgKFNlY3Rpb24gOCkuICBUaGUgRE9UUyBzZXJ2ZXINCiAgIE1B WSB1c2UgdGhlIGFsZ29yaXRobSBwcmVzZW50ZWQgaW4gU2VjdGlvbiA3IG9mIFtSRkM3NTg5XSB0 byBkZXJpdmUNCiAgIHRoZSBET1RTIGNsaWVudCBpZGVudGl0eSBvciB1c2VybmFtZSBmcm9tIHRo ZSBjbGllbnQgY2VydGlmaWNhdGUuDQogICBUaGUgRE9UUyBjbGllbnQgaWRlbnRpdHkgYWxsb3dz IHRoZSBET1RTIHNlcnZlciB0byBhY2NlcHQgbWl0aWdhdGlvbg0KICAgcmVxdWVzdHMgd2l0aCBz Y29wZXMgdGhhdCB0aGUgRE9UUyBjbGllbnQgaXMgYXV0aG9yaXplZCB0byBtYW5hZ2UuDQoNCkRv IHlvdSBwcmVmZXIgaWYgdGhpcyB0ZXh0IGlzIG1lbnRpb25lZCBlYXJsaWVyPyANCg0KPiANCj4g SW4gdGhlICJtaWQiIGRlZmluaXRpb246IHMvbm8gYXR0YWNrIGlzIGRldGVjdGVkL25vIGF0dGFj ayBpcw0KPiB1bmRlcndheQ0KDQpbTWVkXSBUaGUgT0xEIHdvcmRpbmcgaXMgbW9yZSBhcHByb3By aWF0ZSBhcyBhbiBhdHRhY2sgbWF5IGJlIHVuZGVyd2F5IGJ1dCBub3QgZGV0ZWN0ZWQuIA0KDQo+ IA0KPiBJbiB0aGUgInRhcmdldF9mcWRuIiBkZWZpbml0aW9uLiBUaGUgdGV4dCBhcHBlYXJzIHRv IGFzc3VtZSBhIEROUw0KPiByZXNvbHV0aW9uOyBpcyB0aGVyZSBhIG5vdCBhIHVzZSBjYXNlIHdo ZXJlIHRoZSBET1RTIHNlcnZlciB3b3VsZA0KPiByZWx5IG9uIGUuZy4gU05JIGluc3BlY3Rpb24g YW5kIG5vdCBkZWZlbmQgYW4gZW50aXJlIElQIGFkZHJlc3MgdGhhdA0KPiBoYWQgbXVsdGlwbGUg ZG9tYWlucz8NCg0KW01lZF0gVGhlIHJlc29sdXRpb24gaXMgbmVlZGVkIGZvciBzY29wZSB2YWxp ZGF0aW9uIGFuZCBjb25mbGljdCBoYW5kbGluZyBwdXJwb3Nlcy4gVGhhdCdzIHNhaWQsIG5vdGhp bmcgcHJldmVudHMgdGhlIG1pdGlnYXRvciB0byB1c2UgdGhlIG5hbWUgdG8gcHV0IGluIHBsYWNl IGFwcGxpY2F0aW9uLXNwZWNpZmljIGNvdW50ZXJtZWFzdXJlcy4gV2UgZG9uJ3QgY2FsbCBvdXQg dGhvc2UgYXMgUkZDODgxMSBzZXRzIHRoZSBzY29wZSBhcyBmb2xsb3dzOiANCg0KICAgVGhlIHNj b3BlIG9mIHRoZSBET1RTIHNwZWNpZmljYXRpb25zIGlzIHRoZSBpbnRlcmZhY2VzIGJldHdlZW4g dGhlDQogICBET1RTIGNsaWVudCBhbmQgRE9UUyBzZXJ2ZXIuICBUaGUgaW50ZXJmYWNlcyB0byB0 aGUgYXR0YWNrIHRhcmdldCBhbmQNCiAgIHRoZSBtaXRpZ2F0b3IgYXJlIG91dCBvZiBzY29wZSBv ZiBET1RTLiAgU2ltaWxhcmx5LCB0aGUgb3BlcmF0aW9uIG9mDQogICBib3RoIHRoZSBhdHRhY2sg dGFyZ2V0IGFuZCB0aGUgbWl0aWdhdG9yIGlzIG91dCBvZiBzY29wZSBvZiBET1RTLg0KICAgVGh1 cywgRE9UUyBzcGVjaWZpZXMgbmVpdGhlciBob3cgYW4gYXR0YWNrIHRhcmdldCBkZWNpZGVzIGl0 IGlzIHVuZGVyDQogICBERG9TIGF0dGFjayBub3IgZG9lcyBET1RTIHNwZWNpZnkgaG93IGEgbWl0 aWdhdG9yIG1heSBhY3R1YWxseQ0KICAgbWl0aWdhdGUgc3VjaCBhbiBhdHRhY2suICANCg0KPiAN Cj4gImxpZmV0aW1lIiBkZWZpbml0aW9uOiBUaGUgdGV4dCBzYXlzIHRoZSBET1RTIHNlcnZlciBN QVkgcmVqZWN0DQo+IHVubGltaXRlZCBsaWZldGltZSwgd2hpY2ggaW1wbGllcyB0aGF0IGl0IE1V U1QgYWNjZXB0IGFueSBmaW5pdGUNCj4gbGlmZXRpbWUuDQoNCltNZWRdIE5vLiBUaGlzIHRleHQg aXMgYWJvdXQgdGhlIGJlaGF2aW9yIHdoZW4gaW5kZWZpbml0ZSBsaWZldGltZSBpcyByZXF1ZXN0 ZWQuIFRoZSBmdWxsIHRleHQgaXMgYXMgZm9sbG93czoNCg0KICAgICAgQSBsaWZldGltZSBvZiBu ZWdhdGl2ZSBvbmUgKC0xKSBpbmRpY2F0ZXMgaW5kZWZpbml0ZSBsaWZldGltZSBmb3INCiAgICAg IHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QuICBUaGUgRE9UUyBzZXJ2ZXIgTUFZIHJlZnVzZSBhbiBp bmRlZmluaXRlDQogICAgICBsaWZldGltZSwgZm9yIHBvbGljeSByZWFzb25zOyB0aGUgZ3JhbnRl ZCBsaWZldGltZSB2YWx1ZSBpcw0KICAgICAgcmV0dXJuZWQgaW4gdGhlIHJlc3BvbnNlLiAgRE9U UyBjbGllbnRzIE1VU1QgYmUgcHJlcGFyZWQgdG8gbm90IGJlDQogICAgICBncmFudGVkIG1pdGln YXRpb25zIHdpdGggaW5kZWZpbml0ZSBsaWZldGltZXMuDQoNCkluIGFsbCBjYXNlcywgaXQgaXMg dGhlIHNlcnZlciB3aG8gZGVjaWRlcyBhYm91dCB0aGUgYWN0dWFsIGxpZmV0aW1lOg0KDQogICAg ICBUaGUgRE9UUyBzZXJ2ZXIgTVVTVCBhbHdheXMgaW5kaWNhdGUgdGhlIGFjdHVhbCBsaWZldGlt ZSBpbiB0aGUNCiAgICAgIHJlc3BvbnNlIGFuZCB0aGUgcmVtYWluaW5nIGxpZmV0aW1lIGluIHN0 YXR1cyBtZXNzYWdlcyBzZW50IHRvIHRoZQ0KICAgICAgRE9UUyBjbGllbnQuDQoNClRoaXMgaXMg aW5kaWNhdGVkIGFsc28gaW4gdGhlIHJlZnJlc2ggcmVxdWVzdDogDQoNCiAgIEZvciBhIG1pdGln YXRpb24gcmVxdWVzdCB0byBjb250aW51ZSBiZXlvbmQgdGhlIGluaXRpYWwgbmVnb3RpYXRlZA0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXl5eXl5e Xl5eXl5eXl5eXl5eDQogICBsaWZldGltZSwgdGhlIERPVFMgY2xpZW50IGhhcyB0byByZWZyZXNo IHRoZSBjdXJyZW50IG1pdGlnYXRpb24NCiAgIF5eXl5eXl5eIA0KICAgcmVxdWVzdCBieSBzZW5k aW5nIGEgbmV3IFBVVCByZXF1ZXN0Lg0KDQogSSBwcmVzdW1lIHlvdSBtZWFuIHRvIHNheSB0aGF0 IERPVFMgc2VydmVycyBhcmUgZnJlZSB0bw0KPiBzZXQgYSBwb2xpY3kgbGltaXQgb24gdGhlIG1h eGltdW0gYWxsb3dhYmxlIGxpZmV0aW1lPw0KDQpbTWVkXSBUaGF0J3Mgb25lIGltcGxlbWVudGF0 aW9uIG9wdGlvbi4gT3RoZXIgb3B0aW9ucyB3b3VsZCBiZToNCiogaG9ub3IgYW55IGZpbml0ZSBs aWZldGltZSBidXQgc2V0IGEgbWF4IG9ubHkgd2hlbiBpbmRlZmluaXRlIGxpZmV0aW1lIGlzIHJl cXVlc3RlZC4gDQoqIFVzZSBhIG1heCB2YWx1ZSBmb3IgcmVxdWVzdGVkIGZpbml0ZSBsaWZldGlt ZXMgYW5kIGFub3RoZXIgbWF4IGlmIGluZGVmaW5pdGUgbGlmZXRpbWUgaXMgcmVxdWVzdGVkICAg DQoNCldlIGRvbid0IGluY2x1ZGUgc3VjaCBkZXRhaWxzIGFzIHRoZXNlIGFyZSBpbXBsZW1lbnRh dGlvbi0gYW5kIGRlcGxveW1lbnQtc3BlY2lmaWMuIA0KDQo+IA0KPiAoNC40LjEuMikgImNkaWQi IGRlZmluaXRpb246IFRoZSBleGFtcGxlIGluIEZpZy4gOSBkb2VzIG5vdCBoYXZlIGENCj4gY2Rp ZCB0aGF0IG1hdGNoZXMgdGhlIGN1aWQuDQoNCltNZWRdIFdoaWNoIGlzIE9LLg0KDQoNCiBUaGUg dGV4dCBpbmRpY2F0ZXMgdGhhdCB0aGVzZSBtaWdodCBub3QNCj4gbWF0Y2ggaWYgYSBjbGllbnQt c2lkZSBnYXRld2F5IGFkZGVkIHRoZSBjZGlkLA0KDQpbTWVkXSBUaGUgY2xpZW50LWRvbWFpbiBn YXRld2F5cyBkbyBub3QgaW5zZXJ0IHRoZSBjZGlkLiBXaGF0IHdlIHNheSBpcyB0aGUgZm9sbG93 aW5nOg0KDQogICAgICBUaGUgJ2NkaWQnIGdlbmVyYXRlZCBieSBhIHNlcnZlci1kb21haW4NCiAg ICAgIGdhdGV3YXkgaXMgbGlrZWx5IHRvIGJlIHRoZSBzYW1lIGFzIHRoZSAnY3VpZCcgZXhjZXB0 IHRoZSBjYXNlDQogICAgICBpbiB3aGljaCB0aGUgRE9UUyBtZXNzYWdlIHdhcyByZWxheWVkIGJ5 IGEgY2xpZW50LWRvbWFpbiBET1RTDQogICAgICBnYXRld2F5IG9yIHRoZSAnY3VpZCcgd2FzIGdl bmVyYXRlZCBieSBhIHJvZ3VlIERPVFMgY2xpZW50Lg0KDQpQbGVhc2Ugbm90ZSB0aGF0IHRoZSB0 ZXh0IHRhbGtzIGFib3V0ICJyZWxheWVkIiBub3QgImluc2VydGVkIi4gSWYgYSByZXF1ZXN0IGlz IHJlbGF5ZWQgYnkgYSBjbGllbnQtZG9tYWluIGdhdGV3YXksIHRoZSBjdWlkIHRoYXQgd2lsbCBi ZSBwcmVzZW50ZWQgYnkgdGhlIGNsaWVudCBpcyAhPSBmcm9tIHRoZSBjZGlkIHRoYXQgd2lsbCBi ZSBnZW5lcmF0ZWQgYnkgdGhlIHNlcnZlci1kb21haW4gZ2F0ZXdheS4gVGhpcyBpcyBiZWNhdXNl IHRoZSBjbGllbnQgY2VydGlmaWNhdGUgIT0gdGhlIGNsaWVudC1kb21haW4gZ2F0ZXdheSBjZXJ0 aWZpY2F0ZS4gDQoNCiBidXQgdGhlbiBsYXRlciBzYXlzDQo+IHRoYXQgIm9ubHkgdGhlIGZpcnN0 IG9uLXBhdGggc2VydmVyLWRvbWFpbiBET1RTIGdhdGV3YXkgY2FuICBpbnNlcnQNCj4gYSAnY2Rp ZCcgdmFsdWUuIiBBZnRlciByZWFkaW5nIHRoaXMgYSBmZXcgdGltZXMsIEkgdGhpbmsgd2hhdCB5 b3UNCj4gYXJlIHNheWluZyBpcyAoYSkgY2xpZW50cyBNVVNUIE5PVCBhZGQgY2RpZDsNCj4gKGIp IGNsaWVudC1zaWRlIGdhdGV3YXlzIFNIT1VMRCBhZGQgdGhlbTsNCg0KW01lZF0gQWN0dWFsbHkg bm8gYmVjYXVzZSBzdWNoIGluZm9ybWF0aW9uIGlzIG5vdCB0cnVzdGVkOiANCg0KICAgICAgRE9U UyBzZXJ2ZXJzIE1VU1QgaWdub3JlICdjZGlkJyBhdHRyaWJ1dGVzIHRoYXQgYXJlIGRpcmVjdGx5 DQogICAgICBzdXBwbGllZCBieSBzb3VyY2UgRE9UUyBjbGllbnRzIG9yIGNsaWVudC1kb21haW4g RE9UUyBnYXRld2F5cy4NCg0KIChjKSB0aGUgZmlyc3Qgc2VydmVyLXNpZGUNCj4gZ2F0ZXdheSBN VVNUIHN0cmlwIHRoZW0gYW5kIHRoZW4gYWRkIHRoZWlyIG93bjsgYW5kIChkKSBzdWJzZXF1ZW50 DQo+IHNlcnZlciBzaWRlIGdhdGV3YXlzIE1VU1QgTk9UIGNoYW5nZSB0aGUgY2RpZC4gSXMgdGhp cyBjb3JyZWN0Pw0KPiBFaXRoZXIgd2F5LCBpdCBjb3VsZCBiZSBleHByZXNzZWQgbGVzcyBjb25m dXNpbmdseS4NCg0KW01lZF0gSSdtIG5vdCBzdXJlIGEgbW9kaWZpY2F0aW9uIGlzIG5lZWRlZCBi ZWNhdXNlIEkgc3VzcGVjdCB0aGUgY29uZnVzaW9uIGNhbWUgZnJvbSBpbnRlcnByZXRpbmcgInJl bGF5ZWQiIGFzICJpbnNlcnRlZCIuDQoNClBsZWFzZSBsZXQgdXMga25vdyBpZiBhbnkgZW5oYW5j ZW1lbnQgaXMgbmVlZGVkLiBXaWxsIGJlIG1vcmUgdGhhbiBoYXBweSB0byBjb25zaWRlciBpdC4g VGhhbmtzLiAgIA0KDQo+IA0KPiAoNC40LjEuMykgRmlnLiAxMTogV2hlcmUgZG9lcyB0aGUgc2Vj b25kIGN1aWQgY29tZSBmcm9tPyBJcyB0aGlzDQo+IGdlbmVyYXRlZCBieSB0aGUgc2VydmVyIG9u IGJlaGFsZiBvZiB0aGUgY2xpZW50PyBJZiBzbywgSSByZWNvbW1lbmQNCj4gcy9hIG5ldyByZXF1 ZXN0IHdpdGggYSBuZXcgJ2N1aWQnL2EgbmV3IHJlcXVlc3Qgd2l0aCBhIG5ldywgc2VydmVyLQ0K PiBwcm92aWRlZCAnY3VpZCcNCg0KW01lZF0gVGhlIG5ldyBjdWlkIGlzIGdlbmVyYXRlZCBieSB0 aGUgY2xpZW50IGFzIHBlciB0aGUgZm9sbG93aW5nIGluIFNlY3Rpb24gNC40LjEuMTogDQoNCiAg ICAgIERPVFMgc2VydmVycyBNVVNUIHJldHVybiA0LjA5IChDb25mbGljdCkgZXJyb3IgY29kZSB0 byBhIERPVFMNCiAgICAgIHBlZXIgdG8gbm90aWZ5IHRoYXQgdGhlICdjdWlkJyBpcyBhbHJlYWR5 IGluIHVzZSBieSBhbm90aGVyDQogICAgICBET1RTIGNsaWVudC4gIFVwb24gcmVjZWlwdCBvZiB0 aGF0IGVycm9yIGNvZGUsIGEgbmV3ICdjdWlkJw0KICAgICAgTVVTVCBiZSBnZW5lcmF0ZWQgYnkg dGhlIERPVFMgcGVlciAoZS5nLiwgdXNpbmcgW1JGQzQxMjJdKS4NCg0KPiANCj4gV2hlbiBleHRl bmRpbmcgdGhlIGxpZmV0aW1lLCBkb2VzIHRoZSBuZXcgbGlmZXRpbWUgZmllbGQgbWVhc3VyZQ0K PiBmcm9tIHRoZSBpbml0aWFsIHRyaWdnZXIgb3IgZnJvbSB0aGUgbW9tZW50IG9mIGV4dGVuc2lv bj8NCg0KW01lZF0gVGhlIGxhdHRlci4gRldJVywgdGhlIGRlc2NyaXB0aW9uIG9mICJsaWZldGlt ZSIgaW5jbHVkZXMgdGhlIGZvbGxvd2luZzogDQoNCiAgICAgIFVwb24gdGhlIGV4cGlyeSBvZiB0 aGlzIGxpZmV0aW1lLCBhbmQgaWYgdGhlDQogICAgICByZXF1ZXN0IGlzIG5vdCByZWZyZXNoZWQs IHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgcmVtb3ZlZC4gIFRoZQ0KICAgICAgcmVxdWVzdCBj YW4gYmUgcmVmcmVzaGVkIGJ5IHNlbmRpbmcgdGhlIHNhbWUgcmVxdWVzdCBhZ2Fpbi4NCg0KVGhh dCBpcywgdGhlIGxpZmV0aW1lIHdpbGwgYmUgZGVjcmVtZW50ZWQgdGlsbCBpdCByZWFjaGVzIDAg KGkuZS4sIGV4cGlyZSkuIFRoYXTigJlzIHdoeSB3ZSBoYXZlOiANCg0KICAgRm9yIGEgbWl0aWdh dGlvbiByZXF1ZXN0IHRvIGNvbnRpbnVlIGJleW9uZCB0aGUgaW5pdGlhbCBuZWdvdGlhdGVkDQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXl5eXl5eDQogICBsaWZldGlt ZSwgdGhlIERPVFMgY2xpZW50IGhhcyB0byByZWZyZXNoIHRoZSBjdXJyZW50IG1pdGlnYXRpb24N CiAgIHJlcXVlc3QgYnkgc2VuZGluZyBhIG5ldyBQVVQgcmVxdWVzdC4gIFRoaXMgUFVUIHJlcXVl c3QgTVVTVCB1c2UgdGhlDQogICBzYW1lICdtaWQnIHZhbHVlLCBhbmQgaXQgTVVTVCByZXBlYXQg YWxsIHRoZSBvdGhlciBwYXJhbWV0ZXJzIGFzIHNlbnQNCiAgIGluIHRoZSBvcmlnaW5hbCBtaXRp Z2F0aW9uIHJlcXVlc3QgYXBhcnQgZnJvbSBhIHBvc3NpYmxlIGNoYW5nZSB0bw0KICAgdGhlICds aWZldGltZScgcGFyYW1ldGVyIHZhbHVlLiAgSW4gc3VjaCBhIGNhc2UsIHRoZSBET1RTIHNlcnZl ciBNQVkNCiAgIHVwZGF0ZSB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0LCBhbmQgYSAyLjA0IChDaGFu Z2VkKSByZXNwb25zZSBpcw0KDQoicG9zc2libGUgY2hhbmdlIiBpcyB1c2VkIGhlcmUgdG8gY292 ZXIgdGhlIGNhc2Ugd2hlcmUgdGhlIGNsaWVudCBkZWNpZGVzIHRvIHVzZSBhZGp1c3QgdGhlIGxp ZmV0aW1lIGFzIGEgZnVuY3Rpb24gb2YgdGhlIG1pdGlnYXRpb24gb3BlcmF0aW9ucyAoZS5nLiwg dXNlIGxvbmcgbGlmZXRpbWUpLg0KDQogSWYgdGhlDQo+IGZvcm1lciwgYSBjaGFuZ2UgaW4gdGhl IGxpZmV0aW1lIHZhbHVlIGlzIG1hbmRhdG9yeSwgbm90DQo+ICJwb3RlbnRpYWwuIiBJZiB0aGUg bGF0dGVyLCBob3cgZG9lcyB0aGUgc2VydmVyIGRpc3Rpbmd1aXNoIHRoaXMNCj4gZnJvbSBhIGR1 cGxpY2F0ZSByZXF1ZXN0Pw0KDQpbTWVkXSBUaGlzIGlzIGRvbmUgYXQgdGhlIENvQVAgbGV2ZWwg KE1lc3NhZ2UgSUQsIGluIHBhcnRpY3VsYXIpLiBGV0lXLCB0aGlzIGlzIHJlbWluZGVkIGluIHRo ZSBkb2N1bWVudDoNCg0KICAgQXMgYSByZW1pbmRlciwgdGhlIE1lc3NhZ2UgSUQNCiAgIChTZWN0 aW9uIDMgb2YgW1JGQzcyNTJdKSBpcyBjaGFuZ2VkIGVhY2ggdGltZSBhIG5ldyBDb0FQIHJlcXVl c3QgaXMNCiAgIHNlbnQsIGFuZCB0aGUgVG9rZW4gKFNlY3Rpb24gNS4zLjEgb2YgW1JGQzcyNTJd KSBpcyByYW5kb21pemVkIGluDQogICBlYWNoIENvQVAgcmVxdWVzdC4NCg0KPiANCj4gKDQuNC4y KSBGaWcuIDE0IHVzZXMgYSBzdHJpbmcgdG8gcmVwcmVzZW50IHRoZSBzdGF0dXMgaW5zdGVhZCBv ZiBvbmUNCj4gb2YgdGhlIHZhbHVlcyBpbiBUYWJsZSAzLg0KDQpbTWVkXSBUaGF0IGZpZ3VyZSBp cyBjb3JyZWN0IGJlY2F1c2U6DQoNCigxKSBTZWN0aW9uIDQuNCBzYXlzIHRoZSBmb2xsb3dpbmc6 IA0KDQogICBKU09OIGVuY29kaW5nIG9mIFlBTkcgbW9kZWxlZCBkYXRhIFtSRkM3OTUxXSBpcyB1 c2VkIHRvIGlsbHVzdHJhdGUNCiAgIHRoZSB2YXJpb3VzIG1ldGhvZHMgZGVmaW5lZCBpbiB0aGUg Zm9sbG93aW5nIHN1YnNlY3Rpb25zLiAgQWxzbywgdGhlDQogICBleGFtcGxlcyB1c2UgdGhlIExh YmVscyBkZWZpbmVkIGluIFNlY3Rpb25zIDEwLjYuMiwgMTAuNi4zLCAxMC42LjQsDQogICBhbmQg MTAuNi41Lg0KDQooMikgZW51bSB2YWx1ZXMgYXJlIG1hcHBlZCB0byBzdHJpbmcgKEpTT04pLiAN Cg0KICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLSstLS0tLS0rLS0tLS0t LS0tLS0tLSstLS0tLS0tLSsNCiAgIHwgUGFyYW1ldGVyIE5hbWUgICAgICB8IFlBTkcgVHlwZSAg ICB8IENCT1IgfCBDQk9SIE1ham9yICB8IEpTT04gICB8DQogICB8ICAgICAgICAgICAgICAgICAg ICAgfCAgICAgICAgICAgICAgfCBLZXkgIHwgVHlwZSAmICAgICAgfCBUeXBlICAgfA0KICAgfCAg ICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgIHwgICAgICB8IEluZm9ybWF0aW9uIHwg ICAgICAgIHwNCiAgICs9PT09PT09PT09PT09PT09PT09PT0rPT09PT09PT09PT09PT0rPT09PT09 Kz09PT09PT09PT09PT0rPT09PT09PT0rDQogICB8IHN0YXR1cyAgICAgICAgICAgICAgfCBlbnVt ZXJhdGlvbiAgfCAxNiAgIHwgMCB1bnNpZ25lZCAgfCBTdHJpbmcgfA0KDQoNCj4gDQo+ICg0LjQu MykgU2FtZSB3aXRoIEZpZy4gMTYgYW5kIFRhYmxlIDQuDQoNCltNZWRdIElkZW0gYXMgcHJldmlv dXMgb25lLiANCg0KPiANCj4gKDQuNC4yLjEpIElmIHVwZGF0ZXMgYXJlIG5vbi1jb25maXJtYWJs ZSwgaG93IGRvZXMgdGhlIGNsaWVudCBrbm93DQo+IGlmIGl0J3MgZ290dGVuIG91dCBvZiBzeW5j IG9uIHN0YXRlIHVwZGF0ZXM/DQoNCltNZWRdIFRoZSBjbGllbnQgY2FuIGZvbGxvdyA0LjQuMi4y Og0KDQogICBUaGUgRE9UUyBjbGllbnQgY2FuIHNlbmQgdGhlIEdFVCByZXF1ZXN0IGF0IGZyZXF1 ZW50IGludGVydmFscw0KICAgd2l0aG91dCB0aGUgT2JzZXJ2ZSBPcHRpb24gdG8gcmV0cmlldmUg dGhlIGNvbmZpZ3VyYXRpb24gZGF0YSBvZiB0aGUNCiAgIG1pdGlnYXRpb24gcmVxdWVzdCBhbmQg bm9uLWNvbmZpZ3VyYXRpb24gZGF0YSAoaS5lLiwgdGhlIGF0dGFjaw0KICAgc3RhdHVzKS4gIERP VFMgY2xpZW50cyBNQVkgYmUgY29uZmlndXJlZCB3aXRoIGEgcG9saWN5IGluZGljYXRpbmcgdGhl DQogICBmcmVxdWVuY3kgb2YgcG9sbGluZyBET1RTIHNlcnZlcnMgdG8gZ2V0IHRoZSBtaXRpZ2F0 aW9uIHN0YXR1cy4NCg0KPiANCj4gKDQuNS4xKSBXaGF0IGlzIHRoZSB1bml0IG9mIHByb2Jpbmcg cmF0ZT8NCg0KW01lZF0gYnl0ZXMvc2Vjb25kLiBUaGlzIGlzIGluZGljYXRlZCwgZS5nLiwgaW4g dGhlIFlBTkcgbW9kdWxlOiANCg0KICAgICAgIGxlYWYgY3VycmVudC12YWx1ZSB7DQogICAgICAg ICB0eXBlIHVpbnQxNjsNCiAgICAgICAgIHVuaXRzICJieXRlL3NlY29uZCI7DQogICAgICAgICBk ZWZhdWx0ICI1IjsNCiAgICAgICAgIGRlc2NyaXB0aW9uDQogICAgICAgICAgICJDdXJyZW50IHBy b2JpbmctcmF0ZSB2YWx1ZS4iOw0KICAgICAgIH0NCg0KSSB1cGRhdGVkIDQuNS4xIHRvIG1lbnRp b24gaXQgdGhlcmUgYXMgd2VsbC4gVGhhbmtzLg0KDQo+IA0KPiAoOCkgcy9zaG91bGQvU0hPVUxE LCBzL211c3QvTVVTVCB0aHJvdWdob3V0Lg0KPiANCg0KW01lZF0gV2UgZG9uJ3QgdXNlIHRoZSBu b3JtYXRpdmUgbGFuZ3VhZ2UgaGVyZSBhcyB0aGlzIGlzIHJlZHVuZGFudCB3aXRoIHdoYXQgaXMg aW4gU2VjdGlvbiA3Lg0KDQoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBldCBzZXMgcGllY2VzIGpvaW50 ZXMgcGV1dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVudGllbGxlcyBvdSBw cml2aWxlZ2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0 ZXMgb3UgY29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNz YWdlIHBhciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEgbCdleHBlZGl0ZXVyIGV0IGxl IGRldHJ1aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBlbGVj dHJvbmlxdWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sCk9yYW5nZSBkZWNsaW5l IHRvdXRlIHJlc3BvbnNhYmlsaXRlIHNpIGNlIG1lc3NhZ2UgYSBldGUgYWx0ZXJlLCBkZWZvcm1l IG91IGZhbHNpZmllLiBNZXJjaS4KClRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzIG1h eSBjb250YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uIHRoYXQgbWF5 IGJlIHByb3RlY3RlZCBieSBsYXc7CnRoZXkgc2hvdWxkIG5vdCBiZSBkaXN0cmlidXRlZCwgdXNl ZCBvciBjb3BpZWQgd2l0aG91dCBhdXRob3Jpc2F0aW9uLgpJZiB5b3UgaGF2ZSByZWNlaXZlZCB0 aGlzIGVtYWlsIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0 aGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cy4KQXMgZW1haWxzIG1heSBiZSBhbHRlcmVk LCBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZlIGJlZW4gbW9kaWZp ZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCgo= From nobody Wed Jun 2 09:38:56 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CE233A1157; Wed, 2 Jun 2021 09:38:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.854 X-Spam-Level: X-Spam-Status: No, score=-0.854 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, NUMERIC_HTTP_ADDR=1.242, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6mcouzXRy6b4; Wed, 2 Jun 2021 09:38:48 -0700 (PDT) Received: from mail-il1-x12a.google.com (mail-il1-x12a.google.com [IPv6:2607:f8b0:4864:20::12a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 376DE3A1158; Wed, 2 Jun 2021 09:38:48 -0700 (PDT) Received: by mail-il1-x12a.google.com with SMTP id z1so2799873ils.0; Wed, 02 Jun 2021 09:38:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Bhv9LwVidk+dVv0MaECHSfSpMRvI+iSyDHjlBsGpv40=; b=JamWqIuzFv7ERnZ3BSXZ7vsZdByhk482l/eAEmVILmV0Jdj1jkqZ22hxf3WJK6Al+L sNRJJtfwPdndQJhw+z9Nih5/iYTmcftwjcktzSELwxOPLDon1CgR9XFfbgpEQ5xebp+o +0DcSZ39ox6zF7LN5lKY14gXuaV1hI2OA1l4Quv1iaCT1BrHVvfvRU4BRQri5qZTKs6Q yHdRgF4RMP6BnJfs/Aa4hY1XCzrnXsvTSlx67O2g9hr7dQbscUyD5iUVkom8Ecpa4tHD 1l84EH2UvVcD0omkmT6xKM5tqHctilkvylACL+0yeIbfc806kQx8+J0L3x8Q+RB4mycJ VytA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Bhv9LwVidk+dVv0MaECHSfSpMRvI+iSyDHjlBsGpv40=; b=MHoMtuF41bQ7BKhRybvKIIc2jR/zmtaaSgKZ+cwLrFK02z5273yBYHyKp7PM6XEyxk uy2JqJDYcsZH92TWSqtqih2NAk7eDZc31Nvn82YRntiffHwiOdkzj4ECvp6/LA8hbbDP xLirz9B6XSs40+0curBILftwPkj/FNYuSkJ5yFKY8yQi+KI5/A73KwzD+TBrSei9++Tp bj5GPWfz+PwQOATD6ekzcNlYAyZRDVadJUChRR2AdWsVaL4wQc+62i3frHFfwvpq7EA/ GmhG3VZgKOSV3Ab5mLiSJrz9Jp+dNgBapTYDn2cD3WrR9deKWmKKtgYUJqag14pg47+I QUWQ== X-Gm-Message-State: AOAM5335c6tViQyoaZN2T46AIMj4bGFS0ZpAH4RsIfBQ31X2jJMh/ggS oRZtGRMZjgKL9uTTriTm5u4PBZ9lLT7P0F23OZ8= X-Google-Smtp-Source: ABdhPJyCtja2bDMuwb5FyoX993yEpyRv2tEILxwTYTF9ar1VqWzShSYogIy7f5C98M4xDI9OzesTEFts2+KMnfjEYgk= X-Received: by 2002:a92:c24b:: with SMTP id k11mr26809114ilo.303.1622651926866; Wed, 02 Jun 2021 09:38:46 -0700 (PDT) MIME-Version: 1.0 References: <162258717896.27217.11487555052395475135@ietfa.amsl.com> <26196_1622627385_60B75439_26196_97_8_787AE7BB302AE849A7480A190F8B933035396207@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <26196_1622627385_60B75439_26196_97_8_787AE7BB302AE849A7480A190F8B933035396207@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: Martin Duke Date: Wed, 2 Jun 2021 09:38:36 -0700 Message-ID: To: mohamed.boucadair@orange.com Cc: The IESG , "draft-ietf-dots-rfc8782-bis@ietf.org" , "dots-chairs@ietf.org" , "dots@ietf.org" , "valery@smyslov.net" Content-Type: multipart/alternative; boundary="000000000000b1f04405c3cb17cc" Archived-At: Subject: Re: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 16:38:54 -0000 --000000000000b1f04405c3cb17cc Content-Type: text/plain; charset="UTF-8" Hi Mohamed, I agree with most of your responses, and below only include where I think we need further discussion. On Wed, Jun 2, 2021 at 2:49 AM wrote: > > > (4.4.1.3) Fig. 11: Where does the second cuid come from? Is this > > generated by the server on behalf of the client? If so, I recommend > > s/a new request with a new 'cuid'/a new request with a new, server- > > provided 'cuid' > > [Med] The new cuid is generated by the client as per the following in > Section 4.4.1.1: > > DOTS servers MUST return 4.09 (Conflict) error code to a DOTS > peer to notify that the 'cuid' is already in use by another > DOTS client. Upon receipt of that error code, a new 'cuid' > MUST be generated by the DOTS peer (e.g., using [RFC4122]). > That's not what I read from Fig. 11. The conflict response has a cuid that has not previously appeared in the exchange. Maybe Fig. 11 is wrong? > > > > > When extending the lifetime, does the new lifetime field measure > > from the initial trigger or from the moment of extension? > > [Med] The latter. FWIW, the description of "lifetime" includes the > following: > > Upon the expiry of this lifetime, and if the > request is not refreshed, the mitigation request is removed. The > request can be refreshed by sending the same request again. > OK, can we state this explicitly rather than imply it? > > > > (4.5.1) What is the unit of probing rate? > > [Med] bytes/second. This is indicated, e.g., in the YANG module: > > leaf current-value { > type uint16; > units "byte/second"; > default "5"; > description > "Current probing-rate value."; > } > > I updated 4.5.1 to mention it there as well. Thanks. > Thank you. > > > > > (8) s/should/SHOULD, s/must/MUST throughout. > > > > [Med] We don't use the normative language here as this is redundant with > what is in Section 7. > I was unable to find another mention of much of the material in this paragraph: The DOTS server should support certificate-based client authentication. The DOTS client should respond to the DOTS server's TLS CertificateRequest message with the PKIX certificate held by the DOTS client. DOTS client certificate validation must be performed per [RFC5280 ], and the DOTS client certificate must conform to the [RFC5280 ] certificate profile. If a DOTS client does not support TLS client certificate authentication, it must support client authentication based on pre-shared key or raw public key. in particular, the the last "must" does not obviously appear elsewhere, unless you're rephrasing it substantially. --000000000000b1f04405c3cb17cc Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Mohamed,

I agree with= most of your responses, and below only include where I think we need furth= er discussion.

On Wed, Jun 2, 2021 at 2:49 AM <mohamed.boucadair@orange.com> wrote:
=C2=A0&= gt;
> (4.4.1.3) Fig. 11: Where does the second cuid come from? Is this
> generated by the server on behalf of the client? If so, I recommend > s/a new request with a new 'cuid'/a new request with a new, se= rver-
> provided 'cuid'

[Med] The new cuid is generated by the client as per the following in Secti= on 4.4.1.1<= /a>:

=C2=A0 =C2=A0 =C2=A0 DOTS servers MUST return 4.09 (Conflict) error code to= a DOTS
=C2=A0 =C2=A0 =C2=A0 peer to notify that the 'cuid' is already in u= se by another
=C2=A0 =C2=A0 =C2=A0 DOTS client.=C2=A0 Upon receipt of that error code, a = new 'cuid'
=C2=A0 =C2=A0 =C2=A0 MUST be generated by the DOTS peer (e.g., using [RFC41= 22]).

=C2=A0

>
> When extending the lifetime, does the new lifetime field measure
> from the initial trigger or from the moment of extension?

[Med] The latter. FWIW, the description of "lifetime" includes th= e following:

=C2=A0 =C2=A0 =C2=A0 Upon the expiry of this lifetime, and if the
=C2=A0 =C2=A0 =C2=A0 request is not refreshed, the mitigation request is re= moved.=C2=A0 The
=C2=A0 =C2=A0 =C2=A0 request can be refreshed by sending the same request a= gain.

OK, can we state this explicitly = rather than imply it?
=C2=A0
>
> (4.5.1) What is the unit of probing rate?

[Med] bytes/second. This is indicated, e.g., in the YANG module:

=C2=A0 =C2=A0 =C2=A0 =C2=A0leaf current-value {
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0type uint16;
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0units "byte/second";
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0default "5";
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0description
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0"Current probing-rate value.&= quot;;
=C2=A0 =C2=A0 =C2=A0 =C2=A0}

I updated 4.5.1 to mention it there as well. Thanks.
<= br>
Thank you.
=C2=A0

>
> (8) s/should/SHOULD, s/must/MUST throughout.
>

[Med] We don't use the normative language here as this is redundant wit= h what is in Section 7.

I was unable to= find another mention of much of the material in this paragraph:
The DOTS server should support certificate-bas=
ed client
   authentication.  The DOTS client should respond to the DOTS server's
   TLS CertificateRequest message with the PKIX certificate held by the
   DOTS client.  DOTS client certificate validation must be performed
   per [RFC5280], and the DOTS client cert=
ificate must conform to the
   [RFC5280] certificate profile.  If a DO=
TS client does not support TLS
   client certificate authentication, it must support client
   authentication based on pre-shared key or raw public key.
in partic= ular, the the last "must" does not obviously appear elsewhere, un= less you're rephrasing it substantially.
--000000000000b1f04405c3cb17cc-- From nobody Wed Jun 2 10:57:01 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31E523A14C7; Wed, 2 Jun 2021 10:56:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.851 X-Spam-Level: X-Spam-Status: No, score=-0.851 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, NUMERIC_HTTP_ADDR=1.242, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L6KDN1k2LMXU; Wed, 2 Jun 2021 10:56:49 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 025853A14C6; Wed, 2 Jun 2021 10:56:48 -0700 (PDT) Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr24.francetelecom.fr (ESMTP service) with ESMTP id 4FwGtl29Bmz1y7W; Wed, 2 Jun 2021 19:56:47 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1622656607; bh=qzFdOfpBpowJ+YIksdlVu9NZ36recWdehu99wThVJ50=; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; b=kgZcDg3i1E4JORQ8pYnEApRafTYg/xaN0Fst2g4ZK2Q7HxwjLyMOhDkI94Dg6wuHv R3TLV3CbVDHXEtMBZVpk2pvfxAiXB7J+EAQrg1pnw6XAYCrT6j5GRNS+zLuf7iX5Rn wGE1ShSEbsjNUU8lcqIWLfkRxK8K1Y89qDNAok/6yT9W8OHeePLZMzEVJ4Qrh6kiSY nq9TSqTSbMLPtoGy2p1Akc9iblAgHkmV2k1RNe28qgQmuJcoiJqbthOvN0GArUlOTA ykVzezAYUbCbz6/vHKSPF1e33g8bmMn9ES+Ry0zhkeirvA0pffEFwiNHPCGvUNNxIg MOmQlRPWs9oiA== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.101]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 4FwGtl1JK1z8sYR; Wed, 2 Jun 2021 19:56:47 +0200 (CEST) From: To: Martin Duke CC: "dots-chairs@ietf.org" , "valery@smyslov.net" , "dots@ietf.org" , The IESG , "draft-ietf-dots-rfc8782-bis@ietf.org" Thread-Topic: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) Thread-Index: AQHXV83NGyQMqjgrykmp15gO6f6VqasA9S9A Date: Wed, 2 Jun 2021 17:56:45 +0000 Message-ID: <5734_1622656607_60B7C65F_5734_420_1_787AE7BB302AE849A7480A190F8B9330353966F7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162258717896.27217.11487555052395475135@ietfa.amsl.com> <26196_1622627385_60B75439_26196_97_8_787AE7BB302AE849A7480A190F8B933035396207@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B9330353966F7OPEXCAUBMA2corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 17:56:55 -0000 --_000_787AE7BB302AE849A7480A190F8B9330353966F7OPEXCAUBMA2corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogRG90cyBb bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBNYXJ0aW4gRHVrZQ0K RW52b3nDqSA6IG1lcmNyZWRpIDIganVpbiAyMDIxIDE4OjM5DQrDgCA6IEJPVUNBREFJUiBNb2hh bWVkIElOTk9WL05FVCA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4NCkNjIDogZG90cy1j aGFpcnNAaWV0Zi5vcmc7IHZhbGVyeUBzbXlzbG92Lm5ldDsgZG90c0BpZXRmLm9yZzsgVGhlIElF U0cgPGllc2dAaWV0Zi5vcmc+OyBkcmFmdC1pZXRmLWRvdHMtcmZjODc4Mi1iaXNAaWV0Zi5vcmcN Ck9iamV0IDogUmU6IFtEb3RzXSBNYXJ0aW4gRHVrZSdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1p ZXRmLWRvdHMtcmZjODc4Mi1iaXMtMDc6ICh3aXRoIENPTU1FTlQpDQoNCkhpIE1vaGFtZWQsDQoN CkkgYWdyZWUgd2l0aCBtb3N0IG9mIHlvdXIgcmVzcG9uc2VzLCBhbmQgYmVsb3cgb25seSBpbmNs dWRlIHdoZXJlIEkgdGhpbmsgd2UgbmVlZCBmdXJ0aGVyIGRpc2N1c3Npb24uDQoNCk9uIFdlZCwg SnVuIDIsIDIwMjEgYXQgMjo0OSBBTSA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWls dG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4+IHdyb3RlOg0KID4NCj4gKDQuNC4xLjMp IEZpZy4gMTE6IFdoZXJlIGRvZXMgdGhlIHNlY29uZCBjdWlkIGNvbWUgZnJvbT8gSXMgdGhpcw0K PiBnZW5lcmF0ZWQgYnkgdGhlIHNlcnZlciBvbiBiZWhhbGYgb2YgdGhlIGNsaWVudD8gSWYgc28s IEkgcmVjb21tZW5kDQo+IHMvYSBuZXcgcmVxdWVzdCB3aXRoIGEgbmV3ICdjdWlkJy9hIG5ldyBy ZXF1ZXN0IHdpdGggYSBuZXcsIHNlcnZlci0NCj4gcHJvdmlkZWQgJ2N1aWQnDQoNCltNZWRdIFRo ZSBuZXcgY3VpZCBpcyBnZW5lcmF0ZWQgYnkgdGhlIGNsaWVudCBhcyBwZXIgdGhlIGZvbGxvd2lu ZyBpbiBTZWN0aW9uIDQuNC4xLjE8aHR0cDovLzQuNC4xLjE+Og0KDQogICAgICBET1RTIHNlcnZl cnMgTVVTVCByZXR1cm4gNC4wOSAoQ29uZmxpY3QpIGVycm9yIGNvZGUgdG8gYSBET1RTDQogICAg ICBwZWVyIHRvIG5vdGlmeSB0aGF0IHRoZSAnY3VpZCcgaXMgYWxyZWFkeSBpbiB1c2UgYnkgYW5v dGhlcg0KICAgICAgRE9UUyBjbGllbnQuICBVcG9uIHJlY2VpcHQgb2YgdGhhdCBlcnJvciBjb2Rl LCBhIG5ldyAnY3VpZCcNCiAgICAgIE1VU1QgYmUgZ2VuZXJhdGVkIGJ5IHRoZSBET1RTIHBlZXIg KGUuZy4sIHVzaW5nIFtSRkM0MTIyXSkuDQoNClRoYXQncyBub3Qgd2hhdCBJIHJlYWQgZnJvbSBG aWcuIDExLiBUaGUgY29uZmxpY3QgcmVzcG9uc2UgaGFzIGEgY3VpZCB0aGF0IGhhcyBub3QgcHJl dmlvdXNseSBhcHBlYXJlZCBpbiB0aGUgZXhjaGFuZ2UuIE1heWJlIEZpZy4gMTEgaXMgd3Jvbmc/ DQoNCltNZWRdIFRoZSBleGFtcGxlIGRvZXMgbm90IGRlcGVuZCBvbiBwcmV2aW91cyBvbmVzIGJ1 dCBJIHVuZGVyc3RhbmQgdGhhdCBpdCBpcyBiZXR0ZXIgaWYgYSBjdWlkIHVzZWQgaW4gcHJldmlv dXMgZXhhbXBsZXMgaXMgdXNlZCBoZXJlIGFzIHdlbGwuIFVwZGF0ZWQgdGhlIGV4YW1wbGUgdG8g dXNlIHRoZSBjdWlkIHVzZWQgaW4gcHJldmlvdXMgZmlndXJlcy4NCg0KUGxlYXNlIG5vdGUgdGhh dCB0aGUg4oCcY29uZmxpY3QgcmVzcG9uc2XigJ0gZG9lcyBub3QgaW5jbHVkZSBhIGN1aWQuDQoN Cj4NCj4gV2hlbiBleHRlbmRpbmcgdGhlIGxpZmV0aW1lLCBkb2VzIHRoZSBuZXcgbGlmZXRpbWUg ZmllbGQgbWVhc3VyZQ0KPiBmcm9tIHRoZSBpbml0aWFsIHRyaWdnZXIgb3IgZnJvbSB0aGUgbW9t ZW50IG9mIGV4dGVuc2lvbj8NCg0KW01lZF0gVGhlIGxhdHRlci4gRldJVywgdGhlIGRlc2NyaXB0 aW9uIG9mICJsaWZldGltZSIgaW5jbHVkZXMgdGhlIGZvbGxvd2luZzoNCg0KICAgICAgVXBvbiB0 aGUgZXhwaXJ5IG9mIHRoaXMgbGlmZXRpbWUsIGFuZCBpZiB0aGUNCiAgICAgIHJlcXVlc3QgaXMg bm90IHJlZnJlc2hlZCwgdGhlIG1pdGlnYXRpb24gcmVxdWVzdCBpcyByZW1vdmVkLiAgVGhlDQog ICAgICByZXF1ZXN0IGNhbiBiZSByZWZyZXNoZWQgYnkgc2VuZGluZyB0aGUgc2FtZSByZXF1ZXN0 IGFnYWluLg0KDQpPSywgY2FuIHdlIHN0YXRlIHRoaXMgZXhwbGljaXRseSByYXRoZXIgdGhhbiBp bXBseSBpdD8NCltNZWRdIFN1cmUuIEkgbWFkZSB0d28gY2hhbmdlczoNCg0KKDEpDQpPTEQ6DQog IFVwb24gdGhlIGV4cGlyeSBvZiB0aGUgbmVnb3RpYXRlZCBsaWZldGltZSwgYW5kIGlmIHRoZSBy ZXF1ZXN0IGlz4oCmDQpORVc6DQogIFVwb24gdGhlIGV4cGlyeSBvZiB0aGUgbmVnb3RpYXRlZCBs aWZldGltZSAoaS5lLiwgdGhlIHJlbWFpbmluZyBsaWZldGltZSByZWFjaGVzICcwJyksIGFuZCBp ZiB0aGUgcmVxdWVzdCBpcw0KDQooMikNCg0KT0xEOg0KdGhlIERPVFMgc2VydmVyIE1BWSB1cGRh dGUgdGhlIG1pdGlnYXRpb24gcmVxdWVzdA0KDQpORVc6DQp0aGUgRE9UUyBzZXJ2ZXIgTUFZIHVw ZGF0ZSB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0IGJ5IHNldHRpbmcgdGhlIHJlbWFpbmluZyBsaWZl dGltZSB0byB0aGUgbmV3bHkgbmVnb3RpYXRlZCBsaWZldGltZQ0KDQpZb3UgY2FuIGFsc28gdHJh Y2sgdGhlc2UgY2hhbmdlcyAoYW5kIG90aGVycykgYXQ6IGh0dHBzOi8vdGlueXVybC5jb20vODc4 MmJpcy1sYXRlc3QuDQoNCj4NCj4gKDQuNS4xKSBXaGF0IGlzIHRoZSB1bml0IG9mIHByb2Jpbmcg cmF0ZT8NCg0KW01lZF0gYnl0ZXMvc2Vjb25kLiBUaGlzIGlzIGluZGljYXRlZCwgZS5nLiwgaW4g dGhlIFlBTkcgbW9kdWxlOg0KDQogICAgICAgbGVhZiBjdXJyZW50LXZhbHVlIHsNCiAgICAgICAg IHR5cGUgdWludDE2Ow0KICAgICAgICAgdW5pdHMgImJ5dGUvc2Vjb25kIjsNCiAgICAgICAgIGRl ZmF1bHQgIjUiOw0KICAgICAgICAgZGVzY3JpcHRpb24NCiAgICAgICAgICAgIkN1cnJlbnQgcHJv YmluZy1yYXRlIHZhbHVlLiI7DQogICAgICAgfQ0KDQpJIHVwZGF0ZWQgNC41LjEgdG8gbWVudGlv biBpdCB0aGVyZSBhcyB3ZWxsLiBUaGFua3MuDQoNClRoYW5rIHlvdS4NCg0KDQo+DQo+ICg4KSBz L3Nob3VsZC9TSE9VTEQsIHMvbXVzdC9NVVNUIHRocm91Z2hvdXQuDQo+DQoNCltNZWRdIFdlIGRv bid0IHVzZSB0aGUgbm9ybWF0aXZlIGxhbmd1YWdlIGhlcmUgYXMgdGhpcyBpcyByZWR1bmRhbnQg d2l0aCB3aGF0IGlzIGluIFNlY3Rpb24gNy4NCg0KSSB3YXMgdW5hYmxlIHRvIGZpbmQgYW5vdGhl ciBtZW50aW9uIG9mIG11Y2ggb2YgdGhlIG1hdGVyaWFsIGluIHRoaXMgcGFyYWdyYXBoOg0KDQpU aGUgRE9UUyBzZXJ2ZXIgc2hvdWxkIHN1cHBvcnQgY2VydGlmaWNhdGUtYmFzZWQgY2xpZW50DQoN CiAgIGF1dGhlbnRpY2F0aW9uLiAgVGhlIERPVFMgY2xpZW50IHNob3VsZCByZXNwb25kIHRvIHRo ZSBET1RTIHNlcnZlcidzDQoNCiAgIFRMUyBDZXJ0aWZpY2F0ZVJlcXVlc3QgbWVzc2FnZSB3aXRo IHRoZSBQS0lYIGNlcnRpZmljYXRlIGhlbGQgYnkgdGhlDQoNCiAgIERPVFMgY2xpZW50LiAgRE9U UyBjbGllbnQgY2VydGlmaWNhdGUgdmFsaWRhdGlvbiBtdXN0IGJlIHBlcmZvcm1lZA0KDQogICBw ZXIgW1JGQzUyODA8aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9yZmM1Mjgw Pl0sIGFuZCB0aGUgRE9UUyBjbGllbnQgY2VydGlmaWNhdGUgbXVzdCBjb25mb3JtIHRvIHRoZQ0K DQogICBbUkZDNTI4MDxodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL3JmYzUy ODA+XSBjZXJ0aWZpY2F0ZSBwcm9maWxlLiBJZiBhIERPVFMgY2xpZW50IGRvZXMgbm90IHN1cHBv cnQgVExTDQoNCiAgIGNsaWVudCBjZXJ0aWZpY2F0ZSBhdXRoZW50aWNhdGlvbiwgaXQgbXVzdCBz dXBwb3J0IGNsaWVudA0KDQogICBhdXRoZW50aWNhdGlvbiBiYXNlZCBvbiBwcmUtc2hhcmVkIGtl eSBvciByYXcgcHVibGljIGtleS4NCmluIHBhcnRpY3VsYXIsIHRoZSB0aGUgbGFzdCAibXVzdCIg ZG9lcyBub3Qgb2J2aW91c2x5IGFwcGVhciBlbHNld2hlcmUsIHVubGVzcyB5b3UncmUgcmVwaHJh c2luZyBpdCBzdWJzdGFudGlhbGx5Lg0KW01lZF0gVGhhdCDigJxtdXN04oCdIGlzIGNvdmVyZWQg YnkgdGhpcyBwYXJ0IChNVVNUICsgbGFzdCBidWxsZXQpOg0KDQogICBJbXBsZW1lbnRhdGlvbnMg Y29tcGxpYW50IHdpdGggdGhpcyBwcm9maWxlIE1VU1QgaW1wbGVtZW50IGFsbCBvZiB0aGUNCiAg IGZvbGxvd2luZyBpdGVtczoNCg0KICAgbyAgRFRMUyByZWNvcmQgcmVwbGF5IGRldGVjdGlvbiAo U2VjdGlvbiAzLjMgb2YgW1JGQzYzNDddKSBvciBhbg0KICAgICAgZXF1aXZhbGVudCBtZWNoYW5p c20gdG8gcHJvdGVjdCBhZ2FpbnN0IHJlcGxheSBhdHRhY2tzLg0KDQogICBvICBEVExTIHNlc3Np b24gcmVzdW1wdGlvbiB3aXRob3V0IHNlcnZlci1zaWRlIHN0YXRlIHRvIHJlc3VtZQ0KICAgICAg c2Vzc2lvbiBhbmQgY29udmV5IHRoZSBET1RTIHNpZ25hbC4NCg0KICAgbyAgQXQgbGVhc3Qgb25l IG9mIHJhdyBwdWJsaWMga2V5cyBbUkZDNzI1MF0gb3IgUFNLIGhhbmRzaGFrZQ0KICAgICAgW1JG QzQyNzldIHdpdGggKEVDKURIRSBrZXkgZXhjaGFuZ2UuICBUaGlzIHJlZHVjZXMgdGhlIHNpemUg b2YgdGhlDQogICAgICBTZXJ2ZXJIZWxsby4gIEFsc28sIHRoaXMgY2FuIGJlIHVzZWQgYnkgRE9U UyBhZ2VudHMgdGhhdCBjYW5ub3QNCiAgICAgICBvYnRhaW4gY2VydGlmaWNhdGVzLg0KDQpUaGUg b3RoZXIgb25lcyBhcmUgY292ZXJlZCBpbiB0aGUgZmlyc3QgcGFyYWdyYXBocyBvZiBTZWN0aW9u IDcuMS4NCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fCgpDZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50 IGNvbnRlbmlyIGRlcyBpbmZvcm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVl cyBldCBuZSBkb2l2ZW50IGRvbmMKcGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBjb3Bp ZXMgc2FucyBhdXRvcmlzYXRpb24uIFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFyIGVy cmV1ciwgdmV1aWxsZXogbGUgc2lnbmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVpcmUg YWluc2kgcXVlIGxlcyBwaWVjZXMgam9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1ZXMg ZXRhbnQgc3VzY2VwdGlibGVzIGQnYWx0ZXJhdGlvbiwKT3JhbmdlIGRlY2xpbmUgdG91dGUgcmVz cG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFsc2lm aWUuIE1lcmNpLgoKVGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMgbWF5IGNvbnRhaW4g Y29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcHJvdGVj dGVkIGJ5IGxhdzsKdGhleSBzaG91bGQgbm90IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9yIGNvcGll ZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uCklmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwg aW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoaXMgbWVzc2Fn ZSBhbmQgaXRzIGF0dGFjaG1lbnRzLgpBcyBlbWFpbHMgbWF5IGJlIGFsdGVyZWQsIE9yYW5nZSBp cyBub3QgbGlhYmxlIGZvciBtZXNzYWdlcyB0aGF0IGhhdmUgYmVlbiBtb2RpZmllZCwgY2hhbmdl ZCBvciBmYWxzaWZpZWQuClRoYW5rIHlvdS4KCg== --_000_787AE7BB302AE849A7480A190F8B9330353966F7OPEXCAUBMA2corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30N Ci8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYu TXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46 MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bhbi5QcmZvcm1hdEhUTUxDYXINCgl7bXNvLXN0eWxl LW5hbWU6IlByw6lmb3JtYXTDqSBIVE1MIENhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CW1zby1zdHlsZS1saW5rOiJQcsOpZm9ybWF0w6kgSFRNTCI7DQoJZm9udC1mYW1pbHk6Q29uc29s YXM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5O30NCkBwYWdlIFdvcmRTZWN0 aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAuODVwdCA3MC44NXB0IDcw Ljg1cHQgNzAuODVwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30N Ci0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6 ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2 OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0t LT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxl Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+UmUtLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+UGxlYXNlIHNlZSBpbmxpbmUuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+TWVkPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJs dWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQg MGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRlIiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4g RG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10NCjxiPkRlIGxhIHBhcnQgZGU8L2I+ IE1hcnRpbiBEdWtlPGJyPg0KPGI+RW52b3nDqSZuYnNwOzo8L2I+IG1lcmNyZWRpIDIganVpbiAy MDIxIDE4OjM5PGJyPg0KPGI+w4AmbmJzcDs6PC9iPiBCT1VDQURBSVIgTW9oYW1lZCBJTk5PVi9O RVQgJmx0O21vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20mZ3Q7PGJyPg0KPGI+Q2MmbmJzcDs6 PC9iPiBkb3RzLWNoYWlyc0BpZXRmLm9yZzsgdmFsZXJ5QHNteXNsb3YubmV0OyBkb3RzQGlldGYu b3JnOyBUaGUgSUVTRyAmbHQ7aWVzZ0BpZXRmLm9yZyZndDs7IGRyYWZ0LWlldGYtZG90cy1yZmM4 NzgyLWJpc0BpZXRmLm9yZzxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gUmU6IFtEb3RzXSBNYXJ0 aW4gRHVrZSdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLWRvdHMtcmZjODc4Mi1iaXMtMDc6 ICh3aXRoIENPTU1FTlQpPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBNb2hhbWVkLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGFncmVlIHdpdGggbW9zdCBvZiB5b3VyIHJl c3BvbnNlcywgYW5kIGJlbG93IG9ubHkgaW5jbHVkZSB3aGVyZSBJIHRoaW5rIHdlIG5lZWQgZnVy dGhlciBkaXNjdXNzaW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gV2VkLCBKdW4gMiwgMjAyMSBhdCAyOjQ5IEFNICZsdDs8 YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3Vj YWRhaXJAb3JhbmdlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsgKDQuNC4xLjMpIEZp Zy4gMTE6IFdoZXJlIGRvZXMgdGhlIHNlY29uZCBjdWlkIGNvbWUgZnJvbT8gSXMgdGhpczxicj4N CiZndDsgZ2VuZXJhdGVkIGJ5IHRoZSBzZXJ2ZXIgb24gYmVoYWxmIG9mIHRoZSBjbGllbnQ/IElm IHNvLCBJIHJlY29tbWVuZDxicj4NCiZndDsgcy9hIG5ldyByZXF1ZXN0IHdpdGggYSBuZXcgJ2N1 aWQnL2EgbmV3IHJlcXVlc3Qgd2l0aCBhIG5ldywgc2VydmVyLTxicj4NCiZndDsgcHJvdmlkZWQg J2N1aWQnPGJyPg0KPGJyPg0KW01lZF0gVGhlIG5ldyBjdWlkIGlzIGdlbmVyYXRlZCBieSB0aGUg Y2xpZW50IGFzIHBlciB0aGUgZm9sbG93aW5nIGluIFNlY3Rpb24gPGEgaHJlZj0iaHR0cDovLzQu NC4xLjEiIHRhcmdldD0iX2JsYW5rIj4NCjQuNC4xLjE8L2E+OiA8YnI+DQo8YnI+DQombmJzcDsg Jm5ic3A7ICZuYnNwOyBET1RTIHNlcnZlcnMgTVVTVCByZXR1cm4gNC4wOSAoQ29uZmxpY3QpIGVy cm9yIGNvZGUgdG8gYSBET1RTPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgcGVlciB0byBub3Rp ZnkgdGhhdCB0aGUgJ2N1aWQnIGlzIGFscmVhZHkgaW4gdXNlIGJ5IGFub3RoZXI8YnI+DQombmJz cDsgJm5ic3A7ICZuYnNwOyBET1RTIGNsaWVudC4mbmJzcDsgVXBvbiByZWNlaXB0IG9mIHRoYXQg ZXJyb3IgY29kZSwgYSBuZXcgJ2N1aWQnPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgTVVTVCBi ZSBnZW5lcmF0ZWQgYnkgdGhlIERPVFMgcGVlciAoZS5nLiwgdXNpbmcgW1JGQzQxMjJdKS48bzpw PjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PlRoYXQncyBub3Qgd2hhdCBJIHJlYWQgZnJvbSBGaWcuIDExLiBUaGUgY29uZmxpY3QgcmVzcG9u c2UgaGFzIGEgY3VpZCB0aGF0IGhhcyBub3QgcHJldmlvdXNseSBhcHBlYXJlZCBpbiB0aGUgZXhj aGFuZ2UuIE1heWJlIEZpZy4gMTEgaXMgd3Jvbmc/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9pPjwv Yj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+W01lZF0gVGhlIGV4 YW1wbGUgZG9lcyBub3QgZGVwZW5kIG9uIHByZXZpb3VzIG9uZXMgYnV0IEkgdW5kZXJzdGFuZCB0 aGF0IGl0IGlzIGJldHRlciBpZiBhIGN1aWQgdXNlZCBpbiBwcmV2aW91cyBleGFtcGxlcyBpcyB1 c2VkIGhlcmUgYXMgd2VsbC4gVXBkYXRlZCB0aGUgZXhhbXBsZSB0byB1c2UgdGhlDQogY3VpZCB1 c2VkIGluIHByZXZpb3VzIGZpZ3VyZXMuIDwvc3Bhbj48L2k+PC9iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5Q bGVhc2Ugbm90ZSB0aGF0IHRoZSDigJxjb25mbGljdCByZXNwb25zZeKAnSBkb2VzIG5vdCBpbmNs dWRlIGEgY3VpZC4NCjwvc3Bhbj48L2k+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpz b2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6 NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQomZ3Q7 IDxicj4NCiZndDsgV2hlbiBleHRlbmRpbmcgdGhlIGxpZmV0aW1lLCBkb2VzIHRoZSBuZXcgbGlm ZXRpbWUgZmllbGQgbWVhc3VyZTxicj4NCiZndDsgZnJvbSB0aGUgaW5pdGlhbCB0cmlnZ2VyIG9y IGZyb20gdGhlIG1vbWVudCBvZiBleHRlbnNpb24/PGJyPg0KPGJyPg0KW01lZF0gVGhlIGxhdHRl ci4gRldJVywgdGhlIGRlc2NyaXB0aW9uIG9mICZxdW90O2xpZmV0aW1lJnF1b3Q7IGluY2x1ZGVz IHRoZSBmb2xsb3dpbmc6IDxicj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7IFVwb24gdGhl IGV4cGlyeSBvZiB0aGlzIGxpZmV0aW1lLCBhbmQgaWYgdGhlPGJyPg0KJm5ic3A7ICZuYnNwOyAm bmJzcDsgcmVxdWVzdCBpcyBub3QgcmVmcmVzaGVkLCB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0IGlz IHJlbW92ZWQuJm5ic3A7IFRoZTxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7IHJlcXVlc3QgY2Fu IGJlIHJlZnJlc2hlZCBieSBzZW5kaW5nIHRoZSBzYW1lIHJlcXVlc3QgYWdhaW4uPG86cD48L286 cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PSywg Y2FuIHdlIHN0YXRlIHRoaXMgZXhwbGljaXRseSByYXRoZXIgdGhhbiBpbXBseSBpdD88bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5bTWVkXSBTdXJl LiBJIG1hZGUgdHdvIGNoYW5nZXM6PG86cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+KDEpPG86 cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48aT48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+T0xEOg0KPG86cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7VXBvbiB0aGUgZXhwaXJ5IG9m IHRoZSBuZWdvdGlhdGVkIGxpZmV0aW1lLCBhbmQgaWYgdGhlIHJlcXVlc3QgaXPigKY8bzpwPjwv bzpwPjwvc3Bhbj48L2k+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij5ORVc6PG86cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7IFVwb24gdGhlIGV4cGlyeSBvZiB0aGUgbmVnb3Rp YXRlZCBsaWZldGltZSAoaS5lLiwgdGhlIHJlbWFpbmluZyBsaWZldGltZSByZWFjaGVzICcwJyks IGFuZCBpZiB0aGUgcmVxdWVzdCBpczxvOnA+PC9vOnA+PC9zcGFuPjwvaT48L2I+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvaT48L2I+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PGk+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPigyKTxv OnA+PC9vOnA+PC9zcGFuPjwvaT48L2I+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PGk+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvaT48L2I+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk9MRDo8bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9i PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij50aGUgRE9UUyBzZXJ2 ZXIgTUFZIHVwZGF0ZSB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0DQo8L3NwYW4+PC9pPjwvYj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PGk+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvaT48L2I+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk5FVzo8bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9i PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij50aGUgRE9UUyBzZXJ2 ZXIgTUFZIHVwZGF0ZSB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0IGJ5IHNldHRpbmcgdGhlIHJlbWFp bmluZyBsaWZldGltZSB0byB0aGUgbmV3bHkgbmVnb3RpYXRlZCBsaWZldGltZQ0KPC9zcGFuPjwv aT48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPllvdSBjYW4gYWxzbyB0cmFjayB0aGVzZSBjaGFuZ2VzIChh bmQgb3RoZXJzKSBhdDoNCjxhIGhyZWY9Imh0dHBzOi8vdGlueXVybC5jb20vODc4MmJpcy1sYXRl c3QiPmh0dHBzOi8vdGlueXVybC5jb20vODc4MmJpcy1sYXRlc3Q8L2E+Lg0KPG86cD48L286cD48 L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNt IDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jmd0OyA8YnI+DQomZ3Q7ICg0LjUuMSkgV2hhdCBpcyB0aGUgdW5pdCBvZiBwcm9i aW5nIHJhdGU/PGJyPg0KPGJyPg0KW01lZF0gYnl0ZXMvc2Vjb25kLiBUaGlzIGlzIGluZGljYXRl ZCwgZS5nLiwgaW4gdGhlIFlBTkcgbW9kdWxlOiA8YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDtsZWFmIGN1cnJlbnQtdmFsdWUgezxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDt0eXBlIHVpbnQxNjs8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7dW5pdHMgJnF1b3Q7Ynl0ZS9zZWNvbmQmcXVvdDs7PGJyPg0KJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwO2RlZmF1bHQgJnF1b3Q7NSZxdW90Ozs8YnI+DQombmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ZGVzY3JpcHRpb248YnI+DQombmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZxdW90O0N1cnJlbnQgcHJvYmluZy1yYXRlIHZh bHVlLiZxdW90Ozs8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt9PGJyPg0KPGJyPg0K SSB1cGRhdGVkIDQuNS4xIHRvIG1lbnRpb24gaXQgdGhlcmUgYXMgd2VsbC4gVGhhbmtzLjxvOnA+ PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ VGhhbmsgeW91LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBj bSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48YnI+DQomZ3Q7IDxicj4NCiZndDsgKDgpIHMvc2hvdWxkL1NIT1VMRCwg cy9tdXN0L01VU1QgdGhyb3VnaG91dC48YnI+DQomZ3Q7IDxicj4NCjxicj4NCltNZWRdIFdlIGRv bid0IHVzZSB0aGUgbm9ybWF0aXZlIGxhbmd1YWdlIGhlcmUgYXMgdGhpcyBpcyByZWR1bmRhbnQg d2l0aCB3aGF0IGlzIGluIFNlY3Rpb24gNy48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgd2FzIHVuYWJsZSB0byBmaW5kIGFub3Ro ZXIgbWVudGlvbiBvZiBtdWNoIG9mIHRoZSBtYXRlcmlhbCBpbiB0aGlzIHBhcmFncmFwaDo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwcmU+VGhlIERPVFMgc2VydmVyIHNob3VsZCBz dXBwb3J0IGNlcnRpZmljYXRlLWJhc2VkIGNsaWVudDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZu YnNwOyZuYnNwOyBhdXRoZW50aWNhdGlvbi4mbmJzcDsgVGhlIERPVFMgY2xpZW50IHNob3VsZCBy ZXNwb25kIHRvIHRoZSBET1RTIHNlcnZlcidzPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7 Jm5ic3A7IFRMUyBDZXJ0aWZpY2F0ZVJlcXVlc3QgbWVzc2FnZSB3aXRoIHRoZSBQS0lYIGNlcnRp ZmljYXRlIGhlbGQgYnkgdGhlPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IERP VFMgY2xpZW50LiZuYnNwOyBET1RTIGNsaWVudCBjZXJ0aWZpY2F0ZSB2YWxpZGF0aW9uIG11c3Qg YmUgcGVyZm9ybWVkPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IHBlciBbPGEg aHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9yZmM1MjgwIiB0aXRs ZT0iJnF1b3Q7SW50ZXJuZXQgWC41MDkgUHVibGljIEtleSBJbmZyYXN0cnVjdHVyZSBDZXJ0aWZp Y2F0ZSBhbmQgQ2VydGlmaWNhdGUgUmV2b2NhdGlvbiBMaXN0IChDUkwpIFByb2ZpbGUmcXVvdDsi PlJGQzUyODA8L2E+XSwgYW5kIHRoZSBET1RTIGNsaWVudCBjZXJ0aWZpY2F0ZSBtdXN0IGNvbmZv cm0gdG8gdGhlPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IFs8YSBocmVmPSJo dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL3JmYzUyODAiIHRpdGxlPSImcXVv dDtJbnRlcm5ldCBYLjUwOSBQdWJsaWMgS2V5IEluZnJhc3RydWN0dXJlIENlcnRpZmljYXRlIGFu ZCBDZXJ0aWZpY2F0ZSBSZXZvY2F0aW9uIExpc3QgKENSTCkgUHJvZmlsZSZxdW90OyI+UkZDNTI4 MDwvYT5dIGNlcnRpZmljYXRlIHByb2ZpbGUuIElmIGEgRE9UUyBjbGllbnQgZG9lcyBub3Qgc3Vw cG9ydCBUTFM8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsgY2xpZW50IGNlcnRp ZmljYXRlIGF1dGhlbnRpY2F0aW9uLCBpdCBtdXN0IHN1cHBvcnQgY2xpZW50PG86cD48L286cD48 L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IGF1dGhlbnRpY2F0aW9uIGJhc2VkIG9uIHByZS1zaGFy ZWQga2V5IG9yIHJhdyBwdWJsaWMga2V5LjxvOnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5pbiBwYXJ0aWN1bGFyLCB0aGUgdGhlIGxhc3QgJnF1b3Q7bXVzdCZxdW90OyBkb2Vz IG5vdCBvYnZpb3VzbHkgYXBwZWFyIGVsc2V3aGVyZSwgdW5sZXNzIHlvdSdyZSByZXBocmFzaW5n IGl0IHN1YnN0YW50aWFsbHkuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+W01lZF0gVGhhdCDigJxtdXN04oCdIGlzIGNvdmVyZWQgYnkgdGhpcyBw YXJ0IChNVVNUICYjNDM7IGxhc3QgYnVsbGV0KTo8bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9iPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L2k+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDo1LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBJbXBsZW1lbnRhdGlvbnMgY29tcGxp YW50IHdpdGggdGhpcyBwcm9maWxlIE1VU1QgaW1wbGVtZW50IGFsbCBvZiB0aGU8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41 cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgZm9sbG93aW5nIGl0ZW1zOjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBvJm5i c3A7IERUTFMgcmVjb3JkIHJlcGxheSBkZXRlY3Rpb24gKFNlY3Rpb24gMy4zIG9mIFtSRkM2MzQ3 XSkgb3IgYW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgZXF1aXZhbGVudCBtZWNoYW5pc20gdG8gcHJvdGVjdCBhZ2FpbnN0IHJlcGxheSBhdHRh Y2tzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDo1LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PiZuYnNwOyZuYnNwOyBvJm5ic3A7IERUTFMgc2Vzc2lvbiByZXN1bXB0aW9uIHdpdGhvdXQgc2Vy dmVyLXNpZGUgc3RhdGUgdG8gcmVzdW1lPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHNlc3Npb24gYW5kIGNvbnZleSB0aGUgRE9UUyBzaWduYWwu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjUuNXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7IG8mbmJzcDsgQXQgbGVhc3Qgb25lIG9mIHJhdyBwdWJsaWMga2V5cyBbUkZDNzI1 MF0gb3IgUFNLIGhhbmRzaGFrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBbUkZDNDI3OV0gd2l0aCAoRUMpREhFIGtleSBleGNoYW5nZS4mbmJz cDsgVGhpcyByZWR1Y2VzIHRoZSBzaXplIG9mIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBTZXJ2ZXJIZWxsby4mbmJzcDsgQWxzbywgdGhp cyBjYW4gYmUgdXNlZCBieSBET1RTIGFnZW50cyB0aGF0IGNhbm5vdDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJm5ic3A7b2J0YWluIGNlcnRpZmljYXRlcy48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlRoZSBvdGhlciBvbmVzIGFy ZSBjb3ZlcmVkIGluIHRoZSBmaXJzdCBwYXJhZ3JhcGhzIG9mIFNlY3Rpb24gNy4xLg0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjxQUkU+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBldCBzZXMgcGllY2VzIGpvaW50ZXMgcGV1dmVudCBj b250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVudGllbGxlcyBvdSBwcml2aWxlZ2llZXMg ZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3UgY29waWVz IHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBhciBlcnJl dXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEgbCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFp bnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0 YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sCk9yYW5nZSBkZWNsaW5lIHRvdXRlIHJlc3Bv bnNhYmlsaXRlIHNpIGNlIG1lc3NhZ2UgYSBldGUgYWx0ZXJlLCBkZWZvcm1lIG91IGZhbHNpZmll LiBNZXJjaS4KClRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzIG1heSBjb250YWluIGNv bmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uIHRoYXQgbWF5IGJlIHByb3RlY3Rl ZCBieSBsYXc7CnRoZXkgc2hvdWxkIG5vdCBiZSBkaXN0cmlidXRlZCwgdXNlZCBvciBjb3BpZWQg d2l0aG91dCBhdXRob3Jpc2F0aW9uLgpJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVtYWlsIGlu IGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2Ug YW5kIGl0cyBhdHRhY2htZW50cy4KQXMgZW1haWxzIG1heSBiZSBhbHRlcmVkLCBPcmFuZ2UgaXMg bm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZlIGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQg b3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCjwvUFJFPjwvYm9keT4NCjwvaHRtbD4NCg== --_000_787AE7BB302AE849A7480A190F8B9330353966F7OPEXCAUBMA2corp_-- From nobody Wed Jun 2 12:12:29 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9838F3A177B; Wed, 2 Jun 2021 12:12:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MNzRpltZ7uPF; Wed, 2 Jun 2021 12:12:22 -0700 (PDT) Received: from mail-io1-xd2e.google.com (mail-io1-xd2e.google.com [IPv6:2607:f8b0:4864:20::d2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 759CB3A1776; Wed, 2 Jun 2021 12:12:22 -0700 (PDT) Received: by mail-io1-xd2e.google.com with SMTP id e17so3688254iol.7; Wed, 02 Jun 2021 12:12:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ftql7p4C+rxz++8yaA73cSmAPz0fM7jOPlOMTpeektI=; b=daA0yd5C8IxcMTn1PwA3G6bDP2O0+gMWZWIzaEWkzJkIqMp9DImzw4WJ8svJaRWBWS IoZPK0E9yIV3Cjvp8kUZHq5kde7AizgSI2XPRRc8/fA3kNI4QyWJdSHf86IdFuvX+46U UHZapa3Ax4K6qe0rKZdDzl4BSCtgGayWzK+KBS92nzceAJUN07BWNWSqO7ADu2Sk4OQe 35+46xvH7OUngi6BRiUyb3NnbmkdkTfHEVUlHGQytAEOdrwKhwmDLWSq2AiDsIoSx4lC IZL8ibYca5Yc1aeFKP2Up6v9MxYUyQY6g+w6Y0F61G+JigjuDuvk4I74ilPyghBtKa6s AzJQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ftql7p4C+rxz++8yaA73cSmAPz0fM7jOPlOMTpeektI=; b=NHAv/9+JNCofi2381ezLLv1bR9Y6EaH+ClflmXyIvxGN6eP2RS1cFe8L9QHkDYx3TT mdSxpQM6uvrj9YLO1skNwuDrWMbSBJ5XgISBNnXEy9XT1i5HpBXBQqwpiA3PEFcTY7Qf xeHl/1yN4hqiZ0oMh8lgmh/IIEw0t/wWGRi6CEcQzd/77vCm9OuYHj/z9dvKKmcug/WJ sEP9YWl4zp7J4Wm2C6ruV6csqNxRXW3GLOp6A6X+xNgPdKsnpiysS2GSPkpMz93D7p9S 3eHN7ewiWSJYLudm1kRGytgEUfQi0bqZXGgUSE5j8UcNNco/RlEyP09/xcoZK2ljCiFI MWkA== X-Gm-Message-State: AOAM531bh0vMAakXFQaLFzdCJQrLGcw65ko6/gn3XCPuIAz+fe1jMuIz +sbMqEBVcWVJ6vPPq2HxjLXq4EeXr+IeYCqcdonMxo8e7dE= X-Google-Smtp-Source: ABdhPJzxN9EHZeBEZfBYLgV2j3rECrPisoaTe8dbNrvKsUr6+gu3T1KsEmOLIoAwXUoH7he0gzdVdm31IiiHnn0Rog0= X-Received: by 2002:a5e:a619:: with SMTP id q25mr25498434ioi.95.1622661140831; Wed, 02 Jun 2021 12:12:20 -0700 (PDT) MIME-Version: 1.0 References: <162258717896.27217.11487555052395475135@ietfa.amsl.com> <26196_1622627385_60B75439_26196_97_8_787AE7BB302AE849A7480A190F8B933035396207@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <5734_1622656607_60B7C65F_5734_420_1_787AE7BB302AE849A7480A190F8B9330353966F7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <5734_1622656607_60B7C65F_5734_420_1_787AE7BB302AE849A7480A190F8B9330353966F7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: Martin Duke Date: Wed, 2 Jun 2021 12:12:10 -0700 Message-ID: To: mohamed.boucadair@orange.com Cc: "dots-chairs@ietf.org" , "valery@smyslov.net" , "dots@ietf.org" , The IESG , "draft-ietf-dots-rfc8782-bis@ietf.org" Content-Type: multipart/alternative; boundary="000000000000e3e19605c3cd3cf1" Archived-At: Subject: Re: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 19:12:28 -0000 --000000000000e3e19605c3cd3cf1 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Jun 2, 2021 at 10:56 AM wrote: > DOTS servers MUST return 4.09 (Conflict) error code to a DOTS > peer to notify that the 'cuid' is already in use by another > DOTS client. Upon receipt of that error code, a new 'cuid' > MUST be generated by the DOTS peer (e.g., using [RFC4122]). > > > > That's not what I read from Fig. 11. The conflict response has a cuid tha= t > has not previously appeared in the exchange. Maybe Fig. 11 is wrong? > > > > *[Med] The example does not depend on previous ones but I understand that > it is better if a cuid used in previous examples is used here as well. > Updated the example to use the cuid used in previous figures. * > > > > *Please note that the =E2=80=9Cconflict response=E2=80=9D does not includ= e a cuid. * > I cannot reconcile your statement with Figure 11: (2) Message body of the 4.09 (Conflict) response from the DOTS server Header: PUT (Code=3D0.03) Uri-Path: ".well-known" Uri-Path: "dots" Uri-Path: "mitigate" Uri-Path: "cuid=3Df30d281ce6b64fc5a0b91e" Uri-Path: "mid=3D12" The rest looks good. --000000000000e3e19605c3cd3cf1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Wed, Jun 2, 2021 at 10:56 AM <<= a href=3D"mailto:mohamed.boucadair@orange.com">mohamed.boucadair@orange.com= > wrote:
=

=C2=A0 =C2=A0 =C2=A0 DOTS servers MUST return 4.09 (Conflict) error code to= a DOTS
=C2=A0 =C2=A0 =C2=A0 peer to notify that the 'cuid' is already in u= se by another
=C2=A0 =C2=A0 =C2=A0 DOTS client.=C2=A0 Upon receipt of that error code, a = new 'cuid'
=C2=A0 =C2=A0 =C2=A0 MUST be generated by the DOTS peer (e.g., using [RFC41= 22]).

=C2=A0

That's not what I read from Fig. 11. The conflic= t response has a cuid that has not previously appeared in the exchange. May= be Fig. 11 is wrong?

=C2=A0

[Med] The example does not depend on previous ones but= I understand that it is better if a cuid used in previous examples is used= here as well. Updated the example to use the cuid used in previous figures.

=C2=A0

Please note that the =E2=80=9Cconflict response=E2=80= =9D does not include a cuid.


I cannot reconcile your statement with Figure 11:= 
     (2) Message body of the 4.09 (Conflict) r=
esponse
       from the DOTS server

     Header: PUT (Code=3D0.03)
     Uri-Path: ".well-known"
     Uri-Path: "dots"
     Uri-Path: "mitigate"
     Uri-Path: "cuid=3Df30d281ce6b64fc5a0b91e"
     Uri-Path: "mid=3D12"
The rest looks good.
--000000000000e3e19605c3cd3cf1-- From nobody Wed Jun 2 12:34:26 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E7AE3A1840; Wed, 2 Jun 2021 12:34:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.095 X-Spam-Level: X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1QLUD3vW7W2B; Wed, 2 Jun 2021 12:34:13 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 03F4A3A183E; Wed, 2 Jun 2021 12:34:12 -0700 (PDT) Received: from opfedar00.francetelecom.fr (unknown [xx.xx.xx.11]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by opfedar23.francetelecom.fr (ESMTP service) with ESMTPS id 4FwK363SjwzBsGF; Wed, 2 Jun 2021 21:34:10 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1622662450; bh=meYpdzXKjOAnog3hwbOZHHLxpggUdWaHEYAmdZY054c=; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; b=ICB3Ub5VB7UoREsyONKatZ4LCi5g8GpRWJi/2Ol1fJWJDt2rSyS5ri6Smnqc3Rz+V +JubSyTtZi2TttBFeleOCHh561MYDTdXEQ1vSwD0HS6J9oy5q00emGz1yZYrZZ3c2U dbtoYF4SzPXizoB1FDnqbVCgVo74mdjqNfEO1jrzeF1y5u/AiSRkpKNU7wp+kyGgIV mleacB9SRxY7UmTx/sAQRFdbJdq0kXpL1SPsqJcOPDzha+Sw2eUlZy2cKhYFMM/Okt trSFortbJ7oLF7yRfciNBThcXOUogT5uwAStHp5OYDk7QimOOs2z5FcGNlAaK1SaWf StxpJQXM2aj6w== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by opfedar00.francetelecom.fr (ESMTP service) with ESMTPS id 4FwK361zS4zCqk7; Wed, 2 Jun 2021 21:34:10 +0200 (CEST) From: To: Martin Duke CC: "dots-chairs@ietf.org" , "valery@smyslov.net" , "dots@ietf.org" , The IESG , "draft-ietf-dots-rfc8782-bis@ietf.org" Thread-Topic: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) Thread-Index: AQHXV+M3oqTGlxACp0iX+fsGFw3e8KsBGlBQ Date: Wed, 2 Jun 2021 19:34:09 +0000 Message-ID: <19601_1622662450_60B7DD32_19601_254_1_787AE7BB302AE849A7480A190F8B933035396823@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162258717896.27217.11487555052395475135@ietfa.amsl.com> <26196_1622627385_60B75439_26196_97_8_787AE7BB302AE849A7480A190F8B933035396207@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <5734_1622656607_60B7C65F_5734_420_1_787AE7BB302AE849A7480A190F8B9330353966F7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B933035396823OPEXCAUBMA2corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 19:34:19 -0000 --_000_787AE7BB302AE849A7480A190F8B933035396823OPEXCAUBMA2corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogTWFydGlu IER1a2UgW21haWx0bzptYXJ0aW4uaC5kdWtlQGdtYWlsLmNvbV0NCkVudm95w6kgOiBtZXJjcmVk aSAyIGp1aW4gMjAyMSAyMToxMg0Kw4AgOiBCT1VDQURBSVIgTW9oYW1lZCBJTk5PVi9ORVQgPG1v aGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+DQpDYyA6IGRvdHMtY2hhaXJzQGlldGYub3JnOyB2 YWxlcnlAc215c2xvdi5uZXQ7IGRvdHNAaWV0Zi5vcmc7IFRoZSBJRVNHIDxpZXNnQGlldGYub3Jn PjsgZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODItYmlzQGlldGYub3JnDQpPYmpldCA6IFJlOiBbRG90 c10gTWFydGluIER1a2UncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODIt YmlzLTA3OiAod2l0aCBDT01NRU5UKQ0KDQoNCg0KT24gV2VkLCBKdW4gMiwgMjAyMSBhdCAxMDo1 NiBBTSA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbT4+IHdyb3RlOg0KICAgICAgRE9UUyBzZXJ2ZXJzIE1VU1QgcmV0dXJuIDQu MDkgKENvbmZsaWN0KSBlcnJvciBjb2RlIHRvIGEgRE9UUw0KICAgICAgcGVlciB0byBub3RpZnkg dGhhdCB0aGUgJ2N1aWQnIGlzIGFscmVhZHkgaW4gdXNlIGJ5IGFub3RoZXINCiAgICAgIERPVFMg Y2xpZW50LiAgVXBvbiByZWNlaXB0IG9mIHRoYXQgZXJyb3IgY29kZSwgYSBuZXcgJ2N1aWQnDQog ICAgICBNVVNUIGJlIGdlbmVyYXRlZCBieSB0aGUgRE9UUyBwZWVyIChlLmcuLCB1c2luZyBbUkZD NDEyMl0pLg0KDQpUaGF0J3Mgbm90IHdoYXQgSSByZWFkIGZyb20gRmlnLiAxMS4gVGhlIGNvbmZs aWN0IHJlc3BvbnNlIGhhcyBhIGN1aWQgdGhhdCBoYXMgbm90IHByZXZpb3VzbHkgYXBwZWFyZWQg aW4gdGhlIGV4Y2hhbmdlLiBNYXliZSBGaWcuIDExIGlzIHdyb25nPw0KDQpbTWVkXSBUaGUgZXhh bXBsZSBkb2VzIG5vdCBkZXBlbmQgb24gcHJldmlvdXMgb25lcyBidXQgSSB1bmRlcnN0YW5kIHRo YXQgaXQgaXMgYmV0dGVyIGlmIGEgY3VpZCB1c2VkIGluIHByZXZpb3VzIGV4YW1wbGVzIGlzIHVz ZWQgaGVyZSBhcyB3ZWxsLiBVcGRhdGVkIHRoZSBleGFtcGxlIHRvIHVzZSB0aGUgY3VpZCB1c2Vk IGluIHByZXZpb3VzIGZpZ3VyZXMuDQoNClBsZWFzZSBub3RlIHRoYXQgdGhlIOKAnGNvbmZsaWN0 IHJlc3BvbnNl4oCdIGRvZXMgbm90IGluY2x1ZGUgYSBjdWlkLg0KDQpJIGNhbm5vdCByZWNvbmNp bGUgeW91ciBzdGF0ZW1lbnQgd2l0aCBGaWd1cmUgMTE6DQoNCiAgICAgKDIpIE1lc3NhZ2UgYm9k eSBvZiB0aGUgNC4wOSAoQ29uZmxpY3QpIHJlc3BvbnNlDQoNCiAgICAgICBmcm9tIHRoZSBET1RT IHNlcnZlcg0KDQoNCg0KICAgICBIZWFkZXI6IFBVVCAoQ29kZT0wLjAzKQ0KDQogICAgIFVyaS1Q YXRoOiAiLndlbGwta25vd24iDQoNCiAgICAgVXJpLVBhdGg6ICJkb3RzIg0KDQogICAgIFVyaS1Q YXRoOiAibWl0aWdhdGUiDQoNCiAgICAgVXJpLVBhdGg6ICJjdWlkPWYzMGQyODFjZTZiNjRmYzVh MGI5MWUiDQoNCiAgICAgVXJpLVBhdGg6ICJtaWQ9MTIiDQoNCg0KDQpbTWVkXSBUaGUgZnVsbCBm aWd1cmUgaXMgYXMgZm9sbG93czoNCg0KDQoNCj09DQoNCiAgICAgSGVhZGVyOiBQVVQgKENvZGU9 MC4wMykNCg0KICAgICBVcmktUGF0aDogIi53ZWxsLWtub3duIg0KDQogICAgIFVyaS1QYXRoOiAi ZG90cyINCg0KICAgICBVcmktUGF0aDogIm1pdGlnYXRlIg0KDQogICAgIFVyaS1QYXRoOiAiY3Vp ZD1kejZwSGphQURrYUZUYmpyMEpHQnB3Ig0KDQogICAgIFVyaS1QYXRoOiAibWlkPTEyIg0KDQoN Cg0KICAgICAoMSkgUmVxdWVzdCB3aXRoIGEgY29uZmxpY3RpbmcgJ2N1aWQnDQoNCg0KDQogICAg IHsNCg0KICAgICAgICJpZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWw6bWl0aWdhdGlvbi1zY29wZSI6 IHsNCg0KICAgICAgICAgICJzY29wZSI6IFsNCg0KICAgICAgICAgICAgIHsNCg0KICAgICAgICAg ICAgICAgImNvbmZsaWN0LWluZm9ybWF0aW9uIjogew0KDQogICAgICAgICAgICAgICAgICJjb25m bGljdC1jYXVzZSI6ICJjdWlkLWNvbGxpc2lvbiINCg0KICAgICAgICAgICAgICAgIH0NCg0KICAg ICAgICAgICAgIH0NCg0KICAgICAgICAgICBdDQoNCiAgICAgICAgfQ0KDQogICAgIH0NCg0KDQoN CiAgICAgKDIpIE1lc3NhZ2UgYm9keSBvZiB0aGUgNC4wOSAoQ29uZmxpY3QpIHJlc3BvbnNlDQoN CiAgICAgICBmcm9tIHRoZSBET1RTIHNlcnZlcg0KDQoNCg0KICAgICBIZWFkZXI6IFBVVCAoQ29k ZT0wLjAzKQ0KDQogICAgIFVyaS1QYXRoOiAiLndlbGwta25vd24iDQoNCiAgICAgVXJpLVBhdGg6 ICJkb3RzIg0KDQogICAgIFVyaS1QYXRoOiAibWl0aWdhdGUiDQoNCiAgICAgVXJpLVBhdGg6ICJj dWlkPWYzMGQyODFjZTZiNjRmYzVhMGI5MWUiDQoNCiAgICAgVXJpLVBhdGg6ICJtaWQ9MTIiDQoN Cg0KDQogICAgICgzKSBSZXF1ZXN0IHdpdGggYSBuZXcgJ2N1aWQnDQoNCg0KDQogICAgICAgICAg ICAgICBGaWd1cmUgMTE6IEV4YW1wbGUgb2YgR2VuZXJhdGluZyBhIE5ldyAnY3VpZCcNCg0KPT0N Cg0KDQoNClRoZSByZXNwb25zZSBib2R5IGNvcnJlc3BvbmRzIHRvIHRoZSBzZWNvbmQgcGFydCwg dGhhdCBpczoNCg0KDQoNCj09DQoNCiAgICAgew0KDQogICAgICAgImlldGYtZG90cy1zaWduYWwt Y2hhbm5lbDptaXRpZ2F0aW9uLXNjb3BlIjogew0KDQogICAgICAgICAgInNjb3BlIjogWw0KDQog ICAgICAgICAgICAgew0KDQogICAgICAgICAgICAgICAiY29uZmxpY3QtaW5mb3JtYXRpb24iOiB7 DQoNCiAgICAgICAgICAgICAgICAgImNvbmZsaWN0LWNhdXNlIjogImN1aWQtY29sbGlzaW9uIg0K DQogICAgICAgICAgICAgICAgfQ0KDQogICAgICAgICAgICAgfQ0KDQogICAgICAgICAgIF0NCg0K ICAgICAgICB9DQoNCiAgICAgfQ0KDQoNCg0KICAgICAoMikgTWVzc2FnZSBib2R5IG9mIHRoZSA0 LjA5IChDb25mbGljdCkgcmVzcG9uc2UNCg0KICAgICAgIGZyb20gdGhlIERPVFMgc2VydmVyDQoN Cj09DQoNCg0KDQpJZiB5b3UgdGhpbmsgdGhpcyB3b3VsZCBiZSBsZXNzIGNvbmZ1c2luZywgd2Ug Y2FuIG1vdmUgdXAgdGhlIGxlZ2VuZHMgYXMgZm9sbG93czoNCg0KDQoNCj09DQoNCg0KDQogICAg ICgxKSBSZXF1ZXN0IHdpdGggYSBjb25mbGljdGluZyAnY3VpZCcNCg0KDQoNCiAgICAgSGVhZGVy OiBQVVQgKENvZGU9MC4wMykNCg0KICAgICBVcmktUGF0aDogIi53ZWxsLWtub3duIg0KDQogICAg IFVyaS1QYXRoOiAiZG90cyINCg0KICAgICBVcmktUGF0aDogIm1pdGlnYXRlIg0KDQogICAgIFVy aS1QYXRoOiAiY3VpZD1kejZwSGphQURrYUZUYmpyMEpHQnB3Ig0KDQogICAgIFVyaS1QYXRoOiAi bWlkPTEyIg0KDQoNCg0KICAgICAoMikgTWVzc2FnZSBib2R5IG9mIHRoZSA0LjA5IChDb25mbGlj dCkgcmVzcG9uc2UNCg0KICAgICAgIGZyb20gdGhlIERPVFMgc2VydmVyDQoNCg0KDQogICAgIHsN Cg0KICAgICAgICJpZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWw6bWl0aWdhdGlvbi1zY29wZSI6IHsN Cg0KICAgICAgICAgICJzY29wZSI6IFsNCg0KICAgICAgICAgICAgIHsNCg0KICAgICAgICAgICAg ICAgImNvbmZsaWN0LWluZm9ybWF0aW9uIjogew0KDQogICAgICAgICAgICAgICAgICJjb25mbGlj dC1jYXVzZSI6ICJjdWlkLWNvbGxpc2lvbiINCg0KICAgICAgICAgICAgICAgIH0NCg0KICAgICAg ICAgICAgIH0NCg0KICAgICAgICAgICBdDQoNCiAgICAgICAgfQ0KDQogICAgIH0NCg0KDQoNCiAg ICAgKDMpIFJlcXVlc3Qgd2l0aCBhIG5ldyAnY3VpZCcNCg0KDQoNCiAgICAgSGVhZGVyOiBQVVQg KENvZGU9MC4wMykNCg0KICAgICBVcmktUGF0aDogIi53ZWxsLWtub3duIg0KDQogICAgIFVyaS1Q YXRoOiAiZG90cyINCg0KICAgICBVcmktUGF0aDogIm1pdGlnYXRlIg0KDQogICAgIFVyaS1QYXRo OiAiY3VpZD1mMzBkMjgxY2U2YjY0ZmM1YTBiOTFlIg0KDQogICAgIFVyaS1QYXRoOiAibWlkPTEy Ig0KDQoNCg0KICAgICAgICAgICAgICAgRmlndXJlIDExOiBFeGFtcGxlIG9mIEdlbmVyYXRpbmcg YSBOZXcgJ2N1aWQnDQoNCg0KDQo9PQ0KDQoNCg0KVGhlIHJlc3QgbG9va3MgZ29vZC4NCg0KW01l ZF0gVGhhbmsgeW91Lg0KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18KCkNlIG1lc3NhZ2UgZXQgc2VzIHBpZWNlcyBqb2ludGVz IHBldXZlbnQgY29udGVuaXIgZGVzIGluZm9ybWF0aW9ucyBjb25maWRlbnRpZWxsZXMgb3UgcHJp dmlsZWdpZWVzIGV0IG5lIGRvaXZlbnQgZG9uYwpwYXMgZXRyZSBkaWZmdXNlcywgZXhwbG9pdGVz IG91IGNvcGllcyBzYW5zIGF1dG9yaXNhdGlvbi4gU2kgdm91cyBhdmV6IHJlY3UgY2UgbWVzc2Fn ZSBwYXIgZXJyZXVyLCB2ZXVpbGxleiBsZSBzaWduYWxlcgphIGwnZXhwZWRpdGV1ciBldCBsZSBk ZXRydWlyZSBhaW5zaSBxdWUgbGVzIHBpZWNlcyBqb2ludGVzLiBMZXMgbWVzc2FnZXMgZWxlY3Ry b25pcXVlcyBldGFudCBzdXNjZXB0aWJsZXMgZCdhbHRlcmF0aW9uLApPcmFuZ2UgZGVjbGluZSB0 b3V0ZSByZXNwb25zYWJpbGl0ZSBzaSBjZSBtZXNzYWdlIGEgZXRlIGFsdGVyZSwgZGVmb3JtZSBv dSBmYWxzaWZpZS4gTWVyY2kuCgpUaGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cyBtYXkg Y29udGFpbiBjb25maWRlbnRpYWwgb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbiB0aGF0IG1heSBi ZSBwcm90ZWN0ZWQgYnkgbGF3Owp0aGV5IHNob3VsZCBub3QgYmUgZGlzdHJpYnV0ZWQsIHVzZWQg b3IgY29waWVkIHdpdGhvdXQgYXV0aG9yaXNhdGlvbi4KSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhp cyBlbWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhp cyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMuCkFzIGVtYWlscyBtYXkgYmUgYWx0ZXJlZCwg T3JhbmdlIGlzIG5vdCBsaWFibGUgZm9yIG1lc3NhZ2VzIHRoYXQgaGF2ZSBiZWVuIG1vZGlmaWVk LCBjaGFuZ2VkIG9yIGZhbHNpZmllZC4KVGhhbmsgeW91LgoK --_000_787AE7BB302AE849A7480A190F8B933035396823OPEXCAUBMA2corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0K CXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICov DQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207 DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1p bHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi UHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K c3Bhbi5QcmZvcm1hdEhUTUxDYXINCgl7bXNvLXN0eWxlLW5hbWU6IlByw6lmb3JtYXTDqSBIVE1M IENhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQcsOpZm9y bWF0w6kgSFRNTCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIg TmV3IjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBw YWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAuODVw dCA3MC44NXB0IDcwLjg1cHQgNzAuODVwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29y ZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0 LWlkOjY1ODMxMjYzODsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0 ZS1pZHM6MzcwMjAyNjI0IDEyMzczNjU1MTQgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2 OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDA6bGV2 ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDoyOw0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJ Zm9udC1mYW1pbHk6U3ltYm9sOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ bXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDA6bGV2ZWwy DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0K CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K QGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6 V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpi dWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0x OC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3Qg bDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWls eToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBjbTt9 DQp1bA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4N CjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlv dXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286 c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1V UyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlJlLSw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlBsZWFzZSBzZWUgaW5saW5l Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPk1lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20g NC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkRlJm5ic3A7Ojwvc3Bhbj48L2I+ PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IE1hcnRpbiBEdWtlIFttYWlsdG86bWFydGluLmgu ZHVrZUBnbWFpbC5jb21dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWVyY3JlZGkgMiBq dWluIDIwMjEgMjE6MTI8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IEJPVUNBREFJUiBNb2hhbWVkIElO Tk9WL05FVCAmbHQ7bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSZndDs8YnI+DQo8Yj5DYyZu YnNwOzo8L2I+IGRvdHMtY2hhaXJzQGlldGYub3JnOyB2YWxlcnlAc215c2xvdi5uZXQ7IGRvdHNA aWV0Zi5vcmc7IFRoZSBJRVNHICZsdDtpZXNnQGlldGYub3JnJmd0OzsgZHJhZnQtaWV0Zi1kb3Rz LXJmYzg3ODItYmlzQGlldGYub3JnPGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBSZTogW0RvdHNd IE1hcnRpbiBEdWtlJ3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJp cy0wNzogKHdpdGggQ09NTUVOVCk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gV2VkLCBKdW4gMiwgMjAyMSBhdCAxMDo1NiBBTSAmbHQ7 PGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91 Y2FkYWlyQG9yYW5nZS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0Mg MS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4t cmlnaHQ6MGNtO2JvcmRlci1jb2xvcjpjdXJyZW50Y29sb3IgY3VycmVudGNvbG9yIGN1cnJlbnRj b2xvciByZ2IoMjA0LDIwNCwyMDQpIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgd2luZG93dGV4dCAxLjVwdDtwYWRkaW5nOjBjbSAwY20g MGNtIDQuMHB0O2JvcmRlci1jb2xvcjpjdXJyZW50Y29sb3IgY3VycmVudGNvbG9yIGN1cnJlbnRj b2xvciBibHVlIj4NCjxkaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkIHdpbmRvd3RleHQgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2 LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowY207 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOyAmbmJz cDsgJm5ic3A7IERPVFMgc2VydmVycyBNVVNUIHJldHVybiA0LjA5IChDb25mbGljdCkgZXJyb3Ig Y29kZSB0byBhIERPVFM8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBwZWVyIHRvIG5vdGlmeSB0 aGF0IHRoZSAnY3VpZCcgaXMgYWxyZWFkeSBpbiB1c2UgYnkgYW5vdGhlcjxicj4NCiZuYnNwOyAm bmJzcDsgJm5ic3A7IERPVFMgY2xpZW50LiZuYnNwOyBVcG9uIHJlY2VpcHQgb2YgdGhhdCBlcnJv ciBjb2RlLCBhIG5ldyAnY3VpZCc8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBNVVNUIGJlIGdl bmVyYXRlZCBieSB0aGUgRE9UUyBwZWVyIChlLmcuLCB1c2luZyBbUkZDNDEyMl0pLjxvOnA+PC9v OnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PlRoYXQncyBub3Qgd2hhdCBJIHJlYWQgZnJvbSBGaWcuIDExLiBUaGUgY29uZmxpY3QgcmVzcG9u c2UgaGFzIGEgY3VpZCB0aGF0IGhhcyBub3QgcHJldmlvdXNseSBhcHBlYXJlZCBpbiB0aGUgZXhj aGFuZ2UuIE1heWJlIEZpZy4gMTEgaXMgd3Jvbmc/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PC9pPjwvYj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+PGk+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPltNZWRdIFRo ZSBleGFtcGxlIGRvZXMgbm90IGRlcGVuZCBvbiBwcmV2aW91cyBvbmVzIGJ1dCBJIHVuZGVyc3Rh bmQgdGhhdCBpdCBpcyBiZXR0ZXIgaWYgYSBjdWlkIHVzZWQgaW4gcHJldmlvdXMgZXhhbXBsZXMN CiBpcyB1c2VkIGhlcmUgYXMgd2VsbC4gVXBkYXRlZCB0aGUgZXhhbXBsZSB0byB1c2UgdGhlIGN1 aWQgdXNlZCBpbiBwcmV2aW91cyBmaWd1cmVzLg0KPC9zcGFuPjwvaT48L2I+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+UGxlYXNlIG5v dGUgdGhhdCB0aGUg4oCcY29uZmxpY3QgcmVzcG9uc2XigJ0gZG9lcyBub3QgaW5jbHVkZSBhIGN1 aWQuDQo8L3NwYW4+PC9pPjwvYj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkkgY2Fubm90IHJlY29uY2lsZSB5b3VyIHN0YXRlbWVudCB3aXRoIEZp Z3VyZSAxMTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwcmU+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7ICgyKSBNZXNzYWdlIGJvZHkgb2YgdGhlIDQuMDkgKENvbmZsaWN0KSByZXNw b25zZTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBmcm9tIHRoZSBET1RTIHNlcnZlcjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBIZWFkZXI6 IFBVVCAoQ29kZT0wLjAzKTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBVcmktUGF0aDogJnF1b3Q7LndlbGwta25vd24mcXVvdDs8bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVXJpLVBhdGg6ICZxdW90O2RvdHMmcXVv dDs8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVXJpLVBh dGg6ICZxdW90O21pdGlnYXRlJnF1b3Q7PG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IFVyaS1QYXRoOiAmcXVvdDtjdWlkPWYzMGQyODFjZTZiNjRmYzVhMGI5 MWUmcXVvdDs8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg VXJpLVBhdGg6ICZxdW90O21pZD0xMiZxdW90OzxvOnA+PC9vOnA+PC9wcmU+DQo8L2Rpdj4NCjxw cmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48Yj48aT5bTWVkXSBUaGUgZnVs bCBmaWd1cmUgaXMgYXMgZm9sbG93czogPG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZT48 Yj48aT48bzpwPiZuYnNwOzwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlPjxiPjxpPj09PG86cD48 L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxp PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBIZWFkZXI6IFBVVCAoQ29kZT0wLjAzKTxvOnA+PC9v OnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVXJpLVBhdGg6ICZxdW90Oy53ZWxsLWtub3duJnF1b3Q7 PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQi PjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBVcmktUGF0aDogJnF1b3Q7ZG90cyZxdW90 OzxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0 Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVXJpLVBhdGg6ICZxdW90O21pdGlnYXRl JnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6 NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBVcmktUGF0aDogJnF1b3Q7Y3Vp ZD1kejZwSGphQURrYUZUYmpyMEpHQnB3JnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0K PHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBVcmktUGF0aDogJnF1b3Q7bWlkPTEyJnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJl Pg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPjxvOnA+Jm5ic3A7PC9vOnA+ PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgKDEpIFJlcXVlc3Qgd2l0aCBhIGNvbmZsaWN0aW5nICdjdWlk JzxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0 Ij48Yj48aT48bzpwPiZuYnNwOzwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJn aW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHs8bzpwPjwvbzpw PjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O2lldGYtZG90cy1zaWduYWwt Y2hhbm5lbDptaXRpZ2F0aW9uLXNjb3BlJnF1b3Q7OiB7PG86cD48L286cD48L2k+PC9iPjwvcHJl Pg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtzY29wZSZxdW90Ozog WzxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0 Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgezxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUg c3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgJnF1b3Q7Y29uZmxpY3QtaW5mb3JtYXRpb24mcXVvdDs6IHs8bzpwPjwvbzpwPjwvaT48L2I+ PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O2NvbmZsaWN0LWNhdXNlJnF1b3Q7OiAm cXVvdDtjdWlkLWNvbGxpc2lvbiZxdW90OzxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUg c3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1s ZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9pPjwvYj48L3By ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgXTxvOnA+PC9vOnA+ PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9pPjwv Yj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1h cmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT48bzpwPiZuYnNwOzwvbzpwPjwvaT48L2I+PC9wcmU+DQo8 cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7ICgyKSBNZXNzYWdlIGJvZHkgb2YgdGhlIDQuMDkgKENvbmZsaWN0KSByZXNwb25zZTxvOnA+ PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48 aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZnJvbSB0aGUgRE9UUyBzZXJ2 ZXI8bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVw dCI+PGI+PGk+PG86cD4mbmJzcDs8L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFy Z2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBIZWFkZXI6IFBV VCAoQ29kZT0wLjAzKTxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdp bi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVXJpLVBhdGg6ICZx dW90Oy53ZWxsLWtub3duJnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBVcmkt UGF0aDogJnF1b3Q7ZG90cyZxdW90OzxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5 bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgVXJp LVBhdGg6ICZxdW90O21pdGlnYXRlJnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHBy ZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBVcmktUGF0aDogJnF1b3Q7Y3VpZD1mMzBkMjgxY2U2YjY0ZmM1YTBiOTFlJnF1b3Q7PG86cD48 L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxp PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBVcmktUGF0aDogJnF1b3Q7bWlkPTEyJnF1b3Q7PG86 cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxi PjxpPjxvOnA+Jm5ic3A7PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1s ZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgKDMpIFJlcXVlc3Qgd2l0 aCBhIG5ldyAnY3VpZCc8bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJn aW4tbGVmdDo1LjVwdCI+PGI+PGk+PG86cD4mbmJzcDs8L286cD48L2k+PC9iPjwvcHJlPg0KPHBy ZT48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgRmlndXJlIDExOiBFeGFtcGxlIG9m IEdlbmVyYXRpbmcgYSBOZXcgJ2N1aWQnPG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZT48 Yj48aT49PTxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmU+PGI+PGk+PG86cD4mbmJzcDs8 L286cD48L2k+PC9iPjwvcHJlPg0KPHByZT48Yj48aT5UaGUgcmVzcG9uc2UgYm9keSBjb3JyZXNw b25kcyB0byB0aGUgc2Vjb25kIHBhcnQsIHRoYXQgaXM6ICZuYnNwOzxvOnA+PC9vOnA+PC9pPjwv Yj48L3ByZT4NCjxwcmU+PGI+PGk+PG86cD4mbmJzcDs8L286cD48L2k+PC9iPjwvcHJlPg0KPHBy ZT48Yj48aT49PTxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1s ZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgezxvOnA+PC9vOnA+PC9p PjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7aWV0Zi1kb3RzLXNpZ25hbC1jaGFu bmVsOm1pdGlnYXRpb24tc2NvcGUmcXVvdDs6IHs8bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8 cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O3Njb3BlJnF1b3Q7OiBbPG86 cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxi PjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAm cXVvdDtjb25mbGljdC1pbmZvcm1hdGlvbiZxdW90OzogezxvOnA+PC9vOnA+PC9pPjwvYj48L3By ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7Y29uZmxpY3QtY2F1c2UmcXVvdDs6ICZxdW90 O2N1aWQtY29sbGlzaW9uJnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB9PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6 NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB9PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0K PHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBdPG86cD48L286cD48L2k+ PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB9PG86cD48L286cD48L2k+PC9iPjwv cHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB9PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2lu LWxlZnQ6NS41cHQiPjxiPjxpPjxvOnA+Jm5ic3A7PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUg c3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg KDIpIE1lc3NhZ2UgYm9keSBvZiB0aGUgNC4wOSAoQ29uZmxpY3QpIHJlc3BvbnNlPG86cD48L286 cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBmcm9tIHRoZSBET1RTIHNlcnZlcjxv OnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmU+PGI+PGk+PT0gPG86cD48L286cD48L2k+PC9i PjwvcHJlPg0KPHByZT48Yj48aT48bzpwPiZuYnNwOzwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJl PjxiPjxpPklmIHlvdSB0aGluayB0aGlzIHdvdWxkIGJlIGxlc3MgY29uZnVzaW5nLCB3ZSBjYW4g bW92ZSB1cCB0aGUgbGVnZW5kcyBhcyBmb2xsb3dzOiAmbmJzcDs8bzpwPjwvbzpwPjwvaT48L2I+ PC9wcmU+DQo8cHJlPjxiPjxpPjxvOnA+Jm5ic3A7PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmU+ PGI+PGk+PT08bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVm dDo1LjVwdCI+PGI+PGk+PG86cD4mbmJzcDs8L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAoMSkg UmVxdWVzdCB3aXRoIGEgY29uZmxpY3RpbmcgJ2N1aWQnPG86cD48L286cD48L2k+PC9iPjwvcHJl Pg0KPHByZT48Yj48aT48bzpwPiZuYnNwOzwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxl PSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEhlYWRl cjogUFVUIChDb2RlPTAuMDMpPG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0i bWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBVcmktUGF0 aDogJnF1b3Q7LndlbGwta25vd24mcXVvdDs8bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJl IHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IFVyaS1QYXRoOiAmcXVvdDtkb3RzJnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHBy ZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyBVcmktUGF0aDogJnF1b3Q7bWl0aWdhdGUmcXVvdDs8bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+ DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IFVyaS1QYXRoOiAmcXVvdDtjdWlkPWR6NnBIamFBRGthRlRianIwSkdCcHcmcXVvdDs8 bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+ PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFVyaS1QYXRoOiAmcXVvdDttaWQ9MTImcXVv dDs8bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVw dCI+PGI+PGk+PG86cD4mbmJzcDs8L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFy Z2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAoMikgTWVzc2Fn ZSBib2R5IG9mIHRoZSA0LjA5IChDb25mbGljdCkgcmVzcG9uc2U8bzpwPjwvbzpwPjwvaT48L2I+ PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGZyb20gdGhlIERPVFMgc2VydmVyPG86cD48L286cD48 L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPjxvOnA+ Jm5ic3A7PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0 Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgezxvOnA+PC9vOnA+PC9pPjwvYj48L3By ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7aWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsOm1pdGln YXRpb24tc2NvcGUmcXVvdDs6IHs8bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxl PSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O3Njb3BlJnF1b3Q7OiBbPG86cD48L286cD48 L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2lu LWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtjb25m bGljdC1pbmZvcm1hdGlvbiZxdW90OzogezxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUg c3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgJnF1b3Q7Y29uZmxpY3QtY2F1c2UmcXVvdDs6ICZxdW90O2N1aWQtY29s bGlzaW9uJnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2lu LWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB9PG86 cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxi PjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB9PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBdPG86cD48L286cD48L2k+PC9iPjwvcHJl Pg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB9PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHBy ZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB9PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41 cHQiPjxiPjxpPjxvOnA+Jm5ic3A7PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9Im1h cmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgKDMpIFJlcXVl c3Qgd2l0aCBhIG5ldyAnY3VpZCc8bzpwPjwvbzpwPjwvaT48L2I+PC9wcmU+DQo8cHJlIHN0eWxl PSJtYXJnaW4tbGVmdDo1LjVwdCI+PGI+PGk+PG86cD4mbmJzcDs8L286cD48L2k+PC9iPjwvcHJl Pg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBIZWFkZXI6IFBVVCAoQ29kZT0wLjAzKTxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4N CjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgVXJpLVBhdGg6ICZxdW90Oy53ZWxsLWtub3duJnF1b3Q7PG86cD48L286cD48L2k+PC9i PjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBVcmktUGF0aDogJnF1b3Q7ZG90cyZxdW90OzxvOnA+PC9vOnA+PC9pPjwv Yj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjUuNXB0Ij48Yj48aT4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgVXJpLVBhdGg6ICZxdW90O21pdGlnYXRlJnF1b3Q7PG86cD48L286cD48 L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBVcmktUGF0aDogJnF1b3Q7Y3VpZD1mMzBkMjgxY2U2YjY0ZmM1 YTBiOTFlJnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2lu LWxlZnQ6NS41cHQiPjxiPjxpPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBVcmktUGF0aDogJnF1 b3Q7bWlkPTEyJnF1b3Q7PG86cD48L286cD48L2k+PC9iPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFy Z2luLWxlZnQ6NS41cHQiPjxiPjxpPjxvOnA+Jm5ic3A7PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxw cmU+PGI+PGk+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEZpZ3VyZSAxMTogRXhhbXBsZSBv ZiBHZW5lcmF0aW5nIGEgTmV3ICdjdWlkJzxvOnA+PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmU+ PGI+PGk+PG86cD4mbmJzcDs8L286cD48L2k+PC9iPjwvcHJlPg0KPHByZT48Yj48aT49PTxvOnA+ PC9vOnA+PC9pPjwvYj48L3ByZT4NCjxwcmU+PGI+PGk+PG86cD4mbmJzcDs8L286cD48L2k+PC9i PjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZiI+VGhlIHJlc3QgbG9va3MgZ29vZC48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4N CjxwcmU+PGI+PGk+W01lZF0gVGhhbmsgeW91LiA8L2k+PC9iPjxvOnA+PC9vOnA+PC9wcmU+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxQUkU+X19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBl dCBzZXMgcGllY2VzIGpvaW50ZXMgcGV1dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNv bmZpZGVudGllbGxlcyBvdSBwcml2aWxlZ2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJl IGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3UgY29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3Vz IGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBhciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEg bCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMu IExlcyBtZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRp b24sCk9yYW5nZSBkZWNsaW5lIHRvdXRlIHJlc3BvbnNhYmlsaXRlIHNpIGNlIG1lc3NhZ2UgYSBl dGUgYWx0ZXJlLCBkZWZvcm1lIG91IGZhbHNpZmllLiBNZXJjaS4KClRoaXMgbWVzc2FnZSBhbmQg aXRzIGF0dGFjaG1lbnRzIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGlu Zm9ybWF0aW9uIHRoYXQgbWF5IGJlIHByb3RlY3RlZCBieSBsYXc7CnRoZXkgc2hvdWxkIG5vdCBi ZSBkaXN0cmlidXRlZCwgdXNlZCBvciBjb3BpZWQgd2l0aG91dCBhdXRob3Jpc2F0aW9uLgpJZiB5 b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVtYWlsIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBz ZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cy4KQXMgZW1h aWxzIG1heSBiZSBhbHRlcmVkLCBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhh dCBoYXZlIGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCjwv UFJFPjwvYm9keT4NCjwvaHRtbD4NCg== --_000_787AE7BB302AE849A7480A190F8B933035396823OPEXCAUBMA2corp_-- From nobody Wed Jun 2 13:16:34 2021 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 18FFC3A198F; Wed, 2 Jun 2021 13:16:19 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Robert Wilton via Datatracker To: "The IESG" Cc: draft-ietf-dots-rfc8782-bis@ietf.org, dots-chairs@ietf.org, dots@ietf.org, valery@smyslov.net, valery@smyslov.net X-Test-IDTracker: no X-IETF-IDTracker: 7.30.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Robert Wilton Message-ID: <162266497905.5142.7613380496793349957@ietfa.amsl.com> Date: Wed, 02 Jun 2021 13:16:19 -0700 Archived-At: Subject: [Dots] Robert Wilton's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 20:16:20 -0000 Robert Wilton has entered the following ballot position for draft-ietf-dots-rfc8782-bis-07: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dots-rfc8782-bis/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Hi, I only reviewed the delta from RFC 8782. Just a couple of minor comments. I think that the revision description in the ietf-dots-signal-channel YANG module should clearly indicate that it is a non-backwards compatible replacement of the previous module revision. The description of the "dots-signal" structure and "message-type" choice makes no mention of the "heartbeat" case. Is that intentional? Thanks, Rob From nobody Wed Jun 2 13:36:53 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E99A3A1A27; Wed, 2 Jun 2021 13:36:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.096 X-Spam-Level: X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IBaNPVqZq3Pc; Wed, 2 Jun 2021 13:36:43 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FE0D3A1A25; Wed, 2 Jun 2021 13:36:42 -0700 (PDT) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 4FwLRC1ddtz2xmV; Wed, 2 Jun 2021 22:36:39 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1622666199; bh=UocCYFerJl2Otr84szSeMXjX/F5A9ATukQawhwYIcWs=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=Njp8tD9hboqiAtO4oEPu4cIgI+yQWB+MNEiRSPrqjjLZ96x546D56HGXnrud/F2Ls Ugx5Ag7BkECcjG204E6xB5PiStoK4CrjZXnb0Omyg+zXZtqfTbGaB+M26aMho39/Ef EShLZ+KiIVKlMdj4Nm9dZ2qcOg/9tT+LADk6XU0t3zhbf64HPrPjewRxQphoc/9VFU P3oTOJ6cXkJS3Yih7gXqkc3r0Dnuc03oDHxLOVestP7/eKZywMfTAmmYQ7UNEA1y6s vYrdIAVO5CvejYCVXGp6f6ta2z6dkBQJmBMgYRYX982+htngpgVbenBd4YrPcSg3MQ c8iiXvsfotSKg== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.67]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 4FwLRC0795z1xp0; Wed, 2 Jun 2021 22:36:39 +0200 (CEST) From: To: Robert Wilton , The IESG CC: "draft-ietf-dots-rfc8782-bis@ietf.org" , "dots-chairs@ietf.org" , "dots@ietf.org" , "valery@smyslov.net" Thread-Topic: Robert Wilton's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) Thread-Index: AQHXV+wp79klb+UyAECQQj/hdUW2X6sBLJMQ Date: Wed, 2 Jun 2021 20:36:38 +0000 Message-ID: <11535_1622666199_60B7EBD7_11535_403_9_787AE7BB302AE849A7480A190F8B9330353968D6@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162266497905.5142.7613380496793349957@ietfa.amsl.com> In-Reply-To: <162266497905.5142.7613380496793349957@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Robert Wilton's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 20:36:48 -0000 SGkgUm9iLCANCg0KR29vZCBwb2ludHMuIEZpeGVkIGJvdGggYXMgeW91IGNhbiBzZWUgYXQgaHR0 cHM6Ly90aW55dXJsLmNvbS84NzgyYmlzLWxhdGVzdC4NCg0KVGhhbmtzIGZvciB0aGUgcmV2aWV3 LiANCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERl wqA6IFJvYmVydCBXaWx0b24gdmlhIERhdGF0cmFja2VyIFttYWlsdG86bm9yZXBseUBpZXRmLm9y Z10NCj4gRW52b3nDqcKgOiBtZXJjcmVkaSAyIGp1aW4gMjAyMSAyMjoxNg0KPiDDgMKgOiBUaGUg SUVTRyA8aWVzZ0BpZXRmLm9yZz4NCj4gQ2PCoDogZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODItYmlz QGlldGYub3JnOyBkb3RzLWNoYWlyc0BpZXRmLm9yZzsNCj4gZG90c0BpZXRmLm9yZzsgdmFsZXJ5 QHNteXNsb3YubmV0OyB2YWxlcnlAc215c2xvdi5uZXQNCj4gT2JqZXTCoDogUm9iZXJ0IFdpbHRv bidzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLWRvdHMtcmZjODc4Mi1iaXMtDQo+IDA3OiAo d2l0aCBDT01NRU5UKQ0KPiANCj4gUm9iZXJ0IFdpbHRvbiBoYXMgZW50ZXJlZCB0aGUgZm9sbG93 aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCj4gZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODItYmlzLTA3 OiBObyBPYmplY3Rpb24NCj4gDQo+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1 YmplY3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvDQo+IGFsbCBlbWFpbCBhZGRyZXNzZXMgaW5j bHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0bw0KPiBjdXQgdGhpcyBp bnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikNCj4gDQo+IA0KPiBQbGVhc2UgcmVmZXIg dG8gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy0NCj4gY3JpdGVy aWEuaHRtbA0KPiBmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBESVNDVVNTIGFuZCBDT01NRU5U IHBvc2l0aW9ucy4NCj4gDQo+IA0KPiBUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFs bG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQo+IGh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy8NCj4gDQo+IA0KPiANCj4g LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCj4gLS0NCj4gQ09NTUVOVDoNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gLS0NCj4gDQo+ IEhpLA0KPiANCj4gSSBvbmx5IHJldmlld2VkIHRoZSBkZWx0YSBmcm9tIFJGQyA4NzgyLiAgSnVz dCBhIGNvdXBsZSBvZiBtaW5vcg0KPiBjb21tZW50cy4NCj4gDQo+IEkgdGhpbmsgdGhhdCB0aGUg cmV2aXNpb24gZGVzY3JpcHRpb24gaW4gdGhlIGlldGYtZG90cy1zaWduYWwtDQo+IGNoYW5uZWwg WUFORyBtb2R1bGUgc2hvdWxkIGNsZWFybHkgaW5kaWNhdGUgdGhhdCBpdCBpcyBhIG5vbi0NCj4g YmFja3dhcmRzIGNvbXBhdGlibGUgcmVwbGFjZW1lbnQgb2YgdGhlIHByZXZpb3VzIG1vZHVsZSBy ZXZpc2lvbi4NCj4gDQo+IFRoZSBkZXNjcmlwdGlvbiBvZiB0aGUgImRvdHMtc2lnbmFsIiBzdHJ1 Y3R1cmUgYW5kICJtZXNzYWdlLXR5cGUiDQo+IGNob2ljZSBtYWtlcyBubyBtZW50aW9uIG9mIHRo ZSAiaGVhcnRiZWF0IiBjYXNlLiAgSXMgdGhhdA0KPiBpbnRlbnRpb25hbD8NCj4gDQo+IFRoYW5r cywNCj4gUm9iDQo+IA0KPiANCg0KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18KCkNlIG1lc3NhZ2UgZXQgc2VzIHBpZWNlcyBq b2ludGVzIHBldXZlbnQgY29udGVuaXIgZGVzIGluZm9ybWF0aW9ucyBjb25maWRlbnRpZWxsZXMg b3UgcHJpdmlsZWdpZWVzIGV0IG5lIGRvaXZlbnQgZG9uYwpwYXMgZXRyZSBkaWZmdXNlcywgZXhw bG9pdGVzIG91IGNvcGllcyBzYW5zIGF1dG9yaXNhdGlvbi4gU2kgdm91cyBhdmV6IHJlY3UgY2Ug bWVzc2FnZSBwYXIgZXJyZXVyLCB2ZXVpbGxleiBsZSBzaWduYWxlcgphIGwnZXhwZWRpdGV1ciBl dCBsZSBkZXRydWlyZSBhaW5zaSBxdWUgbGVzIHBpZWNlcyBqb2ludGVzLiBMZXMgbWVzc2FnZXMg ZWxlY3Ryb25pcXVlcyBldGFudCBzdXNjZXB0aWJsZXMgZCdhbHRlcmF0aW9uLApPcmFuZ2UgZGVj bGluZSB0b3V0ZSByZXNwb25zYWJpbGl0ZSBzaSBjZSBtZXNzYWdlIGEgZXRlIGFsdGVyZSwgZGVm b3JtZSBvdSBmYWxzaWZpZS4gTWVyY2kuCgpUaGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50 cyBtYXkgY29udGFpbiBjb25maWRlbnRpYWwgb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbiB0aGF0 IG1heSBiZSBwcm90ZWN0ZWQgYnkgbGF3Owp0aGV5IHNob3VsZCBub3QgYmUgZGlzdHJpYnV0ZWQs IHVzZWQgb3IgY29waWVkIHdpdGhvdXQgYXV0aG9yaXNhdGlvbi4KSWYgeW91IGhhdmUgcmVjZWl2 ZWQgdGhpcyBlbWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGFuZCBkZWxl dGUgdGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMuCkFzIGVtYWlscyBtYXkgYmUgYWx0 ZXJlZCwgT3JhbmdlIGlzIG5vdCBsaWFibGUgZm9yIG1lc3NhZ2VzIHRoYXQgaGF2ZSBiZWVuIG1v ZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNpZmllZC4KVGhhbmsgeW91LgoK From nobody Wed Jun 2 23:09:16 2021 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7058F3A2BA3; Wed, 2 Jun 2021 23:09:02 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Erik Kline via Datatracker To: "The IESG" Cc: draft-ietf-dots-rfc8782-bis@ietf.org, dots-chairs@ietf.org, dots@ietf.org, valery@smyslov.net, valery@smyslov.net X-Test-IDTracker: no X-IETF-IDTracker: 7.30.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Erik Kline Message-ID: <162270054186.18148.14870101120799116947@ietfa.amsl.com> Date: Wed, 02 Jun 2021 23:09:02 -0700 Archived-At: Subject: [Dots] Erik Kline's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 06:09:11 -0000 Erik Kline has entered the following ballot position for draft-ietf-dots-rfc8782-bis-07: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dots-rfc8782-bis/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- [S3] [comment] * I don't know if it's really necessary to dredge up RFC 6296, but I understand the desire for completeness. [S4.4.1.1] [question] * For "lifetime" in the case where a "target-fqdn" was given, should the resolution library's knowledge of the DNS RR TTL value(s) be factored in? For example, what does lifetime=3600s mean for a hostname whose A/AAAA RRs have only 5 minute lifetimes? Is the DOTS server/enforcer expected to continuously re-resolve every ${DNS_RR_TTL} and apply the policy for up to the full 3600 seconds, or is the DNS RR TTL ignored once the resolution has been confirmed to have succeeded or failed? From nobody Thu Jun 3 00:02:13 2021 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B4B83A2D46; Thu, 3 Jun 2021 00:01:49 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Murray Kucherawy via Datatracker To: "The IESG" Cc: draft-ietf-dots-rfc8782-bis@ietf.org, dots-chairs@ietf.org, dots@ietf.org, valery@smyslov.net X-Test-IDTracker: no X-IETF-IDTracker: 7.30.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Murray Kucherawy Message-ID: <162270370853.1881.3349769840610170895@ietfa.amsl.com> Date: Thu, 03 Jun 2021 00:01:49 -0700 Archived-At: Subject: [Dots] Murray Kucherawy's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 07:01:49 -0000 Murray Kucherawy has entered the following ballot position for draft-ietf-dots-rfc8782-bis-07: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dots-rfc8782-bis/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I also only reviewed the diff to RFC 8782. (I really love that feature.) The shepherd writeup omits an answer to the question "Why is this the proper type of RFC?" Fortunately it's obvious here, but it would be better to be clear about it generally. In Section 3.1: The main changes to [RFC8782] are listed in Appendix A. These modifications are made with the constraint to avoid changes to the mapping table defined in Table 5 of [RFC8782] (see also Section 6). Section 6 of which document? In Section 10.1: s/docuement/document/ From nobody Thu Jun 3 01:02:42 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 139923A2EFB; Thu, 3 Jun 2021 01:02:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.095 X-Spam-Level: X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0oGYAabidsqJ; Thu, 3 Jun 2021 01:02:26 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB3D43A2EFA; Thu, 3 Jun 2021 01:02:25 -0700 (PDT) Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 4FwdfR6lnCz2y1q; Thu, 3 Jun 2021 10:02:23 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1622707343; bh=g+V9hQg3y/wwdjLz5hxItsvOYlg68QJ/THtuwX7Nizo=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=CJhoP+vPVR1HKrdeDoIfTjy+jb1pstcXN/FEMMDgP6qjFvQiTn541D+9bVqJmCbHx liGH4wvvjSG+f+HlYugbBMMuVfdJ2aHLer6sM1xpuv0BVem9eflaJ0rnAwgCbq0qzd GXlIpExLPHFOgYt0vI2gcczzAkvkxQRMfPeden2x/G4SVcrE2fOR7qrFks1SNWvt2i yvjcGW/Eu2fLDQOm5xTiCQ1ar7+Aty5nIIjHtcfRHH8bJNMesxf+LaGYNs9XPPkFDo 8NwiS/aBnbWWZON/Og4xXUatR5VNx/xN1l0JlAlYZ6cdWXWiythT7OIu9s/v0v/14b eNzLwlkd7ZfWA== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.45]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 4FwdfR51lWz5vN0; Thu, 3 Jun 2021 10:02:23 +0200 (CEST) From: To: Murray Kucherawy , The IESG CC: "draft-ietf-dots-rfc8782-bis@ietf.org" , "dots-chairs@ietf.org" , "dots@ietf.org" , "valery@smyslov.net" Thread-Topic: Murray Kucherawy's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) Thread-Index: AQHXWEZU9spFITIP80q3aT4UGCo4bKsB5Tuw Date: Thu, 3 Jun 2021 08:02:22 +0000 Message-ID: <6854_1622707343_60B88C8F_6854_249_1_787AE7BB302AE849A7480A190F8B933035396DA7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162270370853.1881.3349769840610170895@ietfa.amsl.com> In-Reply-To: <162270370853.1881.3349769840610170895@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Murray Kucherawy's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 08:02:31 -0000 SGkgTXVycmF5LCANCg0KVGhhbmtzIGZvciB0aGUgY29tbWVudHMuIFBsZWFzZSBmaW5kIHNvbWUg cmVwbGllcyBpbmxpbmUuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmln aW5lLS0tLS0NCj4gRGXCoDogTXVycmF5IEt1Y2hlcmF3eSB2aWEgRGF0YXRyYWNrZXIgW21haWx0 bzpub3JlcGx5QGlldGYub3JnXQ0KPiBFbnZvecOpwqA6IGpldWRpIDMganVpbiAyMDIxIDA5OjAy DQo+IMOAwqA6IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPg0KPiBDY8KgOiBkcmFmdC1pZXRmLWRv dHMtcmZjODc4Mi1iaXNAaWV0Zi5vcmc7IGRvdHMtY2hhaXJzQGlldGYub3JnOw0KPiBkb3RzQGll dGYub3JnOyB2YWxlcnlAc215c2xvdi5uZXQNCj4gT2JqZXTCoDogTXVycmF5IEt1Y2hlcmF3eSdz IE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLWRvdHMtcmZjODc4Mi0NCj4gYmlzLTA3OiAod2l0 aCBDT01NRU5UKQ0KPiANCj4gTXVycmF5IEt1Y2hlcmF3eSBoYXMgZW50ZXJlZCB0aGUgZm9sbG93 aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCj4gZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODItYmlzLTA3 OiBObyBPYmplY3Rpb24NCj4gDQo+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1 YmplY3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvDQo+IGFsbCBlbWFpbCBhZGRyZXNzZXMgaW5j bHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0bw0KPiBjdXQgdGhpcyBp bnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLikNCj4gDQo+IA0KPiBQbGVhc2UgcmVmZXIg dG8gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy0NCj4gY3JpdGVy aWEuaHRtbA0KPiBmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBESVNDVVNTIGFuZCBDT01NRU5U IHBvc2l0aW9ucy4NCj4gDQo+IA0KPiBUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFs bG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQo+IGh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy8NCj4gDQo+IA0KPiANCj4g LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCj4gLS0NCj4gQ09NTUVOVDoNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gLS0NCj4gDQo+ IEkgYWxzbyBvbmx5IHJldmlld2VkIHRoZSBkaWZmIHRvIFJGQyA4NzgyLiAgKEkgcmVhbGx5IGxv dmUgdGhhdA0KPiBmZWF0dXJlLikNCj4gDQo+IFRoZSBzaGVwaGVyZCB3cml0ZXVwIG9taXRzIGFu IGFuc3dlciB0byB0aGUgcXVlc3Rpb24gIldoeSBpcyB0aGlzDQo+IHRoZSBwcm9wZXIgdHlwZSBv ZiBSRkM/IiAgRm9ydHVuYXRlbHkgaXQncyBvYnZpb3VzIGhlcmUsIGJ1dCBpdA0KPiB3b3VsZCBi ZSBiZXR0ZXIgdG8gYmUgY2xlYXIgYWJvdXQgaXQgZ2VuZXJhbGx5Lg0KPiANCj4gSW4gU2VjdGlv biAzLjE6DQo+IA0KPiAgICBUaGUgbWFpbiBjaGFuZ2VzIHRvIFtSRkM4NzgyXSBhcmUgbGlzdGVk IGluIEFwcGVuZGl4IEEuICBUaGVzZQ0KPiAgICBtb2RpZmljYXRpb25zIGFyZSBtYWRlIHdpdGgg dGhlIGNvbnN0cmFpbnQgdG8gYXZvaWQgY2hhbmdlcyB0bw0KPiB0aGUNCj4gICAgbWFwcGluZyB0 YWJsZSBkZWZpbmVkIGluIFRhYmxlIDUgb2YgW1JGQzg3ODJdIChzZWUgYWxzbyBTZWN0aW9uDQo+ IDYpLg0KPiANCj4gU2VjdGlvbiA2IG9mIHdoaWNoIGRvY3VtZW50Pw0KDQpbTWVkXSBTZWN0aW9u IDYgb2YgdGhlIGJpcyAuLi4gYnV0IHRoZXJlIGlzIG5vIGhhcm0gaWYgb25lIGNvbmZ1c2VzIGJv dGggZG9jdW1lbnRzIGJlY2F1c2UgdGhhdCBzZWN0aW9uIGhhcyB0aGUgc2FtZSBjb250ZW50IGlu IGJvdGguIEhvd2V2ZXIsIEkgd2VudCB3aXRoIHRoaXMgY2hhbmdlIGZvciBiZXR0ZXIgY2xhcml0 eTogDQoNCk9MRDoNCiAgbWFwcGluZyB0YWJsZSBkZWZpbmVkIGluIFRhYmxlIDUgb2YgW1JGQzg3 ODJdIChzZWUgYWxzbyBTZWN0aW9uIDYpDQpORVc6DQogIG1hcHBpbmcgdGFibGUgZGVmaW5lZCBp biBUYWJsZSA1IG9mIFtSRkM4NzgyXSAoc2VlIGFsc28gU2VjdGlvbiA2IG9mIHRoZSBwcmVzZW50 IGRvY3VtZW50KQ0KDQo+IA0KPiBJbiBTZWN0aW9uIDEwLjE6IHMvZG9jdWVtZW50L2RvY3VtZW50 Lw0KPiANCg0KW01lZF0gQWxyZWFkeSBmaXhlZCBhcyBwYXJ0IG9mIExhcnMncyByZXZpZXcuIFRo YW5rcy4gDQoNCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fCgpDZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2 ZW50IGNvbnRlbmlyIGRlcyBpbmZvcm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVn aWVlcyBldCBuZSBkb2l2ZW50IGRvbmMKcGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBj b3BpZXMgc2FucyBhdXRvcmlzYXRpb24uIFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFy IGVycmV1ciwgdmV1aWxsZXogbGUgc2lnbmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVp cmUgYWluc2kgcXVlIGxlcyBwaWVjZXMgam9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1 ZXMgZXRhbnQgc3VzY2VwdGlibGVzIGQnYWx0ZXJhdGlvbiwKT3JhbmdlIGRlY2xpbmUgdG91dGUg cmVzcG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFs c2lmaWUuIE1lcmNpLgoKVGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMgbWF5IGNvbnRh aW4gY29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcHJv dGVjdGVkIGJ5IGxhdzsKdGhleSBzaG91bGQgbm90IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9yIGNv cGllZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uCklmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1h aWwgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoaXMgbWVz c2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzLgpBcyBlbWFpbHMgbWF5IGJlIGFsdGVyZWQsIE9yYW5n ZSBpcyBub3QgbGlhYmxlIGZvciBtZXNzYWdlcyB0aGF0IGhhdmUgYmVlbiBtb2RpZmllZCwgY2hh bmdlZCBvciBmYWxzaWZpZWQuClRoYW5rIHlvdS4KCg== From nobody Thu Jun 3 01:17:06 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 294A63A2F36; Thu, 3 Jun 2021 01:16:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.796 X-Spam-Level: X-Spam-Status: No, score=-2.796 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QpIihdTzl-xW; Thu, 3 Jun 2021 01:16:54 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A46833A2F5C; Thu, 3 Jun 2021 01:16:53 -0700 (PDT) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 4Fwdz75ntJzFq1g; Thu, 3 Jun 2021 10:16:51 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1622708211; bh=R82Kmqwj7OoDiD2EsLcC7cw2blL9pf2LP6eNslUJ52M=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=ml2PpnseW4XVqMVFOjoCaurn8Jok0XOQuMHkgc/DsQrzQlHzP8+317tC3+NDJ00vT 4UroHN0pIMt9d3YnQysv6viwcoe5+M+xo0trv7lR6lZyPvGvTN3A8bzf5nJd3R1BBX E8hnOKeoSXtIfGxBSHvWHo5BtfIuKxs5tK2vYiG+RSXHdTYc9TKyDWJl1vd+h63hzQ Nb1h5nJRpWV/YwxmQTzBiSs00BeUisijucoeylUE0BRTq9n7HPPFuklYa3pcFzK5Cx wGiRpWgMH4zWH1uU5UmTcSpgYfFkV8kKP9ABsstuhbVw8we2QbQl2s1l2FjsBcJcGC lTwy1SEfrlNhg== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.38]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 4Fwdz74JCmzCqkd; Thu, 3 Jun 2021 10:16:51 +0200 (CEST) From: To: Erik Kline , The IESG CC: "draft-ietf-dots-rfc8782-bis@ietf.org" , "dots-chairs@ietf.org" , "dots@ietf.org" , "valery@smyslov.net" Thread-Topic: Erik Kline's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) Thread-Index: AQHXWD77ZxlT8QPpBk2F+G0JieRroKsB4hng Date: Thu, 3 Jun 2021 08:16:51 +0000 Message-ID: <28147_1622708211_60B88FF3_28147_159_1_787AE7BB302AE849A7480A190F8B933035396DD3@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162270054186.18148.14870101120799116947@ietfa.amsl.com> In-Reply-To: <162270054186.18148.14870101120799116947@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Erik Kline's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 08:17:00 -0000 SGkgRXJpaywgDQoNClRoYW5rcyBmb3IgdGhlIHJldmlldy4NCg0KUGxlYXNlIHNlZSBpbmxpbmUu DQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKg OiBFcmlrIEtsaW5lIHZpYSBEYXRhdHJhY2tlciBbbWFpbHRvOm5vcmVwbHlAaWV0Zi5vcmddDQo+ IEVudm95w6nCoDogamV1ZGkgMyBqdWluIDIwMjEgMDg6MDkNCj4gw4DCoDogVGhlIElFU0cgPGll c2dAaWV0Zi5vcmc+DQo+IENjwqA6IGRyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpc0BpZXRmLm9y ZzsgZG90cy1jaGFpcnNAaWV0Zi5vcmc7DQo+IGRvdHNAaWV0Zi5vcmc7IHZhbGVyeUBzbXlzbG92 Lm5ldDsgdmFsZXJ5QHNteXNsb3YubmV0DQo+IE9iamV0wqA6IEVyaWsgS2xpbmUncyBObyBPYmpl Y3Rpb24gb24gZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODItYmlzLTA3Og0KPiAod2l0aCBDT01NRU5U KQ0KPiANCj4gRXJpayBLbGluZSBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3Np dGlvbiBmb3INCj4gZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODItYmlzLTA3OiBObyBPYmplY3Rpb24N Cj4gDQo+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRh Y3QgYW5kIHJlcGx5IHRvDQo+IGFsbCBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRv IGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0bw0KPiBjdXQgdGhpcyBpbnRyb2R1Y3RvcnkgcGFy YWdyYXBoLCBob3dldmVyLikNCj4gDQo+IA0KPiBQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cu aWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy0NCj4gY3JpdGVyaWEuaHRtbA0KPiBmb3Ig bW9yZSBpbmZvcm1hdGlvbiBhYm91dCBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCj4g DQo+IA0KPiBUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywg Y2FuIGJlIGZvdW5kIGhlcmU6DQo+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Ry YWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy8NCj4gDQo+IA0KPiANCj4gLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4g LS0NCj4gQ09NTUVOVDoNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gLS0NCj4gDQo+IFtTM10gW2NvbW1lbnRd DQo+IA0KPiAqIEkgZG9uJ3Qga25vdyBpZiBpdCdzIHJlYWxseSBuZWNlc3NhcnkgdG8gZHJlZGdl IHVwIFJGQyA2Mjk2LCBidXQgSQ0KPiAgIHVuZGVyc3RhbmQgdGhlIGRlc2lyZSBmb3IgY29tcGxl dGVuZXNzLg0KPiANCg0KW01lZF0gWW91IGdvdCB0aGUgaW50ZW50IGFib3V0IHRoZSBjb21wbGV0 ZW5lc3MuIFRoZSBrZXkgcG9pbnQgaXMgdGhhdCB3ZSBhcmUgbm90IHJlY29tbWVuZGluZyBpdCwg YnV0IGp1c3QgY2l0ZSBhcyBvbmUgZXhhbXBsZSB3aGVyZSB0aGluZ3MgbWF5IGJlIGJyb2tlbi4g DQoNCj4gW1M0LjQuMS4xXSBbcXVlc3Rpb25dDQo+IA0KPiAqIEZvciAibGlmZXRpbWUiIGluIHRo ZSBjYXNlIHdoZXJlIGEgInRhcmdldC1mcWRuIiB3YXMgZ2l2ZW4sIHNob3VsZA0KPiB0aGUNCj4g ICByZXNvbHV0aW9uIGxpYnJhcnkncyBrbm93bGVkZ2Ugb2YgdGhlIEROUyBSUiBUVEwgdmFsdWUo cykgYmUNCj4gZmFjdG9yZWQgaW4/DQo+IA0KPiAgIEZvciBleGFtcGxlLCB3aGF0IGRvZXMgbGlm ZXRpbWU9MzYwMHMgbWVhbiBmb3IgYSBob3N0bmFtZSB3aG9zZQ0KPiBBL0FBQUENCj4gICBSUnMg aGF2ZSBvbmx5IDUgbWludXRlIGxpZmV0aW1lcz8gIElzIHRoZSBET1RTIHNlcnZlci9lbmZvcmNl cg0KPiBleHBlY3RlZA0KPiAgIHRvIGNvbnRpbnVvdXNseSByZS1yZXNvbHZlIGV2ZXJ5ICR7RE5T X1JSX1RUTH0gYW5kIGFwcGx5IHRoZQ0KPiBwb2xpY3kgZm9yDQo+ICAgdXAgdG8gdGhlIGZ1bGwg MzYwMCBzZWNvbmRzDQoNCltNZWRdIFllYWguIFdoZW4gcG9zc2libGUsIHRoZSBjbGllbnQgbWFr ZXMgc3VyZSB0aGF0IHRoZSByZXNvbHZlZCBhZGRyZXNzZXMgYXJlIHZhbGlkIGR1cmluZyB0aGUg bWl0aWdhdGlvbiBsaWZldGltZS4gSWYgYSByZXNvbHZlZCBhZGRyZXNzIGZsdXNoZWQgb3V0IChl LmcuLCBETlMgVFRMIGV4cGlyeSkgd2hpbGUgdGhlIG1pdGlnYXRpb24gaXMgc3RpbGwgYWN0aXZl IChwZW5kaW5nIGxpZmV0aW1lIT0wKSwgdGhlIHJlc29sdXRpb24gbGlicmFyeSBzaG91bGQgYmUg c29saWNpdGVkLiANCg0KQXMgd2UgZG9uJ3QgaW1wb3NlIGFueSByZXF1aXJlbWVudCBvbiB0aGUg bmFtZSByZXNvbHV0aW9uIGxpYnJhcnkgKGFuZCBlc3BlY2lhbGx5IHdoZXRoZXIgaXQgZXhwb3Nl cyBhIHZhbGlkaXR5IHRpbWVvdXQpLCBJIHN1Z2dlc3QgdGhlIGZvbGxvd2luZyBjaGFuZ2U6IA0K DQpPTEQ6DQogICAgICBIb3cgYSBuYW1lIGlzIHBhc3NlZCB0byBhbiB1bmRlcmx5aW5nIG5hbWUg cmVzb2x1dGlvbiBsaWJyYXJ5IGlzDQogICAgICBpbXBsZW1lbnRhdGlvbiBhbmQgZGVwbG95bWVu dCBzcGVjaWZpYy4gIE5ldmVydGhlbGVzcywgb25jZSB0aGUNCiAgICAgIG5hbWUgaXMgcmVzb2x2 ZWQgaW50byBvbmUgb3IgbXVsdGlwbGUgSVAgYWRkcmVzc2VzLCBET1RTIHNlcnZlcnMNCiAgICAg IE1VU1QgYXBwbHkgdGhlIHNhbWUgdmFsaWRhdGlvbiBjaGVja3MgYXMgdGhvc2UgZm9yICd0YXJn ZXQtDQogICAgICBwcmVmaXgnLiAgDQoNCk5FVzoNCiAgICAgIEhvdyBhIG5hbWUgaXMgcGFzc2Vk IHRvIGFuIHVuZGVybHlpbmcgbmFtZSByZXNvbHV0aW9uIGxpYnJhcnkgaXMNCiAgICAgIGltcGxl bWVudGF0aW9uIGFuZCBkZXBsb3ltZW50IHNwZWNpZmljLiAgTmV2ZXJ0aGVsZXNzLCBvbmNlIHRo ZQ0KICAgICAgbmFtZSBpcyByZXNvbHZlZCBpbnRvIG9uZSBvciBtdWx0aXBsZSBJUCBhZGRyZXNz ZXMsIERPVFMgc2VydmVycw0KICAgICAgTVVTVCBhcHBseSB0aGUgc2FtZSB2YWxpZGF0aW9uIGNo ZWNrcyBhcyB0aG9zZSBmb3IgJ3RhcmdldC0NCiAgICAgIHByZWZpeCcuICBUaGVzZSB2YWxpZGF0 aW9uIGNoZWNrcyBhcmUgcmVpdGVyYXRlZCBieSB0aGUgRE9UUw0KICAgICAgY2xpZW50IGVhY2gg dGltZSBhIG5hbWUgaXMgcGFzc2VkIHRvIHRoZSB1bmRlcmx5aW5nIG5hbWUNCiAgICAgIHJlc29s dXRpb24gbGlicmFyeSAoZS5nLiwgdXBvbiBleHBpcnkgb2YgRE5TIFRUTCkuDQoNCg0KLCBvciBp cyB0aGUgRE5TIFJSIFRUTCBpZ25vcmVkIG9uY2UgdGhlDQo+ICAgcmVzb2x1dGlvbiBoYXMgYmVl biBjb25maXJtZWQgdG8gaGF2ZSBzdWNjZWVkZWQgb3IgZmFpbGVkPw0KPiANCg0KCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18K CkNlIG1lc3NhZ2UgZXQgc2VzIHBpZWNlcyBqb2ludGVzIHBldXZlbnQgY29udGVuaXIgZGVzIGlu Zm9ybWF0aW9ucyBjb25maWRlbnRpZWxsZXMgb3UgcHJpdmlsZWdpZWVzIGV0IG5lIGRvaXZlbnQg ZG9uYwpwYXMgZXRyZSBkaWZmdXNlcywgZXhwbG9pdGVzIG91IGNvcGllcyBzYW5zIGF1dG9yaXNh dGlvbi4gU2kgdm91cyBhdmV6IHJlY3UgY2UgbWVzc2FnZSBwYXIgZXJyZXVyLCB2ZXVpbGxleiBs ZSBzaWduYWxlcgphIGwnZXhwZWRpdGV1ciBldCBsZSBkZXRydWlyZSBhaW5zaSBxdWUgbGVzIHBp ZWNlcyBqb2ludGVzLiBMZXMgbWVzc2FnZXMgZWxlY3Ryb25pcXVlcyBldGFudCBzdXNjZXB0aWJs ZXMgZCdhbHRlcmF0aW9uLApPcmFuZ2UgZGVjbGluZSB0b3V0ZSByZXNwb25zYWJpbGl0ZSBzaSBj ZSBtZXNzYWdlIGEgZXRlIGFsdGVyZSwgZGVmb3JtZSBvdSBmYWxzaWZpZS4gTWVyY2kuCgpUaGlz IG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cyBtYXkgY29udGFpbiBjb25maWRlbnRpYWwgb3Ig cHJpdmlsZWdlZCBpbmZvcm1hdGlvbiB0aGF0IG1heSBiZSBwcm90ZWN0ZWQgYnkgbGF3Owp0aGV5 IHNob3VsZCBub3QgYmUgZGlzdHJpYnV0ZWQsIHVzZWQgb3IgY29waWVkIHdpdGhvdXQgYXV0aG9y aXNhdGlvbi4KSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBlcnJvciwgcGxlYXNl IG5vdGlmeSB0aGUgc2VuZGVyIGFuZCBkZWxldGUgdGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNo bWVudHMuCkFzIGVtYWlscyBtYXkgYmUgYWx0ZXJlZCwgT3JhbmdlIGlzIG5vdCBsaWFibGUgZm9y IG1lc3NhZ2VzIHRoYXQgaGF2ZSBiZWVuIG1vZGlmaWVkLCBjaGFuZ2VkIG9yIGZhbHNpZmllZC4K VGhhbmsgeW91LgoK From nobody Thu Jun 3 05:17:36 2021 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2DBFE3A0D1A; Thu, 3 Jun 2021 05:17:25 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.30.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <162272264510.23953.17502457707949234682@ietfa.amsl.com> Date: Thu, 03 Jun 2021 05:17:25 -0700 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-rfc8782-bis-08.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 12:17:25 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification Authors : Mohamed Boucadair Jon Shallow Tirumaleswar Reddy.K Filename : draft-ietf-dots-rfc8782-bis-08.txt Pages : 118 Date : 2021-06-03 Abstract: This document specifies the Distributed Denial-of-Service Open Threat Signaling (DOTS) signal channel, a protocol for signaling the need for protection against Distributed Denial-of-Service (DDoS) attacks to a server capable of enabling network traffic mitigation on behalf of the requesting client. A companion document defines the DOTS data channel, a separate reliable communication layer for DOTS management and configuration purposes. This document obsoletes RFC 8782. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-rfc8782-bis/ There is also an htmlized version available at: https://datatracker.ietf.org/doc/html/draft-ietf-dots-rfc8782-bis-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-rfc8782-bis-08 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Jun 3 05:20:31 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73CB33A0D2D for ; Thu, 3 Jun 2021 05:20:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.096 X-Spam-Level: X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FxvPsgNF36Pt for ; Thu, 3 Jun 2021 05:20:24 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41A1A3A0D31 for ; Thu, 3 Jun 2021 05:20:24 -0700 (PDT) Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar25.francetelecom.fr (ESMTP service) with ESMTP id 4FwlN61l9bz8tBB; Thu, 3 Jun 2021 14:20:22 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1622722822; bh=fIJmWqJuXsHfXwyBVvfTX285TM3n230+wpGs1X1X1Yg=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=LF3Edr6GiWmvylC/tCrLuZOuIo8Pg5VZ5t22J63dQqp/wpT0tSBwh0hOQdMUiFqtM v9xaZfjD6yiLtuwiSKOxc6me4loWbmitQO7tbALf+LaReCojcfBJt+NOcJri/H8dI3 h7nZS4HK7SsxnEjZ/aOe5MjtnPRj6H7R7OUj9k93m0Wlb55/vXsXjuh2CPdwvv0S0O 1Bo3IseEWEdCfHHNlozRuxv03eEPHwLCfrup+ZmlZbes1JQCwnecil3IeihXuf+yJh cgNmb1OM+cr+/diJGRqK1zPsyWoIqE9bAPvUDCnhJhKvwdQ6JjvG2Z7pCCcJOiVKgc DaPSIKCxU/88A== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.70]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 4FwlN60tfpz5vNs; Thu, 3 Jun 2021 14:20:22 +0200 (CEST) From: To: "dots@ietf.org" , "Benjamin Kaduk (kaduk@mit.edu)" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-rfc8782-bis-08.txt Thread-Index: AQHXWHJxsy/qTozE5ky8XxLHtN0FXKsCNGog Date: Thu, 3 Jun 2021 12:20:20 +0000 Message-ID: <15212_1622722822_60B8C906_15212_271_12_787AE7BB302AE849A7480A190F8B933035397158@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162272264510.23953.17502457707949234682@ietfa.amsl.com> In-Reply-To: <162272264510.23953.17502457707949234682@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-rfc8782-bis-08.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 12:20:31 -0000 Hi Ben, all,=20 This version integrates all the IESG reviews. Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de internet- > drafts@ietf.org > Envoy=E9=A0: jeudi 3 juin 2021 14:17 > =C0=A0: i-d-announce@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: [Dots] I-D Action: draft-ietf-dots-rfc8782-bis-08.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the DDoS Open Threat Signaling WG of > the IETF. >=20 > Title : Distributed Denial-of-Service Open Threat > Signaling (DOTS) Signal Channel Specification > Authors : Mohamed Boucadair > Jon Shallow > Tirumaleswar Reddy.K > Filename : draft-ietf-dots-rfc8782-bis-08.txt > Pages : 118 > Date : 2021-06-03 >=20 > Abstract: > This document specifies the Distributed Denial-of-Service Open > Threat > Signaling (DOTS) signal channel, a protocol for signaling the > need > for protection against Distributed Denial-of-Service (DDoS) > attacks > to a server capable of enabling network traffic mitigation on > behalf > of the requesting client. >=20 > A companion document defines the DOTS data channel, a separate > reliable communication layer for DOTS management and > configuration > purposes. >=20 > This document obsoletes RFC 8782. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dots-rfc8782-bis/ >=20 > There is also an htmlized version available at: > https://datatracker.ietf.org/doc/html/draft-ietf-dots-rfc8782-bis-08 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dots-rfc8782-bis-08 >=20 >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. From nobody Thu Jun 3 07:29:26 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AFCA3A13F0; Thu, 3 Jun 2021 07:29:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0CNDRldUlpFE; Thu, 3 Jun 2021 07:29:14 -0700 (PDT) Received: from mail-il1-x12c.google.com (mail-il1-x12c.google.com [IPv6:2607:f8b0:4864:20::12c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 886E33A13ED; Thu, 3 Jun 2021 07:29:13 -0700 (PDT) Received: by mail-il1-x12c.google.com with SMTP id e7so5730293ils.3; Thu, 03 Jun 2021 07:29:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=cZHL0n5b4cbu5SJOtQt0/9eoKOcxrvjAzp1jQ5FBJH4=; b=VUpRn+I8anNUIz7SkThCsjPV9laIBHPwmtSrSeWYclHYvOy5YA9O8j6DfPhHpwcX9H Pq63FPzzYn3Mdgx/I2hMcKKmhSnAUnUETgv4jFXmx37oLSCllHBkJ9O6xtuaFJR+7+nN i7k+/kunmbpibFR13aEvk/4ceHBkn+EJjGyK56VvwgG/n1FiX1aSo62KrU9FOb0Uqgex AZtGxeZHm63/0DHJXhva66DQG0IGFuy9p+sxQY8U1WcQozFDWE6e5djgWIOrpNPFCVy6 Wy8ZpPil1VMxuXWpK2qxzAkkojnmlBwxuupvUAUIiM1BsT0f2mJIaWpNGLB33sHztn6O pgHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cZHL0n5b4cbu5SJOtQt0/9eoKOcxrvjAzp1jQ5FBJH4=; b=J8NhBkejESieNbKtX/V7rPtZL5OBp+7wo/okFT6CDxM5PJKltlc5yva9r9ctissjNM spyUEp+W1R7JoZcszs/rxzkfQrZWFJ65TA1/338ZZBoQzfjfQx0O42O4VPcZhzjVxys6 Rcdd0iktbhOghMpKpyCKjLVMV2m5zROcVQxu9+6xpUcl4jd4+UFNBnHVsRaAG/x++Anq PCrb5QfGs2rKfGm5IiEUjke6qI6IjZS0ZIwdghh6C8FOyArZW2uYTidWeIWmdAh+2c4Y bZo+OkYaDgy74MKSOIhzOzHa9D7Fq2EUgU2kQhCUFoQMTKfVHLNPNSJE9KpplPnO6SrC mOuQ== X-Gm-Message-State: AOAM532EWl+8KpiAt+7R+z1c+sXCXLoqchprUhqDAchMLZhd+ldq+u/n Hk7OFX4Yvd5sFQTq4VGzitfgbtUShPN/1RTXwSU= X-Google-Smtp-Source: ABdhPJwrcFlhXgavVl1Wo7GNWEhxkUrskKP3vd5nTj+WRkgjVa/oQk+6GYIwBQv2sHBSgYjhABIyt50OkKYHQ+W/PvQ= X-Received: by 2002:a05:6e02:b49:: with SMTP id f9mr123262ilu.287.1622730550977; Thu, 03 Jun 2021 07:29:10 -0700 (PDT) MIME-Version: 1.0 References: <162258717896.27217.11487555052395475135@ietfa.amsl.com> <26196_1622627385_60B75439_26196_97_8_787AE7BB302AE849A7480A190F8B933035396207@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <5734_1622656607_60B7C65F_5734_420_1_787AE7BB302AE849A7480A190F8B9330353966F7@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <19601_1622662450_60B7DD32_19601_254_1_787AE7BB302AE849A7480A190F8B933035396823@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <19601_1622662450_60B7DD32_19601_254_1_787AE7BB302AE849A7480A190F8B933035396823@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: Martin Duke Date: Thu, 3 Jun 2021 07:28:59 -0700 Message-ID: To: mohamed.boucadair@orange.com Cc: "dots-chairs@ietf.org" , "valery@smyslov.net" , "dots@ietf.org" , The IESG , "draft-ietf-dots-rfc8782-bis@ietf.org" Content-Type: multipart/alternative; boundary="0000000000000ea85c05c3dd660e" Archived-At: Subject: Re: [Dots] Martin Duke's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 14:29:20 -0000 --0000000000000ea85c05c3dd660e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Ah yes, I see it now. Yes, putting the caption above is better. On Wed, Jun 2, 2021 at 12:34 PM wrote: > Re-, > > > > Please see inline. > > > > Cheers, > > Med > > > > *De :* Martin Duke [mailto:martin.h.duke@gmail.com] > *Envoy=C3=A9 :* mercredi 2 juin 2021 21:12 > *=C3=80 :* BOUCADAIR Mohamed INNOV/NET > *Cc :* dots-chairs@ietf.org; valery@smyslov.net; dots@ietf.org; The IESG = < > iesg@ietf.org>; draft-ietf-dots-rfc8782-bis@ietf.org > *Objet :* Re: [Dots] Martin Duke's No Objection on > draft-ietf-dots-rfc8782-bis-07: (with COMMENT) > > > > > > > > On Wed, Jun 2, 2021 at 10:56 AM wrote: > > DOTS servers MUST return 4.09 (Conflict) error code to a DOTS > peer to notify that the 'cuid' is already in use by another > DOTS client. Upon receipt of that error code, a new 'cuid' > MUST be generated by the DOTS peer (e.g., using [RFC4122]). > > > > That's not what I read from Fig. 11. The conflict response has a cuid tha= t > has not previously appeared in the exchange. Maybe Fig. 11 is wrong? > > > > *[Med] The example does not depend on previous ones but I understand that > it is better if a cuid used in previous examples is used here as well. > Updated the example to use the cuid used in previous figures. * > > > > *Please note that the =E2=80=9Cconflict response=E2=80=9D does not includ= e a cuid. * > > > > I cannot reconcile your statement with Figure 11: > > (2) Message body of the 4.09 (Conflict) response > > from the DOTS server > > > > Header: PUT (Code=3D0.03) > > Uri-Path: ".well-known" > > Uri-Path: "dots" > > Uri-Path: "mitigate" > > Uri-Path: "cuid=3Df30d281ce6b64fc5a0b91e" > > Uri-Path: "mid=3D12" > > > > *[Med] The full figure is as follows: * > > > > *=3D=3D* > > * Header: PUT (Code=3D0.03)* > > * Uri-Path: ".well-known"* > > * Uri-Path: "dots"* > > * Uri-Path: "mitigate"* > > * Uri-Path: "cuid=3Ddz6pHjaADkaFTbjr0JGBpw"* > > * Uri-Path: "mid=3D12"* > > > > * (1) Request with a conflicting 'cuid'* > > > > * {* > > * "ietf-dots-signal-channel:mitigation-scope": {* > > * "scope": [* > > * {* > > * "conflict-information": {* > > * "conflict-cause": "cuid-collision"* > > * }* > > * }* > > * ]* > > * }* > > * }* > > > > * (2) Message body of the 4.09 (Conflict) response* > > * from the DOTS server* > > > > * Header: PUT (Code=3D0.03)* > > * Uri-Path: ".well-known"* > > * Uri-Path: "dots"* > > * Uri-Path: "mitigate"* > > * Uri-Path: "cuid=3Df30d281ce6b64fc5a0b91e"* > > * Uri-Path: "mid=3D12"* > > > > * (3) Request with a new 'cuid'* > > > > * Figure 11: Example of Generating a New 'cuid'* > > *=3D=3D* > > > > *The response body corresponds to the second part, that is: * > > > > *=3D=3D* > > * {* > > * "ietf-dots-signal-channel:mitigation-scope": {* > > * "scope": [* > > * {* > > * "conflict-information": {* > > * "conflict-cause": "cuid-collision"* > > * }* > > * }* > > * ]* > > * }* > > * }* > > > > * (2) Message body of the 4.09 (Conflict) response* > > * from the DOTS server* > > *=3D=3D * > > > > *If you think this would be less confusing, we can move up the legends as= follows: * > > > > *=3D=3D* > > > > * (1) Request with a conflicting 'cuid'* > > > > * Header: PUT (Code=3D0.03)* > > * Uri-Path: ".well-known"* > > * Uri-Path: "dots"* > > * Uri-Path: "mitigate"* > > * Uri-Path: "cuid=3Ddz6pHjaADkaFTbjr0JGBpw"* > > * Uri-Path: "mid=3D12"* > > > > * (2) Message body of the 4.09 (Conflict) response* > > * from the DOTS server* > > > > * {* > > * "ietf-dots-signal-channel:mitigation-scope": {* > > * "scope": [* > > * {* > > * "conflict-information": {* > > * "conflict-cause": "cuid-collision"* > > * }* > > * }* > > * ]* > > * }* > > * }* > > > > * (3) Request with a new 'cuid'* > > > > * Header: PUT (Code=3D0.03)* > > * Uri-Path: ".well-known"* > > * Uri-Path: "dots"* > > * Uri-Path: "mitigate"* > > * Uri-Path: "cuid=3Df30d281ce6b64fc5a0b91e"* > > * Uri-Path: "mid=3D12"* > > > > * Figure 11: Example of Generating a New 'cuid'* > > > > *=3D=3D* > > > > The rest looks good. > > *[Med] Thank you. * > > _________________________________________________________________________= ________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations confid= entielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez re= cu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages = electroniques etant susceptibles d'alteration, > Orange decline toute responsabilite si ce message a ete altere, deforme o= u falsifie. Merci. > > This message and its attachments may contain confidential or privileged i= nformation that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and de= lete this message and its attachments. > As emails may be altered, Orange is not liable for messages that have bee= n modified, changed or falsified. > Thank you. > > --0000000000000ea85c05c3dd660e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Ah yes, I see it now.

Yes, p= utting the caption above is better.

On Wed, Jun 2, 2021 at 12:34 P= M <mohamed.boucadair@ora= nge.com> wrote:

Re-,

=C2=A0

Please see inline.

=C2=A0

Cheers,

Med

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0 =C2=A0 =C2=A0 DOTS servers MUST return 4.09 (= Conflict) error code to a DOTS
=C2=A0 =C2=A0 =C2=A0 peer to notify that the 'cuid' is already in u= se by another
=C2=A0 =C2=A0 =C2=A0 DOTS client.=C2=A0 Upon receipt of that error code, a = new 'cuid'
=C2=A0 =C2=A0 =C2=A0 MUST be generated by the DOTS peer (e.g., using [RFC41= 22]).

=C2=A0

That's not what I read from Fig. 11. The conflic= t response has a cuid that has not previously appeared in the exchange. May= be Fig. 11 is wrong?

=C2=A0

[Med] The example does not depend on previous ones but= I understand that it is better if a cuid used in previous examples is used here as well. Updated the example to use the cuid used in previous= figures.

=C2=A0

Please note that the =E2=80=9Cconflict response=E2=80= =9D does not include a cuid.

=C2=A0

I cannot reconcile your statement with Figure 11:= 

=C2=A0=C2=A0=C2=A0=C2=A0 (2) Message body of the 4.09 (Conflict) respo=
nse
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 from the DOTS server
=C2=A0
=C2=A0=C2=A0=C2=A0=C2=A0 Header: PUT (Code=3D0.03)
=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: ".well-known"
=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: "dots"

=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: "mitigate"<=
/pre>

=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: "cuid=3Df30d281ce6b64fc5a0b91e=
"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: "mid=3D12"<=
/pre>

=C2=A0=

[Med] The full figure is as follows: 

=C2=A0


=3D=3D


=C2=A0=C2=A0=C2=A0=C2=A0 Header: PUT=
 (Code=3D0.03)


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;.well-known"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;dots"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;mitigate"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;cuid=3Ddz6pHjaADkaFTbjr0JGBpw"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;mid=3D12"


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 (1) Request=
 with a conflicting 'cuid'


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 {=



=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
 "ietf-dots-signal-channel:mitigation-scope": {=



=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 "scope": [


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 {


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "conflict-information=
": {


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "conflict=
-cause": "cuid-collision"


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 }<=
/b>


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 }


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0 ]


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0 }


=C2=A0=C2=A0=C2=A0=C2=A0 }=



=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 (2) Message=
 body of the 4.09 (Conflict) response


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
 from the DOTS server


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 Header: PUT=
 (Code=3D0.03)


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;.well-known"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;dots"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;mitigate"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;cuid=3Df30d281ce6b64fc5a0b91e"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;mid=3D12"


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 (3) Request=
 with a new 'cuid'


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0 Figure 11: Example of Generating a New 'cuid'=



=3D=3D


=C2=A0


The response body corresponds to the second part, that is: =C2=
=A0


=C2=A0


=3D=3D


=C2=A0=C2=A0=C2=A0=C2=A0 {=



=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
 "ietf-dots-signal-channel:mitigation-scope": {=



=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 "scope": [


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 {


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "conflict-information=
": {


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "conflict=
-cause": "cuid-collision"


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 }<=
/b>


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 }


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0 ]


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0 }


=C2=A0=C2=A0=C2=A0=C2=A0 }=



=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 (2) Message=
 body of the 4.09 (Conflict) response


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
 from the DOTS server


=3D=3D 


=C2=A0


If you think this would be less confusing, we can move up the le=
gends as follows: =C2=A0


=C2=A0


=3D=3D


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 (1) Request=
 with a conflicting 'cuid'


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 Header: PUT=
 (Code=3D0.03)


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;.well-known"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;dots"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;mitigate"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;cuid=3Ddz6pHjaADkaFTbjr0JGBpw"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;mid=3D12"


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 (2) Message=
 body of the 4.09 (Conflict) response


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
 from the DOTS server


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 {=



=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
 "ietf-dots-signal-channel:mitigation-scope": {=



=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 "scope": [


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 {


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "conflict-information=
": {


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "conflict=
-cause": "cuid-collision"


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 }<=
/b>


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 }


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0 ]


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0 }


=C2=A0=C2=A0=C2=A0=C2=A0 }=



=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 (3) Request=
 with a new 'cuid'


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0 Header: PUT=
 (Code=3D0.03)


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;.well-known"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;dots"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;mitigate"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;cuid=3Df30d281ce6b64fc5a0b91e"


=C2=A0=C2=A0=C2=A0=C2=A0 Uri-Path: &=
quot;mid=3D12"


=C2=A0


=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0 Figure 11: Example of Generating a New 'cuid'=



=C2=A0


=3D=3D


=C2=A0


The rest look=
s good.


[Med] Thank you. 


______________________________________________________________________=
___________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les message=
s electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.
--0000000000000ea85c05c3dd660e-- From nobody Thu Jun 3 17:46:06 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 455863A2133; Thu, 3 Jun 2021 17:45:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Os4oGpfrGMQA; Thu, 3 Jun 2021 17:45:52 -0700 (PDT) Received: from mail-ot1-x32d.google.com (mail-ot1-x32d.google.com [IPv6:2607:f8b0:4864:20::32d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42FD03A2130; Thu, 3 Jun 2021 17:45:51 -0700 (PDT) Received: by mail-ot1-x32d.google.com with SMTP id q9-20020a9d66490000b02903c741e5b703so6438043otm.0; Thu, 03 Jun 2021 17:45:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=5XyQW1NkaUIK/GTjVOe0rhkhN4BmiDv2lhXBOX5sDkw=; b=fcwc3EU3BIJi4D6MxzhSiNfOmOnjuBaJW1lHBxr379T69RXTqndNB0P9GwGCrRO0yJ X2T2Y/6zrX/Sv4+dce2021bSkz+Or3sAN6tsEn7QK68nCDcTciMY/EmowOaE58oHtpKG mbuCPV0l17YNw2aanua232+ipZtvdKdCll9xn8L5V4AGQ3RdJYftVR/+74vjL77OskDu HBBK+gsO6X1dq3FTelnSw/2Q0KWayQzUzhsuDZN34gGPtyr4KJA+nmYFKCSjvteyNFYW /fOlqCOwV2QuT9X+LGXTnqSoFL33YlcVytqVVYode1QpzAUZMVzbFVjqg6JGvR8niQ3k VY5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=5XyQW1NkaUIK/GTjVOe0rhkhN4BmiDv2lhXBOX5sDkw=; b=ENsgfADHqkLfBGxkmUdFbowrqZyUBQQ18/zbPmYw8/5F/TtJ6uuxaMGGq8OZifD8NK 3Q3V6h31g389B8f1FlCv8sKVoMpQrhIiR+6DGRm6Vv9Xxvk20i8YMbcvv+CUl0XQH5dO nk2OUW0RrW3q4hyM4YjTFbtfT2zeFWlNMvLZhLjxN3fQcX93Cxnel6EgaSUCxpuzaq5S /4XCWfFqenDRscUrmCw1G23z+FTT3XlPqJGjVr0LEbG3xRE4WNe+S9T0rkH+spfwTBrY ZFxLvJUKL6X7MKq4ZLLb/OvtFYdCz0Ihr6jQPYUgNPc5PAbn56WTMrpG2G9wujEVoq6b 7KDA== X-Gm-Message-State: AOAM532TpIcSMThYtvjf2+WyLWu62MYFlmMeovoixzPnuDwah4pdbqne kJEslIR396pb/GtMxyBC/j+9jFoNH8iMQ9wHjyLJZfJP X-Google-Smtp-Source: ABdhPJy9aNVSn4S57sJRNwJtw1bbiLCcCOf8jhsy4xtTsgagm+FG+nC85we7dXrxyPrIETVVFvLmi9xoKYvYJKMevgs= X-Received: by 2002:a9d:5a09:: with SMTP id v9mr1614692oth.191.1622767549627; Thu, 03 Jun 2021 17:45:49 -0700 (PDT) MIME-Version: 1.0 References: <162270054186.18148.14870101120799116947@ietfa.amsl.com> <28147_1622708211_60B88FF3_28147_159_1_787AE7BB302AE849A7480A190F8B933035396DD3@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <28147_1622708211_60B88FF3_28147_159_1_787AE7BB302AE849A7480A190F8B933035396DD3@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: Erik Kline Date: Thu, 3 Jun 2021 17:45:39 -0700 Message-ID: To: "mohamed.boucadair" Cc: The IESG , "draft-ietf-dots-rfc8782-bis@ietf.org" , "dots-chairs@ietf.org" , "dots@ietf.org" , "valery@smyslov.net" Content-Type: multipart/alternative; boundary="0000000000005940d505c3e60311" Archived-At: Subject: Re: [Dots] Erik Kline's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jun 2021 00:45:59 -0000 --0000000000005940d505c3e60311 Content-Type: text/plain; charset="UTF-8" > > > > [S4.4.1.1] [question] > > > > * For "lifetime" in the case where a "target-fqdn" was given, should > > the > > resolution library's knowledge of the DNS RR TTL value(s) be > > factored in? > > > > For example, what does lifetime=3600s mean for a hostname whose > > A/AAAA > > RRs have only 5 minute lifetimes? Is the DOTS server/enforcer > > expected > > to continuously re-resolve every ${DNS_RR_TTL} and apply the > > policy for > > up to the full 3600 seconds > > [Med] Yeah. When possible, the client makes sure that the resolved > addresses are valid during the mitigation lifetime. If a resolved address > flushed out (e.g., DNS TTL expiry) while the mitigation is still active > (pending lifetime!=0), the resolution library should be solicited. > > As we don't impose any requirement on the name resolution library (and > especially whether it exposes a validity timeout), I suggest the following > change: > > OLD: > How a name is passed to an underlying name resolution library is > implementation and deployment specific. Nevertheless, once the > name is resolved into one or multiple IP addresses, DOTS servers > MUST apply the same validation checks as those for 'target- > prefix'. > > NEW: > How a name is passed to an underlying name resolution library is > implementation and deployment specific. Nevertheless, once the > name is resolved into one or multiple IP addresses, DOTS servers > MUST apply the same validation checks as those for 'target- > prefix'. These validation checks are reiterated by the DOTS > client each time a name is passed to the underlying name > resolution library (e.g., upon expiry of DNS TTL). > Thanks for the explanation. I *think* this text is good, except: isn't it the DOTS server reiterating the validation checks and not the DOTS client? --0000000000005940d505c3e60311 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

> [S4.4.1.1] [question]
>
> * For "lifetime" in the case where a "target-fqdn"= was given, should
> the
>=C2=A0 =C2=A0resolution library's knowledge of the DNS RR TTL value= (s) be
> factored in?
>
>=C2=A0 =C2=A0For example, what does lifetime=3D3600s mean for a hostnam= e whose
> A/AAAA
>=C2=A0 =C2=A0RRs have only 5 minute lifetimes?=C2=A0 Is the DOTS server= /enforcer
> expected
>=C2=A0 =C2=A0to continuously re-resolve every ${DNS_RR_TTL} and apply t= he
> policy for
>=C2=A0 =C2=A0up to the full 3600 seconds

[Med] Yeah. When possible, the client makes sure that the resolved addresse= s are valid during the mitigation lifetime. If a resolved address flushed o= ut (e.g., DNS TTL expiry) while the mitigation is still active (pending lif= etime!=3D0), the resolution library should be solicited.

As we don't impose any requirement on the name resolution library (and = especially whether it exposes a validity timeout), I suggest the following = change:

OLD:
=C2=A0 =C2=A0 =C2=A0 How a name is passed to an underlying name resolution = library is
=C2=A0 =C2=A0 =C2=A0 implementation and deployment specific.=C2=A0 Neverthe= less, once the
=C2=A0 =C2=A0 =C2=A0 name is resolved into one or multiple IP addresses, DO= TS servers
=C2=A0 =C2=A0 =C2=A0 MUST apply the same validation checks as those for = 9;target-
=C2=A0 =C2=A0 =C2=A0 prefix'.=C2=A0

NEW:
=C2=A0 =C2=A0 =C2=A0 How a name is passed to an underlying name resolution = library is
=C2=A0 =C2=A0 =C2=A0 implementation and deployment specific.=C2=A0 Neverthe= less, once the
=C2=A0 =C2=A0 =C2=A0 name is resolved into one or multiple IP addresses, DO= TS servers
=C2=A0 =C2=A0 =C2=A0 MUST apply the same validation checks as those for = 9;target-
=C2=A0 =C2=A0 =C2=A0 prefix'.=C2=A0 These validation checks are reitera= ted by the DOTS
=C2=A0 =C2=A0 =C2=A0 client each time a name is passed to the underlying na= me
=C2=A0 =C2=A0 =C2=A0 resolution library (e.g., upon expiry of DNS TTL).
=

Thanks for the explanation.=C2=A0 I *think= * this text is good, except: isn't it the DOTS server reiterating the v= alidation checks and not the DOTS client?
--0000000000005940d505c3e60311-- From nobody Fri Jun 4 00:21:18 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B34A3A2CF3; Fri, 4 Jun 2021 00:21:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.795 X-Spam-Level: X-Spam-Status: No, score=-2.795 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4-SqeBorJ4_0; Fri, 4 Jun 2021 00:21:06 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23D633A2CF0; Fri, 4 Jun 2021 00:21:05 -0700 (PDT) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar27.francetelecom.fr (ESMTP service) with ESMTP id 4FxDhH6W21z2xT5; Fri, 4 Jun 2021 09:21:03 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1622791263; bh=0nRAI9g2pXogVtK2EHkOmeDWzmIZTDZ7vkKLLmJ9XOQ=; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; b=kFSJzC4eo7jTKut2+FM5FLz+lIdhQAeNZPo51kcONg7IsoJ0Hs59ZhvGHXxBfhyJ1 J4T9UFfYt9Bq1+jPIQIisrPkBquweAWS89k/7Bpw+r0MhaxBNrmITBGUdU73F2fA2c OZ8cJ09UbVJJByDEvOBUuQB/AKvrDVMuk6CV8fMRawfFtk1a4SxQyo0mdU8d7zg2zw MsaH+UYcLVaXdpuqKfcdjXRS1xFZYbA+cIX6LVlNEtqDi2nDemISNgtbJ1vDCxhLwi JuCIaz8z5vvrCjEZASrN06tlVV1ulq+2WWyVkvityd7VGSjWCAfXkJtD8UeZqTr1rr 6QbgOE16VtgfQ== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.67]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 4FxDhH2tlGz1xp3; Fri, 4 Jun 2021 09:21:03 +0200 (CEST) From: To: Erik Kline CC: The IESG , "draft-ietf-dots-rfc8782-bis@ietf.org" , "dots-chairs@ietf.org" , "dots@ietf.org" , "valery@smyslov.net" Thread-Topic: Erik Kline's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) Thread-Index: AQHXWNr4Sg8va8Um90SeuFDAUbjeB6sDcIRw Date: Fri, 4 Jun 2021 07:21:02 +0000 Message-ID: <12185_1622791263_60B9D45F_12185_339_8_787AE7BB302AE849A7480A190F8B9330353978B1@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162270054186.18148.14870101120799116947@ietfa.amsl.com> <28147_1622708211_60B88FF3_28147_159_1_787AE7BB302AE849A7480A190F8B933035396DD3@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B9330353978B1OPEXCAUBMA2corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Erik Kline's No Objection on draft-ietf-dots-rfc8782-bis-07: (with COMMENT) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jun 2021 07:21:13 -0000 --_000_787AE7BB302AE849A7480A190F8B9330353978B1OPEXCAUBMA2corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRXJpaywNCg0KUGxlYXNlIHNlZSBpbmxpbmUuDQoNCkNoZWVycywNCk1lZA0KDQpEZSA6IEVy aWsgS2xpbmUgW21haWx0bzplay5pZXRmQGdtYWlsLmNvbV0NCkVudm95w6kgOiB2ZW5kcmVkaSA0 IGp1aW4gMjAyMSAwMjo0Ng0Kw4AgOiBCT1VDQURBSVIgTW9oYW1lZCBJTk5PVi9ORVQgPG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+DQpDYyA6IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPjsg ZHJhZnQtaWV0Zi1kb3RzLXJmYzg3ODItYmlzQGlldGYub3JnOyBkb3RzLWNoYWlyc0BpZXRmLm9y ZzsgZG90c0BpZXRmLm9yZzsgdmFsZXJ5QHNteXNsb3YubmV0DQpPYmpldCA6IFJlOiBFcmlrIEts aW5lJ3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy0wNzogKHdp dGggQ09NTUVOVCkNCg0KDQo+IFtTNC40LjEuMV0gW3F1ZXN0aW9uXQ0KPg0KPiAqIEZvciAibGlm ZXRpbWUiIGluIHRoZSBjYXNlIHdoZXJlIGEgInRhcmdldC1mcWRuIiB3YXMgZ2l2ZW4sIHNob3Vs ZA0KPiB0aGUNCj4gICByZXNvbHV0aW9uIGxpYnJhcnkncyBrbm93bGVkZ2Ugb2YgdGhlIEROUyBS UiBUVEwgdmFsdWUocykgYmUNCj4gZmFjdG9yZWQgaW4/DQo+DQo+ICAgRm9yIGV4YW1wbGUsIHdo YXQgZG9lcyBsaWZldGltZT0zNjAwcyBtZWFuIGZvciBhIGhvc3RuYW1lIHdob3NlDQo+IEEvQUFB QQ0KPiAgIFJScyBoYXZlIG9ubHkgNSBtaW51dGUgbGlmZXRpbWVzPyAgSXMgdGhlIERPVFMgc2Vy dmVyL2VuZm9yY2VyDQo+IGV4cGVjdGVkDQo+ICAgdG8gY29udGludW91c2x5IHJlLXJlc29sdmUg ZXZlcnkgJHtETlNfUlJfVFRMfSBhbmQgYXBwbHkgdGhlDQo+IHBvbGljeSBmb3INCj4gICB1cCB0 byB0aGUgZnVsbCAzNjAwIHNlY29uZHMNCg0KW01lZF0gWWVhaC4gV2hlbiBwb3NzaWJsZSwgdGhl IGNsaWVudCBtYWtlcyBzdXJlIHRoYXQgdGhlIHJlc29sdmVkIGFkZHJlc3NlcyBhcmUgdmFsaWQg ZHVyaW5nIHRoZSBtaXRpZ2F0aW9uIGxpZmV0aW1lLiBJZiBhIHJlc29sdmVkIGFkZHJlc3MgZmx1 c2hlZCBvdXQgKGUuZy4sIEROUyBUVEwgZXhwaXJ5KSB3aGlsZSB0aGUgbWl0aWdhdGlvbiBpcyBz dGlsbCBhY3RpdmUgKHBlbmRpbmcgbGlmZXRpbWUhPTApLCB0aGUgcmVzb2x1dGlvbiBsaWJyYXJ5 IHNob3VsZCBiZSBzb2xpY2l0ZWQuDQoNCkFzIHdlIGRvbid0IGltcG9zZSBhbnkgcmVxdWlyZW1l bnQgb24gdGhlIG5hbWUgcmVzb2x1dGlvbiBsaWJyYXJ5IChhbmQgZXNwZWNpYWxseSB3aGV0aGVy IGl0IGV4cG9zZXMgYSB2YWxpZGl0eSB0aW1lb3V0KSwgSSBzdWdnZXN0IHRoZSBmb2xsb3dpbmcg Y2hhbmdlOg0KDQpPTEQ6DQogICAgICBIb3cgYSBuYW1lIGlzIHBhc3NlZCB0byBhbiB1bmRlcmx5 aW5nIG5hbWUgcmVzb2x1dGlvbiBsaWJyYXJ5IGlzDQogICAgICBpbXBsZW1lbnRhdGlvbiBhbmQg ZGVwbG95bWVudCBzcGVjaWZpYy4gIE5ldmVydGhlbGVzcywgb25jZSB0aGUNCiAgICAgIG5hbWUg aXMgcmVzb2x2ZWQgaW50byBvbmUgb3IgbXVsdGlwbGUgSVAgYWRkcmVzc2VzLCBET1RTIHNlcnZl cnMNCiAgICAgIE1VU1QgYXBwbHkgdGhlIHNhbWUgdmFsaWRhdGlvbiBjaGVja3MgYXMgdGhvc2Ug Zm9yICd0YXJnZXQtDQogICAgICBwcmVmaXgnLg0KDQpORVc6DQogICAgICBIb3cgYSBuYW1lIGlz IHBhc3NlZCB0byBhbiB1bmRlcmx5aW5nIG5hbWUgcmVzb2x1dGlvbiBsaWJyYXJ5IGlzDQogICAg ICBpbXBsZW1lbnRhdGlvbiBhbmQgZGVwbG95bWVudCBzcGVjaWZpYy4gIE5ldmVydGhlbGVzcywg b25jZSB0aGUNCiAgICAgIG5hbWUgaXMgcmVzb2x2ZWQgaW50byBvbmUgb3IgbXVsdGlwbGUgSVAg YWRkcmVzc2VzLCBET1RTIHNlcnZlcnMNCiAgICAgIE1VU1QgYXBwbHkgdGhlIHNhbWUgdmFsaWRh dGlvbiBjaGVja3MgYXMgdGhvc2UgZm9yICd0YXJnZXQtDQogICAgICBwcmVmaXgnLiAgVGhlc2Ug dmFsaWRhdGlvbiBjaGVja3MgYXJlIHJlaXRlcmF0ZWQgYnkgdGhlIERPVFMNCiAgICAgIGNsaWVu dCBlYWNoIHRpbWUgYSBuYW1lIGlzIHBhc3NlZCB0byB0aGUgdW5kZXJseWluZyBuYW1lDQogICAg ICByZXNvbHV0aW9uIGxpYnJhcnkgKGUuZy4sIHVwb24gZXhwaXJ5IG9mIEROUyBUVEwpLg0KDQpU aGFua3MgZm9yIHRoZSBleHBsYW5hdGlvbi4gIEkgKnRoaW5rKiB0aGlzIHRleHQgaXMgZ29vZCwg ZXhjZXB0OiBpc24ndCBpdCB0aGUgRE9UUyBzZXJ2ZXIgcmVpdGVyYXRpbmcgdGhlIHZhbGlkYXRp b24gY2hlY2tzIGFuZCBub3QgdGhlIERPVFMgY2xpZW50Pw0KW01lZF0gWWVzLCB5b3UgYXJlIHJp Z2h0LiBXZSBoYXZlIGFscmVhZHkgZml4ZWQgdGhhdCBpbiB0aGUgcHVibGlzaGVkIHZlcnNpb246 IGRyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy0wODxodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy0wOD4NCg0KVGhhbmsgeW91 Lg0KDQoNCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fCgpDZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50 IGNvbnRlbmlyIGRlcyBpbmZvcm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVl cyBldCBuZSBkb2l2ZW50IGRvbmMKcGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBjb3Bp ZXMgc2FucyBhdXRvcmlzYXRpb24uIFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFyIGVy cmV1ciwgdmV1aWxsZXogbGUgc2lnbmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVpcmUg YWluc2kgcXVlIGxlcyBwaWVjZXMgam9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1ZXMg ZXRhbnQgc3VzY2VwdGlibGVzIGQnYWx0ZXJhdGlvbiwKT3JhbmdlIGRlY2xpbmUgdG91dGUgcmVz cG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFsc2lm aWUuIE1lcmNpLgoKVGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMgbWF5IGNvbnRhaW4g Y29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcHJvdGVj dGVkIGJ5IGxhdzsKdGhleSBzaG91bGQgbm90IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9yIGNvcGll ZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uCklmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwg aW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoaXMgbWVzc2Fn ZSBhbmQgaXRzIGF0dGFjaG1lbnRzLgpBcyBlbWFpbHMgbWF5IGJlIGFsdGVyZWQsIE9yYW5nZSBp cyBub3QgbGlhYmxlIGZvciBtZXNzYWdlcyB0aGF0IGhhdmUgYmVlbiBtb2RpZmllZCwgY2hhbmdl ZCBvciBmYWxzaWZpZWQuClRoYW5rIHlvdS4KCg== --_000_787AE7BB302AE849A7480A190F8B9330353978B1OPEXCAUBMA2corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBz cGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxl MTcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3IjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHls ZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAu ODVwdCA3MC44NXB0IDcwLjg1cHQgNzAuODVwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6 V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5k aWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRp dCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48 L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2 M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPkhpIEVyaWssDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlBsZWFzZSBzZWUgaW5saW5lLg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPk1lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4w cHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0Ux RTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkRlJm5ic3A7Ojwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IEVyaWsgS2xpbmUgW21haWx0bzplay5pZXRmQGdtYWls LmNvbV0NCjxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiB2ZW5kcmVkaSA0IGp1aW4gMjAyMSAw Mjo0Njxicj4NCjxiPsOAJm5ic3A7OjwvYj4gQk9VQ0FEQUlSIE1vaGFtZWQgSU5OT1YvTkVUICZs dDttb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tJmd0Ozxicj4NCjxiPkNjJm5ic3A7OjwvYj4g VGhlIElFU0cgJmx0O2llc2dAaWV0Zi5vcmcmZ3Q7OyBkcmFmdC1pZXRmLWRvdHMtcmZjODc4Mi1i aXNAaWV0Zi5vcmc7IGRvdHMtY2hhaXJzQGlldGYub3JnOyBkb3RzQGlldGYub3JnOyB2YWxlcnlA c215c2xvdi5uZXQ8YnI+DQo8Yj5PYmpldCZuYnNwOzo8L2I+IFJlOiBFcmlrIEtsaW5lJ3MgTm8g T2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy0wNzogKHdpdGggQ09NTUVO VCk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6 MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQomZ3Q7IFtTNC40LjEuMV0gW3F1ZXN0aW9uXTxicj4N CiZndDsgPGJyPg0KJmd0OyAqIEZvciAmcXVvdDtsaWZldGltZSZxdW90OyBpbiB0aGUgY2FzZSB3 aGVyZSBhICZxdW90O3RhcmdldC1mcWRuJnF1b3Q7IHdhcyBnaXZlbiwgc2hvdWxkPGJyPg0KJmd0 OyB0aGU8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwO3Jlc29sdXRpb24gbGlicmFyeSdzIGtub3dsZWRn ZSBvZiB0aGUgRE5TIFJSIFRUTCB2YWx1ZShzKSBiZTxicj4NCiZndDsgZmFjdG9yZWQgaW4/PGJy Pg0KJmd0OyA8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwO0ZvciBleGFtcGxlLCB3aGF0IGRvZXMgbGlm ZXRpbWU9MzYwMHMgbWVhbiBmb3IgYSBob3N0bmFtZSB3aG9zZTxicj4NCiZndDsgQS9BQUFBPGJy Pg0KJmd0OyZuYnNwOyAmbmJzcDtSUnMgaGF2ZSBvbmx5IDUgbWludXRlIGxpZmV0aW1lcz8mbmJz cDsgSXMgdGhlIERPVFMgc2VydmVyL2VuZm9yY2VyPGJyPg0KJmd0OyBleHBlY3RlZDxicj4NCiZn dDsmbmJzcDsgJm5ic3A7dG8gY29udGludW91c2x5IHJlLXJlc29sdmUgZXZlcnkgJHtETlNfUlJf VFRMfSBhbmQgYXBwbHkgdGhlPGJyPg0KJmd0OyBwb2xpY3kgZm9yPGJyPg0KJmd0OyZuYnNwOyAm bmJzcDt1cCB0byB0aGUgZnVsbCAzNjAwIHNlY29uZHM8YnI+DQo8YnI+DQpbTWVkXSBZZWFoLiBX aGVuIHBvc3NpYmxlLCB0aGUgY2xpZW50IG1ha2VzIHN1cmUgdGhhdCB0aGUgcmVzb2x2ZWQgYWRk cmVzc2VzIGFyZSB2YWxpZCBkdXJpbmcgdGhlIG1pdGlnYXRpb24gbGlmZXRpbWUuIElmIGEgcmVz b2x2ZWQgYWRkcmVzcyBmbHVzaGVkIG91dCAoZS5nLiwgRE5TIFRUTCBleHBpcnkpIHdoaWxlIHRo ZSBtaXRpZ2F0aW9uIGlzIHN0aWxsIGFjdGl2ZSAocGVuZGluZyBsaWZldGltZSE9MCksIHRoZSBy ZXNvbHV0aW9uIGxpYnJhcnkNCiBzaG91bGQgYmUgc29saWNpdGVkLiA8YnI+DQo8YnI+DQpBcyB3 ZSBkb24ndCBpbXBvc2UgYW55IHJlcXVpcmVtZW50IG9uIHRoZSBuYW1lIHJlc29sdXRpb24gbGli cmFyeSAoYW5kIGVzcGVjaWFsbHkgd2hldGhlciBpdCBleHBvc2VzIGEgdmFsaWRpdHkgdGltZW91 dCksIEkgc3VnZ2VzdCB0aGUgZm9sbG93aW5nIGNoYW5nZToNCjxicj4NCjxicj4NCk9MRDo8YnI+ DQombmJzcDsgJm5ic3A7ICZuYnNwOyBIb3cgYSBuYW1lIGlzIHBhc3NlZCB0byBhbiB1bmRlcmx5 aW5nIG5hbWUgcmVzb2x1dGlvbiBsaWJyYXJ5IGlzPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsg aW1wbGVtZW50YXRpb24gYW5kIGRlcGxveW1lbnQgc3BlY2lmaWMuJm5ic3A7IE5ldmVydGhlbGVz cywgb25jZSB0aGU8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBuYW1lIGlzIHJlc29sdmVkIGlu dG8gb25lIG9yIG11bHRpcGxlIElQIGFkZHJlc3NlcywgRE9UUyBzZXJ2ZXJzPGJyPg0KJm5ic3A7 ICZuYnNwOyAmbmJzcDsgTVVTVCBhcHBseSB0aGUgc2FtZSB2YWxpZGF0aW9uIGNoZWNrcyBhcyB0 aG9zZSBmb3IgJ3RhcmdldC08YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBwcmVmaXgnLiZuYnNw OyA8YnI+DQo8YnI+DQpORVc6PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgSG93IGEgbmFtZSBp cyBwYXNzZWQgdG8gYW4gdW5kZXJseWluZyBuYW1lIHJlc29sdXRpb24gbGlicmFyeSBpczxicj4N CiZuYnNwOyAmbmJzcDsgJm5ic3A7IGltcGxlbWVudGF0aW9uIGFuZCBkZXBsb3ltZW50IHNwZWNp ZmljLiZuYnNwOyBOZXZlcnRoZWxlc3MsIG9uY2UgdGhlPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJz cDsgbmFtZSBpcyByZXNvbHZlZCBpbnRvIG9uZSBvciBtdWx0aXBsZSBJUCBhZGRyZXNzZXMsIERP VFMgc2VydmVyczxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7IE1VU1QgYXBwbHkgdGhlIHNhbWUg dmFsaWRhdGlvbiBjaGVja3MgYXMgdGhvc2UgZm9yICd0YXJnZXQtPGJyPg0KJm5ic3A7ICZuYnNw OyAmbmJzcDsgcHJlZml4Jy4mbmJzcDsgVGhlc2UgdmFsaWRhdGlvbiBjaGVja3MgYXJlIHJlaXRl cmF0ZWQgYnkgdGhlIERPVFM8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBjbGllbnQgZWFjaCB0 aW1lIGEgbmFtZSBpcyBwYXNzZWQgdG8gdGhlIHVuZGVybHlpbmcgbmFtZTxicj4NCiZuYnNwOyAm bmJzcDsgJm5ic3A7IHJlc29sdXRpb24gbGlicmFyeSAoZS5nLiwgdXBvbiBleHBpcnkgb2YgRE5T IFRUTCkuPG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5UaGFua3MgZm9yIHRoZSBleHBsYW5hdGlvbi4mbmJzcDsgSSAqdGhpbmsqIHRo aXMgdGV4dCBpcyBnb29kLCBleGNlcHQ6IGlzbid0IGl0IHRoZSBET1RTIHNlcnZlciByZWl0ZXJh dGluZyB0aGUgdmFsaWRhdGlvbiBjaGVja3MgYW5kIG5vdCB0aGUgRE9UUyBjbGllbnQ/PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+W01lZF0gWWVz LCB5b3UgYXJlIHJpZ2h0LiBXZSBoYXZlIGFscmVhZHkgZml4ZWQgdGhhdCBpbiB0aGUgcHVibGlz aGVkIHZlcnNpb246DQo8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9o dG1sL2RyYWZ0LWlldGYtZG90cy1yZmM4NzgyLWJpcy0wOCI+ZHJhZnQtaWV0Zi1kb3RzLXJmYzg3 ODItYmlzLTA4PC9hPg0KPG86cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9pPjwv Yj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+VGhhbmsgeW91LiAm bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2k+PC9iPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPFBSRT5fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpD ZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRlbmlyIGRlcyBpbmZv cm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBuZSBkb2l2ZW50IGRv bmMKcGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBjb3BpZXMgc2FucyBhdXRvcmlzYXRp b24uIFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFyIGVycmV1ciwgdmV1aWxsZXogbGUg c2lnbmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVpcmUgYWluc2kgcXVlIGxlcyBwaWVj ZXMgam9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1ZXMgZXRhbnQgc3VzY2VwdGlibGVz IGQnYWx0ZXJhdGlvbiwKT3JhbmdlIGRlY2xpbmUgdG91dGUgcmVzcG9uc2FiaWxpdGUgc2kgY2Ug bWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFsc2lmaWUuIE1lcmNpLgoKVGhpcyBt ZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMgbWF5IGNvbnRhaW4gY29uZmlkZW50aWFsIG9yIHBy aXZpbGVnZWQgaW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcHJvdGVjdGVkIGJ5IGxhdzsKdGhleSBz aG91bGQgbm90IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9yIGNvcGllZCB3aXRob3V0IGF1dGhvcmlz YXRpb24uCklmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgaW4gZXJyb3IsIHBsZWFzZSBu b3RpZnkgdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1l bnRzLgpBcyBlbWFpbHMgbWF5IGJlIGFsdGVyZWQsIE9yYW5nZSBpcyBub3QgbGlhYmxlIGZvciBt ZXNzYWdlcyB0aGF0IGhhdmUgYmVlbiBtb2RpZmllZCwgY2hhbmdlZCBvciBmYWxzaWZpZWQuClRo YW5rIHlvdS4KPC9QUkU+PC9ib2R5Pg0KPC9odG1sPg0K --_000_787AE7BB302AE849A7480A190F8B9330353978B1OPEXCAUBMA2corp_-- From nobody Fri Jun 4 11:00:58 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEA4F3A1B5C for ; Fri, 4 Jun 2021 11:00:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.195 X-Spam-Level: X-Spam-Status: No, score=-4.195 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id my-joOWew0ud for ; Fri, 4 Jun 2021 11:00:50 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F59C3A1B5A for ; Fri, 4 Jun 2021 11:00:49 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 154I0eZX031941 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 4 Jun 2021 14:00:46 -0400 Date: Fri, 4 Jun 2021 11:00:40 -0700 From: Benjamin Kaduk To: mohamed.boucadair@orange.com Cc: "dots@ietf.org" Message-ID: <20210604180040.GR32395@kduck.mit.edu> References: <162272264510.23953.17502457707949234682@ietfa.amsl.com> <15212_1622722822_60B8C906_15212_271_12_787AE7BB302AE849A7480A190F8B933035397158@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <15212_1622722822_60B8C906_15212_271_12_787AE7BB302AE849A7480A190F8B933035397158@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-rfc8782-bis-08.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jun 2021 18:00:55 -0000 On Thu, Jun 03, 2021 at 12:20:20PM +0000, mohamed.boucadair@orange.com wrote: > Hi Ben, all, > > This version integrates all the IESG reviews. Thanks for the quick turnaround and responses to the IESG reviews, Med. The -08 looks good and I've just marked as approved to send over to the RFC Editor. -Ben From nobody Fri Jun 4 11:43:08 2021 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D33AD3A1CA6; Fri, 4 Jun 2021 11:43:05 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 7.30.0 Auto-Submitted: auto-generated Precedence: bulk Cc: The IESG , dots-chairs@ietf.org, dots@ietf.org, draft-ietf-dots-rfc8782-bis@ietf.org, kaduk@mit.edu, rfc-editor@rfc-editor.org, valery@smyslov.net MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <162283218583.307.5155523434874175569@ietfa.amsl.com> Date: Fri, 04 Jun 2021 11:43:05 -0700 Archived-At: Subject: [Dots] Protocol Action: 'Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification' to Proposed Standard (draft-ietf-dots-rfc8782-bis-08.txt) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jun 2021 18:43:06 -0000 The IESG has approved the following document: - 'Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification' (draft-ietf-dots-rfc8782-bis-08.txt) as Proposed Standard This document is the product of the DDoS Open Threat Signaling Working Group. The IESG contact persons are Benjamin Kaduk and Roman Danyliw. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-rfc8782-bis/ Technical Summary This document specifies the Distributed Denial-of-Service Open Threat Signaling (DOTS) signal channel, a protocol for signaling the need for protection against Distributed Denial-of-Service (DDoS) attacks to a server capable of enabling network traffic mitigation on behalf of the requesting client. This document obsoletes RFC 8782. The major change is to use YANG structures instead of an ad-hoc construction. Working Group Summary Shortly after RFC 8782 was published in May 2020 a problem with a YANG module defined in it was discovered. The WG decided to publish a -bis document to fix the problem. The -00 version of the draft was prepared fairly quickly (in June 2020) and the document was adopted in August 2020 (with a good WG support for adoption). The draft has been widely discussed and reviewed. Document Quality This draft is a -bis document for RFC 8782, its main purpose is to fix YANG module. In addition it provides more comprehensive description of error handling and makes minor changes to DOTS CBOR Key Values allocation. This document doesn't change the DOTS Signal Channel protocol itself, in particular it doesn't change bits on the wire. DOTS Signal Channel protocol was thoroughly discussed and reviewed. There are at least two interoperable implementations of this protocol. The updated YANG module has been reviewed by YANG Doctors, who confirmed that they don't have problems with it. Personnel Valery Smyslov is the document shepherd. Benjamin Kaduk is the responsible AD From nobody Tue Jun 29 03:00:41 2021 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F8613A2DB2 for ; Tue, 29 Jun 2021 03:00:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.095 X-Spam-Level: X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jiXrSS8BSR7Q for ; Tue, 29 Jun 2021 03:00:33 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04C063A2DB3 for ; Tue, 29 Jun 2021 03:00:32 -0700 (PDT) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by opfednr23.francetelecom.fr (ESMTP service) with ESMTPS id 4GDg2l0QWwz5wkV for ; Tue, 29 Jun 2021 12:00:31 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1624960831; bh=/jnGSs2A2GKQlYhYJ3dSd+WMUTanpc0JZtgChSKW8lg=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=snSSOi/6cxzB7uMwHDDY2tDEFgaSVQ5OeWIO6W5/GPm8uInc09noIMiK0cJ6TQKoE kVAl39jPO2yFtj5M5g5Zoq5xMQsZT+0hf05Xj+FUZzLglqExLI4fTLMBV2d6ISQKsj 5xOLrZieTZw4NIqWQht68xeUWl4elWsmZfIo21x9FshOMymGaq8TfNDaTP+j8l502T QrOa2WtZ2DlA5XqQGLJjPe04dNvFKpHghps8dew0DsUhg973L1fFcbQuslVDcjTgvT zWZzHzk1tuZyAVgvIcI0QHjpNudav+sz0+wZDMiYWSNkMNcn/0TZ+L3GWVwea8z95S 1bq60tga2GQAQ== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by opfednr04.francetelecom.fr (ESMTP service) with ESMTPS id 4GDg2k6scpz1xpn for ; Tue, 29 Jun 2021 12:00:30 +0200 (CEST) From: To: "dots@ietf.org" Thread-Topic: New Version Notification for draft-bosh-dots-quick-blocks-03.txt Thread-Index: AQHXbM0hR+7UqUnfR06GbB+mQpOfsqsqwL5w Date: Tue, 29 Jun 2021 10:00:29 +0000 Message-ID: <733_1624960830_60DAEF3E_733_440_1_787AE7BB302AE849A7480A190F8B9330353B317F@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <162496062883.27711.1893135499753862395@ietfa.amsl.com> In-Reply-To: <162496062883.27711.1893135499753862395@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Dots] TR: New Version Notification for draft-bosh-dots-quick-blocks-03.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 10:00:39 -0000 SGkgYWxsLCANCg0KVGhlIG1haW4gY2hhbmdlIGlzIHRvIGFsaWduIHdpdGggdGhlIHVwZGF0ZWQg dGVybXMgdXNlZCBpbiB0aGUgY29yZS1uZXctYmxvY2suICJSb2J1c3QiIHdhcyB1c2VkIGluc3Rl YWQgb2YgImZhc3QiIHRvIGFkZHJlc3Mgc29tZSBjb21tZW50cyBmcm9tIHRoZSBJRVNHIHdoZW4g cmV2aWV3aW5nIGNvcmUtbmV3LWJsb2NrIEktRC4gICANCg0KQ2hlZXJzLA0KSm9uICYgTWVkDQoN Ci0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KRGXCoDogaW50ZXJuZXQtZHJhZnRzQGlldGYu b3JnIFttYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnXSANCkVudm95w6nCoDogbWFyZGkg MjkganVpbiAyMDIxIDExOjU3DQrDgMKgOiBKb24gU2hhbGxvdyA8c3VwanBzLWlldGZAanBzaGFs bG93LmNvbT47IEJPVUNBREFJUiBNb2hhbWVkIElOTk9WL05FVCA8bW9oYW1lZC5ib3VjYWRhaXJA b3JhbmdlLmNvbT4NCk9iamV0wqA6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQt Ym9zaC1kb3RzLXF1aWNrLWJsb2Nrcy0wMy50eHQNCg0KDQpBIG5ldyB2ZXJzaW9uIG9mIEktRCwg ZHJhZnQtYm9zaC1kb3RzLXF1aWNrLWJsb2Nrcy0wMy50eHQNCmhhcyBiZWVuIHN1Y2Nlc3NmdWxs eSBzdWJtaXR0ZWQgYnkgTW9oYW1lZCBCb3VjYWRhaXIgYW5kIHBvc3RlZCB0byB0aGUgSUVURiBy ZXBvc2l0b3J5Lg0KDQpOYW1lOgkJZHJhZnQtYm9zaC1kb3RzLXF1aWNrLWJsb2Nrcw0KUmV2aXNp b246CTAzDQpUaXRsZToJCURpc3RyaWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4gVGhyZWF0 IFNpZ25hbGluZyAoRE9UUykgU2lnbmFsIENoYW5uZWwgQ29uZmlndXJhdGlvbiBBdHRyaWJ1dGVz IGZvciBSb2J1c3QgQmxvY2sgVHJhbnNtaXNzaW9uDQpEb2N1bWVudCBkYXRlOgkyMDIxLTA2LTI5 DQpHcm91cDoJCUluZGl2aWR1YWwgU3VibWlzc2lvbg0KUGFnZXM6CQkxOQ0KVVJMOiAgICAgICAg ICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL2FyY2hpdmUvaWQvZHJhZnQtYm9zaC1kb3RzLXF1aWNr LWJsb2Nrcy0wMy50eHQNClN0YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1ib3NoLWRvdHMtcXVpY2stYmxvY2tzLw0KSHRtbGl6ZWQ6ICAgICAgIGh0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtYm9zaC1kb3RzLXF1aWNr LWJsb2Nrcw0KRGlmZjogICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJs Mj1kcmFmdC1ib3NoLWRvdHMtcXVpY2stYmxvY2tzLTAzDQoNCkFic3RyYWN0Og0KICAgVGhpcyBk b2N1bWVudCBzcGVjaWZpZXMgbmV3IERPVFMgc2lnbmFsIGNoYW5uZWwgY29uZmlndXJhdGlvbg0K ICAgcGFyYW1ldGVycyB0aGF0IGFyZSBuZWdvdGlhdGVkIGJldHdlZW4gRE9UUyBwZWVycyB0byBl bmFibGUgdGhlIHVzZQ0KICAgb2YgUS1CbG9jazEgYW5kIFEtQmxvY2syIE9wdGlvbnMuICBUaGVz ZSBvcHRpb25zIGVuYWJsZSByb2J1c3QgYW5kDQogICBmYXN0ZXIgdHJhbnNtaXNzaW9uIHJhdGVz IGZvciBsYXJnZSBhbW91bnRzIG9mIGRhdGEgd2l0aCBsZXNzIHBhY2tldA0KICAgaW50ZXJjaGFu Z2VzIGFzIHdlbGwgYXMgc3VwcG9ydGluZyBmYXN0ZXIgcmVjb3Zlcnkgc2hvdWxkIGFueSBvZiB0 aGUNCiAgIGJsb2NrcyBnZXQgbG9zdCBpbiB0cmFuc21pc3Npb24uDQoNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICANCg0KDQpUaGUgSUVURiBTZWNyZXRhcmlhdA0KDQoNCgpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpDZSBt ZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRlbmlyIGRlcyBpbmZvcm1h dGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBuZSBkb2l2ZW50IGRvbmMK cGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBjb3BpZXMgc2FucyBhdXRvcmlzYXRpb24u IFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFyIGVycmV1ciwgdmV1aWxsZXogbGUgc2ln bmFsZXIKYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVpcmUgYWluc2kgcXVlIGxlcyBwaWVjZXMg am9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1ZXMgZXRhbnQgc3VzY2VwdGlibGVzIGQn YWx0ZXJhdGlvbiwKT3JhbmdlIGRlY2xpbmUgdG91dGUgcmVzcG9uc2FiaWxpdGUgc2kgY2UgbWVz c2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFsc2lmaWUuIE1lcmNpLgoKVGhpcyBtZXNz YWdlIGFuZCBpdHMgYXR0YWNobWVudHMgbWF5IGNvbnRhaW4gY29uZmlkZW50aWFsIG9yIHByaXZp bGVnZWQgaW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcHJvdGVjdGVkIGJ5IGxhdzsKdGhleSBzaG91 bGQgbm90IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9yIGNvcGllZCB3aXRob3V0IGF1dGhvcmlzYXRp b24uCklmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgaW4gZXJyb3IsIHBsZWFzZSBub3Rp ZnkgdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRz LgpBcyBlbWFpbHMgbWF5IGJlIGFsdGVyZWQsIE9yYW5nZSBpcyBub3QgbGlhYmxlIGZvciBtZXNz YWdlcyB0aGF0IGhhdmUgYmVlbiBtb2RpZmllZCwgY2hhbmdlZCBvciBmYWxzaWZpZWQuClRoYW5r IHlvdS4KCg==